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How  will  Computerworid’s  Premier  100  IT  Leaders  make  their  mark 
in  2003?  Facing  yet  another  challenging  year  of  tight  budgets 
and  industry  uncertainty,  this  elite  group  of  men  and  women 
takes  charge  of  everything  from  vendor  and  project  manage¬ 
ment  to  building  business  on  the  Web,  improving  core  systems, 
connecting  ever  more  closely  with  customers  and  investing  IT 
dollars  wisely.  Inside,  in  our  fourth  annual  issue  honoring  the 
Premier  100,  you’ll  find  their  stories,  their  strategies  and  their 
best  advice  for  IT  success  in  this  new  year.  Stories  begin  on  page  13. 

A  sampling  of  the  stories  inside; 

■MMmdriskandsurefirepayoffareteyconsidera- 
tkm  for  investing  IT  dolars  this  year.  PAGE  14 
■As  the  techiKilogy  recession  takes  its  toM  on  employee 
morale.  IT  leaders  strhfe  to  keep  valuable  staffers  foctsed 
and  wel  kiformed.  PAGE  28 
■  Strtdng  batter  deals  with  IT  suppliers  is  a  new  core 
competency  requiring  sharper  negotiating  skis.  PAGE  32 
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WARNING!  Wteb  pages,  executables  and 
other  attachments  may  contain  viruses 
that  can  be  harmful  to  your  computer. 

What  would  you  like  to  do  with  this  file? 

I  I  Open 
I  I  Save  to  disk 

0  Relax  completely  because  you  are 
protected  by  eTrust”  Antivirus,  which 
keeps  your  computer  and  network  safe 
from  even  the  most  malicious  virus 
threats. 


Protect  your  business  with  eTrust™ 
For  more  information,  visit 

ca.com/etrust/antivirus 


cTrusHnimi'us 


eTrust”  Security  Solutions  ^3)  Computer  Associates' 
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2003  top  rr 

Find  out  ti(^  here  in  Computerworld's  annual 
Premier  100  IT  Leaders  special  issue,  which  showcases  the 
men  and  women  driving  change  in  the  IT  industry  and  gives 
a  glimpse  of  their  plans  and  strategies  for  2003.  Also,  look 
for  profiles  of  select  honorees  that  highlight  their  career 
triumphs  and  challenges.  PACKA0E  BEOINS  ON  PABE 13. 


CONTENTS 
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10  Cybersecurity  czar  Richard 
Clarke  says  the  threat  of  ter¬ 
rorist-sponsored  cyberattacks 
shouldn't  be  dismissed. 


6  J.P.  Morgan  Chase  an¬ 
nounces  an  IT  outsourcing 
deal  with  IBM,  the  latest  in  a 
flurry  of  such  agreements  by 
financial  services  firms. 


M  HowVMITMviMMtTtarlTMMfFor 

thk  y«ar*s  Preraier  100  rr  Leadeo,  tedhocrfogy 
speoduig  m  2009  wiU  depend  heavily  on  in¬ 
dustry  and  business  Dce^  Read  about  how 
some  wiH  deal  widi  budget  cutbacks,  set  their 
priorities  and  decide  wfaiefa  projects  will  get 
the  precious  few  doQan  dhey  have  to  ^end 
this  year 

n  lllftitilwTfcMrThgfV^nMT^askedour 
Premier  100  n*  Leaden  which  praiects  they 
plan  to  tackle  in  the  year  ahead  and  then 
talked  widi  tome  who  have  survived  sunilar 
proiects.  In  a  series  of  five  coodse  case  stud¬ 
ies,  we  ewnine  deployments  of  enteiprisc  re- 
sourceplanning(p^J9)andcttstomerrria- 
tionshtp  management  (page  19)  saftvnre.  as 
well  as  enterprise  application  int^TitiwipfO- 
jects  (poge  20),  e-business  initiatives  (poge  21) 
and  major  systems  upgrades  (pqge  22). 

24Hammymaaem9imrCnmm(^ 

Whether  balancing  the  needs  of  security  widi 
the  push  for  pester  access  m  data,  oopiag 
widi  government  mandates  or  planning  for 
possible  budget  cuts,  rr  security  managers 
have  their  bands  foil  dm  year;  OMJC:  Robert 
L  Odo.  vice  president  of  IT  at  dte  US.  PostM 
Service,  describes  a  three-year  plan  to  secure 
die  maii  serviced  inficastrueture. 
OfkdcMMiMMI 

2S  Hn»MI¥M0piniaVDM'h*Mbii^^ 

IT  departaients  are  bmng  ashed  to  do  moR 
with  kas  this  yean  Read  bow  some  IT  kaden 
are  coping  wiA  die  reoesrioo  by  sqoeesing 

tfarougfa  hardware  comoBdation  projeeti,  per- 
fonaance  monitoring  and  appBcteiop 

wmifig 

2t  HowVMIhiPMMir  TMmTOu  Prend^ 


100  honorees  didn't  reach  the  top  of  dieir  pro- 
fessicMis  by  being  softies.  A  vast  majeaity  of 
them  r^tdaiiy  rriy  upon  hard-doUar  metrics 
to  demoostr^  to  top  brass  the  business  val¬ 
ue  IT  investments  are  expected  to  yield. 


a  NMKMItanllM^ThirLitarFm? 

Ror  soeae  IT  managers,  die  reoesteoo  has 
offered  up  hi^i-(|uality  woricen  at  bafgah) 
salaries.  But  for  others,  budget  cots  and 
staffing  leducdans  have  stalled  or  Stepped 
rr  proiects.  Learn  bow  these  rrieaders  are 
heepta^  their  sta&  informed  and  motivated 
in  diese  lean  tunes. 

82  HawWM1foMllMi«a1ltawVkadafsT 

’Ibday's  ITkadecs  juggk  many  doeens 
of  vendors,  from  coouDodity  to  soategic, 
products  to  services,  internal  to  outsourced. 
Here’s  how  some  Premier  100  leaders  are 
mastering  rbk  new  core  competency  in  IT 

84  Hew  llteyHMLjmid  Id  Uad.  Profiles 
oflO  rrieaders  and  the  career  chaPrnys  that 
helped  them  hone  their  kadersh^  sldDs. 

86  Th»200S  ftamIvlOO  IT  Uiim.  An 

alphabetical  tkdiig  of  dds  year's  honorees. 
OUC:  View  die  names  of  all  past  honorees 
in  our  Premier  100  booor  itdL 

0<MWihhtfHt 

86  Landar's  Mmmdb.it  Leaden  candidly 
reveal  the  technoiogy  decisioos  they  wouidn’t 
Biake  again  and  teQ  us  about  the  jobs  dial 
launched  their  careen. 

64  OpWaac  TUs  yea;  rr  kadenhip  knt 
abom  acUeving  peat  things  by  miahaling  all 
dte  lesouroas  at  your  Mpoaal  Ifk  about  get¬ 
ting  the  job  done,  even  without  the  reaoBoes 
you  need,  aayt  cahtaokt  ftaM  Hayes. 
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American  Airlines  has  made 
moves  to  improve  wireless 
security,  but  public  airport 
WLANs  are  still  havens  for 
possible  hacker  activity. 
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AT&T  Wireless  Services  is 

delaying  and  downsizing  its 
development  of  a  cellular  net¬ 
work  that  will  use  third-gen¬ 
eration  wireless  technology. 


Microsoft  is  being  forced  to 

distribute  the  most  up-to-date 
version  of  Java’s  runtime  envi¬ 
ronment  in  Windows,  as  Sun 
wins  the  latest  round  in  its 
private  antitrust  case. 
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Microsoft  and  two  hardware 

makers  are  set  to  announce 
mobile  phones  that  run  the 
software  vendor's  Smart¬ 
phone  operating  system  and 
can  be  used  on  cellular  net¬ 
works  in  the  U.S. 


12  The  U.S.  government  is  lob¬ 
bying  to  limit  the  use  of 
WLANs  in  the  S-GHz  band. 
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McDonald’s  Scraps 
Netwoilung  Plans 

McOonakfs  Corp-  has  scrapped 
a  rietwnriiing  pro^  that  would 
have  connected  about  30,000  of 
Its  restaurants  wortdvrlde  to  its 
headquarters  in  Oak  Brook.  HI. 
The  prefect  caied  Innovate,  be* 
pat)  in  t999.  and  the  network 
was  due  for  huttal  deployment 
this  year  in  Canada  and  France. 
McDonald's,  which  is  trying  to 
cut  sperafing.  said  it  expects  to 
save  lerts  of  mlMons  of  doflafs” 
this  year  by  dropping  Innovate. 

Air  Traffic  Systems 
Upgrade  Co^nues 

Lockheed  Martin  Corp.  said  it 
has  completed  the  third  phase  of 
a  S226  mitton  protect  to  up* 
grade  mainframe  systerrs  at  23 
air  traffic  control  fadBtles  in  the 
U.S.  The  latest  work  involved  the 
replacement  of  storage  devices 
that  hoM  information  used  to  an- 
afyze  unusual  air  traffic  events. 
Bethesda,  Md. -based  Lockheed 
Martin,  which  won  the  contract 
in  1998,  is  now  working  to  up¬ 
grade  other  peripheral  devices. 

Sun  Plans  12-CPU 
Server  at  Low  End 

Sun  Microsystems  Inc,  b  ready- 
tog  a  low-end  Unix  server  caied 
the  Sun  Fire  Vt280  thatwMste)- 
port  up  to  12  of  its  UttraSPARC 
III  processors,  accorxBng  to  in¬ 
formation  that  was  posted  on  Its 
Web  site  last  week.  Swi  declined 
to  comment  about  the  release 
schedule  for  the  Vt280  and  later 
removed  the  information  about 
the  system  from  its  sHe. 

CA  Arranges  New 
Bank  Cr^  Line 

Computer  Aseociitee  IntefTta- 
tiomi  Ine.  said  it  has  set  up  a 
new  $400  mMon  rovoMng 
credi  lae  that  wM  be  avafabb 
through  .lamiary  2006.  Tha  eoft- 
wara  vendor  owes  S3S0  ndMon 
under  Ite  aisdng  cmdM  Ine. 
which  b  set  to  apire  Jm  30. 


Banks  Pick  Up  Pace 
Of  rr  Outsourcing 


Financial  services  firms  seek  savings 
through  pay-as-v'ou-go  computing  deals 


BV  LUCAS  MEARIAN 

A  COMBINATION  of  in¬ 
tense  competition, 
the  sluggish  econo¬ 
my  and  the  lure  of 
pay-as-you-go  IT  services  is 
prompting  a  growing  number 
of  banks  and  brokerages  to 
outsource  back-office  systems 
and  business  processes. 

Several  high-profile  finan¬ 
cial  services  firms  have  signed 
outsourcing  deals  since  early 
last  month,  handing  off  con¬ 
trol  of  data  and  systems  in  or¬ 
der  to  save  money  and  focus 
on  core  business  operations. 

For  example.  |.P.  Morgan 
Chase  fit  Co.  last  week  an¬ 
nounced  a  seven-year,  $5  bil¬ 
lion  agreement  under  which 
IBM  will  take  over  its  data 
processing  infrastructure. 

The  contract,  which  had 
been  in  final  negotiations 
since  mid-November  (Quick- 
Link  34352],  includes  a 
planned  transfer  of  about 
4.000  J.P.  Morgan  IT  workers 
and  contractors  to  IBM  during 
the  first  half  of  the  year. 

Utility  Model  Key 

The  deal  also  provides  for 
New  York-based  J.P.  Morgan  to 
buy  computing  resources  and 
other  IT  services  from  IBM 
under  a  utility  model,  meaning 
the  bank  will  pay  only  for 
what  it  uses. 

That  factor  was  key  in  the 
bank’s  decision  to  outsource, 
said  Michael  Sztejnberg,  man¬ 
aging  director  of  the  Enter¬ 
prise  Technology  Services 
Group  at  J.P.  Morgan  Chase. 

In  the  current  economic  cli¬ 
mate,  Sztejnberg  added,  “it  is 
more  attractive  for  us  to  be  on 
a  more  variable,  pay-as-you- 
use  structure  instead  of  in¬ 
vesting  a  significant  amount 
of  capita]  in  bricks  and  mortar 
and  hardware  and  software.’' 
IJ*.  Morgan’s  outsourcing 


move  came  just  two  weeks  af¬ 
ter  IBM  announced  a  similar 
on-demand  computing  deal 
with  Frankfurt-based  Deutsche 
Bank  AG.  That  agreement  is 
valued  at  S2.S  billion  over  10 
years  and  includes  the  consoli¬ 
dation  of  data  centers  and 
smaller  server  sites  across 
Europe  to  a  new  IBM  facility 
in  Frankfurt. 

Also  last  month.  Electronic 
Data  Systems  Corp.  said  that  it 
had  signed  a  10-year,  $4.5  bil¬ 
lion  contract  to  manage  Char¬ 
lotte,  N.C.-based  Bank  of 
America  Corp.’s  domestic 
voice  and  data  networks. 

In  addition,  Plano,  Texas- 
based  EDS  inked  a  five-year 
outsourcing  deal  valued  at  Si.3 
billion  with  Amsterdam-based 
ABN  Amro  Bank  NY’s  whole¬ 
sale  banking  business  unit. 

The  recent  agreements  are 
indicative  of  a  larger  trend 
during  the  past  12  months  in 
which  more  than  a  dozen  fi¬ 
nancial  services  firms  have 


It  is  more 
attractive  for 
us  to  be  on  a  more 
variable,  pay-as-you 
use  stmcture. 

MICHAEL  SnEJNBERO.  MANAGING 
DIRECTOR  OF  THE  ENTERPRISE  TECH¬ 
NOLOGY  SERVICES  GROUP. 

J.P  MORGAN  CHASE 

turned  to  outsourcing  vendors. 

Twenty-one  of  39  Fortune 
500  banks,  brokerages  and  in¬ 
surance  companies  surveyed 
by  Gartner  inc.  in  November 
said  their  top  reason  for  out¬ 
sourcing  IT  was  to  focus  on 
core  businesses.  Other  factors 
that  were  cited  included  in¬ 
creasing  shareholder  value, 
improving  corporate  efficien¬ 
cy  and  reducing  operational 
risk  management. 

Many  banks  had  been  reluc¬ 
tant  to  outsource  control  of 
their  data,  said  Gartner  analyst 
Avivab  Litan.  “Now  all  of  a 
sudden  they’re  doing  it."  she 
said,  noting  that  outsourcing 
can  provide  a  fast  boost  to 


corporate  balance  sheets. 

But  maintaining  the  security 
of  sensitive  financial  data  in 
outsourced  IT  envirorunents 
“is  a  concern,"  Litan  added. 
She  said  that  she  expects  some 
banks  to  eventually  “bring  that 
data  back  in-house." 

Klaus  Thoma,  a  spokesman 
for  Deutsche  Bank,  said  the 
bank  expects  to  save  $1  billion 
over  the  next  decade  through 
its  outsourcing  deal  with  IBM. 
Deutsche  Bank  is  transferring 
900  of  its  IT  employees  to 
IBM  this  quarter  as  part  of 
the  agreement. 

Key  to  the  deal  was  IBM’s 
ability  to  update  Deutsche 
Bank  to  state-of-the-art  tech¬ 
nology  while  offering  it  a  utili¬ 
ty  model  for  purchasing  IT  re¬ 
sources,  Thoma  said.  “This  is 
being  driven  by  our  strategy  to 
get  rid  of  fixed  costs  (and]  ar¬ 
eas  that  we  feel  are  not  our 
core  competencies,”  he  said. 

Deutsche  Bank  felt  comfort¬ 
able  outsourcing  its  data  proc¬ 
essing  operations  because 
IBM  and  other  IT  services 
vendors  have  proven  that  they 
can  provide  sufficient  uptime 
and  security,  said  Thoma.  i 


OUTSOURCHNIIIFO 

For  more  stones  and  mtormation  resources 
related  to  IT  outsourcino.  visit  our 
Management  Knowledoe  Cenler- 

OQuidiLMia2290 

www.oofflputwwor1d.com 
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American  Airlines  Secures 
Wireless  LANs  in  Denver 

But  airport  wireless  networks  still  pose 
securiU'  dangers  to  corporate  data 


BV  0AM  VERTOH 

American  Airlines  Inc.  has 
taken  significant  steps  to  se¬ 
cure  wireless  bag-matching 
and  curbside  check-in  opera¬ 
tions  at  Denver  International 
Airport  (DIA)  that  a  year  ago 
were  found  to  be  highly  vul¬ 
nerable  to  hackers. 

But  a  test  conduct¬ 
ed  Dec.  20  at  the  air¬ 
port  by  White  Hat 
Technologies  Inc.,  a  Westmin¬ 
ster.  Colo. -based  security  firm, 
found  that  corporate  data  is 
still  vulnerable  throughout 
airport  waiting  areas  and  air¬ 
line  lounges 

Last  January.  Computer- 
world  reported  on  a  similar 
test  conducted  by  White  Hat 
that  discovered  American  had 
been  operating  wireless  LANs 
without  any  encryption  in  its 
section  of  the  DLA  terminal 
and  had  even  pasted  the  IP  ad¬ 
dresses  of  curbside  terminals 
on  the  monitors  [QuickUnk 
26374]. 

A  Positive  Sign 

In  what  appears  to  be  a  posi¬ 
tive  sign  that  airlines  are  be¬ 
ginning  to  look  more  closely 
at  the  security  ramifications  of 
operating  wireless  systems, 
l^t  month's  test  was  unable  to 
detect  a  single  airline  wireless 
network  operating  without  en¬ 
cryption  protection,  said 
Thubten  Comerford,  CEO  of 
White  Hal. 

In  addition.  American  had 
not  only  removed  the  IP  ad¬ 
dresses  from  its  OneStop  self- 
service  kiosks,  but  it  had  also 
added  Cisco  Systems  Inc.’s 
l  ightweight  Extensible  Au¬ 
thentication  Protocol  (LEAP) 
authentication  technology  on 
top  of  the  standard  4(>-bit 
Wired  Equivalent  Privacy 
rWEP)  encryptioa. 

LEAP  is  an  authentication 
algorithm  that  leverages  the 
802.lx  framewoik  and  pro¬ 


vides  dynamic,  per-user  WEP 
keys  to  protect  data  in  transit. 

Sucey  Frantz,  a  spokes¬ 
woman  for  American,  said  the 
changes  are  the  result  of  a  re¬ 
cent  re-evaluation  of  security 
for  all  of  the  airline's  wireless 
curbside  check-in  and  roving- 
agent  systems- 
Frantz  confirmed 
that  the  security  fixes 
are  being  made  at  air¬ 
ports  nationwide.  However, 
she  lAas  unable  to  elaborate  on 
the  status  of  those  fixes  at  in¬ 
dividual  airports. 

Ongoing  Concerns 

On  the  downside.  Comerford 
said  White  Hat’s  test  of  the 
DIA  facility  still  managed  to 
pick  up  a  suspected  rogue  ac¬ 
cess  point  CAP),  as  well  as  a 
significant  number  of  vulnera¬ 
ble  wireless  transmissions  em¬ 
anating  from  public  traveler 
lounges  and  frequent-flier 
clubs  throughout  the  airport. 

The  public  areas  and  most 
of  the  airport  lounges  use 
the  public  wireless  network 
operated  on  behalf  of  the  DIA 
by  AT&T  Wireless  Services 
Inc.  The  American  Airlines 
Admiral's  Club  lounge  uses 
T-MobUe  USA  lnc,'s  HotSpot 
public  wireless  network. 


Whatlkirporate 
Users  Can  Do 

RESEARCH  ARUNES  AND 
AIRPORTS  ttMt  oiir  wbitaM 
LAfk  M  auppoft  itindvd 
VPNaoRMn. 


CONS0ER  CORPORATE 
POLICIES  on  BAan,  whm  and 


pddfc  vMim  natworls. 


RESEARCH  OPnONS  FOR 
CENTRAUZHICOMnJTmG. 
such  w  X  iMndmk  M 
amflM  dMi  on  caiporala 
drtilwHB  and  not  on  iipiDpL 


■The  bluest  danger  at  DIA 
is  the  sniffing  of  sensitive  in¬ 
formation  being  transmitted 
by  travelers."  said  Comerford. 
“Few,  if  any,  airpons  have  ad¬ 
dressed  this  security  vuinera- 
bility,  (and]  few  airports  or 
airlines  warn  travelers  of  the 
danger  of  using  the  wireless 
networks." 

In  July,  the  city  of  Denver 
and  DIA  outsourced  the  air¬ 
port’s  public  wireless  network, 
known  as  GoPort.  to  AT&T 
Wireless.  AT&T  Wireless'  ser¬ 
vice  includes  54  APs  spread 
throughout  the  DIA  terminal 
and  three  concourses. 

Ritch  Blast,  a  spokesman 
for  Redmond,  Waslt-based 
AT&T  Wireless,  acknowl¬ 
edged  that  the  suspected 
rogue  AP  found  by  White  Hat 
didn't  belong  to  AT&Ts  net¬ 
work.  He  also  said  AT&T  en¬ 
crypts  all  persona]  user  infor¬ 
mation  entered  into  the  sys¬ 
tem  during  registration  and 
log-on.  including  pa>'ment  in¬ 
formation.  Any  other  security 
precautions  are  up  to  the  indi¬ 
vidual  user,  he  said. 

Frank  Ramirez,  director  of 
business  products  at  Bellevue. 
Wash.-based  T-MobUe.  said 
his  company  is  in  the  process 
of  updating  security  for  2.000 
sites  across  the  country,  in¬ 
cluding  American’s  Admiral's 
Club  at  DIA. 

In  addition  to  allowing 
corporate  users  to  take  advan¬ 
tage  of  their  own  investments 
in  virtual  private  network 
technologies  while  using  the 
T-Mobile  network,  the  compa¬ 
ny  has  implemented  blocking 
technology  at  the  AP  level 
Ramirez  said.  He  explained 
that  users  register  on  the  net¬ 
work  and  get  a  Medium  Ac¬ 
cess  Control  address.  T-M(7 
bile  can  block  any  system 
that's  not  recognized. 

“We’ve  also  implemented 
netwoik  address  tran^tion 
technology  to  shield  the  IP  ad¬ 
dresses  of  the  machines  on  the 
network  from  potential  in¬ 
truders,"  Ramirez  added 
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Seth  Kulalcow,  an  enterprise 
security  analyst  at  DIA,  said 
he  conducts  routine  scans 
looking  for  suspicious  wire¬ 
less  activity  throughout  the 
airport  and  is  currently  inves- 
tigating  White  Hat's  discovery 
of  the  non-AT&T  AP. 
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Kulakow  also  acknowledged 
the  need  for  airports  and  air- 
lines  to  post  warnings  to  users 
about  the  inherent  risks  of  us- 
ing  public  wireless  networks. 
The  airlines  should  have 
something  like  that  posted, 
bur  they  don't."  he  said.  • 
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McDonaid’s  Scraps 
Networking  Plans 

McDonald's  Corp.  has  scrapped 
a  networking  project  that  would 
have  connected  about  30.000  of 
its  restaurants  worldwide  to  its 
headquarters  in  Oak  Brook.  III. 
The  protect,  called  Innovate,  be¬ 
gan  in  1999.  and  the  network 
was  due  lor  initial  deployment 
this  yiear  in  Canada  and  France. 
McDonald's,  which  is  tryirtg  to 
cut  spending,  said  it  eipects  to 
save  *tens  of  milfions  of  dollars'* 
this  year  by  dropping  Innovate. 

Air  Iraffic  Sy^ems 
Upgrade  Continues 

Lockheed  Martin  Corp.  said  it 
has  completed  the  third  phase  of 
a  S226  million  protect  to  up¬ 
grade  mainframe  systems  at  23 
air  traffic  control  taciirties  in  the 
U.S.  The  latest  work  involved  the 
replacement  of  storage  devices 
that  hold  Miformatkm  used  to  an¬ 
alyze  unusual  air  traffic  events. 
Bethesda.  Md.-based  Lockheed 
Martin,  which  won  the  contract 
in  1998.  is  now  working  to  up¬ 
grade  other  periphery  devices. 

Sun  Plans  12-CPU 
Server  at  Low  End 


Banks  Pick  Up  Pace 
Of  FT  Outsourcing 


Financial  sen  iccs  firms  seek  sin  ings 
tlimugh  pa>  -as-\ou-go  computing  deals 


BV  LUCAS  MEARiAN 

A<  OMHINAI  ION  l*fin- 
tensf  competition, 
the  sluggish  econo¬ 
my  and  the  lure  of 
pay-as-you-go  IT  services  is 
prompting  a  grow  ing  numher 
of  banks  and  brokerages  to 
outsource  back-olTice  sy.vtems 
and  business  processes. 

Several  high-profile  finan¬ 
cial  services  firms  have  signed 
I  outsourcing  deals  since  early 
I  last  month,  handing  off  eon- 
I  trol  of  data  and  systems  in  or- 
'  der  to  save  money  and  focus 
I  on  core  business  operations. 

I  For  e.\ample.  J.l’.  Morgan 
I  Chase  5c  Co.  last  week  an¬ 
nounced  a  seven-year,  S5  bil¬ 
lion  agreement  under  which 
I  IBM  will  take  over  its  data 
I  processing  infrastructure 
I  The  contract,  which  had 
been  in  final  negotiations 
since  mid-November  IQuick- 
l.mk  .W.^52l,  includes  a 
planned  transfer  of  about 
4.000  I.P.  Morgan  IT  workers 
and  contractors  to  IBM  during 
the  first  half  of  the  year. 


move  came  just  two  weeks  af¬ 
ter  IBM  announced  a  similar 
on-demand  computing  deal 
with  Frankfurt-based  Deutsche 
Bank  .AG.  That  agreement  is 
valuc'd  at  S2.5  billion  over  10 
years  and  includes  the  consoli¬ 
dation  of  data  centers  and 
smaller  server  sites  across 
Europe  to  a  new  IBM  facility 
in  Frankfun, 

Also  last  month.  Electronic 
Data  Systems  Corp.  said  that  it 
had  signed  a  10-year.  S4.5  bil¬ 
lion  contract  to  manage  Char¬ 
lotte.  N.C.-based  Bank  of 
America  Corp.’s  domestic 
voice  and  data  networks. 

In  addition.  Plano.  Texas- 
based  EDS  inked  a  five-year 
outsourcing  deal  valued  at  Sl..< 
billion  with  Amsterdam-based 
ABN  Amro  Bank  N\''s  whole¬ 
sale  banking  business  unit. 

The  recent  agreements  arc- 
indicative  of  a  larger  trend 
during  the  past  12  months  in 
w  hich  mure  than  a  dozen  fi¬ 
nancial  services  firm.s  have 


Hit  is  more 
attractive  for 
us  to  be  on  a  more 
variable,  pay-as-you 
use  stmeture. 

MICHAEL  SZTEJNBERG.  MANAGING 
DIRECTOR  OF  THE  ENTERPRISE  TECH¬ 
NOLOGY  SERVICES  GROUP 
JP  MORGAN  CHASE 

turned  to  outsourcing  vendors. 

Twenty-one  of  39  Fortune 
500  banks,  brokerages  and  in¬ 
surance  comjxinics  surveyed 
by  Gartner  Inc.  in  November 
said  their  top  reason  for  out¬ 
sourcing  IT  was  to  focus  on 
core  businesses.  Other  factors 
that  were  cited  included  in¬ 
creasing  shareholder  value, 
improving  corporate  efficien¬ 
cy  and  reducing  operational 
risk  management. 

Many  banks  had  been  reluc¬ 
tant  CO  outsource  control  of 
their  data,  said  Gartner  analyst 
Avivah  Litan.  “Now  all  of  a 
sudden  they're  doing  it."  she 
said,  noting  that  outsourcing 
can  provide  a  fast  boost  to 


corporate  balance  sheets. 

But  maintaining  the  security 
of  sensitive  financial  data  in 
outsourced  IT  environments 
"is  a  concern."  Litan  added. 
She  said  that  she  expects  some 
banks  to  eventually  "bring  that 
data  back  in-housc." 

Klaus  Thoma.  a  spokesman 
for  Deutsche  Bank,  said  the 
bank  expects  to  save  SI  billion 
over  the  next  decade  through 
its  outsourcing  deal  with  IBM. 
Deutsche  Bank  is  transferring 
900  of  its  IT  employees  to 
IBM  this  quarter  as  part  of 
the  agreement. 

Key  to  the  deal  was  IB.M's 
ability  to  update  Deutsche 
Bank  to  state-of-the-art  tech¬ 
nology  while  offering  it  a  utili¬ 
ty  model  for  purchasing  IT  re¬ 
sources.  TTioma  said.  “This  is 
being  driven  by  our  strategy  to 
get  rid  of  fixed  costs  (and)  ar¬ 
eas  that  we  feci  arc  not  our 
core  competencies."  he  said. 

Deutsche  Bank  felt  comfort¬ 
able  outsourcing  its  data  proc¬ 
essing  operations  because 
IBM  and  other  IT  services 
vendors  have  proven  that  they 
can  provide  sufficient  uptime 
and  security,  said  Thoma. » 


OUTSOURCINeiNFO 

Fof  more  stories  and  mformaiion  resources 
related  to  IT  outsourcing,  visit  oui 
Management  Knowledge  Center 
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Data  Security  ami  App  Devefopment 
Are  Stii  In-house  Priorities  for  Banks 


Sun  Mientsystems  Inc.  is  ready¬ 
ing  a  low-end  Unix  server  called 
the  Sun  Rre  V1280  that  wfll  sup- 
port  up  to  12  of  ifo  UHraSPARC 
ill  processors,  according  to  in¬ 
formation  that  was  posted  on  its 
Web  she  last  week.  Son  dedirred 
to  comment  about  the  release 
schedule  (or  the  Vt2B0  and  later 
removed  the  information  about 
the  system  from  its  site. 


CA  Ananges  New 
Bank  Credit  Line 

Computer  Associates  Interna¬ 
tional  kic.  said  it  has  set  up  a 
new  S400  miUon  rtvoMng 
creiBt  Hne  that  wiV  be  avaiLM>le 
through  January  2005.  The  soft¬ 
ware  vendor  twos  S350  miMon 
under  its  existing  credit  line, 
which  is  set  to  expire  Jurw  30. 


utility  Model  Key 

The  deal  also  prtividcs  f<»r 
New  York-based  I.P.  Morgan  ti» 
buy  computing  re.source.s  and 
other  IT  services  from  IBM 
under  a  utility  model,  meaning 
the  bank  will  pay  only  for 
what  it  uses. 

That  factor  was  key  in  the 
bank's  decision  to  outsource, 
said  Michael  Szteinberg.  man¬ 
aging  director  of  the  Enter¬ 
prise  Technology  Services 
Group  at  J.P.  Morgan  Chase. 

In  the  current  economic  cli¬ 
mate.  Szteinberg  added,  “it  is 
more  attractive  for  us  to  be  on 
a  more  variable,  pay-as-you- 
use  structure  instead  of  in¬ 
vesting  a  significant  amount 
of  capital  in  bricks  and  mortar 
and  hardware  and  software." 

|.P.  Morgan's  outsourcing 
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American  Airlines  Secures 
Wireless  LANs  in  Denver 


But  airport  wireless  nerworks  still  pose 
securin  dangers  to  corporate  data 


BY  DAN  VCRTON 

American  Airlines  Inc.  has 
taken  significant  steps  to  se¬ 
cure  wireless  bag-matching 
and  curbside  check-in  opera¬ 
tions  at  Denver  international 
Airport  <DIA>  that  a  year  ago 
were  found  to  be  highly  vul¬ 
nerable  to  hackers. 

But  a  test  conduct¬ 
ed  Dec.  20  at  the  air¬ 
port  by  White  Hat 
Technologies  Inc.,  a  Westmin¬ 
ster.  Colo. -based  security  firm, 
found  that  coiporate  data  is 
still  vulnerable  throughout 
airport  waiting  areas  and  air¬ 
line  lounges 

Last  January.  Computer- 
world  reported  on  a  similar 
test  conducted  by  White  Hat 
that  discovered  American  had 
been  operating  wireless  LANs 
without  any  encryption  in  its 
section  of  the  DIA  terminal 
and  had  even  pasted  the  IP  ad¬ 
dresses  of  curbside  terminals 
on  the  monitors  IQuickLink 
263741. 

A  Positive  Sign 

In  what  appears  to  be  a  ptisi- 
tive  sign  that  airlines  are  be¬ 
ginning  to  look  more  closely 
at  the  security  ramifications  of 
operating  wireless  systems, 
last  month's  test  was  unable  to 
detect  a  single  airline  wireless 
network  operating  without  en¬ 
cryption  protection,  said 
Thubicn  Comerford,  CEO  of 
White  Hat. 

In  addition.  American  had 
not  only  removed  the  IP  ad¬ 
dresses  from  Its  OncStop  self- 
service  kiosks,  but  it  had  also 
added  Cisco  Systems  Inc.’s 
Lightweight  Extensible  Au¬ 
thentication  Protocol  ILEAP) 
authentication  technology  on 
top  of  the  sundard  40-bit 
Wired  Equivalent  Privacy 
(WEP)  encryption. 

LEAP  is  an  authentication 
algorithm  that  leverages  the 
802.1X  framework  and  pnv 


vides  dynamic,  per-uscr  WEP 
keys  to  protect  data  in  transit. 

Stacey  Frantz,  a  spokes¬ 
woman  for  American,  said  the 
changes  are  the  result  of  a  re¬ 
cent  re-evaluation  of  securit>' 
for  all  of  the  airline’s  wireless 
curbside  check-in  and  roving- 
agent  systems. 

Frantz  confirmed 
that  the  security  fixes 
are  being  made  at  air¬ 
ports  nationwide.  However, 
she  u-as  unable  to  elaborate  on 
the  status  of  tht>se  fixes  at  in¬ 
dividual  airports. 

Ongoing  Concerns 

On  the  downside,  Comerford 
said  White  Hat's  test  of  the 
DIA  facility  still  managed  to 
pick  up  a  suspected  rogue  ac¬ 
cess  point  (AP).  as  w’ell  as  a 
significant  number  of  vulnera¬ 
ble  wireless  transmissions  em¬ 
anating  from  public  traveler 
lounges  and  frequent-flier 
clubs  throughout  the  airport. 

The  public  areas  and  most 
of  the  airport  lounges  use 
the  public  wireless  network 
operated  on  behalf  of  the  DIA 
by  AT&T  Wireless  Services 
Inc.  The  American  Airlines 
Admiral’s  Club  lounge  uses 
T'Mobilc  USA  Inc.'s  HotSpot 
public  wireless  network. 


What  Corporate 
Users  Can  Do 

RESEARCH  AIRUNES  AND 
AIRPORTS  thil  olhr  wvdess 
LANs  tel  avpvt  standanl 
VPNsollwara. 

CONSIDER  CORPORATE 
POUCCS  m  wlwn.  where  and 
how  mabia  uBsre  can  access 
pubic  wirelaas  networks. 

RESEARCH  OPTIONS  FOR 
CENTRAUZEO  COMPUTING, 
such  as  X  lanninib  tet  store 
seraKiwe  data  on  corporate 
datebases  and  not  on  laptops. 


“The  biggest  danger  at  DIA 
is  the  sniffing  of  sensitive  in¬ 
formation  being  transmitted 
by  travelers."  said  Comerford. 
"Few.  if  any.  airports  have  ad¬ 
dressed  this  security  vulnera¬ 
bility.  { and  1  few  airports  or 
airlines  warn  travelers  of  the 
danger  of  using  the  wireless 
networks." 

In  July,  the  cit\-  of  Denver 
and  DIA  outsourced  the  air¬ 
port’s  public  wireless  network, 
known  as  GoPort.  to  AT&T 
Wireless.  AT&T  Wireless'  ser¬ 
vice  includes  54  APs  spread 
throughout  the  DIA  terminal 
and  three  concourses. 

Ritch  Blasi.  a  spokesman 
for  Redmond.  Wash.-based 
AT&T  Wireless,  acknowl¬ 
edged  that  the  suspected 
rogue  AP  found  by  While  Hat 
didn’t  belong  to  AT&T’s  net¬ 
work.  He  also  said  AT&T  en- 
all  personal  u.ser  infor¬ 
mation  entered  into  the  sys¬ 
tem  during  registration  and 
ti^-on.  including  payment  in¬ 
formation.  Any  other  security 
precautions  are  up  to  the  indi¬ 
vidual  user,  he  said. 

Frank  Ramirez,  director  of 
business  products  at  Bellevue. 
Wash.-based  T-Mobile.  said 
his  company  is  in  the  proce.s.s 
of  updating  security  for  2.000 
sites  across  the  country,  in¬ 
cluding  American’s  Admiral’s 
Club  at  DIA. 

In  addition  to  allowing 
corporate  users  to  take  advan¬ 
tage  of  their  own  investments 
in  virtual  private  network 
technologies  while  using  the 
T-Mobilc  network,  the  compa¬ 
ny  has  implemented  blocking 
technology  at  the  AP  level. 
Ramirez  said.  He  explained 
that  users  register  on  the  net¬ 
work  and  get  a  Medium  Ac¬ 
cess  Control  address.  T-Mi> 
bile  can  block  any  system 
that's  not  recognized. 

“We've  also  implemented 
network  address  translation 
technology  to  shield  the  IP  ad¬ 
dresses  of  the  machines  on  the 
network  from  potential  in¬ 
truders.*’  Ramirez  added. 


WKIESS 


AT&T  Wireless  Slows  Plan  to  Buld 
Third-Generation  Celuiar  Netwofk 


AT&T  WMbss  Services  ts  deiay* 
mg  and  scabng  back  Is  planned 
U.S-  rolout  of  a  high-sp^  cel¬ 
lular  network  based  on  technol¬ 
ogy  devekiped  by  NTT  DoCoMo 
kK.  But  AT&T  Wireless  has  oler^ 
ty  of  reasons  -  6  Mhon  of  them, 
n  fact  -  to  meet  the  rewsed  roi- 
out  schedule. 

The  two  comptfves  on  Dec. 

26  announced  a  deal  to  pish 
back  the  imbal  launch  oi  Ihed- 
generation  (36)  wir^ess  ser- 
wces  blit  around  NTT  DoCo¬ 
Mo’s  Wideband  Code  DMsion 
Mukipie  Access  (W-COMA) 
techriology  from  June  2(X)4  to 
Deceraberofthaiyar.lnadcb- 
tion.  the  runter  d  cities  m  the 
start-up  plan  was  dowmsuBd 
iratn  13  to  tour.  San  Francisco. 
San  Diego.  SeMile  and  Oalas 

As  part  of  the  reYoed  deal 
AT&T  WWess  codd  be  forced 
lo  pay  Tokyo-based  NTT  DoCo¬ 
Mo  as  much  as  S6  bfton.  plus 
interestIfitfaibtoniahetheW- 
COMA  service  avaiable  tf  a  total 
of  UXX)  cel  sites  in  (he  ksur 
ctes  by  the  end  d  2004. 

The  S6  bMon  represents  the 
pnee  tei  NTT  DoCddo  paid  for 
a  16%  stake  n  AT&T  VAreless  in 
November  2000.  according  to  a 
Nmg  about  the  new  rolout  plan 
that  AT&T  Wvefess  has  submtf- 
ted  to  te  SeoffibBS  and  Ex¬ 
change  Commission. 

AKematively.  the  ting  said 
NTT  DoCoMo  could  sel  its  474.7 
mlionsheresontheopenmBr- 
ket  wdi  AT5T  Wiraless  making 
up  any  difference  between  (he 
procMds  d  the  stock  sate  and 
the  original  InvestmerS. 

David  Caoudte.  a  spdesman 
tor  AT&T  Wireless,  said  the 
changesintherdloutplanre- 
suked  from  a  decson  by  the 
company  To  meet  market  de¬ 
mands  vMe  al  the  same  time 


Seth  Kulakow.  an  enterprise 
security  analyst  at  DIA,  said 
he  conducts  routine  scans 
looking  for  suspicious  w'ire- 
less  activity  throughout  the 
airport  and  is  currently  inves¬ 
tigating  White  Hat’s  discovery 
of  the  non-AT&T  AP. 


traking  the  most  prudent  use  d 
ourcapitd  * 

The  company  chose  the  four 
cities  for  (he  W-COMA  rdtoul 
because  d  the  legh  concentra¬ 
tion  d  mobie  protessnnalB  in 
those  markets.  Caouette  sard. 
TheW-COMAtachnotogysup- 
potto  data  rates  d  up  to  2M 
bk/sec..  compared  vklh  top 
speeds  d  40k  bk/sec.  on  AT&T 
Wiretess'  eestmg  Benerd  Pack¬ 
et  Radio  Service  network. 

But  Alan  Reker.  an  analyst  at 
Wraless  kkemet  &  Mobie  Com¬ 
puting  in  Chevy  Oiase.  Md.  said 
the  36  technology  has  had 
teettang  probtema  m  Japan,  in- 
dudinghandsetowllhpoorbBl- 
tary  lie  and  weak  demand  kom 
users.  Gtean  thoee  tosues.  the  re¬ 
vised  agreement  wkh  NTT  Do¬ 
CoMo  leeves  AT&T  Wiretess  m 
an  ‘ewkwanf  financai  posibon. 
Reker  sad.  He  esbmattd  tel  I 
codd  coat  AT&T  Wintess  a  total 
d  S500  mtton  to  set  up  te 
1.000  W-COMA  cal  9to5  re¬ 
quired  by  the  deal. 

Caou^  acknowtedged  tel 
AT&T  Wreles  codd  be  kabte  tor 
the  total  stock  purchase  pnoe 
pdd  by  NH  DoCoMo  If  the  U.a 
rdtod  goes  awry.  A  stock  sate 
by  NTT  DoCoMo  K  a  more  Rrelv 
scerarto.  he  said.  Bd  AT&T 
Wirelessdticialsdoubtthatet- 
(her  ewnt  wi  be  necessary,  he 
added ’Wb  «8  thoroughly  com- 
nWtod  to  W-COMA.' CaoueOe 
said. 

Rkch  Blasf.  another  AT&T 
Wiretess  spokesman,  sad  the 
company  expects  the  battery 
problems  and  other  «sues  facmg 
W-CDMA  to  be  resoteed  by 
2004.  Heckled  Rater's  tolod 
cod  estimate  high  bd  dedtoed 
to  dtodose  AT&T  Maless*  bud- 
gd  for  the  protect. 

-BabSretHn 


Kulakow  also  acknnwk-dgcij 
the  need  for  airports  and  air¬ 
lines  to  post  wamirvgs  to  users 
about  the  inherent  risks  of  us¬ 
ing  public  wireless  networts. 
"The  airlines  should  have 
something  like  that  posted, 
but  they  don’t."  he  said.  I 
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Java  Developers  Laud  Ruling 


Microsoft  must 
include  up-to-date 
|a\xi  in  W'indous 


A  US.  DISTRICT  COURT 

judge's  plan  to  force 
Microsoft  Corp.  to 
ship  the  most  recent 
version  of  |ava  suftv.’are  with 
Windows  desktop  operating 
systems  may  revive  lava  devel¬ 
opment  and  help  rival  Sun  Mi¬ 
crosystems  Inc.  battle  .Net. 

That's  how  s*>me  Java  devel¬ 
opers,  corporate  IT  executives 
and  analysts  sec  the  impact  of 
a  pending  action  by  U.S.  Dis¬ 
trict  Court  judge  I.  Frederick 
Motz  in  Baltimore  in  the  pri¬ 
vate  antitrust  case  between 
Sun  and  Microsoft. 

Java  and  the  .Net  framework 
are  Internet-enabled  dUirib- 
uted  computing  platforms  that 
compete  head-to-head.  Motz. 
in  an  opinion  released  just  be¬ 
fore  Christmas,  said  he  doesn't 
want  the  antitrust  violations 
of  which  Microsoft  was  found  | 
guilty  in  the  recently  settled  i 
federal  case  to  help  It  defeat  I 
the  lava  platform. 

The  judge  said  he  wants  to 
ensure  that  java  gets  a  fair 
shake  in  the  platform  war  by 
requiring  Microsoft  to  ship 


■JmandlMOTtktcleflm- 
peilDB.  II  McroBoS  tel  larcfld 
to  cany  JM.  ite  Mii  omM 

teiiMhNMiPwtew. 

■  rs  sffpnsine  M  M  olhar  Sun 
cofnpteioa  OHMteltia ‘nwsl- 
afnr  teKlin.  *16* 


oraHMHkflollMcaBalicro- 
aoft  teanoid  Ito  re  niofMpoly. 

up-to-date  versions  of  java. 

He  is  expected  to  issue  his 
"must -carry"  order  within  the 
next  two  weeks. 

Having  that  java  desktop 
availability  “removes  a  lot  of 
the  stress  of  competing  with 
the  .Net  framework."  said 
lason  Norman,  who  works 
with  lava  as  a  health  systems 
software  engineer  at  Vander¬ 
bilt  University  Medical  Center 
in  Nashville.  "But  it's  not  go¬ 
ing  to  be  a  decisive  thing  ei¬ 
ther  w.Ty.  It  docs  not  mean  that 
lava  is  going  to  dominate,  be¬ 
cause  lava  has  its  own  set  of 
challenges." 

One  such  challenge  is  Swing. 


Microsoft  Launches 
U.S.  Smartphone  Push 


Microsoft  Corp.  today  plans  to 
kick  off  a  push  into  the  U.S. 
market  for  software-equipped 
mobile  phones,  in  a  bid  to 
eliminate  a  head  start  by  simi¬ 
lar  device.s  that  run  Palm- 
Source  Inc.'s  rival  operating 
system. 

Microsoft  and  two  hardware 
partners  will  announce  cell 
phones  that  use  its  Smart¬ 
phone  technology  and  are 
equipped  to  run  on  cellular 
networks  operated  by  carriers 
such  as  Sprint  PCS  Group 


and  Veri7x>n  Wireless.  The  U.S. 
rollout  follows  the  October 
introduction  of  a  Smartphone 
device  by  London-based 
Orange  SA.-  - 
Orange's  hardware  oper¬ 
ates  on  networks  that  support 
the  Global  System  for  Mobile 
Communications  standard. 

In  contrast.  Microsoft  ofTicials 
said  the  phortes  being  offered 
in  the  U.S.  by  Samsung  Elec¬ 
tronics  Co.  and  Hitachi  Ltd. 
were  designed  for  use  on 
netvs'orks  built  around  Code 
Division  Multiple  Access 


Sun’s  tool  for  creating  inter¬ 
faces.  which  Norman  said  is 
slow  and  difficult  to  work  with. 

But  Andre  Mendes,  chief 
technology  integration  officer 
at  the  Public  Broadcasting 
Service  in  Alexandria.  Va..  said 
IT  departments  have  already 
decided  the  issue  by  not 
downloading  and  uf^rading 
the  desktop  Java  virtual  ma¬ 
chine  (jVM). 

“There  has  not  been  a  clear 
mandate  from  the  masses  out 
there  to  have  (Java}  included 
as  part  of  the  operating  sys¬ 
tem."  said  Mendes.  He  said 
that  having  to  upgrade  Java  on 
their  systems  has  never  been 
an  obstacle  for  companies  that 
want  to  adopt  the  platform. 

Raising  ObjectKMis 

Miemsofe  officials  said  their 
reasons  for  opposing  the  must- 
carry  rule  were  outlined  in 
legal  briefs.  .Among  the  prob¬ 
lems  the  company  cited  are  po¬ 
tentially  jeopardized  Wirvdows 
shipping  dates  and  a  lack  of 
limitations  on  what  Sun  could 
put  in  its  runtime  environment. 
It  could  also  hurt  the  quality 
and  security  of  Windows  re¬ 
leases.  among  other  problems. 

I  according  to  Microsoft. 

I  Microsoft  currently  ships  a 
I  version  of  the  JVM  that’s  at 
I  least  five  years  old.  Develop- 


(CDMA)  technology. 

The  Smartphone  software 
offers  much  of  the  same  func¬ 
tionality  as  Microsoft’s  Pocket  ' 
PC  operating  system  for  hand¬ 
held  devices,  minus  support 
for  Excel  and  PowerPoint.  Ed 
Suwanjindar.  manager  of  mo¬ 
bile  product  devices  at  Micro¬ 
soft,  said  the  company  is  also 
adding  built-in  CDMA  books 
to  make  it  easier  for  phone 
makers  and  network  operators 
to  develop  Smartphone  hard¬ 
ware  and  services.  I 


SlURTPHONESUfT 

A  Bmtsh  maker  of  mobile  phones  s  sutng 
Micfosoft  after  the  coRepse  of  a  Sman- 
plyme-related  partnenship 
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ers  have  to  either  ensure  that 
clients  have  the  latest  JVM. 

:  limit  features  to  those  sup¬ 
ported  by  the  earlier  version 
or  simply  serve  up  HTML. 

"If  the  JVM  did  become 
standard  on  every  desktop,  it 
could  open  the  door  for  really, 
really  rich  clients,"  said  Scott 
Davis,  head  of  the  Denver  Java 
Users  Group  and  a  consultant 
at  Kres  Consulting  in  Engle¬ 
wood.  Colo. 

Java  user  group  officials  in 
Seattle.  Atlanta  and  Cleveland 
who  were  interviewed  for  this 


story  echoed  Davis'  point. 

The  “quality  of  Web  appli¬ 
cations  will  increase,  as  devel¬ 
opers  will  be  able  to  make  use 
of  the  latest  Java  advances 
from  within  the  browser."  said 
Jayson  Raymond,  chairman  of 
the  Seattle  Java  U-sers  Group 
and  CEO  and  chief  technology 
officer  at  Accelerant  Mobile 
Corp..  a  Java  development 
firm  in  Issaquah.  Wash. 

IDC  analyst  Rikki  Kirzner 
called  the  ruling  “extraordi¬ 
narily  importani”  for  Java. 
"What  this  ruling  does  is  force 
Microsoft  to  support  Java, 
which  makes  the  burden  much 
easier  on  the  development 
community,"  she  said.  I 


Sun  Exec:  RuKngWi  Boost  Java 


Sun  Mcrosttems' top  Jm  er 
ecutfve  oortends  M  toe  todnl 
court’s  impendnQ  ’musHany" 
dacatoniNiflldcorpo' 
rale  (tevelopen  by  assur¬ 
ing  Java's  ttoiquitousdto' 
trtiuBon.  In  an  Marten 

FtetdcThtoodeau. 

Rtehard  Otmo,  Sun's 
vice  preaidenl  and  gener¬ 
al  martager  for  Jam  and 
JMLdtocussadtoento 
ingsptenteiropaGL 


Unuc.  pte  hanitield&  pte 
servers.  Ite  «l  be  toe  latgest- 
votim  dateoprnent  pWorrn 
shippteterktede 
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byWcraoratfaeWaiiMl 
loMiptbeteMtterte* 
«nb  Ml  Mlap  iparatei 
ayalMT  Mtonsoft  OMOB  toe 
prvteM  dtaetwlkin  channals  to 
toe  deaMop.  Whan  toey  tocuB 
ihair  energte  on  dstrfeuling 
oul-oHlale  vantan.  toay  duto 
toe  effoilB  of  dawatopais  to  create 
new  appicaions  by  ctNwindng 
toam  lhal  tolK  is  not  samaimg 
toa(toeyahouldbetMno.Theaf- 
faci  te  been  to  traaea  or  delay 
deteopmatd  of  lualy  totoiwang 
stale-oHha-aitnitwarkappica* 
Sons  taeed  on  Jaw  tor  toe 
dateop. 


oteir  aBeoiRpM  farJMi? 

Tharufingenametoaltoevol- 
umetortoiadaMiopiMotitet' 
tonnwibagtaatortoananyoto- 
er  pMtorm  In  toe  world  because 
I  wi  be  toe  aim  of  Unix,  plus 


lyouhawaoGraMBnl 
set  of  APIs  and  program¬ 
ming  tnodakacraasal 
yDursvalanB,asadMl- 
oper  you  can  be  more 
prodiJCtoa.SoMhough 
than  intondona  do  not 
bear  dredy  on  pWfonns  otoer 
ftan  toe  daaldape.  for  davatopars 
and  and  uaara  R  wi  offer  ease  of 
davaioprnani  and  oonstency. 

Hon  does  tea  Mp  yan  asm' 
pate  agaimt  Jill? Idhr 
iatefe  to  dato  tod  ifat  tas  ote 

Jaw  la  not  tochnotopy- Vs  nd 
norMincl’snoltooto.k'btlBto- 
buUoiL  its  toe  teBy  of  davatop¬ 
ars  to  caud  on  it  bteg  present 
atoarrtoaydteloytoabippica' 
(tana.  Thd  la  toa  JM  atosrtege. 
and  tots  inluncftin  cancats 
•  toatoul 


appate,  isB  Jste  ba  cri^ 
pMT  Jaw  wi  go  on  as  It  has 
baaniauccteitolinthaaiter- 
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Java  Developers  Laud  Ruling 


Microsoft  must 
include  up-to-date 
Java  in  Windows 


A  VS.  DISTRICT  COURT 
jildge's  plan  to  force 
Microsoft  Corp.  to 
ship  the  roost  recent 
version  of  Java  software  with 
Wuuknvs  desktop  operating 
systems  may  revive  Java  devel¬ 
opment  and  help  rival  Sun  Mi¬ 
crosystems  Inc.  battle  .Net. 

That's  how  some  Java  devel¬ 
opers.  corporate  IT  executives 
a^  analysts  see  the  impact  of 
a  pending  action  by  U.S.  Dis¬ 
trict  Court  Judge  J.  Frederick 
Mot2  in  Baltimore  in  the  pri¬ 
vate  antitrust  case  between 
Sun  and  Microsoft 
Java  and  the  .Net  framework 
are  Internet-enabled  distrib¬ 
uted  computing  platforms  that 
compete  head-to-head.  Motz, 
in  an  opinion  released  just  be¬ 
fore  Christmas,  said  he  doesn’t 
want  the  antitrust  violations 
of  which  Microsoft  was  found 
guilty  in  the  recently  settled 
federal  case  to  help  it  defeat 
the  Java  platform. 

The  judge  said  he  wants  to 
ensure  that  Java  gets  a  fur 
shake  in  the  platform  war  by 
requiring  Microsoft  to  ship 


Judge’s  View 


up-to-date  versions  of  Java. 

He  is  expected  to  issue  his 
“must-cany"  order  within  the 
next  two  weeks. 

Having  that  Java  desktop 
availability  “removes  a  lot  of 
the  stress  of  competing  with 
the  .Net  framework,"  said 
Jason  Norman,  who  works 
with  Java  as  a  health  systems 
software  en^neer  at  Vander¬ 
bilt  University  Medical  Center 
in  Nashville.  "But  it’s  not  go¬ 
ing  to  be  a  decisive  thing  ei¬ 
ther  way.  It  does  not  mean  that 
Java  is  going  to  dominate,  be¬ 
cause  Java  has  its  own  set  of 
challenges." 

One  such  challenge  is  Swing, 


Sun's  tool  for  creating  inter- 
which  Norman  said  is 
slow  and  difficult  to  work  with. 

But  Andre  Meades,  chief 
technology  integration  officer 
at  the  Public  Broadcasting 
Service  in  Alexandria.  Va,  said 
FT  departments  have  already 
decided  the  issue  by  not 
downloading  and  upgrading 
the  desktop  Java  virtual  ma¬ 
chine  (JVM). 

“There  has  not  been  a  clear 
mandate  from  the  masses  out 
there  to  have  [Java]  included 
as  part  of  the  operating  sys¬ 
tem."  said  Mendes.  He  said 
that  having  to  upgrade  Java  on 
their  systems  has  never  been 
an  obstacle  for  companies  that 
want  to  adopt  the  platform. 

Raising  Objections 

Microsoft  ofticials  said  their 
reasons  for  opposii^  the  must- 
carry  rule  were  outlined  in 
legal  briefs.  Among  the  prob¬ 
lems  the  company  cited  are  po¬ 
tentially  jeopardized  Windows 
shipping  dates  and  a  lack  of 
limitations  on  what  Sun  could 
put  in  its  runtime  environment. 
It  could  also  htirt  the  quality 
and  security  of  Windows  re¬ 
leases.  among  other  problem.^, 
acctmiing  to  Microsoft 

Microsoft  currently  ships  a 
version  of  the  JVM  that’s  at 
least  five  years  old.  Develop- 


Microsoft  Launches 
U.S.  Smartphone  Push 


•V  SOB  BBEWm 

Microsoft  Corp.  today  plans  to 
kick  off  a  push  into  the  U3. 
market  for  software-equipped 
mobile  phones,  in  a  bid  to 
eliminate  a  head  start  by  simi¬ 
lar  devices  that  run  Palm- 
Source  lnc.'s  rival  operatit^ 
system. 

Microsoft  and  two  hardware 
partners  will  announce  cell 
phones  that  use  its  Smart¬ 
phone  technology  and  are 
equipped  to  run  on  cellular 
networks  operated  by  carriers 
such  as  Sprint  PCS  Group 


and  Verizon  Wireless.  The  US. 
rollout  follows  the  October 
introduction  of  a  Smartphone 
device  by  London-based 
Orange  SA. 

Orange’s  hardware  oper¬ 
ates  on  networks  that  support 
the  Global  System  for  Mobile 
Communications  standard. 

In  contrast,  Microsoft  officials 
said  the  phones  being  offered 
in  the  US.  by  Samsung  Elec¬ 
tronics  Ca  and  Hitachi  Ltd. 
were  designed  for  use  on 
networks  built  around  0>de 
Division  Multiple  Access 


(CDMA)  technology. 

The  Smartphone  software 
offers  much  of  the  same  ftinc- 
tionality  as  Microsoft's  Pocket 
PC  operating  system  for  hand¬ 
held  devices,  minus  support 
for  Excel  and  PowerPoint.  Ed 
Suwanjindar,  manager  of  mo¬ 
bile  product  devices  at  Micro¬ 
soft,  said  the  company  is  also 
addii^  built-in  CDMA  books 
to  make  it  easier  for  phone 
makers  and  network  operators 
to  develop  Smartphone  hard¬ 
ware  and  services.  I 


SHUmOESIIIT 

A  BnHsh  malar  of  mobie  phones  is  sung 
ttcrosofi  afisrila  oolapse  of  a  Smart- 
phone-mtated  partnership: 
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ers  have  to  either  ensure  that 
clients  have  the  latest  JVM. 
limit  features  to  those  sup* 
piorted  by  the  earlier  version 
or  simply  serve  up  HTML 

“If  the  JVM  did  become 
standard  on  every  desktop,  it 
could  open  the  door  for  really, 
really  rich  clients."  said  Scott 
Davis,  head  of  the  Denver  Java 
Users  Group  and  a  consultant 
at  Kres  Cockling  in  Engle¬ 
wood,  Colo. 

Java  user  group  officials  in 
Seattle,  Atlanta  and  Cleveland 
who  were  interviewed  for  this 


story  echoed  Davis’  point 

The  “quality  of  Web  appli¬ 
cations  will  increase,  as  devel¬ 
opers  will  be  able  to  make  use 
of  the  latest  Java  advances 
from  within  the  browser,"  said 
Jayson  Raymond,  chairman  of 
the  Seattle  Java  Users  Group 
and  CEO  and  chief  technology 
officer  at  Accelerant  Mobile 
Corp.,  a  Java  development 
firm  in  Issaquah,  Wash. 

IDC  analyst  Rikki  Kirzner 
called  the  ruling  “extraordi¬ 
narily  imponant"  for  Java. 
“What  this  ruling  does  is  force 
Microsoft  to  support  Java, 
which  makes  the  burden  much 
easier  on  the  development 
community,"  she  said.  I 
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HP  ProLiant  DL  58062  Server 
with  tntet' Xeon  ' processors 

Server  time  ortd  spac»  ore  precious  commodities,  ot  least  from  where 
you're  sitting.  Your  customers  ore  domorirtg  for  more,  mote,  more,  while 
you  try  to  figure  out  how  to  deliver  with  less,  less,  less. 

HP  Proliant  servers,  powered  by  Intel*  Xeon*^  processors,  put  you  in 
control  of  your  resources  so  that  you  con  realize  the  true  potential  of  your 
infrastructure.  ProLiant  Essentials  WoHdood  Management  Pock  soflwoie 
lets  you  allocate  your  resources  to  specific  tosks  and  then  reollocate  them 
cu  needed— outomoticolly.  We  coN  it  Dynomic  ftesource  Scoimg.  Artd  wHh 
this  odded  control  ar>d  increosed  visibility,  you  may  even  fir>d  you 
con  boost  efficiency  by  plocing  more  worldood  on  those  some  servers. 

It  all  odds  up  to  faster,  better  distribution,  increased  KOI  ortd  gigonhc 
loops  forward  in  customer  satisfaction.  Which,  of  course,  is  a  relief  to  you. 

Visit  www.hp.cefn/go/prolionf73  or  caM  1.800.282.6673/ 
option  5/  and  mention  code  XFi  for  a  while  paper  on 
odoptivo  iiifiusliucluro  and  o  froo  trial  of  HP  Preliont 
Essontiels  softwort 
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Sybase  Combines 
Software  Divisions 

SytaMt  he.  uM  N  his  Ml  tv  « 

•pmliRg  inlt  tel  oomUnM  ibt 


dMtem  Mo  a  tegit  gnMp- 
DiMn.  CaiLteMd  csnvwiy 
hM  TimMO  Vok,  former  vteo 
prHteol  tod  OMoral  managor 
of  HMfott-Packard  Co.'t  manu* 

iaclurfogfoi 
tonmteaawM 
Ptattarm  Group. 


ACS  Wins  IT  Deal 
Vlfith  Ingram  Micro 

Dalai  baaed  Afftetod  CofHputer 
Sm-vicea  foe.  (ACS)  announced  a 
deal  Id  take  over  IT  fofnMnic- 
bire  management  al  foqraot 
Mere  Inc.,  a  conputer  products 
dfotrtelor  in  SHta  Ana.  CaM. 
About  200  rrwerteswM  be 
tmoforrad  to  ACS  as  part  of  the 
deaLteMcheovorsfogramM- 
cre's  atrateme  and  noMortB.  phis 
he  Intariial  hafo  dealt  operations. 


Ariba  to  Restate 
Fiscal  2001  Results 

S<ni|«*.CiW.-ta«<Art» 
Inc.  sfod  N  wfl  restate  Ns  Brian' 
cW  rsaidls  for  te  Bac^  year 
that  mfosd  In  Ssplomber  2001  to 
aceeunl  for  a  $)0  ndten  par 

man!  made  tel  yaor  to  an  aaac* 
oOve  who  no  fonfar  erorks  tor 
te  cenpany.  Arte.  wMeh 
mahM  onBna  precureraent  soft- 
ware,  nebad  OM  0*0  revtowfoo 
bensfka  gtoen  to  “a  ImilBd  num¬ 
ber' of  ampfoyoM  durfog  teal 
yenre  2000  and  2001. 


Short  Takes 

BM  «d  HmCM  LTD.  comptotad 
a  dato  In  wMcb  Tobynteaod  Hh 
tocM  baugM  maiorlly  oamarsMp 
ofBM’adUidrheiMft.wMcIi 
«■  ha  part  of  a  new  company 
cMad  lOtoeW  eiobid  Sloraga 
Ticfwnfotei  ...Santtebaand 
CfUV  MC.  lau  N  haa  ahippod  te 
Iral  preduetei  venton  of  lb 
Cray  XI  aupofcamputor. 


Cyberthreats  Not  to  Be 
Eternised,  W&ms  Qaite 


Says  Noilnerabilities  still  underappreciated’ 
as  threat  to  nation’s  critical  infrastructure 


BV  DAN  venrOM 

The  U.S.  has  ignored 
warning  signs  be¬ 
fore:  two  attempts 
by  al-Qaeda  in  1994 
to  use  airplanes  as  weapons, 
as  well  as  public  statements  in 
2000  about  terrorists  being 
trained  as  pilots. 

Now  Richard  Clarke,  chair¬ 
man  of  the  President’s  Critical 
Infrastructure  Protection 
Board,  is  trying  to  prevent  new 
warning  signs  from  being  ig¬ 
nored  —  signs  that  al*Qaeda's 
brand  of  terrorism  has  a  grow¬ 
ing  cyber  clement  and  that  the 
nation's  economy  is  at  risk. 

Before  taking  up  his  current 
post  in  October  2001,  Claikc 
advised  two  presidents  on  cy- 
bersecurity  and  served  as  the 
country's  first  counterterror¬ 
ism  coordinator.  Most  of  his 
time  now  is  spent  raising 
awareness  of  the  changing  na¬ 
ture  of  terrorism  and  the  in¬ 
creasing  relevance  of  cyber¬ 
terrorism  to  the  stated  goals  of 
groups  such  as  al-Qaeda. 

“Cyberspace  still  is  under- 
appreciated  as  a  threat,  and 
tito  solutions  aren't  as  obvious 
as  they  are  with  physical  secu¬ 
rity."  said  Clarke  during  an  ex¬ 
clusive  interview  with  Com- 
puterworld  Dec.  20.  'TVe  have 
no  clue  as  a  country  how  to 
protect  our  cyberspace.  It  is  a 
totally  different  kind  of  issue.” 

Unknown  Security  Holes 

Clarice  said  vulnerabilities  in 
the  nation's  critical  infrastruc¬ 
ture  stem  mainly  fiom  un¬ 
known  security  boles  in  wide¬ 
ly  deployed  software  and  from 
the  constant  influx  of  new 
technologies  that  often  have 
unintended  consequences  for 
security. 

One  of  his  biggest  concerns 
is  the  growing  use  of  wireless 
technologies,  be  said.  There 
have  already  been  cases  in 
Spain  and  Japan  in  which  PC- 


based  worms  have  infected 
hundreds  of  next-generation 
cell  phones,  tricking  them  into 
dialing  local  9U  emergency 
systems,  Clarice  added. 

‘Now.  if  you're  a  terrorist, 
the  first  thing  you  might  want 
to  do  before  an  attack  is  take 
down  the  9U  system."  he  said. 

According  to  Clarice,  the 
Sept.  U  terrorist  attacks  were  a 
turning  point  for  the  national 
effort  to  protect  cyberspace. 

"Before  Sept  U.  [al-Qaeda] 


was  interested  in  kilting  as 
many  people  as  possible,"  he 
said.  "After  Sept.  U.  (Osama 
bin  Laden]  starts  talking  about 
destroying  the  American 
economy.  And  he  starts  to  talk 
about  going  after  the  econom¬ 
ic  infrastructure  of  the  United 
States.  You  could  drive  around 
a  lot  of  truck  bombs  and  really 
not  do  a  lot  of  damage  to  the 
economic  infrastructure  be¬ 
cause  it’s  so  diverse  and  dis¬ 
persed.  But  if  you  do  it  in  cy¬ 
berspace,  you  might  have  the 
ability  to  hit  the  entire  finan¬ 
cial  services  network  simulta¬ 
neously." 


H  We  have  no  clue  as 
a  country  how  to  pro¬ 
tect  our  cybersp^.  It  is  a 
totally  different  kind  of  issue. 

RICHARD  CLARKE.  CHAIRMAN.  CRniCAL  INFRASTRUCTURE  PROTECTION  BOARD 


An  Ongoing  Debate 


A  reseaich  paper  fifoesed  last 
monlh  by  the  Center  tor  Strate¬ 
gic  &  Intemalional  Sbjdtos 
(CSSXaWnshinglon-faased 
think  tank,  argues  thai  computer 
netwoteattocftocailnfiaBtruc- 
tures  are  dsttncl  erWes  and 
telteihreetiramqiberterror- 
ism  is  tar  less  serious  than  the 
goventrant  and  the  tnedfo 
contend. 

Iheassumptionofvufeieia- 
falNy  is  nrong."  argues  James  A. 
late  a  CSC  aneiysl  and  author 
of  "Assesaing  foe  Risks  of  Qitiar 
Terrorism.  Cyber  ¥tor  and  Ote 
Cyber  Threols.’ 

"Whie  many  compuler  net¬ 
works  remain  very  Miktoieble  to 
attack,  tow  ollicii  ktestruc- 
turasareeqialyvulnerafafo.'ac- 
cordfog  to  iRte.  XomiwlBr 
network  vulnirMMas  are  an  in- 
creaeingly  aeriouB  business 


problem,  but  their  threat  to  na¬ 
tional  aecuftty  is  overstated.' 

ButlMfooftoistowexvn- 
piee  and  technical  detals  to  sup¬ 
port  he  daimB.  vihich  stand  In 
stark  contrast  to  mudi  of  foe 
nawthMdngbyhiglHBwlna- 
liond  seasily  experts  on  foe  Is¬ 
sue  of  aBtod  Miaetnidure  pro- 
tedton  and  cybeieecunty. 

to  a  recent  kitervtow  wtfo 
CornputenranU  tor  exarnple. 
Brenton  Greene,  deputy  (feector 
of  foe  NaHonii  Communhallons 
Syetam.  ar  eacuttoetench 
egencyntenueUelormainato- 
ingandredoitoocommirtca- 
ttonsdurtogtiiiiBsalnaltoneicrl' 
ers.  said  foe  phyded  and  cyber 
aspeclB  of  citecaf  infrBslni^ 
protoedon  can't  be  separated 
Mte  phyeicef  evento  «■  hM 
rlgtenaiodtani  and  vice 
versa,  said  Graene. 


Clarke  said  he's  aware  that 
many  people  doubt  the  will- 
ingness  and  ability  of  terrorist 
organizations  to  carry  out 
strategic  cyberattacks  against 
the  U.S.  But  he  said  it’s  his  job 
to  think  differently  about  the 
future  —  and  to  do  what  some 
officials  foiled  to  do  in  the 
months  leading  up  to  Sept  U. 

A  lot  of  Threats 

"There  are  a  lot  of  different 
people  who  can  conduct 
cyberwarfore,"  Clarke  said. 
"There  are  countries  that  are 
creatii^  cyberwarfare  units. 
Tltere  are  criminal  groups  en¬ 
gaging  in  cybercrime.  There 
are  also  some  terrorist  groups 
we  know  are  looking  at  using 
cyberattack  tools.  But  1  don't 
spend  a  lot  of  time  trying  to 
figure  out  who’s  going  to  be 
the  next  attacker." 

Eliminating  al-Qaeda.  for 
example,  'Von’t  end  the  threat 
to  us  from  cyberspace."  be 
said. 

And  therein  lies  the  chal¬ 
lenge,  accordmg  to  Clarke. 

The  \JS.  needs  to  take  the  tar¬ 
get  of  cyberspace  away  from 
its  enemies  1:^  eliminating  vul¬ 
nerabilities,  he  said,  k 


fiat's  abo  fog  conefcteon  of 
te  recendy  rataasad  annuli  re¬ 
port  of  te  Advisory  teal  to  An- 
aess  OomaeNc  Ranponsa  Capt- 
bMaa  for  lortortam  iTNDMnQ 
VtoteumofMaasOastruelion. 
lad  tofinar  Vtogtoia  Gov. 

James  S.  Gftaore. 'tlybintoBoa 
has  been  ieolated  and  apt^ 
bed.  fous  bnlino  Rs  pareatead 
ralevanGntodairkHtayoul- 
oonon  and  even  Is  raiBMBnce  to 
vifial  are  viewed  an  cfoar  and 
preaant  homeland  secially 
thnak.*  te  commMion  stated. 

to  an  inter>tew.  Gbnore  ated 
te  commlBtion's  fludtos  tew 
foal  cybattatrartam  is  a  efoar  and 
pnaert  danoar  to  crtNcal  nbr 
strudure. 

"fiarigwalion  technology. 
Internal  and  oomputer  world  tel 
we  now  fete  to  te  wbianlBB.  and 
N  muBi  ba  anafyzadtagater 
wifoofowpliy^partaofcrilh 
cte  infcteRnclure  to  order  to  pro¬ 
tect  tenaBoa*  ha  Hid. 

-QteMwtoo 


The  five  business  intelligence 
questions  that  Business  Objects 
doesn't  want  you  to  ask. 
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U.S.  Tries  to  Restrict  5-GHz  Wireless  LANs 


Wbrried  about 
interference  with 
military  radar 


The  Department  of  De¬ 

fense  is  seeldng  to  restrict  the 
use  of  wireless  LANs  in  the 
lower  portion  of  the  5-<xHz 
frequency  band  because  of 
concerns  about  possible  inter¬ 
ference  with  military  radar. 

Portions  of  the  5-CHz  band 
have  already  been  assigned  for 
unlicensed  WLAN  use  in  the 
Europe  and  |apaa  But  in 
a  draft  position  paper  submit¬ 
ted  to  d>e  International  Tele¬ 
communication  Union  (ITU), 
the  U.S.  government  said  it 
wants  the  5-<>Hz  band  protect¬ 
ed  for  radar  systems  that  can 


pick  ’’smaller  and  less  reflec¬ 
tive  targets  out  of  background 
clutter.” 

That  phrase  refers  to  small 
boats  or  planes  that  terrorists 
could  use  to  attack  U.S.  forces, 
said  John  Pike,  a  defense  ana¬ 
lyst  at  GlobalSecurity.oig  in 
Washington.  He  added  that 
the  Defense  Department  is 
also  concerned  about  its  abili¬ 
ty  to  detect  stealth  aircraft 
that  can  hide  foom  most  con¬ 
ventional  radar  systems. 

HWi  Stakes 

Badri  Younes,  director  of 
spectrum  management  at  the 
Pent^on,  aclmowledged  that 
the  war  on  terrorism  has 
raised  the  stakes  for  radar 
operations.  Attackers  “could 
be  coming  from  anywhere," 


Younes  said,  adding  that  the 
military  has  to  be  able  to  en¬ 
sure  that  its  radar  systems  can 
work  without  interference 
from  WLANs. 

Hie  government’s  position 
paper  was  prepared  for  a 
meeting  of  the  ITU  in  Geneva 
on  Nov.  IL  The  ITU,  the  Unit¬ 
ed  Nations  body  that  oversees 
spectrum  allocations  world¬ 
wide,  plans  to  decide  on  the 
5-GHz  matter  and  other  issues 
at  its  quadrennial  World  Radio 
Conference  (WRC)  in  <^eva 
in  June. 

In  the  draft  proposal,  a  copy 
of  which  was  obtained  by 
Computerworld,  the  U,S.  said 
it  wants  to  restrict  the  use  of 
Wi-Fi  WLAN  technology  be¬ 
tween  5.150  and  5350  GHz. 
The  government  called  for 


radar  systems  operating  in 
that  band  to  be  protected  by  a 
technique  known  as  dynamic 
frequency  selection  (DFS). 
which  wotild  shut  down 
WLAN  transmissions  if  a 
radar  signal  was  detected. 

Bill  Calder,  a  spokesman  for 
Intel  Corp.,  declined  to  specify 
the  DFS  restrictions  being 
sought  by  the  Pentagon.  But 
he  said  t^t  IT  vendors  view 
them  as  too  conservative  and 
are  trying  to  reach  a  compro¬ 
mise  with  the  government  be¬ 
fore  the  WRC  meeting 

“We  do  not  want  to  see  that 
low  band  unduly  restricted,” 
Calder  said. 

Yotmes  said  Pentagon  offi¬ 
cials  are  willing  to  woik  with 
companies  to  devise  a  propos¬ 
al  that  supports  national  secu¬ 


rity  interests  and  the  needs  of 
WLAN  vendors  and  users. 

But  Rich  Redelfo.  president 
and  CEO  of  Atheros  Commu¬ 
nications  Inc...  a  Sunnyvale, 
Calif.-based  maker  of  chip  sets 
for  5-GHz  WLANs,  described 
the  attempt  to  limit  use  of  the 
technology  as  “trying  to  put 
the  genie  back  in  the  bottle." 

Clyde  Fnsslm,  a  spokesman 
for  the  National  Telecommu¬ 
nications  and  Information 
Administratimi,  a  division  of 
the  U3.  Department  of  Com¬ 
merce,  said  the  draft  proposal 
represents  the  views  of  all  fed¬ 
eral  agencies,  including  the 
Federal  Communicatioos 
Commission. 

The  radar  section  pertains 
to  both  military  and  commer¬ 
cial  radars,  including  ad¬ 
vanced  systems  that  commer¬ 
cial  pilots  could  use  to  detect 
«small  planes.  Ensslin  said.  I 
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PREMIER  WO  IT  lEADERS  2003 


MARYFRAN  JOHNSON 


Real-Time  FT  Leadership 

I  JUST  SEARCHED  FOR  THE  PHRASE  “real-time  IT  leadership” 
on  Google  and  came  up  with  a  big  fat  goose  egg.  Zip.  Nada  No 
documents  found.  That  led  me  to  ask  one  of  those  tree-falling- 
in-the-forest  questions;  If  it  can’t  be  Googled,  does  it  really  exist? 


Damn  right  it  does.  And  I  submit  as  Ex* 
hibit  A  this  issue  of  Computerwortd,  which 
is  devoted  to  our  Premier  100  IT  Leaders 
for  2003.  Real-tiroe  FT  leadership  is  what 
the  Premier  100s  are  all  about  They  show 
it  on  the  job  every  day.  across  every  indus' 
try.  They  use  it  to  get  projects  done,  bud¬ 
gets  balanced,  old  applications  integrated, 
new  systems  stabilize  and  customer  is¬ 
sues  resolved  They  leverage  h  to  keep 
businesses  moving  forward  de^ite  the 
drag  of  this  drawnKMit  recession. 

This  is  our  fourth  year  o(  identifying 
and  honoring  the  men  and  women  vrim 
drive  the  IT  leadership  ag^nAt.  We  buih 
our  stories  this  time  on  a  series  of  tou^  questions, 
which  the  Premier  100s  answer  in  detail  throu^iout 
this  issue.  How  are  they  managing  vendors  and  sup¬ 
pliers?  Automating  and  int^ra^ig  technology  with 
the  enterprise?  Connecting  with  custmners? 

But  like  real  life,  this  issue  isn't  just  a  string  of  suc¬ 
cess  stories.  The  Premier  100s  also  talk  about  their 
worst  decisions  and  what  they  learned  from  them. 
One  CIO  regrets  deploying  a  debit  card  system  for 
international  travelm  that  foundered  technology 
complic^ons  in  Europe,  and  another  rues  the  day 
she  signed  an  enterprise  software  agreement  that 
locked  her  company  into  lousy  products. 

Their  challenges  —  and  the  myriad  ways  they  han¬ 
dle  them  —  will  ring  Camiliar  bells  with  you.  For 
starters,  they  watch  the  bottom  line  constantly  and  in 
concert  with  the  business  side. 

‘Ttify  CFO  can  make  a  vendor  cry  and  a  nkkel 


in  the  midst  of  upgrading  2S4  point-of-sale 
systems  for  the  ^  ftxxl  chain,  and  he 
meets  every  week  with  his  top  flnancial 
executive  to  keep  that  real-time  inftwma- 
tion  flowing. 

For  Jerry  M^lhatton,  senior  executive 
^  vice  presideni  of  global  techncdogy  and 
operations  at  MasterCard  IntematiooaL 
real-time  IT  leadership  naeans  paying 
“exceptional  attention  to  detail”  while 
still  givii^  his  IT  staff  the  latitude  to  make 
decisions.  “You  monitor  the  metrics  and 
make  sure  you  stay  on  track,”  he  says. 

Staying  on  track  crften  hinges  on  the 
level  of  commitment  IT  leaders  extract 
&x>m  their  vendors.  “Michael  Dell  promised  me  face 
to  face  it  would  work,”  says  Damim  vice  pres¬ 
ident  of  corporate  systems  at  Hilton  Hotels,  refer¬ 
ring  to  the  sucnssful  platform  change  involved  in  an 
ERP  project 

Yet  often,  real-time  IT  leadership  is  as  much  about 
listening  to  custcmiers  and  end  users  as  it  is  about 
technology  savvy  or  management  skills.  At  Six  Conti¬ 
nents  Hotels,  CIO  W.  Douglas  Lewis  kept  that  in 
mind  while  revamping  the  central  reservation  system 
for  3,200  hotels.  “Involving  the  people  who  leave  fin¬ 
gerprints  on  the  keyboards  is  critical  because  they 
know  what  the  botds  need,”  Lewis  says.  “If  we  ap¬ 
proached  this  from  an  IT  point  of  itiew.  it's  lU«ly  we 
would  have  built  the  wrong  sohition.” 

That  last  comment  neatly  sums  up  the  balanced, 
open-minded,  analytical  worldview  our  Premier  KX)  IT 
Leaders  bring  to  tfaear  work.  I  hope  youTl  enjoy  reading 


scream.”  quips  Henry  Volkman.  CIO  at  Dei  Thco.  He's  I  their  stories  as  much  as  we  enjoyed  writing  them,  t 
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RealTime  IT  Leadership 

I  JUST  SEARCHED  FOR  THE  PHRASE  “real-time  IT  leadership” 
on  Google  and  came  up  with  a  big  fat  goose  egg.  Zip.  Nada.  No 
documents  found.  That  led  me  to  ask  one  of  those  tree-falling- 
in-the-forest  questions:  If  it  can’t  be  Googled,  does  it  really  exist? 


Oamn  right  it  does.  And  1  submit  as  Ex- 
hibit  A  this  issue  of  Computerwor/d,  which 
is  devoted  to  our  Premier  100  IT  Leaders 
for  2003.  Real-time  IT  leadership  is  what 
the  Premier  100s  are  all  about  TTiey  show 
it  on  the  |ob  every  day.  across  every  indus¬ 
try.  They  use  it  to  get  projects  done,  bud¬ 
gets  balanced,  old  applications  integrated, 
new  systems  stabilized  and  customer  is¬ 
sues  resolved.  They  leverage  it  to  keep 
businesses  moving  forward  despite  the  aMHiM 
drag  of  this  drawn-out  recession.  adlor  b  ct 

This  is  our  fourth  year  of  identifying  §rmatU.  ¥ 
and  honoring  the  men  and  women  who  *****  — 
drive  the  IT  leadership  agenda.  We  built 
our  stories  this  time  on  a  series  of  tou^  questions, 
which  the  Premier  100s  answer  in  detail  throughout 
this  issue.  How  are  they  managing  vendors  and  sup¬ 
pliers?  Automating  and  integrating  technology  wi^ 
the  enterprise?  Connecting  with  customers? 

But  like  real  life,  this  issue  isn’t  just  a  string  of  suc¬ 
cess  stories.  The  Premier  100s  also  talk  about  their 
worst  decisions  and  what  they  learned  from  them. 
One  CIO  regrets  deploying  a  debit  card  system  for 
international  travelers  that  foundered  on  technology 
complications  in  Europe,  and  another  rues  the  day 
she  signed  an  enterprise  software  agreement  that 
locked  her  company  into  lousy  products. 

Their  challenges  —  and  the  myriad  ways  they  han¬ 
dle  them  —  will  ring  familiar  bells  with  you.  For 
staners,  they  watch  the  bottom  line  constantly  and  in 
concert  writh  the  business  side. 

'*My  CFO  can  make  a  vendor  cry  and  a  nickel 


in  the  midst  of  upgrading  2S4  point-of-sale 
systems  for  the  fast  food  chain,  and  be 
n»eets  every  week  with  his  top  fmancial 
executive  to  keep  that  real-time  informa¬ 
tion  flovring. 

For  Jerry  McElhatton,  senior  executive 
vice  president  of  global  technology  and 
operations  at  MasterCard  IntemationaL 
real-time  IT  leadership  means  payii^ 
“exceptional  attention  to  detail"  while 
||  still  giving  his  IT  staff  the  latitude  to  make 
ol  Cem^-  decisions.  *^00  monitor  the  metrics  and 
*??*****?  make  sure  you  stay  on  track,"  he  says. 

Staying  on  track  often  hinges  on  the 
level  of  commitment  IT  leaders  extract 
from  their  vendors.  “Michael  Dell  promised  me  face 
to  face  it  would  work,"  says  Damien  Bean,  vice  pres¬ 
ident  of  corporate  systems  at  Hilton  Hotels,  refer¬ 
ring  to  the  successful  platform  change  involved  in  an 
ERP  project. 

Yet  often,  real-time  IT  leadership  is  as  much  about 
listening  to  customers  and  end  users  as  it  is  about 
technology  savvy  or  managentent  skills.  At  Six  Conti¬ 
nents  Hotels,  CIO  W.  Douglas  Lewis  kept  that  in 
mind  while  revamping  the  central  reservation  system 
for  3,200  hotels.  "Involving  the  people  who  leave  fin¬ 
gerprints  00  the  keyboards  is  critical  because  they 
know  what  the  hotels  need."  Lewis  says.  “If  we  ap¬ 
proached  this  from  an  IT  point  of  view,  it's  likely  we 
would  have  built  the  wrong  solution.'" 

That  last  comment  neatly  sums  up  the  balanced, 
open-minded,  analytical  worldview  our  Premier  100  IT 
Leaders  bring  to  their  work.  1  hope  you’ll  enjoy  reading 


scream."  quips  Henry  Volkman,  CIO  at  Del  Taco.  He’s  I  their  stories  as  much  as  we  enjoyed  writing  them.  • 
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Invest  Your 
IT  Dollars? 

There’s  precious  little  money  for  IT  investments 
this  year,  but  the  cash  Premier  100  leaders  do 
have  to  spend  will  go  toward  projects  with  mini¬ 
mal  risk  and  surefire  payoff.  By  Steve  UHelder 


The  YEAR  IS  BRAND  NEW. 

but  the  budget  chal¬ 
lenges  are  old  news: 
very  little  money  to 
spend  and  plenty  of 
protects  competing. 

Among  this  year’s 
Premier  100  IT  Leaders, 
spendmg  plans  vary  widely.  As  expect¬ 
ed,  some  IT  shops  face  budget  cuts 
driven  by  lower-than-anticipated  rev¬ 
enue.  Even  many  CIOs  in  h^thy  in¬ 
dustries  will  rein  in  spending  vohmtar- 
ily  as  a  preemptive  defense  against  a 
possible  slowdown.  Still  others  are 
already  accustomed  to  spending  less 
than  1%  of  revenue  on  IT  —  a  tight 
budget  to  begin  with.  Peihaps  most 
surprisingly,  at  least  one  past  Premier 
100  IT  Lea^r  is  mcreasii^  his  IT 
spending  by  25%. 

In  other  words,  technology  spending 
in  2003  will  depend  heavily  on  indus¬ 
try  and  business  needs.  Some  of  the 
Premier  UX)  leaders  will  invest  to  meet 
federal  regulations;  others  will  double 
their  IT  training  budgets  because  they 
have  recently  rolled  out  several  appli¬ 
cations.  Many  enterprises,  having 
spent  years  tryii^  to  increase  revenue 
through  customer-facing  techntriogy 


initiatives,  will  turn  their  focus  inward, 
where  returns  are  more  assured. 

There’s  a  commcm  thread  among 
this  year’s  IT  leaders,  however.  In  for¬ 
ward-thinking  enterprises,  technology 
spending  is  now  clearly  and  closely 
tied  to  corporate  strat^. 

It’s  a  perennial  challei^:  In  a  recent 
Gartner  Inc.  survey  of  1.S0O  CIOs, 
"strategizing  for  IT/business  linkage” 
was  listed  as  the  Na  1  IT  management 
priority,  and  it  has  topped  other  sur¬ 
veys  for  a  decade  or  more.  In  leading 
organizations,  IT  is  no  longer  viewed 
as  a  wild  card  or  black  box;  its  budget 
is  scrutinized  by  an  executive  commit¬ 
tee.  Proiects  that  get  the  green  li^t  are 
expected  to  produce  results. 

Taking  a  Deep  Breath 

Daniel  W.  Garrow,  senior  vice  presi¬ 
dent  of  information  systems  and  CIO 
at  Mobegan  Sun  Casiro  in  Uncasville, 
Conn.,  has  spent  the  past  two  and  a 
half  years  presiding  over  a  $1  billion 
property  expansion  and  simultaneous 
infrastructure  upgrade.  He  plans  to 
focus  on  fine-tunii^  a  host  new  sys¬ 
tems  and  applications.  ’’We  compl^ly 
redid  our  networic,”  he  says,  which  in¬ 
cluded  bringing  broadband  Internet 


connecticMis  to  a  new  1,200-room  hotel 
for  the  $787  million  casino  operation. 

"A  lot  of  the  infrastructure  expenses 
are  behiiKl  us,”  Garrow  says.  “In  2003, 
our  focus  is  on  cleaning  up  what  we 
call  logical  construction  debris.  There 
are  loose  ends  to  tie  up,  interfaces 
that  need  to  be  tweaked. . . .  We're 
taking  this  year  to  settle  into  our  new 
systems." 

Among  those  loose  ends  is  Mohegan 
Sun’s  first  suite  of  hotel  management 
software  from  Lawrenceville.  Ga.- 
based  Inter-American  Data.  The  hotel 
has  Inter-American’s  Lodging  Manage¬ 
ment  System  LS  up  and  running,  but 
Garrow  is  still  nne-tuning  the  system 
and  integrating  it  with  a  proprietary 
Mobegan  Sun  loyalty-card  program 
that  lets  guests  earn  points  when  they 
gamble  and  then  redeem  them  any¬ 
where  cm  casino  property. 

Even  busmesses  with  improving 
market  shares,  outstandii^  brand 
recognition  and  sound  business  plans 
have  been  affected  by  the  slow  econ¬ 
omy,  and  Premier  100  leaders  are  ad¬ 
justing  accordingly. 

The  North  American  region  is  tar¬ 
geted  m  deliver  operating  income  at 
near  double-digit  growth  rates  in  an 
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In  2003,  our  focus 
IS  on  cleaning  up  what  we 
call  logical  construction  debris. 

.  ,  We're  taking  this  year  to 
settle  into  our  new  systems. 


industry  that's  growing  at  only  3%.  so 
we  want  to  leverage  every  dollar  spent 
on  technology,”  says  Doug  Watson,  a 
vice  president  and  director  of  IT  for 
the  Americas  at  Miami-based  distiller 
Bacardi  USA.  “We  have  an  IT  gover¬ 
nance  model  in  place  that  ensures 
we’re  spending  dollars  that  directly  tie 
back  to  our  strategic  drivers.” 

As  a  result.  Watson  will  spend  heavi¬ 
ly  this  year  on  a  program  that  rational¬ 
izes  Bacardi's  supply  chain  software. 
The  company  long  ago  standardized 
on  tools  from  Denver-based  }J>.  Ed¬ 
wards  &  COn  but  its  four  implementa¬ 
tions  —  one  in  Jacksonville,  Fla.,  two  in 
Puerto  Rico  and  one  in  Miami  —  "grew 
up  separately”  and  use  different  data 
models  that  make  information-sharing 
difficult,  Watson  says.  Driven  by  busi¬ 
ness  pressures,  his  IT  team  will  create 
a  single  data  model  this  year  aimed  at 
"complete  data  transparency”  that 
spans  the  company’s  supply  chain 
across  geographic  regions,  he  says. 

Like  Watson,  Premier  100  IT  Leader 
Linda  Roubinek  is  focused  on  helping 
her  company  achieve  its  strategic 
goals.  As  systems  officer  at  Nationwide 
Mutual  Insurance  Co.,  Roubinek  was 
instrumental  in  realignii^  the  Colum¬ 


bus,  Ohio-based  company’s  IT  spend¬ 
ing  model  Last  year.  Nationwide 
launched  a  group  of  cross-functional 
strategy  and  technology  councils  that 
are  in  charge  of  setting  the  company's 
IT  agenda  and  making  sure  all  major 
projects  contribute  to  that  agenda. 

As  a  result  of  council  decisions, 
Roubinek  will  focus  this  year  on  creat¬ 
ing  Web-enabled  tools  for  Nation¬ 
wide’s  agents.  “We’ve  invested  in  CRM 
in  the  past,”  she  says,  “but  we’re  dou- 
blii^  ^t  investment  in  2003.”  The 
goal  is  to  speed  time  to  market  for  new 
rates  and  regulatory  changes.  That’s  a 
stiff  challenge,  in  part  because  Nation¬ 
wide  does  business  in  46  states,  each 
of  which  has  its  own  insurance  com¬ 
mission  that  roust  approve  proposed 
offerings.  Nationwide  q>ent  much  of 
2002  holding  focus  groups  for  insur¬ 
ance  agents,  and  it's  now  ready  to  cre¬ 
ate  the  proprietary  tool 

Inside  the  Rrewal 

It's  appealing  m  spend  money  on  cus¬ 
tomer-  and  partner-facing  systems  that 
can  potend^y  enhance  revenue.  And 
indeed,  ‘the  tnilk  of  IT  expenditures 
going  forward  will  focus  on  customer- 
fad^  stufii”  says  Tom  Pohlmann.  an 


analyst  at  Cambridge,  Ma$s.-based  For¬ 
rester  Research  Inc.  But  that’s  a  k»%- 
term  trend;  in  the  near  future,  many 
CIOs  and  business  executives,  having 
been  burned  by  expensive  enterprise 
resource  planning  (ERP)  and  customer 
relationship  management  (CRM)  im- 
plementatioos  that  delivered  desultory 
returns,  are  focusing  on  internal  up¬ 
grades  with  relatively  certain  payoff. 

For  example,  Glen  Allen,  Va.-based 
Owens  it  Minor  Inc.  has  ambitious 
strategic  IT  plans,  but  at  the  same 
time,  ‘^ve've  got  to  modernize  our 
legacy  business  ^ps  in  2003,”  says 
David  R  Guzman,  senior  vice  presi¬ 
dent  and  CIO.  The  S3.9  billion  health 
care  distribution  and  logistics  com¬ 
pany  has  a  range  of  legacy  applications 
written  in  what  Guzman  falk  ‘‘mid- 
’80s  alphabet  soup”  —  MVS,  Cobol, 
CI(2S  and  the  like.  Tbe  six-member  IT 
governance  team  ctmsidered  a  major 
ERP  implementatioa  but  reacted  it  as 
risky  and  likely  to  waste  much  of  tbe 
company’s  existing 

As  an  alternative,  Owens  &  Minor 
will  spend  much  of  2003  using  Res- 
cueWare,  a  product  from  Cary.  RC.- 
based  Relativity  Technologies  Inc. 
that  converts  legacy  code  into  Java, 
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In  2003.  our  focus 
is  on  cleaning  up  what  we 
call  logical  construction  debris. 

. . .  We're  taking  this  year  to 
settle  into  our  new  systems. 


industry  that's  growing  at  only  3%,  so 
we  want  to  leverage  every  dollar  spent 
on  technology,"  says  Doug  Watson,  a 
vice  president  and  director  of  IT  for 
the  Americas  at  Miami-based  distiller 
Bacardi  USA.  “We  have  an  IT  gover¬ 
nance  model  in  place  that  ensures 
we're  spending  dollars  that  directly  tie 
back  to  our  strategic  drivers." 

As  a  result,  Watson  will  spend  heavi¬ 
ly  this  year  on  a  program  that  rational¬ 
izes  Bacardi's  supply  chain  software. 
The  company  long  ago  standardized 
on  tools  from  Denver-based  J.D.  Ed¬ 
wards  &  Co.,  but  its  four  implementa¬ 
tions  —  one  in  Jacksonville,  Fla.,  two  in 
Puerto  Rico  and  one  in  Miami  —  “grew 
up  separately"  and  use  different  data 
models  that  make  information-sharing 
difficult,  Watson  says.  Driven  by  busi¬ 
ness  pressures,  his  IT  team  will  create 
a  single  data  model  this  year  aimed  at 
“complete  data  transparency"  that 
spans  the  company’s  supply  chain 
across  geographic  regions,  he  says. 

Like  Watson,  Premier  100  IT  Leader 
Linda  Roubinek  is  focused  on  helping 
her  company  achieve  its  strategic 
goals.  As  systems  officer  at  Nationwide 
Mutual  Insurance  Co..  Roubinek  was 
instrumental  in  realigning  the  Colum¬ 
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bus,  Ohio-based  company's  IT  spend¬ 
ing  model.  Last  year.  Nationwide 
launched  a  group  of  cross-functional 
strategy  and  technology  councils  that 
are  in  charge  of  scttii^  the  company’s 
IT  agenda  and  making  sure  all  maior 
projects  contribute  to  that  agenda. 

As  a  result  of  council  decisions. 
Roubinek  will  focus  this  year  on  creat¬ 
ing  Web-enabled  tools  for  Nation¬ 
wide’s  agents.  “We’ve  invested  in  CRM 
in  the  past."  she  says,  “but  we’re  dou¬ 
bling  that  investment  in  2003."  The 
goal  is  to  speed  time  to  market  for  new 
rates  and  regulatory  changes.  That's  a 
stiff  challenge,  in  part  because  Nation¬ 
wide  does  business  in  46  states,  each 
of  which  has  its  own  insurance  com¬ 
mission  that  must  approve  proposed 
offerings.  Nationwide  spent  much  of 
2002  holding  focus  groups  for  insur¬ 
ance  agents,  and  it’s  now  ready  to  cre¬ 
ate  the  proprietary  tool. 

Inside  the  Firewall 

It’s  appealing  to  spend  money  on  cus¬ 
tomer-  and  partner-facing  systems  that 
can  potentially  enhance  revenue.  And 
indeed,  “the  bulk  of  IT  expenditures 
going  forward  will  focus  on  customer- 
facing  stuff',"  says  Tom  Pohlmann,  an 


analyst  at  Cambridge.  Mass. -based  For¬ 
rester  Research  Inc.  But  that's  a  long¬ 
term  trend:  in  the  near  hiture.  many 
CIOs  and  business  executives,  having 
been  burned  by  expensive  enterprise 
resource  planning  (ERP)  and  eustomer 
relationship  management  (CRM)  im¬ 
plementations  that  delivered  desultory 
returns,  are  focusing  on  internal  up¬ 
grades  with  relatively  certain  payoff. 

For  example,  Glen  Allen.  Va.-based 
Owens  &  Minor  Inc.  has  ambitious 
strategic  IT  plans,  but  at  the  same 
time,  "we’ve  got  to  modernize  our 
legacy  business  apps  in  2003,"  sa)'s 
David  R.  Guzman,  senior  vice  presi¬ 
dent  and  CIO.  The  S3.9  billion  health 
care  distribution  and  logistics  com¬ 
pany  has  a  range  of  legacy  applications 
written  in  what  Guzman  calls  “mid- 
‘80s  alphabet  soup"  —  MVS.  Cobol, 
CICS  and  the  like.  The  six-member  IT 
governance  team  considered  a  major 
ERP  implementation  but  rejected  it  as 
risky  and  likely  to  waste  much  of  the 
company's  existing  data. 

As  an  alternative,  Owens  &  Minor 
will  spend  much  of  2003  using  Res- 
cueWare,  a  product  from  Cary,  N.C.- 
based  Relativity  Technologies  Inc. 
that  converts  legacy  code  into  Java. 


WVIfe  may  have 
to  control 
spending  over  the 
next  12  to  18  months, 
and  Pm  propping  my 
budget  accordingly. 

JOSEPH  A.  PU6LISI.  CM.  EMCM  GPOUP 


HTML  and  Visual  Basic. 

Guzman  says  he  will  also  spend 
much  of  his  time  overseeing  Owens  & 
Minor's  IT  outsourcing  deal  with  Dal¬ 
las-based  Perot  Systems  Corp.  In  July 
2002.  the  companies  expanded  and  ex¬ 
tended  their  existing  relationship  into 
a  comprehensive  seven-year.  $229  mil¬ 
lion  services  agreement.  Previously. 
Perot  Systems  handled  application 
development  and  network  operations, 
while  mainframe  operations  were  out¬ 
sourced  to  IBM.  “We  just  gave  Perot 
the  whole  pie.**  Guzman  says,  because 
projections  for  return  on  investment 
showed  a  savings  of  35%  over  the 
ses'en-year  contract. 

What  Guzman  likes  most  about 
the  Perot  Systems  deal  is  the  agility  it 
affords  Owens  &  Minor.  When  opera¬ 
tions  are  well  in  hand.  Perot  shifts 
its  personnel  to  development  tasks. 
Howard  Rubin,  an  analyst  at  Stamford. 
Corm.-based  Meta  Group  Inc.,  says 
such  agility  is  a  growing  need  for  cor¬ 
porate  IT  “Right  now.  even  IT  depart¬ 
ments  that  have  cut  their  budgets  are 
too  inflexible.”  he  says,  calling  heavy 
upfront  expenditures  for  infrastruc¬ 
ture  “the  equivalent  of  buying  an  in¬ 
vestment  that  you  can't  cash  in  for  20 
years."  Rubin  says  turning  fixed  costs 
into  variable  costs  will  be  a  major 
trend  among  IT  leaders  this  year. 

Tetecom  Jitters 

Anoibet  health  care  firm.  TriWesi 
Healthcare  Alliance,  is  also  planning 
internally  focused  projects  for  2003. 
Premier  100  IT  Leader  lames  D.  Gib¬ 
son.  director  of  IT  at  the  Phoenix- 


based  company,  which  offers  health 
care  for  Department  of  Defense  em¬ 
ployees.  says  TriWest  will  upgrade  its 
800  desktops  from  Windows  NT  to 
Windows  2000  this  year. 

In  addition.  TriWest  is  studying  re¬ 
quests  for  proposals  for  voice  over  IP 
(VOIP)  telephone  service.  "We've  not 
yet  made  the  final  decision  to  go  ahead 
with  that.”  Gibson  says,  “but  we’ve 
done  a  cost-benefit  analysis,  and  we 
think  it’ll  pay  for  itself  in  two  years.” 

TriWest  is  understandably  nervous 
about  the  health  of  its  telecommunica¬ 
tions  suppliers:  Its  local  service  is  pro¬ 
vided  by  Qwest  Communications  In¬ 
ternational  Inc.  and  its  long  distance 
by  WorldtOm  Inc.  Gibson  says  the 
uncertainty  surrounding  these  compa¬ 
nies  played  a  factor  in  his  decision  to 
invest  in  VOIP  this  year. 

Getting  Out  Front 

Leaders  must  anticipate  change,  and 
some  Premier  100  IT  Leaders  are  doing 
just  that  by  adjusting  their  IT  spetnling 
—  before  anybody  tells  them  to.  Emcor 
Group  Inc.,  a  global  $3.7  billion  con¬ 
struction  firm  in  Norwalk.  Conn.,  has 
enjoyed  robust  fiscal  health  throughout 
the  economic  downturn.  But  because 
construction  lags  the  general  economy, 
group  CIO  Joseph  A.  Puglisi  is  tighten¬ 
ing  his  organization’s  belt  in  the  budget 
proposal  he’s  now  developing.  "We 
may  have  to  control  spending  over  the 
next  12  to  18  months,  and  Pm  prepping 
my  budget  accordingly.” 

PugUsi  has  told  IT  managers  to 
present  their  budget  needs  in  three 
columrts:  committed  costs,  money 
needed  to  sustain  the  level  of  services 
Emcor's  IT  provided  in  2002  and  mon¬ 
ey  the  company  would  need  to  spend  in 
order  to  improve  services.  Puglisi  says 
“high&lutin  wanru-haves”  are  unlikely 
to  make  the  cut  in  2003. 

Improved  security  is  a  must-have, 
though,  and  it's  an  area  Emcor  will 
stress  in  2003.  Puglisi  says  he’s  particu¬ 
larly  concerned  about  the  company’s 
Lotus  Notes  system.  Emcor  has  67  far- 
flung  operatiftg  units  and  ofien  grows 
through  acquisition  (it  bought  16  com¬ 
panies  in  2002  alone). 

Often,  an  employee  of  one  Emcor 
unit  is  asked  to  perform  duties  for  oth¬ 
er  units  in  his  geographic  r^on.  This 
causes  secure-access  problems.  “Notes 
has  very  good  security  mechanisms, 
but  they’re  rigidly  defined,"  Puglisi 
says.  "If  you  tell  Notes,  The  data  with¬ 
in  an  app  is  unique  to  a  company.'  then 
a  worker  for  Company  A  can  only  see 
Company  A  data.  That's  a  good  thing, 
generally  —  but  we  need  to  let  him  see 
data  for  Companies  B  and  C.” 


Naturally,  though,  any  access  must 
be  secure.  So  in  2003.  Emcor  is  “un¬ 
derwriting  a  significant  investment 
in  strong  walls  with  good  tunnels,” 
Puglisi  says. 

Upping  the  Ante 

Given  the  generally  tight  budgets  this 
year,  one  of 2002*s  Premier  100  leaders 
may  be  the  envy  of  the  class  of  2003. 
Steve  Matheys,  CIO  at  Schiteider  Na¬ 
tional  Inc.,  will  see  his  budget  grow 
20%  to  25%  this  year.  The  $2.4  billion 
shipping  and  logistics  company  in 
Green  Bay.  Wis..  “spent  the  last  couple 
of  years  putting  our  business  in  order.” 
Matheys  says. 

Schneider's  eight-member  IT  steer¬ 
ing  committee  sifts  expenditures  into 
three  categories  —  run  the  business, 
grow  the  business  and  transform  the 
business  —  and  tries  to  spend  75%  of  all 
discretionary  dollars  on  the  third  cate¬ 
gory.  The  company  believes  it  can  use 
technology  to  squeeze  more  expenses 
out  of  its  supply  chain,  and  much  of 
the  increas^  2003  budget  will  go  to¬ 
ward  this  goal.  Matheys’  team  wants 
to  integrate  two  homegrown  applica¬ 
tions  that  have  heretofore  stood  alone: 
a  proprietary  decision-support  system 
that  weighs  thousands  of  factors  be¬ 
fore  recommending  a  shipping  method 
and  the  CRM-type  program  that  cus¬ 
tomer  service  representatives  use 
when  quoting  rates  over  the  phone. 

Foflow  the  Leaders 

Although  IT  leaders'  spending  plans 
for  this  year  depend  heavily  on  industry 
demands  and  company  needs,  there's 
one  important  constant:  In  leadii^  en- 
teqjrises,  IT  budgets  are  driven  by  busi¬ 
ness  strategy.  This  seemingly  straight¬ 
forward  linkage  has  eluded  CIOs  ever 
since  the  data  processing  department 
became  the  MIS  department 

Difficult  fiscal  times,  return  on  in¬ 
vestment  disappointments  following 
the  tech  spending  spree  of  1995-2000 
and  the  maturation  of  the  CIO's  role 
have  prompted  businesses  to  allocate 
their  IT  budgets  just  as  they  do  in 
other  departments.  The  Premier 
100  class  of 2003  welcomes  this  shift 
—  and  as  a  result  are  helping  their 
enterprises  succeed,  k 


Ulfelder  isu  freelance  writer  inSouth- 
boro.  Mass,  Contact  him  or  suf/elder@ 
yohoo.com. 
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HTML  and  Visual  Basic. 

Guzman  says  he  will  also  spend 
much  of  his  time  overseeing  Owens  & 
Minor’s  IT  outsourcing  deal  with  Dal- 
las*based  Perot  Systems  Corp.  In  July 
2002,  the  companies  expanded  and  ex¬ 
tended  their  existing  relationship  into 
a  comprehensive  seven-year.  S229  mil- 
lion  services  agreement.  Previously. 
Perot  Systems  handled  application 
development  and  network  operations, 
while  mainframe  operations  were  out¬ 
sourced  to  IBM.  “We  just  gave  Perot 
the  whole  pie,“  Guzman  says,  because 
projections  for  return  on  investment 
showed  a  savings  of  35%  over  the 
seven-year  contract. 

What  Guzman  likes  most  about 
the  Perot  Systems  deal  is  the  agility  it 
affords  Owens  &  Minor.  When  opera¬ 
tions  are  well  in  hand.  Perot  shifts 
its  personnel  to  development  tasks. 
Howard  Rubin,  an  analyst  at  Stamford. 
Conn.-based  Meta  Group  Inc.,  says 
such  ^ity  is  a  growing  need  for  cor¬ 
porate  IT.  “Right  now.  even  IT  depart¬ 
ments  that  have  cut  their  budgets  are 
too  inflexible,"  be  says,  calling  heavy 
upfront  expenditures  for  infrastruc¬ 
ture  “the  equivalent  of  buying  an  in¬ 
vestment  that  you  can’t  cash  m  for  20 
years."  Rubin  says  turning  fixed  costs 
into  variable  costs  will  be  a  major 
trend  among  IT  leaders  this  year. 

Telecom  Jitters 

Another  health  care  fum.  TriWest 
Healthcare  Alliance,  is  also  planning 
internally  focused  projects  for  2003. 
Premi<r  100  IT  Le^er  James  D.  Gib¬ 
son,  director  of  IT  at  the  Phoenix- 


based  company,  which  offers  health 
care  for  Department  of  Defense  em¬ 
ployees.  says  fViWest  will  upgrade  its 
800  desktops  from  Windows  NT  to 
Windows  2000  this  year. 

In  addition.  TKW^  is  studying  re¬ 
quests  for  proposals  for  voice  over  IP 
(VOIP)  tel^hone  service.  "We’ve  not 
yet  made  the  final  decision  to  go  ahead 
with  that,"  Gibson  says,  "but  we’ve 
done  a  cost-benefit  analysts,  and  we 
think  it’ll  pay  for  itself  in  two  years." 

TriWest  is  understandably  nervous 
about  the  health  of  its  telecommunica¬ 
tions  suppliers:  Its  local  service  is  pro¬ 
vided  by  (^est  Communications  In¬ 
ternational  Inc.  and  its  long  distance 
by  WorldCom  Inc  Gibson  says  the 
uncertainty  surroundii^  these  compa¬ 
nies  played  a  factor  in  his  decision  to 
invest  in  VOIP  this  year. 

Getting  Out  Front 

Leaders  must  anticipate  change,  and 
some  Premier  100  IT  Leaders  are  doing 
just  that  by  adjusting  their  IT  spending 
—  befcue  anybody  tells  them  ta  Emcor 
Group  InCo  a  global  S37  billion  con¬ 
struction  firm  in  Norwalk.  ConxL.  has 
enjoyed  robust  fiscal  health  throughout 
the  economic  downturn.  But  because 
construction  lags  the  general  economy, 
group  CIO  Joseph  A.  PugUsi  is  t^frten- 
ing  his  organization’s  belt  in  the  budget 
proposal  he’s  now  developing.  “We 
may  have  to  control  spending  over  the 
next  12  to  18  months,  and  I’m  prepping 
my  budget  accordingly." 

PugUsi  has  told  IT  managers  to 
present  their  budget  needs  in  three 
columns:  committed  costs,  money 
needed  to  sustain  the  level  of  services 
Efficor’s  IT  provided  in  2002  and  mon¬ 
ey  the  company  would  need  to  spend  in 
order  to  improve  services.  PugUsi  says 
“highf^utin  wanna-haves"  are  unlikely 
to  make  the  cut  in  2003. 

Improved  security  is  a  must-have, 
thou^  and  it’s  an  area  Emcor  will 
stress  in  2003.  Puglisi  says  he's  particu¬ 
larly  concerned  about  the  company’s 
Lotus  Notes  system.  Emcor  has  67  far- 
flung  opieratii^  units  and  often  grows 
through  acquisition  (it  bought  16  com¬ 
panies  in  2002  alone). 

Often,  an  employee  of  one  Emcor 
unit  is  asked  to  perform  duties  for  oth¬ 
er  units  in  his  geographic  region.  This 
causes  secure-access  problems.  "Notes 
has  very  good  security  mechanisms, 
but  they’re  rigidly  defined,"  Puglisi 
says.  "If  you  tell  Notes,  *1116  data  with¬ 
in  an  app  is  unique  to  a  company.’  then 
a  worker  for  Company  A  can  only  see 
Company  A  data.  ’That’s  a  good  thif^ 
gene^y  —  but  we  need  to  let  him  see 
data  for  Companies  B  and  C" 


Naturally,  though,  any  access  must 
be  secure.  So  in  2003,  Emcor  is  "un¬ 
derwriting  a  significant  investment 
in  strong  walls  with  good  tunnels." 
Puglisi  says. 

Upping  the  Ante 

Given  the  generally  li^t  budgets  this 
year,  one  of 2002’s  Premier  100  leaders 
may  be  the  envy  of  the  class  of  2003. 
Steve  Matheys,  CIO  at  Schneider  Na¬ 
tional  Inc.,  will  see  his  budget  grow 
20%  to  25%  this  year.  The  S2.4  billion 
shipping  and  logistics  company  in 
Green  Bay.  Wis..  "spent  the  last  couple 
of  years  putting  our  business  in  order." 
Matheys  says. 

Schneider^s  eight-member  IT  steer¬ 
ing  committee  sifts  expenditures  into 
three  categories  —  run  the  business, 
grow  the  business  and  transform  the 
business  —  and  tries  to  spend  7^  of  ail 
discretionary  dollars  cm  the  third  cate¬ 
gory.  The  company  believes  it  can  use 
technology  to  squeeze  more  expenses 
out  of  its  supply  chain,  and  much  of 
the  increased  2003  budget  will  go  to¬ 
ward  this  goal  Matheys'  team  wants 
to  integrate  two  homegrown  applica¬ 
tions  that  have  heretofore  stood  alone: 
a  proprietary  decision-support  system 
that  weighs  thousands  of  factors  be¬ 
fore  recommending  a  shipping  method 
and  the  CRM-type  program  that  cus¬ 
tomer  service  representatives  use 
when  quoting  rates  over  the  phone. 

FoHow  the  Leaders 

Although  IT  leaders’  spending  plans 
for  this  year  depend  heavily  on  industry 
demands  and  company  needs,  there's 
one  important  constant:  In  leading  en¬ 
terprises,  IT  budgets  are  driven  by  busi¬ 
ness  strategy.  This  seemingly  strai^t- 
forward  linkage  has  eluded  CK^s  ever 
since  the  data  processir^  department 
became  the  MIS  department. 

Difticult  fiscal  times,  return  on  in¬ 
vestment  disappointments  following 
the  tech  spending  spree  of 1995-2000 
and  the  maturation  of  the  CIO's  role 
have  prompted  businesses  to  allocate 
their  IT  budgets  just  as  they  do  in 
other  departments.  The  Premier 
100  class  of 2003  welcomes  this  shift 
—  and  as  a  result  are  helping  their 
enterprises  succeed.  I 


UlJeUer  is  a .^leelance  writer  in  South- 
boro.  Moss.  Concoct  him  at  sulfelder^ 
yahoacom. 
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The  VP  of  Sales  wants  data  from 
your  mainframe. 

The  guy  who  wrote  the  COBOL  application 
passed  away  in  1992. 

No  Problem, 

myEXTRA!  Smart  Connectors  let  you  do  new  things  with  your  legacy  assets. 


We  share  your  grief.  Unlocking  the  data  and  logic 
hidden  in  mainframes  has  been  a  struggle.  But  it's 
necessary:  up  to  50  percent  of  corporate  information 
resides  within.  Struggle  no  more.  With  myEXTRA! 
Smart  Connectors, you  can  grab  mainframe  data  — 
in  its  original  format  and  location  — for  use  with  web 
services,  extranets,  or  intranet  applications,  all  with¬ 
out  needing  a  time  machine. 

Find  out  more.  Download  our  White  Paper  entitled 
“Leveraging  Legacy  Applications  to  Serve  New 
Business  Initiatives"  at  www.attachmate.com/SCi. 
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WHAT  ARE  YOUR 


Projects? 

IT  leaders  will  pick  and  choose  their  projects  this  year, 
aligning  each  closely  with  business  goals.  Here  are  the 
top  five  projects  the  Premier  100  IT  Leaders  for 2003 
will  tackle  in  the  year  ahead. 

QjjjjjH  lAutomate  Your 

lEnterprise? 


1(T  WAS  A  CALCULATED  RISK, 

upgrading  a  1^00-user  People- 
Soft  system  from  HP  9000s  to 
less  expensive  servers  from  Dell 
Computer  Coip.  and  ftom  a 
Sybase  Inc.  database  to  Mi¬ 
crosoft  Corp.’s  SQL  Server. 

But  Damien  Bean,  vice  president 
of  corporate  systems  at  Hilton  Hotels 
Corp.  in  Beverty  Hills,  Calif.,  came  out 
on  top,  getting  the  lower  cost  and  high¬ 
er  performance  he  wanted.  To  do  it, 
Bean  says  be  had  to  convince  his  end 
users  and  vendors  that  “they  could  not 
afford  to  let  a  global  brand  name  like 
ours  fail” 


Corporate  IT  managers  are  strug¬ 
gling  with  lengthy  and  expensive  sup¬ 
ply  chain  management  projects  that 
rely  heavily  on  enterprise  resource 
planning  (ERP),  says  Jennifer  Chew,  an 
analyst  at  Forrester  Re¬ 
search  Inc.  in  Cambridge, 
Mass.  A  Forrester  survey  of  124  senior 
executives  at  North  American  compa¬ 
nies  that  was  conducted  in  August  and 
September  2002  showed  that  they  are 
spending  an  average  of  $6.8  million  and 
1.6  years  to  complete  such  projects. 

To  S|}eed  ERP  installations.  Chew 
suggests  that  customers  follow  process 
road  maps  provided  by  the  vendors,  use 


wwwcompuiefwoftd.com 
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Connect  With 
Customers? 


2  FOR  euc  CROSS  AND  BLUE 

Shield  of  Minnesota,  building 
self-service  Web  capabilities 
meant  the  difference  between 
winning  and  losing  several 
maior  clients,  including  retailer  Target, 
Northwest  Airlines  and  General  Mills. 

“Without  it,  they  would  not  do  busi¬ 
ness  with  us.”  explains  John  Ounjian, 
CIO  and  senior  vice  presi¬ 
dent  of  information  systems 
and  corporate  adjudication  services  at 
the  $S  billion  insurance  provider. 

So  when  Ounjian  explained  to  exec¬ 
utives  that  the  customer  relationship 
management  (CRM)  project  would 
cost  $15  millioi^  for  the  first  two  phases, 
they  didn't  blink. 

Companies  worldwide  will  spend 
$15.4  billion  on  CRM  initiatives  this 
year,  according  to  research  firm  Ab¬ 
erdeen  Group  Iitc.  in  Boston. 

C^omputerworlcfs  Premier  100  IT 
Leaders  will  also  spend  big  on  CRM, 
enough  to  rank  such  projects  sectMid 
on  their  priority  lists  for  2003.  Here, 
some  of  the  Premier  100  hcmorees 
offer  their  advice  for  making  these 
initiatives  work. 


industry  templates  that  spell  out  bow  to 
configure  ERP  systems  for  vertical  mar- 
Itfts  and  use  those  templates  to  dewlop 
proof-of-coDcept  applications  to  gain 
buy-in  from  business  users. 

Whatever  the  problems,  a  report 
last  year  from  Boston-based  AMR  Re¬ 
search)  Inc.  predicted  that  ERP  spend¬ 
ing  will  remain  steady  at  about  $16  bil- 
Uoo  per  year  between  now  and  2006, 
and  ComputeryvorUts  Premier  100  IT 
Leaders  ranked  ERP  systems  as  their 
top  project  for  2003.  Here,  several  Pre¬ 
mier  1(X)  hoDorees  vrho  have  survived 
these  implementations  offer  their  ad¬ 
vice  for  success. 

GetE^Buy-bi 

At  the  time  of  the  Hilton  upgrade  in 
late  2001,  no  company  had  run  such 
a  large  application  oa  such  compara¬ 
tively  m^est  platforms.  Rather  than 
using  contracts  to  force  the  vendors  to 
perform.  Bean  says  he  stressed  bow 
good  it  would  be  for  them  to  prove 
that  their  products  could  handle  the 


Clarify  Proiect  Goals 

Not  all  IT  executives  are  having  mon¬ 
ey  thrown  at  them  for  CRM  projects, 
ftjt  many  say  the  best  way  to  win  allies 
and  manage  expectations  is  by  sitting 
at  the  boardroom  table. 

At  Cardinal  Health  Inc.,  a  $7  billion 
maker  of  medicaL  surgical  and  labora¬ 
tory  products  in  McGaw  Park,  UL. 

Richard  Gtus,  senior  vice 
president  of  IT.  is  on  the 
cofxq>any's  capital  review  and  operat¬ 
ing  committees,  where  IT  projects  are 
approved  and  funded.  “That  way,  there 
are  no  surprises."  be  says. 

Ibo  often,  business  units  approve 
projects  and  then  confusion  sets  in 
when  the  IT  staff  is  asked  to  deliver  on 
somethii^  that's  uttclear.  At  Cardinal 
Health,  “all  of  that  is  resolved  before 
approval,"  Gtus  explains.  Hb  IT  team 
is  using  CRM  service  tools  to  improve 
product  returns,  pricing  and  availabil¬ 
ity.  and  order  friUtUroent. 

Dr.  John  Halamka,  CIO  at  CareGroup 
Healthcare  System,  wanted  to  Web-en- 
able  medical  records  so  that  patients 
could  access  their  own  lab  results. 
X-rays  and  doctor's  notes,  as  well  as 


needs  of  a  S3  billion  global  company. 

“Michael  Dell  promised  me  face 
to  face  it  would  worit."  and  Dell  Com¬ 
puter  provided  SKXLOOO  in  funds  to 
help  get  the  project  going,  says  Bean. 
He  says  be  sold  users  on  the  project 
by  explaining  how  the  "replatform- 


make  appointments  and  refill  pre¬ 
scriptions.  But  he  needed  to  take  a 
creative  approach  to  funding  at  Care- 
Group.  a  network  of  17  hospitals  asso¬ 
ciated  with  Harvard  Medical  SchooL 
In  the  mid-1990s,  academic  health 
care  faced  rampant  communication 
problems  between  doctors  and  ;»• 
tients,  Halamka  explains.  The  ability 
to  solve  this  problem  via  the  Web  cre¬ 
ated  “an  incredible  marketing  value.  So 
the  board  took  a  portion  of  the  market¬ 
ing  bu<^t  ($250,000  for  rollout  and 
$500,000  annually]  to  fund  the  proj¬ 
ect,"  be  says. 

Involve  the  Business  Side 

CRM  projects  can  redefine  a  company's 
entire  operational  infrastructure,  so  co¬ 
operation  among  executives  and  busi¬ 
ness  units  is  critical  to  CRM  project 
success.  “Even  the  CEO  must  say  cus¬ 
tomer  service  is  job  L*  says  Halamka 
St  Paul-based  Blue  Cross  and  Blue 
Shield  of  Minnesota  learned  the  im¬ 
portance  of  communicating  with  busi¬ 
ness  units  during  the  design  phase  of 
its  Web  self-service  screens.  Ounjian 
and  his  technical  team  designed  drop- 
d«}wn  boxes  that  they  thought  were 
logical  but  a  focus  group  of  etui  users 
found  the  feature  cumbersome  and  the 
wording  hard  to  understand.  “We  had 
to  adjust  our  logic."  be  says. 

Data  im^rity  issues  can  also  involve 
business  units.  At  LexisNex^  a  legal 
research  provider  to  Dayton.  Ohio,  the 
IT  staff  added  telesales  and  campaign 
management  capabilities  to  its  call 


ing”  could  save  the  company  money 
while  boosting  performance. 

When  users  frel  that  they're  being 
forced  to  cooqily.  Bean  says,  ‘^lu've  got 
to  drag  everybody  bdiind  you."  which 
creates  frictioQ.  But  if  you  get  everyone 
on  board  upfront,  "you've  eliminated 
most  of  the  frictioo  points."  be  explains. 

The  result?  Hihon  cut  $4.5  million 
to  $5  million  from  its  IT  budget  while 
boosting  performance  and  adding 
"enormous"  frinctioiuUity.  Bean  says. 

TahB  R  Slow  and  Steady 

Patience  and  prototyping  helped 
Fredrick  R.  Pond,  director  of  informa¬ 
tion  services  at  Portland.  Ore.-based 
Schnitzer  Group,  which  includes  real 
estate,  steel  and  recycling  companies, 
get  80%  of  the  way  through  a  complex, 
rrve-year  ERP  implemeoutioa 

The  project  im^es  a  transition 
from  a  leg^  Distal  VAX  to  Ed¬ 
wards  &  Ca's  OneWorld  sofrware  for 
financial,  distribution  and  manufactur¬ 
ing.  plus  sofrware  from  PeopleSoft  Inc. 


center.  But  during  that  time,  the  end 
users  changed  from  law  firm  librarians 
to  the  lawyers  themselves,  which  af¬ 
fected  customer  data.  Allan  McLaugh¬ 
lin.  senior  vice  president  and  chief 
technology  officer,  recommended  to 
the  marketing  group  that  it  bold  off 
rolling  out  a  $6  mtlUoo  CRM  system 
because  data  was  urueliable. 

"They  didn't  want  to  bear  that  But 
we  showed  them  that  ROI  would  go 
negative."  McLau^in  explains.  Today, 
both  maiketing  and  IT  are  working  to 
clean  up  contact  information. 

Over^  C30s  agree  that  disruption 
to  the  organization  is  inevitable  with 
CRM  projects  and  that  the  entire  com¬ 
pany  ^Kmid  be  prepared.  "Management 
must  understand  tluf  pots  and  pans  are 
going  to  foil  off  the  sbelC"  Ounjian  says. 
"These  transformations  are  disruptive 
and  need  an  iiudative  right  at  the  heel 
to  add  quality  improvements,  wfaiefa 
will  bring  stabili^."  I 


CbUetr  is  n  Jheefonce  writer  in  Sterfutg, 
Vo.  Contact  her  or  srcoUetr^giaoLcom. 


for  human  resources  and  payroll  So 
for.  tike  work  has  come  in  on  sdiedulc. 
or  dose  to  h,  and  under  budget:  the  fi¬ 
nal  work  will  wait  until  the  economy 
improves. 

Pond  says  be  broke  the  project  — 
which  has  cost  $4.3  million  so  for  — 
into  manageable  chunks,  listened  to 
users’  concerns,  compromised  when 
be  could  and  used  prototypes  to  prove 
chat  ERP  wasn't  the  end  ^  the  w^d. 

Pond  says  he  got  agreement  on  roost 
changes  by  working  with  management 
and  demonstrating  the  new  features 
and  lower  support  costs  the  system 
would  bring.  *1^  he  made 

were  mostly  to  rqx>rts  getkerated  by 
the  system,  rather  than  to  the  core 
database.  "Over  the  three-  or  four- 
month  period,  we  had  acceptance  — - 
but  maybe  nM  exdtement  —  for  bow 
things  would  change."  be  says. 

"Listening  is  the  Na  1  thing."  says 
Pond.  “You've  got  to  gain  an  under¬ 
standing"  of  users'  fears  and  concerns 
Continued  on  pqge  20 


PREMIER  100  IT  LEADERS  2003  c_.  19 


I  Connect  With 
I  Customers? 


FOR  BLUE  CROSS  AMO  BLUE 
Shield  of  Minnesota,  building 
self*scr.'ice  Web  capabilities 
meant  the  difference  between 
vs  inning  and  losing  several 
major  clients,  including  retailer  Target, 
Northvs'est  Airlines  and  General  Mills. 

"Without  it.  they  would  not  do  busi¬ 
ness  with  us,"  explains  John  Ounjian. 
CIO  and  senior  vice  presi¬ 
dent  of  information  systems 
and  corporate  adjudication  services  at 
the  S5  billion  iasurance  provider. 

S<t  when  Ounjian  e.xplaincd  to  exec¬ 
utives  that  the  customer  relationship 
management  (CRM  >  project  would 
cost  S15  million  for  the  first  two  phases, 
they  didn't  blink. 

Companies  worldwide  will  spend 
SL^.4  billion  on  CRM  initiatives  this 
year,  according  to  research  firm  Ab¬ 
erdeen  Group  Inc.  in  Boston. 

Computerworld'%  Premier  1(K>  IT 
Leaders  will  also  spend  big  on  CRM. 
enough  to  rank  such  projects  second 
on  their  priority  lists  for  200.1  Here, 
some  of  the  I*remier  100  honorees 
offer  their  advice  for  making  these 
initiatives  woric. 


Clarify  Project  Goals 

Not  all  IT  executives  are  having  mon¬ 
ey  thrown  at  them  fort^RM  projects. 
But  many  say  (he  best  way  to  win  allies 
and  manage  expectatiims  is  by  sitting 
at  the  boardroom  table. 

At  Cardinal  Health  Inc.,  a  $7  billion 
maker  of  medical,  surgical  and  labora¬ 
tory  pri>ducfs  in  McGaw  Park.  ML 
Richard  Gius.  senior  vice 
president  of  IT.  is  on  the 
company's  capital  review  and  i>pcrat- 
ing  committees,  where  IT  pitijecis  are 
approved  and  funded.  “That  way,  there 
are  no  surprises,"  he  says. 

Too  often,  business  units  approve 
projects  and  then  confusion  sets  in 
when  the  IT  staff  is  asked  to  deliver  on 
something  that's  unclear.  Xt  Cardinal 
Health,  “all  of  that  is  resolved  before 
approval."  Gius  explains.  His  IT  team 
is  using  CRM  service  tools  to  imprtwe 
product  returns,  pricing  and  availabil¬ 
ity.  and  order  fulfillment. 

Dr.  lohn  Halamka.  CIO  at  CarcGroup 
Healthcare  System,  wanted  to  Web-en- 
able  medical  records  so  that  patieni.s 
could  access  their  own  lab  results. 
X-ra>'s  and  doctor's  notes,  as  well  as 


make  appointments  and  refill  pre¬ 
scriptions.  But  he  needed  to  take  a 
creative  appntach  to  funding  at  Caa*- 
Group,  a  network  of  17  hospitals  ass4>' 
ciaicd  with  Harv'ard  Medical  SchtHii. 

In  the  mid-l‘WtK.  aeademic  hwlth 
care  faced  rampant  communication 
problems  between  JiKHors  and  pa¬ 
tients,  Halamka  explains.  The  ability 
to  solve  this  pniblem  via  the  Web  ere 
ated  “an  incredible  marketing  value.  So 
(he  bivard  umk  a  portion  of  the  market¬ 
ing  budget  |S250.0tX>  for  rollout  and 
SsOO.CKW)  annuallyl  to  fund  the  pn>i- 
ect."  he  says. 

Involve  the  Business  Side 

CRM  prtijects  can  redefine  a  comp.iny's 
entire  operational  infrastructure,  so  co- 
ivpcration  among  executives  and  busi¬ 
ness  units  is  critical  to  CRM  project 
success.  "Kven  the  CEO  must  say  cus¬ 
tomer  service  is  job  1."  sa^’s  Halamka. 

St.  Paul-based  Blue  Cross  and  Blue 
Shield  of  Minnc-sota  learned  the  im- 
ponance  of  communicating  with  bu.si- 
ness  units  during  (he  design  phase  of 
its  Web  self-service  screens.  Ounjian 
and  his  technical  team  designed  drop¬ 
down  bo.xes  that  the>’  thought  were 
U>gical.  but  a  focus  group  of  end  UM*rs 
found  the  feaiuiv  cumbersome  and  the 
wording  hard  to  understand.  “We  had 
to  adjust  uur  logic,"  he  says. 

Data  integrity  issues  can  also  invoke 
business  units.  At  LexisNexis,  a  legal 
research  provider  in  Dayton.  i>h»).  the 
IT  staff  added  telesales  and  campaign 
management  capabilities  to  its  call 
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center.  Rut  during  that  time,  the  end 
users  changed  fnim  law  firm  librarians 
to  the  lawj-ers  themselves,  which  af- 
fecusl  customer  data.  Allan  Mcljugh- 
lin.  senior  vice  president  and  chief 
lechnolt^’  otTicer.  recommended  to 
the  marketing  group  that  it  hold  off 
rolling  out  a  $r>  million  <-!RM  system 
because  data  was  unreliable. 

"  rhe>'  didn't  want  to  hear  that.  But 
we  showed  them  that  ROI  would  g«» 
negative."  McLaughlin  ex'plains  Today, 
both  marketing  and  IT  are  working  to 
clean  up  contact  information. 

Overall.  CIOs  agrxv  that  disruption 
to  the  organization  is  inevitable  with 
('KM  projects  and  that  the  entire  ettm- 
pany  should  be  prepared.  “Management 
must  understand  that  piHs  and  pam  are 
goir^  to  fall  off  the  shelf."  Ounjian  says. 
“'I'hese  transformations  are  disruptivv 
and  need  an  initiative  right  at  the  hs*el 
to  add  quality  impnwt.'ments.  which 
will  bring  stability."  t 


CnIUtt  is  a  frvcIanL'v  wrihrr  in  JJierlirtg. 
Vii.  Oinruit  her  at  stco/ietf'at»>l.ciMn. 
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industry  templates  that  spell  out  how  to 
ctjnfigurc  ERP  systems  for  vertical  mar¬ 
kets  and  use  those  templates  (u  develop 
pixK*f-of-concept  applications  to  gain 
buy-in  from  business  users. 

Whatever  the  pniblems.  a  report 
last  yirar  from  Boston-based  AMR  Re¬ 
search  Inc.  predicted  that  ERP  spend¬ 
ing  will  remain  steady  at  about  $16  bil¬ 
lion  per  year  between  now  and  2006. 
and  ComputerH-orfifs  Ih-emier  100  IT 
I.eaders  ranked  ERP  systems  as  their 
top  project  for  2003.  Here,  several  Pre¬ 
mier  100  honorees  who  have  survived 
these  implementations  offer  their  ad¬ 
vice  for  success. 

Get  Early  Buy-In 

At  the  time  of  (he  Hilton  upgrade  in 
late  2001.  no  company  had  run  such 
a  targe  application  on  such  compara¬ 
tively  modest  platforms.  Rather  than 
using  contracts  to  force  the  vendors  to 
perform.  Bean  says  he  stres-sed  how 
good  it  would  be  for  them  to  prove 
that  their  products  could  handle  the 


needs  of  a  53  billion  global  company. 

"Michael  Dell  promised  me  face 
to  face  it  would  work."  and  Dell  Com¬ 
puter  provided  SUMIOOO  in  funds  to 
help  get  the  project  going,  says  Bean. 
He  says  he  sold  users  on  the  project 
by  explaining  how  the  “rcplatform- 
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ing"  a>uld  save  the  company  money 
while  btM>sting  performancc. 

When  users  feel  that  ihcy’re  being 
ffwced  to  ciymply.  B^'an  .says,  “you've  got 
to  drag  everybody  behind  you."  which 
ca'ates  friction.  But  if  y«iu  get  esery»me 
on  bttard  upfmnt.  "you've  eliminated 
most  of  the  friction  points."  he  c.xplains. 

The  result?  Hilton  cut  $4.5  milU«*n 
to  $5  million  from  its  IT  budget  while 
btHisting  performance  and  .idding 
"enormous"  ftinctionaliiy.  Bean  says. 

Take  H  Slow  and  Steady 

Patience  and  prototyping  helped 
Fnslrick  R.  Pond,  director  of  informa- 
tk»n  services  at  IVirtland,  Ore. -based 
Schnilzer  Group,  which  includes  it'al 
estate,  steel  and  rcc>vHng  companii's. 
get  80^  of  the  way  thnuigh  a  complex, 
five-year  ERP  implementation. 

■fhe  project  iitvnivcs  a  transition 
fnim  a  legacy  Digital  VAX  to  M>.  Ed¬ 
wards  &  Co.'s  One  World  software  for 
financial,  distribution  and  manufactur¬ 
ing.  piu.s  software  fn>m  IVupleSofi  Inc. 


fitr  human  resources  and  payroll  So 
far.  the  work  has  come  in  on  schedule, 
or  close  to  it.  and  under  hudgei:  the  fi¬ 
nal  work  will  wait  until  the  ectwtomy 
improves. 

Kmd  says  he  bn>ke  the  projivl  — 
which  has  cost  $4  J  million  so  far  — 
into  manageable  chuntos  listened  to 
users’  concerns.  ct>mpromised  when 
he  could  and  used  pn«tm-pes  i»»  prose 
(hat  ERP  wasn't  the  end  of  the  world 

IVnd  says  he  gtn  agreement  on  mttst 
changes  by  wt>rking  with  managemeni 
.md  demonstrating  the  new  k^atures 
and  lower  support  costs  itu*  system 
wi>uld  bring.  I'lu*  changes  he  made 
were  mostly  to  reports  generated  by 
the  sy-siem.  rather  than  to  the  core 
database.  “Over  the  three-  or  four- 
month  period,  we  had  acceptance  — 
but  maybe  not  e.xciiement  —  for  how 
things  would  change."  he  says. 

“Listening  is  the  No.  I  thing."  says 
Pond.  “You've  got  to  gain  an  under¬ 
standing"  of  users'  fears  and  conceriLs 
Continued  on  pajte  20 


20 


CUMTOWMI  jMnni.NI) 


PREMIER  100  IT  LEADERS  2003 


www.computeTworld.com 


Continued  fmm  page 

and  then  demonstrate  how  ERP  can 

make  their  lives  better,  I’ond  advises. 

Schnitzer  now  closes  its  quanerl>’ 
books  in  II  days  rather  than  26  and 
can  instantly  update  labor  costs. 

Delegate  and  Conquer 

At  George  Washington  University. 
CIO  David  Swartz’s  goal  was  to  im- 
pitwe  ser>  ices  for  students,  staff 
and  suppliers  by  transitioning  off 
mainframe  applications.  The  new 
em'ironment  uses  SCT  Banner  from 
SCT  Corp.  in  Malvern.  Pa.,  for  stu¬ 
dent.  financial  aid  and  human  re¬ 
sources  data,  and  Oracle  Corp.'s 
Financials  suite  for  general  account- 
ii^  and  financial  tracking. 

Swartz  says  his  success  is  the  re¬ 
sult  of  an  early  plan  to  split  respon¬ 
sibility  for  the  tRP  implementation 
among  several  departments  at  the 
19.000-snjdent  Washington-based 
campus.  Each  department  got  con¬ 
trol  over  its  data  and  the  interhwes 
its  users  would  sec.  as  welt  as  a  data 
warehouse  so  users  could  create 
their  own  reports  without  customiz¬ 
ing  the  core  ERP  system.  1110  FT  or¬ 
ganization  keeps  the  system  up  and 
runnit^  and  provides  security  and 
the  corporate  help  desk. 

The  Oracle  and  SCT  Banner  sys¬ 
tems.  which  together  cost  about  $27 
million,  haven’t  saved  the  university 
money,  but  they've  made  life  easier. 
Travel  reimbursement  times  have 
dropped  from  weeks  or  months  to 
days,  and  students  can  register  for 
courses  and  order  books  online. 
With  users  creating  their  own  re¬ 
ports,  ITs  backlog  has  been  cut 
from  as  long  as  two  years  to  ■'almost 
nothing."  Swartz  says.  The  ERP  sys¬ 
tem  also  paves  the  way  for  new  a|>- 
pltcations  to  track  potential  donors. 

Swartz  says  he  agreed  to  a  “hand¬ 
ful"  of  customizations.  But  he  adds 
that  he  wa.s  usually  able  to  win  com¬ 
pliance  with  the  new  ERP  workflow 
by  communicating  "the  advantage 
of  moving  towards  the  enterprise 
model . . .  keeping  the  lines  of 
communication  open  and  keeping 
(users]  involved  in  the  project,  not 
just  dumping  it  down  on  them." 

Backing  from  top  university  lead¬ 
ership  was  sometimes  needed  to 
make  the  most  drastic  changes  in 
workflow  stick.  But,  says  Swartz. 

“I  think  it's  well  worth  it  if  you  can 
get  through  it."  I 


Scheiertsa  freelance  writer  in 
Soyfston.  Moss.  Contact  him  at 
rscheier(§;>charter.net. 
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WHEN  BAXTER  INTERNATIONAL 

Inc.  began  exploring  an  en¬ 
terprise  application  integra¬ 
tion  (EAl)  project  in  2001. 
its  plan  was  to  improve  the 
c.xchange  of  information  with  others 
in  the  health  care  industry,  including 
suppliers,  manufacturers, 
care  providers,  insurance 
companies  and  patients. 

“The  health  care  Industry  tradition¬ 
ally  has  been  very  fragmented,  with 
the  various  constituents  using  many 
different  types  of  systems  and  all 
having  different  needs."  says  (ohn  C. 
Moon.  CIO  at  the  Deerfield,  lll.-based 
provider  of  health  care  equipment  and 
supplies.  "We  see  EAl  as  a  way  to  help 
us  connect  our  systems  to  those  of 
suppliers,  physicians,  insurance  com¬ 
panies  and  others.  That  will  allow  us 
to  be  more  agile,  to  react  more  quickly 
to  changes  in  the  markciplace." 

EAl  involves  using  software  to  con¬ 
nect  a  variety  of  applications  into  a 
cohesive  unit  and  thereby  helps  enter¬ 
prises  align  systems  more  closely  with 
business  processes.  It’s  become  a  criti¬ 
cal  part  of  the  IT  strategy  at  many  or¬ 
ganizations  looking  to  meld  dbparaie 
systems  and  quickly  deliver  data  to 
employees,  customers  and  partners. 

Mark  Ehr.  an  analyst  at  Enterprise 
Management  Associates  in  Boulder, 
Colo.,  expects  the  EAl  market  to  grow 
as  companies  continue  to  integrate 
front-  and  back-oflice  applications. 
Web  services  and  legacy  applications. 
Some  analysts  say  companies  can  ex¬ 
pect  to  spend  $200,000  to  $400,000 
on  an  EAl  project,  including  software 
and  installation  costs. 

EAl  was  the  third  most-cited  project 
Premier  100  ff  Leaders  said  they  plan 
to  undertake  in  2003.  And  while  IT 
managers  who  have  completed  or 
launched  EAl  projects  say  there  can  be 
significant  benefits,  they  also  point  out 
that  such  efforts  require  specific  skills 
and  extensive  coordination  amoi^ 
multiple  departments.  Here,  they  offer 
advice  for  successful  EAl  projects. 

Measure  Expected  Benefits 

Baxter  will  launch  the  first  phase  of  its 
EAl  project  this  month,  using  an  inte¬ 
gration  platform  from  Fairfax,  Va.- 
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based  webMethods  Inc.  to  link  a  Web- 
based  customer  service  application  to 
its  enterprise  resource  planning  (ERP) 
system.  This  will  allow  customers  to 
place  orders,  check  order  status  and 
delivery  schedules,  and  conduct  other 
transactions  electronically.  Most 
customers  are  now  able  to  conduct 
business  with  Baxter  only  by  phone. 
Moon  says. 

Baxter  plans  to  expand  its  EAl  to 
supplier  systems  so  it  can  make  its 
supply  chain  operations  more  efficient 
through  inventory  reductions  and  faster 
electronic  ordering.  The  company  is 


■IlMMBiinriCHMiCMh 

MMMhNkanaeainiin 

wibkipMlftiMlTwrilMiii 


also  considering  using  EAl  software  to 
connect  medical  devices  to  its  ERP 
systems  so.  for  example,  patients  using 
home  kidney  dialysis  machines  could 
order  supplies  using  intelligent  2^ems 
installed  on  the  machines. 

When  it  came  to  getting  funding  for 
the  project.  Moon  says  Baxter  evalu¬ 
ated  the  need  for  EAl  based  on  the 
number  of  systems  it  would  affect,  the 
costs  and  the  potential  business  bene¬ 
fits.  Planners  presented  a  cost-benefit 
analysis  to  senior  managers  for  each 
system  that  could  benefit.  Moon  says. 
“We  made  the  case  that  there  would 
be  increased  speed  [of  transactions], 
fewer  people  to  do  interfaces  and  cost 
reductions,"  Moon  says.  It  took  about 
five  months  to  build  the  business  case, 
gather  information  on  available  EAJ 
products  and  get  approval  for  the  over¬ 
all  effort,  which  began  as  a  pilot  in  the 
faU  of 2001. 

EAl  isn’t  without  hurdles.  "It’s  both 
costly  and  complex,"  Moon  says. 
"There  are  a  lot  of  proprietary  archi¬ 
tectures  [among  systems  to  be  con¬ 
nected],  and  you  need  to  put  your 
technical  staff  through  a  great  deal  of 
training."  Baxter  has  relied  on  outside 
EAl  consultants  to  work  not  only  with 
Continued  on  page  21 
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and  then  demoostrate  how  ERP  can 

make  thcif  Uves  better  Pood  advises. 

Schnitzer  oow  doses  its  quarteriy 
books  in  U  days  rather  than  26  and 
can  instantly  update  labor  costs. 

Deiegate  and  Conquer 

At  George  Washington  University. 
CIO  David  Swartz's  goal  was  to  im¬ 
prove  services  for  students.  stafiT 
and  suppliers  by  transitioning  off 
mainffaine  applicatioos.  The  new 
environment  uses  S>CT  Banner  fiom 
SCT  Corp.  in  Malvern.  Pa.,  for  stu¬ 
dent.  ffnancial  aid  and  human  re¬ 
sources  data,  and  Oracle  Corp.’s 
Financials  suite  for  general  account¬ 
ing  and  financial  tracking. 

Swartz  says  his  success  is  the  re¬ 
sult  of  an  eariy  plan  to  split  respon¬ 
sibility  for  the  ERP  implementation 
among  several  departments  at  the 
19.000-studcot  Washington-based 
campus.  Each  department  got  con¬ 
trol  over  Us  data  and  the  interfaces 
its  users  would  see.  as  well  as  a  data 
warehouse  so  users  could  create 
their  own  reports  without  customiz¬ 
ing  the  core  ERP  system.  The  IT  or- 
ganlzatioo  keeps  the  system  up  and 
runnii^  and  provides  security  and 
the  corporate  help  desk. 

The  Oracle  and  SCT  Banner  sys¬ 
tems.  which  together  cost  about  $27 
miliion,  haven't  saved  the  university 
money,  but  tfaeyVe  made  life  easier. 
Travel  reimbursement  times  have 
droi^aed  from  weeks  or  months  to 
day^  and  students  can  register  for 
courses  and  order  books  online. 
With  users  creating  their  own  re¬ 
ports.  ITs  backlog  has  been  cut 
foom  as  long  as  two  years  to  "almost 
nothing,"  Swartz  says.  The  ERP  sys¬ 
tem  also  paves  the  way  for  new  ap- 
plicatioas  to  track  potential  donors. 

Swartz  says  he  agreed  to  a  "hand- 
fol"  of  customizations.  But  he  adds 
that  he  was  usually  able  to  win  com¬ 
pliance  with  the  new  ERP  workflow 
by  communicating  "the  advantage 
of  moving  towards  the  enterprise 
model . . .  keeping  the  lines  of 
communicatioo  open  and  keeping 
(users]  involved  in  the  protect,  not 
lust  dumping  U  down  on  them.” 

Backing  from  top  university  lead¬ 
ership  was  sometimes  needed  to 
make  the  most  drastic  changes  in 
workflow  stick.  But.  says  Swartz, 

"I  think  it’s  well  word)  it  if  you  can 
get  through  it."  I 


Intrarate  Technology 
WithBusiness? 


Sdieter  is  d/reelonce  wrifer  in 
BqylsroR.  Moss.  Cwitoct  him  of 
rscheiert^diarterjiet. 


3  WHEN  BAXTER  INTERNATIONAL 

Inc.  began  exploriz^  an  en¬ 
terprise  applkation  integra¬ 
tion  (EAI)  protect  in  2001. 
its  plan  was  to  improve  the 
<»»rhangp  of  information  with  Others 
in  the  health  care  industry,  including 
suppliers,  manufacturers, 
care  providers,  insurance 
companies  and  patients. 

"The  health  care  industry  tradition¬ 
ally  has  been  very  fragmented,  with 
the  various  constituents  using  many 
different  types  of  systems  and  all 
havii^  different  needs,”  says  John  C 
Moon.  CIO  at  the  Deerfield.  ni.-based 
provider  of  health  care  equipment  and 
supplies.  "We  see  EAI  as  a  way  to  help 
us  connect  our  systems  to  those  of 
suppliers,  physicians,  insurance  com¬ 
panies  and  others.  That  will  allow  us 
to  be  more  agile,  to  react  more  quickly 
to  changes  in  the  marketplace.” 

EAI  involves  using  software  to  con¬ 
nect  a  variety  of  applications  into  a 
cohesive  unit  and  thereby  helps  enter¬ 
prises  align  systems  more  closely  with 
business  processes.  It's  become  a  criti¬ 
cal  pan  of  the  IT  strategy  at  many  or¬ 
ganizations  looking  to  meld  disparate 
systems  and  quickly  deliver  data  to 
employees,  customers  and  panners. 

Mark  Ehr,  an  analyst  at  Enterprise 
Management  Associates  in  Boulder. 
Colo.,  expects  the  EAI  market  to  grow 
as  companies  continue  to  integrate 
front-  and  back-office  applications. 
Web  services  and  legacy  applicatioDs. 
Some  analysts  say  companies  can  ex¬ 
pect  to  spend  $200,000  to  $400,000 
on  an  EAI  project  including  software 
and  installatioD  costs. 

EAI  was  the  third  most-cited  project 
Premier  100  IT  Leaders  said  they  plan 
to  undertake  in  2003.  And  while  IT 
managers  who  have  completed  or 
launched  EAI  projects  say  there  can  be 
significant  benefits,  they  also  point  out 
that  such  efforts  require  specific  skills 
and  extensive  coordination  among 
multiple  departments.  Here,  they  offer 
advice  for  successful  EAI  projects. 

Measure  Expected  Benefits 

Baxter  will  launch  the  first  phase  of  hs 
EAI  project  this  month,  using  an  inte¬ 
gration  platform  from  Fairfax.  Vl- 


based  webMethods  Inc.  to  link  a  Web- 
based  customer  service  application  to 
its  enterprise  resource  planning  (ERP) 
system.  This  will  allow  customers  to 
place  orders,  check  order  status  and 
delivery  schedules,  and  conduct  other 
transactions  electronically.  Most 
customers  are  now  able  to  conduct 
business  with  Baxter  only  by  phone, 
Moon  says. 

Baxter  plans  to  expand  its  EAI  to 
supplier  systems  so  It  can  make  its 
supply  chain  operations  more  efficient 
throu^  inventory  reductions  and  foster 
electronic  ordering.  The  company  is 


also  considering  using  EAI  software 
connect  medical  devices  to  hs  ERP 
systems  so.  for  example,  patients  using 
home  kidney  dialysb  machines  could 
order  supplies  using  intelligent  agents 
installed  on  the  machines. 

When  it  came  to  getting  funding  for 
the  project.  Moon  says  Baxter  evalu¬ 
ated  the  need  for  EAI  based  on  the 
number  of  systems  it  would  affect,  the 
costs  and  the  potential  business  bene¬ 
fits.  Planners  presented  a  cost-benefit 
analysis  to  senior  managers  for  each 
system  that  could  benefit.  Moon  says. 
"We  made  the  case  that  there  would 
be  increased  speed  [of  transactions], 
fewer  people  ro  do  interfaces  and  cost 
reductions."  Moon  says.  It  took  about 
five  months  to  build  the  business  case, 
gather  infonnation  on  available  EAI 
products  and  get  approval  for  the  over¬ 
all  effort,  wfaidi  bq^  as  a  pilot  in  the 
foUof200L 

EAI  isn't  without  hurdles.  "It's  both 
costly  and  complex."  Moon  says. 
"There  are  a  lot  of  proprietary  archi¬ 
tectures  [among  systems  to  be  con¬ 
nected],  and  you  need  to  pul  your 
technical  staff  through  a  great  deal  of 
training"  Baxter  has  relied  on  outside 
EAI  consultants  to  work  not  only  with 
Continued  on  page  21 
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the  Real-Time  Enterprise! 
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real-time  entefpffs^ 

Want  to  exchan9e  innovative  ideas  and 
.strategies  wtth  other  top  IT  CMecutives? 
Then  attend  Computerworld^  Premier 
100  IT  Leaders  Conference,  the  ONLY 
confererKe  where  you  can  hear  from  — 
and  network  with  —  Computerwodd’s 
Premier  100  (T  Leaders. 


who  Are  the  Premier  1007 

They're  a  unique  set  of  award  winning  FT 
executives  with  valuable  lessors  to  share 
and  advice  to  offer  YOU.  They  are  teth* 
noiogists  who  understand  business 
needs,  take  calculated  risks  and  lead 
through  innovation  They  are  CIOs,  vice 
presidents  of  IT,  directors  of  IT  and 
business  managers  honored  as 
Computerwprld's  Premier  100  from  a 
wide  swath  of  vertical  industries.  When 
you  attend  this  unique  conferetKe,  yoi/ff 
hear  proven  examples  of  how  ttrese  IT 
Leaders  have  advartced  djaiMyi 
tiors  through  langf^iwIe^diHp 
proven  strai^ 
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HOTEL  RESERVATIONS 

DC  ii  tht  ofHdal  trawal  eon^tny  for  tht  Compulon«or1d  frtnriv  100  IT  Loodm 

Confaronn.  TTwy  art  your  otw  iwp  <hop  for  vcItatM  dUcountid  rMM  on  fwM 

TO  fOMivo  ■  hotot  room,  pltate  vWt 

www.premier100.com/west 

•rtd  chock  tho  Houtirtg  RoMrvatioro  pogo.  or  vah 

www.etcentral.com 

can  ako  €•■  our  Conforonoe  Homing  Uno  at 

1-800-340-2262 

f  A? 

JW  Marriott 
Dosart  Wdgt 
Rasort 

1  SCDttsUe.  Aruona 

For  more  information  oi  to  register,  visit  www.premier100.com/west  or  ral'  t  800  882  "onn 
Oi  simply  complete  and  fa*'mail  the  reqistratr  apid  miti  n  -n  tr  ,  ,, 


Application  for  Conference  Registration 

TO  REGISTER:  1 1  QUESTIONS? 

•  Fax  this  form  to  508-626*8524  |  •  call:  Pam  Malingowski  at  800-883-9090 

•  Or  regi^  online  at  vvvw.pfernier100.com/west  I  .  p, ooregecomputerworld.com 

•  You  will  receive  a  confirmation  via  email  1 

CODE  WEST 

jxjyj 

IT  LEADERS 

CONFERENCE 

February  23-25,  2003 
JW  Marriott  Desert 
Ridge  Resort 
Scottsdale,  Arizona 

All  dodai  amounts  are  in  U  S  funds,  registtaitons  entiude  full  access  to  all  sessions,  the  E»po,  meals  el— 

and  receptions  Transpoftation  and  hotel  accommodations  are  your  responsibility  and  can  be  Registration  Registration 

resenred  by  viSrtinq  www, etcentral.com.  calling  1-800-340-2262,  or  emailing  eventhousmgBidg  com  (througn  January  »7,  20031  lorafier  January  17,  2»3) 

IT  End-User.*  □  S1,495  □$1,795 

Non-Sponsoring  Vendor:**  □  $5,000  □  $5,000 

•n  End-Users  are  detir«o  as  those  who  ate  attending  Compulerwonos  Premier  100  (T  Leaders  Conference  with  an  intent  (and  an  (T  spending  Budget)  to  potential¬ 
ly  Buy/purctiase  hardwaie/software/servicevetc  trom  ojr  contererice  sponsors  and  extiBnors  As  such,  account  representatives/busmess  devetopmeni  from  any 
company,  analysts,  venture  capitalists,  and  anyone  e'se  attending  who  does  not  have  IT  purchasing  influence  wilhm  then  organization  are  eidoded  trom  the  "IT 
End-User"  designation  Enforcement  oi  this  interoreiaiior  and  Doncy  is  a'  the  sole  discretion  o'  Computerworid  Questions’  Please  call  1  -800-883-9090 
••  vendo's  die  encouraged  to  participate  ,n  Computerwolid  s  Rnemie’  '00  IT  Leaders  Conference  through  sponsorship  'Detai's  are  available  by  calling  Leo  Lege’  at 
’-508-e2D82t2  '  Aiternattv^.  vendors  (as  well  as  veni-j-e  capiTaftsts.  eoudy  analysts  andotrier  -oan-IT  end-use'"  prcrfessionalsasdefifiedOy  Compulerworfd)  rnayapph 
tor  registraum  at  the  norvsponsonng  .enoor "  rate  Determination  o'  wtial  constitutes  a  '  non^ponsormg  lendor  legislralion  is  at  the  sole  discretion  ol  Computerworid 

Registration  Information:  (This  section  must  be  completed  in  order  to  process  your  application) 


liirst  Name:  _ 
Title:  _ 


Middle  Initial: _  Last  Name:_ 

_  Company: _ 


Street  Address: 
City: _ 


Phone  Number:  _ 


Suite.  Apt.,  etc.:  _ 
Zip/Postal  Code; , 
Extension: _ 


E-Mail  Address;. 


Fax  Number _ _ 

Badge  Name; _ _  _ _ 

Would  you  like  to  receive  infomutioo  about  playing  in  the  golf  outing  on  Sunday,  February  23rd  (PM)?  □  Yes  □  No 
Please  indicate  your  preferred  conference  shirt  sue:  Qs  Qm  Gl  GxL  □  XXL  □  XXXL 


□  Special  Services  Required?  (Pica 


Attendee  Profile:  (This  section  must  be  completed  in  order  to  process  your  application) 


Your  Organization’s  Business  /  Industry? 
(Check  Only  One) 

3  Transponaiiun 


J  Real  Estate 

□  Telecommunications 

9  Wholesale  Retail  inon-cumputer) 

9  Computet  Service  Provider 
9  Advertising  -  Marketing  .  Public  Kelaliuns 
9  Enlerlainmeni 
9  Educauun 
9  Food  Industry 
9  Covertimeoi Military 
9  Healthcare  /  Medical  Services 

□  Travel  /Hospitality  /  Recreation 
9  Maoufaciuruig  (oon-m 

9  Auiotaohile 

9  Transportation  /  Utilities  /  Energy 
9  Computers,  Corttmunicaiiuns  or  (Vriphvral  Equipmen 
'*  — le  Manuhetunnp 


Your  Primary  Job  Title  /  Function? 

(Check  Only  One) 

9  aacTo 
9  ^^cr  Presidcm  otlT 
9  Director.  Manager,  Supervisor  of  (T 
9  Other  IS  /  IT  Manager 
9  Chairman.  CEO.  Presideni,  COO 
9  Cro.  CosiroUer.  Treasurer 
9  GM,  VP.  Director 
9  Other  Corporate  '  Business  Manager 
9  Corporate  . '  Business  SiafT 
9  r 

Yow  Personal  IT/IS  Spending  Authority? 

9  tS  million- 
9  U  tniUtoo  -  S4.9  million 
9  tWODOO  -  $999,999 
9  SlOaOOO  -  $499,909 
9  Under  $100,000 
9  None 


9  Under  SOO 

What  te  your  Company  FT/IS  Budget? 

J  Overt!  billion 
9  $100  miUioii  -  $999.9  milliun 
9  $IORulliun-S99.9inilliuii 
9  SI  miltkin  -  9.9  million 
9  Less  than  $1  milliun 
9  None 


9  Hewletl-Packard  /  Cumpai^ 

J  Hitachi 
9  IBM 

□  Sun 
9  Other 

Your  Organizadoo's  Enterprise  Standard  for 
Mobile  Device  Management  Software? 

9  Aether  Systems 
9  Allihs 

9  Computer  Assoculcs 
9  Eatended  Systems 

□  Hewlett-Packard  '  Compaq 
9  IBM  Tivoli 

9  Landesk  Software 
9  Managesofi 
9  Marimba 
9  mFormation 
9  MicrosufI 
9  Mobile  Automation 
9  Novadiem 
9  Novell 
9  ON  Technology 
9  Pumatech 
9  Starfish 

□  Synchroloeic 
9  Wavelink 

9  XccUNel 
9  Other 

9  No  Standard  Vet  Established 


Payment  Method 


□  check  Enclosed  (checks  must  be  received  by  February  17. 
2003  payable  to;  Computerworid) 

Mail  to:  Computerworid,  Atm:  Pam  Maltngowski.  500  Old 
ConneCTicut  Path,  Framingham.  MA  01701 

□  American  Express  □  VISA  □MasterCard 
Account  Number: 


Card  Holder  Name: 


Signature  of  Card  Holder: 


CanCeUntiOtl  Policy  iAUifilieMij»,upn«ni  mpurewnamnuiUkiUionJ 
In  the  event  of  cancellation,  the  registrant  has  three  options: 

1)  He  or  she  may  substitute  anoiher  attendee  for  this  conference 

2)  He  or  she  may  transfer  this  registration  to  the  next  Premier  100* 
conference,  if  writieo  notice  is  teceived  by  February  4, 2003. 

3)  The  registration  fee  will  be  refunded,  less  1250  service 
charge,  if  written  notice  is  received  by  February  4. 2003. 

Please  send  cancellation  requests  via  email  to 
pl00reg(5K:omputerworld.com  or  caU  1-800-883-9090 


for  assistance. 


Computerworid  reserves  the  right  to  limit  and/or  refuse  any 
registration  for  any  reason. 
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Continued  from  page  20 
n*  staffers,  but  also  with  people  ic  oth¬ 
er  departments  like  customer  service. 

Share  Costs  With  Units 

Another  company  attempting  EAl,  GE 
Power  Systems  in  Atlanta,  began  a 
project  three  years  ago  and  is  now 
reaping  the  benefits.  The  subsidiary  of 
General  Electric  Co.  had  “a  collection 
of  business  units  running  as  indepen¬ 
dent  operations,  with  the  majority  of 
their  systems  not  interconnected."  says 
Alan  Boehme.  former  e-technology 


CIO  at  G£  I*ower  who  recently  left  to 
join  Best  Software  Inc.  as  executive 
vice  president  and  CIO. 

GE  Power  uses  the  webMethods 
platform  to  share  data  among  its  dis¬ 
parate  legacy  systems.  ERP  software 
and  Web-based  applications.  The  ben¬ 
efits  have  included  the  ability  to  send 
data  in  real  time  from  one  system  to 
another,  and  improved  quality  and 
accuracy  of  the  data. 

GE  Power  set  up  a  project  manage¬ 
ment  office  to  implement  EAl  and 
crack  its  benefits  to  the  company, 


Boehme  says.  Althou^  it's  centrally 
managed.  EAl  is  funded  by  individual 
projects  run  by  various  functional 
units  within  the  business  divisions. 
“That’s  where  the  benefit  accrues, 
so  we  pushed  the  cost  and  the  actual 
physical  work  into  the  functional 
units."  Boehme  says. 

The  decision  on  whether  to  invest  in 
EAl  was  determined  by  each  hmetion- 
al  unit  based  on  the  estimated  cost  of 
implementing  EAl  adapters  compared 
with  the  perceived  benefits. 

"A  lot  of  IT  departments  held  off  on 


investing  in  EAl  because  they  were 
waiting  for  a  maturation  in  the  technol¬ 
ogy.  and  they  were  waiting  for  the  mar¬ 
ket  to  shake  out  and  a  few  clear  leaders 
to  emerge."  Enterprise  Management's 
Ehr  says.  “EAl  products  have  reached 
a  maturation  level  in  the  past  couple  of 
years  that  make  them  considerably  eas¬ 
ier  to  implement,  resulting  in  a  mote 
rapid  ROl  than  was  possible  before."  I 


\'iolino  is  a  freeiance  writer  in  Mas  ■ 
sapequQ  Park.  N.Y.  Contact  him  at 
bvioUno(§ioptontine.net- 


Build  Business 
On  the  Web? 


4BUnEOUNDERANA¥ALAffCHE 

of  paper  requests  for  in¬ 
surance  bids.  Providence 
Washington  Insurance  Ca 
sometimes  took 
weeks  to  reply  —  a  delay 
that  proved  costly. 

"We  felt  that  we  lost  business  in  the 
past  because  we  were  too  slow  to  get 
price  quotations  out."  says  Edward  N. 
Levcille,  vice  president  of  systems  and 
CIO  at  tV  Providence.  Ri..  insur¬ 
ance  turn 

The  solutioa  was  a  Web-based  price 
quotation  system  —  an  extranet  portal 
for  third-party  independent  insurance 
agents  —  that  has  sped  up  the  accurate 
delivery  of  bids  for  custom  business 
insurance  contracts.  The  project  auto¬ 
mated  the  sales  process  and  saved 
money  on  internal  paper-shuffling. 

In  a  right  budget  year,  e-commerce 
IT  projects  haven't  lost  their  appeal 
Computerworlits  Premier  100  IT  Lead¬ 
ers  ranked  e-commerce  projects  fourth 
on  their  list  of  top  priorities  for  2003. 
But  the  rules  have  changed.  Required- 
payback  rimes  are  shorter,  often  no 
more  than  a  year.  E-business  initiatives 
tend  to  focus  on  improving  order  or 
sales'lead  management,  tuning  the 
sales  channel  or  creating  business 
partner  self-service  portals. 

The  goal  of  e-commerce  these  days 
is  to  increase  your  sales  volume  with 
the  same  number  of  employees  in  or¬ 
der  to  bring  down  the  cost  per  trans¬ 
action."  says  Gene  Alvarez,  vice  presi¬ 
dent  of  electronic-business  strategies 
at  Meu  Group  Inc.  in  Stamford,  Cona 


"If  you  can  take  phone  or  fax  transac¬ 
tions  and  do  them  via  the  Web.  you 
can  save  money." 

New  York-based  e-business  research 
firm  eMarketer  Inc.  pro¬ 
jects  that  2003  worldwide 
e-business  IT  expenditures  will  be 
S24S  billion,  up  49%  from  $164  billion 
in  2002.  Premier  100  IT  Leaders  who 
have  reaped  the  benefits  of  e-business 
projects  share  some  tips  for  success. 

BuM  in  Buffer  Tme 

With  Providence  Warrington's  extranet 
portal  independent  insurance  agents 
no  longer  need  to  submit  paper  bid  re¬ 
quests  to  the  company  via  fox  or  con¬ 
ventional  mail.  The  portal  also  replaces 
the  time-consuming  process  of  keying 
information  into  the  computer  system. 
Once  the  portal  is  complete.  Providence 
Washington  will  be  able  to  make  bids  in 
minutes,  vs.  taking  up  to  three  weeks 
with  the  paper-based  system. 

In  a  test,  agents  in  two  states  are 
now  using  the  extranet  portal  to  sub¬ 
mit  requests  for  bids;  the  goal  is  to  ex¬ 
pand  the  portal's  use  to  agents  in  14 
additional  states  by  nridyear.  The  IS- 
month  project  cost  about  S3  million 
and  is  expected  to  reap  a  return  on  in¬ 
vestment  within  three  years,  Leveille 
says.  Payback  should  come  from  a 
combination  of  improved  internal  pro¬ 
ductivity  and  additional  insurance  rev¬ 
enue  through  the  agents,  be  says. 

The  e-business  pitted  taught  Lev¬ 
eille  to  carefully  check  out  the  finan¬ 
cial  status  of  vendors  and  to  leave  ex¬ 
tra  time  for  project  completion.  tYou 


must]  accommodate  problems  that 
shouldn't  happen  but  will  when 
you  are  interfacing  multiple  sys¬ 
tems  together."  be  says. 

Get  the  Word  Out 

At  Tharco  Inc.  in  San  Lorenzo.  Calif, 
a  similar  project  allows  customers  to 
check  on  the  availability  of  different 
types  of  packaging  materials,  create 
and  track  orders  and  verify  order  de¬ 
livery  on  the  Web. 

Tharco  —  which  makes  corrugated 
and  foam  packaging  materials  for  cus¬ 
tomers  such  as  electronics  firms,  gro¬ 
cery  stores  and  wineries  —  was  look¬ 
ing  for  an  interactive  e-business  ap¬ 
proach  that  would  both  engage  cus¬ 
tomers  and  cut  Tharco's  internal  costs. 
It  chose  a  Web  front  end  from  Raleigh. 
N.C. -based  Hahi  Commerce  Inc.  for 
its  own  SAP  system.  Obtaining  orders 
over  the  Web  reduced  the  company's 
reliance  on  the  customer  service  rep¬ 
resentatives.  who  typically  receive  or¬ 
ders  by  phone  or  flu  and  then  key  the 
orders  into  the  computer  system,  says 
Bill  Piaon.  Tharco's  MIS  director. 

"It  saves  money  for  us,  and  for  the 
customers,  it  means  one  less  chance 
for  error  in  the  order.  And  because  it’s 
linked  to  our  SAP  system,  customers 
get  specific,  real-time  pricing  on  every 
order."  I^cton  says. 

The  Web-based  ordering  succeeded 
where  earlier  e-business  anempts  had 
foiled.  One  unsuccessful  approach  in¬ 
volved  a  Doninieractive  catalog  that 
didn't  include  prices;  another  failure 
was  a  third-party  boscing  arrangement 


that  didn't  eliminate  enough  paper¬ 
work.  Picton  says. 

Tharco's  Web  ordering  method  has 
proved  popular  with  customers  since  it 
went  live  in  March  2001.  and  it  now  ac¬ 
counts  for  about  10%  of  the  firm's  off- 
the-shelf  packaging  materials  business, 
or  about  6.5%  of  total  revenue,  Picton 
says.  That  success  came  partly  because 
Tharco  aggressivety  marketed  the  proj¬ 
ect  to  its  customers. 

"We  bad  to  reach  out  to  them  and 
show  the  people  who  do  the  daily  or¬ 
dering  how  it  works."  Picton  says,  “^e 
sent  our  people  to  the  customers'  focU- 
ities  to  train  them  in  using  it  Then  wc 
had  to  let  customers  try  it  out  for  free 
for  a  week.  That  was  the  only  way  that 
customers  got  into  it." 

Tharco's  three-month  Web  project 
cost  less  than  $1  million  and  has  al¬ 
ready  paid  for  itself.  Picton  says.  "We're 
waiting  to  show  a  profit."  he  says.  “But 
as  the  economy  picks  up  we  will  be 
able  to  suppon  several  times  our  cur¬ 
rent  revenue  with  the  combination  of 
our  existing  customer  service  staff  and 
this  Web  type  of  business  approach." 

Agribusiness  firm  ]  JL  Simplot  Co.  in 
Boise,  Idaho,  has  a  similar  goal  It  will 
launch  a  customer  self-service  Web 
portal  early  this  year  that  will  allow 
customers  to  order  products  or  check 
order  status.  The  company  expects  the 
portal  to  increase  revenue  and  reduce 
costs,  allowing  it  to  recoup  its  initial 
investment  of  about  SIOOXKX)  in  less 
than  a  year. 

"We  want  to  differentiate  ourselves 
in  the  marketplace  by  making  it  easier 
for  custoraeis  to  do  business  with  us," 
says  Roger  W.  Parks,  Simplot’s  vice 
president  of  IT  and  CIO.  "We  also 
think  this  eventually  will  allow  us  to  do 
more  business  with  fewer  eitqiloyees 
in  order  entry  and  customer  service."  I 


Alexatider  is  afieeiance  writer  in 
Edina,  Minn.  Contact  him  at  Sorion99 
^Yahooxom. 
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Continued  from  page  20 
IT  staffers,  but  also  with  people  in  oth¬ 
er  departments  like  customer  sers’ice. 

Share  Costs  With  IMs 

Another  company  attempting  EAl,  GE 
Power  Systems  in  Atlanta,  began  a 
project  three  years  ago  and  is  now 
reaping  the  benefits.  The  subsidiary  of 
General  Electric  Co.  had  "a  collection 
of  business  units  running  as  indepen¬ 
dent  operations,  with  the  majority  of 
their  systems  not  interconnected."  says 
Alan  Boehmc,  former  e-technology  * 


CIO  at  GE  Power  who  recently  left  to 
join  Best  Software  Inc.  as  executive 
vice  president  and  CIO. 

GE  Power  uses  the  webMcthixls 
platform  to  share  data  among  its  dis¬ 
parate  legacy  systems.  ERI’  software 
and  Web-based  applications.  The  ben¬ 
efits  have  included  the  ability’  to  send 
data  in  real  time  from  one  system  ut 
another,  and  improved  quality  and 
accuracy  of  the  data. 

GE  Power  set  up  a  project  manage¬ 
ment  office  to  implement  EAl  and 
track  its  benefits  to  the  company. 


Boehmc  says.  Although  it’s  centrally 
managed.  EAl  is  funded  by  individual 
projects  run  by  various  functional 
units  within  the  business  divisions. 
"That’s  where  the  benefit  accrues, 
so  we  pushed  (he  co.st  and  the  actual 
physical  work  into  the  functional 
units."  Boehme  says. 

The  decision  on  whether  to  invest  in 
EAl  was  determined  by  each  function¬ 
al  unit  based  on  the  estimated  cost  of 
implementing  EAl  adapters  compared 
with  the  perceived  benefits. 

"A  lot  of  IT  departments  held  off  on 


I  investing  in  EAl  because  the>  were 
I  waiting  for  a  maturation  in  the  tochnol- 
og>,  and  they  were  wailing  for  the  mar- 
^  kci  to  shake  out  and  a  few  clear  leaders 
to  emerge."  Enterprise  Management's 
Ehr  says.  “EAl  pntducts  have  reachc-d 
a  maturation  level  in  the  past  couple  of 
years  that  make  them  considerably  eas¬ 
ier  to  implement,  resulting  in  a  more 
rapid  ROl  than  w  as  possible  before."  I 

V'in/ino  «  a  freelance  writer  in  Afos- 
supequo  Park,  N.V.  Confoct  him  ur 
bviohno.a  opfonline.ner. 


Build  Business 
On  the  Web? 


BURIED  UNDER  AN  AVALANCHE 

of  paper  requests  for  in¬ 
surance  bids.  Providence 
Washington  Insurance  Ca 
sometimes  took 
weeks  to  reply  —  a  delay 
that  proved  costly. 

"We  fell  that  we  lost  business  in  the 
past  because  we  were  loo  slow  to  get 
price  quotations  out."  says  Edward  N. 
Levcille.  vice  president  of  systems  and 
CIO  at  the  East  Providence.  R,!..  insur¬ 
ance  firm. 

The  solution  was  a  Webrbased  price 
quotation  system  —  an  extranet  portal 
for  third-party  independent  insurance 
agents  —  that  has  sped  up  the  accurate 
delivery  of  bids  for  custom  business 
insurance  contracts.  The  project  auto¬ 
mated  the  sales  process  and  saved 
money  on  internal  paper-shuffling. 

In  a  tight  budget  year,  e-commcrcc 
IT  projects  haven't  lost  their  appeal. 
Computerworld's  Premier  100  IT  Lead¬ 
ers  ranked  e-commcrce  projects  fourth 
on  their  list  of  top  priorities  for  2003. 
But  the  rules  have  changed.  Required- 
payback  times  are  shorter,  often  no 
raojv  than  a  year,  E-business  initiatives 
tend  to  focus  on  improving  order  or 
salcs-lcad  management,  tuning  the 
sales  channel  or  creating  business 
partner  self-service  portals. 

■The  goal  of  e-commerce  these  days 
is  to  increase  your  sates  volume  with 
the  same  number  of  employees  in  or¬ 
der  to  bring  down  the  cost  per  trans¬ 
action."  says  Gene  Alvarez,  vice  presi¬ 
dent  of  elecironic-btRiness  strategies 
at  Meta  Group  Inc.  in  Stamford.  Conn. 


BY  STEVE  ALEXANDER 


"If  you  can  take  phone  or  fax  transac¬ 
tions  and  do  them  via  the  Web.  you 
can  save  money." 

New  York-based  e-business  research 
firm  cMarkcicr  Inc.  pro¬ 
jects  that  2003  woiidwide 
e-busincss  IT  expenditures  will  be 
S245  bilKon.  up  49%  from  SIM  billion 
in  2002.  Premier  100  IT  Leaders  who 
have  reaped  the  benefits  of  c-busine.*>s 
projects  share  some  tips  for  success. 

Build  in  Buffer  Time 

With  Providence  Washit^on’s  extranet 
portal,  independent  insurance  agents 
no  loiter  need  to  submit  paper  bid  re¬ 
quests  to  the  company  via  fax  or  con¬ 
ventional  mail.  The  portal  also  replaces 
the  time-consuming  process  of  keying 
information  into  the  computer  system. 
Once  the  portai  is  complete.  Providence 
Washington  will  be  able  to  make  bids  in 
minutes,  vs.  taking  up  to  three  weeks 
with  the  paper-based  system. 

In  a  test,  agents  in  two  states  arc 
'  now  using  the  extranet  portal  to  sub¬ 
mit  requests  for  bids;  the  goal  is  to  ex¬ 
pand  the  portal's  use  to  agents  in  14 
additional  states  by  midyear,  llie  IS- 
month  project  cost  about  S3  million 
and  is  expected  to  reap  a  return  on  in¬ 
vestment  within  three  years,  Leveille 
sal's,  layback  should  come  fmm  a 
combination  of  improved  internal  pro¬ 
ductivity  and  additional  insurance  rev¬ 
enue  through  the  agents,  he  says. 

The  e-business  projea  taught  Lev¬ 
eille  to  carefully  check  out  the  finan¬ 
cial  status  of  vendors  and  to  leave  ex¬ 
tra  time  for  project  completion.  "(You 


must!  accommodate  problems  that 
shouldn't  happen  but  w’Ul  when 
you  arc  interfacing  multiple  sys¬ 
tems  together."  he  says. 

Get  the  Word  Out 

At  Tharco  Inc.  in  San  I.orcnzo,  Calif, 
a  similar  profeci  ali«>W's  customers  to 
check  on  the  availability  of  different 
types  of  packaging  materials,  create 
and  track  orders  and  verify  order  de¬ 
livery  on  the  Web. 

Tharco  —  which  makes  corrugated 
and  foam  packaging  materials  for  cus¬ 
tomers  such  as  eleciixmics  firms,  gro¬ 
cery  stores  and  wineries  —  was  look¬ 
ing  for  an  interactive  c-business  ap¬ 
proach  that  would  both  engage  cnis- 
tomers  and  cut  Tharco's  internal  costs. 
It  chose  a  Web  front  end  from  Raleigh. 
N.C.-hased  Haht  Commerce  Inc.  for 
its  ow*n  SAP  sysienv  Obtaining  orders 
over  the  Web  rcduc'cd  the  company's 
reliance  on  the  customer  service  rep- 
resentatives.  who  typically  receive  or¬ 
ders  by  phone  or  fax  and  then  kc-y  the 
orders  into  the  computer  system,  says 
Bill  Picton,  Tharco’s  MIS  director 
"It  saves  money  for  us.  and  for  the 
customers,  it  means  one  les.s  chance 
for  error  in  the  order.  And  because  it's 
linked  to  our  SAP  s>'stcm.  customers 
gen  specific,  real-time  pricing  on  every 
order."  Picton  says. 

The  Web-based  t>rdering  succeeded 
where  earlier  c-busincss  attempts  had 
failed.  One  unsuccessful  approach  in¬ 
volved  a  noninicractivc  catalog  that 
didn't  include  prices:  another  failure 
was  a  third-party  hastily  arrangement 


that  didn't  eliminate  enough  paper¬ 
work.  Picton  says. 

Tharco's  Web  ordering  method  has 
proved  popular  with  customers  since  it 
went  live  in  March  2001.  and  it  now  ac¬ 
counts  for  about  10%  of  the  firm's  off- 
the-shelf  packaging  maleriaK  business, 
or  about  6.5%  of  total  res  enue.  Picton 
says.  That  succcs.s  came  partly  because 
Tharco  aggressively  marketed  the  proj¬ 
ect  to  its  eu-siomcrs. 

“We  had  to  reach  out  to  them  and 
show  the  people  who  do  the  daily  or¬ 
dering  how  it  worlcs."  Picton  says.  “Wc 
sent  our  people  to  the  customers'  facil¬ 
ities  lo  train  them  in  using  it.  Then  wc 
had  to  let  customers  try  it  out  for  free 
for  a  week.  That  was  the  only  way  that 
customers  got  into  it." 

Tharco's  three-month  Web  project 
cost  less  than  $I  millmn  and  has  al¬ 
ready  paid  for  itself.  Picton  says.  "We're 
waiting  to  show  a  profit."  he  says.  "But 
as  the  econont)'  picks  up,  wc  will  be 
able  to  support  scs'eral  times  our  cur¬ 
rent  revenue  w-ith  the  combination  of 
our  existing  customer  service  staff  and 
this  Web  type  ofbusincss  appruach." 

Agribusiness  firm  J.R.  Simplot  Ca  in 
Bouic.  Idaho,  has  a  similar  goal.  It  will 
launch  a  customer  sclf-scr\'ice  Web 
portal  early  this  year  that  will  allow- 
customers  to  order  products  or  check 
order  status.  ’I'he  company  expects  the 
portal  to  increase  revenue  and  reduce 
costs,  allowing  it  lo  recoup  its  iriitUI 
investment  of  about  $100,000  in  less 
than  a  year. 

“Wc  want  to  differentiate  ourscKvs 
in  the  marketplace  by  making  it  easier 
for  customers  to  do  business  with  us." 
says  Roger  W.  Parks.  SimpkH's  vice 
president  of  IT  and  CIO.  "We  also 
chink  this  eventual!)'  will  allow  us  to  do 
more  business  with  fewer  emplovees 
in  order  entry  and  customer  sm'icc."  • 


A/cjronder  is  afreeiatKC  writer  in 
Edina.  Minn.  Contoct  him  at  Sorion99 
(a>Vuhoo.ajm. 
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Improve  Your 
Core  Systems? 


THERE  ARE  FEW  rr  PROJECTS 

more  fraught  with  danger 
than  upgrading  core  systems. 
If  you  do  things  wrong, 
you’ve  crippled  the  work¬ 
horse  that  carries  the  business. 

On  the  other  hand,  the  benefits  of 
sucHa  project  can  be  enormous,  says 
W.  Qpuglas  Lewis,  execu¬ 
tive  vice  president  and 
CIO  at  Six  Continents  Hotels  Inc.,  an 
international  hotel  management  com¬ 
pany.  in  Atlanta.  Lewis  is  in  the  midst 
of  installing  a  revamped  central  Fescr- 
vation  system  and  local  operations 
management  systems  for  3JOO  hotels. 

To  make  the  project  succeed.  Six 
Continents  partnered  with  end  users 
from  the  start,  says  Lewis. 

“Involving  the  people  who  leave 
fingerprints  on  the  keyboards  is  crit¬ 
ical,  because  they  know  what  the  ho¬ 
tels  need,"  says  Lewis.  "If  we  had  ap¬ 


BV  AMY  HELEN  JOHNSON 


proached  this  from  an  IT  point  of 
view,  it’s  likely  we  would  have  built 
the  wrong  solution." 

Upgrades  of  core  systems  arc  among 
the  top  five  projects  the  Premier  100 
IT  Leaders  said  they'll  tackle  this  year. 
Getting  things  right  is  important  be¬ 
cause  core  system  upgrades  aren't 

cheap.  Lewis  and  other 
Premier  100  IT  Leaders 
share  strategie.s  for  improving  the 
odds  of  succeeding  at  these  large, 
critical  projects. 

Test  Your  Powers 
Of  Persuasion 

Although  Steve  Scott,  vice  president  of 
information  systems  division  at  Vision 
Service  Plan  (VSP)  in  Rancho  Cordova. 
Calif.,  says  he  expects  that  upgrading 
the  nemprofit  organization's  claims  sys¬ 
tem  will  lower  its  cost  structure,  the 
more  compelling  rationale  for  his  pro¬ 


ject  is  increased  functionality. 

Scott  says  he  envisions  the  network's 
20,000  optical  businesses  being  able  to 
do  more  self-service  tasks,  such  as 
checking  patient  eligibility  online.  The 
new  system  also  opens  up  the  possibil¬ 
ity  of  VSP’s  36  million  consumers  be¬ 
ing  able  to  use  the  Internet  rather  than 
the  telephone  to  do  things  like  check 
on  a  claim's  status,  he  says. 

This  type  of  business  case  is  com¬ 
mon.  according  to  Allison  Bacon,  an 
analyst  at  AMR  Research  Inc.  in  Bos¬ 
ton.  It's  hard  to  pin  down  a  return  on 
investment  for  a  core  system  upgrade, 
because  you're  spending  money  on 
something  that  already  works.  Selling 
the  project  to  upper  management  often 
requires  making  a  compelling  argu¬ 
ment  in  favor  of  hard-to-measure  ben¬ 
efits  and  new  features. 

Rent  the  Necessary  Brains 

If  it's  not  a  core  competency,  then  out¬ 
source  it.  say  IT  leaders.  Six  Conti¬ 
nents  hired  subcontractors  to  deploy 
the  new  systems  in  the  hotels  and  con¬ 
duct  training.  “It  doesn't  make  sense  to 
build  that  capability  internally  for  a 
one-time  activity,"  says  Lewis.  But  he 
relies  on  his  staff  to  do  the  application 
programming  because  they  know  the 
business  better  than  an  outsider  would. 

Henry  Volkman.  director  of  IT  and 
CIO  at  Del  Taco  Inc.  in  Lake  Forest. 
Calif.,  says  his  company  will  make  use 
of  outside  help  to  upgrade  its  254 
point-of-sale  s>'stems.  The  fast-food 
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chain  is  using  an  outsourcer  to  install 
the  hardware  in  its  restaurants,  rather 
than  stressing  its  busy  internal  staff 
with  that  chore.  It’s  also  working  with 
Microsoft  Corp.  to  design  a  SQL  Serv¬ 
er  inventory  database. 

The  vendor  of  an  application  always 
knows  its  ins  and  outs  better  than  you 
do,  says  Volkman,  so  it  only  makes 
sense  to  many  its  expertise  with  your 
business  knowledge. 

Bacon  says  (hat  having  a  mix  of  inter¬ 
nal  and  external  development  teams 
gets  you  the  most  skills  at  the  lowest 
cost.  Using  your  own  people  means 
spending  less  and  moving  faster.  But 
you  need  to  lean  judiciously  on  experi¬ 
enced  vendors  and  outsourcers  in  order 
to  gain  the  greatest  benefits  out  of  some¬ 
thing  that  is  new  to  your  (earn,  she  says. 

Make  Sure  Your 
CFO  Says  No 

“My  CFO  can  make  a  vendor  cry  and  a 
nickel  scream."  says  Volkman.  who 
meets  with  his  company's  top  financial 
executive  weekly.  He's  the  reason  the 
upgrade  project  is  on  budget.  Volkman 
says.  If  the  project  runs  into  a  snag.  FT 
has  to  find  a  way  to  fix  it  with  what 
money  is  on  hand.  "You'll  never  get 
him  to  agree  it  was  r^t  to  spend  more 
money  than  budgeted."  he  says. 

Volkman  adds  that  it  pays  to  hire  only 
the  best  project  managers.  “You  can 
take  a  good  manager  with  a  mediocre 
crew  and  run  rings  around  a  poor  man¬ 
ager  with  a  high-quality  crew,"  he  says. 

Lewis  also  lays  the  credit  for  keep¬ 
ing  his  project  on  track  at  the  feet  of 
talented  managers.  “I  can't  brag  about 
anything  unique  we  did,"  he  says.  “We 
just  managed  the  heck  out  of  it" 

Lewis  adds,  "I  have  a  premise  that 
big-bang  projects  blow  up  CIOs."  So  he 
stops  every  few  steps  to  evaluate  the 
results  of  the  latest  ''little  bang."  For 
example,  he  says,  putting  the  new  sys¬ 
tem  in  a  few  hotels  for  beta  testing  re¬ 
vealed  a  problem  with  the  communica-^ 
tion  s>'stems.  It  was  easier  to  change 
course  at  (hat  point  than  after  several 
hundred  hotels  were  involved,  he  says. 

Scott  echoes  that  strategy.  Interim 
checkpoints  are  a  must,  he  says,  and 
their  associated  performance  metrics 
must  be  put  into  the  plan  from  the 
ver>'  beginning.  But  it's  just  as  wrong 
to  be  a  slave  to  metrics  as  it  is  to  ig¬ 
nore  them,  he  says.  Sometimes  you 
have  to  do  a  reality  check  and  recog¬ 
nize  that  a  metric  isn't  w'orking  —  and 
then  you  find  another  one,  Scott  says.  I 


Johnson  is  a  Computerworld  contribut¬ 
ing  writer.  Contact  her  at  antyheleni§> 
pobox.com. 
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Improve  Your 
Core  Systems? 


5THBC  ARE  FEW  IT  PMUECTS 

more  with  danger 

than  upgrading  core  systems. 
If  you  do  things  wrong, 
you’ve  crippled  the  vrork* 
horse  that  carries  the  business. 

On  the  ocher  hand,  the  benefits  of 
such  a  prefect  can  be  enormous,  says 
W.  Douglas  Lewis,  execu* 
thre  vice  piestdenl  and 
CIO  at  Six  Continents  Hotels  Inc.,  an 
international  hotel  management  com* 
pany,  in  Atlanta  Lewis  is  in  the  midst 
of  installing  a  revamped  central  reser¬ 
vation  system  and  local  operations 
management  systems  for  3,200  hotels. 

To  make  the  prefect  succeed.  Six 
Contments  partnered  with  end  users 
from  the  start,  says  Lewis. 

"Involving  the  people  who  leave 
fingerprints  on  the  keyboards  is  crit¬ 
ical  b^use  they  know  what  the  ho¬ 
tels  need.*  says  Lewis.  "If  we  bad  ap¬ 


proached  this  from  an  IT  point  of 
view,  it's  likely  we  would  have  built 
the  wrong  solution.* 

Upgrades  of  core  systems  are  among 
the  top  five  projects  the  Premier  100 
IT  Lexers  said  they’ll  cackle  this  year. 
Gettii^  things  right  is  important  be¬ 
cause  core  system  upgrades  aren't 

cheap.  Lewis  and  other 
Premier  100  IT  Leaders 
share  strategies  for  improving  the 
odds  of  succeeding  at  these  large, 
critical  projects. 

Test  Vbur  Powers 
Of  Persuasion 

Although  Steve  Scott,  vice  president  of 
information  systems  division  at  Vision 
Service  Plan  (VSP)  in  Rancho  Cordova, 
Caltl,  says  he  expects  that  upgradii^ 
the  nonprofit  organization’s  claims  sys¬ 
tem  will  lower  its  cost  structure,  the 
more  compelling  rationale  for  his  pro¬ 


ject  is  increased  functionality. 

Scott  says  be  envisions  the  network’s 
20,000  optical  businesses  being  able  to 
do  more  self-service  tasks,  such  as 
cheekily  patient  eligibility  online.  The 
new  system  also  opens  up  the  possibil¬ 
ity  of  VSPs  36  million  consumers  be¬ 
ing  able  to  use  the  Internet  rather  than 
the  telephone  to  do  things  like  check 
on  a  claim's  status,  he  says. 

Tliis  type  of  business  case  is  com¬ 
mon,  according  to  Allison  Bacon,  an 
analyst  at  AMR  Research  Inc.  in  Bos¬ 
ton.  It's  hard  to  pin  down  a  return  on 
investment  for  a  core  system  upgrade, 
because  you're  spending  money  on 
something  that  already  works.  Selling 
the  project  to  upper  management  often 
requires  making  a  compelling  argu¬ 
ment  in  favor  of  hard-to-measure  ben¬ 
efits  and  new  features. 

Rent  the  Necessary  Bfams 

If  it’s  not  a  core  competency,  then  out- 
sotirce  it,  say  IT  leaders.  Six  Conti¬ 
nents  hired  subcontractors  to  deploy 
the  new  systems  in  the  hotels  and  con¬ 
duct  training.  "It  doesn't  mai^  sense  to 
build  that  capability  internally  for  a 
one-time  activity."  says  Lewis.  But  he 
relies  on  his  staff  to  do  the  application 
programming  because  they  know  the 
business  better  than  an  outsider  would. 

Henry  Volkman.  director  of  IT  and 
CIO  at  Del  Taco  Inc.  in  Lake  Forest, 
Calif.,  says  his  company  will  make  use 
of  outside  help  to  upgrade  its  254 
point-of-sale  systems.  The  fost-fbod 


chain  is  using  an  outsourcer  to  install 
the  hardware  in  its  restaurants,  rather 
than  stressing  its  busy  internal  staff 
with  that  chore.  It’s  also  woridng  with 
Microsoft  Corp.  to  design  a  SQL  Serv¬ 
er  inventory  database. 

The  vendor  of  an  application  always 
knows  its  ins  and  outs  better  than  you 
do,  says  Volkman,  so  it  only  makes 
sense  to  marry  its  expertise  with  your 
business  knowledge. 

Bacon  says  that  having  a  mix  of  inter¬ 
nal  and  external  development  teams 
gets  you  Che  most  skills  at  the  lowest 
cost  Using  your  own  people  means 
spending  less  and  moving  faster.  But 
you  need  to  lean  judiciously  on  ei^eri- 
enced  vendors  and  outsourcers  in  order 
to  gain  the  neatest  benefits  out  of  smne- 
thing  that  is  new  to  your  team,  she  says. 

Make  Sura  Ybur 
CroSaysNo 

"My  CFO  can  make  a  vendor  cry  and  a 
nickel  scream,*  says  Volkman,  who 
meets  with  his  company's  top  financial 
executive  weekly.  He's  the  reason  the 
upgrade  project  is  on  budget,  Volkman 
says.  If  the  project  runs  into  a  snag.  IT 
has  to  find  a  way  to  fix  it  with  what 
money  is  on  hand.  "You'll  never  get 
him  to  agree  it  was  ri^t  to  spend  more 
money  than  budgeted.”  be  says. 

Volkman  adds  that  it  pays  to  hire  cmly 
the  best  prefect  managers.  "You  can 
take  a  good  manager  with  a  mediocre 
crew  and  run  rings  around  a  poor  man¬ 
ager  with  a  high-quality  crew;"  he  says. 

Lewis  also  lays  the  credit  for  keep¬ 
ing  his  project  on  trade  at  the  feet  of 
talented  manners.  "I  cant  brag  about 
anything  unique  we  did,"  be  says.  "We 
just  managed  the  beck  out  of  it” 

Lewb  adds,  *I  have  a  premise  that 
big-bang  projects  blow  up  CIOs.*  So  be 
stops  every  few  steps  to  evaluate  the 
results  of  the  latest  "little  bang."  For 
example,  be  says,  putting  the  new  sys¬ 
tem  in  a  few  hotels  for  beta  testing  re¬ 
vealed  a  problem  with  the  communica¬ 
tion  systems.  It  was  easier  to  change 
course  at  that  point  than  after  several 
hundred  hotels  were  involved,  he  says. 

Scott  echoes  that  str^egy.  Interim 
checkpoints  are  a  must,  be  says,  and 
their  associated  performance  metrics 
must  be  put  into  the  plan  from  the 
very  beginning.  But  it’s  just  as  wrong 
to  be  a  slave  to  metrics  as  it  is  to  ig¬ 
nore  them,  be  says.  Sometimes  you 
have  to  do  a  reality  check  and  recog¬ 
nize  that  a  metric  isn’t  working  —  and 
then  you  find  another  one.  Scott  says.  I 


Johnson  is  a  Computerworld  contribut¬ 
ing  writer.  Contact  her  at  ainyheien@ 
pobox.com. 


It’s  all  the 

computers  you  need. 

Introducing  one  computer  that  works  like  more 
than  one:  the  Compaq  Tablet  PC.  Connect 
it  to  Its  optional  dock  and  It's  a  desktop.  Attach 
the  included  keyboard  and  it’s  ready  to  go  as 
a  laptop.  Or  write  right  on  the  screen  and  you  can 
create  editable  documents  without  a  keyboard 
at  all.  To  find  out  how  $1,699*  can  get  you  the 
computer  that  adapts  to  your  work  environment  call 
l'800-888-8129  or^sit  www.mmpaq.com/tabietpc/ad. 

When  it  really  matters,  choose  Compaq. 

The  OwiPoiq  Tablet  PC. 
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Secure  Your 
Company  Data? 


A  stronger  mamtgement  commitment  gives  rr 
secui1tynK)reck^,butprojectfunding,gov^- 
ment  regulation  and  ease  of  access  to  data  still 
pr^ent  big  challenges.  By  Dan  Verton 


For  IT  SECUffiTY  PROFESSIONALS. 
2003  promises  to  be  a  year 
ruled  with  old  and  new  chal¬ 
lenges.  Whether  balancing 
the  needs  of  security  with  the 
push  for  greater  access  to  data,  copii^ 
with  government  mandates  or  plan¬ 
ning  for  possible  budget  cuts,  IT  secu¬ 
rity  managers  have  their  bands  hUL 
Frank  M.  Richards  is  already  scram¬ 
bling  to  deal  with  those  challenges.  As 
CIO  at  Gebinger  Health  System,  a 
health  care  itetworic  in  Danville.  Pa.,  that 
serves  more  than  2  million  people,  he 
faces  an  April  deadline  for  compliance 
with  the  federal  Health  Insurance  Porta¬ 
bility  and  Accountability  Act  (HIPAA). 
The  law  will  require  b^th  care  organi¬ 
zations  to  saf^uard  patient  data  from 
unauthorized  access  and  disclosure. 

But  HIPAA  sets  goals  without  giving 
specifics  on  how  to  get  there,  so  Rich¬ 
ards  must  balance  the  legal  require¬ 
ments  with  a  demand  from  health 
professionab  for  ease  of  access  —  a 
dauntii^  challenge. 

‘Dus  can  be  particularly  problematic 
in  the  medical  Held,  where  care  pro¬ 
viders  are  under  tremendous  time  pres¬ 
sures."  he  says.  Understanding  work- 
flow,  assessing  risk  and  educating  users 
are  all  key  componrats  of  a  security  sys¬ 
tem  that  achieves  the  correct  balance 
between  access  and  control,  he  says. 

Gebinger’s  Electronic  Medical 
Record  (EMR)  program  focuses  on 
easing  access  to  data.  It  lets  physicians 
at  SO  clinics  use  mobUe  devices  to  or¬ 
der  medications,  receive  alerts,  enter 
patient  progress  nfUes  and  communi¬ 
cate  with  patients.  Another  program, 
MyChait,  lets  patients  access  their 
medical  information  via  the  Internet. 

Both  programs  raised  security  is¬ 
sues.  For  example,  secxirity  needs  dic¬ 
tated  that  the  database  that  powers 
MyChart  be  installed  on  hardware  sep¬ 


arate  from  the  EMR  system.  Richards' 
staff  b  also  evaluating  biometric  and 
proximity  devices  as  ways  to  stream¬ 
line  secure  network  access.  And  care¬ 
givers  accessing  patient  information 
via  the  Internet  will  be  required  to  use 
token  identification  in  addition  to  a 
virtual  private  netwoilt  or  other  en¬ 
cryption  method,  he  says. 

Richards  says  he  expects  2003  to  be 
the  year  when  security  technologies 
such  as  intrusion  detection  finally  be¬ 
gin  to  deliver  on  their  promises.  "Inad¬ 
equate  analysb  toob,  incompatibility 
with  existing  network  management 
software  and  inability  to  handle  large 
volumes  of  data  have  combined  to 
keep  us  from  deploying  these  toob  un¬ 
til  very  recently."  he  says. 

Intrusion-detection  system  fonction- 
ality  will  also  begin  to  merge  with  fire- 
watb  in  2003.  just  as  many  organiza¬ 
tions  begin  replacing  Hrst-generation 
appliances,  according  to  analyst  John 
Pescatore  at  Gartner  Inc. 

Strive  for  Better  Recognition 

Thb  will  also  be  the  year  when  many 
organizations  raise  the  profile  of  the 
IT  security  function.  Gebinger's  new 
security  business  plan  calb  for  the  cre¬ 
ation  of  a  chief  information  security 
offlcer  position.  *Dus  will  take  the  pre¬ 
sent  IT  system  security  officer  position 
and  elevate  it  to  a  more  senior  level,  and 
will  have  it  report  (to  corporate  leader¬ 
ship]  outside  of  IT."  Richards  says. 

In  Loudoun  County,  Va..  the  IT  de¬ 
partment  recently  hirod  its  first  infor¬ 
mation  systems  security  administrator. 
Previoudy,  IT  security  functions  were 
delegated  throughout  the  IT  depart¬ 
ment.  says  IT  director  Eugene  D.  TYox- 
elL  Dus  position  was  recruited  and 
filled  at  a  time  when  the  county  gov¬ 
ernment  has  a  hiring  freeze  in  place," 
which  reflects  a  new  understanding  by 


management  about  the  importance  of 
IT  security,  he  says. 

At  Gebinger,  Richards  also  received 
support  from  the  board  of  directors. 
wUd)  issued  a  statement  last  spring 
calling  for  a  "a  governance  structure 
that  supports  the  most  effective  and 
efficient  provbion  of  information  se¬ 
curity."  Thb  doesn't  mean  that  funding 
b  unlimited,  but  it  does  ensure  that  se¬ 
curity  will  be  given  a  higher  priority 
than  in  years  past,  be  says. 

And  most  IT  security  budgets  are 
reflecting  thb  new  emphasis.  IT  secu¬ 
rity’s  share  of  the  IT  budget  was  4.3% 
in  2002  but  will  rise  to  S.4%  by  200S. 
says  Pescatore. 

Gebinger  spends  about  S400.000 
annually  on  IT  security,  including  per¬ 
sonnel.  software  and  maintenance. 
Richards  says  be  expects  that  to  in¬ 
crease  to  about  S600,000  by  2005,  ex¬ 
cluding  any  systems  or  assistance 
needed  to  respond  to  new  threats. 

But  while  security  b  a  high  priority, 
funding  still  doesn't  come  easily.  The 
IT  component  of  Loudoun  County’s 
2002  anmial  indepicndent  financial  au¬ 
dit  included  network  security  —  anoth¬ 
er  first.  Among  the  audit’s  recommen¬ 
dations  were  performing  an  annual  se¬ 
curity  vulnerability  review  and  enhanc¬ 
ing  the  security  awareness  program  to 
ensure  that  all  employees  understand 
issues  and  policies,  says  TYoxelL  But  in 
today's  economy,  funding  an  IT  securi¬ 
ty  program  b  unlikely  because  it  would 
take  dollars  away  from  projects,  such 
as  new  schools,  roads  and  health  care. 

Gebinger  has  also  had  its  share  of 
economic  challenges.  Nonetheless, 
"investment  in  IT  has  been  supported 
consistently  by  senior  management 
and  the  bo^  of  directors,*  Richards 
says.  "As  a  20-year  veteran  of  IT,  I  can 
honestly  say  that  security  concerns  are 
more  a  part  of  people's  consciousness 
than  at  any  time  in  the  past"  I 


SamBTHlUL 

Robert  L  ORo.  vice  (nsldenl  of  IT  al  the  U.S.  Postal 
Service  and  a  nenrier  100  TT  leader,  describes  a 
ilmyeer  plan  to  secure  service's  Mrastructure 
through  sM.  ran.  sriow  -  and  hacker  attecte: 
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Optimize  Your 
Infrastructure? 


In  their  quest  to  improve  efficiencies  and  cut 
costs,rfleaderswillworktoprimetheirexist- 
ii^technologythroughluudwareconsolida- 
tion,  perfonrance  monKoring  and  application 
tuning.  By  Jaikumar  Vijayan 


ASVOCEPREStOENTOFMHSat 

Circuit  City  Stores  Inc.,  Wi¬ 
liam  E.  Mc^rey  Jr.  expects 
to  spend  a  lot  of  time  this 
year  kickii^  the  tires  on  bis 
company's  technology  infrastructure. 

Circuit  City  is  very  dose  to  achiev¬ 
ing  a  formal  Six  Sigma  quality  certifvca- 
tkm.  Key  to  obtaining  the  certification 
is  ensuring  that  Circuit  City’s  hardware 
and  software  infrastructure  is  t^ti- 
mized  for  maximum  system  av^abili* 
ty  and  service  levels,  McCorey  says. 

The  Richmond,  Va.-based  electron¬ 
ics  retailer  isn’t  alone. 

“Enterprises  are  being  asked  to  do 
more  wi^  tess.  Their  budgets  are  de¬ 
creasing  [and]  their  skill  sets  are  de¬ 
creasing,  while  what  they're  being 
asked  to  do  Is  gettiz^  increasingly 
complex,’’  says  Theresa  Lanovitz.  an 
analyst  at  Gartner  Inc. 

As  a  result,  expect  to  see  IT  efforts 
targeted  increasingly  at  improving  the 
use  of  existing  technology  throu^ 
projects  such  as  hardware  consolida¬ 
tion.  performance  monitorii^  and  ap- 
pUcadcm  tunit^  she  says. 

One  of  the  big  projects  Circuit  City 
is  considering  for  2003  is  a  Unix  serv¬ 
er  consolidation.  The  company  is  ex¬ 
ploring  the  possibility  of  reducing  its 
240  Hewlett-Packard  Ca  Unix  servers 
into  Superdome  and  RP  class  servers 
from  1^.  fr  has  similar  plans  to  con¬ 
solidate  its  13  IBM  AS/400  midrange 
systems  into  a  significantly  lower 
number  of  large  AS/400  boxes. 

Circuit  City  is  also  usii^  VMware 
Inc.’s  virtualization  software  to  boost 
usage  rates  on  its  Wintd  servers.  So 
far,  it  has  deployed  VMware  on  about 
80  of  its  more  than  230  Intel  boxes. 

The  goal  of  these  efforts  is  to  reduce 
infrastructure  and  administrative  costs 


by  up  to  15%.  says  McCorey.  The  use  of 
Pak)  Aho,  Calif-based  VMware’s  virtu¬ 
alization  technology  on  Wintel  servers 
has  already  pushed  utilizatioa  riues 
from  20%  to  nearly  60%.  At  the  same 
time,  Unix  server  utilization  rates, 
which  now  hover  around  60%,  are  ex¬ 
pected  to  be  pushed  to  more  than  80% 
as  a  result  of  the  planned  consolidation. 

“We  look  to  be  a  service  utility."  Mc¬ 
Corey  says.  'MHir  goal  is  to  keep  the  sys¬ 
tems  up  and  running  as  much  as  possi¬ 
ble  and  to  improve  our  performance." 

Keep  Tabs  on  Performance 

Performance  monitoring  is  a  key  com¬ 
ponent  of  infrastructure  optimization, 
says  Suzanne  Gordon,  vice  president 
of  IT  at  SAS  Institute  Inc  in  Cary.  N.C 

SAS  monitors  netwoik  performance 
and  key  server  performance  statistics 
using  resource  measures  from  Simple 
Network  Management  Protocol  and 
Windows  Management  Instrumenta¬ 
tion  collectors.  Gordon  says. 

Over  the  past  year.  SAS  has  also 
been  using  a  homegrown  system  to 
consolidate  all  of  its  change  manage¬ 
ment  and  resource-monitoring  data. 
The  system  features  automated  alerts 
that  notify  administrators  i^ten  a  per¬ 
formance  metric  "falls  outside  of  nor¬ 
mal  boundaries,"  Gordon  says. 

The  technology  has  allowed  SAS  to 
identify  undents^  systems  "to  see  if 
we  can  retire  or  reallocate  them."  she 
explains. 

For  instance,  a  special  conference- 
room  scheduling  system  is  being  re¬ 
placed  by  Microsoft  Outlook’s  sched¬ 
uler.  and  several  related  specialized 
reporting  systems  are  being  retired. 
Users  will  then  be  asked  to  find  that 
same  scheduling  information  in  the 
mmpany's  customer  relatioosfafr) 


management  system,  Gordon  says. 

As  part  of  its  technology  optimiza¬ 
tion.  SAS  also  recently  switched  from 
a  frame-relay  network  to  an  Internet- 
based  virtual  private  network  (VPN) 
to  capitalize  on  the  VPN's  lower  costs 
and  faster  speed.  Gordon  says.  Server 
and  storage  consolidation  projects  are 
also  in  the  works.  To  reduce  mainte¬ 
nance.  SAS  is  consolidating  4S  Unix 
servers  that  host  some  of  its  internal 
applications  into  10  to  IS  servers. 

Centiafize  [T  Resources 

Integrating  and  centralizing  the  oper¬ 
ations  and  management  o(  IT  infra¬ 
structure  is  also  a  good  way  to  opti¬ 
mize  it,  says  Mario  C.  Carlos,  head  of 
IT  at  Manila  Electric  Ca  in  Pasig, 
Philippines. 

Centralization  maximizes  the  shar¬ 
ing  of  resources,  makes  it  easier  to  de¬ 
velop  and  implement  a  disaster  recov¬ 
ery  plan,  minimizes  spare  capacity, 
and  provides  for  a  less  complicated 
data  communications  infrastructure, 
(Carlos  says.  It  also  makes  it  easier  to 
secure  the  infrastructure  and  provides 
for  easier  backup,  recovery  and  disk 
storage  management,  he  adds. 

The  utility  compiany  has  moved 
from  a  highly  distributed,  decentral¬ 
ized  environment  to  a  "centralized  and 
partially  meshed  architectuFe,”  C^arlos 
says.  Technologies  key  to  the  transi¬ 
tion  were  storage  arrays  from  EMC 
Corp.  for  data  sharing  across  main¬ 
frame  and  open  systems.  Storage  Tech¬ 
nology  Corp.  applications  for  remote 
backup  and  synchronization  of  local 
and  remote  data,  and  IBM's  Parallel 
Sysplex  system  to  share  mainframe  re¬ 
sources  across  the  organization. 

Understanding  business  and  ser¬ 
vice-level  requirements  is  key  to 
right-sizing  the  infrastructure,  says 
McCorey.  "You  cant  design  a  system 
unless  you  really  understand  uiul  the 
application  is  going  to  do  for  the  busi¬ 
ness  and  what  the  impact  of  either  a 
downtime  or  poor  porformance  is  go¬ 
ing  to  be."  says  McOney.  who  uses  us- 
histories  and  information  gleaned 
from  running  similar  applications  to 
forecast  needs  for  a  new  application.  M 
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Most  Premier  100  honorees  rely  on  traditional 
ROI  calculations,  such  as  net  present  value  and 
internal  rate  of  return,  to  help  demonstrate  ITs 
business  value.  By  Thotnas  Hoffrnan 


TOCPfEMER  100  IT  LEADERS 
didn't  reach  the  top  of  their 
professions  by  being  softies. 
Indeed,  a  vast  nuiority  of 
them  regularly  rely  upon 
hard-dollar  metrics  such  as  net  present 
value  (NPV)  and  internal  rate  of  return 
(IRR)  to  consistently  denumstrate  to 
top  brass  the  business  value  IT  invest* 
ments  are  expected  to  yield. 

That’s  what  sets  them  apart  from  so 
many  of  their  colleagues.  "Good  busi¬ 
ness-case  methodology  leads  to  good 
project  management,  but  it's  amazing 
how  many  companies  fall  short  here, 
primanly  due  to  politics  around  this," 
says  Stephen  ].  Andriole,  a  professor  of 
business  technology  at  VlUanova  Uni¬ 
versity  in  VUlanova.  Pa^  and  a  senior 
consultant  at  Arlington,  Mass.*based 
Cutter  Consortium. 

But  many  of  Computerworids  Pre¬ 
mier  100  honorees  appear  to  have  the 
discipline  needed  to  prove  the  value  of 
their  organizations'  IT  investments. 

"We  ai^ly  all  of  the  analytical  rigor 
and  financial  ROI  tools  against  each  of 
our  IT  projects  as  well  as  other  busi¬ 
ness  projects,”  says  Harriet  Edelman, 
senior  vice  president  and  CIO  at  Avon 
Products  Inc.  in  New  York.  Those  tools 
include  payback,  NPV  and  IRR  calcu¬ 
lations.  as  well  as  risk  analyses  on 
every  investment,  she  says. 

The  $6  billion  cosmebes  giant  also 
monitors  each  IT  project  to  gauge  its 
eflkiency  and  effectiveness  during  the 
course  of  development  and  applies  a 
red/yellow/green  coding  system  to 
reflect  the  current  health  of  a  project, 
says  Edelman.  A  monthly  report  about 
the  status  of  projects  that  are  valued 
at  more  than  S2^.000  and  deal  with 
important  strategic  content  is  pre¬ 
sented  to  senior  line  managers,  the 


CEO  and  the  chief  operating  officer. 

In  addition.  Avon  uses  an  invest¬ 
ment-tracking  database  for  every  IT 
project  to  monitor  project  costs  on  a 
rolling  basis.  The  approach  makes  it 
easier  for  the  company’s  IT  and  busi¬ 
ness  managers  to  quickly  determine 
whether  a  project  should  be  accelerat¬ 
ed.  delayed  or  canceled  and  assists  the 
finance  organization  in  forecasting 
requirements. 


TaRy  Soft  Costs 


Dennis  S.  Callahan  says  he.  too.  has 
Tut  a  strong  emphasis  on  governance” 
since  becoming  CIO  at  The  Guardian 
Life  Insurance  Company  of  America 
two  years  ago.  rallahan  hhs  done  so,  in 
pan.  by  applyii^  NPV  and  IRR  calcu¬ 
lations  to  ^  IT  projects  with  a  five- 
year  cash  flow. 

The  potential  [fallout]  from  inac¬ 
tion  could  result  in  loss  of  market 
share,"  s^  rallahan,  who  was  pro¬ 
moted  to  executive  vice  president 
Jan.  1.  So  Guardian's  approach  to  IT 
investments  "is  very  hard-doUar-  and 
metrics-oriented,  with  a  bias  toward 
action."  he  says. 

Still,  Callahan  and  his  team  do  have 
a  process  for  incorporating  "soR"  costs 
and  benefits  into  their  calculations. 
The>’  do  that  Callahan  says,  by  en¬ 
couraging  their  business  peers  "to  dis¬ 
cuss  how  an  investment  can  impact 
market  share  and  estimate  how  those 
numbers  arc  going  to  change.  Same 
thing  with  cost  avoidance  —  if  we  in- 
vesi  in  a  project,  [that's]  expeaed  to 
help  us  avoid  hiring  10  operations 
staffers  to  handle  growing  business- 
transaction  volumes." 

Like  Avon’s  Edelman.  Callahan  also 
keeps  close  tabs  on  capital  spending 
throughout  the  course  of  a  project. 


New  York-based  Guardian  has  a  proj¬ 
ect  management  office  that  has  access 
to  its  general  ledger  system  so  it  can 
continually  monitor  the  scope,  time 
and  costs  of  each  project  valued  at 
more  than  $100.0000.  according  to 
Callahaa 

Guardian  also  has  monthly  reviews 
of  variances  of  scope,  time  and  costs 
on  all  projects  costing  more  than 
$100,000.  “If  one  of  those  [variables]  is 
off.  we  can  review  the  business  case 
and  determine  whether  it  warrants  a 
change  in  game  plan,”  he  says. 

Using  returo-on-investment  calcula¬ 
tions  to  cost-justiiy  and  demonstrate 
the  value  of  IT  investments  to  senior 
management  is  only  one  of  the  tech¬ 
niques  Compurerworfefs  top  IT  leaders 
use  to  win  project  approvals,  say  Calla¬ 
han  and  others. 

"We  approach  everything  that  we  do 
in  terms  of  payback,"  says  Callahan, 
who  reports  directly  to  Guardian  Pres¬ 
ident  and  CEO  Dennis  Manning.  Man¬ 
ning  and  other  board  members  "really 
relate  to  that  kind  of  justification." 
Callahan  says.  "So  we  turn  that  Into 
hard-dollar  returns  and  benefits  for  ap¬ 
plication  development  and  infrastruc¬ 
ture  investments." 

'X!>ne  of  the  biggest  things  we  do  in 
demonstrating  value  to  the  CEO  and 
the  board  is  showing  that  everything 
we  do  reflects  the  company's  business 
strat^;y,”  says  Rick  Omartian.  chief 
financial  officer  for  Guardian’s  IT 
department. 


Dwide  and  Conquer 

Coming  Inc  uses  a  "division  strategy." 
which  calls  for  its  IT  and  business-unit 
leaders  to  get  together  every  six  to  eight 
weeks  to  determine  "ubere  we're  go¬ 
ing  and  how  we're  going  to  get  there." 
says  Howard  Piggee  Jr.,  director  of  IT 
and  CIO  at  Coming’s  Life  Sciences  di¬ 
vision  in  Acton,  Mass.  Hut  way.  the  IT 
investment  needed  to  support  a  busi¬ 
ness  initiative  "is  not  set  apart"  but  in¬ 
stead  is  included  in  the  business  divi¬ 
sion's  integrated  strategy,  says  Piggee. 

Within  the  Life  Sciences  division. 
Piggee  is  one  of  nine  executives,  in¬ 
cluding  the  business  unit  leader  and 
the  department  heads  for  sales,  human 
resources,  finance  and  new  product 
development.  Together,  they  weigh  the 
total  resource  requirements  of  various 
IT  investments  and  then  decide  as  a 
group  how  to  prioritize  them,  he  says. 

Of  course,  there  are  exceptions  to 
these  approaches.  At  Muscatine,  Iowa- 
based  HON  Industries  Inc,  the  manu¬ 
facturer's  board  of  directors  "typically 
don't  ask  us”  to  prove  the  value  of  IT. 
says  CIO  Malcolm  Fields.  "Instead, 
they  ask  if  we're  spending  enou^” 

That’s  because  HON  typically 
doesn't  spend  as  much  on  IT  as  a  per¬ 
centage  of  revenue  as  other  companies 
do.  claims  Fields.  "We  negotiate  prices 
very,  very  hard  and  try  to  focus  on  the 
20%  of  activities  that  give  us  60%  of 
the  value.” 

Even  that  approach  has  a  decidedly 
mathematical  ring  to  it  I 


Ami 
ifoor  and  financU 
ROI  took  agafeat 
each  of  our  IT  proj¬ 
ects  as  wel  as  other 
buiriness  projects. 


AMD 


The  AMD  Athlon'*  XP  processor  is  fast.  Very  fast.  And  fortunuely.  speed  is 
just  the  beginning.  This  processor  is  about  nx>re  than  just  megahertz.  Its  unique  design 
results  in  more  work  per  clock  tick,  giving  your  computers  a  more  efficient  way  to  work, 
and  your  people,  a  smarter  way  to  work.  Think  of  it  as  true  performance.  It's  just  one 
more  way  AMD  designs  and  builds  processors  with  your  IT  needs  in  mind.  We  always 
have.  We  alvrays  will.  To  learn  more  about  AMD’s  true  performance,  visit  www.afnd.com 
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Thc  it  workforce. 

once  lavished  with  high 
salaries,  large  s^-on 
bonuses  and  generous 
perks,  learned  the  mean¬ 
ing  of  austerity  with  the 
dot-com  bust  of  the  late 
1990s. 

For  some  IT  managers,  the  subse¬ 
quent  recession  has  offered  up  high- 
quality  workers  at  bargain  salaries. 

But  for  others,  budget  cuts  and  sufTing 
reductions  have  stalled  or  stopped  IT 
projects. 

At  the  start  of  this  new  year,  some  of 
the  2003  Premier  100  IT  Leaders  are 
putting  last  year  in  their  rearview  mir¬ 
rors  and  hoping  that  better  times  lie 
ahead.  Take  Bernard  Gay.  vice  presi¬ 
dent  of  enterprise  technology  and 
operations  at  Royal  Caribbean  Cruises 
Ltd.  in  Miami,  a  company  hit  hard  in 
the  aftermath  of  Sept  11.  Within  a  few 
weeks  of  the  attacks.  Royal  Caribbean 
had  cut  about  half  of  hs  400  IT  work¬ 
ers  —  nearly  all  of  its  contractors  and  a 
third  of  its  permanent  staff. 

But  while  the  organization  was  lean¬ 
er  in  2002,  Gay  says  it  was  more  effi¬ 
cient  as  well.  The  remaining  staffers 
were  trained  to  fill  gaps  after  the  lay¬ 
offs.  Some  took  on  roles  that  contrac¬ 
tors  had  filled;  others  were  tramed  to 
fill  technical  support  and  development 
jobs.  *^e  found  ourselves  actually 
managing  much  more  ef5ciently  than 


we've  done  in  the  past,”  Gay  says.  "It’s 
been  a  great  year,  and  going  into  2003, 
we  hope  to  t^e  that  energy  with  us.” 

Gay  foresees  incremental  growth 
in  Ro^  Caribbean’s  IT  staff  this  year 
and  hopes  to  do  more  projects  focused 
on  customers.  "We  want  to  have  a  sim¬ 
pler  view  of  the  customer”  —  that  is. 
tourists  and  travel  agents,  he  says.  "And 
we  want  the  customer  to  have  a  simpler 
view  of  us.”  That  includes  upgrading 
the  company  Web  site,  integrating  more 
enterprisewide  applications  and  simpli¬ 
fying  the  way  Royal  Caribbean  com¬ 
piles  analytical  data. 

Retrain  to  Retain 

Bill  Thomas,  a  senior  vice  president  at 
Providian  Financial  Corp..  a  SS.8  billion 
credit  card  provider  and  fmancial  ser¬ 
vices  company,  has  also  dealt  with  tay- 
ofis  recently.  San  Francisco-based  Pro¬ 
vidian  cut  approximately  a  third  of  its 
IT  staff,  or  about  250  people,  starting 
last  spring.  Meanwhile,  the  IT  organi¬ 
zation  launched  a  major  strategic  shift 
from  building  systems  to  integrating 
systems  in  an  effort  to  improve  effi¬ 
ciency,  which  changed  much  of  the 
needed  skill  sets.  At  the  same  time, 
Providian  reorganized  IT  from  a  de¬ 
centralized  to  a  centralized  structure, 
Thomas  says. 

The  layoffs  hurt  morale,  he  says,  but 
the  effect  was  less  severe  than  he  had 
expected.  And  although  he  believes 


morale  has  since  improved,  he  ac¬ 
knowledges  that  it's  not  as  high  as  it 
was  in  the  late  19SK)s.  when  Providian 
had  three  straight  years  of  double-digit 
profit  growth. 

This  year,  Providian  will  have  a 
flat  or  declining  IT  budget  of  about 
$450  million,  according  to  Thomas, 
with  a  promise  to  management  that 
projects  will  have  a  clear  return  on  the 
bottom  line.  To  that  end.  the  IT  depart¬ 
ment  has  dumped  some  of  its  applica¬ 
tion  development  work  and  out¬ 
sourced  other  functions.  It  will  also 
redeploy  personnel  into  other,  high^r- 
vahie  roles  and  boost  their  training. 

Grab  Hiring  Opportunities 

For  some  cost-conscious  IT  leaders 
at  growing  businesses,  the  recession’s 
effect  on  salaries  has  been  a  help. 

Greg  Schueman,  vice  president  and 
chief  technology  officer  at  Mercury 
Insurance  Group  in  Brea.  Califs  has 
increased  his  IT  department  by  10% 
since  2001,  to  about  130  woilters. 

"It's  actually  very  easy  to  find 
people,  because  there’s  such  a  pool 
available.”  he  says.  These  seasoned 
woriters  have  the  appropriate  certifica¬ 
tions  and  are  willing  to  work  for  less 
than  what  they  could  earn  in  a  boom¬ 
ing  economy,  Schueman  says. 

For  example,  he  recently  hired  an  Or¬ 
acle  DB2  database  administrator,  whom 
be  calls  "one  of  the  best  on  the  West 


Staff  layoffs  and  budget  cuts  have  put  IT  leaders’ 
management  skills  to  the  test.  Here’s  how  some 
have  picked  up  the  pieces  and  helped  workers  left 
behind  feel  informed  and  valued.  By  Rick  Saia 

Manage  Your 
Laborrorce? 
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Coast,”  for  less  than  what  he  would 
have  earned  two  years  aga  Schueman 
says  such  talent  commanded  annual 
salaries  of  about  $160,000  then;  today, 
they’re  earning  about  a  third  less. 

The  recession  has  also  brot^t  good 
news  for  John  A.  Bielec,  vice  president 
and  CIO  at  Drexel  University  in  Phila¬ 
delphia.  With  the  higher-education 
industry  growing,  he  says,  Drexel  is 
finding  it  easier  to  fill  IT  positicms  at 
wages  that  are  in  line  with  candidates’ 
expectations. 

Bielec  says  his  IT  organization  is 
lean,  which  in  boom  times  can  hamper 
efforts  to  find  —  and  keep  —  qualified 
people.  Whereas  his  annual  ttiroover 
rate  was  about  20%  to  30%  two  years 
ago,  be  esdinates  it  to  be  5%  today. 
And,  be  says,  *1  don’t  see  anybody 
teavii^  in  the  next  six  months.” 

Maria  Schaiet,  an  analyst  at  Meta 
Group  Inc.,  says  she  doesn’t  anticipate 
that  IT  q>ending  will  rebound  anytime 
soon,  at  least  not  until  around  midyear. 
Thoe’s  goii^  to  come  a  point  i^>ere 
something  is  going  to  have  to  ^ve.”  she 
says.  For  now,  IT  demand  is  in  a  hill, 
and  some  IT  shops  are  “selectivety  hir¬ 
ing”  experienced  help  where  it’s  need¬ 
ed,  such  as  in  netwo^  security  and 
database  administration,  Schafer  says. 

Take  a  SMIs  Inventory 

The  recessum  has  taught  some  com¬ 
panies  a  hard  lesson  about  bucketing 


DIANE  J.  BUNCH 


DREG  SCHUEMAN 


and  the  difficult  task  of  reducing  staff, 
according  to  Craig  Symons,  an  analyst 
at  Giga  Information  Group  Inc  in  Nor- 
weU,  Mass. 

To  prepare  for  an  economic  re¬ 
bound,  IT  organizations  will  be  more 
”aggressive  and  proactive"  in  taking  a 
skills  inventory  and  deciding  what 
they  need  for  the  future,  be  says. 

So,  how  much  will  they  rely  on  mast¬ 
ing  staff  as  opposed  to  contractors, 
outsourcing  or  hiring  new  full-time 
employees.’  The  primary  hctor,  says 
Symons,  is  availability. 

"If  you  can  grow  them  in-house, 
then  you’re  ahead  of  the  game,"  be 
says.  "Typically,  contract  employees 
are  more  expensive.” 

That’s  where  training  looms  as  a 
critical  factor. 

Because  Mercury  Insurance  is 
moving  from  a  Cobol-centric  to  a 
Java-centric  environment,  its  IT  pro¬ 
fessionals  are  being  retrained,  says 
Schueman.  He  adds  that  Mercury  is 
also  trying  to  provide  career  paths  for 
employees  to  keep  pace  with  those 
technological  changes. 

Gay  says  Royal  Caribbean's  IT  orga¬ 
nization  will  continue  to  grow  staff 
through  training,  ahbou^  the  com¬ 
pany  will  be  looking  at  more  efficient 
online  training  opportunities. 

At  the  Tennessee  Valley  Authority  in 
Chattanooga,  the  tuuion's  largest  pub¬ 
lic  power  supplier;  retraining  is  a  cor¬ 


nerstone  of  its  human  resources  strate¬ 
gy,  says  Diane  J.  Bunch,  senior  vice 
president  of  information  services.  She 
says  her  training  priorities  for  this  year 
are  security.  Web-enablement  and 
project  management 

Communicate  About  Changes 

A  tou^  economic  climate  can  inflict 
pain  on  many  organizations.  If  ignored, 
that  pain  can  spread  to  the  point  where 
it  affects  even  the  most  content  work¬ 
ers.  That’s  why  some  IT  managers 
continue  to  stress  the  importance  of 
treating  per^le  fairly  and  with  candor 
and  honesty. 

At  Royal  Caribbean,  morale  after  its 
IT  layo^  in  late  2001  was  "abysmal,” 
Gay  says.  But  CIO  Tcmd  Murphy  gave 
an  impassioned  speech  and  vowed 
to  stay  with  his  staffers  during  the 
changes  they  were  facing.  That,  plus 
ongoing  communication  with  the  stafE 
helped  boost  morale,  be  says. 

And  despite  the  recesskxi.  IT  man- 
^lement  scored  hi^  in  a  survey  of 
staffers,  Gay  says.  But  rather  than  be¬ 
ing  complacnit,  be  adds.  Royal  Carib¬ 
bean  managers  want  to  build  on  that 
momentum. 

When  Providian’s  IT  staff  was  told 
about  the  organizational  changes  that 
would  result  in  layoflEs,  *Sve  overcom¬ 
municated  to  [them  about)  why  this 
was  being  done,"  Thomas  recalls. 

That  made  all  the  difference  in  the 
world*  and  kept  them  focused  on  their 
work,  he  says.  And  because  those  who 
lost  their  jobs  were  treated  with  re¬ 
spect  and  given  good  severance  pack¬ 
ages,  he  adds,  that  also  had  a  positive 
effect  on  those  who  were  left,  though 
"it  didn’t  mean  it  was  easy.” 

little  things  like  those  go  a  long  way 
for  IT  leaders  IQte  Thomas.  TT  people 
are  different  from  everybody  else,"  be 
says.  Being  able  to  focus  on  important, 
interesting  work  that  can  help  advance 
their  careers  is  often  more  important 
than  money,  be  notes. 

And  something  quite  simple  is  just 
as  important:  "We  say  thank  you  when 
(they]  do  good  work."  Thomas  says, 
"and  that’s  the  most  important  thing 
you  can  do  that  [acts  as  a)  magk  wand 
for  IT  people.”  I 


Sain  is  a/ieelance  editor  and  writer 
in  ShneuRsbury,  Moss.  Contact  Aim  at 
ricfcsaia@towni^)xom. 
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Coast,”  for  less  than  what  he  would 
have  earned  two  years  Schueman 
says  such  talent  commanded  annual 
salaries  of  about  SI60.000  then:  today, 
they’re  earning  about  a  third  less. 

The  recession  has  also  brought  good 
news  for  John  A.  Btelec.  vke  president 
and  CIO  at  Drexel  University  in  Phila¬ 
delphia.  With  the  higher-education 
industry  growing,  he  says,  Drexel  is 
finding  it  easier  to  fill  IT  positions  at 
wages  that  are  in  line  with  candidates’ 
expectations. 

Bielec  says  his  IT  organization  is 
lean,  which  in  boom  times  can  hamper 
efforts  to  find  —  and  keep  —  qualified 
people.  Whereas  his  annual  turnover 
rate  was  about  20%  to  30%  two  years 
ago,  be  estimates  it  to  be  5%  today. 
And,  he  says,  ”I  don’t  see  anybody 
leaving  in  the  next  six  months.” 

Maria  Schafer,  an  analyst  at  Meta 
Group  Inc.,  says  she  doesn’t  anticipate 
that  IT  spending  will  rebound  anytime 
soon,  at  least  not  until  around  midyear. 
“There’s  going  to  come  a  point  where 
something  is  going  to  have  to  give,"  she 
says.  For  now.  IT  demand  is  in  a  lull, 
and  some  IT  shops  are  “selectively  hir¬ 
ing”  experienced  help  where  it’s  need¬ 
ed.  such  as  in  network,  security  and 
database  administration.  Schafer  says. 

Take  a  Stdlis  Inventory 

The  recession  has  tau^t  some  com¬ 
panies  a  hard  lesson  about  budgeting 


and  the  difficult  task  of  reducing  staff, 
according  to  Craig  Symons,  an  analyst 
at  Giga  Information  Group  Inc.  in  Nor- 
welL  Mass. 

To  prepare  for  an  economic  re¬ 
bound.  IT  organizations  will  be  more 
“^gressive  and  proactive”  in  taking  a 
skills  inventory  and  decidii^  what 
they  need  for  the  future,  he  says. 

So.  how  much  will  they  rely  on  exist- 
ii^  staff  as  opposed  to  contractors, 
outsourcing  or  hiring  new  full-time 
employees?  The  primary  factor,  says 
Symons,  is  availabilit)'- 

"If  you  can  grow  them  in-house, 
then  you're  ahead  of  the  game.”  he 
says.  “Typically,  contract  employees 
are  more  expensive.” 

That's  where  training  looms  as  a 
critical  factor. 

Because  Mercury  Insurance  is 
□roving  from  a  Cobol-centric  to  a 
Java-centric  environment,  its  IT  pro¬ 
fessionals  are  being  retrained,  says 
Schueman.  He  adds  that  Mercury  is 
also  trying  to  provide  career  paths  for 
employees  to  keep  pace  with  those 
technological  changes. 

Gay  says  Royal  Caribbean’s  IT  oiga- 
nization  will  continue  to  grow  staff 
through  training,  although  the  com¬ 
pany  will  be  looking  at  more  efficient 
online  training  opportunities. 

At  the  Tennessee  Valley  Authority  in 
Chattanooga,  the  nation’s  largest  pub¬ 
lic  power  supplier,  retraining  is  a  cor¬ 
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nerstone  of  its  human  resources  strate¬ 
gy.  says  Diane  J.  Bunch,  senior  vice 
president  of  information  services.  She 
says  her  training  priorities  for  this  year 
are  security.  Web-enablement  and 
project  management. 

Communicate  About  Changes 

A  tough  economic  climate  can  inflict 
pain  on  many  organizations.  If  ignored, 
that  pain  can  spread  to  the  point  where 
it  affects  even  the  most  content  work¬ 
ers.  That’s  why  some  IT  managers 
continue  to  stress  the  importance  of 
treating  people  fairly  and  with  candor 
and  honesty. 

At  Royal  Caribbean,  morale  after  its 
IT  layoffs  in  late  2001  was  “abysmal,’' 
Gay  says.  But  CIO  Tom  Murphy  gave 
an  impassioned  speech  and  vowed 
to  stay  with  his  staffers  during  the 
changes  they  were  facing.  That,  plus 
ongoing  communication  with  the  staff, 
helped  boost  morale,  he  says. 

And  despite  the  recession,  IT  man¬ 
agement  scored  high  in  a  survey  of 
staffers.  Gay  says.  But  rather  than  be¬ 
ing  complacent,  he  adds.  Royal  Carib¬ 
bean  managers  want  to  build  on  that 
momentum. 

When  Providian’s  IT  staff  was  told 
about  the  organizational  changes  that 
would  result  in  layoffs,  “we  overcom¬ 
municated  to  [them  about]  why  this 
was  being  done,”  Thomas  recalls. 

“'That  made  all  the  difference  in  the 
world”  and  kept  them  focused  on  their 
work,  he  says.  And  because  those  who 
lost  their  jobs  were  treated  with  re¬ 
spect  and  given  good  severance  pack¬ 
ages.  be  adds,  that  also  had  a  positive 
effect  on  those  who  were  left,  though 
"it  didn’t  mean  it  was  easy.” 

Little  things  like  those  go  a  long  way 
for  IT  leaders  like  Thomas.  "IT  people 
are  different  from  everybody  else.”  he 
says.  Being  able  to  focus  on  important, 
interesting  work  that  can  help  advance 
their  careers  b  often  more  important 
than  money,  he  notes. 

And  something  quite  simple  b  just 
as  important;  “We  say  thank  you  when 
(they)  do  good  work.”  Thomas  says, 
"and  that's  the  most  important  thing 
you  can  do  that  (acts  as  a)  magic  wand 
for  IT  people."  M 

Saia  is  a  freetance  editor  and  writer 
in  Shrewsbury,  Moss.  Contacr  him  at 
ricksaia@townisp.com. 
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Dell  Rated  #1  in  Intel-Based  Server  Satisfaction 


TachnologY  Business  Research 
Corporate  IT  Buyirtg  Behavior  and  Customer  Satisfaction  Study 
2nd  Quarter  2002 
-August  2002 


Dell  I  Small  Busirtess 


PowerEdge"  600$C  Server 

PowerEdge"  1600SC  Server 

>ICWtMnhlwlSarM>wrt>eat<inwiiFaaewi 

•  MbF*  F^nnum*  4  Processor  at  1  aOGHr 

•  IZeMBZOOMHrECCOOA  SDRAM 

•  LUradeable  Id  46B  of  MemciY 

•  40(»  (7200  RPM)  IDE  Had  Dme 

•  Upgradeabte  m  ISOCe  of  imemai  Hasd  Ome  Storage 

•  Embedded  imf*  PRO  GigMM*  MC 

•  Fne  PCI  E;«ar«abiMy  Shn  l4«4/33MHz.  1  -32/33MHz1 

•  1-Vr  24i7  Dedceied  Serser  Rione  Tecfi  Stcpon 

•  l-Yf  Next  Business  Dey  On-Sne  Servce' 

•  Small  Busness  Pncmg 

NEW  RMHlIa.  weF^artafaeace  Saner 

•  mar  Xeon' Pnxasser  ai  t  BOGHt 

•  Deel  bear  Kean- Pncessoi  CapWla  h«  to  2  BOGHr) 

•  12aMe  20aMltt  ECC  DOR  SDRAM  I«  e  aCB) 

•  IfiGB*  nOK  RFM)  Ulin320  SCSI  Hard  Ome 

•  UpgradeaHa  B  OBGEP  of  beenel  Hanl  Dme  Savage 

•  Embedded  bear  PRO  G«abrt*  MC 

•  Su  PO  SBb  12-64/lOOMHz.  2-6VGEMHz.  2-32/33MKZ) 

•  1-Yr  24x7  Oediceiad  Semr  Nene  lech  Suppon 

•  1-V(  Next  Bmess  Oer  On-Soe  Saner 

•  Small  Buaness  Pneing 

il  A  »M«u$t6/ino.(46piMs'l 
#i%£|U  BOOmsSm'As-Ca# 

W  E-WUS  Cidr  1MBB  SMIB 

mfWMM  a5l(»»$26/mo.M6pm«l1 
vKMM  BODaysSane-As-CaB 

WwW  B-fMUKCaNrtaaS-SWMi 

•  IDE  RAID  Hanl  Onve  CormHer.  add  S299 

•  Synem  Including  Wndonss*  2000  Sen*,  only  St  349 

•  Hot  Swap  Hard  Dma  Capabdity  add  $100 

•  ftMwConneci  2124*  24x1  Eflenei  SwilUi.  add  $299 

PowerEdge"  2650  Server 

PoweiEdge*  2410  Rack  Cabinet 

•  mB<*Xeon*^ocessdr3i2GHt 

•  Dual  Intel*  Xeon*  frocessor  Capable  (up  to  2  BDGHi) 

•  256M6  200MHz  ECC  DDR  SDRAM  |«  to  6081 

•  ISIS' (10KRPM)UIOa320  SCSI  Han)  Dnw 

•  UdgradeaWe  O  SKGff  ol  kitemel  Han)  Dme  Storage 

•  Oval  En«edded  GigebsT  NICs 

•  Dual-Channel  MQfyaied  miialBO  SCSI  Controbei 

•  Actne  ID  Fitm  BM  tor  Mowtonng  System  HaaRli 

•  3-Y(  Next  Busness  Day  On-SMe  Sawice' 

•  SmeO  Busness  Acsig 

•  AccamwodaiBi  RaUabte  Sanaa.  Sarage.  and  Power 

•  Easy  MeageabMy  wen  Opbonal  RNVd  Rarb  Mounhng  and 

•  Osiensnm.  Heqhl  -  «*:  Wid»  -  24‘.  Ocplh  -  40* 

•  Max  Load  of  1200  Pounds  Alows  tot  laige  Storage  Capacity 
a  Binii-in  loduble  and  WnMaied  FioM/Re«  Doors  to  Heig 

Opbmae  Seomfy  wd  Anflow 

•  Opbonal  UPS.  PDU  and  CoRsola  Switches 

^«eAAA  s*owas$54mi.(46iimt$.*l 

V  iKMM  ® 

jfcQrtfh  as  low  as  SX/mo .  |46  pms*! 
GOOaysSamrAs-Cadi 

aMMMWiMiaarate; 

•  DuU-Ctannil  En«edded  RAID,  add  {299 

•  Hoi-Smp  Redwdam  ftnwer  Supplv.  add  S249 


Servers  for  any  size  business.  Easy  as 


D^LL 


Click  wvvw.dell.com/compiiterworld  Call  1-877-351-3355 

uHtree 


iiauacticm  weu<  KOVieowred  Matraium  McimiUi' inaicw  anour”  nC  R>t;iceK:$2&  000  IMS'  6CDavs  Sll■wAi(.as^O»<iLoan  onetrc  actnii>s  dminc  ivsj  tLoav'.ine-  Iwcusar- Jximnuanai’i  Dale  Airs  «ni>  {aodun  W  tuie 

w^-n  mesi!  Sj  dan  OFFE^  VAATSBV  CFirO''WatHll«ESS  OF  CUSTOMER  AS  DETtRMlNEC  (tV  lEMDER  Ta«s  and  ihvqc' 3>i!  enra  and  ■na«  vjiy  Nf  «aMi  on  pni  onWts  <>■  I>nsiiai«  CnucfclaanaiTanQad  InrC'rBart  w  Sdud  Bisaias  lusmcn  wim 

appnndS  cadi!  'Ttv*.  lerm  m(Kate<  compliance  w4MEEE  scandaro  902  3ab  hn  Cipabi  fOionel  and  aow  not  comxMu  actua;  cpenlmy  spew  o'  IGB/sac  Foi'-.qh  speed  iivnuuuier.  aemenion  ha  0«apn  strie  avl  nniMort  -i^ailseitwt  •.  leqwcd  Oer 

nwstYlueOE  Ipqo  E  Value  Eowe'E'lyii  and  ftraerVaid' are  naUeeiaiisol  Dell  ConeMv  Cdnio>3l«n  Intel  InMie  ^nnnn  and  Xew  an' traonnaAs  o"ea'S(e'ee  vadenaita  o'  wet  Ccpocation  o-  -r  suMdAret  a  ihe  UMCi)  Sum  and  eeiH  aeinct«s  S|HneH' 
and  Windows  are  legisiered  iiademaAs  of  Mmcosnti  Conxwation  C200?  Don  Conipuler  CcnioniKin  All  resenod 

Latestmces 
andWee^ 
FVomotions  ' 


GO 

OnhneFor 


mmmniirnin^nn 


PREMIER  IN  IT  IEADMM3 


www.computenM>rtd.ctKn 


CATHY  BRUNE  REMEMBERS  planning  a 
retirement  party  for  a  26-year  IT  vet¬ 
eran  several  years  ^o.  before  she  be¬ 
came  chief  technology  officer  at  All¬ 
state  Insurance  Co.  She  also  recalls 
her  surprise  when  she  discovered 
that  he  wasn't  an  employee  of  All¬ 
state;  he  was  a  contractor. 

In  those  days.  Brune  says,  it  was  hard  to  tell  an 
employee  from  a  vendor  contractor  without  a  pro¬ 
gram.  Allstate  had  quite  a  few  vendors,  and  she 
knew  that  managing  them  all  drained  staff  time 
and  energy  away  from  focusing  on  the  really  strate¬ 
gic  vendors.  She  needed  to  get  vendor  management 
under  control 

Since  then,  Brune  has  pared  the  consulting  cadre 
at  the  Northbrook.  111. -based  insurer  from  SO  firms 
to  five  strategic  partners.  She  has  formalized  All¬ 
state’s  supplier  program,  developed  a  vendor  man- 
^ement  process  and  learned  to  trust  her  procure¬ 
ment  people. 

“We’ve  learned  a  company  our  size  has  to  have  a 
very  formalized  program  or  we’ll  spend  way  too 
much  time  with  suppliers,  and  it  may  not  be  around 
the  things  that  are  very  strategic  to  us.”  she  says. 

Today’s  IT  leaders  juggle  many  dozens  of  ven¬ 
dors,  from  commodity  to  strategic,  products  to  ser¬ 
vices,  internal  to  outsourced.  Managing  that  port¬ 
folio  is  a  new  core  competency  in  IT.  often  more 
akin  to  general  contracting  than  technology.  No 
wonder  vendor  management  tops  many  IT  to-do 
lists  for  2003. 

Premier  100  IT  leaders  are  tightening  up  how 
they  deal  with  vendors,  separating  strategic  partners 
from  commodity  suppliers,  and  improving  policies, 
processes  and  controls.  And  many  are  finding  part¬ 
ners  to  help.  They  are  learning  to  share  responsibili¬ 
ty  for  vendor  selection,  contract  negotiations,  ven¬ 
dor  policies  and  procedures,  and  even  vendor  rela¬ 
tionship  management. 
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Fbnn  Vendor  Selection  Teams 

It  all  starts  with  the  business  users,  who  need  to  be 
taken  seriously  as  procurement  partners.  Bnine  says. 
In  the  past,  her  IT  group  might  have  pushed  hard  for 
a  technolc^  that  delivered  80%  of  the  functions  the 
business  people  needed  and  was  cheaper  and  easier 
to  integrate  than  other  options.  But  Brxine  says  she 
has  teamed  to  listen  more  carefully.  ‘'Many  times, 
that  20%  is  what  will  give  them  a  real  competitive 
edge.”  she  explains.  “Sometimes  we  missed  that* 

This  business/rr  partnership  is  more  important 
than  ever,  because  vendors  today  are  likely  to  pitch 
directly  to  business  users.  Without  a  strong  partner¬ 
ship.  IT  could  be  the  last  to  know  about  technology 
purchase  plans.  *The  power  in  an  enterprise  to  select 
a  technology  is  shifting  from  IT  to  the  busmess  unit.” 
says  George  Un.  CIO  at  Documentum  toe.,  a  Pleas¬ 
anton.  Calif.-based  maker  of  enterprise  content  man¬ 
agement  software  that  often  approaches  users  fust. 

The  best  approach  to  vendor  selection  is  one  that 
includes  partners  across  the  company,  says  Bart 
Perkins,  a  founder  of  Leverage  Partners  Inc.,  a  con¬ 
sulting  firm  in  Louisville,  Ky.,  that  specializes  in 
vendor  management.  Period  a  Computenvorld 
columnist,  sug^sts  that  the  vendor  selection  team 
should  include  representatives  of  legal,  training,  hu¬ 
man  resources,  procurement,  technical  architecture, 
finance,  and  inftastructure  or  application  develop¬ 
ment  areas,  as  well  as  business  users. 

Let  Deal-Makers  Negotiate 

‘'We  partner  with  our  internal  procurement  function 
when  it  comes  to  n^tiating,”  says  Marty  Chuck, 
vice  president  and  CIO  at  Agilent  Technologies  toe.. 
a  maker  of  communications,  electronics  and  life  sci¬ 
ences  products  in  Palo  Alto,  Calif.  The  procurement 
specialists  work  on  big  deals  every  day.  They  can 
look  across  the  company  ^obally  and  see  additional 
opportunities  for  negotiating  leverage.” 

At  Allstate,  procurement  partners  are  aligned  with 
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each  strategic  vendor,  so  procurement  and  IT  are  at 
the  table  together  from  the  start  in  any  new  product 
discussion.  Later,  when  it  comes  time  to  negotiate 
the  details,  procurement  takes  charge.  “I  fee!  very 
comfortable  handing  that  off.”  Brune  says.  *I  know  it 
will  be  a  good  deal  and  a  great  contract  Building  that 
trust  has  added  a  few  years  to  ray  life.” 

But  be  careful,  cautions  Eileen  Birge.  an  analyst 
who  specializes  in  vendor  management  at  The  Con- 
cours  Group  in  Kingwood,  Texas.  “Pve  seen  exam¬ 
ples  where  procurement  has  had  heavy  control  and 
it‘s  almost  always  been  disastrous.”  she  says. 

Birge  says  procurement  groups  are  great  at  very 
specific  tasks,  such  as  delivery  of  bulk  chemicals.  But 
if  such  groups  don’t  understaiKl  total  cost  of  owner¬ 
ship  and  make  a  deal  for  desktop  hardware  based  on 
the  cheapest  price  tag,  it  could  result  in  mafor  prob¬ 
lems.  Or  they  may  not  understand  that  a  more  ex¬ 
pensive  outsourcer's  database  administrator  is  10 
times  more  productive  than  a  cheaper  oompetitor’s, 
for  example,  because  judging  technical  skills  isn't 
piart  of  the  procurement  job  description. 

Procurement  has  much  to  teach  IT  and  should  be 
on  the  team.  Birge  concludes.  “But  IT  can't  throw 
specs  over  the  wall  as  users  used  to  do.”  she  says.  ‘TT 
hiu  to  have  the  lead  rc^  in  talking  about  IT  vendor 
services." 

When  venturing  into  complex  territory  such  as 
outsourcing,  don't  hesitate  to  enlist  befo  from  out¬ 
side  the  company  as  well  Chuck  says.  There  are 
consultants  that  specialize  in  the  sourdng  process 
that  can  help  you  and  the  supplier  reach  a  mutually 
beneficial  de^”  he  explains.  Their  experience  with 
previous  engagements  and  independent  benchmark¬ 
ing  and  negotiation  can  provide  valuable  advice  with 
all  phases  of  the  procurement  cycle.” 


Shaie  Vandor  Management  Duties 

Ac  Coast  Capital  Savings,  a  financial  institnaon  in 
Vancouver.  British  Columbia,  once  the  vendor  is 
chosen,  other  internal  partnerships  kick  in.  The  se¬ 
nior  business  people  or  business  project  managers 
wdio  use  the  technology  manage  the  vendor.  They 
are  front  and  center  in  that  relationriup.”  says  CIO 

loel  L  Itoaenb^ 

At  Allstate,  Brune  or  ot»e  of  her  directors  personally 
handles  strategic  IT  vendors,  such  as  infrastructure  or 
hardware  supphers  with  whom  the  company  spends 
SK)  million  or  more.  But  for  other  suppBeis.  business 
divisioo  heads  or  prefect  managers  taix  the  lead. 

Regardless  of  who  maikages  the  vendor,  the  rdation- 
riup  should  go  more  smootidy  with  very  specific  ven¬ 
dor  policies  and  procedures  in  place.  At  LD.  Edwards 
&  Ca  in  Denver,  an  interdeparnnental  group  that  m- 
cluded  the  IT.  human  resources,  legal  and  purchasing 
departments  devek^ied  policies  controlling  vendor 
access  to  buildings  and  systems,  says  Senior  Vice  Pres- 
idem  and  CIO  Mark  Endiy  a  2002  Premier  HK)  leader. 

^varing  vendor  management  duties  with  partners 
around  the  company  doesn't  mean  abdicating  your 
responsibility,  but  it  does  mean  that  your  respon- 
sil^ties  will  change.  As  you  hammer  out  the  details 
and  shared  responsibilities  of  vendor  management, 
remember  that  the  key  partnership  —  the  one  with 
the  vendor  —  Is  determined  by  the  contract 

Tbu  have  to  put  the  stuff  thm  really  matters  in 
contracts,”  Brune  says.  “After  a  few  battles,  Pve 
learned  that  the  people  in  here  working  from  the  ven¬ 
dors  are  great  human  beings,  but  their  lawyers  may 
not  be  quite  there  yet.  so  it’s  better  to  be  covered”  I 
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Form  Vendor  Selection  Teams 

It  all  starts  with  the  business  users,  who  need  to  be 
taken  seriously  as  procurement  partners.  Bnme  says. 
In  the  past,  her  IT  group  might  have  pushed  hard  for 
a  technology  that  delivered  80%  of  the  functions  the 
business  people  needed  and  was  cheaper  and  easier 
to  integrate  than  other  options.  But  Brune  says  she 
has  learned  to  listen  more  carefully.  “Many  times, 
that  20%  is  what  will  give  them  a  real  competitive 
edge,”  she  explains.  “Sometimes  we  missed  that.” 

This  business/IT  partnership  is  more  important 
than  ever,  because  vendors  today  are  likely  to  pitch 
directly  to  business  users.  Without  a  strong  partner¬ 
ship.  IT  could  be  the  last  to  know  about  technology 
purchase  plans.  'The  power  in  an  enterprise  to  select 
a  technology  is  shifting  from  IT  to  the  busmess  unit,” 
says  George  Lin.  CIO  at  Documentum  Inc.,  a  Pleas- 
antoa  Calif.-based  maker  of  enterprise  content  man¬ 
agement  software  that  often  approaches  users  first. 

The  best  approach  to  vendor  selection  is  one  that 
includes  partners  across  the  company,  says  Bart 
Perkins,  a  founder  of  Leverage  Partners  Inc.,  a  con¬ 
sulting  futn  m  Louisville.  Ky..  that  specializes  in 
vendor  management.  Perkins,  a  Computerworld 
columnist,  suggests  that  the  vendor  selection  team 
should  include  representatives  of  legal,  training,  hu¬ 
man  resources,  prociuement.  technical  architecture, 
fmance.  and  infrastructure  or  application  develop¬ 
ment  areas,  as  well  as  business  users. 

Let  DeaHMakers  Negotiate 

“We  partner  with  our  internal  procurement  function 
when  h  comes  to  negotiatii^”  says  Marty  Chuck, 
vice  president  and  CIO  at  Agilent  Technologies  Inc. 
a  maker  of  communications,  electronics  and  life  sci¬ 
ences  products  in  Palo  Alto,  Calif.  ‘The  procurement 
specialists  work  on  big  deals  every  day.  The>*  can 
ioc^  across  the  company  globally  and  see  additional 
opportunities  for  negotiating  leverage.” 

At  Allstate,  procurement  partners  axe  aligned  with 
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each  strategic  vendor,  so  procurement  and  IT  are  at 
the  table  together  from  the  start  in  any  new  product 
discussioa  l.ater,  when  it  comes  time  to  negotiate 
the  details,  procurement  takes  charge.  “1  feel  very 
comfortable  handing  that  off.”  Brune  says.  “1  know  it 
will  be  a  good  deal  and  a  great  contract.  Building  that 
trust  has  added  a  few  years  to  my  life.” 

But  be  careful,  cautions  Eileen  Birge,  an  analyst 
who  specializes  in  vendor  management  at  The  Coa- 
cours  Group  in  Kii^^ood.  Texas.  “I’ve  seen  exam¬ 
ples  where  procurement  has  Iiad  heavy  control,  and 
it’s  almost  always  been  disastrous."  she  says. 

Birge  says  procurement  groups  are  great  at  very 
specific  tasks,  such  as  delivery  of  bulk  chemicals.  But 
if  such  groups  don't  understand  total  cost  of  owner¬ 
ship  and  make  a  deal  for  desktop  hardware  based  on 
the  cheapest  price  tag.  it  could  result  in  major  prob¬ 
lems.  Or  they  may  not  understand  that  a  more  ex¬ 
pensive  outsourcer's  database  administrator  is  10 
times  more  productive  than  a  cheaper  competitor's, 
for  example,  because  judging  technical  skills  isn’t 
part  of  the  proctirement  job  description. 

Procurement  has  much  to  teach  IT  and  should  be 
on  the  team.  Birge  concludes.  "But  IT  can't  throw 
specs  over  the  wall  as  users  used  to  do.”  she  says.  "IT 
has  to  have  the  lead  role  in  talking  about  IT  vendor 
services.”  i 

When  venturing  into  complex  territory  such  as 
outsourcing,  don't  hesitate  to  enlist  help  from  out¬ 
side  the  company  as  well.  Chuck  says.  There  are 
consultants  that  specialize  in  the  sourcing  process 
that  can  help  you  and  the  supplier  reach  a  mutually 
beneficial  de^”  be  explains.  "Their  experience  with 
previous  engagements  and  independent  benchmark¬ 
ing  and  negotiation  can  provide  valuable  advice  with 
all  phases  of  the  procurement  cycle.” 


Share  Vendor  Management  Duties 

At  Coast  Capital  Savings,  a  fmancial  institution  in 
Vancouver.  British  Columbia,  once  the  vendor  is 
chosen,  ocher  internal  partnerships  kick  in.  The  se¬ 
nior  business  people  or  business  project  managers 
who  use  the  technology  manage  the  vendor.  They 
are  front  and  center  in  that  relationship.”  says  CIO 
Joel  J.  Rosenberg. 

At  Allstate,  Brune  or  one  of  her  directors  personally 
handles  strategic  IT  vendors,  such  as  infrastructure  or 
hardware  suppliers  with  whom  the  company  spends 
$10  millioQ  or  more.  But  for  other  suppliers,  business 
division  beads  or  project  managers  take  the  lead. 

Regardless  of  who  manages  the  vendor,  the  relation¬ 
ship  should  go  more  smoothly  with  very  speciHc  ven¬ 
dor  policies  and  procedures  in  place.  At  JD.  Edwards 
&  Ca  in  Denver,  an  imerd^»rUDental  group  that  in¬ 
cluded  the  IT.  human  resources,  legal  and  purchasing 
departments  devrioped  policies  controlling  vendor 
access  to  buildings  and  systems,  says  Senior  Vice  Pres¬ 
ident  and  CIO  Mark  Endiy,  a  2002  Premier  100  leader. 

Sharing  vendor  man^ement  duties  with  partners 
around  the  company  doesn't  n>ean  abdicating  your 
responsibility,  but  it  does  mean  that  your  respon¬ 
sibilities  will  char^.  As  you  hammer  out  the  details 
and  shared  responsibilities  of  vendor  mamoement 
remember  that  the  key  partnership  —  the  orte  with 
the  vendor  —  is  determined  by  the  contract. 

“You  have  to  pul  the  stuff  that  really  matters  in 
contracts,”  Brune  says.  "After  a  few  battles,  Pve 
learned  that  the  people  in  here  working  from  the  ven¬ 
dors  arc  great  human  beings,  but  their  lawyers  may 
not  be  qtiite  there  yet,  so  it’s  bener  to  be  covered.”  I 


Melyrm4ka  is  a  Coropuierworld  conmbutirtg  writer. 
Contact  her  at  kmelymuka^teanhlinkJtet. 
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Jerry  McElhatton 


The  revamped  processing  system  already 
permits  business  customers  to  clear  trans¬ 
actions  six  times  daily  instead  of  just  once 

history.  By  Marc  L  Songini  “  '•  MasterCard  to  conson- 

^  ^  date  transaction  authorization  and  clear- 

ERRY  MCELHATTON  IS  PUTTING  the  ing  messages.  Users  can  customize  data  to 
finishing  touches  on  what  could  be  meet  specific  business  needs,  and  they  can 
called  the  magnum  opus  of  his  ca-  route  transaction  data  to  multiple  business 
reer  —  a  five-year,  $160  million  up-  partners  simultaneously.  McElhatton  says 
grade  of  MasterCard  International  Inc.’s  the  project  is  the  biggest  systems-develop- 
global  processii^  system,  which  is  now  ment  undertaking  in  the  company's  history, 
unified  on  a  single  messaging  standard.  As  part  of  the  enterprise  upgrade.  Mc- 

McElhatton.  senior  executive  vice  presi-  Elhatton  oversaw  the  opening  in  2001  of 
dent  of  global  technology  and  operations  a  new  52-acre  campus  for  the  company’s 
at  the  company  in  O'Fallon,  Mo.,  says  the  primary  IT  team  that  includes  a  state- 
task  included  rewriting  the  core  systems  of-the-art  data  center  that  was  custom- 
that  handle  the  authorization,  clearing  designed  for  MasterCard.  “During  the 
and  settlement  processes  for  financial  in-  move,"  he  says,  “we  didn't  experience 
stitutions  and  merchants.  It  was  no  mean  even  one  second  of  downtime." 

feat:  The  systems  support  15,000  custo-  McElhatton  explains  his  technique:  “I 

mers  worldwide,  handle  40  million  trans-  think  I  pay  exceptional  attention  to  detail 
actions  per  day  totaling  approximately  and  give  people  responsibility  and  latitude 
$1  trillion  annually  and  are  linked  to  to  make  decisions.  In  a  project,  you  get 

800,000  ATMs  globally.  what  you  inspect,  not  what  you  expect. 

Delivering  the  project  on  time  and  You  monitor  the  metrics  and  make  sure 

on  budget  was  a  colossal  undertaking  and  you  stay  on  track.” 
a  constant  challenge,  McElhatton  hasn’t  gone  unno- 

says.  The  implementation  in-  ticed  by  colleges.  “Jerry  en- 

volved  changing  software  sys-  IcSpSSSsSE^^S  *be  project  was  al- 

tems  and  interfaces  and  keeping  '^^ys  at  the  top  of  the  priority 

internal  users,  customers  and  WMllliVfM  '  list  within  his  organization  and 

vendors  on  schedule.  The  sys-  !  ^  throughout  MasterCard,"  says 

tern  was  made  to  be  flexible  ,  ,  l^oh  Reeg,  senior  vice  president, 

enough  so  that  new  types  of  pay-  -  ^  MasterCard  systems  develop¬ 
ment  processes  could  be  added  ment.  “Through  his  own  atten- 

on  the  fly  while  International  tion  to  detail,  [he]  ensured  that 

Standards  Organization  service  those  of  us  responsible  for  de¬ 
levels  were  maintained.  btMUlHHHKi*  livering  the  system  had  the 

The  project  is  now  97%  com-  OMwMil  same  level  of  commitment  to 

plete  and  will  wrap  up  in  April.  '  -  the  project.”  > 


He  steered  the  largest  sys¬ 
tem  upgrade  in  MasterCard’s 
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Joan  Dunn 

She  led  a  risky  storage  project  that 
paid  off  with  lower  costs  and  better 
performance.  By  Marc  L  Songini 

For  JOAN  DUNN,  being  out  on  the  front  lines  of  IT  is 
just  part  of  the  job. 

In  her  role  as  manager  of  enterprise  computing 
at  Anadarko  Petroleum  Corp.  in  The  Woodlands, 
Texas,  Dunn  says,  she’s  encouraged  to  take  risks  and 
demonstrate  leadership.  Witness  the  energy 
fum's  willingness  to  create  a  massive  infra¬ 
structure  to  handle  the  storage  and  modeling 
of  2-D  and  3'D  seismic  data  related  to  oil  and 
gas  exploration. 

Anadarko  acquires  huge  amounts  of  data 
for  its  geologists,  geophysicists  and  engineers 
to  interpret.  The  decision  was  made  to  put  all 
that  data  in  one  central  repository  —  a  move 
in  keeping  with  the  company’s  desire  to  con¬ 
solidate  its  IT  infrastructure  as  much  as  pos¬ 
sible  to  save  money,  says  Dunn. 

The  project  had  its  risks.  It  required  rolling 
out  network-attached  storage  (NAS)  units 
from  Network  Appliance  Inc.  that  replaced 
machines  from  various  vendors.  The  project 
took  approximate.y  20  months,  and  the  sys¬ 
tem  went  live  two  years  ago. 

“At  the  time,  the  move  to  NAS  was  very 
risky,"  says  Dunn.  “But  it  paid  off  very  well.  - 


providing  improved  performance  and  reduced  adminis- 
I  tration  and  maintenance  costs."  The  NAS  units,  along 
I  with  a  storage-area  network  built  around  EMC  Corp. 
Synunetrix  boxes,  handle  UOTB  of  capacity  for  Anadarko. 

Dunn  says  one  of  the  most  challenging  aspects  of  the 
project  involved  the  IT  staffers  themselves,  because  they 
were  accustomed  to  handlii^  only  their  own  types  of 
systems  —  either  dedicated  data  storage  or  transaction 
processing  systems.  To  make  the  project  succeed,  the  IT 
team  had  to  work  hard  on  communication,  planning  and 
change  management,  she  says. 

But  the  rewards  have  been  great:  The  NAS 
model  has  become  standard  for  the  petrole¬ 
um  and  gas  industry,  and  Anadarko  is  ahead 
of  its  competitors  and  is  already  getting  pay¬ 
back  from  the  implementation,  says  Dunn. 

One  of  the  keys  to  success,  she  says,  is 
making  sure  the  technolog>'  is  closely  wed¬ 
ded  to  business  strategy,  '^liere  are  always 
more  technical  options  out  there  than  make 
sense  for  any  company."  she  says,  “We  take 
business  opportunities  and  technical  oppor¬ 
tunities  and  match  them  to  be  successffiL" 
Morris  Helbach,  CIO  at  Anadarko,  says 
Dunn’s  across-the-board  leadership  has  been 
crucial  to  the  firm.  "An  exploration  and  pro¬ 
duction  company  lives  and  dies  by  the  way  it  * 
acquires,  manages  and  provides  access  to 
data."  he  says.  Dunn's  role  was  integral  to 
— '  creating  the  storage  system.  Helbach  adds.  M 
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Jerry  McElhatton 


He  steered  the  largest  sys¬ 
tem  upgrade  in  OR^erCard’s 
history.  By  RRarc  L  Songini 

JERRY  MCELHAHON  IS  PUHINO  the 
finishing  touches  on  what  could  be 
called  the  magnum  opus  of  his  ca¬ 
reer  —  a  five-year,  $160  million  up¬ 
grade  of  MasterCard  International  lnc.’s 
global  processing  system,  which  is  now 
unified  on  a  single  messaging  standard. 

McElhatton,  senior  executive  vice  presi¬ 
dent  of  global  technology  and  operations 
at  the  company  in  O’Fallon,  Mo.,  says  the 
task  included  rewriting  the  core  systems 
that  handle  the  authorization,  clearii^ 
and  settlement  processes  for  financial  in¬ 
stitutions  and  merchants.  It  was  no  mean 
feat:  The  systems  support  15,000  custo¬ 
mers  worldwide,  handle  40  million  trans¬ 
actions  per  day  totaling  approximately 
$1  trillion  annually  and  are  linked  to 
800,000  ATMs  globally. 


The  revamped  processing  system  already 
permits  business  customers  to  clear  trans¬ 
actions  six  times  daily  instead  of  just  once 
a  day.  It  also  allows  MasterCard  to  consoli¬ 
date  transaction  authorization  and  clear¬ 
ing  messages.  Users  can  customize  data  to 
meet  specific  business  needs,  and  they  can 
route  transaction  data  to  multiple  business 
partners  simultaneously.  McElhatton  says 
the  project  is  the  biggest  systems-develop- 
ment  undertaking  in  the  company’s  history. 

As  part  of  the  enterprise  upgrade,  Mc¬ 
Elhatton  oversaw  the  opening  in  2001  of 
a  new  52'acre  campus  for  the  company’s 
primary  IT  team  t^t  includes  a  state- 
of-the-art  data  center  that  was  custom- 
designed  for  MasterCard.  ‘'During  the 
move,”  he  says,  “we  didn’t  experience 
even  one  second  of  downtime.” 

McElhatton  explains  his  technique:  “I 
think  I  pay  exceptional  attention  to  detail 
and  give  people  responsibility  and  latitude 
to  make  decisions.  In  a  project,  you  get 
what  you  inspect,  not  what  you  expect. 
You  monitor  the  metrics  and  make  sure 
you  stay  on  track.” 

His  woik  hasn’t  gone  unno¬ 
ticed  by  colleagues.  “Jerry  en¬ 
sured  that  the  project  was  al¬ 
ways  at  the  top  of  the  priority 
list  within  his  organization  and 
throughout  MasterCard.”  says 
Rob  Reeg,  senior  vi(%  president, 
MasterCard  systems  develoi>- 
menl.  “Throi^  his  own  atten¬ 
tion  to  detail,  [hel  ensured  that 
those  of  us  responsible  for  de- 
liverii^  the  system  had  the 
same  level  of  commitment  to 
the  project."  I 


Delivering  the  proiect  on  tune  and 
on  budget  was  a  colossal  undertaking  and 
a  constant  challenge,  McElhatton 
says.  The  implementation  in¬ 
volved  changing  software  sys¬ 
tems  and  interfaces  and  keeping 
internal  users,  customers  and 
vendors  on  schedule.  The  sys¬ 
tem  was  made  to  be  flexible 
enough  so  that  new  types  of  pay¬ 
ment  processes  cotild  be  added 
on  the  fly  while  International 
Standards  Organization  service 
levels  were  maintained. 

The  project  is  now  97%  com¬ 
plete  and  will  wrap  up  in  April. 
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Joan  Dunn 

She  led  a  risky  storage  project  that 
paid  off  with  lower  costs  and  better 
performance.  By  Marc  L  Songini 

For  JOAN  DUNN,  being  out  on  the  front  lines  of  IT  is 
just  part  of  the  job.  ^ 

In  her  role  as  manager  of  enterprise  computing 
at  Anadarico  Petroleum  Corp.  in  The  Woodlands, 
Texas,  Dunn  says,  she’s  encouraged  to  take  risks  and 
demonstrate  leadership.  Witness  the  energy 
firm’s  willingness  to  create  a  massive  infra* 
structure  to  handle  the  stora^  and  modeling 
of  2-D  and  3-D  seismic  data  related  to  oil  and 
gas  exploration. 

Anadarko  acquires  huge  amounts  of  data 
for  its  geolt^ts.  geophysicists  and  engineers 
to  interpret.  The  decision  was  made  to  put  all 
that  data  in  one  central  repository  —  a  move 
in  keeping  with  the  company’s  desire  to  con¬ 
solidate  its  IT  infrastructure  as  much  as  pos¬ 
sible  to  save  money,  says  Dunn. 

The  project  had  its  risks.  It  required  rolling 
out  networic-attached  storage  (NAS)  units 
from  Network  Appliance  Inc.  that  replaced  | 

machines  from  various  vendors.  The  project 
took  approximately  20  months,  and  the  sys¬ 
tem  went  live  two  years  ago. 

“At  the  time,  the  move  to  NAS  was  very 
risky,”  says  Dunn  “But  it  paid  off  very  well, 


providing  improved  performance  and  reduced  adminis¬ 
tration  and  maintenance  costs.”  The  NAS  units,  along 
with  a  storage-area  networic  built  around  EMC  C^rp. 
Symmetrix  boxes,  handle  UOTB  of  capacity  for  Anadarko. 

Dunn  says  one  of  the  most  challenging  aspects  of  the 
project  involved  the  IT  staffers  themselves,  because  they 
were  accustomed  to  handling  only  their  own  types  of 
systems  —  either  dedicated  data  storage  or  transaction 
processing  systems.  To  make  the  project  succeed,  the  IT 
team  had  to  woric  hard  on  communication,  planning  and 
change  management,  she  says. 

But  the  rewards  have  been  great:  The  NAS 
model  has  become  standard  for  the  (letrole- 
um  and  gas  industry,  and  Anadarico  is  ahead 
of  its  competitors  and  is  already  getting  pay¬ 
back  from  the  implementatitm,  says  Duim. 

One  of  the  keys  to  success,  she  says,  is 
making  sure  the  technology  is  clos^  wed¬ 
ded  to  business  strategy.  ’'Tliere  are  always 
more  technical  options  out  there  than  inak«> 
sense  for  any  company.”  she  says.  “We  take 
business  opportunities  and  technical  oppor¬ 
tunities  aiKi  match  them  to  be  successfriL” 
Morris  Helbach,  CIO  at  Anadarko,  says 
Dunn's  across-the-board  leadership  has  been 
crucial  to  the  firm.  “An  exploration  and  pro¬ 
duction  company  lives  and  dies  by  the  way  it 
acquires,  manages  and  provides  access  to 
data,”  be  says.  Duim’s  role  was  integral  to 
creating  the  storage  system,  Helbach  adds.  M 


I’RKMIF 


•  RinMMI  MMO.  46.  CIO.  UMStea 
Office  of  Oraup  BwneMs,  Oepartmsnt  of 
Nahni  RBsourae,  Baton 


•  ROBBm  Aimt  4a  QO.  Umerslty 
of  SouRi  Oahota.  Vamifficin 


a  STEVE  ATTUS.  49.  vice  prasident 
cM  inlomiaBon  eecuffiy  officer.  New  VM 
UsbieufanceCo. 


•  WAMKN  AXELMO,  dtoclor. 
(AahillrfcriBMton  security, 

Jersey  CXy.NJ. 


>  DAMd  BEAN.  Sa  vice  ptesidert  of 
corporate  eyaterre.  Hiton  HolBte  Corp.. 
Beverly  HIB.CNI. 

•  JOHN  A.  BKLEC.  6a  vice  preslden 
OO.  OiawN  UnereraHy,  PhhdeBhia 


■  AUH  BOEHME.  AaeiMUihe 
vice  pnaUent  00.  Best 
AIMi  (lorriierty  e-tKtnotogy  dp 


eERMerS|aleriB.MMla) 

>  ANDREW  MHHBBOnr.  31  (feeclor 
c4  Morinelion  servtCBS,  Choice  Hotnos, 
Ailnglan.1iaBas 

■  JOHN  ANDNEW  BNOWN,  34.  CKX 

Brown  Brothers  IfBaaaVhietatdF^.. 
MNmb.  Marta.  AusMN 

'  ■CAnfrBNUNE.46.8et*irtace 
presiitara,  chief  tachaolDBy  officer.  Ablate 
bautaica  Co.  NorVifarook.  1. 


;  ■BUMEJ.BUNCH.aaseffivvtaepres- 
!  idsrW  of  jffcrrnalionaervfces.  Tennessee 
I  VMtay  Authority.  Qtattanooga 

I - 

I  •HKHAROP.BINISBL27.i«iiorwce 

I  presfdBrameragtaOdreclor.Uidtan  Trust 

1  «*-«--  - 1-  -  J  -  rt- 

I  wO.iiBniijeBcnt3eroBnB.ria 


I  wDENNSB.  CALLAHAN.  SaearMor 
I  vlcepieBfdanlCXXTheBuidanlJBhBr 
,  jCTContatapyiMricaNawThRk 

tONTMUEDONPABEae 


PIIEIlia  100 ITIEMHIS  2003 


www.computerworkt.coin 


MaryOdson 

By  promoting  the  power  of  tech¬ 
no!^,  she  quelled  users’ con¬ 
cerns  ^  increased  productivity. 
By  EHen  Fanning 

Lawyers  are  known  for  making  compeUing 
arguments,  but  it’s  an  FT  leader  who  can 
make  a  business  case  based  entirely  on  the 
merits  of  technology. 

Mary  Odson,  CIO  at  Paul,  Hastings,  Janofeky  & 
Walker  LLP  in  Los  Angeles,  had  made  the  deci¬ 
sion  to  move  the  law  firm  to  a  unified  messaging 
system  tying  together  voice,  fax  and  e-mail  com¬ 
munications  in  a  sii^e  inter&ce.  Because  she  had 
worked  in  IT  at  law  firms  her  entire 
career,  Odson  was  keenly  aware  of  the 
unique  technology  requirements  of  the 
legal  community. 

‘*1  have  a  strong  appreciation  of  how 
attorneys  use  and  don’t  use  technology,” 
says  Odson.  For  example,  they  need  word 
processing  capabilities  to  handle  the 
reams  of  l^al  documents  that  pass 
through  the  office  each  day.  But  even 
more  important  are  the  client  services 
the  firm  provides  from  its  international 
offices,  l^e  IT  department  supports 
2,000  users,  including  850  attorneys  do¬ 
ing  business  in  the  U.S..  Asia  and  the  U.K. 

But  the  idea  of  a  single  repository  for 
all  communications  worried  some  users, 
she  says.  ‘There  was  a  lot  of  resistance 
to  the  concept  from  the  attorneys,”  says 
Odson.  ‘There  was  a  concern  that  impor¬ 
tant  voice  mails  would  be  buried  in  the 
user’s  in-box." 


Derek  Smith,  a  partner  and  chairman  of  the 
technolc^  committee  at  the  firm,  says  Odson  was 
instrumental  in  overcoming  that  concern.  “It  was 
a  matter  of  changing  how  we  do  things.”  he  says. 
“The  IT  staff*  educated  people  regarding  the  bene¬ 
fits  [of  the  system].  Mary  played  an  enormous  role 
in  that” 

To  win  them  over,  Odson  says  she  “leveraged 
one  technology  to  sell  another,”  promoting  the 
strengths  of  the  Research  In  Motion  Ltd.  Black- 
Berry  handheld  device  in  order  to  calm  fears 
about  lost  communications  and  show  the  benefits 
of  round-the-clock,  real-time  dialogue  with 
clients.  Now  users  see  pending  voice-mail  and  fax 
messages  on  their  BlackBeiry  devices  in  addition 
to  e-mail  notifications,  and  Odson  says 
one  attorney  has  estimated  that  it  saves 
him  a  half  hour  per  day. 

Odson  began  her  career  at  a  small  law 
firm  in  the  1980s  as  a  database  adminis¬ 
trator  and  assumed  the  CIO  role  at  PauL 
Hastings,  Janofsky  &  Walker  in  1999. 
Since  then,  her  IT  staff  has  grown  from 
42  in  1999,  when  all  development  and 
high-level  systems  support  was  out¬ 
sourced,  to  the  current  90-person  staff, 
which  supports  and  develops  all  of  the 
firm’s  systems. 

Odson  says  her  decision  to  hire  high¬ 
ly  motivated  staffers  who  aspire  to  at- 
t^  the  top  IT  post  she  now  holds 
might  be  perceived  as  risky,  but  it's  one 
she  feels  quite  comfortable  with.  By 
surrounding  herself  with  competent 
people,  Odson  e:q>lains,  she  Im  en¬ 
sured  that  the  IT  department  will  re¬ 
main  strong  into  the  future.  I 
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IT  Accountability  Requirements  on  the  Rise 

Can  You  Answer  the  Tough  Questions? 


By  Dean  J.  Hager 

Could  you  answer  these  questions  quickly  and  accurately? 

•  What  were  your  10  largest  IT  projects  last  quarter  based 
on  total  cost? 

•  What  is  the  ROl  for  each  of  those  projects? 

•  How  are  your  resources  deployed  and  what  is  their  utilization? 

•  What’s  in  your  project  portfolio  and  how  would  a  new  higfi* 
potential  project  affect  the  mix? 

If  you  could,  you  would  be  in  the  minority.  Surprisingly  few  senior 
IT  executives  are  able  to  easily  demonstrate  the  level  of  accountability 
that  CEOs  and  CFOs  expect  in  today’s  tou^  business  environment. 

Robert  Frances  Group  analyst  Maria  DeGiglio  noted  in  a  recent 
report  that  IT  budgets  and  projects  are  under  greater  scrutiny  horn 
business  unit  executives  after  so  many  IT  projects  over  the  last  decade 
fell  short  of  their  promised  benefits.  ‘Multiple  surveys  indicate  that 
less  than  30  percent  of  U.S.  corporations  that  executed  IT  projects 
were  successful,  while  the  majority  of  projects  were  cancelled  before 
implementation,  late,  or  over  budget."  she  said. 

Fortunately,  a  new  concept  called  “Service  Process  Optimization" 
has  emerged  to  help  IT  executives  set  project  priorities  while  at  the 
same  time  helping  the  IT  staff  complete  those  projects  on  time  and 
under  budget. 

SPO  works  because  it  streamlines  all  stages  of  the  work  process,  from 
demand  management  to  delivery  management  to  financial  management 
It  helps  manage  work  requests,  estimate  costs  better,  assign  the  ri^t 
people  to  projects,  manage  them  effectively  and  then  manage  the  costs 
of  those  projects,  including  chargebacks. 


If  integrated  effectively,  this 
critical  process  information 
can  feed  into  portfolio 
and  performance  man¬ 
agement  systems  to 
enable  QOs  to  answer 
the  tou^  questions.  | 

How  do  1  strategically 
manage  a  budget  cut? 

How  do  I  prioritize  proj¬ 
ects  given  my  constrained 
human  and  finaiKiai 
resources?  How  do  I  connect  IT’s 
priorities  with  those  of  the  overall  enterprise? 

If  these  are  the  daunting  questions  you  want  to  be  able  to  answer, 
the  time  may  be  ri^t  for  effective  portfolio  management  throu^  SPO. 

To  obtain  a  complementary  MEEA  Group  report  on  Portfolio 
Management  and  learn  about  how  Lawson  can  help  with  SPO,  visit  us  at 
www.tawson.com/mwp3. 


Dean  /  Hager  s  executrve  vice  preskieni  for  Service  Process 
Opdrrtaation  at  Lawsor)  Software.  He  s  responsk)le  for  corporate¬ 
wide  prodiKt  strategy'  development  and  marketing.  In  addition. 
Hager  is  responsible  for  the  SPO  martec  lindudiing  sales,  services, 
marketing  aHiarKes  and  product  strategy  and  execi/don 


Lawson  SPO  Solution's  Bottom-Line  Impact 


Lawson's  Service  Process  Optimization 
solution  helps  IT  organizations  lower  and 
stabilize  costs  to  achieve  a  greater,  more 
rapid  ROi.  in  addition,  Lawson  improves 
your  responsiveness  by  automating  work 
request  submission,  approval,  delegation 
and  status  reporting. 

Components  of  Lawson's  SPO  solution 
can  be  implemented  individually  or  com¬ 
prehensively  for  end-to-end  management 
of  IT  projects. 


Portfolio  Management  is  integrated 
with  Services  Automation  to  help  IT  decision¬ 
makers  determine  which  IT  initiatives  will 
deliver  the  greatest  RO)  while  also  enabling 
you  to  evaluate  risk. 

Services  Automation  provides  a  broad 
range  of  capabilities  for  demand,  delivery 
and  finandal  management  and  integrates 
with  back-offia  systems.  Servias  Automation 
improves  forecasting  and  helps  match  the 
demands  on  your  IT  organization  to  the 


supply  of  internal  and  ectemal  resources, 
allowing  you  to  more  effectively  meet  your 
service  level  commitments. 

Enterprise  Performance  Management 
combines  analytics  with  Lawson's  Smart 
Notification  technology.  The  analytics  func¬ 
tionality  enables  the  executive  team  to 
evaluate  resource  capacity  and  IT  costs 
in  real  time  Smart  Notifkaiion  allows  the 
enterprise  to  define  critical  information 
thresholds  and  then  push  information  to 


those  who  need  rt.  using  email.  PDA.  fax 
or  phone. 

Enterprise  Knowledge  Management 
makes  it  easy  to  share  crucial  information 
across  the  organizatkXL  K  provides  the  abfli- 
ty  to  drill  from  transactional  data  through 
to  the  unstructured  information,  such  as 
emails  and  plans,  that  provides  the  critical 
(tontext  for  fast  effective  dedsion-makmg. 

To  learn  more  about  Lawson's  SPO  solu¬ 
tion.  contact  us  at  1-800-477-1357. 
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MaryOdson 

By  promoting  the  power  of  tech¬ 
nology,  she  quelled  users’  con¬ 
cerns  and  increased  productivity. 
By  Blen  Fanning 

Lawyers  are  known  for  maklr^;  compelling 
arguments,  but  it's  an  IT  leader  who  can 
make  a  business  case  based  entirely  on  the 
merits  of  technology. 

Mary  Odson.  CIO  at  Paul.  Hastings.  Janofsky  & 
Walker  LLP  in  Los  Angeles,  had  made  the  deci¬ 
sion  to  move  the  law  firm  to  a  unified  messaging 
s>’stem  tying  together  voice,  fax  and  e-mail  com¬ 
munications  in  a  sii^c  interface.  Because  she  had 
worked  in  IT  at  law  firms  her  entire 
career.  Odson  was  keenly  aware  of  the 
unique  technology  requirements  of  the 
legal  conununity. 

“I  have  a  strong  appreciation  of  how 
attorneys  use  and  don't  use  technology." 
says  Odson.  For  example,  they  need  word 
processing  capabilities  to  handle  the 
reams  of  legal  documents  that  pass 
through  the  office  each  day.  But  even 
more  important  are  the  client  services 
the  firm  provides  from  its  international 
offices.  The  IT  department  supports 
2.000  users,  including  850  attorneys  do¬ 
ing  business  in  the  US.,  Asia  and  the  U.K. 

But  the  idea  of  a  single  repository  for 
all  communications  worried  some  users, 
she  says.  “There  was  a  lot  of  resistance 
to  the  concept  from  the  attorneys."  says 
Odson.  “There  was  a  concern  that  impor¬ 
tant  voice  mails  would  be  buried  in  the 
user's  in-box." 


Derek  Smith,  a  partner  and  chairman  of  the 
technology  committee  at  the  firm,  says  Odson  was 
instrumental  in  overcoming  that  concern.  “It  was 
a  matter  of  changing  how  we  do  things,"  he  says. 
“The  IT  staff  educated  people  regarding  the  bene¬ 
fits  [of  the  system].  Mary  played  an  enormous  role 
in  that.” 

To  win  them  over.  Odson  says  she  “leveraged 
one  technology  to  sell  another."  promoting  the 
strengths  of  the  Research  In  Motion  Ltd.  Black- 
Berry  handheld  device  in  order  to  calm  fears 
about  lost  communications  and  show  the  benefits 
of  round-the-clock,  real-time  dialogue  with 
clients.  Now  users  see  pending  voice-mail  and  fax 
messages  on  their  BlackBerry  devices  in  addition 
to  e-mail  notifications,  and  Odson  says 
one  attorney  has  estimated  that  it  saves 
him  a  half  hour  per  day. 

Odson  began  her  career  at  a  small  law 
firm  in  the  1980s  as  a  database  adminis¬ 
trator  and  assumed  the  CIO  role  at  Paul. 
Hastings,  Janofsky  &  Walker  in  1999. 
Since  then,  her  IT  staff  has  grown  from 
42  in  1999,  when  all  development  and 
high-level  systems  support  was  out¬ 
sourced.  to  the  current  90-person  staff, 
which  supports  and  develops  all  of  the 
firm's  systems. 

Odson  says  her  decision  to  hire  high¬ 
ly  nrativated  staffers  who  aspire  to  at¬ 
tain  the  top  IT  post  she  now  holds 
might  be  perceived  as  risky,  but  it’s  one 
she  feels  quite  comfortable  with.  By 
surrounding  herself  with  competent 
people,  Odson  explains,  she  has  en¬ 
sured  that  the  IT  department  will  re¬ 
main  strong  into  the  future.  I 
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•  scon  L  CARCILLO,  35.  CIO,  vice 
president  of  IT  and  services.  Digex  Ina. 
Laurel.  Md. 


■  MARIO  C.  CARLOS.  42.  bead  of  IT. 
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president  of  IT.  Progress  Software  &>rp.. 
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nity.  Scottsdale) 


■  MIKE  CHILDRESS.  36.  senior 
vice  president  of  developmenl.  Delta 
Teduioiogy  Inc.  Atlanta 


■  MARTY  CHUCK.  A2,  CIO.  Agilent 
Technologies  Inc..  Santa  Clara.  CaM. 


■  MARTY  COLE,  46.  global  managing 
paring,  outsourcing  and  intrastrocture 
delivery.  Accenture  Ltd.,  Hartford. 
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IT  Accountability  Requirements  on  the  Rise 

Can  You  Answer  the  Tough  Questions? 

By  Dean  J.  Hager 


Could  you  answer  these  questions  quickly  and  accurately? 

•  What  were  your  10  largest  IT  projects  last  quarter  based 
on  total  cost? 

•  What  is  the  ROI  for  each  of  those  projects? 

•  How  are  your  resources  deployed  and  what  is  their  utilization? 

•  What's  in  your  project  portfolio  and  how  would  a  new  high- 
potential  project  affect  the  mix? 

If  you  could,  you  would  be  in  the  minority.  Surprisingly  few  senior 
IT  executives  are  able  to  easily  demonstrate  the  level  of  accountabUity 
that  CEOs  and  CFOs  expect  in  todays  tough  business  environment. 

Robert  Frances  Group  analyst  Maria  DeGiglio  noted  in  a  recent 
report  that  IT  budgets  and  projects  are  under  greater  scrutiny  from 
business  unit  executives  after  so  many  IT  projects  over  the  last  decade 
fell  short  of  their  promised  benefits.  “Multiple  surveys  indicate  that 
less  than  30  percent  of  U.S.  corporations  that  executed  IT  projects 
were  successful,  while  the  majority  of  projects  were  cancelled  before 
implementation,  late,  or  over  budget,”  she  said. 

Fortunately,  a  new  concept  called  "Service  Process  Optimization" 
has  emerged  to  help  IT  executives  set  project  priorities  while  at  the 
same  time  helping  the  IT  staff  complete  those  projects  on  time  and 
under  budget. 

SPO  works  because  it  streamlines  all  stages  of  the  work  process,  from 
demand  management  to  delivery  management  to  financial  management. 
It  helps  manage  work  requests,  estimate  costs  better,  assign  the  right 
people  to  projects,  manage  them  effectively  and  then  manage  the  costs 
of  those  projects,  including  chargebacks. 


If  integrated  effectively,  this 
critical  process  information 
can  feed  into  portfolio 
and  performance  man¬ 
agement  systems  to 
enable  CIOs  to  answer 
the  tough  questions. 

How  do  I  strategically 
manage  a  budget  cut? 

How  do  I  prioritize  proj¬ 
ects  given  my  constrained 
human  and  financial 
resourres?  How  do  I  connect  IT's 
priorities  with  those  of  the  overall  enterprise? 

If  these  are  the  daunting  questions  you  want  to  be  able  to  answer, 
the  lime  may  be  right  for  effective  portfolio  management  throu^  SPO. 

To  obtain  a  complementary'  META  Group  report  on  Portfolio 
Management  and  learn  about  how'  Lawson  can  help  with  SPO.  xisit  us  at 
www.lawson.com/mwp3. 

Dean  J.  Hager  is  executive  wee  president  for  Serwee  Process 
Optimaation  at  Lawson  Software.  He  is  re^xjnsible  for  corporate- 
wide  product  strategy,  devetopmerw  and  marketing.  In  addrtiba 
Hager  is  responsible  for  the  SPO  market  irKkjding  sales,  serwees, 
marketing.  atliarKes  and  product  strategy  and  execution 


Lawson  SPO  Solution's  Bottom-Line  Impact 


Lawson's  Service  Process  Optimization 
solution  helps  IT  organizations  lower  and 
stabilize  costs  to  achieve  a  greater,  more 
rapid  ROI.  In  addition,  Lawson  improves 
your  responsiveness  by  automating  work 
request  submission,  approval,  delegation 
and  status  reporting. 

Components  of  Lawson's  SPO  solution 
can  be  implemented  individually  or  com¬ 
prehensively  for  end-to-end  management 
of  IT  projects. 


Portfolio  Management  is  integrated 
with  Services  Automation  to  help  IT  decision¬ 
makers  determine  which  IT  initiatives  will 
deliver  the  greatest  ROI  while  also  enabling 
you  to  evaluate  risk. 

Services  Automation  provides  a  broad 
range  of  capabilities  for  demand,  delivery 
and  financial  management  and  integrates 
with  back-office  systems.  Senrices  Automation 
improves  forecasting  and  helps  match  the 
demands  on  your  IT  organization  to  the 


supply  of  internal  and  external  resources, 
allowing  you  to  more  effectively  meet  your 
service  level  commitments. 

Enterprise  Performance  Management 
combines  analytics  with  Lawson's  Smart 
Notification  technology  The  analytics  func¬ 
tionality  enables  the  executive  team  to 
evaluate  resource  capacity  and  IT  costs 
in  real  time.  Smart  Notification  allows  the 
enterprise  to  define  critical  information 
thresholds  and  then  push  information  to 


those  who  need  it.  using  email,  PDA,  fax 
or  i^ione. 

Enterprise  Knowledge  Management 
makes  it  easy  to  share  crucial  information 
across  the  organization.  It  provides  the  abili¬ 
ty  to  drill  from  transactional  data  through 
to  the  unsuuctured  information,  such  as 
emails  and  plans,  that  provides  the  critical 
context  for  fast,  effective  dedsion-making. 

To  learn  more  about  Lawson's  SPO  solu- 
iron,  contact  us  at  1-800-477-1357. 
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Robert  Galletta 


■  RICK  DEVENUn.  corporate 
vice  presidenL  CK).  Microsoft  Corp.. 
RedirondWasK 


•  SCOnDIETZEN.40.d)ieftecftr¥]lo- 
gy  officer.  BEA  Systems  Irrc.  Sari  Jose 


■  HAMtlET  EOELMAN.  46.  senior 
vice  president  CK).  Avon  Products  Inc.. 
NewYbrit 


a  0RE06  FARRIS,  48.  vice 
presidnit  of  IT.  Oceaieering 
International  Inc..  Houston 


■  CHRIS  DUNCAN.  40.  global  leader. 
e^ornmunicaPons  technology.  The  Dow 
Chemical  Co..  Midand.  Mich. 


■  JOAN  DUNN,  4^  manager  of  enter¬ 
prise  cornpuling.  Anadarto  Petroleum 
Coqx.  The  Wxxlands,  Texas 


a  ROBERT  DUTILE,  42.  executive  vice 
preeiderri  of  key  technology  services. 
KeyCorp.  Cleveland 


a  WILLARD  S.  EVANS  JR..  46. 

vice  president  F^oples  Energy  Coip.. 
Chic^ 


■  BRUCE  FAOEM.  57.  vice  president. 
CIO.^eth.Paok.Pa. 


•  WILLIAM  F.  FINEFIELO.  61. 

CK).  Navy  Bcchange  Service 
Command.  Virginia  Beach. 
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He  finds  the  hidden  benefits  of  each 
project  at  the  Federal  Reserve  Bank 
of  New  York.  By  Lucas  Mearian 

WHILE  ANY  rr  PROJECT  has  its  challenges. 

leadii^  an  initiative  you  don't  believe 
in  can  be  anguishing  for  the  best  of 
managers.  But  as  Robert  Galletta  has 
learned,  if  you  look  hard  enough,  you  can  find  a 
silver  lining  in  what  you  might  think  is  the  worst 
of  technology  projects. 

“Working  as  a  project  director  or  working  on 
anything  I  don't  fully  believe  in  is  the 
single  biggest  challenge  I  face."  says  Gal- 
letla.  a  staff  director  at  the  Federal  Re¬ 
serve  Bank  of  New  York.  "I  can’t  fake  it.  1 
have  to  fmd  one  aspect  of  an  initiative  to 
believe  in." 

Galletta  was  once  asked  to  lead  an  ef¬ 
fort  to  move  from  a  technology  platform 
he  helped  build  and  implement  that  bad 
added  a  tremendous  amount  of  value  to 
the  corporation.  He  says  he  felt  that  it 
still  had  a  great  deal  of  value  left  in  it. 

The  new  technology.  Galletta  says, 

"was  clearly  not  as  robust  and  had  little 
immediate  promise  for  enhancement.” 

On  top  of  that,  his  staff  would  have  to  be 
retrained  to  use  it. 

“After  a  frustrating  few  months  of 
trying  to  fmd  some  value  in  it ...  I  real¬ 
ized  it  was  a  no-win  situation.  So  I  fo¬ 
cused  on  the  fact  that  the  iir^lementation 
would  allow  my  staff  to  enhance  their 
careers  by  being  a  part  of  this  strategic 


initiative  within  this  organization.”  he  says. 

Melanie  Heintz,  also  a  staff  director  at  the  Fed¬ 
eral  Reserve  Bank,  says  Galletta  taught  her  that 
same  glass-half-hiU  leadership  style. 

“What’s  unique  about  him  is  he  has  this  way  of 
managing  people  based  on  their  abilities,  but  at 
the  same  time  treating  everybody  the  same. 
There’s  no  variance  there."  Heintz  says. 

It  was  another  frustrating  situation  in  Galletta’s 
career  that  led  him  to  form  the  Storage  Manage¬ 
ment  Council  of  New  York  last  April,  joining 
forces  with  the  New  York  Software  Industry  Asso¬ 
ciation  in  order  to  gather  IT  decision-makers  and 
storage  vendor  executives  in  a  forum 
setting. 

About  five  years  ago.  when  storage- 
area  networks  were  in  their  infancy,  Gal¬ 
letta  says,  he  was  looking  to  consolidate 
his  inftastructure  but  found  that  storage 
vendors  didn't  want  to  acknowledge  that 
certain  applications  —  namely  Novell 
Inc.’s  NetWare  operating  system  — 
needed  to  interoperate  with  the  storage 
systems. 

“I  didn’t  like  how  storage  vendors 
didn't  like  to  listen.  I  wotild  write  the 
agenda  before  the  meeting,  about  what 
I’d  like  to  talk  to  them  about,  and  they’d 
come  in  and  be  appalled  by  it."  Galletta 
says,  adding.  “Who’s  the  customer?”  The 
Storage  Management  CouiktU  now  hosts 
conferences  and  produces  a  newsletter 
on  storage  issues. 

“That’s  the  kind  of  thing  1  do.  I  get  in¬ 
volved.  whether  it’s  an  internal  issue  or 
an  industry  issue."  Galletta  says.  I 
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He  finds  the  hidden  benefits  of  each 
project  at  the  Federal  Reserve  Bank 
of  New  York.  By  Lucas  Mearian 

WHILE  ANY  IT  PROJECT  has  its  challenges. 

l^fltng  an  initiative  you  don't  believe 
in  can  be  anguishing  for  the  best  of 
managers.  But  as  Robert  Galletta  has 
learned,  if  you  look  hard  enough,  you  can  find  a 
silver  lining  in  what  you  might  think  is  the  worst 
of  technology  projects. 

“Working  as  a  project  director  or  working  on 
anything  I  don’t  fully  believe  in  is  the 
single  biggest  challei^e  1  face."  says  Gal¬ 
letta.  a  staff  director  at  the  Federal  Re¬ 
serve  Bank  of  New  Yoik.  “1  can’t  fake  it.  I 
have  to  And  one  aspect  of  an  initiative  to 
believe  in." 

Galletta  was  once  asked  to  lead  an  ef¬ 
fort  to  move  from  a  technology  platform 
he  helped  build  and  implement  that  had 
added  a  tremendous  amount  of  value  to 
the  corporatioiL  He  says  he  felt  that  it 
still  had  a  great  deal  of  value  left  in  it 
The  new  technolc^.  Galletta  says, 

“was  clearly  not  as  robust  and  had  little 
immediate  promise  for  enhancement." 

On  top  of  t^t  his  staff  would  have  to  be 
retrained  to  use  it 
“After  a  ffustratiag  few  months  of 
trying  to  And  some  value  in  it ...  I  real¬ 
ized  it  was  a  no-win  situation.  So  I  fo¬ 
cused  on  the  fact  that  the  implementation 
would  allow  my  staff  to  enhance  their 
careers  by  being  a  part  ot  this  strategic 


initiative  within  this  organization."  he  says. 

Melanie  Heintz,  also  a  staff  director  at  the  F^- 
eral  Reserve  Bank,  says  Galletta  taught  her  that 
same  glass-half-full  leadership  style. 

“What’s  unique  about  him  is  he  has  this  way  of 
manAging  people  based  on  their  abilities,  but  at 
the  <ami»  timp  treatii^  everybody  the  same. 
There’s  no  variance  there,"  Heintz  says. 

It  was  another  fhistrating  situation  in  Galletta’s 
career  that  led  him  to  form  the  Storage  Marn^e- 
ment  Council  of  New  York  last  April,  joining 
forces  with  the  New  York  Software  Industry  Asso¬ 
ciation  in  order  to  gather  FT  decision-makers  and 
storage  vendor  executives  in  a  forum 
setting. 

About  Ave  years  ago,  when  storage- 
area  networks  were  in  their  infancy,  Gal¬ 
letta  says,  he  was  looking  to  consolidate 
his  inf^tructure  but  found  that  storage 
vendors  didn’t  want  to  acknowledge  that 
certain  applications  —  namely  Novell 
Inc.’s  NetWare  operatii^  system  — 
needed  to  interoperate  with  the  stor^ 
systems. 

“I  didn't  like  how  stor^e  vendors 
didn’t  like  to  listen.  I  would  write  the 
agenda  before  the  meeting,  about  what 
rd  like  to  talk  to  them  about,  and  they’d 
come  in  and  be  appalled  by  it,"  Galletta 
says,  adding,  "Who’s  the  customer?"  "The 
Storage  Management  Council  now  hosts 
conferences  and  produces  a  newsletter 
on  storage  issues. 

"That’s  the  kind  of  thing  I  do.  I  get  in¬ 
volved.  whether  it’s  an  internal  issue  or 
an  industry  issue,"  Galletta  says.  I 
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Keep  bad  things  from  reaching  users  and  youll  get  noticed  for  all  the  good  you  do.  One  way  is  to  use  an  L5S00  automated  tape 
library  with  Tape  Mirrorirtg  software  for  foolproof  backup  and  restore.  Or  a  D280  disk  system  with  Remote  Voturrw  Mirroring 
software  so  systems  rebourKl  fosL  Whatever  your  solution,  well  make  sure  you  only  get  rK>tked  when  you  want  Learn  rrMxe 
about  this  story  and  od>er  ways  we  can  help  you  at  www.savetheday.com  SrORACET^ICSavethcOay.* 
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Patricia  Graham 


Using  her  power  of  persuasion,  she 
won  cooperation  for  a  data  stan¬ 
dards  project.  By  Jean  Consilvio 

PATRICIA  GRAHAM  KNOWS  that  the  most 
effective  way  to  sell  a  project  is  to  form 
relationships  with  end  users  and  explain 
what’s  in  it  for  them. 

As  director  of  information  systems  at  Pruden¬ 
tial  Financial  in  Roseland,  N.J.,  Graham's  latest 
challenge  is  pitching  the  strategic  benefits  of  data 
modeling.  XML  support  and  metadata  manage¬ 
ment  to  the  80  or  so  business  units  that  she  and 
her  department  of  16  people  support. 

“I'm  always  in  a  selling  mode.  Some¬ 
times  I  feel  like  I’m  the  Willy  Loman  of 
IT,’*  she  says.  Over  the  past  two  years, 

Graham  has  been  convincing  business 
units  of  the  time  savings  and  quality  im¬ 
provements  that  can  be  gained  from  us¬ 
ing  industry  and  XML  standards. 

“Her  strength  is  making  them  aware  of 
all  the  things  they  can  gain  bolistical]y,“ 
says  Curtis  Mitchell,  vice  president  of  IS 
and  Graham's  boss.  "She  provides  a  lot  of 
feedback  and  information  that  they  don’t 
already  have." 

For  example.  Graham’s  role  in  a  meta-  gg 

data  management  project  might  be  to 
make  sure  that  all  life  insurance  data  is  TITLE:  DbWiV 
available  to  business  units  and  to  foster  if  IB 
communication  between  business  and 
systems  groups  by  providing  a  more  pre-  EMPLOVS: 
cise  and  business-friendly  language.  foMUffoWHU, 

The  ultimate  goal  is  to  free  the  busi-  RsMlMil  ILI. 

ness  units  so  they  can  spend  more  time 
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running  the  business  and  serving  customers  and 
less  time  deciphering  technical  specifications  or 
reports. 

During  her  19  years  at  Prudential  —  the  past  12 
in  data  architecture  —  Graham  has  used  her  in¬ 
nate  talent  as  part  marketer,  part  social  worker  to 
win  the  cooperation  of  developers,  project  man¬ 
agers  and  analysts.  And  that  has  been  a  difficult 
task  at  times,  as  business  units  must  now  pay  for 
her  department's  IT  services  by  the  project. 

“It’s  hard  for  people  to  see  the  business  value  of 
a  data  architect  project  right  away,”  Graham  says. 
"They  could  be  working  on  the  next  project  be¬ 
fore  realizing  the  benefits  from  the  first  one.’’  And 
Graham  knows  firsthand  the  expense  of  not  build¬ 
ing  to  standard.  Without  a  blueprint  to 
guide  design  and  development,  the 
project  team  could  start  to  see  incorrect 
information,  increased  maintenance 
costs  and  the  same  data  analysis  repeat¬ 
ed  over  and  over,  she  says. 

“The  criticism  that  the  creation  of 
data  models  and  metadata  directories 
are  bottlenecks  or  unnecessary  over¬ 
head  quickly  dissipate  when  key  people 
on  project  teams  start  to  see  the  benefit 
in  adhering  to  standards,”  she  says. 

Graham  recently  demonstrated  the 
return  on  investment  from  a  project 
when,  after  building  an  XML  interface 
with  an  outside  company,  she  was  able 
to  send  the  interface  and  data  exchange 
to  a  second  customer  —  without  addi¬ 
tional  development  work. 

“When  you  work  in  data  architecture, 
it’s  just  a  series  of  challenges  you  have 
to  get  through,’*  says  Graham.  I 
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Patricia  Graham 


Using  her  poM^  of  persuasion,  she 
won  cooperation  for  a  data  stan¬ 
dards  project.  By  Jean  Consihrio 

PATRICIA  6RAHAM  KNOWS  that  the  most 
e0ective  way  to  sell  a  project  is  to  form 
relationships  with  end  users  and  explain 
what's  in  it  for  them. 

As  director  of  information  systems  at  Pruden¬ 
tial  Financial  in  Roseland.  N.J..  Graham’s  latest 
challenge  is  pitching  the  strategic  benefits  of  data 
modeling,  XML  support  and  metadata  manage¬ 
ment  to  the  80  or  so  business  units  that  she  and 
her  department  of  16  people  support. 

Tm  always  in  a  selling  mode.  Some¬ 
times  I  feel  like  I'm  the  Willy  Loman  of 
IT."  she  says.  Over  the  past  two  years, 

Graham  has  been  convincing  business 
units  of  the  time  savings  and  quality  im¬ 
provements  that  can  be  gained  from  us¬ 
ing  industry  and  XML  standards. 

"Her  strength  is  making  them  aware  of 
all  the  rhings  they  can  gain  holistically," 
says  Curtis  MitcheU,  vice  president  of  IS 
and  Graham’s  boss.  "She  provides  a  lot  of 
feedback  and  information  that  they  don't 
already  have." 

For  example,  Graham’s  role  in  a  meta¬ 
data  management  project  might  be  to 
make  sure  that  all  life  insurance  data  is 
available  to  business  units  and  to  foster 
communication  between  business  and 
systems  groups  by  providing  a  more  pre¬ 
cise  and  business-friendly  language. 

The  ultimate  goal  is  to  free  the  busi¬ 
ness  units  so  they  can  spend  more  time 


running  the  business  and  serving  customers  and 
less  time  deciphering  technical  specifications  or 
reports. 

During  her  19  years  at  Prudential  —  the  past  12 
in  data  architecture  —  Graham  has  used  her  in¬ 
nate  talent  as  part  marketer,  part  social  worker  to 
win  the  cooperation  of  developers,  project  man¬ 
agers  and  a^ysts.  And  that  has  been  a  dUHcult 
task  at  times,  as  business  units  must  now  pay  for 
her  department’s  IT  services  by  the  project. 

"It's  hard  for  people  to  see  the  business  value  of 
a  data  architect  project  right  away."  Graham  says. 
"They  could  be  woiking  on  the  next  project  be¬ 
fore  realizing  the  benefits  from  the  first  one."  And 
Graham  knows  firsthand  the  expense  of  not  build¬ 
ing  to  standard.  Without  a  blueprint  to 
guide  design  and  development,  the 
project  team  could  start  to  see  incorrect 
information,  increased  maintenance 
costs  and  the  same  data  analysis  repeat¬ 
ed  over  and  over,  she  says. 

"The  criticism  that  the  creation  of 
data  models  and  metadata  directories 
are  bottlenecks  or  unnecessary  over¬ 
head  quickly  dissipate  when  key  people 
on  project  teams  start  to  see  the  benefit 
in  adhering  to  standards,"  she  says. 

Graham  recently  demonstrated  the 
return  on  investment  from  a  project 
when,  after  building  an  XML  interface 
with  an  outside  company,  she  was  able 
to  send  the  interface  and  data  exchange 
to  a  second  customer  —  without  addi¬ 
tional  development  wotk. 

"When  you  worit  in  data  architecture, 
it’s  just  a  series  of  challei^es  you  have 
to  get  through."  says  Graham.  I 
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It  may  also  be  news  to  you  that  VeriSIgn  handles  e-commeroe  payments  for  some  tOfiOO  different  businesses  and  protects  more  than 
400X100  websites.  You  see,  VeriSIgn  has  spent  the  last  seven  years  building  a  secure  infrastructure  for  the  Internet  We'd  like  to  do  the  same 
for  your  business.  VeriSIgn  can  help  you  deploy  a  trusted  infrastructure  so  you  can  conduct  secure  communications  and  transactions.  So 
no  matter  how  many  e-commerce  payments  your  company  handles,  you'll  know  every  last  one  of  them  is  secure. 

Leant  all  you  need  to  know  about  Infrastniaure  security  -  and  how  Verisign's  managed  network  and  security  solutions 
can  help  you  -  hy  downloading  oar  new  white  pepen  Cyber  Security  In  the  Age  of  Action.  Visit  www.rerislgnxom/stcurity 
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John  Andrew  Brown 


ship  team.  Brown  and  his  team  explained  that  the 
winemaker  had  to  get  rid  of  the  risk  and  stagna¬ 
tion  inherent  in  its  legacy  ERP  system  and  invest 
in  one  that  would  allow  the  vineyard  to  become 
much  more  efficient. 

After  conducting  a  lot  of  research,  Brown 
Brothers  chose  Denver-based  J.D.  Edwards  &  Co.’s 
OneWorld  ERP  package,  running  on  an  IBM  Net- 
finity  server.  Implementation  of  the  new  system 
began  early  in  1999.  and  the  financial  component 
went  live  in  July  1999.  The  distribution  model  was 
implemented  that  October. 

The  new  system  allowed  the  winemaker  to  cut 
the  time  it  took  to  process  credit  card  orders  by 
80%,  improved  collections  and  consolidated  bud¬ 
get  information.  The  project  also  put  Brown’s 
management  abilities  to  the  test.  Along  the  way. 
Brown  says,  he  learned  that  leadership  means 

providing  the  ri^t  framework  for  your 
■  people  to  do  great  things. 

"I  believe  that  a  significant  part  of  the 
leadership  role  is  simply  to  get  the  envi- 
ft-  ronment  right  so  my  people  can  do  what 
mt  ^  they  do.”  he  says.  ”However,  when  a 

leader  makes  a  decision,  it  must  be  re- 
i  spected  and  adopted  by  all.  regardless  of 
their  opinions,  because  that  is  part  of 
the  leader's  role  in  the  team.” 

Brown’s  boss,  general  manager  Roland 
I  Wahlquist,  says  he  has  proved  to  be  a 
■  very  effective  CIO  for  the  vineyard, 
guiding  it  through  a  complete  upgrade 
of  its  IT  systems  in  just  five  years. 

”He  and  his  team  have  been  very  sue- 
ccssfiil  at  striking  the  right  balance  be- 
tween  affordable  systems  and  laying  the 
few  foundations  for  growth  with  a  long-term 
liwri  solution.”  Wahlquist  says.  ”He  has  been 
i.fc-  able  to  clearly  articulate  to  senior  man- 
rfh  agement  his  proposed  solutions  and 
gain  their  support."  I 


He  drew  on  the  skills  of  a  cross- 
departmental  team  to  refurbish  a 
vineyard’s  ERP  system. 

By  Linda  Rosencrance 

A  SUCCESSFUL  VINEYARD  owner  must  have 
the  skills  to  harvest  the  best  grapes,  em¬ 
ploy  the  most  talented  winemakers  and 
Sell  customers  on  the  product. 

When  John  Andrew  Brown  took  over  as  CIO  at 
Brown  Brothers  Milawa  Vineyard  Pty.  in  1997,  one 
of  his  first  tasks  drew  on  similar  skills.  The  Aus¬ 
tralian  company,  founded  in  1889  in  Milawa.  Vic¬ 
toria.  had  outgrown  its  legacy  enterprise  resource 
planning  (ERP)  system,  which  had  been  designed 
specifically  for  the  wine  industry. 

The  goal  was  to  move  the  vineyard’s  supply 
chain  onto  a  more  flexible  platform  to 
e.xcellent  customer  service,  offer 


MV  MIT  JOB  n  IT  was  IS  ft  maiiifauiie 
cotBpiaer  operator  fac  ft  retail  cfaaip. 
ni  never  faiVBt  dM!  paper  tapel  We 
fed  lawn  IMS  fttO  of  scuff  iitto  a 

reader  offes  bjr  hand.  The  tape  had 
thkhorrfeie  tendency  to  snap.  Our 
fine  iachnadcNDt  was  CO  pet  rid  of  it; 
however,  this  tape  oontatnrd  vaktaUe 
iafenaatkip  from  cash  regiitets.  and 
we  needed  10  make  sure  Chat  aB  the 


ensure 

back-office  functionality  and  communi¬ 
cate  with  existing  and  future  systems, 
says  Brown,  who  is  a  fourth-generation 
employee  of  the  family-owned  business. 

His  first  challenge  was  to  select  an  im¬ 
plementation  team  made  up  of  key  peo¬ 
ple  from  various  departments,  including 
IT.  marketing,  operations  and  finance. 

The  next  challenge  unfolded  over  the 
ensuing  six  months,  as  Brown’s  team 
presented  its  plans  to  all  of  the  knowl¬ 
edge  workers  in  the  company,  explaining 
that  implementing  a  new  ERP  system 
was  a  business  decision  and  not  just  an 
IT  decision. 

"Wc  said  that  although  we  didn’t  know 
what  the  new  system  would  look  like, 
things  were  going  to  change,  and  we 
asked  them  to  come  along  for  the  ride. 
We  had  a  pretty  good  acceptance  rate." 
says  Brown,  who  headed  up  the  loadcr- 
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John  Andrew  Brown 


He  drew  on  the  skills  of  a  cross- 
departmental  team  to  refurbish  a 
vineyard's  ERP  system. 

By  Linda  Rosencrance 

A  SUCCESSFUL  V1NEYAR0  owner  must  have 
the  skills  to  harvest  the  best  grapes,  em¬ 
ploy  the  most  talented  winemakers  and 
sell  customers  on  the  product 
When  John  Andrew  Brown  took  over  as  CIO  at 
Brown  Brothers  Milawa  Vineyard  Pty.  in  1997.  one 
of  his  first  tasks  drew  on  similar  skills.  The  Aus¬ 
tralian  company,  founded  in  1889  in  Milawa,  Vic¬ 
toria.  had  outgrown  its  legacy  enterprise  resource 
planning  (ERP)  system,  which  had  been  deseed 
specifically  for  the  wine  industry. 

The  goal  was  to  move  the  vineyard’s  supply 
rhain  onto  a  more  flexible  platform  to 
ensure  excellent  customer  service,  offer 
back-office  functionality  and  communi¬ 
cate  with  existii^  and  future  systems, 
says  Brown,  who  is  a  fourth-generation 
employee  of  the  family-owned  business. 

Hb  first  challenge  was  to  select  an  im- 
plementaticm  team  made  up  of  key  peo¬ 
ple  from  various  departments,  including 
IT,  marketing,  operations  and  finance. 

The  next  challenge  unfolded  over  the 
ensuing  rix  months,  as  Brown’s  team 
presented  its  plans  to  all  of  the  knowl¬ 
edge  workers  in  the  company,  explaining 
that  implementii^  a  new  ERP  system 
was  a  business  decbion  and  not  just  an 
IT  decbion. 

"We  said  that  althou^  we  didn’t  know 
what  the  new  system  would  look  like, 
things  were  going  to  change,  and  we 
asked  them  to  come  along  for  the  ride. 

We  had  a  pretty  good  acceptance  rate,” 
says  Brown,  who  headed  up  the  leader¬ 


ship  team.  Brown  and  hb  team  explained  that  the 
winemaker  had  to  get  rid  of  the  risk  and  stagna¬ 
tion  inherent  in  its  legacy  ERP  system  and  invest 
in  one  that  would  allow  the  vineyard  to  become 
much  more  efficient. 

After  conducting  a  lot  of  research.  Brown 
Brothers  chose  Denver-based  J.D.  Edwards  &  Co.'s 
One  World  ERP  package,  running  on  an  IBM  Net- 
fmity  server.  Implementation  of  the  new  system 
began  early  in  1999.  and  the  financial  component 
went  live  in  July  1999.  TTie  dbtribution  model  was 
implemented  tl^t  October. 

The  new  system  allowed  the  winemaker  to  cut 
the  time  it  took  to  process  credit  card  orders  by 
80%,  improved  collections  and  consolidated  bud¬ 
get  information.  The  project  also  put  Brown’s 
man^ement  abilities  to  the  test.  Along  the  way. 
Brown  says,  he  learned  that  leadership  means 

providing  the  right  framework  for  your 
people  to  do  great  things. 

"I  believe  that  a  significant  part  of  the 
leadership  role  b  simply  to  get  the  envi¬ 
ronment  right  so  my  people  can  do  what 
they  do,”  he  says.  “However,  when  a 
leader  makes  a  decbion.  it  must  be  re¬ 
spected  and  adopted  by  all,  regardless  of 
their  opinions,  because  that  b  part  of 
the  leader’s  role  in  the  team.” 

Brown’s  boss,  general  manager  Roland 
Wahlqubt,  says  he  has  proved  to  be  a 
very  effective  CIO  for  the  vineyard, 
guiding  it  through  a  complete  upgrade 
of  its  IT  systems  in  just  five  years. 

“He  and  hb  team  have  been  very  suc¬ 
cessful  at  striking  the  right  balance  be¬ 
tween  affordable  systems  and  laying  the 
foundations  for  growth  with  a  loi^-term 
solution.”  Wahlqubt  says.  “He  has  been 
able  to  clearly  articulate  to  senior  man¬ 
agement  hb  proposed  solutions  and 
gain  their  support.”  I 
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Roberta  Ambur 


Challenged  to  connect  students 
and  faculty,  she  orchestrated  a 
rollout  of  POAs  at  the  University  of 
South  Dakota.  By  Jean  Consavio 

IT  WAS  THE  SPHINO  OF  2001.  and  Roberta  Ambur, 
CIO  at  the  University  of  South  Dakota,  was 
about  to  undertake  a  technological  advance¬ 
ment  that  no  other  institution  of  higher  leam- 
ing  had  attempted:  a  rollout  of  more  than  1,500 
personal  digital  assistants  (PDA)  to  full-time  fresh¬ 
men,  first-year  law  and  medical  students, 
and  faculty  —  without  adding  IT  staff. 

“Anytime  you  try  something  new,  it’s 
not  going  to  go  smoothly,”  says  Ambur. 

One  initial  worry  was  getting  each  of  the 
participants  in  the  program  to  pay  $250 
for  their  Palm  devices.  But  they  (hd. 

“In  the  beginning,  faculty  and  our  IT 
staff  expressed  some  trepidation  about 
managing  and  disseminating  course  ma¬ 
terials  and  other  academic  information  in 
a  mobile  environment,'*  she  says,  but  that 
concern  was  resolved  within  t^  first  year. 

One  reason  for  the  change  of  heart  is 
that  Ambur  has  moved  quickly  to  ad¬ 
dress  problems  as  they  have  arisen,  says 
Don  Dahlin.  vice  president  for  academic 
afBurs  and  Amburis  boss. 

“For  example,  one  major  issue  was 
moving  content  so  foculty  members 
could  easily  get  class  content  from  the 
classroom  onto  the  PDA,”  says  Dahlin. 


“Roberta  took  the  lead  to  find  a  server  solution 
and  was  successful  on  that  endeavor.” 

Another  snag  in  the  PDA  pilot  prc^ram  was  that 
students  ^o  didn't  have  laptops  weren’t  able  to 
back  up  their  PDAs,  lb  get  around  that  problem, 
the  university  installed  Extended  Systems  Inc.’s 
XTNDConnect  Server  software  over  the  summer. 
The  biggest  rhallenge,  says  Ambur,  was  adding  the 
software  on  top  of  the  existing  IT  architecture  in 
order  to  improve  integration  with  infrared  ports, 
PDAs  and  file-sharing  applications.  “It  was  and  re¬ 
mains  a  very  complex  project,  and  without  her 

leadership,  we  would  not  have  moved  as 
far  and  as  fast  as  we  have,”  Dahlin  says. 

Ambur  was  hired  for  the  new  position 
of  CIO  about  a  year  and  a  half  ago  and 
directs  a  staff  of  127,  including  part- 
timers  from  the  student  lab,  Dahlin  says. 

Ambur  and  her  staff  support  the  Palm 
m500  and  mSlS  devices  and  software 
that  connect  to  the  university  network 
via  cradles  and  infrared  ports  that  stu¬ 
dents  use  to  receive  e-mail,  turn  in  as- 
signments,  schedule  appointments  with 
faculty  and  access  the  Web. 

Ambur  considers  this  rollout  —  only 
one  project  among  many  —  to  be  a  big 
step  forward  for  the  university.  “I  fore¬ 
see  a  time  vriien  you  have  the  PDA  and 
telephone  all  in  one,  and  you’re  on  a 
street  corner  looking  up  your  e-mail, 
talking  on  the  phtme,”  she  says.  “Any¬ 
time.  anyvriiere  activity  —  that’s  what 
the  future  holds.”  I 
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John  A.  Marshall 


stung  by  an  unexpected  user 
back^,  he  learned  a  lesson  in 
leadership.  ByTodd  R.  Wfeiss 


‘^e  t(x>k  a  lot  of  pain  our  [users]."  Mar¬ 
shall  says.  "[They]  didn't  believe  in  the  concept  of 
us  Icxddng  down  their  desktops  and  taking  away 
their  C  drives."  Con^laints  continued  throughout 
the  project  until  its  completion  in  late  1998  as  part 
of  a  pre-Y2k  program. 

Marshall  says  he  learned  that  be  should  have 
spent  more  time  managing  users’  expectations  so 
they  could  have  clearly  seen  the  project’s  payoff. 
I^ow  that  they  imderstand  the  benefits  of  it  and 
bow  much  we  increased  productivity,  I  think 
they’re  OK  with  it,”  he  says. 

I  The  OfHce  of  Naval  Imelligence  sup¬ 
ports  users  in  the  U.S.  Navy  who  gather 
maritime  intelligence  for  the  armed  ser¬ 
vices.  More  than  12S  IT  professionals 
working  under  Marshall  support  help 
desk  and  network  operations  as  well  as 
a  wide  range  of  technologies,  including 
enterprise  databases  and  application 
servers,  and  run  mission-critical  sys¬ 
tems  around  the  clock.  Marshall,  adm 
served  in  the  Navy  from  1976  to  1979,  has 
worked  at  the  office  for  26  years. 

Mark  Greer.  CIO  at  the  Office  of 
Naval  Intelligence,  says  Marshall  made 
the  project  a  success  through  his  leader¬ 
ship.  As  the  work  began,  Marshall  made 
sure  that  everyone  on  the  team  utkler- 
stood  vrirat  they  were  doing  and  adiy,  be 
says.  "He’s  able  to  get  pretty  good  unity 
of  effort,”  Greer  says.  It’s  something  that 
alotofrr  managers  sk^.  He’s  a  good 
leader;  and  he  took  the  time  to  do  that”  I 


Back  in  1997.  as  he  took  on  one  of  the 

biggest  IT  challenges  of  his  career,  John  A. 
Marshall  never  imagined  that  the  hmd- 
ware  and  software  he  was  about  to  deploy 
would  be  the  least  of  his  worries. 

But  that’s  vdrat  happened  when  Marshall,  enter¬ 
prise  systems  director  at  the  Office  of 
Naval  Intelligence  in  Washington,  decided 
to  reconfigure  the  networic  in  a  way  that 
would  allow  some  2,500  users  to  access 
their  files  bom  any  machme,  while  sm^Ii- 
fyii%  maintenance  and  preparing  for  Y2k. 

Instead  of  the  hardware  causing  him 
grie(  it  was  end  users  who  did  sa  They 
had  strenuous  objections  to  his  plans, 
and  they  bad  no  (|ualins  about  sharing 
their  displeasure  with  Marshall  and  his 
staff.  The  users  saw  the  proposed  move 
as  a  way  for  others  to  control  how  they 
used  tfa^  coii4>uters. 

"We  wanted  to  treat  our  desktops  like  WWi 
the  telephone  system,”  enabling  users  to  Hjllll 
log  in  anywhere  to  gain  access  to  their 
data,  says  Marshall.  To  do  that,  the  tech- 
nical  staff  removed  the  hard  drives  from 
the  machines  and  essentially  created 
dumb  terminals  linked  to  centralized 
storage,  which  made  data  backups  and  9||^H 

systems  maintenance  easier.  ^  “vSB 
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I  snirtED  WOMONO  in  rr  when  it 
was  called  ditta  processing.  I  was 
19  years  old  and  worted  second 
shin  as  a  coiiipater  operator  run¬ 
ning  an  IK4  System  3  Alodel  8 
oomputer  We  used  cards  back 
then,  and  there  were  two  key- 
ptindt  operators. 

■  NOMUM  A.  TWMUS.  saw  «Gi 
PKMBIT.  GMBF  TBNMUMV 
OFRCER.  0A  xpaas  BITBVmCS 
■IC..CIIAnMMIOM.TBM. 

I  VMS  ANAUrST  and  project  manager 
for  revenue  optimtirafioo  and 
resenration  systmns  at  Cootmental 
Computer  Sgvke,  a  hosted  com- 
pitter  scrvfces  ptonder  for  more 
than  30  atrtines  worldwide.  We 
designed  and  inq>lemented  a  large 
data  warehouse  based  on  VSAM 
technology  and  InfonnatioD 
Builders  lnc.’s  Focus  report  tool 
for  statistkal  analysis.  We  took 
nightly  iQKlates  frra  a  TPF  ahline 
rescnrrtkMi  system,  converted  the 
data  from  hex  boo  another  format, 
and  hdd  12  months*  rolliiv  history 
for  every  flight  both  pre- and 
postd^Murtore. 

n  AUM  BOEHME.  EXBUmC  VICE 
NBHBir.  Cn.  KSr  SOFTNME 
MC^tfUNU 

I  VMS  TAMHT  THE  business  of  in¬ 
vestment  banking  and  went 
through  intensive  technology 
tniniag  at  liorgm  Stanley.  A 
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Challenged  to  connect  students 
and  faculty,  she  orchestrated  a 
rollout  of  PDAs  at  the  University  of 
South  Dakota.  By  Jean  ConsiMo 

IT  WAS  THE  SPRING  Of  2001,  and  Roberta  Ambur, 
CIO  at  the  University  of  South  Dakota,  was 
about  to  undertake  a  technological  advance¬ 
ment  that  no  other  Institution  of  higher  learn¬ 
ing  had  anempted:  a  rollout  of  more  than  1,500 
personal  digital  assistants  (PDA)  to  full-time  fresh¬ 
men.  first-year  law  and  medical  students, 
and  faculty  —  without  adding  IT  staff. 

"Anytime  you  try  something  new.  it’s 
not  going  to  go  smoothty.”  says  Ambur. 

One  initial  worry  was  getting  each  of  the 
participants  in  the  program  to  pay  $250 
for  their  Palm  devices.  But  they  did. 

"In  the  beginning,  faculty  and  our  IT 
staff  expressed  some  trepidation  about 
managing  and  disseminating  course  ma¬ 
terials  and  other  academic  information  in 
a  mobile  environment.’*  she  says,  but  that 
concern  was  resolved  within  the  first  year. 

One  reason  for  the  change  of  heart  is 
that  Ambur  has  moved  quickly  to  ad¬ 
dress  problems  as  they  have  arisen,  says 
I>on  Dahlin,  vice  president  for  academic 
affairs  and  Ambur's  boss. 

“For  example,  one  major  issue  was 
moving  content  so  faculty  members 
could  easily  get  class  content  from  the 
classroom  onto  the  PDA."  says  Dahlin. 


■  JM  HONERKAHP,  50,  vice  presi¬ 
dent  OO.  Clopay  Ovp..  Mason.  Ohio 

■  PAUL  mOOENBOOM.  Advice 
president  of  operations.  OO.  RPM  Inc.. 
Medina.  Ohio 

■  RICHARD  K.  JONES.  49.  manaoing 
director.  (30.  (kwntiywide  Home  Loans 
lnc..(^al8ba^Caiif. 

a  FRED  KIMBALL.  49.  (30.  FreightTmer 
LLC.  Portland.  Ore. 

a  JOSEPH  Y.  LACIK  JR..  47.  vice 
president  of  information  services.  Avial 
Services  Inc..  Dalas 

a  UNDA  LSnOL  41.  corporate  support 
tTWBox.TheNM\brkTirnesCoi.Na^Vh 


lOO 

lOO 
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"Roberta  took  the  lead  to  find  a  server  solution 
and  was  successful  on  that  endeavor.” 

Another  snag  in  the  PDA  pilot  program  was  that 
students  who  didn’t  have  laptops  weren’t  able  to 
back  up  their  PDAs.  To  get  around  that  problem, 
the  university  installed  Extended  Systems  Inc.’s 
XTNDConnect  Server  software  over  the  summer. 
The  biggest  challenge,  says  Ambur.  was  adding  the 
software  on  top  of  the  existing  IT  architecture  in 
order  to  improve  integration  with  infrared  ports. 
PDAs  and  file-sharing  applications.  “It  was  and  re¬ 
mains  a  very  complex  project,  and  without  her 

leadership,  we  would  not  have  moved  as 
far  and  as  fast  as  we  have,”  Dahlin  says. 

Ambur  was  hired  for  the  new  position 
of  CIO  about  a  year  and  a  half  ago  and 
directs  a  staff  of  127,  including  part- 
timers  from  the  student  lab.  Dahlin  says. 

Ambur  and  her  staff  support  the  Palm 
m500  and  m515  devices  and  software 
that  connect  to  the  university  network 
via  cradles  and  infrared  ports  that  stu¬ 
dents  use  to  receive  e-mail,  turn  in  as¬ 
signments,  schedule  appointments  with 
faculty  and  access  the  Web. 

Ambur  considers  this  rollout  —  only 
one  project  among  many  —  to  be  a  big 
step  forward  for  the  university.  “I  fore¬ 
see  a  time  when  you  have  the  PDA  and 
telephone  all  in  one.  and  you’re  on  a 
street  comer  looking  up  your  e-mail, 
talking  on  the  phone,"  she  says.  "Any¬ 
time.  anywhere  activity  —  that’s  what 
the  future  holds."  I 


■  EDWARD  N.  LEVEILLE.  52.viC8 
president  of  systems.  (30.  F^ovidence 
Vtehington  fnsuranra  Co..  East 
FYovidence.  RJ. 


■  W.  DOUOLAS  LEWIS.  49.  executive 
vice  presiderit  (30.  Six  Continents  Hotels 
fnc.  Atlanta 

«  BEOROE  UN.  32.  vice  preskJenL 
CIO.  Documertum  Inc..  Pleasanton, 

CMf. 

■  JOHN  A.  MARSHALL.  45.  enter¬ 
prise  systems  director.  Office  Of  Naval 
InteMgence.  Washington 

■  WUilAM  E.  McCOREY  JR..  44, 
vice  president  (rf  MIS,  Circuit  Qty  Stores 
he..  Richmond,  Va. 
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John  A.  Marshall 


Stung  by  an  unexpected  user 
backlash,  he  learned  a  lesson  in 
leadership.  By  Todd  R.  Vlfeiss 

Back  in  1997.  as  he  took  on  one  of  the 

biggest  IT  challenges  of  his  career.  John  A. 
Marshall  never  imagined  that  the  hard¬ 
ware  and  software  he  was  about  to  deploy 
would  be  the  least  of  his  worries. 

But  that’s  what  happened  when  Marshall,  enter¬ 
prise  systems  director  at  the  Office  of 
Naval  Intelligence  in  Washir^on,  decided 
to  reconfigure  the  network  in  a  way  that 
would  allow  some  2,500  users  to  access  VQ 
their  files  from  any  machine,  while  simpli- 
fying  maintenance  and  preparing  for  Y2k.  ||| 
Instead  of  the  hardware  causing  him 
grief,  it  was  end  users  who  did  sa  They 
had  strenuous  objections  to  his  plans, 
and  they  had  no  qualms  about  sharing 
their  displeasure  with  Marshall  and  his 
staff.  The  users  saw  the  proposed  move 
as  a  way  for  others  to  control  how  they 
used  their  computers.  ^ 

*^6  wanted  to  treat  our  desktops  like 
the  telephone  system,"  enabling  users  to  tITI£ 
log  in  anywhere  to  gain  access  to  their 
data,  says  Marshall.  To  do  that,  the  tech¬ 
nical  staff  removed  the  hard  drives  from  EMPtl 
the  machines  and  essentially  created  OflM 
dumb  terminals  linked  to  centralized  Mril 

stor^e,  which  made  data  backups  and  VMri 

systems  maintenance  easier. 


■  STEVE  MeOOWaL.  45,  B  dlrecttir. 
HoUay  Refiremem  Ckirp.,  Sal^ 

■  JElUnrilcaHATTIM.  63.  senior 
ezeoANe  vice  president  of  global  (ach- 
nolooyandoperations.MastetCardIrilef- 
national  Inc..  OTalon,  Ma 

■  AUAN  HciJUiaHUN,  4a  senior 
vice  piesidenL  cM  technology  officer. 
LansNocis.  Mlarnisfaurg.  Ohio 

■  STEVE  MESSICK.  4a  senior  vice 
fvesideni  of  lednoiogy.  Business  Wire. 
San  Francisco 

■  JOHN  C.  MOON.  4a  CIO.  Baxter 
Intamalianal  Inc,.  Deerfield,  a 

■  MAirV  OOSON,3aCIO.FW.HBSi- 
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“We  took  a  lot  of  pain  from  our  [users]."  Mar¬ 
shall  says.  “[They]  didn't  believe  in  the  concept  of 
us  locking  down  their  desktops  and  taking  away 
their  C  drives."  Complaints  continued  throughout 
the  project  until  its  completion  in  late  1998  as  part 
of  a  pre-y2k  program. 

Marshall  says  he  learned  that  he  should  have 
spent  more  time  managing  users'  expectations  so 
they  could  have  clearly  seen  the  project's  payoiT. 
"Now  that  they  understand  the  benefus  of  it  and 
how  much  we  increased  productivity.  I  think 
they’re  OK  with  it."  he  says. 

The  Office  of  Naval  Intelligence  sup- 
ports  users  in  the  U.S.  Navy  who  gather 
maritime  intelligence  for  the  armed  ser- 
vices.  More  than  125  IT  professionals 
HH  working  under  Marshall  support  help 
desk  and  network  operations  as  well  as 
a  wide  range  of  technologies,  including 
enterprise  databases  and  application 
servers,  and  run  mission-critical  sys¬ 
tems  around  the  clock.  Marshall,  who 
served  in  the  Navy  from  1976  to  1979.  has 
worked  at  the  office  for  26  years. 

Capt.  Mark  Greer,  CIO  at  the  Office  of 
Naval  Intelligence,  says  Marshall  made 
ipl^  the  project  a  success  through  his  leader- 
ill^  ship.  As  the  woric  began.  Marshall  made 
sure  that  everyone  on  the  team  under¬ 
stood  what  they  were  doing  and  why.  he 
nl  says.  “He's  able  to  get  pretty  good  unity 
,  of  effort."  Greer  says.  “It’s  something  that 

I  a  lot  of  IT  managers  skip.  He's  a  good 

leader,  and  he  took  the  time  to  do  that."  I 


Ings.  Janofeky  &  VMker  UP.  Los  Angeles 

■  ROBEflT  L  OTTO.  SO.  vice  pnsidBnl 
of  ff.  Oa  fM  Senke.  Wtelfogton 

■  JOHN  OUNJUN,  senior  vice 
presider4ofBandcorporalea(|u(ica- 
tion  services.  QO.  Blue  Cross  and  Bhje 
Shielct  of  Urmesota.  Egan 

•  ROOERW.  MIMS,  sa  vice 
president  of  IT.  CIO.  JJf  Simpiot  Co.. 
Boise.  htaiK) 

a  8R1 PICTON.  57.  MB  director. 
Thareo  Inc,  San  Lorenzo.  CaN. 

■  HOWARD  PieOEE  JR.,  sa  director 
of  IT.  CIO.  Lie  Scienoes  dvisioa 
Comkig  Inc,  Acton.  Mass. 
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group  of  ui  built  an  atitomatrd  trader 
using  APU  ao  ardfidal  ioteOigeDce 
iangoage.  It  became  dae  Na  1  income 
producer  in  the  firm. 

■  DMID  R.  OUZMAN.  aOMi  VICE  PNEIh 

onr.  cw.  owes  «  MHOR  Mc..  iiai 

AUflLWL 


I  WAS  AN  ASSBMa  UMOUADE  pro¬ 
grammer  Rt  one  of  the  now-fiuled  sav- 
inga-aiMHoaoooaq>tnies.Iwasre- 
^KMDsttifte  for  the  programs  that  ran  aO 
the  savingaArhfrfcing  nigfatiy  procesa- 
ing  syetemt  for  die  daily  transaccioiis. 
This  consisted  of  two  programs,  each 
cootatnhig  more  chan  12,000  lines  of 
assembler  code.  Job-control  language 
streams  and  finalized  programs  were 
dethrered  eia  punch  cards  to  the  com¬ 
puter  room.  Tbsting  was  Umited  to 
one  per  day  due  to  the  nunfoer  of  re¬ 
movable  dUa  that  needed  to  be 
mounted  for  these  programs,  which 
required  16  of  die  ^  available 
drives  and  severriy  limited  the  capa¬ 
bilities  of  the  odser  devdopers. 

■  JAMES  0.  OBSON.  DWCTQI  OriT.  Tn- 
WESr  HEAUHCMK  AmANCE.  moen 

I  WAS  A  DATA  CBITER  MANAOER.  leadii« 
a  gtoiq>  of  400  eaqdoyees.  1  led  areas 
induding  policy  operatioos,  account¬ 
ing,  customer  service  and  call  center 
fonctioos.  After  dus  aangnmeot.  my 
career  transitioDed  to  several  key 
roles  on  die  busmess  dde.  This 
knowledge  was  invduable  to  me 
when  1  returned  to  the  engfawering 
side  of  IT,  as  k  ^ve  me  insi^  on 
how  our  appBcaiiocs  needed  to  be 
structured  to  order  to  give  our  cus¬ 
tomers  the  esetnordinary  service  they 
expect 

■  cjmnr  RRUME.  now  VKc  rwEsoBiT. 
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Fred  Kimball 

He  led  a  transformation  that  gave 
decision-making  power  to  every 
IT  worker.  By  Julia  King 

IMAGINE  TRYING  TO  QUICKLY  turn  around  an  air¬ 
craft  carrier  under  full  power.  That  should 
^ve  you  some  idea  of  what  Freightliner  LLC 
CIO  Fred  Kimball  was  up  against  in  setting  out 
to  overhaul  the  Portland.  Ore. -based  truck  manu¬ 
facturer’s  385-person  IT  department  —  in  90  days. 

“The  structure  we  had  was  25  years  old,  and  we 
had  no  defined  processes  of  how  to  get  things 
done.  Everything  was  carried  around  in 
everyone's  head."  says  Kimball.  "People 
came  in  from  outside  and  pretty  much 
did  their  own  thing.  Project  management 
was  a  major  problem  for  us.” 

He  decided  to  involve  virtually  every 
IT  worker  in  the  department's  metamor¬ 
phosis.  Kimball  laid  out  25  transition 
teams,  but  rather  than  assigning  people 
to  teams  that  covered  everything  from 
application  de'.  elopment  to  project  man¬ 
agement,  he  says  he  encouraged  workers 
to  "sign  up  for  their  passion.” 

Kimball,  a  Boy  Scout  troop  leader  in 
his  spare  time,  also  did  something  that  at 
first  glance  may  seem  out  of  character 
for  a  member  of  a  group  whose  motto  is 
“Be  prepared."  He  laid  out  only  about 
80%  of  the  concepts  on  which  the  new 
IT  organization  was  to  be  built. 

“Clearly,  the  change  was  so  dramatic 


that  I  needed  to  get  buy-in.  and  this  gave  [the 
staff  ]  the  opportunity  to  be  involved  in  making 
decisions  on  a  day-to-day  basis.”  he  explains.  “It 
also  was  an  enabling  process  to  find  out  who 
could  help  us  reinvent  ourselves  and  who  was  op¬ 
posed  to  the  reinvention  process." 

The  move  was  “pure  Fred,"  according  to  Chi- 
Chao  Chen.  Freightliner’s  director  of  infrastruc¬ 
ture  development  and  support  and  a  colleague 
who  has  worked  with  Kimball  for  the  better  part 
of  20  years.  "Even  though  he  is  a  computer  sci¬ 
ence  graduate,  he  doesn’t  believe  computers  are 
everything.  He  believes  in  people  and  trusts  his 

team,”  Chen  says.  "He  says  that  one  plus 
one  doesn't  equal  two.  but  that  when 
people  work  together,  it's  a  multiplica¬ 
tion  of  their  potential. 

“He’s  a  visionary."  Chen  adds.  “Rather 
than  worry  about  day-to-day  operations, 
he  trusts  his  managers  and  keeps  his  eye 
on  the  big  picture." 

And.  incidentally,  the  80%  strategy 
was  something  Kimball  learned  in  the 
Boy  Scouts,  which  he  says  is  oriented 
toward  adults  never  doing  something 
for  a  boy  that  he  can  do  for  himself. 

“You  let  boys  cook  their  own  food, 
bum  it,  wash  their  own  dishes,  put  them 
away  greasy  and  soapy  and  eat  off  them 
again  and  get  sick."  he  says.  “But  they 
learn  by  doing."  It's  the  same  in  busi¬ 
ness,  Kimball  says,  adding.  “People 
don't  want  to  be  micromanaged  and  told 
exactly  what  to  do.”  I 


EMPlOVDt: 
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■  JOa  PUUiT.  38.ffisistantvic8 
presidenl  American  International  (Vou^ 
lnc..New\btk 

■  FREDRICK  R.  POND.  45.  director  of 
rnlonnalionservii»s.Schnitzef  Group. 
f^xHandOte. 


■  JOSEPH  A.  PUeUSI.  47.  group  CIO. 
Emcor  Group  Inc.,  NorwaRt.  Conn. 


■  FRANK  H.  RICHARDS.  48.  CK). 
Gesinger  Heafth  System.  OanvAe,  Pa. 


•  RICHARD  RICKS.  4a  group  presi¬ 
dent  Computer  Sciences  Corp..  B  Se- 
gundo.  CaH.(previouslys8niorviceptes- 
ident  and  CK)  N  hbrIN  Nehrorks  Ll^ 


Research  Triangle  Rvk,  N.C.) 

■  JOa  ROSENBERO.  41.  OO. 

Coast  Capital  Savinos.  Surrey. 
British  Columbia 


•  UNDA  ROUBINEK.  34.  sysierre 
officer.  NationMide  MutuN  Irtatrance  Co.. 
Cokjmbus,Ohio 

■  LINDA  SANFORD.  49.  serM  vice 
preskfententerpriseondemandtrans- 
iormation.  BM  Storage  Systems  Group. 
ArTnonk.N.Y. 


•  WILLIAM  L  SCHMin.  54.  director 
of  e^xfiiness.  Celanese  Chemicals  Ltd.. 
Danas 


■  6RE6  SCHUEMAN,  34.vfcepresi- 
derA  chief  technology  officer.  Mwcury 
Insurance  Group.  Brek  CaKf. 

■  SEAN  scon,  az  CIO.  Wbmble  Car¬ 
lyle  Sandridge  and  Rice  PLLC.  Winsten- 
Saiern.N.C. 

■  STEVE  SCOTT.  49.  vice  president 
of  inforrnaiion  systerns  drrision.  \feion 
Serrice  Plan.  Rancho  Cordova.  Cakf. 


>  ALEX  SHAPIRO.  48.  aO.  American 
Student  Assistance.  Boston 


■  WAYNE  ST.  JACQUES,  3a  dkector 
of  IT.  Geographic  Data  ledinology  Inc.. 
Lebanon.  Nil 
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Suchindran  S.  Chatterjee 


Anticipating  the  industry’s  future, 
he  led  an  early  migration  to 
Microsoft.  By  Un^  Rosencrance 


IN  THE  EARLY  1990s.  when  Suchindran  S.  Chatter- 
fee  was  vice  president  of  information  systems  at 
Mutual  of  Omaha  Insurance  Co.,  the  IT  world 
wa.s  largely  controlled  by  IBM.  ^ 

But  Chatterjee  had  the  foresight  to  an-  V 

ticipate  Microsoft  Corp.'s  future  domi-  \ 
nance  in  the  industry.  His  next  step  was  to  ' 
persuade  executives  at  the  insurance  com-  '  m., 
pany  to  move  to  a  standardized  platform  **  •* 
and.  ultimately,  sign  an  8.000-user  license  /  | 
with  Microsoft.  That  was  no  easy  task.  |  I 
says  Chatterjee.  now  chairman  and  CIO  at  L ' 

Cum  Laude  Academy  of  Learning  in  V 

Scottsdale.  Ariz.  4 

"It  was  an  uphill  battle  all  the  way.  but 
people  call  me  now  to  say  what  I  did  was 
visionary’  and  the  right  thing  to  da"  he  says.  ^ 

To  convince  Mutual  of  Omaha’s  board 
of  executives  that  the  move  would  pay  off  TTUx 
for  shareholders.  Chatterjee  showed  them 
that  the  company  would  save  money  by  EHMJ 
standardizing  its  systems.  I 

“1  told  them  that  the  upfront  cost  was  mim§ 
S4  million,  but  we  would  save  close  to 
$5  million  over  four  years,"  he  says.  fWa 

As  for  convincing  the  technicians,  who 
were  concerned  about  the  time  and  effort 
it  would  take  to  move  to  a  new  system.  Cmn 

Chatterjee  shepherded  them  to  an  intense 


■  STEVEN  H.  STONE.  40.  vice  presi¬ 
dent  d  IT  strategy.  Ixwe  s  Cos..  North 
WMtesboro.  N.C. 


two-day  meeting  off-site,  where  he  sold  them  on 
the  idea  that  financially,  standardizing  on  Microsoft 
was  the  best  tack  for  Mutual  of  Omaha. 

“Being  a  leader  means  you  have  to  have  the  abili¬ 
ty  to  sell  an  idea,  not  because  it's  snake  oil.  but  be¬ 
cause  you  can  see  the  logic  behind  it."  he  says.  “You 
can  win  over  business  people  by  showing  them 
what’s  in  it  for  them  and  also  showing  them  it  will 
,  make  the  company  more  markeuble." 

“"V  In  his  new  role  at  Cum  Laude  Academy. 

^  Chatterjee  is  responsible  for  Web  de\’el- 
|l  opmeot,  advanced  Microsoft  software  im- 
plementation.  disaster  recovery  planning, 
data  recovery,  outsourcing,  business  de¬ 
velopment  and  education  software  devel¬ 
opment. 

Huey  Thomas  worked  for  Chatterjee  at 
Salt  River  Pima-Maricopa  Indian  Com¬ 
munity  in  Scottsdale,  where  Chatterjee 
w-as  CIO  prior  to  joining  Cum  Laude 
Academy.  As  soon  as  Chatterjee  arrived 
there,  Thomas  knew  things  were  about  to 
.  ”  change  —  for  the  better. 

“Dr.  Chatterjee  had  endless  enthusi¬ 
asm  to  make  the  IS  department  better." 
Thomas  says.  “He  had  an  open-door  poli- 
cy  for  all  departments  and  was  available 
at  all  times,  and  had  the  ability  to  network 
across  alt  departmental  boundaries." 

0lg  Because  of  his  leadership,  the  IS  dc- 

partment  was  able  to  introduce  process 
changes  to  restore  accountability  and  effi- 
I  ciency  to  all  of  the  community’s  depan- 

ments,  Thomas  says.  I 


■  DAVID  STRETT.  46.  former  director. 
Deutsche  Bank.  N^  >brk 


m  OAVIO  SWAITTZ.  49.  CIO.  George 
Whstenglon  University.  Vltehinglon 

■  BILL  THOMAS,  51  senior  vice 
presidenL  Providian  Financial  Corp.. 
Oakland.  CaW. 

•  NORMAN  A.  THOMAS.  44.  senior 
vice  president  chief  technology  officer. 
U5.  Xpress  Enterprises  Iru..  C^- 
tanooga.  Term. 


a  EUBENE  0.  TROXELL,  59.  director 
oifT.  Loudoun  County.  Va..  Leesburg 

a  RICHARD  WALLACE.  33.  QO. 

Divine  Inc.,  Chicaoo 

■  TASOS  TSOLAKIS.  39.  vice  presi¬ 
dent  ol  global  technology  operabons. 
Global  eXchaige  Services  Inc.. 
Gaflhetsburg.Md 

a  DOU6  WATSON.  44.  vioeprestl 
tear  d  ff.  Arnericas.  BacanI  USA.  Mam 

a  THOMAS  K.  WATSON.  34.  projecl 

■  ER6IN  USKUP,  65.  senior  vice 
president  of  IT.  CK).  Umled  Stationers 

Inc..  Des  Raines.  N. 

maceuticaL  Vifesl  Haven.  Com. 

a  CURTIS  L  WOLFE.  60. 00.  State 

a  RA  VERNON.  4Z  vice  presidenL 

Department  Bismarck 

New  York 

aSTEVEVATKO,  33.  chief  technology 

a  HENRY  VOLKMAN.  55.droctaroflT. 
CIO.  Dd  Taco  Inc..  Lake  Forest  Calif. 
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What  Was  Your 
HrstJobmlT? 

Continuedfivmp(ige46 

I  WAS  WQRKMB  NBK  at  Geisii«er  u 
a  cUnical  cbesdat  I  was  hired  b7 
MIS  to  bdp  Install  a  $2  mlllkMi  eUxu- 
cal  laborattM7  fjrstem  ~  beemtse  I 
understood  U)  operatkxis,  and  I  had 
aoDe  conqnxter  estperience.  1  had  a 
small  opemiom  and  dau-entry 
stale  which  were  tocatty  new  areas 
for  me.  Coining  from  a  scieooe  ba^- 
ground,  I  had  a  difoent  idea  about 
sdiat  computers  were  all  abottt.  lb 
me,  they  were  process^control  or 

equivalent  of  targe  61e  cdteDets. 

The  inylementaticw  was  a  success, 
and  doe  system  was  in  use  for  about 
15  years. 

■  niANK  M.  RKMMn.  Cn.  OMMER 
HEALIV  SVnBi  QMMLLE.  M. 


t  WAS  A  GOmrai  OmtrOR  for  a  txaoB- 
poctadoB  services  «>w«p««y  in  Seat¬ 
tle  in  1978.  The  conqMiter  took  tq>  a 
laiMerooaiyechadaiilyasaBtdlfitac- 
tioo  of  the  power  and  capaddes  of 
todayls  PCs.  SdU.  we  were  Wile  to  nm 
two  companies  on  it:  the  mafai  com* 
panyandafboddUtffomhmco—pa* 
ay  lb  eschange  tea  whh  (he  food 
dkarfoodoe  oompasy  a  ooi^foof 
miles  away  we  used  ^ey  to  ligie^ 
madbanea  and  very  daw  OOO  bk/ 
secJ)  modeoe.  Tto  was  an  iacre^- 
ble  handuedoD  to  IT,  because  a 
cotniharropeRattglMidtolaww  what 
the  program  was  doiag  on  doe  con* 
poter  when  mooting  tapea  and  dite 
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Fred  Kimball 

He  led  atransformation  that  gave 
decision-making  power  to  every 
FT  worker.  By  Julia  King 

IMAGINE  TRYING  TO  QUICKLY  turn  around  an  air¬ 
craft  carrier  under  full  power.  That  should 
give  you  some  idea  of  what  FreightUner  LLC 
CIO  Fred  Kimball  was  up  against  in  setting  out 
to  overhaul  the  Portland,  Ore.-ba$ed  truck  manu¬ 
facturer’s  385-person  IT  department  —  in  90  days. 

The  structure  we  had  was  25  years  old.  and  we 
had  no  defined  processes  of  bow  to  get  things 
done.  Everything  was  carried  around  in 
everyone’s  head,”  says  Kimball  “People  ' 
came  in  from  outside  and  pretty  much 
did  their  own  thing.  Project  management 
was  a  major  problem  for  us.” 

He  decided  to  involve  virtually  every 
IT  worker  in  the  department’s  metamor-  i 
pbosis.  Kimball  laid  out  25  transition 
teams,  but  rather  than  a.ssigning  people 
to  teams  that  covered  everything  from 
application  development  to  project  man¬ 
agement,  be  says  he  encouraged  workers 
to  “sign  up  for  their  passion.” 

Kimball,  a  Boy  Scout  troop  leader  in 
his  spare  time,  also  did  something  that  at  | 
fust  glance  may  seem  out  of  character  i 

for  a  member  of  a  group  whose  motto  is  I 
”Be  prepared.”  He  laid  out  only  about  I 
80%  of  the  concepts  on  which  the  new  i 

IT  organization  was  to  be  built.  I 

“Clearly,  the  chai^  was  so  dramatic 


that  I  needed  to  get  buy-in.  and  this  gave  [the 
staff  ]  the  opporttmity  to  be  involved  in  making 
decisions  on  a  day-to-day  basis,”  be  explains.  “It 
also  was  an  enabling  process  to  fmd  out  who 
could  help  us  reinvent  ourselves  and  who  was  op¬ 
posed  to  the  reinvention  process.” 

The  move  was  “pure  Fred,”  according  to  Chi- 
Chao  Chen,  Fre^tliner’s  director  of  infrastruc¬ 
ture  development  and  support  and  a  colleague 
who  has  worked  with  Kimball  for  the  better  part 
of  20  years.  “Even  though  he  is  a  computer  sci¬ 
ence  graduate,  be  doesn’t  believe  computers  are 
everything.  He  believes  in  people  and  trusts  his 

team,”  Chen  says.  “He  says  that  one  plus 
one  doesn’t  equal  two,  but  that  when 
people  work  together,  it’s  a  multiplica¬ 
tion  of  their  potential 
Tie’s  a  visionary,”  Chen  adds.  “Rather 
than  worry  about  day-to-day  operations, 
he  trusts  his  managers  and  keeps  his  eye 
on  the  big  picture.” 

And,  incidentally,  the  80%  strategy 
was  something  Kimball  learned  in  the 
Boy  Scouts,  which  he  says  is  oriented 
toward  adults  never  doing  somethii^ 
for  a  boy  that  he  can  do  for  himself. 

“You  let  boys  cook  their  own  food, 
burn  it.  wash  their  own  dishes,  put  them 
away  greasy  and  soapy  and  eat  off  them 
again  and  get  sick,”  he  says.  “But  they 
learn  by  doing.”  It’s  the  same  in  busi¬ 
ness,  Kimball  says,  addii^  “People 
don’t  want  to  be  micromanaged  and  told 
exactly  what  to  da”  I 
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Suchindran  S. 

Anticipating  the  Indus’s  future, 
he  led  an  eariy  migration  to 
Microsoft  By  Linda  Rosencrance 

iN  THE  EARLY  1990t.  when  Suchindran  S.  Chatter- 
jee  was  vice  president  of  information  systems  at 
Mutual  of  Omaha  Insurance  Co,,  the  IT  worid 
was  largely  controlled  by  IBM. 

But  Chatterjee  had  the  forest^t  to  an¬ 
ticipate  Microsoft  Corp.’s  future  domi¬ 
nance  in  the  industry.  His  next  step  was  to 
persuade  executives  at  the  insurance  com¬ 
pany  to  move  to  a  standardized  platform 
and.  ultimately,  sign  an  8,000-user  license 
with  Microsofo  That  was  no  easy  task, 
says  Chatteriee,  now  chairman  and  CIO  at 
Cum  Laude  Academy  of  Learning  in 
Scottsdale,  Ariz. 

“It  was  an  uphill  battle  all  the  way,  but 
people  call  me  now  to  say  what  I  did  was 
visionary  and  the  right  thing  to  do,”  he  says. 

To  convince  Mutual  of  Omaha’s  board 
of  executives  that  the  move  would  pay  off 
for  shareholders,  Chatterjee  showed  them 
that  the  company  would  save  money  by 
standardizing  its  systems. 

“I  told  them  that  the  upfront  cost  was 
$4  million,  but  we  would  save  close  to 
SS  million  over  four  years,”  he  says. 

As  for  convincing  the  technicians,  who 
were  concerned  about  the  time  and  effort 
it  would  take  to  move  to  a  new  system, 

Chatterjee  shepherded  them  to  an  intense 


Chatterjee 

two-day  meeting  off-site,  where  he  sold  them  on 
the  idea  that  Tmancially.  standardizing  on  Microsoft 
was  the  best  tack  for  Mutual  of  Omaha. 

“Being  a  leader  means  you  have  to  have  the  abili¬ 
ty  to  sell  an  idea,  not  because  it’s  snake  oU,  but  be¬ 
cause  you  can  see  the  logic  behind  it.”  be  says.  “You 
can  win  over  business  people  by  showing  them 
wdiat's  in  it  for  them  and  also  showing  them  it  will 
make  the  company  more  marketable.” 

In  bis  new  role  at  Cum  Laude  Academy. 
Chatterjee  is  responsible  for  Web  devel¬ 
opment.  advanced  Microsoft  software  im¬ 
plementation.  disaster  recovery  plaiming, 
data  recovery,  outsourcing,  business  de¬ 
velopment  and  education  software  devel¬ 
opment 

Huey  Thomas  woiked  for  Chatterjee  at 
Salt  River  Pima-Maricopa  Indian  Com¬ 
munity  in  Scottsdale,  where  Chatterjee 
was  CIO  piicH'  to  joining  Cum  Laude 
Academy.  As  soon  as  Chatterjee  arrived 
there,  Thomas  knew  things  were  about  to 
change  —  for  the  better. 

“Dr.  Chatterjee  had  endless  enthusi¬ 
asm  to  make  the  IS  departxneiu  better.” 
ITromas  says.  “He  had  an  open-door  poli¬ 
cy  for  all  departments  and  was  available 
at  all  times,  and  had  the  ability  to  networic 
across  all  departmental  boundaries.” 

Because  of  his  leadership,  the  IS  de- 
partmrat  was  able  to  introduce  process 
changes  to  restore  accountability  and  effi¬ 
ciency  to  all  of  the  community's  depart- 
inents,  Thontas  says.  I 
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^0^  Scrvices,Inc 

MarwBw,  Network  Design  and  I 
Telecom  Strategy  * 

Oflando.  FL 

Develop  global  telecommunications 
strategy  for  the  Company  and  manage  a 
staff  of  network  engineers.  Must  have: 
lO  yearsoftolecom  and  network 
engineormg  experience  in  a  ^obal. 
complex,  miM-Wxfor  networked 
erwironment;  T-**  years  management 
experfertce  in  a  senior-level  leadership 
role  in  a  targe  organization;  expert  abHity 
to  assess  technical  capabiHties  and 
(imitatkxvi  of  current  arrd  future  network 
equipment  and  technologies  (data, 
voice,  and  video):  sarrior-level 
understanding  of  communicattons 
protocols  (TCP/IP.  IPX.  and  Appletalk), 
routirrg  protocols  (e.g..  RIP.  I6RP. 

EIGRP.  OSPF.  RfifTP,  etc..),  and  router 
filtering  strategies  arrd  logic. 

Disney  offers  a  oompelHive  salary  arrd 
axcelent  benefits.  Apply  via  e-mail: 

cocp.lpns  tw^dlaneyrrwn. 

Sut^act  Rne:  Mgr,  Network  Design  and 
Telecom  Strategy. 
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Tt  hnaa  Assist  w^mamta- 
nanca  of  Rsafoma  Trading 
Room  Usar  ids  A  procaaS' 
ing  of  Labn  Amadcan 
efianis  Min  Raq  Bactt  Im 
CS  or  aqiav.*  4  yrs  «d> ' 
Raaumea:  Pnauna  Captti' 
Hcfdmgs.  200  S.  Btoesynaj 
BMd..  *4700.  Mwni.  FL 
33131 


Programmer/Analys 
(.  Ld.  wanted  by 
recnjftment  org.  in 
Meivtite.  NY  Reqd 
6.  Comp  Sc  or  equiv 
+  3  yrs  exp  ind. 
XML,  Grade.  PB. 
Java.  Webiogic.  Fax 
resume  to  M.  Slorelll 
@631-844-7426.  I 


Busmass  Anatysi  (F/T) 
wanted  by  Ehnhurst. 
IL  company.  Develop, 
imptoment.  teat  and 
maintain  finendal  re¬ 
port  systems  using 
Bean  software.  Req- 
ures  8S  &  5  years 
experience  Repy  (o 
C.  Ther.  SchoHe  Corp. 
Sufte  300.  360  W. 
BuOarfield  Rd.  Elm- 
bunt.  IL  60126. 


Business  Devetopmant 
Rep  Tech  Products. 
Level  t,  for  Roeeville. 
CA.  Raq.  B  S.  Degree  in 
Uectronica  or  computer 
engineering.  Must  be 
skilBd  in  uee  and  imple- 
mentation  of  CAO  and 
CIS  software  and  hard¬ 
ware.  Maa  Resume  to 
H  R  Dk..  IDS  Media. 
2070  Allston  Way.  Ste. 
3.  Berliaiey.  CA  04704 
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The  World  Of  Work  Is 
Changing  Every  Week. 


>5^ 


Luckily,  We  Are  Too! 

For  the  most  up  to  date  opportunities  and 
coverage,  stay  tuned  in  with  us. 

ITcareers 

w^en  the  best  get  better 

1-800-762-2977 
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vdnt  an  affordable,  reliable 
to  attack  an  IT  problem. 


new  wav 


TAC  stands  for  The  Advisory  Council,  a  revolutionary  new  concept  in  IT  advisory  services.  It's  the  perfect  answer 
for  companies  that  can't  afford  today's  expensive  advisory  senrices  yet  can't  risk  going  it  alone. 

With  The  Advisory  Council,  you  pay  a  minimal  membership  fee,  then  you  only  pay  for  services  as  you  need  them. 
TAC  is  the  most  cost  effective  research/advisory  service  on  the  market  today. 

TAC  provides  you  with  peer-to-peer  advice  from  experienced  IT  professionals,  individualized  solu¬ 
tions  to  complex  technology  issues,  research  on  new  information,  the  best  sendee  providers  to  assist 
you  in  project  implementation,  and  much  much  more. 

Discover  all  the  things  our  revolutionary  new  sendee  has  to  offer  you  -  and  take  advantage  of  our 
Free  Trial  Membership  -  by  visiting  our  website  or  calling  us  today.  The  sooner  you  join,  the  sooner  you 
can  TAC  InformationTechnology  problems  and  get  the  most  effective,  most  economical  solutions. 

High-priced  IT  advice  without  the  high  price. 


Free  Trial’:  To  take  advantage  of  our  Free  Trial  Membership,  visit  vvww.theadvisorycouncil.com  and  complete  the  trial 
membership  application  or  call  (877)-565-0064  ‘Refer  to  Promotion  Code  CWll  1 .  Trial  period  not  to  exceed  30  days 


Advisory 

Council 


O  2002  The  Advisoty  Council 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

2003  on  a  Shoestring 


LET’S  START  WITH  WHAT  EVERY  IT  LEADER  knows  already:  There’s 
no  money.  There  is  no  money.  There  is  no  money.  TTiere’s  not 
going  to  be  money  anytime  soon.  You  don’t  know  when  there 
will  be  money.  You  can’t  make  any  plans  that  depend  on  there 
being  money,  because  for  the  foreseeable  future,  the  one  thing 
you  know  is,  there’s  no  money. 

And  as  far  as  money  goes  —  forget  about  it. 

This  year,  IT  leadership  isn’t  about  achieving  great  things  by  mar¬ 
shaling  all  the  resources  at  your  disposal.  It’s  about  getting  the  job 
done,  even  without  the  resources  you  need. 


But  bow  do  you  keep  a  sense  of  powerlessness 
or  paralysis  from  creeping  in,  when  there's  no 
budget  to  do  things  that  need  doing?  And  how  do 
you  keep  morale  up  and  keep  moving  ahead  —  all 
on  the  cheap? 

First,  don't  suoarcoat  your  situation.  You  know 
there's  no  money.  Keep  repeating  that  to  your 
staff,  your  users  and  your  CEO.  Don't  complain: 
lust  be  matter-of-fact  about  it  —  again  and  again 
and  again.  If  nothing  else,  it’ll  help  keep  expecta¬ 
tions  low.  so  every  success  will  look  like  a  real 
achievement. 

Brainstorm.  No,  not  in  a  conference  room  with 
some  overpriced  facilitator.  Kick  ideas  around 
with  your  staff  in  a  dimly  lit  pizza  parlor,  the  way 
nature  intended.  Don’t  take  turns  —  just  let  the 
suggestions,  objections  and  corrections  flow.  Take 
your  own  notes  on  the  back  of  a  napkin,  and  make 
sure  staffers  follow  up  by  identifying  what  they 
think  are  the  best  and  most  practical  ideas.  They’ll 
remember  the  good  ones. 

Take  a  walk  in  UsarvHle.  Touch  base  with  some 
actual,  hands-on-the-keyboard  users.  It's  your 

cheapest  and  most  accurate  reality  - 

check.  If  they’re  really  unhappy  with 
your  systems,  they’ll  tell  you  about  it. 

If  you  can  come  up  with  a  solution, 
everybody’s  happier.  If  not,  they're  no 
worse  off.  Either  way.  you’ll  get  cheap 
insight  into  what  matters  most  to 
them. 

If  M’s  daad,  kil  H.  You’ve  already 
spiked  your  least-likely-to-succeed 
projects,  right?  Now  go  after  the  rest 
of  them  ruthlessly.  If  you  can’t  see  suc¬ 
cess.  kill  it.  If  you  can't  kill  it,  freeze  it 
And  if  you  can't  freeze  it.  figure  out 
how  to  make  it  a  success.  Remember,  _ 
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the  most  costly  projects  are  the  ones  that  never 
deliver  a  return  on  your  investment  because  they 
never  go  live. 

Refactor  -  don't  nickel*and-dime.  You  can  trim  a  lit¬ 
tle  fat  out  of  any  project  easily  once,  maybe  twice. 
The  third  or  fourth  time,  it's  a  lot  harder.  Forget 
the  nickel-and-dime  approach,  Tfy  cutting  big. 
Slice  off  bells  and  whistles,  features  and  even 
some  functions.  Then  offer  users  the  option  of  a 
simpler,  more  reliable  version  delivered  sooner  — 
a  go-cart  instead  of  the  Ferrari  they  asked  for. 
They  may  go  for  it.  and  you’ll  cut  development 
costs.  Sure,  they’ll  still  want  the  Ferrari  next  year. 
But  thatll  be  in  next  year's  budget. 

Watch  out  for  ovorroactions  —  your  own  and  any¬ 
one  else’s.  Everyone’s  tired  and  stressed  from  tight 
budgets,  shrunken  staff  and  overgrown  workloads. 
Tempers  are  frayed.  Minor  problems  or  disagree¬ 
ments  can  blow  out  of  proportion.  Step  in.  Find  a 
resolution.  Stupid  blowups  tend  to  get  expensive 
fast 

Take  care  of  your  staff.  Relax  any  rules  you  can 
that  will  make  things  easier  for  them  without  rais¬ 
ing  risks.  Praise  individuals  in  front  of 
other  executives  and  managers;  word 
will  get  around.  Defend  them  if  a  com¬ 
plaint  is  uiu'easonable  or  unfair.  Look 
out  for  their  interests. 

RnaRy.  follow  through.  The  risk  of 
trying  cheap  new  ideas  is  that  some 
won’t  work,  others  won’t  be  worth  the 
trouble,  and  all  require  more  attention 
than  business  as  usual  does.  You’ll 
have  to  stay  on  top  of  everything  you 
try  if  you  want  to  get  real  value  on  the 
cheap. 

But.  of  course,  you  knew  that  al¬ 
ready.  I 


niEIIKII100ITLEIUIEIIS2003 


www.co(npulen«orid.corn 


Enterprise  application  integration 

Wireless 

Voice  over  IP 

Security 

Storage 

Linux 

Web  services 
Data  management 
Middleware 
Network  management 


47 

41 


E 

□ 

□ 

□ 

□ 

□ 

□ 

□ 


□ 


A 


FRANK  HAYES  ■  FRANKLY  SPEAKING 

2003  on  a  Shoestring 

LErs  START  WITH  WHAT  EVERY  IT  LEADER  knows  already:  There’s 
no  money.  There  is  no  money.  There  is  no  money.  TTiere’s  not 
going  to  be  money  anytime  soon.  You  don’t  know  when  there 
will  be  money.  You  can’t  make  any  plans  that  depend  on  there 
being  money,  because  for  the  foreseeable  future,  the  one  thing 
you  know  is,  there’s  no  money. 

And  as  far  as  money  goes  —  forget  about  it 
This  year,  IT  leadership  isn’t  about  achieving  great  things  by  mar¬ 
shaling  all  the  resources  at  your  disposal.  It’s  about  getting  the  job 
done,  even  without  the  resources  you  need. 


But  how  do  you  keep  a  sense  of  powerlessness 
or  paralysis  from  creeping  in,  when  there’s  no 
budget  to  do  things  that  need  doing?  And  how  do 
you  keep  morale  up  and  keep  moving  ahead  —  all 
on  the  cheap? 

First,  doni  sugarcoat  yow  situatiofi.  You  know 
there’s  no  money.  Keep  repeating  that  to  your 
staff,  your  users  and  your  CEO.  Don't  complain; 
rust  be  matter-of-fact  about  it  —  again  and  again 
and  again.  If  nothing  else,  it’ll  help  keep  expecta¬ 
tions  low,  so  every  sucxess  will  look  like  a  real 
achievemenL 

OraimtMfn.  No.  not  in  a  conference  room  with 
some  overpriced  facilitator.  Kick  ideas  around 
with  your  staff  in  a  dimly  lit  pizza  parlor,  the  way 
nature  intended.  Don’t  take  Uims  —  just  let  the 
suggestions,  objections  and  corrections  flow.  Take 
your  own  notes  on  the  back  of  a  napkin,  and  makp 
sure  staffers  follow  up  by  identiiying  Txdiat  they 
think  are  the  best  and  most  practical  ideas.  They’ll 
remember  the  good  ones. 

Taka  a  wait  in  UaarvMe.  Touch  base  with  some 
actual,  hands-on-the-keyboard  users.  It's  your 
cheapest  and  most  accurate  reality 
check.  If  they’re  really  unhappy  with 
your  systems,  theyll  tell  you  about  it 
If  you  can  come  up  with  a  solution, 
everybody’s  happier.  If  not  they're  no 
worse  off  Either  way,  you'll  get  cheap 
insist  into  what  matters  most  to 
them. 

If  it’s  dead,  kM  H.  You’ve  already 
spiked  your  least-likely-to-succeed 
projects,  right?  Now  go  after  the  rest 
of  them  ruthlessly.  If  you  can’t  see  suc¬ 
cess,  kill  it  If  you  can’t  kill  it  freeze  it 
And  if  you  can’t  freeze  it  figure  out 
how  to  make  it  a  success.  Remember, 


the  most  costly  projects  are  the  ones  that  never 
deliver  a  return  on  your  investment  because  they 
never  go  live. 

Rafoetor  -  don’t  racfcabancHInia.  You  can  trim  a  lit¬ 
tle  fat  out  of  any  project  easily  once,  maybe  twice. 
The  third  or  fourth  time,  it’s  a  lot  harden  Forget 
the  nickel-and-dime  approach.  Tiy  cutting  big. 
Slice  off  bells  and  whistles,  features  and  even 
some  functions.  Then  offer  users  the  option  of  a 
simpler,  more  reliable  version  delivered  sooner  — 
a  go-cart  instead  of  the  Ferrari  they  asked  for. 
Tliey  may  go  for  it.  and  you’ll  cut  development 
costs.  Sure,  they’ll  still  want  the  Ferrari  next  year. 
But  that’ll  be  in  next  year’s  budget 

Watch  out  for  ownoattluiia  —  your  own  and  any¬ 
one  else’s.  Everyone’s  tired  and  stressed  from  d^t 
budgets,  shrunken  staff  and  overgrown  workloads. 
Tempers  are  frayed.  Mimv  problems  or  disagree¬ 
ments  can  blow  out  of  proportion.  Step  in.  Find  a 
resolution.  Stupid  blowups  tend  to  get  expensive 
fast 

Take  can  of  your  staff.  Relax  any  rules  you  can 
that  will  make  things  easier  for  them  without  rais¬ 
ing  risks.  Praise  individuals  in  ftont  of 
other  executives  and  managers:  word 
will  get  aroimd.  Defend  them  if  a  com¬ 
plaint  is  unreasonable  or  unfair.  Look 
out  for  their  interests. 

Rnaly,  Mow  through.  The  risk  of 
trying  cheap  new  ideas  is  that  some 
won’t  work,  others  won’t  be  worth  the 
trouble,  and  all  require  more  attention 
than  business  as  usual  does.  You’ll 
have  to  stay  on  top  of  everything  you 
try  if  you  want  to  get  real  value  on  the 
cheap. 

But,  of  course,  you  knew  that  al¬ 
ready.  I 
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Couldn't  we  just  keep  throwing 
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intel.com 


Are  the  PCs  you  own  costing 
more  than  the  ones  you  can  buy? 


OMer  PCs  m  costing  your  busInsM  thns  and  monay. 


Outdated  PCs  can  be  expensive. 

When  you  consider  that  new  PCs  based  on 
the  Intel*’  Pentium*  4  processor 
can  increase  productivity  and  enhance 
security  (by  running  the  latest  OS 
and  anti-virus  applications),  the  savings 
to  your  business  can  offset  the  cost  of 
an  upgrade  —  and  then  some.*  Get  the  hard 
facts  on  upgrading  to  Pentium  4 
processor-based  PCs  at  intel.com.  It’s 
a  better  way  to  compute,  and 

a  better  way  to  profit. 
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Enterprise  Rent-A-Car  tries  .Net  Terminal  Services. 


Five  tips  for  heading  off  abuse  by  consultants. 
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Energy  Martet 
Revamp  Pushes 
$79M  IT  Effort 

WTiolesale  electricity 
firm  tries  to  get  jump 
on  standardizing  data 


Federal  efforts  to  create  a 
standardized,  nationwide 
wholesale  electricity  market 
have  prompted  ISO  New  Eng¬ 
land  Inc.  to  jump  ahead  of  the 
regulatory  curve  and  invest 
$79  million  in  a  system  re¬ 
design  that's  scheduled  to  go 
live  March  1. 

ISO  New  England,  a  not-for- 
profit  corporation  that  over- 
Energy  Market,  page  16 


BONawEinAancTs 

SystonArcntodure 

The  now  6n«w  mrtat  syslofn  I 
ncludes  haroHre  and  sofhMifo 
for  design,  tsstino  and  produc* 
Donpurposes.  ; 

m  The  predNcHii  Hieln  is 
powered  by  4(XHiIu6  servers. 
wflheHPAIph^erver6S»0 
models  running  TWUncc 

■  The  eyilni  ImMib  Oracle 
databeses  and  wl  run  a  set  ot 
mosly  Java-besed  back-end 
appicallons. 

9  ObfecRbrohirleehiHlegy 

wi  be  to  route  transac¬ 
tions  to  dMerenI  servers  for  tan- 
over  purposes. 


on  Red  ha's  sottvm.  wl  run 
settlement  and  security  applica¬ 
tions  and  «)  external  site. 


TmstwDittiy’  Plan  Plods  Uphill 


Microsoft  continues 
struggle  to  balance 
security,  ftmctionality 

8V  CAROL  8LIWA 

Wednesday  will  mark  the  one- 
year  anniversary  of  the  day 
that  Bill  Gates  decreed,  via  a 
companywide  memo,  that 
“Trustworthy  Computing" 
would  be  the  highest  priority 
for  all  the  work  Microsoft 
Corp.  employees  da 


HP  Sets  the  Stage  for 
Alpha’s  Last  Hurrah 


Company  will  introduce  new  line  of  high-end 
servers  along  with  plan  to  migrate  to  Itanium 


Plenty  of  hurdles  still  lie 
ahead  for  Microsoft  as  it  tries 
to  strike  the  proper  balance 
between  ensuring  the  security 
of  its  software  and  pushing  out 
the  sort  of  innovative,  increas¬ 
ingly  scalable  and  more  com¬ 
plex  products  it  needs  to  keep 
its  business  thriving. 

There  is  always  a  trade-off 
between  new  functionality 
and  security  exposures,  and  a 
perfect  example  of  that  is 
BSD."  said  Andre  Mendes, 
chief  technology  integration 
ofHcer  at  the  Public  Broad- 
castii^  Service,  referring  to 

Thisfworfhy,  page  SI 
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av  JAIKUMAR  VIJAVAH 

Hewlett-Packard  Ca  is  gear¬ 
ing  up  for  the  Ian.  21  launch  of 
a  long-awaited  line  of  Alpha- 
Servers  that  promises  to  deliv¬ 
er  substantial  price/perfor¬ 
mance  gains  over 
existing  technology. 

But  HP's  previ¬ 
ously  announced 
plans  to  eventually 
standardize  all  of  its  servers 
on  Intel  Itanium  processors 
may  temper  some  of  the  en¬ 
thusiasm  the  announcement 
would  otherwise  have  gener¬ 
ated.  anal>'5ts  said. 


mewlineofhigh^nd  | 
to  migrate  to  Itanium  I  ranging  from  a  two-CPU  de- 
'  partmental  server  to  a  64- 

HP  gained  the  Alpha  tech-  processor  enterprise  server, 
nology  through  its  purchase  of  HP  last  week  confirmed  the 
I  Compaq  Computer  Corp.  last  planned  Marvel  announce- 


year.  AlphaServers  run  the 
Open  VMS  and  Tru64  Unix 
operating  systems  and  were 
scheduled  to  be 
phased  out  of  pro- 
t  duction  even  ^fore 
)  HP's  merger  with 
Compaq.  The  com¬ 
pany's  AlphaServer  business  is 
deep  in  the  red  and  is  expect¬ 
ed  to  lose  about  $200  million 
this  fiscal  year  alone. 

HP's  Marvel  family  of  Al¬ 
phaServers  is  based  on  the 


ment  but  declined  to  provide 
details  on  the  systems  or  mi¬ 
gration  strategy  in  advance. 
However,  much  of  that  infor¬ 
mation  has  been  fteely  avail¬ 
able  to  the  Alpha  faithful. 
nK>st  recently  ftom  HP.  and 
from  Compaq  before  that. 

Apart  from  the  faster  EV7 
processors,  the  new  Marvel 
departmental  and  enterprise 
servers  will  feature  a  technol¬ 
ogy  called  switchless  mesh  ar- 
AlphaServer.  page  16 


Softwiu’e  bugs  cost 
LI.S.  companies  nearly 
S60  billion  per  year, 

aewrding  to  the  National 
1  nstituie  of  Standanl.s  and 
j  Tcchnologv.  Hut  thev’  don’t 
^4  Iwve  to.  Find  and  fi.\  1%  of  vviur 
softwaro  bugs,  and  ‘XFo  of  vtiur 
■s-vstem  problems  go  away, 
experts  elaim.  Ix'am  hi>\v 
smart  (’,IOs  aro  eivating  eom- 
prohensive  strategies  to  test 
for  and  fix  bugs  in  btrth  off-the- 
shelf  softwaro  and  applie.ations 
croated  in-house.  PAGE  39 


BITINGBACK 


VOL 

37 

ISS 

2 

JA 

1  3 

2003 


UMI 


NEWSPAPER 


THE  NEWSPAPER  FOR  IT  LEADERS  WWW  COMPUTERWORLD  COM 


JANUARY  13.  2003  VOL  37  NO  2  S5  COPY 


Energy  Market 
Revamp  Pushes 
$79MrT  Effort 

Wliolcsalc  clectricit\ 
finii  tries  to  get  jump 
on  standardizing  data 


Federal  efforts  to  create  a 
standardized,  nationwide 
wholesale  electricity  market 
have  prompted  ISO  New  Eng¬ 
land  Inc.  to  jump  ahead  of  the 
regulatory’  curve  and  invest 
S79  million  in  a  system  re¬ 
design  that's  scheduled  to  go 
live  March  1. 

ISO  New  England,  a  not-for- 
profit  corporation  that  over- 

Energy  Marfcel.  page  10 


TECHNOLOGY  DETAILS 


ISO  New  England’s 
System  Architecture 

The  new  energy  market  system 
includes  hardware  and  soltware 
for  design,  testing  and  produc¬ 
tion  purposes. 

■  The  production  system  is 
powered  by  400-plus  servers, 
with  8  HP  AlphaServer  SS160 
models  running  Tru64  Unix. 

•  The  system  inchidcs  Oracle 
databas^  and  will  run  a  set  of 
mo^  Java-based  back-end 
applications. 

■  Object  broker  techndogy 

will  be  used  to  route  transac¬ 
tions  to  different  servers  tor  fail¬ 
over  purposes. 

■  Linux  servers,  most  based 
on  Red  Hat's  sofWe.  will  run 
settlement  and  security  applica¬ 
tions  and  an  external  Web  site. 


Trustworthy’  Plan  Plods  Uphill 


continues 
stniggic  to  kilnncc 
sccurit>',  functionalit\’ 

BY  CAROL  SLIWA 

Wednesday  will  maik  the  one- 
year  anniversary  of  the  day 
that  Bill  Gates  decreed,  via  a 
companywidc  mcmi>,  that 
“Trustwonhy  Computing" 
would  be  the  highest  priority 
for  all  the  work  Microsoft 
Corp.  employees  do. 


SrCUHITY  HfPORT  CARO 


HP  Sets  the  Stage  for 
Alpha’s  Last  Hurrah 


Plenty’  of  hurdles  still  lie 
ahead  for  Microsoft  as  it  tries 
to  strike  the  proper  balance 
between  ensuring  the  security 
of  its  software  and  pushing  out 
the  son  of  innovative,  increas¬ 
ingly  scalable  and  more  com¬ 
plex  products  it  needs  to  keep 
its  business  thriving. 

“There  is  always  a  trade-off 
between  new  functionality 
and  security’  exposures,  and  a 
perfect  example  of  that  is 
BSD."  said  Andre  Mendcs. 
chief  techrrology  integration 
officer  at  the  Public  Broad¬ 
casting  Service,  referring  to 

Trustworthy,  page  51 


l,l,ill,.l,n,lllln..ll,.ll,„l.l.,J..I..I..III.Ml 
|9>BK)FT»>im»»»»»»WUT0»»5-0I6rr  48186 
i8834889ZCSZ8t  042883828  881  6884 

69  I 

PROOUESr 

PO  BOX  984  57-7 

/tn  fiRBOft  la  48186.8984 


C A)nip;in\  will  intnxiuev  new  line  ofhigli-end 
sen  ers  along  w  ith  plan  to  migrate  to  Itanium 


BY  JAIKUMAR  VIJAVAN 

Hewlett-Packard  Co.  is  gear¬ 
ing  up  for  the  Jan.  21  launch  of 
a  long-awaited  line  of  Alpha- 
Sersers  that  promises  to  deliv¬ 
er  substantial  price 'pi-'rfor- 
mance  gains  over 
existing  technology. 

But  HP’s  previ¬ 
ously  announced 
plans  to  e%  entually 
standardize  all  its  serv’crs 
on  Intel  Itanium  processors 
may  temper  s^imc  of  the  en¬ 
thusiasm  the  announcement 
would  otherwise  have  gener¬ 
ated.  analysts  said. 
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HP  gained  the  .Alpha  tech¬ 
nology  through  its  purchase  of 
Compaq  Computer  Corp.  last 
year.  AlphaSer\’ers  run  the 
OpenVMS  and  TruM  Unix 
operating  systems  and  were 
scheduled  u>  be 
phased  out  of  pro¬ 
duction  even  before 
HP's  merger  with 
Compaq.  The  com¬ 
pany's  AlphaServ’cr  bu.siness  is 
deep  in  the  red  and  is  expect¬ 
ed  to  lose  about  S200  million 
this  fiscal  year  alone. 

HP's  Marvel  family  tif  Al- 
phaScrx’crs  is  based  on  the 


ompany’s  recently  released 
EV7  pnvessors.  with  m«tdels 
ranging  from  a  two-CPU  de- 
panmental  server  to  a  (4- 
processor  enterprise  sers-er. 

HP  last  week  confirmed  the 
planned  Marvel  announce¬ 
ment  but  declined  to  provide 
details  on  the  systems  or  mi¬ 
gration  strategy  in  advance. 
However,  much  of  that  infor¬ 
mation  has  been  freely  avail¬ 
able  to  the  Alpha  faithful, 
nrost  recently  from  HP.  and 
fn>m  Ct»mpaq  before  that. 

Apart  frtim  the  faster  E\7 
pmccssors.  {he  new  Marvel 
departmental  and  enterpris*.' 
servers  will  feature  a  technol- 
i>gy  called  switchless  mesh  ar- 
.4/phaSiTvcr.  page  10 


JL  Software  bugs  cost 
7  U.S.  companies  nearly 
S60  billion  per  year. 

iKvurcling  In  tliu  Nitliimal 
Insliiuk'orNaiKlaalsaiKl 
kvlinnlogx.  Uul  lliox  ilon'l 
liav  c  U 1.  l  iiKl  ami  fix  l"ci  nl'yc  lur 
Miliwarc  bugs.  anJ '  •(  l‘'.u)l  your 
system  pn  iblems  go  aw  a\ . 
oxix'rts  claim.  I  earn  how 
smart  ( :i(  Kaiv  ea'alingaim- 
pa'hensiwslnik'gii's  (o  les,| 
Ibrand  fix  hugs  in  N>lh  otTilie- 
shelCsi  ifiw  aa-  anJ  applieal  ii  ms 
ea-aieii  in-housex  PAGE  39 


BITINGBACK 


Using  .NET  connected  software 

means  a  more  perso 

When  software  lets  you  use  data  to  personalize  customer  connections,  that's  one  degree  of  separation. 

The  myriad  of  choices  available  to  online  consumers  today  is  staggering.  The  personal  service  available  at  traditional 
businesses  is  largely  absent  online,  and  the  company  that  can  bring  that  feeling  of  familiarity  back  will  reap  huge  rewards. 

Microsoft®  solutions  for  Internet  business  provide  the  tools  you  need  to  build  stronger  relationships  with  your  global 
network  of  customers  and  trading  partners.  Scalable  user  and  content  profiling  allows  you  to  target  content  and  engage 
customers  and  partners  with  more  personalized  options,  including  customer-specific  catalogs  with  custom  pricing  and 
product  information  in  multiple  currencies  and  languages. 

You  can  aggregate  profile  data  from  multiple  underlying  data  sources  to  leverage  existing  technology  investments 
and  enable  richer  profiling  capabilities.  With  built-in  business  analytics,  predict  purchasing  and  browsing  preferences 
by  analyzing  user  behavior,  all  while  delivering  real-time  recommendations.  Plus,  through  direct  support  for  XML-based 
data,  companies  can  exchange  catalog  and  order  information  with  partners  and  integrate  order  fulfillment  systems 
for  seamless  transactions.  Find  out  how  .NET  connected  software  can  help  you  connect  with  your  customers  better. 

Go  to  microsoft.com/enterprlse  Software  for  the  Agile  Business. 


a.  Ucnaon  M  Butm.  ar»  tunti  itgmeita  i 


nalized  connection  between  your  company 


The  Royal  Canadian  Mint  wanted  to  reach  its  diverse  worldwide  customers,  expand  sales  of  its 
products,  and  deliver  a  highly  customized  consumer  experience,  so  they  used  the  Web  content 
management  capabilities  of  Microsoft  Content  Management  Server  integrated  with  the  e-commerce, 
personalization  and  backend  data  integration  capaPi/it/es  of  Microsoft  Commerce  and  BizTatk' 
Servers.  Now  the  Mint  can  publish  content  in  multiple  languages,  draw  on  customer  information 
from  its  legacy  database,  and  feed  online  orders  through  an 
existing  ERP  system,  enabling  the  Royal  Canadian  Mint  to  offer 
customers  a  richer  and  more  personalized  experience. 


Internet  Customer 


IBMAS400  BizTalh  Content  Commerce 
Server  Management  ^  Server 
Server 


* 


Microsoft 


27  nightly  IwckLip  schedules. 


And  that's  just  one  office.  Monitor  and  manage  all  your  storage 
from  a  single  point  with  BrightStor  Portal. 

You're  burning  the  midnight  oil.  So  is  your  storage  network.  And  the  only  things  growing  faster  than  your  storage  needs 
are  your  storage  problems.  The  solution?  BrightStor~  Portal.  A  breakthrough  in  enterprise-wide  storage  software  that  provides 
a  single  point  of  management.  With  a  flexible  portal  interface  that's  easy  to  use,  BrightStor  Portal  gives  you  a  customized  view 
of  your  entire  storage  environment  so  you  can  respond  to  any  issue,  anytime,  anyvyhere.  In-depth  access  to  business-critical 
information  24  x  7  will  help  you  simplify  operations,  increase  productivity  and  maximize  cost  efficiency  across  your  enterpnse. 
Hey,  with  more  and  more  issues  under  control,  you  may  actually  get  to  go  home.  ca.com/brightstor/portal 


BrightStor'"  Storage  Solutions  ca  Computer  Associates' 


agemeot  systems. 

to  A  federal  plan  to  required- 
nancial  services  firms  to  geo¬ 
graphically  separate  their  data 
centers  won't  be  pursued. 

12  IBM  plans  to  rent  supercom¬ 
puting  resources  under  an  on- 
demand  model 

12  $61  is  offering  Itanium  2- 
based  servers  running  Linux 
to  complement  its  Iriz  OS. 


43  High  Anxiety.  Author  Jeffrey 
A.  Miller  explains  how  to 
recognize  unhealthy  levels 
of  anxiety  in  your  IT  depart¬ 
ment  and  what  you  can  do  to 
alleviate  it. 

44  Q&A:  Coining  in  From  the 
Cold.  IT  mana^r  and  author 
Steve  Romaine  offers  tips  on 
recognizing  potential  abuses 
by  consultants  and  bow  to 
better  manage  IT  “experts" 
hired  from  the  outside. 


52  Frankly  Speaking:  Frank 
Hayes  looks  at  the  many  ways 
business  executives  hide  the 
truth  from  IT. 
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NEWS 


•iWKComputeramrld  coin 


AT  DEADLINE 


Judge  Won't  End 
Microsaft  Suits 

A  Mml  eoMi  iudgt  in  BaMmora 
OMMO  mOnOllB  Dy  MCTOSOR 

Conk  aMkiRQ  to  (tunte  private 
aBMwt  laiMuto  Mod  by  Moun¬ 
tain  Vlaw,  CaJH.*iMaa4  bic. 
and  Santa  Roaa,  CaM.-baaad 
BuraLcon  bw.  IjIo  Friday.  Judga 
Fradaricfc  Mob  was  duo  to  hoar 
argnmonts  on  IBeroaoB**  raquaat 
to  dhmlai  13  al  16  dabm  rnado 
by  Sun  Mkioayatama  Inc.  in  an- 


Amdocs  Finalizes 
IT  Deal  With  SBC 

AindeGalll,aCliaalBrfioU.Ma.- 
baaad  aeltwva  vandor.  aaid  K  has 
Bnafaadaaaean  yaarfT  out- 
aoarcbii  daol  aMusd  at  “hundrada 
el  nMkna  of  dalara'’ w«  SBC 
Cenaaunieaiiena  Ine.  in  San  Anto¬ 
nio.  Amdocs  aiM  imffida  the  syi- 
tama  uaad  by  88C*b  tMaphona  dl- 
ractory  unit  and  than  nanaga 
ttiaaL  Aa  unapacifiad  number  ol 
IT  nwbars  wM  ba  sMflad  from 
SBC  to  Amdocs. 


Oracle  Makes  Cuts 
In  Sales  Force 

OvadaCor?.saidbtMsnaariyfln- 
Uhad  a  piannad  raorganiation  of 
IS  Rorai  MBancan  aana  torca 
dim  bdadaa  tayolfi  el  about  200 
anrlMS  In  is  U.S.  and  Canada. 
The  aeftwan  vendor  last  rsentti 
said  is  cuts  nait  en  the  any  ki 
eannaclhm  «Mi  a  nova  to  mA  Is 
aaios  fores  bda  aoparata  iidta  for 


Short  Takes 

MKftOSOR  said  a  faulty  router 
itetrada  by  ATAT  CORP.  ImI 
Thtesday  tewparardy  cuteflac- 
oaaa  to  savoral  of  Aa  aofhvafa 
vondor'sdfobaitesaBdmaasaB- 
teBasr«foaiioraboul40%efb»‘ 
tansluaais....AIITTECHNOLO- 
GV  0R041P  WC^  a  vender  el  onOna 
marisIMp  and  safos  aollwara  bt 
CatMpa.  Haas.,  said  K  Wd  off 
abaul  tv  ampfoyasi  bi  a  tnave 
dim  cut  is  vsrbfarca  by  20%. 


Deployments  Raise 
Profile  of  Blade  PCs 


PC  heavyweights 
keep  an  eye  on 
new  technology 


BV  LUCA8  MCAHUN 

SEVERAL  COMPANIES 

that  have  been  kicking 
the  tires  on  so-called 
blade  PCs  arc  .starting 
to  deploy  the  rack-mounted 
desktop  technology  in  their 
data  centers,  looking  for  bene¬ 
fits  such  as  increased 
security  and  ease  of 
management. 

For  DOW.  blade  PCs 
are  available  only  from 
start-up  vendors  like 
ClearCube  Technology  Inc.  in 
Austin.  Texas.  But  the  devices, 
which  put  a  desktop  spin  on 
the  more  prevalent  blade  serv¬ 
er  concept,  are  also  starting  to 
attract  the  attention  of  some 
leading  PC  vendors. 

For  example,  a  spokeswo¬ 
man  for  He^ett-Packard  Co. 
last  week  said  the  company 
isn’t  ready  to  disclose  any 
plans  to  offer  blade  PC  tech¬ 
nology.  But  HP  may  be  willing 
to  address  the  topic  in  a  month 
or  two,  she  added. 

Don  McCall,  a  product  mar¬ 
keting  manager  at  Dell  Com¬ 
puter  Cotp..  said  the  company 
is  monitoring  ClearCube’s 
progress  closely.  For  now,  Dell 
doesn’t  see  enough  demand  to 
offer  blade  client  technology. 
McCall  said.  “We  do  want  to 
watch  it.  however.”  he  added. 

ClearCube.  which  intro¬ 
duced  its  first  products  in 
2000,  shrinks  PCs  to  blade- 
size  devices  that  are  installed 
in  racks  in  data  centers.  End 
users  connect  to  the  blades 
through  videotape-size  con¬ 
trol  units  that  sit  on  desktops 
and  include  connections  for 
monitors,  keyboards  and  other 
peripheral  devices. 

BP  Energy  Co.,  a  Houston- 
based  pu.  oil  and  energy  trad¬ 
ing  firm,  in  November  fin¬ 
ished  a  rollout  of  100  Clear¬ 
Cube  blade  clients  at  a  new 


energy  trading  floor  in  Cal¬ 
gary.  Alberta. 

It  cost  BP  Energy  about 
$250,000  for  the  blade  clients, 
including  installation  and  soft¬ 
ware.  But  the  project  brought 
an  immediate  return  on  in¬ 
vestment  by  doing  away  with 
the  cost  of  maintaining  Indi¬ 
vidual  desktop  PCs  and  elimi¬ 
nating  the  ne^  to  buy  trading- 
floor  desks  built  to  hold  multi¬ 
ple  systems,  said  Greg  Miller, 
manager  of  infrastruc¬ 
ture  at  the  company. 

“From  an  opera¬ 
tional  point  of  view, 
we’ve  shrunk  the  en¬ 
velope  of  potential  problems,'* 
Miller  said.  PC  maintenance 
work  can  now  be  done  “in  a 
bulk  format  where  we  can 
deliver  it  economically,"  he 
added,  noting  that  technicians 
simply  pull  problematic  blade 
devices  out  of  the  racks  for 
service. 

The  Calgary  trading  floor  is 
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a  prototype  site  for  the  rest  of 
the  company.  Miller  noted. 

Avivah  Utan,  an  analyst 
at  Gartner  Inc.  in  Stamford. 
Conn.,  said  that  although  blade 
client  technology  is  cutting- 
edge.  the  push  to  consolidate 


desktop  PCs  into  data  centers 
is  several  years  old.  Putting 
PCs  in  a  data  center  can  help 
companies  improve  IT  securi¬ 
ty  by  reducittg  unauthorized 
software  downloads  by  end 
users,  Utan  said. 

But  Utan  and  other  analysts 
said  blade  PCs  could  face  re¬ 
sistance  from  end  users  who 
don’t  want  to  lose  control  over 
their  dedetop  systems. 

That  wasn't  a  problem  for 
Guy  Fuller,  IT  manager  at 
Chicago-based  Northwestern 
Memorial  Physicians  Group, 
which  deployed  200  Clear¬ 
Cube  devices  at  a  clinic  two 
months  aga  Fuller  said  the 
doctors  embraced  the  blade 
client  architecture  because 
they  felt  PCs  made  too  much 
noise  in  examination  rooms. 

The  upftont  cost  of  Clear¬ 
Cube’s  technology  was  about 
30%  hi^r  than  the  price  of 
traditionaJ  desktop  PCs  be¬ 
cause  Northwestern  had  to 
buy  racks  and  vent  its  com¬ 
puter  room  to  reduce  the 
heat  generated  by  the  blade 
devices.  Fuller  said.  But  be 
added  that  he  likes  the  tech¬ 
nology  so  much  that  he  plans 
to  deploy  it  at  Northwestern's 
U  other  clinics  by  year’s  end.  I 


IBM  Plans  Software  to  Link 
Data  From  Multiple  Sources 


BV  MARC  L.  SOHOINI 

IBM  late  thb  year  plans  to  de¬ 
liver  DB2-based  integration 
software  that  will  let  FT  man¬ 
agers  link  data  throughout 
their  systems  without  needing 
to  collapse  the  information 
into  a  single  data  warehouse. 

While  sketchy  on  the  details, 
IBM  last  week  said  the  integra¬ 
tion  technology  will  also  give 
end  users  real-time  access  to 
data  beyond  DB2  and  rival 
databases.  Using  native  XML 
capabilities  in  OB2,  users  will 
be  able  to  open  up  data  from 
conventional  sources,  such  as 
applicadoos,  as  well  as  infor¬ 
mation  stored  in  documents  or 
e-mail  messages,  said  Nelson 
Mattos,  director  of  informa¬ 
tion  integration  at  IBM. 

He  added  that  the  new  soft¬ 
ware  will  further  IBM's  feder¬ 


ated  approach  to  int^ration, 
which  is  designed  to  provide 
access  to  data  without  requir¬ 
ing  users  to  move  information 
from  Its  source  and  reformat 
it  to  be  DB2-friendly. 

The  company  has  already 

used  the  federz^  - 

approach  in  prod¬ 
ucts  such  as  Dis- 
coverylink.  which 
lets  users  In  the  life 
sciences  industry 
access  multiple 
databases,  applies- 
lions  and  search  engines  with 
a  single  query. 

IBM  is  the  only  large  vendor 
that's  pushing  ahead  exten¬ 
sively  with  this  kind  of  virtual- 
database  concept,  said  I^iilip 
Russom,  an  analyst  at  Giga  In¬ 
formation  Group  Inc.  One  of 
the  enablers  for  its  approach  is 
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the  fact  chat  DB2  has  the  abili¬ 
ty  to  index  data  stored  in  oth¬ 
er  repositories,  be  noted. 

IBM  has  yet  to  disclose  the 
middleware  platforms  that 
will  be  supported  by  the  new 
data  integration  software.  But 
it  likely  will  use  its  own  Web¬ 
Sphere  tools,  Russom  said. 

The  c(»cept  of  federated 
databases  has  been  around 
since  the  1990s,  but  companies 
are  only  now  start¬ 
ing  to  view  it  as  de¬ 
sirable,  be  said.  For 
one  thing.  Russom 
explained,  extract¬ 
ing  Urge  amounts  of 

_  heterogeneous  data 

and  formatting  it  for 
use  in  a  database  requires  ex¬ 
tensive  network  resources. 

In  theory,  IBM’s  upcoming 
technology  will  let  users  avoid 
the  costs  generated  by  such 
resource  usage.  Mattos  said 
the  new  software  will  be  re¬ 
leased  for  beta  testing  by  June 
and  should  ship  by  year's  end.  I 
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Report  Questions  ROi  of  i2’s  Software 


Vendor  acknowledges  complexity' 
but  says  most  users  get  returns 


BY  MABC  L.  SONOIHI 

After  spending  years  of  effort 
and  millions  of  dollars,  some 
marquee  users  of  i2  Technolo¬ 
gies  Inc.‘s  software  say  they’re 
not  getting  their  money's 
worth  on  their  investments, 
according  to  a  report  due  to  be 
released  this  week. 

Nucleus  Research  Inc.  said 
12  of  the  22  companies  it  sur¬ 
veyed  indicated  that  they  bad 
not  yet  achieved  a  positive  re¬ 
turn  on  investment  after  using 
i2’s  supply  chain  management 
applications  for  an  average  of 
2.2  years.  All  of  the  users  were 
touted  by  i2  on  its  Web  site, 
noted  Nucleus,  a  Wellesley, 
Mass.-based  research  firm. 

Dallas-based  12  acknowl¬ 
edged  that  its  software  is  com¬ 
plex  but  defended  its  ROI 
record  with  users.  And  four 
i2  customers  who  were  inter¬ 
viewed  by  Computerworld 
about  the  flndi^  said  they’re 
getting  the  desired  results. 

H’s  ‘Rocket  Science' 

T'm  a  little  bit  of  tbe  opinion 
that  some  pec^le  who  fail  at  it 
underestimate  the  difficulty  of 
what  they  are  getting  into,” 
said  John  Mallon.  director  of 
supply  chain  management  at 
On  Semiconductor  Corp.  in 
Phoenix.  “Contrary  to  popular 
opinion,  it's  rocket  science.” 

On  Semiconductor  has  used 
i2’s  software  for  three  years. 
Mallon  said  implementing  ad¬ 
vanced  planning  applications 
such  as  the  ones  sdd  by  i2  can 
be  even  more  complicated 
than  inKtaliing  an  enterprise 


resource  planning  system. 

But  he  added  that  tbe  chip 
maker  has  saved  S20  mtlUon 
through  improvements  in  pro¬ 
ductivity  and  inventory  man¬ 
agement  that  were  made  pos¬ 
sible  by  i2's  products. 

On  tbe  other  hand,  a  user  at 
a  Fortune  500  company  ^o 
spoke  on  condition  of  ano¬ 
nymity  said  the  Nucleus  re¬ 
port  reflects  his  experience 
with  i2's  technology.  It  took 
two  anempts  to  successfully 
install  i2’s  transpiortation  man¬ 
agement  softwaK,  tbe  user 
said.  His  company  wrote  off 
millions  of  dollars  after  tbe 
first  try  and  has  yet  to  fully  re¬ 
coup  that  money,  be  added. 

“It  was  tbe  most  difficult 
rollout  we’ve  ever  done,”  said 
the  user.  He  added  that  i2‘s 


sales  force  “bad  more  vision 
than  tbe  ability  to  deliver  on 
tbe  vision.” 

The  major  problem  ^cing  12 
users,  according  to  Nucleus,  is 
the  length  of  time  required  to 
deploy  the  applications.  Near¬ 
ly  70%  of  tbe  rollouts  by  tbe 
surveyed  users 
took  longer  than 
planned,  said  Re¬ 
becca  Wettemann. 
an  analyst  at  Nu¬ 
cleus,  which  issued 
a  similar  report 
about  users  of 
Siebel  Systems 
Inc.’s  customer  relationship 
management  software  in  Sep¬ 
tember  IQuickLink  33196). 

Two  other  analysts  said  the 
Nucleus  survey  is  consistent 
with  what  they  have  heard 
anecdotally  from  i2  users. 

“12*8  solutions  are  complex, 
as  are  the  problems  that  they 
endeavor  to  solve.”  said  Karen 
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Peterson,  an  analyst  at  Gartner 
Inc.  And  until  a  year  ago.  the 
company’s  modules  differed 
from  one  another  too  much  to 
be  configured  and  deployed  in 
a  standard  way.  she  said. 

“You  don’t  typically  take  the 
software  and  drop  it  in  place 
and  have  it  run,” 
said  Janet  Eden- 
Harris,  i2’s  chief 
marketing  officer. 
She  said  Nucleus’ 
findings  are  diffi¬ 
cult  to  reftue  be¬ 
cause  there  are 
many  ways  to  cal¬ 
culate  ROI  even  the  average 
cost  of  an  implementation.  But 
12  does  provide  ROI  metrics  to 
customers  as  part  of  its  rollout 
methodology,  and  most  users 
get  a  return,  Eden-Harris  said. 

She  also  noted  that  i2  has 
changed  its  sales  methods 
from  tbe  “zealous  years"  udien 
it  was  growing  rapidly  and  that 
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it  now  focuses  more  on  ensur¬ 
ing  long-term  customer  satis- 
foctioa  12.  which  has  lost  mon¬ 
ey  in  four  straight  quarters,  is 
also  designing  hs  upcoming  i2 
Six  set  of  plications  CO  be 
easier  to  ins^  and  use  than 
existing  versions,  she  said.  I 


Vendors  Push  SSL-Based 
Remote  Access  Devices 


BY  MATT  HAMBLCM 

Remote  access  appliances  that 
support  tbe  Secure  Sockets 
Layer  (SSL)  protocol  are  gain- 
ii^  the  attention  of  various 
networking  vendors,  with  the 
latest  product  announcement 
expected  to  be  made  today  by 
Seattle-based  Avencail  (^rp. 

Aventail  will  announce  the 
EX'1500.  a  clientless,  rack- 
mountable  SSL  virtual  private 
network  (VPN)  device  de¬ 
signed  to  provide  remote 
end  users  with  secure  Web 
browser  access  to  data  in 
Windows  files  and  client/ 
server  applications. 

The  EX-1500  isn’t  alone 
in  tbe  market.  In  November. 
Neoteris  Inc.  in  Mountain 
View.  C^alit.  added  three  appli¬ 
ances  to  its  product  line  that 
also  provide  secure  remote 
access  via  an  SSL  VPN.  And 
Check  Point  Software  Tech¬ 
nologies  Ltd.  in  Redwood  City. 
r.alif_,  announced  software 
I  sufprt  for  SSL  VPN  hard¬ 


ware  products  in  July. 

Ocher  vendors,  such  as 
NetiiU  Networks  Inc.  in  Som¬ 
erset.  RJ..  and  NetSilka  Inc.  in 
Piscataway.  N.J„  have  also  en¬ 
tered  the  maricet  for  SSL  VPN 
technology,  said  John  Pesca- 
tore.  an  analyst  at  Gartner  Inc. 
in  Stamford,  Cona  Tbe  SSL- 
based  products  are  easier  to 
use  and  less  expensive  than 
VPN  tools  that  support  tbe 
IPsec  protocol  Pescatore  said. 

Stanplfied  Instahbon 

IPsec  requires  tbe  loading  of 
client  software  chat  can  con¬ 
flict  with  applications  and  net¬ 
work  protocols,  but  there’s  no 
such  client  software  required 
for  SSL.  acoordii^  to  Pesca- 
tore  and  VPN  users.  That  sim¬ 
plifies  tbe  installation  process 
and  can  reduce  tbe  number  of 
connection  problems,  thereby 
lowering  IT  support  costs, 
they  said. 

Ron  Sha,  CIO  at  Borland 
Software  dUirp.  in  Scotts  Val¬ 


ley.  Califn  noted  that  the  soft¬ 
ware  vendor  can  connect  new 
employees  around  tbe  world 
to  its  corporate  applications  in 
“less  than  a  minute*  using  Neo¬ 
teris’  technology.  The  workers 
need  only  a  user  name  and 
password.  Sha  said. 

Dade  Behring  Inc.  in  Deer¬ 
field.  QL.  has  been  beta-testing 
the  EX-1500  for  a  month  and 
plans  to  roll  out  tbe  Aventail 
device  for  900  field  sales  and 
service  workers  in  tbe  U,S,. 
said  Craig  Ross,  director  of 
global  communication  ser¬ 
vices  at  tbe  maker  of  labora¬ 
tory  diagnostic  products. 


PRODUCT  DETAILS 


AventaiTs 

EX-1500 

•v 

•  PricN  riMis  at  $204)00  tor 
the  devn.  alBCh  faahaas  a  rack- 
mountad  design  and  supports 
ckeMlss  retnole  atxess. 


■Theq. 

eoMMclWBbbrowsetstoMcro- 
softConwixin  Internet  Re  Sys- 
tam  las.  VtMoBsTerrnnal  Ser¬ 
vices  and  danl^arYer  scAaive. 


The  technology  will  give 
users  remMe  access  to  Web- 
enabled  af^licatioos.  plus 
messaging  and  coU^ratioo 
tools,  through  cbeir  browsers. 
Ross  said.  Dade  Behring  may 
eventually  use  tbe  EX-1500  to 
support  aU  of  its  64)00  em¬ 
ployees  worldwide,  be  added. 

Because  Dade  Behring  has 
remote  workers  vriw  access 
dau  via  Distal  Subscriber 
Line  and  satellite  connections, 
the  company  often  eteperi- 
eoces  tPsec  oonnectioo  delays, 
Ross  said.  Tbe  EX-1500  offers 
“a  nice  ahernative”  to  solve 
that  problem,  be  added 

For  tbe  past  three  years, 
Aveniafl  bn  provided  man¬ 
aged  SSL  VPN  services  to 
Fast-Tax.  a  Dallas-based  ven¬ 
dor  of  tax  preparation  soft¬ 
ware  that  plans  to  begin  beta- 
testing  the  EX-ISOO.  Because 
no  client  software  is  required 
with  tbe  appliance,  the  cost  of 
supporting  coonectioos  to  500 
flrumcial  services  firms  that 
use  Fast-Tax's  software  should 
be  reduced  said  Jim  Sergisoa 
director  of  product  marketing 
at  the  subsidiary  of  The 
Thomson  Corp.  I 
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Southwest  Gives 
Net  Nod  to  Sprint 

Sprint  Corp.  said  H  has  won  « 
thraa  y»ar dealto provide voica 
and  high*spaad  data  natwoiidng 
sarvicas  to  SouttMMSt  AiriinBS 
Co.  A  Sprint  spokasman  said 
DaMas'basad  Southwest  chose 
Sprint  to  daivar  larvicas  simiiar 
to  those  that  had  been  provided 
by  WoridCom  Inc.  Ha  described 
the  contract  as  a  muHinuHlon- 
dolardaal. 


IBM  Sipis  Chip 
Deal  With  AMD... 

IBM  and  Advanced  Mcro  De¬ 
vices  bic  said  they  plan  to  iointly 
develop  cNp  mamrfacturing  proc¬ 
ess  technologies  aimed  at  pro¬ 
ducing  faster  and  less  power- 
hungry  micniprocessors.  The 
first  devicss  resulling  from  the 
deal  wiN  be  producad  usiftg  a 
BS-nanomatar  manufacturing 
procass  and  are  oipected  to  be 
ready  for  roiease  in  2005.  ac- 
conBng  to  IBM  and  Sunnyvale. 
CalH.-basedAMO. 


. . .  And  Switch 
Pact  With  Cisco 

BM  also  announced  that  its 
storage  dMsIon  plans  to  resell 
Chco  Systems  toe's  new  MOS 
9000  Rfw  ol  switches  for  stor- 
agt-aree  nttworlo.  IBM  said 
it  plans  to  bogto  offering  the 
swHdies  along  with  its  dish  and 
tape  products  by  the  «)d  of  this 
quartor.  The  deal  is  the  first 
signed  by  Ciaco  for  the  devices, 
but  one  Corp.  said  it's  currently 
testing  the  switches. 


Short  Takes 

MtCROSOTT  CORP.  released  a 
second  bota-test  version  of  Us 
Exchange  Sorvor  2003  messag¬ 
ing  software,  which  is  code- 
named  Titanium  and  due  for 
sMpmonl  by  the  end  of  June. 

. . .  STOfUeEMETWORKS  MC  . 
a  storage  management  software 
vendor  in  WMthan,  Maes.,  re- 
ptoced  Ms  CEO  and  laid  off  about 
half  of  Ms  220  werhsrs. 
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MARK  HALL  ■  ON  THE  MARK 

Database  Giants  Scoff  at 
Open-Source  Invader. . . 

. . .  MySQL  AB,  not  unlike  how  operating  system  behemoths  once 
laughed  off  the  Linux  phenomenon.  But  Marten  Mickos,  CEO  of  the 
Uppsala,  Sweden-based  company,  thinks  2003  may  be  the  year  the 
popular  open-.source  database,  MySQL,  sneaks  into  the  enterprise.  Cur¬ 
rently,  Version  32  is  the  most  popular  in  the  market,  but  MySQL  4.0 
:  ships  in  about  a  month,  and  the  alpha  release  of  4.1,  which  includes 
[  nested  SQL  queries  among  other  improvements,  hits  in  two  weeks. 

I  And,  Mickos  claims.  Version  5's  alpha  program  for  later  this  year  will 
I  add  enterprise-class  features  such  as  stored  procedures  and  triggers. 


This  is  old  hat  to  users  of  DB2.  Oracle. 
SQL  Server  and  Sybase.  So  much  so  (hat 
when  one  of  the  major  vendors’  PR  reps 
was  asked  about  enterprise- 
level  competition  from 
MySQL  the  amused  response 
was  a  inodting.  ‘‘Oh,  pleeezs.” 

And  Chariie  Garry,  an  analyst 
at  Meta  Group,  refers  to 
MySQL  as  a  “barc-bones  data¬ 
base."  noting  that  the  Big  Four 
vendors  are  moving  way  be¬ 
yond  MySQL's  capabilities 
with  upcoming  features  that, 
for  c.xample.  tie  data  warv- 
house  ftuictions  with  OLTP 
operations.  Still  Garry  argues 
(hat  in  the  coming  years.  My¬ 
SQL  might  very  well  “follow 
the  same  path  as  Microsoft" 
with  its  SQL  Server  breaking 
slowly  into  companic^s  a.s  a 
departmental  database  server. 

He  also  points  our  that  My¬ 
SQL’s  free  GPL  license  is 
"seeding  the  market"  for  fu¬ 
ture  growth.  But  for  those 


I  who  want  commercial  licenses  now,  you 
can  pick  up  one  for  S395  per  server  with 
I  no  per-user  charges,  many  thousands  less 
than  you’d  pay  for  Big  Four 
software.  And  if  you  down¬ 
load  it  free  from  the  Inter¬ 
net.  you  don’t  even  have  to 
say  please.  ■  Competition  in 
the  appKeation  storage  manage¬ 
ment  arena  may  get  less  polite 
with  Mountain  View.  Calif.- 
based  Veritas  Software’s 
planned  acquisition  of  Pre¬ 
cise  Software  Solutions  in 
Westwood,  Mass.  Houston's 
BMC  Software  has  long  been 
a  partner  of  Veritas,  and  Dan 
Hoffman.  BMC's  director  of 
enterprise  storage  manage¬ 
ment.  refuses  to  say  that  the 
partnership  will  change,  de¬ 
spite  more  direct  competi¬ 
tion  from  Precise’s  product 
line.  But  Hoffman  says  he 
does  see  the  deal  as  an  indica- 
tor  of  more  consolidation  In  an 
overcrowded  mariiel  "There 


are  too  many  storage  software  companies 
that  cannot  distingui^  themselves,”  he 
says.  One  way  BMC  hopes  to  stay  ahead 
of  the  pack  is  by  adding  predictive  work¬ 
load-based  modeling  features  to  its  appli¬ 
cation  storage  management  software.  No 
simple  task,  Hoffman  claims.  Don’t  ex¬ 
pect  to  see  it  before  late  2003.  Also,  don’t 
expect  to  see  other  applications’  storage 
needs  added  to  BMC's  Patrol  Storage 
Manager.  When  asked  whether  Lotus 
Notes  would  be  added  to  a  list  that  in¬ 
cludes  Oracle.  .SQL  Server.  Exchange. 
Sybase.  DB2  and  Siebel,  Hoffman  says 
nope.  “I've  heard  requests  for  NetWare 
more  often  than  for  Notes."  That  puts 
H  waydown  th«  Hs(.  •  While  Linux  is  on 
most  companies’  support  lists,  it  isn't  on 
Unisys  Corp.’s  for  the  foreseeable  future. 
According  to  David  Houseman.  VP  of  ad¬ 
vanced  technology  at  the  Blue  Bell.  Pa.- 
based  server  maker,  the  company's  focus 
is  on  giving  ¥findow8  "matoframellka  charac¬ 
teristics"  on  its  ES7000  32-way  comput¬ 
ers.  To  that  end.  Unisys  will  be  releasing 
its  Enterprise  Application  Environment 
(EAE)  for  Windows  2000  Data  Center 
and  .Net  EAE  has  been  around  for  years 
in  different  guises  on  the  company's  pro¬ 
prietary  mainframes.  Developers  use 
high-level  business  rules  and  let  EAE 
generate  Java  or  .Net  source  code.  Expect 
to  see  a  beta  version  late  this  year.  ■  In 
February  you’ll  be  able  to  get  your  hands 
on  VisuaJ  Nat  3.0  from  Antarctica  Systams 
Inc.  in  Vancouver.  British  Columbia.  CTO 
Tom  Bray,  who’s  also  one  of  the  origina¬ 
tors  of  XML  calls  the  product  a  "visual 
browse  engine."  It  applies  a  map  meta¬ 
phor  for  Web  sites,  letting  users  navigate 
through  icons  instead  of  text  The  3.0  re¬ 
lease  adds  Flash  support  and  targets  the 
retail  and  business  intelligence  vertical 
markets  with  preconceived  glyphs  and 
icons  30  you  won’t  have  to  read  al  thosa 
confusing  words.  I 
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BMC  Ships  Consoles  to 
Wrap  Up  Patrol  Upgrade 


OV  MATT  HAMOLCN 

BMC  Software  Inc.  last  week 
completed  the  rollout  of  Us 
l*atrol  Version  7  enterprise 
management  software,  and 
clothing  retailer  The  Men’s 
Wearhouse  Inc.  said  it’s  ready 
to  put  BMC’s  new  network 
management  consoles  into 
production  after  a  three- 
month  test. 

Men's  Wearhouse.  which 
operates  more  than  600  stores 
nationwide,  uses  Patrol  to 


manage  a  network  of  200 
servers  at  its  Houston  head¬ 
quarters.  The  Windows-  and 
Web-based  management  con¬ 
soles  now  available  for  Patrol 
7  will  help  the  retailer  become 
more  proactnx  in  managing 
network  growth,  said  Katie 
Scully,  manager  of  enterprise 
management  services. 

"It’s  the  difference  between 
fighting  fires  and  being  proac¬ 
tive."  she  said.  “Before  Patrol 
came  along,  we'd  react  to 


problems,  sometimes  some¬ 
thing  as  simple  as  running  out 
of  disk  space,"  Men’s  Wear- 
house  has  used  earlier  ver¬ 
sions  of  Patrol  for  the  past 
three  years.  With  Patrol  7.  the 
retailer  expects  to  need  fewer 
people  to  run  its  network. 

The  new  consoles  provide 
network  managers  with  the 
ability  to  assign  rights  and 
privileges  to  end  users,  and 
centrally  control  security  and 
authentication,  according  to 
Houston-based  BMC. 

Scully  said  the  Patrol  up¬ 
grade  also  gives  network  man¬ 
agers  a  vieu*  of  monitoring 
agents  installed  on  switches. 


routers  and  other  network 
nodes,  making  it  easier  to  re¬ 
motely  install  additional 
agents.  “It  actually  reduces  the 
time  the  network  managers 
need  to  be  hare."  she  said. 

The  Web  and  Windows 
management  consoles  each 
sell  for  S3.500.  said  BMC. 
which  also  relca.scd  software 
to  manage  the  deployment  of 
its  products  for  Windows  and 
Unix  systems. 

Rich  Ptak.  an  analyst  at  Ptak 
&  Associates  in  Amherst.  NTI., 
said  BMC’s  new  consoles  don't 
leaping  the  ones  offered  by  ri¬ 
vals.  But  he  called  BMC's  pric¬ 
ing  competitive.  I 
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MARK  HALL  •  ON  THE  MARK 

Database  Giants  Scoff  at 
Open-Source  Invader. . . 

. . .  MySQL  AB.  not  unlike  how  operating  system  behemoths  once 
laughed  off  the  Linux  phenomenon.  But  Marten  Mickos,  CEO  of  the 
Uppsala,  Sweden-based  company,  thinks  2003  may  be  the  year  the 
popular  open-source  database,  MySQL  sneaks  into  the  enterprise.  Cur¬ 
rently,  Version  3.2  is  the  most  popular  in  the  market,  but  MySQL  4.0 
ships  in  about  a  month,  and  the  ^pha  release  of  4.1.  which  includes 
nested  SQL  queries  among  other  improvements,  hits  in  two  weeks. 
And.  Mickos  claims.  Version  5*8  alpha  program  for  later  this  year  will 
add  enterprise-class  features  such  as  stored  procedures  and  triggers. 


This  is  old  hat  to  users  of  DEI2.  Oracle. 
SQL  Server  and  Sybase.  So  much  so  that 
when  one  of  the  maior  vendors’  PR  reps 
was  asked  about  enterprise- 
level  competition  from 
MySQL,  ttw  amuud  ftsponsa 
was  »  mocking.  "Oh.  pIsaiM." 

And  Charlie  Garry,  an  analyst 
at  Meta  Group,  refers  to 
MySQL  as  a  “bare-bones  data¬ 
base,”  noting  that  the  Big  Four 
vendors  are  moving  way  be¬ 
yond  MySQL’s  cap^Uities 
with  upcoming  features  that, 
for  example,  tie  data  ware¬ 
house  functions  with  OLTP 
operations.  Still.  Garry  argues 
that  in  the  coining  years,  My¬ 
SQL  might  very  “follow 
the  same  path  as  Microsoft” 
with  its  SQL  Server  breaking 
slowly  into  companies  as  a 
departmental  database  server. 

He  also  points  out  that  My¬ 
SQL’s  fim  GPL  liceose  is 
“seeding  the  market”  foi  fu¬ 
ture  growth.  But  for  those 


who  want  commercial  licenses  now.  you 
can  pick  up  one  for  $39S  per  server  with 
DO  per-user  charges,  many  thousands  less 
than  you’d  pay  for  Big  Four 
software.  Ajid  if  you  down¬ 
load  it  free  from  the  Inter¬ 
net,  you  don't  even  have  to 
say  please.  ■  Competition  in 
the  apiilciCion  storiiga  manoga* 
inant  arena  may  get  less  polite 
with  Mountain  View,  C^If- 
based  Veritas  Software’s 
planned  acquisition  of  Pre¬ 
cise  Software  Solutions  in 
Westwood.  Mass.  Houston’s 
BMC  Software  has  long  been 
a  partner  of  Veritas,  and  Dan 
Hoffman.  BMC's  director  of 
enterprise  storage  manage¬ 
ment,  refuses  to  say  that  the 
partnership  will  change,  de¬ 
spite  more  direct  competi¬ 
tion  from  Precise's  product 
line.  But  Hoffman  says  be 
does  see  the  deal  asanlndka- 
tor  of  more  conaoUation  in  an 
ovwcrowdod  markoL  There 


arc  too  many  stoi^e  software  companies 
that  cannot  distinguish  themselves.”  he 
says.  One  way  BMC  hopes  to  suy  ahead 
of  the  pack  is  by  adding  predictive  work¬ 
load-based  modeling  features  to  its  appli¬ 
cation  storage  management  software.  No 
simple  task,  Hoffman  claims.  Don't  ex¬ 
pect  to  see  it  before  late  2003.  Also,  don’t 
expect  to  see  other  applications’  storage 
ne^s  added  to  BMC's  Patrol  Storage 
Manager.  When  asked  whether  Lotus 
Notes  would  be  added  to  a  list  that  In¬ 
cludes  Oracle,  SQL  Server,  Exchange, 
Sybase.  DB2  and  Siebel,  Hoffman  says 
nope.  “I’ve  heard  requests  for  NetWare 
more  often  than  for  Notes.”  That  guts 
It  Nvydown  tha  lat  ■  While  Linux  Is  on 
most  companies'  support  lists,  it  isn’t  on 
Unisys  Corp.’s  for  the  foreseeable  future. 
According  to  David  Houseman.  VP  of  ad¬ 
vanced  technology  at  the  Blue  Bell.  Pa.- 
based  server  maker,  the  company’s  focus 
is  on  giving  Windows  “malnframalfa  eharac- 
tarlstks*'  on  its  ES7000  32-way  comput¬ 
ers.  To  that  end,  Unisys  will  be  releasing 
its  Enterprise  Application  Environment 
( EAE)  for  Windows  2000  Data  Center 
and  .Net.  EAE  has  been  around  for  years 
in  diffexent  guises  on  the  company’s  pro¬ 
prietary  mainframes.  E>eve]opers  use 
high-level  business  rules  and  let  EAE 
generate  Java  or  .Net  source  code.  Expect 
to  see  a  beta  version  late  this  year.  ■  In 
February  you’ll  be  able  to  get  your  hands 
on  Visual  Net  3.0  from  Antarctica  Systams 
Inc.  in  Vancouver.  British  Columbia.  CTO 
Tom  Bray,  who's  also  one  of  the  origina¬ 
tors  of  XML,  calls  the  product  a  “visual 
browse  engine.”  It  a(>pUes  a  map  meta¬ 
phor  for  Web  sites,  letting  users  navigate 
through  icons  instead  of  text.  The  3J0  re¬ 
lease  adds  Flash  support  and  ta^ets  the 
retail  and  business  intelligence  vertical 
markets  with  preconceived  glyphs  and 
icons  ao  you  won’t  havo  to  road  si  Ihoaa 
confustog  wonto.  I 


BMC  Ships  Consoles  to 
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Southwest  Gives 
Net  Nod  to  Sprint 

Sprint  Corp.  said  H  has  won  a 
throa-yaar  daal  to  provida  voica 
and  Mgft-spaad  data  nalworklng 
tarvlcos  to  Soulhwaat  AHnas 
Co.  A  Sprint  ipokasman  said 
Oalai  baiad  Southwest  chose 
Sprint  to  dilivsr  sorvieos  sMIar 
to  dtooo  ttul  had  bosn  providad 
oy  woroHfOm  me.  na  oaacnooo 
tha  contract  as  a  multimiMoft- 
doiardaaL 


IBM  Signs  Chip 
Deal  With  AMO... 

BMandAdvancodlleroDe' 
vieos  Ine.  said  thay  plan  to  Jointly 
davdop  d#  mamilactoing  proc- 
9m  tochnologlsa  ahnad  at  pro¬ 
ducing  fastor  and  toaa  power 
hungry  irdcfoprocassofs.  Tha 
IWot  dovkas  roauBng  from  the 
doal  wfl  be  produced  using  a 
eS-nanomator  manufacturing 
procaM  and  n  aapactod  to  be 
ready  for  rdnee  in  200S.  ac¬ 
cording  to  BM  and  Sumyvde. 
CaM.-baaadAAD. 


. . .  And  Switch 
I^WithCI^ 

BMalaoannouneadthatits 
storage  dMaion  plans  to  roaal 
Qko  Syilams  lne.’s  new  hM)S 
9000  Ine  efewUchea  far  stor- 
age-aree  networks.  BM  said 
M  pirns  to  bagbi  oftaring  the 
swMms  along  with  Ns  dfak  and 
tape  products  by  tha  and  of  iMa 
quarter.  Tha  daal  ii  tha  first 
signad  by  Clsee  far  the  devicas. 
but  BdC  Carp,  said  N’s  currandy 
testbig  tha  switchas. 


Short  Takes 

WCTOSOn  CORP.  ralaaead  a 
aeeond  hsCa-tMt  vartoon  of  Ns 
Eirtange  Server  2003  tneesag- 
biQ  eeftwara^  which  M  code- 
named  Titanium  and  doe  far 
sMpnanl  by  Be  and  of  June. 

. . .  STORASOinWORKS  MC.. 
a  storaga  Managarnoat  software 
vandBriiWlaMiam.Maae..rt- 
pfaced  ii  CEO  and  laid  off  about 
half  of  lb  220  worhars. 


8V  MATT  HAMBLEN 

BMC  Software  Inc.  last  week 
completed  the  rollout  of  its 
Patrol  Version  7  enterprise 
management  software,  and 
clothing  retailer  The  Men’s 
Wcarhouse  Inc.  said  it's  ready 
to  put  BMC's  new  network 
management  consoles  into 
production  after  a  three- 
month  test 

Men's  Wearfaouse.  which 
operates  more  than  600  stores 
nationwide,  uses  Patrol  to 


manage  a  network  of  200 
servers  at  its  Houston  head¬ 
quarters.  The  Windows-  and 
Web-based  management  con¬ 
soles  now  available  for  Patrol 
7  will  help  the  retailer  become 
more  proactive  in  managing 
netwoik  growth,  said  Katie 
Scully,  manager  of  enterprise 
management  services. 

“It’s  the  difference  between 
fighting  fires  and  beir^  proac¬ 
tive.”  she  said.  “Before  Patrol 
came  along,  we’d  react  to 


problems,  sometimes  some¬ 
thing  as  simple  as  running  out 
of  disk  space."  Men's  Wear- 
house  used  earlier  ver¬ 
sions  of  Patrol  for  the  past 
three  years.  With  Patrol  7.  the 
retailer  expects  to  need  fewer 
people  to  run  its  networic. 

The  new  consoles  provide 
network  managers  with  the 
ability  to  assign  rights  and 
privileges  to  end  users,  and 
centrally  control  security  and 
authentication,  according  to 
Houston-based  BMC 

ScuUy  said  the  Patrol  up¬ 
grade  also  ^ves  network  man¬ 
agers  a  view  of  monitoring 
agents  installed  on  switches. 


routers  and  other  network 
nodes,  making  it  easier  to  re¬ 
motely  install  additional 
agents.  ”lt  acUially  reduces  the 
time  the  network  managers 
need  to  be  hare.”  she  said. 

The  Web  and  Windows 
management  consoles  each 
seU  for  $3,500.  said  BMC 
which  also  released  software 
to  manage  the  deployment  of 
its  products  for  Wmdov^  and 
Unix  systems. 

Rich  Ptak,  an  analyst  at  Ptak 
Sc  Associates  in  Amherst.  Nif 
said  BMC's  new  consoles  don't 
leapftog  the  ernes  offered  by  ri¬ 
vals  But  be  called  BMC's  pric¬ 
ing  competitive.  I 
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Reallocate  your  resources. 


HP  ProLiant  DL  580G2  Server 
with  Intel  Xeon  proce 


Server  time  and  spoce  are  precious  commodities,  at  leost  Irom  where 
you're  sitting.  Your  customers  are  clamoring  (or  more,  more,  more,  while 
you  try  k9  figure  out  how  to  deliver  with  less,  less,  less. 

HP  Proliant  servers,  powered  by  Intel*  Xeon'“  processors,  pot  you  in 
control  erf  your  resources  so  that  you  con  realize  the  true  potential  of  your 
infrostructure.  ProLiont  Essentials  Woridoad  Monogemenf  Pock  software 
lets  you  allocate  your  resources  to  specific  tasks  and  then  reollocate  them 
as  needed— automatically.  coll  it  Dynamic  Resource  Scoling.  And  wrilh 

this  added  control  and  increased  visibility,  you  may  even  find  you 
can  boost  efficiency  by  plocing  more  worklood  on  those  some  servers. 

It  dl  odds  up  to  faster,  belter  distribution,  increased  ROI  and  gigantic 
leaps  forward  in  customer  sotisfoction.  Which,  of  course,  iso  relief  to  you. 

Visit  www.hp.com/90/proltont73  or  coH  1.800.2t2.6673, 
option  5,  ond  montion  code  XFt  for  o  whito  popor  on 
odoptfvo  infrostructuro  ond  o  froo  trkil  of  HP  ProLiont 
Essontiols  softworo! 
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Tax  Break  Could  Ease 
rr  Purchasing  Pain 


High-tech  groups  hope  stimulus  plan 
will  include  boost  to  depreciation  bonus 


CORPORATE  USERS 

may  get  a  tax  incen¬ 
tive  to  avoid  delay¬ 
ing  hardware  and 
software  purchases  if  congres¬ 
sional  backers  prevail  in  their 
efforts  to  increase  the  depred¬ 
ation  bonus. 

The  bonus  could  influence 
the  liming  of  business  IT  pur¬ 
chases,  depending  on  when 
the  move  —  if  approved  — 
takes  effect.  The  current 
bonus,  ^efa  was  set  at  30% 
last  year  by  Congress,  is  on 
top  of  normal  dcpreciacioo 
and  has  helped  lower  compa¬ 
nies'  year-end  tax  bills  by  in¬ 
creasing  their  write-offs. 

High-tech  industry  groups, 
which  say  30%  isn't  enough  to 


stimulate  spending,  were  dis¬ 
appointed  by  President  Bush's 
rejection  of  an  expanded  de¬ 
preciation  bonus  in  the  eco¬ 
nomic  stimulus  plan  he  an¬ 
nounced  last  week.  But  in  an¬ 
other  stimulus  plan  also  re¬ 
leased  last  week.  House  De¬ 
mocrats  proposed  a  50% 
bonus  for  this  year,  a  rate  that 
the  Information  Technology 
Association  of  America  in  Ar¬ 
lington,  Va..  wanted  in  the 
president’s  proposal.  There 
are  signs  of  Republican  back¬ 
ing  for  that  proposal  as  well 

Cas8-by-Cas8  Basis 

Whether  a  bonus  will  help  a 
particular  company  depends 
on  its  business  needs,  say  ana¬ 
lysts  and  IT  managers. 

For  instance,  retailer  Lowe's 


Cos.'  ongoing  expansion, 
which  included  the  opening  of 
120  superstores  in  2002  with 
plans  for  130  more  this  year,  is 
driving  technology  purchases, 
said  Steve  Stone,  vice  presi¬ 
dent  of  IT  strategy  at  the 
Wilkesboro,  N.C.,  company. 

But  a  depreciation  increase 
could  affect  the  timing  of  a 
purchase,  if  the  planned  date 
is  close  to  when  the  tax  break 
goes  into  effiect,  said  Stone. 

That’s  the  case  as  well  for 
Richard  Jones,  managing  di¬ 
rector  and  CIO  at  Country¬ 
wide  Home  Loans  Inc.  in  Cal- 
abasas,  Calif,  who  said  he 
doubts  that  the  depreciation 
bonus  would  affect  purchasing 
in  any  way  other  than  timing. 
Business  expansion  is  the 
overriding  factor  in  IT  spend¬ 
ing.  he  said. 

While  the  depreciation 
bonus  applies  to  any  equip¬ 
ment  purchase,  the  IT  equip¬ 


ment  sector  is  especially  in 
need  of  a  boost  Hardware, 
software  and  services  spernl- 
ing  declined  5.2%  last  year  af¬ 
ter  a  5.4%  drop  in  2001,  ac¬ 
cording  to  IDC. 

And  n*  spending  forecasts 
for  2003  are  mixed.  IDC  ex- 
p>ects  a  4.4%  increase  in  U.S. 

IT  spending  this  year  to  S383.] 
billion.  In  reports  last  week, 
Aberdeen  Group  Inc.  in  Bos¬ 
ton  said  it  expects  U.S.  IT 
spending  to  increase  3.6%.  but 
The  Goldman  Sachs  Group 
Inc.  in  New  York  predicted  a 
1%  drop,  based  on  a  survey  of 
100  IT  managers  at  Fortune 
1.000  companies. 

Analysts  and  trade  groups 
have  yet  to  determine  whether 
the  30%  depreciation  bonus 
has  helped  IT  spending. 

“It’s  too  soon  for  any  of 
those  forecasting  numbers  to 
show  that,’*  said  Caroline 
Graves  Hurley,  a  policy  expert 
at  AEA.  a  high-tech  trade  asso¬ 
ciation  in  Washington.  “But  1 
do  think  there  has  been  a  slug¬ 
gish  response.” 

IOC  economist  Kevin  White 
said  the  forecast  increase  in  IT 
spending  has  more  to  do  with 
economic  improvements  and 


How  It 
Works 

Congress  last  year  approved  a 
30%  deprecation  boras  that 
rem^  in  effect  until  Sepl  T1. 
2004.  There  is  a  push  10  increase 
tl  to  50%  or  more. 

EXAMPLE;  yburflmi  lust 
bought  a  $100,000  tyMim. 

■  Nonnal  depreciation  is  20% 
over  five  years.  The  30%  bonus 
increases  that  deprecation  to 
50%  in  the  first  year. 

H  At  a  40%  lax  rate,  the  tax  sav¬ 
ings  on  the  20%  d^edation  Is 
$8.000.A:50%.rfs$20.000. 


corporate  profits  than  with  a 
tax  break.  ’The  biggest  driver 
is  the  continuing  improve¬ 
ment  of  the  economy,”  he  said. 

Companies  may  not  have  to 
hold  back  on  purchases.  The 
30%  bonus  was  retroactive  to 
September  2001.  and  Deter 
Rugg,  a  corporate  finance  ex¬ 
pert  at  Tatum  CFO  Partners 
LLP  in  New  York,  said  that 
historically,  lawmakers  have 
made  these  kinds  of  incentives 
retroactive.  • 


State  CIOs  Face  Budget  Crises 


Layofls,  IT  project 
cuts,  pres.sure  on 
vendors  expected 


The  worst  fiscal  crisis  to  hit 
state  governments  since 
World  War  11  is  forcing  state 
IT  managers  to  lay  off  em¬ 
ployees,  squeeze  vendors  for 
better  deals  and  limit  IT  proE 
ects  to  those  that  deliver  an 
immediate  return  on  invest¬ 
ment.  Nothing  less  stands  a 
chance. 

”It’s  ugly.  It's  really,  really 
ugly  is  the  best  way  I  can  de¬ 
scribe  it.”  said  Connecticut 
CIO  Rock  Regan,  referring  to 
the  state’s  budget  shortfall  of 
more  than  S600  millioit  He 
has  laid  off  US  IT  workers  — 
U%ofhb  staff —  and  it  could 
get  worse. 

Collectively,  the  .states  may 


be  facing  a  budget  gap  this 
year  of  as  much  as  S20  billion, 
and  potentially  many  limes 
that  amount  for  the  next  fiscal 
year,  according  to  some  esti¬ 
mates.  The  National  Gover¬ 
nors  Association  says  there 
hasn't  been  a  budget  crisis  like 
it  in  50  years. 

Legislative  sessions  are 
starting  this  month,  governors 
are  releasing  budgets,  and 
lawmakers  are  getting  ready  to 
cut  Meanwhile, 
state  CIOs  are  doing 
what  they  can  to 
prepare  for  cutbacks 
by  pushing  consoli¬ 
dation  and  standard¬ 
ization  of  systems, 
examining  the  use  of 
open-source  aliema- 
tives  and  exploring 
new  ways  to  finance 
projects. 

Texas  CIO  Car¬ 
olyn  Purcell  said 


that  if  vendors  “are  sure  that 
their  product  will  save  mon¬ 
ey,”  then  they  should  be  pre¬ 
pared  to  accept  payment  out 
of  the  amount  of  money  saved. 

The  position  of  state  CIO  is 
relatively  new  in  most  states, 
and  turnover  is  high.  A  major 
problem  they  face  is  fighting 
bureaucratic  resistance  to  sys¬ 
tems  consolidation.  But  that's 
changing,  some  said. 

"There’s  a  reason  why 

Southwest  only  flies 
737s  and  still  makes 
money,”  said  Terry 
Savage,  Nevada’s 
CIO.  referring  to 
Southwest  Airlines 
Co.‘s  reliance  on  a 
single  Boeing  model. 
Agencies  are  now 
less  eager  to  defend 
the  support  of  multi¬ 
ple  systems  that  arc 
incompatible.  The 
economic  downturn 


“is  changing  the  discussion,” 
Savage  said. 

In  New  York,  CIO  James 
Dillon  intends  to  standardize 
the  state's  e-mail  system.  State 
woikers  now  use  three  major 
systems,  as  well  as  a  host  of 
mainframe  proprietary  sys¬ 
tems.  “We  will  decide  on 
one,"  said  Dillon,  who  has 
about  150,000  end  users  to 
deal  with. 

State  agencies  “are  more  ac¬ 
cepting  of  change,  provided 
we  can  show  that  a  business 
case  will  result  in  cost  sav- 
ii^."  .said  Dillon. 

But  the  budget  crisis  also 
means  that  projects  with  a  re¬ 
turn  on  investment  beyond 
one  or  two  years,  such  as 
many  e-government  or  Web 
services  projects,  are  unlikely 
to  get  funding. 

“We  can’t  get  to  the  point 
where  anybody  wants  to  talk 
about  spending  money  to  save 
money  down  the  road”  said 
Regan. 

But  efforts  by  sute  CIOs  to 


consolidate  and  standardize, 
for  instance,  could  be  hurt  if 
funding  for  centralized  IT 
agencies  is  cut  deeply  and 
power  shifts  back  to  state 
a^ncies.  said  former  Georgia 
CIO  Larry  Singer.  CIOs  could 
find  themselves  “takii^  a  step 
back,”  said  Singer,  who  moved 
last  month  to  the  not-for-prof¬ 
it  public-sector  consulting 
firm  Public  Interest  Break¬ 
throughs  Inc.  in  Vienna,  Va. 

Although  the  budget  prob¬ 
lems  are  creating  some  oppor¬ 
tunities  to  gain  efficiency 
through  consolidation  and 
sundardization,  there's  no 
getting  around  the  pain. 

North  Dakota  CIO  Curtis 
Wolfe  has  been  gradually  let¬ 
ting  his  consultants  go  and  do¬ 
ing  what  he  can  to  save  his  IT 
workers  from  layoffs. 

State  agencies  have  been 
told  that  budgets  will  be  95% 
of  last  year’s,  and  that’s  just 
for  starters.  "We*ve  just  got  to 
reduce  our  cost  of  operation 
where  we  can."  said  Wolfe.  I 


end-to-end  network  security. 

But  where  does  your  network  actually  end? 


cisco.com/go/vpnsecurity 


CONTBfT  NETWORKING 

- -  - -  Threats  to  network  security  can  come  from  anywhere  at  anytime,  and  firewalls  alone 

OPTXML  NETWORKING  + 

"  will  not  stop  ttiem.  Ensure  that  your  data  and  business  applications  stay  secure  by 

STORAGE  NETWORNNG  * 

embedding  safeguards  throughout  your  entire  network.  With  a  defense-in-depth 
solution  from  Cisco,  you  can  provide  the  scalable,  manageable,  and  comprehensive 
protection  your  network  needs.  Cisco  integrates  advanced  security  and  VPN 
functionality  into  Cisco  lOS*  software  for  routers.  Catalyst-series  switches,  and  a  wide  range  of  market-leading  appliances.  So 
security  isn't  just  added  on;  it's  part  of  the  network  infrastructure  itself.  Contact  Cisco,  your  channel  partner,  or  your  Cisco  Powered 
Network  Service  Provider  to  learn  how  Cisco  can  provide  a  comprehensive,  cost-effective  security  solution  for  your  business. 
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Singlestep  Readies  Network 
Management  Integration  Tool 


St;irt-up  seeks  to  broaden  capabilities  of 
'manager  of  managers’  teehnolog\ 


BV  M*rT  HAMBLEN 

S«N(;i  Fsrf  I’  Technolo¬ 
gies  Corp.  this  week 
plans  to  ship  a  tool  for 
integrating  dilTercnt 
network  management  sj-sicms. 
a  move  analysts  described  as 
another  effort  to  find  the  Holy 
Grail  of  network  control  prod¬ 
ucts  known  as  a  "manager  of 
managers"  (MOM). 

T»x>  Seattle-based  compa¬ 
nies.  Alaska  Air  Group  Inc. 
and  national  broadband  ser¬ 
vices  provider  Speakeasy  Inc.. 
last  week  said  they're  evaluat¬ 
ing  Singlesiep's  Unity  soft¬ 
ware  to  see  if  it  can  live  up  to 
the  promise  of  combining  in¬ 
formation  pumped  out  by  var¬ 
ious  network  monitoring  and 
management  systems. 

"Getting  to  network  infor¬ 
mation  as  ifuickly  as  possible 
is  important,  so  if  you  have  a 


UH)t  to  U>ok  at  ail  the  network 
management  sources,  that 
would  be  a  terrific  benefit,'’ 
said  Jeffrey  Herein,  netwt)rk 
operations  manager  at  Ala.ska 
.Air  Group’s  Alaska  Airlines 
unit.  He  declined  to  discuss 
the  evaluation  further. 

Danny  Pickford.  director  of 
engineering  at  Speakeasy,  said 
Unity  looks  to  be  “useful,  be¬ 
cause  it  can  query  data  from 
disparate  network  sources  and 
put  it  together,  as  well  as  filter 
out  unimportant  things." 

The  initial  release  from 
Seattle-based  Singlestep  will 
integrate  data  fn^m  up  to  sev¬ 
en  network  management 
sources,  including  Hewlett- 
Packard  Co.'s  Open  View  and 
Cisco  Systems  Inc.’s  Works. 
But  Unity  eventually  will  be 
able  to  perform  logical  analy¬ 
ses  of  network  problems  and 


then  send  reports  to  network 
architects.  Pickford  said.  'Tm 
really  excited  about  that  po¬ 
tential "  he  added. 

Speakeasy  operate.s  11  points 
of  presence  in  North  America 
for  Digital  Subscriber  Line 
-scn’ices  and  has  a  network 
with  400  switches,  routers  and 
other  nodes  in  Seattle.  Pick¬ 
ford  said  he  hopes  to  use  Uni¬ 
ty  to  improve  load  balancing 
acro.ss  Speakeasy's  network. 

Michael  Disabato.  an  analx'st 
at  The  Burton  Group  in  Salt 
Lake  City,  said  Unity  fits  under 
the  heading  of  MOM  technolo¬ 
gy.  which  first  arose  more  than 
10  years  ago.  Other  vendors, 
such  as  System  Management 
Arts  Inc.  in  While  Plains.  N.Y., 
and  Aprisma  Management 
Technologies  Inc.  in  Ports¬ 
mouth.  N.H..  also  provide  low- 
cost  tools  with  MOM-like  ca¬ 
pabilities.  But  most  of  (he 
products  can  read  data  only 
from  devices  based  on  the  Sim¬ 
ple  Network  Management  Pro¬ 


tocol  (SNMP).  Disabato  said. 

In  contrast.  Unity  can  read 
non-SNMP  data  and  even  Web 
page  reports  that  are  pushed 
to  the  software.  That  could  in¬ 
clude  information  from  cir¬ 
cuits  that  arc  monitoring  bur¬ 
glar  and  fire  alarms,  power 
supplies  and  temperature  con¬ 


trols.  according  to  Disabato. 

In  addition.  Unity  is  priced 
far  below  high-end  MOM 
products  from  IBM's  Tivoli 
unit  and  Computer  Associates 
International  Inc.,  which  can 
cost  a  large  company  millions 
to  implement,  Disabato  said. 

Unity  prices  start  at  S75.000. 
but  a  typical  installation  that 
includes  managed  services 
provided  by  Singlestep  and 
can  monitor  five  to  seven  net¬ 
work  management  systems 
will  cost  about  $250,000,  said 
Singlestep  CEO  Chris  Noble.  • 


Singlestep's  Unity  Server 


Data  sources  and 
connectors  ol  net¬ 
work  mondonng  and  management  tools, 
such  as  OscoWo^  and  hff’  OpetrView. 
ate  collected  and  combined  into  a  com¬ 
mon  view  by  the  Unity  engine. 

I  Network  manages 
ess  data  gathered 
I  byumty. 


I  PoFicies  I 

0—1 


Enterprise  policies  (or  actions  m  case  o( 
outages  or  errors  are  stored  (or  compari¬ 
son  to  actual  events  by  the  Unity  engine 


Drop  Wall  Street  IT 
Disaster  Recovery  Proposal 

Implementation 
labeled  unfeasible 


8V  LUCABMEARIAN 

A  U.5.  senator  this  month  .said 
federal  regulators  have  aban¬ 
doned  a  proposal  that,  if  made 
law.  could  have  required  Wall 
Street  firms  to  mo\’e  their  dis¬ 
aster  recovery  data  centers 
hundreds  of  miles  away  from 
thuHr  primary  IT  facilities. 

That  idea  was  included  in  an 
interagency  white  paper,  re¬ 
leased  in  August,  on  strength¬ 
ening  the  resilience  of  the  U.S. 
financial  system.  However,  fi¬ 
nancial  services  firms  criti¬ 
cized  it  as  unnecessary  and 
technically  unfeasible.  For  ex¬ 
ample.  Fibre  Channel,  the 
must  common  network  proto¬ 
col  used  between  data  centers. 


has  a  distance  limit  of  about 
100  kilometers,  or  62  miles. 

Sen.  Charles  Schumer  (D- 
N.Y. )  based  his  analysis  of  the 
regulators’  plans  on  a  Dec.  23 
letter  that  was  sent  to  him  by 
the  heads  of  the  Federal  Re¬ 
serve  System,  the  Office  of  the 
Comptroller  of  the  Currency 
and  the  Securities  and  Ex¬ 
change  Commission. 

Schumcr  is  a  member  of  the 
Senate  Banking  Committee, 
which  has  oversight  of  federal 
financial  agencies.  He  said  the 
letter  stated,  in  part,  that  the 
draft  white  paper  had  been  in¬ 
accurately  described  in  public 
accounts  and  didn't  set  min¬ 
imum  distance  requirement.s 
or  recommend  "as  a  sound 
practice  that  firms  move  out 
of  center-city  locations.” 

However,  the  white  paper 


did  suggest  (he  use  of  out-of¬ 
region  IT  backup  facilities.  It 
also  pttsed  a  scries  of  IT-relat¬ 
ed  questions,  including  one 
that  asked  whether  a  minimum 
distance  between  primary  and 
backup  data  centers  should  be 
required  "for  core  clearing 
and  settlement  organizations 
and  firms  that  play  significant 
roles  in  critical  maritets."  The 
paper  listed  a  distance  of  200 
to  300  miles  as  an  example. 


In  one  of  dozens  of  respons¬ 
es  to  the  white  paper.  PNC  Fi¬ 
nancial  Services  Group  Inc.  in 
New  York  said  in  an  October 
letter  to  the  Federal  Reserve’s 
board  of  governors  that  disas¬ 
ter  recovery  requirements 
must  be  technologically  at¬ 
tainable. 

“Under  most  disaster  sce¬ 
narios,  technology  backup  re¬ 
covery  sites  do  not  need  to  be 
more  than  a  few  miles  apart  to 


Data  Center  Pratadion  Piactices 

The  WentiMk  paper  on  fltranohering  the  (insler  leeoMry 
the  U5.  bvndd  aaM  iht  Moiling  ir-filaM  guaeli^ 
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adequately  recover  the  prima¬ 
ry  site,"  PNC  said. 

The  Banking  Information 
Technology  Secretariat 
( BITS),  a  Washington-based 
oiganizaiion  made  up  of  the 
100  largest  financial  services 
firms  in  the  U3..  also  filed  a 
comment  letter  in  October. 

‘TTie  regulators  are  trying 
to  do  the  right  thing,  but  let’s 
do  it  in  a  way  where  we  don’t 
impose  excessively  high  costs 
or  implement  something  that 
is  technologically  not  possible 
to  do."  |ohn  (Zarlson.  senior  di¬ 
rector  of  BITS,  said  this  month. 

Many  New  York-based  fi¬ 
nancial  services  firms  already 
have  disaster  recovery  sites  in 
New  Jersey  or  in  boroughs  of 
the  city  outside  of  Manhattaa 
But  Larry  Tabb.  an  analyst  at 
TowerGroup  in  Needham, 
Mass.,  said  the  government’s 
obvious  concern  is  that  in  the 
event  of  a  nuclear  attack  on 
New  York,  backup  facilities 
would  likely  be  d^royed.  I 
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Singlestep  Readies  Network 
Management  Integration  Tool 


Start-up  seeks  to  broaden  capabilities  of 
‘manager  of  managers’  technolog>' 


BY  kUTT  HAMBLEM 

Singlestep  Technolo¬ 
gies  Cofp.  this  week 
plans  to  ship  a  tool  for 
integrating  different 
network  management  systems, 
a  move  analysts  described  as 
another  effort  to  find  the  Holy 
Grail  of  network  control  prod¬ 
ucts  known  as  a  “manager  of 
managers"  (MOM). 

Two  Seattle-based  compa¬ 
nies.  Alaska  Air  Group  Inc. 
and  national  broadband  ser¬ 
vices  provider  Speakeasy  Inc., 
last  week  said  they're  evaluat¬ 
ing  Stnglcstep's  Unity  soft¬ 
ware  to  see  if  it  can  live  up  to 
the  promise  of  ccunbining  in¬ 
formation  pumped  out  by  var¬ 
ious  network  monitoring  and 
management  systems. 

“Getting  to  network  infor¬ 
mation  as  quickly  as  possible 
is  important,  so  if  you  have  a 


tool  to  look  at  all  the  network 
management  sources,  that 
would  be  a  terrific  benefit,” 
said  Jeffrey  Hervin,  networic 
operations  manager  at  Alaska 
Air  Group's  Alaska  Airlines 
unit  He  declined  to  discuss 
the  evaluation  further. 

Danny  Pickfbrd.  director  of 
engineering  at  Speakeasy,  said 
Unity  looks  to  be  “useful,  be¬ 
cause  it  can  query  data  from 
disparate  network  sources  and 
put  it  together,  as  well  as  filter 
out  unimportant  things." 

The  initial  release 
Seattle-based  Singlestep  will 
integrate  data  from  up  to  sev¬ 
en  network  management 
sources,  includii^  Hewlett- 
Packard  Ca*s  Open  View  and 
Cisco  Systems  Inc.'S  Works. 
But  Unity  eventually  will  be 
able  to  perform  logical  analy¬ 
ses  of  network  problems  and 


then  send  reports  to  network 
architects.  Pickford  said.  “I’m 
really  excited  about  that  po¬ 
tential.”  he  added. 

Speakeasy  operates  11  points 
of  presence  in  North  America 
for  Digital  Subscriber  Line 
services  and  has  a  network 
with  400  switches,  routers  and 
other  nodes  in  Seattle.  Pick- 
ford  said  be  hopes  to  use  Uni¬ 
ty  to  improve  load  balancing 
across  Speakeasy's  network. 

Michael  Oisabato.  an  analyst 
at  The  Burton  Group  in  Salt 
Lake  City,  said  Unity  fits  under 
the  heading  of  MOM  technolo¬ 
gy.  which  first  arose  more  than 
10  years  aga  Other  vendors, 
such  as  System  Management 
Arts  Inc.  in  White  Plains.  N.Y., 
and  Aprisma  Management 
Technologies  Inc.  in  Ports¬ 
mouth.  NiL.  also  provide  low- 
cost  tools  with  MOM-like  ca¬ 
pabilities.  But  most  of  the 
products  can  read  data  only 
from  devices  based  on  the  Sim¬ 
ple  Network  Management  Pro¬ 


tocol  (SNMP).  Disabaio  said. 

In  contrast.  Unity  can  read 
non-SNMP  data  and  even  Web 
page  reports  that  are  pushed 
to  the  software.  That  could  in¬ 
clude  information  from  cir¬ 
cuits  that  are  monitoring  bur¬ 
glar  and  fire  alarms,  power 
supplies  and  temperature  con¬ 


trols.  according  to  Disabato. 

In  addition.  Unity  is  priced 
far  below  high-end  MOM 
products  from  IBM's  Tivoli 
unit  and  Computer  Associates 
International  Inc.,  which  can 
cost  a  large  company  millions 
to  implement.  Disabato  said. 

Unity  prices  start  at  S7S.000. 
but  a  typical  installation  that 
includes  managed  services 
provided  by  Singlestep  and 
can  monitor  five  to  seven  nei- 
worit  man^ement  systems 
will  cost  about  $250,000,  said 
Singlestep  CEO  Chris  Noble.  I 


Singlestep’s  Unity  Server 


Dala  sources  and 
connectors  of  nd' 
work  nwnHorvn  and  management  toots, 
such  as  CiacoVnrfcs  and  HP  OpenVtew. 
am  colected  and  combined  into  a  com- 
rrxjnviawbylheUnityengine- 


I  Network  manages 
access  data  gatherec 
byunrty. 


Enterprise  poliaes  for  actions  n  case  of 
outagesorerrorsarestoredforcompan- 
son  to  actual  events  by  the  Umty  engne. 


Drop  Wail  Street  IT 
Disaster  Recovery  Proposal 


Implementation 
labeled  unfeasible 


BY  UrCAB  MEAMIAN 

A  U3.  senator  this  month  said 
federal  regulators  have  aban¬ 
doned  a  proposal  that,  if  made 
law.  could  have  required  Wall 
Street  firms  to  move  their  dis¬ 
aster  recovery  data  centers 
hundreds  of  miles  away  from 
their  primary  IT  facilities. 

That  idea  was  included  in  an 
interagency  v^te  paper,  re¬ 
leased  in  August,  on  strength¬ 
ening  the  resilience  of  the  U.S. 
financial  system.  However,  fi¬ 
nancial  services  firms  criti¬ 
cized  it  as  unnecessary  and 
technically  unfeasible.  For  ex¬ 
ample.  Fibre  Channel,  the 
most  common  network  proto¬ 
col  used  between  data  centers. 


has  a  distance  limit  of  about 
100  kilometers,  or  62  miles. 

Sen.  Cbaries  Schumer  (D- 
N.Y.)  based  his  analysis  of  the 
regulators’  plans  on  a  Dec.  23 
letter  that  was  sent  to  him  by 
the  heads  of  the  Federal  Re¬ 
serve  System,  the  Office  of  the 
Comptroller  of  the  Currency 
and  the  Securities  and  Ex¬ 
change  Commission. 

Schumer  is  a  member  of  the 
Senate  Banking  Committee, 
which  has  oversight  of  federal 
financial  agencies.  He  said  the 
letter  stated,  in  part,  that  the 
draft  white  paper  had  been  in¬ 
accurately  described  in  public 
accounts  and  didn't  set  min¬ 
imum  distance  requirements 
or  recommend  “as  a  sound 
practice  that  firms  move  out 
of  center-city  locations.” 

However,  the  white  paper 


did  suggest  the  use  of  out-of¬ 
region  IT  backup  facilities.  It 
also  posed  a  series  of  IT-relat- 
ed  questions,  including  one 
that  asked  whether  a  minimum 
distance  between  primary  and 
backup  data  centers  should  be 
required  “for  core  clearing 
and  settlement  organizations 
and  firms  that  play  significant 
roles  in  critical  markets.”  The 
paper  listed  a  distance  of  200 
to  300  miles  as  an  example. 


In  one  of  dozens  of  respons¬ 
es  to  the  white  paper,  PNC  Fi¬ 
nancial  Services  Group  Inc.  in 
New  York  said  in  an  October 
letter  to  the  Federal  Reserve's 
board  of  governors  that  disas¬ 
ter  recovery  requirements 
must  be  technologically  at¬ 
tainable. 

“Under  most  disaster  sce¬ 
narios,  technology  backup  re¬ 
covery  sites  do  not  need  to  be 
more  than  a  few  miles  apart  to 


adequately  recover  the  prima¬ 
ry  site,"  PNC  said. 

The  Banking  Information 
Technology  Secretariat 
(BITS),  a  Washington-based 
organization  made  up  of  the 
100  largest  financial  services 
firms  in  the  U.S.,  giso  filed  a 
comment  letter  in  October. 

The  regulators  are  tryii^ 
to  do  the  right  thing,  but  let's 
do  it  in  a  way  where  we  don’t 
impose  excessively  high  costs 
or  implement  something  that 
is  technologically  not  possible 
to  do."  John  Carlson,  senior  di¬ 
rector  of  BITS,  said  this  month. 

Many  New  York-based  fi¬ 
nancial  services  firms  already 
have  disaster  recovery  sites  in 
New  Jersey  or  in  boroughs  of 
the  city  outside  of  Manhattaa 
But  Larry  Tabb,  an  analyst  at 
TowerGroup  in  Needham, 
MasSn  said  the  government's 
obvious  concern  is  that  in  the 
event  of  a  nuclear  attack  on 
New  Yoric.  backup  facilities 
would  likely  be  destroyed.  I 
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ROI/Value  Management 


Build  more  business  value 

INTO  YOUR  IT  INVESTMENTS 

With  mounting  profit  pressures  and  demands 
for  cost  control,  every  investment  must  produce 
rapid  and  predictable  business  value.  As  the 
world's  third  largest  IT  company.  Fujitsu  can 
show  you  how  to  improve  your  return  on  IT. 

Our  experienced  consultants  will  align  your 
technology  with  your  business  strategy  for 
improved  performance.  And  our  enterprise  value 
management,  application  outsourcing  and  IT 
effectiveness  experience  can  help  maximize  the 
value  from  IT  while  reducing  total  IT  costs  up 
to  30%  in  three  years. 

Along  with  the  right  blueprint,  a  solid  infrastructure 
forms  the  foundation  for  business  effectiveness. 

By  eliminating  “server  sprawir  our  exceptionally 
reliable  and  scalable  UNIX  servers  will  lower 
TCO  and  improve  productivity. 

For  free  white  papers  showing  how  to  maximize 
your  Return  On  IT,  visit  us.fujitsu.com/ROIT. 
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Working  together,  we  can  accomplish  anything. 


us.fujitsu.com 
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Storage  Vendors 
See  Stronger  Q4 

EMC  Corp.  laid  its  four1h*t)uar- 
tar  financial  rasutts  shouM  top 
expectations,  adth  ravenue  total* 
ing  at  least  St47  MHon.  That’s 
up  from  a  profacthMi  of  aiKiul 
t\M  btton  that  EMC  made  dur¬ 
ing  the  quarter.  However,  EMC 
said  it  sttD  expects  to  report  a 
loss  iMcausa  of  a  S160  mMion 
restructuriftg  charge.  Storage 
Tacfatology  Corp.  in  Louisvile. 
Colo.,  and  McOata  Corp.  in 
Broomfield.  Colo.,  also  raised 
their  fourth*quarter  giddartce. 


IBM  to  Outsource 
Production  Work 

BM  announced  that  San  Jose- 
based  Sanmina-SCl  Corp.  will 
take  over  manufacturing  of  “a 
signAcant  portion'  of  its  krw- 
and  and  midranga  xSaries 
sarvers  and  krtaKStation  work- 
statione  in  a  daal  valued  at  S3.6 
bMion  over  three  yoars.  IBM  abo 
sM  M’s  outsourcing  a  refurtifsh- 
big  cantar  for  leased  IT  equip¬ 
ment  to  Mihiitan.  Caftf.-basad 
Solectron  Corp. 


SAP  Reorganizes, 
Cuts  Sales  Force 

SAP  M  aid  a  bid  off  ibout  130 
worhars  at  Its  U.S.  subsidiary  In 
Nawlown  Square,  Pa.,  as  part  of 
a  sales  forca  reorganization. 

SAP  Amorica  tne.'s  iMes  per¬ 
sonnel  wfll  now  work  on  a  re¬ 
gional  basis  mstead  of  focusing 
on  vertical  industries,  the  com¬ 
pany  said.  About  one-third  of  the 
lobs  that  were  cut  wM  be  rede¬ 
fined  and  filled  again,  SAP  said. 


Short  Takes 

ATAT  CORP.  said  it  plans  to  lay 
off  3,500  of  its  72 JHK)  wwkars, 
wttb  most  of  the  cuts  coming  at 

Ms  business  sarvicss  unit _ 

IBM  said  R’s  transferring  Al  Zol- 
lar,  general  manager  of  its  Lotus 
Software  Group,  to  a  new  job 
heedmg  the  unit  that  develops  Us 
iSeries  servers. 


IBM  Offers  On-Demand 
Service  for  High-End  Use 


Option  will  enable  companies  needing 
supercomputer  power  to  lower  costs 


BY  JAIKUMAR  VUAVAN 

IBM  LAST  WLI-K  l.iunchcd 
a  capacity-on-demand 
option  under  which  com¬ 
panies  with  high-perfor¬ 
mance  computing  require¬ 
ments  will  be  able  to  rent  su¬ 
percomputing  power  on  an 
a$-ncedcd  basis. 

The  service  will  provide 
companies  in  sectors  such  as 
energy  and  financial  services 
with  quick  access  to  the  com¬ 
puting  resources  they  need 
without  the  high  fixed  costs 
U5ualiy  associated  with  super¬ 
computing.  said  Dave  Jursik. 
an  IBM  vice  president. 

Under  the  pre^ram,  users 
will  be  able  to  rent  capacity 
from  cither  IBM  Power  archi¬ 
tecture-based  supercomputers 
or  Intel  Corp.-based  high-per¬ 
formance  Linux  clusters.  IBM 


will  charge  customers  based 
on  the  capacity*  used  and  dura¬ 
tion  of  use. 

llie  approach  makes  partic¬ 
ular  sense  for  companies  that 
want  access  to  extensive  com¬ 
puting  resources  for  short  pe¬ 
riods  of  time.  Jursik  said. 

"It  will  allow  them  to  elimi-  ^ 
natc  large  fixed  costs  and  have  ! 
a  variable-cost  infrastructure  i 
instead."  he  said. 

PCS  Geophysical,  an  Oslo- 
based  company  that  provides 
imaging  services  for  large  oil 
companies,  expects  to  save 
about  S1.S  million  annually  on 
equipment-related  costs  under 
this  approach,  said  Chrbio- 
pher  Usher,  the  company's 
president  of  data  processing. 

PCS  usually  leases  or  buys 
outright  the  supercomputing 
capacity  it  needs  from  IBM. 
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But  the  company  recently 
signed  up  for  the  on-demand 
option  and  is  using  rented  su¬ 
percomputer  capacity  for  an 
advanced  seismic  imaging 
project  in  the  Gulf  ofMexica 
Under  the  arrangement, 
PGS  sends  disks  containing 
seismic  data  to  IBM.  IBM 
loads  and  processes  the  data 
on  its  supercomputers,  and 
users  at  remote  PGS  locations 
can  access  the  data  via  the 


SGI  Offers  Itanium  2-Based  Linux  Systems 


Alti.\  servers  to 
complement  Irix 

BV  TOM  KRAZIT 

Silicon  Graphic.s  Inc.  last  week 
announced  systems  that  com¬ 
bine  the  Linux  of^craiing  sys¬ 
tem  with  Intel  Corp.'s  Itanium 
2  processor  to  create  a  non- 
proprietary  server  that  can 
scale  up  to  64  processors. 

The  Altix  3300  and  Altix 
3700  run  on  a  standard  version 
of  Linux  that's  compatible 
with  Red  Hat  Inc.'s  tJnux  Ver¬ 
sion  7.2.  The  Altix  3300  can  be 
configured  with  a  .single  node 
of  four  to  12  Itanium  2  proces¬ 
sors.  and  the  Altix  3700  can 
use  16  to  64  Itanium  2  proces¬ 
sors  in  a  node. 

Each  node  contains  a  single 
Linux  operating  system  image 
and  up  to  512GB  of  memory. 
The  Altix  3000  machines  will 
be  ideal  for  clustering,  be¬ 


cause  SGPs  NUMAlink  inter¬ 
connect  technology  lets  users 
connect  nodes  and  ^larc 
memory  across  processors,  ac¬ 
cording  to  )an  Silverman,  se¬ 
nior  vice  president  of  market¬ 
ing  at  Mountain  View,  Calif.- 
based  SGI. 

SGI  will  support  clusters  of 
up  to  512  processors  this  year 
and  allow  u.sers  to  build  clus¬ 
ters  of  more  than  1,000 
proccsswirs  next 
year,  said  Andy 
Sensclau.  prod¬ 
uct  nuTugcr  for 
the  Altix  3000 
family. 

The  Itanium  2 
processor  offers 
Altix  users  the 
ability  to  run  64- 
bii  applications 
at  high  levels, 

SGI  said,  point¬ 
ing  to  several 
positive  bench¬ 


marking  results  for  the  Altix 
system  using  tests  from  Stan¬ 
dards  Performance  Evaluation 
Corp.  in  Warrenton.  Va.  But 
users  of  32-bit  applications 
won’t  be  able  to  run  those 
programs  any  faster  than  an 
ancient  356-MHz  processor 
could,  said  Nathan  Brook- 
wood,  a  principal  analyst  at 
research  company  Insight  64 
in  Saratoga.  Calif. 

"Anything  used 
on  a  day-to-day 
basis  that  requires 
signtficani  com¬ 
putational  ability 
will  need  64-bit 
adaptations,'  he 
said.  This  means 
users  have  to  re¬ 
compile  their  old¬ 
er  applications  to 
realize  the  perfor- 
mattcc  benefits  of 
the  Itanium  2. 

The  company's 


Internet  or  dedicated  lines. 

"Capacity  on  demand  is 
something  that  we  have  been 
talking  about  for  some  time  as 
an  altemaftve  way  to  get  com¬ 
puting  capacity."  Usher  said. 
"The  savings  come  from  not 
having  to  pay  for  your  com¬ 
puters  when  you  are  not  u.sing 
them." 

The  new  supercomputing 
capacity-on-demand  option  is 
an  example  of  the  kind  of  ser¬ 
vice  users  can  expect  to  see 
IBM  deliver  under  the  On- 
Demand  initiative  recently 
outlined  by  CEO  Samuel  J. 
Palmisano.  Jursik  said  (Quick- 
Link  340911. 

Initially,  much  of  the  inter¬ 
est  in  this  kind  of  service  will 
come  from  a  narrow  set  of 
users  with  very  periodic  but 
well-defined  needs  for  com¬ 
puting  power,  said  Mike  Kahn, 
an  analyst  at  The  Clipper 
Group  Inc.  in  Wellesley,  Mass. 

Though  such  pay-as-you-go 
arrangements  have  been  avail¬ 
able  on  a  sporadic  basis  for 
years.  IBM’s  announcement 
last  week  marks  the  first  time 
such  an  option  is  being  offered 
on  commercial  RISC  and  Intel 
servers.  Kahn  said.  I 


target  market  of  researchers 
and  creative  professionals 
has  been  clamoring  for  a 
Linux  operating  environment 
that  will  let  them  break  free 
of  their  dependence  on 
proprietary  platforms.  Silver- 
man  said. 

However,  SGI  also  manufac¬ 
tures  a  line  of  proprietary  sys¬ 
tems,  the  Origin  3000  family, 
that  comes  with  the  compa¬ 
ny’s  Irix  operating  system. 

I  The  new  Altix  machines  let 
SGI  tap  into  the  rapidly  grow¬ 
ing  Linux  market  i^ile  it  con¬ 
tinues  to  offer  the  advanced 
features  of  Irix  to  users  who 
I  are  willing  to  pay  a  premium. 

I  Silverman  said. 

"Irix  has  application  capa¬ 
bility  that  isn't  present  in  Lin¬ 
ux.  Pec^le  depend  on  the  reli¬ 
ability  and  security  features 
within  Irix.  and  it's  not  easy  to 
I  put  those  features  into  Linux." 

I  Silverman  said. 

ATrozif  is  a  reporter  for  the  IDG 
Newsservice. 
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Storage  Vendors 
See  Stronger  Q4 
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Cuts  Sales  Force 
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IBM  Offers  Qn-Demand 
Service  for  High-End  Use 


Option  will  enable  companies  needing 
supercomputer  power  to  lower  costs 


OV  JMKUMAn  VUAVAN 

IBM  LAST  WEEK  launched 
a  capacity'OO'demand 
option  under  which  com¬ 
panies  with  high-perfor- 
mance  computing  require¬ 
ments  will  be  able  to  rent  su- 
pcrcomputittg  power  on  an 
as-needed  basis. 

The  service  will  provide 
companies  in  sectors  such  as 
eneigy  and  financial  services 
with  quick  access  to  the  com¬ 
puting  resources  they  need 
without  the  high  fixed  costs 
usually  associated  with  super¬ 
computing,  said  Dave  Jursik, 
an  IBM  vice  president. 

Utkder  the  program,  users 
will  be  able  to  rent  capacity 
from  either  IBM  Power  archi¬ 
tecture-based  supercomputers 
or  Intel  Corp.-based  high-per¬ 
formance  Linux  clusters.  IBM 


will  charge  customers  based 
on  the  capacity  used  and  dura¬ 
tion  of  use. 

Tbe  approach  makes  partic¬ 
ular  sense  for  companies  that 
want  access  to  extensive  com¬ 
puting  resources  for  short  pe¬ 
riods  of  time.  Jursik  said. 

**11  will  allow  them  to  elimi¬ 
nate  large  fixed  costs  and  have 
a  variable-cost  infoastructure 
instead.”  he  said. 

PGS  Geophysical  an  Oslo- 
based  company  that  provides 
imaging  services  for  large  oil 
companies,  expects  to  save 
about  SIJ  million  annually  on 
equipment-related  costs  under 
this  approach,  said  Christo¬ 
pher  Usher,  the  company’s 
president  of  data  processing. 

PGS  usually  leases  or  bu^ 
outright  tbe  supercomputiog 
capacit>'  it  needs  from  IBM. 


High  Rent 


But  the  company  recently 
signed  up  for  the  on-demand 
option  and  is  using  rented  su¬ 
percomputer  capacity  for  an 
advanced  seismic  imaging 
project  in  the  Gulf  of  Mexico. 

Under  the  arrangement. 
PGS  sends  disks  containing 
seismic  data  to  IBM,  IBM 
loads  and  processes  tbe  data 
on  its  supercomputers,  and 
users  at  remote  PGS  locations 
can  access  tbe  data  via  the 


Internet  or  dedicated  lines. 

^Capacity  on  demand  is 
something  that  we  have  been 
talking  about  for  some  time  as 
an  alternative  way  to  get  com¬ 
puting  capacity,”  Usher  said. 
'The  savings  coroe  from  not 
having  to  pay  for  your  com¬ 
puters  when  you  are  not  using 
them.” 

The  new  supercomputing 
capacity-oD-demand  option  is 
an  example  of  the  kind  of  ser¬ 
vice  users  can  expect  to  see 
IBM  deliver  under  tbe  On- 
Demand  initiative  recently 
outlined  by  CEO  Samuel ). 
Palmisano.  Jursik  said  [Quick- 
Link  34091]. 

Initially,  much  of  the  inter¬ 
est  in  this  kind  of  service  will 
come  from  a  narrow  set  of 
users  with  very  periodic  but 
weU-defmed  needs  for  com¬ 
puting  power,  said  Mike  Kahn, 
an  analyst  at  The  Clipper 
Group  Inc.  in  Wellesley,  Mass. 

Though  such  pay-as-you-go 
arrangements  h^  been  av^ 
able  on  a  sporadic  basis  for 
years.  IBM’s  announcement 
last  week  marks  the  first  time 
such  an  (^>tion  is  being  offered 
on  commercial  RISC  and  Intel 
servers,  Kahn  said.  I 


SGI  Offers  Itanium  2-Based  Linux  Systems 


Alrix  servers  to 
complement  Irix 


■V  TOM  MIAZiT 

Silicon  Graphics  Inc.  last  week 
anrtounced  systems  that  com- 
biive  the  Linux  operating  sys¬ 
tem  with  Intel  Corpu’s  Itanium 
2  processor  to  create  a  non- 
proprietary  server  that  can 
scale  up  to  64  processors. 

Tbe  Altix  3300  and  AJtix 
3700  run  on  a  standard  version 
of  Linux  that’s  compatible 
with  Red  Hat  Inc.’s  Linux  Ver¬ 
sion  7.2.  The  Altix  3300  can  be 
configured  with  a  single  node 
of  four  to  12  Itanium  2  proces¬ 
sors.  and  the  Altix  3700  can 
use  16  to  64  Itanium  2  proces¬ 
sors  in  a  node. 

Each  node  contains  a  single 
Linux  operating  system  image 
and  up  to  512GB  of  memory. 
The  Altix  3000  machines  will 
be  ideal  for  clustering,  be¬ 


cause  SGI's  NUMAlink  inter¬ 
connect  technology  lets  users 
connect  iK>des  and  share 
memory  across  processors,  ac¬ 
cording  to  Jan  Silverman,  se¬ 
nior  vice  president  of  market¬ 
ing  at  Mountain  Ariew.  Calif- 
based  SGI. 

SGI  will  support  clusters  of 
up  to  512  processors  this  year 
and  allow  users  to  build  clus¬ 
ters  of  more  than  LOOO 
processors  next 
year,  said  Andy 
Senselau.  prod¬ 
uct  manager  for 
the  Altix  3000 
family. 

The  Itanium  2 
processor  offers 
Altix  users  the 
ability  to  run  64- 
bit  applications 
at  hi^  leveb, 

SGI  said,  point¬ 
ing  to  several 
positive  bench¬ 


marking  results  for  the  Altix 
system  using  tests  from  Stan¬ 
dards  Performance  Evaluation 
Corp.  in  Warrenton,  Va.  But 
users  of  32-611  applications 
won’t  be  able  to  run  those 
programs  any  foster  than  an 
ancient  3S6-MHz  processor 
could,  said  Nathan  Brook- 
wood.  a  principal  analyst  at 
research  company  Insight  64 
in  Saratoga.  Calif. 

'’Anything  used 
on  a  dt^-to-day 
basis  that  requires 
significant  com¬ 
putational  ability 
will  need  64-bit 
adaptations,”  he 
said.  This  means 
users  have  to  re¬ 
compile  their  old¬ 
er  applications  to 
realize  tbe  perfor¬ 
mance  benefits  of 
the  Itanium  2. 

Tbe  company's 


target  market  of  researchers 
and  creative  professionals 
has  been  clamoring  for  a 
Linux  operating  environment 
that  will  let  them  break  free 
of  their  dependence  on 
proprietary  platfc^ms.  Silver- 
man  said. 

However.  SGI  also  inanufoc- 
tures  a  line  of  proprietary  sys-- ' 
terns,  the  Origin  3000  family, 
that  comes  with  the  compa¬ 
ny’s  Irix  operating  systeia 
The  new  Altix  machines  let 
SGI  tap  into  the  rapidly  grow¬ 
ing  Linux  market  while  it  con¬ 
tinues  to  offer  the  advanced 
features  of  Irix  to  users  who 
are  willing  to  pay  a  premium, 
Silverman  said. 

”Irix  has  application  capa¬ 
bility  that  isn't  present  in  Lin¬ 
ux.  People  depend  on  tbe  reli- 
ability  and  security  features 
within  Irix,  and  it's  not  easy  to 
put  those  features  into  Linux.” 
Silvennan  said. 


Knmt  is  a  reporter  for  the  IDG 
Newsservice. 


HELP  DESK 


ON-SITE  DESK 


cuBe 


■  and  Microsoft  Ofn<»XPPro«essionaLWairtspeo««aawpte?  .^  .  '^'ofI^Ma<^)^fra»»^.«Wcli  tatt 

Tiw  Group  Policy  Jeature  in  Windows  XPProfessloB»i*ite’  apdtfcaflonstoh^preiratuserSftwirrtMi^M  , 

J  :  you  doflne  rotated  user  groups  and  then  easily  asrtsiwcudty  Bltactitnents  that  most  yirasesusei  Ifti^roororousow  to, 

settings  to  the  group  as  a  whole.  Office  XP  Professional 


Ns 


16 


cwiiufLi 


w  compulenrarld  com 


:-sr7 


Other  ISOs  Also  Prepare  for  Market  Standardization 


gyvmdonkirbidionattansrnls-  :  iMtonofABBLlitaZkfltch* 
Sion  congestion  managemant  s)fs-  i  besed  vendor  of  power  and  0010- 
tern.  Fishman  said  he  eiQecb  that 
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Energy  Market 

sees  the  six*state  region’s  bulk 
power  system  and  wholesale 
electricity  market,  this  week 
plans  to  conduct  its  thtrd  ex¬ 
ternal  trial  of  the  new  system. 
The  test,  which  b  expected  to 
be  the  final  one.  will  involve 
an  unspecified  number  of 
electricity  generators  and  dis¬ 
tributors  and  is  aimed  at  gaug¬ 
ing  the  technology’s  readiness. 

The  system  b  built  annind 
more  than  400  servers,  includ¬ 
ing  eight  of  Hcwlctt-r’ackard 
Co.'s  AlphaServers.  It’s  being 
designed  to  let  market  partici¬ 
pants  buy  and  sell  electricity 
at  prices  that  are  set  one  day 
before  transactions  take  place 
and  then  in  real  time  to  reflect 
changes  in  the  market.  ISO 
New  Errand  officials  said  the 
company  b  developing  the 
system  with  help  from  Alstom 
Corp..  a  Bellevue.  Wash.-based 
software  vendor. 

The  technology  being  im¬ 
plemented  at  ISO  New  Eng¬ 
land's  facilities  here  b  based 
on  a  system  Alstom  created 
for  PJM  Interconnection  LLC, 
an  independent  system  opwra- 
tor  ( ISO)  in  Norristown,  Pa. 
But  ISO  New  England  has 
worked  with  Alstom  and  con¬ 
sultants  such  as  Stamford, 
Conn.-based  GRT  Corp.  to 
customize  the  system. 

For  example,  the  company 
added  features  that  let  market 
participants  account  for  losses 
that  can  occur  on  transactions, 
plus  capabilities  to  handle  hy¬ 
droelectric  dbpatches  from 
sellers  to  buyers,  said  Gordon 
van  Welle.  ISO  New  England’s 
president  and  CEO. 

In  addition  to  the  Alpha- 
Server  hardware,  which  HP 
acquired  throu^  its  purchase 
of  Compaq  Computer  Corp., 
ISO  New  England’s  system 
uses  Oracle  databases  and  Lin¬ 
ux  servers.  Work  on  the  proj¬ 
ect  started  in  May  2001. 

The  system  includes  so- 
called  multisettlement  capa¬ 
bilities,  which  let  buyers  and 
sellers  agree  00  binding  prices 
prior  to  an  electricity  trade  or 
as  it  happens.  Now  150  New 
England  operates  a  sin^e-set- 
tlemeot  system  that  shows  a 


ISO  New  England  be  ahead  of 

thegarrcjniaMngst^tooarn- 
ply  wlh  FERCs  standing  nurief 
(Mgn  proposal,  but  IM  doflsnl 
mean  other  energy  axlusiry  ISOs 
areslaniingsti. 

For  instance.  Cafifomie  60 
is  trying  to  address  prablenB  with 
its  msrkel  sirudure  thet  Mped 
contrftxite  to  Ihe  CaMornis  energy 
oWs  1)2000  tfid  2001.  The  Fat- 
som.  CaM.-besad  company  B 
shifting  from  a  tnanagemenlsys' 


single  price  to  users.  The  new 
system  aUo  adds  congestion 
management  features  for  deal¬ 
ing  with  transmission  conges¬ 
tion  and  differences  in  power 
consumption  by  regions. 

ISO  New  England’s  efforts 
map  with  guidelines  for  ex¬ 
changing  data  electronically 
that  are  being  crafted  by  the 
Federal  Energy  Regulatory 
Commission  (FERC)  in  an  ef¬ 
fort  to  make  the  electricity 
maricet  more  competitive. 

Because  the  six  ISOs  that 
operate  in  the  Uii.  have  their 
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AlphaServer 

chitecture  that  allows  users  to 
add  processors,  memory  aod 
yo  cap>acicy  "almost  like  Lego 
blocks,”  according  to  informa¬ 
tion  posted  on  HP's  Web  site. 

The  servers  will  support 
multipath  I/O  technology  for 
greater  system  availability  and 
dynamic  partitioning  capabili¬ 
ties.  The  servers  also  come 
with  a  new  system  manage¬ 
ment  console  designed  for 
centralized  admmbtration. 

HP’s  Marvel  plan  says  a  lot 
about  the  company’s  intent  to 
stick  with  its  postmerger 
product  commitments,  said 
Fernando  Yson.  systems  man¬ 
ager  at  Unicare/Cost  Care. 
The  Huntington  Beach.  Calif.- 
based  health  insurer  has  sev¬ 
eral  smaU  to  midsize  Alpha- 
Servers  running  homegrown 
appUcations- 

Wben  the  time  comes  for  an 


tom  that  tnaks  up  the  CaMorna 
energymerttotlntoiustlhroera- 
gtons  to  a  new  approach  that 
would  dMde  the  matkel  into 
(tozens  or  men  huidreds  of  re¬ 
gions,  said  spohesman  Gregg 
pGhman. 

Fiahmaosaidthenewap- 
proacK  as  wel  as  fT  golems  toll 
wi  support  H.  ahoiAl  be  in  place 
latertotsyear.lnaddKion,Caltor- 
nia  60  this  month  plare  to  isaue  a 
request  tor  proposals  to  tedmolo- 


own  operating  rules  and  pro¬ 
cedures,  attempts  to  seamless¬ 
ly  exchange  data  now  are  “like 
having  railroads  with  different 
gauge  tracks,”  said  van  Welie. 

The  ISOs  probably  won’t  be 
required  to  meet  the  require¬ 
ments  envbioned  by  FERC’s 
standard  market  design  pro¬ 
posal  until  later  this  year  or 
2004.  ISO  New  England  plans 
to  make  any  necessary 
changes  to  its  new  system  in 
future  upgrades,  said  van 
Welie  and  CIO  Jamshid  Afnan. 
But  they  added  that  the  corn- 


upgrade.  it  will  most  likely  be 
to  Itanium  instead  of  Alpha 
because  of  HP's  road  map. 
Yson  said.  “But  we  are  going 
to  wail  for  other  users  to  test 
it  first  before  migrating.” 

The  Pittsburgh  Supercom¬ 
puting  Center,  which  has  beta- 
tested  the  EV7-faased  servers, 
has  ordered  a  “fair  amount”  of 
the  systems,  said  Michael 
Levine,  scientific  director  at 
the  federally  supponed  center. 

The  new  servers  will  sup¬ 
plement  the  organizatioo's  ex- 
istii^  3.000-node  AlphaServer 
cluster,  the  largest  oondefense 
supercomputer  in  the  country, 
according  to  Levine.  The 
servers’  very  high  bandwidth 
performance  and  interconnect 
technologies  arc  what  make 
them  appealing,  Levine  said. 

HP's  decision  to  switch  its 
server  technology  to  Itanium 
in  the  future  “doesn't  make 
things  any  easier.”  said  Levine. 
“But  it  is  the  sort  of  thing  peo¬ 
ple  are  used  to  and  should  in 


systom  to  be  operadonal  by  avly 
spring  nod  yeir. 

Because  FERCs  proposed 
gutoeims  twre  modeled  to  a  great 
extort  on  60s  In  the  NortheasL 
Quiktotoid.  HY.-based  Mm  Yvk 
60  Is  afeaody  *d06eiy  ilgnad* 
wdh  toe  proposal  Mid  company 
spotoamvi  Steve  Sutran. 

New  Vtark  60  is  working  wnh  a 


pany  wanted  to  get  started  in 
advance  because  the  system 
should  make  its  energy  market 
operate  more  efficiently. 

ISO  New  England’s  IT  ini¬ 
tiative  “appears  to  put  them 
ahead  of  the  curve"  on  FERC’s 
standardization  proposaL  said 
lohn  Fringer,  vice  president  of 
power  services  at  Nicer  Ener¬ 
gy  LLC.  a  natural-gas  aod  elec¬ 
tricity  marketing  company  in 
Lisle,  Ill.  But,  Fringer  added,  it 
will  be  "quite  a  task”  to  get  the 
various  ISOs  and  other  market 
participants  to  adopt  a  corn- 


most  cases  be  manageable." 

The  new  capabilities  make 
for  “faster,  better,  cheaper  sys¬ 
tems  with  much  higher  perfor¬ 
mance  and  much  lower  laten¬ 
cy"  than  previous-generation 
Wildfire  AlphaServers,  said 
Terry  Shannon,  publisher  of 
“Shannon  Knows  HPC,”  an  Al- 


NEW  PRODUCT 

HP  AlphaServer 
Marvel  EV7 


iVi 


malfon  tedmotogy,  to  dsMiDp  a 
nuNteflllBfifnl  system  to  npteca 
Rs  exteUng  ona.  srt  SJiNBn.  Ths 
system  b  expected  to  coat  *ten6 
of  mMons  of  dolare' to  develop 
and  should  be  ready  by  mid'20l)4, 
he8ted.ad(lngto8llhedBVBlop- 
men(  schedule  would  be  feline  - 
MtoFQ^svteionforstandwdb- 
ing  toe  national  energy  markeL 

-  ThomasHa/fnm 


mon  data-exchange  format. 

“We've  been  impressed  with 
what  ISO  New  England  has 
done  here,”  said  Mike  Roan,  a 
regulatory  specialist  at  Exelon 
PowerTeam.  a  marketing  group 
of  Kennett  Square,  Pa.-based 
Exelon  Corp.  Roan  said  he  ex¬ 
pects  to  get  several  business 
benefits  from  the  new  system, 
including  increased  access  to 
information  about  the  cost  of 
energy  consumption  in  differ¬ 
ent  areas  and  where  it  would 
make  the  most  sense  to  add 
generating  plants.  I 


buquerque.  N.M.-bascd  news¬ 
letter.  The  new  servers  should 
appeal  to  many  larger  users 
that  would  need  years  to  mi¬ 
grate  off  Alpha,  Shannon  said. 

Still,  the  migration  issue  is  a 
thorny  one. 

“Last  year.  I  would  have  said 
that  this  was  some  really  great 
and  exciting  technology.”  said 
Rich  Partridge,  an  analyst  at 
D.H.  Brown  Associates  Inc.  in 
Pon  Chester,  N.Y.  But  with 
Marvel  likely  to  be  the  Alpha 
fiunily's  last  hurrah,  users 
must  get  commitments  from 
HP  that  guarantee  investment 
protection  when  they  move  to 
Itanium  processors,  he  said. 

HP  has  said  it  will  support 
the  Alpha  installed  base  for  as 
long  as  necessary.  Its  Alpha¬ 
Server  customer  assurance 
program  offers  money-back 
guarantees,  technology-refresh 
incentives,  guaranteed  trade-in 
values  and  transition  lease  pro¬ 
grams  for  systems  purchased 
through  De^mber  2003.  fe 
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Dell  1  Managed  Switches 

PowerConnecf”  3024*  Switch 

PowerConnecf”  3048*  Switch 

ScitMta,  Hi»  r»BrtB»Mri  Mapigi  J  SiMdi 

•  24  Fast  Etnemet  Ports  Phis  2  Buin-lf  Gigabii  Uplinks 

•  Up  to  12  8  Gbps  of  Wire-Speed  SwitdiinQ  Capacity 

•  SiackaMe  -  Supports  up  to  144  FE  Ports  m  a  Stack 

•  3-Yr  Next  Business  Day  Part  or  Unit  Repiacemenr 

lUek-OetM,  Ui|>  PerteHBci  MHged  Switck 

•  48  Fast  Ethernet  Ports  Phis  4  Budt-in  Gigapn  Uplinks 

•  Up  to  21  6  Gbps  of  Wire  Speed  Switching  Capacity 

•  Sociable  -  Sisports  up  to  144  FE  Ports  m  a  Stack 

•  3-Yr  Ned  Business  Day  Part  or  Unit  Replacement 

Ah  3SltNvas$17/mo  .(48prnts‘^l 

GO  Oays  Same-As-Casb 

WWW  {-VAUie  Cede:  tSSO-SIOIM 

A  A  3slowas$Z&'mo.l46oms'| 

aUUU  60  Days  Same-As-Cash 

WWW  E-VAUKCedrlSSni-SmM 

nicB—epted  wffntf. 

•  3-Yf  7»24  4-Hf  Pan  or  Unit  Ftepiacemerit,  add  $77 

RecoMMiiM  eppM: 

•  3-Y'  7>24  4-Hr  Pan  oi  Unit  Replacement.-  add  $199 

PowerConnecr  3248*  Switch 

PowerConnect'  5224*  Switch 

lliyh  Pwlan— ici.  Dwerpriii  Owe  lAneged  Seeiidi 

•  48  Fast  Etbemei  Pons  Plus  2  Bult-ln  Gigabn  Uplirdis 

•  Multi-Uver  Traffic  Cl3$$if>cal>on  ai  Laysis  2. 3.  and  4 

•  Advanced  Managemeni  via  Bfowser  o> 

Industry- Standard  Cll 

•  3-Yr  Men  Business  Day  Part  or  Unit  Repiacemeni' 

High-PerteniMce  AU-GipM  Manped  Suvilch 

•  24  Copper  GigAI  Pons  Plus  4  SEP  Fiber  Uplinks 

•  Laye'-3  Aware  Class  of  Service  Pnoritmiion 

•  Advanced  Uanagemeni  via  Browser  oi 
tndustiY  Standard  Cll 

•  3-Y<  Ned  Business  Day  Part  or  Umi  Repiacemeni 

^  A  A  A  “  '®*  “  ’ 

aUUU  go  Pays  Same-As-Casn 

WWW  E-VAIW  CeA:  ISBO-  SWIM 

AHgMA  A  asiowasSOL'mo  laeomts'i 

A  60  Days  Same-As-Cash 

IwWE-VAUIECbAISSO-SWIZI 

RecoMMitdad  uptreB* 

•  3-Yi  7>24  4-H'  Part  Di  Unit  Repiacemeni.  add  $199 

Ruc—eedid  ipyida: 

•  3-Yf  7x24  4-Hi  Pan  01  Unit  Replacement,  add  $299 

h’s  a  Dell,  M  you  know  you're  90109  to  save  money.  But  let’s  talk  perfomiance.  From  standard 
Fast  Ethernet  to  high-speed  Gigabit  Ethernet  over  copper  or  fiber.  Dell  PowerConnect  switches  are 
designed  to  offer  full  wire-speed  and  non-blocking  performance  Recent  Tolly  lab  tests  confirmed 
that  the  Dell  PowerConnect  324fl  outperformed  industry  leaders  by  as  much  as  47%  Plus,  the 
PowerConnect  5224  has  been  lauded  by  Tom's  Hardware  Guide  for  its  performance  and  manage^ility 
features  for  the  price.  PowerConnect  switches  also  are  highly  interoperable  and  scalable,  making 
them  ideal  for  building  a  first-time  network  or  expanding  your  existing  one  So  not  only  will  you  get 
one-of-a-kind  Dell  performance  for  less  but.  perhaps  rnore  importantly,  there'll  be  fewer  headaches  too 


Dell  PowerCoanect  3248  Oatperfonns 
fte  Cisco  Cetalysi  2950  and  XOM 
SuperStack  3  Switch  4400  by  up  to 
47%  io  Layer  2  Throup^tut  Tests. 
Tolly  Group  Repon  #202149 
-  September  2002 
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Geac  Adds  CTO,  Looks  to  Integrate  Apps 


■T  MAMC  i..  •OMOINI 

Geac  Computer  Corp.  last  week  hired 
a  new  executive  to  manage  both  prod¬ 
uct  development  and  internal  IT  oper¬ 


ations  as  part  of  the  business  applica¬ 
tions  vendor’s  plan  to  prop  up  its  sag¬ 
ging  revenue  and  woo  new  users. 
Markham.  Ontario-based  Geac  an¬ 


V2X  Shared  Virtiial  Array™  Subsystem 

The  only  disk  system  that  lets  you  use  100%  of  its  capacity,  so  you  can  consolidate 
your  data  and  save  on  your  bud9et.  Used  with  SnapVanta9e’*  software,  you  can  easily 
consolidate  Linux  servers  arsd  cerrtralize  system  management 


L5S00  Automated  Tape  Library 
&T9940eTape  Drive 

Our  largest  open  systems  tape  library  gives  you  ample  space  (up  to  13.2  PB)  to 
cortsoadaie  data  from  aH  your  different  systems.  Ar>d  with  200  OB  capacity  per  cartridge 
arrd  30  Mt/second  vartsfer  rate.  The  T9940B  lets  you  do  more  work  in  less  time. 


nounced  that  Timothy  Wri^t  is  taking 
over  as  its  chief  technology  ofiHcer  and 
CIO.  Wright,  who  previously  held  sim¬ 
ilar  posts  at  Barcelona.  Spain-based  In¬ 
ternet  service  provider  Terra  Lycos  SA, 
will  oversee  the  planned  development 
of  a  fiiUy  integrated  suite  of  front-  and 
back-ofTtce  applications  that  support 

business-performance  _ 

management 

“There’s  a  huge  opportu¬ 
nity  for  Geac  to  exploit  the 
very  high-quality  installed  base  we 
have  today  —  if  we  can  put  together 
the  right  coUectioD  of  offerings  [for] 
complete  financial  or  operational  per¬ 
formance  management,  and  if  we  can 
integrate  them  with  existing  back-end 
solutions,”  Wright  said. 

Geac's  revenue  fell  to  $201.5  million 
in  the  first  six  months  of  its  fiscal  year, 
through  Oa.  31.  down  from  S232.4  mil¬ 
lion  a  year  earlier. 

As  part  of  its  effort  to  rebound,  the 
company  also  is  buying  Extensity  Inc., 
an  Emeryville,  Calif.-based  vendor  of 
employee  expense,  procurement  and 
billing  software,  in  a  deal  that  was  an¬ 
nounced  in  August  and  is  due  to  be 
completed  next  month. 

Wright  said  Geac  plans  to  more 
tightly  couple  Extensity’s  software 
with  its  own  applications,  buildup  on 


a  lower  level  of  integration  that’s  al¬ 
ready  in  place.  Hie  move  is  intended 
to  let  Extensity  users  access  data  in 
Geac's  back-ofifice  software,  as  well  as 
in  rival  applications  from  vendors  such 
as  PeopleSoft  Inc.  and  Oracle  Corp. 

Geac  also  is  evaluating  how  to  pro¬ 
vide  a  middleware  and  Web  services 
hamework  to  its  users,  according  to 
Wright  That  may  involve  combining 
internally  developed  software  or  some 
of  Extensity’s  technology 
with  functionality  gained 
from  partnerships  or  an¬ 
other  acquisition,  he  said. 

John  Hagerty,  an  analyst  at  AMR  Re¬ 
search  Inc.  in  Boston,  said  Geac  in  the 
past  bought  rival  software  vendors 
without  fully  exploiting  the  inherited 
technology.  But  now  the  company  is 
taking  “a  more  aggressive  stance  with 
partnerships  and  acquisitions,*'  Hager- 
ty  added. 

The  new  capabilities  Geac  is  looking 
to  field  through  the  Extensity  deal 
might  be  a  good  fit  at  GenCorp  loc.’s 
Aerojet-General  Corp.  division,  said 
Michael  Hursey.  a  financial  specialist 
at  the  aerospace  and  defense  manufac¬ 
turing  operation  in  Sacramento,  Calif. 

Because  Aerojet  works  extensively 
for  the  government,  it's  required  to  do 
frequent  audits  of  travel  costs  and  oth¬ 
er  expenses.  Hursey  noted.  Aerojet  has 
been  running  Geac’s  M  Series  finance 
applications  since  1990.  be  said.  I 


McDonald’s  Ends  Network 
Project  in  Cost-Cutting  Move 


BY  TOOO  R.  WEISS 

The  new  senior  management  team  at 
McDonald's  Corp.  is  looking  to  cut 
costs,  and  IT  is  one  of  the  departments 
feeling  the  pinch. 

McDonald’s  this  month  confumed 
that  it  has  stopped  work  on  a  network¬ 
ing  project  to  connect  about  30,000 
restaurants  worldwide  to  hs  headquar¬ 
ters  in  Oak  Brook.  Ui.  The  fast-food 
chain  wouldn't  disclose  the  project’s 
total  budget,  but  spokeswoman  Lisa 
Howard  said  McDonald's  will  save 
“tens  of  millions  of  dollars’*  this  year 
by  curtailing  the  networidng  initiative. 

The  company  also  wouldn't  say  bow 
many  IT  staffers  were  working  on  the 
project,  which  was  known  as  Innovate. 
An  internal  memo  about  the  project’s 
demise  said  job  cuts  could  follow,  al¬ 
though  it  added  that  McDonald’s  will 
try  to  minimize  any  layofls 

Innovate  began  in  1999  and  was  ex¬ 
pected  to  help  make  McDonald’s  oper¬ 


ations  more  efikient  by  integrating  all 
of  hs  restaurants  in  121  countries.  De¬ 
ployment  of  the  network  was  due  to 
start  this  year  in  Canada  and  France. 

But  the  project  was  scrapped  be¬ 
cause  it  “was  not  going  to  deliver  near- 
term  benefits”  at  a  time  when  McDon¬ 
ald’s  is  tryii^  to  improve  its  financial 
positioa  Howard  She  added  that 
Innovate  is  now  viewed  as  too  costly 
compared  with  the  operating  improve- 
meats  U  was  supposed  to  produce. 

“We  have  other  ways  to  achieve  [effi¬ 
ciency  goals).”  Howard  said. 

The  decision  on  Innovate  follows 
the  hamburger  chain’s  first-ever  quar¬ 
terly  loss.  McDonald’s  last  month  also 
announced  a  series  of  management 
changes,  naming  a  new  CEO.  chief  op¬ 
erating  officer  and  vice  fhairman. 

“Our  new  managerorat  team  is  fo- 
cusii%  on  the  near  term.”  Howard  said. 
"They’re  looking  at  everything . . .  and 
reviewing  all  aspects  of  our  business."  I 


r 

Consolidate  your  work  by  consolidatir>g  data  from  all  your  different  systems.  One  way  is  with  a  V2X  Shared  Virtual  Array"  subsystem 
and  SnapVantage"  software  to  unite  all  your  Linux  virtual  servers.  Or  an  LSSOO  automated  tape  library  and  T9940B  tape  drive.  There 
are  other  ways,  too.  Well  help  find  the  one  that’s  best  So  storage  administration  takes  a  smaller  bite  out  of  your  day.  Learn  nwre 
about  this  story  and  other  ways  we  can  help  you  at  www^vethedayxom  STORAC  ETEK*  Save  the  Day.*" 


To  me,  success  is  a  35  minute  lunch. 


At  a  restaurant  not  my  desk. 


Means  I'm  not  wasting  time  doing  the 


same  data  management  task  again  and 


again  and  again  and. ..well,  you^et  it 


Save  the  day. 


PATRICIA  KEEFE 
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No  Rest  in  2003 


W  ANUARY  IS  THE  MONDAY  OF  THE  YEAR. 

I  The  big-sigh,  gotta-get-back-to-it,  foot-drag- 
I  ging  mentality  permeates  everything.  It’s  ex- 
I  cessively  gray  and  filled  with  humorless  re- 
I  solve.  Even  so,  a  spanking  new  year  is  still 
^  cause  for  hope  and  excitement. 

You  might  think  that  the  continued  theme  of  IT 
making  do  with  less  will  ensure  a  low-key,  running- 


in-place  kind  of  existence, 
la  &ct.  a  lot  is  under  way 
that  will  need  action  from 
IT.  Hot  spots  include  the 
following: 

The  tnfBformilion  of  some 
bkiB  chip  fT  prowdere.  As  a 

recent  Business  Week 
headline  put  it,  'T^e  new 
HP  —  bow’s  it  doing?” 

Sure,  postmerger. 

Hewlett-Packard  CEO 
Carty  Fiorina  has  man¬ 
aged  to  shed  Compaq's 
Michael  Capellas.  cut 
18.000  people  and  push  up 
revenue.  Several  analysts  rewarded 
the  company  last  week  by  raising 
their  2003  forecasts. 

But  being  the  queen  of  printers 
won't  take  Fiorina  very  far  She  needs 
to  reignite  overall  sales  growth,  bol¬ 
ster  a  sagging  enterprise  computing 
operation,  fend  off  E>eU,  meld  two 
huge  companies,  keep  customers  hap¬ 
py  and  make  more  money. 

IBM.  meanwhile,  under  its  new 
CEO.  b  pushing  yet  another  all- 
encompassing  new  concept  —  “auto¬ 
nomic  computing”  ~  and  has  bought 
or  b  teaming  up  with  all  sorts  of  new 
partners,  from  Rational  Software  to 
AT&T. 

The  paths  HP  and  IBM  take,  and 
the  success  they  fuul.  will  affect  most 
Fortune  1,000  IT  shops  in  one  form  or 
another. 

BriMdng  tKvrihf  tvMh  csnpiHng 

liwuw,  Ironically,  the  first  casualties 
of  the  war  on  terrorbm  are  likely  to 
be  civil  rights  and  privacy.  But  it  won't 
stop  there.  The  government  will  de¬ 
mand  that  reluctant  corporations 
play  ball  on  issues  such  as  prompt 
and  full  disclosure  of  enterprise 
break-ins.  Can  customer  and  corpo¬ 


rate  data  be  protected? 

IT  pros  will  have  to 
walk  a  fme  line  to  make 
sure  that  patches  don't  in¬ 
terfere  with  other  applica¬ 
tions,  that  users  have  suf¬ 
ficiently  quick  data  access 
and  that  key  internal  in¬ 
formation  isn’t  handed 
over  to  outside  companies 
in  the  name  of  increased 
security. 

Ws're  from  the  govenunenL 
and  wn're  looUng  to  regulate. 

"Dai^er.  Will  Robinsonl" 
Hic  feds  and  Capitol  Hill 
are  nosing  around  big-time  in  ITs 
backyard.  Internet  taxes,  intellectual 
property,  privacy  safeguards,  e-mail 
archiving  procedures,  cybercrime  re¬ 
porting.  security  certifications,  data 
protection  and  more  arc  under  debate 
at  various  leveb  in  Washington.  And 


actual  legislation  b  looking  likely.  Al¬ 
ready.  we're  seeing  in  some  states  the 
institution  of  “do-not-call"  Ibts. 
stymieing  telemarketers.  It's  worth 
keeping  an  ear  to  the  ground  and 
thinking  ahead  to  how  any  legislation 
that  passes  will  affect  your  company. 

\bu've  gof  mal  -  way  too  much  of  IL  A 
new  report  from  Ferris  Research 
claims  that  spam  accounts  for  15%  to 
20%  of  what's  in  the  corporate  mail¬ 
box  and  urill  cost  U.S.  companies 
more  than  $10  billion  this  year.  There 
are  exbting  and  pending  regulations 
regarding  e-mail  archiving.  Instant 
messaging  services  and  usage  have 
exploded.  Messaging  issues  must  be 
dealt  with  in  2003. 

UttlefT:wirale3Bnetwor1a.theprafihra- 
tkm  of  handholds  and  tho  arrival  of  avan  more 
smal,  mobla  dovicos.  As  equipment 
makers  insert  Wi-Fi  into  mobile  de¬ 
vices  and  coalitions  form  to  create 
Wi-Fi  networks,  the  technology  will 
become  ubiquitous.  Pricing  for  hand¬ 
helds  b  dropping,  and  even  more 
nifty  devices  are  on  the  horizon, 
which  means  adjustments  in  mobile 
policies  and  security  and  in  commu¬ 
nications  infrastructures. 

I'm  out  of  space,  and  I’ve  barely 
scratched  the  surface.  No  matter 
what's  on  your  list,  there’s  going  to  be 
plenty  of  action  and  fireworks  to  keep 
even  the  sleepiest  of  FT  ^K>ps  on  the 
alert  in  2003. 1 


PIMM  FOX 

Don’t  Leave 
OS  Choice  to 
Developers 

The  pain  in  my  head 
isn’t  from  a  wild  New 
Year’s,  but  from  the 
torrent  of  e-mails  I’ve  been 
reading  from  eager  and  enthu¬ 
siastic  Linux  fans  responding 
to  a  recent  column  [Quicklink  3S071]. 
Indeed,  at  the  risk  of  igniting  more 
claims  of  my  alleged  Microsoft  bias 
and  ray  personal  stupidity.  I  think  it 
fair  to  respond  to  some  of  the  genera! 
protests. 

First.  I  believe  IT  managers  should 
dictate  the  operating  system  of  choice 
for  an  organization,  not  developers, 
who  overwhelmif^ty 
wrote  to  me  about 
the  virtues  of  Linux. 

If  your  company 
wants  to  run  Micro¬ 
soft  Access  or  Office 
2000  instead  of  Star- 
Ofrice,  then  your 
operating  system 
choice  is  goii^  to  be 
made  for  you  without 
regard  to  TCO  or  the 
technical  advantages 
of  Linux. 

Second,  perhaps  I  didn't  make  It 
clear:  If  you  want  to  run  something 
generic,  such  as  a  Web  server  farm, 
and  you're  not  dependent  on  an  NT 
domain,  go  ahe.id  and  run  Apache  on 
Linux.  It's  fairly  cheap,  and  yes,  as 
dozens  of  you  told  me.  it’s  stable. 

But  what  if  you  want  to  run  a  Web 
site  programming  environment  like 
ColdFusion?  It  runs  only  in  certain  en¬ 
vironments.  and  I  have  yet  to  see  one 
in  Linux  (though  I’m  willing  to  learn). 

What  I  did  learn  from  all  the  e-mails 
is  that  Linux  has  become  an  emotional 
touchstone  for  developers.  And  that. 
I'm  afraid,  doesn't  wash. 

Choosing  an  operating  sy'stem 
shouldn’t  depend  on  developer  prefer¬ 
ence,  but  on  what  the  organization 
needs  to  da  Sure,  a  developer  may 
choose  Linux  with  4  million  lines  of 
code  vs.  .Net  with  30  million,  but  devel¬ 
opers  get  paid  to  develop  based  on  end- 
user  needs.  Tlie  mission  determines 
the  tools,  not  the  other  way  around. 

People  have  derided  Cobol,  IBM's 
procedural  language,  since  the  1960s. 
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It's  been  called  the  most  verbose  and 
inelegant  of  computer  languages,  and 
yet  there  are  more  lines  of  Cobol 
pumping  out  paychecks  than  anything 
else.  So  despite  its  CoboMike  bulk  and 
clumsiness,  Windows’  ubiquity  and 
usehilness  make  it  vital  if  you're  trying 
to  make  a  deadline  using  PageMaker 
or  Photoshop:  they  don’t  run  on  Linux. 

Finally,  one  e-mail  blasted  me  by 
saying  that  scientists  at  the  Fermi  Na¬ 
tional  Accelerator  Laboratory  use  Lin¬ 
ux,  from  the  desktop  to  supercomput¬ 
ers.  That  makes  sense  —  they’re  high¬ 
ly  technical  professionals,  ntost  of 
whom  can  write  their  own  programs 
and  have  experience  with  Unix.  Mak¬ 
ing  them  switch  to  Windows  wouldn’t 
make  sense.  What  1  tried  to  stress  was 
that  there  are  no  general  rules  for 
Linux  TCO.  Rather,  you’ve  got  to  do 
your  own  homework,  without  getting 
worked  up  into  a  fanatical  froth,  t 

DAVID  MOSCHELLA 

‘Utility’ 
Model  Needs 
Better  Focus 

Recently,  there  has 
been  a  great  deal  of 
talk  about  the  viability 
of  the  “utility  model,"  the  idea 
that  information,  just  like  wa¬ 
ter,  gas,  electricity  and  phone 
service,  should  be  provided 
on  demand  via  some  sort  of  largely 
transparent  conduit  It's  an  important 
concept  and  already  a  powerful  IT  in¬ 
dustry  trend,  but  I  suspect  Pm  not  the 
only  one  perplexed  by  the  odd  discon¬ 
nect  between  rhetoric  and  reality. 

Pan  of  the  problem  is  the  word  utili¬ 
ty  itself.  Last  I  checked,  most  utility 
companies  were  still  quasi-monopolies  | 
known  for  plodding,  if  generally  reli¬ 
able,  service.  Despite  recent  attempts 
at  deregulation,  it  would  be  hard  to 
think  of  a  less  innovative  aiKl  dynamic 
pan  of  the  U.S.  economy.  It’s  telling 
that  the  broadcast  business,  which  em¬ 
ploys  a  similar  automated  delivery 
model,  never  refers  to  itself  in  this 
way.  Neither  should  the  IT  industry. 
Uriiiiy  has  all  the  wrong  connotations. 

What  we're  really  talking  about  is 
replacing  the  use  of  customer-man¬ 
aged  hardurare  and  software  products 
with  various  third-party  IT  services 
delivered  over  a  widely  shared  net¬ 
work.  typically  the  Internet. 


But  if  you  accept  this  def¬ 
inition.  then  it’s  clear  that 
many  of  us  moved  to  the 
utility  approach  a  long  time 
ago.  Certainly,  most  indi¬ 
viduals  (as  wet]  as  many 
businesses)  who  have  their 
own  Web  sites  prefer  to 
rely  on  Web  hosting  ser¬ 
vices,  where  you  pay  p>er 
megabyte  of  storage,  giga¬ 
byte  of  tralTic.  number  of 
e-mail  addresses  and  other 
usage-based  metrics. 

There's  not  much  doubt 
that  this  style  of  computing  will  be¬ 
come  increasingly  important  for  an 
ever-wider  range  of  applications. 

And  yet  IBM.  HP.  Sun  and  others 
that  talk  about  the  utility  model  rarely 
mention  consumer/smali  business 
Web  usage  (probably  because  they 
don’t  do  a  lot  of  business  in  the  low 
end  of  the  Web  hosting  market).  In¬ 
stead.  they  typically  focus  on  large 
corporations,  using  exotic  phrases 


virtualization.  They  do  this 
even  though  they  know 
perfectly  well  that  large  or¬ 
ganizations  will  likely  be 
the  last  segment  to  move 
wholeheartedly  tovk-ard  the 
services  model. 

This  disconnect  between 
the  real  market  and  the 
current  supplier  marketing 
focus  seems  likely  to  con¬ 
tinue.  The  reality  is  (hat 
the  appeal  of  services- 
based  computing  is  in¬ 
versely  proportional  to  the 
difficulty  of  the  task  at  hand.  This 
means  tlut  complex  and  frequently 
changing  business  processes  will  be 
the  hardest  IT  activities  to  pul  inside 
a  remote  black  box.  Aithou^  such 
work  can  always  be  outsourced,  the 
necessary  customization  doesn't  go 
aivay. 

More  fundamentally,  the  essence  of 
the  utility  model  is  the  provision  of 
Largely  homogeneous  services  on  a 


utility-led  industries  have  powerful 
economies  of  scale  and  arc  therefore 
often  viewed  as  natural  monopolies, 
the  computer  business  doesn't  work 
this  way.  Unlike  software  tools  and  ap¬ 
plications.  the  scale  economies  of 
computing  services  are  quite  limited, 
with  very  low  barriers  to  entry.  This  is 
why  the  Web  hosting  and  Internet  ser¬ 
vice  provider  businesses  remain  so 
fragmented. 

Consequently,  while  some  services 
consolidation  will  no  doubt  occur, 
we’ll  probably  never  sec  a  few  compa¬ 
nies  dominate  the  online  computing 
business.  In  the  end.  this  is  wdiy  the 
word  utility  is  so  misleading.  The  big 
hardware  suppliers  might  want  you  to 
think  that  only  they  can  provide  the 
powerful  services  infrastructure  the 
IT  industry  needs,  but  the  market  is 
already  proving  otherwise.  I 


WMfTQWOnNMM? 


5U^  as  grid  confuting  and  data  center  I  societywide  ba^.  Whereas  traditional 


k  MoreoofemebmdMuiQamvvBoto*e««Hs 
'  cahfWBMQAOif  MttMe 


READERS’  LEHERS 


TryKBngon 

S-IIOPnKl£Ynmarifas.enka 
aftkotoVigtlal  fights  and 
Wrongs."  he  taCabhXsgeafoes- 
tosanlalingvo^fieianto.Tiuo- 
kax.proksmmdutnlionoid» 
personal  tutmondepovoslegigxin. 
kBsugestas.  kekUvosoflansta- 
buxapengngxmen  Volapukaux 
lOmgono.  aux  eble  VCff-Japana. 

{Mr.  Petretoy  notes,  in  his  arbeie 
*Digital  Rights  and  Wtongs* 
[OukMjnk  34825].  that  the  CaUeX 
spacificaliori  wi  be  in  the  language 
Esperanto,  bi  that  case.  Miout 
2  mtton  peo(:Ne  woridwide  will  be 
abletot^llsuggestthatMicro- 
soft  instBad  should  pubteh  4  m 
Votapuk  or  Ningon.  or  perhaos 
VCR\tapanese.) 

DaridWoM 

Senior  sOiRwoic  ertgineer. 
Acton.  Mass.. 

cweo^)dwotffMsers.panix.com 


conceal  Is  presence.  What  ehorts 
were  expended  to  detemvie  who 
(M  das  and  why?  Simply  *b(novinQ 
rogue  tv’s  wlh^  a  folowHJp 
won’t  resoMe  the  problem.  Poboes 
andprooeduresmustbeestab- 
bshedtoaddresstheroguemoddi' 
catxm  of  the  networks  sid  to  edu¬ 
cate  the  user  conwnunty  ol  the 
concerns  such  imptementalxins 
raise.  These  poberes  need  teeth, 
and  (here  must  be  a  conseouence 
to  recMessly  or  intentiorially  placing 
Ihecorporabonatnsk. 
RJL''Bob”Tramonti 
Risk  management  cwisultaru. 
Dolomite  (Consulting,  North 
Vancouver,  British  Colianbia 


Get  to  the  Root 

SECURfryiiAiusER'Maihias 
Thurman’ may  feel  he  has 
reached  endgame  m  locating  Ns 
rogue  AP.  but  he  has  addressed 
only  a  sngle  outhraak  and  hasn't 
solred  the  cause  of  the  problem 

IDjddJtW  34509].  Someone  ob¬ 
viously  went  to  a  bit  of  trouble  ton- 
stall  (hat  AP  and  lo  thwi  somewhat 


Locking  Up  Servers 

TNEFMCWAU.BNOT.andnev- 
er  was.  anythng  but  a  perme- 
ler  safety  net  [QuicWjnk  34749], 
Rrewate  operate  at  Layers  3  and  4 
of  the  OSi  network  moM.  and  net¬ 
work  attacks  most  often  occtf  M 
LayBr7.Assuch.abre«Ml6de- 
sig^onlytoattenvtlohelpre- 
irdorce  a  secure  environment  by 
bhxkmg  types  of  network  irafbc 
that  the  servers  defiNMy  aren't 
hosting.  Security  must  be  buR  at 
the  server.  A  property  secured  net¬ 
work  would,  in  tact,  have  no  need 
for  a  liewal.  One  nagN  even  con¬ 
clude  that  by  enpfemenbno  a  fire- 


wal.  you  are  prowdng  I  Nise 
senseofsectfky.Topulllntay 
man's  tarriB,  the  liewal  would  be 
bke  hawng  a  bnck  wal  aroimd  a 
house,  ft  doesn't  ebminaie  the  need 
for  the  locks  on  the  doCKS  and  wi¬ 
dows,  but  oflfy  helps  to  deter  the 
entrance  of  (hose  who  haven't 
been  nvited.  assumng  they  «e  of 
good  natwe.  To  keep  the  bed  peo¬ 
ple  ouL  locks  and  alarms  must  sbl 
benstaled 
AnwandWeWi 
Information  security  o^Kvr, 
State  Street  IMS  West. 
Newport  Beach,  Calif. 
ormandwrfsh^ssnmsxom 


Security  Standard 

THCDec.WAimcuan 
Spnm's  guKlebnes  lor  vendors 
rdatng  to  the  sectfKy  ol  software 
products  (()udiLfik  35067)  bnefly 
memuns  a  Department  of  Defense 
dndive(Mino«Mlh(NssameB- 
sue.  TNs  deectwe  B  the  (Common 
Ditena  (CO  certlicabon  for  al  new 
nabonaf  sacutty  systems  Hemrewr. 
CCismuchmarethanaOOOdMec- 
hveasitsnowrecottoiwfbyfe 
nabons.  and  more  than  20  labs 
across  the  world  can  certily  that 
products  are  CC-compiant  In  other 
words,  a  gtobaf  standard  relBting  to 
computer  seaxty  B  emerong  that 
can  serve  both  goremment  and 


confnetaalenlerpnsa5.ee  In  the 
US  reptacestoeNSA'soldOiange 
Book  program,  which  WBS  fraught 
with  prablenB  and  lacked  ntema- 
bonal  acceptance  Users  want  (and 
desenre)  some  type  of  guarantae 
that  the  software  toots  they  use 
donl  have  any  back  doors  and  are 
produced  and  mamtamad  to  the 
highest  standards 
ITS  my  baket  that  more  compa¬ 
nies  bke  Spml  w4  start  demandino 
that  the  security  products  they  use 
hare  the  CC  certikcafion.  Can  you 
magine  any  maior  compatry  not 
uifig  UL-ceridied  efectncal  prod¬ 
ucts?  Why  shoufdn'l  software  se¬ 
curity  products  undergo  svnilar 
scrutto)/? 

JofmOeyfe 
Safes  director, 

STAT  pftNiucr  (rne.  Norris 
Corp.,  Mofbourne.  Fla 

COMniTERWORU)  wefcomes 
commants  from  Its  readers.  Letters 
wi  be  edNed  for  brewly  and  efanty. 
They  should  be  addressed  to  Letfars. 
Cornputerwortd.  PC  Bor  9171. 500 
Oto  Corfwclicut  PMh.  Frirnnt^wii 
Mass  01701.  Fax  (506)879-4843 
E-mat  tePatagcumputerworklcom. 
Indude  an  address  and  phone  num¬ 
ber  tor  anmadHte  venbeabon. 
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No  Rest  in  2003 


«  ANUARY  IS  THE  MONDAY  OF  THE  YEAR. 

I  The  big-sigh,  gotta-gct-hack-to-it,  foot-drag- 
I  ging  mentality  permeates  everything.  It's  e.x- 
I  cessively  gray  and  filled  with  humorless  re- 
I  solve.  Even  so,  a  spanking  new  year  is  still 
^  cause  for  hope  and  excitement. 

You  might  think  that  the  continued  theme  of  IT 
making  do  with  less  will  ensure  a  low-key,  running- 


m-platv  kind  ot  i’\i‘-UTU'v. 

In  i'act.  a  lot  is  under  \va> 
that  will  need  aeiion  tV\*m 
ri.  Mol  spois  inviude  the 
Uillimin}!; 

The  transformation  of  some 
bkie*chip  fT  providers.  As  a 
recent  f<u.virjexs  Utrfc 
headline  put  it.  •■The  new 
MI*  —  how’s  it  d«>injj‘r" 

Sure,  pi’slmerfier. 

Hcwlcit'l’ackard  (TO 
Carlv  Fiorina  has  man¬ 
aged  to  shed  <  \»mpavi’s 
Michael  Capellas.  cut 
IX.OOO  people  and  push  up 
revenue.  Several  analysts  rewarded 
the  ettmpany  last  week  by  raising 
their  20tK^  forecasts. 

But  being  the  queen  of  printers 
won  t  take  Fiorina  %ery  far.  She  needs 
ti>  reignile  «*verall  sales  growth,  bol¬ 
ster  a  sagging  enterprise  computing 
operation,  fend  off  noli,  meld  tw  o 
huge  c«»mpanics,  keep  customers  hap¬ 
py  and  make  more  money. 

IBM.  rncanu  hile.  under  its  new 
CLl).  is  pushing  yet  another  all  - 
encompassing  now  coneept  —  '‘auto¬ 
nomic  computing"  —  and  has  bought 
or  is  teaming  up  with  all  si»rts  of  new 
partners,  from  Rational  Software  to 
.AIM. 

1110  paths  MI'  and  IBM  take,  and 
the  sueeess  they  find,  w  ill  affect  mo.st 
Fortune  l.t>l)0  IT  shops  in  one  form  or 
anothsT. 

Balancing  security  neects  with  competing 
Bsues.  Ironicaltv'.  the  first  casualties 
i)f  the  war  on  lern*rLsm  are  likely  to 
be  civil  rights  and  priv.icy.  But  it  w«m‘t 
stop  there.  The  government  will  de¬ 
mand  tltai  reluctant  corporations 
play  ball  on  issues  such  as  prompt 
and  full  dischisurc  of  enterprise 
break-in.s.  Can  customer  and  eorpo- 


Vila 

CMipufanmdVidiloi  at 
large.  ttaucanconlKi 
her  at 


rate  data  be'  protected? 

FI  pros  will  have  to 
walk  a  tine  line  to  make 
sure  that  patches  don't  in¬ 
terfere  with  Ollier  .ippliea- 
lions.  that  users  Iia\e  suf¬ 
ficiently  quick  data  access 
and  that  key  internal  in- 
ftirnution  isn't  handed 
over  to  outside  companies 
in  the  name  of  increased 
security 

We‘re  from  Ihe  govemmenl. 
and  we're  ktoking  to  regulate. 
****■  "Monger.  Will  Robinson!" 

rhe  feds  and  Capitol  Mill 
are  nosing  around  big-time  in  IT's 
backyard.  Internet  laves,  incclleetual 
property,  privacy  safeguards,  e-mail 
arehivtng  procedures,  cybcrcrime  re¬ 
porting.  security  certifications,  data 
prouviion  and  more  are  under  debate 
at  various  levels  in  Washington.  And 


actual  legislation  is  looking  likely.  Al¬ 
ready.  we're  seeing  in  some  stales  the 
institution  of ‘‘d»*-not-call"  lists, 
stymieing  telemarketers.  It's  worth 
keeping  an  ear  to  the  ground  and 
thinking  ahe.id  to  how  any  legislation 
that  passes  will  affeet  your  ctimpany. 

Vou've  gol  mail  -  way  too  much  of  it.  A 
new  report  from  Ferris  Research 
claims  that  spam  accounts  for  I5"i'  to 
20'‘i>  of  what's  in  the  corporate  niail- 
bo.\  and  will  cost  U.S.  citmpanies 
more  than  SIO  billion  this  year.  There 
are  existing  and  pending  regulations 
regarding  e-mail  archiving.  Instant 
mevsaging  services  and  usage  have 
exploded.  Messaging  issues  must  be 
dealt  with  in  20().t. 

Little  IT;  wireless  nebworks,  the  prolifera¬ 
tion  of  handhelds  and  the  arrival  of  even  more 
small,  mobile  devices.  As  equipment 
makers  insert  Wi-Fi  into  mobile  de¬ 
vices  and  coalitions  form  to  create 
Wi-Fi  networks,  the  technology  will 
become  ubiquitous.  Pricing  for  hand¬ 
helds  is  dropping,  and  even  more 
nifty  devices  are  i>n  the  hori/on. 
which  means  adjustments  in  mobile 
policies  and  security  and  in  commu¬ 
nications  infrastructures. 

Tm  out  «if  spaee.  and  I've  barely 
scratched  the  surface.  N^*  matter 
what's  on  your  !i.st,  there's  going  n>  K* 
plenty  of  action  and  fireworks  to  keep 
even  the  sleepiest  of  IT  shops  on  the 
alert  in  2(K).T  I 


IMM.M  FOX 

Don’t  Leave 
OS  Choice  to 
Developers 

Thk  pain  in  my  hhao 
isn't  from  a  wild  New 
Year’s,  hut  from  the 
torrent  of  e-mails  I've  been 
reading  from  eager  and  enthu- 
.sia.stie  Linux  fans  responding 

in  a  recent  cidumn  iQuickFink  .^.‘•t»7l|. 
Indeed,  at  the  risk  of  igniting  more 
claims  of  my  alleged  Microsoft  bias 
and  my  personal  stupidity,  I  think  it 
fair  to  respond  lo  some  of  the  general 
pr<*tests. 

First.  1  believe  I'l'  managers  should 
dictate  the  operating  system  of  choice 
for  an  organization,  not  developers, 
who  overw  helmingly 
wrote  to  me  about 
the  virtues  of  Linux. 

If  your  company 
wants  to  run  Micm- 
sofi  Access  i»r  Office 
20U<)  instead  4if  Star- 
Office.  then  youc 
operating  system 
choice  is  going  to  be 
made  for  you  without 
regard  toTCOor  .thc 
technical  advantages 
of  Linux. 

Second,  perhaps  I  didn't  make  it 
clear:  If  you  want  to  run  something 
generic,  such  as  a  Web  .server  farm, 
and  you'n*  not  dependent  on  an  NT 
domain,  go  ahead  and  run  Apache  on 
I-inu.x.  It’s  fairly  cheap,  and  yes.  as 
dozens  of  you  told  me.  it's  stable. 

But  what  if  you  want  to  run  j  W'eb 
site  programming  environment  like 
(aildFusion?  It  runs  only  in  certain  en¬ 
vironments.  and  1  have  yet  to  see  one 
in  Linux  (though  I'm  willing  to  learn). 

Whal  I  did  learn  from  all  the  e-mails 
is  th,ii  Linux  has  become  an  emotional 
touchstone  fur  developers.  And  that. 
I'm  afraid,  dttesn't  wash. 

Choosing  an  openiiing  system 
shimldn't  depend  on  deveU>pcr  prefer¬ 
ence.  but  on  what  the  organization 
needs  lo  do.  Sure,  a  developer  may 
chiHise  Linu.x  with  4  million  lines  of 
code  vs.  .Net  with  .TO  million,  but  devel¬ 
opers  get  paid  to  develop  based  on  end- 
user  needs,  nte  mission  determines 
the  tiK»ls.  not  the  other  way  anmnd. 

IVople  have  derided  Cobol,  IBM’s 
procedural  language,  since  the  l‘>60s. 


nMiifaMkifrNlaiK« 

write!  Hi  Sen  Frencieco. 
CoRlacf  Mnat 


w  computetwolid  com 


It's  hccn  called  the  most  verbose  and 
inelejiani  of  computer  lan^uatjes,  and 
yet  there  are  more  lines  ofCobol 
pumpinj;  out  paychecks  than  anythiny 
else.  So  despite  its  f  a>bol-like  bulk  and 
clumsiness.  Windows'  ubiquity  and 
usefulness  make  it  vital  if  yem're  iryinjt 
t»>  make  a  deadline  usin^:  I’ajieMaker 
or  Photoshop:  they  don't  run  «»n  l.inux. 

Finally,  one  e-mail  blasted  me  by 
sayinjt  that  scientists  at  the  Fermi  Na- 
t«*nal  Accelerator  Laboratory  use  Lin¬ 
ux.  from  the  desktop  to  supercomput¬ 
ers.  That  makes  sense  —  they're  hijth- 
ly  technical  professionals,  most  of 
whom  can  write  their  own  pr«»tjr3m-s 
and  have  experience  with  Unix.  Mak¬ 
ing  them  .switch  to  Windows  wimldn'f 
make  sense.  What  1  tried  to  stress  was 
that  there  are  no  general  rules  for 
Linux  TCI).  Rather,  you've  got  U>  do 
your  own  homework,  without  getting 
worked  up  into  a  fanatical  froth-  > 

DAVin  M()sc:in.i.i  A 

‘Utility’ 
Model  Needs 
Better  Focus 

RECENTtY.  there  has 
been  a  great  deal  of 
talk  about  the  viability 
of  the  “utility  model.”  the  idea 
that  information,  just  like  wa¬ 
ter.  gas,  electricity  and  phone 
service,  should  be  provided 
on  demand  via  Siimc  sort  of  largely 
transparent  conduit.  It's  an  important 
concept  and  already  a  powerful  IT  in¬ 
dustry  trend,  but  I  suspect  I'm  not  the 
only  one  perplexed  by  the  odd  disct»n- 
nect  between  rhetoric  and  realtry. 

Part  of  the  problem  i.s  the  word  ufi/i- 
fy  itself.  Last  I  checked,  most  utility 
companies  were  still  quasi-mononolles 
known  for  pliniding.  if  generally  reli¬ 
able.  service.  Despite  recent  attempts 
at  den'gukiiion.  it  would  be  hard  to 
think  of  a  less  innovative  and  dynamic 
part  of  the  U.S.  economy.  It's  telling 
that  the  brividcast  business,  which  em¬ 
ploys  a  similar  autt>maicd  delivery 
model,  never  refers  to  itself  in  this 
way.  Neither  should  the  IT  industry. 
Ufiiify  ha.s  all  the  wrong  conmqaiitms. 

What  we*a*  really  talking  about  is 
replacing  the  use  of  customer-man¬ 
aged  hardware  and  software  products 
with  various  third-party  IT  services 
delivered  over  a  widely  shared  net¬ 
work.  typically  the  Internet. 


Hut  if  you  accept  this  def¬ 
inition.  then  it's  clear  that 
many  of  us  m<vved  to  the 
utility  appr«>ach  .i  long  time 
ago.  i:ertainly.  most  indi¬ 
viduals  (as  well  as  many 
businesses!  who  have  their 
own  Web  sites  prefer  to 
rely  t>n  Web  h»>sting  ser¬ 
vices.  where  you  pay  per 
megabyte  of  storage.  gig.i- 
byte  of  trafllc.  number  of 
e-mail  addresses  and  other 
usage-based  metrics. 

There's  not  much  doubt 
that  this  style  of  ct'mputing  will  bc’ 
Ci>me  increasingly  important  for  an 
ever-wider  range  of  applications. 

.And  yet  IBM.  HP.  Sun  and  others 
that  talk  about  the  utility  model  rarely 
mention  consumcr/small  business 
Web  usage  (probably  Kreausc  they 
don’t  do  a  lot  of  business  in  the  low- 
end  ofthe  Web  hosting  market).  In¬ 
stead.  they  typically  fix-us  on  largo 
corporations,  using  e.xotic  phmscs 
such  asgridcompufifjg  and  Jofu  center 


IS  an  author  m<1  inde- 
pondent  consuliant. 
Conttd  iMn  <1 


virfuulfjufion.  Lhcy  d»i  this 
evon  though  they  knovs 
pi'rfoctly  well  that  lirge  or 
ganir-itiiins  will  likely  be 
the  last  segment  to  move 
wholcho.trlodly  umarJ  the 
ser\  ices  nu*ds‘l. 

I'his  disconnect  between 
the  real  market  and  the 
current  supplier  marketing 
loc-us  soctiis  likely  to  i’on- 
tmuo-  ITie  rcalitv  is  that 
tile  appeal  ot  ssTVices- 
based  computing  is  in 
verscly  proportional  u»  the 
dilTicuilv  of  the  task  at  hand.  ITiis 
ms’.ans  that  curaple.v  and  frequcnilv 
changing  business  processi-s  will  be 
the  hardcnii  IT  activities  Ui  put  inside 
a  rciTutie  black  K>x-  Although  such 
work  can  always  he  outsourced,  the 
necessary  cusiomi/ation  dtH-sn't  go 
away. 

More  fundamentally,  the  essence  ol 
the  utility  model  is  the  provision  of 
largely  honntgenoous  services  on  a 
scrcieiywide  basis.  Whereas  traditional 


utility-led  industries  ha\»  powerlul 
eCumimics  of  scmIc  .md  arc  thercior,- 
‘4»ficn  viewed  .is  fuitural  moru'pohes, 
the  ciimputer  business  JiH-sii't  work 
this  wav  Unlike  soltw.iro  tools  and  ap 
plic.itioiis.  the  scale  economies  oi 
c<tntpiiting  sef\ices  are  quite  limited, 
wiihvery  low  b.irriers  lo  entry  Lhisi- 
vvh\  tlk  Web  hiwvtiitg  and  Internet  ser¬ 
vice  provider  busmesses  remain  m* 
fragmenieJ- 

t  ortsc-quentlv.  while  some  service' 
consolidation  will  no  doubt  iK\uf. 
we'll  probahlv  never  see  a  few  comp.i 
nies  dominate  the  online  computing 
business.  In  the  end.  this  is  whv  the 
I  word  utility  is  so  misleading,  llie  big 
I  hardware  suppliers  might  want  vou  to 
I  think  that  only  they  can  provide  the 
powerful  sers’ices  infr.istnieture  the 
I  IT  industry  needs,  but  the  market  is 
.already  proving  otherw  ise  P 


WANT  OUR  OPINION? 


I  Morr  idAmsCi  and  vnh:  K  •yclwe’.  piiveir 
'  uAmis  an*  ID  CM  Mti  vte 


Try  Klingon 

S-W  nnSLEYrimdfkjs.  enli3 
artikofo  Vigifal  Rights  and 
Wrongs"  ke  la  CaUeX  spealo  es- 
tosen  la  lingvo  Esperanto  Tmo- 
kaze.  ptoksimume  du  mihonr^  da 
personal  tutmnde  povos  legi  gm 
Misugeslas.  keMikrosofiansia- 
tAix  apengu  gxin  en  Volapuk  aux 
Kbngono.  aux  eble  VOf-Japana. 

(Mr.  Paireley  notes,  m  his  articte 
*Digilal  Rights  and  Wrongs" 
[OuickLink  34825].  that  the  CableX 
specilication  wiU  be  m  the  language 
Esperanto  In  that  case,  about 
2  miHion  people  worldwide  will  be 
able  lo  read  it.  I  suggest  that  Micro- 
soil  instead  should  publish  it  m 
Votapuk  or  Khngon.  or  perhaps 
VCR- Japanese ) 

David  Worn 

.Senior  .sfi!ftwaa‘  engiravr. 
Acton.  Moss.. 

cwvt*.a‘dwolff.usvrs.panix.otm 


conceal  its  presence  What  ehorts 
were  enpemled  lo  determine  who 
did  this  and  why^  Simply  removing 
rogue  APs  without  a  loilow  up 
won't  resolve  the  ptoWem  Pokies 
and  procedures  must  be  estab¬ 
lished  lo  address  the  rogue  moditi- 
cation  of  the  networks  and  lo  edu¬ 
cate  the  usei  commumiyoi  the 
concerns  such  implemenlations 
raise  These  policies  need  teeth, 
and  there  must  be  a  consequence 
to  recklessly  oi  mtentionanv  ptaung 
(he  corporation  alnsk 
R  Jl.  ’^ob”  TrenHMtti 
Risk  monopement  ennsuitunt. 
/Jolomite  (.onsuitirig.  North 
V’urKtiuwr.  Briti.'Ji  Columbta 


wall,  you  are  ptovndDgata^ 
sense  oi  secunty  To  pul  tl  in  lay 
man  s  terms,  the  iirewali  woiAl  be 
like  having  a  tmek  waN  around  a 
house  It  doesn't  okmmaie  the  need 
lot  the  locks  on  the  doors  and  win¬ 
dows.  but  only  iteips  lo  dele*  the 
entrance  ot  those  who  haven't 
been  invited,  assummg  they  aicoi 
goodnature  To  keep  the  bad  peo¬ 
ple  out.  locks  and  ataims  mu^  stifl 
bcDstafled 
Armand  Welsh 
Intonnatii<n  uvuntv  ofliciT 
.Stale  -Smvt  tMS  Wi-u. 
Newp«irf  Kwh.  Cjilif.. 
ormand.wftsh  a  »i'imx.i'«im 


Get  to  the  Root 

SECURITY  MANAGER  "Mattnas 
Thurman'  may  teel  he  has 
reached  endgame  m  locating  tvs 
rogue  AP.  but  he  has  addressed 
only  a  single  outbreak  and  hasn't 
solved  the  cause  ot  the  problem 
(OuicMonk  34509]  Someone  ob¬ 
viously  went  to  a  bit  ot  trouble  to  in¬ 
stall  that  AP  and  to  then  somewhat 


Locking  Up  Servers 

The  firewall  is  not.  and  nev¬ 
er  was.  anything  but  a  penme- 
ler  safety  net  [OuickLink  3^49] 
Firewails  operate  at  Layers3  and  4 
ol  the  OSI  network  model,  and  net¬ 
work  attacks  most  often  occur  at 
Layei7  As  such,  a  firewalls  de¬ 
signed  onty  lo  atlemNit  lo  help  re¬ 
inforce  a  secure  environment  by 
btockmg  types  ol  netwerk  Hafhc 
that  the  servers  detintety  aren't 
hostmg  Security  must  be  bwtt  at 
the  server  Apropertysecurednei- 
work  would,  m  lad.  have  no  need 
lotatirewaN  One  might  oven  con¬ 
clude  that  by  tmplemenling  a  be- 


Security  Standard 

THEOEC.tGARDClEon 
Sptiiil's  gutdelinQs  lor  vendors 
retahng  to  the  seciNtty  of  sohweve 
produclsIOuickLmk  35067]  bnelly 
mentions  a  Department  ol  Oeletise 
ditective  dealing  «wih  itKs  s^  6 
sue.  This  directive  is  Ihe  Common 
Olena  (CC)  ceriificaiion  foe  ^  new 
naiionatsecwily  systems  However 
(X  s  much  more  than  a  DOO  dvec 
live,  as  it  1$  now  reoognued  by  15 
nations,  and  more  than  20  labs 
aaoss  the  world  can  cerUy  that 
products  are  CC-comphant  toother 
words  a  gioGal  standard  relating  1(1 
computer  secunty  B  emetgng  that 
can  serve  both  government  and 


commercial  entemnses.  CC  m  the 
US  replaces  the  MSA's  old  Orangt' 
Bookpiogram  whchwaslrauobt 
with  problems  and  latiied  miana- 
Ironataccetilanu;  Users  want  (and 
deserve)  some  type  ol  guarantee 
that  (he  soKwere  toots  they  use 
donl  have  any  back  doois  artf  are 
produced  and  marrrtaiited  to  the 
tw/iesl  standvds 
It  5  my  bekel  that  more  compa¬ 
nds  hku  Spnnt  will  siait  demandviu 
that  the  seov  ity  products  Itvey  use 
hawtheOCcervticalion  Can  you 
OTiagine  any  mayor  company  not 
using  UL-certiled  etedrcal  prod 
uds*^  Why  shouldn  I  software  se- 
orty  produds  undergo  surnlar 

SdUlIVy? 

John  Doyle 

.Vidk**  JirvvKrr. 

.S'7A7'A*ruJt«-r  /iof.  Hums 
r.urp,  .\fflNiunJi'  Ha 

COMPUTERWORLD  nefcomes 
comments  from  i(s  readers  Ltstlers 
writ  be  edeiKl  lor  brevity  and  danty 
They  should  be  addressed  to  Lehcis 
Compulerworfd.  PO  fio  9171. 500 
Old  Cotviechcul  Path.  Ftanvngham 
Mass  017(}1  Fax  (506)879  4843 
E-maiL  ietlers^compulcrwortdcom 
Include  an  address  and  phone  rnri- 
bcf  lor  immeckate  venheahon 
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,  ROBUST  OBJECT  DATABAS 

;e 

^  HIGH  PERFORMANCE  SQL 

1 

^  MULTIDIMENSIONALACCESS 

'Our  post-relational  database? 
New  dimensions  of  scalability. 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cache,  the  post-relational  database. 

What  makes  Cache  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cach^-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cach^ 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cach^  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the  largest 
hospitals.  Cach^  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  —  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  million  users  in  .  .  «  . 

88  countries.  Cach^  is  *  .  '  _  _  ^ 

available  for  Windows, 

OpenVMS,  Linux  and 
major  UNIX  platforms. 


^  CACHE 

Make  Applieationt  Faster 


Oownbod  a  pify-funcOonol  version  of  Cache  or  request  it  on  CD  for  free  at  mrw.lnterSYStems.comlbost-relational 
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CASE  STUDY 

Dallas  Answers  the  Call 

The  city  deploys  an  integrated  call 
system  to  become  more  responsive 
to  citizens  and  to  track  perfor¬ 
mance.  Other  municipalities  and 
event-driven  businesses  may  follow 
suit.  Pige  28 


FUTURE  WATCH 
Pervasive  Computing 
OetsOrgMized 

For  pervasive  computing  to  reach  its 
potential,  numerous  devices  and  systems 
will  have  to  interoperate.  Vince  Stanford 
(left)  is  among  those  woiidng  on  a  needed 
data-flow  standard  at  NIST.  PRet  32 


SECURITY  MANABER'S  JOURNAL 

Spam  Issue  Viewed 
As  IT  Security  Failure 

After  a  surge  in  spam  puts  Vince 
'Hiesday  on  the  defensive  with 
users,  a  new  service  cleans  up  tbe 
problem  and  saves  his  reputation. 

PbDa38 


s  CUSTOMER  relation¬ 
ship  management 
(CRM)  technolc^  has 
matured,  users  have 
i  begun  looking  for  big- 
kger  payoffe  by  enabling 
better  integration  with  other  enterprise 
applications.  For  instance,  companies 
that  want  to  let  their  customers  view 
the  status  of  their  orders  in  real  time 
might  need  to  connect  their  call  center 
or  e-commerce  applications  to  supply 
chain  or  manufacturing  systems. 

“The  notion  that  CRM  is  largely  a 
stand-alone  sales  force  automation 
function  is  no  longer  valid,”  says 
Joshua  Greenbaum,  an  analyst  at  En¬ 
terprise  Applications  Consulting  in 
Daly  City.  Calif.  “(Users]  realize  that 
CRM  is  central  to  many  supply  chain 
functions,  such  as  order  tracking  and 


management,  logistics  and  service.” 

But  making  those  applications  talk 
with  one  another  isn’t  easy.  One  way  to 
solve  this  problem  is  to  m^rate  to  an 
integrated  enterprise  application  inte¬ 
gration  (EAI)  suite  from  vendors  such 
as  SAP  AG.  Oracle  (^rp.  or  PeopleSoft 
Inc.  These  products  have  prebuilt  inte¬ 
gration  hooks  that  ease  application- 
sharing  headaches.  They  also  include 
tool  kits  or  adapters  to  hook  the  suite 
applications  to  other  vendors’  mod¬ 
ules.  By  using  tbe  suite  vendors’  tool 
sets  and  prepackaged  processes,  you 
can  cut  integration  costs  involved  with 
custom  coding  and  consulting.  But 
even  if  you’re  wilUi^  to  invest  in  such 
a  migration  effort,  individual  suite  ap¬ 
plications  might  not  always  have  the 
features  you  require. 

Users  who  go  the  best-of-breed 


Vendors  are  pushing  both  the 
use  of  enterprise  suites  and  new 
integration  tools  as  ways  to  mesh 
CRM  with  other  enterprise 
applications.  By  Marc  L.  Songini 

CRM 


HSUP 


Vendor  i^proaches  to 
CRM  Integration 

.  Oracle  Corp.  . 

Oracle  kMs  tfn  value  of  Is  MtgrMid  buaMs  iHilcalon  auli.  but  X  ate 
iiitaoralion  wift  coneMttas' sraducb  loiiig  prebu*  tafirionaMlon  adqi^ 
aciapiBn  Aie  (Mi  to  be  eipcieHl  lor  UBB  wiVi  itondad  Mb  lenfeBe  ledeiotogtoe 
su(iiaXMLStoiptoOfaiadAcceKftDtocol(S{tf^nliMMraifDlBoav«yO»' 
aojptonandlntogBiietvBulTOreitolalitolaageirtitoieelBdtoiuellMei^ 
venib  a«h  ito  pitidicto' eeys  Slew  Bonaita  ail  araliet  ai  Meto  Broup  bto.  to  Stom- 
fenlCom. 


.  PeoplaSellinc.  . 

tapliSeAGMiiibfllfiraibyMipibeiailrtWaMMiatoif^ 
AfvCbftoMdbMvtobfttiPebr,dMaaMfioMa«rfparMiiMilBWMloob 
The  vwtar  Im  a ‘me  todnatoaT  VPtoiA,  iriitov  «)  b  mM  «  Aa 
gfwidbii0toBrifttob6nidb.1tettoatoaviAo0la»«toiiertbl(IC- 
fiwaJAb  idiiBw  iiinai,i»i<>. 

.  SAPAO  . 

SW  Ma  a  Mv  iKk  l9  oMilng  h  aM  liiglcriiBi  MMf  pndya  aid  |»W  to 
tacSMCWiMitttgninratBaiaiaSW’WMiaHitalinaaiar.inySaP 
Pvtd  end  maaea^no  toshenpa  tadenlooiaB  to  panrti  uaen  to  mp  CM 
diKumeifctogafwdtMatoaaartouawaiitoiaboSOhPaitoWCtoeieiBlDgtoa. 

.  ^nhnllnn  . . 

wteiaa»aw«ai«iiei»iij»)rireaeiiieiriiaiM^aiiiii«i 
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Continued  from  page2J 
mute  and  use  applications  from  com¬ 
panies  such  as  San  Mateo.  Calif.-based 
Sicbcl  Systems  Inc.  can  use  built-in 
intcitrarion  capabilities,  says  Erin 
Kinikin.  an  analyst  at  Cambridge. 
Mass.-based  Giga  Information  Group 
Inc.  For  instance,  Siehel  is  rolling  out 
its  Web  .ser>-ices-based  Universal  Ap¬ 
plication  Network  framework  to  con-  ' 
nect  applicaiitms  and  allow  business- 
prtKcss  integration. 

Other  CRM  software  vendors,  in¬ 
cluding  Menlo  Park.  Calif. -based  Kana 
Software  Inc..  Cupertino.  Caiif.-based 
Chordianl  Software  Inc.  and  Cam¬ 
bridge.  Mass.-based  PegaSystems  Inc., 
also  offer  products  that  enable  integra¬ 
tion  at  the  business-pn*cess  level. 

“These  vendors  tend  to  do  best  at 
customer-facing  or  partner-facing  ap¬ 
plications.  where  there's  lots  of  inte¬ 
gration  required  and  processes  change 
frequently."  Kinikin  says.  I 

Suite  Connections 

Ottawa-based  Canada  I*ost  Corp.  to«>k 
the  suite  mule  after  dealing  v.  ith  the 
aggravation  of  linking  multiple  appli¬ 
cations.  “In  the  pre-Y2k  world  of  our 
systems  landscape,  we  had  best-of- 
breed  and  custom-developed  inter¬ 
faces  tying  it  together,  and  it  was  a  real 
mess,"  sa)-s  .Aaron  Nichols,  general 
manager  of  business  transformation  at 
Canada  Pt>st.  “It  was  tough  to  manage 
and  hard  to  make  changes." 

Integrating  disparate  applications 
was  possible,  but  it  was  complex  and 
expensive  because  the  software  was 
passing  information  related  to  orders, 
pricing  and  contracts,  he  says.  Because  ' 
of  (his  and  the  challenges  ofbusincs-s- 
process  re-cnginccring  and  change 
management  in  the  organization. 

Canada  Pitst  decided  to  install  SAP's 
CRM  and  enterprise  resource  pbnning 
(ERIM  modules. 

Using  Web  sen  ices.  Canada  Post  has 
also  connected  its  Web  site  to  the  SAP 
system  so  it  can  take  orders  and  con¬ 
nect  them  directly  to  the  ERP  system. 
The  mail  carrier  als<i  built  an  interface 
to  its  legacy  tracking  wftwarc  to  let 
cu.stomers  track  parcel  deliveries. 

When  Canada  Post  went  live  with 
SAP  CRM  2.0.  the  technology  was  im- 
matun.'.  Nichols  says.  And  there  were 
many  questions  to  sori  out.  such  a.s 
whether  the  master  customer  profiles 
should  reside  in  the  CRM  system  or 


the  R  system.  Nichols  plans  t<'  move 
to  Version  .^.0.  which  he  says  is  a  more 
mature  product  with  a  broader  range 
of  CRM  features. 

The  CRM  system  has  both  prcbuilt 
and  homegrown  interfaces.  The  con¬ 
nectors  between  the  SAP  CRM  and 
R;.^  applications  that  handle  w’i>rknow 
camc  out  of  the  box.  hut  they  required 
a  bit  of  tuning.  "We  had  to  spend  some 
time  understanding  them."  Nichols 
s.iys.  The  connectors  allow  call  center 
workers  to  access  a  customer’s  case 
history  from  the  back-end  systems  by 
entering  a  phone  number.  They  also 
allow'  the  system  to  route  individual 
cases  into  the  human  resources  system 
to  determine  whom  to  send  them  to 
for  resolution. 

Canada  Post’s  order-taking  system 
isn’t  an  SAP  product,  but  it  ties  into  the 
back-end  R  3  software  by  way  of  eGale 
EAl  software  from  Monrovia.  Calif.- 
based  SceBeyond  Technology  Corp. 

EGate  handles  all  data  going  in  and 
out  of  the  SAP  system.  Nichols  says 
business-process  designers  crafted 
each  interface  to  select  the  requisite 
data  that  needed  to  be  mapped  and 
passed  back  and  forth,  and  they  devel¬ 
oped  error-handling  routines.  Once  the 
designs  were  finalized,  they  were  giv¬ 
en  loan  integrau*r.  who  built,  tested 
and  deployed  the  architecture. 

Nichols  says  the  integration  pixiject 
has  resulted  in  a  consolidated  set  of 
systems  with  tightly  linked  business 
processes  and  a  common  view  for  all 
customers.  “Wc  eliminated  over  80 
legacy  systems  and  reduced  labi>r  costs 
by  eliminating  duplication  and  waste 
in  processes."  he  says. 

Siebel  in  the  Middle 

Suites  may  claim  ca.sicr  integration, 
but  lay  Gardner.  CIO  at  BMC  Software 
Inc.,  says  mixing  and  matching  differ¬ 
ent  CRM  and  ERP  applications  wasn't 
a  big  deal  There  is  definitely  value  to 
an  integrated  application,  but  I  don't 
think  I  have  to  have  |ail  applications! 
from  a  single  vendor,"  he  says.  Al¬ 
though  Gardner  says  he  wouldn't  want 
to  link  together  five  different  systems, 
two  front-  and  back-office  suites  are 
manageable,  he  says. 

BMC  recently  connected  its  Sicbcl 
sales  force  automation  system  to  its 
Oracle  financials  backbone  to  auto¬ 
mate  order  processing  on  the  Web. 

The  Housnin-based  maker  of  manage¬ 
ment  applications  has  also  connected  a 
Sicbcl  installation  to  its  call  system 
from  Vantive  Corp.  (now  part  of  Peo- 
plcSoft).  The  SiclH?i  s>'stcm  also  pulls 
information  from  a  document  manage¬ 
ment  system,  which  allows  support 


workers  to  view  images  of  customer 
contracts.  Information  sharing  among 
the  Web  team  and  (he  inside  sales,  di¬ 
rect  sales  and  support  staffs  has  gener¬ 
ated  a  faster  turnaround  on  potential 
sales  leads.  Gardner  says. 

BMC  initially  wn>te  its  own  custom 
interfaces  for  these  applications  but 
now  plans  to  use  EAI  software  from 
WebMethods  Inc.  in  Fairfax,  Va.,  to 
simplify  future  connectivity.  The  Web- 
Methods  system,  in  pilot  since  June, 
provides  more  extensive  coding  capa¬ 
bilities  than  BMC's  legacy  systems  al¬ 
low.  Gardner  says. 

For  instance,  it  enables  a  “publish 
and  subscribe"  model  that  lets  BMC 
connect  applications  that  need  to  share 
data  with  WebMethods  without  having 
to  write  separate  point-to-point  inter¬ 
faces  for  each  one.  BMC  also  plans  to 
configure  its  Siebel  application  to  gen¬ 
erate  XML  as  its  common  CRM  docu¬ 
ment  format,  so  that  the  WebMethods 


XML  adapter  can  parse  it.  BMC  will 
then  use  Web  services  to  establish  data 
sy  nchronization  between  applications. 
Gardner  says. 

Going  ((>rward,  both  suite  and  best- 
of-breed  CRM  vendors  point  to  their 
suppon  for  Web  services  as  the  glue 
that  will  hold  disparate  systems  to¬ 
gether.  But.  says  Giga’s  Kinikin.  "the  re¬ 
ality  is  that  Web  services  is  a  fivt^  to 
10-year  evolution,  not  a  magic  answer. 
We’re  at  the  very  beginning  of  a  new 
journey." 

And  even  after  Web  services  arc  es¬ 
tablished.  she  says.  IT  will  still  need  to 
incorporate  process  flows,  metadata 
and  semantics-based  standards  such  as 
electronic  data  interchange.  I 
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Developers  were  the  key  to  a  successful  iniegration 
protect  at  Interlink 
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Continued  from  page  23 
route  and  use  appUcatioos  from  com¬ 
panies  such  as  San  Mateo,  Calif. -based 
Siebel  Systems  Inc.  can  use  built-in 
integration  capabilities,  says  Erin 
Kinikin.  an  analyst  at  Cambridge, 
Mass.-based  Giga  Information  Group 
Inc.  instance.  Siebel  is  rolling  out 
hs  Web  services-based  Universal  Ap¬ 
plication  Network  framework  to  con¬ 
nect  applications  and  allow  business- 
process  integration. 

Other  CRM  software  vendors,  in¬ 
cluding  Menlo  Park,  Calif-based  Kana 
Software  Inc.,  Cupertiiva  Calif-based 
Chordiant  Software  Inc.  and  Cam¬ 
bridge,  Mass.-based  PegaSystems  Inc., 
also  offer  products  that  enable  integra¬ 
tion  at  the  business-process  level. 

These  vendors  tend  to  do  best  at 
customer-lacing  or  partner-lacing  ap- 
plicatiotts,  where  there's  lots  of  in  te- 
gration  required  and  processes  change 
frequentty,"  Kinikin  says. 

Suite  Connections 

Ottawa-based  Canada  Post  Corp.  took 
tike  suite  route  after  dealing  with  the 
aggravation  of  linking  multiple  appli¬ 
cations.  "In  the  pre-Y2k  world  of  our 
systems  landscape,  we  had  best-of- 
breed  and  custom-developed  inter¬ 
laces  tying  it  together,  and  it  was  a  real 
mess,”  says  Aaron  Nichols,  general 
manager  of  business  transformation  at 
Canada  Post.  ”Ii  was  tough  to  manage 
and  hard  to  make  changes.” 

Integratii^  disparate  applications 
was  possible,  but  it  was  complex  and 
expensive  because  the  softvrare  was 
passing  information  related  to  orders, 
pricing  and  contracts,  he  says.  Because 
of  this  and  the  challenges  of  business- 
process  re-engineering  and  change 
management  in  the  organization. 
Canada  Post  decided  to  install  SAP's 
CRM  and  enterprise  resource  planning 
(ERP)  modules. 

Using  Web  services.  Canada  Post  has 
also  connected  its  Web  site  to  the  SAP 
system  so  it  can  take  orders  and  con¬ 
nect  them  directly  to  the  ERP  system. 
The  mail  carrier  also  built  an  interlace 
to  its  legacy  tracking  software  to  let 
customers  track  parcel  deliveries. 

When  Canada  Post  went  live  with 
SAP  CRM  2Xi,  the  technology  was  im¬ 
mature.  Nichob  says.  And  there  were 
many  questions  to  sort  out  such  as 
wdkether  the  master  customer  profiles 
should  reside  in  the  CRM  system  or 


the  R/3  system.  Nichols  plans  to  move 
to  Version  3A  which  be  says  is  a  more 
mature  product  with  a  broader  range 
of  CRM  features. 

The  CRM  system  has  both  prehuilt 
and  homegrown  interfaces.  The  con¬ 
nectors  between  the  SAP  CRM  and 
R/3  applications  that  handle  workflow 
came  out  of  the  box  hut  they  required 
a  bit  of  tuning.  ”We  had  to  spend  some 
time  understanding  them,”  Nichols 
says.  The  connectors  allow  call  center 
workers  to  access  a  customer’s  case 
history  from  the  back-end  systems  by 
entering  a  phone  number.  They  also 
allow  the  system  to  route  individual 
cases  into  the  human  resources  system 
to  determine  whom  to  send  them  to 
for  resolutioru 

Canada  Post’s  order-taking  system 
isn't  an  SAP  product,  but  it  ties  into  the 
back-end  R/3  software  by  way  of  eGate 
EAI  software  from  Monrovia.  Calif- 
based  SeeBeyond  Technology  Corp. 

EGate  handies  all  data  going  in  and 
out  of  the  SAP  system.  Nichols  says 
business-process  designers  crafted 
each  interface  to  select  the  requisite 
data  that  needed  to  be  mapped  and 
passed  back  and  forth,  and  they  devel¬ 
oped  error-handling  routines.  Once  the 
designs  were  fmalized.  they  were  giv¬ 
en  to  an  integrator,  who  built,  tested 
and  deployed  the  architecture. 

Nichob  says  the  integration  project 
has  resulted  in  a  consolidated  set  of 
systems  with  t^tly  linked  business 
processes  and  a  common  view  for  all 
customers.  "We  eliminated  over  80 
legacy  systems  and  reduced  tabor  costs 
by  eliminating  duplication  and  waste 
in  processes.”  he  says. 

Siebel  in  the  Middle 

Suites  may  claim  easier  integration, 
but  lay  Gardner.  CIO  at  BMC  Software 
Inc.,  says  mixing  and  matching  differ¬ 
ent  CRM  and  ERP  applications  wasn't 
a  big  deaf  There  b  definitely  value  to 
an  integrated  application,  but  I  don't 
think  I  have  to  have  (all  applications) 
from  a  single  vendor.”  he  says.  Al¬ 
though  Gardner  says  he  wouldn't  want 
to  link  together  five  different  systems, 
two  front-  and  back-ofiice  suites  are 
manageable,  be  says. 

BMC  recently  connected  its  Siebel 
sales  force  automation  system  to  its 
Oracle  financiab  backbone  to  auto¬ 
mate  order  processing  on  the  Web. 

The  Houston-based  maker  of  manage¬ 
ment  applicatiims  has  also  connected  a 
Siebel  installation  to  its  call  system 
from  Vantive  Corp.  (now  part  of  Peo- 
pleSoft).  The  Siebel  system  also  pulb 
information  from  a  document  man^e- 
ment  system,  which  allows  support 


workers  to  view  images  of  customer 
contracts.  Information  sharing  among 
the  Web  team  and  the  inside  sales,  di¬ 
rect  sales  and  support  stafb  has  gener¬ 
ated  a  faster  turnaround  on  potential 
sales  leads,  Gardner  says. 

BMC  initially  wrote  its  ovm  custom 
interfaces  for  these  applications  but 
now  plans  to  use  EAI  software  from 
WebMetbods  Inc  in  Fairfax  Va.,  to 
simplify  future  connectivity.  The  Web- 
Methods  system,  in  pilot  since  June, 
provides  more  extensive  coding  capa¬ 
bilities  than  BMC's  legacy  systems  al¬ 
low,  Gardner  says. 

For  instance,  h  enables  a  "publish 
and  subscribe"  model  that  lets  BMC 
connect  applications  that  need  to  share 
data  with  WebMetbods  without  having 
to  write  separate  point-to-point  inter¬ 
nees  for  each  one.  BMC  also  plans  to 
configure  its  Siebel  application  to  gen¬ 
erate  XML  as  its  common  CRM  docu¬ 
ment  format,  so  that  the  WebMetbods 


XML  adapter  can  parse  it.  BMC  will 
then  use  Web  services  to  establish  data 
synchronization  between  applications, 
Gardner  says. 

(kiing  forward,  both  suite  and  best- 
of-br^  CRM  vendors  point  to  their 
support  for  Web  services  as  the  ghie 
that  will  hold  disparate  systems  to¬ 
gether.  But.  says  Giga’s  Kinikin,  "the  re¬ 
ality  is  that  Web  services  is  a  five-  to 
10-year  evolution,  not  a  magic  answer. 
We're  at  the  very  beginnii^  of  a  new 
journey." 

And  even  after  Web  services  are  es¬ 
tablished.  she  says.  IT  will  still  need  to 
incorporate  process  flows,  metadata 
and  semantics-based  standards  such  as 
electronic  data  interchange.  I 
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Now  you  can  know 
wrhat,  when,  where 
and  how  data  change 
has  occurred. 


Tripwire*  assures  the  integrity  of  your  data 
and  gives  you  the  ability  to  effectively  pinpoint 
and  manage  undesired  change  across  all  your 
sen/ers  and  network  devices.  By  establishing 
a  baseline  of  data  in  its  known  good  state, 
Tripwire  software  monitors  and  reports  any 
changes  to  that  baseline  and  enables  rapid 
discovery  and  recovery  when  an  undesired 
change  occurs. 

Maximize  System  Uptime 

■  Identify  change  quickly 

■  Enable  quick  restoration  to  a  desired  state 

■  Eliminate  risk  and  uncertainty 

Failsafe  Foundation  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Enable  detailed  audit  reporting 

■  Granular  visibility  and  control 
Lower  Costs  and  Frustration 

■  Greatly  reduces  the  time  it  takes  to 
find  and  diagnose  problems 


Tripwire's  data  integrity  assurance  solutions 
are  the  only  way  to  have  100%  confidence 
that  your  systems  remain  uncompromised 
In  the  event  of  a  change  in  state,  you’ll  know 
exacfly  what,  when,  where  and  how  change 
has  occurred  so  you  can  recover  quickly. 


For  a  FREE  30-day  fulty-functioruil  demo 
and  copy  of  the  arhite  paper  ‘‘Data  Integrity 
Assurance  in  a  Layered  Security  Strategy...**, 

call  toll-free:  1 -BOO-TRIPWIRE  (874.7947) 
or  visit  http;//enterprise.tripwire.com  today! 
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It's  high  time  someone  in  the  softwore  industry  storted  listenir^g  to  your  needs.  And  standing  up  for  your  rights.  Like  the  right  to  hove 
month-to-month  licensing.  Ar>d  the  right  to  no  upfront  poyments.  That's  why  we  offer  FlexSelect  Licensing***  to  all  our  customers.  This 
revolutionary  approoch  to  licensirrg  is  bosed  on  doing  business  on  your  terms,  not  ours.  So  you  con  hove  just  the  softwore  you  need, 
just  when  you  r»eed  it.  Check  it  out  todoy.  And  firxi  out  how  FlexSelect  Licensing  is  roising  more  thon  just  eyebrows  In  the  software 
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ONE  YEAR  AGO.  on  Jan.  13. 2002.  th€  Dallas 
municipal  IT  department  flipped  the 
switch  on  a  $5  n^Uon  automated  citizen- 
request  management  system. 

From  that  moment  on,  city  residents 
could  make  their  LI  million  annual  calls 
for  city  services  to  one  number.  311.  And  through  that 
numbCT,  they  could  do  everything  from  finding  out 
when  a  pothole  would  be  repaired  to  reporting  a 
missed  trash  pickup  to  checking  on  a  water  bill 
In  what  is  becomii^  a  model  for  other  municipali¬ 
ties  and  event-driven  businesses,  the  Dallas  system 
automatically  routes  requests  to  the  appropriate  de¬ 
partments  and  tracks  them  to  ensure  that  service- 
level  agreements  are  met.  It  runs  on  a  central  Oracle 
Parallel  Server  (OPS)  and  a  centralized  requests 
database,  but  each  city  department  controls  access 
to  its  own  data  and  applications. 

The  system  was  in  the  planning  stage  for  two  years 
but  went  live  after  a  scant  six  months  for  installation 
and  testing.  It  was  an  immediate  success,  and  the 
mood  in  t^  Dallas  data  center  after  the  launch  last 
January  was  exultant,  says  Dan  McFarland,  the  city's 
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A  newly  integrated  311  call¬ 
taking  system  for  all  city  services 
helps  initiate  action  and  track 
penormance.  by  sami  lais 


CIO.  A  week  later,  however,  things  didn’t  look  so 
rosy.  An  ongoii^  disaster  recovery  test,  begun  the 
week  before  the  system  went  live,  had  crashed  one  of 
the  system’s  two  redundant  servers  from  Suncoast 
Scientific  Inc.,  a  Motorola  Inc.  company  in  Shalimar, 
Fla.  “It  was  abysmal.”  Jon  Bigelow,  the  city’s  3U  proj¬ 
ect  coordinator,  says  of  the  test  “How  do  you  know 
you've  got  a  good  backup?  Unless  you  test  it  you 
don’t  know.” 

Although  most  glitches  were  minor  and  fixed  by 
the  end  of  January,  the  cause  of  the  crash  wasn't  dis¬ 
covered  for  another  month,  'installation  settings 
from  the  backups  were  wrong."  says  Bigelow.  With 
the  settings  corrected,  backups  worked  properly, 
which  cleared  the  roadblock  standing  In  the  way 
of  disaster  recovery. 

But  then  software  snags  b^an  to  arise.  As  the  first 
user  to  run  Motorola’s  Customer  Service  Request 
(CSR)  system  on  Oracle  Corp.’s  OPS.  “we  had  some 
issues.”  Bigelow  says.  For  example,  application  re¬ 
sponse  time  was  “horrendous.”  he  says.  It  should 
have  been  near  instantaneous  but  instead  took  from 
minutes  to  an  hour  for  one  city  department  Further¬ 
more.  the  system  required  a  complete  reboot  every 
36  hours  to  keep  it  from  slowing  to  a  halt 

It  wasn’t  until  mid-March  that  the  source  of  the 
slowdown  was  identified.  “The  Oracle  pet^le  were 
instructing  our  people,  and  the  Motorola  DBA  was 
watching  and  said.  ‘Something's  not  right  here.  That 
parameter  is  set  wrong.’  ”  says  Bigelow. 

Correcting  that  setting  not  only  alleviated  most  of 
the  response  time  lag.  but  it  also  allowed  the  removal 
of  diagnostic  software  that  had  been  us¬ 
ing  needed  resources,  he  says. 

By  late  summer,  all  major  city  de¬ 
partments  except  for  the  water  de¬ 
partment  were  on  the  3U  system.  The 
water  department  was  still  testing  an 
interface  between  the  customer  rela¬ 
tionship  management  system  and  its 
billing  systems  and  evaluating 
wdiether  requests  involved  too  much 
outside  the  scope  of  CSR.  Bigelow  says. 

Good  backups  were  running  without  incident. 

Some  geodata  errors  were  still  occurring  with 
10%  of  the  information  about  streets,  but  that 
shouldn’t  be  a  problem  after  the  next  release  of  CSR. 
Bigelow  says.  Tliat  version  will  interface  with  the 
city's  geographic  information  system  (GIS), 
which  is  based  on  GIS  software  from  Envi¬ 
ronmental  Systems  Research  Institute 
(ESRI)  in  Redlands.  Calif. 

Support  from  Motorola  has  been  good,  but  the 
geodata  errors  reveal  a  drawback  to  the  package  soft¬ 
ware,  be  says.  “It's  proprietary  software.  If  you  need 
to  make  a  change,  you  have  to  go  to  Motorola.  While 
users  can  correct  their  ^odata,  no  audit  trail  was  in¬ 
corporated  into  this  portion  of  the  product,  so  you 
can't  track  changes.  We  would  like  to  change  that, 
but  the  change  has  to  come  from  Motorola.  We’re 
chomping  at  the  bit  for  the  ESRI  interface,”  Bigelow 
says.  “On  the  upside,  we  seem  to  be  contributing  to 
the  road  map  for  this  product  A  lot  of  what  the  de¬ 
partments  have  a^ced  for  has  been  implemented  in 
the  product.” 

When  McFariand  first  came  to  Dallas  in  April  1999 
and  envisioned  this  clockworic  system,  the  city  faced 
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formidable  hurdles.  Ciry  databases  and  systems  were  ration  for  users  to  practice,  Bigelow  says, 
splintered  onto  multiple  applications  and  platforms.  The  city  worked  with  Motorola  for  several  months 
including  some  applications  running  under  a  home-  to  get  a  viable  installation  package.  The  ftnal  version 
grown  mainframe  (grating  system.  Groundwork  in-  wasn’t  available  until  almost  November  2001,  and 
eluded  converting  to  OS/390:  consolidating  the  city’s  even  then  it  had  a  conflict  —  fixed  two  months  later 
tax,  court,  buildup  inspection  and  GIS  databases  —  with  the  Windows  2000  platform,  he  says, 
onto  an  Oracle  database:  and  standardizing  S20  re-  The  geodata  caused  another  lag:  The  Motorola 

quest  processes  from  departments  citywide.  conversion  to  the  street  data  wasn’t  complete  until 

The  CSR  project  kick^  off  in  July  2001.  By  No-  the  week  of  implementation.  And  Bigelow  says  the 

vember,  the  city  had  buih  three  servers,  installed  disaster  recovery  testing  should  have  occurred  much 
virus  protection  and  created  an  installation  disk  that  earlier  than  the  week  before  implementation, 
would  work  across  all  platforms.  *  u-  i 

In  December  2001,  Dallas  added  two  more  servers  A  YCdT  LfllSf 
to  handle  the  Web  interface.  These  would  be  joined  A  year  after  Dallas’  3U  system  went  live,  it's  still 
in  January  by  three  more  servers  to  handle  the  mo-  evolving,  says  McFarland.  The  anxiously  awaited 

bile  application  interface  and  one  more  in  _ 1 _  ESRI  interface  between  the  city’s  GIS  and 

March  to  handle  reporting.  Also  in  De-  KYOM  ULUS  systems  has  been  deployed,  virtually 

cember,  the  deployment  team  rolled  out  eliminating  geodata  errors, 

the  system  to  825  Windows  NT.  98  and  rei«iit)ino  cd  c«^  million  311  calls  the  city 

2000  desktops.  It  was  ready  for  testing  ^ 35f7g  Helds  annually,  about  300.000  are  being 
Jan.  2,  ^2.  mnvxompulmarldxam  offloaded  onto  the  interactive  voice  re- 

Thmughniit  the  CSR  project’s  life  cycle,  - j -  sponse  system,"  McFarland  says.  Citizens 

*‘we've  kept  in  mind  that  this  isn't  ITs  project:  it’s  the  And  the  new  system  easier  to  deal  with,  be  says.  Re¬ 


lation  for  users  to  practice,  Bigelow  says. 

The  city  worked  with  Motorola  for  several  months 
to  get  a  viable  installation  package.  The  flnal  version 
wasn’t  available  until  almost  November  2001,  and 
even  then  it  had  a  conflict  —  fixed  two  months  later 
—  with  the  Windows  2000  platform,  he  says. 

The  geodata  caused  another  lag:  The  Motorola 
conversion  to  the  street  data  wasn't  complete  until 
the  week  of  implementation.  And  Bigelow  says  the 
disaster  recovery  testing  should  have  occurred  much 
earlier  than  the  week  before  implementation. 

AVear  Later 

A  year  after  Dallas’  3U  system  went  live,  it's  still 
evolving,  says  McFarland.  The  anxiously  awaited 

_  ESRI  interface  between  the  city’s  GIS  and 

il|||g  311  systems  has  been  deployed,  virtually 
eliminating  geodata  errors. 
rSSSrs  "Of  the  1.1  miUion  3U  calls  the  city 

fields  annually,  about  300.000  are  being 
mwUcDm  offloaded  onto  the  interactive  voice  re- 
I -  sponse  system,"  McFarland  says.  Citizens 


user  departments'  project”  Bigelow  says.  With  more 
than  SOO  business  processes  that  had  to  be  re-engi¬ 
neered  before  the  city  could  complete  the  project, 
success  was  predicated  on  getting  buy-in,  be  says. 


quests  for  service  now  go  directly  to  those  responsi¬ 
ble  for  the  service,  shortening  response  times  and 
allowing  mana^rs  to  better  allocate  resources. 

"The  key  to  the  success  of  any  311  system  is  bow 


As  ultimately  successful  as  the  implementation  has  fast  you  can  clear  up  those  troubles.  Otherwise,  it's 


been.  Bigelow  says  he  wishes  some  of  the  timii^  had 
been  different.  "Motorola  had  elected  to  have  the 
city’s  configuration  managers  begin  setting  up  the 
service  requests  before  training  them  in  bow  the 
base  product  worked."  be  says.  When  they  did  get 
training,  they  had  to  rework  configurations  to  take 
advantage  of  f^t  they  had  learned. 

"The  first  full  90%  of  problems  with  the  system 
were  training  issues,"  be  acknowledges.  There  just 
wasn’t  enough  time  between  training  and  implemen- 


just  a  sophisticated  record-keeper."  says  McFarland. 

The  IT  department  b  now  installing  wireless  LAN 
access  points  that  will  let  city  workers  in  the  field 
download  code-compliance  data. 

And  the  3U  project  has  provided  {^nty  of  lessons 
for  the  city’s  next  project  —  an  integrated,  cirywide 
enterprise  resource  management  system.  I 

Lais  is  a  Computerworld  contributing  writer  in 
TakomaPark,Md. 
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Dan  McFarland.  QO  lor  the  city,  explains 
how  il  works: 

a  A  citsen  ndads  a  servKe  -  a  pothole  re¬ 
paired,  for  exairiple.  She  cals  311  to  convtoiTL 

•  The  cal-takw  brinos  up  the  appbeabon 
arxl  erders  locainn  and  descrvtion  inforrnatton 
on  the  pothole. 

■  A  geographic  HilorTnation  system  assigns 
11  layers  of  geodata,  such  as  the  streel  number 
and  the  locabon  of  toe  pothole,  and  that  data  is 
stored  with  toe  application  in  the  daltoase 

a  Differentiation  is  made  between  a  nu- 
sance  pothole  and  one  that  presents  a  safety 
hazard  Notiheation  goes  to  toe  Deptftment  of 
Streets  Servees  and  to  the  departrnent's  Bald 
superveor  via  two-way  pager,  wheh  syncs 
with  toe  central  data  center  database  every 
half-hour. 

•  if  toe  pothole  IS  a  safety  hazard  and  the 
street  nee^  to  be  closed  tor  repairs,  the  cal- 
taker  can  tel  toe  caNer  about  the  closing  and 
notify  toe  field  supervisor  via  radn  cfispaich. 

■  The  system  automatictiy  notifies  depart¬ 
ments  that  wi  be  affected  sandation.  tor  ex¬ 
ample.  rngM  have  to  reroute  trash  pekups. 

■  The  city  has  sarvice-ievel  agreements 
(SLA)  for  whOT  repairs  wi  be  done,  and  toe 
new  system  enables  toe  calHakar  to  tel  toe 
caler  wtien  the  pothole  is  tihely  to  be  bred.  H 
the  pothole  isn’t  fied  in  bme.  toe  system  esca¬ 
lates  toe  report  ratifying  rnariagernent  that  an 
SLA  has  viototed. 

The  new  3n  system,  which  6  mtegrated  city- 
wide  and  tuns  on  a  cenbalized  server,  stores 
itdormaiion  about  toe  pothole  in  a  centralced 
database,  which  each  city  office  can  access. 

One  of  toe  advantages  of  toe  system  6  that 
N  tracks  ctlizens'  cals  centraly.  ebmnabng  re- 
dundmies.  For  exarnple.  Mc^tland  says.  If 
someone  ebe  had  caM  with  a  question  about 
say.  a  water  bi  and  at  the  end  of  toe  cal  had 
said  he  also  wanted  to  report  a  pothole  that 
needed  to  be  filed  toe  system  would  recognize 
whether  this  eater's  pothole  was  toe  same  as 
the  one  the  other  caler  reported. 

With  toe  old  system,  a  second  request  tor 
toe  same  pothole  would  be  inibaled  wSh  no 
way  to  tie  I  to  the  first  request  and  no  way  to 
tra^  the  complaints. 

-SmlJis 
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formidabie  hurdles.  City  databases  and  systems  were 
splintered  onto  multiple  applications  and  platforms, 
including  some  applications  running  under  a  home¬ 
grown  mainframe  operating  system.  Groundwork  in¬ 
cluded  converting  to  OS/390;  consolidating  the  city’s 
tax,  court,  building  inspection  and  CIS  databases 
onto  an  Oracle  database:  and  standardizing  520  re¬ 
quest  processes  from  departments  city'wide. 

The  CSR  project  kicked  off  in  July  2001.  By  No¬ 
vember.  the  city  had  built  three  servers,  installed 
virus  protection  and  created  an  installation  disk  that 
would  work  across  ail  platforms. 

In  December  ^01.  Dallas  added  two  more  servers 
to  handle  the  Web  interface.  These  would  be  joined 
in  January  by  three  more  servers  to  handle  the  mo¬ 
bile  application  interface  and  one  more  in  _ 

March  to  handle  reporting.  Also  in  De-  BEYOND 
cember.  the  deployment  team  rolled  out 
the  system  to  825  Windows  NT.  98  and  revjmomg  tt 

2000  desktops.  It  was  ready  for  testing  ^  QuickUi 
Jan.  2, 2002.  www.c0nif 

Throughout  the  CSR  project’s  life  cycle. 


‘ms  were  tation  for  users  to  practice.  Bigelow  says. 
atforms.  The  city  worked  with  Motorola  for  several  months 
3  home-  to  get  a  viable  installation  package.  The  fmal  version 
Iwork  in-  wasn't  available  until  almost  November  2001.  and 
the  city’s  even  then  it  had  a  conflict  —  fixed  two  months  later 
)ases  —  with  the  Windows  2000  platform,  he  says. 

)20  re-  The  geodata  caused  another  lag:  The  Motorola 

conversion  to  the  street  data  wasn’t  complete  until 
y  No-  the  week  of  implementation.  And  Bigelow  says  the 
ailed  disaster  recovery  testing  should  have  occurred  much 
disk  that  earlier  than  the  week  before  implementation. 

!  servers  AYear  Later 

;  joined  A  year  after  Dallas’  311  system  went  live,  it’s  still 
he  mo-  evolving,  says  McFarland.  The  anxiously  awaited 

_ ESRI  interface  between  the  city’s  GIS  and 

BFYflND  DAI  IAS  ^  systems  has  been  deployed,  virtually 
*^*""*  ■^*'^^"**  eliminating  geodata  errors. 

O  QuittiLink  35T79  fields  annually,  about  300,000  are  being 
www.c0nipul*rwortdxom  offloaded  onto  the  interactive  voice  re- 
- [ -  sponse  system,”  McFarland  says.  Citizens 


“we’ve  kept  in  mind  that  this  isn’t  ITs  project;  it’s  the  find  the  new  system  easier  to  deal  with,  he  says.  Re¬ 


user  departments'  project."  Bigelow  says.  With  more 
than  500  business  processes  that  had  to  be  re-engi* 
neered  before  the  city  could  complete  the  project, 
success  was  predicated  on  getting  buy-in.  he  says. 


quests  for  service  now  go  directly  lo  those  responsi¬ 
ble  for  the  service,  shortening  response  times  and 
allowing  managers  to  better  allocate  resources. 

"The  key  to  the  success  of  any  311  system  is  how 


As  ultimately  successful  as  the  implementation  has  fast  you  can  clear  up  those  troubles.  Otherwise,  it’s 


been.  Bigelow  says  he  wishes  some  of  the  timing  had 
been  different  “Motorola  had  elected  to  have  the 
city’s  configuration  managers  begin  scttii^  up  the 
service  requests  before  training  them  in  bow  the 
base  product  worked,”  be  says.  When  they  did  get 
training,  they  had  to  rework  configurations  to  take 
advantage  of  what  they  had  learned. 

“The  first  full  90%  of  problems  with  the  system 
were  training  issues,"  he  acknowledges.  There  just 
wasn't  enough  time  between  training  and  iroplemen- 


just  a  sophisticated  record-keeper."  says  McFarland. 

The  IT  department  is  now  installing  wireless  LAN 
access  points  that  will  let  city  workers  in  the  field 
download  code-compliance  data. 

And  the  3U  project  has  provided  plenty  of  lessons 
for  the  city’s  next  project  —  an  integrated,  citywide 
enterprise  resource  management  system.  • 

/<n'c  iso  Computerworld  conxrtburiftg  writer  in 
Tbkoma  Pork,  Md. 


Oalas' new  cHtan-fBQuest  management 
system  integrates  requests  to  520  city 
services  processes  and  lets  the  dty  and 
residents  track  each  requesL 
Dan  McFarland.  CIO  tor  the  city,  explains 
how  It  works 

A  citizen  needs  a  service  -  a  pothole  re¬ 
paired.  lor  example.  She  cals  311  lo  complae) 
The  caD-taker  brings  up  the  application 
and  enters  location  and  descnplxxn  irdormation 
on  the  podYole. 

A  geographic  informahon  system  assigr^ 

11  layers  ot  geodata,  such  as  the  street  rumber 
and  the  bcabon  ot  the  pothole,  and  that  data  6 
stored  with  the  applcabon  m  the  database. 

Diffeenbatxm  is  made  between  a  nui¬ 
sance  pothole  and  one  that  presents  a  safety 
hazard  Notificalion  goes  to  the  Department  ol 
Streets  Services  and  to  the  department's  field 
supervisor  via  two-way  pager,  which  syncs 
with  the  central  data  center  database  every 
half -hour. 

If  the  pothole  e  a  safety  hazard  and  the 
street  needs  lo  be  closed  for  repairs,  the  c^l- 
can  Idl  ii«  caler  about  the  dosing  and 
notify  the  field  supervisor  via  mdio  dispatch. 

The  system  aulomabcatiy  notifies  depart¬ 
ments  that  will  be  affected,  samtaton.  tor  ex¬ 
ample.  rmghi  have  to  reroute  trash  pdups 
The  city  has  service-level  agreements 
(SLA)  for  when  repairs  wil  be  dorte.  and  the 
new  system  enabte  the  cai-taker  to  tell  the 
cater  when  the  pothole  is  kkefy  lo  be  fixed  If 
the  polhole  isn't  tilled  tn  Dme.  the  system  esca¬ 
lates  the  report  notifying  management  that  an 
SLA  has  b^  violaled . 

The  i>ew  311  system,  which  is  inte^ated  aty- 
wide  and  runs  on  a  cenlrakzed  server,  stores 
information  about  the  pothole  in  a  centralized 
database,  which  each  city  office  can  access 
One  of  the  advantages  ot  the  system  s  lhal 
It  tracks  cdizens'  calls  oentraNy.  eliminating  re¬ 
dundancies.  For  example.  McFarland  says,  i 
someone  else  had  called  with  a  question  about, 
say.  a  water  bilfandaltheendolthecallhad 
said  he  also  wanted  lo  report  a  pothole  that 
needed  to  be  filled,  the  system  would  recognize 
whether  this  eater’s  polhole  was  the  same  as 
the  one  the  other  caller  reported. 

\^^lth  the  old  system,  a  second  request  lor 
the  same  pothole  would  be  initialed,  with  no 
way  to  tie  it  to  the  tvst  request  and  no  way  lo 
tra^  the  complaints. 

-SanLas 
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.Net  Terminal 
Services  Drive 
Rental  System 

Enterprise  Rent-A-Car’s  thin-client  project 
will  be  one  of  the  biggest  ever  attempted  using 
Microsoft’s  .Net  Terminal  Services.  By  Carol  Sliwa 


ENTkkrUKF  RENT-A-CAR  CO,  IS 
venturing  where  few.  if  any. 
companies  have  gone  before. 
The  Sl  Louis-based  Ann  plans 
to  deliver  Microsoft  Office  and  inter¬ 
nally  developed  car-rental  applications 
10  5,000  branch  locations  equipped 
with  Windows  CE-based  terminals. 
Those  thin-cUeot  devices  will  access 
(be  applications  through  the  enhanced 
Tenni^  Services  features  in  Micro¬ 
soft  Corp.'s  upcoming  release  of  Win¬ 
dows  .Net  Server  2003. 

For  more  than  10  years,  brartch  em¬ 
ployees  have  rented  out  cars  using 
5250  terminals  that  link  back  to  the 
company's  A$/400  servers  in  St.  Louis. 
But  Enterprise  wants  to  replace  the 
Umited-functioD  green  screens  with  a 
more  graphical  inter&ce  and  give  its 
users  a  more  PC-Uke  environment  that 
will  support  new  features  and  capabili¬ 
ties.  says  Mark  Adams,  an  assistant 
vice  president  of  information  systems 
at  the  company. 

Adams  says  that  Enterprise  also 
wants  to  retain  its  existing  support 
model  for  its  5250  terminals  because  it 
knows  well  the  effort  required  to  sup- 
pcKt  full-blown  PCs.  Enterprise  settled 
on  Windows  CE-based  thin  clients  be¬ 
cause  it  found  them  easier  to  manage 
and  configure  and  considered  them 
more  consistent  across  vendor  lines 
than  Unix-  and  Linux-based  devices, 
says  Derik  Reiser,  director  of  platform 
solutions  at  the  company. 

The  Windows  CE  terminals  launch 
Microsoft  Remote  Desktop  Protocol 
(RDP)  5J  client  software  and  establish 
sessions  either  through  a  LAN  to  a 
server  in  the  branch  office  or  through 
a  shared  frame-relay  circuit  to  servers 
St  Enterprise’s  headquarters. 

As  pan  of  Microsoff's  loint  Devel¬ 


opment  Program,  Enterprise  has  been 
testing  Terminal  Services  at  18  branches 
that  have  two-processor  servers  run¬ 
ning  locally  and  at  two  branches  that 
connect  to  four-way  boxes  in  St  Louis. 

But  the  ultimate  scope  of  the  proj¬ 
ect  is  far  more  ambitious.  During  the 
next  24  months.  Enterprise  plans  to 
roll  out  Windows  .Net  Server  2003  to 
2.500  of  its  larger  branches  and  con¬ 
nect  the  remaining  2.500  to  central 
servers  in  St.  Louis. 

The  sheer  scale  will  set  the  Enter¬ 
prise  project  apart  from  the  typical 
Microsoft  Terminal  Services  d^loy- 


ment.  according  to  Mark  Margevicius, 
an  analyst  at  Stamford.  Conn.-based 
Gartner  Inc.  He  says  that  250  to  300 
clients  has  been  the  "magic  number” 
for  Terminal  Services.  Beyond  that, 
most  companies  have  gone  to  a  more 
scalable  product,  such  as  MetaFrame 
XP  from  Citrix  Systems  Inc. 

David  Friedlander,  an  analyst  at  Giga 
Information  Group  Inc.,  says  that  even 
though  the  Windows  .Net  version  of 
Terminal  Server  Is  improved,  he  still 
doesn’t  expect  many  companies  the 
size  of  Enterprise  to  deploy  only  the 
Microsoft  product.  He  says  others  will 
likely  turn  to  MetaFrame  because  of  its 
support  for  a  wider  range  of  clients, 
advanced  manageability  and  security 
features  for  remote  access. 

Enterprise  considered  MetaFrame 
as  well  as  several  open-source  options, 
but  for  tbe  lighter  needs  of  its  branches, 
it  found  tbe  Microsoft  Terminal  Serv¬ 
ices  approach  sufficient,  Adams  says. 

"We  believed  that  running  fewer 
products  would  make  the  solution  less 
complicated  to  support  over  the  long 
haul"  he  says.  "With  the  Windows  J4et 
Terminal  Services  combination,  we 
had  fewer  pieces  and  parts  to  manage." 

Plus,  .Net  Server  offers  enhance¬ 
ments  that  Enterprise  has  found  useful 
For  instance,  tbe  new  group  policy 
management  console  lets  tbe  company 
apply  policies  to  a  collection  of  servers. 
When  Enterprise  adds  a  server  to  the 
group,  the  server  tiriU  inherit  the  same 


ENTERPRISE  RSfT-A-CAR  s  upgradmg 5.000 offices  from  text-mode  terminals  lo  Windows  CE 
termmais  runnmg  ilet  Terminal  Services.  The  headquarters  Terminal  Server  farm  will  support  2.500 
bcvxdi  locatM)ns  deectiy  atvl  provide  y -over  supoorY  (or  another 2.500 larger  biarKhes,  which  will 
have  thev  own  Terminal  Server  host. 
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configuration  settings  as  each  of  tbe 
others  in  tbe  group.  Reiser  says. 

Policies  also  can  be  applied  to  each 
user's  account  at  log-on  to  indicate 
which  data,  directories  and  drives  the 
user  can  access,  he  says. 

Reiser  says  he  also  likes  the  new  ses¬ 
sion-directory  feature,  which  tracks 
user  connections  to  specific  servers.  If 
a  user  is  disconnected,  be  is  pointed 
hack  to  the  server  where  the  session 
originated.  In  tbe  past,  he  might  have 
reconnected  to  a  different  server,  pos¬ 
sibly  losing  work.  Reiser  says. 

The  MetaFrame  Aitemative 

Citrix’s  MetaFrame  has  many  capabil¬ 
ities  that  aren’t  found  in  Windows 
.Net  Server,  such  as  built-in  load  bal¬ 
ancing.  which  directs  users  to  tbe 
least  busy  server. 

And  Enterprise  is  familiar  with  the 
benefits  that  third-party  products  can 
add  to  a  Windows  Terminal  Services 
deployment,  because  it  has  delivered 
enterprise  resource  planning  applica¬ 
tions  to  administrative  offices  using 
MetaFrame,  Adams  notes.  But  he  says 
Enterprise  won’t  need  Citrix’s  ad¬ 
vanced  management  console,  since  it 
won’t  be  running  a  complex  set  of  ap¬ 
plications  on  its  server  farm.  "Most  of 
our  applications  will  be  delivered  with 
browser-type  technology."  he  says. 

Support  for  heterogeneous  clients 
isn't  necessary  because  Enterprise 
plans  to  use  only  Windows  clients. 

And  because  the  clients  will  connect 
via  a  private  networic.  the  Terminal 
Server  product  won't  be  relied  upon  to 
provide  security.  Reiser  says. 

MetaFrame  also  helps  companies 
that  need  to  do  complex  application 
publishing.  Reiser  says.  But  since  En¬ 
terprise  is  publishing  an  entire  desktop 
to  its  Windows  CE  devices,  which  run 
only  the  Windows  CE  operating  sys¬ 
tem  and  the  RDP  5.1  client,  those  fea¬ 
tures  aren’t  critical 

"In  an  all-Microsoft  environment, 
with  Mkrosoft  clients  and  servers  and 
no  intention  of  supporting  anything 
else,  the  Microsoft  [Terminal  Services] 
approach  is  certainly  a  reasonable  one 
to  take.”  says  Dan  Kusnetzky.  an  ana¬ 
lyst  at  Framingham.  Mass.-based  IDC. 

But  even  in  an  all-Microsoft  environ¬ 
ment.  there's  a  need  for  considerable 
advance  planning.  Enterprise,  for  in¬ 
stance.  had  to  roll  out  Active  Directory 
in  conjunction  with  tbe  Terminal  Ser¬ 
vices  project. 

"Don't  underestimate  the  amount  of 
time  and  effort  you  need  to  put  into 
how  this  component  intertwines  with 
the  other  portions  of  your  archhec- 
ture,”  Adams  says.  A 
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Pervasive  Computing 
GetsOi^feed 

Beyond  the  20th  century:  Standards  emerge  for  sharing  data  across 
heterogeneous  computers  and  input  devices.  By  Patrick  Thibodeau 


Forc.et  MOORE'S  LAW.  The  reality 
is  that  workstations  haven’t 
changed  all  that  much  in  30 
years,  despite  their  enormous 
power  and  performance  gains.  Inter¬ 
facing  is  still  a  matter  of  pressing  plas¬ 
tic  keys  and  clicking  on  a  mouse. 

But  imagioe.  as  Vince  Stanford  does, 
a  time  when  a  camera-equipped  PC  will 
be  able  to  follow  your  ga7i»  and  shift 
applications  with  your  focus.  Imagirte 
also  that  the  camera  and  microphone 
arrays  in  conference  rooms  will  recog¬ 
nize  you,  watch  you,  listen  to  you.  infer 
what  you  want  and  produce  the  infor- 
matioD  that  you  need,  sans  keyboard. 

"How  do  we  get  beyond  this  20th 
century  modeir  asks  Stanford,  in  his 
pervasive  computing  lab  at  the  Nation¬ 
al  Institute  of  Standards  and  Technolo¬ 
gy’s  (NIST)  sprawling  campus  in 
Gaithersburg,  Md.  The  computer  sci¬ 
entist  is  creating  standards  that  will 
enable  computers  and  people  to  inter¬ 
act.  no  matter  where  they  are. 

Pervasive  computing  utilizes  ‘Multi¬ 
modal"  interfaces,  and  that  means  de¬ 
veloping  systems  that  can  recognize 
voice  and  gestures  ~  systems  that  per¬ 
ceive  their  end  users.  TTw  PC  remains 
important  in  a  pervasive  system,  and 
the  technology  could  involve  new  ways 
of  interfacing  with  a  desktop,  such  as 
gaze-tracking. 

But  instead  of  inputting  commands 

in  front  of  one  PC  exclusively,  a  _ 

pervasive  system  extends  the 
idea  of  intofadng  to  tens  or 
hundreds  of  devices.  It  will  no 
longer  matter  whether  end 

users  are  in  front  of  their  PCs;  - 

their  cmmectkMi  to  information  will  be 
available  from  any  device  or  location. 
It’s  a  philosophical  as  well  as  a  techno¬ 
logical  change. 

'?fou  need  to  shift  the  focus  from 
one  machine,  one  interface,  to  one  per¬ 
son  and  one  interfrice  made  up  of  many 
computen,”  says  Stanford. 

But  there  are  problems.  Although 
PCs  may  be  '^lug  and  play,*  pervasive 
systems  are  not  —  yet  Inierconnecting 
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a  wide  variety  of  technologies  that  can 
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be  mobile  or  wearable,  embedded  or 
stationary,  all  performing  a  wide  range 
of  functions,  can't  be  accomplished 
without  standards. 

NIST  is  at  worit  on  an  open-source, 
pervasive  computing  standard  called 
Smart  Flow  to  address  the  underlying 
_  problem  of  connecting  a  vari¬ 
ety  of  devices,  systems  and 
sensors  that  make  up  a  multi¬ 
modal  enviroruneni.  This  staiH 
dard  is  intended  to  let  a  com- 
pany  that  makes  a  video,  voice 
or  location  sensor,  for  instance,  send 
data  from  that  device  in  a  standard  for¬ 
mat  that  could  be  accessed  by  an  ana¬ 
lyzer  from  another  company. 

NIST  has  formed  the  Pervasive 
Computing  Standards  Working  Group 
and  has  begun  recruiting  vendors  to 
join  the  effort  Initially,  the  focus  will 
be  on  getting  technology  companies  to 
join,  but  business  end  users  will  also 
be  asked  to  participate.  "We  also  try  to 


have  companies  that  are  large-scale 
consumers  of  the  technologies."  Stan¬ 
ford  says.  Creating  this  standard  will 
be  a  multiyear  protect  he  notes,  partly 
because  the  technolt^es  are  still 
emerging. 

Stanford  says  there  are  a  lot  of  "little 
pieces”  of  pervasive  computing  tech¬ 
nology  ”that  can't  play  together"  be¬ 
cause  of  this  lack  of  standards.  “We 
think  there  is  tremendous  leverage  to 
be  had  in  these  so-called  sensor  fu¬ 
sions  and  combinations  of  different  ca¬ 
pabilities."  he  says. 

As  its  name  implies.  NIST  seeks  out 
technologies  in  need  of  standards 
work.  NIST  sees  itself  as  a  neutral 
third  party  "that  has  the  broader 
public  good  in  mind."  says  Stanford, 
and  its  goal  is  that  "all  companies 
should  become  more  capable." 

For  example,  NIST  is  leading  an  ef¬ 
fort  to  analyze  the  Bluetooth  wireless 
protocol  so  it  can  interoperate  better 
with  802J1  wireless  Ethernet  Bluetooth 


shares  its  part  of  the  radio  spectrum 
(2.45  GHz)  with  802J1,  but  the  two  irv- 
terfere  with  each  other’s  signals  in  that 
spectrum.  Both  protocols  are  consid¬ 
ered  critical  to  pervasive  computing. 

NIST  also  develops  reference  data  for 
testing  products.  For  instance,  its 
speech-recognition  reference  data  al¬ 
lows  vendors  to  compare  the  accuracy 
of  their  voice  recognition  software 
against  a  neutral  benchmark.  The 
benchmarks  consist  of  annotated  voice 
recordings  of  varying  levels  of  difficulty. 

Vendors  agree  that  NIST  has  a  role 
to  play  in  developing  standards.  "Be¬ 
cause  there  are  no  standards,  everyone 
has  to  set  up  their  own  protocols,"  says 
Alex  Malison,  the  CEO  of  Action  Sys¬ 
tems  loc.,  a  Silver  Spring,  McL-based 
maker  of  wireless  systems  for  restau¬ 
rants.  There  is  no  coherent  way  for 
everyone  to  know  what  to  expect  when 
they  are  learning  something  new." 

Read  My  lips 

The  practical  applications  of  pervasive 
systems  vary.  NIST  has  set  up  an  array 
of  microphones  and  cameras  that  can 
keep  track  of  what's  occurring  in  a  con¬ 
ference  room.  With  sophisticated  lip- 
reading,  gaze-tracking  and  speech* 
recognitioD  systems,  the  time  may  soon 
come  when  meeting  minutes  are  auto¬ 
matically  recorded  and  digitized,  and 
participants  can  issue  commands  di¬ 
rectly  to  employees  from  the  meeting. 

Pervasive  systems  depend  on  a  lot  of 
technology  coming  tc^^er.  For  exam¬ 
ple.  Foveal  Systems  LLC  in  Madison, 
N.J..  makes  automated  camera  systems 
that  can  make  videos  by  sensing  the 
presence  of  a  speaker  and  the  visual 
aids  he’s  using.  Foveal 's  owner, 

Michael  Bianchi,  say  be  needs  micro¬ 
phone  arrays  that  can  look  at  a  SO-seat 
classroom  and  figure  out  the  location 
of  a  person  asking  a  question.  Develop¬ 
ing  that  microphone  array  and  inte¬ 
grating  it  with  Fbveal’s  camera  system 
will  take  standards,  be  says. 

Stanford  says  NIST  decided  to  focus 
on  the  issue  of  integration  in  a  perva¬ 
sive  environment  because  the  private 
sector  wasn’t  doing  it  If  vendors  "can 
come  together  and  create  and  nnd  new 
business  opportunities  because  they 
have  this  ability  to  interact.*  be  says 
‘'then  we  would  say  we  have  sticceeded. 
and  we  would  be  happy  for  a  few 
months  and  then  start  something  else."  I 
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Spam  Issue  Viewed 
As  IT  Security  Failure 


A  surge  in  e-mail  spam  undermines  user 
confidence  in  an  otherwise  solid  security 
infrastructure.  By  Vince  Tuesday 


The  problem  of  unwant¬ 
ed  e-mails  may  not  be 
the  biggest  security 
threat  my  company 
faces,  but  it's  a  highly  visible 
failure  to  our  employees  and 
threatens  to  taint  the  IT  secu¬ 
rity  group's  good  reputation. 


our  c-mail  systems  were 
spending  lime  on  spam  rather 
than  on  customer  e-mails,  and 
the  problem  affected  employ¬ 
ees  at  all  levels. 

Turning  to  Blacklists 

The  first  option  we  looked  at 


One  ofthe  ways  that  staffers  I  w'as  using  a  blacklist  service. 


judge  good  security  is  if  they 
can  work  free  of  fear.  We 

score  pretty  well  on  - 

that  measure.  Our  orw 
managers  don't  fear 
that  our  business  sys-  ||4I 
terns  will  be  compro- 
mised  or  corrupted.  ||nil| 
our  desktop  users  no 
longer  fear  virus  in- 
fections.  and  1  generally  don't 
fear  large  security  incidents 
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which  takes  spam  reports, 
identifies  the  servers  used  and 

-  publishes  the  ad- 

dresses  so  that  our 
III  e-mail  server  can 
automatically  shun 
further  e-mails  from 
II  n  those  sources.  But 
spammers  move  to 
new  servers  faster 
than  the  blacklist  can  keep  up. 
Another  drawback:  Once  a 


looming  on  the  horizon.  Life  is  company  is  on  the  blacklist, 
good.  Apart  from  spam,  that  is.  its  e-mail  administrator  must 
•  Because  many  of  our  staffers  jump  through  hoops  to  get 
Work  with  customers,  they  of-  it  removed.  Meanwhile,  any 
ten  publish  their  e-mail  ad-  legitimate  e-mail  from  that 
dresses  on  our  Web  site  and  in  company  is  blocked.  Blacklists 

our  publications.  These  staffers  are  useful  and  have  made  a 
get  Hooded  with  hundreds  of  dent  in  spam  volumes,  but 


rubbish  messages  along  with 
real  customer  e-mails. 

They  get  offered  radio-con¬ 
trolled  cars,  free  money  from 
Nigeria  and.  perhaps  most 
bizarrely.  septic  tanks.  That 
flood  is  bad  enough,  but  mixed 
in  with  all  the  commercial 
rubbish  arc  darker-themed 
messages  —  come-ons  to 
pornographic  Web  sites  and 
hate  sites,  as  well  as  abusive 
e-mails. 

These  frontline  staffers  con¬ 
stantly  face  high  volumes  of 
offensive  content,  and  until 
recently,  we  had  done  little 
about  iL 

The  problem  became  bad 
enough  that  it  presented  a  risk 
to  our  productivity.  Staffers 
were  worried  by  the  content. 


legitimate  e-mail  from  that 
company  is  blocked.  Blacklists 
are  useful  and  have  made  a 
dent  in  spam  volumes,  but 
this  tool  alone  wasn't  good 
enough  for  us. 

We  ended  up  going  with  a 
more  elaborate  service  from 
MessageLabs  lid.,  a  Minnc- 


Once  a  compels 
onthebiacldist,its 
e-mail  administrator 
must  jump  thi^h 
hoops  to  get  it  re¬ 
move  Meuiwhile, 
any  legitimate  e-mail 
is  blocked. 


apolis-based  service  provider 
we  were  already  usii^  for 
e-mail  traffic  v'irus  scans.  The 
company  offers  a  service  to  la¬ 
bel  spam  using  both  blacklists 
and  heuristics.  As  far  as  I  can 
tell,  this  means  MessageLabs 
has  found  a  set  of  features  as¬ 
sociated  with  sp>am.  produced 
a  weighting  for  those  features 
and  established  a  threshold 
!  above  which  something  is 
marked  as  probable  spam. 

For  example,  if  an  e-mail 
says.  "Make  money  fast,"  then 
it  will  get  a  high  score  as  pos¬ 
sible  spam.  But  if  it  comes 
from  a  known  mailing  list,  the 
score  will  drop. 

After  testing  the  service,  wc 
found  that  it  was  marking  40% 
of  all  inbound  e-mail  as  spam 
—  more  than  10,000  messages 
per  day.  After  a  month,  just 
106  e-mails  had  been  incor¬ 
rectly  flagged  —  a  false-alarm 
rale  of  less  than  0.04%.  That 
was  good  enough  for  us.  espe¬ 
cially  since  we  can  tune  the 
rules  so  that  such  messages 
will  be  delivered  the  next  time. 

We  later  discovered  that 
many  of  the  falsely  lagged 
c-mails  were  what  I  would  call 
spam,  but  they  happened  to 
advertise  products  in  which 
the  recipient  had  an  interest. 
This  built  our  confidence  in 
the  service  even  more. 

Some  spam  still  gets 
through,  but  the  amount  is  rel¬ 
atively  small,  and  the  sources 
are  blocked  when  reported. 
And  our  users  don’t  have  to 
do  anything  to  benefit  from 
the  service. 

Not  to  be  cynical,  but  1  won¬ 
der.  How  long  will  it  take  for 
users  to  start  thinking  that 
even  the  greatly  reduced  level 
of  spam  is  too  much  and  come 
back  asking  for  further  im¬ 
provements? 

Spam  is  also  a  problem  out¬ 
side  the  office.  My  personal 
c-maii  address  is  widely  pub¬ 
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lished.  thanks  to  this  column, 
so  I  get  on  many  lists  as  well. 
The  Web  e-mail  company  I 
use.  Dublin-based  Hush  Com¬ 
munications  Inc.,  recently 
launched  a  new'  service  called 
the  Human  Authenticator. 
When  readers  send  me  an 
e-mail  message.  I  don’t  receive 
it  until  the  sender  performs  a 
simple  task  that  only  a  human 
could  do.  If  you  are  a  spammer, 
you  won’t  have  the  time  to  car¬ 
ry  out  this  task,  so  I  hope  that 
only  individuals  will  be  able  to 
send  mail  to  that  account  from 
now  on.  I'll  have  to  see  how  it 
works  out  —  and  how  readers 
react  to  the  request. 


Even  if  the  Human  Authenti¬ 
cator  works,  I  have  concerns 
about  forcing  people  who 
want  to  communicate  with  me 
to  jump  through  hoops.  And 
spammers,  who  make  good 
money  for  their  efforts,  can 
well  afford  to  get  around 
such  mechanisms  by  finding 
new  ways  to  distribute  com¬ 
mercial  messages  to  potential 
cu.stomers. 

I've  already  seen  operating 
system  message  windows  pop¬ 
ping  up  on  cable  and  Digital 
Subscriber  Line  clients  with 
spam  text  in  them.  I’ve  also 
seen  Windows  Media  files 
that  halfu’ay  through  loading 
start  opening  Web  sites  to  dis¬ 
play  commercial  messages.  Is 
this  the  way  spammers  will  go 
if  control  of  e-mail  spam  final¬ 
ly  starts  to  work?  I 

WHAT  DO  YOU  THINK? 

This  week's  loumal  is  written  by  a  real 
secunty  manager,  "Vince  Tuesday,*  wtwse 
name  and  empluyer  have  been  disguised 
lor  obvKWS  reasons  Contact  him  al  vince. 
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LANDesk  Updates 
Management  Suite 

LAND«k  Sofhvtre  Inc.  in  SaM 
Ute  City  today  wi  announce  a 
version  of  its  Managamanl  Suite 
product  that  pravUee  operating 
system  depioyment  tunctfonaSty. 
The  new  version  pnaddes  patent¬ 
ed  muMcastlng  tedwniogy  for 
distributing  operating  systems  to 
new  cSents  or  for  updating  otder 
ones,  hieing  is  STS  per  node,  the 
company  said. 


Microsoft  Releases 
Security  Package 
FbrSerWs 

lllcr(iaoflCorp.lBstweekre- 
leaaed  Fetoure  Pack  t  for  its  In¬ 
ternet  Seaafty  and  Accafaration 
(ISA)  Sar>w  2000.  Tha  taabea 
pack  inckidas  naw  appication- 
layar  firewall  dafaroae  and  sacu- 
fity  enhancements  for  Ejcchange 
Server  and  bilsmet  kilorreatkw 
Server,  as  wel  as  support  for 
RSA  Security  lne.‘s  SeeurO  two- 
factor  authenlicalton  product  ISA 
Server  Feature  Pack  1  can  be 
oowraoaoeo  n  ncrason  s  woo 
site  at  wwwjjicmoftciKn/ 
OMsenm/halunpack^. 


OASIS  Launches 
PN  Initiative 

The  Organtzatkm  for  the  Ad* 
MneamanI  of  Sbuctured  Infor¬ 
mation  Standards  (OASS)  an¬ 
nounced  lari  weak  tha  formaiion 
of  a  new  tschnicaf  committee  to 
promolB  adoption  of  pufak-koy 
inkaeb'ucbjre  (PIQ)  fechiMlogy 
for  VM  earvioes  and  other  apji- 
caflone.  The  BSerfciL  Mass.- 
baaed  group  plans  to  put  out 
white  papers.  Implamontatlon 
guidellnei  and  conformance 
tests  to  increase  auarenees  and 
UM  of  digital  owtificatoe.  Tarry 
Leahy,  a  vfoe  president  ri  MMi 
Fargo  A  Co.,  la  chairman  of  the 
new  ooramMea.  Vandor  aupporl- 
orB  kwhida  BaMmora  Tecbnolo- 
giaa  PIC,  Cofiriular  Aandries 
tolamalfonal  k^.  Entreri  Ine.. 
Neueom  Corp..  RSA  Saewity. 
Sun  Mtorouyriams  bic.  and 
VerfSignlnc. 


NICHOLAS  PETRELEY 


Digital  Rights 
Dominate  2002  Awards 


Given  the  year’s  events,  it  should 
come  as  no  surprise  that  digital  rights 
dominate  my  2002  “You  Can’t  Be 
Serious”  awards.  These  annual  awards 
recognize  truly  astonishing  achievements 
in  IT  double-think. 

In  that  spirit,  the  “Beverage  Through  the  Nose” 
award  for  2002  goes  to  Congressman  Howard  Berman. 

Be  sure  not  to  indulge  in  any  liquid  refreshment 
while  reading  Berman’s  statements  about  peer-to-peer 
networking  published  at  www.house.gov/berman.  In 
one  amusing  argument,  he  suggests  that  companies 


should  be  held  blameless 
for  breaking  into  your  net¬ 
work  to  search  for  copy¬ 
righted  content.  It  seems 
he  came  up  with  this  theo¬ 
ry  because  people  are  al¬ 
ready  given  the  leeway  to 
trespass  on  someone’s  lawn 
to  retrieve  a  stolen  bicycle 
that’s  in  plain  view.  To  be 
sure.  Richard  Nixon’s  infa¬ 
mous  Checkers  speech 
was  more  inspired,  but 
Berman's  works  of  lunatic 
reasoning  show  great  promise. 

Microsoft  ranked  a  close  second  in 
this  category,  but  I  have  no  pity  for 
the  poor  fool  with  a  mouthful  of  gin¬ 
ger  ale  when  he  heard  BUI  Gates  first 
utter  the  words  Tnisrworthy  Comput¬ 
ing  last  January.  After  hearing  terms 
like  Zero  Administration  Windows, 
everyone  should  know  by  now  that 
it's  dangerous  to  drink  anything  car¬ 
bonated  during  an  announcement 
from  Redmond. 

Nevertheless,  Microsoft  does  run 
away  with  three  major  awards  this 
year.  The  first  is  the  “Information  at 
Your  Fingertips”  award.  How  many 
times  has  this  happened  to  you? 
You’re  at  a  company  party  shooting 
the  breeze  with  your  boss  about  the 


1 


clever  plot  of  a  DVD 
movie  you  rented  and 
watched  yesterday.  But 
when  she  asks  about  the 
name  of  the  movie,  your 
mind  goes  blank.  UntU  re¬ 
cently.  you’d  have  to  wait 
untU  3  a.m.  for  the  name^ 
come  back  to  you. 

Now  the  information  can 
be  as  close  as  your  ceU 
phone.  Ever)’  time  you  use 
the  Windows  Media  Player 
to  watch  a  new  DVD.  it 
automatically  identifies  the  DVD  to  a 
Microsoft  server,  along  with  a  unique 
identifier  for  your  personal  player. 

So  the  next  time  you're  on  the  spot 
for  the  name  of  some  DVD  you 
watched,  give  Microsoft  a  jingle  and 
ask.  Someone  at  the  company  should 
know  the  answer. 

Naturally,  this  convenience  will  be 
unavailable  to  you  if  you  don't  use 
Windows  Media  Player.  Fortunately. 
Microsoft  devised  an  ingenious  plan  to 
prevent  you  from  accidentally  using 
less  capable  alternatives. 

Here's  how  it  works:  Along  with  au¬ 
tomatic  updates  to  software  and  your 
end-user  agreement.  Windows  XP  pe¬ 
riodically  downloads  the  information 
it  needs  to  prevent  unapproved  media 


players  from  accessing  DRM-enabled 
content. 

As  DRM.  or  digital  rights  manage¬ 
ment.  gains  momentum  and  ail  your 
other  software  stops  working.  Win¬ 
dows  Media  Player  is  sure  to  become 
the  irresistible  choice  for  all  your  en¬ 
tertainment  needs. 

This  ability  to  assert  remote  control 
over  your  software  earns  the  company 
the  "Zero  Degrees  of  Separation'' 
award  for  2002.  Granted,  you  could 
miss  out  on  features  like  this  if  you 
don’t  have  a  PC  but  it’s  safe  to  assume 
that  Microsoft  has  similar  plans  for  the 
Xbox  and  that  companies  such  as  Dis- 
ne>'  and  Sony  are  hard  at  work  figuring 
out  bow  to  control  your  access  to  copy¬ 
righted  media  on  standard  players.  Bet¬ 
ter  watch  out.  Microsoft,  or  one  of  these 
other  companies  could  nudge  you  out 
of  first  place  in  this  category  next  year! 

The  third  award  for  Microsoft  is  the 
coveted  “Ignorance  Is  Bliss"  prize  for 
2002.  The  fact  that  sane  people  still 
use  Windows  or  Media  Player  testi¬ 
fies  to  how  well  the  compahy  has 
been  able  to  protect  its  customers 
from  information  about  what  these 
products  are  doing  without  their  in¬ 
formed  consent. 

Finally.  Ximian  Inc-  walks  away  with 
“TTie  Mouse  That  Squeaked"  award 
for  continuing  to  reproduce  the  .Net 
deN'elopment  framework  as  an  open- 
source  project  called  Mona  The  value 
of  Mono  eludes  me.  but  perhaps 
there’s  a  secret  contingent  of  open- 
source  programniers  itching  to  write 
code  in  Visual  Basic  .Net. 

Nevertheless,  only  delusions  of 
grandeur  could  account  for  the  notion 
that  Microsoft  won’t  bankrupt  Ximian 
and  stop  the  project  on  claims  of 
patent  violations  the  moment  Mono 
poses  a  threat,  I 


wuroiRiiniiM? 
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Spam  Issue  Viewed 
As  IT  Security  Failure 


A  surge  in  e-mail  spam  undermines  user 
confidence  in  an  otherwise  solid  security 
infrastructure.  By  Vince  Tuesday 


Tim  iKiibl  I  M  of  unw.mi- 
i-d  c-m-iils  no!  hi' 
the  M\  iiri!\ 

threat  m\  eornp.iiis 
face'. hui  it*'. I  hijihh  t  isihie 
failure  to  our  emploiec'  .inJ 
threatens  to  f.i)i>t  the  11  seeii- 
rit>  fjroup  'iiooJ  reput.rtion. 

t  >ne  o|  the  ways  that  staffers 
luJjie  i;ooJ  seeuntt  is  if  (he\ 
can  work  free  of  fear.  We 

score  preltt  well  on  - 

that  me.isure Dur 
nunauers  liini't  fear 
that  our  business  sys 
tents  w  ill  be  compro 
mised  or  eorrupted. 
our  desktop  users  ne 
loncer  fear  %  irus  iii- 
leetions.  and  I  ytenerilK  don't 
fear  larye  security  incidents 
loominyr  on  the  hori/oii.  I  ifi-  is 
<^t  Apart  Irom  spatn,  lhai  is. 
cause  niany  of  our  st.ilVers 
work  with  customers,  they  of¬ 
ten  publish  their  e-mail  ad¬ 
dresses  on  our  Web  site  and  in 
our  publications.  I'hcsc  si.iffers 
yte!  iloodcJ  with  hundreds  oi 
rubbish  messaytes  atony:  w  ith 
real  customer  e-niaik 

I'hey  fiet  offered  raditv-con- 
trolled  cars,  free  money  from 
Niiieriu  and.  perliaps  most 
bi/ara-l\.  septic  tanks,  lltai 
flood  is  bad  enou}:h.  but  mised 
in  w  ilh  all  the  eommercial 
rubbish  .>re  Jarker-tliemeJ 
messaytes  eome-ons  to 
pornojirapitic  Web  sites  and 
hate  sites,  as  well  as  abusive 
e-mails. 

J'hese  frontline  stal'lefs  Lsin- 
sijoily  face  hiyth  volumes  of 
offensive  content,  and  until 
recently,  we  had  dune  little 
about  it. 

rhe  problem  heeanie  h.td 
enouyih  that  it  presented  a  risk 
t»»  our  priklueiivity.  Staffers 
were  worried  bv  the  eontent, 
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our  e-mail  systems  were 
spendiny:  time  on  spam  rather 
ih.in  on  customer  e-mails,  and 
the  problem  affected  employ¬ 
ees  at  all  levcK, 

Turning  to  Blacklists 

The  llrst  option  we  looked  at 
was  usiny:  a  blacklist  service, 
which  takes  spam  reports, 
iJeniifies  the  servers  used  and 
-  publishes  the  ad¬ 
dresses  so  that  our 
e-mail  server  can 
automaticaily  shim 
further  e-mails  Iron) 
those  sources  Hut 
spammers  move  to 
new  servers  taster 
than  the  blacklist  can  keep  up. 
.\nother  drawback;  Once  .i 
unnpany  is  on  the  blacklist, 
its  e-mail  administrator  must 
lump  ihrouy:h  hoops  to  yiet 
it  removed.  Meanwhite.ain 
leyjilimate  e-mail  front  that 
company  is  bliKked  Blacklists 
arc  useful  and  have  made  a 
dent  in  spam  volumes,  but 
this  tool  alone  wasn't  ysooJ 
cnouyth  for  us. 

We  ended  up  yroiny:  w  iih  .i 
more  elaborate  service  from 
Mess.)yiel  abs  [.id.,  a  \tinnc- 


Once  a  company  is 
on  the  blacklist,  its 
e-mail  administrator 
must  jump  through 
hoops  to  get  it  re¬ 
moval.  Meanwhile, 
any  l^itimate  e-mail 
is  blocked. 


.ipolis-based  service  provider 
we  were  .ilready  usiny:  for 
e-mail  trafllc  virus  scans.  1he 
company  olTers  a  service  to  la¬ 
bel  spam  usiny;  both  blacklists 
'  ,md  heuristics.  As  far  as  I  can 
j  tell,  this  means  Mesviyiel-abs 
j  has  found  a  set  of  features  as¬ 
sociated  with  spam,  produced 
I  a  wciyjhtiny:  for  those  features 
I  ;md  established  a  threshold 
.ibove  which  somethiny;  is 
marked  as  probable  spam, 
l  or  example,  if  an  e-mail 
I  says.  "Make  money  fast."  then 
j  it  w  ill  y;el  a  hiyrh  score  as  pos- 
j  sible  spam.  But  if  it  comes 
I  from  a  know  n  mailiny:  list,  the 
score  w  ill  drop 

After  lestiny:  the  service,  we 
found  that  it  was  marking  4l)"t> 
of  all  inbound  e-mail  as  spam 
I  —  more  than  HMKlO  messages 
j  per  day.  After  a  month,  just 
j  lt)(»  e-mails  had  been  incor- 
j  reelly  flagged  —  a  false-alarm 
;  rale  of  less  than  0.04‘'ci.  I'hat 
I  was  good  enough  for  us,  espe- 
I  cially  since  we  can  tune  the 
rules  so  that  such  messages 
will  be  delivered  the  next  time. 

I  We  later  discovered  that 
I  many  of  the  falsely  lagged 
e-mails  were  what  I  would  call 
spam,  but  they  happened  to 
advertise  products  in  which 
j  the  recipient  had  an  interest. 

I  his  built  our  eonlldenee  in 
'  the  service  even  more. 

■  Some  spam  still  gets 
!  through,  but  the  amount  is  rel- 
1  aiively  small,  and  the  sources 
I  are  blocked  when  reported. 

I  .And  our  users  don't  have  to 
'  do  anything  to  beiicTit  from 
:  the  service. 

Not  to  be  cynical,  but  I  won¬ 
der.  Mow  long  will  it  take  for 
users  to  start  thinking  that 
even  the  greatly  reduced  level 
of  spam  is  too  much  and  come 
I  hack  asking  for  further  im- 
proveinenis? 

I  Spam  is  also  a  problem  oui- 
I  side  the  ofTice.  My  per«mal 
'  e-mail  address  is  widely  pub¬ 


lished,  thanks  to  this  column, 
so  1  gel  on  many  lists  as  well. 
'I'hc  Web  e-mail  company  I 
use.  Dublin-based  Hushfiom- 
munications  Inc.,  recently 
launched  a  new  service  called 
the  Human  Authenticator. 
When  readers  send  me  an 
e-mail  message.  I  don't  receive 
it  until  the  sender  performs  a 
simple  task  that  only  a  human 
could  do.  If  you  are  a  spammer, 
you  w'on'i  have  the  time  to  car¬ 
ry  out  this  task,  so  1  hope  that 
only  individuals  will  be  able  to 
send  mail  to  that  account  from 
now  on.  I'll  have  to  see  how  it 
works  out  —  and  how  readers 
react  to  the  request. 


Hoop  Games 


hven  if  the  Human  Authenti¬ 
cator  works.  1  have  concerns 
about  forcing  people  who 
want  to  communicate  w  ith  me 
to  jump  through  hoops.  And 
spammers,  who  make  good 
money  for  their  efforts,  can 
well  afford  to  get  around 
such  mechanisms  by  finding 
new  ways  to  distribute  eom- 
niereial  messages  to  potenti.al 
customers. 

I've  already  seen  operating 
system  message  w  indows  pop¬ 
ping  up  on  cable  and  Digital 
Subscriber  I.ine  clients  with 
spam  te.xt  in  them.  I've  also 
seen  Windows  Media  files 
that  halfway  through  loading 
start  opening  Web  sitis  to  dis¬ 
play  eommercial  messages.  Is 
this  the  way  spammers  will  go 
if  control  of  e-mail  sp;im  final¬ 
ly  starts  to  work?  • 

WHAT  DO  YOU  THINK? 

This  week's  lournal «  wrilleii  by  a  real 
iecut'ty  tnai'ciger  "V"tuf  Tiiesday."  whose 
name  and  emoioyei  haift-  oetn  d'SguiSed 
•til  ODvws  leavvis  Contacl  him  .v  vincd 
luesckty  •Ihishmailcom,  or  lOinthedis 
cussion  in  owi  'ciium 
OuickLinit  aTS90 

To  t*n(>  a  comaieti!  aichive  oi  oui 
SeciiMy  Manage) 's  Journals,  go  online  IQ 

O  computerworid-com/seciournal 


SECURITY  LOG 


Security  Bookshelf 

■  TheArtof 
Dec«ptioa.b</ 

KavinMitnick 
ar>dWilli»nL 
Simon;  John 
WiieyASons. 

2002. 


thevivorid’s 
mostrevilMlhacksr.hMCO- 
yvritton  this  book  to  taach 
companies  how  to  ttofend 
against  lha  threat  of  social 
engmeering  attacks. 

Although  the  author  in- 
chides  best  defenses  agaiflsi 
these  threats,  his  recommen¬ 
dations  offer  fairly  weak  pro¬ 
tection  agatost  social  engi¬ 
neering.  Nonethdess.  I  found 
TheArtofDeceptiontobet 
superb  prinrn. 

-  Vhee  Tuesday 

NAIAdds 
Spam  Control 

Network  security  vendor  Net¬ 
work  Aseociatas  Inc.  (NAi) 
beefed  up  Ks  antispam  prod¬ 
ucts  by  actMnng  Pak)  Aho. 
CalM.'basad  Deenoft  Inc.  NAI 
ynH  use  Deersoft’s  Spam- 
Assassin  Pro  and  Enterprise 
editions  as  the  basis  for  its  up¬ 
coming  airtispam  products. 

Santa  Cla^  Calif. -based 
NAI  wU  deliver  McAfee 
SpamKiller  Enterprise  for 
desktops  early  in  the  second 
quarter,  and  the  company  wiP 
update  its  ePolicy  Orchestra- 
tor  to  manage  SpamKiller 
Enterprise. 

Sourcefire 
Ships  Sensors 

Intrusion-detection  systems 
(IDS)  vendor  Sourcefire  Inc.  in 
Coluntoia.  Md..  this  month  be¬ 
gins  shipping  two  fl>S  network 
sensors  for  use  in  businesses 
that  don1  require  gigabil- 
speed  intnision  detcctkxi.  'Hte 
Sourcefire  Netvrark  Sensor 
1000  appBance,  which  sup¬ 
ports  iq>  to  SOM  M/sec. 
speeds,  costs  S5,000.  The 
Network  Serwor  2100,  which 
operates  between  250M  to 
300M  bk/sec.,  costs  $13,000. 
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LANDesk  Updates 
Management  Suite 

LANDesk  Software  Inc.  in  Salt 
Lake  City  today  will  announce  a 
version  of  its  Management  Suite 
product  that  provides  operating 
system  deployment  funcHonality. 
The  new  version  provides  patent¬ 
ed  multicasting  technology  for 
distributing  operating  systems  to 
new  clients  or  for  updating  older 
ones.  Pricing  is  STS  per  node,  the 
company  said. 


Microsoft  Releases 
Security  Package 
For  Servers 

Microsoft  Corp.  last  vredi  re¬ 
leased  Feature  Pack  1  for  its  In¬ 
ternet  Security  and  Acceleration 
(ISA)  Server  2000.  The  feature 
pack  includes  new  application- 
layer  firewall  defenses  and  secu¬ 
rity  enhancements  for  Exchange 
Server  and  Internet  Information 
Server,  as  well  as  support  for 
RSA  Security  lnc.'s  SecurlO  two- 
factor  authentication  product.  ISA 
Server  Feature  Pack  1  can  be 
downloaded  at  Microsoft's  Web 
site  at  www.rnicrosoft.cont/ 
isaservef/featurepackl/. 


OASIS  Launches 
PKl  Initiative 

The  Organization  for  the  Ad¬ 
vancement  of  Structured  infor¬ 
mation  Standards  (OASIS)  an¬ 
nounced  last  week  the  formation 
of  a  new  technical  committee  to 
promote  adoption  of  pubtic-key 
infrastructure  (PK()  technology 
for  Web  services  and  other  appli¬ 
cations.  The  Billerica.  Mass.- 
based  group  plans  to  put  out 
white  papers,  implementation 
guidelines  and  conformance 
tests  to  increase  awarertess  and 
use  of  digHal  certificates.  Terry 
Leahy,  a  vice  president  at  Wells 
Fargo  &  Co.,  is  chainnan  of  the 
new  committee.  Verufor  support¬ 
ers  include  Baltimoro  Technolo- 
gies  PLC.  Computer  Associates 
International  Inc..  Entrust  Inc., 
Neucom  Corp..  RSA  Security. 
Sun  Microsystems  Inc.  and 
VeriSign  Inc. 


Digital  Rights 
Dominate  2002  Awards 


Given  the  year’s  events,  it  should 
come  as  no  surprise  that  digital  rights 
dominate  my  2002  “You  Can't  Be 
Serious”  awards.  These  annual  awards 
recognize  truly  astonishing  achievements 
in  IT  double-think. 

In  that  spirit,  the  “Beverage  Through  the  Nose" 
award  for  2002  goes  to  Congressman  Howard  Berman. 

Be  sure  not  to  indulge  in  any  liquid  refreshment 
while  reading  Berman’s  statements  about  peer-to-peer 
networking  published  at  www.house.gov/berman.  In 
one  amusing  argument,  he  suggests  that  companies 


should  be  held  blameless 
f(»r  breaking  into  your  net¬ 
work  to  search  for  copy¬ 
righted  content.  It  seems 
he  came  up  with  this  theo¬ 
ry  because  people  are  al¬ 
ready  given  the  leeway  to 
trespass  on  someone's  lawn 
to  retrieve  a  stolen  bicycle 
that's  in  plain  view.  To  be 

sure.  Richard  Ni.xon's  infa-  _ 

mous  Checkers  speech  MlRvbl 

was  more  inspired,  but 
Berman's  works  of  lunatic 
reasoning  show  great  promise. 

Microsoft  ranked  a  close  second  in 
this  category,  but  I  have  no  pity  for 
the  poor  fool  with  a  mouthful  of  gin¬ 
ger  ale  when  he  heard  Bill  Gates  first 
utter  the  words  Tmsfu'orfhy  Comput¬ 
ing  last  lanuary.  After  hearing  terms 
like  Zero  Administration  Windows. 
everyone  should  know  by  now  that 
it's  dangerous  to  drink  anything  car¬ 
bonated  during  an  announcement 
from  Redmond. 

Nevertheless.  Microsoft  docs  run 
away  with  three  major  awards  this 
year.  The  first  is  the  "Information  at 
Your  Fingertips"  award.  How  many 
times  has  this  happened  to  you? 

You're  at  a  company  party  shooting 
the  breeze  with  your  boss  about  the 


clever  plot  of  a  DVn 
movie  you  rented  and 
watched  yesterday.  But 
when  she  asks  about  the 
n.ime  of  the  movie,  your 
mind  gi>es  blank.  Until  re¬ 
cently,  you’d  have  to  \vait 
until  3  a.m.  for  the  name  to 
come  back  to  you. 

Now  the  information  can 

_  be  as  close  as  your  cell 

niM.ILC.  phone.  Every- time  you  use 
the  Windows  Media  Player 
"****“  to  watch  a  new  DVD.  it 
automatically  identifies  the  DVD  to  a 
Microsoft  server,  along  with  a  unique 
identifier  for  your  personal  player. 

the  next  time  you're  on  the  sp»ii 
for  the  name  of  some  DVD  you 
watched,  give  Microsoft  a  jingle  and 
•isk.  Someone  at  the  company  should 
know  the  answer. 

Naturally,  this  convenience  will  be 
unavailable  to  you  if  you  don't  use 
Windows  Media  Player.  Fortunately. 
Microsoft  devised  an  ingenious  plan  to 
prevent  you  from  accidentally  using 
less  capable  alternatives. 

Here's  how  h  works;  Along  with  au¬ 
tomatic  updates  to  software  and  your 
end-user  agreement.  Windows  XP  pe¬ 
riodically  downloads  the  information 
it  needs  to  prevent  unapproved  media 


pLiyers  from  acct-ssing  DRM-enabled 
content. 

As  DKM.  or  digital  rights  manage¬ 
ment.  gains  momentum  and  all  your 
other  software  stops  wtirking.  VS'in- 
dows  Media  Player  is  sure  to  bciHime 
the  irresistible  choice  for  all  your  en- 
tenaiiiniem  needs. 

TTiis  ability  to  assert  remote  control 
over  your  software  cams  the  conipan) 
the  "Zero  Degrees  of  .^‘paratiiin" 
award  for  2002.  Granted,  you  could 
miss  »»ui  on  features  like  this  if  you 
diui'l  have  a  PC.  but  it’s  safe  to  .issume 
that  Micn>?a»f[  has  similar  plans  for  the 
Xbox  .ind  that  companies  such  as  Dis- 
tK‘\  and  Sons  arc  hard  at  work  figuring 
out  how  to  control  your  access  to  c<ip\  • 
righted  media  on  standard  players  Ik't- 
ter  watch  iHii.  Micn>s*>ft.  or  one  of  ifK*S4,* 
other  companies  could  nudge  you  out 
of  first  place  in  this  categors'  next  year! 

The  third  award  for  Microsoft  is  the 
coveted  “Ignorance  Is  Bliss  '  prize  for 
2D02.  The  fact  that  sane  people  still 
use  Windows  or  Media  Pbyer  testi¬ 
fies  to  how  well  the  company  has 
been  .able  to  pixuect  its  customers 
from  inforntiiiion  about  what  ihesv- 
products  are  doing  without  their  in¬ 
formed  consent. 

Finally.  Ximian  Inc.  walks  away  w  ith 
"The  Mouse  That  Squeaked"  award 
for  continuing  to  repr»>dt»ee  the  .Net 
development  framework  as  an  open- 
source  project  called  Montv  The  value 
of  Mono  eludes  me.  but  perhaps 
there's  a  secret  eomingeni  of  open- 
source  programmers  itching  to  write 
code  in  Visual  Basic  .Net. 

Nevertheless,  only  delusions  of 
grandeur  could  aeetiunt  for  the  notion 
that  Microsoft  w*on't  bankrupt  Ximian 
and  stop  the  project  on  claims  of 
patent  violations  (Ik-  moment  Mono 
poses  a  threat.  I 


WMT  OUR  OPINION? 
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Want  to  cut  your  IT  costs  without  sacrificing 
performance?  PRIMEPOWER  Servers  from  Fujitsu. 

■  The  secret  is  out.  PRIMEPOWER'*Solaris’‘-compatible 
servers  from  Fujitsu*  deliver  a  major  breakthrough  in 
prtce/performance  compared  to  our  more  farrtous 
competition.  Want  proof?  PRIMEPOWER  servers  offer 
such  an  advantage  that  the  world’s  leading  com¬ 
panies  use  them  to  boost  their  performance.  And  there’s  a 
PRIMBOWER  server  that’s  right  for  any  application  you  need — 
from  single  CPU,  rack-mounted  servers  to  enterprise-ready 
systems  that  scale  to  128  CPUs  for  unsurpassed  performance  in 
the  data  center. 

Of  course,  it's  not  just  the  hardware  you’re  buying.  It’s  also 
Fujitsu’s  30+  years  of  experience  supporting  high-perform¬ 
ance,  mission-critical  systems.  We've  already  helped  many 
companies  consolidate  their  IT  infrastructures  and  lower  their 
Total  Cost  of  Ownership.  Our  free  white  paper.  The  Why  and 
How  of  Server  Consolidation,  explains  how.  Get  your  copy  at 
www.ftsi.fujitsu.com/ad.  Or  call  (877)  905-3644. 

^  FUJITSU 


THE  POSSIBILITIES  SHE  I  ■  F I  I  I T  E 


QUOTE  OF  THE  WEEK 

n  the  long  rwi  lent 
9  consultants  get  more  busi- 
‘n  the  contract  upfront 
as  one  of  tire  deiveraUes.  Thn  is  a  good  place 
to  separate  good  consultants  from  M  ones.” 


VUVI  K  wr  I  nK  MKKfl 

##  KimMgtlmiierint 
BB  Doing  to  halp  consuttant 
nos*.  So,  maka  sura  H’s  in  the 


■uthof  and  fannw  IT  contuKinl.  Pm>  44 


OPINION 

Whan  to  Lbsm  Vtour 
Calciilalor  in  the  Drawer 

Not  all  IT  investments  require  ROI  and 
other  fmancial  modeling  upfront  Some* 
times  managerial  experience  and  know¬ 
how  are  &r  ntore  valuable  than  any  c^cula- 
tor.  writes  columnist  John  Berry.  P1W0  45 


High  AiuMty 

Dread  and  uncertainty 
can  hurt  an  IT  group. 
Consultant  and  autl^ 
Jefihey  A.  Miller  tells  how 
to  recognize  anxiety  and 
what  steps  you  can  take  to 
alleviate  it  Paot43 


Fnd  and  fix  Wo  of  your  soft¬ 
ware  bugs,  and  90%  of  your 
system  problems  go  away,  say 
experts.  By  Alan  S.  Horowitz 


BITING 
BACK 


BUGS  ARE  SMALL.  Usually.  Un¬ 
less,  Of  course,  they  are  of  the  software 
kind,  in  which  case  they  can  grow 
quite  large  and  become  hugely  expen¬ 
sive  to  fix.  The  Sustainable  Conqniting 
CoostMtiuin.  a  collaboration  of  major 
corporate  IT  users,  university  re¬ 
searchers  and  government  agencies, 
estimates  that  bt^gy  or  Bawed  soft¬ 
ware  cost  businesses  SITS  billion 
worldwide  in  TOOL  In  the  U.S„  soft¬ 
ware  bugs  cost  conqumies  nearly 
$60  billion  per  year;  according  to  the 
rftmtwrre  IVpartmeiir^s  Nartnmal  In- 
stitute  of  Standards  and  Ibctux^ogy 
(NIST).  More  important  is  that  one- 
third  of  these  costs  could  be  eliminat- 
ed  with  improved  testing  that  catches 
errors  earlier  in  the  software  develop¬ 
ment  im)cess.  NIST  says. 

Smart  CIOs  ace  creating  comprdien- 
sive  strat^ies  to  test  for  and  fix  bugs 
in  both  off-the-shelf  software  and  ^ 
(idkations  created  in-house.  Hiey 
know  that  bugs,  like  infectkms,  fester 
the  longer  they  bang  around  and,  as  a 
result,  cost  more  m 
deal  with  when  left 
unchecked. 

Gartner  Inc. 
analyst  Theresa 
Lanowitz  says  a 
software  defect 
left  unfixed  until 
late  in  the  devel¬ 
opment  cycle  costs  80 
to  LOGO  times  more  to  fix  than  it 
would  if  h  was  dealt  with  eartiec.  No 
company  is  immune  to  the  potential 
<j(  software  bugs,  which  is  wdiy  a 
comprehensive  j^an  for  dealii^  with 
th^  is  criticaL 

“Bugs  are  a  way  of  life.  You 
have  to  accept  tlm,“  says 


Vivek  Wadfawa.  CEO  of  Rcbthity 
Technologies  Inc.,  a  software  vendor 
in  Cary.  NXL 

“Every  piece  of  software  will  have 
bugs  in  it.“  agrees  Lanowitz. 

Some  are  more  easily  recognized 
than  others.  For  example.  CIO  Jose 
Marrero  and  his  team  at  Ageo  Corp..  a 
S2J  billkm  manufacturer  and  distribu¬ 
tor  of  agricultural  equipment  in  Du¬ 
luth,  Ga.,  receittly  tluM^lht  they  were 
updatii^apanicularrecordinadata- 
when,  in  feet,  because  of  a  bug, 
the  strfhvare  was  updating  a  different 
field 'Hie  cost  to  analyze  and  fix  the 
problem:  S3(LOOO  to  $40,000. 

Human  Bug  Busters 

Ejqteits  say  software  quality  assurance 
is  as  muefa  a  people  issue  as  it  is  a  tech¬ 
nical  one.  “If  you  don't  change  the  way 
people  work,  h  won't  help.  To  solve 
quality  problems,  you  have  m  change 
what  software  peof4e  do.“  says  Watts 
S.  Hunif^trey.  a  feUow  at  Carnegie 
Melloa  University's  Software  Engi¬ 
neering  Institute. 

The  institute  trains  programmers 
and  engineers  to  work  in  self-directed 
teams  and  to  manage  their  work.  They 
become  owners  of  their  plans  and 
processes  aikd  therefore  take  ntore 
responsibility  for  the  quality  of  their 
products  upfront  As  a  result  says 
Humphrey,  ei^ineers.  who  might 
^lend  upward  of  50%  of  their  time 
testing  software  after  it's  devekqted. 
now  devote  as  little  as  10%  of  tb^ 
time  to  postdevelopment  testing. 

Regular  communicatioo  among  setft- 
ware  developers  and  all  stakdMlden, 
induding  users,  is  also  essential. 
Laiwwitz  recommends  that  software 

Continued  on  pqge  40 
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CfjnonueJ/rom  paj.v 
Jcvolopmi’m  pn>KVt  teams,  which 
should  include  the  development  man¬ 
ager.  lest  manayer  and  business  cham¬ 
pion.  meet  weekly,  with  the  same  par¬ 
ticipants  attending  each  meetiii):  to  en¬ 
sure  that  everyone  involved  knows 
what  proftrc-ss  has  bei*n  nude  and  wh.it 
probk-ms  have  ari.sen.  If  bugs  are  hold¬ 
ing  back  a  project,  everyone  needs  to 
kno^v  as  early  as  possible.  - 

This  strategy’  t^Tically 

uvd  by  commercial  soft¬ 
ware  development  comp.i- 
nies.  but  not  by  user  com¬ 
panies.  says  lunowitz. 

Koster  Wheeler  Inc.,  a  de 
sign,  engineering  and  a»n- 
stniction  sen'ices  company 
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to  stop  lesimg  and  deploy 
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in  Clinton.  N.|..  has  created  Web-based 
Miftware  for  internal  use  called  Bug- 
tracks.  It  tracks  all  information  about 
bugs  in  real  time,  including  who  U 
working  on  any  given  bug.  who  is  ulti- 
nuiely  responsible  and  who  the  pro¬ 
ject  managers  are  i>n  both  the  business 
and  technical  sides.  Bugtraeks.  says 
Fi»stcr's  corp»*raie  IT  director.  Victor 
filaiceiti.  "allows  busint's.s  users  to  see 
what  the  status  of  bugs  is.  It  ties  the  ac¬ 
tual  developer  to  the  actual  business 
user.  The  benefit  is  ytiu  put  everybody 
on  the  same  sheet  of  music.’' 

But  harmony  isn't  always  the  result. 
One  reason  is  that  some  developers 
don’t  like  to  admit  that  they  are  the 
S4mrce  of  bugs,  which  is  understand¬ 
able.  "Developers  like  to  hide  their 
bugs.  They  regard  them  as  a  weakness 
or  infcrkirity."  says  Wadhwa.  Observ¬ 
ers  say  this  is  especially  true  «mce  the 
software  has  gtme  into  production. 

To  counter  this  problem,  lonathan 
( ;iark.  chief  technology  officer  at  soft¬ 
ware  tester  Vcri’Icsi  North  America  in 
Morrtsvillc.  N.C..  offers  fi¬ 
nancial  tnceniives  to  devel¬ 
opers  who  find  bugs  in  other 
developers'  software  during 
the  development  process  — 
say.  S50  to  SH)H  per  hil.  de¬ 
pending  on  the  severity  of 
the  bug.  Wjdhwa  gives  simi¬ 
lar  incentives,  plus  a  party  to 
the  learn  that  finds  the  most 
bugs  by  the  end  of  the  proj¬ 
ect.  Such  incentives  motivate 
devektpers  to  find  bugs  be¬ 
fore  the  software  Ls  deployed. 


But  first,  bugs  must  be  defined 
“Sometimes  the  linicmall  customer 
thinks  it’s  a  system  issue,  but  about 
of  the  time  we  have  bugs  reported 
by  customers,  it’s  mt*re  a  prtwess  or 
data  issue.”  says  An  Data,  vice  presi¬ 
dent  of  rr  at  International  Truck  and 
Engine  Corp.  in  W.irrenvillc.  111. 

Defining  Your  Terms 

When  someone  on  the  business  side 
can’t  do  what  he  expected  to  bcH  ause 
of  software  limitations,  he  calls  it  a 
bug-  But  the  developer  usually  views 
this  as  a  change  request,  because  the 
functionality  w-asn'l  initially  specified. 

For  example,  UK' analyst  ('hristine 
Tenneson  says  she  has  stvn  cases  in 

_  which  the  software  for  a 

database  covering  multiple 
regions  was  designed  with 
selections  for  only  general 
geographies,  such  as  the 
Americas,  but  users  wanted 
to  select  by  country.  Users 
call  this  a  bug;  developers 
call  it  a  change  request. 

For  this  reasim.  Andrei  Chiwis.  CIO 
at  tJonverium  Reinsurance  Inc.  in 
Stamfttrd.  Conn.,  dws  what  might 
seem  obvious:  He  requires  users  to 
sign  off  when  they  define  their  re¬ 
quirements  and  after  they  test  in 
terms  of  performance.  'Iliis  forces 
users  to  think  upfront  abi>ut  what  they 
want.  c;hi\'vis.says. 

Before  he  implemented  this  formal 
sign-off  process,  users  were  involved 
with  software  development  but  fre¬ 
quently  didn’t  think  (hing.s  through  to 
the  finished  product.  It  was  believed 
that  if  changes  needed  to  be  made  lat¬ 
er.  that  was  fine.  ’I’his  fended  to  short¬ 
en  the  development  time  but  caused 
more  headaches  after  the  software  was 
created.  Chivvi.s'  is  trying  to  change 
this  problem  with  his  new  strategy, 
which  he  acktutwledgcs  is  a  difficult 
culture  change.  Users  need  to  under¬ 
stand  (hat  unce  the  testing  begins, 
specifications  don’t  change. 

A  debugging  strategy  mu.st  also  in¬ 
clude  the  programmers,  notes  David  !. 

Agan-s,  author  of  Debugging: 
The  9  /ndispensob/e  Rules  for 
Finding  Fven  the  Most  Elusive 
Software  and  Hardware  /'rob- 
lems  (Amacttm  lUuiks.  2002). 
“'I'he  as-sumption  is  that  be¬ 
cause  they  have  a  degree  in 
engitK-cring,  they  know  how 
to  debug.”  Nirt  (rue.  Agans 
says.  Developers  often  ap- 
priKurh  debugging  as  pu/zle- 
solving.  but  it’s  actually  more 
investigative,  a  la  SherliKrk 
Holmes,  he  s;tys.  .So  tnin 
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your  developers  in  debugging. 

To  accommodate  the  growing  num¬ 
ber  of  external  users.  Bob  Grawicn. 
vice  president  of  application  dcvclop- 
nKni  at  trucking  firm  Schneider  Na¬ 
tional  Inc.  in  Green  Bay.  Wis.,  imple¬ 
mented  a  comprehensive  testing  pro¬ 
cedure  to  be  used  during  the  in-housc 
development  process.  It  begins  with 
testing  specific  features  in  an  isolated 
environment  on  a  developer's  worksta¬ 
tion.  followed  by  testing  in  an  isolated 
system-level  envinmmcni.  Next  comes 
application  load  testing,  scalability 
testing  and.  finally,  a  user  acceptance 
test.  Ail  of  this  is  aimed  at  preventing 
bugs  from  making  it  into  production. 

When  bugs  do  creep  through  Schnei¬ 
der’s  process  and  are  found  in  produc¬ 
tion,  there's  an  11'  help  dcidt  for  users  to 
call  If  that  group  can’t  determine  the 
cause  of  the  pmblem.  it  nutves  up  to 
the  next  group,  whose  gib  is  to  keep 
production  running.  If  the  bug  is  still 
running  around  unchecked,  (he  devel¬ 
opment  team  is  brought  in.  This  escala¬ 
tion  process  lets  the  development  team 
focus  primarily  on  development,  while 
others  deal  with  bugs  first. 

.Schneider's  bug  management  pnv 
gram  has  also  implemented  consistent 
ways  to  notify  users  of  problems.  For 
example,  if  a  logistics  applic.'ition  has 
a  bug,  IT  has  a  list  of  users  it  calls 


to  alert  them  to  a  problem  in  produc¬ 
tion.  let  them  know  what  the  ramifica¬ 
tions  might  be  and  tel!  them  when  to 
expect  the  software  to  be  up  and  run¬ 
ning  again. 

“We  lend  to  view  the  world  as  an 
iron  triai^lc:  people,  process  and  tech¬ 
nology.”  notes  Grawien.  Prejcct  man¬ 
agers.  for  instance,  arc  given  well-de¬ 
fined  deliverables  and  responsibilities. 

’I'he  company  recently  built  isolated 
systems  for  a  wide  range  of  tests,  with 
the  goal  of  providing  consistent  quality 
improvement.  And.  on  the  technology 
side,  it  has  invested  in  hardware  and 
software,  including  a  Segue  Software 
Inc.  u»ol  that  simulates  multiple  users, 
and  a  Sitraka  Inc.  software  tool  that  an¬ 
alyzes  software  performance.  Schnei¬ 
der  also  provides  training  on  the  tools 
for  its  development  teams. 

Menasha  Corp.,  a  manufacturer  of 
packaging  materials  in  Necnah,  Wis., 
goes  a  step  further. 

“It's  not  enough  (to  tcstl  that  the 
software  ran  to  completitm.  We  put  a 
business  model  against  it  to  validate  it 
will  respond  in  production.”  says  CIO 
Ed  Wojciechowski. 

Testers  cunsoiidaic  a  number  of 
scripts  for  bu.sincss  processes,  such  as 
processing  a  sales  order  to  ship  a  prod¬ 
uct.  They  then  compare  the  software 
against  historical  trends,  which,  among 
other  things,  indicates  how  wcil  cur- 
rent  software  works  for  the  same  busi¬ 
ness  processes  from  a  profit-and-loss 
perspective.  It's  not  enough  that  the 
new  software  works  (echnicaliy:  it 
must  perform  better  than  what  it's  re¬ 
placing  in  (he  real-world  production 
setting,  he  says. 

It's  estimated  (hat  less  than  3%  of  in¬ 
sects  are  actually  pests  in  the  natural 
world.  VcriTcst's  Clark  says  something 
similar  happens  with  software:  "One 
percent  of  software  bugs  tend  to  cause 
90%  of  the  problems.  [Fixingl  your  top 
10  bugs  would  solve  so  much  of  yinir 
problems." 

Software  bugs  can't  be  eliminated 
any  more  than  all  the  insecticides  in 
the  world  can  clinlinate  creepy  bugs. 
But  experts  conclude  that  if  you  focus 
on  (he  peskiest  ones,  you'll  go  a  long 
way  toward  eliminating  most  of  your 
bug-related  headaches,  ft 

Horowitz  is  a  freelance  business  and 
technology  writer  in  Salt  lake  City. 
Contact  him  at  alan[q>horowitz.com. 

A  DEBUGGING  PRIMER 

Go  Id  our  Web  site  to  read  an  excerpt  o(  David  J.  Agans 
new  tXMli  on  developing  a  debugging  strategy 
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Continued  from  page  39 
development  project  teams,  which 
should  include  the  development  man¬ 
ager,  test  manager  and  business  cham¬ 
pion.  meet  weekly,  with  the  same  par¬ 
ticipants  lending  each  meeting  to  en¬ 
sure  that  everyone  involved  knows 
what  prepress  has  been  made  and  what 
problems  have  arisen.  If  bugs  are  hold¬ 
ing  back  a  project,  everyone  needs  to 
know  as  early  as  possible.  - 

This  strata  is  typically 
used  by  comroerdal  soft¬ 
ware  develt^ment  compa¬ 
nies.  but  not  by  user  com¬ 
panies,  says  Lanowitz. 

Foster  Wheeler  Inc.,  a  de¬ 
sign,  engineering  and  con¬ 
struction  services  company  - 

in  Clinton.  N.).,  has  created  Web-based 
software  for  internal  use  called  Bug- 
trades.  It  tracks  all  infonnation  about 
bugs  in  real  rimg,  including  who  is 
working  on  any  given  bug.  who  is  ulti¬ 
mately  responsible  and  who  the  pro¬ 
ject  managers  are  on  both  the  business 
and  technical  sides.  Bugtracks,  says 
Foster’s  corporate  IT  director,  Victor 
Slaicetti.  “aUows  business  users  to  see 
what  the  status  of  bugs  is.  It  ties  the  ac¬ 
tual  devekq>er  to  the  actual  business 
user.  The  benefit  is,  you  put  everybody 
on  the  same  sheet  of  music." 

But  harmony  isn’t  always  the  result. 
One  reason  is  that  some  developers 
don't  like  to  admit  that  they  are  the 
source  of  bugs,  which  is  understand- 
d>ie.  "Developers  like  to  hide  their 
bugs.  They  r^ard  them  as  a  weakness 
or  inferiority;"  says  Wadbwa.  Observ¬ 
ers  say  this  is  especially  true  once  the 
softwwe  has  gone  into  production. 

To  counter  this  probiem,  Jonathan 
dark,  chief  technology  o0ker  at  soft¬ 
ware  tester  VeriTest  North  America  in 
MorrisvUle.  RC.  offers  fi- 
nandal  incentives  to  devel¬ 
opers  who  And  bugs  in  other 
developers’  software  during 
the  development  process  — 
say.  &0  to  $100  per  hit,  de¬ 
pending  on  the  severity  of 
the  bug.  Wadbwa  gives  simi¬ 
lar  incentives,  plus  a  party  to 
the  team  that  flnds  the  most 
bugs  by  the  end  of  the  proj¬ 
ect  Such  incentives  motivate 
developers  to  find  bugs  be¬ 
fore  the  software  is  deployed. 


But  first,  bugs  must  be  defmed 
"Sometimes  the  [internal]  customer 
thinks  it's  a  system  issue,  but  about 
90%  of  the  time  we  have  bugs  reported 
by  customers,  it’s  more  a  process  or 
data  issue,"  says  Ait  Data,  vice  presi¬ 
dent  of  IT  at  International  Thi^  and 
Engine  Corp.  in  WarrenvUle.  DL 

Defining  Ybur  Terms 

When  someone  on  the  business  side 
can't  do  what  be  expected  to  because 
of  software  timitations,  be  calls  it  a 
bug.  But  the  developer  usuaUy  views 
this  as  a  diange  request,  because  the 
functionality  wasn’t  initially  specified. 

For  example,  IDC  analyst  Christine 
Tennesoo  says  she  has  seen  cases  in 

_  v^ich  the  software  for  a 

database  covering  multiple 
regiims  was  designed  with 
selections  for  only  general 
geographies,  such  as  the 
Americas,  but  users  wanted 
to  select  by  country.  Users 
call  this  a  bug;  developers 

-  call  it  a  change  request 

For  this  reason,  Andrei  Chiwis.  CIO 
at  Converhim  Reinsurance  loc.  in 
Stamford,  Conn.,  does  whiu  mi^t 
seem  obvious:  He  requires  users  to 
sign  off  when  they  define  their  re¬ 
quirements  and  after  they  test  in 
terms  of  performance.  This  forces 
users  to  think  upfront  about  what  they 
want,  Chiwis  says. 

Before  he  implemented  this  fonnal 
s^-off  process,  users  were  involved 
with  software  development  but  fre¬ 
quently  didn’t  think  things  throufdi  to 
the  Hnisbed  product  It  was  believed 
that  if  changes  needed  to  be  made  lat¬ 
er.  that  was  fine.  This  tended  to  short¬ 
en  the  development  time  but  caused 
more  beadadkcs  after  the  software  was 
created.  Chiwis  is  trying  to  chan^ 
this  problem  with  his  new  strategy, 
wdiicb  be  acknowledges  is  a  difficult 
culture  change.  Users  need  to  under¬ 
stand  that  once  the  testing  begins, 
spedflcatioQS  don't  change. 

A  debugging  strategy  must  also  in¬ 
clude  the  programmers,  notes  David  J. 
Agans,  author  of  Debugging: 
The  9  Indt^>ensabfe  Rules/br 
Finding  Even  dteMoaEluave 
St^ivKtre  and  Heuxiware  Prob¬ 
lems  (Amacom  Boc^  2002). 
'The  assumption  is  that  be¬ 
cause  tiiey  have  a  degree  in 
engineering,  they  know  bow 
to  debug."  Not  true,  Agans 
says.  Developeis  often  ap¬ 
proach  debt^^ng  as  puzzle- 
solving,  but  it’s  actually  more 
investigative,  a  la  Sherlock 
Holmes,  be  says.  So  train 
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your  developers  in  debugging. 

To  accommodate  the  growing  num¬ 
ber  of  external  users,  Bob  Grawicn, 
vice  president  of  application  develop¬ 
ment  at  trucking  firm  Schneider  Na¬ 
tional  Inc  in  Green  Bay.  Wis..  imple¬ 
mented  a  comprehensive  testing  pro¬ 
cedure  to  be  used  durii^  the  in-house 
development  process.  It  begins  with 
testing  specific  features  in  an  isolated 
environment  on  a  developer’s  worksta¬ 
tion.  followed  by  testing  in  an  isolated 
system-level  environment  Next  comes 
application  load  testing,  scalability 
testing  and,  finally,  a  user  accq>tance 
test  AU  of  this  is  aimed  at  preventing 
bugs  from  making  it  into  production. 

When  bugs  do  creep  th^gb  Schnei¬ 
der's  process  and  are  found  in  produc¬ 
tion,  there's  an  IT  help  desk  for  users  to 
call  If  that  group  can^  determine  the 
cause  of  the  problem,  it  moves  up  to 
the  next  group,  vdiose  job  is  to  keep 
production  running.  If  the  bug  is  still 
running  around  uiKhecked,  the  devel¬ 
opment  team  is  brought  in.  This  escala¬ 
tion  process  lets  the  development  team 
focus  primarily  on  development  while 
others  deal  with  bugs  first 

Schneider’s  bug  management  pro¬ 
gram  has  also  implemented  consistent 
ways  to  notify  users  of  problems.  For 
example,  if  a  logistics  application  has 
a  bug,  IT  has  a  list  users  h  calls 


to  alert  them  to  a  problem  in  produc¬ 
tion.  let  them  know  what  the  ramifica¬ 
tions  m^t  be  and  tell  them  when  to 
expect  the  software  to  be  up  and  run¬ 
ning 

"Wc  tend  to  view  the  world  as  an 
iron  triangle:  people,  process  and  tech- 
DoiogY,''  notes  Grawien.  Project  man¬ 
agers.  for  instance,  are  given  well-de¬ 
fined  deliverables  and  responsibilities. 

The  company  recently  built  isolated 
systems  for  a  wide  range  of  tests,  with 
the  goal  of  providing  consistent  quality 
improvement.  And.  on  the  technology 
side,  it  has  invested  in  hardware  and 
software,  including  a  Segue  Software 
Inc  tool  that  simulates  multiple  users, 
and  a  Sitraka  Inc  software  to^  that  an¬ 
alyzes  software  performance.  Schnei¬ 
der  also  provides  training  on  the  tools 
for  its  development  teams. 

Menasha  Corp.,  a  manufocturer  of 
packagirig  mate^Ls  in  Neenah,  Wis.. 
goes  a  step  further. 

"It’s  not  enough  [to  test]  that  the 
software  ran  to  completion.  We  put  a 
business  model  against  it  to  vali^te  it 
will  respond  in  prodtictioa'  says  CIO 
Ed  Wojciecbasraki 

Testers  consolidate  a  munber  of 
scripts  for  buriness  processes,  such  as 
processing  a  sales  order  to  ship  a  prod¬ 
uct  They  then  compare  the  software 
against  historical  trends,  wfakfa,  among 
other  things,  indicates  how  well  cur¬ 
rent  software  wiKks  for  the  same  busi¬ 
ness  processes  from  a  proftt-and-ioss 
per^iective.  It’s  not  enough  that  the 
t»ew  software  works  technically;  it 
must  perform  better  than  what  it's  re¬ 
placing  in  the  real-world  production 
setting,  he  says. 

It's  estimated  that  less  than  3%  of  in¬ 
sects  are  actually  pests  in  the  natural 
world.  Vernhsf  s  Clark  says  something 
similar  happens  with  software:  "One 
percent  of  software  bugs  tend  to  cause 
90%  of  the  problems.  [Fixing]  your  top 
10  bugs  would  solve  so  much  of  your 
pioblenis." 

Software  bugs  can’t  be  eliminated 
any  mote  than  all  the  insecticides  in 
the  worid  can  eliminate  creepy  bugs. 
But  experts  conclude  that  if  you  focus 
on  the  peskiest  ones,  youll  go  a  long 
way  toward  eliminating  most  of  your 
bug-related  headaches.  9 

Horowitz  is  a.ftee2ance  business  and 
technology  writer  in  Salt  Lake  City. 
Contact  him  at  alan@horowitz.com. 
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Is  your  hosting  performance 
on  the  line? 

You  bet  it  is. .  .because  hosted  applications  are  the  Itfeline  of  your  busmess. 

Which  is  predsdy  why  enterprises  like  l-800-FLOWB<S.COM*\  ImageMax*.  Nutrisystem.com*, 
ar>d  the  US  Gen^  Services  Administration  are  hosting  their  mission  critical  applications  with  AT&T 
arxi  protecting  their  online  business  with: 

■  The  performance  advantages  of  a  2^t365  predtaive  management  platform. 

■  The  stability  security,  and  rekabiQf  of  AT&T%  global  data  centers. 

■  The  scabbdityorvdemarKi  capacity  and  ultra-avaibbiity  of  AT&*ns  enterprise  network  solutions, 
■i  The  industry4eacfing  portal  and  reporting  services  for  optimum  control  »xl  visibili^. 

■  The  assurance  that  they  are  supported  by  the  expertise  and  resources  of  AT&T 

Bottom  line,when  performance  matters.  oourK  on  AT&T  to  help  keep  your  busir>ess  movirc  forward. 
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NOW 


There^  never  been  a  better  time  to  call  ATftT. 

Contact  your  AT&T  Account  Representative  or  call  I  866  365-2344, 
or  visit  www.att.com/perfDrmance. 
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When  Hie  Plug 
Gels  Pulled 


How  to  survive  and  maybe 
even  thrive  in  the  wake  of 
a  canceled  IT  project. 
ByMindaZetiin 


CAREERS 


IN  A  p«Evious  )OB  at  a  large  reftning 
company.  IT  director  Bob  Ghirlanda 
spent  a  year  putting  together  a  plan 
to  install  a  computerized  maintenance  management 
system.  V^th  the  system  q>eciikatioas  and  ROI 
analy^  in  place.  Ghirlanda  went  to  worlt  implement¬ 
ing  the  proiecL  Then  things  started  to  go  wrong. 

Executives  had  selected  software  that  seemed  to 
fit  their  corporate  goals,  but  it  wasn't  the  ri^  soft¬ 
ware  for  the  company's  technology  needs.  Faced 
with  growing  concerns,  the  company’s  CIO  decided 
to  cancel  the  project,  and  Ghirianda  agreed  with  this 
deci^a  "We  could  not  assure  corporate  leadership 
that  the  protect  would  be  a  success."  he  says. 

In  these  days  of  economic  uncertainty,  caikceled 
protects  are  a  foct  of  life.  Altbou^  it's  never  a  pleas¬ 
ant  experience,  h  doesn’t  have  to  be  a  dd>ilitating 
career  setback  for  an  IT  protect  manager.  The  key  is 
bow  you  handle  the  cancellatioa  Here’s  some  advice 
from  those  who  have  been  there  on  how  to  survive 
after  the  is  pulled. 

■  Oml  tihi  X  pvMMly.  "Most  of  the  time,  it’s  not 
that  the  team  was  doing  things  badly,"  says  Jeff  Chas- 
ney,  CIO  at  S3  billion  CKE  Restaurants  Inc.  in  Santa 
Barbara,  Calit  Chasney  characterizes  himself  as 
a  "turnaround  CIO"  who  is  often  hired  to  make 
changes  in  troubled  IT  organizations.  He  says  be  has 
canceled  at  least  12  major  projects  in  the  past  few 
years  —  including  the  one  Ghirlanda  was  working 
on.  "Better  than  50%  were  because  the  company  was 
changing  directfon."  he  notes.  "In  other  cases,  it  was 
the  right  project  at  the  wrong  time,  or  it  didn't  match 
the  organization’s  culture." 

■TrailiMaeMi9MiiM.Dotbethii^you  would 
after  a  successful  cmnpletioa  "It’s  really  important 
that  the  project  manager  does  the  regular  closeout 
activities."  says  Karen  White,  director  of  resource 
management  at  Project  Management  Solutions  Inc.. 


» tayi  moat  cmcriM  IT  prqf- 
I  dnagm,  ael  sWI  Wbras. 

a  consulting,  training  and  research  con^tany  in 
Havertown,  Pa.  As  b^  a  consultant  and  an  internal 
project  manager,  she  has  been  through  several  proj¬ 
ect  cancellations  in  her  career. 

"Close  the  files  in  an  orderly  way.  do  the  team 
awards  and  lessons  teamed,"  White  says.  "You  need 
to  recognize  that  there’s  a  grief  period  and  help  the 
team  through  it  —  and  still  have  the  ending  celebra¬ 
tion  to  say.  'We  took  our  best  shot.’  This  is  important 
for  team  morale.” 

■  khlw  sura  liw  tMHi  in’t  bimnd  "Both  the  project 
manager  and  the  project’s  business  sponsor  need  to 
make  sure  the  team  is  not  labeled  as  a  failure."  White 
says.  For  instance,  a  major  project  White  was  work¬ 
ing  on  at  a  Tmancial  services  company  was  canceled 
when  the  firm  was  acquired 

"We  made  sure  the  team  got  awards  and  recogni¬ 


tion  and  bonuses,"  she  says.  "It  wasn’t  their  fault  the 
corporation  was  sold” 

■  Kmp  your  aya  mrt  for  llw  Mft  pniJacL  “A  project  can 
always  be  canceled  so  it's  important  to  net¬ 
working,”  Ghirlanda  says.  White  advises  project 
managers  to  keep  their  skills  and  certifications  cur¬ 
rent  "Dcm’t  always  have  lunch  with  your  project 
team  —  eat  with  other  folks  from  your  company  as 
well,"  she  counsels.  In  effect  White  says,  "you're  al¬ 
ways  interviewing.” 

■  Ijvn  frem  t.  "I  look  for  whether  people  have 
learned  the  lessons  of  a  canceled  project"  Chasney 
says.  Fbr  instance,  be  says,  if  a  project  was  canceled 
because  of  spiraling  expenses,  "I  expect  to  see  for 
nu>re  diligence  and  for  them  to  be  watching  the  bud¬ 
get  numbers  more  closely." 

In  some  cases,  the  company  and  the  project  manag- 
er  are  simply  a  bad  fk.  Th^  the  ccmdusion  Ghirlanda 
reached  a^  his  maintenance  project  was  oire  of  a 
whole  suite  canceled  by  the  refining  company.  About 
a  year  later,  he  began  looking  for  other  opportunities, 
and  he's  now  a  reliability  systems  planning  manager 
at  Eastman  Kodak  Ca  Of  his  old  firm.  Ghirlanda  says, 
"It  became  dear  they  weren’t  going  to  invest  the  re¬ 
sources  in  IT  projects."  I 


Zeflin  (minda^mndazetUnjCom)  is  a  writer  in 
Woodstock,  N.Y.  Her  latest  book  is  Teteconunutiiig 
for  Dummies  (Hungry  Minds,  200J). 
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Dread  and  uncertainty  can  hurt  an  U' 
groiq).  What  to  do?  By  Kathleen  Melymuka 


An  it  manager  and  a  pro¬ 
grammer  at  a  large  East¬ 
ern  Irozen  food  company 
were  locked  in  mortal 
combat  “Bob.”  the  pro¬ 
grammer.  was  working  60-  to  80-bour 
weeks  for  “Larry.”  his  manager.  But  Bob 
thought  that  Larry  didn’t  appreciate  his 
efforts  aiKl  that  be  often  thi^  back  per¬ 
fectly  good  code  as  unacceptable.  Bob 
was  so  distrau^i  that  he  was  UteraUy 
hiding  from  Larry. 

Larry  was  equally  annoyed  at  Bob. 
vdrase  woric  he  considered  substan¬ 
dard.  He  wanted  Bob  out.  but  he  knew 
that  if  he  fired  him,  the  IT  department 
would  miss  a  critical  deadline. 

When  organizational  consultant  Jef¬ 
frey  A.  Miller  was  brought  in.  he  found 
that  the  problem  was  neither  Bob  nor 
Larry:  It  was  the  anxious  atmosphere  of 


the  organization  where  they  worked. 

A  little  anxiety  can  be  a  good  thing, 
as  when  keen  competition  forces  com¬ 
panies  to  work  smarter.  But  when  orga¬ 
nizational  anxiety  rises  and  isn’t  han¬ 
dled  well  —  when  employees  begin  to 
blow  up  or  hide  out  —  productivity 
can  suffer  in  unpredictable  ways. 

The  root  of  Larry’s  and  Bob's  anxiety 
was  that  their  company  had  just  made 
a  huge  acquisition,  and  the  IT  group 
had  been  charged  with  integrating  the 
two  information  systems  within  a  time 
frame  rhat  seemed  impossible  to  them. 
To  "laicp  maners  worse.  Larry’s  boss, 
“Ted.”  was  playing  out  his  own  stress  by 
micromanaging,  adding  to  the  tension, 
AikI  his  “overfrinctioning”  was  affecting 
people's  performances  by  leading  them 
to  “underfunction,”  according  to  Miller. 

If  this  scenario  seems  familiar,  you 


may  be  working  in  an  anxious  organi¬ 
zation,  and  you  may  not  be  aware  of  it. 
says  Miller,  author  of  The  Anxious  Or¬ 
ganization:  Why  Smart  Companies  Do 
Dumb  Things  (Facts  on  Demand  Press, 
2002).  Organizational  anxiety  can  re¬ 
sult  from  inappix^riate.  unarticulated 
or  conflicting  goals,  time  pressure,  bad 
leadership,  mixed  messages  and  the 
helpless  feeling  that  you're  damned  if 
you  do  and  damned  if  you  don’t. 

Often,  people  like  Bob  and  Larry  de¬ 
flect  attention  from  the  real  problems, 
such  as  time  pressure  and  poor  leader¬ 
ship.  ‘Teople  think:  'Fix  them,  and  we 
fix  the  problem.'  *  Miller  says.  “But 
they  may  not  have  identified  the  prob¬ 
lems.  T^  b  very  common  in  IT.” 

“1  see  thb  type  of  anxiety  in  every 
shop  I  go  to.”  says  Tbm  Murphy.  CIO  at 
Royal  Caribbean  Cruises  Ltd.  in  Miami 

“I’ve  seen  cultures  where  interper¬ 
sonal  clashes  were  considered  good 
for  the  organization.”  says  Ed  BeU.  CIO 
at  Commonwealth  Financial  Netwotk 
in  Waltham.  Mass.  “Feuding  and  finger- 
pointing  are  offshoots  of  these  interper¬ 
sonal  clashes.  The  net  result  was  proj¬ 
ects  took  longer  or  never  got  started, 
turnover  was  hi^.  and  people  were  hes¬ 
itant  to  make  decbions  or  take  risks.” 

The  more  pet^le  focus  on  these 
syroptoins.  the  more  anxious  they  be¬ 
come  and  the  less  able  they  are  to  see. 
let  alone  solve,  the  real  pn^lems. 
Miller  says. 

Organizational  anxiety  can  also  af¬ 
fect  the  business  in  subtle  but  equally 
destructive  ways.  “In  the  face  of  con¬ 
sistent  and  acute  anxiety,  people  really 
puli  inward.”  says  Miller,  who  b  also 
president  of  lefftey  A.  Miller  &  Associ¬ 
ates  in  Chkaga  “They’re  not  likely  to 
be  very  creative  or  flexible  or  to  make 
decisions  other  than  the  same  ones 
that  have  always  been  made.  No  one 
wants  to  break  stride  from  the  pack 
when  anxiety  b  high.”  Thb  leads  to 
“group  think,”  which  keeps  indhriduab 
from  challen^ng  had  ideas. 

Because  change  can  breed  anxiety. 

IT  b  prone  to  it.  Miller  says.  But  IT 
people  can  also  alleviate  anxiety  if  they 
think  of  the  organizatioo  as  a  system. 
“Thb  bn't  psychology:  it's  systems.” 
Miller  says.  “Chai^  the  program  a  lit¬ 
tle.  and  you  might  get  it  to  run.” 

Miller  suggests  that  IT  managers 
start  with  their  own  relationships. 
“Deal  with  each  person  directly,  not 
throu^  someone  else.”  be  says. 

Meanwhile,  look  for  an  c^jportunity 
to  change  something  for  the  better. 

“It's  just  like  writing  code  or  plotting  a 
system.”  be  says.  “Once  one  part  of  a 
system  changes,  the  whole  system  b  de 
focto  differenL* 


“IT  professionals  are  re^xmsible  for 
change  within  the  organization.”  says 
Virginia  RcM>tns,  IT  director  at  Chela 
Financial  Cos.  in  San  Francisco.  TT 
drives  change.  Our  behaviors  drive  the 
culture  and  thus  influence  and  change 
the  culture  every  day.  We  are  either 
part  of  the  company's  positive  culture, 
or  we’re  the  problem.” 

Anxiety  and  calm  are  contagious. 
Miller  says.  If  you  can  calm  down  tbe 
system,  people  will  loosen  up  and  be¬ 
gin  to  address  tbe  real  problems. 

That's  what  happened  with  Bob.  Lar¬ 
ry  and  Ted.  Miller  helped  Bob  notice 
that  the  more  detail  be  added  to  bb 
woriu  tbe  less  Larry  complained.  Be¬ 
cause  Bob  didn’t  need  to  redo  hb 
woik,  be  went  home  earlier.  He  and 
Larry  began  to  work  out  a  better  rela¬ 
tionship.  Ted  stopped  micromanaging 
and  let  hb  staff  take  charge.  All  three 
found  that  as  they  stopped  feeding 
their  anxiety,  they  had  much  more  en¬ 
ergy  to  do  tbe  work.  Tbe  bottom  line: 
They  got  the  project  done  on  time.  I 

Melymuka  isa  Computerworid 
ccMUrilwrirtg  writer.  Conrocr  fier 
or  kmelyrmika(§>earthlinkj*et. 

UEYNHUYFHCliUL? 

1b  find  out.  go  oflina  «id  iMd  lib  book  asanz  koni 
JeftarAMIv's  ThtA/meusOrgmMon 
^(WdlM994» 


HowMghls 

TooH^^ 

f  IBT  MMT  to  Ml  of  tti  UtailV 
IT  dwiHi  ii  stoM%  too 


■  Imp 


44 


mmhimu  jHvr0.2Ni 


MMUDEMENT 


www.coinputerwCMid.com 


Comingln 
From  tfie  Cold 


Current  |ob 


Previous  positrons 


Most  recent  book- 


SiMt  fhmint,  chi^ 
strategist  in  the  tedtnoio- 
gy  group  at  Hoit^rd 
Fmaneial  in  Har^yrd, 
Con/L.  is  a  former  FT  consultant  and 
author  o/teldier  of  Fortune  500:  A 
Management  Survival  Guide  for  the 
Consulting  Wars  (Prometiteus  Books, 
2002).  In  his  book,  he  candidly  chroni¬ 
cles  his  experiences  as  a  highly  paid  IT 
consultant  for  IBM.  Bank  of America 
Corp„  Chase  ManhtUtan  Sank  Corp. 
and  odier  large  VS.  compames. 

Unlike  other  professions,  there  is  no 
licensing  requirement  far  consultants. 
Bomaine  points  out.  Ariyone  can  do  it 
And  they  do,  which  he  says  contributes 
to  a  culture  where  politics  rule  and  the 
most  mq)ortant  Directive  in  any  consult¬ 
ing  contract  is  to  secure  the  next  con¬ 
tract.  Romaine  says  he  wrote  the  book 
“to  provide  guidance  in  rect^gnising 
potential  abuses  and  ovoidirtg  them  in 
the  future.“  He  recently  talked  with 
CocDputerworld's  Julia  Kng. 

WW  hMn  «  both  iMn  of  tha  tanca. 
tWIwri  woiiri  you  say  prubtinu  t  itaurtMO? 


tMwl  an  tin  oariy  wanring  ai^  of  potandal 
aliaaa?  What  often  happens  is  a  consul¬ 
tant  comes  in  and  says.  ‘'We  have  a 
game  plan  we  used  before.  It‘s  a  best 
practice.  Get  someone  out  of  your 
business  unit  to  be  the  project  sponsor 
and  head  that  up."  Consulting  ftraks 
say  they  need  a  hi^-levet  sponsor  [at 
the  client  company]  because  it‘s  im¬ 
portant  to  make  sure  the  business  unit 
buys  ia  But  the  problem  is  that  the 
client  company  is  often  getting  such  a 
senior-level  executive  that  they’re  not 
there  to  run  the  prolect  on  a  day-to- 
day  basis.  Senior  executives  don’t  un¬ 
derstand  the  technology,  but  they  don’t 
want  to  appear  not  to  understand,  so  it 
creates  a  dependency  on  the  consul¬ 
tant.  That’s  a  huge  issue. 

Vn  niM  an  bitmatbig  issue  about  bast 
pracllcss.  ConstMig  firnis  lis  to  tout  thsir 
vortical  industry  npartioo.  But  wfisl  ssfos  is 
KtoCorBpanyBtohwsaoensuMnglnnds- 
ploy  ths  SOTS  sysloms  ami  pncaaaas  It  ds* 
pioyud  tar  Company  A.  sspacMy  N  thsy'ra  bi 
ths  sans  bubitani?  If  it's  something  that’s 
a  core  competency  of  your  business. 


something  you’re  hoping  wOl  give  you 
a  competitive  advantage,  don’t  bring  in 
consultants  who  will  learn  on  the  job 
[and]  then  go  across  the  street  and 
work  for  the  next  gtiy.  You  have  to  be 
careful  not  to  train  the  workforce  of 
your  competitor.  Sometimes,  best 
practices  make  a  lot  of  sense  if  you  can 
gain  competitive  information,  but  you 
have  to  put  parameters  around  it  to 
make  sure  you're  not  becoming  a  me- 
too  operation. 

If  a  company  can  identify  core  com¬ 
petencies  to  provide  competitive  ad¬ 
vantage.  that's  not  the  place  to  bring  in 
a  vertical  best-practices  consulting 
firm  who’s  going  around  to  all  of  your 
competitors.  On  the  other  hand,  it 
might  be  the  thing  to  do  if  you're  try¬ 
ing  to  figure  out  what  your  competi¬ 
tors  are  doing. 

Consdtanis  bfl  by  ths  hour.  wMcfi  can  get 
ealijmdtaarlyespeneivefaraiwpMiies.  Any 
tips  for  laaping  a  Id  on  their  hoin?  Con¬ 
sultants  get  cau^t  up  In  "analysis 
paralysis"  because  they’re  trying  to 
bill  out  as  much  as  they  can.  It  makes 
sense  for  companies  to  define  their 
(project)  requirements  before  they  hire 
an  outside  consultant  or  to  divide  up 
the  work,  because  there’s  a  conflict  of 
interest  if  you  hire  the  same  consulting 
firm  to  do  both  [the  requirements 
planning  and  the  implementation].  For 
example,  you're  not  going  to  see  a  firm 
writh  PeopleSoft  consultants  on  their 
bench  recommend  SAP. 

Vm  write  that  many  Gompantas  maka  the 
miataka  of  fatfngbig  hi  oonauKants  to  aolva 
puautai  aaignaig.  wnyooen  imatMoncf 

With  businesses  operating  so  much 
tighter  today  and  people  trying  to  re¬ 
duce  costs,  a  lot  of  companies  are  get¬ 
ting  back  to  alignment  between  busi¬ 
ness  and  IT.  There’s  still  a  lot  of  in¬ 
fighting  in  some  companies,  and  there 
are  turf  wars.  Consultants  come  in  and 
play  one  group  off  another. 

Here’s  a  perfect  example:  A  compa¬ 
ny’s  objective  is  to  eliminate  its  data 
silos  that  were  created  by  different 


busmess  units  all  using  different  appli¬ 
cations.  The  business  model  of  some 
consulting  firms  is  to  have  a  consulting 
partner  responsible  for  different  parts 
of  the  [client  company’s]  business.  At 
NationsBank  [now  part  of  Bank  of 
America),  we  had  a  consulting  partner 
responsible  for  check  processing  and 
another  partner  for  electronic  pay¬ 
ments.  lliey  were  competing  for  the 
same  business,  and  they  had  no  incen¬ 
tive  to  eliminate  the  silos.  One  guy  was 
there  to  get  the  check-processing  busi¬ 
ness,  and  the  other  guy  wanted  the 
electronic  payments  business. 

Conutting  compMtas  often  prantiM  to  train 
a  cinf  s  IT  imitan  ■)  they  can  mainlain 
^fstoma  onea  tha  culaidm  laava.  How  can  a 
company  anaure  timl  thia  aclualy  happans? 

Technical  complexity  is  a  best  friend 
for  some  consultants.  Knowledge 
transfer  in  the  long  run  isn't  going  to 
help  consultants  get  more  business. 

So  make  sure  it’s  in  the  contract  up¬ 
front  as  one  of  the  deliverables.  This 
is  a  good  pl«:e  to  separate  good  con¬ 
sultants  from  bad  ones.  I 
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Gartner’s  View  for 
m¥osin2003 

IT  prnlwriBnili  ahould  t»to  time 
in2003toanltinG«tNirpar- 
cttvtd  vikM  and  bttttr  uadar- 
ftmd  buinMi  priorMM.  Stem* 
ferd.  Cown.  hawd  Bartnar  he. 
advim.  Hara  art  atghi  gwMims 

a  Taka  invtnlory  of  your  tach- 
nology  and  buaineaa  kwadadge. 
Ba  honaat  about  bara  apola,  and 
aifnAd  your  knoadadga. 

a  6al  snart  about  tha  hay 
drtvon  of  your  company'i  busi- 
naaa.  Natworit  uMi  burinoaa 
counlarpafta  to  dbeoat  kair  ft’ 
nweW  and  oganlonaf  ofdaedivoa. 
Bacomalha  buafnaandoioadadoa 
laiaon  to  yow  IT  toam. 

■UanSfy  raquired  aondcaa.  By 
undaratandtog  your  buabiaaa,  you 
wBbaabtotoidonlifyandiniila- 
mant  aondcoa  dial  wii  halp  drtaa 
yov  campany'a  nictaaa.  Magra- 
tkm,  proem  iwlgbf  and  tmsadh 
iiyadibaandcboiDrds. 

a  Bacona  an  avaigroon  profaa* 
stonaL  Anua  amaiginQ  and  an* 


■Saab  laadartodp  cgportunitiea 
and  accauntabWty.  Thli  lan*l 
(ha  yav  to  lay  bar.  Margan  and 


ntanbar  of  proiacto  and  bdamal 
bdttattvaa.  Stop  igi  to  tha  ptola. 

■Straagthanyourbnoodadga 
of  buainaaa  prtoctofaa.  Thara  aro 
dezana  of  anya  to  gate  buBb«aa 
acunan:  acoaunling,  oonanunica* 
tiano.  IbMcW  analyoia,  marfcat* 
big,  coal  laanagamanf  and  ao  on. 

AUBDom  ouanaaa  niDw^m* 
adl  anhanea  yoir  caroar  and  in* 
cnaaa  your  eradUMy  to  (ha  buaf* 
naaa  unta  adddn  your  eonpany. 

■Oat  eoonadad.  Hatafork  adlh 
profact  laadaraand  ohanipiona. 
Caroara  aro  bull  on  boOi  adyt 
you  knew  and  on  adio  you  know. 

■Rnd  nourMhio  in  prior  IT 
bivoabnanto.  RaaWt  Iba  applca 
dona  and  lachnalodaa  that  hnra 
baan  daptoyad  and  roapply  func- 
tonawproc- 
andidapand 
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Calculating  From 
E)q)erience 


As  2003  UNFOLDS,  a  fantastic  tale  will 
emerge  in  which  a  wise  manager,  after 
witnessing  a  software  sales  presentation, 
will  see  so  clearly  the  profound  impact 
the  proposed  technology  can  have  on  the 
business  that  the  organization  will  dispense  with  eco¬ 
nomic  modeling  and  plow  ahead  with  the  investment. 

Rare?  Ye&  Radical?  Maybe. 

Yet  perhaps  you’ll  be  the 
revolutionary  who  gets  to 
defy  conventional  wisdom. 

Remember,  one  of  the 
primary  goals  of  modeling 
the  economic  impact  of  IT 
is  to  help  managers  decide 
if  and  when  to  make  a  cal* 
culated  bet  on  a  technol¬ 
ogy.  I  argued  in  my  first 
Computerworld  column 
(July  22. 2002;  QuickLink 
31362]  that  many  types  of 
IT  investments  defy  finan¬ 
cial  measurement;  these 
technologies  enable  the 
execution  of  more  strategic  business 
activity.  Since  IT  is  woven  into  the  fab¬ 
ric  of  business  operation,  these  neces¬ 
sary  IT  investments  are  required  if 
more  strategic  kinds  of  investments 
are  to  be  made.  Examples  of  necessary 
technology  investments  include  data 
warehousing,  connectivity,  middle¬ 
ware  and  storage.  Without  them, 
strategic  investments  in  CRM.  supply 
chain,  procurement  and  product  col* 
laboradon  are  impossible. 

You  can  model  and  debate  the  eco¬ 
nomic  returns  of  a  storage-area  net¬ 
work  (SAN)  until  Judgment  Day.  Fact 
is.  a  SAN  might  be  a  prerequisite  for 
an  ambitious  supply  chain  project  im- 
der  discussion. 

Altemadvefy,  managers  are  advised, 
hectored  and  warned  to  financiaUy 
model  risky  strategic  investments  as  a 


precept  in  sound  man^e- 
ment  and  as  a  vaccination 
against  economic  and  ca¬ 
reer  doom.  Proper  model¬ 
ing.  the  argument  goes,  re¬ 
veals  the  novelty  in  many 
kinds  of  software.  This  is 
because  the  software  de¬ 
mands  that  companies  be¬ 
gin  conducting  activities 
difierently.  Doing  business 
differently  means  risk,  and 
risk  demands  accurate 
quantification  of  costs  and 
benefits  before  the  invest- 
mem  is  made. 

As  it  happens,  the  eco¬ 
nomic  potential  of  that  risky  strategic 
technology  might  hit  you  so  hard  be¬ 
tween  the  eyes  that  a  hilly  loaded  busi¬ 
ness  case  becomes  irrelevant  —  if  not 
a  waste  of  time. 

Consider  this  example  ~  no.  fairy 
tale.  A  computer-aided  design  (CAD) 
software  vendor  was  pitched  a  sales- 
lead  management  ai^Ucation  as  a 
means  to  automate  its  relationships 
with  its  resellers.  The  business  bene¬ 
fits  blared  out  to  the  chief  operating 
officer  the  CAD  software  company. 
To  him.  the  economic  iustification  was 
obvious.  So,  be  decided,  why  bother 
formulating  a  financial  business  case? 

The  CAD  vendor’s  resellers  were  lax 
in  communicating  with  the  company. 
They  failed  to  confirm  receipt  new 
leads  or  update  the  vendor  on  the  sta¬ 
tus  of  a  lead  as  it  evolved  in  the  sales 


cycle.  By  implementing  a  rules  engine 
in  the  lead  management  application, 
the  vendor  changed  the  resellers'  be¬ 
havior  by  forcing  them  to  update  the 
company  on  the  status  of  all  leads 
before  receiving  new  leads.  And  we 
all  know  a  lead  is  the  salesperson’s 
crack  hit 

Another  benefit  the  vendor  recog¬ 
nized  was  the  acceleration  of  leads 
into  the  sales  pipeline.  Historically, 
leads  were  collected,  dropped  into  a 
spreadsheet  and  shipped  off  weddy  to 
the  resellers.  When  leads  are  plugged 
into  the  software  sooner  after  capture, 
resellers  act  upon  them  more  quickly. 

Had  the  vendor's  COO  boebned  with 
a  business  case,  be  would  have  found 
the  metrics  for  justifying  the  eqiendi- 
ture  to  be  straightforward  enough:  im¬ 
proved  cash  flow  fremt  a  compressed 
sales  cycle,  increased  sales  from  action 
taken  mme  quickly  on  newly  captured 
leads  and  improved  mariceting  e£Eec- 
tiveness  arising  out  of  much-improved 
reseller  feedback  about  leads  in  the 
pipeline.  *n>e  vendor  can  now  crack 
marketing  more  directly  with  the  per- 
formance  of  any  lead  h  generates  and 
reffne  those  efforts  accordingly. 

The  moral  of  this  story  is  not  that 
measurement  isn’t  important  It  is, 
rather,  that  managerial  experience  and 
know-how  have  certain  advantages; 
a  lesser  C(X)  sitting  in  on  the  CRM 
application  sales  pitch  wouldn’t  have 
recognized  the  creative  way  in  which 
thb  application  could  be  used  to  boost 
the  company’s  competitive  position. 
The  moral  is  also  that  the  success  of 
IT  projects  is  as  much  about  the  qual¬ 
ity  of  people  as  It  b  about  the  rigor 
of  ROI  m^ls.  You  might  get  your 
chance  to  prove  U  in  2CK)3.  k 
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Stavt  Ronaine.  chief 
strategist  in  the  technolo¬ 
gy  group  at  Hanford 
Financial  in  Hartford, 
Conn,,  is  a  fimner  FT  consultant  and 
author  o/ Soldier  of  Fortune  500:  A 
Management  Survi>’al  Guide  for  the 
Consulting  Wars  CPromerheus  BewJes. 
2002).  In  his  book,  he  candidly  clironi- 
ties  his  experiences  os  a  highly  paid  IT 
consultant  for  IBM.  Bank  of  America 
Corp,.  Chase  Manhattan  Bank  Corp. 
and  other  large  VS.  companies. 

Unlike  other  professions,  there  is  no 
licensing  reijuirement  for  consultants, 
Romaine  points  out.  Anyone  can  do  it. 
And  they  do.  ivhich  he  says  contributes 
to  a  cidture  where  politics  rule  and  the 
most  important  objectiyre  in  any  consult¬ 
ing  contract  is  to  secure  the  next  con¬ 
tract.  Romaine  says  he  wrote  the  book 
"to  provide  guidance  in  recognizing 
potential  abuses  and  avoiding  them  in 
the  furure.“  He  recently  talked  with 
Computerworld^  Julia  King. 

¥»*¥•  bm  on  both  sidas  of  the  fence. 
Where  tNouM  ytM  s«y  proUems  first  surtee? 


.I.L  h..  I  ll 

Ml  ; 

•  li'.M 


I -.uiif!'.  U  .n  ■■ 


Whet  are  the  earty  warning  sigRS  of  potential 
abuse?  What  often  happens  is  a  consul¬ 
tant  comes  in  and  says,  “We  have  a 
game  plan  we  used  before.  It's  a  best 
practice.  Gel  someone  out  of  your 
business  unit  to  be  the  project  sponsor 
and  head  that  up.“  Consulting  firms 
say  they  need  a  high-level  sponsor  [at 
the  client  company]  because  it's  im¬ 
portant  to  make  sure  the  business  unit 
buys  in.  But  the  problem  is  that  the 
client  company  is  often  getting  such  a 
senior-level  executive  that  they're  not 
there  to  run  the  project  on  a  day-to- 
day  basis.  Senior  executives  don't  un¬ 
derstand  the  technology,  but  they  don't 
want  to  appear  not  to  understand,  so  it 
creates  a  dependency  on  the  consul¬ 
tant.  That’s  a  huge  issue. 

Ybu  raite  an  interssting  issue  about  best 
practices.  ConsuHina  firms  fike  to  tout  their 
vertical  huhistry  expertise.  But  what  vahie  is 
HtoCompanyBtohaveaconsuMingfimide* 
pbythesamesystemsaAdproeasaesitde* 
pkqwd  for  Company  A,  especially  if  they're  in 
the  same  industry?  If  it's  something  that’s 
a  core  competency  of  your  business. 


something  you’re  hoping  will  give  you 
a  competitive  advantage,  don't  bring  in 
consultants  who  will  learn  on  the  job 
[and]  then  go  across  the  street  and 
work  for  the  ne.\t  guy.  You  have  to  be 
careful  not  to  train  the  workforce  of 
your  competitor.  Sometimes,  best 
practices  make  a  lot  of  sense  if  you  can 
gain  competitive  information,  but  you 
have  to  put  parameters  around  it  to 
make  sure  you’re  not  becoming  a  me- 
too  operation. 

If  a  company  can  identify  core  com¬ 
petencies  to  provide  competitive  ad¬ 
vantage.  that's  not  the  place  to  bring  in 
a  vertical  best-practices  consulting 
firm  who's  going  around  to  all  of  your 
competitors.  On  the  other  hand,  it 
m^ht  be  the  thing  to  do  if  you're  try¬ 
ing  to  figure  out  uiiat  your  competi¬ 
tors  are  doing. 

Consultants  bill  by  the  hour,  which  can  get 
extraordinarify  expensive  for  companies.  Any 
tips  for  keeping  a  Kd  on  their  horns?  Con¬ 
sultants  get  caught  up  in  “analysis 
paralysis"  because  they’re  trying  to 
bill  out  as  much  as  the>'  can.  It  makes 
sense  for  companies  to  define  their 
[project]  requirements  before  they  hire 
an  outside  consultant  or  to  divide  up 
the  work,  because  there’s  a  conflict  of 
interest  if  you  hire  the  same  consulting 
firm  to  do  both  [the  requirements 
planning  and  the  implementation].  For 
example,  you're  not  going  to  see  a  firm 
with  PeopleSoft  consultants  on  their 
bench  recommend  SAP. 

Vou  write  that  many  companes  make  the 
mistake  of  bringing  in  consultants  to  solve 
poHticaJ  infighting.  ¥fiiy  doesn't  this  work? 

With  businesses  operating  so  much 
tighter  today  and  people  trying  to  re¬ 
duce  costs,  a  lot  of  companies  are  get¬ 
ting  back  to  alignment  between  busi¬ 
ness  and  IT.  There's  still  a  lot  of  in- 
fightir^  in  some  companies,  and  there 
are  turf  wars.  Consultants  come  in  and 
play  one  group  off  another. 

Here's  a  perfect  example:  A  compa¬ 
ny’s  objective  is  to  eliminate  its  data 
silos  that  were  created  by  different 


business  units  all  using  different  appli¬ 
cations.  The  business  model  of  some 
consulting  firms  is  to  have  a  consulting 
partner  responsible  for  different  parts 
of  the  [client  company’s]  business.  At 
NationsBank  [now  part  of  Bank  of 
America],  we  had  a  consulting  partner 
responsible  for  check  processing  and 
another  partner  for  electronic  pay¬ 
ments.  They  were  competing  for  the 
same  business,  and  they  had  no  incen¬ 
tive  to  eliminate  the  silos.  One  guy  was 
there  to  get  the  check-processing  busi¬ 
ness,  and  the  other  guy  wanted  the 
electronic  payments  business. 

Consulting  companies  often  promise  to  train 
a  dienl’s  IT  workers  so  they  can  maintain 
systems  once  the  outsiders  leave.  How  can  a 
conH>any  ensixe  that  this  actualy  happens? 
Technical  complexity  is  a  best  friend 
for  some  consultants.  Knowledge 
transfer  in  the  long  run  isn't  going  to 
help  consultants  get  more  business. 

So  make  sure  it’s  in  the  contract  up¬ 
front  as  one  of  the  deliverables.  This 
is  a  good  place  to  separate  good  con¬ 
sultants  from  bad  ones,  b 
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Tips  for  Managing 
Consultants 

DDontuseconsultanls 
to  bitiher  vendor  deals. 

fite  Thoroughly  check  the 
V  hachiyounds.  creden¬ 
tials  and  references  of 
consultants. 

•  Never  shift  manage¬ 
ment  dacWons  to 
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Gartner’s  View  for 
IT  Pros  in  2003 

rr  professional  should  take  time 
in  2003  to  enhance  their  per* 
cerved  value  and  better  under' 
stand  business  priorities.  Siam* 
ford.  Conn. 'based  Oartner  Inc. 
advises.  Here  are  eight  guidelines 
to  consider: 

■  Take  inventory  of  your  tech¬ 
nology  and  business  knowfedge. 
Be  hcmest  about  bare  spots,  and 
expand  your  knowiedge. 

■Oel  smart  about  the  key 
drivers  of  your  company's  busi¬ 
ness.  Network  with  business 
counterparts  to  decuss  their  fi¬ 
nancial  and  operational  obfectives. 
Elecorm  the  business-knowiedge 
liaison  to  your  IT  team. 

a  Identify  required  services.  By 
understwiding  your  business,  you 
vriHbeablotoidcntifyandirrqrle- 
merrt  services  that  win  heip  drive 
your  company's  success,  fniegra- 
Mn  process  insigM  and  versafof- 
/fywiH  be  watohwords. 

B  Become  an  evergreen  profes¬ 
sional.  Pursue  emerging  and  en¬ 
during  Imowiedge,  competencies 
and  experierKOs. 

a  Seek  leadership  opportunities 
and  accountability.  TNs  isn’t 
the  year  to  lay  low.  Mergers  and 
acquisitions,  consrdkialion  arrd 
globalization  wM  increase  the 
number  of  protects  and  bitemal 
infttsHves.  Step  up  to  the  ptate. 

a  Strengthen  your  krwwfedge 
of  business  principles.  There  are 
dozens  of  ways  to  gain  business 
acumen:  accounting,  communica¬ 
tions,  financial  analysis,  maikat- 
ing.  cost  mansgement  and  so  on. 
Additional  bustoess  knowhow 
wMenhanceyDurcareerandbr- 
crease  your  crodibflhy  In  the  busi¬ 
ness  units  within  your  company. 

a  Get  connected.  Network  with 
protect  leaders  and  champioRS. 
Careers  are  buM  on  both  what 
you  know  and  on  who  you  know. 

a  Find  new  value  In  prior  IT 
investments.  Revisit  tlw  applica¬ 
tions  and  tednolooies  that  have 
bean  deployed  and  reapply  func¬ 
tions  and  features  to  new  proc¬ 
esses.  Thw  success  wfil  depend 
on  your  newfound  knowfedge  of 
buskwes  processes,  customer 
markets  and  financial  goals. 
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Calculating  From 
Experience 


As  2003  UNFOLDS,  a  fantastic  tale  will 
emerge  in  which  a  wise  manager,  after 
witnessing  a  software  sales  presentation, 
will  see  so  clearly  the  profound  impact 
the  proposed  technology  can  have  on  the 
business  that  the  organization  will  dispense  with  eco¬ 
nomic  modeling  and  plow  ahead  with  the  investment. 


Rare?  Yes.  Radical?  Maybe. 

Yet  perhaps  you’ll  be  the 
revolutionary  who  gets  to 
defy  conventional  wisdom. 

Remember,  one  of  the 
primary  goals  of  modeling 
the  economic  impact  of  IT 
is  to  help  managers  decide 
if  and  when  to  make  a  cal¬ 
culated  bet  on  a  technol¬ 
ogy.  I  argued  In  my  first 
Computerworld  column 
[July  22. 2002;  QuickUnk 
31362]  that  many  types  of 
IT  investments  defy  finan¬ 
cial  measurement:  these 
technologies  enable  the 
execution  of  more  strategic  business 
activity.  Since  IT  is  woven  into  the  fab¬ 
ric  of  business  operation,  these  neces¬ 
sary  IT  investments  are  required  if 
more  strategic  kinds  of  investments 
are  to  be  made.  Examples  of  necessary 
technology  investments  include  data 
warehousing,  connectivity,  middle¬ 
ware  and  storage.  Without  them, 
strategic  investments  in  CRM.  supply 
chain,  procurement  and  product  col¬ 
laboration  are  impossible. 

You  can  model  and  debate  the  eco¬ 
nomic  returns  of  a  storage-area  net¬ 
work  (SAN)  until  ludgment  Day.  Fact 
is,  a  SAN  might  be  a  prerequisite  for 
an  ambitious  supply  chain  project  un¬ 
der  discussion. 

Alternatively,  managers  are  advised, 
hectored  and  warned  to  fmancially 
model  risky  strategic  investments  as  a 


precept  in  sound  man^e 
ment  and  as  a  vaccination 
against  economic  and  ca¬ 
reer  doom.  Proper  model¬ 
ing,  the  argument  goes,  re¬ 
veals  the  novelty  in  many 
kinds  of  software.  This  is 
because  the  software  de¬ 
mands  that  compaiues  be¬ 
gin  conducting  activities 
differently.  Doing  business 
differently  means  risk,  and 
risk  demands  accurate 
quantification  of  costs  and 
benefits  before  the  invest¬ 
ment  is  made. 

As  it  happens,  the  eco¬ 
nomic  potential  of  that  risky  strategic 
techno1og>'  might  hit  you  so  hard  be¬ 
tween  the  eyes  that  a  fully  loaded  busi¬ 
ness  case  becomes  irrelevant  —  if  not 
a  waste  of  time. 

Osnsider  this  example  —  no.  fairy 
tale.  A  computer-aided  design  (CAD) 
software  vendor  was  pitched  a  sales- 
lead  management  application  as  a 
means  to  automate  its  relationships 
with  its  resellers.  The  business  bene¬ 
fits  blared  out  to  the  chief  operating 
officer  of  the  CAD  software  compan)'. 
To  him,  the  economic  justification  was 
obvious.  So.  he  decided,  why  bother 
formulating  a  fmancial  business  case? 

The  CAD  vendor's  resellers  were  lax 
in  communicating  with  the  company. 
They  failed  to  confirm  receipt  of  new 
leads  or  update  the  vendor  on  the  sta¬ 
tus  of  a  lead  as  it  evolved  in  the  sales 


cycle.  By  implementing  a  rules  engine 
in  the  lead  management  application, 
the  vendor  changed  the  resellers'  be¬ 
havior  by  forcing  them  to  update  the 
company  on  the  status  of  all  leads 
before  receiving  new  leads.  And  we 
all  know'  a  lead  is  the  salesperson’s 
crack  hit. 

Another  benefit  the  vendor  recog¬ 
nized  was  the  acceleration  of  leads 
into  the  sales  pipeline.  Historically, 
leads  were  collected,  dropped  into  a 
spreadsheet  and  shipped  off  w’eekly  to 
the  resellers.  When  leads  are  plugged 
into  the  software  sooner  after  capture, 
resellers  act  upon  them  more  quickly. 

Had  the  vendor's  COO  bothered  with 
a  business  case,  he  would  have  found 
the  metrics  for  justifying  the  expendi¬ 
ture  to  be  straightforward  enough:  im¬ 
proved  cash  flow  from  a  compressed 
sales  cycle,  increased  sales  from  action 
taken  more  quickly  on  newly  captured 
leads  and  improved  marketing  effec¬ 
tiveness  arising  out  of  much-improved 
reseller  feedback  about  leads  in  Che 
pipeline.  The  vendor  can  now  track 
marketing  more  directly  with  the  per¬ 
formance  of  any  lead  it  generates  and 
refine  those  efforts  accordingly. 

The  moral  of  this  story  is  not  that 
measurement  isn’t  important  It  is, 
rather,  that  managerial  experience  and 
know-how  have  certain  advantages: 
a  lesser  COO  sittuqt  in  on  the  CRM 
application  sales  pitch  wouldn’t  have  ■ 
recognized  the  creative  way  in  which 
this  application  could  be  used  to  boost 
the  company’s  competitive  position. 
The  moral  is  also  that  the  success  of 
IT  projects  is  as  much  about  the  qual¬ 
ity  of  people  as  it  is  about  the  rigor 
of  ROl  models.  You  might  get  your 
chance  to  prove  it  in  2003. 1 
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the  BSD  Unix  operating  sys¬ 
tem.  “It  is  lairly  secure,  but  it 
is  also  fairly  devoid  of  any  but 
the  simplest  of  operating  sys¬ 
tem  functionality." 

Craig  Mundie,  chief  techni¬ 
cal  officer  of  advanced  strate¬ 
gies  and  policy  at  Microsoft, 
likened  the  technological  chal¬ 
lenge  Microsoft  &ces  to  “chas¬ 
ing  a  rocket  ship." 

"We  continue  to  scale  up 
the  capability  of  the  systems. 
As  they  get  bigger  and  bigger, 
complexity  mounts,  and  to 
some  extent,  those  things  all 
work  against  the  idea  that, 
well,  can  we  really  get  this 
thing  stabilized  and  im¬ 
proved?"  Mundie  said.  He  said 
be  worries  about  maintaining 
the  balance  "between  having 
to  make  the  product  and  the 
business  go  forward  and  try¬ 
ing  to  lock  it  all  down." 

“If  things  weren’t  moving,  it 


would  be  easier."  Mundie  said. 
"But  they  have  to  keep  moving, 
or  there  would  be  no  business." 

Looking  at  it  from  a  business 
mana^ment  standpoint,  he 
noted  the  challenges  the  com¬ 
pany  faces  in  coming  up  with 
audit  measurements  to  ensure 
that  "the  effort  doesn’t  dissi¬ 
pate,”  especially 
since  it  could  take 
10  to  20  years  to 
achieve  technologi¬ 
cal  success.  Yet  an¬ 
other  problem  is  the 
testing  issues  the 
company  confronts 
when  it  decides  that  it  needs  to 
make  a  security  fix  that  will  af¬ 
fect  a  system  as  large  as  Win¬ 
dows,  Mundie  said. 

Several  IT  managers  said 
they  think  Microsoft’s  Trust¬ 
worthy  Computing  progress 
should  be  judged  based  on  the 
number  of  vulnerabilities  they 
see  in  future  releases.  But 
many  customers  may  continue 
to  use  older  products  that 
haven't  been  the  focal  point  of 


Microsoft's  security  push 
“In  the  short  term.  Fro  re¬ 
signed  to  an  increasing  cycle 
of  patches  and  updates  to  ex¬ 
isting  systems  that  my  already 
overwhelmed  technicians 
have  to  implement,”  said  Paul 
i.anham,  senior  vice  president 
and  chief  technology  officer  at 
Jones  Apparel 
Group  Inc  in  Bris- 
toL  Pa.  "Pm  hoping 
that  the  next  gen¬ 
eration  of  products 
from  Microsoft  ad¬ 
dresses  these  is¬ 
sues  so  that  there 
is  a  reasonable  balance  be¬ 
tween  the  features  that  cus¬ 
tomers  insist  upon  and  basic 
security  measures  in  the  prod¬ 
ucts  offered." 

Marc  Maiffret,  co-founder 
and  chief  hacking  officer  of 
eEye  Digital  Security  Inc  in 
Aliso  Viejo.  CaliL.  said  Micro¬ 
soft  should  be  devoting  more 
attention  to  ridding  its  current 
products  of  vulnerabilities.  "It 
seems  like  they're  much  more 


worried  about  tomorrow, 
which  they  should  be.  But  I 
think  today  Is  even  more  im¬ 
portant."  he  said. 

As  nice  as  it  would  be.  re¬ 
views  of  older  products  may 
not  be  a  realistic  expectation, 
said  Jason  Fossen,  a  SANS  In¬ 
stitute  lecturer  and  president  of 
Fossen  Networking  &  Security, 
a  Windows  security  consultan¬ 
cy  in  Dallas.  If  they’re  fixing 
old  stuff,  there  are  fewer  re¬ 
sources  being  dedicated  to  the 
current  version."  he  said.  "It's 
better  to  focus  on  Windows 
-Net  ServCT  and  Windows  XP." 

Indeed.  Microsoft  is  pinning 
its  hopes  on  its  newly  re¬ 
named  Windows  Server  2003 
operating  system  to  showcase 
the  fruits  of  its  security  labors. 
It  shuttered  Windows  produc¬ 
tion  for  10  weeks  last  year  to 
do  security  training  and  code 
reviews.  One  big  chai^  is 
that  the  Web  server  and  other 
potentially  vulnerable  features 
are  turned  off  b)’  default. 

But  Walt  Smith,  chief  archi¬ 


tect  at  a  large  U.S.-based  fi¬ 
nancial  institution,  is  worried 
that  Microsoft  will  become 
"easily  distracted"  from  its  lat¬ 
est  security  efforts,  which 
"bring  them  only  delayed  grai- 
ification  in  terms  of  revenue." 

"As  soon  as  the  next  killer 
application  comes  along,  Mi¬ 
crosoft  will  go  chasing  after  h 
and  forget  all  about  making 
their  infrastructure  and  prod¬ 
uct  offerings  robust  and  reli¬ 
able.  at  least  until  the  next  se¬ 
curity  m^osure."  Smith  said.  I 


Security  Focus 


Mike  Nash,  vice  presidem  of  M- 
crosott's  secuniy  busawss  unit, 
said  the  contparTy's  Trushworihy 
Computng ‘pumey*  has  so  tar 
inchided  the  tolowirio  efforts: 

SECURE  BY  DESI6K:  Reduce 
the  number  oi  Minerabilities  n 
products  trom  a  design  and  ffiv 
piementdion  perspective. 

• 2002:  Trained  more  Ihm 
tl.000  employees  on  what  it 
means  to  design  and  write  secure 
code.madedevelopersaoccure- 
aUe  for  security  and  released 
secuity-focused  service  pecks 
for  Windows  XP  and  200Q- 
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VWtourVMiMtofva 
bmetneofMcroBoft's 
security  mo««6  in  2002 
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SECURE  BY  DBW:  Reduce 
the  attack  surface  aree  by  sha¬ 
ping  software  with  potenhalr  wil- 
nerabte  conponents  tfesaUed. 

■  2002:  Timed  oft  vukierable 
faalifes.  such  as  the  Web  send, 
in  Wndows  Server  2003.  and 
changed  share  pemsstons  n 
Windows  XP  wa  Servee  1. 

SECURE  BIDEPUmCNT; 
Supply  tools,  documentation  and 
gukiance  to  enpemer  users  to 
protect  their  enwronmerte. 
a  2002:  Reittsad  the  Software 
(.todale  Services  critical  patch 
deploymeni  hnl.  made  aukmabc 
update  feature  avaiaUe  to  Win¬ 
dows  2000  users,  released 
Microsoft  Baseline  Security  Ana¬ 
lyzer  and  ntroduced  prescrpbve 
dooments  lor  Wind^ 2000 
and  Eschanpe  Server. _ 

COMMUWCATWR:  Share 
inlonnatiQn  wMi  customers  and 
securityprofessionats. 
a  2002:  Instkuted  a  new  seventy 
rating  system  and  added  con¬ 
sumer  security  buktins. 
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Trustworthy 

the  BSD  Unix  operating  sys¬ 
tem.  “It  is  fairly  secure,  but  it 
is  also  fairly  de\'oid  of  any  but 
the  simplest  of  operating  sys¬ 
tem  functionality." 

Craig  Mundie,  chief  techni¬ 
cal  officer  of  advanced  strate¬ 
gies  and  policy  at  Microsoft, 
likened  the  technological  chal¬ 
lenge  Microsoft  faces  to  “chas¬ 
ing  a  rocket  ship." 

“We  continue  to  scale  up 
the  capability  of  the  systems. 
As  they  get  bigger  and  bigger, 
complexity  mounts,  and  to 
some  extent,  those  things  all 
work  against  the  idea  that, 
well,  can  we  really  get  this 
thing  stabilized  and  im¬ 
proved?"  Mundie  said.  He  said 
he  worries  about  maintaining 
the  balance  "between  having 
to  make  the  product  and  the 
business  go  forward  and  try¬ 
ing  to  lock  it  all  down." 

“If  things  weren't  moving,  it 


would  be  easier."  Mundie  said. 
“But  they  have  to  keep  moving, 
or  there  would  be  no  business." 

Looking  at  it  from  a  business 
management  standpoint,  he 
noted  the  challenges  the  com¬ 
pany  faces  in  coming  up  uith 
audit  measurements  to  ensure 
that  “the  effort  doesn’t  dissi¬ 
pate,"  especially  - 

since  it  could  take  nc  OTA 
10  to  20  years  to  i"^***J! 
achieve  tedmologH 
cal  success.  Yet  an-'  securitv  mov 


since  it  could  take  TIlC  OTAAW  M  CiD  Group  Inc.  in  Bris 
.ol-Pa-Tnihopin 

achieve  techliologi-  ,™*.olMlciii^'s  that  the  next  gen- 

cal  success.  Yet  an-'  secunty  moves  in  2002  eration  of  product 
other  problem  is  the  0  QuidiLMt  35562  from  Microsoft  ad 
testing  issues  the  wwwxomputefworid.coin  dresses  these  is- 
company  confronts  |  sues  so  that  there 


Microsoft's  security  push. 

"In  the  short  term.  I’m  re¬ 
signed  to  an  increasing  cycle 
of  patches  and  updates  to  ex¬ 
isting  systems  that  my  already 
overwhelmed  technicians 
have  to  implement."  said  Paul 
Lanham.  senior  vice  president 
and  chief  teclmology  officer  at 

_  tones  Apparel 

f  ^  CiD  Group  Inc.  in  Bris- 
yy  lol.  Pa.  “I’m  hoping 

^■5  that  the  next  gen¬ 
ii  2002  eration  of  products 

15562  from  Microsoft  ad- 


when  it  decides  that  it  needs  to 
make  a  security'  fix  (hat  will  af¬ 
fect  a  system  as  large  as  Win¬ 
dows.  Mundie  said. 

Several  IT  managers  said 
they  think  Microsoft’s  Trust¬ 
worthy  Computing  progress 
should  be  judged  based  on  the 
number  of  iiTilnerabilities  they 
see  in  future  releases.  But 


is  a  reasonable  balaiKe  be¬ 
tween  the  features  that  cus¬ 
tomers  insist  upon  and  basic 
security  measures  in  the  prod¬ 
ucts  offered." 

Marc  Maiffret.  co-founder 
and  chief  hacking  officer  of 
eEye  Digital  Security  Inc.  in 
Aliso  VIeio.  Calif.,  said  Micro¬ 
soft  should  be  devoting  more 


many  customers  may  continue  attention  to  ridding  its  current 


to  use  older  products  that 


products  of  vulnerabilities.  "It 


haven’t  been  the  focal  point  of  I  seems  lUce  they’re  much  more 
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worried  about  tomorrow.  I 
which  they  should  be.  But  I 
think  today  is  even  more  im¬ 
portant."  he  said. 

As  nice  as  it  would  be.  re¬ 
views  of  older  products  may 
not  be  a  realistic  expectation, 
said  Jason  Fossen.  a  SANS  In¬ 
stitute  lecturer  and  president  of 
Fossen  Networking  &  Security.  1 
3  Windows  security  consultan¬ 
cy  in  Dallas.  “If  they’re  fixing 
old  stuff,  there  are  fewer  re¬ 
sources  beii^  dedicated  to  the 
current  version,"  he  said.  "It’s 
better  to  focus  on  Windows 
.Net  Server  and  Windows  XP." 

Indeed.  Microsoft  is  pinning 
its  hopes  on  its  newly  re¬ 
named  Windows  Server  2003 
operating  system  to  showcase 
the  fruits  of  its  security  labors. 

It  shunered  Windows  produc¬ 
tion  for  10  weeks  last  year  to 
do  security  training  and  code 
reviews.  One  big  change  is 
that  the  Web  server  and  other 
potentially  vulnerable  features 
arc  turned  off  by  default. 

But  Walt  Smith,  chief  archi¬ 


tect  31 3  large  U.S.-based  fi¬ 
nancial  institution,  is  vv’orricd 
(hat  Microsoft  will  become 
"easily  distracted"  from  its  lat¬ 
est  security  efforts,  which 
"bring  them  only  delayed  grat¬ 
ification  in  terms  of  revenue." 

"As  soon  as  the  next  killer 
application  comes  along.  Mi¬ 
crosoft  will  go  chasing  after  ii 
and  forget  all  about  making 
their  infrastructure  and  prod¬ 
uct  offerings  robust  and  reli¬ 
able.  at  least  until  the  next  se¬ 
curity  exposure."  Smith  said.  I 


Security  Focus 

Kash.  vice  president  of  Mi- 
crosolt's  security  business  tin^. 
said  the  company’s  Tiusiworthy 
Computno ‘journey*  has  $0  tar 
irx:iudedtheioliOM«ig  efiorts 

SECURE  8Y  DESIGN:  Reduce 
the  number  o<  vulnerabiMies  m 
products  Iroffl  a  design  and  im- 
plem&ilalon  perspective. 

•  2002:  Trained  more  than 
TI.OOO  empioyees  on  «4ial  it 
means  to  design  and  wmle  seore 
code,  made  developers  account¬ 
able  for  searly  and  reteased 
secunty-locused  service  packs 
tor  Wndovvs  XP  and  2000 

SECURE  BY  DEFAULT:  Reduce 
the  attack  surface  area  by  ship¬ 
ping  software  with  potentalfy  vuF 
nerabie  components  disabled 
a  2002:  Turned  oft  vulnerable 
foatires.  such  as  the  Web  server, 
ei  Windows  Server  2003.  and 
changed  share  permissions  ffi 
Windows  XP  via  Servee  Rack  1. 

SECURE  M  DEPLOYMENT: 
Supply  tools,  docurnentatxin  and 
guidance  to  empower  users  to 
protad  thee  enveonments 

■  2002:  Released  the  Software 
Update  Services  cnbcN  patch 
deploymen!  tool  rnade  automatic 
up^  feature  avadaUe  to  Win¬ 
dows  2000  users,  released 
McroGoft  Basdine  Security  Ana- 
lyTer  and  rtroduoed  prescnptrve 
documents  for  Windows  2000 
and  Eshange  Server. 

COMMUNICATION:  Share 
nformation  wdh  customers  and 
security  professionate 

■  2002:  Instituled  a  new  seventy 
rating  system  and  added  con¬ 
sumer  security  biAebns. 
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Did  those  Wall  Street  investment  houses  really  forget 
about  PONI  —  the  price  of  noninvestment  —  when 
they  failed  to  create  good  e-mail  archiving  systems  and 
got  slapped  with  a  $1.65  million  fine  per  firm,  as  I  wrote 
in  my  Dec.  9  column  (QuickLink  34878]?  Some  of  you 
don’t  think  so.  “Your  example  was  flat-out  wrong:  $1.65  million  is 
nothing  to  them  if  it  effectively  covers  their  tracks,”  one  reader 
wrote  to  tell  me.  “In  a  way,  these  brokerages  did  perform  a  PONI 
and  found  it  much  more  profitable  to  obscure  and  delete  the  audit 
trail,  pay  the  fine  and  laugh  all  the  way  to  the  bank.  To  put  it  another 
way,  these  guys  played  the  PONIs  and  won  big.” 


Or  as  another  reader  who  did  the  math  point¬ 
ed  out,  Merrill  Lynch  was  recently  fined  SlOO 
million  in  a  case  where  key  es’idence  came  from 
Merrill's  own  internal  e-mails.  He  wrote:  “It 
didn’t  take  these  guys  long  to  figure  out  how  to 
save  themselves  $98J5  million  doilars.” 

They’re  right,  it  was  a  lousy  example.  And  I 
was  wrong  to  assume  pure  intentions  w'erc  in¬ 
volved  in  that  decision.  Internal  e-mails  have 
been  critical  evidence  in  cases  raiding  from 
Iran-Contra  in  the  1980s  to  Microsoft’s  recent 
antitrust  trial.  Did  top  management  at  those 
Wall  Street  firms  do  the  math  on  the  costs  — 
and  benefits  —  of  not  investing  in  good  e-mail 
archiving  systems?  I  don't  know.  But  it  sure 
looks  suspicious,  doesn't  it? 

And  it  raises  another  question:  How  could 
the  IT  people  at  those  firms  not  have  wondered 
about  such  an  obviously  suspect  decision? 

We  all  know  the  answer  to  that  one.  They 
probably  did  wonder.  Maybe  some  even  sus¬ 
pected  the  worst.  But  there's  a  good  chance 
they  were  simply  kept  in  the  dark.  They  just 
didn’t  know. 

Welcome  to  the  no-man's  land  called  IT  in 
2003.  As  important  as  we've  become 
to  our  companies  over  the  past 
decade,  we’re  still  often  kept  out  of 
the  loop. 

To  create  the  best  systems  and 
run  them  optimally,  we  need  to 
know  the  hows  and  whys  of  the 
business  we  work  for.  We  have  to 
understand  what  the  business  does 
—  and  where  it's  going. 

But  that  won't  always  happen.  IT 
may  be  critical,  but  that  doesn’t  weiif*  * 

mean  they'll  tell  us  what’s  going  on. 

So  when  good  projects  —  with  SSliS 
the  right  technology  and  a  solid 
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business  case  —  get  nixed  while  loser  projects 
get  the  green  light,  we  can  only  make  guesses 
about  why  the  apparently  illogical  decision  was 
made  by  management. 

Maybe  it's  politics  —  a  favor  called  in.  an  old 
score  settled,  a  power  play.  Yeah,  executives  do 
that,  even  when  it's  not  in  the  best  interests  of 
the  business.  Hard  to  believe,  huh? 

Maybe  it’s  technophobia  or  misunderstand¬ 
ing.  Maybe  someone  with  a  deciding  voice  real- 
iy  likes  or  loathes  a  particular  technology  or 
vendor.  Maybe  it’s  history  —  a  similar-sounding 
project  that  was  a  huge  flop  or  a  big  success 
years  ago. 

Maybe  the  CEO  got  a  great  idea  from  an  arti¬ 
cle  in  an  airline  in-flight  magazine  and  hasn't 
been  talked  out  of  it  by  the  CIO  and  CFO  —  yet. 

Maybe  there’s  a  business  deal  we  don't  know 
about  —  and  won’t  hear  about  until  it's  a  fait 
accompli.  A  merger.  A  layoff.  A  division  closed 
or  sold.  A  new  line  of  business.  Any  of  those 
things  might  make  systems  obsolete  or  change 
IT  needs  overnight. 

Maybe  it  reaily  is  simply  a  dumb  decision. 

Or  maybe  it’s  a  case  of  criminal  intent. 

We’re  just  not  likely  to  know 
until  long  after  the  decision  is 
made  —  if  at  all. 

It’s  still  our  job  to  calculate  the 
ROl  and  PONI  and  to  make  the 
clearest  and  best  business  and 
technical  case  for  our  IT  projects. 
Nothing  changes  that  —  even  when 
a  project  is  shot  down  for  no  ap¬ 
parent  reason,  and  it  appears  obvi¬ 
ous  that  our  executives  haven't 
MMMiun-  thought  through  the  costs  of  not 
id  IT  lar  Mit  building  a  system. 

Because  —  with  good  intent  or 
ill  —  maybe  they  already  have.  I 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Not  So  Obvious 

Did  those  Wall  Street  investment  houses  really  forget 
about  PONI  —  the  price  of  noninvestment  —  tvhen 
they  failed  to  create  good  e-mail  archiving  systems  and 
got  slapped  with  a  $1.65  million  fine  per  firm,  as  I  wrote 
in  my  Dec.  9  column  [QuickLink  34878]?  Some  of  you 
don’t  think  so.  “Your  example  was  flat-out  wrong:  $1.65  million  is 
nothing  to  them  if  it  effectively  covers  their  tracks,”  one  reader 
wrote  to  tell  me.  “In  a  way,  these  brokerages  did  perform  a  PONI 
and  foimd  it  much  more  profitable  to  obscure  and  delete  the  audit 
trail,  pay  the  fine  and  laugh  all  the  way  to  the  bank.  To  put  it  another 
way,  these  guys  played  the  PONIs  and  won  big.” 


Or  as  another  reader  who  did  the  math  point¬ 
ed  out,  Merrill  Lynch  was  recently  fined  $100 
million  in  a  case  where  key  evidence  came  from 
Merrill's  own  internal  e-mails.  He  wrote:  "It 
didn't  take  these  guys  long  to  figure  out  how  to 
save  theknselves  $98.35  million  dollars." 

They’re  right,  it  was  a  lousy  example.  And  I 
was  wrong  to  assume  pure  intentions  were  in¬ 
volved  in  that  decision.  Internal  e-mails  have 
been  critical  evidence  in  cases  ranging  from 
Iran-Contra  in  the  1980s  to  Microsoft’s  recent 
antitrust  trial  Did  top  management  at  those 
Wall  Street  firms  do  the  math  on  the  costs  — 
and  benefits  —  of  not  investing  in  good  e-mail 
archiving  systems?  I  don’t  know.  But  it  sure 
looks  suspicious,  doesn’t  it? 

And  it  raises  another  question:  How  could 
the  IT  people  at  those  firms  not  have  wondered 
about  such  an  obviously  suspect  decision? 

We  all  know  the  answer  to  that  one.  They 
probably  did  wonder.  Maybe  some  even  sus¬ 
pected  the  worst  But  there’s  a  good  chance 
they  were  simply  kept  in  the  dark.  They  just 
didn't  know. 

Welcome  to  the  iK>-man’s  land  called  IT  in 
2003.  As  important  as  we’ve  become 
to  our  companies  over  the  past 
decade,  we're  still  often  kept  out  of 
the  loop. 

To  create  the  best  systems  and 
run  them  optimally,  we  need  to 
know  the  hows  and  whys  of  the 
business  we  work  for.  We  have  to 
understand  what  the  business  does 
~  and  where  it’s  going. 

But  that  won’t  always  happen.  IT 
may  be  critical,  but  that  doesn't 
mean  they'll  tell  us  ladiat’s  going  on. 

So  w-ben  good  proiects  —  with 
the  right  technology  and  a  solid 


business  case  —  get  nixed  while  loser  projects 
get  the  green  light,  we  can  only  make  guesses 
about  why  the  apparently  illogical  decision  was 
made  by  management. 

Maybe  it’s  politics  —  a  favor  called  in.  an  old 
score  settled,  a  power  play.  Yeah,  executives  do 
that,  even  when  it’s  not  in  the  best  interests  of 
the  business.  Hard  to  believe,  huh? 

Maybe  it’s  technophobia  or  misunderstand¬ 
ing.  Maybe  someone  with  a  deciding  voice  real¬ 
ly  likes  or  loathes  a  particular  technology  or 
vendor.  Maybe  it's  history  —  a  similar-sounding 
project  that  was  a  huge  flop  or  a  big  success 
years  ago. 

Maybe  the  CEO  got  a  great  idea  from  an  arti¬ 
cle  in  an  airiine  in-flight  magazine  and  hasn’t 
been  talked  out  of  it  by  the  CIO  and  CFO  —  yet 

Maybe  there’s  a  business  deal  we  don’t  know 
about  —  and  won’t  hear  ^>out  until  it’s  a  fait 
accompli.  A  merger.  A  layoff  A  division  closed 
or  sold  A  new  line  of  business.  Any  of  those 
things  mi^t  make  systems  obsolete  or  change 
IT  needs  overnight 

Maybe  it  really  is  simply  a  dumb  decision. 

Or  maybe  it’s  a  case  of  criminal  intent. 

We’re  just  not  likely  to  know 
until  long  after  the  decision  is 
made  — if  at  alL 
It’s  still  our  job  to  caloilate  the 
ROI  and  PONI  and  to  make  the 
clearest  and  best  business  and 
technical  case  for  our  IT  projects. 
Nothing  changes  that  —  even  when 
a  project  is  shot  down  for  no  ap¬ 
parent  reason,  and  it  appears  obvi¬ 
ous  that  our  executives  haven’t 
tbou^t  through  the  costs  of  not 
building  a  system. 

Because  —  with  good  intent  or 
ill  —  maybe  they  already  have.  I 
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Turbulence  Ahead! 


tangled  in  the 
financial  turmoil 
of  the  telecommunications 
sector,  where  even  big  carri¬ 
ers  are  filing  for  bankniptcy. 
Our  special  report  provides 
strategies  for  coping  with  this 
mess  and  spots  other  changes 
on  the  horizon,  such  as  inter¬ 
net  EDI  and  voice  over  IP. 
STORIES  BEGIN  ON  PAGE  25. 
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GPS  Jammers  Raise  Concern 


Hacker  group  offers 
guide  to  developing 
homemade  devices 


BY  BOB  8BEWIN 

Government  ofncials  and 
communications  experts  are 
assessing  the  public  safety  and 
security  implications  of  a  new¬ 
ly  posted  online  article  that 
provides  directions  for  making 
cheap  devices  to  jam  Globa) 
Positioning  System  signals. 


Information  in  the  article, 
in  the  current  issue  of  an  on¬ 
line  hacker  magazine  called 
Phrock.  potentially  puts  at  risk 
GPS  devices  used  for  com¬ 
mercial  navigation  and  mili¬ 
tary  operations  purposes,  au¬ 
thorities  said. 

The  Phrock  article  provides 
a  detailed  guide  to  building  a 
low-cost,  portable  GPS  jam¬ 
mer  out  of  components  that 
can  be  easily  obtained  from 
electronics  supply  bouses. 


According  to  the  article,  the 
"onslaught  of  cheap  GPS- 
based  navigation  (or  hidden 
tracking  devices)  has  made  it 
necessary  for  the  average  citi¬ 
zen  to  take  up  the  fme  art  of 
electronic  warfare."  Electron¬ 
ics  and  GPS  experts  who  read 
the  article  last  week  called  it 
technically  competent  and 
said  amateurs  vrith  a  certain 


GPS  Jammers,  page  16 
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IBM  Takes  Steps 
To  Relieve  iSeries 
Pricing  Pain 

Revfamp  of  former  AS -400  line  adds  high-end 
models,  cuts  cost  of  running  green-screen  apps 

BV  JAIKUMAB  V1JAVAN 

IBM  this  week  will  roll  out 
new  hardware,  pricing  and 
upgrade  options  for  users  of 
its  iSeries  s>'stems  as  part  of  a 
$500  million  effort  to  revital¬ 
ize  the  2S-year-old  midrange 
server  line. 

The  overhaul  is  aimed  at 
addressing  several  long-stand¬ 
ing  user  concerns  while  also 
making  the  iSeries  machines 
more  appealing  to  first -time 
buyers,  said  A1  Zollar.  who 
ea^r  this  month  was  tapped 
to  bead  the  iSeries  business 
unit  at  IBM.  In  addition,  IBM 
plans  to  invest  more  in  mar¬ 
keting  in  an  attempt  to  boost 
interest  in  the  iSeries  technol¬ 
ogy  among  software  vendors 
and  resellers,  ZoUar  said. 

Perhaps  the  most  important 
development,  according  to 


users  and  analysts,  is  a  change 
in  the  way  IBM  charges  users 
that  run  host-based  green- 
screen  applications  on  ma¬ 
chines  in  the  iSeries  line, 
which  was  previously  known 
as  the  AS/400. 

Under  IBM's  new  Enter- 


IBM  iSeries,  page  51 


Terrorist  Probe  Hobbles  Ptech 


Emplweeswarnit 
could  happen  to 
other  companies,  too 

BV  BAN  VEBTON 

The  White  House  has  given 
Ptech  Inc.’s  software  a  clean 
bill  ofhealth.andmoscofthe 
company's  customers  and 
strategic  business  partners  re¬ 
main  committed  to  its  tech¬ 
nology.  But  Ptech.  investigated 
for  having  an  al-Qaeda  om- 
nection.  has  still  become  a  ca¬ 
sualty  of  the  war  on  terrorism. 


Id  an  exclusive  series  of  in¬ 
terviews  with  ComputeryiforltL 
Ptech  CEO  Oussama  Ziade 
and  several  former  employees 
said  the  government's  investi¬ 
gation  of  a  former  investor 
who  is  alleged  to  have  ties  to 
terrorism  (Quicklink  349701 
has  enisled  the  ability  of  the 
Q^cy,  Mass.,  software  com¬ 
pany  to  attract  new  business. 
And  they  fear  the  same  thing 
could  happen  to  other  firms. 

Ptech’s  crisis  stems  from  a 
Dec.  S  consensual  search  by 

Pteefr  Probe,  J6 
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■  KN0WLED6E  CENTER  NETWORKING  ■ 

Turbulence  Ahead! 


It’s  easy  1o  gel 
tangled  in  the 
financial  turmoil 
of  the  telecommunications 
sector,  where  even  big  carri¬ 
ers  are  filing  for  bankruptcy. 
Our  special  report  provides 
strategies  for  coping  with  this 
mess  and  spots  other  changes 
on  the  horizon,  such  as  Inter¬ 
net  EDI  and  voice  over  IP. 
STORIES  BEGIN  ON  PAGE  25. 
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GPS  Jammers  Raise  Concern 


Hacker  gn)up  offers 
jaiidc  to  de'\cloping 
homem;ide  devices 

BY  BOB  BBEWIN 

Government  ofnclais  and 
communications  experts  arc 
assessing  the  public  safety  and 
security  implications  of  a  new¬ 
ly  posted  online  article  that 
provides  directions  for  making 
cheap  devices  to  jam  Global 
Positioning  System  signals. 


Information  in  the  article, 
in  the  current  issue  of  an  on¬ 
line  hacker  magazine  called 
Phrack.  potentially  puts  at  risk 
GPS  devices  used  for  com¬ 
mercial  navigation  and  mili- 
tar>'  operations  purposes,  au¬ 
thorities  said. 

The  Phrack  article  provides 
a  detailed  guide  to  building  a 
low-cost,  portable  GPS  jam¬ 
mer  out  of  components  that 
can  be  easily  obtained  from 
electronics  supply  houses. 
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According  to  the  article,  the 
“onslaught  of  cheap  GPS- 
based  navigation  (or  hidden 
tracking  devices)  has  made  it 
necessary-  for  the  average  citi¬ 
zen  to  take  up  the  fine  an  of 
electronic  warfare.”  Electron¬ 
ics  and  GPS  experts  who  read 
the  article  last  week  called  it 
technically  competent  and 
said  amateurs  with  a  certain 

CPS  /ammers.  page  16 


VET  ANOTHER  THREAT 


Homemade 
GPS  Jammers: 

•  Cat  be  Mi  Iran  SSO  Mrfh  el 
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IBM  Takes  Steps 
To  Relieve  iSeries 
Pricing  Pain 

Rc\  ampof  fomier  AS  400  lino  adds  higli-ond 
mixlcls.  outs  cost  of  mnniiij:  gavn-scavn  apps 


BV  JAIKUMAR  VIJAVAN 

IBM  this  week  will  roll  out 
new  hardware,  pricing  and 
upgrade  options  for  users  of 
its  iSeric-s  systems  as  part  of  a 
S500  million  effort  to  revital¬ 
ize  the  25-year-old  midrange 
server  line. 

The  overhaul  is  aimed  at 
addressing  several  long-stand¬ 
ing  user  concerns  while  also 
making  the  iSeric’s  machines 
more  appealing  to  first -time 
buyers,  said  Al  Zollar.  who 
earlier  this  month  was  tapped 
to  head  the  iSeric's  business 
unit  at  IBM.  In  addition.  IBM 
plans  to  invest  more  in  mar¬ 
keting  in  an  attempt  to  boost 
interest  in  the  iScric’s  technol- 
c^y  among  software  vendors 
and  rescTlers.  Zollar  said. 

Perhaps  the  most  important 
development,  according  to 


users  and  anab-sis.  is  a  change 
in  the  way  IBM  charge's  users 
that  run  host-based  green- 
sciven  applications  on  ma¬ 
chines  in  the  iSeries  line, 
which  was  previously  known 
as  the  AS'400. 

Under  IBM's  new  Emcr- 

IBM  iSeries,  page  SJ 
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Kmployccswaniit 
aruld  happen  to 
other  armpanies.  tix) 


Terrorist  Probe  Hobbles  Rech 

In  an  exclusive  series  of  in- 
le^vie^s‘s  with  ComputerM'or/d. 
Ihcch  CEO  Oussama  Ziade 
and  several  former  employees 
said  the  government's  investi¬ 
gation  of  a  forme'r  im'cstor 
who  is  allegc'd  to  have  ties  to 
tcm»rism  (QuickLink  349701 
has  crippled  the  ability  of  the 
(Quincy.  Mass.,  software  com¬ 
pany  to  attract  netc  business. 
And  they  fear  the  same  thit^ 
could  happen  to  other  firms. 

Pttvh's  crisis  stems  from  a 
Dec.  5  consciLSual  search  by 

Ptcch  probe.  J6 


BV  DAN  VERTON 

The  White  House  has  given 
Piech  Inc.‘s  SL»ftware  a  clean 
bill  of  health,  and  nuvvt  of  the 
company's  customers  and 
strategic  business  partners  re¬ 
main  committed  to  its  tech¬ 
nology.  But  Ihech.  im'cstigaicd 
for  having  an  al-CJaeda  con¬ 
nection.  has  still  become  a  ca¬ 
sualty  of  the  war  on  terrorism. 


^There’s  a  new 
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Are  we  secured  aga 

Anything  can  happen  to  your  infrastructure.  Make  sure  it’s  secure.  The  evolution  of  the  internet  has 

led  to  increased  security  vulnerabilities  for  any  Internet-enabled  company.  In  this  difficult  and  challenging  environment,  where 

_ can  happen  at  any  moment.  Microsoft  understands  that  you  need  to  keep  your  infrastructure  prepared  for  anything  and 

everything  by  getting  it  secure  and  keeping  it  secure.  Here's  what  we're  doing,  along  with  our  industry  partners,  to  help  right  now : 


Security  for  your  existing 
Windows-based  environments 


Microsoft  IS  providing  tools,  services,  and 
guidance  to  help  you  get  and  stay  secure 
right  now.  For  example,  tools  such  as 
Microsoft  Windows  Update.  Microsoft 
Software  Update  Services,  and  Microsoft 
Systems  Management  Server  are  helping 
customers  control  and  automate  the 
identification,  collection,  and  application  of 
security  patches  today.  Plus,  our  Security 
Response  Center  is  staffed  seven  days  a 
week  to  investigate  any  reported  security 
vulnerabilities  in  Microsoft  products. 

You  can  also  get  immediate  free  support 
for  virus-related  incidents  on  Microsoft 
products  and  free  prescriptive  guidance  on 
securing  your  Windows  systems. 


Partnerships  and  products  to  further 
secure  your  infrastructure  today 

The  Microsoft  Gold  Certified  Partner 
Program  for  Security  Solutions  helps 
you  locate  the  best  providers  of  security 
solutions  for  your  IT  environment.  Microsoft 
Gold  Certified  Partners  for  Security 
Solutions  have  proven  experience,  validated 
by  their  customers,  in  delivering  robust, 
secure  implementations  of  Microsoft 
technologies.  The  technologies  include  key 
infrastructure  security  products  such  as 
Microsoft  Internet  Security  and  Acceleration 
(iSA)  Server  2000,  an  ICSA-certified 
firewall;  Systems  Management  Server  2.0. 
a  management  tool  for  distributing  security 
patches:  and  the  Microsoft  Active  Directory 
service,  a  centra!  repository  for  all  user-  and 
resource-identity  management  information. 


instthat?” 


The  future  of  Microsoft  products: 
designing  and  engineering  for 
maximum  security 


Microsoft  has  implemented  engineering 
standards  and  processes  that  focus  on 
Puilding  greater  security  into  our  products 
during  design  and  development.  Some 
highlights  of  the  ne\^  processes  include: 

•  Creating  stronger  default  policies  on  all 
software,  and  fewer  services  enabled  by 
default,  to  deliver  software  solutions  that 
are  more  secure  by  default 

•  Performing  exhaustive  cross-team 
security  code  reviews  to  help  identify  and 
address  potential  vulnerabilities  before  the 
software  is  released 

•  Developing  and  refreshing  new  threat 

models  to  help  counter  constantly  evolving  I  'Unisys  secunu  sei  vices,  parrncrco  with  Microsoft  products  and  solutions,  provide  our 

security  risks  [  customers  w'fh  highly  secure  ana  c^st  effective  m;ssion-cr/t/ca''  solutions.' 

-Sunil  Misra.  Managing  Principal. 
Vtorldwide  Security  Practice.  Unisys 

For  resource  kits,  webcasts,  and  other  information  that  can  help  you  get  your  network  infrastructure  secure  enough  to  handle _ or  even 

a _ visit  microsoft.com/enterprise/security  Software  for  the  Agile  Business. 
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And  that's  just  one  office.  Monitor  and  manage  all  your  storage 
from  a  single  point  with  BrightStor  Portal. 


You're  burning  the  midnight  oil.  So  is  your  storage  network.  Artd  the  only  things  growing  faster  than  your  storage  needs 

r 

are  your  storage  problems.  The  solution?  BrightStor^  Portal.  A  breakthrough  in  enterprise-wide  stora^  software  that  provides 
a  single  point  of  management.  With  a  flexible  portal  interface  that's  easy  to  use,  BrightStor  Portal  gives  you  a  customized  view 
of  your  entire  storage  environment  so  you  can  respond  to  any  issue,  anytime,  anywhere.  In-depth  access  to  business-critical 
information  24  x  7  will  help  you  simplify  operations,  increase  productivity  and  maximize  cost  efficiency  across  your  enterprise. 
Hey,  with  nrxjre  and  more  issues  under  cxxitrol,  you  may  actually  get  to  go  home.  ca.com/brightstor/poita! 


BrightStor  ”  Storage  Solutions  oa)  Computer  Associates' 
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DOW,  but  the  transition  may  cause  some  headaches 
for  users.  ONUNE;  The  chairman  of  the  lETFs  IPv6 
Woricing  Grotq)  says  IT  shops  should  be  holding 
off  00  foil  deployments.  0  QiMlirii  SdUt 


MFWdRipoit  Ethernet  metropolttan-area 
netwocfcs  offer  cheaper,  mote  Qeafole  bandsndtb 
than  traditional  Sooet^based  tecfancdogies,  but  the 
services  are  still  a  woik  in  progress.  OMJC:  Metro 
Ethernet  Forum  President  Nan  Chen  talks  about 
hour  the  group  win  metro  Ethernet  services 
proUfente.  OQMriiMiaRa 


36  ROI:  WrliielRf  SMlR|i  Fra«  VINP  Getting  pay¬ 
back  from  voiee-over-IP  mvcstments  isn't  easy, 
because  upfront  CMts  are  hi^  and  the  hidden  costs 
are  many.  But  some  users,  Iflte  Kevin  Lopex  (left)  at 
accounting  lira  Grant 
Thornton,  have  saved 
money  with  VOIP  in  the 
WAN. 


16  hrtvMl  BN  6raM  Up. 

Wal-Mart  is  iwitdiing  its 
EDI  traffic  from  value- 
added  networks  to  foe 
Internet,  using  software 
that  complies  with  the 
new  AS2  standard.  It  could  be  a  watershed  evenL 
But  users  wOl  find  that  they  need  to  do  a  lot  of  foe 
wotk  that  value-added  networks  used  to  d& 


40  Cafwn:  A  roundtqi  of  skills,  training  and  salary 
informatioo  for  netwoik  managers.  ONUiC;  Why  the 
Mkroaoft  and  Cisco  cerfifications  are  DOW  Caere 
prerequisites.  0QririUrit  66226 


42  Hin  NmI  Qi^plir  in  tim  coUectioo  of  industry 
predktioas.  pundits  say  that  ATScT  will  be 
acquired  by  a  Baby  BeU  and  that  only  a  few 
megacarriers  will  survive  foe 
telecom  depression. 


Microsoft  makes  its  source  code 
a  little  more  open  to  foreign  gov¬ 
ernments. 


XHIER 


TurtHilence  Ahead! 


Telecom  carriers  are  going  belly  up,  and 
even  more  are  expected  to  do  so  this  year. 
Corporate  network  managers  have  to 
cope  with  the  ugly  situation  as  well  as 
with  a  variety  of  shifts  in  the  networking 
landscape.  This  special  report  provides 

■  advice  on  how  to  navigate  this 
challenging  environment. 
PACKAGE  BEeiNS  ON  PAOE  26. 


26  The  SlOiy  So  Fm  Charlie  Brown,  Bill  Baxter. 
Harold  Greene  and  Bill  McGowan  are  the  cast  of 
characters  In  a  story  that  tnchides  the  breakup  of 
the  Ma  BeU  system  azui  the  consequent  intense 
competitioo  in  foe  kmg-faaul  telecom  market 


33  MwmI  ftelocol  Ifefileii  6.  IPv6  is 
repUdng  the  current  standard,  IPv4,  bringing 
greatly  expanded  address  space  and  many 
smaller  benefits.  Vendors  mostly  support  foe  move 


SAP  announces  the  launch  of  soft¬ 
ware  to  improve  application  integra¬ 
tion  capabilities. 


4 


4 


Oracle  says  H  will  simplify  the  in¬ 
stallation  process  for  its  E-Business 
Suite  lli  softM^re. 


10 


Microsoft  will  pay  up  to  $l.l  billion 
to  California  software  license  hold¬ 
ers  to  settle  a  class-action  lawsuit, 
but  businesses  are  wondering  how 
hard  it  will  be  to  prove  ownership. 


10 


Roto-Rooter  installs  a  wireless  sys¬ 
tem  that  will  use  Global  Positioning 
System  technology  and  a  set  of  ven¬ 
dor-hosted  applications  to  route  its 
employees  to  customer  sites. 


12 


Cisco  expands  its  product  line  for 
load  balancing,  including  a  device 
for  mirroring  data  across  data 
centers. 
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23  CepMo  VMMi  liriMoai 

IWBil.  Usem  like  ao  Zeke 
ZoccoH  (feft)  are  trying  to 
protect  their  WANs  from 
the  troubles  of  foe  telecom 
carriers  through  diversification, 
redundancy  and  shrewd 
contract  clauses.  « 


320pUoii:  Internet2  is  tq)  and  running  —  fest  It 
remains  off-limits  to  commercial  users,  but  there’s  a 
lot  for  n*  users  to  learn  from  foe  speed-burners  on 
the  12  raceway;  says  columnist  Matk  HalL 
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AT  DEADLINE 


HP  Set  to  Offer 
Four-CPU  Blades 

HtwM-fwkard  Co.  tadty  pbra 


UadB  Mrw  lt«f s  tesad  on  hiM 
XnnMPcNiiiMdanlMeoft* 
iMClMitonbroCkMralsIorig*- 
•TM  mtworto  (SAN).  Prtcoo  slafi 
M  S8M.  S«¥V  ifMi  BM  laid 
N  pim  to  add  iDur^  hMo  da- 
flcM  wMt  SAN  GonnocttBni  tater 
thi*  yoar.  Oil  Conputar  Corp. 
also  haa  »ch  syatama  on  Ml  road 
map  but  dadnad  to  dbdosa  Ns 
daivwy  plans. 


kicofne.  Revenue 
Jump  at  Microsoft 

•Ncroaoft  Carp,  raportod  a  S2.55 
Mfcn  proM  on  ravama  o(  S8JM 
UBon  lof  III  aaoond  puartar. 
adddi  andad  Dac.  St.  up  from  the 
yoaraarlar  igvaa  ol  S2.2B  bl- 
ion  and  S7.7I  bBon.  Hm  compa* 
iiy  said  N  aipaeti  up  to  $7  J  bl- 
Mon  bi  raaanw  tWi  quartor.  Uda 
do  Bot  aipact  to  aaa  a  aignMcanl 
upturn  in  giebal  ft  apandtag  in  the 
Mioil  tarm.*  aaM  Jotoi  Connors, 
Mcroaoll'i  diM  fbiMdai  officar. 


BUI’S  Profit  Drops; 
Sun  Reports  Loss 

BM  aaM  Ml  fourth  gawtof  raa- 
amia  ^  7%  to  S23J8  bWon, 
up  from  S22.M  UBan  a  yaar  am- 
lir.  But  Ml  proMts  from  eonttnu- 
big  opmaltois  fal  to  St91  bBon. 
Gompmad  artih  S2.S7  UBon  a 
yaaraarttor.  Sun  Mtorouyatoms 
lnc.rapaftodanatleaaofS2.28 
UBon.fiMtodbydoHlS23Uh 
Ion  bi  dtargaa,  for  Ns  aoond 
BHitor.  adddi  ondod  Doc.  29. 
Navanuo  fal  0Mb  yaar  trvar  yaar. 


Orange,  lAcrosoft 
Fixing  Phone  Raw 


Oranpa  8A  add  rt  mrldna  atM 
MScnaaft  to  III  a  aacwfly  ftoar  In 


The  bate  eauH  M  aaan  BnMa  a 
pratodian  apdaal  rmudni  uncar 
fund  ippiruHnm.  Ormna  aaM. 


SAP  Adds  Software  to 
Boost  App  Integration 

NetWeaver  suppc)rts  .Net  and  Java,  aims 
to  lower  cost  of  linking  applications 


BV  MAHC  L.  SOMOINI 

SAP  AG  LAST  WEEK  an> 
nounccd  the  launch  of 
new  integration  tech¬ 
nology  that  it  claims 
will  help  users  slash  the  cost 
of  connecting  disparate  busi¬ 
ness  applications. 

SAP  said  it’s  standardizing 
its  own  applications  on  the 
Enterprise  Services  Architec¬ 
ture  blueprint,  which  is  based 
on  the  use  of  Web  services.  It 
also  announced  NetWeaver, 
an  uf^raded  version  of  its  in¬ 
tegration  backbone  software 
that’s  designed  to  support  ties 
between  SAPs  applications, 
third-party  products  and 
homegrown  software  without 
forcii^  users  to  tinker  with 
the  underlying  technology. 

NetWeaver  is  the  next  gen¬ 
eration  of  mySAP  Technology, 
a  set  of  integration  software 


announced  in  2001.  SAP  said 
NetWeaver  can  function  as  an 
integration  and  application 
server  platform  for  companies 
that  use  either  Microsoft  .Net 
or  IBM’s  lava-based  Web¬ 
Sphere  development  toob. 
liie  software  also  supports 
SAPs  proprietary  ABAP  pro¬ 
gramming  language. 

’’TTie  ultimate  business  ben¬ 
efit  is  reduced  total  cost  of 
ownership,"  said  William 
Wohi.  a  spokesman  for  SAP 
America  Inc.  in  Newtown 
Square.  Pa.  For  many  users,  he 
noted,  integration  is  the 
bigg^t  &ctor  in  system  costs. 

Hie  new  technology  could 
greatly  simplify  integration  for 
SAP  users,  said  Yvonne  Gen¬ 
ovese,  an  analyst  at  Gartner 
Inc.  She  said  SAP  is  opening 
up  its  applications  more  wide¬ 
ly  with  NetWeaver  than  it  did 


SAPs  NetWeaver 

a  A  framework  that  biefcidas 
buMt  In  tamalifat,  deaijB  niiis 
and  tooto  such  as  an  obiect 
access  Iay9.  for  creating  com¬ 
posite  apptications. 

a  Master  data  management  func- 
tionaiitythatcanbauMdtecan- 
lafMite  and  cantraMy  oontnd 
data  stored  in  muttiple  systems 
and  physicaf  locations. 


with  mySAP  Technolt^  and 
xApps,  a  so-called  cross-appli¬ 
cations  initiative  the  company 
announced  last  June.  Many 
users  “need  to  be  able  to  pull 
data  hrom  IBM  WebSphere  or 
a  .Net-based  application," 
Genovese  said 
NetWeaver  sounds  like  a 
way  to  eliminate  costly  point- 
to-point  connectors  between 
applications  through  the  use 
of  native  XML  and  Web  ser¬ 
vices  messaging  technologies. 


said  Bruce  Decock.  CIO  at 
semiconductor  maker  LSI 
Logic  Corp.  in  Milpitas.  Calif. 
*Those  inter£ices  cost  a  lot  to 
maintain,"  E)ecock  said 

He  added  that  he’s  particu¬ 
larly  interested  in  a  composite 
application  framework  that’s 
part  of  NetWeaver.  LSI  could 
use  that  to  share  engineering 
and  product  design  data  in  its 
SAP  R/3  enterprise  resource 
planning  applications  with  its 
Microsoft  Project  scheduling 
and  resource  management 
system,  he  said. 

The  composite  application 
capability  supports  the  devel¬ 
opment  of  unified  processing 
workflows  that  involve  multi¬ 
ple  systems,  according  to  SAP. 
’The  company  said  NetWeaver 
will  also  offer  master  data 
management  services,  which 
can  integrate  Information  in 
different  databases  (see  box). 

In  addition,  NetWeaver  in¬ 
cludes  technologies  such  as 
SAP's  portal,  collaboration  and 
business  intelligence  software. 
The  integration  tools  are  al¬ 
ready  shipping  with  some  SAP 
applications,  but  the  company 
said  the  master  data  man^e- 
ment  feature  won't  be  avail¬ 
able  until  the  third  quarter.  I 


Grade  Takes  New  Steps 
To  Speed  Up  11i  Rollouts 


Accelerator’ 
bundles  target 
specific  tasks 


BV  MANC  L.  BOMOmi 

Faced  with  sagging  new  li¬ 
cense  revenue  for  its  business 
applications,  Oracle  Corp.  this 
week  plans  to  expand  its  ef¬ 
forts  to  ease  user  headaches 
related  to  installing  the  latest 
version  of  the  software. 

At  its  AppsWorid  user  con¬ 
ference  in  San  Diego,  Oracle 
will  announce  a  .set  of  bundled 
applications  and  consulting 
services  that  address  specific 
business  needs.  Called  Busi¬ 
ness  Flow  Accelerators,  the 
new  packages  are  designed  to 
help  users  deploy  pieces  of 
Oracle’s  E-Business  Suite  Ui 
product  line  quickly  and  cost- 


effectively,  said  Fred  Studer. 
vice  president  of  E-Business 
Suite  mariieting. 

"You  don’t  have  to  adopt  the 
whole  E-Business  Suite."  Stud¬ 
er  said.  "No  question,  it's  not 
an  easy  thing  to  install.  The 
more  we  can  help  automate 
that  process  and  get  people  a 
quick  return,  the  better." 

Oracle  plans  to  announce  20 
accelerator  packages,  span¬ 
ning  functional  areas  such  as 
customer  relationship  man¬ 
agement,  supply  chain  distrib¬ 
ution  and  finance.  The  move 
expands  on  an  earlier  rapid- 
deployment  offering,  called 
FastForward,  that  was  aimed 
at  midsize  users.  It  continues  a 
campaign  to  reduce  Ui’s  com¬ 
plexity  that  Oracle  launched 
at  AppsWorid  last  year. 

The  simplified  bundling 


plan  makes  sense  to  Frank  Mi¬ 
lano.  CIO  at  Terracon  tnc.,  an 
engineering  consulting  firm  in 
Lenexa,  Kan.  Milano  said  Ter- 
racoD  b  about  one-third  of  the 
way  through  a  rollout  ofUi  at 
its  60  offices,  a  project  that  in¬ 
volves  installing  25  financial, 
project  management  and  hu¬ 
man  resources  applications. 
Bundled  packages  that  com¬ 
bine  the  applications  with 
software  maintenance  and 


Speed  It  Up 


Other  services  would  be  easier 
to  deal  with,  he  said. 

Like  rival  vendors,  Oracle 
has  seen  its  application  sales 
drop  because  of  tight  IT 
spending.  The  company  re¬ 
ported  revenue  of  S2SL7  mil¬ 
lion  for  its  applications  in  its 
second  quarter  ended  Nov.  30, 
down  from  $290.2  milUoo  in 
the  same  period  a  year  earlier. 

Joshua  Greenbaum.  an  ana¬ 
lyst  at  Enterprise  Af^lications 
Consulting  in  Daly  City.  C^if., 
said  Oracle  needs  to  bring 
more  of  its  marketing  focus 
back  to  the  applications  side 
of  its  business.  "Aj^Ucations 
have  taken  a  back  bun>er  to 
[database  and  application 
server]  technology  at  Oracle 
of  late,”  Greenbaum  said.  M 
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Retailers  Explore 
Price  Optimization 

Early  adopters  see  benefit,  but  some 
users  still  wary  of  new  technology 


Software  that  can  help  retail¬ 
ers  set  initial  prices  and  man¬ 
age  their  markdown  cycles 
could  see  an  uptick  in  adop¬ 
tion  this  year  if  the  interest 
expressed  at  last  week's  Na¬ 
tional  Retail  Federation  Con¬ 
ference  &  Expo  here  morphs 
into  action  plans. 

More  than  200  at¬ 
tendees  packed  a 
Sunday  morning 
conference  session 
on  merchandise  opti¬ 
mization.  and  several  retail  ex¬ 
ecutives  said  their  companies 
either  are  piloting  price  opti¬ 
mization  software  or  explor¬ 
ing  its  potential  to  assist  their 
decision-makers,  through  its 
sophisticated  mathematical 
modeling  capabilities. 

“Early  results  are  encourag¬ 
ing.  We  think  there  are  incre¬ 
mental  (profit]  margin  oppor¬ 
tunities  assodated  with  it.' 
said  Stephen  Sadove,  vice 
chairman  of  Saks  Inc.,  which 
is  testing  software  from  Spot¬ 
light  Solutions  Inc  in  Mason. 
Ohio  Spotlight  specializes  in 
software  designed  to  help  a 
company  plan  the  best  time  to 
discount  seasonal  items. 

Steve  Schwartz,  a  senior 
vice  president  of  planning  and 
allocacioo  at  Casual  Male  Re¬ 
tail  Group  tnc.  in  Canton. 


Mass.,  said  maikdown  opti¬ 
mization  software  from  Profit- 
Logic  Inc.  in  Cambridge, 

Mass.,  eliminated  tbe  need  for 
“inches  thick"  reports  show¬ 
ing  stock-keeping  unit,  sales 
and  Inventory  data  that 
“would  take  forever  to  go 
through." 

'Hie  men's  apparel  chain  ini¬ 
tially  sent  two  years'  worth  of 
data  to  ProfttLogic 
and  now  sends 
weekly  sales  and  in¬ 
ventory  figures  by 
store  Tbe  optimiza¬ 
tion  software  does  tbe  num¬ 
ber-crunching  and  produces 
markdown  recommendations 
based  on  tbe  region  where  a 
store  is  located  Tbe  mtly  IT 
involvement  was  getting  tbe 
data  to  ProfttLogic.  which 
hosts  tbe  software  and  is  paid 
a  monthly  foe.  Schwartz  said. 

Schwartz  said  tbe  ProfhLog- 
ic  system  has  helped  his  com¬ 
pany  improve  its  gross  profit 
margin  and  tbe  liquidation 
rate  of  seasonal  items,  but  he 
declined  to  provide  numbers. 

Another  type  of  optimizie 
tkm  software  is  aimed  at  help¬ 
ing  retailers  predict  consumer 
demand  and  set  everyday 
prices  of  merchandise,  with  an 
eye  toward  a  sales  or  profit 
target  Two  leading  vendors 
are  DemandTec  Inc  in  San 
Caiios.  Calif.,  and  KhiMetrics 


Inc.  in  Scottsdale,  Ariz. 

DemandTec  which  claims 
14  customers,  points  to  statis¬ 
tics  showing  that  Longs  Drug 
Stores  Corp.  in  Walnut  Creek. 
Calif,  boosted  gross  sales  by 
L9%  and  gross  profit  by  S.1% 
after  et^  weeks.  D'Agostino 
Supermaikets  Inc.,  a  grocery 
chain  based  in  Larchmont, 
N.Y..  increased  revenue  by 
9.7%.  gross  profit  by  16.1%  and 
net  profit  by  1%  to  2%.  accord¬ 
ing  to  DemandTec. 

Manugistics  Group  Inc.  and 
i2  Technologies  Inc.  are  mak¬ 
ing  strides  in  price  optimiza¬ 
tion.  and  retail  application 
vendors  JDA  Software  Group 
Inc  and  Retek  Inc  are  expect¬ 
ed  to  loin  tbe  ftay. 

I^ice  optimization  is  still  in 
the  eariy  stages.  Greg  Girard, 
an  analyst  at  AMR  Research 
Inc.  in  Boston,  said  no  more 
than  20  retailers  have  licensed 
tbe  applicatiotts  for  enterprise 
rollout.  The  cost  for  unpl^ 
mentation  can  soar  past  $l 
million,  so  even  thoufji  the  re¬ 
turn  on  investment  may  look 
promising,  the  decision  can't 
be  taken  lightly. 

“I  don't  think  everyone's 
convinced  just  yet  that  it's  go¬ 
ing  to  work  for  them.  We're 
still  in  tbe  learning  phase" 
said  Chris  Boone  an  analyst  at 
IDC  Plus,  "implementing  this 
requires  a  pretty  significant 
cultural  shift,"  be  added. 

Rilow  the  leader 

Many  retailers  prefer  to  trust 
seasoned  employees  over  a 
black  box.  Plus,  retailers  are 
typically  slow  to  adopt  new 
technology  until  they  see 
proven  results  from  their 
peers.  The  Home  Depot  Inc... 
for  instance,  decided  to  try  the 
software  after  hearing  about 
positive  results  ftom  reuilers 
such  as  fC.  Penney  Ca  and 
Meijer  Inc.  Tbe  Atlanta-based 
bocne  improvement  retailer 
this  month  started  running 
ProfitLogic  in  parallel  with  its 
exbring  markdown  systems, 
with  plans  Cor  ftiU  rollout 
starting  this  spring. 

Gary  Jones,  director  of  mer¬ 
chandise  (m)cess  managciDcni 
at  Home  Depot,  advised  his 
peers  to  malice  sure  they  un¬ 
derstand  their  companies'  cur¬ 
rent  seasonal  maikdown  proc¬ 


esses  before  they  explore  the 
optimization  products.  He 
suggested  that  they  start  small 
and  learn  how  tbe  new  tools 
can  be  used. 

"Pilots  are  still  churning 
their  way  through."  said  An¬ 
drew  White,  an  analyst  at 


Gartner  Inc.  “I  don't  think 
anybody  is  saying,  hand  on 
heart,  this  is  tbe  way  to  go. 
[Tbe  technology}  does  sbow 
great  promise,  but  it’s  still 
really  unproven  in  more  than 
just  one  or  two  implementa¬ 
tions."  he  added.  I 


Srars  CEO  Con^any 

Wl  Standaidlro  Technology 


S«vs.RoitiucfcandCaiBpio(- 
tiQ  a  oNin  eystamo  engi 
noering  MMvs  dMignid  to  id- 
(ta£  lit  anpmy’t  fcagmantod 
toefoutogy  tppfoich.  tcoofdnQ 
to  CGOIlin  Lny. 

Da  0  flHort  is  btong  lid  by 
6iny  Kriy.  <Nho  MS  naiad  CX) 
inOrtoba.SMnihaJtaaiopa- 
attng  wMi  at  Maim  QO.  Oon 
Zmaaraan.  tact  (Mtodal  of 
IT.  sinca  la  Mw  t7  dtoarlM  ol 
etrryMhi.Mia'tsuddanaM 
cant  hwr  dmt  lAa  la  ntala 
aiwoimcedlarnitolinnol 
Laidl’&idlnc.Canipaiyoli- 
cMi  dtdiad  to  ooMiant  on  la 
CiOchaigiallatofa. 

ljcy.clMmanail 
CBJetoceOteaitoa 
2000.li«MMia(Bla 
^Compmrnmld 
tfaaillaatola'stoeh- 
notogy  plaa  far  Ms  yoa 
atdIadangtinIT 


tona^Myawtodto 
nMtolMtaalMlatea- 
iylMa.ato«aBatCX>.*l 
«aa  tary  lia  Mqt  tar  our 
compaiy  aid  la  MS  afli  us  for 
a  nmbaofywaMlfHlygoi 
usbabanaMofagMy 
Gary  Kriy.  who’s  oooe  In  tour 
a  fere  monia  ago.  Is  t  My 
good  butonaian  and  todmoF 
ogyoMor.MlMRkiMMs 
afaitar  to  gM  IS  to  la  nail  ImI 
isgoingtobaMylataU. 


da  yw  iMw  fliMii  tor  fea 

ya^  VtoVa  gol  a  mtaa  tort  ol 
fawnotaeatag  <1  nsr  whola  (T 
kmeftm  flgM  now  in  pncMi  * 
ainchaa.  aytoana.  WeVi  had  a 
My  hagmsntod  appnadi.  and 


M’labMcrfylmtagtostBi- 
deidte  Nijch  MM  so  Ian  «a 
haainiaiaBL 
dto'vagottoomaiypainHd- 
srii  fatoans.  too  many  taMdofy 
syaly  too  nany  INb.  IM  and 
laadarMno.taecauBaMba- 
sicMy  dowwd  for  many,  mny 
yeas  each  bUBlniss  to  do  to 
own  ttno.  wNch  aa're  not  gotog 
todoanymom. 

WByMhatogtoBntolaf 

■Mtoata*«f«jaade 

ligMooarsbatoalyatandBd- 
iza  aroond  nhto  m’iw  got  as 
Rwaa  I  and  In  Baae  Z  yas. 
lam'd  ba  naia  oomiRo  on 
baato.BmlMnknMe1 
tabMolystanMae 
aoundlabasloiwha 
M  ham  and  Ian  aaaBB 
how  tar  torn  gms  «B,  and 
toanwtldKidihDw 
HuchMwaltoaupiilr 


toatodhiMtoeuIdl' 


awfsmgT  Vto  wodd  ham  done  I 


hew  latoe  aiMa  tditoT  Itoa 
■Mh  wmh  haai  dmat  We'm 

pol  wMy  dotag  much  naupng 
•am.11ioyWgotaMnrcMtaita  - 
taaR«pliBa.andM'mlidiBg  \ 
lamdo*airlilng.Wi’ittooic- 
tag  far  oppoitanlies  to  temuge 
whim  M  cat.  but  lam's  no  in- 
toomtonwMnLaids'Eml 
They  contaiue  to  tarn  fair  own 
ahopandnailqulewil. 


■inflfaia 

aonitai. 


a?  No.  And  lam 


MwiraiNu  jmvtM.mu 


NEWS 


N.comDUlerwDrld.com 


AT  DEADLINE 


HP  Set  to  Offer 
Fbur-CPU  Blades 

H«w(itt‘Pidi«rd  Co.  today  pUns 
to  announce  a  four*proc8S8or 
btada  »»nm  that’*  based  on  InttI 
Xooo  MP  cNpa  and  can  be  con¬ 
nected  to  Rbre  Channel  storago- 
area  netnorlis  (SAN).  Prices  start 
at  S8.999.  SerUr  rtvai  IBM  said 
it  pUns  to  add  four-CPU  Made  de- 
vicas  wWi  SAN  conneetkins  later 
this  year.  DeN  Computer  Corp. 
also  has  such  systems  on  Its  road 
map  but  dedined  to  disclose  its 
ddvery  plans. 


Income,  Revenue 
Jump  at  Microsoft 

Mkrosoft  Corp.  reported  a  S2.K 
bWon  profit  on  revenue  ot  S8.54 
bilion  for  its  second  quarter, 
which  ended  Dec.  3t  up  hem  the 
yeer-eerfier  figures  of  S2.28  bl- 
Bon  and  S7.7fi  blBon.  The  compa¬ 
ny  said  it  aspects  up  to  S7  J  bi¬ 
ion  In  revenut  this  quarter,  "yh 
do  not  aspect  to  see  e  signifleant 
upturn  in  global  fT  spondng  in  the 
short  farm,*  said  John  Connors. 
Mkroaoft's  chief  finandaJ  officer. 


IBM’s  Profit  Drops; 
Sun  Reports  Los 

BM  saM  fis  feurtlHiuaiter  rev¬ 
enue  grew  7%  to  S23.68  hWon. 
up  from  $22.M  btton  a  year  ev- 
lar.  But  tts  profits  from  continu¬ 
ing  epontioni  fell  to  $t9t  biBon. 
compered  with  82J7  hWoo  a 
year  eerier.  Sun  Mteroeyetams 
bic.  reported  a  net  lees  of  S2.28 
blHon.fuolodbyabowtS2.5bl- 
lon  bi  charges,  for  Its  second 
quarter,  which  ended  Dec.  29. 
Revenue  fel  6fib  year  over  year. 


Orange,  Microsoft 
Fodng  Phone  Raw 

Lflndon-beeed  Mtworfc  operator 
Orange  SA  said  Ifi  working  with 
Mtereeoft  to  fa  a  security  fiaw  In 
a  mable  phent  thafs  based  on 
aacroaoii  s  amanpnono  seivware. 
The  bde  eoidd  fa  uawt  faMde  a 
pretaclfai  agabfa  funniag  wncor- 
fifiad  appficafiem.  Orange  said. 


SAP  Adds  Software  to 
Boost  App  Integration 


NetWeaver  .suprKirts  .Net  and  Java,  aims 
to  lower  cost  of  linking  applications 


BV  MAJIC  C-  SOWOlMt 

SAP  AG  LASTWEtK  an¬ 
nounced  the  launch  of 
new  integration  tech¬ 
nology  that  it  claims 
will  help  users  slash  the  ctwt 
of  connecting  disparate  busi¬ 
ness  applications. 

SAP  said  it’s  standardizing 
its  own  applications  on  the 
Enterprise  Services  Architec¬ 
ture  blueprint,  which  is  based 
on  the  use  of  Web  services.  It 
also  announced  NetWeaver. 
an  upgraded  version  of  its  in¬ 
tegration  backbone  software 
that's  designed  to  support  lies 
between  SAP's  applications, 
third-party  products  and 
homegrown  software  without 
forcing  users  to  tinker  with 
the  underlying  technology. 

NetWeaver  is  the  next  gen¬ 
eration  of  mySAP  Technology, 
a  set  of  integration  software 


announced  in  2001.  SAP  said 
NetWeaver  can  function  as  an 
integration  and  application 
server  platform  for  companies 
that  use  either  Microsoft  .Net 
or  IBM’s  Java-based  Web¬ 
Sphere  development  tools. 

The  si>ftware  also  supports 
SAP’s  proprietary  ABAP  pro¬ 
gramming  language. 

“The  ultimate  business  ben¬ 
efit  is  reduced  total  cost  of 
ownership."  said  William 
Wohl.  3  spokesman  for  SAP 
America  Inc.  in  Newtown 
Square.  Pa.  For  many  users,  he 
noted,  integration  is  the 
biggest  factor  in  system  costs. 

The  new  technology  could 
greatly  simplify  integration  for 
SAP  users,  said  Yvonne  Gen¬ 
ovese.  an  analyst  at  Gartner 
Inc.  She  said  SAP  is  opening 
up  its  applications  more  wide¬ 
ly  with  NetWeaver  than  it  did 


SAFs  NetWeaver 

•  A  Iramewnrk  that  Indwks 
built-in  tempUtss.  design  rules 
and  looto.  such  as  an  otqect 
access  layer,  for  creating  com¬ 
posite  applications. 

•  Master  data  rnanagemenl  func¬ 
tionality  that  can  be  used  to  con¬ 
solidate  and  centralfy  control 
data  stored  in  multiple  sysierm 
and  physical  locations. 

with  mySAI*  Technology  and 
xApps,  a  so-called  cross-appli¬ 
cations  initiative  the  company 
announced  last  June.  Many 
users  ’“need  to  be  able  to  pull 
data  from  IBM  WebSphere  or 
a  -Net-based  application." 
Genovese  said. 

NetWeaver  sounds  like  a 
way  to  eliminate  costly  point- 
to-point  connectors  bemeen 
applications  through  the  use 
of  native  XML  and  Web  ser¬ 
vices  messaging  technologies. 


said  Bruce  Decock.  CIO  at 
semiconductor  maker  LSI 
Logic  Corp.  in  MUpita.s,  Calif. 
“Those  interfaces  cost  a  lot  to 
maintain,"  Dccock  sa^d. 

He  added  that  he's^particu- 
larty  interested  in  a  cbmposite 
application  framework  that’s 
part  of  NetWeaver.  LSI  could 
use  that  to  share  engineering 
and  product  design  data  in  its 
SAP  R/3  enterprise  resource 
planning  applications  with  its 
Microsoft  Projea  scheduling 
and  resounre  management 
system,  he  said. 

The  composite  application 
capability  supports  the  devel¬ 
opment  of  unified  processing 
workflows  that  involve  multi¬ 
ple  systems,  according  to  SAP. 
The  company  said  NetWeaver 
will  also  offer  ma.stcr  data 
management  services,  which 
can  integrate  information  in 
different  databases  (sec  box). 

In  addition.  NetWeaver  in¬ 
cludes  technologies  such  as 
SAP's  portal,  collaboration  and 
business  intelligence  software. 
The  integration  tools  are  al¬ 
ready  shipping  with  some  SAP 
applications,  but  the  company 
said  the  master  data  manage¬ 
ment  feature  won’t  be  avail¬ 
able  until  the  third  quarter,  b 


Oracle  Takes  New  Steps 
To  Speed  Up  111  Rollouts 


‘Accelerator’ 
bundles  taiget 
specific  tasks 

ST  MABC  L.  SONOIN1 

Faced  with  sagging  new  li¬ 
cense  revenue  for  its  business 
applications.  Oracle  Corp.  this 
week  plans  to  expand  its  ef¬ 
forts  to  ease  user  headaches 
related  to  installing  the  latest 
version  of  the  software. 

At  its  AppsWbrid  user  con¬ 
ference  in  San  Diego,  Oracle 
will  announce  a  set  of  bundled 
applications  and  consuliiitg 
services  that  address  specific 
business  needs.  Called  Busi¬ 
ness  Flow  Accelerators,  the 
new  packages  are  designed  to 
help  users  deploy  pieces  of 
Oracle’s  E-Business  Suite  Ui 
prtMluct  line  quickly  and  cost- 


effectively.  said  Fred  Studer. 
vice  president  of  E-Business 
Suite  marketing. 

“You  don't  hove  to  adopt  the 
whole  E-Busioess  Suite,"  Stud¬ 
er  said.  “No  question,  it’s  not 
an  easy  thing  to  instalL  The 
more  we  can  help  automate 
that  process  and  get  people  a 
quick  return,  the  better." 

Oracle  plans  to  announce  20 
accelerator  packages,  span¬ 
ning  functional  areas  such  as 
customer  relationship  man¬ 
agement,  supply  chain  distrib¬ 
ution  and  finance.  Tbe  move 
expands  on  an  earlier  rapid- 
deployment  offering,  called 
FastForward,  that  was  aimed 
at  midsize  users.  It  continues  a 
campaign  to  reduce  Hi's  com¬ 
plexity  that  Oracle  launched 
at  Apps World  last  year. 

Tbe  simplifled  bundling 


plan  makes  sense  to  Frank  Mi¬ 
lano,  CIO  at  Terracon  Inc.,  an 
enginecrii^  consulting  firm  in 
Lenexa,  Kan.  Milano  said  Ter¬ 
racon  is  about  one-third  of  the 
way  through  a  rollout  of  lli  at 
its  60  offices,  a  project  that  in¬ 
volves  installing  25  financial, 
project  management  and  hu¬ 
man  resources  applications. 
Bundled  packages  that  com¬ 
bine  the  applications  with 
software  maintenance  and 


Speed  It  Up 


other  services  would  be  easier 
to  deal  with,  he  said. 

Like  rival  vendors.  Oracle 
has  seen  its  application  sales 
drop  because  of  tight  IT 
spending.  The  company  re¬ 
ported  revenue  of  ^L7  mil¬ 
lion  for  its  applications  in  its 
second  quarter  ended  Nov.  30, 
down  from  $290J  million  in 
the  same  period  a  year  earlier. 

Joshua  Greenbaum,  an  ana¬ 
lyst  at  Enterprise  Applications 
Consulting  in  Daly  City.  Calif., 
said  Oracle  needs  to  bring 
more  of  its  marketing  focus 
back  to  the  applications  side 
of  its  business.  “Applications 
have  taken  a  back  burner  to 
(database  and  application 
server]  technology  at  Oracle 
of  late,"  Greenbaum  said,  b 
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Retailers  Explore 
Price  Optimization 

Eariy  adopters  see  benefit,  but  some 
users  still  \var>'  of  new  technolog\’ 


Bv  cahol  sliwa 

NEW  VORK 

Software  that  can  help  retail¬ 
ers  set  initial  prices  and  man¬ 
age  their  markdown  cycles 
could  see  an  uptick  in  adop¬ 
tion  this  year  if  the  interest 
expressed  at  last  week's  Na¬ 
tional  Retail  Federation  Con¬ 
ference  &  Expo  here  morphs 
into  action  plans. 

More  than  200  at¬ 
tendees  packed  a 
Sunday  morning 
conference  session 
on  merchandise  opti¬ 
mization.  and  several  retail  ex¬ 
ecutives  said  their  companies 
either  are  piloting  price  opti¬ 
mization  software  or  explor¬ 
ing  its  potential  to  assist  their 
decision-makers,  throu^  its 
sophisticated  mathematical 
modeling  capabilities. 

"Early  results  are  encourag¬ 
ing.  We  think  there  are  incre¬ 
mental  {proftt]  margin  oppor¬ 
tunities  associated  with  it,” 
said  Stephen  Sadove,  vice 
chairman  of  Saks  Inc.,  which 
is  testing  software  from  Spot¬ 
light  Solutions  Inc.  in  Mason. 
Ohia  Spotlight  specializes  in 
software  designed  to  help  a 
company  plan  the  best  time  to 
discount  seasonal  items. 

Steve  Schwartz,  a  senior 
vice  president  of  planning  and 
allocation  at  Casual  Male  Re¬ 
tail  Group  Inc.  in  Canton. 


Mass.,  said  markdown  opti¬ 
mization  software  from  Profit- 
Logic  Inc.  in  Cambridge. 

Mass.,  eliminated  the  need  for 
"mches  thick"  reports  show¬ 
ing  stock-keeping  unit,  sales 
and  inventory  data  that 
"would  take  forever  to  go 
through.” 

llie  men's  api>arel  chain  ini¬ 
tially  sent  two  years'  worth  of 
data  to  ProfuLogic 
and  now  sends 
weekly  sales  and  in¬ 
ventory  figures  by 
store.  The  optimiza¬ 
tion  software  does  the  num¬ 
ber-crunching  and  produces 
markdown  recommendations 
based  on  the  region  where  a 
store  is  located.  The  only  IT 
involvement  was  getting  the 
data  to  ProfitLogic,  which 
hosts  the  software  and  is  paid 
a  monthly  fee.  Schwartz  said. 

Schwartz  said  the  ProfitLog¬ 
ic  system  has  helped  his  com¬ 
pany  improve  its  gross  profit 
margin  and  the  liquidation 
rate  of  seasonal  items,  but  be 
declined  to  provide  numbers. 

Another  type  of  optimiza¬ 
tion  software  is  aimed  at  help¬ 
ing  retailers  predict  consumer 
demand  and  set  everyday 
prices  of  merchandise,  with  an 
eye  toward  a  sales  or  profit 
target.  Two  leadii^  vendors 
are  DemandTec  Inc.  in  San 
Carlos,  ralif,  and  KhiMetrics 
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Inc.  in  Scottsdale.  Ariz. 

DemandTec.  which  claims 
14  customers,  points  to  statis¬ 
tics  showing  that  Longs  Drug 
Stores  Corp.  in  Walnut  Creek. 
Calif.,  boosted  gross  sales  by 
1.9%  and  gross  profit  by  S.1% 
after  eight  weeks.  D'Agostino 
Supermarkets  Inc.,  a  grocery 
chain  based  in  Larchmoni, 
N.Y..  increased  revenue  by 
9.7%,  gross  profit  by  16.1%  and 
net  profit  by  1%  to  2%.  accord¬ 
ing  to  DemandTec. 

Manugistics  Group  Inc.  and 
i2  Technologies  Inc.  are  mak¬ 
ing  strides  in  price  optimiza¬ 
tion.  and  retail  application 
vendors  JDA  Software  Group 
Inc.  and  Retek  Inc.  arc  expect¬ 
ed  to  loin  the  fray. 

Price  optimization  is  still  in 
the  early  stages.  Greg  Girard, 
an  analyst  at  AMR  Research 
Inc.  in  Boston,  said  no  more 
than  20  retailers  have  licensed 
the  applications  for  enterprise 
rollout.  The  cost  for  imple¬ 
mentation  can  soar  past  $1 
million,  so  even  though  the  re¬ 
turn  on  investment  may  look 
prommng,  the  decision  can’t 
be  taken  lightly. 

"I  don’t  think  everyone’s 
convinced  iu.st  yet  that  it’s  go¬ 
ing  to  work  for  them.  We’re 
still  to  the  learning  phase.” 
said  Chris  Boone,  an  analyst  at 
IDC.  Plus,  "implementing  this 
requires  a  prett>’  significant 
cultural  shift.”  he  added. 

Fdfcw  the  Leader 

Many  retailers  prefer  to  trust 
seasoned  employees  over  a 
black  box.  Plus,  retailers  arc 
typically  slow  to  adopt  new 
techne^ogy  until  they  sec 
proven  results  from  their 
peers.  The  Home  Depot  Inc, 
for  instance,  decided  to  try  the 
software  after  hearing  about 
positive  results  from  retailers 
such  as  |.C  Penney  Ca  and 
Meijer  Inc.  The  Atlanta-based 
home  improvement  retailer 
this  month  started  running 
ProfilLc^ic  to  parallel  with  its 
existing  markdown  systems, 
with  plans  for  full  rollout 
starting  this  spring. 

Gary  Jones,  director  of  mer¬ 
chandise  process  management 
at  Home  Depot,  advised  his 
peers  to  malv  sure  they  un¬ 
derstand  their  companies'  cur¬ 
rent  seasonal  markdown  proc¬ 


esses  before  they  explore  the 
optimization  products.  He 
suggested  that  they  start  small 
and  learn  how  the  new  tools 
can  be  used. 

"Pilots  are  still  churning 
their  way  through."  said  An¬ 
drew  While,  an  anah'st  at 


•T  CAMOL  SenVA 

Sears.  Roebuck  and  Co.  is  plot- 
a  major  systems  le-engt- 
nBerinomitiatiMdesignedtoad* 
(feess  the  company's  tragmenied 
technoiO(pr  appro^.  acconkng 
toCEOAInUey 
The  IT  efiort  is  beng  led  by 
Garry  Kely.  who  MBS  named  CX) 
inOclober.Seershadbeenoper' 
tiInQ  an  interan  CIO.  Don 
Zimmermaa  a  vice  prasxlent  of 
IT.  since  the  May  17  departure  of 
Gerry  Mjler.  Uier'ssuddet)  exit 
came  Iota  deys  alter  the  relader 
announced  the  acquBition  of 
Lands' End  Inc  Company  offh 


NHMi  Mt  yae  «HNlM  to 

mM«?Mino.lMltMGe^ 
ryMiBf.whoM5  0tfaO.dU 
some  Mty  fine  011005  lor  otf 
company,  and  he  was  w0h  us  for 
a  number  of  yaan  and  reUhf  00( 
us  to  a  bettar  ievef  of  capabtty 
Gany  My.  who's  come  to  totf 
or  rnorrihs  apo.  is  a  vary 

goodbusinessmanandteclmol- 
ogy  oficer.  And  I  think  0Ht  his 
abihr  to  gat  us  to  the  next  hwal 
is  goino  to  be  very  haipfuL 

0ihat  toctotetopy  toNtottvee 
dayaalMMplMMdtortot 

yaiMt  MbVe  pot  a  major  sort  of 
teengineennqofotfWhotelT 
ftfxition  right  now  in  process  * 
stnidure.  systams.  Wb'va  had  a 
very  fragmeniad  approach,  and 


Gartner  Inc.  ”1  don't  think 
anybody  is  saying,  hand  on 
heart,  this  is  the  way  to  go. 

I  The  technology)  does  show 
great  promise,  but  it’s  still 
really  unproven  in  more  than 
just  one  or  two  Lmpiemenca* 
tions."  he  added- 1 


we’re  basicaAv  tryng  to  Stan¬ 
dardize  much  more  so  than  vre 
haveittoepasL 
We've  got  loo  many  pomt-of- 
saie  systems,  too  rnany  nvenlory 
systems,  too  many  016.  ttiat  and 
the  o0wr  dung,  because  we  ba- 
stcatyaiowed  far  many,  many 
years  earh  business  to  do  its 
oum  0wig.  which  we're  not  gong 
todo  anymore 

WII VM  ha  tofftof  •  tot  of 
new  todnatopy  as  ywe  da 
ttoi  atMdafWaiiaaT  rd  say 

nghf  now  i's  basicaly  standi 
In  around  what  we've  got  as 
Fltase  I  and  in  Pha»  Z  yes. 
dwre'd  be  more  coming  on 

bo«d.Btfl0iinkRiBse1 
6  besicaly  standardize 
arouU  0ie  bast  ol  ahai 
we  have  and  0ian  assess 
how  tor  0ai  gets  us.  and 
dwnweldacidahow 
mjch  we  want  to  supple- 
manl. 

Mae  0it  dactoton  al* 
toeladbyiwLMde’ 
&d  maipar.  or  wmM  yea 
hoaa  dna  toa  fliMdwiixalian 

■lyenifr  We  woiJd  have  done  X 
anfmt 

Frewi  a  a^mtoma  panpaePva. 
Iww  to  lha  iiMffar  pah^  Hm 
BSKh  wirfc  baaa  daaa?  We're 
not  rea^  dotoQ  much  mwgmg 
0611.  T^'ve  got  a  very  capable 
team  up  diere,  and  we'rs  toning 

a —  ***-■ —  I — t- 

mem  00  max  dwiq.  vwe  re  oOR 
mg  for  opporttfidies  to  toverage 
where  we  can.  but  dteie's  no  in- 
tegrahon  wiNn  Lands' End 
They  conttue  to  have  0wir  own 
shop  and  run  it  quia  wel. 

Haa  btfia  haen  any  tata^a- 
liaa  of  ayWama?  No.  And  there 
wont  be. 
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Sears  CEO  Says  Company 
Will  Standard^  Technology 


dae  dacarwd  to  comment  on  0)e 
QO  change  at  0ie  tone. 

Lacy,  chaarrwn  and 
CEO  since  December 
2000.  tost  week  spoke 
with  Cornpidaniorto 
aboutdwretoitor'slBch- 
notogy  ptons  tor  016  year 
and  0ie  change  in  IT 
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Microsoft  Opens  Source 
Code  to  Governments 


Hopes  to  stem  open-source  adoption  b\' 
letting  them  assess  securin'  of  Windows 


AS  KMIEIGN  ^ero- 
ments  increasingly 
move  to  adopt  open- 
source  softw^e 
policies,  Microsoft  Corp.  last 
week  worked  to  address  one  of 
the  concerns  prompting  that 
adoption:  Windows  security. 

Microsoft  said  it  would  give 
central  governments  access  to 
source  code,  a  move  seen  as 
an  effort  to  quell  the  debate 
over  whether  open  source 
code  has  a  security  advantage 
over  closed  code.  Providing 
such  access  ‘^viU  help,  because 
it  moves  Microsoft  one  inch 
toward  the  middle”  in  that  de¬ 
bate.  said  Martin  Hinglcy,  a 
London-based  analyst  at  IDC. 

Governments  fundamentally 
need  *to  feel  that  they  are  de~ 
veloping  homegrown  exper¬ 
tise  and  not  fust  inserting  CDs 
and  pressing  their  customiza¬ 
tion  bunoa”  said  Alastair  Burt, 
a  researcher  in  Germany  who 
is  working  on  one  of  a  number 
of  European  Unioir-funded 
open-source  protects. 

Expanded  Access 

Microsoft  has  several  pro¬ 
grams  that  provide  source 
code  to  governments,  univer¬ 
sities  ai»d  private-sector  firms. 
But  the  initiative  announced 
last  week,  called  the  Govern¬ 
ment  Security  Pn^ram  (GSP), 
is  specifically  targeted  at  cen¬ 
tral  govemmenis  and  is  in¬ 
tended  to  allow  them  to  assess 
the  security  and  integrity  of 
Microsoft  software. 

Craig  Mundie.  senior  vice 
president  and  chief  technical 
officer  of  advanced  strategies 
and  policies  at  Microsoft,  said 
GSP  was  created  after  govem- 
meni  officials  told  the  compa¬ 
ny  that  security  is  a  ”priinary 
cuocem”  and  that  they  wanted 
access  to  source  code  and  Wm- 
dows  technical  information 


and  the  ability  to  collaborate. 
GSP  ‘'demonstrated  our  com¬ 
mitment  to  making  Windows 
source  code  more  transparent 
to  customers  arKl  increasing 
customer  trust  in  the  security 
both  of  our  products  and  the 
IT  industry  generally.”  he  said. 

Participating  governments 
get  online  access  to  source 
code,  an  enginccring-levc! 
understanding  of  Windows 
architecture,  the  ability  to 
build  more  secure  environ¬ 
ments,  and  access  to  crypto¬ 
graphic  code  and  develop¬ 
ment  tools,  said  Mundie. 


But  governments  won't  get 
the  ability  to  alter  source 
code.  "This  isn’t  about  devel¬ 
oping  or  supporting  cus¬ 
tomized  versions  of  Win¬ 
dows.”  Mundie  said.  The  GSP 

and  other  source-  _ 

code  access  pro¬ 
grams  are  about 
“helping  build 
comfort  and  trust 
with  our  key  cus¬ 
tomers  on  how 


Microsoft,  and  the  company 
says  it’s  in  discussions  with 
about  20  other  governments. 

Stamford,  Cona-based  Meta 
Group  Inc.  reported  last 
month  that  government  inter¬ 
est  in  non-Microsoft  software 
is  growing.  Germany,  China, 
India,  Taiwan,  Singapore  and 
Finland  are  among  the  coun¬ 
tries  Meta  expects  to  increas¬ 
ingly  adopt  Linux  on  servers. 
While  central  governments 

_ are  pushing  broad 

IIMF  ms  BSIS  open.soun:t  adop- 
tion  policies,  prac- 


Windows  is  deployed,  how  se¬ 
curity  is  running  and  how  oth¬ 
er  software  is  running  on  top 
of  Windows.”  be  said. 

Rusria's  Federal  Agency  for 
Governmental  Communica¬ 
tion  and  Information  has 
signed  a  GSP  agreement  with 


Dogovwnmertswwflo 
«>um<oeWMowssour»  «cal  unplementa- 

code?  asks  cohmoBi  Frank  tion  issues  remain. 

Hayes.  Page  52  Microsoft  is  a 

major  systems  ven 


dor  for  the  city  of  Derby.  Eng¬ 
land.  And  that's  not  chaining 
because  of  broader  central 
government  policies  encour¬ 
aging  the  use  of  opcn-source 
software. 

“We  arc  pretty  much  tied 
into  Microsoft,"  said  Mike 


Source  Course 

Under  the  GSP.  central 
governments  receive: 

•  Online  access  to  source 
cods. 


■  Btia  rslessas  and  soortet 
packs  for  WMews  2000, 
XP.  IMndoivs  JIal  Sarver 
2003aadWhNfowsCL 


•  Oraalsr  aUfty  to  conduct 
sacurity  and  privacy  audHa. 


ofoipravad  tmuhfoshooting 
and  systaro-opUmUatoi 


■Opportunitfos  for  eolabofi- 
tion  wHh  MkroatdL 


Thompson.  IT  manager  for 
the  city,  which  has  3.000  end 
users.  “At  the  moment,  we 
don't  feel  that  open  source  has 
developed  enou^ ...  if  you 
want  to  iump  ship.”  I 


Linux  Certification  Opportunities  Emerge 


Open-source 
movement  drives 
demand  for  training 


BV  TOOO  R.  WEISS 

llie  growing  adoption  of  Lin¬ 
ux  systems  by  corporate  IT 
shops  is  generating  incraasii^ 
demand  for  certi¬ 
fied  Linux  profes¬ 
sionals.  and  oppor¬ 
tunities  to  gain 
those  credentials  are  begin¬ 
ning  to  keep  pace. 

The  certilkation  issue  will 
be  prominent  this  week  at  the 
LinuxWorld  Conference  & 
Expo  in  New  York,  the  major 
trade  show  for  Linux. 

A  number  of  groups  arc 
now  providing  Linux  certiTica- 
tion,  including  the  nonprofit 
Linux  Profesrional  Institute 
(LPD.  global  IT  trade  group 
CompTIA  and  Linux  vendor 
Red  Hat  Inc. 

Evan  Leibovitch.  president 
of  Toronto-based  LPL  said  in¬ 
terest  in  getting  linux-certified 
workers  has  been  "just  stagger¬ 
ing”  in  recent  omnths. 

LPI  doesn’t  supply  training 
but  does  give  written  certifi¬ 


cation  exams  that  test  an  ap¬ 
plicant's  knowledge  and  mas¬ 
tery  of  Linux  systems.  About 
57%  of  the  exam  takers  fail  the 
test,  Leibovitch  said. 

“We  actually  like  that,”  Lei- 
bovttch  said.  “It  indicates  to 
the  world  that  this  is  not  an 
easy  exam  to  pass"  and  that 

the  certification  has 
real  value.  “When 
you  pass  the  exam, 
it  means  you  know 
your  stuff,”  be  said. 

lunior  and  intermediate  lev¬ 
els  of  certification  are  avail¬ 
able.  with  an  advanced  certifi- 
caiion  still  under  develop¬ 
ment.  LPI  has  granted  20,000 
certifications  worldwide  since 
it  began  its  program  in  2000. 

Other  Linux  certifications 
under  consideration  by  LPI  in¬ 
clude  security,  database  ad¬ 
ministration.  enterprise-level 
administration  and  even  desk¬ 
top  administration. 

The  certifications  are  ven¬ 
dor-neutral  In  order  to  try  to 
avoid  problems  experienced 
in  the  Unix  world  in  the  past, 
Leibovitch  said.  “We  do  be¬ 
lieve  there  have  been  some 
lessons  learned.”  be  said. 


Eva  Chen,  Linux  certifica¬ 
tion  manager  at  Oak  Brook, 
IlL-based  CompTIA.  said  that 
approximately  2.000  IT  pro¬ 
fessionals  have  been  certified 
so  far  by  the  organization. 

Ralei^  N.C.-based  Red  Hat 
offers  the  Red  Hat  Certified 
Engineer  (RHCE)  program  and 
the  Red  Hat  Certified  Techni¬ 
cian  certification,  which  was 
introduced  last  November  to 
assess  midkvel  skUls. 

Pete  Childers,  vice  presi¬ 
dent  of  global  learning  ser¬ 
vices  at  Red  Hat.  said  the 
company's  program  includes 
hands-on  testing  as  well  as 
written  work  to  provide  deep¬ 


er  knowledge  aiMl  skills.  Red 
Hat  also  provides  hands-on 
Linux  systems  training.  Ap¬ 
proximately  7.200  people  have 
received  RHCE  certification 
out  of  about  13300  who  have 
taken  the  hands-on  exam. 

However,  not  every  IT  shop 
sees  the  need  for  Linux  certifi¬ 
cation. 

Dan  Agronow.  vice  presi¬ 
dent  of  technology  at  weather 
forecasting  service  Weather.- 
com  in  Atlanta,  said  his  com¬ 
pany  doesn't  require  Linux 
certification  for  new  hires  or 
its  existing  IT  staff.  Instead, 
be  said,  it  looks  for  people 
with  solid  Linux  skills  to  run 
its  systems. 

But  Dan  Kusnetzky,  an  ana¬ 
lyst  at  IDC.  said  certification 
is  good  for  companies  thai 
want  a  security  blanket  as  they 
consider  bringing  Linux  inside 
their  shops. 

"Organizations  looking  at 
Linux  for  the  first  time  often 
feel  more  comfortable  having 
people  with  certification," 
Kusnetzky  said.  I 
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A  data  cantar  doaant  hava  to  be  a  Wacb  hole,  where  dollar  Mila  diaappear  and  are  never 
aaen  apala  Servera  don’t  have  to  be  deployed  in  waya  that  utilize  teaa  then  90%  of  their 
computing  capacity.  Every  application  doean*t  have  to  exiat  on  ita  own  dedicated  aerver. 
And  every  aerver  doeant  n^  three  people  to  manage  it 


Companiea  ahouldnH  have  to  apertd  00%  of  their  data  center  budgeta  on  adminiatration. 
Milliona  of  dollara  “inveated*'  in  operatlona,  consulting  and  aervicea  that  auppoeadty  make 
the  data  center  work. 


At  Sun,  we're  not  simply  trying  to  "managa”  the  complexity.  Or  more  pradaely,  to  gat  rich  off 
the  complexity.  Our  goal  la  to  aiiminate  UTo  innovate  new  aarvicaa,  software  and  systems 
that  drive  coats  down  while  dramaticalty  reducino  complexity. 


Thafa  why  Corporate  Express  turned  to  Sun,  a  move  that  saved  Stopper  day  in  operating 

costa  by  consolidating  43  servers  onto  two  Sun  Enterprise*  10000  earvers.  And  why  other 
companiea  are  using  Sun's  mainframe  rehoating  solutions  to  save  up  to  70%  of  their  annual 
IT  operating  costs. 


These  companies  rely  on  Sun  for  cost-reduction  affatagies  that  ultimately  lead  to  mors 
streamlined,  aasler-to-manage  data  centers.  Data  centers  that  free  their  IT  staff  from  the 
dally  management  of  individual  eervers,  and  aHow  them  to  refocus  on  the  teak  of  turning 
Information  and  network  infrastructure  Into  a  strategic  advantage. 


If  your  data  center  la  sucking  more  mon^f  from  the  bottom  line  than  )t%  adding  to  the  tap  line, 
ifs  time  to  turn  things  around.  It's  time  to  reestablish  your  data  center  as  s  competitive 
wsapcin  ruths mniawhyTrhfrhymiiTTi|mrrtnrrtn-T-TTf*-‘-"“‘“^**‘**'""~*‘T‘ 

new  loyalty-driving  services  and  maximixe  efficiencies  throughout  your  company. 


In  short  ifs  time  to  reinvent  the  data  center.  And  tha  first  step  is  to  caH  Sun. 
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IBM  Gets  IT  Deal 
From  Fluor . . . 

Fluor  Corp.,  an  engineering  and 
construction  services  Ann  in  Al* 
iso  CaMf..  signed  a  seven- 
year  deal  to  have  IBM  taka  over 
management  of  tts  global  tech¬ 
nology  oporatkNis.  The  compa- 
niea  »id  the  agroemcnl  includes 
uuge-basad  pricing  that  will  let 
Fhior  add  computing  resources 
as  needed.  About  2S0  IT  work¬ 
ers  wfll  be  shifted  to  IBM  is  part 
of  the  deaA  which  has  a  potential 
value  of  about  $351  million. 


. . .  And  Signs  New 
WorUspanPact 

IBM  also  announced  a  hve-year 
deal  valued  at  more  than  $350 
millon  with  Atlanta-based 
Woridspan  IP.  which  operates 
one  of  dte  roalor  travel  reserva¬ 
tion  systems.  WorUspan  said  it 
pims  to  use  IBM's  servers  and 
softwara,  such  as  Rs  WebSphere 
middleware  and  062  database, 
to  tie  new  Java-based  Web  ap- 
plicatiofks  to  the  mainfraines 
that  run  the  reservation  system. 


Capellas  Readies 
WorldCom  Plans 

Michael  CapoHas,  WorldCom 
lnc.'s  new  chairman  and  CEO, 
said  he  Intends  to  finaRze  a  plan 
to  lower  the  company’s  cost 
structure  by  Feb.  1  and  complete 
a  new  three-year  business  plan 
a  month  later.  Capelas  also  set 
a  mid-Aprk  deadlna  for  fling  a 
corporate  reorganization  plan 
with  the  U.S.  Bankruptcy  Court. 
More  layoffs  are  Mialy.  be  added. 


Short  Takes 

Sunnyvale.  CaH. -based  ABIBA 
MC.  broadened  a  planned  finan¬ 
cial  restatement  saying  ad  of 
Ks  maufis  from  January  2000 
through  last  Aew  wM  te  revtsad. 
. . .  AOl  TIME  WARNEIt  MC.  said 
CEO  Richard  Parsons  wiR  take 
over  as  chaimian  from  Stephan 
Case,  who  plans  to  step  do^  in 
May  (see  odMoriat  page  20). 


MARK  HALL  •  ON  THE  MARK 

Linux  Bores  Deeper  Into 
The  Data  Center . . . 

...  as  IT  managers  stretch  their  budgets  with  the  free  operating  sys¬ 
tem.  That's  if  you  believe  analysts  at  Wail  Street-scandal'tainted  Gold¬ 
man  Sachs,  who  also  claimed  in  a  report  last  week  that  the  success  of 
Linu.x  will  diminish  Windows’  chances  inside  the  digital  holy  of  holies 
[QuickLink  35610  J.  But  IT  managers  aren’t  going  to  loss  out  low-end, 
well-managed  Unix  machines  or  exclude  well-understood  Windows 
boxes  just  because  something  else  is  free.  That  would  be  an  expensive 
mistake.  Luckily  for  penguin  proponents,  improvements  in  both  enter¬ 
prise  management  and  skills  are  coming  to  Linux.  And  soon.  For  ex¬ 
ample,  Cupertino,  Calif.-based  CoroSoft  Inc.  will  release  its  first  four 
products  on  Jan.  30.  CoroSoft  Director,  CoroSoft  Foundation  and 
rwo  application  modules 
make  ii  possible  manage  a 
Linux-based  infrastructure 
and  add  self-configuring,  self- 
optimizing  and  self-healing 
features  conunon  to  Unix  and 


Windows  systeoLs.  Systems 
admin^rators  set  policies 
and  let'the  CoroSoft  program 
do  the  work,  raptodng  old.  time- 
consuming  commttul-iine  men- 
agemenl  drudgery.  And  by 
midyear  expea  integration 
with  data  center  stalwart  HP 
Open  View.  Beyond  that,  ex¬ 
pect  CoroSoft  tools  for  man¬ 
aging  LDAP  dircaorics  and 
|2EE  servers.  ■  Possibly  more 
important  is  that  those  scruffy 
UiHxx  geeks  will  be  getting  certi¬ 
fied.  and  not  as  the  crazy 
zealots  some  of  you  think  they 
are  (see  related  story,  page  6). 
The  Linux  Professional  Insti- 
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tute  Inc.  in  Brampton.  On¬ 
tario,  will  be  adding  a  third 
level  to  its  certification  pro¬ 
gram,  targeting  enterprise- 
class  skills  such  as  data  cen¬ 
ter  security  and  database  ad¬ 
ministration.  Levels  I  and  2 
now  cover  the  Linux  OS  and 
common  open-source  appli¬ 
cations  like  Apache  and 
SendMail.  According  to 
Evan  Leibovitch,  LPI's  presi¬ 
dent.  the  painstaking  exam 
development  process  won't 
be  complete  until  at  least  the 
end  of  2003  because  LPl 
works  with  the  open-source 
community  to  create  the 
right  knowledge  base  to  test. 
“We  don't  fust  pull  questions 
out  of  our  behind,**  he  says. 
Which  makes  us  ail  happy. 
I'm  sure.  •  K  you’ve  traiacond- 
ed  geokness,  another  Evan 


who  evaluates  IT  talent.  Evan  Scott, 
founder  of  Evan  Scott  Group  Internation¬ 
al  in  Plymouth  Meeting.  Pa.,  says  the  cre¬ 
ation  of  the  Department  of  Homeland 
Security  has  created  a  crying  need  for  se¬ 
nior  rr  execi^ves  who  "understand  how  to 
protect  information'’  and  "have  strategic 
and  interpersonal  skills  so  they  can  talk 
to  government  c-ustomers."  Scott  argues 
that  this  is  a  long-term  play  for  the  ca¬ 
reer-minded.  who  might  consider  a  stint 
inside  the  government  services  groups  at 
companies  tike  Lockheed  Martin  or  EDS 
to  get  a  feel  for  big.  politically  sensitive 
security-oriented  projects  inside  the  gov¬ 
ernment.  ■  The  Undts  of  stoaRh  marketing. 
The  problem  with  being  an  ASP  is  that, 
unlike  a  packaged  software  provider  that 
rolls  up  a  lot  of  itty-bitty  produa  im¬ 
provements  and  thumps  its  drum  with  a 
big  overall  announcement,  most  ASP 
product  changes  happen  over  time  and 
are  simply  added  to  the  hosted  applica¬ 
tion  as  they  are  ready.  Take  CrownPeak 
Technology  Inc.  in  Los  Angeles,  whose 
Advantage  CMS  Web  content  manage¬ 
ment  hosted  software  has  sserstiy  been 
given  about  SO  new  features  in  the  past  year. 
For  example,  its  new  similarity  engine, 
which  uses  word-pairing  A1  techniques; 
and  site  monitoring,  which  improves  se¬ 
curity  and  helps  prevent  Web-site  defac¬ 
ing.  recently  were  added  to  the  software 
with  no  fanfare  whatsoever.  CEO  lim 
Howard  wonders  whether  his  customers 
even  know  these  features  have  been 
added.  'They  would  have  to  read  our 
newsletter  or  talk  to  us  to  know,"  he 
says.  Maybe  the  company  will  make  a  bit 
more  noise  when  it  adds  automatic  tem¬ 
plate  creation  for  Web  developers  later 
this  quarter.  That  will  be  a  great  time- 
saver  for  Web  geeks  who  manage  tens 
of  thousands  of  pages  on  a  site.  Of 
course,  they'd  have  to  know  the  feature 
was  there  first,  b 


Intel  Moves  to  Broaden 
64-Bit  Itanium  Chip  Line 


av  BOB  BREW1N 

Intel  Corp.  last  week  deuiled 
a  new  development  road  map 
for  its  64-bit  Itanium  2  proces¬ 
sor,  saying  it  plans  to  add  both 
a  beefed-up  version  of  the 
server  chip  and  a  lower-priced 
Itanium  later  this  year. 

The  company  also  now  in¬ 
tends  to  ship  in  2005  a  dual¬ 
core  Itanium  device  that  puts 
two  CPUs  on  a  single  piece  of 
silicon,  said  Lisa  Graft  direc¬ 
tor  of  Intel's  enterprise  proc¬ 


essor  marketing  group. 

That  processor,  code-named 
Moniecilo,  would  be  Intel's 
answer  to  dual-core  chips 
from  IBM  and  Sun  Microsys¬ 
tems  Inc.  IBM  already  uses 
dual-core  technology  In  its 
Powcr4  processors,  and  Sun 
is  expected  to  introduce  an 
UltraSPARC  IV  chip  with  two 
processor  cores  later  this  year. 

GrafT  said  the  upcoming  Ita¬ 
nium  devices  are  "absolutely 
aimed  at  Sun,"  as  part  of  In¬ 


tel's  effort  to  steal  away  some 
of  the  high-end  corporate 
server  business  that  now  goes 
to  UltraSPARC-based  systems. 

In  response.  Sun  spokesman 
Mark  Richardson  said  the  com¬ 
pany's  UltraSPARC  road  map 
"keeps  us  well  ahead  of  the 
competition." 

Jonathan  Eunice,  an  analyst 
at  lUuminata  Inc.  in  Nashua. 
N.H..  said  he  doesn't  view  the 
new  Itanium  devices  promised 
by  Intel  as  “Sun  killers."  But 
he  added  that  Intel's  develop¬ 
ment  plans  will  put  more  pres¬ 
sure  on  both  Sun  and  IBM. 

Intel  this  summer  will  re¬ 
lease  an  upgraded  Itanium  2 


chip,  code-named  Madison, 
that  includes  a  6MB  cache  and 
a  clock  speed  of  1.5  GHz,  Graff 
said.  In  comparison,  the  first 
Itanium  2  d^ke,  which  Intel 
introduced  last  July,  had  dock 
speeds  of  up  to  1 GH  i  and  a 
maximum  cache  of  3MB. 

The  cache  will  be  further 
increased  to  9MB  next  year, 
Graff  said. 

Also  in  the  plan  for  this  year 
is  a  lower-priced  processor 
that’s  being  designed  for  use 
in  dual-processor  servers. 
Graff  said  the  device,  code- 
named  Deerfield,  will  offer  the 
same  clock  speed  and  cache 
that  Madison  does.  I 
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IBM  Gets  IT  Deal 
From  Fluor .. . 
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...And  Signs  New 
WorUspan  Pact 
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^panoapan  t  atoBii  oparataa 
onaofttemaiorlnMlraaaraa- 
Iton  ayatoma.  UteWapan  said  M 
ptans  to  uaa  BITs  aaiaws  and 
soflanra.  antot  as  ito  WteSptera 
nriddtoaiara  Md  DB2  datteasa, 
to  tto  flaw  JsM-baaad  Wab  ap- 
picattona  to  tte  laainframss 
that  rw  tha  raaarvatton  aystam. 


Capelas  Readies 
WorldCom  Plans 

MtobMl  Cagalas,  WorldCom 
Inc’s  now  ctebman  and  CEO, 
said  te  totonda  to  finabs  a  plan 
to  hfloar  ttw  company’s  coat 


MARK  HALL  -  ON  THE  MARK 

Linux  Bores  Deeper  Into 
The  Data  Center . . . 

...  as  IT  managers  stretch  their  budgets  with  the  free  operating  sys* 
tern.  That's  if  you  believe  analysts  at  Wal  Street-scandahtalnted  Gold¬ 
man  Sachs,  who  also  claimed  in  a  report  last  week  that  the  success  of 
Linux  will  diminish  Windows’  chances  inside  the  digital  holy  of  holies 
[Quickiink  356101.  But  IT  managers  aren’t  going  to  toss  out  low-end, 
well-managed  Unix  machines  or  exclude  well-understood  Windows 
boxes  just  because  something  else  is  iree.  That  would  be  an  expensive 
mistake.  Luckily  for  penguin  proponents,  improvements  in  both  enter¬ 
prise  management  and  skills  are  coming  to  IJnux.  And  soon.  For  ex¬ 
ample,  Cupertino,  Cali£-based  CoroSoft  Inc.  will  release  its  first  four 
products  on  Jan.  30.  CoroSoft  Director,  CoroSoft  Foundation  and 
two  application  modules 
make  it  possible  manage  a 
Unua-based  infrastnicture 
and  add  selPconfiguhng.  self- 
optimizing  and  self-healing 
features  common  to  Unix  and 
Windows  systems.  Systems 
administrators  set  policies 
and  let  the  CoroSoft  program 
do  the  work,  replacing  oU.  tbna- 
oonatpnlnB  commanHInfl  man- 
agamnt  dnidpary.  And  by 
midyear  expect  integration 
with  data  ceoicr  stahvart  HP 
Open  View.  Beyond  that,  ex¬ 
pect  CoroSoft  tools  for  man¬ 
aging  LDAP  directories  and 
J2EE  servers.  •  Possibly  more 
important  is  that  those  aeniffy 
Urea  gaate  wdl  ba  gaOino  carti- 
fM.  and  not  as  the  crazy 
zealots  some  of  you  think  they 
are  (see  related  story,  page  6). 

The  Linux  Professional  Insti¬ 


tute  me  m  nrampton.  On¬ 
tario.  will  be  adding  a  third 
level  to  its  certification  pro¬ 
gram.  targeting  enterprise- 
class  skills  such  as  data  cen¬ 
ter  security  and  database  ad¬ 
ministration.  Levels  I  and  2 
now  cover  the  Linux  OS  and 
common  open-source  appli¬ 
cations  like  Apache  and 
SendMaiL  According  to 
Evan  Leibovitch,  LPI's  presi¬ 
dent,  the  painstaking  exam 
development  process  won’t 
be  complete  until  at  least  the 
end  of  2003  because  LPI 
works  with  the  open-source 
community  to  create  the 
right  knowledge  base  to  test. 
"We  don’t  just  pull  questions 
out  of  our  behind,”  he  says. 
Which  makes  us  all  happy. 
I'm  sure.  •  K  you've  bawacand' 
ad  naaknaai,  another  Evan 


who  evaluates  IT  talent,  Evan  Scott, 
founder  of  Evan  Scott  Group  Internation¬ 
al  in  Plymouth  Meeting,  Pa^  says  the  cre¬ 
ation  of  the  Department  of  Homeland 
Security  has  created  a  crying  noad  for  aa- 
flior  IT  axacubvoa  who ‘^mditfsland  taw  to 
prototo  Mormatlon”  and  'have  strategic 
and  interpersonal  sltilU  $o  they  can  talk 
to  government  customers.”  Scott  argues 
that  this  is  a  long-term  play  for  the  ca¬ 
reer-minded.  who  might  consider  a  stint 
inside  the  government  services  groups  at 
companies  like  Lockheed  Martin  or  EDS 
to  get  a  feel  for  big.  polhicaUy  sensitive 
security-oriented  projects  tn^e  the  gov- 
emmeoL  •  Tte  ImMs  of  atoaMi  martoting. 
The  problem  with  being  an  ASP  is  that, 
unlike  a  packaged  software  provider  that 
rolb  up  a  lot  of  itty-bitty  pr^uct  im¬ 
provements  and  thumps  its  drum  with  a 
big  overall  announcement,  most  ASP 
product  changes  happen  over  time  and 
are  simply  added  to  die  hosted  applica¬ 
tion  as  they  are  ready.  Tike  CrownPeak 
Techne^ogy  Inc.  in  Los  Angeles,  whose 
Advantage  CMS  Web  content  manage¬ 
ment  hosted  software  has  weretfy  bawi 
ghmn  tomto  50  naw  fatoira  in  the  past  year. 
For  example.  Us  new  similarity  engine, 
which  uses  word-pairing  A1  techniques; 
and  site  monitoring,  which  improves  se¬ 
curity  and  helps  prevent  Web-site  defoc- 
ing,  recently  were  added  to  the  software 
with  no  fanfare  whatsoever.  CEO  Jim 
Howard  wonders  whether  hb  customers 
even  know  these  features  have  bees 
added.  They  would  have  to  read  our 
newsletter  or  talk  to  us  to  know,”  he 
says.  Maybe  the  company  will  make  a  bit 
more  noise  when  it  adds  automatic  tem¬ 
plate  creation  for  Web  developers  Uter 
thb  quarter.  That  will  be  a  great  time- 
saver  for  Web  geeks  who  manage  tens 
of  thotisands  of  pages  on  a  site.  Of 
course,  they’d  have  to  know  the  feature 
was  there  ftrst.  I 


Intel  Moves  to  Broaden 
64-Bit  Itanium  Chip  Line 


aaewtores  yar  butoflwa  ptei 
a  montti  totor.  Cagalas  itoo  sto 
•  mto-AgrI  dsadtea  for  Mkig  a 
carpoftoa  reorgiflhrtton  plan 
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BV  BOB  BBEWIN 

Intel  Corp.  last  week  detailed 
a  new  development  road  map 
for  its  64-bit  Itanium  2  proces¬ 
sor.  saying  it  plans  to  add  both 
a  beefed-up  version  of  the 
server  chip  and  a  lower-priced 
Itanium  later  thb  year. 

The  company  also  now  in¬ 
tends  to  ship  in  2005  a  dual¬ 
core  Itanium  device  that  puts 
two  CPUs  on  a  single  piece  of 
silicoa  said  Lisa  Graff,  direc¬ 
tor  of  Intel's  enterprise  proc¬ 


essor  marketing  group. 

That  processor,  code-named 
Montecito.  would  be  Intel’s 
answer  to  dual-core  chips 
from  IBM  and  Sun  Microsys¬ 
tems  Inc.  IBM  already  uses 
dual-core  technology  in  its 
Power4  processors,  and  Sun 
b  expected  to  introduce  an 
Ultr^PARC  IV  chip  with  two 
processor  cores  bter  thb  year. 

Graff  said  the  upcoming  Ita¬ 
nium  devices  are  “absolutely 
aimed  at  Sun,"  as  part  of  In¬ 


tel’s  effort  to  steal  away  some 
of  the  hi^-end  corporate 
server  business  that  now  goes 
to  UltraSPARC-based  systems. 

In  response,  Sun  spokesman 
Marie  Richardson  said  the  com¬ 
pany’s  UltraSPARC  road  map 
“keeps  us  well  ahead  of  the 
competition.” 

fonathan  Eunice,  an  analyst 
at  lUuminata  Inc.  in  Nashua, 
Nil.,  said  be  doesn’t  view  the 
new  Itanium  devices  promised 
by  Intel  as  “Sun  kiUers.”  But 
he  added  that  Intel's  devefop- 
ment  plans  will  put  more  pres¬ 
sure  on  both  Sun  and  IBM. 

Intel  thb  summer  will  re¬ 
lease  an  upgraded  Itanium  2 


chip,  code-named  Madison, 
that  includes  a  6MB  cache  and 
a  clock  speed  of  1.5  GHz.  Graff 
said.  In  comparisoa  the  first 
Itanium  2  device,  which  Intel 
introduced  last  July,  had  clock 
speeds  of  up  to  1  GHz  and  a 
maximum  cache  of  3MB. 

The  cache  will  be  further 
increased  to  9MB  next  year. 
Graff  said. 

Also  in  the  plan  for  thb  year 
b  a  lower-priced  processor 
that’s  being  designed  for  use 
in  dual-processor  servers. 
Graff  said  the  device,  code- 
named  Deerfield,  will  offer  the 
same  clock  speed  and  cache 
that  Madison  does.  I 
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Microsoft  Settlement 
Could  Yield  Rebates 
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But  hassles  await 
users  w  ho  appl\ 
tor  \  oueliers 

BY  PATRICK  THIBODEAU 

WASHiNG’ON 

Ri«  K  i*HT/  CIO  at 
Marcus^  Millichap 
Real  Estate  Invest¬ 
ment  Brokerage  Cv».. 
has  calculated  what  Micn>s«Tft 
Corp.'s  California  class-action 
settlement  might  mean  for  his 
company:  about  S18.000. 

Peltz  kept  good  records  on 
the  400  computers  his  nation¬ 
wide  firm,  based  in  Encino. 
Calif.,  purchased  for  its  Cali¬ 
fornia  offices  over  the  nearlv 
seven-year  settlement  perit>d. 
But  what  he  doesn't  know  is 
how  hard  it  will  be  lor  him  to 
pr»>ve  license  ownership  when 
it  comes  time  to  claim  the 
money.  “Is  it  going  to  be  a 
nightmare  if  they  challenge 
me  on  this  (licensing)  num¬ 
ber?”  aski^d  IVItz. 

Under  the  class-action  anti¬ 
trust  settlement  reached  this 
month  in  California  state 
court  in  San  Francisco.  Micro- 
soft  agreed  to  pay  up  to  SI. I 
billion  to  software  license 
iiwners  in  the  stale,  .^ppro^l- 
matcly  W)*'.*  of  that  money,  say 
the  plaintiffs'  aitomes'S.  will 
go  directly  to  businc'sses. 

The  lawsuit  accu.scd  Micrti- 
soft  of  violating  the  state's  an¬ 
titrust  laws  and  overcharging 
consumers.  Microsoft  admit¬ 
ted  no  w  rongdoing  under  the 
settlement. 

The  agreement  applies  to 
licenses  purcha.sed  for  use  in 
l^lifomU.  But  it  may  become 
a  miKicl  for  similar  pending 
class-action  lawsuits  that  Mi¬ 
crosoft  still  faces  in  16  other 
states,  said  the  plaimifTs'  lead 
counsel.  Eugene  Crew  of 
Townsend  and  Townsend  and 
Crew  LLP  in  San  Francisco. 

Once  the  agreement  is  ap¬ 
proved.  businesses  as  well  as 
consumers  will  be  able  to  ap¬ 
ply  for  vouchers,  prx'bably  be¬ 
ginning  sometime  this  spring. 


Tlie  vouchers  can  be  used  to 
purchase’  laptops,  desktops, 
tablet  computers,  peripherals 
I  and  software  by  any  maker.  An 
independent  person  or  busi¬ 
ness  will  administer  claims. 

As  part  of  the  settlement, 
Micro.soft  must  let  businesses 
check  its  scat  management 
records,  according  to  the 
pbintifTs’  attorney. 

Rob  Enderle,  a  Giga  Infor- 
I  maiion  Group  Inc.  analyst 
ba.sed  in  California,  said  pur¬ 
suing  the  vouchers  may  be  e.\- 
pensive  for  firms  that  pur¬ 
chased  systems  piecemeal. 
"You  will  eat  up  more  in  labor 
I  getting  the  rebate  than  you're 
i  going  to  get  back  from  Micro- 
'  soft."  Enderle  said. 

Indeed,  one  IT  manager. 

I  Mark  Jongeward  at  Bacou- 
I  Dalioz  Group  in  San  Diego,  a 


BY  BOB  BREWIN 

I  No  one  in  need  of  a  plumber 
1  wants  to  wait  long  for  help  to 
I  arrive,  which  is  why  Roto- 
Risotcr  Inc.  plans  to  use  ad¬ 
vanced  wireless  technol«*gy  to 
automate  dispatch  functions 
for  the  1.50<)  plumbers  and 
drain  cleaners  at  its  company- 
tiwneJ  operations- 
Steve  Poppe.  Roto-Rooier's 
CIO.  said  the  (ancinnati-based 
subsidiar>'  of  Chemed  Corp. 

\  will  also  rely  on  the  new  wire¬ 
less  system  to  manage  cus¬ 
tomer  billing  thniugh  the  use 
of  mobile  credit  card  termi¬ 
nals  and  portable  printers. 
I’oppc  said  the  automated 
I  billing  should  reduce  the  bank 
I  fees  paid  by  KotivRiKUcr. 

I  which  has  annual  revenue  of 
^  about  S280  million  —  with  up¬ 
ward  of  S80  million  coming 
thniugb  credit  card  purchases. 
t\>ppe  declined  to  specify  the 
c.xpected  savings,  except  to 
say  that  they  should  be  "signif¬ 
icant.”  Nor  would  he  disclose 


said  his  company  had  proba¬ 
bly  purchased  fewer  than  500 
PCs.  And  "the  effort  to  com¬ 
pile  the  information,  dig  out 
all  the  records,  can  be  more 
e.xpcnsive  than  what  I  get 
back."  he  .said. 

longeward  s.iid  he  would 
rather  see  the  money  go  to 
California  schools.  Under  the 
settlemeni.  two-thirds  of  the 
unclaimed  voucher  funds  will 
be  donated  to  the  schixils, 
with  half  of  that  .available  for 
Microsoft  software  and  the 
remainder  for  use  for  non- 
Microsoft  computer  equip¬ 
ment  and  software. 

Apple  Computer  Inc.,  a  ma¬ 
jor  supplier  of  hardware  and 
software  for  the  education 
market,  opposed  the  agree¬ 
ment.  The  company  said  last 


the  cost  of  the  project. 

RouvRoincr  is  building  its 
wireless  system  around  dis¬ 
patch  application  software  de¬ 
veloped  by  Minncapolis-basv\i 
Geanvorks  Inc.  Gearworks. 
which  will  announce  the  proj¬ 
ect  this  week,  is  alst>  hosting 
the  applications  and  linking 
them  to  Roto-Rooter's  inter- 
rully  developed  back-office 
billing  and  cu.stomer  systems. 

The  wireless  system  also  in¬ 
cludes  ruggedized  Motorola 
Inc.  mobile  data  phones  that 
are  equipped  with  Global  Po¬ 
sitioning  System  (GI*S)  tech¬ 
nology.  Data  transmissions 
will  be  sent  to  field  workers 
via  Nextel  Communications 
Inc.'s  wireless  network,  which 
supports  transfer  rates  of  20K 
to  40K  bii.'sec. 

Poppe  said  Roto-Rooter 
plans  to  start  deploying  the 
phones  to  users  next  quarter. 

By  then,  he  added,  the  compa¬ 
ny  will  have  picked  a  vendor  I 
for  the  portable  printers. 


week  that  past  experience 
.shim's  that  less  than  25^)  of 
customers  redeem  vouchers. 
Apple  maintains  that  all  un¬ 
claimed  funds  should  be  avail¬ 
able  to  schools  to  purchase 
any  kind  of  equipment. 

Robb  GwkI.  vice  president 
and  director  of  IT  at  Sundt 
Construction  Inc.  in  San 
Diego,  estimated  that  the 


which  will  be  connected  to  the 
phones  via  Bluetooth  short- 
range  wireless  technology. 

Weston  Henderek,  an  an.i- 
lyst  at  ARS  inc.  in  La  Jolla. 
Calif.,  said  he  expects  most  of 
the  growth  in  wireless  data 
applications  to  cMme  from 
businesses  like  Roto-kootcr 
with  large  staffs  of  field  ser¬ 
vice.  delivery  or  sales  workers, 

Gearworks  CEO  Keith  Lau- 
ver  said  the  company  used 
XML  code  that's  delivered  to 
the  Motorola  phones  as  Java 
applets  to  customize  its  Etrace 
software  for  Roto-Rooter,  The 
applets  could  also  run  on  oth¬ 
er  mobile  devices,  such  as 


TECHNOLOGY  DETAILS 
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vouchers  could  deliver  any¬ 
where  from  S‘).000  to  S25.000 
to  his  firm. 

"We  are  happy  to  accept 
anything  Microsoft  wants  to 
give  us  for  free."  said  Good, 
who  hasn’t  been  happ)'  with 
Microsoft's  recent  licensing 
changes.  He  said  he  plans  to 
use  the  vouchers  to  buy  non- 
Microsoft  products.  9 


handheld  PCs.  he  added. 

That  flexibility  wascsscnlial 
to  Roto-Rooter  so  it  would 
have  the  option  of  switching  to 
different  devices  or  wireless 
network  operators.  Popj>e  said. 

Lauver  said  the  GPS  receiver 
built  into  Motorola's  phones  is 
a  key  component  of  the  dis¬ 
patch  system.  The  GPS-dcrived 
location  of  each  field  worker, 
pinpointed  to  within  100  feet, 
will  be  displayed  on  a  map 
that  workers  at  Roto-Rooter's 
dispatch  centers  can  access  on 
an  extranet-based  Web  page. 

Once  dispatchers  identify 
the  worker  closest  to  a  cus¬ 
tomer  calling  for  service,  they 
will  send  a  message  with  the 
customer’s  address  to  that  em¬ 
ployee’s  phone,  Poppe  said. 
When  the  job  is  completed, 
the  Gearworks  software  will 
guide  the  worker  through  (he 
billing  process  and  generate  a 
Java-based  invoice  that  can  be 
printcHl  in  the  field,  he  added.  I 
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Microsoft  Settlement 
Could  Yield  Rebates 


But  hassles  await 
users  who  apply 
for  vouchers 


Rick  peltz.  CIO  at 

Marcus  &  MiUichap 
Real  Estate  Invest* 
ment  Brokerage  Co^ 
has  calculated  what  Microsoft 
Coq).'s  California  class-action 
settlement  might  mean  for  his 
company  about  $18,000. 

Peltz  kept  good  records  on 
the  400  computers  his  nation¬ 
wide  firm,  based  in  Encino, 
Califs  purchased  for  its  Cali¬ 
fornia  offkes  over  the  nearly 
seven-year  settlement  period. 
But  what  he  doesn't  know  is 
bow  hard  it  will  be  for  him  to 
prove  license  ownership  when 
it  comes  time  to  claim  the 
money.  "Is  it  going  to  be  a 
nightmare  if  they  challer^e 
me  on  this  [licensing]  num¬ 
ber?"  asked  Peltz. 

Under  the  class-action  anti¬ 
trust  settlement  reached  this 
month  in  California  sure 
court  in  San  Francisco.  Micro¬ 
soft  agreed  to  pay  up  to  S1.I 
billion  to  software  license 
owners  in  the  state.  Approxi¬ 
mately  80%  of  that  money,  say 
the  plaintii&'  attorneys,  will 
go  directly  to  busine^es. 

The  lawsuit  accused  Micro¬ 
soft  of  violating  the  state's  an¬ 
titrust  laws  and  overcharging 
consumers.  Microsoft  admit¬ 
ted  no  wrongdoing  under  the 
settlement. 

The  agreement  applies  to 
licenses  purchased  for  use  in 
California.  Bur  it  may  become 
a  model  for  similar  pending 
class-action  lawsuits  that  Mi¬ 
crosoft  still  foces  in  16  other 
sutes,  said  the  plaintifi^'  lead 
counsel  Eugene  Crew  of 
Townsend  and  Townsend  and 
Crew  LLP  in  San  Franctsca 
Once  the  agreement  is  ap¬ 
proved.  businesses  as  well  as 
consumers  will  be  able  to  ap¬ 
ply  for  vouchers,  probably  be¬ 
ginning  sometime  this  spring. 


The  vouchers  can  be  used  to 
purchase  laptops,  desktops, 
tablet  computers,  peripherals 
and  software  by  any  maker.  An 
independent  person  or  busi¬ 
ness  will  administer  claims. 

As  part  of  the  settlement. 
Microsoft  must  let  btisinesses 
check  its  seat  management 
records,  according  to  the 
plaintifFs'  attorney. 

Rob  Enderle.  a  Gtga  Infor- 
matioa  Group  Inc.  analyst 
based  in  California,  said  pur¬ 
suing  the  vouchers  may  ^  ex¬ 
pensive  for  firms  that  pur¬ 
chased  systems  piecemeal. 
"You  will  eat  up  more  in  labor 
getting  the  rebate  than  you’re 
going  to  get  back  from  Micro¬ 
soft."  Enderle  said. 

Indeed,  one  IT  manager. 
Mark  jongeward  at  Bacou- 
Dalloz  Group  in  San  Diego,  a 


maker  of  protective  gear, 
said  bis  company  had  proba¬ 
bly  purchased  fewer  than  500 
PCs.  And  “the  effort  to  coro- 
pUe  the  information,  dig  out 
ail  the  records,  can  be  more 
expensive  than  what  I  get 
back,"  he  said. 

Jongeward  said  be  would 
rather  see  the  money  go  to 
California  schools.  Under  the 
settlement,  two-thirds  of  the 
unclaimed  voucher  funds  will 
be  donated  to  the  schools, 
with  half  of  that  available  for 
Microsoft  software  and  the 
remainder  for  use  for  non- 
Microsoft  computer  equip¬ 
ment  and  software. 

Apple  Computer  Inc.,  a  ma¬ 
jor  supplier  of  hardware  and 
software  for  the  education 
market,  opposed  the  agree- 
roeni.  The  company  said  last 


week  that  past  experience 
shows  that  less  than  25%  of 
customers  redeem  vouchers. 
Apple  maintains  that  all  un¬ 
claimed  funds  should  be  avail¬ 
able  to  schools  to  purchase 
any  kind  of  equipment 
Robb  Good,  vice  president 
and  director  of  IT  at  Sundt 
Construction  Inc.  in  San 
Diega  estimated  that  the 


vouchers  could  deliver  any¬ 
where  from  $9,000  to  $2^000 
tohisHrm. 

“We  are  happy  to  accept 
anything  Microsoft  wanes  to 
give  us  for  free,"  said  Good, 
who  hasn’t  been  happy  with 
Microsoft’s  recent  licensing 
changes.  He  said  be  plans  to 
use  the  vouchers  to  buy  non- 
Microsoft  products.  I 


Roto-Rooter  Taps  Wireless 


1^ 

IT  to  Dispatch  numbers 


BV  BOB  BBCW1M 

No  one  in  need  of  a  plumber 
wants  to  wait  long  for  help  to 
arrive,  which  is  why  Roto- 
Rooter  Inc.  plans  to  use  ad¬ 
vanced  wireless  technology  to 
automate  dispatch  functions 
for  the  1,500  plumbers  and 
drain  cleaners  at  its  company- 
owned  operations. 

Steve  Poppe,  Roto-Rooter's 
CIO.  said  the  Cincinnati-based 
subsidiary  of  Chemed  Corp. 
will  also  rely  on  Ihe  new  wire¬ 
less  system  to  manage  cus¬ 
tomer  billing  through  the  use 
of  mobile  credit  card  termi¬ 
nals  and  portable  printers. 

Poppe  said  the  automated 
billing  should  reduce  the  bank 
fees  paid  by  Roto-Rooter. 
udiicb  has  annual  revenue  of 
about  $280  million  —  with  up¬ 
ward  of  $80  million  coming 
through  credit  card  purchases. 
Poppe  declined  to  specify  the 
expected  savings,  except  to 
say  that  they  should  be  “signif¬ 
icant"  Nor  would  he  disclose 


the  cost  of  the  project. 

Roto-Rooter  is  building  its 
wireless  system  around  dis¬ 
patch  application  software  de¬ 
veloped  by  Minneapolis-based 
Gearworks  Inc.  Gearworks. 
which  will  announce  the  proj¬ 
ect  this  week,  is  also  hosting 
the  applications  and  linking 
them  to  Roto-Rooter’s  inter¬ 
nally  developed  back-office 
billing  and  customer  systems. 

The  wireless  system  also  in¬ 
cludes  ruggedized  Motorola 
Inc.  mobile  data  phones  that 
are  equipped  with  Global  Po¬ 
sitioning  System  (GPS)  tech¬ 
nology.  Data  transmissions 
will  be  sent  to  field  woriters 
via  Nextel  Communications 
lnc.’s  wireless  network,  which 
supports  transfer  rates  or20K 
to  40K  bit/sec. 

Poppe  said  Roto-Rooter 
plans  to  start  deploying  the 
phones  to  users  next  quarter. 
By  then,  he  added,  the  compa¬ 
ny  will  have  picked  a  vendor 
for  the  portable  printers, 


which  will  be  connected  to  the 
phones  via  Bluetooth  short- 
range  wireless  technology. 

Weston  Henderek.  an  ana¬ 
lyst  at  ARS  Inc.  in  La  Jolla, 
Calif.,  said  he  expects  most  of 
the  growth  in  wireless  data 
applications  to  come  from 
businesses  like  Roto-Rooter 
with  large  staf&  of  Held  ser¬ 
vice.  delivery  or  sales  workers. 

Gearworks  CEO  Keith  Lau- 
ver  said  the  company  used 
XML  code  that’s  delivered  to 
the  Motorola  phones  as  Java 
applets  to  customize  its  Etrace 
software  for  Roto-Rooter.  The 
applets  could  also  run  on  offi- 
er  mobile  devices,  such  as 


tECMNOLOOV  DETAILS 


handheld  PCs.  be  added. 

That  flexibility  was  essential 
to  Roto-Rooter  so  it  would 
have  the  option  of  switching  to 
different  devices  or  wireless 
networii  operators,  Poppe  said. 

Lauver  said  the  GPS  receiver 
built  into  Motorola’s  phones  is 
a  key  component  of  the  dis¬ 
patch  system.  The  GPS-derived 
location  each  field  worker, 
pinpointed  to  within  100  feet, 
will  be  displayed  on  a  map 
that  woricers  at  Roto-Rooter’s 
dispatch  centers  can  access  on 
an  extranet-based  Web  page. 

Once  dispatchers  identify 
the  worker  closest  to  a  cus¬ 
tomer  calling  for  service,  they 
will  send  a  message  with  the 
customer’s  address  to  that  em¬ 
ployee's  phone,  Poppe  said. 
When  the  job  is  completed, 
the  Gearworks  softwiue  will 
guide  the  worker  through  the 
billing  process  and  generate  a 
Java-based  invoice  that  can  be 
printed  in  the  field,  he  added.  I 
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Judge  Sets  Time  0(1 
Java  in  Windows 

U.S.  District  Court  Jucige  J. 
Froderick  Motz  saM  he  plans  to 
order  MicrosofI  Corp.  to  begin 
shaping  Sun  Microsystems 
lnc.’s  Java  technology  with 
desktop  versions  of  Windows 
within  120  days.  Motz  ruled  last 
month  that  Microsoft  would  have 
to  add  up'to'dale  Java  code  to 
Windows,  but  he  didn't  set  a 
schedule  for  doing  so.  Microsoft 
has  said  H  pfara  to  appeal  the 
December  ruling. 


Palm  Unit  Drops 
Internal  Software 

Pabn  lnc.’$  PaknSource  Inc.  unit 
said  it's  repUdng  the  handwrit- 
ingracognihon  technology  in  its 
Palm  OS  operating  system  with 
soflwaro  from  Communicalion 
Inletigence  Corp.  in  Redwood 
Shores,  CaM.  A  federal  judge  in 
late  2001  ruled  that  Palm's  Graf* 
fit!  infringad  on  a  Xerox  Corp. 
patent  prompting  Sunnyvale. 
CaKf. -based  PalmSource  to  look 
at  aftemative  tochnoiogies. 


Short  Takes 

MICROSOR  saM  an  upgrade  of 
Its  Windows  CE  .Net  embedded 
operating  system  is  due  by 
midyear  with  new  features  such 

as  support  for  voict  over  IP _ 

rr  coosuHancy  BEARIN6P0INT 
INC.  in  McLean.  Vl.  said  It  wil 
cut  up  to  550  workers,  reducing 
its  global  workforce  by  3%. 


Cisco’s  Load-Balancing 
Product  Line  Expands 


New  devices  add  traftic  management 
and  disaster  recover)'  capabilities 


Two  Trade  Groups 
Lose  Appeal  Ruling 

The  judge  overseeing  the  govern- 
merit's  antitrust  case  against 
Microeoft  ruled  that  two  IT  trade 
youps  can't  appeal  the  seftte- 
ment  deal  between  the  company 
and  the  U.S.  Department  of  Jus¬ 
tice.  Judge  Colleen  Koftar-Kotetty 
said  the  Computer  A  Communi¬ 
cations  Industry  Association  and 
the  Software  A  Information  In- 
dustry  Assoctatton,  both  in 
Washington,  would  have  to  file 
their  own  suits  against  Micnisoft. 


BY  MATT  HAMBLEN 

Cisco  SYSTEMS  INC-  last 
week  introduced  two 
conteot-sw'iiching 
de\'ices.  one 
for  mirroring  data 
across  distributed  data 
centers  and  the  other 
for  ent^>•-le^Tl  applica¬ 
tion  server  load  balancing. 

The  Content  Services 
Switch  11.Y01  is  positioned  as 
an  entry-level  device  to  round 
out  the  CSS  11500  family,  first 
introduced  in  May  2002.  Cisco 
ttfficials  said-  The  CSS  U50I 
will  provide  small-scale  data 
center  traffic  managemenl.  It 
will  ship  by  fan.  31. 

The  Global  Site  Selector 
4480.  which  is  now  shipping,  is 
designed  for  business  enntinu- 
it>‘  and  disaster  rcTovery  task-s. 
The  GSS  is  cspecioll)'  useful  in 
the  banking  sector,  where  ro- 
motc  data  centers  could  be 
needed  at  a  moment’s  notice. 
Cisco  officials  said. 

Prepared  for  the  Worst 

The  New  York  arm  of  Frank¬ 
furt.  German>'-bascd  Com¬ 
merzbank  AG  has  been  oper¬ 
ating  a  pair  of  the  GSS  devices 
for  a  month,  said  David 
Archetti,  a  senior  netw'ork 
engineer  at  the  bank.  Used  in 
data  centers  in  Manhattan  and 
Wc'sichester  Counr>'.  N.Y..  the 
devices  w'ould  route  traffic  to 
500  area  users  in  the  event  of 
a  power  loss  or  other  disaster. 
According  to  Archetti.  the 
GSS  devices  are  intelligent 
enough  to  know  whether 
demand  for  business  applica¬ 
tions  is  too  great  at  one  data 
center,  meaning  that  a  user 
might  be  instantly  routed  to 
the  other  data  center  to  reach 
the  same  applications. 

"We  learned  a  lot  from  the 
9/U  disaster.**  Archetti  said. 
'The  bank's  Manhattan  data 
center  is  near  the  World  Trade 
Center  and  went  ofT-linc  for 


cighi  months  after  the  attack. 

Marie  Fabbi.  an  analyst  at 
Gartner  Inc.,  said  that  although 
the  concept  of  balancing  the 
data  load  between 
servers  has  been 
around  for  five  years, 
the  GSS  product  e.xem- 
plifies  a  recent  move¬ 
ment  to  expand  that  concept 
by  sharing  loads  between  data 
centers.  Other  vendors,  such 
as  F5  Networks  Irtc.  in  Seattle 
and  Nortel  Networks  Inc.  in 
Brampton,  Ontario,  have 


products  that  are  competitive 
with  the  GSS,  although  Cisco 
has  “pretty  strong"  technology 
that  would  be  used  in  “sophis¬ 
ticated  settit^."  Fabbi  said. 

Fabbi  said  the  CSS  11501  is  a 
good  product  but  “is  not  at  the 
leading  edge  of  innovation.** 
He  said  F5  is  a  clear  leader  in 
the  seis'cr  load-balancing  mar¬ 
ket,  with  Cisco  No.  2.  The 
trend  among  load-balancing 
product  makers  is  to  add  func¬ 
tions  so  that  they  move  be¬ 
yond  merely  making  applica¬ 
tions  available  to  users.  The 
aim  is  to  provide  intelligence, 
including  the  ability  to  read  a 
user's  cookie  and  move  that 
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user  to  a  server  with  content 
suited  to  him. 

ITie  market  for  load  bal¬ 
ancers  and  related  products 
is  currently  at  about  $500  mil¬ 
lion  and  “growing  slowly." 
Fabbi  said.  I 


EMC  Readies  New  Symmetrix  Arrays 


More  scalable 
hardware  is  first 
high-end  upgrade 
in  two  vears 


ev  LUCAS  MEARIAN 

EMC  Corp.  next  month  is  ex¬ 
pected  to  usher  in  a  new  ver¬ 
sion  of  its  high-end  Symmetrix 
storage  arrays  that  will  sport  a 
significantly  modified  archi¬ 
tecture  in  a  bid  to  improve 
performance  and  scalability. 

Sources  said  Version  6.0  of 
Symmetrix  is  also  dc’signcd  to 
close  a  capacity  gap  betWL'en 
EMC's  flagship  product  and  its 
Clariion  midrange  arrays  that 
competitors  such  as  Hewlett- 
I'ackard  Co.  and  Hitachi  Data 
Systems  Corp.  have  been  more 
than  happ)'tofill. 

EMC  said  it  plans  to  intro¬ 
duce  the  array  Feb.  3  in  New 
York.  But  it  wouldn't  disclose 
any  details  about  the  planned 
rollout,  which  will  be  the  first 
upgrade  to  the  Symmetrix 
hardware  in  two  years. 

The  new  offering  will  likely 
bix>s(  the  capacity  of  a  single 
Symmetrix  array  from  70TB  to 
more  than  100TB.  industry  in¬ 
siders  said.  The  sources  said 


EMC  also  plans  to  replace  its 
current  shared  bus  architec¬ 
ture  with  a  faster  switched 
fabric,  similar  to  the  one  Hi¬ 
tachi  built  into  its  Lightning 
9900V  array  two  years  ago. 

In  addition,  the  new  array 
will  be  able  to  scale  downward 
in  a  more  modular  fashion  than 
existing  models  can.  according 
to  sources  at  EMC. 

In  a  September  interview. 
EMC  executives  said  they 
wanted  to  create  a  more  flexi¬ 
ble  and  scalable  Symmetrix 
array.  The  offic'tais  alM>  hinted 
at  plans  to  add  native  support 
for  Fiber  Connection.  IBM’s 
Fibre  Channel-based  I/O  ct>n- 
ncciivity  technology  for  main¬ 
frames.  to  Symmetrix. 

But  sources  said  support  for 
the  IBM  technology,  which  is 
known  as  Ficon.  likely  won't 
be  available  with  the  first  re¬ 
lease  of  Symmetrix  6.0.  'Fhai 
will  probably  be  added  next 
quarter,  the  sources  said. 

Sagging  Sales 

EMC  is  looking  for  the  Sym¬ 
metrix  rollout  to  jumpstart 
its  sales,  which  have  been  hit 
hard  by  (he  tightening  of  cor¬ 
porate  nr  budgets.  The  weak 
demand  has  dragged  EMC 


into  the  red,  although  the 
company  this  month  said  its 
fourth-quarter  sales  appear  to 
have  topped  expectations. 

“We  expect  the  announce¬ 
ment  to  be  a  very  important 
one  for  EMC's  legacy  installed 
base,  as  well  as  the  midrange 
market  that  might  not  have 
had  an  EMC  product  up  until 
now.”  said  Tony  Prigmorc. 
an  analyst  at  Milford.  Mass.- 
based  Enterprise  Storage 
Group  Inc. 

Scalability  is  the  second- 
most  important  factor  in  buy¬ 
ing  storage  device's,  after  data 
availability,  said  Daryl  Black, 
a  storage  architect  at  Telus 
Commumcations  Inc.  in  Van¬ 
couver.  British  Columbia 

“Scalability  is  critical  be¬ 
cause  as  we  change  sizes  as 
a  corporation,  every  piece  of 
hardware  has  to  be  able  to 
grow."  said  Black,  who  recent¬ 
ly  installed  two  of  EMC's  cur¬ 
rent  Symmetrix  models  as  part 
of  a  server  consolidation  pro¬ 
ject  at  Telus.  I 
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Judge  Sets  Tne  on 
Jam  in  Windows 

Olilrtct  Court  Judo*  J. 
FroMeh  Moti  said  ho  plans  to 
ardor  Hcrosaft  Carp,  (a  tegin 
shipping  Sun  Mkrosystems 
inch's  JkM  tachnology  wHh 
Biiawp  surwons  at  wuioohis 
wKNn  120  days.  Metz  rulad  last 


Whahiws.  but  ho  dMit  sal  a 
scnaoiio  nr  oouig  so.  Bucroson 
has  said  R  ptam  to  iWpaai  tba 
Dacanibar  ndtog. 


Two  Trade  Groups 
Lose  Appeai  Ruling 

The  ladga  oaaraaaing  tha  govern- 
aianl’s  aatMrvat  ease  against 
Mtomoft  ndad  that  tan  IT  trade 
vaitoscan'Iappsallhaaaato- 
want  daai  batwaan  die  company 
audthaUADepaftmantelJus- 
tica.  Judge  CoiMn  Kolar-Kotoly 
said  tha  Computor  A  Communi- 
eatkms  badu^  Aasedation  and 
dn  Seftarata  A  hdonttaiion  In* 
duatryAnaodadon,  both  in 
dWdngtan,  would  have  to  (le 
thah  own  suds  agahist  hdcrosoft. 


Pabn  Unit  Drops 
tntemal  Softmuo 

Mn  lac.*sMniSourca  bn.  unit 
itod  ifs  ripiadng  the  Mwrtt* 
ing*facogniBow  technoiagy  in  Ms 
Paha  OS  eparating  sysism  wNh 
softieara  from  Cananunicalion 
bMigsnea  Carp,  to  Redwood 
Sheraa.  A  federal  judge  to 
tola  2001  ndad  that  Ptom's  Braf- 
Id  bdringed  on  a  Xom  Carp, 
patont.  pnuapitog  SuBfiyeale. 
CaW.  based  PainiSourca  to  look 
at  adamadva  tacbiiologlas. 


Short  Takes 

bdCdOSORatodM  upgrade  of 
da  Wtodowa  CC  Jtot  andwddad 
oparattng  syaiam  is  due  by 
nddyaar  wHh  aaw  faahaai  such 
m  euppart  for  mica  aeur  IP. . . . 
IT  eaneudMcy  SEAMNOPOdfr 
MC.toMeUMi.Va^atoddwll 
cut  up  to  560  weriars,  reducing 
ds  gIM  wdrbfarea  by  9%. 


Cisco’s  Load-Balancing 
Product  Line  Expands 


New  devices  add  traffic  mana^ment 
and  disaster  recovery  capabilities 


BY  MATT  NAMBLEN 

Cisco  SYSTEMS  [NClaSt 
week  introduced  two 
content-switching 
devices,  one 
for  mirroring  data 
across  distributed  data 
centers  and  the  other 
for  entry-level  applica¬ 
tion  server  load  balancii^. 

The  Content  Services 
Switch  U50I  U  positioned  as 
an  entry-level  device  to  round 
out  the  CSS  11500  family,  first 
introduced  in  May  2002.  Cisco 
officials  said.  The  CSS  11501 
will  provide  small-scale  data 
center  traffic  management.  It 
will  ship  by  fan.  31. 

The  Global  Site  Selector 
4480.  which  is  now  shipping,  is 
designed  for  business  continu¬ 
ity  and  disaster  recovery  task.v 
The  GSS  is  especially  useful  in 
the  banking  sector,  where  re¬ 
mote  data  centers  could  be 
needed  at  a  moment’s  notice. 
Cisco  officials  said. 

Prepared  for  the  Worst 

The  New  York  arm  of  Frank¬ 
furt.  Germany-based  Com¬ 
merzbank  AG  has  been  oper¬ 
ating  a  pair  of  the  GSS  devices 
for  a  month,  said  David 
Arcbetti.  a  senior  network 
engineer  at  the  bank.  Used  in 
data  centers  in  Manhattan  and 
Westchester  County,  N.Y.,  the 
devices  would  route  traffic  to 
SOO  area  users  in  the  event  of 
a  power  loss  or  other  disaster. 
Accordii^  to  Archetti,  the 
GSS  devices  are  intelligent 
enough  to  know  whether 
demand  for  business  applica¬ 
tions  is  too  great  at  one  data 
center,  meaning  that  a  user 
might  be  instantly  routed  to 
the  ocher  data  center  to  reach 
the  same  applications. 

"We  learned  a  lot  foom  the 
VU  disaster,"  Archetti  said. 
The  bank's  Manhattan  data 
center  is  near  the  World  Trade 
Center  and  went  off-line  for 


eight  months  alter  the  attack. 

Mark  Fabbi.  an  analyst  at 
Gartner  Inc.,  said  that  although 
the  concept  of  balancing  the 
data  load  between 
servers  has  been 
around  for  five  years, 
the  GSS  product  exem¬ 
plifies  a  recent  move¬ 
ment  to  expand  that  concept 
by  sharing  loads  between  data 
centers.  Other  vendors,  such 
as  F5  Networks  Inc.  in  Seattle 
and  Nortel  Networks  Inc.  in 
Brampton.  Ontario,  have 


products  that  are  competitive 
with  the  GSS,  although  Cisco 
has  "pretty  strong"  technology 
that  would  be  used  in  "so(^- 
ticated  settings,"  Fabbi  said. 

Fabbi  said  the  CSS  11501  is  a 
good  product  but  "is  not  at  the 
leading  edge  of  innovation." 
He  said  F5  is  a  clear  leader  in 
the  server  load-balancing  mar¬ 
ket.  with  Cisco  Na  2.  The 
trend  among  load-balancing 
product  makers  is  to  add  func¬ 
tions  so  that  they  move  be¬ 
yond  merely  making  applica¬ 
tions  avail^ie  to  users.  The 
aim  is  to  provide  intelligence, 
inciudii^  the  ability  to  read  a 
user’s  cookie  and  move  that 


user  to  a  server  with  content 
suited  to  him. 

The  market  for  load  bal¬ 
ancers  and  related  products 
is  currently  at  about  $500  mil¬ 
lion  and  "growing  slowly." 
Fabbi  said.  A 


EMC  Readies  New  Symmetrix  Arrays 


More  scalable 
hardware  is  first 
high-end  upgrade 
in  two  years 


EMC  Corp.  next  month  is  ex¬ 
pected  to  usher  in  a  new  ver¬ 
sion  of  its  hi^>-end  Symmetrix 
storage  arrays  that  will  sport  a 
significantly  modified  archi¬ 
tecture  in  a  bid  to  improve 
performance  and  scalability. 

Sources  said  Version  6.0  of 
Symmetrix  is  also  designed  to 
close  a  capacity  gap  between 
EMC’s  fla^hip  product  and  its 
Clariion  midrange  arrays  that 
competitors  such  as  Hewlett- 
i’acfard  Ca  and  Hitachi  Data 
Systems  Corp.  have  been  more 
than  happy  to  fiU. 

EMC  said  it  plans  to  intro¬ 
duce  the  array  Feb.  3  in  New 
York.  But  it  wouldn’t  disclose 
any  details  about  the  planned 
rollout,  which  will  be  the  first 
upgrade  to  the  Symmetrix 
hardware  in  two  years. 

The  new  offering  will  likely 
boost  the  capacity  of  a  single 
Symmetrix  array  from  7DTB  to 
more  than  100TB,  industry  in¬ 
siders  said.  The  sources  said 


EMC  also  plans  to  replace  its 
current  shared  bus  architec¬ 
ture  with  a  foster  switched 
fabric,  similar  to  the  one  Hi¬ 
tachi  built  into  its  Lightning 
9900V  array  two  years  ago. 

In  addition,  the  new  array 
win  be  able  to  scale  downward 
in  a  more  modular  foshion  than 
existing  models  can,  according 
to  sources  at  EMC. 

In  a  September  interv  iew, 
EMC  executives  said  they 
wanted  to  create  a  more  flexi¬ 
ble  and  scalable  Symmetrix 
array.  The  officials  also  hinted 
at  plans  to  add  native  support 
for  Fiber  Connection.  IBM’s 
Fibre  Channel-based  I/O  con¬ 
nectivity  technology  for  main¬ 
frames,  to  Symmetrix. 

But  sources  said  suppon  for 
the  IBM  technology,  which  is 
known  as  Ficon,  likely  won’t 
be  available  with  the  first  re¬ 
lease  of  Symmetrix  6.0.  That 
will  probably  be  added  next 
quarter,  the  sources  said. 

Sagging  Sales 

EMC  is  looking  for  the  Sym¬ 
metrix  rollout  to  jumpstart 
its  sales,  which  have  been  hit 
hard  by  the  tightening  of  cor¬ 
porate  IT  budgets.  The  weak 
demand  has  dn^ged  EMC 


into  the  red.  although  the 
company  this  month  said  its 
fourth-quarter  sales  appear  to 
have  topped  expecutions. 

■^e  expect  the  announce¬ 
ment  to  be  a  very  important 
one  for  EMC's  legacy  installed 
base,  as  well  as  the  midrange 
market  that  might  not  have 
had  an  EMC  product  up  until 
now."  said  Tony  Prigmore. 
an  analyst  at  Milford,  Mass.- 
based  Enterprise  Storage 
Group  Inc. 

Scalability  is  the  second- 
most  important  factor  in  buy¬ 
ing  storage  devices,  after  data 
availability,  said  Daryl  Black, 
a  storage  architect  at  Telus 
Communications  Inc.  in  Van¬ 
couver,  British  Columbia. 

"Scalability  is  critical  be¬ 
cause  as  we  change  sizes  as 
a  corporation,  every  piece  of 
hardware  has  to  be  able  to 
grow."  said  Black,  who  recent¬ 
ly  installed  two  of  EMC’s  cur¬ 
rent  Symmetrix  models  as  part 
of  a  server  consolidation  pro¬ 
ject  at  Telus.  I 
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Ptech  Probe 


federal  agents,  wiiich  was 
broadly  characterized  by  the 
media  as  an  early-moming 
‘‘raid.*  The  search  was  part  of 
an  imestigadon  of  the  compa- 
oy's  relationship  with  Yassin 
al-Qadi.  a  wealthy  Saudi  busi¬ 
nessman  and  one  of  Ptech 's 
two  “angel**  investors  who 
helped  get  the  company  on  its 
feet  in  1994.  Al-Qadi,  who  was 
never  a  shareholder  of  record 
in  Ptech  and  who  later  twice 
turned  down  Ptech  requests 
for  additional  funding,  b  be¬ 
lieved  by  the  U.S.  intelligence 
community  to  have  rinancial 
ties  to  international  terrorism. 

A  Deciniatgd  Business 

Since  that  search,  Ptech,  once 
a  65-employee  company  that 
rarely  lost  a  competitive  con¬ 
tract  bid,  has  been  reduced  to 
10  people  and  has  almost  no 
new  business  on  the  horizon. 

“Almost  immediately  we  lost 
our  revenue  for  December  and 
lanuary,"  Ziade.  *‘CustD- 
men  who  know  us  and  know 
our  prochjct  have  not  walked 
away.  They  know  there  b  noth¬ 
ing  here  related  to  terrorism.** 

But  soon  after  the  investiga¬ 
tion  broke,  Ziade  said,  some 
large  customers  refused  to 
comment  publicly  on  their 
trust  and  confidence  in  Ptech 
and  Its  enterprise  software, 
which  enables  Fortune  1.000 
and  government  customers  to 
visualize  and  analyze  their 
technology  infrastructures 
and  build  modeb  to  conduct 
strategic  business  planning. 
That  situation  was  confirmed 
by  Corripurerworfd  in  inter¬ 
views  with  those  customers. 

**Whcn  you  sell  to  the  For¬ 
tune  U)00,  you  are  in  the  busi¬ 
ness  of  trust,*  said  Ziade.  “But 
there  were  directives  coming 
out  of  the  legal  departments  in 
those  companies  that  said 
Ptech  b  a  rbk  company.** 

For  example,  a  systems  ar¬ 
chitect  at  a  major  forestry 
products  firm  that  relies  on 
Ptech  software  to  conduct 
strategic  data  mining  and 
business  planning  confirmed 
the  existence  of  a  corporate 
gag  order.  Yet  the  company's 


relationship  with  Ptech  hasn’t 
changed,  said  the  source,  who 
requested  anonymity.  “The 
company  b  fme,  and  the  soft¬ 
ware  b  wonderful,*  the  source 
said.  “Tberc  was  never  any 
concern  about  the  integrity  of 
the  software." 

The  same  holds  true  for 
IBM  Global  Services,  which 
counts  Ptech  among  its  strate¬ 
gic  business  partners.  Al¬ 
though  IBM  initially  tried  to 
distance  itself  from  what 
looked  like  a  major  .scandal  in 
the  making.  Jeff  Gluck,  a 
spokesman  for  IBM.  said  the 
relationship  between  the  two 
companies  b  “unchanged.** 
ffiM  placed  Ptech 's  flagship 
enterprise  modeling  product, 
called  FrameWorii.  at  the  cen¬ 
ter  of  its  Enterprise  Architec¬ 
ture  Methodology.  In  a  udiiie 
paper  obtained  by  CompuTer- 
wc^  IBM  called  the  Ptech 
product  “a  powerful  tool  to 
rapidly  collect,  analyze,  orga¬ 
nize  and  present"  information. 
‘CUeni  acceptance  of  the  dy¬ 
namic  live  deliverable  bos  been 
outstanding."  h  concluded. 

"rhe  fact  that  they’re  a  pan- 
ncr  of  ouis  speaks  for  itself  as 
for  as  the  quality  of  the  technol¬ 
ogy  b  concerned."  said  Ghick. 


Too  Late 

PiBCh’s  business  has  al  but  dried 
up.  de^e  assurances  by  U.S. 
government  ofbeiab  that  As  soft¬ 
ware  is  s^: 

TOM  RIDGE.  diTKtorofOffMe 
of  Homeland  Securgy  "The 
aoftwarelBneweyieopefdfrna 
the  lecurlfy  of  eiv  coontry." 

ARI FIEBCHER.  WhHe  Houu 
preu  secretary  "The  matertil 
has  been  reviewed  by  Am  ap- 
prepHala  gewnmant  aoan* 
dH.  and  foey  him  detedad 
abwhitaly  nothing ...  that 
would  lead  to  any  concern." 


The  CIO  at  a  large  energy 
company,  who  also  requested 
that  be  and  hb  company  not 
be  named,  said  there  was 
strong  concern  among  senior 
management  when  the  story 
first  broke.  His  IT  team  was 
charged  with  documenting  the 
company's  relationship  with 
Ptech,  including  when  and 
ndtere  Ptech  employees  may 
have  been  on-site. 

The  CIO  said  he  polled  sev¬ 
eral  user  contacts,  including  in 
government,  to  assess  their  re¬ 
actions  and  plans,  and  abo  got 


the  government  position  on 
the  software.  That  information 
led  hb  company  to  decide  to 
stick  with  Piecb’s  product 

’The  CIO  added  that  Ptech’s 
service  and  support  have  re¬ 
mained  “timely  and  thorough." 

Yet  none  of  that  seems  to 
matter  now.  current  and  for¬ 
mer  Ptech  employees  said. 
They  and  security  experts 
warn  that  what  happened  to 
Ptech  can  happen  to  any  com¬ 
pany  with  an  employee  or  in¬ 
vestor  whose  name  shows  up 
on  a  terrorist  watch  list. 

“Any  company  doing  busi¬ 
ness  in  the  clas^ied  arena 
must  take  steps  to  ensure  its 
employees  are  fully  vetted  and 
monitored  over  time."  said 
Larry  Johnson,  a  security  con¬ 
sultant  and  former  CIA  officer. 

For  Ziade  and  hb  company, 
the  future  b  anything  but  cer¬ 
tain.  Ptech's  technology  b 
mature  enough  to  remain  tm- 
changed  for  about  a  year,  he 
said.  The  company  has  an  un- 
rcleascd  product  that  will  also 
help  buy  additional  time  for 
Ziade,  DOW  one  of  Ptech’s  prin¬ 
cipal  coders  as  well  as  Its  CEO. 

Hayden  Shulz,  a  former  prin¬ 
cipal  engineer  at  Ptedi,  said 
the  company  will  likely  hat 


unprecedented  pressure  to 
keep  the  software  updated  in  a 
reasonable  time  frame.  "If  the 
remaining  10  people  sat  down 
and  coded  fora  year;  they 
could  do  il.”  said  Shulz.  “But 
there’s  going  to  be  a  constant 
give  and  pull  between  who’s 
going  to  go  out  to  customers 
and  who’s  going  to  write  code." 

Ziade  said  he’s  still  assess¬ 
ing  whether  it  makes  sense  to 
continue  releasing  products 
under  the  Ptech  name.  “We 
would  love  to  keep  it  Ptech. 
but  we  don't  know  what  it  will 
be  a  year  from  now,"  be  said. 

Tun  Sloane,  a  research  direc¬ 
tor  at  Aberdeen  Group  Inc.  in 
Boston,  lamented  Plea’s  folL 
*T  vbited  Ptech  and  Oussama 
Ziade  three  weeks  before  thb 
story  unfolded,"  he  said.  “U  b  a 
crying  shame  that  xenophobia 
induced  by  a  war  on  America’s 
economic  might  results  in 
bringing  down  a  high-tech 
business  chat  was  contributing 
to  both  our  economy  and  our 
technological  prowess."  » 
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GPS  Jammers 


amount  of  technical  skill 
could  build  a  GPS  jammer 
from  the  plans. 

Though  the  Phrack  article 
said  the  jammer  was  des^ned 
to  work  only  against  GPS  civil- 
use  signab  broadcast  on  the 
frequency  of  15^42  MHz  and 
not  the  military  frequency  of 
12276  MHz.  James  Hasik.  an 
Atlanta-based  consulunt  and 
author  of  The  Predsumftevo- 
lurion:  GPS  ond  the  fxttore  of 
Aerial  Warfare,  disagreed. 

Hasik  said  that  while  the 
Phrack  jammer  was  targeted 
against  the  civil  GPS  signal, 
known  as  the  C/A  code,  it 
could  also  threaten  military 
systems,  since  “almost  all  mili¬ 
tary  GPS  receivers  must  first 
acquire  the  C/A  s^nal"  before 
locking  onto  the  miUtary  sig- 
naL  known  as  the  P(Y)  code. 
He  added  that  GPS  receivers 


are  especially  vulnerable  to 
jamming  because  of  the  low 
level  of  the  signal  after  it 
traveb  20.000  miles  through 
space  from  GPS  satellites. 

The  Department  of  Defense, 
which  faces  the  possibility  of 
its  GPS-guided  weapons  en¬ 
countering  Russian-made  GPS 
jammers  in  Iraq,  has  antijam¬ 
ming  technology  at  its  dispos¬ 
al  Still  the  DOD  viewed  the 
Phroefc  article  with  concern. 

Air  Force  iL  Ccd.  Ken.  Mc¬ 
Clellan.  a  Pentagon  spokes¬ 
man.  called  the  impUcatiom  of 
the  homemade  jammers  de¬ 
scribed  in  the  Phrack  article 
“somewhat  serious."  Such  jam¬ 
mers  “could  disrupt  commer¬ 
cial  operations,"  he  said.  He 
said  GPS  experts  at  the  Penta¬ 
gon  don’t  “at  the  moroenf ' 
view  homemade  jammers  as  a 
hazard  to  safety  of  flight  for 
civil  aircraft  or  ship  opera¬ 
tions,  “but  rather  a  nuisance." 

The  Federal  Aviation  Ad¬ 
ministration  is  developing  a 


nationwide  GPS-based  pee- 
cisioQ  landing  system.  And  the 
Coast  Guard  cerates  a  GPS- 
based  maritime  navigation 
system  on  both  coasts,  the 
Great  Lakes,  inland  water¬ 
ways  and  Hawaii  BUI  Mosley, 
a  spokesman  for  the  Depart¬ 
ment  of  TVanspoitation,  the 
parent  agency  of  the  FAA  and 
the  Coast  Guard,  said  hb  de¬ 
partment  b  well  aware  of  the 
threat  posed  by  GPS  jammers. 

The  DOT’S  John  A.  Volpe 
lYansportation  Systems  Cen¬ 
ter  in  Cambridge,  Mass.,  pre¬ 
pared  a  report  in  August  2001 
that  said.  “Some  jamming  de- 
vices/iechniques  arc  available 
on  the  lotemet  and  prolifera¬ 
tion  will  continue,  because  a 
single  device  that  could  db- 
rupt  military  and  civil  opera¬ 
tions  worldwide  would  be  at¬ 
tractive  to  malicious  govern¬ 
ments  and  groups.* 

As  a  result  of  that  study. 
Mosley  said,  Tkansportation 
Secretary  Norman  Mineta  last 


HAsingle  de¬ 
vice  ttatcould 
(fisnipt  military  and 
dvi  operations 
VMxMwklewDuidbe 
attractive  to  mali¬ 
cious  governments 
and  groups. 

AM  AUGUST  2001  DOT  REPORT 

March  ordered  an  “action 
plan"  to  fUDtect  dviJ  GPS  sig¬ 
nab  and  users  by.  among  other 
tilings.  'The  tran^r  of  appro¬ 
priate  antijam  technology 
from  the  military  to  ctvU  use" 
Mosley  was  unable  to  say 
wheth^  that  technology 
transfer  has  occurred.  I 
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Start-ups  Look  to  Secure  Web  Services 


DataPower  Technolc^  Inc. 
last  week  joined  a  small  but 
growing  number  of  IT  ven¬ 
dors  offering  products  aimed 
at  securing  XML-based  Web 
services  applications. 

The  Cambridge,  Mass.- 
based  company’s  XS40  XML 
Security  Gateway  is  a  hard¬ 
ware  appliance  designed  to 
provide  a  range  of  sectirity 
functions,  including  filtering, 
authentication,  digital  signa¬ 
ture  verification,  encryption 
and  validation  of  data  in  XML 
and  Simple  Object  Access  Pro¬ 
tocol  (SOAP)  messages. 

The  XS40  is  one  of  a  hand¬ 
ful  of  products  from  start-ups 
that  are  trying  to  address  se¬ 
curity  concerns  related  to 
Web  services  transactions 
without  slowing  down  appli¬ 
cation  performance,  said  Ted 
Schadler,  an  analyst  at  For¬ 
rester  Research  Inc.  in  Cam¬ 
bridge.  Mass. 

Reactivity  Inc.  in  Belmont. 
Calif,  and  Forum  Systems  Inc 
in  Sandy,  Utah,  offer  similar 
hardware-based  approaches, 
Schadler  said.  Others,  such  as 
Mountain  View,  Calif.-based 
Westbridge  Technology  Inc, 
have  developed  software- 
based  engines  that  can  filter 
XML  messages  for  compliance 
with  Web  services  security 
policies  set  by  IT  managers. 

Simpler  Security 

The  XS40  eliminates  the  need 
for  coders  to  embed  security 
functions  in  individual  Web 
services  applications,  accord¬ 
ing  to  Eugene  Kuznetsov,  Data- 
Power’s  president 

Pete  lindstrom,  an  analyst  at 
Spire  Security  LLC  in  Malvern, 
Pa.,  said  users  will  be  able  to 
pass  XML-enabled  transac¬ 
tions  through  the  XS40  and  let 
it  handle  the  security  details. 

RouteOne  LLC.  a  joint  ven¬ 
ture  in  Southfield,  Mich., 
formed  last  year  by  the  financ¬ 
ing  units  of  DaimlerChrysler 
AG,  Ford  Motor  Co..  General 
Motors  Corp.  and  Toyota  Mo¬ 
tor  Corp.,  is  using  the  XS40  to 
secure  a  Web-based  credit  ap¬ 
plication  management  system. 

RouteOne’s  system  lets  auto¬ 


mobile  dealers  and  finance 
companies  exchai^e  data 
about  customer  loan  applica¬ 
tions.  The  XS40  decrypts  mes¬ 


sages  sent  to  the  credit  man¬ 
agement  system  via  SOAP, 
validates  them  and  passes 
them  to  RouteOne’s  servers 


for  further  processing.  It  then 
electronically  signs  and  re¬ 
encrypts  the  messages. 

‘^e  needed  to  have  a  fool¬ 
proof  way  of  making  sure  that 
a  person  making  a  call  was 
who  he  said  he  was,”  said  T.N. 


Subramaniaro.  RouteOne's 
chief  technology  c^icer.  The 
company  was  also  looking  for* 
secure  technology  that  w^d 
not  degrade  performance. 
DataPower's  hardware  ‘fit  that 
bill”  Subramaniam  said.  # 
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Steve’s  Other  Legacy 


"HEN  STEVE  CASE  Stepped  down 
in  disgrace  last  week  as  chair¬ 
man  of  AOL  Time  Warner,  the 
business  press  leapt  onto  the 
story  with  savage  glee.  His  resig- 


TLition  •iwifUy  became  a 
symKflic  mument.  a  met- 
apht>r  for  the  humiliatintt, 
crashing  finale  t*f  the  dot¬ 
com  air  balliHin  that 
buoyed  the  late 

Only  three  years  ago. 
the  new-media  mogul  tri¬ 
umphantly  acquircHl  the 
old-media  giant,  fueled 
largely  by  his  dazzling  vi¬ 
sion  of  the  ■’Internet  cen¬ 
tury."  which  turned  out  to 
be  wrong  on  just  about 
e\ery  ctKky  assumption.  His 
merged  megacompany  lost  tif 
its  value  from  an  initial  starting 
point  as  a  S318  billion  bi'hemoth. 

The  projected  profits  were  imagi¬ 
nary.  while  Internet  advertisers  col- 
lectiwly  dove  off  a  cliff  and  the  ca¬ 
ble  companies  swooped  in  to  deliver 
superior  (and  cheaper)  Internet  ac¬ 
cess.  "We  didn’t  innovate  and  differ¬ 
entiate  as  much  as  we  should  have." 
Ion  Miller.  AOL’s  CEO.  acknowl¬ 
edged  last  week. 

Case'  himself  described  the  online 
content  business  as  a  "gnicUng.  non¬ 
stop  marathon,  risky,  expensive  and 
fiercely  competitive."  It  sure  beat 
the  hell  out  of  him.  But  is  the  merg¬ 
er's  failure  all  that's  left  of  his  AOL 
legacy?  To  be  the  last  cautionary  talc 
among  the  dot-com  disasters?  Ab¬ 
solutely  not.  I  see  another  legacy 
here  that  means  a  great  deal  more*  to 
corporate  IT. 

As  a  purely  con.sumer  play.  .AOL 
was  never  central  to  your  strategic 
plans.  But  it  nevertheless  played  a 
critical  role  —  along  with  the  fa¬ 
mous.  still-successful  online  players 
such  as  Amazon,  Yahoo.  eBay  and 
Expedia  —  in  constructing  the 
launching  pad  for  your  company's 
e-business. 

The  meteoric  rise  of  AOL  didn't 


•dll0r  M  cMif  ff  fliapar- 

iNf  It 


just  bring  the  killer  app 
of  e-mail  to  millions  of 
consumers,  making 
mmtcchies  feel  more  at 
ease  with  Web-based 
technologies.  It  also 
made  them  comfortable 
with  the  concept  of 
spending  their  money 
online,  which  they  did 
with  a$L^  billion 
vengeance  during  the 
2002  holiday  season. 
Along  with  a  fundamen¬ 
tal  shift  in  how  we  communicate 
with  one  another  came  this  new  ex¬ 
pectation  that  businesses  should  be 
serving  us  across  multiple  channels. 

While  IT  spending  ha.s  been  in  a 
miserable  slump  for  the  p.ist  two 
years,  e-business  spending  has 
grown  by  more  than  20®n.  remaining 
a  lop  investment  priority  for  Ameri¬ 
can  businesses,  according  to  IDC. 

By  2006.  retailers  and  wholesalers  in 
the  U.S.  are  expected  to  spend 
S45  billion  annually  on  Web  tech¬ 
nologies  and  services,  IDC  predicts. 


"TTie  dot-com  crash  didn't  kill  any¬ 
thing  except  hundreds  of  ill-con- 
ceived  companies."  John  Gantz.  IDC’s 
chief  research  officer,  noted  Iasi 
summer.  "In  fact,  it  actually  helped 
users  in  the  real  'new  economy.'  the 
one  where  businesses,  schools  and 
government  agencies  from  around 
the  world  are  steadily  integrating  In¬ 
ternet  technologies  into  their  nor¬ 
mal  business  operations." 

Why  are  they  doing  that?  Because 
doing  business  online  can  improve 
coordination  with  suppliers,  cut 
costs  and  improve  customer  service. 
We  saw  that  thmugh  the  experi¬ 
ences  of  our  Premier  100  IT  Leaders 
(C^uickLink  346(M)).  who  ranked 
e-business  projects  among  their  top 
five  spending  prioritit'S  for  2003. 

This  year,  worldwide  e-business 
IT  spending  is  projected  to  hit  $245 
billion  —  up  nearly  50%  from  the 
S164  billion  spent  in  2002,  says 
eMarketer  Inc.  Even  if  the  analysts 
are  only  half  right,  that’s  still  cause 
for  optimism. 

There  are  no  doubt  dozens  of 
lessons  in  the  downfall  of  Steve 
Case  and  AOL  that  busines.s  schools 
will  feast  on  in  case  studies  for 
years.  But  whatever  the  judgment  of 
history.  IT  owes  him  at  least  a  small 
nod  for  the  change  he  brought  about 
with  his  other  legacy. » 


WNt  A'MItWH 
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No  Field  of 
Dreams:  VC 
Gets  Real 

ONE  GUIDE  to  IT’S  fu¬ 
ture  is  to  see  where 
venture  capitalists  are 
putting  their  money.  So  I  went 
and  asked  one. 

Alex  Rosen,  a  general  partner  at 
Sprout  Group  (founded  in  1969  and 
one  of  the  older  venture  groups),  told 
me  recently.  “I  don't  think  there  are 
any  great  segments  in  IT  right  now." 

Rosen  notes  that  many  investors 
who  were  once 
looking  to  imagina¬ 
tive  IT  vendors  to 
make  them  fortunes 
have  come  up  short; 
that  was  so  1990s. 

Now.  successful  IT 
inve.stmcntsare  the 
result  of  focusing 
on  companies  that 
offer  tangible,  near- 
term  tactical  busi¬ 
ness  solutions. 

The  nrore  com¬ 
plex  business  becomes,  the  more  com¬ 
panies  need  IT  to  sort  out  that  com¬ 
plexity.  .says  Rosen.  But  they  don’t  want 
to  get  sucked  into  technology  paradigm 
shifts  or  grand  implementation  visions. 

For  example,  cxtmpanies  selecting 
storage  management  software  demand 
quick  results  and  require  deployments 
in  a  couple  of  days,  not  months.  Yet 
even  with  fast  storage  management 
implementations,  IT  providers  rvecd  to 
articulate  long-term  product  road 
maps  offering  customers  things  such 
as  capacity  planning  and  utilization- 
rate  technology. 

Rosen  say.s  that  for  IT  vendors’ 
products  to  be  effective,  they  must 
resonate  with  a  customer's  needs  now 
and  down  the  road. 

Rosen  also  secs  the  vertical  solutions 
nurket  as  pt>tcntially  lucrative  to  ven¬ 
ture  capitalists  like  himself.  “Many  IT 
firms  (havel  tried  to  offer  generic  prod¬ 
ucts."  he  says.  “But  it  just  doesn't  work." 

Industries  such  as  financial  services 
and  energy  arc  using  sector-specific 
risk-management  applicattomi.  “Any¬ 
thing  that  helps  companies  get  a  clos¬ 
er  connection  between  their  IT  infra¬ 
structure  and  business  users  is  getting 
a  real  look."  Rosen  says. 

Also.  IT  vendors  have  to  speak  the 
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Steve’s  Other  Legacy 


"HEN  STEVE  CASE  Stepped  down 
in  disgrace  last  week  as  chair¬ 
man  of  AOL  Time  Warner,  the 
business  press  leapt  onto  the 
story  with  savage  glee.  His  resig- 


nation  swiftly  became  a 
symbolic  moment,  a  met¬ 
aphor  for  the  humiliating, 
crashing  finale  of  the  dot¬ 
com  air  baUoon  that 
buoyed  the  late  *90s. 

Only  three  years  ago. 
the  new-media  mogul  tri¬ 
umphantly  acquired  the 
old-media  giant,  fueled 
largely  by  his  dazzling  vi¬ 
sion  of  the  "Internet  cen¬ 
tury,"  which  turned  out  to 
be  wrong  on  iust  about 
every  cocky  assumption.  His 
merged  megacompany  lost  70%  of 
its  value  from  an  initial  starting 
point  as  a  S318  billion  behemoth. 

The  projected  ^fits  were  imagi¬ 
nary.  while  Im^et  advertisers  col¬ 
lectively  dove  off  a  cliff  and  the  ca¬ 
ble  companies  swooped  in  to  deliver 
superior  (and  cheaper)  Internet  ac¬ 
cess.  "We  didn't  innovate  and  differ¬ 
entiate  as  much  as  we  should  have.” 
)on  Miller.  AOL's  CEO,  acknowl¬ 
edged  last  week. 

Case  himself  described  the  online 
content  business  as  a  "grueling,  non¬ 
stop  marathon,  risky,  expensive  and 
fiercely  competitive.”  It  sure  beat 
the  hell  out  of  him.  But  is  the  merg¬ 
er's  f^ure  all  that's  left  of  his  AOL 
legacy?  To  be  the  last  cautionary  tale 
among  the  dot-com  disasters?  Ab¬ 
solutely  not.  I  see  amKher  legacy 
here  that  means  a  great  deal  more  to 
corporate  IT. 

As  a  purely  consumer  play.  AOL 
was  never  central  to  your  strategic 
plans.  But  it  nevertheless  played  a 
critical  role  —  aloi^;  with  the  fa¬ 
mous.  still-successful  online  players 
such  as  Amazon.  Yahoo,  eBay  and 
Expedia  ~  in  consmicting  the 
launching  pad  for  your  company’s 
e-busioess. 

The  meteoric  rise  of  AOL  didn't 


just  bring  the  tdUer  app 
of  e-mail  to  millions  of 
consumers,  making 
nontechies  feel  more  at 
ease  with  Web-based 
technologies.  It  also 
made  them  comfortable 
with  the  concept  of 
spending  their  money 
online,  which  they  did 
with  a  $13  billion 
vengeance  during  the 
2002  holiday  season. 
Along  with  a  fundamen¬ 
tal  shift  in  how  we  communicate 
with  one  another  came  this  new  ex¬ 
pectation  that  businesses  should  be 
serving  us  across  multiple  channels 
While  IT  spending  has  been  in  a 
miserable  slump  for  Che  past  two 
years,  e-business  spending  has 
grown  by  more  than  20%,  remaining 
a  top  investment  priority  for  Ameri¬ 
can  businesses,  according  to  IDC. 

By  2006,  retailers  and  wholesalers  in 
the  U.S.  are  expected  to  spend 
$45  billion  annually  on  Web  tech¬ 
nologies  and  services.  IDC  predicts. 


“The  dot-com  crash  didn’t  kiii  any¬ 
thing  except  hundreds  of  ill-con¬ 
ceived  companies,”  John  Gantz,  IDC’s 
chief  research  officer,  noted  last 
summer.  "In  fact,  it  actually  helped 
users  in  the  real  ‘new  economy,'  the 
one  where  businesses,  schools  and 
government  agencies  from  around 
the  world  are  steadily  integrating  In¬ 
ternet  technologies  into  their  nor¬ 
mal  business  operations.” 

Why  are  they  doing  chat?  Because 
doing  business  online  can  improve 
coordination  with  suppliers,  cut 
costs  and  improve  customer  service. 
We  saw  that  through  the  experi¬ 
ences  of  our  Premier  100  IT  Leaders 
((^icklink  34600  L  who  ranked 
e-business  projects  among  their  top 
five  spending  priorities  for  2003. 

This  year,  woHdvride  e-business 
IT  spending  is  projected  to  hit  $245 
billion  —  up  nearly  50%  from  the 
$164  billion  spent  in  2002,  says 
eMarketer  Inc.  Even  if  the  analysts 
are  only  half  right,  that’s  still  cause 
for  optimism. 

There  arc  no  doubt  dozens  of 
lessons  in  the  downfall  of  Steve 
Case  and  AOL  that  business  schools 
will  feast  on  in  case  studies  for 
years.  But  whatever  the  judgment  of 
history.  IT  owes  him  at  least  a  small 
nod  for  the  change  be  brought  about 
with  his  other  legacy.  I 
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No  Field  of 
Dreams:  VC 
Gets  Real 

ONE  GUIDE  to  ITs  fu¬ 
ture  is  to  see  where 
venture  capitalists  are 
putting  their  money.  So  I  went 
and  asked  one. 

Alex  Rosen,  a  general  partner  at 
Sprout  Group  (founded  in  1969  and 
one  of  the  older  venture  groups),  cold 
me  recently.  "I  don't  think  there  are 
any  great  segments  in  IT  right  now.” 

Rosen  notes  that  many  investors 
who  were  once 
looking  to  imagina¬ 
tive  rr  vendors  to 
make  them  fortunes 
have  come  up  short; 
that  was  so  1990s. 

Now,  successful  IT 
investments  are  the 
result  of  focusing 
on  companies  that 
offer  tangible,  near- 
term  tactical  busi¬ 
ness  solutions. 

The  more  com¬ 
plex  business  becomes,  the  more  com¬ 
panies  need  IT  to  sort  out  that  com¬ 
plexity.  says  Rosen.  But  they  don't  want 
to  get  sucked  into  technolc^  paradigm 
shifts  or  grand  implementatioo  visions. 

For  example,  companies  selecting 
storage  management  software  demand 
quick  results  and  require  deployments 
in  a  couple  of  days,  not  months.  Yet 
even  with  fast  storage  management 
implementations,  IT  providers  need  to 
articulate  long-term  product  road 
maps  offerti^  customers  things  such 
as  capacity  planning  and  utilization- 
rate  technology. 

Rosen  says  that  for  IT  vendors’ 
products  to  be  effective,  they  must 
resonate  with  a  customer’s  needs  now 
and  down  the  road. 

Rosen  also  sees  the  vertical  sotuiions 
maiket  as  potentially  lucrative  to  ven¬ 
ture  capitalists  like  himself.  "Many  IT 
firms  (have)  tried  to  offer  generic  prod¬ 
ucts,”  be  says.  "But  it  just  doesn’t  work.” 

Industries  such  as  financial  services 
and  energy  are  using  sector-spedfic 
risk-management  applications.  "Any¬ 
thing  that  helps  companies  get  a  clos¬ 
er  connection  between  tbelr  IT  infra¬ 
structure  and  business  users  is  getting 
a  real  look,"  Rosen  says. 

Also,  IT  vendors  have  to  speak  the 
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IT  LEADERS 

CONFERENCE 

February  23-25,  2003 
JW  Marriott 
Desert  Ridge  Resort 


Lead  Your  Organization  to 
the  Real-Time  Enterprise! 


Exchange  Innovative  ideas  and  Strategies 
with  Computerworld's  Premier  100 
IT  Leaders  who: 

•  Prove  the  Business  Value  of  IT 

•  Maximize  the  Customer  Connection 

•  Bulletproof  Company  Assets 

•  Optimize  infrastructure 


Scottsdale,  Arizona 
Why  You  Should  Attend 

Need  to  lead  your  O  teams,  departments 
and  company  to  the  real-time  enterprise’ 
Want  to  exchange  innovative  ideas  and 
strategies  with  other  top  IT  executives’ 
Then  attend  Computerworld's  Premier 
too  IT  Leaders  Conference,  the  ONLY 
conference  where  you  can  hear  from  — 
and  network  with  —  Computerworld's 
Premier  100  fT  Leaders 

Who  Are  the  Premier  100? 

They're  a  unique  set  of  award  winning  IT 
executives  with  valuable  lessons  to  share 
and  advice  to  offer  YOU  They  are  tech¬ 
nologists  who  understand  business 
needs,  lake  calculated  risks  and  lead 
through  innovation  They  are  CIOs,  vice 
presidents  of  IT.  directors  of  IT  and 
business  managers  honored  as 
Computerworld's  Premier  tOO  from  a 
wide  swam  of  vertical  industries.  When 
you  attend  this  unique  conference,  you'll 
hear  proven  examples  of  how  these  IT 
Leaders  have  advanced  their  organiza¬ 
tions  through  innovative  leadership  and 
proven  strategies. 

What  is  Unique? 

Crafted  by  Computerworld  editors,  this 
oxifererKe  offers  a  radical  departure  from 
the  standard  (T  event.  With  a  focus  on 
great  deas.  best  practices  and  real  appli¬ 
cations  of  IT  strategy,  you  gam  direct 
nsight  from  leading  user  organizatiorts. 
The  maior  sessions  provide  highly  mterac- 
twe.  entertaming  dscussions  with  IT 
Leaders  and  ndustry  experts  —  each 
moderated  by  ComputerworU  editors  in  a 
Mvwv^iallmeetingfonnaLKeyiopicscert- 
ter  on  the  mtcrscciion  of  tecfvKilogy  and 
business  in  areas  critically  imporiant  to 
todayMT  manager 


CONFERENCE  AGENDA 


SUNDAY,  FEBRUARY  23 


Maryfran  Johnson 


Noon  to  S;00pm 
Pre-confeitince  Golf  Outing 
7:00pm  tti  OtOOpm 

Pre-conferertce  Networfdng  Reception 

MONDAY,  FEBRUARY  24 

7:00am  to  8:00am 
Buffet  Brealcfast 
8:00am  to  8:1Sam 
Welconte  and  Opening  Remarks 

MARYFRAN  X>Hr«S0N.  eOfTO*  W  Om.  COMPUTERWORID 

8:15am  to  8:45am 

Driving  the  Digttaf  factory: 
DaimlerChfysi^  Design 
Automation  Push 

a  susANUNGBLSVPaaaOA*«RO«YSL«AO 
bcakmngicuseoriT  rardejigR«rarKWruMmm)rvffie«<akh 
auiom«it('h«s«rrb«t«i)on4mMSM  'OigRaracwry* 
BniKtarn«d«<«0ucingoioduciioriassOyiotD3(nb  COSusin 
Un^  wa  (Mail  hM  the  use  cf  maxulxlwing  amuUUn  and  <i>s(ializ» 
ion  iciols  B  enaMrq  DaentefChfVS)"  B  [uh  IT  beym) « (radtnna 
>cin  in  the  car  manufacR/mq  cnxRC  but  more  invortanfly:  how  ihe 
oroiKI 'S  chanqng  ihe  may  B ’M'agM  for  buseWB  benefit 

8:4Sam  to  9:30am 

^Blueprint  for  Tomorrow's 
Infrastructure 

MNCl  MODERATOR  DON  TtWtANT. 

NEWS  EOnOR,  COMPUTERWORLD 
PANEum  NCUIDi:  OAMCN  SEAN.  VP  Of  CORPOUTT  SYSTEMS. 
HXTDN  HOraS  DAMD  gUZMAN.  SVP  a  Oa  OWENS  I  minor; 
OOUC  UWB,  EVP  a  OO.  Sot  CflttTWENTS  HOHLS 
WXh  «  D  80%  cT  IT  tai^pre  eanrwM  tar  rTrastruclure  vckeep  am) 
upoadei  aneptnn  to  nntt  aRecNis  M  dau  cenier  MR  comnje  v> 
rimfynZOID.  MRe'«endBnaNpW«i9aiiMtya(uttiyaridaui»' 
noTNc  cohovMq  Bxideb,  uMe  (feri4itne  iRhiiAMes  sutfi  g  ttade 
fenm  im,  unWk  md  Surage  Mea  UeMCrts  SWty  M  ato  tiWng 
nci*nwiBVbecemBuer9snH9B  HcwdDWuoxRacghMr* 
btaieNXtaroeitrwHS«BBEnNrsper»Sn9>Shaid>cube<onadbM- 
•jmMoxiOUBngieneaN?  vttuiniEdajUyouwndasiBy? 

tdnr  OoR  tiwmS  iHd  de  debiK  aboui  keep  you 

nTTir|*it*Ti1iir«iiiT*re‘r  rm  f*f^T  inf*iiTn  n"r*irrf 

9:30wn  to  10:1Sam 

Creating  Business  Value  Out  of 
Real-Time  Irrfbrtnation 
cuens  ROM.  wp  a  00,  oaTA  AM  UNES 

•t  egdayS  cDnv*tiUKe  iTwkei  tUAesees  must  deirrer 
‘'~Br  cummer  service,  turn  nwriDry  faster,  and 
tfanono  orcurstances  In  thBSesswn.  Curtis 
M  oAa  w  leveraged  a  mulbw*  owestmenc  <i  a 
dN  an  fdiawvKturt  «id  tf«  'esuitng  busmess 

_ IP  •dwung  t»  oMomer  va>e>  enpenence 

SvoueiiiSEM  wrwelcdMs and  QMeriorwNBun  display  screens;  to’ 
' - - - '  “ — - - - ‘tyand  nveoiory,  the 
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10:15am  to  10:30am 
Break 

10:30am  to  11:00am 

The  Vanguard  Group:  Leveraging 
the  Web  Across  Multiple  Business 
Channels 

TIM  BUCKLEY.  00.  THE  VANGUARD  GROUP 
VchnologKal  ocelerKe  car  be  a  mews  of  heipng  dams  IP  meet  meir 
goals,  but  the  race  to  embrace  new  Mmotaes  mist  ahways  mate 
business  charnels  the  cnonty  AtWngua<d.lfiesoMcestari^devei- 
cpment  play  a  dual  role  on  Me  bisness  sde.  enomang  quatity  anfl  rela¬ 
tive  sanngs  tar  ctiera  Irt  the  session,  Wnguard  CO  Ten  BucUey  wd 
eiamne  how  ihe  1600  bAon  fnanoal  serwces  (rm  has  lei^iaged  its 
websne  technology  to  ritegra*  systerrs  aoos  muhpie  business  chan¬ 
nels,  with  resuta  that  edude  stieamiined  busmes  processeveduced 
ccsts,  retired  legacy  systems,  and  most  enporunOy.  seamless  sennce  tar 
dents  no  rratier  how  complex  thee  leiaitanshQ  with  Vanguard 

11:00am  to  11:30am 
Conaiitent  Sessions 
rr  User/Gjstomer  Case  Studies 
11:30am  to  Noon 
CoTKurrent  Sessions 
rr  Usar/Customer  Case  Studies 
Noon  to  12J0pm 
Concurrent  Sessions 
rr  User/Customer  Case  Studies 
1230pm  to  130pm 
interactive  Luncheon 
1:30pm  to  2:00pm 

^ThrMng  in  the  Virtual 

Organisation:  How  Marrill  Lynch 
Manage  an  Intricate  Web  ot 
Strategic  Partners 

XMN  MOONIEY  C30.  MERRILL  LYNCH 
ao  John  MdCmiey  does  more  than  talk  about  the  virtual  orgaraa- 
bon  —he  Inrev and  breathes  it  with  the  16-18  maiorservxe  partT>p'! 
who  are  pert  of  MemH  Lynch's  extensive  wed  of  outsourced  IT  servic¬ 
es  In  the  in»acitan  case  study  SJcKmley  wik  delve  into  the  phUoso- 
phies  and  Me  pracocNkies  behind  the  reiationsn>i»  the  WaF  $t'eei 
ppwcrtiouse  sMcB  with  taadng  mdusby  vendors,  and  how  those 
icMenahps  enhance  and  eHend  hts  IT  orgamzaiion  Fiomclass< 


2J<l!pmto  2:30pm 

Brand  and  Deliver  rrs  Role  in 
Creating  Mler  Brands 

ANDREW  ZOUi,  l£AD  fVMTNBk  Z  a  PARTNERS 

_ GreRbrandsMOtMnMtooi'iakMbleaBeecsnai- 

n«s  om  and  (I  the  last  fM  years  ir  Ms  iNxn  cmer  sage  in  builng 
sgmealihewandsmoantoerNniandMduRdebaMSWMeiele- 
twrehebeeween  theCOandMeCMMadgRtgOWuiiMiMiiacne 
of  9»  least  mtared  ei  marugemeni  In  Msaamaerc  MWidtogb 
and  communKatons  consultNii  Andtaw  fiXfwii  iiM  SORB  of  talk 

onhovrR'^maiicei^  can  NnpkfyeadiodtcrkuBucandinvM^* 


2:110pm  ti 


Application  for  Conference  Registration 


TO  REGISTER: 

•  Fax  this  form  to  508-626-8524 

•  Or  register  online  at  www.premier100.com/west 

•  You  will  receive  a  confirmation  via  email 


QUESTIONS? 

•  Call:  Pam  Malingowski  at  800-883-9090 

•  Email:  p100reg@computerworid.com 

CODE  WEST 


IT  LEADERS 

CONFERENCE 

February  23-25,  2003 
JW  Marriott  Desert 
Ridge  Resort 
Scottsdale,  Arizona 


A'l  aollar  amourtts  are  m  U  5  Funds,  regiitrations  include  fuR  access  to  all  sessions,  the  Enpo,  ro 
and  receptions  Transportation  and  hotel  accommodations  are  your  responsiDility  and  can  be 
reserved  by  visitirsg  swwvetcentral  com.  calling  1-800-340-2262.  or  emailing  eventhousirsgeidg  cc 


IT  End-User;* 
Non-Sponsoring  Vendor:* 


Earlybird 

Registration 

□  $1,495 

□  $5,000 


Full/On-Site 

Registration 


1  Registration  Information:  (This  section  must  be  completed  in  order  to  process  your  application) 

Middle  Initial:  I.ast  Namt?: 

Suite.  Aot..  etc.; 

State/Prov;  /'io/Postal  Code: 

□  Soerial  .Services  Required?  ifk'jsi'  jnach  urmonJcwripiumi 

Would  you  like  to  receive  information  about  playing 
Please  indicate  your  preferred  conference  shirt  size: 

in  the  golf  outing  on  Sunday,  February  23rd  <PM>?  □  Yes  □  No 
□  S  □  M  31  □  XL  □  XXt  □  XXXL 

Attendee  Profile:  (This  section  must  be  completed  in  order  to  process  your  application) 


Your  Orgaaization's  Business  /  Industry?  Number  of  Employees  (ALL  Locations)? 

(Check  Only  One)  J  s.tiUi- 

J  Trjiupnftaii.'ti  Uiilifws  J  l  i'O'l- 

J  .Miniiv  Oil  (.jv  J 

J  Non-Prisfit  Trail' AvwiiJtl.in  J  Cndi-r  .'IM 

J  PuHishm^  Is  your  Company  IT/IS  Budget? 

J  tKrrSlhillk.n  ^ 

J  %  hole^le  Retail  i  iiiin-iiKnpuli'T »  ^ 

J  Computer  SiTiice  I'roviJi-r  Whal  is  Your  Organization's  Primary 

J  Vendor  for  Servers? 

J  ^I'ndutcri  -*  Hfutcti  Pack-itJ  Ciunpag 

J  Omemmeiii  Miittars  -J 

J  Healthcare  Medical  Sen  ices  ■"  '■*'* 

J  Tras-vl  Hosnilalils  Rivn-atiun  J 

J  Manufacturing  limn  lTl  ^  i>ther 

J  Autocnotiik'  Your  Organization's  Enterprise  Standard  for 

J  CoiS^CJ^''t:!lmtrun‘i^K,ns".u'SvriP^^  Fguipmcni  MobUe  Device  Management  Software? 

Of  wware  Manufactunni:  J  Aether  Sisu-ms 

3  Agruruliure  Forenri  Fiihene-  J  Ahiris 

J  Other  J  (-•’raputer  Associates 


J  Ht'Mleti  Pack.itJ  i 
J  Hitachi 
J  IBM 


Your  Organization's  Enterprise  Standard  for 
Mobile  Device  Management  Software? 

J  Aether  Sisu-ms 


Payment  Method 


□  Check  Enclosed  (checks  must  be  received  by  February  17, 
2()0.3  payable  to;  Computerworld) 

Mail  to:  Compuierworld.  Afim  Pam  Malingowski.  500  Old 
Connecticut  Path.  Framingham.  MA  01701 

□  American  Express  □  VISA  □  MasterCard 
Account  Number: 


Your  Piinury  Job  Title  /  Function? 

(Cbcck  Only  One) 

J  CIO-CTU 
J  A'lce  rmuJeni  »f  1 1 
J  Director.  Manager.  Supers  isur  o(  Tf 
J  Other  IS  rTManatter 
3  Chaimun.  CEO.  Presuli'm.  C<K) 

J  CEO.  ConiTvIler.  Treasurer 
.:i  CM.  VR  Diiecliu 
J  Other  Ciirpuraie  Business  Manairer 
J  Corporate  Business  Staff 
J  Consukain 

Your  Personal  IT/IS  Spending  Authority? 

J  SS  million- 
J  SI  nullHJO  -  S4.n  millKsti 
J  SSUO.UUI  -  SWAWi 
J  SKKI.OOU  -  S*‘N,9'» 

J  Under  SKMUKXl 


J  IBMTnsili 
J  Landesk  Software 
J  Mana)!es.>fi 
J  .Marimba 
J  mhirmaiKin 
J  Mierosoft 
J  Mobile  Autonaiuin 
J  Nos'adipm 
J  Ninell 
J  ON  Teehn<ilop> 

J  I’umateih 
J  Starfish 
J  Svnvhrolnitii 
J  Waielink 
J  XcellNei 
J  Other 

J  No  Standard  Mu  l.si 


Expiration  Date: _ 

Card  Holder  Name; 


Signature  of  Card  Holder: 


Cancellation  Policy  i.uii^ihcM.m'.irriiiqi'rvum'wruren'iMtfiLafmi 

In  ihc  event  of  cancellation,  the  registrant  has  three  options: 

1 )  He  or  she  may  substitute  another  attendee  for  this  conference 

2)  He  or  she  may  transfer  this  registration  to  the  next  Premier  HXl’ 
conference,  if  written  notice  is  received  by  February  4. 2003. 

3)  The  registration  fee  will  be  refunded,  less  S250  service 
charge,  if  written  notice  is  received  by  February  4,  2003. 

Please  send  cancellation  requests  via  email  lo 
plOOreg  a  cumpuierworld.com  or  call  1-800-883-9090 
for  assistance. 

Computcrworld  reserves  (be  right  to  limit  and/or  refuse  any 
registration  for  any  reason. 
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language  of  tbeir  customers.  If  they're 
not  familiar  with  the  way  you  do  busi¬ 
ness  or  your  industry,  chances  are 
you're  in  for  a  headache. 

Peihaps  the  biggest  trend  Rosen 
sees  is  the  need  to  do  something  with 
all  the  data  being  generated. 

The  first  step  was  getting  ERP  and 
CRM  systems  to  even  work,  says 
Rosen.  Once  that  was  accomplished, 
companies  had  to  store  the  new  infor¬ 
mation  in  the  correct  data  models  and 
then  had  to  have  the  right  applications 
on  top  of  those  systems.  Those  busi¬ 
ness  intelligence  packages  are  new 
and  costly  and  often  not  aligned  with 
the  business  process. 

That's  where  Rosen  sees  the  biggest 
chance  for  fT-related  investment  suc¬ 
cess.  “IT  buyers  and  their  CFOs  are 
sawier  then  ever"  he  sa>’s.  “Now  is  a 
good  time  for  IT  to  solve  their  day-to- 
day  business  problems.’’ 

And  maybe  for  venture  capitalists  to 
begin  to  make  money  all  over  again.  I 

CATHY  HOTKA  AND 
EDWARD  SCHWARTZ 

Silence  Isn’t 
Golden  for 
Security 

Like  cancer  used  to  be 
among  fnends  in  the 
1960s,  security  is  taboo 
as  a  discussion  topic  among 
many  CIOs  today.  Supersti¬ 
tious  IT  executives  keep  quiet 
about  the  subiect  and  hope  it  will  go 
away.  They  rarely  seek  out  colleagues 
to  compare  notes  ^>out  managing 
technology  vulnerabilities  and  the 
mitigation  of  risk. 

This  squeamishness  spills  over  into 
the  structures  designed  to  help  com¬ 
panies  taUc  about  incidents.  The  Infor¬ 
mation  Sharing  and  Analysis  Centers 
(ISAC).  which  act 
as  sector  focal 
points  for  threat 
and  vulnerability 
information,  go  to 
great  lengths  to  en¬ 
sure  that  partici¬ 
pants'  submissions 
are  anonymous,  aiKi 
only  the  ooiunrib- 
utable  details  of  se¬ 
curity  events  are 
circulated  within 
the  ISAC.  And  sec¬ 


tor  ISAC  members  report 
incidents  only  if  they  are  of 
suftlcient  magnitude  that  a 
wider  threat  is  perceived. 

'Hus  reluctance  is  pre¬ 
dictable.  Who  wants  to  risk 
tanking  the  company's 
stock  price?  Who  vrants  to 
admit  that  the  money  in¬ 
vested  in  security  might 
not  have  been  wisely  spent? 

Candor  helps  companies 
with  nearly  every  IT  issue 
—  except  information  secu¬ 
rity.  that  is.  People  just 


bow  serious  a  given  inci¬ 
dent  is  find  themselves 
without  a  common  lan¬ 
guage  of  vulnerabiUry. 
OASIS  has  36  different 
technical  committees 
working  to  organize  XML. 
but  only  one  related  to  se¬ 
curity.  and  it  covers  au¬ 
thentication  techniques. 

We  don’t  have  a  common 
language  to  communicate 
vulnerabilities  or  their 
severity.  If  there  were  a 
“vulnerability  management 


don't  stand  around  at  industry  cocktail  i  markup  language."  it  would  assist 


parties  saying.  “We  got  our  voice  mail 
hacked  again  last  week."  The  fact  that 
so  many  incidents  are  inside  iobs  also 
dilutes  companies'  desire  to  open  the 
kimono. 

Another  pn^lem  for  CIOs  is  that 
there  are  few  service-level  agreements  | 
for  security  and  no  credible  waj-s  to 
measure  ROI  or  total  cost  of  owner¬ 
ship  for  security  investments.  How 
can  a  CIO  even  report  effectively  to 
upper  management  about  security 
posture  when  typical  metrics  and 
rules  don't  apply? 

Companies  wishing  to  determine 


companies  in  evaluating  incidents  in 
heterogeneous  envirorunents  in  real 
time  and  choosing  new  products  and 
services.  It  could  also  assist  the  U.S. 
government  in  determining  the  true 
state  of  readiness  in  private  industry. 

So  let's  talk.  Let's  get  the  various 
ISACs  to  bold  ioint  summits  to  talk 
about  where  the  threats  really  be  and 
how  to  manage  vulnerabilities  eftec- 
tively.  Let’s  arrive  at  some  metrics 
whereby  user  companies  can  easily 
figure  out  bow  secure  they  are. 

And  let's  get  the  government  to  help 
us.  The  “National  Strategy  to  Secure 


READERS’  LEHERS 


Cyberspace"  proposes  the  concept  of 
sector  coordination  and  collaboration, 
but  it's  only  a  very  basic  beginning  to  a 
solution,  liie  government  is  putting 
more  money  and  effort  into  informa¬ 
tion  assurance  than  ever  before.  Let's 
let  it  help  us.  in  exchange  for  volunUr>‘ 
participation  in  confidential  forums 
for  information  exchange,  let's  woik  to 
get  tax  breaks  designed  to  reward 
proactive  homeland  security  work. 

And  let's  go  further  than  Freedom  of 
Information  Act  exemptions.  Let’s 
take  the  next  step  and  get  the  SEC  and 
other  regulatory  agencies  to  take  spe¬ 
cial  note  of  companies  that  are  upfront 
about  the  actions  they  take  to  protect 
their  digital  assets. 

We  have  to  share  security  informa¬ 
tion;  if  we  don’t  figure  out  a  way  as 
users  of  security  products  to  talk 
about  information  security  in  a  con¬ 
structive  way.  we  shrink  our  opportu¬ 
nities  to  improve  the  whole  informa¬ 
tion  management  landscape.  It's  good 
business.  And  it's  good  government.  I 


wurmoniM? 


>Moi«  colmnais  and  Ma  to  atTnes  oi  ptuMOus 
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Dont  Fear  Linux 

iNTWSTORV  “Home  Depol  Up¬ 
grades  Poim-of-Sale  Systems* 
iOukMJnk  34926].  Home  Depot's 
Ji  Taylor  says  that  If  the  company 
had  Linux,  it  >*001(1  have 
facedissuessuchasalackofdR- 
vers  and  support  if  4  decided  to  use 
aoss-plattonn  hardware.*  But  if  the 
POS  system  IS  written  m  JaM  and 
implemented  correctly,  it  shauUnt 
have  mattered  if  they  ran  it  on  a 
^kn  or  an  AS/400.  This  *cross- 
plattorm  hardware*  nonsense 
sounds  more  Uks  tear,  uncertainty 
and  doubL  fd  be  interested  in  what 
drivers  Ihey  would  be  rressing  4  liey 
ranUnuLorittheybotheredton* 
vestigate  fl  POS  mariwies  are  one 
oi  the  big  areas  that  SCO  (lonneity 
Ctddera  Syetems)  makes  money  in. 
Matlhew  Carpenter 
Network/kecurity  consuKonr, 
Grand  Rapids,  Mkh. 


2-Way  Replicating 

POBUnANALYSTCadOlof- 
son  should  do  a  MHe  more  re- 
search[OuickUnk 34903].  He 
states  that  the  dtherence  between 
PeerOireefs  software  and  Ihe  data 


repkcalion  products  sold  by  data¬ 
base  vendors  such  as  Oracle  «id 
Sybase  is  that  the  new  technology 
supports  hM-way  replication,  not 
lusi  transmssttns  from  a  remote 
site  back  to  a  data  center.  I  have 
worked  lot  Sybase  lor  almost  eight 
years,  and  in  al  that  time.  Sybase 
Repkeabon  Server  has  supported 
true  bidireclional  repiicalion.  I  am 
cuirerdly  on  a  dent  site  configuring 
it  to  do  ju^  that 
HtffcLaar 
Prindpol  consulront. 

Sybase  Inc.  Rockawoy.  N.A 


My  First  IT  Job 

I  auovED  the  sound  bdes  from 
those  youngsters  who  responded 
to  d«  Question,  *What  was  your 
nrst  job  in  fir  {QuicMjnk  34786].  I 
have  been  in  IT  smee  t959.  proba¬ 
bly  before  most  of  Aem  were  ou  of 
dopers  -  or  were  even  thought 
about.  My  first  job  weswinng  407 
and  SM  boards  and  sortng  cards 
on  an  062 sonar,  and  Son  I  moved 
on  to  programming  o  seven  dWet- 
ent  lanfaiages.  hlany  of  the  people 
that  I  read  about  lust  don't  seem  to 
realize  how  much  pshence  and  per¬ 
severance  you  needed  in  those 


days  f^llence  and  a  sofid  worti 
edec  are  sli  important. 

Wehard  Thurmen 
Director  IT.  ARV  Assisted 
Living,  Costa  Mesa.  Caiif. 

IN  1464.  Ives  a  recent  madi 
yaduale  fared  townie  Fortran  IV 
programs  lor  The  Boeing  Co  at 
Bte  NASA  Michaud  iaciily  in  New 
Orleans.  The  prefect  was  led  by 
WamervonBreuntosandasbo- 
nauts  to  die  moon  and  involved 
some  first -tfne  methods  I  haven't 
usedasmuchofmymethback- 
grtuid  in  any  positen  snee 
RetiMdS.  Abbott 
Leadpragmmmer/biuUyst. 
PMA  Insurance  Gwup. 
OueBeUPa. 


Study  Flaws 

OIKfWMLEHthatcoildftaw 
the  research  riled  m  the  articie 
"Study  Ties  Frugal  IT  Spending  to 
Good  Finanaal  Performanca’ 
(QuckLink 35031 ]  is  the  tact  that 
diHerent  companies  serve  dIHerent 
verticri  ndusirtes.  Therefore,  per¬ 
formance  «  mom  IMl  die  resub  ol 
ovetal  indusby  trends  than  IT 
spanring,  h  would  be  hellar  and 


moreirifnnabnotocomparecom- 
pamei  wilhei  a  veiticai  industry,  lor 
eximple.howdouliliBsbiatin- 
vested  ai  IT  compare  to  ones  that 
(fcfcil?  In  adritnn.  wearestl  iia 
Ul  alter  ttie  Y2k  spanring  frenzy, 
and  technology-heavy  cotnparves 
sperb  more  and  siMSied  more,  be¬ 
cause  they  had  mom  at  fsk.  They 
also  had  the  mosi  dramatic  rielt 
when  n  spendaig  dned.  So  there's 
good  reason  to  beheve  that  down¬ 
trends  wi  ailBct  IT-haavy  compa¬ 
nies  the  most  and  pertomance  wi 
be  the  dnvar.  not  the  ndcalor  that 
Ihe  researchers  wished  lot. 
AlanOartnar 

Vice  president.  SketdtworH.- 
com.  CompbeU.  Calif 

COMPUTERWOflU)  welcomes 
commenis  from  is  readers.  Lattere 
«4I  be  eitod  lor  brMly  and  darby 
They  should  be  addressed  to  Letters. 
ComputetworkL  PO  Box  9171 500 
Old  CoonechQjt  Rath.  Framingham. 
Maas.  01701  Fax  (506)  879484a 
E-mai:leBere9computeiwortcLoorn 
tnchide  an  addreaa  and  phone  num¬ 
ber  lot  ■tmdale  venficabon 


k  MmlMmonthenaidobai 
"  topononawWabalK 
■meieuiMrniiVlitlwi 
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language  of  their  customers.  If  they’re 
not  familiar  with  the  way  you  do  busi¬ 
ness  or  your  industry,  chances  arc 
you're  in  for  a  headache. 

Perhaps  the  biggest  trend  Rosen 
sees  is  the  need  to  do  something  with 
all  the  data  being  generated. 

The  first  step  was  getting  ERP  and 
CRM  systems  to  even  work,  says 
Rosen.  Once  that  was  accomplished, 
companies  had  to  store  the  new  infor¬ 
mation  in  the  correct  data  models  and 
then  had  to  have  the  right  applications 
on  top  of  those  systems.  Those  busi¬ 
ness  intelligence  packages  are  new 
and  costly  and  often  not  aligned  with 
the  business  process. 

That’s  where  Rosen  sees  the  biggest 
chance  for  IT-rclated  investment  suc¬ 
cess.  “IT  buyers  and  their  CFOs  are 
sawier  then  ever."  he  says.  “Now  is  a 
good  time  for  IT  to  solve  their  day-to- 
day  business  problems." 

And  maybe  for  venture  capitalists  to 
begin  to  make  money  all  o\'er  again.  I 

CATHY  HOTKA  AND 
EDWARD  SCHWARTZ 

Silence  Isn’t 
Golden  for 
Security 

Like  cancer  used  to  be 
among  friends  in  the 
1960s,  security  is  taboo 
as  a  discussion  topic  among 
many  CIOs  today.  Supersti¬ 
tious  IT  executives  keep  quiet 
about  the  subject  and  hope  it  will  go 
away.  They  rarely  seek  out  colleagues 
to  compare  notes  about  managing 
technology  vulnerabilities  and  the 
mitigation  of  risk. 

This  squeamishitess  spills  over  into 
the  structures  designed  to  help  com¬ 
panies  talk  about  incidents.  The  Infor¬ 
mation  Sharing  and  Analysi-s  Centers 
(ISAC),  which  act 
as  sector  focal 
points  for  threat 
and  vulnerability 
information,  go  to 
great  lengths  to  en¬ 
sure  that  partici¬ 
pants’  submissions 
are  anonymous,  and 
only  the  nonattrib- 
utablc  details  of  se¬ 
curity  events  arc 
circulated  within 
the  ISAC.  And  sec¬ 


tor  ISAC  members  report 
incidents  only  if  they  arc  of 
sufficient  magnitude  that  a 
wider  threat  is  perceived. 

This  reluctance  is  pre¬ 
dictable.  Wh<i  wants  to  risk 
ranking  the  company's 
.stock  price?  Who  wants  to 
admit  that  the  money  in¬ 
vested  in  securit)'  might 
not  have  been  wisely  spent? 

Candor  helps  companies 
with  nearly  every  IT  issue 
—  except  information  secu¬ 
rity.  that  is.  People  just 
don’t  stand  around  at  industry  cocktail 
parties  saying.  “We  got  our  voice  mail 
hacked  again  last  week."  The  fact  that 
so  many  incidents  are  inside  jobs  also 
dilutes  companies'  desire  to  open  the 
kimono. 

Another  problem  for  CIOs  is  that 
there  are  few  service-level  agreements 
for  security  and  itu  credible  ways  to 
measure  ROl  or  total  cost  of  owner¬ 
ship  for  security  investments.  How- 
can  a  CIO  even  report  effectively  to 
upper  management  about  security 
posture  when  typical  metrics  and 
rules  don't  apply? 

Companies  wishing  to  determine 


how  serious  a  given  inci¬ 
dent  is  find  themselves 
without  a  common  lan¬ 
guage  of  vulnerability. 
OASIS  has  36  different 
technical  committees 
wori(ing  to  organize  XMU 
but  only  one  related  to  se¬ 
curity.  and  it  covers  au¬ 
thentication  techniques. 

We  don't  have  a  common 
language  to  communicate 
vulnerabilities  or  their 
severity.  If  there  wea*  a 
“vulnerability  managemcni 
markup  language."  it  would  assist 
companies  in  evaluating  incidents  in 
heterogeneous  environments  in  real 
time  and  choosing  new  products  and 
services.  It  could  also  assist  the  U.S. 
government  in  determining  the  true 
state  of  readiness  in  private  industry. 

So  let’s  talk.  i4;t's  get  the  various 
ISACs  to  hold  joint  summits  to  talk 
about  where  the  threats  really  lie  and 
how  to  manage  vulnerabilities  effec¬ 
tively.  Let’s  arrive  at  some  metrics 
w'hcrcby  user  companies  can  easily 
figure  out  how  secure  they  arc. 

And  let’s  get  the  government  to  help 
us.  The  "National  Strategy  to  Secure 


READERS’  LEHERS 


Cyberspace"  prtiposes  the  concept  of 
sector  coordination  and  collaboraiion. 
but  it’s  only  a  very  ba.sic  beginning  to  a 
solution.  The  government  is  putting 
more  money  and  effort  into  informa¬ 
tion  assurance  than  ever  before.  Let's 
let  it  help  us.  In  exchange  for  voluntary- 
participation  in  confidential  forums 
for  information  exchange,  let's  work  to 
get  tax  breaks  designed  to  reward 
proactive  homeland  security  work. 

And  let’s  go  further  than  Freedom  of 
Information  Act  exemptions.  Let's 
take  the  next  step  and  get  the  SEC  and 
other  regulatory  agencies  to  take  spe¬ 
cial  note  of  companies  that  are  upfront 
about  the  actions  they  take  to  protect 
their  digital  assets. 

Wc  have  to  share  security  informa¬ 
tion:  if  we  don't  figure  out  a  way  as 
users  of  security  products  to  talk 
about  information  security  in  a  con¬ 
structive  way.  wc  shrink  our  opportu¬ 
nities  to  improve  the  whole  informa¬ 
tion  management  landscape.  It’s  good 
business.  And  it’s  good  government.  I 

WMITOOIIIiniHI? 
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Don't  Fear  Linux 

I  N  THE  STORY  *Home  Depot  Up¬ 
grades  Riint-of-Saie  Systems* 
[QuickLtnk  34926].  Home  Depot's 
Ji  Taykn  says  that  if  the  company 
had  used  Linux,  it 'would  have 
facedissuessuchasalackofdn- 
vers  and  support  if  rt  decided  to  use 
cross-plaHorm  hardvrare '  But  it  the 
POS  system  6  written  in  Java  and 
imptemenied  correctly,  it  shouldn'l 
have  mattered  if  they  ran  it  on  a 
Palm  or  an  AS/400.  This  "cross- 
platform  hardware*  nonsense 
sounds  more  like  fear,  uncertainly 
and  doubt.  I'd  be  interested  in  what 
drivers  they  would  be  missing  if  they 
ran  Linux,  or  it  they  bothered  to  in¬ 
vestigate  It.  POS  machines  are  one 
ol  the  tug  areas  that  SCO  (I oimerly 
Caldera  Systems)  mates  money  m. 
Matthew  Carpenter 
NefworkAecuriry  ewBu/raru. 
Grand  Rapids,  Mich. 


2-Way  Replicating 

Perhaps  analyst  oiof- 
son  should  do  a  little  more  re¬ 
search  [QuckLink  34903]  He 
states  that  the  difference  between 
PeerOirecl's  soflwafe  and  the  data 


replicalion  products  sold  by  data¬ 
base  vendors  such  as  Oracle  and 
Sybase  IS  dial  the  new  technology 
supports  two-way  repkabon.  not 
just  transmissions  Irom  a  remote 
site  back  to  a  data  center  I  have 
worked  lor  Sybase  tor  almost  eight 
years,  and  in  all  that  time.  Sybase 
Replication  Server  has  supported 
true  biduedional  replication  I  am 
currently  on  a  diertl  site  contigumg 
It  to  do  ms)  that. 

Mark  Lazar 
Principaf  cunsidrani. 

Sybase  fnc.,  Hockaway,  N.f. 


My  First  IT  Job 

(ENJOYED  the  sound  bites  from 
those  youngsters  who  responded 
to  the  Questioa  *Whal  was  your 
first  lOb  m  ITT  (QwckLink  34786].  I 
have  been  in  IT  Since  1959.  proba¬ 
bly  before  most  ol  them  were  out  of 
diapers  -  or  were  even  thought 
abouL  My  first  lob  was  wmng  407 
and  514  boards  and  sorting  cards 
on  an  082 sorter,  and  then  Imoved 
on  to  programmng  in  seven  differ¬ 
ent  languages  Many  of  the  people 
that  I  read  about  psi  don't  seem  to 
realize  how  much  pabence  and  per¬ 
severance  you  needed  at  those 


days.  Alienee  and  a  solid  work 
elhcaresliBimoonan! 

Richard  Thurman 
Direcior  JT,  ARV  Assured 
Living.  Costa  Mesa.  Calif. 

IN  1964. 1  wasa  recent  math 
graduate  haed  to  write  Fortran  IV 
progrvrts  lor  The  Boeing  Co.  at 
the  NASA  Michaud  laoiitymNew 
Orleans  The  protect  was  led  by 
Werner  von  Braun  to  send  astro¬ 
nauts  to  the  moon  and  involved 
some hrst-tvne methods  (haven't 
used  as  much  of  my  math  back 
ground  m  any  position  smee. 
Ronalds.  Abbott 

Lead  progfammer/anaiyst. 
PMA  Insurance  Gmup, 

Blue  Bell.  Pa. 


Study  Flaws 

ONE  PROBLEM  that  could flaw 
die  research  oled  m  the  article 
'Study  Ties  FrugaHT  Spendmg  k) 
Good  Fnancal  Performance* 
(OmckLjnk  3503t]  is  die  tact  that 
different  companies  serve  differenr 
vertical  ndustnes  Therefore,  per¬ 
formance  6  more  fkely  the  result  ol 
overall  mduslry  trends  thwv  IT 
spending.  It  would  be  better  and 


mote  Htennabng  lo  compare  (XMn- 
panies  wdhtfi  averkcal  industry,  for 
examcte.howdoutilibe5thalsi- 
vesled  in  IT  compere  lo  ones  that 
dNlnt?  In  adefebon.  we  are  sbH  in  a 
kjl  after  the  Y2k  spendfig  freioy. 
and  technotogy-hea^  companies 
spent  more  and  rvesied  more,  be¬ 
cause  they  had  more  al  nsk.  They 
also  had  the  most  dramahe  shift 
whenflspendmodned  Sothere's 
good  reason  to  believe  that  down¬ 
trends  affect  rr-heavy  compa- 

rues  the  most  and  performance  will 
be  the  driver,  not  the  ndcaloi  that 
the  researchers  wished  for 
Alan  Gartner 

\'icr  prvsitfrnx.  .ttwchu-tirfcs  - 
mm.  <^^ampbi*li.  Calif! 

COMPUTERWORLD  welcomes 
comments  tram  Its  readers  Leflers 
wN  be  edited  (or  brevity  and  claniy 
They  shoidd  be  addressed  to  Letlers. 
Compuierworid.  PO  Ben  9171. 500 
Old  Conneciicut  f^.  Frammgfiam 
Mass  0T701  Fax  (508)879-4843 
E-mai  letlersikompulerworkLcom 
Indude  an  adikess  and  phone  run- 
bet  lor  immediate  venhcatxm 
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INTEGRATION 

IS  ONCE  AGAIN  A 
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Our  PATRIOTcompliance 
Solution  can  help  you 
meet  the  stringent  new 
requirements  of  the  USA 
PATRIOT  Act.  It’s  secure, 
unobtrusive  and  cost-effective. 


And  it's  just  one  of  the  software 
integration  solutions  available  today 
from  Sybase. 


Leveraging  our  expertise  in  database 
technology  and  our  powerful  set  of 
integration  tools.  Sybase  can  help 
integrate  all  the  data  and  business 
applications  in  your  enterprise. 


So  you  can  extract  the  maximum 
value  from  your  company's  current 
infrastructure.  And  from  all  the  vital 
information  that  resides  within  it. 


Visit  SYbase.com/integrationsolutions. 
And  resolve  your  integration  issues. 


Sybase 


Redirect 


Respond 

Refresh 


Reshape 

Refocus 


Relieve 


Reallocate  your  resources. 
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HP  ProLiant  DL  5SOG2  Server 
with  Inter  Xeon  "  processors 

Server  time  artd  spoce  are  precious  commodities,  at  least  from  where 
you're  sittirtg.  Your  customers  are  clomoring  for  more,  more,  more,  while 
you  try  to  figure  out  how  to  deliver  with  less,  less,  less. 

HP  ProLiant  servers,  powered  by  Intel*  Xeon'“  processors,  put  you  in 
control  of  your  resources  so  that  you  can  reolize  the  true  potential  of  your 
infrastructure.  ProLiant  Essentials  W^rklood  Management  Pock  software 
lets  you  allocate  your  resources  to  specific  tasks  and  then  reallocate  them 
as  needed  —  automatically.  We  caH  it  Dyrvamic  Resource  Scaling.  And  with 
this  odded  control  and  increased  visibility,  you  may  even  find  you 
can  boost  efficiency  by  plocing  more  workload  on  those  same  servers. 

It  all  odds  up  to  faster,  better  distribution,  increased  RCX  and  gigontic 
leaps  kxword  in  customer  sotisfoction.  Which,  of  course,  is  a  relief  to  you. 

Visit  www.hp.«efn/ge/proliant73  or  coll  1.800.282.6672, 
option  9,  and  monrion  code  XFE  for  o  whito  popor  on 
adoptive  infrostructure  and  o  free  triol  of  HP  ProUont 
Essentiols  software! 


M  «  X>»  Uimd  StoiM  and  atm  counVwi  ’Mviload  A^onag— ni  rack  and  tapd  Papfcii^niaw  Pack  aniy  Far  U.S  a 


Coping  With  Telecom  Turmoil 

Diversification,  redundancy,  shrewd  contract  clauses  and  a  will¬ 
ingness  to  try  new  vendors  are  key  to  protecting  your  WAN 
from  the  fmancial  troubles  of  telecom  carriers.  Telecom  is  at 
the  heart  of  what  keeps  CIOs  awake  at  night  dow.”  says  one  CIO. 
Zeke  Zoccoli  (left).  Page  28 


Ethernet  Goes  Metro 

The  promises  of  Ethernet  metro-area  networics  - 
tower  cost,  faster  provisioning,  granular  band¬ 
width  allocMion  —  have  yet  to  result  in  wide¬ 
spread  service  offerings.  The  big  carriers  are 
sitting  on  the  sidelines.  Page  34 


EDITOR'S  NOTE 


I  'M  SITTING  HERE  with  a  Stack  of  IS  re¬ 
search  reports  on  the  telecommunica¬ 
tions  industry,  and  Tm  going  to  save  you 
some  time  by  boiling  it  all  down  to  260 
words.  But  it’s  an  ugly  picture. 

North  American  telecom  carriers,  some 
of  which  are  reorganizing  under  Chapter  11 
bankruptcy  proceedings,  face  several  years 
of  turmoil  and  will  recover  only  after  the 
market  consolidates  and  the  economy  re¬ 
covers.  In  the  meantime,  corporate  network 
managers  will  see  price  instability  and  ser¬ 
vice  declines.  They’ll  need  multiple  carriers, 
in  case  one  goes  belly-up,  and  th^U  need 
backup  plans  for  their  backup  plans. 

Anyone  hoping  that  2003  w^d  be  better 
than  last  year’s  telecom  disaster  will  be  dis¬ 
appointed  There  will  be  additional  bank¬ 
ruptcies.  Some  telecom  companies  now  in 
bankruptcy  will  emeige,  but  they  probably 
shouldn’t  tother  (because  they’re  just  delay¬ 
ing  the  inevitable). 

The  problem  isn’t  a  glut  of  flben  it’s  a  glut 
of  companies  comp>etii^  for  too  few  cus¬ 
tomers,  and  the  related  overspending  to  es¬ 
tablish  these  companies  and  their  networics, 
says  TeleChoice  Inc.  By  2005,  the  10  largest 
carriers  will  be  reduced  to  eight,  and  the 
next  20  secondary  carriers  will  be  reduced 
to  10,  Gartner  Inc.  predicts. 

Is  it  any  wonder  that  IT  managers  are 
looking  carefully  at  making  the  Internet 
their  WAN?  No,  it’s  not  as  reliable  or  secure 
as  a  private  networic  But  IP  networks  are 
"good  enou^"  for  many  business  applica¬ 
tions  —  and  the  price  is  right  As  a  recent 
Gartner  title  put  ic  “Don’t  Wait  for  Perfec¬ 
tion:  Internet  Is  Business-Class  Now."  I 


Mitch  Betts  (mitch.betts@computerworld. 
com)  is  (Urector  of  Cfomputerworld’s  ^lowl- 
ecfge  Centers. 


Turbulence 

Ahead! 

■  rr  has  to  cope  with  a  telecom 
industry  in  turmoil  and  major 
shifts  on  the  networking  horizoa 
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IT  WAS  A  COLD,  clear  day  in  Wash¬ 
ington  on  Jan.  8. 1982.  when  Char¬ 
lie  Brown  and  Bill  Baxter  held  a 
noon  press  conference  to  an¬ 
nounce  an  antitrust  trial  settle¬ 
ment  that  would  break  up  AT&T 
Corp.  and  stop  Ma  Bell's  dominance  of 
the  telecommunications  industry.  (It 
was  a  busy  day:  A  few  hours  later,  the 
government  dropped  its  long-running 
antitrust  case  against  IBM.) 

Brown.  AT&Ts  chairman,  had  con¬ 
cluded  that,  with  his  company  faring 
poorly  in  U3.  District  Judge  Harold 
Greene's  courtroom.  AT&T  needed  a 
feesh  start  so  It  could  compete  with 
upstart  MO  Communicadons  Corp. 
for  business  customers  and  enter  In¬ 
formation  Age  markets  without  bur¬ 
densome  regulatioos. 

Baxter,  the  Reagan  administradon's 
antitrust  chieC  wanted  to  deregulate 
the  telecommunications  business.  He 
figured  competition  would  flourisb  in 
the  long-distance  market  if  it  was  sepa¬ 
rated  from  the  local  monopoly. 

Together  they  struck  a  deal  to  end 
the  U.S.  government's  mammoth  anti¬ 
trust  lawsuit  against  AT&T  by  splitting 
off  the  local  telephone  companies  and 
leaving  AT&T  with  loag-distance  ser¬ 
vice  and  the  Western  Electric  equip¬ 
ment  business.  The  deal  also 
AT&T  from  a  1956  consent  decree  so  it 
could  get  into  the  computer  business. 

How  did  they  get  to  the  point  of  dis¬ 
mantling  what  was  by  all  accounts  the 
greatest  telecommunications  system 
on  the  planet?  Three  fectors: 

•  XHTs  ampnca  M  hmd  poier 

whira  ■gahwl  IL  For  years,  AT&Ts 
army  of  lobbyists  and  hardball  tactics 
had  squashed  would-be 
competitors  and  pre- 


The  Story 
So  Far 

Charlie  Brown,  Bill  Baxter,  Harold 
Greene  and  Bill  McCaOwan  break  up 
giant  aim;  which  continues  to  tear 
itself  apart.  By  Mitch  Betts 


vented  anyone  feom  connecting  non- 
AT&T  devices,  such  as  fox  machines 
or  answering  machines,  to  the  Bell 
network. 

■  CrMpkiB  ooapaMion.  ancouraoid  by 
thaPidarilCorwiniwicatowCorw^ 

It  started  with  the  Carterfone  decision 
in  1968,  which  allowed  other  business¬ 
es  to  attach  telephones,  equipment  and 
business  switchboards  to  the  Bell  net- 
woric  A  year  later,  the  FCC  gave  an 
embryonic  company  called  Microwave 
Communications  Inc  (later  MCI)  per¬ 
mission  to  provide  private  lines  be¬ 
tween  Chicago  and  St  Louis  for  big 
business  customers. 

Then,  without  quite  realizii^  what 
it  had  done,  the  FCC  approved  MCFs 
Execunet  service,  which  essentially 
provided  the  first  competitive  long¬ 
distance  service  for  U.S.  businesses. 


■  81  McOowan.  Tiying  to  keep  his 
tiny  company  afloat  the  feisty  MCI 
chief  worked  the  government  process. 
He  lobbied  Congress,  filed  a  private 
antitrust  lawsuit  against  AT&T,  plant¬ 
ed  the  seeds  of  the  govenunent's  anti¬ 
trust  lawsuit  and  got  the  FCC  to  ap¬ 
prove  the  “experimentai"  intercity 
services  that  competed  with  AT&Ts. 

The  AT&T  divestiture  on  Jan.  L 1984, 
produced  seven  regional  "Baby  Bells" 
and  intense  competition  among  AT&T, 
MCI  and  Sprint  Corp.  in  the  long¬ 
distance  market,  with  millions  of  dol¬ 
lars  spent  on  campmgns  to  get  people 
to  switch  long-distance  carriers. 

But  the  breakup  also  produced  its 
share  of  unintended  consequences.  For 
example,  it  was  widely  assumed  at  the 
time  that  AT&T  would  be  a  formidable 
competitor  against  IBM  in  the  con¬ 


verging  computer  and  communica¬ 
tions  businesses.  AT&T  came  out  with 
minicomputers  and  PCs,  controlled 
Unix  and  made  a  hostile  takeover  of 
NCR  Corp.,  but  it  eventually  backed 
out  of  the  computer  industry. 

And  the  1984  breakup  turned  out 
to  be  just  the  first  of  stweral  for  AT&T. 
In  the  mid-1990s,  AT&T  spun  off  its 
crown  jewels.  Western  Electric  and 
Bell  Labs,  as  Lucent  Technologies  Inc. 
and  then  divested  NCR  at  a  huge  loss. 

I  AT&T  restructured  again  in  2001,  spin¬ 
ning  off  its  wireless  company  and  sell¬ 
ing  its  huge  cable  TV  assets  to  Com¬ 
cast  Corp. 

The  irony  is  that  the  Baby  Bells, 
which  everyone  assumed  got  the  raw. 
unprofitable  end  of  the  deal  are  reb- 
tivety  healthy  and  are  seeking  regula¬ 
tory  approval  to  enter  the  long-dis¬ 
tance  business.  Megamergers  have 
turned  them  into  four  conglomerates 
with  odd  names  like  Verizon  and 
Qwest 

Meanwhile,  MCI,  the  company  that 
brought  down  Ma  BeU,  was  swallowed 
up  by  WorldCom  Inc.,  which  is  now 
trying  to  emerge  from  bankruptcy  pro- 
ceedii^  amid  a  painful  downturn  in 
the  telecommunications  industry. 

AxkI  now,  <»  with  the  story ...  I 


1t68:  The  government's 
(Carterfone  dedsian  slows 
the  connection  of  customer- 
ormed  devices  to  AT&Ts 
netanriL  Mkroweve  (Corn- 
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1974;  The  UB.  Jus¬ 
tice  Oepertment  files 
an  antitrust  lavBuii 
against  AT&T:  the  case 
is  assigned  to  U.S. 
OBtrict  Court  Judge 
HaraM  Oraene.e- 


AWT 

1984;  The  AT&T 
dmsiiture  takes 
effect  Jan.  1  a 


- ^ -  2002:WortdCom 

2000:  Bel  Adanlic  and  makes  the  largest 

^  merge  into  Verizon  U.S.  bankruptcy 
fingever. 


1996;  AT&T  1997:  Bel  Atlantic  2000:  Bel  Adanlic  and 
spi^saflWes^  and  Nynex  merge.  BTI  merge  into  Verizon 
emBectric.  SodoSBCCommu*  ConwmnicatiorB.  (hvesl 
whiriibecomes  rvcationsandf^cific  Communications bitema 
LucentTech-  TelesB Group. VAirld-  tionalabsortisUSWest. 
ndogtes.  Comswoopsaito 
buy  MCI. 
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KN0WLED6E  CENTER  NnWORKINe 


How  to  protect  your 
network  while  carriers 
strive  to  survive. 

By  Joanie  M.  Wexler 

WHILE  THE  telecommunica- 
tioos  industry  licks  its  fi¬ 
nancial  wounds,  customers 
are  taking  a  long,  bard  look 
at  their  wide-area  net¬ 
working  strategies  and 
contracts. 

The  debauchery  of 
WorldCom  and  Global 

Crossing  grabbed  headlines,  but  mainstream  carriers 
across  the  board  are  battling  serious  financial  set- 
harks  caused  by  two  years  of  overspending  cooked 
books  and  artificially  deflated  prices.  Business  cus¬ 
tomers,  then,  are  challenged  to  build  network  contin¬ 
gency  plans  that  are  more  robust  than  simply  moving 
from  one  beleaguered  supplier  to  the  next. 

‘Telecom  is  at  the  heart  of  what  keeps  CIOs  awake 
at  night  now.”  says  Zeke  ZoccoU.  CIO  at  Plano,  Texas- 
based  UfeCare  Management  Services.  «riiich  owns 
20  actite-care  hospitals  around  the  country. 

Indeed,  the  public  telephone  network,  corporate  in¬ 
tranets  and  Internet  links  have  become  the  lifeblood 
of  large  organizations.  To  avoid  network  disruptions, 
Zoccoli  and  others  are  lowerii^  their  risk  with  short¬ 
er-term  deals  and  special  contract  clauses  that  keep 
them  agile  in  the  fa^  of  vendor  setbacks. 

'Hiey're  also  restricting  the  network  traffic  volume 
commitments  they  make  to  any  single  carrier.  Instead, 
they’re  spreading  the  wealth  across  diverse,  redun¬ 
dant  connections  from  multiple  suppliers. 

Diversification  racks  up  additional  monthly  net¬ 
work  service  costs,  but  the  cost  of  not  bavii^  the 
protection  is  £u  greater,  companies  say. 

"It's  more  valuable  to  us  to  have  the  networic  up 
than  to  get  a  bigger  naonthly  volume  discount,”  says 


Maik  Carrier,  teleconmnmicatioos  man^r  at  Crate 
and  Barrel  The  Northbrook.  HI. -based  retailer  learned 
that  lesson  the  hard  way  in  1999,  when  WorldCom 
Inc.’s  frame-relay  service  suffered  a  notorious  10-day 
networkwide  outage.  Crate  and  Barrel  did  ha:\%  back¬ 
up  Integrated  Services  Digital  Network  (ISDN)  cir¬ 
cuits  in  place.  But  those  links,  too,  were  provisioned 
by  WorldCom  and  weren’t  in  service. 

“We  got  stung."  says  Carrier. 

So  the  100-site  retailer  has  now  split  its  frame- 
relay  traffic  loads  between  the  networks  of  Sprint 
Corp.  and  Qwest  Communications  International  Inc. 
The  company  still  uses  ISDN  backup  links  —  but 
they  are  provisioned,  in  part,  by  AT&T  Corp.  “to 
ftirAer  hedge  our  bets,”  says  Carrier. 

Diana  Beecher.  CIO  at  TVavelers  Property  Casualty 
Corp.  in  Hartford,  Conn.,  agrees  that  experience  has 
her  to  use  diverse  routes  from  multiple  carri¬ 
ers.  “There  have  always  been  risks  associated  with 
any  one  provider  being  able  to  continue  service,”  she 
says.  ‘Tou  just  have  to  make  sure  you  have  a  plan  in 
place  for  when  that  day  comes.” 

This  means  soliciting  bids  from  several  carriers 
before  the  dam  breaks,  says  Greg  Douglass,  vice 
president  of  Telecom  Media  Networks,  an  industry 
practice  of  Cap  Gemini  Ernst  &  Young  U.S.  in  Dallas. 

“If  the  lights  go  out  tomorrow,  it  would  take  anoth¬ 
er  carrier  several  weeks  just  to  come  back  with  a  bid, 
let  alone  get  a  connection  up.  Make  stuie  the  alterna¬ 
tive  carrier  already  understands  what  you  want  to 
do,”  be  recommends. 

There’s  no  safe  bet  about  vendors,  though.  Meta 
Group  Inc.,  for  example,  expects  65%  of  the  carriers 
that  have  undergone  financial  reorganization  in  the 
past  year  to  be  forced  back  into  bankruptcy  by  2005. 

“Any  provider  today  could  go  belly-up.”  asserts 
Dennis  foixius,  director  of  telecommunications  3nd 
security  at  Praxair  Inc.,  a  Fortune  500  intemational 
maker  of  industrial  gases.  He  says  Praxair  has  teen 
affected  by  the  financial  troubles  of  WorldCom,  the 
demise  of  Global  Crossing  Ltd.  and  the  discontinua¬ 
tion  of  certain  services  by  Cable  &  Wireless  PLC. 

Brixius  says  IT  departments  should  consider  usii^ 
carriers  that  they  mi^t  have  overlooked  in  the  past 
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but  are  fuianciaUy  solvent.  For  example,  be  says  he’s 
evaluating  Cincinnati-based  Broadwii^  Inc.,  a  nation¬ 
wide  spin-off  of  Cincinnati  Bell  Telephone  Co.  for 
this  reason. 

Others  agree  with  that  strategy.  “The  first  thing  to 
Mter  with  financially  troubled  carriers  is  service  and 
support.’*  says  N.  Britton  Choi,  IT  strategic  planning 
and  implementation  manager  at  Hogan  &  Hartson 
LLP.  an  international  law  firm  based  in  Washington. 
"Newer  players  are  better  able  to  focus  on  customer 
service  than  carriers  preoccupied  with  reducing  op¬ 
erational  costs.” 

So  the  firm  is  using  the  inherently  redundant  IP 
virtual  private  network  (VPN)  services  of  Elenver- 
based  >^ela  Commumcations  Inc.  The  2*year-<^ 
provider  offers  multihomed  connections  firom  differ¬ 
ent  Internet  service  provider  networks.  "And  we  have 
tertiary  ISDN  in  case  the  local  loop  goes  down.”  says 
CboL  "Virtela  is  managing  it  all  for  us,  which  has 
saved  us  a  great  amount  of  admimstrattve  time.” 

But  what  if  Virtela  were  to  disappear?  "Then, 
contractually,  the  circuits  become  [under]  the  own¬ 
ership  of  Hogan  &  Hanson.  We  can  work  directly 
with  the  carriers  at  the  prenegotiaied  rates  through¬ 
out  the  life  of  the  contract."  sa^  Choi. 

UfeCare  and  Crate  and  Barrel  have  also  signed 
on  with  providers  that  aren't  yet  household  names. 
UfeCare  subscribes  to  the  services  of  Dallas-based 


Masergy  Communications  Inc.,  a  2-year-old  provider 
of  international  IP  VPN  services.  "Masergy  is  not 
someone  I  would  have  gone  to  in  the  past."  Zoccoli 
acknowled^  "But  these  new,  smaller  companies 
aren't  in  cutback  mode,  and  they  offer  customer  tools 
to  improve  the  management  of  the  network.” 

StiU.  be  did  his  due  diligence.  ”I  talked  to  Maser- 
gy's  backers,  called  customer  references  and  tested 
their  service  before  s^ning  on,”  Zoccoli  says. 

Crate  and  Barrel  has  dropped  local  phone  services 
from  the  incumbent  local-exchange  carriers,  udiere 
get^raphically  possible,  in  favor  of  service  from 
Dallas-based  Allegiance  Telecom  Inc.,  a  nationwide 
local -exchange  carrier.  But  Carrier,  too.  says  he  didn’t 
make  this  decision  li^ily. 

He  engaged  Allegiance  when  SBC  Communica¬ 
tions  Inc.  was  unaMe  to  deliver  a  range  of  700  direct 
inward  dial  numbers  in  a  new  Crate  and  Barrel  build¬ 
ing.  "From  there.  Allegiance  had  to  earn  our  trust 
over  a  period  of  about  a  year.”  says  Carrier.  "We 
added  them  market  by  market” 

Contractual  Clauses 

If  a  carrier  goes  bankrupt,  enterprise  customers  lose 
their  clout.  "Telecom  contract  clauses  stating  that  a 
ctistomer  can  terminate  if  a  supplier  goes  bankrupt 
are  no  longer  enforceable  under  U3.  bankruptcy 
laws,”  warns  Hank  Levine,  a  partner  at  Levine, 
Blaszak.  Block  &  Bootfaby*  UP.  a  Washington^iased 
law  firm.  Yet  when  emerging  from  bankruptcy,  carri¬ 
ers  can  decide  iriiether  to  retain  you  as  a  customer, 
despite  your  contract,  Levine  notes. 

So  customers  need  to  protect  themselves  in  other 
ways.  "1  no  longer  sign  a  contract  that's  longer  than 
12  to  18  months.”  says  Choi 

Crate  and  Barrel's  telecom  contracts  allow  the 
company  to  add  sites  at  the  same  billing  rate.  "For 
example,  if  Qwest  were  to  go  out  of  business.  Sprint 
would  be  obligated  to  fill  in  the  coverage  gaps  at  the 
same  rate  it  charges  for  connectivity  at  our  other 
sites,"  Carrier  explains. 

Jim  Metzler,  vice  president  of  Ashton.  Metzler  & 
Associates,  a  telecom  consuhancy  in  SanibeL  Fla,,  sug¬ 
gests  spreading  a  single  aggregate  volume  commit¬ 
ment  across  all  network  services.  This  tactic  avoids 
penalties  if  customers  fall  short  in  one  service  area 
but  are  at  or  over  their  financial  commitment  in  total. 
Otherwise,  for  escample,  companies  might  move  to 
voice  over  IP  to  save  money  but  then  get  penalized 
for  falling  below  their  long-distance  phone  service 
commitment. 

Metzler  also  recommends  that  you  request  rate  re- 
vievrs  at  regular  intervals  throughout  the  life  of  the 
contract  and  compare  the  rates  of  at  least  two  viable 
competitors  at  those  times. 

"lYy  to  include  a  clause  that  if  the  average  of  the 
competitors'  pricing  is  lower  than  your  current  pric¬ 
ing,  that  number  becomes  your  new  price,"  he  says.  9 

Wexler  is  an  independent  IT  and  comp^lternetwo^^dng 
writer  in  Campbell,  Cal^- 
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Visual  Studio  .NET  can  help  you  with  (nearly)  every  part  of  your  job.  Say  goodbve  to  DLL  helL  Visual  Studio  NET  packages 
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MARK  HALL 


Intemet2  and  You 


Lahies  and  gentlemen,  start  your  routers. 

Imagine  that  your  network  supported  a  fail-over  sys 
tom  that  could  handle  3.47GB/hr.  of  data  exchange  be¬ 
tween  your  primary  and  backup  serv'ers.  That  would 
be  pretty  cool,  huh?  Now,  imagine  that  the  backup 
server  was  3,000  miles  across  the  country.  Way.  way  cool. 

That's  essentially  what  the  folks  at  the  University  of  Ore¬ 
gon  in  Eugene  accomplished  late  last  September  with  their 
cohorts  at  NYSERNet,  a  nonprofit  networking  organization 
in  Syracuse.  N.Y.  Oh.  and  they  did  this  using  IPv6,  the  most 
advanced  networking  protocol  today. 

The  IT  wizards  who 


accomplished  this  feat 
bragged  (somewhat 
tongue  in  cheek)  that 
this  was  a  new  "land 
speed  record"  for  data 
transfer;  39.81  terabit- 
meters  per  second. 

The  record  stood  bare¬ 
ly  a  week  when  in  early 
October,  European  re¬ 
searchers  transmitted 
all  the  data  from  a  CD- 
ROM  more  than  9.000 
miles  in  17  seconds  for  the  equiva¬ 
lent  of  an  astounding  5.154  terabit- 
meters  per  second. 

These  "races"  have  been  taking 
place  on  lnternci2.  or  12.  as  it's 
called.  12  is  the  global  network  be¬ 
ing  driven  by  200  U.S.  universities, 
with  some  help  from  affiliated  aca¬ 
demic  institutions,  government 
agencies  and  IT  vendors  such  as 
Cisco  Systems  and  Juniper  Net¬ 
works.  And  these  races  aren't  just 
for  fun.  Joe  St  Sauver.  director  of 
user  ser\'ices  network  applications 
at  the  University  of  Oregon,  regu¬ 
larly  backs  up  60GB  of  data  from 
Eugene  to  Syracuse  via  12.  “It's  a 
daily  routine."  he  says. 

12  came  into  being  because  com¬ 
mercial  use  of  the  old.  clunky  Inter¬ 
net  was  getting  bogged  down  with 
too  many  packets  slinging  Ama¬ 
zon.com  book  orders,  corporate 
e-mails.  AOL  chat  sessions  and  the 
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daily  chaos  that  makes 
it  such  a  lively  place. 

12  is  strictly  for  non¬ 
commercial,  serious, 
state-of-the-art  network- 
related  R&D  w'ork  — 
with  a  little  data  race  be¬ 
ing  held  now  and  again. 

TTiere  were  initial 
hopes  by  some  compa¬ 
nies.  such  as  FedEx 
Corp..  when  Intemet2 
*'^'*'**"'  was  being  created  that 
they.  too.  would  directly 
benefit  from  the  interconnected 
high-speed  points  of  presence,  or 
POPs.  However,  the  peering  rela¬ 
tionships  (the  links  between  the 
broadband  WANs)  remain  distinct 
for  12  and  commercial  users.  And  by 
all  accounts,  they'll  remain  that  way. 

What  12  Means  for  You 

But  just  because  12  is  reserved  for 
the  IT  equivalent  of  an  ivory  tower, 
that  doesn't  mean  it  won't  affect 
some  of  us  directly  and  all  of  us  in¬ 
directly.  For  e.xample.  if  you  run  IT 
operations  for  a  medical  research 
center,  you’ll  likely  be  getting  re¬ 
cruited  to  build  12  links  so  surgeons 
on  your  site  will  be  able  to  assist  or. 
with  robots,  even  perform  opera¬ 
tions  across  towns,  continents  and 
oceans.  Just  last  month  in  Chicago. 
60,000  radiologists  at  the  annual 
meeting  of  the  Radiological  Society 
of  North  America  were  treated  to  a 


half-dozen  real-world  applications 
of  12  in  the  exciting  new  world  of 
telemedicine. 

Admittedly,  such  projects  today 
will  be  rare  and  expensive.  But 
12  researchers  are  on  the  forefront, 
using  technologies  that  we  will  all 
use  soon 

Joanne  Hugi.  associate  vice  presi¬ 
dent  for  information  services  at  the 
University  of  Oregon,  points  out 
that  12  has  been  the  testbed  for 
IPv6.  "And  IT  people  will  follow 
what  12  has  done  there."  she  says. 

Furthermore,  she  points  out  that 
the  vendors  involved  are  learning 
new  tricks  for  measuring  and  im¬ 
proving  product  performance  that 
will  make  their  way  into  the  sys¬ 
tems  wc  buy  and  deploy. 

In  the  area  of  security  and  pri¬ 
vacy.  12  researchers  have  developed 
software  called  Shibboleth  that  uses 
a  breakthrough  method  for  authen¬ 
tication.  and  I2's  distributed  storage 
initiative  offers  IT  planners  insight 
into  how  to  build  storage  networks 
bridging  vast  distances. 

All  of  this  comes  with  the  serious 
caveat  that  these  researchers,  unlike 
most  of  the  rest  of  us.  have  access 
to  big  bundles  of  bandwidth.  It's 
the  cornerstone  of  12.  But.  thanks 
to  the  giddy  days  of  the  1990s  Inter¬ 
net,  there’s  plenty  of  latent  band¬ 
width  available. 

In  Oregon,  along  the  Interstate  5 
corridor  alone,  more  than  140.000 
miles  of  fiber-optic  cable  has  been 
installed,  and  95%  of  it  is  dark. 

Of  course,  lighting  it  won't  come 
cheap.  But  the  SI  billion  investment 
to  lay  the  basic  infrastructure  in  this 
single,  middle-of-the-pack  state  is 
nearly  complete. 

So  when  the  applications  are 
ready  for  us  to  set  our  own  land 
speed  records  for  commercial  data, 
wc  know  the  track  is  already  there, 
and  I2’s  researchers  will  have  paved 
the  way.  • 
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That’s  essentially  what  the  folks  at  the  University  of  Ore¬ 
gon  in  Eugene  accomplished  late  last  September  with  their 
cohorts  at  NYSERNet,  a  nonprofit  networking  organization 
in  Syracuse,  N.Y.  Oh,  and  they  did  this  using  IPv6,  the  most 
advanced  networking  protocol  today. 
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this  was  a  new  "land 
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transfer.  39.81  terabit- 
meters  per  second. 

The  record  stood  bare¬ 
ly  a  week  when  in  early 
October,  European  re¬ 
searchers  transmitted 
all  the  data  from  a  CD- 
ROM  more  than  9.000 
miles  in  17  seconds  for  the  equiva¬ 
lent  of  an  astounding  5.154  terabit- 
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These  “races"  have  been  taking 
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called.  12  is  the  global  network  be¬ 
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daily  routine."  he  says. 

12  came  into  being  because  com¬ 
mercial  use  of  the  old,  clunky  Inter¬ 
net  was  getting  bogged  down  with 
too  many  packets  slinging  Ama- 
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daily  chaos  that  makes 
it  such  a  lively  place. 

12  is  strictly  for  non¬ 
commercial.  serious, 
state-of-the-art  network- 
related  R&D  work  — 
with  a  little  data  race  be¬ 
ing  held  now  and  again. 

There  were  initial 
hopes  by  some  compa¬ 
nies.  such  as  FedEx 
Corp.,  when  Intemet2 
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they.  too.  would  directly 
benefit  from  the  interconnected 
high-speed  points  of  presence,  or 
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that  doesn’t  mean  it  won’t  affect 
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on  your  site  will  be  able  to  assist  or. 
with  robots,  even  perform  opera¬ 
tions  across  towns,  continents  and 
oceans.  Just  last  month  in  Chicago, 
60.000  radiologists  at  the  annual 
meeting  of  the  Radiological  Society 
of  North  America  were  treated  to  a 


half-dozen  real-world  applications 
of  12  in  the  exciting  new  world  of 
telemedicine. 

Admittedly,  such  projects  today 
will  be  rare  and  expensive.  But 
12  researchers  are  on  the  forefront, 
using  technologies  that  we  will  all 
use  soon. 

Joanne  Hugi,  associate  vice  presi¬ 
dent  for  information  services  at  the 
University  of  Oregon,  points  out 
that  12  has  been  the  testbed  for 
IPv6.  “And  IT  people  will  follow 
what  12  has  done  there,”  she  says. 

Furthermore,  she  points  out  that 
the  vendors  involved  are  learning 
new  tricks  for  measuring  and  im¬ 
proving  product  performance  that 
will  make  their  way  into  the  sys¬ 
tems  we  buy  and  deploy. 

In  the  area  of  security  and  pri¬ 
vacy,  12  researchers  have  developed 
sof^are  called  Shibboleth  that  uses 
a  breakthrough  method  for  authen¬ 
tication.  and  t2's  distributed  storage 
initiative  offers  IT  planners  insight 
into  how  to  build  storage  networks 
bridging  vast  distances. 

All  of  this  comes  with  the  serious 
caveat  that  these  researchers,  unlike 
most  of  the  rest  of  us,  have  access 
to  big  bundles  of  bandwidth.  It’s 
the  cornerstone  of  12.  But.  thanks 
to  the  giddy  days  of  the  1990s  Inter¬ 
net.  there’s  plenty  of  latent  band¬ 
width  available. 

In  Oregon,  along  the  Interstate  5 
corridor  alone,  more  than  140,000 
miles  of  fiber-optic  cable  has  been 
installed,  and  95%  of  it  is  dark. 

Of  course,  lighting  it  won’t  come 
cheap.  But  the  $1  billion  investment 
to  lay  the  basic  infrastructure  in  this 
single,  middle-of-the-pack  state  is 
nearly  complete 

So  when  the  applications  are 
ready  for  us  to  set  our  own  land 
speed  records  for  commercial  data, 
we  know  the  track  is  already  there, 
and  I2’s  researchers  will  have  paved 
the  way.  I 
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Internet 

Plutocol 

VersionD 

The  standard  is  ready. 

The  vendors  are  ready.  Are  you? 
Bv  Garv  H.  Anthes 


The  sky  may  not  be  falling 
just  yet.  but  it's  not  too  early 
for  IT  managers  to  start 
thinking  about  migrating 
their  networks  to  Internet 
Protocol  Version  6  (IPv6),  the  new 
version  of  IP  with  greatly  expaiwled 
addressing  capability. 

Smaller  companies  with  activities 
only  in  the  U.S.  can  safely  leave  IPv6 
out  of  their  2003  budgets.  But  compa¬ 
nies  with  global  operations  should 
start  experimenting  with  IPv6  and 
planning  their  migrations  from  IP  Ver¬ 
sion  4,  the  current  standard,  says  Joe 
Mambretti,  director  of  the  Interna¬ 
tional  Center  for  Advanced  Internet 
Research  at  Northwestern  University 
in  Evanston.  IlL  “The  biggest  pit^  is 
ignoring  h,"  he  says. 

There  are  43  billion  unique  32 -bit 
Internet  addresses  supported  by  IPv4, 
and  about  half  of  those  are  as  yet  un¬ 
used.  though  they  have  been  claimed 
by  Ui>.  Internet  service  providers.  Be¬ 
cause  U.S.  network  service  companies 
were  Internet  pioneers,  they  were  allo¬ 
cated  a  large  fraction  of  the  IP  address¬ 
es  early  on.  and  they  face  no  shorta^ 
anytime  soon.  “But  countries  like  Chi¬ 
na  and  India  sort  of  showed  up  when 
the  address  cupboard  was  bare."  says 
Craig  Partridgk  chief  scientist  at  BBN 
Technologies  in  (Cambridge,  Mass. 

A  big  spike  in  demand  for  IP  ad¬ 
dresses  everywhere  in  the  world  over 
the  next  few  years  is  likely  to  accompa¬ 
ny  the  networidng  of  cell  phones,  auto¬ 
mobiles,  appliances  and  many  other 
noncoroputing  devices.  The  answer 


will  be  IPv6,  which  supports  128-bit 
addresses,  enough  for  every  computer, 
cell  phone,  car,  lamppost  and  toaster  in 
the  worid  for  many  years  to  come. 

While  the  expanded  address  space  is 
by  far  the  biggest  advantage  of  IPv6, 
the  new  standard  improves  on  IPv4  in 
a  number  of  other  ways.  IPv6  supports 
automatic  conTigtiration.  so  a  comput¬ 
er  can  be  plugged  in  and  made  Inter¬ 
net-ready  without  laborious  manual 
entry  of  address  information. 


“It  allows  better  plug  and  play."  says 
Scott  Bradner.  a  senior  technical  con- 
suhani  at  Harvard  University.  “If  you 
have  a  pallet  of  computers  on  the  load¬ 
ing  dock,  it  could  take  you  quite  a  while 
to  get  them  running  with  Version  4.“ 

In  addition.  IPv6  includes  IP  Securi¬ 
ty  (IPsec)  for  sender  authentication 
and  data  encryption  by  default,  where¬ 
as  it  is  an  optional  extension  to  IPv4. 
‘There  are  a  bunch  of  little  things  like 
that,  maybe  SO  or  so  little  changes  for 
improving  security  and  manageabili¬ 
ty."  says  Braditer,  also  an  area  director 
for  the  Internet  Engineering  Task 
Force  (IETF). 

Size  May  Not  Matter 

So  with  all  those  improvements,  should 
users  be  rushing  to  IPv6?  “There  is  no 
huge  carrot,  other  than  the  big  address 
space."  Bradner  says.  “And  if  you  al¬ 
ready  have  address  space,  wlty  do  you 
need  bigger  address  space?" 

Nevertheless,  many  products  are 
IPv6-ready  now.  Cisco  Systems  Inc's 
routers  include  software  support  for 
IPv6,  and  those  of  Juniper  Networks 
Inc.  have  the  protocol  stack  in  the 
router  hardware.  Microsoft  Corp.  ships 
Windows  XP  with  IPv6  —  ttim^  off 

—  and  Microsoft  recently  announced 
support  for  the  protocol  in  Windows 
CE  .Net  Windows  CE  .Net  also  in¬ 
cludes  IPv6/IPv4  “coexistence  and  mi¬ 
gration"  utilities.  Apple  Computer 
Inc’s  Mac  OS  X  has  IPv6  —  turned  on 

—  as  do  Sun  Microsystems  Inc's  So¬ 
laris  8  and  various  versions  of  Linux. 


The  only  real  downside  to  IP\'6  is 
the  effort  required  to  move  to  it.  Par¬ 
tridge  says.  “Rolling  out  IPv6  means 
dealing  with  compatibility  issues  with 
IPv4.  The  IETF  concluded  it  wasn’t 
possible  to  come  up  with  a  transition 
strategy  that  vras  completely  pain¬ 
less."  he  says. 

Companies  that  mix  IPv6  and  IPv4  in 
an  inoanet.  extranet  or  across  the  Imer- 
net  may  encounter  these  compatibility 
issues.  For  example  not  all  the  attributes 
of  IPv4  —  such  as  multicasting  —  have 
yet  been  fully  implemented  in  IPv6. 
And  Bradner  says  companies  that  use 
Network  Address  Translation  software 
in  a  router  or  Arewall  to  convert  be¬ 
tween  32 -bit  and  128'bit  addresses  may 
experience  difficulties  with  some 
things,  such  as  voice  over  IP  and  peer- 
to-peer  applications  like  music  sharing 
and  grid  computing. 

Bradner  says  companies  that  want  to 
operate  in  Asia  or  tie  their  systems 
into  the  new  third-generation  IPv^ 
based  cell  phones  should  be  planning 
their  migration  strategies  now.  Others 
might  wait  for  the  next  generation  of 
client  Windows,  in  about  three  years. 
'%vfaere  the  [IPv6l  stack  is  more  ma¬ 
ture  and  has  more  supporting  applica- 
tioDS  around  it."  I 
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Getting  From  IPv4  to  IPv6 


|ylosimiorabonstromPv4tolPv6wioccurgradualyovernel- 
vvDiks  that  contain  8  rm  of  FM  and  routers  and  hosts.  Com¬ 
panies  wishing  to  facilitate  the  trareition  shnM  ensure  that  al 
new  hosts  wd  routers  support  dual  IPv4  and  protocol  stacks. 

But  if  an  IP^  host  sends  a  packet  to  another  IM  host  over 
the  Internet,  there's  no  way  to  oisure  (hat  it  wont  be  routed 
through  an  IPv4  nehvork.  One  way  to  make  that  work  s  via  IP 
lunnekno.  where  IP^  packets  can  rnore  or  less  sevnlessly 
pass  through  IPv4  networks- 


fn ‘configureir  P  (urmekno.  addresses  ve  converted  at  the 
Hmnel  endpoints  based  on  iPv4/VV6  mappings  m  router  tables 
maintained  by  administrators. 

k)  'automatic’  tunneling,  hybrid  IPv4/P^  addresses  are  cre¬ 
ated  by  extending  S^bil  IPv4  addresses  to  128  bds  by  addkig 
leackng  zeros.  IP^  packets  are  encapsulaled  wdhn  IPv4  ha^ 
ers.  so  ttet  one  address  can  be  converted  to  the  other  auto¬ 
matically  at  the  tunnel  endponts 

-  GaryKAnthes 
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Ethernet  Goes 


The  promise  of  Ethernet  melropoli 
tan-area  networks  -  lower  cost, 
faster  provistoninQ.  more  granular 
bandwidth  ailocation  -  has  yet  to 
materiaiize  m  the  form  of  ubiQuitous  service  ofter- 
ings.  As  ir>cumt>enl  carriers  sit  on  the  sidelines,  the 
potential  cost  savirrgs  have  businesses  turning  to 
geographically  limrted  services  from  smaller  players 
-  or  lighting  their  own  fiber  networks 


MFTRofrnrr.^N-ARf.A  sn  WORKS  (MAN) 
built  on  Ethernet  over  fiber  premise  ui 
deliver  faster,  cheaper  and  mure  flexible 
bandwidth  than  ATM  Sonet-b.ised  tech- 
nol-'cicx.  But  IT  professionals  coniem- 
platinj!  the  deployment  »‘fa  native  metro  Ethernet 
network  for  interconnecting  corptirate  LANs  have 
found  limited  options.  That  w  ill  change  eventually, 
analysts  say,  but  the  transition  could  take  years  be¬ 
cause  the  incumbent  local  exchange  carriers  (ILECi 
have  such  a  large  investment  in  Asynchronous 
I'ransfcr  Mode  (ATM)  and  Synchronous  t)ptical 
Network  (Sonet)  infrastructures. 

Ethernet  M.ANs  have  several  advantages.  They  can 
plug  into  enterprise-class  Gigabit  Ethernet  switches 
or  routers,  eliminating  the  need  for  channel  service 
units  and  other  equipment  required  for  traditional 
.ATM  Sonet  serv  ices.  A  native  Ethernet  design  is  eas¬ 
ier  to  supptin.  the  equipment  evsts  less  than  that  of 


an  .A'EM  Sonet  network,  bandwidth  can  be  provi¬ 
sioned  more  quickly  and  efficiently  <  in  increments  as 
small  as  IM  bit  sec.t.  and  the  networks  can  scale  to 
lOG  bit  see.  But  the  biggest  benefit  is  cost  savings. 
"The  Ethernet  solution  tends  to  be  50"ii  cheaper  than 
Sonet.”  says  anahst  |ay  I'ultz  at  Slamlord.  (A)nn-- 
based  Gartner  Inc. 

The  II  ECs  have,  however,  been  hesitant  to  deploy 
native  metro  Ethernet  services.  "The  carrier-class 
switches  aren’t  mature  emmgh  to  roll  out  services.” 
says  r>«>ug  Barnes,  director  (if  optical  services  at  At¬ 
lanta-based  BellSouth  t:orp..  adding  that  the  50msec 
fail-over  times  Sonet  offers  are  essential  for  the  voice 
and  data  tratTic  it  carries.  The  Metro  Ethernet  Forum 
is  working  on  carrier-class  standards,  says  Nan  Chen, 
president  of  the  New  port.  Calif.-based  industry  con¬ 
sortium.  and  sw  itch  vendors  say  their  products  al¬ 
ready  offer  such  capabilities. 

But  that's  an  issue  for  carriers  that  must  handle  a 
mix  of  voice  and  data  traffic  types,  not  for  IT.  says 
David  Passmore,  an  analyst  at  Burton  Group  in  Ster¬ 
ling,  Va.  "Most  people  aren’t  running  voice  over 
metro  neiwtirks,  and  the  data  running  over  them 
tends  to  be  tolerant  of  the  second  or  two  of  restoral 
limes  you  find  with  II’  networks,”  he  says. 

BellSouth.  like  many  other  ILECs.  offers  lOM 
bit  see.,  lOOM  bit/'scc.  and  Gigabit  Ethernet  transpar¬ 
ent  LAN  (TLAN)  services  running  over  its  ATM-' 
Sonet  service  architecture.  But  users  and  analysis  say 
that  TLAN  services  are  more  expensive  than  native 
metro  Ethernet  offerings  and  don’t  scale  in  small  in¬ 
crements.  In  addition,  bandwidth  upgrades  require 
equipment  changes  that  can  lake  a  week  to  several 
months  to  complete,  users  say.  And  thc-se  services 
aren't  available  everywhere. 


Don  Shackicy.  IT  director  at  Steinberg  Diagnostic 
Medical  Imaging  Centers  in  Las  Vegas,  says  Sprint 
Corp.  could  offer  him  only  ATM  service  over  copper 
to  connect  three  locations  that  needed  high  band- 
w  idth.  "Once  they  installed  it.  we  were  going  to  be 
stuck  at  155M  bit  sec.”  he  says.  “And  it  could  take 
months  —  literally  months  —  to  Jo  an  upgrade.” 

That  has  left  second-tier  vendors,  including  cable 
companies,  public  utilities  and  .start-ups.  as  the  sole 
providers  of  native  metro  Ethernet  services.  Shack- 
ley.  who  went  with  Atlanta-based  cable  service  com¬ 
pany  Cox  Communications  Inc.,  pays  SIO.OOO  per 
month  for  lODM  bit/sec.  serv  ice  to  three  offices. 

ATM  would  have  ei>st  50”ii  more,  he  says,  adding  that 
upgrades  can  now  be  completed  in  a  single  day. 

But  prov  ider  coverage  is  spotty  at  best,  users  say. 
and  many  vendors  are  in  dire  financial  straits.  Yet 
corporations  are  still  turning  to  the.se  players.  “Ii’-s 
the  only  way  they  can  gel  the  bandwidth  they  need." 
Passmore  says. 

Lighting  Up 

There  is  one  other  way.  Some  organizations  have 
leased  or  laid  their  own  "dark  fiber”  and  built  metro 
Ethernet  networks.  But  this  option  isn't  practical  for 
most  organizations. 

"You're  responsible  for  network  reliability  and 
availability.  And  Ethernet  doesn't  have  a  lot  of  testing 
tools  if  the  link  should  fail,"  Passmore  says.  That's  as¬ 
suming  you  can  get  the  fiber,  which  reaches  only  lO'S- 
of  business  offices,  he  saj-s.  And  even  when  it's  in 
place,  the  high  cost  of  the  last-mile  connection  to  the 
street  can  sink  the  idea  fast.  Lighting  dark  TiKt  makes 
sense  only  for  high-bandwidth  applications  in  excess 
of  speeds,  says  Jim  Slaby.  an  analyst  at  Giga  Infor- 


Traditional  Telecom  Network 


Mainotfice  daU  service  unit 


earner  ATM 
switch 


Carrier  ATM 
swHdi 


*A0M  s  add/drop  multipleser 


WMe  traditional  Sonet-tiased  services 
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Ethernet  Goes 


MmtOPOUTAN-AREA  NETWORKS  (MAN) 
built  on  Ethernet  over  fiber  promise  to 
deliver  futer.  cheaper  and  more  flexible 
bandwidth  than  ATM/Sonet-based  tech¬ 
nologies.  But  IT  professionals  contem¬ 
plating  the  deployment  of  a  native  metro  Ethernet 
networi:  for  interconnecting  corporate  LANs  have 
found  limited  rations.  That  will  change  eventually, 
analysts  say,  but  the  transition  could  take  years  be¬ 
cause  the  incumbent  k>cal  exchange  carriers  (ILEC) 
have  such  a  large  investment  in  Asynchronous 
Transfer  Mode  (ATM)  and  Synchronous  Optical 
Network  (Sonet)  infrastructures. 

Ethernet  MANs  have  several  advantages.  They  can 
plug  into  enterprise-class  Gigabit  Ethernet  switches 
or  routers,  eliminating  the  need  for  channel  service 
units  and  other  equipment  required  for  traditional 
ATM/Sonet  services.  A  native  Ethernet  des^  is  eas¬ 
ier  to  support,  the  equipment  costs  less  than  that  of 


an  ATM/Sonet  network,  bandwidth  can  be  provi¬ 
sioned  more  quickly  and  efncieotly  (in  increments  as 
small  as  IM  bit/sec),  and  the  networks  can  scale  to 
lOG  bit/sec.  But  the  hugest  benefit  is  cost  savings. 
The  Ethernet  solution  tends  to  be  50%  cheaper  than 
Sonet,"  says  analyst  )ay  Pultz  at  Stamford.  Conn.- 
based  Gartner  Inc. 

The  ILECs  have,  however,  been  hesitant  to  deploy 
native  metro  Ethernet  services.  The  carrier-class 
switches  aren’t  mature  enough  to  roll  out  services," 
says  Dot^  Barnes,  director  of  optical  services  at  At¬ 
lanta-based  BellSouth  Corp..  adding  that  the  50msec 
feil-over  times  Sonet  offers  are  essential  for  the  voice 
and  data  traffic  it  carries.  The  Metro  Ethernet  Forum 
is  woridng  on  carrier-class  standards,  says  Nan  Chen, 
president  of  the  Newport.  Calif-based  industry  con¬ 
sortium.  and  switch  vendors  say  their  products  al¬ 
ready  offer  such  capabilities. 

But  that’s  an  issue  for  carriers  that  must  handle  a 
mix  of  voice  and  data  traffic  types,  not  for  IT.  says 
David  Passmore,  an  analyst  at  Burton  Group  in  Ster¬ 
ling.  Va.  "Most  people  aren’t  running  voice  over 
metro  oetwoilcs,  and  the  data  running  over  them 
tends  to  be  tolerant  of  the  second  or  two  of  restoral 
times  you  fmd  with  IP  networks,"  he  says. 

Bell^uth.  like  many  other  ILE(^,  offers  lOM 
bit/sec.,  lOOM  bit/sec.  and  Gigabit  Ethernet  transpar¬ 
ent  LAN  (TLAN)  services  running  over  Its  ATM/ 
Sonet  service  architecture.  But  users  and  analysts  say 
that  TLAN  services  are  more  expensive  than  native 
metro  Ethernet  offerings  and  don’t  scale  in  small  in¬ 
crements.  In  additicm.  bandwidth  upgrades  require 
equipment  changes  that  can  take  a  week  to  several 
months  to  complete,  users  say.  And  these  services 
aren’t  available  everywhere. 


Don  Shackley,  IT  director  at  Steinberg  Diagnostic 
Medical  Imagii^  Centers  in  Las  Vegas,  says  Sprint 
Cforp.  could  offer  him  only  ATM  service  over  co(^f 
to  connect  three  locations  that  needed  high  band¬ 
width.  "Once  they  installed  it.  we  were  going  to  be 
stuck  at  155M  bit/sec"  he  says.  "And  it  could  take 
months  —  literally  months  —  to  do  an  uf^rade." 

That  has  left  second-tier  vendors,  including  cable 
companies,  public  utilities  and  start-ups,  as  the  sole 
providers  of  native  metro  Ethernet  services.  Shack¬ 
ley,  who  went  with  Atlanta-based  cable  service  com¬ 
pany  Cox  Communications  Inc.,  pays  $10,000  per 
month  for  lOOM  bit/sec  service  to  three  offices. 

ATM  would  have  cost  50%  more,  he  says,  adding  that 
upgrades  can  now  be  completed  in  a  single  day. 

But  provider  coverage  is  spotty  at  best,  users  say. 
and  many  vendors  are  in  dire  flnancial  straits.  Yet 
corporations  are  still  turning  to  these  players.  "It’s 
the  only  way  they  can  get  the  bandwidth  they  need," 
Passmore  says. 


Lighting  Up 


There  is  one  other  way.  Some  organizations  have 
leased  or  laid  their  own  "dark  Hber”  and  built  metro 
Ethernet  networks.  But  this  option  isn’t  practical  for 
most  organizations. 

"You’re  responsible  for  netwoik  reliability  and 
availability.  And  Ethernet  doesn’t  have  a  lot  of  testing 
tools  if  the  link  should  fail,"  Passmore  says.  That’s  as¬ 
suming  you  can  get  the  fiber,  which  reaches  only  10% 
of  business  offices,  he  says.  And  even  when  it's  in 
place,  the  high  cost  of  the  last-mile  connection  to  the 
street  can  si^  the  idea  fast  iJgbring  dark  fiber  makes 
sense  only  for  high-bandwidth  applications  in  excess 
of  T3  speeds,  says  Jim  Slaby,  an  analyst  at  Giga  Infor- 
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mation  Group  Inc.  in  Cambridge,  Mass,,  adding.  '*We 
don't  think  it  makes  sense  fm-  most  large  enterprises.** 
That  leaves  IT  with  few  choices  and  many  trade- 
ofis.  Gartner’s  Pultz  suggests  that  organizations  COD' 
sider  using  a  second*tier  metro  Ethernet  service 
provider  as  the  primary  vendor,  wdiere  available,  and 
provisioning  lower-bandwidth  ATM  or  Integrated 
Services  Digital  Net-  | — — — — - - 


work  services  from  an  FKMTl 

ILEC  as  a  backup.  CTb^BAIA 

“You  have  less  band-  5  iMImD 

width  for  the  backup,  MatioBhemrtForamPres 

IS  a  lot  cheaper,  hesays.  a™aBp„ll(«ale: 

“We’re  big  on  carrier  ri^QiirtimTIT? 

reduiuiancy.“  I  n*  mwxanpalMwi 


Metro  Ethenwl  Fonan  President 
Nan  Own  talts  about  how  the 
group  plane  to  help  m«ro  Ethernet 


Roanoke  BuiMs 
On  Sonet  Reliability 


Qty  of  Roanoke,  Va. 

Joe  Slone,  droctor.  department  of  technology 

WHATn'&Muniapriity 

IT  OOAL  Create  a  Nghfy  reKabie.  converged 
MAN  that  can  handto  critical  9t1  voice  traffic  as 
well  as  geographic  informriion  system  i 

(G6)  and  other  data  among  14  locations.  I 

STIUrajy:  Slone  didn't  trust  P  telepho¬ 
ny  systeTTB  or  native  metro  Ethernet  de¬ 
signs  to  securely  and  r^aUy  handle  9f1  voice 
traffic.  So  Roan^  IMTchased  a  digital  private 
branch  exchange  from  Nortet  Networks  Ltd.  and 
implemented  a  Sonet-based  'optical  Ethernet* 
system  that  uses  an  emerging  technology  caBed 
Resifient  Paritet  Ring  to  integrate  voice  and  data 
over  an  OC-48  (2.46  bil^.)  link.  The  system 
includes  ()PTera  Metro  3500  Muitiservice  Plat¬ 
forms  with  T1  and  Gigabit  Ethernet  ine  cards  to 
acconmodalevoiceanddatatrafficforeachlo- 
cahon.  Two  fiber  pairs  nm  to  each  buiding  for 
redmdancy:  the  netvwNk's  fail-over  rate,  at  SO 
msec.,  is  the  same  as  that  of  traditional  Sonet. 


CHAUDMO:  Roarxie  bargairwd  with  a  local 
letecorrnwkcations  corripariy  to  run  dark  flber  tor 
the  dty  when  layng  Its  own  flier.  Ming  the  Aer 
horn  the  street  to  each  buddrig  added  S4.000  to 
$22.000oerslte.8(JlSlonesayslhealiemalive- 
usiigSonet-besedserwces-wasoost-prohb- 
tive.  Ha  says  fas  teem  underestimated  toe  effort 
required  to  get  ha  staff  up  to  speed  on  Sonet  and 
recommends  staring  hairwig  early  on. 

MVOFR  ElMnating  its  ortginal  Centrex 
P6X  service  has  saved  the  dty  S50.000 
to  $100,000  per  year.  Because  Roanoke 
ownstoeintiastnicture.Kcanrealoc8teband- 
wktth  as  needed.  IWe  made  the  transibon  to  bet¬ 
ter  manage  bandwidth.*  says  Slone.  Roanoke  just 
compieted  Its  QIS  project  and  departments  can 
trow  access  map  images  wlhoid  choking  the  net¬ 
work.  H's  a  mNor  data-bumer.  so  now  we're 
ready.*  says  Slone. 

COMMBfTS: 'Rekabily  is  a  key  6sue  with  us.  I 
wanted  to  build  in  some  degree  of  secunty  and 
redundancy  vrithout  havng  to  break  (vone  and 
data]  apart*  says  Slone.  IWs  [tectnotogy]  gave 
us  the  opportunity  * 


Flexibility  Clinches 
Metro  Ethernet  Decision 


Calpine  Corp.,  San  Jose 

Sean  Ciny.  camfnjnicalions  engneeting  manager 

WHAT  n  B:  Energy  wholesaler  and  trader 

n  OQAL  Create  a  fast  rekable  and  rapkiy  scal¬ 
able  network  to  connect  1.5(X)  employees  across 
lour  dowrrtown  ftouston  offices.  Tite  network 
rnust  support  voceiwer-P  traffic  for  interoffice 

cri  routing,  and  multicast  video  for  train-  - 

ing  and  presentations. 

SnWIESY:  C^  instaled  100M 
bit^  metro  Ethemri  service  from  San 
Ftandsco^iased  Yipes  Enterprise  Series  Inc. 
ran  tM  flier  pairs  to  (fffererk  switches  at  each  lo¬ 
cation  for  redundancy,  and  bached  14)  service  wih 
ISM  bit/sec.intertxjAJIng  Asynchronous  Trans^ 
Mode  Inks  from  AT&T.  Cirry  used  routers  instead 
of  Ethernet  switches  to  block  any  potenbai  unwant¬ 
ed  baffle.  *f  was  skeptical  about  other  people's 
data  running  over  the  same  bacMtone.*  he  says. 

CHAUlNeES:  Cuny  inibaily  contacted  Sprirrt 
Corp.  which  responded  vMth  an  nadequrie  1.44M 


bil/sec.  Tl  service  offering.  He  atoo  considered 
AT&T  Corp.  s  Sonet-besed  Local  Network  Ser¬ 
vices  but  was  turned  off  by  tong  instalalion  and 
uptpade  lead  lirnes  Curry  also  had  concerns 
about  native  mebo  Ethers  services  *Wb  were 
iffy  on  the  rekabity.  Vito  were  posilrve  that  Sonet 
was  going  to  run.*  he  says 

PKVQFF:  The  system  cost  about  the  same  as  oth¬ 
er  service  offerings  but  Ctfiy  was  able  to  In- 

-  crease  bendwidto  from  XXIM  to  200M 

bN/sec.  in  30  mnutes  The  big  advantage 
I  see  is  toe  responsiveness  of  the  vendor 
and  toe  speed  at  which  they  can  aher  the 
network  to  meei  my  needs*  he  says  He 
ekes  another  benefil:  IMeto  Qhemet]  alows  my 
staff  to  focus  on  other  totngs  than  funnino  a 
Sonet  network  to  downtown  Houstori* 

COMMBfTSiYtoes  Med  for  bankruptcy  prgtec- 
tionlastyear.sof^wasforoedtoieseaichri- 
temaUves  Vtoes  has  since  received  addbonal 
kjndlng.and8ertoceha5car4lnuedwri«uinier- 
rupbon.  Cury  says  he  fas  one  regret  1  might  have 
put  In  more  padat-shaping  devices  to  better  con¬ 
trol  bandwidlh  so  I  dUnT  fiM  to  raise  I  so  hi|^' 
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HWerealywantedourgeograph- 
icaly  di^ietsed  sales  teams  to 
be  able  to  communicate  more  quicldy 
and  eas9y.  enabfaig  us  to  provide 
faster,  more  flexMe  service. 

KEVIN  LOPEZ.  NATIONAL  MANA6ER  OF 

TELECOMMUNICATIOttS.  GRANT  THORNTON  INC. 


Getting  a  payback  from  voice-over- 
IP  investments  isn’t  easy,  but  these 
users  have  managed  to  pull  it  off. 

By  Barbara  DePompa  Reimers 


Achieving  a  speedy  return 
on  investment  from  voice* 
over-IP  (VOIP)  technology 
has  proved  difiTicult,  in  part 
because  upfront  costs  can 
be  high  and  traditional  long-distance 
phone  charges  have  dropped  in  recent 
years. 

It’s  also  easy  to  forget  to  include 
some  of  the  behind-the-scenes 
expenses  involved  in  VOIP 
when  calculating  its  ROI. 

That’s  because  so  many  compa¬ 
nies  have  underestimated  the 
complexity  of  running  voice  applica¬ 
tions  on  corporate  IP  networics. 
Adding  voice  requires  that  all  ele¬ 
ments  of  the  corporate  network  be 
tested  —  and  in  sonse  cases  replaced 
or  upgraded  —  for  VOIP  applications. 
(Companies  may  even  need  additional 
staiTu^  to  manage  the  converged  traf¬ 
fic  on  IP  networks. 

Nevertheless,  users  and  analysts 
say  that  a  return  can  be  achieved  — 
though  it  may  require  more  careful 
planning,  and  the  payback  may  take 
longer  than  fust  expected.  Most  ana¬ 
lysts  have  pushed  out  the  time  it  takes 
to  gain  a  return  on  VOIP  to  an  average 
of  19  months,  compared  with  earlier 
estimates  of  less  than  a  year. 
Chicago-based  Grant  Thornton  Inc., 


a  global  accounting  and  auditing  firm, 
has  set  up  a  converged  network  in  the 
U.S.  featuring  centralized  manage¬ 
ment,  five-digit  dialing  for  calls  be¬ 
tween  offices  and  employees,  hub- 
based  voice  mail  and  unified  messag¬ 
ing.  With  51  offices  and  2,800  employ¬ 
ees  nationwide,  ‘^ve  really  wanted 
our  geographically  dispersed  sales 
teams  to  be  able  to  communi¬ 
cate  more  quickly  and  easily, 
enabling  us  to  provide  faster, 
more  flexible  service,"  says 
Kevin  Lopez,  national  manager 
of  telecommunications  at  Grant 
Thornton, 

The  new  network  has  been  in  place 
since  last  spring.  Grant  Thornton  has 
cut  communication  costs  by  routii^ 
voice  traffic  over  its  wide-area  net- 
woik  and  eliminating  toll  chaiges.  It 
has  also  reduced  netwoik  management 
requirements  and  consolidated  28 
stand-alone  systems  into  four  hubs  — 
all  without  replacii^  its  existing  pri¬ 
vate  branch  exchange  (PBX)  and  digi¬ 
tal  phones. 

The  payoff?  Grant  Thornton  has 
saved  $800,000  in  its  first  year  on  in¬ 
tracompany  long-distance  toll  charges 
and  $160,000  on  equipment  lease  pay¬ 
ments.  Lopez  says. 

The  company  had  already  imple- 
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meoted  a  wide-area  data  network 
based  on  frame-relay  circtuts  and 
routers  from  Cisco  Systems  Inc,  along 
with  an  Avaya  Inc  and  28  Octel 
Corp.  voice  messaging  systems.  The 
firm  added  Avaya  Cafun  routers  for 
VOIP  when  it  consolidated  the 
systems  into  four  primary  hubs,  to 
handle  voice  and  ^ta  traffic.  And  to 
guarantee  the  qtialicy  of  service,  a  per¬ 
manent  virtual  voice  circuit  was  provi¬ 
sioned  for  each  office  location. 

Grant  Thornton  selected  Avaya  to 
provide  VOIP  functions  because  the 
supplier  was  best  able  to  leverage  its 
existing  PBX  and  digital  phone  invest¬ 
ments.  and  because  of  an  aggressive 
leasing  plan  that  lowered  t^  firm’s 
monthly  costs.  Lopez  says. 

For  Grant  Thornton,  the  savings  in 
administration  and  monthly  recumng 
costs  were  too  great  to  ignore.  Now. 
says  Lopez,  the  company  is  looking  to 
enhance  the  network  so  it’s  more  ro¬ 
bust  and  to  improve  visibility  into  the 
network  by  using  specialized  systems 
management  tools.  “And  in  the  next 
year,  we  hope  to  boost  bandwidth  for 
audio-  and  videoconferencing,  vdiich 
will  further  reduce  our  costs,”  be  says. 

According  to  analysts  and  corporate 
customers,  the  key  to  achieving  an  ROI 
on  VOIP  is  to  plan  carefully.  Business¬ 
es  should  conduct  an  IT  audit  of  their 
network  infrastructures,  including  cur¬ 
rent  data  and  voice  traffk  patterns.  If 
users  skip  this  step  and  don't  know 
their  current  costs,  they  won’t  know 
whether  the  VOIP  migration  has  saved 
them  money. 

Stephen  Leaden,  president  of  Leaden 
Associates  Inc.,  a  telecommonicatioas 
consultancy  in  WashingtonvUle.  N.Y.. 


says  users  seeking  an  ROI  from  VOIP 
should  start  with  the  WAN.  where  you 
can  “expect  20%  savings  from  Day  L” 
That’s  because  VOIP  capabilities  are 
more  mature  in  WAN  products  than 
they  are  in  localized  customer  premis¬ 
es  equipment  and  PBXs,  he  says. 

A  recent  report  by  Gartner  Inc.  says 
that  IP  PBXs  typically  lack  several  of 
the  ridier  features  offered  on  circuit- 
switched  PBXs.  If  IP  PBXs  offer  90%  of 
the  features  available  on  traditional 
PBXs,  that  will  equal  100%  user  dissat¬ 
isfaction.  as  well  as  trouble  tickets  that 
the  IT  help  desk  can’t  fix.  according 
to  Gartner. 

Leaden  advises  VOIP  users  to  distin¬ 
guish  between  their  WAN  and  local 
PBX  Implementations.  “These  are  s^ 
arate,  independent  projects  that  need 
never  merge.  It’s  best  to  go  with  ma¬ 
ture  WAN-based  VOIP  implementa¬ 
tions  first,  to  gain  a  slow,  steady,  yet 
clear  return.”  be  says. 


ROI  Strategies 


Analysts  say  the  best  way  to  increase 
the  ROI  of  voice/data  networics  is  to 
layer  on  various  benefit-producing  ap¬ 
plications,  including  fax,  audioconfer¬ 
encing  and  videoconferendog. 

For  an  even  faster  ROL  use  VOIP  as 
the  wide-area  transport  mechanism 
between  multiple  internal  locations, 
because  that  r^uces  *n  costs  and 
doesn’t  require  the  addition  of  special¬ 
ized  digital  phones. 

Cutting  T1  costs  was  the  key  at  Rye, 
N.Y.-based  catalog  retailer  Lillian  Ver¬ 
non  Corp,  for  example.  In  late  2001, 
i-ilHan  Vemon  repl^d  an  agjng  auto¬ 
mated  call  distribution  (ACD)  system 
with  a  VOIP-enabled  multimedia  con¬ 
tact  center,  reducing  the  number  of  TI 
lines  used  fitim  six  to  twa 

That  move  saved  the  company 
S100.000  during  2001’$  peak  holiday 
sales  season,  says  Ellis  Admire,  direc¬ 
tor  of  MIS  operations.  ”By  converting 
voice  calls  from  analog  to  digital  s^- 
nals,  we  can  carry  up  to  72  calls  on  a 
single  Tl  Mng.  vs.  the  previous  high  of 
24  simultaneous  analog  voice  calls,” 
Admire  says. 

The  eQueue  multimedia  contact 
center  from  eOn  Communications 
Corp.  is  Atlanta  lets  customer  serrice 
representatives  handle  e-mail  and  Web 
contacts  with  the  same  ease  as  a  phone 
calL  Admire  says  eOn's  VOIP-enibled 
ACD  system  was  chosen  because  it 
uses  (q>en,  Linux-based  technology 
that  is  up  to  date  and  reliable.  “lEOnl 
was  able  to  riiow  us  customer  exam¬ 
ples,  while  others,  such  as  Aspect  and 
RockwelL  weren't,”  be  says. 

Besides  monthly  savings  in  Tl  leas¬ 


ing  fees.  Admire  says  the  added  skills- 
based  routing  features,  along  with  the 
ability  to  converge  voice  and  data  over 
Tl  lines,  make  VOIP-enabled  ACDs 
worth  a  close  examtnatiott  (Skills- 
based  routing  is  used  to  route  calls  to 
customer  representatives  with  specific 
skills,  such  as  the  ability  to  speak 
Spanish  or  offer  specialized  support.) 

RB.  Fuller  Ca  in  St  PauL  Minn,  ex¬ 
pects  a  payback  on  Us  new  _ 

VOIP  d^loyroent  in  about 
a  year,  says  Kevin  WeezeL 


WiMTMS 

manager  of  global  nerwoik 

services  at  the  manufectur-  ,irn  tm  InfciMirqvlib^  RB.  Fuller  hopes  to  expand 


where  the  cost  sa%rings  were  almost 
immediate,  Wetzel  says.  The  network 
uses  Cisco’s  CallManager  and  other 
related  call  center  and  unified-messag- 
ing  products. 

*n>e  savings  vary  dramatically  — 
from  20%  to  80%  —  depending  on  the 
application  and  the  age  of  the  analog 
pbrae  systems  replaced  But  Wetzel 
says  the  average  savings  delivered  by 

_  switching  from  traditional 

analog  phone  services  to 
VOIP  1^  been  about  50%. 
the  end  of  this  year. 


er  of  adhesives,  sealants, 
coatings  and  paints.  OmmJm 

VOIP  tech^logy  finally  • 

proved  reliable  and  sturdy  ^ 

enough  for  use  this  past  vakiina 

summer.  Wetzel  says.  The 
reliability  comes  from  the 
additioa  of  centralized  processing, 
which  reduces  the  overhead  of  having 
multiple  local  processing  locations  and 
provides  remote-site  recoverability.  So 
if  a  WAN  circuit  fails,  the  calls  can  still 
be  completed. 

RB.  Fuller  uses  VOIP  at  30  sites 
globally,  inciKporatiitg  about  3.500 
digital  phones.  Most  of  the  sites  are  in 
the  LLS,  with  the  remainder  scattered 
throughout  Europe.  South  America 
and  the  Asia-I^tcinc  Rim.  in  places 


the  VOIP  network  to  41  lo- 
,xm cations  in  30  countries. 
rxM  That  will  mean  mote  u^- 
fnhfnn/  bypass  savings  —  where  m- 
temational  legularioos  per- 
mil  —  and  will  reduce  trav¬ 
el  and  long-distance  bills 
when  employees  use  the  internal  au* 
dioconferendng  capability. 

Over  the  next  four  years,  Wetzel  es¬ 
timates  that  RB.  FuUct  will  save  about 
$2  million  because  of  its  VOIP  nwest- 
ment.  thus  proving  that  it’s  possible  to 
achieve  an  ROI  with  this  chaUenging 
technology,  k 


DePompaisafrttiancewriUrand 
editor  in  Gtnnantpwn.  Md.  Cantact 
her  at  bdepompa@<nd.com. 


VOIP  Best  Practices 


Han  are  toM  ttpf  tram  cur 
tomara  and  anaiyMs  for  a  gan- 
nar  mgraoBn  lo  voica  ovar  ■* 


■  Conebet  an  audU  of  aiMing 
taciwoiogy.  Include  hardtwevln- 
taoe:  cabing  nfrastruclure.  from 
the  desktop  to  0)8  dosel  to  the 
bacMnne;  the  network  archill 
ture;  redundancy.  unirrtBnuptKile 
power  and  security  requirements: 
and  policy  management  for  ntdb- 
pie  types  of  traffic. 

■  Racovdza  tint  volca  tnmpa 
(tata.  Becauee  viace  quality  must 
be  high  to  persuade  users  to  ac¬ 
cept  VOIP,  data  networking  prafes- 
skmals  must  learn  to  accept  that 
voice  tr^  must  be  prioriiaed 
overdataoncorpomtenMwofks- 
a  ddficuH  culural  leap  lor  some. 

■  Oilamiine  bandwidth  ra- 
quirannnbi,  and  don't  ba 
graady  abaiit  ooa^naaaini 
voioa  cala.  Some  s^ipbers  hype 
3k)-1  compression,  bii  be  satis¬ 


fied  wdh  2-to-l  or  25kr-1  it  order 
to  keep  service  qualty  high. 

■  Uadarataad  ^aW  goMam- 
rmnt  tal  bypaai  ragidrfeM.  If 
may  not  be  to  offer  fhedkjd 
daing  tor  Mematlonal  cals  to  and 
from  certain  ooixitoes. 

n  niGmnaa  Danmm  nnonny. 
Use  cenirakzed  consokdited  net¬ 
work  managemert  hx4s  to  manage 
performance. 

■  StfefcwMiatongtoVaP 
pnwMn.  Thu  wl  help  to  avoid 
fingerixwnting  arnong  vendors 
Mwnperfarmartoe  problems  erupt 
Plus,  infegralina  IP  telephony  prod¬ 
ucts  front  multiple  vendors  is  difli- 
culL  users  say. 

■  Kaagltapan.Chooseeqjto' 
mBnithat'snleroperable.andsup- 
portanopenerGhitoctureenwron- 
ment  But  bemme:  Some  vendois 
daim  that  then  products  are  open 
and  nteroperaUe  when  in  fact 
they're  not  So  chaienge  them  ar>d 
get  customer  rrierwees  upkonl. 

-  Barbara  DePompaRBimeis 
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Using  the  new 
AS2  protocol, 
Web-based  EDI 
saves  thousands 
ofdollars,butyou 
have  to  become 
your  own  VAN.  By 
Robert  LScheier 

WHEN  A  COMPANY  AS  big  as  Wal-Mart 
talks,  everybody  listens. 

When  the  retailer  announced  in 
September  that  it  would  do  elec¬ 
tronic  data  interchange  (EDI)  with 
suppliers  over  the  Web  instead  of 
using  value-added  networks  (VAN),  it  was  a  signal 
that  EDI  over  the  Web  is  ready  for  heavy-duty  corpo¬ 
rate  use  after  years  of  development. 

Driven  by  the  prospect  of  saving  thousands  of  dol¬ 
lars  a  month,  more  and  more  trading  partners  are 
sending  EDI  messages  over  the  Internet  —  the  clos¬ 
est  thing  in  networking  to  a  free  lunch  —  rather  than 
over  third-party  network  services,  according  to  ven¬ 
dors  and  analysts. 

Although  such  a  move  can  pay  for  itself  in  as  little 
as  two  months,  it  requires  customers  to  do  some  of 
the  work  the  VAN  used  to  do,  such  as  making  sure 
the  proper  person  is  notifred  if  a  purchase  order  or 
invoice  doesn’t  get  through.  However,  if  customers 
can  cost-effectively  become  their  own  VANs  and 
choose  the  right  Web  EDI  tools,  the  savings  can  be 
compelling. 

Wal-Mart  Stores  Inc.,  which  declined  to  comment 
for  this  story,  is  using  Commerce  Suite  software  from 
iSoft  Corp.  in  Dallas  to  do  EDI  over  the  Internet.  It’s 
something  iSoft  CEO  Christian  Putnam  says  “some 
of  Wal-Man’s  largest  trading  i>artners  have  been  do¬ 
ing”  for  almost  a  year. 

Jewelry  and  eyeglasses  distributor  AAiFoster- 
Grant  Inc.  in  Smit^eld,  R.I.,  has  so  far  moved  only 
four  of  its  30  customers  to  EDI  over  the  Web.  but  its 
VAN  bills  have  already  dropped  8%  to  10%  per 
month,  says  IT  director  Martin  Temple.  And  office 
furniture  manufacturer  Haworth  Inc.  exp>ects  to  save 
$3,000  per  month  by  moving  EDI  traffic  at  headquar- 
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ters  from  a  VAN  to  the  Web.  says  Steve  Wilkins,  a  figure  hi 
manager  of  application  support  and  development  at  One  e 
the  Holland.  Mich.-based  company.  less  rein 

Of  course,  it  has  been  possible  to  do  EDI  transac*  issue  foi 

tions  over  the  Web  for  years.  But  it  often  meant  in-  matic  pf 
stalling  software  ftom  the  same  vendor  at  both  ends  ners  froi 
of  the  transaction,  something  that's  hard  to  do  for  Web  cot 
thousands  of  trading  partners,  many  of  which  arc  AS2  doe 

small  businesses.  But  over  the  past  year,  two  things  load  bai 
have  greatly  boosted  acceptance  of  EDI  over  the  vendors 

Web.  says  Pete  Abell,  director  of  retail  research  at  Anott 

AMR  Research  Inc.  in  Boston.  nonrepv 

One  is  the  widespread  adoption  of  AS2.  the  Elec-  transact 

tronic  Data  Interchange  Internet  Integration  Applic-  bandied 
ability  Statement  2  protocol  AS2  provides  certifi-  probletc 
cate-based  encryption  for  security  and  data  com-  nam.  sic 
pression  for  better  performance. 

The  second  is  interoperability  test-  vm 

ing  of  AS2  products,  liie  testing  is  PASSMO  ThE  ItSI 

sponsored  by  LawrenceviUe,  N.].-  OiunniGnd  Gnwp  he.  provides  a 

based  Uniform  Code  Council  Inc.  and  of  praduds  that  haw  passed  Hs  AS1 

performed  by  Fbrt  Worth,  Texas-based  and  AS2lnteroperabily  taste  at 
Drummond  Group  Inc.  ow»wAwBwioadorw<u»i 

So  fat  more  ihw  a  dozen  vendors  M.J  j2/|preAw*i-asLldiB 
have  made  the  Drummond  cut,  ioclud-  O  ww.*wiwion^oiip.^ 
ing  bTVade  Inc,  iSoft,  Cyclone  Com- 
merce  Inc.  and  Sterling  Commerce 

Inc.  This  means  a  large  supplier  can  buy  a  single  the  sam< 

Web  EDI  package  and  be  sure  it  will  work  with  all  of  along  w 
its  customers,  rather  than  having  to  buy  different  tomers, 
software  for  use  with  the  various  VANs  its  major  months, 
customers  use.  _ 

AS2  also  eliminates  the  need  to  install  proprietary  TlIBB  I 
software  at  supplier  sites,  because  suppliers  can  con-  Other  pi 
duct  EDI  either  through  a  Web  browser  or  by  using  security 
AS2-compliant  client  software,  often  provided  free  Apple,  v 

or  at  a  nominal  cost  by  a  supplier's  customer  or  a  at  bTrad 
software  vendor.  Window 

With  ASZ  managing  the  certificates  that  encrypt  firewall 

ai>d  decrypt  EDI  documents  “is  not  real  difficult,”  but  then 
because  TDPeer  from  blVade  provides  a  “structured  that  can 
library”  to  track  and  manage  the  keys  used  by  trading  Accor 
partners,  says  Eileen  Newell  a  systems  analyst  at  to  make 
AAi.FosterGranL  through 

Newell  says  she’s  not  too  worried  about  security,  per  day 
especially  after  seeing  an  EDI  document  a  trading  toring  ti 
partner  had  encrypted  using  the  wrong  key.  The  Vendt 

message  was  totally  unrccogniz^le  just  as  it  ger  whe 

would  be  to  a  hacker  who  used  the  wrong  key.  di^sit 

but  (he: 

Addressing  Concems  -whaiu 

Not  everyone  is  so  confident  John  Semeoek.  manag-  Semei 
er  of  strategic  tectuiolc^  at  Levy  Home  Entertain-  over  wh 

ment  LXC  is  used  to  doing  EDI  transactions  with  transmi: 
customers  using  the  earlier  ASl  protocol  in  which  start  bai 
security  is  managed  by  the  Simple  Mail  Thmsfer  and  as  o 

Protocol  and  EDI  transactions  flow  to  a  ^tecific  mediate 

mailbox  on  his  system.  When  the  Hillside,  111,  book  with  otl 
distributor  moves  to  AS2.  as  required  by  Wal-Mart.  or  nuini 
he’ll  need  to  open  his  internal  systems  to  HTTP  traf-  But  Fi 
fle  coming  directly  from  his  customers.  most  oo 

“Obviously,  I'm  going  to  try  to  lock  that  down  as  cut  cost 
tightly  as  I  can,”  by  allowing  inbound  traffic  only  Even  if  i 
from  specific  IP  addresses,  he  says,  many  fo 

“But  it  becomes  very  dangerous  if  they  change  IP  - 

addresses  or  have  a  range  of  IP  addresses.*  Semenek  Schderi 
says,  which  would  require  him  to  constantly  recon-  be  reach 
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figure  his  firewall  to  maintain  security. 

One  early  concern  —  that  the  Web  is  slower  and 
less  reliable  than  VANs  —  doesn't  seem  to  be  a  big 
issue  for  IT  shops.  Customers  say  they’ve  seen  dra¬ 
matic  performance  increases  by  moving  trading  part¬ 
ners  from  dial-up  connections  to  high-bandwidth 
Web  connections.  The  data  compression  provided  by 
AS2  doesn't  hurt,  and  neither  do  capabilities  such  as 
load  balancing  and  queuing,  which  are  offered  by 
vendors  such  as  iSoft. 

Another  service  typically  provided  by  VANs  is 
nonrepudiation,  chat  is,  proving  a  customer  sent  a 
transaction  in  case  of  a  dispute.  Nonrepudiation  is 
bandied  by  the  AS2  protocol  and  isn’t  much  of  a 
problem  in  the  busincss-to-business  world,  says  Put¬ 
nam.  since  suppliers  typically  “don’t  argue  with  their 
major  custcxncrs”  over  such  issues. 

One  j<^  that  can  take  extra  dmc. 
:iBT  though,  is  configuring  fuvwaUs  to 

c-provilesafet  make  sure  that  only  right  traffic 
BpBssediteASI  gets  through.  Tasks  such  as  this  are 
■Ity  taste  at  tajj^s  longer  to  bring  a  new 

wfommiwitf  trading  partner  into  the  EDI  loop. 

cti^LMini  Newell  says. 

When  Newell  used  a  VAN,  bringing 

_  up  a  new  business  partner  on  EDI 

took  only  about  eight  hours.  But  doing 
the  same  thing  for  one  new  customer  on  the  Internet, 
along  with  testing  EDI  Web  links  for  two  other  cus¬ 
tomers,  “has  been  my  full-time  job”  for  the  past  two 
months.  ^  says. 

Time  Eater 

Other  problems  can  arise  when  st^  that  improve 
security  cause  data  formatting  problemsi.  says  Kerri 
Apple,  vice  president  of  development  and  operations 
at  bTrade  in  Irving.  Texas.  One  example:  Putting  a 
Windows-based  AS2  server  outside  the  corporate 
firewall  will  help  keep  the  internal  network  Siecure, 
but  then  you’ll  have  to  translate  that  data  into  a  form 
that  can  ^  read  by  an  A5/400  behind  the  firewall 

According  to  Newell  monitoring  EDI  transactions 
to  make  sure  that  the  proper  transactions  went 
through  over  the  Internet  takes  an  extra  half-hour 
per  day  on  top  of  the  hour  she  already  spends  moni¬ 
toring  transactions  done  over  a  VAN. 

Vendors  build  alerts  into  their  software  that  trig¬ 
ger  when  a  trading  partner  fails  to  send  a  “message- 
di^sition  nocifkation”  to  the  sender,  says  Apple, 
but  (he  sender  must  sdU  have  someone  who  i^ws 
“what  to  do  in  the  event  of  these  Allures.” 

Semenek  is  also  concerned  that  be'U  lose  control 
over  when  be  receives  and  roust  respond  to  EDI 
transmissions  ftom  his  trading  partners.  ”If  they  just 
start  banging  out  transactions  whenever  they  choose 
and  as  often  as  they  choose,  they  roi^t  expect  an  im¬ 
mediate  response,”  he  says,  which  could  interfere 
with  other  scheduled  systems  work,  such  as  backup 
or  maintenance. 

But  Frank  Kenney,  an  analyst  at  Gartner  Inc,  says 
most  companies  are  turning  to  EDI  over  the  Web  to 
cut  costs,  not  to  process  transactions  more  quickly. 
Even  if  it's  not  a  ftee  lunch,  it’s  plenty*  appetizing  for 
many  former  VAN  customers.  I 

Scheier  is  a  freelance  writer  in  Boyiston,  Mass.  He  can 
be  reached  at  rscheier^icharterjiet 
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Web  EDI: 
Tools  and 
Services 

Technology  that  lets  you  become  your 
own  VAN  6  avotaUe  fnjm  8  wahety  o< 
vendors  as  softnwe.  services  or  a  com* 
brnabot)  of  the  twa  AvaAafale  software 
tools  rnckide  the  following. 

■  Bizness  Transact  Tools  from  FNei 
Sehiliom  he.  in  Newport  Beach.  CaU 

■  Interchange  from  Cyclone 
Comnarce  Inc.  in  Scottsdale.  Anz. 

■  Commerce  Suite  softnwetrom 
Soft  Carp. 

■  TDNpne.  TDfW.  TOAccess  and 
TDBrowser  softnKve  from  bTrada  bic. 

Meanwhie.  ntegrabon  vendor  web* 
bMwds  bic.  n  Fairfax.  Va,  olfers  AS2 
sigiport  as  an  opbon  •)  Us  Inlegrabon 
Ptaltorm.  as  dog  Tfcoe  Software  Inc.  ■) 
RNo  Ato.  Call,  wdh  its  Buaness  Con¬ 
nect  ASS  Transport  product  Lexington. 
Ky.-besad  Omm  Orecl  UC  offais 
Web-based  EDI  g  a  service  (0  smaM  and 
iTiidsize  suppliers  doinQ  busines  wdh 
large  customers.  Owens  Direct  daims 
that  it  can  EOFenaUe  such  ostomers  m 
g  liMe  g  one  day  and  br  g  iOte  g  S2S 
per  month  *  in  adiMion  to  the  cost  of 
th«  exsting  tntemef  comeebons 

Stam  OmA  Natworhs  toe.  In  Red¬ 
wood  City.  Cato,  offers  AS2  comecbvily 
g  a  service  that  indudg  redtfidanl 
hardware,  round-the-dock  support  and 
adapters  to  bridge  venous  protocols  such 
g  the  SWin  financai  serviog  XT- 
dustry  protocol  and  the  ISO  8583  proto¬ 
col  used  n  credM  card  transactions. 

'There  is  no  recognized  leader* 
arnong  the  vendors,  says  Gartner  anaiysl 
Frank  Kenney,  because 'every  company 
B  going  to  approach  integration  and  6^ 
dfierendy* 

Some  of  the  VANs  themselves  are 
mowigaitotheAS2spaoB.hesays.ln- 
dudng  Stofftne  Commeraa  toe,  in 
Oubiai  Ohio,  wtti  Its  IntograiQr  and  Intor* 
mabon  Broker,  and  ftE  Global  Exchange 
SarvtoB(toc.in6aMieriburg.  Md,with 
its  biterprse  System. 

1b  owrbuyng- Kenney  adwsg 
custamerstodacidewhichoftheVAN- 
kke  sarvicg  they  need  before  choesaig  a 
vendor.  In  some  cases,  he  says,  the  Web 
EDI  technology  can  be  bougto  g  an  add¬ 
on  to  aiftastrucbie  software  the  cus¬ 
tomer  already  owns. 
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What  you  need  to  do 
to  lana  a  job  and  keep 
your  skills  fresh  as  a 
network  manager. 

By  Sharon  J.  Watson 

IF  A  CORPORATE  NETWORK  were  an  orchestra,  net¬ 
work  administrators  would  be  the  section  lead¬ 
ers.  ensuring  that  their  links  in  the  network  were 
ready  to  play  their  parts.  The  netwoiic  manager 
would  be  the  concertmaster.  responsible  for  tun¬ 
ing  the  entire  orchestra  so  it  could  deliver  _ 

whatever  the  conductor  —  the  CIO  —  re¬ 
quired  of  it  _ 

But  in  today's  pared-down  IT  departments. 
some  netwoik  manners  fmd  themselves  managing 
basic  adminbtration  tasks  as  well  as  taking  responsi¬ 
bility  for  overall  network  operations,  project  imple¬ 
mentation  and  long-term  infrastructure  planning. 

"It's  almost  double  duty,"  says  Nat  Dodge,  chief  oper¬ 
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ating  officer  at  Directfit  an  IT  recruiting  firm  in 
Irvine,  Calif.  "Network  managers  should  be  prepared 
to  wear  a  lot  of  hats." 

Bob  Dulski.  director  of  information  services  for 
the  Brookfield  Zoo  in  Brookfield,  UL.  was  recently  in 
the  market  for  just  such  a  person.  IWe  were]  looking 
for  someone  with  a  lot  of  breadth,"  says  DulskL  The 
previous  network  manager  left  to  manage  Active  Di¬ 
rectory  at  a  corporation.  At  the  zoo.  the  network 
manager  is  required  to  oversee  many  different  sys¬ 
tems  and  users,  says  Dulski. 

A  job  opening  like  the  Brookfield  Zoo’s  is  a  rarity 
these  days.  There's  not  a  lot  of  hiring  going  on."  says 
Dodge.  And  when  a  company  does  have  a  job  opening, 
he  says,  employers  try  to  hire  workers  who  are 
overqualifi^  for  the  available  positions.  That  may 

_  work  ifthere's  a  growth  path,  says  Dodge,  but 

the  risk  is  that  the  employee  won't  stay  with 
the  company  or  won't  be  happy  and  produc- 
live  in  a  mission-critical  position. 

‘^e've  had  people  turn  down  such  jobs  even  when 
they've  been  out  of  work  12  months."  Dodge  says.  His 
recommendation  to  job  seekers:  Look  for  contract 
woik.  because  it  will  be  the  first  area  to  pick  up 
when  the  economy  improves. 
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TMk  Diredor  ol  information  services 
EiHpieiitr  Brookfield  Jjm  in  Brooldiekl.  hi., 
a  200'acre  faobry  that  serves  2  mhlioniilus 
MsRors  armualy  ^  B  open  3K  days  a  year. 

Hundwr  ef  IT  protew  ioniir  Sin 
fbcentty  IBkI  fT  poaitian:  Network 
manaoer 

Most  network  managers  worry  about 
keepmg  thef  hurnan  users  coritenL  At  the 
Brookfieltf  Zoo.  the  IT  network  serves  not 
on^  500  iul-time  workers  and  approxi* 
maieiy  1.000  seasonal  employees,  but 
also  endangered  OTimais  ranging  from 
golden  ion  tamanns  to  Humboldt  pen¬ 
guins  to  western  lowland  gorillas. 

‘Our  animals  need  care  every  day.* 
says  Dulski.  noting  that  the  zoo's  network 
indudes  s^-life  safety  and  environ' 


mentmonitoring  devices,  as  well  as  sys¬ 
tems  used  by  the  zoo's  geneticists  and 
conservationists,  retail  and  food  outlets, 
zoo  vtsKors  and  administrative  depart¬ 
ments.  "We  get  to  work  on  a  lot  of  inter¬ 
esting  protects.*  Dulski  says. 

The  new  network  manager  at  the  zoo 
reports  to  DulsKi.  Basic  prerequisites  for 
the  position  included  a  mast^'s  degree  in 
computer  science.  Microsoft  NT  and  Cis¬ 
co  netvwxk  certifications,  proficiency  in 
configiMing  and  troubleshooting  Osoi 
switches  and  at  least  two  years'  experi¬ 
ence  at  a  stmHar-size  operWm. 

In  addition,  the  network  manager  rec¬ 
ommends  bandwidth.  storageandsecuri- 
ty  measures.  He  ateo  must  manage  a  mix 
of  older  and  culhn^'edge  network  tech¬ 
nologies.  Potentiai  pr^ects  include  de- 
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Understanding  network  and  Internet  protocols  like 
TCP/IP  and  HTTP  is  a  basic  requirement  for  net¬ 
work  managers.  Wireless,  security,  voice  over  IP  and 
other  convergence  skills  continue  to  gain  impor¬ 
tance.  Employers  also  look  for  expertise  in  technolo¬ 
gies  relevant  to  their  specific  network  implementa¬ 
tions.  such  as  Windows  XP,  Active  Directory,  Ex¬ 
change  and  Cisco  routers.  Communication  and  client 
management  skills  are  especially  important  for  net¬ 
work  managers,  who  often  have  to  work  with  both  IT 
stafb  and  end  users.  Project  management  skills  can 
help  network  managers  map  and  manage  user  expec¬ 
tations.  says  the  CIO  at  a  large  Midwestern  motorcy¬ 
cle  manufacturer  who  asked  not  to  be  identified. 

Training 

Most  employers  require  a  bachelor's  degree  in  com¬ 
puter  science,  and  many  prefer  a  master's  degree. 
Hiring  companies  look  for  Microsoft  and  Cisco  net- 
woric  certifications  but  also  want  hard  evidence  of  a 
job  candidate’s  hands-on  experience.  Most  require 
five  to  10  years  of  experience  and  expect  network 
managers  to  keep  up  with  the  latest  technologies,  of¬ 
ten  through  vendor  training  programs. 

Salary 

According  to  Con^Hiterworlcfs  2002  Salary  Survey, 
total  compensation  for  network  managers  ranged 
from  about  $61,000  in  the  health  care  industry  to 
$94,000  in  computer  services  and  consulting.  'The  av¬ 
erage  total  compensation  for  network  managers  sur¬ 
veyed  was  $70,864. 1 
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Signing  8>e  network  lo  encompass  more 
wireless  devices  to  be  used  by  visttofs  or 
the  zoo's  scientists.  The  manager  also 
must  juggle  the  various  needs  of  the 


Fmd  out  why  (he  MicniscA  and  Cisco  certifications  are  now  mere  pre¬ 
requisites  m  the  networidng  game 
^  QulckUnk3S226 


Brookfi^  Zoo's  wide  range  of  end  users. 

Dulski  says  managing  the  network  of 
an  dways-open  instiUrtion  with  demand¬ 
ing  clients  can  be  stressful.  Work  hoixs 
canbekmgandinegtriar.  Furthermore, 
while  the  zoo  offers  good  benefits,  as  a 
nonprofit  it  can't  offer  the  highest  salar¬ 
ies.  Pay  for  this  position  is  in  the  range 
from  the  high  S60ks  to  low  STOks. 

Still,  competition  was  stiff:  A  single  on¬ 
line  ad  for  the  position  brought  in  500  re¬ 
sumes  in  just  a  few  days.  Sal^  requests 
also  were  more  in  line  with  sWIh  than  they 
have  been  in  the  past.  Oui^  says. 

One  hard*to-v^  reward  the  position 
offers  is  far  more  variety  than  a  typical 
net^rk  manager  might  find  m  a  corpo¬ 
rate  setting.  Dulski  points  out.  *You  won't 
be  doing  the  same  thing  twice.*  he  says. 


Sharon  J.  WalsonisafreelatKe 
writer  in  Oticago.  Contact  her 
at  siwatson§^eracce$s.com. 


Computerworld’s 
10th  Annual  Best  Places 
to  Work  In  IT! 


Is  the  IT  department  at  your  company 
a  great  place  to  work? 
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Computerworld  is  conducting  its  10th  annual  Best  Places  to  Work  in  IT  survey,  and  we  need 
your  help.  Each  year,  our  special  report  and  listing  recognizes  the  100  Best  Places  to  Work 
that  offer  their  IT  staff  the  best  benefits,  competitive  salanes  and  opportunities  for  training 
and  advancement.  Best  Places  to  Work  also  offer  their  IT  workers  interesting  projects  and  a 
flexible  and  diverse  work  environment. 

We  want  to  hear  from  you!  Now’s  the  time  to  get  your  outstanding  company  recognized  on 
Computerworld’s  exclusive  listing  of  Best  Places! 

DEADLINE  FOR  SUBMISSION  IS  FRIDAY.  JANUARY  31. 2003. 


To  apply  for  this  special  recognition,  visit  the  Computerworld  Web  site  and  fill  out  our  survey. 

http://computerworld.com/bestplaces03 
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Predictions:  AT&T  will  be  acquired 
by  a  Baby  Bell,  and  only  a  tew 
megacarriers  will  survive 
the  telecom  depression. 


■  OOUDS  AHEAD 

Private  wide-area  networks  are  dead: 
long  live  the  public  cloud.  With  the  ad¬ 
vent  of  inexpensive,  secure,  easy-tcr- 
manage  public  connections  that  reach 
the  entire  range  of  available  IT  de¬ 
vices.  businesses  will  run.  not  walk,  to 
put  their  WANs  over  the  public  cloud 

■  Sheldon  laude,  chairman,  Center- 
Beam  lnc„  Santa  Clara,  Calif. 

■  ONUr  A  FEW  SURVIVE 

After  the  dust  settles  in  three  to  five 
years,  I  see  three  to  four  megacarriers 
surviving  in  each  local  market  in  the 
U.S.  These  megacarriers  will  offer  pro¬ 
gressive  pricing  based  on  packet  usage, 
ftat  rates  or  simpUfied  bundles.  They’U 
each  offer  long  distance,  local  service, 
cable,  broadband  Internet  access  and 
wireless  in  each  market,  as  well  as  new 
enhanced  services. 

■  Mike  Scheele,  managing  partner. 
Telecom  Asset  Management  Group, 
SanFhuicisco 

■  DMA  RTTGeRATION  NETWORKS 
Ubiquitous  gigabit  bandwidth  within 
buildings  and  campuses  will  make 
'logicaj^  distributed  databases”  feasi¬ 
ble  in  the  next  two  to  three  years  for 
early  adopters.  At  gigabit  speeds,  net¬ 
works  start  to  look  like  disk  I/O  chan¬ 
nels.  This  means  that  mudt  ftoer- 
grtined  data  operadoos  can  occur  over 
loosely  coupled  data  components  in¬ 
stead  of  a  huge  central  database.  Hiis 
is  a  very  powerful  wa^ 
of  looking  at  the  entc 
prise  data  integration 
problem.  But  it  will  gen^ 
erate  a  lot  of  traffic  on 
the  network,  so  get  ready. 

■  Alden  Hoit.  chief  technology  officer. 


The  Adrenaline  Group,  Arlington,  Va. 

■  UNFED  MESSAOMB  WWS 

By  200S,  voice  mail  will  cease  to  be  a 
business  and  will  be  100%  replaced  by 
unified  messaging.  The  voice  mail  in¬ 
stalled  base  will  be  completely  re¬ 
placed  by  2010. 

■  Mark  C  Straton.  senior  vice  president, 
Siemens  Enterprise  Networks,  Reston,  Va 

■  GtBABIT  ETHERNET  PREVALS 

The  LAN  has  adopited  Gi^btt  Ethernet, 
the  MAN  is  following  suit,  and  the 
WAN  will  experience  the  Gigabit  Eth¬ 
ernet  revolution  over  the  next  two 
years.  Why?  Large  enterprises  are  now 
facing  the  ultimate  IT  challenge:  to  de¬ 
liver  anything  business  line  managers 
require  over  the  existing  network. 
With  the  help  of  technologies  like 


Dense  Wavelength  Division  Multiplex¬ 
ing.  WAN  managers  will  embrace  Gi¬ 
gabit  Ethernet  for  the  high  bandwidth, 
efficient  provisioning,  scalability  and 
ease  of  use. 

■  Robert  W.  Norton,  founder  and  vice 
president.  Select  Inc,.  Westwood,  Mass. 

■  TTE  BIO  YEAR:  2005 

Corporate  IT  spending  will  start  to 
grow  by  the  end  of 2003,  followed  by 
increased  telecom  spending  toward  the 
end  of 2004. 1  think  2005  will  be  a  big 
year  for  networking:  Carriers  will  offer 
Ethernet  data  services  over  copper, 
wireless  service  providers  will  offer 
802.11  data  services  on  a  wide  scale, 
and  video-on-demand  over  IP  services 
will  be  available. 

•  Ray  Kao.  CEO  and  CTO,  Polaris  Net¬ 
works  Inc,,  San  Jose 

■  PRIVATE  UNES,  RIP. 

Virtual  private  networks  will  become 
the  dominant  means  for  interconnect- 
mg  corporate  networks.  Increasingly, 
we'll  see  VPNs  overtake  traditional 
approaches  such  as  private  lines. 

*  Hossetn  EsIambofchi,  CTO. 
ATSfTCOrp. 

■  SECURITY  ABSORPTION 

By  the  year  2005,  intrusion-detectioD 
systems,  packet  filtering,  and  rirewatl 
and  VPN  appliances  will  be  almost 
completely  absorbed  into  devices  such 
as  switches,  routers  and  wireless  ac¬ 
cess  points.  Thb  is  driven  by  the  fact 
that  the  devices  are  becoming  more  in¬ 
telligent.  as  well  as  a  critical  need  to 
make  security  services  reach  all  points 
of  connection  in  an  enterprise  network. 

■  John  Roese,  CTO,  Enterasys  Networks 
Inc.,  Rochester,  NJI. 


■  AHTACOUKED 

In  2003.  AT&T  will  be  acquired  by 
one  of  the  Baby  Bells  —  most  likely 
BellSouth,  but  SBC  Communications 
will  still  be  in  the  ruiuiing.  WorldCom 
will  sell  off  its  frame-relay  and  tele¬ 
phone  businesses  and  focus  on  EP.  rec- 
ognixing  that  its  only  sustainable  as¬ 
sets  are  its  customers  and  the  UUnet 
backbone. 

■  Mark  Tbomenoksa  chairman  and 
founder,  OpenReach  Inc.,  Wobnim.  Mass. 

■  SMART  REDUNDANCY 

Because  of  the  turbulence  in  the  tele¬ 
com  market,  prudent  businesses  will 
take  advantage  of  plummeting  prices 
for  data  lines  and  always  have  redun¬ 
dant  lines  from  two  vendors,  both  for 
reliability  purposes  and  for  protection 
if  a  carrier  goes  bankrupt,  ’nirns  out 
it's  a  cheaper  way  to  pay  for  business 
continuity.  Remember  what  happened 
when  several  DSL  vendors  closed  their 
doors  and  left  their  customers  high 
and  dry.  So  move  to  public  nets,  but 
use  both  suspenders  and  a  belt! 

■  Sheldon  Laude,  CetaerBeam 

■  F«tEWUI52.0 

Firewalls  as  they  are  now  employed 
will  become  Irrelevant  by  2006  [Quick- 
Link  347491.  Because  of  the  increasing 
adoption  and  rollout  of  Web  applica¬ 
tions,  which  flow  over  Pon  80.  today’s 
firewalls  will  become  increasingly  in¬ 
effective  unless  they  evolve  to  inspect 
at  the  content  layer.  Next-generatioo 
flrewall-Uke  security  roust  be  able  to  in- 
^>ect,  filter  and  deny  access  at  the  ap¬ 
plication  content  level,  not  just  the  net¬ 
work  layer. 

■  Erik  Giesa  Srector  of product  man- 
qgement,  F5  Networks  Inc.,  Seattle 


IP  Devours  All 


The  jnlwnat  ftntocol »  Nib  Pac  ihn.andll\Miaalsvfy- 
tMng  wNNn  llw  fwit  10  yaan. 

-  Hossan  Estambolchi.  CTO.  ATiT 

Frvne  ralay  wN  bacoma  obaoMa  and  be  replacad  by  F  with¬ 
in  10  yaan.  Already.  50%  of  companies  are  now  planning  to  move 
fo  F.  with  moN  trands.  large  cornpanies  wi  make  (he  transition 
fNSt  fofowed  by  Fiwknarkel  arri  smaS 
The  transition  wl  occur  because  all  of  the  applicatioiis  in  the 


computing  work]  use  IP.  Today  we  have  to  convert  that  protocol 
irdo  frarnes.  and  we  doni  have  the  flexMity  to  give  frarres  dNeient 
pnorilies.  F  offers  the  fiexiiiity  of  estaWst^  dW 
ent  priorilies  based  on  the  application  or  the  user. 
-An&ewBofgstrom.C£0.  T-System  North 
America.  lisib.  fit 
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Ever\’  customer  is  an  investment.  But  are  vou  investing  wiselv; 
mySAP"  CRM.  the  only  open  and  integrated  CRM  solution,  makes  valuable 
customer  data  available  to  vour  entire  organization.  In  real  time.  So  the  back 
office  knows  what  the  front  office  knows,  which  makes  it  easier  to  give 
customers  w  hat  thev  need.  A  lot  more  efficiently.  And  for  a  lot  less  money. 
Visit  s^.com  or  call  800  880  1727  to  find  out  more  about  mvSAP  CRM. 
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IT  CAREERS' 

PANEL  ADDRESSES  DIVERSITY  ANEW 

When  Robert  Knowling,  chairman  of  SlmDesk  Technologies,  reviews  information  about 
diversity  and  the  IT  industry,  he  has  two  reactions.  The  first  is  a  sense  of  overwhelming 
as  he  scans  the  reams  of  data  and  studies  compiled  over  the  past  10  to  15  years.  The 
second  is  a  sense  of  urgency. 

Diversity  convened  by  the  Information  Tech¬ 
nology  Association  of  America.  Knowling  and 
his  fellow  parvelists  have  reviewed  data  and 
studies.  Panel  members  began  wort  last  fall, 
meeting  in  December  to  begin  articulating  an 
action  plan.  Or>e  fact  that  stood  out:  11  percent 
of  those  enrolled  in  IT-related  university  studies 
are  AfiicarvAmehcarts.  However,  only  3  percent 
of  them  land  jobs  in  the  industry.  Knowling  is 
asking  for  parallel  data  on  other  mirrorities  and 
women,  but  believes  it  will  be  comparable. 

I  use  the  expression  that  a  lot  of  peopla  A  final  plan  will  be  ready  In  time  for  ITAA’s 

have  been  enjoying  the  issue  of  diversity  for  a  Workforce  Convocation  in  May.  Already. 
long  time.' he  says.  plan  hints  of  something  different  -  including 

'I've  seen  a  lot  of  assessment  and  a  look  at  the  issue  of  workforce  development 
generic,  rather  benign  recommende-  and  diversity  in  the  same  n>anrter  that  a  bust* 

tions.  Wtat  I  have  not  seen  are  profound  ness  would  a  product  or  busirvess  life  cycle, 

ideas  that  can  be  embraced  by  the  busi-  from  grade  school  Introduction  tt>roogh  diverse 

ness  community  and  help  us  eradicate  representation  on  high  tech  companies'  boards 

the  problem."  of  directors. 

Knowling  and  a  group  of  his  peers  plan  'Diversity  in  the  high  tech  and  IT  industries 

to  develop  those  profound  recommenda-  has  long  been  a  problem.'  says  Krvowling.  The 
tions  as  members  of  e  Blue  Ribbon  Panel  on  challenge  has  been  made  more  difficult  with  the 


downsizing  of  the  high  tech  sector.  At  the 
end  of  the  day,  we  plan  to  present  an  action 
plan  that  will  increase  the  number  of  diverse 
candidates  going  forward.  If  in  two  years  we 
haven't  changed  the  profile,  then  we  haven't 
succeeded.' 

Others  represented  on  the  Blue  Ribbon  Pan¬ 
el  on  Diversity  are  ITAA,  Catalyst,  Computing 
Research  Association,  The  Benton  Foundation, 
nr  Educational  Services  Inc..  PricewaterhousaC- 
oopers  LLP,  OpNet  Community  Verttures  Iik.. 
Plugged  In.  AOL/Hme  Warner,  Education  Devel¬ 
opment  Center  lr>c,  U.S.  Department  of  Labor. 
Columbia  University.  WorldCom,  the  National 
Urban  League.  Unisys  Corporation.  Women 
Work!,  University  of  Iowa,  Oracle  Corpora¬ 
tion.  Howard  University  Television,  Northrop 
Grumman  Information  Technology.  Dice 
Inc..  Career  Communications  Group  IrK..  and 
SRA  International. 

For  nrK)re  information  on  the  panel's  work 
and  the  May  Convocation,  go  to  www.itaa.org 
and  select  Workforce  Development 

IT  Careers 

For  funher  information,  plesse  contact: 

Naaqr  J.  PercnaL  Diroctor.  RecrsiMN  Advortisiag 

at  800-762-2S77 

SOO  Old  Cormecticut  Path 

Frarrengham,  MA  01701 
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Por«««r20yMr».  Synlai  amptoy***  acrow  North  America.  Eufopa.  and 
Asia  hava  halpad  build  advanced  infarmabon  ladwology  aya«ama  far  lead- 
ing  Fbrbjne  500  companiea  and  govammant  organixabona  to  impniva  lhair 
elteaney  and  cowipaUbvinaae.  Today.  Synial  prnfassionala  era  building 
rawanBnQ  raraan  by  providing  aolutiona  in  a^Miainaaa.  CRM,  Wab  Daaign 
and  Data  Warabouaing. 

Coma  diacovar  wdiy  Forbea  magazine  piacad  Syntal  second  on  its  list  of 
"The  200  Bast  Small  Companies  in  America'  and  Business  Weak  ranked 
usill  onitakstef  Hot  Growth  Companies. 

Oua  to  our  rapid  growth,  wa  hava  immediala,  full-tima  opportiaiibas  for 
both  entry  laval  and  esparierKad  Software  Engineers.  Consultants. 
Programmers.  Programmer/Analyais.  Protect  Leaders,  Project  Managers. 
Suparvraora.  Database  Admirristrators.  Computer  Personnel  Managers 
w>d  Computar  Operations/Account  Markagers/ Account  Exacuthrae  with 
any  of  the  foMewing  ekills: 

Mainframe 

•  IMS  Oe/DC  or  062.  MVS/ESA  •  Focus.  IDM5  or  SAS 
COBOL.  eXS 


DBA 

•OAAOE  or  SYBASE 

CHent-Server/WEB 

•Sisbsi 

•  WsfMphsre 

•  Com/DCom 
•WsbArdiitacts 

•  Datawsfshousing 

•  Msmia.  C  ar  UNR 

•  Oracle  Pavsiopsr  or  Dasignar  2000 

•  JAVA.  HTML  AcbvaX 

•  Wab  Consaarca 

•  SAP/TO,  ABAP/4  or  FICO  or  Md 
«SO 


•  Oracle  Applicatioru  A  Tools 

•  lobrs  Notes  Developer 

•  UNR  Siystem  Admirwstralof 

•  UNR.  C.  C**.  Vrsual  C** .  CORBA 
000  or  OOPS 

•  WinNT 

•  Sybeee.  Aceets  or  SQL  server 

•  PeopleSoh 

•  \Asual  Basic 

•  PewarSulder 
■lEF 
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HP  Demos  Grid  Computing  App 


But  business  use 
far  from  a  reality 


BV  JAIKUMAR  VIJAVAH 

HEWLETT-PACKARD 
CalAStweek 
demonstrated  new 
software  that  po¬ 
tentially  could  let  corporate 
users  take  advantage  of  grid 
computing  to  run  business  ap- 
plicattoDs.  But  a  lot  more 
pieces  need  to  fall  into  place 
before  that  becomes  a  reality, 
HP  and  analysts  said. 


Continued  from  page  I 

IBM  iSeries 

prise  Edition  pricing  model, 
companies  wUl  be  charged  flat 
fees,  varying  by  model,  that  let 
them  use  the  full  capacity  of 
their  machines  for  running 
5250  terminal  sessions. 

The  af^roach  replaces  a 
complex  and  very  unpopular 
pricing  scheme  uitder  which 
ffiM  charged  iSeries  users  an 
“interactive  workload”  fee  for 
running  52SO  applications.  The 
multitiered  pricing  structure 
ensured  that  users  paid  pro¬ 
gressively  higher  fees  with  al¬ 
most  every  increase  of  their 
interactive  workloads. 

Ian  )annaa  an  IBM  product 
manager,  said  Enterprise  Edi- 
tioD  pricing  could  improve 
price/performance  on  the 
iSeries  line  by  up  to  80%  in 
some  cases.  That's  because 
the  new  pricing  allows  users 
to  use  the  fuU  capacity  of  the 
system  for  running  interactive 
applications,  with^t  paying 
anything  extra  for  it,  as  they 
w(^d  have  otherwise. 

Some  iSeries  users  wel¬ 
comed  the  change. 

“It’s  about  time  they  did 
this,”  said  Brendan  Carltoa  a 
DeSoto.  Kaa -based  spokes¬ 
man  for  Huhtaoiaki,  a  maker 
of  packaging  materials  with 


Grid  computing  technology 
is  designed  to  let  users  har¬ 
ness  the  computing  power  of 
numerous  systems.  For  exam¬ 
ple.  grids  made  up  of  thou¬ 
sands  of  linked  computers  are 
being  used  to  run  large  engi¬ 
neering  and  scientific  applica¬ 
tions.  mainly  by  universities. 

HPs  demonstration  at  the 
Globus  World  grid  computing 
conference  in  San  Diego  is  a 
step  toward  delivering  the 
same  capabilities  in  a  com¬ 
mercial  application  environ¬ 
ment,  said  Sharad  Singhal,  a 


principal  engineer  at  the  com¬ 
pany’s  HP  Labs  research  unit. 

HP  showed  how  users  could 
link  its  Utility  Data  Center 
software  to  a  grid  computing 
environment,  enabling  dau 
center  resources  to  be  used  by 
grid  users  and  vice  versa.  Sin- 
ghal  said  HP  hopes  to  es’ontu- 
ally  be  able  to  support  gridlike 
networks  on  business 
users  looking  to  increase  the 
computing  power  available  to 
them  will  be  able  to  tap  into  a 
vast  pool  of  shared  resources. 

I  As  part  of  the  demonstra- 


lioa  HP  also  showed  a  tool 
that  uses  drag-and-drop  tech¬ 
niques  to  let  users  define  and 
advertise  their  resource  re¬ 
quirements  in  such  a  network. 

But  increased  security  re¬ 
quirements  and  the  complexi¬ 
ty  of  adapting  commercial  ap¬ 
plications  to  take  advantage  of 
the  grid  computing  model 
means  H  will  be  quite  some 
time  before  the  approach  is 
ttsed  in  business  environ¬ 
ments,  Singhal  said.  ‘These 
things  will  begin  to  take  shape 
in  the  next  year  to  a  year  and  a 


half.”  he  said.  “But  how  quick¬ 
ly  they  become  a  commercial 
reality  is  anybody's  gttess.” 

lonathan  Eunice,  an  analyst 
at  Uluminata  Inc.  in  Nashua. 
N.H.,  said  (he  much  bigber  I/O 
and  application  perforTnartce 
requirements  of  commercial 
data  processing  envirorunents 
will  also  limit  grid  comput- 
ii^'s  appeal  to  business  users. 

’^e  need  to  stop  talking  as 
though  the  traditional  data¬ 
base  appUcation  is  going  to  be 
distrilwted  over  a  grid.”  Eu¬ 
nice  said.  Instead,  be  said,  be 
expects  to  see  companies 
adopt  the  technology  to  power 
large  anal>'5is  applications  in¬ 
volving  corporate  data.  I 


headquarters  in  Espoo.  Fin¬ 
land.  “it  concerned  me  a  lot 
that  they  were  charging  ine 
additiottal  dollars  for  running 
an  interactive  workload.” 

For  example,  when  Huhu- 
maki  upgraded  from  a  smaller 
iSeries  system  to  the  high-end 
i890  last  year,  the  company 
had  to  fork  over  an  ad^tional 
SS00.000  for  its  5250  require¬ 
ments  alone.  Carlton  said. 

“It  was  almost  tike  a  tax  that 
penalized  customers  for  run¬ 
ning  green-screen  applica¬ 
tions,”  said  Michael  Crump,  a 
proiect  leader  at  Saint-Gobain 
Containers,  a  maker  <i(  glass 
bottles  and  jars  located  in 
MuDcie.  tnd.  Like  many 
iSeries  users.  Saint-Gobain 
runs  a  mix  of  newer  software, 
such  as  IBM's  WebSphere  and 
Lotus  products,  on  its  systems. 
But  It  also  continues  to  rely 
heavily  on  5250  applications. 
Crump  said. 

AddRkmal  Models 

With  the  new  pricing  model, 
iSeries  users  are  more  likely  to 
upgrade  their  systems  and  ex¬ 
pand  their  useofS2S0-based 
applications  to  more  end 
users,  said  Thomas  Bittman. 
an  analyst  at  Gartner  Inc.  “We 
have  long  considered  part  of 
the  iSeries  installed  base  to  be 
a  cash  cow.  because  IBM  was 
charging  so  differently  for  in¬ 


teractive  use  vs.  noninterac- 
tive  use.”  be  said. 

Along  with  the  pricing 
charges,  IBM  will  announce 
four  new  iSeries  models,  in¬ 
cluding  a  pair  of  systems  that 
are  based  on  its  Power4  proc¬ 
essor  and  will  join  the  i890  at 
the  high  end  of  the  server  line. 

The  i870  and  i825  come 
with  a  capacity-upgradc-on- 


demand  feature  that  lets  users 
switch  on  additional  proces¬ 
sors  when  they  need  them 
arvd  turn  them  off  when  they 
are  no  longer  required.  For  ex¬ 
ample.  a  company  could  turn 
on  an  extra  processor  in  an 
i82S  and  pay  a  fee  of  $1,100  for 
each  day  it’s  used,  larman  said. 
'They  could  also  buy  the  addi¬ 
tional  processor  outright  for 


about  S50.000.  he  added. 

The  temporary  upgrade  ca¬ 
pability  would  let  users  quick¬ 
ly  access  addibonal  CPU  ca¬ 
pacity  without  having  to  shut 
down  a  system  or  reconfigure 
it.  Carlton  said.  He  noted  that 
Huhtamaki  had  lo  take  its 
iSeries  systems  off-line  for 
nearly  20  hours  the  last  time  it 
did  a  capacity  upgrade  I 


ZoNai^s  Big  Chalenge:  Finding  New  iSeries 


Al  Zolv.  the  newtr  appointed 
general  manaoBr  of  IBM's 
Geitas  bustness  urtL  is  taMng 
charge  af  a  lime  wrtNn  Hie  long- 
standnotedweiogy 
frandiae  18  M  someMno 
ofacRienroads. 

ANhoui^  iSeries  sjfs- 
terns  sllenkyiminenBe 
poputarttyamongexist- 
inQUBsrs.analyilisaid 
eMhasbeanunalieto 
maksffluchheadwvirinanracl- 
mg  new  loere  or  ippicalton 
woiMoadslottttplattorm. 

CM  estimales  that  ttwra  an 
mon  than  40a000  aystans  it- 
stakd  woddwfde.  inoet  dsttiQ 
iolhelm'sAa<400day8.in 
1997.n)u^20%afASi<400 
reveraie  came  kom  rww  tuk 
neas.  aocoitfing  loThomM 
Biltiran.  a  Bartner  analyet.  Last 


year.  ihM  number  was  in  lie  2% 
to  Sponge,  he  said 
Zdv.  who  praviouriy  fan 
CM'S  Lotus  Soflmm  6roup 
unlsaidinanMerwew 
Ihei  much  of  the  drop-off 
iniSerfessatHbnMr 
buyin  has  miultod  from 
toemcneeedpopiiarity 
of  Windows  swvers. 
tngtorwanlBMdwttto 
tuKhemuchmorevig' 
orous  madtsOng  cMpaion  in  a 
bid  to  boost  toe  proHa  of  the 
iSedes  Ine  wttoln  Ms  MMM 
boB  end  wflh  tows  of  otoer 
sy5linH.hesaid 
For  Manoa.  CM  wf  spend 
an  addMonat  S2D  rrdhm  OMr 

toa  nad  IWD  years  to  halp  ra^ 
sMers  martot  toe  nedunas. 
ZbMir  said  Storitognad  quarter. 
M  wt  Meo  boat  mon  than  200 


customer  events  woridwida  to 
Irik  (to  toe  potortW  beneIRs  of 
fiertee  swtorfB. 

On  toe  todnotogy  front  BM 
wi  conlbiue  to  tkid  on  toe 
oaee  of  manaoenit  andaoft- 
ware-totograbon  latoins  tow 
have  bean  htotoiarts  of  toe 
(Sahas  Ine.  Zator  said  foil's 
move  to  binia  a  widt  range  of 
Is  fliddaware  produck  «lto  toe 
new  Wflh-td  Series  modefc 
baino  anooisicad  tok  wetoi  B  an 
eampiB.henalBd 
*lhe  Sahas  has  been  hnown 
to  (Mvai  aimpiciy.  aaaa  of  USB 
and  MMI  Magnbort.' he  aid 
*But  to  the  pad.  [toe  syakma) 
hen  bain  baiad  on  prapriakry 
technoiogiaK  The  li*n  k  about 
toe  aim  massage  on  in  open 
nfrasbuctiie.’ 
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Security  by  Default 

Ate  ¥acaliafi  amsdait  pU  M  returns  10  Ms  gig  ai 
ebig  imniiaaurtnBOtmpaiiy  that  just  >nplen^ 
loigh  naw  secuty  procedures.  1  ask  the  lie^  desk  to 
reacltoale  my  aooam*  Isti  sms.  They  do.  His  new 
passwonf?  PassHwii 'Biil  I  cani  di^  I  -  the 
tough  new  sscialty  Idas  leradie  that  a  password  cant 
be  dwnged  again  tor  live  days.' Ilsh  gnanblas. 'Boy. 
are  tiey  going  to  be  aecue.' 

Nddds?  fkiiafil/  aid;  Tl  arryaria 
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Keep  Windows  Shut 


FRANK  HAYF'-  •  FRANKLY  SPEAKING 


JUST  WHEN  IT  LOOKS  like  Microsoft  has  finally  figured  out 
open  source,  it  comes  clear  that  the  penny  still  hasn’t 
dropped.  Case  in  point:  Last  week,  Microsoft  said  it  will  let 
national  governments  examine  the  source  code  for  Windows 
operating  systems  (see  story,  page  6).  Everyone  at  Microsoft 
was  scrupulously  careful  not  to  mention  Linux,  but  they 
weren’t  kidding  anybody.  Linux  is  making  inroads  in  government 
sales.  Linux’s  source  code  is  available  and  can  be  modified  by  users. 
Until  now,  the  Windows  source  wasn’t  and  couldn’t  be.  To  compete, 
Microsoft  had  to  open  up  a  little  more. 

So  that's  what  Microsoft  did  —  isn’t  it?  True.  And  with  millions  upon  millions  of  lines  of 

governments  that  sign  up  for  the  new  program  Windows  code,  no  IT  boss  in  his  right  mind 
will  be  allowed  to  examine  the  Windows  source  would  seriously  consider  trying  to  vet  it  all. 
only  under  tight  restrictions.  True,  they  won’t  So.  what  were  the  members  of  Microsoft’s 

be  able  to  modify  the  code.  (Microsoft  says  brain  trust  thinking?  They  probably  figured  this 

some  code  changes  are  possible,  but  it  will  do  is  as  close  to  open  source  as  they  can  get.  Even 
the  recompiling.)  if  it  doesn’t  offer  any  value  to  customers,  it 

But  they  will  be  able  to  look  at  the  source  looks  like  a  good-faith  effort  to  open  up  a  little, 

code.  And  that's  what  they  want  from  open-  But  even  though  it  doesn’t  offer  much  in  the 

source  software,  right?  line  of  benefits,  it  does  pose  a  risk  for  Micro- 

Of  course  not.  Most  big  IT  customers  —  in-  soft.  Not  a  risk  that  Windows  code  will  be 


So  that’s  what  Microsoft  did  —  isn’t  it?  True, 
governments  that  sign  up  for  the  new  program 
will  be  allowed  to  examine  the  Windows  source 
only  under  tight  restrictions.  True,  they  won’t 
be  able  to  modify  the  code.  (Microsoft  says 
some  code  changes  are  possible,  but  it  will  do 
the  recompiling.) 

But  they  will  be  able  to  look  at  the  source 
code.  And  that’s  what  they  want  from  open- 
source  software,  right? 

Of  course  not.  Most  big  IT  customers  —  in¬ 
cluding  go%ernments  —  considering  Linux 
want  to  cut  their  software  acquisition  costs. 
They  don’t  want  to  actually  look  at  source  code. 
That  would  raise  softw-are  costs,  because  it 
would  mean  some  employee  was  collecting  a 
paycheck  for  the  time  spent  looking  at  the  code. 

No.  if  you’re  using  Linux,  the  people  you 
want  looking  at  the  source  code  are  the  legions 
of  volunteer  open-source  beta  testers  who  work 
for  attaboys  or  good  karma  or  social  status 
among  the  propeller-head  elite.  Those  people 
aren’t  burning  a  hole  in  an  already  overtaxed  IT 
budget.  .At  least  not  your  budget. 

And  with  so  many  eyeballs  looking  for  bugs 
from  so  many  different  perspec¬ 
tives,  and  so  many  testers  whaling 
away  with  so  many  different  tools 
and  approaches,  you  get  the  benefit 
of  the  world's  biggest  and  most  ef¬ 
fective  quality  control  department 
—  all  for  free. 

But  of  course,  those  people  won’t 
get  anywhere  near  the  Windows 
source  code  under  this  new  Micro¬ 
soft  program-  Only  government  em¬ 
ployees  or  contractors  will  get  a  mvifs  m 

peek,  and  only  using  specific  Micro-  nM.  tas  o 
soft  tools.  And  no  chants  or  exper- 
imenting  with  the  code  is  allowed. 


mvif >  ttnAor  MM  cehMt- 
ntM.  lus  cavtrad  IT  (w  mon 
than  20  yam  Contact  Mm  at 


copied  or  modified  —  pirates  and  hackers  al¬ 
ready  do  that  with  abandon. 

But  there’s  a  genuine  risk  that  someone  ex¬ 
amining  the  source  will  find  back  doors,  undoc¬ 
umented  programming  interfaces  or  simply 
poor-quality  code.  It  might  actually  give  some 
government  IT  shop  solid  evidence  it  can  use 
to  cut  Windows  from  the  short  list. 

Pretty  sad.  huh?  No  value  for  customers  and 
real  risk  for  Microsoft  —  a  losing  bargain  all 
around. 

So,  what  lessons  can  we  take  away  from  this 
debacle?  For  Microsoft,  the  lesson  probably 
should  be  to  give  up  on  “open  source"  as  a  mar¬ 
keting  ploy.  Hey,  guys,  just  cut 
some  killer  deals  with  these  gov¬ 
ernment  customers,  then  write 
them  off  as  loss  leaders.  It  may 
look  ugly  on  the  balance  sheet,  but 
it's  the  only  way  to  compete  with 
free  when  you're  trying  to  preserv'e 
a  monopolists’  market  share. 

And  the  lesson  for  corporate  IT? 
Keep  your  eye  on  the  benefits,  not 
the  buzzwords,  in  any  open- 
MM  cehMt-  source-ish  deal  —  no  matter  who  it 

d  IT  (or  mon  comes  from. 

Figure  out  how  to  do  that,  and 
you’re  way  ahead  of  Microsoft,  k 
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Keep  \\^dows  Shut 


JUST  WHEN  IT  LOOKS  like  Microsoft  has  finally  figured  out 
open  source,  it  comes  clear  that  the  penny  still  hasn’t 
dropped.  Case  in  point:  Last  week,  Microsoft  said  it  will  let 
national  governments  examine  the  source  code  for  Windows 
operating  systems  (see  story,  page  6).  Everyone  at  Microsoft 
was  scrupulously  careful  not  to  mention  Linux,  but  they 
weren’t  kidding  anybody.  Linux  is  making  inroads  in  government 
sales.  Linux’s  source  code  is  available  and  can  be  modified  by  users. 
Until  now,  the  Windows  source  wasn’t  and  couldn’t  be.  To  compete, 
Microsoft  had  to  open  up  a  little  more. 


So  that’s  what  Microsoft  did  —  isn’t  it?  True, 
governments  that  sign  up  for  the  new  program 
will  be  allowed  to  examine  the  Windows  source 
only  under  tight  restrictions.  True,  they  won't 
be  able  to  modify  the  code.  (Microsoft  says 
some  code  changes  are  possible,  but  it  will  do 
the  recompiling.) 

Etut  they  will  be  able  to  look  at  the  source 
code.  And  that’s  what  they  want  from  open- 
source  software,  right? 

Of  course  not.  Most  big  IT  customers  —  in¬ 
cluding  governments  —  considering  Linux 
want  to  cut  their  software  acquisition  costs. 
They  don’t  want  to  actually  look  at  source  code. 
That  would  raise  software  costs,  because  it 
would  mean  some  employee  was  colleaii^  a 
paycheck  for  the  time  spent  looking  at  the  code. 

No.  if  you're  using  Linux,  the  people  you 
want  looking  at  the  source  (X>de  are  the  legions 
of  volunteer  open-source  beta  testers  who  work 
for  attaboys  or  good  karma  or  social  status 
among  the  propeller-head  elite.  Those  people 
aren’t  burning  a  bole  in  an  already  overtaxed  IT 
budget.  At  least  not  your  budget. 

And  with  so  many  eyeballs  looking  for  bugs 
from  so  many  different  perspec¬ 
tives,  and  so  many  testers  whaling 
away  with  so  many  different  tools 
and  approaches,  you  get  the  benefit 
of  the  world’s  biggest  and  most  ef¬ 
fective  quality  control  department 
—  all  fw  free. 

But  of  course,  those  people  won't 
get  anyudiere  near  the  Windows 
source  code  under  this  new  Micro¬ 
soft  program.  Only  government  em¬ 
ployees  or  contractors  will  get  a 
peek,  and  only  using  speciHc  Micro¬ 
soft  took.  And  no  changes  or  e3q>er- 
imenting  with  the  code  is  allowed. 


And  with  millions  upon  millions  of  lines  of 
Windows  code,  no  IT  boss  in  his  right  mind 
would  seriously  consider  trying  to  vet  it  alL 
So,  what  were  the  members  of  Microsoft’s 
brain  trust  thinking?  They  probably  figured  this 
is  as  close  to  open  source  as  they  can  get  Even 
if  it  doesn't  offer  any  value  to  customers,  it 
looks  like  a  good-faith  effort  to  open  up  a  little. 

But  even  though  it  doesn’t  offer  much  in  the 
line  of  benefits,  it  does  pose  a  risk  for  Micro¬ 
soft.  Not  a  risk  that  Windows  code  will  be 
copied  or  modified  —  pirates  and  hackers  al¬ 
ready  do  that  with  abandon. 

But  there’s  a  ^nuine  risk  that  someone  ex¬ 
amining  the  source  will  find  back  doors,  undoc¬ 
umented  programming  interfaces  or  simply 
poor-quality  code.  It  mi^t  actually  give  some 
government  IT  shop  solid  evidence  it  can  use 
to  cut  Windows  from  the  short  list 
Pretty  sad,  huh?  No  value  for  customers  and 
real  risk  for  Microsoft  —  a  losing  bargain  all 
around. 

So,  what  lessons  can  we  take  away  from  this 
debacle?  For  Microsoft,  the  lesson  probably 
should  be  to  give  up  on  ‘‘open  source”  as  a  mar¬ 
keting  ploy.  Hey.  guys,  just  cut 
some  killer  deals  with  these  gov¬ 
ernment  customers,  then  write 
them  off  as  toss  leaders.  It  may 
look  ugly  on  the  balance  sheet  but 
it's  the  only  way  to  compete  with 
free  when  you’re  trying  to  preserve 
a  monopolists*  market  share. 

And  the  lesson  for  corporate  IT? 
Keep  your  eye  on  the  benefits,  not 
the  buzzwords,  in  any  open- 
source-ish  deal  —  no  matter  who  it 
comes  from. 

F^ure  out  how  to  do  that  and 
you’re  way  ahead  of  Microsoft  I 
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Are  the  PCs  you  own  costing 
more  than  the  ones  you  can  buy? 


OM*r  PC*  ar*  coding  your  bmlnow  time  end  money. 


Outdated  PCs  can  be  expensive. 
When  you  consider  that  new  PCs  based  on 
the  Intel®  Pentium®  4  processor 
can  increase  productivity  and  enhance 
security  (by  running  the  latest  OS 
and  anti-virus  applications),  the  savings 
to  your  business  can  offset  the  cost  of 
an  upgrade  —  and  then  some.'  Get  the  hard 
facts  on  upgrading  to  Pentium  4 
processor-based  PCs  at  intel.com.  It’s 
a  better  way  to  compute,  and 

a  better  way  to  profit. 
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Funding  Scrutiny  May  Spread 
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Ptech  isn’t  unique  in 
having  suspected  ties 
to  terrorist  financiers 


“It  behooves  a  company  to 
look  at  investors,  their  reputa¬ 
tions  and  where  they  have  in¬ 
vested  in  the  past,"  said  Leo¬ 
nard  Fuki,  founder  of  Fuld  & 
Co.  a  Cambridge.  Mass.-based 
competitive  intelligence  con¬ 
sulting  firm.  “The  onus  is  still 
on  the  companies 
Start-up  hrms,  which  tend 
to  be  especially  anxious  to 


Enterprise  software  company  competitive  intelligence  con 
Ptech  Inc.  may  be  only  one  of  suiting  firm.  “The  onus  is  sti 
many  Turns  that  could  be  in-  on  the  companies.* 
vestigated  for  having  possible  Start-up  Hrms,  which  tend 
links  to  terrorist  financiers,  to  be  especially  anxious  to 
e3q>ert$  on  terrorism  and  crisis  make  sales  and  attract  in- 
management  are  warning.  And  vestors,  need  to  do  more  re- 
other  companies  do  in  fact  search  into  whom  they  do 
have  histories  similar  to  that  business  with,  said  Larraine 
of  Ptech.  Computerworid  has  Segil.  an  expert  in  strategic 
confirmed.  Ptech,  page  45 


Fujitsu  Sets 
High-End 
Linux  Plans 

Unix  senTer  vendor 
embraces  Intel  chips 
and  open-source  OS 


Fujitsu  Ixd..  which  in  the  serv¬ 
er  market  is  known  primarily 
for  its  hi^-end  Unix  systems 
based  on  Sun  Microsystems 
Inc’s  SPARC  architecture  last 
week  said  it  plans  to  use  Intel 
Corp.'s  processors  to  develop 
a  new  family  of  enterprise- 
class  Linux  machines. 

Tokyo-based  Fujitsu  said  it 
hopes  to  start  shipping  dual¬ 
processor  Linux  systems  in 
the  second  half  of  next  year. 
The  company  added  that  the 
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Unilever  Dumping  Unix 
For  Unux  in  Globm  Move 


Buy-in  from  UK  IBM  key  as  company  embarks 
on  decade-lor^  systems  standardization  plan 


AAer  years  of  running  db- 
parate  Unix-based  systems  in 
its  global  IT  server  operations, 
Unilever  is  committing  its 
technolc^cal  future  to  Linux. 

The  $52  billion 
consumer  products 
company  plans  to 
switch  to  Linux  on  Intel-stan¬ 
dard  hardware  in  all  80  coun¬ 
tries  vrtiere  it  operates.  “We 
believe . . .  that  It  will  [meet] 
all  of  our  computing  needs  in 
the  eight-  to  10-year  time 


IINUXWORLD 


frame,”  said  Colin  Hope-Mur- 
ray,  CTO  of  the  ^obal  infra¬ 
structure  group  at  Unilever. 

“We  want  to  be  able  to 
cookie-cut  our  systems  and 
deliver  them  around  the 
world”  without  having  to  wor- 
ry  about  operating 
system  or  hardware 
compatibility  is¬ 
sues.  Hope-Murray  said.  The 
company  currently  runs  sys¬ 
tems  with  Hewlett-Packard 
Co.’s  IriiM  version  of  Unix 
and  IBM's  ADC.  after  having 
already  migrated  some  appli¬ 


cations  off  of  HP-UX. 

The  con^jany,  which  has 
dual  headquarters  in  London 
and  Rotterdam.  Netherlands, 
made  the  announcement  here 
last  week  at  the  linuxWMld 
Conference  &  Expo. 

Hope-Murray  said  Unilever 
will  make  the  migration  from 
Unix  to  Linux  to  simplify  and 
standardize  its  IT  ardiitecture 
as  well  as  to  spread  the  re¬ 
duced  operational  costs  and 
increased  performance  the 
company  has  already  seen 
using  Linux  for  W^  servers, 
e-mail  servers,  proxy  servers 
and  firewall  applications.  So 

Umlever,  page  J4 


Linux  line  vrill  be  topped  off 
by  a  128-CPU  server  based  on 
Intel's  64-bit  Itanium  2  proces¬ 
sor.  That's  the  largest  Intel- 
based  commercial  Linux  sys¬ 
tem  announced  thus  Car,  but  it 
isn't  slated  to  ship  until  2001 
Fujitsu’s  planned  move  into 
Fujitsu,  page  14 


Viruses 

“’Smarter 


Ths  acealaralina  pan  of 

now  vfci—- more  than 
7,000  last  yaor  alone  -  is  just 
one  preblem  facing  security 
profeesionals.  A  new  dass  of 
emetgkig  vkuses  and  worms 
Is  eTcpected  to  attach  muWpte 
vtinecablitiasslmultaraous- 
ly,  eoiplolt  new  ones,  aixl  try 
to  sM  data  tether  than  sim¬ 
ply  deatroy  It  MOE  21 
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Funding  Scrutiny  May  Spread 


I’tech  isn't  unique  in 
having  suspected  ties 
to  terrorist  financiers 

BV  OAN  VEftTON 

Enterprise  software  company 
Ptech  Inc.  may  be  only  one  of 
many  firms  that  could  be  in¬ 
vestigated  for  having  possible 
links  to  terrorist  financiers, 
experts  on  terrorism  and  crisis 
management  are  warning.  And 
other  companies  do  in  fact 
have  histories  similar  to  that 
of  Ptech.  Compulcnvorld  has 
confirmed. 


'It  behooves  a  company  to 
look  at  investors,  their  reputa¬ 
tions  and  where  they  have  in¬ 
vested  in  the  past,"  said  Leo¬ 
nard  Fuld.  founder  of  Fuld  & 
Co.,  a  Cambridge.  Mass.-based 
competitive  intelligence  cc*n- 
sulting  firm.  "The  onus  is  still 
on  the  companies." 

Start-up  firms,  which  tend 
to  be  especially  anxious  to 
make  sales  and  attract  in¬ 
vestors.  need  to  do  more  re¬ 
search  into  whom  they  do 
business  with,  said  Larraine 
Segil.  an  expert  in  strategic 

Ptech.  page -75 


Fujitsu  Sets 
High-End 
Linux  Plans 

Unix  sener  vendor 
embraces  Intel  chips 
and  open-souroe  OS 

BV  JAIKUMAR  VI  JAVAN 

Fujitsu  Ltd.,  which  in  the  serv¬ 
er  market  is  known  primarily 
for  its  high-end  Unix  systems 
based  on  Sun  Microsystems 
Inc.’s  SPARC  architecture,  last 
week  said  it  plans  to  use  Intel 
Corp.’s  processors  to  develop 
a  new  family  of  enterprise- 
class  Linux  machines. 

Tokyo-based  Fujitsu  said  it 
hopes  to  start  shipping  dual- 
processor  Linux  systems  in 
the  second  half  of  next  year. 
The  company  added  that  the 


Linux  line  will  be  topped  off 
by  a  128-CPU  sen'cr  based  on 
Intel’s  64-bit  Itanium  2  prtKCs- 
sor.  Thai’s  the  largest  Intel- 
based  ctiramercial  Linux  s>’s- 
tem  announced  thus  far.  but  it 
isn’t  slated  to  ship  until  2005. 

Fujitsu's  planned  move  into 
Fujitsu,  page  14 
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Unilever  Dumping  Unix 
For  Linux  in  GlobS  Move 


Buv -in  frem  Hlf  IBM  kev  as  eompanv  emlxirks 
on  decade-long  systems  standardization  plan 


After  years  of  running  dis¬ 
parate  Unix-based  systems  in 
its  global  IT  serwr  operations, 
Unilever  is  committing  its 
technological  future  to  Linux. 

The  S52  billion  Pfff 

consumer  products  l|[ 
company  plans  to  ■■■ 

switch  to  Linux  on  Intel-stan¬ 
dard  hardware  in  all  80  coun¬ 
tries  where  it  operates.  "We 
believe . . .  that  it  will  (meet) 
all  of  our  computing  needs  in 
the  eight-  to  lO-year  lime 


frame.”  said  Colin  Hi>pe-Mur- 
ray.  (.rTO  of  the  global  infra¬ 
structure  group  at  Unilever. 

"\N'e  want  to  be  able  to 
cookie-cut  our  systems  and 
deliver  them  around  the 
world"  without  having  to  wor- 
■■■  r>'  about  operating 
\  1 1  system  or  hardware 
compatibility  is¬ 
sues.  Hope-Murray  said.  The 
company  curivntl>'  runs  sys¬ 
tems  with  Hewlett-Packard 
Co.’s  Tru64  version  of  Unix 
and  IBM's  AIX.  after  having 
already  migrated  some  appli¬ 


'm 


cations  off  of  HP-UX. 

The  company,  which  has 
dual  headquarters  in  U>ndon 
and  Rotterdam.  Netherlands, 
made  the  announcement  here 
last  week  at  the  LinuxWurld 
Conferenced  F.xpt). 

Hope-Murray  said  Unilesvr 
will  make  the  migration  from 
Unix  to  Linux  tt>  simplify  and 
standardize  its  IT  architecture 
as  well  as  to  spread  the  re¬ 
duced  operational  costs  and 
increased  performance  the 
ctimpans  has  alteady  seen 
using  Linux  for  Web  serx’crs. 
e-mail  serx'crs.  pn>xy  servers 
and  firewall  applications.  S«i 

Unilever,  page  /4 


Viruses 
Smsuter 


The  accelerating  pace  of 
new  viruses  -  more  than 
7.000  last  year  alone  -  is  just 
one  probtem  facing  securtty 
professionals.  A  new  class  of 
emerging  viruses  and  worms 
is  expected  to  attack  nnultipie 
vuirrerabilrties  simultaneous¬ 
ly.  exploit  new  ones,  and  try 
to  steal  data  rather  than  sim¬ 
ply  destroy  it.  PAGE  21 
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Agents  of  Change 

In  the  Technology  section:  Agent-based  modeling  and  complexity 
theory,  once  the  territories  of  mathematicians,  are  emerging  from 
the  ivory  towers  to  help  manage  unruly  supply  chains.  Page  26 


Save  That  Mail 

In  the  Menegement  section:  Archiving  e-mails  has  be- 
conte  a  serious  business  as  courts  and  industiy  regula¬ 
tors  increasingly  order  expensive  searches  and  issue 
stiff  fines  for  lost  or  poorly  stored  e-mails.  Page  33 
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6  PKWare  offers  some  security 
to  corporate  users  of  its  data 
compression  technology. 

6  WorldCom  and  Sprint  are 

helping  users  move  closer  to 
IP-based  networks  without 
having  to  fully  abandon  tradi- 
tioital  technologies. 

7  Retailers  begin  to  check  out 
platform-neutral  Java-based 
systems  as  they  revamp  their 
point-of-sale  operations. 

7  BEA  Systems  introduces  a 
service  that  aims  to  help  Java 
developers  incorporate  XML 
data  into  their  applications. 

8  BMC  Software  adds  the  abili¬ 
ty  to  identify  netwoik  faults 
to  its  Patrol  Visualis  perfor¬ 
mance  monitoring  sofhvare. 

to  HP  plans  to  combine  its 
VersaStor  software  with  a 
data  replication  device  and 
new  storage  switches  made 
by  Brocade. 

10  Imerys  bypasses  big-name 
proxy  servers  to  give  its  3,000 
users  remote  access  to  iNotes. 

12  Up  to  45%  of  IT  workers  in 

the  U.S.  and  Canada  could  see 
themselves  replaced  by  2005, 
according  to  a  new  report. 

12  Reuters  says  more  than 
225,000  end  users  have  signed 
up  for  its  messaging  software. 

13  Users  at  Oracle's  Apps- 
World  conference  said  efforts 
to  make  E-Business  Suite  Ui 
applications  less  complex  to 
install  may  be  paying  off. 


21  Viruses  Get  Smarter.  You 
thought  Sircam.  Klez  and 
Nimda  were  threats,  but  virus 
writers  were  just  warming  up. 
A  new  generation  of  viruses 
will  be  more  sophisticated, 
more  difficult  to  detect  — 
and  more  dangerous,  experts 
predict. 

28  Future  Watch:  Intelligent 
Storage.  Object-based  stor¬ 
age  technologies  promise 
to  reduce  server  I/O  and 
eliminate  the  need  for  clients 
to  speak  in  either  blocks  or 
file  format. 

30  Security  Manager's  Jotunal: 
Security  Problems  Put  Sur* 
vey  App  on  Sidelines.  Design 
flaws  in  a  Web-based  survey 
application  leaves  sensitive 
data  unprotected,  so  Mathias 
Thurman  makes  fixing  it  a 
top  priority. 

MANA6EMENT 

36  Home*Schooling  IT  Talent. 

FedEx  and  other  forward- 
thinking  companies  are  team¬ 
ing  up  with  neighboring  uni¬ 
versities  to  teach  the  IT  skills 
their  businesses  require. 

38  Big  Recruiters  on  Campus? 
Not  This  Year.  College  re¬ 
cruiting  stalls  as  experienced 
IT  pros  swell  the  ranks  of  the 
unemployed. 

39  Handling  the  Hard  Case.  Try¬ 
ing  to  motivate  a  problem  IT 
person  may  be  the  wrong  ap¬ 
proach.  writes  Nigel  Nichol¬ 
son  in  this  month's  Harvard 
Business  Review. 


8  On  The  Mark:  Mark  Hall  chats 
with  a  Wintel  advocate  who 
worries  that  the  duopoly's 
success  in  high-performance 
systems  may  hurt  U.S.  super¬ 
computing  competitiveness 
in  the  future. 

16  Patricia  Keefe  analyzes  the 
sudden  shift  in  vendor  priori¬ 
ties  to  bring  their  technolo¬ 
gies  in  line  with  user  expecta¬ 
tions  and  business  needs. 

16  Michael  Oartenberg  identi¬ 
fies  three  technology  initia¬ 
tives  that  every  IT  shop 
should  be  working  on  now. 

17  Emmet  Cole  argues  that  Mi¬ 
crosoft's  Palladium  is  as  much 
a  ploy  to  exclude  non-Win¬ 
dows  systems  fiom  business 
as  it  is  to  offer  better  security. 

31  Tommy  Peterson  says  that 
the  wait  is  over  —  wireless 
networking  has  arrived  in 
corporate  IT. 

40  Bart  Perkins  offers  tips  on 
how  to  complete  your  proj¬ 
ects  within  budget  and  with 
all  the  desired  features. 

46  Frankly  Speaking:  Frank 
Hayes  has  an  uneasy  feeling 
that  Carty  Fioriiu  has  uncov¬ 
ered  an  unpleasant  truth 
about  the  grim  future  of  IT 
budgets. 
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Gates  Provides 
Security  Update .. . 

A  )Mr  iflv  IwncMnQ  Ms  Tnist- 
worlMi  Conipiitins  Wtlithra,  BW 
ObIh,  tUcnwaft  Corp.'s  chairman 
and  chW  softwara  architact.  said 
in  an  e-maii  to  custamara  (hat  of* 
tefta  to  better  sacura  IHcrogoft 
products  ara  continuing. '*Whde 
ufa'aa  acconiplahad  a  tot . . . 
lhara  is  stii  mora  to  do  -  at  Mi- 
croaoft  and  across  our  industry, " 
Oatas  said.  Ho  promotad  tha  use 
of  smart  cards  and  said  Mcroaoft 
is  dowtoping  a  system  ter  sanding 
security  buNtins  vis  a*mal. 


...  iU  Microsoft 
Posts  Warnings 

Prior  to  tho  roloaao  of  Oatoo’  mas* 
sags.  Iftcroooft  mmod  Ihol  a  so* 
curtly  Amv  In  its  Herosofl  Loca* 
tor  sarvica  iachidsd  with  WMom 
NT  4.0. 2000  Md  XP  eedd  be 
used  to  tabo  conlioi  of  systems. 
Tht  company  gmo  tho  proUom  s 
"criliear  sovarity  rating  and 
urgmi  uaars  te  bwtal  a  naw 
patch.  Mteraaofl  also  wanwd  of 
holea  in  its  Outlook  2002  and 
Content  Management  Sarvar 
2001  products. 


Top  IT  Executive 
Qi^  Merrill  Lynch 

MsrrM  lynch  4  Co.  announcsd  in 
an  brterwi  momo  (hot  John 
MdOateywlloMMaiohas 
cMof  tedwology  oWleof  and  ssoc- 
iiOvo  viDO  praabtent  of  Ms  Otohal 
Tachnobgr  4  Sanncos  unit  at  the 
end  of  neat  manOt  McfOnloy 
plana  to  taho  a  )ab  ta  tha  technol¬ 
ogy  bidiMtry.  aujordbig  to  (ho 
momo.  Mir^  lynch  said  ho  wM 
bo  ragteeod  by  John  Ctomnings, 
cram  ogormiig  owcar  or  mo  iSGir 
noiogy  and  ssrvicas  group. 


Short  Takes 

CBCO  SVSTBe  MC.  said  M’s  bur 
big  OhM  bie..  a  Wahhaw.  ttaaa.- 
baoad  vandor  of  InbiMiaiHlalac* 
uen  ea^m^aa. ...  ^^un^nwaa 
aarmr  Mdpnmnti  grew  4.2%  laat 
year,  atiuadbig  to  San  Joor 
bMid  OAUQUEST  nc. 


PKWare  Adds  Encryption 
To  Compression  Software 


PKZip  upgraded 
for  Windows,  Unix 
and  IBM  sv'stems 

BV  JAlKUMAn  VIJAVAN 

KWARE  INC  last  week 
said  it's  trying  to  make 
it  safer  for  users  of  its 
PKZip  data  compres¬ 
sion  technology  to  send  and 
receive  files  over  the  Internet 
by  adding  ne«’  encryption 
capabilities  to  the  software. 

The  Brown  Deer.  Wis.* 
based  company  said  Version 
6.0  of  PKZip  for  Windows  and 
Unix  users  includes  a  new  se¬ 
curity  module  based  on  the 
ESAFE  encryption  technology 
developed  by  Bc-dford,  Mass.- 
based  RSA  Security  Inc. 

The  module  lets  u.scrs  pro¬ 
tect  documents  via  password- 
or  certificate-based  encryp¬ 
tion  before  they're  transmit¬ 
ted.  PKWare  said-  The  compa¬ 
ny  added  that  the  Windows 
release  also  features  new  sup- 
pon  for  IBM's  Notes  software, 
which  lets  users  compress  and 
encrypt  e-mail  attachments. 

PKWare  also  announced  re¬ 
leases  of  its  sofhvare  for  IBM's 
mainframes  and  iSeries 
servers  that  support  up  to  256- 
bit  symmetric  ertcryption 
based  on  the  Advanced  En¬ 
cryption  Standard.  The  iSeries 
systems  were  previously 
known  as  the  AS/400  line. 

Securing  Critical  Dab 

Features  such  as  the  ones 
announced  last  week  are  cru¬ 
cial  to  corporate  users  who 
depend  on  PKWare’s  compres¬ 
sion  products  to  send  or  re¬ 
ceive  important  data  files,  said 
Gene  Knobloch,  IS  manager  at 
Gilsbar  Insurance  Services 
loc.  in  Covington,  La. 

GUsbar  has  been  using 
PKZip  technology  for  several 
years  to  compress  and  send 
medical  insurance  claims  data 
from  its  AS/fOOs  to  systems  at 
its  clients  in  the  health  care  In- 
dusay  and  to  insurance  com¬ 
panies  and  clearin^ouses. 


With  an  April  1  deadline 
looming  for  complying  with 
the  federal  Health  Insurance 
PurtabUity  and  Accountability 
Act.  Knobloch  said  Gilsbar 
plans  to  use  PKWare’s  new 
software  to  compress  and  en¬ 
crypt  all  records  containing 
patient  health  information,  as 
required  by  the  law. 

The  new  encryption  func¬ 
tionality  has  been  very  easy  to 
implement,  he  added.  But 
Knobloch  said  many  of  the 
clients  and  insurers  thai  GUs¬ 
bar  deals  with  have  standard¬ 
ized  on  encryption  technolo¬ 
gies  developed  by  Palo  Alto. 
Calif.-based  PGP  Gorp.  Be- 


Services  de.signed 
to  let  customers 
migrate  in  stages 

BV  MATT  HAMBLEN 

WorldCom  Inc.  and  Sprint 
Corp.  plan  to  separately  offer 
corporate  users  more  IP-based 
nctworit  service  op¬ 
tions.  including  vir¬ 
tual  private  network 
(VPN)  capabUities  that  run  on 
top  of  traditional  technologies 
such  as  frame  relay. 

WoridCom  last  week  an¬ 
nounced  the  addition  of  real¬ 
time  performance  reporting 
and  traffic  management  capa¬ 
bUities  to  its  2-year-ald  VPN 
service.  Sprint  today  plans  to 
launch  three  new  services,  in¬ 
cluding  one  designed  to  help 
users  transition  from  frame  re¬ 
lay  circuits  to  IP  VPNs. 

Both  companies  realize  that 
users  wlu>  have  tightened  up 
their  IT  budgets  because  of 
the  sluggish  economy  arc  un¬ 
likely  to  disconnect  their 
frame-relay  or  AsynchroDOu.<i 
Traiksfer  Mode  networks  and 
move  completely  over  to  IP- 


cause  of  that,  it  has  been  a 
chaUengc  to  get  some  of  them 
to  accept  encrypted  PKZip 
flics  from  GUsbar.  “But  we  arc 
taking  that  on  one  client  at  a 
time.”  Knobloch  said. 

PKZip  and  simUar  compres¬ 
sion  technologies  have  pri¬ 
marily  been  at  the  client 
level  in  the  past.  But  now, 
“there  is  significant  interest  to 
compression  and  encryption 
at  the  server  level  for  batch 
file  transfers,"  said  David 
Thompson,  an  analyst  at  Meta 
Group  Inc.  in  Stamford.  Conn. 

Encryption  that’s  buUt  in  at 
the  opcratii^  system  level, 
which  Microsoft  includes  with 


based  services  at  this  tiinc, 
said  Max  Smetannikov,  an  an¬ 
alyst  at  Current  Analysis  Inc. 
in  Sterling,  Va. 

“WorldCom  and  Sprint  are 
both  developing  in-between  IP 
products  for  intermediate 
steps  by  customers."  Smetan¬ 
nikov  said.  "Both  are  adapting 
to  a  new  economic 
environment  with 
incremental  spend¬ 
ing  and  slow  migration." 

Corporate  spending  on 
voice  services  is  down,  and  in- 
vesnnents  in  data  services  are 
generally  flat,  said  Steve  Har¬ 
ris,  an  analyst  at  IDC  in  Fram¬ 
ingham,  Mass.  However.  IP- 
based  VPNs  arc  one  of  the  few 
bright  spots  for  network  oper¬ 
ators,  he  said. 

“Companies  are  clamoring 
for  fP  VI^s,  and  half  of  U.S. 
companies  have  one  in  place," 
Harris  said.  IP  VPNs  can  help 
IT  managers  increase  network 
security,  simplify  administia- 
tion  and  lower  costs  compared 
with  more  traditional  network 
alternatives,  be  noted. 

Still,  carriers  such  as  World¬ 
Com  and  Sprint  make  up  a  rcl- 
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Windows,  generaUy  works 
weU  for  protecting  files  on  in- 
dividuai  servers,  Thompson 
said.  But  technologies  like 
PKWare's  can  protect  files 
even  when  they're  transferred 
from  one  system  to  another, 
he  added.  I 


atively  sraaU  part  of  the  IP 
VPN  market.  Harris  said  net¬ 
work-based  services  comprise 
about  10%  of  the  market,  with 
current  annual  spending  at 
nearly  S700  million.  By  com- 
parisoa  S8.4  bUUon  is  spent 
annually  for  IP  VPN  equip¬ 
ment  in.stalled  at  customer 
sites,  according  to  Harris. 

Sprint  wUi  introduce  frame- 
relay;  private  line  packet-data 
and  virtual  LAN  services  built 
around  its  SprintlJnk  native 
IP  network.  All  of  the  services 
will  be  made  available  imme¬ 
diately.  Company  officials  said 
frame-relay  packets  wUl  run 
securely  over  SpiintUnk.  mak¬ 
ing  it  possible  for  customers 
to  stiU  use  their  existing 
frame-relay  equipment. 

Pricing  wasn't  disclosed,  but 
Pete  Parish,  director  of  product 
marketing  at  Sprint,  said  the 
new  approach  should  save  cus¬ 
tomers  up  to  20%  compared 
with  frai^relay  fees,  includ¬ 
ing  the  cost  of  permanent  vir¬ 
tual  circuits  and  port  fees. 

Harris  pointed  out  (hat  the 
new  ability  for  users  to  moni¬ 
tor  World^m's  network  per¬ 
formance  could  help  the 
struggling  company 
its  business,  since  many  net¬ 
work  managers  “don’t  trust 
the  carriers"  to  meet  agreed- 
upon  service  levels.  I 
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Retailers  Explore  Java  POS  Systems 


See  benefits  of  portability,  easy-to-modify 
code,  as  well  as  possible  decrease  in  costs 


BV  CANOL  S4.iWA 

Growing  numbers  of  retailers 
are  scoping  out  Java-based 
point-of-sale  (POS)  systems  as 
one  option  to  replace  their  ag¬ 
ing  cash  registers. 

Several  retailers  that  are  ei¬ 
ther  deploying  or  piloting  Java 
POS  systems  said  they  like  the 
fact  that  the  software  can  run 
on  any  hardware  or  operating 
system  and  also  noted  that 
they're  finding  the  code  easy 
to  modify  as  their  needs  ex¬ 
pand.  Some  also  reported  de¬ 
creases  in  implementation  and 
support  costs,  depending  on 
the  additional  systems  choices 
they  have  made. 

“We  want  something  that 
won't  lock  us  into  any  particu¬ 
lar  platform  and  will  give  us 
the  flexibility  to  deploy  it  in 
whatever  way  we'd  like  in  the 
future.'*  said  Mike  Ihince,  CIO 
at  Burlington  Coat  Factory 
Warehouse  Corp.  in  Burling¬ 


ton.  N.J.  Prince  said  his  com¬ 
pany  has  committed  to  a  Java 
IK)S  system  on  Linux  and  is 
rolling  out  the  Linux  operating 
system  but  has  postponed  the 
Java  POS  portion  because  of 
competing  projects. 

Robin  Lynas. 

CIO  at  Mark's 
Work  Weartiouse 
Ltd.,  a  Calgary,  Al- 
berta-based  chain 
that  was  acquired 
last  year  by  Cana¬ 
dian  Tire  Corp., 
found  himself 
peppered  with 
questions  from 
fellow  retailers  at 
the  National  Retail  Federation 
Conference  &  Expo  earlier  this 
month  in  New  York. 

The  Canadian  retailer  has 
rolled  out  its  Java  POS  system 
flom  Retek  Inc.  to  new  Linux- 
based  IBM  terminals  at  70 
stores.  Plans  call  for  the  roll- 


H  We  want 
something 
that  wont  lock 
us  into  any  par¬ 
ticular  plaifoim. 

HIKE  PRWCE.  CtO. 
BURLINGTON  COAT  fACTORY 


out  at  the  remaining  240 
stores  to  be  completed  by  the 
end  of  June. 

“My  guys  said.  ‘Do  we  really 
want  to  pay  Microsoft  licens¬ 
ing  fees?  Why  don't  you  go 
open  systems?’ "  Lynas  re¬ 
called.  Once  they  proved  that 
the  POS  system  would  run  on 
Linux,  he  was  sold. 

Marie's  Work  Wearhousc 
claims  to  have 
lowered  store 
opening  costs  by 
30%  and  mainte¬ 
nance  costs  by 
50%,  in  part  be¬ 
cause  it  no 
longer  needs  in¬ 
store  servers. 

The  registers  will 
connect  directly 
via  frame  relay  to 
central  servers  at  the  home  of¬ 
fice,  thanks  in  part  to  Java's 
networking  class  Ubraries.  ac¬ 
cording  to  Retek  (2hief  Tech- 
nok^  Officer  John  Gray. 

An^er  advantage  that 
Mark’s  Work  Weaihouse  has 
found  is  the  ease  with  which 


New  BEA  Service  Helf 
Java  Developers  Use 

Separately,  Sun 
Ol^  Stuio  gets 
modeling  tool 


ev  CAROL  SLIWA 

BEA  Systems  Inc.  today  i^ans 
to  introduce  a  hosted  service 
chat  it  claims  will  help  Java  de¬ 
velopers  incorporate  XML 
data  into  their  applications. 

The  San  Jose-based  compa¬ 
ny  is  launching  a  beta  version 
of  BEA  XMLBeans  through  its 
Wrt)  site.  Developers  who 
submit  XML  schema  will  gain 
access  to  a  set  of  Java  clasps 
that  they  can  use  in  their  ap¬ 
plications  to  manipulate  XML 
data,  according  to  Carl  Sjo- 
grecn,  a  senior  product  man¬ 
ager  at  BEA. 

Sjogreen  said  companies  in¬ 
vest  in  XML  schema  to  de¬ 
scribe  XML  data,  but  when 


they  try  to  bring  the  XML 
schema  into  a  Java  application, 
they  often  lose  the  constraints 
or  validation  rules,  since  only 
the  basic  structure  of  the  XML 
schema  is  preserved. 

To  work  with  XML,  Java  de¬ 
velopers  often  have  to  write 
tedious  code  to  walk  through 
the  low-level  structure  of 
XML  information,  or  they 
have  to  force-fit  XML  data 
into  their  Java  applications. 
Sji^reen  said. 

BEA  plans  to  conduct  a  live 
online  seminar  on  Wednesday 
at  noon  EST  to  explain  how 
XMLBeans  works. 

Sjogreen  said  BEA  will  woik 
to  standardize  XMLBeans  ei¬ 
ther  through  the  Java  (Commu¬ 
nity  Process  or  the  open- 
source  community. 

In  a  separate  development. 
Sun  Microsystems  Inc.  today 


plans  to  announce  that  a  Uni¬ 
fied  Modeling  Language 
(UML)  tool  ftom  Embar- 
cadcro  Technologies  Inc.  will 
ship  with  its  Sun  ONE  Studio 
integrated  development  envi¬ 
ronment  (lOE). 

Jeff  Anders,  a  group  market¬ 
ing  manager  for  Sun  ONE  Stu¬ 
dio.  said  customers  have  been 
asking  for  UML  modeling  ca¬ 
pabilities  in  IDEs,  and  Sun 
chose  EmhaFcadero's  tool,  in 
part,  because  of  its  tig^t  inte¬ 
gration  with  Sun  ONE  Studio. 

A  CD  containing  Erobar- 
cadero’s  Describe  64)  product 
wiU  ship  in  the  same  box  as 
the  next  version  of  Sun  ONE 
Studia  but  developers  wbo 
choose  to  purchase  the  license 
will  have  to  contact  Embar- 
cadero,  Anders  said.  Sun  won't 
be  selling  the  product.  I 
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developers  can  boh  on  new 
applications  that  connect  to 
t^  r*OS  system.  Those  include 
Web  site,  time  sheet,  business 
account  and  Web  reporting  ap¬ 
plications,  Lynas  said. 

“Retek  gives  you  the  Java 
source  code  for  their  POS  ap- 
plicatiotw"  Lynas  said.  “You 
just  take  the  objects  they've 
got  and  extend  them  and  write 
your  new  functk>naiity.“ 

Java  at  Ham  Depot 

Atlanta-based  The  Home  De¬ 
pot  Inc.,  whose  IT  shop  is 
heavily  invested  in  Java,  set¬ 
tled  on  a  Java  POS  system 
from  360Commerce  Inc.  in 
Austin.  Texas,  so  it  would  be 
able  to  migrate  code  between 
clients  and  servers  running 
disparate  operating  systems, 
said  Ray  Allen,  director  of  IT. 

The  POS  terminals  run 
Windows  2000.  and  the  serv¬ 
ers  run  different  flavors  of 
Unix  from  Hewlett-Packard 
Ca  and  IBM.  Allen  noted. 

“POS  applications  typically 
live  for  10  to  12  yearv  and 
they're  very  tightly  integrated 
with  whatever  the  retailer 
chooses  to  provide,*  he  said. 
“So  you’re  trying  to  make  the 
best  guesses  for  what  migbi  be 
going  on  five  to  six  years 
down  the  road.“ 

Allen  said  changes  can  be 
made  “much  easier  and  faster 
with  a  component-based  solu¬ 
tion.  Edismbuted]  architecture 
and  object-ortenied  language 
like  Java.* 

Jerry  Rightmer.  CTO  at  360- 
Cororiiercc,  said  building  a 
POS  system  in  Java  was  **a  foir- 
ty  risky  decision”  in  1997  when 
his  company  began  developing 
products.  But  he  said  the  list 
of  Java  POS  vendors  is  grow¬ 
ing  and  now  includes  PCMS 
Datafii  iDC.,  [DA  Software 
Group  Inc.  and  Triversity  Inc., 
among  others. 

The  tanpitagr  is  easier  to 
work  wntb  than  previous  gen¬ 
erations  of  languages,  it's 
more  productive  than  C  or 
and  it  has  all  the  benefits 
of  object-oriented  languages 
writhout  some  of  the  traps  and 
pitfalls  of  in  particular." 


Java  positives 


he  said.  “JMus.  it  has  an  ex¬ 
tremely  rich  set  of  APIs  that 
has  made  it  easy  for  us  to  inte¬ 
grate  with  third-parry  middle¬ 
ware  and  databases." 

Urs  Karrer,  an  analyst  at 
McLean.  Va. -based  B^ing- 
Point  Inc.,  which  was  formerly 
KPMG  Consulting,  said  he 
thinks  more  vendors  ultimate¬ 
ly  will  for  Java  for  porta¬ 
bility  reasons.  But  he's  not  so 
sure  how  much  that  will  mat¬ 
ter  CO  customers.  “Retailers 
don't  care  that  much  unless 
they  have  a  custom  develop¬ 
ment  shop."  Karrer  said. 

James  Crawford,  an  analyst 
at  Forrester  Research  Inc.  in 
(Cambridge.  Mass.,  said  the  re- 
taU  trend  toward  nerw  POS 
systems  has  nothing  to  do 
with  Java.  Microsoft  Corp.'s 
.Net  or  any  other  development 
platform.  He  said  retailers 
simply  want  an  open  POS  sys¬ 
tem  that  can  be  with  any 
hardware  or  software,  as  op¬ 
posed  to  old  POS  systems  that 
often  had  integrated  and  pro¬ 
prietary  hardware,  software 
and  data  platforms. 

But  Paula  Rosenblum.  an 
analyst  at  AMR  Research  Inc. 
in  Boston,  said  the  Java  POS 
story  has  become  interestiitg 
because  of  some  very  higb- 
proftie  pilots,  and  she  expects 
rollouts  to  escalate  this  year.  I 
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Gates  Provides 
Security  Update . . . 

A  y«v  after  lauttching  hts  Trust* 
worthy  Computino  mittathre.  Bill 
Gates.  Microsoft  Corp/s  chairman 
and  chief  software  architect,  said 
in  an  e-mail  to  customers  that  eh 
forts  to  better  secure  Microsoft 
products  are  continuing.  "WlMie 
we've  accomplished  a  lot . . . 
there  is  still  more  to  do  ■  at  Mi¬ 
crosoft  and  across  our  industry." 
Gates  said.  He  pnMnoted  the  use 
of  smart  cards  and  said  Microsoft 
is  developirrg  a  system  for  seruJing 
security  buletJrts  via  e*maiL 


...  As  Microsoft 
Posts  Warnings 

Prior  to  the  release  of  Gates'  mes¬ 
sage.  Microsoft  warned  that  a  se¬ 
curity  flaw  in  the  Microsoft  Loca* 
lor  service  included  with  Windows 
NT  4.0. 2000  and  XP  could  be 
used  to  take  corrtrol  of  systems. 
The  company  gave  the  problem  a 
"criticar  severity  rating  and 
urged  users  to  instal  a  new 
patch.  Mierosoft  also  warned  of 
holes  in  its  Outlook  2002  and 
Content  Martagement  Servw 
2001  products. 


Top  IT  Executive 
Quits  Merrill  Lynch 

Merrfll  Lynch  4  Co.  aniKMinced  in 
an  internal  memo  that  John 
McKinley  wil  leave  Ms  Job  as 
chief  technologv  officer  and  exec¬ 
utive  vice  president  of  its  Global 
Technology  A  Services  unit  at  the 
end  of  next  month.  McKMey 
plans  to  take  a  iob  in  the  technol¬ 
ogy  industry,  acconing  to  the 
memo.  Merrill  Lyrtch  said  he  wil 
be  replaced  by  John  Cummings, 
chief  operating  officer  of  the  tech¬ 
nology  and  services  group. 


Short  Takes 

CISCO  SYSTEMS  INC.  said  It's  buy- 
ing  Oketia  Inc.,  a  WaKham.  Mass.- 
based  vendor  of  mtrusion-detec- 


server  shipments  grew  4.2%  last 
year,  ecconflng  to  San  Josa- 
based  DATAQUEST  INC. 


PKWare  Adds  Encryption 
To  Compression  Software 


I’K/ip  iipgntdcd 
for  VN’indow's,  Unix 
and  I  KM  s\  stems 

6V  JAIKUMAR  VIJAVAN 

PKWARl  isl.  last  week 
said  it's  dy  ing  to  make 
it  safer  for  users  of  its 
PKZip  data  compres¬ 
sion  technology  to  send  and 
receive  files  over  the  Internet 
by  adding  new  encryption 
capabilities  to  the  software. 

The  Brown  Deer.  Wis.- 
based  company  said  Version 
6.0  of  PKZip  for  Windows  and 
Cnix  users  includes  a  new  se¬ 
curity  module  based  on  the 
BSAFE  encryption  technology’ 
developed  by  Bedford.  Mass.- 
based  RSA  Security  Inc, 

The  module  lets  users  pro¬ 
tect  documents  via  passwonJ- 
or  certificatc'ba.scd  encryp¬ 
tion  before  they're  transmit¬ 
ted.  PKWare  said.  The  compa¬ 
ny  added  that  the  Windows 
relea.se  also  features  new  sup¬ 
port  for  IBM's  Notes  software, 
which  lets  users  compress  and 
encrypt  e-mail  attachments. 

PKWare  also  announced  re¬ 
leases  of  its  software  for  IBM's 
mainframes  and  iSeries 
servers  that  support  up  to  256- 
bii  symmetric  key  encryption 
based  on  the  Advanced  En¬ 
cryption  Standard.  The  ISeries 
systems  were  previously 
know’n  as  the  AS/400  line. 

Securing  Critical  Data 

Features  such  as  the  ones 
announced  last  week  are  cru¬ 
cial  to  corporate  users  who 
depend  on  PKWare's  compres¬ 
sion  products  to  send  or  re¬ 
ceive  important  data  files,  said 
Gene  Knobloch.  IS  manager  at 
Gilsbar  liusuraocc  Services 
Inc.  in  Covington,  La. 

Gilsbar  has  been  using 
PKZip  technology  for  several 
years  to  compress  and  send 
medical  insurance  claims  data 
from  its  AS/400s  to  systems  at 
its  clients  in  the  health  care  in¬ 
dustry  and  to  insurance  com¬ 
panies  and  clearin^uses. 


With  an  April  1  deadline 
looming  for  complying  with 
the  federal  Health  Insurance 
Portability  and  Accountability 
Act.  KnobhK'h  said  Gilsbar 
plans  to  use  PKWare's  new 
software  to  compress  and  en¬ 
crypt  all  records  containing 
patient  health  information,  .is 
required  by  the  law. 

The  new  encryption  func¬ 
tionality  has  been  very  easy  to 
implement,  he  added.  But 
Knobloch  said  many  of  the 
clients  and  insurers  that  Gils- 
bar  deals  with  have  standard¬ 
ized  on  encryption  technolo¬ 
gies  developed  by  Palo  Alto. 
Calif.-based  PGP  Corp.  Be¬ 


cause  of  that,  it  has  been  a 
challenge  to  get  some  of  them 
to  accept  encrypted  PKZip 
flies  from  Gilsbar.  “But  we  are 
taking  that  on  one  client  at  a 
time."  Knobloch  said. 

PKZip  and  similar  compres¬ 
sion  technologies  have  pri¬ 
marily  been  used  at  (he  client 
level  in  (he  past.  But  now. 
“there  is  significant  interest  in 
compression  and  encryption 
at  the  server  level  for  batch 
file  transfers."  said  David 
Thompson,  an  analyst  at  Meta 
Group  Inc.  in  Stamford,  Conn. 

Encryption  that's  built  in  at 
the  operating  system  level, 
which  Microsoft  includes  with 


WorldCom,  Sprint  Take 
Transitional  Steps  to  IP 


Services  designed 
to  let  customers 
migrate  in  stages 

BV  MATT  HAMBLEN 

WuridCum  Inc.  and  Sprint 
Corp.  plan  to  separately  offer 
corporate  users  more  IP-based 
nctworit  service  op¬ 
tions,  including  vir¬ 
tual  private  network 
(VPN)  capabilities  that  run  on 
top  of  iraditiona)  technologies 
such  as  frame  relay. 

WorldCom  last  week  an¬ 
nounced  the  addition  of  real¬ 
time  performance  reporting 
and  traffic  management  capa¬ 
bilities  to  its  2-year-oId  VPN 
service.  Sprint  today  plans  to 
launch  three  new  services,  in¬ 
cluding  one  designed  to  help 
users  transition  from  fi^ame  re¬ 
lay  circuits  to  IP  VPNs, 

Both  companies  realize  that 
users  who  have  tightened  up 
their  IT  budgets  because  of 
the  sluggish  economy  arc  un¬ 
likely  to  disconnect  their 
frame-relay  or  Asymehronous 
Transfer  Mode  networks  and 
move  completely  over  to  IP- 


NETWORKS 


based  services  at  this  time, 
said  Max  Smetannikov.  an  an¬ 
alyst  at  Current  Analysis  Inc. 
in  Sterling.  Va. 

"WorldCom  and  Sprint  arc 
both  developing  in-between  IP 
products  for  intermediate 
steps  by  customers,"  Smetan¬ 
nikov  said.  “Both  are  adapting 
to  a  new  economic 
environment  with 
incremental  spend¬ 
ing  and  slow  migration." 

Corporate  spending  on 
voice  services  is  down,  and  in- 
VL'stments  in  data  services  are 
generally  flat,  said  Steve  Har¬ 
ris.  an  analyst  at  IDC  in  Fram¬ 
ingham.  Mass.  However.  IP- 
based  VPNs  are  one  of  the  few 
bright  spots  for  network  oper- 
atoni.  he  said. 

"Companies  are  clamoring 
for  IP  VPNs,  and  halfofU.S. 
companies  have  one  in  place," 
Harris  said.  IP  VPNs  can  help 
IT  managers  increase  network 
security,  simplify  administra¬ 
tion  and  lower  costs  compared 
with  more  traditional  network 
alternatives,  he  noted. 

Still,  carriers  such  as  World¬ 
Com  and  Sprint  make  up  a  rel- 
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Windows,  generally  works 
well  for  protecting  files  on  in¬ 
dividual  servers,  Thompson 
said.  But  technolr^ics  like 
PKWare's  can  protect  files 
even  when  they're  transferred 
from  one  system  to  another, 
he  added.  I 


atively  small  part  of  the  IP 
VPN  market.  Harris  said  net¬ 
work-based  services  comprise 
about  10%  of  the  market,  with 
current  annual  spending  at 
nearly  $700  million.  By  com¬ 
parison.  $8.4  billion  is  spent 
annually  for  IP  VPN  equip¬ 
ment  installed  at  customer 
sites,  according  to  Harris. 

Sprint  will  introduce  frame- 
relay.  private  line  packet-data 
and  virtual  1.AN  services  built 
around  its  SprintUnk  native 
IP  network.  All  of  the  services 
will  be  made  available  imme¬ 
diately.  Company  officials  said 
frame-relay  packets  will  run 
securely  over  SpriniLink.  mak¬ 
ing  it  possible  for  customers 
to  still  use  their  existing 
frame-relay  equipment. 

Pricing  wasn’t  disclosed,  but 
Pete  Parish,  director  of  product 
marketing  at  Sprint,  said  the 
new  approach  should  save  cus¬ 
tomers  up  to  20%  compared 
with  frame-relay  fees,  includ¬ 
ing  the  cost  of  permanent  vir¬ 
tual  circuits  and  port  fees. 

Harris  pointed  out  that  the 
new  ability  for  users  to  moni¬ 
tor  WortdCom’s  network  per¬ 
formance  could  help  the 
struggling  company  increase 
its  business,  since  many  net¬ 
work  managers  “don't  trust 
(he  carriers"  to  meet  agreed- 
upon  service  levels.  I 
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Retailers  Explore  Java  POS  Systems 


See  benefits  of  portabilit>’,  easy-to-modifi' 
eode,  as  well  as  possible  decrease  in  costs 


BY  CAROL  SLiWA 

Growing  numbers  of  retailers 
are  scoping  out  |ava-based 
point-of-sale  (POS>  systems  as 
one  option  to  replace  their  ag¬ 
ing  cash  registers. 

Several  retailers  that  are  ei¬ 
ther  deploying  or  piloting  lava 
POS  systems  said  they  like  the 
feet  that  the  software  can  run 
on  any  hardware  or  operating 
s^-stem  and  also  noted  that 
they’re  finding  the  code  easy 
to  modify  as  their  needs  ex¬ 
pand.  Some  also  reported  de¬ 
creases  in  implementation  and 
support  costs,  depending  on 
the  additional  systems  choices 
they  have  made. 

“We  want  something  that 
won't  lock  us  into  any  particu¬ 
lar  platform  and  will  give  us 
the  flexibility  to  deploy  it  in 
whatever  way  we’d  like  in  the 
future.’' said  Mike  Prince.  CIO 
at  Burlington  Coat  Factory 
Warehouse  Corp.  in  Burling¬ 


ton.  N.J.  Prince  said  his  com¬ 
pany  has  committed  to  a  lava 
POS  system  on  Linux  and  is 
rolling  out  the  Linux  operating 
system  but  has  postponed  the 
Java  POS  portion  because  of 
competing  projects- 

Robin  Lynas. 

CIO  at  Mark’s 
Work  Wearhouse 
Ltd,  a  Calgary.  Al¬ 
berta-based  chain 
that  was  acquired 
last  year  by  Cana¬ 
dian  Tire  Corp.. 
found  himself 
peppered  with 
questions  from 
fellow  retailers  at 
(he  National  Retail  Federation 
Conference  &  Expo  earlier  this 
month  in  New  York. 

The  Canadian  anailcr  has 
rolled  out  its  Ja\’a  POS  s>'stcm 
from  Retek  Inc.  to  new  Linux- 
based  IBM  terminals  at  70 
stores.  Plans  call  for  the  roil- 


»  We  want 
something 
that  won’t  lock 
us  into  any  par¬ 
ticular  platform. 

MIKE  PRINCE.  CIO 
BURLINGTON  COAT  FACTORY 


out  at  the  remaining  240 
stores  to  be  completed  by  the 
end  of|unc. 

"My  guys  said.  'Do  wc  really 
want  to  pay  Micn^soft  licens¬ 
ing  fees?  Why  don’t  you  go 
open  systems?’ "  Lynas  re¬ 
called.  Once  they  pnwed  that 
the  POS  system  would  run  on 
Linux,  he  was  sold. 

Mari's  Work  Wearhouse 
claims  to  have 
lowered  store 
opening  costs  by 
30%  and  mainte¬ 
nance  costs  by 
50%.  in  part  be¬ 
cause  it  no 
longer  needs  in¬ 
store  servers. 

The  registers  will 
connect  directly 
via  frame  relay  to 
central  servers  at  the  home  of* 
fvee.  (hanks  in  part  to  Java’s 
networking  class  libraries,  ac¬ 
cording  to  Retek  Chief  Tech¬ 
nology  Officer  John  Gray. 

Another  advantage  that 
Mark's  Wori  We3ri)ouse  has 
found  is  the  ease  with  which 


New  BEA  Service  Helps 
Java  Developers  Use  XML 


Separately.  Sun 
ONE  Studio  gets 
modeling  Uxil 


BY  CAROL  SLIWA 

BEA  Systems  Inc.  today  plans 
to  introduce  a  hosted  service 
that  it  claims  will  help  Java  de¬ 
velopers  incorporate  XML 
data  into  their  applications. 

The  San  Jose-based  compa¬ 
ny  is  launching  a  beta  version 
of  BEA  XMLBeans  through  its 
Web  site.  Developers  who 
submit  XML  schema  will  gain 
access  to  a  set  of  |ava  classes 
that  they  can  use  in  their  ap¬ 
plications  to  manipulate  XML 
data,  according  to  Carl  Sjo- 
green,  a  senior  product  man¬ 
ager  at  BEA. 

Sjogreen  said  companies  in¬ 
vest  in  XML  schema  to  de¬ 
scribe  XML  data,  but  when 


they  try  to  bring  the  XML 
schema  into  a  Java  application, 
they  often  lose  the  constraints 
or  validation  rules,  since  only 
the  basic  structure  of  the  XML 
schema  is  preserv-ed. 

To  work  with  XML.  Java  de¬ 
velopers  often  have  to  write 
tedious  code  to  walk  through 
the  low-level  structure  of 
XML  information,  or  they 
have  to  forcc-fit  XML  data 
into  their  Java  applications. 
Sjogreen  said. 

BEA  plans  to  conduct  a  live 
online  seminar  on  Wednesday 
at  noon  ESI'  to  explain  how 
XMLBeans  works. 

Sjogreen  said  BEA  will  work 
to  standardiae  XMLBeans  ei¬ 
ther  through  the  Java  Commu¬ 
nity  Process  or  the  open- 
sourcc  community. 

In  a  separate  development. 
Sun  Microsystems  Inc.  today 


plans  to  announce  that  a  Uni¬ 
fied  Modeling  Language 
(UML)  tool  from  Embar- 
cadcro  Technologies  Inc.  will 
ship  with  its  Sun  ONE  Studio 
integrated  development  envi¬ 
ronment  (IDE). 

Jeff  Anders,  a  group  market¬ 
ing  manager  for  Sun  ONE  Stu¬ 
dio.  said  Lnistomers  have  been 
asking  for  UML  modeling  ca¬ 
pabilities  in  IDEs,  and  Sun 
chose  Embarcadero’s  tool,  in 
pan.  because  of  its  tight  inte¬ 
gration  with  Sun  ONEStudlo- 

A  CD  containing  Embar- 
cadero's  Describe  6.0  product 
wilt  ship  in  the  same  box  as 
the  next  version  of  Sun  ONE 
Studia  but  developers  who 
choose  to  purchase  the  license 
will  have  to  contact  Embar- 
cadero,  Anders  said.  Sun  won’t 
be  selling  the  product.  I 
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developers  can  bolt  on  new 
applications  that  connect  to 
the  POS  sy-siem.  Those  include 
Web  site,  time  sheet,  business 
account  and  Web  reponing  ap¬ 
plications.  Lynas  said. 

“Retek  givL-s  you  the  lava 
source  code  for  their  POS  ap¬ 
plication,"  L>nas  said.  "You 
just  lake  the  objects  they’ve 
got  and  extend  them  and  write 
your  new  functionalit)." 

Java  at  Home  Depot 

Atlanta-based  The  Home  De¬ 
pot  Inc.,  whose  IT  shop  is 
heavily  invested  in  java,  set¬ 
tled  on  a  Java  Pf)S  system 
fn»m  360Commerce  Inc.  in 
Austin.  Texas,  so  it  would  be 
able  to  migrate  code  between 
clients  and  ser\’ers  running 
disparate  operating  systems, 
said  Ray  Allen,  director  of  IT. 

The  POS  terminals  run 
Windows  2000.  and  the  ser\'- 
ers  run  different  flavors  of 
Unix  from  Hewlett-Packard 
Co.  and  IBM.  Allen  noted. 

"POS  applications  typically 
live  for  10  to  12  years,  and 
they'n.'  very  tightly  iniL'gratcd 
with  whatever  the  retailer 
chiHJses  to  provide."  he  said. 
“So  you’re  iiying  to  make  the 
best  gucssL*s  for  w-hai  might  be 
going  on  five  to  sLx  years 
dowTt  the  road." 

Allen  said  changes  can  be 
made  “much  easier  and  faster 
with  a  component-based  solu¬ 
tion.  [distributed)  architecture 
and  object-oriented  language 
like  Java.’’ 

lerry  Rightmcr.  CTTO  at  360- 
Commerce.  said  building  a 
K>S  system  in  Java  was  “a  fair¬ 
ly  risky  decision"  in  1997  when 
his  company  began  developing 
products.  But  he  said  the  list 
of  lava  POS  vendors  b  grow¬ 
ing  and  now  includes  PCMS 
Datafit  Inc..  JDA  Software 
Group  Inc.  and  TriversUy  loc.. 
among  others. 

“The  language  b  easier  to 
wx>rk  with  than  pn-vinus  gen¬ 
erations  of  languages,  it’s 
more  productive  than  C  or 
C**.  and  it  has  all  the  benefits 
of  objevt-oriented  languages 
without  some  of  the  traps  and 
pitfalls  of  in  particular." 


Java  positives 


he  said.  “Plus,  it  has  an  ex¬ 
tremely  rich  set  of  APIs  that 
has  made  it  easy  for  us  to  inte¬ 
grate  with  third-party  middle¬ 
ware  and  databases." 

Urs  Karrer.  an  analyst  at 
McLe.in.  Va.-bastxl  Bearing- 
I\>int  Inc.,  which  was  formerly 
KPMG  Oinsulting.  said  he 
thinks  more  vendors  ultimate¬ 
ly  will  opt  for  Java  for  porta¬ 
bility  reasons.  But  he's  not  so 
sure  how  much  that  will  mat¬ 
ter  to  customers.  “Retailers 
don’t  care  that  much  unless 
they  have  a  custom  develop¬ 
ment  shop.”  Karrer  said- 

lames  Crawford,  an  anah-st 
at  Forrester  Research  Inc.  in ' 
Cambridge.  Mass.,  said  the  re¬ 
tail  trend  toward  mw  POS 
systems  has  nothing  to  do 
with  lava.  Microsoft  Corp.’s 
.Net  or  any  other  development 
platform.  He  said  retailers 
simply  want  an  »^n  POS  sys¬ 
tem  that  can  be  used  with  ony 
hardwarc  or  software,  os  op¬ 
posed  to  old  POS  systems  that 
often  had  integraiod  and  pro¬ 
prietary  hardware,  softwaa' 
and  data  platforms. 

But  Paula  Rosenblum.  an 
analyst  at  AMR  Research  Inc. 
in  Boston,  said  the  Java  POS 
story  has  become  interesting 
because  of  some  very  high- 
profile  pilots,  and  she  expects 
rollouts  to  escalate  thb  year.  I 
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Microsoft  Ships 
CRM  Software 

Microsoft  Corp.  his  mide  its 
customer  rslalkmship  manage' 
ment  (CRM)  aiiphcations  avai)- 
able  to  users  in  the  and 
Canada,  tl  had  deiayed  the  CRM 
retease  test  month  but  said  the 
sofhwire  should  be  ready  tvithtn 
a  matter  of  weeks  ((JuickUnk 
35263).  Versions  of  Microsofl 
CRM  for  users  in  Europe,  Asia 
and  Latin  America  are  due  in  the 
second  half  of  the  year. 


Forrester  Agrees 
To  Acquire  Giga 

In  a  deal  that  wouid  combine  two 
highirroflle  IT  consulting  Arms  kt 
Cambridge.  Mass..  Forr^er  Re¬ 
search  kic.  has  agreed  to  buy 
Oiga  Information  Group  Inc.  for 
S51  mMion  bi  cash.  No  layoffs 
are  currently  planned,  dtey  said. 
The  acquiii^  is  eipecled  to  be 
completed  next  month  if  90%  of 
Giga's  shares  are  pledged  to  For¬ 
rester  urtder  a  tender  offer. 


Lucent  Sees  Loss, 
Inks  Cisco  Deal 

Lucent  Tadmologies  Inc.  report¬ 
ed  a  $264  million  net  loss  on 
revenue  of  $2.08  billion  for  its 
Arst  quarter,  whicb  ended  Dec. 
31.  The  revenue  level  was  down 
42%  from  $3.58  bilion  in  the 
same  period  a  year  earlier.  Mur¬ 
ray  NIL  NJ. -based  Lucent  also 
said  it  pians  to  reseli  sonte  of 
Cisco  Systems  lnc.’s  mobile 
voice  md  data  networiUrtg 
equipment  as  part  of  its  product 
line  lor  network  operators. 


Short  Takes 

The  iudge  overseeing  SUN  MI¬ 
CROSYSTEMS  INC.’S  antitrusi 
lawsuit  agaiitst  MICROSOFT  set 
Feb.  4  as  the  start  of  a  120-day 
countdown  for  Microsoft  to  ki- 
chide  Sun's  versaon  of  Java  with 
Windows  XP. . . .  CISCO  AM  a 
lawsuit  diarging  Chinese  vendor 
HUAWEi  TECHNOLOGIES  CO.  with 
uMawfuily  copying  its  intemet- 
workirtg  software. 


MARK  HA1.I.  •  ON  THE  MARK 

Wintel  Advocate  Frets 
That  High^ch  Duo . . . 

. . .  could  hamper  U.S.  dominance  in  high-performance  computing  in 
the  future.  Coming  from  a  RlSC/Unlx  bigot,  such  concerns  might  be 
little  more  than  sour  grapes.  But  when  uttered  by  David  Lifka,  CTO  at 
the  Cornell  Theory  Center  ((TTC)  in  Ithaca,  N.Y.,  they  carry  much 
more  weight.  Lifka  designs  supercomputing-ciass  systems  for  1.200  Cornell 
University  scientific  researchers,  scheduling  more  than  100  CPU-intensive 
programs  that  run  only  on  Wintel  systems  from  Dell  and  Unisys.  Per¬ 
formance.  rcliabUiiy  and  cost  are  far  bet-  nothing  but  praise  for  Intel’s  Itanium  2 
ter  than  anything  from  the  RISC/Dnix  processor,  ‘you  don't  want  to  have  only 

camp,  he  claims.  Seven  years  ago.  when  one  hardware  vendor  in  town."  he  ar- 

L  ifVa  arrived  at  CTC,  the  Wintel  advan-  gues.  ‘No  single  vendor  can  do  it  by 

tage  u'as  simply  in  cost  or  in  themselves.'  Competition 


the  slippery  metric  of  price/ 
performance.  That  has  all 
changed.  ‘Right  now.  we’re 
getting  better  performance, 
period,  at  a  fraction  of  the 
cost."  he  says.  Porting  exist¬ 
ing  supercomputing  applica¬ 
tions  to  W'indows  was  aho  a 
snap.  The  biggest,  with  30 
million  lines  of  code,  took 
a  mere  month  to  migrate. 
Moreover,  users  rave  about  | 
the  ease  of  use  of  Windows 
tools.  The  researchers  like 
the  fact  that  ‘they  don’t  have 
to  do  computer  science  to  do 
their  own  work."  So.  what's  to 
gripe  about?  Lifka  worries 
that  the  advent  of  "high-per¬ 
formance  computing  for  the 
ma.sscs"  combined  with  to¬ 
day's  sour  economy  means 
‘users  are  not  focusing  on  inno¬ 
vation.*  Although  Lifka  ha.s 
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among  supercomputer  ven¬ 
dors  brought  countless  ben- 
eTits  to  commercial  users 
with  advances  in  the  areas  of 
multiprocessing,  job  sched¬ 
uling.  data  analytic-s  and  oth¬ 
ers.  If  that  competition  evap¬ 
orates.  Lifka  rightly  wonders 
whether  the  advantages  high 
technology  gives  U.S.  busi¬ 
ness  and  science  w’ill  disap¬ 
pear  with  it  •  Luckily,  compe¬ 
tition  is  rampant  in  the  storage- 
area  network  (SAN)  manage¬ 
ment  market,  and  that's  lead¬ 
ing  to  more  feature-rich 
pnrduct.s.  For  example,  Mc- 
Data  Corp.  in  Broomfield. 
ColOo  this  week  will  unveil 
SANavigator  3.5  with  signifi¬ 
cant  advances  in  device 
management  One  that 
should  catch  your  eye  is  the 
software’s  ability  to  discover 


and  monitor  performance  of  IP  gateways 
to  Fibre  Channel  SANs.  And  in  a  release 
of  SANavigator  later  this  year,  you’ll  get 
even  more  refined  management  of  IP  de¬ 
vices.  such  as  oversight  of  an  IP  gate¬ 
way's  assignment  to  a  Logical  Unit  Num¬ 
ber  within  your  SAN.  •  Speaking  of  IP 
management,  on  Feb.  17.  SccurcLogix 
Corp.  in  San  Antonio  will  demo  at  Voice- 
Con2()03  in  Washington  a  prerelease  ver¬ 
sion  of  its  Enterprise  Telephony  Manage¬ 
ment  TeieWall  security  ArewaH  for  VOIP 
trafAc  going  outside  the  campus  to  an  IP 
voice  trunk.  Although  most  companies 
today  use  a  gateway  to  translate  VOIP 
data  to  a  standard  telephony  time  divi¬ 
sion  multiplexer  format,  company  Presi¬ 
dent  Lee  SutteiTield  thinks  the  day  will 
come  when  VOIP  networks  become 
widespread,  with  security  a  bigger  issue. 
■  The  Web  analytics  market,  afr^y 
chock-a-fatoek  with  vendors,  wil  get  even 
more  competitive  late  next  week  when  Sun¬ 
nyvale.  Calif.-based  start-up  CUckTracks 
Inc.  releases  its  ClickTracI^  Analyzer. 
CEO  John  Marshall  acknowledges  that 
“it’s  a  crazy  time  to  start  a  company  in  a 
highly  competitive  market."  But  he  thinks 
users  wil)  sit  up  and  take  notice  of  at 
least  two  advantages  his  software  has. 
First,  price.  At  $495.  he  expects  marketing 
directors  will  skip  a  couple  three-martini 
kirtches  just  to  play  with  the  PC-based 
product  that  slurps  data  from  any  Web 
log  and  cranks  out  graphical  views  of 
Web  site  visitor  behavior.  Besides  being 
cheap,  the  software  answers  questions 
that  keep  e-conunerce  gurus  up  at  n^ht. 
Such  as.  Are  those  terms  you  pay  Google 
and  Yahoo  a  small  fortune  for  as  success¬ 
ful  as  unpaid  terms  that  bring  visitors  to 
your  site?  For  IT  managers  who  don't 
want  marketing  mavens  downloading 
Web  logs  sober  or  otherwise,  an  enter¬ 
prise  version  with  central  management 
features  can  be  had  for  S1.495.  A 


BMC  Plays  Catch-up  on 
Network  Fault  Detection 


BV  tMATT  HAIMBI.EN 

BMC  Software  Inc.  today 
plans  to  announce  the  addi¬ 
tion  of  fault  management  ca¬ 
pabilities  to  its  network  per¬ 
formance  monitoring  tool,  a 
move  that's  intended  to  close  a 
functionality  gap  between  the 
company  .ind  rival  x'endors. 

Houston-based  BMC  said 
(he  addition  of  the  new  com¬ 
ponent  won't  result  in  a  price 
itwreasc  on  its  Patrol  Vtsuali.s 
software,  which  became  avail¬ 


able  early  last  year  and  has  a 
starting  price  of  $40,000. 

Gerry  Roy,  director  of  prod¬ 
uct  management  at  BMC.  ac¬ 
knowledged  that  the  combined 
ability  to  provide  users  with 
performance  data  and  to  iden¬ 
tify  network  faults  and  failures 
follows  an  industry  trend.  But 
the  BMC  feature  is  unique  be¬ 
cause  it  pairs  the  two  offerings 
within  a  single  graphical  u.scr 
interface,  he  claimed. 

Canada  Life  Assurance  Co. 


has  tested  BMC's  Fault  Man¬ 
ager  tool  and  is  considering 
using  it  to  assist  its  help  desk 
workers  in  spotting  network 
problems,  said  Arkadi  Chekht- 
man.  a  network  specialist  at 
the  Toronto-based  insurer. 

“If  somebody  was  looking 
from  time  to  time  at  a  network 
map.  they  could  see  a  node- 
change  color  if  it  goes  down 
and  see  what  other  compo¬ 
nents  it's  related  to  and  then 
inform  people  in  the  business 
unit,”  Chekhtroan  said.  “There 
arc  tons  of  fault  management 
tools,  but  I  haven’t  seen  one 
with  the  network  map  and 
fault  management  linked." 


Analyst  )can-Pierre  Garbani 
at  Giga  Information  Group 
Inc.  in  Cambridge,  Mass.,  said 
BMC’s  aimouncement  initially 
was  expected  last  year,  ‘but 
better  late  than  never." 

BMC  needs  to  offer  both 
fault  and  performance  man¬ 
agement  capabilities  in  order 
to  win  new  customers  for  Pa¬ 
trol  Visualis,  Garbani  said.  He 
added  that  the  rollout  means 
that  each  of  the  top  four  net¬ 
work  and  systems  manage¬ 
ment  vendors  —  BMC.  Com¬ 
puter  Associates  Iniemational 
Inc..  Hewlett-Packard  Ca  and 
IBM’s  Ttvoli  Software  unit  — 
now  provide  the  two  features.  I 
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Forrester  Agrees 
To  Acquire  Giga 
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Lucerrt  Sees  Loss, 
Inks  Cisco  Deal 

Lilcant  lachnaleglaa  toe,  nport- 
ad  a  S264  ioMton  not  looa  on 
ranma  of  12.06  Witoa  for  Rs 
Orto  guwtor,  whfcb  andad  Doc. 
Si  Ite  nvanua  fovol  wan  down 
42%  from  S3Je  WMon  to  IN 
aanw  partod  a  year  aaritor.  Mur¬ 
ray  HR,  ItJ.  haaad  Lueont  aba 
aaU  K  ptoaa  to  naal  aaiM  of 
Qoao  Syatoma  toe.'a  mototo 
vaiea  Md  data  aaCwarfdiig 
aqaipinant  aa  part  of  ib  product 
Ina  tor  natwutli  opwaton. 


Short  Takes 

lha  todpa  annaatog  SUN  Mh 
CR05VSTB6  MC.’a  aMtouat 
tanwR  VMM  MKROSOR  aal 
Fik  4  M  6m  atort  af  a  120^ 
oanoldBaHi  far  Mfcroaefl  to  to* 
efudo  San*!  vanlen  of  Jam  with 
lllltoda«aXP....CtSCOIIoda 
ImnmN  cNargtog  CMnaao  vandor 
HUMVB  TECHHOUNNES  CO.  wilb 
untowfaly  copying  Ha  totomat- 
wofhtog  aoflwara. 


MARK  HALL  ■  ON  THE  MARK 

Wintel  Advocate  Frets 
ITiat  HigJi^Iech  Duo . . . 

. . .  could  hamper  U.S.  dominance  in  high-performance  computing  in 
the  future.  Coming  from  a  RISC/Unix  bigot,  such  concerns  might  be 
little  more  than  sour  grapes.  But  when  uttered  by  David  Lifka.  CTO  at 
the  Cornell  Theory  Center  ((TTC)  in  Ithaca,  N.Y.,  they  carry  much 
more  weight.  Lifka  designs  tayafcoinpu(ing“Cias8  systems  for  UlOO  Cornell 
University  scientifle  researchers,  scheduling  more  than  100  CPU-intensive 
programs  that  run  only  on  Wintel  systems  from  Dell  and  Unisys.  Per- 


formaace,  reliabilicy  and  cost  are  {21  bet* 
ter  than  anything  from  the  RlSCTUnix 
camp,  be  claims.  Seven  years  ago,  wbeo 
Lifka  arrived  at  CTC.  the  Wintel  advaik* 
uge  was  simply  in  cost  or  in 
the  slippery  metric  of  price/ 
performance.  That  has  all 
changed.  “Right  rtow,  wc'rc 
gening  bener  performance, 
period,  at  a  fraction  of  the 
cosc.”  he  says.  Porting  exist* 
ing  supercomputii^  applica¬ 
tions  to  Windows  was  also  a 
snap.  The  biggest,  with  30 
million  lines  of  code,  took 
a  mere  month  to  migrate. 

Moreover,  users  rave  about 
the  ease  of  use  of  Windows 
tools.  The  researchers  like 
the  fact  that  “they  don't  have 
to  do  computer  science  to  do 
their  own  work."  So,  what's  to 
gripe  about?  Lifka  worries 
that  the  advent  of  “high-per¬ 
formance  computing  for  the 
masse.s“  combined  with  to¬ 
day's  sour  economy  means 
“unrs  ara  Ml  fecuitog  on  tano- 
volion.*  Although  Lifka  has 


nothing  but  praise  for  Intel's  Itanium  2 
processor,  “you  don't  want  to  have  only 
one  hardware  vendor  in  town.”  be  ar¬ 
gues.  “No  single  vendor  can  do  it  by 
themselves.”  Competition 
among  supercomputer  ven¬ 
dors  brou^t  countless  ben¬ 
efits  to  commercUl  users 
with  advances  in  the  areas  of 
multiprocessing,  job  sched¬ 
uling,  data  analytics  and  oth¬ 
ers.  If  that  competition  evap¬ 
orates,  Lifka  ri^tly  wonders 
whether  the  advantages  high 
technology  gives  U3.  busi¬ 
ness  and  science  will  disap¬ 
pear  with  it.  ■  Luehiy.  cotnpe- 
6Hen  is  miManl  to  6»  atoraga- 
«M  RStworfc  (SAN)  manage- 
meni  maricet,  and  that’s  lead¬ 
ing  to  more  feature-rich 
products.  For  example,  Mc- 
Data  Corp.  in  Broomfield, 
Colo.,  this  week  will  unveil 
SANavigaior  3.5  with  signifi¬ 
cant  advances  in  device 
management  One  that 
should  catch  your  eye  is  the 
software's  ability  to  discover 


and  monitor  performance  of  IP  gateways 
to  Fibre  Channel  SANs.  And  in  a  release 
of  SANavigator  later  this  year,  you'll  get 
even  more  refined  management  of  IP  de¬ 
vices,  such  as  oversi^t  of  an  IP  gate¬ 
way's  assignment  to  a  Lexical  Unit  Num¬ 
ber  within  your  SAN.  ■  Spe^dng  of  IP 
management,  on  Feb.  17,  SecureLogix 
Corp.  in  San  Antonio  will  demo  at  Voice- 
Con2003  in  Washington  a  prerelease  ver¬ 
sion  of  its  Enterprise  Telephony  Manage¬ 
ment  Tele  Wall  aaeurfly  firewil  tor  VOP 
trafllc  getog  outahto  6n  eaniguB  to  an  IP 
voice  crunk.  Altbou^  nsost  companies 
today  use  a  gateway  to  translate  VOtP 
data  to  a  standard  telephony  time  dhri- 
sion  multiplexer  format,  company  Presi¬ 
dent  Lee  Sutterfield  thinks  the  day  will 
come  when  VOIP  networks  become 
widespread,  with  security  a  bigger  issue. 
■  The  Web  analytics  maiicet,  alreudy 
chuck -a-Mock  with  vwidocc,  wfll  gto  uvm 
man  conqwtIUn  late  next  week  when  Sun¬ 
nyvale,  Calif-based  stait-up  Clickl>acks 
Inc.  releases  its  ClickTVacks  Analyzer. 
CEO  John  Marshall  acknowledges  that 
“it’s  a  crazy  time  to  start  a  company  in  a 
highly  competitive  market."  But  he  thinks 
users  will  sit  up  and  take  notice  of  at 
least  two  advantages  his  software  has. 
First,  price.  At  S49S.  be  expects  mariwllng 
iflnclon  wR  skip  •  coupto  thrarmartini 
lunchac  Just  to  play  with  the  PC-based 
produa  that  slurps  data  from  any  Web 
log  and  cranks  out  graphical  views  of 
Web  site  visitor  behavior.  Besides  being 
cheap,  the  software  answers  questions 
that  keep  e-commerce  gurus  up  at  night 
Such  as.  Are  those  terms  you  pay  Google 
and  Yahoo  a  small  fortune  for  as  success¬ 
ful  as  unpaid  terms  that  bring  visitors  to 
your  site?  For  IT  managers  who  don't 
want  mariteting  mavens  downloading 
Web  logs  sober  or  otherwise,  an  enter¬ 
prise  version  with  central  management 
features  can  be  had  for  Sl/495. 1 


BMC  Plays  Catch-up  on 
Network  Fault  Detection 


■v  narr  hamuccm 

BMC  Software  Inc.  today 
plans  to  announce  the  addt- 
don  of  fault  management  ca¬ 
pabilities  to  its  network  per¬ 
formance  monitoring  tool,  a 
move  that’s  intended  to  close  a 
functionality  gap  between  the 
company  and  rival  vendors. 

Houston-based  BMC  said 
the  addition  of  the  t>ew  com¬ 
ponent  won't  result  in  a  price 
increase  on  its  Patrol  Visualis 
software,  which  became  avail¬ 


able  early  last  year  and  has  a 
starting  price  of  S40XX)0. 

Gerry  Roy.  director  of  prod¬ 
uct  management  at  BMC  ac¬ 
knowledged  that  the  combined 
ability  to  provide  users  with 
performance  data  and  to  iden¬ 
tify  network  hiults  and  failures 
follows  an  industry  trend.  But 
the  BMC  feature  is  unique  be¬ 
cause  it  pairs  the  two  offerings 
within  a  single  graphical  user 
inierfiux,  be  claimed. 

Canada  Life  Assurance  Co. 


has  tested  BMC’s  Fault  Man¬ 
ager  tool  and  is  considering 
using  it  to  assist  its  help  desk 
workets  in  spotting  network 
problems,  said  Arkadi  Chekht- 
man,  a  network  specialist  at 
the  Toronto-based  insurer. 

“If  somebody  was  lookup 
from  time  to  time  at  a  network 
map,  they  could  see  a  node 
change  color  if  it  goes  down 
and  see  what  other  compo¬ 
nents  it's  related  to  and  then 
Inform  people  in  the  business 
unit,"  Cbekhtman  said.  “There 
are  tons  of  fault  management 
tools,  but  I  haven't  seen  one 
with  the  netvrorit  map  and 
fault  nunagement  linked." 


Analyst  jean-Pierre  Garbani 
at  Giga  Information  Group 
Inc.  in  Cambridge,  Mass.,  said 
BMC's  announcement  initially 
was  expected  last  year,  “but 
bener  late  than  never* 

BMC  needs  to  offer  both 
fault  and  performance  man¬ 
agement  capabilities  in  order 
to  win  new  customers  for  Pa¬ 
trol  Visualts.  Garbani  said.  He 
added  tb^  the  rollout  means 
that  each  of  the  top  four  net¬ 
work  and  systems  manage¬ 
ment  vendors  ~*  BMC  Com¬ 
puter  Associates  International 
Inc.,  Hewlen-Packard  Co.  and 
IBM's  Tivoli  Software  unit  — 
now  provide  the  two  features.  I 


Redirect 
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Refresh 

Reshape 

Refocus 

Relieve 


Reallocate  your  resources. 


HP  ProUont  DL  S8062  Server 
with  Intel'  Xeon"'  processors 

Server  time  and  spoce  ore  precious  commodities,  at  leost  from  where 
you're  sitting.  Your  customers  are  clamoring  for  more,  more,  more,  while 
you  try  to  figure  out  how  to  deliver  wHh  less,  less,  less. 

HP  ProLiant  servers,  powered  by  Intel*  Xeon***  processors,  put  you  in 
control  of  your  resources  so  that  you  con  reolize  the  true  poter^l  of  your 
infrastructure.  ProLiant  Essentials  Wsridoad  Monogement  Pock  software 
lets  you  allocate  your  resources  to  specific  tasks  ond  then  reoAocote  them 
as  needed —outomatioaly.  Ws  col  it  Dynamic  Resource  Scaling.  And  with 
this  added  control  and  increased  visibility,  you  moy  even  find  you 
can  boost  efficiency  by  plocing  more  worklood  on  those  some  servers. 

It  all  odds  up  to  foster,  better  distribution,  increosed  ROt  and  gigontic 
leaps  forward  in  customer  satisfaction .  Which,  of  course,  is  o  relief  to  you. 

Visit  www.hp.coni/go/proKcHit73  oc  coll  1.S00.2S3.6672, 
option  ond  montion  codo  XFE  for 'a  whilo  popor  on 
odoptivo  infrostrwcturo  and  o  fro#  triol  of  HP  Proliont 
Essontiols  software: 


XEON 
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HP  Plans  SAN-Level 
Storage  Virtualization 

_  .  ftr  arrav-Kac^H  vimialiTati 


New  software,  switches  aim  to  unify 
disk  space  across  storage  networks 


•T  LUCAS  MCAmAN 

IN  ONE  of  the  first  at¬ 
tempts  by  a  top  IT  ven¬ 
dor  to  support  networit- 
ba^  storage  vimuliaa- 
tk>n,  Hewlett-Packard  Ca  last 
wedc  announced  plans  to  use 
new  software  to  i«  IT  admin¬ 
istrators  manage  all  of  the  disk 
space  on  storage-area  net¬ 
works  (SAN)  as  a  single  entity. 

HP  said  that  it  plans  later 
this  year  to  make  its  VeisaStor 
storage  virtualization  software 
available  on  a  new  class  of 
SAN  switches  that  San  lose- 
based  Brocade  Clommunica- 
tions  Systems  Inc.  will  acquire 
through  its  proposed  buyout 
of  Rhapsody  Networks  Inc.  in 
Fremont,  C^alif.  VersaSlor  will 


also  be  integrated  into  HP's 
Open  View  Continuous  Access 
Storage  Appliance  (CASA),  a 
bundled  set  of  hardware  and 
software  that  handies  data  mi¬ 
gration  and  replicatiotL 

VersaStor  will  extend  the 
reach  of  CASA  to  the  network 
level  where  the  appliance  will 
work  with  Brocade's  switches 
to  coordinate  SAN  operations 
and  to  make  the  various  arrays 
and  server-level  storage  de¬ 
vices  attached  to  a  network 
look  like  one  big  pool  of  stor¬ 
age  space.  HP  said  (see  box). 

Virtualization  has  become 
the  cornerstone  of  efibrts  to 
develop  more  automated  stor¬ 
age  infrastructures.  Currently, 
most  vendors  support  server- 


or  array-based  virtualization, 
where  the  software  is  installed 
on  a  single  device.  Network- 
based  virtualization  promises 
to  allow  disk  storage  devices 
across  an  entire  SAN  to  be 
centrally  managed  and  provi¬ 
sioned. 

For  Rick  Allen,  director  of 
IT  operations  at  Gwinnett 
Health  System  in  Lawrence- 
ville,  Ga..  network  virtualiza¬ 
tion  offers  the  potential  to  si¬ 
multaneously  serrd  real-time 
copies  of  data  from  different 
disk  arrays  to  an  off-site  data 
center.  That  capability  "makes 
the  whole  disaster  recovery 
scenario  a  lot  easier,”  said 
Allen,  whose  organization 
owns  HP  servers  and  storage 
devices  plus  equipment  from 
IBM  and  Dell  Computer  Corp. 

The  network  approach 
would  also  provide  users  with 


a  single  point  of  management 
for  SAN-based  storage,  Allen 
added.  'You’re  not  having  to 
virtualize  at  the  machine  lev¬ 
el”  he  said. 

The  combined  HP/Brocade 
product  offering  is  the  first  in¬ 
carnation  of  network-based 
virtualization  ftom  a  major  IT 


Minerals  Rrm  Unearths  Remote  iNotes  Access 


Imerys’  woes 
solved  by  plug-in 


av  TOGO  a.  wems 
Dave  Bailey  went  to  the  Lo- 
tuspbere  2002  conference 
whra  be  needed  information 
on  how  to  deploy  IBM's  new 
Lotus  iNotes  Web  Access  soft¬ 
ware  to  3.000  global  users. 

ThbweekaiLo* 
tusphere  2003  in 
Orlando.  Bailey,  a 
senior  consultant  for  global  IT 
at  Paris-based  minerals  supply 
company  Imerys.  aims  to  gath¬ 
er  more  information  to  facili- 
ate  his  pending  first-quarter 
deployment. 

Bailey,  who  is  based  in 
Roswell  Ga.,  said  last  year's 
show  provided  several  ideas 
ibr  accessing  iNotes  using  a 
reverse  proxy  server  setup.  He 
said  be  tried  settii^  up  INotes 
with  three  different  recom¬ 
mended  proxy  servers  from 
Sun  Microsystems  Inc..  Micro¬ 
soft  (3orp.  and  IBM.  But  Bailey 


LOTUSPHERE 


said  none  could  be  configured 
properly  for  his  systems. 

Bailey  said  be  achieved  the 
goal  of  giving  his  corporate 
users  secure  access  to  their 
e-mail  via  iNotes  with  a  prod¬ 
uct  from  Whale  (^oununica- 
tioRS  Ltd.  in  Fort  Lee.  N.J. 

Whale’s  product,  the  e-<jap 
Remote  Access  Appliance,  is  a 
phig-in  device  that  Bailey  said 
met  his  reverse- 
proxy  require¬ 
ments.  creating  a 
protective  security  layer  be¬ 
tween  his  remote  users  and 
the  compaiqr’s  Internet  infta- 
structxire.  Pricing  for  the  de¬ 
vices.  which  are  essentially 
Secure  Sockets  Layer/virt^ 
private  networic  (VPN)  appli¬ 
ances,  begins  at  S23X)00. 

Richard  Stiennon,  an  analyst 
at  (Partner  Inc.  in  Stamford, 
Conn.,  said  Whale  has  been 
gaining  attention  recently  be¬ 
cause  its  appliances  enable 
secure  e-mail  access  throu^  a 
Web  site,  while  removing  the 
need  for  an  individual  VPN. 


"Whale's  been  having  tremen¬ 
dous  success  in  that  market 
space.”  Stiennon  said. 

Whale  will  be  one  of  about 
150  exhibitors  at  this  year’s 
Lotuspbere.  where  keynote 
speakers  will  include  former 


New  York  Mayor  Rudolph 
Giuliani  The  show's  themes 
will  go  beyond  Lotus  to  cover 
IBM  WebSphere,  DB2.  Tivoli 
and  hardware  offerings.  Lotu- 
sphere  will  go  on  for  at  least 
another  five  years.  IBM  said.  I 


vendor,  said  Randy  Kerns,  an 
analyst  at  Evaluator  Group 
Inc.,  a  market  research  firm  in 
Englewood.  Colo.  "Before,  it 
was  all  small,  independent 
companies  with  their  own  so¬ 
lutions.”  Kerns  said. 

However,  a  spokeswoman 
for  Sun  Microsystems  Inc.  said 
the  company  plans  to  ship  vir¬ 
tualization  software  as  part  of 
its  N1  resource-management 
technology  initiative  next 
quarter  —  ahead  of  HFs  plan 
to  release  its  technology  dur¬ 
ing  the  second  half  of  the  year. 

Pooled  storage 

Sun's  offerii^  will  include 
software  that  it  bought  as  part 
of  Its  acquisition  of  Acton. 
Mass.-based  Pirns  Networks 
Inc.  in  November,  the  spokes¬ 
woman  said.  The  Pirus  tech¬ 
nology  lets  IT  managers  pool 
storage  from  a  variety  of 
servers,  including  ones  run¬ 
ning  Sun's  Solaris  operating 
system,  other  Unix  releases, 
Linux  and  Windows. 

VersaStor  has  been  in  beta 
testing  for  two  and  a  half  years 
and  came  to  HP  through  its 
acquisition  of  Compaq  Com¬ 
puter  COrp.  Testily  of  the 
software  with  CASA  and  Bro¬ 
cade’s  switches  is  expected  to 
start  m  the  summer.  HP  said. 

Brocade  has  yet  to  complete 
its  buyout  of  Rhapsody,  which 
was  agreed  to  in  November. 
But  the  two  companies  said 
the  deal  could  be  finalized  by 
the  end  of  this  month.  I 


Shippers  Fa(^  Automation 
Task  for  Customs  Deadline 


8V  UMOA  ftOatNCIIAMCt 

Shippeis  and  ocean  carriers 
are  scrambling  to  automate 
their  systems  to  meet  a  Feb.  2 
deadline  for  compliance  with 
a  new  VS.  Customs  Service 
regulation. 

The  Advance  Manifest  Reg¬ 
ulation,  also  known  as  the  ”24- 
bour  rule,”  requires  shippers 
and  ocean  carriers  that  bring 
goods  into  the  U.S.  to  electron¬ 
ically  submit  complete  con¬ 
tainer-manifest  information  to 
Customs  through  its  Automat¬ 
ed  Manifest  System  (AMS)  24 


hours  before  the  container  is 
loaded  onto  a  vessel. 

John  Gurrad.  vice  president 
of  business  planning  and 
e-commerce  at  MOL  America 
Inc.,  a  carrier  in  (Concord, 
Calif.,  said  a  portal  for  the 
ocean  transportation  industry 
such  as  GTN,  which  is  operat¬ 
ed  by  GT  Nexus  Inc.  in 
Alameda.  Calif.,  can  help  ship¬ 
pers,  forwarders  and  carriers 
comply  with  the  24'bour  rule. 

(jT  Nexus  President  John 
Urban  said  GTN  automates 
and  standardizes  transactions 


among  shippers,  forwarders 
and  their  ocean  carriers.  He 
said  online  toob  already  avail¬ 
able  at  the  (TTN  portal  allow 
them  to  prepare  and  transmit 
key  shipping  documents.  The 
(HD  platform  b  integrated 
with  the  back-office  systems 
of  a  host  of  carriers,  he  added. 

Jack  Maynard,  an  analyst  at 
Boston-based  Aberdeen 
Group  Inc.  said  employing 
technologies  such  as  (STO  will 
be  key  to  achieving  compli¬ 
ance  with  the  new  regulations. 
The  value  of  (jTN,  he  said,  b 
that  it  provides  shippers  with 
an  electronic  transaction  pbi- 
form  that  quickly  sends  infor¬ 
mation  to  ^eir  carriers,  there¬ 
by  reducing  debys.  t 
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Some  IT  managers 
workforce  chains 


don’t  foresee  major 
at  their  companies 


or  THOMAS  HOrrUAM 

Anew  report  oa  the 
IT  labor  market  pre¬ 
dicts  that  35%  to 
45%  of  full-time  IT 
jobs  in  the  U^.  and  Canada 
will  be  shifted  to  contraaors, 
consultants,  ofbhore 
technicians  or  part- 
time  workers  by 
2005.  AimI  some  analysts  and 
IT  labor  experts  said  those  fig¬ 
ures.  although  eye-popping, 
may  not  be  far-fetched 
However,  four  h4dt-level  IT 
managers  said  the  predictions 
made  in  the  report  issued  last 
week  by  New  Canaan,  Conn.- 
based  Foote  Partners  IXC 
probably  won't  apply  to  their 
companies.  For  them,  out¬ 
sourcing  hasn’t  proved  to  be  a 
lower-cost  alternative  to  keep¬ 
ing  IT  inside  corporate  walls. 

‘'While  there  are  times 
where  I’d  love  to  throw  some¬ 
thing  to  the  outsourced  den. 
so  £ar  we’ve  found  that  it 
wouldn't  be  cost-effective  for 
us.**  said  Amy  Courier,  vice 
president  of  IT  at  Valassis 
Communications  Inc.,  a  Livo¬ 
nia,  Mich.-based  marketing 
services  firm. 

“We  do  everything  in- 
bouse,”  noted  fohn  Studdard. 
senior  vice  president  and  chief 
technology  officer  at  Lydian 
IVust  COh  a  financial  services 
firm  in  Palm  Beach  Gardens. 
Fla.  The  reason  we've  been 
successful  in  li^t  of  WU  and 
the  economy  and  the  bursting 
of  the  dot-com  bubble  is  that 
we're  in  control  of  our  own 
destiny  and  not  locked  into 
long-term  contracts  that  may 
or  may  not  be  relevant  to  our 
business  anymore.” 

Nevertheless.  David  Foote, 
president  and  chief  research 
officer  at  Foote  Partners  and  a 
Computerworid  columnist, 
said  American  companies 
“can’t  afford  to  do  application 
development  in  the  US.  any¬ 


more.  The  nature  of  the  busi¬ 
ness  has  changed.” 

IT  job  sharing  will  also  play 
a  role  in  reducing  full-time  po¬ 
sitions.  Foote  said.  He  based  his 
estimates  on  surveys  his  com¬ 
pany  conducted  last  year  with 
1.880  private-sector 
and  govenunent  em¬ 
ployers.  which  were 
asked  what  percentage  of  their 
future  IT  workforces  will  be 
in-house  vs.  external. 

Foote's  tiineline  for  such  a 
massive  workforce  shiff  “is  a 
little  aggressive,”  said  Maria 
Schafer,  an  analyst  at  Meta 


Shift 

Jobs 


Group  Inc.  in  Stamford.  Conn. 
“It  be  after  2006  before 
we  gel  to  that  point.”  Schafer 
added  that  she  still  thinks  ap¬ 
plication  development  and 
Web  design  are  growth  areas 
for  IT  workers  in  the  US. 

Cheaper  Labor  Overseas 

But  the  shift  of  technical  work 
to  of&hore  operations  by 
many  companies  “doesn't 
bode  well”  for  American  IT 
workers,  Schafer  said.  The 
cost  of  some  types  of  IT  work 
is  20%  to  50%  less  in  places 
such  as  India.  Eastern  Europe 
and  parts  of  South  America, 
she  said. 

Although  Foote's  prediction 


”sound.s  radical  now.  it’s  not 
too  far  off  the  mark.”  said 
Jeremy  Grigg,  a  New  York- 
based  analyst  at  Gartner  Inc. 
■Tbu've  got  this  wholesale 
rush  to  the  door  for  external, 
offshore  services." 

But  William  Finefield.  CIO 
at  the  Navy  Exchange  Service 
Command  in  Virginia  Beach. 
Va.,  said  be  doesn’t  foresee 
any  rush  to  outsourcing  at  his 
organization.  "Our  experience 
has  been  that  it  costs  us  more 
to  go  outside  (for  IT  servicesj 
than  U  does  internally,"  be  ^id 

A  previous  outsourcing  deal 
left  a  bad  taste  in  the  mouth  of 
Steve  H^nraood,  vice  presi¬ 
dent  of  information  services  at 
Plasti-Line  Inc.  in  Knoxville. 
Tenii.  Nine  years  Plasti- 
Line  outsourced  its  IT  opera¬ 
tions  to  what  is  now  Accen¬ 
ture  Ltd.  But  after  running 
into  problems  with  the  con¬ 
tract.  Plasti-Line  opted  not  to 
renew  the  five-year  agreement 


»  We've  looked 
at  [outsourc¬ 
ing]  and  haven't  seen 
the  financial  returns. 

STEVE  HAHHOM).  VICE  PRESIOENT 
OF  INFORMATION  SERVICES. 
PlASTI-iWE  INC 

and  began  moving  workers 
back  in-house.  Hammond  said. 

“We  do  ramp  up  and  down 
on  resources  with  contrac¬ 
tors,"  he  said.  “But  as  far  as 
flat-out  outsourcing,  we've 
looked  at  that  and  haven't 
seen  the  financial  rerums.” 

Foote  and  Grigg  said  IT 
workers  facing  displacement 
should  retrain  themselves  in 
project  management  or  tech¬ 
nologies  such  as  IT  security 
and  wireless  networking  — 
suggestioos  that  map  with  the 
advice  of  panelists  at  an  out¬ 
sourcing  conference 'm  Sep¬ 
tember  [QuickLink  33217].  > 


Corporate  IM  Software 
Makers  Eye  Wall  Street 


BV  LUCAS  MSAJIIAN 

The  adoption  of  instant 
s^ng  (IM)  ^ftware  by  fman- 
cial  services  firms  mostly  in¬ 
volves  end  users  communicat¬ 
ing  via  CQQSumer-orienied 
products,  often  unbeknownst 
to  IT  managers.  But  vendors 
of  enterprise-class  IM  prod¬ 
ucts  are  trying  to  chan^  that. 

For  example,  Reuters  Group 
PLC  this  month  said  more 
than  22S;000  financial  services 
workers  worldwide,  including 
80,000  in  the  U.Sm  have  signed 
up  for  the  Reuters  Messaging 
technology  it  launched  in  (Oc¬ 
tober.  London-based  Reuters 
collaborated  with  Microsoft 
Corp.  to  develop  what  is  es¬ 
sentially  the  first  version  of 
the  software  vendor’s  upcom¬ 
ing  corporate  IM  applk^tion, 
which  is  due  oat  in  June. 

IBM  wouldn't  disclose  end- 
user  totals  in  the  financial  ser¬ 
vices  Industry  for  its  more 
established  Lotus  Sametime 
software.  But  Jeteiny  Dies,  a 
manager  of  collaboration  of¬ 
ferings  in  IBMY  Lotus  Soft¬ 


ware  Group,  said  eight  of  the 
lop  10  commercial  banks 
worldwide  use  Sametime. 

IM  is  attractive  to  banks 
and  brokerages  because  it  can 
streamline  both  internal  and 
external  communications.  But 
analysts  and  IT  managers  said 
uncontrolled  use  of  the  tech¬ 
nology  could  open  up  firms 
to  computer  viruses  and  to 
regulatory  actimis  by  govern¬ 
ment  agencies,  which  require 
that  electronic  conununica- 


Instant  Upgrade 


lions  be  lo^ed  and  stored. 

Products  such  as  Sametime 
and  Reuters  Messaging  include 
ftmctionality  that's  designed 
to  meet  flnm'  security  and 
regulatory  compliance  needs. 
The  three  top  vendors  of  con¬ 
sumer  IM  pt^ucts  —  America 
Online  Inc.,  Microsoft  and  Ya¬ 
hoo  Inc.  —  announced  ver- 
siOQS  of  their  software  aimed 
at  corporate  users  last  foil 

Seeking  Security 

Wells  Fargo  &  (2o.  last  year 
rolled  out  a  set  of  Wd>  chat 
and  collaboration  tools  for  its 
customers.  Jim  Smith,  senior 
vice  president  of  consumer 
Internet  services  at  tbe  San 
Francisco-based  company,  said 
Wells  Fargo  is  now  consider¬ 
ing  the  purchase  of  an  enter- 
prise-dius  IM  product  in  or¬ 
der  to  support  one-to-one 
communications  internally 
and  with  its  customers. 

fun  Lenz,  senior  vice  presi¬ 
dent  and  co-manager  of  trad¬ 
ing  at  Bridge  TVading  in  St. 
Louis,  said  the  Kcuters-owned 
brokerage  began  beta-testing 
Reuters  Messaging  last  sum¬ 
mer  as  part  of  an  effort  to  cut 
down  on  tbe  use  of  unautho¬ 
rized  IM  tools  internally  and 
at  tbe  banks  and  dearin^ious- 


es  with  which  it  does  business. 
“We  beard  from  a  lot  of  [users] 
that  they  needed  something 
secure  because  more  and 
more  people  viere  using  AOL 
or  Yahoo  or  something  that 
wasn't  secure.”  Lenz  said. 

But  the  use  of  consumer- 
grade  IM  software  in  tbe  in¬ 
dustry  remains  widespread, 
analysts  said.  For  example,  in  a 
survey  of  financial  services 
firms  last  foU  by  Osterman  Re¬ 
search  Inc.  in  BlKk  Diamond. 
Wash.,  respondents  said  that 
about  half  of  their  etui  users 
bad  downloaded  more  than 
one  consumer  IM  product 

In  October,  seven  top  finns 
formed  tbe  Financial  Services 
Instant  Messaging  Association 
(FIMA)  to  push  vendors  to  de¬ 
velop  IM  standards.  But  Ursu¬ 
la  Mills,  co-chairman  of  FIMA, 
said  she  doesn’t  expect  tbe  use 
of  consumer-oriented  services 
to  stop  anytime  soon. 

~Many  of  tbe  customers  are 
wanting  to  use  tbe  product  of 
their  choice,”  Mills  said.  *If 
that’s  AOL,  Yahoo  or  MSN 
Messenger,  then  that’s  the 
product  we  want  to  use.”  k 
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Some  Oracle  Users  Report  Success  With  11i 


Despite  rollout 
problems,  they  say 
apps  are  paying  off 


Oracle  Corp.'s  oft-repeated 
promise  that  its  business  ap¬ 
plications  can  help  users  slash 
costs  and  boost  operational 
elftciefKry  is  Tmally  starting  to 
strike  home  with  some  com¬ 
panies  that  have  installed  its 
E-Business  Suite  Ui  software. 

Early  rollouts  of  the  Ui  ap¬ 
plications  were  often  prob¬ 
lematic,  and  Oracle  had  trou¬ 
ble  persuading  many  of  its  ex¬ 
isting  users  to  upgrade.  But  at 
the  company's  Apps  World 
conference  here  last  week, 
ei^t  users  said  their  Ui  instal¬ 
lations  have  improved  internal 
business  processes  arxl.  in 
some  cases,  are  providing  re¬ 
turns  on  their  investments. 

Building  on  earlier  promises 
to  malcp  installation  of  the 
software  less  complex,  Oracle 
CEO  Larry  Ellison  said  during 
his  keynote  ^»eech  Uiat  the 
company  is  woridng  to  give 
users  a  firm  idea  of  Ui  costs 
upfront.  “One  thing  we  fo¬ 


cused  on  is  reducing  the  cost 
of  the  implementation  and 
trying  to  make  it  predictable 
(so  we  can]  tell  you  before  we 
begin  bow  much  it  will  cost  to 
run  it  every  day.”  Ellison  said. 

Joshua  Greenbaum,  an  ana¬ 
lyst  at  Enterprise  Applications 
Consulting  in  Daly  Qty,  Calif, 
said  Ellison's  vow  marks  a 
change  for  Oracle  —  and  po¬ 
tentially  for  its  rivals.  “Provid¬ 
ing  complete  total-cost-of- 
ownership  [numbers]  for  all 


new  deals  will  be  hard  to  do. 
but  it's  doable.*  Greenbaum 
said.  “And  I  think  it's  going  to 
be  an  important  competitive 
advantage  that  will  force  other 
vendors  into  promoting  better 
understanding  of  the  lifetime 
costs  of  their  software.* 

Hosted  versions  of  Oracle’s 
call  center,  finance  and  other 
applications  saved  United  As¬ 
set  Coverage  Inc.  (UAC)  more 
than  S3  million  during  the  first  ; 
12  months  it  used  the  software, 
said  Brad  Snook,  vice  presi¬ 
dent  of  client  relation^p 
management  at  the  Naperville. 
UL-based  telecommunications 
services  provider. 

Before  going  live  with  Ui 
in  August  200L  UAC  ran  a 
hodgepodge  of  business  appli¬ 
cations.  Oracle’s  software  gave 
the  company  an  integrated  set 
of  contract  billing  and  custo¬ 
mer  relationshq)  management 
software  that  made  it  possible 
for  individual  call  center  work¬ 
ers  to  handle  more  inquiries, 
Snook  said.  “We  made  up  what 
we  spent  in  about  a  year,*  he 
noted 

ViewSonic  Corp.  also  has 
seen  a  payback  on  its  invest¬ 
ment  in  Ui.  according  to  CIO 


Robert  Moon.  But  it  took  the 
Walnut  Calif. -based  maker  of 
computer  monitors,  projectors 
and  other  technology  prod¬ 
ucts  two  attempts  to  install 
Oracle’s  software  before  it 
succeeded 

Four  years  ago.  ViewSonic 
tried  to  roll  out  a  heavily  cus¬ 
tomized  version  of  Oracle's 
Release  107  applicatioas.  But 
that  project  ladced  end-user 
participation  and  produced 
faulty  data.  Moon  said  “It  was 
a  mess."  he  noted  "We  were 
running  a  $1  billion  business 
on  Excel  spreadsheets.” 

ViewSonic  scrapped  the  107 
system  and  tried  ^ain,  this 
time  using  UL  The  company 
went  live  with  the  software  in 
November  2001  after  a  five- 
month  installation.  Since  then, 
ViewSonic  has  consolidated 
its  servers  and  seen  a  reduc¬ 
tion  in  hs  hardware  support 
costs,  saving  about  S2.S  mil¬ 
lion  annually,  Moon  said  I 
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Deal  Moves  Microsoft  Into 
Web  Conferencing  Mariwt 


BV  CABOL  StrWA 

Microsoft  Corp.  last  week  ex¬ 
tended  its  reach  into  the  on¬ 
line  conferencing  and  coUabo- 
ration  arena  with  the  acquisi- 
ti(W  of  privately  held  Place- 
Ware  Inc. 

Charles  Zaragoza,  a  lead 
product  manager  in  Micro¬ 
soft’s  information  worker 
product  management  group, 
said  the  company  began  taDdng 
to  Mountain  View.  Calif-based 
PlaceWare  upon  realizing  that 
Microsoft  di^'t  have  the  ”se- 
cure.  reliable,  extensible”  Web 
conferencing  services  its  cus¬ 
tomers  said  they  needed 

Fmandal  details  weren't 
disclosed 

Zaragoza  said  that  althou^ 
Microsoft's  NetMeeting  and 


other  offerii^  were  a  good 
start,  customers  ”are  getting 
smarter  about  what  they  ne^” 
The  PlaceWare  services  en¬ 
able  users  to  conduct  real¬ 
time  interactive  presentations 
and  meetings  ov^  the  Inter¬ 
net  via  any  PC  and  Web  brows¬ 
er,  according  to  Jennifer  Calli- 
son,  a  senior  director  of  mar¬ 
keting  at  PlaceWare. 

Playing  C>tch-up 

In  a  report  issued  last  week, 
analysts  at  Stamford  Conn.- 
based  Meta  Group  Inc.  said 
Microsoft  has  ma^  a  concert¬ 
ed  effi>rt  in  (be  past  year  to 
catch  longtime  cirilaboration 
market  leader  IBM.  but  its 
most  recent  efforts  with  Share- 
Point  Team  Services  and  Win¬ 


dows  Server  2003  instant  mes¬ 
saging  have  yet  to  bear  fruit 
Microsoft’s  Web  conferenc¬ 
ing  efforts  “seemed  mori- 
^  bund*  after  unsuccessful  runs 
;  with  its  peer-based  NecMeet- 
I  ing  aurf  immature  F»<-hangi» 
2000  Ccmferencing  Server,  the 
Meta  report  said 
Rob  Biderie,  an  analyst  at 
Giga  lxift>nxiation  Group  Inc. 
in  Cambridge.  Mass.,  said  Mi- 


JUST  THf  FACTS 

PlaceWare  Inc. 


crosoft's  NetMeeting  “runs 
out  of  steam”  after  six  people 
Join  a  crntference.  He  said  that 
although  Microsoft  hasn't  been 
a  major  player  in  collabora- 
tioo,  “that’s  going  to  change 
pretty  quick  now." 

Cooqietitors  in  online  con¬ 
ferencing,  sudi  as  WebEx 
OMnmunicatioDS  loc..  whose 
stock  price  fell  following  news 
the  Microsoft  acquisition, 
will  find  themselves  “in  for  a 
fight.”  Enderie  said 
The  acquisition  is  expected 
to  be  completed  this  quartet. 
Plans  call  for  PlaceWare  to  be 
incorporated  into  Microsoft's 
newly  created  Real  Time  Col¬ 
laboration  Group,  wlucfa  will 
be  beaded  by  Anoop  Gupta. 
Gupta  work^  in  Microsoft's 
research  divisJoo  for  five  years 
and  recently  served  as  techni¬ 
cal  adviser  to  Chairtnan  and 
Chief  Software  Architect  Bill 
Gates.1 


Big  Outsourcing  Shift 
Predicted  for  IT  Jobs 

Stniie  ri'  managers  dnn't  foresee  major 
w'orkl'oree  ehanges  at  their  companies 


av  THOMAS  HOFFMAN 

Ntw  report  on  the 
IT  labor  market  pre¬ 
dicts  that  to 
45%  of  full-time  IT 
lobs  in  the  U.S.  and  Canada 
will  he  shifted  to  contractors, 
consultants.  otTshore 
technicians  or  part- 
time  tt'orkers  by 
2005.  And  some  analysts  and 
IT  bbor  experts  said  those  fig¬ 
ures,  although  eye-popping, 
may  not  be  far-fetched. 

However,  four  high-level  IT 
managers  said  the  predictions 
made  in  the  report  issued  last 
week  by  New  Canaan.  Conn.- 
biscd  Fot>te  Partners  LtC 
probably  won’t  apply  to  their 
companie.s.  For  them,  out¬ 
sourcing  hasn't  proved  to  be  a 
lower-ct>st  alternative  to  keep¬ 
ing  IT  inside  corporate  walls. 

"While  there  are  limes 
where  I'd  love  to  throw  some¬ 
thing  to  the  out.sourced  den. 
so  far  we've  found  that  it 
wiiulda'i  be  cost-effective  for 
us."  said  Amy  Courier,  vice 
president  of  IT  at  Valassis 
Communications  Inc.,  a  Livo¬ 
nia.  Mich.-bascd  marketing 
services  firm. 

“We  do  everything  in- 
house.”  noted  John  Studdard. 
senior  vice  president  and  chief 
technology  officer  at  Lydian 
Trust  Co.,  a  financial  services 
firm  in  Palm  Beach  Gardens. 
Fla.  "The  reason  we've  been 
sueccssful  in  light  of  ^’11  and 
the  economy  and  the  burstir^ 
of  the  dot-com  bubble  is  that 
we're  in  cooirol  of  our  own 
destiny  and  not  locked  into 
long-term  contracts  that  may 
or  may  nut  be  relevant  to  our 
business  anymore." 

Nevcrthclcs.s.  David  Foote, 
president  and  chief  research 
officer  at  Foote  Partners  and  a 
Computerworfd  columnist, 
said  American  companies 
"can't  afford  to  do  application 
development  in  the  US.  any¬ 


more.  The  nature  of  the  busi¬ 
ness  has  changed." 

IT  job  sharing  will  also  play 
a  r»ile  in  reducing  full-time  po¬ 
sitions.  f(K)te  said.  He  b3.scd  his 
estimates  on  surveys  his  com¬ 
pany  conduett'd  bst  year  with 
1,880  private-sector 
and  government  em¬ 
ployers,  which  were 
asked  what  percentage  of  their 
future  IT  workforces  will  be 
in-house  vs.  external. 

Ftwte's  timeline  for  such  a 
massive  workforce  shift  "is  a 
little  .aggressive."  said  Maria 
Schafer,  an  analyst  at  Meta 


BY  LUCABMEARIAN 

The  adoption  of  instant  mes¬ 
saging  (IM)  wfiware  by  finan¬ 
cial  servic'es  firms  mostly  in¬ 
volves  end  users  eommunicat- 
tng  via  consumer-oriented 
products,  often  unbeknownst 
to  IT  managers.  But  vendors 
of  enterprise-class  IM  prod¬ 
ucts  are  trying  to  change  that. 

For  example.  Keuters  Group 
PLC  this  month  said  more 
than  225,000  financial  services 
workers  worldwide,  including 
80.(K)0  in  the  U.S..  have  signed 
up  for  (he  Reuters  Messaging 
technology  it  launched  in  Oc¬ 
tober.  London-based  Reuters 
collaborated  with  Microsoft 
Corp.  to  develop  what  is  es¬ 
sentially  the  first  version  of 
the  software  vendor's  upcom¬ 
ing  corporate  IM  application, 
which  Is  due  out  in  |unv. 

IBM  wouldn't  disclose  end- 
user  totals  in  the  finaDciai  ser¬ 
vices  industry  for  its  more 
established  Lotus  Sametime 
softMrare.  But  leremy  Dies,  a 
manager  of  collaboration  of¬ 
ferings  in  IBM's  Lotus  Soft- 


Group  Inc.  in  Stamford.  Conn. 
“It  will  be  after  2006  before 
we  gel  to  that  point."  Schafer 
.idded  ih.'it  she  still  thinks  ap¬ 
plication  development  and 
Web  design  are  growth  areas 
for  IT  workers  in  the  U.S- 

Cheaper  Labor  Overseas 

Hut  the  shift  of  technical  work 
to  offsht>re  operations  by 
m.'iny  companies  "doesn’t 
bode  well"  for  American  IT 
workers,  Schafer  said.  The 
cost  of  some  types  of  IT  work 
is  20%  to  50%  les-s  in  places 
such  as  India.  Eastern  Europe 
and  parts  of  South  America, 
she  said. 

Although  Foote’s  prediction 


ware  Group,  said  eight  of  the 
top  10  commercial  banks 
worldwide  use  Sametime. 

IM  is  attractive  to  banks 
and  brokerages  because  it  can 
streamline  both  internal  and 
external  communications.  But 
analysts  and  IT  managers  said 
uncontrolled  use  of  the  tech¬ 
nology  could  open  up  firms 
(o  computer  viruses  and  to 
regulatory  actions  by  govern¬ 
ment  agencies,  which  require 
that  electronic  communica- 


"sounds  radical  now.  it's  not 
too  far  off  the  mark."  s.iid 
leremy  Grigg.  a  New  York- 
ba.sed  analyst  at  Gartner  Inc. 
"You've  got  this  wholesale 
rush  to  the  door  for  external, 
offshore  services." 

But  William  Finefield,  CIO 
at  the  Navy  Exchange  Service 
Command  in  Virginia  Beach. 
Va..  said  he  dwsn't  foresee 
any  rush  to  outsourcing  at  his 
organization.  "Our  experience 
has  been  that  it  costs  us  more 
to  go  outside  [for  IT  services! 
than  it  din's  internally."  he  said. 

A  previous  outsourcing  deal 
left  a  bad  taste  in  the  mouth  of 
Steve  Hammond,  vice  presi¬ 
dent  of  information  services  at 
Plasti'Line  Inc.  in  Knoxville. 
Tenn.  Nine  years  ago.  Plasti- 
Linc  outsourced  its  IT  opera¬ 
tions  to  what  is  now  Accen¬ 
ture  Ltd.  But  after  running 
into  problems  with  the  con¬ 
tract.  Plasti-Une  opted  not  to 
renew  the  five-year  agreement 


tions  be  logged  and  stored. 

Products  such  as  Sametime 
and  Keuters  Messaging  include 
functionality  that's  designed 
to  meet  firms'  security  and 
regulatory  compliance  needs. 
ITw  three  top  vendors  of  con¬ 
sumer  IM  products  —  America 
Online  Inc..  Microsoft  and  Ya¬ 
hoo  Inc.  —  announced  ver¬ 
sions  of  their  software  aimed 
at  corporate  users  last  fall 

Seeking  Security 

Wells  Fargo  &  Ca  last  year 
rolled  out  a  set  of  Web  chat 
and  collaboration  tools  for  its 
customers.  Jim  Smith,  senior 
vice  president  of  consumer 
Internet  services  at  the  San 
Francisco-ba.sed  company,  said 
Wells  Fargo  is  now  consider¬ 
ing  the  purchase  of  an  cnicr- 
prisc-class  IM  product  in  or¬ 
der  to  support  one-to-one 
communications  internally 
and  with  its  customers. 

lim  Lenz.  senior  vice  presi¬ 
dent  and  co-manager  of  trad¬ 
ing  at  Bridge  Trading  Co.  in  St. 
Louts,  said  the  Reuters-owned 
brokerage  began  beta-testing 
Reuters  Messaging  last  sum¬ 
mer  as  part  of  an  effort  to  cut 
down  on  the  use  of  unautho¬ 
rized  IM  tools  internally  and 
at  the  banks  and  clearinghou.s- 


n  We’ve  looked 
at  [outsourc¬ 
ing]  and  haven’t  seen 
the  financial  returns. 

STEVE  HAMMOND  VICE  PRESIDENT 
OF  INFORMATION  SERVICES 
PiASTI-LINE  INC 

and  began  moving  workers 
back  in-hou.se.  Hammond  said. 

“We  do  ramp  up  and  down 
on  resources  with  contrac¬ 
tors."  he  said.  "But  as  far  as 
flat-out  outsourcing,  we’ve 
]«x>ked  at  that  and  haven't 
seen  the  financial  returns." 

Foote  and  Grigg  said  IT 
workers  facing  displacement 
should  reirain  themselves  in 
project  management  or  tech- 
nologies«uch  as  IT  security 
and  wireless  networking  — 
.suggestions  that  map  with  the 
advice  of  panelists  at  an  out¬ 
sourcing  conference  in  Sep¬ 
tember  (QuickLink  .^3217).  k 


cs  with  which  it  does  business. 
"Wc  heard  from  a  lot  of  lusers] 
that  they  needed  somethir^ 
secure  because  more  and 
more  pet>plc  were  using  AOL 
or  Yahoo  or  something  that 
wasn’t  secure."  Lenz  said. 

But  the  use  of  consumer- 
grade  IM  software  in  the  in¬ 
dustry  remains  widespread, 
analysts  said.  For  example,  in  a 
survey  of  financial  services 
firms  last  fall  by  0.sterman  Re¬ 
search  Inc.  in  Black  Diamond. 
Wash.,  respondents  said  that 
about  half  of  their  end  users 
had  downloaded  more  than 
one  consumer  IM  product. 

In  October,  seven  top  firms 
formed  the  Financial  Services 
Instant  Messaging  As.sociation 
(FIMA)  to  push  vendors  to  de¬ 
velop  IM  standards.  But  Ursu¬ 
la  Mills,  co-chairman  of  FIMA, 
said  she  doesn’t  expect  the  use 
of  consumer-oriented  services 
to  slop  anytime  soon. 

"Many  of  the  customers  are 
wanting  to  use  the  product  of 
their  choice.”  Mills  said.  “If 
that’s  AOL.  Yahoo  or  MSN 
Messenger,  then  that’s  the 
product  we  want  to  use."  I 

MORE  IMS  ISSUE 

ArchMng  e-mail  has  become  senous 
business  lot  IT  managers  Rage  33 
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Corporate  IM  Software 
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Some  Oracle  Users  Report  Success  With  11i 


Despite  n)llout 
pmblems,  the\’  s;iy 
apps  are  paying  off 

BV  MARC  L.  SONOINI 

SAN  OlEQO 

Oracle  Corp.’s  oft-repeated 
promise  that  its  business  ap¬ 
plications  can  help  users  slash 
costs  and  boost  operational 
efficiency  is  finally  starling  to 
strike  home  with  some  com¬ 
panies  that  have  installed  its 
E-Business  Suite  Ui  software. 

Early  rollouts  of  the  Hi  ap¬ 
plications  were  often  prob¬ 
lematic.  and  Oracle  had  trou¬ 
ble  persuading  many  of  its  ex¬ 
isting  users  to  upgrade.  But  at 
the  company’s  AppsWorld 
conference  here  last  week, 
eight  users  said  their  Ui  instal¬ 
lations  have  improved  internal 
business  processes  and.  in 
some  cases,  are  providing  re¬ 
turns  on  their  investments. 

Building  on  earlier  promises 
to  make  installation  of  the 
software  less  complex,  Oracle 
CEO  Larry  Ellison  said  during 
his  keynote  speech  that  the 
company  is  working  to  give 
users  a  firm  idea  of  Ui  costs 
upfront.  “One  thing  wc  fo- 


MpraHon  Moms 


cused  on  is  reducing  the  cost 
of  the  implementation  and 
trying  to  make  it  predictable 
(so  we  can}  tell  you  before  we 
begin  how  much  it  will  cost  to 
run  it  every  day,"  Ellison  said. 

Joshua  Greenbaum.  an  ana¬ 
lyst  at  Enterprise  Applications 
Consulting  in  Daly  City.  Calif, 
said  Ellison’s  vow  marks  a 
change  for  Oracle  —  and  po¬ 
tentially  for  its  rivals.  "Provid¬ 
ing  complete  total-cost -of- 
ownership  [numbers]  for  all 


new  deals  w'ili  be  hard  to  do. 
but  it's  doable,"  Greenbaum 
said.  "And  I  think  it’s  going  to 
be  an  important  competitive 
advantage  that  will  force  other 
vendors  into  promoting  better 
understanding  of  the  lifetime 
costs  of  their  software." 

Hosted  versions  of  Oracle's 
call  center,  finance  and  other 
applications  saved  United  As¬ 
set  Ciwcrage  Inc.  (UAC)  more 
than  S3  million  during  the  first 
12  months  it  used  the  software, 
said  Brad  Snook,  vice  presi¬ 
dent  of  client  relationship 
management  at  the  Naperville, 
Ill.-based  telecommunications 
services  provider. 

Before  going  live  with  Ui 
in  August  2001,  UAC  ran  a 
hodgepodge  of  business  appli¬ 
cations.  Oracle’s  software  gave 
the  company  an  integrated  set 
of  contract,  billing  and  custo¬ 
mer  relationship  management 
software  that  made  it  possible 
for  individual  call  center  work¬ 
ers  to  handle  more  inquiries. 
Snook  said.  “We  made  up  what 
we  spent  in  about  a  year."  he 
noted. 

ViewSonic  Corp.  also  has 
seen  a  payback  on  its  invest¬ 
ment  in  Ui,  according  to  CIO 


Robert  Moon.  But  it  t<K)k  the 
Walnut.  Calif -based  maker  of 
computer  monitors,  projectors 
and  other  technology  prod¬ 
ucts  two  attempts  to  install 
Oracle’s  software  before  it 
succeeded. 

Four  years  ago.  ViewSonic 
tried  to  roll  out  a  heavily  cus¬ 
tomized  version  of  Oracle’s 
Release  10.7  applicatiorus.  Bui 
tiiat  project  lacked  end-usor 
participation  and  produced 
faulty  data.  Moon  said.  "It  was 
a  mess,"  he  noted.  "We  were 
running  a  SI  billion  business 
on  Excel  spreadsheets." 

ViewSonic  scrapped  the  10.7 
system  and  tried  again,  this 
time  using  Ui.  The  company 
went  live  with  the  software  in 
November  2001  after  a  five- 
month  installation.  Since  then. 
ViewSonic  has  consolidated 
its  servers  and  seen  a  reduc¬ 
tion  in  its  hardware  support 
costs,  saving  about  S2.5  mil¬ 
lion  annually.  Moon  said.  I 


FEDERAL  FUWIS 
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Deal  Moves  Microsoft  Into 
Web  Conferencing  Market 


BY  CAROL  SLIWA 

Microsoft  Corp.  last  week  ex¬ 
tended  its  reach  into  the  on¬ 
line  conferencing  and  collabo¬ 
ration  arena  with  the  acquisi¬ 
tion  of  privately  held  Place- 
Ware  Inc. 

Charles  Zaragoza,  a  lead 
product  manager  in  Micro¬ 
soft’s  information  worker 
product  management  group, 
said  the  company  began  talking 
to  Mountain  View.  Calif -based 
Place  Ware  upon  rcaliring  that 
Microsoft  didn't  have  the  “se¬ 
cure.  reliable,  extensible”  Web 
conferencing  services  its  cus¬ 
tomers  said  they  needed. 

Fmancial  details  weren’t 
disclosed. 

Zaragoza  said  that  although 
Microsoft’s  NetMeeting  and 


other  offerings  were  a  good 
start,  customers  “are  getting 
smarter  about  what  they  need.” 
The  Place  Ware  services  en¬ 
able  users  to  conduct  real¬ 
time  interactive  presentations 
and  meetings  over  the  Inter¬ 
net  via  any  PC  and  Web  brows¬ 
er.  according  to  Jennifer  Calli- 
son.  a  senior  director  of  mar¬ 
keting  at  PlaceWare. 

Playing  Catch-up 

In  a  report  issued  last  w-cck, 
analysts  at  Stamford.  Conn.- 
based  Meta  Group  Inc.  said 
Microsoft  has  made  a  concert¬ 
ed  effort  in  the  past  year  to 
catch  longtime  collaboration 
market  leader  IBM.  but  its 
most  recent  efforts  with  Share- 
Point  Team  Services  and  Win¬ 


dows  Server  2003  instant  mes¬ 
saging  have  yet  to  bear  fruit. 

Microsoft’s  Web  conferenc¬ 
ing  efforts  "seemed  mori- 
burtd’’  after  unsuccessful  runs 
with  its  peer-based  NetMeet¬ 
ing  and  immature  Exchange 
2000  Conferencing  Server,  the 
Meta  report  said. 

Rob  Endcrle.  an  analyst  at 
Giga  Information  Group  Inc. 
in  Cambridge.  Mass.,  said  Mi- 


JUST  THE  FACTS 
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crosoft’s  NetMeeting  "runs 
out  of  steam"  after  six  people 
join  a  conference.  He  said  that 
although  Microsoft  hasn’t  been 
a  major  player  in  collabora¬ 
tion.  "that’s  going  to  change 
pretty  quick  now." 

Competitors  in  online  coo- 
fcivncing.  such  as  WebEx 
Communications  Inc.,  whose* 
slock  price  fell  followir^  news 
of  the  Microsoft  acquisition, 
will  find  themselves  “in  for  a 
fight."  Enderie  said. 

The  acquisition  is  expected 
to  be  completed  this  quarter. 
Plans  call  for  PlaceWare  to  be 
incorporated  into  Microsoft's 
newly  created  Real  Time  Col¬ 
laboration  Group,  which  will 
be  headed  by  Anoop  Gupta. 
Gupta  worked  in  Microsoft's 
research  division  for  five  yean, 
and  rc'cently  served  as  techni¬ 
cal  adviser  to  Chairman  and 
Chief  Software  Architect  Bill 
Gates,  k 


Support  Added 
For  Older  Apps 

SAN  (NSOO 

Al  AppsVfortd .  Orade  detiled 
several  rtbMiMs  9id  company 
execuirvBS  hope  wi  entice  ne* 
tears  Mo  Tl  tow  But  Ihe 
software  vendor  atoo  made  an- 
oCher  conoiasnn  to  otftomeni 
that  «e  stf  iwnng  as  older  10.7 
software 

Orede  was  acheiUed  to  end 
as  support  tor  ihM  letaen  in 
Jime.  Bui  M«k  JarwB.  Orade's 
cftiel  madtoBng  cibcar.  said  IQ  7 
users  Mii  sAl  be  afaie  to  gat  ac¬ 
cess  to  some  sttoport  sarvicas 
after  die  deadne  lMs'fe  not 
8oMngMwbuBs.bulalintor- 
mation  on  ama  patches,  and 
the  knowtadga  base,  wi  sti  be 
avaiabto  to  those  customers.' 
Jarwssaid. 

A  dooumeni  posted  on  On- 
da’s  Wtb  sfti  said  die ‘odanded 
support' tor  10.7  wi  last  unll 
n«d*2CI04.  Otada  wt  cordiiue 
to  prowde  tdephona  support  to 
uaars  who  cal  about  prevnualir 
idantiM  prctaloms  wMi  the  soft¬ 
ware,  and  I  e4  halp  V7 

users  pirn  mionbons  to  n. 

Theandtogolavparttoi 
tt.ThnbaanabonaofGan- 
tamon  between  Oiade  and  Its 
users  since  1999  ffitcompviy 
sMIy  wanM  to  stop  at  die 
end  d  2000.  bii  I  rtoda  a  er 
nes  of  adanauns  in  naporoa  to 
cotrpiaMs  fram  IMS  who  sad 
they  wanm  reedy  Id  iggrade. 
Evan  now.  acconing  to  Onda. 
mote  than  209b  of  as  applica- 
innusanhsvenistsledfngid- 
ingtoH 

AsvpadecLOadeusad 
AppsWorid  to  diMcaaB  a  now 
fine  of  btfidtod  ippicdions  and 
conauilbig  sarvees  dasignad  to 
help  uws  ffctal  spadic  n  ap- 
picdions  more  quiday  (Quidi' 
11*306861. 

Oiadi  alio  amouncad  dial  I 
wiolierilivtoahosledaib- 
senpbon  sarvioe  prtcad  d  about 
S6.000  par  fflondi.  the  Mrwca 
e  ainad  pnmarly  d  compwsas 
wdiupto25eNdUBenaidan- 
nud  revenues  of  up  to  S2S  mi- 
lion.JdvBSdd.  He  added  dwt 
OradB  woni  oustomee  dw  soft¬ 
ware  tor  todMduafuaem 
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CA  Loses  Money, 
But  Sales  increase 

Computer  Assocwtes  bitema' 
tnnel  Inc.  reported  •  net  loss  o4 
S44  mUion  on  revenue  of  S778 
mtton  for  its  third  quarter, 
which  ended  Dec.  31.  That  com¬ 
pares  with  a  S231  milion  loss 
artd  $747  mMion  in  revertue  dir- 
htg  the  same  period  a  year  ear¬ 
lier.  CA  also  said  federal  officials 
have  ashed  for  copies  of  its  con* 
tracts  with  10  customers  as  part 
of  an  investloation  into  the  com¬ 
pany's  accountirtg  practices. 


C&W  Sets  Plan 
To  Replace  CEO 

Loodon-faased  Cable  *  Wireiess 
PLC  (CAW)  announced  Ihit  CEO 
Oraham  Walaee  wil  leave  the 
company  as  soon  as  a  replace¬ 
ment  is  found.  For  now.  though. 
Wallece  wil  remain  in  dtarge 
of  day-to-day  operathra  and 
CAWs  cost-cutting  efforts.  The 
plan  to  seek  a  new  CEO  folows 
a  November  deciston  by  CAW  to 
largely  withdraw  from  the  U.S. 
Web  hosting  marhel. 


Peregrine  Submits 
Banl^ptcy  Plan 

Peregrine  Systems  bic.,  a  San 
Diego-based  vendor  of  asset 
management  software,  submitted 
a  Chapter  11  reorganization  plan 
to  the  U.S.  Bankruptcy  (^ourt  in 
Oetaware.  Peregrine  said  the 
plan  seeks  to  maintain  the  com- 
panyasanongoingbustnessin- 
steed  of  liquidBting  lb  assets. 
However.  Peregrine  added  that 
a  committee  of  ib  unsacured 
credMsrs  opposes  the  proposal. 


Rational  Holders 
Approve  IBM  Deal 

Rationai  Software  Corp.  in  Cu¬ 
pertino,  said  Ks  stockhold' 
ers  approved  the  $2.1  bWion 
acquisition  deal  that  the  applica¬ 
tion  development  tool  vendor 
slgnod  wHh  IBM  last  month. 
BM's  purchase  of  Rational  b 
due  to  be  completed  the  quarter. 


Continued  from  page  I 

Fujitsu _ 

the  Linux  business  is  a  wel¬ 
come  one.  said  foe  Beery.  CIO 
at  Amerca  West  Airlines  Inc. 
in  Phoenix.  “Wc  had  hoped 
chat  Fujitsu  would  do  somc^ 
thin^  like  thus."  he  said. 

America  West  uses  two  of 
Fujitsu's  64-prtKcssor  servers 
running  Sun's  Solaris  operat¬ 
ing  system  to  power  a  variety 
of  applications,  including  its 
core  rex’cnuc  management 
system.  But.  Beery  said,  "we 
are  very  interested  in  more 
cost-effective  solutions." 

The  airline  has  already  set 
some  initial  plaas  for  tesing 
Linux,  he  added.  For  example. 
America  West  plans  to  switch 
its  corporate  portal  Web  site 
from  Windows  NT  to  L'mux 
next  month.  As  the  open- 
source  operating  system  be¬ 
comes  more  reliable  and  the 
application  development  tools 
that  support  it  mature,  the 


Continued  from  page  I 

Unilever  _ 

far.  the  company  has  no  cost- 
savings  numbers  to  release, 
but  anecdotal  evidence  is  bol¬ 
stering  its  expectations.  Hopc- 
Murraysaid. 

“We’ve  got  an  awful  lot  of 
proof  points."  he  said,  includ¬ 
ing  Arcwall  servers  that  nut 
three  times  faster  under  Lin¬ 
ux,  with  cost  savings  of  up  to 
40%.  "Every  time  wc  put  in 
Linux,  we  are  amazed  and  sur¬ 
prised  at  its  speed  and  the  re- 
I  liability  with  which  we  can 
run  it." 

He  said  Unilever  expects  to 
benefit  from  the  expected  re¬ 
lease  later  this  year  of  the  Lin¬ 
ux  2.6  kernel,  which  will  intro¬ 
duce  features  that  ofl’er  the 
tools  needed  for  the  transition, 
including  real-time  threading 
and  improved  journaling. 

Unilever  is  making  its  move 
in  a  ver)'  v'ocal  way  to  encour¬ 
age  independent  software  ven¬ 
dors  to  develop  needed  enter¬ 
prise  business  applications  for 
Linux.  Hope-Murray  said. 

“It's  nw  really  a  leap  of 
faith."  he  said,  noting  that  Uni¬ 


company  will  likely  migrate 
some  of  Us  more  business- 
critical  applications  over  from 
Solaris,  Beery  said. 

Fujitsu's  move  is  a  sign  of 
the  growing  interest  in  Linux 
within  corporate  IT  depart¬ 
ments,  said  Charles  King,  an 
arulyst  at  The  Sageza  Group 
Inc.  in  Mountain  View.  Calif. 
“'I'his  is  a  resounding  pat  on 
the  back  for  Linux,"  he  said. 

Uniu  Push 

Fujitsu  joins  a  list  of  server 
vendors,  including  IBM  and 
Hewlett-Packard  Ca.  that  are 
aggressively  pushing  Linux  for 
use  in  enterprise  applications. 
“If  you  take  a  look  at  some  of 
these  announcements,  the 
claims  of  some  vendors  that 
Linux  is  not  ready  for  the  en¬ 
terprise  qualifies  as  whistling 
past  the  graveyard,"  King  said. 

lack  Hirano,  a  deputy  gener¬ 
al  manager  at  Fujitsu  in  New 
York,  said  the  company  also 
plans  to  use  Intel's  Xcon  proc¬ 
essors  in  its  Linux  servers.  He 


lever's  two  largest  IT  suppli¬ 
ers.  HP  and  IBM,  are  commit¬ 
ted  to  Linux  and  are  ready  to 
help  with  the  project.  “If  our 
partners  weren't  committed  to 
it.  wc  wouldn't  be  doing  it." 

Getting  an  OK  from  top 
executives  to  commit  to  the 
strategy  took  time.  “It  wasn't 
overnight."  Hope-Murray  said. 
"If  it  wasn't  for  the  twin  sup- 
pon  [from  IBM  and  HPI.  we 
probably  wouldn't  have  gotten 
the  buy-in," 

ITic  company  hopes  to  con¬ 
duct  internal  lest'mg  with  Lin¬ 
ux  versions  based  on  the  up¬ 
coming  kernel  by  the  end  of 
this  year.  It's  also  applying  for 
membership  in  the  nonprofit 
Open  Source  Development 
Lab  Inc.  in  Beaverton.  Ore.. 


added  that  Fujitsu,  which 
makes  its  own  SPARC  chips, 
will  continue  to  develop  new 
Unix  systems.  But  the  Linux 
machines  will  bnwdcn  the 
company's  enterprise  server 
portfolio,  according  to  Hirano. 
“We  see  a  strong  opportunity 
in  (he  Linux  marketplace,  and 
we're  confident  that  wc  can 
capitalize  on  it."  he  said. 

Hirano  said  Fujitsu  plans  to 
deliver  the  same  reliability, 
availabilicy  and  scalability  fea¬ 
tures  on  the  Linux  boxes  that 
it  does  for  its  Unix 
servers.  To  that 
end.  the  company 
has  created  a  300- 
employee  Linux 
systems  group  that 
will  focus  on  port¬ 
ing  its  interconnect,  cluster¬ 
ing.  systems  management  and 
grid-computing  technolc^ies 
to  Linux. 

Fujitsu,  which  has  a  large 
presence  in  Japan  and  Europe, 
isn't  a  big  player  in  the  US. 
server  market.  But  it  has  been 


which  was  created  to  encour¬ 
age  the  development  of  enter- 
prise  data  center  and  telecom¬ 
munications  applications  for 
Linux.  Unilever  would  be  the 
first  private  company  to  jo'm 
the  group. 

Desktops  throughout  Uni¬ 
lever  will  remain  Windows- 
based.  Hope-Murray  said, 
though  the  company  will  moni¬ 
tor  the  possibility  of  switching 
those  to  Linux  in  the  future. 

He  said  he  has  been  seeking 
alternatives  to  the  company’s 
infrastructure  of  three  operat¬ 
ing  systems  for  more  than  a 
decade.  In  the  early  1990s.  the 
Open  Systems  Foundation, 
which  promised  a  platform- 
independent  Unix,  tried  but 
failed  to  provide  the  operating 


trying  to  expand  its  position 
here  by  using  aggressive  pric¬ 
ing  to  lure  Unix  users  away 
from  Sun's  hardware,  said 
Rich  Partridge,  an  analyst  at 
D.H.  Brown  Associates  Inc.  in 
Port  Chester.  N.Y. 

He  added  that  last  week's 
announcement  is  a  recogni¬ 
tion  by  Fujitsu  "that  you  just 
can't  ignore  Linux."  Fujitsu  ex¬ 
ecutives  are  betting  that  they 
“can  leverage  the  design  of 
their  big  boxes  and  plop  in  a 
different  chip."  Partridge  said. 

“It  sounds  like  a 
smart  reuse  of 
their  technology." 

The  Linux 
server  plans  sig¬ 
nificantly  expand 
Fujitsu's  rebtion- 
ship  with  InteL  Fujitsu  Sie¬ 
mens  Computers,  a  Cologne. 
Germany-based  joint  venture 
with  Siemens  AG.  sells  a  line 
of  lower-end  Intel  servers. 

But  these  will  be  Fujitsu's  first 
high-end  servers  based  on 
Intel  processors,  k 


system  he  needed,  he  said. 

Now.  with  the  integration  of 
the  2.6  kernel  Linux  will  have 
the  maturity  needed  to  handle 
Unilever’s  heavy-duty  data¬ 
base,  customer  relationship 
management  and  enterprise 
resource  planning  applica¬ 
tions.  Hope-Murray  said. 
Unilever  officials  declined 
to  identify  their  database. 
CRM  or  ERP  vendors. 

Analysts  said  the  confi¬ 
dence  Unilever  has  in  Linux 
has  shown  up  elsewhere. 

“That's  consistent  with  oth¬ 
er  companies  I’ve  talked  to  in 
the  financial  industry,"  said 
George  Weiss,  an  analy'st  at 
Stamford,  Conn.-bascd  Gart¬ 
ner  Inc.  ‘They're  saying  [Lin¬ 
ux]  will  be  fixed  and  firm  in 
the  future,  and  they  want  to  be 
part  of  the  wave." 

Bill  Claybrook.  an  analyst  at 
Aberdeen  Group  Inc.  in  Bos¬ 
ton.  said  Unilever  benefits 
from  having  an  extensive  his¬ 
tory  with  Unix,  the  model  for 
Linux,  and  from  having  part¬ 
ners  such  as  IBM  and  HP.  “If 
they  buy  the  stuff  from  IBM 
and  HP.  there's  not  really  a  big 
risk,"  he  said.  “They're  going 
to  gel  service  and  support."  I 
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CA  Loses  ll4oney, 
But  Sales  Increase 

CoMipiitarAModalMbitflmi- 
tioMl  Inc.  nportad  a  M(  bn  of 
S44  mSon  on  ravonua  of  S778 
nrikn  for  Ha  third  quartor, 
which  aoded  Oac.  9t  Thai  com* 
pares  wtth  a  S231  mtton  bn 
and  S747  ndMon  b  rerencM  dw- 
bg  ths  sams  porbd  a  yoar  ow^ 
Har.  CA  abo  sbd  fadaral  offbtab 
havoaahadfarcapinofHseoR- 
traeta  wHh  10  custocnars  n  pari 
of  an  brsillBafbn  Into  the  com* 
pany's  aceoynttng  pradbn. 


C&W  Sets  Plan 
To  Replace  CEO 

London  baaad  Cabb  A  WIrsfen 
PIC  (CAW)  ameuncad  that  CEO 
Qraham  Wdhcs  wN  bare  tha 
company  n  soon  n  a  raphcf 
man!  b  found.  For  new.  though, 
VMaca  wH  rambn  b  chargo 
of  dayfo-day  oparatbns  and 
CAWs  ceal’CuMbg  offortL  The 
plan  to  soak  a  new  CEO  foAows 
a  Nevambar  dacbion  by  CAW  to 
brgoly  withdrew  from  the  U.S. 
WM>  hoelbg  marbot 


Peregrine  Submits 
Banbuptcy  Plan 

hngrtaa  Systoma  toe.,  a  San 
Oiago'baaad  vendor  of  aaaal 
managamanl  aaftware.  subndited 
a  Chaptor  t1  rewganinttoB  plan 
to  the  U.S.  Banfouptoy  Court  b 
Delaware.  Anegrbo  said  the 
pbn  saefB  to  mabtob  the  com* 
panyaaenongetagtaabanb- 
itoad  of  Igbdalbg  Ha  aaaels. 
However.  Pwegibe  added  that 
a  commHtoe  of  Ha  unaeeured 
credtore  oppean  the  proposal. 


Rabonal  Holders 
Approve  IBM  Deal 

Rbbnal  Software  Carp,  b  Cu* 
pordm.  CaH..  sab  Ha  atocfihofd* 
ara  apprevad  dia  $2.1  bflion 
acmdaMon  dab  that  the  appHca- 
doo  davabpaianl  taal  vendor 
sIpiodwllhaMbb  month. 
BITa  porehioo  of  IMonb  b 
dw  to  ho  campbtod  thb  guirtor. 


Conrimied  from  page  1 

Fujitsu _ 

the  Linux  business  is  a  wei* 
come  one,  said  )oe  Beery.  CIO 
at  Amerca  West  Airlines  Inc. 
in  nioenix.  had  hoped 
that  PujUsu  would  do  some¬ 
thing  like  this,"  he  said. 

America  West  uses  two  of 
Fujitsu's  64'proccssor  servers 
running  Sun's  Solaris  operai* 
ing  system  to  power  a  variety 
of  applications,  including  its 
core  revenue  management 
system.  But.  Beery  said,  "we 
are  very  interested  in  more 
cost-effective  solutions.” 

The  airline  has  already  set 
some  initial  plans  for  using 
Linux,  he  added.  For  example. 
America  West  plans  to  switch 
its  corporate  portal  Web  site 
from  Windows  NT  to  Linux 
next  month.  As  the  open- 
source  operating  system  be¬ 
comes  more  reliable  and  the 
application  development  tools 
that  support  it  mature,  the 


Continued  ^rom  page  J 

Unilever 

the  company  has  no  cost- 
savings  numbers  to  release, 
but  anecdotal  evidence  is  bol¬ 
stering  its  expectations.  Hopc- 
Murray  said. 

"We've  got  an  awful  lot  of 
proof  points.”  he  said,  includ- 
ii^  firewall  servers  that  run 
three  times  faster  under  Lin¬ 
ux  with  cost  savit^  of  up  to 
40%.  “Every  time  we  put  in 
Linux  we  are  amazed  and  sur¬ 
prised  at  its  speed  and  the  re¬ 
liability  with  which  we  can 
run  it." 

He  said  Unilever  expects  to 
benefit  from  the  expected  re¬ 
lease  later  this  year  of  the  Lin¬ 
ux  2.6  kernel,  which  will  intro¬ 
duce  features  that  offer  the 
tools  needed  for  the  transition, 
including  real-time  threading 
and  improved  journaling. 

Unilever  is  making  its  move 
in  a  very  vocal  way  to  encour¬ 
age  independent  software  ven¬ 
dors  to  develop  needed  enter¬ 
prise  business  applications  for 
Linux.  Hope-Murray  said. 

"It’s  not  really  a  leap  of 
faith.”  be  said,  noting  that  Uni¬ 


NEWS 


company  will  likely  migrate 
some  of  its  more  business  - 
critical  applications  over  from 
Solaris,  Beery  said. 

Fujitsu's  move  is  a  sign  of 
the  growing  interest  in  Linux 
within  corporate  IT  depart¬ 
ments,  said  Charles  King,  an 
anatysi  at  The  Sageza  Group 
Inc.  in  Mountain  View.  Calif. 
"This  is  a  resoundii^  pat  on 
the  back  for  Linux.”  he  said. 

Linux  Push 

Fujitsu  joins  a  list  of  server 
vendors,  includii^  IBM  and 
Hewlett-Packard  Co.,  that  are 
aggressively  pushing  Linux  for 
use  in  enterprise  applications. 
“If  you  take  a  look  at  some  of 
these  announcements,  the 
claims  of  some  vendors  that 
Linux  is  not  ready  for  the  en¬ 
terprise  qualifies  as  whistling 
past  the  graveyard.”  King  said. 

Jack  Hirano.  a  deputy  gener¬ 
al  manager  at  Fujitsu  in  New 
York,  said  the  company  also 
plans  to  use  Intel's  Xcon  proc¬ 
essors  in  its  Linux  servers.  He 


lever's  two  largest  IT  suppli¬ 
ers.  HP  and  IBM,  are  commit¬ 
ted  to  Linux  and  are  ready  to 
help  with  the  project.  "If  our 
partners  weren't  committed  to 
it.  we  wouldn't  be  doing  it.” 

Getting  an  OK  from  top 
executives  to  commit  to  the 
strategy  rook  time.  "It  wasn't 
osemight,"  Hopc-Murray  said. 
"If  it  wasn't  for  the  ttvin  sup¬ 
port  [from  IBM  and  HP],  we 
probably  wouldn't  have  gotten 
the  buy-in." 

The  company  hopes  to  con¬ 
duct  internal  testing  with  Lin- 
lu  versions  based  on  the  up¬ 
coming  kernel  by  the  end  of 
this  year.  It’s  also  applying  for 
membership  in  the  nonprofit 
Open  Source  Development 
Lab  Inc.  in  Beaverton.  Ore.. 


added  that  Fujitsu,  which 
makes  its  own  SPARC  chips, 
will  continue  to  develop  new 
Unix  systems.  But  the  Linux 
machines  will  broaden  the 
company's  enterprise  server 
portfolio,  according  to  Hirano. 
"We  see  a  strong  opportunity 
in  the  Linux  marketplace,  and 
wc'rc  confident  that  we  can 
capitalize  on  it,”  he  said. 

Hirano  said  Fujitsu  plans  to 
deliver  the  same  reliability, 
availability  and  scalability  fea¬ 
tures  on  the  Linux  boxes  that 
it  does  for  its  Unix 
servers.  To  that 
end,  the  company 
has  created  a  300- 
employee  Linux 
systems  group  that 
will  focus  on  port¬ 
ing  its  interconnect,  cluster¬ 
ing,  systems  management  and 
grid-computing  technologies 
to  Linux 

Fujitsu,  which  has  a  large 
presence  in  Japan  and  Europe, 
isn't  a  big  player  in  the  U5. 
server  market.  But  it  has  been 


which  was  created  to  encour¬ 
age  the  development  of  enter¬ 
prise  data  center  and  telecom¬ 
munications  applications  for 
Linux  Unilever  would  be  the 
first  private  company  to  join 
the  group. 

Desktops  throughout  Uni¬ 
lever  will  remain  Windows- 
based.  Hope-Murray  said, 
though  the  company  will  moni¬ 
tor  the  possibility  of  switching 
those  to  Linux  in  the  future. 

He  said  he  has  been  seeking 
alternatives  to  the  company's 
infrastructure  of  three  operat¬ 
ing  systems  for  more  than  a 
decade.  In  the  early  1990s.  the 
Open  Systems  Foundation, 
which  promised  a  platform- 
independent  Unix  tried  but 
failed  to  provide  the  operatii^ 
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trying  to  expand  its  position 
here  by  using  aggressive  pric¬ 
ing  to  lure  Unix  users  away 
from  Sun’s  hardware,  said 
Rich  Partridge,  an  analyst  at 
D.H.  Brown  Associates  Inc.  in 
Port  Chester.  N.Y. 

He  added  that  last  week's 
announcement  is  a  recogni¬ 
tion  by  Fujitsu  '^hat  you  just 
can't  ignore  Linux”  Fujitsu  ex¬ 
ecutives  are  betting  that  they 
"can  leven^  the  design  of 
their  big  boxes  and  plop  in  a 
different  chip,”  Partridge  said. 

"It  sounds  like  a 
smart  reuse  of 
their  technology.” 

ITie  Linux 
server  plans  sig¬ 
nificantly  expand 
Fujitsu’s  relation¬ 
ship  with  Intel.  Fujitsu  Sie¬ 
mens  Computers,  a  Cologne. 
Germany-based  joint  venture 
with  Siemens  AG.  sells  a  line 
of  lower-end  Intel  servers. 

But  these  will  be  Fujitsu's  first 
high-end  servers  based  on 
Intel  processors.  I 


system  he  needed,  he  said. 

Now,  with  the  integration  of 
the  2.6  kernel.  Linux  will  have 
the  maturity  needed  to  handle 
Unilever's  heavy-duty  dau- 
base.  customer  relationship 
management  and  enterprise 
resource  planning  applica¬ 
tions,  Hope-Murray  said. 
Unilever  officials  declined 
to  identify  their  database. 
CRM  or  ERP  vendors. 

Analysts  said  the  confi¬ 
dence  Unilever  has  in  Linux 
has  diowo  up  elsewhere. 

‘'That's  consistent  with  och¬ 
er  companies  IVe  talked  to  in 
the  fmanciai  industry,"  said 
George  Weiss,  an  analyst  at 
Stamford,  Cona -based  Gart¬ 
ner  Inc.  They’re  saying  [Lin¬ 
ux]  will  be  fixed  and  firm  in 
the  future,  and  they  want  to  be 
part  of  the  wave.” 

Bill  Claybrook,  an  analyst  at 
Aberdeen  Group  Inc.  in  Bos¬ 
ton.  said  Unilever  benefits 
from  having  an  extensive  his¬ 
tory  with  Unix  the  model  for 
Linux,  and  ffom  having  part¬ 
ners  such  as  IBM  and  HP.  "If 
they  buy  the  stuff  from  IBM 
and  HP.  there’s  not  really  a  big 
risk,"  be  said.  They’re  going 
to  get  service  and  support"  I 
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HP  Readies  Fbur-CPU  Blade  Server 


BY  BOB  BBEWIN 

Hewlett-Packard  Co.  last  week 
introduced  a  four-processor 
blade  server,  becoming  the 
first  major  hardware  vendor 
to  detail  plans  to  ship  a  blade  < 
device  of  that  size. 

But  corporate  users  will 
have  to  wait  for  nearly  two 
months  before  they  can  buy 
the  four-CPU  system.  Hugh 
Jenkins,  vice  president  of 
marketing  for  HP's  industry 
standard  server  group,  said 
the  new  ProLiant  BL40p  de¬ 
vice  isn’t  due  to  be  available 
for  orderii^  until  mid-March. 

The  BL40p  will  be  based  on 
Intel  Corp.’s  Xeon  MP  proces¬ 
sors  and  will  include  built-in 
connections  to  Fibre  Channel 
storage-area  networks  (SAN). 
Jenkins  said.  He  added  that  the 
SAN  connectivity  capabilities 
will  let  IT  managers  book  the 
blade  server  to  large  stor^ 
clusters  for  use  in  running 
corporate  applications  such  as 
messaging  or  enterprise  re¬ 
source  planning  systems. 

Blade  servers  pack  the  func¬ 
tionality  of  traditional  rack¬ 
mounted  systems  onto  a  single 
high-density  circuit  board,  re¬ 
ducing  the  amount  of  space 
that  the  hardware  takes  up  in 
data  centers.  HP  and  other  top 
server  vendors  last  year  began 
shipping  blade  devices  with 
one  or  two  CPUs. 

Betwid  a  start-up 

HFs  move  to  the  four-proces¬ 
sor  level  comes  10  months  af¬ 
ter  Egenera  Inc.,  a  Mailboro, 
Mass.-based  start-up,  an¬ 
nounced  a  blade  server  that 
also  includes  four  Xeon  chips 
and  built-in  support  for  Fibre 
Channel  SANs. 

Other  vendors  also  have 
such  systems  in  the  works. 

IBM  said  it  plans  to  introduce 
four-processor  blade  servers 
with  SAN  connections  later 
this  year.  Dell  Computer  Corp. 
has  four-Cn*U  devices  on  its 
road  map  but  declined  to  dis¬ 
close  its  delivery  plans. 

CenterBeam  Inc.,  an  IT  out¬ 
sourcing  vendor  in  Santa 
Clara,  Calif.,  uses  HFs  exist¬ 
ing  blade  servers  to  hold  mir¬ 
ror  im^es  of  the  applications 


and  files  that  it  manages  for 
customers. 

Glenn  Ricart,  CenterBeam’s 
chief  technology  officer,  said 


the  company  plans  to  evaluate 
the  BL40p  once  it’s  available. 
The  four-CPU  device  could 
make  it  easier  for  CenterBeam 


"to  scale  both  processing  and 
SAN  (capabilities)  to  meet 
whatever  demands  our  clients 
have,”  Ricart  said. 

Pricing  on  the  BL40p  will 
Stan  at  S8.999.  Jenkins  said. 
HP  also  plans  to  release  by 


mid-March  an  upgrade  of  its 
two-processor  BL20p  model 
with  faster  Xeon  chips  and  the 
same  SAN  connectivtty  that’s 
coming  in  the  four-CPU  de¬ 
vice.  The  new  BL20p  will  stan 
at  $3399.  Jenkins  said.  I 
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PATRICIA  KEEFE 


Clear  on  the  Concept 


a 


DON’T  IT  ALWAYS  SEEM  TO  GO 
that  you  don’t  know  what 
you’ve  got  till  it’s  gone?”  Joni 
Mitchell’s  refrain  might  explain 
the  behavior  of  some  vendors 
today.  It’s  interesting,  isn’t  it,  how  a  dramatic  drop 
in  sales  can  achieve  what  reasonable  complaints 
couldn’t  —  undivided  attention  and  prompt  action. 


Oracle,  for  example, 
struggled  last  year  with 
decliniog  business  appli¬ 
cation  revenue.  New  li¬ 
cense  sales  plunged  in  its 
last  quarter,  falling  34% 
worldwide  and  50%  in  the 
Americas  in  year-over* 
year  comparisons.  This  is 
bad  news  for  the  database 
giant,  which  is  counting 
on  its  application  busi¬ 
ness  to  help  drive  growth. 

So  last  week,  Oracle 
stepped  up  efforts  to  address  user 
complaints  by  revampii^  its  sales 
force  and  rolling  out  a  suite  of  appli¬ 
cations  designed  so  customers  can 
quickly  deploy  pieces  of  its  E-Busi¬ 
ness  Suite  lli  line. 

IBM  got  into  the  act  by  rolling  out 
ntrw  hardware  along  with  significant 
pricii^  changes  and  upgrade  op¬ 
tions  for  its  iSeries  system  cus¬ 
tomers  two  weeks  aga  IBM  hopes  to 
revitalize  sales  of  its  25-year-old 
midrange  line  by  addressii^  long¬ 
standing  user  concerns  and  reignit- 
ing  developer  and  reseller  interest. 

Picking  up  where  she  left  off  at 
Comdex.  HP  CEO  Carly  Fiorina 
prattled  on  to  a  European  audience 
about  how  it's  not  the  economy 
weighing  down  the  IT  market  (It's 
not?),  but  rather  "changes  in  cus¬ 
tomer  requirements  that  are  here  to 
stay."  Translated  this  means  chat 
suddenly  sober  customers  now  real¬ 
ize  that,  in  Carly's  words,  "it's  not 
the  glamour  of  technology  that  is 
most  important;  it’s  return  on  tech¬ 
nology  that's  most  important.’'  You 
don't  want  hot  boxes  and  killer  apps 


anymore:  why,  you  want 
to  cut  your  technology 
costs  and  align  with 
business  requirements! 
(And  where  would  IT 
have  gotten  the  idea  that 
it  had  to  have  the  latest 
and  greatest?)  Possibly 
caught  up  in  the  excite¬ 
ment,  an  HP  partner  ac¬ 
tually  suggested  that 
customers  have  matured 
so  much  that  "they  really 
want  to  get  the  adver¬ 
tised  benefits."  You  didn't  want  that 
before? 

What’s  new  isn't  that  customers 
have  suddenly  woken  up  and  started 
demanding  technolc^  that  works, 
but  rather  that  vendors  are  beginning 
to  take  those  demands  seriously.  Of 
course,  they  don't  have  any  choice. 
Hardly  anyone  bought  anything  last 


year,  and  their  earnings  show  it. 

Moreover,  it  has  become  clear  that 
the  hoped-for  turnaround  in  2003 
isn’t  going  to  happen.  And  no  matter 
how  much  vendors  play  up  their 
sudden  enthusiasm  for  the  midsize 
and  small  business  markets,  the  fact 
is.  they're  pining  for  your  business. 

Wendover  Corp.,  a  sales  and  mar¬ 
keting  intelligence  firm  that  regular¬ 
ly  surveys  the  country’s  largest  com¬ 
panies  on  their  budgeting  and  pur¬ 
chasing  plans,  puts  it  this  way:  Out 
of  14  million  businesses  in  the  U.S., 
59%  have  5  employees  or  fewer, 
while  79%  have  10  employees  or 
fewer.  One-half  of  1%  have  between 
100  and  1,000.  And  only  one-tenth  of 
1%  —  that’s  14,000  businesses  — 
have  more  than  l.(XX)  employees. 
That’s  you.  and  that’s  where  the 
money  is.  Do  the  math. 

IVhat’s  key  is  that  big  FD  vendors 
are  pitching  2003  as  the  y^  hi-¬ 
tech  spending  rebounds.  And  they 
now  seem  pretty  clear  on  the  con¬ 
cept  that  customers  want  their  ROI, 
quickly.  So,  no  matter  bow  small 
that  rebound,  vendors  seem  extra 
determined  to  work  for  your  busi¬ 
ness.  Your  business  partners  are  lis¬ 
tening  like  never  before,  so  speak 
out  and  take  advantage  of  it  while 
you  can.  I 


MICHAEL  GARTENBERG 

Three  Top 
Tech  Choices 
For  2003 

IF  YOU  DON’T  already 
have  them  in  the  pipeline, 
here  are  three  technolo¬ 
gies  I’d  advise  pursuing  in 
2003.  They  all  add  features 
and  benefits  that  will  help  make  your 
users  more  productive  and  let  you  and 
your  team  get  some  positive  visibility 
inside  the  company. 

t  Corporate  Man!  mwMqino:  E-mail 
has  become  the  lifeblood  communica¬ 
tions  for  most  organizalior^.  But  it’s 
not  enough.  Instant  messaging  is  the 
logical  next  step  in  efficient  enterprise 
communications.  It  lets  managers 
work  closely  with  direct  reports  and 
see  who’s  available  in  real  time.  IM- 
related  problems,  such  as  control  of 
user  names,  security  aiKl  the  ability  to 
archive  messages,  are 
all  being  addressed 
by  the  leading  IM 
vendors.  2003  is  a 
good  time  to  evaluate 
and  implement  IM. 

2.  The  value 
of  the  connected  vs. 
the  disconnected 
user  is  no  longer  a 
debate.  *nie  impor¬ 
tance  of  staying  con¬ 
nected  is  well  under¬ 
stood.  but  users  are 
often  constrained  by 
the  physical  limita¬ 
tions  of  their  net¬ 
work  links.  Wireless  802.Ux  network 
products  give  users  the  freedom  to  be¬ 
come  “corridor  warriors"  and  remain 
productive  even  ^en  away  fo>m  their 
desks. 

When  802Jlx  is  combined  with 
hardware  like  Tablet  PCs,  users  can  re¬ 
main  online  even  during  meetings, 
woric  with  remote  colleagues  and 
roam  from  location  to  location.  While 
IT  has  to  put  many  security  policies  in 
place,  802.11X  networks  can  add  tre¬ 
mendous  value  to  most  organizations. 

3.  SlTMflningvfdao:  Do  you  think  that 
streaming  video  means  grainy  clips 
the  size  of  a  postage  stamp?  Think 
again.  Streaming  quality  has  never 
been  higher,  and  the  cost  has  never 
been  lower.  New  technologies  from 
Pimm  R»  B  on  vacatnn.  His  cdumn  returns  riexi  week 
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Microsoft  RealNetworks  and  Appte 
are  near  broadcast  quality  with  rela¬ 
tively  low  bandwidth  penalties. 

Streaming  technologies  can  make  it 
easy  for  executives  to  get  a  message 
out  to  employees  or  to  address  the 
outside  world.  Because  of  competitive 
bandwidth  pricing,  live  events  have 
begun  to  yield  manageable  economics 
for  roost  companies.  If  your  company 
hosts  or  televises  live  events,  you  can 
now  make  use  of  the  Internet  and 
streaming  video  to  improve  returns  on 
these  expendittires  at  dramatically 
lower  costs. 

These  technologies  are  probably  in 
use  inside  your  organization  already. 
Users  are  more  technically  aware  than 
ever  before.  They  read  the  same  trade 
magazines  that  we  do  and  understand 
the  benefits  that  technology  can  bring 
them.  The  result  is  they  often  can  and 
will  bypass  IT. 

Now  is  the  time  to  take  the  initiative 
and  either  seize  control  or  cede  con¬ 
trol  to  your  users.  Start  your  research 
and  deploy  early.  I 

EMMET  COLE 

Palladium 
Is  Mythical 
Security 

According  to  legend, 
the  Palladium  was  a 
sacred  statue  of  Athena 
that  the  IVojans  believed 
would  protect  them  against 
the  advancing  Greek  army.  But  when 
Odysseus  sneaked  into  Troy  and  stole 
the  Mladhim,  lYoy  did  not  folk  That 
ha|^>ened  only  when  the  Greeks  built 
the  TYo)an  horse. 

Mysterious  and  somewhat  unfortu¬ 
nate  mythological  precedents  aside, 
serious  questions  are  bmng  asked  of 
Microsoft’s  forthcoming  Palladium 
technology.  Will  Palladium  fail  to  pro¬ 
vide  adequate  security  for  its  new 
wave  of  worshippers?  Conversely,  will 
this  product  enforce  a  degree  of  “pro¬ 
tection”  so  stringent  that  the  Inter¬ 
net's  freedom  of  exchange  and  techno¬ 
logical  diversity  will  itself  be  at  risk? 
Will  Microsoft  safeguard  users  or  its 
own  commercial  interests?  Given  the 
ubiquity  of  Microsoft  technologies  in 
the  business  worid,  what  kind  of  prob¬ 
lems  lie  ahead? 

Thslecimology.  Part  of  Microsoft's 
contribution  to  the  TYusted  Comput¬ 


ing  Platform  Alliance  (a 
consortium  founded  by  HP. 

IBM,  Microsoft  and  Intel), 

Palladium  is  a  software/ 
hardware  combination  os¬ 
tensibly  designed  to  pre¬ 
vent  piracy  and  protect  cor¬ 
porate  infonnatioa 

Set  for  release  possibly  as 
early  as  200S.  Palladium  re¬ 
quires  a  new  chip  technol¬ 
ogy  being  developed  by  In¬ 
tel  and  AMD.  This  chip  in¬ 
cludes  iMw  encryption 
fiinctioDS  alongside  a  small  memory 
capacity  acting  as  a  digital  vault  and 
bolding  the  keys  to  decrypt  protected 
data. 

Palladium  could  be  used  to  secure 
VPNs  by  enabling  administiators  to 
authenticate  and  identify  computers 
on  the  network.  It  could  protect  net¬ 
works  against  pirated  software  and 
malicious  worms.  Microsoft  has  ap¬ 
parently  promised  to  release  some  of 
the  code  so  that  developers  can  study 
and  debug  the  software. 

So  what's  the  problem? 


While 

Palladium  will  protect  data, 
apparently  it  will  do  so  in  a 
selective  manner  by  limit¬ 
ing  users’  software  dmices 
to  those  authorized  and  li¬ 
censed  by  Microsoft  and  its 
allies:  a  virtual  lock  on  your 
business’s  capacity  to  em¬ 
ploy  diverse  tecboologies. 
This  equates  to  diip-en- 
forced  Digital  Rights  Man¬ 
agement  (DRM).  Microsoft 
owns  a  patent  for  a  DRM 
operating  system.  If  Palladium  is  bun¬ 
dled  with  future  editions  of  Windows, 
will  Microsoft  have  learned  its  lessons 
about  fair  business  practice  from  its 
recent  antitrust  case.  Can  it  protect  its 
copyrighted  material  at  the  expeitse  of 
other  copyrighted  materials? 

It  seems  that  computers  rvnning 
Linux  or  other  non-Microsoft  operat¬ 
ing  systems  won't  be  able  to  use  the 
chip.  With  many  businesses  relying 
on  Linux,  planners  will  face  some 
serious  choices.  Should  they  work 
around  Palladium,  or  abandon  open- 
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source  systems  altogether? 

Planners  should  also  consider 
whether  compiete  homogeneity  among 
the  security  technolofpes  used  by  busi¬ 
ness  networks  would  make  it  easier  for 
hackers  to  cause  damage.  Common 
sense  has  to  be  abandoned  when  there 
is  only  one  basket  to  put  your  eggs  in. 

“It’s  a  terrible  scheme.*  Philip  Car- 
inhas,  a  Texas-based  Linux  consultant 
told  me.  “Any  attempt  to  control  tech¬ 
nology  is  inherently  antitechnology. 
Unless  a  culture  of  acquiescence  to 
Microsoft  is  overcome,  however,  many 
businesses  will  be  stuck  with  it” 

The  outlook  for  non-Microsofi- 
approved  technologies  is  bleak,  but  it 
will  be  an  uphill  battle  for  Microsoft  to 
convince  consumers  and  businesses 
that  Palladium  is  a  virtuous  technolo¬ 
gy,  intended  to  protect  our  city  gates. 

Me?  Pm  won^ring  what  form  the 
Troian  horse  will  take.  I 
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‘Shut  Up  and  Code' Has  Shoddy  Record 


PMM  FQTS  erdire  cohsm 
Toni  Leave  OS  Choice  to 
Developeis*  [Quicidjnk  354G2] 
could  hM  been  leplaced  vdlh  the 
phrase 'shut  up  and  code.*  The 
shut-up-and-code  phiasophy  IS 
nolhino  now.  K  didales  ttiBl  the  IT 
manaper  first  asks  de^lopers  for 
input  Into  Mhat  tools  they  wi  use. 
then  disregards  them  in  tavor  ol  ad¬ 
vice  from  one  of  his  otilf  buddies. 

To  do  shtil-up-and-oode  noht.  its 
nveraOve  that  devetopets  not  be 
told  the  ovetai  goals  of  the  organi¬ 
zation.  Then  when  they  complain 
about  their  glitchy.  cumberaome 
toots,  the  fT  manager  can  say.  Ibu 
don1  see  the  tag  pictura.*The  tnily 
adept  shd-up-and-code  managec 
prevents  deMdopets  from  dieclly 
cornmunicallngwithendusers-irt' 
stead  fikenng  data  that  become 
specifications  and  des^jn  through 
himsel  or  te  sycophants,  who 
deisiand  finie  of  vdtal  s  practical  to 
develop.  What's  the  track  record  ol 
shut-up-andxode  developmeni? 
For  years,  hetf  the  projects  storied 
were  abandoned  after  consrieraUe 
expense.  Most  of  the  other  hall 
came  in  very  tale  and  over  budget. 
Stave  Utl 
Presidettf,  TVoublc- 
sftootrrscom.  Otiondo 


EdHar’s  iMtK  Computerworld 
ratdn  had  skit  mom  to  sty  about 
Fat'sa3k0rnSaeatenosr¥Siskin 
of  die  tsOBf  and  men  comments 
onk>e[0idcUjnk35671l  Than 
tmdioourdisQSSionknm 
[OuKkUnk 82630]  lo  see  sttmon 
hedbeck  and  to  post  yoif  opinion 


Watching  the  Clock 

IHTKFUTUKlKrafartde 
*Compuier  ClodB  Wind  Down* 
[QuicliLx*  349691.  Gary  H.  Arthes 
managed  to  erwer  al  siite  of  the  ts* 
sueafoncamavetyGomprehensi- 
bte  way.  Few  people  understand  the 
import  gI  Ms  Isaue.  but  I  think  some 
of  tfw  tyeatest  technology  debates 
of  die  nerd  decade  wt  to^  on  M. 
HopeMy.  His  arbde  wi  make  the 
rounds  and  begin  to  stir  up  some 
much  needed  debate. 
Q&MKSemm 
Director  of  IT  services. 
StarDream  SouUos  Inc^ 

Fort  Laxtderxtak.  Fla., 
dave@starxireamxom 


K's  Kind,  Thrifty  Too 

Wow.  ITS  JMUMW  agaia  SO 
i's  time  lor  us  to  think  of 
Moosoh  being  toJStworthy[Quck- 


IJ^k355621-CanwBe^QeclMi- 
crosoft  to  todiold  the  Q  points  of 
die  Boy  So^  Law  and  take  one  of 
Its  tenets  each  month?  Ybu  know, 
January,  tmshmrthy:  Februwy. 
loyit:  htarch.  helpM:  Nowmber. 
dm  And  because  we  dl  worshto 
Redmond,  how  appropriate  that 
Oecamber's  tenet  would  be 
‘reverent* 

BIFarguMti 
Monre  Servno,  OAif, 
u^3hdj(^ULnetcom.com 


Never  Quite  TheiB 

Evorr  FUFF  MTwifrve  read 
about  notebooks  for  the  last 
umpteen  years  contains  I  veralian 
on  the  ptm.  *Whh  pCM«  and 
leaiures  of  tteteboaks  rapidhf 
approaching  those  of  desktop 
computer  systems.  .  .*  But  ol 
come,  however  rapMty  they  ap¬ 
proach,  they  never  do  catch  up  in 
power  and  iealures.  becaifie 
there's  akrays  the  lag  nvotved  in 
mMalunzmg  the  desktop 

hanhvare  evotobon.  And  they  wi 
alwaysrepresentcompromse.be- 
cause  ot  ttwr  smaAer  keytxards, 
frustrabng  poMaig  devi^  power 
management  ssues.  graWarfiagilr- 
ty  and  fntead  <kM5.  storage,  mem¬ 
ory  and  Oder  shortconwigs. 

The  simple  fact  B  that  in  order  to 


pay  tor  the  nwealiRalian  and  the 
mobily  that  I  affords,  you  wi  al¬ 
ways  gel  tesa  pure  compuBng  bang 
tor  die  buck  when  buyvig  a  note¬ 
book.  R  you  need  the  mobily  and  I 
the  rracHne  oBierwoe  meets  yokff 
needs,  so  be  a  -  but  enough  vMlh 
these  transparerWy  wibue  old 
chestnuts.TheybefongwiRiim' 
mortal  phrases  such  as.  *Mosl 
users  wl  n^  need  to  aocase  (a 
U  nwgWiyte;  64hB;  2GGMB:  166} 
of  RAM*  or  IdoBt  MS  wl  nevar 
need  the  speed  of  •  (3344Hz:  166- 
MHcSOIHIHeVGHlS^) 


Thimtrw  dtrretor/THT  manager. 
Jtocktarid  Chtkfrenl  ftyefti- 
atric  Center.  Ororigrburg,  NIV, 
rTebnik^)ofnh.«o(ejiyj0 

COMPtnOlWOllLO  welcomes 
comments  tram  As  readers.  Letters 
w*  be  edited  for  bravKy  and  darty. 
They  should  be  addres^  to  Jimie 
Edte.  tetters  edtor.  Compulerwortd 
PO  B«  9in  SOO  OU  Cormacticul 
Rad).  Framingham.  Mass.  01701 
Fax.  (506) 67^843. 

E-rna4  teBeis6oornputetv>ot1dJorri 
Indude  an  address  and  phone  num¬ 
ber  tor  nmedstee  vanficalion. 
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Clear  on  the  Concept 


a 


DON’T  IT  ALWAYS  SEEM  TO  GO 
that  you  don’t  know  what 
you’ve  got  till  it’s  gone?”  Joni 
Mitchell’s  refrain  might  explain 
the  behavior  of  some  vendors 
today.  It’s  interesting,  isn’t  it,  how  a  dramatic  drop 
in  sales  can  achieve  what  reasonable  complaints 
couldn’t  —  undivided  attention  and  prompt  action. 


Oracle,  for  example, 
struggled  lost  year  with 
declining  business  appli¬ 
cation  revenue.  New  li¬ 
cense  sales  plunged  in  its 
last  quarter,  falling 
worldwide  and  50"o  in  the 
Americas  in  ycar-over- 
ycar  comparisons.  This  is 
bad  news  for  the  database 
giant,  which  is  counting 
on  its  application  busi¬ 
ness  to  help  drive  growth. 

So  last  week.  Oracle 
stepped  up  efforts  to  address  user 
complaints  by  revamping  its  sales 
force  and  rolling  out  a  suite  of  appli¬ 
cations  designed  so  customers  can 
quickly  deploy  pieces  of  its  E-Busi- 
ncss  Suite  Hi  line. 

IBM  got  into  the  act  by  rolling  out 
new  hardware  along  w  ith  significant 
pricing  changes  and  upgrade  op¬ 
tions  for  its  iSeries  system  cus¬ 
tomers  two  weeks  ago.  IBM  hopes  to 
revitalize  sales  of  its  25-year-old 
midrange  line  by  addressing  long¬ 
standing  user  concerns  and  reignit- 
ing  developer  and  reseller  interest. 

Picking  up  where  she  left  off  at 
Comdex.  HP  CEO  Cariy  Fiorina 
prattled  on  to  a  European  audience 
about  how  it's  not  the  economy 
weighing  down  the  IT  market  (Jt's 
not?),  but  rather  “changes  in  cus¬ 
tomer  requirements  that  are  here  to 
stay.”  Translated  this  means  that 
suddenly  sober  customers  now  real¬ 
ize  that,  in  Carly’s  words,  “it’s  not 
the  glamour  of  technology  that  is 
most  impunani:  it's  return  on  tech¬ 
nology  that’s  most  important."  You 
don't  want  hot  boxes  and  killer  apps 


anymore:  why.  you  want 
to  cut  your  technology 
costs  and  align  with 
business  requirements! 

I  And  where  would  IT 
have  gotten  the  idea  that 
it  had  to  have  the  latest 
and  greatest?)  Possibly 
caught  up  in  the  excite¬ 
ment,  an  HP  partner  ac¬ 
tually  suggested  that 
customers  have  matured 
so  much  that  "they  really 
want  to  get  the  adver¬ 
tised  benefits."  You  didn't  want  that 
before? 

What’s  new  isn’t  that  customers 
have  suddenly  woken  up  and  started 
demanding  technology  that  works, 
but  rather  that  vendors  are  beginning 
to  take  those  demands  seriously.  Of 
course,  they  don't  have  any  choice. 
Hardly  anyone  bought  anything  last 


year,  and  their  earnings  show  it. 

Moreover,  it  has  become  clear  that 
the  hoped-for  turnaround  in  2003 
isn't  going  to  happen.  And  no  matter 
how  much  vendors  play  up  their 
sudden  enthusiasm  for  the  midsize 
and  small  business  markets,  the  fact 
is.  they're  pining  for  your  business. 

Wendover  Corp..  a  sales  and  mar¬ 
keting  intelligence  firm  that  regular¬ 
ly  surveys  the  country’s  largest  com¬ 
panies  on  their  budgeting  and  pur¬ 
chasing  plans,  puts  it  this  way:  Out 
of  14  million  businesses  in  the  U.S.. 
59«b  have  5  employees  or  fewer, 
while  79%  have  10  employees  or 
fewer.  One-half  of  1%  have  between 
100  and  1.000.  And  only  one-tenth  of 
1%  —  that’s  14.000  businesses  — 
have  more  than  1.000  employees. 
That’s  you.  and  that’s  where  the 
money  is.  Do  the  math. 

What’s  key  is  that  big  IT  vendors 
arc  pitching  2003  as  the  year  high- 
tech  spending  rebounds.  And  they 
now  seem  pretty  clear  on  the  con¬ 
cept  that  customers  want  their  ROI. 
quickly.  So.  no  matter  how  small 
that  rebound,  vendors  seem  extra 
determined  to  work  for  your  busi¬ 
ness.  Your  business  partners  are  lis¬ 
tening  like  never  before,  so  speak 
out  and  take  advantage  of  it  while 
you  can.  I 


MU  H.’\I  I  f.AKThNHI.IU, 

Three  Top 
Tech  Choices 
For 2003 

IF  YOU  DON'T  already 
have  them  in  the  pipeline, 
here  are  three  technolo¬ 
gies  I'd  advise  pursuing  in 
2003.  They  all  add  features 
and  benefits  that  will  help  make  your 
users  more  productive  and  let  you  and 
your  team  get  some  positive  visibility 
inside  the  company. 

1  Corporate  nstant  messaging;  E-mail 
has  become  the  lifeblood  communica¬ 
tions  for  most  organizations.  But  it's 
not  enough.  Instant  messaging  is  the 
logical  next  step  in  efficient  enterprise 
communications.  It  lets  managers 
work  closely  with  direct  reports  and 
sec  who’s  available  in  real  lime.  IM- 
relaicd  problems,  such  as  control  of 
user  names,  security  and  the  ability  to 
archive  messages,  are 
all  being  addressed 
by  the  leading  IM 
vendors.  2003  Ls  a 
good  time  to  evaluate 
and  implement  IM. 

2.  The  value 
of  the  connected  vs. 
the  disconnected 
user  is  no  longer  a 
debate.  The  impor¬ 
tance  of  staying  con¬ 
nected  Ls  well  under¬ 
stood.  but  users  are 
often  constrained  by 
the  physical  limita¬ 
tions  of  their  net- 
woric  links.  Wireless  802.nx  network 
products  give  users  the  freedom  to  be¬ 
come  "corridor  warriors"  and  remain 
productive  even  when  away  from  their 
desks. 

When  802.11X  is  combined  with 
hardware  like  Tablet  PCs.  users  can  re¬ 
main  online  even  during  meetings, 
work  with  remote  colleagues  and 
roam  from  location  to  kKation.  While 
IT  has  to  put  many  security  policies  in 
place.  802.11X  networks  can  add  tre¬ 
mendous  value  to  most  organizations. 

3.  Streaming  video:  Do  you  think  that 
streaming  video  means  grainy  clips 
the  size  of  a  postage  stamp?  Think 
again.  Streaming  qualic)'  has  never 
been  higher,  and  the  cost  has  never 
been  lower.  New  technologies  from 
Ptmm  Fox  son  vacation  Hs  column  returns  next  week 
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Microsoft.  RealNetworks  and  Apple 
are  near  broadcast  quality  with  rela¬ 
tively  low  bandwidth  penalties. 

Streaming  technologies  can  make  it 
easy  for  executives  to  get  a  message 
out  to  employees  or  to  address  the 
outside  world.  Because  of  competitive 
bandwidth  pricing,  live  events  have 
begun  to  yield  manageable  economics 
for  most  companies.  If  your  company 
hosts  or  televises  live  events,  you  can 
now  make  use  of  the  Internet  and 
streaming  video  to  improve  returns  on 
these  expenditures  at  dramatically 
lower  costs. 

TTiese  technologies  are  probably  in 
use  inside  your  organization  already. 
Users  are  more  technically  aware  than 
ever  before.  They  read  the  same  trade 
magazines  that  we  do  and  understand 
the  benefits  that  technology  can  bring 
them.  The  result  is  they  often  can  and 
will  bypass  IT. 

Now  is  (he  time  to  take  (he  initiative 
and  either  seize  control  or  cede  con¬ 
trol  to  your  users.  Start  your  research 
and  deploy  early.  I 

»  cole 

Palladium 
Is  Mythical 
Security 

CCORDING  to  legend, 
the  Palladium  was  a 
sacred  statue  of  Athena 
that  the  Trojans  believed 
would  protect  them  against 
the  advancing  Greek  army.  But  when 
Odysseus  sneaked  into  Troy  and  stole 
the  Palladium.  Ttoy  did  not  fall.  That 
happened  only  when  the  Greeks  buUi 
the  Trojan  horse. 

Mysterious  and  somewhat  unfortu¬ 
nate  mythological  precedents  aside, 
serious  questions  are  being  asked  of 
Microsoft's  forthcoming  Palladium 
technology'.  Will  Palladium  fail  to  pro¬ 
vide  .adequate  security  for  its  new 
wave  of  worshippers?  Conversely,  will 
this  product  enforce  a  degree  of  “pro¬ 
tection’'  so  stringent  that  the  Inter¬ 
net’s  freedom  of  exchange  and  techno¬ 
logical  diversity  will  itself  be  at  risk? 
Will  Micn>soft  safeguard  users  or  its 
own  commercial  interests?  Given  the 
ubiquity  of  Microsoft  technologies  in 
the  business  world,  what  kind  of  prob¬ 
lems  lie  ahead? 

The  Technology.  Pan  of  Microsoft's 
contribution  to  the  Trusted  Comput¬ 


ing  Platform  Alliance  (a 
consortium  founded  by  HP. 

IBM.  Microsoft  and  Intel), 

Palladium  is  a  software/ 
hardware  combination  os¬ 
tensibly  designed  to  pre¬ 
vent  piracy  and  protect  cor¬ 
porate  information. 

Set  for  release  possibly  as 
early  as  2005.  Palladium  re¬ 
quires  a  new  chip  technol¬ 
ogy  being  developed  by  In¬ 
tel  and  AMD.  This  chip  in¬ 
cludes  new  encryption 
functions  alongside  a  small  memory 
capacity  acting  as  a  digital  vault  and 
holding  the  keys  to  decrypt  protected 
data. 

Palladium  could  be  used  to  secure 
VPNs  by  enabling  administrators  to 
authenticate  and  identify  computers 
on  the  network.  It  could  protect  net¬ 
works  against  pirated  software  and 
malicious  worms.  Micn.>suft  has  ap¬ 
parently  promised  to  release  some  of 
the  code  so  that  developers  can  study 
and  debug  the  suftsvare. 

So  what's  the  problem? 


Unn^jral  Selection.  While 
Palladium  will  protect  data, 
apparently  it  will  do  so  in  a 
selective  manner  by  limit¬ 
ing  users'  software  choices 
to  those  authorized  and  li¬ 
censed  by  Microsoft  and  its 
allies:  a  virtual  lock  on  your 
business's  capacity  to  em¬ 
ploy  diverse  technologies. 
This  equates  to  chip-cn- 
forced  Digital  Rights  Man¬ 
agement  (DRM).  Microsoft 
owns  a  patent  fora  DRM 
operating  system.  If  Palladium  is  bun¬ 
dled  with  future  editions  of  Windows, 
will  Microsoft  have  learned  its  lesstms 
about  fair  business  practice  fmm  its 
recent  antitru.st  case.  Can  it  proieci  its 
copyrighted  material  at  the  expense  of 
other  copyrighted  materials.^ 

U  seems  that  computers  running 
Linux  or  other  non-Microsoft  operat¬ 
ing  systems  won't  be  able  to  use  the 
chip.  With  many  busincs.scs  rdying 
on  Linu.x.  planners  will  face  some 
serious  choices.  Should  they  work 
around  I’alladium.  or  abandon  open- 


source  systems  altogether? 

Planners  should  also  consider 
whether  complete  homogeneity  among 
the  security  technologies  used  by  busi¬ 
ness  networks  would  make  it  easier  for 
hackers  to  cause  damage.  Common 
sense  has  to  be  ahandttned  when  there 
is  only  one  basket  to  put  your  eggs  in. 

“It's  a  terrible  scheme."  I'hilip  Car- 
inhas,  a  Texas-based  Linux  consultant 
told  me.  “Any  attempt  to  control  tech¬ 
nology  is  inherently  antiiechnolugy. 
Unless  a  culture  nf  acquiescence  in 
Microsoft  is  overcome,  however,  many 
businesses  will  be  snick  with  it." 

The  outlook  for  non-MicrosoH- 
approved  technologies  is  bleak,  but  it 
will  be  an  uphill  battle  for  Microsoft  to 
convince  consumers  and  bu.sinesses 
that  Palladium  isa  vimious  technolo¬ 
gy.  intended  to  protect  our  city  gates. 

Me?  I'm  wondering  what  form  the 
Trojan  horse  will  take.  I 
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READERS’ LETTERS 


Shut  Up  and  Code’  Has  Shoddy  Record 

Editor's  notK  ComputerworU 
readers  had  a  lot  more  to  about 

F(u'scokjm.Seeak)ngefi«rsjof) 
otfhrs  fetter  and  more  comments 
onhnelOuKifLjnk^dTtl  Then 
head  (0  our  drsajssKtnfonjm 
{0utckLinka2830!  to  see  strH  more 
feetAack  and  to  post  your  ofmon 


PIHM  FOX'S  entire  column 
"Don'l  Leave  OS  Choice  to 
Devetopers'  [QuickLii^  35462] 
could  have  been  replaced  with  the 
phrase  'shut  up  and  code.’  The 
shu(-up-and-code  philosophy  6 
nothing  new.  H  delates  that  the  IT 
manager  first  asks  developers  for 
input  mto  what  tools  they  wiU  use. 
then  disregards  them  at  lavor  of  ad¬ 
vice  from  one  of  his  goll  buddies. 

To  do  shut-up-and-code  n^.  If  s 
imperative  that  developers  not  be 
told  the  overaK  goats  ol  the  organi¬ 
zation  Then,  when  they  complain 
^wut  their  glitchy.  cumbersome 
tools,  the  IT  manager  can  "Vbu 
don't  see  the  tug  picture '  The  tnilv 
adept  shul-igi-and-code  manager 
prevents  developers  tram  deectly 
communicating  with  end  users  -  in¬ 
stead  lilienng  data  that  wiH  become 
specif  icalions  and  design  through 
himseil  or  tvs  sycophants,  who  un¬ 
derstand  tittle  ol  what  is  practice  to 
develop.  What  's  the  track  record  of 
shut-up-and-code  developmenf? 
For  years,  halt  the  protects  started 
were  abandoned  after  consider^ 
expense  Mo^  of  the  other  halt 
came  m  very  late  and  over  budget 
Steve  Utt 
President.  Troubie- 
shooters.com.  Orlando 


Watching  the  Clock 

IN  THE  FUTURE  warcHartide 
'Computer  Clocks  Wmd  Down’ 
[OuickLink  34969).  Gary  K  Anthes 
managed  to  coverall  sides  of  the  is¬ 
sue  at  once  m  a  very  comprehensi¬ 
ble  way.  Few  people  understand  the 
import  ol  this  issue,  but  I  thmk  some 
of  the  greatest  technology  ctebales 
o(  the  next  decade  wiH  locus  on  iL 
Hopefullv.  this  article  wil  make  the 
rounds  and  begm  lo  stir  up  some 
much  needed  debate 
David  A.  Somner 
Director  of  IT  services, 
StarDream  Studios  tnc.. 

Port  Lauderdale.  Fla., 
daveiflistardrvamxvm 


tjnh%562}  CanweexpectMi- 
cfosolt  to  uphold  the  12  points  ol 
the  Boy  Scout  Law  and  lake  one  of 
Its  tenets  each  month?  You  know. 
January,  trustwixthy.  Fetxuary. 
loyal,  torch,  helplul.  November, 
desi.  And  because  Ae  ad  worslvp 
Redmond,  how  appFopnaie  thti 
December's  tenet  would  be 


H's  Kind,  Thrifty  Too 

Wow.  ITS  JANUAirr  agam.  SO 
4's  tvne  tor  us  to  Ihink  of 
Minosoh  being  trustworthy  [Quick- 


BM  Ferguson 

Monte  SeretUK  Calif.. 
infotaJrpixJietcontcom 

Never  Quite  There 

Every  PUFF  ARTICLE  fve  read 
about  notdiooks  tor  the  Iasi 
umpteen  years  contains  a  ^wiabon 

on  the  dtrase.  "With  power  and 
ieatums  of  notebooks  rapidy 
approaching  those  ol  desktop 
compute  systems. .  'But  of 
cotfse.  howeverrapvdydteyap- 
proach.  they  never  do  catch  up  m 
power  and  features,  because 
(here's  always  the  lag  vwolved  m 
rramahmztng  the  latest  desktop 
hardware  evolution.  And  they  will 
always  represent  compromise,  be¬ 
cause  ol  the*  smalei  keyboards, 
frustrating  pomtmg  devices,  power 
management  issues,  greater  fragili¬ 
ty  and  kimed  drrves.  storage,  mem- 
oiy  and  other  shortcomings 
The  snple  tact  IS  that  n  ordei  to 


pay  for  the  mnahatzahon  artd  the 
mobAtythataaflonls.yQuwial- 
weys  get  less  pue  computing  bang 
lor  the  buck  when  buyng  a  note¬ 
book.  N  you  need  the  mobiMv  and  it 
the  machine  otherwise  meets  you 
needs,  so  be  4  -  but  enough  with 
these  transparentty  untrue  old 
chestnutsTheybNongwithvn- 
mortal  phrases  such  as.  *14061 
users  wi  never  need  to  access  (a 
tul  megd)yte:64MB.  2561116: 1661 
of  RAM*  or  "Most  users  Ml  riever 
need  the  speed  ot  a  (33-MHz.  166- 
MHz.50Wl6r.1-6Hf:3-6Hz) 
pRKessot* 

An  Keller 

Thimutg  dinrtor.'PC  managtr. 
Mockland  OtUdren's  Psychi¬ 
atric  Center.  Orongebura.  NY.. 
rcetfmkianndijtateJtyMS 

COMfnJTTRWOftLD  weicorrvs 
comments  trtxn  As  readers  Letters 
wi  be  edited  lor  brevity  and  ckvity. 
They  should  be  addressed  lo  Jarme 
Edde.  tetters  edior.  CompiXerworld. 
PO  Box  9171. 500  OU  Connecticul 
Path.  Framingham.  lAass.  01701 
Fax  (506)879-4843 
E-mail  lehersiFcomptAenvortd  com 
kKlude  an  address  and  phone  num¬ 
ber  tor  VTimediaie  veniicaban 

OMcn  letlets  on  Vnac  and  ottvi 
topes  are  on  oif  Web  Me 
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ROBUST  OBJECT  DATABASE 
HIGH  PERFORMANCE  SQL 
MULTIDIMENSIONAL  ACCESS 


Our  post-relational  databSe? 
New  dimensions  of  scalability. 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cache,  the  post-relational  database. 

What  makes  Cach^  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don't  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cach^ 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cach^  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the  largest 
hospitals.  Cache  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  —  and  it  powers  enterprise 
applications  in  hnancial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  million  users  in  .  .  «  . 

88  countries.  Cach^  is  ■  -  • 
available  for  Windows, 

Open  VMS,  Linux  and 
major  UNIX  platforms. 


CACHE 

Make  Applicationt  Faitar 


Download  a  fiilly-fUnaional  version  of  Cache  or  request  it  on  CD  for  free  at  vww.lnterSvstems.comlt>ost-relational 
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FUTURE  WATCH 

InteUigeiit  Stor^ 

Products  that  ship  in  three  to  five  years 
may  feature  object-based  storage  frrtinoii>- 
gies,  which  promise  to  reduce  server  1A> 
and  eliminate  the  need  dienes  b> 
in  either  blocks  or  file  format  PlQt  2m 


SECURITY  MANASER'S  JOURNAL 
Security  Profalaiiis 
Sideline  Survey  App 

A  security  assessment  leads  Mathias 
Thurman  to  discover  that  a  Web- 
based  survey  application  leaves  sen¬ 
sitive  data  unprotected.  PSQ*  30 


OPINION 

Catch  the  Wireless  Wave 

Wireless  networks  in  the  enterprise 
really  are  inevitable,  and  what’s  more, 
they’ll  be  arriving  soon  at  a  corpora¬ 
tion  near  you,  says  Technology  editor 
Tommy  Peterson.  P^31 
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The  next  generation  of  viruses 
may  be  more  difficult  than 
ever  to  prevent — and  more 
_  destructive.  By  Dan  Verton 

Vruses 
'^’Smarter 


HE'S  BEEN  A  VIRUS 

writer  for  seven  years. 
He  goes  by  the  handle 
Melhacker  and  may 
have  been  responsible 
for  the  recent  out¬ 
break  of  the  Bugbear  worm,  the  second 
most  prevalent  worm  on  the  Internet 
last  year.  Now  be  claims  to  be  working 
on  a  new  virus,  Scezda,  that  represents 
a  new  type  of  threat 
Scezda,  as  he  describes  it,  falls  into 
an  emerging  category  of  megaworms 
that  combine  features  from  some  of 
this  year’s  most  prolific  worms  and 
viruses,  including  Sircam.  Klez  and 
Nimda.  It  uses  a  random  number  gen¬ 
erator  to  determine  how  long  it  will  re¬ 
main  dormant  on  a  target  system. 

Then  it  randomly  chooses  one  of  many 
different  methods  to  replicate  itself 
This  is  the  essence  of  the  new  era  of 
megawonns,  what  some  experts  refer 
to  as  blended,  or  polymorphic,  threats 
that  rely  upon  multiple  methods  of 
propagation.  And  that's  just  one  way  in 
which  the  virus  threat  is  evolving. 

Cunent  Threats 

This  past  year,  researchers  at  Lynn- 
field.  Mass.-based  Sophos  Inc.  detect¬ 
ed  7489  new  viruses,  worms  and  Th>- 
jan  horses,  bringing  the  total  to  more 
than  78,000.  On  average,  the  SofriMM 
virus  labs  produce  detection  routines 
for  more  than  25  new  viruses  each  day. 

Nine  of  the  tc^  10  viruses  detected 
by  all  major  virus-protectioD  compa¬ 
nies  in  2002  were  mass-mailit^  viruses 
that  exploited  known  vulnerabilities  in 
the  Win32  a^lication  programming  in- 
terfixx.  And  87%  of  all  reports  of  infec- 
tkms  stemmed  fiom  Windows  viruses. 

Continued  on  page  24 


There's  a  Dell  PowerEdge  for 
every  kind  of  business. 

"kirid  n*  stai:  to  "kind  of  FORTUNE  500 
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No  Mttor  llio  tin  o(  yoor  «ni|Moy,  wa'm  got  •  nnror  tkat  fils.  Dell  PowerEdge  servers  grow  with  your  business,  minimize  downtime,  are  easy  to  integrate  and 
even  easier  to  support.  No  matter  what  your  business  needs  -  from  hie/print  to  database  management  -  you  can  choose  the  server  that  is  right  for  you.  And,  by 
dealing  direct  with  Dell,  you  get  a  system  customized  to  fit  your  business  needs,  at  an  affordable  price,  backed  by  our  award-winning  service  and  support.  It  s  a  nice  mix 
of  exactly  the  server  you  need  with  exactly  the  server  you  want. 

Dell  Rated  #1  in  Intel-Based  Server  Satisiaction 

Technohgy  Business  Besearch 
Corporate  (T  Buying  Behavior  and  Cusomter  Satisfaction  Study 
2nd  Quarter  2002 
-August  2002 


Dell  I  Small  Business 

PowefCdge’SOOSC  Server 


•  msl*  ^Rtwn*  4  Piocenor  at  1  .BOGHt 

•  12eMB  200MH!  ECC  DOR  SOHAM 

•  UpgradaaWa  to  46B  o(  Manwy 

•  40G8' (7200  VMI KX  HM  Onw 

•  Upgradeable  to  4eOG8' of  Memal  Hard  Onw  Storage 

•  Eneedded  knar  PRO  Grgatnr  MC 

•  Fn*  PCI  EfVanlaliiHv  SloU  |4«4^33MKz.  1-32/33MHtl 

•  1-Yf  24(7  Oedcaiad  Server  Phone  lecbStnorr 

•  1-Yr  Next  Busness  Dor  0<-Siie  SerMce' 
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PoweiCdge' teoOSC  S«ver 


•  Intel*  Xeon'  Proeesur  at  1  BOGKt 

•  ttoai  Mer  Xeon*  Processor  Captode  Iw  to  2  BOGHii 

•  t28MB  2D0MH]  ECC  DOR  SDRAM  |i«  tt  4G8I 

•  laGB- IKK  RPMlUtoa320  SCSI  HvdDmo 

•  UPTadealde  to  43860- of  knamai  HM  Dm*  Storage 

•  EflOedded  mier  PRO  a^brf  MC 

•  SotPO  StoB  t2-6V100MHt.  2-64/S6MHI.  2-32/33MHi| 

•  I -Yr  24(7  OadcaiBd  Server  nionototri  Support 

•  1-Yr  Men  Busnets  0^1  On-SdeSemce' 

•  Small  Busness  Pmng 
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at  tom  3$  SB/mo .  146  pntt  1 
60  Devs  Same-AvCadk 

riiUlgOstellM  BUM 


•  CE  RAID  Hart  Drtve  ControDec.  4dd  S299 

•  Srstom  Including  Wndows*  2000  Server,  only  $1349 


•  Hot-Surap  Hart  Onve  CapabMy.  add  SMO 

•  PowatConnKi  2124*  2441  Eihamei  SwKh.  add  S299 


PoviwEdge' 2650  Sanmr 


•  OiM  Mer  Xeon*  Protetsof  Capable  (up  to  2e0GH{) 

•  2S6MB  200MM  ECC  DOR  SDRAM  |i«  to  6G8I 

•  1866*  (lOK  HPM  Uln320  SCSI  Hwt  Dmie 

•  Upgndeable  to  36560  of  Mmal  Hart  Dme  Surage 

•  Dual  EntNdded  G«abrr  NiCs 

•  OMlOiannal  Meipaiad  UtoaiSO  SCSI  Controller 

•  AeiM  O  Front  Baal  tor  Monimnng  Syslem  Heerti 

•  3-Yr  Nest  Butneas  Day  On-SIM  Service' 
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PownMge*  2*10  Rack  CabinM 


MaageaeM  Solutions  io  a  Coneact  Entotwww 

•  Eaey  M»mgaabt«y  vHto  OpMnal  Read  Reds  Ueunong  ato 
tort-free  Cable  Manmansni  SohRm 

•  Onenaunt  Hei^  -  40.  YVidto*  24*.  00081-40* 

•  Mu.  load  of  1 200  Pcwtoi  Altova  tor  large  Stooge  Caacny 

•  Budi-ln  Lookrtde  and  VmtoM  Prom/Rear  Doors  to  Help 
OptsnoB  Seoaily  and  A«(law 

•  Opugnal  UPS.  PDU  and  Concrte  SwrictMt 

jSOOO  4*towK$2l/mo.M6pmB*| 

60  Dus  San»-AsCa8) 


•  OuaFChannel  Efltoedded  RAID,  add  S2S9 

•  Hot-Swap  Radwtoem  ftiwer  StnUy.  add  12 


Servers  for  any  size  business.  Easy  as 


D^LL 


Click  www.dell.com/computerworld  Call  1-877-399-3355 
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Viruses 

°^Smarter 


Today,  the  line 
between  wonns  and 
viruses  is  blurred  as  suc¬ 
cessful  designs  take  on 
characteristics  of  both  and 
spread  over  the  Internet. 

DAN  INDEVALDSON.  TEAM  LEADER  INTERNET 
SECI^ITV  SYSTEMS  INC  S  X  FORCE  GROUP 


Continued /rom  pa^fc  21 

"Worms  that  are  targeting  known 
vulnerabilities  arc  continuing  to  climb." 
sa)'s  Vincent  Weafer.  senior  director  of 
the  Symantec  Security  Response  group 
at  Cupertino,  Calif.-based  Symantec 
Corp.  “That’s  significant  because 
you're  moving  away  somewhat  from 
social  engineering." 

The  most  significant  weakness  ex¬ 
ploited  last  year  was  the  so-called  mal¬ 
formed  MIME  vulnerabilit)'.  originally 
discovered  in  2001.  Although  a  patch 
has  been  available  for  more  than  a 
year,  viruses  and  worms  have  been 
able  to  capitalize  on  this  vulnerability 
on  unpatched  machines  to  automati¬ 
cally  execute  a  virus  program  when  a 
user  views  an  e-mail  in  preview  mode. 

Brid.  Bugbear.  Nimda  and  Klez  all 
use  this  vulnerability,  says  Weafer. 

"Today,  the  line  between  worms  and 
viruses  is  blurred  as  successful  designs 
take  on  characteristics  of  both  and 
spread  over  the  Internet."  says  Dan  In- 
gevaldson,  team  leader  of  Internet  Se¬ 
curity  Systems  Inc.'s  X-Force  group. 
"The  most  successful  worms  act  like  a 
Swiss  Army  Knife,  because  they  can 
spread  by  using  many  different  proven 
methods,  such  as  mass  e-mail.  Web 
serx’er  vulnerabilities  or  peer-to-peer 
technologies." 

Virus  Evolution 

In  the  near  future,  companies  will  need 
to  be  prepared  to  deal  with  increasing¬ 
ly  stealthy  viruses  carrying  more  de¬ 
structive  payloads,  say  researchers.  In 
a  recent  research  paper,  Stxtart  Stani- 
ford.  CEO  of  Silicon  Defense  in  Eureka, 
Calif.,  outlined  the  emerging  "threat  of 
surreptitious  worms  that  spread  more 
slowly  but  in  a  much  harder  to  detect 
’contagion'  fashion." 

"We  demonstrate  that  such  a  worm 
today  could  arguably  subvert  upwards 
of  10  (million]  Internet  hosts."  Stani- 
ford  concludes. 

Anti-Virus  Emergency  Response 
Team  (AVERT)  researchers  at  McAfee 
Security,  a  division  of  Network  Associ¬ 
ates  Inc.,  say  they  encountered  a  vims 
that  took  advantage  of  the  New  Tech¬ 
nology  File  System  (NTFS)  Alternate 
Data  Streams  (ADS)  feature,  which  al¬ 


lows  data  to  be  stored  in  hidden  files 
that  arc  linked  to  visible  NTFS  files  — 
and  can't  be  removed  without  deleting 
ihe  NTFS  file  itself. 

Users  who  don’t  have  permission  to 
write  to  a  file  can't  add  an  ADS  to  it. 
And  although  Windows  File  Protec¬ 
tion.  introduced  in  Windows  2000. 
prevents  hackers  from  replacing  pro¬ 
tected  system  files,  it  doesn't  prevent 
an  authorized  user  from  adding  ADSs. 
along  with  hidden,  executable  code,  to 
those  system  files. 

ADS's  primary  purpose  is  to  enable 
compatibility'  with  the  Macintosh  file 
system.  But  in  September  2000.  McAfee 
discovered  a  virus  named  Win2K.- 
Stream  that  attempted  to  conceal  itself 
in  an  ADS.  This  works  because  most 
antivirus  products  don't  scan  the  ADS. 
says  Vincent  GuUotto.  vice  president  of 
AVERT.  McAfee  has  added  ihb  capa¬ 
bility.  But  so  far.  Gullotto  has  seen  no 
other  instances  of  this  technique. 

The  intentions  of  virus  and  worm 
writers  are  also  changing.  In  the  past, 
most  worms  and  viruses  destroyed 
data.  Now.  however,  there  are  indica¬ 
tions  that  the  masters  of  malicious 
code  are  looking  to  steal  that  data. 

"We’ll  see  a  progression  toward  tar¬ 
geting  data."  says  Gullotto.  "We  saw 
that  this  past  year  with  Stream,  which 
randomly  took  documents  out  of  the 
MyDocuroents  folder.” 


Virus  Trends 
To  Watch 
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Symantec's  Weafer  agrees.  "Payloads 
have  moved  from  data  destruction  to 
dropping  Trojans  and  compromising 
machines,  as  well  as  sending  informa¬ 
tion  from  the  machine  out  of  the  net¬ 
work."  he  says.  "You  have  to  update 
your  security  patches." 

Chris  Wraight,  a  technology  consul¬ 
tant  at  Sophos.  says  ’’combined  cocktail 
threats"  will  be  much  harder  for  users 
to  eradicate.  Such  a  worm  "might  drop 
a  Trojan,  another  virus,  or  it  might  rep¬ 
licate  on  another  occasion."  he  says.  So 
just  because  you’ve  uncovered  one  in¬ 
stance  of  the  malicious  code,  it  doesn’t 
mean  you've  discovered  all  infections. 

And  while  the  vast  majority  of 
worms  and  viruses  are  written  to  tar¬ 
get  known  vulnerabilities  in  Windows 
platforms,  some  researchers  are  warn¬ 
ing  Linux  and  Unix  users  to  beware. 
The  September  outbreak  of  the  Linux 
Slapper  worm,  for  example,  infected 
more  than  20,000  machines  and  could 
be  used  for  denial-of-service  attacks, 
says  Weafer.  “We’re  mixing  Linux  and 
Windows  systems  in  the  corporate 
world  all  the  time."  he  says.  “People 
who  have  Linux  and  Unix  systems  as¬ 
sumed  they  were  immune.  W’e  know 
that's  not  true." 

Microsoft  Corp.’s  .Net  Framework 
may  also  become  a  major  target  for 
some  virus  and  worm  authors.  "Alco- 
paul."  a  member  of  the  group  Brigade 
Ocho.  recently  submitted  his  creation 
(o  antivirus  research  labs  for  evalua- 
rioiL  Although  Alcopaul  says  his  worm, 
topeace.exe.  doesn't  destroy  data,  be 
claims  that  it  is  capable  of  turning  off 
antivirus  software,  disabling  firewalls, 
spreading  to  the  Kazaa  file-trading 
program  and  mailing  itself  to  e-mail 
addresses  it  harvests  from  the  Tempo¬ 
rary  Internet  Files  folder  via  the  Sim¬ 
ple  Mail  Transfer  Protocol. 

Antivirus  vendors  are  still  studying 
Alcopaul's  worm  to  determine  what 
specific  vulnerabilities  it  exploits. 
However,  past  .Net  worms  have  infect¬ 
ed  .Net  executable  files. 

Although  only  users  runnii^  Win¬ 
dows  XP  with  Service  Pack  1  have  the 
.Net  Framework  installed,  Alcopaul’s  vi¬ 
sion  is  on  the  future.  And  that's  the  rub 
for  his  targets  —  trying  to  find  the  right 
balance  between  acting  on  current 
threats  and  thinkir^  about  future  ones. 

For  now.  the  best  protection  is  to 
stick  with  the  basics,  says  Weafer.  "Pay 
attention  to  security  updates  and  lock 
down  unnecessary  services."  I 
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‘'Worms  that  are  targetiiig  known 
vulnerabilities  are  continuing  to  climb,’' 
says  Vincent  Weafer,  senior  director  of 
the  Symantec  Security  Response  group 
at  Cupertino,  Calif-based  Symantec 
CorpL  That's  significant  because 
you're  moving  away  somewhat  from 
social  en^neering.” 

The  most  significant  weakness  ex¬ 
ploited  last  year  was  the  so^alled  mal¬ 
formed  MIME  vulnerability,  originally 
discovered  in  2001.  Althou^  a  patch 
has  been  available  for  more  than  a 
year,  viruses  and  worms  have  been 
able  to  capitalize  on  this  vulnerability 
on  unpatched  machines  to  automati¬ 
cally  execute  a  virus  program  when  a 
user  views  an  e-mail  in  preview  mode. 

Brid.  Bu^iear.  Nlmda  and  Klez  all 
use  this  vulnerability,  says  Weafer. 

Today,  the  line  between  worms  and 
viruses  is  blurred  as  successful  designs 
take  on  characteristics  of  both  and 
spread  over  the  Internet.*  says  Dan  In- 
gevaldson,  mam  leader  of  Internet  Se¬ 
curity  Systems  Inc.^  X-Fbrce  group. 
The  roost  successful  worms  act  like  a 
Swiss  Army  Knife,  because  they  can 
spread  by  using  many  different  proven 
methods,  such  as  mass  e-mail,  Web 
server  vulnerabilities  or  peer-to-peer 
technologies.* 

Vkus  Evolution 

In  the  near  future,  companies  will  need 
to  be  prepared  to  deal  witfa  increasing¬ 
ly  ste^tby  viruses  carrying  more  de¬ 
structive  pa^oads,  say  researchers.  In 
a  recent  research  paper.  Stuart  Stam¬ 
ford,  CEO  of  Silicon  Defense  in  Eureka, 
Calif,  outlined  the  emerging  ^threat  of 
surreptitious  worms  that  Sfuead  more 
slovdy  bin  m  a  much  harder  to  detect 
'cont^on'  fashion.* 

‘’We  demonstrate  that  such  a  worm 
today  could  argu^ty  subvert  upwards 
of  10  [million]  Internet  hosts,*  Stam¬ 
ford  concludes. 

Anti-Virus  Emergency  Response 
Team  (AVERT)  researchers  at  McAfee 
Security,  a  dhri^n  of  Network  Associ¬ 
ates  Inc.,  say  they  encountered  a  virus 
that  took  advantage  of  the  New  Tech¬ 
nology  File  System  (NTFS)  Alternate 
Data  Streams  (ADS)  feature,  which  al¬ 


lows  data  to  be  stored  in  hidden  files 
that  are  linked  to  visible  NTFS  files  — 
and  can't  be  removed  without  deleting 
the  NTFS  file  itself 

Users  vriko  don't  have  permission  to 
write  to  a  tile  can’t  add  an  ADS  to  it 
And  although  Windows  Rle  Protec¬ 
tion.  introduced  in  Windows  2000. 
prevents  hackers  from  replacing  pro¬ 
tected  system  tiles,  it  doesn't  prevent 
an  authorized  user  fforo  addi^  ADSs, 
along  with  hidden,  executable  code,  to 
those  system  tiles. 

ADS's  primary  purpose  is  to  enable 
compatibility  with  the  Madntosb  tile 
sy^em.  But  in  September  2000,  McAfee 
discovered  a  virus  named  Wln2K.- 
Stream  that  attempted  to  conceal  itself 
in  an  AOS.  This  works  because  most 
antivirus  products  don't  scan  the  AOS, 
says  Vincent  GuUotto,  vice  president  of 
AVERT.  McAfee  has  added  this  capa¬ 
bility.  But  so  Ear.  GuUotto  has  seen  no 
other  instances  of  this  technique. 

The  intentions  of  virus  and  worm 
writers  are  also  changing,  in  the  past, 
most  worms  and  viruses  destroyed 
data.  Now,  however,  there  are  indica- 
tioas  that  the  masters  of  malicious 
code  are  looking  to  steal  that  data. 

"We’U  see  a  progression  toward  tar¬ 
geting  data,*  says  Gullotta  "We  saw 
that  this  past  year  with  Sircam,  which 
randomly  took  documents  out  of  the 
MyE>ocuiDents  foldec” 
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Symantec’s  Weafer  agrees.  ‘Payloads 
have  moved  from  data  destruction  to 
dropping  'Doians  and  compromising 
inarKtn^,  as  weU  as  «»iiriing  informa- 
tiofl  from  the  machine  out  of  the  net¬ 
work,*  be  says.  Tou  have  to  update 
your  security  patches." 

Chris  Wrai^t.  a  tedmology  consuJ- 
taiu  at  Sophos,  says  "combined  cocktail 
threats"  wUl  be  ntucb  harder  for  users 
to  eradicate.  Sudi  a  worm  "migfat  drop 
a  Drojan.  another  virus,  or  it  mi^t  rep¬ 
licate  on  another  occaskm,"  be  says.  So 
just  because  you've  uncovered  one  in¬ 
stance  of  the  maUctous  code,  it  doesn’t 
mean  you’ve  discovered  aU  infections. 

And  while  the  vast  majority  of 
worms  and  viruses  are  written  to  tar¬ 
get  known  vulnerabiUties  in  Windows 
platforms,  some  researchers  are  warn¬ 
ing  Linux  and  Unix  users  to  beware. 
Hie  September  ouforeak  of  the  Linux 
Slapper  worm,  for  example,  infected 
more  than  20.000  machines  and  could 
be  used  for  denialKif-service  attacks, 
says  Weafer  "We’re  mixing  Linux  and 
Windows  systems  in  the  corporate 
world  all  the  time,*  be  says.  ‘Teople 
who  have  Linux  and  Unix  systems  as¬ 
sumed  they  were  immune.  We  know 
thtf 's  not  true." 

Microsoft  Corp.'s  .Net  Framework 
may  also  become  a  major  target  for 
some  virus  and  wcum  authors.  "Alco- 
pauL*  a  member  of  the  group  Brigado 
Odio,  recently  submitted  his  creation 
to  antivirus  research  labs  for  evalua¬ 
tion.  Altbou^  Akopaul  says  bis  worm. 
Wpeaceexe,  doesn't  destroy  data,  be 
claims  that  it  Is  capable  of  turning  off 
antivirus  software,  disabling  firewalls, 
spreading  to  the  Kazaa  tile-trading 
program  and  mailing  itself  to  e-mail 
addresses  It  harvests  from  the  Tempo¬ 
rary  Internet  Hies  folder  via  the  Sim¬ 
ple  Mail  Irimsfer  Protocol 

Antivmis  vendors  are  still  studying 
Akopaul's  worm  to  determine 
qiecitic  vulnerabilities  it  exploits. 
However,  past  .Net  worms  have  infect¬ 
ed  .Net  executable  files. 

Although  only  users  running  Win¬ 
dows  XT  with  Service  Pack  1  have  the 
Itet  Framework  installed.  Akopaul's  vi¬ 
sion  is  on  the  future.  And  tiiat’s  the  rub 
for  his  targets — trying  to  find  the  right 
balance  between  acting  on  current 
threats  and  thinking  about  future  ones. 

for  now.  the  best  protection  is  to 
stick  witfa  the  basics,  says  Weafer.  ‘Pay 
attention  to  security  up^tes  and  lock 
down  unnecessary  services.*  R 
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Software  agents  tame  supply 
chain  complexity  and  optimize 
performance.  By  Gary  H.  Anthes 


WHEN  IT  COMES  to  IT  projects,  ii 
doesn't  get  much  better  than  this: 
Procter  &  Gamble  Ca  saves  S300 
million  annually  on  an  investment  of 
less  than  1%  of  that  amount. 

Indeed.  P&G’s  use  of  agent-based 
modelix^  helped  it  transform  its  sup¬ 
ply  chain  system  so  hindaroentally 
that  the  company  no  longer  even 
calls  h  a  supply  chain.  Tte  Cincinnati- 
based  maker  of  Tide,  Crest.  Pringles, 
Pampers.  Clairol  and  300  other  prod¬ 
ucts  now  calls  its  connectioos  to  S  bil¬ 


lion  consumers  in  140  countries  a  “sup¬ 
ply  netMfork.- 

“Chain  connotes  something  that  is 
sequential,  that  requires  handing  oif 
information  in  sequence,"  says  Larry 
Kellam.  P&G's  director  of  supply  net¬ 
work  innovation.  “We  believe  it  has 
to  operate  like  a  network,  like  an  inter¬ 
net.  so  everybody  has  visibility  to  the 
information." 

Many  of  the  insights  that  have  en¬ 
abled  P&G  to  transform  a  chain  into  a 
network  come  fram  agent-based  com¬ 


puter  models  it  developed  with  Bios- 
Group  Inc.  in  Santa  Fe.  N.M.  Their 
work  is  a  real-world  example  of  what 
mathematicians  call  “agent-based 
modeling  of  complex,  adaptive  sys- 
tems,“  a  discipline  pioneered  by  Bios- 
Group  and  other  mostly  Santa  Fe- 
area  companies,  laboratories  and 
think  tanks. 

The  idea  is  that  many  systems  that 
are  enormously  complex  overall  are  in 
fact  made  up  of  semiautonomous  local 
“agents"  acting  on  a  few  simple  rules. 
By  modeling  and  changing  the  agents' 
behavior,  one  can  understand  and  opti¬ 
mize  the  entire  system  (see  FA(2). 

Agent-based  modeling,  while  not  yet 
comroonpbee.  is  catching  on.  especial¬ 
ly  at  companies  with  large,  complex 
supply  or  transportation  networks.  In 
addition  to  P&G.  the  following  compa¬ 
nies  have  tried  it  and  cite  benefits  that 
include  cost  savings,  reduced  invento¬ 
ries  and  better  customer  service; 

■  Southwest  Airlines  used  soft¬ 
ware  agents  to  optimize  cargo  routing. 

■  Air  Liquide  America  LP.  a  Hous¬ 
ton-based  producer  of  liquefied  indus¬ 
trial  gases,  reduced  both  produetton 
and  distribution  costs  with  agent- 
based  modeling. 

■  Merck  &  Co.  used  agents  to  help  it 
fmd  more  efficient  ways  to  distribute 
anti-HIV  drugs  in  Zimbabwe. 

■  Ford  Motor  Co.  used  agents  to  sim¬ 
ulate  buyer  preferences,  suggesting 
packages  of  car  options  that  optimized 
the  trade-of&  between  production 
costs  and  customer  demands. 

■  Edison  Chouest  Of&hore  LLC  an 
offshore  service  company  in  Galliano, 
La.,  used  ^nts  to  oprimize  its  deploy¬ 
ment  of  service  and  supply  vessels  in 
the  Gulf  of  Mexico. 


P&G’s  Agent-Enabled  Supply  Network  in  2008 


In  P8(G's  computer  simulations, 
software  agents  represent  the  individ¬ 
ual  components  of  the  supply  system, 
such  as  trucks,  drivers,  stores  and  so 
on.  The  behavior  of  each  agent  is  pro¬ 
grammed  via  rules  that  mimic  actual 
behavior,  such  as.  “Dispatch  this  truck 
only  when  it  is  full"  or  “Make  more 
shampoo  when  inventory  falls  to  x 
days’  demand." 

The  simulations  let  P&G  perform 
what-if  analyses  to  test  the  imfiact  of 
new  logistics  rules  on  three  key  met¬ 
rics:  inventory  levels,  transportation 
costs  and  in-store  stock-outs.  The  mod¬ 
els  considered  alternate  rules  on  order¬ 
ing  and  shipping  frequencies,  distribu¬ 
tion  center  product  allocation  policies, 
demand  forecasting  and  so  on. 

“Some  of  the  conclusions  were  sur¬ 
prising.  and  some  confirmed  what  we 
believed  but  didn't  have  the  data  to 
support,"  Kellam  says. 

For  example,  be  says,  the  models 
showed  that  it  would  often  be  advanta¬ 
geous  to  send  out  trucks  with  less  than 
full  loads,  something  P&G  almost  nev¬ 
er  did  before.  Although  transportation 
costs  would  be  higher  as  a  result,  P&G 
could  more  than  make  that  up  by  re¬ 
ducing  the  frequency  of  in-store  stock¬ 
outs,  which  often  result  in  lost  sales. 

“Agent-based  modeling  convinced  us 
of  some  changes  we  fundamentally 
had  to  tnaltg  if  we  were  to  be  flexible 
and  adaptable."  Kellam  says,  expbining 
that  changes  fell  into  the  following 
three  broad  areas: 

■  Relaxation  of  rigid  rules,  often 
counterintuitively,  in  order  to  improve 
the  overall  performance  of  the  supply 
network.  That  required  some  cultural 
changes,  such  as  convincing  freight 
managers  that  it's  sometimes  OK  to  let 
a  nudt  go  half  full. 

■  More  flexibility  in  manufacturing. 
As  a  result  of  insists  gained  by  the 


ftr  2006.  PftOwl  haw  ilwftnd  Hit  wd- 


(ran  far  aionllK  to  OM  day.  Hare’s  how: 


www.computerworMcofn 


TCCmOlOIIY 


cmiiniwu  jMwg.iw*  W 


Agent-based  modeingof 
complex,  adaptivesytEdbns 


models.  P&G  is  “fundamentally  re- 
tooling”  its  manufacturing  processes 
so  that  it  no  longer  produces  long  runs 
of  a  single  product  but  instead  b  able 
to  produce  every  product  every  day. 

Tlte  benefits  include  fewer  stock-outs 
and  happier  customers. 

■  More  flexibility  in  dbtribution.  For 
example,  it's  possible  to  restock  a  re¬ 
tailer  in  24  hours  rather  than  the  cus¬ 
tomary  48  to  72  hours. 

P6cG  uses  supply  chain  management 
software  from  SAP  AG.  but  it  turned  to 
a  tiny  New  Mexico  company  when  its 
long  efforts  to  decrease  inventory  lev- 

ek  produced  only  marginal  _ 

improvements.  “We  went  to 
BiosGroup  because  they 
■hinkveryd^erendyfh.™ 
thewayweda-KeUamm-  con»tas»9ere 
plains.  “But  most  of  the  sup-  0  t-i,  35914 
ply  chain  experts  we  went 
to  thoi^t  very  similarly  to 
the  way  we  do.” 


ALOW  AHEAD 


Computer  modeling  of  supply  chain 
operations,  like  that  done  by  Bios¬ 
Group  and  P&G.  today  requires  a  com¬ 
bination  of  custom  software  develop¬ 
ment  and  consulting.  But  that  could 
change  as  a  result  of  a  development 
agreement  that  P&G  fostered  between 
SAP  and  BiosGroup. 

SAP  has  already  demonstrated  a  pro¬ 
totype  agent  capability  in  its  replenish¬ 
ment  software.  Agents  predict  the 
prx^bility  of  stock-outs  —  based  on 
current  inventory,  scheduled  receipts 
aiul  expected  demand  —  and  when 
that  probability  exceeds  a  certain 
threshold,  a  replenishment  signal  b 
triggered,  accordmg  to  Christian  KrroU, 
vice  president  of  global  supply  chain 
man^ement  at  SAP. 

SAP  may  introduce  the  prototype 
techrmlogy  in  its  products.  KhoU  says, 
but  for  rtow  it's  beipirtg  a  few  key  cus¬ 
tomers  try  it  out  on  a  proiect  basb. 


Navi  Rad|u.  an  analyst  at  Forrester 
Research  Inc.,  says  the  supply  network 
that  P&G  operates  b  lust  the  sort  of 
enviroiunent  that  lends  itself  readily  to 
agent-based  modeling. 

“It  b  exposed  to  a  hi^  degree  of 
variability,  involves  multiple  partners 
aiKl  requires  a  high  degree  of  coordi¬ 
nation  and  collaboration.”  be  says. 
“When  the  whole  process  b  not  owned 
by  a  company,  you  need  a  bonom-up 
approach  to  controUmg.  maruging  and 
optimizing  the  integrated  process.” 

Rad|u  predicts  that  such  bonom-up. 
agent-based  optimization  will  increase 

_  in  popularity  —  slowly. 

“P&G  b  a  very  forward- 
lotdcing  company,  one  will¬ 
ing  to  try  new  technology 
and  learn  from  it,”  he  says. 
“But  the  mainstream  compa¬ 
nies  say.  'Let's  tKX  invest  in 
uitproven  technologies.’  ” 


But  Radju  says  big  software  compa¬ 
nies  —  especially  SAP  and  IBM  —  over 
the  next  two  years  will  roll  out  agent- 
based  supply  chain  optimization  pack- 
^es.  Then,  be  says,  the  technology 
will  shed  its  image  as  the  intellectual 
domain  of  PhD.  mathematicians. 

Meanwhile.  P&G  says  that  by  200B. 
software  agents  will  enable  another 
leap  forward  in  supply  netwmk  man¬ 
agement.  While  agents  have  so  far 
been  used  just  for  modeling,  they  will 
increastn^y  be  deployed  in  P&G's  op- 
er^ional  software,  Kellam  says  (see 
diagram  below). 

“What  was  once  considered  arcane 
and  academic  you  are  now  beginning 
to  see  in  real  btisiness  q?pllcations." 
says  George  Danner,  president  of  In¬ 
dustrial  Science  UjC.  a  modeling  con¬ 
sultancy  in  Houston.  ”Wh4t  we  need  b 
brave,  progressive,  scienrificaily  mind¬ 
ed  CEOs  to  say,  *1  want  to  understand 
the  physics  of  my  business.'  ”  I 
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Software  agents  tame  supply  j 
chain  complexity  and  optimize 
performance.  By  Gary  H.Anthes  I 


WHfS  1 1  1  to  IT  projects,  it 
doesn't  yet  much  better  than  this: 
Procter  &  Gamble  Co.  saves  S30i) 
million  annually  on  an  investment  of 
less  than  P’u  of  that  amount. 

Indeed.  P&G's  use  of  ayent-based 
m«Hleliny  helped  it  transform  its  sup* 
ply  chain  s>’stem  so  fundamentally 
that  the  company  no  longer  even 
calls  it  a  supply  chain.  The  Cincinnati- 
based  maker  of  Tide.  Cresf.  Pringles. 
Pampers,  Clairol  and  300  other  prod¬ 
ucts  now  calls  its  connections  to  5  bil- 


consumers  in  14U  countries  a  sup¬ 
ply  network." 

"C/ioin  connotes  something  that  is 
sequential,  that  requires  handing  off 
information  in  sequence."  says  Larry 
Kellam,  P&G's  directr>r  of  supply  net¬ 
work  innovation.  "We  believe  it  has 
to  operate  like  a  network,  like  an  inter¬ 
net.  so  ever>’body  ha.s  visibility  to  the 
information." 

Many  of  the  insights  that  have  en¬ 
abled  P&G  to  transform  a  chain  into  a 
network  eome  from  aeent-hased  eom 


puter  minJels  it  develitped  w  ilh  Bios-  In  I’i^G's  computer  simulations. 

Group  Inc.  in  Santa  Fe.  N.M.  Their  software  agents  represent  the  individ- 

work  is  a  real-world  example  of  what  ual  components  of  the  supply  system, 

mathematicians  call  "agent-based  such  as  trucks,  drivers,  stores  and  so 

modeling  of  complex,  adaptive  sys-  on.  The  behavior  of  each  agent  is  pro- 
tems."  a  discipline  pioneered  by  Bios-  grammed  via  rules  that  mimic  actual 
Group  and  other  mostly  Santa  F'e-  behavior,  such  as,  “Dispatch  this  truck 

area  companies,  laboratories  .and  only  when  it  is  full"  or  "Make  more 

think  tanks.  shampoo  when  inventory  falls  to  x 

The  idea  is  that  many  systems  th.it  days'  demand." 
are  enormously  complex  overall  are  in  |  The  simulations  let  P&G  perform 
fact  made  up  of  semiaul<*nomt»us  local  what-if  analyses  to  test  the  impact  of 

"agents"  acting  on  a  few  simple  rules.  new  logistics  rules  on  three  key  met- 
By  modeling  and  changing  the  agents'  rics:  inventor^’  levels,  transportation 
behavior,  one  can  understand  and  opti-  costs  and  in-store  sttH:k-outs.  The  mini- 
mi7.e  the  entire  system  (see  FAQ).  els  considered  alternate  rules  on  ordor- 

Agenl-based  modeling,  while  not  yet  ing  and  shipping  frequencies,  distribu- 
commimplaee.  is  catching  on.  especial-  tion  center  product  allocation  policies, 
ly  at  companies  with  large,  complex  demand  forecasting  and  so  on. 
supply  or  transportation  networks.  In  "Some  of  the  conclusions  were  sur- 
addition  to  P&G.  the  following  compa-  prising,  and  st>me  confirmed  what  we 
nies  have  tried  it  and  cite  benefits  that  believed  but  didn't  have  the  data  t«» 
include  cost  savings,  reduced  invento-  support.”  Kellam  says, 
rics  and  better  customer  service:  For  example,  he  says,  the  models 

•  Southwest  Airlines  Co.  used  soft-  showed  that  it  would  tiften  be  advania- 
ware  agents  to  optimize  cargo  routing.  geous  to  send  out  trucks  with  loss  than 

•  Air  Liquide  America  LP.  a  Flous-  full  loads,  something  P&G  almost  nev- 

lon-based  producer  of  liquefied  indus-  cr  did  before.  Although  transportation 
trial  gases,  reduced  both  production  costs  would  be  higher  as  a  result,  P&G 

and  distribution  costs  with  agent-  could  more  than  make  that  up  by  re- 

based  modeling.  ducing  the  frequency  of  in-store  siock- 

■  Merck  &  Co.  used  agents  to  help  it  outs,  which  often  result  in  lost  .sales, 

find  more  efficient  ways  to  distribute  “Agent-ba-sed  modeling  convinced  us 
anti-HlV  drugs  in  Zimbabwe.  of  some  changes  we  fundamentally 

■  Ft>rd  Motor  Co.  used  agents  to  sim-  had  to  make  if  we  were  to  be  flexible 

ulate  buyer  preferences,  suggesting  and  adaptable.”  Kellam  says,  explaining 
packages  of  car  options  that  optimized  thai  changes  fell  into  the  following 
the  trade-offs  between  pn>duction  three  broad  areas: 

a>sts  and  customer  demands.  ■  Relaxation  of  rigid  rules,  often 

■  Fldison  Chouest  Offshore  LLC.  an  counterintuitively,  in  order  to  improve 

olTshoa*  service  company  in  (ialliano.  the  overall  performance  of  the  supply 
La.,  u-sed  agents  to  optimize  its  deploy-  network.  That  required  some  cultural 
ment  of  service  and  supply  vessels  in  changes,  such  as  convincing  freight 
the  Gulf  of  Mexico.  '  managers  that  it's  sometimes  OK  to  let 


P&G’s  Agent-Enabled  Supply  Network  in  2008 


I  a  truck  go  half  full. 

I  ■  More  flexibility  in  manufacturing. 
I  As  a  result  of  insights  gained  by  the 


By  2008.  PAO  w«H  have  shortened  the  end- 
to-end  raplenishntent  cycle  for  a  boa  of  Tide 
from  four  months  to  one  day.  Here'show; 
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with  qidcfc  twnaroind  capaUWes 


OSoftwvt  aganls  of  a  key 
euppjafdatactabomfnfl 
huTTkana  that  Oiraatant  a  nuflD 
Rieo  opantten.  Thay  aiart  NO'S 
sofhaara  agents  and  «Mrii«rllh 
thamtoowtaanaksmalivadaiv- 
ery  adisdult  so  POO'S  hRmni  giant 
doasnt  face  a  malartil  sbort^ 


OlhaMkfnifadttty.Hiaavary 
no  plant,  bids  via  softwars 
agents  for  Ns  nsatt  prodaetion  run 
based  on  Ml  capabtty  to  iMvar 
itsctaTantiab,ilsgiioiMdwDr1ior- 
den  and  Ml  JwtHn-tbna  matarlab 
supply  capiMMy.  Hs  kwr-coat  bid 
topraducaTldiivtos. 
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I  Agent-based  modeling  of 
I  complex,  adaptive  systems 


What  w  "cofflplu  systtm*" 
in  this  contsit?  These  are  non- 
computer  systOTis.  such  as  a  compa¬ 
ny's  supply  chain.  A  system  is  ‘com¬ 
plex'  when  it  has  so  many  variables 
and  interacting  forces  that  it  can't  be 
understood  in  its  entirety  or  optimized 
by  traditional,  top-down  approaches. 

How  can  you  tame  thb 
cofflpltiity?  Although  these  sys¬ 
tems  are  complex  overall,  they  use  a 
few  simple  rules  al  local  levels.  For  ex¬ 
ample.  in  a  supply  t^ain  syst^.  a  rule 
in  a  warehouse  might  be.  ‘Rll  orders 
on  a  first-in.  first-out  basis.*  or  "Don't 
send  dris  truck  out  on  delivery  until  It 
IS  yr  Dozens  or  hundreds  of  these 
local  ‘agents’  -  tnick  dispatchers,  say 
-  acting  autonomously  produce  com¬ 
plex  b^tavior  by  the  system  as  a 
whole,  it's  possible  to  simulate  this 
complex  behavior  by  programming 
sofhrare  agents  with  a  few  rules 
and  letting  them  interact  with  one 
another.  8y  optimizing  the  agents' 
activities  at  a  local  level,  it's  possible 
to  Improve  the  performance  of  the 
system  as  a  whole. 

Why  arc  tbaca  cystams  calM 
‘‘adapthra."  and  why  are  they 
somatiiMS  Khenad  to  ant 
colanias?  Ants  individuaDy  have  ex¬ 
tremely  primitive  brains,  yet  collective- 


OtMlMnatireblowoulthreat- 
mtetotayaiMpmaiilef 
TUa.  PM*t  vMto  dWad  R  «d 
praquaVy  aa  dianMdw  tractor. 
whepfctoiwRia  pretort  ind  to 
Ivara  R  to  Wrt^tort  Nrt  la  tbm. 


ly  they  run  si^prisingly  sophisticaled 
and  efticient  operations.  With  r>o  cen¬ 
tra)  direction,  they  divide  responsibili¬ 
ties  among  themselves,  find  food. 
buHd  and  maintain  their  nests,  tend 
to  their  young  and  respond  to  attacks. 
And  the  colonies  adapt:  if  you  block 
access  to  a  source  of  food,  ants  vdll 
find  an  alternate  route  to  the  food. 
Complex  adaptive  systems  do  the 
same.  For  example,  it  Plant  A  can't 
satisfy  a  customer  order  because  it's 
temporarily  out  of  a  raw  material. 

Plant  8  may  fill  the  order.  Plant  B  may 
do  this  'automatically.*  based  on  sim¬ 
ple  local  mles  without  direction  from  a 
central  authority. 

What  ia  meant  by  “emarging 

bahavtor*?  Uke  ants,  individual 
agents  can  modify  their  rules  to  adapt 
to  changing  ciraimstances.  and  this 
can  alter  the  global  behavior  of  the 
systOT.  often  in  unpredictable  ways. 
Sometimes  sm^l.  local  changes  can 
have  big  sys'em  impacts,  just  as  a  tiny 
disturbance  in  the  atmosphere  over 
Africa  can  lead  to  a  hurricane  days  lat¬ 
er  in  the  GuH  of  Mexico.  Agent-based 
modeling  can  help  us  understand  and 
predict  these  emerging  behaviors  and 
help  us  des^  new  rules  for  the  local 
agents  that  will  improve  the  perfor¬ 
mance  of  the  system  as  a  whole 

‘GaryKAnthes 
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models.  I*&(i  is“fundanu“nially  ro- 
tooliny"  its  manufaciurin^  processes 
so  that  it  no  longer  produces  King  runs 
of  a  sint^lc  product  but  instead  is  able 
to  produce  ever>’  pr»hluct  every  da\. 
The  benefits  include  fewer  stiKk-outs 
and  happier  customers. 

■  More  flexibility  in  distribution.  For 
example,  it's  possible  to  resuvek  a  re¬ 
tailer  in  24  hours  rather  than  the  cus¬ 
tomary  48  to  72  hours. 

PC^Ci  use's  supply  chain  management 
fail'tware  freim  SAP  AG.  but  it  turned  to 
a  tiny  New  Mexico  company  when  its 
long  efforts  to  decrease  inventory  lev¬ 
els  produced  only  marginal  _ 

improvements.  “We  went  to 
Biosliroup  because  they 
think  very  differently  from 
the  way  we  di>."  Kellam  ex¬ 
plains.  "But  mtist  of  the  sup¬ 
ply  chain  expens  we  went 
to  thought  very  similarly  to 
the  w’ay  we  do." 

Computer  modeling  of  supply  chain 
operations,  like  that  done  by  Bios- 
Group  and  PixG.  tinlay  requires  a  com¬ 
bination  of  custom  s*iflware  develop¬ 
ment  and  consulting.  But  that  could 
change  as  a  result  of  a  development 
agreement  that  P&G  fostered  K-twi-en 
SAP  and  BkwiGroup. 

SAP  has  already  demonstrated  a  pro¬ 
totype  agent  capability  in  its  replenish¬ 
ment  Miftware.  Agents  predict  the 
probability  of  stock-iHits  —  based 
current  inventory,  scheduk-d  receipts 
and  c.vpected  demand  —  and  when 
that  probability  exceeds  a  certain 
thri*shold.  a  replenishment  signal  is 
triggered,  according  to  Christian  Knoll, 
vice  president  of  global  supply  ch.ain 
management  at  SAP. 

SAP  may  inin*duce  the  prototype 
tcchnoU>gy  in  its  prt>ducts.  Knoll  says, 
but  for  now  it's  helping  a  few  key  cus¬ 
tomers  try  it  out  on  a  project  basis. 


Navi  Radju.  an  analyst  at  Forrester 
Research  Inc.,  says  the  supply  network 
that  PM»  operates  is  just  the  sort  of 
environment  that  lends  itself  readily  to 
ageni-ba.sed  m<*dcling. 

"it  is  exposed  to  a  high  degree  of 
variability,  involves  multiple  partners 
.ind  requires  a  high  degree  of  ctxirdi- 
naiion  and  collaboration."  he  says. 
"When  the  whole  process  is  not  imned 
by  a  company,  you  need  a  bottom-up 
appnvach  to  controlling,  managing  .md 
optimizing  the  integrated  prinress." 

Radju  predicts  that  such  bi>ttom-up. 
agent-hasi-d  optimization  w  ill  irurrease 

_  in  populariry  —  slowly. 

"P&G  is  a  \ery  f<*rward- 
liH^king  c»»mpany.  one  will¬ 
ing  to  try  new  levhnol»»g\ 
and  learn  from  it."  he  says. 
But  the  mainstream  compa- 


A  LOOK  AHEAD 

An  expert  looks  ai  ti*e  twore 
ol  agenl-baseo  modeling  of 
complex  wslems 
OQuickLirti356M 
WNw.co(nputerwor1d.coni  nies  say,  '[.et's  not  invest  in 
'  unpnnen  technologies.'  “ 

I  But  Radju  s;iys  big  software  compa¬ 
nies  —  especially  SAP  and  IBM  —  over 
the  next  two  years  will  roll  <*ut  agent- 
bo-sc'd  supply  chain  optimization  pack¬ 
ages.  Then,  he  say?qtbe  technology- 
will  shed  its  image  os  the  inteikvtual 
domain  of  Ph-D.  mathematicians. 

Meanwiiile.  Pi\G  says  that  by  20tW. 
software  agents  will  enable  another 
leap  forward  in  supply  network  man¬ 
agement.  While  agents  have  so  far 
been  used  just  for  minleUng.  they  will 
iiuTeasingly  be  deployed  in  PMJ's  op¬ 
erational  sjiftware.  Kellam  says  tscc 
diagram  bv-low  ). 

“UTiai  v^•as  once  considered  arcane 
and  academic  you  arc  now  beginning 
to  see  in  real  business  applications." 
sav-s  George  Danner,  pix-sident  of  In¬ 
dustrial  Ik'ience  LLC.  a  modeling  con¬ 
sultancy'  in  Houston.  "What  wc  need  is 
brave,  progressive,  scik-niiricnlly  mind¬ 
ed  CF;Os  to  say.  '1  w-ant  to  undt-rsiand 
the  physics  of  my  business.'  *'  • 
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Intelligent 

Storage 

Object-based  storage  carries  the  promise  of  smart 
arrays  that  manage  their  own  data.  By  Lucas  Mearian 


IMAGINE  A  STORAGE  DEVICE  that  USeS 
its  own  horsepower  to  manage  data,  re¬ 
quires  no  manuaJ  settings  for  security  and 
doesn’t  care  if  the  client  server  speaks 
in  blocks  or  files.  That’s  the  promise  of 
object-based  storage. 

Object-based  storage  technologies 
shield  the  application  or  operating  system 

from  the  low-level  details  of  managing  file  _ 

storage.  In  one  method,  intelligence  is  added  p||. 
to  the  storage  device  in  order  to  offload  low-  | 

level  storage  management  tasks  traditionally  WA 
handled  by  the  operating  s)’stem.  such  as 

mapping  files  to  actual  storage  blocks  on  the  - 

disk  drive  and  managing  file  attributes  and  other 
associated  metadata. 

Although  widespread  use  of  object-based  storage 
is  still  some  years  away,  the  technology  could  result 
in  storage  systems  that  are  more  scal^le.  reliable, 
secure  and  manageable. 


OSO  System 
Architectiire 
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The  no  Tcchnkal  Committee,  which  is  part  of 
the  Washington-based  InterNational  Committee  for 
Information  Technology  Standards  and  the  Moun¬ 
tain  View.  Calif.-based  Storage  Networiting  Industry 
Association  (SNIA).  is  working  on  a  specification  for 
object-based  storage,  called  Object-Based  Sior^e 
Devices  (OSD).  OSD  turns  files,  directories  and 
storage-related  elements  into  objects  that  storage 

_  management  software  accesses  using  an 

HP  extended  SC5I-3  command  set. 

“But  SC^l  is  just  one  component  of  what 
we’re  doing,”  says  Michael  Mesnier.  a  stor- 
age  architect  at  Intel  Corp.  and  co-chair- 
man  of  the  SNIA  OSD  Technical  Work 
Group.  “We’re  also  looking  at  a  more  general-pur¬ 
pose  definition  of  object-based  storage  which  is 
irrespective  of  the  transport,  which  means  you  can 
run  it  over  SCSI,  you  could  run  it  over  Fibre  Chan¬ 
nel .. .  over  TCP/IP  or  whatever.  To  me.  that's  a 
much  stronger  impact.” 


I  By  putting  some  of  the  intelligence  for  accessing  ob- 
I  jects  into  the  storage  array  instead  of  the  application 
'  server,  networks  could  be  infinitely  scalable  because 
servers  would  no  longer  have  to  eat  up  bandwidth 
searching  for  and  accessing  files  or  blocks  of  data. 

“Just  like  you  could  plug  a  different  hard  drive  into 
your  PC,  you  could  add  another  server  to  a  storage 
system  in  the  same  way,”  says  Scott  A.  Brandt, 
an  assistant  professor  at  the  Storage  Systems  Re¬ 
search  Center  at  the  University  of  California,  Santa 
Cruz  (UCSC). 

UCSC’s  lack  Baskin  School  of  Engineering  is  de¬ 
signing  a  high-performance  storage  network,  based 
on  commodity  hardware,  that  can  store  up  to  2  peta¬ 
bytes  of  data  based  on  the  proposed  OSD  model. 

“While  you’re  still  dealing  with  blocks,  they’re  hid¬ 
den  from  the  file  system,”  Brandt  says.  “As  you  add 
more  storage,  you’re  adding  more  smarts.  What  might 
have  been  prohibitive  details  added  to  a  large  system 
are  now  details  handled  by  the  storage  device  itself.” 

Moving  the  object  metadata  and  attributes  out  of 
the  file  system  also  eliminates  the  file  server  as  a 
scalability  bottleneck,  Brandt  says. 

Effidency  Gains 

OSD  makes  for  a  much  more  efficient  I/O  configura¬ 
tion.  says  Marie  Bradley,  a  technology  strategist  in 
Computer  Associates  International  loc.'s  BrightStor 
unit.  “You're  no  longer  having  to  pass  all  these  low- 
level  read/write  blocks  back  and  forth  between  a  file 
system  and  a  device,”  he  says. 

For  example,  Bradley  says,  a  file  system  could  say. 

“  'I  need  foo.bar,'  and  foo.bar  comes.  Therefore,  your 
communications  over  the  interface,  whether  it’s  a 
network  interface  or  not.  becomes  much  less  compli¬ 
cated  and  takes  up  less  bandwidth,  and  in  turn  cre¬ 
ates  far  fewer  errors." 

In  AprU.  EMC  Corpx  introduced  what  it  calls  con¬ 
tent-addressed  storage,  based  on  a  new  storage  serv¬ 
er  called  Centera.  Experts  believe  Centera  is  one  of 
the  first  true  object-based  storage  arrays. 

Centera  is  an  array  that  also  handles  all  storage 
management  issues  by  assigning  each  stored  file  a 
unique  file  object  identifier  that  it  passes  back  to  (he 
application.  The  application  then  requests  that  identi¬ 
fier  to  obtain  the  file,  and  the  appliance  takes  care  of 
the  details  of  where  and  how  the  file  is  actually  stored. 

Mesnier  emphasizes  that  the  proposed  standard  is 
not  a  completely  new  model  "It’s  just  taking  [Net¬ 
work  File  System],  in  a  sense,  and  applying  it  to  what 
used  to  be  considered  dumb  p>eripheral  devices,"  he 
explains.  "Imagine  a  world  where  two  different  file 
systems  agree  on  data,  then  go  directly  to  the  same 
storage  device  and  share  the  same  data.” 

He  says  that  the  biggest  benefits  of  object -based 
storage  will  come  in  the  form  of  increased,  more 
granular  security  and  data-sharing  capability. 

"If  1  look  at  a  block-based  device  today,  an  individ¬ 
ual  block  cannot  be  protected.”  Mesnier  says.  “Once 
you  get  access  to  the  entire  device,  you  can  read  or 
write  to  any  block  you  want  to.  You  could  format 

the  device  if  you  want-  i - ~~~~ — - - 

ed  to.  With  object-  aUSTaUBTRE 

based  storage,  you  can  6oon(i«loralookalaLinu.-baaed 

ascribe  a  security  do-  cluster  Me  system  based  on  objects 

main  to  each  and 
every  object."  I 
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Intelligent 

Storage 

Object-based  storage  carries  the  promise  of  smart 
arrays  that  manage  their  own  data.  By  Lucas  Mearian 


IMAGINE  A  STORAGE  DEVICE  that  USeS 

its  own  horsepower  to  manage  data,  re¬ 
quires  no  manual  settings  for  security  and 
doesn't  care  if  the  client  server  speaks 
in  blocks  or  files.  That’s  the  promise  of 
object-based  storage. 

Object-based  storage  technologies 
shield  the  application  or  op«atmg  system 

from  the  low-level  details  of  managing  file  _ 

storage.  In  one  method.  Intelligence  is  added 
to  the  storage  device  in  order  to  offload  low- 
level  storage  management  tasks  traditionally 
handled  by  the  operating  system,  such  as 

mapping  files  to  actual  storage  blocks  on  the  - 

disk  drive  and  managing  file  attributes  and  other 
associated  metadata. 

Althou^  widespread  use  of  object-based  storage 
is  still  some  years  away,  the  technology  could  result 
in  storage  systems  that  are  more  scalable,  reliable, 
secure  and  man^eable. 


FUmE 

WATCH& 


The  TIO  Technical  Committee,  which  is  part  of 
the  Washington-based  InterNational  Committee  for 
Information  Technology  Standards  and  the  Moun¬ 
tain  View,  Calif-based  Storage  Networking  Industry 
Association  (SNIA),  is  working  on  a  specification  for 
object-based  storage,  called  Object-Based  Storage 
Devices  (OSD).  OSD  turns  files,  directories  and 
storage-related  elements  into  objects  that  stora^ 

_  management  software  accesses  using  an 

extended  SCSI-3  command  set 
“But  SCSI  is  just  one  component  of  what 
we're  doing,”  says  Michael  Mesnier,  a  stor¬ 
age  architect  at  Intel  Corp.  and  co-chair- 
man  of  the  SNIA  OSD  Technical  Work 
Group.  “We’re  also  looking  at  a  more  general-pur¬ 
pose  definition  of  object-based  storage  which  is 
irrespective  of  the  transport,  which  means  you  can 
run  it  over  SCSI,  you  could  run  it  over  Fibre  Chan¬ 
nel .. .  over  TCP/IP  or  whatever.  To  me,  that's  a 
much  stronger  impact” 


By  putting  some  of  the  intelligence  for  accessing  ob¬ 
jects  into  the  storage  anay  instead  of  the  application 
server,  networks  could  be  infinitely  scalable  because 
servers  would  no  longer  have  to  eat  up  bandwidth 
searching  for  and  accessing  files  or  blocks  of  data 

“Just  like  you  could  plug  a  different  bard  drive  into 
your  PC,  you  could  add  another  server  to  a  storage 
system  in  the  same  way.”  says  Scott  A.  Brandt 
an  assistant  professor  at  the  Storage  Systems  Re¬ 
search  Onter  at  the  University  of  California  Sanu 
Cruz  (UCSC). 

UCSC’s  Jack  Baskin  School  of  Engineering  is  de¬ 
signing  a  h^-perfoimance  storage  network,  based 
on  commodity  hardware,  that  can  store  up  to  2  peta¬ 
bytes  of  data  based  on  the  proposed  OSD  model 

“While  you're  still  dealing  with  blocks,  they’re  hid¬ 
den  from  the  file  system.”  Brandt  says.  “As  you  add 
more  storage,  you're  adding  more  smarts.  What  might 
have  been  prohibitive  details  added  to  a  large  system 
are  now  details  handled  by  the  storage  device  itself” 

Moving  the  object  metadata  and  attributes  out  of 
the  file  system  also  eliminates  the  fUe  server  as  a 
scalability  bottleneck,  Brandt  says. 

Eflidency  Gains 

OSD  makes  for  a  much  more  efficient  I/O  configura¬ 
tion.  says  Mark  Bradley,  a  technology  strategbt  in 
Computer  Associates  International  lnc.’s  BrigbtStor 
unit.  “You’re  no  longer  having  to  pass  all  these  low- 
level  read/write  blocks  back  and  forth  between  a  file 
system  and  a  device,”  he  says. 

For  example,  Bradley  says,  a  file  system  could  say, 

“  *I  need  foabar,'  and  fbabar  comes.  Therefore,  your 
communications  over  the  inter&ce,  whether  it’s  a 
network  interface  or  not.  becomes  much  less  compli¬ 
cated  and  takes  up  less  bandwidth,  and  in  turn  cre¬ 
ates  far  fewer  errors.”' 

In  April  EMC  Corp.  introduced  what  it  calls  con¬ 
tent-addressed  storage,  based  on  a  new  storage  serv¬ 
er  called  Centera.  Experts  believe  (2entera  is  one  of 
the  first  true  object-based  storage  arrays. 

Centera  is  an  array  that  also  handles  all  storage 
management  issues  by  assigning  each  stored  file  a 
unique  file  object  identiffer  that  it  passes  back  to  the 
application.  The  application  then  requests  that  identi¬ 
fier  ro  obtain  the  ^  and  the  appliance  takes  care  of 
the  details  of  where  and  bow  the  file  is  actually  stored. 

Mesnier  emphasizes  chat  the  proposed  standard  is 
not  a  completely  new  model.  “!t's  just  taking  [Net¬ 
work  FUe  System],  in  a  sense,  and  applying  it  to  what 
used  to  be  considered  dumb  periphetal  devices,”  be 
explains.  “Im^ine  a  world  where  two  different  file 
systems  agree  on  data,  then  go  directly  to  the  same 
storage  device  and  share  the  same  data.” 

He  says  that  the  biggest  benefits  of  object-based 
storage  will  come  in  the  form  of  increas^  more 
granular  security  and  data-sharing  capability. 

“If  Mook  at  a  block-based  device  today,  an  individ¬ 
ual  block  cannot  be  protected.”  Mesnier  says.  “Once 
you  get  access  to  the  entire  device,  you  can  read  or 
write  to  any  block  you  want  to.  You  could  format 
the  device  if  you  want¬ 
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Security  Problems  Put 
Survey  App  on  Sidelines 


Design  flaws  leave  a  Web-based 
survey  appfication  open  to  com¬ 
promise.  By  Mathias  Thurman 


Much  op  my  normal 
routine  has  been  put 
on  hold  while  I  at¬ 
tend  to  a  legal  matter 
that  requires  generating  mir¬ 
ror  images  of  about  30  em¬ 
ployees'  l^top  hard  drives.  In 
response  to  a  request  from  a 
federal  agency,  we're  using 
Pasadeita.  Calit-based  Gtiid- 
ance  Software  Inc’s  EnCase 
Forensic  Edition  to 
obtain  those  images. 

It  takes  about  five 
hours  to  create  each 
compressed  40GB 
drive  image.  Fortu¬ 
nately,  the  imaging 
process  can  run  unat¬ 
tended.  That  has  given  me 
enough  time  to  squeeze  in  a 
security  review  of  a  new  Web 
survey  application  —  a  proc¬ 
ess  that  revealed  several  un¬ 
pleasant  surprises. 

First,  however,  I  had  to  get 
the  disk  images  going.  EnCase 
creates  a  boot  floppy  disk  that 
write-protects  the  h^  drive, 
then  it  lets  you  manually  or 
automatically  detect  the  desti¬ 
nation  stOTage  device.  I  used 
the  network  port  to  connect  to 
my  forensics  workstation  via 
an  Etbemet  crossover  cable 
and  began  acquiring  the  image 
for  storage  on  a  DVD-ROM. 

Sumy  Insecurities 

Our  legal  counsel  requested  a 
security  assessment  for  a  new 
Web-based  customer  survey 
tool  Members  of  the  deploy¬ 
ment  team  questioned  why  we 
needed  to  assess  a  survey  tool 
at  all  "It’s  not  like  we're  col¬ 
lecting  credit  card  data,  per¬ 
sonal  information  or  storing 
source  code.”  oite  staffer  said. 

He  bad  a  point  The  appli¬ 
cation  is  being  used  so  that 


our  customers  can  complete 
surveys  to  assist  us  in  provid¬ 
ing  a  better  experience  for 
them.  It  doesn’t  collect  any 
personal  or  financial  data.  But 
we  might  ask  our  customers 
to  evaluate  our  performance 
and  to  specify  defknencies  in 
the  way  we  do  business.  We 
don't  want  such  information 
falling  into  the  hands  of  our 
competitors.  Be¬ 
cause  of  this  issue, 
our  general  counsel 
determined  that  the 
data  should  be  con¬ 
sidered  confidential. 

Not  only  are  we 
worried  about  the 
compromise  of  the  survey  re¬ 
sults.  but  this  application  will 
also  have  a  Web  server  resid¬ 
ing  on  the  Internet-facing  d^ 
militarized  zone  (DMZ)  seg¬ 
ment  of  the  network.  The  ap¬ 
plication  itself  uses  a  three- 
tier  architecture  consisting  of 
a  front-end  server,  a  mid¬ 
tier  application  server  and  a 
back-end  SQL  database  server. 

If  hackers  were  to  compro¬ 
mise  any  of  the  infrastructures, 
they  could  access  other  infor¬ 
mation  such  as  server  configu- 


Even  on  a  switched 
netweefc,  ifs  stl  possi- 
Ue  to  capture  traffic 
and  coniproniise  even 
encrypted  protocols 
such  as  Secure  Shel 
and  HTTPS. 


rations,  user  identifications 
and  passwords,  vriiich  can  usu¬ 
ally  be  cracked  They  could 
also  install  packet-sniffing 
software  to  capture  traffic  and 
use  it  to  gain  access  to  other 
areas  of  our  infrastructure. 

For  example,  if  a  hacker  ran 
a  sniffer  on  a  compromised 
Web  server  and  the  server  ad¬ 
ministrator  accessed  another 
resource  on  the  same  network, 
the  hacker  might  be  able  to 
obtain  the  administrator’s  log¬ 
on  credentials.  Even  on  a 
switched  netwoik.  it’s  still 
possible  to  capture  traffic  and 
compromise  even  encrypted 
protocols  such  as  Secure  Shell 
and  HTTPS.  If  you  don’t  be¬ 
lieve  this  (and  I  didn’t  at  first), 
read  the  Ettercap  program 
specifleations  at  htlpy/ 
ettercapsourc^orgejnet/. 

Exploiting  Defictencies 

Assessing  the  security  of  the 
application  is  always  more  of  a 
challenge  than  assessing  the 
server  and  operating  system 
on  which  the  application  is  in¬ 
stalled.  The  latter  typically  in¬ 
volves  checking  for  open  ports 
and  vulnerable  services.  But 
an  assessment  should  attempt 
to  exploit  deficiencies  in  the 
way  an  application  was  writ¬ 
ten  or  configured.  1  used  sev¬ 
eral  methods  to  try  to  gain  ac¬ 
cess,  includii^  two  common 
exploits:  SQL  iniection  and  di¬ 
rectory  traversal 

SQL  injection  attacks  occur 
when,  for  example,  the  appli¬ 
cation  doesn’t  t^idate  the  data 
entered  into  fonns.  If  a  hacker 
enters  SQL  statements  into  a 
Web^iased  form  and  the  ap¬ 
plication  passes  the  inputted 
data  to  the  database  server,  it's 
possible  for  the  database  Serv¬ 
er  to  actually  execute  the  SQL 
statements  it  receives.  If  the 
database  contains  credit  card 
numbers  or  other  financial 
data,  a  properly  crafted  SQL 
query  can  retrieve  it. 


Directory  traversal  also 
woiks  as  a  result  of  insuffi¬ 
cient  data  validatioa  It’s  pos¬ 
sible  to  issue  commands  from 
the  address  line  of  a  Web 
browser  that  will  let  a  hacker 
view  any  flie  on  a  Web  server 
by  traversing  outside  the  nor¬ 
mal  directory  of  the  applica* 
tioa  For  example,  it  mi^t 
look  tike  this:  hxtp-y/www. 
w^iserver.com/~/.y.y~/~Mc/ 
shadow. 

In  an  unprotected  machine, 
a  hacker  could  use  this  Web 
address  to  view  the  shadow 
file,  which  contains  the  en¬ 
crypted  password  for  user  ac¬ 
counts  on  most  Unix  systems. 
From  there,  it’s  a  simple  mat¬ 
ter  of  copying  the  dau  into  a 
text  file  and  running  a  (tass- 
word-cracking  tool  against  h. 
These  vulnerabilities  are  nor¬ 
mally  easy  to  mitigate,  but  dis¬ 
covering  them  can  be  difficult. 
I  use  Sanctum  Inc.'s  AppScan 
for  this  purpose  (see  box). 

I  found  the  results  of  my 
application  assessment  quite 
alarming.  There  were  several 
directory  traversal  and  SQL 
injection  vulnerabilities.  In 
addition,  the  application 
stored  account  information  in 
clear  text  All  these  vulnera¬ 
bilities  will  have  to  be  mitigat¬ 
ed  before  I  give  the  applica¬ 
tion  a  clean  bill  of  health. 

Next.  I  plan  to  review  ail  of 
our  public-focing  Web-based 
applications  and  review  ad¬ 
ministrative  access  to  our  criti¬ 
cal  DMZ  servers,  which  appear 
to  have  serious  deflciencies.  I 
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Catch  the 
Wireless  Wave 


JANUARY,  our  month  of  resolutions,  is  almost 
over.  The  saturated  fats  and  simple  carbs  are 
creeping  back  into  our  diets,  while  the  frequency 
of  trips  to  the  gym  is  trending  downward.  A  half¬ 
day  search  for  my  notes  for  this  column  suggests 
to  me  that  my  resolve  to  get  organized  is  falling  a 
bit  short  of  the  mark.  As  a  metaphor  for  the  economic 


climate,  this  season  of  dis> 
appointment  is  a  little  too 
close  for  comfort  In  it.  only 
the  tough  and  the  focused 
keep  their  heads  up  high 
enough  to  see  over  the  wall 
of  the  bunker  most  of  us 
have  hunkered  down  inta 

And  what  those  resilient 
optimists  in  corporate  IT 
are  looking  for  is  opportu¬ 
nity  —  choices  they  can 
make  even  in  bard  times  to 
improve  the  way  their 
companies  do  business. 

The  dangers  of  the  marketplace  and 
the  need  to  use  resources  wisely  are 
clear.  But  being  timid  is  not  necessari¬ 
ly  prudent  The  bells,  whistles  and 
gee-whiz  technologies  have  been  put 
in  mothballs  in  most  corporate  IT  de¬ 
partments,  but  that  decision  can  come 
at  a  price.  Some  very  slick  technolo¬ 
gies  that  seemed  like  extras  a  short 
time  ago  will  soon  be  essential  to  the 
way  companies  work. 

One  of  those  is  wireless  networking. 
Many  of  us.  especially  in  the  U.S..  have 
been  carping  about  the  slow  adoption 
of  wireless  for  so  long  that  we’ve 
failed  to  recognize  the  wireless  wave 
breaking  over  corporate  IT.  My  Com- 
puterworld  colleague  Mark  Hall  pre¬ 
dicted  in  a  Dec.  16  column  [QuickLink 
34561]  that  by  2012,  every  new  digital 
device  in  the  enterprise  will  be  wire¬ 
lessly  connected.  Absolutely  ri^t,  but 
awfully  conservative. 


'’Wireless  is  a  reality  in 
the  enterprise,  in  Europe  at 
least  —  and  it's  coming  to 
be  so  in  the  States.”  Amir 
Lehr  told  me  last  week. 
Lehr  is  vice  president  of  ' 
PowerDsinc,  an  Israeli 
company  that  he  says  is 
riding  the  wave  of  wireless 
adoption  with  its  Power 
Over  Ethernet  technology. 

if  your  existing  infn- 
structure  is,  well  not  quite 
up  to  date  and  you've  been 
listening  to  tte  unfulfilled  predictions 
about  wireless  for  several  years,  you 
mi^t  think  that  itll  be  a  while  b^re 
your  company  considers  the  move. 
Maybe  so,  but  your  competitors  might 
not  wait  for  you. 

There  are  two  main  forces  at  work 
moving  corporate  IT  toward  wireless. 
The  first  is  the  pull  of  the  technology 
itself.  The  802.Ub  standard  is  chugging 
toward  maturity,  while  its  siblings  — 
a.  g  and  the  coming  high-performance 
802.153,  to  name  a  few  —  represent 
the  first  of  many  more  protocols  that 
will  eventually  provide  the  glue  to 
bind  wireless  networks  together. 

The  other  force  is  the  push  from  end 
users  vriio  have  gotten  to  check¬ 
ing  their  AOL  and  Hotmail  accounts 
from  the  comer  cofree  shop.  Wireless 
is  no  longer  a  novelty  to  them;  it's  a 
promise  of  freedom,  connectivity  and 
uninterrupted  productmty.  And  don't 
forget  that  the  next  generation  of  IT 


professionals  will  have  spent  their  col¬ 
lege  careers  thinking  that  access  to  a 
wireless  LAN  1$  as  normal  as  access  to 
the  library. 

OK,  there's  still  a  way  to  go.  Clearly, 
if  the  uses  of  the  technology  are  going 
to  get  more  sophisticated  than  con¬ 
necting  tradesmen  to  inventory,  sched¬ 
uling  and  dispatching  systems,  more 
progress  must  be  made  on  tbe  interop¬ 
erability  front  But  as  painful  and  halt¬ 
ing  as  that  progress  may  be,  tbe  strug¬ 
gle  is  familiar  —  we  saw  ii  with  other 
significant  technologies  as  they  ma¬ 
tured  and  gained  acceptance.  And  tbe 
payoff  for  both  users  and  vendors  is 
sufficient  to  ensure  that  standards  will 
prevail 

Questions  about  security,  worrisome 
in  relation  to  any  technology  used  in  a 
corporation,  are  somehow  harder  to 
put  to  rest  about  wireless. 

lA^reless  security  is  very  much  like 
security  in  tbe  wired  world  —  tbe 
right  technology  is  important,  but  pol¬ 
icy  and  practice  are  more  sa  Tbe  keys 
are  rigorous  authentication  of  users 
and  devices  by  the  host  system,  and 
improved  encryption  to  protect  data 
wl^  H’s  in  transit  Tbe  802.11  Wired 
Equivalent  Privacy  standard  has 
proved  to  be  woefully  inadequate,  but 
tbe  coming  802Jli  protocol  uiU  in¬ 
clude  the  govemmem-^iproved  Ad¬ 
vanced  Encryption  Standard.  Security 
will  alwrays  be  a  race,  but  tbe  good 
guys  will  soon  have  tbe  tools  to  keep 
ahead  of  tbe  hackers  and  crackers. 

So  as  you  turn  tbe  Groundhog  Da>' 
comer  toward  spring,  take  a  peek  over 
tbe  bunker  wall  and  think  about  the 
future  of  your  company's  IT  infra¬ 
structure.  The  wireless  wave  is  com¬ 
ing  —  now’s  the  time  to  catch  it.  I 
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Security  Problems  Put 
Survey  App  on  Sidelines 


Design  flaws  leave  a  Web-based 
survey  application  open  to  com¬ 
promise.  By  Mathias  Tliurman 


Much  of  mv  normal 
routine  has  been  put 
on  hold  while  I  at¬ 
tend  to  a  legal  matter 
that  requires  generating  mir¬ 
ror  images  of  about  30  em- 
pJo>'ees'  laptop  hard  drives.  In 
response  to  a  request  from  a 
federal  agency,  we're  using 
Pasadena.  Calif. -based  Guid¬ 
ance  Software  lnc.'s  EnCase 
Forensic  Edition  to 
obtain  those  images. 

It  takes  about  five 
hours  to  create  each 
compressed  40GB 
drive  image.  Fortu¬ 
nately.  the  imaging 
process  can  run  unat¬ 
tended.  That  has  given  me 
enough  time  to  squeeze  in  a 
security  review  of  a  nevi'  Web 
survey  application  —  a  proc¬ 
ess  that  revealed  several  un¬ 
pleasant  surprises. 

First,  however.  I  had  to  get 
the  disk  images  going.  EnCasc 
creates  a  boot  floppy  disk  that 
write-protects  the  hard  drive, 
then  it  lets  you  manually  or 
automatically  detect  the  desti¬ 
nation  storage  device.  I  used 
the  network  port  to  connect  to 
my  forensics  workstation  via 
an  Ethernet  crossover  cable 
and  began  acquiring  the  image 
for  storage  on  a  DVD-ROM. 

Survey  Insecurities 

Our  legal  counsel  requested  a 
security  assessment  for  a  new 
Web-based  customer  survey 
tool.  Members  of  the  deploy¬ 
ment  team  questioned  why  wc 
needed  to  assess  a  survey  tool 
at  all.  “It's  not  like  we’re  col¬ 
lecting  credit  card  data,  per¬ 
sonal  information  or  storing 
source  code.'*  one  staffer  said. 

He  had  a  point.  The  appli¬ 
cation  is  being  used  so  that 


our  customers  can  complete 
.surveys  to  assist  us  in  provid¬ 
ing  a  better  experience  for 
them.  It  doesn't  collect  any 
persona]  or  financial  data.  But 
we  might  ask  our  customers 
to  evaluate  our  performance 
and  to  specify  deficiencies  in 
the  way  we  do  business.  We 
don’t  want  such  information 
falling  into  the  hands  of  out 
competitors.  Be¬ 
cause  of  this  issue, 
our  general  counsel 
determined  that  the 
data  should  be  con¬ 
sidered  confidential. 

Not  only  are  we 
worried  about  the 
compromise  of  the  survey  re¬ 
sults.  but  this  application  will 
also  have  a  Web  server  resid¬ 
ing  on  the  Internet-facing  de¬ 
militarized  zone  (DMZ)  seg¬ 
ment  of  the  network.  The  ap¬ 
plication  itself  uses  a  three- 
tier  architecture  consisting  of 
a  front-end  Web  server,  a  mid- 
tier  application  server  and  a 
back-end  SQL  database  server. 

If  hackers  were  to  compro¬ 
mise  any  of  the  infrastructures, 
they  could  access  other  infor¬ 
mation  such  as  server  conflgu- 


Even  on  a  switched 
network,  it’s  stil  possi¬ 
ble  to  capture  traffic 
and  compromise  even 
encrypted  protocob 
such  as  Secure  SheM 
and  HTTPS. 


rations,  user  identifications 
and  passwords,  which  can  usu¬ 
ally  be  cracked.  They  could 
also  iastali  packet-snifftog 
software  to  capture  traffic  and 
use  it  to  gain  access  to  other 
areas  of  our  infrastructure. 

For  example,  if  a  hacker  ran 
a  sniffer  on  a  compromised 
Web  server  and  the  server  ad¬ 
ministrator  accessed  another 
resource  on  the  same  network, 
the  hacker  might  be  able  to 
obtain  the  administrator's  log¬ 
on  credentials.  Even  on  a 
switched  network,  it's  still 
possible  to  capture  traffic  and 
compromise  even  encrypted 
protocols  such  as  Secure  Shell 
and  HTTPS.  If  you  don’t  be¬ 
lieve  this  (and  I  didn’t  at  first), 
read  the  Ettercap  program 
specifications  at  http-J/ 
pttercQp^ourceforge.net/- 

Exploiting  Deficienejes 

Assessing  the  security  of  the 
application  is  always  more  of  a 
challenge  than  assessing  the 
server  and  operating  system 
on  which  the  application  is  in¬ 
stalled.  The  latter  typically  in¬ 
volves  checking  for  open  ports 
and  vulnerable  services.  But 
an  assessment  should  attempt 
to  exploit  deficiencies  in  the 
way  an  application  was  writ¬ 
ten  or  configured.  I  used  sev¬ 
eral  methods  to  try  to  gain  ac¬ 
cess.  including  two  common 
exploits:  SQL  iniection  and  di¬ 
rectory  traversaL 

SQL  infection  attacks  occur 
when,  for  example,  the  appli¬ 
cation  doesn't  validate  the  data 
entered  into  forms.  If  a  hacker 
enters  SQL  statements  into  a 
Web-based  form  and  the  ap¬ 
plication  passes  the  inputted 
data  to  the  database  server,  it’s 
possible  for  the  database  serv¬ 
er  to  actually  execute  the  SQL 
statements  it  receives.  If  the 
database  contains  credit  card 
numbers  or  other  financial 
data,  a  properly  crafted  SQL 
query  can  retrieve  it. 


Directory  traversal  also 
works  as  a  result  of  insuffi¬ 
cient  data  validation.  It’s  pos¬ 
sible  to  issue  commands  from 
the  address  line  of  a  Web 
browser  that  will  let  a  hacker 
view  any  file  on  a  Web  server 
by  traversing  outside  the  nor¬ 
mal  directory  of  the  applica¬ 
tion.  For  example,  it  might 
look  like  this;  http-yAvww. 
webserver.com/'.y.y.y.y.yBtc/ 
shadow. 

In  an  unprotected  machine, 
a  hacker  could  use  this  Web 
address  to  view  the  shadow 
file,  which  contains  the  en¬ 
crypted  password  for  user  ac¬ 
counts  on  most  Unix  systems. 
From  there,  it’s  a  simple  mat¬ 
ter  of  copying  the  data  into  a 
text  file  and  runnii^  a  pass¬ 
word-cracking  tool  against  it. 
These  vulnerabilities  are  nor¬ 
mally  easy  to  mitigate,  but  dis¬ 
covering  them  can  be  difficult. 
I  use  Sanctum  Inc.’s  AppScan 
for  this  purpose  (see  box). 

I  found  the  results  of  my 
application  assessment  quite 
alarming.  There  were  several 
directory  traversal  and  SQL 
injection  vulnerabilities.  In 
addition,  the  application 
stored  account  information  in 
clear  text.  All  these  vulnera¬ 
bilities  will  have  to  be  mitigat¬ 
ed  before  I  give  the  applica¬ 
tion  a  clean  bill  of  health. 

Next.  I  plan  to  review  all  of 
our  public-facing  Web-based 
applications  and  review  ad¬ 
ministrative  access  to  our  criti¬ 
cal  DMZ  servers,  which  appear 
to  have  serious  deficiencies.  I 
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SCom  Enhances  ! 
Web  Caching  Tools  I 

3Com  Corp.  in  Sonta  dam.  CaHf.. 
has  announced  corrtant'schadui* 
ing  and  content -filtering  upgrades 
to  Its  SuparStack  3  Web  cacimg 
product  Sne.  The  controls  are  de¬ 
signed  for  targe  orpaniaatlons 
that  use  Wbb  browsers  and  need 
to  control  wide-area  netemrh 
bandwidth  use  and  restrict  the 
content  that  their  employees  can 
access.  3Coni  ofRctals  said. 

The  Webcache  KNX)  starts  at 
S4.999.  and  the  Wsbcache  3000 
starts  at  S7.999.  with  the  new 
version  avalable  now.  Existing 
customerscanobtaintheip- 
grades  by  purchasing  an  update 
or  support  contract 

New  Check  Point 
VPN/Firewall  Line 

Redwood  aty.  CaW.-based  Chock 
Point  Software  Technologies  Ltd. 
last  ereek  announced  a  new. 
combined  virtual  private  network 
(VPN)  Mid  firewni  management 
product  The  company's  latest 
VPN-l/Rrawat-VS  product  fam- 
Vy  buto  on  Hs  existing  Provfder-1 
and  SmartCenter  management 
suites  with  new  features  such  as 
secure  routing  betwean  dWarent 
virtual  IAN  sagmants,  sbnpMied 
network  provisioning  and  en¬ 
hanced  attack  prevention  capa- 
bHOas.  Mcbig  rangasfrom 
S24.000loS250.000. 

Procom  Updates 
NASFIers 

ftuconi  Technology  bic.  last 
week  announced  enhancements 
to  tha  management  interface  of 
its  Netforce  fMiiHy  of  network- 
attached  storage  (NAS)  filers. 

The  kvine.  CaM.-based  company 
added  an  oblect-hasad  admMs- 
tralien  Morlace  that  presents  in- 
formafion  to  users  in  a  hierarchi¬ 
cal  fatfdon.  Users  can  manage 
various  qrstam  obiacts  under  one 
view.inckidingvaluroes,parti- 
tions  and  directories.  The  up- 
grade  comes  with  Voraion  4JS  of 
Procem's  operating  system,  now 
shipping  with  al  Procom  fitors. 


Catch  the 
Wireless  Wave 


JANUARY,  our  month  of  resolutions,  is  almost 
over.  The  saturated  fats  and  simple  carbs  are 
creeping  back  into  our  diets,  while  the  frequency 
of  trips  to  the  gym  is  trending  downward.  A  half¬ 
day  search  for  my  notes  for  this  column  suggests 
to  me  that  my  resolve  to  get  organized  is  falling  a 
bit  short  of  the  mark.  As  a  metaphor  for  the  economic 


climate,  this  season  of  dis¬ 
appointment  is  a  little  too 
close  for  comfort.  In  it.  only 
the  tough  and  the  focused 
keep  their  heads  up  high 
enough  to  see  over  the  wall 
of  the  bunker  most  of  us 
have  hunkered  down  into. 

And  what  those  resilient 
optimists  in  corporate  IT 
are  looking  for  is  opportu¬ 
nity  —  choices  they  can 
make  even  in  hard  times  to 
improve  the  way  their 
companies  do  business. 

The  dangers  of  the  maricetplace  and 
the  need  to  use  resources  vrisely  are 
clear.  But  being  timid  is  not  necessari¬ 
ly  prudent.  The  bells,  whistles  and 
gee-whiz  technologies  have  been  put 
in  mothballs  in  roost  corporate  IT  de¬ 
partments,  but  that  decision  can  come 
at  a  price.  Some  very  slick  technolo¬ 
gies  that  seemed  like  extras  a  short 
time  ago  will  soon  be  essential  to  the 
way  companies  work. 

One  of  those  is  wireless  networking. 
Many  of  us.  especially  in  the  U.S.,  have 
been  carping  about  tht*  slow  adoption 
of  wireles.s  for  so  long  that  we've 
failed  to  recognize  the  wireless  wave 
breaking  over  corporate  IT.  My  Com- 
puterworld  colleague  Mark  Hall  pre¬ 
dicted  in  a  Dec.  16  column  IQuickLink 
34561]  that  by  2012.  every  new  digital 
device  in  the  enterprise  will  be  wire¬ 
lessly  connected.  Absolutely  right,  but 
awfully  conservative. 


-  “Wireless  is  a  reality  in 

the  enterprise,  in  Europe  at 
least  —  and  it's  coming  to 
be  so  in  the  States."  Amir 
Lehr  told  me  last  week. 
Lehr  is  vice  president  of 
PowerDsine.  an  Israeli 
company  that  be  says  is 
riding  the  wave  of  wireless 
adoption  with  its  Power 
Over  Ethernet  technology. 

If  your  existing  infra¬ 
structure  is.  weU.  not  quite 
up  to  date  and  you've  been 
listening  to  the  unfuifUled  predictions 
about  wireless  for  several  years,  you 
might  think  that  it'll  be  a  while  before 
your  company  considers  the  move. 
Maybe  so,  but  your  competitors  might 
not  wait  for  you. 

There  are  two  main  forces  at  work 
moving  corporate  IT  toward  wireless. 
The  first  is  the  pull  of  the  technology 
^  itself.  The  802.Ub  standard  is  chugging 
j  toward  maturity,  while  its  siblings — 

'  a.  g  and  the  coming  high-performance 
;  802.15.3,  lo  name  a  few  —  represent 
the  first  of  many  more  protocols  ihai 
'  will  eventually  provide  the  glue  to 
bind  wireless  networLs  together. 

TTie  other  force  us  the  push  from  end 
'  users  who  have  gotten  used  to  check¬ 
ing  their  AOL  and  Hotmail  accounts 
from  the  comer  coffee  shop.  Wireless 
is  no  longer  a  novelty  to  them;  it’s  a 
promise  of  freedom,  connectivity  and 
uninterrupted  productivity.  And  don't 
forget  that  the  next  generation  of  IT 


professionals  will  have  spent  their  col¬ 
lege  careers  thinking  that  access  to  a 
wireless  LAN  is  as  normal  as  access  to 
the  librarj’. 

OK.  there’s  still  a  way  to  go.  Clearly, 
if  the  uses  of  the  technolog>’  are  going 
to  get  more  sophisticated  than  con¬ 
necting  tradesmen  to  inventory,  sched¬ 
uling  and  dispatching  systems,  more 
progress  must  be  made  on  the  interop¬ 
erability  front.  But  as  p>ainfol  and  halt¬ 
ing  as  that  progress  may  be,  the  strug¬ 
gle  is  familiar  ~  we  saw  it  with  other 
significant  technologies  as  they  ma¬ 
tured  and  gained  acceptance.  And  the 
payoff  for  both  users  and  x’endors  is 
sufficient  to  ensure  that  standards  will 
prevail. 

Questions  about  security,  worrisome 
in  relation  to  any  technology  used  in  a 
corporation,  are  somehow  harder  to 
put  to  rest  about  wireless. 

Wireless  security  is  very  much  like 
securit)'  in  the  v^rired  vrarld  —  the 
right  technology  is  important,  but  pol¬ 
icy  and  practice  are  more  sa  The  keys 
arc  r^rous  authentication  of  users 
and  devices  by  the  host  system,  and 
improved  encryption  to  protect  data 
while  it’s  in  transit  The  802.U  Wired 
Equivalent  Privacy  standard  has 
proved  to  be  woefully  inadequate,  but 
the  coming  802.Ui  protocol  will  in¬ 
clude  the  government-approved  Ad¬ 
vanced  Encryption  Standard.  Security 
will  always  be  a  race,  but  the  good 
guys  will  soon  have  the  tools  to  keep 
ahead  of  the  hackers  and  crackers. 

So  as  you  turn  the  Groundhog  Day 
comer  to%vard  spnng.  take  a  p»eek  over 
the  bunker  wall  and  think  about  the 
future  of  your  company’s  IT  infra- 
structua*.  The  wireless  wave  is  com¬ 
ity  ~  now’s  the  time  to  catch  it  I 
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To  me,  success  is  a  35  minute  iunch. 


At  a  restaurant,  not  my  desk. 


Means  I'm  not  wasting  time  doing  the 


same  data  management  task  again  and 


again  and  a 

gain  and.. .well, youget  it 

Save  the  day.  \ 

Consolidate  your  work  by  consolidating  data  from  all  your  different  systems.  One  way  is  with  a  V2X  Shared  Virtual  Array"  subsystem 
and  SnapVantage"  software  to  unite  all  your  Linux  virtual  servers.  Or  an  LS500  automated  tape  library  and  T9940B  tape  drrve.There 
are  other  ways,  too.  We'll  help  find  the  or)e  that's  best.  So  storage  administration  takes  a  smaller  bite  out  of  your  day.  Learn  more 
about  this  story  and  other  ways  we  can  help  you  at  w¥rw.savethedayxom  STORACETEIC  Save  the  Day.- 


Big  RecniKers  on 
Campus?  Not  This  Year 

There’s  plenty  of  experienced 
talent  among  the  ra^  of  the 
unemployed.  Read  our  Campus 
Connection,  starting  on  page  36. 


Handnng  the  Hard  Case  Manage  Suppliers  for  Profect  Success 


Motivating  most  IT  people 
is  easy,  but  what  do  you  do 
with  Aose  who  just  don’t 

buy  in?  Page  39 


Research  shows  that  few  targe  IT  projects 
meet  their  full  objectives.  Columnist  Bart 
Perkins  offers  some  tips  on  bow  to  complete 
your  projects  within  budget  and  with  all  the 
features.  Page  40 
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user.  lopif  or  other  iJentitiers  to  rtnd  it. 

Such  aitonrion  to  e-mail  might  seem  excessive,  hut 
executive's  in  industries  across  thoK>ard  are  realiz- 
ini:  that  properly  storing  messages  has  beeome  seri¬ 
ous  business  a.s  courts,  government  officials  and 
industry  regulators  increasingly  order  expensive 
searches  and  issue  stiff  fines  for  lost  or  piiorly  stored 
e-mails. 

Consider  this:  Securities  regulators  recently  fined 
five  Wall  Street  firms  —  Goldman  Sachs  {k  Co..  Salo¬ 
mon  Smith  Barney  Inc..  Morgan  Stanley.  Deutsche 
Bank  Securities  Inc.  and  Piper  Jaffray  Inc.  —  a  total 
of  SK.25  million  for  not  keeping  certain  e-mails  lor 
the  required  period  of  time  (QuickLink  -M912I.  Regu¬ 
lators  said  the  five  firms  violated  securities  rules  by- 
failing  “to  preserve  for  iha'c  V'cars.  and  'or  to  pre¬ 
serve  in  an  accessible  place  for  two  years’’  such  of¬ 
fice  memoranda  as  c-mails  related  to  their  exchange, 
brtvkerage  or  dealer  businesses. 

Companies  must  folltw  legal  and  regulatory  re¬ 
quirements  that  dictate  what  records  to  keep  and  for 
how  long-  These  rules  generally  don't  speak  to  the 
media  on  which  those  records  originated;  instead, 
they  usually  apply  to  all  records,  whether  they're  pa¬ 
pers.  e-mails  or  electronic  attachments. 

Brokerages  often  have  the  tightest  regulations 
when  it  comes  to  archiving  records,  experts  say.  Kor 
example,  the  Securities  and  E-Xchange  Commission 
requires  that  they  keep  securities  transactions  for 
seven  years.  But  brokerages  aren’t  the  only  vines 
working  under  record-keeping  requirements. 
Lenders  must  keep  Home  Mortgage  Disclosure  Ap¬ 
plications  —  whether  on  paper  or  in  e-mail  —  for 
thrv'o  years.  Human  resources  departments  roust 
keep  perstmncl  records,  including 
e-mailed  applications  and  re¬ 
sponses  to  iob  ad-s.  for  one  year 
from  the  date  of  pcTsvinnel  action. 

“It's  a  technology  nightmare, 
and  it’s  going  to  get  worse  as  the 
yvars  go  on  and  the  e-mails  build 
up."  says  Mark  E.  Schreiber.  a 
partner  in  the  labor  and  employ¬ 
ment  department  at  Boston  law 
firm  l*a!mcr&  C>odge  LLP. 

Companies  that  don’t  keep  re¬ 
quired  divcumenis.  including 
e-mails,  could  face  more  than 


fines,  says  Mickey  C.  Andrie.  a  sales  manager  at  SJ 
Technologies.  Under  the  SEC  regulation  known  as 
17a-4.  financial  services  firms  could  be  hit  with  cen¬ 
sure  or  with  license  suspension  or  revivatton  as  well. 

Firms  that  fail  to  archive  e-mails  so  ihey  re  easily 
and  quickly  retrievable  also  face  the  high  cost  of  try¬ 
ing  to  recover  one  or  two  messages  demanded  by  a 
regulator  or  a  judge,  fur  example. 

Winston  Krone,  managing  director  in  the  San 
1-r.incisco  idficc  of -SafirRosetti.  a  security  consulting, 
invest ig.uu>n  and  intelligence  firm,  has  worked  on 
cases  where  he  had  to  sort  through  150GB  of  infor¬ 
mation  to  find  required  e-mails.  A  midsize  company 
with  a  couple  of  venues  could  spend  up  to  S500.000 
combing  through  corporate  e-mails  to  find  one  or 
two  messages,  he  says. 

Certainly,  companies  had  to  cope  with  records  re¬ 
tention  for  decades  prior  to  c-mail.  and  many  cm- 
phiycsi  compliance  officers  or  lawyers  to  oversee 
records  management.  Hut  e.xi-cutivcs  have  had 
less  experience  in  dealing  with 
archiving  e-mail,  experts  say.  and 
that  has  led  to  stnne  of  the  confu- 
sitin  on  the  issue  today. 

"E-mail  exploded  on  the  scene 
with  no  iradition-tl  solutions.” 
says  Dcbtirah  Baron,  director  of 
priHluct  marketing  at  Zantaz  Inc. 
in  Pleasanton.  Calif.  Zaniaz  pro¬ 
vides  digital  archiving  and 
records  management  tools  as 
well  as  electronic  disc*over>’ 
meet  the  regulatory,  audit  and  le¬ 
gal  compliance  needs  of  financial 
services  firms,  energv-  cvimpanies 
and  government  agencies. 

And  with  the  SEC  getting 
tough  on  e-mail  archiving  after 
finding  incriminating  c-mails 
during  recent  scandals  like  the 
one  that  took  diiwn  Enron  Corp..  companies  are  now- 
paying  closer  attention  to  the  topic. 

In  light  of  that,  experts  agree  that  technology’  per- 
stmnel  shouldn’t  be  the  only  ones  devising  e-mail 
storage  policy.  Companies  should  have  legal  counsel, 
regulatory  managers,  human  resource  executives  and 
IT  personnel  formulate  a  strategic  plan  for  storing, 
archiving  and  managing  the  data. 

They  should  start  by  defining  their  goals,  says  Lau¬ 
ra  Harrison,  project  manager  for  SI  Technologies' 
messaging  business  division.  SJ  has  partnered  with 
;  Mountain  View.  Calif.-based  Legato,  a  provider  «if  on- 
I  line  data  storage  management  and  data  access  prtvd- 
ucis.  and  with  Oracle  Corp..  to 
design  and  implement  enter¬ 
prisewide  content  management 
systems  as  well  as  customized 
storage  applications. 

Companies  must  decide 
whether  to  keep  all  e-mails  or 
only  specific  ones.  Mo.si  aampa- 
oies,  after  doing  a  risk  analysis, 
decide  to  keep  them  all.  even 
those  that  just  say  “Let’s  meet  for 
lunch,”  rather  than  risk  deleting  a 
crucial  c-mail  that  might  Liter  be 
required.  Harrison  says. 


Archive  This 

Various  federal  and  industry 
regulations  require  that  com- 
paniesslore  records  for  mini¬ 
mum  lengths  of  time: 

■  Securities  transactions 
and  related  records: 
Seven  years 

■  Mortgage  applications 
and  lending  documents: 
Three  years 

■  Personnel  records, 
including  e-mail  applica¬ 
tions:  One  year 
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Next.  IT  staffs  should  examine  the  number  of  em¬ 
ployees  and  the  volume  and  size  of  the  average 
e-mail,  e.xperts  say.  They  should  also  consider  what 
needs  to  be  kept  near-line  or  online,  how-  often  stored 
messages  will  be  accessed,  and  who  will  access  thum. 
In  general,  simply  adding  more  disk  capacity  to  exist¬ 
ing  backup  storage  systems  won’t  he  sufficient  to 
meet  legal  and  regulator)-  requirements,  says  Baron. 

The  Security  Angle 

Baron  advises  companies  to  also  consider  securiry 
when  devising  e-mail  storage  systems.  “E-mails 
stored  on  backup  tape  leave  rosim  for  tampering. 
Thai’s  why  real-time  archiving  is  critical  lo  meet  le¬ 
gal  and  regulatory  requirements.”  she  says. 

Consider  U.S.  Fw»d  and  Drug  Adminlsiration  regu¬ 
lation  21 CFR  Part  11.  which  establishes  the  criteria  un¬ 
der  w  hich  electronic  reairds  and  signatures  are  con¬ 
sidered  equivalent  to  paper  records  and  handw-ritten 
signatures.  It  requires  in  pan  that  access  to  electron¬ 
ic  records  be  restricted  to  only 
authorized  personnel  and  that 
companies  must  be  able  to  re¬ 
trieve  stored  data  for  the  same 
length  «»f  time  as  equivalent  paper 
records,  which  can  mean  up  to  10 
years  or  Linger. 

"When  companies  are  not  fully 
compliant  with  21  CFR  Part  11. 
the  FDA  makes  a  case-by-case 
evaluation  as  to  whether  or  not 
to  pursue  regulatory  actions. 
Noncompliance  might  lead  to 
regulatory  exposure,  costly  re¬ 
work  and  downtime,  compro¬ 
mised  product  quality,  and  even 
fines,  prison  sentences  and  sanc¬ 
tions."  according  to  the  Web  .site 
of  Princeton  Softcch  Inc.,  a 
Princeton.  N.)..  aimpany  fticused 
on  data  management  products  and  services. 

Experts  say  e-mail  storage  usually  involves  invest¬ 
ing  in  new-  hardware,  such  as  network-attached  stor¬ 
age  or  storage- area  networks:  software  to  manage  it: 
networking  equipment  such  as  routers,  switches  and 
firewalU;  and  a  database  administrator. 

A  company  would  pay  approximately  SIOO.OOO  for 
hardw-are  and  another  SIOO.OOO  for  software  for  a 
STB  protected  configuration,  according  to  estimates 
provided  by  EMC  Corp.  in  Hopkimon.  Mass. 

C4>mpanies  can  expect  a  total  e-mail  storage  sys¬ 
tem  to  cost  six  to  ei^t  limes  as  much  as  the  bause 
srorage  hardware  (for  example,  a  RAID  storage  sys¬ 
tem  or  optical  disks )  on  an  ongoing  basis,  Baron 
adds.  So  if  a  compan>'  spends  Sl.OOO  per  month  for 
storage  hardware,  it  shtiuld  budget  56,000  to  58.000 
per  month  to  manage  the  s>-5fcin. 

But  Christopher  Laping.  vice  president  and  CIO  at 
Denver-based  GMAC  Commercial  Holding  Capital 
Corp..  says  cosLs  are  often  secondary  to  meeting  the 
evolving  regulator)-  and  legal  requiremenrs  for 
e-mail  storage. 

As  SI  Technologies  President  and  CEO  Ian  Singer 
says.  “It’s  more  an  issue  of  compliance."  I 


Pratt  is  a /reelance  writer  in  Wa/t/tam.  Mass.  Contoct 
her  at  markmoryi^mindlsprifig.conj. 
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user,  topic  or  ot^r  identifiers  to  find  it. 

Such  ittentioa  to  e-mail  might  seem  excessive,  but 
executives  in  industries  across  the  board  are  realiz¬ 
ing  that  property  storing  messages  has  become  seri¬ 
ous  business  as  courts,  govemment  officials  and 
industry  regulators  increasingly  order  expensive 
searches  and  issue  stifif  Hnes  for  lost  or  poorly  stored 
e-mails.  I 

Consider  th»g  Securities  regulators  recently  fined 
five  Will  Street  firms  —  Goldman  Sachs  fit  Salo¬ 
mon  Smith  Barney  Inc..  Morgan  Stanley.  Deutsche 
Bank  Securities  Inc.  and  Piper  jaffray  Inc  —  a  total 
of  S8.25  million  for  not  keeping  certain  e-mails  for 
the  required  period  of  time  [QuickLink  34912].  Regu¬ 
lators  said  the  five  firms  violated  securities  rules  by 
failing  *10  preserve  for  three  years,  andAir  to  pre¬ 
serve  in  an  accessible  place  for  two  years"  such  of¬ 
fice  memoranda  as  e-maUs  related  to  their  exchange, 
brokerage  or  dealer  businesses. 

Companies  must  follow  legal  and  regulatory  re¬ 
quirements  that  dictate  what  records  to  keep  and  for 
bow  long.  These  rules  generally  dem't  speak  to  the 
media  on  wUch  those  records  originated:  instead, 
they  usually  apply  to  all  records,  whether  they're  pa¬ 
pers,  e-maiis  or  electronic  attachments. 

Brokerages  often  have  the  tightest  regulations 
when  it  comes  to  archiving  records,  experts  say.  For 
example,  the  Securities  and  Exchange  Commission 
requires  that  they  keep  securities  transactions  for 
seven  years.  But  brokerages  aren't  the  only  ones 
working  under  record-keeping  requirements. 
Leocfcrs  must  keep  Home  Mortgage  Disclosure  Ap- 
plications  —  whether  on  paper  or  in  e-maU  —  for 
three  years.  Human  resources  departewnts  must 
keep  personnel  records,  including 
e-nuiled  appUcadnns  and  re¬ 
sponses  to  fob  ads.  for  one  year 
fiom  the  date  of  personnel  actiem. 

Tt’s  a  technok^  ni^cinare. 
and  it’s  going  to  get  worse  as  the 
years  go  on  and  the  e-mails  build 
up.*  says  Mari:  E  Schreiber,  a 
partner  in  the  bbor  and  employ¬ 
ment  department  at  Boston  law 
firm  Ibiroer  &  Dodge  LLP. 

Companies  that  don't  keep  re¬ 
quired  documents,  including 
e-mails,  could  face  more  than 
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fines,  says  Mickey  C  Andric.  a  sales  manager  at  SJ 
Technologies.  Under  the  SEC  regubtioD  known  as 
17a-4.  financial  services  firms  could  be  hit  with  cen¬ 
sure  or  with  license  suspension  or  revocation  as  welL 

Firms  that  f^  to  archive  e-mails  so  they're  easily 
and  qtiickly  retrievable  also  face  the  hi^  cost  of  try¬ 
ing  to  recover  one  or  two  messages  demanded  by  a 
regubior  or  a  fodge,  for  example. 

Winston  Krone,  managing  director  in  the  San 
Francisco  office  of  SafirRosetti.  a  security  consulting, 
investigation  and  intelligence  firm,  has  worked  on 
cases  where  be  had  to  sort  throu^  150GB  of  infor¬ 
mation  to  find  required  e*maUs.  A  midsize  company 
with  a  couple  of  venues  could  spend  up  to  S500.000 
combing  thmiigh  corporate  e-mails  to  find  one  or 
two  messages,  be  says. 

Certainly,  companies  had  to  c<^  with  records  re¬ 
tention  for  decades  prior  to  e-mail,  and  many  em¬ 
ployed  compliance  officers  or  bwyers  to  oversee 
records  managemenL  But  executives  have  had 
less  experience  in  dealing  with 
archiving  e-maU.  experts  say,  and 
that  has  led  to  some  of  the  confu¬ 
sion  on  the  issue  today. 

"E-mail  exploded  on  the  scene 
vrith  no  traditional  solutions." 
says  Deborah  Baron,  director  of 
product  marketing  at  Zantaz  Inc 
in  Pleasanton,  Calif.  Zantaz  pro¬ 
vides  digital  archiving  and 
records  management  tools  as 
well  as  electronic  discovery  to 
meet  the  regubtory.  audit  and  le¬ 
gal  compliance  needs  of  financial 
services  firms,  energy  companies 
and  government  agencies. 

And  with  the  SEC  getting 
tough  on  e-mail  archiving  after 
finding  incriminating  e-mails 
during  recent  scandals  like  the 
one  that  took  down  Enron  Corp.,  companies  are  now 
paying  closer  attention  to  the  topic. 

In  light  of  that,  experts  agree  that  technology  per¬ 
sonnel  shouldn't  be  the  only  ones  deviring  e-mail 
storage  policy.  Companies  should  have  legal  counsel, 
regubtory  managers,  human  resource  executives  and 
IT  personnel  formubte  a  strategic  plan  for  storing, 
archiving  and  managing  the  data. 

They  should  start  by  defining  their  goals,  says  Lau¬ 
ra  Hanison,  pr^ect  manager  for  S|  Technologies* 
twgtaging  business  division.  S]  has  partnered  with 
Mountain  View.  Calif.-based  Legato,  a  provider  of  on¬ 
line  dau  storage  management  and  data  access  prod¬ 
ucts.  and  with  Oracle  Corp..  to 
design  and  implement  enter¬ 
prisewide  content  management 
systems  as  well  as  customized 
storage  applications. 

Companies  must  decide 
whether  to  keep  all  e-mails  or 
only  specific  ones.  Most  compa¬ 
nies,  after  doing  a  risk  analysis, 
decide  to  keep  them  aU.  even 
those  that  just  say  "Let's  meet  for 
lunch."  rather  thw  risk  deleting  a 
crucial  e-mail  that  might  bter  be 
required.  Harrison  says. 
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Next.  IT  should  examine  the  number  of  em¬ 

ployees  and  the  volume  and  size  of  the  average 
e-rnaU,  experts  say.  *n>ey  should  also  consider  what 
needs  to  be  kept  near-line  or  online,  how  often  stored 
messages  will  be  accessed,  and  who  will  access  them. 
In  gei>eraL  simply  adding  more  disk  capacity  to  exist¬ 
ing  backup  storage  systems  won’t  be  sufficient  to 
meet  legal  and  regubtory  requirements,  says  Baron. 

The  Security  Angle 

Baron  advises  companies  to  also  consider  security 
when  devising  e-m^  storage  systems.  “E-mails 
stored  on  backup  tape  leave  room  for  tampering. 
That’s  why  real-time  archivittg  is  critical  to  meet  le¬ 
gal  and  regubtory  requirements."  she  says. 

Consider  U5.  Food  and  Drug  Administration  regu- 
btion  21 CFR  Part  U.  which  establishes  the  criteria  un¬ 
der  which  electrcHiic  records  and  signatures  are  con¬ 
sidered  equivalent  to  paper  records  and  handwritten 
signatures.  It  requires  in  part  that  access  to  electron¬ 
ic  records  be  restricted  to  only 
authorized  personnel  and  that 
companies  must  be  able  to  re¬ 
trieve  stored  data  for  the  same 
length  of  time  as  equivalent  paper 
records,  whi^  can  mean  up  to  10 
years  or  longer 

“When  companies  are  not  fully 
compliant  with  21  CFR  Part  11. 
the  FDA  makes  a  case-by-case 
evaluation  as  to  whether  or  not 
to  pursue  regubtory  actions. 
Noncompliance  mi^t  lead  to 
regulatory  exposure,  costly  re¬ 
work  and  downtime,  compro¬ 
mised  product  quality,  and  even 
fines,  prison  sentences  and  sanc¬ 
tions."  according  to  the  Web  site 
of  Princeton  Softech  Inc.,  a 
Princeton.  N.f..  company  focused 
on  data  management  products  and  services. 

Experts  say  e-mail  storage  usually  involves  invest¬ 
ing  in  new  hardware,  such  as  network-attached  stor¬ 
age  or  .storage-area  networks;  software  to  manage  it: 
networking  equipment  such  as  routers,  switches  and 
firewalls;  and  a  database  administrator. 

A  company  would  pay  approximately  $100,000  for 
hardware  and  another  $100,000  for  sof^are  for  a 
5TB  protected  configuration,  according  to  estimates 
provided  by  EMC  Corp.  in  Hopkinton.  Mass. 

Companies  can  e;q»ect  a  total  e-mail  storage  sys¬ 
tem  to  cost  six  to  ei^t  times  as  much  as  the  base 
storage  hardware  (for  example,  a  RAID  storage  sys¬ 
tem  or  optical  disks)  on  an  ongoing  basis.  Baron 
adds.  So  if  a  company  spends  $UK>0  per  month  for 
storage  hardware,  it  should  budget  $6,000  to  $B.00O 
per  month  to  manage  the  system. 

But  Christt^her  taping,  vice  president  and  CIO  at 
Denver-based  GMAC  Commerdai  Holding  Capital 
Corp.,  says  costs  are  often  secondary  to  meeting  the 
evolving  regulatory  and  legal  requirements  for 
e-mail  storage. 

As  SI  Technologies  President  and  CEO  Ian  Singer 
says,  ‘Kfs  more  an  issue  of  compliance."  k 


Pmit  is  a  freelance  writer  in  Waltham,  Mass.  Cordact 
her  at  markinary@mmdspring.com. 
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Attached  Storage,  available  with  up  to  8.6  terabytes^  of  storage  capacity,  comes  equipped  f 

with  a  snap  shot  back-up  feature  and  single  point  of  restoration,  so  data  recovery  takes  I  g/BS  I 

minutes,  not  hours.  And  it  can  be  up  and  running  in  as  little  as  15  minutes.  Don't  let  data  I 

loss  threaten  you.  Protect  yourself,  protect  your  organization.  ^  i  * 
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FedEx  and  other  for¬ 
ward-thinking  compa¬ 
nies  are  teaming  up  with 
neighboring  universities 
to  teach  the  FT  skills 
their  businesses  require. 
B\'  Mar)'  Brandel 

EMPHIS  HAS  LONG  SERVED 
as  home  base  to  technology 
innovator  and  shippii^  giant 
FedEx  Corp.  This  fall,  the  city 
hop>es  to  become  a  hotbed  of 
leading-edge  technology  re¬ 
search  and  leamii^  when  the 
four-story,  S23  million  FedEx  Technolc^  Institute 
(^ns  at  the  University  of  Memphis. 

The  vision  is  for  the  center,  wdiich  was  pioneered 
and  partially  funded  by  FedEx,  to  become  ‘^e  digital 
epicenter  of  the  Mid-South.”  says  Tun  Rullips,  chair¬ 
man  and  executive  director  of 
the  institute.  On-campus  stu¬ 
dents.  professors  and  scien¬ 
tists.  as  well  as  researchers  and 
business  executives  inside  and 
outside  of  FedEx,  will  gain  access  to  “mind-blowing 
technolt^es  with  unbelievable  applications  in  an  in- 
Hnite  number  of  areas,”  be  says. 

A  very  distinct  benefit  for  FedEx  is  that  the  institute 
will  increase  and  sharpen  the  of  the  local  IT  tal- 
em  (Nwl.  and  it  will  produce  graduates  right  in  Mem¬ 
phis  who  have  training  and  experience  that  jibe  with 
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FedEx's  Deeds.  But  MulUps  is  quick  to  point  out  that 
the  new  center  isn’t  just  an  adjunct  FedEx  ttaining  fa¬ 
cility.  nor  docs  FedEx  control  its  research  efforts. 

However,  he  says,  the  institute  will  absolutely  at¬ 
tract  DM>re  students  interested  in  IT  to  the  UnhferMiy  I 
of  Memphis,  which  will  help  FedEx  and  other  compa¬ 
nies  fulfill  their  IT  needs.  The  hope  is  that  the  train¬ 
ing  might  even  attract  new  business  to  Memphis. 
'‘Absolutely.  1  can  see  some  really  interesting  and  rel¬ 
evant  centers  of  technology  inside  the  FedEx  Insti¬ 
tute  that  relate  to  FedEx  missions.*  Phillips  says. 

At  the  institute's  Center  for  Next  Generation 
Transportation,  for  instance,  “we’re  woridng  to  cre¬ 
ate  an  invisible  plasma  on  the  wing  surfaces  of  air¬ 
planes  to  drive  fuel  costs  down  by  as  much  as  half,* 
Phillips  says.  “And  in  trucking,  we’re  woridng  on  a 
unit  that  plugs  into  the  truck  cab  that  will  help  save 
billions  on  diesel  fuel* 

Beneficial  Partnerships 

In  this  climate  of  layt^  and  few  new  jobs,  parocu- 

larty  at  the  entry  le^  many  large  employers  are 

(^ing  out  of  campus  recruiting  this  year  (see  story, 
page  38).  But  a  few  forward-thinking  companies  are 
seeing  the  wisdom  of  working  with  area  universities 
and  community  colleges  to  turn  their  regions  into 
bubs  for  IT  activity.  The  benefits  are  plentifiiL  these 
companies  say:  The  talent,  in  effect,  comes  to  you. 
lowering  recruiting  costs;  you  can  home-grow  talent 
in  lifelong  local  readents.  who  tend  to  be  lon^erm 
employees;  and  you  can  influence  school  curricula  to  j 
meet  your  IT  needs. 

The  majority  of  companies  are  not  doing  vdiat 
they  need  to  do  to  develop  skills  proactively."  says 
Maria  Schafer,  an  analyst  at  Meta  Group  Inc.  "Wb«i 
things  do  pick  up.  the)^  be  scrambling  to  find  peo¬ 
ple."  She  recommends  that  companies  maintain  rela¬ 
tionships  with  universities  or  training  institutes  to 
ensure  that  the  bask  skills  they  need  are  being 
taught  They  can  then,  in  turn,  expand  upon  them. 

Retaining  IT  employees  and  creating  a  larger  local 
talent  pool  were  goab  of  Missouri's  state  govern¬ 
ment  in  the  fate  1990s.  says  Jan  Greciaa  a  technology  I 

for  the  stale  in  Jefferson  Qty.  “We  employ 
roughly  MOO  IT  professionals,  and  there  are  other 

businesses  here  in  town,"  she  says.  "We  were  doing  a  | 
lot  ofstealing  from  one  another.*  Salaries  were  also  a  I 
problem:  People  could  easily  move  to  the  far^  cities 

of  St.  Louis  or  Kansas  City  to  double  their  moo^. 

So  the  state,  local  IT  employers,  area  univetsiries 
and  colleges,  and  the  Chamber  of  Commerce  formed 


Not  Your  Typical 
Schoolhouse 

Scheduled  fv  completion  this  laL  (he 

kxHIoor.  93.000-sq.*ft- 

Technology  Institute  has  three  hey  goals: 

■  lb  produce  a  digitally  sawy  workforce 
and  student  pool. 


I  To  conduct  workHiassMerdiscipIn^ 
research. 


■  TobeanevoMnadyo^'ooouroe 
through  which  iocd  businesses  can 
come  together  to  find  soUions  to  reaF 
wodd  problems. 

Wth  its  eidersive  use  of  wireless 
techiwlogies  and  highspeed  If«ernet2 
bacMwne.  the  new  bcity  *15  not  yotr  typ¬ 
ical  red-brick  schoofoouse.’ says  Jim 
Phiips.  executive  dnetor  of  the  institute. 
Its  20(Fs8at  Torum.' for  instance,  has 
techn^  that  proiessots  can  use  to  give 
quizzes  with  irntnedale  scoring  feedback 
or  conduct  instant  pols.  A  presentation 
theater  has  a  digilal  screen,  spatialy  dy¬ 
namic  sound  control  and  sensory  body 
suBs  that  could,  for  example,  be  used  to 
help  students  learn  the  nuances  of  orches¬ 
tral  conduebno.  And  as  *(^IMre(r  offers 
wired  afo  wtretess  tnternei  connections. 

The  iralilule  vA  give  businesses  a 
place  to  work  together  on  projects  and 
solve  busness  problems,  and  K  wi  offer 
campus  scienlish  more  space  for 
reseach  and  better  opportunities  tor 
interactions  with  ofl-canpiB  researthers 
K  is  FedEx’s  beief  ttut  (he  Inslilute 
create  a  symbiotic  relationship  between 
thelMvefskyofMernphisandMerfiphis- 
area  busineses  and  stat-ups  that  the 
area  just  ddnl  have  before,  says  Ptiiips. 


a  coalition  and  developed  a  nussion  lo  get  more  local 

people  into  the  IT  field.  The  group,  whkh  meets 

once  a  month,  targeted  high  school  students  to  raise 
their  awareness  of  local  IT  education  and  |ob  o|^K)r- 
tunities.  The  coalition  also  focuses  on  workers  in 
other  careers  urtm  want  to  retool  for  the  IT  field. 
Coalition  members  also  joined  the  advisory  boards  of 
local  higber  education  centers. 

“All  the  schools  have  been  good  at  rising  to  the 
challenge  and  tweaking  their  curricultim*  to  meet 
employers'  needs.  Grecian  says.  For  instance,  in  1997. 
many  of  the  schools  were  looking  at  dit^ping  CoboL 
but  ^  coalition  urged  them  not  to  because  many  IT 
shops  were  still  heavily  invesred  in  that  tecfaDology 
fffyj  hadn’t  gone  through  Y2k  remedfatkm  yet. 

A  top-notth  netwocking  degree  program  was  add¬ 
ed  as  a  direct  result  of  the  coalition  needing  more 
networking  talent,  Grecfan  says,  and  more  recently, 
some  scfaoob  have  agreed  to  consider  adding  Micro¬ 
soft  J4et  to  their  curricula.  AdditiooaUy,  a  college 
about  an  hour  away  installed  a  satellite  school  in  Jef¬ 
ferson  aty.  offering  computer  science,  networking 
and  Web  development  pn^rams. 

All  of  this  has  resulted  in  a  greater  number  of  qual¬ 
ified  IT  The  numbers  have  increased 

substantially  in  tbe  local  schools  vdiere  they’ve 
added  to  the  IT  curriculum.*  Grecfan  says. 

*Two-Way  street’ 

Even  big-name  companies  in  large  cities  see  tbe  need 
to  increase  IT  noise  levels  and  influence  the  IT  cur¬ 
ricula  at  area  schools.  Tbe  more  we  can  do  to  make 
the  IT  curriculum  enticing  to  bring  others  in  and 
keep  tbe  kids  urho  live  here,  the  better  off  we  are,* 
says  Don  Haile,  president  of  Rdelity  Investment  Sys¬ 
tems  Co.  tbe  IT  arm  of  Fidelity  Investments  in 
Boston.  "When  we  bring  in  lo^  from  local  universi¬ 
ties,  there’s  a  greater  degree  of  loyalty." 

Fidelity  has  wofked  with  Babson  OsUege  in 
Whilesiey.  Mass,  on  Us  human  interface  design  cur¬ 
riculum  and  has  served  on  task  forces  and  advisory 
boards  at  the  University  of  Massachusetts.  Bentley 
College  and  MIT. 

“I  always  get  asked. 'What  should  we  be  teachingr 

Well  be  dear  that  we  want  students  to  understand 

Java  and  XML  and  that  they  need  to  get  on  board  with 

J4et."  Haile  says.  "They  know  this,  but  weYe  jtist 
confirming  their  suspkioos.  It’s  a  two-way  street  — 
rm  looking  for  new  blood,  and  they’re  interested  in 
seeing  what  we  think  and  what  we're  doing.* 
Everyone  agrees  that  no  college  program  can  be 
to  produce  students  with  the  leading-edge 
A»ii«  that  ate  immediately  valuable  to  an  employet. 

But.  Grecian  points  out,  if  you  can  encourage  area 

residents  to  follow  the  IT  route  at  local  schoote  that 
are  teaching  tbe  curriculum  that  matters  most  to 
nearby  employers,  “they  come  out  with  the  concepts 
down  and  a  desire  to  learn,  and  tbeyll  do  continuous 
training  at  tbdr  place  of  employment.* 

Even  in  the  current  eccoomy.  Grecian  says,  the 
coalition’s  worit  is  well  worth  the  effort.  "We  haven't 
been  as  active  lately*  because  of  the  ecooofuy.  she 
says.  “But  the  work  fan!  going  away.  It's  just  a  matter 

of  time,  and  well  see  this  cycle  around  again.*  > 

Brandel  IS  <i,fteelance  writer  in  Newton,  Moss.  Contocr 
her  Of  bmndels^>oaKcom. 
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There’s  plenty  of 
experienced  talent 
among  the  ranks  of 
the  unemployed. 

Bn'  Biirbara  l^ePompa 

For  a  second  straight  year,  formal 
on-ca^^>us  recruiting  of  IT  graduates 
is  way  down,  thanks  in  part  to  the 
slow  economy,  an  abundance  of  unem¬ 
ployed  IT  talent  and  ctmtinued  corpo¬ 
rate  belt-tightening. 

Recruiters  and  IT  executives  from  just  about 
everywhere  but  Microsoft  Corp.  say  there  are  sim¬ 
ply  too  many  experienced  IT  professionals  available 
from  businesses  that  have  laid  off  workers  in  the  past 
tvro  years. 

Moreover,  few  new  jobs  are  being  created.  In  a 
December  survey  of  150  CEOs  representing  compa¬ 
nies  employing  a  total  of  10  million  people,  80%  of 
the  respondents  said  they  would  bold  the  line  or  re¬ 
duce  capital  spending  in  2003.  ‘This  will  most  cer¬ 
tainly  stunt  job  creation.’  says  John  Cballeoger.  CEO 


of  Challenger.  Gray  and  Christmas  Inc.,  which  con¬ 
ducted  the  survey. 

The  IT  talent  glut  makes  it  unnecessary  for  com¬ 
panies  to  go  fishing  on  college  campuses  for  more  IT 
personnel  “It’s  simply  crazy  to  recruit  woricers  with¬ 
out  job  experience  when  there  are  so  many  talented 
IT  professionals  available.’  says  Rob  Collins,  CIO 
at  business  intelligence  software  provider  Cognos 
Inc.  in  Ottawa. 

Downturn  Predicted 

A  survey  released  in  late  December  by  the  Bethle¬ 
hem,  Pa.-based  National  Association  of  Colleges  and 
Employers  (NACE),  which  tracks  college  graduates 
for  recruiters  and  human  resources  professionals, 
confirms  the  bleak  job  outlook  for  all  college  gradu¬ 
ates.  In  August.  NACE  projected  that  employers 
would  hire  3.6%  fewer  college  graduates  in  2002-03 
than  they  hired  in  2001-02.  In  December.  60%  of  312 
employers  responding  to  NACE's  latest  survey  re¬ 
confirmed  their  intentions  to  hire  fewer  new  college 
graduates,  and  the  rest  said  they  plan  additional  cuts 
in  coUege-grad  hiring. 

Many  businesses  have  no  budget  or  mandate  to 
hire  oo  college  campuses  now.  says  Maria  Schaffer, 
an  analyst  at  Meta  Group  Inc  in  Stamford.  Cona 
Meta  will  publish  the  results  of  its  annual  survey 
of  Fortune  1,000  CIOs  later  this  quarter.  But  Sefa^er 
says  that  according  to  the  raw  survey  data, 
fewer  than  2%  of  CIOs  will  recruit  on  cam¬ 
pus  this  year,  down  horn  6%  in  2001  and 
way  down  from  a  high  of  18%  of  companies 
in  2000.  ’Many  companies  may  end  up 
sending  a  human  resources  person  for  a  day  to  inter¬ 
view  top  candidates  at  leading  colleges,  but  most 
aren't  making  immediate  job  offers,’  she  says. 

In  £act.  most  companies  are  counting  on  most  of 
their  conqietitois  to  forgo  campus  recruiting  this 
year,  says  Bill  Coleman,  senior  vice  president  of  com¬ 
pensation  at  Salarycom  Inc.  a  human  capital  man¬ 
agement  software  and  research  firm.  That  way  every 
company  will  be  oo  the  same  footing  when  the  situa¬ 
tion  improves  and  jobs  become  avail^le.’  he  says. 

But  there's  a  significant  eixeptioa.  Microsoft, 
which  is  expanding  its  campus  recruiting  this  year, 
views  the  pullout  by  competitors  as  shortsighted. 
“We  are  committed  to  college  recruiting,”  says 
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Cfi  Campus? 
Not  This ''ifear 


Few  Jobs,  Plenty 
Of  Internships 

■  40%  of  errH)loyersvi^  continue  currenl 
internship  programs. 

■  f7.S%  will  bring  in  more  interns  than  last  year. 

■  8%  expect  to  cut  back  on  internships. 

■  9%  of  companies  have  no  form^ 
internship  program. 

SOURCe  M*TIOIt*l*S90CIATiONOrcOtUa€S*NO 

EWRL0ve»9  aeTMLeHEw  oecewbeo  zoos 


Kristin  Roby.  Microsoft's  senior  director  of  college 
and  MBA  recruiting.  'Mk>mpanies  that  turn  away  now 
risk  losing  the  relationships  they  wdll  need  when  the 
economy  fully  recovers,"  she  says. 

Over  the  past  few  years.  Microsoft  has  recruited 
about  600  computer  science  students  per  year  for  full¬ 
time  positions.  This  year,  it  will  increase  that  to  800 
new  hires,  though  Roby  admits  the  additional  200  per¬ 
sonnel  hired  won't  come  from  the  computer  science 
field.  Instead,  she  says,  Microsoft  will  hire  more  col¬ 
lege  grads  from  marketing,  finance  and 
human  resources  programs  CQukklink 
34428].  It  attributes  its  hiring  needs  to 
overall  continued  growth.  Currently. 
Microsoft  has  more  than  53,000  employees 
and  recruits  from  more  than  2S0  schools. 

Some  experts  say  Microsoft  is  smart  to  buck  tbe 
no-campus-recruiting  trend.  “Right  now.  the  last 
thing  I  want  is  to  be  in  the  same  boat  as  my  competi¬ 
tion  ^  I  want  to  smash  and  kill  them.  And  that's  why 
it*s  smart  to  build  strong  college  campus  relations 
now,”  says  retired  Elf  Atochem  CIO  Bob  Rubin,  who 
is  now  president  of  Valley  Management  Consultants 
in  Huntington  Valley.  Pa. 

"When  the  econonty  turns  around,  businesses  will 
want  to  be  back  on  campus  in  force,  and  that’s  diffi¬ 
cult  to  do  if  you’ve  sev- 
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ered  your  ties,”  says  Mar¬ 
ilyn  Mackes,  executive 
director  of  NACE. 

It’s  also  a  good  idea  to 
keep  internship  programs 
up  and  running,  because 

they  are  far  less  expen-  - 

sive  than  full-blown  campus  recruiting  initiatives,  says 
Mackes.  Cognos’  Collins  says  the  company  will  con¬ 
tinue  to  hire  college  grads  using  this  method,  if  their 
interns  work  well  within  the  company’s  corporate  cul¬ 
ture.  they  are  often  offered  jobs  after  they  g^uate. 

Recruiters  and  analysts  em|:riuistze  that  a  small  re¬ 
cruiting  effort  is  better  than  none  and  will  likely  reap 
rewards  in  a  few  short  years.  They  say  that  barring  a 
major  terrorist  strike  or  a  long,  diWn-out  war.  they’re 
bopeftU  that  the  current  jobless  recovery  will  start  to 
improve  and  create  a  need  for  more  IT  personnel  in 
the  second  half  of  the  year:  I 


Dei^jtnpa  is  a .^eelance  writer  and  ediror  in  German¬ 
town.  Md.  Contact  her  at  bdepompa@comcast.net. 
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Handling  the 
HaidC^ 


Motivating  most  IT  people  is  easy,  but  what 
do  you  do  with  those  who  just  don’t  buy  in? 


HKyouhelp 
adisniptive 
person  find  some 
new  way,  your 
reputation  will  be¬ 
come  enhanced, 
the  culture  wil 
improve,  and  you 
wil  Ibre^  other 
problems. 

IHOEL  NKHOISON.  OMtEaOfi. 
CENTRE  FOR  0R6AMSATI0NAL 
RESEARCH.  LONDON  BUSINESS 
SCHOOL 


IMottvafurg 

problem  employ- 
eesisaperenni- 
oi  challenge 
/T  managers. /n 
this  month  Is 
Harvard  Busi¬ 
ness  Review, 
NgriMctelsoR. 
the  director  of 
theCentrefor 
Orgamsational 
Research  at  London  Business 
SchooL  argues  that  trying  to 
motivate  hard  cases  may  be  the 
wrong  approach.  He  talked 
with  Kathleen  MelyrruJca  obout 
a  method  designed  to  hefy>  them 
motivate  themselves. 


Why  li  tryinB  to  mottvala  a  prob- 
iam  IT  parm  the  wmg  ap- 
pnMCIi?  You  have  to  help  peo¬ 
ple  try  to  find  their  own  ways 
to  activate  themselves.  Tm 
talking  ^>out  intrinsic  motiva¬ 
tion  —  about  hearts  and 
minds.  Your  job  is  more  to 
clear  away  the  undergrowth. 


Ohra  iM  an  tnmpla  of  hew  not  to 
mefivila  a  praUam  parm  In  fT. 

Telling  someone  how  interest¬ 
ing  you  find  these  problems 
they're  working  on  or  how 
lucky  they  are  to  have  such  an 
interesting  job  when  you 
know  that  they  don't  find  it 
interesting. 


Hew  do  yea  bagbi  a  Maranl  ap- 
proadi?  First  of  all,  it’s  about 
finding  out  where  the  people 
are  misaligned. 

If  you  listen,  they  will  tell 
you.  Often,  they're  misaligned 
with  the  enviroiunent.  U,  for 


example,  they’re  on  the  help 
desk  and  they  really  don't  like 
dealing  with  people,  take  them 
off  the  help  desk. 

A  typical  problem  is  trying 
to  motivate  a  subordiiute  who 
thinks  he’s  better  technically 
than  the  manager.  That  gets  in 
the  way,  but  it  needn't 

What  do  you  do  about  Wat? 

There’s  nothing  wrong  with 
managing  someone  more 
skilled  rhan  you.  It  happens  all 
the  dme.  You  say.  **1  know  you 
have  more  skills  than  I  have. 
What  can  we  do  to  help  each 
other  make  this  operation  a 
success  for  both  of  usT  It's  a 
partnership  problem 

TMi  aoiaids  Wrty  simiila.  But  it 
can  be  difficult  because  often 
the  person  b  someone  you 
really  haven't  got  a  lot  of  sym¬ 
pathy  or  empathy  with.  You 
don't  like  the  person  or  per¬ 
haps  you've  a  row  with 
him  We're  not  really  motivat' 
ed  to  understand  people  with 
whom  we’ve  had  some  bad 
e]q;)erience.  Often  we’re  more 
concerned  with  being  right 
and  tbeir  being  wrong. 

One*  you  indwsiMid  llw  pwien 
hMlar.  wImI  do  you  do  Mid?  In¬ 
stead  of  saying  your  goal  b  to 
motivate  person,  you  may 
have  to  start  with  something 
simpler  —  perhaps  to  open  up 
a  channel  eff  communicatioo 
so  you  can  begin  to  work  to- 
gefoer.  You  can  worry  ifoout 
motivatkMi  later,  but  if  you 
haven't  got  a  channel  open, 
you  can't  work  with  them 


Vm  toy  dw  manogor  atao  noods  to 
m-ovakwto  MmooN  Md  Iho  work 
contoKt  M  mo  about  WoL  You 
may  get  off  on  the  wrong  foot 
vrith  a  (>erson  over  a  bad  ex¬ 
change,  and  you  take  that  as  a 
sign  he's  a  bad  person,  and  it 
starts  to  ^iral.  But  perhaps 
you  haven't  been  handling  him 
r^t.  and  you’re  brii^ing  out 
the  worst  in  him.  You  may 
need  to  change  the  way  you 
communicate  with  him 

Whom  dooo  dds  dl  bod?  You 

stage  a  formal  encounter.  You 
say.  "We  have  a  problem  and 
we  need  to  figure  out  what  it 
b,  and  if  we  see  the  world 
difforently.  that  b  pan  of  the 
problem  We  need  to  get  the 
same  view."  It  amounts  to  your 
seeing  the  world  from  hb 
point  of  view,  and  that  helps 
you  to  help  him  center. 

Ihon  whot?  In  the  course  of  this 
encounter,  you  may  discover 
things  you  didn’t  know.  You 
may  even  have  to  call  a  dme- 
oui  for  more  reftaming  of  your 
goab.  Or  thb  may  take  you  on 
a  coUbion  course  to  the  point 
where  the  person  b  dismissed. 
But  at  least  you’ll  know  why 
you're  doing  h. 

AIMaaMmsMonnoMlylfBW- 
conHminB.AItoral.iMfTiMiMQ* 
•r  hM  a  dMmtoMfil  to  run.  These 
issues  are  not  separate  from 
your  job;  thb  b  your  job. 

In  the  end,  you  will  gain 
lime  because  you  will  reduce 
l»oblems.  You  will  discover 
that  you've  been  treading 
water,  and  now  you'll  move 
ahead. 

But  whal  N  jiM'm  iMt  enddhg  a 
pmon  vfbo  raalir  ought  to  ba 
flradTYou  need  to  decide 
whether  there’s  a  recovery 
path  OT  not  If  the  answer  b 
no.  then  don't  even  get  into 
thb.  Pm  trying  to  avoid  the 
danger  that  comes  when  you 
try  to  settle  a  performance 
problem  and  h  escalates  to  the 
point  where  you  do  have  to 
fire  someone,  when  you  could 
have  solved  the  problem 

Good  IT  people  are  enor- 

1ltoli*alMolbia«riNtoinitt^ 
*aairiMi«aiaMMiafarttomii 
toaMu  lai  IBiMiiai  >i  ih  i  Mfcpfca 
at  htombtofraMagM. 
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mously  valuable.  You  can't 
afford  to  toss  them  over 
the  wall  when  you  have  a 
problem 

Hbo  iM  Warn  an  banalli  to  Mb 
aggre^fiHlgobafendBMnan- 
agv  and  fiia  praUam  amgloyaa. 
Wbnl  an  tfiay?  If  you  help  a 
disruptive  person  find  some 
new  way.  your  repuutioo  will 
become  enhanced,  the  culture 
will  improve,  and  you  will 
forestall  other  problems.  Peo¬ 
ple  will  start  ro  regain  OMin- 
dence  in  the  way  things  are 
run  and  see  that  you  believe  in 
wotking  for  constructive  solu¬ 
tions.  That  has  a  tremendous 
impact,  and  if  you  do  it  right, 
you’ll  be  loved  for  it  I 


Mefymuka  is  a  Computerworld 
contributing  writer.  Contact  her 
aihnetymuka@earthUnkJtet. 
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Health  Care,  Fed  to 
Lead  IT  Spending 

The  fedenJ  government  and  the 
health  care  industry  are  expected 
to  show  the  strongest  growth  in 
fT  spending  this  year,  according 
to  a  vertical-fnarhet  fT  spending 
forecast  issued  last  week  by  San 
Jose*based  Oataquest  Inc.  State 
and  local  governments'  IT  spend¬ 
ing  win  shrink  because  of  budget 
deficits. 

The  largest  global  vertical  mar¬ 
kets  ~  finandal  services,  manu¬ 
facturing.  government  and  com¬ 
munications  -  are  expected  to 
make  up  67%  of  worldwide  busi¬ 
ness  fT  spending  this  year. 


Groups  Oppose  Fed 
Copy-Control  Rules 

Two  maior  industry  groups,  the 
Business  Software  Alliance  artd 
the  Computer  Systems  Policy 
ftolect  which  represmts  large 
hardware  makers,  struck  a  pact 
this  month  with  the  Recording  In¬ 
dustry  Association  of  America,  a 
top  music  industry  trade  group,  to 
oppose  MeraHy  mandated  copy- 
pretsction  technologies  in  soft¬ 
ware  and  hardware.  They  aren’t 
opposed  to  technologies  intro¬ 
duced  voksitariy. 

TopOulsoureing 

D8alBfor2002 

UHMMrttUWn 

cofliad  wA  Bectrenic  OolB 
SyslBnvOoip..  for  IT  ssrvtoes 
and  appIcAmdeMicipmare 

BANK  OF  AMERICA'S 
S4J  hMoimBnKiBd  net- 

vnik  ssreIcBtM  <mB>  EDS. 

BOMBAROBt  TRANS' 

FOfnXTKNrtSUIMon 

conbactwACompiilBrSci- 

mcsB  CoqL  for  fT  arnicas. 

J.P.MOBeANCHASrs 

mmrnMwmmivn 


CANADIAN  MFBBAL  BANK 
OFCOMMERCrsttlMn 
CMl  wNt  HonWhPkkBd  ior 
IT  aantcsB  and  idnabuehffi. 


BART  PERKINS 


Manage  Suppliers 
For  Projeet  Suecess 


Most  organizations  begin  a  large 
system  development  effort  by  creating 
a  business  case,  identifying  a  program 
sponsor  and  developing  a  work  plan. 
These  are  widely  recognized  as  criti¬ 
cal  foundations  for  success,  and  without  them,  your 
program  is  likely  headed  for  failure. 


However,  even  with  a 
good  foundation,  research 
shows  that  few  large  proj-  . 
ects  meet  their  full  objec¬ 
tives.  About  S75  billion  is 
spent  yearly  on  failed  IT 
projects,  and  poor  manage¬ 
ment  and  methodology  are 
the  chief  culprits,  accord¬ 
ing  to  Gartner.  And  in 
2002,  more  than  half  of  134 
large  multinational  compa¬ 
nies  surveyed  by  KPMG 
experienced  a  failed  FT 
project  during  the  year. 

The  average  cost  of  each 
failure  was  about  S8  mil¬ 
lion.  While  no  company 
would  dream  of  throwing  dollars  away, 
failed  projects  essentially  have  the 
same  result. 

Many  organizations  severely  under¬ 
estimate  another  critical  piece  of  the 
project  foundation:  the  enormous  im¬ 
pact  their  suppliers  will  have  on  a 
project's  outcome.  Projects  frequentl>’ 
fail  because  suppliers  are  underman¬ 
aged.  undercoordinated  and,  all  too  of¬ 
ten,  ignored.  The  average  Fortune  500 
company  may  have  15  to  20  suppliers 
directly  involved  in  each  of  its  major 
system  development  projects.  These 
suppliers  include  providers  of  hard¬ 
ware.  sohw'are  packages,  middleware 
or  systems  integration  services.  Se¬ 
lecting  the  right  suppliers  and  manag¬ 
ing  them  effectively  is  crucial  to  pro¬ 
gram  success.  In  addition  to  perform¬ 


ing  traditional  supplier 
management  activities,  be 
sure  to  do  the  following: 

■  GuanI  your  infrastructure. 
Large  projects  often  intro¬ 
duce  new  technologies 
into  your  organization. 
When  you  commit  to  an 
application  package,  you 
may  be  unknowingly  com¬ 
mitting  to  additional  soft¬ 
ware.  An  Oracle-based 
company,  for  example,  may 
choose  a  software  package 
but  then  discover  that  it 
performs  better  on  a  SQL 
Server  database  than  on  an 
Oracle  database.  Further¬ 
more.  bcw'are  that  many  suppliers  will 
want  to  change  your  architecture  to 
better  incorporate  their  technology. 
Make  sure  that  all  hardware  and  soft¬ 
ware  required  by  your  suppliers  meets 
your  architectural  specifications. 

■  Identify  and  undwstand  your  suppkere. 
Carehilly  assess  their  corporate  direc¬ 
tion.  their  cost  structure  (how  they 
make  money),  and  the  exact  services 
they  will  provide.  If  possible,  under¬ 
stand  their  compensation  program  and 
get  your  supplier  to  specify  objectives 
for  its  staff  that  are  aligned  with  the 
success  of  your  own  program. 

■  Bring  hey  suppkere  on  board  as  soon  as 
possUe.  Make  sure  they’re  committed 
to  the  total  program  and  not  just  to 
their  own  deliverables.  Include  them 
in  the  initial  project  planning  phases. 


and  get  their  buy-in  for  your  work 
plan  and  schedule.  Include  key  suppli¬ 
ers  in  most  of  the  regular  program 
progress  meetings. 

■  Create  effective  project  performance  mea¬ 
surements.  Suppliers  can  meet  their  de¬ 
liverables  and  still  adversely  aflect 
overall  program  success  by  refusing  to 
share  enough  information  or  by  offer¬ 
ing  only  minimal  cooperation  to  other 
suppliers  involved  in  the  project.  In 
the  contract  (in  addition  to  specific 
deliverables),  focus  some  supplier  per¬ 
formance  measures  on  overall  pro¬ 
gram  success  (just  as  your  employees’ 
bonuses  are  often  based  on  a  combina¬ 
tion  of  their  individual  objectives  and 
corporate  .success). 

■  Address  the  cdtml  resistance.  Be  pre¬ 
pared  to  deal  with  pushback  from  your 
own  people  about  sharing  information 
openly  writh  a  supplier,  as  well  as 
pushback  from  suppliers  about  sharing 
their  information  with  other  suppliers 
on  the  project.  Define  the  level  of 
openness  required  at  the  beginning  of 
the  program,  and  get  supplier  buy-in. 

■  Re-examine  the  total  cost  of  OHmership. 
The  cost  of  a  software  package  is  fre¬ 
quently  only  10%  to  20%  of  the  total 
development  d>st.  Over  the  life  of  the 
program,  total  development  costs  are  a 
small  percentage  of  total  opierating 
and  maintenance  costs.  Remember  to 
include  the  cost  of  all  suppliers  in¬ 
volved  in  the  program. 

An  alarming  percentage  of  large  sys¬ 
tems  development  projects  fail.  Ad¬ 
dressing  these  supplier  issues  will 
help  minimize  common  pitfalls.  Make 
your  suppliers  an  explicit  part  of  your 
systems  delivery  process  to  leverage 
your  development  dollars  and  increase 
your  likelihood  of  program  success.  I 
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Manage  Suppliers 
For  Projeet  Success 

Most  organizations  begin  a  large  and  get  the^  buy-in  for  ,™uTwork 

^  plan  and  schedule.  Include  key  suppu- 

system  development  effort  by  creatmg  ers  in  most  of  the  regular  program 

a  business  case,  identifying  a  program  prognss  notings.  _ 

•  lie  B  Crarti  rthcMo  praisrt  pnriDniMiiGO  fiMi* 

sponsor  and  developmg  a  work  pl^  SuppUers  can  meet  their  de- 

These  are  widely  recognized  as  criti-  itverabies  and  sttii  adversely  affect 
cal  foundations  for  success,  and  without  them,  your 
program  is  likely  headed  for  failiu-e. 


However,  even  with  a 
good  foundation,  research 
shows  that  few  large  proj¬ 
ects  meet  their  fiiU  objec¬ 
tives.  About  $75  billion  is 
spent  yearly  on  failed  IT 
projects,  and  poor  manage¬ 
ment  and  methodology  are 
the  chief  culprits,  accord¬ 
ing  to  Gartner.  And  in 
2002.  more  than  half  of  134 
large  multinational  compa¬ 
nies  surveyed  by  KPMG 
experienced  a  failed  IT 
project  during  the  year. 

The  average  cost  of  each 
failure  was  about  $8  mil¬ 
lion.  While  no  company 
would  dream  of  throwing  dollars  away, 
failed  projects  essentially  have  the 
same  result 

Many  organizations  severely  under¬ 
estimate  another  critical  piece  of  the 
project  foundation:  the  enormous  im¬ 
pact  their  suppliers  will  have  on  a 
project’s  outcome.  Projects  frequently 
fail  because  suppliers  are  underman¬ 
aged.  undercoordinated  and,  ail  too  of¬ 
ten.  ignored.  The  average  Fortune  SOO 
company  may  have  15  to  20  suppliers 
directly  involved  in  each  of  its  major 
system  development  projects.  These 
suppliers  include  providers  of  hard¬ 
ware.  software  packages,  middleware 
or  systems  integration  services.  Se¬ 
lecting  the  ri^  suppliers  and  manag¬ 
ing  them  effectively  is  crucial  to  pro¬ 
gram  success.  In  addition  to  perform¬ 


ing  traditional  supplier 
management  activities,  be 
sure  to  do  the  following: 

•  Qwvd  your  ktaartmetore. 
Large  projects  often  intro¬ 
duce  new  technologies 
into  your  organization. 
When  you  conunit  to  an 
application  package,  you 
may  be  unknowingly  com¬ 
mitting  to  additional  soft¬ 
ware.  An  Oracle-based 
company,  for  example,  may 
choose  a  software  package 
but  then  discover  that  it 
performs  better  on  a  SC^L 
Server  database  than  on  an 
Oracle  database.  Further¬ 
more.  beware  that  many  suppliers  will 
want  to  change  your  architecture  to 
better  incorporate  tbeir  technology. 
Make  sure  that  all  hardware  and  soft¬ 
ware  required  by  your  suppliers  meets 
your  architectural  specifications. 

■  htonWyrtwrtwitondyourBtapMi. 
Carefully  assess  their  corporate  direc¬ 
tion.  tbeir  cost  structure  (how  they 
make  money),  and  the  exact  services 
they  will  provide.  If  possible,  under¬ 
stand  their  compensation  program  and 
get  your  supplier  to  specify  objectives 
for  its  staff  that  are  aligned  with  the 
success  of  your  own  program. 

■  Bring  lay  wgglan  «  botail  K  Mon  as 
pmaUs.  Make  sure  tbeyie  committed 
to  the  total  program  and  not  just  to 
tbeir  own  deliverables.  Include  them 
in  tbe  initial  project  planning  phases, 


and  get  their  buy-in  for  your  work 
plan  and  schedule.  Include  key  suppli¬ 
ers  in  most  of  tbe  regular  program 
progress  meetings. 

a  Craato  slhcMs  prajs^  g^tfomancs  fiMs- 
suraiwnh.  Suppliers  can  meet  their  de¬ 
liverables  and  still  adversely  affect 
overall  program  success  by  refusing  to 
share  enough  information  or  by  offer¬ 
ing  only  minimal  cooperation  to  other 
suppliers  involved  in  the  project  In 
the  contract  (in  addition  to  specific 
deliverables),  focus  some  supplier  per¬ 
formance  measures  on  overall  pro¬ 
gram  success  (just  as  your  employees' 
bonuses  are  often  based  on  a  combina¬ 
tion  of  their  individual  objectives  and 
corporate  success). 

a  Addram  tfw  erttoni  rartfetonce.  Be  pre¬ 
pared  to  deal  with  pushback  from  your 
own  people  about  sharing  information 
(^lenly  with  a  supplier,  as  well  as 
pushback  from  suppliers  about  sharing 
their  information  with  other  suppliers 
on  the  project  Define  tbe  level  of 
openness  required  at  the  begiiming  of 
the  program,  and  get  supplier  buy-in. 


Tbe  cost  of  a  software  package  is  fre¬ 
quently  only  10%  to  20%  of  the  total 
development  cost  Over  the  life  of  tbe 
program,  total  development  costs  are  a 
small  percentage  of  total  operating 
and  maintenance  costs.  Remember  to 
include  the  cost  of  all  suppliers  in¬ 
volved  in  the  program. 

An  alarming  percentage  of  large  sys¬ 
tems  development  projects  fail  Ad- 
dressii^  these  supplier  issues  will 
help  minimize  common  pitfalls.  Make 
your  suppliers  an  explicit  part  of  your 
systems  delivery  process  to  leverage 
your  development  dollars  and  increase 
your  likelihood  of  program  success.  I 
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and  business  alliances  at  Hie 
Lared  Group  in  Los  Angeles. 
They  have  not  only  a  legal 
but  also  a  Hduciary  obligation 
to  do  this  when  dealing  with 
sensitive  products  like  the 
sofhvare  sold  by  Ptech,"  she 
said. 

Ptech  CEO  Oussama  Ziade. 
however,  isn't  convinced  that 
lack  of  research  is  what  now 
threatens  the  life  of  his  com¬ 
pany  (QukkUnk  35704]. 

“How  br  are  we  going  to  go 
with  making  links  between 
peopleT  he  asked.  “And  how 
are  we  supposed  to  know  be¬ 
fore  the  fact?"  he  added,  refer¬ 
ring  to  the  investigation  into 
his  company  for  ties  to  indi¬ 
viduals  who  iveren't  on  any 
government  watch  List  when 
they  were  approached  by 
(^incy,  Mass.-based  Ptech. 

In  &ct,  some  of  the  same 
people  whose  past  connec¬ 
tions  to  Ptech  raised  federal 
investigators'  suspicions  can 
also  be  linked  to  other  U.S. 
companies,  according  to  for¬ 
mer  senior  government  terror¬ 
ism  experts  and  government 
documents. 

For  example,  Yaqub  Mirza 
resigned  from  Ptech’s  board  in 
March  2002  after  the  FBI  raid¬ 
ed  several  Muslim  charities 
and  businesses  be  had  helped 
set  up  in  Herodom  Va. 

Accordii^  to  Ziade,  a  dis¬ 
gruntled  former  Ptech  em¬ 
ployee  sent  an  e-mail  to  the 
FBI  last  summer  that  identi¬ 
fied  Mirza  as  a  close  associate 
of  Yassin  al-Qadi.  a  Saudi  busi¬ 
nessman  who  invested  in 
Ptech  in  1994  and  who  has 
since  been  added  to  a  govern¬ 
ment  terrorism  watch  list. 

That  association  has  been 
confirmed  by  at  least  two  for¬ 
mer  US.  intelligeace  ofltdals. 

But  documents  filed  with 
the  US.  Securities  and  Ex¬ 
change  Commission  in  1999 
show  that  Mirza  was  also  a 
member  of  the  board  of  direc¬ 
tors  of  Mylex  Corp.,  a  develop¬ 


er  of  RAID  and  network  man¬ 
agement  technologies  that  was 
acquired  by  IBM  that  same 
year.  Mirza  owned  3.95%  of 
the  company,  more  than  any  of 
the  ocher  directors  or  execu¬ 
tive  oSkers,  according  to  the 
SEC  documents. 

IBM  declined  to  comment. 
But  Kevin  Bren,  a  spokesman 
for  Milpitas,  Calif.-based  LSI 
Logic  Corp..  which  subse¬ 
quently  acquired  Mylex  from 
IBM.  said  tte  Mylex  board  was 
dissolved  upon  the  company's 
acquisition  by  IBM.  He  added 
that  LSI  has  “no  insights  into 
the  Mylex  decision-making 
process  relative  to  its  board  of 


directors  during  the  course  of 
its  existence  as  an  indepen¬ 
dent  company." 

Meanwhile,  Hybridon  Ixu:.,  a 
biotechnology  Tuin  in  Cam¬ 
bridge.  Mass.,  appears  to  be  in 
a  position  similar  to  Pteefa’s 
with  respect  to  its  investors.  A 
list  of  investors  in  a  June  2001 
Hybridon  proxy  statement 
filed  with  the  SEC  includes 
Abdelah  bin  Mahfouz,  the  son 
and  business  partner  of  Khalid 
bin  Mahfouz,  former  head  of 
the  The  National  Commercial 
Bank  of  Saudi  Arabia.  Khalid 
wa.s  placed  under  bouse  arrest 
by  the  Saudi  govenunent  prior 
to  the  Sept  U  attacks  for  al¬ 


lowing  the  bank  to  channel 
funds  to  al-Qacda  front  com¬ 
panies,  said  Vince  Cannis- 
traro,  former  chief  of  opera- 
tioos  at  the  CIA's  Counterter¬ 
rorism  Center. 

Eariter  SEC  filings  show 
that  another  member  of  the 
family.  Abdulrahman  bin  Mah¬ 
fouz.  also  held  stock  in  Hybri¬ 
don.  Also  a  board  member  of 
National  Commercial  Bank, 
Abdulrahman  served  on  the 
board  of  Blessed  ReUeC  a  Su¬ 
dan-based  charity  that  US.  tn- 
telUgence  ofncials  have  char¬ 
acterized  as  a  front  organiza¬ 
tion  for  Osama  bin  Laden. 

Stephen  Seiler.  CEO  of  Hy- 


Asset  Management 
Projects  FalBng  Short 


Users  and  analysts  warn  against  relying 
too  heavily  on  packaged  applications 


BV  THOMAS  HOFFMAN 

NFOKMATION  TECHNOUXJY 

asset  management  pro¬ 
grams  underwent  some¬ 
thing  of  a  rebirth  in  recent 
years  as  corporate  cost-cutting 
efforts  forced  IT  managers  to 
do  a  better  job  of  traddng 
technology  investments.  But 
many  of  the  programs  have 
fallen  into  disrepair,  users  and 
analysts  said  last  week. 

One  of  the  problems  CIOs 
and  other  IT  ewcutives  en¬ 
counter  is  that  they  often 
place  too  much  emphasis  on 
using  asset  management  soft¬ 
ware  to  track  their  technology 
inventories,  said  Pat  Cicala, 
president  and  CEO  of  Cicala 
&  Associates  LLC,  a  Hoboken. 
N.].-based  asset  management 
services  and  research  firm. 

In  doing  so.  the  IT  man¬ 
agers  don't  pay  enough  atten¬ 
tion  to  the  people  and  pro¬ 
cesses  needed  to  manage  such 
efforts,  Ocala  added.  'Pd  soy 
that  more  than  80%  of  IT  asset 
management  programs  either 


stall  or  become  problematic 
even  if  they've  got  a  few  years 
under  their  belts."  she  said. 

That's  why  Steve  Ham¬ 
mond,  vice  president  of  infor¬ 
mation  services  at  Plasti-Line 
Inc.  in  Knoxville.  Tbnn.,  rec¬ 
ommends  that  an  asset  man¬ 
agement  program  be  simpli¬ 
fied  as  much  as  possible. 
“Don't  overcomplicate  H  with 
a  software  solution,  where  you 
become  a  slave  to  the  soft¬ 
ware."  be  sakL 
PlasU-line,  which  makes 
si^is,  menu  boards  and  other 
coqKicate  branding  products, 
implemented  an  asset  man¬ 
agement  program  four  years 
ago  when  it  standardized  on 
Dell  Computer  Corp.'s  PCs 
and  servers.  Dell  slaps  an  as¬ 
set  tag  on  every  piece  of  hard¬ 
ware  that  Plasti'Line  buys  or 
leases,  and  Plasti-Line  uses  an 
Excel  spreadsheet  to  track  the 
equipment  Hammond  sakL 
Valassis  Communications 
Inc  considered  buying  an  as¬ 
set  management  system.  But 


as  a  midsize  company  with 
just  1X>00  PCs.  it  was  hard  to 
show  a  potential  return  on  in¬ 
vestment  to  justify  the  pur¬ 
chase  said  Amy  Courter,  vice 
preudent  of  IT  at  the  maiket- 
ing  services  firm  in  Livonia, 
Mkh.  like  nasU-Une.  Valas¬ 
sis  relies  upon  qjreadshects. 

T-Systems  Inc  in  lisle  IlL. 
this  month  introduced  a  ser¬ 
vice  aimed  at  improving  the 
success  rates  of  companies 
with  faltering  asset  manage¬ 
ment  programs.  T-Syscems 
said  the  AssetQukkVkw  scr- 
vke  which  starts  at  $20,000, 
is  designed  to  attack  three  of 
the  culprits  of  asset  manage¬ 
ment  malaise:  lack  of  docu- 
mentatioa,  uncertain  require¬ 
ments  and  incomplete  asset 
inventory  data. 

Many  asset  management 
programs  run  into  trouble  be¬ 
cause  IT  departments  tend  to 
conduct  quarterly  sweeps  of 
IT  inventories  and  "end  up 
missing  whafs  going  on  out 
there*  between  the  sweeps, 
said  Howard  Rubin,  executive 
vice  president  at  Meta  Group 
iDC  in  Stamford,  Conn.  Such 
programs  foil  because  conqa- 


bridon.  said  his  company  has 
conducted  “extensive  due  dili¬ 
gence"  to  “vet  our  sharehold¬ 
ers."  Seiler  said  his  company  b 
“unaware  of  any  link  between 
Mr.  bio  Mahfouz  and  any  in¬ 
vestigation." 

But  companies  in  Hybri¬ 
don 's  position  at  the  very  least 
face  a  perception  problem,  an¬ 
alysts  sakL  “Can  these  execu¬ 
tives  seriously  expect  the  pub- 
Uc  to  believe  that  they  didn't 
know  whence  the  money  was 
coming?"  SegU  asked.  Ts  it 
that  tl^  didn't  want  to  know 
and  so  didn't  check?  Or  didn't 
know  and  didn't  care  because 
money  b  money?"  I 
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AfmOJUTE  the  reasons  ahy 
gxf  pragram  snt  wartang  and 
creole  a  plao  and  Imine  for 
deroonsttalingiminwements. 

DEDICATE  worters  to  moniar 
thepra^yessofyourassalinan- 
agemenlefforismsiaadoinflk- 
ing  thal  an  added  responsUdy 
lor  IT  staffers. 


DOfTTUNOERESmilATE  8ie 
personnel  and  piocBnaste- 
qbtBd  lor  an  effedM  program 

CREATE  closer  lies  behnenlhe 
emptoysas  who  manage  your  IT 
asBisandendiBets. 


STAY  on  lop  of  yoia  pro^am  and 
Neep  pace  Ml  conslangy 
d»ngaiglBdwoiogywvntone& 


oies  use  procedures  r***r 
“don't  give  them  timeliness 
and  accuracy."  be  said 
IT  departments  that  ore 
struggling  to  get  funding  for 
asset  management  prognuns 
should  start  small  with  a  proj¬ 
ect  such  as  ttacldng  dtstrib- 
uted  software  licenses  to  show 
the  value  of  the  concept  to  se¬ 
nior  managemenL  susested 
Frances  O'Brien,  an  analyst  at 
Gartner  Inc  in  Sumford  I 
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FRANK  HAYES  •  FRANKLY  SPEAKING 

An  Uneasy  Feeling 

IF  YOU  READ  BETWEEN  THE  LINES  of  Carly  Fiorina’s  current 
stump  speech  —  the  one  she  gave  at  Comdex,  the  one  she 
gave  last  week  to  a  group  of  resellers  —  maybe  you  feel  a  little 
uneasy.  And  you  should.  Hewlett-Packard’s  CEO  has  been 
telling  audiences  that  business  is  down  because  corporate 
customers  want  to  cut  IT  costs  and  get  real  business  results  from  IT. 
And  she  calls  that  a  permanent  change  in  customer  requirements. 

What  she  means,  of  course,  is  that  customers  no  longer  just  want 
those  things.  After  all,  they’ve  wanted  them  for  years,  but  now  they 
have  to  cut  IT  costs  and  get  business  results,  because  they  no  longer 
have  the  IT  budgets  to  spend  and  CEOs  have  run  out  of  patience 
with  CIO  promises. 


.^nd  if  Fiorina  is  to  be  believed,  she  never  ex¬ 
pects  to  see  healthy  IT  budgets  or  a  free  ride 
for  shiny  new  technology  again. 

Ho  I  believe  her?  Naaah.  It's  politically  cor¬ 
rect  to  sympathize  publicly  with  customers 
whose  budgets  have  been  cut.  It’s  shrewd  lead¬ 
ership  to  tell  the  sales  force  there’s  no  use  in 
squeezing  existing  customers  for  more  revenue. 
And  it’s  good  marketing  to  stake  out  a  “we’ll 
help  you  cut  IT  costs  and  build  value”  position. 

If  Fiorina  really  thought  IT  budgets  will  nev¬ 
er  recover,  she'd  have  bailed  out  of  HP  long  be¬ 
fore  she  gave  that  stump  speech  for  the  first 
time.  If  your  customers'  budgets  are  drying  up 
permanently,  you  don’t  want  to  stay  in  a  busi¬ 
ness  that’s  doomed  to  spiral  down  to  nothing. 

Then  again  . . .  what  if  she's  right?  What  if 
that  uneasy  feeling  isn’t  just  your  imagination? 

After  all,  our  healthy  budgets  have  long  been 
the  basis  for  our  relationship  to  vendors.  For 
decades,  IT  shops  have  turned  to  vendors  for 
technology  guidance.  Vendors  did  the  technolo¬ 
gy  research,  invented  the  paradigms,  cobbled 
together  “solutions.”  Then  they  told 
us  what  to  do.  and  we  decided 
whether  to  spend  the  money  on 
what  they  proposed. 

We  didn't  just  look  to  them  for 
products.  Wc  depended  on  them  for 
technology  leadership.  OK.  their 
technology  solutions  didn't  always 
pan  out  as  effective  business  tools. 

But  they  were  always  coming  up 
with  something  new,  so  we  had  a 
steady  stream  of  new  IT  ideas.  And 
the  system  seemed  to  work  pretty 
well  as  long  as  the  money  kept  flow¬ 
ing:  They  led.  we  spent. 
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But  now  the  money  isn’t  flowing,  and  we’ve 
come  to  something  of  an  impasse.  If  doesn’t 
matter  how  great  a  vendor's  technology  solu¬ 
tion  is  if  IT  shops  don't  have  the  budget  to  buy 
it.  Vendors  keep  trying  to  lead,  but  these  days 
we  can't  afford  to  follow. 

Sure,  that  happens  whenever  the  economy’s 
down.  But  what  if  Fiorina  is  right,  and  there’s 
been  a  permanent  shift  to  reduced  IT  spending 
and  an  absolute  requirement  of  business  advan¬ 
tage  from  IT  projects? 

If  that’s  the  case,  then  we  can't  let  vendors 
lead  us  any  longer. 

It's  not  just  that  we  don’t  have  the  money.  It’s 
also  that  they  don't  know  our  business  process¬ 
es  and  requirements  and  users.  As  tough  as  it  is 
for  IT  shops  to  understand  the  nuances  and  pe¬ 
culiarities  of  what  our  businesses  need,  it’s  far 
more  difficult  for  technology  vendors  to  under¬ 
stand  those  things  from  the  outside. 

Technolog)'  isn't  enough.  To  deliver  business 
advantage,  we've  got  to  solve  business  prob¬ 
lems  —  the  problems  of  our  business.  And  that 
kind  of  solution  won't  come  out  of 
a  box  from  a  vendor. 

No  wonder  Fiorina's  words 
aren’t  exactly  comforting.  No  won¬ 
der  they  put  us  ill  at  ease.  If  she’s 
right,  we  can’t  afford  to  let  vendors 
lead  us  —  can’t  afford  it  from  the 
budget  or  the  business  advantage 
standpoint. 

And  if  we  can’t  turn  to  vendors 
for  IT  leadership  for  our  business¬ 
es  —  to  give  us  answers,  to  offer  us 
solutions,  to  define  what  our  busi¬ 
nesses  need  —  we’ll  have  to  pro¬ 
vide  it  ourselves.  I 
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FRANK  HAYES  • FRANKLY  SPEAKING 

An  Uneasy  Feeling 

IF  YOU  READ  BETWEEN  THE  LINES  of  Carly  Fiorina’s  current 
stump  speech  —  the  one  she  gave  at  Comdex,  the  one  she 
gave  last  week  to  a  group  of  resellers  —  maybe  you  feel  a  little 
imeasy.  And  you  should.  Hewlett-Packard’s  CEO  has  been 
telling  audiences  that  business  is  down  because  corporate 
customers  want  to  cut  IT  costs  and  get  real  business  results  from  IT. 
And  she  calls  that  a  permanent  change  in  customer  requirements. 

What  she  means,  of  course,  is  that  customers  no  longer  just  want 
those  things.  After  all,  they’ve  wanted  them  for  years,  but  now  they 
have  to  cut  IT  costs  and  get  business  results,  because  they  no  longer 
have  the  IT  budgets  to  spend  and  CEOs  have  run  out  of  patience 
with  CIO  promises. 


And  if  Fiorina  is  to  be  believed,  she  never  ex¬ 
pects  to  see  healthy  IT  budgets  or  a  free  ride 
for  shiny  new  technology  again. 

Do  I  believe  her?  Naaah.  It’s  politically  cor¬ 
rect  to  sympathize  publicly  with  customers 
whose  budgets  have  been  cut.  It’s  shrewd  lead¬ 
ership  to  tell  the  sales  force  there's  no  use  in 
squeezing  existing  customers  for  nmre  revenue. 
And  it's  good  mariceting  to  stake  out  a  “we’!! 
help  you  cut  IT  costs  and  build  value”  position. 

If  Fiorina  really  thoi^t  IT  budgets  will  nev¬ 
er  recover,  she’d  have  bailed  out  of  HP  long  be¬ 
fore  she  gave  that  stump  speech  for  the  first 
time.  If  your  customers’  budgets  are  drying  up 
permanently,  you  don’t  want  to  stay  in  a  busi¬ 
ness  that’s  doomed  to  spiral  down  to  nothing. 

Then  again . . .  what  if  she’s  r%ht?  What  if 
that  uneasy  feeling  isn’t  just  your  imagination? 

After  all,  our  healthy  budgets  have  long  been 
the  basis  for  our  relationship  to  vendors.  For 
decades,  IT  shops  have  turned  to  vendors  for 
technology  guidance.  Vendors  did  the  technolo¬ 
gy  researdi,  invented  the  paradigms,  cobbled 
togetl^r  “solutions.''  Then  they  told 
us  what  to  do.  and  we  decided 
whether  to  spend  the  money  on 
what  they  proposed. 

We  didn’t  just  look  to  them  for 
products.  We  depended  on  them  for 
technology  leadership.  OK.  their 
technology  solutions  didn’t  always 
pan  out  as  effective  business  tools. 

But  they  were  always  coming  up 
with  something  new,  so  we  had  a 
steady  stream  of  new  IT  ideas.  And 
the  system  seemed  to  work  pretty 
well  as  long  as  the  money  kept  flow¬ 
ing:  They  led.  we  spent 


But  now  the  money  isn’t  flowing,  and  we’ve 
come  to  something  of  an  impasse.  It  doesn't 
matter  bow  great  a  vendor’s  technology  solu¬ 
tion  is  if  IT  shops  don’t  have  the  budget  to  buy 
it  Vendors  keep  trying  to  lead,  but  these  days 
we  can’t  afford  to  follow. 

Sure,  that  happens  whenever  the  economy’s 
down.  But  what  if  Fiorina  is  ri^t,  and  there’s 
been  a  permanent  shift  to  reduced  IT  spending 
and  an  absolute  requirement  of  business  advan¬ 
tage  from  IT  projects? 

If  that’s  the  case,  then  we  can’t  let  vendors 
lead  us  any  longer. 

It’s  not  just  that  we  don’t  have  the  money.  It’s 
also  that  they  don’t  know  our  business  process¬ 
es  and  requirements  and  users.  As  tou^  as  it  is 
for  IT  shops  to  understand  the  nuances  and  pe¬ 
culiarities  of  what  our  businesses  need,  it’s  far 
more  difficult  for  technology  vendors  to  under¬ 
stand  those  things  from  the  outside. 

Technolt^  isn't  enough.  To  deliver  business 
advantage,  we've  got  to  solve  business  prob¬ 
lems  —  the  problems  of  our  business.  And  that 
kind  of  solution  won’t  come  out  of 
a  box  from  a  vendor. 

No  wonder  Fiorina's  words 
aren’t  exactly  comforting.  No  won¬ 
der  they  put  us  ill  at  ease.  If  she’s 
right,  we  can’t  afford  to  let  vendors 
lead  us  —  can’t  afford  it  from  the 
budget  or  the  business  advantage 
standpoint. 

And  if  we  can’t  turn  to  vendors 
for  IT  leadership  for  our  business¬ 
es  —  to  give  us  answers,  to  offer  us 
solutions,  to  defme  what  our  busi¬ 
nesses  need  —  we’ll  have  to  pro¬ 
vide  it  ourselves.  I 
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Value  Management 
^  Business  Intelligence  ft  Analytic^ 
^  IT  Portfolio  Management  ^ 


►  High-Availability  Servers  j 

►  Mission  Critical  Managed  Servicgf 


Solution! 


Optimization 


►  Resource 


►  Application  Outsourcing 

►  Content  Management 
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Build  more  business  value 

INTO  YOUR  IT  INVESTMENTS 

With  mounting  profit  pressures  and  demands 
for  cost  control,  every  investment  must  produce 
rapid  and  predictable  business  value.  As  the 
world’s  third  largest  IT  company.  Fujitsu  can 
show  you  how  to  improve  your  return  on  IT. 

Our  experienced  consultants  will  align  your 
technology  with  your  business  strategy  for 
improved  performance.  And  our  enterprise  value 
management,  application  outsourcing  and  IT 
effectiveness  experience  can  help  maximize  the 
value  from  IT  while  reducing  total  IT  costs  up 
to  30%  in  three  years. 

Along  with  the  right  blueprint,  a  solid  infrastructure 
forms  the  foundation  for  business  effectiveness. 

By  eliminating  “server  sprawl^  our  exceptionally 
reliable  and  scalable  UNIX  servers  will  lower 

TCO  and  improve  productivity. 

FU^TSU 

e 

For  free  white  papers  showing  how  to  maximize 
your  Return  On  IT.  visit  us.fuiitsu.com/RniT 

THE  POSSIBILITIES  ARE  INFINITE 

Working  together,  we  can  accomplish  anything. 

us.fujitsu.com 
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Microsoft  Adds  a 'Vfear  to 
NT  Server  4.0  Support 


Users  feeling  upgrade  pressure  get  a  reprieve 
but  extension  doesn't  cover  all  support  c^ons 


■V  CAIIOL  SUWA 

Microsoft  Corp.’s  confinna' 
tk>D  last  week  that  it  will  ex¬ 
tend  key  suppon  provisions 
for  Windows  NT  Server  4.0 
through  2004  provided  a  re¬ 
prieve  for  companies  feeling 
pressure  to  move  off  the  aging 
operating  system. 

Many  corporate  users  that 
are  still  running  Windows  NT 
Server  4.0  said  the  end  of  sup¬ 
port  was  the  primary  reason 


for  their  decisions  to  either 
migrate  off  the  operating  sys¬ 
tem  or  plot  their  upgrade  op¬ 
tions.  Microsoft  had  an¬ 
nounced  in  October  that  the 
extended  support  phase  for 
NT  Server  4i)  would  cease  at 
the  end  of  2003. 

*This  gives  me  more  breath¬ 
ing  room.  Like  all  IS  organiza¬ 
tions,  we're  fust  massively  re¬ 
source-constrained,"  said 
Randy  Truax,  manager  of 


technical  services  at  Metro¬ 
politan  Health  Corp.  in  Grand 
Rapids,  Midi. 

Metropolitan  has  $4  Win¬ 
dows  NT  44)  servers  running 
health  care,  financial  and  sup¬ 
ply  chain  applicatioos,  as  wdl 
as  SQL  Server  and  various 
utility  tools.  Plans  call  for  the 
IT  department  to  determine 
the  ftne  of  those  servers  by  the 
time  the  organization’s  new 
fiscal  year  starts  July  L 

Truax  said  he's  now  more 
inclined  to  take  a  closer  look 
at  Windows  Server  2003. 

NT  Servtr  4j0.  page  49 


Unprepared  Rrms  Slammed 


LINUX:  ST0PRN6 
SERVER  SPRAWL 

Greater  reliability.  Improved  performance. 

Faster  resource  provisioning.  Running  Linux  on 
the  mainframe  may  be  your  best  bet  for  con¬ 
solidating  servers  and  lowering  costs.  Yet  not 
every  application  will  benefit  —  and  knowing 
the  difference  is  a  crucial  measure  of  success. 

See  what  experienced  users  recommend.  PH6E  23 
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Worm  took  advantage 
of  FT  shops’  ffdlune  to 
use  available  patches 


The  widespread  disruptions 
caused  by  last  week’s  SQL 
Slammer  wonn  demonstrated 
yet  again  the  importance  of 
proactive  vulnerability  patch 
management,  users  and  ana¬ 
lysts  said. 

Slammer,  a  self-propagating 
worm  also  dubbed  Sapphire 
and  SQL  HeU.  surfac^  Jan.  2S. 
The  worm  infected  computers 
by  means  of  a  known  flaw  in 
Microsoft  Corp.’s  frequently 
patched  SQL  Server  database 
software.  Slammer  works  by 
copying  itself  oitto  vulnerable 
con^uters  and  then  using 
those  systems  to  scan  for  and 


infect  other  machines  running 
SQL  Server. 

As  was  the  case  with  prede¬ 
cessor  worms  like  Nimda  and 
Code  Red,  Slammer  could 
have  been  thwarted  if  users 
had  applied  a  patch  that  Mi¬ 
crosoft  issued  more  than  six 
months  aga 

The  administrators  of  af¬ 
fected  servers  "most  certainly 
SJammer,  page  14 


Cheap  Cartridge  Option  in  Peril 


3M  N  SB  W 
MW  MMK  m  4eit3-1553 


Lexmark’s  l^al  action 
could  dry  up  printer 
cartridge  aftetmarket 


The  remanufactured  tcmer 
cartridge  industry,  wfakdi  pro¬ 
vides  1^-cost  printer  car¬ 
tridges  for  many  corporatioos. 
is  under  a  legal  and  technolog¬ 
ical  assault  that  could  deprive 


IT  managers  of  a  money¬ 
saving  option. 

The  major  printer  manufac¬ 
turers  are  making  changes  to 
cartridge  designs  and  the 
computer  chips  that  mate  a 
cartridge  with  a  printer,  there¬ 
by  tnairing  it  tncreasiz^y  diffi¬ 
cult  for  re  manufacturers  to  re¬ 
fill  the  cartridges.  It  can  take 
remanufecturers  more  than  a 
year  of  engineering  work  to 

Cartridges,  page  16 
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NEWSPAPER 


MAINFRAME 


OPPING 


SERVER  SPRAWL 

Greater  reliability'  Impixned  performance. 

Faster  resource  pnwisioning.  Running  Finux  on 
the  mainframe  ma\'  be  your  best  bet  for  con¬ 
solidating  servers  and  lowering  exists.  Yet  not 
every  application  will  benefit  —  and  knowing 
the  difference  is  a  crucial  measure  of  success. 

See  what  experienced  users  recommend.  PAGE  23 
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Microsoft  Adds  a  'fear  to 
NT  Server  4.0  Support 


Users  feeling  upgrade  pa’ssuR'  get  a  reprieve, 
but  extension  diK-sn't  cox  er  all  support  options 


BY  CAROL  SLIWA 

Microsoft  Corp.’s  confirma¬ 
tion  last  week  that  it  will  ex¬ 
tend  key  support  provisions 
for  Windows  NT  Server  4.0 
through  2004  provided  a  re¬ 
prieve  for  companies  feeling 
pressure  to  move  off  the  aging 
operating  system. 

Many  corporate  users  that 
are  still  running  Windows  NT 
Server  4.0  said  the  end  of  sup¬ 
port  was  the  primary  reason 


for  their  decisions  to  either 
migrate  off  the  itperating  sys¬ 
tem  or  plot  their  upgrade  op¬ 
tions.  Microsoft  had  an¬ 
nounced  in  October  that  the 
;  extended  support  phase  for 
NT  Server  4.0  would  cease  at 
the  end  of  200.^. 

"This  gives  me  more  breath¬ 
ing  nx>m.  Like  ail  IS  organiza¬ 
tions.  we're  just  massively  re¬ 
source-constrained."  said 
Randy  Truax.  manager  of 


technical  ser\'ices  at  Metro¬ 
politan  Health  Corp.  in  Grand 
Rapids.  Mich. 

Metropolitan  has  54  Win¬ 
dows  NT  4.0  servers  running 
health  care,  financial  and  sup¬ 
ply  chain  applications,  as  well 
as  SQL  Server  and  various 
utility'  uwU.  Plans  call  for  the 
IT  department  to  determine 
the  fate  of  those  servers  by  the 
time  the  organization’s  new 
fiscal  year  starts  luly  1. 

Truax  said  he’s  now  more 
inclined  to  take  a  closer  look 
at  Windows  Server  200.?. 

NT  Server  4.0.  pogc  -19 


Unprepared  Rrms  Slammed 


Worm  hxxk  adx-antngc 
of  ri'  shops'  failure  to 
use  axailabic  patches 

BY  JAIKUMAR  VIJAYAH 

The  widespread  disruptions 
caused  by  last  week's  SQL 
Slammer  worm  demonstrated 
yet  again  the  importance  of 
proactive  vulnerability  patch 
management,  users  and  ana¬ 
lysts  said. 

Slammer,  a  self-propagating 
worm  also  dubbed  Sapphire 
and  SQL  Hell,  surfaced  |an.  25. 
Tlie  worm  infected  computers 
by  means  of  a  known  flaw  in 
Microsoft  Corp.’s  frequently 
patched  SQL  Server  database 
software.  Slammer  works  by 
copying  itself  onto  vulnerable 
computers  and  then  using 
those  systems  to  scan  for  and 


infect  other  machines  running 
SQL  Server. 

As  was  the  case  with  prede¬ 
cessor  worms  like  Nimda  and 
Code  Red.  Slammer  ct>uld 
have  been  thwarted  if  users 
had  applied  a  patch  that  Mi¬ 
crosoft  issued  more  than  six 
months  ago. 

The  administrators  of  af¬ 
fected  servers  “most  certainly 
Slammer,  page  14 


Cheap  Cartridge  Option  in  Peril 


Ix'.xmark’s  legal  action 
axuld  drx'  up  printer 
cartridge  aftermarket 


The  remanufactured  toner 
cartridge  industry,  which  pro¬ 
vides  low-cost  printer  car¬ 
tridges  for  many  corporations, 
is  under  a  legal  and  technolog¬ 
ical  assault  that  could  deprive 


IT  managers  of  a  money- 
saving  optKm. 

Tite  maior  printer  manufac¬ 
turers  arc  making  changes  to 
cartridge  designs  and  the 
computer  chips  that  mate  a 
cartridge  with  a  printer,  there¬ 
by  making  it  increasingly  diffi¬ 
cult  for  rcmanufacturers  to  re¬ 
fill  the  cartridges.  It  can  take 
remanufacturers  more  than  a 
year  of  engineering  work  to 

Carfri^ges.  page  16 
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FAST  TEAMS  AND  THE  STORY  OF  BORLAND 


: 


.NET 


For  more  than  20  years,  Borland  has  been  accelerating 
application  development.  One  developer  at  a  time.  Today, 
we’re  accelerating  the  entire  development  and  deployment 
team  -  architects,  programmers,  testers,  implementers,  and 
managers.  Speed  and  agility  come  from  our  best-in-class 


itl  i/nlependeiit  ijjth  to  Miciosoft  NET 
ffl  III  Linur  development  SQltilions 
in  Java  '  development  solutions 


j 


I 

I 


.  t  ► 


products  seamlessly  integrated  in  tire  Borland  Suite  -  erasing 
technology  boundaries  that  prevent  people  from  working 
together.  No  platform  lock  in.  No  arbitrary  process.  Built  for 
tomorrow's  technology  infrastructure.  Today's  Borland.  Just  like 
yesterday's.  Only  faster,  yet.  Accelerate  your  team  today. 


speed.borland.com/l  01  5 
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27  niglitly  backup  scliedules. 


And  that's  just  one  office.  Monitor  and  manage  all  your  storage 
from  a  single  point  with  BrightStor  Portal. 


You’re  burning  the  midnight  oil.  So  is  your  storage  network.  And  the  only  things  growing  faster  than  your  storage  needs 
are  your  storage  problems.  The  solution?  BrightStor^  Portal.  A  breakthrough  in  enterprise-wide  storage  software  that  provides 
a  single  point  of  martagement.  With  a  flexible  portal  interface  that's  easy  to  use,  BnghtStor  Portal  gives  you  a  customized  view 
of  your  entire  storage  environment  so  you  can  respond  to  any  issue,  anytime,  anywhere.  Irvdepth  access  to  business-critical 
information  24  x  7  will  help  you  simplify  operations,  increase  productivity  and  maximize  cost  efficiency  across  your  enterprise. 
Hey,  with  more  and  more  issues  under  control,  you  may  actually  get  to  go  home.  ca.comAjrightstor/portal 


BrightStor  Storage  Solutions  ca)  Computer  Associates' 
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When  Yanking  the 
Mainframe  Isn’t  an  Option 

I  In  the  section:  Judith  Franklin  (left) 

turned  (be  legacy  system  at  Minnesota's  DMV  into 
»  ^  a  Web-enabled  application  that’s  lauded  for  its  con¬ 
venience  and  low  makeover  price.  Page  35 


NEWS 


inside  Trustworthy  Computing 

In  the  Technology  section:  How  is  Microsoft  doing 
with  its  Trustworthy  Computing  initiative?  Craig 
Mundie,  the  company's  senior  vice  president  and 
chief  technical  oMcer  of  advanced  strategies  and 
rir  policy,  gives  Computerworld  an  update.  Page  28 
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6  The  SEC  i$  probing  i2's 
finances  for  2000  and  2001, 
as  the  company  reports 
another  loss. 

6  IBM  expands  grid  computing 
off'erings  in  a  bid  to  attract 
corporate  users. 

7  Angry  IT  pros  say  the  H-IB 
visa  program  is  still  keeping 
Americans  unemployed. 

7  Doubts  about  ROi  are  slowing 
corporate  handheld  rollouts, 
say  analysts,  but  some  users 
report  fast  paybacks. 

8  Cisco  introduces  quality- 
of-service  functions  for  nine 
of  its  switches  and  routers  to 
create  networks  including 
VOIP  capabilities. 

10  EMC's  newest  high-end 

Symmetrix  dbk  arrays  prompt 
IBM  and  Hitachi  to  announce 
their  own  storage  upgrades. 

10  Two  vendors  team  with  EMC 

to  develop  e-mail  storage 
technology  to  help  financial 
services  firms  comply  with 
record-keeping  requirements. 

12  The  Department  of  Homeland 
Security  must  deal  with  lead¬ 
ership  turnover  while  retain¬ 
ing  private-sector  credibility. 

16  Computer  Associates  inte¬ 
grates  a  portal  server  with 
business  intelligence  tools  to 
reduce  integration  headaches. 

49  Niche  vendors  catch  users' 
eyes  at  Lotusphcre  with  add¬ 
ons  that  fill  gaps  in  Lotus  and 
Domino  functionality. 


23  Moving  Into  Mainframe  Linux. 

Mainframe  Linux  offers  clear 
advantages  to  corporations,  if 
you  choose  the  applications 
carefully. 

29  QuicfcStudy:  Session  Initiation 
f^otocol.  Learn  more  about 
this  signaling  protocol  for  In¬ 
ternet  conferencing,  telepho¬ 
ny.  messaging  and  other  net¬ 
worked  communications. 

30  Emerging  Technologies:  Task* 
Centric  Storage  Takes  the 
Stage,  intelligent,  inexpen¬ 
sive  ATA-based  storage  appli¬ 
ances  may  redefine  the  role  of 
the  application  server. 

32  Security  Manager's  Journal: 
Missing  PKl  Root  Key  Causes 
a  Panic  Attack.  When  the 
root  key  appears  to  have  been 
compromised.  Vince  Tuesday 
faces  the  task  of  rebuilding 
the  entire  public-key  infra¬ 
structure. 

MANA6EMENT 


OPINIONS 


37  How  To:  You  aren't  a  security 
expert  or  an  auditor,  yet 
you're  the  go-to  guy  for  the 
company’s  IT  security  audit. 
Here’s  how  to  get  started. 

38  Perk  Watch;  BMWs  Are  Out. 
Bowling  Is  In.  Some  compa¬ 
nies  on  ti^t  budgets  are  doing 
their  best  to  keep  IT  talent 

40  Steal  This  Idea:  Getting  the 
Right  Person  at  the  Right 
Time.  Dow  reduced  its  hiring 
cycle  rime  by  consolidating  its 
worldwide  recruiting  and  hir¬ 
ing  efforts  through  an  ASP. 


8  On  The  Mark:  Mark  Hall  in¬ 
terviews  a  slew  of  security 
experts  who  are  frustrated 
by  users'  ongoing  failure  to 
secure  their  systems. 

20  Maiyfran  Johnson  warns  IT 
pros  about  the  inevitable  fu¬ 
ture  in  which  more  of  their  in- 
house  jobs  will  be  outsourced. 

20  Pimm  Fox  claims  vendors  try 
to  clamp  down  on  free  speech 
by  users  through  licensing  re¬ 
strictions.  A  recent  court  case, 
he  says,  helps  to  right  that 
wrong. 

21  Thornton  May  thinks  IT  exec¬ 
utives  tell  the  truth  —  roost  of 
the  time  —  but  seldom  com¬ 
municate  it  effectively. 

34  Robert  L.  MHchell  says  com¬ 
peting  vendors  should  stop 
blaming  Microsoft  for  their 
troubles  and  pay  more  atten¬ 
tion  to  users'  needs  instead. 

SO  Frankly  Speaking:  Frank 
Hayes  smacks  CERT,  the  gov¬ 
ernment-funded  cyberthreat 
information  clearinghouse, 
for  passing  along  security 
alerts  to  bug  chasers'  com¬ 
petitors  and  potential  clients 
—  prior  to  public  release. 
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AT  DEADLINE 


Vendors  Promise 
Mobile  Jawa  Spec 

A  grouii  of  vonAor*  M  by  Sun  M- 
cmsysttm  Inc.  ditaM  «  road 
map  lor  croaUng  •  untfM  ipodfh 
cation  that  compaoias  cadd  use 
lo  dovolop  wirolaaa  Java  appica* 
tions.  Tha  ipoiv.  wNdi  bidiidts 
mort  than  a  dozan  maian  of  mo- 
bia  device*,  add  the  ipadflcaUon 
should  be  finishod  fay  nddyaar. 
Compftant  davicas  art  aapacled  to 
bo  avaiabla  starting  in  the  fad. 


IBM  Plots  App 
Server  Upgi^ 

IBM  announced  that  H’t  develop¬ 
ing  an  upgrade  of  Its  WebSphere 
appication  server  software  that 
wM  biduda  new  capaMMas  for 
managing  buainaas-procaas  worh- 
fhiwt.  The  t^grada  is  doe  by 
midyear  and  wM  induda  new  Web 
lervteea  hmcMonaity  that  Sun  is 
buMbig  Mo  tho  nait  varaion  of 
Its  Jsva  2  Enlsrprise  EdWon  tsch- 
nolegy,  said  Scott  Habner.  the 
djrector  of  WsbSphera  msilwtifig 
atBM. 


AMO  Revamps 
64-bit  Chip  Plans 

Advanced  Micro  Oavicas  bic.  said 
ipiMStolwnchRsBA-bfl 
Opisron  microprocassor  for 
servers  snd  workstations  in  ApriL 
Bill  ths  Siniyvals.  CsH.-hssad 
company  sddsd  that  Ks  Athlon  64 
chip  lor  doddop  PCs  hae  boon  de- 
layad  for  a  sseond  tbna.  Tha 
Addon  64.  which  also  is  ■  64-bfl 
dovico.  is  now  dus  for  ralsass  in 
Soptorabsr.AMOsMd. 


Short  Takes 

SUN  said  R  wfi  Mnouncs  Hs  plans 
toespaiMfthaiovolofWahiar- 
viesi  support  in  Java  this  wash 
bill  woaMnt  dhdooo  any  dalals. 
...THERtSTTTUTEFORMFORMA- 
TMMMFItASTIIUCTUREPROTEC- 
TXW,  a  voup  of  23  eoBsgK  and 
iB.raloi 
oU.S.t 
Klorcp 

Mas  to  bnaaio  spanWNQ  on 

cybarsacarily  raaaarch. 


SEC  Examines  i2’s  Books  as 
Vendor  Reports  Another  Loss 


Firm  plans  to  reaudit  2000, 2001  results 


ev  MAJtC  L.  80N0IMI 

SuppiY  cHAiN  software 
vendor  12  Technologies 
Inc.  last  week  reported 
its  fifth  straight  quar¬ 
terly  loss  and  confirmed  that 
the  U.S.  Securities  and  Ex¬ 
change  Commission  is  now 
probing  its  finances. 

The  Dallas-based  company 
said  the  SEC  has  0(>eDed  an  in¬ 
formal  inquiry  into  its  finan¬ 
cial  reporting  for  2000  and 
2001.  'TTie  SEC’s  decision  came 
after  i2  told  the  agency  about 
two  former  i2  executives’  alle¬ 
gations  of  accounting  irregu¬ 
larities. 

12  last  week  also  announced 
that  its  board  has  asked  audi¬ 
tor  Deloitte  &  Touche  LLP  to 
rcaudit  the  numbers  that  the 
company  reported  for  2000 
and  2001.  The  company  noted 
that  the  new  audit  could  im¬ 
pact  its  fourth-quarter  2002 
results,  which  it  described  as 
preliminary. 

“It  would  be  very  discourag¬ 
ing  and  disruptive  to  see  12 
lose  focus,"  said  Richard 
Scheerer,  vice  president  of  IT 


at  The  Clarks  Companies. 
North  America.  Clarks,  a 
shoemaker  in  Newton  Upper 
Falls.  Mass.,  has  implemented 
several  of  i2’s  order  manage¬ 
ment  and  supply  chain  plan¬ 
ning  applications. 

Scheerer  said  i2  hasn't  let 
him  down  so  far.  Bur  he  added 
that  he's  always  concerned 
about  the  viability  of  his  soft¬ 
ware  vendors,  and  he  empha¬ 
sized  the  need  for  i2  to  contin¬ 
ue  upgrading  its  product  line. 

On  the  other 
hand,  Gene 
Hunt,  chairman 
of  the  Atlanta- 
based  i2  User 
Group’s  board  of 
directors,  ap- 
plauded  the  firm’s  reaudit 
plans.  “We  think  this  indicates 
a  setLse  of  openness  and  confi¬ 
dence  about  the  business." 
Hunt  said  in  a  letter  to  i2's 
management. 

Hunt,  who  is  a  member  of 
the  technical  staff  at  Texas  In¬ 
struments  Inc.  in  Plano.  Texas, 
added  in  the  letter  that  i2's 
employees  “are  demonstrating 


THE  VEW  FROM  Q 

(XO  Sanjrv  Sdhu  taHc  about  i?s 
problems  and  efforts  to  turn  it  around: 
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a  desire  to  maintain  and  im¬ 
prove  customer  satisfaction." 

“While  this  could  defocus 
i2,  it  should  have  little  effect 
on  the  user  base."  said  Gartner 
Inc.  analyst  Karen  Peterson. 
She  added  that  the  reaudit  and 
SEC  disclosures  “masked  the 
fact  that  12  actually  did  better 
than  expected  last  quarter." 

12  CEO  Sanjiv  Sidhu  down¬ 
played  the  chances  that  the 
company's  financial  picture 
would  be  radically  changed  by 
the  new  audit.  Referring  to  the 
preliminary  fourth-quarter  re¬ 
sults,  Sidhu  said  i2’s  manage¬ 
ment  has  “basic 
comfort  in  their 
stability." 

12  announced 
a  fourth-quarter 
loss  of  S12.4  mil- 
lion,  which  in¬ 
cluded  a  $23  million  restruc¬ 
turing  charge  to  cover  the  cost 
of  additional  layof!^  Revenue 
totaled  SU9.9  million,  down 
from  $193.9  million  reported 
for  the  fourth  quarter  of  2001. 

It  would  be  surprising  if  i2 
users  didn’t  have  any  concerns 
about  the  current  situation, 
said  Andrew  BaU,  a  London- 
based  analyst  at  Frost  &  Sulli¬ 


van  Inc.  Ball  added  that  the 
problems  at  i2  stem  from  the 
company's  behavior  during 
the  boom  years  of  IT  industry 
growth.  *12  flew  too  close  to 
the  sun  during  the  good  times 
and  is  now.  like  Icarus,  paying 
the  consequences."  be  said.  I 


IBM  Targets  Corporate 
Users  With  Grid  Computing 


WV  JAIKUMAH  VIJAVAN 

IBM  last  week  announced  an 
initiative  to  expand  its  grid 
computii^  offerings  from  its 
traditional  niche  in  academia 
and  research  to  commercial 
enterprises. 

Under  the  plan,  IBM  will 
deliver  10  separate  grid  com¬ 
puting  bundles  optimized  for 
companies  in  five  vertical  in¬ 
dustries. 

For  financial  services  users, 
IBM  is  offering  a  trading  ana¬ 
lytics  acceleration  grid  and  an 
IT  optimization  grid  to  help 
exploit  underutilized  comput¬ 
ing  and  storage  resources. 


Similarly,  for  users  in  the 
life  sciences  space.  IBM  will 
offer  grid  technologies  that 
can  dramatically  increase  the 
number  of  calculations  proc¬ 
essed  during  drug  research. 
And  an  engineering  design 
grid  is  aimed  at  improving  re¬ 
source  utilization  for  automo¬ 
tive  companies. 

The  goal  is  to  let  new  users 
take  advantage  of  the  same 
collaborative  computing  func¬ 
tionality  that  grid  computing 
has  delivered  to  others  for 
several  years,  said  Tom  Hawk, 
general  manager  of  IBM's  grid 
computing  business. 


“What  we  have  done  is  to 
take  preconfigured  IBM  soft¬ 
ware.  middleware,  hardware 
and  integration  functionality 
and  box  it  up"  for  use  in  vari¬ 
ous  industries.  Hawk  said. 

Lower  Cost  of  Entry 

Butterfly.net  Inc.,  a  provider  of 
multiplayer  online  [*C  con¬ 
sole  and  mobile  games,  has 
based  its  network  on  IBM  grid 
computing  technologies. 

Butterfly  is  using  the  open- 
source  Globus  Toolkit,  togeth¬ 
er  with  a  grid-enabled  version 
of  IBM's  WebSphere  applica¬ 
tion  server  and  some  in-house 
software,  to  link  more  than 
500  IBM  blade  servers  across 
multiple  cities. 

The  company  first  consid¬ 
ered  using  large  servers  and 


clustering  technolo^es.  But 
the  grid  approach  allows  for 
better  resource  utilization  and 
more  flexibility  in  allocating 
resources  to  applications  as 
they  are  needed,  said  David 
Levine.  CEO  and  founder  of 
the  Martinsburg,  WVa.,  firm. 

“The  cost  of  entry  is  also  a 
lot  lower  because  you  can 
start  with  commodity  sys¬ 
tems."  Levine  said.  “I  can  see 
where  an  approach  like  this 
might  make  sense"  in  the  mar¬ 
kets  that  IBM  is  now  targeting. 

As  part  of  the  initiative,  IBM 
last  week  announced  that  it 
will  work  with  two  grid  mid¬ 
dleware  vendors  —  Platform 
Computing  Inc  in  Markham. 
Ontario,  and  DataSynapsc  Inc 
in  New  York  —  to  deploy 
grids  to  enterprises.  I 


H-1B  Visa  Count  Down, 

Jobless  protesting  program  despite  a 
decrease  in  the  number  of  H-lBs  issued 


BY  PATItICK  THIBODEAU 

WASHINCTON 

In  a  year  when  the  U3.  began 
what  has  been  characterized 
as  a  jobless  recovery,  immigra- 
tioo  authorities  issued  79J00 
H'lB  visas,  a  sharp  decline 
from  previous  years.  But  that’s 
cold  comfort  for  displaced 
workers. 

The  number  of  H-IB  visas 
issued  in  the  fiscal  year  that 
ended  Sept.  30  was  well  under 
the  195,000  cap  set  by  Con¬ 
gress.  and  less  than  half  the 
163,600  issued  by  the  U.S.  Im¬ 
migration  and  Naturalization 
Service  in  fiscal  2001. 

Supporters  of  the  H-IB  pro¬ 
gram  say  the  decline  indicates 
that  the  program  is  working,  is 
self-regulating  and  isn't  being 
abused  by  employers.  H-IB 
visas  are  used  to  bring  skilled 
workers,  many  of  them  IT  pro¬ 
fessionals.  into  the  U,S.  Tb^ 
are  good  for  up  to  six  years. 


But  opponents,  who  are  in¬ 
creasingly  coalescing  into 
grass-roots  organizations,  say 
the  H-lfi  numbers  tell  only 
part  of  the  story.  They  con¬ 
tend  that  employers  are  still 
bringing  in  large  numbers  of 
forei^  workers,  but  they're 
doing  so  under  programs  such 
as  the  L-1  visa,  which  is  used 
for  employees  who  are  trans¬ 
ferred  by  mttltinational  firms 
to  work  in  the  U.S. 

Much  attention,  however, 
will  be  focused  on  the  H-IB 
cap,  which  %vill  remain  at 


Anger  Up 

195,000  this  year  but  is  set  to 
decline  in  fiscal  2004  to 
65,000. 

Harris  Miller,  president  of 
the  Information  Technology 
AssociatioD  of  America  in  Ar¬ 
lington.  Va.^  said  he  doesn't 
know  whether  his  industry 
group  will  fight  the  decrease 
to  65,000.  “It  will  be  hard  to 
convince  Congress"  of  the 
need  for  a  higher  cap  “if  you 
have  no  recovery  or  a  jobless 
recovery.”  be  said. 

Among  the  grass-roots  op¬ 
position  organizers  is  Peter 
Bennett  a  Danville.  Calif.,  res¬ 
ident  who  operates  a  Web  site 
called  NbMoreHlb.com.  Ac¬ 
cording  to  Bennett  man>‘  dis¬ 


placed  workers  are  ready  to 
act  if  Congress  moves  to  in¬ 
crease  the  cap.  “It  will  trigger 
an  onslaught  of  calls"  to  law¬ 
makers,  he  said. 

5.1%  Unemployment  Rate 

One  organization  that  has 
been  critical  of  the  H-IB  pro¬ 
gram  is  the  lEEE-USA.  a  unit 
of  the  Institute  of  Electrical 
and  Electronics  Engineers  Inc. 

According  to  the  Bureau  of 
Labor  Statistics,  there  are 
94.000  unemployed  computer 
scientists  in  the  U5.  That's  an 
unemployment  rate  of  S.14t>  in 
that  field,  said  George  F.  Mc¬ 
Clure.  who  chairs  the  IEEE's 
Career  and  Workforce  Policy 
Committee.  H-IB  visa  holders 
“are  all  competing  for  the 
same  small  pot  of  jobs,  and  we 
don’t  think  that  is  a  good 
thing."  he  said. 

Eight  weeks  ago,  some  un¬ 
employed  IT  woikers  in  Con¬ 
necticut  formed  The  Organi¬ 
zation  for  the  Ri^ts  of  Ameri¬ 
can  Workers.  It  started  as  an 
informal  networking  effort, 
but  an  orgaruzation^  meeting 
required  a  hall  to  accommo¬ 
date  65  attendees.  The  group 


»  We  have 
members 
that  are  about  to 
lose  their  homes. 
We  have  to  make 
the  public  aware  of 
what's  going  on. 

JOHN  BAUMAN,  V>CE  PRESiOENT. 

THE  ORGAMZATKM  FOR  THE  RIOHTS 
OF  AMERtCAN  WORKERS 

now  has  200  members. 

“We  have  members  that  arc 
about  CO  lose  their  homes,' 
said  John  Bauman,  vice  presi¬ 
dent  of  the  Meriden-based  or¬ 
ganization.  “We  have  to  make 
the  public  aware  of  what's  go¬ 
ing  on." 

Nate  VialL  a  Des  Moines, 
lowa-based  recruiter  who  spe¬ 
cializes  in  finding  candidates 
for  IBM  iSeries  application  de¬ 
velopment.  said  that  although 
there's  no  shortage  of  quali¬ 
fied  U.S.  workers  to  fill  those 
jobs,  be  bas  seen  US.  workers 
lose  out  to  H-IB  visa  holders. 
“It's  always  about  the  money," 
said  \rtall.  I 


Analysts  Say  Doubts  About  ROI  Are 
Slowing  Corporate  Handheld  Rollouts 

Mobile  device  sales  drop  off,  although 
some  users  are  reporting  fest  paybacks 


BVBOB  BREWIM 

Vendors  of  handheld  devices 
had  “dismal"  sales  last  year, 
with  worldwide  product  ship¬ 
ments  dropping  9.1%  from 
their  2001  l^eL  according  to  a 
report  r^eased  last  wedc  by 
Dataquest  Inc. 

Th^  finding  dovetails  with 
a  report  on  the  handheld  mar¬ 
ket  released  in  December  by 
Framingham.  Mass.-based 
IDC  which  estimated  that 
sales  of  the  devices  in  2002 
would  be  down  2.1%  on  a  year- 
over-year  basis.  Dataquest  and 
IDC  analysts  both  said  that 
slower  rates  of  adoption  by 
corporate  users  are  hurting 
the  ODce-hot  handheld  market 

Todd  Kurt,  an  analyst  at  San 
Jose-based  Dataqtiest  estimat¬ 


ed  that  more  than  70%  of  the 
handhelds  sold  last  year  were 
bought  by  consumers.  The 
corporate  market  stagnated 
due  to  the  weak  economy  and 
a  perception  among  users  that 
handhelds  “are  not  yet  capable 
of  delivering  sufficient  return 
on  investment"  be  said. 

Making  the  Effort 

However,  some  experienced 
users  disputed  Kurt's  take  on 
ROI  and  said  that  if  imple¬ 
mented  the  right  way.  mobile 
devices  can  have  a  quick  and 
continuing  payoff  in  corporate 
settings.  But  doing  it  right  can 
take  some  work,  they  added. 

Andy  Johnson,  general  man¬ 
ager  of  AEX IXC,  a  Phoenix- 
based  financial  courier  service 


that  operates  in  100  cities  in 
seven  Southwestern  states, 
faulted  handheld  vendors  and 
their  software  partners  for  not 
developing  applications  that 
can  be  easily  adopted  by  vari¬ 
ous  vertical  industries. 

AEX  has  equipped  54  of  its 
couriers  with  ruggedized 
handheld  devices  made  by 
Symbol  Technologies  Inc.  in 
Holtsville,  N.Y..  as  well  as  in- 
truck  Global  Positioning  Sys¬ 
tem  receivers  and  mobile  ap- 
plicacions  developed  by  At 
Road  Inc.  in  Fremont,  Calif. 

Johnson  said  AEX  has  got¬ 
ten  a  significant  return  in 
terms  of  increased  productivi¬ 
ty  from  the  technology.  But  he 
a^ed  that  although  At  Road 
provided  AEX  with  a  tem¬ 
plate.  the  software  needed  to 
be  modified  to  meet  its  needs. 

Tom  Allen,  At  Road's  chief 
operating  officer,  said  some  IT 


managers  are  reluctant  to  em¬ 
brace  mobile  devices  because 
of  the  cost  and  complexity  of 
hooking  them  into  corporate 
systems.  Moreover,  many 
users  are  simply  confused  by 
ail  the  rival  devices  and  oper¬ 
ating  systems  on  the  market, 
be  said 

Rob  McClellan,  director  of 
supply  chain  managemem  and 
e-services  at  Taylor  Made  Golf 
Co.  in  Carisbad.  CaliL,  said 
he’s  in  the  process  of  deploy¬ 
ing  Symbol  handhelds  to  an 
85-person  sales  force.  The  goal 
of  the  rollout  is  to  increase 
productivity  and  improve  in¬ 
ventory  managemem  at  the 
maker  of  golfing  equipment 
and  apparel 

McOellan  said  salespeople 
who  already  have  the  hand¬ 
helds  use  their  bar-coding  ca¬ 
pabilities  to  track  inventories 
at  golf  pro  shops  and  equip¬ 
ment  stores.  Automating  that 
process  alone  saves  an  hour 
per  woricer  eadi  day,  he  said 
And  since  the  sales  force  can 
now  transmit  inventory  data 


electronically  iimead  of  faxing 
it,  McClellan  said  be  is  receiv¬ 
ing  mformation  that  be  needs 
to  forecast  buying  trends  on  a 
more  timely  basts.  I 
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Vendors  Promise 
Mobile  Java  Spec 

A  group  of  vendors  led  by  Sun  Mi* 
crosystems  Inc.  detailed  a  road 
map  for  creating  a  unified  spectfi* 
cation  that  companies  could  use 
to  develop  wireless  Java  appiica- 
Uons.  The  group,  which  includes 
more  than  a  donn  makers  of  mo* 
bile  devices,  said  the  specification 
should  be  finished  by  midyear. 
Compliant  devices  are  expected  to 
be  available  starting  in  the  fail. 


SEC  Examines  i2’s  Books  as 
Vendor  Reports  Another  Loss 


Finn  plans  to  rcaudit  2000, 2(X)1  results 


IBM  Plots  App 
Server  Upgrade 

IBM  announced  that  it’s  develop¬ 
ing  an  upgrade  of  Hs  WebSphere 
application  server  software  that 
will  include  new  capabilities  for 
managing  business-process  work¬ 
flows.  The  upgrade  is  due  by 
midyear  and  will  include  new  Web 
services  functionality  that  Sun  is 
building  into  the  next  version  of 
its  Java  2  Enterprise  Edition  tech¬ 
nology,  said  Scott  Habner.  the 
director  of  WebSphere  marketing 
at  AM. 

AMD  Revamps 
64-bit  Chip  Plans 

Advanced  Mcro  Oevices  Inc.  said 
it  plans  to  launch  its  64-bit 
Opteron  microprocessor  for 
servers  and  workstations  te  AprH. 
But  the  Sunnyvale.  Calif. -based 
company  adiM  that  its  Athlon  64 
chip  for  deddop  PCs  has  been  de¬ 
layed  for  a  second  time.  The 
A^km  64.  which  also  is  a  64‘bft 
device,  is  now  due  for  release  in 
September.  AMD  said. 

Short  Tak^ 

SUN  said  it  vnl  announce  its  plans 
to  expand  the  level  of  Web  ser¬ 
vices  support  in  Java  this  week 
but  wouldn’t  disclose  any  details. 
...  THE  INSTfTUTE  FOR  INFORMA 
TION  INFRASTRUCTURE  PROTEC¬ 
TION,  a  group  of  23  colleges  and 
research  laboratories,  released  a 
report  caMng  for  the  U.S.  govern¬ 
ment  and  prfvate-secbir  compa¬ 
nies  to  increase  spending  on 
cybersecuritv  research. 


BV  MARC  SOHOINt 

SI  ri-iY  •  MAIN  wftw.irc 

vendor  i2  Technologies 
Inc.  last  week  reported 
its  fifth  straight  quar¬ 
terly  loss  and  confirmed  that 
the  U.S.  Securities  and  Ex- 
ch.inge  Commission  is  now 
probing  its  finances. 

The  Dallas-based  company 
said  the  SEC  has  opened  an  in¬ 
formal  inquiry  into  its  finan¬ 
cial  reporting  for  2000  and 
2001.  The  SEC’s  decision  came 
after  i2  told  the  agency  about 
two  former  i2  executives'  alle- 
gation.s  of  accounting  irregu¬ 
larities. 

12  last  week  also  announced 
that  its  board  has  asked  audi¬ 
tor  Deloitte  &  Touche  LLP  to 
reaudit  the  numbers  that  (he 
company  reported  for  2000 
and  2001.  The  company  noted 
(hat  the  new  audit  could  im¬ 
pact  it.s  fourth-quarter  2002 
results,  w'hich  it  de.scrihed  as 
preliminary. 

"It  would  be  very  discourag¬ 
ing  and  disruptive  to  sec  i2 
lose  focus,"  said  Richard 
Scheercr.  vice  president  of  IT 


at  The  Clarks  Companies. 
North  America.  Clarks,  a 
shocm.tkcr  in  Newton  Upper 
Falls.  Mass.,  has  implemented 
several  of  i2’s  order  manage¬ 
ment  and  supply  chain  plan¬ 
ning  applications. 

Scheercr  said  i2  hasn't  let 
him  down  so  far.  But  he  added 
that  he's  always  concerned 
about  the  viability  of  his  soft¬ 
ware  vendors,  and  he  empha¬ 
sized  the  need  for  12  to  contin¬ 
ue  upgrading  its  product  line. 

On  the  other 
hand.  Gene 
Hunt,  chairman 
of  the  Atlanta- 
ba.scd  i2  User 
Group's  board  of 
directors,  ap¬ 
plauded  the  firm's  reaudit 
plans.  “We  think  this  indicates 
a  sense  of  openness  and  confi¬ 
dence  about  the  business." 
Hunt  said  in  a  letter  to  i2's 
management. 

Hunt,  who  is  a  member  of 
the  technical  staff  at  Texas  In¬ 
struments  Inc.  in  Plano.  Texas, 
added  in  the  letter  that  t2's 
employees  “arc  demonstrating 


THE  VIEW  FROM  12 

CEO  San)iv  Sidhu  talks  about  i2‘s 
problems  and  ettorts  Id  turn  it  around 
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a  desire  to  maintain  and  im¬ 
prove  customer  satisfaction." 

"While  ibis  could  defocus 
i2.  it  should  have  little  effect 
on  the  user  base."  said  Gartner 
Inc.  analyst  Karen  Peterson. 
She  added  that  the  reaudit  and 
SEC  disclosures  “masked  the 
fact  that  12  actually  did  better 
than  expected  last  quarter.’’ 

12  CEO  Sanjiv  Sidhu  down¬ 
played  the  chances  that  the 
company’s  financial  picture 
would  be  radically  changed  by 
the  new  audit.  Referring  to  the 
preliminary’  fourth-quarter  rc- 
suEs.  Sidhu  said  i2's  manage¬ 
ment  has  "basic 
comfort  in  their 
stability." 

12  announced 
a  fourth-quarter 
loss  of  S12.4  mil- 
Hon.  which  in¬ 
cluded  a  S23  million  restruc¬ 
turing  charge  to  cover  the  cost 
of  additional  layoffs.  Revenue 
totaled  S119.9  million,  down 
from  Sl‘W.9  million  reported 
for  the  fourth  quarter  of  2001. 

It  would  be  surprising  if  i2 
users  didn’t  have  any  concerns 
about  the  current  situation, 
said  Andrew  Ball,  a  London- 
based  analyst  at  Frost  6c  Sulli- 
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van  Inc.  Ball  added  that  the 
problems  at  i2  stem  from  (he 
company's  behavior  during 
the  boom  years  of  IT  industry 
growth.  "12  flew  too  close  to 
the  sun  during  the  good  times 
and  is  now.  like  Icarus,  paying 
the  con.sequences."  he  said.  I 


IBM  Targets  Corporate 
Users  With  Grid  Computing 


BY  JAIHUMAR  VIJAVAM 

IBM  last  week  announced  an 
initiative  to  expand  its  grid 
computing  offerings  from  its 
traditional  niche  in  academia 
and  research  to  commercial 
enterprises. 

Under  the  plan.  IBM  will 
deliver  10  separate  grid  com¬ 
puting  bundles  optimized  for 
companies  in  five  vertical  in¬ 
dustries. 

For  financial  services  users. 
IBM  is  offering  a  trading  ana¬ 
lytics  acceleration  grid  and  an 
IT  optimization  grid  to  help 
exploit  underutilized  comput¬ 
ing  and  storage  resources. 


Similarly,  for  users  in  tbc 
life  sciences  space.  IBM  wnl) 
offer  grid  technologies  that 
can  dramatically  increase  the 
number  of  calculations  proc¬ 
essed  during  drug  research. 
And  an  engineering  design 
grid  is  aimed  at  improving  re¬ 
source  utilization  for  automo¬ 
tive  companies. 

I'hc  goal  is  to  let  new  users 
take  advantage  of  the  same 
collaborative  computing  func¬ 
tionality  that  grid  computing 
has  deliveK'd  to  others  for 
several  years,  said  Tom  Hawk, 
general  manager  of  IBM’s  grid 
computing  business. 


"What  we  have  done  is  to 
take  preconfigured  IBM  soft¬ 
ware.  middleware,  hardware 
and  integration  functionality 
and  box  it  up"  for  use  in  vari¬ 
ous  industries.  liawk  said. 

Lower  Cost  of  Entry 

Butterfly.net  Inc.,  a  provider  of 
multiplayer  online  PC.  con¬ 
sole  and  mt^ilc  games,  has 
based  its  network  on  IBM  grid 
computing  technologies. 

Buitcrtly  is  using  the  open- 
source  Globus  Toolkit,  togeth¬ 
er  with  a  grid-enabled  version 
of  IBM's  WebSphere  applica¬ 
tion  server  and  some  in-house 
software,  to  link  more  than 
500  IBM  blade  servers  across 
multiple  cities. 

Tbc  company  first  consid¬ 
ered  using  large  servers  and 


clustering  technologies.  But 
the  grid  approach  allows  for 
better  resource  utilization  and 
more  flexibility  in  allocating 
resources  to  applications  as 
they  are  needed,  said  David 
Levine,  CEO  and  founder  of 
the  Martinsburg,  WVa..  firm. 

“The  cost  of  entry  is  .tlso  a 
lot  lower  because  you  can 
start  with  commodity  sys¬ 
tems."  Levine  said.  “I  can  see 
where  an  approach  like  this 
might  make  sense"  in  the  mar¬ 
kets  that  IBM  is  now  targeting. 

As  part  of  the  initiative.  IBM 
last  week  announced  that  it 
w'ill  work  with  two  grid  mid¬ 
dleware  vendors  —  Platform 
Computing  Inc.  in  Markham. 
Ontario,  and  DataSynapse  Inc. 
in  New  York  —  to  deploy 
grids  in  enterprises,  fe 
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H-1B  Visa  Count  Down,  Anger  Up 


Jobless  protesting  program  despite  a 
decrease  in  the  number  of  H-lBs  issued 


BV  PATRICK  THIBODEAU 

WASHINGTON 

In  a  year  when  the  U.S.  began 
what  has  been  characterized 
as  a  jobless  recovery,  immigra¬ 
tion  authorities  issued  79.100 
H-IB  visas,  a  sharp  decline 
from  prcN'ious  years.  But  that's 
cold  comfort  for  displaced 
workers. 

TTie  number  of  H-IB  visas 
issued  in  the  fiscal  year  that 
ended  Sept.  30  was  well  under 
the  195.000  cap  set  by  Con¬ 
gress.  and  less  than  half  the 
163,600  issued  by  the  U.S.  Im¬ 
migration  and  Naturalization 
Service  in  fiscal  2001. 

Supporters  of  the  H-IB  pro¬ 
gram  say  the  decline  indicates 
that  the  program  is  working,  is 
self-regulating  and  isn't  being 
abused  by  employers.  H-IB 
visas  arc  used  to  bring  skilled 
workers,  many  of  them  IT  pro¬ 
fessionals.  into  the  U.S.  They 
are  good  for  up  to  six  years. 


But  opponents,  who  are  in¬ 
creasingly  coalescing  into 
grass-roots  organizations,  say 
the  H-IB  numbers  tell  only 
part  of  the  story.  They  con¬ 
tend  that  employers  are  still 
bringing  in  large  numbers  of 
foreign  workers,  but  they’re 
doing  so  under  programs  such 
as  the  t'l  visa,  which  is  used 
for  employees  who  are  trans¬ 
ferred  by  multinational  firms 
to  work  in  the  U.S. 

Much  attention,  however, 
will  be  focused  on  the  H-IB 
cap.  ivhich  will  remain  at 


Beyond  the  Cap 

Visa  cap 
Visas  issued 

Visas  issued  in 
exempt  caleoory* 


195.000  this  year  but  is  set  to 
decline  in  fiscal  2004  to 
65.000. 

Harris  Miller,  president  of 
the  Information  Technology 
Association  of  America  in  Ar¬ 
lington.  Va..  said  he  doesn't 
know  whether  his  industry 
group  will  tight  the  decrease 
to  65.000.  "It  will  be  hard  to 
convince  Congress”  of  the 
need  for  a  higher  cap  "if  you 
have  no  recovery  or  a  jobless 
recovery."  he  said. 

Among  the  grass-roots  op¬ 
position  organizers  is  Peter 
Bennett,  a  Danville.  Calif.,  res¬ 
ident  who  operates  a  Web  site 
called  NoMoreHlb.com.  Ac¬ 
cording  to  Bennett,  many  dis¬ 


Fiscal 
2000  1 

Fiscal 

2001 

195,000 

195.000 

163,000 

79,100 

342,000 

215.000 
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placed  workers  are  read>’  to 
act  if  Congress  moves  to  in¬ 
crease  the  cap.  "It  will  trigger 
an  onslaught  of  calls”  to  law¬ 
makers.  he  said. 

5.1%  Unemployment  Rate 

One  organization  that  has 
been  critical  of  the  H-IB  pro¬ 
gram  is  the  lEEE-USA.  a  unit 
of  the  Institute  of  Electrical 
and  Electronics  Engineers  Inc. 

According  to  the  Bureau  of 
Labor  Statistics,  there  arc 
94X)00  unemployed  computer 
scientists  in  the  U.S.  Thai's  an 
unemployment  rate  of  in 
that  field,  said  George  F.  Mc¬ 
Clure.  who  chairs  the  IEEE's 
Career  and  Workforce  Policy 
Committee.  H-IB  visa  holders 
“are  all  competing  for  the 
same  small  pot  of  jobs,  and  we 
don't  think  that  U  a  giK>d 
thing.”  he  said. 

Eight  weeks  ago.  some  un¬ 
employed  IT  workers  in  Con¬ 
necticut  formed  The  Organi¬ 
zation  for  the  Rights  of  Ameri¬ 
can  Workers.  It  started  as  an 
informal  networking  cITort, 
but  an  organizational  mectii^ 
required  a  hall  to  accommo¬ 
date  65  attendees.  The  group 


MWe  have 
members 
that  are  about  to 
lose  their  homes. 
We  have  to  make 
the  public  aware  of 
what's  going  on. 

JOHN  BAUMAN.  VICE  PRlSlDENT 
TKf  OftOANI/ATlON  FOR  THE  RIGHTS 
OF  AMERICAN  WORKERS 

ntTw  has  200  members. 

“We  have  members  that  are 
about  to  lose  their  homes,” 
said  lohn  Bauman,  vice  presi¬ 
dent  of  the  Meriden-based  or- 
1  ganization.  “We  have  to  make 
the  public  aware  of  what's  go¬ 
ing  on.” 

Nate  V’iall.  a  Des  Moines.i 
lowa-bascd  recruiter  who  spe- 
I  cializes  in  finding  candidates 
for  IBM  iSeries  application  de¬ 
velopment.  said  that  although 
there's  no  shortage  of  quali- 
I  fied  U.S.  workers  to  fill  (hose 
j  jobs,  he  has  seen  U.S.  workers 
'<  lose  out  to  H-IB  visa  holders, 
j  "It's  alwa>’s  about  the  moncs’.” 

'  saidViall.l 


Analysts  Say  Doubts  About  ROI  Are 
Slowing  Corporate  Handheld  Rollouts 

Mobile  device  sales  drop  off,  although 
some  users  are  reporting  fast  playbacks 


BY  BOBBNEWIN 

Vendors  of  handheld  devices 
had  "dismal”  sales  last  year, 
with  worldwide  product  ship¬ 
ments  dropping  9.1%  from 
(heir  2001  level,  according  to  a 
report  released  last  week  by 
Dataquest  Inc. 

That  finding  dovetails  with 
a  report  on  the  handheld  mar¬ 
ket  released  in  December  by 
Framingham.  Mass.-based 
IDC.  which  estimated  that 
sales  of  the  devices  in  2002 
would  be  down  2.1%  on  a  year- 
over-year  basis.  Dataquest  and 
IDC  analysts  both  said  that 
slower  rates  of  adoption  by 
corporate  users  arc  hurting 
the  oncc-hot  handheld  market. 

Todd  Kurt,  an  analyst  at  San 
jose-based  Dataquest.  estimat¬ 


ed  that  more  than  70%  of  the 
handhelds  sold  last  year  were 
bought  by  consumers.  The 
corporate  market  stagnated 
due  to  the  weak  economy  and 
a  perception  among  users  that 
handhelds  "are  not  yet  capable 
of  delivering  sufficient  return 
on  investment.”  he  said. 

Making  the  Effort 

However,  some  experienced 
users  disputed  Kurt's  take  on 
ROI  and  said  that  if  imple¬ 
mented  the  right  way.  mobile 
devices  can  Ime  a  quick  and 
continuing  payoff  in  corporate 
settings.  But  doing  it  right  can 
take  some  work,  they  added. 

Andy  Johnson,  general  man¬ 
ager  of  AEX  LLC  a  Phoenix- 
based  financial  courier  service 


that  operates  in  100  cities  in 
seven  Southwestern  states, 
faulted  handheld  vendors  and 
their  software  partners  for  not 
developing  applications  that 
can  be  easily  adopted  by  \'ari* 
ous  vertical  industries. 

AEX  has  equipped  54  of  its 
couriers  with  ruggedized 
handheld  devices  made  by 
Symbol  Technologies  Inc.  in 
HolisviUe.  N.Y..  as  well  as  in¬ 
truck  Global  Positioning  Sys¬ 
tem  receivers  and  mobile  ap¬ 
plications  developed  by  At 
Road  Inc.  in  Fremont.  Calif. 

Johnson  said  AEX  has  got¬ 
ten  a  significant  return  in 
terms  of  increased  productivi¬ 
ty  from  the  technology.  But  he 
added  that  although  At  Road 
provided  AEX  with  a  unn- 
plate.  the  software  needed  to 
be  modified  to  meet  its  needs. 

Tom  Allen.  At  Road’s  chief 
operating  officer,  said  some  IT 


managers  are  reluctant  to  em¬ 
brace  mobile  devices  because 
of  the  cost  and  complexity  of 
hooking  them  into  corporate 
systems.  Moreover,  many 
users  are  simply  confused  by 
all  the  rival  devices  and  oper¬ 
ating  systems  on  the  market, 
be  said. 

Rob  McClellan,  director  of 
.supply  chain  management  and 
e*services  at  Taylor  Made  Golf 
iZo.  in  Carlsbad.  ColiC.  said 
be‘s  in  the  process  ofdeplo)  - 
ing  S>'mbol  handhelds  to  an 
B5-pcrson  sales  force.  The  goal 
of  (he  rollout  is  to  increase 
productivity  and  improve  in¬ 
ventory  marugement  at  the 
maker  of  golfing  equipment 
and  apparel 

McClellan  said  salespeople 
who  already  have  the  hand¬ 
helds  use  their  bar-coding  ca¬ 
pabilities  to  track  inventories 
at  golf  pro  shops  and  equip¬ 
ment  stores.  Automating  that 
process  alone  saves  an  hour 
per  worker  each  day.  he  said. 
And  since  the  sales  force  can 
r>ow  transmit  inv’cntory  data 


clcccmnically  instead  of  faxing 
it.  McClellan  said  be  is  receiv¬ 
ing  information  that  be  needs 
tu  forecast  buying  trends  on  a 
more  timely  basis.  B 
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HP,  Delphi  Expand 
SAP  S^vices  Deal 

Hawtetl'Packard  Co.  saki  tt  has 
expanded  a  tochnology  and  fT 
scrvicae  deal  under  wMch  H  runs 
SAP  AG's  busineis  appdcations 
for  DeipN  Corp..  a  Troy.  Mich.' 
based  suppler  of  automotive 
parts.  Under  a  new  live  year 
agreement.  SAP  systems  for 
Oelphrs  operMions  in  North 
America  and  Singapore  MdU  be 
consolidated  on  HP  servers  and 
managed  from  the  vendor’s 
Toronto  data  center. 


Alcan  Outsources 
Operations  to  CGI 

Alcan  IhCm  a  Mentreal-based 
maker  of  aluminum  and  packag' 
kig  matortalB,  said  h  has  finaH 
Ized  a  Nl-year  IT  ootsourdng 
deal  valued  at  about  SnO  miliion 
(U.S.)  wKb  CGI  Group  Inc.  CGI, 
also  in  Montreal,  eril  take  over 
manegemant  of  Alcan's  halp 
dtsk  operations,  data  centers 
end  messaging  system.  Ihe  tern 
companies  had  announced  a  tan* 
tahve  ^irsemerrt  Last  July. 


IBM,  British  Airline 
Agree  on  Pact 

BM  and  Luton,  Engtand-based 
Britannia  Avways  Ltd.  said 
they're  developing  a  system  that 
wM  use  BITS  TMnkPadX24 
nolabook  PCs  and  a  wireltss 
network  to  alactronicaly  stors 
fight  manuals  and  safety  infor¬ 
mation  in  airplane  cockpits.  The 
data  wM  be  updated  via  the 
wireleae  Ml  Ihe  deal  is  worth 
about  St6milion.BM  said. 


Short  Takes 

European  Union  officials  said 
MKftOSOFT  COPP.  has  agreed  to 
mahi  "substantial  chBnoBs"lo 
ito  .Nat  Passport  identity  man¬ 
agement  software  in  order  to 
conform  to  European  data  priva¬ 
cy  laws. ...  SAP  dropped  tiw 
dot-com  rater anco  from  its  appli¬ 
cations  product  Ine.  which  is 
now  calod  mySAP  Business 
Suite. 


MARK  HALL  •  ON  THE  MARK 

rr  Users  Botch 
Security  Again . . . 

. . .  and  again.  The  Slammer  worm  being  the  latest  in  a  long  history  of 
utterly  incompetent  computer  security  procedures  by  IT  systems  man¬ 
agers.  Blame  software  developers,  if  it  makes  you  feel  better.  But  IT 
buyers  are  the  major  problem.  Security  vendors  would  despair  at  the 
consistent  foolishness  of  users  if  they  didn’t  make  so  much  money 
from  fixing  the  problems  —  usually  after  the  fact.  “IT  buyers  have 
tremendous  control  over  the  quality  of  security  in  the  products 

•  Robert  Handler,  an  analyst  at  Meta 
Croup,  thinks  there  has  b^n  a  "cdlpctive 
consdousnass  change  sinca  G/IT  on  design- 


they  buy.  but  they  don't  use  it."  argues 
ferry  Brady,  chief  technology  ofTiccr  at 
Guardent  Inc.  in  Waltham,  Mass.  Instead, 
he  says,  alt  users  ask  of  software  vendors 
is  that  the  products  be  quick  to  market, 
compatible  with  the  old  stuff  and  cheap. 
WbR.  you  gat  what  you  pay  for.  Brady's  com¬ 
pany  otters  consultation  and  managed  se¬ 
curity  services  to  compa¬ 
nies  that,  by  and  large, 
have  already  been  burned 
by  a  costly  security 
breach.  He  says  packaged 
software  is  bad.  but  in- 
house  developers  “are  no 
better  or  smarter  than 
those  at  Microsoft  or  Sun." 

He  claim.s  that  Httlc  has 
been  learned  by  program¬ 
mers  over  the  years.  To 
wit:  "I  find  the  same  three 
ivogramming  errors  in  appl- 
cations  today  that  cause  90% 
of  the  security  problems 
that  I  found  10  years  ago." 

For  those  who  need  a  re¬ 
fresher  course,  they  are:  1) 
bufter  overflows,  2)  format 
string  errors,  and  3)  user 
input  validation  failures. 
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ing  security  into  systems  from  the  get-ga 
But  he  doesn't  see  a  “holistic  way"  for  en¬ 
terprise  IT  architects  to  accomplish  it  to¬ 
day.  Ian  Popkin,  CEO  of  New  York-based 
Popkin  Software  &  Systems  Inc.,  a  com¬ 
pany  that  has  been  selling 
IT  system  architectural 
tools  since  1986,  agrees 
that  9^  was  a  turning 
point.  The  company  bol¬ 
stered  the  security  fea¬ 
tures  in  its  recently  re¬ 
leased  System  Architect 
V9  and  will  do  even  more 
in  (he  next  version  slated 
for  later  this  year.  In  addi¬ 
tion  to  more  tightly  inte¬ 
grating  security  processes 
into  the  next  upgrade, 
Popkin  will  add  support 
for  the  new  Department  of 
DcferiM  Architectml  Frame¬ 
work  and  integrate  a  wider 
array  of  XML -based  busi¬ 
ness  process  modeling 
languages.  ■  Since  you 
can’t  rearchitect  your  lega¬ 


cy  environment,  you  might  consider 
exerting  a  little  more  contini  over  ft  by  adding 
security  tools  such  as  STAT  Neutralizer 
from  Harris  Corp.  in  Melbourne,  Fla.  The 
2.0  version  of  STAT  Neutralizer  ships  lat¬ 
er  this  month  with  support  for  Windows 
XP  Service  Pack  1  and  Windows  2000 
Service  Pack  3.  as  well  as  support  for 
HTTP,  e-mail  clients,  instant  messaging 
applications  and  other  services.  The  soft¬ 
ware  doesn’t  detect  intrusions  by  vinisc.s 
or  worms.  Rather,  it  loads  with  the  OS 
kernel  and.  through  specific  rules  that 
come  standard  or  are  added  by  system 
adminbtrators.  prevents  dM slowed  behavior 
byappKcsttons.  According  to  Richard 
Ealiari,  director  of  product  strategy  at 
Harris,  security  pr^lems  like  the  Slam¬ 
mer  worm  occur  because  sysadmins  nev¬ 
er  get  around  to  loading  existing  patches 
because  they  have  to  manage  the  down- 
(itne  problem.  Plus,  most  system  man¬ 
agers  don't  want  to  add  patches  willy-nil¬ 
ly  to  their  computers  without  first  testing 
them  with  existing  applications.  STAT 
Neutralizer  can  "give  users  peace  of 
mind"  until  the  patches  are  tested  and  in¬ 
stalled,  Ealiari  says.  •  Mora  than  peace  of 
mind  is  what  you'll  get  starting  today 
from  Gilian  Technologies  Inc.  The  Red¬ 
wood  City.  Calif.-based  company  will  of¬ 
fer  a  minimum  S29,000  money-back  guaran¬ 
tee  for  Web  applications  and  content  that 
are  protected  by  its  G-Server  security  ap¬ 
pliance.  ■  Apple's  penchant  for  secrecy 
mitigated  by  its  love  of  self  pfometion  merges 
messily  with  its  Web  site  bousing  the 
“public  beta"  of  the  rather  old-fashioned 
XU  Windows  System,  the  Unix  world's 
graphical  user  interface.  It  will  run  on 
the  Mac  along  with  the  graphically  rich 
OS  X  (hnpy/developenapple.com/qa/ 
qaJOOI/fal232Jitml).  making  the  project 
sort  of  a  technological  oxymoron.  Ap¬ 
propriately,  like  the  future  of  XU  on  the 
Mac.  most  of  the  links  on  the  page  go 
nowhere.  I 


Cisco  Launches  Network 
Quality-of-Service  Tools 


•v  MATTHAMOLEN 

Cisco  Systems  Inc.  last  week 
introduced  automated  quality- 
of'servicc  functions  for  nine 
of  its  switches  and  routers,  a 
move  aimed  at  helping  users 
create  converged  networks 
that  include  voice-over-IP 
(VOIP)  capabilities. 

Currently,  setting  up  IP  net¬ 
works  with  VOIP  support  of¬ 
ten  requires  IT  managers  to 
do  complex  manual  tuning  of 


each  router  in  a  LAN  or  a 
WAN,  said  Zeus  Kerravaia,  an 
analyst  at  The  Yankee  Group 
in  Boston.  The  settings  are  de¬ 
signed  to  look  at  IP  packets 
and  zip  them  on  their  way  if 
they  are  deemed  high  priori¬ 
ties.  such  as  voice  or  video 
tralTic.  Bccatise  the  process  is 
so  complex,  only  9%  of  com¬ 
panies  erven  turn  on  quality-of- 
scrvice  functions.  Kerravaia 
said.  The  result,  be  added,  is 


that  some  functions,  such  as 
VOIP,  might  not  be  adopted  as 
widely  as  they  could  be. 

Cisco  claimed  that  its  Auto- 
QoS  cechnolt^  can  help  com- 
panie.s  speed  up  IP  network 
deployments  and  reduce  in¬ 
stallation  costs  by  as  much  as 
two-thirds.  Auto^S  is  free  to 
users  with  licenses  and  main¬ 
tenance  agreements  for  Cis¬ 
co's  internetworking  software. 

Glenn  Whalley.  head  of  IP 
network  engineering  at  BT- 
exact  Technologies  in  Adastral 
Park.  England,  is  using  Auto- 
QpS  to  set  up  routers  that  sup¬ 
port  virtual  private  network 


services  offered  by  the  BT 
Group  PLC  unit.  '^Quality  of 
service]  is  complex  to  imple¬ 
ment.  and  anything  automating 
that  is  a  good  thing."  he  said. 

Nortel  Networks  Ltd.  pro¬ 
vides  technology  similar  to 
AutoQpS  but  hasn’t  widely 
publicized  its  availability,  ac¬ 
cording  to  Kerravaia.  Ralph 
Santitoro,  director  of  network 
architecture  at  NortcL  said  bis 
company  has  offered  default 
quality-of-service  settings 
since  1999  on  its  Passport 
86(K)  Layer  3  core  router,  sev¬ 
eral  other  routers,  a  VOIP 
gateway  and  IP  phones.  I 
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HP.  Delphi  Expand 
SAP  Services  Deal 

HmM-PmM  Co.  taU  H  hu 
wpoodod  •  technology  Kid  IT 
aenleeo  M  wdir  which  M  run 
SAP  AO's  iMHiNoee  emftcattom 
for  OiWM  Corp.,  a  Trey,  lich.- 
bocMl  wpgiar  d  adcrnodve 
parti.  UwAw  a  new  ftre  year 
aoreamanl.  SAP  syatarm  for 
OalM'soparaliona  in  North 
Aoiarka  and  Sbigapora  wfl  be 
conaoWalad  on  HP  aamrs  and 


Alcan  Outsources 
Operations  to  CGI 

Alcwi  he.,  a  Monlroal'baMd 
mafcarefahwnhananlpaekao- 
in|flHhrfah.eaMillMilinat- 
indalO  year  IT  OMtaourdno 
deaf  edoed  al  ahowi  StIO  iwMon 
(ILS.)  wNh  CSI  eroiv  he.  C8i. 
dw  h  Meohed.  w«  tdw  over 
n'shelp 


and  tweoMQlng  lyetemi.  The  two 
oonpaaiea  had  announcad  a  ten* 
tdhre  agreemed  hat  Jidy. 


SM,  British  Airline 
Agree  on  Pact 

BM  Md  Ldon.  Enddd-basad 
Britannia  Ahwye  Ltd.  aatd 
hat^fo  devahphg  a  cydwnthat 
wduaaBM'sTMdiPadX24 
notahoah  PCs  and  a  whdaai 
aatwortt  to  ahehedeaBy  store 
flgMewMdaMdcatolytofor* 
tmllen  to  drpina  cochpili.  Tht 
data  wM  ha  ttodalid  tfta  lha 
whatoaa  hdL  T)ia  dad  ii  worth 
ahoulSUnaQB.BHaaid. 


Short  Takes 
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FT  Users  Botch 
Security  Again . . . 

. . .  and  again.  The  Slammer  worm  being  the  latest  in  a  long  history  of 
utlerty  mcompetent  computer  security  procedures  by  IT  systems  man- 
agers.  Blame  software  developers,  if  it  makes  you  feel  better.  But  IT 
buyers  are  the  major  problem.  Security  vendors  would  despair  at  the 
consistent  foolishness  of  users  if  they  didn’t  make  so  much  money 
from  fixing  the  problems  —  usually  after  the  fact.  “IT  buyers  have 
tremendous  control  over  the  quality  of  security  in  the  products 


they  buy.  but  they  don't  use  it.”  argues 
Jerry  Brady,  chief  technology  officer  at 
Gus^nt  Inc.  in  Waltham.  Mass.  Instead, 
he  says,  all  users  ask  of  software  vendors 
is  that  the  products  be  quick  to  market, 
compatible  with  the  old  stuff  and  cheap. 
Wal,  you  get  whd  you  pay  far.  Brady's  com¬ 
pany  offers  consultation  and  managed  se¬ 
curity  services  to  compa¬ 
nies  that,  by  and  large, 
have  already  been  burned 
by  a  costly  security 
breach.  He  says  packaged 
software  is  bad.  but  in- 
house  developers  *Ve  no 
better  or  smarter  than 
those  at  Microsoft  or  Sun.” 

He  claims  that  Uttle  has 
been  learned  by  program¬ 
mers  over  the  years.  To 
wte  ”I  find  ttw  WM  thno 
progrwnning  onori  In  ippi' 
cattorw  today  tom  cauM  90% 
of  the  securit)’  problems 
that  I  found  10  years  ago.” 

For  those  who  need  a  re¬ 
fresher  course,  they  are;  1) 
buffer  overflows.  2)  format 
string  errors,  and  3)  user 
input  validation  failures. 
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a  Robert  Handler,  an  analyst  at  Meta 
Group,  thinks  there  has  been  a  “colecMva 
conscioMinaw  changa  stoci  S/tT  on  design¬ 
ing  security  into  systems  from  the  get-go. 
But  he  doesn't  sec  a  ‘^Ustic  way"  for  en¬ 
terprise  FT  architects  to  accomplish  it  to¬ 
day.  Jan  Popkin.  CEO  of  New  York-based 
Popkin  Software  &  Systems  Inc.  a  com¬ 
pany  that  has  been  selling 
IT  system  architectural 
tools  since  1986,  agrees 
that  WU  was  a  niming 
point  The  company  bol¬ 
stered  the  security  fea¬ 
tures  in  its  recently  re¬ 
leased  System  Architect 
V9  and  will  do  even  more 
in  the  next  version  slated 
for  later  this  year.  In  addi- 
tioD  to  more  tightly  inte¬ 
grating  security  processes 
into  the  next  upgrade. 
Popkin  will  add  support 
for  tou  MW  [fapartmant  of 
CtotonM  AfcMtochnl  Fvanw- 
wortt  and  integrate  a  wider 
array  of  XML^>ased  busi¬ 
ness  process  modeling 
languages.  ■  Since  you 
can’t  rearchitect  your  lega¬ 


cy  environment,  you  might  consider 
anrting  A  into  mori  conlrd  ovur  H  by  adding 
security  tools  such  as  STAT  Neutralizer 
from  Harris  Corp.  in  Melbourne,  Fla.  The 
2.0  version  of  STAT  Neutralizer  ships  lat¬ 
er  this  month  with  support  for  Windows 
XP  Service  Pack  1  and  Windows  2000 
Service  Pack  3.  as  well  as  support  for 
HTTP,  e-mail  clients,  instant  messaging 
applications  and  other  services.  The  soft¬ 
ware  doesn't  detect  intrusions  by  viruses 
or  worms.  Rather,  it  loads  with  the  OS 
kernel  and.  through  specifk  rules  that 
come  standard  or  are  added  by  system 
administrators,  ptovwto  dhiiawid  balwvlor 
byappHcittont.  According  to  Richard 
Ealiari.  director  of  product  strategy  at 
Harris,  security  problems  like  the  Slam¬ 
mer  worm  occur  because  sysadmins  nev¬ 
er  get  around  to  loading  existing  patches 
because  they  have  to  manage  the  down¬ 
time  problem.  Pius,  most  system  man- 
aget?  don't  want  to  add  patches  wiUy-nil- 
ly  to  their  computers  without  first  testing 
them  vrith  existing  applications.  STAT 
Neutralizer  can  "give  users  peace  of 
mind”  until  the  patches  are  tested  and  in¬ 
stalled.  Ealiari  says.  ■  Mori  ttan  pmm  of 
mind  is  what  you’ll  get  starting  today 
from  Gilian  Technologies  Inc  The  Red¬ 
wood  City,  Calif.-based  company  will  of¬ 
fer  a  mtotoMm  $28,000  momHtocfc  gumn- 
tM  for  Web  applications  and  content  that 
are  protected  by  its  G-Server  security  ap¬ 
pliance.  ■  Apple's  penchant  for  aicncy 
rnWgrtad  by  Rs  tova  of  aaff  promcRipn  merges 
messily  with  its  Web  site  housing  the 
"public  beta”  of  the  rather  old-fashioned 
XU  Windows  System,  the  Unix  world’s 
graphical  user  interface.  It  will  run  on 
the  Mac  along  with  the  graphically  rich 
OS  X  (.http'y/devel<^)erMpple.com/qa/ 
qa200I/qal232Jitml),  making  the  project 
sort  of  a  technologica]  oxymoron.  Ap¬ 
propriately,  like  the  future  of  XU  on  the 
Mac.  most  of  the  links  on  the  page  go 
nowhere.  I 


Cisco  Launches  Network 
Quality-of-Service  Tools 


UV  MATT  MAMLCM 

Cisco  Systems  Inc  last  week 
introduced  automated  quality- 
of-servlce  funaions  for  niite 
of  its  switches  and  routers,  a 
move  aimed  at  helping  users 
create  converged  networks 
that  include  voke-over-IP 
(VOIP)  capabilities. 

Currently,  setting  up  IP  xtet- 
worics  with  VOIP  support  of¬ 
ten  requires  IT  managers  to 
do  complex  manual  tuning  of 


each  router  in  a  LAN  or  a 
WAN.  said  Zeus  Keiravala,  an 
analyst  at  The  Yankee  Group 
in  Bostoa  The  settings  are  de¬ 
signed  to  look  at  IP  packets 
and  zip  them  on  their  way  if 
they  are  deemed  hi^  priori¬ 
ties,  such  as  voice  or  video 
traffic.  Because  the  process  is 
so  complex,  only  9%  of  com¬ 
panies  even  turn  on  quality-of- 
service  functions,  Kerravala 
said.  The  result,  be  added,  is 


that  some  functions,  such  as 
VOIP,  might  not  be  adopted  as 
widely  as  they  could  be. 

Cisco  claimed  that  its  Auto- 
QoS  technology  can  help  com¬ 
panies  speed  up  IP  network 
deployments  and  reduce  in¬ 
stallation  costs  by  as  much  as 
two-thirds.  Autof^pS  is  free  to 
users  with  licenses  ai>d  main- 
lenaiKe  agreements  for  Cis¬ 
co’s  internetworking  software. 

Glenn  Whalley,  bead  of  IP 
network  engineering  at  BT- 
exact  Technologies  in  Adastrai 
Park.  England,  is  using  Auto- 
()pS  to  set  up  routers  that  sup¬ 
port  virtual  private  network 


services  offered  by  the  BT 
Group  PLC  unit  *t  (Quality  of 
service]  is  complex  ro  imple¬ 
ment,  and  anything  automatic 
that  is  a  good  thing,”  he  said. 

Nortel  Networks  Ltd.  pro¬ 
vides  technology  similar  to 
AutoQpS  but  hasn't  widely 
publicized  its  availability,  ac¬ 
cording  to  Kerravala.  Ralph 
Santitoro,  director  of  network 
architecture  at  Nortel,  said  his 
company  has  offered  defoult 
quality-of-service  settings 
since  1999  on  its  Passport 
8600  Layer  3  core  router,  sev¬ 
eral  other  routers,  a  VOIP 
gateway  and  IP  phones,  t 


Our  PATRIOTcompliance 
Solution  can  help  you 
meet  the  stringent  new 
requirements  of  the  USA 
PATRIOT  Act.  It's  secure, 
unobtrusive  and  cost- 
effective. 


INTEGRATION 


And  it  s  just  one  of  the 
software  integration 
solutions  available 
today  from  Sybase. 


IS  ONCE  AGAIN  A 

POLITICAL  ISSUE 


Leveraging  our  expertise 
in  database  technology 
and  powerful  new 
integration  tools,  Sybase 
can  help  integrate  all 
the  data  and  business 
applications  in  your 
enterprise. 


I  Sybase 


So  you  can  extract 
the  maximum  value 
not  only  from  your 
current  infrastructure, 
but  also  from  all  the 
information  that 
resides  within  it 


Visit  www.sybase.com/ 
integrationsolutions. 
And  resolve  your 
integration  issues. 


SYBASE  e-BUSINESS  SOFTWARE. 


EVERYTHING  WORKS  BETTER  WHEN  EVERYTHING  WORKS  TOGETHER:* 


•2002  SyfeaK.  lac.  M  hfhtt  toned.  Al 


IV  Oie  pnorty  of  flicir  lotctnc  nmiv 


COMPQTIIWOIID  Fekniarv3.2«ll3 


NEWS 


w  computerwofid  com 


IBM,  Hitachi  Try  to  Counter 
EMC’s  Symmetrix  Upgrade 


Storage  wiuiors  jiK’ke\  for  tccliiiolog\' 
loadcrsliip  in  higli-cnd  disk  arrax  s 


BV  LUCAS  MEARIAN 

E\n  *  oki’ V  planned 
anm'uneement  toJa\ 
>*r  a  new  line  of  its 
hi^th'enJ  Symtnelri\ 
disk  arrays  is  shaking  up  the 
storage  industry,  with  eoni- 
peiilors  such  as  IHM 
and  Hitas'hi  Pata  Sy 
terns  t  orp.  scrant- 
hling  to  steal  I.Mti’s 
thunder  with  «echnol«>g\  up¬ 
grade's  of  their  own. 

IViails  aK'Ut  KMt"s  plans 
he*gan  to  emerge  m  (anuary 
iQuickl.tnk  Industry 

sources  last  week  s.ud  the 


company  is  expected  to  roll 
out  an  all-new  arehiteeture 
boasting  I'rt  direct,  dedicated 
paths  K'tween  the  ehannel  di- 
recti*fs  and  internal  caches  in 
the  Symmetrix  arrays.  J'hat 
will  increase-  system  hand- 

width  fo'm  slv- 

vIvKAvL  limes  that  of  Sym- 

meirix's  closest  com¬ 
pel  it«)r.  Hitachi's  l  ightning 
woov  array,  the  sources  said. 

Santa  ('! ara.  ('alif.-based  - 
Hitachi  last  week  tried  to 
preempt  bMcr's  move  by  an¬ 
nouncing  that  it  has  doubled 


EMC,  Other  Vendors  Team 
On  E-mail  Archiving  System 


IX.-sigiicd  to  help 
fin;inci;il  firms  mecl 
storage  regiikitions 

BV  LUCAS  MEARIAN 

hMC  torp.  last  week  said  ii‘s 
le*amingw  ith  Inm  Mountain 
Inc.  and  a  wndor  «>f  conicni- 
archiv  ing  software  to  offer 
technoU^-  and  serxk-es  aimed 
at  finaneiat  scrviCL-s  llrms  that 
are  unde-r  pressure  hi  comply 
w  ith  federal  mand;ites  to  re¬ 
tain  e-mail  mesviges, 

Thif  ioint  nlTering  is  built 
around  FMC's  (w'niera  disk 
arrays,  which  are  Je'signeJ  to 
shtre  fi.xed  data,  and  F.nier- 
prise  Vault  for  Microsoft  Kx- 
changL-.  a  me-vsage  arehix  ing 
application  developed  by  KVS 
Inc.  in  Arlington.  Texas. 

B**suin-based  Iron  Moun¬ 
tain.  which  manages  physical 
and  digital  records  forc«>rpo- 
raie  users,  will  provide  sitirage 
services  and  can  host  the  Uen- 
tera  amys  lor  banks  and  bru* 
keragi-s  that  don't  want  to  in¬ 
stall  the  devicL-s  in-house. 


|ohn  McKinley,  chief  tcch- 
milogy  ofTicerat  Merrill  Lynch 
iX  Cti.  in  New  York,  said  the 
regulatory  requirements  for 
storing  e-mail  and  being  able 
to  quickly  retrieve  messages 
has  created  an  environment  in 
which  managed  ai\-hiving  ser¬ 
vices  could  be  useful. 

“I  think  cost  is  certainly  an 
imponani  fik-ior,'*  said  McKin¬ 
ley,  who  plans  to  leave  Merrill 
Lynch  at  the  end  of  this 

month,  tairgc  ft-  _ 

nancial  services 
firms  might  be 
able  to  afford  to 
install  and  mam^te 
the  necessary- 
technology  inter¬ 
nally.  McKinley- 
said.  “But  there  are  a  lot  of  or- 
ganbations  whcTc  putting  the 
type  of  infrastructure  in  place 
to  address  all  the  compliance 
requirements  may  m>t  make 
sense.*’  he  added. 

'I'he  vendors  declined  h>  dis¬ 
close  pricing  for  the  ct>mbined 
olTering.  How-cver.  a  5TB  Cen- 
tera  array  has  a  list  price  of 


the  storage  capacity  of  the 
I  ightning  ‘WODV  to  12(>TB  in 
a  RAin-5  configuration  by 
adding  new  UotlB  drives. 

In  .iddition.  IBM  today  is 
expected  to  unveil  a  BlueHn- 
'  compliant  stnmge  manage¬ 
ment  interface  for  its  Fnter- 
prise  Storage  Server  Model 
8<K).  known  inhirmally  .is 
I  Shark.  Bluolln,  a  draft  spectfi- 
I  eatH*n  that  the  Storage  Net- 
I  w-»>rking  Industry  Association 
I  hopes  to  finalize  by  the  third 
I  quarter,  is  aimed  at  making  it 
'  easier  to  maruige  muliivendor 
'  storage-area  networks. 

IBM  also  plans  to  anmmnce 
I  new  disk  drives  that  operate 
5<)‘'ip  faster  than  the  current 
devices  used  in  the  Shark  ar- 


S205.000.  KVS's  software  ctxsls 
about  S250.1K)0  for  a  10.000- 
mailbox  license,  and  Iron 
Mount.iin  ch.irgcs  S.^0.0<Ml  to 
S40.000  for  basic  auditing  and 
storage  serx'ices  over  an  initial 
IK-month  peritxd. 

Using  a  Web  portal.  Iron 
Mountain  will  also  be  able  to 
access  e-mail  traffic  and  other 
regulated  data  for  the  govern¬ 
ment  if  a  company  is  audited 
or  a  disaster  occurs,  said  Roy 
Sanford,  vice  president  of  eon- 
tent-addressed  storage  at  Hop- 
kinton,  Mass.-based  FMC. 

'I'he  idea  of  hosted  storage 
isn't  unusual,  and  most  of  the 
_  top  storage-man¬ 
agement  software 
vendors  offer 
e-mail  archiving 
and  search  t(X>ls. 
But  Peter  (ierr. 
an  analyst  at  Kn- 
lerprise  .Storage 
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(jroup  in  Milford.  Mass.,  said 
the  bundled  technology  and 
serv-iees  being  offered  by 
FMC.  Iron  M<mnlainand  KVS 
are  unique. 

llteir  package  may  not  nec¬ 
essarily-  be  lcs.s  expensive  than 
piecing  tt>gether  an  e-mail  ar¬ 
chiving  system  would  be.  Gerr 
said.  But.  he  noted,  “there’s  a 


rays,  as  well  as  expanded  data- 
copying  and  disaster  recovery 
features  for  mainframes  that 
run  Linux. 

“Both  (IBM  and  Hitachi)  are 
clearly  paying  a  lot  i>f  atten¬ 
tion  to  FMC’s  announcement, 
'fhey  have  no  choice,"  said 
Tony  I’rigmore.  an  analy.st  at 
Fnterprise  Storage  Group  in 
Milford,  Mass.  ‘  IBM's  prxitect- 
ing  its  mainframe  position, 
and  Hitachi  is  protecting  its 
capacity  lead." 

EMC  is  expected  lo  an¬ 
nounce  three  new  Symmetrix 
models,  increasing  the  prod¬ 
uct  line’s  top  capacity  from 
70TB  to  irnrre  than  lOOTB. 

"'niey  [EMC]  really  believe 
the  architecture  they  have  puts 


Archhing 

Allies 

The  three  vendors  wilt  provide 
the  loHowing  e-mail  retention 
capabilities; 

EMC'S  CENTERA  array  will  store 
messages  ort  ATA  disk  drives, 
giving  each  tiem  a  unique  27- 
^aractei  identiiier  lo  guarantee 
the  daia’sauthentiaty 

KVS’S  SOFTWARE  will  handle 
mailbox  management,  regulatory 
comoliance  and  complex  con¬ 
tent-search  {unctions. 

IRON  MOUNTAIN  will  manage 
long-term  archiving  and  indexing 
ot  messages  at  customer  sites  or 
in  Its  own  data  centers 

lot  of  value  in  the  fact  that  its 
an  integrated  and  pretested 
solution." 

The  KVS  software  also  of¬ 
fers  greater  granularity  than 
storage  management  applica¬ 
tions  do.  in  its  ability  to  search 
out  specific  e-mails.  Gerr  said. 
“That’s  the  nature  of  these 
SEC'  inquiries;  'Give  us  every 
piece  of  correspondence  over 
the  past  year  with  these  seven 
terms.'  he  noted.  I 


Rival  Rollouts 

wiH  innoonce  Ihtef  o«w 
Symmetrii  modeh.  increasing 
maximum  disk  capacity  to 
moi'n  than  100T6  and  mtcmai 
bandwidth  lo  64Gfi.>sec 

plans  to  add  iastei  dish 
drives.  aSkmtin-comnalitile 
managemunl  mlertace  and  ux 
panded  Lmut  slurage  tealuips 
lo  (Is  Shark  airays 

ts  doubling  the  capac¬ 
ity  ol  it$  LiQhtnmo  9900V  ar 
rays  to  126TB  in  HAJO-5  con¬ 
figurations  and  boosting  the 
number  of  I/O  connections  that 
the  devices  support 


them  at  a  tremendous  perfor¬ 
mance  advantage."  Prigmorc 
said.  “That  means  when  I 
get  an  unexpected  workload, 
now- 1  can  manage  through  it 
without  compromising  the 
perl'ormance  of  any  given 
application." 

Foni  Sactxmaghi.  :m  analyst 
at  Sanford  C.  Bernstein  dc  Co. 
in  New  York,  said  in  a  research 
note  that  F^IC's  ability  to  bthvst 
Symmetrix  sale's  and  reg;iin 
lost  high-end  market  share  de¬ 
pends  “in  part  on  how  it  chrMW- 
I's  to  pritx’  its  sxxftwarc  and  how 
competitors  such  a.s  {Hitachi) 
respond  in  hardware  pricing." 

Sacconaghi  said  he  dtH'sn't 
expect  a  full  refri'sh  of  the 
Lightning  product  line  until 
next  year.  But  Hitachi  will 
likely  announce  several  capac¬ 
ity  and  bandwidth  upgrade's 
this  year,  he  added. 

Likewise,  Brian  Truskowski, 
general  manager  of  storage 
M^ftware  at  IBM.  said  the 
plantted  addition  of  a  Blucftn- 
based  programming  interface 
“is  only  the  beginning  of  what 
will  be  a  series  of  product  an* 
nounccmcnis . . .  around  the 
issue  of  interoperability."  I 

COTTBCtkNI 

Our  Story  ^xxit  Foote  Partners’ 
predictiorts  on  outsourong 
trends  on  page  12  of  last  week's 
issue  characterized  the  data  as 
partofa'new  report.*  In  lad  the 
researdi  is  still  ongomQ.  atxHhe 
data  was  only  prdiminary. 
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IBM,  Hitachi  Try  to  Counter 
EMC’s  Symmetrix  Upgrade 


Storage  vendors  jockey  for  technology 
leadership  in  high-end  disk  arrays 


0V  LUCAS  MEAltlAM 

EMC  CORP/S  planned 
announcement  today 
ofanewline  of  its 
high-end  Symmetrix 
disk  arrays  is  shaking  up  the 
storage  industry,  with  com¬ 
petitors  such  as  IBM 
and  Hitachi  Data  SyS' 
term  Corp.  scram- 
bling  to  steal  EMC's 
thunder  with  technology  up¬ 
grades  of  their  own. 

Details  about  EMCs  plans 
began  to  emerge  in  {anuary 
(QuickUnk  3S699].  Industry 
sources  last  week  said  the 


company  is  expected  to  roll 
out  an  all-Tkew  architecture 
boasting  128  direct,  dedicated 
paths  between  the  channel  di¬ 
rectors  and  Internal  caches  in 
the  Symmetrix  arrays.  That 
will  increase  system  bar>d- 

width  from  1.6GB/sec. 

■  now  to  64GB/sec.,  four 
times  that  of  Sym- 
metrix’s  closest  com¬ 
petitor.  Hitachi's  Lightning 
9900V  array,  the  sources  said. 

Santa  Clma,  Calif-based  - 
Hitachi  last  week  tried  to 
preempt  EMCs  move  by  an¬ 
nouncing  that  it  has  doubled 


the  storage  capacity  of  the 
Lightning  9900V  to  L26TB  in 
a  RAID-S  configuration  by 
adding  new  i46GB  drives. 

In  addition,  IBM  today  is 
expected  to  unveil  a  Bluefin- 
compliant  storage  manage¬ 
ment  interface  for  its  Enter¬ 
prise  Storage  Server  Model 
800,  known  informally  as 
Shark.  BlueHn.  a  draft  specifi¬ 
cation  that  the  Storage  Net¬ 
working  Industry  Association 
hopes  to  finalize  by  the  third 
quarter.  Is  aimed  at  making  it 
easier  to  manage  multivendor 
storage-area  networks. 

IBM  also  plans  to  announce 
new  disk  drives  that  operate 
50%  faster  than  the  current 
devices  used  in  the  Shark  ar¬ 


rays.  as  well  as  expanded  data- 
copying  and  disaster  recovery 
features  for  mainframes  that 
run  Linux. 

"Both  [IBM  and  Hitachi]  are 
clearly  paying  a  lot  of  atten¬ 
tion  to  EMCs  announcement. 
They  have  no  choke,"  said 
Tony  Prigmore.  an  analyst  at 
Enterprise  Storage  Group  in 
Milford.  Mass.  "IBM’s  protect¬ 
ing  its  mainframe  position, 
and  Hitachi  is  protecting  its 
capacity  lead." 

EMC  is  expected  to  an¬ 
nounce  three  new  Symmetrix 
models,  increasing  the  prod¬ 
uct  tine’s  top  capacity  from 
70TB  to  more  than  lOOTB. 

"They  [EMC]  really  believe 
the  architecture  they  have  puts 


EMC,  Other  Vendors  Team 
On  E-mail  Archiving  System 


Designed  to  help 
financial  firms  meet 
storage  regulations 

ev  Lucaa  meariam 

EMC  Corp.  last  week  said  it’s 
teaming  with  Iron  Mountain 
Inc.  and  a  vendor  of  content¬ 
archiving  software  to  offer 
technology  and  services  aimed 
at  fmancial  servkes  firms  that 
are  under  pressure  to  comply 
with  federal  mandates  to  re¬ 
tain  e-mail  messages. 

The  joint  olTering  is  built 
around  EMCs  Centera  disk 
arrays,  whkb  are  designed  to 
store  fixed  data,  and  Enter¬ 
prise  Wult  for  Microsoft  Ex¬ 
change,  a  message  archiving 
application  developed  by  KVS 
Inc.  in  Arliogtoa  Texas. 

Boston-based  Iron  Moun¬ 
tain.  whkb  manages  physical 
and  d^tal  records  for  corpo¬ 
rate  users,  will  provide  storage 
servkes  and  can  host  the  Cen¬ 
tera  arrays  for  banks  and  bro¬ 
kerages  that  don't  want  to  in- 
stafl  the  devkes  in-house. 


lohn  McKinley,  chief  tech¬ 
nology  ofiicer  at  Merrill  Lynch 
&  Ca  in  New  York,  said  the 
regulatory  requirements  for 
storing  e-mail  and  being  able 
to  quickly  retrieve  messages 
has  created  an  environment  in 
which  managed  archiving  ser¬ 
vkes  could  be  useftiL 
"I  think  cost  is  certainly  an 
important  factor,"  said  McKin¬ 
ley.  who  plans  to  leave  Merrill 
Lynch  at  the  end  of  this 
month.  Large  fi¬ 
nancial  servkes 
firms  mi^t  be 
able  to  afford  to 
install  and  manage 
the  necessary 
technology  inter¬ 
nally.  McKinley 
sakL  "But  there  are  a  lot  of  or¬ 
ganizations  where  putting  the 
type  of  infrastructure  in  place 
to  address  all  the  compliance 
requirements  may  tK>t  make 
sense,"  he  added. 

The  vendors  declined  to  dis¬ 
close  pricing  for  the  combined 
offering.  However,  a  5TB  Cen¬ 
tera  array  has  a  list  price  of 


STMMEMnillllMD 

For  mm  cowsage  of  dita 
storage  technology,  head  to 
our  Storage  Knowtedge  Center 
OQniddMtklTDO 


S2OS.0OO.  KVS’s  software  costs 
about  $250,000  for  a  10.000- 
mailbox  license,  and  Iron 
Mountain  charges  $30,000  to 
$40,000  for  basic  auditing  and 
storage  services  over  an  initial 
18-month  period 

Using  a  Web  portal.  Iron 
Mountain  will  also  be  able  to 
access  e-mail  traffic  and  other 
regulated  data  for  the  govern¬ 
ment  if  a  company  is  audited 
or  a  disaster  occurs,  said  Roy 
Sanford,  vice  president  of  con¬ 
tent-addressed  storage  at  Hop- 
kinion,  Mass.-based  EMC. 

The  idea  of  hosted  storage 
isn’t  unusual,  and  most  of  the 
_  top  storage-man¬ 
agement  software 
vendors  offer 
e-mail  archiving 
and  search  tools. 
But  Peter  Gen; 
an  analyst  at  En¬ 
terprise  Storage 
Group  in  Milford,  Mass.,  said 
(be  bundled  technology  and 
services  being  offered  by 
EMC.  Iron  Mountain  and  KVS 
arc  unique. 

Their  package  may  not  nec¬ 
essarily  be  less  expensive  than 
piecing  together  an  e-mail  ar¬ 
chiving  system  would  be,  Gerr 
said,  he  noted,  "there's  a 


Archiving 

Allies 

The  thrM  wndon  wfl  pravfde 
the  ktOHdns  A~tMi  (vlantion 
capabiWw: 

EMCS  CENTERA  array  wi  store 
messages  on  ATA  disk  drives. 
givinQ  each  item  a  unique  27- 
character  identifier  to  guarantee 
the  data's  authenticity- 

KVS’S  SOFTWARE  will  handk 
maixn  manaoemenl.  regulatory 
comfAance  and  complex  con¬ 
tent-search  (unctions. 

IRON  MOUNTAM  wi  manage 
kmg-tenn  archiving  and  indexing 
o(  messages  at  customer  sites  or 
In  its  own  data  centers. 

lot  of  value  in  the  fact  that  it's 
an  integrated  and  pretested 
solution." 

The  KVS  software  also  of¬ 
fers  greater  granularity  than 
storage  management  applica¬ 
tions  do.  in  Us  abiliry  to  search 
out  specifk  e-mails,  Gerr  said. 
"That's  the  nature  of  these 
SEC  inquiries:  ‘Give  us  every 
piece  of  correspondence  over 
the  past  year  with  these  seven 
terms,'  ”  be  noted.  I 


them  at  a  tremendous  perfor¬ 
mance  advantage."  Prigxnore 
said.  That  means  when  1 
get  an  unexpected  workload, 
now  I  can  manage  through  it 
without  compromising  the 
performance  of  any  given 
application." 

Toni  SacconaghL  an  analyst 
at  Sanford  C  Bernstein  fit  Co. 
in  New  York,  said  in  a  research 
note  that  EMCS  ability  to  boost 
Symmetrix  sales  and  regain 
lost  hi^>-cnd  market  share  de¬ 
pends  "in  part  on  bow  it  choos¬ 
es  to  price  its  software  and  how 
competitors  such  as  [Hitachi) 
respond  in  hardware  pricing." 

Sacconaghi  said  he  doesn’t 
expect  a  foil  refresh  of  the 
Li^tning  product  line  until 
next  year.  But  Hitachi  will 
likely  announce  several  capac¬ 
ity  and  bandwidth  upgrades 
this  year,  be  added. 

Likewise.  Brian  Thtskowski. 
general  manager  of  storage 
software  at  IBM.  said  the 
planned  addition  of  a  Bluefm- 
based  programming  interface 
"is  only  the  beguming  of  what 
will  be  a  series  of  product  an¬ 
nouncements  . . .  around  the 
issue  of  interoperability."  # 


Is  Citrix  putting  the 
squeeze  on  your  budget? 

Pfi’l  h.ick  uunei  i  Nr,-  M 

C.K'.u'i'f.il  iQ  Nm.-.  m.,  rr-.  .1  ;!.•.• 
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Homeland  Security  Dept. 
Faces  Leadership  Void 


Private-sector  IT 
waits  to  see  who, 
what  emerges 


■V  OAM  VtRTOM 

IN  ONE  OF  his  fust  moves 
as  secretary  of  Homeland 
Security.  Tom  Ridge  last 
week  appointed  former 
M*.  Morgan  Qiase  Bank  execu¬ 
tive  Alfonso  Martinez-Foms  )r. 
to  serve  as  special  assistant  to 
the  secretary  for  the  private 
sector. 

But  much  «vork  remains  to 
nil  key  leadership  positions  at 
the  newly  formed  ULS.  Dcpart- 
menl  of  HMoeland  Security 
aitd  avoid  losii^  the  momen¬ 
tum  in  the  public/private  part- 
oeiship  on  cybeisecurity  and 
critkaFinfoutructure  protec¬ 
tion.  Bush  administration  and 
private-sector  officials  said. 

*1  worry  that  if  the  transi- 


Changing  of  the 
Security  Guard 
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lion  period  drags  on,  we'U  lose 
much  of  the  gains  made  in 
establishing  a  trusted  relation¬ 
ship  with  the  leaders  of  criti¬ 
cal  infrastructure,'’  said  Roger 
Cressey.  former  chief  of  staff 

the  President's  Critical  In- 
frastructtire  Protection  Board. 
“It  is  imperative  that  the  new 
department  sends  a  clear  sig¬ 
nal  to  the  private  sector  on 
who  the  key  contacts  are  and. 
most  important,  that  they  are 
empoweKd  to  speak  on  behalf 
of  the  secretary.'* 

The  sense  of  urgency  comes 
as  several  high-level  officials 
—  who  have  led  the  cere¬ 
ment’s  efforts  during  the  past 
several  years  to  build  a  part¬ 
nership  with  the  private  sector 
~  have  either  left  or  plan  to 
leave  government  service. 

Richard  Clarke,  whose  ca¬ 
reer  as  the  nation’s  first  anti- 
terrorism  coordinator  and 
cybersecurity  czar  spatmcd 
three  administrations,  plans  to 
retire  this  month,  Compuler- 
worfd  has  conArmed.  Clarke 
was  instnuDcotal  in  building 
the  current  partnership  with 
the  private  sector  and  in  draft¬ 
ing  the  national  strategy  for 
the  defense  of  cyberspace, 
which  has  been  signed  by  tbe 
president  and  will  be  released 
in  final  form  this  month. 

Likewise.  )ohn  *niuk.  long¬ 
time  director  of  the  Critical 
Infrastructure  Assurance  Of- 
ffce  (ClAO)  at  the  U.S  De¬ 
partment  of  Commerce  and 
another  key  player  in  the  gov¬ 
ernment’s  private-sector  out¬ 
reach  effort  has  also  made  a 
Anal  decision  to  leave  public 
service,  according  to  sources 
close  to  him. 

Add  two  more  names  to  that 
list  Ron  Dick,  director  of  the 
FBFs  Natitmal  Infrastructure 
Protection  Center  (NIPC) 
since  March  2001.  left  the 
agency  in  December  for  a 
poulioD  at  El  Segundo,  Calif - 
based  Computer  Sciences 
Corp. 

And  James  Clapper,  director 
of  tbe  National  Imagery  and 


Mapping  Agency  and  a  former 
director  of  the  Defense  Intelli- 
gcDce  Agency,  has  backed 
away  from  an  offer  to  lead  tbe 
new  department’s  Information 
Assurance  Division,  sources 
close  to  tbe  deliberations  con¬ 
firmed. 

IT  professionals’  reactions 
to  tbe  changes  were  mixed. 

John  Ervin,  a  systems  ad¬ 
ministrator  at  Tessy  Plastics 
LLC  in  Lynchburg,  Va..  is  more 
concerned  about  who’s  in  tbe 
trenches.  Tbe  government 


needs  to  focus  more  on 
staffing  frontline  technolo¬ 
gists  to  work  with  tbe  private 
sector  on  stopping  cyber- 
attacks,  be  sa^ 

But  tbe  departure  of  all  of 
these  ‘Trusted  interlocutors." 
as  one  private-sector  official 
who  spoke  on  condition  of 
anonymity  characterized 
them,  means  that  tbe  govern¬ 
ment  is  iosii^  a  lot  of  “institu¬ 
tional  memory"  at  a  time  of 
great  turmoil  and  uncertainty. 

David  Wray,  a  spokesman 
for  the  NIPC’s  transition 
office  at  tbe  Department  of 
Homeland  Security,  said  all 
such  fears  of  losing  momen¬ 
tum  in  reaching  out  to  tbe 
private  sector  are  unfounded 
"We’re  bringing  it  all  togeth- 


HI  worry  that  if 
the  transition 
period  drags  on, 
welloseniiichof 
the  gains  made  in 
estabSshing  a  trust¬ 
ed  reiattorehip  with 
the  leaders  of  criti¬ 
cal  infrastniture. 

ROeEM  CIESSCY.  FORMER  CHIEF 
OF  STAFF.  PREStOENTS  CRITICAL  IN¬ 
FRASTRUCTURE  PROTECTION  BOARD 

er  under  one  roof,  and  we'U 
actually  have  resources  and 
funding  that  will  put  us  in  a 
better  position,"  Wray  said  B 


J.D.  Edwards  Upgrades  CRM 
Tools,  Adds  Ties  to  Back  Office 


■v  MAKC  L.  SOIMINI 
LD.  Edwards  &  Co.  last  week 
took  tbe  next  step  in  binding 
its  back-office  software  with 
the  customer  relationship 
management  (CRM)  applica- 
tions  that  the  company  bou^ 
through  its  acquisition  of  You- 
Ceotric  Inc.  in  late  200L 

Denver-based 
|.D.  Edwards  an- 
imunced  Version 
2.0  of  its  CRM  suite,  saying  tbe 
upgrade  includes  17$  enhance¬ 
ments  and  expanded  integra¬ 
tion  with  its  supply  chain  man¬ 
agement  and  enterprise  re¬ 
source  planning  applications. 

Robbie  Herzig.  senior  mar¬ 
keting  manager  for  C^RM  at 
Ji>.  Edwards,  said  the  compa¬ 
ny's  main  objective  for  tbe 
new  release  "b  to  continue  to 
build  on  tbe  vbibUity  tbe  cus¬ 
tomers  are  asking  for  from  the 
front  office  to  tbe  back  office." 

For  example,  JT).  Edwards 
has  connected  its  contact  cen¬ 
ter  application  to  its  field  ser¬ 
vice  software,  letting  mobile 
customer-service  workers 
look  at  account  histories,  war¬ 
ranty  data  and  other  informa¬ 
tion.  Herzig  said. 

There  b  also  now  a  tie-in 
between  tbe  company’s  sales 
force  automatiem  applications 


and  supply  chain  software. 
'That  feature  wiU  give  demand 
planners  access  to  real-time 
data  feeds  from  salespeople  in 
addition  to  historical  sal»  in¬ 
formation.  she  said. 

llie  supply  chain  and  CRM 
int^ration  appeak  to  Brian 
C^wne,  direcW  of  marketing 
at  Hutton  Commu¬ 
nications  Inc,  a 
Dallas-based  db- 
tributor  of  wireless  communi¬ 
cations  products.  He  said  Hut¬ 
ton's  sales  force  now  relies  on 
two  systems  —  contact  man¬ 
agement  software  from  Best 
Software  Inc  in  Reston.  Va.. 
and  JJX  Edwards’  OneWorid 
XE  i^ipUcations  —  to  check 
inventory  and  do 


other  supply  chain-  dsniEKanic 

But  Hutton  plans  toorKnoNWigCBnbr 
to  replace  Best's  OQMdAJakUSn 
technology  with 
JJ).  Edward*  new 
CRM  software  within  the  next 
four  months.  Capone  said. 

Tbe  combination  of  tbe 
CRM  and  OneWorid  XE  ap¬ 
plications  should  give  Hut¬ 
ton's  50  mobile  and  in-house 
sales  staffers  an  integrated  set 
of  software  for  doing  things 
such  as  generating  price 
quotes  and  checking  product 


stock  levels,  C^apone  noted. 

JJ>.  Edwards  b  also  embed¬ 
ding  mnlrirhann<»l  CUStOmcr* 
contact  capabilities  in  the 
CRM  upgrade  and  adding  an 
option  that  lets  mobile  work¬ 
ers  run  sales  appUcatkms 
when  they’re  t^-line  and  then 
synchronize  the  data  with 
back-offke  systems  when  they 
reconnect  to  theb  corporate 
networks,  Herzig  said. 

At  its  Focus  2002  user  con¬ 
ference  last  June,  JJ3.  Edwards 
promised  Increased  ties  be¬ 
tween  its  back-office  applica¬ 
tions  and  tbe  CRM  tools  de¬ 
veloped  by  Charlotte,  RC.- 
based  YouCentric  [(Juicklink 
30542].  JD.  Edwards  bought 

-  YouCentric  15 

months  ago  after 
previously  re¬ 
scuing  Si^i 
Systems  Inc.’s 
(^RM  software. 

John  Moore, 
an  analyst  at  ARC  Advisory 
Group  Inc.  in  Dedliam,  Mass., 
said  LD.  Edwards  doesn't  offer 
as  foil  a  set  of  CRM  function¬ 
ality  as  Siebel  and  other  ven¬ 
dors  da 

But  for  most  of  tbe  midsize 
users  that  JD.  Edwards  targets, 
tbe  CRM  software  “fits  per¬ 
fectly."  be  said  I 


Looking  Deeper, 
Staying  Safer 

An  intelligent  infrastructure  provides 

integrated  network  security,  keeping 
your  business  applications  more  secure. 

When  you  run  your  business  applications  over  an  intelligent  network  infrastructure, 
you’re  protecting  much  more  than  data.  You’re  protecting  the  value  of  your  IT 
investm«its.  You’re  protecting  the  privacy  and  productivity  of  employees,  partners,  and 
customers  alike.  You’re  improving  the  reliability  and  availability  of  your  applications. 
Ultimately,  you’re  protecting  your  company’s  reputation—and  its  bottom  line. 

That’s  why  Cisco  Systems  integrates  security  features  into  every  part  of  the  network, 
starting  with  the  intelligent  switches  and  routers  that  provide  the  foundation  for 
today’s  business  applications.  As  a  result,  you  can  implement  whatever  level  of 
protection  you  need,  wherever  you  need  it,  even  as  you  implement  new  solutions 
and  exund  access  to  new  users. 

An  intelligent  network  infrastructure  looks  deeper  into  streams  of  data  to  identify 
unauthorized  or  malicious  users,  allowing  only  appropriate  users  access  to  the  systems 
and  information  they  need.  And  because  Cisco  switches  and  routers  come  equipped 
with  embedded  hrewalls,  intrusion  detection  systems,  user-authentication  servit^s, 
content  filtering,  virtual  private  network  services,  IP  security,  and  other  safeguards, 
you  can  create  multiple  layers  of  defense  without  compromising  performance  or 
complicating  management. 

By  the  same  token,  you’ll  find  an  array  of  security  features  integrated  into  Cisco  PIX* 
Firewalls,  VPN  Concentrators,  IDS  appliances,  IP  phones,  wireless  LAN  equipment, 
content  delivery  appliances,  and  virtually  every  other  network  device  Cisco  builds,  as 
well  as  the  Cisco  lOS*  Software  that  binds  them  all  together. 

Of  course,  there’s  always  a  chance  you  won’t  need  to  take  all  of  these  precautions.  But 
as  the  world  leader  in  creating  secure  networks,  Cisco  believes  you  should  never  have 
to  rely  on  chance  alone. 


Cisco  intelligent  switches  and  routers  offer  en  array  of 
embedded  security  features,  enabling  you  to  implement 
the  level  of  security  you  need  today  and  to  safely  deploy 
IP  telephony,  wireless  mobilitv,  and  other  solutions  in 
the  future.  Integrated  features  include: 


c  Using  the  802. lx 
auth^cation  protocol,  the  network  grants  privileges 
based  on  personal  logon  info,  rather  than  the  device 
being  used. 

Accen  cemiel  IntK  Users  are  restricted  to  designeted 
areas  of  the  network,  blocking  unauthorized  access 
to  ail  other  applications  and  information. 

EneryptioK  iPSec  Virtual  Private  Networks  provide 
secure  tunnels  across  public  networks,  establishing 
secure  connections  for  remote  sites  and  mobile  users. 


Ik  Traffic  on  the  LAN  can  be  isoleted  based 
on  users  and  applications  or  business  requtfements, 
shielding  data  from  prying  eyes. 

Rale  iMlMg:  Network  managers  can  set  bandwidth 
thresholds,  helping  to  prevent  the  deliberate  or 
accidental  flooding  of  the  rtetwork. 
inlrasioe  prUeclieii:  The  network  continually  scans 
for  signs  ohhackers,  taking  immediate  steps  to  stop 
them  before  damage  is  done. 

Cotem  fiiierieg:  Users  are  prevented  from  accessing 
ot^ctionable  Web  content,  minimiang  legal  exposure 
end  reducing  unnecessary  WAN  traffic. 

SSI  eptimizatioa:  Exploding  volumes  of  SSL  traffic  can 
be  offloeded  from  servers,  cost-effectiv^  scaling 
application  performance  and  reliability  for  network 
users,  white  simplifying  certificate  management 


Coomki  02003.' 


Cum  iTiTtut 


14 


www.computafworlilcoin 


BRIEFS 


Siei)el.BMPIan 
To  Link  Software 

SiiW  SyalMW  hie.  and  BM 
siU  iMV  ftiM  lo  Mrfc  togMhK 

loir 


■iddtoanra  pradHBti.  SWmTs 
appfcaMon  fifvir  tadinolooy 
ha  «ad  to  n^part  ofil)i 
Cm-apacMc  tadtonata  the 
tulura.  toa  cowpanjaa  aato. 
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Slammer 


hold  some  re^nsibility  for 
their  negligeDce.”  said  Mike 
Tiodor.  vice  president  of  net- 
work  operations  at  First  USA 
Inc.,  an  Internet  service  pro¬ 
vider  in  St  ClairsviUe,  Ohia 

Several  of  the  network  per¬ 
formance  problems  Fir^  USA 
suffered  because  of  Slammer 
resulted  from  three  unpatched 
systems  that  it  was  co-locating 
for  customers.  “Obviously. 

[the  problems]  could  have 
been  avoided  if  our  customers 
had  performed  the  proper  se¬ 
curity  updates.”  Tmdor  said. 

Yet  despite  the  need,  few 
companies  have  the  resources 
it  takes  to  keep  current  on  all 
the  recommended  patches  and 
security  advisories  that  inun¬ 
date  them  almost  daily,  users 
and  analysts  said. 

“Systems  administrators 
spend  a  lot  of  their  time  ad¬ 
dressing  day-to-day  problems, 
so  routine  things  sut±  as  up¬ 
dates  get  pushed  into  the  back¬ 
ground"  said  Jesse  Fussell, 
president  of  Information  Secu¬ 
rity  Systems  Inc.,  an  Edgewa- 
ter.  Md-based  consultancy. 

Patch  Prabiems 

Software  patches  themselves 
are  often  unwieldy  and  difii- 
cuh  to  apply  and  sometimes 
can  break  systems  they  are 
intended  to  ftx. 

For  instance,  the  patch  that 
Microsoft  had  made  available 
for  the  bote  Slammer  exploit¬ 
ed  involved  in  some  cases  a 
“brutally  slow  and  manual 
process,”  said  Chip  Andrews, 
owner  of  S(^LSecurity.com. 
a  site  dedicated  to  securing 
SQL  servers. 

As  a  result,  at  least  “some 
administrators  put  off  the 
patch  because  ^  the  sheer 
time  it  would  take  to  patch  a 
production  machine,"  said  Ben 
Kosfay,  teebnkai  manager  at 
W3  International  Media  Ltd.  a 
hosting  company  in  Vancou¬ 
ver.  British  Columbia. 

Pat  Hymes,  vice  president 
of  corporate  information  secu¬ 
rity  at  Wachovia  Corp.  in 
Chaiiotte,  N.C.,  said  maintain¬ 
ing  patches  can  be  a  challenge 
for  any  organization. 


“It  can  take  a  great  deal  of 
time  and  energy  to  download 
test  and  implement  service 
packs  and  tot  fixes,  especially 
in  large  organizations  where 
they  can  impact  hundreds  of 
applications  and  thousands  of 
servers."  Hymes  said  “The 
total  cost  of  ownership  for 
servers  running 
some  of  these  dis¬ 
tributed  [operat¬ 
ing  systems],  data¬ 
bases  and  Web 
software  is  going 
through  the  roof 
due  to  the  man- 


Wbs^- 
glewith 

the  same  issues 
as  the  rest  of 
the  industry. 

power  being  ex-  .  As  a  result,  de¬ 

pended  to  main-  RICK  MILLER,  SPOKESMAN,  cisions  about 
tain  patches  and  uiCROSOFT  CORP.  patches  some- 

respond  to  events  times  can  be¬ 

like  the  SQL  Slammer  worm."  |  come  a  “risk-rewards  iuc^c 


a  freeze  on  any  such  mainte¬ 
nance  until  tax  season  is  over. 

The  patching  issue  becomes 
even  harder  when  dealing 
with  patches  that  touch  core 
systems  like  a  database  server, 
said  Eric  Block,  information 
security  officer  at  Dallas- 
based  Mary  Kay  Inc. 

“Database  ad¬ 
ministrators  can 
get  very  nervous 
when  you  tell 
ttom  that  a  secu¬ 
rity  patch  could 
break  ttoir  serv¬ 
er.”  said  Brock. 


Claude  Bailey,  an  IT  secu¬ 
rity  analyst  at  one  of  the  na¬ 
tion's  laigest  financial  man¬ 
agement  firms,  said  the  prob¬ 
lem  lies  not  in  detecting  the 
vulnerability  but  in  deploying 
the  patches  and  fixes  across 
an  organization  of 50,000 
employees  and  guaranteeing 
that  the  patch  won't  cause 
more  problems. 

“We  tested  the  original 
patch  [for  the  SQL  vulnerabil- 
rtyL  and  it  had  problems,"  said 
Bailey.  And  now.  in  the  middle 
of  tax  season,  there's  too  much 
to  lose  in  deploying  patches 
that  break  o^r  parts  of  the 
network,  be  said.  As  a  result, 
the  financial  firm  has  placed 


ment  caU,”  be  said. 

Mcrosoft’sWDes 

Even  Microsoft  itself  wasn’t 
above  such  oversight  last 
week,  with  several  unpatched 
systems  becoming  infected 
by  Slammer. 

“Wc  struggle  with  the  same 
issues  as  the  rest  of  the  indus¬ 
try,”  said  Rick  Miller,  a  Micro¬ 
soft  spokesman.  "Some  don’t 
patch  for  time  management 
reasons,  some  out  of  over¬ 
sight.  At  the  end  of  the  day.  it 
should  have  been  patched.” 

Vendors  have  contributed 
to  the  problem  by  failii^  to 
provide  enterprise-class 
patching  and  updating  proc¬ 


esses,  said  Paul  SchmehL 
adjunct  information  security 
officer  at  the  University  of 
Texas  in  Dallas.  The  univer¬ 
sity  lost  Lntemet  connectivity 
for  about  13  hours  because 
of  Slammer,  according  to 
SchmehL 

“Most  vendors  are  still  writ¬ 
ing  software  for  individual 
boxes  instead  of  thinking 
about  scaling  processes  to 
make  them  usable,"  be  said 

It  is  in  response  to  such 
concerns  that  Microsoft  is 
revamping  its  processes  for 
developing  and  distributing 
patches.  Miller  said 

For  instance,  the  company 
has  begun  to  make  available 
easy-to-use  installers  for  auto¬ 
mating  much  of  the  patching 
process.  Miller  said.  Microsoft 
is  also  working  on  tools  that 
help  companies  scan  their 
networks  and  identify  vulner¬ 
able  systems  more  evidently, 
be  added. 

“We  recognize  that  we  need 
to  do  a  much  better  job  devel¬ 
oping  and  delivering  patches," 
Miller  said  “We  are  working 
on  it."  I 

Computerwofld^Don  Verton 
contributed  to  this  story. 
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Your  Enterprise  Monday  10:32  A.M 


Now  you  can  know 
what,  when,  where 
and  how  data  change 
has  occurred. 


Tripwire*  assures  the  integrity  of  your  data 
and  gives  you  the  ability  to  effectively  pinpoint 
and  manage  undesired  change  across  all  your 
servers  and  netv^ork  devices.  By  establishing 
a  baseline  of  data  in  its  krxTwn  good  state. 
Tripwire  software  monitors  and  reports  any 
changes  to  that  baseline  and  enables  rapid 
discovery  and  recovery  when  an  undestred 
change  occurs. 

Maximize  System  Uptime 

■  Identify  change  quickly 

■  Enable  quick  restoration  to  a  desired  state 

■  Eliminate  risk  and  uncertainty 

Failsafe  Foundation  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Enable  detailed  audit  reporting 

■  Granular  visibility  and  contol 

Lowrer  Costs  and  Frustration 

■  Greatly  reduces  the  time  it  takes  to 
find  and  diagnose  problems 


Tripwire's  data  integrity  assurance  solutions 
are  the  only  way  to  have  100%  confidence 
that  your  systems  remain  urtcompromised. 

In  the  event  of  a  change  in  state,  you'll  know 
exactly  what,  when,  where  and  hew  change 
has  occurred  so  you  can  recover  quickly. 

For  a  FREE  30^y  fully-functional  demo 
and  copy  of  the  white  paper  **0010  Integrity 
Assurance  in  a  Layered  Security  Strategy...**, 

call  toll-free:  1-800-TRIPWIRE  (874.7947) 
or  visit  http;//enterprise.tripwirexom  today! 
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Coniinued  from  page  I 

Cartridges 

reproduce  a  cartridge  chip's 
fuiKrtionalir>'. 

And  now.  a  company  that 
has  so  far  overcome  the  tech- 
nulogicaJ  challenges  posed  by 
(he  printer  makers  is 
being  sued  by  Lex¬ 
mark  International 
ItK:.  Lexmark  alleges 
that  Static  Omtrul 
Compoewnts  Inc. 

(SCO  in  Sanford. 

N.C:.,  b  illegally  oop>- 
ing  its  printer  com¬ 
puter  chip  technology. 

The  two  sides  will 
face  off  in  a  federal 
court  hearing  Friday 
in  Lexington.  Ky..  the  home 
of  Lexmark.  It’s  a  case  that 
the  remanufacturing  indus¬ 
try.  aLso  called  the  afiermar- 


Rollout  part  of  plan 
to  ease  integration 
burden  for  users 


BY  MAAC  L.  SONOIN* 

Computer  Associates  Interna¬ 
tional  Inc.  thb  week  plans  to 
announce  a  software  suite  that 
tightly  integrates  its  portal 
server  with  business  intelli¬ 
gence  tools,  an  end-user  dash¬ 
board,  acccss-<ontrol  technol¬ 
ogy  and  other  capabilities. 

The  planned  rollout  is  part 
of  a  bundling  strategy  CA  de¬ 
tailed  last  month  for  its  Clev- 
erPath  Portal  software  (t^uick* 
Link  347551  By  combining  the 
portal  with  various  tools.  CA 
hopes  to  take  away  some  of 
the  integration  headaches  for 
rr  managers  who  currently 
have  to  try  to  cobble  together 
different  applications,  said 
Rkardo  Antuna.  senior  vice 
president  of  ClcvcrPath  mar¬ 
keting  at 

Among  the  planned  en¬ 
hancements.  he  said,  is  the  lat¬ 
est  ClcvcrPath  Portal  release. 
Version  4.5  will  have  new  Java 


ket.  sees  as  key  to  its  fate. 

“Thb  lawsuit  b  an  industry 
killer."  said  Tricia  ludge.  execu¬ 
tive  director  of  the  Internation¬ 
al  Imaging  Technology  Council 
in  Freehold.  N.I.  If  remanufac- 
turers  are  blocked  from  repro¬ 
ducing  computer  chips,  |udgc 
said,  they  won't  be  able  to  offer 
low-cost  alterna¬ 
tives.  “We  have  to 
win."  she  said. 

Kcmanufacturers 
have  about  25%  of 
the  toner  cartridge 
market,  according  to 
industry  estimates. 

Eby-Brown  Co.,  a 
S3  billion  wholesale 
dbtribuior  of  conve¬ 
nience  store  goods, 
b  a  large  user  of  re- 
I  manufactured  cartridges.  Ilie 
Naperville.  111. -based  company 
saves  20%  to  50%  buying  re- 
I  manufactured  cartridges,  said 


hooks  and  a  redesigned  user 
interface. 

CA  will  also  add  several  op¬ 
tions  10  the  portal,  including  a 
Lightweight  Directory  Access 
Protocol-compliant  product 
that  will  let  IT  managers  im¬ 
plement  single  sign-on  ap¬ 
proaches  CO  authenticate  end 
users  who  want  to  access  in¬ 
formation  through  the  portal. 

Compliance  Tod 

Also  coming  b  a  new  dash¬ 
board-style  user  interface  that 
will  let  business  executives  ac¬ 
cess  key  data  via  a  single  con¬ 
sole.  an  end-user  collaboration 
tool  and  a  product  that  can 
scan  a  company's  financial 
data  to  detect  potential  fraud. 
The  latter  tool,  which  is  being 
offered  through  a  co-develop¬ 
ment  partnership  with  McLean. 
Va.'based  FT  consulting  firm 
BearingPoint  Inc.,  b  aimed  at 
helping  companies  comply 
with  the  Patriot  Act  and  other 
government  regulations. 

Antuna  said  CA  will  also  of¬ 
fer  an  upgraded  version  of  a 
software  tool  that  can  be  used 


Brian  Freeman,  network  ser¬ 
vices  manager  at  the  company. 

Eby-Brown  has  standard¬ 
ized  on  a  limited  model  line  of 
Hewlett-Packard  Co  printers, 
so  it's  practical  to  keep  an  in¬ 
ventory  of  printer  pans  for  in- 
house  repairs,  said  Freeman. 
“Most  companies  arc  like  me 
—  we  are  extremely  tied  to 
our  printer  vendor,"  he  said, 

But  this  printer  standardiza¬ 
tion  also  means  the  remanu¬ 
factured  toner  cartridges  are 
the  only  source  of  competition 
with  those  made  by  the  print¬ 
er  maker.  “Anytime  there  is  no 
competition,  the  quality  de¬ 
clines  and  (he  price  increas¬ 
es."  said  Freeman. 

The  Lexmark  lawsuit,  filed 
Dec.  30.  affects  only  two  of 
SCO’s  70  printer  parts  lines, 
see  has  sloped  producing 
the  chips  for  those  cartridges, 
pending  the  outcome  of  tl^ 


CA’s  Portal  Push 

The  software  vendor  piars  to 
annotfice  the  following  new 
or  ertwiced  products  as  part  ot 
its  QeverPath  Portal  offet^: 

CLEVEKMTMFORGIOBAL 
COMPLIANCE,  to  h^esm- 

panbacanmhfwghflMnclil 
npoftoig  rvtos. 


CLEVENMTHAIWANCED 
ACCESS  COirraOL  OPTNM. 
lor  canirafaino  fT  Mcurity  via 
singlo  sMn-on  capabBUoa. 

CLEVEKPATH  COLLABORA¬ 
TION  OPTION,  to  wppvt 
coliboralion  acroto  miiMpio 


CLEVERPATH  DASHBOARD. 
wMcIi  pnMdH  a  Nnolt  UNT 
MartoM  tor  tontoMi  Btacu- 
tbaa  ar  athar  anplayBia. 

tu  build  business  rules  into 
systems.  The  new  release  will 
be  able  to  generate  rules  that 
can  invoke  multiple  systems 
through  Web  services  and 
create  automated  business 
workflows. 


week’s  hearing.  But  SCC  CEO 
Edwin  Swartz  said  he  worries 
other  original  equipment  man¬ 
ufacturers  (OEM)  will  follow 
Le.xmark  if  it  succeeds  in  court. 

“The  OEM  is  not  the  friend 
of  the  aftermarket,"  said 
Swartz.  “Every  cartridge  that 
is  remanufactured  is  one  that 
the  OEM  doesn’t  get  to  selL" 

Lexmark  officials  told  Com- 
putcnvorld  that  the  company 
offers  users  the  option  of  buy¬ 
ing  cartridges  without  an  up¬ 
front  dbcouni  or  "prebate”  if 


CSX  Corp.  b  already  beta¬ 
testing  Version  4.5  of  the  por¬ 
tal  and  may  upgrade  by  year's 
end.  said  Lisa  ^ter,  director 
of  commercial  applications  at 
the  Richmond.  Va.-based  op¬ 
erator  of  railroads  and  other 
shipping  businesses.  Current¬ 
ly.  CSX  runs  both  CilA's  Uni- 
center  enterprise  management 
applications  and  ClcvcrPath 
Portal  3.5. 

Bailer  said  CSX  b  also  ex¬ 
ploring  the  possibility  of 
roUir^  out  the  new  end-user 
dashboard.  The  dashboard  is 
appealing  because  it  lets  end 
users  drill  down  into  data  and 
manipulate  the  information  in 
different  ways,  she  said.  Buying 
an  integrated  suite  b  prefer¬ 
able  to  installing  and  linking 
multiple  applications,  as  long 
as  the  functionality  meets  ac¬ 
ceptable  levels.  Balter  added. 

CleverPath  Portal  45  and 
the  regulatory  compliance 
software  are  available  now. 
and  CA  said  the  other  tools 
are  due  in  March.  Pricing  for 
(he  full  suite  toiab  about 
S200.000. » 


they  choose  not  to  return  the 
cartridges  to  Lexmark.  Those 
cartridges  can  be  rcmanufac- 
tured  without  SCC's  chip  and 
“will  perform  without  loss  of 
functionality."  they  said. 

SCC  acknowledged  that 
that’s  the  case  but  contended 
that  businesses  buy  only  the 
discounted  cartridges.  “It's  all 
a  sham  to  stop  remanufactur- 
ing."  Swartz  said. 

Lexmark’s  17-pagc  lawsuit 
alleges  that  SCC’s  computer 
chip  infringes  on  its  software 
copyright  as  well  as  the  Digi¬ 
tal  Millennium  Copyright  Act 
(DMCA),  the  controversial 
1998  law  establbhed  to  combat 
piracy.  And  it’s  the  DMCA  in¬ 
fringement  allegation  that 
makes  the  case  a  potentially 
far-reaching  one. 

Although  the  DMCA  was 
originally  aimed  at  stemming 
piracy  of  software,  music  and 
motion  pictures,  its  anticir¬ 
cumvention  provbion  applies 
to  almost  any  copyrighted  ma¬ 
terial  that’s  being  accessed, 
said  David  Hayes,  chairman  of 
the  intellectual  property  group 
at  Palo  Alto,  Calif.-based  law 
firm  Fenwick  &  West  LLP. 

Under  the  DMCA,  it’s  con¬ 
ceivable.  for  instance,  that  a 
hardware  maker  could  prevent 
interoperability  with  other 
systems  by  citing  the  law’s 
aniicircumvention  provbions. 

“In  order  to  block  competi¬ 
tors  from  interoperating  with 
your  products,  all  you  need  b 
some  flimsy  authentication 
handshake."  said  Fred  von 
Lohmann.  an  attorney  at  the 
Electronic  Freedom  Founda¬ 
tion  in  San  Francisco.  “This 
same  tactic  can  be  used  in  al¬ 
most  any  arena."  I 
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Cartridges 

reproduce  a  cartridge  chip's 
functionality. 

And  now,  a  company  that 
has  so  far  overcome  the  tech- 
nologica]  challenges  posed  by 
the  printer  makers  is 
being  sued  by  Lex¬ 
mark  International 
loc.  Lexmark  alleges 
that  Static  Control 
Compooeitts  like. 

(SCC)  in  Sanford. 
MCisiDegallycopy- 
ing  its  printer  com¬ 
puter  chip  technology. 

The  two  sides  will 
face  off  in  a  federal 
court  hearing  Friday 
in  Lexington.  Ky.,  the  home 
of  Lexroaik.  It's  a  case  that 
the  remanuhicturing  indus¬ 
try.  also  called  the  aftennar- 


RoDcxit  part  of  plan 
to  ease  int^^ation 
burden  for  users 


■V  Mane  L.  aoMaiMi 

Computer  Associates  Interna¬ 
tional  Inc.  this  week  plans  to 
announce  a  software  suite  that 
tightly  integrates  its  portal 
server  with  business  intelli¬ 
gence  tools,  an  end-user  dash¬ 
board.  access-control  techr>ol- 
ogy  and  other  capabilities. 

The  planned  rollout  b  part 
of  a  bundling  strategy  CA  de¬ 
tailed  last  month  for  its  Clev- 
erPath  Portal  softwve  iQuick- 
Link  347^}.  By  combining  the 
portal  with  various  tools.  CA 
hopes  to  take  away  some  of 
the  integration  headaches  for 
IT  managers  ndio  currently 
have  to  try  to  cobble  together 
different  plications,  said 
Ricardo  Annina,  senior  vice 
president  of  CleverPath  mar¬ 
keting  at  CA. 

Amoi^  the  planned  en- 
hancetnents,  be  said,  is  the  lat¬ 
est  CleverPath  Portal  release. 
Versioa  4J  will  have  new  Java 


ket.  sees  as  key  to  its  fate. 

‘This  lawsuit  is  an  industry 
killer,"  said  Tricia  lodge,  execu¬ 
tive  director  of  the  Internation¬ 
al  Imaging  Technology  Council 
in  Freehold,  N.|.  If  remanufac- 
turers  are  blocked  from  repro¬ 
ducing  computer  chips.  Judge 
said,  they  won't  be  able  to  offer 
low-cost  alterna¬ 
tives.  “We  have  to 
win,"  she  said. 

Remanufacturers 
have  ^>out  25%  of 
the  toner  cartridge 
market,  according  to 
industry  estimates, 
f  Eby-Brown  Co,  a 
$3  bilUoD  wholesale 
distributor  of  conve¬ 
nience  store  goods, 
is  a  large  user  of  re- 
manufoctured  cartridges.  The 
Naperville.  UL-based  company 
saves  20%  to  50%  buying  re- 
manufoctured  cartridges,  said 


hooks  and  a  redesigned  user 
interfoce. 

CA  will  also  add  several  op¬ 
tions  to  the  portal,  including  a 
Lightwet(d)t  Directory  Access 
Protocol-compliant  product 
that  will  let  IT  managers  im¬ 
plement  single  sign-on  ap¬ 
proaches  to  authenticate  end 
users  who  want  to  access  in¬ 
formation  through  the  portal 

CompKancaTool 

Also  coming  b  a  new  dash¬ 
board-style  user  interface  that 
will  let  business  executives  ac¬ 
cess  key  data  via  a  single  con¬ 
sole,  an  end-user  collaboration 
tool  and  a  product  that  can 
scan  a  company's  ftnandal 
data  to  detect  potential  fraud. 
The  laner  tool  which  b  being 
offered  through  a  co-develop¬ 
ment  parmership  with  McLean, 
Va.'based  IT  consultii^  Tirm 
BearingPoint  Inc,  b  aimed  at 
helping  companies  comply 
with  the  Patriot  Act  and  ocher 
govenunent  rcgulatioos. 

Antuna  said  CA  will  also  of¬ 
fer  an  upgraded  version  of  a 
software  tool  that  can  be  used 
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Brian  Freeman,  network  ser¬ 
vices  manager  at  the  company. 

Eby-Brown  has  standard- 
bed  on  a  limited  model  line  of 
Hewlett-Packard  Co.  printers, 
so  it’s  practical  to  keep  an  in¬ 
ventory  of  printer  pans  for  in- 
house  repairs,  said  Freeman. 
“Most  companies  are  like  me 
—  we  are  extremely  tied  to 
our  printer  vendor,"  be  said. 

But  thb  printer  standardiza¬ 
tion  also  means  the  remanu¬ 
factured  toner  canridges  arc 
the  only  source  of  competition 
with  those  made  by  the  print¬ 
er  maker.  “Anytime  there  b  no 
competition,  the  quality  de¬ 
cline  and  the  price  increas¬ 
es."  said  Freeman. 

The  Lexmark  lawsuit,  filed 
Dec  30.  affects  only  two  of 
SCC's  70  printer  parts  Imes. 
SCC  has  stopped  producing 
the  chips  for  those  cartridges, 
pendii^  the  outcome  of  thb 


CA’sPortiNPush 

The  soflNve  vwndDr  pin  to 
enraunce  Sw  lolcMino  new 
or  enhmad  mduds  es  part  ol 
is  ClMrFMt  tatri  oHerino: 

ClfVBMTMRMBlflML 

camMKIL.Uk^mm- 


ACCQS  GONim  OPnOM. 
tw— ^eH^Uffie— liytila 

iMiapiiHif  I 


ciEifiVMiicauwaM- 

TKMOPnOILliappirt 


to  build  business  rules  into 
systems.  The  new  release  will 
be  able  to  generate  rules  that 
can  invoke  multiple  systems 
through  Web  services  and 
create  automated  business 
workflows. 


week's  hearing.  But  SCC  CEO 
Edwin  Swartz  said  be  worries 
other  ordinal  equipment  man¬ 
ufacturers  (OEM)  will  follow 
Lexmark  if  it  succeeds  in  court. 

"The  OEM  b  not  the  friend 
of  the  aftermarket."  said 
Swam.  “Every  cartridge  that 
b  remanufactured  is  one  that 
the  OEM  doesn’t  get  to  sell" 

Lexmarii  officuib  told  Com- 
puferworid  that  the  company 
offers  users  the  option  of  buy- 
iitg  cartridges  without  an  up¬ 
front  dbcount  or  “prebale"  if 


CSX  Corp.  b  already  beta- 
testing  Version  4.5  of  the  por¬ 
tal  and  may  upgrade  by  year's 
end.  said  Lisa  ^ter.  director 
of  commercial  applications  at 
the  Richmond,  Va.'based  op¬ 
erator  of  railroads  and  other 
shipping  businesses.  Current¬ 
ly.  CSX  runs  both  CA’s  Uni- 
center  enterprise  management 
applications  and  CleverPath 
Portal  35. 

Balter  said  CSX  b  also  ex¬ 
ploring  the  possibility  of 
rolling  out  ^  new  end-user 
dashboard.  The  dashboard  b 
appealing  because  it  lets  end 
users  drill  down  into  dau  and 
manipulate  the  information  in 
diffeimt  ways,  she  said  Buying 
an  integrated  suite  b  prefer¬ 
able  to  installing  and  linking 
multiple  applications,  as  long 
as  the  frmc^nality  meets  ac¬ 
ceptable  leveb,  Balter  added 

CleverPath  Portal  4.S  and 
the  regulatory  compliance 
software  are  available  now, 
and  CA  said  the  other  toob 
are  due  in  March.  Pricing  for 
the  full  suite  totaU  about 
S200.000. » 


they  choose  not  to  return  the 
cartridges  to  Lexmark,  Those 
cartridges  can  be  remanufac- 
tured  without  SCC’S  chip  and 
“will  perform  without  loss  of 
functionality."  they  said. 

SCC  acknowledged  that 
that's  the  case  but  contended 
that  businesses  buy  only  the 
discounted  cartridges.  “It's  all 
a  sham  to  stop  remanufactur¬ 
ing."  Swam  said 

Lexmark's  17-page  lawsuit 
alleges  that  SCC's  computer 
chip  infringes  on  its  software 
copyright  as  well  as  the  Dis¬ 
tal  Millennium  C^opyrigfat  Act 
(DMCA),  the  controversial 
1998  law  established  to  combat 
piracy.  And  it’s  the  DMCA  in¬ 
fringement  allegation  that 
makes  the  case  a  potentially 
far-reaching  one. 

Although  the  DMC^  was 
originally  aimed  at  sn»fnming 
piracy  of  software,  musk  and 
motion  pictures,  its  antkir- 
cumvention  provision  applies 
to  almost  any  copyri^ed  ma¬ 
terial  that's  being  accessed 
said  David  Hayes,  chairman  of 
the  intellectual  property  group 
at  Palo  Alto,  (2alif.-based  law 
Firm  Fenwick  &  West  LLP. 

Under  the  DM(^  it’s  con¬ 
ceivable,  for  instance,  that  a 
hardware  maker  could  prevent 
interoperability  with  other 
systems  by  citing  the  law’s 
anticircumvention  provbions. 

“In  order  to  block  competi¬ 
tors  from  interoperating  with 
your  products,  all  you  need  b 
some  flimsy  autbentkation 
handshake."  said  Fred  von 
Lohmaim,  an  attorney  at  the 
Electronic  Freedom  Founda¬ 
tion  in  San  Francisca  “Thb 
same  tactk  can  be  used  in  al¬ 
most  any  arena."  I 
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CA  Ships  CleverPath  Pbrtal  Upgrade, 
Bundles  New  Tools  With  Software 


Wisdom 

Something  you  can  expect  from  our  vast  experience. 

NTT/VERIO  IP  and  managed  network  services  are  comprehensive  and  s(^>histicated. 

But  what  do  we  offer  that’s  different?  One  thing  is  the  wisdom  that  comes  with  the  vast  experiences 
of  covering  nearly  90  countries  around  the  globe.  It's  a  wisdom  that  helps  our  customers  sustain  their  success. 
From  IP  connectivity  and  managed  network  to  a  range  of  hosting  services,  we  offer  everything 
you  need  to  thrive  in  our  networked  economy.  By  using  the  NTTA^ERIO  global  services, 
you  will  be  working  with  a  partner  that  has  complete  control  over  their  netwoik  and  is  completely 
accountable  for  its  consistent  and  reliable  performance.  Which,  we  feel,  is  only  wise. 

www.nttverio.com 


NTT/VERIO 


NTT  Communications  Group  Offices  • 
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MARVFRAN  lOHNSON 


Your  Outsourced  Future 


Reader  reaction  was  swift  and  scorn¬ 
ful  last  week  after  we  ran  a  story  pre¬ 
dicting  that  35%  to  45%  of  existing  IT 
jobs  in  the  U.S.  and  Canada  will  be  out¬ 
sourced,  shifted  to  contractors  or  moved 
offshore  within  the  next  two  years  [QuickLink 
35866].  So  many  jobs?  So  soon?  No  way.  Headline¬ 
grabbing  nonsense,  this  was. 

Thai  was  my  initial  ix- 


action,  too.  Analyst  pre¬ 
dictions  tend  to  be  noto¬ 
riously  ofFbase,  although 
we  in  the  press  cheerful¬ 
ly  troop  along  and  write 
stories  about  them  any¬ 
way.  As  one  reader  put  it. 

"I  think  that  you  guys  are 
sometimes  guilty  of 
oversimplification  of  the 
issues."  Indeed. 

In  10  years,  though.  I 
suspect  we’ll  see  these 
painful  outsourcing  trends  as  the  in¬ 
evitable  transition  of  a  workforce  in 
a  maturing  industry  that  plays  a  crit¬ 
ical  role  in  the  emerging  global  econ¬ 
omy.  What  IT  is  going  through  today 
mirrors  what  the  automobile  and 
electronics  industries  went  through 
in  previou.s  decades,  as  once- valued, 
highly  paid  skills  became  commodi¬ 
tized.  automated  or  more  cheaply 
available  elsewhere.  New'  skills  rise 
in  value  to  keep  pace  with  changing 
technologies,  sharpening  competi¬ 
tion  and  shifting  business  needs. 
Outsourcing  trends  historically 
move  in  great  waves,  cresting  in  eco¬ 
nomic  downtimes  when  exist  savings 
become  paramount. 

Our  government  has  certainly  em¬ 
braced  outsourcing.  Federal  IT  out¬ 
sourcing  is  expected  to  hit  $15  billion 
annually  by  fiscal  2007  —  a  127% 
increase  over  the  S6.6  billion  spent 
last  year.  That  push  is  coming  from 
two  directions:  a  mandate  to  cut 
costs,  and  the  increasing  difficulty 
of  replacing  qualified  technical  and 
program  management  employees 
(QuickLink  35533]. 

We  can  also  sec  outsourcing  tak¬ 


ing  hold  in  the  bellwether 
financial  industry.  Mega¬ 
deals  are  making  head¬ 
lines  again,  as  they  did  in 
the  early  I'^^Kls.  fP.  Mor¬ 
gan  Chase  recently  signed 
a  seven-year,  $5  billion 
deal  with  IBM.  Bank  of 
America  inked  a  lO-year. 
$4.5  billion  deal  with  EDS. 
Canadian  Imperial  Bank 
of  Commerce  signed  up 
for  $2  billion  in  IT  ser¬ 
vices  from  Hewlett- 
Packard.  And  so  on.  When  Gartner 
researchers  surveyed  39  Fortune  500 
banks  a  few  months  ago,  they  found 
half  of  them  outsourcing  back-office 
and  operational  tasks  more  exten¬ 
sively  than  ever.  Intensifying  compe¬ 
tition.  a  depressed  economy  and  the 
attraciUin  of  the  pay-as-you-go  mod¬ 
el  for  IT  services  are  a  powerful  trio 
of  business  drivers. 


Offshore  outsourcing  is  also  rising, 
as  the  economic  lure  of  cheaper  pro¬ 
grammer  labor  continues  to  beckon. 
The  one  wild  card  that  may  slow  the 
trend  this  year  is  the  threat  of  war 
with  Iraq.  Yet  Forrester  Research  es¬ 
timates  that  the  $4  billion  in  U.S. 
wages  that  floated  offshore  in  2000 
will  become  a  riptide  of  $136  billion 
and  3.3  million  IT-relaied  jobs  by 
2015.  Web-based  collaborative  tools, 
inexpensive  bandwidth  and  stan¬ 
dardized  business  applications  make 
it  easier  to  contract  out  maintenance 
and  support. 

In  spite  of  all  this.  I  see  a  silver  lin¬ 
ing  in  this  outsourcing  cloud:  the 
way  American  IT  executives  are  ris¬ 
ing  —  or  will  rise  —  to  the  challenge 
of  managing  projects  involving 
workers  outside  their  companies  and 
around  the  world.  Forrester  is  releas¬ 
ing  a  report  today  called  "Unlocking 
the  Savings  in  Offshore,"  in  which 
analyst  John  McCarthy  lays  out  some 
of  the  best  practices  involved  in 
making  these  projects  work.  They 
include  centralized  management, 
commitment  and  support  from  se¬ 
nior  executives,  and  relentless  proj¬ 
ect  discipline. 

No  rtxrket  science.  No  great  mys¬ 
teries.  Nothing  you  can't  handle.  Af¬ 
ter  all,  isn’t  this  the  industr>’  where 
the  one  constant  is  change?  k 
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Free  Speech 
Benefits  FT 

The  it  community 

has  always  thrived  on 
free  speech.  The  ex¬ 
change  of  information  gives 
users  essential  ways  to  com¬ 
pare  e.vperiences.  develop  new  prod¬ 
ucts  and  enhance  the  affordabilir>'  and 
usability  of  all  types  of  systems.  Un¬ 
fortunately.  the  benefits  of  openness 
aren’t  acknowledged  in  the  end-user 
license  agreements  that  vendors  force 
customers  to  sign. 

Now.  though,  vendors  may  find  that 
they'll  have  to  rewrite  all  those  agree¬ 
ments  to  take  into  account  a  decision 
recently  released  by  New  York  State 
Supreme  Court  Justice  Marilyn  Shafer. 

The  ruling  focused  on  a  case  involv¬ 
ing  language  contained  in  Network  As¬ 
sociates’  license  agreement  prohibiting 
a  user  from  publishing  a  review  of  its 
security  software 
without  prior  ap¬ 
proval.  The  court 
clearly  stated  that  the 
ban  was  deceptive 
because  the  license 
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agreement  gave  cus¬ 
tomers  the  impres¬ 
sion  that  they  would 
be  violating  the  law 
when  they  would  not. 

In  essence,  the 
court  said  making 
someone  afraid  to 
write  something  is  the  same  as  pre¬ 
venting  him  fmm  writing  it  in  the  first 
place.  And  this  typically  is  what  goes 
on  with  a  license  agreement. 

License  agreements  restrain  cus¬ 
tomers  from  disclosing  vital  product 
performance  data,  make  it  impossible 
for  them  to  seek  legal  redress  for  dam¬ 
ages  caused  by  product  flaws  and  can 
bar  them  from  revealing  their  vendor 
experiences  without  first  obtaining 
approval  from  the  vendor.  It's  hardly- 
surprising.  then,  that  most  customers 
have  only  good  stories  to  tell. 

Where’s  the  benefit  in  that? 

Imagine  the  motion  picture  industry 
making  movie  viewers  sign  an  agree¬ 
ment  granting  prcpublication  approval 
rights  to  anything  they  may  write 
about  a  film.  All  the  reviews  would  be 
positive.  With  such  a  policy,  the  auto¬ 
mobile  industiy-  could  ensure  favor¬ 
able  coverage  before  a  would-be  re¬ 
viewer  even  switched  on  the  ignition. 
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MARYFRAN  JOHNSON 


Your  Outsourced  Future 


Reader  reaction  was  swift  and  scorn¬ 
ful  last  week  after  we  ran  a  story  pre¬ 
dicting  that  35%  to  45%  of  existing  IT 
jobs  in  the  US.  and  Canada  will  be  out¬ 
sourced,  shifted  to  contractors  or  moved 
offshore  within  the  next  two  years  [QuickLink 
35866].  So  many  jobs?  So  soon?  No  way.  Headline¬ 
grabbing  nonsense,  this  was. 

That  was  my  initial  re* 


action,  too.  Analyst  pre¬ 
dictions  tend  to  be  noto¬ 
riously  ofTbase.  althou^ 
we  in  the  press  cheerful¬ 
ly  troop  along  and  write 
stories  about  them  any¬ 
way.  As  one  reader  put  it 
“1  think  that  you  guys  are 
sometimes  guilty  of 
oversimplification  of  the 
issues."  Indeed. 

In  K)  years,  though.  I 
suspect  we'll  see  these 
painful  outsourcing  trends  as  the  in¬ 
evitable  transition  of  a  workforce  in 
a  maturing  industry  that  plays  a  crit¬ 
ical  role  in  the  emerging  global  econ¬ 
omy.  What  IT  is  going  through  today 
mirrors  what  the  automobile  and 
electronics  industries  went  through 
in  previous  decades,  as  once-valued, 
highly  paid  skills  became  commodi¬ 
tized.  automated  or  more  cheaply 
available  elsewhere.  New  skills  rise 
in  value  to  keep  pace  with  changing 
technologies,  sharpening  competi¬ 
tion  and  shifting  business  needs. 
Outsourcing  trends  historically 
move  in  great  waves,  cresting  in  eco¬ 
nomic  downtimes  when  cost  savings 
become  paramount. 

Our  government  has  certainly  em¬ 
braced  outsourcing.  Federal  IT  out¬ 
sourcing  is  expected  to  hit  $15  billion 
annually  by  fiscal  2007  —  a  127% 
increase  over  the  S6.6  billion  spent 
last  year.  That  push  is  coming  from 
two  directions:  a  mandate  to  cut 
costs,  and  the  increasing  difnctUty 
of  replacing  qualified  technical  and 
program  management  employees 
[QuickUnk  355331 

We  can  also  see  outsourcing  tak¬ 


ing  hold  in  the  bellwether 
financial  industry.  Mega¬ 
deals  are  making  head¬ 
lines  again,  as  they  did  in 
the  eariy  1990s.  J.P.  Mor¬ 
gan  Chase  recently  signed 
a  seven-year,  SS  billion 
deal  with  IBM.  Bank  of 
America  inked  a  lO-year, 
S4.5  billion  deal  with  EDS. 
Canadian  Imperial  Bank 
of  Commerce  signed  up 
for  $2  billion  in  IT  ser¬ 
vices  from  Hewlett- 
Packard.  And  so  on.  When  Gartner 
researchers  surveyed  39  Fortune  500 
banks  a  few  months  ago,  they  found 
half  of  them  outsourcing  back-office 
and  operational  tasks  more  exten¬ 
sively  than  ever.  Intensifying  compe¬ 
tition.  a  depressed  economy  and  the 
attraction  of  the  pay-as-you-go  mod¬ 
el  for  IT  services  are  a  powerful  trio 
of  business  drivers. 


Offshore  outsourcing  Is  also  rising, 
as  the  economic  lure  of  cheaper  pro¬ 
grammer  labor  continues  to  beckon. 
The  one  wild  card  that  may  slow  the 
trrad  this  year  is  the  threat  of  war 
with  Iraq.  Yet  Forrester  Research  es¬ 
timates  tlut  the  $4  billion  in  U3. 
wages  that  floated  of^ore  in  2000 
will  become  a  riptide  of  $136  billion 
and  33  million  IT-related  jobs  by 
2015.  Web-based  collaborative  tools, 
inexpensive  bandwidth  and  stan¬ 
dardized  business  applications  make 
it  easier  to  contract  out  maintenance 
and  support 

In  spite  of  all  this.  I  see  a  silver  lin¬ 
ing  in  this  outsourcing  cloud:  the 
way  American  IT  executives  are  ris¬ 
ing  —  or  will  rise  —  to  the  challenge 
of  managing  projects  involving 
workers  outside  their  companies  and 
around  the  world.  Forrester  is  releas¬ 
ing  a  report  today  called  "Unlocking 
the  Savings  in  Of&hore."  in  which 
analyst  John  McCarthy  lays  out  some 
of  the  best  practices  involved  in 
making  these  projects  work.  They 
include  centralized  management 
commitment  and  support  from  se¬ 
nior  executives,  and  relentless  proj¬ 
ect  discipline. 

No  rocket  science.  No  great  mys¬ 
teries.  Nothing  you  can't  handle.  Af¬ 
ter  all.  isn't  this  the  industry  where 
the  one  constant  is  change?  I 
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Free  Speech 
Benefits  FT 

The  it  COMMUNITY 
has  always  thrived  on 
free  speech.  The  ex¬ 
change  of  information  gives 
users  essential  ways  to  com¬ 
pare  experiences,  develop  new  prod¬ 
ucts  and  enhance  the  affordability  and 
usability  of  all  types  of  systems.  Un¬ 
fortunately.  the  benefits  of  openness 
aren't  acknowledged  in  the  end-user 
license  agreements  that  vendors  force 
customers  to  sign. 

Now.  thou^  vendors  may  find  that 
they'll  have  to  rewrite  all  those  agree¬ 
ments  to  take  into  account  a  decision 
recently  released  by  New  York  Silate 
Supreme  Court  lustice  Marilyn  Shafer. 

The  ruling  focused  on  a  case  involv¬ 
ing  language  contained  in  Network  As¬ 
sociates'  license  agreement  prohibiting 
a  user  from  publishing  a  review  of  its 
security  software 
without  prior  ap¬ 
proval  liie  court 
clearly  stated  that  the 
ban  was  deceptive 
because  the  license 
agreement  gave  cus¬ 
tomers  the  impres¬ 
sion  that  they  would 
be  violating  the  law 
when  they  would  not. 

In  essence,  the 
court  said  making 
someone  afraid  to 
write  something  is  the  same  as  pre¬ 
venting  him  from  writing  it  in  the  first 
place.  And  this  typically  is  wdiat  goes 
on  with  a  license  agreement. 

License  agreements  restrain  cus¬ 
tomers  from  disclosing  vital  product 
performance  data,  make  it  impossible 
for  them  to  seek  legal  redress  for  dam¬ 
ages  caused  by  product  flaws  and  can 
bar  them  from  revealing  their  vendor 
experiences  without  first  obtaining 
approval  from  the  vendor.  Ifs  hardly 
surprising,  then,  that  most  customers 
have  only  good  stories  to  tell 
Where’s  the  benefit  in  that? 

Imagine  the  motion  picture  industry 
making  movie  viewers  sign  an  agree¬ 
ment  granting  prepublication  approval 
rights  to  anything  they  may  write 
about  a  film.  All  the  reviews  would  be 
positive.  With  such  a  (>oUcy.  the  auto¬ 
mobile  industry  could  ensure  favor¬ 
able  coverage  before  a  would-be  re¬ 
viewer  even  switched  on  the  ignition. 


It’s  hardened  facilities  and  high-level  security. 

SunGard  maintains  more  than  3  million  sq.  ft.  worldwide  of 
strategically  placed,  hardened  facilities,  providing  you  with 
high  availability  to  your  information  and  virtually  no  downtime. 
Well-staffed  facilities  feature  fully  redundant  power  and 
communications,  state-of-the-art  equipment,  multi-platform 
compatibility  and  high  levels  of  security. 


It’S  a  dedicated, 
redundant  network 
backbone. 


^  Every  SunGard  location  is 
connected  by  nearly  25,000 
miles  worldwide  of  dedicated 
network  backbone,  providing 
on-demand  or  dedicated 
DS1/DS3  protocol- 
independent 
communications. 


It’s  off-site  data 
storage  that’s 
truly  off  site. 

Some  continuity  plans 
incorporate  in-house 
backup  tapes  and  stor¬ 
age.  But  they’re  useless 
in  a  power  failure,  fire  or 
evacuation.  SunGard's 

off-site  storage  is  a  key  part  of  Information  Availability.  Our 
file  sharing,  primary  storage  and  data  backup  services  are 
unrivalled  for  data  integrity  and  reliability.  And  they  free  up 
your  equipment  and  people  for  other  purposes. 


It’s  platform-independent  professionals 
bringing  it  all  together. 

With  SunGard,  more  than  2,000  Information  Availability  experts 
are  at  your  fingertips.  We  can  help  you  with  everything  from 
vulnerability  assessment  and 
impact  analysis  to  planning,  tech- 
nology  integration,  network  and 

architecture  solutions,  deployment,  AwaMbWy  Sendees 

testing  and  certification.  Everything  ^he  Net  Beneath  You 
you  need  to  keep  your  business 
running,  no  matter  what. 


Don’t  let  lost  access  to  information  take  your  company  down. 
Stay  up  and  running  with  an  Information  Availability  strategy. 


Talk  with  us.  An  Information  Availability  strategy  from  SunGard  can  be  a  life-saver  when  it 
comes  to  keeping  people  and  information  connected.  Data  is  more  time-sensitive  than  ever. 

And  SunGard’s  complete  continuum  of  services  can  protect  your  information’s  availability, 

enterprise-wide.  From  tiered  applications  recovered  as  fast  as 
48  hours,  to  high  availability  applications  in  as  little  as  2  hours, 
to  managed  services  that  provide  continuous  access  to  critical 
information. 

SunGard  offers  the  industry’s  most  comprehensive  Information 
Availability  services  -  from  planning,  traditional  disaster  recovery, 
network  and  managed  services  to  IT  outsourcing,  professional 
consulting  and  high  availability  solutions.  Plus,  end-user  recovery 
facilities  where  your  people  can  go  to  reconnect  with  data  in  an 
emergency.  In  foct,  nearly  90%  of  U.S.  companies  with  $1  million 
or  more  in  revenue  are  located  within  35  miles  of  one  of  our  tecilities.* 
Every  day,  we  help  ensure  that  over  10,000 
clients  worldwide  have  uninterrupted  access  to 
their  business-critical  information.  They  count 
on  us  to  supply  the  people,  technology  and 
infrastructure  necessary  to  provide  multiple 
points  of  access  to  information,  flexible  alternate 
workplace  options  for  their  employees,  and 
updated  continuity  plans  and  systems  to  meet 
their  future  technology  needs. 

SunGard  is  one  of  the  largest  providers  of 
platform-independent  business  continuity, 
managed  hosting  services  and  more.  No 

company  has  more  ways  to  keep  your  business  in  business.  See  how  your  company 
rates  on  Information  Availability  right  now.  Take  our  Information  Availability  Challenge  at 

www.availability.8ungard.com/iac 
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SunGard:  The  Net  Beneath  You. 

With  SunGard  you  get 

•  the  company  that  founded  the  recovery 
industry  in  1978 

•  comprehensive  support  for  more  than 
30  platforms 

•  75  facilities  in  10  countries  with  more  than 
1 5,000  end-user  positions  worldwide 


SUNGARD 

Availabiirty  Services 
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In  response  to  the  ruling  (whid)  U‘s 
appealing),  Network  Associates  said  it 
was  trying  to  ensure  that  reviews  re* 
fleet  the  latest  release  of  a  product. 
That’s  like  saying  you  can’t  review 
Casablanco  without  prior  approval  if 
it’s  not  the  latest  colorized  release. 
The  software  industry  seems  to  still 
believe  it  deserves  special  treatment 
—  treatment  placing  most  consumers 
at  a  disadvantage. 

While  the  ruling  doesn’t  have  much 
force  outside  of  New  York  (too  bad 
Silicon  Valley  users  didn't  take  the 
lead  on  this),  it  should  embolden  cus¬ 
tomers  to  demand  less  restrictive  end- 
user  agreements. 

It's  time  to  force  vendors  to  craft 
language  that  helps  your  business,  al¬ 
lows  for  dialogue  to  make  it  easier  to 
do  your  job  and  inspires  the  openness 
rr  users  need  to  remain  innovative 
and  vital 

Without  these  changes,  we’ve  lost 
more  than  just  better  software;  we've 
lost  a  basic  tenet  of  free  speech.  I 

THORNTON  MAY 

Tell  the  Truth 
Eflfectively 

INFORMATION  technolo¬ 
gy  leaders  are  often  de¬ 
scribed  as  “ambassadors” 
for  our  profession.  In  the  first 
part  of  the  17th  century,  the 
father  of  the  British  foreign  service. 
Sir  Henry  Wonen,  described  the  am¬ 
bassadorial  funedoa  this  way:  "An  am¬ 
bassador  is  an  honest  man  sent  to  lie 
abroad  for  the  good  of  his  country.” 

in  these  trust-sensitized  times,  are 
IT  leaders  lying  for  the  sake  of  our 
discipline  when.  say.  they  promote  ex¬ 
pensive  projects?  Or  are  simply 
poor  communicators  who  don't  know 
their  audience? 

In  associatioo  with  the  College  of 
Business  at  Arizona  State  University.  I 
examined  the  IT  "messaging”  ecosys¬ 
tem  (Le„  message  sender,  messages 
being  sent,  eseoitives  receiving  the 
messages  and  the  actions  taken  be¬ 
cause  of  the  message)  at  3S  companies 
operating  in  15  vertical  markets.  And 
while  the  results  showed  that  fT  exec¬ 
utives  are  mostly  telling  the  truth, 
they're  not  telling  it  in  the  right  way. 

Commuoicatioas  —  what  we  say,  to 
whom  we  say  it  and  how  we  say  it  — 
is  a  signtfleant  and  potentially  suc¬ 
cess-limiting  blind  spot  for  many  IT 
organizations.  Most  IT  shops  don't 


measure  the  effectiveoiess  of 
their  messages  (for  exam¬ 
ple,  whether  the  message 
sent  produced  the  desired 
behavior  change). 

Non-rr  executives  prefer 
human-to-human,  experi¬ 
ence-rich  interactioos  over 
any  other  form  of  infonna- 
tion  exchange.  But  the  data 
from  the  study  revealed  the 
following  distribution  of 
communication  modes  by 
rrieadets: 

■  E-mail . 39% 

■  Meetings  . 33% 

■Telephone . 20% 

■  l^toface  . 10% 

■  Other . 4% 

IT  professionals  do  not  spend 
enough  time  involved  in  hi^-impact, 
person-to-persoo  conversations. 

Research  indicates  that  humans  are 
nine  times  more  prone  to  broadcast 
ideas  than  to  receive  them.  So,  for  your 
"broadcasts”  to  have  any  impact,  you 
must  know  your  audience.  If  you're  to 
have  any  hick  indneing  bny-tn  and 


behavior  change,  you  must 
understand  where  your  Us- 
teners’  beads  are.  Many  IT 
message  senders  have  no 
map  of  the  mental  beaches 
their  messages  will  wash 
up  on.  IT  leaders  do  not 
speed  enough  time  craft¬ 
ing  their  messages  for  their 
audience. 

In  an  overcommunicated 
world,  sometimes  the  best 
Strategy  ts  to 
say  nothing.  Recall  Presi¬ 
dent  (^rge  W.  Bush's  de- 
cisloa  not  to  give  a  qieech  on  the  an¬ 
niversary  of  the  Sept.  U  tragedy  but 
rather  to  spend  nearly  two  hours  at 
Ground  Zero  embracing  tebers.  sons, 
mothers  and  dau^ters  who  lost  loved 
ones.  He  understood  the  important 
context  of  the  moment. 

Knowing  to  whom  we  are  comrouni- 
cating  is  one  component  of  IT  messag¬ 
ing.  Kntming  vdiy  we  communicate  is 
another.  Gett  Ulysses  S.  Grant,  coming 
i^>on  the  14,000  Confederate  defend¬ 
ers  at  Fort  E>ooelsoa  in  February  1862, 


READERS'  LEHERS 


knew  exactly  to  whom  he  was  speaking 
and  exactly  what  he  wanted  when  he 
crafled  this  message:  “No  terms  except 
an  unconditional  and  immediate  sur¬ 
render  can  be  accepted.  1  propose  to 
move  immediately  upon  your  works.” 

IT  leaders  may  he  articulate,  but 
they  can  do  a  better  job  of  communi* 
eating  Context-spedflc  conuxmnica- 
Uoo  Is  best  learned  through  rote-play¬ 
ing  exercises. 

I  look  forward  to  the  day  when  IT 
messages  combine  the  hard-hitting 
journalism  of  Woodward  and  Bern¬ 
stein.  the  social  relevance  and  call  to 
action  of  Upton  Sfoclair’s  The  Jungle 
or  Rachel  (^arsoo’s  Silent  Spring  and 
the  in-tbe-momeni  sensatitm  of  a  Sur¬ 
vivor  episode.  Then,  peihaps,  the  cor¬ 
porate  muggles  (executives  ¥iho  aren’t 
wizards  of  technology,  to  borrow  a 
term  from  Harry  Potter)  wUl  look  for¬ 
ward  to  hearing  from  us.  I 
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I  UmoinraliandWBlDutfMBalprMOiB 
*  eahmvienotftMhiic 


Smal  Businesses  Get  Help  SeKng  to  Rads 

I  ImowniKion  and  culkn.  Join 


I  intieMenlooimnienlthat 
laros  buanesses  can  koure  ad  he 
*1ederal  labyrinlh*  on  their  own 
rfoderal  StflK  rr  Ven¬ 
dors.'  OukkUnk 35305].  Weas- 
sume.hoiMver.thaf8nMlbusi- 
nessn  need  asastance  in  (Mina 
wiBigoMfnnentconinciopporlu* 
nttas.  By  M.  flknost  eMry  federai 
agency  has  an  oflka  that  proMdes 
aiMiG^.  oulraach  and  assisance 
lor  smal  businesaea.  Theee  points 
of  coniacf  can  be  kxni  by  going  to 
anagercy'sWabailefseeFnt' 
Gov^  lor  (tract  Mo)  and  then 
saandangior'OSOeU'fOfBceol 
S(Tial  and  Oisadwantaged  Businass 
UttzBttonX 

In  my  Imiled  etoertonce  as  a 
smaN-txiaanss  iamto.  the  most 
conwnonmistahemadebylagh- 
tach  vendors  6  that  they  focm  oidy 
on  the  attrMes  ol  that  products 
and  ignore  the  spadlic  needs  of 
the  agency  customer.  Agencies 
can  make  pumhesas  only  to  meal 
bona  fide  needs.  If  wa  don't  need  I. 
we  can't  buy  L  And  I  we  need  It 
but  dontlmow  wa  need  I.  wa  can’t 
buyiL 

In  addtton  to  devaiopinQ  won¬ 
derful  products,  vendors  met  get 
to  know  the(r  potantiai  ofitorrm. 


Otfprofessionafassocation5.At' 
land  oo  piAilc  preaentattons.  Re¬ 
spond  whan  we  isaw  requests  tor 
comments.  Onlact  lie  agency 
OSOW.  I  you  cant  afford  to  (to 
•nee  ihngs.  sat  up  rafalionships 
MhfoaolerB  that  can. 

BrMX.  Scott 

Business  utilization  and 
development  speci^ist.  VS. 
Geological  Survey,  Denver 


ReVCyberti  IIBStS 

RiGtIMD  CLMME.  chaiTnen  Of 
thelMidenl's&tticttlnfa- 
structore  detection  Boail  is  nght 
on  track  whan  ha  caultons  us  not  to 
(Mniss  cyhedhiaets  (Ouicllink 
353091.  counlering  James  lewis' 
i-acMaed  concksions  in  a  recant 
papertoriheCS6.whichprD- 
cfaiiTB  that ‘nudi  of  Ito  a^ 
anahaiB  of  cyber-thiaats  and  Cyber 
saofty  appears  to  have  The  ^  ie 
fattng' as  Is  theme' (QuicfdJnk 
35390]. 

Lawk' paper  is  based  on  some 
Itawad  ptemisaE.  For  aampia.  I  is 
my  axpertenoe  Ivf  Im  n  mmy 
nm  SCADA  eyatsms  that  have 
blamel  comeclMly  than  he  as- 
sumat  CartaMy.  Iwa  are  toar- 


mongarBwhoenfoyeantnoupre- 
aclton  to  the  IttBt  wMafaMy.  but 
as  a  whole.  fT  sacurty  and  ajdi 
professnnals  paM  a  raeis&c  and 
cradUe  picture  of  refs.  wAnetabi- 
lies  and  threats 
Batty  Plam 

Vke  pre^dent.  Infitrmation 
Systems  Seaeity  Association 
lnc„  Denver  chapter 


Parvasiw  Courts 

Rmtiiiyoigftttaa  Welch 
erttclB  of  Jan.  13. 1«  Superior 
Com  of  Arizona  in  Maricopa 
Coiffly  is  uaing  a  fomi  of  pervaerve 
coritoulirig  In  sorne  axrtooim - 
eitourtmins  I(]uicklJnk  3519B1 
We  have  a  system  Irai  tracks  the 
speakarandracortklierntoime- 
tton  on  video.  We  have  iBpieced 
(tourt  reportars  m  Iwae  oxft- 
rooms. 

pitocfliOiMa 

Superior  Court  of  Arizona. 
Maricopa  County  (Pfioentz) 


Handheld  Benefits 

TIC  Atmcia  on  IW  COttS  of 
daptoymg  handhaid  dfvtcas 
[Qilcl&Jnks3432B»id  34819] 
need  issuas  that  avanfone  ttnAd 
be  amre  of.  but  Iwy  didnl  note  the 
bensCs  that  can  be  darwad  by  ir 


duemg  the  mMer  of  davtoas  (oad 
byawortdQreeRoreafflpto.aaa- 
ova  wiatoB  access  project  can  be 
dasened  so  Iw  amploynas  can 
use  harKtialcIs  to  do  thi^  liat 
woddolhwwtoerequBianoir 
book.  The;  can  be  done  by  cnaing 
e  tow  custom  tAkbpagas  It  rrwfce 
inqdM  to  or  update  Ire  CM 
database.  Thft,  tare  talMMy 
smal  aitoendhfB.  lie  fwnola  safes 
tores  no  longer  needs  notoboofe. 
buflhasacceaatoffioialmefyn- 
tormation  I  the  haniliaki  (Mice  is 
ateo  a  cel  phone,  Iw  iwnber  of  de- 
vioas  is  laducKf  furltor. 

PMOMe 

Business  development. 
StratlTMtCensidtingUjC, 
Randolph.  NJ.. 
PDuhe@SOTar7Mux>m 

COtmERWOttlO  wricorrie 
commento  from  (to  (aadars.  LeOws 
wi  be  edtod  tor  braviy  and  dhrly. 
They  ttttld  be  adiMeed  to  Jamie 
EcMb.  isNM  editor.  Coriolarwortd. 
PO  Box  9I7L  500 Ofd  ConnaclGul 
ftth.FrepNngh«n.  Mass  01701. 
Faic(506)87&4S43 
C-nal  toB8nBoampulefworld.cain. 
Induda  «i  addraK  and  phone  num¬ 
ber  tor  enmedMe  variftoaBon. 


I  Moremneneamwatalwi 
”  tapRsmonatfWkbsiie 
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In  response  to  the  ruling  (which  it‘s 
.ippealing).  Netw'ork  Associates  said  it 
was  trying  to  ensure  that  reviews  re¬ 
flect  the  Latest  release  of  a  product. 
That's  like  saying  you  can't  review 
Cosahlnnca  without  prior  approval  if 
it'<'  not  the  latest  colorized  release. 

'  '^c  software  industry  seems  to  still 
htfjleve  it  deserves  special  treatment 
-  treatment  placing  most  con^mers 
at  a  disadvantage. 

While  the  ruling  doesn't  have  much 
force  outside  of  New  York  (too  bad 
Silicon  Valley  users  didn't  take  the 
lead  on  this),  it  should  embolden  cus¬ 
tomers  to  demand  less  restrictive  end- 
user  agreements. 

It's  lime  to  force  vendors  to  craft 
language  that  helps  your  business,  al¬ 
lows  for  dialogue  to  make  it  easier  to 
do  your  job  and  inspires  the  openness 
ri  users  need  to  remain  innovative 
and  vital. 

Without  these  changes,  we've  lost 
m«>re  than  just  better  software;  we’ve 
lost  a  basic  tenet  of  free  speech,  k 

THORNTON  MAY 

Tell  the  Truth 
Eflfectively 

INFORMATION  technolo¬ 
gy  leaders  are  often  de¬ 
scribed  as  “ambassadors” 
for  our  professioa  In  the  first 
part  of  the  17th  century,  the 
father  of  the  British  foreign  service, 
sii  Henry  Wotten.  described  the  am- 
b.'tssadorial  function  this  way:  “An  am¬ 
bassador  is  an  honest  man  sent  to  lie 
abroad  for  the  good  of  his  country." 

in  these  trust -sensitized  times,  are 
rr  leaders  lying  for  the  sake  of  our 
discipline  when,  say,  they  promote  ex¬ 
pensive  projects?  Or  are  they  simply 
(XK>r  communicators  who  don't  know 
ihetr  audience? 

In  association  with  the  College  of 
Business  at  Arizona  State  University.  1 
examined  the  IT  “messaging"  ecosys¬ 
tem  (Le..  me.ssage  sender,  messages 
being  sent,  executives  receiving  the 
messages  and  the  actions  taken  be¬ 
cause  of  the  message)  at  35  companies 
operating  in  15  vertical  markets.  And 
while  the  results  showed  that  IT  exec- 
ves  arc  mostly  telling  the  truth, 
(tic'y're  not  telling  it  in  the  right  way. 

(^nununications  —  what  we  say,  to 
whom  we  say  it  and  how  we  say  it  — 
is  a  significant  and  potentially  suc¬ 
cess-limiting  blind  spot  for  many  IT 
organizations.  Most  IT  shops  don't 


measure  the  effectiveness  of 
their  messages  (for  exam¬ 
ple,  %^ther  the  message 
sent  produced  the  desired 
behavior  change). 

Non-IT  executives  prefer 
human-to-human.  experi- 
ence-ricb  interactions  over 
any  other  form  of  informa¬ 
tion  exchange.  But  the  data 
from  (he  study  revealed  the 
following  distribution  of 
communication  modes  by 
rr  leaders; 

•  E-mail . 33% 

■  Meetings  . 33% 

•  Telephone . 20% 

•  Face  to  face  . 10% 

•Other . 4% 

IT  professionals  do  not  spend 
enou^  time  involved  in  hi^-impact, 
person-to-person  conversations. 

Research  indicates  that  humans  are 
nine  times  more  prone  to  broadcast 
ideas  than  to  receive  them.  So,  for  your  | 
"broadcasts”  to  have  any  impact,  you 
must  know  your  audience.  If  you're  to 
have  any  luck  inducing  buy-in  and 


behavior  change,  you  must 
understand  where  your  lis¬ 
teners'  heads  are.  Many  IT 
message  senders  have  no 
map  of  (he  mental  beaches 
their  messages  will  wash 
up  on.  IT  leaders  do  not 
spend  enough  time  craft¬ 
ing  their  messages  for  their 
audience. 

In  an  overcommunicated 
world,  sometimes  the  best 
messaging  strategy  is  to 
say  nothing.  Recall  Presi¬ 
dent  George  W.  Bush's  de¬ 
cision  not  to  give  a  speech  on  the  an¬ 
niversary  of  the  Sept.  11  tragedy  but 
rather  to  spend  nearly  two  hours  at 
Ground  Zero  embracing  fothers,  sons, 
mothers  and  dau^ters  who  lost  loved 
ones.  He  understood  the  important 
context  of  the  moment. 

Knowing  to  whom  we  arc  communi¬ 
cating  is  one  component  of  IT  messag- 
irtg.  Kftowing  why  we  communicate  is 
another.  Gen.  Ulysses  S.  Grant,  coming 
upon  the  14,000  Confederate  defend¬ 
ers  at  Fort  Donelson  in  February  1862. 
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knew  exactly  ro  whom  he  was  leaking 
and  exactly  what  he  wanted  w-hen  be 
crafted  this  message:  “No  terms  except 
an  unconditional  and  immediate  sur¬ 
render  can  be  accepted.  I  propose  to 
move  immediately  upon  your  works." 

IT  leaders  may  be  articulate,  but 
they  can  do  a  better  job  of  communi¬ 
cating.  Coniext-spccific  communica¬ 
tion  is  best  learnt  through  role-play¬ 
ing  exercises. 

I  look  forward  to  the  day  when  IT 
messages  combine  the  hard-hitting 
journalism  of  Woodward  and  Bern¬ 
stein.  the  social  relevance  and  call  to 
action  of  Upton  Sinclair’s  The  Jungle 
or  Rachel  Clarson's  Silent  Spring,  and 
the  in-the-moment  sensation  of  a  Sur¬ 
vivor  episode.  Then,  perhaps,  the  cor¬ 
porate  muggles  (executives  who  aren’t 
wizards  of  technology,  to  borrow  a 
term  from  Harry  Potter)  will  look  for¬ 
ward  to  hearing  from  us.  I 


W/WTOWOnKIN? 


I  McteookjRnsiSBndMatDvcnNesolprMus 
'  columns  are  on  o/WWiaiB 


Small  Businesses  Get  Help  Selling  to  Feds 


TNERTS  A  PRESUMPTIOII  With¬ 
in  the  fedsrai  povemment  that 
iarpe  businesses  can  figure  out  the 
“federal  labynnih*  on  (hex  own 
pFederalLabynnthStiflesfTVen- 
dors.’()uickLink%3()S].  We  as¬ 
sume,  however,  that  small  busi¬ 
nesses  need  assGlance  in  dealing 
withgowemmentconiTadopportu- 
mbes.  By  law.  almost  every  federal 
agency  has  an  othce  that  provides 
advocacy,  outreach  and  assistance 
for  small  businesses.  These  pomts 
of  contact  can  be  found  by  going  to 
an  agoicy's  Web  site  (see  Fast- 
Govgov  for  direct  Hnks)  and  then 
searching  for  “OSOBir  (Office  of 
Small  and  Disadvantaged  Business 
UtUiabon). 

In  my  llmiled  experience  as  a 
small-business  liaison,  the  most 
common  mistake  made  by  high- 
tech  vendors  is  that  they  focus  only 
on  the  attributes  of  the*  products 
and  ignore  the  specrik  needs  of 
the  agency  customer.  Agencies 
can  make  purchases  only  to  meet 
bona  fide  needs.  H  we  don't  need  d. 
we  can't  buy  1  And  If  we  need  It 
but  don't  kntM’ we  need  it  we  can't 
buyl 

In  addition  to  developing  won¬ 
derful  products,  vendors  must  get 
to  know  the*  potential  customers. 


Ipamournvssionandojftijre.  Join 
our  professxnal  associations.  At¬ 
tend  oi*  public  presentations.  Re¬ 
spond  when  we  esue  requests  for 
comments.  Omtacl  (he  agency 
0S06U  II  you  cant  afford  to  (k 
those  things,  set  up  relaiionships 
wfihreselersthal  can. 

Brian  X.  Scott 
Susertess  utilizorton  and 
development  specialist.  US. 
Geological  Survey.  Denver 


Real  Cyfaerthreats 

R  (CHAW  CtAmc.  Chatman  Of 
the  fVesideni's  Cnbcat  infra¬ 
structure  FVotection  Eloard.  6  right 
on  track  when  he  cautions  us  not  to 
dismiss  cyberthreatsfCXiickUnk 
35369].  countering  James  Lewis' 
lU-advised  ctmclusiofts  n  a  recent 
paperforthe(SIS.wt)ichpro- 
daims  diat  “much  ol  the  earty 
analysts  of  cyber-threats  and  cyber 
security  appevs  to  have  *The  ^  is 
Faftng'  as  Hs  theme'  (QuckUnk 
35390]. 

Lewis' paper  6  based  on  some 
flawed  premises.  For  exampie.  *  is 
my  experience  that  there  are  many 
more  SCAOA  systems  that  have 
bilemet  cormeebvitythan  heas- 
sumes.  (^ertainfy.  there  »e  fear- 


mongers  who  angry  stvnng  up  In¬ 
action  lotheiaiest  vuinerabiMy.bul 
as  a  whole.  ITsacuntyandaude 
professNinalB  pamt  a  reakstic  and 
credibie  pctive  of  rsks.  vulneraMi- 
ties  and  throats 
Batty  Piarca 

Vice  president.  In/armatinn 
Systems  Secur^  Association 
/nc..  Denver  chapter 


Pervasive  (Courts 

RESAIOwe  your  futile  Watch 
article  otJaa  13.  the  Supenor 
Coift  of  Anzona  *1  Mancopa 
County  Is  usng  a  form  of  pervasree 
computing  *1  some  coulrooms - 
e-courtrooms  [Qucfdjnk  35196 1 
We  have  a  system  that  tracks  the 
speaker  and  reconls  the  informa- 
bononwdeo  VW  have  replaced 
court  reporters  VI  these  coi*l- 
nwms 

PriacAa  Dance 

Si^perior  Court  of  Arisona, 
Maricopa  County  (Phoenix) 


Handheld  Benefits 

TW  AimctES  on  the  costs  Of 
deploying  handheld  dawcas 
(0uickljrrits3432B  and  34819] 
ratsad  esues  that  everyone  shrxAd 
be  aware  of .  but  they  (MnT  note  the 
benefits  that  can  be  demed  by  re- 


duong  the  number  of  devicas  used 
byaworfdotce  FQrexarnple.asa- 
cure  wireless  access  protect  can  be 
desqned  so  (tut  employees  can 
use  hardields  ID  do  ihviQs  that 
would  othervwse  regwe  a  note¬ 
book.  The  can  be  done  by  cxeahng 
a  few  custom  Web  pages  that  make 
mquines  10  or  updale  the  CRM 
database  Thuslorarelatwe^ 
smaR  expenditure,  the  remote  sales 
force  no  longer  needs  notebooks 
butvhasaccesstomoreivnelyn- 
formalion.  N  the  handheld  davKX  s 
also  a  cel  phone,  the  number  of  de¬ 
vices  &  reduced  further 
PauiDidM 

Business  devek^fment. 
StrutlTech  Consulting  LLC. 
Randolph.  N./. 
/®ul>«6)Srriotncchxofn 

()0MP(rrERW(ML0  wekornes 
commerds  from  4s  readers.  Letlers 
wil  be  edded  for  brevdy  and  darvy 
They  shoiAd  be  addressed  to  Janue 
Ectde.  letters  editor.  Computonvorld. 
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The  VP  of  Sa  les  wa  nts  data  from 
your  mainframe. 

The  guy  who  wrote  the  COBOL  application 
passed  away  in  1992. 

No  Problem, 

myEXTRA!  Smart  Connectors  let  you  do  new  things  with  your  legacy  assets. 


We  share  your  grief.  Unlocking  the  data  and  logic 
hidden  in  mainframes  has  been  a  struggle.  But  it’s 
necessary:  up  to  50  percent  of  corporate  information 
resides  within.  Struggle  no  more.  With  myEXTRA! 
Smart  Connectors, you  can  grab  mainframe  data  — 
in  its  original  format  and  location — for  use  with  web 
services,  extranets,  or  intranet  applications,  all  with¬ 
out  needing  a  time  machine. 

Find  out  more.  Download  our  White  Paper  entitled 
“Leveraging  Legacy  Applications  to  Serve  New 
Business  Initiatives”  at  www.attachmate.com/SCi. 
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EMEReiNe  TECHNOLOeiES 

Task-Centric  Storage  Takes  the  Stage 

New  inexpensive  storage  appliances  based  on 
Advanced  Technology  Attached  disk  arrays 
may  redefine  the  traditional  role  of  the  appli¬ 
cation  server.  Pass  30 


QUICKSTUDY 

Session  Initiation  Protocol 

Learn  more  about  this  signaling  protocol, 
which  is  used  for  Internet  conferencing, 
telephony,  presence,  events  notification 
and  instant  messaging.  Page  29 


OPINION 

Just  Pin  It  on  Microsoft 

The  endless  drumbeat  of  anti-Microsoft  propaganda 
is  a  wonderful  way  for  competitors  to  distract  users 
from  failures  of  thw  own  making,  says  technology 
evaluations  editor  Robert  L  Mitchell.  P^34 


AINFRAME  LINUX  Can 
boost  application  up¬ 
time  and  reduce  sup¬ 
port  costs.  But  users 
and  analysts  recom¬ 
mend  acting  carefully 
when  choosing  which  applications  to 
move  to  the  open-source  operating 
system  and  when  training  staff  in  the 
required  skills. 

The  attraction  of  Linux  on  the  main¬ 
frame  isn't  so  much  the  low  cost  of  li¬ 
censing  Linux  or  the  fact  that  users  can 
modify  it  and  rely  on  a  community  of 
developers  to  fix  bugs,  users  say.  In¬ 
stead.  the  big  draw  is  the  ability  to 
combine  Linux  with  the  mainframe's 
proven  reliability,  speed  and  manage¬ 
ment  tools  to  drive  down  the  cost  of 
running  critical  applications. 

“We’re  not  interested  in  just  getting 
the  least  expensive  thing  on  the  mar¬ 
ket.”  says  Randy  Lengyel,  senior  vice 
president  of  MIS  at  Wisconsin  Physi¬ 
cians  Service  Insurance  Corp.  (WPS), 
a  health  insurer  in  Madison.  Wls.  “We 
want  something  that  is  reliable,  func¬ 
tional  and  has  great  customer  service 
from  the  [vendor].” 

HMitig  the  Sweet  Spot 

The  sweet  spot  for  mainharoe  Linux 
today  is  server  consolidation  —  replac¬ 
ing  dozens  or  even  hundreds  of  sepa¬ 
rate  Intel-based  Linux  or  Windows 
servers  with  a  partition  on  the  main¬ 
frame  that  dedicates  a  single  processor, 
memory  and  other  5)^tem  sources  to 
running  Linux. 

WPS  created  a  virtual  Linux  server 
running  on  one  25(>-MIPS  processor 
that  was  available  within  an  ffiM 
eServer  zSeries  900  mainfriime  and 
did  it  at  40%  of  the  cost  of  ordering, 
installing  and  configuring  a  new  Intel- 
based  server,  says  Lengyel. 

A  virtual  server  can  be  created  with¬ 
in  two  to  three  minutes  and  deliver  as 
much  as  nine  times  the  throughput  of  a 
stand-alone  server,  he  says.  WPS,  a 
longtime  mainfiame  user,  was  drawn 
to  running  Linux  on  the  mainframe  as 
a  way  to  leverage  the  mainframe's  reli¬ 
ability  and  to  keep  support  costs  low. 
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Running  Linux  on  IBM  big  iron  can  deliver 
savings  -  but  only  with  the  right  applications 
and  upfront  planning.  BY  ROBERT  L  scHEER 
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Unux’s  Expanding  Mainfraine  Role 
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Bui  a  lav  Gonifanies  m  atready  lookirK^ 
lor  MW  \iieys  to  lae  maafrarm  Linux  to 
cut  coals  and  increaM  efficiency. 

Soma  aia  uang  appkcalion  sarver 
emvonncnis  such  as  WebSphere  and 
WebLigic  lo  nx)  core  buBinass  apqiicr 
tNMs  *in  rnodam,  Wet^eririded  or  Web 
aervlcasetManmBn(s.‘s8y5Gioalnfor* 
maUon  Group  inihfai  Stacey  Qu^ 

Randy  langyei  sanior  vice  pnsident 
of  IfC  at  Wteoraa  Physiciana  Service 
Insurance,  says  he  hopro  to  do  hfit  ffiat. 
I  he  ooii}  lun  Ns  FteptoSoft  frtanoaf 
ataications  on  maaifrarne  Linux. 
Lengyei  says,  he  ooidd  easdy  oeale  W' 
tui  servers  when  Ms  accountants  need 
tiara  and  snlkh  tat  power  to  Web 
sarven  during  paik  enrolmani  Darkxk 
tor  rnw  rnerab^  Cuiendy.  hesaya,  the 


Th«*  imiabitity  of  iis  Windows  NT 
sen  ers  was  one  reason  why  recre- 
aiional  vehicle  manufacturer  Winneba¬ 
go  Industries  Inc.  implemented  Dallas- 
based  Bynari  Inc.'s  InsightScrvcr 
groupware  application  for  Linux  on  an 
IBM  z-Scrics  mainframe. 

Dave  Ennen.  technical  support  man¬ 
ager  at  the  Forest  City,  Iowa-based 
company,  says  be  had  to  reboot  his 
Windows  NT  servers  once  a  week  in 
an  eff'urT  to  improve  their  stability.  But 
"on  the  mainframe,  everything  is 
geared  to  sia>’tog  up  24  hours  a  day, 
seven  days  a  week,"  he  says. 

Winnebago  already  had  a  mainframe 
(an  IBM  S/390  Multiprisc  3000  Enter¬ 
prise  Server)  and  a  stair skilled  in 
IBM's  z.^M.  an  operating  system  that 
can  divide  each  partition  in  a  main¬ 
frame  into  multiple  sofiwtire-based 
virtual  machines,  each  running  its  own 
operating  system  and  applications. 

Rather  than  go  through  the  expense 
of  training  his  staJT  for  the  upgrade 
from  Windows  NT  to  Windows  2000 
and  Windows  Exchange  Server  2000, 
I.nncn  says  it  was  more  cost-effective 
to  use  pan  ofhis  existing  mainframe 
capacity  and  his  staffs  mainframe 
skills  to  run  its  Linux-based  c-mail  sys¬ 
tem-  However,  "if  you  were  going  to  go 
out  and  buy  a  mainframe"  just  in  run 
Linux,  he  says,  "it's  going  to  be  a  little 
hard  to  juscify." 

Many  observers  say  users  should  be 
running  at  least  20  to  25  servers  before 


servos  lh«  heap  accounlanls  happy 
during  ffiea  cnxKh  Nne  ait  nearly  iefe  itw 
rest  of  the  yaw. 

OavaErineatechnicaleuDportiTian- 
ager  el  Wnnebago  IndustriSB,  says  he 
hopastosaromoneybyrunninornain- 
frame  becho  software  on  Lkut.  By  us¬ 
ing  BUI'S  HipeiSockats  to  stage  tern 
data  to  UniB  running  on  the  rnsMtirne 
bef  ora  backing  it  up.  he  sayi.  he  could 
use  lowof  coat  Unux  backup  tools. 

Over  the  naid  B  tnonihs.  says  Quandt 
nwinfeam  Liiu  wl  etPar  a  Mr!  ptBse. 
where  corporate  IT  wi  uee  I  to  run  not 
only  bisRiasa  appilealtona  bid  itoo  (tol^ 
bases  that  currently  run  on  z/DS.  This 
devetoprnant  would  let  IT  shops  USB  the 
lower^Untaanvionraenttonat 
oxnplete  ftoplcalion  environmento  M 
used  to  be  scaOared  across  rnuMpto. 
harder-to-manage  aervars. 
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even  considering  consolidation  into  a 
mainframe  Linux  environment.  Some 
of  the  best  candidates  for  consolida¬ 
tion  are  infrastructure  applications 
such  as  file  and  prim  services,  e-maii. 
domain  name  servers  and  Web  servers 
.such  as  Apache. 

But  not  e\'ery  application  is  a  natural 
for  mainframe  Linux.  Windows  appli¬ 
cations  are  a  poor  choice,  since  they 
don't  run  on  Linux,  although  Unux 
equivalents  are  available  in  many 
cases.  And  applications  that  have  com¬ 
plex  graphical  user  interfaces  or  that 
perform  complicated  data  analysts  can 
use  so  much  processing  power  that  it's 


Action  Items 

CONSIDER  COMSOUOAT1NO  servers  that 
run  intrastmcture  apobcations  like  e-mail 


LOOK  lof  a  Lmux  distributor  with  enterpt'se- 
ciass  support,  such  as  SuSE  or  Red  Hat 

CROSS-TRAIN  the  Unn  and  mainirame 
staffs. 

MIORATE  applications  to  bnux  on  Intel- 
based  hardware  first,  then  go  lo 
maintrame  Linux 

FACTOR  IN  the  costs  and  effort  involved 
m  adopting  new  mainfiame  operating  sys¬ 
tems.  sudi  as  z/OS  or  z/VM.  that  might  be 
required  to  support  Linux  partitions 


more  ct>st-effcctive  to 
keep  running  them  on 
stand-alone  servers. 

Users  have  also  been 
reluctant  to  move  com¬ 
plex  applications  such  as 
SAP  R/3.  which  can  take 
years  to  implement  on 
distributed  servers,  onto 
a  new  environment.  Al¬ 
though  SAI’  AG  has  been 
among  the  first  vendors  to  support 
Linux  with  its  fiagiihip  products,  Linux 
will  represent  only  about  10%  of  new 
installs  in  2003.  says  Manfred  Stein, 
product  manager  for  Linux  Lab  and 
Unix  platforms  at  SAP. 

Once  you’ve  identified  applications 
to  run  on  the  mainframe,  users  and  an¬ 
alysts  recommend  migrating  them  first 
to  stand-alone  servers  running  Linux. 
That’s  a  good  way  to  gel  support  staff 
familiar  with  Linux  before  tackling  (he 
additional  complexity  of  the  main¬ 
frame.  they  say. 

Training  Unix  veterans  in  main¬ 
frame  Linux  skills  —  or  Linux  veterans 
in  Unix  skills  —  can  be  one  of  the 
biggest  challenges.  Many  organizations 
have  one  suppiort  organization  for 
mainframes  and  another  for  Windows 
and  Unix  servers,  says  John  Kogcl,  vice 
president  of  the  systems  and  service 
management  group  at  Candle  Corpora¬ 
tion  of  America  in  Des  Plaines,  Iowa. 
These  groups  must  work  together  and 
learn  new  terms  for  familiar  concepts, 
be  adds. 

Since  beginning  its  move  to  main¬ 
frame  Linux  in  lanuary  2002.  W1*S  has 
cross-trained  two  mainframe  and  two 
Unix  stafiers  in  the  combined  Linux/ 
mainframe  environment.  Each  em¬ 
ployee  then  took  his  knowledge  back 
to  his  respective  group. 

Choosing  the  Products 

The  choice  of  Unux  distribution  for 
the  mainframe  matters,  say  users  and 
analysts.  Nuremberg,  Germany-based 
SuSE  Linux  AG  has  the  closest  rela¬ 
tionship  with  IBM.  so  about  80%  of  or¬ 
ganizations  running  production  appli¬ 
cations  on  mainframe  Linux  use  SuSE 
software,  says  Stacey  Quandt,  an  ana¬ 
lyst  at  Giga  Information  Group  Inc. 

WPS’s  LengyeL  for  one.  chose  SuSE 
Linux.  "We  like  to  have  one  focal  point 
of  support,  through  IBM.  to  support 
z/VM  as  well  as  the  Linux  environ¬ 
ment,”  he  says. 

But  SuSE's  dominance  may  not  last, 
Quandt  says,  because  Raleigh.  N.C.- 
based  Red  Hat  Inc.  improved  its  main¬ 
frame  support  relationship  with  IBM 
in  the  second  half  of 2002. 

The  choice  of  mainframe  opcratii^ 


H  We’re  not 
interested  in 
just  getting  the  least 
expensive  thing  on 
the  market. 

RANDY  LENGYEL.  SENIOR  VP 
Of  MIS.  WISCONSIN  PHYSICIANS 
SEFMCE  INSURANCE  CORP 


system  also  makes  a  big 
difference.  Users  can 
run  Linux  in  native 
mode  on  IBM's  older, 
31-bit  mainframe  OS/390 
operating  system  and 
can  prioritize  applica¬ 
tion  access  to  resources 
within  a  partition.  But 
IBM's  latest  mainframe 
operating  system.  z/OS, 
supports  higher-throughput  64-bit 
processing  and  lets  IT  managers  prior¬ 
itize  applications  across  multiple  parti¬ 
tions,  says  Peter  McCaffrey,  director  of 
product  marketing  for  zSerics  main¬ 
frames  at  IBM. 

Users  who  hope  to  consolidate  hun¬ 
dreds  of  stand-alone  servers  on  main¬ 
frame  Linux  should  also  plan  to  imple¬ 
ment  IBM’s  z/VM.  recommends 
Quandt.  Z/VM  lets  users  create  hun¬ 
dreds  of  virtual  Linux  machines  within 
each  partition.  Without  z/VM.  users 
arc  limited  to  15.  one  for  each  partition. 
And.  says  Ennen.  with  z/VM,  you  don't 
have  to  bring  the  mainframe  down  to 
create  a  new  Unux  partition.  But 
z/VM  has  a  steep  learning  curve. 

Linux-Only  Hardware 

IBM  also  offers  the  Integrated  Facility 
for  Unux  (IFL).  a  mainframe  processor 
that  runs  only  Linux  under  z/VM  and 
costs  as  tittle  as  one-third  as  much  as 
a  similar  processor  used  for  general 
mainframe  workloads,  says  (Quandt. 
IFLs  can  run  on  IBM's  Multiprise. 
eServer  zSeries  and  S/390  Parallel  En¬ 
terprise  Servers. 

Another  advantage:  Adding  an  IFL  lo 
a  mainframe  doesn't  boost  software  li¬ 
censing  bills  because  IFLs  aren't 
counted  in  capacit)'-based  software 
pricing  agreements,  according  to  IBM. 

For  customers  that  don't  have  main¬ 
frames  and  might  otherwise  choose 
high-end  Unix  servers,  Quandt  po'mts 
out  that  IBM  offers  a  Unux-only  z800 
with  three  years  of  licensing  and  sup¬ 
port  at  entry  prices  of  less  than 
SdOO.CKX),  making  it  a  cost-effective 
aJicroalive  to  hi^-end  Unix  servers. 

Mainframe  Linux  isn't  a  good  fit  for 
every  application  or  every  user.  But 
the  more  you  suffer  from  server 
sprawl,  users  and  analysts  say.  the 
more  you  should  consider  it.  I 


Scheier  is  a  freelance  writer  based  in 
fioylston,  Moss. 
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The  instability  of  its  Windows  NT 
servers  was  one  reason  why  recre¬ 
ational  vehicle  manufacturer  Winneba¬ 
go  Industries  Inc  implemented  Dallas- 
based  Bynari  Inc's  InsigbtServer 
groupware  application  for  Linux  on  an 
IBM  zSeries  mainframe^ 

Dave  Enncn,  technical  support  man¬ 
ager  at  the  Forest  City.  Iowa-based 
company,  says  he  had  to  reboot  his 
Windows  NT  servers  once  a  week  in 
an  effort  to  improve  their  stability.  But 
“on  the  mainframe,  everything  is 
geared  to  staying  up  24  hours  a  da>', 
seven  days  a  week."  be  says. 

Winnebago  already  had  a  mainframe 
(an  IBM  S/390  Multiprise  3000  Enter¬ 
prise  Server)  and  a  staff  skilled  in 
IBM^  z/VM.  an  operating  system  that 
can  divide  each  partition  in  a  main¬ 
frame  into  multiple  software-based 
virtual  machines,  each  rtuming  its  own 
operating  system  and  applications. 

Rather  than  go  throi^  the  expense 
of  training  his  staff  for  the  upgrade 
from  Windows  NT  to  Windows  2000 
and  Windows  Exchange  Server  2000. 
Ennen  says  it  was  more  cost-effective 
to  use  part  of  hb  exbtii^  mainframe 
capacity  and  his  staff’s  mainframe 
skills  to  run  its  Linux-based  e-mail  sys¬ 
tem.  However,  "if  you  were  going  to  go 
out  and  buy  a  mainframe”  h»t  to  run 
Linux,  be  says,  "it's  going  to  be  a  little 
hard  to  rustify  ” 

Many  observers  say  users  should  be 
running  at  least  20  to  2S  servers  before 


even  considering  consolidation  into  a 
mainframe  Linux  environment.  Some 
of  the  best  candidates  for  consolida¬ 
tion  are  infrastructure  applications 
such  as  file  and  print  services,  e-mail, 
domain  name  servers  and  Web  servers 
such  as  Apache. 

But  not  every  application  is  a  natural 
for  mainframe  Linux.  Windows  appli- 
catiems  are  a  poor  choice,  since  they 
don’t  run  on  Linux,  although  Linux 
equivalents  are  available  in  many 
cases.  And  applications  that  have  codo- 
plex  graphical  user  interfaces  or  that 
perform  complicated  data  analysis  can 
use  so  much  processing  power  that  it's 


Action  Items 

CONSIOER  CONSOUOATWO  servos  that 
run  intrastructure  vpbeaborts  Mte  e-mail. 


LOOKforaUniadistrtxilorvMlhenterprise- 
dass  support,  such  as  SuSE  or  Red  Hal. 

CROSS-TRAM  the  Unix  and  matnframe 
stalls. 

MORATE  applications  to  Linux  on  Intel- 
based  hartMare  iirst.  ttwn  go  to 
mainframe  Linux. 

FACTOR  M  the  costs  and  effort  mvdvad 
in  adopting  new  mainbame  operating  sys¬ 
tems,  such  as  z/OS  or  2/VM.  that  might  be 
regLMol  lo  support  Linux  partitions. 


more  cost-effective  to 
keep  running  them  on 
stand-alone  servers. 

Users  have  also  been 
reluctant  to  move  com¬ 
plex  applications  such  as 
SAP  R/3,  which  can  take 
years  to  implement  on 
distributed  servers,  onto 
a  new  environment.  Al¬ 
though  SAP  AG  has  been 
among  the  ffrst  vendors  to  support 
Linux  with  its  flagship  products,  Linux 
will  represent  only  alMut  10%  of  new 
installs  in  2003.  says  Manfred  Stein, 
product  manager  for  Linux  Lab  and 
Unix  platforms  at  SAP. 

Once  you've  identified  applications 
to  run  on  the  mainframe,  tiscrs  and  an¬ 
alysts  recommend  migratii^  them  flrst 
to  stand-alone  servers  running  Linux. 
Thar's  a  good  way  to  get  support  staff 
familiar  with  Linux  before  tackling  the 
additional  complexity  of  the  main¬ 
frame.  they  say. 

'Dainii^  Unix  veterans  in  main¬ 
frame  Linux  skills  —  or  Linux  veterans 
in  Unix  skills  —  can  be  one  of  the 
biggest  challenges.  Many  organizations 
have  one  support  organization  for 
mainframes  and  another  for  Windows 
and  Unix  servers,  says  |ohn  Koget  vice 
president  of  the  systems  and  service 
management  group  at  Candle  Corpora¬ 
tion  of  America  in  Des  Plaines,  Iowa. 
These  groups  must  work  together  and 
leam  new  terms  for  familiar  concepts, 
be  adds. 

Since  beginning  its  move  to  main- 
flrame  Linux  in  January  2002.  WPS  has 
cross-trained  two  mainframe  and  two 
Unix  staffers  in  the  combined  Linux/ 
mainframe  environment.  Each  em¬ 
ployee  then  took  his  knowledge  back 
to  his  respective  group. 

Choosing  the  Products 

The  choice  of  Linux  distribution  for 
the  n\amframe  matters,  say  users  and 
analysts.  Nuremberg.  Germany-based 
SuSE  Linux  AG  has  the  closest  rela¬ 
tionship  with  IBM.  so  about  80%  of  or¬ 
ganizations  running  production  appli¬ 
cations  on  mainframe  Linux  use  SuSE 
software,  says  Stacey  Quandt,  an  ana¬ 
lyst  at  Giga  Information  Group  Inc. 

WPS’s  LengyeL  for  one,  chose  SuSE 
Linux.  "We  like  to  have  one  focal  point 
of  support,  through  IBM.  to  support 
z/VM  as  well  as  the  Linux  environ¬ 
ment."  be  says. 

But  SuSE’s  dominance  may  not  last. 
C^uandt  says,  because  Raleigh,  N.C- 
based  Red  Hat  Inc.  improved  its  main¬ 
frame  support  relationship  with  IBM 
in  the  second  half  of 2002. 

The  choice  of  mainframe  operating 
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system  also  makes  a  big 
difference.  Users  can 
nm  Linux  in  native 
mode  on  IBM's  older. 
31-bit  mainframe  OS/390 
operating  system  and 
can  prioritize  applica¬ 
tion  access  to  resources 
within  a  partidoa  But 
IBM's  latest  mainframe 
operating  system.  z/OS, 
supports  higher-throughput  64'bit 
processing  and  lets  IT  managers  prior¬ 
itize  applications  across  multiple  parti¬ 
tions.  says  Peter  McCaffrey,  director  of 
product  mariceting  for  zSeries  main¬ 
frames  at  IBM. 

Users  who  hope  to  consolidate  hun¬ 
dreds  of  stand-alone  servers  on  main¬ 
frame  Linux  should  also  plan  to  imple¬ 
ment  IBM's  z/VM,  recommends 
Quandt.  Z/VM  lets  users  create  hun¬ 
dreds  of  virtual  Linux  madiines  within 
each  partition.  Without  z/VM,  users 
are  limited  to  15,  one  for  each  partition. 
And.  says  Ennen,  with  z/VM.  you  don’t 
have  to  bring  the  mainframe  down  to 
create  a  new  Linux  partition.  But 
z/VM  has  a  steep  leamii^  curve. 

Unux-Only  Hardware 

IBM  also  offers  the  Integrated  Facility 
for  Linux  (IFL),  a  mainframe  processor 
that  runs  only  Linux  under  z/VM  and 
costs  as  little  as  one-third  as  much  as 
a  similar  processor  used  for  general 
mainframe  workloads,  says  Quandt 
IFLs  can  run  on  IBM's  Multtprise. 
eServer  zSeries  aiKl  S/390  Parallel  En¬ 
terprise  Servers. 

Another  advantage:  Adding  an  IFL  to 
a  mainframe  doesn't  boost  Software  li¬ 
censing  bills  because  IFLs  aren’t 
counted  in  capacity-based  software 
pricing  agreements,  according  to  IBM. 

For  customers  that  don’t  have  main- 
ftaroes  and  might  otherwise  choose 
hi^r-end  Unix  servers,  (^landt  points 
out  that  IBM  offers  a  Linux-only  z800 
with  three  years  of  licensing  and  sup¬ 
port  at  entry  prices  of  less  than 
$400,000.  making  it  a  cost-effective 
alternative  to  high-end  Unix  servers. 

Mainframe  Linux  isn't  a  good  flt  for 
every  application  or  every  user.  But 
the  more  you  suffer  ftxmi  server 
sprawl  users  and  analysts  say.  the 
more  you  should  consider  it  I 


Scheier  is  a  freelance  writer  based  in 
Boylston,  Moss. 
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Under  the  umbrella  of  IBM  ©server  xSerlesT  meteorological  superette  weather.com  is  enjoyirrg 
meteoric  success.  Thanks  in  part  to  the  installation  of  IBM  (Intel*  processor-based)  servers  running 
LinuxT  Select  xSeries  models  feature  the  Intel  Xeon”  processor  to  give  you  superior  performance 
and  cost-effectiveness.  For  an  IDG  report  on  hrjw  growing  companies  are  using  fT  to  advance  their 
business,  go  to  iMikcoiii/eserver/weather 
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Linux''  ready  with  setf^naneging  features  lor  every  e-business. 


Inte)*-based  /  xSeries"* 

It’s  an  affordable  and  powerful 
comAAn  of  mainframe- 
inspiroKliability  and  smart 
systeftAar>agement  tools. 


UNOr/pSeries” 

Highly  available,  highly  affordable 
and  highly  coveted.  TTie  [” 
the  platform  of  choice ' 

UNIX  and  Linux] 


□ 


□ 


MMrange  /  iSeries"' 
BringAasy-tO'depioy,  plug  and 
play  eBjsimss  to  your  business. 
SophiAated  technology  that’s 
ecisy  tAnanage  and  Linux  ready. 


Mainframe  /  zSeries"' 

Maximum  retefaity.  maximum  power, 
maximum  flexibility.  Design^W  up  to 
99.999%  uptime'  to  I^BIe  the 
demands  of  today's  e-twHisses. 
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winning  through  server  consolidation.  Winnebago  Industries  lives  by  its  e-mail  system.  By  consolidating  its 
functions  onto  one  IBM  ©server  zSeries  running  Linux,  the  company  created  an  industrial-strength  e-mail 
system,  and  saved  on  software  licensing  fees  in  the  process.  For  a  complimentary  guide  on  server  consolidation. 


visit  ■mbcom/eserver/wlnnebago 
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Microsoft’s  Craig  Mundie  sounds  off 
on  how  the  initiative  is  working  within 
the  company  and  for  customers. 


OUnHIMOIEspemhis 
fint  sir  yean  at  Micro* 
soft  Coq>.  incubating  a 
variety  non-PC  com¬ 
puting  and  service  offer¬ 
ings  —  tnctuding  Win¬ 
dows  CE,  software  for 
the  Pocket  K  and 
WebTV  —  for  the  com¬ 
pany's  consumer  plat- 
Jorms  iftvision.  But  non'  the  scope  of  his 
work  is  much  broader. 

Mundie  works  with  Chairman  and 
Chief  Sctftware  Architect  Bill  Gates  on  a 
comprehensive  set  c/  technical,  business 
and  policy  strategies  that  spans  Micro¬ 
soft's  entire  product  line.  As  senior  vice 
president  and  diief  technical  officer  of 
advanced  strate^es  and  policy,  Mundie 
musf  coordinate  the  plans  when  their 
irr^lementation  crosses  product  groups. 

Mundie's  interest  in  finical  and 
policy  issues  relared  to  security  and  crit¬ 
ical  infrastructure  has  iand^  him  on 
several  government  committees,  indud* 
ing  the  National  Security  Telecommuni¬ 
cations  Advisory  Committee.  He  also 
started  and  contutues  to  sponsor  Micro* 
sc^^’s  Trusrworr/^  Corr^mting  initiative. 

Computerworld's  Carol  Siiwa  inter* 
viewed  Mundie  about  the  7>ustworf% 
Confuting  progress.  Excerpts  follow: 

WMi  ■MG*  OM  nw  conpviywws  nivno  inB 
n  Qolii  iMuid  in  JHiaafy  2002  hme  on 
tho  TnatMVIby  Convutina  MIMm?  Tha^ 
was  sort  of  the  final  step  in  a  company- 
wide  evangelism.  At  that  point,  it  went 
horn  evangelizing  the  importance  of 
this  to  the  day-by*day  practicing  of  the 
art  of  what  you  do  about  it.  You  have  to 
train  people.  You  have  to  assess  where 
they  are.  You  have  to  make  it  possible 
to  measure  these  things. 

How  cnn  wo  in  Om  ouliide  world  tol  iww 
nwdi  progran  Mcrowift  has  mido  on  Trust- 
wonhy  CompuOng?  Qualitatively,  things 
like  Bill's  mema  observing  the  vast 
majority  of  people  in  the  company  act¬ 
ing  as  if  they  believe  this  was  an  im¬ 
portant  thing,  is  a  qualitative  way  of 
deciding  if  we  made  progress. 

In  terms  of  the  quantitative  mea¬ 
surements.  I  think  of  them  in  two 
ways.  There  is.  How  do  we  keep  score 
internally  on  whether  or  not  we're  re¬ 
ally  doing  the  right  thing?  What  I  said 
a  year  ago.  and  which  we  are  working 
every  month  to  do  better,  is  to  develop 
an  internal  measurement  system 
where  we’re  able  to  assess  the  progress 
that  people  have  made,  assess  their 
level  of  understanding  of  the  issues, 
provide  training  and  then  keep  score 
of  that  as  a  way  of  creating  manage¬ 
ment  metrics  that  allow  the  manage- 
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ment  of  the  company  to  look  in  a  holis¬ 
tic  way  at  Microsoft  and  say.  ‘’Well,  are 
all  the  groups  getting  it?  Are  they  do¬ 
ing  the  right  stuft?** 

The  ultimate  outcome  of  this  is. 
when  you  look  at  the  products,  do  they 
exhibit  better  characteristics?  And 
there,  the  anecdotal  evidence  which 
we  begin  to  measure  in  a  quantitative 
sense  is  certainly  starting  to  support 
the  claim  that  we  will  make  a  big  dif¬ 
ference  here.  If  you  look  at  Visual  Stu¬ 
dio  Xet.  which  was  the  first  product 
group  to  span  down  development  in 
order  to  at  these  particular  securi¬ 
ty  issues,  one  thing  that’s  clearly  ob¬ 


servable  is  [that]  we  delayed  the  ship¬ 
ment  of  the  product  ftom  Thanksgiv¬ 
ing  [2001]  until  February  [2002]  specif¬ 
ically  because  we  made  decisions  to 
make  changes.  That  costs  real  money, 
affects  real  programs  and  real  people. 

Right  now.  we’re  very  pleased,  be¬ 
cause  the  number  of  security  issues 
that  have  come  up  in  that  product 
since  its  release  is  de  minimis. 

¥Awt  an  aom  of  the  ottar  ants  whsrt  the 
eftacta  of  IlcnNoft'a  aocwlty  nviaw  can  be 

aeon?  [Internet  Information  Server]  6 
was  changed  entirely  in  its  installation 
configuration  so  that  only  the  basic 
Web  server,  which  is  quite  secure,  is 
the  thing  that's  standaidly  installed. 

There  have  been  other  things  people 
can  observe  in  terms  of  the  stand-down 
we  did  in  Windows,  where  we  stopped 
development  this  year  for  about  10 
weeks.  It  produced  a  set  of  patches 
that  we've  started  to  push  back  out  to 
the  Windows  update  mechanism  for 
some  of  the  installed  products. ...  We 
released  some  new  tools,  tike  the  Mi¬ 
crosoft  Baseline  Security  Analyzer. 

In  some  sense,  the  first  of  the  real 
Windows  products . . .  where  [trust] 
has  had  a  lot  of  effect  on  the  design 
will  be  the  .Net  Server  release  in  the 
spring  of  [this]  year,  because ...  we 
have  stopped  and  gone  back  and  made 
more  fundamental  changes. 

The  other  thing  that  we  think  is  go¬ 
ing  to  be  tcUii^  will  be.  Which  way  are 
all  the  vulner^iUties,  particularly  crit¬ 
ical  vulnerabilities,  trending  in  tenns 
of  the  use  of  the  systems?  We  feel  these 
efforts  are  starting  to  pay  off  and  that 
our  numbers  will  trend  down  in  terms 
of  the  absolute  numbers  of  bugs  that 
are  identified  and  vulnerabilities  that 


are  found  and  have  to  be  fixed. 

What  k  the  (peatMt  chalMigB  going  for¬ 
ward?  In  a  technological  sense,  you're 
chasing  a  rocket  ship.  I  mean,  we  con¬ 
tinue  to  have  the  technology  moving 
aggressively  forward.  We  continue  to 
scale  up  the  capability  of  the  systems. 
As  they  get  bigger  and  bigger,  com¬ 
plexity  mounts,  and  to  some  extent, 
those  things  all  worit  against  the  idea 
that.  well,  can  we  really  get  this  thing 
stabilized  and  improved? 

So  to  some  extent,  1  always  worry 
about  the  balance  between  having  to 
make  the  product  and  the  business  go 
forward  and  trying  to  lock  it  all  down. 
If  things  weren't  moving,  it  would  be  a 
lot  easier.  But  they  have  to  keep  mov¬ 
ing.  or  there  would  be  no  business. 

What  has  been  your  biggest  dteappoMnwrit 
in  ths  area  of  Trustworthy  Congwtfng?  Wc 
still  end  up  with  independent  security 
research  folks  finding  bugs  that  we 
don’t  find. . . .  We  wish  we  would  get  to 
the  point  where  they're  no  better  able 
to  find  things  than  we  are. 

When  I  think  about  the  industry,  one 
of  the  disappointments  I  had  is  that 
there's  no  observable  evidence,  to  me 
at  least,  that  any  other  significant  com¬ 
panies  have  really  chosen  to  focus  on 
this  to  the  degree  that  we  have.  Cer¬ 
tainly,  if  you  look  at  the  Linux  commu¬ 
nity  or  IBM  and  the  people  advocating 
all  the  open-source  approaches,  there's 
about  as  big  a  dichotomy  as  you  can 
imagine  between  what  they  say  about 
that  stuff  and  what  it  actually  means. 

One  of  my  big  disappointments  as  it 
relates  to  that  whole  phenomenon  is 
basically  the  blind  adoption  and  re¬ 
iteration  of  all  the  myths  around  these 
things:  Just  because  it’s  open,  it  must 
be  more  secure.  People  think  that  Mi¬ 
crosoft  is  a  whole  lot  worse  at  these 
things  from  an  engineering  standpoint 
than  that  community.  Well.  no.  I  don’t 
think  so.  You  look  at  Windows  with 
50  million  lines  of  code.  You  look  at 
Linux  at.  I  don’t  know.  S  million  lines 
of  code.  You  look  at  the  whole  number 
of  deployments,  or  at  least  the  total 
num^r  of  people  that  are  doing  the 
analysis  and  attack  on  these  things, 
and  if  we  come  out  even,  we’d  say  we 
must  be  doing  something  right  But  in 
fact,  we  don’t  find  a  lot  more.  In  £ict 
now  we're  increasingly  finding  less.  I 
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DEFINITION 

Session  Initiation  Protocol  is  a  sig¬ 
naling  protocol  for  Internet 
conferencing,  telephony,  pres¬ 
ence,  events  notification  and 
instant  messaging.  The  proto¬ 
col  initiates  call  setup,  routing, 
authentication  and  other  com¬ 
munication  features  to  end¬ 
points  within  an  IP  domain. 


BV  MATT  HAHKCN 

Session  initiation 

Protocol  (SIP),  with  its 
promise  of  serving  as  a 
single  global  signaling 
standard,  has  mushroomed  in 
importance  for  networking  in 
the  past  yean  But  it  may  be 
years  horn  adoption  because 
of  technical  barriers  still  to  be 
surmounted,  including  prob* 
lems  with  device  interoper¬ 
ability  and  concerns  _ 

that  SIP  will  make 
networks  more  vul¬ 
nerable,  experts  say. 

The  idea  behind  SIP 
is  to  provide  a  simple, 
lightwei^t  means  for 
creating  and  ending  connec¬ 
tions  for  real-tiine  interactive 
commtmkations  over  IP  net¬ 
works  —  mainly  for  voice,  but 
also  for  videocooferencir^ 
chat,  gaming  or  even  applica¬ 
tion  sharing. 

Since  the  Internet  Engineer¬ 
ing  Task  Force  launched  SIP  in 
1999,  hundreds  of  vendors  have 


started  to  sell  SIP-enabled 
phones  and  proxy  servers 
globally.  In  one  significant 
move,  Microsoft  &)rp.  built 
support  for  SIP  into  the  Win¬ 
dows  XP  operating  system. 

A  typical  corporate  scenario 
using  SIP  for  an  IP  (^one  call 
would  go  something  like  this: 

Caller  X  r>eeds  to  speak  to 
caller  Y.  Each  of  their  compa¬ 
nies  has  a  SIP  proxy  server.  X 

_  and  Y  can  be  using  any 

of  a  variety  of  clients, 
iiuriuding  a  PC  soft- 
Lv  ware  phone,  or  “soft- 
I  *  pbooe”:  a  SIP  hard¬ 
ware  phone;  an  analog 
phone  with  an  adapter 
or  a  SIP-enabled  ceil  phone. 

When  it  was  turned  on.  X's 
client  automatically  sent  a 
register  message  to  his  compa¬ 
ny’s  SIP  proxy  server,  telling  it 
to  route  calls  to  a  spedfic  IP 
address.  X  initiates  a  call  to  Y 
via  a  PC  softphone  by  typing  a 
text  request  that’s  sent  to  her 
company's  SIP  proxy  server. 


which  uses  the  Domain  Name 
System  to  look  up  Y’s  domain. 
The  invite  request  is  forward¬ 
ed  to  Y’s  company's  SIP  proxy 
server,  which  sees  that  X 
wants  to  call  Y  and  forwards 
the  invite  request  to  Y’s  IP 
address. 

Y’s  phone  rings,  or  a  screen 
pops  up.  and  Y  is  asked  if  be 
wants  to  accept  the  caU.  His 
afTirmative  response,  called  a 
200  OK.  is  sent  to  his  compa¬ 
ny's  proxy  server,  which  for¬ 
wards  it  to  X's  company’s  SIP 
proxy  server,  which  sends  the 
200  OK  to  X's  client 

An  acknowledgment  mes¬ 
sage,  or  ACUC.  b  sent  directly 
to  Y's  client,  and  the  commu¬ 
nication  begins 

SIP  b  designed  to  be  a  key 
component  for  integrated  data 
and  voice  IP  networks.  For  ex¬ 
ample,  companies  can  run  a 
cost-effective  single  wire  to  a 
desktop  using  IP  (replacing 
the  second  line  to  a  traditional 
phone)  and  have  the  PC  oper¬ 
ate  as  a  softphone  that  enables 
a  user  to  click  on  a  name  in  a 
PC  directory.  The  name  b  as¬ 
sociated  with  a  SIP  URL, 
sending  a  message  into  a  net¬ 
work  cloud.  Then,  when  a 
connection  is  established,  the 
softpbotre  user  can  communi¬ 
cate  via  a  headset  cotmected 
to  the  PC. 

Indusby  Inroads 

'*SIP  already  has  a  tremendous 
stron^Kild  in  a  multitude  of 
areas,”  says  David  Fraley,  an 
analyst  at  Csartner  Inc.  in 
Stai^rd,  Coim.  ”Lately,  SIP  b 
the  protocol  of  choice  for  new 
3G  wireless  i>etwofks  and 
phones.” 

Moreover.  Cisco  Systems 
Inc  and  other  manufacturers 
of  IP  public  branch  exchange 
(PBX)  equipment  are  putting 
SIP  into  that  hardware,  while 
media  gateway  makers  are 
adding  it  to  network  cores, 
Fraley  says.  Microsoft,  Yahoo 
Inc.  and  America  Online  Inc. 
have  made  SIP  a  part  of  in¬ 
stant  messaging  sessions. 

"What  well  have  in  the  fu¬ 
ture  b  a  single  sigiulmg  pro¬ 
tocol  across  all  IP  networks, 
and  10  years  out  all  networks 
are  going  ro  be  IP.”  Fraley 
predicts. 

The  principal  intention,  and 


advantage,  of  SIP  is.  of  course, 
having  a  common  signal 
across  a  multitude  of  devices, 
Fraley  says. 

But  Tim  McCracken,  busi¬ 
ness  development  manager  at 
Cisco,  points  out  that  interop¬ 
erability  isn’t  always  as  good 
as  proposed.  He  says  that  for 
basic  person-to-person  calls, 
SIP  Mmrks  fine.  However,  be¬ 
yond  the  basic  connection  and 
rail  waiting  and  fall  holding, 
there  are  hundreds  of  features, 
sud)  as  call  transferring  and 
call  billing,  that  arc  being  de¬ 
layed  due  to  interoperability 
problems. 

Craig  Cotton,  a  manager  of 
produce  mariccting  at  Cisco, 
says  hb  company  b  ”buUbh” 
on  SIP  but  questions  udiether 
it  can  evolve  to  deliver  all  the 
functionality  enterprises  want. 

Cisco  officiab  worry  that 
SIP.  vrritten  as  a  peer-to-peer 
protocol  could  be  inadequate 
for  organizations  that  ne^  a 
signaling  protocol  for  dleni/ 
server  networks.  But  Fraley 
says  SIP  proxy  servers  can  be 
created  to  overcome  thb 
problem. 

At  WortdCom  Inc.,  SIP  "has 
opened  entire  lines  of  busi¬ 
ness."  says  Teresa  Hastings, 
director  of  multimedia  ser¬ 
vices  engineering.  In  foot,  the 
company  b  already  working 
with  Microsoft  on  a  beta  ver- 
sioo  of  a  Windows  XP  server 
supporting  SIP,  says  Henry 


Simireich.  a  dbtingubhed 
member  of  engineering  at 
WorldCom.  T^  company  in 
August  launched  a  commer¬ 
cial  IP  telephony  service 
called  Connecrioo  that  de¬ 
pends  on  SIP. 

Despite  such  high  hopes, 
there  are  concerns  that  SIP 
could  pose  network  sectuity 
problems  as  it  becomes  more 
universal.  ”lf  you  have  a  single 
signalii^  technology  running 
from  telephones  over  the  In¬ 
ternet  into  core  networks  and 
evcryvdierc  cbe.  there's  a  lot 
more  room  for  malicious  be¬ 
havior.”  says  Fraley. 

The  peer-to-peer  nature  of 
SIP  also  raises  related  con- 
cerm  about  marugement  and 
control  in  general.  (2otton  says. 

"With  the  traditional  client/ 
server,  (the  datacom  manager] 
b  in  ctmiTol  and  you  know  all 
the  users,  but  with  peer-to- 
peer.  you  have  a  lot  of  features 
on  a  device  and  you  don't  go 
through  a  cciural  repository," 
says  C^onoo.  "Eventually,  with 
a  SIP  proxy  server.  we'U  get 
I  that  control  but  bow  long  will 
it  take  in  a  pure  SIP  environ¬ 
ment  to  get  pure  matuigeineot 
and  control  aiwi  security?”  I 
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Task-Centric  Storage 

I  ^ore  an  archived  e-mail  file  at- 

tachment  sent  to  1.000  users,  Centera 

Hj^L  H  H  H^kJI  HHl^l  would  create  1,000  CDF  references  to  a 

H  H  ^HH  single  content  ID.  which  in  turn  would 

%■  reference  a  single,  stored  rUe. 

Start-up  Avamar  Technologies  Inc. 


Outlook:  New  intelligent,  inexpensive 
ATA-based  storage  appliances  are  solving 
application-specific  problems  -  and 
may  redefine  the  traditional  role  of  the 
application  server.  By  Robert  L  Mitchell 


ETWORK  APPLIANCE  INC.'S  intercept 

NearStore  ushered  in  the  strips  off 

era  of  using  inexpensive.  and  time 

Advanced  Technology  algorithn: 

Attached  (ATA)  disk  arrays  ter  contei 

for  disk-to-disk  backup  or  descripto 

secondary,  near-line  stoi^e.  The  prod-  plication 
uct,  launched  in  March  2002,  offers  object  an< 
faster  backup  and  recovery  times  at  a  appiicatu 
cost  per  megabyte  that’s  competitive  stored  ob 
with  tape  backup  systems.  Now  ven-  from  the 

dors  are  rushing  to  add  ap- _ 

plication-specific  inleUi-  rlJCDISMIC-‘& 
gence  to  ATA-based  storage  URLnOnV 
appliances  that  reduces  ap-  TCp|||iA|  fUUFC 
pUcation  server  workloads  ILUIllfUlUlllW 
while  offering  more  effi- 

cient  ways  to  store  and  retrieve  data.  should  ne 
Perhaps  the  best  example  is  Centera,  appiicatu 
EMC  Corp.’s  system  for  indexing,  stor-  on  lower¬ 
ing  and  retrieving  “fixed  coment”  files.  Steve  Duj 
In  Centera’s  Content  Addressed  Stor-  Mass.-ba 
age  scheme,  the  client  application  by-  Center 
passes  the  server’s  ffle  system  by  mak-  redundai 
ing  calls  to  a  proprietary  application  tiple  refe 
programming  interface  (API).  Centera  instance 


intercepts  each  file  storage  request, 
strips  off  the  metadata  (such  as  date 
and  time  stamps)  and  runs  a  hashing 


pie,  to  store  an  archived  e-mail  file  at¬ 
tachment  sent  to  1,000  users,  Centera 
would  create  1,000  CDF  references  to  a 
single  content  ID.  which  in  turn  would 
reference  a  single,  stored  file. 

Start-up  Avamar  Technologies  Inc. 
takes  this  technology  one  step  further 
to  address  the  problem  of  backup  inef¬ 
ficiencies.  While  Centera's  CDF  tech¬ 
nology  can  eliminate  storage  of  redun¬ 
dant  files,  Avamar’s  Axion  backup  ap¬ 
pliance  indexes  the  individual  data 
blocks  that  make  up  those  files  on  disk 
in  order  to  eliminate  both  file  and  par¬ 
tial  file  redundancies.  When  a  sen¬ 
tence  changes  in  a  document,  for  ex¬ 
ample,  Axion  updates  only  the  affected 
blocks  within  that  file. 

“We're  so  much  more  efficient  (that] 
we  can  store  10  to  100  times  the  amount 
of  daily  backups  that  you  could  on  a 


algorithm  to  create  a  unique,  27-charac-  [disk-to-disk  backup  system  that  is] 


ter  content  ID.  It  then  returns  a  content 
descriptor  file  (CDF)  to  the  client  ap¬ 
plication  that  points  to  both  the  stored 
object  and  its  metadata.  Thereafter,  the 
application  need  only  request  the 
stored  object's  content  ID.  Abstracted 
from  the  storage  media  in  this  way.  the 
_ application  needn’t  worry 


mirroring  tape  backup,”  says  Jed  Yueh, 
Avamar’s  executive  vice  president.  The 
result  is  a  system  that  requires  less 
space  for  backups,  can  restore  faster  and 
can  efficiently  back  up  distributed  sys¬ 
tems  over  a  wide-area  network,  he  says. 

Another  start-up.  Netezza  Corp.,  has 
taken  the  intelligent  storage  concept 


about  disk  I/O.  tracking  the  the  furthest  by  embedding  parallel 


file  path  or  keeping  up 
I  fUiirQ  changes  in  the  back- 

LVvILw  end  stor^e  configuration. 

-  The  bottom  line:  “You 

should  need  less  of  a  server . . .  and  the 


processing  power  with  individual  disk 
drives.  It  designed  the  Netezza  Perfor¬ 
mance  Server  as  a  “data  appliance” 
that  optimizes  business  intelligence 
queries  against  very  large  databases. 


applications  should  run  more  efficiently  replacing  the  traditional  Oracle  data- 


on  lower-cost  compute  platforms,”  says 
Steve  Duplessie,  an  analyst  at  Milford, 
Mass.-based  Enterprise  Storage  Group. 

Centera’s  technology  also  eliminates 
redundant  fik  storage  by  creating  mul¬ 
tiple  references  that  point  to  a  single 
instance  of  the  stored  file.  For  exam- 


base  running  on  high-end  Unix  servers 
and  EMC  storage  arrays.  CEO  and  co* 
foimder  Jit  Saxena  says  disk  I/O  is  a 
bottleneck  when  querying  such  data¬ 
bases.  Netezza’s  parallel  processing  ar¬ 
chitecture  packages  what  it  calls  Snip¬ 
pet  Processing  Units  (SPU)  with  each 
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disk  drive  —  up  to  450  per  appliance 
—  and  integrates  those  with  a  symmet¬ 
ric  multiprocessing  front  end  that  can 
accept  S^L  queries  from  any  applica¬ 
tion  that  supports  the  Open  Database 
Connectivity  protocol.  Each  SPU  has 
dedicated  memory  and  communicates 
over  a  Gigabit  Ethernet  connection. 

**We  have  deployed  huge  amounts  of 
intelligence  ri^t  next  to  each  drive,” 
says  Saxena.  By  keepii^  all  drives  proc¬ 
essing  in  parallel,  he  says,  ‘Sve  provide 
10  to  20  times  the  pierfbnnance  of  a  {tra¬ 
ditional]  system  at  half  to  one-third  the 
cost”  And  because  the  system  is  read¬ 
intensive  and  application-spiecific,  Sax¬ 
ena  says  ATA-based  drives  woik  well 

By  using  smart  inexpensive  ATA- 
based  storage  appliances  that  offload 
I/O  processing  for  application-specific 
tasks,  vendors  may  eventually  change 
how  users  view  the  traditional  server’s 
role,  says  Duplessie. 

’’What  we’re  doing  is  taking  distrib¬ 
uted  computing  to  the  next  level  by 
‘appliance-izii^’  the  intelligence  in  the 
server,”  he  says.  But  even  big-name 
products  like  Centera  are  still  in  early 
stages  of  acceptance.  “It  will  take  some 
time  for  people  to  make  the  best  use  of 
this,”  predicts  Jamie  Gruener,  an  ana¬ 
lyst  at  The  Yankee  Group  in  Boston.  I 


Centera  Turns  State’s  Evidence 


The  Southern  CaMomia  Mgh  Toch  Task  Forte  in  Nor¬ 
walk.  C^..  became  an  early  adopter  of  EMCs  Centera.  us¬ 
ing  it  to  archive  forensic  evidence  gathered  from  suspects' 
computers,  to  using  the  system,  investigators  burned 
evidwice  onto  CD-ROMs  *  as  many  as  XX)  for  a  6066 
drive  image.  IVe  needed  something  that  was  se¬ 
cure.  vwy  reNable.*  says  project  director  Rick  Crat- 
go.  Centera's  design  supported  mirroring  and  pro¬ 
vided  an  audit  trail,  since  stored  objects  can't  be 
changed  without  generating  a  new  content  ID. 

‘Centera  was  almost  a  custom  fit,' says  Craigo. 

Using  custom-developed  software,  investigators  now 
store  captured  evidence  on  a  Linux  server  duster  with  6TB 
of  direct-attached  storage.  Completed  cases  migrate  to  the 


Centera  w:hive  before  users  erase  them  from  the  actrve 
storage  vea.  Craigo  says  Centera  was  priced  righL  “Our 
sheriffs  department  has  a  Symmetrix  system  tfvM  cost  a 
miion  bucks,  and  that's  1T6.  We're  at  a  quarter  of  that  for 
X)T6.  It's  a  day-and-night  comparison,*  he  says.  But  the 
system  has  VKither  bmefit;  Craigo  uses  it  to  back 
up  Hes  on  both  the  evidence  network  and  Win¬ 
dows  2000  servers  in  the  Task  Force's  offices. 
Backups  run  quickty  and  with  minimum  space  be¬ 
cause  Centera  saves  only  one  copy  of  redundant 
ies  and  updates  only  those  ties  that  have  changed.  "With 
the  amount  of  archiving  we  do.  wel  see  the  overal  savings 
in  about  a  year  and  a  h^.*  he  says. 

-  Robert  L  Mitchei 


Southern  Califomia  High  Tech  Task  Force 
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Task-Centric  Storage 
Takes  the  Stage 
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By  Robert  L.  Mitchell 


N!  I  WOKK  I.WCl  IN(  s 

\i  .irStorc  iishcrt'J  in  rho 
iT;i  (irusiiiL!  inexpL'n-^iw. 
.\Jv;ini.vJ 

Ati.iclifJ  <  A'l  A )  Jisk  amys 
lor  disk-ti'-Jisk  backup  or 
scconJarv.  near-line  stor.iuc.  The  prod¬ 
uct,  launched  in  March  JiMJ.  otTcrs 
raster  backup  and  rcco\cr\  times  at  a 
v'osi  per  inejiabyie  llial's  conipciiti\e 

with  t.ipe  backup  s\sienis  \(iu  \»‘n- 

dors  are  rnshin;:  to  .idd  .ip-  _ 

ptication-speiil'ic  iniclli 
jictiic  ti'  A1 A  based  sioi 
•ippliaiiccs  ilial  reduces  ap¬ 
plication  si-r\er  workloads 
A hilc  itlVerinp  more  etn 
cieiil  w.t\  s  to  sitire  and  relriexe  data. 

IVrhaps  the  I’esi  e\.Tinple  is  ( .enter.i, 
i  \l( ,  t  orp.'s  s\  stern  lor  indexinj:.  stor¬ 
ing  and  ret riev ini'  •'fixed  content"  files. 
In  (  enteni's  L.ontent  Addressed  stor- 
jpe  scheme,  the  client  application  by¬ 
passes  the  server's  file  system  by  mak¬ 
ing  calls  to  a  proprietary  application 
propramminp  interface  (Al’l).  Cieniera 
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intercepts  each  file  stor;ij:e  request, 
strips  off  the  metadata  (such  as  dale 
and  lime  stamps)  and  runs  a  hashing 
.ilporiihm  l»i  create  a  unique.  27-charac- 
ter  content  II).  It  then  returns  a  eonteiit 
descriptor  file  (CDl  )  to  the  client  ap¬ 
plication  that  points  to  both  the  stored 
object  .ind  its  metadata,  rhercafier.  the 
application  need  only  request  the 
stored  object  s  content  ID.  Abstraeied 
from  the  storage  niedi.t  in  this  way.  tlie 

_  applic.ilion  needn't  worr> 

.iboni  disk  I  i).  tr.ickinii  the 
file  p.ilh  or  keeping  up 
with  clianiaes  in  the  Kick- 
end  storage  eonfipuralion. 
rile  bottom  line:  •'Vtni 
should  need  less  ofa  serx'cr . . .  and  the 
applications  should  run  more  efficiently 
on  lower-cost  compute  platforms,"  says 
Steve  Duplessic.  an  analyst  at  Milford. 
Mass.-based  bnterprise  Storage  CJroup. 

Centera's  technology  also  eliminates 
redundant  file  storage  by  creating  mul¬ 
tiple  references  that  point  to  a  single 
insianee  of  the  stored  file.  For  exam¬ 


ple.  to  store  an  archived  e-mail  file  at- 
l.ichmeni  sent  to  l.OOl)  users.  t.;enier.i 
would  create  i.OtX)  tiDl'  references  loa 
single  content  ID.  which  in  turn  would 
reference  .t  single,  stored  file. 

Start-up  .Avamar  reehnologies  Ine. 
takes  tliis  technology  one  step  further 
to  .iddress  the  problem  of  backup  inef¬ 
ficiencies.  W  hile  (x’lUera's  (dlF  tech¬ 
nology  can  eliminate  storage  of  redun¬ 
dant  files.  Avamar's  .\xion  backup  ap- 
pli.uiee  indexes  the  individual  data 
blocks  that  make  up  those  files  on  disk 
in  order  to  eliminate  both  file  and  par¬ 
tial  file  redundancies.  When  a  sen¬ 
tence  changes  in  a  document,  for  ex¬ 
ample.  Axion  updates  only  the  affected 
blocks  w  ithin  that  file. 

“We're  so  much  more  efficient  I  that  ] 
we  can  store  lO  to  lOO  times  the  amount 
of  daily  backups  that  you  could  on  a 
|disk-lo-disk  backup  system  that  is| 
mirroring  tape  backup."  says  |ed  Yueh. 
Avamar's  executive  vice  president-  Ihe 
result  is  a  system  that  requires  less 
space  for  backups,  can  restore  faster  and 
can  efficiently  back  up  distributed  s>s- 
lems  over  .i  wide-area  network,  he  s:iys. 

Another  start-up.  Nete//a  I  \irp..  lias 
taken  the  intelligent  storage  euneepi 
the  furlhesl  by  embedding  parallel 
processing  power  with  individual  disk 
drixes.  It  designed  the  Nete^/a  I’erfor- 
manee  Server  as  a  "data  appliance  ' 
that  opiinii/es  business  intelligence 
queries  against  very  large  databases, 
replacing  the  traditional  Draele  data¬ 
base  runtiing  on  high-end  Unix  servers 
and  KMC  storage  arrays.  (^Kl)  and  co- 
founder  Jit  Sa.xena  says  disk  lA)  is  a 
bottleneck  when  querying  such  data¬ 
bases.  Nelezza’s  parallel  processing  ar¬ 
chitecture  packages  what  it  calls  Snip¬ 
pet  PriK’essing  Units  (Sl’U)  with  each 
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EMCCORP. 

■  Location:  Hopkinton.  Mass. 

■  Web:  www.emc.cont 

■  Product  Centera;  pnees  range  from 
$204,000  for  STB  ot  nfmored  storage  to 
$4C$.000  tor  10TB.  Systems  can  be 
clustered  tor  up  to  150T6  of  capacity. 

■  Release  date:  April  2002 


AVAMAR  TECHNOLOGIES  INC. 

■  Location:  Irvine.  Calif. 

■  Web:  www.avamar.com 

■  Product  Axion  backup  appliance; 
prices  start  at  $170,000  tor  up  to  3.5TB 
of  mirrored  storage. 

■  Release  date:  October  2002 


NETEZZACORP. 

■  Location:  Framingham.  Mass. 

■  Web:  www.netezza.com 

■  Product  Netezza  ^onnance  Serv¬ 
er:  prices  range  from  $622,000  tor  a 
A.BTB  system  to  S2.5  mifiion  tor  an  18TB 
model. 

■  Release  date:  September  2002 
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RAIN  Explained 

LMef  the  hood,  both  Centera  and  Axion 
storage  appliances  use  what  are  called 
Redundant  Arrays  of  Independent 
Nodes  (RAW)  to  achieve  redurrdancy 
and  improved  refiabity.  Both  systems 
consist  of  independently  functioning 
storage  nodes  that  fit  ireide  a  standard 
19in.  cabinet.  Each  node  includes  one 
or  more  (fisk  drives,  a  CPU.  memory, 
and  Ethenret  connections  that  serve  as 
the  comrnunicabons  badrplane  within 
the  box.  Like  network-attached  storage 
devices,  each  node  runs  its  ovm  operat¬ 
ing  system.  (Centera  runs  a  variant  of 
Linux  H  caBs  CentraStar.) 

RAIN  is  an  implementation  of  RAID 
across  nodes,  rtfher  tlwi  disk  arrays. 
Centera  uses  RAW  tor  disk  mirronno. 
Axion  supports ‘RAW^.’ a  node-level 
irr^lementation  of  RAO  5.  wNch  re¬ 
quires  fewer  redundant  drives. 

The  RAW  architecture  also  enables 
scaling.  In  Centera.  for  example,  up  to 
16  individuat  racks  can  be  clustered  tor 
up  to  150TB  of  mirrored  storage,  and 
up  to  seven  dusters  can  be  arranged 
inlo  a  ‘domain'  to  support  up  to  1.05 
petabytes  of  data. 

-  Robert  L  Mitchell 


disk  drive  —  up  to  450  per  appliance 
—  and  integrates  those  with  a  sy'mmct- 
ric  multiprocessing  fix>nt  end  that  can 
accept  SQL  queries  from  any  applica¬ 
tion  that  supports  the  Open  Database 
Connectivity  protocol.  Each  SPU  has 
dedicated  memory  and  communicates 
over  a  Gigabit  Ethernet  connection. 

"We  have  deployed  huge  amounts  of 
intelligence  right  next  to  each  drive." 
says  Saxena.  By  keeping  all  drives  proc¬ 
essing  in  parallel,  he  says,  "we  provide 
10  to  20  times  the  performance  of  a  [tra¬ 
ditional]  system  at  half  to  one-third  the 
cost."  And  because  the  system  is  read¬ 
intensive  and  application-specific.  Sax¬ 
ena  says  ATA-based  drives  work  well. 

By  using  smart,  inexpensive  ATA- 
based  storage  appliances  that  oRToad 
I/O  processing  for  application-specific 
tasks,  vendors  may  eventually  change 
how  users  view  the  traditional  server’s 
role,  says  Duplessie. 

"What  we’re  doing  is  taking  distrib¬ 
uted  computing  to  the  next  level  by 
‘appliance-izing’  the  intelligence  in  the 
ser\'er."  he  says.  But  even  big-name 
products  like  Centera  arc  still  in  early 
.stages  of  acceptance.  "It  will  take  stime 
time  for  people  to  make  the  best  use  of 
this."  predicts  Jamie  Grucncr.  an  ana¬ 
lyst  at  The  Yankee  Group  in  Boston.  I 


Centera  Turns  States  Evidenee 


The  Southern  California  High  Tech  Task  Force  >n  Nor 

walk.  Calil.,  became  an  early  adopter  o(  EMC's  Centera.  us¬ 
ing  It  to  archive  forensic  evidence  gathered  from  suspects’ 
computers  Prior  to  using  the  system,  investigators  burned 
evidence  onto  CD-ROMs  -  as  many  as  100  for  a  606B 
drive  image,  "We  needed  something  that  was  se¬ 
cure.  very  reliable,"  says  protect  director  Rick  Crai- 
go.  Cenlera's  design  supported  mirroring  and  pro¬ 
vided  an  audit  trail,  since  stored  obiects  can't  be 
changed  without  generating  a  new  content  ID 
"Centera  was  almost  a  custom  lit,"  says  Craigo. 

Using  custom-developed  software,  investigators  now 
store  captured  evidence  on  a  Linux  server  cluster  with  6TB 
ot  direct-attached  storage  (^mpleted  cases  migrate  to  the 


Centera  archive  before  users  erase  them  from  the  active 
storage  area.  Craigo  says  Centera  was  priced  right  'Our 
sheriff's  department  has  a  Symmetrix  system  that  cost  a 
million  bucks,  and  that’s  1TB  We  re  at  a  quarter  of  that  (or 
10TB.  H's  a  day-and-night  comparison."  he  says.  But  the 
system  has  another  benefit  Craigo  uses  it  to  back 
up  tiles  on  both  the  evidence  network  and  Win¬ 
dows  2000  servers  in  the  Task  Force’s  oHices 
Backups  run  quickly  and  with  minimum  space  be¬ 
cause  Centera  saves  only  one  copy  ot  redundant 
files  and  updates  only  those  files  that  have  changed  'With 
the  amount  of  archiving  we  do.  weH  see  the  overall  savings . 
m  about  a  year  and  a  half."  he  says 

-  Robert  L  Mitchell 


Southern  Califamia  High  Tech  Task  Force 

HIGH-SECURtTY  EVIDENCE  AND  BACKUP  SYSTEM 


T.u.K  furci-  oftii4  iiftAi'ili 
W'lulima  2000  S4‘ivi*i:. 


The  Task  Force's  evider«»  system  mutes  forensic  disk  rrage  evid^ 
gathered  detecbve  wotkstefions  over  a  Gigabit  Eihemet  LAN  to  a 
Linux-based  evidence  server  cluster.  The  system  stores  imaoes  n 
electronc  He  foldera  atong  wtfi  leports  and  other  case  fles.  Special 
software  on  the  storage  SMich  server  cluster  makes  cds  to  the  Cerdera 
API  to  alow  daiy  backups  of  locai  office  server  and  ewdence  server  data 
to  the  Centera  device.  Cenlera's  CDF  technology  lets  the  system  store 
eech  unique  fite  just  once,  mateng  backups  mote  effioeni  ^  ehnnakng 
redundant  backup  fles. 

Detectives  pennanendy  archive  evidence  server  data  on  Centera  as 
toey  close  aach  case.  Ceritara's  abily  to  create  a  unique  content  C  with 
a  time  and  date  stanv  tor  each  stored  object  creates  toe  secue  audU  trat 
requited  tor  stored  mdenoe. 
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Meanwhile.  I  made  an  angry 
call  to  the  telephone  company 
and  chased  down  the  beads  of 
the  systems  operations  group, 
wtucfa  quickly  plugged  the 
holes  ami  corrected  the  proc¬ 
ess.  It  seemed  that  Nkk  had 
merely  meant  to  clear  up  his 
files  and  free  up  disk  space.  No 
harm  had  been  done.  Or  had  it? 

Bob  connected  to  the  NT 
share,  one  of  our  company- 
wide  temporary  file-sharing 
spaces  that's  open  to  all  users. 


To  find  a  ompiele  archive  of  oui 
Secully  Mawgar's  Journals,  go  orim  to 
O  c«wpittfwortd.co>n/nc|ounial 


A  poteiitialy  nmiproinised  root  key  threat¬ 
ens  to  undermine  the  entire  corporate 
publc-key  kifrastructure.  By  Vince  Tuesday 


have  run,  and  it  showed  that 
Nick's  account  had  conducted 
a  vast  cleanup  operation.  The 
contents  of  directory  after 
directory  had  been  listed  and 
then  deleted 

This  could  be  a  sign  of  nor¬ 
mal  tidying  up  —  or  of  a  not- 
very-sldlled  malicious  user. 
Unix  writes  the  history  file  to 
disk  when  you  disconnect.  If 
you  want  to  get  rid  of  h,  you 
have  to  connect  again,  delete 
the  history  and  leave  once 
more.  Otberwrise,  like  Nick, 
you  leave  the  entire  set  of 
commands  issued  in  the  ses¬ 
sion.  With  the  fiiiJ  history,  we 
could  see  he  bad  visited  the 
directories  with  the  keys  in 
them  but  hadn't  copied  or 
opened  any  of  the  Hies  before 
deleting  them. 

The  root  key  was  safe,  be¬ 
cause  Nick  ha^t  looked  at  the 
contents.  But  could  it  be  recov¬ 
ered  so  that  new  test  keys 
could  be  issued?  Or  would  we 
have  to  make  a  new  one  and 
reissue  the  entire  test  environ¬ 
ment  trust  infrastructure? 

Normally,  we  would  use  a 
disk  utility  to  recover  the  files, 
but  with  so  many  files  deleted 
at  the  same  time,  tracking 
down  the  ones  wre  needed 
wouldn’t  be  easy.  Then  Bob 
pointed  out  that  the  important 
(lies,  including  the  root  key. 
had  been  copied  to  a  Windows 
NT  shared  drive. 


He  navigated  to  the  directo¬ 
ry  used  by  his  team,  then  went 
to  the  section  for  the  test  keys, 
in  a  folder  called  Test.  But 
what  was  the  folder  next  to  it. 
called  Live? 

My  heart  missed  a  beat.  The 
keys  to  our  live  system  are 
pr^uced  under  total  care  and 
close  supervision,  processed 
on  machines  not  connected  to 
external  networks  and  careful¬ 
ly  encrypted  whenever  they 
are  transferred  to  backups. 

1  pictured  the  result  of  them 
lying  around  on  a  wide-open 
NT  share  available  to  thou¬ 
sands  of  staffers.  We  would 
have  to  shut  down  our  key  sys¬ 
tems,  investigate  aU  access  to 
confirm  it  was  legitimate  and 
notify  all  users.  The  humilia¬ 
tion  and  ridicule  from  our  cus¬ 
tomers  and  competitors  would 
be  huge.  "Live?'  I  asked  in  a 
nervous  tone. 

“Don’t  worry."  Bob  said. 
'Someone  fust  added  the  di¬ 
rectory  to  keep  the  structure 
consistent  with  all  our  others. 
We  always  have  a  Live  and 
Tbst.  Lo(ri(.  it’s  empty  —  al¬ 
ways  has  beea* 

I  checked  the  backup  Ic^  to 
confirm  that  Bob  was  correct 
before  letting  out  a  long  sigh 
of  relief.  By  concentrating  all 
the  trust  and  security  of  the 
system  into  a  few  small  files, 
PKl  does  limit  what  you  have 
to  protect  and  makes  it  easier 
to  focus  your  efforts.  But  PKI's 
root  key  also  makes  H  easier 
for  thio^  to  go  horribly 
wrong,  as  my  experience 
shows.  I 


WMTNYNIHK? 

Thu  woiks  jounal  is  written  bya  real 
security  manager.  *Vince  Tuesdiy.*  wirose 
name  and  enrpioyer  have  been  cisgused 
forcbwousrea9ons.ContacthimBtvinca- 
tueedeygtiusrimail.com.  Of  ioin  Bredis- 
cussioninourioninv 
QiMiLMaVBO 


A  Btttv  Bnwviir 


IY  COMPANY  has  a 
fbnnal  process  to 
deal  with  staffers 


your  own  keys  for  any  part  of 
the  system  and  pretend  to  be 
whomever  you  like.  Without 


I  who  are  leaving  our  our  root  key.  we  could  issue  no 


company.  It  helps  us  close  ac-  new  keys  and  would  have  to  re¬ 
counts  quickly  and  deal  with  build  our  PIQ  from  scratch  —  a 
complicated  shuatioos  like  fir-  daunting  prospect, 
ings.  We  don't  want  someone  .  ^  , 

to  find  out  from  our  team  that  AbfllWm  ActiVlty 
he's  lost  his  job.  rather  than  At  first.  I  wasn’t  too  wc 

from  human  resources  or  his  rince  this  was  [ust  the  i 


At  first.  I  wasn’t  too  worried, 
rince  this  was  [ust  the  lest  sys- 


manager.  So  we  must  follow  a  tern.  1  had  Bob  disconnect  the 


complicated  series  of  - • - 

steps.  Recently,  we  ill  iHMillW 

lud.mistcp.  SCCHhIT 

In  our  process,  the 
PC  support  group  miMiai 

disables  network  and  Q 

e-mail  accounts,  oth-  _ 

er  teams  disallow  ac-  \ 

cess  n>  the  appropriate  ac-  within 

counts  on  their  systems,  and  remotr 

finance  ceases  mobile  phone  have  o 


-  machine  from  the 

network  and  give 
me  the  IP  address 
the  connections 
were  comii^  from. 
1^  Q  I  Thra  asked  the  net- 
woilt  team  to  trace 
it  Hie  address  fell 
within  a  range  we  allocate  for 
remote  access,  and  it  could 
have  come  only  from  Nick's 


and  remote-access  service  and  house.  It  turns  out  that  Nick’s 


recovers  hardware  from  the  Windows  account  bad  been 
employees.  {^perly  closed,  but  the  tele- 

rd  always  fell  we  were  do-  phone  company  hadn’t  shut 
ing  well  at  balancii^  the  need  down  his  line,  and  his  Unix 

to  act  quickly  with  the  need  to  account  was  still  active, 

protect  the  filings  and  con-  Even  more  alarming  were 
fidenriality  of  departing  em-  the  initial  reports  from  the 


Even  more  alarming  were 
the  initial  reports  from  the 


ployees.  Then  1  was  called  and  analysis  of  the  disconnected 


told  that  someone  who  had 


I  machine.  Unix  stores  a  history 


left  a  month  ago,  let’s  call  him  of  previous  commands  users 
“Nick.*  had  logged  into  a  criti¬ 
cal  server  and  that  important 
files  were  missing. 

A  junior  staff  member, 
whom  Ill  call  “Bob.”  had  taken 
over  Nick's  work  and  couldn't 
find  the  test  root  key  when  he  ^Hl 

tried  to  issue  test  private  keys  j 

for  our  customers.  While  ft  1010111  OUT  lUOI 

the  server  dut  keV.  WB  COUM  ISStK 

held  these  files,  he  discovered  * _ ■ 

that  someone  had  logged  in  HO  IIOW  NByS  3110 
using  Nkk  s  account  and  WOUMIUMtO 

deleted  iL  ■  jgj  DVI 

In  a  public-key  infrastruc-  rBDIMQ  OUTtnU 

^PD)  evejj^boib  ffg,,,  SCfatCh  "  8 

down  to  the  root  key.  If  you  •  _ , 

have  the  root  key;  you  can  issue  OSUIIung  PTOSPOCI. 


-  Business  question 


-  v;. ' 
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Number  41 


_ is  the  company 

that  400,000  businesses  rely  on 
for  e-commerce. 


Q  (a)  VeriSign 

□  (b)  VeriSign 
Q  (c)  VeriSign 

□  (d)  VeriSign 


V/e're  also  the  company  that  enables  7  billion  network  connections  every  day  VeriSign  has  spent  the  last  seven  yean  building  a  secure 
infrastructure  for  the  internet.  We'd  like  to  do  the  same  for  your  business.  VeriSign  can  heip  you  depioy  a  trusted  infrasmictuie  so  you 
can  conduct  secure  communications  and  transactions.  Soon  you'll  know  why  475  of  the  Fortune  500  use  VeriSign.  > 

Learn  all  you  need  to  know  about  Infrastructure  security  -  and  how  VeriSIgn's  managed  network  and  security  solutions  ^^rlSlSHT 
can  help  you  -  by  downloading  our  new  white  paper:  Cyber  Security  In  the  Age  of  Action.  Visit  www.verts^nxom/ security  Thcuii^Vniai- 
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Media  Exchange 
Appliance  Debuts 

Zuftys  Tachnotogies  in  Sunnyvale. 
Calif.,  last  week  announced  the 
MXt200.  a  media  exchange  ap¬ 
pliance  for  integrating  voice  over 
IP.  data,  video  and  fax  with  one 
software  interface,  h  runs  on  the 
Linux  operating  system  u»ng 
standard  protocols  such  as  the 
Session  Initiation  Protocol.  Voice 
XML  and  the  Tetephwty  Applica¬ 
tion  Prograrmrang  Interface. 

The  MXt200  scales  from  25  lo 
1,200  users,  and  prices  range 
from  S20.000  to  S212.000.  de¬ 
pending  on  the  number  of  users. 


Microsoft  Updates 
MOM  2000 

Microsoft  Corp.  has  annour>ced 
enhaxtcements  to  its  Microsoft 
Operations  Manager  (MOM) 

2000  software,  which  helps 
companies  manage  Vfmdows  en¬ 
vironments.  The  enhancements 
include  about  30  management 
pack  updates  with  application- 
specific  information  for  common 
Microsoft  server  scenarios: 
Service  Pack  1  with  globalization 
capabilities;  and  support  for  dus- 
tering  the  MOM  database,  a  MOM 
Resource  KH  to  help  users  im¬ 
prove  efficier)cy  and  an  updated 
software  development  kH. 


Compuware  Offers 
Vantage  8.5 

Compuware  Corp.  in  Farmington 
His.  Mich.,  released  an  instant 
reporting  upgrade  to  its  Vantage  I 
applicabon  performance  mmage- 
merrt  Kne.  Version  8.5  wi  inckide 
a  Web-based  user  interface  to 
manage  an  entire  enterprise  from 
a  single  console,  allowing  views 
into  clients,  servers  and  network 
nodes  and  IMs. 

The  new  reporting  tool  allows 
IT  staff  to  combine  in-depth  sys¬ 
tem-performance  data  with  for¬ 
mation  about  the  end  user’s  ex¬ 
perience  and  then  enmediatelv 
pubfish  Ml  integrated  report  that 
can  be  distnhuted  via  e-mail  or  to 
other  Wab  sites.  ^Idng  for  Van¬ 
tage  8ii  starts  at  $19,000. 


ROBERT  L.  MITCHELL 


Just  Pin  It  on 
Microsoft 


Microsoft  has  become  the  compa¬ 
ny  that  the  computer  industry  loves  to 
hate.  It’s  downright  fashionable  these 
days  to  blame  everything  on  the  “con¬ 
victed  monopolist.”  But  that  attitude 
also  serves  as  a  convenient  vendor  smoke  screen  that 


distracts  the  indusir>'  from 
more  important  issues  — 
such  as  building  good  prod¬ 
ucts.  listening  to  the  cus¬ 
tomer  and  developing  new 
technologies. 

Is  Microsoft  truly  re¬ 
sponsible  for  every'one’s 
failures  in  this  industry?  To 
listen  to  its  competitors, 
one  might  think  so. 

Vendors  that  can’t  com¬ 
pete  have  always  needed 
someone  to  blame,  some¬ 
one  to  sue.  Why  not  Micro¬ 
soft?  What  other  reason  could  c.vplain 
why  competitors’  "technically  superi¬ 
or"  products  fail  to  catch  on?  How 
about  this;  Many  vendors  are  so  ci^ck- 
sure  that  they  know  what’s  best  for 
corporate  IT  that  they  fail  to  listen  to 
what  IT  managers  really  want.  Iiutead. 
they  try  to  force-feed  managers  tech¬ 
nologies  they  don’t  need.  Microsoft 
has  no  monopoly  on  arrogance. 

If  there's  one  thing  Microsoft  is 
good  at.  though,  it's  listening  to  the 
customer.  In  fact,  one  could  argue  that 
the  problems  technologists  hated  most 
in  Windows  9x  —  poor  security  and  a 
lack  of  reliability  —  arc  a  direct  result 
of  listening  too  closely  to  end  users, 
who  were  demanding  ease  of  u.se  and 
c\-cr  more  features.  With  its  stated  re¬ 
liability  and  security  initiatives.  Mi¬ 
crosoft  now'  has  a  laser  focus  on  the 
needs  of  corporate  IT.  and  the  ship  is 
slowly  turning.  The  lawyers  arc  ready. 

Few  companies  have  been  vilified  to 
the  extent  that  Microsoft  has.  Even 
cigarette  maker  Philip  Morris  (now 


Altria  Group  Inc.)  gets 
more  respect  these  days. 

In  online  forums,  a  sub¬ 
culture  of  hate  has  arisen 
where  Microsoft  has  been 
accused  of  eveiy-thing 
short  of  building  weapons 
of  mass  destruction.  And 
those  who  view  alternative 
technologies  as  a  personal 
religion  see  Micix>soft  as  a 
threat  to  their  very  exis¬ 
tence.  The  Great  Satan 
must  be  toppled. 

Far  removed  from  these 
arguments  sit  most  corporate  IT  man¬ 
agers.  who  don’t  care  about  intrigue. 
They  want  products  that  make  good 
business  sense.  Products  like  Micro¬ 
soft’s  Exchange.  SQL  Sen.’er  and  Sys¬ 
tems  Management  Server  aren’t  gain¬ 
ing  ground  in  corporate  America  be¬ 
cause  they’re  being  forced  on  IT. 
They're  getting  in  because  they  have 
features  IT  has  been  requesting. 

And  the  idea  that  Microsoft’s  prod¬ 
ucts  are  inferior  is  bunk.  If  you  don’t 
believe  that,  ask  a  corporate  program¬ 
mer  who  has  worked  with  Visual  Stu¬ 
dio  .Net  and  the  .Net  Framework.  Or 
an  Exchange  2000  administrator.  Or 
early  users  of  Windows  Server  2003. 

In  most  cases.  Microsoft  has  consis¬ 
tently  churned  out  technically  solid 
products.  Are  they  category  leaders? 
Often  not.  Do  they  have  weaknesses? 
You  bet.  But  in  corporate  IT.  where 
slow  and  steady  is  the  name  of  the 
game,  a  good-enough  product  with  en¬ 
terprise-class  support  w'ill  do  just  fine. 

It’s  well  known  that  Microsoft  can 


spend  huge  sums  to  establish  itself  in  a 
new  business.  It’s  true  that  the  compa¬ 
ny  leverages  its  hegemony  in  desktop 
and  departmental  server  software  to 
gain  footholds  in  new  markets.  But  its 
dominance  beyond  software  is  ox  er- 
rated.  Microsoft  ranked  72nd  on  the 
Fortune  500  list  last  year.  Its  revenue, 
at  S28  billion,  is  about  one-third  that  of 
IBM.  which  is  just  as  aggressive  and 
customer-focused  —  and  is  pushing  a 
Linux  strategy  that  actively  competes 
against  the  Window’s  franchise. 

Microsoft  isn’t  invulnerable.  It’s  still 
protecting  a  proprietary  Windows  ar¬ 
chitecture  in  a  world  that  increasingly 
demands  open  systems.  Key  business¬ 
es  outside  of  Windows  and  Microsoft 
Office,  from  MSN  and  Xbox  to  cell 
phones  and  set-top  boxes,  lost  money 
to  the  tunc  of  SI  billion  last  year.  And 
with  the  market  for  its  Windows  fran¬ 
chise  maturing.  Microsoft  tacitly  ac¬ 
knowledged  that  it’s  unlikely  to  grow 
as  it  once  did  by  declaring  a  modest 
shareholder  dividend  in  lanuary  —  an 
event  that  rucked  the  industry. 

This  is  the  Evil  Empire  that's  re¬ 
sponsible  for  all  of  our  problems?  I 
don’t  sec  it.  Yes,  Microsoft  can  be  a 
ruthless  competitor.  Yes,  the  govern¬ 
ment  declared  that  the  company 
abused  its  monopoly  power  in  the  op¬ 
erating  systems  market  and  used  that 
advantage  to  drive  compelltors  out  of 
key  markets.  But  the  biggest  complain- 
ers  aren't  the  small  guys  who  got 
squashed  by  the  Microsoft  elephant. 
It’s  the  other  big  boys  in  the  herd  who 
often  bang  the  drums  hardest.  Those 
vendors  should  rake  responsibility  for 
their  own  competitive  misstepis  and 
keep  the  focus  on  the  customer,  where 
it  belongs.  I 


DOYOUASREE? 


St  your  thoughts  read  viAat  others  have  to  say.  in 
our  online  discussion  lorum 

OQiiickLJfika28S0 

wwwxofnputervfwktxoin 
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MecSa  Exchange 
Appliance  Debuts 
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mcrosoft  Updates 
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Compuware  Offers 
Vantime  8.5 
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Just  Pin  It  on 
Microsoft 


Microsoft  has  become  the  compa¬ 
ny  that  the  computer  industry  loves  to 
hate.  It’s  downright  fashionable  these 
days  to  blame  everything  on  the  “con¬ 
victed  monopolist.”  But  that  attitude 
also  serves  as  a  convenient  vendor  smoke  screen  that 


distracts  the  industry  from 
more  important  Issues  — 
such  as  building  good  prod¬ 
ucts.  listening  to  the  cus¬ 
tomer  and  developing  new 
technologies. 

Is  Microsoft  truly  re¬ 
sponsible  for  everyone's 
failures  in  this  industry?  To 
listen  to  its  competitors, 
one  might  think  so. 

Vendors  that  can't  com¬ 
pete  have  always  needed 
someone  to  blame,  some¬ 
one  to  sue.  Why  not  Micro¬ 
soft?  What  other  reason  could  explain 
why  competitors'  “technically  superi¬ 
or"  products  fail  to  catch  on?  How 
about  this:  Many  vendors  are  so  cock¬ 
sure  that  they  know  what's  best  for 
corporate  IT  that  they  fail  to  listen  to 
what  IT  managers  really  want.  Instead, 
they  try  to  force-feed  managers  tech¬ 
nologies  they  don’t  need.  Microsoft 
has  no  monopoly  on  arrogance. 

If  there’s  one  thing  Microsoft  is 
good  at,  though,  it’s  listening  to  the 
customer.  In  fact,  one  could  argue  that 
the  problems  technologists  hated  most 
in  Windows  9x  ^  poor  security  and  a 
lack  of  reliability  —  are  a  direct  result 
of  listening  too  closely  to  end  users, 
who  were  demanding  ease  of  use  and 
ever  more  features.  With  its  stated  re¬ 
liability  and  security  initiatives,  Mi¬ 
crosoft  now  has  a  laser  focus  on  the 
needs  of  corporate  IT.  and  the  ship  is 
slowly  turning.  The  lawyers  are  ready. 

Few  companies  have  been  vtUfted  to 
the  extent  that  Microsoft  has.  Even 
cigarette  maker  Philip  Morris  <now 


Altria  Group  Inc.)  gets 
more  respect  these  days. 

In  online  forums,  a  sub¬ 
culture  of  hate  has  arisen 
where  Microsoft  has  been 
accused  of  everything 
short  of  building  weapons 
of  mass  destruction.  And 
those  who  view  alternative 
technologies  as  a  personal 
religion  see  Microsoft  as  a 
thrrat  to  their  very  exis¬ 
tence.  The  Great  Satan 
must  be  toppled. 

Far  removed  from  these 
arguments  sit  most  corporate  IT  man¬ 
agers,  who  don't  care  about  intrigue. 
Hiey  want  products  that  make  good 
business  sense.  Products  like  Micro¬ 
soft's  Exchange,  SQL  Server  and  Sys¬ 
tems  Management  Server  aren't  gain¬ 
ing  groimd  in  corporate  America  be¬ 
cause  they’re  being  forced  on  IT. 
They’re  getting  in  because  they  have 
features  IT  has  been  requesting. 

And  the  idea  that  Microsoft’s  prod¬ 
ucts  are  inferior  is  bunk.  If  you  don’t 
believe  that,  ask  a  corporate  program¬ 
mer  who  has  worked  with  Visual  Stu¬ 
dio  .Net  and  the  .Net  Framework.  Or 
an  Exchange  2000  administrator.  Or 
early  users  of  Windows  Server  2003. 

In  most  cases,  Microsoft  has  consis¬ 
tently  churned  out  technically  solid 
products.  Are  they  category  leaders? 
Often  not.  Do  they  have  weaknesses? 
You  bet  But  in  corporate  IT.  where 
slow  and  steady  is  the  name  of  the 
game,  a  good-enough  product  with  en¬ 
terprise-class  support  will  do  iust  fine. 

It’s  well  known  that  Microsoft  can 


spend  huge  sums  to  establish  itself  in  a 
new  business.  It's  true  that  the  compa¬ 
ny  leverages  its  hegemony  in  desktop 
and  departmental  server  software  to 
gain  footholds  in  new  markets.  But  its 
dominance  beyond  software  is  over¬ 
rated.  Microsoft  ranked  72nd  on  tbe 
Fortune  500  list  last  year.  Its  revenue, 
at  S28  billion,  is  about  one-third  that  of 
IBM,  which  is  just  as  aggressive  and 
customer-focused  —  and  is  pushing  a 
Linux  strategy  that  actively  competes 
against  the  Windows  franchise. 

Microsoft  isn’t  invulnerable.  It’s  still 
protecting  a  proprietary  Windows  ar¬ 
chitecture  in  a  world  that  increasingly 
demands  open  systems.  Key  business¬ 
es  outside  of  Windows  and  Microsoft 
Office,  from  MSN  and  Xbox  to  cell 
phones  and  set-top  boxes,  lost  money 
to  the  tune  of  SI  billion  last  yean  And 
with  the  market  for  its  Windows  ftan- 
chise  maturing.  Microsoft  tacitly  ac¬ 
knowledged  that  it's  unlikely  to  grow 
as  it  once  did  by  declaring  a  modest 
shareholder  dividend  in  January  —  an 
event  that  rocked  the  industry. 

This  is  the  Evil  Empire  that's  re¬ 
sponsible  for  all  of  our  problems?  I 
don’t  see  it.  Yes.  Microsoft  can  be  a 
ruthless  competitor.  Yes.  the  govern¬ 
ment  declared  that  the  company 
abused  its  monopoly  power  in  the  op¬ 
erating  systems  market  and  used  that 
advantage  to  drive  competitors  out  of 
key  markets.  But  tbe  biggest  complain- 
ers  aren't  tbe  small  guys  who  got 
squashed  by  the  Microsoft  elephant. 
It’s  the  other  big  boys  in  the  herd  who 
often  bang  the  drums  hardest  Those 
vendors  should  take  responsibility  for 
their  own  competitive  missteps  and 
keep  the  focus  on  tbe  customer,  where 
it  belongs.  I 
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QUOTE  OF  TNE  WEEK 

MToo  often  people  think  they  have  to  create  Fort 
Knox.  K  you're  in  the  nudw  power  buaness, 
you’re  right  at  the  top.  But  if  you're  in  baked  goods, 
nobody’s  looking  to  knock  off  the  Keebler 
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STEAL  THIS  IDEA 

Gettingthe  IBght  Person 
At  the  ffight  Tmie 

Dow  Chemical  reduced  its  hiring  cycle 
time  across  900  offices  in  65  countries 
by  consolidating  hs  efforts  through  an 
application  service  provider.  Page  40 


Perk  Watch: 

BMWs  Are  Out,  Bonvling  Is  In 

Companies  are  doing  their  best  to  keep 
IT  talent.  A  wonderful  boss,  good  career 
growth  opportunities  and  the  prospect  of 
fun  are  key  to  luring  pros  for  the  long  term, 
says  Cognos  CIO  Rob  Ctrilins  (left).  P^38 
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Minnesota’s 
solution  may 
have  been 
cheap  and 
inelegant,  but  it 
woii«  just  fine. 
%  Connie 
Winkler 

WHEN  EX-WRESTLER  G<W. 

Jesse  Ventura  promised  to 
shape  up  Minnesota’s  gov- 
enunent,  the  state’s  Driver 
and  Vehicle  Services  (OVS) 
division  was  taking  as  loi^ 
as  four  months  to  renew  a  driver’s 
license  or  issue  car  registrations  and 
license  plates.  Complaining  was  use¬ 
less  because  the  30-person  call  center 
coiUdn’t  answer  the  15  million  calls 
it  received  annually.  The  system  was 
a  ioke. 

“Courts  would  teU  citizens  to  call 
DVS  to  And  out  when  their  driver's  li¬ 
cense  was  reinstated,  for  example,  and 
citizens  would  just  laugh  because  they 
knew  it  was  impossible  to  get  throu^ 
on  the  phones,”  recalls  Judith  Franklin, 
manager  of  enterprise  technology  sup¬ 
port  for  DVS  and  the  person 
charged  with  untangling  the  mess. 

Or,  more  dangerously,  police 
would  stop  drivers  on  the  roads 
and  have  no  way  of  knowing  for 
sure  whether  a  license  was  suspended 
or  had  been  reinstated  as  motorists 
claimed. 

As  part  of  the  totally  paper-based 
system,  various  forms  for  licenses  and 
registrations  piled  up  at  D\^  in  St  Paul 
and  across  an  assortment  of  thiid-party 
companies  that  the  state  contracts  to 
process  DVS  paperworiL  Consequent¬ 
ly.  tile  inff^mation  was  keyed  by  about 
30  data  entry  woriters  into  an  archaic, 
1970s  vintage  mainframe  database  sys¬ 


tem  known  as  Supra  from  Ciocom  Sys¬ 
tems  Inc.  in  Cincinnati.  To  generate 
and  decipher  repiorts  from  the  data. 
DVS  users  needed  dot-matrix  printers, 
Cobol  programmers  and  higbli^ter 
pens.  The  system  was  a  mess. 

That  was  three  years  ago.  Today,  citi¬ 
zens  receive  renewed  driver’s  Ucenses 
in  three  to  seven  days  by  applying  ei¬ 
ther  via  the  Internet  or  at  one  of  the 
hundreds  of  third-party  driver’s  license 
contractor  sites,  the  maiority  of  which 
are  connected  via  a  sister  system. 

In  the  courts.  1.200  judges  get  imme¬ 
diate  access  to  driving  records,  and  po¬ 
lice  are  beginning  to  download  driver’s 
license  photos  m  car  computers  to  aid  in 
their  Back  in  St  Paul  D\^  opera¬ 

tions  and  budgets  are  being  revamped, 
and.  as  a  result  the  more  than  two- 
dozen  data  entry  workers  —  many  of 
whom  were  hired  20  to  30  years  ago  — 
are  now  asking  what  their  new  jobs  are 
going  to  be.  Accordii^  to  DVS,  they’re 
being  reassigned  to  other  jobs  at  a  sav¬ 
ings  to  DVS  of  ^KMit  $72XX)0  a  month. 

But  getting  here  wasn’t  easy. 
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“Our  new  management  is  very  much 
into  managing  us  IS  a  business."  says 
Franklin.  “We  needed  to  have  a  mch- 
nok^  infrastructure  that  supported 
the  business  practices  we  wanted  to 
change.” 

DVS  chose  Verastream  Host  Integra¬ 
tor  software  from  Seattle-based  soft¬ 
ware  vendor  WRQInc.  and  com¬ 
modity  servers  running  a  Mi- 
crosoft  SQL  Server  daubase  as  a 
II  i  cost-effective  sohitioa  This  in- 
tennediary  server-based  tier 
uses  component  technology  to  extract 
the  valuable  business-logic  nuggets 
from  the  old  code  residing  on  the 
mainframe  and  to  link  the  new  Web- 
enaUed  front  end  to  the  green  screens 
and  IBM  S/390  back  end.  which  is  still 
running  under  CICS  in  the  state's  De¬ 
partment  of  Admimstration  (see  dia¬ 
gram,  next  page). 

As  so  many  state  governments  now 
face  huge  budget  sbortfrdls.  this  froot- 
Ovitinued  on  poge  36 


MHIBiHU  NtanllM 


lUIUKIIEIIT 


www.compuiefworld.com 


w  .WHEN 

Yankiiig 

ISNT  AN  OPTION 


Continued  from  page  35 
end  approach  is  “fairiy  common  be¬ 
cause  there  are  so  many  state  back-end 
s>‘Stems  that  require  a  complete  over¬ 
haul.*  says  Thom  Rubel,  program  di¬ 
rector  for  IT  at  the  National  Governors 
Association  in  Washington.  "Most 
states  are  trying  to  do  it  this  way  be¬ 
cause  redesigning  everything  is  too  ex¬ 
pensive.  They're  trying  to  create  open 
archiiecmres  so  they  can  create  sys¬ 
tems  that  don’t  require  wholesale 
change  on  the  back  end.” 

A  bonus  for  states  is  that  adding  self- 
service  capabilities  frees  up  employees 
for  other  jobs.  There  are  efficiencies 
to  be  gained,  and  many  states  arc  try¬ 
ing  to  identify  still-manual  processes 
that  don't  need  to  be  there,’'  says 
RubeL  "States  don't  always  get  rid  of 
people,  but  they  redeploy  them  to 
functions  they  haven't  been  able  to  do 
for  lack  of  people  funding." 

Mia  iKk-End  (Mads 

For  FruUdin,  wrbo  was  brought  in  to 
give  DVS  its  own  computing  capability, 
nuke  the  agency  more  accountable 
and  dramatically  improve  customer 
service,  redesigning  the  mainframe 
system  wasn’t  an  option. 

’‘I've  talked  with  other  states  which 
dropped  such  projects  after  two  years 
because  they  bit  off  too  much  in  want¬ 
ing  to  change  the  wrhole  back  end."  she 
says.  "They  spent  multiple  millions  of 
dollars,  but  after  several  years,  they 
dropped  the  projea. . . .  Everyone  had 
lost  uiterest  because  there  was  no  de¬ 
liverable.'  Ultimately.  Franklin  adds. 
DVS  wonts  a  new  back-end  database, 
but  that's  a  long-term  protect. 

For  now.  Franklin  emphasizes  deliv¬ 
ering  functionalit>'  fast.  "You  have  to  go 
ahead  and  make  some  moves.  You  can't 
wait  until  you've  designed  everything 
—  the  business  will  have  changed  in 
the  two  years  it  took  you  to  redo  every¬ 
thing.''  she  says. 

Because  the  Supra  system  was  a 
closed,  proprietary  product  writfa  little 
application  documentation,  there  was 


no  way  to  hook  in  application  pro¬ 
gramming  interfaces  or  other  connec¬ 
tions  used  by  ctirrent  technologies.  "If 
it  had  been  IBM's  DB2  or  Oracle's 
database,  there  would  have  been  all 
sorts  of  tools  we  could  use,"  she  ex¬ 
plains.  The  other  issue:  Franklin  had 
only  three  pn^rammers.  none  of 
whom  had  worked  with  Web  systems 
or  databases  before. 

Franklin  turned  to  WRQ.,  with  which 
she  had  worked  in  the  past,  to  connect 
sundry  desktop  systems  to  main¬ 
frames.  Verastream  was  installed  in 
September  2001.  and  by  November  the 
small  team  had  the  driver's  license  re¬ 
newal  process  online.  The  initial  Vera¬ 
stream  software  and  server  hardware 
cost  about  $25,000,  but  the  system  is 
now  up  to  five  servers,  representing  an 
investment  of  about  $100,000. 

Many  systems  designers  today  may 
find  such  a  solution  inelegant.  But  it 
reflects  the  wider  reality  that  employ¬ 
ees,  partners  and  customers  want  ac¬ 
cess  to  information  on  demand.  They 
don’t  want  to  wait  months  or  years  to 
get  the  capability.  Yet  existing  legacy 
systems  weren’t  designed  for  such 
flexibility,  and  IT  budgets  are  tight. 
That  leaves  many  IT  managers  trapped 
between  legacy  systems  and  the  "ex¬ 
pectations  of  Uie  Web  generation." 
notes  WRQ  President  Shaun  Wolfe. 

Another  big  plus  for  DVS  is  that 
Verastream's  component  technology 
allowred  DVS  to  reuse  chunks  of  code 
containing  the  business  logic  for  a  spe¬ 
cific  application,  such  as  computing  the 
tax  on  a  car  based  on  its  age. 

"1  didn't  want  to  rewrrite  all  that;  if 
it's  already  writtm.  why  can't  1  reuse  it 
and  W(ri>-enable  it?"  says  Franklin,  who 
in  previous  jobs  re-en^neered  main¬ 
frame-based  systems  for  3M  Co.,  the 
Carlson  School  of  Management  at  the 
University  of  Minnesota,  and  St.  Paul's 
schools. 

Verastream  also  includes  data  audit¬ 
ing  toob,  which  enable  OVS  to  collect, 
store  and  manage  new  information 
from  the  Web  transactions.  Also,  be¬ 
cause  Verastream  uses  models  to  build 
applications,  those  models  can  be  re¬ 
used  as  needed.  Internal  u.sers  appreci¬ 
ate  that  new  applications  arc  turned 
around  in  one  to  two  months  and  that 
the>’  perform  consistently.  Franklin  says. 

biWrmedActtss 

Currently  at  www.mndriveirdd.org.  citi¬ 
zens  can  renew  their  licenses  or  plate 
registrations,  change  their  addresses, 
check  car  tax  information  and  ascer¬ 
tain  their  driver's  license  status. 

At  www.dps.5rare.mn.us/^ppofr. 
the  state's  hundreds  of  judicial  and  law 


enforcement  agents  and  business  part¬ 
ners.  such  as  car  dealers  and  private  li¬ 
cense-processing  businesses,  can  get 
password  access  to  conduct  their  busi¬ 
ness.  Courts  and  the  police  can  read 
and  update  driver’s  license  records. 
The  business  partners  can  renew  or 
duplicate  driver’s  licenses,  schedule 
driver  exams  and  renew  registrations. 
Some  pilot  sites  are  even  issuing  dupli¬ 
cate  titles.  These  private  a^ots  now 
conduct  more  than  50%  of  vehicle  re¬ 
newals  and  10%  of  driver's  license  re¬ 
newals  online. 

At  these  third-party  business  sites, 
distributing  the  data  entry  via  the  Web 
to  where  the  citizen  is  submitting  the 
application  dramatically  improves  ac¬ 
curacy.  If  the  eye  exam  is  missing  from 
the  application,  the  processing  stops, 
rather  than  the  error  beii^  caught  three 
weeks  later  in  St.  PauL  Such  errors 
would  require  that  the  third  party  chase 
dowm  the  citizen  for  a  re-exam,  which 
is  just  one  of  the  burro'  stones  from 
the  previous  process.  Franklin  reports. 

Indeed,  reworking  the  OVS  systems 
to  serve  citizens  has  shaken  out  many 
rat's  nests  and  inequities.  Currently, 
private  companies  are  able  to  buy  the 
state's  DVS  itiTomiation  —  at  no  profit 
to  the  state  —  and  resell  it  back  to  the 
citizens.  Now.  says  Franklin,  "our  goal 
is  to  distribute  the  information  to  the 
citizens  whose  information  it  is,"  even¬ 


tually  eliminating  the  middleman  com¬ 
panies  that  now  sell  it  back  to  citizens 
fora  fee. 

In  2002,  Ventura  didn't  seek  re- 
election  as  governor,  but  the  account¬ 
ability  gauntlet  he  threw  down  to  state 
agencies  remains.  His  successor.  Re¬ 
publican  Tim  Pawlraty,  has  already 
asked  the  DVS.  "How  are  you  goii^  to 
integrate  this  with  the  rest  of  the 
state?"  Franklin  is  talking  with  Min¬ 
nesota’s  Department  of  Finance  and 
the  Bureau  of  Criminal  Apprehension. 

Minnesota's  experience  is  mirrored 
across  the  nation.  States  have  been  the 
last  holdouts  for  the  hierarchical  main- 
frame-based  systems  of  the  1960s  and 
1970s,  says  the  National  Governors 
Association’s  Rubel  'That  situation  has 
endured  because  of  constitutional  and 
statutory  requirements,  but  the  org¬ 
anization's  best-practices  group  is  see¬ 
ing  a  surge  in  new  systems-mtgraiion 
strategics. 

"States  are  ideally  headed  toward  the 
practice  of 'capture  the  data  once  and 
use  it  many  tunes,'  so  that  citizens  and 
businesses  aren't  constantly  re-enter¬ 
ing  data,"  says  Rubel  "Bui  you  can  still 
find  some  strange  things  out  there."  I 


Hinkler,  a  former  New  York  hureou  chi^ 
for  Coroputerworld,  writes  about  teeb- 
nofogy  management  from  Seattle.  Con¬ 
tact  her  at  winklerconnie@yahooxoni. 
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How  to  Do  an  IT 
Security  Audt 

Understanding  your  business  will  focus 
your  efforts.  By  Kathleen  Melymul^ 


IF  YOU’RE  THE  IT  »<ANAGER  at  a 
small  to  midsize  business,  if  s 
only  a  matter  of  time  until  you’re 
asked  to  do  an  IT  security  audit. 
Even  in  a  larger  company,  if  secu¬ 
rity  is  decentralized,  you  may  be 
the  go-to  guy  in  IT.  You’re  neither  a  se¬ 
curity  expert  nor  an  auditor,  and  re¬ 
sources  are  tight  How  will 
you  b^n  and  where  will  you 
go  from  there? 

■  Rnt.  don't  panic.  ”  People 
sell  themselves  short,”  says  )ay  M 
Williams,  senior  vice  president  and 
chief  technology  officer  at  The  Con- 
cours  Group,  an  IT  consulting  fum  in 
Kingwood,  Texas.  “For  the  roost  part, 
security  is  common  sense." 

a  Join  a  aocurihf  roMorch  oroarization 
such  as  the  Information  Security  Fo¬ 
rum.  says  RA  Vernon,  t^ef  security  of¬ 
ficer  at  Reuters  America  Inc.  in  New 
Yoii.  Tou'U  find  a  group  of  individu¬ 
als  willing  to  talk  about  sectirity  issues, 
share  experiences  and  add  some  value 
to  any  process  you  may  try  to  imple¬ 
ment"  he  says.  They  can  direct  you  to 
software,  methodologies  and  other  re¬ 
sources  to  help  you  tackle  the  fob. 

■  CofwN  iriHi  your  burinMi  anieulim 
to  be  sure  you  understand  which  as¬ 
pects  of  your  business  are  most  vul¬ 
nerable  to  security  threats. 


"Too  often 
people  think  they  have  to  create  Fort 
Knox,”  Williams  says,  but  in  reality, 
few  companies  have  extremely  tight 
data  security  requirements.  "If  you're 
in  the  nuclear  power  business,  you're 
i^ht  at  the  top,”  he  says.  "But  if  you're 
in  baked  goods,  nobody's  looking  to 
knock  off  the  Keebler  elf." 


dona.  "An  IT  audit  program 
win  not  happen  overnight.” 
says  David  Hoelzer.  director  of  Global 
InformadoD  Assurance  CertiTicatioD 
and  manner  of  the  Advanced  Systems 
Audit  track  of  the  SANS  Institute,  a  co¬ 
operative  security  research  and  educa¬ 
tion  organization  in  Bethesda,  Md.  De¬ 
pending  on  the  size  of  the  organiza¬ 
tion.  it  wUl  take  at  least  several  weeks, 
he  says.  "Prepare  management  for  the 
work  that  will  be  required  of  them  to 
assist  you,"  be  adds,  because  tbeyll 
need  to  help  correct  any  faulty  policies 
and  practices  that  are  uncovered. 

■ttapH  out  Work  with  technology 
and  business  analysts  to  draw  a  high- 
level  schematic  of  the  vulnerable  inter¬ 
sections  of  technology  and  business. 
Vernon  suggests. 

Consider  security  tools.  There  is 
software  that  can  scan  your  network 
and  produce  a  list  of  areas  of  exposure. 


There  are  also  tested  methodologies 
such  as  OCTAVE  from  the  CERT  Co¬ 
ordination  Center  at  Carnegie  Mellon 
University  in  Pittsburg  that  help  you 
build  a  security  program  to  industry 
standards.  Your  colleges  in  the  se¬ 
curity  group  can  help  you  find  the 
most  useful  tools  for  your  company’s 
needs.  "They  take  the  best  practices 
and  roll  them  up  into  a  product  that 
the  IT  manager  can  plug  in.”  Vernon 
says.  "It  may  not  be  all  you  need,  but  it 
will  be  a  far  cry  ftom  where  you  cur¬ 
rently  are.”  ♦  \ 

But  don't  go  tool-happy.  "To  secure 
every  server  and  app  is  ikm  going  to 
have  any  ROl,”  says  Rick  Allen,  princi¬ 
pal  at  E-Security  Assurance  Services  in 
Santa  Rosa,  ralif.  "The  level  of  control 
has  to  equal  the  level  of  risk.  You  don't 
want  to  put  a  SSOO  security  tool  on  an 
asset  worth  $S0." 

■PriarittB.  ‘All  vulnerabilities  are  not 
created  equal”  says  l,arry  Rogers,  se¬ 
nior  member  of  the  technical  staff  at 
CERT.  "Some  fixes  are  worth  the  time 
spent,  and  some  are  not.”  Identify  criti¬ 
cal  information  assets  by  figuring  out 
which  could  put  the  company  out  of 
business  if  they  were  compromised  or 
damaged,  says  Hoelzer. 

■  FocuionM«iNlconbah."A  Fort 
Kik>x  firewall  in  front  of  your  server 


won't  help  if  someone  can  still  impact 
that  information  due  to  lack  of  internal 
controls,”  says  Allen.  The  five  basic  in¬ 
ternal  security  contitris  are  authoriza¬ 
tion.  identification  of  users  and  sys¬ 
tems.  authentication,  integrity  (includ¬ 
ing  backups,  checks  and  balances  on 
data)  and  monitoring. 

•  Chack  tal  yw  IwM  raMonaMa  aacurity 
polcias  and  pneadHraa  ki  filaca.  says  Bar¬ 
bara  Buechner.  formerly  senior  manag¬ 
er  for  information  security  at  Merck- 
Medco  Managed  Care  LLC  in  Franklin 
Lakes,  N.).,  and  now  on  the  staff  at  the 
Technology  Managers  Forum  in  New 
York.  Then  make  sure  that  your  com¬ 
pany's  reality  matches  what  you  have 
on  paper. 

■VMiitiB.  "Address  the  areas  that 
have  been  acknowledged  as  vulnerabil¬ 
ities  and  put  together  some  documen¬ 
tation  as  to  how  you're  going  to  miti¬ 
gate.”  Veroon  says.  Include  all  the  key 
issues  and  costs  associated  with  miti¬ 
gation.  "Some  vulnerabilities  may  be 
accepted  by  the  business  because  miti¬ 
gation  is  too  costly.”  he  says.  That’s  a 
business  decision." 

•SlayrwLA  ftxrused  25-page  report 
with  clear  action  items  will  accomplish 
much  more  than  a  LOOO-page  report 
that  will  exhaust  everyone's  commit¬ 
ment  and  end  up  on  a  shelf  Alien  says. 

■  Conridar  a  pra.  For  companies  with 
complex  security  needs,  such  as  a  legal 
obli^tion  to  protect  customer  or  pa¬ 
tient  privacy,  it  pn^bty  makes  sense 
to  contract  an  IT  security  firm.  "Many 
items  that  would  be  obvious  to  a  secu¬ 
rity  professional  may  be  oveiiooked  by 
a  day-to-day  administrator.”  says  Tom 
Watson,  protect  lead  for  information 
security  at  Bayer  Corp.  RtarroaceuticaJ 
Division  in  West  Hav^  Ckmn.  An  out¬ 
side  firm  can  perform  the  audit,  estab¬ 
lish  compliance  guidelines  and  help  to 
create  secioity  documentation  or  sim¬ 
ply  validate  that  you  did  your  risk  as¬ 
sessment  correctly  and  haven’t  missed 
anything. 

Remember  that  security  is  a  com¬ 
plex  and  continuing  challenge,  and  pe¬ 
riodic  audits  are  a  must.  "Ifs  never  the 
end  of  the  story,”  Vemoo  says.  "Securi¬ 
ty  is  an  ongoing  saga."  I 
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end  approach  is  "fairly  common  be¬ 
cause  there  are  so  many  state  back-end 
systems  that  require  a  complete  over¬ 
haul."  says  Thom  Rube!,  program  di¬ 
rector  for  IT  at  the  National  Governors 
Association  in  Washington.  "Most 
states  are  trying  to  do  it  this  way  be¬ 
cause  redesigning  evetyihing  is  too  ex¬ 
pensive.  They're  trying  to  create  open 
architectures  so  they  can  create  sys¬ 
tems  that  don't  require  wholesale 
change  on  the  back  end." 

A  bonus  for  states  is  that  adding  self- 
service  capabilities  frees  up  employees 
for  other  iobs.  "There  are  efficiencies 
to  be  gained,  and  many  states  arc  tr)’- 
ing  to  identitv'  still-manual  processes 
that  don't  need  to  be  there."  says 
Rubel.  "States  don’t  always  get  rid  of 
people,  but  they  redeploy  them  to 
functions  they  haven't  been  able  to  do 
for  lack  of  people  binding." 

Avoiding  Back-End  Overliaiils 

For  Franklin,  who  was  brought  in  to 
give  DVS  its  osa’D  computing  capability, 
make  the  agency'  more  accountable 
and  dramatically  improve  cu.stomer 
service,  redesigning  the  mainframe 
system  wasn't  an  option. 

Tve  talked  with  other  states  which 
dropped  such  projects  after  two  years 
because  they  bit  off  too  much  in  want¬ 
ing  to  change  the  whole  back  end."  she 
says.  "They  spent  multiple  millions  of 
dollars,  hut  after  several  years,  they 
dropped  the  pn»iect  Everyone  had 
lost  interest  because  .here  was  no  de¬ 
liverable."  Uitunatcly.  Franklin  adds. 
DVS  wani.s  a  new  oack-end  database, 
nut  'hat's  .1  long-term  proiecf. 

For  now.  FranKiin  empnasizes  deliv¬ 
ering  tunctioiulirk’  fast  "Ynu  have  lo  go 
ahead  and  make  some  moves.  You  can  i 
wan  until  you've  designed  everything 
—  (he  business  will  hasv  changed  in 
•he  'w«'  years  it  look  you  to  redo  every¬ 
thing,"  she  says. 

Because  the  Supra  system  was  a 
cltMcd.  propheiao'  product  with  little 
application  documcniarion,  thca*  was 


no  way  to  hook  in  application  pro¬ 
gramming  interfaces  or  other  connec¬ 
tions  used  by  current  technologies.  “If 
it  had  been  IBM's  DB2  or  Oracle's 
database,  there  would  have  been  all 
sorts  of  tools  we  could  use."  she  ex¬ 
plains.  The  other  issue:  Franklin  h.id 
only  three  programmers,  none  of 
whom  had  worked  with  Web  systems 
or  databases  before. 

Franklin  turned  to  WRQ .  with  which 
she  had  worked  in  the  past,  to  connect 
sundry  desktop  systems  to  main¬ 
frames.  Verastream  was  installed  in 
September  2001,  and  by  November  the 
small  team  had  the  driver's  license  re¬ 
newal  process  online.  The  initial  Vera¬ 
stream  software  and  server  hardware 
cost  about  S25.000.  but  the  system  is 
now  up  to  five  servers,  representing  an 
investment  of  abi>ui  SIOO.OOO. 

Many  systems  designers  today  ma)' 
find  such  a  solution  inelegant.  But  it 
reflects  the  wider  reality  that  employ¬ 
ees,  partners  and  customers  want  ac¬ 
cess  to  information  on  demand.  They 
don't  want  to  wait  months  or  years  to 
get  the  capability.  Yet.  existing  legacy 
systems  weren’t  designed  for  such 
flexibility,  and  IT  budgets  are  tight. 
That  leaves  many  IT  managers  trapped 
between  legacy  systems  and  the  “ex¬ 
pectations  of  the  Web  generation." 
notes  WRQ  President  Shaun  Wolfe. 

Another  big  plus  for  DVS  is  that 
V'erasircam’s  compoticnt  iechnolog>- 
allowed  DVS  to  reuse  chunks  of  code 
coniaioing  the  business  logic  for  a  spe¬ 
cific  application,  such  as  computing  the 
tax  on  a  car  based  on  its  age. 

"I  didn't  want  to  rewrite  all  that;  if 
it's  already  wrinen.  why  can't  I  reuse  it 
and  Web-enable  it?"  says  Franklin,  who 
in  pres'ious  jobs  re-enginccred  main¬ 
frame-based  sA'stems  for  3M  Co.,  the 
Carlson  School  of  Management  at  the 
University  of  Minnesota,  and  St.  Paul's 
schools. 

Ver3.stream  also  includes  data  audit¬ 
ing  tools,  which  enable  DVS  to  collect, 
store  and  manage  new  information 
from  the  Web  transactions.  Also.  K’- 
cau.se  Verastream  uses  models  to  build 
applications.  thAisc  models  can  be  re¬ 
used  as  needed.  Internal  users  apprect- 
.ite  that  new  applications  .ire  turned 
iniund  m  one  to  two  iTumihs  .md  'hat 
tney  peri’orm  consistemtv  Franklin  sax-s. 

Improved  Access 

Currently  ai  www  citi¬ 

zens  can  renew  their  licenses  or  plate 
registrations,  change  their  addresses, 
check  car  tax  iiU'ormaiHin  and  ascer¬ 
tain  their  driver's  license  status. 

At  u'ww.dps.sr<ire.mn4is/esupport. 
the  state’s  hundreds  of  judicial  and  law 


enforcement  agents  and  business  part¬ 
ners.  such  as  car  dealers  and  private  li¬ 
cense-processing  businesses,  can  get 
password  access  to  conduct  their  busi¬ 
ness.  Couns  and  the  police  can  read 
and  update  driver's  license  records. 
The  business  partners  can  renew  or 
duplicate  driver's  licenses,  schedule 
driver  exams  and  renew  registrations. 
Some  pilot  sites  are  even  issuing  dupli¬ 
cate  titles.  These  private  agents  now- 
conduct  more  than  50%  of  vehicle  re¬ 
newals  and  10%  of  driver’s  license  re¬ 
newals  online. 

At  these  third-party  business  sites, 
distributing  the  data  entty  via  the  Web 
to  where  the  citizen  is  submitting  the 
application  dramatically  improves  ac¬ 
curacy.  If  the  eye  exam  is  missing  fnxm 
the  application,  the  processsr^:  stops, 
rather  than  the  error  being  caught  three 
weeks  later  in  St.  Paul.  Such  errors 
would  require  that  the  ihu-d  party  chase 
down  the  cirizcn  for  .a  re-exam,  which 
IS  lUM  .me  •:  'he  horro  ■.i«*nes  from 
the  prevums  r*riKCss.  •  uiKiin  leports, 

Indix'U.  rexvorKing  ti>  .  iv  '» 
to  serve  citizens  nas  >naken  out  many 
rat's  nests  .ind  inequities.  Currently, 
private  companies  are  able  to  buy  the 
state's  DVS  information  —  .at  no  profit 
10  the  state  —  and  resell  it  back  to  the 
citizens.  Now.  says  Franklin,  "our  gtwl 
IS  to  distribute  the  information  to  the 
citizens  whose  information  it  is,"  even¬ 


tually  eliminating  the  middleman  com¬ 
panies  that  now  sell  it  back  to  citizens 
for  a  fee. 

In  2002,  Ventura  didn’t  seek  re- 
election  as  governor,  but  the  account- 
ability  gauntlet  he  threw  down  to  state 
agencies  remains.  His  successor.  Re¬ 
publican  Tim  Pawlenty.  has  already 
asked  the  DVS.  “How  arc  you  going  to 
integrate  this  with  the  rest  of  the 
state?”  Franklin  is  talking  with  Min¬ 
nesota's  Department  of  Finance  and 
the  Bureau  of  Criminal  Apprehension. 

Minnesota's  experience  is  mirrored 
across  the  nation.  Stales  have  been  the 
last  holdouts  for  the  hierarchical  main¬ 
frame-based  systems  of  the  1960s  and 
1970s.  says  the  National  Governors 
AssiKiation’s  Ruhcl.  That  situation  has 
I  endured  because  v>f  constitutional  and 
,  statutory  requirements,  but  the  org¬ 
anization's  best-practices  group  Ls  sec- 
I  ing  a  surge  in  new  systems-mignition 
strategies. 

“States  .ire  ideally  headed  toward  the 
practice  oi  capture  the  data  once  -ind 
use  tt  many  times,  so  that  citizens  and 
businesses  .iren  t  constantly  re-enter¬ 
ing  data.  '  says  Rubel.  'But  you  can  still 
find  some  strange  things  out  there. '  I 
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How  to  Do  an  IT 
Security  Audit 

Understanding  your  business  will  focus 
your  efforts.  By  Kathleen  Melymuka 


IF  YOU'RE  THE  IT  MANAGER  at  a 
small  Co  midsize  business.  it‘s 
only  a  matter  of  time  until  you’re 
asked  to  do  an  IT  security  audit. 
Even  in  a  larger  company,  if  secu¬ 
rity  is  decentralized,  you  may  be 
the  go-to  guy  in  IT.  You’re  neither  a  se¬ 
curity  expert  nor  an  auditor,  and  re¬ 
sources  are  tight.  How  will 
you  begin  and  where  will  you 
go  from  there? 

•  First,  don't  panic.  ’'People 
sell  themselves  short.”  says  Jay  M. 
Williams,  senior  vice  president  and 
chief  technology  officer  at  The  Con- 
cours  Group,  an  IT  consulting  firm  in 
Kingwood,  Texas.  “For  the  most  part, 
security  is  common  sense.” 

•Join  a  security  research  organizatnn 
such  as  the  Information  Security  Fo¬ 
rum.  says  RA  Vernon,  chief  security  of¬ 
ficer  at  Reuters  America  Inc.  in  New 
York  “You'll  find  a  group  of  individu¬ 
als  wUliitg  to  talk  about  securit)*  issues, 
share  experiences  and  add  some  value 
to  any  process  you  may  try  to  imple¬ 
ment.”  he  says.  They  can  direct  you  to 
software,  methodologies  and  other  re¬ 
sources  to  help  you  tackle  the  job. 

■  Consult  «Nlb  your  busktess  executives 
to  be  sure  you  understand  which  as¬ 
pects  of  your  business  arc  most  vul¬ 
nerable  to  security  threats. 


■  Consider  your  industry.  Too  often 
people  thmk  they  have  to  create  Fort 
Knox.”  Williams  says,  but  in  reality, 
few  companies  have  extremely  tight 
data  security  requirements.  "If  you’re 
in  the  nuclear  power  business,  you’re 
right  at  the  top."  he  says.  "But  if  you're 
in  baked  goods,  nobody’s  looking  to 

knock  off  the  Keebler  elf." 

■  Manage  executive  expecta- 
tMMS.  "An  IT  audit  program 
will  not  happen  overnight," 
says  David  Hoelzer.  director  of  Global 
Information  Assurance  Certification 
and  manager  of  the  Advanced  Systems 
Audit  track  of  the  SANS  Institute,  a  co¬ 
operative  security  research  and  educa¬ 
tion  organization  in  Bethesda.  Md.  De¬ 
pending  on  the  size  of  the  organiza¬ 
tion.  it  will  take  at  least  several  weeks, 
he  says.  “Prepare  management  for  the 
work  that  will  be  required  of  them  to 
assist  you."  be  adds,  because  they’ll 
need  to  help  correct  any  &ulty  policies 
and  practices  that  arc  uncovered. 

■  Map  It  out  Work  with  technology 
and  business  analysts  to  draw  a  high- 
level  schematic  of  the  vulnerable  inter¬ 
sections  of  technology  and  business. 
Vernon  suggests. 

Consider  security  tools.  There  is 
software  that  can  scan  your  network 
and  produce  a  list  of  areas  of  exposure. 


There  are  also  tested  methodologies 
such  as  OCTAVE  from  the  CERT  Co¬ 
ordination  Center  at  Carnegie  Mellon 
University  in  Pittsburgh  that  help  you 
build  a  security  program  to  industry’ 
standards.  Your  colleagues  in  the  se¬ 
curity  group  can  help  you  find  the 
most  useful  tools  for  your  company’s 
needs.  “They  take  the  best  practices 
and  roll  them  up  into  a  product  that 
the  IT  manager  can  plug  in."  Vernon 
says.  "It  may  not  be  alt  you  need,  but  it 
will  be  a  far  cry  from  where  you  cur¬ 
rently  are." 

But  don’t  go  tool-happy.  “To  secure 
every  server  and  app  is  not  going  to 
have  any  ROI,"  says  Rick  Allen,  princi¬ 
pal  at  E-Security  Assurance  Services  in 
Santa  Rosa.  Calif.  ’The  le\'el  of  contixtl 
has  to  equal  the  level  of  risk.  You  don’t 
want  to  put  a  S500  security  tool  on  an 
asset  worth  S50." 

•  Prioritize.  “All  vulnerabilities  arc  not 
created  equal."  says  Larry  Rogers,  se¬ 
nior  member  of  the  technical  staff*  at 
CERT.  “Some  fixes  are  worth  the  time 
spent,  and  some  are  not."  Identify  criti¬ 
cal  information  assets  by  figuring  out 
which  could  put  (he  company  out  of 
business  if  (hey  were  compromised  or 
damaged,  says  Hoelzer. 

■  Foob  on  intemal  controls.  "A  Fort 
Knox  firewall  in  front  of  your  server 
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won't  help  if  someone  can  still  impact 
(hat  information  due  to  lack  of  internal 
controls,"  says  Allen.  The  five  basic  in¬ 
ternal  security  controls  are  authoriza¬ 
tion.  identification  of  users  and  sys¬ 
tems.  authentication,  integrity  (includ¬ 
ing  backup.s.  checks  and  balances  on 
data)  and  monitoring. 

■  Check  that  you  have  raasonabte  secunty 
poliem  and  procedures  in  place,  says  Bar¬ 
bara  Bucchner.  formerly  senior  manag¬ 
er  for  information  security  at  Merck- 
Medco  Maruged  Care  LLC  in  Franklin 
Lakes,  N.f..  and  now  on  the  staff  at  the 
Technolop>'  Managers  Forum  in  New 
York.  Then  make  sure  that  your  com¬ 
pany’s  reality  matches  what  you  have 
on  paper. 

•  WrileMup.  "Address  the  areas  that 
have  bc^m  ackm>wledged  as  vulnerabil¬ 
ities  and  put  together  some  documen¬ 
tation  as  to  how  you're  going  to  miti¬ 
gate."  Vernon  says.  Include  all  the  key 
issues  and  costs  associated  with  miti¬ 
gation.  "Some  vulnerabilities  may  be 
accepted  b>'  the  business  because  miti¬ 
gation  is  too  costly.”  he  says.  “That's  a 
business  decision.” 

■  Stay  real  A  focused  25-pagc  report 
with  clear  action  items  will  accomplish 
much  more  than  a  l.OOO-page  report 
that  will  exhaust  everyone's  commit¬ 
ment  and  end  up  on  a  shelf.  Allen  says. 

■  ConsMar  a  pra  For  companies  with 
complex  security  needs,  such  as  a  legal 
obligation  to  protect  customer  or  pa¬ 
tient  privac'y.  it  pix^bly  makes  sen.se 
to  contract  an  IT  security  firra  “Many 
items  that  would  be  obvious  to  a  secu¬ 
rity  professional  ma>'  be  overiooked  by 
a  day-to-day  administrator.”  says  Tom 
Watson,  prefect  lead  for  information 
security  at  Bayer  Corp.  Pharmaceutical 
Division  in  West  Haven.  Conn.  An  out¬ 
side  firm  can  perform  the  audit,  estab¬ 
lish  compliance  guidelines  and  help  to 
create  security  documentation  or  sim¬ 
ply  validate  that  you  did  your  risk  as¬ 
sessment  correctly  and  haven't  missed 
anythir^. 

Remember  that  security  is  a  com¬ 
plex  and  continuing  challenge,  and  pe¬ 
riodic  audits  arc  a  must.  “It’s  never  the 
end  of  the  story.”  Vernon  says.  "Securi¬ 
ty  is  an  ongoing  saga.”  I 
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Perk  Watch 

y^AtBOirt, 
Bowling  Is  In 

Companies  are  doing  their  best  to 
keq^rr  talent  B\’  Biirbara  IX'Poinfti 


AROSEFUALiyDOir. 

Competing  IT  services  firms  in 
Michi^n  had  been  doing  everything 
they  could  to  move  in  on  The  Epitec 
Group  toe's  growing  IT  services  busi¬ 
ness.  Underbidding  on  IT  staffing  con¬ 
tracts.  Wtnii^  and  dining  corporate 
accounts.  Even  ing  plays  for  the 
company's  IT  talem. 

So  when  HoUy  Maguire,  manager  of 
employee  relations  and  “maestro  of 
corporate  harmony."  discovered  that 
every  one  of  Southffeld.  Mich.-based 
Epitec's  programmers  and  consultants 
had  been  presented  a  sii^  rose  and 
offored  a  free  lunch  by  a  competing  IT 
services  recruiter,  she  was  forced  to  act 

After  male  mg  several  phone  calls  to 
the  competing  firms*  management  — 
in  effect  telling  them  to  cease  and  de¬ 
sist  —  Maguire  met  several  rose  recipi¬ 
ents  for  lunch  to  chat  about  their  jobs 
and  future  prospects  at  Epitec. 

Tbe  lesson:  It’s  critical  to  stay  in 
touch  and  keep  key  IT  talent  happy. 

Maguire  acknowledges  that  belt¬ 
tightening  has  made  it  tough  to  find 
new  ways  to  keep  personnel  content 
without  breaking  tbe  bank.  "We've 
never  offered  enormous  monetary 
bonuses,  but  we  do  try  hard  to  keep 
our  IT  professionals  happy.”  she  says. 
Tbe  company  uses  fairly  inexpensive 
employee  appreciation  initiatives. 

OtfaCT  businesses  are  working  harder 
to  keep  communication  lines  open,  de¬ 
livering  stiai^  talk  about  corporate 
performance  to  help  IT  employees  un¬ 
derstand.  first,  how  wen  or  poorly  tbe 
company  is  performing  and,  second, 
tbe  imp^  (tf  their  contributions  on 
the  business. 


For  example.  Cognos  Inc.,  a  busi¬ 
ness  intelligence  software  company  in 
Ottawa,  recently  staged  a  few  in-bouse 
events  during  which  a  maiketing  exec¬ 
utive  spoke  to  the  IT  department  to 
describe  how  recent  networking  and 
software  improvements  had  radically 
improved  productivicy  for  maricedog 
executives  in  ^istralia. 

Another  senior  executive  talked 
about  bow  an  upcoming  upgrade  of 
Cognos’  databa^  to  Oraclelli  will  dra¬ 
matically  improve  shipping  and  distri¬ 
bution  processes  within  tbe  company. 

The  reason  for  the  communication? 
After  months  of  bad  news  about  layoffs 
and  other  economic  declines,  "we 
wanted  our  employees  to  know  we  un¬ 
derstand  they  are  %vorking  hard,  and 
we  appreciate  their  efforts,"  says  Rob 
Collins,  CIO  at  Cognos. 

Tbe  s^ificantly  scaled-down 
bonuses,  perks  and  incentives  that 
budget-strapped  companies  have  to 
offer  these  d^s  are  keeping  IT  work¬ 
ers  oo  board  ~  for  now.  At  Epitec.  for 


instance,  an  account  repre¬ 
sentative  visits  each  IT 
consultant  once  a  month 
to  talk  about  work  or  air 
grievances.  The  corporate 
newsletter  lists  employees 
recognized  by  peers  for 
outstanding  work. 

An  "award  patrol"  deliv¬ 
ers  special  plaques  and  bal¬ 
loons  to  those  have 
earned  praise  on  the  job. 

The  company  hosts  an  em¬ 
ployee  appreciation  month 
featuring  events  like  office- 
wide  pizza  lunches  and 
family  bowling  nights  once 
a  week  for  four  weeks.  And  IT  staffers 
receive  gifts  for  staying  with  the  com¬ 
pany.  such  as  a  leather  portfolio  after 
three  years  and  a  watch  at  10  years. 

In  addition,  while  some  companies 
have  cut  benefits  such  as  matching 
40Uk)  contributions,  ^itec  actually 
added  that  benefft  this  year. 

Now  tbe  company  boasts  a  98%  pro¬ 
ject  completion  rate  —  which  means 
IT  staff  assigned  to  specific  projects 
either  complete  those  projects  or  are 
hired  by  the  client  again  98%  of  tbe 
time  —  a  statistic  that  Epitec  says  is 
unrivaled  in  the  IT  services  industry. 

Keeping  IT  talent  on  board  is  no 
longer  solely  about  stock  options  and 
designer  coffees.  It’s  important  to  pro¬ 
vide  work/life  balance,  say  analysts 
and  recruiters.  AikI  it's  "even  more 
critical  to  connect  an  IT  professiimal’s 
job  to  specific  business  goals  to  im¬ 
prove  your  chances  of  retaining  top 
IT  talent."  says  niyllis  Klees,  a  partner 
at  Deloitte  &  Touche  LLP's  Human 
Capital  Advisory  Services  practice 
in  San  Jose. 

At  Cognos,  tbe  onus  is  on  manage¬ 
ment  to  make  IT  personnel  understand 
the  importance  of  their  contributions 
on  tbe  job,  Collins  says.  And  that's  not 
always  easy  to  da  Tbe  lesson  is  that 
"the  length  of  an  IT  profossional’s  stay 
at  any  company  is  most  affected  by 
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whether  be  or  she  has  a 
wonderful  boss,  good  ca¬ 
reer  growth  opportunities 
and  whether  he  or  she  is 
havii^  fun,"  Collins  says. 

He  says  many  companies 
foil  to  retain  employees 
"because  they  think  when 
times  are  tou^  we  better 
up."  But  be  says  that 
behavior  is  completely 
wrong.  "If  you  hide  infor¬ 
mation  foom  employees, 
hideous  things  like  Enron 
can  emerge.  A  culture  of 
secrecy  b  not  in  anyone’s 
best  interest,"  Collins  says. 

Meanwhile,  recruiters,  human  re¬ 
sources  executives  and  CIOs  say  that  al- 
thot^  more  IT  professkmab  are  avail¬ 
able  for  hire,  finding  workers  with  tbe 
ri^  skill  sets  to  meet  the  increasingly 
rigorous  demands  set  by  corporatkms  b 
difikulL  "There’s  more  talent  to  choose 
from,  but  it's  still  challenging  to  find 
those  with  the  experience  and  skiUs  to 
meet  our  corporate  clients'  growing 
Ibt  of  requirements,"  Maguire  says. 

Analysts  and  recruiters  also  say 
some  companies  have  taken  advantage 
of  the  skiUs  glut  to  vigorously  upgrade 
their  IT  workforces  —  in  many  cases, 
they're  firing  IT  workers  and  hiring 
lower-cost  but  more-skilled  pec^le  to 
replace  them.  And  some  who  are  still 
holding  oo  to  their  jobs  say  having  a 
job  right  now  b  compensation  enough. 

But  CIOs  and  other  recruiting  ex¬ 
perts  worry  that  after  oxioths  of  lay- 
offo  and  corporate  belt-tightening, 
there  will  likely  be  much  turnover  as 
the  need  for  IT  talent  rises,  creating  a 
talent  ^rtage  ail  over  again, 

Tbe  Information  Technology  Associ¬ 
ation  of  America  (ITAA)  in  December 
reported  that  U£.  companies  hired 
359, (KH)  IT  workers  bemeen  October 
and  December  2002  and  dismissed 
211,000  IT  employees,  for  a  net  gain  of 
148,000  workm  The  total  number  of 
US.  IT  workers  stood  at  KU  millkin 
last  mmith.  compared  with  9.9  million 
in  January  2002.  according  to  the  ITAA. 

Tha  botlom  Ina:  "Most  IT  profession- 
aU  are  tired  of  bearing  continuing 
news  about  layofb  at  companies  like 
General  Electric  and  Motorola."  says 
Maria  Sebaftfer.  an  analyst  at  Stamford. 
Conn.-ba8ed  Meta  Group  Inc.  "If  com¬ 
panies  continue  to  operate  purely  in  a 
cost-cutting  mode,  as  soon  as  tbe  eco¬ 
nomic  situation  improves,  the  best  per¬ 
formers  will  leave."  I 


DePompa  is  a  freelance  writer  and  editor 
in  Germantown.  Md.  Contact  her  at 
bdepompa@comcasUiet. 


f  t 


3 


CUSTOMERS 


EXPECT 


YOUR  ENTIRE 


TO  REVOLVE 


AROUND 

THEM. 


(SOUNDS  LIKE  A  SOLID 
BUSINESS  PLAN  TO  US.) 


Every  customer  is  an  investment.  But  are  you  investing  wisely? 
mySAP"  CRM.  the  «ily  open  and  integrated  CRM  solution,  makes  valu^ 
customer  data  availaUe  to  your  entire  organization.  In  real  time.  So  the  back 
c^ce  knows  what  the  front  crfBce  knows,  which  makes  it  easier  to  give 
customers  what  they  iteed.  A  lot  more  efficiently.  Ar»d  for  a  lot  less  m<K»ey. 
Visit  s^.com  or  call  800  880 1727  to  find  out  more  about  mySAP  CRM. 
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Getting  the  Right  Person 
At  the  Right  Time 


BV  JULIA  KINO 

Dow  CHEMICAL  CO.  was  uscd 
to  receiving  literally  thou¬ 
sands  of  resumes  —  via 
postal  mail  and  c-mail  — 
which  would  pile  up  and  go 
ignored  until  a  hiring  man¬ 
ager  was  presented  with  a  job  requisi¬ 
tion  for  a  chemist,  database  specialist, 
manufacturing  manager  or  maybe  a 
plant  operator.  Manually  sifting 

through  the  r^umes  to  find _ 

the  people  with  the  right  skills 
for  the  job  could  take  weeks 
or  even  months.  Add  to  that 
another  several  weeks  to  con¬ 
tact  the  appropriate  applicants, 
set  up  and  conduct  interviews,  and  re¬ 
view  notes  from  those  interviews,  and 
a  full  financial  quarter  could  pass  be¬ 
fore  a  new  employee  was  actually 
hired  and  working  at  the  company 
back  in  eaiiy  2001. 

Today.  Dow’s  hiring  cycle  time  is 
dovsTt  from  an  average  of  95  days  to  30 
to  35  days.  Its  headhunter  and  other  re¬ 
cruiting  costs  arc  down  25%.  and  it  has 
cut  its  job  advertising  costs  by  35%. 


STEAl¥ 

THISIDEA 


This  is  primarily  the  result  of  imple¬ 
menting  an  automated  resume-track¬ 
ing  and  worker-profile  system  hosted 
by  RecruitSoft  Inc.,  a  San  Francisco- 
based  application  service  provider. 

The  system  has  paid  for  itself  within 
nine  months  of  deployment  and  has 
earned  a  6-to-l  return  on  investment 
over  the  past  two  years,  according  to 
Jon  Walker,  Dow’s  human  resources 
global  director. 

How  it  Works 

All  job  applications  and  re¬ 
sumes  generated  by  newspaper 
advertisements.  Internet  job 
boards  and  recruiter  referrals 
are  directed  to  Dow’s  corporate  Web 
site,  where  they  are  immediately  fun- 
neled  into  the  RecruitSoft  system.  Dow 
hiring  managers  who  tap  into  the  sys¬ 
tem’s  central  repository  can  immedi¬ 
ately  review  resumes.  They  can  also 
create  templates  to  ask  applicants  very 
specific  questions  in  order  to  validate 
their  experience  and  expertise. 

For  example,  for  a  European  sales 
job  opening,  a  template  might  include 
questions  about  the  applicant's  pass¬ 
port  status,  ability  to  travel  and  lan¬ 
guage  skills. 

"The  faster  you  can  talk  to  [appli¬ 
cants].  the  more  you  can  share  your 
goals  and  culture,  and  the  faster  you 
can  make  a  match.**  says  Walker. 

’’We're  a  science  and  technology  com¬ 
pany.  not  just  a  chemical  company,  so 
we're  trying  to  hire  the  same  technolo¬ 
gy  people  as  Intel  or  finance  people  as 
Merrill  Lynch.”  Even  in  a  down  econo¬ 
my.  speed  is  critical  to  acquiring  the 
best  and  the  brightest  talent,  he  notes. 

Even  more  useful  is  the  system’s 
central  repository,  which  now  contains 
thousands  of  resumes  against  which 
Dow  hiring  managers  can  quickly  com¬ 
pare  incoming  job  requisitions. 

Walker  tells  the  story  of  a  young 
woman  who  was  rejected  for  an  audi¬ 
tor’s  job  in  the  office  of  the  comptrol¬ 
ler.  Later,  a  financial  analyst  position 
opened  up  in  the  company's  finance 
department.  "But  before  they  even 


When  you  hire 
someone  before  you 
even  post  the  job,  it 
reduces  your  cycle 
time  immensely. 

JON  WALKER.  HUMAN  RESOURCES 
GLOBAL  DIRECTOR.  DOW  CHEMICAL  CO. 


advertised  the  job.  this  woman's  pro¬ 
file  popped  up  against  the  requisition, 
and  they  hired  her  on  the  spot.  When 
you  hire  someone  before  you  even  post 
the  job.  it  reduces  your  cycle  time  im¬ 
mensely,"  Walker  says. 

"Before,  when  we  had  paper  re¬ 
sumes,  we  had  no  centralized  way  to 
do  any  kind  of  consistent  woricflow," 
he  says.  "Now  the  deal  is  we  have  a 
system  that  doesn’t  sleep.” 

The  Web-based  RecruitSoft  system 
also  allows  Walker  to  create  future  em¬ 
ployee  supply-and-demand  scenarios 
by  analyzing  the  experiences,  skills 
and  competencies  contained  in  worker 
profiles  stored  in  the  central  reposito¬ 
ry.  “We’re  now  able  to  track  the  right 
people.”  he  says. 

Looking  ahead.  Walker  says  he  fore¬ 
sees  Dow  exchanging  applicant  profile 
information  with  other  companies,  ex¬ 
cluding  Dow’s  direct  competitors. 

“Why  not  do  this,  especially  if  the 
company  is  a  ctistomer  of  ours?"  be 
asks.  “We  could  go  from  100,000  pro¬ 
files  to  1  million  profiles  to  create  a  tal¬ 
ent  pool  and  a  network  that  works  bet¬ 
ter  for  everyone."  • 


40 


mmwmNkrnitm 


MMIMEIIEirr 


www.coinputeniiortd.coin 


Getting  the  raght  Person 
Atthe 


gmeragnii 

RiglitTime 


mt  JUUA  KiHO 

Dow  CHEMICAL  CO.  was  used 
to  recehring  literally  thou¬ 
sands  of  resume —  via 
postal  mail  and  e-mail  — 
srtuch  would  pile  up  and  go 
ignored  until  a  hiring  man¬ 
ager  was  presented  with  a  job  requisi- 
doD  for  a  chemist,  database  specialist, 
manufacturing  manager  or  maybe  a 
plant  operator.  Manually  sifting 
through  the  resume  to  find 
the  people  with  the  ri^t  skills 
for  the  job  could  take  weeks 
or  even  months.  Add  to  that 
another  several  weeks  to  con¬ 
tact  the  appropriate  applicants, 
set  up  and  conduct  interviews,  and  re¬ 
view  notes  from  those  interviews,  and 
a  full  Hnancial  quarter  could  pass  be¬ 
fore  a  new  employee  was  actually 
hired  and  working  at  the  company 
back  in  early  2001. 

Today.  Dow’s  hiring  cycle  time  is 
down  from  an  average  of  95  days  to  30 
to  35  days.  Its  headhunter  and  other  re¬ 
cruiting  costs  are  down  25%,  and  it  has 
cut  its  iob  advertising  costs  by  35%. 


This  is  primarily  the  result  of  imple¬ 
menting  an  automated  resum^-track- 
ii^  and  worker-profile  system  hosted 
by  RecruitSoft  Inc.,  a  San  Francisco- 
based  application  service  provider. 

The  system  has  paid  for  itself  within 
nine  months  of  deployment  and  has 
earned  a  Mo-I  return  on  investment 
over  the  past  two  years,  according  to 
)on  Walker,  Dow's  human  resources 
global  director. 

HowKWorfcs 

All  job  ai^Uc^ons  and  r^ 
sum^  generated  by  newspaper 
advertisements,  Internet  job 
boards  and  recruiter  referrals 
are  directed  to  Dow's  corporate  Web 
she.  where  they  are  immediately  frm- 
neled  into  tite  RecruitSoft  system.  Dow 
hiring  managers  who  tap  into  tlfe  sys¬ 
tem’s  central  repository  can  immedi¬ 
ately  review  r^sum^  They  can  also 
create  templates  to  ask  an>licanfe  very 
specific  questions  in  order  to  validate 
their  experience  and  expertise. 

For  example,  for  a  European  sales 
job  opening,  a  template  miglit  include 
questions  about  the  applicanf  s  pass¬ 
port  status,  ability  to  travel  and  lan- 
gu2^  skills. 

*The  fester  you  can  talk  to  [appli¬ 
cants],  the  more  you  can  share  your 
goals  and  culture,  and  the  faster  ^u 
can  make  a  match,*  says  Walker. 

’'We’re  a  science  and  technology  com¬ 
pany,  not  just  a  chemical  company,  so 
we’re  crying  to  hire  the  sanw  technolo¬ 
gy  peopte  as  Intel  or  finance  pet^le  as 
Merrill  Lynch.*  Even  in  a  down  econo¬ 
my,  speed  is  critical  to  acquiring  the 
best  and  the  brightest  talent,  he  notes. 

Even  more  useful  is  the  system’s 
central  repository,  which  now  contains 
thousands  of  r6sum^  against  which 
Dow  hiring  managers  can  quickly  com¬ 
pare  incoming  job  requisitions. 

Walker  tells  the  story  of  a  young 
woman  who  wras  rejected  for  an  audi¬ 
tor's  job  in  the  office  of  the  comptcol- 
len  Later,  a  financial  analyst  position 
opened  up  in  the  conqtany's  finance 
department  "But  before  they  even 
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advertised  tite  job,  this  wrMnan’s  pro¬ 
file  popped  up  against  the  requisition, 
and  they  hired  her  on  the  spot  When 
you  hire  someone  before  you  even  post 
the  job,  it  reduces  your  cycle  time  im- 
mexisely,*  Walker  says. 

*3efore.  when  we  had  ptq>er  r^ 
sunfes,  we  had  no  centralized  way  to 
do  any  kmd  of  consistent  workflow,* 
he  says.  *Now  the  deal  is  we  have  a 
system  that  doesn’t  sleep.* 

The  Web-based  RecruitSoft  system 
also  allows  Walker  to  create  future  em¬ 
ployee  supply-and-demand  scenarios 
by  analyring  the  experiences,  skills 
and  competencies  contained  in  worker 
profiles  stored  in  the  central  r^iosito- 
ry.  ’’Wb’re  now  able  to  track  the  ri^ 
people,*  he  says. 

Looking  ahead.  Walker  says  he  fore¬ 
sees  Dow  <»*rhaT>ging  applicant  profile 
information  wtith  otiier  companies,  ex¬ 
cluding  Dow's  direct  omipetitors. 

"Wby  not  do  this,  espedally  if  the 
company  is  a  customer  of  ours?*  be 
asks.  *We  could  go  from  100,000  pro¬ 
files  to  1  million  profiles  to  create  a  tal¬ 
ent  pool  and  a  network  that  wrorks  bet¬ 
ter  for  everyone."  0 
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ConsHfad  with  an  amrage  of  lass 
than  24  fflodhs,  three  years  as  CTO 
is  a  long  tone.  What  made  ycai  stay? 

f  had  some  speotic  personal  goals: 

I  wanted  to  be  part  of  developing  the 
best  software  development  team 
There  are  key  ingredients  to  starting 
(and  building]  the  best  compares, 
and  one  of  them  (S  people  Iwant- 
ed  to  be  pvt  of  a  team  that  was  going 
to  grow  through  one  of  those  spurts. 

How  dto  you  tacndl  yaw  software 
toam?  Great  developers  want  lo  work 
with  great  developers.  Our  recruit¬ 
ment  process  b  very  painful.  About 
one  out  of  100  applicants  (is  hired, 
and  we  have  50  to  60  developers 
now).  .  I  started  wrth  a  few  great 
core  developers  and  then  told  them 
they  needed  to  hire  people  better  than 
themselves.  No  marter  where  1  look,  I 
see  people  greater  and  better  than 
those  that  lured  them  on.  Thai  ex¬ 
cellence  in  people  B  not  lustm  our 
softwve  team.  A’s  also  the  CEO.  CFO 
and  HR  staff  They're  great  people 
that  took  a  long  tone  to  hire  because 
ol  the  sktR  set.  drive,  desire,  execu 
lion,  operational  history  [we  look  lor]. 
I  leave  the  company  «  great  hands 

How  do  you  SBi  ywraelf  as  a  leader? 

I  see  myself  standmg  on  the  shoutders 
ol  gents,  mosliy  because  ol  my  hmng 
style,  hiring  people  better  than  me 
and  then  getting  out  ol  the  way.  . 

I  spend  a  lot  of  lime  making  sure  bu¬ 
reaucracy  doesn't  get  n  the  way  ol 
eftioencv  And  the  end  result  B I  end 
up  fooking  realy  good,  because  I  let 
the  people  I  hire  do  iheir  lobs 
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ROIor^bur 
Money  Back 


This  year,  we  might  witness  the  injection 
of  a  powerful  new  dose  of  value  into  val¬ 
ue-based  contracting.  As  vendors  contin¬ 
ue  to  build  their  sales  efforts  around  an 
ROI  narrative  —  and  some  will  —  their 
customers  are  likely  to  be  concerned  about  the  profit 
impact  of  IT  investments,  not  just  how  long  it  takes  the 
vendor  to  return  a  help  desk  call. 

At  least  a  few  companies  are  already  infusing  their  IT 
investment  decision-making  with  financial  models  to 
forecast  expected  returns.  At  the  same  time,  more  than 
a  few  vendors  have  begun  to  build  their  sales  pitches 


around  the  ROI  story.  The 
emergence  of  these  parallel 
agendas  suggests  that  we 
will  see  more  value-based 
contracting  in  the  future. 

Deals  will  be  struck  in  such 
a  way  as  to  reflect  the  cus¬ 
tomer's  keen  desire  to  link 
some  percentage  of  the  IT 
vendor's  compensation  to 
measurable  financial  out¬ 
comes.  Should  this  forecast 
hold,  the  implications  for 
the  vendor/customcr  rela¬ 
tionship  will  be  profound. 

These  kinds  of  contrac¬ 
tual  arrangements  aren’t 
entirely  new.  In  the  broadest  sense, 
value-based  contracting  means  that 
some  of  a  vendor’s  compensation  is  at 
risk  and  dependent  upon  a  customer 
achieving  certain  financially  driven 
results  from  the  IT  investment.  The 
ability  to  shift  some  of  the  cost  burden 
and  risks  of  an  IT  investment  has  been 
a  powerful  tool  that  customer  compa- 
nic>s  have  used  to  design  contracts  for 
IT  services,  hardware  and  software. 
Under  one  value-based  approach 
known  as  gain-sharing,  vendor  and 
buyer  share  in  the  quantifiable  dollars 


saved  or  generated  from 
the  user’s  IT  project  In  a 
shared  riskAeward 
arrangement,  the  buyer 
and  vendor  share  in  the 
cost  of  the  development 
of  the  project  and  in  the 
subsequent  spoils. 

Likewise,  service-level 
agreements  (SLA)  have 
been  constructed  to  ensure 
that  predefined  perfor¬ 
mance  goals,  such  as  sys¬ 
tem  uptime  and  availabil¬ 
ity  or  tech  support  turn¬ 
around  times,  are  met.  If 
these  guarantees  aren’t 
met.  the  vendor  reimburses  the  end 
user  or  pays  a  penalty. 

Now.  how  about  a  value-based  con¬ 
tract  with  an  SLA  guaranteeing  market 
share  percentage  increases,  faster  in¬ 
ventory  turns,  reductions  in  procure¬ 
ment  errors  or  increases  in  sales  per 
rep?  The  logic  is  simple:  If  vendors  are 
determined  to  sell  their  products  and 
services  based  on  a  metric-driven  eco¬ 
nomic  value  message,  then  customers 
will  expect  them  to  earn  part  of  their 
compensation  based  on  these  perfor¬ 
mance  indicators. 


Is  the  day  coming  when  the  com¬ 
pany  CFO  cuts  a  check  for  a  technol¬ 
ogy  purchase  only  after  the  invest¬ 
ment  reaches  some  threshold  ROI  or 
beats  the  expected  payback  period? 

If  so.  vendors  are  facing  a  more 
demanding  marketplace  in  which  the 
financial  returns  they  peddle  in  their 
sales  and  marketing  efforts  become 
the  foundation  of  rigorous  financially 
driven  SIAs.  This  puts  their  compen¬ 
sation  at  risk. 

Tlie  implications  of  this  arrange¬ 
ment  are  equally  profound  for  the  cus¬ 
tomer.  Metrics  built  into  such  SLAs 
will  oblige  the  buyer  to  treat  the  ven¬ 
dor  as  a  true  business  partner,  perhaps 
for  the  first  time. 

The  prospective  customer  will  be 
required  to  share  sensitive  business 
process  data,  its  cost  structures  and 
perhaps  its  road  map  for  future  prod¬ 
uct  or  service  innovation.  Many  com¬ 
panies  shopping  for  IT  resist  sharing 
cost  data,  let  alone  the  value  drivers 
moving  the  organization.  Given  the 
kind  of  strategic,  consultative  role  the 
vendor  will  inevitably  find  itself  in  as 
it  negotiates  the  sales  contract,  there’s 
no  avoiding  the  fact  that  buyer  and 
seller  will  need  to  slow-dance  through 
the  process,  not  bang  heads  in  the 
mosh  pit,  as  uncomfortable  as  that 
dance  might  be. 

How  can  this  new  value-based  rela¬ 
tionship  flourish  otherwise?  If  the 
prospect  seeks  an  arrangement  in 
which  it  pays  for  IT  based  upon  ROI 
results  but  then  refuses  to  reveal  the 
unique  levers  that  drive  its  profitabil¬ 
ity,  how  can  an  equitable  contract  be 
drafted?  Vendors  would  likely  feel 
as  if  the  wool  was  being  pulled  over 
their  eyes.  I 
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ed  to  be  part  d  a  tearn  toet  was  going 
to  grow  dnugh  one  d  those  spurts. 
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toa«T  Great  devdoiHrs  wad  to  work 
athqraatdeydopers...  .Our  recruit- 
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core  daretopars  and  then  told  there 
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see  people  grealer  and  belter  tan 
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tat  took  a  long  Ume  to  hire  because 
dtasUlaei.dnya.deslre.eKeGU' 
lion,  operational  history  [we  look  tori. 
I  leave  ta  company  in  great  hands. 
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ta  people  I  tare  d)  tair  jobs. 
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This  year,  we  might  witness  the  injection 
of  a  powerful  new  dose  of  value  into  val¬ 
ue-based  contracting.  As  vendors  contin¬ 
ue  to  build  their  sales  efforts  around  an 
ROI  narrative  —  and  some  will  —  their 
customers  are  likely  to  be  concerned  about  the  profit 
impact  of  IT  investments,  not  just  how  long  it  takes  the 
vendor  to  return  a  help  desk  call. 

At  least  a  few  companies  are  already  infusing  their  IT 
investment  decision-making  with  financial  models  to 
forecast  expected  returns.  At  the  same  time,  more  than 
a  few  vendors  have  begun  to  build  their  sales  pitches 


around  the  ROI  story.  The 
emergence  of  these  parallel 
agendas  suggests  that  we 
will  see  more  vahie-based 
contracting  in  the  future. 

Deals  will  be  struck  in  sudi 
a  way  as  to  reflect  the  cus¬ 
tomer’s  keen  desire  to  link 
some  percentage  of  the  FT 
vendor's  coin|>ensation  to 
measurable  financial  out¬ 
comes.  Should  this  forecast 
bold,  the  implications  for 
the  vendor/customer  reb- 
tiooship  will  be  profound. 

These  kinds  of  contrac¬ 
tual  arrangements  aren’t 
entirely  new.  In  the  broadest  sense, 
value-based  contracting  means  that 
some  of  a  vendor’s  compensation  is  at 
risk  and  dependent  upon  a  customer 
achieving  certain  financially  driven 
results  from  the  IT  investm^L  The 
ability  to  shift  some  of  the  cost  burden 
and  risks  of  an  IT  investment  has  been 
a  powerful  tool  that  customer  compa¬ 
nies  have  used  to  design  contracts  for 
IT  services,  hardware  and  software. 
Under  one  value-based  approach 
known  as  gain-sharing,  vendor  and 
buyer  share  in  the  quantifiable  dollars 


saved  or  generated  from 
the  user's  IT  project  In  a 
shared  ri^iAeward 
arrangement,  the  buyer 
and  vendor  share  in  the 
cost  of  the  development 
of  the  project  and  in  the 
subsequent  spoils. 

likewise,  service-level 
agreements  (SLA)  have 
been  constructed  to  ensure 
that  predefined  perfor¬ 
mance  goals,  such  as  sys¬ 
tem  uptime  and  avaUabil- 
ity  or  tech  support  turn¬ 
around  times,  are  met.  If 
these  guarantees  aren't 
met.  the  vendor  reimburses  the  end 
user  or  pays  a  penalty. 

Now,  how  about  a  value-based  con¬ 
tract  with  an  SLA  guaranteeing  market 
share  percentage  increases,  faster  in¬ 
ventory  turns,  reductxMis  in  procure¬ 
ment  errors  or  increases  in  sales  per 
rep?  Tlie  logic  is  simple:  If  vendors  are 
d^ennined  to  sell  their  products  and 
services  based  on  a  metric-driven  eco¬ 
nomic  value  message,  then  customers 
will  expect  them  to  earn  part  of  their 
compensation  based  on  these  perfor¬ 
mance  indicators. 


Is  the  day  coming  when  the  com¬ 
pany  CFO  cuts  a  check  for  a  technol¬ 
ogy  purchase  only  after  the  invest¬ 
ment  reaches  some  threshold  ROI  or 
beats  the  expected  pa)d>ack  period? 

If  so,  vendors  are  facing  a  more 
demanding  marketplace  in  which  the 
financial  returns  they  peddle  in  their 
sales  and  marketing  efforts  become 
the  foundation  of  rigorous  financially 
driven  SLAs.  This  puts  their  compen¬ 
sation  at  risk. 

The  impUcations  of  this  arrange¬ 
ment  are  equally  profouiMl  for  the  cus¬ 
tomer.  Metrics  built  into  such  SLAs 
will  oblige  the  buyer  to  treat  the  ven¬ 
dor  as  a  true  business  partner,  perhaps 
for  the  first  time. 

The  prospective  customer  will  be 
required  to  share  sensitive  business 
process  data,  its  cost  structures  and 
periiaps  hs  road  map  for  future  prod¬ 
uct  or  service  innovatioa  Many  com¬ 
panies  shopping  for  IT  resist  sharing 
cost  data,  1^  alone  the  value  drivers 
moving  the  organizatioa  Given  the 
kind  of  strategic,  consultative  role  the 
vendor  will  inevitably  find  itself  in  as 
it  negotiates  the  sales  contract,  there's 
no  avoiding  the  fact  that  buyer  and 
seller  will  need  to  slow-dance  through 
the  process,  not  bang  heads  in  the 
roo^  pit,  as  uncomfortable  as  that 
dance  m%ht  be. 

How  can  this  new  value^>ased  rela¬ 
tionship  flourish  otherwise?  If  the 
prospect  seeks  an  arran^ment  in 
which  it  pays  for  IT  based  upon  ROI 
results  but  then  refuses  to  reveal  the 
unique  levers  that  drive  its  profitabil¬ 
ity,  how  can  an  equitable  contract  be 
drafted?  Vendors  would  likely  feel 
as  if  the  wool  was  being  pulled  over 
their  eyes.  I 
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Guide  for  its  performance  and  manageabUrty  features  for  the  price  PowerConnect  switches 
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Continued  from  page! 

NT  Server  4.0 

which  is  due  out  in  April,  and 
to  consider  the  possibility  of 
skipping  the  Windows  2000 
Server  release  entirely. 

Jon  Dell'Antonia,  vice  presi- 
dent  of  IT  at  OshKosh  B'Gosh 
Inc.  in  Oshkosh,  Wts..  said  the 
support  extension  may  allow 
him  to  push  into  2005  the  mi¬ 
gration  of  roughly  ISO  Win¬ 
dows  NT  servers  that  sit  in  the 
back  rooms  of  stores. 

So  far.  support  hasn’t  been  a 
worry  for  E^'Antonia  be¬ 
cause  the  vendor  for  his  com¬ 
pany’s  point-of-sale  systems. 
Datavantage  Corp.  in  Cleve¬ 
land.  pledged  to  support  Win¬ 
dows  NT  if  Microsoft  didn’t 

For  many  companies  in  the 
midst  of  migrations,  the  exten¬ 
sion  isn’t  expected  to  have  a 
significant  impact  on  plans. 

Financial  services  firm  Key¬ 
Corp  in  Cleveland  has  migrat¬ 
ed  roughly  450  Windows  NT 
servers  to  Windows  2000 
Server  and  already  has  a  strat¬ 
egy  to  move  its  remaining 
1,^  NT  boxes  to  Windows 
2000.  Ann  Louis,  vice  presi¬ 
dent  of  enterprise  technology 
operations,  said  KeyCorp  will 
continue  on  its  planned  c<m- 
versionpath. 

‘A  Litlla  Leeway' 

A  technka]  architect  at  a  large 
insurance  company  said  the 
IT  department  had  set  a  ‘'hard 
date"  to  be  ofif  Windows  NT 
Server  by  year’s  end.  and  the 
suf^xMt  extension  merely  pro- 
vi^  “a  little  leeway." 

doubt  we’ll  change  the 
date,  but  it's  nice  to  have  the 
margia'' be  said. 

Although  Microsoft's  deci¬ 
sion  to  tack  on  an  additional 
year  of  support  for  Windows 
NT  Server  was  generally  laud¬ 
ed  by  users  and  analysts,  the 
extension  doesn’t  cover  all  of 
the  company’s  support  op¬ 
tions.  P^-per-inddest  and  se¬ 
curity  “hot  fixes"  will  be  avail¬ 
able  through  Dec.  31. 2004,  but 
the  company  will  no  longer 


provide  tKMisecuriry  hot  fixes 
to  premier  support  holders  af¬ 
ter  Dec.  31, 2003. 

A  hot  fix  is  a  modification 
to  commercially  available  Mi¬ 
crosoft  product  code  to  ad¬ 
dress  a  specific  problem.  As  of 
Jan.  1. 2004.  any  customer 
wanting  a  nonsecurity  hot  fix 
will  have  to  obtain  a  custom 
contract,  according  to  a  Mi¬ 
crosoft  spoke^rson. 

Bob  O'Brien,  a  group  prod¬ 
uct  manager  in  the  Windows 
server  division,  said  the  year- 
end  eliminatioo  of  nonsecuri¬ 
ty  hot  fixes  was  "a  customer 
salisfoctioD  and  business  deci- 
stoo,  gtveo  we  are  continuing 
to  see  an  increase  in  Windows 
2000  deployments  coupled 
with  a  decrease  in  NT  4  re- 
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quests  for  fixes."  He  added. 
The  trend  toward  migration 
and  consolidation  is  a  better 
area  to  focus  resources.” 

How  much  of  an  impact  the 
eliminatioo  of  oonsecurity  hot 
fixes  will  have  remains  to  be 
seen.  Microsoft  acknowledged 


that  corporate  users  typically 
request  them. 

Louis  said  KeyCorp  has  re¬ 
quested  hot  fixes  related  to 
Dynamic  Host  Configuration 
Protocol  and  Domain  Name 
System  over  the  past  36 
months,  and  the  company  will 
weigh  the  potential  risks  that 
would  be  corrected  with  noa- 
security  hot  fixes  and  decide 
wbat  support  it  will  need  go¬ 
ing  forwa^. 

Dwi^it  Davis,  an  analyst  at 
Boston-based  Summit  Strate¬ 
gies  Inc,,  criticized  Microsoft's 
decision  to  fragment  the  NT 
Server  support  extension  He 
said  it  could  confuse  custom¬ 
ers  amt  “diminisb  the  glowing 
aftereffect"  that  Microsoft 
hoped  to  gain  from  the  other¬ 


wise  positive  fhang^. 

The  changes  will  affect 
many  companies.  Tom  Bitt- 
man.  an  analyst  at  Gartner  Inc 
in  Stamford.  Coon.,  estimated 
that  50%  to  70%  of  the  Win¬ 
dows  server  operating  system 
installed  base  b  still  NT  4X). 

0*&ien  claimed  that  only 
35%  to  40%  of  the  Windows 
server  installed  base  b  NT  4.0. 
He  said  extending  key  support 
provisions  was  common  sense 
"if  you  want  to  have  a  relation¬ 
ship  witb  these  customers  for 
the  next  seven  to  10  years.” 

Rob  Enderie,  an  analyst  at 
Giga  InformaiioD  Group  Inc., 
said  he  thinks  Microsoft  also 
has  seen  customers  turn  to 
i  .tnmt,  based  on  feedback  hb 
firm  b  getting  from  clients.  I 


Niche  Vendors  Catch 
Users’  Eyes  at  Lotusphere 


They  fill  gaps  in 
Notes,  Domino 
functionality 

BY  TOOO  R.  WBiSS 

ORLAMOO 

Among  the  SfiOO  attendees 
from  around  the  wc^ld  at  last 
week’s  IBM  Lotus^iere  2003 
conference  were  IT  leaders 
ftt>m  companies  on  separate 
but  similar  mbsioos:  to  find 
out  how  to  make  their  Lotus 
Notes  and  Domino  systems 
meet  their  specific  needs. 

And  often,  the  answers  came 
not  from  IBM.  but  from  niche 
companies  that  build  add-ons 
for  Notes  and  Domino. 

James  Greene,  senior  Lotus 
Notes  infrastructure  analyst  at 
Duke  Energy  Corp.  in  Char¬ 
lotte.  RC,  was  looking  to 
solve  the  problem  of  e-mail 
eating  up  storagge  space.  One 
possible  solution  was  PKZip 
Professional  Edition  6U),  fea¬ 
turing  integration  with  Notes. 

The  product,  from  PKWare 
Inc.,  compresses  and  encrypts 
attachments  [Quiddink 
358651.  It  would  reduce  Duke 


Energy’s  e-mail  storage  needs 
and  add  security  for  the  25,000 
Notes  users  and  5,000  Micro¬ 
soft  Exchange  users  Greene 
supports.  "It  seems  that  may¬ 
be  using  the  attachment  fea¬ 
ture  [to  compress  the  Hie 
size],  encrypting  it  and  then 
sending  it  out  may  be  the  solu- 
tioQ.*  Greene  said 

Michael  Bulb,  program 
manager  for  industrial  manu¬ 
facturer  IngersoU-Rand  Ca  in 
WoodcUffe,  RJn  wanted 
knowledge  management  im¬ 
provements  for  Notes  and 
Domino  and  was  looking  at 
List  Server  for  Domino  3jc 
products  from  Brigtu  Ideas 
Software  Inc  in  Edison.  N.J. 
The  software  would  let  him 
streamline  how  users  send 
e-mail  to  multiple  recipients. 

Currently,  some  users  send 
broadcast  e-maUs  that  devour 
costly  bandwidth.  Bulb  would 
like  to  set  up  Ibtservs,  which 
would  reduce  storage  and 
message  distribution  needs. 
The  changes,  which  Bulb 
wants  to  implement  during 
the  next  five  years,  will  affect 
about  25,000  users  woridwide. 


"Some  of  tfab  b  vaporware," 
he  said  "Bui  generally,  half  of 
vaporware  makes  it  to  reality." 

Nicholas  Behrmann,  global 
messaging  manager  at  General 
Motors  Corp,,  was  invesrigat- 
ing  adminbtratioo  and  man¬ 
agement  toob  for  Notes  and 
Efoinino  to  help  reduce  costs 
andin^irove  service. 

Part  of  hb  mission  was  to 
look  over  toob  that  could  be 
used  by  GM's  IT  outsourcer. 
Electronic  Data  Systems  Corp. 
"Pd  rather  have  them  purchase 
a  tool  set  rather  than  reinvent 
the  wfaeeL"  Behrmann  said 
Among  the  products  be 
checked  out  was  Netherlands- 
based  AedifiComm  BVs 
WorkplaceControi  for  Notes. 


Perry  HUtx.  Lotus  adminis¬ 
trator  at  chemical  company 
Henkel  Corp.  in  Gulpb  MiUs. 
Pa„  wants  to  consolidate  do¬ 
mains  for  Notes  to  reduce  the 
complexity  of  hb  systems. 

One  possible  solution:  the 
Common  Migration  Tbol  for 
Notes  Domains  packi^  frxKD 
BinaryTtee  Inc.  in  New  York. 

Tbb  basically  does  every¬ 
thing  we've  been  doing  in  a 
manual  way."  Hiltz  said  He 
said  it  would  let  him  cotiduct 
migratioo  processes  from  hb 
desk,  withmt  having  to  travel 
It  would  coat  $50,000  to  de¬ 
ploy.  but  its  long-term  savings 
would  result  in  a  payback. 

Joe  Sbe,  Notes  administra¬ 
tor  for  the  Brunswick  Boat 
Group  in  Knoxville,  Tenn.,  was 
looking  at  Notes  management 
toob  from  DYS  Analytics  Inc. 
in  Wellesley.  Mass,,  and  re¬ 
searching  spam  fixes  for  hb 
3,500  users.  Spam  b  "an  in¬ 
creasing  problem."  he  said 
"Wt’ve  tried  to  filter  it . . .  tel 
it's  like  sand  in  your  hand.  You 
get  some  of  H.  but  most  of  U 
faiu  through."! 
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NT  Server  4.0 

which  is  due  out  in  April,  and 
to  consider  the  possibility  of 
skipping  the  Windows  2000 
Server  release  entirely. 

|on  Dell’Antonia.  vice  presi¬ 
dent  of  IT  at  OshKosh  B'Gosh 
Inc.  in  Oshkosh.  Wis..  said  the 
support  extension  may  allow 
him  to  push  into  2005  the  mi¬ 
gration  of  roughly  150  Win¬ 
dows  NT  servers  that  sit  in  the 
back  rooms  of  stores. 

So  far,  support  hasn't  been  a 
worr>'  for  Dell'Antonia  be¬ 
cause  the  vendor  for  his  com¬ 
pany's  point-of-sale  systems, 
Datavantage  Corp.  in  Cleve¬ 
land.  pledged  to  support  Win¬ 
dows  NT  if  Microsoft  didn't. 

For  many  companies  in  the 
midst  of  migrations,  the  exten¬ 
sion  isn't  expected  to  have  a 
significant  impact  on  plans. 

Financial  services  firm  Key¬ 
Corp  in  Cleveland  has  migrat¬ 
ed  roughly  450  Windows  NT 
servers  to  Window.s  2000 
Server  and  already  has  a  strat¬ 
egy  to  move  its  remaining 
1.350  NT  boxes  to  Windows 
2000.  Ann  Louis,  vice  presi¬ 
dent  of  enterprise  technolog)' 
operations,  said  KeyCorp  will 
continue  on  its  planned  con¬ 
version  path. 

‘A  Little  Leeway' 

A  technical  architect  at  a  large 
insurance  company  said  the 
IT  department  had  set  a  “hard 
date"  to  be  off  Windows  NT 
Server  by  year's  end.  and  the 
support  extension  merel>'  pro¬ 
vides  “a  little  lecway.“ 

“I  doubt  we'll  change  the 
date,  but  it's  nice  to  have  the 
margin."  he  said. 

Although  Microsoft's  deci¬ 
sion  to  tack  on  an  additional 
year  of  support  for  Windows 
NT  Server  was  generally  laud¬ 
ed  by  users  and  analysts,  the 
extension  doesn’t  cover  all  of 
the  company’s  support  op¬ 
tions.  Pay-per-incident  and  se¬ 
curity  “hot  fixes"  will  be  avail¬ 
able  through  Dec.  31. 2004.  but 
the  company  will  ik>  ior^er 


provide  nonsecurity  hot  fixes 
to  premier  support  holders  af¬ 
ter  Dec.  31, 2003. 

A  hot  fix  is  a  modification 
to  commercially  available  Mi¬ 
crosoft  product  code  to  ad¬ 
dress  a  specific  problem.  As  of 
|an.  1, 2004,  any  customer 
wanting  a  nonsecurity  hot  fix 
will  have  to  obtain  a  custom 
contract,  according  to  a  Mi¬ 
crosoft  spokesperson. 

Bob  O'Brien,  a  group  prod¬ 
uct  manager  in  the  Windows 
server  division,  said  the  year- 
end  elimination  of  nonsccuri- 
ty  hot  fixes  was  “a  customer 
satisfaction  and  business  deci¬ 
sion,  given  we  are  continuity 
to  see  an  increase  in  Windows 
2000  deployments  coupled 
with  a  decrease  in  NT  4  re- 


They  fill  gaps  in 
Notes.  Domino 
functionalitx’ 
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Among  the  5,000  attendees 
from  around  the  world  ai  last 
week’s  IBM  Lotusphere  2003 
conference  were  IT  leaders 
from  companies  on  separate 
but  simibr  missions:  to  fmd 
out  how  to  make  their  Lotus 
Notes  and  Dtimino  systems 
meet  their  specific  needs. 

And  often,  the  answers  came 
not  from  IBM.  but  from  niebe 
companies  that  build  add-ons 
for  Notes  and  Domimt. 

lames  Greene,  senior  Lotus 
Notes  irtfrastructure  analyst  at 
Duke  Energy  Corp.  in  Char¬ 
lotte.  N.C..  was  looking  to 
solve  (he  problem  of  e-mail 
eating  up  storage  space.  One 
possible  solution  was  PKZip 
Professional  Edition  6.0.  fea¬ 
turing  integration  with  Notes. 

The  product,  from  PKWare 
Inc.,  compresses  and  erKrypts 
attachments  iQuickLink 
358651.  It  would  reduce  Duke 


NT  Server  4.0 
Support  Phaseout 


tint  - 

Pjv  piT  tot  i 
dent  .oW  |)fi-m.i-i 
online  supptiM 


quests  for  fixes."  He  added. 
"The  trend  toward  migration 
and  consolidation  is  a  better 
area  to  focus  resources." 

How  much  of  an  impact  the 
elimination  of  nonsecurity  hot 
fixes  will  have  remains  to  be 
seen.  Microsoft  acknowledged 


Energy's  e-mail  storage  needs 
and  add  sccurit)'  for  the  25.000 
Notes  users  and  5.000  Micro¬ 
soft  Exchange  users  Greene 
supports.  “It  seems  that  may¬ 
be  using  the  attachment  fea¬ 
ture  |io  compress  the  file 
size],  encrypting  it  and  then 
sending  it  out  may  be  the  solu¬ 
tion."  Greene  said. 

Michael  Bulis.  program 
manager  for  industrial  manu¬ 
facturer  Ingersoll-Rand  Ca  in 
WixxJciiffc.  N.|..  wanted 
knowledge  management  im¬ 
provements  for  Notes  and 
Domino  and  was  looking  at 
List  Server  for  Domino  3.x 
products  from  Bright  Ideas 
Software  Inc.  in  Edison.  N.|. 
The  software  would  let  him 
streamline  how  users  send 
e-mail  to  multiple  recipients. 

Currently,  some  users  send 
broadcast  e-mails  that  devour 
costly  bandwidtK  Bulls  would 
like  to  set  up  Ustservs.  which 
would  reduce  storage  and 
message  distribution  needs 
The  changes,  which  Buli.s 
wants  to  implement  during 
(he  next  five  years,  will  affect 
about  25,000  users  worldwide. 


that  corporate  users  typically 
request  them. 

Louis  said  KeyCorp  has  re- 
que.sied  hot  fixes  related  to 
Dynamic  Host  Configuration 
ProtiKTol  and  Domain  Name 
System  over  the  past 
month-s,  and  the  company  will 
weigh  the  potential  risks  that 
would  he  corrected  with  non- 
secui  iiy  hot  fixes  and  decide 
what  support  it  will  need  go¬ 
ing  forward. 

Dwight  Davis,  an  analyst  at 
Boston-based  Summit  Strate¬ 
gies  Inc.,  criticized  Microsoft's 
decision  to  fragment  the  NT 
Server  support  exien.sion.  He 
said  it  could  confuse  custom¬ 
ers  and  “diminish  the  glowing 
aftereffect"  that  Microsoft 
hoped  to  gain  from  the  other- 


Notes-worthy 


VMon  M  pnMdi  «liHm 
to  LolUB  aaftave  mdudr 


"Some  of  this  is  vaporware." 
he  said.  “But  generally,  half  of 
vaporware  makes  it  lo  reality." 

Nicholas  Behrmann.  global 
messaging  manager  at  General 
Motors  CA)rp..  was  investigat¬ 
ing  administration  and  man¬ 
agement  toob  for  Notes  and 
Domino  to  help  reduce  costs 
and  improve  service. 

Pan  of  his  mission  was  to 
look  over  tools  that  could  be 
used  by  GM's  IT  outsourcer. 
Electronic  Data  S)*sicm.s  Corp. 
“I'd  rather  have  them  purchase 
a  tool  set,  rather  than  reinvent 
the  wheel."  Behrmann  said. 
Among  the  products  he 
checked  out  was  Netherlands- 
based  AedifiComro  BV's 
Workplat^Control  for  Notes. 


wise  posttivc  changes. 

Thc  changes  w  ill  affect 
many  companies.  Tom  Biif- 
man.  an  anah'st  at  Ganncr  Inc. 
in  Stamford.  Conn.,  estimated 
that  50%  to  70%  of  the  Win¬ 
dows  server  operating  system 
installed  base  is  still  NT  4.0. 

O'Brien  claimed  that  only 
.35%  to  40%  of  the  Windows 
server  installed  base  is  NT  4.0. 
He  said  extending  ke)'  suppon 
provisions  was  c<immon  sensi- 
“if  you  want  to  have  a  relation¬ 
ship  with  these  customers  for 
the  next  se\'en  to  10  years" 

Rob  Endcrle.  an  analyst  at 
Giga  Inl'ormation  Group  Inc., 
said  be  thinks  Microsoft  also 
has  .seen  customers  turn  to 
Linux,  based  on  feedback  his 
firm  is  getting  from  clients,  k 


Perry  Hiliz.  Lotus  adminis¬ 
trator  at  chemical  company 
Henkel  Corp.  in  Gulph  Mills. 
Pa.,  wants  to  consolidate  do¬ 
mains  for  Notes  to  reduce  the 
complexity  of  his  systems. 

One  possible  solution:  the 
Common  Migration  Tool  for 
Notes  Domains  package  fn>m 
BinaryTree  Inc.  in  New  "^ork. 

This  basically  docs  every¬ 
thing  we’ve  been  doing  in  a 
manual  way."  Hiltz  said.  He 
said  it  would  let  him  conduct 
migraiiuo  processes  from  hb 
desk,  without  having  to  travel. 
It  would  cost  $50,000  to  de¬ 
ploy.  but  its  long-term  savings 
would  result  in  a  payback 
|oe  Sise.  Notes  administra¬ 
tor  for  the  Brunswick  Boat 
Group  in  Knoxville.  Tenn..  was 
looking  at  Notes  management 
looU  from  DYS  Analytics  Inc. 
in  Wellesley.  Mass.,  and  re¬ 
searching  spam  fixes  for  hb 
3.500  users.  Spam  b  “an  in¬ 
creasing  problem."  he  said. 
“We’ve  tried  to  filter  it —  But 
it's  like  sand  in  your  hand.  You 
get  some  of  it.  but  most  of  it 
falb  through."  I 
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FRANK  HAYES  •  FRANKLY  SPEAKING 


Bug  Chase  Bungle 


Maybe  you  missed  this  news  last  week  amid  all 
the  hubbub  about  the  Slammer  worm:  Security  re¬ 
searcher  Next  Generation  Security  Software  Ltd. 
(NGS)  said  it  will  stop  sharing  information  with  the 
CERT  Coordination  Center,  the  government-funded 
clearinghouse  that  tracks  viruses,  worms  and  other  security  prob¬ 
lems  [QuickLink  a2860].  So  what?  Well,  when  NGS  finds  a  security 
hole,  it  will  notify  its  clients  and  the  software  vendor,  but  not  CERT. 
Which  sounds  pretty  selfish  of  NGS  —  until  you  consider  whom 
CERT  was  passing  the  information  along  to. 

That  would  be  some  of  NGS’s  competitors  So.  at  a  time  when  worms,  viruses  and  other 

and  potential  clients.  And  they’ve  ty'pically  threats  are  rising.  CERTs  usefulness  as  a 

been  getting  the  information  before  CERT  noti-  source  for  security  information  is  collapsing. 


fies  the  public  about  a  security  problem. 

Here's  how  it  works:  When  a  bug  chaser  like 
NGS  finds  a  security  problem,  the  company 
warns  its  clients  (who  pay  for  the  service)  and 
the  vendor  involved  (who  has  to  fi-x  it).  Then 
the  bug  chaser  tells  CERT,  so  CERT  can  con¬ 
firm  the  problem  and  prepare  its  own  alert. 

The  public  isn't  usually  told  for  45  days,  so  the 
vendor  has  time  to  develop  a  patch. 

At  least  that’s  how  it’s  supposed  to  work.  But 
since  April  2001,  CERT  has  also  made  \nalnera- 
bility  reports  immediately  available  to  the  In¬ 
ternet  Security  Alliance,  a  CERT-sponsored 
group  whose  member  companies  pay  dues 
ranging  from  S3.000  to  S70.000  per  year.  None 
of  that  money  goes  to  the  bug  chasers;  it  all 
goes  lo  CERT. 

While  that  fact  isn’t  a  secret,  it  wasn’t  widely 
known.  At  least  the  people  at  NGS  didn’t  know 
that  when  they  gave  away  their  best  sluflf  to 
CERT,  CERT  was  selling  it  on  the  side.  No 
wonder  NGS  wasn’t  happy  when  it  finally  real¬ 
ized  what  was  going  on. 

The  upshot?  CERT  loses  early  ac»  - 

cess  to  a  major  bug  chaser’s  work. 

Now  CERT  will  find  out  about 
NGS's  research  when  NGS  issues 
an  advisory,  like  the  rest  of  us. 

And  IT  people  lose  confidence  in 
CERT  as  the  clearinghouse  for  the 
most  up-to-date,  comprehensive  IT 
security  information. 

But  it  gets  worse.  It  turns  out  oth¬ 
er  bug  chasers  already  knew  what 
NGS  just  found  out.  niey've  been 
withholding  their  security  research 
from  CERT.  too.  They  just  haven’t  £223 
made  a  big  deal  about  it. 
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And  in  exchange  for  this  loss  in  credibility, 
what  does  CERT  get?  A  few  million  dollars. 

I  prefer  full  disclosure  of  security  holes,  so 
IT  shops  can  make  their  own  best  security  de¬ 
cisions.  But  I  also  understand  that  security  re¬ 
searchers  have  to  make  a  living  by  selling  what 
they’ve  worked  bard  to  discover.  They  can't  af¬ 
ford  to  give  it  away  to  their  competition. 

Which  means  IT  shops  now  face  a  choice. 

We  can  become  clients  of  one  or  more  security 
research  outfits,  if  we  really  need  that  level  of 
security  information.  Or  we  can  make  do  with 
the  bulletins  coming  from  individual  security 
companies  and  patches  issued  by  vendors.  But 
we  can  no  longer  assume  CERT  is  the  place  to 
go  for  the  best  information. 

CERT  has  a  choice,  too.  CERT  can  keep  pass¬ 
ing  along  vulnerability  reports  to  the  Internet 
Security  Alliance  —  guaranteeing  that  CERT 
won't  get  most  information  from  bug  chasers. 

Or  CERT  can  restore  its  credibility  by  killing 
that  program  and  finding  another  way  to  get 
the  few  million  dollars  it  currently  generates. 

-  -  Maybe  the  money  could  come 

from  the  government’s  new  home¬ 
land  security  budget.  That  would 
be  a  cheap  way  of  making  Ameri¬ 
ca’s  IT  infrastructure  safer. 

Or  maybe  it  could  be  donated, 
no  strings  attached,  by  some  high- 
tech  billionaire  —  say,  a  chief  soft¬ 
ware  architect  who  feels  directly 
responsible  for  the  kinds  of  securi¬ 
ty  messes  that  CERT  should  be 
helping  to  clean  up.  It  would  be 
tf  IT  torAHTB  good  PR.  and  at  a  few  million  a 
year,  dirt  cheap. 

Bill  wouldn’t  even  miss  it.  I 
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Bug  Chase  Bungle 

Maybe  you  missed  this  news  last  week  amid  all 
the  hubbub  about  the  Slammer  worm;  Seciuity  re¬ 
searcher  Next  Generation  Security  Software  Ltd. 
(NGS)  said  it  will  stop  sharing  information  with  the 
CERT  Coordination  Center,  the  government-funded 
clearinghouse  that  tracks  viruses,  worms  and  other  security  prob¬ 
lems  [QuickLink  a2860].  So  what?  Well,  when  NGS  finds  a  security 
hole,  it  will  notify  its  clients  and  the  software  vendor,  but  not  CERT. 
Which  sounds  pretty  selfish  of  NGS  —  until  you  consider  whom 
CERT  was  passing  the  information  along  to. 


That  would  be  some  of  NGS's  competitors 
and  potential  clients.  And  they’ve  typically 
been  getting  the  information  before  CERT  noti¬ 
fies  the  public  about  a  security  problem. 

Here’s  bow  it  works:  When  a  bug  chaser  like 
NGS  finds  a  security  problem,  the  company 
warns  its  clients  (who  pay  for  the  service)  and 
the  vendor  involved  (who  has  to  fix  it).  Then 
the  bt^  chaser  tells  CERT,  so  CERT  can  con¬ 
firm  the  problem  and  prepare  its  own  alert, 
llie  public  isn’t  usually  told  for  45  days,  so  the 
vendor  has  time  to  develop  a  patch. 

At  least  that’s  bow  it’s  supposed  to  work.  But 
since  April  2001,  CERT  has  also  made  vulnera¬ 
bility  reports  immediately  available  to  the  In¬ 
ternet  Security  Alliance,  a  CERT-sponsored 
group  whose  member  companies  pay  dues 
ranging  from  $3,000  to  $70,000  per  year.  None 
of  that  money  goes  to  the  bug  chasers;  it  all 
goes  to  CERT. 

While  that  fact  isn’t  a  secret,  it  wasn’t  widely 
known.  At  least  the  people  at  NGS  didn’t  know 
that  when  they  gave  away  their  best  stuff  to 
CERT,  CERT  was  selling  it  on  the  side.  No 
wonder  NGS  wasn’t  happy  when  it  finally  real¬ 
ized  what  was  going  on. 

The  upshot?  CERT  loses  early  ac¬ 
cess  to  a  major  bt^  chaser’s  woik. 

Now  CERT  will  find  out  about 
NGS’s  research  when  NGS  issues 
an  advisory,  like  the  rest  of  us. 

And  IT  people  lose  confidence  in 
CERT  as  ^  clearinghouse  for  the 
most  up-to-date,  comprehensive  IT 
secttrity  infonnation. 
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NGS  just  found  out  They’ve  been 
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So,  at  a  time  when  worms,  viruses  and  other 
threats  are  rising,  CERTs  usefulness  as  a 
source  for  security  information  is  collapsing. 

And  in  exchange  for  this  loss  in  credibility, 
what  does  CERT  get?  A  few  million  dollars. 

I  prefer  foil  disclosure  of  security  holes,  so 
IT  shops  can  make  their  own  best  sectuity  de¬ 
cisions.  But  I  also  understand  that  seoirity  re¬ 
searchers  have  to  make  a  living  by  selling  what 
they’ve  worked  hard  to  discover.  They  can’t  af¬ 
ford  to  give  it  away  to  their  competition. 

Which  means  IT  shops  now  face  a  choice. 

We  can  become  clients  of  one  or  more  sectirity 
research  outfits,  if  we  really  need  that  level  of 
security  information.  Or  we  can  make  do  with 
the  bulletins  coming  from  individual  security 
companies  and  patches  issued  by  vendors.  But 
we  can  no  longer  assume  CERT  is  the  place  to 
go  for  the  best  infonnation. 

CERT  has  a  choice,  too.  CERT  can  keep  pass¬ 
ing  along  vulnerability  reports  to  the  Internet 
Security  Alliance  —  guaranteeing  that  CERT 
won’t  get  most  information  from  bug  chasers. 

Or  CERT  can  restore  its  credibility  by  killing 
that  prc^ram  and  finding  another  way  to  get 
the  few  million  dollars  it  currently  generates. 
Maybe  the  money  could  come 
from  the  government’s  new  home¬ 
land  security  bucket.  That  would 
be  a  cheap  way  of  making  Ameri¬ 
ca’s  IT  infrastructtire  safer. 

Or  maybe  it  could  be  donated, 
no  strings  attached,  by  some  high- 
tech  billionaire  —  say,  a  chief  soft¬ 
ware  architect  who  feels  directly 
responsible  for  the  kinds  of  securi¬ 
ty  messes  that  CERT  should  be 
helping  to  clean  up.  It  would  be 
good  PR,  and  at  a  few  million  a 
year,  dirt  cheap. 

Bill  wouldn’t  even  miss  it  I 
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Want  to  cut  your  IT  costs  without  sacrificing 
performance?  PRIMEPOWER  Servers  from  Fujitsu. 

■  The  secret  is  out  PRIMEPOWER'*  Solaris*'- compatibte 
servers  from  Fujitsu*  deliver  a  major  breakthrough  in 
price/performarK^e  compared  to  our  more  famous 
competition.  proof?  PRWEPOWER  servers  offer 
such  an  advantage  that  the  world's  leading  com¬ 
panies  use  them  to  boost  their  performance.  And  there's  a 
PRIMEPOW^  server  that's  right  for  any  application  you  need— 
from  single  CPU,  rack-mounted  servers  to  enterprise-ready 
systems  that  scale  to  1 28  CPUs  for  unsurpassed  performar>ce  in 
the  data  center. 

Of  course,  it’s  not  just  the  hardware  you're  buyir»g.  It's  also 
Fujitsu's  30+  years  of  experience  supporting  high-perform¬ 
ance,  mission-critical  systems.  We've  already  helped  many 
companies  consolidate  their  IT  infrastructures  and  lower  their 
Total  Cost  of  Ownership.  Our  free  white  paper,  The  Why  and 
How  of  Server  Conso/foaffon,  explains  how.  Get  your  copy  at 
www.ftsl.fujitsu.com/ad.  Or  call  (877)  905-3644. 
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NEW  DB2.  A  SELF-STARTER 
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SELF-HEALING 


SORT  OF  WAY. 


Miat  keeps  databases  in  game  shape?  DB2  v8.  the  most  advanced  self-managing 
database  across  Linux?  UNIX*  and  Windows? Turbocharged  querying  and  tuning 
saves  time,  resources  and  pushes  productivity  skyward.  And,  no  matter  what  form 
your  data  is  in,  it  lets  you  access,  analyze  and  manage  it.  DB2.  It's  part  of  the  software 
team  that  includes  Lotus?  Tivoli*  and  WebSphere?  Learn  more  at  HMii.coin/db2/new 


©  business  is  the  game  Piay  to  win7 


VOL 

37 

ISS 

6 

FE 

1  0 

2003 


U  M  1 


Why  it'-j  SQ  hard  to  kill  doomed  IT  pro|ects 
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$L8BIT  Rollout 
Is  Rx  for  Kaiser 


Oakland,  Calif.-based  Kais¬ 
er,  the  largest  nonprofit  health 
maintenance  organization  in 
the  U.S.,  plans  to  use  software 
develop^  by  Epic  Systems 
Corp.  in  Madison,  Wis.,  to 
store  medical  records  elec¬ 
tronically.  Epic’s  software  pro¬ 
vides  a  repository  that  inte¬ 
grates  all  types  tk  data,  includ¬ 
ing  patient  charts,  physician 
order  entry  forms,  clinical 
notes,  nursii^  documentation 
and  pharmacy  information. 

Kaiser  had  previously 
worked  with  IBM  to  develop 
Kaiser,  page  57 


BV  BOB  BRBWIN 

Kaiser  Permanente  Health 
Plan  Inc.  last  week  announced 
a  S1.8  billion  project  to  deploy 
an  automated  medical  records 
system  for  its  84  million 
members,  its  second  attempt 
to  use  technology  to  eliminate 
paper-based  charts  and  files. 

Analysts  said  the  new  sys¬ 
tem,  which  is  intended  to  be 
used  by  Kaiser’s  11,000  physi¬ 
cians  and  their  patients,  would 
be  the  largest  health  care  IT 
system  ever  developed  outside 
the  federal  government  in 
terms  of  cost,  scale  and  scope. 
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$1.8BIT  Rollout 
Is  Rx  for  Kaiser 

HMO  halts  internal  medical  records  project 
with  IBM,  switches  to  commercial  software 
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BY  BOB  BREWIM 

Kaiser  Permanente  Health 
Plan  Inc.  last  week  announced 
a  $1.8  billion  project  to  deploy 
an  automated  medical  records 
system  for  its  8.4  million 
members,  its  second  attempt 
to  use  technology  to  eliminate 
paper-based  charts  and  files. 

Analysts  said  the  new  sys¬ 
tem.  which  is  intended  to  be 
used  by  Kaiser’s  11,000  physi¬ 
cians  and  their  patients,  would 
be  the  largest  health  care  IT 
system  ever  developed  outside 
the  federal  government  in 
terms  of  cost,  scale  and  scope. 


Oakland,  Calif. -based  Kais¬ 
er.  the  largest  nonprofit  health 
maintenance  organization  in 
the  U.S.,  plans  to  use  software 
developed  by  Epic  Systems 
Corp.  in  Madison,  Wis.,  to 
store  medical  records  elec¬ 
tronically.  Epic's  software  pro¬ 
vides  a  repository  that  inte¬ 
grates  all  types  of  data,  includ¬ 
ing  patient  charts,  physician 
order  entry  forms,  clinical 
notes,  nursing  documentation 
and  pharmacy  information. 

Kaiser  had  previously 
worked  with  IBM  to  develop 

Kaiser,  page  57 


IN  THEIR  QUEST  to  come 
up  with  even  more  ways 
to  wring  out  savings, 
ITIeaders are  exploring 
everytt^  from  strildng 
barter  agreentents  with 
vendors  to  reseHing 
services  and  joining 
pttfchasing  consortia. 

One  example:  Wymttiam 
International  CTO  Mark 
Hedley  (left)  b  considering 
swapping  botri  rooms 
in  return  for  computer 
equipment  from  hardware 
vendors.  SEE  PAGE  41 
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IT  Goes  on  a  Mission 


GP^GiS  Effort 
Heips  Pinpoint 
Shuttle  Debris 


Within  hours  of  the  space  shut¬ 
tle  Columbia’s  disintegration 
over  East  Texas,  ^ographic  in- 
fonnation  system  departments 
at  Stephen  F.  Austin  State  Uni¬ 
versity  in  Nacogdoches.  Texas, 
marshaled  their  researchers  and 
students  to  help  pinpoint  the  lo¬ 
cation  of  shuttle  debris.  Their 
ongoing  work  is  expected  to 
help  investigators  determine 
what  went  wrong. 

The  data  collection  effort  is 
aiding  the  search  by  defming  the 
path  of  the  debris  and  narrowing 
the  area  to  seartdi.  according  to 
Darrel  McDtmald,  director  of 
tbe  university’s  Humanities  Un¬ 
dergraduate  Environmental  Sici- 
Debris,page6 


IT  Cutbacks  at 
NASA  Raised 
Safety  Concerns 

■VOAMVERTOM 

NASA  has  a  history  of  IT  work¬ 
force  management  and  funding 
problems  that  may  have  con¬ 
tributed  to  safety  oversights,  ac¬ 
cording  to  critics  and  mdepen- 
dent  go%«nunent  audits. 

Of  particular  interest  is  a  Sep¬ 
tember  2001  report  by  the  Gen¬ 
eral  Accounting  Offke.  the  in¬ 
vestigative  arm  of  Congress,  that 
warned  of  potential  safety  prob¬ 
lems  stemming  from  engineer¬ 
ing  and  IT  staffing  cutbacks  that 
date  back  several  years. 

The  exbting  workforce  was 
stretched  thin  to  the  p<^ 
where  many  areas  critical  to 
shuttle  safety,  such  as  mechani¬ 
cal  engineering,  computer  sys¬ 
tems  and  software  assurance  en- 
Cutbodcs.  pqge  7 
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ca  smart  Program  Guideline: 


The  ca  smart  logo  is  only  to  be  used  by  CA 
partners  for  innovative  eBusiness  products 
or  solutions  on  which  CA  technology  resides, 
is  a  component  of,  or  is  otherwise  integrated. 
Which  would  not  include  sporting  goods. 

For  more  information,  visit  ca.com/casmart. 
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A  CIO's  First  Year  on  the  Job 

In  thf  Management  section:  Sony  Elec¬ 
tronics’  fim  Milde  talks  about  cutting  costs 
and  taking  the  mystery  out  of  IT-  Page  46 
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6'7Special  Report:  NASA  uses  IT 
to  determine  the  causes  of  the 
Columbia  disaster,  while 
reaching  out  to  the  private 
sector  to  overcome  its  history 
of  technical  problems. 

B  Nortel  rolls  out  five  new  and 
upgraded  switches,  a  move 
that  could  lead  to  a  market 
battle  with  Cisco. 

10  Sun  releases  a  slew  of  prod¬ 
ucts  aimed  at  the  low-end 
server  market. 

12  J2EE  Version  1.4  is  delayed, 
so  Sun  can  add  support  for 
key  Web  services  standards. 

12  MySAP.com  expires  as  a 
brand  name,  but  some  users 
aren't  mourning  its  de[>arture. 

14  IBM  has  begun  beta-testing 
data  repository  integration 
tools. 

14  Visual  Studio  .Net  gets  its 
first  birthday  party  from  Mi¬ 
crosoft.  as  Borland  and  other 
vendors  provide  gifts  in  the 
way  of  support. 

16  EMC's  new  high-end  Sym- 
metrix  disk  array  line  faces 
storage  user  skepticism. 

19  Sybase's  mobile  software 

unit.  lAnywfaere  Solutions,  an¬ 
nounces  a  security  product 
that  can  zap  data  from  stolen 
portable  devices. 

57  IT  portfolio  management  pro¬ 
vides  a  gauge  for  hi^-tech  in¬ 
vestments  and  is  increasingly 
accepted,  but  faces  hurdles  in 
adoption. 
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25  Balancing  the  IT  Portfolio,  if 

chosen  carefully,  portfolio 
management  tools  can  help  IT 
managers  analyze  investment 
opportunities. 

28  Q&A:  IT  for  the  Autobahn. 
Claus  Hohmann,  CTO  of 
Volkswagen's  automotive 
theme  park.  Autostadt.  talks 
about  the  IT  infrastructure 
needed  to  keep  it  running. 

33  Future  Watch:  Intel  Looks  to 
Software.  Senior  researchers 
at  Intel  look  beyond  hardware 
to  parallel-processing  soft¬ 
ware  for  computing  power. 

34  Security  Manager's  Journal: 
FTP  Server  Offers  Key  to  the 
Store.  When  sloppy  practices 
expose  user  data.  Mathias 
Thurman  tightens  enforce¬ 
ment  of  security  guidelines. 
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QuickStudy.  Data  Scrubbing 

In  the  Technology  section:  Data  scrubbing  is  the  process 
of  fixing  or  eliminating  individual  data  that's  incorrect, 
incomplete,  inconsistent  or  redundant  before  it  goes  to 
a  data  warehouse  or  another  application.  Page  32 


OPINIONS 


41  Squeeze  Play.  CIOs  scratch 
for  more  ways  to  hold  down 
IT  spending. 

44  Blind  Faith.  Why  is  it  so  hard 
to  puli  the  plug  on  a  doomed 
project?  In  this  month’s  Har¬ 
vard  Business  Review,  an  ex¬ 
pert  oBfers  tips  on  how  to 
avoid  this  irrational  optimism. 

47  QuickScan:  Training.  Here’s  a 
look  at  the  hottest  IT  certifi¬ 
cations  for  this  year. 

48  Newsmaker.  John  McKinley. 

Merrill  Lynch’s  CTO  talks 
about  his  four-plus  years  at 
the  brokerage  as  he  prepares 
to  move  on  later  this  month. 


8  On  the  Mark;  Mark  Hail 

leams  of  a  spat  between  Tera- 
daia  and  Oracle,  finds  clues 
about  the  death  of  tape  back¬ 
up  systems  and  worries  that 
Steve  Ballmer  and  LaiT>'  Elli¬ 
son  may  become  immortal. 

22  Patricia  Keefe  blasts  vendors, 
users  and  government  for  the 
never-ending  IT  security 
breakdowns  and  offers  advice 
on  how  to  improve  things. 

22  Pimm  Fox  is  underwhelmed 
by  Microsoft’s  purchase  of 
PlaceWare,  especially  for  users 
who  want  an  enterprisewide 
collaboration  s>'stem. 

23  David  Foote  reveals  where  job 
growth  for  IT  pros  will  be  in 
the  near  future. 

38  Nicholas  Petreley  fearlessly 
predicts  the  revival  of  Java 
and  the  network  computer, 
among  other  daring  prognos¬ 
tications. 

48  Bari  Perkins  offers  CIOs  a 
checklist  to  determine  which 
suppliers  they  should  retain. 

58  Frankly  Speaking:  Frank 
Hayes  laments  bow  hard  it  is 
to  do  IT  projects  r^t.  But  he 
has  advice  on  how  to  mitigate 
the  seemingly  intractable 
problem. 
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Get  More  Fran  Vbur  Assets 

0PERATIN6  SYSTEMS:  Avanade’s  technol¬ 
ogy  infrastructure  practice  director  Christo¬ 
ff  Burry  oflers  tq»  oo  wringing  more 
efficiency  from  your  IT  infrastructure. 
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Debris 


ences  GIS  program. 

That  program,  in  collabora¬ 
tion  with  the  university’s  For¬ 
est  Resources  Institute,  de¬ 
ployed  seven  field  teams  on 
Feb.  I,  the  day  of  the  disaster, 
to  collect  precise  location  in¬ 
formation  of  shuttle  debris  by 
means  of  Global  Positioning 
System  (GPS)  receivers.  By 
midweek,  there  were  60  to  70 
teams  with  as  many  as  200 
people  collecting  debris  data. 

Fine-Tiining  Raw  Data 

The  field  crews  arc  using  GPS 
receivers  from  TVimble  Navi¬ 
gation  Ltd.  in  Sunnyvale,  Calif 
‘The  location  information  is 
stored  in  a  “datalogger."  a 
memory  unit  onboard  the  re¬ 
ceiver,  and  is  subsequently 
run  through  Trimble  post¬ 
processing  software  to  en¬ 
hance  its  accuracy. 

The  postprocessing  soft¬ 
ware  correlates  the  field  mea- 
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surements  with  data  obtained 
over  a  Web  link  from  a  pre¬ 
cisely  surveyed  GPS  reference 
base  3B  miles  north  of  Nacog¬ 
doches.  Although  raw  data  re¬ 
ceived  from  the  24-satellite 
GPS  array  provides  location 
accuracy  to  within  100  feet, 
postprocessing  improves  that 


accuracy  to  about  3  feet,  ac¬ 
cording  to  McDonald. 

The  finely  tuned  dau  is  fur¬ 
ther  processed  by  Arclnfo  GIS 
software  from  Environmental 
Systems  Research  Institute 
Inc.  (ESRl)  in  Redlands.  (2alif. 
The  ESRI  software  plots  the 
data  points  on  a  digital  map 


overlaid  with  information 
gleaned  feom  existing  databas¬ 
es  about  road  locations  and 
topographic  features  and  en¬ 
hanced  by  satellite  photos. 

As  the  university’s  GIS  labs 
collect  raw  debris-location 
data,  federal  agencies  are  tap¬ 
ping  into  existing  GIS  dau- 
bases  in  East  Texas,  said  Van 
Bush.  911  direaor  for  the  Deep 
East  Texas  Council  of  Govern¬ 
ments.  Bush  said  federal  agen¬ 
cies  at  a  central  command 
post  in  Luflun,  Texas,  have  re¬ 
quested  copies  of  all  GIS  files 
used  by  the  seven  counties  in 
East  Texas.  He  said  the  GIS 
files,  totaling  approximately 
TOMB  of  data,  ^ow  topogra¬ 
phy.  roads  and  structures  in  a 
9.906-sq.-mL  area. 

Gary  leflress,  coordinator  of 
geographic  information  sci¬ 
ence  at  Texas  A&M  Universi¬ 
ty-Corpus  Christi  said  the 
shuttle  investigators  will  likely 
use  the  location  data  to  identi¬ 
fy  which  pans  of  the  shuttle 
disintegrated  first  in  order  to 
reconstruct  tbe  disaster.  I 


New  P^-Marking  Technology 
Would  Have  Helped  Investigators 


■T  JAIKUMAR  V1UAVAM 

A  highly  durable  product- 
marking  system  approved 
for  use  by  NASA  in  2001  and 
curreniiy  being  tested  on  the 
Imemationat  Space  Station 
would  have  helped  investiga¬ 
tors  identUy  the  debris  from 
Coliimhia.  bad  the  technology 
been  available  when  tbe  or- 
biter  was  being  built. 

Tbe  2-D  marking  system, 
called  Data  Matrix,  is  based  on 
compressed  symbology  tech¬ 
nology  patented  by  a  Canton. 
Mass. -based  company  called 
RVSl  and  released  for  use  in 
the  public  domain. 

The  Data  Matrix  symbol  is  a 
checkerboardlike  mark  that’s 
etched  permanently  onto  a 
surfoce.  The  mark  is  scanned 
using  a  charge-coupled  device 
or  optical  reader.  It’s  similar  to 
a  bar  code,  but  it’s  capable  of 
storing  up  to  100  times  more 
infonnatioo  than  a  bar  code. 
RVSl  ofTiciab  said.  Data  Ma¬ 


trix  symbols  were  designed  to 
withstand  extremely  harsh 
conditions,  said  Do^d  Rox- 
by.  director  of  The  Symbology 
Research  Center,  a  Huntsville, 
Ala.-based  unit  of  RVSL 

“Tests  at  Marshall  [Space 
Flight  Outer]  verified  the 
marit  would  survive  the  18.000- 
miJe-per-hour  slipstreams  and 
temperatures  in  excess  of 
2300  d^rees"  associated  with 
orbiler  re-entry,  he  said.  The 
symbols  could  sustain  up  to 
30%  damage  and  still  provide 
100%  of  the  [encoded]  data.” 

Jerry  Berg,  a  spokesman  for 
the  Marshall  Space  Flight  Cen¬ 
ter  in  Huntsville,  said  the  or¬ 
ganization  was  unable  to  com¬ 
ment  because  tbe  official  in 
charge  of  the  Data  Matrix  ef¬ 
fort  was  not  available. 

But  since  the  2-D  etches  are 
typically  made  during  the 
manufocturing  process.  Roxby 
said,  none  of  Columbia's  parts 
—  except  for  three  tiles  that 


were  recently  replaced  —  car¬ 
ried  the  Data  Matrix  symbol. 

The  symbols  would  have 
made  it  easier  for  investigators 
to  identify  parts  of  the  Colum¬ 
bia  orbiter.  he  added 

Data  Matrix  symbols  of  var¬ 
ious  sizes  and  on  different  ma¬ 
terials  are  being  tested  on  the 
International  Space  Station  to 
see  how  well  they  bold  up  in 
space.  Roxby  said.  *The  last 
photos  we  saw  show  these 
marks  to  be  still  in 
very  good  condi- 
lioa  and  readable," 
he  said 

Tbe  goal  behind 
marking  parts  in 
this  manner  was  to 
improve  NASA’s 
ability  to  check  the 
manufacturing  his¬ 
tory  and  opera¬ 
tional  data  of  parts 
use  in  a  shuttle, 
said  Erin  Binder,  a 
director  at  Golden 


Valley.  Minn--based  Veritcc 
Inc.,  another  company  that  has 
also  worked  with  NASA  to  de¬ 
velop  a  compressed  symbolo¬ 
gy  standard  for  maricing  shut¬ 
tle  parts. 

Unlike  bar  codes,  which 
don't  work  on  certain  surfaces 
and  can  peel  off  compressed 
symbols  like  Data  Matrix  can 
be  applied  permanently  to  a 
variety  of  surfaces,  Roxby  said. 

To  mark  the  three  tiles  on 
Columbio.  small  recesses  were 
etched  out  of  each  tile  and 
filled  with  a  ceramic  paint  that 
would  melt  permanently  into 
the  tile  from  the  heat  on  re¬ 
entry.  Roxby  said.  I 


Storage  Key 
To  NASA 
Investigation 

BV  LUCAS  MeABlAH 

NASA  officials  said  Iasi  week  Dial 
voice  messages,  wdeo  and  photos 
being  cdected  from  the  public  are 
creating  a  data  picture  that  will  play  a 
key  role  VI  detennining  the  cause  (rf 
the  Calvnbo  disaster.  The  trick  will 
be  managing  that  data. 

Agency  officials  sad  they're  con  ■ 
sidering  using  tools  develop  in- 
house,  including  a  Web-based  appli¬ 
cation  called  the  InvestigationOrga- 
nizer  that  was  rolled  out  in  Novem¬ 
ber.  to  aggregate  the  data.  The  appli¬ 
cation  provides  data  storage,  man¬ 
agement  and  analysis  capabilities  to 
accident  investigation  teams. 

Tina  Panotin.  chief  engineer  at 
NASA's  Ames  Research  Center  at 
Moffett  Field  in  California,  said  in  an 
e-mail  interview  last  week  that 
InvestigatiCMiOrganizer  *is  currently 
being  assessed  against  the  investi¬ 
gation  teams’  requirements,  as  are 
other  options.* 

NASA  is  asking  members  of  the 
public  to  send  videos  and  photos 
of  the  shuttle  breakup  to  an  FTP 
site  at  www.nBaB.gov/cokBnbia/ 
(X)L.iipload.hlinl. 

The  pubhc  has  been  tremendous¬ 
ly  respmstve.  They've  been  respond¬ 
ing  to  the  Web  sites:  they’ve  been  re¬ 
sponding  to  the  hot  lines.*  Robert 
Mveison.  chief  of  news  and  informa¬ 
tion  at  NASA  headquarters  m  Wash¬ 
ington.  sad  dumg  a  press  briefing 
last  week. 

In  the  past.  NASA  sad  its  acc^ 
dent  investigalion  teams  had  no 
standard  methorls  or  tools  for  Infor¬ 
mation  storage,  management,  dis- 
semindion  or  analysis. 

NASA's  {nveshgalorOrgaruer 
uses  a  database,  a  document- 
sharing  system  and  a  VWb-based 
data  navigabon  system  that  alows 
scientists  lotJrowsethroughlnfDr- 
matkm  and  organize  H  and  file  M  so  it 
can  be  accessed  orine  in  a  common 
Ne-sharing  system.  The  software  is 
password-protected  and  employs 
encryption  tedinologry  to  ensue  se¬ 
curity.  NASA  offioiais  sad. 

Whether  InvestigationOrgani^r  is 
used  or  noL  Panotvi  sad.  *8l  data  is 
being  treatml  with  the  appropriate 
security  and  wtth  the  consideration 
that  the  data  must  be  made  avaibble 
to  the  InvestioatiDn  teams.* » 
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NASA  Reinvents  Troubled  IT 
With  Help  of  Private  Sector 


Space  agenc>'  reaches  out  to  improve 
mission  sofhvare,  business  systems. 


The  CoUiinbia  disas¬ 
ter  has  confronted 
NASA  at  a  time 
when  the  agency  is 
working  to  move  past  a  trou¬ 
bled  n  history  that  includes 
canceling  maior  business- 
system  projects,  being  victim¬ 
ized  by  security  breaches  and 
dealing  with  software  glitches 
that  have  doomed  unmanned 
probes. 

Two  attempts  by  NASA  to 
replace  its  disparate,  propri¬ 
etary  business  systems,  which 
are  used  to  manage  its  $15  bil¬ 
lion  budget,  ended  in  frilure. 
But  just  as  disturbing  for  the 
agency  was  the  software  bug 
blamed  for  the  loss  of  the 
Mars  Polar  Lander  in  1999. 
“Software  testing  was  inade¬ 
quate."  a  NASA  study  said. 

To  address  these  problems, 
NASA  is  mcreastngly  reaching 
out  to  the  private  sector  for 
help  to  improve  mission  soft¬ 
ware  and  is  adopting  private- 
sector  business  practices  and 
systems.  Together,  these  ef¬ 
forts  are  changing  the  way 
NASA  manages  IT. 

The  space  agency’s  largest 
IT  project  is  its  $644  million 
effort  to  create  an  enterprise 
backbone  for  finance,  human 
resources  and  other  business 
functions  to  replace  its  dis¬ 
parate  systems. 

NASA  is  using  an  enterprise 
resource  planning  system 
from  SAP  AG  to  build  its 
backbone,  adding  business 
processes  as  modules,  said 
Mike  Mann,  head  of  NASA's 
integrated  Financial  Manage¬ 
ment  Prt^ram.  That’s  in  con¬ 
trast  to  the  monolithic  $186 
million  management  system 
from  fO^G  Peat  Marwkk 
LLP  (now  BearingPoint  Inc) 
that  NASA  scrapped  in  1999. 
Moreover,  the  NASA  in¬ 


spector  general  early  last  year 
criticized  the  agenc>'  for  poor 
IT  security  procedures,  and 
NASA  systems  have  been  re- 
peatedb'  hacked.  Last  August, 
for  example,  a  hacker  man¬ 
aged  to  obtain  de¬ 
sign  documents 
pertaining  to  the 
next  generation  of 
reusable  space  ve¬ 
hicles  [QuickLmk 

320421.  - 

But  NASA  Acting  CIO  Paul 
A.  Strassmann,  who  to<^  the 
post  last  year,  said  the  agency 
has  made  “remaritable  prog¬ 
ress."  For  instance  NASA's 
root  server,  one  of  the  13 
servers  worldwide  that  man¬ 
age  the  Domain  Name  System. 


was  one  of  only  five  to  survive 
October’s  massive  denial-of- 
servke  attack.  The  recent 
Slammer  attack  affected  fewer 
than  40  of  NASA's  thousands 
of  servers,  and  they  were  im* 
mediatefy  identified  and  iso¬ 
lated.  Strassmann  said. 

Althou^  NASA  is  just 
catching  up  to  private  compa¬ 
nies  in  modernizing 
business  systems, 
it's  playii^  a  lead 
role  in  the  develop¬ 
ment  of  highly  de¬ 
pendable  systems  — 
software  that  toler¬ 
ates  hardware  faults  and  secu¬ 
rity  problems. 

NASA  has  a  history  of  lead¬ 
ing  in  this  area,  but  afrer  the 
1999  Mars  Polar  Lander  fail¬ 
ure.  the  agettcy  knew  it  could 
benefit  from  private  help,  said 
Henry  McDonald,  who  at  the 
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time  beaded  the  NASA  Ames 
Research  Center  at  Moffett 
Field  in  Califomia. 

McDonald  last  year  spear¬ 
headed  a  $23  million  depend¬ 
able  computing  program  in 
coU^wration  with  Carnegie 


Mellon  University.  Pittsburgh- 
based  Carnegie  Mellon,  a 
leader  in  the  effort  to  improve 
software  dependability,  last 
month  established  a  West 
Coast  campus  at  Moffett  Field. 

The  dependable  computing 
initiative  may  ultimately  help 
banks,  hospitals  and  critical 
industries.  “There  are  many, 
many  ap>pUcations  that  would 
benefit,  and  NASA  is  among 
those."  said  Ian  Aikins,  chief 
technologist  for  information 
sciences  at  Ames.  I 


Continued  from  page  I 

Cutbacks 

gineering.  were  not  sufficient¬ 
ly  staffed  by  qualified  vrork- 
ers."  according  to  the  GAO 
report,  titled  “Space  Shuttle 
Safety." 

One  area  of  particular  con¬ 
cern  continues  to  be  NASA's 
verification  and  validation 
(VBtV)  process. 

Prior  to  the  Columbia  disas¬ 
ter.  the  GAO  and  the  National 
Research  Council  criticized 
NASA  for  not  using  indepen¬ 
dent  third  parties  to  verify  and 
validate  sofrwve  components 
critical  to  the  safe  operation  of 
the  space  shuttle.  As  a  result. 
NASA  immediately  stepped 
up  hs  software  V&V  program, 
said  WU  Williams,  a  spokes¬ 
man  for  San  Diego-ba^  Ti¬ 
tan  Systems  Corp.  Titan,  since 
2001,  has  been  responsible  for 
testing  commercial  software 
for  both  the  shuttle  and 
ground  systems. 

But  the  comprehensiveness 
ofTltan's  woik  is  unclear. 
Williams  said  Titan  conducts 
V&V  on  contractor-produced 
software  on  "selected  systems 
determined  by  NASA." 

Donna  Shiiiey.  former  man¬ 
ager  of  NASAs  Mars  Explo- 
ratioo  Program  and  frte  team 
that  built  the  Sojourner  micro¬ 
rover.  said  third-party  soft¬ 
ware  validation  was  a  hotly 
debated  issue  at  the  agency, 
but  the  decision  may  have 
come  down  to  cost 

"For  the  reviewers  to  know 
enough  about  the  systems 
they  are  reviewing  to  be  use- 
foL  there  is  a  considerable 
cost  of  education."  said 


Shirley.  The  shuttle  software 
is  so  specialized  that  you 
would  have  to  completely  du¬ 
plicate  the  rituttle  computer 
systems  for  VBtV  to  woHl 
That  would  be  incredibly  ex- 
penstve." 

NASA  officials  were  unable 
to  comroem  on  the  issue  by 
press  time. 

Lesson  Unieamed 

Diane  Vaughan,  a  sociology 
professor  at  Boston  College 
who  has  wrinen  extensively 
about  NASA  technology  and 
the  role  it  played  in  the  1986 
space  shuttle  Qiailertger  disas¬ 
ter.  said  that  tragedy  failed  to 
compel  NASA  to  bolster  its 
workforce. 

“At  the  time  of  the  Oiai- 
lertger  disaster.  NASA  was 
plagued  by  an  inadequate  bud¬ 
get  and  woric  cutbacks."  said 
Vaughan.  "When  {previous 
NASA  administjator]  Dan 
Goldin  came  tn  after  the  Chal¬ 
lenger  disaster,  his  mantra  was 
'faster,  cheapen  better.'  And 
cheaper  was  very  important" 

Mike  Mann,  had  of  NASA’s 
Integrated  Fmaodal  Manage¬ 
ment  PrograLm.  an  ageocywtde 
IT  re-engineeiing  project  said 
various  divisions  have  been 
downsized  "signiftcantly"  over 
the  past  five  years  —  any¬ 
where  from  25%  to  40%. 

“New  loots  were  supposed 
to  be  one  of  the  offsets  to  that 
reductioa.*  Mann  said,  refer¬ 
ring  to  enterprise  systems.  "We 
to(A  the  reductkMtt  because 
we  were  mandated  to.  and  we 
didn't  provide  them  with  the 
new  tools."  be  added  I 

Reporter  Pofridc  Thibodeau 
contributed  to  this  story. 
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ences  GIS  prognun. 

That  program,  in  collabora¬ 
tion  with  the  university's  For¬ 
est  Resources  Institute,  de¬ 
ployed  seven  field  teams  on 
Feb.  1,  the  day  of  the  disaster, 
to  collect  precise  location  in¬ 
formation  of  shuttle  debris  by 
means  of  Global  rositioning 
System  (GPS)  receivers.  By 
midweek,  there  were  60  to  70 
teams  with  as  many  as  200 
people  collecting  debris  data. 

Rne-Tuning  Raw  Data 

The  field  crews  arc  using  GPS 
receivers  from  Trimble  Navi¬ 
gation  Ltd.  in  Sunnyvale,  Calif. 
The  location  information  is 
stored  in  a  ‘'datalc^er.*'  a 
memor>'  unit  onboard  the  re¬ 
ceiver.  and  is  subsequently 
run  through  Trimble  post¬ 
processing  software  to  en¬ 
hance  its  accuracy. 

The  postprocessing  soft¬ 
ware  correlates  the  field  mea- 
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surements  with  data  obtained 
over  a  Web  link  from  a  pre¬ 
cisely  surveyed  GPS  reference 
base  38  miles  north  of  Nacog¬ 
doches.  Although  raw  data  re¬ 
ceived  from  the  24-satellite 
(}I*S  array  provides  location 
accuracy  to  within  100  feet, 
postprocessing  improves  that 


accuracy  to  about  3  feet,  ac- 
cordmg  to  McDonald. 

The  finely  tuned  data  Is  fur¬ 
ther  processed  by  Arclnfo  GIS 
.software  from  Enviroiunenial 
Syslenw  Research  Institute 
Inc.  (ESRI)  in  Redlands.  Calif. 
The  ESRI  software  plots  the 
data  points  on  a  digital  map 


overlaid  with  information 
gleaned  from  existing  databas¬ 
es  about  road  locations  and 
tofiographic  features  and  en¬ 
hanced  by  satellite  photos. 

As  the  university's  GIS  labs 
collect  raw  debris-location 
data,  federal  agencies  are  tap¬ 
ping  into  existing  GIS  data¬ 
bases  in  East  Texas,  said  Van 
Bush.  911  director  for  the  Deep 
East  Texas  Council  of  Govern¬ 
ments.  Bush  said  federal  agen¬ 
cies  at  a  central  command 
post  in  Lufkin,  Texas,  have  re- 
quested-copics  of  all  GIS  Hies 
used  by  the  seven  counties  in 
East  Texas.  He  said  the  GIS 
files,  totaling  approximately 
TOMB  of  data,  show  topogra¬ 
phy.  roads  and  siructua^  in  a 
9.906-sq.-mi.  area. 

Gary  JefFress,  coordinator  of 
geographic  information  sci¬ 
ence  at  Texas  A&M  Universi¬ 
ty-Corpus  Christ!,  said  the 
shuttle  investigators  will  likely 
use  the  location  data  to  identi¬ 
fy  which  parts  of  the  shuttle 
disintegrated  first  in  order  to 
reconstruct  the  disaster.  I 


New  Parts-Marking  Technology 
Would  Have  Helped  Investigators 


•T  JAmUMAR  VUAVAN 

A  highly  durable  product¬ 
marking  system  approved 
for  use  by  NASA  in  2001  and 
curremly  being  tested  on  the 
International  Space  Station 
would  have  helped  investiga¬ 
tors  identify  the  debris  from 
Co/umbiu.  had  the  technology 
been  available  when  the  or- 
biter  was  being  built 

The  2-D  marking  system, 
called  Data  Matrix,  is  based  on 
compressed  symbology  tech¬ 
nology  patcnied  by  a  Canton. 
Mass.-based  company  called 
RVSI  and  released  for  use  in 
the  public  domain. 

The  Data  Matrix  symbol  is  a 
checkerboardlike  mark  that's 
etched  permanently  onto  a 
surface.  The  mark  b  scanned 
using  a  charge-coupled  device 
or  optical  reader.  It's  similar  in 
a  bar  code,  but  it's  capable  of 
storing  up  to  100  times  more 
toformation  than  a  bar  code, 
RVSI  officiab  said.  Data  Ma¬ 


trix  symbols  were  designed  to 
withstand  extremely  harsh 
conditions,  said  Donald  Rox- 
by.  director  of  The  Symbology 
Research  Ontcr,  a  Huntsville. 
Ala.-hased  unit  of  RVSL 

Tests  at  Marshall  (Space 
Flight  Onter)  verified  the 
mark  would  survive  the  18,000- 
mile-per-bour  slipstreams  and 
temperatures  in  excess  of 
2J00  degrees"  associated  with 
orbiter  re-entry,  he  said.  “The 
symbols  could  sustain  up  to 
30%  damage  and  still  provide 
100%  of  the  (encoded  ]  data." 

Jerry  Berg,  a  spokesman  for 
the  Marshall  Space  Flight  On¬ 
ter  in  Huntsville,  said  the  or¬ 
ganization  was  unable  to  com¬ 
ment  because  the  official  in 
charge  of  the  Data  Matrix  ef¬ 
fort  was  not  available. 

But  since  the  2-D  etches  are 
typically  made  during  the 
manufacturing  process.  Roxby 
said,  none  of  Columbia's  parts 
—  except  for  three  tiles  that 


were  recently  replaced  —  car¬ 
ried  the  Data  Matrix  symbol. 

The  symbob  would  have 
made  it  easier  for  investigators 
to  identify  parts  of  the  Colum¬ 
bia  orbiter.  he  added. 

Data  Matrix  symbols  of  var¬ 
ious  sizes  and  on  different  ma¬ 
terials  are  being  tested  on  the 
Internationa)  Space  Station  to 
see  how  well  they  hold  up  in 
space.  Roxby  said.  The  last 
photos  we  saw  show  these 
marks  to  be  still  in 
very  good  condi¬ 
tion  and  readable," 
he  said. 

The  goal  behind 
maricing  parts  in 
thb  manner  was  to 
improve  NASA's 
ability  to  check  the 
manufacturing  his¬ 
tory  and  opera¬ 
tional  data  of  parts 
use  in  a  shuttli^ 
said  Erin  Binder,  a 
director  at  Golden 


Valley.  Minn.-based  Veritec 
Inc.,  another  company  that  has 
also  worked  with  NASA  to  de¬ 
velop  a  compressed  symbolo¬ 
gy  standard  for  marking  shut¬ 
tle  pans. 

Unlike  bar  codes,  which 
don't  woric  on  certain  surfaces 
and  can  peel  off.  compressed 
symbols  like  Data  Matrix  can 
be  applied  permanently  to  a 
variety  of  surfaces,  Roxby  said. 

To  mark  the  three  tiles  on 
Columbia,  small  recesses  were 
etched  out  of  each  tile  and 
filled  with  a  ceramic  paint  that 
would  melt  permanently  into 
the  tile  from  the  heat  on  re¬ 
entry.  Roxby  said.  I 


Storage  Key 
To  NASA 
Investigation 

BV  LUCAS  MEARIAN 

NASA  officials  said  last  week  that 
voice  messages,  video  and  photos 
being  colleded  from  the  public  are 
creating  a  data  picture  that  will  play  a 
key  role  in  determining  the  cause  of 
the  Co/umbo  disaster.  The  trick  will 
be  managing  that  data. 

Agency  officials  said  they're  con¬ 
sidering  using  tools  developed  lr^ 
house,  including  a  Web-ba^  appli¬ 
cation  called  the  InvestigalionOrga- 
nizer  that  was  rolled  out  in  Novem¬ 
ber.  to  aggregate  the  data  The  appli¬ 
cation  provid^  data  storage,  man¬ 
agement  and  analysis  capabilities  to 
accident  investigation  teams. 

Tina  f^tin.  chief  engineer  at 
NASA's  Ames  Research  (^er  at 
Moffett  Retd  in  CaTifomia.  said  in  an 
e-mail  interview  last  week  dial 
InvestigationOroanizer  'Is  currentty 
be«>g  assessed  against  the  investi¬ 
gation  teams'  requirements,  as  are 
other  options.* 

NASA  is  asking  members  of  the 
public  to  send  vid^  and  photos 
of  the  shuttle  breakup  to  an  FTP 
site  at  www.nasa.oov/columbi4/ 
COl_upload.htnil 
The  public  has  been  tremendous¬ 
ly  responsive.  They've  been  respond¬ 
ing  to  the  Web  sites:  they've  been  re¬ 
sponding  to  the  hot  lines.'  Robert 
Mirelson.  chief  of  news  and  informa¬ 
tion  at  NASA  hoadquarters  in  Wash¬ 
ington.  said  during  a  press  briefing 
last  week. 

In  the  past.  NASA  said  its  acci¬ 
dent  investigation  teams  had  no 
standard  methods  or  tools  for  infor- 
mabon  storage,  management,  dts- 
seminatlon  or  analy^. 

NASA's  ImestigatorOrganizer 
uses  a  database,  a  rtocumenl- 
sharing  system  and  a  Web-based 
data  navigation  system  that  aRows 
scientists  to  browse  through  infor¬ 
mation  and  organize  it  and  file  II  so  i( 
can  be  accessed  online  in  a  common 
He-sharing  system.  The  softw^  is 
password-protected  and  emidoys 
encryption  technology  to  ensure  se¬ 
curity.  NASA  officials  said. 

Wftiether  [nvestigatjonOrgantzer  is 
used  or  not.  Panotin  said,  'all  data  is 
befng  treated  with  die  appropriate 
secunly  and  with  thecoreideration 
that  the  data  must  be  made  available 
to  the  nvesbgalion  teams.*  I 


NASA  Reinvents  Troubled  IT 
With  Help  of  Private  Sector 


Space  agencv'  reaches  out  to  improve 
mission  software,  business  systems. 


The  Co/umhi'a  disas¬ 
ter  has  confronted 
NASA  at  a  time 
when  the  agency  is 
working  to  move  past  a  trou¬ 
bled  IT  history  that  includes 
canceling  major  business- 
system  projects,  being  victim¬ 
ized  by  security  breaches  and 
dealing  with  software  glitches 
that  have  doomed  unmanned 
probes. 

Two  attempts  by  NASA  to 
replace  its  disparate,  propri¬ 
etary  business  systems,  which 
are  used  to  manage  its  S15  bil¬ 
lion  budget,  ended  in  ^ure. 

But  just  as  disturbing  for  the 
agency  was  the  software  bug 
blamed  for  the  loss  of  the 
Mars  Polar  Lander  in  1999. 
“Software  testing  was  inade¬ 
quate.”  a  NASA  study  said. 

To  address  these  problems, 
NASA  is  increasingly  reaching  | 
out  to  the  private  sector  for 
help  to  improve  mission  soft¬ 
ware  and  is  adopting  private- 
sector  business  practices  and 
systems.  Together,  these  ef¬ 
forts  are  changing  the  way 
NASA  manages  IT. 

The  space  agency’s  largest 
rr  project  is  its  S644  million 
effort  to  create  an  enterprise 
backbone  for  fmance,  human 
resources  and  other  business 
functions  to  replace  its  dis¬ 
parate  systems. 

NASA  is  using  an  enterprise  ' 
resource  planning  system 
from  SAP  AG  to  build  its 
backbone,  adding  business 
processes  as  modules,  said 
Mike  Mann,  head  of  NASA’s 
Integrated  Financial  Manage¬ 
ment  Pn^ram.  That’s  in  con¬ 
trast  to  the  monolithic  S186 
million  management  system 
from  KPMG  Peat  Marvrick 
LLP  (tK)w  BearingPoint  Inc.) 
that  NASA  scrapped  in  1999. 
Moreover,  the  NASA  in¬ 


spector  general  early  last  year 
!  criticized  the  agency  for  poor 
I  IT  security  procedures,  and 
I  NASA  systems  have  been  re- 
I  peatedly  hacked.  Last  August. 

for  example,  a  hacker  man- 
I  aged  to  obtain  de¬ 
sign  documents 
I  pertaining  to  the 
next  generation  of 
reusable  space  ve¬ 
hicles  [Quicklink 
1  320421. 

But  NASA  Acting  CIO  Paul 
A.  Strassmann.  who  took  the 
post  last  year,  said  the  agency 
has  made  “remarkable  prog¬ 
ress.”  For  instance,  NASA’s 
root  server,  one  of  the  13 
servers  worldwide  that  man¬ 
age  the  Domain  Name  System. 


was  one  of  only  five  to  survive 
October's  massive  denial-of- 
service  attack.  The  recent 
Slammer  anack  affected  fewer 
than  40  of  NASA’s  thousands 
of  servers,  and  they  were  im¬ 
mediately  identified  and  iso¬ 
lated.  Strassmaim  said. 

Altbou^di  NASA  is  just 
catching  up  to  private  compa¬ 
nies  in  modemizir^ 
business  systems, 
it’s  playing  a  lead 
role  In  the  develop¬ 
ment  of  highly  de¬ 
pendable  systems  — 
software  that  toler¬ 
ates  hardware  faults  and  secu¬ 
rity  problems. 

NASA  has  a  history  of  lead¬ 
ing  in  this  area,  but  ajfter  the 
1999  Mars  Polar  Lander  f^- 
ure,  the  agency  ki>ew’  it  could 
benefit  from  private  help,  said 
Henry  McDonald,  at  the 


AMessagefrom 
NASA’s  Acting  CIO 


/list  hoiffs  Che  Cdiin^ 
disastrr.  NASA  Aedng  aO 
PaidA.Straammn.afontm 
CoofNaterworid  cohimflta, 
comiytdMsmeaci^to 

Ccgpputerworid  editor 
dtiefMaryfnmJohnton: 

The  NASA  infonnitioo 
system*  CunUy  of  mon  than 
10,000  peofr  litonalt  and 
ck»etol5HoftlwtDCal 
wockfcsce  ate  nkouming 
for  the  k«t  of  seven  of  our 
bfsve  explorecs. 

Tb  be  a  systeos  profes- 
skxtflinNASAis 
more  than  foa  an 
uoaipeliop  —  it  i* 
a  vocation  with 
knowledge  that 
oorcoDpoten, 
oetwoffei  and  data 
are  eaaeiKiai  to 
pursue  sdenee 
and  exploneion  to 


improve  life  on  Earth,  to  ex- 
tend  Ufo  beyond  our  planet 
and  so  find  Ufe  beyond.  We 
are  dedicated  to  do  work 
that  only  NASA  can  da 
NASA  has  jttit  sobmitted 
to  the  president  a  fdan  in 
which  infonnatiao  cecb- 
Dolo^e*  are  hlghUghced  as 
enabUng  to  — ^ 

NASA  Bdasioaa  feasible. 
The  loss  of  seven  members 
of  our  femQy  wQl  only  re¬ 
inforce  our  commitaent  to 
deliver  cqab&ities  that  are 
unmatched  any¬ 
where  for  safety, 
reliability  and  se¬ 
curity  Those  win 
beourbestcottri- 
bockNis  in  memo¬ 
ries  of  Bide.  BOL 
JdkhaeL  Katpans. 
David.  Laurel  and 
Ilian.1 


time  beaded  the  NASA  Ames 
Research  Center  at  Moffett 
Field  in  California. 

McDonald  last  year  spear¬ 
headed  a  S23  million  depend¬ 
able  computmg  program  in 
collaboration  with  Carnegie 


Mellon  University.  Pittsburgh- 
based  Carnegie  Mellon,  a 
leader  in  the  effort  to  improve 
software  dcpiendability,  last 
month  established  a  West 
Coast  campus  at  Moffett  Field. 

The  dependable  computing 
initiative  may  ultimately  help 
banks,  hospitals  and  critical 
industries.  “There  are  many, 
many  applications  that  would 
benefit,  and  NASA  is  among 
those.”  said  )an  Aikins,  chief 
technologist  for  information 
sciences  at  Ames.  I 


Conrimied  from  page  I 

Cutbacks 


gineering.  were  not  sufficient¬ 
ly  staffed  by  qualified  work¬ 
ers.”  according  to  the  GAO 
report,  titled  “Space  Shuttle 
Safety." 

One  area  of  panicular  con¬ 
cern  continues  to  be  NASA's 
verificatioo  and  validation 
(V&V)  process. 

Prior  to  the  Co/umhia  disas¬ 
ter.  the  GAO  and  the  National 
Research  Council  criticized 
NASA  for  not  using  indepen¬ 
dent  third  parties  to  verify  and 
validate  software  components 
critical  to  the  safe  operation  of 
the  space  shuttle.  As  a  result. 
NASA  immediately  stepped 
up  its  software  VBtV  program, 
said  Wil  Williams,  a  spokes¬ 
man  for  San  Diego-based  Ti¬ 
tan  Systems  Corp.  Titan,  since 
2001,  has  been  responsible  for 
testing  commerci^  software 
for  both  the  shuttle  and 
ground  systems. 

But  the  comprebensiveness 
of  Titan’s  work  is  unclear. 
Williams  Titan  conducts 
V&V  on  contractor-produced 
software  on  “selected  systems 
determined  by  NASA.” 

Donna  Shirley,  former  man¬ 
ager  of  NASA’s  Mars  Explo¬ 
ration  Program  and  the  team 
that  built  the  Sojourner  micro- 
rover.  said  third-party  soft¬ 
ware  validation  was  a  hotly 
debated  issue  at  the  agency, 
but  the  decision  may  have 
come  down  to  cost 

“For  the  reviewers  to  know 
enough  about  the  systems 
they  are  reviewii^  to  be  use¬ 
ful.  there  is  a  considerable 
cost  of  educatioa,”  said 


Shirley.  “The  shuttle  software 
is  so  specialized  that  you 
would  have  to  completely  du¬ 
plicate  the  shuttle  computer 
systems  for  V&V  to  work. 

That  would  be  incredibly  ex¬ 
pensive." 

NASA  officials  were  unable 
to  comment  on  the  issue  by 
press  time. 

Lesson  Unleamsd 

Diane  Vaughan,  a  sociology 
professor  at  Boston  College 
who  has  written  extensively 
about  NASA  (echnolc^  and 
the  role  it  played  in  the  1986 
space  shuttle  Challenger  disas¬ 
ter,  said  that  tragedy  foiled  to 
compel  NASA  to  bolster  its 
woricforce. 

“At  the  time  of  the  Chal¬ 
lenger  disaster.  NASA  was 
plagued  by  an  inadequate  bud¬ 
get  and  work  cutbacks,”  said 
Vau^n.  “When  [previous 
NASA  administrator]  Dan 
Goldin  came  in  after  the  Chal¬ 
lenger  disaster,  his  mantra  was 
‘foster,  cheaper,  better.’  And 
cheaper  was  very  important.” 

Milw  Mann,  bead  of  NASAs 
Integrated  Financial  Manage¬ 
ment  Program,  an  ^ivcywide 
IT  re-engineering  project,  said 
various  divisioas  have  been 
downsized  “significantly”  over 
the  past  five  years  any¬ 
where  from  2^  to  40**. 

“New  tools  were  supposed 
to  be  one  of  the  offsets  to  chat 
reduction.”  Mann  said,  refer¬ 
ring  to  enterprise  systems.  “We 
look  the  reductioQS  because 
we  were  mandated  ta  and  we 
didn't  provide  them  with  the 
new  tools,”  he  added,  k 


Reporter  Patrick  Thibodeau 
contributed  to  this  story. 
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Microsaft  Releases 
Slammer  Tools 

MicnMoft  CoQ.  rude  MflaUe 
prwiltaM  w^kms  of  throe  soft* 
ware  toots  designed  to  help  IT 
managers  Rnd  systems  vufnera* 
bk  to  the  Slammer  worm,  which 
used  a  patched  security  hots  in 
Mcroeofi's  SQl  Server  2000 
database  to  cause  widespread 
disruptians  to  the  Intomet  last 
month.  Mtorasott  said  the  toots 
are  stM  under  devetopment  and 
are  being  provided  “as  is.* 


Bank  to  Cut  IT, 
Back-Office  Jobs 

Bank  of  America  Cerp.  said  H 
wit  cut  ^out  1.000  IT  and  back- 
office  operatioas  iobs  by  the  end 
of  March  as  pan  of  an  effort  to 
cut  costa.  Tito  Chariotta.  N.C.- 
based  bank  (hdn*l  braak  down 
the  pUnnod  cuts  but  said  IT 
won't  be  hit  as  hard  as  back-of¬ 
fice  functions  such  as  check 
processing.  Ms  combined  Tech- 
nolegy  and  Operations  division 
currently  has  22.000  workers. 

Insurer  Picks  Perot 
For  Outsourcing 

Pwot  Systems  Corp.  in  Plano, 
Teias.  said  if  s  negotialing  a 
10-yaar  daat  to  manage  FT  and 
back-office  buMwas  process 
operattens  at  Blua  Cross  A  Blue 
SMetd  of  Rhode  latand.  About 
600  of  the  Providence-based  to- 
surefs  1,740  workers  wM  be  of¬ 
fered  iobs  at  hroL  The  contract 
is  expected  to  be  worth  at  toast 
S450  milton.  Perot  sakt 


EDS  Says  Profit 
Sales  in  (M 

Plano  basid  Etoctronic  Data 
SystsmeCorp.rapartednetln- 
come  of  S360  mWon  for  the 
fourtti  quarter,  doom  T1%  from 
the  year-earker  total  of  6405 
mWon.  Rivenua  droppod  S%  to 
tt.5  UKon,  doem  from  SSJ  Mi¬ 
lan.  Tha  IT  aarvtoss  Arm  said  H 
eipectSMiothar  year-over  yaar 
revanua  dackna  this  quarter. 


MARK  MALI.  •  ON  THE  MARK 

Teradata  Steals  Oracle’s 
Data  Mart  Users . . . 


...  in  a  consolidation  program.  And  Oracle  Corp.  has  taken  a  bit  of  re¬ 
venge.  Teradata.  a  division  of  Dayton.  Ohio-based  NCR  Corp.,  this 
week  is  announcing  that  it  has  successfully  migrated  more  than  400 
data  marts  into  a  few  dozen  Teradata  data  warehouses.  And  “more  than 
75%  of  the  data  marts  are  Oracle, "  crows  Vickie  Farrell  vice  president  of 
Teradata  warehouse  marketing.  Her  company  has  put  Oracle  data 
marts  in  its  crosshairs,  developing  technology  training  programs  for 


Oracle  users  and  specific  data  migration 
tools  for  Oracle  Ui  and  wooing  Oracle 
users  at  the  annual  conference  run  by  the 
International  Oracle  Users  Group 
(lOUG)  for  the  past  two  years.  Farrell 
said  Teradata  had  already  paid  for  booth 
space  at  this  coming  April's  event,  but 
iu.st  last  week  heard  that  Oracto  had  askad 
ifw  KXIG  to  reftmd  its  competitor's  money  and 
to  ban  it  from  the  eihibttor’s  arena.  That's 


packed  with  42  2S6GB  ATA  disk  drives. 
The  fully  configured  machine  gets  you 
lOJTB  of  capacity  for  a  mere  $42,000  — - 
that's  less  than  four-tenths  of  1  cent  per 
megabyte.  Lauffln  argues  that  disk-io- 
disk  (D2D>  products  from  his  company 
and  others  will  kill  tape  backup  technolo¬ 
gy  sooner  rather  than  later.  According  to 
Steve  Kcnniston.  an  analyst  at  Enterprise 
Storage  Group  Inc.  in  Milford,  Mass.. 


money  from  Oracle's 
users  that  Teradata 
would  ratiier  not  get. 

■  While  on  the  subject 
of  money  and  consolida¬ 
tion.  by  late  March, 
Nexsan  Technologies 
Iftc.  will  be  shipping  its 
ATABeast  disk  vault 
system  with  plenty  of 
capacity  and  cheap  enough 
to  replace  all  of  your  cape 
backup,  nearline  and 
online  storage  systems. 
According  to  Diamond 
LaufHn.  senior  executive 
vice  president  of  the 
Woodland  HiUs.  Calif- 
bas(^d  company,  the 
4U-high  device  comes 
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"Nexsan  is  right  on  the 
sweet  spot  of  disk-to- 
disk  backup.”  Kenniston 
figures  that  tvro  factors 
keep  tape  backup  systoms 
alve  against  the  inclusion 
of  D20.  First,  he  says,  is 
the  high  comfort  level 
of  aging  systems  admin- 
tstiaiors  with  tape  tech¬ 
nology.  Second,  govern¬ 
ment  regulations  and 
company  policies  about 
storing  critical  data  off¬ 
site.  In  five  years,  he 
thinks,  any  technology, 
political  or  company 
issue  wriU  disappear. 
Along  with  tape.  ■  But 
will  your  browser  vanish  in 


the  future  as  well?  Not  in  five  years,  but  if 
more  vendors  follow  the  path  being  beat¬ 
en  by  SRC  Software  Inc.  in  Portland. 

Ore.,  you’ll  probably  be  using  it  a  lot  less. 
Now  in  its  20th  year.  SRC  sells  budget 
planning  and  forecasting  tools.  Its  I-Net 
Budgeting  9.2  product  combines  propri- 
cury  software  with  Microsoft  Excel  and 
SQL  Server  or  Oracle  databases.  Right 
now.  says  co-founder  and  Executive  Vice 
President  Andrew  Ferguson,  remote 
users  access  the  application  ihrot^^  a 
browser  running  a  Java  client.  But  when 
the  next  version  ships  sometime  in  the 
second  quarter,  users  can  skip  the  browsar 
and  go  right  to  the  VM)  in  ExcaL  So,  will 
bean  counters  soon  be  surfmg  the  Web 
in  Excel?  Don't  count  on  it.  says  Fergu¬ 
son.  But  you  know  they'll  want  to. 

•  E-commercc  sites  may  want  to  entice 
you  to  browse  their  sites  using  avatar 
technology  from  YaPanda  Software  Corp. 
The  recently  funded  start-up  is  touting 
that  your  avatar  wH  maka  you  bTimortai  be¬ 
cause  it  can  use  your  image  and  soon, 
your  own  voice  coupled  with  a  detailed 
knowledge  base  of  your  likes,  dislikes, 
desires  and  pht^ias  that  can  be  shared 
when  visitir^  any  YaPanda-enabled  site. 
While  the  value  of  having  Stave  BaNmer’s 
and  Urry  EHson's  avatars  scurrying  around 
the  ¥tob  forever  is  debatable,  Anthony 
Carson.  CTO  and  founder  of  the  Chick- 
asha,  Okla.-based  company,  claims  that 
e-commerce  companies  will  be  able  to 
exploit  the  knowledge  bases  in  each 
avatar  for  “extrctTWly  effective  personal¬ 
ization.”  •  A  less-unnerving  way  to  get 
close  to  your  customers  is  through  CRM. 
But  deciding  which  CRM  software  is  best 
for  your  company  has  always  been  an  is¬ 
sue.  On  Feb.  19.  Bethesda.  Md.-based  ISM 
Inc  will  announce  on  its  Web  site  the  top 
IS  CRM  packages.  In  case  you  didn't 
know,  there  are  171  to  choose  from.  Up 
from  166  last  year.  Now  whore’s  consolida¬ 
tion  when  you  need  H?  I 


Nortel  Set  for  Switch  Battle  With  Cisco 


BV  MATT  HAMBLEN 

Nortel  Networks  Ltd.  today 
plans  to  unveil  five  nc-w  and 
upgraded  switches  for  corpo¬ 
rate  users,  a  rollout  that  one 
analyst  said  should  help  the 
struggling  vendor  match  offer¬ 
ings  from  Cisco  Systems  Inc. 
in  competitive  bidding  battles. 

Two  of  the  new  switches  in¬ 
clude  virtual  private  network 
(VPN)  functionality  based  on 
the  Secure  Sockets  Layer 
(SSL)  protocoL  and  all  of  the 
devices  are  focused  on  provid¬ 


ing  a  company’s  employees, 
customers  and  business  part¬ 
ners  with  secure  Internet  ac¬ 
cess  to  mission-critical  appli¬ 
cations.  Nortel  officials  said. 

The  switches  are  designed 
to  support  "optimized  connec¬ 
tivity  over  the  Internet,"  rath¬ 
er  than  application  access  only 
within  corporate  intranets, 
said  Greg  Merritt,  vice  presi¬ 
dent  of  enterprise  marlwting 
at  NortcL  Prices  range  from 
$7,000  to  $32,000;  the  devices 
start  shipping  late  this  month. 


Nortel  last  fail  launched  a 
new  marketing  strategy  fo¬ 
cused  on  mainstream  users,  in 
a  bid  to  reduce  its  reliance  on 
sales  to  telecommunications 
carriers  [C^ickLink  34057). 

With  today’s  rollout,  Nortel 
is  chasing  remote-access  busi¬ 
ness  as  SSL-based  VPNs  grow 
in  popularity,  said  |oel  Conov¬ 
er.  an  analyst  at  Current  An¬ 
alysis  Inc.  in  Ceding,  Va.  He 
said  Nortel  is  the  first  large 
vendor  to  embrace  VPNs  built 
around  SSL  but  noted  that  Cb- 


CO  b  studying  the  technology. 

Aside  from  the  VPN  ftirK- 
tionality,  all  five  Nortel  prod- 
uas  line  up  with  Cisco's 
switches  technologywise, 
Conover  said.  That  could  lead 
to  price  wars  between  Nortel 
and  Cisco,  which  controls 
two-thirds  of  the  global 
switching  market,  be  said. 

Nortel's  rollout  includes 
two  Layer  7  switches  for  appli¬ 
cation  traffic  management,  in- 
chiding  one  with  SSL  support; 
a  hi^-end  SSL  routing  svritch; 
a  routing  switch  for  midsize 
users:  and  a  data  center  aggre¬ 
gation  device.  > 
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Microsoft  Releases 
Stammer  Tools 

rfmiTnft  fftTr  imwft  mlilrtit 

iraiiMM  vtnkiM  of  tfirao  soft' 
«m  looli  dnignod  to  hs^  rr 
minutn  ftod  syitoiw  wtoori- 
Us  to  ttto  Slmnor  worm.  nMdi 
msd  a  patcfwd  sseurity  bofs  in 
MkroaoTs  SQl  Stovar  2000 
itottoiaaatocauiawMwpraad 
dtantotfona  to  tfto  tatornst  last 
mmiiL  MGroaon  sm  mo  tdmi 
ora  if  undar  dooaioamont  md 
are  babif  pnrridod  *as  is.* 


Bank  to  Cut  IT. 
Back-Office  Jobs 

Bank  of  Amrlca  Carp,  said  H 
wl  oil  about  UWO  IT  and  hack- 
ofiKa  oparaoofw  JOBS  ay  ma  ono 
of  Mardt  as  part  of  an  offort  to 
cut  oasts.  Tha  Chariofto.  flC.* 
baaad  bM*  dda’I  bredi  down 
thaptaMiadaitobiilaaidrT 
aNm*t  ba  M  as  hard  as  bacfc-of* 


notogy  and  ^arattoas  dMiion 
currently  has  22.000  worbare. 


htsurer  Picks  Perot 
For  Outsourcing 

ftrot  Syatons  Coip.  la  Plano. 
Inas.  saM  M's  nagottaling  a 
10'yaar  dad  to  managi  IT  and 
back^Moa  buainaai  procaas 
opardfons  d  Bhn  Craas  A  8iua 
SMdd  of  Rhads  Wdd.  About 
SOOafthalbaddsHca  hasadto' 
wrar's  tMO  woibars  adl  ba  of* 
farad  ishs  d  hroL  Tha  contract 
is  ovnetad  to  ba  worth  d  load 
mNen.  Parol  said. 


EDS  Says  Profit 
Sales  in 

PlMB  hsaid  Baetranic  Onto 
^yBtoinaCorp.rapartadndln- 
eoma  of  SSM  arilan  tor  tha 
toafi  gmrtor.  dawn  tl%  from 
too  yavmaiiar  totd  of  S40S 
rdfcn.  Itoaomii  drogpid  5%  to 
SSJbfsn.dawwhomlAJbi' 
Ion.  Tha  IT  awdeos  tom  add  M 


MARK  HALL  ■  ON  THE  MARK 

Teradata  Steals  Oracle’s 
Data  Mart  Users . . . 

...  in  a  consolidation  program.  And  Oracle  Corp.  has  taken  a  bit  of  re¬ 
venge.  Teradata.  a  division  of  Dayton,  Ohio-based  NCR  Corp.,  this 
week  is  announcing  that  it  has  successfully  migrated  more  than  400 
data  marts  into  a  few  dozen  Teradata  data  warehouses.  And  “more  than 
75%  of  the  data  marts  are  Oracle,*  crows  Vickie  Farrell,  vice  president  of 
Teradata  warehouse  marketing.  Her  company  has  put  Oracle  data 
marts  in  its  crosshairs,  developing  technology  training  programs  for 


Oracle  users  and  specific  data  migration 
tools  for  Oracle  Ui  and  wooing  Oracle 
users  at  the  annual  conference  run  by  the 
Inieraationai  Oracle  Users  Group 
(lOUG)  for  the  past  two  years.  Farrell 
said  Teradata  had  already  paid  for  booth 
space  at  this  coming  April's  event,  but 
just  last  week  heard  that  Oracto  bad  aikad 
the  KMJ6  to  refund  its  campahtor'a  monay  and 
to  ban  n  from  tha  aiMblter*i  arena.  That’s 
money  from  Oracle’s 
users  that  Teradau 
would  rather  not  get. 

•  While  on  the  subject 
of  money  and  consolida¬ 
tion.  by  late  March. 

Nexsan  Technologies 
Inc.  will  be  shipping  its 
ATAfieast  disk  vault 
system  wfrhptonlyof 

capacily  ami  ebaap  WMMito 

to  raptoM  al  of  your  tape 
backup,  nearline  and 
online  storage  systems. 

According  to  Diamond 
Lauflia  senior  executive 
vice  president  of  the 
Woodland  Hills,  Calif.- 
based  company,  the 
4U'h^  device  comes 


packed  with  42  2S6GB  ATA  disk  drives. 
The  fully  configured  machine  gets  you 
tOJTB  of  capacity  for  a  mere  $42,000  — 
that’s  less  than  four-tenths  of  1  cent  per 
megabyte.  Lauffio  argues  that  disk-to- 
disk  (D2D)  products  from  his  company 
and  others  will  kill  tape  backup  technolo¬ 
gy  sooner  rather  than  later.  According  to 
Steve  Kennistoa  an  analyst  at  Enterprise 
Storage  Group  Inc.  in  Milford.  Mass.. 


“Nexsan  is  right  on  the 
sweet  spot  of  disk-to- 
disk  backup.”  Kenniston 
ffgures  that  tore  factors 
Imp  toga  backup  systams 

lAre  agakwt  Bit  toewaion 
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of  D2D.  First,  he  says,  is 

W  '  ■  .  •  . 

the  high  comfort  level 
of  aging  systems  admin- 

'  '  "  •  '  ■  ■  ■  :  ■ 

istrators  with  tape  tech- 

oology.  Second,  govern- 

tKM  • 

ment  regulations  and 

company  policies  about 

storing  critical  data  off- 

site.  In  five  years,  he 

thinks,  any  technology. 
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political  or  company 

issue  will  disappear. 
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Along  with  tape,  a  Bui 

«■  your  brewsar  vanish  in 

thi  future  as  well?  Not  in  five  years,  but  If 
more  vendors  follow  the  path  being  beat¬ 
en  by  SRC  Software  Inc.  in  Portland. 

Ore.,  youH  probably  be  using  it  a  lot  less. 
Now  in  its  20th  year.  SRC  sells  budget 
planning  and  forecasting  tools.  Its  I-Nct 
Budgeting  9.2  product  combines  propri¬ 
etary  software  with  Microsoft  Excel  and 
SQL  Server  or  Oracle  databases.  Right 
now,  says  co-founder  and  Executive  Vice 
President  Andrew  Ferguson,  remote 
users  access  the  application  through  a 
browser  nmning  a  Java  client.  But  when 
the  next  version  ships  sometime  in  the 
second  quarter,  umts  can  rtdp  ttto  hrowiaf 
and  go  rigM  to  tfw  Wtob  In  EnaL  So,  will 
bean  counters  soon  be  surfmg  the  Web 
in  Excel?  Don’t  count  on  it.  says  Fergu¬ 
son.  But  you  know  they’ll  want  ta 
■  E-commerce  sites  may  want  to  entice 
you  to  browse  their  sites  using  avatar 
technology  from  YaPanda  Sofbvare  Corp. 
The  recently  funded  start-up  is  touting 
that  your  avatar  wB  tnaka  you  Immortal  be¬ 
cause  it  can  use  your  image  and  soon, 
your  own  voice  coupled  with  a  detailed 
knowledge  base  of  your  likes,  dislikes, 
desires  and  phobias  that  can  be  shared 
when  visiting  any  YaPanda-enabled  she. 
While  the  value  ofhaving  Store  Batonar's 
and  Larry  Etoaon'i  araton  aourrying  around 
dw  Wfeb  forarer  is  debatable,  Anthony 
Carson.  CTO  and  founder  of  the  Chick- 
asha,  Okla.-based  company,  claims  that 
e-commerce  companies  will  be  able  to 
exploit  the  knowledge  bases  in  each 
avatar  for  “extremely  effective  personal- 
iaadon.”  ■  A  less-unnerving  way  to  get 
close  to  your  customers  is  through  CRM. 
But  deciding  which  CRM  software  is  best 
for  your  company  has  always  been  an  is¬ 
sue.  On  Feb.  19.  Bethesda.  Md.-based  ISM 
Inc.  will  announce  on  its  Web  site  the  top 
15  CRM  packages.  In  case  you  didn't 
know,  there  are  171  to  choose  from.  Up 
from  166  last  yean  Now  whara'i  eensellda- 
tlon  whan  you  naad  H?  I 


Nortel  Set  for  Switch  Battle  With  Cisco 


•T  Harr  hamulcm 

Nortel  Networics  Ltd.  today 
plans  to  unveil  five  new  and 
upgraded  switches  for  corpo¬ 
rate  users,  a  rollout  that  one 
analyst  said  should  help  the 
struggling  vendor  maii±  ofler- 
ings  from  Cisco  Systems  Inc 
in  compedrive  biddii^  battles. 

TWo  of  the  new  switches  m- 
dude  virtual  private  networic 
(VPN)  functionality  based  on 
the  Secure  Sockets  Layer 
(SSL)  protocoL  and  all  of  the 
devices  are  focused  on  provid¬ 


ing  a  company's  employees, 
customers  and  business  part¬ 
ners  with  secure  Internet  ac¬ 
cess  to  tnission-cnticaJ  appli¬ 
cations,  Nortel  officials  said. 

The  switches  are  designed 
to  support  “optimized  connec¬ 
tivity  over  the  Internet,”  rath¬ 
er  than  application  access  only 
within  corporate  intranets, 
said  Greg  Merritt,  vice  presi¬ 
dent  of  enterprise  marketing 
at  NorteL  Prices  range  from 
$7,000  to  $32,000;  the  devices 
start  shipping  late  this  month. 


Nortel  last  fall  launched  a 
new  marketing  strategy  fo¬ 
cused  on  mainstream  users,  in 
a  bid  to  reduce  its  reliance  on 
sales  to  telecommunications 
carriers  [(^uicklink  340S7]. 

With  today’s  rollout.  Nortel 
is  chasing  remote-access  busi¬ 
ness  as  SSL-based  VPNs  grow 
in  popularity,  said  Joel  Conov¬ 
er.  an  analyst  at  Current  An¬ 
alysis  Inc.  in  Steriing,  Va.  He 
said  Nortel  is  the  first  large 
vendor  to  embrace  VPNs  built 
around  SSL  but  noted  that  Cis¬ 


co  is  studying  the  technology. 

Aside  firom  the  VPN  func¬ 
tionality.  all  five  Nortel  prod¬ 
ucts  line  up  with  Cisco’s 
switches  technologywise, 
Conover  said.  That  could  lead 
to  price  wars  between  Nortel 
and  Cisco,  which  controls 
two-thirds  of  the  global 
switching  market,  be  said. 

.  Nortel’s  rollout  includes 
two  Layer  7  switches  for  appli¬ 
cation  traffic  management,  in¬ 
cluding  one  with  SSL  support; 
a  high-end  SSL  routing  switch; 
a  routing  switch  for  midsize 
users:  and  a  data  center  aggre- 
gatiofl  device, 


►  Value  Management 

►  Business  Intelligence  &  Analytics 
^  IT  Portfolio  Management 


(►Application  Outsourcing 
►  Content  Management 


Build  more  business  value 

INTO  YOUR  IT  INVESTMENTS 

With  mounting  profit  pressures  and  demands 
for  cost  control,  every  investment  must  produce 
rapid  and  predictable  business  value.  As  the 
world’s  third  largest  IT  company,  Fujitsu  can 
show  you  how  to  improve  your  return  on  IT. 

Our  experienced  consultants  will  align  your 
technology  with  your  business  strategy  for 
improved  performance.  And  our  enterprise  value 
management,  application  outsourcing  and  IT 
effectiveness  experience  can  help  maximize  the 
value  from  IT  while  reducing  total  IT  costs  up 
to  30%  in  three  years. 

Along  with  the  right  blueprint,  a  solid  infrastructure 
forms  the  foundation  for  business  effectiveness. 

By  eliminating  “server  sprawl,”  our  exceptionally 
reliable  and  scalable  UNIX  servers  will  lower 
TCO  and  improve  productivity. 

For  free  white  papers  showing  how  to  maximize 
your  Return  On  IT.  visit  us.fujitsu.com/ROIT. 

Working  together,  we  can  accomplish  anything. 


FujiTSU 

THE  POSSIBILITIES  ARE  INFINITE 

us.fujitsu.com 
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WMowsXPJava 
Ruling  Put  on  Hold 

AWmliWMliCouilinRlch- 
mond.  Vii- iawd  a  itiy  onlsr 
putting  on  hoM  •  biiwr  court  niH 
ing  that  «NMld  rnquira  Wcrasott 
Corp.  to  start  oHiirlng  Sun  M- 
eroayslmi  hic.'s  Java  sodwgo 
with  Windows  XP  by  tarty  Juno. 
Tho  agpanls  court's  dadskm 
cam  iuot  hours  aftor  Mcrotoft 
dataiod  the  stags  h  piannad  to 
taha  to  comply  «Wi  the  ndbig  in 
an  andtrust  lawwit  flW  by  Sun. 


lAcrosoft  Flos 
SendoCountofsuit 


a  ooontnraiiit  apWM  Sando  Ltd.. 
a  etmdnghMn.  Eimland  haiad 
mobln  phono  nahar  that  In  Oa- 
camhar  chaipad  tha  aofhaaro 
vandor  with  olaaing  Na  iMrttoc' 
hial  praparty.  Hknooll  dofdad 
tha  alagalien  and  eWnad  that 
Sando  bnha  a  maUo  phono  da* 
miopwant  conbicl  batwsan  tha 
tam  companiis. 


Cisco  Says  Profits 
Up,  Sales  Down 

Oaco  Syitawa  bic.  fsportad 
nSlaiHeninproAlaforilsaac* 
and  quwtar.  sdrich  ondad  One. 
3t  up  80%  from  S880  fflMon  hi 
tha  aama  quarter  last  yaar.  But 
ra«aauafol2%teS4JbHon. 
and  Oaco  CEO  John  Chambars 
said  HBors  art  rtaaring  doom 
buying  docWons  bacauoa  of  con- 
tinuodaeonoadcoonearm.Cus- 
taman  ars  avan  mors  cautious 
tfon  thoy  nais  dust  months 


Short  Takes 

SAP  AS  saM  Hmoo  Plattnar.  ha 
froon  and  CGO.  haa 
d  away  from  daiy  opera* 
nd  hewdod  osar  oaftwais 
oaeswpnNm  ■  anal  nganoi.  smo 
had  baon  In  ebarga  of  now  tech¬ 
nology  aroan. ...  COIffUTER  AS¬ 
SOCIATES  MTBMATIONAL  MC. 
floM  il  bMghl  Holraon  bie.,  a 
MMidrtn  Wow,  f  W,  bmad  dr 
soiopar  ofataiaga  aallwwt. 


Sun  Technology  Targets 
Low-End  Server  Market 


Mass  rollout  includes  blade  servers, 
12-CPU  system,  virtualization  software 


nv  .lAIKUMAn  VI.MVAN 

SUN  MICROSYSTEMS  InC. 
today  will  announce  a 
slew  of  hardware  and 
software  products 
aimed  at  lowering  technology 
ownership  costs  and  reducing 
complexity  for  users.  The 
mass  rollout  also  heralds  a 
fresh  assault  by  Sun  on  (he 
low  end  of  the  server  maricet. 

The  products  are  coming 
from  several  different  busi¬ 
ness  units  at  Sun  and  include  a 
line  of  blade  servers  based  on 
a  mix  of  Intel  Corp.'s  chips 
and  Sun’s  own  UltraSPARC 
processors.  Sun  officials  last 
week  said  the  company  wilt 
also  unveil  blade  server  virtu¬ 
alization  software,  a  12-proces¬ 
sor  midrange  system  and  CPU 
upgrades  for  its  high-end 
servers  (see  chart). 

The  agenda  also  includes 


price  cuts  that  will  reduce  the 
cost  of  some  high-end  systems 
by  as  much  as  35%  and  the  ad¬ 
dition  of  services  aimed  at 
helping  users  implement  Sun’s 
new  N1  data  center  resource- 
optimization  technolc^es. 

On  the  Oflenshfe 

The  laundry  list  of  aimounce- 
ments  comes  at  a  time  when 
Sun,  like  its  major  server  ri¬ 
vals.  is  trying  to  jump-start  a 
business  that  has  been  slowed 
by  the  sluggish  economy. 

They’re  trying  to  find  new 
spots  where  they  can  make  a 
few  bucks  while  doing  what 
they  need  to  do  to  push  their 
existing  products  out  the 
door,"  said  Charles  King,  an 
analyst  at  The  Sageza  Group 
Inc.  in  Mountain  View,  Calif. 

Andy  Ingram,  a  marketing 
vice  president  at  Sun,  said  the 


N1  Strategy  Starts  to  Taka  Shape 


The  virluelzation  softMpre  for 
Sun's  near  blade  aerven  b  onljf 
the  Irst  m  I  seilee  of  products 
and  svrtces  dmt  8w  company 
ptana  to  fol  out  iMs  yeei  as 
part  of  Na  N1  data  cantor  re* 
source  oimownfd  sbafagy. 
acaNdho  to  YM  Zheng,  a  d* 
rector  in  Sun's  W  buatoess 
onwp- 

InthaaeoondtalofthB 
yav.SunwIrBliaaeananlar* 
prtaeventonoftheWbalza' 
Bon  software  fcatwBlat  [7 
rranagn  poof  and  alocalB 
Mftoui  compiAtao  resooroes. 
Zheng  add.  Uto  the  bUe 
aanmr  ariaani,  the  entarpriae 
adtan  «l  ha  baaed  on  lech* 
nofagyStfiboidiilnNomm- 
baraipailcfliaequMlDnol 
Franoi,  Cdl*biMd 
ap(b«iwi. 

Siffi  it  dao  wailing  to  dalir 


bUes  latog  technologies  fei* 
baly  developed  by  Rns  Net' 
works  toe.,  an  Acton,  Mass., 
congany  that  Sun  ate  pur- 
chat^  In  Novanher. 

Aianla-baaad  Cingufar  VI%B* 
las  a  one  of  tfto  early  users  pi- 
toHaathg  Nl  todytotogles. 
Zhang  said.  Undv  a  mdphase 
Knpftnvnlalton  plan,  she  sakt 
OngutorptaretouseNIsoft* 
wan  to  pool  a  net  of  compitttg 
and  ahw  laaouRas  to  a  bid 
totaducadMicinlarcQmplBia* 
lyandcoeis.  Cfrotewldeial 
m  m  impteiant^  plans  at 
part  of  today's  idtouL 

Sun  wl  rtn  dalal  new  N1* 
reiatod  earricet.  todudtog  an 
SSOiioOaRMachaaaaeaBS' 
mart  aanriea  abnad  at  halpino 
coapirtailgveoultoeirvt- 
aionnmtemei^feruatogNI 
taotototfiairdrtBCrtilers. 


product  launch  is  designed  to 
show  that  the  company  can 
deliver  on  the  N1  vision  with 
technology  that  reduces  costs, 
complexity  and  the  time  it 
takes  to  get  a  rettim  on  invest¬ 
ment.  Sun  also  wants  to  signal 
that  it  Ts  commined  to  com¬ 
peting  in  the  low-end  market 
really  aggressively."  be  added. 

The  Sun  Fire  B1600  Blade 
Platform  technology  will  lead 
Sun's  charge  at  the  low  end. 
Although  Sun  is  behind  its  top 
rivals  in  shipping  blade  serv¬ 
ers.  the  B1600  devices  offer 
enough  differentiation  to  at¬ 
tract  attention  from  users,  said 
James  Garden,  an  analyst  at 
Technology  Bminess  Research 
Inc.  in  Hampton,  NJi. 

Sun  is  the  first  vendor  to  let 
users  put  blade  devices  based 
on  different  processors  in  the 
same  chassis.  Garden  said.  The 
new  servers  also  are  the  first 
hardware  offered  by  Sun  with 
support  for  N1  virtualization 
software  that's  designed  to  lee 
IT  managers  quickly  configure 
blade  server  farms. 

Later  this  year,  Sun  said  it 
will  add  specialized  blade 
servers  for  IT  security  and 
content  load-balancing  uses. 

Such  capabilities  should  ad¬ 
dress  some  of  the  scaling  and 
IT  resource-utilization  chal¬ 
lenges  users  face  when  deal¬ 
ing  with  Web-based  applica¬ 
tions.  said  Craig  Richardson, 
assistant  vice  president  of 
hosting  at  Telus  Corp.’s  Busi¬ 
ness  Solutions  unit  in  Vancou¬ 
ver,  British  Columbia. 

Telus  is  Canada's  second- 
largest  telecommunications 
company  and  one  of  Sun’s 
biggest  customers  in  that 
country.  Richardson  said  the 
new  blade  servers  will  let 
Telus  offer  more  efficient  per¬ 
formance-scaling  options  to  its 
large  customers.  A^  the  sup¬ 
port  for  pmtting  both  Intel  and 
UltraSPARC  chips  in  twe  box 
gives  lower-end  users  more 
technology  choices,  be  said. 

The  12-CPU  V1280  rack- 
optimized  Unix  server  urUJ 


top  Sun's  mass  volume  prod¬ 
uct  line  and  was  designed 
to  be  priced  competitively 
with  similar  Wintel  boxes,  In¬ 
gram  said. 

The  College  of  Oceanic  and 
Atmospheric  Sciences  at  Ore¬ 
gon  State  University  in  Cor¬ 
vallis  is  using  the  V1280  to 
consolidate  12  applications 
that  were  running  on  different 
servers  and  operating  systems. 
The  system  has  given  us  a 
unified  way  to  manage  those 
processes,"  thereby  reducing 
ownership  costs,  said  Chuck 
Sears,  manager  of  research 
computing  at  the  university. 

Sun  is  also  boosting  the 
performance  of  its  higb-end 
Sun  Fire  12R  and  15K  servers 
by  adding  a  L2-GHz  Ultra¬ 
SPARC  111  chip  to  the  systems. 
In  addition,  the  company  is 
dropping  prices  on  some  high- 
end  conffgurations.  For  exam¬ 
ple,  a  Sun  Fue  12K  with  four 
CPUs  and  8GB  of  memory 
will  now  start  at  SSS1.987  in¬ 
stead  of  the  current  list  price 
ofS653J90.l 
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Sijn  Says  Java  Will  Support 
Wfeb  Services  Standards 


Dela>’  in  J2EE  1.4 
shoiilcln’t  affect 
users  adverseh' 


•V  CANOL  SUW* 

Developers  who 

hoped  that  the  Java 
2  I^tfonn.  Enter¬ 
prise  Edition,  would 
support  guidelines  that  seek 
to  ensure  that  Web  services 
applications  will  interoperate 
got  some  good  news  last  week. 

Sun  Microsystems  Inc.  an¬ 
nounced  that  the  new  1.4  ver¬ 
sion  of  Java  2  Enterprise  Edi¬ 
tion  (J2EE)  technologies  will 
support  the  Web  Services  In¬ 
teroperability  Organization's 
(WS-!)  Basic  Profile  1.0.  a  set 
of  rules  spccifyii^  how  to  im¬ 
plement  key  Web  services 
specifications. 

Sun  officials  said  support 
for  the  Basic  Profile  means 
that  J2EE  1.4  wUl  be  delajed 
from  the  first  quarter  to  the 
summer.  But  the  delay  is  ex¬ 
pected  to  impact  only  leading- 
edge  corporate  IT  sbi^  since 
many  companies  have  been 
slow  to  take  up  new  J2EE  fea¬ 
tures  and  build  sophisticated 
Web  services  applications. 

“Web  services  are  becoming 
very  unportam,  but  without 
standard  suppon  to  ensure 
interoperability,  they're  worth- 
ic3s,“  said  a  developer  at  a 
Urge  manuUcturing  company 
who  asked  not  tn  be  identified. 

“Lately,  the  application  serv¬ 
er  veodtm  have  been  deliver- 
tng  new  versions  faster  than 
I  would  like,  so  the  delay  in 
the  J2EE  L4  spec  is  probably 
good  news,  fiom  my  perspec- 
Hve.”  he  sakL 

A  Step  Fbmiard 

Tony  Scon,  chief  technology 
officer  at  General  Motors 
Corp.,  said  J2EE  M's  support 
for  WS-Ps  guidelines  is  “a  s^- 
nificant  step  in  the  right  direc¬ 
tion.’'  He  said  GM  is  interested 
in  Web  services  for  a  number 
of  scetkarios,  including  their 


potential  to  help  the  company 
reduce  redundant  business 
logic.  GM  is  currently  doing 
internal  pilots  and  proofs 
of  concept. 

Scon  said  GM  expects  to 
use  both  Java  and  Microsoft 
Corp.’s  .Net  development  en¬ 
vironment  for  Web  services, 
so  interoperability  will  be 
important. 

WIKngtoWait 

A  development  director  at  a 
large  financial  services  firm 
that  has  been  an  early  adopter 
of  Web  services  called  the 
J2EE  1.4  deUy  “unfortunate.'* 

“But  if  this  is  the  fastest 
way  to  get  Web  services  sup¬ 
port  into  the  J2EE  spec,  then 
so  be  it."  he  said.  "We  will  in 
the  interim  go  with  our  own 
solution,  but  hopefully  we 


won't  end  up  with  too  much 
throwaway  code." 

The  development  directot. 
who  requested  anonymity, 
said  various  vendors  now  sup¬ 
port  Web  services,  but  be¬ 
cause  the  technology  isn't  part 
of  the  J2EE  specification,  the 
vendors  do  their  own  exten¬ 
sions.  “We  would  prefer  to 
have  it  standardized  so  we 
won’t  be  locked  into  a  particu¬ 
lar  vendor's  implementation." 
he  said. 

Ralph  Galantine,  a  group 
marketing  manager  for  Java 
Web  services  at  Sun,  said  de¬ 
velopers  can  now  build  Web 
services  using  the  Java  appli¬ 
cation  programming  inteiface 
for  tbe  XML-based  remote 
procedure  call  which  has 
been  made  available  with  a 
number  of  application  servers. 


Marie  Hapner.  Sun's  lead 
architect  of  |2E£.  said  it  was 
a  “big  commitment"  for  ven¬ 
dors  to  pledge  to  build  J2EE 
1.4-compUant  products  that 
tightly  conform  to  WS-I's 
Basic  Profile  1.0. 

Hapner.  who  is  co-leader  of 
the  J2EE  specification  under 


the  Java  Community  Process 
(JCP),  said  the  expert  group 
charged  with  evolving  J2EE 
was  unanimous  in  its  support 
for  the  WS-I  profile.  Ex^rt 
groups  comprising  represen¬ 
tatives  from  various  vendors 
are  re^nsible  for  overseeing 
aspects  of  Java  under  the  JCP. 
which  Sun  established  in  199S 
to  develop  and  revise  its  Java 
technology. 

Jason  Bloomberg,  an  analyst 
at  Z^Think  LLC  in  Waltham, 
Mass.,  said  the  decision  to 
support  WS-I’s  basic  profile 
shows  that  Sun  is  serious 
about  its  activity  b  the  Ofgani- 
zation.  While  other  major  ven¬ 
dors  signed  up.  Sun  resisted 
joining  WS-I  for  months, 
claiming  that  it  deserved  sta¬ 
tus  as  a  foundmg  member.  Sun 
is  now  seeking  a  seat  on  the 
WS-1  board  of  directors. 

WS-I's  membeishtp  b- 
ciudes  major  vendors  such 
as  Hewlett-Packard  Co.,  IBM, 
Microsoft  and  Oracle  Corp. 
and  enterprise  users  such  as 
Charles  Schwab  &  Co.  and 
Merrill  Lynch  &  Ca  I 


SAP  Users  Welcome 
End  of  mySAP.com  Era 


Some  say  name 
change  may  help 
ease  conftision 


BY  MAHC  L.  8OM0IMI 

Tbe  demise  of  SAP  AG’s  my- 
SAPeom  brand  name  didn’t 
provoke  much  mourning 
among  users  of  tbe  vendor’s 
business  applications  last 
week.  Several  IT  managers 
said  the  mySAPxom  concept 
had  remained  somewhat  mys- 
tifybg.  even  after  being  b 
place  for  nearly  four  years. 

“Tbe  whole  mySAPxom  po¬ 
sitioning  was  very  confusing, 
particularly  to  existing  SAP 
customers  like  ourselves,"  said 
Tom  Ackerman,  senicK  direc¬ 
tor  of  business  infonnation 
systems  at  Symbol  Technolo¬ 
gies  be,  a  maker  of  bar-code 
scanners  and  other  handheld 
devices  b  Holtsville,  HY. 

Symbol  which  uses  SAP's 


R/3  enterprise  resource  plan- 
nbg  (ERP)  applications,  is 
considering  installing  some  of 
the  vendor's  newer  products, 
such  as  its  portal  software. 

But  IT  staff  members  are  still 
weighbg  the  pros  and  cons  of 
the  software  licensing  scheme 
that  was  btroduced  as  part  of 
the  niySAP.com  strategy,  and 
SAP  hasn't  done  enough  to 
make  it  clear  how  the  pricbg 
works,  Ackerman  said. 

SAP  late  last  month  an¬ 
nounced  that  it  was  changing 
the  name  of  its  software  prod¬ 
uct  Ibe  ftx>m  mySAPxom  to 
mySAP  Busbess  Suite.  SAP 
America  Inc.  spokesman  Wil¬ 
liam  Wohl  said  tbe  reason  was 
to  better  reflect  the  way  cor¬ 
porate  users  buy  software, 
which  more  and  more  fre¬ 
quently  is  done  under  a  suite 
licensing  arrangement. 

Although  Wohl  said  the 
mySAP.com  launch  b  1999 


was  a  huge  success,  several 
users  and  analysts  mdicated 
that  they  found  the  concept 
to  be  either  confusbg  or  an 
example  of  marketbg  hype. 
From  tbe  beginning,  many 
users  weren’t  sure  if  mySAP.- 
com  was  a  new  technology, 
a  pricing  program  or  just  a 
new  name. 

“I  always  felt  that  mySAP.- 
com  was  a  marketbg  ploy 
to  get  everyone  to  think  that 
SAP  was  blernet-ftiendly. 
and  not  a  real  plan  that  solved 
problems,"  said  Eric  Bloom, 
vice  president  of  IT  at  Endo 
Pharmaceuticals  Holdings  Inc. 

laWvays 
felt  that 
inySAP.com  was 
a  marketing  ploy 
to  get  everyone  to 
think  that  SAP  was 
internet-friendly. 

CmC  BLOOM.  VP  OF  tr.  ENDO 
PHARlMCEUttCALS 


b  Chadds  Ford,  Pa. 

MySAP.com  “became  b- 
creasbgty  confusing  and  not 
easily  identifiable."  eventually 
turnir^  it  bto  a  liability  for 
SAP.  Bloom  added.  Even  so. 
he  said  Endo's  R/3  installation 
gives  the  company  good  value 
for  its  price. 

“MySAP.com  had  its  initial 
challei^s  b  what  the  name 
said  about  the  product,"  Wohl 
said,  noting  that  tbe  busbess 
of  enterprise  software  is  "b- 
herently  complex"  But  he 
begged  to  differ  with  the  con- 
tbued  complaints  about  my- 
SAPxom,  citing  the  extensive 
adoption  of  tbe  suite  by  users. 

SAP's  position  got  support 
from  Da^  Pritchard.  ERP 
and  customer  relatiortship 
management  program  manag¬ 
er  at  Creo  Inc.,  a  supplier  of 
digital  prepress  equipment  b 
Vancouver,  British  Columbia. 
Pritchard  said  the  mySAP.com 
scheme  was  fairly  simple  and 
dbect  "Ri^t  from  tbe  outset 
18  months  ago.  we  have  had 
simple  bundled  pricing,  which 
bchides  all  tbe  mySAP.com 
functionality,"  he  said.  I 


www.computen«orld.cDm 


BRIEFS 


Microsoft  PuHs  NT 
4.0  Fix  Off  Site... 

MicniioH  Carp.  puM  a  soft- 
mn  paldi  for  Wfwfcwio  NT  4.0 
froniiWebMIioflvuBm 
cpMplaifwd  IhM  tho  ooGurtty  fix 
was  ciixhiHO  Ow  oporaMng  oys* 
tom.  Tho  coMpany  ii  updating 
mo  paKA,  WMca  oma  mmaioa  n 
DoeanAor  to  plpg  a  holo  ia  Om 
MI.T1CR  function  of  Whdmm. 
Tlwro  am  m  pfobtwm  wMi  «M* 
Iv  pakboo  for  WMewi  2000 
Mid  Mndowt  XP.  Meraaofl  oaM. 


...  and  Posts  New 
Patch  For  Browser 

Mkrooefl  alao  ioouod  a  now 
paldi  doafgaad  to  fti  a  pab  of 
Ranu  in  flio  crpoB-donain  oacu* 
rfly  toolt  buM  into  tlio  Intorwl 
Eqdoror  Mbb  hrawoar.  Tbo  com¬ 
pany  pwo  ttm  wdooraUttioo  a 
'crWeaT  oaoorfbt  rating  and  taU 
afladaro  coidd  uoo  thwn  to  fun 


a  patch  for  a  foM-aovora  hole  in 
a  Ho  accoM  tool  in  WMorm  XP. 


Comdex  Owner 
Res  for  Chapter  11 

KoySMadk  Orw  Inc..  wMch 
rana  Coaidu  and  otfiar  ff  con- 
toronoaa.  flbd  for  Chaplar  f1 
haniauptcy  preloctiow  aa  pari  of 
a  dool  doaigiNd  fo  raduca  tts 
dofel  Tho  Im  Angaforbaaad 
company  paid  >  hopoa  to  oworga 
from  Chaptor  11  wftfdn  90  day*. 
TiMinaB  VMod  CwNal  Pwtnori 
IP  in  San  Firandaeo  «*■  provida 
now  fiBidhit  in  rotura  for  99% 
mnnanlibi  id  WayHiortia 
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IBM  Beta^sts  Virtual 
Database  Technology 


Users  eye  tools  for  integrating  SQL 
databases,  other  content  repositories 


BV  MAnC  L.  SONOINI 

IBM  IS  STAKTING  tO  beta 
test  two  software  tools 
des^med  to  integrate  dis¬ 
tributed  data  reposito¬ 
ries,  and  several  users  last 
week  said  the  oew  technology 
could  help  them  set  up  virtual 
databases  that  puU  together  a 
wide  range  of  informatiorL 
The  beta  versions  of  IBM’s 
DB2  Infontution  Integrator 
and  DB2  Information  Integra¬ 
tor  for  Content  software  arc 
the  First  tangible  results  of  an 
integration  initiative,  code- 
named  Xperanto.  that  the 
company  detailed  last  month 
rOuicklink  3S536]. 

IBM  last  week  said  the  toob 
will  let  end  users  access  vari¬ 
ous  SQL  databases  and  other 
content  sources  through  a  sin¬ 
gle  query.  For  instance.  DB2 


Information  Integrator  could 
be  used  as  part  of  a  call  center 
application  (o  extract  cus¬ 
tomer  data  stored  in  e-mail 
messages  or  text  files.  Com¬ 
mercial  shipments  are  expect¬ 
ed  to  start  by  year’s  end. 

Expanded  Data  Sources 

At  Indiana  Universiiy’s  cam¬ 
pus  in  Indianapolis,  the  life 
sciences  department  b  al¬ 
ready  installing  OB2  Informa¬ 
tion  Integrator,  said  Craig 
Stewart,  director  of  research 
and  academic  computing. 

The  life  sciences  depart¬ 
ment  currently  uses  IBM's 
DiscoveryLink  software,  a  data 
cataloging  tool  for  bioscience 
applications.  But  DB2  Infor¬ 
mation  Integrator’s  native 
XML  support  will  let  the 
school's  IT  managers  expand 


IBM  skd  0B2  brfomwUon  bito- 
grator  coaU  be  uad  in  dw  fol- 
towbigway: 

l}A  customer  of  a  hnanciat  ser- 
vicss  fim)  gow  onina  to  sail 
data  on  the  current  value  ot  his 
Investment  portfolio. 

2)  The  TeM  soib^  pofb  sloch 
owneraMp  bdonmion  horn 
customer  account  data  stored  m 
a  reiationaf  database. 

3)  Wormatlon  Integrator 
gathers  rail  Ume  stock  gaota 
via  a  Vthb  services  applicstlon 

4)  Ihe  toij  cMoilata  (ha 

of  the  cusfamar's  holdbiga  and 

presents  the  data  as  it  It  came 
from  a  sngle  source. 


the  types  of  data  sources  that 
can  be  queried,  Stewart  said. 

Robert  Catterall.  director  of 
strategic  technology  at  Check- 
Free  Corp.’s  e-commerce  divi¬ 
sion  in  Norcross,  Ga..  said  he’s 
open  to  exploring  the  integra¬ 


tion  software,  althou^  he  has 
DO  specific  plans  at  this  point 

CheckFree  currently  stores 
e-mail  messages  and  attach¬ 
ments  directly  in  IBM’s  DB2 
database.  But  Catterall  said  the 
electronic  billing  services 
provider  hopes  to  eventually 
create  a  virtual  database  that 
spans  various  repositories. 

The  integration  technology 
b  being  built  on  top  of  DB2, 
but  Nebon  Mattos.  direaor  of 
information  integration  at  IBM. 
said  users  won’t  have  to  move 
information  out  of  existing 
repositories  or  convert  data  to 
DB2  formats.  The  software  will 
also  be  tightly  coupled  with 
IBM’s  WebSphere  MQand 
WebSphere  Business  Integra¬ 
tion  middleware  tools,  but  it 
will  work  with  rival  products 
from  Microsoft  Corp.  and  oth¬ 
er  companies,  Mattos  said. 

James  Governor,  an  analyst 
at  RedMonk,  a  consulting  Hrm 
in  HoIUs,  N.H..  said  installing 
the  integration  software  could 
cause  culture  shock  for  some 
database  adminbtrators.  “Any¬ 
one  in  charge  of  a  database 
hates  anyone  else  touching  it 
unless  permission  b  gwen." 
Governor  said.  I 


Microsoft  Gains  Visuai 
Studio  .Net  Momentum 


BT  CAItOI.  aUWA 

Microsoft  Corp.  thb  week  will 
mark  the  one-year  anniversary 
of  its  Visual  Stttdio  .Net  devel¬ 
opment  environment  with  a 
flurry  of  announcements  in¬ 
tended  to  show  momentum 
around  its  latest  tools. 

Partners  such  as 
Borland  Software 
Corp.  will  pitch  in 
with  new  ofterings 
designed  to  worii 
with  the  .Net  development 
platform.  Borland’s  Optimizeit 
for  .Net  can  help  developers 
spot  memory  leaks  and  other 
potential  problems  that  can 
hinder  application  perfor¬ 
mance,  said  George  Paolini,  a 
general  manager  at  Borland. 

The  Scons  Valley.  Calif- 
based  toob  vendor  acquired 
the  Optimizeit  technology  last 


year  from  San  Jose-based  Red- 
tine  Software  Inc.,  better 
known  as  VMGear. 

Smaller  vendors  introducing 
new  products  at  this  week’s 
VSlive  coofercncc  in  San  Fran¬ 
cisco  include  Sanettun  Inc.  in 
Santa  Clara.  Calif,  which  plans 
to  announce  App- 
Scan  Developer 
Edition.  That  prod¬ 
uct  will  int^rate 
into  Visual  Studio 
Kct  2003,  which  b  due  for  gen¬ 
eral  release  in  April  AppScan. 
which  will  sell  for  S99S,  tests 
for  security  defects  in  code  and 
provides  descriptions  of  the 
problems  and  suggested  fixes. 

The  level  of  mierest  in  .Net- 
focused  loob  remains  to  be 
seen,  since  many  Microsoft 
developers  are  Just  starting 
to  switch  to  the  new  develop¬ 


ment  environment. 

Brian  Siler,  a  lead  program¬ 
mer  analyst  at  Hilton  Hoteb 
Corp.  in  Memphis,  said  hb  de¬ 
velopment  group  b  about  to 
enter  the  coding  phase  for  its 
Rtm  .Net  project.  “The  initial 
skepticism  toward  [Visual  Ba¬ 
sic]  -Net  b  foding  as  wc  start 
to  sec  how  some  of  the  new 
language  features  will  make 
our  tasks  easier."  he  said. 

But  a  major  concern  b  how 
to  get  the  .Net  Framework  out 
to  the  company  *5  geographi¬ 
cally  dispersed  end  users. 

Since  they're  running  Win¬ 
dows  2000  or  XP  with  nonad- 
minbtrative  access,  they  can't 
install  the  framework  on  their 
own.S)er  explained 

In  other  developer  news, 
Borland  thb  week  will  an¬ 
nounce  its  Enterprise  Studio  5 
for  Java,  featuring  integrated 
modeling  technologies  ac¬ 
quired  from  TogetherSoft  Corp. 
Studio  S,  which  will  sell  for 
$6,999,  also  includes  Borland’s 
JBuilder  tool  enterprise  server 


and  lightweight  data  store. 

Last  week.  BEA  Systems  Inc 
released  two  entry-level  ver¬ 
sions  ofits  WebLogtc  applica¬ 
tion  server.  The  Express  ver- 
sioo  can  be  used  for  building 
and  running  Web  applications 
that  rely  on  Java  Server  Pages 
and  Java  servlets.  The  Work¬ 
group  Edition  b  for  depart¬ 
ments  with  up  to  20  users  on 
projects  that  require  full  Java  2 
Enterprise  Edition  capabilities. 

A  develc^ment  director  at  a 
large  financial  services  firm 
who  requested  anonymity  said 
lightwe^t  application  servers 
and  open-source  tools,  such  as 
the  JBoss  application  server, 
appeal  to  hb  company.  “Appli¬ 
cation  servers  are  ncMiy  a  com¬ 
modity  item."  he  said  "and  we 
mqkcct  the  prices  to  be  falling 
rapidly  in  the  next  year  or  so."  I 


Far  anram  applcalcn  development, 
head  to  otf  Knowfodge  Center 
^QbcUMikim 


800  iB  ji  to  know. 

Oafy  SAS  provides  «  Ingb-impact,  km^risk  way 
to  achieve  inteUigem  data  waroboasiiig.  You  can 
exttact,  transform  and  load  data  from  any  source, 
across  ai^  platform,  vtdiile  assuring  quality. 
Simplify  die  w3y  you  ocate  and  customus  r^xxts. 
And  deliver  a  shared  version  of  the  truth.  To  find  out 
how  top  conqianies  reap  bottmn-line  rewards  widi 
SAS  software — by  levoaging  the  value  of  data 
fnHn  ccHpCMBte  systems,  e-business  channels,  die 
supply  diain  and  beyond — visit  us  cm  the  Web  w  call 
toll  free  1866  270  5727. 


www.sas.com/warehouse 
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Directory  Links,  New  User 
Interface  Due  for  NetWare 


Novell  plans  to  rele 
nen\ork  o(X'ratini. 


■ase  upgrade  i>f 
s\  stem  b\  mid\ear 


M 


ev  MATT  HAMBLEN 

rovEl  L  JNL  this 
week  will  announce 
plans  for  the  next 
upgrade  of  Net¬ 
Ware.  which  will  include  a 
browser-based  user  p*^rtal.  di- 
rectorv  integration  tools  and 
an  application  serser  that  sup¬ 
ports  Web  sers-ices. 

NetWare  6.5.  code-named 
Nokoma.  has  been  in  closed 
beta-testing  trials  for  months 
but  is  due  to  start  a  public  beta 
period  in  April  and  bc‘gin  ship¬ 
ping  bv- midyear,  said  Novell 
product  manager  Rob  Seely. 

Seely  last  week  listed  14 
new  features  plus  six  imprtvve- 
roents  over  NetWare  6.0  that 
are  being  developed  as  part  of 
the  upgrade.  He  focused  pri¬ 
marily  on  a  new  Virtual  Office 
user  interface  that  combines 
Ntwell's  previously  released 
iFolder  and  iPrint  Web  ser¬ 
vices  with  new  V'inual  Team 
and  cGuide  functions.  Virtual 
OfTice  will  let  users  print,  ac¬ 
cess  and  manipulate  docu- 
meni.s  from  a  customized  Web 
browser  and  set  up  virtual 
teams  that  can  collaborate  via 
instant  messaging,  Seely  said. 

Directory  Integration 

EGuide  prex'iously  was  sold 
separately,  but  the  latest  ver- 
-sion  is  being  imegraiL-d  with 
NetWare  6.5.  With  the  help  of 
Nttvell's  DirXML  metadirec¬ 
tory.  cGuidc  will  provide  con¬ 
nectors  to  multiple  directo¬ 
ries.  including  Novell's  cDi- 
rectory  software  and  Micro¬ 
soft  Corp.'s  .Active  Directory 


Correction 

Lastweek'seoverstfiryonmam- 
franteUnuxrrasidintlftedlheen)- 
plovar  of  John  Kogei.  The  com¬ 
pany  is  Candte  Co^  in  Q  Segun- 
do.CJf. 


Uh>1  and  Windows  NT  do¬ 
mains,  Novell  said.  End  users 
will  be  able  to  see  all  the  di- 
rectoiy-  information  by  provid¬ 
ing  a  single  password  via  Vir¬ 
tual  Office. 

NetWare  6.5  will  also  in¬ 
clude  new  business  continuity. 
Web  services  and  open-source 
features.  Seely  said.  For  exam¬ 
ple.  Novel)  is  integrating  its 
lava-based  Extend  application 
server  software  for  u.se  in  Web 
services  applicatitms. 

Beta  tester  George  Racizke. 
a  senior  systems  pn>grammer 
at  Northern  Illinois  University 
(NIU)  in  Dekalb,  hailed  a 
server  consolidation  utility 


that’s  coming  in  NetWare  6.5. 
Raetzke  said  he  wants  to  use 
the  utility  to  set  up  a  cluster 
of  NetWare  servers,  which 
would  result  in  a  “huge  sav¬ 
ings  in  space  for  our  labs." 

NIU.  which  has  25.000  stu¬ 
dents.  runs  NetWare  on  about 
75  servers  but  also  uses  Win¬ 
dows  NT  systems  for  Web 
functions.  Raetzke  said.  He 
added  that  the  school  has  in¬ 
stalled  both  Active  Directory 
and  Novell  Directory  Services, 
an  earlier  version  of  eDirecto- 
ry.  EGuide  and  DirXML  should 
help  with  integration  between 
the  directories,  he  said. 

Another  beta  tester.  Damon 
Dawson,  a  contractor  for  Com¬ 
puter  Sciences  Corp.  who 
works  as  a  network  administra¬ 
tor  at  a  large  federal  agency  in 


Cincinnati,  called  the  server 
consolidation  tool  a  potential 
'•lifesaver"  for  migrations  to 
new  serx'er  hardware.  He  also 
said  a  data  backup  too!  that’s 
due  to  be  included  in  NetWare 
6.5  will  let  IT  administrators 
back  up  databases  with  no 
downtime  —  and  do  so  during 
the  workday  instead  of  over¬ 
night  for  easier  monitoring. 

lohn  Enck.  an  analyst  at 
Gartner  Inc.  in  Stamford. 
Conn.,  said  Novell  appears  to 
be  doing  an  "outstanding  job" 
of  enhancing  the  Web-based 
user  interface  that’s  in  Net¬ 
Ware  6.0  to  create  Virtual  Of¬ 
fice.  The  promised  integration 
between  eDirectory  and  Ac¬ 
tive  Directory  is  also  an  im¬ 
portant  feature  for  IT  man¬ 
agers  who  need  to  support 
multiple  directories,  he  said. 

Enck  said  NetWare  6.5 
may  help  Novell  slow  the 
software's  market  decline  but 
only  to  a  point.  “It  will  help 
stop  the  bleeding,  but  no  non- 
Novell  customer  will  go  run¬ 
ning  to  6.5  either."  he  said.  I 


EMC’s  New  Arrays 
Get  Mixed  Reviews 


BV  LUCAS  MEABIAN 

EMC  Corp.'s  new  high-end 
Symmetrix  disk  array  line  was 
lauded  by  analysts  last  week 
as  a  technological  advance 
that  puts  the  struggling  stor¬ 
age  vendor  back  in  the  spccds- 
and-feeds  lead.  But  some  IT 
managers  were  more  skeptical 
about  the  value  of  the  arrays. 

As  expected,  EMC  unveiled 
its  Symmetrix  DMX800. 
DMXIOOO  and  DMX200t>  ar¬ 
rays  and  touted  their  internal 
architecture  as  being  the 
fastest  on  the  market  by  far 
IQuickLink  36043].  The  Direct 
Matrix  Architecture  technol¬ 
ogy  provides  bandwidth  of  up 
to  64GB.'sec..  EMC  confirmed. 

\M(h  list  prices  ranging 
from  $409,000  to  S2.5  million, 
the  DMX  arrays  are  15%  to 
50%  less  expensive  than  ear¬ 
lier  Symmetrix  models.  EMC 
said.  Those  prices  translate 
into  costs  of  4  to  8  cents  per 
megabyte,  auxording  to  Ken 


Sieinhardt.  the  company's  di¬ 
rector  of  technology  analysis. 
"Our  objective  is  to  be  com¬ 
petitive,"  Sieinhardt  said. 

But  the  price./performance 
improvements  didn't  wow  |oc 
Gottron.  CIO  at  Huntington 
Baneshares  Inc.  in  Columbus. 
Ohio.  Gottron  has  more  than 
20TB  of  capacity  on  a  Sym- 
metrlx  array  he  bought  last 
year.  He  said  he’s  not  interest¬ 
ed  in  the  now  line  because  he 


doesn’t  see  a  solid  business 
case  for  buying  the  technology. 

Raul  Seay,  a  storage  special¬ 
ist  at  a  large  government  con¬ 
tractor  on  the  East  Coast,  said 
he  views  the  DMX  line  merely 
as  stopgap  technology  aimed 
at  stemming  user  defections  to 
rivals  such  as  IBM  and  Hitachi 
Data  Systems  Corp. 

Seay,  who  manages  48TB 
of  storage  on  IBM's  high-end 
Shark  arrays  plus  data  stored 
on  EMC’s  Clariion  midrange 
devices,  said  he  was  hoping 
EMC  would  roll  out  storage 
management  software  up¬ 
grades  and  increased  Inulti- 
vendor  intcroperabiUiy. 


Mcb  Compariiaii 

iHprtMkraBViM>%MkhHK 

■.MtMaTaliviiM* 

mm 

■  OMXBOO  niodulv  amy  wth  216 

flWjftW 

■  Modal  SEQOdnoIrtoqfaRiywnhthBaniecai)^ 

S8S4k000 
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mb 

■  DMX20(X)duaH)again)riiMi%5TBcapadly 

■  Modii  8830 aintfg'baif  ally  tiiilhd»MwiBca|Bdy 

sumjoM 

OnmMlRfrfeB 

27% 

"1  thought  EMC  was  going 
to  be  a  software  company,  bui 
they're  so  late  to  the  game  that 
I  don't  think  they'll  be  able  to 
break  in  at  this  point."  he  said. 

Seay  and  Gottron  also  said 
they’re  disappointed  that  the 
DMX  models  don’t  include 
built-in  support  for  IBM’s 
Ficon  mainframe  connectivity 
technology,  which  is  support¬ 
ed  on  older  Symmetrix  arrays. 

Steinhardt  said  IBM  is  up¬ 
grading  Ficon  from  IG  bit/sec. 
throughput  to  2G  bit/$cc.,  so 
EMC  saw  no  reason  to  link  to 
the  technology  right  away.  Fi¬ 
con  suppon  is  due  to  be  added 
in  the  third  quarter,  he  said. 

|im  Shaw,  CIO  at  Manage¬ 
ment  Science  Associates  Inc. 
(MSA)  in  Pittsburgh,  was 
more  positive  about  the  DMX 
line.  MSA  has  30TB  of  capaci¬ 
ty  on  four  Symmetrix  arrays 
and  is  testing  the  DMX800. 
Shaw  said  he  likes  the  array’s 
modularity  because  it  will  let 
him  grow  his  storage  capacity. 

Shaw  said  he  also  appreci¬ 
ates  the  internal  bandwidth 
boost.  “We’re  getting  notice¬ 
ably  better  performance  out  of 
the  tDMX)  sy.stem,"  he  said.  I 
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Directory  Links,  New  User 
Interface  Due  for  NetWare 


Novell  plans  to  release  upgrade  of 
network  operating  system  by  midyear 


New  Features 


Novell  inc.  this 

week  will  announce 
plans  for  the  next 
upgrade  of  Net* 
Ware,  which  will  include  a 
browser-based  user  portal,  di¬ 
rectory  integratkm  tools  and 
an  application  server  that  sup¬ 
ports  Web  services. 

NetWare  code-named 
Nakoma.  has  been  in  closed 
beta-testing  trials  for  months 
but  is  due  to  start  a  public  beta 
period  in  April  and  begin  ship- 
pii%  by  midyear,  said  Novell 
product  manner  Rob  Seely. 

Seely  last  week  listed  14 
new  features  plus  six  improve¬ 
ments  over  NetiA^  6i)  that 
arc  being  developed  as  part  of 
the  upgrade.  He  focused  pri¬ 
marily  on  a  new  Virrua]  Office 
user  interface  that  combines 
Novell's  previously  released 
iFolder  and  iPrint  Web  ser¬ 
vices  with  new  Virtual  Team 
and  eGuide  functions.  Virtual 
Office  wiU  let  users  prim,  ac¬ 
cess  and  manipulate  docu¬ 
ments  from  a  customized  Web 
browser  and  set  up  viitual 
teams  that  can  collaborate  via 
instam  messaging.  Seely  said. 

Oirechify  Intagratian 

EGuide  previously  was  sold 
separately,  but  the  latest  ver¬ 
sion  is  being  integrated  with 
NetWare  6.5.  With  the  help  of 
Novell's  Dir  XML  meudirec- 
tory.  eGuide  trill  provide  con- 
oecton  to  multiple  directo¬ 
ries,  including  Novell’s  eDi- 
reclory  software  and  Micro¬ 
soft  Corp.’s  Axrtive  Directory 


tool  and  Windows  NT  do¬ 
mains.  Novel)  said.  End  users 
will  be  able  to  see  ail  the  di¬ 
rectory  information  by  provid¬ 
ing  a  single  password  via  Vir¬ 
tual  Office. 

NetWare  6.5  will  also  m- 
clude  new  business  continuity. 
Web  services  and  open-source 
features,  Seely  said.  For  exam¬ 
ple.  Novell  is  integrating  its 
fava-based  Extend  application 
server  software  for  use  in  Web 
services  applications. 

Beta  tester  George  Raetzke, 
a  senior  systems  programmer 
at  Northern  Illinois  University 
(NIU)  in  Dekalb,  hailed  a 
server  consolidation  utility 


EMC’s  New  Arrays 
Get  Mixed  Reviews 


EMC  Corp.’s  new  higb-end 
Synunetrix  disk  array  line  was 
lauded  by  analysts  last  week 
as  a  technological  advance 
that  puts  the  struggling  stor¬ 
age  vendor  back  in  the  speeds- 
and-feeds  lead.  But  some  IT 
managers  were  more  skeptical 
about  the  value  of  the  arrays. 

As  expected.  EMC  unveiled 
its  Symmetrix  DMX800. 
OMXIOOO  and  DMX2000  ar¬ 
rays  and  touted  their  internal 
architecture  as  being  the 
forest  on  the  maritet  by  for 
[C^iicklink  36043].  The  Direct 
Matrix  Architecture  technol¬ 
ogy  provides  bandwidth  of  up 
to  64GB/sec.,  EMC  confirmed. 

With  list  prices  ranging 
from  $409,000  to  $2.5  millkm. 
the  DMX  arrays  are  15%  to 
50%  less  expensive  than  ear¬ 
lier  Symmetrix  models,  EMC 
said.  Those  prices  translate 
into  costs  of  4  to  8  cents  per 
megabyte,  according  to 


Steinhardt.  the  company's  di¬ 
rector  of  technology  analysis. 
“Our  objective  is  to  be  com- 
petirive,”  Steinhardt  said. 

But  the  price/^rfonnance 
improvements  didn't  wow  Joe 
Gottron.  CIO  at  Huntington 
Bancshares  Inc.  in  Columbus, 
Ohia  Gottron  has  more  than 
20TB  of  capacity  on  a  Sym¬ 
metrix  array  he  bought  last 
year.  He  said  he's  not  interest¬ 
ed  in  the  new  line  because  be 


that's  coming  in  NetWare  6.5. 
Raetzke  said  be  wants  to  use 
the  utility  to  set  up  a  cluster 
of  NetWare  servers,  which 
would  result  in  a  “huge  sav¬ 
ings  in  space  for  our  labs." 

NIU.  which  has  23,000  stu¬ 
dents.  runs  NetWare  on  about 
75  servers  but  also  uses  Win¬ 
dows  NT  systems  for  Web 
functions,  Raetzke  said.  He 
added  that  the  school  has  in¬ 
stalled  both  Active  Directory 
and  Novell  Directory  Services, 
an  earlier  version  of  eDirecto- 
ry.  EGuide  and  DirXML  should 
help  with  integration  between 
the  directories,  he  said. 

Another  beta  tester.  Damon 
Dawson,  a  contractor  for  Com¬ 
puter  Sciences  Corp.  who 
works  as  a  netwmk  administra¬ 
tor  at  a  large  federal  agency  in 


doesn’t  see  a  solid  business 
case  for  buying  the  technolc^. 

Paul  Seay,  a  storage  special¬ 
ist  at  a  large  government  con¬ 
tractor  on  the  East  Coast,  said 
he  views  the  DMX  line  merely 
as  stopgap  technology  aimed 
at  stemming  user  defections  to 
rivals  such  as  IBM  and  Hitachi 
Data  Systems  Corp. 

Seay,  who  manages  48TB 
of  storage  on  IBM's  high-end 
Shark  arrays  plus  data  stored 
on  EMC's  Clariion  midrai^ 
devices,  said  be  was  hoping 
EMC  would  roU  out  storage 
management  software  up¬ 
grades  and  increased  multi¬ 
vendor  interoperabUity. 


Cincinnati,  caUed  the  server 
consi^idation  tool  a  potential 
lifesaver"  for  migrations  to 
new  server  hardware.  He  also 
said  a  data  backup  tool  that's 
due  to  be  included  in  NetWare 
6.5  will  let  IT  administrators 
back  up  databases  with  no 
downtime  —  and  do  so  during 
the  workday  instead  of  over¬ 
night  for  easier  monitoring. 

John  Enck.  an  analyst  at 
Gartner  Inc.  in  Stamford. 
Conn.,  said  Novell  appears  to 
be  doing  an  “outstanding  job" 
of  enhancing  the  Web-based 
user  interface  that's  in  Net¬ 
Ware  6.0  to  create  Virtual  Of¬ 
fice.  The  promised  integration 
between  eDircctory  and  Ac¬ 
tive  Directory  is  alro  an  im¬ 
portant  feature  for  IT  man- 
agers  who  need  to  support 
multiple  directories,  be  said. 

Enck  said  NetWare  6.S 
may  help  Novell  slow  the 
software’s  market  decline  but 
only  to  a  point  “It  will  help 
stop  the  bleeding,  but  no  non- 
Novell  customer  will  go  run¬ 
ning  to  6.5  either,"  he  said.  I 


“I  thought  EMC  was  going 
to  be  a  software  company,  but 
they're  so  late  to  the  game  that 
I  don't  think  they'll  be  able  to 
break  in  at  this  point*  be  said. 

Seay  and  Gottron  also  said 
they're  disappointed  that  the 
DMX  models  don’t  include 
built-in  support  for  IBM’s 
Ficon  mainftame  connectivity 
technology,  which  is  support¬ 
ed  on  older  Symmetrix  arrays. 

Steinhardt  said  IBM  is  up¬ 
grading  Ficon  from  IG  bit4ec. 
throughput  to  2G  bit/sec,  so 
EMC  saw  DO  reason  to  link  to 
the  technology  right  away.  Fi¬ 
con  support  is  due  to  be  added 
in  the  tl^  quarter,  be  said. 

Jim  Shaw,  CIO  at  Manage¬ 
ment  Science  Associates  Inc 
(MSA)  in  Pittsburgh,  was 
more  positive  about  the  DMX 
line.  MSA  has  30TB  of  capaci¬ 
ty  on  four  Symmetrix  arrays 
and  is  testing  the  DMX800. 
Shaw  said  be  likes  the  array's 
modularity  because  it  will  let 
him  grow  his  storage  capacity. 

Shaw  said  he  also  appreci¬ 
ates  the  internal  bandwidth 
boost  "Wfe’re  getting  notice¬ 
ably  better  performance  out  of 
the  [DMX]  system,"  he  said.  I 


Better  Performance.  Better  Price. 


Dell  I  Managed  Switches 
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PoweiCoMiecr  3048*  Switch 
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•  3-Y<  7i24  4-Hi  Pan  or  Unit  Replacerant-  add  $299 
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Froni  standard  Fast  Ethernet  to  high-speed  Gigabit  Ethernet  over  copper  or  fiber,  Dell 
PowerConneci  switches  are  designed  to  offer  full  wire-speed  and  non-Wodcing  performance 
Recent  Tolly  lab  tests  confirmed  that  the  Dell  PowerConnect  3248  outperformed  industry 
leaders  bY  as  much  as  47%,  Plus,  the  PowerConnect  5224  has  been  lauded  by  Toni  H»ift»are 
Guide  for  its  perfamance  and  manageability  features  for  the  price  PowerConnect  switches 
also  are  highly  interoperable  and  scalable,  making  them  ideal  for  building  a  first-time  network 
or  expanding  your  existing  one  So  not  only  will  you  get  oneKtf-a^cind  Dell  performance  for  less 
but  perhaps  mote  importantly,  there'll  be  fewer  headaches  too. 
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Sybase  Seeks  to  Secure  Mobile  Data 


BY  MATT  HAMBLEN 

Sybase  Inc.'s  mobile  software 
subsidiary  last  week  an* 
nounced  a  security  tool  that’s 
designed  to  let  networic  man* 
agers  zap  data  from  lost  or 
stolen  laptop  computers  and 
Pocket  PC  handheld  devices. 

The  Zap  It  feature  is  one  of 
several  enhancements  that 
Dublin,  Calif.-based  iAny* 
where  Solutions  Inc.  is  adding 
to  its  Manage  Anywhere  Stu¬ 
dio  software  as  part  of  an  up¬ 
grade.  IT  managers  can  con¬ 
figure  the  security  feature  to 
erase  sensitive  data  when  sys¬ 
tems  are  turned  on  without 
the  proper  passwords,  accord¬ 
ing  to  iAnywhere  officials. 

Other  new  features  include 
tools  for  remotely  installing 
operating  system  updates, 
providing  Web-based  help 
desk  support  and  tracking  in¬ 
ventories  of  mobile  devices 
and  software  packages,  iAny¬ 
where  said.  The  Manage  Any¬ 
where  Studio  S  upgrade  is  due 
to  ship  Feb.  28. 

Tap' Pnitectxxi 

‘^e’ve  chained  laptops  to 
desks,  but  someb<^  will 
come  along  and  use  a  bolt  cut¬ 
ter  to  take  one,"  said  Ben  Bak¬ 
er,  IT  manager  at  PDS  Re¬ 
search  Inc.,  a  Louisville,  Colo., 
company  that  coordinates  pul¬ 
monary  clinical  testing  for 
pharmaceutical  companies. 
PDS  plans  to  install  iAny- 
where’s  upgraded  software  on 
each  new  laptop  it  rolls  out. 

A  lost  laptop  that  contains 
testing  data  atout  a  new  drug 
being  developed  by  a  PDS 
client  could  be  worth  millions 
of  dollars  to  rival  pharmaceu¬ 
tical  makers,  Baker  said.  IT 
staffers  will  set  the  Zap  It  fea¬ 
ture  to  delete  PDS’s  custom 
software  and  all  the  data  con¬ 
nected  to  it  if  a  user  doesn't 
connect  to  the  company’s  net- 
worit  within  a  prescribed  peri¬ 
od  of  time. 

Features  similar  to  Zap  It 
have  been  added  to  a  variety 
of  products  sold  by  iAny- 
Triiere's  conq)etitors  during 
the  past  six  mcmths  or  so,  said 
Stephen  Drake,  an  analyst  at 
IDC  in  Framingham.  Mass. 


For  example.  Research  In 
Motion  Ltd.  offers  a  data-dele- 
tion  capability  for  use  with  its 
BlackBerry  handhelds,  accord¬ 


ing  to  Drake.  XcelleNet  Inc. 
and  Synchrologic  Inc  also  sell 
mobile  device  management 
tools  with  "poison  pill"  func¬ 


tionality,  be  said. 

"There’s  a  real  need  to  man¬ 
age  and  administer  mobile  de¬ 
vices.  especially  the  small  de¬ 
vices  that  are  much  easier  to 
lose,”  Drake  noted.  Despite  a 
dip  in  the  sale  of  handhelds  in 


recent  months  (QuickLink 
36045],  IDC  profects  contin¬ 
ued  growth  for  software  that 
can  manage  mobile  devices, 
track  hardware  inventories 
and  automate  the  distrftnition 
of  software  to  end  users.  I 
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CONNECT  THE  ORCHESTRA 


I  AND  THE  CONDUCTOR. 

I 


.NET  connected  software  from  Microsoft  lets  you  quickly  Integrate  all  your  enterprise 
applications,  so  you  can  automate  your  business  processes.  Vour  goal  is  to  get  all 

the  aspects  of  your  enterprise  working  m  concert.  Your  reality  is  filled  with  disparate 
systems  that  clash  or  fail  to  connect  altogether.  .NET  connected  software  from  Microsoft 
provides  powerful,  visual  tools  that  help  you  easily  build  and  maintain  an  enterprise 
application  integration  solution  based  on  industry  standards  such  as  XML.  So  it  works  with 
the  applications  you  have,  as  well  as  those  you  adopt  in  the  future.  To  learn  more  about 
Microsoft  s  EAI  solutions  go  to  microsoft.com/inlegration  Software  for  the  Agile  Business. 


22 


CMPimwilll  Fikuntl.Mn 


OPINION 


■v.computerworld.coin 


PATRICIA  KEEFE 


Securing  Credibility 


The  slammer  worm  was  aptly  named. 

The  critical  fallout  from  the  latest  in  a 
string  of  debilitating  viruses  slammed 
vendors  and  users  alike,  and  rightly  so. 
Users  took  a  hit  for  not  heeding  endless 
warnings  about  the  need  to  keep  abreast  of  security 
patches,  and  vendors  got  smacked  for  shipping  crap¬ 
py  software  in  the  first  place.  The  industry’s  credi¬ 
bility  is  on  the  line,  and  little  wonder. 


Slammer,  if  you've 
been  hibernating,  is  a 
self-propagating  worm 
that  attacked  a  knoum 
and  readily  fixable  vul¬ 
nerability  in  Microsoft 
SQL  2000  Web  servers 
on  Jan.  25.  spreading 
some  250  times  faster 
than  Code  Red.  according 
to  a  study  released  last 
week  by  a  coalition  of  se¬ 
curity  experts. 

Ever  more  advanced 
malicious  programs,  and  the  malcon¬ 
tents  and  showoffs  who  construct 
them,  are  going  to  continue  to  prolif¬ 
erate.  That’s  a  given,  especially  since 
the  number  of  software  vulnerabili¬ 
ties  found  in  2002  (2,524)  rose  82% 
over  2001.  according  to  security  ven¬ 
dor  Symantec's  biannual  “Incident 
Security  Threat  Report."  which  was 
released  last  week.  Worse  is  the  ac¬ 
celerating  pace  of  new.  smarter 
viruses  —  7,000  in  the  past  year 
IQuickLink  35428). 

It  should  be  clear  that  companies 
on  both  sides  of  the  fence  need  to 
stop  dithering  and  engage  in  some 
constructive  action.  And  it  should  be 
obvious  by  now  that  IT  users  must 
employ  preemptive  measures  and 
have  disaster-response  policies  in 
place,  ready  to  go  at  the  first  whiff  of 
another  viral  onslaught. 

You'd  think  that  by  now  the  long, 
sad  history  of  vendor  security  mis¬ 
steps  would  be  over.  But  it's  become 
even  more  apparent  that  you  can’t 
rely  on  your  software  vendors.  De¬ 
spite  Microsoft's  bravado  of  a  year 


ago,  when  it  claimed  that 
it  was  going  to  “lead  the 
industry  to  a  whole  new 
level  of  trustworthiness  in 
computing,”  it  hasn’t  got¬ 
ten  very  far.  In  fact,  the 
company  kicked  off  the 
year  with  several  security 
alerts.  It’s  alerts  like 
these,  and  the  ensuing  pa¬ 
rade  of  patches,  that  are 
driving  users  nuts. 

I  jst  week's  Page  One 
story  “Unprepared  Firms 
Slammed"  ((^uickLink  36044]  showed 
that  it’s  difficult  for  strapped  IT  de¬ 
partments  to  keep  up.  due  to  a  lack 
of  lime,  money  or  staff.  And  it  does¬ 
n't  help  when  the  patches  come 
packing  their  own  peck  of  trouble. 
Last  week.  Microsoft  had  to  pull  a 
.security  patch  for  Windows  NT  4.0 


because  it  was  crashing  the  operat¬ 
ing  system  it  was  supposed  to  be 
helping.  But  don't  think  that  Micro¬ 
soft  is  alone  in  bedeviling  IT  in  this 
manner  It  isn't. 

It  seems  everyone  has  something 
to  prove  on  the  security  front.  We're 
hearing  rumblings  of  an  IT  credibili¬ 
ty  gap,  usually  pegged  to  Y2k  expen¬ 
ditures.  dot-com  blunders  and  un¬ 
realized  ROI  from  huge  projects  like 
ERP.  You  could  argue  that  the  securi¬ 
ty  issue  casts  a  longer  shadow  over 
IT's  effectiveness.  It’s  certainly  more 
immediate,  and  its  impact  is  felt 
from  the  boardroom  to  the  desktop. 

Yet  no  one  group  can  stand  alone 
when  it  comes  to  combating  cyber- 
crime  and  boosting  its  credibility.  IT 
needs  better  products,  fewer  fixes 
and  easier-to-use  patches  from  ven¬ 
dors.  Vendors  need  IT  to  use  the 
toots  that  are  already  available  and 
to  close  the  door  behind  kno>%'Ti  vul¬ 
nerabilities.  The  government  needs 
IT  to  report  attacks,  formulate  and 
enact  security  policies,  and  join  the 
effort  to  demand  certification  stan¬ 
dards  for  security  products. 

Companies  absolutely  need  Inter¬ 
net  access  and  reliable  systems.  All 
parlies  must  act  in  synchronicity. 
Unless  we  all  work  together,  we  may 
find  ourselves  caught  up  in  a  viral 
spiral,  hardly  able  to  work  at  ail.  I 
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PlaceWare 
DealStiU 
Leaves  Gap 

MICROSOFT'S  pur¬ 
chase  of  PlaceWare 
Inc.  is  an  effort  to 
supplement  the  company’s 
meager  offerings  in  collaboration 
lechnolog)'.  But  it  doesn't  answer  the 
question  about  how  Microsoft  will  sat¬ 
isfy  the  on-premise,  enterprisewide 
collaboration  needs  of  Windows  users. 
PlaceWare  is  a  hosted  service  for 
which  users  pay  a  fee. 

For  those  seeking  an  on-premise  op¬ 
tion.  IBM  has  already  spread  out  its 
road  map  to  move  customers  from 
Domino  to  WebSphere.  DB2  and  TivolL 
Providing  on-premise  technology 
makes  sense  for  some  users  because  it 
can  push  the  cost  down  to  pennies  per 
minute.  Most  collab¬ 
oration  technolt^ 
decisions  are  made  at 
the  departmental  lev¬ 
el.  But  by  having  a 
single,  in-house  stan¬ 
dard.  businesses  can 
more  effectively  use 
their  corporate  pur- 
chasii^  power. 

Sure,  some  compa¬ 
nies  are  better  off 
renting  collaboration 
tools  on  an  ad  hoc 
basis  from  WebEx,  PlaceWare.  Rain- 
dance  and  others  because  of  relatively 
low  usage  levels  or  because  those  ser¬ 
vices  don’t  need  to  integrate  with  cor¬ 
porate  applications.  For  them,  there's 
little  value  in  an  enterprise-level  col¬ 
laboration  system. 

But  for  those  that  are  plotting  an 
overall  collaboration  strategy  (for  ex¬ 
ample.  to  integrate  in-house  applica¬ 
tions).  bolting  that  software  to  a  host¬ 
ed  collaboration  service  such  as  Place- 
Ware  isn't  the  most  elegant  solution. 
Building  links  from  a  CRM  or  ERP  ap¬ 
plication  or  a  database  to  a  collabora¬ 
tion  technology  is  going  to  be  a 
headache  without,  for  example,  con¬ 
trolling  upgrades. 

That’s  why  Microsoft's  purchase 
falls  short  of  articulating  a  complete 
collaboration  strategy.  It  also  doesn't 
address  Microsoft's  desire  to  embed 
collaboration  tools  using  XML  (and 
probably  SOAP.  UDDI  and  WSDL) 
into  .Net.  which  would  include  capa- 
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The  slammer  worm  was  aptly  named. 

The  critical  fallout  from  the  latest  in  a 
string  of  debilitating  viruses  slammed 
vendors  and  users  alike,  and  rightly  so. 
Users  took  a  hit  for  not  heeding  endless 
warnings  about  the  need  to  keep  abreast  of  security 
patches,  and  vendors  got  smacked  for  shipping  crap¬ 
py  software  in  the  first  place.  The  industry’s  credi¬ 
bility  is  on  the  line,  and  little  wonder. 


Slammer,  if  you've 
been  hibernating,  is  a 
self-propagating  worm 
that  attacked  a  known 
and  readily  ftxable  vul¬ 
nerability  in  Microsoft 
SQL  2000  Web  servers 
on  Jan,  25.  spreading 
some  250  times  faster 
than  Code  Red.  according 
to  a  study  released  last 
week  by  a  coalition  of  se¬ 
curity  experts. 

Ever  more  advanced 


^o,  when  if  claimed  that 
it  was  going  to  “lead  the 
industry  to  a  whole  new 
level  of  trustworthiness  in 
computing.*'  it  hasn't  got¬ 
ten  very  far.  In  fact,  the 
company  kicked  off  the 
year  with  several  security 
alerts.  It's  alerts  like 
these,  and  the  ensuing  pa¬ 
rade  of  patches,  that  are 
driving  users  nuts. 

Last  week’s  Page  One 
story  ''Unprepared  Firms 


malicious  programs,  and  the  malcon-  1  Slammed”  [QuickLink  36044]  showed 


tents  and  showoffe  who  construct 
them,  are  going  to  continue  to  prolif¬ 
erate.  That’s  a  given,  especially  since 
the  number  of  software  vulnerabili¬ 
ties  found  in  2002  (2.524)  rose  82% 
over  2001.  according  to  security  ven¬ 
dor  Symantec’s  biannual  “Incident 
Security  Threat  Report,"  which  was 
released  last  week.  Worse  is  the  ac¬ 
celerating  pace  of  new,  smarter 
viruses  —  7,000  in  the  past  year 
(QuickLink  35428]. 

It  should  be  clear  that  companies 
on  both  sides  of  the  feiK:«  need  to 
stop  dithering  and  engage  in  some 
constructive  action.  And  it  should  be 
obvious  by  now  that  IT  users  must 
employ  preemptive  measures  and 
have  disaster-response  policies  in 
place,  ready  to  go  at  the  first  whiff  of  ' 
another  viral  onslaught. 

You'd  think  that  by  now  the  long, 
sad  history  of  vendor  security  mis¬ 
steps  would  be  oven  But  it’s  become 
even  more  apparent  that  you  can’t 
rely  on  your  software  vendors.  De¬ 
spite  Microsoft's  bravado  of  a  year 


that  it's  difficult  for  strapped  IT  de¬ 
partments  to  keep  up,  due  to  a  lack 
of  time,  money  or  staff.  And  it  does¬ 
n't  help  when  the  patches  come 
packing  their  own  peck  of  trouble. 
Last  week,  Microsoft  had  to  pull  a 
security  patch  for  Windows  NT  4.0 


because  it  was  crashing  the  operat¬ 
ing  system  it  was  supposed  to  be 
helping.  But  don't  think  that  Micro¬ 
soft  is  alone  in  bedeviling  IT  in  this 
manner.  It  isn't 

It  seems  everyone  has  somethii^ 
to  prove  on  the  security  front  We're 
hearing  rumblings  of  an  IT  credibili¬ 
ty  gap.  usually  pegged  to  Y2k  expen¬ 
ditures,  dot-com  Munders  and  un¬ 
realized  ROI  from  huge  projects  like 
ERP.  You  could  argue  that  the  securi¬ 
ty  issue  casts  a  longer  shadow  over 
rrs  effectiveness.  It’s  certainly  more 
immediate,  and  its  impact  is  felt 
from  the  boardroom  to  the  desktop. 

Yet  no  one  group  can  stand  alone 
when  it  comes  to  combating  cyber¬ 
crime  and  boosting  its  credibility.  IT 
needs  better  products,  fewer  fixes 
and  easier-to-use  patches  from  ven¬ 
dors.  Vendors  need  IT  to  use  the 
tools  that  are  already  available  and 
to  close  the  door  behind  known  vul¬ 
nerabilities.  The  government  needs 
IT  to  report  attacks,  formulate  and 
enact  security  policies,  and  join  the 
effort  to  demand  certification  stan¬ 
dards  for  security  products. 

Companies  absolutely  need  Inter¬ 
net  access  and  reliable  systems.  All 
parties  must  act  in  synchronicity. 
Unless  we  all  work  together,  we  may 
find  ourselves  caught  up  in  a  viral 
spiral  hardly  able  to  work  at  ail.  I 
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chase  of  PlaceWare 
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supplement  the  company’s 
meager  offerings  in  collaboration 
technology.  But  it  doesn't  answer  the 
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isfy  the  on-premise,  enterprisewide 
collaboration  needs  of  Windows  users. 
PlaceWare  is  a  hosted  service  for 
which  users  pay  a  fee. 

For  those  seeking  an  on-premise  op¬ 
tion.  IBM  has  already  spre^  out  its 
road  map  to  move  customers  from 
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basis  from  WebEx.  Place^^re,  Rain- 
dance  and  others  because  of  relatively 
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vices  don’t  need  to  integrate  with  cor¬ 
porate  applications.  For  them,  there's 
little  value  in  an  enterprise-level  col¬ 
laboration  system. 

But  for  those  that  are  plotting  an 
overall  collaboration  strategy  (for  ex¬ 
ample,  to  integrate  in-house  applica¬ 
tions).  bolting  that  software  to  a  host¬ 
ed  collaboration  service  such  as  IHace- 
Ware  isn't  the  most  elegant  solution. 
Building  links  from  a  CRM  or  ERP  ap¬ 
plication  or  a  database  to  a  collabora¬ 
tion  technology  is  going  to  be  a 
headache  without,  for  example,  con¬ 
trolling  upgrades. 

That's  why  Microsoft's  purchase 
falls  short  of  articulating  a  complete 
collaboration  strategy.  It  also  doesn't 
address  Microsoft's  desire  to  embed 
coUaboratioo  tools  using  XML  (and 
probably  SOAP.  UDD!  and  WSDL) 
into  .Net,  which  would  include  capa- 
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Storage  Solutions  and  Edui 

STORAGE  Register  today  to  attend  the 
premier  event  on: 

NETWORKING  •  storage  Managemant 

\y\#  fi  1  n  •  Enterprise  kifraabiMlwi 
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April  14-17, 2003 
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•  Business  ConOnuily 

•  Data  Management  and  j 

•  Emerging  Technohtfw 
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Are  you  wrestling  with  storage  and  data  management  in  today's 
challenging  business  climate?  Is  your  infrastructure  under 
increas^  pressure?  Are  business  continuity  worries  keeping  you 
up  at  night?  Then  attend  Storage  Networking  World  (SNW),  the 
only  conference  where  IT  Managers  and  professionals  get  an 

See  and  Hear  Regis  McKenna _ 

a  Regis  McKenna 

VmlmcJSTaSAHlIw ' 


Sepmating  Hype  from  RaaMy 


Rnd  Out  How  CIOs  Are  Coping 


Ulrich  Seif 
Ewaao 


Steve  Romaine 

CkW  ArcttiKl  T)m  HirtM 
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See  the  World’s  Best 

Storage  Interoperability 
and  Solutions  Demo 


ki  our  worid-dass,  acclaimed 
kiteroperabaty  and  Solutions  Demo, 
youl  not  only  see  real-flfe 
configurations,  youl  lour  the  Demo 
na  and  dbeuK  «M)  experts  the 
technical  configurations  and  how 
they  may  apply  to  your  business. 


SNiA-endorsed  education,  a  hand's  on  view  of  the  world's  only 
SMIA'Sanctioned  Interoperability  and  Solutions  Demo,  and 
access  to  legions  of  peers,  experts  and  solutions  you  won't  find 
anywhere  else. 


HearReal-Worid 
User  Implementation 
Case  Studies 

At  Storage  Networking  World. 
you1l  see  IT  managers  and  pro¬ 
fessionals  describe  how  th^ 
implemented  key  storage  tech¬ 
nologies  in  today's  world.  You'll  learn  from  their  valuable 
lessons  and  have  an  opportunity  to  network  with  them. 

Get  an  Education 
Endorsed  by  the 
SNIA 

•  A  Primer  delivering  basic  stor-  i 
age  concepts,  terminology  and  I 
business  applications. 

•  Exclusive  SNIA-produced  and  Delivered  Tutorial  Sessions, 
offering  immeckately  impiementable  bps.  toots  and  tech¬ 
niques  that  cover 

•  Disaster  Recovery,  Bado^j/Restore  and  High  Availability 

•  Securing  and  Managing  Your  Storage  Networks 

•  Networking  for  Storage  ktenagers.  Virtualization, 
and  IP-based  Storage  Technology 

See  the  World’s  Largest  Storage 
Industry  Expo  , 


Youl  participate  in  live  demonstra¬ 
tions  and  meet  exhibiting  companies 
specializing  in  the  latest  data 
management  and  storage  networking 
products  and  services. 


For  more  information  and  to  register, 
visit  www.snwusa.com/expo  or  call  1-800-883-9090 

0-808020-8159) 


Witness  User  Case  Studies  and  Hear  from  Ind 
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Registration 


Options  for  IT  End-Users* 


General  Confeience  Package  (Apt  15.16) 

(induMs  En».  Meals  and  RecepKns) 


For  dotaris.  updates,  and  to  regista  vW  www.amruaaxonVeipo. 


S<X)en«IOpHi  E«o.BHiaOm>.ln 


WednMday.  Apriiie 


Earlybird  Registration 

(through  MareMst) 


I  eODem-tSapMi  &pe.B^tartiiia. 


\ 
r  * 


Pre-Rogistratiofl 

(BvdU^Aoninih) 


S1.095 


On*Site  Registration 

(aherAonirtih) 


Total  4-day  Package  (Apr.  14.15. 16. 17):  $1,290  $1,490  $1,690 

(Includes  Oeneial  Conterenca  ^ehage.  Teehncal  and  Bueness  Iiado.  SNUt-croduced  Tutonafe.  SNM  Cerlihcalon  *1esi-ltead|f'  Courses.  Expo.  Meals  and  ReceBnns) 

Options  for  fT  Vendors** _ 


Total  4-day  Package  (Apr.  M,  15. 16, 17):  $1290  $1,490  $1,690 

(ivaSaUe  to  Sponsonng  Vendors  and  Ihw  Resefcrs/lntegralors.  Indifitrii  ConsuRanis.  and  Storage  Sotubons  knotanwrtois) 


Non-Sponsoring/Exhibftirtg  Vendor  Package: 


Submit  your 
nomination  today  at 
www.snwusa.com 
or  email  Nanette 
Jurgetewicz  at 
nanettejurgeiowicz^ 
co(nputerworld.com 


Travel  and  Accommodations  I  Pre-(!onference  Golf  Outing 


lOG  Tnvel  is  the  official  tnvel  cotnpa-  ^KTr 
ny  tar  Stwage  networking  World.  They 
are  your  one-stop  shop  tar  eKdusm 
discaunled  rales  on 
hotel  accommodations. 

Tomeeneyouraccotranadabans:  _ 

visK  WWW  JtaaeMLeam  OR  cal  Va00-S40-22S2 
(arVS(»aZO«Sa) 


IDG  Compimertary 
GoUOulIng 
iorRegist^ 
ITUseis 


The  PrrContarence  Ooll 

Ouiine  at  The  Mrar  Cause  « IMdtae.  located  at  ffii 
JW  klinten  Oaaarl  Rdge  iiseort  IS  eoniimartanr  (SffiS 
utaa)  tar  repMued  rr  End-Users  (odMr  partidpanis. 
indudna«onntsand*andots.mayplaronan*aaaiiai- 
sUa' bads  and  ait  lesponaiMe  tar  at  ipticdde  goR 
eubng  eqanies). 

Fuddate  contact  Chns  Leper  at  VMIMOMTT 
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Co-owMd  *  Produced  by 

CMfIBMU 

Cy-owned  A  Endowed  by. 


Application  for  Conference  Registration 


TO  REGISTER: 

•  Fax  this  form  to  508-626*8524 

•  Or  register  onKne  at  www.snwusa.co(n/expo 
You  will  receive  a  confirmation  via  email 


QUESTIONS? 

1  •  Cal:  our  Customer  Service  Line  at  800-883*9090 
I  •  Emai  srrwregScornputerwvIdxom 


COOL  EXPO 

Options  for  IT  End-Users* 

Eartybird  Registration 

(ttvougli  March  ») 

Pre-Registration 

(mroutyi  April  rW)) 

On-Site  Registration 

(after  ApnHIOi) 

General  Conference  Package  (Apr.  15. 16). 

(Incjudes  Ewo.  M«si5  and  Receptions) 

□  $1,095 

Total  4-day  Package  (Apr.  14,15,16.17);  □  S1,290  □$1,490  □  $1,690 

(Includes  General  Conletence  Padege.  TecTmical  and  Business  Tracto.  SWA- produced  Tutorials.  SNIA-Cemticalw  'Test- Ready’  Courses  Ejbo.  Meals  and  Recepiws) 

Options  for  IT  Vendors** 

Total  4-day  Package  (Apr.  M,  15, 16. 17).  □  $1,290  □  $1,490 

(Avalatile  lo  Sponsomg  Wndors  aKt  Iher  ReseHers/imegtators.  Industry  ConsuBanis  and  Storage  Sections  knplemenlors) 

□  S1.690 

Non-Sponsonng/Exhibiting  Vendor  Package: 

□  $5,000 

□  $5,000 

□  $5,000 

ReKistration  InfoimatioD:  (This  serction 

must  be  completed  in  order  to  process  your  application) 

Comoanv; 

Suite.  Apt.,  etc.: 

State/Prov: 

Zip/Postal  Code: _ 

Extension; 

E-Mail  Address: 

Badge  Name: 

□  Special  Services  Required?  ilfteai 

>e  atuch  written  descripriani 

WmUa  yrwi  nkr  to  jwlioeiMtLiM  uhntH  playing  in  the  golf  ondng  On  Moitdav.  Aaril  WUi  (PM)?  QYdS  □  No 

FIcMe  iBdkate  your  prefemaeotilmiice  din  site:  JS  SL  □  XL  □  XXL  □  XXXL 


bUities  such  as  Passport  Furthermore, 
the  company  has  yet  to  release  an  in* 
stant  messaging  package  as  part  of 
Windows  Server  (that’s  slated  for  the 
third  quarter),  key  to  an  integrated 
collaboration  system. 

According  to  Mike  Gotta,  an  analyst 
at  Meta  Group,  there  also  are  some 
architecture  challenges  to  the  Place* 
Ware  deal.  Microsoft  will  have  to  port 
PlaceWare  to  the  Windows  Server  op¬ 
erating  system  (it’s  now  based  on  the 
Java/Sun  platform  and  isn’t  >Iet-certi* 
fled).  All  this  has  to  happen  before  in¬ 
tegration  into  portals,  prefect  manage¬ 
ment  applications,  the  Office  suite. 
Wmdows  Messenger  and  Exchange 
can  take  place.  Plus,  the  purchase 
doesn’t  clarify  plans  for  the  Real  Tune 
CommunicatiMis  component  of  Win¬ 
dows  Server  due  later  this  year. 

Gotta  hopes  Microsoft  will  spell  out 
how  on-premise  conferencing  and  col¬ 
laboration  within  Windows  and  with 
real  Web  services  components  will 
take  place. 

Until  then,  enterprise  customers 
will  be  kept  waiting.  Or  go  to  IBM.  I 

DAVID  FOOTE 

rrjob 

Tnerwis  Yield 
Surprises 

IN  HIS  FIRST  state  of  the 
Union  si)eech,  President 
Bush  challenged  Ameri¬ 
cans  to  consider  some  form  of 

government  service  during  their  life¬ 
times.  I  don't  necessarily  think  he  had 
public-sector  IT  iobs  in  mind,  but  pri¬ 
vate-sector  rr  workers  are  more  ^- 
gressively  seeking  fobs  in  federal  and 
state  government,  according  to  my 
firm’s  latest  quarterly  research,  which 
is  compiled  continual  tracking  of 
nearly  32,000  IT  professionals,  36%  of 
whom  work  in  organizations  with 
SSOO  million  or  more  in  revenue  or 
S3  billion-plus  in  total  assets. 

r>n  you  blame  disaffected,  stressed* 
out  workers  with  worthless  stock  op¬ 
tions  for  suddenly  wanting  the  more 
relaxed  work  envirorunent.  better  fob 
security,  fully  paid  femily-feieadly 
benefits  and  shorter  hours  of  the  pub¬ 
lic  sectOT?  Especially  those  who  risk 
losing  their  fobs  permanently  to  off¬ 
shore  technicians,  contractors  and 
part-time  workers  who  can  work  more 
cheaply  and  provide  IT  executives 
greater  flexibility  in  responding  to 


shiftily  business  needs. 

SoK^alled  permanent  lay- 
ofl&  are  a  serious  employ¬ 
ment  trend,  iq>pearing  not 
just  in  our  research  but  also 
in  a  report  issued  in  August 
by  the  Bureau  of  Labor  Sta¬ 
tistics  that  confinned  the 
b^innings  of  structural 
downsizing  more  than  a 
decade  If  that’s  not  am¬ 
ple  reason  for  IT  workers  to 
be  concerned,  consider  the 
thousands  of  manufacturing 
and  aerospace  that  van¬ 
ished  to  foreign  lands  in  the 
last  century. 

As  for  IT  compensation. 

2002  was  a  tough  year,  but  it  had  its 
bri^t  spots.  Ovet^  base  salaries  for 
8S  IT  positions  surveyed  in  our  re¬ 
search  declined  by  an  average  of  2B%. 
and  cash  bonuses  paid  out  fell  by  32%. 

Bucking  the  downward  trend, 
salaries  for  corporate  security  posi¬ 
tions  increased  by  an  average  of  S.5% 
in  2002,  with  touj  compensation  up 
3  J%  as  bonuses  declined  by  a  less  dra¬ 
matic  94%.  Moreover,  premium  pay  for 
security  certification  bonuses  Im 
risen  1L3%  in  value  in  2002  and  an 


even  more  impressive  31% 
over  the  past  two  years, 
thanks  to  several  technical 
niche  certifications  from 
the  SANS  Insticute  and  re¬ 
newed  interest  in  the  man¬ 
agement-oriented  Certified 
Information  Systems  Secu¬ 
rity  Professional  and  C;ati- 
Information  Systems 
Auditor  certifleatiofts:  All 
registered  between  11%  and 
38%  growth  last  year. 

Certifications  are  more 
popular,  partly  for  validat¬ 
ing  training  expenses  and 
pay  adfustments  with  to¬ 
day's  cost-conscious  exec¬ 
utives.  Median  premium  pay  for  54 
technical  certifications  hi»  grown  a 
surprising  0.5%  over  the  past  two 
dn^ful  years  (even  with  a  modest 
3J%  decline  in  2002).  led  not  fust  by 
security  but  also  by  solid  perfor¬ 
mances  last  year  by  certifications  in 
protect  management,  Linux  (up  17%). 
and  networking  (most  notably  Nov¬ 
ell's  Ortified  Novell  Engineer  and 
Master  Certified  Novell  Engineer). 

Also  hot  Voice  over  IP,  Wireless 
Markup  Language  (WML),  OB2. 


VoieeXML  and  SAP’s  Advanced  Busi¬ 
ness  Applicadon  Programming  lan¬ 
guage  skills  all  grew  in  value  in  2002. 
Highest  paying?  Rapid  application  de- 
velopment/extreme  pfogramming. 
XML  SQL  Server.  WML  and  Oracle 
database  skills. 

Hot  fob  segments  for  2003.  according 
to  our  researdu  are  security,  netwoik 
man^ement.  enterprise  infrastructure 
and  archiiectuie.  database,  SAP-related 
development,  protect  raanagrmcoi.  and 
profect-based  work  im|:rienieoting  cus- 
tomer-fedng  systems  and  processes. 

Want  to  know  what  accounts  most 
for  IT  workers'  current  predicaments? 
Career  choices  they  made  tong  before 
the  recessioiL  Those  choosing  tedi- 
oology  iq>eciaUzatioos  got  lu^  if 
they  ptdeed  the  ri^  vendor  or  niche 
technology.  While  missing  out  on  the 
many  benefits  specialists  enfoyed  in 
the  boom  times,  those  who  took  the 
generalist  path  have  generally  adiqMed 
I  better  to  today’s  conditions  and  have 
I  the  most  employment  r^ipoituniries.  9 
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Offshore  Threats 

The  efTMWe  outsafOnp  in* 
dustry  fix  prooranvnno  and 
develoomeni  oonltnues  to  grow 
[QuickUnks  35666  mdaeOCn). 
and  Itw  latest  phase  is  the  most 
dangerousofal.f^opleinfTman' 
agement  today  got  Mr  start  as 
proQranvneis.  database  analifsts  or 
perhaps  even  at  the  kMty  help 
desk,  txjl  now  Me  jots  are  berg 
sent  oversees.  WMe  this  may  ap¬ 
pear  sound  m  the  short  term,  the 
long-term  rqiercussrons  oi  (his 
bratn  dram  wi  menilest  themselves 
in  an  e«poralion  of  our  competi¬ 
tive  advantages. 

I  am  al  for  tw  H-tt  program, 
whidi  txings  sIML  educated  peo¬ 
ple  to  our  shores.  But  I  fear  we  are 
grwing  away  too  much  of  otf  Mure 
by  sending  sMIad  jobs  overseas. 
Terry  She* 

Orrector  The  Sporting 
News.  St  Louis. 
tshea@sportinffiewi.am 

D  AMO  FOOTF8  preiiction  tails 
to  take  into  aaxxint  the  new 
emphasis  on  IT  and  software  secu¬ 
rity  due  to  concerns  regvring  ter¬ 
rorism  and  cyberMed  attacks. 


READERS'  LEHERS 


Using  companies  external  to  the 
U  £.  Imits  your  abiry  to  screen 
whowiworkoncodeAnyappl- 
caiion  on  a  network  has  (he  poten¬ 
tial  for  trapdoors.  Trojv  horses  or 
remote  software  agents.  R  you  keep 
yoif  developers  in-house.  Rien  you 
have  control  of  who  works  on  what. 
ThomCiMpbil 
Senior  developer.  St.  Peters¬ 
burg,  flo. 


Defects,  Not  Bugs 

I  READ  ONCE  Rwt  saying  software 
has  bugs  is  a  wsy  for  the  soft¬ 
ware  developet  to  dhtance  NmseM 
from  responsMityrBltig  Back* 
(kjkddJnk  362(M1.  The  word  bug 
■npRes  tt«l  ft  crawled  iniD  (he  pro¬ 
gram  somehow;  ft  almost  sounds 
oAe.  Use  the  term  dhbef  and  see 
how  much  harder  R  to  to  ithidin  1 
K  Imples  much  more  strongly  that 
something  needs  to  be  fated. 
LarsSandamm 
Development  manager, 
Mefboume,  Austmlia 


Remote  and  Secure 

The  Aimcil  *10  Bps  for  Beat- 
kg  Virus  Thraels*  [Quickljnk 


35603]  was  guck  and  to  t»  pant 
lot  prolesaionali  who  may  need  ID 
verRywhattherarkandSeamdo- 
mg  to  Imp  (hair  oompMy  secure. 
One  area  not  touched  upon  was  rr 
mola  access.  If  you  alow  empfor 
ees  to  extend  tree  home  Mo  your 
network  you  need  a  sfrang  seoMy 
pokey  that  makes  emptoyeas  share 
someoftoerasponstoililyandac- 
countabity.  For  examoie.  this  pok¬ 
ey  should  stale  that  employees  who 
have  been  granted  termte  access 
shouUnl  turn  oH  automate  wus 
updates. 

Naewa  niaait  vvMie 

CBSP  Seattle 


Hel  Beats  Java 

TNE  NfTCRVCW  tMad ‘Stft 
Exac;  fUng  WI  Boost  Jaim* 
{QuictdJnk35404]wae(yuiem- 
terestina  but  Rich^  Green  was 
way  off  R»  mark  He  sdies.  Hhe 
kler  lealute  to  date  (hat  JM  has 
over  Ja«e  6  not  (he  tachnokgy.  R‘s 
not  imrksling:  Cs  not  tools.  ItsdB- 
trtbubon.* 

Sun  and  the  real  of  toe  rnaior 
JZEE 13  ptayers  (such  as  BCA 
SysMtB.  BM.  OtKie  and  Sytese) 
met  be  cognrani  of  toe  fact  that 


khcrasoftVtoiNlSbitioJMiB 
cunanly  tos  most  athanoad  arvt 
uBa-fnandly  devafovnant  sidle  m 
thaatouslry. 

Can  to  poM  The  key  JBEE  t3 
vendors  don't  cumMRy  poaeass  a 
productofiannoasgoodasklicro' 
softVIsMiSiudtoliettotoadaval' 
oomenflOQfspace.hBncetoeaf- 
trackontotoelliaaaoftJRalplBl- 
iorm  Thare)on.toatNyJ2S1.3 
playets  should  haavky  towel  and 
promotonewdavetapmenilech- 
nototoas  surii  as  &lpBe  to  dosa 

toeoapwtoiMcroBofL 


/T  rewofTh  analyst, 

West  Windsor,  NJ. 

COMPUTQIWORLO  wetoonies 
comments  from  Is  readers.  Lattors 
wi  be  edRed  for  btewty  and  dartty 
They  should  be  addresstto  to  Jamie 
EcUr.  latkn  edlor.  Computarwotkl. 
PO  Box  9171 500  Old  ConpednA 
Rah.  Framndum- btoss.  01701 
Fax  (506)  879^843 
E-mak  fattandcomputerworlilcom. 
Inckide  an  address  and  phone  num¬ 
ber  for  tovnadMe  verAcalioa 
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bilities  such  as  Passport.  Furthermore, 
the  company  has  yet  to  release  an  in¬ 
stant  messaging  package  as  part  of 
WindowTS  Server  (that’s  slated  for  the 
third  quarter),  key  to  an  integrated 
collaboration  system. 

According  to  Mike  Gotta,  an  analyst 
at  Meta  Group,  there  also  are  some 
architecture  challenges  to  the  Place- 
Ware  deal.  Microsoft  will  have  to  port 
Place  Ware  to  the  Windows  Server  op¬ 
erating  system  (it's  now  based  on  the 
lava/Sun  platform  and  isn’t  .Net-certi¬ 
fied).  All  this  has  to  happen  before  in¬ 
tegration  into  portals,  protect  manage¬ 
ment  applications,  the  Office  suite. 
Windows  Messenger  and  Exchange 
can  take  place.  Plus,  the  purchase 
doesn't  clarify  plans  for  the  Real  Time 
Communications  component  of  Win¬ 
dows  Server  due  later  this  year. 

Gotta  hopes  Microsoft  will  spell  out 
how  oD-prcmisc  conferencing  and  col¬ 
laboration  within  Window.s  and  with 
real  Web  services  components  will 
take  place. 

Until  then,  enterprise  customers 
will  be  kept  waiting.  Or  go  to  IBM.  I 

DAVID  FOOTE 

rrjob 

Trends  Yield 
Surprises 

IN  HIS  FIRST  State  of  the 
Union  speech.  President 
Bush  challenged  Ameri¬ 
cans  to  consider  some  form  of 

government  service  during  their  life¬ 
times.  1  don't  necessarily  think  he  had 
public -sector  IT  jobs  in  mind,  but  pri¬ 
vate-sector  IT  workers  arc  more  ag¬ 
gressively  seeking  jobs  in  federal  and 
stale  government,  according  to  my 
firm's  latest  quarterly  research,  which 
is  compiled  from  continual  tracking  of 
nearly  32.000  IT  professionals.  36%  of 
whom  work  in  organizations  with 
$500  million  or  more  tn  revenue  or 
S3  billion-plus  in  total  assets. 

Can  you  blame  disaflfccied.  stressed- 
out  workers  with  worthless  stock  op¬ 
tions  for  suddenly  wanting  the  more 
relaxed  work  environment,  better  job 
security,  fully  paid  family-friendly 
benefits  and  shorter  hours  of  the  pub¬ 
lic  sector?  Especially  those  who  risk 
losing  their  jobs  permanently  to  off¬ 
shore  technicians,  contractors  and 
part-time  workers  who  can  work  more 
cheaply  and  provide  IT  executives 
greater  flexibility  in  responding  to 


shifting  business  needs. 

So-called  permanent  lay¬ 
offs  are  a  serious  employ¬ 
ment  trend,  appearing  not 
just  in  our  research  but  also 
tn  a  report  issued  in  August 
by  the  Bureau  of  Labor  Sta¬ 
tistics  that  confirmed  the 
beginnings  of  structural 
downsizing  more  than  a 
decade  ago.  If  that’s  not  am¬ 
ple  reason  for  IT  workers  to 
be  concerned,  consider  the 
thousands  of  manufacturing 
and  aerospace  jobs  that  van¬ 
ished  to  foreign  lands  in  the 
last  century. 

As  for  IT  compensation.  ~ 

2002  was  a  tough  year,  but  it  had  its 
bright  spots.  Overall,  base  salaries  for 
85  IT  positions  surveyed  in  our  re¬ 
search  declined  by  an  average  of  2.8%. 
and  cash  bonuses  paid  out  fell  by  32%. 

Bucking  the  downward  trend, 
salaries  for  corporate  security  posi¬ 
tions  increased  by  an  average  of  5.5% 
in  2002,  with  toiaJ  compensation  up 
33%  as  bonuses  declined  by  a  less  dra¬ 
matic  9.1%.  Moreover,  premium  pay  for 
security  certification  bonuses  has 
risen  11.3%  in  value  in  2002  and  an 


even  more  impressive  31''i» 
over  the  past  two  years, 
thanks  to  several  technical 
niche  cenifications  from 
the  SANS  Institute  and  re¬ 
newed  interest  in  the  mao- 
agcment-<»ricnted  Certified 
Information  Systems  Secu¬ 
rity  Professional  and  Certi¬ 
fied  Information  Systems 
Auditor  certifications:  All 
registered  between  11%  and 
38%  gn>w*th  last  year. 

Certifications  are  more 
popular,  partly  for  validat¬ 
ing  training  expenses  and 
pay  adjustments  with  to¬ 
day's  cost-conscious  exec¬ 
utives.  Median  premium  pay  for  54 
technical  certifications  has  grown  a 
surprising  0.5%  over  the  past  two 
dreadful  years  (even  with  a  mt»dest 
3.3%  decline  in  2002).  led  not  just  b\’ 
security  but  also  by  solid  perfor¬ 
mances  last  year  by  certifications  in 
project  management.  Linux  (up  17%). 
and  networking  (most  notably  Nov¬ 
ell’s  Ortified  Novell  Engineer  and 
Master  Certified  Novell  Engineer). 

Also  hot:  Voice  over  IP.  Wireless 
Markup  Language  (WML).  DB2. 
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VoieeXML  and  SAP’s  Advanced  Busi¬ 
ness  Application  Programming  lan¬ 
guage  skills  all  grew  in  value  in  2002. 
Highest  paying^  Rapid  application  de- 
velopmeni/extremc  programming, 
XML  SCiL  Server.  WML  and  Oracle 
database  skills. 

Hot  job  segments  for  2003.  according 
in  our  research,  are  security,  network 
management,  enterprise  inftastructure 
and  architecture,  database.  SAP-related 
development,  project  management,  and 
project-based  work  impIcmcntiRg  cus¬ 
tomer-facing  systems  and  procc-sscs. 

Want  to  know  what  accounts  most 
for  IT  workers’  current  predicaments? 
Career  choices  they  nude  long  before 
the  recession,  'ntose  choosing  tech¬ 
nology  specializations  got  lucky  if 
they  picked  the  right  vendor  or  niche 
technology.  While  missing  out  on  the 
many  benefits  specialists  enjoyed  in 
the  boom  times,  those  who  took  the 
generalist  path  have  generally  adapted 
better  to  today’s  conditions  and  has’e 
the  most  employment  opportunities,  k 
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Offshore  TTireats 

The  offshore outsourong m- 
dushy  lor  programming  and 
development  continues  lo  grow 
{QuichLinks  35866  and  36001 ]. 
and  the  latest  phase  IS  the  most 
dangerous  ol  all.  People  mfl  man¬ 
agement  today  got  their  start  as 
programmers,  database  analysts  or 
perhaps  even  at  the  lowly  help 
de^.  but  now  those  fobs  are  being 
sent  overseas  While  this  may  ap¬ 
pear  sound  in  the  short  term,  (he 
long-term  repercussions  oi  this 
bram  dram  wi  manitest  themselves 
in  an  evaporation  ot  our  competi¬ 
tive  advantages. 

I  am  aH  ior  the  H-tB  program, 
which  bangs  skilled,  educated  peo¬ 
ple  to  our  shores.  But  I  (ear  we  are 
giving  away  too  much  of  oif  tuiure 
by  sending  skilled  fobs  overseas- 
Terry  Shea 

Dirertor  of  IS.  The  Sporting 
News.  St.  Louis, 
tsheofgisporrifigncws.t-om 

David  Foote’s  prediction  tails 
to  take  into  account  the  new 
emphasis  on  IT  and  software  secu¬ 
rity  due  to  concerns  regarding  ter¬ 
rorism  and  cyber-based  attacks. 


Usmg  companies  external  lothe 
U.S.  limits  your  ability  to  saeen 
who  wi  work  on  code.  Anyapoli- 
cation  on  a  network  has  the  poten¬ 
tly  tor  trapdoors.  Troian  horles  or 
remote  software  agents.  If  you  keep 
your  developers  in4wuse.  then  you 
have  control  of  who  works  on  what 
Thom  (UmpbeH 
Senior  developer.  St.  /Vrers- 
burg.  flu. 


Defects,  Not  Bugs 

I  READ  ONCE  that  saymg  software 
has  bugs  IS  a  way  for  the  soft¬ 
ware  devtioper  to  distance  himself 
tram  lesponsibilitYCBihng  Back' 
OuicMjnk  35204].  Ihe  word  bug 
implies  that  It  crav^mto  the  pro¬ 
gram  somehow:  It  almost  sounds 
cute  Use  the  temtde/eef  and  see 
how  much  harder  It  s  totriwalue  U. 
H  implies  much  mote  strongly  that 
something  needs  to  be  fued. 
LARSuridstnm 
Development  manager, 
Melbourne.  Ausrrulio 


Remote  and  Secure 

T HE  ARTIOE  no  T«6  for  Beat¬ 
ing  Vrus  Threats*  i(>jickLmk 


35603)  was  quK:k  and  to  the  poml  j 
tor  prolessiortais  who  may  need  to 
venfy  what  the  rank  and  fie  am  do¬ 
ing  to  lieep  their  company  secure. 
Oroareanoltoucheduponwasie- 
moleaccessNyouaHowemploy- 
ees  to  extend  their  home  mo  your 
network,  you  need  a  strong  secunly  j 
policy  that  makes  emfNoyees  share 
someoltheresponsAiilyandac- 
countabdity.  For  examole.  this  pok¬ 
ey  should  stale  (hat  empiovees  who  I 
have  been  granted  remote  access  I 
shouldn't  turn  off  automatic  wus 
updates.  ' 

Ravila  Helen  White 
ClSSfi  ScunJe  I 

.Net  Beats  Java 

T  HE  INTERVCW  tided  *Sun  I 
Exec;  Rufmg  Will  Boost  Java’ 
(OuKkLink 35404)  was  outfe  m- 
(erestmg.  but  Richard  Green  was 
way  off  the  mark  He  states.  The 
kiet  feature  to  date  that  Nefhas 
over  Java  cs  not  the  technology  It's 
not  marketing:  it's  not  toob  K'sdis- 
tnbubon* 

Sun  and  the  rest  ot  the  maior 
J2EE  t.3  players  (such  as  BEA 
Systems.  IBM.  Oracle  and  Sybase) 
must  be  cognuanl  of  the  fact  that 


Mcrasofi  Vouai  Studio  .Net  IS 
currently  the  most  advanced  and 
user -fnendh  development  suite  ffi 
(henckisirY 

Casetfiponi  ThekevJ2K13 
vendors  don't  orendy  possess  a 
product  oHemg  as  good  as  Micra- 
soHVtsuaf Studio  Netmthedevel- 
opmenl  lod  space  hence  the  ai- 
fraciioniottKMicrosolt  .Netpkat- 
kxm  Theiefore.thekBvJ2EE13 
players  shoiNd  heavVy  nvesi  and 
pramolenewdeveiopmenttoch- 
nologies  such  as  Eckpse  to  dose 
the  gap  with  Micrasoft 
Russefl  Ruggiero 
XT  mearvh  analyst. 

U'esr  U-'indsor.  S.f- 

COMPUTERWORLO  welcomes 
comments  from  ns  readers.  Letters 
wi  be  edited  tor  brevtiy  and  darky 
They  should  be  atkkessed  10  Jarme 
Eckte.  letters  editor,  (^omputerworid 
TOBax9(71  SOOOtdComechcut 
Path  Framingham.  Mass  01701 
Fax  (506)  879-4643 
E-maN  tetterVfcornpuierwarldcom 
Include  an  address  «Kj  phone  num¬ 
ber  ior  xnmedttie  venheadon . 

OMve  letters  on  these  and  otwr 
topes  are  on  our  Vteb  ale 
coiHputerwortdxoni/Mlare 


ROBUST  OBJECT  DATABASE 
HIGH  PERFORMANCE  SQL 
MULTIDIMENSIONAL  ACCESS 


next  wave 


IS  IS 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cach^,  the  post-relational  database. 

What  makes  Cache  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cache 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the  largest 
hospitals.  Cache  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  -  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  million  users  in 
88  countries.  Cach^  is 
available  for  Windows, 

OpenVMS,  Linux  and 
major  UNIX  platforms.  Make  Appli^tloni  Fatter 


InterSystems^ 

CACHE 


Downhod  a  fulfy-functional  version  of  Cochi  or  request  it  on  CD  for  free  at  wwwJnterSv5tems.com/t>ost~rekitional 
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IT  for  the  Autobahn 

Claus  Hohmann,  CTO  at  Volkswagen’s  Autostadt  an 
automotive  theme  park  vidiere  customers  can  pick 
up  vehicles  they  custom-ordered  ordine,  talks  about 
the  Autostadt’s  IT  infmtructure  and  the  challenges 
of  keeping  the  complex  running.  PHOt  28 


SECURITY  HANASER’S  JOURNAL 

FTPServarOHefs 
Key  to  the  Store 

Incidents  involving  compromised  servers  at 
Mathias  Thurman’s  company  show  why  it*s 
important  to  have  security  guidelines  for  both 
external-  and  internal-facing  servers.  PlQA  34 


OPINION 

Getting  Out  the  Crystal  Ball 

The  future  of  IT  incltides  a  revival 
of  interest  in  the  network  comput¬ 
er  and  Java,  says  columnist 
Nicholas  Petreley.  PtO*  38 


IT  portfolio  management  tools  apply 
metrics  that  help  analyze  and  priori¬ 
tize  IT  projects,  but  the  products  eire 
still  evolving.  By  Thonrias  Hoffman 


AS  rr  MAN.AGER5 
Struggle  to  do 
more  with  less, 
the  notion  of 
managing  an  or¬ 
ganization's  IT 

assets  like  a  Hnanc^  portfolio  — 
using  a  Buy.  Hold  and  Sell  ap¬ 
proach  —  has  caught  fire  over 
the  past  18  months.  *^6  want  to 
look  at  our  IT  expenditures  more 
from  a  strat^c  business-value 
basis  than  from  a  technical  cost 
basis,”  says  Carl  Ascenzo.  senior 
vice  president  and  CIO  at  Blue 
Cross  and  Blue  Shield  of 
Massachusetts  Inc  in 
Boston. 

Many  new  IT  portfolio 
management  tools  have 
emerged.  Although  a  handful  of 
these  packages  are  sophisticated 
enou^  for  IT  managers  to  ana¬ 
lyze  all  of  the  IT  investment  op¬ 
portunities  within  an  organiza- 
tioo.  many  lack  maturity  and  fea¬ 
tures.  acting  as  little  more  than 
project  management  packages  on 
steroids. 

‘^roe  tools  just  aren’t  very 
broad  or  very  deep.”  says  Mamie 
Ross,  a  Meta  Group  Inc.  analyst 
in  Vancouver,  Britisb  Columbia. 

Ross  and  other  analysts  typi¬ 
cally  break  the  IT  portfolio  man¬ 
agement  tools  market  into  three 
categories:  project  management 
tools,  which  provide  rudimenta¬ 
ry  portfolio  analysis  c^bilities; 
complex  tools  that  are  adept  at 


Balandrig  ,  . 
The  IT  l^rtf olio 


ralgulating  i^iat-if  scenarios  for 
IT  investments;  and  enterprise 
software  tools  from  vendors 
such  as  PeopleSofr  Inc.  and  Ora¬ 
cle  Corp.  that  are  starting  to 
make  a  foray  into  the  market 
Project  management  portfolio 
packages,  such  as  the  one  from 
ProSi^t  Inc.  in  Portland,  Ore., 
primarily  focus  on  managing  in¬ 
dividual  projects  or  a  panoply  of 
prefects  frtxn  start  to  finish.  Al¬ 
though  most  o(  foese  packages 
integrue  well  with  Microsoft 
Project  they  typically  provide 
limited  portfolio  manage¬ 
ment  and  analysis  capabil¬ 
ities.  ”13>ere  is  a  tendency 
(among  vendors]  to  either 
bundle  or  provide  su{^le- 
mental  services  with  these  pack¬ 
ages,”  says  Ascenzo. 

More  s(^>hb^ticated  analytical 
toob  are  offered  by  vendors  such 
as  New  York-based  United  Man¬ 
agement  Technologies  Corp. 
(UMT)  and  Ann  Arbor.  Mich.- 
based  Program  Planning  Profes¬ 
sionals  Inc.,  also  known  as 
Peubed.  UMT  and  Peubed  each 
combine  services  and  software 
aimed  at  "figuring  out  what  your 
processes  are  aixi  managing  your 
portfolio”  by  providing  action¬ 
able  measurements  of  variables 
such  as  cost,  risk  and  resources 
to  help  IT  organizatiems  maxi¬ 
mize  tbeir  IT  investments,  says 
Margo  Vishacion.  a  Giga  Infor¬ 
mation  Group  like,  analyst  based 
in  Norwalk,  ConiL 
While  the  niche  vendors  focus 
on  project  management  and  IT 
pcMtfblio  management  capabili¬ 
ties,  enterprise  software  vendors 
such  as  PeopleSoft,  Onde  and 
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Sbong  in  CQBt  eslin)iiin(L  portfoio 
mellielEi  scemito  pteining  Sid 
nsoine  Acedon.  Good  repodinQ 
lOTi  ncnieon  nnieci. 
hduds  «s  OM1  project  and  le- 
auce  mmgenMnt  look. 


VIM  In  teniB  of  mapping  Marral 
MorMowproceaaeswIhthftsofl' 
ware.  8ul  the  ptorfcjd  atoms  an 
organbtfon  lo  modiv  Ms  mark 
proceaaas  aa  hey  malm  Witt  its 
Mamil  IT  portfolo  managemeni 
nwlhodologies. 


MMiOhl  SanffandKO 

wwwiiuatne9aanginB.carn 


MlftfMMN  BuejneeaEndneNelmak 


Sirongaat  in  proiasBionef  services 
aulomalorL  Relna  hsMiy  on 
Hctoeoft  Anject  for  project  marh 
agemanl  bncKons.  OHan  good 
suftport  for  tie  IT  tMdgedng 
proceasacroas  muHpleafrencies. 


Could  do  a  better  job  wHh  oppor- 
kfiy  monagemenL  partial  in 
tie  arae  of  tfene  and  reeoiice 
manaoemant 


Computer  Associates  International 
Inc  are  beginning  to  make  inroads  in 
the  IT  portfolio  management  space. 

Pet^ieSoft  introduced  Project  Port¬ 
folio  management  capabilities  under 
its  Enterprise  Services  Automation 
package  in  December.  It  lets  customers 
evaluate  the  performance  of  a  project 
against  corporate  objectives,  says 
Chris  Leoi>e.  a  vice  president  of  prod¬ 
uct  strategy  at  the  Pleasanton,  Calif- 
based  company.  PeopleSofr's  IT  port¬ 
folio  management  system  is  more  ad* 
vanced  than  those  of  Oracle  and  CA. 
And  Visitacion  expects  future  releases 
of  PcopleSofl's  offering  to  be  more  so¬ 
phisticated  chan  Pacific  Edge  Software 
Inc.‘s  package  but  not  quite  as  robust 
as  UMTs  tools  in  terms  of  features. 

’The  challenge  with  these  tools  b 
drawing  a  line  between  project  man¬ 
agement  and  portfc^  management.'* 
says  Ian  Cam^U.  president  of  Nucle¬ 
us  Research  Inc  in  Wellesley.  Mass.  At 
the  very  least,  some  of  the  less  sophis¬ 
ticated  loob  bring  structure  to  the  IT 
portfolio  man^ement  process,  says 
CantpbeU.  But  they’re  “just  a  step 
above  project  management  toob  and 
lack  the  ^Uity  to  do  what-if  scenar¬ 
ios.'’ he  says. 

Most  IT  portfolio  managemem  toob 
are  priced  on  a  per-seat  basis,  with  a 
typical  license  starting  at  $50,000  and 
running  to  several  hundred  thousand 


dollars,  depending  on  the  number  of 
users,  the  configuration  and  the 
amount  of  customization  required. 
UMT  prices  its  software  based  on  the 
number  of  business  departments  being 
supported,  typically  starting  at  $75,000, 
says  President  Mike  Gruia.  PeopIeSoft 
offers  a  ‘‘value-based’*  pricing  model 
that's  based  in  part  on  the  customer 
company's  revenue  level,  says  Leone. 

Getting  Started 

For  companies  just  beginning  to  build 
an  IT  portfolio  management  program 
and  create  a  methodology  for  tracking 
and  analyzii^  their  technology  invest¬ 
ments.  vendors  such  as  Pacific  Edge  in 
Bellevue.  V^sh..  and  Business  Engine 
Corp.  in  San  Francisco  are  good  start¬ 
ing  points  in  terms  of  portfolio  analy- 
sb  and  professional  services  automa¬ 
tion  capabilities,  say  analysts. 

Pacific  Edge's  product  —  The  Edge 
for  IT  —  consoU^tes  projects  that  are 
tracked  using  Microsoft  I^oject,  “and 
that’s  where  the  strength  b,**  says  Scott 
Marean,  assbtant  vice  president  of 
program  management  services  at  First 
Penn-Pacitic  Life  Insurance  Co.  in 
Schaumburg,  IlL 

UMTs  software  uses  a  set  of  algo¬ 
rithms  that  help  IT  managers  optimize 
their  resources.  So  if  an  rr  organiza¬ 
tion  has  $300  miliion  worth  of  poten¬ 
tial  prefects  to  pursue  and  only  $50 


million  to  work  with,  the  user  can  in¬ 
put  the  organizatioo's  business  objec¬ 
tives  into  the  software,  which  helps 
prioritize  them  by  applying  algorithms 
to  detennine  udiicb  investments  will 
yield  the  greatest  returns. 

The  software  also  fmds  mbmatches 
in  IT  staffing  resources  —  such  as  hav¬ 
ing  too  many  legacy  system  program¬ 
mers  —  to  help  optimize  supply  and 
demand  between  staff  and  projects, 
says  Mike  Gruia.  president  of  UMT. 

Like  UMT.  ProSighl  also  makes  use 
of  algorithms  to  run  scoring  models 
based  on  fmancial  calculations  such  as 
economic  value  added  and  net  present 
value,  says  John  Cimral,  the  company's 
CEO.  ProSi^t's  scoring  modeU  foctor 
in,  among  other  things,  the  number  of 
users,  the  performance  characteristics 
of  a  system  and  the  hardware  and  soft¬ 
ware  standardization  issues,  be  adds. 

LMtaiions  and  Advances 

One  of  the  shortcomings  of  most  IT 
portfolio  management  toob  b  their  in¬ 
ability  to  “focus  on  tbe  life  cycle  of  an 
asset,"  detennine  the  financial  value  of 
a  software  package  or  piece  of  hard¬ 
ware  and  indicate  whether  or  when  it 
makes  sense  to  retire  that  technology, 
according  to  Meta  Group’s  Ross.  At 
least  one  vendor,  PeopIeSoft.  b  db- 
cussing  the  kinds  of  asset  management 
capabilities  sot^t  by  its  customers  for 


a  future  release,  says  Leone. 

Some  IT  portfolio  management  ven¬ 
dors  are  also  workii^  on  creating  “ex¬ 
ecutive  dashboard"  modules  that  let 
CEOs,  chief  financial  officers  and  oth¬ 
er  senior  managers  view  tbe  results  of 
their  IT  spending  deebions  in  real 
time  and  evaluate  their  IT  investment 
options.  UMT  expects  to  have  a  fiilly 
integrated  dashboard  available  to  cus¬ 
tomers  by  midyear,  says  Gruia. 

Peubed  currently  offers  a  portfolio 
dashboard  that  uses  decision-tree 
structures  and  business  intelligence  to 
provide  business  analytics  around  an 
organization's  portfolio  infornutioo, 
says  CEO  Adriw  Balfour. 

Vendors  still  need  to  fUl  gaps  in  their 
IT  portfolio  management  products.  For 
example,  many  systems  lack  the  ability 
to  assess  risks  —  a  critical  component 
in  evaluating  IT  investments.  ‘'I  don't 
think  any  of  tbe  toob  do  a  great  job  of 
leading  users  to  evaluate  and  measure 
risk."  says  Ross.  I 
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What  one  thing  do  investors  understand 
about  your  company  better  than  you  do? 

Your  competitive  advantage. 


In  an  era  of  disruptive 
change,  Moore  uses  investor 
perspective  to  give  management 
teams  the  strategy  tools  they 
need  to  navigate. 


‘This  book  is  a  must  read  for  CEOs  and  their  executive 
team....  According  to  Geoffrey  Moore,  you  had  better  start 
shedding  non^cote  acbvibes  quickiy  or  your  company 
will  become  a  victim.' 

-VICE  PRESIDENT  DICK  CHENEY 


‘When  you  live  on  the  fault  line,  you  have 
to  reinvent  yourself  every  single  day.' 

-BOB  HERBOLD.  FORMER  EXECUTIVE  VICE 
PRESIDENT  AND  COO.  MICROSOFT 


‘Moore  shows  convincingly  that  technology  and 
capital  market  efficiency  have  fundamentally 
changed  not  just  the  reality  that  all  managers  face, 
but  have  changed  the  way  they  need  to  define, 
measure  and  manage  success.  This  is  a  great  book.' 
-CLAYTON  CHRISTENSEN,  AUTHOR  OF 
THE  INNOVATOR’S  DILEMUA 
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rr  for  the 
Autobahn 


AufosMdr  GmbH  is  Volkswagen  AG’s 
information  and  entertainment  park  in 
Wolfsburg,  Germany,  which  opened  in 
2000.  It  includes  on  outomorive  muse¬ 
um.  on  entertainment  complex  and  a 
place  for  customm  to  pick  up  catto- 
mobiles  custom-ordered  online.  As  chi^ 
technology  offker,aMISHOm/mis 
responsMe  for  the  research  and 
development  of  new  technolo¬ 
gies.  Hohmann  spoke  with  Com- 
puterwoiid's  Undo  Rosencrance 
about  the  Autostodt 's  FT  uifra- 
structure  and  the  urdque  challenges  of 
ninnt/^  die/bdlity. 

Wal  IT  ehdtoNQM  dU  you  face  to  MiQing 
kdUlta^l  owfaa?  The  IS/TT  department 
was  estabUshed  U  months  before  Auto- 
stadt  opened  We  came  on  board  on 
this  project  as  the  last  team,  [but]  we 
fuiisbed  a  complete  IT  infrastructure 
and  all  the  basic  systems  for  car  deliv- 
ery. 

Because  we  are  unique,  we  have  to 
develop  our  own  systems.  That  means 
we  combine  le^cy  systems  of  the 
Volkswagen  Group  worldwide  because 
we  are  delivering  here  Volkswagen 
products  that  are  produced  all  over  the 
world 

The  main  challei^  was  to  provide 
for  a  system  which  integrated  both 
worlds:  The  VW  systems,  which  are 
used  to  move  up  to  5  miUlon  cars  per 
year,  communicate  with  the  Autostadt 
80  that  the  entire  delivery  process 
fonctioos  with  99.99%  reliability.  The 
Autostadt  Is  open  364  days  per  year, 
and  the  systems  must  be  available  for 
a  minimum  of  12  hours  per  day. 

MMtoonsyatHmdUyouclMioM?  The 

Sales  and  Disposition  of  New  Cars  and 
the  New  Car  Transport  systems  are 
based  on  IBM  System/390.  DB2  data¬ 
base  and . . .  CoboL  The  online  inter- 
foces  use  the  IBM  transaction  monitor 
M<^eries  and  BEA  transaction  moni¬ 
tor  TXoeda 

Due  to  the  location  and  system  com¬ 
plexity.  maintenance  can  only  be  car¬ 


ried  out  during  night  hours.  Further¬ 
more.  there  is  also  the  need  to  guaran¬ 
tee  100%  data  transaction  reliability 
and  accessibility.  This  level  of  guaran¬ 
tee  is  provided  through  the  Tuxedo 
system. 

What  other  unqua  business  mads  do  you 
have  to  meat?  Our  IT  infrastruc¬ 
ture  allows  us  to  deliver  daily, 
seven  days  a  week.  600  cars  a 
day  to  our  customers.  Every  de¬ 
livery  is  an  event-oriented  activ¬ 
ity,  and  we  run  special  events  through¬ 
out  the  Autostadt.  These  attractions 
are  all  digitized. 

What  do  yiw  men  by -dkiMiZBtr?  The  ex¬ 
hibits  and  attractioos  in  the  Autostadt 
have  a  show  control  and  run  fully  auto¬ 
mated.  Our  major  project  in  this  field 
was  the  development  of  a  totally  new 
. . .  online  monitoring  system,  usii^ 
Crestron  [Electrcmics  Inc.]  technology, 
where  it  is  possible  for  us  to  check  the 
status  of  each  exhibit  every  second . . . 
r^t  down  to  what  film  is  running  and 


HOurlTinfrastnic- 
turealawsiisto 
deiver  daly,  S8vm  days 

a  week,  600  cars  a  div 

to  our  customers. 


CUUIS  NOHMANN.  CTO. 
VOLKSWAGEN  AUTOSTADT 


I  which  l^t  bulb  is  on,  off  or  defective. 

What  tornvativa  IT  prujads  ara  In  the 
WDrfcs?  We  are  running  via  wireless 
LAN  all  our  outdoor  areas  and . . .  our 
delivery  center.  Our  staff  outdoors  in 
the  theme  park,  as  well  as  in  the  car 
delivery  process  and  in  the  guest 
processes,  use  handhelds  with  wireless 
LANs.  And  we  are  Lmplensenting  a 
Bluetooth  system  for  our  tour  guides 
...  to  support  them  with  little  hand¬ 
held  devices  that  will  give  them  the 
I  data  and  other  facts  they  have  to  build 
into  their  stories. 

This  project  with  Pocket  PCs  and 
Bluetooth  is  the  start  of  providing  our 
employees  with  information  about  the 
exhibits  and  displays  while  mobile  and 
on  the  job.  Integrated  into  the  system 
is  a  basic  localization  process  (via  in¬ 
frared]  so  that  it  is  possible  to  both  go 
straight  to  the  information  based  on 
the  exhibit  that  they  are  standing  next 
to  and  navigate  to  the  mformatioo  for 
other  exhibits.  Vignette  has  been  used 
as  a  basis  to  provide  the  front  end  and 
database  connectivity  for  the  system. 

Whto  ottwr  Mraslructure  projacts  an 

ptawMd?  We  want  to  utilize  the  foil 
scheme  of  voice  over  IP  in  our  cus¬ 
tomer  care  center  with  40  [worksta¬ 
tions].  VOIP  integrates  all  communica¬ 
tion  mediums  within  the  Autostadt  — 
voice,  e-mail,  fax  and  voice  recorder, 
[which  is)  located  on  the  PC.  in  the 
HiPath  Contact  Center  from  Siemens, 
[vriiich  allows]  classic  PBX  connec¬ 
tions  and  voice  over  IP.  all  of  these  in¬ 
puts  are  brought  together  to  improve 
the  performance  of  the  call  center 
agents. 

[We  are  also  woridng  on]  a  new 
Autostadt  Internet  approach,  based  on 
a  content  management  system  [from] 
Vignette.  We  use  Vignette  not  only  for 
the  pure  HTML  pages,  but  also  for 
flash  pages  and  WAP  [Wireless  Appli¬ 
cation  Protocol].  The  WAP  presenta¬ 
tion  of  Autostadt  will  be  changed  to  a 
UMTS  [Universal  MobUe  Telecommu¬ 
nications  System]  presentation  in  the 
coming  months. 

Our  content  team  writes  the  articles, 
inclusive  of  pictures,  fllm  content,  etc., 
directly  in  the  editorial  system,  which 
is  also  Vignette-based.  After  release 
by  the  chief  editor,  the  articles  are 
launched  automatically  to  our  Internet 
presence.  The  Autostadt  provides  an 
InfbSite,  where  current  standards  of 
HTML  are  supported,  and  a  Auto- 
sphere  site,  v^ere  teadii^-edge  and 
future  possibilities  of  the  Autostadt 
presence  shall  be  shown.  This  future 
virtual  wcH'ld  is  also  based  on  Vignette. 


YwhmnlnwiillBaudlltoldwifceilBInc 
nait  to  you  [mu  photo],  Whm  doM  tM  it? 

The  POIs  [point  of  information  termi¬ 
nals]  are  a  live  interfoce  between  visi¬ 
tors  and  the  Autostadt  Here,  visitors 
gain  access  to  various  topics  of  infor¬ 
mation,  both  written  and  visual  in 
nature.  The  challenge  was  to  design  a 
GUI  that  was  understand^le  by  many 
different  nationalities.  The  POI  needed 
therefore  to  be  an  interactive  multi- 
media  tenninaL  Hke  computer  is  an 
industrial  PC  with  a  touch  screen  run¬ 
ning  on  Linux  with  a  special  Web 
browser  frt>m  Munich-based  Jentro 
AG.  We  use  Vignette  for  generating  the 
POI  Internet  site.  The  special  presen¬ 
tation  for  the  POI  is  sent  from  the 
same  servers  as  the  normal  Internet 
presentation. 

The  special  feature  of  the  POI  is  its 
kinetics.  The  display  body  rotates  hori¬ 
zontally  and  moves  vertu^y  if  no 
user  stands  next  to  the  POI.  This  is  a 
form  of  self-marketing.  If  the  user 
comes,  the  display  body  is  adjusted 
horizontally  and  vertkally  by  an  ultra¬ 
sound  sensor.  We  have  30  indoor  and 
nine  outdoor  POIs.  The  glass  POI  was 
developed  u>  show  the  visitor  just  how 
complex  this  system  is.  P 
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winning  on  the  WM):  To  help  preserve  the  record  of  one  of  North  America's  oldest  sports,  the 
Hockey  Hall  of  Fame  chose  the  IBM  ©server  xSeries”  It^  helped  hhof.com  handle  a  225%  increase 
in  traffic  over  the  past  year.  Select  xSeries  models  feature  the  Intel*  Xeon'  processor  for  superior 
flexibility  and  scalability  for  future  growth.  For  an  IDG  report  on  how  growing  companies  ate  using 
IT  to  advance  their  business,  go  to  Hmi-coni/eserver/hhof  /SylteW 
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HOW  DOES  NINTENDO 

PUTTOWijiT^H 


Unux*  ready  with  sett-managing  features  for  every  e<4Hisiness. 


Intel^-based  /  xSeries"' 

It’s  an  affordable  and  powerful 
comf^^on  of  mainframe- 
inspirAeliability  and  smart 
systuKjinanagement  tools. 


Umr/pSerfes" 

Highly  available,  highly  ^tontebte 
and  Hghty  coveted.  The 
the  platform  of  choice  fcyyrful 
UNIX  and  Linu Avions. 


Midrange  /  iSeries'* 

Bring  Jiagy-to-deploy.  plug  and 
play  e  Ajsiness  to  your  business. 
Sophiftated  technol^  that's 
easy  tSnanage  and  Linux  ready. 


Mainframe  I  zSeries'  | 
Mawmum  reliability,  maximum  power, 
maximum  flexibility.  DesigMpx  up 
to  99.999%  up^’  to  hyle  the 
demands  of  today’s  e>bJfcsses. 


Consolidate.  Cut  costs.  Be  available.  At  Nintendo,  games  are  a  highly  competitive  business.  So  they  look  for  any 
edge  they  can  get.  By  consolidating  their  core  business  applications  onto  one  IBM  ©server  iSeries,  Nintendo  now 
enjoys  near  100%  availability, '  and  expects  to  save  substantially  on  hardware  maintenance  and  software  costs.  For 
a  guide  on  server  consolidation,  head  to  fcitucom/eserver/nintendo  (@^si•gs i 
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Data  Scrubbing 


DEFINITION 
Data  scrubbing  is  the  proc¬ 
ess  of  fixing  or  eliminat¬ 
ing  individual  pieces  of 
data  that  are  incorrect, 
incomplete  or  duplicated 
before  the  data  is  passed 
to  a  data  warehouse  or 
another  application. 


TH£  need  to  scrub  data  is  made  pretty  dear 
bf  simple  questions  like  thb  one:  Are  jerry  L. 
fooson  of  16  Clarke  Su  Altuna.  PA.  and  Gerry 
L  lohnsoD  of  16  Clark  Street,  Altoona.  Penn.. 
the  same  person?  You  would  probably  say  that  roost 
likely  they  are.  But  a  computer,  without  help  from 
specialized  software,  would  deal  with  the  ioforroa- 
tion  as  though  it  were  about  two  different  guys. 

The  huroan  eye  and  mind  recognize  that  the  differ¬ 
ences  between  the  two  sets  of  data  records  are  prob¬ 
ably  the  result  of  mistakes  or  inconsistencies  in  data 
entry.  Weeding  out  and  fudng  or  discarding 
inconsistent,  incorrect  or  incomplete  data  is 
what's  called  data  scrubbing  or  cleansii^ 

"Dirty  data"  has  been  a  problem  for  as  long 
as  there  have  been  computers  —  or  maybe 
for  as  long  as  people  have  attempted  to  gath¬ 


er  atKl  analyze  information.  It’s  a  large  part  of  the 
"garb^  in"  that  can  result  in  the  worthless  "garbage 
out”  of  a  computing  process. 

The  issue  of  data  hygiene  has  become  increasingly 
important  as  more  and  more  corporations  imple¬ 
ment  complex  customer  relationship  management 
(CRM)  systems  and  build  data  warehouses  that 
merge  information  from  many  different  sources. 

Without  data  cleansing,  the  IT  stafis  of  those  com¬ 
panies  face  the  unappetizing  prospect  of  merging 
corrupt  or  incomplete  bits  of  data 
horn  multiple  databases.  A  single 
piece  of  dirty  data  mi^t  seem  like  a 
trivia]  problem,  but  if  you  multiply 
that  "trivial”  problem  by  thousand 
or  millions  of  pieces  of  erroneous, 
duplicated  or  inconsistent  data,  it 
becomes  a  prescription  for  chaos. 

Sources  of  Dirty  Data 

In  its  2001  report  ab^t  organizations  *li2B0i1lH 
implementing  data  warehouses  for  kuMMitl 

the  purpose  of  business  intelligence. 

Cutter  Consortium  identiffed  the  fol- 

lowing  causes  of  dirty  data:  nCihilMrii 

■  Poor  data  entry,  which  includes  ■afplhi.ftj 

misspellings,  typos  and  transposi-  iHlMlP^ 

tions.  and  variations  in  spelling  or  MBComi 
naming. 

■  Data  missing  from  database  anPliKMii 

fields. 

P  Lack  of  companywide  or  Indus- 
trywide  data  coding  standards  (a  big  mnmiitofii 
problem  in  health  care,  for  example). 

■  Multiple  databases  scattered 

throughout  different  departments  or 
organizations,  with  the  data  in  each  Mk 

striictured  according  to  the  idiosyn¬ 
cratic  rules  of  that  particular  data- 

P  Older  systems  that  contain  poor-  *J*JU?* 
ly  document  or  obsolete  data.  wmMM 

As  the  list  suggests,  data  scrubbing 
is  aimed  at  more  than  eliminating 
errors  and  redundancy.  The  goal  is  also  to  bring 
consistency  to  various  data  sets  that  may  have  been 
created  with  different,  incompatible  business  rules. 
Without  data  scruMiing,  those  sets  of  data  aren’t  very 
useful  when  they’re  merged  into  a  warehouse  that's 
supposed  to  feed  business  intelUgence  across  an 
organization. 

In  the  early  days  of  computing,  most  data  scrub- 
bif^  was  done  by  hand.  And  when  performed  by 
bleary-eyed  humans,  the  laborious  task  of  finding 

_  and  then  fixing  or  eliminating  incorrect, 

incomplete  or  duplicated  records  was  costly 

^  —  and  it  often  led  to  the  introduction  of  new 

,m  errors. 

f  ^  Now,  specialized  software  tools  use  sophis¬ 

ticated  algorithms  to  parse,  standardize,  cor¬ 
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rect.  match  and  consolidate  data.  Their  functions 
range  from  simple  cleansing  and  enhancement  of 
single  sets  of  data  to  matching,  correcting  and  con¬ 
solidating  database  entries  from  different  databases 
and  file  systems. 

Most  of  these  tools  are  able  to  reference  compre¬ 
hensive  data  sets  and  use  them  to  correct  and  en¬ 
hance  data.  For  example,  customer  data  for  a  CRM 
application  could  be  referenced  and  matched  to  ad¬ 
ditional  customer  information,  such  as  household  in¬ 
come  and  other  demographic  information. 

Many  Options 

Companies  that  want  to  use  specialized  data  cleans¬ 
ing  tools  can  get  them  from  several  sources.  Building 
the  tools  in-house  was  the  roost  common  choice 
among  companies  studied  by  Arlington,  Mass.-based 
Cutter  Consortium;  of  the  surveyed 
companies  that  said  they  were  using 
such  tools,  31%  said  they  were  build¬ 
ing  them  in-house  (see  box). 

But  companies  that  choose  to  buy 
data  cleansing  software  have  plenty 
of  options.  Oracle  Corp..  Ascential 
Software  Corp.  in  Westboro,  Mass., 
and  Group  1  Software  Inc  in  Lan- 
ham.  MtL.  led  other  vendors  in  the 
Cutter  survey,  with  8%  of  the  market 
each.  Other  vendors,  including 
PeopleSoft  Inc  in  Pleasanton,  Calif., 
SAS  Institute  Inc.  in  Cary,  N.C.,  and 
Infonnatica  Corp.  in  Redwood  City. 
Calif.,  were  bunched  a  few  percent¬ 
age  points  behind.  The  maior  data 
warehouse  and  business-intelligence 
■qinaMB  vendors  also  include  data  scrubbing 

•MiMpto'  functionality  in  their  products. 

Vendors  such  as  Acxiom  (>>rp.  in 
lOMMPdM  Uttle  Rock,  Aric.  and  Sagent  Tech- 
ncriogy  Inc.  in  Mountain  View.  Cjiiif, 
offer  online  data  cleansing  and  en- 
MipMiH*  hancement  services.  These  services 

itoilMHiip  provide  data  cleansing  as  well  as 

supplemental  information  on  a 
record-by-record  basis  in  near  real 
*|**^*f  time  over  the  Internet 

Although  data  hygiene  is  essential 
to  gening  useful  results  from  any  ^ 
plication,  it  shouldn't  be  confosed 
with  data  quality,  according  to  busi¬ 
ness-intelligence  analysts.  But  data 
quality  doesn’t  really  refer  to  whether  data  is  dean 
or  dirty  —  it's  a  matter  of  whether  the  data  is  good 
(valid)  or  bad  (invalid).  Validity  is  a  measure  of  rele¬ 
vance  of  the  data  to  the  process  analysis  at  Kami 
The  measure  of  that  validity  changes  with  the  con¬ 
text  in  which  the  data  is  us^ 

Ideally,  data  that  has  been  scrubbed  is  error-feee 
and  consistent,  and  some  data  cleaning  software 
even  checks  for  the  usefulness  of  the  data  it's  proc¬ 
essing.  Data  scrubbing  is  an  essential  chore  for  any 
IT  operation,  but  it’s  only  a  starting  point.  I 
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Intel  Looks  to 
Software 


Parallel-processing  prognosti¬ 
cations.  By  Gary  H.  Anmes 


COMPUTER  HARDWARE  GIANT  Intel 
Corp.  is  also  one  of  the  largest  soft¬ 
ware  developers  in  the  world  employ¬ 
ing  more  than  6,000  software  profes¬ 
sionals.  In  December,  the  company 
formed  a  new  position  —  that  of  Intel 
senior  fellow  —  at  the  top  of  its  re¬ 
search  hierarchy  and  appointed  four 
people  to  the  rede,  including  Jwdn  ft 
RaMaar.  director  of  microprocessor  re¬ 
search,  and  fOcharri  Wirt  general  manag¬ 
er  of  software  and  solutions.  _ 

Recently,  Rattner  and  Wirt 
told  Computervforid  whaf s 
coming  in  the  software  realm. 


What  we  are  definitdy  looking  at  in  the 
future  is  program-visible  instrument- 
atioo  so  the  compiler  has  access  to  [run¬ 
time  conditkmsl  This  is  on  the  fly;  this 
is  the  compiler  in  the  loop. 

This  is  udiw  our  beads  are  at 


wlneonipiars? 


WR  w»  SM  non  paraM  proc- 
•Mino  of  various  types? 

WITT:  We  went  ihrou^  get¬ 
ting  computers  to  parallelize 

_  the  instructions  on  a 

Single  [ptoc^ssor]. 
Intel  pushed  that  to 
WATMI6  ^  ibow  as  much  as 
nHlUIlK  we  can  get.  so  now 
we  are  be^nning  to 


WRT:  We  see  activity  in  traditional 
compilers  that  adapt  programming  lan¬ 
guages  better  for  multithreading  and 
hyperthreading.  OpenMP,  an  initiative 
to  ad^t  programming  languages  to 
handle  threading,  is  a  good  example. 
[See  glossary  at  right.) 

RATTIER:  Today's  instruction  sets  were 
really  designed  for  static  compilers,  so 
the  trade-o&  they  make  are  in  fovor  of 
static  compilers.  When  we  move  to  dy¬ 
namic  compilers  [like  Java  and  .Net], 
we  can  continue  to  optimize 
even  while  the  program  is  ex¬ 
ecuting.  The  optimizing  com¬ 
piler  is  querying  the  hard¬ 
ware  <m  a  periodic  basts  and 
saying.  “How’s  the  program 
runningr 

But  such  perfominM  menMors 
amtiMiv. 

RATTNER:  Today,  performance 
monitms  are  realty  designed 
for  debugging,  and  they  are 
inaccessible  to  the  compiler. 


go  threaded  on  single  [proc¬ 
essors].  Titen  you'll  see  us 

multiple  [threaded  processors] 
and  put  th^  on  a  motherboard. 

As  we  add  more  transistors,  then,  in¬ 
stead  of  multiple  [processors]  on  the 
motherboard,  well  put  them  on  the  die. 
on  the  chip  itself  We  refer  to  that  as 
dual-core.  Uten  you  want  to  string 
these  things  together  in  big  dusters. 
Each  node  gets  more  powerful  as  driven 
by  Moore's  Law.  but  we  will  string  more 
and  more  of  these  together  to  form  a 
supercomputer. 

Hsur  «■  you  gat  mort  parWWNm 
aul  of  aiMlag  agfilniiam? 
RATTNOt  We've  discovered 
you  can  create  “helper 
threads"  when  certain  sit¬ 
uations  arise.  A  set  of  helper 
threads  created  by  the  com¬ 
piler  can  run  ahead  of  die 
main  thread  in  order  to  bring 
normally  missing  data  into 
the  cadie  ahead  of  the  time 
the  main  thread  will  need  it. 


We  now  have  an  experiroenial  ver¬ 
sion  of  our  production  compiler  that 
will  automatically  generate  helper 
threads. 

How  much  help  wll  ths  hokwr  threads  Im? 
RATTNER:  We  are  finding  all  kinds  of 
clever  ways  to  use  them.  We've  seen 
two-  to  four-times  improvements  on 
some  applications.  On  average,  we'd 
expect  to  see  13  to  lA  and  some  pro¬ 
grams  will  do  amazingly  weU. 

Ovsrll»ywn.flMnyaftlN{irefnlMiifpar- 
iM  precMing  have  baan  dashad  bocauM 
dw  software  is  M  dHHcuR  to  deoafop. 
toWT:  The  problem  was,  people  expect¬ 
ed  the  compiler  to  do  it  for  them,  and 
there  was  a  lot  of  research  there.  Then 
they  came  to  the  conclusion 
that  you  sdll  needed  program¬ 
mers'  help,  and  that’s  why 
they  invented  OpenMP  with 
tboM  “pragmas."  or  hints  that 
the  pn^rammer  puts  in  the 
qipUcation  so  the  compiler 
ccHild  paralldize  [the  code]. 

So  as  you  go  across  nodes, 
with  MPl  [the  Message  Pass¬ 
ing  Interfoce  protocol],  you 
break  the  code  into  function¬ 
al  blocks,  one  fitnetioo  on 
one  node.  The  programmer 
does  that.  But  now  it's  at  a 
hitler  level  of  abstractioo  that  the  pro¬ 
grammer  can  understand. 

Ihrt's  glared  tor  sciaidRto  convudng  How 
ahoMlcwwiwrciiiapplMltona? 

WRT:  The  same  thing's  going  on  — 
breaking  up  the  application  into  func¬ 
tions  and  having  them  talk  to  each  och¬ 
er.  Web  services  is  a  good  example. 
Think  of  SOAP  doing  for  the  business 
world  what  MPI  does  for  the  technical 
world  —  having  obiects  talk  to  each 
other  in  order  to  give  you  scalability 
across  a  cluster  or  distributed  network. 

\Mwre  N  IliiB  twadad.  Md  wfwTs  naadad 
togalRare? 

WRT:  Typically,  there  are  tens  of  ob¬ 
jects  working  together  in  a  business 
app,  but  in  the  technical  worid.  people 
are  building  clusters  with  10,000 
nodes.  What's  needed  are  debi^ging 
and  performance-tuning  tools,  a^ 
tools  that  allow  you  to  look  at  all  those 
nodes  that  are  cooperating.  • 


Parallel- 

Processing 

Parlance 


OpwiMP  (iwjMprpciaiatoo). 
A  spacificabon  to  a  set  of 
contoto  daectives  and  library 
routines  that  can  be  used  io 
specify  shared-mernoty  parai- 
lebsm  in  Fortran  and  CjC** 
programs. 


(HPO.Astanctodlhalfaci' 
tatesthedeveloprnentofparal- 
WappicaBons-h  defines  the 
syntax  and  semsitics  to  I- 
b^  rouhnes  to  portable 
messagei»ss>no  programs 
in  Fortran  or  C/C**. 


Hypartoraadtag.  Inters  May 
to  make  a  single  physical 
processor  appear  to  the  oper- 
abng  system  or  multithreaded 
user  program  as  two  logical 
processors. 


PrawBRAwaytothepro* 
grammei  to  tel  the  oompier  to 
do  something 'praRnafle*  at 
the  poml  in  the  program  wbere 
the  pragma  appears.  It  mght 
say  to  use  a  certain  Ibrary  or 
generate  a  certain  kind  of  code 
to  DaraM  processing 


Hatowthreedi  Smal  strings 
of  nstruebons  that  help  the 
main  applied  thread  per¬ 
form  better.  Generated  by  toe 
compiler,  they  run  ahead  of  the 
mail  thread  and  can  to  exam¬ 
ple,  bring  data  into  the  cache 
in  aihanoe  so  I's  avadabte 
when  needed. 
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FTP  Server  Offers 
Key  to  the  Store 


Slopfiy  practices  leave  critkal  user  IDs  and 
passwnrds  available  for  public 
By  Mathias  Thurman 


This  week  I  was  side¬ 
tracked  from  my  pnH- 
ects  yet  again  by  the 
need  to  investigate  two 
security  ioddenfs.  Both  in- 
vohred  deleted  files  on  servers 
that  apparently  had  been  com¬ 
promised. 

The  first  incident  was  more 
of  a  server  configuration  issue 
than  a  traditional  security  in¬ 
cident.  but  it  still  warranted 

my  attention.  It  start-  - 

ed  when  a  customer 
sent  a  message  ad¬ 
dressed  to  our  abuse 
e-mail  alias  saying 
that  be  noticed  sever¬ 
al  suspicious  files  on 
our  public  file  trans- 
fer  protocol  (FTP)  server.  So  I 
logged  into  the  server  as  an 
anonymous  user,  and  sure 
eoou^  several  directories 
had  been  created  and  populat¬ 
ed  with  4GB  of  unautterized 
MP3  music  files. 

Even  more  alarming,  I  found 
a  file  named  Commands  that 
contained  account  names  and 
associated  passwords  for  sup¬ 
port  Web  sites  we  use  and  for 
accessing  internal  servers  in 
my  company. 

The  special  accounts  that 
give  us  access  to  technical 
support  Web  sites  require  user 
IDs  and  passwords  for  access. 
We  pay  tens  of  thousands  of 
dollars  per  year  for  some  of 
those  accounts.  It  turns  out 
that  our  product  support 
group  put  the  file  tbm  as  a 
repository  for  vriiat  it  consid¬ 
ered  shared,  noosensitive  tn- 
fbrmatioa  Later,  it  apparently 
became  a  repository  for  all 
sorts  of  informatiiML 
Unfortunately,  we  can't  hist 
make  die  anonymous  FTP 
server  go  away.  It's  a  valuable 
customer  service,  and  our 


scumr 

MANMErS 

jonMLa 


technical  support  team  uses  it 
enensivety  to  offer  patches 
and  other  support  programs  to 
our  users.  Our  customers  also 
use  it  to  upload  event  logs  and 
dump  files  for  review  by  our 
technical  support  team.  There 
are  other  methods  for  offering 
this  type  of  service,  but  the 
anonymous  FTP  servn'  has 
been  the  most  effective  and 
has  been  accepted  by  our  staff 

-  and  customers.  So 

it’s  here  to  stay.  But 
if  it  isn’t  configured 
properly,  an  anony¬ 
mous  FTP  server 
can  be  easily  abused 
and  become  a  cata- 
lyst  for  legaL  perfor¬ 
mance  and  security  issues. 

Hie  MP3  files  are  one  such 
legal  issue,  since  they  proba¬ 
bly  violate  copyright  laws  and 
an  investigation  c^d  embar¬ 
rass  our  company.  Perfor¬ 
mance  would  also  suffer  if  the 
FTP  server  was  saturated  with 
such  files,  or  if  too  many  users 
accessed  the  system  simulta¬ 
neously  to  try  to  download  the 
files.  And  we  don't  want  third 
parties  logging  into  our 
servers  or  support  services. 

Our  FTP  server  had  been 


I  found  a  He  named 

MNiNranOSuKu 

conlainad  account 
names  and  associated 
paaswonfe  for  support 
Wsb  sites  we  use 
and  for  accessfop 
inlemaiseivers. 


configured  to  let  anonymous 
users  create  their  own  directo¬ 
ries,  with  no  limits  on  the  size 
of  uploaded  files.  Simple  up¬ 
load  quotas  and  directory  per¬ 
missions  would  have  prevent¬ 
ed  this  incident  from  happen¬ 
ing.  I’m  going  to  add  guide¬ 
lines  for  configuring  the 
anonymous  FTP  server  to  our 
already  published  secure  base¬ 
line  procedures. 

CertifiablyHackaliie 

The  second  incident  involved 
malicious  activity  against  a 
server  in  our  certification  lab. 
A  systems  engineer  noticed 
that  one  of  his  source-code 
repository  servers  wasn’t  re- 
sponding  when  he  tried  to  ac¬ 
cess  it  using  the  Secure  Shell 
program.  To  gain  administra¬ 
tive  access  to  the  server,  he 
had  to  use  the  server  console. 
Then  he  noticed  that  several 
key  directories  had  been 
deleted,  which  accounted  for 
his  initial  inability  to  access 
the  server.  He  then  started 
poking  around  at  the  log  files. 

I’m  sure  that  this  engineer 
wanted  to  determine  the  ex¬ 
tent  of  damage  and  identify 
the  individual  responsible.  But 
there  are  problems  in  doing 
what  he  did.  First,  the  incident 
occurred  about  a  month  ago, 
and  the  engineer  is  just  now 
reporting  U.  Seconci  by  ac¬ 
cessing  files  and  writing  to 
various  log  files  on  the  system, 
he  made  it  difficult  to  distin¬ 
guish  between  legitimate  ac¬ 
tivity  and  hacker  activity.  In 
this  case,  it  wouldn’t  have 
mattered,  tbou^  because  the 
hacker  deleted  almost  every 
log  file  on  the  system. 

As  a  result  of  thb  incident, 
we  will  now  use  a  secure  base¬ 
line  to  ensure  that  all  of  our 
systems,  even  in  labs,  are  con¬ 
figured  securely.  We  will  also 
temporarily  configure  an  tn- 
mision-detectioa  system  sen¬ 
sor  to  watch  the  tn^c  on  the 


lab  network  segment.  Perhaps 
the  hacker  will  try  to  gain  ac¬ 
cess  again.  1  will  also  suggest 
that  all  logs  be  redirect^  to  a 
central,  secure  server. 

Hie  problem  with  security 
incidents  in  a  large,  vrorldwide 
enterprise  is  that  individuals 
don't  know  how  to  respond 
when  they  encounter  hacker¬ 
like  activity.  They  need  to  un¬ 
derstand  that  certain  actions 
must  be  taken  immediately  in 
the  event  of  a  suspected  secu¬ 
rity  breach  that  involves  unau¬ 
thorized  server  access.  In 
some  cases,  for  instance,  the 
administrator  should  create  a 
mirror  image  of  the  victimized 
system  right  away.  That  way. 
the  evidence  b  preserved  be¬ 
fore  the  administrator  makes 
the  changes  required  to  bring 
the  system  back  online. 

For  example,  the  shell  histo¬ 
ry  file,  which  contains  a 
record  of  keystrokes  issued  by 
the  user,  typically  contains  in¬ 
criminating  evidence  of  hack¬ 
er  activity.  If  the  administrator 
has  chan^  the  system  since 
the  incident,  it's  difficult  for 
the  investigator  to  (ell  which 
activity  can  be  attributed  to 
the  intruder. 

To  address  this  problem, 

I’ve  decided  to  put  together  an 
incident  reporting  program. 
The  first  part  of  the  project 
will  involve  creating  docu¬ 
ments  to  assist  both  Unix  and 
)^mdows  NT  administrators 
in  evaluating  their  systems 
when  they  suspect  that  there 
has  been  a  compromise.  I  will 
also  provide  awareness-train¬ 
ing  documents  focused  on 
incident  response. 

Finally.  I  will  ask  the  data¬ 
base  team  to  create  a  database 
and  an  associated  Web-based 
front  end  to  facilitate  the  sub¬ 
mission  of  incident  reports. 
The  results  can  then  ^ 
e-mailed  to  my  team,  and  we 
can  take  ^propriate  actum.  I 
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QaUUrtaVM 


To  find  a  comptolB  ardiw  of  our 
Saofiy  Manager's  Joirnds  go  onine  to 

voonpatarworHeaM^MClDuniai 


SECURITY  LOG 


Find  confidence  in  the  midst  of  chaos. 


■‘t'gJBSiS'l  -Xm 

Focus  on  the  best  hi  netwoit  security,  every  step  of  the  way. 


start  with  a  secure  fCMmdatioa 

Our  operating  system.  [PSO,  is  built  from  the  grourid  up  for  security.  It  eliminates 
many  vulnerabiitties  common  to  general-purpose  senrers.  and  also  incorporates 
our  patented  IP  austering  technology.  Multiple  Nokia  securi^  appliances  can  be 
linked  as  one,  on  the  fly.  for  new  levels  of  performance,  reliability  and  scalability. 


IntegrMe  the  best  in  networfc  security  expertise. 

Partners  Ike  Oteck  Point  Software  Technologies.  Internet  Security  ^sterns  and  FS 
help  us  deliver  the  full  capabilities  of  their  VPN.  firewall,  intrusion  protecOorv  and 
Internet  traffic  management  appKotions.  To  learn  about  the  other  ways  we  give 
our  customers  greater  peace  of  mind,  just  visit  wwMijioUa.coiii/ipsccurttMfoa. 
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www.computenmrtd.coin 


Palm  Slashes  Pricing  to  Match  the  Competition 


Palm  Inc.'s  Solutions  Group  cut  pnces 
s  on  three  of  its  most  popular  handheld 

n  T  computers  last  weeL 

Palm  slashed  prices  on  its  flagship 


L3500  Automated  Tape  Library 

Replece  irtuitipte  small  libraries  with  a  single,  easy-to-manage  library.  Scales  up  to 
1X2  P6  and  offers  throughput  rates  over  65  TB/houc  With  Tape  Mirrorirtg  software, 
)nu  simplify  and  automate  tape  replication  for  faster  backups  artd  fewer  errors. 


D280  Disk  Subsystem 

Speed  transactksn  rates  and  data  acttss  with  this  fuN.  ertd-toend  2  GB  F9}re  Chanrtel 
sohalotk  WMi  Ifemote  Vokane  Minoring  software,  you  prolea  your  data  through 
dam>ep<OKionaref  recover  qujddy  with  synehrorwusdatajanrfcrv 


^  STORACETEK' 

Save  the  Day." 


Tungsten  T  handheld  by  20%  to  S399. 
The  company  also  dropped  the  sug¬ 
gested  selling  price  of  its  Palm  ml30 
handheld  to  $199  and  cut  the  price  of 
the  m51S  by  14%  to  $299. 

Sam  Bhavnani.  an  analyst  at  ARS 
Inc.  in  La  loUa,  Calif.,  said  the  price 
cuts  are  '‘normal  and 
cyclical"  adjustments  as 
Milpitas,  Calif.-based 
Palm  readies  the  introduction  of  new 
models,  which  be  anticipates  will  oc¬ 
cur  within  a  week. 

The  new  pricing  also  brings  Palm’s 
products  more  in  line  with  low-priced 
hardware  running  the  Pocket  PC  oper¬ 
ating  system  from  Microsoft  Corp., 
Bhavnani  said. 


BMC  Upgrades  Server 
Management  Software 

BMC  Softwara  he.  in  Houston  lodiy  b  an- 
nounchg  nsw  aamr  fflanaoamenl  eapabW- 
ttas  for  WhdoM  and  Unfai  aomra.  Tha  Pa¬ 
trol  for  WMowo  SorvBfi  3.0  rahaoa  and 
Patrd  for  Unii  9UI  Back  wM  aai  for  $815 
por  Iconao  md  ora  goooraly  avaMlo  now. 
Iht  ivgradad  products  foalura  evant  notifi¬ 
cation  to  adminiatrators  through  paging 
and  o*niaB.  Ottwr  now  faaturas  hchido  hn- 
provod  worfdlew  and  pracenfigurtd  sot- 
tings  for  quidiar  hstalhlon.  ahd  BMC. 


Pnudm  Announces  New 
WLAN  Architecture 

Praxim  Cerp.  in  Sunnyvifs,  CaW..  rocontiy 
announcod  a  wtrafoM  LAW  arehitacluro 
that's  htondad  to  sfmpRfy  corporato  ItfLAfl 
daptoyinants  and  cantrafiza  tho  htaMooneo 
of  tha  natworh.  Maastro.  which  wH  ba 
avaflaUa  latar  tMo  yaar.  wM  alow  largo  and 
midMn  bushasaas  to  hlograto.  conAguro 
and  conIraNy  monago  thoir  WLAN  infra- 
structural  shnultafMoinfy  whit  supporting 
moUh  voice.  vUse  and  data  appiottions. 
MaaotrowM  provide  pojcybaaadwtmhn 
notworh  admhMratioe  and  aupport  the 
company's  Orhoeo  Ino  of  aceosa  points. 
Pricing  bdormstion  tanl  yot  avallablt. 


IBM,  AOL  to  Integrate 
Instant  Messaging  Clients 

BM  and  Amsriea  Oidhs  he.  amouncod 
hot  weak  thnl  they  phn  to  hhgrata  lliair 
raapactiva  lotus  Ssmatinw  and  MM  Entar- 
priia  Bahway  Inatant  mBanghg  cOants. 
Ihi  gateway  davica,  which  FacaTIiM  Com- 
naadcattona  he.  in  Foater  CKy.  CaM..  is 


Hewlett-Packard  Co.  has  slashed 
prices  on  its  Pocket  PCs.  which  sold 
for  more  than  $700  a  year  ago.  HP  now 
offers  an  entry-level  model  priced  at 
$299.  Dell  Computer  Corp.  sells  a 
Pocket  PC  device  for  $249  —  up  from 
its  introductory  price  in  November  of 
$199,  after  a  $50  rebate. 

But  according  to  Bbav- 
nani,  there  is  no  compari¬ 
son  between  the  Pocket  PC  Tungsten 
T  and  the  Dell  Pocket  PC.  The  Tling- 
sten  T,  he  noted,  is  a  sleek,  lightweight 
system  with  built-in  Bluetooth  virireless 
capabilities,  whereas  the  Dell  Pocket 
PC  is  bulkier  with  no  built-in  wireless 
functionality. 

—  BobBrewin 


bufldifig.  won't  alow  extanial  AOL  users  to 
dated  or  conmunicate  wfth  Sanwthne 
usars,  but  it  adl  aftew  Samefinw  usars  to 
accaaa  tilt  pubic  AOL  natworit  via  a  shgla 
tog-h.  Both  compantes  said  thay  plan  to 
eontimia  tasting  the  Mwtecas  durhg  the 
next  tew  months. 


NetSupport  Updates 
Desktop  Management  App 

NatSupport  he.  has  rsteniad  Vwston  8.0 
of  Hs  NalSupport  Manager  (NSM)  ramote- 
confrol  desktop  management  software, 
which  Is  dsatgnsd  to  lot  IT  ampfoysas  trou- 
bteahoot  and  fix  users’  PCs  from  romoto  to- 
cations.  NSM  6.0  hchntes  the  new  htenwt 
Oatoway  foature,  whkh  alows  for  saam- 
Isss  HTTP  connactiens  between  PCs  avan  if 
tiiay'to  bahhd  dWarant  ffrawali.  accerdhg 
to  Alpharatta.  Oa.-baaad  NalSupport  Ptr 
leanaa  pricing  aterts  at  $99  for  ona  unr 
and  daeraasaa  aa  tha  numbar  of  Icanicg 
ordarod  hcroaaaa. 


App  to  Convert  OS/fOO 
Output  to  Other  Foimats 

Hafrj/Syatoma  Inc.  raeantty  amouncod  tha 
rateaaa  of  Ms  ffabot^ranaform  producL 
which  is  tetandod  to  convert  08/400  out¬ 
put  wMi  omboddad  grapMca  into  commonfy 
uaad  formats  such  as  ftortahtePoaimant 
Format  (PDF).  The  product  wM  alow  the 
convsrteonef  ASCI  hassdMwolfloscon- 
toining  Printer  Cantraf  Laaguaga  «d  Ad- 
vancad  Function  PraaantaBon  atfrtoutoa 
into  PDF  Mas  nallvafy  on  BM  Barits 
aarvara.  aGcordbig  to  Iw  MbBistafdia. 
MbuL-baasd  rnmpany.  Robot^ranaform 
wM  ba  amiihte  in  ndd-Aprfl;  prtohv  la 
avaBafatoupanroquasL 
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Today,  if  I  m  lucky. 


I  II  be  totally  ignored. 


That  means  systems  are  humming 


and  data  is  flowing. 


If  not,  I  have  to  fix  it. 


Preferably,  befor^anyone  notices. 


Save  the  da 


Keep  bad  things  from  reaching  users  arxi  you'll  get  noticed  for  all  the  good  you  da  One  way  is  to  use  an  L5S00  automated 
library  with  Tape  Mirrorirrg  software  for  foolproof  backup  and  restore.  Or  a  D280  disk  system  with  Remote  \folume  Mirroring 
software  so  systems  rebound  hist  Whatever  your  solution,  well  make  sure  you  only  get  noticed  when  you  want  Learn  more 
about  this  story  and  other  ways  we  can  help  you  at  www.savethedayxom  STOJlJlCf  T^lfSave  the  Oay.~ 
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Suney  Cites  Data 
Warehouse  Failures 

Forty-one  percent  ot  the  respon-  | 
dents  to  i  recent  survey  said  their  | 
organizations  have  experienced 
data  warehouse  protect  failures, 
and  only  15%  sM  they  beieve 
their  data  warehousing  efforts 
have  been  succesefuL  Of  the  142  I 
companies  worldwide  surveyed  | 
by  Cutler  Consortium  in 
ton.  Mass.,  ordy  27%  expressed 
confidence  in  data  warehouse 
technologies,  and  2t%  said 
ihey’re  using  data  mining  tech-  j 
nologies  they  developed  itr-house.  I 


CA  Introduces 
Unicenter  Upgrades 

Computer  Associates  bitamation* 
al  bic.  is  shipping  naw  versfcms  of 
Hi  Unieenter  Database  Manage¬ 
ment  software  for  IBM's  062 
database  products  on  the  z/OS 
and  OS/390  mainframe  systems. 
Ihe  new  versiotH  indude  in- 
craeeed  eitetpihon  and  proactive 
managOTMfit  capabiitles,  CA 
said.  Pricing  starts  at  SS.OOO. 


Haht  Releases  v7.1 
Of  Commerce  Suite 

Haht  Commerce  bic.  in  Raleigh. 
N.C..  has  sMppwf  Version  7.1  of 
its  Commorce  Suile.  The  new  re- 
leaea  has  demartd  chain  manage- 
ment  optiens  for  manufacturers 
of  chomicais,  consume  products 
and  industriai  hvd  goods  such  as 
plumbing  products.  Prices  range 
from  S75.000  to  S2SO.OOO. 


Ipswitch  Enters 
Enterprise  IM  Fray 

Ipswitch  Inc.  is  ioMng  the  instant 
messaging  (M)  ware  with  ds 
Ipswitch  InstMt  Maasenger.  Oe- 
signed  for  corporate  uoo.  the  now 
product  wM  cost  foranun* 
Mled  number  of  users  and  wM 
offareacuremanagedMcapabii- 
ilfas  with  ful  menaga  logging 
and  encryption.  Lexington.  Mass.- 
baaed  Ipswitob  said  the  system 
wM  Indude  personal  contact  fats 
and  other  fanrifar  N  features. 


NICHOLAS  PETRELEY 


Getting  Out  the 
Crystal  Ball 


Every  year  after  the  dust  of  the  holidays 
settles,  I  like  to  wipe  off  the  old  crystal  ball 
and  take  a  peek  into  the  future  of  IT.  Before 
I  get  started  with  this  set  of  predictions,  al¬ 
low  me  to  boast  a  moment  about  my  record. 
My  predictions  may  not  pan  out  as  quickly  as  I  expect, 
but  they  usually  come  to  pass. 

I  began  talking  about 
Linu.\  in  1995.  In  1996. 1  wai» 
one  of  the  few  to  predict 
that  it  would  become  a 
mainstream  server  operat¬ 
ing  system.  In  1997. 1  pre¬ 
dicted  that  it  would  sup¬ 
plant  Windows  NT  as  the 
future  sen-er  platform  of 
choice  when  others  were 
still  saying  it  had  a  snow¬ 
ball’s  chance  in  hell.  When 
Oracle  gave  a  thumbs  up  to 
Linux  in  mid-1998.  IBM 
still  insisted  that  it  had  no  intention  of 
supporting  the  platform.  Nearly  five 
years  later.  IBM  adores  Linux,  now  the 
fastest-growing  server  platform.  Score 
a  big  one  for  the  Petreleymeistcr. 

Network  Computing  Inevitable 

711)$  year’s  first  prediction  isn’t  a  new- 
one.  but  an  extension  of  a  previous 
prognostication  that  hasn’t  yet  been 
fulfilled.  As  unlikely  as  I'm  sure  it 
seems.  1  predict  that  the  era  of  net¬ 
work  computing  is  still  inevitable. 

Granted,  it  seems  very  unlikely.  I'd 
love  to  say  that  the  death  of  the  net¬ 
work  computer  has  been  greatly  ex¬ 
aggerated.  but  it  hasn't.  It's  difficult 
to  fmd  anyone  discussing  the  concept 
of  a  network  computer,  let  alone  lo¬ 
cate  someone  actually  using  one. 

Strictly  speaking,  every  X  Terminal 
qualifies  as  a  network  computer,  but 
you  won't  find  many  of  the  cheap. 

Java-based  desktops  that  Oracle.  IBM 


and  Sun  had  hoped  would 
flourish. 

Nevertheless.  I  predict 
that  the  Java-based  net¬ 
work  computer  will  rise 
again  —  and  perhaps  fall 
again.  But  it  will  eventual¬ 
ly  be  a  smashing  success. 

Java  on  the  Client 

My  next  prediction  is  a 
prerequisite  of  the  last  one 
and  one  of  the  reasons  I 
still  feel  bullish  on  the  net¬ 
work  computer:  TTie  next  two  years 
will  see  a  huge  revival  of  interest  in 
Java  on  the  client.  This  will  catch 
many  people  by  surprise,  especially 
after  client-side  Java  was  soundly 
trashed  by  embarrassing  failures  like 
Java-based  WordPerfect  Office. 

One  indication  tliat  Java  will  enjoy 
success  on  the  client  is  that  the  plat¬ 
form  neutrality  of  Java  has  improved 
dramatically  over  the  past  few  years. 

Java’s  performance  has  improved, 
too.  but  not  so  much  that  feature- 
laden  Java  programs  run  as  fast  as 
equivalent  applications  written  in  C. 
That  performance  penalty  isn't  bad 
news,  though,  at  least  for  companies 
desperate  to  find  a  good  reason  to 
convince  you  of  the  need  to  upgrade 
your  overpowered  desktop  PC. 

But  the  most  compelling  sign  that 
Java  is  headed  for  the  client  is  that 
there  are  now  a  handful  of  extremely 
powerful  open-source  development 


environments  written  for  Java  and 
written  in  Java.  TTiere's  NetBeans,  Sun 
ONE  Studio  (based  on  NetBeans), 
Eclipse,  jEdit  and  more.  The  only  rea¬ 
son  open-source  development  tools 
exist  for  any  language  is  to  scratch  an 
itch.  77ie  fact  that  so  many  excellent 
tools  now  exist  for  Java  and  are  writ¬ 
ten  in  it  should  tell  you  that  there  are 
a  lot  of  itchy  Java  developers  out  there 
with  loads  of  talent  for  writing  client 
applications. 

Sun  is  probably  the  only  factor  that 
could  thwart  this  prophecy.  Often,  the 
company  is  as  much  of  an  impediment 
to  Java's  progress  as  it  is  responsible 
for  that  progress.  The  success  of  Lin¬ 
ux  was  easy  to  predict  because  the 
momentum  of  Linux  and  open  source 
doesn't  depend  upon  any  single 
provider.  That's  why  the  rate  at  which 
government  agencies,  power  utilities, 
retail  chains  and  high-profile  compa¬ 
nies  are  migrating  to  Linux  continues 
to  increase,  even  as  Linux  distributors 
drop  like  flies.  But  if  Sun  folded  to¬ 
morrow.  confidence  in  Java  would  suf¬ 
fer.  The  result  would  probably  be  fatal 
unless  a  company  like  IBM  snatched 
up  Java  immediately. 

Mcrosoft  Targets  Home  Media 

My  last  prediction  is  that  Microsoft 
will  temporarily  give  up  on  wirming 
the  server  market  and  refocus  its  at¬ 
tention  on  undermining  and  destroy¬ 
ing  competition  for  the  home  media 
center.  Along  the  way.  Microsoft  will 
change  product  names  and  technolo¬ 
gy  terms  at  least  twice.  “Windows 
.Net  Server"  is  already  history,  as  is 
“Palladium."  It’s  a  long  shot,  but 
thanks  to  Slammer,  we  might  even  see 
a  new  name  for  SQL  Server.  I 
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Suney  dies  Data 
VWarehouse  Failures 

Forty  QM  pwwni  oHw  fpon- 
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CA  Introduces 
Unicenter  Upgrades 
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■md  ooftoMit  for  BH’i  D62 
(tolibm  prodKb  on  toe  z/OS 
ond  OV390  natofruM  oytoNiK. 
Hm  new  vmlonu  toctodo  to* 
cnMN  unupnuon  MO  praneovo 
mM^MiMl  e^MHui.  CA 
itol  Mdng  fliwto  to  S5.000. 
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ipswitch  Enters 
Enterprise  IM  Fray 
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Getting  Out  the 
Crystal  BaU 


Every  year  after  the  dust  of  the  holidays 
settles,  I  like  to  wipe  off  the  old  crystal  ball 
and  take  a  peek  into  the  future  of  IT.  Before 
I  get  started  with  this  set  of  predictions,  al¬ 
low  me  to  boast  a  moment  about  my  record. 
My  predictions  may  not  pan  out  as  quickly  as  I  expect, 
but  they  usually  come  to  pass. 


I  began  talking  about 
Linux  in  199S.  In  1996, 1  was 
one  of  the  few  to  predict 
that  it  would  become  a 
mainstream  server  operat* 
ing  system.  In  1997, 1  pre¬ 
dicted  that  it  would  sup¬ 
plant  Windows  NT  as  the 
hiture  server  platform  of 
choice  when  others  were 
still  saying  it  had  a  snow¬ 
ball’s  chance  in  hell.  When 
Oracle  gave  a  thumbs  up  to 
Linux  in  mid-1998.  IBM 
stUl  insisted  that  it  had  no  intention  of 
supporting  the  platform.  Nearly  Hve 
years  later.  IBM  adores  Linux,  now  the 
fastest-growing  server  platform.  Score 
a  big  one  for  the  Petreleymeister. 

NiHwofk  Coniputing  InevHable 

This  year’s  first  prediction  isn’t  a  new 
one,  but  an  extension  of  a  previous 
prognostication  that  hasn’t  yet  been 
fulfilled.  As  unlikely  as  I'm  sure  it 
seems.  I  predict  that  the  era  of  net¬ 
work  computing  is  still  inevitable. 

Granted,  it  seems  very  unlikely.  I’d 
love  to  say  that  the  death  of  the  net¬ 
work  computer  has  been  greatly  ex¬ 
aggerated.  but  it  hasn’t  It's  difficult 
to  find  anyone  discussing  the  concept 
of  a  network  computer,  let  alone  lo¬ 
cate  someone  actually  using  one. 
Strictly  speaking,  every  X  Terminal 
qualifies  as  a  network  computer,  but 
you  won’t  find  many  of  the  cheap. 
Java-based  desktops  that  Oracle,  IBM 
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and  Sun  had  hoped  would 
flourish. 

Nevertheless,  I  predict 
that  the  Java-based  net¬ 
work  computer  will  rise 
again  —  and  perhaps  fall 
again.  But  it  will  eventual¬ 
ly  be  a  smashing  success. 

JamontheCHent 

My  next  prediction  is  a 
prerequisite  of  the  last  one 
and  one  of  the  reasons  I 
still  feel  bullish  on  the  net¬ 
work  computer  The  next  two  years 
will  see  a  huge  revival  of  interest  in 
Java  on  the  client  This  will  catch 
many  people  by  surprise,  especially 
after  client-side  Java  was  soundly 
trashed  by  embarrassing  failures  like 
Java-based  WordPerfect  Office. 

One  indication  that  Java  will  enjoy 
success  on  the  client  is  that  the  plat¬ 
form  neutrality  of  Java  has  improved 
dramatically  over  the  past  few  years. 

Java’s  performance  has  improved, 
too,  but  not  so  much  that  feature¬ 
laden  Java  programs  run  as  fast  as 
equivalent  applications  written  in  C. 
That  performance  penalty  isn't  bad 
news,  though,  at  least  for  companies 
desperate  to  find  a  good  reason  to 
convince  you  of  the  need  to  upgrade 
your  overpowered  desktop  PC. 

But  the  most  compelling  sign  that 
Java  is  headed  for  the  client  is  that 
there  are  now  a  handful  of  extremely 
powerful  open-source  development 


environments  written  for  Java  and 
written  in  Java.  There’s  NetBeans.  Sun 
ONE  Studio  (based  on  NetBeans), 
Eclipse,  jEdit  and  more.  The  only  rea¬ 
son  open-source  development  tools 
exist  for  any  language  is  to  scratch  an 
itch.  The  fact  that  so  many  excellent 
tools  now  exist  for  Java  and  are  writ¬ 
ten  in  it  should  tell  you  that  there  are 
a  lot  of  itchy  Java  developers  out  there 
with  loads  of  talent  for  writing  client 
applications. 

Sun  is  probably  the  only  factor  that 
could  thwart  this  prophecy.  Often,  the 
company  is  as  much  of  an  impediment 
to  Java’s  progress  as  it  is  responsible 
for  that  progress.  The  success  of  Lin¬ 
ux  was  easy  to  predict  because  the 
momentum  of  Linux  and  open  source 
doesn’t  depend  upon  any  single 
provider.  That’s  why  the  rate  at  which 
government  agencies,  power  utilities, 
retaU  chains  and  high-profile  compa¬ 
nies  are  migrating  to  Linux  continues 
to  increase,  even  as  Linux  distributors 
drop  like  flies.  But  if  Sun  folded  to¬ 
morrow,  confidence  in  Java  would  suf¬ 
fer.  The  result  would  probably  be  fatal 
unless  a  company  tike  IBM  snatched 
up  Java  immediately. 

Miennoft  Targsls  Honie  Med^ 

My  last  prediction  is  that  Microsoft 
will  temporarily  give  up  on  winning 
the  server  market  and  refocus  its  at¬ 
tention  on  undermining  and  destroy¬ 
ing  competition  for  the  home  media 
center.  Along  the  way,  Microsoft  will 
change  product  names  and  technolo¬ 
gy  terms  at  least  twice.  ’’Windows 
.Net  Senwr”  is  already  history,  as  is 
“PaUadium."  It's  a  long  shot,  but 
thanks  to  Slammer,  we  might  even  see 
a  new  name  for  SQL  Server.  I 
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Want  to  cut  your  IT  costs  without  sacrificing 
performance?  PRIMEPOWER  Servers  from  Fujitsu. 


■  The  secret  is  out.  PRIMEPOWER- Solaris'”- compatible 
servers  from  Fujitsu*  deliver  a  major  breakthrough  in 
price/performance  compared  to  our  more  famous 
competition.  Want  proof?  PRIMEPOWER  servers  offer 
such  an  advantage  that  the  world’s  leading  com¬ 
panies  use  them  to  boost  their  performance.  And  there’s  a 
PRIMEPOWER  server  that’s  right  for  any  application  you  need — 
from  single  CPU,  rack-mounted  servers  to  enterprise-ready 
systems  that  scale  to  1 28  CPUs  for  unsurpassed  performance  in 
the  data  center. 

Of  course,  it's  not  just  the  hardware  you’re  buying.  It’s  also 
Fujitsu’s  30-f  years  of  experience  supporting  high-perform¬ 
ance,  mission-critical  systems.  We've  already  helped  many 
companies  consolidate  their  IT  infrastructures  and  lower  tf>eir 
Total  Cost  of  Ownership.  Our  free  white  paper,  The  Why  and 
How  of  Server  Consolidation,  explains  how.  Get  your  copy  at 
www.ftsi.fujitsu.com/ad.  Or  call  (877)  905-3644. 
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What  CIOs  Need  From 


IT  Suppliers:  A  Baker's  Dozen 

Deciding  which  suppliers  to  retain  is 
a  complex  decision.  Columnist  Bart 
Perkins  offers  CIOs  a  checklist  they  can 
use  to  help  them  decide  which  suppli¬ 
ers  should  be  on  their  A-lists.  Page  48 


QuickScan:  Training 

United  Stationers  CIO  Ergin 
Uskup  relies  on  employee 
feedback  to  evaluate  training 
options.  Here’s  a  look  at  some 
of  the  hottest  TT  certifications 
for  this  year.  Pigs  47 
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QUOTE  OF  THE  WEEK 

’  Tm  a  fan  of  leverage,  and  I  think  partnerships 
I  with  world-class  providers  at  the  infrastruc¬ 
ture  level,  at  the  application  level  and  at  the  services 
layer  all  make  a  ton  of  sense.  They’ll  certainly  be  dte 
blades  in  my  Svriss  Army  Knife  going  forward." 


CIOs  scratch  for  yet 
more  ways  to  hold 
downlTspending. 

By  Thomas  Hoffman 

Havii^  spent  the  past  two  years  paring  back 
staff,  consolidating  servers  and  storage 
equipment,  renegotiating  vendor  contracts 
and  conducting  selective  outsourcing, 

CIOs  are  struggling  to  find  new  ways  to 
reduce  costs  withcHit  cutting  into  the  muscle  of  their 
IT  operations. 

"We’ve  done  all  those  things,  and  yet  management 
still  wants  us  to  cut  costs  further,’’  says  a  CIO  at  a 
Midwestern  bank  who  requested  anonymity.  "I  just 
don't  know  wrbere  else  to  cut” 

In  their  quest  to  come  up  with  even  more  ways  to 
keep  a  lid  on  costs,  dauntless  IT  leaders  are  eiq>lor- 
ing  everything  from  barter  i^reements  with  vendors 
to  reselling  services  and  toining  purchasing  consor¬ 
tiums  for  volume  price  discmints  on  equipment 
Take  Wyndham  International  lnc.’s  chief  tech¬ 
nology  officer,  Mark  Hedley.  Like  many  IT  execu¬ 
tives.  Hedley  has  taken  advantage  ttf  the  cutthroat 
competition  that  the  economy  has  stirred  up  in  the 
telecommunications  sector  and  has  reworked  the 
hospitality  firm’s  private  branch  exchange,  data 
and  voice  networiting  ^eements,  thus  paring 
$850,000  from  the  Dallas-based  company's  armual 
telecom  budget. 

Now  Hedley  is  considering  shiftily  Wyndham’s 
private  frame  relay  to  the  public  Internet  as  a  way  to 
further  reduce  data  communications  costs  by  as 
much  as  50%  aimually.  But  he  must  wei^  the  poten¬ 
tial  money-saving  benefits  of  doing  so  gainst  the  se¬ 
curity.  stability  and  reliability  issues  involved  with 
moving  to  a  public  network  infrastructure. 

He  and  his  team  are  also  evaluating  a  niin^>er  of 
even  more  novel  ways  to  cut  IT  costs.  Among  them 
is  the  possibility  of  offering  hardware  vendors  hotel 
rooms  in  return  for  conqniter  equipment 
*TYadii%  the  value  of  a  guest  romn  for  the  value  of 
equipment  is  very  doable  for  us.”  says  Hedley.  Last 
summer,  Hedley  and  his  team  began  evaluating 
which  IT  prelects  might  be  a  good  fit  fw  these  types 
of  barter  arrangements,  but  be  declined  to  discuss 
them  further.  And  n^iile  be  also  declmed  to  name 

Continued  on  page  42 
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Shared  Savings 

Many  orirjni/jtions  luxe  ccntralixid 
llvir  !  r  opef.mons  to  help  rein  in  costs 
over  the  past  lexv  tears  Hut  some  ^loh- 
ul  firms,  siis  h  as  Madison.  S'.I  -hasc'd 
U  \eth.  a  S14.<>  billion  pharmaceutical 
company.  h.i\e  taken  centralisation  a 
step  further  and  shifted  to  a  shared-ser- 
V  ices  mods')  in  rsntions  w  here  they Ve 
determined  that  it's  efficient  and  cost- 
el7ectj\e. 

•As  .1  holdinit  company  with  various 
husmesses.  "rr  was  decentraliecd.  and 
there  tvus  no  need  to  standardize  or 
have  a  sharcd'ser\kvs  funeiion."  says 
CIO  Bruee  FaJem. 

Since  Wyeth  has  been  miyjrai- 
mjj  to  a  shjrt'd-ser\  ices  model  under 
which  its  various  busmesse-s  and  geo- 
graphic  divisions  share  IT  applications 
and  infrastructure'  and  their  c»»Ms 
acro-ss  the  organization.  Having  com¬ 
pleted  the  transition  in  North  America 
and  latin  .America.  Wyeth  is  hoping  to 
consolidate  the  «0"‘i  of  its  European 


We  have  an 
I  aging  work¬ 
force,  and  a  lot  of 
those  people  are 
considering  retirement.  So  as 
we  automate  processes,  we  took 
for  the  opportunity  not  to  refili 
some  of  those  positions." 


Oiane  Bunch.  $«mtK  vice  (Kesident  ol 
inlormaltoft  services.  Tennessee  Valley 
Authority.  Knoavilie.  Tenn. 


MH  you  spend 
twice  as  many 
dollars,  you  don't 
get  twice  as  much 
storage  or  bandwidth.  There's 
a  great  multiplying  effect  in  the 
tech  business.  H  ramps  up 
exponentially,  not  linearly." 

John  B«Aec.  vice  president  of  mformation 
resotf ce$  and  techfio4ogy.  Oreaet  Uonershy. 
Phfladelphia 


business  That  hasn't  already  been  fi>ld- 
ed  inttt  ihe  shared-services  model. 

Thi.s  includes  tiviilying  units  that  .still 
ha\e  their  own  dedie.ited  I  F  units. 

"In  200.C  we're  doing  the  tough 
work,  taking  thtise  relatively  small 
businesses  and  working  through  the 
pitlilieal  batlle.s"  to  migrate  them  into 
sh.ired  services  lo  further  reduce  costs, 
says  Fadem. 

Still,  there  are  limits  to  applying  the 
shared-serv  ices  im>de)  l>'  all  of  Wyeth's 
international  entities.  In  .Asia,  for  in¬ 
stance,  the  ei'inpany's  div  isions  are 
mueh  smaller  and  nn*re  widely  distrib¬ 
uted  than  those  in  other  parts  ol'the 
w  orld,  sav  s  FaJeiii.  So  instead  of  pro¬ 
viding  tht>se  units  with  shared  services 
from  regional  IT  centers.  Wyeth  for 
now  will  allow  them  i4»  tiperate  inde¬ 
pendently  The  ci>mpany  will  see  how 
thiise  businesss's  gnnv  and  determine 
at  year's  end  whether  it  makes  sense  to 
revisit  the  shared-sv'rvices  model  with 
them.  Fadem  says. 

The  cost  savings  generated  so  far 
under  Wyeth's  shared-services  model 
vary  greatly  by  the  level  of  IT  invest¬ 
ment  in  each  region  and  by  other  geo¬ 
graphical  differences.  Fadem  estimates 
that  the  approach  has  led  to  1U"h  u»  I5"<t 
cost  sav  ings  in  most  regions,  Onee  the 
Fun'pean  piece  of  the  puzzle  has  been 
completed,  “we  ll  be  able  to  implement 
services  like  Iregionall  enterprise  sys¬ 
tems  that  we  couldn't  have  done  other¬ 
wise."  he  adds. 

Cleaning  the  Attic 

Some  CIOs  see  the  increased  emt 
pressures  they're  under  as  an  opp^irtu- 
nify  to  clean  hviuse  and  get  rid  of  sitme 
unnev'ded  t»r  rarely  used  applications. 
That's  precisely  w  hat  Tonnessee  Valley 
Auth«>rity  fTV'.A)  has  done  in  conjunc¬ 
tion  w  ith  its  migration  from  Windows 
‘>5  to  Windows  .XI'  which  began  in 
(\-ti*ber  2(K»I. 

Since  then,  the  Knoxville-based 
public  piwver  company  has  eliminated 
2.3(X)  tif  4.7lK»  deskt»>p  applicaiittns. 
databases  and  other  software,  which 
in  some  instances  included  multiple 
versions  of  the  tutme  application,  says 
Diane  Bunch,  senior  vice  president 
of  information  services  at  TVA.  The 
ability  to  avoid  future  PC;  capacity  up¬ 
grades  i-s  one  area  of  cost  savings  re¬ 
sulting  from  the  move,  since  fewer 
applications  mean  reduced  CPU  and 
storage  needs,  says  Bunch. 

The  house-cleaning  exercise  also 
gave  TVA  an  opportunity  to  renegoti¬ 
ate  site  licenses  for  software  that  it  will 
continue  to  use.  For  example,  a  re- 
w’orked  contract  for  a  project  schedul¬ 
ing  package  should  save  the  company 


S4i),00l)  per  year,  says  Bunch.  "We're 
'  working  on  several  tuher  licensing 
agreements,  and  SIO.OOO  here  and 
S5.000  there  in  cost  savings  can  add  up 
to  significant  cost  avoidance."  she  says. 

Pennies  on  the  Dollar 

,  A  growing  number  of  companies  arc 
taking  advantage  of  used  equipment 
that's  still  flooding  the  market  from 
failed  dot -corns  and  »ither  businesses. 

I  Through  online  auctions.  Corning 
!  Inc.'s  Life  Sciences  division  in  Acton. 

,  Mass.,  bought  what  CIO  Howard 
Piggee  describes  a.s  some  "cheap" 

I  sorv vrs.  The  servers  cost  50  cents  t»n 
I  the  dollar  and  replaced  most  of  the 
■  ones  that  wore  running  the  company's 
PeopleSofi  Inc.  enterprise  resource 
j  planning  system. 

As  a  result.  Corning  cut  its  annual 
hardware  licensing  and  support  costs  by 
SlUO.OOO  because  the  newer  seACrs  it 
bought  online  are  less  expensive  lo  run 
than  the  older  mv*dels  they  replaced. 

Power  in  Numbers 

A  big-dollar  software  licensing  agree¬ 
ment  with  a  major  vendor  was  placing 
a  dragon  L)rexei  University's  IT  bud¬ 
get.  so  lohn  Biclec.  vice  president  of  in¬ 
formation  resources  and  technoU>gy. 
found  himself  in  search  of  ways  to 
'  bring  those  costs  down.  Keseareh  on 
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the  topic  led  him  to  a  Middletown. 
Conn.-based  educational  purchasing 
consortium  called  the  North  East  Re¬ 
gional  Computing  Program,  which 
Drcxcl  joined  last  year.  By  doing  so. 
Philadelphia-based  Drexel  was  able  to 
low'cr  its  annual  stiftware  licensing  fees 
with  the  vendor  in  question,  thanks  to 
special  rates  for  consortium  members. 

Says  Bielec.  "There's  always  power 
ti>  negotiate  if  you  have  volume.”  I 


Top  10  Ways  to 
Do  More  With  Less 


1  Accelerate  time  to  market  of  tech¬ 
nology-based  business  initiatives. 
EXAMPLE:  Lower  total  imiialive  costs 
by  restructuring  projects  to  accelerate 
lime  10  market 

2  Focus  on  short-term,  high-return 
business  initiatives. 

EXAMPLE:  Take  on  short-term  proiecls 
up  10  two  months  long  lhal  lower  bust- 
ness-umt  costs  and  Iransler  savings  10 
the  IT  budget 

3  Transfer  IT  budget  money  from 
renewal  and  enhancement  proj- 
>  ects  to  business  transformation, 

i  EXAMPLE:  Double  or  triple  new- 

mitialive  funding  by  reducing  renewal 
i  and  enhancement  proiecl  dollars. 

4  Selective  process  outsourcing. 
EXAMPLE:  Outsource  desktop 
j  management.  PC  support  and  pnnters. 

!  C  increase  in-house  IT  staff. 

^  W  EXAMPLE;  Transfer  protects 

i  that  use  outside  services  to  internal 

I  ITsUfI 


6  Renegotiate  telecommunications 
contracts. 

EXAMPLE:  Toll-free  numbers.  Tls.  long 
distance  and  virtual  pnvale  networks 

7  Rationalize  and  simplify  your 
infrastructure. 

EXAMPLE:  Simplity  server  complex  lo 
improve  use  and  reduce  maintenance  and 
support  costs,  and  to  reduce  the  number 
of  data  centers 

8  improve  procurement  practices 
for  IT  products  and  services. 
EXAMPLE;  Restructure  procurement  to 
achieve  a  higher  level  ol  discounts 

9  Outsource  deveiopmeni  and 
support  ft)  offshore  providers. 
EXAMPLE:  Establish  targeted  levels  ol 
outsourcing  to  lower -cost  cournnes.  such 
as  China.  India.  Croatia  and  Canada 
4  A  Review  maintenance  invoices. 
Iw  agreements  and  asset  lists. 
EXAMPLE:  Compare  mamlenance  in¬ 
voices  to  asset  inventory  for  decommis- 
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Confinued  from  page  41 
the  vendors  he  has  discussed  this  op- 
ckio  with.  Hedley  says  the  potential  for 
establishing  such  deals  is  "Very  real.” 

Shared  Sawings 

Many  organizations  have  centralized 
their  IT  c^rations  to  help  rein  in  costs 
over  the  past  few  years.  But  some  glob¬ 
al  firms,  sudi  as  Madison,  N.I.-bas^ 
Wyeth,  a  $14.6  bUlioo  phannaceutical 
company,  have  taken  centralization  a 
step  furrier  and  shifted  to  a  shared-ser¬ 
vices  model  in  regions  where  they’ve 
determined  that  it's  efficient  and  cost- 
effective. 

As  a  bolding  company  with  various 
businesses.  'TT  was  decentralized,  and 
there  was  no  need  to  standardize  or 
have  a  shared-services  function.”  says 
CIO  Bruce  Fadem. 

Since  1996.  Wyeth  has  been  migrat¬ 
ing  to  a  shared-services  model  under 
which  its  various  businesses  and  geo¬ 
graphic  divisions  share  IT  applications 
and  inftastructure  and  their  costs 
across  the  organization.  Having  com¬ 
pleted  the  transition  in  North  America 
and  Larin  America.  Wyeth  b  hoping  to 
consolidate  the  80%  of  its  European 


M  We  have  an 
agingworh- 
foree.andakrtof 
those  people  are 
comMering  reUrenienL  So  as 
we  automate  processes,  we  look 
tor  the  oppoitsiity  not  to  refW 
some  of  ttiose  portions.’ 

OiMW  Bunch,  awior  vioa  prasidant  of 
Moraallon  saviCM,  Tohmssm  Valley 
Anihority.  KmandlB,  Tenn. 

Mlfyou  spend 
t«^  as  many 
dolart,  you  don't 
gat  twtco  as  much 
storage  or  bsndwldlh.  Ihsre's 
a  great  imdtiplying  affect  hi  the 
tach  business.  H  ramps  up 
axpatianlialy,  not  Rnaariy.' 
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business  that  hasn't  already  been  fold¬ 
ed  into  the  shared-services  model. 

Thb  includes  outlying  units  that  still 
have  their  own  dedicated  IT  units. 

“In  2003,  we’re  doing  the  tough 
work,  taking  those  relatively  small 
businesses  and  working  through  the 
political  battles”  to  migrate  them  into 
shared  services  to  further  reduce  costs, 
says  Fadem. 

Still,  there  are  limits  to  applying  the 
shared-services  model  to  all  of  Wyeth's 
international  entities.  In  Asia,  for  in¬ 
stance.  the  company’s  divbions  arc 
much  smaller  and  more  widely  distrib¬ 
uted  than  those  in  other  parts  of  the 
world,  says  Fadem.  So  instead  of  pro¬ 
viding  those  units  with  shared  services 
from  regional  IT  centers.  Wyeth  for 
now  will  allow  them  to  operate  inde¬ 
pendently.  The  company  will  see  how 
those  businesses  grow  and  determine 
at  year's  end  whether  it  makes  sense  to 
revisit  the  shared-services  model  with 
them.  Fadem  says. 

The  cost  savings  generated  so  far 
under  Wyeth's  shared-services  model 
vary  greatly  by  the  level  of  IT  invest¬ 
ment  in  each  region  and  by  other  geo¬ 
graphical  diffiereDces.  Fadem  estimates 
that  the  approach  has  led  to  10%  to  15% 
cost  savings  in  most  regions.  Once  the 
European  piece  of  the  puzzle  has  been 
completed  “well  be  able  to  implement 
services  like  {regional]  enterprise  sys¬ 
tems  that  we  couldn’t  have  done  other¬ 
wise."  he  adds. 

Cleaning  the  Attic 

Some  CIOs  see  the  increased  cost 
pressures  they're  under  as  an  opportu¬ 
nity  to  clean  house  and  get  rid  of  some 
unneeded  or  rarely  used  applications. 
That's  precisely  what  Tennessee  Valley 
Authority  (TVA)  has  done  in  conjunc¬ 
tion  with  its  mtgraiioo  from  Windows 
95  to  Windows  XP,  which  began  in 
October  2001. 

Since  then,  the  KnoxviUe-based 
public  power  company  has  eliminated 
2  JOO  of 4.700  desktop  applications, 
databases  and  other  software,  which 
in  some  instances  included  multiple 
versions  of  the  same  application,  says 
Diane  Bunch,  senior  vice  president 
of  information  services  at  TVA.  The 
ability  to  avoid  future  PC  capacity  up¬ 
grades  b  one  area  of  cost  savings  re¬ 
sulting  from  the  move,  since  fewer 
applications  mean  reduced  CPU  and 
storage  needs,  says  Bunch. 

The  house<teaaing  exercise  also 
gave  TVA  an  opportimity  to  renegotif^ 
ate  site  licenses  for  software  that  U  will 
continue  to  use.  For  example,  a  re¬ 
worked  contract  for  a  project  schedul¬ 
ing  package  should  save  the  company 


$40,000  per  year,  says  Bunch.  “We’re 
working  on  several  other  licensing 
agreements,  and  $10,000  here  and 
$5,000  there  in  cost  savings  can  add  up 
to  significant  cost  avoidance,"  she  says. 

Pennies  on  the  DoHar 

A  growing  number  of  companies  are 
taking  advant^e  of  used  equipment 
that’s  still  flooding  the  market  from 
failed  dot-coms  and  other  businesses. 
Through  online  auctions.  Coming 
lnc.'s  Life  Sciences  dhrision  in  Acton, 
Mass.,  bought  what  CIO  Howard 
Piggee  describes  as  some  “cheap” 
servers.  The  servers  cost  50  cents  on 
the  dollar  and  replaced  most  of  the 
ones  that  were  running  the  company’s 
PeopleSofr  Inc.  enterprise  resource 
planning  system. 

As  a  result  Coming  cut  its  annual 
hardware  licensing  and  support  costs  by 
$100,000  bec^ise  the  newer  servers  it 
bot^t  online  are  less  expensive  to  run 
than  the  older  modeb  th^  replaced. 

Power  in  Numbers 

A  big-doUar  software  licensing  agree¬ 
ment  with  a  major  vendor  was  placing 
a  drag  on  Drexel  University's  IT  bud¬ 
get  so  lohn  Bielec,  vice  president  of  in¬ 
formation  resources  and  technology, 
found  himself  in  search  of  ways  to 
bring  those  costs  down.  Research  on 
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the  topic  led  him  to  a  Middletown, 
Conn.-based  educational  purchasing 
consortium  called  the  North  East  Re¬ 
gional  Computing  Program,  which 
Drexel  join^  last  year  By  doing  so. 
Philadelphia-based  Drexel  was  able  to 
lower  its  annual  software  licensing  fees 
with  the  vendor  in  question,  thanks  to 
special  rates  for  consortium  members. 

Says  Bietec.  “There’s  always  power 
to  negotiate  if  you  have  volume."  I 


Top  10  Ways  to 
Do  More  With  Less 


IAccalarata  tima  to  marfcBt  of  tMh- 
notoflirhaood  buolnow  WMothoo. 
EXAMPlf:  Lotver  total  initiahve  costs 
by  mstnrdurinQ  projects  to  accelerate 
time  to  market 

ZFkuo  on  towHann.  M||h-retuni 
hutaoelnftMtooo. 

EXAMPLE:  Take  on  shor^term  projects 
uptotvmnwnthslortothatbwerbusi* 
nessiirM  costs  and  trstsler  savnos  to 
the  IT  budget 

3  Tramfer  IT  budgM  mentor  from 
rmmiiol  and  enhwcuent  prof- 
•cto  to  toatoiM  traafonoMton. 

EXAMPLE:0oubleorh1plenew- 
inltiative  fundbig  by  reducing  reriewal 
and  enhancement  project  dollars. 

4Solodiw  precooo  eutoeurdno. 

EXAIVLE:  Outsource  desktop 
manaoement  PC  support  atK)  printets. 
C  InereM  to-home  IT  etoff. 

9  EXAMPLE:  Trar^  projects 
that  use  outside  services  to  intem^ 

IT  staff. 


6! 


EXAMPLE:  ToN-free  numbers.  TIs.  long 
distance  and  virtue  private  networks. 


EXAMPLE:  SimpHty  server  complex  to 
improve  use  tfid  reduce  maintenance  and 
support  costs,  and  to  reduce  Ihe  nurttoet 
ofdatacmtfers. 
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hr  IT  products  and  eenrlcne. 
CXAAffLC’.  Restructure  procurement  to 
achieve  a  higher  level  of  discounts. 
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aitoport  to  oMiero  pravidMi. 
EXAMPLt  EsldAsh  tvgetod  levels  ot 
odsoutong  to  knver-cost  countries,  such 
as  China.  IndiB.  Croatia  and  Canada. 
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EXAMPLE:  Compare  maintonance  In¬ 
voices  to  aseet  inventory  tor  decommis¬ 
sioned  assets. 


QUESTION 


software 


INSTANT 

MESSAGING 

PLAY 


SOLUTION 


1 )  WIN  WITH  SPEED:  No  question  aboul  it.  Whether  it's  on  a  PDA 
or  a  PC,  the  faster  your  workforce  can  exchange  ideas,  the  faster 
they  can  act  on  them. 

2]  WIN  WITH  LOTUS:  As  the  leader  in  business  inslant  messaging, 
Lotus  Sametime'  heips  you  locate  and  communicate  with 
the  peopie  you  need,  instantiy  and  secureiy.  Lotus.  Part  of  our 
sotiware  portfolio  inciuding  DB2rTivoli' and  WebSphere' 

31  MAKE  THE  PUT:  Visit  lHii.coai/lotus/team  for  a  Webcast 
on  instant  messaging  and  its  effects  on  speed  of  cotlaboration. 
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Blind  Faith 

Why  is  it  so  hard  to  kill  certain  doomed 
projects?  By  Kathleen  Melymuka 


Everyone  has 
s«*en  if:  fhtf  IT 
protect  that 
takes  on  such  a 
life  of  its  own 
that  it  becomes 
virtualfy  impos¬ 
sible  to  stop, 
even  though  all 
signs  point  to  its 
ultimate  failure.  How  do  proj¬ 
ects  create  this  kind  of  momen¬ 
tum.  and  why  is  it  so  di/pcult 
to  pull  the  plug  on  a  clear  loser? 
In  this  month's  Harvard  Busi¬ 
ness  Review,  isabelteRoyw. 
on  ossisfonf  professor  at  the 
University  0/  Paris.  Dauphine. 
Mames  on  irrafionai  oprtmuim 
(hof  blinds  everyone  involved 
to  the  reality  of  the  project 
Royer  recenffy  spoke  with 
Compuierworid  to  explain  the 
origins  of  this  “collective  belief” 
and  suggest  ways  that  IT  proj¬ 
ect  teams  can  avoid  it 

M  KMTW  anuing  storiM 
aiwul  doamsd  proitcte  that  suckad 
tramandous  amounts  of  tiTM 
and  mources  bofora  anyona 
pdM  lha  ptug.  Why  do  companies 
oflan  find  d  so  hard  to  k«  bad  proj¬ 
ects?  One  could  think  of  man- 
aiicrial  incompetence  or  bu¬ 
reaucratic  inertia.  What  1 
fout>d  b  rather  that  companies 
cannot  envision  that  the  proj¬ 
ect  is  going  to  fail.  This  hap¬ 
pens  ^cause  there  is  a  collec¬ 
tive  belief  among  managers  In 
the  eventual  success  of  the 
project. 

What  b  coBactivo  balaf.  and  how 
doaa  it  adtranaiy  affoct  an  oiQMii- 
zadon?  What  I  call  a  collective 
belief  b  a  strong  conviction 
based  on  feeling  rather  than 
evidence  that  the  project  will 
eventually  succeed  Thb  con¬ 
viction  b  shared  by  most  of 
the  decisioit-makers.  Thb  col¬ 
lective  belief  blinds  them  to 


negative  feedback.  Moreover, 
even  when  they  are  able  (o 
spot  problems,  thb  leads  them 
to  increase  their  commitment 
and  pursue  the  project  more 
ardently.  'ITwy  arc  too  enthusi¬ 
astic  and  emotionally  attached 
to  the  project  to  envision  a 
failure. 

How  does  the  project  champion 
contribute  to  thb  problem?  The 
project  champion  plays  a  key 
role  in  buildiitg  and  sustaining 
the  collective  belief.  He  or  she 
b  usually  the  original  true  be¬ 
liever  who  will  spread  the  be¬ 
lief  to  others  usung  hb  or  her 
credibility  and  charbma. 
When  problems  are  identified, 
the  project  champion  partici¬ 
pates  to  sustain  the  belief  by 
his  or  her  enthusiasm,  or  even 
with  false  reports. 

Vou  note  that  indfvidu^  often 
have  their  own  agondes  that 
strengthen  thb  bedef  in  success. 

Yes,  each  individual  has  per¬ 
sonal  expectations  in  a  com¬ 
pany.  The  CEO  might  sec  the 
project  as  a  way  to  sustain  ac¬ 
tivity  in  a  division,  the  project 
manager  as  a  road  to  promo¬ 


tion  to  a  higher  position.  The 
belief  is  adopted  more  easily 
and  b  stronger  when  it  fulfills 
individual  expectations. 

What  happens  to  dbsenters  when 
you  have  collective  beBef?  Believ¬ 
ers  just  don't  pay  attention. 
When  dissenters  insbt.  believ¬ 
ers  don’t  address  their  con¬ 
cern  but  rather  try  to  discredit 
them.  Typically,  they  accuse 
dissenters  of  a  lack  of  compe¬ 
tence.  So  after  a  while,  db¬ 
senters  stop  voicing  their 
opinion.  Thb  gives  the  im¬ 
pression  of  unanimity. 

I  see  the  danpar,  but  how  can  you 
raBy  a  project  town  imtess  H  tndy 
faeBeves  in  the  project?  At  the  be¬ 
ginning  of  a  project,  there  b 
lots  of  unccnainty,  especially 
when  the  project  is  highly  in¬ 
novative.  Belief  is  needed  to 
start  a  project,  since  evidence 
b  lacking.  But  as  the  project 
unfolds,  data  amass  that  allow 
checking  whether  this  belief 
becomes  reality  or  not.  When 
the  collective  belief  is  too 
strong,  team  members  don't 
interprot  negative  feedback  as 
a  sign  of  failure. 


Moot  IT  projects  have  to  pass 
pariodb  gateway  ravbws  before 
they  can  procaed.  Doesn't  that 
solve  these  probbnw?  This  is 
only  a  first  step.  Periodic  gate¬ 
way  reviews  are  set  up  to  eval¬ 
uate  (he  project  and  decide 
whether  to  continue,  stop  or 
modify  it.  When  a  collective 
belief  dominates,  the  review 
process  is  not  followed  rigor¬ 
ously.  For  instance,  rather  than 
checking  that  a  problem  has 
been  solved,  saying  that  the 
solution  b  at  hand  would  be 
enough  to  go  ahead. 

You  tab  about  some  earty  staffing 
decisions  that  can  short -circuit  the 
deveiopmant  of  oolective  bofief . 
Tel  me  about  those.  Oftentimes, 
managers  staff  project  teams 
based  on  enthusi¬ 
asm  to  participate 
and  go4^  personal 
relationships.  In 
doing  so.  they  cre¬ 
ate  a  cohesive 
group  of  believers 
that  will  have  a 
tendency  to  esca¬ 
late.  To  avoid  that,  it's  impor¬ 
tant  to  involve  people  who  are 
more  skeptical  and  able  to 
point  out  potential  problems. 

It  U  also  important  to  replace 
some  of  the  decision-makers 
during  the  course  of  action, 
because  newcomers  will  look 
at  the  project  with  fresh  eyes. 

But  smoothly  running,  cohesive 
project  teams  are  the  Holy  OraH  in 
IT.  Woiddn’l  this  approach  jeopar¬ 
dize  that  goal?  Thb  b  a  matter 
of  balance.  Personal  rivalry  or 
dissent  in  a  group  would  jeop¬ 
ardize  the  goal,  but  so  would 
too  much  cohesion-  When 
the  cohesion  b  too  strong, 
there  b  no  debate  whatsoever 
inside  the  group  about  the 
project.  Skeptics  in  a  group 
ask  for  more  explanations 
and  evidence  than  others  (be¬ 
fore  they  will  agree  to  move 
ahead].  This  might  lead  to  a 
conflict,  but  a  positive  one, 
leading  to  better  evaluations 
and  decisions. 

Abovs  dk  you  strus  the  nsad  for 
an  •‘txh  champion.*' Who  is  that, 
aref  wftet  deas  ha  or  sha  do?  Well, 
when  most  of  the  people  in¬ 
volved  are  blinded  by  their  be¬ 
lief.  and  when  the  procedure 


b  lenient,  failing  projects  are 
unlikely  to  be  stopped  without 
an  exit  champion.  Exit  cham¬ 
pions  take  the  initiative  to  de¬ 
fend  exit,  which  will  usually 
lead  to  conflict  with  believers. 
To  convince  others  that  exit  is 
a  better  course  than  continua¬ 
tion.  they  have  to  bring  evi¬ 
dence.  which  usually  means 
introducing  or  restorii^  a  rig¬ 
orous  evaluation  procedure. 
This  role  requires  many  quali¬ 
ties  similar  to  (hose  of  ch^- 
pions,  such  as  credibility  and 
risk  taking. 

What’s  the  dffferanca  bttWMn 
an  «dt  champion  and  fha  kind  of 
naysayer  (hat  can  sap  tho  Ilia  out 
of  a  project  taam?  Naysayers  are 
known  to  always  have  a  nega¬ 
tive  opinion,  which 
undermines  their 
credibility.  On  the 
contrary,  the  exit 
champion  b  not 
always  negative. 
Many  of  them  have 
also  been  project 
champions  in  the 
past.  Further,  naysayers  usual¬ 
ly  merely  voice  their  negative 
opinion,  whereas  exit  champi¬ 
ons  take  action  to  defend  exit. 

Exit  champion  seems  Kko  a  thank¬ 
less  rate.  How  do  you  gst  K  to  bo 
vakiad  in  the  company  so  peopla 
wHstopuptothisroto-andbais- 
tonad  to  whan  they  do?  Top  man¬ 
agers  may  point  out  they  value 
thb  role  by  telling  stories  of 
courageous  exit  champions 
who  saved  their  organization 
millions  of  dollars.  They 
should  at  least  make  it  clear 
that  challenges  to  a  popular 
project  are  welcome.  At  the 
same  time,  they  need  to  de¬ 
mand  strong  evidence  regard¬ 
ing  the  need  to  end  a  project. 
Failing  to  do  so  would  system¬ 
atically  favor  exit,  which 
would  discourage  new  proj¬ 
ects.  Here  again,  there  b  a  bal¬ 
ance  to  be  found.  I 


Melymuka  is  a  Compuierworid 
contributing  writer.  Contact  her 
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Blind  Faith 

Why  is  it  so  hard  to  kill  certain  doomed 
projects?  By  Kathleen  Meiymuka 


I  Everyone  has 
seen  it:  the  IT 
project  that 
takes  on  such  a 
life  of  its  own 
that  it  becomes 
virtuaUy  impos- 
^bletostop. 
even  though  all 
signs  point  to  its 
ultimate ^tlure.  How  do  proj¬ 
ects  create  this  land  of  momen¬ 
tum,  and  is  It  so  difficult 

to  pull  the  plug  on  a  clear  loser? 
In  this  month’s  Harvard  Busi- 
oess  Review.  hMeRayet. 
an  assistant  pro^ssor  at  the 
University  ctf  Paris.  Oai^hine, 
blames  on  irrartona/  opfimism 
that  Minds  everyone  involved 
to  the  reality  of  the  project. 
Royer  recently  spoke  with 
CoiDfnnerworld  to  explain  the 
origiits  of  this  “collective  belief” 
and  suggest  ways  that  IT proj¬ 
ect  teams  can  avoid  it. 

Ibi  Ml  ame  mwzinB  storiM 
ibMl  dDOflud  pnjMti  ttM  auctad 


*•  MV.  Miy  d»  eofNpMdaa 
olMi  M  il  a»  hvil  to  Mi  bad  pra(* 

acto?  One  could  think  of  man* 
ageria]  incompetence  or  bu* 
reaucratic  inertia.  What  I 
found  is  rather  that  companies 
cannot  envision  that  the  pn>h 
ect  is  going  to  fiuL  This  hap¬ 
pens  because  there  is  a  coUec- 
live  belief  antong  managers  in 
the  eventtial  success  of  the 
project. 


daaa  I  admaabr  alfaet  an  orgMl’ 
oNm?  What  1  call  a  cMlective 
belief  is  a  strong  conviction 
based  on  feeling  rather  than 
evidence  that  the  project  will 
eventually  succeed  This  con¬ 
viction  is  shared  by  most  of 
the  decision-makers.  This  col¬ 
lective  belief  blinds  them  to 


negative  feedback.  Moreover, 
even  when  they  are  able  to 
spot  problems,  this  leads  them 
to  increase  their  commitment 
and  pursue  the  project  more 
ardently.  They  are  too  enthusi¬ 
astic  and  emotionally  attached 
to  the  project  to  envision  a 
&ilure. 

How  dm  tha  prajact  chanpion 
CMtotaito  to  tMa  proUam?  The 

project  champion  plays  a  key 
role  in  building  and  sustaining 
the  collective  belief.  He  or  she 
is  usually  the  original  true  be¬ 
liever  who  will  spread  the  be¬ 
lief  to  others  using  his  or  her 
credibility  and  charisma. 
When  problems  are  identified, 
the  project  champion  partici¬ 
pates  to  sustain  the  belief  by 
his  or  her  enthusiasm,  or  even 
vrith  Mse  reports. 

\bu  noto  that  indMduato  oAan 
haaa  thak  awn  agaadas  that 

-  .«  .  ■-  w  -  «  ^  - - 

SDangman  Baa  OBaa*  aiwGGBaa. 

Yes,  each  individual  has  per¬ 
sonal  expectations  in  a  com¬ 
pany.  TIm  CEO  might  see  the 
project  as  a  way  to  sustain  ac¬ 
tivity  in  a  division,  the  project 
manager  as  a  road  to  promo- 


don  to  a  higher  position.  The 
belief  is  adopted  more  easily 
and  is  stronger  when  it  fulfills 
indhnduaJ  expectations. 

What  happana  to  dsaantan  whan 
you  hava  colarthw  balaf?  Believ¬ 
ers  just  don't  pay  attention. 
When  dissenters  insist,  believ¬ 
ers  don't  address  their  con¬ 
cern  but  rather  try  to  discredit 
them.  Typically,  they  accuse 
dissenters  of  a  lack  of  compe¬ 
tence.  So  after  a  while,  dis¬ 
senters  stop  voicing  their 
opinion.  Tl^  gives  the  im¬ 
pression  of  unanimity. 

I  tea  tha  dangar,  but  how  can  you 
raly  a  prajact  town  untoaa  R  tndy 
balavas  In  tha  projacC?  At  the 

ginning  of  a  prc^t,  there  is 
lots  of  uncertainty,  especially 
when  the  project  is  highly  in¬ 
novative.  Belief  is  needed  to 
start  a  project,  since  evidence 
is  lacking.  Bui  as  the  project 
unfolds,  data  amass  that  allow 
checking  whether  this  belief 
becomes  reality  or  not  When 
the  collective  belief  is  too 
strong,  team  members  don't 
interpret  negative  feedback  as 
a  sign  of  hiilure. 
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Moat  fT  projacto  hm  to  pm 
pariodc  galMny  nvtoars  baton 
lhay  can  pracaad.  Doawt  thto 
tatoa  thm  probtoma?  This  is 
only  a  first  step.  Periodic  gate¬ 
way  reviews  are  set  up  to  eval¬ 
uate  the  project  and  decide 
whether  to  continue,  stop  or 
modify  it  When  a  collective 
belief  dominates,  the  review 
process  is  not  followed  rigor¬ 
ously.  For  instance,  rather  than 
checking  that  a  problem  has 
been  solved,  saying  that  the 
solution  is  at  hand  would  be 
enough  to  go  ahead. 

Vdu  tail  about  soma  aarly  fltalfing 
dacMons  that  can  Mofl-cbouM  lha 
davatopmanl  of  colactow  balat. 

Tal  ma  about  tooto.  Oftentimes, 
managers  staff  project  teams 

based  on  enthusi-  _ 

asm  to  participate 
and  good  personal 
relationships.  In 
doii^  so.  they  cre¬ 
ate  a  cohesive 
group  of  believers 
that  will  have  a 
tendency  to  esca¬ 
late.  To  avoid  that,  it's  impior- 
tant  to  involve  people  who  are 
more  skeptical  and  able  to 
point  out  potential  problems. 

It  is  also  important  to  replace 
some  of  the  decision-makers 
during  the  course  of  action, 
because  newcomers  will  look 
at  the  project  with  hresh  eyes. 

8to  OTOoWy  nawtoQ.  cohiBtoa 
prolact  toana  m  ttw  Holy  8rM  in 
IT.  VtouMnl  (Mi  approach  jaopar 
dba  (hat  goal?  This  is  a  matter 
of  balance.  Personal  rivalry  or 
dissent  in  a  group  would  jeop¬ 
ardize  the  goal  Imt  so  would 
too  much  cohesion.  When 
the  cohesion  is  too  strong, 
there  is  no  debate  whatsoever 
inside  the  group  about  the 
project.  Skeptics  in  a  group 
ask  for  more  explanations 
and  evidence  than  others  (be¬ 
fore  they  will  agree  to  move 
ahead].  Hiis  might  lead  to  a 
conflict,  but  a  positive  one, 
leading  to  better  evaluations 
and  decisions. 

Abova  A  you  atrm  tha  naad  for 
an  ancnmpMA.  moiimc, 
and  whto  dm  ha  or  aha  do?  Well 
when  most  of  the  people  in¬ 
volved  are  blinded  by  their  be¬ 
lief  and  when  the  procedure 
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is  lenient,  failing  projects  are 
unlikely  to  be  stopped  without 
an  exit  champion.  Exit  cham¬ 
pions  take  the  initiative  to  de¬ 
fend  exit,  s^ch  will  usually 
lead  to  conflict  with  believers. 
To  convince  others  that  exit  is 
a  better  course  than  continua¬ 
tion.  they  have  to  bring  evi¬ 
dence.  which  usually  means 
introducing  or  restoring  a  rig¬ 
orous  evaluation  procedure. 
This  role  requires  many  quali¬ 
ties  similar  to  those  of  cham¬ 
pions,  such  as  credibility  and 
risk  taking. 

What’s  tha  dWarsnca  batwaan 
an  aift  ehaiapton  and  too  ktod  of 
nayiayar  that  can  op  tha  too  out 
of  a  projsct  team?  Naysayers  are 
known  to  always  have  a  nega- 

_  tive  opinion,  which 

undermines  their 
credibility.  On  the 
contrary,  the  exit 
champion  is  not 
always  negative. 
Many  of  them  have 
also  been  project 
champions  in  the 
past.  Further,  naysayers  usual¬ 
ly  merely  voice  their  negative 
opinion,  whereas  exit  champi¬ 
ons  take  action  to  defend  exit 

0tMchaniptonaoamstoaathank* 
toaa  roto.  Hoar  do  you  gal  tt  to  ba 
vihiad  In  (ha  oampany  ao  paopla 
wtotoapMtotMarola-andbola- 
tanad  to  adian  lhay  da?  Tbp  man¬ 
agers  may  point  out  they  value 
this  role  by  telling  stories  of 
courageous  exit  champions 
who  saved  their  organization 
millions  of  dollars.  They 
should  at  least  make  it  clear 
that  challenges  to  a  popular 
project  are  welcome.  At  the 
same  time,  they  need  to  de¬ 
mand  strong  evidence  regard¬ 
ing  the  need  to  end  a  project 
Failing  to  do  so  would  system¬ 
atically  favor  exit,  which 
would  discourage  new  proj¬ 
ects.  Here  again,  there  is  a  bal¬ 
ance  to  be  found,  b 
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Sony  exec  talks  about 
cutting  costs  and  tak¬ 
ing  the  mystety  out  of 
fT.ByJeanConsilvio 

Despite  what  has  been 
one  of  the  worst  years /or 
the  economy,  especially 
cn  the  IT  sector.  Jim  MMe 
says  he  has  accomplished  just  about 
everything  he  said  he  would  when  he 
took  over  as  CIO  at  Sony  Electronics 
Inc.  last  January.  For  starters,  he  helped 
develop  solid  business  cases  for  Sony's 
TTproiects  by  working  with  different 
functiorusl  departments  to  prioritize 
investmerus  and  quantify  their  returns. 
Another  key  goal  he  set  and  met  is  mov¬ 
ing  toward  common  processes  to  in¬ 
crease  the  overall  efficiency  of  U. 

As  CIO.  Milde  is  responsible  for  all 
FT  within  Sony’s  electronics  division, 
which  comprises  about  20,000  users, 
eight  major  manufacturing  operations 
and  100  other ,^ictltries  in  the  US.  Mitde 
says  Sony  views  the  CIO  role  as  much 
more  strategic  than  other  companies  he 
has  been  witii  in  the  past  did.  He  spoke 
with  Computerworld  about  how  he  has 
worked  to  drive  business  change  vAile 
making  sure  that  Sony  gets  the  biggest 


bang  out  of  its  IT  buck  in  his  inaugural 
year  on  the  job. 

What  has  bean  your  biggest  chaHengs  in  the 
past  year?  The  biggest  challenge  would 
be  repositioning  IT  with  the  business. 
The  way  we  went  about  doing  that  was 
really  just  by  buildup  the  level  of  cred¬ 
ibility  and  taking  the  mystery  out  of  IS 
—  from  a  cost  perspective,  from  a  ser¬ 
vice  perspective,  from  new  invest¬ 
ments  and  how  we  improve  and  fund 
projects.  And  most  important,  a  lot 
more  rigor  on  the  ROIs  of  those  invest¬ 
ments.  What  we  found  was  that  there 
wasn't  a  good  understanding  of  what 
the  investments  were  being  spent  on. 
And  [we]  started  putting  up  screens 

for  [justifyu^  IT  project  _ 

investments). 


How  dd  you  accompfah  al 
that?  We  did  set  up  fairly 
active  business-governance 
groups.  Those  groups  have 
decision-making  within 
their  areas,  and  then  broad¬ 
er  questions  go  across  the 
various  constituencies  for  prioritizing 
of  projects.  But  it’s  not  easy,  because 
everyone  wants  what  they  want,  and 
no  one  wants  to  hear  about  someone 
etse’s  project  being  screened  against 
their  project.  We've  been  very  success¬ 
ful  at  just  building  that  relationship, 
the  process  for  ^eraing  and  takii^ 
the  mystery  out  of  the  IT  spend.  And 
quite  frankly,  pannering  —  I  hate  to 
use  that  word  —  but  truly  having  a  seat 
at  the  table  on  these  major  structural 
things  we're  hiking  at  that  have  major 
IS  investments  behind  them. 

Hmt  do  you  go  about  (MennMng  the  ROI 
fartfwMprofocIs?  We  try  to  tUnk  about 
every  investment  dollar  we  spend, 
udiether  it’s  on  routers  or  wdtether  it’s 
on  applications.  So  [the]  first  thing  is 
categorizii^  all  of  our  investment  dol¬ 
lars  that  we  spend.  The  second  thing 
we've  done  is  taken  all  the  "shadow  IT 
spend"  out  of  the  business  and  put  that 
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all  on  the  table  so  we  have  a  true  look 
at  our  total  IS  investment  spend.  Then 
we  go  through,  and  for  every  single 
project  [we  determine  if  it’s]  for  legal 
reasons.  R&D  compliance  reasons,  or 
is  there  real  hard-dollar  ROI  that's  ei¬ 
ther  going  to  drive  efficiency  or  top¬ 
line  sates  growth.  Then  we  start  to 
screen  those  projects  against  what  ap¬ 
plications  we  are  building  them  on  to 
ensure  that  we  eventually  have  a  more 
simplified  application  portfolio.  And 
we've  got  tools  in  place  now  so  that 
every  project  goes  through  a  request 
and  we  can  sort  the  projects  by  these 
different  types  of  categories. 

Lastly,  on  the  [projects]  that  are  ap¬ 
proved  with  the  ROIs,  we  are  working 
with  our  corporate  planning  group  to 
go  into  the  business  areas  and  really 
identify  where  those  bard  dollars  are 
going  to  be  saved  out  of  the  business 
departmental  budgets.  A  lot  of  com¬ 
panies  say  there’s  an  ROI.  but  you 
never  capture  the  savings  in  the  busi¬ 
ness  area. 

How  do  you  got  business  to  buy  in?  My 

fust  few  months  just  talking  to  people 
I  always  asked:  ‘^ell,  tell  me  what  suc¬ 
cess  would  look  like  from  a  business 
perspective  for  what  IS  needs  to  do." 
and  it  was  remarkable  that  a  lot  of  peo- 

_  pie  couldn't  answer  what 

were  the  three  things  they 
would  want  to  see  differ- 
enL  So  we  put  out  a  very 
formal  questionnaire  to  the 
top  SOO  «tecutives  across 
Sony  Electronics,  conduct¬ 
ed  by  Gartner  Inc.  It  essen¬ 
tially  gave  specific  ques¬ 
tions  and  things  that  we 
wanted  opinions  on.  And  quite  fnmkiy. 
it  wasn't  that  positive  of  a  scorecard. 
But  my  point  is,  we're  trying  to  lead  by 
saying,  Tell  me  the  things  that  success 
would  be  predicated  on.  from  the 
voice  of  our  customer."  We’re  taking  a 
Six  Sigma  approach  toward  this,  and 
people  are  starting  to  see  that  we  do 
want  to  make  sure  that  we’re  hearing 
the  voice  of  our  customers. 

And  now  we've  got  actionable  mea¬ 
sures  against  areas  that  we  have  op¬ 
portunities  to  improve  on  and  commu¬ 
nicate  that  back  to  the  business.  It's 
always  risky  doing  that,  because  peo¬ 
ple  can  just  kick  the  IT  dog  if  tb^ 
want  ta  But  the  only  way  I  know  to 
improve  is  to  bear  what  people  want 
improved.  And  when  people  can’t 
articulate  what  they  want  improved. 

I  know  there's  educating  that  we 
have  to  do  to  take  the  mystique  out 
of  IS. . . .  It’s  building  the  credibility 
and  the  trust.  I 
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Train  Worters  ‘Just  in  Tune' 

Another  way  to  maximize  training  dollars,  say 
managers,  is  to  put  the  trainee's  new  knowledge 
to  work  ri^t  away.  At  United  Stationers,  eu^oy- 
ees  get  to  work  on  protects  related  to  their  train¬ 
ing  immediately  after  classes  about  75%  of  the 
time,  says  Uskup.  In  addition,  the  company  gives 
priority  to  skills  training  that  employees  will 
need  in  the  sbMt  term. 

"We  always  try  to  match  training  with  a  task,” 
says  Da>dd  Molcbany,  CIO  of  the  Fairfu  County 
government  in  Fairf^  Va„  wfaidi  annually 
spends  $600,000  on  IT  training.  Managers  work 
with  employees  to  create  a  plan  for  tramees  to 
use  their  know-how  soon  after  a  class.  For  in¬ 
stance,  if  staffers  attend  training  on  installing  Mi¬ 
crosoft  Corp.  products,  they  mi^t  use  udiat  they 
learned  whra  they  return  to  worii  by  performing 
a  software  implementatioa.  Molcbany  calls  the 
‘iust^-dme  trainii^” 

— /uliaKiftg 
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How  Companies 
Deliver  IT  Training 


New  Security 
CertificationTests 
Begin  in  June 


The  10  Hottest 
rr  Certifications 
For  2003 


The  following  ranking  is  based  not  on  the  most 
popular  certincations,  but  rather  oo  the  fastest- 
growing  certiftcations  in  the  industry,  according 
to  Becky  Nagel,  editor  of  CertCities.com.  The  on¬ 
line  magazine  for  IT  professionals  surveyed  its 
readers  to  come  up  with  the  following  list  of  hot 
IT  certifications  for  this  year.  For  each  certifica¬ 
tion  considered.  CertChies  compared  the  number 
of  respondents  who  said  they  hold  a  particular 
certification  with  the  number  who  said  they 
would  be  getting  the  certification  within  the  next 
12  months. 


The  Information  Systems  Audit  and  Control 
Association  in  Rolling  Meadows.  IIL,  will 
begin  offering  the  examination  for  its  new 
Certified  Information  Security  Manager 
(CISM)  designatioD  in  June.  7^  exam  will 
cover  the  following  areas: 


O  FornMNwMariiiahon,0Oto«rwfwJsaGa.orB. 


Evaluating  the 
Cost-Efte^eness 
Of  Training 

Getting  feedback  through  surveys  or  informal 
post-training  interviews  is  a  good  way  to  mea¬ 
sure  the  effectiveoess  of  your  IT  trainii^  mao- 
agers  say.  At  United  Stationers 
Inc.  in  Des  Plaines,  Ill.,  FT  em- 
ployees  fill  out  a  questionnaire 
following  an  IT  training  session, 
says  Ergin  Uskup.  CIO  and  senior  vice  president 
of  MIS.  The  company’s  training  manager  then 
has  one-on-one  follow-up  conversations  with 
employees  to  see  whether  the  experience  met 
their  needs  and  whether  they  would  recommend 
the  class  to  colleagues. 

Three  months  later,  the  training  manager 
checks  in  again  with  employees  and  their  man¬ 
ners  to  see  if  the  training 
helped  the  employees  improve 
their  skills.  Managers  then  act 
on  the  information  gleaned 
ftom  these  conversations.  Unit¬ 
ed  Stationers,  which  allocates 
about  $450,000  per  year  to  train  | 
about  250  IT  employees,  enters  i 
into  partnerships  writh  training  I 
companies  that  receive  a  hi^  I 
rating  and  drops  those  that  per-  I 
form  poorly,  says  Uskup. 


[  QUICKSCAN:  Training  ] 
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What  CIOs  Need  From  IT 
Suppliers:  A  Baker’s  Dozen 


■  ANY  CIOS  ARE  reducing  the  number 
of  IT  suppliers  they  use  in  order  to 
consolidate  purchasing  and  cut  costs. 
Deciding  which  suppliers  to  retain  is 
.  a  complex  decision.  Here’s  a  checklist 


you  can  use  to  decide  which 
suppliers  should  be  on  your 
A-list.  CIOs  need  suppliers 
10  do  the  following: 

1.  DeKver  quality  products 
that  solve  problems.  Suppli¬ 
ers  tnusi  provide  solutions 
that  address  the  needs  of 
the  IT  organization  and  not 
merely  push  their  latest 
products.  This  requires 
careful  listening  and  adapt¬ 
ability  on  the  supplier's 
part.  A  supplier  worth  re¬ 
taining  won't  deliver  just 
a  standard  set  of  Power¬ 
Point  slides. 

Z  Present  a  business  case. 

Suppliers  should  provide  a  customized 
business  case  that  clearly  describes 
scope  and  objectives  and  calculates  re¬ 
turn  on  investment.  Returns  should  be 
measured  using  the  same  metrics  that 
your  IT  organization  uses  to  evaluate 
other  Investments  (such  as  ROI  or  net 
present  value). 

3.  Sell  through  the  IT  orgaruzatlon.  Many 
suppliers  jeopardize  IT  continuity  and 
antagonize  the  CIO  by  attempting  an 
end  run.  selling  direaly  to  business 
units  Of  other  non- IT  executives.  Sup¬ 
pliers  that  take  this  approach  may 
make  the  sale,  but  they  often  fail  to 
understand  the  company's  overall, 
long-term  IT  plans. 

4.  Leash  thek  sales  forces.  Historically, 
many  FI'  suppliers  have  overpromised 
and  underdelivered.  If  you  have  sup¬ 
pliers  that  have  oversold  you.  the  last 
thing  you  want  is  to  rc-up  for  a  repeat 
disappointment. 

5.  0^  enterprise  agreements.  In  many 
organizations,  multiple  business  units 
have  separate  contracts  with  the  same 


supplier.  You  will  want  to 
reward  suppliers  that  offer 
enterprisewide  deals  with¬ 
out  being  asked. 

6.  Find  creattve  ways  to 
meet  customer  objectives. 

For  example,  a  software 
supplier  could  offer  annual 
rental  contracts,  rather 
than  perpetual  licenses,  to 
flatten  customers’  spend¬ 
ing.  Similarly,  if  a  product 
is  easy  to  install,  the  sup¬ 
plier  could  offer  potential 
customers  a  free  trial. 

7.  Adopt  a  toog-term  per¬ 
spective.  CIOs  who  con¬ 
tract  with  IT  suppliers 

usually  take  a  multiyear  perspective 
due  to  the  impact  on  the  infrastructure 
and  the  high  cost  of  switching  suppli¬ 
ers  midstream.  Similarly,  CIOs  need 
suppliers  to  broaden  their  perspec¬ 
tives  beyond  end-of-quarter  concerns 
and  focus  on  building  effective  long¬ 
term  relationships. 

B.  Conrnnmicate  effoctively.  The  CIO 
needs  concise  reports  on  key  mes¬ 
sages.  Status  changes,  especially  bad 
news,  should  be  communicated  imme¬ 
diately  to  give  the  customer  time  to 
make  necessary  adjustments.  No  one 
can  afford  to  be  bltndsided  by  bad 
news  —  especially  a  CIO,  whose  suc¬ 
cess  is  greatly  impacted  by  the  perfor¬ 
mance  of  critical  IT  suppliers. 

9.  Dellvar  on  their  commitments.  Look 
for  suppliers  willing  to  earn  your  trust 
by  doing  what  they  promise,  when 
they  promise,  at  the  agreed-upon 
price.  Standout  suppUers  do  ntore 
than  the  contract  requires. 

10.  Provide  a  consistent  account  team. 
Every  new  person  the  supplier  adds  to 


the  account  team  must  be  educated 
about  your  needs  and  culture.  Staff 
continuity  saves  time,  effort  and  frus¬ 
tration  for  both  the  IT  organization 
and  the  vendor. 

t1.  Be  visible  and  available.  Beware  of 
suppliers  that  disappear  as  soon  as  the 
product  is  delivered.  The  quality  of 
the  supplier’s  aftermarket  support  is 
critical  and  can  largely  determine  the 
climate  for  the  next  contracting  eflfort. 
In  one  case,  a  vendor  signed  a  strate¬ 
gic  agreement  with  a  very  large  cus¬ 
tomer.  Then,  for  the  next  18  months, 
the  sales  representative  failed  to  call 
on  the  CIO.  reasoning  that  the  CIO 
“did  not  want  to  be  bothered."  When 
the  CIO  tracked  the  sales  rep  down, 
the  CIO  told  him  that  the  contract 
wouldn’t  be  renewed. 

12.  Use  a  customer-centric  incentive  pro¬ 
gram.  Many  suppliers’  incentive  pro¬ 
grams  reward  sales  efforts  —  at  the 
expense  of  customer  satisfaction  and 
retention.  Look  for  suppUers  with  sales 
and  satisfied  customers.  Both  goals 
should  be  reflected  in  an  effective  in¬ 
centive  plan.  Look  for  sales  plans  that 
delay  part  of  the  commission  until  the 
product  operates  successfully. 

13.  Prowde  an  executIvHevel  feedback 
channel.  A  key  suppUer  executive 
should  monitor  service  and  relation¬ 
ship  qualit>'.  Suppliers  that  wait  to  talk 
to  the  customer  until  contract  renewal 
time  may  find  that  it's  too  late  to  ap¬ 
pease  an  unhappy  customer. 

Addressing  these  needs  will  signifi¬ 
cantly  increase  a  supplier's  value  to 
your  IT  organization.  Consistent  de¬ 
livery.  effective  communication  and 
integrity  form  the  foundation  for  a 
long-term,  mutually  beneficial  rela¬ 
tionship.  Suppliers  that  demonstrate 
these  characteristics  are  the  ones  to 
whom  you  should  offer  future  busi¬ 
ness  and  select  as  trusted  advisers.  I 
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Latar  (fit  month, 
CMof  Tichnoloinr 
(WicarJOHN 
McKlNLEY  JR., 
who  hewk  Morril 
LynchACa's 
globai  technol¬ 
ogy  and  nrvicos 
unk.  wflloBM  the 
NtwYorkbrakor- 
age  after  more  than  lour  yoan  on 
the  lob.  McKinley  was  instnjmental 
in  Grafting  many  lay  outsourring 
parinarahips.  roCng  out  Linux  in 
the  data  center  aref  helping  the  ftm 
recover  qMckly  after  the  Sapt  n 
terrorW  attacks. 

In  the  comino  weeks,  McKUey 
says  hel  be  searching  lor  a  posilion 
In  the  technology  aedor.  where  ha 
got  hie  start.  He  abo  hasn't  ruled 
out  stailhig  his  own  company.  He 
spehe  mMi  CornpoferMwkfs  Lucas 
Msariin  rinul  his  sxperisnoe  at 
Marrl  Lynch,  loam  bdUng  and  the 
future  of  Unix. 

Why  are  you  leaving  Merrl  Lynch? 

It's  been  a  great  run  being  at  Merrill, 
almost  tour  and  a  hall  years.  I've  been 
a  CTO  lor  about  eight  years,  first  with 
(BE  (Baprtal  and  then  with  MerrilL  I 
think  it  was  a  great  experience,  but  I 
cut  my  teeth  in  the  systems  integra¬ 
tion  business,  growing  up  at  Ernst  & 
Young.  I  really  do  want  to  get  back  to 
3  frontline  position,  potentially  an  op¬ 
erating  rcrie  in  a  technology  company. 
The  dialogues  I'm  having  now  are 
along  tfx^  lines. 

Why  would  you  want  to  rrsntor  the 
technology  sodor  DOW.  whan  i(*t 
having  such  a  hard  tins?  I  really  be¬ 
lieve  we're  only  into  the  second  ch«)- 
ter  of  the  technokigy  story  in  terms  of 
its  impact  on  business,  f  really  beheve 
it  you  wait  tor  a  market  space  to  be 
validated,  the  value-aeation  opportu¬ 
nity  is  gone.  This  is  a  sector  that's  not 
lor  the  faint  of  heart,  but  there  are  still 
so  many  nch  veins  to  mme  In  terms 
of  cxiporlunity  that  it's  just  loo  com¬ 
pelling  to  me. 

Any  fWds  you’re  toohiiig  There 
are  a  number  of  ones  f  m  looking  at 
now  across  the  gamut  in  the  software 
sp^  the  wireless  space 

Whit  WB  Iho  mod  dMicuK  thng 
you  dkl  whia  d  MarrW  Lynch?  The 

most  difficutt  thing  the  entire  team 
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What  CIOs  Need  From  FT 
Suppliers:  A  Baker’s  Dozen 


BART  PERKINS 


M 


ANY  CIOS  ARE  reducing  the  number 
of  IT  suppliers  they  use  in  order  to 
consolidate  purchasing  and  cut  costs. 
Deciding  which  suppliers  to  retain  is 
a  complex  decision.  Here’s  a  checklist 


you  can  use  to  decide  which 
suppliers  shcmJd  be  on  your 
A-Ust  CIOs  need  suppliers 
to  do  the  following: 

tOilMrqually  products 
thil  solvo  proUoim.  Suppli¬ 
ers  must  provide  solutions 
that  address  the  needs  of 
the  IT  organization  and  not 
merely  push  their  latest 
products.  This  requires 
careful  listening  and  adapt¬ 
ability  on  the  supplier’s 
part  A  supplier  worth  re¬ 
taining  won’t  deliver  just 
a  standard  set  of  Power¬ 
Point  slides. 

2.  Proront  a  buiinan  casa. 

Suppliers  should  provide  a  customized 
business  case  that  clearly  describes 
scope  and  objectives  and  calculates  re¬ 
turn  on  investment  Returns  should  be 
measured  using  the  same  metrics  that 
your  IT  organization  uses  to  evaluate 
other  investments  (such  as  ROl  or  net 
present  value). 

3.  Sal  through  tha  IT  organization.  Many 
suppliers  jeopardize  IT  continuity  and 
antagonize  the  CIO  by  attempting  an 
end  run.  selling  directly  to  business 
units  or  other  non-lT  executives.  Sup¬ 
pliers  that  take  this  approach  may 
make  the  sale,  but  they  often  fail  to 
understand  the  company's  overall, 
long-term  IT  plans. 

4.  Uaah  thair  aaiat  forcaa.  Historically, 
many  IT  suppliers  have  overpromised 
and  underdelivered.  If  you  have  sup¬ 
pliers  that  have  oversold  you.  the  last 
thing  you  want  is  to  re-up  for  a  repeat 
disappointment. 

5. Qllaranlarpriaaayaainents.lnmany 

organizations,  multiple  business  units 
have  separate  contracts  with  the  same 


supplier.  You  will  want  to 
reward  suppliers  that  offer 
enterprisewide  deals  with¬ 
out  being  asked. 

6.  FM  craativa  ways  to 
meet  custornor  ohjacthias. 

For  example,  a  software 
supplier  could  offer  annual 
rental  contracts,  rather 
than  perpetual  licenses,  to 
flatten  customers'  spend¬ 
ing.  Similarly,  if  a  product 
is  easy  to  install,  the  sup¬ 
plier  could  offer  potential 
customers  a  free  trial 

7.  Adopt  a  kmg-tann 
spectiva.  CIOs  who  con¬ 
tract  with  IT  suppliers 

usually  take  a  multiyear  perspective 
due  to  the  impact  on  the  infrastructure 
and  the  high  cost  of  switching  suppli¬ 
ers  midstream.  Similarly.  CIOs  need 
suppliers  to  broaden  their  perspec¬ 
tives  beyond  end-of-quarter  concerns 
and  focus  on  building  effective  long¬ 
term  relationships. 

8.  Communicate  effecUvaty.  Tl^  CIO 
needs  concise  reports  on  key  mes¬ 
sages.  Status  changes,  especially  bad 
news,  should  be  communicated  imme¬ 
diately  to  give  the  customer  time  to 
make  necessary  adjustments.  No  one 
can  afford  to  be  blindsided  by  bad 
news  —  especially  a  CIO.  whose  suc¬ 
cess  is  greatly  impacted  by  the  perfor¬ 
mance  of  critical  IT  suppliers. 

9.  Oliver  on  their  cororaHmanto.  Look 
for  suppliers  wUling  to  earn  your  trust 
by  doing  what  they  promise,  when 
they  promise,  at  the  agreed-upon 
price.  Standout  suppliers  do  more 
than  the  contract  requires. 

10.  Provfds  a  coiwirt^  account  team. 
Every  new  person  the  supplier  adds  to 


the  account  team  must  be  educated 
about  your  needs  and  culture.  Staff 
continuity  saves  time,  effort  and  frus¬ 
tration  for  both  the  IT  organization 
and  the  vendor. 

11.  Ba  visbia  Mid  avalabla.  Beware  of 
suppliers  that  disappear  as  soon  as  the 
product  is  delivered.  The  qtialiry  of 
the  supplier’s  aftermarket  support  is 
critical  and  can  largely  determine  the 
climate  for  the  next  contracting  effort. 
In  one  case,  a  vendor  signed  a  strate¬ 
gic  agreement  with  a  very  large  cus¬ 
tomer.  Then,  for  the  next  18  months, 
the  sales  representative  failed  to  call 
on  the  CIO.  reasoning  that  the  CIO 
“did  not  want  to  be  bothered.”  When 
the  CIO  tracked  the  sales  rep  down, 
the  CIO  told  him  that  the  contract 
wouldn't  be  renewed. 

12.  Usa  ■  customer-centric  tneanttva  pro- 
grMTi.  Many  suppliers'  incentive  pro¬ 
grams  reward  sales  efforts  —  at  the 
expense  of  customer  satisfaction  and 
retention.  Look  for  suppliers  with  sales 
and  satisfied  customers.  Both  goals 
should  be  reflected  in  an  effective  in¬ 
centive  plan.  Look  for  sales  plans  that 
delay  part  of  the  commission  until  the 
product  operates  successfully. 

IS.  Provida  an  axacuBve  larol  feedback 
channeL  A  key  supplier  executive 
should  monitor  service  and  relation¬ 
ship  quality.  Suppliers  that  wait  to  talk 
to  the  customer  until  contract  renewal 
time  may  fmd  that  it’s  too  late  to  ap¬ 
pease  an  unhappy  customer. 

Addressing  these  needs  will  signifi¬ 
cantly  increase  a  supplier's  value  to 
your  IT  organization.  Consistent  de¬ 
livery,  effective  communication  and 
integrity  form  the  foundation  for  a 
long-term,  mutually  beneficial  rela¬ 
tionship.  Suppliers  that  demonstrate 
these  characteristics  are  the  ones  to 
whom  you  should  offer  future  busi¬ 
ness  and  select  as  trusted  advisers.  I 
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aga  star  man  tiwH  few  ym  cn 
la  fob.  MefOriqr  waa  MnaitoMal 
I)  cnMng  imr  hay  odMureino 
IwMnlibai.  nilUg  ant  Unn  to 
tire  Ma  oanlv  and  halpiig  tha 
raoomr  qaiddr  idlar  Aa  SwA  n 
tanwtotMticdn. 


hi  flw  oantag  waaki,  McMbday 
nyt  ka1  ba  aaaRking  far  a  patolian 
in  tha  tadnolagy  aKtor.  vdiara  ba 
got  til  atart.  Ha  atao  bMHT  nM 
aut  Marlbig  Ma  oam  eanpaiy.  Ha 
apohi  wWi  OaqpidBrwrlif I  Licaa 
Miarian  abani  hfa  wtoarianca  M 
Haft  Laneh.  laam  baldbv  and  Iba 
bdunafUnoL 


Why  an  you  laairtag  Man!  Lyadi? 

tfs  been  a  great  run  being  at  Merri. 
almost  tow  and  a  ball  years.  Tve  been 
a  CTO  tor  about  eigM  years,  first  with 
6E  Capital  and  then  wMb  MerrW.  I 
think  it  was  a  great  experience,  but  I 
cut  my  tedh  in  the  systems  integra¬ 
tion  business,  gnnving  up  at  Bnst  & 
)bung.  I  really  do  want  to  get  back  to 
a  frontitoe  position,  potentidh  an  op- 
erating  role  in  a  technology  coTTfiany. 
The  dialogues  I'm  having  now  are 
along  those  lines. 

tMhy  WBidd  you  vrenl  to  rranlir  the 
tacbnalogy  actor  aaw,  when  11% 
havtag  auch  a  had  toa?  I  ready  be¬ 
lieve  we’re  only  into  the  second  chap¬ 
ter  of  the  tedvioiogy  story  tn  lenrn  of 
its  impact  on  busing  ( ready  believe 
if  you  wail  for  a  market  space  to  be 
validated  (he  vakie-creation  opportu¬ 
nity  Is  gone.  This  is  a  sector  thd's  not 
for  the  taint  of  heart  but  there  are  sti 
so  many  rich  veins  to  mine  in  terms 
of  opportunity  that  It's  kst  loo  com- 
peAngtome. 

Any  IWdi  yw’re  taoktag  at?  There 
are  a  number  of  ones  Tm  lookina  at 
now  across  the  gamut  in  the  software 
space,  the  wveless  space. 

WhM  wa  the  mat  dMcub  tNng 
yw  dhf  whie  at  IM  l|Mdi7  The 

rnosi  (Ifticult  thing  the  entire  team 


vrw.ccpinputeniDrU.com 
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did  was  rebuilding  the  finn  after 
est^riishmg  three  new  trading  floors 
in  six  days  [and]  r^)uilding  wholesale 
portions  of  our  global  network.  H  re¬ 
quired  Iftcredfele  creatrvHy.  but  also 
^  heroism  and  commitment. 

\Mhat  do  you  cmtiiir  your  i«xt  big 
^  chalanooTlMimately.everyexperi- 

enceyoudohastobeagro^experf- 
ence.  We're  in  a  profession  where 
50%  of  skills  are  obsolete  in  three 
years.  So  if  you're  not  constantly 
challenging  yourself  to  grow  and 
expand,  you're  doing  yourself  a  huge 


The  biggest  litmus  test  for  me  is. 

Do  t  have  a  passion  about  the  space 
that  company  is  in?  Do  tttey  have 
something  that  represents  sustained 
competitive  advantage?  And  is  there 
a  cultural  fit? 

toaidoilng  your  pMoaophy  it  Mvrfl 
lynch  of  oulMfcbie  awyfHng  aid 
ovaythbig  dud  can’t  bo  done  by  yonr 


bHwuM  iMin.  do  you  Ihbdi  dwyi 
conllnuo  on  dm  w^  >bur  biggest 
sustaining  contriwtion  to  an  organiza¬ 
tion  is  the  t^  base  you  developed 
over  your  tenure.  We've  got  dte  best 
techriology  team  on  Wal  Street.  I  think 
that  mastering  being  a  virtuU  organiza¬ 
tion  is  somedwig  we've  worked  hard  at 
over  the  past  few  years,  and  it's  some¬ 
thing  that  wi  continue  goino  forwad. 

It  just  too  much  sense. 

It's  al  around  looking  at  [business 
process  outsourcing]  opportunities, 
partnerships  at  the  infrastructure  level 
and  next-generation  ASP  opportuni- 
ties.R)rus.anexampleofciurphaos' 
ophy  is  the  deal  we  brokered  with 
Thomson  Financial  to  put  in  aM  new 
broker  technology.  I  think  youl  see 
more  plays  of  a  simiar  nature  going 


Wl  you  iln  ty  to  atwt  vMhI  Wbb 


nharaw  you  ftt?  rm  a  Ian  of  lever¬ 
age,  and  I  think  partneships  with 


worid-classprovidersattheinfTastntt- 
ture  level,  at  the  application  level  and 
at  the  senrices  layer  al  make  a  ton  ol 
setse.  Theyl  certainly  be  Ihe  blades 
in  tny  Swiss  Army  Knife  going  forward. 

M  dwv’s  aowNddi*  you  cndd  Uiart 
wdh  odHfi,  wImI  wetod  you  otor 
you  bUM  hmod  10  a  CTO?  A  lot 

of  the  best  practices  to  managing  a 
technology  function  can  be  stolen 
from  the  business  playbook.  Great 
organizations  are  value-based,  f^ople 

Your  biggest 
sustatooM 
contrixiliontoan 
organization  is  the 
tamit  base  you 
developed  over 
your  tenure. 


JOHN  MCKINLEY.  CTO. 
UERRIIL  LYNCH  C  CO. 


vdw  share  a  common  set  of  values, 
understand  [how  to]  reward  behaviors 
and  unders^  what  dials  to  turn 
in  terms  of  progressing  their  own 
caeeis.  Doing  a  tew  thtogs  wel  is 
a  winning  playbook. 

H  we  look  back  at  the  period  of 
'97to2000-tii8llechnologyexuber- 
vice  era  - 1  think  in  our  profusion  we 
were  probably  nol  very  good  portfolio 
managers.  We  wound  up  workmg 
on  the  A-bsl  but  also  were  working  on 
the  B-list  and  half  the  C-hsl.  I  think  that 
leads  to  lacMusler  benefits.  You  spread 
your  talent  base  [vid]  your  resources 
loo  thinly. 

I  thtok  the  third  Hang  is  that  I's  aM 
around  locus  on  meastfement  and 
matangsureyouhavetherightinfra- 
struchve  to  place  tor  everything,  from 
service  quaMy  to  fiiy  understanding 
your  unit  cost  of  service  defevery. 

Ultimately,  if  you  can't  measure  It. 
you  can't  mprove  linvesttog  in  your 
processesandyourtohastructures^)- 
portlng  IT  as  a  business  is  critical 


HowUoaralideywaaaUMiFltor 

tag  to  oonvatoae  Mb  Mtorii  Uadi? 

M's  a  vendor-atyiostc  technotogy 
which  providas  a  lot  of  opportundy 
tor  tapping  Into  mMabon  from  mjlti- 
ptesuppbets.bulil'salsoaboulman- 
agng  yore  cost  base  more  effedMly 
ithfik  that  UnuxB  powerful  because  it 
scales  ito  and  scales  down  You  can 
gel  a  scaled-down  Unui  kernel  to  a 
400k  footprint.  At  the  same  time,  you 
can  run  136.000  transactions  on  a 
Linux  duster. 


Dd  you  aae  WIndowe  realy  taitag  out 
tolbuBtotoelulreuYTonie.  K'sal 
around  matotanng  choice.  The  one 
thmg  I  can  guarantee  is  UnuK  wi  be 
an  ireportanl  tool  al  Merri  over  toe 

next  10  years. 

Ultim^.  I  Ne  to  have  choice  with 
Linux,  and  I  think  ore  rendore  perform 

betterwhentoere'sabeltercompdi- 
hve  dynamic.  And  I  think  Ltoux  helps 
foster  a  sense  of  compeMive  dynamic 
amongalmyvendore.l 
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IT  Careers  in  Cyber  Security 


SQL  Slammer,  the  worm  that  Infected  the  Internet  on 
ian.  27,  proved  a  grim  reminder  of  how  cyber  terror¬ 
ism  can  affect  us.  ATMs  wouldn’t  dispense  money, 
healthcare  facilities  lost  file  search  capabilities,  and 
messaging  worldwide  slowed  to  a  crawl. 

‘(The  Slammer)  showed  how  depertdent  we've 
become  on  the  Internet  but  how  fraught  with 
problems  its  security  is,‘  says  Federal  CIO  Council 
member  Ira  Hobbs,  deputy  CIO  for  the  U.S. 
Department  of  Agriculture.  Hobbs,  who  wortcs  on  the 
courKil's  human  capital  committee,  says  the  group 
has  identified  cyber  security,  solution  architecture 
and  protect  management  as  the  most  critical  IT  occu¬ 
pations  to  our  nation’s  future.  *We  believe  the  future 
is  in  dealing  with  domestic  or  intemaliot\a)  cyber 
terrorism,  and  cyber  security  professionals  will  be 
the  troops.*  he  adds. 

Barry  Thornton,  co-founder  and  chief  technology 
officer  at  ClearCube  Technology  In  Austin.  TX,  is 
among  those  who  agree.  ‘Ours  is  a  simple  solution: 
deny  the  bad  guy  physical  access  to  the  hardware 
and  the  network."  says  Thornton  of  ClearCube's 
products.  Cr>cryption  solutions  will  be  the  work  of 
mathematicians,  he  claims,  which  leaves  companies 
such  as  ClearCube  to  develop  solutions  that  prevent 
outsiders  from  penetrating  a  network. 


The  issue  is  finding  IT  experts  In  cyber  security. 

The  Naval  Post  Graduate  School  now  offers  a 
master's  degree  program,  and  the  Home  Cyber 
Corps  is  a  federally  funded  program,  through 
the  National  Science  Foundatiorv  that  is 
building  leaching  and  accreditation  capacity 
at  colleges  and  universities  throughout  the 
country.  Until  this  training  capacity  builds. 

Thornton  and  Hobbs  have  a  list  of  skills  for  IT 
professionals  interested  in  cyber  security. 

‘They  need  a  background  in  hardware  and 
software,  project  management  skills,  good 
analytical  skills  and  intrusion  detection  skills.* 
says  Hobbs.  It’s  the  intangible  competencies 
that  set  cyber  security  professionals  apart  >  what 
Hobbs  calls  the  investigative  bent  and  Thornton  calls 
simple  imagination.  ‘When  I  interview  an  engineer, 
my  main  interests  are  in  his  or  her  passion  for  the 
art.’  adds  Thomloo.  ‘There  is  lIHle  or  no  ‘prior  art'  for 
the  engineer  to  draw  upon,  so  imagination  must  take 
over.  Anything  conirolted  by  software  can  eventually 
be  hacked  so  this  is  an  intellectual  game  where  the 
guy  with  the  best  imagination,  at  that  time,  wins  * 

The  luster  on  cyber  security  careers  continues  to 
build.  Hobbs  says  every  federal  agency  has  new  IT 
security  reporting  requirements.  His  agency,  the 


J 


USOA.  currently  empfoys  6,000  IT  professionals. 
‘Right  new.  for  me.  this  (building  people  capabili¬ 
ties  in  cyber  security)  has  been  my  world."  he  adds. 
‘Three  to  five  years  from  now  we’ll  be  dealing  with 
cyber  issues  we  can't  imagine  now." 
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Obstacles  Hinder  H" 
Portfolio  Management 


Investment-tracking 
approach  dra\\'s 
interest,  howe\'er 


Many  it  managers 
are  keen  on  the 
notion  of  setting 
up  a  portfolio 

mana^meot  approach  to  help 
gauge  the  value  of  technology 
investments.  But  those  who 
try  to  do  so  often  run  into 
start-up  problems,  such  as 
trouble  getting  buy-in  from 
business  units,  according  to 


attendees  at  a  Meta  Group  Inc. 
conference  here  last  week. 

Several  attendees  also  said 
they  fear  that  making  informa¬ 
tion  about  the  financial  value 
of  investments  readily  avail¬ 
able  could  make  them  seem 
like  IT  police  in  the  eyes  of 
business  managers  who  fond 
projects.  In  addition,  they  cit¬ 
ed  concerns  that  the  data 
might  not  be  folly  accurate. 

like  other  IT  executives  in¬ 
terviewed  at  the  Metamorpho¬ 
sis  conference,  fun  Larkin  said 
he  thinks  his  company’s  busi¬ 
ness-unit  leaders  *could  bene¬ 
fit  from  seeing  how  technolo¬ 


gy  is  being  used  and  the  kinds 
of  payback  we’re  getting." 

Larkin  manages  application 
development  information  sys¬ 
tems  at  SRP,  a  Tempe.  Ariz.- 
based  utility  that  spends  about 
SlOO  million  a  year  on  IT. 
“We'd  like  to  put  an  IT  portfo¬ 
lio  management  practice  in 
place,  but  we're  smiggUng 
with  how  to  pitch  this  to  se¬ 
nior  management.''  he  said. 

A  growing  number  of  com¬ 
panies  are  adopting  the  port¬ 
folio  management  concept,  in 
which  IT  projects  and  assets 
are  evaluated  in  much  the 
same  way  that  financial  port¬ 


folios  are  iQuickLink  31864]. 

At  the  conference.  Meta  re¬ 
leased  the  results  of  an  e-mail 
survey  h  conducted  last 
month  with  219  prospective 
anendees.  A  total  of  S64ta  said 
they  have  either  launched  an 
IT  portfolio  management  pro¬ 
gram  or  plan  to  do  sa 

Some  organizations  “are  do¬ 
ing  rr  KKls  and  IT  10-Ks" 
that  are  equivalent  to  the 
monthly  and  quanerly  finan¬ 
cial  updates  that  publicly  held 
companies  have  to  file,  said 
Howard  Rubin,  executive  vice 
president  at  Stamford.  Conn.- 
based  Meta.  The  reports  pre¬ 
sent  financial  breakdowns  of 
IT  investments  that  are  in  the 
pipeline  as  well  as  existing 
systems,  he  added. 

Elut  such  disclosures  can 
pose  a  problem  for  IT  man¬ 
agers.  "Some  find  the  visibility 
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Kaiser _ 

its  own  automated  record  sys¬ 
tem.  David  O'Grady,  a  Kaiser 
spokesman,  said  the  HMO 
started  that  project  in  the  mid- 
1990s  because  comprehensive 
off-the-shelf  software  didn't 
exist  then  Versions  of  the  in- 
lemally  developed  system 
have  been  rolled  out  in  states 
such  as  Colorado  and  Hawaii 

But  Epic  has  developed  its 
software  to  the  point  that 
Kaiser  officials  believed  it 
would  be  more  cost-effective 
to  switch,  O'Grady  said.  He 
wouldn't  disclose  ndiat  Kaiser 
has  spent  on  the  initial  project 
but  said  press  reports  in  the 
1990s  pegs^  the  expected 
cost  at  close  to  $1  billion. 

3M  spokesman  John  Buko- 
Vinsky  said  his  company  has 
worked  with  Kaiser  on  a  num¬ 
ber  of  successful  projects  and 
expects  to  continue  to  be  in¬ 
volved  in  IT  work  at  the  HMO. 
which  uses  IBM's  systems  and 
its  DB2  database. 

Andy  WiesenthaL  associate 
executive  director  of  the  Pe^ 
manente  Federation,  the  na¬ 


tional  governing  organization 
for  Kaiser's  medical  groups, 
said  it's  expected  to  take  three 
years  to  folly  roll  out  the  new 
system  to  the  health  plan’s  fo- 
ciUcies.  located  in  nine  states 
and  the  District  of  Columbia. 

When  it's  completed,  the 
system  will  let  Kaiser's  health 
care  workers  electronically  ac¬ 
cess  the  records  of  any  pa¬ 
tient.  Wiesentha]  said.  In  addi¬ 
tion.  health  plan  members  will 
be  able  to  use  the  system  via 
the  Internet  to  schedule  ap¬ 
pointments,  seek  referrals  or 
request  prescription  refills. 

Kaiser  hasn't  finalized  the 
system’s  topology,  said  Wies¬ 
enthaL  But.  he  added,  the  elec¬ 
tronic  medical  records  mil  be 
boused  in  Kaiser's  Corona, 


CaliL,  data  center  and  tied  to 
servers  in  the  facility  that  will 
handle  processing  for  different 
regional  operations.  Kaiser  of¬ 
ficials  should  decide  by  the 
end  of  this  month  whether  to 
use  thin-cUent  terminals  or 
PCs  and  woricstations  to  pro¬ 
vide  access  to  end  users. 
Wksenthal  said. 

Call  Dvorak.  Epic's  chief  op¬ 
erating  officer,  said  the  com¬ 
pany's  software  can  store 
45,000  data  elements  that  cov¬ 
er  all  aspects  of  patient  care. 
Dvorak  added  that  Kaiser's 
system  will  manage  all  end- 
user  interactiiMis  through 
Cad>e,  a  multidimensional 
database  developed  by  Inter- 
Systems  Corp.  in  Cambridge. 
Mass.,  for  use  in  transaction- 


I  processing  applications. 

I  It's  unusual  for  a  large  health 
care  organization  to  rely  so 
heavily  on  one  vendor,  said 
Ral{4)  Reyes,  senior  vice  presi¬ 
dent  at  Klas  Enterprises  LLC 
an  Orem.  Utah-ha^  company* 
that  measures  the  perfonnance 
of  health  care  IT  systems.  But 
Reyes  added.  Epic  has  topped 
Idas'  list  of  more  than  200  IT 
vendors  for  the  past  three 
years,  based  on  perfonnance 
reports  from  3.500-plus  health 
care  facilities. 

Thomas  Haixiler.  an  analyst 
at  Gartner  Inc.  in  Stamford, 
Coon.,  said  the  Kaiser  deal 
poses  a  challenge  for  ^ic, 
which  has  annual  revenue  of 
about  SlOO  million  and  hasn’t 
worked  on  sudi  a  large-scale 
project  before.  But  if  the  roll¬ 
out  succeeds,  it  will  put  pres¬ 
sure  on  other  health  care 
providers  to  deploy  paperless 
record  systems,  be  added. 

Francis  |.  Crosson.  executive 
director  of  the  Dermanente 
Federation,  said  the  l^ic  sys¬ 
tem  will  help  Kaiser  satisfy  all 
the  requirements  of  the  fe^- 
al  Health  Insurance  Portability 
and  Accountability  Act.  due  lo 
take  effect  in  AprU.  I 
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of  the  portfolio  very  threaten¬ 
ing,"  said  Mike  Metcalf,  vice 
president  of  marketing  at  Pa¬ 
cific  Edge  Software  Inc.,  a 
vendor  of  IT  portfolio  man¬ 
agement  tools  in  Bellevue. 
Wash.  They  feel  the  data  they 
have  isn’t  as  accurate  as  it 
should  be.  and  they're  being 
asked  to  share  this  infonna- 
tioo  at  a  very  high  level" 

Dan  lones,  senior  director 
of  ctistomer-focing  systems  at 
ConAgra  Foods  Inc.,  said  the 
Omaha-based  food  processiz^ 
company  b  "doing  some  com¬ 
ponents  of  IT  portfolio  man- 
agement,  but  we  probably 
don't  call  it  that"  For  example, 
ConAgra  has  implemented 
systems  for  use  in  tracking  its 
IT  assets.  Jones  said. 

Sun  Microsystems  Inc 
launched  an  IT  portfolio  man¬ 
agement  initiative  about  six 
months  ago.  of  the  chal¬ 
lenges  Pm  fadi^  is  finding  a 
(softwarel  tool  that  meets  our 
needs  and  runs  on  Solaris,"  said 
Halina  Tabaoek.  manager  of  rr 
planning  and  practices  at  Sua  I 
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FRANK  HAYES  •  FRANKLY  SPEAKING 

Tough  Stuff 

INFORMATION  TECHNOLOGY  ISN’T  EASY.  It  never  has  been. 
Sure,  it  looks  easy  when  vendors  trot  out  their  product  pre¬ 
sentations.  It  sounds  easy  when  pundits  and  analysts  tout 
technologies  they’ve  never  tried.  It  even  seems  easy  when  we 
confidently  set  our  project  schedules  and  lay  out  for  business- 
side  managers  how  quickly  they’ll  get  a  return  on  an  IT  investment. 
Rigged  demos  and  dazzling  dog-and-pony  shows  are  easy. 

Actually  making  IT  work  isn’t.  It’s  really,  really  hard. 

It’s  hard  because  products  don’t  work.  And  technologies  are  mis¬ 
applied.  And  costs  are  hidden.  And  requirements  are  underestimat¬ 
ed.  And  admitting  failure  is  political  suicide. 


Us  hard  because  half  the  time,  we  don’t  know 
what  we're  doing  —  we’re  trying  to  solve  prob¬ 
lems  in  new  ways,  with  uncertainly  implement¬ 
ed  technologies,  in  the  face  of  shifting  or  inco¬ 
herent  user  requirements.  And  the  rest  of  the 
time,  we  know  the  products  we're  using  won't 
really  do  what  we  need,  but  we  still  must  tr>’  to 
make  them  work. 

And  it's  hard  because,  as  people  who  believe 
in  technology,  we're  optimists.  We  believe 
products  will  work  the  way  they’re  supposed  to. 
integrate  with  our  systems  as  easily  as  we’d  like 
and  meet  the  needs  of  users  without  a  hitch. 
With  each  new  project,  we’re  full  of  hope  that 
this  time  everything  will  be  right. 

But  out  in  the  real  W’^orld.  it  almost  never  is. 
And  the  newer  our  technology,  the  more  ambi¬ 
tious  our  goals  and  the  more  important  our 
projects,  the  harder  IT  gels. 

\k'hich  we  keep  discovering  when  we  spend 
years  instead  of  months  implementing  enter¬ 
prise  software.  And  when  we  run  up  against 
endless  obstacles  getting  a  data  warehouse  or 
application  integration  or  Web  services  work¬ 
ing.  And  even  when  we  fall  far  be¬ 
hind  in  installing  critical  security 
patches  and  bug  fixes. 

Nothing  wt*rks  the  way  it's  sup¬ 
posed  to.  Nothing  plays  nicely  with 
what  we’ve  got.  Nothing  is  as  simple 
as  we  wen:  told  it  would  be. 

If  ail  this  '>ounds  unremittingly 
grim,  keep  in  mind  that  we  actually 
do  deliver  lots  of  projects.  We  do 
get  SAP  working,  eventually.  We  do 
build  distributed  applications,  even 
though  it  takes  buckets  of  sweat  and 
shaves  years  off  our  lives.  We  do 
solve  business  pn^blcms  and  keep 


users  increasingly  productive,  even  though  it 
always  takes  longer  than  it  should. 

But  are  our  expectations  unreasonably  high? 
Sure  the)’  are  —  fueled  today  not  just  by  vendor 
sales  promises,  but  also  by  glossy  TV  commer¬ 
cials.  breathless  magazine  articles  and  wishful 
management  thinking.  And  there's  not  a  lot  we 
can  do  to  reduce  those  expectations, 

Still,  we  have  to  try. 

We  can  do  that  by  educating  business-side 
executives  and  managers  in  just  how  easy  IT 
isn't.  That  may  help  a  little.  It's  not  much,  but  at 
least  it's  something  to  compete  against  all  the 
voices  outside  and  inside  your  organization 
chanting  that  this  new  product  or  that  cutting- 
edge  technology  is  a  sure  thing,  a  silver  bullet 
and.  above  all.  easy. 

Wc  can  also  be  smarter  about  how  w'e  ap¬ 
proach  the  hardest,  most  complex  projects.  The 
further  we  can  break  them  down  into  simpler, 
more  doable  chunks,  the  better  our  chances  of 
success  —  and  of  reducing  surprises  for  execu¬ 
tives  who  expect  something  wonderful  right 
away  and  end  up  with  a  long-overdue  mess. 

And  we  can  remind  ourselves, 
over  and  over,  that  every  new  proj¬ 
ect  requires  new  skills,  generates 
now  problems  and  forces  new 
thinking.  There  will  bo  problems, 
setbacks  and  sometimes  even  cata¬ 
strophic  failures.  We  won’t  succeed 
every  time. 

But  if  we  —  and  the  people  who 
use  our  systems  —  understand 
that,  we'll  have  a  better  chance  of 
success  in  making  IT  work,  just 
like  those  vendors  and  pundits  and 
users  say  it  should. 

Or  we'll  even  make  it  look  easy.  I 
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Tough  Stuff 

INFORMATION  TECHNOLOGY  ISN’T  EASY.  It  never  has  been. 
Sure,  it  looks  easy  when  vendors  trot  out  their  product  pre¬ 
sentations.  It  sounds  easy  when  pundits  and  analysts  tout 
technologies  they’ve  never  tried.  It  even  seems  easy  when  we 
confidently  set  our  project  schedules  and  lay  out  for  business- 
side  managers  how  quickly  they’ll  get  a  return  on  an  IT  investment. 
Rigged  demos  and  dazzling  dog-and-pony  shows  are  easy. 

Actually  making  IT  work  isn’t  It’s  really,  really  hard. 

It’s  hard  because  products  don’t  work.  And  technologies  are  mis¬ 
applied.  And  costs  are  hidden.  And  requirements  are  underestimat¬ 
ed.  And  admitting  failure  is  political  suicide. 


It's  hard  because  half  the  time,  we  don’t  know 
what  we’re  doing  —  we’re  trying  to  solve  prob¬ 
lems  in  new  ways,  with  uncertainly  implement¬ 
ed  technologies,  in  the  face  of  shifting  or  inco¬ 
herent  user  requirements.  And  the  rest  of  the 
time,  we  Jcnow  the  products  we’re  using  won’t 
really  do  what  we  need,  but  we  still  must  try  to 
make  them  work. 

And  h’s  hard  because,  as  people  who  believe 
in  technology,  we’re  (^timists.  We  believe 
products  will  work  the  way  they're  supposed  to. 
integrate  with  our  systems  as  easily  as  we’d  like 
and  meet  the  needs  of  users  without  a  hitch. 
With  each  new  project,  we’re  full  of  hope  that 
this  time  everything  will  be  right 

But  out  in  the  real  world,  it  almost  never  is. 
And  the  newer  our  technology,  the  more  ambi¬ 
tious  our  goals  and  the  more  important  our 
projects,  the  harder  IT  ^ts. 

Which  we  keep  discovering  when  we  spend 
years  instead  of  months  implementing  enter¬ 
prise  software.  And  when  we  run  up  against 
endless  obstacles  getting  a  data  warehouse  or 
application  integration  or  Web  services  work¬ 
ing.  And  even  when  we  fall  fu  be¬ 
hind  in  installii^  critical  security 
patches  and  bug  fixes. 

Nothing  works  the  way  it’s  sup¬ 
posed  ta  Nothing  plays  nicety  with 
what  we’ve  got.  Nothing  is  as  simple 
as  we  were  told  it  would  be. 

If  all  this  sounds  unremittii^ly 
grim,  keep  in  mind  that  we  actually 
do  deliver  lots  of  projects.  We  do 
get  SAP  working,  eventually.  We  do 
build  distributed  applications,  even 
though  it  takes  buckets  of  sweat  and 
shaves  years  off  our  lives.  We  do 
solve  business  problems  and  keep 


users  increasingly  productive,  even  though  it 
always  takes  longer  than  it  should. 

But  are  our  expectations  unreasonably  high? 
Sure  they  are  —  fueled  today  not  just  by  vendor 
sales  promises,  but  also  by  glossy  TV  commer¬ 
cials.  breathless  magazine  articles  and  wishful 
management  thinking.  And  there's  not  a  lot  we 
can  do  to  reduce  those  expectations. 

Still,  we  have  to  try. 

We  can  do  that  by  educating  business-side 
executives  and  managers  in  just  how  easy  IT 
isn’t.  That  may  help  a  little,  it’s  not  much,  but  at 
least  it's  somethii^  to  compete  against  all  the 
voices  outside  and  inside  your  organization 
chanting  that  this  new  product  or  that  cutting- 
edge  technology  is  a  sure  thing,  a  silver  bullet 
and,  above  all,  easy. 

We  can  also  be  smarter  about  how  we  ap¬ 
proach  the  hardest,  most  complex  projects.  The 
further  we  can  break  them  dotvn  into  simpler, 
more  doable  chunks,  the  better  our  chances  of 
success  —  and  of  reducing  surprises  for  execu¬ 
tives  who  expect  something  wonderful  right 
away  and  end  up  with  a  long-overdue  mess. 

And  we  can  remind  ourselves, 
over  and  over,  that  every  new  proj¬ 
ect  requires  new  skills,  generates 
new  problems  and  forces  new 
thinkii^  There  will  be  problems, 
setbacks  and  sometimes  even  cata¬ 
strophic  failures.  We  won’t  succeed 
every  time. 

But  if  we  —  and  the  people  who 
use  our  systems  —  understand 
that,  we’ll  have  a  better  chance  of 
success  in  making  IT  work,  just 
like  those  vendors  and  pundits  and 
users  say  it  should. 

Or  we’ll  even  make  it  look  easy.  I 
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Do  the  Math! 

RRnm  Vte.  it’s  possible  to  waste  time  on  ROI. 

But  calculating  the  return  on  investment 
'  ^  tof  big  IT  projects 


can  yield  big  rtvidends  it 
done  property.  We  pcovidea 
ClO'sguide  to  the  strengths 
and  weaknesses  ot  10  dltter- 
entROI  models. 
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Microsoft  Revamps  Datacenter 


Adds  more  support 
options  to  program, 
but  impact  unclear 

BY  CANOL  SLIWA 

Microsoft  C<wp.’s  recentiy  re¬ 
vamped  and  renamed  Data¬ 
center  Availability  Pro¬ 
gram  will  bring  users  addi¬ 
tional  options  for  support  and 
a  quicker  path  to  swap  out  mi¬ 
nor  components  from  their 
pretested  configurations. 

But  while  the  changes  rep¬ 
resent  a  positive  step,  it's  un¬ 
clear  bow  much  they  will  af¬ 
fect  the  existing  user  base  or 


whether  they  will  spark  an 
uptick  in  the  sluggi^  adop¬ 
tion  of  Microsoft’s  challenger 
to  high-end  Unix  systems.  The 
new  program  aspires  to  the 
same  lofty  goals  that  its  prede¬ 
cessor  —  the  more  plainly 
named  Windows  Datacenter 
Prt^ram  —  did  when  it  was 
launched  in  September  2000. 

The  Datacenter  product  is 
great  I  love  that  I  can  vertical- 
ty  scale  Intel  chips,’*  said  Mor¬ 
ris  Koendce,  database  services 
manager  at  early  adopter 
Mary  Kay  Inc.  in  Dallas.  “But 
the  Datacenter  program  is  in 
desperate  need  of  r^>air,  and 
Tm  not  optimistic  that  they’ve 
really  Gxi^  the  problem.” 

Koeneke  said  be  would  like 
more  chcuce  wfth  the  systems 
that  attach  to  his  Datacenter 
server,  since  be  would  like  to 
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do  more  mixing  and  matching 
of  products.  But  be  doesn’t 
want  to  have  to  pay  the  OEM 
to  test  the  configuration. 

Datacen^,  page  49 


Stage  Set  for  Easy, 
Cheap  Rollouts  of 
IP-based  Storage 

Approval  (rfiSCSI  standard  paves  way  for 
product  deliveries;  users  welcome  alternative 


BT  UJCAS  HeABIAH 

After  some  fits  and  starts,  an  IP 
versioD  of  the  low-cost  SCSI 
storage  interconnect  is  finally 
in  poridon  to  attract  wider  at¬ 
tention  from  technology  ven¬ 
dors  and  users. 

The  Internet  Engineering 
Thsk  Force’s  IP  storage 
steering  group  last 
week  formally  ratified 
the  iSCSI  {mtocol  as  a 
standard.  That  paves 
the  way  for  storage  vendors  to 
tamp  up  shipments  of  prod¬ 
ucts  ba^  on  iSCSL  which  is 
designed  to  let  network  ad¬ 
ministrators  take  servers  that 
have  been  locked  into  direct- 
attached  storage  systems  and 
plug  them  into  IP-based  net¬ 
works  for  date  baduip  and 
management  functions. 


After  the  vote,  the  IETF  re¬ 
leased  the  iSCSI  qiecification 
for  public  comments.  David 
Bla^  a  senior  technologisr  at 
EMC  Corp.  and  ctxhainnan 
of  the  lETPs  IP  storage  group, 
said  the  comment  period 
should  last  about  a  month. 

But.  he  added,  “at  this 
point,  nothing  will 
change.  We're  done  in 
terms  of  technical 
changes.* 

Because  OP  DCtwrarks  are 
commonplace,  iSCSI  can  be 
used  to  tiananit  date  over 
LANs.  WANs  and  the  Internet 
potentially  allowing  users  to 
access  information  via  corpo¬ 
rate  intranets  or  Web-based 
portals.  “Whatever  you  can  do 
with  an  e-maiL  you  can  do 

iSCSlpage49 


Sun  to  ShipTechnology  Modules 


Strategy  aims  to  ease 
complexity,  promote 
intention,  cut  costs 

BY  JAIKUMAN  VMAYAN 

The  flurry  of  products  and 
services  announced  by  Sun 
Microsystems  Inc.  last  week  is 
part  of  the  company’s  strategy 
to  offer  technology  bundles 
that  are  more  integrated,  more 
integratable  and  that  the  com¬ 
pany  will  custom-coofigure 
for  users  as  needed. 


As  part  of  that  strata.  Sun 
is  moving  to  a  quarterty  cycle 
of  technology  releases  that 
combine  hardware,  software, 
middleware  and  services 
products,  company  officials 
said  last  week. 

Sun  will  no  longer  roll  out 
individual  hardware  or  soft¬ 
ware  products  but  will  instead 
focus  on  delivering  pretested 
and  easily  configurable  tedi- 
nok^  modules  that  users  can 
quickly  plug  into  existing  in- 
ftasmictures. 


New  Under  Sun 

B  Bbde  server  based  on  SPARC 
and  Intel  procesaon 


B  Att-processoftnrtangesenief 
a  Blade  ser^wtuaizalionsofiMiBre 
a  lid^hendCPUufvades 
B  Wlassesamentsenaces 

The  data  center  optimiza¬ 
tion  tedmologies  that  Sun  is 
rolling  out  as  part  of  fts  N1  ini¬ 
tiative  win  play  a  key  role  in 

Sun,pogel4 


VOL 

ISS 

FE 


2003 


NEWSPAPER 


UCiTA  t)ropuneii1s  untrized  ciu  ABA  tetiisoi  to  cndoisi-  licensing  law. 
An  early  adopter  shows  that  Web  services  really  can  work 


THE  NEWSPAPER  FOR  IT  LEADERS  •  WWW  COMPUTERWORLD  COM 


FEBRUARY  17.  2009  >  VOL  37  •  NO  7  •  SS/COPV 


KNOWlEOKCEIITEliROI 


Do  the  Math! 

njnni  Vte.it'spossibletowastetimecinROI. 
I’lllQ’ll  But  calculating  the  f£tum  on  investment 
“““  lor  big  IT  projects  i - 


can  yield  big  dividends  if 
done  properly.  We  provide  a 
CIO's  guide  to  the  strengths 
and  weaknesses  of  10  differ¬ 
ent  ROI  models. 
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Microsoft  Revamps  Datacenter 


Adds  more  support 
options  to  program, 
but  impact  unclear 


Microsoft  Corp.*s  recently  re¬ 
vamped  and  renamed  Data¬ 
center  High  Availability  Pro¬ 
gram  will  bring  users  addi¬ 
tional  options  for  support  and 
a  quicker  path  to  swap  out  mi¬ 
nor  components  from  their 
pretested  configurations. 

But  while  the  changes  rep¬ 
resent  a  positive  step,  it's  un¬ 
clear  how  much  they  will  af¬ 
fect  the  existing  user  base  or 


whether  they  will  spark  an 
uptick  in  the  sluggish  adop¬ 
tion  of  Microsoft's  challei^er 
to  high-end  Unix  systems.  The 
new  program  aspires  to  the 
same  lofty  goals  that  hs  prede¬ 
cessor  —  the  more  plainly 
named  Windows  Datacenter 
Program  —  did  when  it  was 
launched  in  September  2000. 

"The  Datacenter  product  is 
great.  1  love  that  1  can  vertical¬ 
ly  scale  Intel  chips,**  said  Mor¬ 
ris  Koeneke.  database  services 
manager  at  early  adopter 
Mary  Kay  Inc.  in  Dallas.  “But 
the  Datacenter  program  is  in 
desperate  need  of  repair,  and 
Pro  not  optimistic  that  they've 
really  fixed  the  problem." 

Koeneke  said  he  would  like 
more  choice  with  the  systems 
that  anach  to  his  Datacenter 
server,  since  he  would  like  to 


do  more  mixing  and  matching 
of  products.  But  he  doesn't 
want  to  have  to  pay  the  OEM 
to  test  the  configuration. 


Stage  Set  for  Easy, 
Cheap  Rollouts  of 
IP-based  Storage 

Approval  of  iSCSI  standard  paves  way  for 
product  deliveries:  users  welcome  alternative 

BY  LUCAS  MEABiAM  I  After  the  vote,  the  IETF  re- 

After  some  fits  and  starts,  an  IP  leased  the  iSCSI  specification 


;  version  of  the  low-cost  SCSI 
,  storage  interconnect  is  rinall>' 
in  position  to  attraa  wider  ai- 
tention  from  technology  ven¬ 
dors  and  users. 

The  Internet  Engineering 
Task  Force's  IP  storage  _ 
steering  group  last 
week  formally  ratified  SB 
the  iSCSI  protocol  as  a  m| 
standard.  That  paves  / 
the  way  for  storage  vendors  to 
ramp  up  shipments  of  prod¬ 
ucts  ba^  on  iSCSI,  which  b 
designed  to  let  network  ad¬ 
ministrators  take  servers  that 
have  been  locked  into  direct- 
attached  storage  systems  and 
plug  them  into  IP-based  net¬ 
works  for  data  backup  and 


Datacenter,  page  49  I  management  functions. 
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Strategy  aims  to  ease 
complexity,  promote 
integratioa  cut  costs 
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The  flurry  of  products  and  said  last  week, 

services  announced  b>’  Sun  Sun  will  no  longer  roll  out 

Microsystems  Inc  last  week  b  individual  hardware  or  soft- 
part  of  the  company's  strategy  ware  products  but  will  instead 
to  offer  technology  bundles  focus  on  delivering  pretested 
that  are  more  integrated,  more  and  easily  configurable  tech- 
integratable  and  that  the  com-  nology  modules  that  users  can 


As  pan  of  that  strategy.  Sun 
b  moving  to  a  quanerly  cycle 
of  technolt^  releases  that 
combine  hardware,  software, 
middleware  and  services 
products,  company  officiab 
said  last  week. 

Sun  will  no  longer  roll  out 
individual  hardware  or  soft¬ 
ware  products  but  will  instead 
focus  on  delivering  pretested 


pany  will  custom-conflgure 
I  for  users  as  needed. 


quickly  plug  into  existing  in- 
I  frastructures. 


for  public  comments.  David 
Black,  a  senior  technoiogbt  at 
EMC  Corp.  and  co-chairman 
of  the  lETFs  IP  storage  group, 
said  the  comment  period 
should  last  about  a  month. 

_ _  But.  be  added,  “at  thb 

jflC  point,  nothing  will 

chan^.  We’re  done  in 
terms  of  technical 
changes.” 

Because  IP  networks  are 
comroot^lace.  iSCSI  can  be 
used  to  transmit  data  over 
LANs.  WANs  and  the  Internet, 
potentially  allowing  users  to 
access  information  via  corpo¬ 
rate  intranets  or  Web-based 
portab.  “Whatever  you  can  do 
with  an  e-mail,  you  can  do 

iSCSI,  page  49 


New  Under  Sun 

•  Bbde  servers  based  on  SPARC 
and  Intel  processors 

B  A  12-processomdranoe  server 

a  Bbde  server  wlualizabonsonware 

a  Hgh-end  CPU  upgrades 

a  N1  assessment  serwoes 

The  data  center  optimiza¬ 
tion  technologies  that  Sun  b 
rolling  out  as  part  of  its  Nl  ini¬ 
tiative  will  play  a  key  role  in 

page  14 


,jrohlP'7' 


Can  t  get  corniected 


WARNING!  Web  pages,  executables  and 
other  attachments  may  contain  viruses 
that  can  be  harmful  to  your  computer. 

What  would  you  like  to  do  with  this  file? 


I  [  Open 
I  I  Save  to  disk 


Relax  completely  because  you  are 
protected  by  eTrust”  Antivirus,  which 
keeps  your  computer  and  network  safe 
from  even  the  most  malicious  virus 
threats. 


Protect  your  business  with  eTrust™ 
For  more  information,  visit 

ca.com/etrust/antivirus 


eTrusT"  Security  Solutions 
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6  UCITA  supporters  suffer  a  setback 
as  the  American  Bar  Association  de¬ 
clines  to  provide  an  endorsement  of 
the  software  licensing  act. 

7  Microsoft  plans  to  embed  a  report- 
ii^  engine  into  its  new  64-bit  SQL 
Server  database. 

8  HP  this  week  will  introduce  anew 
chip  set  and  other  products,  keeping 
it  ahead  of  Intel  in  delivering  Itani¬ 
um  technology. 

10  Danske  Bank,  cited  by  Microsoft  as 
a  pioneer,  demonstrates  the  poten¬ 
tial  value  of  Web  services. 

12  Hospital  CIOs  are  reluctant  to  auto¬ 
mate  medical  systems  to  reduce  er¬ 
rors,  despite  an  employer  push. 

13  Offshore  outsourcing  is  expected  to 
grow,  as  IT  continues  to  face  cost¬ 
cutting  pressures. 

16  A  merger  wave  hits  energy  industry 
IT  vendors,  worrying  some  man¬ 
agers  about  its  effects  on  support. 
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Do  the  Math! 

This  special  report  takes  an  in-deptb 
look  at  the  financial  models  for  assess¬ 
ing  the  return  on  investment  from  IT 
projects.  CIOs  talk  about  the  payoff 
from  “doing  the  math,"  and  we  provide 
a  guide  to  the  strengths  and  weaknesses 
of  the  major  metrics,  such  as  net  pre¬ 
sent  value  and  internal  rate  of  return. 
But  we  also  hear  from  the  dissidents, 
gnTini  who  say  ROI  calculations  can 
be  a  waste  of  time. 

LUAilil  PACMeEBE6INS0NPAeE21. 


28  Ihaharlt  pariad  U  populu  simple  and  useful. 
But  k  doesn’t  tril  you  everything  by  a  long  shot 


30  NM  prtMOt  mIm  is  an  investmou’s  future 
net  flows  the  initial  investment 

32  iRlinal  rate  flf  ram  is  a  bandy  way  to 
sort  ptofects  into  ’’go”  and  "nn-go* 
categories.  But  k  has  flaws. 


RO 

6UDE 


is  intended  to  consider 
evetTthh^  that’s  important  to  a  coaipany's  long¬ 
term  beakh.  But  thm's  a  danger  of  losing  the 
forest  fat  the  trees. 

35  EcMNinic  VUm  AdM  is  a  business 
phikttopfay  and  ROI  metric  that  makes  sure 
managers  subtract  the  cost  of  cqtitaJ  from  the 
flnandal  benefits  of  an  investment 


24  OMo>nci  itowird«L  Tips 
from  die  pros:  Learn  bow  four 
IT  executives  measure  ROI 
from  technology  projects  and 
w^t  they  gain  from  their 
efforts.  ONUNE:  Fcm'  more  on 
Carlson  Companies'  approach 
to  ROI,  including  how  a  possible  war  widi  Iraq 
might  factor  into  its  analysis,  read  the  foil  Q&A  with 
CIO  Steve  Btowil  O  QiMdink  354K 

40  Opinion:  if  you're  chasing  after  every  IT  pioiect 
with  ROI  analyses,  you're  wasting  your  dme. 
suggests  coliuonist  Mark  HalL 

42  Tho  AfaMMc;  Fudged  ROI  calculadons,  mis¬ 
understood  software  costs  and  the  emergence  of  the 
*rr  fmaDcial  comroUer*  are  among  the  research 
tidbits  in  this  month's  coUecdoo. 

43  Tht  Noxt  Oiapton  Pundits  predict  that  Wall 
Street  analysts  will  start  monitoring  corporate  IT 
investments  and  that  CIOs  will  flud  their 
compensation  linked  to  delivering  ROI. 

But  are  we  developing  "ROI  myopiaT 


36  Hw  Conslitinis' ONorifips. 

Consukandes  are  inventing  new 
ROI  metrics  at  a  steady  pace. 

Here's  a  look  at  five:  Business 
Value  Index,  information 

economics,  IT  scorecard, 
total  economic  impact  and 
total  value  of  opportunity. 
OMME:  The  Real  Options 
nx>deL  championed  by 
Collaborative  Consulting,  emf^Msizes 
an  incremental  approach  to  IT 
investmenL  OOMdiMiSna 


38  IMiara  MM  Miidili  Nl.  ROI  modeb  are 
effective  in  helping  CIOs  Justify  IT  investments 
to  top  executives,  but  they  foil  short  in 
tYM»Mwring  soft  benefits  liJ»  the  impact  on  taf 
customer  service  or  employee  productivity. 
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UCnA  Backers  Lose 
Political  Ammunition 


Bar  association 
declines  to  give 
official  blessing 


BV  PATmCK  THIBODEAU 

Backers  of  the  contro- 
versul  UCITA  soft¬ 
ware  licensing  law  in¬ 
tend  to  push  ahead  to 
win  adoption  by  more  states, 
d^ite  a  decision  by  the  Amer¬ 
ican  Bar  Association  last  week 
not  to  back  the  proposed  law. 

The  ABA'S  governing  body 
withdrew  the  Uniform  Com¬ 
puter  Infomudon  TIransac- 
tioos  Act  ftom  consideration 
after  it  became  clear  that  the 
measure  didn't  have  eitough 
support  among  members  of  the 
innuentia)  legal  association. 

The  move,  taken  by  the 
ABA  at  its  midyear  meeting  in 
Seattle,  has  no  direct  impact 
on  UetTA  and  the  push  for 
state-by-state  adoption  But  it 
gives  t^  law’s  opponents  am- 
mumlioQ  lo  use  against  it  in 
states  where  it's  introduced. 

UCITA's  drafter,  the  Nation¬ 
al  Conference  of  Commission¬ 
ers  on  Uniform  State  Laws 
(NCCUSU.  will  seek  adoption 
in  states  that  have  shown  an 
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t999:UCmisMR)diic«L 


2000:  VkgWa  and  tovytond 
adopt  R. 


2001;  Opponanta  orgaaba  and 
stop  tortotradaptiana.  Tha 
AfiAtonBaacammiltoatort* 
vtowtoatow.UCfTAdraflara 
agrM  to  drap  "aalHiaip*  ra- 
moto  tanr-off  pnntoiona. 


2002:AnABAeaaNnittoala- 
baii  UCfTA  too  confuatog  and 
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interest  in  the  act:  Arizona. 
Cuiotado,  Delaware.  Okla¬ 
homa  and  Wisconsin,  as  well 
as  the  District  of  Columbia. 

Despite  (he  ABA  decision, 
Carlyle  “Connie’*  Ring  Jr., 
chairman  of  the  NCCUSL’s 
UCITA  draftingkcomminee, 
said  he  was  pleased  with  the 
outcome.  He  claimed  that  op¬ 
ponents  “engaged  in  counter¬ 
productive  activity  that  result¬ 
ed  in  the  ABA  really  wanting 


to  leave  [UCITA]  to  the  states" 
to  adopt  uniform  rules. 

Ring  said  there  was  “a  great 
deal  of  manipulation  of  the 
[procedural]  rules"  by  oppo- 
ivents  in  order  to  achieve  a 
negative  outcome.  But  most 
ABA  delegates  wanted  to  take 
no  position  because  there 
wasn’t  enough  time  to  debate 
the  act.  nor  was  the  meeting 
the  appropriate  forum  for  de¬ 
ciding  its  merits,  he  said. 

Not  Seeing  Eye  to  Eye 

But  some  ABA  members  saw 
the  situation  differently. 

'The  thing  was  dead  on  ar- 
rivaL  and  [supporters]  are  try¬ 
ing  to  make  [believe]  that  the 
ABA  didn’t  want  to  vote  on  it.” 
said  Hervey  Levin,  a  delegate 
from  the  ABA's  Tort  Trial  and 
Insurance  Section  and  a  Dal¬ 
las-based  attorney. 

Vincent  Policy,  chairman  of 
the  Cyberspace  Law  Commit¬ 
tee  of  the  ABA's  Business  Law 
Section,  said  UCITA  raised 
concerns  among  members  in 
pan  because  it’s  ahead  of  its 
time  and  seeks  to  put  into  law 
provisions  that  aren’t  In  com¬ 
mon  commercial  practice.  He 
also  said  that  UCITA  is  con¬ 


fusing  and  complex  and  that 
its  controversiality  means  it's 
likely  to  be  altered  in  the  vari¬ 
ous  states  and  therefore  not 
such  a  uniform  law.  Policy  is 
deputy  general  counsel  at 
Schlumberger  Ltd.,  an  oil-field 
services  Hrm  in  New  York. 

UCITA  is  designed  to  set 
uniform  terms  and  conditions 
for  software  sales  and  elec¬ 
tronic  transactions.  Tte  mea¬ 
sure  is  supported  by  vendors 
and  trade  groups,  but  oppo¬ 
nents  believe  it  gives  vendors 
too  much  power  in  contracts. 

UCITA's  proponents  say 
that  ABA  backing  isn't  criticaL 
“ABA  approval  isn't  something 
we  point  to  when  we  are  push¬ 
ing  an  act”  said  Katie  Robin¬ 
son,  an  ofTicial  at  the  Chicago- 
based  NCCUSL 

But  opponents  say  that 
without  ABA  support.  UCITA 
is  seriously  wounded,  if  not 
dead.  “Pushing  it  forward  in 
anything  close  to  its  current 
form  is  like  dragging  a  dead 
whale  back  to  sea.”  said  Bruce 
Barnes,  an  IT  consultant  in 
Oubiin,  Ohia  I 
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Cisco  Expands  Ks  Line  of 
Intrusion-Detection  Tools 


BV  MATT  HAMBt.eN 

Cisco  Systems  Inc.  this  week 
plans  to  announce  new  intru- 
sion-pro(ectk>D  software  and 
firewall  enhancements,  mclud- 
ing  functionality  des^ned  to 
tower  IT  staffing  costs  by  dras¬ 
tically  redudng  false  or  irrele¬ 
vant  system-httrusioo  alarms. 

Cisco  officials  said  a  maior 
upgrade,  Cisco  Intrusion  De¬ 
tection  System  (IDS)  4.0,  will 
accompany  the  rollout  of  new 
Oaco  Threat  Re^nse  tech¬ 
nology  that's  aimed  at  reduc- 
ii^  incidents  of  false  mmision 
alarms  by  95%.  The  company 
will  also  announce  upgr^ed 


management  features  for  IDS 
4.0.  as  well  as  an  intrusion- 
detection  sensor  appliance 
and  a  second-generation  ver¬ 
sion  of  the  IDS  software  for 
its  Catalyst  6500  switch. 

In  addition,  Cisco  will  up¬ 
grade  the  software  for  its  PDC 
Firewall  appliances  and  unveil 
a  virtual  private  network  ac¬ 
celerator  card  that  it  said 
should  provide  performance 
improvements  of  up  to  400% 
on  networks  that  use  the  Data 
Encryption  Sundard  and  oth¬ 
er  specilkations. 

Qsco  bou^t  the  Threat  Re¬ 
sponse  technology  as  part  of 


its  acquisition  of  Austin,  Texas- 
based  Psionic  Software  Inc.  in 
October. 

Vignette  Cforp.,  a  developer 
of  content  management  and 
portal  software  in  Austin,  has 
been  testii^  Thre^  Response 
and  hopes  to  deploy  a  working 
version  soon,  said  Selim  Nart,  a 
network  architect  at  Vignette. 
The  software  should  help  Vi¬ 
gnette  avoid  having  to  hire 
more  network  management 
staffers  to  act  on  real  alarms  or 
to  clear  false  ones,  be  said. 

Nart  estimated  that  20 
minutes'  worth  of  intrusion 
alarms  results  In  20  hours  of 
work  for  a  network  adminis¬ 
trator.  He  said  Vignette  expe¬ 
riences  a  total  of  90,000  intru¬ 
sion  alarms  in  its  global  net¬ 
work  monthly.  So  far.  Threat 


Response  “has  been  very  ac¬ 
curate.”  Nart  said.  "It  helps  us 
a  lot  on  troubleshooting  the 
real  problems.” 

Threat  Response,  the  im¬ 
provements  included  in  IDS 
4X>  and  the  other  features  are 
examples  of  Cisco’s  continued 
efforts  to  improve  its  security 
capabilities,  said  Zeus  Ker- 
ravaia,  an  analyst  at  The  Yan¬ 
kee  Group  in  Boston.  By  ac¬ 
quiring  Psionic  and  other  ven¬ 
dors,  Cisco  has  been  able  to 
put  together  a  networic  securi¬ 
ty  "ecosystem”  that  rivals  such 
as  Nortel  Networks  Ltd.  and 
Alcatel  can't  match,  be  said.  I 
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Data  Analysis  Vendors  Add  Supply  Chain  Toois 


BY  MARC  L.  SOMBINI 

SAS  Institute  Inc.  is  expanding 
its  line  of  business-intelli* 
gence  software  in  a  bid  to  help 
users  apply  in-depth  analytics 
to  their  supply  process¬ 
es  —  making  it  one  of  several 
data  analysis  vendors  with  ini¬ 
tiatives  of  that  land. 

Cary.  N.C.'based  SAS  last 
week  announced  plans  to  ship 
two  applications  designed  to 
exploit  its  analysis  capabilities 
in  the  supply  chain  arena.  The 
company  also  said  it  has  set  up 
a  supply  chain  analytics  con¬ 
sulting  group  to  help  compa¬ 
nies  install  the  applications. 

Cognos  Inc  in  Ottawa  and 
Hyperion  Solutions  Corp.  in 
Sumiyvale.  Calif.,  said  they're 
also  working  to  add  supply 
chain  analysis  tools  to  their 
business-intelligence  product 
lines.  Scott  Lawrence,  director 
of  analytic  applications  at 
Cognos.  said  the  company's 
software  will  give  users  the 


ability  to  fully  analyze  their 
suf^fy  chain  operations. 

Dennis  McOunroci,  senior 
manager  of  business  planning 
strategy  at  SAS.  said  the  appli¬ 
cations  his  company  is  dewl- 
oping  will  complement  exist¬ 
ing  supply  chain  management 
systems,  such  as  the  ones  sold 


by  SAP  AG  and  12  Technolo¬ 
gies  Inc  The  goal  is  to  help 
users  cut  costs  while  optimiz¬ 
ing  their  quality-contrd  ef¬ 
forts.  he  explained. 

To  that  end.  McCarron  said, 
SAS  will  offer  a  demand-intel¬ 
ligence  package  that  provides 
an  integrated  view  of  invento¬ 
ry,  price  optimization  and 
product  demand  processes. 
Companies  will  be  able  to  use 
the  software  to  tailor  their 
supply  chains  to  better  a>eet 
maiket  needs  and  to  adjuin 
pricing  and  promotions.  The 
application  is  initially  being 
developed  for  the  retail  and 
consumer  goods  industries. 

SAS  said  it's  also  working 
on  a  manufacturing  process 
analysis  application  to  help 
companies  find 
ways  to  improve 
product  qu^ty 
and  reduce  time 
to  market  That 
product  will  be 


initially  targeted  at  semicon¬ 
ductor  and  other  high-tech 
companies. 

Both  modules  are  available 
on  a  limited  basis  now  and  are 
due  (or  general  release  by 
year's  end. 

The  demand-inteiligence 
capabilities  sound  interesting, 
said  Gary  Keathley,  materials 
manager  at  Akoa  Inc’s  manu- 
focturing  plant  in  Houston. 
But  he  added  that  the  eye  care 
products  maker  customized 
its  SAS  applications  to  handle 
demand-analysts  hinctions 
more  than  10  years  ago. 

Alcoo's  SAS  installation  can 
take  sales  data,  crunch  the 
numbers  and  protect  future 
production  needs  at  (he  Hous¬ 
ton  plant  based  on  Actors 
-  such  as  season- 
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Microsoft  Plans  Reporting 
Engine  for  SQL  Server 


BV  MARC  L.  BONB*RI 

Microsoft  Corp.  last  week  an¬ 
nounced  plans  to  embed  an 
analytical  reporting  engine  in 
the  upcoming  64-611  version 
of  its  SQL  Server  database, 
adding  another  element  to  the 
decision-support  capabilities 
it  offers  to  corporate  users. 

Currently.  Microsoft  sup¬ 
ports  the  ability  to  launch  on¬ 
line  analytical  processing 
queries  as  part  of  SQL  Server 
2000.  But  the  new  Reporting 
Services  technology  planned 
for  the  64-bit  relea^  which  is 
code-named  Yukon,  will  also 
let  users  create  business  re¬ 
ports  and  distribute  them 
across  corporate  networks, 
said  Sheryl  TiiUis,  product 
manager  for  SQL  Server. 

Although  the  reporting  en¬ 
gine  is  being  targeted  primari¬ 
ly  at  developers  within  corpo¬ 
rate  IT  departments  and  at 
software  vendors,  end  users 
will  be  able  set  up  their  own 
report  parameters,  Tuilis  said 


The  software  will  iiKlude  Web 
services  books  for  developing 
reports  using  Microsoft’s  Vi- 
surd  Studio  .Net  tool  kit  and 
.Net  Framework  pre^^ramming 
model  she  added 

In  addition,  it  will  be  able 
to  interc^>erate  with  any  data 
repository  that  has  OLE  DB  or 
Oj^n  Database  Connectivity 
(ODBC)  interfaces  and  to  pub¬ 
lish  reports  to  Web  browsers 
or  Microsoft’s  Office  desktop 
applicadotts.  Reporting  Ser¬ 
vices  is  scheduled  for  initial 
release  in  a  beta-test  version 
of  Yukon  due  by  midyear. 

Microsoft  acknowledged 
that  there  will  be  some  over¬ 
lap  between  Reporting  S^- 
vices  and  reporting  tools  sold 
by  business  partners  such  as 
Crystal  Decisions  Inc  in  Palo 
Alto.  Calif.  But  Microsoft  said 
in  a  statement  that  it  will  con¬ 
tinue  to  provide  partnership 
opportunities  for  other  report¬ 
ing  tool  vendors. 

The  tight  integration  prom¬ 


ised  among  Microsoft’s  SQL 
Server,  Reporting  Services  and 
server  management  software 
makes  the  new  technology  es¬ 
pecially  appealing  to  ProClari- 
ty  Cotpn  a  Boise,  Idaho-based 
developer  of  business  analyt¬ 
ics  software. 

Mamy-SMing  Move 

ProClarity,  a  Microsoft  part¬ 
ner  and  SQL  Server  20(ra  user, 
is  testing  an  earty  version  of 
the  Reporting  Services  soft¬ 
ware,  said  Clay  Young,  the 
company's  vice  president  of 
marketing.  ProClarity  plans  to 


roll  out  the  reporting  tools  in¬ 
ternally  when  the  beta  release 
becomes  available,  he  added 
Young  said  ProClarity  hopes 
to  use  Reporting  Services  to 
create  reports  that  don't  re¬ 
quire  further  analysis  after 
distribution,  such  as  ones  that 
detail  the  number  of  hits  on  its 
Web  site.  The  company  cur¬ 
rently  uses  Crystal  Decisioos' 
software,  but  Young  said 
ProClarity  plans  to  standard¬ 
ize  on  Microsoft's  technology 
to  save  money,  since  Report¬ 
ing  Services  will  be  bundled 
as  part  of  SQL  Server  licenses. 

Microsoft's  move  makes 
sense  as  reporting  took  be¬ 
come  more  of  a  commodity 
that  dedsioa -support  vendors 
can  embed  into  ^eir  products, 
said  loshus  Grecnbauia  an  an¬ 
alyst  at  Enterprise  Applications 
Consulting  in  Daly  C^t)^  Calif 
Microsoft  should  have  no 
problem  convincing  users  that 
it  can  develop  reporting  soft¬ 
ware  that’s  technically  sound. 
Gieenbauro  said.  But  it  may  be 
harder  for  the  company  to 
prove  that  it  has  reporting  ex¬ 
pertise  in  individual  vertical 
markets,  he  added  I 


^^lication  could  also  be  use- 
fol  but  SAS  officials  need  to 
better  ‘pinpoint  what  they  are 
trying  to  go  after*  with  that 
product,  be  said 

While  SAS  already  sells 
some  supply  chain  analysts 
components,  it's  now  creating 
an  end-to-end  offering  that 
covers  both  the  supply  and  de¬ 
mand  sides  of  supply  chain 
processes,  said  Bob  Moran,  an 
analyst  at  Aberdeen  Group 
Inc.  in  Boston.  The  new  s^- 
warc  will  let  users  examine 
bow  events  at  one  po'mt  in  a 
supply  chain  could  affect  oth¬ 
er  segments.  Moran  said.  That 
could  be  a  key  capability  for 
companies  that  try  to  get  by 
with  the  thinnest  of  profit 
margins,  be  added  I 
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Data  Analysis  Vendors  Add  Supply  Chain  Tools 


ev  MARC  L.  aONOINI 

SAS  Institute  Inc.  is  expanding 
its  line  of  business-intelli¬ 
gence  software  in  a  bid  to  help 
users  apply  in-depth  analytics 
to  their  supply  chain  process¬ 
es  —  making  it  one  of  several 
data  analysis  vendors  with  ini¬ 
tiatives  of  that  kind. 

Cary.  N.C.-based  SAS  last 
week  announced  plans  to  ship 
two  applications  designed  to 
exploit  its  analysis  capabilities 
in  the  supply  chain  arena.  The 
company  also  said  it  has  set  up 
a  supply  chain  analytics  con¬ 
sulting  group  to  help  compa¬ 
nies  install  the  applications. 

Cognos  Inc.  in  Ottaw'a  and 
Hyperion  Solutions  Corp.  in 
Sunnyvale.  Calif.,  said  they're 
also  working  to  add  supply 
chain  analysis  tools  to  their 
business-intelligence  product 
lines.  Scott  Law'rence.  director 
of  analytic  applications  at 
Cognos.  said  the  company's 
software  will  give  users  the 
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abUit>’  ro  ftUIy  analyze  their 
supply  chain  operations. 

Dennis  McCarron.  senior 
manager  of  business  planning 
strategy  at  SAS.  said  the  appli¬ 
cations  his  company  Is  devel¬ 
oping  will  complement  exist¬ 
ing  supply  chain  management 
systems,  such  as  the  ones  sold 


by  SAP  AG  and  12  Technolo¬ 
gies  Inc.  The  goal  is  to  help 
users  cut  costs  while  optimiz¬ 
ing  their  quality-control  ef¬ 
forts.  he  explained. 

To  that  end,  McCarron  said. 
SAS  will  offer  a  demand-intel¬ 
ligence  package  that  provides 
an  integrated  view  of  invento¬ 
ry,  price  optimization  and 
product  demand  pntcesses. 
Companies  will  be  able  to  use 
the  software  to  tailor  their 
supply  chains  to  belter  meet 
market  needs  and  (o  adjust 
pricing  and  promotions.  The 
application  is  initially  being 
developed  for  the  retail  and 
consumer  goods  industries. 

SAS  said  it's  also  u-urking 
on  a  manufacturing  process 
analysis  application  to  help 
companies  Tind 
ways  to  improve 
product  quality' 
and  reduce  time 
to  market.  That 
product  will  be 
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initially  targeted  at  semicon¬ 
ductor  and  other  high-tech 
companies. 

Both  modules  are  available 
on  a  limitixl  basis  now  and  arc 
due  for  genera]  release  by 
year’s  end. 

The  demand-intelligence 
capabilities  sound  interesting, 
said  Gary  Kcathley.  materials 
manager  at  Alcon  Inc.'s  manu¬ 
facturing  plant  in  Houston. 

But  he  added  that  the  eye  care 
products  maker  customized 
its  SAS  applications  to  handle 
demand-analysis  functions 
more  than  10  years  ago. 

Aicon's  SAS  installation  can 
take  sales  data,  crunch  the 
numbers  and  project  future 
production  needs  at  the  Hous¬ 
ton  plant  based  on  factors 
_  such  as  season¬ 
ality  and  cus¬ 
tomer  needs. 
Keathley  said. 

The  manufac- 
turing  process 


Microsoft  Plans  Reporting 
Engine  for  SQL  Server 


BV  MARC  L.  SOHOINI 

Microsoft  Corp.  last  week  an¬ 
nounced  plans  to  embed  an 
analytical  reporting  engine  in 
the  upcoming  64-bit  version 
of  its  SQL  Server  database, 
adding  another  element  to  the 
decision-support  capabilities 
it  offers  to  corporate  users. 

Currently,  Microsoft  sup¬ 
ports  the  ability  to  launch  on¬ 
line  analytical  processing 
queries  as  part  of  5iQ.L  Server 
2000.  But  the  new  Reporting 
Services  technology  plaimed 
for  the  64-bit  release,  which  is 
code-named  Yukon,  will  also 
let  users  create  business  re¬ 
ports  and  distribute  them 
across  corporate  networks, 
said  Sheryl  Tullis.  product 
manager  for  SQL  Server. 

Although  the  reporting  en¬ 
gine  is  being  targeted  primari¬ 
ly  at  developers  within  corpo¬ 
rate  IT  departments  and  at 
software  vendors,  end  users 
will  be  able  set  up  their  own 
report  parameters.  Tullis  said. 


The  software  will  include  Web 
services  hooks  for  developing 
reports  using  Microsoft's  Vi¬ 
sual  Studio  -Net  tool  kit  and 
.Net  Framework  programming 
model,  she  added.  ' 

In  addition,  it  will  be  able 
to  interoperate  with  any  data 
repository  that  has  OLE  DB  or 
Open  Database  Connectivity 
(ODBC)  interfaces  and  to  pub¬ 
lish  reports  to  Web  browsers 
or  Microsoft’s  Office  desktop 
application.s.  Reporting  Ser¬ 
vices  is  scheduled  for  initial 
release  in  a  beta-test  version 
of  Yukon  due  by  midyear. 

Microsoft  acknowledged 
that  there  will  be  some  over¬ 
lap  between  Reporting  Ser¬ 
vices  and  reporting  tools  sold 
by  business  partners  such  as 
Crystal  Decisions  Inc.  In  Palo 
Alto.  Calif.  But  Microsoft  said 
in  a  statement  that  it  will  con¬ 
tinue  to  provide  partnership 
opportunities  for  other  report¬ 
ing  tool  vendors. 

The  tight  integration  prom¬ 


ised  among  Microsoft's  SQL 
Server.  Reporting  Services  and 
server  management  software 
makes  the  new  technology  es¬ 
pecially  appealing  to  ProClari- 
ty  Corp..  a  Boise.  Idaho-based 
developer  of  business  analyt¬ 
ics  software. 

Money-Saving  Move 

ProCiarity.  a  Microsoft  part¬ 
ner  and  SQL  Server  20C^  user, 
is  testing  an  early  version  of 
the  Reporting  Seivices  soft¬ 
ware.  said  Clay  Young,  the 
company's  vice  president  of 
marketittg.  ProCiarity  plans  to 
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roil  out  the  reporting  tools  in- 
lemally  when  the  beta  release 
becomes  available,  he  added. 

Young  said  ProCiarity  hopes 
to  use  Reporting  Services  to 
create  reports  that  don't  re¬ 
quire  hirthcr  analysis  after 
distribution,  such  as  ones  that 
detail  the  number  of  hits  on  its 
Web  site.  The  company  cur¬ 
rently  uses  Crystal  Decisions' 
software,  but  Young  said 
ProClarir>'  plans  to  standard¬ 
ize  on  Microsoft's  technology 
to  save  money,  since  Report¬ 
ing  Services  will  be  bundled 
as  pan  of  SQL  Server  liccrLses. 

Microsoft's  move  makes 
sense  as  rcportii^  tix>b  be¬ 
come  more  of  a  cominodit>’ 
that  dccision-suppon  vendors 
can  embed  into  their  products, 
said  Joshua  Greenhaum.  an  an¬ 
alyst  at  Enterprise  Applications 
Consulting  in  Daly  City,  Calif. 

Mienrsofi  should  have  no 
problem  convincing  users  that 
it  can  develop  reponing  soft¬ 
ware  that's  technically  sound. 
Greenbaum  .said.  But  it  may  be 
harder  for  the  company  to 
prove  that  it  has  reporting  ex- 
penise  in  indhidual  vertical 
markets,  he  added.  I 


application  could  also  be  use¬ 
ful.  but  SAS  officials  need  to 
better  "pinpoint  what  they  are 
trying  to  go  after"  with  that 
product,  he  said. 

While  SAS  already  sells 
some  supply  chain  analy-sis 
components,  it's  now  creating 
an  end-iu-cnd  offering  that 
covers  both  the  supply  and  de¬ 
mand  sides  of  supply  chain 
processes,  said  Bob  Moran,  an 
analyst  at  Aberdeen  Group 
Inc.  in  Boston.  The  new  soft¬ 
ware  will  lei  users  examine 
how  es'enis  at  one  point  in  a 
supply  chain  could  affect  oth¬ 
er  segments.  Moran  said.  That 
could  be  a  key  capability  for 
companies  that  try  to  get  by 
with  the  thinnest  of  profit 
margins,  he  added.  I 


(kignostoShip 
Browser-based 
Analysis  App 

In  addibon  to  is  ileveiopmeni  ol 
supply  chan  *nalvs«  toots.  Cog- 
nos  6  readying  the  fast  luly  VM 
browser-beised  reioBse  oi  is 
ftagshp  business  imoioBnee 
sokwere 

Thecompanypiansloan- 
nouice  the  Cognos  Series  7  Ver¬ 
sion  2  upgrade  iK  week  end 
ship  it  next  month.  Beousa  i  fr 
guves  no  cAeni  sokwefe.  die  new 
release  can  (educe  adnensbatNe 
costs  and  heaiWies  for  carper 
rale  users.  Kotnkig  to  Cognos 
otfeafe.  They  said  I  canitoo 
hande  larger  amouris  at  data 
thanbetoraandpRMdepredc- 
We  andysE  capabibes  to  useis. 

The  tetter  ieature  wfl  let  users 
rwlorwortHookingtrendanaly- 
sesinstaidoliuslraietvinghiE- 
loncaldata.saidlichael6ren- 
chaud.  a  product  dtector  at  Cog¬ 
nos.  For  example,  a  company 
could  use  toe  tool  to  projsd  how 
asatosdealmgMafleclinvenlo- 
ly  levels,  enabling  i  to  ptan 
ahead  by  otdetrg  more  stock 

The  new  releese  is  beng  de¬ 
signed  to  address  usabAy  is¬ 
sues,  but  Its  Mtrbased  user  In' 
teriace  has  toe  same  capabAbes 
that  Cognos bidlnto  the curani 
Windows  version,  said  Mp 
Russom.  an  analyst  at  Qigi  kdor- 
malion  Croup  kc 
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MARK  HALL  .  ON  THE  MARK 

Nokia  Appliance  Plugs 
E-mail  Security  Hole . . . 

. . .  and  challenges  competing  devices,  which,  a  company  executive 
chides,  “appeal  to  the  lowest  common  denominator.”  Nokia  Internet 
Communications,  a  US.*based  business  unit  of  Finland’s  Nokia  Corp., 
will  ship  at  the  end  of  March  its  SC6600  e-mail  security  appliance  to 
guard  your  network  hrom  any  message  laden  with  viruses,  worms, 
spam,  offensive  language,  sensitive  data  and  just  about  any  iftgital  nasty 
you  can  concoct  A  single  SC6600  (the  Nokia  Message  Protector,  if 


>'ou’re  a  fan  of  marcom-speak)  peers  into 
files  that  have  been  zipped  multiple 
times,  decodes  macros,  analyzes  executa¬ 
bles,  parses  content  and  detects  spam  at 
a  siz^iftg  120.000  electronic  epistles  per 
hour.  Its  performance  is  achieved,  brags 
Dan  MacDonald,  vice  president  of  prod¬ 
uct  management  and  marketing,  **b^ 
cause  the  [SC6600]  is  pur¬ 
pose-built  (o  protect  SMTP 
trafTic  Oow."  Competing 
boxes  from  say.  McAfee,  he 
says,  are  “htst  a  Rtetil-pw 
poM  eampulir  Muf  allwnplB  to 
(h>  too  nuny  Mngi  at  once,” 
such  as  protect  HTTP  and 
VPNs  as  vreU  as  SMTP  traf¬ 
fic  Worse.  MacDonald 
claims,  virus  security  ftrros 
have  tried  to  force-fit  their 
software  approach  into  a 
hardware  appliance,  which 
he  says  needs  to  be  designed 
from  the  silicon  up.  not  the 
binaries  down.  As  such, 

Nokia  has  partnered  with 
Trend  Micro  Inc.  for  its  virus 
software.  The  lU  (L7S  in. 
hi^)  appliance  will  cost 
536,000,  plus  the  license  for 
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Trend  Micro’s  virus  protection  o  If 
you're  satisfied  that  your  e-mail  is  safe 
and  sound,  it’s  time  to  consider  Ma  gapbio 
hteiwlaiitmawigbig  (it)  boms  bite  your 
nteorfc.  Not  yours,  you  say.  Fat  chance. 
IM  permeates  64%  of  businesses  today, 
according  to  market  researcher  Oster- 
man  Research  Inc.  which  surveyed  189 
organizations.  If  you  still 
doubt  it.  visit  the  Web  site 
of  San  Diego-based  Akonix 
Systems  Inc  and  download 
ite  free  tool.  Akonix  Rogue 
Aware,  which  will  enlighten 
you  on  just  bow  pervasive 
EM  is  in  your  company.  If 
what  you  learn  scares  you. 
Akonix  CEO  Peter  Shtw 
hopes  you'll  buy  Version  2J0 
of  Akonix  L7  Enterprise, 
sriiicb  proteeli  yaur  H  tnMc 
fcnmrinjaaa  teteantefcing 
canwrte  palciaa  on  who  can 
send  what  IM  traffic  with 
which  IM  client  and  when 
they  can  send  it.  Each  of  the 
IM  gateways  can  handle 
20,000  users  and  can  be 
clustered  for  redundancy. 
Based  on  Windows  server 


technology,  the  L7  Enterprise  ships  to¬ 
morrow  with  a  starting  price  of  $2,250. 
Look  for  an  adapter  to  manage  peer-to- 
peer  trafik  and  a  Linux-based  version 
before  the  end  of  the  year.  ■  Knoch,  knock. 
Who's  thorn?  Not  content  More  than  an  un¬ 
funny  joke,  it's  a  sad  situation  when  visi¬ 
tors  arrive  at  your  Wri>  site  and  can't  find 
what  they're  looking  for.  The  search 
technology  wizards  at  iPhrase  Technolo¬ 
gies  Inc.  have  devised  a  ‘buried  content 
reporting”  tool  that’s  now  in  the  proto¬ 
type  stage  for  release  sometime  in  the 
second  quarter  What  beta  users  are  dis¬ 
covering  is  that  the  most  coveted  content 
has  been  deposited  a  minimum  four  or 
five  clicks  dWp  into  their  Web  sites, 
which  the  MIT-schooled  founders  of 
iPhrase  suggest  makes  for  a  compelling 
case  for  advanced  search  tools.  Ouh.  ■  IP- 
based  phone  systems  get  another  boost 
on  March  3  when  AltiGen  Communica¬ 
tions  Inc.  ships  its  Multichannel  Contact 
Center  for  sales,  service  and  help  desk 
operations.  Each  4U  rack-mounted  de¬ 
vice  can  handle  128  chatty  agents  and 
costs  $525  to  $900  per  user,  depending  on 
the  applications  purchased.  system 

can  tetelagacyitete  branch  tdiiiiBii  or 

connaet  dfraeby  te  yaw  outeMa  Inat.  a  Keith 
Raffle,  chairman  of  UpSbot  Corp^  still 
sounds  a  Ihtle  bitter  when  be  talks  about 
Microsoft  CorpL's  recent  entry  into  the 
hosted  CRM  market.  (*1  iteiter  what  Mh 
cmaofl  is  brbigiBg  te  Mia  party.”  ha  nultara. ) 
After  all,  UpShot  dutifoUy  adopted  a 
pure  .Net  Microsoft  technology,  then 
those  Redmond  rascals  cry  to  take  his 
business  after  be  gave  them  his.  Well, 
he’s  not  going  to  simply  roll  over.  Today. 
UpShot  introduces  a  Multiprocess  Man¬ 
agement  feature  to  its  UpShot  XE  CRM 
for  enterprises.  The  update  improves 
customization  of  data  views  and  provides 
simple  drag-and-drop  configuration  of 
screens,  among  other  enhancements.  Iha 
ante  CRM  party  baap*  Otena  frudar.  b 


HP  Stays  Itanium  Course  Ahead  of  Intel 


OV  JAtnUMAn  VUAVAM 

Hewlett-Packard  Co.  this  week 
will  introduce  an  Itanium  2 
chip  set  in  a  move  that  takes  it 
another  step  closer  to  deliver¬ 
ing  its  first  high-end  servers 
based  on  Intel  COrp.'s  64'btt 
processor  architecture. 

The  company  will  also  de¬ 
tail  plans  to  deliver  the  HP 
mx2  ‘daughter-card”  technol¬ 
ogy  that  will  allow  it  to  com¬ 
bine  two  Itanium  2  processors 
and  a  large  memory  cache  into 
a  one-chip  module. 


The  mx2  technology,  code- 
named  Hondo,  will  allow  HP 
to  double  the  number  of  proc¬ 
essors  it  can  pack  into  an  Ita¬ 
nium  server  and  will  deliver 
better  performance  for  appli¬ 
cations  that  require  CPU  scal¬ 
ability.  said  Brian  Cox,  an  HP 
product  manager. 

HP's  new  sxlOOO  chip  set 
will  allow  the  company  to 
build  systems  much  larger 
than  current  Intel  chip-set 
technology  permits.  Cox  said. 
Whh  h.  HP  is  on  track  to  de¬ 


liver  the  first  Itanium  2-based 
64'processor  Superdome  serv¬ 
er  in  mid-2003.  be  added. 

Because  the  sxlOOO  chip  set 
is  compatible  with  HP's  PA- 
8800  RISC  architecture,  users 
will  be  able  to  upgrade  from 
RISC  to  Itanium  processors 
within  the  same  unit  HP's  Ita¬ 
nium  Superdome  systems  will 
be  able  to  run  HP-UX,  Win¬ 
dows  and  Linux  in  the  same 
machine.  Next  year,  the  com¬ 
pany  will  add  support  for  the 
Open  VMS  operating  system 


on  Itanium  servers. 

HP's  mx2  daughter-card 
technology,  meanwhile,  will 
become  available  sometime 
eariy  next  year,  well  in  ad¬ 
vance  of  Intel’s  planned 
launch  of  a  dual-core  Itanhun 
processor  in  200&  Cox  said. 

HP  b  the  only  mafor  systems 
vendor  that's  likely  to  ship 
high-end  Itanium  servers  by 
year’s  end,  analysts  said.  ‘But 
as  co-developer  of  Itanium, 
that  b  only  something  to  be  ex¬ 
pected  from  HP.”  said  Terry 
Shannon,  editor  of  the  ”Shao- 
non  Knows  HPC  newsletter 
in  Albuqtierque.  NM.  I 


Why  save 
money,  space 
and  time  in  your 
data  center? 


You  no  longor  nood  to  dosign  your  data  cantor  using  an  outtnodod  approach. 

FromlkWtoSMW.APCPowerStruXure*  components  afKJ  a  pay-as-you-grow  approach. 


From  IkW  to  5MW.  APC  PowerStruXure* 
architecture  provides  a  patent-pending, 
systematic  approach  to  buildirtg  data  center 
infrastructure  utilizing  standardized,  pre¬ 
assembled  components. 

Lower  Costs 

PowerStruXure's 
scalable,  modular 
design  lets  you 
build  out  your 
capacity  only  as 
it's  required, 
optimizing  your 
CapEx. 


Modular  system  components  are  easily 
replaceable,  decreasing  repair  times. 

Adopt  to  MMxpoctod  eeotmfoocies 

With  PowerStruXure,  there's  no  need  to 
abarKlon  your  previous  investntent  -  whether 
you  need  to 
physically  move 
your  data  center 
or  adapt  to  tech¬ 
nology  refreshes. 
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The  simplicity  of 
design  lowers 
OpEx  arrd  lessens 
your  dependency 

on  expensive  service  contracts.  Ig  compatible  with  all  m 

Roclaioi  space  internetworking  platforr 

PowerStruXure's  rack-optimized  design  lets  HP/Compaq,  Dell,  IBM, . 
you  reclaim  an  average  20%  of  useable  space  Nortel,  guaranteed, 
within  your  installation  that  was  (>reviously 
needed  for  infrastructure  equipment. 


Best  of  all, 
you  will  never 
be  boxed  in  by 
proprietary 
solutions. 
PovrerStruXure 
is  compatible  with  all  major  server  and 
interrwtworking  platforms,  ir>ctuding 
HPA>>mpsq,  Dell,  IBM,  Sun.  Cisco,  Lucent, 


GUARfiHTEED 

COMPATIBILITV 


Spood  hifraslnictiiro  dsplsyiiisiit  I 

PowerStruXure  dramatically  accelerates  your 
deployment  schedule  with  configure-to-order 
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“I  enjoy  the  ^  that  I  can  buy 
only  I  need  now  wid 

add  to  k  later  as  needed." 


Manager  of  Energy. 
Cox  Enterprises,  Inc. 


Bcst^ 

Ncvs  Technology 

Av^ards 


meter  a!  the  Windows  and  .Net  Magazine 
•2002  Reeder’s  Cheka  AiemrO  for  Best  High  AeeMtilitY 
Sokaion' end  the  GCN 'Best  New  Technetogy  Award' 
at  FOSE.  March  2002. 


Legendary  Reliability' 
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Danish  Bank  Blazes 
^\feb  ^rvices  Trail 


www.computerwortd.com 


Says  performance  overliead  worth  it 


Myear  anniversary 
of  its  Visual  Stu¬ 
dio  .Net  tools. 
Microsoft  Corp.  last  week 
spoti^ted  Danske  Bank  A/S 
as  a  cutting-edge  adopter  of 
the  Web  services  capabilities 
in  its  .Net  Framework. 

But  the  Copenhagen-based 
financial  institution's  Web 
services  work  extends  well 
beyond  its  use  of  Microsoft 
technology.  Danske  Bank  was 
plotting  a  ser>-ices-oricnted 
architecture  to  expose  func¬ 
tionality  from  its  mainframes. 
IBM  WebSphere  application 
servers  and  Microsoft  servers 
long  before  >\'eb  services 
came  into  vogue. 

Peter  Schleidt.  Danske 
Bank’s  executive  vice  presi¬ 
dent  of  group  technology  de¬ 
velopment.  said  the  institution 
has  already  exposed  about  200 
services  from  those  disparate 
systems  and  plans  to  launch 
another  500  services  into  pro¬ 
duction  this  year. 

In  the  Top  Echelon 

Daryl  Plummer,  an  analyst  at 
Stamford,  Conn.-based  Gart¬ 
ner  Inc.,  said  that  if  they  arc 
indeed  “true”  services,  they 
would  place  Danske  Bank  in 
the  top  1%  of  IT  departments 
doing  Web  services  work.  He 
defined  a  true  serN'ice  as  one 
with  a  well-described  inter¬ 
face  to  a  system  that  can  be 
called  from  an  outside  system. 

“Most  companies  don't  have 
that  many  services  identified 
and  exposed  at  this  point.” 
Plummer  said. 

The  end  result  can  be  ex¬ 
tremely  useful  Schleidt  cited 
a  portal  that  customers  and 
7.000  financial  and  sales  advis¬ 
ers  use  to  access  information 
drawn  from  the  disparate 
back-end  systems. 

For  instance,  an  employee 
can  now  access  a  unified  cus¬ 


tomer-purchase  record  and 
correspondence  history  from 
the  same  interface,  without 
having  to  call  individual  sy.s- 
tems  one  at  a  time. 

Schleidt  said  that  three 
years  ago.  the  bank  recognized 
the  need  for  an  engine  that 
would  enable  it  to  integrate 
functionality  across  its  dis¬ 
parate  systems. 

Rather  than  tying  function¬ 
ality  from  one  system  to  an¬ 
other  one  by  one.  the  bank's 
developers  write  standards- 
based  interfaces  that  expose 
functionality  as  services.  They 
define  and  describe  the  ser¬ 
vices  they  have  built  and  how 
those  services  can  be  called  by 
other  systems.  That  informa¬ 
tion  is  then  stored  in  an  inter¬ 
nal  registry  chat  conforms  to 
the  Universal  Description. 
Discovery  and  Integration 


standard,  Schleidt  said. 

About  70%  of  the  bank's  de- 
x  elopers  work  in  Cobol,  20% 
with  Microsoft's  tools  and  10% 
in  lava,  according  to  Schleidt. 
But  a  lava  developer  who 
wants  to  connect  to  a  service 
exposed  by  a  Cobol  developer 
doesn’t  have  to  worry  about 
the  complexity  of  the  other 
environments.  “This  is  what 
Web  services  are  all  about  — 
hiding  complexity  and  expos¬ 
ing  functionality.”  he  said. 

Two  Approadies 

When  linking  services  from 
disfiarate  systems,  the  bank 
takes  a  Web  services  approach 
and  uses  the  Simple  Object  Ac¬ 
cess  Protocol  (SOAP)  for  mes¬ 
sage  transport.  But  when  con¬ 
necting  services  between  the 
same  type  of  systems,  such  as 
mainframe  to  mainframe, 
it  uses  proprietary  “bindings" 
for  performance  reasons,  said 


GM  CTO  Outlines  Web 
Services  Strategy 
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Schleidt.  He  said  the  bank 
found  that  calling  a  mainframe 
function  from  the  WebSphere 
environment  takes  40  msec 
of  CPU  time  using  SOAP.  Call¬ 
ing  the  same  sen’ice  from  the 
mainframe,  using  proprietary 
protocols,  takes  0.3  msec  of 
CPU  time.  “It's  a  lot  cheaper.” 
Schleidt  noted. 

Mike  Gilpin,  an  analyst  at 
Cambridge.  Mass.-based  Giga 
Information  Group  Inc.,  said 
clients  often  report  that  it’s 
five  times  slow’er  to  send  data 
associated  with  a  particular 
program  call  using  SOAP  vs. 
using  a  binary  protocol. 

Schleidt  said  Danske  Bank 
decided  a  little  performance 
overhead  —  but  only  10%.  he 
said  —  would  be  worth  it  be¬ 
cause  of  the  flexibility  that 
Web  services  ultimately  offer. 
But  he  added  that  be  thinks 
the  bank  may  eventually  be 
able  to  eliminate  the  overhead 
by  fine-tuning  services  that 
aren't  working  efficiently. 

Danske  Bank  has  yet  to 
directly  calculate  retum-on- 
investment  figures  for  its  Web 
services,  but  Schleidt  said  the 
boost  in  developer  productiv¬ 
ity  will  be  more  important  be¬ 


cause  that  will  enable  the 
company  to  deliver  new.  com¬ 
plex  product  packages  more 
quickly. 

Schleidt  said  it  took  three 
months  to  expose  a  stock- 
quote  service,  which  was  built 
with  Microsoft’s  .Net  tools,  to 
Denmark’s  largest  newspaper. 
But  it  took  only  three  weeks  to 
do  the  same  for  another  part¬ 
ner,  he  said. 

Those  services  represent 
the  company’s  limited  foray 
into  external  Web  services.  So 
far.  the  bulk  of  the  bank’s  woik 
has  been  with  internal  Web 
services  —  a  recommendation 
Schleidt  extends  to  his  peers.  I 
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Danish  Bank  Blazes 
Web  ^rvices  Trail 

Says  performance  overhead  worth  it 


BY  CAIIOL  SUW* 

AWONG  THE  one- 
year  anniversary 
of  its  Visual  Stu¬ 
dio  .Net  tools, 
Microsoft  Corp.  last  week 
spotli^ed  Danske  Bank  A/S 
as  a  cutting-edge  adopter  of 
the  Web  services  capabilities 
in  its  >let  Frameworit. 

But  the  Copenhagen-based 
financial  institution’s  Web 
services  work  extends  well 
beyond  Hs  use  of  Microsoft 
technology.  Danske  Bank  was 
plotting  a  services-oriented 
architecture  to  expose  ftinc- 
tionality  from  its  mainframes, 
IBM  WebSphere  application 
servers  and  Microsoft  servers 
long  before  Web  services 
came  into  vogue. 

Peter  Schleidt.  Danske 
Bank's  executive  vice  presi¬ 
dent  of  group  technology  de- 
velt^ment,  said  the  institution 
has  already  exposed  about  200 
services  from  those  disparate 
systems  and  plans  to  launch 
another  SOO  services  into  pro¬ 
duction  this  year. 

htheTopEcheton 

Daryl  Plummer,  an  analyst  at 
Stamford.  Cona -based  Gart¬ 
ner  Inc.,  said  that  if  they  are 
indeed  “true"  services,  they 
would  place  Danske  Bank  in 
the  top  1%  of  IT  departments 
doing  Web  services  woric.  He 
defined  a  true  service  as  one 
with  a  well-described  inter¬ 
face  to  a  system  that  can  be 
called  from  an  outside  system. 

“Most  companies  don’t  have 
that  many  services  identified 
and  exposed  at  this  point," 
Plummer  said. 

The  end  result  can  be  ex¬ 
tremely  useful  Schleidt  dted 
a  portal  that  customers  and 
7.000  financial  and  sales  advis¬ 
ers  use  to  access  information 
drawn  from  the  disparate 
back-end  systems. 

For  instance,  an  employee 
can  DOW  access  a  unified  cus¬ 


tomer-purchase  record  and 
correspondence  history  from 
the  same  inierf^e,  without 
having  to  call  individual  sys¬ 
tems  one  at  a  time. 

Schleidt  said  that  three 
years  t^o,  the  bank  recognized 
the  need  for  an  engine  that 
would  enable  it  to  integrate 
functionality  across  its  dis¬ 
parate  systems. 

Rather  than  tying  function¬ 
ality  from  one  system  to  an¬ 
other  one  by  one.  the  bank’s 
developers  write  standards- 
based  interfaces  that  expose 
ftmctionality  as  services.  They 
define  and  describe  the  ser¬ 
vices  they  have  built  and  how 
those  services  can  be  called  by 
other  systems.  That  informa¬ 
tion  is  then  stored  in  an  inter¬ 
nal  registry  that  conforms  to 
the  Universal  Description, 
Discovery  and  Iniegratioo 


standard,  Schleidt  said. 

About  70%  of  the  bank's  de- 
velc^rs  work  in  Cobol,  20% 
with  Microsoft’s  tools  and  10% 
in  Java,  according  to  Schleidt. 
But  a  Java  developer  who 
wants  to  connect  to  a  service 
exposed  by  a  Cobol  developer 
doesn't  have  to  worry  about 
the  complexity  of  the  other 
environments.  "This  is  what 
Web  services  are  all  about  — 
hiding  complexity  and  expos¬ 
ing  ftmctioiiality,"  he  said. 

Turn  Ainmaches 

When  linking  services  from 
disparate  systems,  the  bank 
takes  a  Web  services  approach 
and  uses  the  Simple  Object  Ac¬ 
cess  Protocol  (SOAP)  for  mes- 
transport.  But  when  con¬ 
necting  services  between  the 
same  type  of  systems,  such  as 
mainfr^e  to  mainframe, 
it  uses  proprietary  “bindings" 
for  perftmnance  reasons,  said 


I  Schleidt.  He  said  the  bank 
;  found  that  calling  a  mainframe 
function  from  the  WebSphere 
environment  takes  40  msec 
of  CPU  time  using  SOAP.  Call¬ 
ing  the  same  service  from  the 
mainframe,  using  proprietary 
protocols,  takes  OJ  msec  of 
CPU  time.  “It’s  a  lot  cheaper.” 
Schleidt  noted. 

Mike  Gilpin,  an  analyst  at 
Cambridge,  Mass.-based  Giga 
Information  Group  Inc.,  said 
clients  often  report  that  it’s 
five  times  slower  to  send  data 
associated  with  a  particular 
program  call  using  SOAP  vs. 
using  a  binary  protocol 

Schleidt  said  Danske  Bank 
decided  a  little  performance 
overhead  —  but  only  10%,  be 
said  —  would  be  worth  it  be¬ 
cause  of  the  flexibility  that 
Web  services  ultimately  ofiet 
But  he  added  that  be  thinks 
the  bank  may  eventually  be 
able  to  elimiiute  the  overhead 
by  nne-tunii^  services  that 
aren’t  working  efficiently. 

Danske  Bank  has  yet  to 
directly  calculate  return-on- 
investment  figures  for  its  Web 
services,  but  Schleidt  said  the 
boost  in  developer  productiv¬ 
ity  will  be  more  important  be- 
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cause  that  will  enable  the 
company  to  deliver  new,  com¬ 
plex  product  packages  more 
quickly. 

Schleidt  said  it  took  three 
months  to  expose  a  stock- 
quote  service,  which  was  built 
with  Microsoft’s  .Net  tools,  to 
Denmark’s  largest  newspaper. 
But  it  took  only  three  weeks  to 
do  the  same  for  another  part¬ 
ner,  he  said. 

Those  services  represent 
tbe  company’s  limited  foray 
into  external  Web  services.  So 
far,  the  bulk  of  tbe  bank’s  woric 
has  been  with  internal  Web 
services  —  a  recommendation 
Schleidt  extends  to  his  peers,  t 
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Hospital  CIOs  Shy  Away  From 
Automating  Medical  Systems 


I^el  members  cite  high  costs,  IT  risks 
of  installing  computeri^  applicatioas 


C!05  FROM  hospitals 
Large  and  small  last 
week  said  they  re* 
main  reluctant  to 
deploy  computerized  physi¬ 
cian  order  entry  (CPOE)  and 
automated  medical  records 
systems,  despite  a  three-year 
push  by  90  maior  U,S.  employ¬ 
ers  for  adoption  of  such  sys¬ 
tems  to  help  eliminate  med¬ 
ical  errors. 

Speaking  on  a  CIO  panel  at 
the  Healthcare  Information 
and  Management  Systems  So¬ 


ciety’s  (HIMSS)  annual  con¬ 
ference  here.  Paula  Anthony, 
who  heads  IT  for  the  East 
Texas  Medical  Center  (ETMC) 
Regional  Healthcare  System  in 
Tyler,  said  she  remains  cau¬ 
tious  about  outside  technolo¬ 
gy  lobbying  efforts  such  as  the 
one  for  CPOE  systems. 

ETMC  operates  13  acute 
care  hospitals  plus  medical 
clinics  in  rural  parts  of  East 
Texas.  Anthony  said  the 
prospect  of  deploying  CPOE 
technology  for  use  by  doctors, 
nurses  and  support  personnel 
at  the  hospitals  is  "scary.'* 


ETMC  takes  a  conservative 
approach  and  *vm  not  be  in 
the  forefront  on  technology." 
Anthony  said. 

The  Leapfrog  Group,  a 
Washington-based  health  care 
consortium,  last  year  estimat¬ 
ed  that  systems  for  automat¬ 
ing  tasks  such  as  prescribing 
medication  and  ordering  med¬ 
ical  procedures  would  elimi¬ 
nate  a  half-million  medical  er¬ 
rors  annually  —  some  of  them 
fatal  (Quicklink  29106].  The 
consortium  was  formed  in 
2000  by  the  Business  Round¬ 
table,  a  Washington-based  or¬ 
ganization  made  up  of  CEOs 
from  Fortune  500  companies. 

Kaiser  Permanente  Health 
Plan  Inc.,  the  largest  nonprofit 


health  maintenance  organiza¬ 
tion  in  the  U.S.,  this  month 
said  it  plans  to  speitd  $L8  bil¬ 
lion  during  the  next  three 
years  to  roll  out  a  paperless 
medical  system  that  includes 
CPOE  capabilities  (Quicklink 
362001. 

Not  a  Simple  Process 

But  Warren  Chandler.  CIO  at 
St.  Vincent’s  Health  System  in 
Jacksonville,  Fla.,  said  his  528- 
bed  hospital  is  "a  long  way 
from  going  paperless."  Devel¬ 
oping  and  deploying  a  CPOE 
system  may  sound  like  a  sim¬ 
ple  process,  but  it’s  not.  Chan¬ 
dler  said  There  are  a  lot  of 
costs  and  risks,"  he  noted. 

Chandler  said  a  good  frrst 


NASA  Teams  With  Private 
Sector  to  Improve  Software 


Goal  is  to  build 
fail-proof  systems 


NASA’s  mission  system  soft¬ 
ware  is  considered  to  be 
among  the  best-engineered  in 
the  world  But  In  the  aftennath 
of  the  1999  Mars  Polar  Lander 
crash,  which  was  caused  by  a 
software  bug.  NASA  officii 
acknowledged  that  a  lottg- 
term  fix  was  i»eeded  in  order 
to  build  systems  that  don’t  £uL 
And  the  agency's  subsequent 
efforts  may  ultimately  help  all 
IT  managers. 

NASA  played  a  leading  role 
in  the  creation  last  year  of  the 
Sustainable  Computing  Con¬ 
sortium  (SCC).  which  in- 
chides  companies  such  as 
FedEx  Corp.,  Pfizer  Inc.  Mi¬ 
crosoft  Corp.  and  Oracle  Corp. 

The  goal  of  the  5<X.  which 
is  based  at  Carnegie  Mellon 
University  in  Pittsburgh,  is  the 
Holy  Grail  of  software  design: 
creating  software  that  does 
ndtat  it's  supposed  to  do.  no 


maner  what.  It’s  called 
dependability"  and  refers  to 
systems  that  tolerate  hardware 
faults  well,  maintain  a  high 
level  of  securiry  during  attacks 
and  are  always  available. 

For  an  anlogy,  think  of  the 
field  of  structural  engineering, 
in  which  there  arc  extensive 
building  codes  and  precise 
measures  for  determining 
stress  and  loads.  Right  now, 
there  no  similar  measures  for 
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quantifying  the  reliability  of 
software,  particularly  in  inter¬ 
connected  systems.  "Imagine 
if  there  is  no  building  code, 
where  would  you  stan?  That’s 
where  we  are  with  software." 
said  SCC  head  William 
Guttman.  a  professor  of  eco¬ 
nomics  and  technology  at 
Carnegie  Mellon.  _ 

*1110  Feb.  1  crash 
of  the  space  shuttle 
Columbia  brought 
renewed  atteotioo 
to  the  highly  com¬ 
plex  computer  sys¬ 
tems  and  software 
used  by  the  space  agency. 
While  the  cause  of  that  disas¬ 
ter  has  yet  to  be  determined, 
there’s  no  doubt  that  a  soft¬ 
ware  bug  caused  the  Mars  Po¬ 
lar  Lander  to  crash.  For  NASA, 
that  crash  was  "an  important 
watershed  event"  that  prompt¬ 
ed  the  agency  to  broaden  out¬ 
reach  efforts  to  improve  soft¬ 
ware  design,  said  Henry  Mc¬ 
Donald.  who  beaded  NASA's 
Ames  Research  Center  in 
Moffett  Field,  Calif,  undl  last 
November. 

Among  systems  that  can't 
be  allowed  to  fail  are  those 
that  MasterCard  International 
Inc.  uses  for  its  smart-card 
systems.  Software  code  for 


WHYWFEi 

A  FedEx  IT  CMC  (kscusses 
her  cornpany'a  nrahement 
wWiMSCC 
OQideUJak  36871 


those  systems  is  inspected  line 
by  line  and  tested  in  a  process 
that  can  take  up  half  of  the 
card  development  effort,  par¬ 
ticularly  because  of  the  need 
for  high  security,  said  Terry 
Stanley,  the  company’s  vice 
president  of  smart-i^rd  plat¬ 
form  architecture. 

_  But  if  vendors 

built  better  prod¬ 
ucts,  costs  would 
be  reduced,  Stan¬ 
ley  said.  Tliere  are 
agreed-upon  tests 
for  chips,  but 
that's  not  the  case 
with  software  applications,  be 
said.  The  IT  industry  is  recog¬ 
nizing  that  application  stan¬ 
dards  are  needed  "not  only  to 
cut  down  the  cost  of  security 
testing,  but  to  also  reduce  the 
time  frame,”  he  said. 

MasterCard  worked  with 
SCC  member  Cigital  Inc.,  a 
Dulles,  Va.-based  software  en¬ 
gineering  firm,  to  analyze  and 
test  its  systems.  One  huge 
problem  engineers  face  in 
checking  systems,  said  Jeffery 
Payne,  president  and  CEO  of 
CigitaL  is  the  ability  to  deter¬ 
mine  mathematically  the  relia¬ 
bility  of  an  assembl^  system. 

"This  is  a  long-term,  tou^- 
nut  problem,"  be  said.  I 


CIOs  on  CPOE 


Step  toward  paperless  opera¬ 
tions  is  development  of  a  clin¬ 
ical  data  repository,  which 
could  serve  as  a  baseline  sys¬ 
tem  for  CPOE  and  other  auto¬ 
mated  medical  applications. 

Jeff  Cooper.  CIO  at  Henry 
Medical  Center  in  Stodc- 
bridge.  Ga.,  also  said  health 
care  institutions  should  take  a 
"building-block”  approach  to 
the  development  of  CPOE  sys¬ 
tems.  For  example,  IT  man¬ 
agers  could  start  by  putting 
patient  records  in  electronic 
form,  he  said. 

Health  care  IT  managers 
need  to  get  involved  with  local 
business  organizations  to  let 
them  know  what  is  realistic  in 
terms  of  developing  CPOE 
systems,  said  Pamela  McNutt, 
CIO  at  Methodist  Hospitals  of 
Dallas,  which  operates  a  478- 
bed  bospitaL  a  cancer  clinic 
and  four  other  fociUties. 

!>e$pite  their  concerns 
about  CPOE  technology,  the 
CIOs  who  took  pan  in  the 
panel  discussion  said  they 
have  made  their  systems  com¬ 
pliant  with  the  federal  Health 
Insurance  PonabiUty  and  Ac¬ 
countability  Act's  (HIPAA)  IT 
security  and  privacy  mandates, 
which  go  into  effea  in  April 

Meeting  the  HIPAA  man- 
dates  was  "very  expensive,  but 
we’re  ready  for  it,"  Anthony 
said.  ETMC’s  biggest  HIPAA- 
related  expense  was  the  cost 
of  having  lawyers  review  its 
privacy  and  security  plans,  not 
the  cost  of  new  tectoology. 
she  added.  I 
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Companies  Expected  to 
Boost  Offshore  Outsourcing 


Pressure  to  cut 
costs  drives  trend, 
analyst  firms  say 

BY  MIKUMAR  YIJAYAN 

Demand  for  offshore  out¬ 
sourcing  services  will  contin¬ 
ue  to  grow  substantially  over 
the  next  several  years,  as  com¬ 
panies  try  to  squeeze  more 
value  out  of  every 
IT  dollar  they 
spend,  according  to 
recent  reports  from 
three  major  analyst 
firms. 

In  a  report  released  last 
week,  Meta  Group  Inc.  in 
Stamford,  Coiul,  predicted 
that  o^hore  outsourcing  will 
grow  more  than  20%  annually, 
pushing  it  from  a  $7  billion 
market  today  to  about  $10  bil¬ 
lion  by  200S.  Almost  all  appli¬ 
cation  outsourcing  services 
will  include  an  offshore  com¬ 
ponent,  and  the  market  will 
reach  SIS  billion  by  2007,  the 


Meta  report  added. 

The  focus  on  lowering  IT 
costs  is  accelerating  the  use  of 
offshore  services,  according  to 
a  Gartner  Inc  report  released 
earlier  this  month.  Although 
companies  are  tapping  off¬ 
shore  vendors  primarily  for 
application  management  pur¬ 
poses,  demand  is  also  emerg¬ 
ing  for  business  process  out¬ 
sourcing  and  infra¬ 
structure  manage¬ 
ment  services,  Gart¬ 
ner  said. 

"There  is  a  grow¬ 
ing  sense  that  IT  infrastruc¬ 
ture  management  is  some¬ 
thing  that  can  be  packed  up  in 
a  box  and  shipped  off  to  some¬ 
one  who  can  do  it  more  effi¬ 
ciently  and  at  a  lower  cost,” 
said  Bruce  Caldwell  an  ana¬ 
lyst  at  Gartner,  which  is  also  in 
Stamford. 

"People  are  looking  to  off¬ 
shore  as  a  low-cost  and  imme¬ 
diately  available  alternative” 
to  buying  and  deploying  such 


technologies  themselves. 
Caldwell  said. 

Overiand  Park.  Kan. -based 
Meridian  IQ.U.C  a  subsidiary 
of  Yellow  Corp.  that  provides 
transportation  management 
services,  expects  its  use  of  off¬ 
shore  services  to  increase, 
said  CIO  Dan  Bentzingcr. 

Driving  that  trend  are  the 
same  three  factors  that  led 
Meridian  to  first  outsource 
services  to  Infosys  Technolo¬ 
gies  Ltd.  in  Bangalore.  India,  in 
1998:  speed  to  market,  quality 
and  cost  of  services. 

Infosys  has  given  Meridian 
the  ability  to  quickly  acquire 
reliable  IT  resources  to  deploy- 
new  services,  while  also  giv¬ 
ing  it  the  flexibility  to  ramp 
down  when  they  aren't  need¬ 
ed,  Bentzinger  said.  "Meridian 
is  in  an  upswing  ri^t  now. 
which  means  we  are  going  to 
be  growing  our  relationship.” 
he  predicted. 

Even  though  IT  budgets  are 
shrinking  or  remaining  flat  in 


What  They  Say 

mMoup 

(NWNre  eafeHRiBg  «■  graw 
fr— PIMia 

miMiMMhBhyfOOB. 


the  face  of  the  recession,  the 
amount  of  money  being  allo¬ 
cated  to  offshore  outsourcing 
is  increasing  as  a  percentage 
of  overall  IT  spending,  said 
Prasad  *rhrikutam.  an  Infosys 
regional  manager  in  Dallas. 

In  fact,  one  offehore  ser¬ 
vices  company.  Cognizant 
Technology  Solutions  Corp.  in 
Teaneck,  N.)..  reported  record 
growth  In  2002,  as  annual  rev¬ 
enues  rose  to  S229  million 
from  $178  million  in  2001. 


Nortel,  C&W  Push  New 
Capabilities  on  IP  Networks 


VOIP,  global 
videoconferencing 
among  tai]gets 

BY  MATT  HAMBLEN 

IP  networks  continue  to  get  the 
attention  of  vendors  looking 
to  use  the  technology  to  sup¬ 
port  advanced  functionality 
such  as  voice  over  IP  (VOIP) 
and  videoconferencing. 

Nortel  Networks  Ltd.  today 
will  announce  plans  to  sell  IP 
voice  networidog  products  to 
telecommunications  compa¬ 
nies  and  then  help  them  mar¬ 
ket  services  based  on  the  tech¬ 
nology  to  corporate  users  as 
well  as  consumers. 

Separately,  (^le  &  Wire¬ 
less  PLC  (C&W)  last  week  an¬ 
nounced  that  it's  joining 
forces  with  a  small  IP-based 


videoconferencing  vendor. 
Wire  One  Technologies  Inc. 

London-based  C&W  said  it 
would  use  its  global  IP  virtual 
private  network  (VPN)  capa¬ 
bilities  to  support  Glowpoint, 
a  videoconferencing  service 
offered  by  Hillside,  N,J.-based 
Wire  One. 

Nortel's  announcement 
comes  at  a  time  when  strug¬ 
gling  telecommunications  car¬ 
riers  need  to  find  new  sources 
of  revenue  and  want  to  offer 
their  customers  services  that 
can  help  lower  networking 
costs,  industry  analysts  said. 

Brampton,  Ontario-based 
Nortel  will  announce  a  series 
of  managed  services  designed 
to  provide  businesses,  through 
telecommunications  carriers, 
with  the  ability  to  migrate 
voice  networks  line  by  line  to 


VOIP  technology  and  to  use 
Web-based  routing  and  call 
man^iement  tools.  The  use  of 
VOIP  should  reduce  voice 
conunumcatioos  costs  by  up 
to  25%.  Nortel  said. 

Nortel's  initiative  should 
mean  corporate  IT  rrunagers 
will  see  lower  costs  for  IP- 
based  voice  cormections,  said 
Christin  Flynn,  an  analyst  at 
The  Yankee  Group  in  Boston. 
Many  carriers  have  been  in¬ 
volve  in  IP  voice  trials  and 


should  be  ready  to  invest  in 
deployments  of  the  technolo¬ 
gy  this  year,  she  said 

C&W  and  Wire  One  said 
their  deal  vrill  pve  C&W  a  re¬ 
liable  videoconferencing  part¬ 
ner  and  let  Wire  One  gain  a 
global  reach  for  U.S.  compa¬ 
nies  that  want  to  reliably  and 
inexpensively  provide  video- 
conferenciitg  services  to  busi¬ 
ness  partners  and  branch  of¬ 
fices  in  other  countries. 

Summit  Partners,  a  private 


hhHin.iW  13 


Increasingly,  oflsbore  com¬ 
panies  are  being  viewed  not 
just  as  a  "tactical  cost-saving 
option  but  as  more  of  a  strate¬ 
gic  proposal.”  said  Ram  My- 
nampati.  chief  operating  offi¬ 
cer  at  Satyam  CU>raputer  Ser¬ 
vices  Inc.  in  Hyderabad.  India. 
This  is  reflected  in  the  higher- 
end  jobs  Satyam  is  being 
asked  to  do  for  its  U.S.  cUems. 
Mynampaii  said 
But  project  management  re¬ 
mains  a  major  challei^  for 
many  companies  that  out¬ 
source  to  offshore  vendors,  ac¬ 
cording  to  a  recent  survey  by 
Forrester  Research  Iix:.  in 
Garobridge.  Mass.,  the  results 
of  which  were  also  released 
earlier  this  month. 

One-third  of  the  respon¬ 
dents  In  the  survey  of  US 
"decision-makers”  at  North 
American  companies  said  they 
use  offshore  services  and  plan 
to  spend  more  money  on  them 
in  the  future.  Forrester  said 
But  ”18%  of  respondents  us¬ 
ing  of&hore  providers  report¬ 
ed  a  major  challenge  in  mea¬ 
suring  performance,  wdiile 
20%  have  serious  issues  q>eci- 
fying  the  vrork  needed  to  be 
done.”  the  Forrester  report 
I  concluded.! 


venture  capital  Ann  in  Boston, 
uses  Glowpotm  to  support  12 
hours  ofboardroom  videocon¬ 
ferencing  between  offices  in 
Boston.  London  and  Palo  Alta 
Calif.,  each  week.  Mike  VeiJ- 
leux.  junior  a«*tKranr  adminis¬ 
trator  for  Detwoiktog  at  Sum¬ 
mit.  said  the  partnership  be¬ 
tween  C&W  and  Wire  One 
could  produce  an  improve- 
ment  in  the  London  connec¬ 
tion.  which  soroetinies  has 
lower  quality  than  the  others. 

About  10%  of  all  videocon¬ 
ferencing  service  providers 
use  IP.  and  IP-based  videocoo- 
ferencing  service  can  cost  less 
than  videoconferencing  car¬ 
ried  over  circuit-switched  net¬ 
works,  according  to  Roopam 
Jaia  an  analyst  at  Frost  &  Sul¬ 
livan  Inc.  in  San  lose. ! 
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Hospital  CIOs  Shy  Away  From 
Automating  Medical  Systems 


Panel  members  cite  high  costs,  IT  risks 
of  installing  computerized  applications 


CIOS  FROM  hospitals 
large  and  small  Iasi 
week  said  the>-  re¬ 
main  reluctant  to 
depio)  computerized  physi¬ 
cian  order  entr>'  (CPOE)  and 
automated  medical  records 
5V-5tems.  despite  a  three-year 
push  by  90  major  U.S.  employ¬ 
ers  for  adoption  of  such  sx’s- 
terns  to  help  eliminate  med¬ 
ical  errors- 

Speaking  on  a  CIO  panel  at 
(he  Healthcare  Information 
and  Management  Systems  So¬ 


ciety’s  <  HIMSS)  annual  con¬ 
ference  here,  Paula  Anthony, 
who  heads  IT  for  the  East 
Texas  Medical  Center  (ETMC) 
Regional  Healthcare  System  in 
Tyler,  said  she  remains  cau¬ 
tious  about  outside  technolo¬ 
gy  lobbying  e/forts  such  as  the 
one  for  CPOE  systems. 

ETMC  operates  13  acute 
care  hospitals  plus  medical 
clinics  in  rural  parts  of  East 
Texas.  Anthony  said  the 
prospect  of  deploying  CPOE 
technology  for  use  by  doctors, 
nurses  and  support  personnel 
at  the  hospitals  Is  "scary.'* 


NASA  Teams  With  Private 
Sector  to  Improve  Software 


Goal  is  to  build 
fail-proof  s\’stems 


NASA's  mission  system  soft¬ 
ware  is  coiMidcred  to  be 
among  (be  best-engineered  in 
the  world.  But  in  the  aftermath 
of  the  1999  Mars  Polar  Lander 
crash,  which  was  caused  b)'  a 
software  bug.  NASA  ofTicials 
acknowledged  that  a  long¬ 
term  fix  was  needed  in  order 
to  build  systems  that  don't  fail. 
And  the  agency's  subsequent 
efforts  may  ultimately  help  all 
rr  managers. 

NASA  played  a  leading  rote 
in  the  creation  last  year  of  the 
Sustainable  Computing  Con¬ 
sortium  (SCO,  which  in¬ 
cludes  companies  such  as 
f^dEx  Corp.,  Pfizer  Inc.,  Mi¬ 
crosoft  Corp.  and  Oracle  Corp. 

The  goal  of  the  SCC.  which 
is  based  at  Carnegie  Mellon 
University  in  Pittsburgh,  is  the 
Holy  Grail  of  software  design: 
creating  software  that  does 
what  it's  supposed  to  do.  no 


matter  what.  It's  called  "high 
dependability"  and  refers  to 
st'stems  (hat  tolerate  hardware 
faults  well,  maintain  a  high 
le\‘et  of  security  during  attacks 
and  are  always  available. 

For  an  anlog>-.  think  of  the 
field  of  structural  engineering, 
in  which  there  are  extensive 
building  codes  and  precise 
measures  for  determining 
stress  and  loads.  Right  now, 
there  no  similar  measures  for 


TTm  SCC  is  a  cotaborativs  efiort 
kwoMno  unkmiittts.  com^ 
niss  and  gownwiwnt  sQsn^. 

WHAT:  Develop  standvds  and 
measuremenis  that  ahoM  engi- 
nem  to  accuratebr  determine 
software  rekabdity  and  security. 

WHY;  Maior  IT  vendors  ampha- 
siu  dapaffldabflity  and  security, 
but  users  currently  have  no  way 
to  ascertain  sofN^  quality. 

HOW:  Conduct  research  to 
develop  systematic  approach¬ 
es  to  assessing  risk  and  value. 

WHERE: 

www.5ustainat)lecctnpu(mg.  oig 


ETMC  takes  a  conservative 
approach  and  ‘‘will  not  be  in 
the  forefront  on  technology," 
Anthony  said. 

The  Leapfrog  Group,  a 
Washington-based  health  care 
consortium,  last  year  estimat¬ 
ed  that  systems  for  automat¬ 
ing  tasks  such  as  prescribing 
medication  and  ordering  med¬ 
ical  procedures  would  elimi¬ 
nate  a  half-million  medical  er¬ 
rors  annually  —  some  of  them 
fatal  iQjickLink  29106  J.  The 
consortium  was  formed  in 
2000  by  the  Business  Round¬ 
table.  a  Wa.shingtun-based  or¬ 
ganization  made  up  of  CEOs 
from  Fortune  500  companies. 

Kaiser  Permanente  Health 
Plan  Inc.,  the  largest  nonprofit 


health  maintenance  organiza¬ 
tion  in  the  U.S..  this  month 
said  it  plans  to  spend  S1.8  bil¬ 
lion  during  the  next  three 
years  to  roll  out  a  paperless 
medical  system  that  includes 
CPOE  capabilities  (QuickLink 
36200J. 

Not  a  Simple  Process 

But  Warren  Chandler,  CIO  at 
St.  Vincent’s  Health  S>'siem  in 
Jacksonville,  Fla.,  said  his  528- 
bed  hospital  is  "a  long  way 
from  going  paperless."  Devel¬ 
oping  and  deploying  a  CPOE 
system  may  sound  like  a  sim¬ 
ple  process,  but  it's  not.  Chan¬ 
dler  said.  "There  are  a  lot  of 
costs  and  risks,"  he  noted. 

Chandler  said  a  good  first 


quantifying  the  reliability  of 
software,  particularly  in  inter¬ 
connected  systems.  "Imagine 
if  (here  is  no  building  code, 
where  would  you  start?  That’s 
where  we  are  with  software,” 
said  SCC  head  William 
Gunman,  a  professor  of  eco¬ 
nomics  and  tcchnolog)-  at 
Carnegie  Mellon.  _ 

The  Feb.  I  crash 
of  the  space  shuttle 
Columbia  brought 
renewed  attention 
to  (he  highly  com¬ 
plex  computer  sys¬ 
tems  and  software 
used  by  the  space  agency. 
While  the  cause  of  that  disas¬ 
ter  has  yet  to  be  determined, 
(here's  no  doubt  that  a  soft¬ 
ware  bug  caused  the  Mars  Po¬ 
lar  Lander  to  crash.  For  NASA, 
that  crash  was  "an  important 
watershed  event"  that  prompt¬ 
ed  the  agency  to  broaden  out¬ 
reach  efforts  to  improve  soft¬ 
ware  design,  said  Henry  Mc¬ 
Donald.  who  headed  NASA's 
Ames  Research  Center  in 
Moffett  Field.  Calif.,  until  last 
November. 

Among  systems  that  can’t 
be  allowed  to  fail  are  those 
(hat  MasterCard  International 
Inc.  uses  for  its  smart-card 
systems.  Software  code  for 


WHYWEYEIN 

A  FedE;i  fT  exec  dscusses 
her  company's  invoivemeni 
wihtheSCC 
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those  systems  is  inspected  line 
by  line  and  tested  in  a  process 
that  can  take  up  half  of  the 
card  development  effort,  par¬ 
ticularly  because  of  the  need 
for  high  security,  said  Terry 
Stanley,  the  company's  vice 
president  of  smart -card  plat¬ 
form  architecture. 

But  if  vendors 
built  better  prod¬ 
ucts.  costs  would 
be  reduced.  Stan¬ 
ley  said-  There  are 
agreed-upon  tests 
for  chips,  but 
that's  not  the  case 
with  software  applications,  he 
said.  The  IT  industry  Is  recog¬ 
nizing  that  application  stan¬ 
dards  are  needed  "not  only  to 
cut  down  the  cost  of  security 
testing,  but  to  also  reduce  the 
time  frame,”  he  said. 

MasterCard  worked  with 
SCC  member  Cigiial  Inc.,  a 
Dulles.  Va.-ba$ed  software  en¬ 
gineering  firm,  to  analyze  and 
test  its  systems.  One  huge 
problem  engineers  face  in 
checking  systems,  said  Jeffery 
Payne,  president  and  CEO  of 
Cigital.  is  (he  ability  to  deter¬ 
mine  mathematically  the  relia¬ 
bility  of  an  assembled  system. 

"This  is  a  loi^-term.  tough- 
nut  problem."  he  said.  I 


step  toward  paperless  opera¬ 
tions  is  development  of  a  clin¬ 
ical  data  repository,  which 
could  serve  as  a  baseline  sys¬ 
tem  for  CPOE  and  other  auto¬ 
mated  medical  applications. 

Jeff  Cooper.  CIO  at  Henr>’ 
Medical  Center  in  Stock- 
bridge.  Ga..  also  said  health 
care  institutions  should  take  a 
"building-block"  approach  to 
the  development  of  CPOE  sys¬ 
tems.  For  example.  IT  man¬ 
agers  could  start  by  putting 
patient  records  in  electronic 
form,  he  said. 

Health  care  IT  managers 
need  to  get  involved  with  local 
business  organizations  to  let 
them  know  what  is  realistic  in 
terms  of  developing  CPOE 
systems,  said  Pamela  McNutt. 
CIO  at  Methodist  Hospitals  of 
Dallas,  which  operates  a  478- 
bed  hospital,  a  cancer  clinic 
and  four  other  facilities. 

Despite  their  concerns 
about  CPOE  technology,  the 
CIOs  who  took  part  in  the 
panel  discussion  said  they 
have  made  their  systems  com¬ 
pliant  with  the  federal  Health 
Insurance  Portability  and  Ac¬ 
countability  Act's  (HIPAA)  IT 
security  and  privacy  mandates, 
which  go  into  effect  in  April 

Meeting  the  HIPAA  man¬ 
dates  was  "very  expensive,  but 
we're  ready  for  it,"  Anthony 
said.  ETMC's  biggest  HIPAA- 
related  expense  was  the  cost 
of  having  lawyers  review  its 
privacy  and  security  plans,  not 
the  cost  of  new  technology, 
she  added.  I 


MUTUYX-MYNnWOM 

At  the  HMSS  conference.  U.S.  Army 
oHcais  detaled  an  IP-tiased  network  ihai 
routes  X-rays  hv  rwnoki  {kaoncsis 
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Companies  Expected  to 
Boost  Offshore  Outsourcing 


Pressure  to  eut 
eosts  drives  trend, 
anah'st  finns  say 

BV  JAIKUMAR  VIJAVAN 

Demand  for  offshore  out¬ 
sourcing  services  will  contin¬ 
ue  to  grow  substantially  over 
the  next  several  years,  as  com¬ 
panies  tr>‘  to  squeeze  more 
\’a!uc  out  of  every 
IT  dollar  they 
spend,  according  to 
recent  reports  from 
three  major  analyst 
firms. 

In  a  report  released  last 
week.  Meta  Group  Inc.  in 
Stamford.  Conn..  pa*dicted 
(hat  ofTshorc  outsourcing  will 
grow  more  than  20%  annually, 
pushing  it  from  a  $7  billion 
market  today  to  about  $10  bil¬ 
lion  by  2005.  Almost  all  appli¬ 
cation  outsourcing  services 
will  include  an  ofTshorc  com¬ 
ponent,  and  the  market  will 
reach  515  billion  by  2007.  the 


Meta  report  added. 

The  focus  on  lowering  IT 
costs  is  accelerating  the  use  of 
ofFshore  sen’icos.  according  to 
a  Gartner  Inc.  report  released 
earlier  this  month.  Although 
companies  are  tapping  off¬ 
shore  vendors  primarily  for 
application  management  pur¬ 
poses.  demand  is  also  emerg¬ 
ing  for  business  process  out¬ 
sourcing  and  infra¬ 
structure  manage¬ 
ment  services.  Gart¬ 
ner  said. 

"There  is  a  grow¬ 
ing  sense  that  IT  infrastruc¬ 
ture  management  is  some¬ 
thing  that  can  be  packed  up  in 
a  box  and  shipped  off  to  some¬ 
one  who  can  do  it  more  cffi- 
cicntly  and  at  a  lower  cost." 
said  Bruce  Caldwell,  an  ana¬ 
lyst  at  Gartner,  which  Is  also  in 
Stamford. 

“People  arc  looking  to  off¬ 
shore  as  a  low-cost  and  imme¬ 
diately  available  alternative'' 
to  buying  and  deploying  such 


technologies  themselves, 
Caldwell  said. 

Overland  Park.  Kan.-basod 
Meridian  IQ  LLC.  a  subsidiary 
of  Yellow  Corp-  that  provider 
transportation  management 
services,  expects  its  use  of  off¬ 
shore  services  to  increase, 
said  CIO  Dan  Bentzingcr. 

Driving  that  trend  arc  the 
same  three  factors  that  led 
Meridian  to  first  outsource 
serv  ices  to  Infosys  Technolo¬ 
gies  Ltd.  in  fiangalorc.  India,  in 
1998:  speed  to  market,  quality 
and  cost  of  services. 

Infosys  has  given  Meridian 
the  ability  to  quickly  acquire 
reliable  IT  resources  to  deploy 
new  services,  while  also  giv¬ 
ing  it  the  flexibility  to  ramp 
down  when  they  aren’t  need¬ 
ed.  Bentzingcr  said.  "Meridian 
is  in  an  upswing  right  now. 
which  means  we  an*  going  to 
be  growing  our  relationship.” 
he  predicted. 

Even  though  IT  budgets  arc 
shrinking  or  remaining  flat  in 


What  They  Say 

METAOfKMJP 

Oftshor*  outsourcing  wil  grow 
from  S7  faMien  airrortfiy  to 
mort  than  S10  bilion  by  2005. 


I  GARTNER  INC. 
j  Offshoro  vpAcatkm  manage- 
I  mont  rank^  as  Iht  Mghost 
I  growth  opportunky  in  2003  in 
a  survey  of  36  outsourcing 
vwKlors. 


FORRESTER  RESEARCH 
Respondents  in  a  swoy  of  US 
rr  dedsion-maliars  at  North 
American  companies  rated  off¬ 
shore  providers  bottler  than 
U.S.  firms  67%  of  the  time  in 
terms  of  quality  and  timeNness. 

the  face  of  the  recession,  the 
amount  of  money  being  allo¬ 
cated  to  t»ffshore  outsourcing 
is  increasing  as  a  perwntage 
of  overall  IT  spending,  said 
Prasad  Thrikutam.  an  Infosys 
regional  manager  in  Dallas. 

In  fact,  one  offsh*>rc  ser¬ 
vices  company.  Cognizant 
Technology  Solutions  Corp.  in 
Tcancck.  N.I..  reported  record 
growth  in  2002.  as  annual  rev¬ 
enues  rose  to  $229  million 
from  S178  million  in  2001. 


Increasingly,  oflshore  com- 
;  panics  are  being  viewed  not 
just  as  .1  "tactical  Ct>st-saving 
option  but  as  more  of  a  strate¬ 
gic  proposal.”  Slid  Kam  M>  • 
nampati.  chief  operating  offl- 
,  ccr  .It  SaD'am  C.A>mputer  Ser¬ 
vices  Inc.  in  Hyderabad.  India. 

I  This  is  reflected  in  the  higher- 
end  jobs  Satyam  is  being 
I  asked  to  do  for  its  U.S.  clients. 

^  Mynampati  said. 

But  project  management  re- 
^  maircs  a  major  challenge  for 
;  many  companies  that  oui- 
I  source  to  ofTshorc  vendors,  ac- 
I  cording  to  a  recent  survey  by 
I  Forrester  Research  Inc.  in 
!  Cambridge.  Mass.,  the  results 
'  of  which  were  also  released 
I  earlier  thus  month. 

One-third  of  the  respiin- 
dents  in  the  survey  of  145 
“dccislon-niakers”  at  Ni>rth 
American  companies  said  they 
use  offshore  services  and  plan 
to  spt'nd  more  money  on  them 
in  the  future.  Forrester  said. 

But  "18%  of  respondents  us¬ 
ing  offshore  providers  report¬ 
ed  a  major  challenge  in  mca- 
i  suring  performance,  while 
I  20%  have  serious  issues  speci¬ 
fying  the  work  needed  to  be 
j  done."  the  Forrester  rept'rt 
'  concluded,  b 


Nortel,  C&W  Push  New 
Capabilities  on  IP  Networks 


VDIP,  global 
vidctKonfctvncing 
among  targets 

BV  MATT  HAMBLEM 

IP  networks  continue  to  get  the 
attention  of  vendors  looking 
to  use  the  technology  to  sup¬ 
port  advanced  functionality 
such  as  voice  over  fP  (VOIP) 
and  vidctKonfercncing. 

Nortel  Networks  Ltd.  today 
will  announce  plans  to  sell  IP 
voice  networking  products  to 
telecommunications  compa¬ 
nies  and  then  help  them  mar¬ 
ket  services  based  on  the  tech¬ 
nology  to  corporate  users  as 
well  as  consumers. 

Separately,  Cable  &  Wire¬ 
less  PLC  (C&W)  last  week  an¬ 
nounced  that  it's  joining 
forces  with  a  small  IP-based 


videoconferencing  vendor. 
Wire  One  Technologies  Inc. 

London-based  C&W  said  it 
would  use  its  global  IP  virtual 
private  network  (VPN)  capa¬ 
bilities  to  support  Glowpoint. 
a  videoconferencing  service 
offered  by  Hillside.  N.).-basod 
Wire  One. 

Nortel's  announcement 
comes  at  a  time  when  strug¬ 
gling  telecommunications  car¬ 
riers  need  to  find  new  sources 
of  revenue  and  want  to  offer 
their  customers  serx’kes  that 
can  help  lower  networking 
costs,  industr)'  analysts  said. 

Brampton.  Ontario-based 
Nortel  will  announce  a  series 
of  managed  services  designed 
to  provide  businesses,  through 
telecommunications  carriers, 
with  the  ability  to  migrate 
voice  networks  line  by  line  to 


VOIP  technology  and  to  use 
Web-based  routing  and  call 
management  tools.  The  use  of 
VOIP  should  reduce  voice 
communications  costs  by  up 
to  2S*K>.  Nortel  said. 

Nortel's  initiative  should 
mean  corporate  IT  managers 
will  sec  lower  costs  for  IP- 
ba.sed  voice  connections,  said 
(;hristtn  Flynn,  an  analyst  at 
The  Yankee  Group  in  Boston. 
Many  carriers  have  been  in¬ 
volved  in  IP  voice  trials  and 


should  be  ready  to  invest  in 
deployments  of  the  technolo¬ 
gy  this  year,  she  said. 

C&W  and  Wire  One  said 
their  deal  will  give  C&W  a  re¬ 
liable  videoconferencing  part¬ 
ner  and  let  Wire  One  gain  a 
global  reach  for  U5.  compa¬ 
nies  that  want  to  reliably  and 
inexpensively  provide  video¬ 
conferencing  services  to  busi¬ 
ness  partners  and  branch  of¬ 
fices  in  other  countries. 

Summit  Partners,  a  private 
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venture  capital  firm  in  Bixston. 
uses  Gluw'point  to  support  12 
hours  of  boardriHim  xadeocon- 
ferendng  between  offices  in 
Btrston.  London  and  Palo  Alto. 
Calif.,  each  week.  Mike  VeU- 
leux.  junior  assistant  adminis¬ 
trator  for  networking  at  Sum¬ 
mit.  .said  the  partnership  be¬ 
tween  C&W  and  Wire  Otk- 
could  produce  an  improve¬ 
ment  in  the  Lffodon  connec¬ 
tion.  which  sometimes  has 
lower  quality  than  the  others. 

About  10%  of  all  vidcoc»»n- 
ferencing  service  pnniders 
use  IP.  and  IP-based  videtKon- 
ferencing  service  can  cost  less 
than  videoconferencing  car¬ 
ried  over  circuit -swiiched  nct- 
woiks.  according  to  R(K>pam 
Iain,  an  aiulyst  at  Frost  &  Sul¬ 
livan  Inc.  in  San  lose.  I 
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helping  users  pool,  share  and 
manage  heterogeneous  server, 
storage  and  oetworic  resources. 
Sun  will  also  emphasize  the 
role  of  its  iForce  partner  cen* 
ters.  where  users  can  test  and 
specify  their  technol<^  re¬ 
quirements  for  Sun  to  custom- 
configure  for  them. 

The  goal  of  these  efforts  is 
to  reduce  complexity,  improve 
utilization  and  reduce  the 
costs  associated  with  deploy¬ 
ing  aiuf  mana^g  IT  pn^ucts. 
Sun  CEO  Scott  McNealy  said. 

Sun’s  strategy  appears  to  be 
striking  a  positive  chord  with 
some  users. 

‘’We  like  the  idea  of  dealing 
with  vendors  who  are  willing 
to  take  responsibility  for  a 
broader  spectrum  of  services," 
said  |im  Stock,  CIO  of  The 
Landrum  Co.,  a  Columbia. 
Mo.-based  hoidiitg  company 
that  owns  four  banks. 

The  company  moved  its 
core  financial  applications 
from  a  mainframe  to  Sun 


servers  two  years  s^o.  not 
only  because  the  technology 
offered  better  price/perfor- 
maoce,  but  also  because  it 
was  easy  to  implement,  ac¬ 
cording  to  Stock. 

Questerra  LLC,  a  Char¬ 
lottesville.  Va.-hased  provider 
of  mapping  services,  has  stan¬ 
dardized  on  Sun  servers,  stor¬ 
age  and  services  for  running 
its  core  applications.  Sun’s 
approach  of  offerii^  more 
integrated  technology  mod¬ 
ules  is  a  good  one  b^ause  it 
eliminates  the  need  for  com¬ 
panies  to  integrate  best-of- 
breed  technologies  them¬ 
selves.  said  Tim  von  Kaenel. 
chief  technology  officer  at 
Questerra. 

The  notion  that  Sun  has  of 
integrating  all  these  disparate 
technologies  into  one  plat¬ 
form  allows  for  computing  on 
demand,  storage  on  demand 
and  services  on  demand.” 
Kaenel  said. 

Sun’s  efforts  address  a 
growing  area  of  concern  for 
large  users,  said  Cathy  Hotka, 
former  vice  president  of  IT  at 
the  National  Retail  Federation 


and  now  principal  of  Cathy 
Hotka  &  Associates,  a  Wa^- 
ington-based  consultancy  for 
retail  IT  operations. 

"The  complexity  involved  in 
making  many  disparate  prod¬ 
ucts  work  with  one  another  is 
a  major  concern"  for  large 
corporations,  Hotka  said 
"Many  In  the  technology 
community  have  underesti¬ 
mated  the  number  of  kludge 
bridges  that  end  users  have  to 
create"  to  make  this  happen, 
she  said 

Great  Expeclatians 

As  a  result,  there’s  growing 
demand  from  users  for  more 
modular  and  interoperable 
products,  said  Jean  Bozman, 
an  analyst  at  Framingham, 
Mass.-based  IDC.  "The  idea 
that  systems  vendors  play  a 
role  in  assisting  customers  in 
integrating  their  technology  is 
gaining."  Bozman  said 
Cingular  Wireless  is  testing 
N1  technology  in  its  Alpha¬ 
retta,  Ga.  data  center  as  part 
of  a  move  to  improve  resource 
utilization  and  management. 
Under  a  multiphased  ap- 


McNealy:  let  Us  Run  the  Machines’ 


SunCEOAeattMaNiMvInl 
fmkiftkt^Conipalmwoiid 
■dRor  to  cNM  Miryfran  Johnson 
and  reportor  Jslunar  Vltosn 
about  toe  company's  draetion 
and  toe  dangtog  ids  of  CIOs. 
&CMpto  from  torn  convanoliQn 


blocfs  ihM  you  uee  to  buld  nab 
wotk  computing. 


piBiffltotakMvil 
beseBygnmofaur 
produetoaeeaitoBcrip' 
tian.Vto1baseBig 
mom  of  ow  products 
tonwtto  ttrvlGa  pnMdors  and 
toes  to  end  ueam.  And  Ml  be 
leliej  our  paxfeicto  more  into' 
ipatodahlesBtotogiMibto. 

Thao's  going  to  be  mom  skill 
out  toem  toraieto  toe  open' 
soiaGi  ooMRMrtly  or  IM  Ml 
oftortomiidiao«to*onB.¥to1 
have  mom  ptocBi  of  toa  lego 


Wre  saying 
toalifyDumuBthMeyour 
mm  dMa  cantor,  tat  us 
atotoenad«MS.The 
liOttanaMoriBtoooto 
tie  Sun  Tone  eonioe 
provider,  who  heel  toe 
(racftBe.pulltotoalr 
<toto  cantor,  connad  I  to  toe  neb 
work  and  run  N  on  a  7-br24  be¬ 
ds.  Then  m1  go  to  toe  saniee 
pfotodmandaey.*lMuemBn- 
egi  toe  madiimB  to  your  Mltoh 
room  Vou  nanaga  toe  service, 
but  AM  M  Otf  paraon  touch 
toe  madAto.  Then  baa  vary 
sniM  pscBOtoge  of  toe  head 


count  In  your  dMi  cmitor  ' 

What  BM  ie  Stotog  is,  let 
uajusttiAatoewhdBtotng.’ 
TheyMUttodotoemaneor 
menlconultaa.theardiltoc' 
life,  toe  hoeing,  toe  equtoment 
pifchiaes.dloft. 

llbd>mtodMBBalaBm 
ware  M  CBl  Mhe  ae  yea  iM 
Mntog  MT  Stn's  61  Howard  is 
an  aample  of  a  nenMMvo  (30. 
Hi  undarettnih  tod  hto  lob  ie  not 
manadno  dda  oanan  or  toe 
network  lor  us.  The  CIO  shouldnT 
be  wonted  abed  aaaawhlng 
computomornmtogdMican' 
tors,  or  managtoo  toe  ndwork,  or 
gdltog  toe  prtottag  BidI  to  work. 

Sawha  does  he  spend  el  hk 
ttnedatoir?He^btiliinga 
worhkfBH  L0AP  dkectoiy  mg- 
toby  anpiaRiirMlDn  tost  «l 
haw  wary  eaptoyae,  cutooraer. 
rawla.dieahnMwaidptociflf 
eqdpmeni  In  toe  SiA  oommunHy 
taeBkctaiyiMiipraMalor 
each  one,  acmes  B  otf  bttofneas 


proach.  Cingular  will  use 
Sun's  N1  products  to  pool 
Unix  servers,  storage  equip¬ 
ment  and  network  systems 
from  multiple  vendors  and 
share  the  resources. 

The  goal  is  to  get  "greater 
value  for  every  FT  dollar  that 
we  spend,"  said  Victor  Nelson, 
vice  president  of  IT  at  Cingu¬ 
lar.  Eventually,  such  an  inte¬ 
grated  IT  infrastructure  will 
also  provide  a  base  for  deliver¬ 
ing  on-demand  IT  services, 
Nelson  said. 

Sun’s  strategy  is  a  credible 
one  that  draws  on  its  strengths 
in  the  network  computing 
arena,  said  Joyce  Becknell,  an 
analyst  at  The  Sageza  Group 
Inc  in  Mountain  View.  Calif. 
Sun’s  biggest  challenge  will  be 
to  convince  users  that  it  can 
really  deliver  multivendor 
interoperability,  even  as  U 
continues  to  shun  broader 
adoption  of  ^ATintel  and  Linux 
technologies  in  its  own  prod¬ 
uct  lines,  she  said. 

They've  got  to  show  that 
they  can  play  nicely  with  the 
other  kids  in  the  sandbox," 
Becknell  said.  I 
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Merger  Wave  Hits  Energy  IT  Vendors 

Bv  TNOMAS  HOFFMAM  i  finns  has  some  technology  i  For  instance.  Eugene  Zimon. 

A  recent  flurry  of  mergers  be-  managers  worried  about  the  CIO  at  NStar.  a  Boston-based 

rween  energy  industry  soft-  potential  impact  of  the  deals  utility  and  energy-distribution 

ware  vendors  and  IT  services  I  on  their  companies.  I  company,  is  closely  eyeing 


CGI  Group  lnc.’s  plans  to  ac¬ 
quire  rival  Cognicase  Inc.  In 
early  2001,  Cognicase  bought 
M3i  Systems  Inc.,  from  which 
NStar  had  licensed  outage 
management  software.  The 
CGI/Cognicase  deal  would  be 


Award-Winning,  Economicai 
Power  Protection 


Get  More  for  Your  IT  Dollars 

Tnpp  Lite  UPS  Systems  offer  3  fuU  ran^e  of  advanced  power  protection 
features— including  on-line  operation,  automatic  vottage  regulation  and 
PowerAlert  Software— to  assure  optimum  network  productivity.  Leading 
IT  pubtkatiorts  agree!  Tripp  Lite  is  consisterttly  recognized  for  its  superior 
performance,  teltability  and  compatibility.  Best  of  alL  Tripp  Lite  typically 
includes  advanced  features  not  found  on  comparable  competitive  models 
white  still  being  priced  lower. 

SmariOnline"  and  SmanPro’  UPS  Systems 
with  ftwerAlen  Software 

Ideal  5obitioftsfi)f  everything  from  Small  Servers  to  enterprise  Networlts 

•  SmartOnline  models  offer  true  on-line  operation— the  highest  level  of 
protection — at  the  same  price  as  competitors'  lirte-interactive  systems 

•  SmartPro  models  protect  connected  equipment  with  superior  automatic 
voltage  regulation— corrects  a  wider  input  voltage  range  to  avoid 
unnecessary  battery  depletion 

•  PowerAlert  is  the  only  power  management  software  that  provides 
unparalleled  network  power  management  and  control  over  every  major 
brand  of  UPS  system  on  your  network 

•  Up  to  four  communication  ports  (2  USB  &  2  0B9)— industry  exclusive! 

•  RackAower  models  maximize  VA  in  space-saving  cabineb— slim  as  lU! 

•  Extended  run  capability  available  on  select  models 

•  Up  to  SlOO.OOO  Ultimate  Li^me  Insurance 

•  Full  range  of  UPS  solutions  horn  4S0VA  to  lO.OOOVA  capacities 
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“the  second  ownership  change 
within  a  year,  ssduch  requires  a 
lot  of  new  relationship-build¬ 
ing  on  our  part,"  Zimon  said. 

Product  delivery  and  sup- 
ix)rt  of  the  software  developed 
by  M3i  has  improved  since 
Cognicase  took  over  that  com¬ 
pany.  Zimon  said.  But,  he 
added,  the  constant  changing 
of  the  guard  "continues  to  be  a 
big  concern  among  senior 
management  here." 

Meta  Group  Inc.  last  month 
warned  that  the  acquisitions 
might  bring  greater  Hnancial 
stability  to  vendors  but  that 
support  for  some  products 
could  end  if  the  companies  in¬ 
volved  in  a  merger  offer  simi¬ 
tar  software. 

For  example,  Meta  analyst 
Rick  Nicholson  said  there's 
some  duplication  of  products 
between  Spokane,  Wash.- 
based  Itron  Inc.  and  Silicon 
Energy  Corp.,  an  Alameda. 
Calif.-based  energy  manage¬ 
ment  systems  vendor  that  Itron 
agreed  to  acquire  last  month. 

PBndmg  Deals 

Itron  expects  to  complete  its 
purchase  of  Silicon  Energy  this 
month.  Meanwhile,  CGI  last 
month  wrapped  up  a  tender 
offer  for  Co^case  and  said  it 
had  received  sales  pieces  for 
nearly  97%  of  the  stock  issued 
by  that  company,  which,  like 
CX^.  is  based  in  Montreal. 

Two  other  acquisitions  are 
in  the  works.  American  Man¬ 
agement  Systems  Inc.  in  Fair¬ 
fax,  Va.,  signed  a  deal  to  sell  its 
utility-focused  FT  consulting 
business  unit  to  Wipro  Ltd.  in 
Bangalore,  India.  And  Sun- 
Gard  Data  Systems  Inc.  in 
Wayne,  Pa.,  plans  to  buy  Cami- 
nus  Corp.,  a  New  Yorit-based 
vendor  of  energy-related  ap¬ 
plications.  although  SunGa^ 
this  month  said  the  U.S,  De¬ 
partment  of  Justice’s  antitrust 
division  has  asked  for  more  in¬ 
formation  about  the  deal 

Kevin  Walsh,  an  IT  manager 
at  Exelon  Power,  the  electricity- 
generation  division  of  Chica¬ 
go-based  Exelon  Corp.,  said  he 
doesn't  use  software  from  the 
vendors  involved  in  the  deals. 
But  the  mergers  have  him  wor¬ 
ried  about  the  viability  of  och¬ 
er  software  vendors  target 
energy  businesses,  he  said.  I 
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For  their  100  tournaments 
each  year,  the  PGA  TOUR 
depends  on  Palm,  Inc.  and 
IBM  for  live  scoring.  With  an 
application  called  ShotLink, 
scorers  travel  from  hole-to- 
hole  recording  strokes  and 
shot  information  on  Palm™ 
handhelds.  The  data  is  then 
transmitted  wirelessly  and 


uploaded  to  leaderboards, 
broadcast  booths,  and  online 
audiences  nationwide.  The 
enhanced  scoring  solution 
has  helped  the  PGA  TOUR 
provide  real-time  data  to 
millions  of  viewers.  To  read 
more  enterprise  success 
stories  from  Palm,  visit  us  at 
palm.com/enterprise  today. 
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The  ROI  Conversation 


U 


f  FIERE  ARE  many  ways  to  count,”  says 
a  CFO  friend  of  mine.  And  what  could 
be  more  true  when  it  comes  to  mea¬ 
suring  ROI?  Those  three  magic  letters 
now  embody  the  myriad  ways  in  which  we  measure 
IT  effectiveness.  We  are  obsessed,  in  these  days  of 
budget  starvation,  with  proving  that  pricey  IT  proj¬ 
ects  will  put  meat  on  the  corporate  bones. 


This  has  not  only 
spawned  another  branch 
of  IT  consulting  special¬ 
ties.  complete  with  elab¬ 
orate  ROI  scorecards, 
calculators,  benchmarks 
and  overengineered 
methodologies.  It  has 
also  reawakened  interest 
in  applying  to  IT  proj¬ 
ects  a  wider  array  of 
standard  ftnancial  mea¬ 
sures  such  as  net  present 
value,  internal  rate  of  re¬ 
turn  and  others. 

“A  lot  of  the  best  practices  in  man¬ 
aging  a  lechnolog)'  function  can  be 
stolen  from  the  business  playbook." 
says  lohn  McKinley,  the  departing 
chief  technolog)'  officer  at  Merrill 
Lynch  (QuickLink  36085].  “Ultimate¬ 
ly.  if  you  can't  measure  it,  you  can't 
improve  it." 

So.  what  are  the  many  u'ays  to 
count  the  ROI  of  your  IT  invest¬ 
ments?  We've  rounded  them  up  and 
spelled  them  out  in  this  week's 
Knowledge  Center  (“Do  the  Math!" 
staning  on  page  21).  This  in-depth 
guide  for  CIOs  and  IT  managers 
takes  a  blow-by-blow  look  at  the 
most  popular  metrics  to  consider  as 
you  hoist  your  projects  onto  thc 
scalcs  of  business  judgment. 

Wv  also  conducted  a  sur\'cy  on 
this  t4>pic  «»n  Cofnpuferwor/d.com  last 
month,  and  the  majority  of  the  11.3  re¬ 
spondents  confirmed  that  they  are 
indeed  doing  ROI  analyses  regular!) 
these  da)'s.  Yet  skepticism  about 
these  metrics  still  runs  high.  “As  wc 
say  in  IT."  one  CIO  quipped.  “1  don't 
believe  in  any  numbers  I  haven't 
massaged  myseir.**  About  half  of  our 


respondents  said  they're 
ambivalent  about  the  use¬ 
fulness  of  ROI  measures, 
with  the  majority  favor¬ 
ing  the  simpler  but  more 
limited  "payback  period" 
metric  over  the  more 
complicated  financial 
formulas. 

As  I  read  the  stories 
(and  struggled  valiantly 
through  the  math).  1  de¬ 
tected  a  distinct  under¬ 
current  fiowing  through 
the  most  successful  applications  of 
ROI  metrics.  It  was  the  ROI  conver- 
sud'ort.  The  most  important  change 
taking  place  isn't  in  the  application 
I  of  anybody’s  mystical  mix  of  metrics. 
It's  in  the  discussions  taking  place 
among  the  business,  financial  and  IT 
folks  as  their  companies  cobble  to¬ 
gether  the  best  apprtwch. 

Those  conversations  also  revealed 
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some  useful  lessons,  including: 

Don't  count  on  any  single  metric.  At  Gay¬ 
lord  Entertainment,  the  CIO  uses  the  I 
simpler  measure  of  payback  period 
for  projects  of  less  than  SlOO.OOO.  but  | 
he  turns  to  more  heav)'weight  finan¬ 
cial  metrics  like  discounted  cash 
flow  for  the  bigger  deals. 

Conserve  your  ammunition.  Don't 
squander  a  powerful  ROI  rundown 
I  on  every  project  in  sight.  Save  it  for 
the  top  10%  to  20%  of  your  most  vi¬ 
tal  initiatives. 

Customize  ike  crazy.  Develop  your 
'  own  set  of  metrics,  and  pull  your 
vendor  and  consulting  partners  into 
the  game.  If  your  suppliers  can't  con-  1 
tribute  any  hard  numbers  or  sensible 
metrics,  you  have  to  wonder.  “What 
I  good  are  they?” 

Favor  simplicity.  If  it  takes  more  than 
a  few  weeks  to  evaluate  a  project, 
your  method  is  loo  complex.  CIO 
Catherine  Kozik  at  Tcllabs  factors  in 
two  years  of  fully  loaded  IT  costs 
and  a  few  other  key  measures  that 
map  to  the  company's  strategic  goals.  | 
"If  you  focus  just  on  the  ROI  calcula¬ 
tion,  then  you’re  playing  liar’s  pok¬ 
er."  Kozik  points  out.  "The  biggest 
liar  is  going  to  win,  and  that's  ulti¬ 
mately  not  a  successful  business 
practice." 

Amen  to  that. 

Let  the  conversation  begin.  I 


PIMM  FOX 

Leaders 
Need  Vision 

WHEN  Hewlett- 

Packard  announces 
its  quarterly  earn¬ 
ings  later  this  month,  analysts 
and  customers  will  be  looking 

for  further  evidence  that  the  Compaq 
merger  is  bringing  the  benefits  that 
Carly  Fiorina  promised  when  she  ag¬ 
gressively  stumped  for  the  deal  in  the 
fall  of  2001.  So  far  the  results  look 
promising. 

HP  surprised  Wall  Street  in  the  pre¬ 
vious  quarter  by  reporting  a  profit  of 
12  cents  per  share  during  one  of  the 
most  difficult  times  in  history  for  IT 
vendors.  And  while  consulting  revenue 
is  off  and  customer-support  revenue  is 
flat,  there's  evidence  that  HP's  man¬ 
aged  services  and  outsourcing  opera¬ 
tions  are  growing. 

So  where's  the 
chorus  of  praise  for 
Fiorina? 

The  media  pillo¬ 
ried  her  —  though 
there  were  some  ex¬ 
ceptions  [(QuickLink 
23260]  —  for  drag¬ 
ging  HP  toward  an 
unworkable  destiny 
within  a  dcca)'ing  in- 
dustr)'.  They  lam¬ 
basted  her  for  being 
blind  to  the  founding  vision  of  William 
Hewlett  and  David  Packard,  sacrificing 
jobs  and  the  company's  very  existence 
for  the  purportedly  ill-conceived  plan 
of  combining  with  Compaq. 

Instead,  her  strategy  is  winning  out. 
In  his  recently  published  book.  Per/ect 
Enough;  Curly  Fiorina  and  the  Reinven¬ 
tion  of  Hewlett-Packard.  George  An¬ 
ders  reveals  several  things  about  riori- 
na  and  her  drive  and  character  that 
should  serve  as  lessons  for  all  would- 
be  leaders. 

First,  you  must  have  a  vision  of  what 
you  want  to  accomplish.  Thai  sound.s 
pedestrian,  but  Walter  Hewlett,  who 
opposed  the  merger,  misiudgcd  the 
strength  of  Fiorina's  vision  and  lacked 
an  alternative  one  —  and  lost  his  bat¬ 
tle  with  her 

Second,  you  muse  have  the  commit¬ 
ment  to  sec  your  vision  through.  Fiori¬ 
na  clearly  was  committed  to  the  merg¬ 
er.  At  one  point,  the  investor  vote  to 
approve  the  merger  hung  in  the  bal¬ 
ance.  It  would  have  been  easier  for  her 
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The  ROI  Conversation 


f  HERE  ARE  many  ways  to  count,”  says 
a  CFO  friend  of  mine.  And  what  could 
be  more  true  when  it  comes  to  mea- 
suring  ROI?  Those  three  magic  letters 
now  embody  the  myriad  ways  in  which  we  measure 
IT  eflFectiveness.  We  are  obsessed,  in  these  days  of 
budget  starvation,  with  proving  that  pricey  IT  proj¬ 
ects  will  put  meat  on  the  corporate  bones. 

This  has  not  only 
spawned  another  branch 
of  IT  consulting  special¬ 
ties.  complete  with  etab> 
orate  ROI  scorecards, 
calculators,  benchmarks 
and  overengineered 
methodologies.  It  has 
also  reawakened  interest 
in  applying  to  IT  proj¬ 
ects  a  wider  array  of 
standard  financial  mea¬ 
sures  such  as  net  present 
value,  internal  rate  of  re¬ 
turn  and  others. 

“A  lot  of  the  best  practices  in  man¬ 
aging  a  technology  function  can  be 
stolen  from  the  business  playbook." 
says  John  McKinley,  the  departing 
chief  technology  oflPtcer  at  Merrill 
Lynch  [QukkLink  360S51.  ‘Tlltimate- 
ty.  if  you  can’t  measure  it.  you  can’t 
improve  it** 

So,  what  are  the  many  ways  to 
count  the  ROI  of  your  IT  invest¬ 
ments?  We’ve  rounded  them  up  and 
spelled  them  out  in  this  week's 
Knowledge  Center  ("Do  the  Math!" 
starting  on  page  21).  This  in-depth 
guide  for  CIOs  and  IT  managers 
takes  a  blow-by-blow  look  at  the 
most  popular  metrics  to  consider  as 
you  hoist  your  projects  onto  the 
scales  of  business  judgment. 

We  also  conducted  a  survey  on 
this  topic  on  ComputerworULcom  last 
month,  and  the  majority  of  the  U3  re¬ 
spondents  conTiriDed  chat  they  are 
indeed  doing  ROI  analyses  regularly 
these  days.  Yet  skepticism  about 
these  metrics  sHU  runs  high.  "As  wc 
say  in  rT."  one  CIO  quipped.  "1  don’t 
believe  in  any  numbers  I  haven’t 
massaged  myself."  About  half  of  our 


respondents  said  they’re 
ambivalent  about  the  use¬ 
fulness  of  ROI  measures, 
with  the  majority  favor- 
the  simpler  but  more 
limited  "payback  period" 
metric  over  the  more 
complicated  financial 
formulas. 

As  I  read  the  stories 
(and  struggled  valiantly 
through  the  math).  I  de¬ 
tected  a  distinct  under¬ 
current  flowing  through 
the  tXKtst  successfril  applications  of 
ROI  metrics.  It  was  the  ROI  conver¬ 
sation.  The  most  important  change 
taking  place  isn’t  in  the  application 
of  anybody’s  mystical  mix  of  metrics. 
It’s  in  the  discussions  taking  place 
among  the  business,  flnancial  and  IT 
folks  as  their  companies  cobble  to¬ 
gether  the  best  approach. 

Those  conversations  also  revealed 


some  useful  lessons,  including: 

Don't  cant  on  any  ilnglBnMtric.  At  Gay¬ 
lord  Entertainment,  the  CIO  uses  the 
simpler  measure  of  payback  period 
for  projects  of  less  than  $100,000.  but 
he  turns  to  more  heavyweight  finan¬ 
cial  metrics  like  discounted  cash 
flow  for  the  bigger  deals. 

Conaorytyoirjnmrtlion.  Don’t 
squander  a  powerful  ROI  rundown 
on  every  project  in  si^t.  Save  it  for 
the  top  10%  to  20%  of  your  most  vi¬ 
tal  initiatives. 

Dadanto  ■■  cnzy.  Develop  your 
own  set  of  metrics,  and  pull  your 
vendor  and  consulting  partners  into 
the  game.  If  your  suppliers  can’t  con¬ 
tribute  any  hard  numbers  or  sensible 
metrics,  you  have  to  wonder.  "What 
good  are  they?" 

fawf  ikwplcfty.  If  it  takes  more  than 
a  few  weeks  to  evaluate  a  project, 
your  method  is  too  complex.  CIO 
Catherine  Kozik  at  Tellabs  factors  in 
two  years  of  fully  loaded  IT  costs 
and  a  few  other  key  measures  that 
map  to  the  company’s  strategic  goals. 
"If  you  focus  just  on  the  ROI  calcula¬ 
tion.  then  you’re  playing  liar’s  pok¬ 
er,"  Kozik  points  out  ’The  biggest 
liar  is  goir^  to  win,  and  that’s  ulti¬ 
mately  not  a  successful  business 
practice.” 

Amen  to  that 

Let  the  conversation  bepn.  I 
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PIMM  FOX 

Leaders 
Need  Vision 

WHEN  Hewlett- 

Packard  announces 
its  quarterly  earn¬ 
ings  later  this  month,  analysts 
and  ctistomers  will  be  looking 
for  further  evidence  that  the  Compaq 
merger  is  bringing  the  benefits  that 
Cariy  Fiorina  promised  when  she  ag¬ 
gressively  stumped  for  the  deal  in  the 
fall  of 2001.  So  far  the  results  look 
promising. 

HP  surprised  Wall  Street  in  the  pre¬ 
vious  quarter  by  reporting  a  profit  of 
12  cents  per  share  during  one  of  the 
most  difficult  tunes  in  history  for  IT 
vendors.  And  while  consulting  revenue 
is  off  and  customer-support  revenue  is 
flat,  there's  evidence  tl^t  HFs  man¬ 
aged  services  and  outsourcing  opera¬ 
tions  are  growing. 

So  where’s  the 
chorus  of  praise  for 
Fiorina? 

The  media  pillo¬ 
ried  her  —  though 
there  were  some  ex- 
ceptiODs  [Quiddink 
23260]  —  for  drag¬ 
ging  HP  toward  an 
unworkable  destiny 
within  a  decaying  in¬ 
dustry.  They  lam¬ 
basted  her  for  being 
blind  to  the  founding  vision  of  William 
Hewlett  and  David  Packard,  sacrificing 
jobs  and  the  company's  very  eidstence 
for  the  purportedly  ill-conceived  plan 
of  combining  with  Compaq. 

Instead,  her  strategy  is  winning  out 
In  his  recently  published  book.  Perfect 
Enough;  Cariy  Borina  and  the  Reinven- 
rion  qf  Hewlett-Packard,  George  An¬ 
ders  reveals  several  things  about  Fiori¬ 
na  and  her  drive  and  character  that 
should  serve  as  lessons  for  all  would- 
be  leaders. 

First,  you  must  have  a  vision  of  what 
you  want  to  accomplish.  That  sounds 
pedestrian,  but  Walter  Hewlett,  who 
opposed  the  merger,  misjudged  the 
strength  of  Fiorina’s  vision  and  lacked 
an  alternative  one  —  and  lost  his  bat¬ 
tle  with  her. 

Second,  you  must  have  the  commit¬ 
ment  to  see  your  vision  through.  Fiori¬ 
na  dearly  was  committed  to  the  merg¬ 
er.  At  one  point,  the  investor  voce  to 
approve  the  merger  bung  in  the  bal¬ 
ance.  It  would  have  been  easier  for  her 


Looking  Deeper, 
Reaching  Farther 

An  intelligent  network  infrastructure  featuring 
Cisco  routers  enhances  the  value  of  IT 
investments  across  the  extended  enterprise. 

Successful  companies  run  on  information.  It’s  that  simple,  and  this  reaiir>’ 
drives  unprecedented  demands— and  opportunities— for  the  people  at  the 
wheel  of  the  enterprise  network.  Consider  the  case  of  one  Global  100 
manutacrurer:  With  four  technical  assistance  centers,  a  dozen  regional 
offices,  and  more  than  300  independent  dealerships  across  the  US.,  it's  no 
simple  feat  to  keep  the  bits  flowing. 

Yet  flow  they  do.  and  nut  just  in  the  form  of  data.  By  deploying 
high-performance,  feature-rich  Cisco  routers  at  key  sites,  the  company  was 
able  to  extend  IP  telephony  services  securely  across  its  wide-area  network. 
As  a  result,  they  cut  the  cost  of  calls  to  the  technical  assistance  centers  by 
eliminating  the  need  for  separate  phone  services,  increased  employee  pro¬ 
ductivity  by  reducing  the  amount  of  time  spent  searching  for  information, 
and  improved  customer  service  by  ensuring  everyone  is  up-to-spced  on 
products  and  services. 

is  it  the  Network,  or  the  Application?  Yes.  Because  the  applications 
that  are  transforming  business  today  are  completely  reliant  on  the 
enterprise  network.  By  investing  in  an  intelligent  network  infrastructure, 
companies  create  a  highly  secure,  robust  foundation  for  any  number  of 
applications,  and  even  help  improve  performance  of  those  applications 
for  users  throughout  the  company.  And  that  allows  them  to  reap  a 
greater  return  on  countless  IT  investments— past,  present,  and  future. 


Tttese  days,  ifs  hard  to  distinguish  the  network  from 
the  company,  if  one  stops  working,  so  does  the  ottier. 
Thafs  why  networks  based  on  equipment  from  Cisco 
Systems  offer  unsurpassed  avaitabilitv,  and,  just  as 
importandy.  unsurpassed  resikence  in  the  face  of 
interruptions. 

To  maintain  productivitv— and  by  extension, 
profitability— networks  must  be  available  ail  die  time, 
providing  employees  with  global,  around-the-clock 
access  to  business  applications  and  information, 
while  ensuring  appropriate  internet  access. 

And  since  a  network  is  only  as  reliable  as  its 
weakest  link,  all  segments  must  be  resilient  enough 
to  immediately  bounce  back  from  unexpected 
connechon,  component  or  power  failures. 

To  some  extent  availabilitY  depends  on  the  overall 
design  of  the  network.  In  many  cases,  companies  vnll 
deploy  duel  routers  with  the  Hot  Standby  Routing 
Protocol  that  Osco  pioneered,  enabling  one  device  to 
seamlessly  take  over  if  the  other  one  fails. 

But  availability  also  hinges  on  the  design  of  the 
individual  routers  themselves.  That’s  why  Cisco  builds 
layers  of  redundancy  and  rasiliency  into  the  hard¬ 
ware.  from  backup  processors  and  power  supplies  to 
hot-swappable  line  cards. 

Such  safeguards  work  in  tandem  with  Cisco  lOS* 
Software  features,  including  several  recent  enhence- 
ments  collectivelv  known  as  GlobaHy  Resilient  IP,  or 
GRIP.  Cisco  Nonstop  Forwarding  with  Stateful 
Switchover,  for  example,  enables  a  router's  primary 
and  backup  processors  to  synchronin  state 
informaoon.  That  way,  if  a  hardware  or  software 
problem  knocks  out  the  primary  processor,  the 
backup  processor  will  pick  up  where  it  left  off, 
without  needing  o  reboot  the  lyitam  or  line  cards, 
and  without  losing  s  single  data  packet 
And  because  Cisco  lOS  Software  runs  from  the 
enterprise  backbone  to  the  outermost  reaches  of  the 
WAN,  these  capabiNbas  can  incraaaa  the  availability 
of  every  segment  of  your  network,  and  increase  the 
productivitv  of  every  branch  of  your  company. 
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SPECIAL  ADVERTISING  SECTION 


Advanced  Quality  of  Service 


Imagine  a  city  with  wide  roads  and  ptenry  of  lanes, 
but  no  traffic  lights.  Things  might  flow  smoothly 
enough  at  3  a  m.,  but  come  rush  hour,  the  resulting 
free-for-all  would  inevitably  leave  some  motorists 
stranded  in  gridlock. 


On  the  highways  and  byways  of  corporate  networks, 
Quality  of  service,  or  QoS,  brings  order  and  control 
to  the  bare  asphalt  of  bandwidth.  By  prioritizing  traf¬ 
fic,  QoS  ensures  your  most  important  applications 
and  users  get  the  bandwidth  they  need.  For  exam¬ 
ple,  even  slight  delays  in  IP  voice  traffic  will  impact 
sound  Quality.  But  if  an  e-mail  gets  held  up  for  a  few 
seconds,  no  one  will  know  the  difference.  So  instead 
of  just  lethng  these  applications  compete  for  band¬ 
width.  QoS  mechanisms  step  in  to  direct  traffic,  wav¬ 
ing  voice  and  video  packets  through  while  the  e-mail 
momentarily  warts  behind  metering  lights. 


By  establishing  priorities  and  policies  that  recognize 
such  distinctions,  companies  can  better  meet  the 
needs  of  all  users  and  applications.  The  alternabve 
is  to  blindly  throw  more  bandwidth  at  every 
performance  problem  that  comes  along,  an  unrealis¬ 
tic  expectation  in  these  tough  economic  times.  QoS 
tools  provided  by  Dsco  Systems  allow  our  customers 
to  meet  the  business  reguirementto  do  more  with  less. 


An  intelligent  infrastructure  based  on  Dsco  switches 
and  routers  provides  a  level  of  QoS  sophistication 
that  is  simply  unmatched  in  the  industry.  To  provide 
true  end-to-end  QoS.  Cisco  routers  classify  and 
mark  both  inbound  and  outbound  data  packets, 
inserting  tags  that  tell  other  network  devices  how 
traffic  should  be  handled.  As  packets  move  across 
the  network,  policing  and  shaping  mechanisms 
regulate  the  flow  of  traffic  to  ensure  policies  and 
prioribes  are  enforced. 


At  the  first  sign  of  bottlenecks,  congestion  avoidance 
features  take  active  steps  to  clear  the  way  for  the 
most  vital  data.  Weighted  Random  Early  Detection, 
for  example,  selectively  drops  packets  based  on  IP 
precedence  to  keep  high-priority  traffic  flowing. 
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At  the  same  time,  advanced  QoS  features  lend 
networks  greater  flexibility,  making  it  easy  to  adjust 
to  changing  requirements  and  priorities.  So  easy, 
in  fact  that  policies  can  shift  according  to  time  of 
day,  accommodating  different  business  needs  and 
patterns  of  network  usage. 


When  you  deploy  Cisco  high-performance  routers,  you  enable  the 
intelligent  movement  of  information  across  the  WAN,  seamlessly  and 
securely  linking  multiple  networks.  IP  communications,  optimized  content 
and  application  delivery,  and  embedded  security  features  ensure  you  can 
safely  deploy  Internet  business  solutions  such  as  e-leaming,  execurive  com¬ 
munications,  customer  relationship  management  applications,  and  more. 


These  solutions  can  be  extended  to  local,  remote,  or  even  mobile  workers, 
increasing  the  overall  value  of  technology.  You  can  create  tighter  feedback 
loops,  reduce  transaction  costs,  and  make  more  informed  decisions  on  a 
global  level,  making  your  company  more  productive  and  profitable. 


For  many  organizations,  the  return  on  investment  can  be  quite  rapid.  As 
Colonel  Bill  Hose  of  the  Minnesota  National  Guard  noted  after  deploying 
IP  telephony  over  a  Cisco  intelligent  infrastructure,  “We’re  planning  to 
expand  our  multimedia  collaboration  applications  like  videoconferencing,  and 
with  the  money  we  save  on  telecommunications  bills  and  network 
administration,  we  can  also  afford  to  put  more  money  into  bandwidth  for 
our  end  users." 


Understanding  and  Managing  the  Data  on  Your  Network.  Through 
the  combination  of  high-performance  routers  and  multilayer  LAN  switches, 
an  intelligent  infrastructure  is  able  to  utilize  not  only  the  Layer  2  header 
information  attached  to  every  data  packet,  but  also  Layer  3  IP  address 
information.  Layer  4  port  information,  even  Layer  5  through  7  content 
and  user  information. 


Cisco's  portfolio  of  routers -including  the  Cisco  7200,  7300, 
7400,  7500,  and  7600  series  routers  pictured  above  -  provides 
the  flexibility,  versatility,  scalability,  and  feature  richness  to 
enable  new  applications  and  services. 


SPECIAL  ADVERTISING  SECTION 


By  looking  deeper  into 
streams  of  data,  an  intelligent 
infrastructure  gains  a  more 
complete  understanding  of  all 
the  traffic  flowing  through 
and  between  networks.  It  can 
classify  and  mark  traffic 
based  on  users  and  applica¬ 
tions,  and  then  use  this  infor¬ 
mation  to  carry  out  whatever 
policies  and  guidelines  you  set. 

You  can  establish  priorities, 
control  and  conserve  band¬ 
width,  and  manage  access  to  optimize  employee  productivity  and  to  suit 
the  unique  needs  of  your  company.  You  can  adapt  to  changing  require¬ 
ments,  from  a  routine  shifting  of  priorities  based  on  time  of  day  to  the 
deployment  of  new  applications  across  the  LAN  and  WAN.  And  you  can 
extend  robust,  secure  network  services  to  partners,  suppliers,  customers, 
and  employees  any'where  in  the  world. 

Improving  Productivity— The  emergence  of  this  global,  scalable 
approach  to  networking  comes  at  an  opportune  time.  Over  the  past  sever¬ 
al  years,  network-enabled  applications  have  emerged  as  the  leading  driver 
of  corporate  productivity.  At  the  same  rime,  they’ve  reduced  the  cost  of 
doing  business.  In  a  study  sponsored  by  Cisco  Systems,  researchers  at  the 
University  of  California  at  Berkeley,  The  Brookings  Institution,  and 
Momentum  Research  Group  last  year  estimated  that  the  adoption  of 
Internet  business  solutions  had  yielded  cumulative  savings  of  Sl55  billion 
in  the  U.S.  alone.  They  projected  an  additional  $373  billion  in  future  cost 
savings,  most  of  it  to  be  realized  by  2005. 

Yet  many  organizations  lack  the  network  infrastructure  to  make  the  most 
of  their  existing  applications,  much  less  future  ones.  One  reason  is  that 
access  to  these  applications  frequently  does  not  extend  beyond  the  walls 
of  corporate  headquarters,  despite  the  fact  that  an  estimated  42  percent  of 
enterprise  employees  work  out  of  remote  locations. 

An  intelligent  network  infrastructure  provides  everyone  with  the  resources 
to  do  their  jobs  more  efficiently  and  effectively.  Applications  can  be 
securely  extended  out  from  headquarters  routers  to  any  location  with 
intelligent,  high-performance  WAN  aggregation  routers  which  connect  to 
access  routers  across  the  enterprise,  bnkmg  branch  offices,  mobile  work¬ 
ers,  partners,  suppliers,  and  customers  in  a  seamless  network. 


Cisco^  ponfoHo  of  routers-induding  th«  Cisco 
SOHO,  800.  2600XM,  1700.  and  3700  series 
routers  pictured  above-offers  companies  the 
ability  to  deploy  advanced  applications 
throughout  their  networks. 


Integrated  Security 


These  days.  H  takes  a  lot  more  than  a  firawail  to 
protect  corporate  networks 
After  ail.  access  is  rapidly  being  extended  beyond 
traditionel  corporate  boundaries  to  branch  offices, 
mobile  workers,  partners,  suppliers,  and  customers 
And  that's  a  good  dting,  since  it  allows  companies 
to  do  business  more  quickly  and  efficientiy  than 
ever.  But  it  also  opens  up  new  nsks.  both  internally 
and  externally. 

Cisco  integrated  security  solutions  provide  the 
industry's  most  comprehensive  and  scalable 
safeguards,  enabling  you  to  protect  productivity 
gains  and  reduce  network  operating  costs  from  the 
head  office  to  the  branch  office  and  beyond. 

It  starts  with  the  Cisco  SAFE  Blueprint  which 
simplifies  all  aspects  of  security  design  and  roUooL 
Wbether  you're  reinforcing  the  entire  network  at 
once  or  taking  incremental  steps,  SAFE  serves  as  a 
guide  to  best  practices  in  enterprise  networks, 
focusing  on  expected  threats  and  mafftods  of 
mitigation,  rather  than  specific  topologies.  It’s  a 
flexible,  dynamic  strategy  for  implementing  mulbple 
layers  of  defense,  so  the  failure  of  one  system  will 
not  be  likely  to  compromise  network  security  overall. 

By  the  same  token,  the  array  of  security  features 
integrated  into  Cisco  routers  gives  you  the  choice 
of  implemenbng  whatever  levels  of  protection 
measures  they  need,  wherever  they  need  them 
Integrated  AAA  services  (Authenbeabon. 
Authorizabon,  and  Accounbngl,  virtual  private  nat- 
work  services,  intrusion  detection  systems,  content 
filtering,  and  stateful  firewalls  are  an  available  to 
keep  data  safe  as  it  moves  through  and  between 
networks— without  impaebng  performance. 

In  a  study  released  last  year,  the  FBI  artd  ffte 
Computer  Security  InsotuK  surveyed  503  U.$.  com¬ 
puter  security  praebbonars  in  (ha  pubhc  and  private 
sectors,  and  found  that  90  percent  had  detected 
security  breaches  within  (ha  previous  12  months 
The  most  commonly  reported  problems  inciudad 
employee  abuses  of  network  resources,  system  pan- 
obabon  by  hackers,  and  danial-of-sarvica  attacks 
Any  of  these  issues  would  be  alarming,  but  together 
they  demonstrate  the  range  of  threats  companios 
face  today,  and  show  why  no  single  point  of  dafonsa 
»  enough. 

Integrated  sacurity  is  a  hallmark  of  aU  Cisco 
products,  from  the  switches  and  routars  that  form 
an  intalligam  network  infrastructure,  to  Cisco  PIX* 
Frawalls.  VPN  Concentrators,  Invusion  Oetacbon 
appliancas.  IP  phones,  and  wiralass  access  points. 
That  level  of  protection  should  be  reassuring  to 
amployeas.  partners,  and  customers  alika- 
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The  Answer  is  Cisco— As  the  worldwide  leader  in  networking  for  the 
internet,  Cisco  offers  the  industry's  largest  and  most  versatile  portfolio  of 
routers  to  suit  every  need,  from  the  home  office  to  the  branch  office  to 
the  enterprise  campus.  Modular  designs  allow  you  to  expand  network 
services  incrementally  as  new  needs  and  opportunities  arise. 

Integrated  features  such  as  virtual  private  network  services,  firewalls, 
intrusion  detection  systems,  content  delivery,  survivable  remote  site 
telephony,  inline  powet,  and  low-density  switching  allow  you  to  confident¬ 
ly  deploy  the  most  demanding  solutions,  including  converged  data,  voice, 
and  video  applications. 

Cisco  routers  also  offer  a  unique  level  of  investment  protection.  Cisco 
Systems  devotes  approximately  1 8  percent  of  sales  to  R&D,  giving  our 
engineers  unmatched  resources  to  build  upon  established  products  and 
technologies.  Take  Cisco  lOS'  Software,  for  example,  the  operating  sys¬ 
tem  that  unifies  all  Cisco  routers  and  switches  and  provides  most  of  the 
intelligence  in  the  network.  At  this  very  moment,  1,200  people  are  work¬ 
ing  to  enhance  and  expand  the  capabilities  that  have  made  it  a  pillar  of 
networks  the  world  over. 

By  designing  products  with  the  future  in  mind,  Cisco  offers  the  best  value 
over  the  long  term.  New  features  and  functionality  can  be  incorporated 
as  needs  change  and  technologies  evolve,  which  lowers  the  total  cost  of 
ownership  by  saving  you  the  expense  of  replacing  something  that  won't 
be  supported  a  year  or  two  down  the  road. 

And  at  Cisco,  support  means  much  more  than  simply  providing  hardware 
and  software.  As  Fortune  magazine  recently  observed,  "Whenever  there  is 
a  problem  big  or  small,  the  folks  running  the  networks  in  corporations 
know  they  can  call  Cisco." 

That  peace  of  mind  might  not  be  your  only  motive  for  building  an  intelli¬ 
gent  infrastructure  with  Cisco  routers  and  switches,  but  it’s  a  surefire  sign 
of  an  intelligent  investment. 
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Superior  Manageability 


While  en  intelligent  infrastructure  offers  powerful 
benefits,  managing  something  so  sophisticated 
can  sound  overwhelming,  parricularty  to  a  harried 
IT  department  But  with  the  right  tools,  you  can 
actually  simplify  most  administrative  tasks  even  as 
you  gain  greater  control  over  network  resources. 
Cisco  Systems  provides  those  tools,  ensuring  you 
can  capture  all  the  benefits  of  en  intelligent  net¬ 
work  infrastructure,  without  having  to  be  an  expert 
on  every  feature  and  capability. 

One  reason  is  that  Cisco  IDS*  Software  unifies  ell 
Cisco  switches,  routers,  and  other  devices,  creat¬ 
ing  a  network  that  is  inherentty  more  manageable 
and  providing  a  rich  source  of  data  to  help  you 
optimize  network  operations. 

Drawing  on  that  rich  IDS  data  and  unmatched 
industry  expertise,  Cisco  has  built  best  practices 
into  the  CiscoWorks  family  of  Web-based  network 
management  tools,  helping  you  to  streamline 
management  tasks  and  secure  your  network  from 
end  to  end 

CiscoWorks  templates  and  wizards  simplify  and 
automate  complex  configurations  to  help  you 
implement  security  policies,  use  QoS  to  prioritize 
traffic  for  IP  telephony  or  other  time-sensitive 
applications,  and  manage  a  range  of  other  opera¬ 
tions.  These  tools  also  help  prevent  human 
errors— mistakes  that  can  open  holes  in  security 
or  even  bring  down  the  network,  cutting  into  your 
company's  profits. 

If  a  problem  does  occur,  you  won't  be  caught  off 
guard.  A  properly  managed  intelligent  infrastructure 
continually  monitors  for  faults,  and  can  even  spot 
deteriorating  conditions  before  they  get  out  of 
hand,  providing  a  safety  net  for  your  business. 
CiscoWorks  management  applications  give  you  the 
visibility  to  monitor  the  impact  of  the  netwoik  policies 
and  priorities  you  establish,  and  the  flexibility  to 
fine-tune  things  as  you  go  along,  and  add  new 
technology  es  your  needs  change  and  the  network 
grows.  As  a  result,  you  can  get  more  out  of  your 
business  applications  today,  and  also  do  a  better 
job  of  planning  for  the  future. 

If  that  sounds  (ike  good  news  just  for  the  IT 
department  consider  this:  It's  been  estimated  that 
for  every  dollar  a  company  spends  on  new  tech¬ 
nology,  it  can  spend  another  four  trying  to  make  it 
work.  So  it  stands  to  reason  that  the  better  you're 
managing  your  network,  the  better  you're  manag¬ 
ing  your  business. 
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4  if  she  had  presented  an  alternative  for 
J  HP  if  the  deal  was  voted  down.  Ac- 
^  cording  to  Anders,  she  never  did  be- 
L  cause  “she  wanted  to  protect  constant 
certainty  that  the  HP-Compaq  merger 
'  was  the  right  choice  for  the  company 
and  that  was  confident  roost 
shareholders  would  agree  in  due 
Hroe.”  Any  inkling  ihe  wasn't  con¬ 
vinced  would  have  hurt  her  cause. 

The  same  is  true  of  any  leader  who 
"tries  to  engage  and  motivate  people  to 
fallow  a  difHcult  or  unpopular  route. 
It's  wiser  to  show  courage  and  deter¬ 
mination  to  achieve  a  ^>eci/ic  goal 
than  to  set  out  distracting  alternatives 
or  a  Plan  B. 

Of  course,  vision  has  to  be  thought 
out  and  responsive  to  market  changes, 
but  wavering  in  front  of  the  very 
people  who  locA  to  you  for  leadership 
—  no  matter  how  touchy-feely  the 
mana^raent  books  tell  you  to  be  — 
doesn’t  inspire  respect.  And  it  certain¬ 
ly  won't  help  your  results,  k 

DAVID  MOSCHELLA 

War  Results 
Are  Key  to 
ITs  Future 

■♦ts  wintertime,  and 
[1  the  only  thing  growing  is 
^  the  number  of  IT  spend- 
feg  forecasts.  Goldman  Sachs 
and  Meta  Group  say  our  in- 

dustry  is  shrinking;  IDC  Gartner  and 
Forrester  expect  modest  growth.  Of 
course,  no  one  really  knows. 

Most  of  these  proiections  are  based 
on  surveys  of  people  tike  you.  And 
since  you  don't  know  bow  much  you 
will  actually  spend  this  year,  how  can 
they?  At  be^  spending  forecasts  re¬ 
flect  the  range  of  current  business  sen¬ 
timents.  But  these  sentiments  can 
change  quickly,  depending  on  bow  the 
year  develops.  And  during  2003,  there 
will  be  only  one  factor  that  ultimately 
matters:  war. 

Even  today,  many  free-maiket  pro- 
p<»encs  are  reluctant  to  acknowledge 
the  fact  that  it  took  World  War  n  to  fi¬ 
nally  end  the  Great  Depression  and 
create  the  long  U.S.  boom  of  the  1950s 
and  '60$.  Conversely,  anyone  over  40 
surely  remembers  bow  America's  dis¬ 
astrous  experience  in  Vietnam  con¬ 
tributed  to  the  pessimism,  anxiety  and 
stagflation  of  t^  late  1970s.  Experts 
predicted  that  the  best  days  of  the  U.S. 
bad  passed  and  that  Japan  and  Ger¬ 


many  would  become  the 
worid’s  new  economic  lead¬ 
ers.  Ronald  Reagan  became 
president  by  explicitly  re¬ 
jecting  this  message. 

Given  this  history,  it  has 
always  surprised  me  how 
few  connections  have  been 
drawn  between  the  last 
Gulf  War.  wdiich  ended  in 
February  1991,  and  the  long 
U.S.  ecoDorok  boom  that 
began  in  1S>92.  America's 
surprisingly  easy  victory 
was  particularly  important 
to  the  FT  industry,  since  it 
demonstrated  to  the  entire 
world  the  power  of  ad¬ 
vanced  technology.  Lotriung  back,  h 
was  the  economic  decline  of  Japan,  the 
renewed  confidence  in  modern,  most¬ 
ly  U5.  technology,  and  the  emergence 
of  the  Internet  between  1993  and  1995 
(hat  sent  the  U5.  economy  and  the  IT 
sector  Into  overdrive. 

Today,  another  war  is  increasingly 
likely  and  will  also  prove  pivotal  Even 


more  than  the  dot-com 
bust  and  sickening  cor¬ 
porate  scandals,  it's  the 
threat  of  terrorism,  the 
risks  of  war  and  the  grow¬ 
ing  anti-Americanism  in 
many  corners  of  the  world 
that  are  weighing  down  the 
IT  marketplace.  Thus,  until 
we  know  whether  interna¬ 
tional  events  are  about  to 
get  better  or  worse,  we 
can’t  possibly  know  which 
way  our  industry  is  bead¬ 
ed.  And  although  the  im¬ 
pact  of  these  events  upon 
IT  spending  is  among  the 
least  of  our  concerns,  that 
doesn't  mean  their  effects  are  any 
less  real 

Clearly,  many  of  us  have  different 
views  about  Iraq  and  the  wider  war  on 
terrorism.  But  there's  little  doubt  that 
unless  nujor  new  terrorist  attacks  are 
avoided  and  the  Iraq  (and  possibly 
North  Korean)  situation  is  resolved  in 
a  way  that  satisfies  both  the  U.S.  and 
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most  of  the  rest  of  the  world,  a  strong 
2003^  rr  market  recovery  wont 
happen.  And  should  any  of  these  situa¬ 
tions  turn  out  badly,  th^  impact  upon 
our  industry  will  likely  be  severe. 
American-led  interventions  in  Kuwait. 
Bosnia,  Kosovo  and  A^unistan  have 
gone  much  belter  than  most  people 
expected:  we  can  only  hope  this  wdll 
continue. 

The  IT  industry  today  doesn't  need 
Tablet  PCs,  Linux.  Web  services  or 
wireless  LANs.  It  needs  confldetice  in 
the  future.  This  is  essential  for  the 
risk-taldng  and  kmg-term  investment 
that  a  healthy  IT  business  requires. 
Unfortunately,  such  confidence  is  ail 
but  impossible  in  the  current  environ- 
mem  ^  fear  and  looming  hostilities.  A 
real  recovery  wOl  have  to  wait  for 
more  peaceful  times.  Let's  hope  they 
return  again  soon.  I 
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Contracts  Depend  on 

M  ANY  OF  US  have  seen  a  relr 
knshiiHhrwIerang  esue 
ansa  8$  a  nsuR  oi  contract  inter 
pratalion.  deepile  beet  Inten¬ 
tions  on  both  sidas  PROI  w  ^ 


WhatSNverLjning? 

WOio.rrsoiiEArtM  there's 
a  sivar  Irrino  to  outsourdno. 

I  thought  wa  had  to  be  worried  thri 
AmaricaRS  wDuUnt  be  able  to  do 
progiarnnangandenginaannganY- 
roore.lnslaadlfindouifromMary' 
(ran  Johnson’s  ediortal 'Your  Out¬ 
sourced  Future’  (OackLink 36001] 
that  fonner  (T  wodere  wi  al  get  to 
be  eecuthas  and  project  man¬ 
agers.  When  do  wa  st^  After  al. 
there  must  be  tots  of  axecutM  jobs 
avaltaUe  at  the  great  American 
companies  that  have  shown  they 
are  eeoir  to  hire  Americans. 

Unde  Emm 
Matthew^  MC 

iWQUUMrr  DfTItUST  a  remote 
third  party  wtfi  bade  secrets  and 
dterd  racords.  toGfaad,  we  shouid 
oulsowoethehii^-lemldael- 
rnatong  end  schrnoodng.  wNch  are 
mow  generic  and  raplaceabie. 
Chrti  Ctaaieal 

Pabn  Harbor,  Fla. 


Relationships 

Mniey  Back.' QuicMJnk  35962]. 

ROI  is  besed  on  mpul  from  bo^ 
pemes  and  on  projacttons  about  the 
tubre.  ROf-besad  peyment  con¬ 
tracts  are  compiBx  and  can  require 
a  labyrmlh  of  tonns  and  condtoons 
toprolectbolhsidesframsubiec- 
Ihe  intorpretabons  and  changes  m 
ite  businass  environment  that  n- 
mlidate  the  ROI  assumptions 

A  good  gtkMne  IS  to  embed  as 
few  mriables  as  possifa  and  lie 
pertormance-based  peyment  to 


veritable  cneMs  thri  undarle  toe 
MX.  Alhough  tying  payment  to  ROI 
IS  desirafaie.  fs  tar  from  a  panacea. 
Uknalety.  a  pertormanct-beed 
conbactdependionaquaByrati- 
bonehip  and  toe  tolegniy  of  boto 
sides.  H  those  are  present,  then  toe 
ffleasurarrwnt  process  w#  midate 
tom  wtatonship.  but  fi  many  cases 
Itwlmeretylestthenitoliorigtap- 
«Wto  toe  consequent  togaf  fees. 
OeeifBBlMGfc 
Senior  orcfurect,  x40 
Associotes  Inc.  New  Vork. 
gsblanck^ifiycjTCom 


Abuse  of  H-1B  Visa  System  Is  Rampant 

I 


HBKCT  TlOE  ARE  several 
reasons  why  fT  and  engmeerwg 
professfonats  obiect  to  toe  H- V 
progiam.asim(ilMnenled[Qui(i(- 
Unk  36047].  The  program  was  06- 
tensbfy  designed  to  meet  tocbnicai 
service  needs  and  ii  shortages. 
What  acholy  happens  IS  toaf  H-% 
wDitare  wito  toe  same  stdb  as 
many  out-of-work  US.  workers  are 
broughlinfertoepiapoaeofbid- 
dtog  down  conbacbng  rates  and 
satanes  and  making  quick  pn)fk& 
to  toe  U.S.  peoita  from  toe  same 
counkies  as  toe  H*6  workere  abuee 
and  cheat  toenv  paying  tham  tar  less 
than  ha<  of  toe  tfoesbitogwd  hold- 
mg  toam  hostage  by  hfang  aNfa 


toakpasBportt  and  wean  bchets. 
EvenwhantoayMoutwtwIsbr 
ingdonetotham.toaeMl-educai- 
edcompetentandhonestprofes- 
sionafs  often  ieefpoweriB  as  and 
conlinua  toaccept  toase  conttaons 
as  preienble  to  daportatfon. 

MaybeR'simforalpitiiession- 
af  and  tactwicat  service  tans  tow- 
g^je  in  Ml  (tacksetfe  and  an¬ 
nounce  bimg  itoes  and  conedh 
tant/conbactof  compensation  to 
ctanbandworkKs.Theffloreelfa- 
cal  tans  rirendy  do  the!  and  in  so 
dorng  earn  toe  laspact  and  toyefty 
of  toea  ctianis  and  consutants. 
CMeeROiftaJF. 
ITcoiviiltoiC  IccfBmwKMt  NJ- 


Apps  Not  at  Fault 

IbmvatPftAPWtafiavwto 
toe  premse  of  toe  Jaa  27  akcie 
‘Asset  Manapamen!  f^otoOB 
fafatoShorTIOuddMi 35667]. 
that  packaged  asset  nanegamenl 
softvare  IS  lonwhow  to  blame  tor 
taiing  asset  rnanagementpro- 
grene.  Much  of  tot  adwce  wes 
sound  -  prooeas  is  wportanl  as 
are  frecNjenl  audb  -  but  you  ddnl 
fajmMe  toe  real  causes  of  faled 
projects;  bying  to  do  too  muck  iWto 
toe  wrong  toofs.  and  not  btomg  a 
dSfaenfa.  phased  approach, 
tad  JsilniialiM 
Prcstdenc.  TbOy  Sysftms 
COrp.  Lebanon.  RH. 

Editar‘i  nelK  Ttawtar’seon- 
parry  «  w  ossW  marugament  sori- 
ware  vendor. 

C0imTEI(W0IB.B  wMoomss 
commanb  bom  to  readers.  LallBis 
wi  be  edtod  tar  farerihr  and  dartfy. 
They  should  be  addreeeed  to  UQn 
Cornputorworid.  PO  Boi  9171 500 
OldConnecbcul  Mv  Fiarnnitoam. 
Iitess.  017DI  Fax  (506)  879^843 
E-rriiR  fanereScarriMlenMridcom. 
Inchrie  an  eddraae  «id  (toons  narr- 
ber  for  fenmediale  vericaion 
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-  if  she  had  presented  an  alternative  for  | 
^  HP  if  the  deal  was  voted  down.  Ac¬ 
cording  to  Anders,  she  never  did  be¬ 
cause  “she  wanted  to  project  constant 
certainty  that  the  HP-Compaq  merger 
was  the  right  choice  for  the  company 
and  that  she  was  confident  most 
shareholders  would  agree  in  due 
time."  Any  inkling  she  wasn't  con¬ 
vinced  would  have  hurt  her  cause. 

The  same  is  true  of  any  leader  who 
tries  to  engage  and  motivate  people  to 
follow  a  difTicult  or  unpopular  route. 

It’s  wiser  to  show  courage  and  deter¬ 
mination  to  achieve  a  specific  goal 
than  to  set  out  distracting  alternatives 
or  a  Plan  B. 

Of  course,  vision  has  to  be  thought 
out  and  responsive  to  maiicet  changes, 
but  wavering  in  front  of  the  very 
people  who  look  to  you  for  leadership 
~  no  matter  how  louchy-fccly  the 
management  books  tell  you  to  be  — 
doesn't  inspire  respect.  And  it  certain¬ 
ly  won't  help  your  results.  I 

DAVID  MOSCHELLA 

War  Results 
Are  Key  to 
'  ITs  Future 

•■T'S  WINTERTIME,  and 
the  only  thing  growing  is 
.  the  number  of  IT  spend¬ 
ing  forecasts.  Goldman  Sachs 
and  Meta  Group  say  our  in¬ 
dustry  is  shrinking;  IDC,  Gartner  and 
Forrester  expect  modest  growth.  Of 
course,  no  one  really  knows. 

Most  of  these  projections  are  based 
on  surveys  of  people  like  you.  And 
since  you  don't  know  how  much  you 
will  actually  spend  this  year,  how  can 
they?  At  best,  spending  forecasts  re¬ 
flect  the  range  of  current  business  sen¬ 
timents.  But  these  sentiments  can 
change  quickly,  depending  on  how  the 
year  develops.  And  during  2003,  there 
will  be  only  one  factor  that  ultimately 
matters:  war. 

Even  today,  many  frec-market  pro¬ 
ponents  are  reluctant  to  acknowledge 
the  fact  that  it  took  World  War  I!  to  fi¬ 
nally  end  the  Great  Depression  and 
create  the  long  US.  boom  of  the  1950s 
and  ’60s.  Conversely,  anyone  over  40 
surely  remembers  how  America’s  dis¬ 
astrous  experience  in  Vietnam  con¬ 
tributed  to  the  pessimism,  anxiety  and 
stagflation  of  the  late  1970s.  Experts 
predicted  that  the  best  days  of  the  US. 
had  passed  and  that  lapan  and  Ger- 
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many  would  become  the 
world's  new  economic  lead¬ 
ers.  Ronald  Reagan  became 
president  by  explicitly  re¬ 
jecting  this  message. 

Given  this  history-,  it  has 
always  surprised  me  how 
few  connections  have  been 
drawn  between  the  last 
Gulf  War.  which  ended  in 
February  1991.  and  the  long 
U.S.  economic  boom  that 
began  in  1992.  America's 
surprisingly  easy  victory 
was  particularly  important 
to  the  IT  industry,  since  it 
demonstrated  to  the  entire 
world  the  power  of  ad¬ 
vanced  technology.  Looking  back,  it 
was  the  economic  decline  of  Japan,  the 
renewed  confidence  in  modem,  most¬ 
ly  U.S.  technology,  and  the  emergence 
of  the  Internet  between  1993  and  1995 
that  sent  the  US.  economy  and  the  IT 
sector  into  overdrive. 

Today,  another  war  is  increasingly 
likely  and  will  also  prove  pivotal  Even 


mure  than  the  dot-com 
bust  and  sickening  cor¬ 
porate  scandals,  it’s  the 
threat  of  terrorism,  the 
risks  of  war  and  the  grow¬ 
ing  anti-Americanism  in 
many  comers  of  the  world 
that  arc  weighing  down  the 
IT  marketplace.  Thus,  until 
we  know  whether  interna¬ 
tional  events  are  about  to 
get  bener  or  worse,  we 
can't  possibly  know  which 
way  our  industry  is  head¬ 
ed.  And  although  the  im¬ 
pact  of  these  events  upon 
FT  spending  is  among  the 
least  of  our  concerns,  that 
doesn’t  mean  their  cfTccis  are  any 
less  real. 

Clearly,  man)'  of  us  have  different 
views  about  Iraq  and  the  wider  war  on 
terrorism.  But  there's  little  doubt  that 
unless  major  new  terrorist  attacks  arc 
avoided  and  the  Iraq  (and  possibly 
North  Korean)  situation  is  resolved  in 
a  way  that  satisfies  both  the  U.5.  and 
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most  of  the  rest  of  the  world,  a  strong 
2003-04  IT  maricet  recovery  won’t 
happen.  And  should  an>'  of  these  situa¬ 
tions  turn  out  badly,  ibeir  impaa  upon 
our  industry  will  likely  be  severe. 
American-led  imerventioos  in  Kuwait. 
Bosnia,  Kosovo  and  Afghanistan  have 
gone  much  better  than  most  people 
expected;  wc  can  only  hope  this  will 
continue. 

The  IT  industry  today  doesn’t  need 
Tablet  PCs.  Linux.  Web  services  or 
iivirelcss  LANs.  It  needs  confidence  in 
the  future.  This  is  essential  for  the 
risk-taking  and  long-term  investment 
that  a  healthy  IT  business  requires. 
Unfortunately,  such  confidence  is  all 
but  impossible  in  the  current  environ¬ 
ment  of  fear  and  looming  bostUlties.  A 
real  recovery  will  have  to  wait  for 
more  peaceful  times.  Let's  hope  they 
return  again  soon.  I 
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Contracts  Depend  on  Relationships 

Many  OF  US  have  seen  a  reb' 
honslap-fhrealening  issue 
anse  as  a  result  of  contract  inter- 
prelatnn.  despite  the  best  inten¬ 
tions  on  both  sides  fROI  or  \bui 


What  saver  Lining? 

Wow.  rrs  ORCAT  that  there's 
a  bnino  to  outsourcing 
I  thought  we  had  to  be  worried  that 
Americans  wouldn't  be  able  to  do 
programming  and  engmeermg  any¬ 
more  instead  I  lind  out  from  Mary- 
Iran  Johnson's  editorial  ‘Your  Out¬ 
sourced  Future*  (QuckLink 36001} 
that  former  rr  workers  will  al  get  to 
be  executives  and  project  man¬ 
agers.  Wien  do  we  start?  After  al. 
there  must  be  lots  of  executive  |0bs 
available  al  Ste  great  Amencan 
companies  that  have  shown  they 
are  eager  to  hire  Amehcans. 

Linda  Evans 
Mo/thews.  N.C. 

IWOULOtrr  entrust  a  remote 
third  party  With  tr»le  secrets  and 
client  records.  Instead,  we  should 
outsource  the  higher-level  deal- 
maiung  and  schmoozing.  vMch  are 
more  generic  and  replaceable. 
Chris  Clarrwnt 
Palm  Harbor,  Fla. 


Money  Back.*  QuickLmk  359B2}. 

ROI  IS  based  on  input  from  both 
parties  and  on  protections  about  the 
future.  ROt-based  payment  con¬ 
tracts  are  complex  and  can  require 
a  iabynnth  of  terms  and  conditions 
to  protect  both  sides  horn  subiec- 
tive  mterprelations  and  changes  in 
the  business  environment  that  m- 
vaMaie  the  ROI  assumptions 

A  good  guefebne  is  to  embed  as 
few  variables  as  possible  and  tie 
performance-based  payment  to 


verdiable  metres  that  underte  the 
ROI  Although  tying  payment  to  ROI 
isdesrable.  «'s  far  tram  a  panacea. 
Uitimalelv.  a  performancHiased 
contraetdeperKteonaquabtyreta- 
bonship  and  the  miegnly  of  both 
sides  fi  those  are  presenl  then  the 
measurement  process  w4  lohiaie 
that  relatttRship.  but  m  many  cases 
It  wi  merety  test  the  retabonslvp  * 
with  the  consequent  legai  fees. 
OaorgeBIanck 
Senior  architect.  x40 
Associates  Inc^  New  Ybrk. 
gsbianckd^nycJTXom 


Abuse  of  H-1B  Visa  System  Is  Rampant 

I 


SUSPECT  THBIE  ARE  several 
reasons  why  IT  and  engmeenng 
prolessMXvds  obiect  to  the  H-S 
program,  as  inviemeniedlOuKk- 
Unk 36047].  The  program  mos  os¬ 
tensibly  designed  to  nwet  technic^ 
service  needs  and  fl  shortages 
What  actually  happens  B  that  H-1B 
workers  the  same  skis  as 

many  out-of-work  U.S.  workers  are 
brought  in  for  the  purpose  of  bid¬ 
ding  down  contracting  rates  and 
s^anes  and  m^ung  quick  profits 
In  the  US.,  people  bom  (he  same 
countries  as  the  H-C  worters  abuse 
and  cheat  them,  payng  them  tar  less 
than  hail  of  die  gross  bilnq  and  hold- 
rig  them  hostage  by  tNvig  away 


their  passports  and  return  tickets. 
Even  when  they  fmd  out  what's  ba¬ 
ng  done  to  them,  these  wel-educat ' 
ed.  conveteni  and  honest  proles- 
aonals  often  Mel  pmvertess  and 
corkinue  to  accept  these  condibons 
as  preferable  to  deporiatnn 
Maybeil'stnietaralprDlession- 
al  and  techmcai  service  ferns  to  en¬ 
gage  in  full  disclosure  and  an¬ 
nounce  biRino  rales  and  conaA- 
tontAtontractor  cornperisation  to 
clients  and  workers.  The  more  ethi¬ 
cal  ferns  already  do  thal  and  in  so 
doing  earn  the  respect  »id  btelty 
of  th^  clients  and  consultants. 
(%ariec  H.  Coftts  «lr. 
rr  cnnsulronr.  Lerfgrwood.  N./. 


Apps  Not  at  Fault 

IWASVENTOiSAPPOMTEOWIIh 
thepremseollheJan  278rbcle 
'Asset  Management  hoyects 
Falng  Short'  [QuKMjnk 35667}. 
that  packaged  asset  management 
software  B  somehow  to  blame  far 
laikna  asset  management  pro¬ 
grams.  Mich  of  the  acMoe  was 
sound  -  process  6  importani  as 
M  (requeffl  audits  -  but  you  MnY 
jhanmate  the  reel  causes  of  faAed 
projects  trying  to  do  too  nwdi  with 
the  wrong  tools,  and  not  taking  a 
deSieratt.  phased  approach 
Ted  JastrzambaM 
President.  Tally  Sysrenu 
Corp..  leborton,  NJi- 
Edi^’anole;  /hewntor’seom- 
pany  IS  tn  asset  managsment  soft- 
Mrs  vendor. 

COMPUTERWORLO  welcomes 
comments  from  Is  readers.  Letters 
wi  be  edAed  far  brewty  and  clanty. 
They  iiouid  be  addres^  to  Lett^ 
Cornputerworfd,  PO  Box  9171  S()0 
Old  ConneclioA  Framngham. 
Mass  01701.  Fax:  (506)  B79-4843 
E-mai:  lettersicampaterworld  com. 
Include  an  address  and  phone  nun- 
bw  fat  nitTttdiate  MTihcatior 
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EDITOR'S  NOTE 


I’VE  HEARD  THE  ARGUMENT  that  failing  tO 
do  return-on-investment  calculations  is 
business  malpractice.  And  Fve  beard  the 
argument  that  they’re  a  waste  of  time.  The 
truth  is  more  complicated,  of  course. 

As  a  general  rulk  major  IT  investments 
should  go  throu^  the  ROI  wringer  just 
like  any  other  business  investment  —  even 
more  so,  because  IT  investments  have  a 
tarnished  history.  One  side  benefit  to  ROI 
scrutiny  is  that  it  can  kill  off  pet  projects 
that  need  to  be  stopped,  like  the  customer 
relationship  management  initiative 
launched  b^ause  the  martteting  vice  pres¬ 
ident  is  a  golf  buddy  of  a  guy  at  SiebeL 
Doing  the  math  is  especially  important 
for  projects  that  have  millionAloUar  price 
tags.  On  the  other  hand,  it  may  be  overkill 
for  projects  so  small  that  the  ROI  exercise 
would  be  more  expensive  than  the  project 
itself.  Even  ROI  osculations  need  an  ROL 
And  sometimes,  an  IT  project  would  de¬ 
liver  such  a  mind-blowing  competitive  ad¬ 
vantage  that  crunching  the  numbers  seems 
unnecessary.  There's  a  chance  that  we’re 
killing  off  revolutionary  IT  ideas  with  to¬ 
day's  relentless  focus  on  the  12-month 
payback. 

Tm  inclined  to  agree  with  John  Jordan,  a 
big  thinker  at  Cap  Gemini  Ernst  &  Young, 
who  predicts  that  there  will  be  a  middle 
ground  between  uliat  he  calls  the  “just  do 
it”  and  the  “by  the  book”  ends  of  tlS  spec¬ 
trum.  This  middle  ground  will  still  re¬ 
quire  sound  business  cases,”  he  says,  “but 
dieyll  incorporate  a  mix  of  common  sense, 
professional  judgment,  quantitative  model¬ 
ing  and  strategic  perspective.”  I 


Mitch  Betts  Cmitch_betts@corr^uterwori(l 
com)  is  director  o/Computerworid’s 
^lowledge  Centers. 
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The  Next  Chapter 

It  may  be  time  to  dig  out  your  old  finance 
textbooks,  says  one  pundit.  Others  predict  that 
Wall  Street  analysts  will  start  monitoring 
corporate  IT  investments  and  that  CIOs  will 
find  their  compensation  linked  to  delivering 
ROLPaM43 


Where  ROI  Models  Fail 

ROI  models  such  as  net  present  value  are 
effective  in  helping  CIOs  cost-justify  IT 
investments  to  top  brass,  but  they  come  up 
short  in  measuring  “soft”  benefits  such  as 
the  impact  on  sales,  customer  service  or 
enmloyee  productivity.  PaQt  38 


Do  the  Math! 

A  CIO’s  guide  to  the 
strengths  and  weaknesses 
of  ROI  calculations. 


1 

FAST 

TEAMS  AND  THE  STORY  OF  BORLAND 

For  more  than  20  years.  Borland  has  been  accelerating 
application  development.  One  developer  at  a  time.  Today, 
we're  accelerating  the  entire  development  and  deployment 
team  -  architects,  programmers,  testers,  implementeis.  and 
managers.  Speed  and  agility  come  from  oiir  best-iH'Class 
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products  seamlessly  integrated  in  tlie  Borland  Suite  erasing 
technology  hoiindaiies  that  prevent  people  from  working 
together.  No  platform  lock  in.  No  arhitiary  process.  Built  for 
tomorrow's  technology  infiastriictiiie.  Today's  Borland.  Inst  like 
yesterday's.  Only  faster,  yet.  Accelerate  your  team  today. 


• 

Excellence  Endures 
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Diligence 
Rewarded 


CIOs  who  do 
the  ROI  math 
have  some  tips 
for  making  the 
task  easier  and 
more  beneficial. 
By  Johanna 
Ambnosio 


Their  methods  may  vary, 
but  IT  executives  who  cal¬ 
culate  return  on  investment 
before  launching  major 
technology  projects  say  they 
reap  benefits  that  make  do¬ 
ing  the  math  worthwhile. 

The  most  obvious  payoff  is  getting 
resources  to  do  the  job,  but  the  ROI 
process  also  forces  IT  to  explain  to 
corporate  management  what’s  going 
on.  This  can  provide  buy-in  for  a  par¬ 
ticular  project.  It  also  enforces  two- 
way  communication  between  the  CIO 
and  other  company  executives  about 
IT’s  overall  role  in  the  company. 

Here’s  what  four  IT  executives  say 
about  the  benefits  and  lessons  learned 
from  their  ROI  calculations. 

Factor  in  Business  Goals 

Just  about  all  the  IT  executives  inter¬ 
viewed  for  this  article  agreed  that  us- 
11^  a  single  ROI  model  isn’t  enough  to 
justify  an  expensive  technology  buy. 

“Anybody  can  play  with  the  numbers 
and  make  an  investment  look  attrac¬ 
tive,”  says  Steve  Brown,  CIO  at  Carlson 
Companies  Inc.  The  Minneapolis- 
based  travel  conglomerate  and  parent 
of  Radisson  Hotels,  among  other 
brands,  recently  enacted  a  more  strin¬ 
gent  set  of  guidelines  for  IT  projects. 

To  get  approval.  IT  projects  have  to  add 
to  top-line  revenue  growth  or  profit,  re¬ 
duce  costs,  create  or  strengthen  the  ex¬ 
isting  brand  image  or  mitigate  a  risk. 

The  guidelines  help  the  company  steer 
clear  of  bad  investments  and  maTimiyp 
the  investments  it  does  make. 

“Each  measurement  is  something 
important  to  a  specific  business  unit  or 
to  the  company  to  help  us  grow,"  says 
Brown.  “As  conditions  change,  we 
measure  the  effect  of  the  changes  in 
each  business  unit’s  quarterly  results. 

So  if  something  changes  in  the  busi¬ 
ness,  we  can  tie  it  back  to  our  strategy 
—  it’s  not  a  lagging  indicator.” 
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Look  Beyond  Financials 

But  where  Carlson  turned  to  a  stricter 
approach  to  ROI.  Catherine  Kozik.  CIO 
at  bandwidth  services  provider  Tellabs 
Inc.  in  Naperville,  IlL.  went  the  other 
direction.  “We  do  simple  math."  she 
explains.  “We  look  at  the  fully  loaded 
costs  for  the  first  two  years  —  imple* 
mentation  costs,  people  and  acquiring 
skills.  But  there's  a  limitation  to  the  ac¬ 
curacy  of  the  data  in  many  ROI  mod¬ 
els.  so  what’s  the  point?  If  you’re  mak¬ 
ing  up  numbers  to  begin  with,  it’s  not 
really  going  to  help  you"  decide 
whether  an  IT  project  makes  sense. 

So  instead  of  a  financial-only  ROI 
process,  Kozik's  group  looks  at  many 
factors  as  pan  of  its  overall  evaluation 
of  any  new  technology.  First  is  how 
mature  the  technolog>'  is  and  whether 
it  represents  a  continuation  of  the 
company’s  existing  skill  set  or  a  totally 
new  direction. 

Kozik's  group  also  looks  at  the  mar¬ 
ket  position  of  the  vendor  —  not  its 
financial  strength  —  she  says,  because 
in  a  down  market,  many  technology 
providers  are  struggling.  Instead,  she 
figures,  if  the  product  or  service  has 
the  lion’s  share  of  its  maritet,  it  will 
continue  to  be  offered,  even  if  the  ven¬ 
dor  is  ultimately  acquired  by  another. 

The  last  step  is  viewing  the  project  ir 
the  context  of  the  firm’s  overall  strate¬ 
gy.  ■'Not  the  written  strategy  or  whatev¬ 
er  people  are  paying  lip  service  to,  but 
the  things  that  arc  really  important  to 
the  executive  team,"  Kozik  says.  “I  con¬ 
sider  it  my  No.  I  job  to  keep  in  touch 
with  what's  going  on  at  that  level." 

After  all  these  factors  are  gathered 
and  given  a  numerical  weight  —  costs, 
skill  sets,  market  position  of  the  ven¬ 
dor  and  how  the  project  fits  with 
Tellabs’  overall  strateg)’  —  the  IT  team 
assigns  the  pending  project  an  assess¬ 
ment  number.  The  lower  the  number, 
the  more  risky  the  project  and  the 
more  iffy  its  likelihood  of  success. 

All  told,  the  entire  ROI  process  takes 
only  about  two  weeks  at  most.  “We 
don’t  want  to  overengineer  the  proc¬ 
ess,  because  then  people  would  W'alk 
away.”  Kozik  explains. 

Save  ROI  for  Big  Proiects 

La-Z-Boy  Inc„  a  furniture  maker  in 
Monroe.  Mich.,  takes  a  different  ap¬ 
proach.  There.  ROI  analyses  are  done 
only  for  "major"  IT  projects  —  those 
over  a  certain  dollar  amount  that  Gary 
Clark,  director  of  corporate  IT  ser¬ 
vices.  declines  to  specily.  He  says  that 
perhaps  10%  to  20%  of  all  IT  projects 
are  put  under  a  sharp  financial  micro¬ 
scope.  but  those  projects  represent  a 
majority  of  the  IT  budget 


It’s  helpful  to  rememtief  ROI  k 
done  in  the  tifsl  place,  lo  gel  ihe  dotets 
needed  for  IT.  certainly,  but  mote  im¬ 
portant.  for  IT  to  help  the  business 
achieve  its  objectives. 

The  jury  has  been  out  for  years  about 
IPs  role  in  enabling  productiviry.  A  No¬ 
vember  2002  report  by  McKinsey  &  Co 
says  ITs  impact  over  the  past  decade 
has  been  "diverse  and  complex,  de¬ 
pending  on  when,  where  and  how  it  has 
been  deployed.* 

Indeed,  the  report  singles  out  only 
three  sectors  where  fT  has  had  a  quan- 
Iffiatte  impact  on  productivity;  semicon- 


Tough  Task 

duclors.  retail  and  hrtancial  services 
Just  as  there  is  no  silver  bullel  in 
terms  ol  ITs  financial  impact,  there  is 
no  single  answer  regarding  how  to 
measure  technotogy-relaied  ROI  and 
what  to  include  in  that  assessment 
Expectations  for  ITs  ROI  can  and  have 
changed,  based  on  the  economic  cir¬ 
cumstances  and  corporate  oAture 
Enk  Brynjoltsson.  a  management 
prolessor  at  MIT s  Sloan  School  of 
Management  who  specializes  Hi  IT  ef¬ 
fectiveness.  says  that  ‘unfortunately, 
many  worthy  protects  are  not  getting 
funding*  nght  now.  ‘After  being  burned 


by  vague  promises  in  the  past  CFOs 
have  become  h»ghly  sKepheaT  ot  the 
promises  of  ITs  soft  benefits  ano  are 
inststing  on  hard,  tangible  returns  for 
each  investment,  he  notes 
'While  a  brt  of  this  IS  healthy  ‘  Bryn- 
loltsson  says.  *my  research  shows  that 
up  to  90%  of  the  costs  and  benefits  of 
IT  investments  are  m  intangibles  Firms 
that  ignore  this  tact  nsk  sacrificing  their 
long-term  growth  to  make  their  shori- 
ferm  numbers.  Sinking  the  nght  bal¬ 
ance  requires  a  fair  assessment  of  both 
tangibles  and  mtangtiles  * 

-  Johanna  AmOrosio 


Clark  echoed  a  sentiment  heard 
from  other  CIOs:  Because  of  the  time 
and  resources  required  to  do  any  type 
of  major  finaiKial  analysis  of  new  tech¬ 
nology.  many  shops  reserve  a  truly 
in-depth  ROI  process  for  their  biggest- 
ticket  or  highest-impact  strategic  ini¬ 
tiatives.  Adding  more  PCs  or  storage  to 
existing  systems  is  hardly  wonh  the  ef¬ 
fort  in  most  cases;  chose  kinds  of  ex¬ 
penditures  typically  come  out  of  the 
operations  budget. 

La-Z-Boy  looks  at  any-  projects  that 
are  subject  to  ROI  anal^is  for  bow 


no  S  AND  OON  TS 


much  the  initiatives  will  cost  in  terms 
of  ongoing  maintenance  fees,  as  well  as 
for  net  present  value.  The  net  present 
value  method  essentially  figures  out 
how  much  the  project’s  future  net  cash 
flow  will  be  worth  in  today’s  dollars. 
That  amount  is  then  compared  with 
the  amount  of  money  needed  to  imple¬ 
ment  the  projea. 

Even  for  technology  projects,  calcu¬ 
lating  ROI  isn’t  necessarily  an  IT-only 
endeavor.  Business  users  and/or  finan¬ 
cial  people  may  gather  the  data  and 
work  on  some  of  the  analyses  for  the 
largest  projects.  As  Clark  says.  “It's  not 
our  expertise  to  understarvd  what  a 
CRM  package  is  going  to  bring  to  the 
company*:  the  business  unit  is  the  one 
that  knows.  So  they're  doing  the  ROi 
on  that  the  data.” 

Work  WHh  the  Fnance  Folks 

At  General  Motors  Corp..  IT  staffers 
work  closely  with  the  financial  organi¬ 
zation  to  do  ROI  analyses,  says  Tony 
Scott,  chief  technology  officer  at  the 
automotive  giant.  “TTie  financial  orga¬ 
nization  has  a  forma]  ROI  calculator  — 
what  we’re  replacing,  current  costs, 
future  costs,  transition  costs  and  other 
metrics."  be  says. 

Where  this  model  isn't  as  helpful  is 
when  technology  is  being  used  to  do 
something  completely  new.  "If  we  have 
a  new  business  venture,  there's  nothing 
to  compare  it  against"  ~  no  historical 
trends  or  costs.  Scott  says.  This  is  where 
it’s  crucial  to  align  organizational  objec¬ 
tives.  he  explains.  It  becomes  a  lot  easi¬ 
er  to  justify  something  when  you  can 
show  that  it  will  grow  customer  reten¬ 
tion  by  15%.  because  that  benefit  is  al¬ 
ready  well  tracked  and  well  understood. 

One  key  ROI  metric  is  time  spent  or 
saved,  and  GM  has  used  technology  to 


help  reduce  the  time  it  takes  to  devel¬ 
op  a  new-  car  from  4g  months  to  18. 

Both  complicating  and  helping  mat¬ 
ters  is  CM'S  organizational  chart. 
Within  IT.  there  are  CIOs  responsible 
for  overall  IT  profit  and  loss  (P&L) 
w'ithin  a  given  geographic  region.  Then 
there  are  PIOs.  or  process  information 
officers,  who  are  responsible  for  spe¬ 
cific  horizontal  applications  across  all 
geographic  regions  —  manufacturing 
or  finance,  for  instance. 

“There’s  a  natural  tension  between 
PIOs.  who  want  to  drive  new  applica¬ 
tions.  and  CIOs,  who  want  to  optimize 
PdcL  for  their  region."  Scott  says. 

“There  are  interesting  discussions 
about  what’s  the  right  thing  to  do  at 
any  intersection  of  that  matrix."  One 
result,  though,  is  that  "it's  hard  to  pull 
the  wool  over  anyone's  eyes  —  you 
have  to  make  a  business  case  in  each 
geographic  region"  for  any  major  new 
technology  initiative,  he  soys. 

As  Tellabs'  Kozik  explains,  “If  you 
focus  just  on  the  ROI  calculation,  then 
you’re  playing  liar’s  poker.  The  biggest 
liar  is  going  to  win.  and  that's  ultimare- 
ly  not  a  successful  busirvess  practice. 

So  we  have  to  get  hock  to  what  we’re 
trying  to  achieve;  value  to  our  custo¬ 
mers  and  shareholders.  Our  justifica- 
tioo  process  makes  sure  we’re  working 
on  the  right  things  for  the  business."  I 


Ambrosia  is  afrfetance  writer  in 
Mariboro,  Mass.  Contact  her  at 
iambrosio(^eartMink.ne(. 
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Look  Beyond  Rnanciais 

But  where  Carlson  turned  to  a  stricter 
approach  to  ROI.  Catherine  Kozik.  CIO 
at  bandwidth  services  provider  Tellabs 
Inc.  in  Naper\’iUe.  Ill.,  went  the  other 
direction.  “We  do  simple  math.”  she 
explains.  *‘We  look  at  the  fully  loaded 
costs  for  the  first  two  years  —  imple¬ 
mentation  costs,  people  and  acquiring 
skills.  But  there’s  a  limitation  to  the  ac¬ 
curacy  of  the  data  in  many  ROI  mod¬ 
els,  so  what’s  the  point?  If  you’re  mak¬ 
ing  up  numbers  to  begin  with,  it's  not 
really  going  to  help  you”  decide 
whether  an  IT  project  makes  sense. 

So  instead  of  a  financial*only  ROI 
process.  Kozik’s  group  looks  at  many 
factors  as  part  of  its  overall  evaluation 
of  any  new  technology.  First  is  how 
mature  the  technology’  is  and  whether 
it  represents  a  continuation  of  the 
company's  existing  skill  set  or  a  totally 
new  direction. 

Kozik’s  group  also  looks  at  the  mar¬ 
ket  position  of  the  vendor  —  not  its 
financial  strength  —  she  says,  because 
in  a  down  market,  many  technology 
providers  are  struggling.  Instead,  she 
figures,  if  the  product  or  service  has 
the  lion's  share  of  its  market,  it  will 
continue  to  be  offered,  even  if  the  ven¬ 
dor  is  ultimately  acquired  by  another. 

The  last  step  is  viewing  the  project  in 
the  context  of  the  firm's  overall  strate¬ 
gy.  "Not  the  written  strategy  or  whatev¬ 
er  people  are  paying  lip  service  to.  but 
the  things  that  are  really  important  to 
the  executive  team."  Kozik  says.  “I  con¬ 
sider  it  my  No.  I  job  to  keep  in  touch 
with  what's  going  on  at  that  level." 

After  all  these  factors  are  gathered 
and  given  a  numerical  weight  —  costs, 
skill  sets,  marker  position  of  the  ven¬ 
dor  and  how  the  pnijcct  fils  w-ith 
Tellabs’  overall  strategy  —  the  IT  team 
assigns  the  pending  project  an  assess¬ 
ment  number.  The  lower  the  number, 
the  more  risky  the  project  and  the 
more  ifiy  its  likelihood  of  success. 

All  told,  the  entire  ROI  process  takes 
only  about  two  weeks  at  most.  “We 
don't  want  to  ovcrcngincer  the  proc¬ 
ess.  because  then  people  would  walk 
away."  Kozik  explains. 

Save  ROI  for  Big  Proiects 

La-Z-Eloy  Inc.,  a  furniture  maker  in 
Monroe.  Mkh..  takes  a  dilTerent  ap¬ 
proach.  There.  ROI  analyses  are  done 
only  for  “major"  IT  projects  — •  those 
over  a  certain  dollar  amount  that  Gary 
Clark,  director  of  corporate  IT  ser¬ 
vices.  declines  to  specify.  He  says  that 
perhaps  10%  to  20%  of  ^  FT  projects 
are  put  under  a  sharp  financial  micro¬ 
scope.  but  those  projects  represent  a 
majority  of  the  FT  budget. 


Il’s  helpful  to  remember  why  ROI  is 
done  in  (he  first  place:  to  get  the  dollars 
needed  lor  IT.  certainly,  but  more  im¬ 
portant,  lor  IT  to  help  the  business 
achieve  Its  obiectives 

The  jury  has  been  out  for  years  about 
Ifs  role  in  enabling  productivity.  ANo- 
vember  2002  report  by  McKinsey  S  Co 
says  IT s  impact  over  the  past  decade 
has  been  'diverse  and  complex,  de- 
pending  on  when,  where  and  how  il  has 
been  deployed.* 

Indeed,  the  report  singles  out  only 
three  sectors  where  IT  has  had  a  quan¬ 
tifiable  impact  on  productivity:  sermcon- 


TougliTask 

ductors.  retail  and  financial  services 
Just  as  there  is  no  silver  bullet  m 
terms  of  IT s  financial  impact,  there  is 
no  single  answer  regarding  how  to 
measure  technology-related  ROl  and 
what  to  include  in  that  assessment. 
Expectations  for  IT s  ROI  can  and  have 
changed,  based  on  the  economic  cir¬ 
cumstances  and  corporate  culture 
Enk  Bryntolfsson.  a  management 
prolessor  at  MIT s  Sloan  School  of 
Management  who  specializes  in  (T  ef¬ 
fectiveness.  says  that  'untorlunately. 
many  worthy  protects  are  not  getting 
funding*  right  now,  'After  being  burned 


by  vague  promises  in  the  past.  CFOs 
have  become  highly  skeptical'  of  the 
promises  ol  ITs  soft  ber>elits  and  are 
tnsisling  on  hard,  tangible  leiurts  for 
each  investtT»ent,  he  notes 
'While  a  bn  ol  this  is  healthy.'  Bryn- 
lolfsson  says.  *my  research  shows  ttrat 
up  to  90%  of  the  costs  and  benefits  of 
IT  investments  are  in  mtangioles  Firms 
that  ignore  this  tact  nsk  saenhong  ihe>< 
long-term  growth  to  make  their  short¬ 
term  numbers  Stnfung  the  right  bal¬ 
ance  requires  a  fair  asisessment  of  both 
tangibles  and  miang^les  * 

-  JoharmAmOfOiK 


Clark  echoed  a  sentiment  heard 
from  other  CIOs:  Because  of  the  time 
and  resources  required  to  do  any  type 
of  major  financial  analysis  of  new  tech¬ 
nology.  many  shops  reserve  a  truly 
in-depth  ROI  process  for  their  biggest- 
ticket  orhighcst-impact  strategic  ini¬ 
tiatives.  Adding  more  RCs  or  storage  to 
existing  systems  is  hardly  worth  the  ef¬ 
fort  in  most  cases:  those  kinds  of  ex¬ 
penditures  typically  come  out  of  the 
operations  budget. 

La-Z-Boy  looks  at  any  projects  that 
arc  subject  to  ROI  analysis  for  how 
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much  the  initiatives  will  cost  in  terms 
of  ongoing  maintenance  fees,  as  well  as 
for  net  present  value.  The  net  present 
value  method  essentially  figures  out 
how  much  the  project’s  future  net  cash 
flow  will  be  worth  in  today’s  dolbrs. 
That  amount  is  then  compared  with 
the  amount  of  money  needed  to  imple¬ 
ment  the  project. 

Even  for  technology  projects,  calcu¬ 
lating  ROI  isn't  necessarily  an  IT-only 
endeavor.  Business  users  and.'or  finan¬ 
cial  people  may  gather  the  data  and 
work  on  some  of  the  analyses  for  the 
largest  projects.  As  Clark  says.  "Ifs  not 
our  expertise  to  understand  what  a 
CRM  package  is  going  to  bring  to  the 
company:  the  business  unit  is  the  one 
that  knows.  So  they're  doing  the  ROI 
on  that  the  data.” 

Woric  With  the  Finance  Folks 

At  General  Motors  Corp^  IT  staffers 
work  closely  with  the  financial  organi¬ 
zation  to  do  ROI  analyses,  says  Tony 
Scott,  chief  technology-  officer  at  (he 
automotive  giant.  "The  financial  orga¬ 
nization  has  a  formal  ROI  calculator  — 
what  we’re  replacing,  current  costs, 
future  costs,  transition  co.sts  and  other 
metrics,"  he  says. 

Where  this  model  isn't  as  helpful  is 
when  technology  is  being  used  to  do 
something  completely  new.  “If  we  have 
a  new  business  venture,  there’s  nothing 
to  compare  it  against"  —  no  historical 
trends  Of  costs.  Scoti  says.  This  is  whea- 
it's  crucial  to  align  organizational  objec¬ 
tives.  he  explains.  It  becomes  a  lot  easi¬ 
er  to  justify  something  when  you  can 
show  that  it  will  grow  customer  reten¬ 
tion  by  15%.  because  that  benefit  is  al¬ 
ready  well  tracked  and  well  understood. 

One  key  ROI  metric  is  time  spent  or 
saved,  and  GM  has  used  technology  to 


help  reduce  the  time  it  lakes  to  devel¬ 
op  a  new  car  from  48  months  to  18. 

Both  complicating  and  helping  mat¬ 
ters  Is  GM's  oiganizatjonal  chan. 
Within  IT.  there  are  CIOs  responsible 
for  overall  IT  profit  and  loss  tPi^Li 
within  a  given  geographic  region.  Then 
there  are  I’lOs.  or  process  information 
officers,  who  are  responsible  for  spe¬ 
cific  horizontal  applications  across  all 
geographic  regions  —  manufacturing 
or  finance,  for  instance. 

“There’s  a  natural  tension  between 
PiOs.  who  want  to  drive  new  applica¬ 
tions,  and  CIOs,  w  ho  want  to  optimize 
P&L  for  their  region."  Scott  says. 
"Thcrc  arc  interesting  discussions 
about  what’s  the  right  thing  to  do  at 
any  intersection  of  that  matrix  ”  One 
result,  (hough,  is  that  "it’s  hard  to  pull 
the  w«x>l  over  anyone's  eyes  —  you 
have  to  make  a  business  case  in  each 
geographic  region”  for  any  major  new- 
technology  initiative,  be  says. 

As  Tellabs'  Kozik  explains.  “If  you 
focus  just  on  the  ROI  calculation,  then 
you're  playing  liar's  poker.  The  biggest 
liar  is  going  lo  win.  and  that's  ultimaic- 
iy  not  a  successful  business  practice 
So  we  have  to  get  back  to  what  we're 
trying  to  achieve:  value  to  our  custo¬ 
mers  and  shareholders.  Our  justifica¬ 
tion  process  makes  sure  we're  working 
on  the  right  thing.s  for  the  business.”  I 


Ambrosia  is  a  /reelarice  writer  in 
Marlboro.  Mass.  Coniact  her  al 
}ambmsi(n:peanhlink.net. 
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The  Magic  Genie  Lamp 

_ _ was  celebrated  in  server 

rooms.  With  one  rub,  the 
owner  s  manual  read,  the  genie  would 
grant  added  capacity.  With  another,  he  would 
reduce  the  added  capacity.  With  a  third  wish, 
servers  would  instantly  be  self-healing.  AH  in  the 
blink  of  an  eye.  It  was  a  lifesaver.  A  cost  saver.  IT  directors 
were  giddy.  They  could  handle  spikes.  Their  servers  would  never 
crash.  They’d  run  at  peak  performance.  It  was  beyond  belief.  Way  beyond 
belief:  the  Magic  Genie  Lamp  was  still  in  beta  testing  and  never  actually  worked. 

AND  THAT’S  WHEN  THEY  CALLED  IBM. 
Introducing  the  next  generation  of  the  IBM  (gserver  iSeries"  with  select  models 
featuring  on/off  capacity  on  demand.  Need  more  capacity?  Turn  it  on.  The  processors 
are  already  installed.  Spike  over?  Ratchet  back  down.  On  demand.  You  pay  for  the 
processors  you  activate.  All  in  an  environment  that  supports 
Linuxf  Windows”  and  OS/400?  Besides  self-managing  capabilities, 
the  iSeries  can  be  preloaded  and  integrated  with  IBM  WebSphere® 
software.  For  your  copy  of  “Why  i:  The  Next  Generation  of  iSeries 
Systems  in  the  On  Demand  Era,”  visit  ibin.coin/eserver/genie 
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'Riree  wishes. 

At  your  command. 

On/off  capacity. 

On  demand. 

Operates  with 
and  hand  rubbing. 

Opiates  with  ^^ndows, 

Linux  and  OS/400. 

Brass-b^ed. 

Copper^based. 

Mysterious  and  powerhiL 

Simile  and  powerful. 

Imaginary  capatnlhies. 

Self-manning  capabilities. 

Not  availaUe. 

AvailaUe  throu^  IBM  and 

IBM  Business  Butners. 

business  cmi  demand 
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Payback  Period 


It’s  quick,  easy,  popular  —  and 
incomplete.  By  Gary  H.  Anthes 


DEFMnKM:  An  Inwtmwt'e  pnybncfc  period  in  yenrs  is  equal  to  the  not  invest- 
went  OTWwtdMttod  by  the  avenpe  twi— I  cash  flow  from  the  eiwbliiieiit. 

¥AMT  IT  MEANS:  How  long  wM  tt  take  to  pat  my  money  bacfc? 

STNEmiMS:  M’s  easy  to  Gonputo,  easy  to  undentand  and  prerides  some  indh 
cation  M  risk  by  separettog  top-lenw  projects  from  ehort-tonn  projects. 

V  d^Virniim 

veto  of  reowey  and  Ignores  Bnancialperfannance  after  toe  break  even  parted. 


PAYBACK  PERIOD  is  the  most 
widely  used  measure  for 
evaJuatii^  potential  invest¬ 
ments.  Its  use  increases  in 
tough  economic  times, 
when  CIOs  are  apt  to  say 
things  like.  “We  won’t  even  consider 
a  project  that  has  more  than  a  24- 
month  payback.” 

For  those  IT  managers,  projected 
cost  savings  or  revenue  enhancements 
resulting  the  project  would  have 
to  equal  or  exceed  the  upfront  invest¬ 
ment  within  two  years  for  the  project 
to  win  approval. 

“We  start  with  payback  period,”  says 
Ron  Fijalkowski,  CIO  at  Strategic  Dis¬ 
tribution  Inc.  in  Bensalem.  Pa.  “Fot 
sure,  if  the  payback  period  is  over  36 
months,  it’s  not  going  to  get  approved. 
But  our  rule  of  thumb  is  we'd  like  to 
see  24  months.  And  if  it's  close  to  12. 
it's  probably  a  no-brainer.” 

I^back  period  has  the  virtue  of 
being  easy  to  compute  and  easy  to 
understand.  But  that  very  simplicity 
carries  weaknesses  with  h.  Payback 
period  says  nothing  about  how  the 
investment  performs  after  the  break¬ 
even  period. 

Consider  the  two  examples  of  SI  n^- 
lion  projects  shown  in  the  chart  at  ri^t 
A  bank  can  spend  $1  million  on  server 
consolidations  and  save  one-third  that 
amount  in  each  of  the  following  three 
years  on  reduced  license  fees,  telecom¬ 
munications  costs  and  systems  admin- 
iscratioQ  labor.  Or  it  could  ^nd  the 
same  amount  to  install  ATMs,  elimi¬ 
nate  four  teller  positions  and  save 
S2SO.OOO  per  year  indefinitely. 


Which  is  a  better  investment?  Pay¬ 
back  analysis  cleariy  frvors  the  server 
consolidation,  which  recoups  its  in¬ 
vestment  a  year  earlier  than  the  ATM 
project.  But  the  ATM  project  goes  on 
to  produce  returns  after  three  years 
and  is  therefore  a  better  long-term 
investment.  In  fret,  the  server  project 
isn't  even  profitable. 

“Payback  gives  you  an  answer 
that  tells  you  a  bit  about  the  be¬ 
ginning  stage  of  a  project,  but  h 
doesn't  tell  you  much  about  the 
full  lifetime  of  the  project,"  says 
Chris  Gardner,  a  co-founder  of  iValue 
LLC.  an  IT  valuation  consultancy  in 
Barrington,  Ill. 

But  payback  period’s  emphasis  on 
the  short  term  has  a  special  appeal 
for  IT  managers.  “That’s  because  the 
history  of  IT  projects  that  take  longer 
than  three  years  is  disastrous,”  says 
Gardner. 

Indeed.  Ian  Campbell  chief  research 
officer  at  Nucleus  Research  Inc.  in 
Wellesley.  Mass.,  says  payback  period 
is  an  absolutely  essential  metric  for 
evaluating  IT  projects  —  even  more 


important  than  discounted  cash  flow  — 
because  it  spotlights  the  risks  inherent 
in  lengthy  IT  prefects.  “It  should  be  a 
hard  and  fast  rule  to  never  take  an  IT 
project  with  a  payback  period  greater 
than  three  years,  unless  it’s  an  infra¬ 
structure  project  you  can't  do  without.” 
Campbell  says. 

Of  course  it's  possible  to  consider 
payback  period  in  concert  with  ocher, 
more  sophisticated  measures.  Payback 
period  may  be  a  good  way  to  quickly 
size  up  a  portfolio  of  projects  and  win¬ 
now  it  down  to  a  few  that  merit  more 
careful  scrutiny  with,  for  example,  dis¬ 
counted  cash  flow. 

The  simplicity  of  computing  pay¬ 
back  may  encourage  sloppiness, 
e^iecially  the  failure  to  include 
all  costs  associated  vrith  an  in¬ 
vestment,  such  as  training,  main¬ 
tenance  and  hardware  upgrade 
costs,  says  Douglas  Emond,  senior  vice 
president  and  chief  technology  officer 
at  Eastern  Bank  in  Lynn,  Mass.  For  ex¬ 
ample.  be  says,  “you  may  be  bringing 
in  a  hot  new  tectoolc^.  but  uh-oh. 
after  implementation  you  realize  you 
need  a  .Net  guru  in-house,  and  you 
don’t  have  one.”  I 
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Net  Present  Value 


Measure  the  hiture  in  toda\^s 
ternis.  Cian'  H.  Antlies 


DEFINtnON:  The  net  present  value  (NPV)  of  an  investment  is  the  present  (dis* 
cowited)  value  of  future  cash  inflows  minus  the  present  value  of  the  investment 
and  any  associated  future  cash  outflows. 

WHAT  IT  MEANS:  H’s  the  net  result  of  a  muHtyear  investment  expressed  in 
today's  doBars. 

STRENGTHS;  By  considering  the  time  value  of  money,  it  allows  consideration  of 
such  things  as  cost  of  capftaL  interest  rates  and  investment  opportunity  costs. 
It's  especially  appropriate  for  long-term  profects. 

WEAKNESSES:  Ranking  investments  by  NPV  doesn't  compare  Mtsokrte  levels 
of  investment.  NPV  looks  at  cash  flows,  not  at  profits  and  losses  the  way  account¬ 
ing  systefTB  do.  NPV  is  highly  sertsitive  to  the  ifiscount  percentage,  and  that  can 
be  trkky  to  determine. 


UNLIKE  the  more  widely 

used  payback  period,  NPV 
accounts  for  the  time  x-alue 
of  money  by  expressing 
future  cash  flows  in  terms 
of  their  value  today.  It  rec¬ 
ognizes  that  mone>’  has  a  cost  (inter¬ 
est).  so  that  you  would  prefer  to  have 
Sl.OO  today  to  having  $1.00  a  year  from 
now.  If  you  earn  10%  interest  on  your 


money.  Sl.OO  today  will  be  worth 
Sl.lO  a  year  from  now.  Or.  turning  that 
around,  the  “present"  value  of  Sl.lO 
one  year  out  is  Sl.OO. 

You  probably  wouldn't  want  to  make 
an  investment  that's  estimated  to  pro¬ 
duce  a  negative  NPV.  The  bigger  the 
NPV  —  other  things  being  equal  —  the 
more  attractive  the  investment  is. 

Computing  NPV  requires  use  of  a 
discount  rate  equal  to  some  min¬ 
imum  desired  rate  of  return.  TTiLs 
could  be  your  compan>'’s  average 
weighted  cost  of  capital  (debt 
and  equity)  as  computed  by  your 
finance  depanment.  If  capital  costs 
your  company  10%,  you  aren't  likely  to 
invest  that  capital  for  an  8%  return.  Un¬ 
fortunately.  computing  the  cost  of  capi¬ 
tal  can  be  difficult  and  controversial. 

The  discount  rate  (say.  10%)  deter¬ 
mines  the  discount  factor  for  each  year 
(say,  .909)  that  is  applied  to  that  year's 
cash  flow  to  convert  it  to  today's  dol¬ 
lars.  The  discount  factor  for  year  n  can 
be  computed  as:  discount  factor  - 
l/(l*i>".  where  i  is  the  target  rate  of  re- 
tura  So  at  a  discount  rate  of  10%  in 
Year  1.  discount  factor  =  l/(I.l),  or  .909. 
Thus,  in  the  earlier  example,  the  pre¬ 
sent  value  of  Sl.lO  a  year  from  now  is 
Sl.lO  X  .909.  or  S1.00. 


NET  PRESOfT  VALUE: 

What  It  Looks  Like 
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Fortunately,  this  math  is  automated 
in  spreadsheet  packages.  You  enter 
only  the  undiscounted  cash  flows,  the 
years  in  which  the  flows  are  expected 
and  some  target  interest  rate.  NPV 
will  pop  out. 

The  chart  below  compares  two  proj¬ 
ects  that  a  bank  could  undertake.  Each 
has  an  initial  investment  of  $1  million 
and  a  minimum  desired  rate  of  return 
of  10%.  On  the  basis  of  absolute  (undis¬ 
counted)  return,  the  ATh!  installation 
is  better  because  it  generates  $250,000 
more  cash  over  the  life  of  the  invest¬ 
ment.  But  when  the  time  value  of  mon¬ 
ey  is  considered,  the  server  consolida¬ 
tion  project  looks  slightly  better,  with 
an  NPV  higher  by  $9,000.  Its  pre¬ 
sent  value  is  higher  because  the 
returns  occur  earlier  in  the  proj¬ 
ect's  life. 

Gaylord  Entertairuneni  Co., 
a  Nashville-based  hotel  and  resort 
company,  relies  on  relatively  simple 
measures  such  as  payback  period  to 
evaluate  investments  of  less  than 
$100,000.  Between  $100,000  and 
$500,000,  it  also  looks  at  discounted 
cash  flow  (DCF).  “And  above  $500,000. 
DCF  is  absolutely  necessary."  says 
CIO  Kent  Fourman. 

The  yearly  cash  flows  from  a  hotel 
or  entertainment  project  are  net  rev¬ 
enues.  but  for  an  IT  project,  the)'  gen¬ 
erally  are  cost  savings,  Fourman  says. 
But  he  says  NPV  isn't  appropriate  for 
an  IT  project  that  can't  be  associated 
with  clearly  defined  cash  flows. 

“We  are  doing  Windows  95  to  Win¬ 
dows  2000  and  XP  conversions,  for 
example,  and  you're  not  going  to  come 
up  with  a  traditional  DCF  on  that  kind 
of  project."  Fourman  says.  “There  are 
benefits  that  are  not  necessarily  finan¬ 
cial  in  nature." 

NPV  has  some  flaws,  says  Ian  Camp¬ 
bell.  chief  research  ofTicer  at  Nucleus 
Research  Inc.  in  Wellesley.  Mass.  He 
offers  an  example  in  which  two  invest¬ 
ments  each  have  an  NPV  of  $100.  but 
one  involves  an  initial  investment  of 
$1,000  and  the  other  an  investment  of 
$1  million.  Clearly  the  $1,000  invest¬ 
ment  is  preferable  because  it’s  less 
risky  and  ties  up  less  capital,  he  says. 

But.  Campbell  adds.  NPV  is  a  good 
“no-go  indicator."  because  you'd  nor¬ 
mally  reject  an  investment  with  a  nega¬ 
tive  NPV  without  further  considera¬ 
tion.  Those  with  a  positive  NPV 
should  then  be  measured  by  other 
yardsticks,  he  says.  I 
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Net  Present  Value 


Measure  the  future  in  today’s 
terms.  By  Gary  H.  Anthes 
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UNLIKE  the  more  widely 

used  payback  period,  NFV 
accounts  for  the  time  value 
of  money  by  e;q>ressiog 
future  cash  flo>^  in  terms 
of  their  value  today.  It  rec¬ 
ognizes  that  money  has  a  cost  (inter¬ 
est).  so  that  you  would  prefer  to  have 
$1.00  today  to  having  SLOO  a  year  from 
now.  If  you  earn  10%  interest  on  your 


money.  SLOO  today  will  be  worth 
$1.10  a  year  from  now.  Or.  turning  that 
around,  the  ‘‘present”  value  of  SLIO 
one  year  out  is  $1.00. 

You  probably  wouldn't  want  to  make 
an  investment  that’s  estimated  to  pro¬ 
duce  a  negative  NPV.  The  bigger  ^ 
NPV  —  other  things  being  equal  —  the 
more  attractive  the  investment  is. 

ConqHiting  NPV  requires  use  of  a 
discount  rate  equal  to  some  min- 
imum  desired  rate  of  return.  This 
could  be  your  company’s  awrage 
weighted  cost  (rf capital  (debt 
and  equity)  as  computed  by  your 
finance  department  If  capit^  costs 
your  ctunpany  10%,  you  aren't  likely  to 
invest  that  capital  for  an  8%  return.  Un¬ 
fortunately.  computing  the  cost  of  capi¬ 
tal  can  be  difficult  and  controversial 

The  discount  rate  (say.  10%)  deter¬ 
mines  the  discount  factor  for  each  year 
(say.  .909)  that  is  applied  to  that  year's 
cart  flow  to  convert  it  to  today’s  dol¬ 
lars.  The  discount  factor  for  year  n  can 
be  computed  as:  discount  factor  - 
l/(l+i)",  where  i  is  the  target  rate  of  re¬ 
turn.  So  at  a  discount  rate  of  10%  in 
Year  L  discount  f^or  =  V(U),  or  .909. 
Thus,  in  the  eailier  example,  the  pre¬ 
sent  value  of  $1.10  a  year  from  now  is 
$U0x.909.or$1.00. 


Fortunately,  this  math  is  automated 
in  spreadsheet  packages.  You  enter 
only  the  undiscounted  cart  flows,  the 
years  in  which  the  flows  are  expected 
and  some  target  interest  rate.  NPV 
will  pc^  out 

The  chart  below  compares  two  proj¬ 
ects  that  a  bank  could  undertake.  Each 
has  an  initial  investment  of  $1  million 
and  a  minimum  desired  rate  of  return 
of  10%.  On  the  basis  of  absolute  (undis¬ 
counted)  return,  the  ATM  installation 
is  better  because  It  generates  $250,000 
more  cart  over  the  life  of  the  invest¬ 
ment  But  when  the  time  value  of  mon¬ 
ey  is  considered,  the  server  consolida¬ 
tion  project  looks  slightly  better,  with 

Ian  NPV  hi^er  by  $9,000.  Its  pre¬ 
sent  value  is  hi^er  because  the 
returns  occur  earlier  in  die  proj¬ 
ect's  life. 

Gaylord  Entertainment  Co., 
a  Nashville-based  hotel  and  resort 
company,  relies  on  relatively  simple 
measures  such  as  payback  period  to 
evaluate  investments  of  less  than 
$100,000.  Between  $100,000  and 
$500,000.  it  also  looks  at  discounted 
cart  flow  (DCF).  “And  above  $500,000, 
DCF  is  absolutely  necessary.”  says 
CIO  Kent  Founnan. 

The  yearly  cart  flows  from  a  hotel 
or  entertainment  project  are  net  rev¬ 
enues.  but  for  an  IT  project,  they  gen¬ 
erally  are  cost  savings,  Fburman  says. 
But  he  says  NPV  isn't  appropriate  for 
an  IT  project  that  can't  l^  associated 
with  clearly  defined  cart  flows. 

”We  are  doing  Windows  95  to  Win¬ 
dows  2000  and  XP  conversions,  for 
example,  and  you're  not  going  to  come 
up  with  a  traditional  DCF  on  that  kind 
of  project,”  Founnan  says.  There  are 
benefits  that  are  not  necessarily  finan¬ 
cial  in  nature.” 

NPV  has  some  flaws,  says  Ian  C^amp- 
beU.  chief  research  officer  at  Nucleus 
Research  Inc  in  Wellesley,  Mass.  He 
offers  an  example  in  which  two  invest¬ 
ments  each  have  an  NPV  of  $100.  but 
one  involves  an  initial  investment  of 
SLOOO  and  the  other  an  investment  of 
$1  million.  Clearly  the  SIXKIO  invest¬ 
ment  is  preferable  because  it's  less 
risky  and  ties  up  less  capital  he  says. 

But,  Canq)bell  adds,  NPV  is  a  go^ 
”no-go  indiMtor.”  because  you’d  nor¬ 
mally  reject  an  investment  with  a  nega¬ 
tive  NPV  without  further  considera- 
tioa  Those  with  a  positive  NPV 
should  then  be  measured  by  other 
yardsticks,  be  says.  I 
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Internal  Rate  of  Return 


Sort  projects  into  ‘go’  and 
‘no-go’  piles.  B\'  Gar\'  H.  Anthes 


DEFMmON:  The  intemal  rate  of  return  (UW)  is  the  dbcount  rate  that  results  in 
a  net  present  value  of  zero  for  a  series  of  future  cash  flows. 

WHAT  IT  MEANS:  H's  a  cutoff  rate  of  return;  avoid  an  investment  or  project  if  its 
MR  is  less  than  your  cost  of  c^iftal  or  minanum  desired  rate  of  relura 

STRENGTHS:  K  provides  a  simple  hurdle  rate  for  investment  decson-tnaking. 
ft’s  the  method  favored  by  many  accountants  and  fmattce  people,  possibly  the 
ones  at  your  company. 

WEAKNESSES:  It’s  not  as  easy  to  understand  as  some  measures  and  not  as 
easy  to  compute  (even  Eacel  uses  approximations),  (kimputational  anomalies 
can  produce  misfeading  results,  parilcularty  with  regard  to  reinvestments. 


IRR  is  the  flip  side  of  net  present 
value  (NPV)  and  is  based  on  the 
same  principles  and  the  same 
math.  NPV  shows  the  value  of  a 
stream  of  future  cash  flows  dis¬ 
counted  back  to  the  present  by 
some  percentage  that  represents  the 
minimum  desired  rate  of  return,  often 
your  company's  cost  of  capital. 

IRR.  on  the  other  hand,  computes  a 
break-even  rate  of  return.  It  shows  the 


discount  rate  below  which  an  invest¬ 
ment  results  in  a  positive  NPV  (and 
should  be  made)  and  above  which  an 
investment  results  in  a  negative  NPV 
(and  should  be  avoided).  It’s  the  break¬ 
even  discount  rate,  the  rate  at  which 
the  value  of  cash  outflows  equals  the 
value  of  cash  inflows. 

Consider  the  three  scenarios  shown 
here  (see  table),  each  involving  an  ini¬ 
tial  investment  of  SI  million.  Tlie 
investment  returns  $300,000 
(undiscounted)  per  year  in  each 
of  the  five  years  after  the  initial 
investment,  for  a  net  return  of 
$500,000. 

A  company  evaluating  this  invest¬ 
ment  using  cash  flow  discounted 
at  10%  would  compute  an  NPV  of 
$137,000,  a  decent  but  not  spectacular 
result.  But  if  the  company  evaluates 
the  same  investment  at  15%,  the  project 
has  a  present  value  of  only  $6,000.  es¬ 
sentially  just  breaking  even,  and  at 
20%  the  project's  present  value  is  neg¬ 
ative.  The  IRR  is  a  fraction  of  a  per¬ 
centage  point  above  15%:  at  that  dis¬ 
count  percentage,  the  investment’s 
NPV  is  zero. 

IRR  is  often  used  as  a  hurdle  rate,  a 
sort  of  go/no-go  investment  thresh¬ 
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What  It  Looks  Like 
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old.  Gaylord  Entertainment  Ca  in 
Nashville,  for  example,  has  computed 
its  weighted  average  cost  of  capital  — 
a  percentage  that  it  won't  disclose  — 
and  a  “hurdle"  percentage  rate  a  few 
points  higher.  An  investment's  IRR 
must  generally  equal  or  exceed  the 
hurdle  rate  to  be  approved  by  manage¬ 
ment.  says  CIO  Kent  Founnan. 

"We  calculate  the  IRR  and  then  com¬ 
pare  that  to  our  hurdle  rate." 
Founnan  says.  "And  we  compare 
that  IRR  against  every  other 
(project's)  IRR,  because  you  al¬ 
ways  have  limited  cash." 

But  the  IRR  cutoff  isn’t  an  absolute 
test,  he  says.  For  example,  manage¬ 
ment’s  subjective  assessment  of  risk 
may  influence  an  investment  decision, 
he  says.  “But  if  you  can’t  show  that 
IRR  exceeds  our  hurdle  rate,  then 
you’ll  have  to  have  a  lot  of  the  soft  jus¬ 
tifications  to  get  it  approved."  Four- 
man  says. 

Not  everyone  is  as  enthusiastic 
about  IRR.  Like  NPV.  it  doesn’t  mea¬ 
sure  the  absolute  size  of  the  invest¬ 
ment  or  its  return.  And  because  of  the 
way  the  math  works,  the  timing  of  pe¬ 
riods  of  negative  cash  flow  can  affect 
the  value  of  IRR  without  accurately  re¬ 
flecting  the  underlying  performance  of 
the  investment. 

IRR  can  also  produce  misleading  re¬ 
sults  because,  as  classically  defuied.  it 
assumes  that  the  cash  returned  from  an 
investment  is  reinvested  at  the  same 
percental  rate,  which  may  not  be  real¬ 
istic.  That  error  is  magnified  when 
comparing  two  investments  of  different 
dtirations.  Some  software,  such  as  Mi¬ 
crosoft  ExceL  will  compute  an  optional 
"modified  IRR"  that  allows  the  user  to 
specify  a  different  reinvestment  rate. 

IRR  becomes  increasingly  mislead¬ 
ing  the  more  it  diverges  from  the  cost 
of  capital,  says  Ian  Campbell  chief  re¬ 
search  officer  at  Nucleus  Research  toe. 
in  Wellesley.  Mass.  ’'IRR  is  a  terrible 
metric,  and  it  should  never  be  used." 
he  asserts. 

The  key  metric  for  IT  pn^ecis.  Camp¬ 
bell  says,  is  payback  period,  because  it 
favors  short-term,  and  hence  less  risky, 
projects  that  IT  should  be  doing.  I 
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Internal  Rate  of  Return 


Sort  projects  into  ‘go’  and 
‘no-go’  piles.  By  Gary  H.  Anthes 
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IRR  ts  the  dip  side  of  net  present 
value  (NPV)  and  is  based  on  the 
same  principles  and  the  same 
math.  NPV  shows  the  value  of  a 
stream  of  future  cash  flows  dis* 
counted  back  to  the  present  by 
some  percentage  that  represents  the 
minimum  desiied  rate  of  return,  often 
your  company’s  cost  of  capital 
IRR.  on  the  other  hatul.  computes  a 
break-even  rate  of  return.  It  ^lows  the 


discount  rate  below  which  an  invest¬ 
ment  results  in  a  posrttve  NPV  (and 
should  be  made)  and  above  which  an 
investment  results  in  a  negative  NPV 
(and  should  be  avoided).  It’s  the  break¬ 
even  discount  rate,  the  rate  at  which 
the  value  of  cash  outflows  equals  the 
value  of  cash  inflows. 

Consider  the  three  scenarios  shown 
here  (see  table),  each  involving  an  ini¬ 
tial  investment  of  SI  million.  The 
investment  rettims  $300,000 
(undiscounted)  per  year  in  each 
of  the  five  years  after  the  initial 
investment,  for  a  net  renim  of 
$500,000. 

A  company  evaluating  this  invest¬ 
ment  using  cash  flow  discounted 
at  10%  would  compute  an  NPV  of 
$137,000,  a  decent  but  not  spectacular 
result.  But  if  the  company  evaluates 
the  same  investment  at  15%.  the  project 
I  has  a  present  value  of  only  $6,000,  es- 
.  sentially  just  breaking  even,  and  at 
20%  the  project's  present  value  is  neg¬ 
ative.  The  IRR  is  a  fraction  of  a  per¬ 
centage  point  above  15%:  at  that  dis- 
cotmt  percent:^  the  investment's 
NPV  is  zero. 

IRR  is  often  used  as  a  hurdle  rate,  a 
sort  of  go/no-go  investment  thresh¬ 


old.  Gaylord  Entertainment  Co.  in 
Nashville,  for  example,  has  computed 
its  weighted  average  cost  of  capital  — 
a  percentage  that  it  won't  disclose  — 
and  a  ''bur^e”  percentage  rate  a  few 
points  higher.  An  investment’s  IRR 
must  generally  equal  or  exceed  the 
hurdle  rate  to  be  approved  by  manage¬ 
ment,  says  CUO  Kent  Founnan. 

“We  c^culate  the  IRR  and  then  com- 

I  pare  that  to  our  hurdle  rate," 

Founnan  says.  “And  we  compare 
that  IRR  against  every  other 
(project’s]  IRR,  because  you  al¬ 
ways  have  limited  cash." 

But  the  IRR  cutohf  isn’t  an  absolute 
test,  he  says.  For  example,  manage¬ 
ment’s  subjective  assessment  of  risk 
may  influence  an  immanent  decision, 
he  says.  “But  if  you  can’t  show  that 
IRR  exceeds  our  hurdle  rate,  then 
you’U  have  to  have  a  lot  of  the  soft  jtis- 
tifkations  to  get  it  approved,”  Four- 
man  says. 

Not  everyone  is  as  enthusiastic 
about  IRR.  Like  NPV.  it  doesn’t  mea¬ 
sure  the  absolute  size  of  the  invest¬ 
ment  or  its  return.  And  because  of  the 
way  the  math  works,  the  timing  of  pe¬ 
riods  of  negative  cash  flow  can  affect 
the  value  of  IRR  without  accurately  re¬ 
flecting  the  underlying  perfonnance  of 
the  investment. 

IRR  can  also  produce  misleading  re¬ 
sults  because,  as  classically  defined,  it 
assumes  that  the  cash  returned  from  an 
investment  is  reinvested  at  the  same 
percentage  rate,  which  may  not  be  real¬ 
istic.  That  error  is  magnified  when 
cmnparing  two  investments  of  different 
durations.  Some  software,  sudi  as  Mi¬ 
crosoft  Excel  will  compute  an  optional 
“modified  IRR”  that  allows  the  user  to 
specify  a  different  reinvestment  rate. 

IRR  becomes  increasingly  mislead¬ 
ing  the  more  it  diverges  from  the  cost 
of  coital  says  Ian  C:anq>bell  chief  re¬ 
search  officer  at  Nucleus  Research  Inc. 
in  Wellesley,  Mass.  “IRR  is  a  terrible 
metric,  and  it  should  never  be  used,” 
be  asserts. 

'The  key  metric  fw  IT  projects,  Camp¬ 
bell  says,  is  payback  perted,  because  it 
favors  short-term,  and  hence  less  risky, 
projects  that  IT  should  be  doing.  I 
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Balanced  Scorecard 


It’s  a  forward-looking  ‘dashboard’ 
for  executives.  By  Gary  H.  Anthes 
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CREOtT  FOR  the  balanced 
scorecard  idea  most  often 
goes  to  Robert  S.  Kaplan 
and  David  Norton,  who 
wrote  an  article  about  it  for 
tbe  Harvard  Business  Re¬ 
view  in  1992.  Certainly,  many  of  tbe  un¬ 
derlying  ideas  go  back  much  further, 
and  today,  many  companies  use  one  or 
more  of  its  principles  sntbout  havii^ 
adopted  tbe  balanced  scorecard 
methodology  in  any  formal  sense. 

There  are  many  different  balanced 
scorecards,  and  they  serve  many  differ¬ 
ent  purposes,'  says  Arthur  Schneider- 
man.  an  independent  business-process 
management  consultant  in  Boxford. 
Mass.  “But  most  organizations  will  say 
its  purpose  is  to  link  strategy  to  actton.** 
Regardless  of  how  one  d^mes  it.  tbe 
balanced  scorecard  is  based  on  several 
underlying  notions.  The  flnt  is  that 
fmancial  measures  altme  aren't  sufTi- 
ctent  to  size  up  the  health  of  a  compa¬ 
ny  and  that  a  single-minded  pursuit  of 
financial  objectives  could  lead  your 
company  to  ruin  in  tbe  long  run. 

Tte  second  b  that  balanced  score- 
card  focuses  on  process,  not  metrics. 
As  such,  it's  forward-looking  (How  can 
I  retain  my  best  customers?)  rather 
than  backward-looking  (What  were  my 
earnings  per  share  last  quarter?). 

The  scorecard  b  an  analytic  frame¬ 
work  for  translating  a  company’s  vi- 
sicms  and  hi^i-level  bu»D^  strategies 
into  specific,  quantifiable  goab  and  for 
monitoring  performance  against  those 


goals.  Tbe  methodology  breaks  high- 
level  strategies  into  objectives,  mea¬ 
surements.  targets  and  initiatives. 

For  example.  Southwest  Airlines  Co. 
employs  a  number  of  scorecards,  one 
of  which  relates  ground-crew  perfor¬ 
mance  to  company  profitability  (see 
chart).  It  arranges  the  four  quadrants 
of  the  balanced  scorecard  —  igaming, 
intemaL  customer  and  financial  —  in  a 


hierarchy  that  shows  how  objectives 
relate  to  ooe  another. 

Directly  relating  a  financial  measure 
such  as  “lower  (»sts“  with  an  opera¬ 
tions  metric  like  “fast  ground  turn¬ 
around"  b  a  relatively  new  idea  at  the 
Dallas-based  airline,  says  Mike  Van  de 
Ven,  vice  president  of  financial  plan¬ 
ning  and  analysb.  “Historically,  tbe 
budiget  system  was  the  primary  system 
to  monitor  costs,  and  if  you  were  an 
accountant,  you  got  iC  he  says. 

“But  if  you  were  an  operarioos 
person,  and  you  weren’t  used  to 
cost  centers  and  general  ledgers 
and  budget-to-actual  variances,  it 
didn’t  make  any  sense  to  you." 

Tbe  operations  pec^le  bad  hundreds 
of  metrics  dealing  with  things  such  as 
on-time  performance  or  baggage  deliv¬ 
ery.  but  they  weren’t  linked  directly  to 
the  financial  measures  or  the  budget 
system.  Van  de  Ven  says.  “So  what  we 
have  been  doing  over  the  past  several 
years  b  putting  these  thin^  together, 
and  that  neatly  roUs  into  thb  balanced 
scorecard  concept,"  be  says. 

Another  advantage  of  thb  integrated 
scorecard  approach  b  that  it  retains  the 
hundreds  of  detailed  metrics  for  front¬ 
line  supervisors  but  gives  top  man^e- 
ment  a  “dashboard"  displaying  a  few  key 


measures.  “We  are  trying  to  get  more 
focused  on  key  measurements  that  we 
want  to  stay  on  top  of"  Van  de  Ven  says. 

Although  nearly  everyone  applauds 
the  broad  view  that  the  balanced 
scorecard  encourages  and  its  pro¬ 
active.  forward-looking  thrust,  some 
critics  say  tbe  scorecard  b  often  mb- 
usedL  “Most  of  the  time,  the  balanced 
scorecard  will  help  you  identify  the 
wrong  things  to  measure.”  Schneider- 
man  says.  That  can  waste  a  lot  of 
corporate  resources,  he  adds. 

lliere’s  a  danger  that  use  of  the 
balanced  scorecard  can  divert 
management  attention  away  from 
tbe  most  inq>ortant  goals,  which  are  fi¬ 
nancial  says  Ray  Ttotta,  co-founder  of 
iValue  LLC,  an  IT  valuation  consultan¬ 
cy  in  Barrington,  HI.  “We  like  the  way 
the  Street  does  things:  they  talk  about 
dollars  and  cents,"  he  says.  “The  bal¬ 
anced  scorecard  talks  about  customer 
relationships,  internal  processes,  learn¬ 
ing  and  growth.  I  mean,  those  things 
are  good,  but  where’s  tbe  money?"  I 
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The  cost  of  capital  isn’t  free. 
By  John  Berry 
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IF  A  COMPANY  INVESTS  in  manu¬ 
facturing  equipment  or  a  ware¬ 
house.  bow  much  additional  prof¬ 
it  will  be  reqtiired  to  pay  for  H? 
Managers  are  intuitively  aware  of 
the  importance  of  value  creation 
to  their  businesses.  EVA  is  a  manage¬ 
ment  philosophy  and  performance 
metric  that  ek^tes  those  goals  from 
intuition  to  rigorous  analysis  aiKl  en¬ 
sures  that  DO  investment  escapes 
scrutiny. 

Yes,  that  includes  IT.  The 
fundamental  proposition  of  EVA 
is  that  capital  isn’t  foee  and  its 
cost  must  be  foctMed  into  every  bene¬ 
fit  analysis  or  retum-on-investment 
model  when  an  investment  in  a  plant, 
equipment  or  a  new  customer  relation¬ 
ship  management  system  is  contem¬ 
plated.  Putting  a  finer  point  on  this 
coocept,  EVA  targets  equity  capital  as 
oppos^  to  debt  capital  Managers  of¬ 
ten  treat  equity  capital  as  free  when  it's 


iK)t  —  shareholders  could  have  invest¬ 
ed  elsewhere. 

Since  IT  represents  a  big  percentage 
of  a  company's  annual  coital  budget, 
whether  a  company  factors  in  the  cost 
of  capital  when  deciding  on  some  tech¬ 
nology  investment  is  hardly  academic. 
The  pure  EVA  calculaticm  for  the  com¬ 
pany  as  a  whole  is: 

Nrt  oparrttog  prafM  iltor  tons 

•  capitol  ehaivi  (capllrt  ionrtirwnl 
xeartofcapitoO 
But.  purely  speaking,  there  is 
DO  net  operatii^  profit  after  taxes 
(NOPAT)  arising  out  of  an  IT  in¬ 
vestment.  so  the  net  financial  benefits 
of  the  IT  investment  are  used  as  a  re¬ 
placement  for  NOPAT. 

Consider,  for  instance,  a  case  where 
the  cost-benefit  analysis  reveals  that  a 
SSO.OOO  IT  investment  will  return 
SS.000  in  net  quantifiable  benefits. 

The  ROI  is  16%  ($8X100  divided  by 
$50,000).  The  cost  of  capital  in  the 


company  is  12%.  Using  the  formula 
alxn^  tlte  EVA  in  this  case  is  $2,000: 

$8,000  nrt  Iwnalhi  -  ($50,000  capArt  in- 
vartnwnf  X 12%  oort  of  capItoO  ■  $2,000 
EM 

Another  way  to  calculate  EVA  in  this 
example  is  to  simply  deduct  the  12% 
cost  of  capital  fiom  the  16%  ROI  then 
multiply  by  the  investment: 

4%  X  $50,000  *$2,000  EM 

EVA  is  always  expressed  as  a  dollar 

amount. 

“EVA  doesn't  make  it  easy  to  quanti¬ 
fy  IT  benefits  but  creates  clarity  so 
that  all  the  pluses  and  minuses  of  these 
IT  decisions  can  be  considered  in  ways 
that  companies  [that  don't  use  EVA] 
find  difficult  to  do."  says  Bennett  Slew- 
art.  co-founder  of  Stem  Stewart  &  Ca. 
a  New  York-based  consultancy  that 
coined  the  term  Economic  Value 
Added,  but  not  the  coocept. 

Consider  a  recent  EVA  analysts  that 
Robert  Egan,  vice  president  of  IT  at 
Boise  Cascade  Corp.,  and  his  col¬ 
leagues  conducted  for  a  storage  invest¬ 
ment  The  decision  was  whether  to 
keep  storage  assets  or  replace  them 
with  new  technoic^  that  has  lower 
maintenance  charges.  (The  example  is 
illustrative.  Egan  declined  to  provide 
real  cost  figures.) 

The  new  storage  technolt^  costs 
$1  million,  with  maintenance  costs  of 
$100,000  per  year.  The  maintenance 
expense  im  the  old  storage  techooU^ 
is  $350,000.  (For  simplicity,  well  as¬ 
sume  that  the  new  storage  equipment 
offers  DO  benefits  other  than  the  lower 
maintenance  costs.) 

Boise's  cost  of  capital  b  about  16%. 
Therefore,  the  capital  charge  for  in¬ 
vesting  in  the  new  storage  is  16%  x 
$1  milUoQ.  or  $160,000,  which  EVA  says 
must  be  added  to  the  $100,000  mainte¬ 
nance  costs  to  get  the  true  cost 

The  result  The  total  cost  of  the  new 
storage  is  S260X)00.  vs.  $350,000  for  the 
old  storage.  “In  this  case,  have  you 
lowered  the  operating  cost  enough  to 
make  up  for  spending  the  capital’" 
asks  E^n.  Yes  —  $90,000  worth. 

Boise  is  constantly  reminded  of  the 
obvious  point  that  technology  isn’t 
free.  The  company  is  also  aware  of  the 
less  obvious  fact  neither  is  the  capital 
to  finance  it  I 


BenyisanU  management  consultant 
and  analyst  in  Bend.  Ore.  Cmtact  him  at 
vision@according2ibxom. 
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It’s  a  forward-looking  ‘dashboard’ 
for  executives.  Bv  Gan^  H.  Anthes 
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DEFMrnOM:  A  sat  of  principfes  and  anafydc  techniques  for  improving  m  orpa- 
nizatton's  parformanca  in  four  ganarai  areas:  finandats,  customers,  laarning  and 
rocemes. 

WHAT  IT  MEANS:  Long- term  orgarizationai  OKcalence  can  be  achieved  only  by 
taMne  a  broad  and  hoialic  approach,  not  by  focusing  sotsly  on  firtanciak. 


WEAKNESSES:  TMs  mathod  ks  potarrtialy  to  broad  that  It  may  divart  resources 
from  those  faw  areas  that  realy  are  vttai  to  shareholder  rebeTL  H  doesn't  raadiy 
weight  the  reiathe  importatKa  of  the  dMerenl  rrietrks  R  uses. 


CREDIT  FOR  the  balanced 
scorecard  idea  most  often 
goes  to  Robert  S.  Kaplan 
and  David  Norton,  who 
wrote  an  article  about  it  for 
the  Harvard  Business  Re¬ 
view  in  1992.  Certainly,  many  of  the  un- 
deiiying  ideas  go  back  much  further, 
and  today,  many  companies  use  one  or 
more  of  its  principles  without  having 
adopted  the  balanced  scorecard 
methodology  in  any  formal  sense. 

'There  are  many  different  balanced 
scorecards,  and  they  serve  many  differ¬ 
ent  purposes."  says  Arthur  Schneider- 
man.  an  independent  business-process 
management  consultant  in  Boxford, 
Mass.  “But  most  organizations  wiU  say 
its  purpose  is  to  link  strategy  to  action." 

Regardless  of  bow  one  defines  it.  the 
balanced  scorecard  is  based  on  several 
underlying  notions.  The  fust  is  that 
financial  measures  alone  aren't  suffi¬ 
cient  to  size  up  the  health  of  a  compa¬ 
ny  and  that  a  single-minded  pursuit  of 
fmancial  objectives  could  lead  your 
company  lo  ruin  in  the  long  ruit 
The  second  is  that  balanced  score- 
card  focuses  on  process,  not  metrics. 
As  such,  it’s  forward-looking  (How  can 
I  retain  my  best  customers?)  rather 
than  backward-looking  (What  were  my 
earnings  per  share  last  quarter?). 

The  scorecard  is  an  analytic  frame¬ 
work  for  translating  a  company’s  vi¬ 
sions  and  high-level  business  strategies 
into  specific,  quantifiable  goals  and  for 
monitoring  performance  against  those 


goals.  The  methodology  breaks  high- 
level  strategies  into  objectives,  mea¬ 
surements.  targets  and  initiatives. 

For  example,  Southwest  Airlines  Co. 
employs  a  number  of  scorecards,  one 
of  which  relates  ground-crew  perfor¬ 
mance  to  company  profitability  (see 
chart).  It  arranges  the  four  quadrants 
of  the  balanced  scorecard  —  learning, 
internal,  customer  and  financial  —  in  a 


hierarchy  that  shows  how  objectives 
relate  to  one  another. 

Directly  relating  a  financial  measure 
such  as  "lower  costs"  with  an  opera¬ 
tions  metric  like  “fast  ground  turn¬ 
around"  is  a  relatively  new  idea  at  the 
Dallas-based  airline,  says  Mike  Van  de 
Ven.  vice  president  of  financial  plan¬ 
ning  and  analysis.  “Historically,  the 
budget  system  was  the  primary  system 
to  monitor  costs,  and  if  >*00  were  an 
accountant,  you  got  it,”  he  says. 

"But  if  you  were  an  operations 
person,  and  you  weren't  used  to 
cost  centers  and  general  ledgers 
and  budget-to-actual  variances,  it 
didn’t  make  any  sense  to  you." 

The  operations  people  had  hundreds 
of  metrics  dealing  with  things  such  as 
on-time  performance  or  baggage  deliv¬ 
ery.  but  they  weren’t  linked  Erectly  to 
the  financial  measures  or  the  budget 
system.  Van  de  Ven  says.  “So  what  we 
have  been  doing  over  the  past  several 
years  is  putting  these  thii^  together, 
and  that  neatly  rolls  into  this  balanced 
scorecard  concept,"  be  says. 

Another  advantage  of  this  integrated 
scorecard  approach  is  that  it  retains  the 
hundreds  of  detailed  metrics  for  front¬ 
line  supervisors  but  gives  top  manage¬ 
ment  a  “dashboard"  displaying  a  few  key 


measures.  “We  are  trying  to  get  more 
focused  on  key  measurements  that  we 
want  to  stay  on  top  of,"  Van  de  Ven  says. 

Although  nearly  everyone  applauds 
the  broad  view  that  the  balanced 
scorecard  encourages  and  its  pro¬ 
active.  forward-looking  thrust,  some 
critics  say  the  scorecard  is  often  mis¬ 
used.  “Most  of  the  time,  the  balanced 
scorecard  will  help  you  identify  the 
wrong  things  to  measure,”  Schneider- 
man  says.  That  can  waste  a  lot  of 
corporate  resources,  he  adds. 

There’s  a  danger  that  use  of  the 
balanced  scorecard  can  divert 
management  attention  away  from 
the  most  important  goals,  which  are  fi¬ 
nancial.  says  Ray  Trotta,  co-founder  of 
iValue  LLC.  an  IT  valuation  consultan¬ 
cy  in  Barrington.  Ill.  “We  like  the  way 
the  Street  does  things:  they  talk  about 
dollars  and  cents.”  he  says.  ’The  bal¬ 
anced  scorecard  talks  about  customer 
relationships,  internal  processes,  learn¬ 
ing  and  growth.  1  mean,  those  things 
are  good,  but  where's  the  money?”  k 


TODRDEEPa 


Liife  lo  more  tutorials  00  the  balanced  scorecard 
are  available  online: 
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Economic 

Value 

Added 

The  cost  of  capital  isn’t  free. 
By  John  Bem^ 


DERNfTKM:  Econocnic  Value  Added  (EVA)  -  a  name  tndemaited  by  Stem 
Stewart  A  ()a  -  subtncts  the  capital  charge  (the  capital  imeebnent  times  the 
cost  o(  capItaO  from  the  net  finaridai  benefits  of  the  nvestmant 

WHAT  IT  MEANS:  Economic  profit  ie  wenRh  aoatod  above  the  capitai  cost 
of  the  inveebnent  EVA  prmnts  managers  from  thinking  that  the  cost  of 
capital  Is  free. 

STRENOTHS.'EWfocusosmanaoersonthequeotioa'Ttiranygivaninvest* 
merit  wM  the  company  generate  returiB  above  the  cost  of  capflaf?"  Companies 
that  embrace  EVA  have  bonus  compensation  schemes  that  reerard  or  punish 
managers  for  addng  value  to  or  subtracting  value  from  the  compMiy. 

WEAKNESSES:  te  with  any  mafric.  it’s  hard  to  Ink  pradee  EVA  fotoms  to  a 
epedfictechndoqy  investment  EVA  is  Idealy  suited  to  pubfidy  traded  corrye- 
nies.  not  private  companies,  because  It  deals  with  the  cost  of  equity  for  share¬ 
holders,  as  opposed  to  debt  c^ihaL 


IF  A  COMPANY  INVESTS  ux  manu¬ 
facturing  equipment  or  a  ware¬ 
house,  how  much  additional  prof¬ 
it  will  be  required  to  pay  for  it? 
Manors  are  intuitively  aware  of 
the  importance  of  value  creation 
to  their  busmesses.  EVA  is  a  manage¬ 
ment  philosophy  and  performance 
metric  that  elevates  those  goals  from 
intuition  to  rigorous  aiulysis  and  en¬ 
sures  that  no  investment  escapes 
scrutiny. 

Yes,  that  includes  IT.  TTie 
fundamental  proposition  of  EVA 
is  that  capital  isn’t  foee  and  its 
cost  must  be  factored  into  every  bene- 
flt  analysis  or  retum-on-invesimeni 
model  when  an  investment  in  a  plant, 
equipment  or  a  new  cttstomer  relation¬ 
ship  management  system  is  contem¬ 
plated  Putting  a  finer  point  on  this 
concept,  EVA  targets  equity  capital  as 
oppos^  to  debt  capital.  Managers  of¬ 
ten  treat  equity  capital  as  free  when  it’s 


not  —  shareholders  could  have  invest¬ 
ed  elsewhere. 

Since  IT  represents  a  big  percentage 
of  a  company’s  annual  capit^  budget, 
whether  a  company  factors  in  the  cost 
of  capitai  when  deciding  on  some  tech¬ 
nology  investment  is  hardly  academic. 
The  pure  EVA  calculation  for  the  com¬ 
pany  as  a  whole  is: 

Net  operating  prafil  altar  taxes 

-  capital  diarge  (capital  investraeiil 
xoostofeapitaD 

But,  purely  speaking,  there  is 
no  net  operating  profit  after  taxes 
(NOPAT)  arising  out  of  an  IT  in¬ 
vestment,  so  the  i>et  fmaodal  benefits 
of  the  IT  investment  are  used  as  a  re¬ 
placement  for  NOPAT. 

Consider,  for  instance,  a  case  where 
the  cost-benefit  analysis  reveals  that  a 
$50,000  IT  investment  will  return 
$8,000  in  net  quantifiable  benefits. 

The  ROI  b  16%  ($8,000  divided  by 
$50,000).  The  cost  of  capital  in  the 


company  is  12%.  Using  the  formula 
above,  t^  EVA  in  thb  case  is  $2,000: 

$8,000  net  benefits  -  (SSO.OOO  c^Ntol  in- 
vestJTwnt  x  12%  cost  ef  capitaO  >  $2,000 
EVA 

Another  way  to  calculate  EVA  in  thb 
example  b  to  $impl>'  deduct  the  12% 
cost  of  capital  from  the  16%  ROI.  then 
multiply  by  the  investment: 

4%  I  SSO.OOO  s  $2,000  EVA 

EVA  b  always  expressed  as  a  dollar 

amount. 

“EVA  doesn't  make  it  eas>'  to  quanti¬ 
fy  IT  benefits  but  creates  clarity  so 
that  ail  the  pluses  and  minuses  of  these 
IT  deebions  can  be  considered  in  ways 
that  companies  [that  don't  use  EVA] 
find  difficult  to  do,”  says  Bennett  Stew¬ 
art.  co-founder  of  Stem  Stewart  &  Co., 
a  New  York-based  consultant’  that 
coined  the  term  Economic  Value 
Added,  but  not  the  concept. 

Consider  a  recent  EVA  analysb  that 
Robert  Egan,  vice  president  of  IT  at 
Boise  Cascade  Corp.,  and  hb  col¬ 
leagues  conducted  for  a  storage  invest¬ 
ment.  The  decision  was  whether  to 
keep  storage  assets  or  replace  them 
with  new  technology  that  has  lower 
maintenance  charges.  (The  example  b 
illustrative.  Egan  declined  to  provide 
real  cost  figures.) 

The  new  storage  technology  costs 
$1  million,  with  maintenance  costs  of 
$100,000  per  year.  The  maintenance 
expense  on  the  old  storage  technolc^ 
b  $350,000.  (For  simplicity,  we'il  as¬ 
sume  that  the  new  stor^  equipment 
offers  no  benefits  other  than  the  lower 
maintenance  costs.) 

Boise's  cost  of  capital  b  about  16%. 
Therefore,  the  capital  charge  for  in¬ 
vesting  in  the  new  storage  b  16%  x 
$I  million,  or  $160,000,  which  EVA  says 
must  be  added  to  the  $100,000  mainte¬ 
nance  costs  to  get  the  true  cost. 

The  result:  The  total  cost  of  the  new 
storage  b  $260,000,  vs.  $350,000  for  the 
old  storage.  “In  thb  case,  have  you 
lowered  the  operating  cost  enough  to 
make  up  for  spending  the  capital.^ 
asks  ^n.  Yes  —  $90,000  worth. 

Boise  is  constantly  reminded  of  the 
obvious  point  that  technology  bn'i 
free.  The  compan>’  b  also  aware  of  the 
less  obvious  fact:  neither  b  the  capital 
to  finance  it.  I 


Berry  is  an  IT  management  consultant 
and  analyst  in  Bend.  Ore.  Contact  him  at  ! 
vbion@accorcling2;bxom-  j 
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By  Steve  Ulfelder 


WITH  IT  BUDGETS  TIGHT.  CIOs  are  being 
asked  to  tally  up  ROI  figures  for  every 
sizable  project  these  days.  Not  surpris* 
ingty,  consultii^  firms  ranging  from 
Gartner  Inc.  to  two-man  start-ups  — 
often  founded  by  Gartner  alumni  —  have  stepped  in 
with  a  full  complement  of  ROI  metrics,  methodolo¬ 
gies.  guidelines  and  benchmarking  services  to  cash 
in  on  the  opportunity.  We've  sifted  through  some  of 
the  offerings. 

Business  Value  Index 

The  Hackett  Group  recently 
revamped  and  renamed  its 
IT  benchmarking  method- 
ol(^.  An  intriguing  charac¬ 
teristic  of  its  Business  Value 
Index  is  that  it  offers  clients 
the  ability  to  compare  themselves  against  other  en¬ 
terprises.  Hackett  has  benchmariced  2,000  IT  organi¬ 
zations.  including  those  at  General  Electric  Co.  and 
Citigroup  Inc.,  on  their  alignment  with  corporate 
strategy,  ability  to  partner  with  suppliers,  and  level 
of  technology  integration,  according  to  Bruce  Barlag, 
the  firm's  president  and  a  former  Gartner  ROI  ana¬ 
lyst.  Barlag  adds  that  client  companies  are  able  to  ex¬ 
amine  the  practices  that  help  topi-quartile  corpora¬ 
tions  succeed. 

From  Hackett’s  extensive  database,  you  can  learn, 
for  example,  that  the  average  IT  organization  has  11.5 
full-time  IT  employees  per  1,000  company  employ¬ 
ees,  while  at  high-performing  companies,  the  num¬ 
ber  is  less  than  half  that  —  5.2  IT  workers  per  1,000 
company  employees. 

The  other  major  Business  Value  Index  differentia¬ 
tor  is  its  continuous  focus;  many  customers,  includ- 

their  own 
lere’s  a  quick 
models. 
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ing  The  New  York  Tunes  Ca  and  Alcoa  Inc.  use 
their  initial  results  as  baselines  for  ongoing  measure* 
menL  “Most  companies  benchmark  every  two  or 
three  years,  but  clients  tell  us  they  want  more  of  an 
ongoing  process,"  Barlag  says. 

Hackett  says  a  Business  Value  Index  analysis  can 
take  as  little  as  two  weeks.  The  firm’s  Web-enabled 
software  gathers,  scrubs  and  validates  data:  consul¬ 
tants  collaborate  with  clients  throughout  the  process 
and  then  deliver  a  fmal  report. 

Strength:  Hackett's  large  existing  database  can  be 
used  to  compare  IT  practices  and  business  value  on  a 
continuous  basis. 

WaiknMMK  May  not  offer  the  hard  numbers  you’re 
looking  for  moreover,  the  index  b  new  and  untested. 

Infonnation  Economics 

I  Tom  Bugnitz,  president  of 
’The  Beta  Group,  stresses 
that  although  his  Informa* 
tion  Economics  methodolo¬ 
gy  encompasses  metrics, 
they  are  simply  a  means  to  an  end  —  that  end 
being  “a  holistic  view  of  alllT  investments  and 
an  understanding  of  the  linkage  between  IT 
spending  and  business  results  that  lets  manage¬ 
ment  make  decisions." 

The  Eleta  Group  is  another  consultancy  that 
Includes  Gartner  alumni  among  its  principals.  The 
key  differentiator  of  the  firm’s  approach  to  IT  ROl 
assessments  is  its  focus  on  communication  rather 
than  data  analysis. 

’The  finn’s  methodolc^  includes  four  steps.  First, 
client  companies  list  and  prioritize  their  strategic 
business  endeavors.  As  part  of  this  process.  The  Beta 
Group  forces  clients  to  use  standard  language  across 
all  departments  and  projects. 

Second,  the  IT  organization  is  asked  to  catalog  its 
technology  investments.  Again,  standard  language 
and  metrics  are  used.  With  this  information.  The 
Beta  Group  builds  what  h  calls  a  "project  book."  At 
this  stage,  says  Bob  Rouse,  a  company  principal  it  of¬ 
ten  becomes  apparent  that  business  managers  know 
shockingly  littie  about  where  the  IT  group  is  spend* 
ing  its  money. 

Next,  a  scorecard  committee,  composed  of  busi* 
ness,  financial  and  IT  executives,  develops  a  relative 
valuation  for  each  IT  project  According  to  Bugnitz. 
this  development  process  is  the  core  of  Information 
Economics,  because  it  forces  executives  at  the 
client’s  company  to  understand  and  analyze  their  IT 
program  in  detail 

“People  on  this  committee  must  learn  whatever 
they  need  to  know  about  every  project”  Bugnitz 
says.  “We  provide  a  framework  for  disciplined  think¬ 
ing  about  business  communication." 

Finally,  the  company  creates  a  scorecard,  which  is 
a  list  of  proposed  IT  expenditures  ranked  according 
to  their  business  value.  Once  a  Beta  Group  client  that 
was  laced  with  a  SSO  million  IT  project  b^klog  ran 
out  of  money  halfway  down  its  list  —  and  simply 
elimiiuted  t^  rest,  with  no  ill  effects.  The  CEO 
said.  ‘If  the  process  works,  it  works.’  ”  says  Bugnitz.  A 
typical  Beta  Group  engagement  lasts  six  to  12  weeks, 
lilmigiii  Clearly  ties  IT  projects  to  overall  strategy, 
offering  a  good  big*picture  perspective. 
miMfaMMK  Requires  a  major  effort  ffom  the  score¬ 


card  committee,  and  the  results  of  the  exercise  are 
only  as  stroitg  as  that  group’s  commitment. 

IT  Pariarmance  Management  Scorecani 

Mike  Bitterman,  a  priiKipal 
at  IT  Performance  Manage¬ 
ment  Group  (ITPMG).  is  yet 
another  Gartner  refugee  — 
be  worked  in  benchmarking 
at  Gartner’s  measurement 
division.  There,  he  says,  "CIOs  would  tell  us,  ‘Some¬ 
thing’s  broken,  and  we  don’t  know  how  to  fix  it’  And 
benchmarks  don't  tell  you  how  to  fix  anything."  So 
Bitterman  moved  on  to  co-found  ITFMG  and  devel¬ 
oped  the  IT  Performance  Management  Scorecard. 

In  an  ITPMG  engagement,  the  client  company  es¬ 
tablishes  critical  success  foctors  associated  with  the 
health  of  its  IT  organization.  These  factors  vary  de- 
piending  on  bow  IT  is  regarded  —  as  a  utility,  as  a  "de¬ 
mand"  organizatioo  that  delivers  applications  when 
requested,  or  as  an  "enabling"  group  that  truly  helps 
plan  corporate  strategy.  (Brutal  honesty  is  needed 
here:  "Everybody  wants  to  be  an  ’enabling’  IT 
group,  but  very  few  are."  Bitterman  says.) 

With  critical  success  foctors  and  metrics  de¬ 
termined.  ITPMG’s  scorecard  soffware.  whkh 
the  firm  instaUs  on  clients'  servers,  helps  com¬ 
panies  develop  eight  to  IS  key  performance  indica¬ 
tors.  The  goals:  unambiguous  metrics,  a  translation 
of  typical  IT  jargon  into  business-value  terms. 
(“Somebody  still  measures  CPU  cycles  and  all  that." 
Bitterman  says.  “But  oux  software  automates  your 
ability  to  turn  that  into  useful  information.") 

Developing  a  scorecard  for  one  department  of  a 
company  takes  six  to  weeks. 

Strangle  Provides  the  hard  ROI  numbers  that  busi¬ 
ness  executives  want  to  see. 

WaaknMMK  When  it  comes  to  translating  age-old  IT 
measurements  into  infonnation  that’s  useful  for 
business  people,  “there’s  still  a  lot  of  missionary 
work  to  be  done,"  Bitterman  says.  To  folly  expMt  the 
n*  scorecard,  a  business  must  be  ready  and  willing  to 
confront  the  historical  divide  between  IT  and  other 
organizations. 

Total  Economic  bnp^ 

Giga  Information  Group 
Inc.’s  methodology  essen¬ 
tially  expands  on  tradUional 
cost  analysis  by  adding  ben¬ 
efits  and  flexibility  to  the 
mix.  Chip  Gliedman.  a  Giga  research  fellow,  says  it's 
important  to  factor  in  flexibility  because  investments 
in  infrastructure,  excess  storage  capacity  or  network 
bandwidth  look  like  red  ink  in  a  cost  analysis  —  but 
offer  flexibility  that  can  pay  off  in  time. 

Where  beDefits  of  an  IT  project  are  concerned. 
Giga,  like  nearly  all  its  competitors,  forces  clients 
past  generalities  such  as  “boc^  produc- 
tivity.“  C^edman  says  IT  executives  tend 
to  slip  into  a  discussion  of  features  but 
that  Giga’s  methodology  keeps  them  on 
track.  “We  don't  talk  features,  but  rather 
business  benefits,  and  we  always  add  ‘as 
measured  by*  and  a  metric,"  be  says. 

Typically,  a  Total  Economic  Impact  as¬ 
sessment  begins  with  identification  of  an 


Most  companies 
benchmark  every 
two  or  three  years, 
but  clients  ten  us  they  want 
more  of  an  ongoing  process. 

MUCE  BARUO  PRESIDENT.  THE  HACKHT  GROUP 
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IT  project's  goals.  IT  then  determines  lechnoiogy 
costs.  Next,  affected  business  units  decide  what  ben¬ 
efits  they  stand  to  gala 

Then  flexibility  and  risk  are  f^ored  in.  “An  IBM 
server  wnli  cost  more  than  one  from  foe’s  House  of 
Servers"  but  is  a  safer  purchase.  GUedman  says, 
adding.  “Risk-adjustmeiu  lets  you  decide  how  much 
of  a  discount  you  require  from  joe." 

Fmally,  the  results  of  the  assessment  are  communi¬ 
cated  to  all  concerned  parties,  and  metrics  for  mea¬ 
suring  the  project's  success  are  determined. 

Giga  offers  Total  Economic  Impact  assessments  as 
a  coitsulting  service  or  will  train  businesses  to  per¬ 
form  their  ovm  asscsonents.  A  foil  engagement  takes 
four  weeks  or  more,  depending  on  scope. 

Strength:  Takes  flexibility  and  risk  —  major  factors  in 
real-world  decision-making  —  Info  coosideratioo. 
VMmam:  In  some  companies,  those  addhiocia]  con¬ 
siderations  may  dilute  the  ROI  message. 

TolMVNue  of  Opportunity 

Tbtal  Value  of  Opportunity 
CXVO)  is  a  methodology 
based  on  the  Gartner  Busi¬ 
ness  Performance  Frame¬ 
work.  the  company's  set  of 
tnisiness  metrics.  (Partner  analyst  Audrey  Apfel 
claims  that’s  an  important  differentiator  "(^oeric 
ROI  cases  tend  to  go  right  from  geekspeak  to  finan¬ 
cial  numbers,  and  that’s  too  a  leap."  she  says. 

TVO  is  available  as  a  Web-based  sofhvare  package, 
with  foU  training-and-coDsulting  contracts  optional 
To  get  started,  a  business  uses  Gartner’s  business 
metrics  to  determine  what  <^>pommities  are  avail¬ 
able  and  translates  them  into  standard  business 
terms  such  as  on-time  delivery,  bill  rate,  market 
share  and  sales  close  index.  One  of  TVO's  strengths 
is  that  this  transbtioa  —  which  is  where  many  ef¬ 
forts  founder  —  b  laid  out  in  excruciating,  nep-by- 
step  detail  eliminating  ambiguity. 

Another  TVO  differentiator  b  the  sofnvare's  diag¬ 
nostic  capability,  which  weighs  such  qualitative  fac¬ 
tors  as  the  company’s  IT  project  hbtoty  “Lou  of 
clienu  tell  us,  'We  have  a  great  ROI  process,  we  run 
deebums  past  our  accountants  ~  and  then  we  go  on 
our  gut  feeling,’ "  says  Apfel  “We  tried  to  make  that 
gut  feeling  vt^le." 

ShwgdL  Specifk  instructiems  can’t  be 
fudged,  so  results  should  be  accurate. 
INWomk  May  add  a  level  of  complexity 
that  meat-and-poutoes  executives  vraa’i 
welcome.  I 
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Ulfekier  b  afir^anct  writer  in  Southbam, 
Moss.  Contact  him  or  su(fWder(S 
churterjiet. 


Wf  1  11  n  ni'ixin  s  IK. II 1 ,  OIOs  arc  bi-in^ 
asked  t(t  tally  up  ROI  fijiures  for  every 
sizable  project  these  days.  Not  surpris¬ 
ingly.  consulting  firms  ranging  from 
Gartner  Inc.  to  two-man  start-ups  — 
often  founded  by  Gartner  alumni  —  have  stepped  in 
with  a  full  complement  of  RDl  metrics,  methodolo¬ 
gies,  guidelines  and  benchmarking  services  to  cash 
in  on  the  opportunity.  We’ve  sifted  through  some  of 
the  offerings. 


Business  Value  Index 


Tht  Hacfcstt  Group,  an 

Answerthink  Inc.  company. 
Atlanta  O  www. 

thehack«ttgroup.com 


The  Hackett  Group  recently 
revamped  and  renamed  its 
IT  benchmarking  method¬ 
ology.  An  intriguing  charac¬ 
teristic  of  its  Business  Value 
Index  is  that  it  offers  clients 
the  ability  to  compare  themselves  against  other  en¬ 
terprises.  Hackett  has  benchmarked  2.000  IT  organi¬ 
zations.  including  those  at  General  Electric  Co.  and 
Citigroup  Inc.,  on  their  alignment  with  corporate 
strateg)',  ability  to  partner  with  suppliers,  and  level 
of  technology-  integration,  according  to  Bruce  Barlag, 
the  firm's  president  and  a  former  Gartner  ROI  ana¬ 
lyst.  Barlag  adds  that  client  companies  are  able  to  ex¬ 
amine  the  practices  that  help  top-quartile  corpora¬ 
tions  succeed. 

From  Hackett's  extensive  database,  you  can  learn, 
for  example,  that  the  average  IT  organization  has  11.5 
full-time  IT  employees  per  1,000  company  employ¬ 
ees.  while  at  high-performing  companies,  the  num¬ 
ber  is  less  than  half  that  —  5.2  IT  workers  per  1,000 
company  employees. 

The  other  major  Business  Value  Index  differentia¬ 
tor  is  its  continuous  focus:  many  customers,  includ- 


C^onsiilting  firms  are  inventing  tlieir  owm 
ROI  metrics  at  a  steady  pace.  Here’s  a  qui 
look  at  five  more  IT  evaluation  models. 
B\'  Ste\e  Ultelder 
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ing  ’I'hc  New  York  ‘I'imcs  Co.  and  Alcoa  Inc.,  use 
their  initial  results  as  baselines  for  itngoing  measure¬ 
ment.  "Most  e(*mpanies  benchmark  every  two  or 
three  years,  but  clients  tell  us  they  want  more  of  an 
ongoing  process."  Baring  says. 

Haekctt  says  a  Business  Value  inde.x  analysis  can 
take  as  little  as  two  weeks.  The  firm’s  Web-enabled 
software  gathers,  scrubs  and  validates  data;  consul¬ 
tants  collaborate  with  clients  throughout  the  pn*cess 
and  then  deliver  a  final  report. 

Strength:  Hacketts  large  e.visting  dat4abase  can  be 
u.sed  to  compare  IT  practices  and  business  value  on  a 
ctmtinuouK  basis. 

Weaknesses;  May  not  offer  the  hard  numbers  )-ou're 
looking  for;  moretwer,  the  index  is  new  and  untested. 

Information  Economics 

Tom  Bugnii7.  president  «*f 
'  Tltc  Ik'ta  Group,  stresses 
that  although  his  lnf«>rma- 
tion  tc^momics  meihi>dolo- 
gy  encompasses  metrics, 
they  are  simply  a  means  to  an  end  —  that  end 
being  "a  holistic  view  of  all  IT  investments  and  M 
an  understanding  of  the  linkage  between  IT  91 

.spending  and  business  results  that  lets  manage-  ^ 
ment  make  decisions." 

The  Beta  Group  is  am*ther  consultancy  that 
includes  Gartner  alumni  aiiMmg  its  principals.  The 
key  difTercntiaiorofihe  firm’s  approach  to  IT  KOI 
assessments  Is  its  focus  on  communication  rather 
than  data  analysis. 

The  firm's  meihodtdogy  includes  four  steps.  First, 
client  companies  list  and  prioritize  their  strategic 
business  endeavors.  As  part  of  this  pn>cess.  The  Beta 
Group  forces  clients  to  use  standard  language  across 
all  departments  and  projects. 

Second,  the  IT  i>rgani/ation  is  asked  ut  catalog  its 
technology  investments.  Again,  standard  language 
and  metrics  are  usc'd.  With  this  information.  The 
Beta  Group  builds  what  it  calls  a  ~proics;t  b(H>k.’’  At 
this  stage,  says  Bi*b  Rouse,  a  catmpany  principal,  it  of¬ 
ten  becomes  apparent  that  business  managers  know 
shockingly  little  about  where  the  IT  group  is  .spend¬ 
ing  its  money. 

Next,  a  scorecard  committee.  ct)mposcd  of  busi¬ 
ness.  financial  and  IT  e.xecutives.  develops  a  relative 
valuation  for  each  I  T  project.  According  to  Bugnitz. 
this  development  priwess  is  the  core  of  Information 
Economics,  because  it  forces  executives  at  the 
client's  company  to  understand  and  analyze  their  IT 
program  in  detail. 

"I’eoplc  on  this  committee  must  learn  whatever 
they  need  to  know  about  every'  project.”  Bugnitz 
says.  "Wc  pmvide  a  framework  for  disciplined  think¬ 
ing  about  business  communication." 

Finally,  the  a»mpany  creates  a  scorecard,  w  hieh  Is 
a  list  of  pniposed  IT  expenditures  ranked  according 
to  their  business  value.  Once  a  Bv’ia  Group  client  that 
was  faced  with  a  S5(l  million  I’l*  project  backlog  ran 
out  of  morwy  halfway  down  its  list  —  and  simply- 
eliminated  the  rest,  w-ith  no  ill  effects.  ~The  CEO 
said.  ’If  the  piwes-s  works,  it  works.’ "  says  Bugnitz.  A 
typical  Bela  Group  engagement  lasts  si.\  to  12  weeks. 
Strength:  Clearly  ties  IT  pnijecis  to  overall  strategy, 
offering  a  g»H»d  big-picture  perspective. 

Weakntttses;  Requires  a  major  effon  from  the  score¬ 
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card  committee,  and  the  results  of  the  exercise  are 
only  as  stnmg  us  that  gr«»up's  commitment. 

IT  Performance  Management  Scorecard 

Mike  Uiticrman.  a  priiK'ip.il 
at  IT  IVrf»»rmancc  Manage¬ 
ment  (irtrup  <rri'M<»f.  is  yet 
amttlier  Gartner  refugee  — 
he  worked  hi  benchmarking 
at  (iartner’s  measurement 
division.  I'here.  he  says.  “CIOs  would  tell  us.  ’Sirme- 
ihing’s  brirken.  and  we  don't  know  how  to  fix  it,’  And 
benchmarks  dt»n’i  tell  yt*u  how  to  fix  anything."  Si« 
Bitterman  moved  on  to  co-found  ITPMtj  and  devel¬ 
oped  the  IT  Performance  Management  Seonvard. 

In  an  ITPMG  engagement,  the  client  company  es- 
tablislK's  critical  success  factors  assticiated  with  the 
health  of  its  IT  organization,  llicse  factors  vary  de¬ 
pending  on  how  IT  is  regarded  —  as  .a  utility,  .as  a  ••de¬ 
mand"  organization  that  delivers  applications  when 
requested,  or  as  an  ‘Vnabling’’  group  th.-it  truly  helps 
plan  corporate  strategy.  (Brutal  honesty  is  needed 
here;  “Everybody  wants  to  be  an  ’enabling’  I  T 
group,  but  very  few  are."  Bitterman  says.) 

^  With  critical  success  faciv»rs  and  metrics  de- 
termined.  ITPMG’s  scorecard  s*ffiware.  which 
the  firm  installs  on  clients'  servers,  bc'lps  com¬ 
panies  develop  eight  to  15  key  performance  indica¬ 
tors.  Ilie  goals:  unambiguous  metrics,  a  translation 
of  typical  IT  jargon  into  busincs.s-vaiuc  terms. 
("Somebody  still  measures  CPU  cycles  and  all  th.n." 
Bitterman  says.  "But  our  software  automates  your 
ability  to  luni  that  into  useful  information.") 

lX*veh>ping  a  sct»rvcard  for  one  department  of  a 
company  takes  six  to  eight  wevks. 

Strength:  Provides  the  hard  KOI  numbers  that  busi¬ 
ness  executives  want  to  see. 

Wedtnesses:  When  it  comes  to  transbiing  age-idd  IT 
mexs-urements  into  intormation  that's  useful  for 
busines-s  people,  "there's  still  a  loi  of  missionary 
work  to  be  done."  Bitterman  says.  To  fully  exploit  the 
IT  scorecard,  a  business  must  be  ready  and  svilling  u> 
confront  the  historical  divide  between  I'l'  and  other 
organizations. 


Total  Economic  Impact 

Giga  Information  Group 


Olga  Mnmutieo  Group 
Inc.,  (^ambndoe.  Mass 

O  www.gi9M«tLcom 


Inc.’s  method«»logy  essen¬ 
tially  expands  on  traditional 
cost  analysis  by  adding  ben¬ 
efits  and  flexibility  to  the 
\  mix.  Chip  Glicdman.  a  Gigii  research  fellow,  says  it’s 
I  important  lo  factor  in  flexibility  because  investments 
j  in  infr.istruciure.  e.xcess  storage  capacity  or  network 
I  bandwidth  ItH^k  like  red  ink  in  a  c(»si  analysis  —  but 
I  offer  flexibility  that  can  pay  off  in  time. 

Where  benefits  of  an  IT  projcv't  are  concerned. 
Giga.  like  nearly  all  its  competitors,  (brccs  diems 
past  generalities  such  as  "bi»osis  produc¬ 
tivity."  (ilii'dman  says  I'F  e.xccutives  tend 
to  slip  into  a  discussion  of  features  hut 
that  Giga’s  mcthodok»g>'  keeps  them  on 
track.  “Wc  don’t  talk  features,  but  rather 
business  benents,  and  we  always  add  ‘as 
measured  b>  ’  and  a  metric,"  he  sa)'s. 

T>'pically.  a  Total  Eamumic  Impact  as¬ 
sessment  begins  with  identification  of  an 


Most  companies 
benchmaik  every 
two  or  three  years, 
but  clients  tell  us  they  want 
more  of  an  ongoing  process. 

BRUCE  BARLA6  PBfSIDEM  tMf  HtfM  It  pHOi'P 

IT  project’s  g»>aK.  11  then  determuH*s  lechnologv 
costs.  Next,  aflccied  business  units  decide  vxiui  ben¬ 
efits  they  stand  to  gain. 

I'heii  flexibilit)  and  risk  are  factored  in.  “An  IBM 
server  will  c«>sl  more  than  one  from  llousi'  of 
Serxers"  hut  is  a  safer  purchase.  Glicdman  sj>  v 
adding,  ■‘kisk-adiusimenl  lets  you  decide  how  much 
of  a  discount  you  require  from  |oc" 

Finally,  the  results  of  the  axst*ssment  are  communi¬ 
cated  to  all  concerned  panies.  and  meines  for  mea¬ 
suring  the  pnijcct’s  success  are  determined. 

Gigii  offers  Ibial  fconomie  Impact  atv-ssmerUs  as 
a  consulting  serx  ice  or  will  train  busirw-s-ws  to  per¬ 
form  their  own  assessments.  A  full  eng;»gement  laks-s 
four  weeks  or  more,  depending  on  scope. 

Strength:  Takes  flexibility  and  risk  —  nujor  factors  in 
real-vsorid  divi-sion-making  —  into  consideration. 
Weakness:  la  some  companies,  ihirsc  adJiiion.si  ivn- 
siderations  may  dilute  the  K(t|  nu-xs.igc. 

Total  Value  of  Opportunity 

Total  Value  of  Opportuniiv 
(T\’i))  is  a  nwih*Hlologx 
based  on  the  (Partner  Busi¬ 
ness  IVrforfn.inci’  Frame¬ 
work.  the  comparn’s  of 
busme.s.s  meirii's.  (iariner  analyst  Audrc>-  Apfel 
claims  itwi’s  an  imponani  differcnluitor  "ttcncTie 
KOI  eases  lend  to  go  right  fn*m  geekspeak  10  finan¬ 
cial  numbers,  .mJ  that’s  ohi  big  a  leap."  she  says. 

T\’( )  is  available  xs  a  Web-base‘d  softwaa*  package, 
with  full  iraining-and-eonsiiltingiMninwis  optional. 
To  get  waned,  a  businc^ss  uses  Gartner’s  business 
metrics  to  dciermiiR'  what  opportunities  an,*  avail¬ 
able  and  translates  tht-m  into  standard  business 
terms  such  as  on-iime  delivery,  bill  rate,  market 
share  and  sales  cU»se  index.  One  of  1VO's  strengths 
i.s  that  this  iran.slation  —  which  is  wlicrc  maov  ef- 
fons  founder  —  is  laid  out  in  evmiebttng.  sler>-by- 
step  detail,  eliminating  ambiguity. 

Airother  1’VO  differentiator  is  the  M»ftwarv’s  diag¬ 
nostic  eapabtltty,  which  weighs  such  qualitative  Cic- 
lors  as  the  company’s  IT  projevt  historv.  "Lots  of 
clients  tell  us.  ’Wc  have  a  great  ROl  pnnvss.  we  run 
decisions  past  our  account.-ints  —  and  then  we  gi>  t>n 
our  gut  feeling.’ "  sajs  Apfel.  "Wc  tried  10  make  ih.ic 
gut  feeling  visible." 

Strength;  Specific  uistruciions  can't  be 
Aimnuc  fudged,  so  results  should  be  accurate. 

RlAL  options  WeaJmess:  May  add  a  level  of  ixvmplexiiy 

ThctTROlmoiJd  that  n»eat-and-pot.nttH's  executives  won’t 

chvnpionea  by  CoRaboralsv  welcome.  I 
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Where  ROI 
Mo^l^l 

The  models  don’t  measure  ITs 
soft  benefits,  such  as  customer 
service.  By  TTiomas  Hofiman 


Now  THAT  COST  IS  KING. 

more  IT  executives  are  rely¬ 
ing  on  standard  accounting 
methodolc^ies  such  as  net 
present  value  (NPV)  and  in¬ 
ternal  rate  of  return  (IRR)  to  cost-ius- 
tily  IT  investments  to  top  brass.  Some¬ 
times  they’re  usii^  the  models  because 
the  rest  of  the  company  is  doing  it. 

IT  leaders  "should  adopt  what  the 
business  adopts,  and  that's  fine  if  that’s 
how  the  organization  wants  to 
view  the  numbers."  says  Audrey 
Apfel,  an  analyst  at  Gartner  Inc 
in  Stamford.  Conn. 

Problem  is.  say  Apfel  and  other 
pundits,  retum-on-investinent  models 
are  usually  incomplete  and  don’t  re¬ 
veal  as  much  as  they  should  about  in¬ 
tangibles  such  as  an  investment’s  im¬ 
pact  on  employee  productivity,  sales  or 
customer  satisfaction. 

"ROI  models  fail  because  they  be¬ 
come  overly  complmt,"  adds  Stephen 
Andriole,  an  MIS  professor  at  Vlllano- 


Three  Problems 

flragor  Bilw.  OO  #  Ms  Ownh.  Vh.-bn«i  Ci^lal  One  Rneneiai 
uirp„  Mpe  IN  RMMMnQ  ^PMSene  Mgnpi  mrae  Big  praoMme  wm 
mini  a  lii^  ftMMW  oIbiMIm.  Mch  a  NPV,  to  lutty  Md  track 
i»  kaefti  ef  a  IT  inmikmnt 

1  Hwrdoa  the  compayankiBBt  the  Bgaa?  For  example,  does  a 
company  iaclor  ri  depastion  costs  for  software? 


2  Ca  PM  lie  ■  praductMly  improvement  dkBctly  beck  to  a  IT 

inveetment?  instance.  If  there’s  a  10%  boost  ki  sates  irom  a 
direct-fiaketing  campratpi.  to  what  extent  was  that  caused  by  IT? 


3  Who’s  eecwntable?  In  some  ways,  it  doesnl  matter  what  calcula¬ 
tion  you  use.  What  matters  is  who’s  accountable  for  the  invesbnent 
and  who’s  responsible  tor  tracking  it.  Bailar  says. 


va  University  in  Villairava,  Pa.,  and  a 
senior  consultant  for  the  Cutter  Con¬ 
sortium  in  Arlington.  Mass. 

Andriole,  who  has  held  senior  IT 
positions  at  Cigna  Corp.  and  Safeguard 
Scientifics  Inc.,  says  that  there  are 
roughly  IS  fmancial  calculations  that 
CIOs  can  use  to  tally  ROI.  "and  that’s 
part  of  the  problem  —  the  more  com¬ 
plicated  the  method,  the  more  you 
have  to  feed  the  method  rather  than 
working  the  project" 

That’s  why  Andriole  leans  toward 
the  use  of  more  simplified  ROI  tech¬ 
niques.  such  as  payback. 

"At  Cigna,  we  had  all  these  compli¬ 
cated  ways  of  collecting  the  data,  with 
five  people  coUectii^  data.  And  I  said. 
‘Whoa,  wouldn’t  it  be  more  effective  to 
have  three  of  those  people  actually 
working  on  the  project  and  just  two 
people  collecting  the  data?*  * 

Capturing  Soft  Gains 

ROI  models  also  aren't  well  suited  to 
capturing  soft  benefits,  such  as  cus¬ 
tomer  satisfaction  or  employee  pro¬ 
ductivity  gains. 

"If  you  reach  a  customer  on  the  sec¬ 
ond  ring  instead  of  the  third  ring,  how 
do  you  capture  that?  Are  they  more 
profitable?  Are  they  happier? 
The  human  factor  of  computer- 
assisted  work  is  neglected  by  the 
ROI  model"  asserts  John  Jordan, 
a  principal  at  Cap  Gemini  Ernst 
&  Young  in  Cambridge,  Mass. 

Further.  ROI  calculations  typically 
^  to  include  the  complexity  costs  as¬ 
sociated  with  adding  a  new  application 
—  such  as  additional  hardware,  storage 
or  WAN/LAN  equipment,  and  support 
personnel  —  to  an  FT  infrastructure, 
says  Jordan.  That’s  one  reason  he  ad¬ 
vocates  asking  another  question: 
What's  the  cost  of  doing  nothing  vs. 
the  cost  of  making  an  IT  investment? 

Jordan  paints  the  following  scenario: 
An  IT  manager  is  faced  with  buying 
five  Unix  servers  in  order  to  add  new 
services  to  his  company’s  Web  site. 

The  consideration  isn’t  "just  the  hard¬ 
ware  that  you  buy  but  the  business  ca¬ 
pability  you  achieve  in  three  ureeks  in¬ 
stead  of  three  months,”  be  explains. 
"That  kind  of  thinking  is  hard  to  put  a 
dollar  value  on." 

The  problem  with  relying  solely 
upon  fliumcial  techniques  such  as 
NPV  or  IRR  “is  that  they  don’t  neces¬ 
sarily  capture  all  of  the  business  bene¬ 
fits  an  IT  investment,  nor  do  they 
help  to  evaluate  all  of  the  options  t^t 
are  open  to  you,”  says  Chip  Gliedman, 
an  analyst  at  Giga  Information  Group 
Inc  Giga  recommends  that  CIOs  use 
options  models,  decision  trees  and 


H  We  have  some 
areas  where  we 
use  metrics  to  measure 
[busbies  returns].  But 
in  some  bistances,  we 
have  to  go  on  faith. 
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other  tools  "to  try  to  quantify  and 
communicate  the  value  of  those  op¬ 
tions  and  the  value  of  that  QexibUity." 

Take  a  company  that’s  about  to  in¬ 
stall  a  new  application  that  requites  a 
two-processor  server.  You  have  two 
options,  says  Gliedman:  "You  can  buy  a 
two-processor  server  or  a  16-processor 
cabinet  and  put  two  processors  in  it 
Tbe  first  option  has  hi^er  immediate 
returns,  but  tbe  secoiMi  gives  you  tbe 
option  to  put  additional  processors  in 
as  they’re  needed." 

A  Computerworidxom  stirvey  indi¬ 
cates  that  it’s  common  to  try  to  calcu¬ 
late  ROI  for  IT  projects.  Most  of  tbe 
113  IT  managers  responding  to  last 
month’s  survey  said  their  IT  organiza¬ 
tions  do  some  son  of  ROI  calculation 
for  major  projects;  only  6%  said  they 
do  no  ROI  calculations  at  all 

But  about  half  (4B%)  of  the  respon¬ 
dents  agreed  with  tbe  statement  that 
"sometimes  ROI  calculadcms  are  a 
good  idea,  and  sometimes  they’re  iMt” 
(see  chan,  page  40).  Many  IT  organiza¬ 
tions  go  to  tbe  trouble  of  doing  the  ROI 
math  only  for  really  expensive  projects. 

Sometimes,  financial  justifications 
have  to  be  tossed  aside  when  an  IT  in¬ 
vestment  simply  makes  good  business 
sense,  some  IT  executives  say. 

As  (general  Motors  Chief 
Tecimoiogy  Officer  Tony  Scott  put  it. 
"We  have  some  areas  where  we  use 
metrics  to  measure  [business  returns]. 
But  in  some  instances,  we  have  to  go 
on  faith.”  I 


cmniuuNWEWS 

John  Jonhft  ol  Cap  Geniini  Emsi  &  Ybung  has  written 
a  paper  on  why  ROI  models  often  lal.  For  a  ink  to  that 
paper.  Wat  otf  Mb  sfte: 
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Forget  ROI 

A  CARTOON  IN  A  RECENT  ISSUE  of  The  New  Yorker  depicts  the  classic  scene 
of  a  father  sitting  in  a  chair,  looking  over  the  report  card  his  young  son  has 
handed  him.  The  father  says,  “They  may  be  your  grades,  but  they’re  the  re¬ 
turn  on  my  investment.”  CIOs  are  hearing  similar  sentiments  when  they 
face  their  CEOs,  perusing  a  list  of  corporate  IT  projects. 

It's  a  lot  less  funny  but  at  least  as  silty. 

Because  just  as  no  child's  education  can  be  seen  strictly  through  the  narrow  prism 
of  “investment,”  IT  operations  can’t  be  judged  solely  on  hard  numbers.  Anyone  who 
tells  you  otherwise  isn’t  seeing  the  big  picture. 


If  you're  iumping  through  ROI  hoops 
for  every  IT  project  on  your  white¬ 
board  these  days,  you're  wasting  your 
time.  It  may  sound  ironic,  but  the  sim¬ 
ple  truth  is  that  there's  no  ROI  in  ana¬ 
lyzing  the  ROI  on  everything.  At  the 
risk  of  being  labeled  a  blasphemer.  1 
suggest  you  rid  yourself  of  the  ^cy- 
schmancy.  spreadsheet-happy  blather 
of  ROI  gurus  and  use  your  own  wis¬ 
dom  to  evaluate  IT  projects. 

If  it  makes  sense  to  you,  do  it.  If  not. 
don't  You  know  the  business.  You 
know  the  technology.  You  know  your 
crew.  You  know  your  budget.  You  know  if  it’s  fea¬ 
sible  or  not.  What  else  do  you  need?  A  report  card 
for  Dad?  I  think  not. 

I'm  not  saying  that  just  because  you’ve  got  a 
lofty  C-level  title  and  a  few  years  in  the  industry, 
you  can  fly  by  the  seat  of  your  pants.  But  who 
knows  better  which  projects  have  been  well  con¬ 
ceived.  which  are  half-baked  and  which  deserve 
never  to  see  the  li^t  of  day?  If  you  can't  make 
that  call,  you  should  look  for  another  job. 

After  all,  your  company  depends  on  progress  to 
succeed,  and  you’re  In  charge  of  systems  tl^t  sup¬ 
port  that  progress.  Your  company’s  success  is  ut¬ 
terly  dependent  on  smart  people  like  you  who 
take  risks.  In  a  best-case  scenario,  an  ROI  analysis 
is  a  stall  tactic  for  undeserving  projects.  Worst 
case,  it’s  a  rationalization  for  undeserving 
projects.  In  effect,  ROI  analyses  justily  rejections 
to  division  managers  or  failures  to  stockholders 
and  venture  capitalists. 

ROI  activity  is  risk-averse.  That  makes  it  ideal  in 
an  era  when  CEOs  are  listening  to  their  lawyers  and 
accountants  more  often  than  they're  listening  to 
their  CIOs,  CTOs  and  VPs  of  engineering.  If  you're 
a  of  the  Lord  of  the  Rings  saga,  you'll  know  what 


I  mean  when  I  say  that  Wormtongue 
—  the  master  of  calculating  the  virtue 
of  caution  to  the  point  that  opportuni¬ 
ties  are  lost  —  is  the  master  of  ROI. 
Meanwhile,  Gandalt  the  advocate  of 
risk  and  a  wizard  who  rules  over  what 
passes  for  progress  in  Middle  Earth, 
intuitively  understands  a  situation  and 
knows  when  to  act 
The  best,  most  innovative  IT  im¬ 
provements  have  no  ROI.  There  was 
no  decent  ROI  on  installing  the  first 
Wang  word  processor  in  the  1970s  or 
the  first  PC  to  run  ^iCalc  in  the 
1980s  or  the  first  Linux  server  for  corporate  Web 
sites  in  the  1990s, 

But  the  people  who  took  those  risks  pushed 
their  companies  ahead  of  their  competitors  and 
made  working  there  better,  improving  the  lot  of 
their  employees  and,  most  likely,  attracting  more 
talented  individuals  who  brou^t  even  more  pro¬ 
gressive  ideas  with  them.  If  we  let  the  ROI  Worm- 
tongues  rule  the  day.  this  decade  will  never  see  an 
analogue  to  the  technological  achievements  of 
past  decades. 

The  best  CIOs  understand  the  political  neces¬ 
sity  of  living  through  the  latest  management 
craze.  ROI  is  the  trendiest  of  the  lot  today,  so  you 
know  it  will  be  tough  to  stand  firm  against  the  ris¬ 
ing  tide  of  ROI  demands.  And  I  suspect  that  many 
of  you  won't  be  able  to  avoid  havii^  to  submit  one 
mind-numbing  report  after  another. 

But  when  everyone  jumps  off  the  ROI  bandwag¬ 
on,  y^nir  company  will  still  need  to  depend  on 
your  instincts,  knowledge  and  experience.  Those 
attributes  got  you  where  you  are  today,  and  they, 
not  ROI  theory,  will  be  the  basis  for  the  best  IT 
decisions  you  can  make.  Because  wisdom  can’t  be 
reduced  to  an  ROI  calculation.  I 
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The  Almanac 


An  eclectic  collection  of  research 
and  resources.  Mitch  Betts 


Beware  of  Fuzzy  Math 

When  Computerwotid  conducted  an 
online  survey  on  IT  retum-on-invest- 
ment  techniques  last  month, 
one  of  the  more  interesting 
comments  we  got  was  this: 

“Many  times,  investments  are 
gambles  into  where  the  busi¬ 
ness  is  going  and  ROI  (calcula¬ 
tions]  are  fabricated." 

Indeed,  we  continue  to  get  re¬ 
ports  of  ROI  numbers  that  have 
been  fudged  in  order  to  get  IT 
expenditures  approved.  “It  hap¬ 
pens  all  the  time,"  says  Amir 
Hartman,  co-fotmder  of  Main¬ 
stay  Partners  LLC,  a  management  con¬ 
sultancy  in  Redwood  City,  Calif.  Oflice 
politics,  time  pressures  and  less-than- 
rigorous  ROI  processes  can  lead  to 
cooked  numbers.  ‘The  project  sponsor 
will  get  a  call  from  his  boss  saying  be 
needs  an  ROI  number  next  week.  That 
broken  process  drives  the  bad  beha\'- 
ior,"  says  Craig  LeGrande,  Mainstay’s 
other  co-founder. 

One  CIO  quipped,  "As  we  say  in  IT.  I 
don't  believe  in  any  numbers  I  haven't 
massaged  myself." 


On  the  ROI  Bookshelf 

■  Tb$Aignamat£ffKtHimloO«t/i»al 

BuakmM  Mua  Arfof  TacAnoibgy.  by  Faisal 

Hoque  (Financial 
Times  Premice  Hall. 
2(X)2).  Advocates  a 
slep-by-st^  "business 
technology  manage¬ 
ment"  methodology 
fcr  gening  the  busi- 
processes  and  IT 
alignment  —  before 
money  is  spent 
H  Jha  Kakiitfon 
J  ntaben  Tadmohm,  by 

_  Christopher  Gardner 

(John  Wiley  6e  Sons, 
2000).  Describes  bow  to  perform  the 
financial  calculations  to  make  sure  that 
IT  produces  shareholder  value. 

■  ttanagaLT^  by  Joe  Santana  and  Jim 
Donovan  (Lah^ka  Publishing.  2002). 
Chapter  2  teaches  newbie  CIOs  how  to 
get  business  and  IT  in  aligiunent. 
BRtaoh/IMikigfT:ThaJUtdUsaigMor’ 
/nation  Tadmology^cthtaly.  by  David  H. 
Andrews  and  Kenneth  R.  Johnson  (Wi¬ 
ley.  2002).  Explains  how  to  prevent  IT 
project  &iiures. 

u/tdiiaidngBiainasaVakieFromTach- 
notogr.  by  Tony  Murphy  (Wiley.  2002). 
A  Gartner  Inc.  consultant's  executive 
guide  CO  identifying,  tracking  and 
achieving  business  benefits  from  IT. 

Four  New  IT  Lieutenants 

Most  IT  management  stafis  "are  a 
kludge  of  unstructured  hirings,  promo¬ 
tions  and  compromises."  says  Jonathan 
Poe.  an  analyst  at  Meta  Group  Inc. 
Therefore,  new  CIOs  who  want  to  suc¬ 
ceed  past  their  honeymoon  period  will 
need  to  clean  up  the  mess  and  install  a 
team  of  talented  FT  lieutenants  to  han¬ 
dle  certain  tasks,  such  as  personnel 
matters,  so  the  CIO  can  focus  on 
rr/business  alignment. 

Poe  says  the  new  IT  organizational 
chart  will  have  four  lieutenants: 

■  Tht  flipntailionil  dMilo|Miiial  laadv,  a 
"chai^  agent"  who's  in  charge  of  con¬ 
stantly  updating  the  IT  department's 
mission,  vision  and  values. 


■  The  IT  human  reeourcas  manager,  who 
handles  recruiting,  “reskiiling,"  pro¬ 
motions.  performance  evaluations, 
compensation  analyses  and  employee 
satisfaction. 

■  The  rr  financial  controller,  who  deals 
with  budgets  and  depreciation,  man¬ 
ages  portfolios  and  risk,  and  measures 
ROI  and  total  cost  of  ownership. 

•  The  IT  communications  (firector,  who 
makes  sure  the  IT  shop  sends  clear 
and  consistent  messages,  from  market¬ 
ing  materials  to  status  reports. 

Usability  Has  Big  Payoff 

It  makes  sense  that  Web  sites  that  are 
easier  to  use  have  a  bigger  payoflf  than 
ones  that  aren't.  Now  comes  research 
on  the  ROI  of  Web  site  usability  to 
back  up  the  notiort 

A  study  of  42  e-commerce  sites  that 
were  redesigned  for  better  usability 
found  that  the  sites  had  a  100%  in¬ 
crease  in  the  sales  conversion  rate,  a 
150%  increase  in  traffic,  a  161%  in¬ 
crease  in  user  performance  and  a 
202%  increase  in  the  use  of  specific, 
desired  features. 

TTie  research  was  done  by  usability 
guru  Jakob  Nielsen  at  Nielsen  Norman 
Group  in  San  Francisco.  Nielsen  says 
he  was  pleased  to  see  chat  the  redesign 
projects  allocated  an  average  10%  of 
their  budgets  for  usability  improve¬ 
ments  —  up  from  6%  in  an  earlier 
study  —  but  be  says  it  should  be  even 
hitler.  I 


Software  costs  are 
the  most  misundor- 
stood,  poorty  man¬ 
aged  costs  within  IT  organiza¬ 
tions.  Good  software  asset 
management  must  begin  with 
cost  modeling  to  identify  the 
long-term  costs  and  possible 
risk  exposure  associated  with 
licensing  software.  Contract¬ 
ing  for  software  entails  more 
peril  than  IT  commodity  Hems, 
yet  we  continue  to  see  IT  or¬ 
ganizations  -  and  nwre  oftan, 
project  teams  -  fall  for  vendor 
hype,  wHh  negative  resuHs. 
The  importance  of  cost  mod¬ 
eling  cannot  be  understated. 

In  these  lean  economic  times, 
locked-in  software  costs  can¬ 
not  be  reduced,  which  pre¬ 
vents  effective  cost  control. 
Our  research  continues  to  in¬ 
dicate  that  more  than  70%  of 
software  cost  models  fail  to 
illustrate  the  total  economics 
of  software  acquisition. 

-  W0iam  Snyder,  analyst, 
Meta  Group  inc.  Novetri>er2002 
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The  Next 
Chapter 

Predictions:  Wall  Street  analysts 
will  start  tracking  corporate  FT 
investments.  And  CIOs  will  find 
their  pay  linked  to  delivering  ROI. 


■  WUX  STREET  CAItES 

Executives  of  public  corporations  will 
begin  disclosing  large  capital  invest¬ 
ments  as  parr  of  their  quarterly  analyst 
calls  by  end  (^2003.  By  the  end  of 
2004, 30%  of  IT  spending  will  have  to 
pass  a  board  of  directors'  capital- 
approval  process. 

■  Craig  leCrande,  co-founder  and  nuzn- 
aging  director.  Mainstay  Partners  LLC, 
Redwood  City,  Calif. 


■  VENDOR  CALCUUTORS 

ROI  is  here  to  stay.  Chief  financial 
ofikers  are  pleas^  with  the  structure 
it  brings  to  IT  deci^n-making.  and 
CIOs  can  finally  sleep  well  at  night 
knowing  they  can  prove  the  value  of 
their  decisions.  But  during  the  next 
12  months,  we'll  see  the  death  of  the 
automated  ROI  calculators  horn  ven¬ 
dors.  They're  )ust  sales  tools  that  few 
people  trust 

■  ion  Campbell,  chirf research  o|^cer. 
Nucleus  Research  Inc,  Wellesley.  Mass. 


a  COMPENSATION  LINKED 

CIOs  and  other  IT  executives  will 
find  their  compensation  directly 
linked  to  their  ability  to  provide  ROI 
to  their  companies,  using  a  complex 
formula  that  monitors  effectiveness 
and  efikiency.  The  formula  will  take 
into  account  the  complexity  of  a  com¬ 
pany's  operations,  how  qukkly  the 
company  and  its  market  are  changii^ 
and  how  well  the  IT  organization  has 
been  able  to  address  the  needs  of  the 
business. 

■  Bruce  Barlag,  president.  The  Hackett 
Group,  Atlanta 


■  ROI  MYOPIA 

Clients  say  they  can't  do  any  profects 
that  don't  provide  a  payback  within 
one  year.  And  look  at  their  IT  invest¬ 
ment  portfolios  —  they  have  a  lot  of 
small  prefects  that  result  in  incremen¬ 
tal  improvements.  The  breakthrough 
stuff*  of  real  competitive  advantage 
is  gone.  ROI  is  a  great  discipline  for 
cutting  costs,  but  we're  in  danger  of 
developing  ROI  myopia  and  missing 
opportunities  to  grow  revenue  and 
market  share. 

■  EUeen  Bitge.  vice  president.  The  Con- 
cours  Group,  Kingwood,  Jtocas 


■  FMANCIALPENAL'nES 

CIOs  and  vendors  will  begin  to  truly 
collaborate  on  ROI  analysis  —  aiui  tie 
compensation  to  achieving  financial 
returns  by  hammering  out  ROI 
service-level  agreements.  If  vendors 
fall  ^ort  in  meeting  the  SLAs,  they'll 
be  asked  to  make  corrections  or  suffer 
financial  penalties  for  continued  All¬ 
ure.  On  the  flip  side,  suppliers  who 
substantially  exceed  the  benchmark 
will  be  able  to  extract  benefits  like 
additional  revenue,  testimonials  and 
other  marketing  support. 

■  Tom  PiseUo,  president  and  CEO, 
AlineanLlC,Oriaruio 


■  CRM  TRENDS 

Customer  relationship  management 
prolects  will  experience  the  following 
trends  in  the  next  few  years:  'Hiey’ll  be 
smaller,  more  focused  and  self-funded 
from  cost  savings  or  new  revenue.  ROI 
metrics  will  be  geared  to  specific  ver¬ 
tical  industries,  such  as  the  automo¬ 


tive.  financial  services  and  pharma¬ 
ceutical  industries,  instead  of  being 
generic.  And  the  goal  of  many  CRM 
projects  will  be  to  identify  the  most 
profitable  customers  vs.  the  low-value 
customers. 

■  AdamKlaber.gl(d>aHeader 
for  CRM,  IBM  Business  Consulting 
Services,  New  York 


■  LOW-TGCHClOS 

It’s  ironk  that  finance  departments 
routinely  use  sophisticated  tedmologi- 
cal  modeb  to  manage  risk  and  value 
mvestment  portfolios,  but  IT  depart¬ 
ments  have  not  seriously  applied  fi¬ 
nancial  modeling  techniques  to  assess 
the  true  value  of  IT  projects.  That  will 
change  in  a  few  years. 

■  Ray  7h)Cta  and  Chris  Gardner, 
co-founders,  i  Value  LLC.  New  York 


■  YIABKJTY  CHECK 

Wall  Street  analysts,  ratir^  agencies 
and  banks  will  begin  usii^  an  evalua- 
tioD  of  IT  ROI  as  they  determirre  a 
company's  viability.  Its  future  pros¬ 
pects.  the  credibility  of  its  forecasts 
and  its  ability  to  deliver  customer  and 
shareholder  value. 

■  David  Axson,  managing  director. 

77te  Hodeert  Group 


■  CULTURE  COUNTS 

By  the  year  2007, 90%  of  companies 


will  budget  for  the  cost  of  culture 
change  artd  factor  that  into  the  RO! 
equation.  Con^anies  will  no  longer 
turn  a  blind  eye  to  having  billions  of 
dollars'  worth  of  technology  sitting  un¬ 
used  in  closets  due  to  "adoption  resb- 
tance"  by  people  to  the  coaqrany. 

■  Joe  Santana,  co-author  of  Manage  I.T 
(Lahaska  Publishing,  2002) 


■  VISUAL  M0DELJN6 

Company  executives  must  fmd  a  way 
to  shonen  the  gap  between  an  ROI 
prognostkation  and  the  actual  out¬ 
come.  In  three  to  five  years,  visual 
modeling  will  gain  mmnentum  as  a 
way  to  improve  the  accuracy  of  ROI 
forecasts.  Information  captured  in  the 
upfront  design  of  an  IT  initiative  will 
provide  critical  underlying  data  about 
tangibles  and  intaitgibles,  which  will 
make  ROI  calculations  more  in  sync 
with  ^^t  actually  pans  mit 

■  ftitsal  Hoque.  president  and  CEO. 
Enamics  Inc..  Stanford.  Conn. 


■  PORTFOUOTRACKINe 

Low  returns  on  large  oqiital  invest¬ 
ments  will  stimubte  the  use  of  port- 
folio-tracking  software  for  IT  invest¬ 
ments.  That  will  boost  the  market  for 
project  and  portfolio  management 
software  by  up  to  15%  in  2003. 

■  Sanjeev  AgrawoL  cotfounder  and 
managirtg  director.  Mainstay  ParTTKrs 
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Contimied  from  page  1 

iSCSI 

with  iSCSI  over  die  same 
wire."  said  Bryce  Mackin. 
cfaainnan  of  marketing  for  the 
IP  Storage  Fonun  in  the  Stor¬ 
age  Networidng  Industry  As¬ 
sociation.  a  trade  group  in 
Mountain  View,  Calif. 

Joe  Bishop,  a  database  sys¬ 
tems  engineer  at  NASA's  Jet 
Propulsion  Laboratory  in 
Pasadena.  Calit,  said  the  lab 
plans  to  install  an  iSCSI  net¬ 
work  within  the  next  30  days 
or  so.  It  will  use  an  ISCSI  soft¬ 


ware  kit  ftoin  Network  Appli¬ 
ance  Inc  that  is  being  an¬ 
nounced  today.  Tbe  iSCSI  pro¬ 
tocol  upgrade  for  NetApp's 
800  and  900  scries 
arrays  is  free 

The  networic  will 
be  used  to  back  up 
Sun  Solaris  servers, 
whkh  hold  fU^t. 
financial  and  proj¬ 
ect  management  data  in  Ora¬ 
cle  databases,  to  network- 
attached  storage  devices  made 
by  NetApp. 

‘^e  want  fail-over  capabili¬ 
ty  between  buildings  on  our 
campus,*  Bishop  said.  By  us¬ 


ing  iSCSI,  tbe  lab  can  take  ad¬ 
vantage  of  its  existii^  IP  net¬ 
work  and  avoid  tbe  need  to  in¬ 
stall  new  cabling,  be  added. 

Joe  Smeker.  a 
network  coordi¬ 
nator  at  Safeco 
Corp..  an  insur¬ 
ance  and  financial 
services  company 
in  Seattle,  said  be 
plugged  in  a  1.5TB  ISCSI  array 
in  November  to  offload  data 
from  three  Cmnpaq  Proliant 
servers  that  were  using  about 
90%  of  their  stor^  ^ace  at 
the  time.  Tbe  array,  made  by 
San  Diego-based  IP  SAN  ap¬ 


pliance  start-up  StoneR)'  Net¬ 
works  Inc.,  cost  S2S.000  and 
took  just  one  hour  to  install 
Stocker  said. 

Althou^  be  doesn't  think 
iSCSI  technology  is  robust 
enmi^  for  large  server  envi¬ 
ronments.  Stocker  noted  that 
the  technology  suited  his  pur¬ 
poses  perfect.  For  example. 
iSCSI  required  no  additional 
network  configuration  work 
or  IT  training  expenditures,  as 
Fibre  Channel  technology 
would  have,  he  said. 

It  will  take  time  for  iSCSI  to 
mature  into  an  enterprise- 
class  storage  technology,  said 
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Datacenter 

Under  the  current  Datacen¬ 
ter  program.  OEMs  are  respon¬ 
sible  for  rigorously  testing  a 
complete  hardware  and  s^- 
ware  configuratioo  —  wluch 
typically  includes  a  server,  op- 
eratmg  system,  attached  stor¬ 
age,  storage  backup  utility  and 
antivirus  software  —  to  ensure 
that  H  will  provide  tbe  sort  of 
relialnlity  and  performance 
customers  expect  from  bigb- 
end  systems.  Tbe  test  configu¬ 
ration  must  run  for  M  days 
without  a  failure. 

Under  tbe  new 
program,  Micro¬ 
soft  has  stream¬ 
lined  tbe  process 
so  low-Irral  com¬ 
ponent  changes 
can  be  tested  more  quickly 
and  reliably.  Drivers  or  appU- 
catioa  compooeots  such  as  an¬ 
tivirus  programs  and  backup 
utilities  can  be  tested  in  as  &- 
tie  as  one  day.  once  they  have 
been  certified  through  Veri- 
Test.  the  testing  arm  of  Lion- 
bridge  Tbehnotog^  Inc.  in 
Waltham,  Mass. 

Bob  Crownhait.  an  IT  direc¬ 
tor  at  Premera  Blue  Cross  in 
Mountiake  Terrace.  Wash, 
said  tbe  new.  streamlined 
process  could  help  his  compa¬ 
ny.  He  recalled  a  case  in  wltich 
Premera  wanted  to  shift  to  a 


new  driver  level  only  to  learn 
that  Unisys  Corp.  hadn’t  certi¬ 
fied  It  yet  Consequently.  Pre¬ 
mera  had  to  make  sure  Unisys 
and  the  other  vendor  booked 
up  to  work  out  tbe  issue.  *lt 
was  aggravation  and  delays.” 
Crownhart  said. 

But  tbe  new  certification 
policy  won't  help  every  cus¬ 
tomer.  Koeodie  said  he  was 
considering  five  storage  ven¬ 
dors.  but  of  those,  only  EMC 
Coip.’s  had  been  included  in  a 
configuration  that  Unisys  had 
tested.  He  recalled  that  be  was 
once  given  a  price  tag  of  more 
than  $100,000  to  test  a  cooflg- 
uration  that  dif¬ 
fered  from  tbe 
ooe  Unisys  had 
tested,  though  be 
was  able  to  nego¬ 
tiate  his  way  out 
of  paying  it 

Bob  Ellsworth  director  of 
Microsoft's  Windows  server 
product  management  group, 
acknowledged  that  substitu¬ 
tions  of  major  components 
like  storage  subsystems  in  a 
Datacesfer  configuration  will 
still  require  the  U-day  retest 
*Ib  address  that  Koeneke 
wants  Microsoft  to  come  up 
with  a  set  of  predefined  stan¬ 
dards  for  vendors  to  adiieve 
Datacenter  cettifkatioa 
Ellsworth  said  Microsoft  has 
heard  that  suggestkin  from 
some  customers  but  isn't  yet 
ready  to  support  that  kind  of 


change.  *lt's  something  that 
we're  investigating.*  he  said. 

Tony  lams,  an  analyst  at 
Dii.  Brown  Associates  Inc.  in 
Port  Chester.  N.Y..  predicted 
that  the  program  changes  will 
make  H  easier  to  certify  prod¬ 
ucts  on  Datacenter,  ther^ 
making  more  systems  avail¬ 
able  to  customers.  That,  in 
turn,  might  spur  more  Data¬ 
center  usage,  be  said. 

Another  change  that's 
catching  tbe  attention  of  some 
customers  is  the  set  of  new 
support  options  that  wOl  take 
effect  April  24.  with  tbe  re¬ 
lease  of  Windows  Server  2003. 
OEMs  will  DO  longer  be  tbe 
only  dioice  for  support  In¬ 
step.  users  will  gain  the  op¬ 
tion  to  cmitract  for  support 
from  reselleis,  systems  inte¬ 
grators  or  MicrcMoft 

Customers  that  have  pre¬ 
mier  support  contracts  with 
Microsoft  will  gain  tbe  benefit 
of  having  Datacenter  as  an  in¬ 
cluded  prodttet  But  they  will 
need  a  separate  registration  if 
they  want  access  to  Micro¬ 
soft's  Hi^  Availability  Reso- 
hitioo  Queue,  a  24-bour  direct 
hot  line  to  engineers  who  can 
solve  their  problems. 

Pricing  hasn't  been  an¬ 
nounced  for  tbe  high-availabil¬ 
ity  resolutkm  program,  which 
is  an  expansion  of  the  existing 
Joint  Support  Queue. 

Under  tbe  current  system, 
OEMs  are  supposed  to  serve 


as  the  single  point  of  contact, 
coordinating  support  among 
tbe  various  vendors  that  touch 
tbe  Datacenter  system.  It  re¬ 
mains  to  be  seen  bow  the  new 
system  will  out.  since 
some  early  adopters  don't  ap¬ 
pear  to  be  following  the  exist¬ 
ing  program's  procedure  for 
requesting  support. 

Larry  Codec.  CIO  at  Fust 
American  Utle  Insurance  Co. 
in  Santa  Ana,  Calif,  said  he  al¬ 
ready  gets  hi^-availabUity 
resoiutioa  When  his  company 
has  problems,  h  calls  Micro¬ 
soft,  which  has  *iumped 
through  hoops*  to  raotve 
them,  be  said  Codec  said  his 
company's  OEM.  Unisys,  was 
mentioned  as  the  stn^  pc^ 
of  contact  during  a  couple  of 
conversations,  but  Microsoft 
didnl  balk  in  helping  out 
when  called  first 
Koeneke.  too.  said  he  isn't 
shy  about  going  directly  to 
Unisys,  Mkroaoft  or  his  com¬ 
pany’s  storage  vendor.  Hew¬ 
lett-Packard  Co,  with  prob¬ 
lems.  He  said  be  cant  imagine 
going  wHh  a  consulting  orga- 
ntzatioo  for  support 
'They  aren't  in  the  engi- 
necring  team  at  Unisys,  Micro¬ 
soft  or  HP.*  he  said  ‘'Microsoft 
is  going  CO  get  bogged  down 
with  certifying  a  bunch  of  re¬ 
scuers  of  support  tod  I  pier- 
sooally  have  yet  to  see  delivery 
on  repair  of  ^  existing  OEM 
support  provision.*  I 


mwa— BUI 

Moonil  ins  I  tes  iRORMd  t« 
lUttAV  d  WMonb  Sewer  2003: 

OQiMMam 

wvasaipMiMesrttaen 


Tony  Prigmore.  an  analyst  at 
Enterprise  Storage  Group  Inc 
in  Milford  Mass.  But  iSCSI 
wiU  eventuaUy  ftixl  its  way 
imo  data  centers  as  an  alterna¬ 
tive  to  Fibre  Channel  technol¬ 
ogy  for  some  applications,  he 
added  "We  expect  it  to  earn 
its  stripes  on  the  periphery 
and  then  over  time,  migrate  to 
elementt  of  tbe  core  infra¬ 
structure,*  he  said 

Tbe  protocol  got  off  to  a 
rou^  start  last  year  when 
IBM  stopped  development  of 
native  iSCSI  arrays  after  its  IP 
Storage  200i  appUance  met 
with  poor  sales  (Quicklink 
309601  Tbe  cooqiaDy  stiU  of¬ 
fers  tbe  2001  but  Roland  Ha¬ 
gan.  vice  presidetti  of  market¬ 
ing  for  storage  systems,  said 
that  in  the  future,  IBM  will 
likely  resell  iSCSI  devices 
made  by  ocher  vendors  in¬ 
stead  of  developing  its  own 
technology. 

Despite  IBM's  pullback, 
many  smaU  vendors  are  al¬ 
ready  shipping  iSCSI  arrays, 
switches  and  host  bus  adapt¬ 
ers.  And  industry  leaders  such 
as  Hewlett-Packard  Co,  DeU 
Computer  Corp.  and  EMC  are 
expected  to  roll  out  devices 
during  the  next  few  months. 

Another  important  mile- 
stone  wiU  be  Microsoft  Coip.'s 
release  of  iSCSI  software  dri¬ 
vers  for  Windows.  Microsoft 
said  via  e-mail  that  drivers 
should  be  avaUable  for  Win¬ 
dows  2000,  Windows  XP  and 
the  upcoming  Windows  Serv¬ 
er  2003  within  90  dayv  I 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

UCriA:  Not  Dead  Yet 

Is  UCITA  DEAD?  Nope.  True,  only  two  states  have  adopted  the 
proposed  software  licensing  law  called  the  Uniform  Comput¬ 
er  Information  Transactions  Act,  and  it’s  opposed  by  a  wide 
range  of  legal,  consumer  and  IT  organizations.  And  true,  the 
American  Bar  Association  just  washed  its  hands  of  this  “mod¬ 
el”  legislation  that’s  notorious  for  giving  software  vendors  a  green 
light  to  booby-trap  their  products  (see  story,  page  6). 

But  dead?  Don’t  kid  yourself. 


The  National  Conference  of  Commissioners 
on  Uniform  State  Laws  (NCCUSL)  has  worked 
on  UCITA  since  the  1980s.  It  was  originally 
going  to  be  part  of  the  Uniform  Commercial 
Code  (UCC),  a  set  of  standard  laws  that  make 
it  easier  for  companies  to  do  business  through¬ 
out  the  U.S.  Under  the  UCC.  laws  governing 
many  commercial  activities  are  the  same  from 
state  to  state. 

And  uniform  state  laws  relating  to  software 
licenses  would  be  good  for  software  vendors 
and  software  customers  alike  —  right? 

The  NCCUSL's  lawyers  spent  a  decade  get¬ 
ting  input  and  dealing  with  complaints  and  ne¬ 
gotiating  language.  They  did  their  best. 

But  UCITA  ended  up  heavily  slanted  toward 
the  interests  of  software  vendors.  It  was  so 
deeply  flawed  that  by  1999,  the  NCCUSL’s  part¬ 
ner  in  drafting  UCC  laws,  the  American  Law 
Institute,  refused  to  work  on  it.  Since  then, 
groups  ranging  from  the  American  Library  As¬ 
sociation  to  the  FTC.  IEEE,  the  Society  for  In¬ 
formation  Management  and  a  long  list  of  cor¬ 
porate  IT  users  have  come  out  against  it.  Its 
main  supporters  are  software  vendors. 

What’s  so  awful  about  it?  UCITA  lets  ven¬ 
dors  change  default  license  terms  at  will,  with¬ 
out  informing  customers.  And  disavow  any  re¬ 
sponsibility  for  bugs.  And  sue  a  customer  in 
any  state  of  their  choosing. 

Under  UCITA.  software  vendors 
could  booby-trap  software  so  they 
could  remotely  disable  it  if  a  cus¬ 
tomer  was  suspected  of  violating 
the  software  license. 

It's  a  bad  law.  And  today,  UCITA 
looks  dead  in  the  water.  No  state 
has  adopted  it  since  2000.  and  three 
states  have  passed  laws  that  actual¬ 
ly  block  UCITA  provisions  from  be¬ 
ing  enforced.  It  has  no  real  chance 
of  ever  offering  the  benefits  of  a 
truly  uniform  law. 

So  why  doesn't  it  just  die?  Why 


doesn’t  the  NCCUSL  junk  it  and  draft  new  soft¬ 
ware-licensing  legislation  that  could  actually 
become  law  in  most  states? 

There’s  a  clue  in  what  NCCUSL  President 
K.  King  Burnett  wrote  to  the  ABA  last  Monday: 

"After  meeting  with  many  section  officers 
and  other  leaders  oftthe  ABA]  concerning  the 
Uniform  Computer  Information  Transactions 
Act,  it  is  apparent  that  there  is  a  strongly  held 
view  among  a  number  of  sections  and  dele¬ 
gates  that  this  body  shouldn’t  take  a  position 
on  the  merits  of  UCITA.  You  are  our  friends, 
we  respect  your  views. 

“We  brought  UCITA  to  you  and  attempted  to 
present  its  merits  in  a  manner  that  befits  the 
standards  of  our  organizations.  In  this  respect, 
we  have  done  our  duty  —  we  have  no  plans  to 
bring  this  act  back  to  the  House.  Based  on  the 
recommendation  of  so  many  of  you.  we  have 
decided  not  to  ask  this  House  to  take  a  position 
on  this  act." 

He  sounds  wounded,  doesn’t  he?  His  feelings 
have  been  hurt.  He’s  done  his  duty,  tried  his 
best.  But  his  baby  has  been  rejected,  and  he 
won't  expose  it  to  further  ridicule. 

Thai’s  why  UCITA  won’t  die.  For  the 
NCCUSL,  UCITA  is  a  matter  of  pride,  of  crafts¬ 
manship.  of  history.  The  NCCUSL  has  invested 
15  years  of  work,  sweat  and  negotiation  in 

UCITA.  in  recent  years  fighting 
almost  alone  in  the  face  of  massive 
opposition.  Burnett  and  his  group 
are  too  proud  to  start  over  again. 
And  since  the  NCCUSL  holds  the 
monopoly  on  drafting  uniform 
laws,  it's  UCITA  or  nothing. 

And  that  means  it’s  nothing  — 
at  least  until  someone  persuades 
the  NCCUSL  to  swallow  its  organi¬ 
zational  pride,  start  from  scratch 
and  get  it  right. 

No.  UCITA's  not  dead.  And  we'll 
all  have  to  suffer  with  that  fact  un¬ 
til  the  NCCUSL  finally  lets  it  die.  I 
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UCriA:  Not  Dead 

Is  UCITA  DEAD?  Nope.  True,  only  two  states  have  adopted  the 
proposed  software  licensing  law  called  the  Uniform  Comput¬ 
er  Information  Transactions  Act,  and  it’s  opposed  by  a  wide 
range  of  legal,  consumer  and  IT  organizations.  And  true,  the 
American  Bar  Association  just  washed  its  hands  of  this  “mod¬ 
el”  legislation  that’s  notorious  for  giving  software  vendors  a  green 
light  to  booby-trap  their  products  (see  story,  page  6). 

But  dead?  Don’t  kid  yourself. 


The  National  Conference  of  Commissioners 
on  Uniform  State  Laws  (NCCUSL)  has  worked 
on  UCITA  since  the  1980s.  It  was  originally 
going  to  be  part  of  the  Uniform  Commercial 
Code  (UCC),  a  set  of  standard  laws  that  make 
it  easier  for  companies  to  do  business  through- 
out  the  U.S.  Under  the  UCC,  laws  governing 
many  commercial  activities  are  the  same  from 
state  to  state. 

And  uniform  state  laws  relating  to  software 
licenses  would  be  good  for  software  vendors 
and  software  customers  alike  —  right? 

The  NCCUSL’s  lawyers  spent  a  decade  get¬ 
ting  input  and  dealing  with  complaints  and  ne¬ 
gotiating  language.  They  did  their  best 

But  UCITA  ended  up  heavily  slanted  toward 
the  interests  of  software  vendors.  It  was  so 
deeply  flawed  that  by  1999,  the  NCCUSL’s  part¬ 
ner  in  drafting  UCC  laws,  the  American  Law 
Institute,  refused  to  work  on  it  Since  then, 
groups  ranging  from  the  American  Library  As¬ 
sociation  to  the  FTC,  IEEE,  the  Society  for  In¬ 
formation  Man^ment  and  a  long  list  of  cor¬ 
porate  IT  users  ^ve  come  out  against  it  Its 
main  supporters  are  software  vendors. 

What’s  so  awful  about  it?  UCITA  lets  ven¬ 
dors  change  default  license  terms  at  wiU,  with¬ 
out  informing  customers.  And  disavow  any  re¬ 
sponsibility  for  bugs.  And  sue  a  customer  in 
any  state  of  their  choosing. 

Under  UCITA,  software  vendors 
could  booby-trap  software  so  they 
could  remotely  disable  it  if  a  cus¬ 
tomer  was  suspected  of  violating 
the  software  license. 

It’s  a  bad  taw.  And  today,  UCITA 
looks  dead  in  the  water.  No  state 
has  adopted  it  since  2000,  and  three 
states  have  passed  laws  that  actual¬ 
ly  block  UCITA  provisions  from  be¬ 
ing  enforced.  It  has  no  real  chance 
of  ever  offering  the  benefits  of  a 
truly  uniform  law. 

So  why  doesn’t  it  just  die?  Why 


doesn’t  the  NCCUSL  junk  it  and  draft  new  soft¬ 
ware-licensing  legislation  that  cotild  actually 
become  law  in  most  states? 

There's  a  clue  in  what  NCCUSL  President 
K.  King  Burnett  wrote  to  the  ABA  last  Monday: 

“After  meeting  with  many  section  officers 
and  other  leaders  of  [the  ABA]  concerning  the 
Uniform  Computer  Information  Transactions 
Act,  it  is  apparent  that  there  is  a  stroi^ly  held 
view  among  a  number  of  sections  and  dele¬ 
gates  that  thi.s  body  shouldn't  take  a  position 
on  the  merits  of  UCITA.  You  are  our  friends, 
we  respect  your  views. 

“We  brou^t  UCITA  to  you  and  attempted  to 
present  its  merits  in  a  manner  that  befits  the 
standards  of  our  organizations.  In  this  respect, 
we  have  done  our  duty  —  we  have  no  plans  to 
bring  this  act  back  to  the  House.  Based  on  the 
recommendation  of  so  many  of  you,  we  have 
decided  not  to  ask  this  House  to  take  a  position 
on  this  act” 

He  sounds  wounded,  doesn’t  he?  His  feelings 
have  been  hurt.  He’s  done  his  duty,  tried  his 
best.  But  his  baby  has  been  rejected,  and  he 
won’t  expose  it  to  further  ridicule. 

That’s  why  UCITA  won't  die.  For  the 
NCCUSL,  UCITA  is  a  matter  of  pride,  of  crafts¬ 
manship,  of  history.  The  NCCUSL  has  invested 
IS  years  of  work,  sweat  and  negotiation  in 

UCITA,  in  recent  years  fighting 
almost  alone  in  the  face  of  massive 
opposition.  Burnett  and  his  group 
are  too  proud  to  start  over  again. 
And  since  the  NCCUSL  holds  the 
monopoly  on  drafting  uniform 
laws,  it’s  UCITA  or  nothing. 

And  that  means  it’s  nothing  — 
at  least  until  someone  persuades 
the  NCCUSL  to  swallow  its  organi¬ 
zational  pride,  start  from  scratch 
and  get  it  ri^t. 

No,  UCITA’s  not  dead.  And  we’ll 
all  have  to  suffer  with  that  fact  un¬ 
til  the  NCCUSL  finally  lets  it  die.  I 
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■  #1  in  a  series:  PROOF  NOT  PROMISES 


EMC  makes  promises. 
Veritas  offers  visions. 

And  Softek  delivers 
“the  most  storage 
management  for 
the  IT  buck:’ 


“The  experts  believe  [Softek**] 

Storage  Manager  gives  users  the 
most  management  for  their  IT 
buck,”  said  Storage  Magazine  and 
SearchStorage.com.  That’s  why 
they  awarded  Softek  Storage 
Management  Product  of  the  Year. 

Softek  Storage  Manager  is  the 
only  true  heterogeneous  policy-based  storage  management 
solution  enabling  companies  to  simplify  and  optimize  their 
multi-vendor  storage  infrastructures.  The  results  of  using 
Softek's  automation  solutions  are  greater  application 
availability,  more  productive  staffs  and  better-utilized  storage. 
In  fact,  Softek  guarantees  a  50%  improvement  in  storage 
utilization  or  the  software  is  free.  To  learn  more,  go  to 
www.softek.fujitsu.com. 
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Enterprise  Storage  Security: 

Context,  Challenges 

&  Solutions 


The  rapid  growth  of  networked  storage 
finds  IT  professionals  calhng  for  indus¬ 
try  standards  and  best  practices.  Users 
must  share  the  responsibility  for  setting 
the  storage  security  agenda.  Groups  such  as  the 
Storage  Networking  Industry  Association  (SNIA) 
Storage  Security  Industry  Forum  offer  an  opportunity 
to  do  just  that. 


O’er  the  past  se\’eral  years,  a  large 
number  of  enterprises  have  built  net¬ 
worked  storage  emironments.  These 
storage  networks,  using  technologies 
such  as  NAS  and  SAN.  haw  allowed 
firms  to  create  scalable,  flexible  stor¬ 
age  infrastructures;  improw  produc- 
ti\ity  while  reducing  management 
costs;  and  promote  the  efficient  use  of 
enterprise  information  sources. 
Stor^  networks  also  help  business¬ 
es  dcN’clop  cost-effective  backup,  data 
mirroring  and  disaster  reco\’ery  pro¬ 
cedures. 

Yet  the  key  assumption  behind 
storage  networks — that  enterprise 
data  is  most  valuable  N\'hen  it  can  be 
shared,  distributed  and  replicated  as 
easily  and  efficiently  as  possibU — is 


also  a  source  significant  risk.  As 
networked  storage  systems  evolve 
beyond  the  data  center  and  expand 
throi^hout  the  enterprise,  mission- 
critical  data  becomes  more  vaiinera- 
ble  to  unauthorized  access,  alteration, 
theft  aiKl  misuse.  As  stor^  capacity 
continues  to  irKreasc  (many  enter¬ 
prises  double  their  capacity  every  six 
to  eight  months),  so  does  the  amount 
of  data  at  risk— and  die  potential 
dam^  such  a  breach  could  inflict. 

The  trend  toward  networited 
enterprise  stor^  emlitxuQents  is 
inexorable;  the  economic  and  epera- 
tional  benefits  erf  the  tcchncrft^  asso¬ 
ciated  with  networked  storage  are 
simply  too  significant  to  ignore. 
However,  far  too  few  FT  prcrfcssicmals 


haw  a  clear  understanding  erf  storage 
security  issues  or  a  firm  grasp  on  the 
solutions  available  to  them 

In  order  to  help  enterprise  storage 
users  e\’aluate  their  stors^e  security 
risks,  associated  security  require¬ 
ments  aiul  solutions,  this  paper  will 
examine  the  fcrflowir^  questions: 

•  Are  enterprise  users  aware  of 
-Storage  security  issues? 

•  How  should  we  define  stor^e 
security? 

•  What  types  of  ston^e  security 
solutions  are  necessary? 

•  What  is  the  best  way  to  achiew 
these  solutiOTs? 

Ultimately,  stor^e  security  iait 
simply  a  matter  of  findii^  and  imple 
mentlng  the  right  techntJogy  solu 
tions.  Businesses  must  also  demon 
strate  to  vendors  and  solutions 
prosiders  that  they  cemsider  storage 
security  an  important  IT  issue,  and 
that  they  deem  ston^  security  a  high 
prkxity  for  the  industry. 

PemptiM  n.  hiiity 

Security  is  obviously  a  vital  am 
cem  for  any  enterprise  IT  ptofesskm- 
al  And  man)'  IT  managers  under¬ 
stand  that  storage  networks  present 
unique  security  challei^es,  due  to  the 
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nussion  criacal  nature  of  enterprise 
data  systems  and  the  potential  conse¬ 
quences  of  a  storage  security  failure. 

A  recent  study  conducted  by  the 
SNIA  Storage  Security  Industry 
Forum  (SSIF)  concluded  that  enter¬ 
prise  IT  managers  do  indeed  consider 
stor^  security  an  important  issue, 
and  chat  most  managers  have  made  an 
effort  to  improve  their  companies’ 
security  postures. 

On  a  more  granular  le%’cl.  howe\'er. 
the  study  also  found  a  great  deal  of 
uncertainty  and  unease.  An  over¬ 
whelming  number  of  end  users  don’t 
know  if  their  efforts  have  succeeded. 
Those  users  are  frustrated  at  the  lack 
(rf  best  practices,  industry  standards 
and  e%en  a  basic  common  language 
for  discussing  storage  security  issues 
with  \etKlors.  Moreover,  most  users 
rely  on  default  security  features  with¬ 
in  indi\1dual  vendors'  storage  prod¬ 
ucts.  rather  than  adopting  a  proac- 
uve,  comfHehensive  approach. 

This  uncertainty  has  a  direct  (and 
negathe)  impact  on  how  IT  prerfes- 
sionals  deal  with  storage  security 
issues.  Based  on  research  conducted 
by  the  SNIA  SSIF.  as  well  as  discus- 
siems  with  leadiitg  industry  analysts 
and  consultants,  IT  managers  com¬ 
monly  face  four  stor^c  security  mis- 
conceptioas: 

•  It's  someone  else's  problem.  In 
marr>’  enterprises,  netwcffk  adminis¬ 
trators.  stor^e  manners  and  system 
administrators  lack  the  authority, 
resources  and  expertise  to  take 
responsibility  for  storage  security 
issues.  “The  [woblem  is  that  few  IT 
professionals  urulerstand  both  securi¬ 
ty  and  stor^."  says  Jamie  Gruener.  a 


senior  analyst  with  the  Yankee 
Group.  “People  have  expertise  in  one 
discipline  or  another,  but  there's  not 
much  crossover.”  As  a  result,  stor^e 
security  issues  often  fall  through  the 
cracks. 

•  It  can’t  happen  here.  IT  man¬ 
agers  may  assume  that  .storage  net 
works  are  less  v-ulnerable  to  security 
failures  due  to  the  relatively  insular 
nature  of  these  networks.  However, 
most  stor^e-area  networks  empha 
size  high  availability  and  powerful 
man^ement  tools,  rather  than  robu.st 
security;  this  can  expose  a  storage 
network  to  significant  vulnerabili¬ 
ties,  such  as  potentially  damaging 
insider  attacks.  In  addition,  business¬ 
es  may  associate  SAN  security  proce¬ 
dures  with  the  perimeter  defense 
measures  commonly  used  in  corpo¬ 
rate  LANs,  making  them  even  more 
vulnerable  to  internal  compromise. 

•  It’s  already  been  fixed.  Many 


IT  professionals  rely  on  default  secu¬ 
rity  features  in  ston^  products  as 
their  first — and  sometimes  only — 
line  ctf  defense.  At  the  same  time, 
many  vendors  conjure  their  prod¬ 
ucts  under  the  assumption  chat  users 
will  implement  netw’ork-level  storage 
security  solutions.  This  cycle,  in 
which  each  party  expects  the  other  to 
take  primary  responsibility  for  secu 
rity,  can  lead  to  serious  problems. 

•  It  can’t  be  helped.  The  uncer¬ 
tainty  many  IT  professionals  feel  over 
storage  security  practices  may  leave 
them  unable  even  to  a.ssess  the  effec¬ 
tiveness  of  their  security  solutions. 
“There's  an  enormous  problem 
caused  by  the  lack  of  widely  under¬ 
stood  best  practices.  In  fact,  it’s  not 
clear  that  there  even  are  best  prac¬ 
tices,”  says  Mike  Karp,  senior  analyst 
with  Enterprise  Management 
Associates.  This  uncertainty  can 
make  it  more  difficult  for  IT  managers 
to  sign  off  on  additional  security 
investments,  since  they  lack  the  con¬ 
text  and  standards  to  weigh  the 
impact  of  those  investments. 

DefiiiiiHitlieProlileiii 

To  avoid  these  misconceptions,  it’s 
essential  to  understand  where,  when 
and  how  to  recognize  stora^  securi¬ 
ty  risks.  Within  an  enterprise  IT 
infrastructure,  those  risks  involve 
four  key  areas; 

•  Servers,  hosts  and  applica' 
tions.  Even  in  SAN  environments, 
hosts  and  application  servers  are  usu¬ 
ally  linked  to  the  corporate  LAN. 
allowmg  access  to  the  stor^  net¬ 
work  through  these  points. 

•  Stor^  connectivity.  The  hubs. 
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switches  and  directors  that  link 
servers  and  stcHage  systems  are  also 
sources  of  significant  vulnerability. 
E^ysical  transport,  for  example,  is 
susceptible  to  wiretapping,  traffic 
interception  and  redirection;  and 
other  forms  of  attack. 

•  Storage  subsystems  and 
media.  Security  threats  to  storage 
devices,  subsystems  and  media  (the 
physical  core  erf  a  stor^  networic) 
can  be  an  even  greater  threat  than 
access  to  data  in  transit,  since 
destroying  or  damagir^  these  systems 
may  have  a  devastating  impact. 

•  Management  access.  Given  the 
power  and  flexibility  of  sion^  net¬ 
working  management  tools,  inade¬ 
quate  security  on  a  sii^e  manage¬ 
ment  console  can  compromise  even 
the  most  comprehensive  security 
solution. 

These  areas  of  vulnerability  sug 
gest  that  the  greatest  threat  to  storage 
security  ctanes  from  within  the  cor¬ 
porate  firewall,  and  perhaps  even 
from  within  an  IT  organization— a 
suggesdem  supported  by  research  and 
expert  c^iniem.  Acccxding  to  various 
industry  studies,  between  50%  and 
70%  of  security  breaches  are  attacks 
by  di^;runtled  employees,  contrac¬ 
tors  or  IT  staffers,  “bsiders  far  out¬ 
weigh  outsiders  in  terms  erf  security 
threats.’  says  Tom  Pctrocellt  j»esi' 
dent  erf  Technology  Aligrunent 
Partners.  “It’s  easy  enoi^  to  mess  up 
a  SAN  without  even  trying— imagine 
what  cerukl  haj^n  as  a  result  erf  a 
truly  malicious  attack.’ 

In  addidem  to  wei^iir^  the  likeli¬ 
hood  erf  internal  aixl  external  threats, 
firms  must  consieler  the  security 


implicadons  of  simple  errors.  If  an 
emple>yee  destroys  data  throu^  a 
configuradon  errew  or  other  irmocent 
mistake,  the  loss  to  the  enterprise  is 
just  as  real  as  if  an  intruekr  had  delib¬ 
erately  attacked  the  system.  To  make 
matters  worse,  senior  maiu^rs  may 
never  learn  about  these  “indirect* 
security  failures  due  to  fear  of  retalia- 
DOT,  leavir^  them  unaware  of  the  true 
scope  of  the  problem. 

Finally,  the  compartmentalized 
nature  of  many  IT  organizations  rein¬ 
forces  the  tendency  to  associate  data 
integrity  with  the  application,  rather 


To  avoid  misconceptions, 
it's  essentiai  to  under¬ 
stand  where,  when  and 
how  to  recognize  storage 
security  risks. 


than  with  the  storage  infrastructure 
as  a  cchesive  system.  Administrators 
may.  for  exam^,  treat  authendcadon 
and  authorizadon  procedures  as 
applicadcm-level  data  security  tools 
rather  than  as  internal,  system-wide 
storage  security  components. 

Mhiig  Effective  SuiitiMK 

The  scc^  and  scale  of  these  chal- 
let^  demarKi  more  than  technical 
solutions;  enterprises  must  rethink 
their  ston^  semrity  (riondes  and 
practices  from  the  ^ound  up.  From 
an  (^rational  pxrspxcdve.  IT  man 
^rs  ^lould  omsider  two  fundamen 


tal  charges  in  their  thinking  about 
stoi^e  security: 

•  Raising  awareness.  Dedsiem- 
makers  must  recognize  stcrage  secu 
rity  as  a  disdna  and  impxrtanc  IT 
prkriry.  “Manners  know'  security  is 
a  hige  proHcm  at  the  ctrperate  level 
but  they  demt  always  mxgnize  how- 
insecure  their  stonge  rtetworks  really 
are,’  Yankee  Group's  Gruener  says. 
‘In  fact,  the  data  on  their  stor^  net¬ 
work  is  a  lot  more  valuable,  and 
requires  a  higher  level  of  securit)' than 
most  of  the  data  moviig  across  their 
IP  LAN  today.’ 

•  Assigning  responsibility. 
Senior  IT  manners  must  also  assgn 
the  resources  and  responsibility 
required  to  deal  with  st<M-^  security 
issues — includiig  the  alrflity  to  eval¬ 
uate.  pHifchase  and  implement  securi¬ 
ty  solutkms-  “A  lot  of  IT  exccudv'cs 
don't  see  this  as  something  they 
should  invest  in.'  Enterpxise 
Management  Associates’  Karp  says. 
‘They  have  to  see  storage  security  as  a 
strategic  issue,  and  they  have  to  get 
involved  rather  than  harxlug  it  off  in 
piecemeal  fashion.' 

IT  manners  should  also  reco^uze 
chat  point  strfudons — the  'Silver  bul¬ 
lets’  of  simage  security — arc  at  best 
partial  remedies  and  at  wxirst  a  waste 
of  resources.  In  addition,  maiugers 
must  urtderstand  that  traditional  net¬ 
work  security  measures,  includiig 
virtual  pyrivace  networks;  software- 
and  i^yplicaticm-kvet  cncrypoon;  and 
LUN  (logical  unit  number)  masking 
and  zoniig.  are  an  inefBcknc  and 
incofi^rfete  way  to  manage  security 
risks.  To  be  sure,  these  measures — 
when  imprfemented  in  a  comptrefaen- 
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The  industry  needs  to 
focus  on  defining  and 
pubiicizing  a  set  of  uni- 
versaliy  accepted  storage 
security  best  practices. 


sive  fashion — can  provide  additional 
layers  of  security,  but  a  truly  effectiv’e 
solution  will  encompa.ss  tw'o  key 
classes  of  security  technology;  ston^e 
encryption  and  authentication, 
authorization  and  access  control. 

Storage  security  encryption  appli¬ 
ances  provide  several  benefits.  They 
operate  at  wire  speed,  and  they  pro¬ 
vide  end-to-end  data  security  over  a 
storage  netwOTk  no  matter  where  the 
data  is  sent  or  received  from. 
EncryjMion  appliances  also  provide 
integrated  key  management;  help 
enterprises  comply  with  government 
data  privacy  directives;  extend  a  con¬ 
sistent  security  standard  across  both 
in-transit  and  at-rest  data;  and  allow 
rr  managers  to  outsource  storage 
man^ment  functions  (such  as  key 
management)  to  their  clients. 

Storage  encryption  offers  another 
impmtant  advant^  as  well;  it  can 
actually  improve  efficiency  and  cut 
management  costs  for  enterprise 
storage  networks.  By  assignii^  differ¬ 
ent  keys  to  different  classes  d  data — 
fw  example,  human  resources  vs.  cus- 
toroer  service  information — an  enter¬ 
prise  can  s^r^te  data  classes  with¬ 
out  providing  separate,  fully  redun¬ 
dant  jAysical  stor^  resources.  This 


represents  an  unusual  and  welcome 
departure:  a  security  solution  that 
generates  a  direct  and  measurable  (if 
still  secondary)  return  on  investment. 

The  next  class  of  security  technol¬ 
ogy — authentication,  authorization 
and  access  control — is  just  as  vital. 
Storage  network  zoning  provides  a 
measure  of  access  control.  However, 
enterprises  may  want  to  consider 
“intelligent"  storage  switches  that 
provide  integrated  authorization, 
authentication  and  accounting  fea¬ 
tures.  These  solutions  provide  access 
control  by  specifying  which  devices 
can  anach  to  which  ports;  reduce  the 
risk  of  accidental  configuration 
errors;  sup^rt  transport  independ¬ 
ent  authorization  techniques;  and 
enable  more  efficient  management 
and  accounting  procedures. 

Typically,  such  solutions  include 
robust  policy-based  authorization 
features  that  give  IT  managers  a  great 
deal  of  control  over  who  can  access 
particular  segments  of  a  storage  net¬ 
work  or  execute  particular  storage 
management  responsibilities.  As  a 
result,  when  combined  with  robust 
encryption  appliances,  they  create 
powerful  and  scalable  solutions. 

fedniology  Isi't  Emigli 

A  growing  number  of  vendors  are 
entering  the  stor^  security  market 
with  encryption  appliances,  intelli¬ 
gent  switches,  management  software, 
firewalls  and  other  components 
required  to  build  a  comprehensive 
storage  security  solution. 
Unfortunately,  as  long  as  deeper 
problems  remain,  the  storage  net¬ 
working  industry  cannot  meet  cus¬ 


tomers'  security  needs  simply  by 
introducing  new  products.  Among 
the  lingering  problems  are  a  dearth  d 
industry  standards,  widely  accepted 
best  practices  and  a  common  lan¬ 
guage  for  defining  and  discussing 
storage  security  issues. 

.According  to  Michael  J.  Alvarado, 
chair  of  the  SNIA  SSIF,  stor^e  securi¬ 
ty  standards  must  rise  to  meet  two 
major  challenges.  "The  storage  net¬ 
works  (rf  the  future  will  be  even  more 
highly  distributed  than  they  are 
today,  with  far  more  pwints  of  access 
and  more  non-technical  users  access¬ 
ing  them,"  Alvarado  says.  “As  storage 
infrastructures  move  away  from 
beii^  tighdy  controlled  and  include 
more  pxrints  of  vulnerability,  the 
industry  needs  a  set  of  consistent, 
vendor- neutral  standards  for  manag¬ 
ing  these  vulnerabilities." 

Alvarado  adds  that  storage  securi¬ 
ty  standards  must  move  away  from  an 
emphasis  on  perimeter  security — a 
reflection  (rf  establidied  IP-based  net¬ 
work  security  models — and  toward  a 
layered  approach.  “There  are  current 
ly  no  standards  that  allow  us  to 
extend  a  single  authenricadon  model 
through  the  lower  layers  of  a  storage 
netwOTk,  or  to  unify  different  layers 
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for  security  man^ement  and  coordi¬ 
nation,’'  he  says.  “We  need  that  level 
of  coordination,  and  the  standards- 
setting  process  needs  to  focus  on 
those  types  erf  issues.” 

The  industry  also  needs  to  focus 
on  defining  and  publicizing  a  set  of 
best  practices;  nuny  experts  call  this 
the  most  urgent  problem  facing  busi¬ 
ness  users  today.  “Many  enterprises 
still  don't  understand  exaedy  how  to 
man^e  storage  networks;  there’s  no 
frame  of  reference,  and  what  is  avail¬ 
able  is  often  focused  on  the  corporate 
LAN,  not  storage  networks,”  Yankee 
Group’s  Gruener  says. 

The  lack  (rf  best  practices  also  has 
a  negative  impact  on  vendors,  many  of 
which  sdll  have  a  relatively  low  pro¬ 
file  in  the  industry.  “Storage  security 
companies  don’t  have  much  visibility, 
and  that  won’t  change  if  people  have 
problems,  because  they  won't  think  of 
them  as  being  storage  problems," 
Enterprise  Man^ment  Associates’ 
Karp  says.  “The  lack  of  a  systems-level 
approach  to  the  problem  is  frostrat- 
ir^;  these  point  solutions  can’t  possi¬ 
bly  work,  but  there’s  no  understand- 
ii^  or  attempt  to  fix  the  complete 
environment." 

CoadniM:  Maldiq  ClMge  1^^ 

Enterprise  users  are  mwe  than 
just  technology  consumers  in  this 
process;  they  are  vital  catalysts  for 
change  and  growth  in  the  ston^  net- 
wMkii^  industry.  Althoi^  stOT^e 
vendors  are  c^r  to  tap  into  new 
markets,  they  can  be  equally  reluc 
tant  to  disrupt  existing  market 
opportunities.  As  a  result,  mudi  d 
the  responsibility  for  promoting 


industry  standards  and  best  practices 
(and  for  creatiiig  demand  for  tbe  tech¬ 
nologies  that  will  incorporate  these 
starxlards)  inevitably  falls  on  compa¬ 
nies  that  use  storage  networking 
products. 

In  order  to  accomplish  this,  users 
must  make  it  clear  to  vendors  that 
storage  security  is  an  important  pri¬ 
ority  that  will  affect  both  their  stor¬ 
age  networkir^  strategies  arxi  their 
investment  decisions.  This  involves 
asking  vendors  to  deliver  product 
roadmaps,  detailed  explanations  of 
their  storage  security  technologies 
and  other  specific  evidence  that  they 
are  committed  to  embracing  security 
requirements. 

Collective  action  is  an  equally 
important  part  of  the  process. 
Industry  groups  such  as  the  Storage 
Security  Industry  Forum  within  the 
SNIA  give  users  an  opportunity  to  set 
the  storage  security  agpnda.  promote 
industry  standards  and  pve  vendors  a 
clear  picture  of  their  customers’ 
needs. 

Moreover,  participation  at  this 
level  is  more  than  simply  a  communi- 
ty-buildii^  exercise;  it  has  a  direct 
and  immediate  impact  on  the  prod¬ 
ucts,  technologies  and  standards  on 
which  companies  build  their  IT  infra¬ 
structures.  “As  more  companies 
engage  with  us  aiKl  give  us  a  clear 
view  (rf  their  requirements,  we’re  djle 
to  address  the  vetKlor  community 
with  a  sii^  voice  and  to  make  it 
clear  that  storage  security  is  a  vital 
issue,”  Alvarado  says. 

In  fact,  for  many  enterprises,  stor- 
^  security  is  r^idly  turning  into  a 
h^'Stakes  ^me  with  no  clear  rules. 


Ston^  networks  aren’t  just  the  latest 
technology  fashion,  they  are  quickly 
becoming  as  pervasive,  powerful  and 
essential  as  the  corporate  IAN.  Yet 
it’s  also  clear  that  businesses  must 
rethink  their  storage  security 
assumptions  and  requirements  in 
order  to  apply  this  technology  safely 
and  effectively.  Ultimately.  IT  profes¬ 
sionals  face  a  clear  choice:  manage 
their  firms’  storage  security  risk 
today,  or  manage  the  consequences 
tomorrow# 


About  the  SNIA 

The  Storaije  Netwofttini} 
Industry  Association,  or  SNIA  «*(as 
incorporated  in  December  1997  and 
IS  a  rerjistered  501-C6  non-profit 
trade  association  its  members  are 
dedicated  to  "ensuring  that  storage 
net»»orl(s  become  complete  and 
trusted  solutions  across  ttie  iT  com¬ 
munity  '■  The  SNIA  wortis  toward  this 
goal  by  terming  and  sponsoring 
technical  werl*  groups,  by  producing 
(with  Its  strategic  partner 
Computerworidi  Ihe  Storage 
Networking  World  Conference 
senes  b»  building  and  maintaminq  a 
vendor-neutral  Technology  Center 
in  Colorado  Springs  and  by  promot¬ 
ing  acli.  ties  that  i-ipand  tr^e 
breadth  am  quoi''i  me  sioiage 
netwoikmc  "’aivet 

T*:  mere  i  op  sSiA 

and  trie  SSif  go  t.'  ww*  sria  .I'c  For 
information  on  the  Customer 
Advisory  Counn.  nntact  the  CAC 
chairman  at  ssf-:ac  sma.org. 
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Forum’s  Importance 


'tlow  tbit  Dctworked  scor^  is 
loovtag  toward  iDcIudmg  (or 

IP  txanapon,  data  ie  moct  suacqxd^ 
to  tangdty  and  pdvacjr  attacks.  As  die 
leader  ta  networit  KcuEity.  is  well 

fdaeed  ID  cootribyte  to  the  secur^  of 
acon^  nctw’odca.  As  ao  acdve  mem- 
her  of  SNIA,  Hi6i  will  brii^  our 
expertise  B>  the  aecuricy  best  practices 
database* 


*SN1A  and  SSIF  bdi^  together 
leaden  io  the  software  and  hardware 
radufliies  to  iocrease  the  anentton 
and  underacaoding  about  a  complex 
indmtry.  tnreiphase  looks  iorwatd  to 
shariDg  our  storage  aetworkisg 
expcrdae  in  both  hardwan  and  soft' 
to  dieanergenoe  of 
seuBh)’  prutocuk  \^1e  onmnitt^J 
to  ddiveiing  smdards'faaaed  atonge 
Detworldi^  securftf  adtcioos  dm 
Imetopa^  with  duae  faniB  odier 
SNlAivadon.* 

— ftaadall  McCaanii, 
vice-prrddcnr  of  global  atles 
and  markedag.  tatcxphMe  Carp. 


*As  ston^  neewodts  expand  and 
cuetomers  leverage  their  tofecmatioc 
infraamictue  aoosa  ddSerent  appli- 
cadaoB,secnti^becomesatDppciaci' 
cy.  As  a  ms^  cconflMioor  to  the  f^bie 
Channd  Security  Protocol  standard. 
McOATA  is  woridng  with  ks  SSff 
pmnen  to  devdop  seoBicy  sokiciaoa 
that  make  aenae  The  SANo^dcy 
Security  Suite,  McDATA's  security 
aohicion.  provides  n^rihU  easy^tO' 
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Introducing 
Direct  Matrix 
Architecture 

Only  Symmetric 
DMX  HAS  IT 


EMCs  new  Symmetrix  DMX  series  with  Direct  Matrix  Architecture. 

4  times  the  internal  bandwidth  and  lo  times  the  cache  bandwidth  of  any  other 
storage  system.  100%  software  compatibility.  Unprecedented  application  performance, 
protection  and  availability.  And  all  with  surprising  affordability.  Now  high-end  storage 
has  a  new  high  end.  emc.com/dmx  or  call  i.866.symm.dmx/i.866.796.6369 


Getting  Strategic  WitK 


Tape  Bcicicup 


For  users  that  have  outqrown  DDS.  Sonv  AIT  proiecisd  maeed  snce  ait  ms  .too- 

^  '  duced  in  1996.  Sony  has  OouWedcapac/TywiW  each  generation 

solutions  offer  a  clear  migration  path.  culminating  m  todays  class  ait  3 

^  ^  AIT  also  has  a  number  of  other  important  benefits 

,,  1.  t  .a .  compared  to  DOS  tape  systems,  including 

It  youf  company  has  had  formal  tape  backup  systems  in  place  of  corporate  or  customer  data  For  example  health  care  orgam-  Better  reliebility  -  Sony  AIT  systems  are  rated  for  100\ 
far  a  year  ot  mote,  there's  a  good  chance  no  one  is  giving  them  cations  must  meet  reguifcmenls  lor  the  Health  Insurance  duly  cycle  lunlike  OOSI  so  they  are  perfect  for  automated 
a  lot  of  thought,  beyond  making  sure  that  the  regular  backups  Portability  and  Accountability  Act  IHIPAAI,  yyhile  financial  serv  libraries  and  network -anached  storage  needs  In  addmon 


are  completed  But  ihete  are  a  variety  of  new  business  chal  ices  companies  are  subiect  to  mote  stnngem  Securities  and  aiT  s  helical  scan  recording  and  Advanced  Metal  Evaporated 
tengesand  advances  in  data  storage  technologies  that  make  this  Ekchange  Commission  regulations  fo.  data  storage  (AME|  tape  provide  increased  reliability,  eitenoed  media  hie 


The  right  time  to  take  a  fresh  look  at  your  tape  storage  strategy  Faster  badciiii/raduaid  MkBintstrstioa  -  Backup  and 
Sony’s  Advartced  Intelligent  Tape  (AIT|  is  a  proyen  data  storage  restore  processes  take  longer  as  the  volume  of  busmess-cnii- 

formal,  novy  in  rts  third  generation,  that  many  organizations  are  cal  data  that  needs  to  be  archived  grows,  both  on  the  desktop 

using  to  meet  business  challenges  in  3  more  consistent  and  and  in  the  data  centei  The  number  of  tapes  necessary  10  han- 

practical  way  Unlike  legacy  tape  solutions  such  as  Digital  Data  die  that  data  also  increases,  as  does  the  administrative  over- 

Storage  (DOS),  organizations  can  use  AIT  to  create  a  tape  stor-  head.  In  many  organizations.  IT  personnel  spend  far  too  much 


'  <AME|  tape  provide  increased  reliability,  extenoed  rnedia  life 

Backup  and  and  reduced  cleaning  requiremenis  compared  with  DOS  sys- 
jsiness-cnii-  terns 

I  the  desktop  Smaller  fonii  factor  -  AM£  media  and  helical  scan  record- 
ssary  10  han-  ing  provide  the  highest  density  of  any  data  tape,  enabling  high- 
trative  over-  capacity  AIT  systems  to  fit  in  a  3  5-inch  format 
far  too  much  Fawar  tapes,  men  capacity  >  AIT  cartridges  can  hold  up 


Storage  (DOS),  organizations  can  use  AIT  to  create  a  tape  stor-  head.  In  many  organizations.  IT  personnel  spend  far  too  much  Fawar  tapaa,  mart  capacity  -  AIT  cartndoes  can  ho«  up 
age  strategy  that  adapts  to  chartges  m  IT  requirements  white  ’  ^ 

meeting  future  performance  needs  - 

Organizations  often  implement  tape  storage  in  an  ad-hoc 
fashion,  adding  tape  backup  units  to  PCs  and  servers  as  need-  j 
ed.  purchasing  different  units  (and  even  different  formats)  for  | 
individual,  workgroup  and  data  center  needs.  Users  of  ODS 
tape  systems  whose  tapes  lack  the  capacity,  speed  or  level  of  Sony  AIT  Drtw  Sony  SloiTliliuiiTx  ^tgrUf  tion~~ 

automation  to  meet  burgeoning  demands  typically  need  to  Md  AiitoloaiiTi  AIT  I  ttiraripi  Bodmp 

implement  different  tape  storage  systems  for  different  needs.  nie 

creating  the  lack  of  a  consistent,  broad  strategy  That  situa-  ** 

tion  relegates  tape  storage  to  a  tactical  (but  still  important)  I  ^ 

function,  incapable  of  easily  adapting  to  new  business  chal-  ~ 

lenges.  Those  challenges  include: 

Explosion  of  data  -  A  few  years  ago.  most  users  consid-  Bockap  aaloaMtioa  for  LAW  hoaod  bocicapa. 

ered  only  a  handful  of  specialized  documents  or  specific  data-  Idoal  for  tanror  ood  oIRcoa.  aolirpriia  ramoia/diatribni^  ba^pa. 

bases  to  be  business-critical  data  But  that's  all  changed  E-  doaklop  bacfcap,  DOS  dapai^aata  data  cenaolidotiaaMariaB 

mail  files,  Web  site  content,  transaction  data,  multimedia  roplaeamaol 

files,  sales  matenals  and  PowerPoint  slides  are  among  the 
business-critical  data  that  most  organizations  want  to  archive 

and  protect  on  a  regular  basis  In  2000,  the  research  firm  IOC  time  managing  inefficient  tape  strategies  and  not  enough  time  to  five  itmcs  the  uncompressed  capacity  of  OOS-4  greatty 
projected  that  data  storage  requirements  would  grow  an  aver-  working  on  tasks  that  add  value  to  the  business  reducing  the  number  of  tapes  required  for  backups  and  there- 

age  of  87%  annually.  With  such  a  wide  range  of  new  data  storage  challenges  fac-  py  cutting  the  ever-growrng  cost  of  rnedia 

Inereatiap  ttor»B«  cost*  -  With  traditional  backup  sys-  mg  companies,  it’s  no  wonder  that  traditional  tape  storage  sys-  Gr«M»r  ipeed  -  With  Sony’s  Memory  ki  Cassette  (MIC)  fla^ 
terns,  more  data  means  more  tapes,  and  more  tapes  mean  terns  have  become  almost  more  of  a  hindrance  than  a  help  memory  chip.  ATT  cartndges  provide  much  taster  file  accws  and 

more  money  spent  on  media  Unfortunately,  backup  systems  What's  needed  is  a  way  to  turn  archival  data  storage  from  a  recovery,  reduong  the  amount  of  time  ii  takes  to  recover  lost 

created  5  or  10  years  ago  simply  aren't  designed  to  handle  time<onsuming  chore  to  a  strategic  advantage— one  that  can  data  or  downed  systems  and  contributing  to  a  strong  business 

the  explosive  growth  of  backup  requirements  we  see  today  help  increase  business  continuity,  increase  IT  flexibility,  continuity  plan 

Consequently,  companies  are  caught  on  a  tape  treadmill,  con-  decrease  the  time  spent  on  routine  mamtenwice  tasks  and  Lower  con -AlT-1  dnves  cost  less  than  OOS-4  drives  yet 
stantly  purchasing  additional  tapes  to  handle  increased  vol-  proactively  meet  evolving  business  needs.  deliver  ifxreased  capaaty  and  speed 

A  vanety  of  data  storage  advances  over  the  past  few  years  As  data  volumes  grow,  perhaps  you  can  make  do  with  vour 
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projected  that  data  storage  requirements  would  grow  an  aver¬ 
age  of  87%  annually. 

Inereatiag  storaB#  costs  -  With  traditional  backup  sys- 


reducmg  the  number  of  tapes  required  for  backups  and  there¬ 
by  cutting  the  ever-growrng  cost  of  media 
Graaiar  spasd  >  With  Sony’s  Memory  In  Cassette  (MIC)  fla^ 
memory  chip.  ATT  cartndges  provide  much  taster  Tile  access  and 


continuity  plan 

Consequently,  companies  are  caught  on  a  tape  treadmill,  con-  decrease  the  time  spent  on  routine  marnterwice  tasks  and  Lawar  cost -AlT-1  dnves  cost  less  than  OOS-4  drives  yet 
stantly  purchasing  additional  tapes  to  handle  increased  vol-  proactively  meet  evolving  business  needs.  deliver  irxreased  capaaty  and  speed 

A  vanety  of  data  storage  advances  over  the  past  few  years  As  data  volumes  grow,  perhaps  you  can  make  do  with  your 
Greater  need  for  basiaass  caatMuity  -  While  it’s  always  bring  just  such  dramatic  benefits,  espeoally  to  o^nizations  current  DOS  tape  systems  by  adding  more  tapes  to  the  back- 

been  important  to  ensure  that  cnocal  data  can  be  recovered  in  currently  employing  DOS  formats  For  example.  Sony’s  ATT  data  up  rotation,  allocating  more  lime  for  maintenance  and 

the  event  of  a  problem,  over  the  past  few  years,  it's  become  storage  systems  are  designed  to  cover  everything  from  PC  back-  restoration,  and  using  a  juitole  of  different  tape  formats  for 

critical  to  ensure  that  businesses  can  continue  to  function  in  up  and  woricgroup-level  requirements  to  automated  data  center  different  needs  Butin  the  long  run.  it  makes  more  sense  to 

the  event  of  equipment  problems  or  a  disaster  For  most  com-  needs  instead  of  having  multiple  tape  formats  across  these  reconstder  your  data  storage  needs  ^  to  find  a  solution  that 

panies  the  cost  of  downtime— even  a  few  hours— can  great-  groups,  Sony’s  AIT  allows  an  organization  to  have  a  single  tape  will  (rowde  contmorty.  consistency  and  cocr^iaiibdiiy  through¬ 
ly  exceed  the  expense  of  adequate  protection  format  providing  a  seamless  migration  strategy  as  backup  wf-  out  yow  entire  organizatiixi  With  proven  new  tecfnoloQies 

Nmv  tffmtwrnnm  -  A  variety  of  organizations  ixnes  grow  Enterprises  can  upgrade  to  AIT  graduaffy.  replaong  such  as  Sony’s  AIT  tape  storage  systems  addressir^  today's 

need  to  archive  more  data  because  of  new  government  man-  indtviAtaf  oWer  systems  as  capacity  rieeds  dictate— typeally  rnost  pressing  business  and  reQuirements  you  can 

dates  and  indusoy  standards  tfBt  requite  increased  protection  for  a  price  equivalern  to  that  of  traditional  OOS-4  systems,  but  him  mm  ^  trf 

of  data,  as  wtil  as  the  archiving  and  storage  of  a  broader  range  with  increased  perfonnance.  capacity  and  reliabiliTy  ArxJ  with  x\  IT  Itability. 


bring  just  such  dramatic  benefits,  espeoally  to  o^nizations  current  DOS  tape  systems  by  adding  more  tapes  to  the  back- 
currently  employing  DOS  formats  For  example.  Sony  s  ATT  data  up  rotation,  allocating  more  lime  for  mainterwnce  and 


the  event  of  equipment  problems  or  a  disaster  For  most  com¬ 
panies  Che  cost  of  downtime — even  a  few  hours — can  great¬ 
ly  exceed  the  expense  of  adequate  protection 
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Oownlodd  the  free  whife  paper,  Forniulating  A  Tape  Bactiup 
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Make  Linux 
Unbreakable 


4  computer  cluster  with  Linux 


Everyone  knows  Linux  costs  less 
Now  it's  faster  and  more  reliable  too 
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oracle.com/linuxfaster 
or  call  1.800.633.0546 
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Microsoft  Buys  Its  Way  Into 
Server  Consolidation  Space 


Delay  in  virtualization  pnxluct’s  release  may  be 
saving  grace  for  rival  offerings  finm  VMware 


Microsoft  Corp.  is  counting  on 
the  virtual  machine  software 
that  it  acquired  last  week  from 
Connectix  Corp.  U)  appeal  to 
\\^ndows  NT  Server  4.0  users 
wdio  are  interested  in  server 
consolidation  and  migration. 

The  Connectix  Virtual  Serv¬ 
er  software  lets  users  run  mul¬ 
tiple  distinct  copies  of  server 
operating  systems  —  including 
Windows,  Linux  and  Unix  — 
on  a  sin^  physical  machine. 

But  it’s  unclear  how  recep¬ 
tive  users  will  be  to  the  new 


Microsoft  oflfering,  since  k 
wcm’t  become  generally  avail¬ 
able  until  year's  end  and  its 
arch  competitioa  GSX  Server 
from  VMware  Inc.  in  Palo 
Alto.  CaliL.  has  been  shipping 
for  more  than  two  years. 

San  Mateo,  Calit-based 
Connectix  recently  said  its 


TeleronwnuteiB  Wealher  Storm 


rr  strategies  need  to 
include  out-of-offlce 
provisions,  users  say 


The  big  winter  storm  that  shut 
down  many  federal  govern¬ 
ment  operations  in  Washing¬ 
ton  last  wedt,  along  with 
businesses  throughout 
the  Northeast,  didn't  hurt 
Mattress  Giant  Corp.  Im 
much.  That’s  because  it  has 
made  telecommutir>g  an  essen¬ 
tial  part  c^hs  IT  strategy. 

’‘if  we  didn't  have  [telecom¬ 
muting]  . . .  we'd  be  in  a  world 
of  hurt”  said  Steve  Williams, 


CIO  at  the  Addison.  Texas- 
based  conqiany.  which  has 
more  than  250  stores,  many  in 
the  Northeast  and  Mid-Atlan¬ 
tic  re^ons.  Telecommuting 
employees  were  able  to  stay  in 
touch  with  customers  to  keep 
them  apprised  of  the  sums  of 
deliveries.  “Even  in  a  crisis  sit¬ 
uation.  our  people  were  still 
able  to  be  productive 
iHH  and  save  sales,”  Wil- 
|ra3  Uamssaid. 

Sfifl  Mattress  Giant’s  deci¬ 
sion  to  implement  a  formal 
telecommuting  program  was 
prompted  by  an  earlier  ice 
storm  in  the  Dallas  area.  But 
many  companies  lack  such 
programs,  opting  instead  to 
take  an  informal  approach. 
That  could  be  costly  for  IT 
managers. 

Without  a  telecommuting 
manag«»nv»nr  program,  a  com¬ 
pany  may  ftnd  itself  paying  for 
Telecommuters,  page  16 


Virtual  Server  product  would 
ship  quarter.  But  Jim 
Hebert,  general  maitager  of 
Microsoft's  Windows  server 
product  mana^ment  group, 
said  security  and  code  re¬ 
views.  tuning  and  localization 
work  will  cause  Microsoft  to 
delay  the  product  until  the 
fourth  quarter. 

“Do  I  wait?  TbeyVe  never 
hit  a  deadline  yet.“  said  Tom 
Pane,  a  vice  president  of  tech¬ 
nology  at  New  York-based 
AnnTaylor  Stores  Corp.. 
which  has  been  exploring 
server  consolidation  with 
VMware. 

Cognizant  that  support  is 
winding  down  for  Windows 
NT  Server  4.0.  Pane  said  that 
the  retailer  has  already  begun 
its  conversion  to  Windows 
2000  and  that  he  doesn't  want 
Vutualizarion.page57 


HIPAAData 
Rules  Leave 
Choices  to  IT 

But  new  health  care 
security  standards 
raise  le^  concerns 


New  federal  rules  for  securiztg 
personal  health  data  give  in¬ 
surers  and  medical  providers 
more  flexibility  on  IT  than 
expected.  That  could  lower 
compliance  cosu  but  create  a 
potential  legal  ni^tmaie  for 
health  care  companies,  ac¬ 
cording  to  industry  oflfldals. 
consultants  and  lawyers. 

HIPAA  Rules,  page  J6 
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Mir'oso*l';>  dCQuisitun  o( 
Conned)!  it  virtual  PC 
sottivare  as  neli 


Microsoft  Buys  Its  Way  Into 
Server  Consolidation  Space 


Dela>’  in  \irtualization  products  release  ma>-  be 
saving  grace  for  rixal  offerings  from  VMware 


Virtual  Sen'er  product  would 
ship  this  quaner.  But  lim 
Hebert,  general  manager  of 
Microsoft’s  Windows  serx-er 
product  management  group, 
said  securit>’  and  code  re¬ 
views.  tuning  and  localization 
work  will  cause  Microsoft  to 
delay  the  product  until  the 
fourth  quarter. 

•'Do  1  wait?  They've  never 
hit  a  deadline  yet."  said  Tom 
Pane,  a  vice  president  of  tech¬ 
nology  at  New  York-based 
AnnTaylor  Stores  Corp.. 
which  has  been  exploring 
ser\'er  consolidation  with 
VMware. 

Cognizant  that  support  is 
winding  down  for  Windows 
NT  Sers’er  d.O.  Pane  said  that 
the  retailer  has  already  begun 
its  conversion  to  Windows 
2000  and  that  he  doesn't  want 
V'trrualizarion.  page  57 


BY  CAROL  SLIWA 

Microsoft  Corp,  is  counting  on 
the  virtual  machine  software 
that  it  acquired  last  week  ftom 
Connectix  Corp.  to  appeal  to 
Windows  NT  Server  4.0  users 
who  are  interested  in  server 
consolidation  and  migration. 

The  Connectix  Virtual  Serv¬ 
er  software  lets  users  run  mul¬ 
tiple  distinct  copies  of  server 
operating  systems  —  including 
Windows.  Linux  and  Unix  — 
on  a  single  physical  machine. 

But  it’s  unclear  how  recep¬ 
tive  users  will  be  to  the  new 


Microsoft  offering,  since  it 
won't  become  generally  avail¬ 
able  until  year's  end  and  its 
arch  competition.  CSX  Sender 
from  VMware  Inc.  in  Palo 
Alto.  Calif.,  has  been  shipping 
for  more  than  tw  o  years. 

San  Mateo.  Calif. -based 
Connectix  recently  said  its 


HIPAAData 
Rules  Leave 
Choices  to  IT 


BV  PATRICK  THIBODEAU 

WASHINGTON 

The  big  winter  storm  that  shut 
down  many  federal  govern¬ 
ment  operations  in  \^^shing- 
ton  last  week,  along  with 
businesses  throughout  li^ 
the  Northeast,  didn't  hurt 
Mattress  Giant  Corp. 
much.  That's  because  it  has 
nude  telecommuting  an  essen¬ 
tial  pan  of  its  IT  strateg)'. 

“If  we  didn’t  have  [telecom¬ 
muting]  . . .  we'd  be  in  a  world 
of  hurt,"  said  Steve  Williams. 


But  new  hetilth  cttre 
sccurit)'  standards 
raise  legal  eoncems 


BV  BOB  BREWIN 

New  federal  rules  for  securing 
personal  health  data  give  in¬ 
surers  and  medical  providers 
more  flexibility  on  IT  than 
expected.  That  could  lower 
compliance  costs  but  create  a 
potential  legal  nightmare  for 
health  care  companies,  ac¬ 
cording  to  industry  officials, 
consultants  and  lawyers. 

HtPAA  Kuies.  page  16 


Th«  future  of  tire  data  center  etarts  here,  with  the  N1>enabied  Sun  Rre  Btade  Ptatfonn. 


Bned  on  open  standards,  the  rww  Sun  Bre  Btade  Pfatform  is  tire  only  ptatform  designed  to  integrate 
SPARC*/Solaris*  and  x8B  Unux/Solaris  Blades,  as  well  as  special  function  btodea,  Into  a  single  btade  shelf. 
H  also  seamlessly  integrates  with  network  attached  storage,  like  the  new  Sun  StorEdgeTaSIO  NAS.  Add  the 
N1  Provisioning  Server,  part  of  our  revolutionary  new  IT  architecturs,  and  you  can  virtualize  your  blade 
computing  resources  and  quickly  respcmd  to  changes  in  demand,  or  change  services  on  demand. 

With  tire  $w  Rre  Blade  Platform  and  N1,  you're  not  }ust  managing  cost  and  complexity.  You're  driving  it 
out  Bottom  line:  You’re  starting  to  make  your  data  center  work  overtime,  instead  df  yetr  peopta.  .  . 


are  built  and  mwreged.  Now  computing,  networking  and  storage  components  can  be  virtualized  and 
operated  as  a  single,  shift-on-the>fly  system.  The  result  a  far  more  ef^ierrt  computing  environment  with 
dramatically  reduced  cost  and  complexity. 


SMI'S  KW II  ntVISIMIIfi  SERVER 

software  enables  you  to  dynamically 
reallocate  resources,  so  you  can  deploy 
new  services  as  needed. 


ca  smart  Program  Guidelina: 

The  ca  smart  logo  is  only  to  be  used  by  CA 
partners  for  innovative  eBusiness  products 
or  solutions  on  which  CA  technology  resides, 
is  a  component  of,  or  is  otherwise  integrated. 
Which  would  not  include  sporting  goods. 

For  more  information,  visit  ca.com/casmart. 
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1  Taming  Temp  Costs 

*  In  thtTBdmologyMetton:  Specialized 
^  software  tools  are  helping  corpora* 
tions  save  on  temporary-woridorce 
management  expenses.  PageZ7 


02.24.03 


The  Data  BuMs  the  Products 

I  hi  the  Technotogy  eeetlon:  Product  life¬ 
cycle  management  tools  can  lower  costs 
and  speed  time  to  market,  but  IT  should 
expect  integration  hurdles.  Page  32 
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44  Cardifial  Health  moves  to 
an  automated  warehouse  sys¬ 
tem.  achieving  10%  produc* 
tivity  gains. 

44  The  reorganization  of  Coming 
Life  Sciences’  European  op¬ 
erations  was  completed  at 
75%  of  the  estimated  cost 

45  A  Web  site  project  at  Atnail 
drhws  ordering  costs  from  $9 
per  transactioD  to  39  cents. 

46  A  supply  chain  overhaul  has 
saved  the  Tennessee  Valley 
Authority  $233  million. 

46  A  new  data  warehouse  at 
Office  Depot  boosts  annual 
sales  by  $117  million. 

47  Celanese  Chemicals'  wireless 
system  gives  salespeople  ac¬ 
cess  to  back-end  billing  and 
shippii^  data  —  and  e-mail. 

46  IMta  Air  Lines  deploys  hun¬ 
dreds  of  self-service  kiosks  to 
save  travelers  time. 

48  An  intrusion-detection  system 
at  PersMng  reduces  the  risk  of 
service  interruption. 

49  A  Palm  handheld  trial  at  the 
University  of  South  Dakota 
has  been  a  learning  ej^ri* 
ence  for  students  and  FT  stafil 

51  A  new  appUcatioD  framework 
allows  66  Power  Systems  to 
cut  development  time. 


36  Security  Managsrsdoumal: 
Corporate  Addition  Means 
Reduction  in  Security.  In  the 
wake  of  a  merger.  ViiKe  TXres- 
day  gets  caught  between  two 
different  sets  of  security 
priorities. 

39  Q6A:  Tivoli  DM  Explains  IBM 
Unit's  Move  to  J2EE.  Tivoli  is 
rebuilding  its  flagship  Tivoli 
Enterprise  framework  around 
12EE.  General  manr^r  Robert 
LeBlaiK;  explains  why  and 
what  it  means  for  users. 
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6  Hackers  steal  8  million  credit 
card  numbers,  but  the  compa¬ 
ny  whose  systems  were  com¬ 
promised  says  the  culprits 
may  not  be  ^le  to  use  them. 

6  IBM's  Powers  RISC  micro¬ 
processor,  due  to  ship  next 
year,  will  deliver  four  times 
the  perfc»inance  of  current 
chi^  says  the  company. 

12  CIOs  say  IT  cuts  could  be 
avoided  throu^  better  com¬ 
munication  of  ITs  business 
value  to  the  company. 

12  A  Retiring  Microsoft  official 
says  the  software  vendor  must 
embrace  open  sourtx  risk  a 
bleak  future. 

14  Reducing  software  flaws  is  a 

near-term,  achievable  goal  of 
the  president’s  cybersecurity 
strategy,  experts  say. 

18  High  prices  are  fueling  inter¬ 
est  in  energy  management 
systems. 


8  On  the  Mark:  Mark  Hall 
counts  three  ways  to  build 
Web  services  and  encounters 
researchers  who  bemoan  the 
quality  of  Web  pages. 

24  Patricia  Keefs  lauds  the  work 
done  by  the  Premier  100  Best 
in  Class  as  examples  of  bow 
IT  doesn’t  just  help  compa¬ 
nies  but  can  save  them,  toa 

24  Pinun  Pox  claims  that  you 
could  have  known  years  in  ad¬ 
vance  about  your  IT  shop's 
current  predicament,  if  only 
you  had  used  business-simu¬ 
lation  software. 

25  Dan  Oillmor  says  IT  managers 
are  addicted  to  monopolies 
for  reasons  of  simplicity.  But 
that  addiction  may  cause 
pn^lems  in  the  future. 

40  Tommy  Poterson  suggests  a 
few  stnall  security  steps  by 
corporate  IT  that  would  go  a 
long  way  toward  reducing 
threats  to  the  nation’s  Internet 
inftastructure. 

58  Frankly  Speaking:  Frank 
Hayes  worries  that  a  goodbye 
memo  from  a  longtime  Micro¬ 
soft  employee  may  be  telling 
us  that  the  company  isn’t 
woridng  in  ITs  best  long-term 
interest. 
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Microsoft  Targets 
Rights  Manai^nieiit 
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SAP  Plans  CRM 
Software  Upgrade 

StfMnMRpImbMiia 
new  wdoB  d  hs  customer  fda* 
ttondHpamnagamadCCiaDap- 
idtodiom  to  June.  The  aqfiAP 
CfM  upgrade  tdi  add  faWas  for  | 


for  aiohli  davtoea.  taM  SAP, 
vddch  is  brytag  to  baOar  podtkm 
Nadt  to  cempato  agatosi  rfvab 
wch  as  Stohd  Systoms  Inc. 

Xerox  Asks  Court 
To  Bar  Palm  Sales 

Xam  Corp.  aafead  a  U.S.  appeals 
coyrt  to  WbaWngton  to  bteck 
satosdPdw  toe.  handheld  da- 
vtoasthdhwahsaafoimdtoto* 
frtoga  on  a  handnrltlnrracoBd- 
tton  patofit  haU  by  Stamford. 
Cean.*baaad  Xana.  Tho  appeals 
caurtaphddthatofrtageawntmh 
tog  but  SMl  toe  caae  bacfc  to  the 
trial  lodge  for  further  analyds  of 
the  pataaTs  viMly. 

Short  Takes 

IBM  added  a  wore  ponaifd  w 
dmr  trf  Iti  Pirwirl  pmf aaini  In  Hi 

pBSOtow  end  Unto  earrar  as  part 
d  an  effort  to  pd  men  praaaurs 
on  rfod  Sun  •Bcrosyatoma  he. 

...  In  other  naan.  BH  eamptotod 
As  tS.1  hMen  artoddHnn  d  Ca- 
parttoe.  Cdi,  based  fWIWWAL 
SOFTtoWE  COMP,  an  Friday,  em 


System  Break-in  Nets  Hackers 
8  Million  Credit  Card  Numbers 


Company  claims  data  may  not  be 
‘usable’  but  vows  to  improve  IT  security 


BY  LUCAS  ME, 

A  CREDIT  CARD  trans¬ 
action  processing 
company  last  week 
confirmed  that  mil¬ 
lions  of  card  numbers  were 
stolen  recently  when  someone 
hacked  into  its  computers.  But 
it  defended  itself 
by  saying  tbe  cul¬ 
prits  may  not  have 
obtained  any  use¬ 
ful  information. 

Omaha-based  Data  Proces¬ 
sors  International  Inc.  (DPI) 
acknowledged  in  a  statement 
that  it  “experienced  a  system 
intrusion"  four  weeks  ago.  But 
it  added  that  the  stolen  data 
“did  not  include  any  personal 
information  that  could  relate  a 
card  number  to  an  individual.' 

The  hackers  didn’t  get  the 
names,  addresses,  phone  num¬ 
bers  or  Social  Security  num¬ 
bers  of  any  cardholders,  ac¬ 
cording  to  the  statement.  "It’s 
still  unclear  if  any  usable  data 
was  compromised  at  all."  said 
DPI.  which  processes  credit 
card  transactions  for  direct 
marketing  and  mail-order  cat¬ 
alog  companies. 

But  even  if  a  backer  had 
only  a  credit  card  number,  get¬ 
ting  the  name,  address  and 
phone  number  of  the  card¬ 
holder  wouldn’t  be  an  insur¬ 
mountable  task,  according  to 
Avivah  titan,  a  financial  ser¬ 
vices  analyst  at  Gartner  Inc.  in 
Stamford.  Cfonn.  For  example. 
Utan  said,  information  could 
be  purchased  online  throu^ 


so-called  skip  trace  databases, 
which  are  used  by  bounty 
hunters  and  others  to  find  per¬ 
sonal  information. 

Scott  Jones,  a  spokesman  for 
DPI,  said  the  company  would¬ 
n't  comment  about  any  of  tbe 
technical  aspects  of  the  sys¬ 
tem  intrusion. 

Jones  also  wouldn't 
discuss  whether 
DPI  had  intention¬ 
ally  separated  the 
card  numbers  from  the  per¬ 
sonal  data  of  consumers  in  its 
systems.  But  be  did  say  that 
the  company  is  working  to  im¬ 
prove  its  information  security 
in  response  to  the  break-in. 

Analysts  said  the  incident 
was  tbe  largest  single  case  of 
online  theft  of  credit  informa¬ 
tion.  A  spokeswoman  for  Mas¬ 
terCard  International  Inc.  put 
the  total  count  of  credit  card 
numbers  that  were  exposed  to 
the  hackers  at  about  8  million. 

Big  Targets 

Purchase,  N.Y.-based  Master¬ 
Card  said  22  miUioa  of  its 
card  numbers  were  taken, 
while  Foster  City.  Calif -based 
Visa  International  Inc.  said  the 
hackers  made  oft  whh  3.4  mil¬ 
lion  of  its  card  numbers.  New 
York-based  American  Express 
Cforp.  and  Discover  (^ard.  a 
unit  of  New  Yoik-based  Mor¬ 
gan  Stanley  Dean  Winer  & 

Co.,  were  also  affected  by  the 
intrusioa 

Richard  Fischer,  a  partner  at 
San  Franctsco-basred  law  firm 
Morrison  &  Foerster  LLP,  ad¬ 
vises  Visa  and  other  financial 
services  firms  on  payment 
systems,  e-commerce  and  data 
privacy  issues.  He  said  securi¬ 
ty  is  a  game  of  one-upmanship 
with  hackers  and  requires 
companies  to  constantly  up¬ 
grade  their  technology. 

For  example,  credit  card 
companies  such  as  Visa  and 
MasterCard  use  sophisticated 


computing  algorithms  to  track 
transactions  by  cardholders 
and  detect  unusual  buying 
patterns,  Fischer  said. 

MasterCard  said  that  during 
the  week  of  F^.  3  it  began  to 
notify  its  member  banks  of  tbe 
system  break-in  at  DPI.  Visa 
said  its  fraud  team  immediate¬ 
ly  notified  all  affected  card  is¬ 
suers  and  is  now  working  with 
DPI  "to  protect  against  the 


threat  of  a  future  intrusion." 

But  neither  tbe  credit  card 
companies  nor  DPI  have  dis¬ 
closed  any  information  about 
the  thefts  on  their  consumer 
Web  sites.  "Instead,  they  will 
monitor  tbe  accounts  for  any 
signs  of  fraud.”  Fischer  said. 
"If  there's  any  suggestion  of 
unauthorized  transactions, 
they’re  going  to  be  contacting 
thcHse  individual  customers."  I 


(tonadton  Insurer  Rejects  *0001 
Tel*  Approach  on  Data  Theft 
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California  Utility  Invests 
$204M  in  System  Overhaul 


PG&E  bets  big  on  packaged  software  to 
replace  homegrown  customer  app 


BY  THOMAB  HOrFMAN 

Pacifk  Gas  &  Electric  Co.  has 
completed  a  three*year*ptus 
effort  to  replace  its  legacy  cus¬ 
tomer  informadon  system 
(CIS)  with  off-the-shelf  tech¬ 
nology.  a  project  that  one  ana¬ 
lyst  described  as  the  largest 
iffiplementadoo  of  packaged 
CIS  software  in  the  energy  in¬ 
dustry  thus  far. 

The  new  system,  which 
went  live  Dec.  S,  required  a  to¬ 
tal  investment  of  S204  million, 
said  Roger  Gray.  CIO  at  San 
Francisco-based  PGdcE.  That 
covered  the  cost  of  hardware. 


software,  consulting  services 
and  11  months  of  operational 
testing  and  parallel  billing 
runs  on  the  new  system  and 
the  one  it  replaced,  he  said. 

PG&E  built  the  new  system 
around  CforDaptix.  a  set  of 
customer  management  appli¬ 
cations  developed  by  Morris¬ 
town.  N.;.-based  SPL  Worid- 
Group.  Gray  said  the  project 
was  launched  in  response  to 
the  deregulation  of  Califor¬ 
nia’s  power  industry,  which 
created  a  need  for  utilities 
such  as  P(}&E  to  meet  new 
customer  service  require¬ 


ments  in  a  more  competitive 
environment 
PG&E’s  homegrown  main- 
ffame-based  CIS  system  "was 
27  years  old.  had  mchausted  its 
useful  life  and  wasn't  flexible 
enough  to  handle  deregula¬ 
tion.*'  be  added 
The  CorDaplix  software 
runs  on  an  OS/390-based  IBM 
mainframe,  like  the  home¬ 
grown  system  did  But  it’s  con- 
siderabty  more  feature-rich 
than  the  older  technology,  said 
TVacy  Harizal  director  of  CIS 
at  PG&E.  For  example,  Harizal 
said  (^rDaptix  woiics  in  real 
time  so  that  when  a  customer 
service  representative  fields  a 
rail,  information  in  the  system 
is  automatically  updated.  Be¬ 


fore,  PG&E  employees  had  to 
wait  a  few  days  for  customer 
accounts  to  be  updated  fol¬ 
lowing  mainframe  batch-proc¬ 
essing  jobs,  she  said. 

In  addition,  the  new  soft¬ 
ware  is  more  fully  integrated 
with  applications  such  as 
PGStPs  metering  and  rate<al- 
culadoo  systems,  maldng  data 
ftom  those  systems  more 
readily  available  to  customer 
service  workers,  Harizal  said 

On  Tkne,  Under  Budget 

Because  the  CIS  project  was 
driven  by  deregulation,  PG&E 
didn't  conduct  an  upfront 
analysis  of  potential  returns 
on  investment.  Harizal  said 
But  despite  the  size  of  the 
project  —  which  included  the 
conversion  of  30  billkm  rows 
of  data  from  the  legacy  system 
—  the  company  managed  to 
complete  the  work  on  time  at 
a  cost  that  was  10%  below  its 
original  budget,  sbe  said 


More  OneWorld  Users  Press  for  Aititration 


J.D.  Edwards 
defends  software 


BY  MABC  L.  SOMBINI 

Three  more  companies  that 
bou^t  early  versions  of  JD. 
Edwards  &  Co's  OneWorld 
enterprise  resource  planning 
(ERP)  software  have  submit¬ 
ted  arbitration  claims  against 
the  business  applications  ven¬ 
dor.  adding  to  a  list  of  five  cas¬ 
es  that  came  to  light  last  year. 

The  three  additional  users 
filed  for  arbitration  between 
November  and  this  tnonth. 
They  claim  the  OneWorld 
suite  has  been  so  troublesome 
and  bug-ridden  that  their  in¬ 
stallations  are  in  limbo.  The 
companies  all  said  they  have 
yet  to  decide  if  they*  will  keep 
the  f.D.  Edwards  applications 
or  switch  to  another  vendor. 

The  new  cases  are  similar  to 
the  five  that  began  going  to  ar¬ 
bitration  last  spring  [Quick- 
Link  28470].  One  of  the  eaiiier 
filings  resulted  in  an  Ameri¬ 
can  Arbitration  Association 
panel  awardii^  S2J  miUioo  in 
damages  to  Arlington,  Texas- 
based  Doskocil  Manufacturing 


Ca  Denver-based  J  Ed¬ 
wards  said  it  has  settled  an¬ 
other  of  the  earlier  cases  but 
wouldn't  disclose  any  details. 

Whatever  prc^lems  early 
adopters  of  OneWorld  may 
have  faced,  the  software  is 
now  as  st^le  as  any  other 
ERP  system,  said  Jcishua 
Greenbaum.  an  analyst  at  En¬ 
terprise  Applications  Consult¬ 
ing  in  Daly  C^ty,  C^alif. 

But  the  fallout  from  early 
OneWbrld  rollouts  continues. 
Sprague  Energy  Cforp..  an  en¬ 
ergy  products  distributor  in 
Portsmouth.  Nil.,  said  in  an 
arbitration  filing  <4>tamed  by 
ComputerwoHd  last  week  that 
it  has  suffered  more  than  SIO 
million  in  damages  because  of 
problems  vrith  OneWorld's 
stability  and  the  cost  and 
length  of  its  implementation. 

Sprague  began  installing 
billing,  finance  and  other  One- 
World  applications  in  2000. 


CAgflBff 


OothocillmuiKtunnQOonwKati 
afbBilDR  M  (he  wraon  ol  OnsMirtd  II 
tned  to  Ktdi  in  696  dUnl  Aork  property: 


then  switched  to  JJ).  Edwards' 
Web-based  (ioeWorid  XE  soft¬ 
ware  a  year  later.  But  after 
working  for  more  than  two 
years,  Sprague  was  only  able 
to  bring  OneWorld  XE  partial¬ 
ly  online  at  the  end  of  last 
year,  the  company  said. 

Paul  Scoff,  vice  president  of 
law  at  Sprague,  declined  to 
comment  further  on  the  prob¬ 
lems  it  encountered.  But  he 
said  the  portions  of  the  ERP 
system  that  Sprague  is  using 
had  to  be  heavily  customized 
to  make  them  work. 

Unkept  Promises 

The  Flexitallic  Group  Inc-,  a 
maker  of  industrial  gaskets  in 
Houston,  spent  more  than  S3.7 
million  on  a  OneWorld  project 
and  was  "almost  brought  to  its 
knees  because  of  promises 
made  and  not  kept"  by  j.D.  Ed¬ 
wards,  said  CEO  Ray  LeSage. 

According  to  arbitration 
documents.  FlexitaUic  bought 
OneWortd  in  1998  but  found 
that  the  ^iplications  "could 
not  operate  as  a  fully  integrat¬ 
ed  system." 

Gerald  Birin,  president  of 
Amherst  Tbchnologies  LLC  in 


Merrimack.  NJL,  said  prob¬ 
lems  with  a  OneWorld  system 
that  was  installed  in  1999  are 
forcing  the  IT  products  re¬ 
seller  to  maintain  a  Separate 
system  built  around  IBM's 
Universe  database  in  additioo 
to  the  )J3.  Edwards  software. 

A  ^kesman  for  JJ>.  Ed¬ 
wards  wouldn’t  comment  on 
the  pending  cases.  But  he  said 
the  company  “stands  by  the 
quality  its  software  and  will 
vigorously  defend  any  clalmit 
to  the  contrary."  6 


By  the  Numbers 


Zarko  Sumic,  a  Bellevue. 
V^sh. -based  analyst  at  Meta 
Group  Inc.  said  be  isn’t  aware 
of  any  off-the-shelf  CIS  soft¬ 
ware  installations  within  the 
energy  industry  that  have 
been  larger  than  the  octe  done 
by  P(j&E,  which  provides  nat¬ 
ural  gas  and  electric  Hy  in  a 
7D.000-sq.-fnL  area  of  north¬ 
ern  and  central  California. 

Sumic  said  that  nnee  the 
1999  deregulation  of  Califor¬ 
nia's  energy  market,  the  state 
has  established  some  of  the 
most  complex  formats  in 
North  America  for  setting  the 
billing  rates  that  different  util¬ 
ity  customers  are  charged. 
PG&E  needed  a  CIS  system 
that  could  handlg  that  kind  of 
complexity,  be  said. 

In  addition,  the  lack  of  inte¬ 
gration  between  PG&E’s  old 
IBM  2270  green-screen  system 
and  other  applications  result¬ 
ed  in  lag  time  for  its  customer 
service  workers  when  they 
tried  to  access  data  from  mul- 
tqile  systems,  Sumic  said. 

Harizal  said  IKj&E  foced  a 
number  of  onerous  technical 
challenges,  including  the  need 
to  convert  its  historical  cus¬ 
tomer  dau  as  well  as  informa¬ 
tion  ftom  other  systems  that 
was  required  to  set  up  inter¬ 
faces  to  the  CorDaptix  soft¬ 
ware.  To  ensure  success  in 
that  area,  the  utility  conducted 
more  than  50  trial  runs  of  the 
data  conversion  scripts  it  de¬ 
veloped.  sbe  said.  I 
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w  COmputerwQrld  com 


AT  DEADLINE 


Microsoft  Targets 
Rights  Management 

Microsoft  Corp.  s«d  it's  devotop* 
ing  a  technoAogy  called  Windows 
Rights  Manaoement  Servics 
that's  aimed  at  helping  companies 
secure  sensitive  data,  such  as  fi¬ 
nancial  reports  and  planning  doc¬ 
uments.  The  tool  is  a  Web  service 
that's  being  fault  on  top  of  Micro- 
soft’s  .Net  Frameworh  and  will 
work  with  the  company’s  upcom¬ 
ing  Windows  Server  2003  operat¬ 
ing  system.  Seta-test  code  is 
scheduled  to  be  released  in  the 
second  quarter. 


System  Break-in  Nets  Hackers 
8  Million  Credit  Card  Numbers 


t;ompan\'  claims  data  ma\-  not  be 
‘usiible’  but  \  ow's  to  improx  e  IT  securin' 


Xerox  Asks  Court 
To  Bar  Palm  Sales 

Xerei  Corp.  asked  a  U.S.  appeals 
court  fat  Washington  to  blo^ 
sales  of  Palm  Inc.  handheld  de- 
vicas  that  have  been  found  to  in¬ 
fringe  on  a  handwntmg-rocogni- 
hon  patent  held  by  Stamford. 
Conn.-ba8ad  Xem^  The  appeab 
court  upheld  the  infringernent  rul¬ 
ing  but  sent  the  case  back  to  the 
trial  fudge  for  further  analysts  of 
the  patent's  vafidHy. 


Short  Takes 

IBM  Kfded  a  more  powerful  ver¬ 
sion  of  its  Pdwv4  processor  to  its 
p630  low-end  IMa  server  as  part 
of  an  effort  to  put  more  pressure 
on  rival  Sun  Mterosystems  Inc. 

...  In  other  news,  IBM  comptoted 
Ms  S2.1  bMlon  acquisitkin  of  Cu¬ 
pertino.  CaBf.-basad  RATtONAL 
SOFTWARE  CORP.  on  Friday,  one 
day  after  the  European  Commis- 
slon  approved  the  deal. 


BY  LUCAS  Ml 


SAP  Plans  CRM 
Software  Upgrade 

SAP  A8  said  M  plans  to  ship  a 
new  version  of  Ms  customer  rela¬ 
tionship  management  (CRM)  ap¬ 
plications  In  June.  The  mySAP 
CRM  upgrade  wHI  add  features  tor 
specific  vertical  industries  as  well 
as  increased  data  access  support 
for  mobile  devices,  said  SAP. 
which  is  trying  to  better  position 
itself  to  compete  ^fainst  rivals 
such  as  SiefaM  Systems  Inc. 


ev  LUCAS  MEARIAN 

CREim  CARD  trans¬ 
action  processing 
company  last  week 
onfirnn-d  that  mil¬ 
lions  of  c.ird  numbers  were 
stolen  recently  when  someone 
hacked  >nto  its  computers.  But 
it  defended  itself 
by  saying  the  cul¬ 
prits  may  not  haV' 
obtained  any  use¬ 
ful  information. 

Omaha-based  Data  Proces¬ 
sors  international  Inc.  (DPI) 
acknowledged  in  a  statement 
that  it  “experienced  a  system 
intrusion"  four  weeks  ago.  But 
it  added  that  the  stolen  data 
“did  not  include  any  person.il 
information  that  could  relate  a 
card  number  to  an  individual." 

The  hackers  didn’t  get  the 
names,  addresses,  phone  num¬ 
bers  or  Social  Security  num¬ 
bers  of  arty  cardholders,  ac¬ 
cording  to  the  statement.  “It's 
still  unclear  if  any  usable  data 
was  compromised  at  a]].’’  said 
DPI.  which  processes  credit 
card  transactions  for  direct 
marketing  and  mail-order  cat¬ 
alog  L-ompanies. 

But  even  if  a  hacker  had 
only  a  credit  card  number,  get¬ 
ting  the  name,  address  and 
phone  number  of  the  card¬ 
holder  wouldn't  be  an  in.sur- 
mountable  task,  according  to 
Avivah  Litan,  a  financial  ser¬ 
vices  analyst  at  Gartner  Inc.  in 
Stamford.  Conn.  For  example, 
Litan  said,  information  could 
be  purchasL-d  online  through 
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so-called  skip  trace  databases, 
which  are  used  by  bounty 
hunters  and  others  to  find  per¬ 
sonal  informaiion. 

Scott  loncs.  a  spokesman  for 
DPI.  said  the  company  would¬ 
n't  comment  about  any  of  the 
technical  aspects  of  the  sys¬ 
tem  intrusion, 
fones  also  wouldn't 
discuss  whether 
DPI  had  intention¬ 
ally  separated  the 
card  numbers  from  the  per¬ 
sonal  data  of  consumers  in  ii.s 
systems.  But  he  did  say  that 
the  company  is  working  to  im¬ 
prove  its  information  security 
in  response  to  the  break-in. 

Analysts  .said  the  incident 
wras  the  largest  single  case  of 
online  theft  of  credit  informa¬ 
tion.  A  spokeswoman  for  Mas¬ 
terCard  International  Inc.  pul 
the  total  count  of  credit  card 
numbers  that  were  exposed  to 
the  hackers  ar  about  8  million. 

Big  Targets 

Purchase.  N.Y.-based  Master¬ 
Card  said  2.2  million  of  its 
card  numbers  were  taken, 
while  Fo.ster  City.  Calif. -ba.sed 
Visa  Inierrtational  Inc.  said  (be 
hackers  made  off  with  3.4  mil¬ 
lion  of  its  card  numbers.  New 
York-based  American  Express 
Corp.  and  Discover  Card,  a 
unit  of  New  York-based  Mor¬ 
gan  Stanley  Dean  Witter  fit 
Co.,  were  alstT  affected  by  the 
intrusion. 

Richard  Fischer,  a  partner  at 
San  Francisco-based  law  firm 
Morrist>n  fit  Focrsier  LLP,  ad¬ 
vises  Visa  and  other  financial 
services  firms  on  payment 
systems,  e-commcrcc  and  data 
privacy  issues.  He  said  securi¬ 
ty  is  a  game  of  one-upmanship 
with  hackers  and  requires 
companies  to  constantly  up¬ 
grade  their  technology. 

For  example,  credit  card 
companies  such  as  Visa  and 
MaiuerCard  use  sophisticated 


computing  algorithms  to  track 
transactions  by  cardholders 
and  detect  unusual  buying 
patterns.  Fischer  said. 

MasterCard  said  that  during 
the  week  of  Feb.  3  it  began  to 
notify  its  member  banks  of  the 
system  break-in  at  DPI.  Visa 
said  its  fraud  team  immediate¬ 
ly  notified  all  affected  card  is¬ 
suers  and  is  now  working  w'ith 
DPI  "fo  protect  against  the 


threat  of  a  future  intrusion." 

But  neither  the  credit  card 
companies  nor  DPI  have  dis¬ 
closed  any  information  about 
the  thefts  on  their  consumer 
Web  .sites.  "Instead,  they  will 
monitor  the  accounts  for  any 
signs  of  fraud,’’  Fischer  said. 
"If  there’s  any  suggestion  of 
uruuthorized  transactions, 
they’re  going  to  be  contacting 
those  individual  customers."  I 


Canadian  Insurer  Rejects  ‘Don’t 
Teir  Approach  on  Data  Theft 


The  decision  by  U.S.  credit 
card  companies  not  to  notify 
the  customers  whose  card 
numbers  were  pilfered  from 
OPTs  systems  contrasts 
sharply  with  actions  taken  by 
Co-opmtors  Life  Insurance 
Co.  when  a  dek  dnve  was 
stolen  from  an  IBM  Canada 
Ltd.  subsidiary  in  January. 

6u^.  Orttaho-based  Co- 
operators  had  no  way  of  know¬ 
ing  whether  the  disk  dnve 
which  contained  details 
about  176.000  insurance  pti- 
cies.  wotdd  be  used  by  identity 
thieves.  But  company  officiais 
fen  the  risk  alone  required  them 
to  notify  the  customers  whose 
data  WBS  taken,  said  spokes¬ 
woman  Dominique  O'Rourke. 

*We  just  fett  that  it  was  the 
nght  thi^  to  do.*  O'Rourke 
said.  There's  no  legal  obUga- 
tion  tor  us  to  do  H.  We  just  felt 
our  customers  had  the  nght  to 
know  and  should  lake  st^  10 
protect  themselves.' 

Co-opeiators  set  up  a  caH 
center  and  sent  letters  to  cus¬ 
tomers  with  advice  on  actions 
they  codd  take  to  protect 
themselves,  such  as  notifying 
credit  reportino  agencies  of  the 
theft  and  monitoring  their  bank 
and  credt  card  statements. 

But  the  worst  fears  of  Co- 
operators  offlctais  may  nor  be 
reabed.  Police  in  Regina. 
Saskatchewan,  where  IBM 


Canada's  Information  Systems 
Management  (ISM)  unit  is 
based,  recently  arrested  and 
charged  an  ISM  employee  In 
connection  with  the  th^. 

Regina  Police  SqL  Rick 
Bourassa  said  investigators 
believe  the  thief  was  interested 
only  in  the  disk  drive,  not  the 
data  stored  on  IL  There  is 
nothing  to  indicate  the  infor- 
mabon  was  either  targeted  or 
used.*  Bourassa  sakt- The  po¬ 
lice  wouldn't  release  other  de¬ 
tails,  such  as  whether  the  data 
had  been  encrypted. 

Neither  Can^  nor  the  US. 
requires  companies  to  notify 
customers  of  data  thefts.  But  a 
California  law  that  lakes  effed 
in  July  will  recMre  companies 
to  no%  customers  in  that 
state  if  their  persorW  data  has 
been  compromised. 

-Patrick  Thibodeau 

jWejiistfeit 
'our  cus¬ 
tomers  had  the 
righttoknow 
and  shouM  take 
steps  to  protect 
thonseives. 

OOMWIQUE  O’ROURKE. 
SPOKESWOMM.  CO-OPERATORS 
LIFE  INSURANCE  CO. 
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Califomia  Utility  Invests 
$204M  in  System  Overhaul 


PG&E  bets  big  on  packaged  software  to 
replace  homegRiwn  customer  app 


8V  THOMAS  HOFFMAN 

Pacific  Gas  &  Electric  Co.  has 
completed  a  three-year-plus 
effort  to  replace  its  legacy  cus¬ 
tomer  information  system 
(CIS)  with  off-the-shelf  tech¬ 
nology-.  a  project  that  one  ana¬ 
lyst  described  as  the  largest 
implementation  of  packaged 
CIS  software  in  the  energy  in¬ 
dustry  thus  far. 

The  new  system,  which 
went  live  Dec.  5.  required  a  to¬ 
tal  investment  of  $204  million, 
said  Roger  Gray,  CIO  at  San 
Francisco-based  PG&E.  That 
covered  the  cost  of  hardware. 


software,  consulting  services 
and  II  months  of  operational 
testing  and  parallel  billing 
runs  on  the  new  s>*stem  and 
the  one  it  replaced,  he  said. 

PG&E  built  the  new  system 
around  CorDaptix.  a  set  of 
customer  management  appli¬ 
cations  developed  by  Morris¬ 
town.  N.J.-based  SPL  World- 
Group.  Gray  said  the  project 
was  launched  in  response  to 
the  deregulation  of  Califor¬ 
nia's  power  industry,  which 
created  a  need  for  utilities 
such  as  PG&E  to  meet  new 
customer  service  require¬ 


ments  in  a  more  competitive 
environment. 

PG&E's  homegrown  main¬ 
frame-based  CIS  system  “was 
37  years  old.  had  exhausted  its 
useful  life  and  wasn't  flexible 
enough  to  handle  deregula¬ 
tion."  he  added. 

The  CorDaptix  software 
runs  on  an  OS/390-based  IBM 
mainframe,  like  the  homc- 
grow-n  system  did.  But  it's  con¬ 
siderably  more  feature-rich 
than  the  older  technology,  said 
Tracy  HarizaL  director  of  CIS 
at  PG&E.  For  example.  Harizal 
said.  CorDaptix  works  in  real 
time  so  that  when  a  customer 
sen-ice  representative  fields  a 
call,  information  in  the  system 
is  automatically  updated.  Be- 


More  OneWorld  Users  Press  for  Arbitration 


J.D.  Edwards 
defends  software 


BV  MARC  L.  SONOINI 

Three  more  companies  that 
bought  early  versions  of  J.D. 
Edwards  &  Ca's  OneWorld 
enterprise  resource  planning 
(ERT)  software  have  submit¬ 
ted  arbitration  claims  against 
the  business  applications  ven¬ 
dor.  adding  to  a  list  of  five  cas¬ 
es  that  came  to  light  last  year. 

The  three  additional  users 
filed  for  arbitration  between 
November  and  this  month. 
They  claim  the  One^^'o^ld 
suite  has  been  so  troublesome 
and  bug-ridden  that  their  in¬ 
stallations  are  in  limbo.  The 
companies  all  said  they  ha>'e 
yet  to  decide  if  they  will  keep 
the  |.D.  Edwards  applications 
or  switch  to  another  vendor. 

The  nesv  cases  are  similar  to 
the  five  that  began  going  to  ar¬ 
bitration  last  spring  {Quick- 
Link  28470].  One  of  the  earlier 
filings  resulted  in  an  Ameri¬ 
can  Arbitration  Association 
panel  awarding  S2.3  million  in 
damages  to  Arlington.  Texas- 
based  DoskocU  Manufacturing 


Co.  Denver-based  JX).  Ed- 
w-ards  said  it  has  settled  an¬ 
other  of  the  earlier  cases  but 
wouldn't  disclose  any  details. 

Whatever  problems  early 
adopters  of  OneWorld  may 
have  faced,  the  software  is 
now  as  stable  as  any  other 
ERR  system,  said  Joshua 
Greenbaum.  an  analyst  at  En¬ 
terprise  Applications  Consult¬ 
ing  in  Daly  City.  Calif. 

But  the  fallout  from  early 
OneWorld  rollouts  continues. 
Sprague  Energy  Corp.,  an  en¬ 
ergy  products  distributor  in 
Portsmouth.  NJl..  said  in  an 
arbitration  filing  obtained  by 
Compuferworld  last  week  that 
it  has  suffered  more  than  SIO 
million  in  damages  because  of 
problems  with  OncWorld's 
stabilirt-  and  the  cost  and 
length  of  its  implementation. 

Sprague  began  installing 
billing,  finance  and  other  One- 
World  applications  in  2000. 
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then  switched  to  J.D.  Edwards' 
Web-based  OneWorld  XE  soft¬ 
ware  a  year  later.  But  after 
working  for  more  than  two 
years.  Sprague  was  only  able 
to  bring  OneWorld  XE  partial¬ 
ly  online  at  the  end  of  last 
year,  the  company  said. 

Paul  Scoff,  vice  president  of 
law  at  Sprague,  declined  to 
comment  further  on  the  prob¬ 
lems  it  encountered.  But  he 
said  the  ponions  of  the  ERP 
system  that  Sprague  Is  using 
had  to  be  heavily  customized 
to  make  them  work. 

Unkspt  Promises 

The  Ficxitallic  Group  Inc.,  a 
maker  of  industrial  gaskets  in 
Houston,  spent  more  than  S3.7 
million  on  a  OneWorld  project 
and  was  "almost  brought  to  its 
I  knees  because  of  promises 
made  and  not  kept"  b>'  J.D.  Ed¬ 
wards.  said  CEO  Ray  LeSage. 

According  to  arbitration 
documents.  Flexitallic  bought 
OneWorld  in  19Q8  but  found 
that  the  applications  "could 
not  operate  as  a  fully  integrat¬ 
ed  s)-stem." 

Gerald  Birin,  president  of 
Amherst  Technologies  LLC  in 


fore.  PG&E  employees  had  to 
wait  a  few  days  for  customer 
accounts  to  be  updated  fol¬ 
lowing  mainframe  batch-proc¬ 
essing  fobs,  she  said. 

In  addition,  the  new  soft¬ 
ware  is  more  fully  integrated 
with  applications  such  as 
PG&E’s  metering  and  rate-cal¬ 
culation  systems,  making  data 
from  those  systems  more 
readily  available  to  customer 
service  woiicers,  Harizal  said. 

On  Time,  Under  Budget 

Bccau.se  the  CIS  project  was 
driven  by  deregulation.  PG&E 
didn't  conduct  an  upfront 
analysis  of  potential  returns 
on  investment.  Harizal  said. 
But  despite  the  size  of  the 
project  —  which  included  the 
conversion  of  30  bilKon  rows 
of  data  from  the  legacy  system 
—  the  company  managed  to 
complete  the  work  on  time  at 
a  cost  that  was  10%  below  its 
original  budget,  she  said. 


Merrimack.  N.H..  said  prob¬ 
lems  with  a  OneWorld  system 
that  was  installed  in  1999  are 
forcing  the  TF  products  re¬ 
seller  to  maintain  a  separate 
system  built  around  IBM's 
Universe  database  in  addition 
to  the  J.D.  Edwards  software. 

A  spokesman  for  J.D.  Ed¬ 
wards  wouldn't  comment  on 
the  pending  cases.  But  he  said 
the  company  “stands  by  the 
quality  of  its  software  and  will 
vigorously  defend  any  claims 
to  the  contrary."  I 


I  Zarko  Sumic.  a  Bellevue. 
Wash. -based  analyst  at  Meta 
Group  Inc.,  said  he  isn't  aware 
of  any  off-the-shelf  CIS  soft¬ 
ware  installations  within  the 
energ)'  industry  that  have 
been  larger  than  the  one  done 
by  PG&E.  which  provides  nat¬ 
ural  gas  and  electricity  in  a 
TO.OOO-sq.-mi.  area  of  north¬ 
ern  and  central  Califomia. 

Sumic  said  that  since  the 
1999  deregulation  of  Califor¬ 
nia's  energy  market,  the  state 
has  established  some  of  the 
,  most  complex  formats  in 
North  America  for  setting  the 
billing  rates  that  different  util¬ 
ity  customers  are  charged. 
PG&E  needed  a  CIS  system 
that  could  handle  that  kind  of 
complexity,  he  said. 

in  addition,  the  lack  of  tiuc- 
graiion  between  PG&E's  old 
IBM  3270  grecn-screcn  system 
and  other  applicaiiorts  result¬ 
ed  in  tag  time  for  Us  customer 
seis'icc  workers  when  lhe>' 
tried  to  access  data  fn>m  mul¬ 
tiple  systems.  Sumic  said. 

Harizal  said'PG&E  faced  a 
number  of  onerous  technical 
I  challenges,  including  the  need 
to  convert  its  histitncal  cus¬ 
tomer  data  as  well  as  informa- 
lioD  from  other  ss-stems  that 
was  required  to  set  up  inter¬ 
faces  to  the  CorDaptix  soft¬ 
ware.  To  ensure  success  in 
that  area,  the  utilits*  conducted 
more  than  50  trial  runs  of  the 
data  conversion  senpts  it  de¬ 
veloped.  she  said.  I 
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IBM  Plugs  Holes 
In  Notes,  Domino 

IBM  saM  n  has  postsd  patches  fof 
three  buffer -overflow  pfoMems 
that  were  found  In  Its  Lotus  Notes 
and  Domino  6.0  software  by  Next 
Oeneradon  Sacurity  Software 
LUt.  a  consulting  firm  in  Sutton. 
England.  The  fixes  are  included  in 
a  6.0.1  releesa  of  Om  software. 
IBM  added  that  M  also  tested 
Domino  Server  $.0  for  the  vulner* 
abditios  and  dovelepad  sinelar 
patches  for  that  version. 


Orades  Rxes  DB, 
App  Server  Flaws 

Orado  Corp.  said  K  has  relaased 
patches  and  worti'around  inshw 
dons  for  four  security  flaws  in  rts 
Oradeft  database  and  two  more 
in  its  appficadon  server  software. 
wMeh  is  elso  sold  under  the  Ora* 
daft  name.  The  most  sedous 
problem  is  a  buffsr*overflow  Raw 
that  attackaie  could  exploit  to 
taha  compiete  control  of  unpro* 
tectod  database  servers. 

NCR’s  President 
To  Replace  CEO 

NCR  Corp.  announced  that  Lars 
Nyborg  w9  resign  es  Ks  CEO. 
effective  March  14.  because  of 
whit  it  described  as  tamlly  mat* 
tors.  The  Dayton,  Ohio'based 
computer  and  software  vendor 
nemod  Mark  Hiad,  currently  pres¬ 
ident  and  cMaf  operating  officar. 
as  the  new  CEO.  Nyberg,  who  has 
headed  NCR  for  eight  years,  wll 
remain  its  chairman,  but  In  a  non¬ 
executive  role. 

Short  Takes 

The  EMBEDDED  LINUX  CONSOR¬ 
TIUM.  a  Santa  Rosa.  Cafif.-based 
group  that  insides  IBM.  Red  Hat 
bic.  and  17  other  vendors,  re- 
leesed  a  davetopmenl  specifica¬ 
tion  for  Unux  appRcations  built 
irrto  doviets  such  as  mobile 
phenes. . . .  Pasadena,  Cafif.- 
based  OVERTURE  SERVICES  MC. 
said  R'l  buying  Pblo  ARo.  Cafif.- 
based  Inlanwt  search  technology 
VMidor  ALTAVISTA  CO. 


MARK  HALL  •  ON  THE  MARK 

Middleware  Guru  Warns 
Web  Services  Users . . . 

. . .  who  believe  they  can  choose  either  J2EE  or  .Net.  “It’s  not  possible," 
cautions  Jim  Green,  CTO  of  WebMelhods  Inc.  in  Fairfax,  Va.  “People 
who  think  they  can  select  between  them  are  fooling  themselves." 
Green,  who  spearheaded  the  development  of  the  Common  Object 
Request  Broker  Architecture,  an  industry  effort  to  design  a  standard 
for  middlew'are.  only  to  be  thwarted  by  Microsoft  Corp.*s  competing  COM/ 
DCOM/COM-*-  alternative,  argues  that  companies  will  be  riddled  with 


both  ]2EE  and  .Net  applications  as  well 
as  a  third  type,  those  legacy  programs 
that  "will  become  Web  services-enabled.” 
Although  vendors  such  as  IBM.  Micro¬ 
soft  and  Sun  Microsystems  Inc.  are  striv¬ 
ing  to  achieve  effective  stamlards  for 
Web  services.  Green  wryly  points  out 
that  “cooperation  isn’t  always  in  their 
best  interest."  As  such,  he 
sees  an  opportunit)'  for  "a 
neutral  party”  to  ensure 
that  all  three  types  of  Web 
services  software  cooperate 
fully.  Until  now.  WebMeth- 
uds  has  been  cuitcentrating 
on  the  legacy  side  of  Web 
sers'ices,  creatii^  more  than 
320  adapters  for  existing  ap¬ 
plications.  But  in  the  second 
quarter,  the  company  will 
release  support  fur  JBose,  m 
open-source  J2EE  application 
server,  and  sometime  later 
this  year,  it  will  do  the  same 
for  .Net  app  servers,  cover¬ 
ing  all  three  aspects  of  Web 
services.  ■  If  you’re  already 
hammering  out  Web  services 
applications  using  .Net.  you 
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might  want  to  get  XML  Spy  from  Altova 
Inc.  in  Vienna  (that's  Austria,  not  Vir¬ 
ginia).  Later  this  spring.  Version  6.0  will 
ship  with  full  integration  into  Visual  Stu¬ 
dio  .Net.  Sure,  Microsoft’s  development 
product  lets  you  add  XML  wrappers  to 
-Net  code,  but  it  hides  XML  from  you.  While 
that  may  be  fine  for  code  wimps.  Altova 
CEO  Alexander  Falk  ar¬ 
gues.  "XML  is  a  core  skill 
for  developers."  One  day. 
you  may  be  called  upon  to 
work  with  an  XML-based 
markup  language  in  your 
favorite  discipline.  Not 
Just  at  (he  office.  Buddhist 
texts,  Egyptian  hieroglyph¬ 
ics  and  the  complet#  gonomi 
of  the  fndl  fly  all  have  their 
own  version  of  XML  ■  Di¬ 
ane  Smith  complains  that 
while  most  Web  managers 
can  point  to  stats  that 
prove  their  sites’  pages  load 
fast  and  frequently,  few  of 
them  know  how  many  er¬ 
rors  those  pages  contain. 
Smith,  a  research  associate 
at  the  Business  Internet 


Group  of  San  Francisco,  just  surveyed 
40  popular  online  financial,  shopping, 
search  and  travel  sites  and  found  that 
72%  of  (hem  contained  impaired  pages, 
most  of  which  displayed  tired  old  Error 
404  messages.  In  his  blog  (hrtpy/Wehlogs. 
jupiterresearchxom/analystsA>etic/), 
Matthew  Berk,  an  analyst  at  Jupiter  Re¬ 
search.  calls  these  rampant  404  errors 
"one  of  the  many  dirty  Irttte  secrets  of  the 
Web."  The  sad  thing,  says  Lv’nnette  Mont¬ 
gomery,  Internet  manager  at  Levenger 
in  Del  Ray  Beach,  Fla.,  is  that  there  are 
tools  CO  detect  and  correct  them.  And 
she  should  know.  When  Levenger  ap¬ 
plied  page-monitoring  software  from  San 
Francisco-based  Tea  Leaf  Technology 
Inc.,  "we  found  errors  galore"  on  the  old 
site,  says  Montgomery.  Now.  with  the 
new  Levenger.com  up  and  running  and 
monitored  throughout  the  design  stage 
for  Web-page  quality,  CIO  Mamie  Barret! 
says  the  company  has  been  able  to  reduce 
customer-service  stiff  frem  eight  to  (wo  peo¬ 
ple  because  now  "customers  can  find 
what  they’re  looking  for."  and  IT  mainte¬ 
nance  time  has  been  shaved  75%.  So.  oth¬ 
er  than  pighcadedness  or  stupidity,  why 
don’t  more  Web  manors  monitor  their 
sites  for  quality?  e  Application  data  man¬ 
agement  (ADM)  is  becoming  more  of  a 
science  and  less  of  an  art  Products  on  the 
maricce  now  let  you  define  policies  for 
specific  applications  and  move  their  less- 
used.  Icss-critical  data  to  less-expensive 
secondary  server  and  storage  systems. 
Michael  Howard,  CEO  of  OuterBay  Tech¬ 
nologies  Inc.  in  CaropbelL  says 
ADM  is  going  to  be  another  path  into  the 
data  center  for  Linux  systems  combined 
with  cheap  ATA-type  disk  drives.  Sup¬ 
porting  more  applications  will  also  help. 
In  addition  to  managing  data  within 
Oracle.  PcoplcSoft  and  other  programs. 
OuterBay  later  this  year  will  add  Siebei 
and  SAP  to  Us  ADM  stable.  I 


IBM  to  Ship  Powers  Chip  Next  Year 


Unix  partitioning 
will  be  advanced 


IBM  w'ill  ship  its  next-genera¬ 
tion  Power?  RISC  microproc¬ 
essor  architecture  in  mid- 
2004,  according  to  company 
officials  here  at  Iasi  week’s 
IBM  PartnerWorid  event. 

The  processors  will  deliver 
roughly  four  limes  the  perfor¬ 
mance  of  current -generation 
Power4  chips  and  feature 


technologies  that  support 
application-specific  perfor¬ 
mance  boosts  and  mainframe- 
like  partitioning  capabilities. 

Power?  chips  will  also  fea¬ 
ture  a  technology*  called  si¬ 
multaneous  multithreading, 
which  will  enable  up  to  80% 
better  application-level  per¬ 
formance  than  current  tech¬ 
nologies  permit,  said  Karl  Fre¬ 
und.  vice  president  of  IBM's 
pSeries  product  group. 

Simultaneous  multithread¬ 
ing  builds  on  the  capabilities 
available  in  the  dual-core 


Power4  processor  architec¬ 
ture,  according  to  Freund. 
Dual-core  processors  feature 
two  processors  in  one  piece  of 
silicon.  With  simultaneous 
multithreading,  each  proces¬ 
sor  will  be  able  to  run  two 
separate  processes  or  tasks  at 
the  same  time.  Freund  said 
The  Powers  architecture 
will  also  introduce  a  main- 
frameiike  subprocessor  parti¬ 
tioning  capability  in  IBM's 
Unix  server  space.  With  it. 
users  will  be  able  to  slice  and 
dice  individual  Powers  proc¬ 


essors  to  create  up  to  10  parti¬ 
tions.  And  a!  the  highest  end. 
users  will  be  able  to  create  up 
CO  512  partitions  on  a  64-proc' 
essor  system,  said  Freund 

The  0.13-micron  PowerS 
chips  will  feature  an  accelera¬ 
tion  technology  that  optimizes 
performance  in  some  applica¬ 
tions,  IBM  said  It  will  ^low 
certain  commonly  used  code 
that’s  executed  by  software  in 
many  popular  applications  to 
be  executed  much  faster  by 
the  processor  hardware. 

TTve  first  systems  based  on 
the  new  chip  will  start  ship¬ 
ping  in  the  second  half  of 
2004,  IBM  officials  said.  I 
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MARK  HALL  •  ON  THE  MARK 


Middleware  Guru  Warns 
Web  Services  Users . . . 


. . .  who  believe  they  can  choose  either  J2EE  or  .Net.  “It’s  not  possible." 
cautions  Jim  Green.  CTO  of  WebMelhods  Inc.  in  Fairfax,  Va.  “People 
who  think  they  can  select  between  them  arc  fooling  themselves." 
Green,  who  spearheaded  the  development  of  the  Common  Object 
Request  Broker  Architecture,  an  industry  effort  to  design  a  standard 
for  middleware,  only  to  be  thwarted  by  Micn»oft  Corp.*s  competino  COM/ 
DCOM/COM*  alternative,  argues  that  companies  will  be  riddled  with 


both  }2E£  and  .Net  applications  as  well 
as  a  third  type,  those  legacy  programs 
that  ’’will  b^me  Web  services-eoabled." 
Although  vendors  such  as  IBM,  Micro* 
soft  and  Sun  Microsystems  Inc.  are  striv¬ 
ing  to  achieve  eff«:tive  standards  for 
Web  services.  Green  wryly  points  out 
that  "cooperation  isn’t  always  in  their 
best  interesL"  As  such,  he 
sees  an  opportunity  for  "a 
neutral  party”  to  ensure 
that  all  three  types  of  Web 
services  software  cooperate 
folly.  Until  now.  WebMeth- 
ods  has  been  concentrating 
on  the  legacy  side  of  Web 
services,  creating  more  than 
320  adapters  for  existing  ap¬ 
plications.  But  in  the  second 
quarter,  the  company  will 
release  support  for  JBout,  m 
opan-SDureu  J2EE  appicition 
mrm,  and  sometime  later 
this  year,  it  will  do  the  same 
for  -Net  app  servers,  covers 
iitg  all  three  aspects  of  Web 
services.*  Hyou'ruMrMdy 
hMunartog  oul  Vtab  survicaB 
applications  using  J4et,  you 


might  want  to  get  XML  Spy  from  Altova 
Inc.  in  Vieima  (that’s  Austria,  not  Vir- 
ginia).  Later  this  spring.  Version  6X>  will 
ship  with  foil  integration  into  Visual  Stu¬ 
dio  .Net.  Sure,  Mkrosoff s  development 
product  lets  you  add  XML  wrappers  to 
.Net  code,  but  R  hUte  XML  from  you.  While 
that  may  be  fine  for  code  wimps.  Altova 
CEO  Alexander  Falk  ar¬ 
gues.  "XML  is  a  core  stall 
for  developters."  One  day. 
you  may  be  called  upon  to 
work  with  an  XML -based 
markup  language  in  your 
Cm>rite  discipline.  Not 
just  at  the  ofike.  Buddhist 
texts.  Egyptian  hieroglyph¬ 
ics  and  6w  cemptata  gnenw 
ol6»fruil6y  all  have  their 
own  version  of  XML  ■  Di¬ 
ane  Smith  complains  chat 
while  most  Web  ounagers 
can  point  to  stats  that 
prove  their  sites’  pages  load 
test  and  fiequently.  few  of 
them  know  how  many  er¬ 
rors  those  pages  contain. 
Smith,  a  research  associate 
at  the  Business  Internet 


Hiww.conHXitenror1d.com 


Group  of  San  Francisco,  just  surveyed 
40  popular  online  HnanciaL  shopping, 
search  and  travel  sites  and  found  that 
72%  of  them  contained  impaired  pages, 
most  of  which  displayed  tired  old  Error 
404  messages.  In  his  blog  (http/ZiveMogs. 
/upiterreseorc/ixom/snaiysts/berk/), 
Matthew  Berk,  an  analyst  at  Jupiter  Re¬ 
search,  calls  these  rampant  404  errors 
“one  o1 6w  ifiMy  dkty  Mta  sucfite  of  6» 
Wtab.”  The  sad  thing,  says  Lynnette  Mont¬ 
gomery.  Internet  manager  at  Levenger 
in  Dei  Ray  Beach.  FUu  is  that  there  are 
tools  to  detect  and  correct  them.  And 
she  should  know.  When  Levenger  ap¬ 
plied  page-Dxmicoring  software  from  San 
Francisco-based  Iba  Leaf  Technology 
Inc.  ‘Sve  found  errors  galore”  on  the  old 
site,  says  Montgomery.  Now,  with  the 
new  Levenger.com  up  and  running  and 
monitored  throughout  the  design  stage 
for  Web-page  quality.  CIO  Marnie  Barrett 
says  the  company  hu  been  able  to  riduce 
cnteBMr-MrvlM  stuff  from  togM  to  two  puu* 
pta  because  now  "customers  can  find 
what  they’re  looking  for."  and  IT  mainte- 
trance  time  has  been  shaved  79%.  So.  oth¬ 
er  than  pigheadedness  or  stupidity,  why 
don't  more  Web  managers  monitor  their 
sites  for  quality?  ■  Application  data  man¬ 
agement  (ADM)  is  burning  imra  of  a 
actanoo  and  taas  of  an  art  Products  on  the 
market  now  let  you  dcTme  policies  for 
specific  applications  and  move  their  less- 
used.  less-critical  data  to  less^xpensive 
secondary  server  and  storage  systems. 
Michael  Howard.  CEO  of  OuterBay  Tech¬ 
nologies  loc.  in  (^ampbelL  Caltf,  says 
ADM  is  going  to  be  anoMwr  pnto  into  6m 
data  oantor  for  Linux  xyatanM  combined 
with  cheap  ATA-type  disk  drives.  Sup¬ 
porting  more  appU^ttons  will  also  help. 
In  addition  to  managing  data  within 
Oracle.  PeopleSoft  and  other  programs. 
OuterBay  later  this  year  will  add  Siebel 
and  SAP  to  its  ADM  stable.  I 


IBM  to  Ship  Powers  Chip  Next  Year 


Unix  partitioning 
will  be  advanced 


BV  JAIKUHAH  VWAVAH 

NEW  ONLEAHS 

IBM  will  ship  its  next-genera- 
tioo  Powers  RISC  microproc¬ 
essor  architecture  in  mid- 
2004,  accordir^  to  company 
offiriaLs  here  at  last  week’s 
IBM  PartnerWorld  event 
The  processors  will  deliver 
roughly  four  times  the  perfor¬ 
mance  of  current-generatioD 
Power4  chips  and  feature 


tecfanolo^es  that  support 
application-specific  perfor¬ 
mance  boosts  and  ouunframe- 
Uke  partitioning  capabilities. 

Powers  chips  will  also  fea¬ 
ture  a  technology  called  si¬ 
multaneous  multithreading, 
which  will  enable  up  to  80% 
better  application-l^l  per¬ 
formance  than  current  tech¬ 
nologies  permit,  said  Karl  Fre¬ 
und.  vice  president  of  IBM's 
pSeries  product  group. 

Simultaneous  muhithread- 
ing  builds  on  the  capabilities 
available  in  the  dual-core 


Power4  processor  architec¬ 
ture.  according  to  Freund. 
Dual-core  processors  feature 
two  processors  in  one  piece  of 
siUcon.  With  simultaneous 
multithreading,  each  proces¬ 
sor  will  be  able  to  run  two 
separate  processes  or  tasks  at 
the  same  time.  Freund  said. 

The  Power5  architecture 
will  also  introduce  a  main- 
framelike  subprocessor  parti¬ 
tioning  capability  in  IBM's 
Unix  server  space.  With  it, 
users  will  be  able  to  slice  and 
dice  individual  Power5  proc¬ 


essors  to  create  up  to  10  parti¬ 
tions.  And  at  the  highest  end, 
users  wilt  be  able  to  create  up 
to  512  partitions  on  a  64-proc- 
essor  system,  said  Freund. 

The  0J3-micToa  Power5 
chips  will  feature  an  accelera¬ 
tion  technology  that  oprimues 
performance  in  some  applica¬ 
tions.  3M  said.  It  will  allow 
certain  commonly  used  code 
that's  executed  by  software  in 
many  popular  applications  to 
be  executed  mudi  faster  by 
the  processor  hardv^are. 

The  first  systems  based  on 
the  new  chip  will  start  sha¬ 
ping  in  the  second  half  of 
2004.  IBM  offidabsaidB 
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High-Availability  Servers 
p.  Mission  Critical  Managed  Services 
p.  Resource  Optimization  Solutions 


ROUValue  Management 


►  Application  Outsourcing 
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IT  Effectiveness 


Build  more  business  value 

INTO  YOUR  rr  INVESTMENTS 

With  mounting  profit  pressures  and  demands 
for  cost  control,  every  investment  must  produce 
rapid  and  predictable  business  value.  As  the 
world's  third  largest  IT  company,  Fujitsu  can 
show  you  how  to  improve  your  return  on  IT. 

Our  experienced  consultants  will  align  your 
technology  with  your  business  strategy  for 
improved  performance.  And  our  enterprise  value 
management,  application  outsourcing  and  IT 
effectiveness  experience  can  help  maximize  the 
value  from  IT  while  reducing  total  IT  costs  up 
to  30%  in  three  years. 

Along  with  the  ri^t  blueprint,  a  solid  infrastructure 
forms  the  foundation  for  business  effectiveness. 

By  eliminating  “server  sprawl,"  our  exceptionally 
reliable  and  scalable  UNIX  servers  will  lower 
TCO  and  improve  productivity. 


FUpSU 


For  free  white  papers  showing  how  to  maximize 
your  Return  On  IT,  visit  us.fujitsu.eom/R01T. 


THE  POSSIBILITIES  ARE  INFIIITE 


Working  together,  we  can  accomplish  anything. 


us.fujitsu.com 
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IBM  Augments  On-Demand, 
Small  Business  Initiatives 


Bundles  channel  partner  services 
with  new  incentives  and  pmgratns 


BV  JAIKUMAR  VUAVAH 

The  new  PRonecTS 
and  channel  pro¬ 
grams  that  IBM  an¬ 
nounced  at  la&t 
week’s  PartnerWorld  show  in 
New  Orleans  build  on  the 
company’s  un/olding  efforts  to 
deliver  un-demand  computing 
services  for  users. 

They're  also  aimed  at  ex¬ 
panding  IBM's  preservee  in 
the  last-growing  small  and 
medium-size  business  market, 
which  last  year  accounted  for 
nearly  23%  of  the  company  ’s 
sales. 

IBM  last  week  armounced 
several  programs  designed  to 
enable  its  network  of 90.000 
business  partners  to  deliver 
on-demand  computing  ser¬ 
vices.  The  initiatives  are  part 
of  a  $100  million  channel  in¬ 
vestment  by  IBM  that's  in¬ 
tended  to  gamer  greater  re¬ 
seller  participation  as  IBM  dc- 
Ifvets  its  on-demand  strategy, 
said  Michael  Borman,  general 
manager  of  global  business 
partners. 

Getting  Partners  Involved 

Increasingly.  IBM  will  also 
work  with  partners  to  deliver 
hosted  on-demand  services, 
said  Dev  Mukherjee.  a  vice 
president  in  IBM's  on-demand 
business  group. 

One  example  is  the  compa¬ 
ny’s  partnership  with  Kctcra 
Technologies  Inc.,  a  Mountain 
View,  CaUf.-based  provider  of 
procurement  management 
software  that  was  founded  by 
American  Express  Co.  Under 
the  arrangement.  IBM  is  host¬ 
ing  and  managing  Ketera's  ser¬ 
vices  on  its  hardware  infra¬ 
structure. 

CNF  Inc.,  a  S4.8  billion  sup¬ 
ply  chain  and  logistics  ser¬ 
vices  company  in  Palo  Alto, 
CalUl.  recently  signed  up  for 
the  IBM-hosted  Ketera  ser¬ 
vice.  CNF  will  use  Ketera’s 


Web-based  service  to  pur¬ 
chase  all  of  its  maintenance, 
repair  and  operations  materi¬ 
als.  along  with  all  office  sup¬ 
plies.  The  hosted  arrangement 
allows  CNF  to  significantly  re¬ 
duce  the  costs  associated  with 
buying  and  managing  the  soft¬ 
ware  it  would  need  to  deliver 
the  same  kind  of  functionality 
on  its  own.  according  to  Milch 
Plaat.  director  of  contract  ser¬ 
vices  at  CNF. 

“We  were  looking  for  some¬ 
thing  that  was  affordable  and 
quick  to  deploy,  where  w-e  did 
not  have  to  pay  for  software 
upgrades  and  for  mainie- 
nance.”  Plaat  said. 

Transmarine  Navigation 
Corp..  a  Long  Beach.  CalU.- 
based  shipping  agent,  reci-ntiy 
began  using  a  similar  IBM 
hosted  accounting  service 
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manage  financial  operations 
across  its  remote  offices. 

Under  the  arrangement. 
Transmarine  is  using  a  Web- 
based  professional  accounting 


service  offered  by  San  Jose* 
based  Intaact  Corp.  that  is 
hosted  by  IBM. 

The  arrangement  has  al¬ 
lowed  Transmarine  to  im¬ 
prove  access  to  its  main  ac- 
countii^  database  while  off¬ 
loading  the  burden  of  manag¬ 
ing  it,  said  Peter  Whittington. 
CEO  of  Transmarine. 

Show  Concrete  Examples 

If  its  on-demand  computing 
initiative  is  to  gain  broad- 
based  acceptance,  IBM  must 
continue  showing  other  con¬ 
crete  examples  of  the  services 
and  technologies  it  wUi  deliv¬ 
er.  said  lanet  Waxman,  an  ana¬ 
lyst  at  Framingham.  Mass.- 
based  IDC 

“It  looks  like  they  are  mov¬ 
ing  in  the  right  direction." 
Waxman  said.  “But  it’s  impor¬ 
tant  that  they  do  a  good  job  of 
communicating  to  people 
what  on-demand  is  all  about.” 


Meanwhile,  in  a  fresh  at¬ 
tempt  to  broaden  its  presence 
in  the  small  and  medium-size 
business  market.  IBM  last 
week  rolled  out  Express  edi¬ 
tions  of  popular  products  such 
as  its  DB2  relational  database. 
Lotus  Domino  collaboration 
software  and  Tivoli  manage¬ 
ment  applications  (see  box). 

IBM's  Express  products  are 
packaged  and  priced  specifi¬ 
cally  for  customers  at  smaller 
businesses.  The  products  for 
the  most  part  are  configured 
by  IBM's  channel  partners  and 
are  aimed  at  reducing  costs, 
complexity  and  implementa¬ 
tion  time. 

•‘IBM  has  made  it  very,  very 
clear  that  the  channel  is  their 
route  to  the  [small  and  medi¬ 
um-size  business]  market.'* 
said  Tony  Madden,  a  vice 
president  at  Avnet  Hall-Mark, 
a  large  IBM  distributor  in 
Terope.  Ariz. 

But  IBM's  growing  aspira¬ 
tions  in  that  space  raise  the 
potential  for  channel  conflict. 
Madden  said.  "There  arc  some 
concerns  as  it  relates  to  IBM’s 
Glt^tal  Services  strategy.’’  es¬ 
pecially  in  the  medium-size 
business  market,  he  said.  I 


App  Dev, 

Top  Share’s 

BV  JAIKUMAR  VIJAVAM 

Share  Jnc.,  an  IBM  large-^| 
tern  user  group,  will  hold  its 
biannual  user  conference  in 
Dallas  this  week.  Established 
I9S5.  Chicago-based  Share  is 
the  longest-standirig  compurtT] 
user  group  in  existence,  with 
5,000  active  members  from 
2.000  companies. 

In  an  interview  last  week. 
Share  President  Ken  Ebbe  spoke 
about  how  the  organization  has 
shifted  from  being  a  largely 
mairt/irame-^entric  user  group 
to  one  that  is  more  broadly  fo¬ 
cused  in  response  to  changirtg 
memiicr  needs. 

What  are  the  key  issues  you  ex¬ 
pect  to  be  raised  at  this  year's 
Share  event?  Application  de¬ 
velopment  is  a  hot  item  for 
Share  attendees  and  well  cov¬ 
ered  at  our  event.  Middleware 


)S  Migration 
lallas  Agenda 

deployment,  including  the  in¬ 
creasing  need  for  security  and 
privacy,  remains  a  major  pri¬ 
ority  for  the  enterprise  and 
our  members.  At  the  Dallas 
event,  wc’rc  featuring  “Getting 
to  z/OS  M,"  because  IBM  is 
strongly  encouraging  cus¬ 
tomers  to  migrate  to  z/OS  1.4 
to  take  advantage  of  [future] 

^  middleware. 

^  Ar*  you  noticing  any  change  in 
t  the  kind  of  topics  that  are  dis- 
I  cussed  at  the  show? 

ft  Most  of  the  issues 
^hare  addresses  re* 

\valve  around  longtime 
'^n*  fundamentals. 

^harc  is  an  IBM  user 
I  group,  but  (he  reality 
of  today’s  enterprise 
involves  integrating 
diverse  applications 
and  systems  on  vari¬ 


ous  platforms.  The  amount  of 
interest  in  Linux  and  storage 
solutions  continues  to  grow. 

Our  software  asset  manage¬ 
ment  track,  started  a  few  years 
ago.  has  gained  significantly  in 
popularity.  On  the  horizon  is 
grid  computing  and  what  it 
means  to  the  data  center. 

The  demisa  of  tile  makiframe  is  a 
perennial  topic  of  discussion.  Do 
you  see  that  happening?  The  in¬ 
dustry  certainly  lost  a  couple 
of  comi>anies  in  Amdahl  and 
Hitachi,  and  that  probably 
says  something  about  the  mar¬ 
ket  in  general.  But  it  Is  still  a 
big  market  overall,  and  a 

steady  market.  People 
that  have  invested  in 
mainframes  will  contin¬ 
ue  to  invest  in  them. 

How  has  Share  as  an  orga¬ 
nization  evolved?  Share’s 
original  objectives  and 
purpose  remain  largely 
unchanged  since  its 
founding.  Share  is  an  in¬ 


dependent,  volunteer-run  user 
community  providing  IBM 
customers  with  user-defined 
education,  professional  net¬ 
working  and  a  forum  to  influ¬ 
ence  the  information  technol¬ 
ogy  industry.  The  need  to  de¬ 
velop.  debug,  test  and  produce 
solid  products  remains  a  fun¬ 
damental  requirement.  System 
uptime  is  more  critical  than 
ever,  and  while  we  have  more 
tools,  we  also  have  more  com¬ 
plexity  and  more  demands. 

What  impact  has  tha  economy 
had  on  attondanco  for  this  year’s 
show?  Until  Sept.  11,  Share’s 
conference  attendance  was 
growing.  After  Sept.  U,  Share 
took  a  small  hit  at  our  follow¬ 
ing  conference  in  March  and 
[since]  then  has  remained 
steady.  Discussions  with  our 
customers  indicate  that  the 
slowdown  in  the  economy, 
particularly  spending  on  IT,  is 
the  major  reason.  That  is  con¬ 
sistent  with  what  we’re  seeing 
industrywide,  b 
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IBM  Augments  On-Demand, 
Small  Business  Initiatives 


Bundles  channel  partner  services 
with  new  incenthes  and  programs 


BY  JAIKITMAR  VI  JAVAN 

The  new  products 
and  channel  pro¬ 
grams  that  IBM  an¬ 
nounced  at  last 
week’s  PartncrWorld  show  in 
New  Orleans  build  on  the 
company's  unfolding  efforts  to 
delnwr  on-demand  computing 
services  for  users. 

They're  also  aimed  at  ex¬ 
panding  IBM’s  presence  in 
the  fost-growing  small  and 
medium-size  business  market, 
which  last  year  accounted  for 
nearly  25%  of  the  company's 
sales. 

IBM  last  week  announced 
several  programs  designed  to 
enable  its  network  of 90,000 
business  partners  to  deliver 
on-demand  computing  ser¬ 
vices.  The  initiatives  are  pan 
of  a  SlOO  million  channel  in¬ 
vestment  by  IBM  that's  in¬ 
tended  to  gamer  greater  re¬ 
seller  participation  as  IBM  de¬ 
livers  its  on-demand  strategy, 
said  Michael  Borman,  general 
manager  of  global  business 
partners. 

OeUing  Paflnm  bwolved 

Increasingly.  IBM  will  also 
work  with  partners  to  deliver 
hosted  on-demand  services, 
said  Dev  Mukfaeriee.  a  vice 
president  in  IBM's  oo-demand 
business  group. 

One  example  is  the  compa¬ 
ny's  partnership  with  Ketera 
Technologies  Inc.,  a  Mountain 
\riew.  Calif.-based  provider  of 
prociuremeni  management 
software  that  was  founded  by 
American  Express  Co.  Under 
the  arrangement.  IBM  U  host¬ 
ing  and  managing  Ketera's  ser¬ 
vices  on  its  hardware  infra¬ 
structure. 

CNF  loc.,  a  $4B  billion  sup¬ 
ply  chain  and  logistics  ser¬ 
vices  company  in  Palo  Alto, 
Calif.,  recently  signed  up  for 
the  IBM-host^  Ketera  ser¬ 
vice.  CNF  will  use  Ketera's 


Web-based  service  to  pur¬ 
chase  all  of  its  maintenance, 
repair  and  operations  materi¬ 
als  along  with  all  office  su5>- 
pUes.  The  hosted  arrangement 
allows  CNF  to  significantly  re¬ 
duce  the  costs  associated  with 
buying  and  managing  the  soft¬ 
ware  it  would  need  to  deliver 
the  same  kind  of  functionality 
on  its  own.  according  to  Mitch 
Plaat,  director  of  contract  ser¬ 
vices  at  CNF. 

“We  were  looking  for  soroe- 
thiitg  that  was  affordable  and 
quick  to  deploy,  where  we  did 
not  have  to  pay  for  software 
upgrades  ami  for  mainte¬ 
nance,”  Plaat  said. 

Transmarine  Navigation 
Corp..  a  Lot^  Beach.  Calif.- 
based  shipping  agent,  recently 
began  using  a  similar  IBM- 
hosted  accounting  service  to 


manage  financial  operations 
across  its  remote  offices. 

Under  the  arrangement. 
Transmarine  is  using  a  Web- 
based  professional  accounting 


service  offered  by  San  Jose- 
based  Intaact  Corp.  that  is 
hosted  by  IBM. 

The  arrangement  has  al¬ 
lowed  Transmarine  to  im¬ 
prove  access  to  its  main  ac¬ 
counting  database  while  off¬ 
loading  the  burden  of  manag¬ 
ing  it.  said  Peter  Whittington. 
CEO  of  Transmarine. 

Show  Concrete  Examples 

If  hs  on-demand  computing 
initiative  is  to  gain  broad- 
based  acceptance,  IBM  must 
continue  showing  other  con¬ 
crete  examples  of  the  services 
and  technologies  it  will  deliv¬ 
er,  said  Janet  Waxman.  an  ana¬ 
lyst  at  Framingham.  Mass.- 
based  IDC 

”It  looks  like  they  are  mov¬ 
ing  in  the  right  directioa” 
Waxman  said.  ”But  it's  impor¬ 
tant  that  they  do  a  good  of 
communicating  to  people 
what  on-dema^  is  all  about.” 


Meanwhile,  in  a  fresh  at¬ 
tempt  to  broaden  its  presence 
in  small  and  medium-size 
bu^ess  market.  IBM  last 
week  rolled  out  Express  edi¬ 
tions  of  popular  pr^ucts  such 
as  its  DB2  relational  database. 
Lotus  Domino  collaboration 
software  and  Inroli  manage¬ 
ment  applications  (see  box). 

IBM’s  Express  products  are 
packaged  and  priced  specifi¬ 
cally  for  customers  at  smaller 
businesses.  The  products  for 
the  most  part  are  configured 
by  IBM’s  channel  partners  and 
are  aimed  at  reducing  costs, 
complexity  and  implementa¬ 
tion  time. 

“IBM  has  made  it  very,  very 
clear  that  the  channel  is  their 
route  to  the  {smalt  and  medi¬ 
um-size  business]  market,” 
said  Tony  Madden,  a  vice 
president  at  Avnet  Hall-Maric. 
a  large  ffiM  distributor  in 
Tempe,  Ariz. 

But  IBM's  growing  aspira¬ 
tions  in  that  space  raise  the 
potential  for  channel  conflict, 
Madden  said.  'There  are  some 
concerns  as  it  relates  to  IBM's 
Global  Services  strategy,"  es¬ 
pecially  in  the  medium-size 
business  market,  be  said.  I 


App  Dev,  z/OS  Migration 
Top  Share’s  Dallas  Agenda 


av  JAmUMAN  VIJAVAN 

Share  Inc^  an  IBM  large-sys¬ 
tem  user  groi^,  will  hold  its 
biannual  user  conference  in 
Dallas  this  week.  Established  in 
I9SS,  Chicqgo-bosed  Share  is 
the  longest-standing  computer 
user  group  in  existence,  with 
5,000  active  members  fiom 
2,000  companies. 

In  an  interview  last  week. 
Share  President  Kan  Ebbt  spoke 
about  how  the  organization  has 
shifted  /ram  being  a  largely 
mair0wne<entric  user  group 
to  one  that  is  more  broadly  fo¬ 
cused  in  response  to  chartging 
member  needs. 

What  art  tha  kay  team  you  ax- 
pact  to  ba  ratead  at  this  yaar’s 

Shara  avant?  Application  de¬ 
velopment  is  a  hot  item  for 
Share  atteiulees  and  well  cov¬ 
ered  at  our  evenu  Middleware 


deployment.  iiKluding  the  in¬ 
creasing  need  for  security  and 
privacy,  remains  a  major  pri¬ 
ority  for  the  enterprise  and 
our  members.  At  the  Dallas 
event,  we’re  featurirtg  "Gening 
to  z/OS  1.4,”  because  IBM  is 
strongly  encouragir^  cus¬ 
tomers  to  migrate  to  z/OS  1.4 
to  take  advantage  of  (future) 
middleware. 

Art  you  notteteg  any  changa  in 
tha  kM  of  toptei  that  are  dto- 
cuaaadatthaahow? 

Most  of  the  issues 
Share  addresses  re¬ 
volve  around  longtime 
IT  ftinHam^fak. 

Share  is  an  IBM  user 
group,  but  the  reality 
of  today’s  enterprise 
involves  integrating 
diverse  applications 
and  systems  on  vari¬ 


ous  platforms.  The  amount  of 
interest  in  Linux  and  storage 
solutions  continues  to  grow. 

Our  software  asset  manage¬ 
ment  track,  started  a  few  years 
ago.  has  gained  significantly  in 
popularity.  On  the  horizon  is 
grfo  computing  and  what  h 
means  to  the  data  center. 

The  damiaa  of  tha  mainframa  te  a 
paranntel  topic  of  diacuiilon.  Do 
you  aaa  that  happening?  The  in¬ 
dustry  certainly  lost  a  couple 
of  companies  in  Amdahl  and 
Hitachi,  and  (hat  probably 
says  something  about  the  mar¬ 
ket  in  general  But  it  is  still  a 
big  market  overall  and  a 

steady  market.  People 
that  have  invested  in 
mainframes  will  contin¬ 
ue  to  invest  in  them. 

How  hat  Share  81  an  arga* 
Rtaatten  avolvad?  Share’s 
origina]  objectives  and 
purpose  remain  largely 
unchanged  since  its 
founding.  Share  is  an  in¬ 


dependent,  volunteer-run  user 
community  providing  IBM 
customers  with  user-denned 
education,  professiona]  net¬ 
working  and  a  forum  to  influ¬ 
ence  the  information  technol¬ 
ogy  industry.  The  need  to  de¬ 
velop.  debug,  test  and  produce 
solid  products  remains  a  fun¬ 
damental  requiremenL  System 
uptime  is  more  critical  than 
ever,  and  while  we  have  more 
tools,  we  also  have  more  com¬ 
plexity  and  more  demands. 

What  Impact  has  tha  accnoniy 
had  on  attondanea  far  thia  yair’t 
show?  Until  Sept  U.  Share's 
conference  attendance  was 
growing.  After  Sept  U,  Share 
took  a  small  hit  at  our  follow¬ 
ing  conference  in  March  and 
(since]  then  has  remained 
steady.  Dtsciissioos  with  our 
customers  indicate  that  the 
slowdown  in  the  economy, 
particularly  spending  on  IT,  is 
the  major  reason.  That  is  con¬ 
sistent  with  ^^ut  we're  seeing 
industrywide.  I 


uwmwM  hfawiM.zm 


NEWS 


WWW  coinpulerwortd.com 


Internal  IT  Marketing 
Is  Scarce,  Survey  Finds 


CIOs  say  IT  cuts  could  be  minimized 
by  reaching  out  to  business  managers 


■V  THOMAS  HOFTMAH 

WHAT  WE  HAVE 
here  is  a  &Uurc 
to  communicate. 
According  to 
a  sooD-to^  released  survey 
of  277  CIOs  and  IT  directors, 
nearly  three*quaners  of  the 
respondents  said  they  have 
had  to  cut  their  budgets  by 
more  than  15%  over  the  past 
two  years  and  that  they  think 
more  effective  communica¬ 
tion  with  senior  management 
about  the  value  IT  generates 
could  have  reduced  those  cut¬ 
backs  by  half. 

The  e-mail  survey,  conduct¬ 
ed  during  last  year's  fourth 
quarter  by  Stamford.  Conn.- 
based  Meta  Group  Inc.  and 
Creative  IT  Marketing,  a  New 
York-based  consulting  firm,  is 
expected  to  be  releas^  this 
week.  One  of  the  survey’s 
rtndiogs  is  that  few  IT  depart¬ 
ments  —  just  17%  of  the  re¬ 
spondents  —  have  established 
fonnal  marketing  or  coounu- 
nications  pre^rams  for  reach¬ 
ing  out  to  business  users. 

Among  the  83%  that  lack 
such  programs.  IT  budget  cuts 
ranged  from  5%  to  25%  during 
the  past  two  years,  according 
to  Meta  and  Creative  IT  Mar¬ 
keting.  Meanwhile,  most  of  the 
respondents  with  IT  market¬ 
ing  programs  in  place  said 
their  budgets  remained  flat. 

pBfuptkin  ProbiBfn 

Several  IT  managers  acknowl¬ 
edged  that  communication 
with  business  executives  can 
be  a  big  problem. 

’'Unfortunately,  1  do  believe 
that  many  IT  executives  do  a 
poor  job  of  communicating 
and  marketing  the  value  of 
rr.”  said  Malcolm  C  Fields. 
CIO  at  HON  Industries  Inc.,  a 
Muscatine,  Iowa-based  maker 
of  office  furniture  and  fue- 
places.  laying  to  change  the 
perception  of  ITs  value  after 


the  threat  of  budget  cuts  aris¬ 
es  "is  very  difficult  because 
most  organizations  become 
skeptical  in  times  of  austerity.’’ 
said  Fields.  That's  why  it’s  es¬ 
sential  for  rr  managers  to 
communicate  effectively  dur¬ 
ing  boom  times,  he  added. 

IT  departments  that  fail  to 
communicate  the  value  of 
technology  investments  to  se¬ 
nior  management  "do  absorb 
larger  budget  cuts."  said  Mark 
Endry,  CIO  at  software  ven¬ 
dor  ).D.  Edwards  &  Co.  in 
Denver.  That  doesn’t  mean  IT 


organizations  with  internal 
marketing  programs  will  be 
immune  to  the  budget  ax. 
Endry  said.  But  business  man¬ 
agers  who  understand  the  im¬ 
pact  that  IT  has  on  their  com¬ 
panies  can  make  more  in¬ 
formed  decisions  about  cuts, 
he  added. 

Gleim  Palmiere.  CIO  at 
G.  Pierce  Wood  Memorial 
Hospital  in  Arcadia,  Fla.,  said 
that  when  times  arc  tough, 
some  IT  proiects  will  fall  prey 
to  budget  cuts  no  matter  how 
mission-critical  they  may  ap¬ 
pear  to  be. 

Palmiere  said  his  group 
"continually  cost-justifies 
every  dollar  we  spend"  based 


on  the  value  that  IT  can  pro¬ 
vide  to  end  users  at  the  hospi¬ 
tal.  Without  the  internal  mar¬ 
keting  that  the  IT  department 
has  done,  "the  cuts  would 
have  been  more  severe  than 
they  have  bcea"  he  said. 

Amy  Courter.  vice  presi¬ 
dent  of  IT  at  Valassis  Commu¬ 
nications  Inc.,  a  marketing 
services  firm  in  Livonia. 

Mich.,  said  she  has  found  that 
through  one-on-one  commu¬ 
nication  with  business  execu¬ 
tives,  she  "can  often  achieve 
the  results  that  I  need  —  with 
a  lot  of  work." 

But  for  some  IT  ntanagers, 
"it’s  a  matter  of  them  not  hav¬ 
ing  any  structure."  said  Patri¬ 
cia  Jaramillo,  president  of  Cre¬ 
ative  IT  Marketing.  "There  arc 
a  lot  of  them  who  send  out  e- 
mail  updates  [to  senior  man¬ 
agement]  that  are  very  tech¬ 
nology-focused  and  don't  ex¬ 
press  the  business  side."  I 


Showing 

U’sMilue 

MetaGraupandCroaliverTMartwt- 
ing  offered  Ihe  tokwing  advica  for 
better  corrmneabno  the  vaiut!  of  fT 
to  business  ereculives: 

ASSMN  epKlfic  IT  ererkere  to 
hmie  Memel  miflieting  end 
cocmiunicetlont  duties. 

CREATE  a  indud  and  earvices 
cataloa  ttud  nahaa  h  dear 
what  your  IT  dapertmaol  doaa 
foranduaais. 

SET  UP  quartarfy  pafforaianca 
and  prograas  ravtain  aridi  M- 
vfdudbuainaaswdls. 

SaOOUTrwMMlarsMd 
hold  uaar  briafinga  or  "lawn 
haT  maaUnga  edRi  burinaas 
managn  on  a  regular  bade. 

FI0  OUT  what  uaare  vahN  and 
how  they  maitura  IT  euccaei , 


Retiring  Microsoft  Officiai 
Urges  Open-Source  Embrace 


Vendor  must 
move  past  PCs, 
says  larewel)  note 


Bv  joRiB  evens 

Microsoft  Corp.  must  embrace 
the  diversity  of  open-source 
software  or  face  oblivion, 
David  Stutz,  a  departing  Mi¬ 
crosoft  manager,  wrote  in  a 
farewell  letter  to  the  company. 

Stiitz.  a  respected  technical 
thinker  at  Microsoft,  sees  net¬ 
worked  software  as  the  future 
of  computing.  Open-source 
software  is  already  there,  but 
Microsoft  still  has  to  move 
past  its  PC-centric  roots,  he 
wrote.  "If  Microsoft  is  unable 
to  innovate  quickly  enough,  or 
to  adapt  to  embrace  network- 
based  integration,  the  threat 
that  it  faces  is  the  erosion  of 
the  economic  value  of  soft¬ 
ware  beii^  caused  by  the  open 
source  software  roovemeni," 
Stutz  wrote  in  the  letter  that 
be  posted  on  his  Web  site, 
wwwxynthesistJwt/Wrirtng- 

"Useful  software  written 
above  the  level  of  the  single 
device  will  command  high 


margins  for  a  long  time  to 
come.  Stop  looking  over  your 
shoulder  and  invent  some¬ 
thing!”  he  wrote  to  Microsoft. 
"If  the  PC  is  all  that  the  fu¬ 
ture  bolds,  then  growth 
prospects  are  bleak."  Stutz 
left  Microsoft  earlier  this 
month.  He  held  several  key 
positions  there,  including 
chief  architect  for  Visual  Ba¬ 
sk  and.  most  recently,  group 
program  manager  for  Micro¬ 
soft's  Shared  Source  program, 
the  company’s  answer  to  open 
source. 

Microsoft  said  it  isn't  un- 

HMicrosoft 
cannot  pros¬ 
per  during  the  open 
source  wave  as  an 
island,  with  defens¬ 
es  buit  out  of  litiga¬ 
tion  and  proprietary 
protocols. 

DAVID  8TUTT  FORMER  PR06RAM 
UANAOER.  MICROSOFT 


common  for  its  recently  re¬ 
tired  employees  to  write  open 
letters.  “David  Stutz  has  been 
an  important  contributor  to 
Microsoft's  open-source  think¬ 
ing.  and  Microsoft  agrees  with 
much  of  the  vision  Dave  has 
for  the  future."  the  company 
said.  However,  the  statement 
added  that  "breakthrough  in¬ 
novations  will  come  mostly 
from  commercial  .software 
companies  such  as  Microsoft." 

Stutz  said  he  worries  that 
efforts  to  recover  from  per- 
ceptioos  of  the  company  as 
"politkally  inept"  and  that  a 
focus  on  Iwing  the  lowest-cost 
commodity  software  producer 
will  empower  managers  and 
accountants  at  Microsoft 
rather  than  the  visionaries. 

Microsoft’s  "denial”  when  it 
comes  to  networked  comput¬ 
ing  is  understandable,  because 
the  company  built  its  empire 
on  the  notion  of  the  PC  as  the 
natural  point  for  hardware  and 
application  integration.  Stutz 
sail  However,  he  added,  "net¬ 
work  protocols  have  turned 
out  to  be  a  far  better  fit  for 
this  middleman  role." 

"Microsoft  still  builds  the 
world's  best  client  software, 
but  the  biggest  opportunity 
is  no  longer  (he  client  It  still 
commands  the  biggest  margin. 


but  netw'oiked  software  will 
eventually  eclipse  client-only 
software."  Stutz  wrote. 

Microsoft  products  due  out 
later  this  year,  such  as  Win¬ 
dows  Server  2003  and  the  suc¬ 
cessor  to  Office  XP,  will  offer 
more  networked  features  than 
the  previous  versions,  the 
company  has  said. 

The  greatest  threat  to  Mi¬ 
crosoft  isn’t  the  Linux  operat¬ 
ing  system,  but  applications, 
Stutz  said.  As  the  quality  of 
open-source  sofrirare  im¬ 
proves.  there  will  no  longer  be 
a  need  for  Microsoft  Office’s 
one-«ze-ffts-all  suite  of  appli¬ 
cations,  he  explained. 

"Open  source  software  is  as 
large  and  powerful  a  wave  as 
the  Internet  was,"  he  wrote. 
"Microsoft  caimol  prosper 
during  the  open  source  wave 
as  an  island,  with  defenses 
built  out  of  litigation  and  pro¬ 
prietary  protocols.” 

Steven  Milunovich,  a  vice 
president  at  Merrill  Lynch  & 
Ca 'm  New  York,  agre^  that 
Microsoft  needs  to  innovate 
more.  "Microsoft  must  notch 
up  the  iimovation  component 
to  do  well  in  new  areas."  be 
stated  in  a  report  last  week.  A 

Evers  is  a  reporter  for  the  IDG 
Newsservice. 


EMC  REDEFINES 
HIGH-END  STORAGE. 

Again. 

Introducing 
Direct  Matrix 
Architecture; 

OnlySymmetrix' 
DMX  HAS  IT. 


EMC 

where  information  Inres 


EMCs  new  Symmetrix  DMX  series  with  Direct  Matrix  Architecture. 

4  times  the  internal  bandwidth  and  lo  times  the  cache  bandwidth  of  any  other  storage  system. 
100%  software  compatibility.  Unprecedented  application  performance,  protection  and  availability. 
And  all  with  surprising  affordability.  Now  high>end  storage  has  a  new  high  end. 

emc.com/dmx  or  call  i.866.symm.dmx/i.866.796.6369 
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Reducing  Software  Flaws 
Key  to  Security,  Users  Say 


Focus  on  vulnerabilities  seen  as  most 
important  part  of  national  strateg>' 


•r  0*N  VIITTON 

Of  THE  FIVE  main  pri¬ 
orities  set  forth  in 
the  National  Strate¬ 
gy  to  Secure  Cyber¬ 
space,  users  and  security  ex¬ 
perts  pointed  to  the  goal  of 
worki^  to  re¬ 
duce  software 
and  Internet  vul¬ 
nerabilities  as  the 
one  that  could  actually  make  a 
difference  in  the  near  term. 

Released  F^.  14  as  part  of 
the  Bush  administration's  mul¬ 
tipronged  effort  to  develop  a 
program  for  reducing  cyber¬ 
space  security  threats  and  vul¬ 
nerabilities.  the  national  strat¬ 
egy  caOs  for  a  concerted  effort 
across  four  maicH^  components 
of  cyberspace:  the  key  Inter¬ 
net  protocols:  digital  control 
systems,  such  as  those  that 
manage  the  flow  of  electricity, 
software  and  hardware  com- 
pooeots;  and  physical  infra¬ 
structure  interdependencies. 

Many  users  ai>d  security  ex¬ 
perts  acknowledged  the  need 
to  improve  critical  protocols, 
such  as  the  Domain  Name  Sys¬ 
tem  (DNSh  the  Border  Gate¬ 
way  Protocol  (BGP),  which 
enables  routing  information  to 
be  exchanged  ^tweeo  net- 
wofks;  and  the  current  version 
of  Che  Iiuemef  Protocol 
which  is  MW  being  migrated 
from  IPv4  to  IPv6  for  im¬ 
proved  security.  But  the  ma¬ 
jority  of  users  who  spoke  with 
Compurervtforld  last  week  re¬ 
main  convinced  that  the  most 
pressing  challenge  is  improv- 
ii^  software  security. 

SoftvMre  Comes  First 

“It  doesn’t  matter  bow  well  we 
secure  DNS.  IPv6  (and  BCPl.” 
said  a  security  administrator 
at  the  Vu^ioia  Polytechnic 
Institute  and  State  University 
in  Blacksburg  who  requested 
anonymity.  “If  we  £ail  to  ad¬ 
dress  the  vendor-induced  vul¬ 


nerabilities  of  client  machines, 
then  everything  else  will  be 
compromised.** 

Last  (uly,  the  univerrity  stan- 
ed  requiring  software  vendors 
to  prove  that  their  products 
aren't  susceptible  to  the  top  20 
vulnerabilities 
listed  by  the  FBI 
and  the  SANS 
Institute. 

“Every  major  attack  on  the 
Internet  since  1986  has  in¬ 
volved  at  (east  one  of  two  Vic¬ 
tors:  weak  cooTigurations  or 
software  flaws,”  said  (eft  Shaw- 
go,  a  former  seefurity  admims- 
trator  ara  major  health  care 
company  who  b  now  an  inde¬ 
pendent  consultant. 

“Our  software  economy 
pushes  time  to  market  above 
ail  else.**  be  said,  adding  that 
software  vendors  must  be  held 
to  a  specific  time  requirement 
for  sending  fixes  to  users. 

But  getting  software  patches 
quickly  isn't  the  only  bsuc. 


said  Susan  Bradley,  a  security 
manager  at  Ibmiyasu.  Smith, 
Horn  and  Braun  Accountancy 
Corp.,  a  law  firm  in  Fresno. 
Calif.  Security  patches  de¬ 
signed  to  fix  vulnerabilities 
often  end  up  “breaking’’  other 
applications,  she  said. 

“We  roust  [then]  determine 
whether  the  vulnerability  ex¬ 
posed  by  not  patching  b 
worth  the  risk  of  patching,” 
she  explained.  Thb  process 
has  left  Bradley  and  her  staff 
“shellshocked"  from  having  to 
decide  if  a  vulnerability  war¬ 
rants  a  patch  that  will  almost 
certainly  impact  the  Arm's 
productivity,  she  said. 

Vsndor  Action  Required 

CUnt  Kreitner.  president  and 
CEO  of  the  Center  for  Internet 
Security  in  Hersbey.  Pa^  said 
operating  system  vendors 
need  to  start  shipping  prod¬ 
ucts  with  at  least  a  baseline 
level  of  security  settings  in 
place  as  the  factory  default. 

Application  vendors  also 
need  to  stop  using  practices 
such  as  requiring  root-level 


access  for  software  installs, 
since  that  activates  certain 
services  that,  if  left  on.  could 
send  user  names  and  pass¬ 
words  in  clear  text:  using  ran¬ 
dom  port  numbers  that  can't 
be  filtered  property;  and  al¬ 
lowing  ephemeral  network 
connections  from  outside  the 
user  organization's  netwuric, 
Kreitner  said. 

Other  users  said  all  of  thb 
will  require  more  than  good 
intentions  on  behalf  of  the 
government.  To  be  effective; 
the  national  strategy  will  re¬ 
quire  incentives  and  negative 
repercussions  and  possibly 
regulation  —  something  that 
remains  on  the  table,  accord¬ 
ing  to  Bob  Stephan,  special  as- 
sbtant  to  Secretary  of  Home¬ 
land  Security  Tom  Ridge  for 
information  analysb. 

“If  the  DHS[U3.  Depart¬ 
ment  of  Homeland  Security] 
b  serious  about  creating  real 
security  real  fost.  it  should  do 
what  government  does  best: 
create  incentives  that  make 
what  b  best  for  homeland  se¬ 
curity  best  for  the  organiza¬ 
tions  that  provide  and  use  net¬ 
worked  computing  devices," 
said  Gerald  L  lenkim.  bead 
of  the  IT  group  at  Goldberg. 
Kohn,  Bell  Black.  Roscnbloom 
&  Moritz  Ltd.  in  Chicago. 

But  in  the  end.  “the  federal 
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government  may  be  forced  to 
confrom  the  hated  ‘R  wort)'  — 
regulation.”  said  Jenkins.  And  a 
package  of  incentives  that  con¬ 
tains  both  “carrots  and  sticks” 
need  not  be  heavy-handed  or 
burdensome;  it  can  be  “pre¬ 
cisely  tailored,”  be  said.  I 


OASIS  Ratifies  Access-Controi  Standard 


Only  a  small  piece 
of  Web  services 
puzzle,  analyst  says 


BV  CABOL  8l.rWA 

A  major  standards  body  last 
week  announced  the  ratifica- 
tioo  of  a  standard  that  could 
benefit  companies  that  need 
to  control  user  access  to  Web 
services  or  secured  informa¬ 
tion  over  the  Internet. 

The  Extensible  Access 
Control  Markup  Language 
(XACML)  b  an  XML  spe^i- 
catioo  that  can  be  used  to  de¬ 
scribe  authorization  policies 
in  an  open,  interoperable  way. 

But  it's  unclear  how  great 
an  impact  XACML  will  have 
in  the  community  of  veitdors 
supporting  Web  services. 


since  the  newly  anointed  stan¬ 
dard  from  the  Organization 
for  the  Advancement  of  Struc¬ 
tured  Information  Standards 
(OASIS)  b  only  one  small 
piece  of  the  Web  services  se¬ 
curity  puzzle,  said  Jason 
Bloomberg,  an  analyst  at  Zap- 
Think  Lie  in  Waltham.  Mass. 

Bloomberg  said  he  wouldn't 
be  surprised  to  see  XACML 
merge  with  anoth-  . 

cr  Web  services  yflK  il 
standard,  such  as 
Web  Services  Pol¬ 
icy  (WS-PoUcy>. 

Kevin  Cronin, 
chief  enterprise  ar- 
chilect  for  financial  services  at 
Boston-based  Niteo  Partners 
loe^  said  he’s  a  bit  worried 
about  overtasking  standards 
at  thb  early  stage,  since  rra 
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one  wants  to  do  work  that 
might  later  have  to  be  discard¬ 
ed  if  another  standard  be¬ 
comes  the  accepted  one. 

Cronin  added  that  he  thinks 
the  issue  XACML  addresses  b 
“very  real”  and  treeds  to  be 
dealt  with  in  order  to  ensure 
more  efficient  and  more  secure 
policy  management,  enforce¬ 
ment  and  auditing. 

-  Sun  Microsys- 

If  terns  Inc  an¬ 
nounced  last  week 
the  release  an 
XACML  imple¬ 
mentation  under 
an  open-source  li¬ 
cense.  The  company  claimed 
that  it  will  help  developers 
build  secure  Web  services  and 
applications  because  they  will 
no  longer  have  to  concern 


themselves  with  the  patch- 
work  of  proprietary  access- 
control  policy  languages. 

But  it’s  unclear  when  or 
i^iether  other  vendors  will 
build  to  the  standard.  Paul 
Patrick,  chief  security  archi¬ 
tect  at  BEA  Systems  Inc  in 
San  Jose,  said  that  even  though 
BEA  served  on  the  standard’s 
technical  committee,  h  cur¬ 
rently  has  no  plans  to  support 
XACML  in  pr^ucts.  Patrick 
said  authorization  providers 
are  more  likely  candidates. 

A  spokesman  for  Microsoft 
Corp.  said  the  company  has  no 
plans  to  support  XACML  ei¬ 
ther.  He  added  that  Microsoft 
conriders  WS-PoUcy  and  WS- 
Security  to  be  the  more  com¬ 
plete  framework  for  address¬ 
ing  needs  in  thb  area.  I 
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Lucent  CEO  Adds 
Chairman's  Job 

Lucent  Tedinolooies  inc.  named 
Patrick  Russo.  Its  president  and 
CEO  for  the  past  13  months,  to 
the  additional  position  of  chair¬ 
man.  Russo.  30.  takes  over  the 
joh  from  Henry  Schadit.  who  will 
remain  on  the  networfcmQ  equip¬ 
ment  vendor's  board  as  an  out¬ 
side  director.  Schacht,  68.  had 
been  chakman  of  beleaguered 
Murray  HUIs,  M.J.-based  Lucent 
since  October  2000. 


Alcatel  Builds  SIP 
Into  Comm  Server 

Pans-basod  Alcatel  this  week 
ptans  to  release  an  iP-basod 
voice  and  data  communicatiorts 
server  that  supports  the  Session 
tnitialion  Proto^  (SP).  which 
governs  how  P  sessiofts  start 
ar>d  stop.  Aicatel  said  OmniPCX 
Enterprise  wdi  be  accompanied 
by  Lima-based  communications 
management  software  and  sev¬ 
eral  other  products,  incJudirtg  a 
SIP-compliant  phone  tsrmiruL 


Staples  Upgrades 
Procurement  Site 

Staples  Inc.,  a  Framinghafn. 
Mass. -based  office  supplies  re¬ 
tailer.  said  it's  using  IBM's  WOb- 
Sphere  Commerce  Business  Edi¬ 
tion  software  to  power  an  up¬ 
graded  version  of  its  business- 
to-business  procurement  Wfeb 
site  for  corporate  customers. 
StapiesLMt  4.0  SKhides  naviga¬ 
tional  dtangos  aitd  new  features 
such  as  the  ability  to  track  orders 
placed  onbne  or  by  phorte  or  fas. 


Short  Takes 

NETWORK  ASSOCIATES  INC  in 
Santa  Clara.  CaM.,  released  a 
high-end  version  of  its  McAfee 
^AWtSNeld  security  appliance 
and  upgraded  the  software  in  its 
two  eskthng  models. . . .  MICRO¬ 
SOFT  CORP  withdraw  a  second 
beta-test  retsase  of  OfRca  2003 
and  said  the  Mftwara  had  boon 
nadvertonOy  posted  on  its  Web 
site  for  developerv 


Continued  from  page  I 

HIPAA  Rules 

The  data  security  rules  re¬ 
quired  by  the  Health  Insurance 
Portability  and  Accountability 
.Act  (HIP.AA)  became  law  last 
week  with  their  publication  in 
the  Federal  Register.  But  they 
won't  take  effect  until  April  21. 
2005.  acairding  to  the  Centers 
for  Medicare  &  Medicaid  Ser¬ 
vices  (CMS),  which  are  part  of 
the  U-S.  Department  of  Health 
and  Human  Services. 

Nonetheless,  the  standards 
are  expected  to  become  the  de 
facto  security  guidelines  for 
HIPAA  data-privacy  rules  that 
become  effective  this  April, 
s-iid  Mary-  HenderM>n.  vice 
president  of  FT  compliance  and 
Jircetor  of  the  national  HIPAA 
program  at  Kaiser  Permanente 
Health  Plan  Inc.  'I’be  security 
rules  were  supposed  to  have 
been  developed  first  but  arc 
five  years  behind  schedule. 

T'hc  Baltimore-based  CMS 
spelled  out  what  the  health 
care  industry  should  strive  to 
do  on  data  security  (see  box). 
But  it  dropped  many  proposed 
technology  nequiremenis  that 
were  in  an  earlier  version  of 
the  security  rules  and  made 
them  optional  for  companies. 

Karen  Trudel.  deputy  direc¬ 
tor  of  the  HIPAA  standards  of¬ 
fice  at  the  CMS.  said  the  new 
rules  were  crafted  to  be  “lech- 
nology-neutrar  and  lu  give 
companies  wide  latitude  in  de¬ 
veloping  ibctr  information  se¬ 
curity  systems  and  procedures. 
For  example,  encryption  of 
health  data  transmitted  over 
the  Internet  Ls  no  longer  man¬ 
dated  and  can  be  based  on  risk 
assessments  by  companies. 

If  a  doctor  sends  an  e-mail 
to  another  physician  about  a 
patient  consultation,  encryp¬ 
tion  may  not  be  necc.ssary. 
Trudel  noted.  But  if  “you're  a 
large  [health  care]  organiza¬ 
tion  sending  a  bunch  of  trans¬ 
actions.  then  you  would  want 
to  encrypt."  she  said. 

[im  Klein,  an  analyst  at  Gart¬ 
ner  Inc.,  said  the  new  flcxtbili- 
ty  should  reduce  the  total  cost 
of  complyir^  with  the  HIPAA 
security  rules  by  at  least  50S. 
He  wouldn't  disclose  specific 
cost  estimates,  but  Gartner  in 


Protecting  Health  Data 


October  released  survey  re¬ 
sults  that  estimated  average 
compliance  costs  of  about 
$3.7  million  for  insurers  and 
$2  million  for  providers. 

But  the  flexibility  also  puts 
the  onus  on  companies  to 
carefully  weigh  the  risks  at¬ 
tached  to  their  IT  compliance 
plans,  said  [elT  Fusile.  a  con¬ 
sultant  at  New  York-based 
PricewaterhouseCoopers.  The 
lack  of  mandated  technologies 
and  procedures  requires  health 
care  organizations  “to  think 


about  and  determine  what  is 
reasonable."  he  noted. 

Oakland.  Gaiif.-based  Kaiser 
i.s  already  starting  that  proc¬ 
ess.  according  to  Henderson. 
She  said  the  two  years  before 
the  security  rules  lake  effect 
will  go  by  “awfully  fast"  for  an 
organization  as  laige  as  Kaiser, 
which  has  8.4  million  mem¬ 
bers.  Henderson  said  Kaiser 
officials  don't  yet  know  how 
much  it  will  cost  the  company 
to  comply  with  the  rules. 

Richard  Marks,  a  lawyer  at 


Seattle-based  law  firm  Davis 
Wright  Tremaine  LLP.  said  the 
combination  of  the  HIPAA 
data  privacy  rules  and  the 
open-to-interpretaiion  securi¬ 
ty  standards  could  become  a 
honey  pot  for  law  firms  that 
specialize  in  class-action  suits. 
Such  firms  believe  HIPAA 
could  be  as  lucrative  as  "as¬ 
bestos  and  breast-implant  liti¬ 
gation  combined,"  Marks  said. 

Concerns  about  litigation 
could  also  affect  the  use  of 
technologies  such  as  wirele.HS 
LANs  in  hospitals,  he  added. 

Marne  Gordon,  director  of 
regulatory  affairs  at  TruSccure 
Corp..  a  Herndon.  Va.,  consult¬ 
ing  firm,  said  litigation-wary 
companies  also  may  stick  with 
paper-based  approaches  in¬ 
stead  of  rolling  out  autonuted 
medical  records  and  physician 
order-entry  systems.  I 


MORE  RULES 
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Confinued  from  page  I 

Tele(K)mmuters 


too  many  phone  lines  and 
broadband  connections.  A 
business  may  "end  up  with 
costs  that  are  higher  per  per¬ 
son  than  if  there  is  a  sundard- 
ized  program,"  said  Gil  Cor¬ 
don.  a  ieleci>mmuting  consul¬ 
tant  in  Monmouth  {unction.  N.{. 

Moreover,  the  absence  of 
policies  for  securing  data  — 
covering  everything  from  fire¬ 
walls  in  home  offices  to  the 
shredding  of  confidential  faxes 
—  could  expose  a  firm  to  prt)b- 
lems.  security  experts  said. 

But  even  if  all  the  policies 
and  procedures  are  in  place, 
as  they  were  for  Providence 
Health  Plan  in  Beaverton.  Dre^ 
technology  problems  can  cre¬ 
ate  complications.  The  multi- 
state  health  care  system  put  in 
a  Citrix  System  Inc.  server- 
based  remote  access  system 
that  uses  a  virtual  private  net¬ 
work  (VPN). 

"Wc  did  a  lot  of  hard  worit 
on  making  sure  (the  telccom- 
mutmg  policy]  was  crafted  cor¬ 
rectly."  said  (ihris  Apgar.  an  IT 


security  officer  at  Providence. 
“Where  it  fell  apart  is  we  hadn't 
tested  our  Citrix  VPN  connec¬ 
tions  well  enough,"  he  said, 
though  it  was  a  problem  with 
the  VPN  rather  than  Citrix. 

The  VPN  didn't  work  well 
in  part  because  it  was  new 
technology  for  employees,  and 
it  didn't  mesh  well  with  Provi¬ 
dence’s  legacy  applications. 
Apgar’s  advice  to  any  compa¬ 
ny  “is  to  test  the  heck  out  of 
it"  before  implementing  the 
technology  component  of  a 
telecommuting  program. 

Mattress  Giant  is  using  an¬ 
other  method  for  connecting 
remote  employees.  Workers 
connect  to  its  systems  xria  re¬ 
mote  access  servers  operated 
by  Expertcity  Inc.  in  Santa  Bar¬ 
bara,  Calif.  That  system,  which 
pnwidcs  an  encrypted  connec¬ 
tion.  didn't  require  extensive 
training,  said  WUliants. 

About  one  in  five  workers, 
or  28  million  employees,  par¬ 
ticipates  in  some  form  of 
telecommuting,  according  to  a 
telephone  survey  of  L170  ran¬ 
domly  selected  U.S.  house¬ 
holds  that  was  conducted  in 
2001  by  the  International  Tele- 


woric  Association  &  Council 
(ITAC)  in  Wakefield.  Mass. 
That  figure  is  expected  to  rise 
by  millions  when  the  2002  sur¬ 
vey  is  released  next  month,  said 
Tim  Kane,  president  of  ITAC 
and  CEO  of  Kinetic  Workplace 
Inc.,  a  telecommuting  consul¬ 
tancy  in  Pittsburgh. 

“Tekwork  uxik  a  huge  spike" 
with  last  week’s  storm,  said 
Kane,  much  of  it  on  an  ad  hoc 
basis  by  employees  at  compa¬ 
nies  without  formal  programs. 
The  storm  also  may  have  rein¬ 
forced  to  employees  and  em¬ 
ployers  that  they  need  to  do 
telecommutii^  —  or  simply 
that  they  con  do  it.  he  said.  I 


PLANiAvoidanadhoctMecom- 
mubrni  prograrii  which  couU  In¬ 
crease  costs  and  sacunly  rate. 

STANDARDIZE:  Create  tsificam- 
muting  ooltoes  and  IT  packages 
for  smplovee  support .  Consider 
issues  such  as  broadband  provid¬ 
ers'  diftenng  VPN  requirements 

SET  POLICIES:  Include  work  en¬ 
vironment  requirements  and  se¬ 
curity  issues,  such  as  connecting 
to  a  third-party  LAN. 
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HIPAA  Rules 


The  data  security  rules  re¬ 
quired  by  the  Health  Insurance 
^rtability  and  AccountabUity 
Act  (HIPAA)  became  law  last 
week  with  their  publication  in 
the  Federal  Register.  But  they 
won't  take  effect  until  April  21. 
2005.  according  to  the  Craters 
for  Medicare  &  Medicaid  Ser* 
vices  (CMS),  which  are  part  of 
the  U.S.  Department  of  Health 
and  Human  Services. 

Nonetheless,  the  standards 
are  expected  to  become  the  de 
focto  security  guidelines  for 
HIPAA  dau-privacy  rules  that 
become  e/Tective  this  April, 
said  Mary  Henderson,  vice 
president  of  IT  compliance  and 
director  of  the  national  HIPAA 
program  at  Kaiser  Permanente 
Health  Plan  Inc  The  security 
rules  were  supposed  to  have 
been  developed  first  but  are 
five  years  berhind  schedule. 

The  Baltimore-based  CMS 
spelled  out  what  the  health 
care  industry  should  strive  to 
do  on  data  security  (see  box). 
But  it  dropped  many  proposed 
technology  requirements  that 
were  in  an  ear^r  version  of 
the  security  rules  and  made 
them  opttonal  for  companies. 

Karen  lYudei.  deputy  direc¬ 
tor  of  the  HIPAA  standards  of¬ 
fice  at  the  CMS.  said  the  new 
rules  were  crafted  to  be  "tech¬ 
nology-neutral’'  and  to  give 
companies  wide  latitude  m  de¬ 
veloping  their  Information  se¬ 
curity  systems  and  procedures. 
For  example,  encryption  of 
health  data  transmitted  over 
the  Internet  is  no  longer  man¬ 
dated  and  can  be  based  on  risk 
assessments  by  companies. 

If  a  doctor  sends  an  e-mail 
to  another  physician  about  a 
patient  consultation,  encryp¬ 
tion  may  not  be  necessary. 
Thidel  noted  But  if  "you're  a 
large  [health  care]  organiza¬ 
tion  sending  a  bunch  of  trans¬ 
actions.  then  you  would  want 
to  encrypt.”  she  said 

Jim  Klein,  an  analyst  at  Gart¬ 
ner  Inc.,  said  the  new  flexibili¬ 
ty  should  reduce  the  total  cost 
of  complying  with  the  HIPAA 
security  rules  by  at  least  50%. 
He  wouldn’t  diKlose  specific 
cost  estimates,  but  (Partner  in 


Protecting  Health  Data 


October  released  survey  re¬ 
sults  that  estimated  average 
compliance  costs  of  about 
S37  million  for  insurers  and 
$2  million  fm'  providers. 

But  the  flexibility  also  puts 
the  onus  on  companies  to 
carefully  weigh  the  risks  at¬ 
tached  to  their  IT  compliance 
plan-S  said  Jeff  Fusile.  a  con¬ 
sultant  at  New  York-based 
PricewaterfaouseCoopers.  The 
lack  of  mandated  technologies 
and  procedures  requires  health 
care  organizations  "to  think 


about  and  determine  udiat  is 
reasonable,”  be  noted. 

Oakland  Calif-based  Kaiser 
is  already  starting  that  proc¬ 
ess.  acco^ing  to  Henderson. 
She  said  the  two  years  before 
the  security  rules  take  effect 
will  go  by  "awfully  fast"  for  an 
organizatioa  as  large  as  Kaiser, 
which  ha*  g.4  million  mem¬ 
bers.  Henderson  said  Kaiser 
officials  don’t  yet  know  bow 
much  it  will  cost  the  company 
to  comply  with  the  rules. 

Richard  Maries,  a  lawyer  at 


Seattle-based  law  firm  Davis 
Wright  Ttemaine  LLP.  said  the 
combination  of  the  HIPAA 
data  privacy  rules  and  the 
open-to-imerpretation  securi¬ 
ty  standards  could  become  a 
honey  pot  for  law  firms  that 
specialize  in  class-action  suits. 
Such  firms  believe  HIPAA 
could  be  as  lucrative  as  "as¬ 
bestos  and  breast-implant  liti¬ 
gation  combined”  Marks  said. 

Concerns  about  litigation 
could  also  affect  the  use  of 
technologies  such  as  wireless 
LANs  in  hospitals,  he  added. 

Marne  Gordon,  director  of 
regulatory  affairs  at  TriiSecure 
Corp..  a  Herndon.  Va..  consult¬ 
ing  firm,  said  litigation-wary 
companies  also  may  stick  with 
paper-based  approaches  in- 
st^  of  rolling  out  automated 
medical  records  and  physician 
order-entry  systems.  I 
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Telecommuters 


too  many  phone  lines  and 
broadband  connections.  A 
business  may  "end  up  with 
costs  that  are  hi^r  per  per¬ 
son  than  if  there  is  a  standard¬ 
ized  program,”  said  Gil  (kir- 
don.  a  telecommuting  consul¬ 
tant  in  Monmouth  Junction,  N.I. 

Moreewer.  the  absence  of 
policies  for  securing  data  — 
covering  everything  faom  fire¬ 
walls  in  home  offices  to  the 
shredding  of  confidential  £axes 
—  could  expose  a  Ann  to  prob¬ 
lems,  security  experts  said. 

But  even  if  all  the  policies 
and  procedures  are  in  place, 
as  they  were  for  Providence 
Health  Plan  in  Beaverton,  Ore., 
technology  problems  can  cre¬ 
ate  complications.  The  multi¬ 
state  health  care  system  put  in 
a  Citriz  System  Inc  server- 
based  remote  access  system 
that  uses  a  virtual  private  net¬ 
work  (VPN). 

"We  did  a  lot  of  hard  work 
on  makii^  sure  (the  telecom¬ 
muting  policy)  was  crafted  cor¬ 
rectly,”  said  Chris  Apgar.  an  IT 


security  officer  at  Providence. 
"Where  it  fell  apart  is  we  hadn't 
tested  our  Chrix  VPN  connec¬ 
tions  well  enough.”  he  said, 
though  it  was  a  problem  with 
the  VPN  rather  than  Citrix 

The  VPN  didn’t  work  well 
in  part  because  it  was  new 
technology  for  employees,  and 
it  didn't  mesh  well  with  Provi¬ 
dence’s  legacy  applications. 
Apgar's  advice  to  any  compa¬ 
ny  "is  to  test  the  heck  out  of 
it”  before  implementing  the 
technology  component  of  a 
telecommuting  program. 

Mattress  Giant  is  usii^  an¬ 
other  method  for  connecting 
remote  employees.  Workers 
connect  to  its  systems  via  re¬ 
mote  access  servers  operated 
by  Expertcity  Inc  in  Santa  Bar¬ 
bara.  Calif,  liiat  system,  which 
provides  an  encrypted  connec¬ 
tion.  didn’t  require  extensive 

rraining,  «iH  WlUiatti^ 

About  one  in  five  workers, 
or  28  million  employees,  par¬ 
ticipates  in  some  form  of 
telecommuting,  according  to  a 
telephone  survey  of  L17D  ran- 
doc^y  selected  US.  house¬ 
holds  that  was  conducted  in 
2001  by  the  International  Tele¬ 


work  Association  &  Council 
(ITAC)  in  Wakefield,  Maas. 
That  figure  is  expected  to  rise 
by  millions  when  the  2002  sur¬ 
vey  is  released  next  month,  said 
Tim  Kane,  president  of  ITAC 
and  CEO  of  Kitietic  Workplace 
Inc,  a  telecommuting  consul¬ 
tancy  in  Pittsburgh. 

"Telework  took  a  huge  spike" 
with  last  week’s  storm,  said 
Kane,  much  of  it  on  an  ad  hoc 
basis  by  employees  at  compa¬ 
nies  without  formal  programs. 
The  storm  also  may  have  rein¬ 
forced  to  employees  and  em¬ 
ployers  that  they  need  to  do 
telecommuting  —  or  simply 
that  they  con  do  it.  he  said  I 
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Users  Tap  Energy  Management 
Systems  to  Reduce  Power  Costs 


Analysts:  Skyrocketing  energy  prices 
fuel  incteas^  interest  in  technology 


BV  TWOMAS  HOrrMAN 

The  energy  crisis 
that  hit  CaliRimia 
starting  in  1999 
drove  companies 
such  as  Bank  of  America  Corp. 
to  install  energy  management 
systems  designed  to  make 
their  facilities  more  power* 
efficient.  Now  the  509^plus 
jumps  in  energy 
costs  in  the  North¬ 
east  and  other  ar¬ 
eas  this  winter  are 
expected  to  have 
the  same  effect 
nil  Feblowitz,  an  analyst  at 
AMR  Research  Inc.  in  Boston, 
said  catapulting  prices  for 
heating  oil  and  other  forms  of 
energy  give  users  more  incen¬ 
tive  to  foot  the  bill  for  energ)* 
management  software,  which 
can  cost  S1SO.OOO  to  $450,000 
for  an  average  instaUation. 

Businesses  that  make  use  of 
such  systems  should  be  able  to 
achieve  modest  cost  savings, 
especially  during  peak  energy 


demand  periods,  when  utili¬ 
ties  charge  customers  premi¬ 
um  prices,  noted  Zarko  Sumic. 
a  Meta  Group  Inc.  analyst 
based  in  BelWue,  Wash. 

For  Bank  of  America,  that 
kind  of  promise  was  enough  to 
justify  an  investment  last  year 
in  a  neural  network-based  en¬ 
ergy  management  system  de¬ 
veloped  by  Web- 
Gen  Systems  Inc. 
in  Cambridge. 

Mass.  The  Char¬ 
lotte.  N.C. -based 
bank  is  using  the  software  to 
monitor  and  control  energy 
consumption  at  78  office 
buildings  in  California,  where 
it  has  a  substantial  presence 
In  the  wake  of  the  California 
energy  crisis,  bank  executives 
wanted  to  reduce  energy  us¬ 
age  at  the  facilities  and  get  a 
better  understanding  of  bow 
much  power  they  consume, 
said  Larry  Larson,  a  senior 
vice  president  at  Bank  of  Am¬ 
erica's  San  Francisco  office. 


Larson  said  the  WebGen 
software  interf«e$  with  the 
bank’s  building  management 
systems,  letting  facilities  man¬ 
agers  ’’float”  heating  or  air 
conditioning  to  different  tem¬ 
peratures  in  order  to  pare  en¬ 
ergy  costs  without  making  the 
offices  uncomfortable  for  the 
buildings’  occupants. 

When  it  bought  the  soft¬ 
ware.  Bank  of  America  made  a 
’^^ry.  very  conservative  esti¬ 
mate”  that  it  could  reduce  en¬ 
ergy  consumption  at  the  Cali¬ 
fornia  buildings  by  5%  last 
year.  Larson  said.  The  bank 
surpassed  that  estimate  and 
got  a  one-year  payback  on  the 
software,  be  said,  although  he 
wouldn’t  disclose  what  it 
spent  on  the  technology.  Bank 
officials  are  now  looking  to 
use  the  system  to  help  manage 
other  buildings  around  the 
country,  Larson  added. 

The  California  Department 
of  General  Services  is  another 
WebGen  user.  When  the 
state's  energy  crisis  began, 

"we  were  facing  energy  black¬ 
outs.  and  tmbody  knew  what 
was  going  on,"  said  Randy  Fer¬ 


guson.  chief  of  energy  man¬ 
agement  at  the  Sacramento- 
based  agency.  Reducing  power 
loads  was  the  top  priority  for 
state  officials,  Ferguson  added. 
"Saving  money  was  secondary 
at  that  point.”  be  said. 

But  since  the  department 
began  installing  the  energy 
management  software  at  65 
state-owned  buildings  in  Au¬ 


gust  2001  as  part  of  a  conser¬ 
vation  program,  power  costs 
have  cut  by  up  to  20%  in 
many  of  those  f^iUties,  Fergu¬ 
son  said.  He  added,  however, 
that  it's  tough  to  pinpoint  bow 
much  of  the  savings  is  directly 
attributable  to  the  software. 

Meta’s  Sumic  said  other 
vendors  that  sell  energy  man¬ 
agement  software  include  The 
1>ane  Co.,  Honeywell  Interna¬ 
tional  Iitf .  and  Silicon  Energy 
Corp.,  an  Alameda,  Calif.- 
bas^  company  that  last 
month  agreed  to  be  acquired 
by  ^>okane,  Wash.-based  Itron 
Inc  [QuickUnk  363141. 1 
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ROI  Report  Urg^  Wary 
Approach  to  CRM  Projects 


av  THOMAS  HOFFMAN 

As  IT  managers  consider 
which  technologies  to  invest 
in  this  year,  they  should  exer¬ 
cise  caution  with  customer  re¬ 
lationship  management 
(CRM)  projects  but  expect 
high  returns  on  investments  in 
business  intelligence  software. 

That's  the  upshot  of  a  report 
issued  last  week  by  Wellesley, 
Mass.-based  Nucleus  Research 
Inc.  on  the  best  and  worst 
technologies  for  ROI  this  year. 
The  report  was  based  on  a  mix 
of  user  case  studies  and  prod¬ 
uct  road  maps  set  by  technolo¬ 
gy  vendors,  the  firm  said. 

CRM  software  in  particular 
was  cited  as  a  potentia]  source 


of  ROI  danger,  as  it  was  in  an 
earlier  report  that  the  market 
research  Ann  released  in  Sep¬ 
tember  [Qukkiink  32707}. 

The  chwees  for  companies 
to  overspend  "are  greater  with 
CRM”  than  with  many  other 
types  of  IT  projects,  said  Ian 
C^pbell,  president  and  CEO 
at  Nucleus.  Think  of  CRM  as 
the  Big  Dig  of  the  technology 
world  —  you  can  go  way  over 
your  head,"  Campbell  added, 
referring  to  a  highway  con¬ 
struction  project  in  Boston 
that’s  years  past  deadline  and 
billions  of  dollars  over  budget. 

To  avoid  that  scenario,  Nu¬ 
cleus  analyst  Rebecca  Wette- 
mann  suggested  two  rules  of 


thumb  when  planning  CRM 
projects:  never  spend  more 
than  twice  what  you  paid  for 
the  software  on  consoling, 
and  be  sure  to  set  project 
milestones  that  can  be 
achieved  within  six  months. 

ROIIVitaiitiai 

While  she’s  not  convinced 
about  the  validity  of  those 
rules  of  thumb,  Cathie  Kozik, 
CIO  at  Tellabs  inc.  in  Naper¬ 
ville,  IlL,  said  she  agrees  that 
IT  managers  should  be  cau¬ 
tious  about  CRM  projects. 

Tve  yet  to  And  a  company 
that  will  acknowledge  that 
they’ve  achieved  their  expect¬ 
ed  ROI  on  any  large  CRM  in¬ 
vestment,”  Kozik  said  The 
most  successful  seem  to  have 
focused  on  delivering  CRM 
functionality  in  meaningful 
pieces  rather  than  going  for  a 


full-blown  implementation." 

For  its  part.  Tellabs,  a  com¬ 
munications  equipment  mak¬ 
er.  opted  to  take  a  step-by-step 
approach  to  CRM  "after  look¬ 
ing  at  wins  and  losses  at  other 
companies,"  she  added. 

Wettemann  said  there's 
strong  ROI  potential  with 
business  intelligence  tools,  es¬ 
pecially  as  pressure  mounts 
on  data  analysis  software  ven¬ 
dors  to  improve  the  usability 
of  their  pr^ucts  in  anticipa¬ 
tion  of  Microsoft  Corp.  making 
a  bigger  splash  in  that  market. 

There  are  also  solid  ROI  op¬ 
portunities  for  high-volume 
manufacturers  that  are  consid¬ 
ering  using  sui^ly  chain  tech¬ 
nolopes  like  radio-ftequency 
identiAcation  (RFID)  tags  to 
help  manage  product  invento¬ 
ries  and  shipments  more  ef¬ 
fectively,  (Campbell  said. 


But  RFID  costs  are  still  high, 
Campbell  added.  As  a  result,  it 
ml^t  be  wiser  for  small  man¬ 
ufacturers  to  invest  in  other 
tools  "with  an  eye  toward 
RFID  in  the  fottire,"  he  said. 

Ron  Fijalkowski,  CIO  at 
Strategic  Distribution  Inc  in 
Bensalem.  Fa„  said  he  thinks 
supply  chain  management 
technology  in  general  "offers 
the  best  ROI  given  our  current 
economic  constraints,  since  it 
focuses  on  an  issue  with  dear, 
measurdile  costs." 

Strategic  Distribution,  a 
$300  million  supplier  of  man¬ 
ufacturing  maintenaiice  and 
repair  parts,  is  working  to  au¬ 
tomate  tasks  such  as  the 
preparation  of  purchase  or¬ 
ders,  invoices  and  advance 
shipping  notices.  Fijalkowski 
said  But  he  declined  to  sped- 
fy  the  software  chat  it's  M«ng  a 
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Cell  Carriers  to  Add  Push-to-Talk  Services 


BY  BOB  BBEWIN 

The  four  top  operators  of  na¬ 
tional  cellular  networks  in  the 
U^.  last  week  all  said  they  will 


offer  push-to-talk  services  that 
make  cell  phones  work  like 
walkie-talkies,  although  their 
plans  to  do  so  remain  unsettled 


Currently,  Nextel  Commu¬ 
nications  Inc.  is  the  only  U.S. 
carrier  that  supports  push-to- 
talk  technology,  which  lets  cell 


phone  users  connect  to  one 
another  by  pushing  a  single 
button.  AT&T  Wireless  Ser¬ 
vices  Inc.,  Cingular  Wireless, 
Sprint  PCS  Group  and  Verizon 
Wireless  each  di^losed  plans 
to  add  similar  services. 


Strength  in  Numbers. 


Remedy  is  the  leader  in  Service  Management  sedations.  Our  aun^)en  q>eak  for  themselves. 

Yet,  there  are  other  numbers  important  to  Remedy.  Operating  cost  reductions,  in^JiovemenQ  in  customer 
sabsfoction,  increased  employee  inoducdviiy,  shorter  time  to  value — the  bottom-line  numben  you  wiO  achieve 
by  using  Remedy’s  out-of-hooc  best  practice  a^^^icaiions  to  automate  service  management  (socesses. 

Your  success  depends  on  those  numbers.  Remedy  delivers  diem. 


wwwjemedyxom/strength 
or  call  us  at  1.888.294.5757 


SB  Remedy- 

a  BMC  Saftware  eompony  “ 


Spokesmen  for  Overland 
Park,  Kan.-based  Sprint  PCS 
and  Bedminster,  N.J.-based 
Verizon  Wireless  said  the  two 
companies  this  year  plan  to  in¬ 
troduce  push-to-talk  services 
on  their  networks,  which  are 
built  aitmnd  Code  Division 
Multiple  Access  standards. 

But  neither  would  specify  a 
start  date  or  identify  the  tech¬ 
nology  that  will  be  used  to 
make  the  services  possible. 

ATStT  Wireless  in  Red¬ 
mond,  Wash.,  and  Cingular 
Wireless  in  Atlanta  indicated 
that  they  intend  to  support 
push-to-talk  fimctionality  via 
IP-based  technolt^  that’s  be¬ 
ing  Jointly  developed  by  Nokia 
Corp.,  LM  Ericsson  Telephone 
Ca  and  Siemens  AG. 

Oro^Bfort 

Nokia,  Siemens,  and  Ericsson 
announced  at  last  week’s 
3GSM  World  Congress  confer¬ 
ence  in  Cannes.  France,  that 
they’re  working  together  to 
define  specifications  for  push- 
to-talk  capabilities  on  Global 
System  fev  Mobile  Communi¬ 
cations  (GSM)  networics. 

The  three  companies  said 
they  will  use  an  IP  multime¬ 
dia  subsystem  created  by  the 
Hiird  Generation  Paitnership 
Project  mobile  standards 
group  for  deliverii^  integrat¬ 
ed  w}ice  and  data  over  GSM 
netwoiks  with  General  Packet 
Radio  Service  (GPRS)  exten¬ 
sions.  Push-to-talk  users  will 
be  given  IP  addresses  for  their 
phones  and  must  then  pro¬ 
gram  in  the  addresses  of  the 
users  with  whom  they  want 
to  connect. 

IVials  of  foe  GPRS  push’-to- 
talk  service  are  due  to  start  in 
foe  second  half  of  foe  year,  ac¬ 
cording  to  foe  three  cell  phone 
makers.  But  neither  A'T&T 
Wireless  nor  Cingular  would 
say  when  they  expect  to  start 
ofiforing  foe  service  to  their 
customers. 

Craig  Mathias,  an  analyst  at 
Farpoint  Group  in  Ashland, 
Mass.,  called  push-to-talk  tech¬ 
nology  "a  phenomenon  like  in¬ 
stant  messaging  that  will  drive 
wireless  sales”  to  both  con¬ 
sumers  and  corporate  users,  k 


/oris Evers o/rhe IDG  Newsser¬ 
vice  contributed  to  this  repwt. 
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Everythin 
you  know 
about 
enterpris 
integratbH 
is  about 
to  change. 


SeeBeyond 


I  AM  A  SHELL 

I  CAN  FIGHT  CANCER.  I  AM  MERCENARIA  MERCENARY.  I  HAVE  AN 
EXTRACT  IN  MY  SHELL  THAT  HAS  THE  POWER  TO  SLOW  CANCERS 
IN  MICE.  I  HAVE  THE  POWER  TO  BE  THE  NEXT  PENICILLIN.  I  AM  MORE 
THAN  A  SHELL. 


I  AM  A 
NETWORK. 


I  CAN  TURN  SHELLS  INTO  MEDICINE.  I  HAVE  THE  POWER  TO  MOVE 
CUNICAL  TRIALS  ONLINE  SO  NEW  DRUGS  GET  TO  MARKET  FASTER. 
I  HAVE  THE  POWER  TO  PROTECTA  PATIENT'S  PRIVACY.  I  CAN  USE 
THE  POWER  OF  E-LEARNING  TO  LET  DOCTORS  SHARE  RESEARCH 
WITH  OTHER  DOCTORS.  I  THINK  SHARING  IS  CARING.  I  AM  MORE 
THAN  A  NETWORK. 


Cisco  Systems 


THIS  IS  THE  POWER  OF  THE  NETWORK.  HOW. 

ctoeexofn/powarnow 
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PATRICIA  KEEFE 


The^^^toWin 


> 


You  WON’T  FIND  ME  shovelil^  SHOW  this 
week.  rU  be  in  sunny  Arizona  at  Comput- 
envorlcTs  annual  leadership  sununit,  along 
with  some  450  IT  leaders  soaking  up  two 
days  of  peer  networking  and  problem¬ 
solving  while  celebrating  the  accomplishments  of  100  of 
the  brightest  strategists  and  visionaries  in  IT. 

OK.  inayb«  there'll  be 
a  little  goir.  If  anyone 
needs  a  spring  break 
right  now;  it's  IT  profes¬ 
sionals.  Squeaky  tight 
budgets,  stingy  staffing 
and  suspicious  business 
partners  enforcing  rigid 
ROl  requirements  — 
that's  a  lot  to  juggle 

while  managing  to  rUD  S 

successful,  strategic  and 
resourceful  Mganizadon. 

But  it  can  be  dorte,  and 
it  is  being  done,  more  often  than  IT 
gets  credit  fot  The  fact  that  you’re 
getting  things  done  is  of  greater  im¬ 
portance  to  the  company  than  your 
business  peers  reali;^  As  I've  said 
before,  no  other  department  is  as 
uniquely  posidorred  to  understand 
the  inner  workings  of  a  company. 

Your  business  peers  solve  problems 
within  their  units  IT  does  that 
and  more,  often  rec(^;nizing  or  solv¬ 
ing  problems  between  departments 
and  even,  now  and  then,  rescuing 
whole  companies  and  enabling  the 
creation  of  new  corporate  identities. 

Just  take  a  kxtk  at  our  second  an¬ 
nual  Best  in  Class  award  winners  in 
this  week’s  issue  (starting  on  page 
43).  Chosen  by  a  panel  of  their  peers 
from  among  the  projects  of  our  2003 
Premier  U)0  winners  [(^lickLink 
34584),  these  10  winning  IT  teams 
epitomize  the  monumental  payback 
that  cutting-edge  IT  leadership,  cre¬ 
ative  vision  and  determined  follow- 
throu^  can  accomplish. 

But  it’s  not  the  scope  of  the  proj¬ 
ects,  their  dramatic  time  savings  or 
even  their  delivery  of  measurable 
ROl  that  ties  them  together.  The 
connection  lies  in  two  critical  attrib¬ 


utes,  one  a  seeming  no- 
brainer.  the  other  a  road 
not  often  taken. 

Most  important  is  a  fo¬ 
cus  on  the  user  Whether 
ensuring  user  involvement 
or  targeting  user  needs,  or 
even  forging  closer  ties  to 
the  customer  base,  the  IT 
executives  running  these 
projects  never  forgot  who 
the  client  was.  This  guar¬ 
anteed  user  buy-in,  which 
drove  acceptance,  engage¬ 
ment  and  the  success  of  many  of  our 
award-winning  entries. 

At  Ofiftce  D^t.  a  data  warehouse 
project  achiev^  its  goals  by  upping 
into  the  natural  competitiveness  of 
store  personnel  A  not-so-obvious 
payoff  paving  the  way  for  even 
more  difficult  projects  in  customer 
relationship  management 
Making  sure  employees  had  a  rea¬ 
son  to  use  a  new  mobile  application 


proved  a  winning  approach  at  Cela- 
nese  Chemicals.  It’s  not  enough  to 
build  systems  that  improve  business 
processes  and  deliver  infonnatioD 
foster  to  workers.  If  you  can't  moti¬ 
vate  users  ^  in  this  case,  by  feeding 
the  sales  force’s  addiction  to  e-mail 
—  then  you’ll  never  get  the  traction 
you  need  to  succeed. 

And  it  was  relentless  communica¬ 
tion  with  users  that  proved  to  be  a 
key  driver  of  project  success  at 
Coming  Life  Sciences  and  the  Ibn- 
nessee  Valley  Authority. 

The  second  common  thread  is  risk. 
Proving  that  even  in  these  turbulent 
times  it  pays  to  think  and  push  out¬ 
side  the  box,  Aviall  has  IT  visionaries 
to  thank  for  its  new  lease  on  life  and 
a  new  life  to  live.  "Our  competitors 
thou^  we  were  insane.  Some  in¬ 
vestors  asked  for  my  resignation.'* 
acknowledges  pitted  leader  Joseph 
Lacik  Ji:  Instead,  the  controversial  re¬ 
building  of  Aviall’s  infrastructure  was 
wildly  successful  Ladk  didn’t  just 
buck  conventional  wisdom;  his  team 
also  ensured  customer  buy-in  by  de¬ 
signing  around  their  needs. 

Paying  attention  to  the  same  ba¬ 
sics  —  team-building  and  tinding 
ways  to  sell  projects  to  both  users 
and  skeptical  business  partners 
can  make  your  next  IT  project  a 
winner,  too.  I 
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PIMM  FOX 

Simulate 
Your  Office’s 
Future 

OOK  AROUND.  No,  real¬ 
ly,  look  around  Does 
your  workplace  operate 
in  ways  even  remotely  similar 

to  the  manner  it  did,  say,  four  years 
ago?  If  not  (because  of  job  cuts,  office 
closures,  geographic  changes,  expan¬ 
sion.  whatever),  then  ask  yourseif  if  it 
would  have  been  useful  to  have  seen  a 
simulation  back  then  of  bow  your  IT 
shop  works  today. 

Pm  guessing  that  you  don't  woric  for 
an  enlightened  film  that  uses  simula¬ 
tion  software  to  present  various  busi¬ 
ness  and  work  scenarios  in  order  to 
encoun^  cross-training  m  broaden 
the  knowledge  base  of  all  employees. 
Few  of  us  da 

ft's  not  that  the 
tools  aren't  there. 

Schools  across  the 
country  use  simula¬ 
tion  software  devel¬ 
oped  by  New  York- 
based  ncmproftt 
Classroom  Inc.  to 
expose  students  to  a 
variety  of  workplace 
nkill*.  Interested  in 
vdiat  it’s  like  to  be 
the  manager  of  a  pa¬ 
per  mill?  Classroom  Inc  has  a  module 
to  deepen  your  understaodii^  of  envi- 
ronmental  topics,  land  use.  conserva¬ 
tion,  air  quality  and  recycling. 

The  modules  are  designed  for  teams 
consisting  of  three  students  and  teach¬ 
ers  who  have  been  trained  to  present 
the  material  as  part  of  the  school  cur¬ 
riculum.  According  to  Pamela  Patton 
Cone,  bead  of  product  technology  at 
Classroom  Inc,  parent  guides  are  also 
available  for  each  simulation,  and 
training  services  are  always  included 
with  the  software. 

Some  businesses  are  putting  similar 
tools  to  use. 

Managers  at  St  Louis-based  utility 
Ameren  Corp.  use  technology  from 
Maumee,  Ohio-based  Root  Learning 
Inc.  to  role-play,  going  through  the  de- 
dsion-making  processes  they  may  eik- 
counter  running  the  company.  C^^- 
tions  such  as.  "Should  an  energy  pur¬ 
chase  take  place  and  what  effect  will  a 
reduction  in  the  workforce  have  on 
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overall  production?’*  are  available  as 
part  of  the  simulacioo  package. 

Some  CFOs  might  balk  at  the  idea, 
saying  there’s  no  real  payoff  for  the 
costs  involved  in  creating  simulations. 
But  they’d  be  wrong.  The  current  tools 
can  reuse  a  company’s  everyday  forms 
and  templates  so  that  h  doesn't  have 
to  spend  time  creating  new  forms  to 
build  simulations  arounii  The  simu¬ 
lated  company  really  is  your  company. 

But  even  with  new  tools  to  make  it 
easier  to  build  simulation  modules, 
you  must  commit  to  keeping  your  cor¬ 
porate  oirriculum  up  to  date,  just  as 
you  would  any  technical  textbook. 
Otherwise,  you'll  look  dated.  For  ex¬ 
ample.  the  current  version  of  Class¬ 
room  lnc.*s  software  for  students  sim¬ 
ulating  the  world  of  an  IT  project 
manager  shows  an  office  administra¬ 
tor  greeting  a  new  employee  with  talk 
of  stock  options.  I 

DAN  GILLMOR 

YTs  , 
Monoj>oiy 

Addiction 

INFORMATION  technology 
folks  must  love  monopo¬ 
lies.  Otherwise,  you 
wouldn’t  help  create  them. 

Sure,  you  complain  about  lock-in. 
vendor  arrogance,  high  costs  and  all 
the  other  woes  that  come  with  mo¬ 
nopolies  and  the  cozy  oligopolies  that 
seem  to  arise  in  so  many  industries  — 
but  notably  in  IT. 

I  don't  think  you're  stupid  or  naive 
when  you  resign  yourself  to  your  fate. 
You  are  clearly  aware  of  the  upside 
and  downside  of  doing  business  with 
dominant  vendors.  But  you're  addict¬ 
ed  Or.  in  pop  psychology  lingo,  you're 
co-dependent. 

The  easiest  explanation  is  the  near- 
universal  wish  for  standards.  Compe¬ 
tition  —  such  as  railroad  tracks  with 
different  gauges  —  can  be  messy,  as 
we've  seen  again  and  again.  Users  and 
suppliers  gravitate  toward  single 
sta^arda. 

In  technology  development  circles, 
no  one  wants  to  test  a  variety  of  de¬ 
vices  and  platforms,  much  less  devel¬ 
op  for  all  of  them.  One  of  my  brothers, 
a  software  guy,  says  he'd  be  happiest 
—  in  theory  —  with  just  one  operating 
system. 

It  still  seems  obvious  to  me  that,  in  a 
world  where  informadon  is  the  cur¬ 


rency  of  the  future,  it’s  dan¬ 
gerous  to  allow  one  compa¬ 
ny  or  a  small  group  of  com¬ 
panies  to  control  the  stan¬ 
dards.  But  it  seems  less  ob¬ 
vious,  apparently,  to  the 
U.S.  government  and  most 
buyers  of  technology. 

Monocultures  in  the 
physical  world  are  widely 
understood  to  be  risky.  We 
are  moving  that  way.  unfor¬ 
tunately.  in  things  like  form¬ 
ing  —  \^ere  a  single  virus 
could,  in  theory,  wipe  out 
much  of  the  world's  com  crop  in  a  sin¬ 
gle  season,  leading  to  untold  human 
suffering.  Yet  our  food  supply  is  based 
on  monocultures  because  they’re 
more  efficient.  Today. 

And  that  leads  to  the  other  main 
reason  triiy  monopolies.  du<^lies  and  I 
oligopolies  keep  springing  up:  They're  | 
good  business,  lar^ly  because  they’re 
more  stable  —  temporarily,  at  any  rate 
—  for  buyers  as  well  as  sellers. 


ability  can  be  summed  up 
in  the  once-popular  saying 
“hlobody  ever  got  fired  for 
buying  IBM.*  Substitute 
Cisco,  Microsoft  or  other 
big  names,  and  the  idea  is 
much  the  same. 

When  IBM  was  absolute 
master  of  the  IT  universe, 
technology  wasn't  chang¬ 
ing  as  quidcly  as  it  does  to¬ 
day.  But  even  then,  buyers 
were  looking  for  a  level  of 
security,  an  assurance  that 
what  they  were  buying 
would  still  be  working  tomorrow  and 
that  someone  would  stand  behind  it 
The  velocity  of  technological 
progress  today  gives  even  greater  ad¬ 
vantage.  certainly  in  the  short  term, 
to  the  dominant  companies,  and  for 
some  of  the  same  reasons.  But  does  it 
also  lead  to  long-term  power?  I  believe 
it  does,  hugely  because  of  people’s  — 
and  institutions'  ~  logical  aversion  to 
disruption. 


The  desire  for  stability  and  account-  I  The  path  of  least  resistance  is  to  buy 


into  whatever  is  dominant  today. 

That's  a  mistake. 

I  have  a  policy  for  my  personal  tech¬ 
nology  purchasing.  1  balance  my  de¬ 
pendence,  supporting  nondominani 
companies  whenever  possible.  1  sup¬ 
port  worthwhile  competitors,  and 
sometimes  I  give  up  some  small  coo- 
veoieoces  in  the  process  provided, 
of  course,  that  the  choices  I  make 
don't  put  me  at  a  serious  disadvantage 
in  my  work. 

That's  one  approach.  IT  can  do 
some  of  this,  but  it  should  employ  an¬ 
other  tactic,  too:  Push  mitch  harder  for 
open,  noD-owned  standards. 

Cost  is  only  one  issue.  The  other  is 
safety.  Fm  betting  that  open  standards 
will  soon  be  seen  as  the  best  approach 
for  security,  an  increasingly  important 
notion  in  a  dangerous  world.  Disre¬ 
gard  this  at  everyone's  ri^  I 
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Let's  Spread  ttw  Word:  IT  b  Tough 


WITNOVERMYCAlirexpen' 
ence  In  ft.  I  can  vouch  for  the 
tnithfulness  of  Frank  Hayes' re¬ 
freshingly  candid  coknvi  Tough 
Slur  lOtsckUnkSSeO].  I  don’t 
iMlieve  that  many  nSviduals  out¬ 
side  of  fl  realize  the  dauntmg  com¬ 
plexity  of  the  prelects  (hat  are  rou- 
tinely  placed  upon  our  shoulders. 
Perhaps  the  tane  is  right  to  finally 
bhng  a  reaf-worid  rr  perspective  to 
the  fore.  The  result  cwr  only  be 
smarter  utAzabon  of  overtaxed  IT 
resources. 

Steven  C.  Hoato 

Advisory  (Information  engi¬ 
neer,  Management  Dynamics 
Inc,  East  Rutherford.  NJ, 
SteveHuete@ 
MgmtDynamcs.com 

MT0U6H  STUFF  is  good  Stuff. 

I  Nowdlw«needisanart' 
de  teKng  us  how  to  get  anyone 


outside  of  fT  (and  a  quarter  of  the 
managers  ih  IT)  to  believe  it. 
kHcheel  SugdM 
SocTomenta  Cal^. 


What  to  Keep 

T  ME 'AMMVETMS*  bo  ac¬ 
companying  the  “Save  That 
MaT  9tideI()uicMjnk  35594]  is 
somewhat  misleading.  The  storage 
requiremenis  for  lendrig  docu¬ 
ments  and  sacunbes  transactions 
aren't  measiaed  by  mnatium 
lengths  of  time  from  incepbon: 
they're  measured  from  the  compie- 
tton  of  Ihe  transaction. 

For  most  mor^iaoe-related  busi¬ 
ness,  tor  example,  this  is  seven 
years  after  the  loan  has  been  paid 
c4f  or  after  the  property  has  been 
transferred.  In  the  case  of  seam- 
ties,  one  met  prove  the  cost  basis 
when  compulmg  gain/loss,  so  the 


Law’s  Backers  in  Denial:  ABA  Hut  UCfTA 


For  INC  MCCUSL  to  deny  that 
the  ABA  s  refusal  to  endorse 
UCTTA  woril  hurt  the  law's  chances 
is  sheer  nonsense  [fojicklJnk 
36372].  It  the  ABA  had  endorsed 
UCfTA.  the  N(Xm  would  tove 
used  that  to  prove  Ihd  UCfTA  is  Id- 


able  and  pointed  to  the  ABA'S  en¬ 
dorsement  at  every  opporiuniy. 
Anttiony  Davie 
Chir;f  operuring  plfTcayVice 
presidmt  rechnolpgy.  Prrid- 
uis  UC  frtgtevvood.  Cota. 
odovis^Siperi^usxtvn 


IRS  suggests  that  you  meintain  the 
orignal  records  for  seven  years 
(business)  or  three  years  (person- 
af)  after  the  slock  dBposilion 
One  of  the  things  that  people 
can't  seem  to  agree  upon  B  the  ex¬ 
act  relenbon  requirements  kx  any 
giveo  transaction  What  wtt  need  is 
a  unifonn  method  of  cafculalmo  the 
retention  period.  An  nlerestino 
corundrurre  What  baefom/restore 
media/lechnaiogy  wi  exBt  37 
years  after  you  s^isfy  your  mor^ 
gage?  ftps  has  woik^  m  the 
past  wi  some  form  of  elecirorac 
media  have  ies  longeWy.  and  wi 
we  be  able  to  read  It? 

Staphae  f&ehrvd  levlM 
firanzef  Mortgage  CoRsul- 
(oRts.  WestlcAeViUage,  Calif. 


Pointing  Fingers 

I  OORT  OiSAflRS  very  much  With 
what  Robert  Mitchel  had  lo  say 
n  his  cokann ‘Just  Rn  It  on  Itoo- 
soiriQuicUjnk  359571.  builsli 
blame  MertBoft  for  much  of  the 
state  of  softwere  Quafay  today 
MoslofMcroeoft'soperalingsys- 
lemshavesufferedfromquiilryrs- 
suesihatareveryliickyorimpciesr- 
Ue  to  track  down.  So  the  question 
that  many  software  vendors  sub- 
oonsqousty  asked  theffgefves  was. 
IMhy  should  we  write  geol  code 


when 'good  enout^' aeems  to  work 
-  aspe^  whan  the  operattig 
system  «  eesiy  ttomedT  ktany 
supporters  of  open  some  are  fed 
up  wiR)  good  enough.  They  van 
compeMion  in  Ihe  operating  sys¬ 
tem  and  appbeabon  serMT  arenas 
again.  They  want  systems  that  can 
be  mspaclad.  not  ctoead  systems. 
Sady  enough,  some  sanpfy  vmt 
toe  demee  of  kAcrosofl  I  agree 
toal  Mcrosoft  has  done  a  great 
deal  for  Qompuong.  llE  6Uto  have 
been  very  good  (aside  from  them 
changvig  ei  toe  ime).  And  as 
MUtoel  said.  Os  products  moke 
good  btstoess  Sanaa 
HiUhew  Carpantar 
Network  and  sraeity  consul¬ 
tant,  EiOtipiist  b^onnation 
Systems,  Grand  Rapids.  Mich. 

COMPUTEinifOltLA  wetoo^ 
comments  from  ito  readers.  Letters 
wR  be  edtod  lor  brevty  and  ctarity. 
They  should  be  addres^  to  Jame 
Ecfde.  fetlars  editor.  Contoutarwortd. 
PO  Box  9f7l  500  OU  Cormecticul 
Path.  Frarningham.  Mass.  OfTOI. 
fox  (506) 879^843. 

E-mak  leRers9comoutenirar1d.carrL 
toctoda  an  adckess  and  phone  num¬ 
ber  tor  nimertale  vertficaiion. 


k  UaeMKortffwaenloear 
r  topics  are  on  otfWtoaae 
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YOU  WON'T  FIND  ME  shoveling  snow  this 
week.  I’ll  be  in  sunny  Arizona  at  Comput- 
erworld's  annual  leadership  summit,  along 
with  some  450  IT  leaders  soaking  up  two 
days  of  peer  networking  and  problem¬ 
solving  while  celebrating  the  accomplishments  of  100  of 
the  brightest  strategists  and  visionaries  in  IT. 

OK.  maybe  there’ll  be 
a  little  golf.  If  anyone 


The  Way  to  Win 


needs  a  spring  break 
right  now.  it’s  IT  profes¬ 
sionals.  Squeaky  tight  ' 
budgets,  stingy  staffing 
and  suspicious  business 
partners  enforcing  rigid 
ROI  requirements  — 
that's  a  lot  to  juggle 
while  managing  to  run  a 
successful,  strategic  and 
resourceful  organization. 

But  it  can  be  done,  and 
it  is  being  done,  more  often  than  IT 
gets  credit  for.  The  fact  that  you're 
getting  things  done  is  of  greater  im¬ 
portance  to  the  company  than  your 
business  peers  realize.  As  I’ve  said 
before,  no  other  department  is  as 
uniquely  positioned  to  understand 
(he  inner  workings  of  a  company. 
Your  business  peers  solve  problems 
within  their  units  —  IT  does  that 
and  more,  often  recognizing  or  solv¬ 
ing  problems  between  departments 
and  even,  now  and  then,  rescuing 
whole  companies  and  enabling  the 
creation  of  new  corporate  identities. 

lust  take  a  look  at  our  second  an¬ 
nual  Best  in  Class  award  winners  in 
this  week's  issue  (starting  on  page 
43).  Chosen  by  a  panel  of  their  peers 
from  among  the  projects  of  our  2003 
Premier  100  winners  {(^icktink 
34584),  these  10  winning  IT  teams 
epitomize  the  monumental  payback 
that  cutting-edge  IT  leadership,  cre¬ 
ative  vision  and  determined  follow- 
through  can  accomplish. 

But  it's  not  the  scope  of  the  proj¬ 
ects.  their  dramatic  lime  savings  or 
even  their  delivery  of  measurable 
ROI  that  ties  them  together.  The 
connection  lies  in  two  critical  attrib¬ 


utes.  one  a  seeming  no- 
brainer,  the  other  a  road 
not  often  taken. 

Most  important  is  a  fo¬ 
cus  on  the  user.  Whether 
ensuring  user  involvement 
or  targeting  user  needs,  or 
even  forging  closer  ties  to 
the  customer  base,  the  IT 
executives  running  these 
projects  never  forgot  who 
the  client  wa.s.  This  guar¬ 
anteed  user  buy-in.  which 
drove  acceptance,  engage¬ 
ment  and  the  success  of  many  of  our 
award-winning  entries. 

At  Office  Depot,  a  data  warehouse 


I  proved  a  winning  approach  at  Cela- 
I  nese  Chemicals.  It’s  not  enough  to 
I  build  systems  that  improve  business 
processes  and  deliver  information 
faster  to  workers.  If  you  can't  moti¬ 
vate  users  —  in  this  case,  by  feeding 
the  sales  force’s  addiction  to  e-mail 
—  then  you’ll  never  get  the  traction 
you  need  to  succeed. 

And  it  was  relentless  communica¬ 
tion  with  users  that  proved  to  be  a 
key  driver  of  project  success  at 
Coming  Life  Sciences  and  the  Ten¬ 
nessee  Valley  Authority. 

The  second  common  thread  is  risk. 
Proving  that  even  in  these  turbulent 
times  it  pays  to  think  and  push  out¬ 
side  the  box.  Aviall  has  IT  visionaries 
to  thank  for  its  new  lease  on  life  and 
a  new  life  to  live.  “Our  competitors 
thought  we  were  insane.  Some  in¬ 
vestors  asked  for  my  resignation." 
acknowledges  project  leader  Joseph 
Lacik  )r.  Instead,  the  controversial  re¬ 
building  of  Aviall's  infrastructure  was 
wildly  successful.  Lacik  didn’t  just 
buck  conventional  wisdom;  his  team 


project  achieved  its  goals  by  tapping  also  ensured  customer  buy-in  by  de- 
into  the  natural  competitiveness  of  signing  around  their  needs. 


store  personnel.  A  not-so-obvious 
payoff:  paving  the  way  for  even 
more  difficult  projects  in  customer 
relationship  management. 

Making  sure  employees  had  a  rea¬ 
son  to  use  a  new  mobile  application 


Paying  attention  to  the  same  ba¬ 
sics  —  team-building  and  finding 
ways  to  sell  projects  to  both  users 
and  skeptical  business  partners  — 
can  make  your  next  IT  project  a 
winner,  too.  I 
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I’l.MM  ION 

Simulate 
Your  Office’s 
Future 

Look  around.  No,  real¬ 
ly,  look  around.  Does 
your  workplace  operate 
in  ways  even  remotely  similar 
to  the  manner  it  did.  say.  four  years 
ago?  If  not  (because  of  job  cuts,  office 
closures,  geographic  changes,  expan¬ 
sion,  whatever),  then  ask  yourself  if  it 
would  have  been  useful  to  have  seen  a 
simulation  back  then  of  how  your  IT 
shop  works  today. 

I’m  guessing  that  you  don’t  work  for 
an  enlightened  firm  that  uses  simula¬ 
tion  software  to  present  various  busi¬ 
ness  and  work  scenarios  in  order  to 
encourage  cross-training  or  broaden 
the  knowledge  base  of  all  employees. 

Few  of  us  do.  -  — 

It's  not  that  the 
tools  aren’t  there. 

Schools  across  the 
country  use  simula¬ 
tion  software  devel¬ 
oped  by  New  York- 
based  nonprofit 
Classroom  Inc.  to 
expose  students  to  a 
variety  of  workplace 
skills.  Interested  in 
what  it’s  like  to  be 
the  manager  of  a  pa¬ 
per  mill?  Classroom  inc.  has  a  module 
to  deepen  your  understanding  of  envi¬ 
ronmental  topics,  land  use.  conserva¬ 
tion.  air  quality  and  recycling. 

The  modules  are  designed  for  teams 
consisting  of  three  students  and  teach¬ 
ers  who  have  been  trained  to  present 
the  material  as  pan  of  the  school  cur¬ 
riculum.  According  to  Pamela  Patton 
Cone,  head  of  product  technology  at 
Classroom  Inc.,  parent  guides  are  also 
available  for  each  simulation,  and 
training  services  arc  always  included 
with  the  software. 

Some  businesses  are  putting  similar 
tools  to  use. 

Managers  at  St.  Louis-based  utility 
Ameren  Corp.  use  technology  from 
Maumee.  Ohio-based  Root  Learning 
Inc.  to  role-play,  go'mg  through  the  de¬ 
cision-making  processes  they  may  en¬ 
counter  running  the  company.  (Ques¬ 
tions  such  as.  “Should  an  energy  pur¬ 
chase  take  place,  and  what  effect  will  a 
reduction  in  the  workforce  have  on 
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overall  produciion?"  are  available  as 
part  of  the  simulation  package. 

Some  CFOs  might  balk  at  the  idea, 
saying  there's  no  real  payoff  for  the 
costs  involved  in  creating  simulations. 
But  they'd  be  wrong.  The  current  tools 
can  reuse  a  company's  evervday  forms 
and  templates  so  that  it  doesn't  have 
to  spend  time  creating  new  forms  to 
build  simulations  around.  The  simu¬ 
lated  company  really  is  your  company. 

But  even  with  new  tools  to  make  it 
easier  to  build  simulation  modules, 
you  must  commit  to  keeping  your  cor¬ 
porate  curriculum  up  to  date,  just  as 
you  would  any  technical  tcNtbiH^k. 
Otherwise,  you'll  look  dated.  For  ex¬ 
ample,  the  current  version  of  Class¬ 
room  Inc.'s  software  for  students  sim¬ 
ulating  the  world  of  an  IT  project 
manager  shows  an  office  administra¬ 
tor  greeting  a  new  employee  with  talk 
ofsiock  options.  I 

i).\N  (;n  iMou 


Monopoly 

Addiction 

INFORMATION  technolog>' 
folks  must  love  monopo¬ 
lies.  Otheru'ise.  you 
wouldn’t  help  create  them. 

Sure,  you  complain  about  lock-in. 
vendor  arrogance,  high  costs  and  all 
the  other  woes  that  come  with  mtv 
nopoHes  and  the  cozy  oligopolies  that 
seem  to  arise  in  so  many  industries  — 
but  notably  in  IT. 

I  don't  think  you're  stupid  or  naive 
when  you  resign  yourself  to  yt*ur  fate. 
You  are  clearly  aware  of  the  upside 
and  downside  of  doing  business  with 
dominant  vendors.  But  you're  addict¬ 
ed.  Or,  in  pop  psychoU»gy  Hngo.  you’re 
co-dependent. 

The  easiest  explanation  is  the  near- 
universal  wish  fur  standards.  Compe¬ 
tition  —  such  as  railroad  tracks  with 
different  puges  —  can  be  messy,  as 
we've  seen  again  and  again.  Users  and 
suppliers  gravitate  toward  single 
standards. 

In  technok>g>'  development  circles, 
no  one  wants  to  test  a  variety  of  de¬ 
vices  and  platforms,  much  lcs.s  devel¬ 
op  for  all  of  them.  One  of  my  brothers, 
a  software  guy.  says  he'd  be  happiest 
—  in  theory  —  with  just  one  operating 
system. 

It  still  seems  obvious  to  me  that,  in  a 
world  where  information  is  the  cur¬ 


rency  of  the  future.  if,s  dan¬ 
gerous  to  allow  one  compa¬ 
ny  or  a  small  group  of  com¬ 
panies  to  control  the  stan¬ 
dards.  But  it  seems  less  ob¬ 
vious,  apparently,  to  the 
U.S.  government  and  most 
buyers  of  technology. 

Miinoculiures  in  the 
physical  wt»rld  are  widely 
understood  to  be  risky.  We 
are  moving  that  way.  unfor¬ 
tunately.  in  thin)^  like  farm¬ 
ing  —  where  a  single  virus 
could,  in  theor>’.  wipe  out 
much  of  the  world’s  corn  crop  in  a  sin¬ 
gle  .season,  loading  to  untold  human 
suffering.  Yet  our  food  supply  is  based 
«»n  monocultures  because  they’re 
more  efficient.  Today. 

And  that  leads  to  the  other  main 
reason  why  monopolies,  duopolies  and 
oligopolies  keep  springing  up:  They’re 
govid  business,  largely  because  they’re 
more  stable  —  temporarily,  at  any  rate 
—  for  buyers  as  well  as  sellers. 

The  desire  for  stability  .tnd  account¬ 


ability  can  K*  summed  up 
in  the  once-popular  saying 
"Nobody  ever  got  fired  for 
buying  IBM."  Substitute 
Cisco.  Microsoft  or  other 
big  names,  .ind  the  idea  is 
much  the  same. 

When  IBM  was  absolute 
master  of  the  IT  universe, 
technology  wasn’t  chang' 
ing  as  quickly  as  it  does  to¬ 
day.  But  even  then,  buyers 
were  Umking  for  a  level  of 
security,  an  assurance  that 
what  they  were  buy  ing 
w»>uld  still  be  working  tomorrow  and 
that  someone  would  stand  behind  it. 

The  vekvify  of  technological 
progress  today  gives  even  greater  ad¬ 
vantage.  certainly  in  the  short  term, 
to  the  dominant  companies,  and  for 
some  of  the  same  reasons.  But  dws  it 
als«»  lead  to  long-term  power?  I  believe 
it  does,  brgely  because  of  people’s  — 
and  institutions'  —  k>gic.il  aversion  to 
disruption. 

The  path  of  least  r«istance  is  to  buy 


into  whatever  is  dominant  today. 

'I’hat's  a  mistake 

I  have  a  policy  f«>r  m\  pi'rson.il  tech¬ 
nology  purchasing.  I  balance  my  de¬ 
pendence.  supporting  nondominant 
companies  whenever  possible  I  sup¬ 
port  worthwhile  competitors,  and 
sometimes  I  give  up  some  small  con¬ 
veniences  in  the  pn»cess  —  pmvided. 
of  course,  that  the  choices  I  make 
don't  pul  me  ai  a  serious  disadvantage 
in  my  work. 

rhal's  «»nc  approach-  I'l  can  dt* 
some  of  this,  but  it  should  employ  an¬ 
other  lactic.  t»»«>:  Push  much  harder  for 
open,  non-viwned  standards. 

(.j»st  is  only  one  Issue.  The  other  is 
safety.  I  m  betting  that  open  stand.irds 
will  Sf>on  he  seen  as  the  best  approach 
for  security,  an  increasingly  imp<mant 
notion  in  a  dangerous  world.  Disre¬ 
gard  this  at  everyone's  risk.  I 
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REtDERS’imiRS 


WITH  OVER  20  YEARS' exoerr 
ence  m  IT.  I  can  vouch  lot  the 
trulhlulness  ol  Ranh  Hayes'  re- 
Ireshingly  candid  column  'Tough 
SlulT  [Ouichbnk  36160)  I  don't 
believe  ihat  many  individuals  out¬ 
side  of  IT  reahK  the  daunting  com- 
Dlexity  ol  the  protects  that  are  rou¬ 
tinely  placed  upon  our  shoulders 
Perhaps  the  time  is  right  to  hnally 
bring  a  real-world  IT  perspective  to 
the  fore.  The  result  can  only  be 
smarts  utibzalion  ol  overtaxed  IT 
resources 
Steven  C.  Huete 
Advijaory  infornuilion  engi¬ 
neer.  Afunogemenr  f)y«arnic.s 
/nc..  Btist  kutherfitni.  N./„ 
.Srevt'Huere  a 
MgmlDynomk's.crim 

At  "TOUGH  STUFF*  iSgOOd  Sluh 
I  Now  all  we  need  IS  an  arti¬ 
cle  telling  us  how  to  get  anyone 


For  THE  NCCUSl  to  deny  that 
the  ABA's  relusal  to  endorse 
UCITA  wott'l  hifft  the  law  s  chances 
IS  sheer  nonsenselOuickbnk 
36372]  IttheABAhadendoised 
UCITA.  the  NCCUSL  would  have 
used  that  to  prove  that  UCITA  IS  VI¬ 


outside  of  rr  (and  a  quarter  ol  the 
managers  in  IT)  to  believe  d 
I  MichadSuoden 
I  Socnimi’niu.  Calif- 


What  to  Keep 

The -ARCHIVE  THIS* box  ac 
companying  the  'Save  That 
Mail'  arhclelOuickLink  35594]  is 
somewhat  misleading.  The  storage 
reouvenwus  for  lending  docu¬ 
ments  and  secunties  transactions 
aren't  measwed  by  tmrwnum 
lengths  ot  time  Irom  tnceplior. 
they're  measured  tiom  the  comple¬ 
tion  ot  the  transaction 
For  mosi  mortg^e-retaled  busi¬ 
ness.  lor  example.  Hms  s  seven 
years  alter  the  loan  has  been  paid 
oH  or  alter  the  property  has  been 
iranstened  kiihecaseofsecun- 
lies.  one  must  prove  the  cost  basts 
when  compulirvg  gain/loss.  so  the 


atNe  and  pomted  to  the  ABA's  en¬ 
dorsement  at  every  opportunity 
Anthony  Davis 
Chief  operating  offieer/vice 
pa'sidenf.  technology.  /Vnd- 
ius  LLC.  Englewood.  Colo, 
adovis-aiperidiusxxwn 


IRS  suggests  that  you  mantam  the 
original  recortb  lor  seven  years 
(business)  or  three  years  (person¬ 
al)  alter  the  stock  disposition 
Orro  of  Ihe  things  that  people 
can't  seem  to  agree  upon  IS  the  ex - 
act  retention  requiremems  lor  any 
grven  transaction  What  we  need  £ 
a  uniform  method  of  calculating  the 
retedion  period  An  inteiestirtg 
conundrum  What  backup^restore 
media/technology  wN  enst  37 
years  after  you  saiisfy  your  mort  ■ 
gage?  P^r  has  worked  m  the 
past  wiUsometonnalefechonic 
media  have  (tvs  (cngevity.  and  w>B 
webeaUetoreadif^ 

Stephen  Richard  Levine 
Fnmzel  Mortgage  Cotmd- 
rants.  Wesr/ak»*  VTHage.  Calif. 


Pointing  Fingers 

IOONT  OISAOREE  very  much  with 
what  Rd)eri  Udcheil  had  to  say 
in  his  column  'Just  Pm  tl  on  Micro- 
sofl‘{OuickLinh  35957],  but  I  sliN 
blame  Miaosoft  for  rnuch  of  the 
stale  ol  sohwm  quakty  today 
Most  of  Microson's  operating  sys¬ 
tems  have  sulfeied  ftom  quirky  s- 
suesthataieverylnckvorimDossi- 
ble  10  track  down  So  the  question 
that  many  software  vendors  sub¬ 
consciously  asked  themselves  was 
'Why  ^louid  we  write  great  code 


when  ‘good  enough'  seems  to  work 
-  espeoaty  when  the  operakng 
system  IS  easily  blamed'’' Many 
'  supoorters  of  open  source  are  ted 
j  up  with  good  enough  Theywant 
compelitw)  ffi  the  operating  sys¬ 
tem  and  aooAcaiion  server  arenas 
again  They  want  systems  that  can 
be  inspected  noftioeedsyaems 
Sadly  enough,  some  svnply  wont 
the  demise  of  Mioosofi  1  agree 
that  Microsoft  has  done  a  (peat 
deal  tor  compuhng.  RsGUbhave 
been  very  good  (askle  from  them 
changing aN  the  lane)  Andas 
Mitchell  said.  Rs  praducis  make 
good  busmess  sense 
Matthew  Carpenter 
I  Network  and  JccuriCy  consul- 
!  runr,  Enrc»7>mc  tnfurmaMn 
Syatems,  CranJ  Raptdt.  Mich. 

^  COMPUTERWORLO  welcomes 
I  cornments  from  as  readers  Letters 
,  wiB  be  edited  tor  brevrty  and  danty 
They  should  be  addressed  to  Jamw 
EcUe.  letters  ecMor.  Computerworid. 
PO  Boi  9171. 500  OU  Connecticut 
Path.  Framingham.  Mass  017D1 
Fax  (506)879-4843 
E-mail  lenerskcomoulerwodd  com 
fndiide  an  address  and  phone  num¬ 
ber  for  immedete  verification 

O  More  idm  on  these  and  otrer 
toptfs  at  on  our  Weo  see 
cowpulareiorld.com/ltnefs 
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,  ROBUST  OBJECT  DATABASE 

^  HIGH  PERFORMANCE  SQL 

MULTIDIMENSIONAL  ACCESS 

For  your  next  generation  of  applications> 
move  to  the  next  generation  of  database  technology: 
Cach^,  the  post-relational  database. 

What  makes  Cach^  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-^t. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cach^-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cach^ 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cach^  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the  largest 
hospitals.  Cach^  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  -  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  million  users  in 
88  countries.  Cach^  is 
available  for  Windows, 

Open  VMS,  Linux  and 
major  UNIX  platforms.  Mika  Applicationt  Filter 


lnterSy$tem$  ^ 

etCACHt 


Download  o  fuUy^imctional  version  of  Cochi  or  request  it  on  CD  for  free  at  www.InterSvstefns.com/Oost-relotionol 
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Security  Manager’s  Journal 

A  corporate  merger  forces  Vince  'Hiesday 
to  rearrange  the  IT  security  furniture  as  he 
struggles  to  integrate  two  different  security 
environments  —  and  rectify  divergent 
security  approaches.  Pi0>  36 


Opinion 

Tommy  Peterson  says  a  few  small  security 
steps  by  corporations  can  do  more  than 
grandiose  government  plans  when  it  comes 
to  reducing  threats  to  the  nation's  Internet 
infrastructure.  PSige  40 


QUOTE  OF  THE  WEEK 

M  Our  [contract  workforce] 
spending  was  out  of  controi, 
and  we  dkkit  consistentiy  use 
processes  that  would  aNow  us  to 
know  what  wo  were  using  or 
where.**  -  Oaiy  Andanon,  managw. 

Cartaon  Companlaa  bie. 


Despite  spending  $25  million 
a  year  on  temporary  work¬ 
ers,  Carlson  Companies  Inc. 
was  coming  tq>  short 
The  hotel,  travel  and  mart^ting 
con^)any  was  woricing  with  a  large 
numher  of  staffing  firms  in  h<H>es 
of  maximizing  choice  and  competi¬ 
tion  among  suppliers.  That  didn’t 
woricout 

"Our  spending  was  out  of  control, 
and  we  didn't  consistently  use  proces¬ 
ses  that  would  allow  us  to  know  ^lat 
we  were  using  or  where,”  says  Gary 
Anderson,  manager  of  enterprise  sup¬ 
plier  management  at  the  Minneapolis- 
based  conqtany. 

*nie  $8  billion  firm  had  160  staffing 
con^^anies  on  its  vendor  list  and  h 
managed  them  and  associated  tempo¬ 
rary  workers  throu^  a  hodgepodge  of 
spreadsheets,  e-mail  and  p^r.  ”lt  was 
terribly  labor-intensive  and  inconsis¬ 
tent"  Anderson  says.  "The  whole  proc¬ 
ess  left  a  lot  of  gaps." 

Periiaps  the  biggest  gap  was  in  per¬ 
formance  monitoring  and  management 
reporting.  Carlson  had  no  systematic 
or  timely  way  to  track  the  performance 
Continued  on  page  28 
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Temporary-workforce  management  software  and 
service  offerings  can  cut  the  hassles  and  costs  of 
managing  contract  staff.  By  Gary  H.  Anthes 
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by  making  it  possible  to  gain  lighter 
control  over  “maverick”  procure¬ 
ments.  negotiate  bigger  supplier  dis¬ 
counts  and  channel  requisitions  to  pre¬ 
ferred  vendors. 

TI  uses  Clarity  on  a  remote  services 
basis,  but  a  one-time  investment  is 
necessary  to  set  that  up.  Harris  says. 
His  IT  staff  had  to  develop  software  to 
construct  the  data  feeds  that  go  to  Cas- 
cadeWorks.  to  build  in  internal  secu¬ 
rity  features  and  to  build  interfaces  to 
internal  systems  such  as  Tl's  accounts 
payable  system.  But  all  that  required 
only  a  three-month  effort,  he  adds. 

While  Harris  advises  against  having 
in-house  systems  do  double  dut>-  for 
both  contract  and  permanent  employ¬ 
ees.  Health  First  Inc.  in  Melbourne. 

Fla.,  does  exactly  that.  It  uses  Work¬ 
force  Central  time  and  attendance  soft¬ 
ware  and  the  Visionware  productivity 
tracking  system,  both  from  Kronos  Inc. 


in  Chelmsford.  Mass.,  to  track  perma¬ 
nent  and  contract  nurses.  Its  procure¬ 
ment  functions  are  mostly  manual. 

For  some  contract  workers,  such  as 
clerical  staff.  Health  First  gets  time  and 
accounting  data  directly  from  the 
staffing  agency.  But  the  contract  nurs- 
I  es  are  assigned  employee  badges  and 
I  14%  in  and  out  on  Workforce  Central. 

I  All  resulting  data  —  time,  labor  ex¬ 
penses  and  productivity  —  flows 
through  the  same  s>’stems  as  the  data 
for  the  permanently  employed  nurses. 

Finance  staff  at  Health  First  use  the 
Visionware  product  to  monitor  the 
productivity  of  both  kinds  of  workers, 
says  Cynthia  Summers,  senior  HR  in¬ 
formation  systems  administiator.  Be¬ 
ing  able  to  look  at  and  compare  met¬ 
rics  such  as  patient-to-nurse  ratios  for 
both  types  of  worker,  and  doing  so  on 
a  timely  basis,  is  an  important  capabil¬ 
ity.  she  says. 

Mixing  OM  and  New 

Two  years  ago.  Verizon  Wireless  in 
Bedminster.  N.J.,  selected  the  InSiie 
“flexible  workforce  management”  sys¬ 
tem  from  Fieldglass  Inc.  in  Chicago. 
Verizon  Wireless,  which  spends  more 
than  SlOO  million  annually  on  contin¬ 
gent  labor,  is  a  PeopleSoft  Inc.  user,  but 
PeopleSoft  had  no  comprehensive 
product  for  temporary-worker  pro¬ 
curement  at  the  time,  says  Cher>'l 
Rowden.  director  of  IT  finance. 

InSUe  replaces  inefndent  and  error- 
jsronc  procedures  driven  by  e-mail 
phone  calls  and  paper.  It  creates  worker 
requisitions  for  hiring  managers,  circu¬ 
lates  them  for  approval  and  then  sends 
them  to  staffing  companies.  It  routes 
the  resulting  bids  ~  there  must  be  at 
least  three  —  and  r^sum^  back  to  the 
appropriate  departments  at  Verizon 
Wueless.  When  the  selected  workers 
arrive.  the>'  are  issued  passwords  so 
they  can  enter  their  lime  into  InSite. 

Verizon  managers  approve  the  re¬ 
sulting  electronic  time  sheets  and  In- 
Site  sends  them  back  to  suppliers,  who 
use  them  for  billing.  The  electronic 
billing  b  routed  for  approval,  before 
being  uploaded  to  the  PeopleSoft  ac¬ 
counts  payable  system.  Just  the  auto¬ 
mation  of  the  invoice  payment  process 
—  for  some  500  invoices  a  month  — 
b  a  tremendous  benefit.  Rowden  says. 

The  system  saved  Verizon  Wireless 
some  S6  mlUion  last  year  by  eliminat¬ 
ing  overbilling.  reducing  overtime  and 
unauthorized  spending,  and  making 
bidding  more  competitive,  she  says. 
Those  savings  don't  include  efficiency 
gains  that  resulted  from  “replacing  a 
whole  lot  of  people  and  a  whole  lot  of 
paper.”  Rowden  adds.  I 
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Carlson  now  monitors  and  manages 
its  vendors  with  a  rigor  that  would 
lu\'e  been  impossible  before.  Anderson 
says,  llie  company  has  reduced  its  sup¬ 
pliers  from  160  to  nine  and  uses  click- 
XG  to  review  the  suppliers  and  their 
account  managers  in  34  categories 
every  six  months.  It  also  reviews  all 
temporary-  workers  every  90  days. 

Anderson  says  the  system  b  saving 
Carlson  $1.5  million  annually  through 
rate  reductions,  volume  discounts  and 
incentives,  and  another  S1.S  million  in 
areas  harder  to  quantify,  such  as  train¬ 
ing  and  testing  tools  that  it  used  to  pay 
for  but  now  gets  for  free  from  staffing 
vendors.  The  savings  amount  to  just 
over  10%  of  the  company’s  budget  for 
temporary  workers. 

Some  of  the  basic  features  of  tempo¬ 
rary-workforce  management  systems, 

-  such  as  purchasing,  time 

_  . .JC-flfFS  and  expense  reporting,  and 

Vendors  and  analysis  say  accounts  payable,  already 

these  tools  can  trim  total  jofa  througn  the  ctoces.  exbt  in  other  enterprise 

outlays  for  contingent  O  QwfeUMi  35981  applications, 

workers  by  10%  to  15%.  Sav-  www.eofiipiilanwxld.coni  Luther  Harris,  profes- 
ings  come  from  better  rates  ]  sional  and  HR  services  pro- 

and  better  sen>'ices  that  the  systems  curement  manager  at  Texas  Instni- 
help  users  negotiate,  as  well  as  volume  ments  Inc.,  says  an  HR  group  at  T! 
discounts  through  consolidated  spend*  considered  cobbling  together  exbting 
ing,  tighter  conirob  over  procurement  in-house  systems  in  order  to  manage 
practices  and  reductions  in  adminbira-  more  than  SIOO  million  a  year  in  con- 
tive  labor.  In  addition,  the  systems  tract  workers.  But  the  company  decid- 

speed  up  procurement  and  improve  ed  instead  to  go  with  the  Clarity  ser- 

the  qualit>'  of  the  temporary  workers  vices  procurement  software  fn>m  Cas- 
coming  in.  some  users  report.  cadeWorks  Inc.  in  San  Francisco. 

Carlson  selected  the  clickXG  ser-  “The  HR  approach  would  have  been 
vice  from  Pcopleclick  loc.  in  Raleigh.  costly  and  wouldn't  have  had  nearly 
N.C.  Peopleclick’s  “vendor  manage-  the  functionality  we  have  with  [Clar- 
ment”  product  performs  functions  in  ity],“  he  says.  “It  would  have  handled 
the  areas  of  job  requisition  process-  the  HR  side  of  contract  labor,  but  it 
ing.  candidate  tracking  and  manage-  wouldn't  have  improved  the  procure¬ 
ment,  lime  and  expense  tracking,  ven-  ment  process." 
dor  invoice  processing,  and  reporting  Harris  says  Clarity  is  saving  Tl  5%  to 
and  analysis.  8%  annually  on  its  contract  labor  costs 
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Continued  fyom  page  27 

of  suppliers  and  to  use  those  perfor¬ 
mance  measures  to  negotiate  better 
services  and  lower  rates. 

Servicing  the  Profalein 

Anderson  found  a  better  way.  using  a 
relatively  new  breed  of  software  for 
contingent-workforce  management. 
Packages  vary  in  scope,  but  most 
combine  procurement,  human  re¬ 
sources  and  analytic  functions.  In 
some  cases,  vendors  sell  the  software 
itself  but  more  often  the>’  offer  it  as  a 
service  that  includes  features  such  as 

validating  and  paying  ven-  - 

dor  invoices.  TOflini 
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of  suppliers  and  to  use  those  perfor* 
mance  measures  to  negotiate  better 
services  and  lower  rates. 

Servicing  the  nnUem 

Anderson  found  a  better  way.  using  a 
relatively  new  breed  of  software  for 
contingent-workforce  management. 
Packages  vary  in  scope,  but  most 
combine  procurement,  human  re¬ 
sources  and  analytic  functions.  In 
some  cases,  vendors  sell  the  software 
itself,  but  more  often  they  offer  it  as  a 
service  that  includes  features  such  as 
validadng  and  paying  ven¬ 
dor  invoices. 

Vendors  and  analysts  say 
these  tools  can  trim  total 
outlays  for  contingent 
workers  by  10%  to  15%.  Sav¬ 
ings  come  from  better  rates 


and  bMter  services  that  the  systems 
help  users  oegodaie,  as  well  as  volume 
discounts  through  consolidated  spend¬ 
ing.  tighter  controls  over  procurement 
practices  and  reductions  in  administra¬ 
tive  labor.  In  addition,  the  systems 
speed  up  procurement  and  improve 
t^  quality  of  the  temporary  workers 
coming  in.  some  users  report. 

Carlson  selected  the  clickXG  ser¬ 
vice  from  Peopleclick  Inc.  in  Raleigh, 
RC  Peopleclick's  “Vendor  manage¬ 
ment^  product  performs  functions  in 
the  areas  of  job  requisition  process¬ 
ing,  candidate  tracking  manage¬ 
ment.  time  and  expense  tracking  ven¬ 
dor  invoice  processing,  aiui  reporting 
and  analysis. 


Cailson  now  monitors  and  manages 
its  vendors  with  a  rigor  that  would 
have  been  impossible  before.  Anderson 
says.  The  ccunpany  has  reduced  its  sup¬ 
pliers  ffom  160  to  nine  and  uses  click¬ 
XG  to  review  the  suppliers  and  their 
account  managers  in  34  categories 
every  six  months.  It  also  reviews  all 
temporary  workers  every  90  days. 

Anderson  says  the  system  is  saving 
Carlson  S1.S  million  annually  through 
rate  reductions,  voitune  discounts  and 
incentives,  and  another  S13  million  in 
areas  harder  to  quantify,  such  as  train¬ 
ing  and  testing  tools  that  it  used  to  pay 
for  but  now  gets  for  free  from  staffing 
vendors.  The  savings  amount  to  just 
over  10%  of  the  company's  budget  for 
temporary  workers. 

Some  of  the  basic  features  of  tempo¬ 
rary-workforce  management  systems, 

- -  such  as  purchasing,  time 

TOOmUE-ffFS  and  expense  reporting,  and 
accounts  payable,  already 
exist  in  other  enterprise 
appUcatioas. 

Luther  Harris,  profes¬ 
sional  and  HR  services  pro- 
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curement  manager  at  Texas  Instru¬ 
ments  Inc.,  says  an  HR  group  at  TI 
considered  cobbling  together  existing 
in-house  systems  in  order  to  manage 
more  than  SlOO  million  a  year  in  con¬ 
tract  workers.  But  the  company  decid¬ 
ed  instead  to  go  with  the  Clarity  ser¬ 
vices  procurement  software  from  Cas¬ 
cade  Works  Inc.  in  San  Francisco. 

The  HR  approach  would  have  been 
costly  and  wouldn’t  have  bad  nearly 
the  functionality  we  have  with  [Clar¬ 
ity].*’  he  says.  ‘It  would  have  handled 
the  HR  side  of  contract  labor,  but  it 
wouldn’t  have  improved  the  procure¬ 
ment  process." 

Harris  says  Darity  is  saving  TI  5%  to 
8%  annually  on  its  contract  labor  costs 


by  making  it  possible  to  gain  t^ter 
control  over  "maverick”  procure¬ 
ments,  negotiate  bigger  supplier  dis¬ 
counts  and  channel  requisitions  to  pre¬ 
ferred  vendors. 

TI  uses  Clarity  on  a  remote  services 
basis,  but  a  one-time  investment  is 
necessary  to  set  that  up,  Harris  says. 
His  IT  staff  had  to  develop  software  to 
construct  the  data  feeds  that  go  to  Cas- 
cadeWorks.  to  build  in  internal  secu¬ 
rity  features  and  to  build  interfaces  to 
internal  systems  such  as  TTs  accounts 
payable  system.  But  all  that  required 
only  a  three-month  effort,  be  adds. 

While  Harris  advises  gainst  having 
in-house  systems  do  double  duty  for 
both  contract  and  permanent  employ¬ 
ees,  Health  First  Inc  in  Melbourne, 

Fla.,  does  exactly  that.  It  uses  Work¬ 
force  Central  time  and  attendance  soft¬ 
ware  and  the  Visionware  productivity 
trackli^  system,  both  from  Kronos  Inc. 


in  Chelmsford.  Mass.,  to  Crack  perma¬ 
nent  and  contract  nurses.  Its  procure¬ 
ment  functions  are  mostly  manuaL 

For  some  contract  workers,  such  as 
clerical  staffs  Health  First  gets  time  and 
accounting  data  directly  from  the 
staffing  agency.  But  the  contract  nurs¬ 
es  are  assigned  employee  badges  and 
log  in  and  out  on  Woricforce  CeotraL 
All  resulting  data  —  time,  labor  ex¬ 
penses  and  productivity  —  flows 
through  the  same  systems  as  the  data 
for  the  permanently  employed  nurses. 

Finance  staff  at  Health  First  use  the 
Vistonware  product  to  mcmitor  the 
productivity  of  both  kinds  of  workers, 
says  Cynthia  Summers,  senior  HR  in- 
fonnatioo  systems  administrator.  Be¬ 
ing  able  to  look  at  and  compare  met¬ 
rics  such  as  patient-to-mirse  ratios  for 
both  types  of  worker,  and  doing  so  on 
a  timely  basis,  is  an  important  capabil¬ 
ity.  she  says. 

Mixing  OM  and  New 

Two  years  ago,  Verizon  Wireless  in 
Bedminster,  N.).,  selected  the  InSite 
"flexible  workforce  management"  sys¬ 
tem  from  Fieldglass  Inc.  in  Chicaga 
Verizon  VTireless,  which  spends  more 
than  SlOO  million  annually  on  contin¬ 
gent  labor,  is  a  PeopleSoft  Inc.  user,  but 
PeopleSoft  had  no  comprehensive 
product  for  temporary-worker  pro¬ 
curement  at  the  time,  says  Cbe^l 
Rowden.  director  of  IT  finance. 

InSite  replaces  inefficient  and  error- 
prone  procedures  driven  by  e-mail, 
phone  calls  and  papec  It  creates  worker 
requisitions  for  hiring  managers,  circu¬ 
late  them  for  approval  and  then  sends 
them  to  staffing  companies.  It  routes 
the  resulting  bids  —  there  must  be  at 
least  three  —  and  r^sum^  back  to  the 
appropriate  departments  at  Verizon 
Wireless.  When  the  selected  woricers 
arrive,  they  are  issued  passwords  so 
they  can  enter  their  time  <"*0  InSite. 

Verizon  managers  approve  the  re¬ 
sulting  electnmic  time  sheets  and  In¬ 
Site  sends  them  back  to  suppliers,  who 
use  them  for  billing.  ’The  electronic 
billing  is  routed  for  ai^roval,  before 
being  uploaded  to  the  PeopleSoft  ac¬ 
counts  payable  system.  Just  the  auto¬ 
mation  of  the  invoice  payment  process 
—  for  some  500  invoices  a  month  — 
is  a  tremendous  benefit,  Rowden  says. 

*1116  system  saved  Verizon  Wireless 
some  $6  million  last  year  by  eliminat¬ 
ing  overbilling,  reducing  overtime  and 
unauthorized  spending,  and  making 
bidding  more  competitive,  she  says. 
Those  savings  don’t  include  efficiency 
gains  that  resulted  frcun  ‘replacing  a 
whole  lot  of  people  and  a  whole  lot  of 
p^)et;”  Rowden  adds.  I 
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winning  with  e-eommnrce:  There's  something  new  at  London's  antiquarian  book  deaier  Peter 
Harrington.  They're  seiiing  25%  of  their  voiume  on  the  Web.  Their  piatform?  The  easy-to-manage 
IBM  ©server  xSeriesT  Select  xSeries  models  feature  the  Intel*  Xeon~  processor  to  give  you  superior 
performance  and  cost-effectiveness.  For  a  complimentary  iDG  report  on  how  growing  companfes  are  using 
fT  to  advance  their  business,  go  to  fcwi-com/eserver/peterharrington  a  /t^llrsW~ 
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Linux'  ready  with  seH-managing  features  for  every  e-busIness. 


Intel'-based  /  xSeries"' 

It's  an  affordable  and  pov^rful 
comd^^bn  of  mainframe- 
inspirafteliability  and  smart 
systuJdbanagement  tools. 


UNDT/pSerles'^ 

Highly  available,  highly  affordable 
and  highly  coveted.  Thett^s  Is 
the  platform  of  choice  fcAtSerful 
UNIX  and  UnuSSons. 


Midrange  /  iSeries " 

Brings  ibsy-to-deploy.  plug  and 
play  e-ttsiness  to  your  business. 
SophisSated  technology  that's 
easy  tdiianage  and  Linux  ready. 


Mainframe  /  zSeries  ^ 

Maximum  reli^lity,  max^m  power. 

maximum  flexibility.  DeflMd  for 
up  to  99.999%  uptime'  to  h^Se  the 
demands  of  today's  e-btSasses. 


They  optimized  their  suppiy  chain  with  iBM  (©server  iSeries.  When  it  comes  to  supplying  hotel  chains  and 
restaurants  with  fine  china,  no  one  wants  to  wait  for  sen/ice.  So  Churchill  China  consolidated  their  e-commerce 
operation  onto  a  single  iSeries.  Today,  they  can  dispatch  orders  within  24  hours  with  near-100%  accuracy.  For  a 
guide  on  server  consolidation,  go  to  ■Mn.eom/eserver/churchill  ...  rr,  . 
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Product  IHe-cyde  management  to^ 
can  speed  development  times  and 
cut  costs,  but  deployments  are  by 
no  means  easy.  By  Jaikumar  Vijayan 


ITT  FLUID  TECHNOLOGY  has  been 
woriung  on  a  project  to  support  the 
global  sharing  of  design,  engineer¬ 
ing.  manufacturing  and  other  prod¬ 
uct-related  information  among  its 
various  operations.  The  initiative,  part 
of  a  wider  effort  to  implement  a  "de¬ 
sign  anywhere,  build  anywhere"  capa¬ 
bility.  should  also  let  the  manufocturer 
sell,  service  and  integrate  its  parts 
everywhere,  says  ^obal  products  and 
data  manager  Ron  Watson. 

The  White  Plains.  N.Y.-based  sub¬ 
sidiary  of  $4.7  billion  engineering  con¬ 
glomerate  nr  Industries  Inc.  is  one  of 
many  manufacturers  turning  to  prod¬ 
uct  life-cycle  management  (PLM)  tools 
to  improve  manufacturing  efficiency, 
product  quality  and  time  to  market. 

The  systems  let  different  groups  ex¬ 
change  and  collaborate  on  product- 
related  images  and  data  in  real  time, 
both  internally  and  with  outside  sup¬ 
pliers  and  customers.  To  do  this,  the 
systems  must  gather  and  integrate  data 
from  sources  rangii^  from  design  and 
enpneering  systems  to  manufacturing 
and  field  (^rations. 

A  wide  variety  of  collaborative  prod¬ 


ucts  fall  under  the  PLM  umbrella,  in¬ 
cluding  product  data  management 
technologies  that  integrate  data  fTOm 
bill  of  materiaL  computer-aided  design 
(CAD),  change  management  and  en¬ 
terprise  resource  plannii^  (ERP)  sys¬ 
tems;  configtiration  management  sys¬ 
tems  that  validate  product  configura¬ 
tions  and  link  product  specifications 
with  engineering  modules;  and  main¬ 
tenance,  repair  and  overhaul  modules 
that  link  field  services  systems  with 
change  management  and  engineering. 

While  the  benefits  of  Uniring  such 
systems  can  be  enormous,  organiza¬ 
tions  that  have  launched  PLM  projects 
caution  others  to  prepare  for  process 


H  PLM  software  can  be 
buggy,  it  could  require 
extensive  progiamirang  to 
deliver,  and  it  may  not 
enable  compliance  with 
government  requirements. 
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and  procedural  changes,  cultural  is¬ 
sues  and  implementation  challenges. 

Because  PLM  systems  are  cross¬ 
functional  in  scope,  installing  one  is 
often  more  difficult  than  companies 
anticipate,  says  Erica  RuguUies.  an  ana¬ 
lyst  at  Giga  l^ormation  Group  Inc.  in 
Cambridge,  Mass.  The  integration 
work  involved  in  tying  together  dis¬ 
parate  systems  is  substantial,  she  says. 

"Companies  can  go  about  this  in  a 
few  ways."  RuguUies  says.  “They  can 
look  upon  this  as  a  huge  project  that 
requires  extensive  integration,  soft¬ 
ware  dollars  and  a  number  of  players 
in  different  roles,  or  they  can  go  after  a 
specific  business  problem,  such  as 
Rnding  a  new  way  to  effectively  share 
d^tal  data."  But  in  either  case,  users 
should  fuUy  understand  the  issues  in¬ 
volved  in  planning  and  deploying  a 
PLM  system,  users  and  aiudysts  say. 

Upfront  Issues 

First  and  foremost,  PLM  products  are 
stiU  maturing,  so  the  risk  is  that  the 
software  won't  always  live  up  to  expec¬ 
tations.  "PLM  softwai'e  can  he  bi^gy.  it 
could  require  extensive  programming 
to  deliver  the  needed  fuoctionaUty, 
and  it  may  not  enable  compliance  with 
^yvernment  requirements,"  RuguUies 
says.  She  recommends  conducting  a 
proof  of  concept  before  purchasing  a 
PLM  tool  and  budgeting  time  for  trou¬ 
bleshooting  and  implementing  Axes. 

In  additiem,  a  fiiU-fledged  PLM  proj¬ 
ect  can  be  neariy  as  complex  as  rolling 
out  an  ERP  system,  so  knowing  up- 
ffont  what  value  you  want  to  get  out  of 
it  is  vitaL  says  Marc  Hendrickson,  a 
Detroit  Lak^  Minit-based  design 
documentation  manager  at  Team  In¬ 
dustries  Inc.,  a  manufacturer  of  power- 
train  and  chassis  components.  Only 
then  is  it  possible  to  know  what  infor¬ 
mation  in  a  product’s  life  cycle  needs 
to  be  captured,  how  to  manage  it  and 
what  kind  of  workflow  and  decision¬ 
making  processes  need  to  be  imple¬ 
mented.  Team  Industries  uses  Para¬ 
metric  Technology  Corp.’s  (PTC) 
Pro/Ei^ineer  CAD  and  Pro/Intralink 
data  management  software  to  tie  data 
from  its  parts-deveJopment  process  to 
shop-floor  data.  In  doing  so.  Hendrick¬ 
son  says  he  hopes  to  improve  quaUty, 
parts  reuse  and  time  to  market 
Senii^  the  right  scope  is  important, 
says  Jim  Heppleman,  chief  tec^ology 
officer  at  PTC.  a  Waltham.  Mass.- 
based  vendor  of  PLM  software.  For 
instance,  if  the  business  goal  is  to  re¬ 
duce  time  to  market  the  project  em¬ 
phasis  should  be  on  enabling  capabili¬ 
ties  such  as  rapid  digital  prototyping 

Conrinued  on  page  34 
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The  business  intelligence 
test  that  our  competitors 
don’t  want  you  to  take. 


1.  Want  a  Free  Buyers  Guide? 


2.  Want  a  Free  Test  Drive? 


3.  Want  a  Guarantee? 


For  more  information  on  the  NEW  Brio  PoiformancG 
Suite  8  go  to  www.brio.com  or  call  1-877-289-2746. 
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Continued  from  page  32 
and  product  bill-of-materiai  manage¬ 
ment.  Heppletnan  says.  Similarly,  if  the 
goal  is  to  increase  product  standard¬ 
ization.  the  focus  might  be  on  improv¬ 
ing  configuration  management  or  on 
design  reuse,  he  adds. 

It  also  helps  to  have  standard  tools 
and  interfaces  when  creating  and  shar¬ 
ing  a  single  view  of  enterprise  product 
data,  says  ITT’s  Watson.  ITT  is  Unking 
and  integrating  product  design  and  en¬ 
gineering  data  across  several  manufac¬ 
turing  operations.  To  facilitate  the 
process.  ITT  standardized  on  FTC's 
Pro/Engineer  software  for  creating 
produa  design  data  and  on  Fro/ 


I  Intralink  to  share  data  between  sites. 

Using  a  common  software  platform 
reduces  the  complex  integration  and 
data  translation  issues  that  are  other¬ 
wise  involved,  he  says.  Using  standard¬ 
ized  tools  can  also  result  in  better  de¬ 
sign  integrity  and  reuse  and  lead  to 
better  sourcing  and  material  manage¬ 
ment  processes,  Watson  adds. 

Taking  Small  Bites 

When  planning  a  deployment,  don’t 
bite  off  more  than  you  can  chew,  warns 
Hendrickson.  “In  a  small  organization 
where  resources  are  limited,  it  might 
make  the  best  sense  to  take  a  phased 
approach,”  he  says. 

His  company  adopted  a  three-phase 
approach  to  implementing  PLM.  In  the 
first  phase,  he  “nailed  down"  the  com¬ 
pany’s  parts-development  process  in 
order  to  determine  what  type  of  data 
he  needed  to  capture  and  when.  (Team 
Industries  has  identified  50  separate 
data  points  as  a  result  of  this  exercise.) 

Team  Industries  is  now  in  the  sec¬ 
ond  phase:  tying  the  data  to  informa¬ 
tion  generated  on  the  manufacturing 
floor.  In  the  third  phase,  it  will  inte¬ 
grate  that  data  into  the  company's  man¬ 
ufacturing  resource  planning  system. 

Customizing  packaged  software  to 
fit  specific  business  needs  can  also  be 


a  problem.  New  Balance  Athletic  Shoe 
Inc.  in  Boston  is  using  PLM  products 
from  MatrlxOne  Inc.  in  Westford, 
Mass.,  to  improve  the  effectiveness  of 
its  product  development  and  procure¬ 
ment  process  and  to  make  collabora¬ 
tion  with  international  partners  easier. 

But  New  Balance  has  had  to  cus¬ 
tomize  the  software  "a  little  more  than 
we  wanted  to."  says  Bill  Armelin,  the 
shoe  company's  business  systems  proj¬ 
ect  leader.  For  example,  some  procure¬ 
ment  forms  that  the  FLM  system  gen¬ 
erated  were  different  from  what  inter¬ 
nal  teams  were  used  to.  even  though 
users  input  the  same  data.  Similarly, 
what  internal  design  teams  refer  to  as 
a  “specification  sheet"  appears  as  a  bill 
of  materials  function  in  the  FLM  suite. 

Be  prepared  to  tweak  your  processes 
to  avoid  software  customization,  says 
Hendrickson.  Team  Industries  changed 
its  parts-numbering  process  and  revi¬ 
sioning  scheme  to  better  use  the  capa¬ 
bilities  of  the  PLM  suite  it's  rolling  out. 

Getting  users  to  adopt  FLM  systems 
can  also  be  a  challenge.  “One  of  the 
things  we  noticed  is  that  if  you  try  to 
do  too  much  right  out  of  the  box  with  a 
system  like  this,  it  is  too  much  of  a  cul¬ 
ture  shock,"  says  Tim  Bahr,  manager  of 
technical  development  at  New  Balance. 

Getting  nonengineering  people  to 


use  PLM  systems  can  be  especially 
challenging,  so  it’s  important  to  spend 
time  explaining  and  demonstrating  the 
value  a  PLM  system  can  bring  to  the 
different  business  units,  adds  Watson. 

His  group  conducted  road  shows  at 
several  ITT  manufacturing  facilities  to 
demonstrate  the  value  of  the  PLM  sys¬ 
tem.  But  even  with  those  efforts,  Wat¬ 
son  says  that  “only  a  very  small  per¬ 
centage  of  people . . .  really  believe 
they  need  this  stuff," 

Equally  important  is  the  need  to  get 
user  feedback  and  include  that  in  the 
requirements-gathering  process,  says 
Rugullies.  Putting  PLM  training  groups 
in  the  middle  of  the  units  that  are  most 
reluctant  to  adopt  PLM  may  also  pay 
off.  she  suggests. 

Ultimately,  getting  PLM  right  is  as 
much  about  setting  the  right  expecta¬ 
tions  as  it  is  about  the  implementation, 
says  Frank  Azzoiino.  president  of 
Waltham.  Mass.-based  PLM  vendor 
Eigner.  “This  is  an  industry  that  has 
historically  overpromised  but  under- 
delivered."  he  says.  > 

EXIDIDEDINFIUENCE 

inctusiry  hvees  are  dnvtng  PLM  well  teyond  (he 
enoineenng  departrnent 
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Continued  from  page  32 
and  product  bill-of-material  manage¬ 
ment,  Heppleman  says.  Similarty,  if  the 
goal  is  to  increase  ptixluct  standard¬ 
ization.  the  focus  might  be  on  improv¬ 
ing  configuration  management  or  on 
design  reuse,  be  adds. 

It  also  helps  to  have  standard  tools 
and  interfaces  when  creating  and  shar¬ 
ing  a  single  view  of  enterprise  product 
data,  says  ITTs  Watson.  ITT  is  linking 
and  integrating  product  design  and  en¬ 
gineering  data  across  several  manufac¬ 
turing  operatioos.  To  facilitate  the 
process,  ITT  standardized  on  PTCs 
Pro/En^neer  software  for  creating 
product  design  data  and  on  Pro/ 


Intralink  to  share  data  between  sites. 

Using  a  common  software  platform 
reduces  the  complex  integration  and 
data  translatioo  issues  that  are  other¬ 
wise  involved,  he  says.  Using  standard¬ 
ized  tools  can  also  result  in  better  de¬ 
sign  integrity  and  reuse  and  lead  to 
better  sourcing  and  material  manage¬ 
ment  processes,  Watson  adds. 

Taking  Small  Bites 

When  planning  a  deployment,  don’t 
bite  off  more  than  you  can  chew,  warns 
Hendrickson.  “In  a  small  organization 
where  resources  are  limited,  it  might 
malff  the  best  sense  to  take  a  phased 
approach,”  he  says. 

His  company  adopted  a  three-phase 
approach  to  implementing  PLM.  In  the 
first  phase,  he  “nailed  down”  the  com¬ 
pany’s  parts-development  process  in 
order  to  determine  what  type  of  data 
be  needed  to  capture  and  udien.  (Team 
Industries  has  identified  SO  separate 
data  points  as  a  result  of  this  eKrcise.) 

Team  Industries  is  now  in  the  sec¬ 
ond  phase:  tying  the  data  to  informa¬ 
tion  generated  on  the  manufacturing 
floor.  In  the  third  phase,  h  will  inte¬ 
grate  that  dau  into  the  company's  man- 
ufocturing  resource  planning  system. 

Customizing  packed  software  to 
fit  spedfic  business  needs  can  also  be 


a  problem  New  Balance  Athletic  Shoe 
Inc.  in  Boston  is  using  PLM  products 
from  MatrixOne  Inc.  in  Westford, 
Mass.,  to  improve  the  effectiveness  of 
its  product  development  and  procure¬ 
ment  process  and  to  make  collabora¬ 
tion  with  international  partners  easier. 

But  New  Balance  has  had  to  cus¬ 
tomize  the  software  “a  little  more  than 
we  wanted  to,”  says  Bill  Armelin,  the 
shoe  company’s  business  systems  proj¬ 
ect  leader.  For  example,  some  procure¬ 
ment  forms  that  the  PLM  system  gen¬ 
erated  were  different  from  what  inter¬ 
nal  teams  were  used  to,  even  though 
users  input  the  data.  Similarly, 
what  internal  design  teams  refer  to  as 
a  “specification  shWt”  appears  as  a  bill 
of  materials  function  in  the  PLM  suite. 

Be  prepared  to  tweak  your  processes 
to  avoid  software  customization,  says 
Hendrickson.  Team  Industries  changed 
its  parts-numbering  process  and  revi¬ 
sioning  scheme  to  better  use  the  capa¬ 
bilities  of  the  PLM  suite  it’s  rolling  out 

Getting  users  to  adopt  PLM  systems 
can  also  be  a  challenge.  “One  of  the 
things  we  noticed  is  that  if  you  try  to 
do  too  much  right  out  of  the  box  with  a 
system  like  this,  it  is  too  much  cff  a  cul¬ 
ture  diock,”  says  Tim  Bahr,  manager  of 
technical  development  at  New  Balance. 

Cutting  nonengioeering  people  to 


use  PLM  systems  can  be  especially 
challenging,  so  it’s  important  to  spend 
time  explaining  and  demonstrating  the 
value  a  PLM  system  can  bring  to  the 
different  business  units,  adds  Watson. 

His  group  conducted  road  shows  at 
several  ITT  manufacturing  facilities  to 
demonstrate  the  value  of  the  PIM  sys¬ 
tem.  But  even  with  those  efforts,  Wat¬ 
son  says  that  “only  a  very  small  per¬ 
centage  of  people . . .  really  believe 
they  need  this  stuff." 

dually  important  is  the  need  to  get 
user  feedback  and  include  that  in  the 
requirements-gatberii^  process,  says 
Rugullies.  Putting  PLM  training  groups 
in  the  middle  of  the  units  that  are  most 
reluctant  to  adopt  PLM  may  also  pay 
oB,  she  suggests. 

Ultimately,  getting  PLM  right  is  as 
much  about  setting  the  right  mqiecta- 
tions  as  it  is  about  the  implementation, 
says  Frank  AzzoUno,  president  of 
Waltham,  Mass.-based  PLM  vendor 
Eigner.  This  is  an  industry  that  has 
hismrically  overpromised  but  under¬ 
delivered,”  he  says.  I 
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Want  to  cut  your  IT  costs  without  sacrificing 
performance?  PRIMEPOWER  Servers  from  Fujitsu. 


■  The  secret  is  out.  PRIMEPOWER'’ Solans''-compatibie 
servers  from  Fujitsu*  deliver  a  major  breakthrough  in 
price/performance  comp^ed  to  our  more  famous 
competition.  Warrt  proof?  PRIMEPOWER  servers  offer 
such  an  advantage  that  the  world's  leading  com¬ 
panies  use  them  to  boost  their  performance.  And  there's  a 
PRIM^OWER  server  that’s  right  for  ar)y  application  you  need— 
from  single  CPU,  rack-mounted  servers  to  enterprise-ready 
systems  that  scale  to  1 28  CPUs  for  unsurpassed  performance  in 
the  data  center. 

Of  course,  it’s  not  just  the  hardware  you’re  buying.  It's  also 
Fujitsu’s  30+  years  of  experience  supporting  high-perform¬ 
ance.  mission-critical  systems.  We’ve  already  helped  many 
companies  consolidate  their  IT  infrastructures  arxl  lower  their 
Total  Cost  of  Ownership.  Our  free  white  paper,  The  Why  and 
How  of  Server  Consolidation,  explains  how.  Get  your  copy  at 
www.ftsi.fujitsu.com/ad.  Or  call  (877)  905-3644. 
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A  meiger  Uuis  security  ofaiectives  as 
culture,  poides  and  systems  begin  to  be 
asdndated.  By  Vmce  Tuesday 


Y  COMPANY  recently 
merged  with  another 
financial  services 
firm,  and  DOW  the 


groups.  Joe  is  a  business- 
oriented  customer  of  the  out¬ 
sourcer.  My  security  group 
has  an  informal  relationship 


boundaries  we  woriced  so  hard  with  the  business  teams  that 


to  build  have  to  be  tom  down 
and  rebuilt  We’re  under  sig¬ 
nificant  man^ement  pressure 
to  quickly  enable  communica¬ 
tion  aiKl  information-sharing 
between  the  organizations. 

But  we  must  also  mainuin  the 

integrity  of  our  IT  se-  - 

curity  inhastructure,  Armi 
all  the  while  merging  SlGII 
two  cultures  with  dif¬ 
ferent  IT  security 
priorities. 

We  can’t  even  de¬ 
cide  where  to  build 
the  walb.  let  alone  bow  high 
they  ^lould  be.  We  need  to 
have  all  the  normal  working 
systems  linked  together. 

The  initial  niase  1  priority 
is  e-mail,  followed  by  file  shar¬ 
ing.  In  Phase  2,  we’ll  replace 
tb^  linked  systems  with  new 
companywide  systems. 

Given  that  our  companies 
have  different  approaches  to 
IT  security,  what  should  the 
newly  formed  organization  in¬ 
corporate  as  its  new  methods? 
And  how  much  time  and  mon¬ 


SECWTY 

FTTWr 
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are  our  custoo^ers,  but  we  also 
have  a  clear  responsibility  to 
be  flexible  to  their  needs.  Joe's 
firm  has  a  formal  service-level 
agreement  (SLA)  with  the  ser¬ 
vices  company. 

Unfortunately  for  Joe,  secu- 

-  rity  isn't  a  detailed 

part  of  the  SLA.  and 
he  doesn’t  receive 
data  or  reports 
about  security 
events.  His  costs  are 
much  lower,  but  he 
can’t  be  sure  of  the 
service  be  receives.  This 
sounds  bad  to  me.  Then  again, 
perhaps  I’m  a  control  freak 
who  enjoys  the  depth  of  data  I 
have  at  my  fmgertips,  giving 
me  the  ability  to  track  our 
company’s  security  posture. 
But  at  least  bis  SLA  covers 
patch  deployments.  Some  out¬ 
sourcing  contracts  I’ve  heard 
about  don’t. 

Joe  is  new  to  security.  His 
background  is  in  commercial 
management  and  general  IT 
team  leading.  I  come  from  a 


ey  should  we  spend  protecting  technical  security  background. 

the  links  between  systems  if  in 

Phase  2  well  just  throw  away 

those  links,  along  with  the  sys- 

terns  they  connect? 

Coonfnaiad  Response 

'Ib  clarify  my  team's  response. 

I  spent  a  day  with  my  ocher  Imustbalaiicelhe 

half,  the  .cquiring  company’s  n^tOaVOMCOlIIOrO- 
head  of  security,  whom  rUcaU  '"TT  "  ^  T.  . 

Joe.  He  has  no  staff — hisor-  PlOwlCmfl 

ganizacioo  outsources  every-  SQSlnSt  MMnQ  OUf 

thingtoalaisemana*ed.ser-  nOW  fclSiden  feeing 

'iTy^I^i^asthesetvlces  aSth^thW« 

company  to  our  business  UntfUStBO- 


so  I  have  nearly  10  years  of  ex- 
'•  perience  with  the  nuts  and 
bolts. 

Our  reporting  lines  also  dif¬ 
fer.  Joe  has  a  nominally  more 
senior  position  in  his  compa¬ 
ny,  but  with  no  budget  and  no 
stafC  be  feels  somewhat  inef¬ 
fectual  He  has  requested  that 
we  help  him  apply  some  of  the 
facets  of  our  resolutely  practi¬ 
cal  approach. 

As  the  merger  proceeds,  we 
are  organizing  into  three  busi¬ 
ness  units.  My  company  is  one 
of  these,  and  my  team  will 
continue  to  protect  chat  unit. 

I'd  like  to  make  a  bid  to  bring 
security  services  in-bouse  for 
the  other  business  units,  but 
now  is  not  the  time. 

There’s  also  the  risk  that  the 
new.  larger  company  will  stan¬ 
dardize  on  outsourced  service 
for  security.  But  they  don’t 
seem  happy  with  the  quality 
of  the  service  they’ve  been 
getting,  so  my  team  has  a  good 
opportunity  to  prove  itself 

Redrawing  the  Borders 

For  now,  we  communicate  be¬ 
tween  business  units  using  a 
new  set  of  e-mail  addresses. 
We  all  still  have  our  old  e-mail 
addresses,  however.  When  we 
use  our  new  ones,  the  e-mails 
are  routed  to  a  central  point 
and  then  fan  out  to  the  correct 
company  server.  That  sounds 
fine,  but  it  means  that  if  I  want 
to  send  a  confidential  e-mail 
to  the  person  sitting  next  to 
me  and  I  use  their  new  ad¬ 
dress,  it  travels  over  the  Inter¬ 
net  to  the  other  company, 
which  bolds  the  master  list, 
and  then  back  to  our  company. 
Not  only  is  this  slow,  but  it 
also  exposes  e-mails  to  the 
threat  of  interception  in  tran¬ 
sit  or  while  waiting  on  the  In¬ 
ternet  service  provider’s 
e-mail  servers. 

The  flz  is  to  directly  con¬ 
nect  our  networks  and  link 
e-mail  servers  within  the  com¬ 


pany.  but  that  takes  time.  In 
the  meantime  we  could  deploy 
a  virtual  private  network,  but 
we  would  face  extra  costs  and 
interconnectioa  issues.  In¬ 
stead  we  have  turned  to  the 
perfect  feature  within  e-mail 
servers:  transport  layer  securi¬ 
ty  (TLS)  and  the  Simple  Mail 
Transport  Protocol  (SMTP). 

These  Internet  e-mail  stan¬ 
dards  are  simple  but  secure 
extensions  that  provide  for  the 
integrity  and  confidentiality  of 
e-mail  messages  in  transit. 
SMTP  and  TLS  support  is 
included  in  all  major  e-mail 
transport  products,  including 
sendmail  and  Exim,  both  of 
which  are  freeware.  With  just 
a  few  lines  of  configuration 
changes,  all  of  our  e-mail 
transfers  between  e-mail 
servers  in  the  organizations 
are  protected.  Tire's  no  re¬ 
quired  change  to  client  soft¬ 
ware  and  no  cost  invol^d. 

This  can  also  work  with 
other  e-mail  servers  outside 
our  company.  If  any  oUier 
e-mail  server  on  the  Internet 
is  configured  to  turn  on  TLS, 
then  all  the  e-mails  we  send  to 
them  will  also  be  protected. 

So  why  doesn’t  everyone 
use  this  feature?  Why  not  in¬ 
deed!  I  recommend  asking 
your  e-mail  team  whether 
they  have  enabled  it. 

Next  I’m  going  to  work  on 
Unking  our  systems.  I  must 
balance  the  need  to  avoid 
compromising  our  protection 
against  leaving  our  new  insid¬ 
ers  feeling  as  though  they  are 
untnisted.1 

WMTNYimiK? 

This  mek's  loirnd  B  wittien  by  a  real 
security  manager.  *Vlnoe  Tiaa^.*  eitioGe 
name  md  employer  have  been  degmsed 
fa  obwHB  reasons.  Coniact  him  ai  wica 
tuesdBy9huihmaA.com.  V  loin  the  dB- 
oesioninoirlonan 
(NUlMcafiM 

To  find  a  complete  archive  of  our 
Sacurty  Man^s  Jotfnali  go  online  to 

Cl  oompulwsMrtdxoM/bacJwnial 


Thefe  are  plenty  of  ways  to  shorten  backup  windows.  And  StorageTek  b  just  the  contpany  to  find  the  one  thafs  right 
for  you.  Maybe  it^  BladeStore  as  part  of  dbk-to-disk  backups  or  an  L-Series  automated  tape  library  with  the  irfoustry^ 
fastest  tape  drive  -  the  T99406.  Whatever  the  solution,  we  thmk  you  deserve  a  day  of  rest  Learn  more  about  this 
story  and  ocher  ways  we  can  help  you  at  www^avethedayxom  ^^^SrOJtACfT^ITSavethcDayr 


What  day  Is  It?  Sunday? 


rm  only  9  hours  into  a  32  hour 


Tbari  just  too  long. 


In  up  to  ma  to  shorten  it 


May  6-9.  2003 

|\\  Marriott  Desert  Springs  Resort  •  Palm  Desert.  Cialilornia 


i  ji  K  {  IIAI  I  1  \(,1 


VOl  R  soil  I  |i  i\ 


Featured  Speakers  Indude: 


Nan^  V^cto^ 

•  Anistaiit  Scctetaiy  for 
Information  8t  Communications, 
U.S.  Department  of  Commerce 

•  Administzator  of  the  National 
Information  &  Cmnmunications 
Arlmioistration 

•  Reports  directly  to  President  George 
W.  Bush  on  communications  pdiw 


For  eonference  updates,  visit  w'ww.mvv'wu sa.com 
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Tivoli  GM  Explains  IBM  Unit’s  Move  to  J2EE 


RobMtUBlMW  wasnamedgen- 
era/  manager  of  IBM’s  T!vo/i 
Software  unit  in  /une  2001.  In 
the  past  18  months,  TIvo/i  has 
rethuxd  its  products  from  150  to 
50,  and  it^  currently  reuniting 
the  architecture  of  Us  flagship 

-  71vo/i  Enter- 

jwise,/nime* 
worlcin/ava2 
Enterprise  Edi¬ 
tion  (J2EE). 
LeBlancrecentiy  talked  with 
Computerworid  about  Austin, 
Texas-based  ThioU'i  fiiture. 

WhU's  happMiino  wHh  resoardi 
and  dmtopmMrt?  We  have  a 
major  effort  going  on,  rebuild¬ 
ing  our  architecture  based  on 
J2EE.  The  storage  products 
are  being  built  on  J2EE  now, 
and  we'U  be  movii^  our  more 
traditional  products  onto  it 
over  time.  We  haven't  an¬ 
nounced  it  yet,  but  we  have  an 
internal  road  map  we’re  shar¬ 
ing  with  some  customers.  We 
want  to  be  sure  there  won't  be 
problems  with  it 
The  biggest  customer  con¬ 
cern  is  going  to  be  migration: 
Will  they  have  to?  Will  they  be 
able  to  get  help?  Will  it  cause 
problems  for  them?  We're 
worldng  to  ensure  there  won’t 
be  problems:  we  have  a  cus¬ 
tomer  architecture  board  to  be 
sure  we  get  their  input. 

b  DvdTs  dimpa  to  a  J2EE  ar 
eWtoctora  batog  mada  in  ardar  to 
fit  in  baltor  wMi  BITt  Wab  aar- 
vieaa  pinh?  It’s  the  right  thing 
for  HvoU.  We  get  a  leading- 
e(^  technology  and  a  more 
flexible  architecture.  If  s  Web- 
enabled  and  will  improve 
performance.  And  [IBM’s] 
WebSphere  is  in  50,000  shops. 
That’s  a  strong  presence,  and 
it's  been  around  for  awhile, 
so  if  s  pretty  robust  And  it 
means  that  we  can  take  advan¬ 
tage  of  that  rather  than  have 
an  architecture  built  for  Hvoli 
by  Tivoli 

TMnFinK 

1b  raad  to  U  Manmw  Robert 


Wham  dots  TIvoR  fit  b  BITS 
storaga  stratogy?  What  we’re 
focused  on  is  managing  stor¬ 
age  as  a  resource  —  monitor- 


U  i  lOCC  p®'' 

iQ  VmUb  you  may  have  a  policy 

of  no  MP3  on  corporate  stor¬ 
ing  performance,  allocation  of  age.  You  can  automatically 


resources  across  heterogene¬ 
ous  storage  devices.  We  ac¬ 
quired  TlelliSofl  to  automate 


remove  those  flies. 

By  knowing  the  details  of 
your  utilization,  you  can 


maybe  migrate  onto  cheaper 
off-line  storage  or  eliminate 
some  stcnage  entirely,  i 

Lais  is  a  Computerworid  con¬ 
tributing  writer.  Contact  her  or 
$amLlais@oomputerworl<icom. 


AAake  the  Most  of  Remedy’s  Industry-Leading  Solutions 


Rely  OB  the  strength  of  Remedy^  Alliance  Partners. 

Remedy  is  the  leader  in  Service  Marugement  solutions  and  our  Alliance  Partners  are  experts  in  belpii^  our  customen 
get  the  most  out  of  their  Remedy  solutions.  Our  Partners  are  Remedy-certifled  aisd  can  provide  ^>ecialized  product 
expertise  that  extends  dte  value  (^Remedy’s  Service  Management  solutions.  By  engagii^  a  Premier  Remedy  Alliance 
Partner,  you’ll  get  local  expertise,  a  fast  and  efficient  deployment,  a  quick  return  on  your  investment,  and  an  integrated, 
best  practice  solution  that  meets  the  unique  requirements  of  your  business. 

Engage  one  of  Remedy’s  Premier  Alliance  Parmen  today. 

Visit  our  website  to  find  the  Remedy  Alliance  Partner  near  you. 


wwwjemedyxx>m/extend 

Kefnedy;  a  BMC  Software  company 


SB  Remedy- 
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Appliance  Boosts 
WAN  Capacity 

fTWorx  Inc.  in  Burlington,  Mass., 
has  begun  shipping  NetCelera.  a 
WAN  capacity-expansion  appli¬ 
ance  that  uses  compression  to 
provide  up  to  a  tenfold  increase  in 
network  capacity.  K  operates  on 
connections  from  B4K  to  ASM 
bit/sec.  over  private  lines,  frame 
relay.  Asynchronous  Transfer 
Mode  or  satelKte  links,  and  it 
works  with  virtual  private  net¬ 
works.  Application  pricing  starts 
at  S2.500  per  site. 

XML  Devetopment 
Tools  Launched 

Swingtide  Inc.  in  Fhtrtsmouth. 
N.H..  has  released  software  and 
services  designed  to  help  devel¬ 
opers  with  XML  standards  inter¬ 
operability  issues.  Qo6  Assistant 
is  a  knowledge  base  and  XML 
project  ptanning  tool  that  seAs  for 
S1A.99S.  Swingtide  also  offers 
three-day  technology  sessions 
that  leverage  its  tool. 


GIPS  VoiceEngine 
Gets  Upgrade 

Global  IP  Sound  A6  has  released 
GIPS  VoiceEngirw  1.1.  a  new  ver¬ 
sion  of  a  software  pkig-in  with  an 
appbcation  programming  inter¬ 
lace  intended  to  improve  sound 
in  voice-over-IP  applications.  In 
addition.  Voic^ngine  1.1  sup¬ 
ports  intention  of  encryption 
algorithms,  includes  a  statistics 
generator  for  network  manage- 
merd.  and  features  improved  port 
handling. 


Messaging  Suite 
Migrates  to  AIX 

U.K.-ba9ad  Oordano  Ltd.  has 
announced  a  version  of  its  Global 
Messaging  Suite  for  the  AIX  op¬ 
erating  system.  The  new  release 
includes  e-mail,  instant  messag¬ 
ing.  Short  Messaging  Service, 
shared  calendars,  antispam  and 
anthriruscapabKtiesanddata- 
base-drfvenmass-mailingfaciB- 
tias.  Pridna  starts  at  S83S. 


TOMMY  PETERSON 


Making  a  Federal  Case 
Out  of  FT  Seeurity 


-HEN  THE  BUSH  ADMINISTRATION 
a  few  weeks  ago  raised  the  country’s 
terrorism  alert  status  to  Code  Or¬ 
ange  and  prescribed  that  citizens 
gather  supplies  for  a  potential  emer- 


gency.  most  of  us  armed  our¬ 
selves  with  jokes  about  plas¬ 
tic  sheeting  and  duct  tape 
rather  than  addressing  the 
problem.  For  people  who. 
like  me.  are  old  enough  to  be 
children  of  the  Cold  War,  the 
warnings  were  a  little  tw» 
reminiscent  of  fallout  shel¬ 
ters  and  "duck-and-cover" 
drills  to  be  taken  entirely 
seriously. 

In  my  high  school,  those 
civil  defense  posters  bore  a 
final,  hand-scrawted  direction  right  after 
the  instructions  to  get  under  your  desk 
and  put  your  head  between  your  knees. 

It  read:  "And  kiss  your  butt  gotKlhye." 
Youthful  sang-froid  aside,  it’s  not  that  wc 
weren’t  jittery’  then;  wc  were.  Just  as  we 
are  now.  But  gallows  humor  seems  to  be 
the  only  sane  response  to  earnest  sur¬ 
vival  advice  that’s  obviously  inadequate 
for  the  threatened  catastrophe. 

Not  S4i  humorous  but  only  a  little  more 
reassuring  i.s  the  strategy  for  protecting 
cyber-based  critical  infrasiruciure  that 
wa.s  recently  released  by  the  Department 
of  Homeland  Security  t  DHS). 

'I'hc  DHS  report  delineates  the  need 
for  a  “panoramic  vantage  pvtint”  of  the 
Internet  to  create  a  "synoptic  or  holistic" 
view  of  cyberspace.  The  aim  is  to  locate 
that  vantage  point  within  the  sphere  of 
the  DHS.  the  better  for  the  agency  to 
protect  us  all. 

The  impulse  is  understandable,  but  1 
wouldn’t  count  on  it  happening  anytime 
«Mm.  Corporate  IT  users  are  struggling 
mightily  to  get  views  of  the  circum¬ 
scribed  landscape  of  their  own  net¬ 
works.  And  there’s  no  shortage  of  ven¬ 
dors  that  claim  to  offer  some  variety  of 


end-to-end  monitoring  or 
management  function  to 
their  customers,  suggesting 
that  the  need,  and  therefore 
the  market,  for  such  capabil¬ 
ities  is  real.  Why  do  I  sense 
that  it's  going  to  be  even 
tougher  for  a  gargantuan 
government  bureaucracy, 
with  considerable  but  unco¬ 
ordinated  resources,  to 
achieve  a  panoramic  view  of 
a  global  network  of  largely 
unrelated  nodes? 

To  complicate  matters  further.  How¬ 
ard  Schmidt,  acting  chairman  of  the 
Prcsidenl's  Critical  Infrastructure  Pro¬ 
tection  B4«rd.  says  the  DHS  will  en¬ 
courage  the  private  sector  to  use  diverse 
networking  architectures  and  service 
providers  as  a  way  to  limit  the  risk  of  a 
massive,  debilitating  cyberattack. 

The  size  and  comple.xiiy  of  the  DHS’s 
mission  undermine  confidence  that  it 
can  keep  the  critical  infrastructure  se¬ 
cure  —  as  docs  the  suspicion  that  the 
agency  won’t  be  nimble  enough  to  stop 
the  inventive  freelance  crackers  out 
there,  let  alone  committed  lunatics  who 
are  out  to  do  more  than  mischief. 

But  the  DHS  could  help  by  using  its 
bully  pulpit  to  persuade  corporate  man¬ 
agers  to  get  more  aggressive  with  their 
own  IT  security.  The  federal  government 
has  thus  far  been  hesitant  to  force  pri¬ 
vate  companies  to  improve  security,  and 
it's  clear  that  the  carrot  of  tax  breaks  will 
be  considered  before  the  slick  of  regula¬ 
tion  is  raised. 

What's  hard  to  figure  out.  given  the 
stakes,  is  why  companies  don't  do  more 
without  any  urging.  It’s  not  as  though 
bolstering  the  security  of  their  networks 


would  be  an  altruistic  gesture  —  corpo¬ 
rations  lose  billions  of  dollars  each  year 
because  of  security  breaches. 

And  it's  not  a  matter  of  waiting  for 
technology  that  works  or  figuring  out 
what  to  do.  One  frustrated  IT  manager  1 
talked  to  recently,  who  asked  not  to  be 
identified  for  obvious  reasons,  said  he 
thinks  he  could  make  his  company  80% 
to  90%  more  secure  with  the  tools  al¬ 
ready  in  place  if  he  had  the  authority  to 
enforce  policies  that  already  exist. 

Here  are  a  few  steps  —  you’ve  heard 
them  all  before  —  that  should  be  taken 
at  every  company  now; 

■  Track  vulnerabilities  and  install 
available  patches  promptly.  Security 
vendor  Symantec  said  recently  that  the 
number  of  reported  vulnerabilities 
among  its  customers  was  up  81%  in  2002 
over  the  previous  year. 

■  Insist  on  strong  user  authentication 
and  access-control  policies  and  tech¬ 
nologies. 

■  Use  up-to-date  antivirus  software. 

■  Install  and  maintain  properly  config¬ 
ured  firewalls. 

■  Deploy  intrusion-detection  software 
that  allows  you  to  define  the  rules  for 
alerts. 

■  Monitor  activit>'  logs  carefully  and 
consistently. 

■  Protect  the  data  center  by  establish- 
iitg  programming  policies  to  minimize 
those  old  bugaboos,  buffer  overflows  and 
formal  string  crrtErs. 

If  companies  took  these  obvious  steps, 
(hey  would  make  themselves  and  the 
economy  more  secure  and  provide 
building  blocks  for  an  overarching 
cybcrsecuriiy  strategy.  By  themselves, 
these  steps  won’t  make  our  critical  infra¬ 
structure  safe,  but  they're  a  start.  And 
getting  them  done  \«’ouid  beat  the  beck 
out  of  stashing  duct  tape,  plastic  sheet¬ 
ing  and  a  few  cans  of  Dinty  Moore  in  the 
basement,  k 


WAMTOUROPMIOII? 


I  Fvnnmcoiurnrts  and  links  to  our  archives  go  to: 

"  www.eonputarworttxom/topMem 
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A|i|iiance  Boosts 
WAN  Capacity 

nWtan  bie.  in  BuingtDn,  Him.. 
hn  tagw  Mpping  NMCdiri.  a 


prawUa  up  to  a  OhOpU  incraiM  in 
nahMvfc  capndly<  ft  OBwnOH  on 
Gawwellona  Imn  MK  to  4SM 


IMiarsMtoMi.n4ft 
Hurts  wM  vhtoto  prMo  Bto* 
uMrtBL  Applcalian  pricing  ftarb 
alS2Mpurrtto. 


XML  Development 
Took  Launched 

Swtogarti  toe.  to  ftrtmulh. 
NJC IM  rutaMirt  aollHvo  and 
MwOriii  dwipidtoiiitodmh 
opon  «Hi  XM.  atondnrdi  intor 
opmUtoy  tonn.  Qo6 /totortant 
toatoMtodgafeMtMdnA. 
prajoel  ptonntoB  tod  tfiat  asfti  for 
S14J05.  Mngftdi  dM  oftan 
tow  <toy  toctowtogy  iwdona 
tototoMra^litooL 


QPSVoiceEngine 
Gets  Upgrade 

ebW  r  Sound  AB  hM  rdaasad 
QV5  VWciCngina  U  a  iMw 
rton  of  a  aufiNura  plugHn  hWi  an 
■ppletolon  pfugrawtoig  intor 
faca  totondad  to  toto^nou  ofiund 
to  aotoa  ovar  B*  appftratfana.  to 
addWon.  WeaEngtoa  It  Bup* 
porta  totograSon  of  onciyplion 
uponuana.  ncwoaa  a  sQmics 
ganoftoot  fof  natvsrit  manage 
mant  and  tonhaaa  tognovad  port 


Messaging  Suite 
MgcatestoAlX 

UX-tM48ef<dmiUd.liH 
aanomcad  a  vonion  of  III  Btobil 
MaaaagtogSoltotartoaAIXop- 
araMng  apalML  Tfta  now  rolaam 
toetodaa  mal.  InrtMd  naaaw 
tog.  Short  IlMiMdni  Sontoa. 


ttaa.  Metag  Marta  at  S8S5. 


TOMMY  PETERSON 


Making  a  Federal  Case 
Out  of  FT  Security 


'HEN  THE  BUSH  ADMINISTRATION 
a  few  weeks  ago  raised  the  country’s 
terrorism  alert  status  to  Code  Or¬ 
ange  and  prescribed  that  citizens 
gather  supplies  for  a  potential  emer- 


gency.  most  of  us  anncd  our¬ 
selves  with  jdtes  about  plas¬ 
tic  sheeting  and  duct  tape 
rather  than  addressing  the 
problem.  For  people  who. 
like  me.  are  old  enough  to  be 
children  of  the  Cold  War.  the 
warnings  were  a  lUtle  too 
reminiscent  of  fallout  shel¬ 
ters  and  “duck-and-cover’’ 
drills  to  be  taken  entirely 
seriously. 

In  my  high  school,  those 
civil  defense  posters  bore  a 
final  hand-scrawled  direction  right  after 
the  instructions  to  get  under  your  desk 
and  put  your  bead  between  your  knees. 

It  read:  “And  kiss  your  butt  goodbye.” 
Youthful  saitg-froid  aside,  it's  not  that  we 
weren’t  jittery  them  we  were,  just  as  we 
are  now.  But  gallows  humor  seems  to  be 
the  only  sane  response  to  earnest  sur¬ 
vival  advice  that's  obviously  inadequate 
for  the  threatened  catastrophe. 

Not  so  humorous  but  only  a  little  more 
reassuring  is  the  strategy  for  protecting 
cyber-based  critkai  infrastructure  that 
was  recently  released  by  the  Department 
of  Homeland  Security  (DHS). 

Tlie  DHS  report  delineates  the  need 
for  a  “panoramic  vant^  polol"  of  the 
Internet  to  create  a  “synoptic  or  holistic" 
view  of  cyberspace.  The  aim  is  to  locate 
that  vantage  point  within  the  sphere  of 
the  DHS.  the  b^ter  for  the  agency  to 
protect  us  ail 

The  impulse  is  understandable,  but  I 
wouldn’t  count  on  it  happening  anytime 
soon.  Corporate  IT  users  are  struggling 
mightily  to  get  views  of  the  circum¬ 
scribed  landscape  of  their  own  net¬ 
works.  And  there’s  no  shortage  of  ven¬ 
dors  chat  claim  to  offer  some  variety  of 


end-to-end  monitoring  or 
management  function  to 
their  customers,  suggesting 
that  the  need,  and  therefore 
the  market,  for  such  capabil¬ 
ities  is  real  Why  do  I  sense 
that  it's  going  to  be  even 
tougher  for  a  gargantuan 
government  bureaucracy, 
with  considerable  but  unco¬ 
ordinated  resources,  to 
achieve  a  panoramic  view  of 
a  global  networic  of  largely 
unrelated  nodes? 

To  complicate  matters  forther,  How¬ 
ard  Schmidt,  acting  chairman  of  the 
President's  Critical  Infrastructure  Pro¬ 
tection  Board,  says  the  DHS  will  en¬ 
courage  the  private  sector  to  use  diverse 
networking  architectures  and  service 
providers  as  a  way  to  limit  the  risk  of  a 
massive,  debilitating  cyberattack. 

The  size  and  complexity  of  the  DHS’s 
mission  undermine  confidence  that  it 
can  keep  the  critical  infrastructure  se¬ 
cure  —  as  does  the  suspicion  that  the 
agency  won't  be  nimble  enough  to  stop 
the  inventive  freelarKie  crackers  out 
there,  let  alone  committed  lunatics  who 
are  out  to  do  more  than  mischief. 

But  the  DHS  could  help  by  using  its 
bully  pulpit  to  persuade  corporate  man¬ 
agers  to  get  more  aggressive  with  their 
own  IT  security.  The  federal  government 
has  thus  for  been  hesitant  to  force  pri¬ 
vate  companies  to  improve  security,  and 
it’s  clear  that  the  carrot  of  tax  breaks  will 
be  considered  before  the  stick  of  regula¬ 
tion  braised. 

What’s  hard  to  figure  out,  givea  the 
stakes,  b  why  companies  don’t  do  more 
without  any  ur^ng.  It's  not  as  though 
bobtering  the  security  of  their  networks 


would  be  an  allrubtic  gesture  —  corpo¬ 
rations  lose  billions  of  dollars  each  year 
because  of  security  breaches. 

And  it's  not  a  matter  of  waiting  for 
technology  that  works  or  figuring  out 
what  to  do.  One  frustrated  IT  mana^r  I 
talked  to  recently,  who  asked  not  to  be 
identined  for  obvious  reasons,  said  be 
thinks  be  could  make  hb  company  80% 
to  90%  more  secure  with  the  tools  al¬ 
ready  in  place  if  be  had  the  authority  to 
enforce  policies  that  already  exbt. 

Here  are  a  few  steps  —  you've  heard 
them  all  before  —  that  should  be  taken 
at  every  company  now: 

■  lYack  vulnerabilities  and  mstall 
available  patches  promptly.  Security 
vendor  Symantec  said  recently  that  the 
number  of  reported  vulnerabilities 
among  hs  customers  was  up  81%  in  2002 
over  the  previous  year. 

■  Insbt  on  strong  user  authentication 
and  access-control  policies  and  tech¬ 
nologies. 

■  Use  up-to-date  antivmts  software. 

■  Install  and  maintain  properly  config¬ 
ured  firewaUs. 

■  Deploy  intrusion-detection  software 
that  allows  you  to  define  the  rules  for 
alerts. 

■  Monitor  activity  logs  carefully  and 
consistently. 

■  Protect  the  data  center  by  establbb- 
ing  programming  policies  to  minimize 
those  old  bugaboos,  bttfler  overflows  and 
format  string  errors. 

If  companies  tot^  these  obvious  steps, 
they  would  make  themselves  and  the 
economy  more  secure  and  provide 
building  blocks  for  an  overarching 
cybersecurity  strategy.  By  themselves, 
these  steps  won't  make  our  critical  infra¬ 
structure  safe,  but  they're  a  start.  And 
getting  them  done  would  beat  the  beck 
out  of  stashing  duct  tape,  plastic  sheet¬ 
ing  and  a  few  cans  of  Dinty  Moore  in  the 
basemenLl 
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High-speed  Access 

TD  High-speed  talent 


To  keep  your  business  competitive,  you  need  the  right  IT  talent  at  just  the  right  time. 

With  more  than  100  locations  worldwide,  Robed  Hall  Technology  is  a  ieading  provider  ot: 

•  Help  Desk  Protessionals  •  Network  Administrators 

•  Programmers  •  Database  Administrators 

•  Web  Developers  •  And  other  Technology  Protessionals 

•  Network  Security  Engineers 

With  our  exceptional  connections  to  the  best  technology  talent  available,  we'll  do  more  than  provide 
cost-ettective  solutions  to  your  needs  -  we'll  do  it  exactly  when  you  need  it. 

Call  today! 


800.793.5533 


ROBERT  HALF  * 

TECHNOLOGY 

Information  Technology  Professionals 


robertlialftechnology.com 
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Into  Ihin  Errors 

Cardinal  Health  Inc.  moved 
its  warehouse  from  a  paper- 
based  to  an  automated 
system,  achieving  10% 
productivity  gains  while 
also  reducing  order  entry 
errors.  Pme44 


Spooding  Chock-in 

Delta  Air  Lines  installed 
hundreds  of  self-service, 
check-in  kiosks  at  airports 
across  the  country  to 
reduce  the  amount  of 
time  travelers  spend 
waiting  in  line.  48 
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QUOTE  OF  THE  WEEK 

MWb  built  a  uniqtie 

appKcsIion  dovolopinont 
framm^  that  comes  as  dose 
to  the  developers*  Holy  Grail 
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CARDiNAt  HEALTH  iNC.*s  warehouse 
automatkm  project  was  big,  but  then, 
so  is  the  company. 

Dublin,  Ohio-based  Cardinal  em¬ 
ploys  more  than  SOJDOO  people  and  has 
revenue  of  more  than  billion,  and 
its  catalogs  have  hundreds  of  thou¬ 
sands  of  products.  The  company  sup¬ 
plies  medical  equipment  to  hospitals 
and  doctors  wmldwide  through  the 
warehouses  operated  by  its  Medical 
Prodticts  and  Services  group. 

Before  the  automation  project  began 
in  1997,  customer  order  accuracy  was 
estimated  to  be  99%  —  a  solid  f^ure. 
But  that  level  of  accuracy  still  meant 
that  there  could  be  as  many  as  10,000 
errors  per  million  shipments.  The 


ITCONSOUDATION 
HELPS  SUSH 
OPERATION  COSTS 


•V  THOMAS  HOFFMAN 

NOW  THAT  COST  IS  KING,  the  Consoli¬ 
dation  of  servers  and  data  centers  — 
and  even  entire  offices  —  has  become 
de  rigueur  for  many  IT  leaders. 

Still,  it's  rare  when  an  IT/business 
project  comes  in  under  budget  and 
ahead  of  schedule.  But  that’s  just  what 
happened  at  Coming  Life  Sciences,  a 
di^ion  of  Coming  Inc.,  when  it  con¬ 
solidated  its  European  business  opera¬ 
tions  between  1999  and  2000. 

The  conqnny's  IT  organization  led 
the  efifoit  to  merge  o6Rces  and  associat¬ 
ed  inventory  from  Germany.  France, 


company^  pq>er-based  system  didn't 
allow  precise  measures.  There 
weren’t  a  lot  of  ways  to  measure  de¬ 
fects.  productivity, ”  says  Richard  Gius, 
Cardinal’s  senior  vice  president  for  IT. 

That  changed  with  the  ^tomated 
Inventory  Management  System 
(AIMS)  project,  part  of  a  $100  million 
redesign  of  systems  throughout  Cardi¬ 
nal  A  key  goal  was  flexibility. 

“We  wanted  the  architecture  to  be 
designed  in  a  way  that  would  allow  us 
to  continually  upgrade  the  code,"  says 
Larry  Linden,  vice  president  of  distrib¬ 
ution  and  research  and  development  at 
Cardinal  The  plan  was  to  create  a  “liv¬ 
ing  system”  that  would  help  the  com¬ 
pany  avoid  having  to  do  a  massive  up- 


Italy  and  the  UX 
inm  a  central  loca¬ 
tion  in  the  Nether¬ 
lands.  The  project 
was  supposed  to 
take  13  months  and 
cost  about  $1.5  mil¬ 
lion.  Instead,  it  was 
completed  in  10 
moi]^at7S%of 
the  estimated  cost,  says  Howard  Piggee 
Jrn  director  of  IT  and  CIO  at  Coming 
Life  Sciences  in  Acton,  Mass. 

“Given  the  time  and  money  spent, 
the  project  exceeded  our  expectations,” 


CARDINAL 
HEALTH  INC. 

Location:  DuUta,  OMo 
Web:  wwwxnJhwLcom 
Project  leader  Rkhard  Qius 
Business;  DWribiilorofpiMr* 


supple*  and  aquipnwnt 
2002  sales:  SSilfaMon 
Size  of  IT  department:  500 


grade  in  10  years  or  so. 

The  distributed  system,  vriiich  cost 
$2.4  million  in  software,  used  applica- 


says  Pggee.  But  another  pleasant  sur¬ 
prise  was  bow  accepting  the  affected 
office  woricers  were  in  handling  the 
changes  that  occurred,  Piggee  says. 

Compared  with  workers  in  the  U.S., 
where  telecommuting  is  standard  prac¬ 
tice,  Europeans  have  been  slower  to 
shift  to  work-at-home  environments. 
Demonstrating  how  successful  proj¬ 
ects  require  equal  emphasis  on  people, 
processes  and  technology,  Ck>ming  Life 
Sciences  worked  hard  to  communicate 
the  importance  of  the  consolidation  ef¬ 
fort  to  its  staffers,  au>$t  of  whom  now 
worii  ftom  home,  says  Pi^ee. 
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tioQ  systems  developed  with  coo* 
tractor  Witroo  Integrated  Logistics 
Corp.  in  Arlii^on  Heights,  lU. 

The  system  flexibility  is  achieved 
through  a  design  that  allows  the  ad- 
dition  of  modules,  such  as  a  proof* 
of*delivery  electronic  signature  sys¬ 
tem.  to  be  added  after  installation. 
The  system  tracks  products  at  every 
point,  and  even  manages  the  'foot¬ 
steps"  of  warehouse  employees  to 
maximize  their  eflbrt.  With  radio- 
connected  handheld  units  and  bar 
code  scanners,  managers  can  know 
the  precise  status  of  orders. 

Productivity  improved  by  10%.  and 
errors  at  some  warehouses  dropped 
down  to  a  few  hundred  (in  some  cas¬ 
es.  to  none)  for  periods  of  several 
months.  Cardinal  uses  AIMS  in  S7 
warehouses  and  will  continue  to  de¬ 
ploy  it  as  new  fiKiUties  are  added. 

t^tt  Bilodeau,  an  analyst  at  AMR 
Research  Inc.  in  Boston,  says  the  er¬ 
ror-rate  reduction  achieved  by  C:ar- 
dinal  is  impressive.  Cardinal  is  using 
some  robotic  automation  in  a  few 
warehouses.  But  Bilodeau  and  Steve 
Banker,  an  analyst  at  ARC  Advisory 
Group  Inc  in  Dedham.  Mass.,  warn 
that  some  companies  that  automate 
their  warehouse  systems  may  not 
necessarily  get  good  returns  on  their 
investments. 

Gius,  Linden  and  Ed  Michalski. 
Cardinal’s  IT  director,  are  happy  with 
what  they've  achieved,  but  they  say 
some  of  the  credit  should  go  to  the 
company's  IT  leaders  of  years  past 
The  Medical  Products  and  Services 
group  that  oversaw  this  project  was 
once  American  Hos{ntal  Supply  Corp^ 
a  forward-looking  company  that  de¬ 
veloped  the  precursors  of  the  compa¬ 
ny's  current  e-commerce  systems, 
says  Gius.  Ite  credits  the  work  of  his 
predecessors  for  inspiring  Cardinal's 
efforts.  *1n  many  respects,  we  are 
stewards  of  this  lega^."  be  says.  I 


WEB  SITE  ADDS 
INVENTORY 
CONTROL  AND 
F0RECASTIN6 

BV  STCVt  ALEKAMDCn 

JOSEPH  LACK  lit  doesn’t  try  to  mea¬ 
sure  the  return  on  investment  of  his 
company's  marketing  Web  site.  The 
fi^t  that  Dallas-based  Aviall  Inc 
was  saved  from  financial  disaster  by 
a  controversiaJ  multimillion'doUar 
IT  project  that  included  developing 
the  Web  site  as  one  key  element  is 
all  the  return  he  needs  to  see. 

That  investment,  in  the  words  of 
Larry  DeBoever.  chief  strategy  offi¬ 
cer  at  IT  consulting  firm  Experio 
Sohidoos  (^rp.  in  Dallas,  'turned 
Amll  flom  a  catalog  business  into  a 
full-scale  k^tks  business'  that 
hundreds  of  aviation  parts  manufac¬ 
turers  and  airtines  large  and  small 
depend  on  for  ordering,  inventory 
control  and  demand  forecastixig.  He 
says  the  new  approach  ties  Aviall 
more  ti^ly  to  customers  such  as 
Rolls-Royce  PLC 

"Aviall  is  ik>w  the  logistics  back 
eod  for  the  aviation  firms,'  says  De¬ 
Boever,  whose  company  was  re¬ 
tained  to  help  with  portions  of 
Aviall’s  systems  integration  work. 
"And  they  did  it  even  though  the 
airline  industry  shrank  over  the  last 
three  years." 

In  early  2(X)0,  with  quarterly  sales 
dropping  and  Aviall  on  the  ropes, 
"wt  invested  $30  million  to  $^ 
million  to  build  this  infrastnicture,” 
says  Lacik.  vice  president  of  infor¬ 
mation  services  at  Avi^  Services,  a 
unit  of  AvialL  "Our  competitors 
thought  we  were  insane.  Some 


AVIALL  INC. 

Location:  Dales 
Web;  www.wtlai,cofa 
Project  leader:  JaMfrit  Ladk  Jr. 
Business:  OirtriMlor  e(  cwn- 
mardalandgMiaralaftannar- 
M  ariatten  parts 
2002  sales:  SSOe^mMon 
Sire  ol  IT  department.  47 


investors  asked  for  my  restgnatioiL' 
The  results  of  the  project  have  been 
extremely  successful.  Publicly  owned 
Aviall  reported  that  in  the  quarter  that 
ended  in  September,  earnings  from  con- 
tinumg  operations  rose  229%  year-to- 
year  to  S&9  million,  and  net  sales  rose 
74%  to  $222  million.  That  represented 
a  huge  comeback  from  Aviall's  prob¬ 
lems,  which  sprang  from  a  foiled  enter¬ 
prise  resource  planning  implementa¬ 
tion  that  resulted  in 
inventory  getting 
out  oTcontroL 
WbenLadk 
foined  the  company 
in  early  2000,  "you 
couldn't  properly 
order  or  sfa4>  things. 
My  job  was  to  bring 
back  operational 
stability.'  he  says. 
To  do  so,  be  imple¬ 
mented  the  CEO’s 
vision  of  tnuksfonning  Aviall  into  a 
provider  of  supply  diain  iDanagerocnt 
services  throt^  the  integration  of  a 
BroadVision  Inc  online  purchasing 
system.  Siebel  Systems  Inc.  sales  force 
automation  aikd  order  entry  sofbirare.  a 
Lawson  Software  financial  system,  a 
Catalyst  Manufacturing  Services  in¬ 
ventory  control  and  warehouse  man¬ 
agement  system,  and  Xehis  Inc.  prod¬ 
uct  allocation,  inventory  management 


and  purchasing  forecasting  software. 

Aviall  chose  Sybase  Inc  middleware 
because  U  was  judged  to  be  vendor- 
neutral.  But  even  with  planning  some 
of  the  systems  integration  was  more 
difficult  than  expected.  And  the  com¬ 
bined  system  h»i  to  deal  with  cus¬ 
tomized  pricing  chans  for  17DO0  cus¬ 
tomers  ^tiho  receive  various  types  of 
discounts  and  with  an  inventory  of 
300,000  different  aerospace  parts. 

The  developcDcnt  of  AvialLcom  was 
one  of  the  least  expensive  parts  of  the 
project  at  a  cost  of  about  S  million. 
Lacik  says.  But  it  provides  big  benefits. 
Web  orderii^  costs  the  company  about 
39  cents  per  ordet  compared  with  $9  per 
transaaion  if  an  Aviall  employee  lakes 
the  mder  over  tbe  phone,  Lacik  says. 

New  supply  chain  functimts  are  also 
possible,  such  as  tbe  ability  for  cus¬ 
tomers  to  transfer  their  orders  from  an 
Excel  spreadsheet  directly  to  tbe  Web 
site.  Customers  can  also  recrive  price 
and  availability  informatioo  on  aero¬ 
space  parts  in  less  than  five  seconds  — 
a  real-time  feature  that  hadn't  been 
available  before  the  BroadViskH}  sys¬ 
tem  was  installed,  Lacik  says. 

TTte  process  also  ffees  the  compa¬ 
ny's  sales  force  from  routine  order- 
taking  and  follow-up.  thus  allowing 
them  to  spend  more  time  developing 
relationships  with  customers.  What's 
more,  tbe  Web  site  helps  Aviall  build 
relationships  with  suppliers  by  profvid' 
ing  them  with  customer  ordering  data 
that  enables  tbem  to  better  matd  pro¬ 
duction  with  demand. 

Tbe  Wrii  ste  now  generates  $60  mil¬ 
lion  of  tbe  company's  $600  miUkm  in 
annual  revenue,  or  7.5%.  up  ffom  less 
than  2%  a  year  ago  "Over  tbe  next 
three  to  fhw  years,  it  could  become 
more  than  30%.*  Lacik  says.  I 


Alexander  is  a/Kcfancrwrtrrr  in  Edina, 
Minn.  Contoct  him  ol  $orion99@> 
yohooxofTL 


The  only  thing  we  might  have  done 
differently  was  to  accelerate  tbe  closing  1 
oroneofourofikesintbeUJL."wfaere  | 
tbe  deadline  was  extended  to  accom¬ 
modate  staffers  who  were  accustomed 
to  working  out  of  an  (^ce,  says  Piggee.  | 
140  matter  how  polrticized  or  com¬ 
plex  your  environment  is,  consolida¬ 
tion  efforts  will  typically  drive  the 
highest  cost  savings,*  says  Jeremy 
Grigg,  an  analyst  at  Gartner  Inc.  in 
New  YoHl  For  example,  be  notes  that 
occupancy  costs  typically  make  up  11% 
of  an  organization's  operating  costs. 

Prior  m  the  consolidation  effort. 
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Web:  wwwxemln^com 
Project  leader;  Ho—rd  nggN  Jr. 
Business:  ManArivM  products  I 


2002safos.S84bHan 
Sin  of  IT  department  190 


Corning  life  Sdences'  offices  in  Europe 
each  ran  unique  software  applications 
aentts  a  potpourri  of  PCs,  dient/terver 
systems  and  IBM  ASMOO  machines. 
Now  the  offices  run  on  a  sti^e  Instance 
of  PeopleSoft  7.53  running  on  Win¬ 
dows  NT  4.0  on  Windows  2000  clients 
housed  in  Coming  Life  Sciences’  Euro¬ 
pean  data  center  in  tbe  U£.  Tbe  com¬ 
pany  now  leans  on  a  single  multilin- 
I  gual  customer  service  group  in  Hol¬ 
land  as  well  as  one  warehouse  there. 

Tbe  IT  group  at  Coming  life  Sd- 
I  ences  learned  a  few  things  along  tbe 
way.  "We  discovered  that  we  could  do 


this  with  a  smaller,  focused  group  of 
people,*  says  Piggee.  For  instance,  tbe 
European  consoUdatioa  effort  was  or¬ 
chestrated  by  four  full-time  workm 
and  ooe  pait-timet.  induding  two  tech¬ 
nical  and  process  consultants. 

Given  its  success.  Coming  life  Sd- 
ences  plans  to  use  a  smaU-team  ap¬ 
proach  in  moving  its  Nortb  American 
business  operations  to  a  sin^  venioo 
of  PeopleSoft  this  ^ring.  says  I^ggee. 
"Well  use  this  approach  going  forward 
as  a  way  to  redure  costs  in  getting  rr 
projects  aooooqtUsbed*  • 

BmI  bi  Om  owWnm.  M*  49 
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DATA  WAREHOUSE 
BOOSTS  PROFITS 
BYEMPOWERINO 
SALES  FORCE 


SUPPLY  CHAIN 
RE-ENGINEERING 
DRIVES  DOWN 
COST  OF  POWER 

8V  MA8C  L.  SONOmi 

THE  DESIRE  to  boost  efficiency,  sun- 
dardize  processes  and  cut  costs  in  its 
suppty  chain  led  the  Tennessee  Valley 
Au^ority  (TVA)  to  launch  its  largest 
rr  project  to  date  —  and  the  retum- 
on-investinent  results  are  already  ex¬ 
ceeding  expecutions. 

The  power  generator’s  supply  chain 
re-engineeru^  project  began  in  1996, 
with  the  hope  that  cost  reductions 
would  mean  cheaper  power  for  end 
users.  Since  going  live  after  a  weeklong 
big-bang  implemenution  in  July  2001. 
TVA  has  reaped  S23J  million  in  sav¬ 
ings.  putting  it  a  year  ahead  of  schedule 
in  its  plan  to  cut  $54  million  in  costs  in 
five  years.  Central  to  the  system  are 
applications  from  Indus  International 


BV  BARV  H.  ANTHE8 

VETERAN  IT  LEADER  David  R.  Guzman 
wants  his  management  to  say.  “Ah.  got 
it!”  And  executives  at  Office  Depot  Inc. 
definitely  did  ^t  it  when  Guzman  and 
a  team  of  his  colleagues,  in  the  first  ap¬ 
plication  of  a  new  dau  warehouse, 
boosted  annual  sales  by  SU7  million. 
Guzman,  senior  vice  president  for  sys¬ 
tems  development  at  the  time,  says  he 
was  the  “catalyst”  for  the  project, 
which  involved  measuring  sales  clerks' 
and  stores’  success  at  cross-selling  cer¬ 
tain  hems,  such  as  encouraging  printer 
buyers  to  purchase  a  cable  and  p^>er. 


SandmlQf  Ooimif  Mijtiit;,  Ri'i  i  - 1,.  i  ►.iliy  .khi  D-  i  b  . 


Inc.,  an  Atlanta-based  enterprise  asset 
management  software  vendor. 

“From  the  sheer  magnitude,  h  was 
the  largest  undertaking  in  the  agency’s 
history,”  said  Diane  J.  Bunch,  senior 
vice  president  of  information  systems 
at  TVA.  a  noiq^rofit  federal  government 
corporation.  The  project  required  the 
agency  to  woric  closely  with  hs  cus¬ 
tomers  to  decide  on  the  best  imple¬ 
mentation  approach,  which  they  even¬ 
tually  i^reed  should  be  a  fast  rollout. 
This  meant  getting  everything  going 
at  the  same  time,”  Bunch  sa^ 

The  big-bang  approach  was  “very 
scary.”  says  Paul  Lapointe,  senior  vice 
president  of  procurement  at  TVA.  But 
what  made  it  successful  was  the  con¬ 
tinual  involvement  of  business  experts 


The  concept  was 
pretty  simple,  but 
measuring  the  re¬ 
sults  for  each  of 
60,000  employees 
in  more  th^  LOGO 
stores  called  for 
data  warehouse 
technology  ftom 
the  Teradata  divi¬ 
sion  of  NCR  Corp.,  Guzman  says.  The 
warehouse  spit  out  a  key  report  that 
showed  the  percentage  of  cross-selling 
opportunities  that  were  successful 
broken  out  by  employee  and  store. 


D..v.,;R  G. 
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at  each  of  TVA's  locations,  who  took 
responsibility  for  the  project’s  success. 
End  users  were  also  key.  “We  tried  to 
leave  no  one  out,”  Lapointe  sa^. 

In  the  process,  TVA  was  able  to  elim- 


The  purpose  of  the  report,  in  addi¬ 
tion  to  providing  measurements,  was 
to  tap  into  the  natural  competitiveness 
among  Office  Depot  store  personnel 
Guzman  says.  “I  knew  it  was  successful 
when  I  went  to  a  store  in  New  York 
and  another  in  Paducah,  Ky.,  and  found 
the . . .  report  on  the  wall  of  the  em¬ 
ployee  break  room.” 

“The  visibility  is  what  drove  the 
stores'  acceptance,“  says  Gene  Alvarez, 
an  analyst  at  Meta  Group  Inc  in  Stam¬ 
ford.  Conn.  “Sometimes  data  ware¬ 
housing  can  be  ignored  by  the  stores 
unless  it  provides  direct  metrics  on 


www.coinput«rv«ortd.cofn 


limeEMEKT 


mmimu 


47 


inate  20  legacy  homegrown  and  third- 
party  af^iications,  integrate  32  others 
and  create  an  enterprisewide  system 
that  works  in  near  real  time.  Ittstead 
of  once-a-day  updates  generated 
from  the  nightly  batch  processes, 
users  can  now  see  TVA's  inventory 
across  all  its  locations  anytime. 

The  new  system  eitables  TVA  to 
make  corapanywide  volume  pur¬ 
chases  and  to  cut  the  price  of  main¬ 
taining  multiple  older  systems.  It 
will  also  allow  the  pruning  of  89 
positrons  through  attrition.  Addi¬ 
tionally,  TVA  installed  logistics  soft¬ 
ware  from  Manugistics  Inc.  in  Rock¬ 
ville.  Md.,  that  centralized  hs 
freighting  operation  and  reduced 
mileage  for  its  truck  fleet. 

Lapointe  says  there  was  extensive 
communication  between  the  IT  proj¬ 
ect  staff  and  users  throughout  the 
process.  The  final  rollout  was  kicked 
off  during  the  week  of  July  A.  when 
TVA's  activity  was  at  its  lowest 

In  the  new  architecture.  TVA  runs 
a  centralized  version  of  Indus'  Pass- 
Port  supply  chain  software,  which 
connects  to  17  copies  of  Indus'  En¬ 
terprise  Maintenance  Planning  and 
Control  (EMPAC)  asset  manage¬ 
ment  software.  An  integration  mod¬ 
ule  built  around  IBM's  MQSeries 
middleware  lets  the  two  sets  of  ap¬ 
plications  communicate. 

The  project  reipiired  loading 
400XK)0  catalog  hems  at  each 
EMPAC  she,  and  it  engaged  S.OOO 
end  users,  but  “overaU,  the  op¬ 
erating  side  of  the  company,  we  felt 
very  Ihtle  pain,”  says  Lapointe. 

“User  buy-in  is  a  criti^  success 
factor,”  says  Gartner  Inc.  analyst 
Karen  Peterson.  That  means  going 
beyond  the  project  team  to  every 
person  who  touches  the  applications 
being  rolled  out.  Project  teams  that 
ignore  this  critical  component  will 
most  likely  fail.”  I 


WIREIESS 
WEBBROWSER 
TIESSNIPPIN6 
DATA,  E-MAIL 

BY  BOB  BRCWIN 

NEW  TECHNOLOGY,  when  deployed 
in  the  field,  sometimes  doesn't  suc¬ 
ceed  until  users  find  a  simple  but 
pHSwerful  reason  to  embrace  it 
Thai's  what  William  L  Schmitt,  di¬ 
rector  of  business  enablement  at 
the  Dallas-based  Celanese  Chemi¬ 
cals  Ltd.  unit  of  Celanese  AG.  dis¬ 
covered  last  year. 

Schmitt  d^loped  a  mobile  Web 
interface  for  the  company's  Hew¬ 
lett-Packard  Ca  Pocket  PCs  that 
would  help  Us  25  U,S.-based  field 
salespeople  —  each  of  whom  is  re¬ 
sponsible  for  about  SlOO  millioo  in 


annual  sales  and  is 
usually  on  the  road 
—  access  shipping 
and  billing  data  on 
back-end  systems 
from  SAP  AG. 

With  the  help  of 
Clarkston  Consult¬ 
ing  in  Durham,  N.C.. 
Schmitt  developed 
an  easy-to-use.  text- 
based  Web  browser 
to  access  the  SAP 
data.  To  provide 
“always-oo”  and 
relatively  fast  data 
access.  Schmitt 
equipped  the  Pocket 
PCs  wireless 
data  cards  hooked 
up  to  Sprint  PCS 
Group's  nationwide 
Code  Division  Mul¬ 
tiple  Access  IXRTT  data  network, 
which  offers  average  data  speeds  of 
40K  to  60K  bit/^ec.  He  also  outfitted 
the  browser  with  built-in  links  de¬ 
signed  to  make  any  road  warrior's  life 
more  comfortable,  including  a  bote! 
and  restaurant  guide  and  mapping 
software. 

Despite  the  utility  of  the  new  appli¬ 
cations  on  the  Celanese  platform, 
called  Mobile  Chem  VIP.  Schmitt  says 
the  sales  force  didn’t  completely  buy  in 
until  he  devised  a  way  to  hook  the 
workers  into  the  company’s  Microsoft 
Exchange  mail  system  using  e-mail 
synchronization  software  from  Syn- 
chrologic  Inc.  in  Alpharetta.  Ga.  The 
sales  force  'is  addicted  to  e-mail”  be 
says,  and  relisbes  the  ability  to  d>eck 
messages  throughout  the  day  on  the 
Pocket  PCs. 

Alan  Reiter,  an  analyst  at  Wireless 
Internet  &  Mobile  Computing  in 
Chevy  Chase,  Md.  says  the  Celanese 
project  demonstrates  that  for  many 
mobile  workers,  e-mail  is  an  essential 
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tool  Companies  looking  to  equip  field 
woriiers  with  mobile  devices  shmld 
start  with  e-mail  because  *11*8  easy  to 
do  and  enormously  useful  and  every¬ 
one  knows  how  to  do  h.”  Reiter  says. 

But  once  a  company  has  experimeed 
the  power  of  wireless  e-mail  Reiter 
add^  it  should  move  on  to  other  appli¬ 
cations  that  further  empower  mobile 
workers.  Schmitt  says  that’s  exactly 
what  Mobile  Chem  VIP  does  for  tte 
sales  force.  For  example,  it  allows  a 
sale^rson  to  quickly  locate  for  a  cus¬ 
tomer  a  railroad  tank  car  with  a  ship¬ 
ment  of  chemicals. 

And  access  to  billing  information 
helps  the  sales  force  ^eed  up  pay¬ 
ments.  Schmitt  says.  Mobile  Chem  VIP 
allows  them  to  call  up  and  review  dis¬ 
puted  bills  during  a  sales  call  and  flx 
errors  on  the  q>ot.  cutting  down  the 
payment  cyde  time. 

TWenty-five  Celanese  oonsales  exec¬ 
utives  in  the  Dallas  office  now  use 
Pocket  PCs  ro  access  their  e-mail  whQc 
on  the  road.  Schmitt  says. 

He  says  development  costs  for  Mo¬ 
bile  Chem  VIP  were  rdatively  low  — 
ifoout  S30,000.  plus  SUOO  each  for  the 
Pocket  PCs.  Schmitt  says  be  cant  put 
an  exact  payback  figure  on  the  project, 
but  he  says  the  system  has  already  paid 
for  itself  ”with  just  one  incremental  or¬ 
der  for  a  tank  car  [of  checmcaU].”  I 


how  the  store  is  performing.” 

W'lth  any  major  new  IT  endeavor,  it's 
important  to  quickly  spot  and  some  | 

low-hanging  fiuit.  Guzman  says.  "With 
success  comes  freedom,"  he  says.  ”D^ 
wardxmses  are  kind  of  an  amorphous 
concept  to  the  business  leader.  But  if 
you  can  say,  ‘Do  you  remember  that 
project  we  did  with  cross-selling  oppor-  , 
amities.^  Then  they  can  say.  ‘Ah.  got  it*  * 
The  cross-seiling  project  paved  the 
way  for  Guzman  and  his  team  to  tackle  ^ 
more  difficult  projects  in  customer  re¬ 
lationship  management,  be  says.  I 
This  is  an  excellent  example  of  the  I 
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old  keep-it-simple  adage,”  Alvarez 
says.  "It  was  very  specifk,  very  mea- 
:  sursble  and  something  that  could  be 
put  in  at  a  predictable  cost” 

Guzman  is  iww  CIO  at  Owens  &  Mi¬ 
nor  Inc.,  a  Richmond,  V^-based  med¬ 
ical  supplies  distributor,  and  be  says  be 
is  applying  the  systems  and  team* 
building  Alik  learned  at  Ofilce  Depot 
in  hb  new  job.  Owens  &  Minor  is  im¬ 
plementing  the  next  genetation  of  its 
data  warehouse  technology.  Wisdom, 
by  linking  supply  chain  information 
with  clinical  u^onnation. 

Guzman  gives  hb  colleagues  equal 


credit  for  hb  accomplbhmentv  At  Of¬ 
fice  Depot,  for  example,  he  says  the 
project  couldn't  have  succeeded  with¬ 
out  leadership  from  the  executive  vice 
president  for  distribution,  who  brou^t 
dbdpline  and  focus;  tbe  marketing  vice 
president,  who  provided  sponsorship: 
and  the  executive  vice  preiddent  for 
stores,  who  enabled  its  execution. 

Guzman  says  the  Office  Depot  proj¬ 
ect  taught  him  a  key  lesson  in  bow  to 
make  an  IT  project  successful  ‘Make 
it  simple;  make  it  fiin:  make  it  measur¬ 
able;  make  it  happen.”  I 
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SECURITY  SETUP 
IDENTIHES 
AHACKSWITH 
MINUIAIDRAU 


SELF-SERVICE 
CHECK-IN  KlUSKS 
NVE  TRAVELERS 
MORECONTRUL 

BY  LINDA  nOSEHCNANCC 

FOR  TRAVELERS,  the  best  trips  are  fast 
and  hassle-free,  with  limited  time 
spent  at  the  airport 

That's  why  Atlanta-based  Delta  Air 
Lines  Inc.  teamed  up  with  its  technolo¬ 
gy  subsidiary.  Delta  Technology  Inc., 
to  deploy  hundreds  of  self-service 
check-in  kiosks  at  airports  across  the 
country,  with  a  goal  of  speeding  travel¬ 
ers  to  their  destinations. 

Mike  Childress,  senior  vice  presi¬ 
dent  of  development  at  Delta  Technol¬ 
ogy  and  the  project's  leader,  says  there 
are  now  449  kio^  installed  at  airports 
in  81  U,S.  cities.  The  kiosks  had  been 
part  of  E>elta's  multiyear  business  plan, 
but  when  airports  increased  security  in 
the  wake  of  the  Sept.  11  terrorist  at- 


BV  STEVE  ULFELOER 

AS  DiRECiTMt  of  global  information  se¬ 
curity  at  Pershing  LLC.  Warren  Axel¬ 
rod  is  acutely  concerned  with  risk.  Per¬ 
shing  acts  as  a  securities-trading  clear- 
inghotise  for  more  than  850  Hnancial 
institutions;  on  any  given  tradii^  day. 
h  handles  S%  of  the  New  York  Stock 
Exchange's  transactions. 

When  Axelrod's  team  decided  to  add 
an  intrusion-detection  system  (IDS)  to 
its  security  portfolio  last  year,  several 
fomiiiar  challenges  cioi^mmI  up.  Hrst, 
the  investment  would  have  to  be  justi¬ 
fied  to  senior  management  The  IT 


tacks  —  and  the  amount  of  time  custo¬ 
mers  spent  waiting  in  line  grew  longer 
—  the  airiine  decided  to  accelerate  the 
project  Delta  acknowledges  that  it  had 
been  trailing  some  other  carriers'  kiosk 
initiatives  before  Sept.  11. 

Rob  Maruster,  Delta  Air  Lines'  direc¬ 
tor  of  airport  strategy  and  service,  says 
the  kiosks  help  customers  shave  five  to 
15  minutes  off  the  time  they  have  to 
stand  in  line.  Passengers  can  use  the 
kiosks  to  check  in  for  their  flints,  get 
boarding  passes  for  originating  or  con¬ 
necting  flights,  select  or  change  seats, 
request  to  stand  by  for  an  upgrade, 
check  baggage,  change  f%hts  and  initi¬ 
ate  multiparty  check-in. 

This  year.  Delta  plans  to  add  mote 


unit  would  then 
have  to  evaluate 
IDS  products  in  a 
^Ming,  fost-chang- 
ing  field.  And  once 
a  product  was  cho¬ 
sen.  it  would  have 
to  be  installed  in  a 
pressure-packed, 
high-volume  envi¬ 
ronment  that  left  little  room  for  error. 

Axelrod  succeeded  on  all  fronts  with 
a  project  that  lasted  eight  months. 

When  studying  the  available  IDS  of¬ 
ferings,  Pershing  placed  a  high  priority 
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Than  400  kiosks  and  enhance  function¬ 
ality  to  include  intemational  (dteck-in 
and  fee  collection.  \A^th  this  cbai^ 


on  minimiring  drag  on  network  per¬ 
formance.  That  was  a  critical  fector  in 
sifting  through  the  different  types  of 
systems.  For  example,  network-based 
systems,  usually  composed  of  either  a 
stand-alone  appliance  or  software  on  a 
dedicated  server,  scale  well  and  have 
little  effect  on  performance  '‘because 
they're  just  a  bump  on  the  wire,”  says 
Pete  Lindstrom,  a  sectrrity  airalyst  at 
Spite  Security  LLC  in  Malvern,  Pa. 

A  host-based  IDS  is  likely  to  use  an 
agent  —  an  active  program  on  a  host 
that  monitors  activity  on  a  particular 
port  Internal  testing  at  Pershing  found 
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Delta  will  offer  customers  more  than 
800  kiosks  in  airports  nationwide. 

“From  the  business  side,  the  kiosks 
are  the  cornerstone  of  a  broader  air¬ 
port  strat^y  to  offer  customers 
more  control*  Maruster  says. 

Since  the  proiect  was  launched  in 
November  2001.  the  airline  has  spent 
$5  million  to  S7  million  on  customer- 
service  initiatives,  including  the 
kiosks,  be  says.  Maruster  says  the 
payback  has  been  enormous,  but  he 
declines  to  0ve  financial  details. 

Delta  checked  in  approximately 
1  million  travelers  via  the  kiosks  in 
October  and  L4  million  in  January. 
“For  2002,  our  goal  was  to  check  in 
S  million  customers,  but  we  actually 
checked  in  7.4  million,  and  we‘re  on 
track  to  check  in  13  million  to  14  mil¬ 
lion  people  this  year.”  Maruster  says. 

Delta  Technology  purchased  its 
kiosks  from  Kinetics  USA  in  Lake 
Mary.  Fla.  Childress  says  an  internal 
application-development  team  inte¬ 
grated  the  kiosk  functioDality  with 
Delta’s  Distal  Nervous  System,  the 
network  that  communicates  with 
every  part  of  the  Delta  organization 

“Last  year  we  deployed  over  300 
kiosks  in  81  cities.”  Childress  says. 
“From  start  to  finish,  h  took  six 
months,  and  we  were  checking  in 
half  a  million  people  per  month.  We 
wouldn't  have  been  able  to  do  it 
without  the  infrastrucnure.*' 

Childress  says  he  leanred  how  im¬ 
portant  it  is  to  have  the  application 
aiKl  business  teams  work  together. 
“Having  a  team  that  knows  what 
they  want  to  achieve  &om  a  strata 
and  busiiress  perspective  eiubles  the 
technology  team  to  drive  a  solution 
as  soon  as  possible.*  be  says. 

“If  s  a  go^  option  for  custoroers.*' 
says  Lorraine  SUeo,  an  analyst  at  Pho- 
Cus  Wright  Inc.  in  Shermaa  Conn. 
“Passengers  can  wait  in  line  if  they 
want  to,  but  now  they  don't  have  to."  I 


PALM  ROLLOUT 
6ETS  STUDENTS 
0R6ANIZED 

■V  MATT  HAMM.SM 

A  TWO-YEAB  ROUOUT  of  2.500  Palm 
Inc  handheld  devices  to  students  at 
the  University  of  South  Dakota  in 
Vermillion  has  been  a  teaming  ex¬ 
perience  all  around  —  for  students, 
administrators  aiKl  the  IT  staff. 

The  project  was  lauxkched  in  the 
fall  of 2001  with  1,500  freshmen  and 
first-year  medical  and  law  students 
participating.  The  students  were 
required  to  pay  S12S,  or  about  otre- 
third  of  the  Palm's  cost,  for  either 
an  mSOO  or  m50S  model  The  pro¬ 
gram  resumed  last  foil  for  the  same 
classes,  with  the  addition  of  more 
server  software  that  allows  students 
to  quickly  synchronize  to  course  in¬ 
formation  via  infrared  ports  at  45 
poiius  on  campus. 

CIO  Roberta  Anfour,  who  led  the 
project,  puts  oogoing  costs  at  more 
than  SIOOXKK).  That  figure  doesn't 
include  the  hardware,  whkh  was 
partly  funded  through  a  foundatioQ 
graru.  While  Ambur  says  it^  too  ear¬ 
ly  to  Judge  the  return  on  investment, 
the  projecfs  goals  were  to  help  re¬ 
tain  students  through  graduation 
and  aid  them  in  becoming  more  or¬ 
ganized  and  ei^aged.  university 
has  won  rational  attention  in  acade¬ 
mic  circles  for  the  prefect 

*lt  certainly  has  raised  our  pro- 
rrle,”  says  Don  Dahlm.  vice  presi¬ 
dent  of  academic  affairs. 

But  while  the  Palm-based  appli- 
catioos  have  been  valuable  to  first- 
year  medical  and  taw  students,  the 
rollout  hasn’t  been  a  hit  with  many 
freshmen,  who  in  their  first  year  on 
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campus  are  taxed  enou^  with  findmg 
the  quickest  way  to  class,  university  of¬ 
ficials  say.  Many  see  a  handheld  as  an 
added  burden. 

Dahlin  cockcedes  that  the  school  may 
have  roUed  out  the  program  “a  little 
too  boldly.*  eq>edally  to  fteshmen.  But 
be  adds,  “It  is  sometimes  the  Job  of  an 
academic  instituiion  to  do  some  bold 
things.* 

“We're  all  sonu*- 
whai  skeptical  still 
about  the  overall 
value  of  the  pro¬ 
gram,*  adds  Ambur. 
She  and  others  have 
been  disappointed 
by  the  foi^  of  off- 
tte-shelf  academic 
programs  that  can 
be  loaded  onto  the 
Palm  devices,  even 
thoti^  the  handheld  maker  and  ana¬ 
lysts  say  that  there  are  many  tools 
available  related  to  academia. 

Ambur  and  other  school  offkials 
want  to  budget  for  an  ort-campus  {no- 
giammer  to  write  software  that  would 
expand  the  devices'  use  well  beyond 
their  function  as  penorol  organizers. 

One  area  of  programming  that  has 
encouraging  possibilities  has  been  de¬ 


veloped  by  Doug  Peterson,  an  assistant 
pfofossor  of  psychology.  He  has  used 
freeware  called  QuizApp  to  enable 
students  to  quiz  themselves  on  topics 
that  will  appear  on  upcoming  Psydiot- 
ogy  101  tests. 

Peterson  says  that  he  has  rtoted  a 
small  increase  in  lest  achievement  by 
students  who  have  studied  using  Quiz¬ 
App  but  that  it's  too  soon  to  know 
whether  overall  teaming  is  significant- 
ly  improved  through  use  of  the  devices. 
“I  was  oveiiy  optinustk  [about]  bow 
quickly  fteshmen  students  would  buy 
in.*  he  says.  *lt  scared  half  of  them,  and 
others  said  h  wasn't  worth  their  time.” 

In  addition  to  hiring  a  programmer. 
Dahlin  says,  be  wants  the  university  to 
institute  some  ample  applications  for 
use  in  required  freshman  classes  to 
“make  the  students  more  dependent 
on  the  devices.* 

One  student,  Aaron  Roseland.  has 
used  hb  Palm  for  checking  course 
syllabuses,  raking  notes,  keeping  ap- 
pointmencs  and  getting  alarms  one 
week  before  a  big  test.  He  says  be  ex¬ 
pects  the  rollout  to  inqiroTe  with  the 
additioQ  of  more  course-spec^ic  pro¬ 
grams.  atid  be  blames  Midwestern 
skepticism  as  one  reason  for  the  slow 
adoption  by  fteshmen. 

Administratofs  say  the  medical  stu¬ 
dents  have  bad  a  better  experience  be¬ 
cause  there  b  more  handheld  use  in 
the  health  care  field  in  general  and 
more  widely  used  software,  such  as  a 
drug  interaction  guide. 

A  number  of  schools  nationwide 
have  instituted  handheld  rollouts,  and 
the  most  successful  deploymeius  re¬ 
late  course  material  directly  to  a  pro¬ 
gram  that  runs  on  the  devi^  says 
Todd  Kort,  an  analyst  at  Gartner  Inc.  in 
Stamford,  Conn.  “If  you  have  a  com¬ 
puter  science  course  and  the  professor 
has  developed  courseware  directly  us¬ 
ing  the  PDA.  then  you  see  some  real 
value,*  he  says.  8 


that  systems  using  agents  increased 
latency,  so  the  finn  narrowed  its  candi¬ 
dates  to  nonagent  IDSs.  “That  was  a 
logical  way  for  us  to  start  organizing 
our  choices,*  says  Michael  Gergel  a 
Pershing  IT  mce  president 
Axelrod  won't  say  vdiidi  IDS  was  se¬ 
lected  or  confirm  that  the  system  is 
host-based.  That’s  a  sound  approach  to  I 
security,  says  Undstrom.  because  “each  [ 
system  has  its  own  vulnerabilities,  and 
enterprises  don’t  want  to  advertise 
^rikere  their  weak  points  may  be.* 
Pershing  does  say  that  k  uses  Net¬ 
work  Security  Manager  4X>  ftom  Intel- 
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Location;  Jorasy  Cky,  NJ. 
Web;i 

Proiect  leader  V 
Business:  ProvH 


2002  customer  assets; 

S400Ufai 

Size  of  IT  department:  1.700 


Utaetks  like,  in  Betbesda,  Md..  as  an 
Obermonitor  of  its  IDS.  One  of  a  new 
class  of  tools  often  referred  to  as  secti- 
rity  event  managers,  the  product  “re¬ 
ceives  intrusioo  data  and  alerts  ftom 
I  our  netwoik  intruxioo-detection  sys¬ 
tem  components  running  on  the  net¬ 
work  and  system  logs  directly  ftom  the 
host  servers,  and  interprets  the  mes- 
based  on  a  previously  entered  set 
of  rules,*  Axelrod  says,  tit]  looks  for 
patterns,  which  k  displays  graphically, 
mairing  for  easier  and  quicker  determi- 
naboQ  of  problems.* 

When  aded  bow  many  mazk-houn  the 


new  IDS  saves  Pershiog.  Axelrod  pauses 
and  then  says.  “U's  ckot  a  nutter  of  sav - 
ing  people;  it's  a  matter  of  bener  usii^ 
the  people  you  have.  This  system  puts 
together  patterns  rapidly  in  a  way  the 
average  human  miikd  can't  and  shows 
it  in  a  graphical  way.*  That's  invaluable 
in  today's  intruskm-decectioo  environ* 
ment.  where  the  tou^iest  challeoge  isi't 
sensing  data,  but  making  sense  of  U.  I 
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1  ]  WIN  WITH  STORAGE  MANAGEMENT:  Information  is  growing 
exponentially.  To  efficiently  run  your  business,  you  need  powerful 
tools  to  understand  and  manage  your  storage  environment. 

2]  WIN  WITH  TIVOLI;  Tivoli  Storage  Resource  Management  Solutions 
are  open,  easy  to  deploy  and  self-optimizing.  For  improved 
utilization,  easier  administration  and  better  ROI.  Tivoli.  Part  of 
our  software  portfolio  including  062,*  Lotus*  and  WebSphereT 

3]  MAKE  THE  PLAY;  1b  find  a  Tivoli  Business  Partner  or  to  learn 
more,  visit  ftm.coni/tivoii/partners 
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the  developers’  Holy 
Grail  as  possible. 
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APPUCATION 
FRAMEWORK 
ALLOWS  EASY 
PORTAL  ACCESS 

•V  jamuMaji  vuavAN 

GE  POWER  SYSTEMS*  Parts  Edge  por¬ 
tal  site  is  an  online  resource  that  lets 
GE  Power’s  customers  purchase 
parts  from  the  company  while  giving 
them  a  single  interfrux  to  its  many 
business  units  and  partners. 

One  of  the  biggest  challenges  the 
Schenectady.  N.Y -based  company 
freed  when  building  the  portal  was 
finding  a  way  to  share  data  across 
disparate  legacy  systems,  enterprise 
resource  planning  (ERP)  software 
and  Web-based  applications. 

The  company,  a  subsidiary  of  Gen¬ 
eral  Electric  COn  “had  systems  that 
bad  been  built  in  silos  that  were  not 
conunuiucating”  with  one  another, 
recalls  Alan  Boehme.  former  e-tedi- 
nology  CIO  at  GE  Power  and  now 
CIO  at  Best  Software  Inc 

“The  objective  was  to  provide  a 
seamless  method  for  the  selection  of 
parts  and  service,  with  informatioD 
being  able  to  come  Into  the  system 
throu^  multiple  means,  such  as 
Web  browsers,  EDI  [dectrooic  data 
interchange],  XKCL  exchanges  or  an 
ERP  system.”  be  says. 

To  address  the  issue.  GE  Power  de¬ 
cided  to  build  Parts  Edge  on  a  Web- 
servkes-enabled  applkation  frame¬ 
work  based  on  )ava  2  Enterprise  Edi- 
don  02EE).  The  framewoik  lets  GE 
developers  use  a  slew  of  Java  exten¬ 


sions  and  XML  to  promote  interop- 
erabiiity  and  integration  among  the 
various  third-party  ai^Ucations  that 
form  the  core  of  Parts  Edge. 

Using  the  J2EE  framewori:  also  en¬ 
sured  that  Pans  Edge  could  be  ac¬ 
cessed  through  various  means, 
including  busioess-to-business  con¬ 
nections.  EDI  and  browser  interfrees. 
And  it  allowed  GE  Power  to  more 
easily  tie  Parts  Edge  back  to  the  com¬ 
pany's  core  Oracle  ERP  system  as 
well  as  other  legacy  applic^cms. 

Parts  Edge  is  the  largest  of  60  or  so 
applications  that  are  supponed  by 
OS's  J2EE-ba$ed  ^pUcadon  devel¬ 
opment  framewo^  iriiich  is  known 
internally  as  Casper.  Developed  to 
prevent  vendor  kxdc-in  and  preserve 
existing  legacy  investments,  Casper 
has  delivered  several  benefits  for  GE 
developers,  Boehme  says. 

Among  them  are  increased  pona- 
bility  of  applicadons  across  nmldple 
operadi^  systems,  application 
servers  and  hardware;  reusable  busi¬ 
ness.  application  and  legacy  system 
business  logic;  a  common  presenta- 
don  layer  for  disparate  systems;  and 
reduc^  costs  and  cyde  times  for 
developn>ent  and  upgrades.  For  in¬ 
stance.  an  application  that  normally 
would  have  taken  U  developers  14 
weeks  to  finish  was  completed  by  12 
developers  in  six  weeks  using  an  up¬ 
dated  version  of  Casper. 

Reuse  of  source  code  and  of  com¬ 
ponents  such  as  Java  classes  and  En¬ 
terprise  JavaBeans  has  also  reduced 
dewlc^ment  tlmf  and  efibrt.  For  in¬ 
stance.  by  adding  only  691  lines  of 
extra  code,  GE  Power  was  able  to 
spin  out  a  new  application  with  func¬ 
tionality  similar  to  that  of  anMber 
ai^licadon  that  had  taken  72  man- 
weeks  to  complete,  Boehme  says. 

When  putting  together  such  a 
framework,  don't  underestimate  the 
time  it  takes  to  do  the  functional 
analysis,  Bodime  says.  ”Y6u  need  to 
spend  the  rig^t  amount  of  time  to 
analyze  the  business  processes  and 
the  interfrees  to  do  t^  technical  de¬ 
sign.”  be  says. 

Application  architectures  built 
around  the  concepts  of  service,  de¬ 
sign  and  component  reuse,  such  as 
GE  Power’s,  can  yield  benefits  that 
extend  for  several  years,  says  Daryl 
Plummer,  an  analyst  at  Gartner  Inc. 

“But  the  technology  and  culture 
that  go  with  it  are  bo^  difticult  to 
deal  with,”  Phimmer  cautions.  ”It 
generally  takes  more  planning,  more 
discipline  and  nxm  technology 
skill”  to  implement  such  service- 
oriented  application  frameworks.  I 
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Are  you  equipped  with  the  best  storage 
solutions  for  your  business?  Ask  one  ol 
these  IBM  Business  Partners.  They  have 
Tivoli  Storage  Resource  Management 
Solutions  and  the  expertise  to  go  with 
them.  For  more  information  on  SRM 
or  to  find  more  Business  Partners  to 
help  you  optimts  your  business,  visit 
■mkcotn/ltvoli/partners 
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Virtualization 

to  wait  until  next  January  to 
get  off  of  NT. 

“If  they  came  out  tomorrow 
with  it.  I’d  buy  it  and  evaluate 
it  right  away,  because  h  solves 
my  problem  of  trying  to  at 
least  oottsotidate  testing  envi¬ 
ronments,”  Pane  said. 

Diane  Greene,  CEO  of 
VMware,  acknowl¬ 
edged  that  Microsoft 
had  approached  her 
company  and  that 
there  were  some  dis- 
cussions,  but  they  didn't  come 
to  an  ^reement.  She  said 
VMware  already  has  thou¬ 
sands  of  customeis.  adding 
that  Microsoft’s  acquisition  of 
ConnecUx  “just  amplifies  our 
focus  on  delivering  and  con¬ 
tinuing  with  our  innovation 
and  quality  and  providing  full 
choice  for  our  customers.” 

“It’s  a  pretty  large  market.” 
Greene  said. 

Tony  Adams,  a  technology 
analyst  at  JJL  Simplot  Co.  in 
Boise.  Idaho,  said  hb  company 
pared  30  physical  servers  to 


five  boxes  running  VMware's 
GSX  software  during  the  past 
eight  months.  That  move 
helped  the  company  reduce 
the  time  needed  to  purchase, 
configure  and  deploy  a  server 
ftom  two  weeks  to  a  couple  of 
hours,  according  to  Adams. 

The  company  was  so  happy 
with  the  consolidation  project 
that  it's  now  planning  to  de¬ 
ploy  15  to  20  physical  servers 
running  VMware  software  for 
new  applications. 

Adams  has  seen 
Connectix.  but  he 
said  Microsoft 
‘Wvould  really  have  to 
do  a  much  better  job  to  win  us 
over,”  since  VMware  has  been 
a  great  fiL  Plus,  Adams  said,  he 
runs  VMware’s  GSX  software 
on  Linux  ~  something  he 
wouldn’t  be  aUe  to  do  with  the 
new  Microsoft  product 
Alejandro  Bombaci  CIO  at 
Empresas  Polar,  a  consumer 
goods  manufacturer  and  dis¬ 
tributor  in  Caracas,  Venezuela, 
said  he  would  prefer  to  see 
hardware  makers  or  third  par¬ 
ties  provide  the  virtual  ma¬ 
chine  functio&ality.  *so  there 
will  be  more  independence  on 


the  support  for  each  operating 
system  under  the  partitioning 
software.” 

Despite  those  sentiments, 
some  analysts  said  they  antici¬ 
pate  that  many  users  will  be 
more  comfortable  going  with 
Microsoft’s  virtual  machine 
software. 

“You  really  want  one  vendor 
to  deal  with  when  you’re  deal¬ 
ing  with  operating  systems,” 
said  Rob  Enderle,  an  analyst  at 
Cambrid^  Mass.-based  Giga 
Information  Group  Inc  nus. 
Enderle  said,  be  expects  Mi¬ 
crosoft  to  eventually  build  the 
virtual  machine  software  into 
its  operating  system  “to  the 
point  where  tl^re  almost 
giving  the  stuff  away.” 

Hebert  said  that  over  rime, 
the  product  mi^t  be  included 
with  the  operating  system. 
VirtxulizatioD  software  has  be¬ 
come  an  increasing  pc^nilar 
cortsideratioD  for  Microsoft 
users  coping  with  the  problem 
of  Windows  server  sprawl, 
since  the  software  can  help 
them  reduce  hardware  ex¬ 
penses  and  operating  costs. 

“We  were  hearii^  from  ctu- 
tomers  that  getting  a  support¬ 


able  virtual  machine  solution 
from  Microsoft  would  be  an 
attractive  thing,”  Hebert  said. 

NT  Server  users  often  run  a 
single  application  on  each  of 
their  Windows  servers,  either 
because  software  vendors  re¬ 
quire  it  or  because  they  worry 
that  problems  with  or  changes 
to  an  ^>plicatioii  will  cause 
others  to  crash. 

Hebert  noted  that  as  a  re¬ 
sult.  much  of  the  hardware 
running  Windows  NT  Server 
4.0  has  gone  underutilized.  Yet 


because  the  hardware  is  near¬ 
ing  the  end  of  depreciation 
schedules,  some  customers 
want  to  replace  It,  be  s^. 

Rather  than  moving  Win¬ 
dows  NT  applicatioDS  onto 
new  hardw^  that  will  be  even 
more  severely  underutilized, 
the  user  can  move  it  to  new. 
(aaer  hardware  running  the 
Virtual  Server  produa,  Hebert 
said.  That  would  let  several 
Windows  NT  servers  be  con¬ 
solidated  on  a  single  box. 

And  there’s  an  added  bene¬ 
fit  for  Microsoft  Hebert  iwted 
that  the  Virtual  Server  soft¬ 
ware  requires  ia  own  under¬ 
lying  operating  system,  and 
Microsoft  hopes  customers 
will  choose  to  run  the  Virtual 
Server  software  on  Windows 
Server  2003,  due  in  April 

But  not  every  company  will 
be  rushing  to  do  Windows 
server  consolidatioa  Jim  Pre- 
vo.  CIO  at  Green  Mountain 
Coffee  Roasters  Inc.  in  Water- 
bury,  Vt,  said  companies  pay  a 
premium  for  the  Imger  serv¬ 
ers.  Plus,  be  said  be  wmild 
rather  have  less  functionality 
off-line  if  a  server  crazies  or 
needs  to  be  taken  down  for  an 
af^lication  upgrade. 

Rick  Stiegler,  chief  tedmol- 
ogy  officer  at  Lending  Tree 
Inc.  in  Chariotte,  HC..  said  hb 
company’s  applicatfons  per¬ 
form  better  on  two-way  serv¬ 
ers  than  larger  four-CPU  box¬ 
es,  so  consolidatioD  isn't  in  hb 
company’s  plans.  I 
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Virtualization 

to  wait  untU  next  January  to 
get  off  of  NT. 

“If  they  came  out  tomorrow 
with  it.  I'd  buy  it  and  evaluate 
it  right  away,  because  it  solves 
my  problem  of  trying  to  at 
least  consolidate  testing  envi¬ 
ronments."  Pane  said. 

Diane  Greene,  CEO  of 

VMware.  acknowl-  - 

edged  that  Microsoft 
had  approached  her 
company  and  that 
there  were  some  dis¬ 
cussions.  but  they  didn't  come 
to  an  agreement.  She  said 
VMware  already  has  thou¬ 
sands  of  customers,  adding 
that  Microsoft's  acquisition  of 
Connectix  "just  amplifies  our 
focus  on  delivering  and  con¬ 
tinuing  with  our  innovation 
and  quality  and  providing  full 
choice  for  our  customers." 

"It’s  a  prett>’  large  market." 
Greene  said. 

Tony  Adams,  a  technology 
analyst  at  |.R.  Simpiot  Co.  in 
Boise,  Idaho,  said  his  company 
pared  30  physical  ser\-ers  to 


five  boxes  running  VMware 's 
GSX  software  during  the  past 
eight  months.  That  move 
helped  the  company  reduce 
the  time  needed  to  purchase, 
configure  and  deploy  a  sen  er 
from  two  weeks  to  a  couple  of 
hours,  according  to  Adams 
The  company  was  so  happy 
with  the  consolidation  project 
that  it’s  now  planning  to  de¬ 
ploy  15  to  20  physical  sers'ers 
running  V'Mware  software  for 
—  —  new  applications. 

Adams  has  seen 
Connectix,  but  he 
said  Microsoft 
“would  really  hat  e  to 
do  a  much  better  job  to  win  us 
over."  since  VMware  has  been 
a  great  fit.  Plus,  Adams  said,  he 
runs  VMware's  GSX  software 
on  Linux  —  something  he 
wouldn’t  be  able  to  do  with  the 
new  Microsoft  product. 

Alejandro  Bombaci.  CIO  at 
Empresas  Polar,  a  consumer 
goods  manufacturer  and  dis¬ 
tributor  in  Caracas.  Venezuela, 
said  he  would  prefer  to  see 
hardware  makers  or  third  par¬ 
ties  provide  the  virtual  ma¬ 
chine  functionality,  "so  there 
will  be  more  independence  on 


the  support  for  each  operating 
system  under  the  partitioning 
software." 

Despite  those  sentiments, 
some  analysts  said  they  antici¬ 
pate  that  many  users  will  be 
more  comfortable  going  with 
Microsoft’s  virtual  machine 
software. 

“You  really  want  one  vendor 
to  deal  with  when  you’re  deal¬ 
ing  with  operating  systems," 
said  Rob  Enderle.  an  analyst  at 
Cambridge.  Mass.-based  Giga 
Information  Group  Inc.  Plus. 
Enderle  said,  he  expects  Mi¬ 
crosoft  to  eventually  build  the 
virtual  machine  software  into 
its  operating  system  “to  the 
point  where  they’re  almost 
giving  the  stuff  away." 

Hebert  said  that  over  time, 
the  product  might  be  included 
with  the  operating  system. 
Virtualization  software  has  be¬ 
come  an  increasingly  popular 
consideration  for  Microsoft 
users  coping  with  the  problem 
of  Windows  server  sprawl, 
since  the  software  can  help 
them  reduce  hardware  ex¬ 
penses  and  operating  cost.s. 

"We  were  hearing  from  cus¬ 
tomers  that  gelling  a  support- 
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able  virtual  machine  solution 
from  Microsoft  would  be  an 
attraaive  thing,"  Hebert  said. 

NT  Server  users  often  run  a 
single  application  on  each  of 
their  Windows  servers,  eitiwr 
becau.se  software  vendors  re¬ 
quire  it  or  because  they  worry 
that  pn>blems  with  or  changes 
to  an  application  will  cause 
others  to  crash. 

Hebert  noted  that  as  a  re¬ 
sult.  much  of  the  hardware 
running  Windows  NT  Server 
4i)  has  gone  underutilized-  Yet 
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Micnisofl  last  wsek  acquired  hw 
estabNshad  dtorN  products  fro^ 
priMMy  held  Conradix.  in  addh 
Son  to  ^  beta  version  o(  the  San 
Matao.  CaM.-basad  convany's 
Virtual  Server  softvMie. 

The  Virtual  PC  for  WMotoS 
software  lets  users  tun  trUbple 
PC-faBB8d  operriinQ  systems  and 
appicalions  sbnulaneousty  on  a 
sirii^  workstetioa 
Jm  Hebert  oanaral  manager 
of  Mcroeoffs  Windows  server 
product  managemenl  group,  said 
a  typical  Bcenaiio  for  VMuai  PC 
for  WlrKfows  inigM  tevotee  a  user 
who  has  upgraded  to  Wndows 
XPyetvnntilorunanolderap- 
plcalonbteNforWrKkM69Sor 
96.  WRh  the  Viilual  PC  aoftwwB. 
ttieusercouldiuntheotderappi- 
cation  and  ftie  older  undarlyfng 


operating  system  on  the  new  PC. 
Hebert  said. 

Connedix's  Vbtuai  PC  tor  Mac. 
through  softeeie  emutelion  of  the 
Intel  chip  set  and  other  herdwere 
componentSk  enables  Apple 
Computer  lnc.‘s  MacMosh  com- 
puterstonmVMndoMQepplica- 
bons.  access  PC  natwodts  and 
share  lies  wflh  PC  users. 

Hebert  said  lul  in  adMon  to 
the  three  Connects  software 
products,  Mforosoft  abo  acquired 
he  company's  engheatino  and 
support  teams.  He  added  that 
MIooboA  his  no  plans  to  change 
any  of  he  foncbonallly  of  the 
Comac&i  producte.  ^  he  dd 
notehtetheVIrtUBfServersoft- 
waie  midM  avenlualy  be  bui  Mo 
the  Windows  eeiver  operating 
system  and  hd  produd  names 


miglii  change  at  soma  poM. 

Microaoft  wi  compiate  final 
devefopmanl.tastinoandcertifi- 
catttn  of  Virtual  Server  and  pro¬ 
vide  support  for  easteig  testers 
of  he  produd.  The  Connectix 
beta  is  cfoaed  to  new  appicants, 
but  Mcmeoft  plans  to  Mnxiuce  a 
Virtual  Server  preview  rteaise  on 
AfMCvtelsVMislle. 

Tom  Bftbnan  an  analyst  at 
Gartner  Inc.  in  Stamford.  CorwL. 
said  he  Cormedh  Virtual  Server 
softwaredroveheMIcrDaoftac' 
quBlion.  But  he  said.  aHhouiy) 
Mtcrosoftseeapaittltoiiinoasa 
heipfultooltoruaeradoinQrTigrB- 
tions,  he  hMs  Mforosoft  sees 
worMoad  management  as  ante 
enportant  strategcaly. 

hbcfosott  vii  ship  its  Windowa 
Systems  Resource  Manager 


(WSRMX  which  tifows  usan  to 
alocale  processing  power  anj 
inemory  tor  applications  that  nm 
on  the  same  copy  of  Windows,  as 
a  separate  CO  wNh  Windows 
S«ver2003. 

"WSRM  Is  realy  at  he  center 
of  heir  conscAdafion  strategy.* 
Bittmanaaid. 

Attnugh  anafysts  said  he 
ComedK  server  software  was 
thedrtverforthaMforasofiaoqw- 
tilioa  he  (Aant  piece  may  gtin 
soma  corporate  Iradlon.  Done 
Graane.  CEO  of  rtMf  VIhvare. 
said  Mani  Ufneh  A  Co.  has  more 
llMn20.0008atesofhercompe- 
ny’s  workstation  produd  so  ttM 
ueetscanruntwodherenllla' 
wrs  of  Windows  far  apptcation 


because  the  hardware  Is  near- 
irrg  the  end  of  depreciation 
schedules,  some  customers 
M-ant  to  replace  il.  he  said. 

Rather  than  moving  Win¬ 
dows  NT  applications  onto 
new  hardware  that  will  be  even 
more  seserety  underutilized, 
the  user  can  move  it  to  new. 
faster  hardware  running  the 
Virtual  Server  product.  Hebert 
!  said.  That  would  let  several 
Windows  NT  servers  be  con¬ 
solidated  on  a  single  box. 

I  And  there’s  an  added  bene¬ 
fit  for  Microsoft.  Hebert  noted 
that  the  Virtual  Server  soft- 
w-are  requires  its  under¬ 
lying  operating  system,  and 
Microsoft  hopes  customers 
>  will  choose  to  run  the  Virtual 
Server  software  on  Window's 
Server  200.3,  due  in  April. 

But  not  O'cry  compam-  will 
he  rushing  in  do  Windows 
serx'cr  consolidation.  Jim  IVe- 
vo.  CIO  at  Green  Mounuin 
I  Coffee  Roasters  Inc.  in  Water- 
bury.  Vt..  said  companies  pay  a 
premium  for  the  larger  serv¬ 
ers.  Plus,  he  said  he  would 
rather  have  less  functionality 
off-line  if  a  server  crashes  or 
needs  to  be  taken  down  for  an 
application  upgrade. 

Rick  Stiegicr.  chief  technol¬ 
ogy  offkcr  at  Lending  Tree 
i  Inc.  in  Charlotte.  N.C..  said  his 
company’s  applications  per¬ 
form  better  on  two-way  serv¬ 
ers  than  larger  four-CPU  box¬ 
es.  so  consolidation  isn’t  in  hb 
company’s  plans.  I 
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FRANK  HAYES  «  FRANKLY  SPEAKING 

Which  Microsoft? 

Dave  stutz  likes  Microsoft  Windows  —  he  thinks  it 
“makes  a  hell  of  a  good  client."  But  Stutz  also  believes 
that  if  Windows,  Office  and  other  Microsoft  products 
remain  PC-centric,  they’re  in  trouble.  “The  biggest  op¬ 
portunity  is  no  longer  the  client,”  he  writes.  “Net¬ 
worked  software  will  eventually  eclipse  client-only  software If 

the  PC  is  all  that  the  future  holds,  then  growth  prospects  are  bleak.” 

That’s  what  Stutz  told  his  fellow  Microsoft  employees  in  the 
memo  he  sent  out  just  before  he  left  the  company  on  Feb.  7  (see 
story,  page  12).  But  it’s  not  what  he  said  that  should  worry  us. 

It’s  what  he  didn’t  quite  say. 


Stuiz  is  a  true  believer.  He  spent  more  than  a 
decade  at  Microsoft,  most  recently  as  the  guy  in 
charge  of  Microsoft’s  “shared  source”  projects. 
Before  that  he  spent  time  as  the  architect  for 
Visual  Basic  and  as  a  member  of  the  Microsoft 
technical  strategy  brain  trust. 

So  when  he  says  Microsoft  “must  survive  and 
prosper  by  learning  from  the  open  source  soft¬ 
ware  movement  and  by  borrow  ing  from  and 
improving  its  techniques."  that’s  pretty  much 
guaranteed  to  grab  attention  —  and  it  has,  (You 
can  read  an  edited  version  of  Stutz’s  parting 
shot  on  his  Web  site  at  www,synf/!esjsf.net.> 

What  won't  get  as  much  attention  are  the 
things  he  edges  around.  Stutz  doesn't  come 
right  out  and  talk  about  the  state  of  Microsoft. 
He  puts  his  concerns  in  the  form  of  predictions 
and  warnings,  which  make  them  sound  innocu¬ 
ous  enough.  After  all.  they  haven't  actually  hap¬ 
pened  yet.  right? 

But  we  know  from  e.vpcrience  that  an  insid¬ 
er's  predictions  in  this  industry  often  aren't 
predictions  —  they're  thinly  veiled  descriptions 
of  things  that  are  already  going  on. 

So  when  Stutz  suggests  that  the 
next  few’  years  could  “have  the  side- 
effect  of  changing  Microsoft  into  a 
place  where  creative  managers  and 
accountants,  rather  than  visionaries, 
will  call  the  shots.”  is  he  predicting 
—  or  describing? 

When  he  says  that  “digging  in 
against  open  source  commoditiza¬ 
tion  w’on't  work"  and  argues  that 
"any  move  towards  cutting  off  alter¬ 
natives  by  limiting  interoperability 
t>r  integration  options  would  be 
fraught  with  danger,"  is  he  warning 
against  possible  Microsoft  strate¬ 


wwtf's  tenlof  nm  cotam- 
otsl.  coverad  (T  (or  note 
rtwn  20  yoars.  (krntacl  him  at 


gies  or  just  pointing  out  the  way  things  are? 

When  he  warns  that  “Microsoft  cannot  pros¬ 
per  during  the  open  source  wave  as  an  island, 
with  a  defense  built  out  of  litigation  and  propri¬ 
etary  protocols,"  is  he  sketching  a  possible  to¬ 
morrow  or  spelling  out  today’s  reality? 

These  arc  words  that  should  worry  corporate 
IT  people.  The  Microsoft  that  Stutz  is  not- 
quite-describing  isn't  a  software  vendor  that 
can  help  us  succeed.  This  is  Fortress  Microsoft, 
hunkered  down  with  a  siege  mentality  and  at 
war  not  just  with  competitors  but  also  with 
what  customers  need. 

Never  mind  whether  Microsoft  "embraces 
the  diversity  of  the  open  source  approach."  as 
Stutz  suggests  it  should.  A  Microsoft  that  has 
shifted  into  fortress  mode  won't  help  us  solve 
our  IT  and  business  problems.  A  Microsoft 
that’s  focused  on  limiting  our  integration  op¬ 
tions  wilt  make  it  harder,  not  easier,  to  keep 
things  working  together. 

A  Microsoft  armoring  itself  with  litigation 
and  proprietary  protocols  is  worse  than  useless 
to  us  —  it  would  actually  be  hostile  to  corpo¬ 
rate  IT'S  ability  to  do  its  job. 

That  would  be  an  awful  waste, 
both  of  Microsoft’s  investment  in 
technology  and  of  our  investment 
in  Microsoft. 

But  if  this  really  is  the  Microsoft 
wc’rc  facing  going  forw’ard,  then 
it's  time  to  make  some  hard  deci¬ 
sions  about  how  we’ll  deal  with  a 
vendor  that  can't  provide  what  we 
need  from  it. 

And  if  it's  not  the  Microsoft 
we're  facing,  maybe  it's  time  for 
someone  who’s  still  at  Microsoft  to 
come  right  out  and  say  so.  I 
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FRANK  HAYES  -  FRANKLY  SPEAKING 

Which  Microsoft? 

Dave  STUTZ  likes  Microsoft  Windows  —  he  thinks  it 
“makes  a  hell  of  a  good  client.”  But  Stutz  also  believes 
that  if  Windows,  Office  and  other  Microsoft  products 
remain  PC-centric,  they’re  in  trouble.  “The  biggest  op¬ 
portunity  is  no  longer  the  client,”  he  writes.  “Net¬ 
worked  software  will  eventually  eclipse  client-only  software —  If 
the  PC  is  all  that  the  future  holds,  then  grovrth  prospects  are  bleak.” 

That’s  what  Stutz  told  his  fellow  Microsoft  employees  in  the 
memo  he  sent  out  just  before  he  left  the  company  on  Feb.  7  (see 
story,  page  12).  But  it’s  not  what  he  said  that  should  worry  us. 

It’s  what  he  didn’t  quite  say. 


Stutz  is  a  true  believer.  He  spent  more  than  a 
decade  at  Microsoft,  most  recently  as  the  guy  in 
charge  of  Microsoft's  "shared  source”  projects. 
Before  that  he  spent  time  as  the  architect  for 
Visual  Basic  and  as  a  member  of  the  Microsoft 
technical  strategy  brain  trust. 

So  when  he  says  Microsoft  "must  survive  and 
prosper  by  learning  from  the  open  source  soft¬ 
ware  movement  and  by  borrowing  from  and 
improving  its  techniques,”  that’s  pretty  much 
guaranteed  to  grab  attention  —  and  it  has.  (You 
can  read  an  edited  version  of  Stutz’s  parting 
shot  on  his  Web  site  at  www.5ynfhesi5tJiet.) 

What  won't  get  as  much  attention  are  the 
things  he  edges  around.  Stutz  doesn’t  come 
right  out  and  talk  about  the  state  of  Microsoft 
He  puts  his  concerns  in  the  form  of  predictions 
and  warnings,  which  make  them  sound  innocu¬ 
ous  enough.  After  all,  they  haven't  actually  hap¬ 
pened  yet.  right? 

But  we  know  from  experience  that  an  insid¬ 
er’s  predictions  in  this  industry  often  aren't 
predictions  —  they're  thinly  veiled  descriptions 
of  things  that  are  already  going  on. 

So  when  Stutz  suggests  that  the 
next  few  years  could  "have  the  side- 
effect  of  changing  Microsoft  into  a 
place  where  creative  manors  and 
accountants,  rather  than  visionaries, 
will  call  the  shots,”  is  he  predicting 
—  or  describing? 

When  be  says  that  "digging  in 
against  open  source  commoditiza¬ 
tion  won't  work*  and  argues  that 
"any  move  towards  cutting  off  alter¬ 
natives  by  limiting  interoperability 
or  integration  options  would  be 
fraught  with  da^r,"  is  be  warning 
against  possible  Microsoft  strate¬ 


gies  or  just  pointing  out  the  way  things  are? 

When  he  warns  that  "Microsoft  cannot  pros¬ 
per  during  the  open  source  wave  as  an  island, 
with  a  defense  built  out  of  litigation  and  propri¬ 
etary  protocols,”  is  he  sketching  a  possible  to¬ 
morrow  or  spelling  out  today’s  reality? 

These  are  words  that  should  worry  corporate 
IT  people.  The  Microsoft  that  Stutz  is  not- 
quite-describing  isn’t  a  software  vendor  that 
can  help  us  succeed.  This  is  Fortress  Microsoft, 
hunkered  down  with  a  siege  mentality  and  at 
war  not  just  with  competitors  but  also  with 
what  customers  need. 

Never  mind  whether  Microsoft  "embraces 
the  diversity  of  the  open  source  approach.”  as 
Stutz  suggests  it  should.  A  Microsoft  that  has 
shifted  into  fortress  mode  won’t  help  us  solve 
our  IT  and  business  problems.  A  Microsoft 
that’s  focused  on  limiting  our  integration  op¬ 
tions  will  make  it  harder,  not  easier,  to  keep 
things  working  together. 

A  Microsoft  armoring  itself  with  litigation 
and  proprietary  protocob  b  worse  than  useless 
to  us  —  it  would  actually  be  hostile  to  corpo¬ 
rate  ITs  ability  to  do  its  job. 

That  would  be  an  awful  waste, 
both  of  Microsoft’s  investment  in 
technology  and  of  our  investment 
in  Microsoft. 

But  if  thb  really  b  the  Microsoft 
we’re  facing  going  forward,  then 
it's  time  to  make  some  hard  deci¬ 
sions  about  how  we’ll  deal  with  a 
vendor  that  can’t  provide  what  we 
need  from  it 

And  if  it’s  not  the  Microsoft 
we’re  ^ing,  maybe  it’s  time  for 
someone  who’s  still  at  Microsoft  to 
come  right  out  and  say  so.  I 
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MraMv  tt»  5Km  mlirfrist.  Before  the  Internet,  before  laptops,  before  e-anytbing,  Symantec"  eras  protecting  companies  from  eirus 
attacks  and  malicious  code.  But  today's  erorld  is  radically  different.  Threats  have  become  more  complex,  dangerous  and  costly;  and  security 

that  eras  once  considered  adequate  is  nrm  rightly  seen  as  incomplele  and  irulnerable.  Hour 
a  revolutionary  solution  has  arrived.  Santee  Integrated  Security  is  comprehensive  securify 
that  protects  your  entire  enterprise.  Every  element  is  designed  to  etotk  together  as  a  seamless 
and  unified  system.  The  result  is  more  efficient  management,  quicker  response  to  new 
threatsand,  ultimately,  betterprotection  for  your  whole  company— from  your  gateway  with 
Symantec"  Gateway  Security,  to  your  clients  with  Symantec" Client  Security.  Iti  a  new  way 
to  understand  and  create  the  truly  secure  enterprise.  Join  the  revolution.  Visit 
http://ses.symantec.com/CW  or  call  800-745-6054  for  our  free  White  Paper,  “Integrated 
Security:  Creating  the  Secure  Enterprise'! 
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Nortel  Networks,  we  call  this  "the  engaged  business  models  And  we  make  it 


possible  by  enabling  business  to  engage  their  customers  through  delivering 
critical,  time-sensitive  information  on  whatever  device  they  prefer.  Before  they 
even  know  they  need  it  So  businesses  can  win  the  loyalty  necessary  to  build  a 
solid  revenue  base.  Leveraging  solutions  like  contact  centers  and  application- 
aware  switching.  Insuring  user  mobility  and  network  continuity.  Accelerating 
productivity  while  lowering  costs.  The  results;  customers  like  William  become 
customers  for  life.  All  delivered  by  our  Enterprise  vision.  One  network.  A  world 
of  choice,  nortelnetworks.com/onenetwork 
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BEA  Unifies  Its  Software 


Development  Environment 


Upgraded  version  of\\febLogic  suite  converges 
integration  and  building  ofhcMnegrown  apps 


BY  CABOL  BLIWA 

To  kick  off  its  annual  eWorid 
conference.  BEA  Systems  Inc. 
today  will  unveil  beta  versions 
of  its  new  suite  of  WebLopc 
software  products,  including 
its  application  server,  enter* 
prise  portal  and  integration 
broker  technologies. 

Blit  analysts  pre¬ 
dicted  that  compa¬ 
nies  will  be  most  in¬ 
terested  in  the  suite’s 
upgraded  WebLogic 
Worieshop,  since  the 
new  tool  provides  a 
tmifled  interface  for 
developing  to  any  of 


the  WebLogic  products. 

“That’s  the  ri^t  direction.” 
said  Bob  CarasQc,  enterprise  ar¬ 
chitect  at  the  IT  arm  of  Wells 
Fargo  &  Ca  in  San  Frandsco. 
“We’re  glad  to  see  they’re 
adding  new  layers  of  hinction- 
ality  on  ttpoftfae  ippdic^on 
server.  Th^  have  to  move  up 
the  stadt.  because 
application  servers 
are  going  to  become 
acommodhy.” 

The  first  version 
of  WebLogic  Worie¬ 
shop.  which  shipped 
last  year,  was  re¬ 
stricted  to  building 


Web  services.  The  new  ver- 
si(Hi  has  been  extended  to  let 
developers  build  custom  ap¬ 
plications,  create  portals,  inte¬ 
grate  applications  and  manage 
business  processes  and  trad¬ 
ing  partners,  said  Chet  Ka¬ 
poor,  vice  president  and  gen¬ 
eral  manager  of  San  Jose- 
based  BEA's  integration  groi^>. 

WebLogic  Workshop  has 
also  been  expanded  with  more 
contn^  to  remove  the  emn- 
plexity  of  building  applica¬ 
tions  that  rely  on  Java  2  Enter¬ 
prise  Edition  technologies. 
Kapoor  added. 

“This  is  a  very  substantial 
piece  of  work.”  said  John  Ry- 
mer.  an  analyst  at  Cambridge, 
BEA,  page  49 


CRM  Analytics  Starts  to  Pay  Off  for  Users 


SiebeL  other  vendors 
put  priority  on  built-in 
tools  after  slow  start 

BY  MARC  L.  SONBINI 

The  use  of  analytical  custom¬ 
er  relationship  management 
software  is  still  in  its  infancy. 
But  some  companies  that  have 
been  willing  to  give  the  tech¬ 
nology  a  ^ot  say  their  invest¬ 
ments  are  paying  off. 

For  example,  Honeywell 


Aerospace  is  already  seeing  a 
return  on  its  investment  in  the 
analytical  CRM  applications  it 
inst^ed  three  months  a^  to 
help  its  sales  force  manage 
customer  accounts,  said  Dar¬ 
ryl  CarroU,  director  of  sales 
and  marketing  processes  at 
the  Honeywell  International 
Inc.  subsidiary. 

Hioenix-ba^  Honeywell 
Aerospace,  which  makes  air¬ 
craft  parts,  is  using  Siebel  Sys¬ 
tems  Inc.’s  CRM  tools.  Sales 
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persoimel  can  now  use  a  dash¬ 
board  interfile  to  look  at  cus¬ 
tomer  data  across  the  compa¬ 
ny’s  various  business  units  to 
identify  setlmg  opportunities 
and  proactively  address  po¬ 
tential  problems,  such  as  is¬ 
sues  related  to  specific  parts, 
be  said 

Carroll  dedloed  to  disclose 
bow  much  the  software  cost, 
but  be  said  Honeywell  Aero¬ 
space  has  already  recouped  its 
investment  through  produc¬ 
tivity  gains.  Previou^,  the 
conqiaiqr’s  sales  force  bad  fo 


CRM  Analytics,  page  12 


IBM  Defends  Pricing  Model 


Plans  to  keep,  improve 
mainftame  Wbrkload 
License  Chai^je 

BY  JAIKUMAR  VI,MVAM 

IBM  remains  fully  committed 
to  hs  Wnidoad  License  Charge 
mainframe  software  pricing 
model  and  will  continue  m  try 
to  Htalcg  it  easier  for  users  to 
implement  it  That  was  the 
message  delivered  by  an  IBM 
executive  at  the  Share  large- 
systems  user  conference  In 
Dallas  last  week. 


IBM  announced  WLC  in 
October  2000  along  with  its 
64-bit  zSeries  mainframes. 
Under  the  pricing  model  IBM 
z/OS  users  pay  for  software 
based  on  the  average  size  of 
their  workloads  and  not  on 
the  overall  system  capacity. 

Des^te  the  promi^  bene¬ 
fits,  users  have  complained 
that  WLC  is  hard  to  imple¬ 
ment  and  understand  (Quick- 
Link  323811.  IBM  itself  has  ac- 
knovriedged  that  the  model 
isn’t  for  everyone  and  requires 
IBM,  page  49 
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BEA  Unifies  Its  Software 
Development  Environment 


Upgraded  version  ofWebLogic  suite  conveiges 
integration  and  building  of  homegrown  apps 

BY  CAROL  sLiwA  the  WcbLogic  products. 

To  kick  off  its  annual  eWorld  '■That’s  the  right  direction." 

conference.  BEA  Systems  Inc.  said  Bob  Carasik,  enterprise  ar- 
today  will  unveil  beta  versions  chitect  at  the  IT  arm  of  Wells 


of  its  new  suite  of  WebLogic 
software  products,  including 
its  application  server,  enter¬ 
prise  portal  and  integration 
broker  technologies. 

But  analysts  pre¬ 
dicted  that  compa¬ 
nies  will  be  most  in- _ ■ 

terested  in  the  suite’s 
upgraded  WebLogic  mm 
Workshop,  since  the 
new  tool  provides  a  oOM 
unified  interface  for  OEIm 
developing  to  any  of 


Fargo  &  Co.  in  San  Francisco. 
“We’re  glad  to  see  they’re 
adding  new  layers  of  function¬ 
ality  on  top  of  the  application 
server.  They  have  to  move  up 
the  stack,  because 
application  servers 
*'  '  are  going  to  become 

***1^  a  commodity." 

The  first  version 
of  WebLogic  Work- 
llllg  shop,  which  shipped 
mtf  re~ 

stricted  to  building 


Web  services.  The  new  ver¬ 
sion  has  been  extended  to  let 
developers  build  custom  ap¬ 
plications,  create  portals,  inte¬ 
grate  applications  and  manage 
business  processes  and  trad¬ 
ing  partners,  said  Chet  Ka¬ 
poor.  vice  president  and  gen¬ 
eral  manager  of  San  Jose- 
based  BEA’s  integration  group. 

WebLogic  Workshop  has 
also  been  expanded  with  more 
controls  to  remove  the  com¬ 
plexity  of  building  applica¬ 
tions  that  rely  on  Java  2  Enter¬ 
prise  Edition  technolt^es. 
Kapoor  added. 

"This  is  a  very  substantial 
piece  of  woik.”  said  John  Ry- 
mer,  an  analyst  at  Cambridge. 

BEA.  page  49 


Sicbcl.  other  vendors 
put  priorit)'  on  built-in 
tools  after  slow  start 

BY  MARC  L.  SONOiMI 

The  use  of  analytical  custom¬ 
er  relationship  management 
software  is  still  in  its  infancy. 

But  some  companies  that  have  , 
been  willing  to  give  the  tech¬ 
nology  a  shot  say  their  invest¬ 
ments  are  paying  off. 

For  example.  Honeywell 


Aerospace  is  already  seeing  a 
return  on  its  investment  in  the 
analytical  CRM  applications  It 
installed  three  months  ago  to 
help  its  sales  force  manage 
customer  accounts,  said  Dar¬ 
ryl  Carroll,  director  of  sales 
and  marketing  processes  at 
the  Honeywell  International 
Inc.  subsidiary. 

Phoenix-based  Honeywell 
Aerospace,  which  makes  air¬ 
craft  parts,  is  using  Siebel  Sys¬ 
tems  Inc.’s  CRM  tools.  Sales 
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CRM  Analytics  Starts  to  Pay  Off  for  Users  ^ 


personnel  can  now  use  a  dash¬ 
board  interface  to  look  at  cus¬ 
tomer  data  across  tbe  compa¬ 
ny's  various  business  units  to 
identify  selling  opportunities 
and  proactively  address  po¬ 
tential  problems,  such  as  is¬ 
sues  related  to  specific  parts, 
he  said. 

Carroll  declined  to  disclose 
how  much  the  software  cost, 
but  he  said  Honeywell  Aero¬ 
space  has  already  recouped  its 
investment  through  produc¬ 
tivity  gains.  Previously,  the 
company’s  sales  force  had  to 
CRM  Anoiyrics,  page  12 
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IBM  Defends  Pricing  Model 


Plans  to  keep,  impnwe 
mainframe  Workkxid 
License  Chaise 


IBM  remains  fully  committed 
to  its  Workload  Ucensc  Charge 
mainframe  software  pricing 
model  and  will  continue  to  try 
to  make  it  easier  for  users  to 
implement  it.  That  was  the 
message  delivered  by  an  IBM 
executive  at  the  Share  large- 
systems  user  conference  in 
Dallas  last  week. 


IBM  announced  WLC  in 
October  2000  along  with  its 
64-bU  zScrics  mainframes. 
Under  the  pricing  model.  IBM 
z/OS  users  pay  for  software 
based  on  the  average  size  of 
their  workloads  and  not  on 
the  overall  system  capacity. 

Despite  the  promised  bene¬ 
fits.  users  have  complained 
that  WLC  is  hard  to  imple¬ 
ment  and  understand  (Quick- 
Link  32381 ].  IBM  itself  has  ac¬ 
knowledged  that  the  model 
isn’t  for  everyone  and  requires 
IBM,  page  49 


Can  your  antivirus  software  provide  double  the  scanning  power?  Ours  can. 

Making  sure  your  compony  is  secure  gets  more  ond  more  difficult  every  day.  That's  why  eTrust"*  Antivirus  v7 
from  Computer  Associates  uses  dual  scanning  engines  to  ensure  comprehensive  virus  protection.  It  processes 
data  in  real  time  to  search  out  and  eliminate  viruses,  ar^d  it  also  scans  files  during  prescheduled  and 
off-peak  hours.  All  at  the  cost  of  most  sir>gle-engir>e  AV  products.  It's  nx>re  than  just  twice  the  protection. 
It's  twice  the  peace  of  miixi.  ca.com/etrust/antivirus 
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Trades  at  Top  Speed 

In  thn  Technology  section:  straight-through 
processing  systems  could  save  financial  ser* 
vices  companies  billions  of  dollars.  But  inte¬ 
grating  trade-matching  systems  requires 
both  autom^ing  manual  processes  and  cre¬ 
ating  a  complex  middleware  layer.  Page  21 
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DrawingaCrowd 

In  the  Management  section:  Too  many  companies 
get  cau^u  up  in  the  hoc^la  surrounding  portal  tech¬ 
nology,  focusing  mostly  on  implementation  and  in¬ 
tegration  issues.  Here's  how  to  bring  the  focus  back 
to  usability.  Page  38 


35  Fottow  the  Money.  A  thor¬ 
ough  investigation  into  the 
financial  health  of  your 
prospective  IT  vendors  could 
prevent  adverse  effects  on 
your  own  business  operations. 

40  A  Setup  for  a  Socurity  Night* 
mare.  Autbor  Notra  TVulock 
details  the  appalling  state  of 
computer  security  at  the  U.S. 
Department  of  Energy  during 
one  of  the  most  infunous  es- 
piona^  scandals  in  recent 
decades. 

41  Nowsmakor  Paul  Brinkley. 
CIO  at  JDS  Unq^iase.  saves 
S3S  million  annually  from  his 
IT  budget  wiffi  a  simple  but 
untisual  arrangement:  out¬ 
sourcing  Us  Oracle  applica¬ 
tions  to  Oracle. 


6  IBMahnsto  ease  business- 
process  integration  with  new 
WebSphere  tools. 

7  Navy  gets  OK  to  deploy  intra¬ 
net  for  310,000  users,  despite 
cost,  management  concerns. 

7  UPS  set  to  launch  GPRS 
wireless  net  infrastructure. 

10  Serial  SCSI  disk  technology 
promises  faster  I/O  in  servers. 

12  SAP  roadies  CRM  upgrade 

tailored  to  vertical  markets. 


2B  Bnarging  Technologies:  Virtu¬ 
ally  Face  to  Face.  Corporate 
infrastructure  upgrades  to 
support  IP  telephony  are 
paving  the  way  for  IP  video¬ 
conferencing  technologies. 


32  Security  Manager’s  Journal: 
Escape  From  SQL  Hell.  Math¬ 
ias  Thurman’s  company  es¬ 
capes  the  dutches  ^ the  SQL 
Slammer  worm  —  almost 


8  On  Uie  Mark:  Mark  Hafl  gets 
the  lowdown  on  an  IT  man¬ 
agement  dashboard  upgrade 
while  learning  why  Siebel  still 
has  big  foiends  in  big  places. 


50  Frankly  Speaking:  Frank 
Hayas  warns  developers 
who  are  not  getting  "foce 
time”  with  their  users  that 
their  jobs  are  ripe  for  overseas 
outsourcing. 
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26  Wiraioss  Nats  Go  Regional. 

Enterprises  are  deploying  IP- 
based  wide-area  wireless  sys¬ 
tems  and  services  that  share 
wireless  LAN  foequendes  but 
let  you  connect  buildings  and 
bypass  telecom  providers. 


16 


Maryfran  Johnson  believes 
that  IT  leaders'  faith  in  tech¬ 
nology  will  help  move  the 
world  forward  bit  by  bit  to 
become  a  better  place. 


16 


Pinun  Fox  advises  you  to  pre¬ 
pare  a  response  with  other  de¬ 
partment  managers  for  udien 
—  not  if — an  IT  sectirity 
breach  happens. 


17  Michael  Oartonbarg  suggests 
that  the  IT  department  is  the 
best  place  to  begin  a  company 
weblog. 


41  John  Barry  wonders  whether 
IT  could  help  business  units 
with  economic  value  manage¬ 
ment  tasks. 


33  Rob^  L  MitchMI  says  the 

handling  of  the  recent  theft  of 
8  millkm  credit  card  mmtbers 
esq>oses  some  fundamental 
challenges  focing  e-cmninerce. 


COHMS 


Trades  at  Top  Speed 

In  the  Technotogy  section:  Straight -through 
processing  systems  could  save  financial  ser¬ 
vices  companies  billions  of  dollars.  But  inte¬ 
grating  trade-matching  systems  requires 
both  automating  manual  processes  and  cre¬ 
ating  a  complex  middleware  layer  Page  21 
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In  the  Management  section:  Too  many  companies 
get  caught  up  in  the  hoopla  surrounding  portal  tech¬ 
nology.  focusit^  mostly  on  implementation  and  in¬ 
tegration  issues.  Here's  how  to  bring  the  focus  back 
to  usability.  Page  38 
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let  you  connect  buildings  and 
bypass  telecom  providers. 

28  Emerging  Technologies:  VirtU' 
ally  Face  to  Face.  Corporate 
infrastructure  upgrades  to 
support  IP  telephony  are 
paving  the  way  for  IP  video- 
conferencing  technologies. 

32  Security  Manager's  Journal: 
Escape  From  SQL  Hell.  Math¬ 
ias  Thurman's  company  es¬ 
capes  the  clutches  of  the  SQL 
Slammer  worm  —  almost. 
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35  Follow  the  Money.  A  thor¬ 
ough  investigation  into  the 
fmancial  health  of  your 
prospective  IT  vendors  could 
prevent  adverse  effects  on 
your  own  business  operations. 

40  A  Setup  for  a  Security  Night¬ 
mare.  Author  Notra  IVulock 
details  the  appalling  slate  of 
computer  security  at  the  U.S. 
Department  of  Energy  during 
one  of  the  most  infamous  es- 
piom^e  scandals  in  recent 
decades. 

41  Newsmaker  Paul  Brinkley. 
CIO  at  JDS  Uniphase,  saves 
S3S  million  annually  from  his 
IT  budget  with  a  simple  but 
unusual  arrangement:  out¬ 
sourcing  its  Oracle  applica¬ 
tions  to  Oracle. 


8  On  the  Mark:  Mark  Hall  gets 
the  lowi'down  on  an  IT  man¬ 
agement  dashboard  upgrade 
while  learning  why  Siebel  still 
has  big  friends  in  big  places. 

16  Maryfran  Johnson  believes 
that  IT  leaders'  faith  in  tech¬ 
nology  will  help  move  the 
world  forward  bit  by  bit  to 
become  a  better  place. 

16  Pimm  FoJt  advises  ytMi  to  pre¬ 
pare  a  response  with  other  de¬ 
partment  managers  for  when 
—  not  if  —  an  IT  security 
breach  happens. 

17  Michael  Gartenberg  suggests 
that  the  IT  department  is  the 
best  pbee  to  be^n  a  company 
weblog. 

33  Robert  L.  Mitchell  says  the 
handling  of  the  recent  theft  of 
8  million  credit  card  numbers 
exposes  some  fundamental 
ch^enges  facu^  e-commerce. 

41  John  Berry  wonders  whether 
IT  could  help  business  units 
with  economic  value  manage¬ 
ment  tasks. 

50  Frankly  Speaking:  Frank 
Hayes  warns  developers 
who  are  not  getting  “face 
time”  with  their  users  that 
their  lobs  are  ripe  for  overseas 
outsourcing. 
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MOBILE/WIRELCSS:  Security  begins  at  home. 
Many  employees  build  their  own  wireless 
LANs,  but  Chat  can  mean  big  trouble  for  com¬ 
panies.  Henry  FeusL  a  managing  consultant 
at  New  York-based  Predictive  Systems  Inc., 
says  these  setups  can  be  open  windows  for 
intruders.  O  QMcfcUMi 30043 

Behamoral  Rules  vs.  Sgnatins 

SECURITY:  Both  technologies  have  their  pros 
and  CMks,  which  is  why  security  eaqten  Yooa 
Hollander  recommends  usii^  both  to  pro¬ 
tect  data  in  the  enterprise.  CkQMicMJak36B0 

EVWsbCofilralsinVBlM 

DEVELOPMENT:  A  sinipie  example  of  bow  to 
use  the  Tree  View  and  TkbScr^)  Internet  Ex¬ 
plorer  Web  Coatrob  with  Visaal  Basic  J4ei. 

CkOMdAMtaZOSO 

VAiatTheyCanTFind 

CanOetVtaZOWais 

STORAGE:  The  area  of  records  retenrion  and 
destruction  has  become  smnetfaing  of  a 
minefield,  rr  staff  must  use  all  of  their  re¬ 
sources  to  navigate  H  safely  and  lawfully. 

0QiMlMi3S033 

It's  the  Restore,  Sbeidr 

STORAGE:  You  can  do  the  best  backup  in  the 
world,  but  if  you  can't  recover  your  data 
quickly  and  with  100%  certainty,  it's  for 
nau^,  says  LiveVault  Corp.'s  CEO. 
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BM  Signs  $1B 
rr  Services  Deal 

BM  iiwwJ  •  ri»-yer  fT 
MTvIoti  tal  v^iid  M  atam 
S1MMM«tlkAUerau».a 
Par1a~taiMd  iMmim  Md  fim 
dal  MrdBW  finn.  flu  comp*' 
■iM  aM  BM  wM  GomoMato 
AXA’s  aarvan,  mMmiM  and 


BMBayaddadMAXAwM 
rataia  fci  caMrel  el  Hi  IT  Mra* 
atnielwa  and  worfcara. 


ETF  to  Research 
Antispani  Measures 

Hm  feilanNi  Eaplnaartao  iHk 
Foraa  OEIF)  laM  R  has  aal  Bp  an 
anRapaa  raaaarch  gm«  to  In’ 

vaaRgato  aaBrntofs  to  hi^  aaats 

*  *  *  - M  J  I  .  ■ 

■acB  anaaBcnaa  canaaarGiai 
r«al.  lha  paap  aB  aaptaia  toa 

tschna  lar  dtoMiBB  apam  and 


Sun  Plans  CPUs 
With  MiAiple  Cores 

«  •  mMN  aM  anew  aa- 
l|Bla,SMBMtaratoManatoc.oul- 
laad  ptana  to  dsti^  cMp  nadh* 
daaadhi  praeaaaara.  atailina 
«M  an  UkaSnUiC  M  daviea 
daahttoRdiiiBar.aiaiaaMR 
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EMC  CORP.  to  HapIMn.  Itoaa. 
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and  nsv  Ml  driaas  to  Mb  Spin* 
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IBM  Uf^rades  Business 
Integration  Technology 


WfebSphere  tools 
reduce  need  for  lava 
programming  skills 


aV  MAMC  L.  SOMOINI 

IBM  IS  ENHANCING  its  Web¬ 
Sphere  middleware  tech- 
Doiogy  in  an  effort  to  sim¬ 
plify  the  task  of  creating 
and  monitoring  data  and  bus¬ 
iness-process  workflows 
through  corporate  systems. 

This  week,  IBM  will  an¬ 
nounce  an  upgrade  of  its  Web¬ 
Sphere  Business  Integration 
software  aimed  at  lettii^  users 
irtodel  business  processes  that 
go  across  different  appUca- 
lions  without  needing  to  have 
special  Java  coding  skills.  It 
also  plans  to  roil  out  improved 
development  toots  and  in¬ 
creased  Web  services  support 
(see  box). 

To  widen  the  modeling  and 
monitoring  capabilities  in 
WebSphere  Business  Integra¬ 
tion,  IBM  is  embedding  tech¬ 
nology  it  gamed  in  September 
when  it  acquired  Hol^fx 
Inc.,  a  business  integration 
software  vendor  in  El  Segun- 
do.  Calif,  said  Scan  Poulley, 
director  of  WebSphere  busi¬ 
ness  development  at  IBM. 

Previously,  the  Holosofx 
applications  required  a  custom¬ 
ize  link  to  W<ebSphere.  They 
wiU  still  be  sold  separately,  knit 
Poulley  said  the  Holosofti  tech¬ 
nology  will  now  be  integrated 
with  WebSphere  Business  tntc- 
gratioa  Server  Version  4.2. 
which  is  due  later  this  month. 

dosing  the  Loop 

The  Business  Integration  Mod¬ 
eler  will  let  users  outside  of  IT 
create  blueprints  of  business 
processes  that  can  be  handed 
off  to  developeis  for  imple- 
mentackm.  IBM  said.  Compa¬ 
nies  can  also  use  the  nmdeler 
with  the  Web  browser-based 
Business  Integratioo  Monitor 
H>  develop  systems  with  built- 
in  thresholds  and  alerts  that 
provide  feedback  as  business 
processes  are  executed. 


“If  Pve  got  the  modeling  tool 
integrated  with  the  monitoring 
tool,  I  get  a  closed  loop,”  Poul¬ 
ley  said.  For  instance,  he  said, 
a  manufacturer  could  create 
a  workflow  process  to  restock 
its  inventories  aiKl  let  end 
users  know  the  cost  of  items 
as  they’re  being  procured. 

Rok^  C^tterall,  director 
of  strate^  technology  for  the 
e-commerce  division  at  Check- 
Free  Coip.  in  Norcross,  Ga^ 
said  the  capabilities  being 
added  by  IBM  could  be  useful 
in  involving  less  technically 
skilled  workers  in  application 
integration  protects. 

”There  are  people  who 
know  Java  well,  and  there  are 


people  who  understand  bu^ 
Ttess  processes  well,  and  peo¬ 
ple  in  one  of  these  groups  are 
very  often  not  found  in  the 
oth^,”  Catterall  said.  Check- 
Free  uses  IBM’s  DB2  database 
and  is  contemplating  a  Web¬ 
Sphere  installation,  be  noted. 

IBM  is  the  ri^t 

moves  by  starting  to  combine 
its  various  integration  prod¬ 
ucts  and  giving  them  common 
tools  and  user  interfaces,  said 
Sharyo  Leaver,  an  analyst  at 
Forrester  Research  Inc  in 
Cambridge.  Mass.  But  IBM  has 
yet  to  standardize  on  a  single 
nmtime  engine  for  its  Wieb- 
Spbere  application  and  integra¬ 
tion  serveis,  she  added. 


Doug  Brown,  director  of 
marketing  for  WebSphere 
integruion.  acknowledged 
that  IBM  supports  multiple 
runtime  engines  within  the 
sprawUitg  W^pbere  line. 
But  by  year’s  en^  it  plans  to 
consolidate  on  one  runtime 
technology  so  appikatkias 
will  be  reusable,  Brown  said.  I 


Cisco  Builds  Rugged  Switch 
To  Link  Factoiy,  Back  Office 


BV  MATT  HAMBLBM 

In  a  move  aimed  at  unifyii^ 
factory-floor  networis  with  the 
oites  in  corporate  back  offices, 
Cisco  Systems  Inc.  will  unveil 
today  at  the  National  Manu¬ 
facturing  Week  show  in  Chica¬ 
go  a  ruggedized  line  of  switch¬ 
es  based  on  IP  and  Ethernet 

The  Catalyst  29S5  series  is 
designed  for  use 
infoctories  and 
in  utility,  trans¬ 
portation  and 
military  settings, 
where  tempera¬ 
tures.  humidity, 
dust  and  vibra¬ 
tions  are  more 
extreme  than  they  are  in  regu¬ 
lar  business  enviroDinents. 
Cisco  officials  sakL  The  de¬ 
vices.  which  are  about  one- 
third  as  big  as  Cisco’s  regular 
switches,  are  shipping  now  and 
are  priced  from  to  $3,600. 

The  2955  scries  introdiKes 
the  first  rugged  Etbemei 
switches  d^el<^>ed  by  a  major 
networking  equipment  ven¬ 
dor.  said  Harry  Forbes,  an  ana¬ 
lyst  at  ARC  A^isory  Group 
Inc.  in  Dedham,  Mass.  He  oot- 
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ed  that  Cisco  is  rolling  out  the 
switches  at  a  time  when  toctory- 
floor  devices  that  control  pro¬ 
duction  processes,  robots  and 
other  machines  are  starting  to 
be  equipped  with  Ethernet  in- 
terfsMS  instead  of  manufac¬ 
turing-specific  technologies. 

The  biggest  supplier  of 
rugged  Ethernet  switches  for 
factories  is 
Hitschmann 
Electronics 
GmbH  in  Neck- 
arten^ingen, 
Germany.  Forbes 
sakL  Switches 
accounted  for 
about  8%  of  the 
300,000  Ethernet-ready  de¬ 
vices  sold  for  factory  use  last 
year,  ARC  said. 

For  companies  that  have  in¬ 
stalled  C^isra  products  and  Eth¬ 
ernet  technology  in  their  main 
corporate  networks,  the  2955 
could  help  extend  to  the  manu¬ 
facturing  realm  the  qualityof- 
servicc  features  and  other  ca- 
{Kdtilities  that  are  built  into  the 
Catalyst  technology,  said  Joel 
Conover,  an  analyst  at  CUurent 
Analysis  Inc.  in  Sterling, 


*You’re  going  to  be  able  to 
monitor  and  control  manufac¬ 
turing  from  the  core  network,* 
Conover  said.  He  added  that 
many  mainstream  IT  man¬ 
agers  will  be  nx»re  vrilling  to 
accept  the  2955  switches  than 
devices  from  specialty  ven¬ 
dors  like  Hirsdunann  because 
Cisco’s  technology  is  so  wide¬ 
ly  deployed  and  accepted. 

“I  won’t  have  to  sell  people 
on  the  brand  of  the  switdi,” 
said  Carl  Staab,  manager  of 
communications  technology 
at  Emerson  Process  Manage¬ 
ment  in  Pittsburgh.  Emerson 
has  been  beta-testing  the  2955 
series  since  January  and  hopes 
to  resell  the  Cisco  switches 
with  process  control  equip¬ 
ment  that  it  markets  to  water 
and  sewer  utilities,  be  said. 

The  2955  series  also  has  12 
Ethernet  ports  —  twice  what 
the  competition  offers,  Staab 
said.  Another  advantage  over 
existing  fictofy-floor  switches 
is  the  2955’$  ability  to  quickly 
alert  workers  to  networt  prob¬ 
lems  through  an  external  light 
on  the  device,  be  sakL  I 
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Navy’s  Massive  Intranet  Rollout  OK’d 


Some  users  still  cite  costs,  other  concerns 


BVOAMVCHTOH 

The  U.S.  Navy  confinned  last 
week  that  the  Pentagon  has 
^en  it  the  go-ahead  to  move 
as  many  as  310.000  Navy  and 
Marine  Corps  IT  users  to  the 
Navy/Marine  Corps  Intranet 
(N/Ma). 

The  decision  comes  after 
months  of  operational  testing 
that  was  retpiired  by  Congress 
before  it  would  allow  the 
Navy  to  proceed  beyond  a 
60.000-user  cap  that  it  im¬ 
posed  after  concerns  surfaced 
about  the  program's  technical 
feasibility  and  cost  [Quicklink 
30106).  However,  after  the  suc¬ 
cessful  completion  of  the  test¬ 
ing  phase,  tlK  Navy  received 
permission  to  proceed  with  all 
160.000  of  the  N/MCI  seals 
that  had  been  previously  ap¬ 
proved  and  was  authorized  to 
order  an  additional  150.000 
N/MCl  seats  from  its  prime 
contractor,  Plano.  Texas^ttsed 
Electronic  Data  Systems  Corp. 

N/MCI  is  an  IT  outsourcing 


project,  often  referred  to  as 
seat  management,  intended  to 
give  the  Navy  and  Marine 
Corps  secure,  universal  access 
to  integrated  voice,  video  and 
data  communications.  It's  also 
designed  to  provide  pier-side 
connectivity  to  Navy  vessels 
in  port  and.  when  completed, 
will  link  more  than  310.000 


Currently  lieploiree 


Newly  authoriyerl 


desktops  across  the  U.S.,  Puer¬ 
to  Rico.  Japan  and  Cuba. 

Although  most  of  the  focus 
of  the  N/MCI  deployment  re¬ 
mains  on  support  units.  Vin¬ 
cent  Madsen,  a  24>year  EOS 
veteran  who  recently  took 
over  as  client  delivery  execu¬ 
tive  for  the  N/MCl  program. 
caiH  the  potential  for  military 
conflict  in  Iraq  does  play  a  role 
in  planning  for  ftie  future.  "We 
have  to  work  closely  with  all 
the  units  to  make  sure  we're 
not  going  to  get  in  the  way."  he 
said  "I  don't  anticipate  any  de¬ 
lays.  but  we  may  move  some 
schedules  around" 

For  DOW.  N/MCl  is  moving 
full  steaun  ahead.  "The  results 
from  four  months  of  testing 
clearly  demonstrated  that  the 
N/MCl  is  ready  to  move  to  the 
next  level*  Rear  Adm.  Charles 
L  Munns.  director  of  the 
N/MCl  project,  said  in  a  state¬ 
ment  released  by  the  Navy. 

"We're  now  moving  at  light 
speed  to  get  all  of  this  de¬ 
ployed  as  contracted  by  the 
end  of  the  year,"  said  Madsen. 


referring  to  all  310.000  seats. 

EDS  has  dedicated  more 
than  300  employees  to  deploy¬ 
ment  and  installation  and  is  re¬ 
lying  on  Dell  Computer  Corp. 
for  hardware  delivery  as  well 
as  initial  build  configuration 
and  customer  support  for  the 
N/MCI  desktop  Windows  en¬ 
vironment,  said  MadsecL 
"We're  goii^  to  rev  up  to  the 
point  where  well  be  able  to 
deploy  1000  desktops  per  day 
across  the  entire  inftastructure 
at  multiple  locations,*  he  said. 

Hurdes  Remain 

But  smne  N/MCI  users  said 
they  continue  to  struggle  to 
maintain  productivity  and 
keep  N/MCI  costs  down. 

A  San  Diego-based  Naval  IT 
manager  involved  m  the  proj¬ 
ect  said  N/MCI  seats  are  cost¬ 
ing  his  customers  $3,000  to 
$6,000  per  scat  per  year.  The 
cost  is  so  high  that  some  Navy 
organizations  can't  afford 
N/MCI  workstations  for  tfaerr 
contractor  support  personnel 
he  said.  He  claimed  that  using 


another  contr^or.  be  could 
supply  for  $570,000  what  EDS 
b  diarging  a  Navy  unit  $23 
million  for. 

Another  manager  from  the 
Naval  Region  Southwest, 
which  includes  10  bases  in 
California  and  one  in  Nevada, 
said  his  users  continue  to  deal 
with  "tKKhing  but  chaos,  poor 
communication  and  lack  of 
any  deliverables." 

One  organization  ha«  been 
waiting  more  than  a  year  to 
get  a  critical  appUcatioo  shift¬ 
ed  to  N/MCl  the  manager 
said.  There  has  also  been  DO 
accountability  for  missed 
schedules  or  critical  applica¬ 
tion  or  system  outages,  the 
manager  added. 

The  Navy  and  EDS  have  re¬ 
peatedly  dmvnplayed  such 
problems,  chatacterizing  them 
as  natural  growii^  pains  and 
going  so  fair  as  to  accuse  some 
civilian  Navy  employees  of 
having  an  agenda  to  kill  the 
program.  I 
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UPS  Readies  Wireless  Upgrade  in  U.S. 


50,000  drivers  to  get 
new  info  terminals 


United  Parcel  Service  Inc.  will 
deploy  higher-speed  wireless 
services  to  its  US.  delivery 
fleet  this  year,  starting  with 
retrofitting  4300  driver  data 
terminals  with  modems  chat 
support  AT&T  Wireless  Ser¬ 
vices  Ioc.'s  General  Packet  Ra¬ 
dio  Service  (GPRS)  network. 

Tbe  retroftccing  move  is  a 
large-scale  test  of  the  GPRS 
mobile  data  service  that  will 
be  followed  by  a  rollout  of  new 
terminals  to  UPS’s  50.000-plus 
drivers  in  tbe  U3.  Tamara 
Schwartz,  the  company’s  direc¬ 
ts  of  global  network  services, 
said  at  a  wireless  IT  confer¬ 
ence  held  here  last  week  by 
Gartner  Inc.  that  UPS  next 
month  will  detail  its  plans  for 


deploying  tbe  more  advanced 
informatkm  terminals. 

Schwartz  wouldn’t  disclose 
any  specifics  about  the  new 
tennifuls.  which  will  be  made 
by  Holtsville,  N.Y.-based  Sym¬ 
bol  Technologies  Inc.  But  a 
spokeswoman  for  ^lanta- 
based  UPS  said  tbe  terminals 
will  be  equipped  with  GPRS 
modems  or  with  ones  that  sup¬ 
port  tbe  rival  Code  Divisioo 
Multiple  Access  (CDMA) 
wireless  network  techneriogy. 

Improved  nraughiiut 

For  UPS  drivers,  tbe  rc^ut 
should  mean  much  better  data 
throughput.  For  example,  the 
AT&T  Wireless  network  sup¬ 
ports  data  transmission  rates 
of  up  m  40K  bit/sec,  com¬ 
pared  with  a  speed  of  about 
9.6K  bit/sec.  for  tbe  network 
services  provided  by  Resttm, 
Va.-based  Motient  Corp.  that 
are  now  used  in  the  U3. 


The  planned  U3.  project 
follows  a  deployment  last  year 
of  GPRS-enabM  terminals  to 
15,000  UPS  drivers  in  Europe, 
where  the  company  uses  udre- 
less  network  services  provid¬ 
ed  by  tbe  T-Mobile  division  of 
Deutsche  Telekom  AG  in 
Bonn.  T-MobUe’s  GPRS  net¬ 
work  runs  at  20K  to  40K 
bih^ec.  and  replaced  a  9.6K 


bit/sec.  Mobitex  oetworic  also 
operated  by  T-Mobile. 

Schwartz  said  the  hitler 
data  rates  have  helped  UPS 
better  manage  "on-demand" 
delivery  slices  in  Europe, 
where  drivers  typically  re- 
^nd  to  requests  for  pickups 
instead  making  scheduled 
stops  as  they  do  in  tbe  U3. 

UPS  and  Memphis-based  ri¬ 
val  FedEx  (2orp.  both  said  last 
July  that  they  planned  to  stan¬ 
dardize  their  ^obai  wide-area 


UPS's  Wireless  IT  Strategy 


wireless  architectures  on 
GPRS  technology  wherever 
it’s  available.  But  tbe  two  com¬ 
panies  also  acknowle^ed  that 
they  would  have  to  use  other 
wireless  standards  in  some  lo- 
cartons  [(juidd.ink  31154J. 

At  last  week's  omfcrence, 
Scbwvtz  said  that's  still  part 
of  the  plan  at  UPS.  The  com¬ 
pany  will  rely  <M>  CDMA  net¬ 
works  that  are  operated  by 
carriers  such  as  Verizon  Wire¬ 
less  and  Sprint  PCS  Group  m 
augment  GPRS  in  the  U^!,  be¬ 
cause  Redmond,  Wash.-based 
AT&T  Wlr^ess  doesn’t  pro¬ 
vide  coverage  in  all  paru  of 
tbe  country,  she  said. 

Gartner  analyst  Ken  Du¬ 
laney  said  UPS  has  no  choice 
but  to  go  with  both  GPRS  and 
CDMA  in  the  U.S.  In  contrast. 
European  countries  offer  com¬ 
panies  GPRS  as  a  stn^  wire¬ 
less  standard,  he  noted. 

Tbe  Knct  Wireless  GPRS 
network  will  be  tested  at  pack¬ 
age-delivery  bubs  with  more 
than  60  drivers,  UPS  said.  I 
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AT  DEADLINE 


IBM  Signs  SIB 
IT  Services  Deal 

IBM  announced  a  six-year  IT 
services  deal  valued  at  about 
SI  biWon  with  AXA  Group,  a 
Paris-based  ktsurance  and  finan¬ 
cial  services  fbm.  The  compa¬ 
nies  said  BM  will  consolidate 
AXA’s  servers,  mainframes  and 
storage  devices  Mo  an  'on- 
demanT  computing  instafiation. 
But  they  added  that  AXA  will 
retain  Ki  control  ollts  IT  infra¬ 
structure  and  workers. 


IETF  to  Research 
Antispam  Measures 

The  Memet  Enginasring  Task 
Force  (ETF)  said  it  has  set  up  an 
antispam  resaarch  grout  to  in- 
vostigate  new  ways  to  help  users 
blodi  unsoBcfted  commercial 
e-fflai.  T)ic  group  wfl  explore  the 
dewlopmeirt  of  a  common  arefu- 
tacture  for  delecting  spam  and 
enforcing  user  consent  poficies. 
h  wM  atao  consider  possibie  anti- 
spam  legislation. 


Sun  Plans  CPUs 
With  Multiple  Cores 

Al  a  meeting  with  financial  ana- 
fysts.  Sun  Microsystems  Inc.  out- 
Kned  plans  to  develop  chip  mufti- 
threadmg  processors,  starting 
wMh  an  UMraSPARC  N  device 
due  later  this  year.  Sun  said  II 
wa  pul  inultipte  CPU  ceres  that 
can  each  MmuKanaousfy  process 
muttpte  tasks  on  a  singte  ptece 
of  siicon.  IBM  last  month  said  it 
sdi  dafiver  skniar  processors 
next  yev  (QuickLinli  3G523). 


Short  Takes 

EMC  CORP.  in  Hopkirtton.  Mass., 
added  OkteM  Efhenwl  support 
and  new  dtek  drives  to  its  Syrrr- 
melrix  8000  storage  arrays 
and  announead  fflodMs  optimized 
for  UM  with  mainframes. . . . 
LUCEKT  TECHNOIOGIES  WC  in 
Mivray  HMs,  NJ..  ai^iad  an 
agraamant  in  prindpfo  to  aetlfo 
an  accounting  probe  by  tha  Secu- 
rtifosandExchangsCenenuaion. 


IBM  Upgrades  Business 
Integration  Technology 


WebSphea'  t(X)ls 
a’diice  need  for  lava 
programming  skills 


BV  WARC  L.  SOHOINI 

IBM  i.s  ENHANCING  Us  Web¬ 
Sphere  middleware  tech¬ 
nology  in  an  cITort  to  sim¬ 
plify  the  task  of  creating 
and  monitoring  data  and  bu-s- 
iness-proecss  workflows 
through  corporate  sysicm.s. 

This  week,  IBM  will  an¬ 
nounce  an  upgrade  of  its  Web¬ 
Sphere  Business  Integration 
software  aimed  at  letting  users 
model  business  processes  that 
go  across  different  applica¬ 
tions  without  needing  to  have 
special  Java  coding  skilLs.  It 
also  plans  to  roll  out  improved 
development  tools  and  in¬ 
creased  Web  services  support 
(see  box). 

To  widen  the  modeling  and 
monitoring  capabilities  in 
WebSphere  Business  Integra¬ 
tion,  IBM  is  embedding  icch- 
nuli^y  it  gained  in  .September 
when  it  acquired  Holosofx 
Inc.,  a  business  integration 
software  vendor  in  EJ  Segun- 
do.  Calif.,  said  Scan  Pouliey. 
director  of  WebSphere  busi- 
nc.ss  development  at  IBM. 

Previously,  the  Molosofx 
applications  a'quired  a  custom- 
iz<^  link  to  WebSphere.  They 
will  still  be  sold  separately,  but 
Poullcy  said  the  Hntosofx  tech¬ 
nology  will  now  be  integratc-d 
with  WebSphere  Business  Inte¬ 
gration  Server  Version  4.2. 
which  is  due  later  this  rminih. 

Closing  the  Loop 

The  Business  Integration  Mod¬ 
eler  will  let  users  outside  of  IT 
create  blueprints  of  business 
processes  that  can  be  handed 
ofl*  to  developers  for  imple- 
rocotaiion.  IBM  said.  (Compa¬ 
nies  can  also  use  the  modeler 
with  the  Web  browser-based 
Business  Integration  Monitor 
lo  develop  systems  with  built- 
in  thresholds  and  alerts  that 
provide  feedback  as  business 
processes  are  executed. 


"If  I've  got  the  modeling  tool 
integrated  with  the  monitoring 
tool.  I  gel  a  closed  loop."  Poul- 
ley  said.  Fiir  instance,  he  said, 
a  manufacturer  could  create 
a  workflow  process  to  resttK’k 
its  inventories  and  let  end 
users  know  the  ctwt  of  items 
as  they’re  being  procured. 

Robert  (-aticrall,  director 
of  strategic  technology  for  the 
e-commercc  division  at  Check- 
Free  Corp.  in  Norcniss.  Ga.. 
said  the  capabilities  being 
added  by  IBM  could  be  useful 
in  involving  less  technically 
skilled  workers  in  application 
integration  projects. 

“There  arc  people  who 
know  Java  well,  and  there  are 


people  who  understand  busi¬ 
ness  processes  well,  and  peo¬ 
ple  In  one  of  these  groups  are 
very  often  not  found  in  the 
other."  Catterall  said.  Check- 
Free  uses  IBM's  DB2  database 
and  is  contemplating  a  Web¬ 
Sphere  installation,  he  n«ited. 

IBM  is  making  the  right 
moves  by  starting  to  combine 
its  various  integration  prod¬ 
ucts  and  giving  them  common 
tools  and  user  interfaces,  said 
Sharyn  Leaver,  an  analyst  at 
Forrester  Research  Inc.  in 
Cambridge.  Mass.  But  IBM  has 
yet  to  standardize  on  a  single 
runtime  engine  for  its  Web¬ 
Sphere  application  and  integra¬ 
tion  servers,  she  added. 
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Doug  Brown,  director  of 
marketing  for  WebSphere 
integration,  acknowledged 
that  IBM  supports  multiple 
runtime  engines  within  the 
sprawling  WebSphere  line. 

But  by  year's  end,  it  plans  to 
consolidate  on  one  runtime 
technology  so  applications 
will  be  reusable.  Brown  said.  I 


Cisco  Builds  Rugged  Switch 
To  Link  Factory,  Back  Office 


ev  MATT  HAMBLEN 

In  a  move  aimed  at  unifying 
factory-floor  networks  with  the 
ones  in  corporate  back  ofltces. 
Cisco  Systems  Inc.  will  unveil 
today  at  the  National  Manu¬ 
facturing  Week  show  in  Chica¬ 
go  a  ruggedized  line  of  switch¬ 
es  based  on  IP  and  Ethernet. 

The  Catalyst  2955  scries  is 
designed  for  use 
in  factories  and 
in  utility,  trans¬ 
portation  and 
military  settings, 
where  tempera¬ 
tures.  humidity, 
dust  and  vibra¬ 
tions  are  more 
extreme  than  they  arc  in  regu¬ 
lar  business  environments. 
Cisco  ofltcials  said.  The  de¬ 
vices.  which  are  about  one- 
third  as  big  as  Cisco’s  regular 
switches,  are  shipping  now  and 
are  priced  from  ^.K)0  to  Sd/iOO. 

The  2955  series  introduces 
the  first  rugged  Ethernet 
switches  developed  by  a  major 
networking  equipment  ven¬ 
dor.  said  Harry  Forbes,  an  ana¬ 
lyst  at  ARC  Advisory  Group 
Inc.  in  Dedham,  Mass.  He  not- 


CBCirS  CATALYST  29G5  is 
about  one-Mtti  tf»  lize  ef 


ed  that  Cisco  is  rolling  out  the 
switches  at  a  time  when  factory- 
floor  devices  that  control  pro¬ 
duction  proccs.scs.  robots  and 
other  machines  are  starting  lo 
be  equipped  with  Ethernet  in¬ 
terfaces  instead  of  manufac¬ 
turing-specific  technologies. 

The  biggest  supplier  of 
rugged  Ethernet  switches  for 
factories  is 
Hirschmann 
Electronic'S 
GmbH  in  Neck- 
artenzl  ingen. 
Germany,  Forbes 
said.  Switches 
accounted  for 
about  8%  of  the 
300.000  Ethernet-ready  de¬ 
vices  sold  for  factory  use  last 
year.  ARC  said. 

For  companies  that  have  in¬ 
stalled  Cisco  produc'ts  and  Eth¬ 
ernet  technology  in  their  main 
corporate  nc*tworks.  the  2955 
could  help  extend  lo  the  manu- 
focturing  realm  the  quality-of- 
servicc  features  and  other  ca¬ 
pabilities  that  are  built  into  the 
Catalyst  technology,  said  Joel 
Conover,  an  analyst  at  (Current 
Analysis  Inc.  in  Sterling,  Va. 


“You’re  going  to  be  able  to 
monitor  and  control  manufac¬ 
turing  from  the  core  network.'' 
Conover  said.  He  added  that 
many  mainstream  IT  man¬ 
agers  will  be  more  willing  to 
accept  the  2955  switches  than 
devices  from  specialty  ven¬ 
dors  like  Hirschmann  because 
Cisco's  technology  is  so  wide¬ 
ly  deployed  and  accepted. 

“I  won't  have  to  sell  people 
on  the  brand  of  the  switch," 
said  Carl  Staab.  manager  of 
communications  technology 
at  Emerson  Process  Manage¬ 
ment  in  Piii.sburgh.  Emerson 
has  been  beta-testing  the  2955 
series  since  January  and  hopes 
to  resell  the  Cisco  switches 
with  process  control  equip¬ 
ment  that  it  markets  to  water 
and  sewer  utilities,  he  said. 

The  2955  series  also  has  12 
Ethernet  ports  —  twice  what 
the  competition  ofTers,  Staab 
said.  Another  advantage  over 
existing  factory-floor  switches 
is  (he  2955’s  ability  to  quickly 
alert  workers  to  network  prob¬ 
lems  through  an  external  light 
on  the  device,  he  said.  I 


VKIVUIT 


Cisre  ivgtadto  Its  tedmoiogy  for  cachno 
hgh-baivlMdte  data  at  nelvraik  edges 

^g**LM3i7a 


www.compulerwotid  com 


NEWS 


Navy’s  Massive  Intranet  Rollout  OK’d 


Some  users  still  eite  eosts,  other  eoncems 


ev  OAN  VERTOM 

The  U.S.  Navy  confirmed  last 
week  that  the  Pentagon  has 
given  it  the  go-ahead  to  move 
as  many  as  310,000  Navy  and 
Marine  Corps  IT  users  to  the 
Navy/Marine  Corps  Intranet 
(N/MCI). 

The  decision  comes  after 
months  of  operational  testing 
that  was  required  by  Congress 
before  it  would  allow  the 
Navy  to  proceed  beyond  a 
60.000-uscr  cap  that  it  im¬ 
posed  after  concerns  surfaced 
about  the  program's  technical 
feasibility  and  cost  [QuickLink 
301061.  However,  after  the  suc¬ 
cessful  completion  of  the  test¬ 
ing  phase,  the  Nav>'  received 
permission  to  proceed  with  all 
160.000  of  the  N/MCI  seats 
that  had  been  previously  ap¬ 
proved  and  was  authorized  to 
order  an  additional  I50XK)0 
N/MCl  scats  from  its  prime 
contractor,  Plano.  Texas-based 
Electronic  Data  Systems  Corp. 

N/MCI  is  an  IT  outsourcing 


project,  often  referred  to  as 
seat  management,  intended  to 
give  the  Na>'>'  and  Marine 
Corps  secure,  universal  access 
to  integrated  voice,  video  and 
data  communications.  It's  also 
designed  to  provide  pier-side 
connectivity  to  Navy  vessels 
in  port  and,  when  completed, 
will  link  more  than  310.000 
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desktops  across  the  U.S.,  Puer¬ 
to  Rico.  Japan  and  Cuba. 

Although  most  of  the  focus 
of  the  N/MCI  deplo>'ment  re¬ 
mains  on  support  units.  Vin- 
ceni  Madsen,  a  24-ycar  EDS 
veteran  who  recently  took 
over  as  client  deliver)'  execu¬ 
tive  for  the  N/MCl  program, 
said  the  potential  for  military 
conflict  in  Iraq  docs  play  a  role 
in  planning  for  the  future.  “We 
have  to  work  closely  with  all 
the  units  to  make  sure  we're 
not  going  to  get  in  the  way,"  he 
said.  “I  don't  anticipate  any  de¬ 
lays.  but  wc  may  move  some 
schedules  amund.*' 

For  now.  N/MCl  is  moving 
full  steam  ahead.  “The  results 
from  four  months  of  testing 
clearly  denumstraicd  that  the 
N/MCI  is  ready  to  move  to  the 
next  level."'  Rear  Adm.  Charles 
L  Munns.  director  of  the 
N/MCl  project,  said  in  a  state¬ 
ment  released  by  the  Navy. 

“We’re  now  moving  at  light 
speed  to  get  all  of  this  de¬ 
ployed  as  contracted  by  the 
end  of  the  year."  said  Madsen. 


referring  to  all  310,000  scat.s. 

EDS  has  dedicated  more 
than  300  employees  to  deploy¬ 
ment  and  installation  and  is  re- 
lyii^  on  Dell  Computer  Corp. 
for  hardware  delivery  as  well 
as  iniiial  build,  configuration 
and  customer  suppon  for  the 
N/MCl  desktop  Windows  en¬ 
vironment.  said  Madsen. 
"We're  going  to  rev  up  to  the 
point  where  we'll  be  able  to 
deploy  l.OOO  desktops  per  day 
across  the  entire  infrastructure 
at  multiple  locations,*'  he  said. 

Hurdles  Remain 

Rut  some  N/MCl  users  said 
the)'  continue  to  struggle  to 
maintain  productivity  and 
keep  N/MCI  co.sts  down. 

A  San  Diego-based  Naval  IT 
manager  involved  in  the  proj¬ 
ect  said  N/MCI  seats  arc  cost¬ 
ing  his  customers  $3,000  to 
$6,000  per  scat  per  year.  The 
cost  is  so  high  that  some  Navy 
organizations  can't  afford 
N/MCl  workstations  for  their 
contractor  suppon  personnel, 
he  said.  He  claimed  that  using 


UPS  Readies  Wireless  Upgrade  in  U.S. 


SUKK)  drivers  to  get  | 
ne\v  info  terminals 


BV  BOB  BREWIN 

lOS  aroelcs 

United  Parcel  Service  Inc.  will 
deploy  higher-speed  wireless 
services  to  its  U.S.  delivery 
fleet  this  year,  staning  with 
retrofitting  4.500  driver  data 
terminals  with  modems  that 
support  AT&T  Wireless  Ser¬ 
vices  Inc.’s  General  Packet  Ra¬ 
dio  Service  (GPRS)  network. 

The  retrofitting  move  is  a 
large-scale  test  of  the  GPRS 
mobile  data  service  that  will 
be  followed  by  a  rollout  of  new 
terminals  to  UPS's  50.000-plus 
drivers  in  the  US.  Tarrura 
i«:hwartz.  the  company's  direc¬ 
tor  of  global  network  services, 
said  at  a  wireless  IT  confer¬ 
ence  held  here  last  week  by 
Ganner  Inc.  that  UPS  next 
month  will  detail  its  plans  for 


deploying  the  more  advanced 
information  terminals. 

Schwartz  wouldn't  disclose 
any  specifics  about  the  new 
terminals,  which  will  be  made 
by  HoUsville.  N.Y.-based  Sym¬ 
bol  Technologies  Inc.  But  a 
spokeswoman  for  Atlanta- 
based  UPS  said  the  terminals 
will  be  equipped  with  GPRS 
modems  or  with  ones  that  sup¬ 
port  the  rival  Code  Division 
Multiple  Access  (CDMA) 
wireless  network  technology. 

Improved  throughput 

For  UPS  drivers,  the  rollout 
should  mean  much  better  data 
throughput.  For  example,  the 
AT&T  Wireless  network  sup¬ 
ports  data  transmission  rates 
of  up  to  40K  bit/scc..  com¬ 
pared  with  a  speed  of  about 
9.6K  bit/sec.  for  the  network 
services  provided  by  Reston. 
Va.-based  Motieni  (^rp.  that 
arc  tK>w  used  in  the  US. 


The  planned  U.S.  project 
follows  a  deployment  last  year 
of  GPRS-enabled  terminals  to 
15,000  UPS  drivers  in  Europe, 
where  the  company  uses  wire¬ 
less  network  services  provid¬ 
ed  by  the  T-Mubile  division  of 
Deutsche  Telekom  AG  in 
Bona  T-Mobile’s  GPRS  net¬ 
work  runs  at  20K  to  40K 
bit/sec.  and  replaced  a  9.6K 


biiAec.  Mobiles  network  also 
operated  byTMobile. 

Schwartz  said  the  higher 
data  rates  have  helped  UPS 
better  manage  “on-demand" 
delivery  services  in  Europe, 
wbea*  drivers  typically  re¬ 
spond  to  requests  for  pickups 
instead  of  making  scheduled 
stops  as  they  do  in  the  U.S. 

UPS  and  Memphis-based  ri¬ 
val  FedEx  Corp.  Kith  said  last 
July  that  they  planned  to  stan¬ 
dardize  their  global  wide-an.'a 
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another  contractor,  he  could 
supply  for  $570,000  what  EDS 
is  charging  a  Navy  unit  $2.5 
million  for. 

Another  manager  from  the 
Naval  Region  Southwest, 
which  includes  10  bases  in 
California  and  one  in  Nevada, 
said  his  users  continue  to  deal 
with  “nothing  but  chaos,  poor 
communication  and  lack  of 
any  deliverables." 

One  organization  has  been 
wailing  more  than  a  year  to 
get  a  critical  application  shift¬ 
ed  to  N/MCl.  (he  manager 
said.  Tliere  has  also  been  no 
accountability  fur  missed 
schedules  or  critical  applica¬ 
tion  or  system  outages,  the 
manager  added. 

The  Navy  and  EDS  has'e  re¬ 
peatedly  downplayed  such 
problems,  characterizing  them 
as  natural  growing  pains  and 
going  so  far  as  to  accuse  some 
civilian  Navy  employct's  of 
having  an  agenda  to  kill  the 
program.  I 
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wireless  architectures  on 
GPRS  technolog)'  wherever 
it's  available.  Bui  the  two  com¬ 
panies  also  acknowledged  that 
they  would  have  to  use  other 
wireless  standards  in  some  lo¬ 
cations  I  (QuickLink  311541. 

At  last  week's  conference. 
Schwartz  said  that's  still  pan 
of  the  plan  at  UPS.  The  corn- 
pan)’  will  rely  on  CDMA  nei- 
>vorks  that  are  operated  by 
carriers  such  as  Verizon  Wire¬ 
less  and  Sprint  PCS  Group  to 
augment  GPRS  in  the  U.S..  be¬ 
cause  Redmond.  Wash. -based 
AT&T  Wireless  doesn't  pro¬ 
vide  coverage  in  all  pans  of 
the  country,  she  said. 

Gartner  anal>'st  Ken  Du¬ 
laney  said  UPS  has  no  choice 
but  to  go  with  both  GPRS  and 
CDMA  in  the  U3.  In  contrast. 
European  countries  offer  com¬ 
panies  GPRS  as  a  single  wire¬ 
less  standard,  he  noted. 

The  AT&T  Wireless  GPRS 
network  will  be  tested  at  pack¬ 
age-deliver)'  hubs  with  more 
than  60  drivers,  UPS  said.  I 
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MARK  HALL  ■  ON  THE  MARK 

rr  Digital  Dashboard 
To  Get  Face-lift . . . 

. . .  and  improved  integration  with  major  applications  in  Version  5.0  of 
Kintana  Dashboard  slated  for  June,  sources  said.  Kintana  Inc.  in  Sun- 
n3rvale,  Cali£,  whose  eponymous  IT  capacity  planning  and  resource 
management  product  has  attracted  a  growing  number  of  users  in  the 
past  year,  will  begin  beta-testing  its  anticipated  upgrade  next  month. 
The  company  is  adding  adapters  for  Microsoft  Outlook  and  People- 
Soft.  It  also  plans  to  improve  the  dashboard's  integration  with  Micro¬ 


soft  Profcct.  Expect  to  sec  some  modifi¬ 
cations  to  the  user  interface,  such  as  ap- 
provaJ  bunoos  appearing  at  both  the  top 
and  bottom  of  the  scrolling  screens. 
William  Farrow.  CIO  at  the  Chicago 
Board  of  Trade  and  a  user  of  Kintana 
Dashboard,  said  an  adapter  to  Iht  gmral 
wogv  pornon  omopwooR  vNMD  M  aome* 
Ainp  rmtfy  hot*  for  his  company  because  it 
has  done  little  customization 
to  its  PeopieSoft  application 
and  would  be  able  to  quickly 
adopt  the  upgrade  and  roll  IT 
project  changes  into  the  cor¬ 
porate  general  ledger  ■  Al- 
thou^  CRM  giant  SllM  Syt- 
tMn  bw.  ii  grtdno  hmciiad 
anund  these  days  by  its  much 
smaller  ASP  competitors, 
such  as  $alesForcc.com  inc. 
and  Upshot  Inc.,  larger  com¬ 
panies  still  prefer  it  At  least 
that’s  what  CIOs  were  saying 
at  Computerwori<fs  Premier 
100  IT  Leaders  Conference 
last  week.  Even  Jay  Gardner. 

CIO  at  BMC  Software  inc.  in 
Houston,  whose  company 
bombed  its  first  two  attempts 


to  install  Siebel.  said  BMC  evaluated  the 
ASP  approach  after  two  failed  Siebel  in¬ 
stalls.  but  ‘Ve  felt  the  ASP  rnmM  wohM  not 
givt  us  Iht  control,  aglly  or  walahty  to  go 
where  we  wanted  to  go."  Third  time  be¬ 
ing  the  charm.  BMC  now  has  3,500  users 
of  Siebel  and  Gardner  said  tbe  com¬ 

pany  will  upgrade  to  Version  7.05  this 
summer.  In  fact,  when  tbe  upgrade  is 

complete,  tbe  Siebel  applica¬ 
tion  running  on  an  Oracle 
data  warehouse  will  be  tbe 
primary  repository  for  all 
corporate  data.  Maybe  "tbe 
end  of  software,'*  a  Sales- 
Force.com  mariceting 
mantra,  isn't  so  nigh  after  all. 
■  Hyp*  prapans  <N  hr  ttw 
hlura,  suggests  Tun  Howes. 
CTO  at  Opsware  Inc.  in  Sun¬ 
nyvale,  Calif.  But  what  if  tbe 
future  is  already  here?  Com¬ 
panies  like  IBM.  Hewlett- 
Packard  Co.  and  Sun  Micro¬ 
systems  Inc,  with  their  vari¬ 
ations  on  utility  computing, 
"are  maricedng  their  vision 
of  vdial  data  center  comput¬ 
ing  will  look  like  in  three  to 


www.cornoulerworld.coRi 


five  years."  he  says.  Howes  doubts  that  it 
will  resemble  what  tbe  major  vendors  are 
betting  on.  That’s  because  these  Big 
Three  vendors  have  all  built  their  utility 
model  around  big  iron.  But  Howes  pooh- 
poohs  that  idea.  "If*  more  wpaMha  taldne 
th*  maWiin*  approach  than  going  down  to 
[computer  retailer]  Fry’s  and  buying  an¬ 
other  inexpensive  server,"  be  claims. 
They’re  more  reliable  and  just  plain 
cheaper,  too."  Furthermore,  be  argues,  a 
lot  of  what  tbe  Big  Three  are  selling  al¬ 
ready  exists,  such  as  load-balancing  and 
shared-server  pools,  and  companies  are 
already  handlii^  planned  surges  (Super 
Bowl-type  events)  and  unplanned  surges 
(such  as  9/11)  in  resource  demand.  His 
view,  of  course,  is  tainted  by  a  different 
sales  pitch,  which  is  that  Opsware  system 
management  software  lets  you  manage 
scads  of  small  servers  with  ht  fewer  re¬ 
sources.  Howe  boasts  that  a  single  sys¬ 
admin  can  "easily  handle  100  machines" 
with  agents  called  Intelligent  Software 
Modules  (ISM).  These  ISMs  have  to  be 
written  for  each  program  running  on  the 
server.  C^urrentiy,  Opsware  has  60  ISMs, 
but  it  vrill  have  a  "couple  hundred"  by 
year's  end,  Howe  says.  ■  You  might  want 
to  o*(  soma  corilrol  ow  «l  thoOT  Fry’s  ritop- 
pars  by  installing  Frictionless  Sourcing 
3.0,  a  policy-based  procurement  package 
that  helps  manage  spending  that  doesn’t 
always  go  through  tte  purchasing  depan- 
menL  Available  this  w^  from  Friction- 
less  C>}mmerce  Inc  in  Cambridge.  Mass., 
the  upgrade  includes  a  handful  of  new 
moduli  including  spend  analysis  and 
woiicflow  management.  It  can  also  do  de¬ 
mand  aggregation  so  targe  companies 
with  multiple  locations  buying  the  same 
products  can  build  a  single  large  pur¬ 
chase  order  for  a  better  deaL  And  global 
companies  now  can  have  workers  review 
a  single  purchase  in  their  local  languages 
and  currencies.  P 


Sockeye  Upgrades  WAN  Routing  Toots 
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Ford  to  Slash  IT 
Budget  by  SSOOM 

FMIMKCaHUiriaiMng 
tafTbHrigsIky^OHlSaOOfni- 
hn  SB  part  of  a  eoaHaduefleo 
MMm  Ail  bagM  Mfly  iMt 
yaar.  tha  ctiAacIn  «■  baar 
Fare's  IT  apmiaa  by  20%  and 
Ml  iaduda  Iqafli  ol  Mffla  ol 
ta  2,000  cantoael  IT  amriars,  a 
^sbMMi  add.  Ha  addad  dwt 
FM  taMch  has  abaul  6,000  IT 
aldlifs.iaa«Bluadbig«diichprd- 
ads  adi  ba  aflaeiad  by  0»  cuts. 


HP  Results  HH  by 
Weak  U5.  Sales 

HaaMf-fackaid  Ca  raportad 
bawr  Aw  a^artad  tknirid 
rmOi  far  to  M  qavAr  Md 

pbMdMdafAabtowonnfi- 

Aaiad  UMk  IT  vandhi  A  Aa 
ILS.  HP  add  ft  M  a  $72t  nritom 
praOl  on  raema  af  Sf7 J  Uton 
to  At  dvdr,  wHcb  andad  dm. 
01  HP  dUa*!  dbdoaa  oompara- 
tot  yMravtor  Manbara  Aal 
tdn  to  acqddton  of  Conipaa 
Compitor  Coip.  tola  aecouoL 


CERT.ITVendofs 

WvnofSPFbw 

The  COfT  CoordhHlfon  Caatir  to 
PRItooi^  wamad  abaul  a  aofl- 
<Mn  w  BMi  COM  siaci  nai- 
waridag  dodeaa  aMi  aapport  for 
■n  waavBii  ■aoMian  nunsai 

(SIPl  Andyila  ad  IT  oondoft 
aW  aam  baMO*!  roportad  any 
prabtoM  «  a  roauft  of  At  flaor. 
SntyondofaMohaaClMeSya- 
tons  lac.  and  HmM  Hdmato 
lid.  add  aoM  al  Adr  pmtoeia 
art  wdninblo.  and  Aay  haoa 
nadt  pdchaa  awtoblo. 


Short  Tdes 

oai  COMPUIER  CORP.  CEO 
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Ani  Aa  canany  «■  Mionea 
to  Ird  OdKbrandad  pfbton 
AtoHMA....DMNEMC.,a 
CUeaBt'bMod  aatonra  and  IT 
aattdcna  oandii’,  6bd  for  Cbaplar 
npratoctooMladdiraiVtor- 
ing  a  paaAto  aalt  ot  to  aaaala. 


nv  aiATT  HAWnCCH 

Sockeye  Networks  Inc.  today 
will  release  an  upgrade  of  its 
wide-area  network  routing- 
optimization  software  that’s 
designed  to  support  tbe  com¬ 
plex  network  biUing  models 
used  by  companies  that  rely 
on  multiple  Internet  service 
providers  (ISP). 

With  tbe  new  capabilities 
built  into  Version  3i)  of  Sock- 
eye’s  GlobalRDute  technology, 
companies  that  use  more  than 
one  ISP  can  automatically  set 
up  optimal  routes  for  network 


traffic,  based  on  the  terms  of 
their  contracts.  Network  man¬ 
agers  can  use  the  information 
to  move  traffic  to  ^ter  or 
cheaper  links  and  to  help  re¬ 
negotiate  ISP  contracts  when 
they  come  up  for  renewal, 
Sodceye  officials  said. 

The  Waltham.  Mass.-based 
company  is  the  secotd  vendor 
in  the  emerging  market  for 
route-control  technology  to 
aimounce  an  upgrade  in  re¬ 
cent  weeks.  Fremont.  Calit- 
based  netVmg  Inc.  last  month 
shipped  a  new  release  of  its 


Flow  Control  Platform  soft¬ 
ware  and  added  a  pair  of  low- 
end  route-control  appliances. 

Other  companies  that  offer 
technology  to  help  users  fmd 
tbe  fastest  and  cheapest  routes 
for  data  traffic  over  WAN  links 
include  RouteSdence  Tech¬ 
nologies  Inc.  in  San  Mateo. 
Calif,  and  Proficient  Systems 
Inc.  in  Atlanta.  But  Sodteye  is 
tbe  only  vendor  offering  ^ose 
capabilities  as  a  managed  ser¬ 
vice,  said  Charles  Rutstein.  an 
analyst  at  Forrester  Research 
Inc.  in  Cambridge.  Mass. 


Sockeye  instaUs  its  route- 
control  appliances  al  cus¬ 
tomer  sites  and  manages  them 
for  monthly  fees  that  start  at 
S4,000. 

Distal  West  Networks  Inc., 
an  IT  hosting  company  in  San 
Luis  Obispo,  Calif,  has  been 
using  GlobalRoute  3.0  for 
about  a  month  to  help  set  up 
optimum  routing  for  the  data 
that’s  handled  by  its  four  ISPs, 
said  Chief  Technology  Officer 
Josh  Richards. 

"It’s  in  our  interest  to  get 
our  customers'  traffic  pushed 
as  fost  as  possible,  and  this 
software  has  provided  a  differ¬ 
entiator  for  us,"  be  said.  I 


Now  you  can  know 
what,  when,  where 
and  how  data  change 
has  occurred. 


Tripwire*  assures  the  integrity  of  your  data 
and  gives  you  the  ability  to  effectively  pinpoint 
and  manage  undesired  change  across  all  your 
servers  and  network  devices.  By  establi^ing 
a  baseline  of  data  in  its  known  good  state. 
Tripwire  software  monitors  and  reports  any 
changes  to  that  baseline  and  enables  rapid 
discovery  and  recovery  when  an  undesired 
change  occurs. 

Maximize  System  Uptime 

■  Identify  change  quickly 

■  Enable  quick  restoration  to  a  desired  state 

■  Eliminate  risk  and  uncertainty 
Failsafe  Foundation  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Enable  detailed  audit  reporting  * 

■  Granular  visibility  and  control 

Lo%ver  Costs  and  Frustration 

■  Greatly  reduces  the  time  it  takes  to 
find  and  diagnose  problems 


Tripwire's  data  integrity  assurance  solutions 
are  the  only  way  to  have  100%  confidence 
that  your  systems  remain  uncompromised. 

In  the  event  of  a  change  in  state,  you’ll  know 
exactly  what,  when,  where  and  hew  change 
has  occurred  so  you  can  recover  quickly 


For  a  FREE  3CMlay  fulty-functlorMl  demo 
and  copy  of  the  white  pi4>er  “Data  Integrity 
Assurance  In  a  Layered  Security  Shategy... 

call  toll-free;  1-800-TRIPWIRE  (874.7947) 
or  visit  http://enterprtae.tripwfrexom  today! 
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THE  DATA  NTEGRtTY  ASSURANCE  COWWNV 


O  Copyright  2003.  Tripwire  and  the  Tripwire  logo  are  registered  trademarto  of  Thpewe.  Inc. 
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Serial  SCSI  Promises 
Faster  I/O  in  Servers 


Drive  vendors  set 
shipment  plans  as 
spec  OK  nears 

•V  LUCAS  MCAKIAN 

An  IT  STANDARDS 

body  is  close  to  rati¬ 
fying  a  new  serial 
interface  speafica- 
tion  for  SCSI  disk  drives  that's 
expected  to  speed  up  1A3 
throughput  in  servers  and 
could  eventually  challenge  Fi¬ 
bre  Channel  tedwology's 
share  of  the  high-end  disk  ar¬ 
ray  pie. 

like  serial-attached  SCSI 
specification  is  expected  to  be 
approved  during  the  second 
quarter  by  the  TIO  technical 
committee  of  the  Washington- 
based  [nternational  Commit¬ 
tee  for  Information  Technolo¬ 
gy  Standards.  Disk  makers 
such  as  Seagate  Ibchnoiogy 
LLC  and  Maxtor  Corp.  last 
week  said  they  plan  to  begin 
shipping  serial  SCSI  drives  to 


system  vendors  b>'  year’s  end. 

The  IP-based  technology 
will  support  faster  I/O 
throughput  than  the  current 
parallel  SCSI  interface  does, 
said  Gordy  Lutz,  a  product 
marketing  manager  at  Scotts 
Valley.  Calif.-based  Se^te. 

Serial  SCSI  is  expected  to 

replace  its  parallel  _ 

pt^ecessor  as  the 
standard  disk-drive 
interface  in  most 
servers  as  well  as 
in  workstations 
and  low-end  to 

midrange  disk  ar-  _ 

rays,  according  to 
lohn  Lohmeyer,  the  TIO  tech¬ 
nical  committee's  chairman. 

Olive's  Advantages 

But  the  new  drives  will  also 
offer  foster  I/O  ^>eeds  than  Fi¬ 
bre  Channel  devices  do.  Loh¬ 
meyer  said.  And  like  Fibre 
Channel  technology,  serial 
SCSI  drives  will  have  dual  I/O 
ports  for  foil-over  purposes 


TWIFHINE 

Users  wi  be  atte  to  comtMw 
aenal  SCSI  dnves  and  less 
expensM  ATA  devees  m 
servers  end  dislisiays; 

OQoIckLMi  38708 


and  will  support  simultaneous 
send-and-receive  operations. 

Seagate,  which  niakes  about 
95%  of  the  Fibre  Channel 
drives  used  in  high-end  disk 
arrays,  said  it  expects  serial 
SCSI  and  Fibre  Channel  to 
complement  each  other.  But 
Milpitas.  CaliL-based  Maxtor 
is  betting  on  serial 
SCSI  to  replace  Fi¬ 
bre  Channel  disk  in 
five  to  10  years. 

Because  the 
specifreation  sup¬ 
ports  p>omi-to- 
point  connections 
between  disks  and 
controllers  through  the  use  of 
so-called  enenders.  there 
should  be  no  competing  de¬ 
mands  to  slow  down  the  flow 
of  data,  as  there  are  on  con¬ 
ventional  system  buses,  said 
Brendan  Collins,  director  of 
product  maiketing  at  Maxtor. 

Lev  Gonick.  CIO  at  Case 
Western  Reserve  University  in 
Cleveland,  said  the  ability  to 


open  up  the  internal  band¬ 
width  of  servers  is  serial 
SCSI’s  greatest  potential  fea¬ 
ture  for  improving  his  school's 
operations. 

Mark  Price,  director  of 
enterprise  architecture  at 
Carlson  Companies  Inc.,  said 
serial  SCSI  will  become  inter¬ 
esting  to  the  Minneapolis- 
based  travel  industry  con¬ 
glomerate  “at  the  point  when 
the  cost  of  it  becomes  equal  to 
or  less  than  what  we're  cur¬ 
rently  using.” 

Carlson  now  uses  a  Fibre 
Channel  storage-area  network 
(SAN)  with  multiprotocol 


switches  made  by  San  Jose- 
based  Nishan  Systems  Inc  to 
connect  mirrored  data  centers 
over  IP.  But,  Price  said,  “wc 
think  Fibre  Channel  is  proba¬ 
bly  a  shorter-lived  technology. 
It’s  very  expensive  and  com¬ 
plicated  to  implement.” 

Serial  SCSI  will  likely  be¬ 
come  “an  alternative  to  doing 
Fibre  Channel  in  [SANsl.  but 
it’s  not  the  panacea,"  said 
Jamie  Gruencr,  an  analyst  at 
Gartner  Inc.  in  Stamford, 
Conn.  “It’s  meant  to  replace 
parallel  SCSL  It’s  not  meant  to 
be  a  complete  replacement  of 
everything."  8 


■  36  M/sec  throughput.  wMh 
66  bit^.  planned  tv  2006 

■  Indudes  dual  i/0  ports 

a  Suc^KTts  external  cable 
tengfeotupto6meters 

a  Uses  a  direct-connect  architec¬ 
ture  with 'extenders*  to  link  mut* 
tiple  disk  drives 


n26  bit/sec.  throughpuL  wflh 
46  bit/sec  planned  by  2005 

a  Includes  dual  I/O  ports 

a  Supports  external  cable 
lengths  ot  up  to  15  metos 

a  Uses  arbitrated  loops  or  loop* 
switched  archilectures  to  link 
mitliple  disk  drives 


Veritas  Upgrades  Backup  Software,  Looks  to  Diversify 


BV  LUCAS  MCAmAH 

Veritas  Software  Corp.  last 
week  upgraded  Its  flagship 
data  backup  lechnolo^.  But 
Veritas,  the  second-laigest 
vendor  of  storage  manage- 
raeni  tools,  is  also  embarking 
on  an  acquisition-fueled  strat¬ 
egy  to  expand  into  other  IT 
management  technologies. 

The  plan  to  augment  prod¬ 
ucts  such  as  its  NetBac^p 
software  with  new  server  and 
application  management  tools 
b  aimed  at  helping  Mountain 
View,  (^if.-baMd  Veritas 
compete  against  more  diversi¬ 
fied  rivals  such  as  EMC  Corp.. 
(Computer  Associates  Interna- 
tkioal  Incand  CBM. 

Veritas  officials  said  their 
goals  are  to  offer  IT  adminis¬ 
trators  a  bundled  suite  of  man¬ 
agement  to<^  and  increase 
the  company’s  annual  revenue 
from  S1.S  billion  to  SS  billion 


over  the  next  three  years. 

To  some  users,  the  plan 
makes  a  lot  of  sense.  For  ex¬ 
ample,  Tom  Guthrie,  vice 
president  of  technology  oper¬ 
ations  at  Atlanu-bosed  Cox 


Communicatiorts  Inc.,  said 
there’s  definite  value  in  the  di¬ 
rection  Veritas  is  taking. 

“With  all  of  our  vendors, 
we've  encouraged  them  to  go 
up  the  value  chain  in  areas 
they're  good  at.  and  we’re  hap¬ 
py  to  interact  with  them  about 
t^t,”  Guthrie  said.  He  recent¬ 
ly  standardized  backup  opera¬ 
tions  on  Cox’s  10TB  storage- 
area  network  (SAN)  by  in- 
stalling  NetBackup. 

Veritas  has  announced  three 
acquisitions  since  November, 
adding  products  in  areas  such 
as  server  provisioning  and  ap¬ 
plication  performance  man¬ 
agement  (see  box). 

Bill  Augustadt,  chief  tech¬ 
nology  officer  at  BlueStar  So¬ 
lutions  Inc.,  said  the  ability  to 
pool  server  capacity  to  ad¬ 
dress  application  needs  and 
then  monitor  performance  on 
the  fly  should  help  the  Cuper¬ 


tino.  Calif. -based  application 
outsourcing  firm  more  effi¬ 
ciently  control  its  services  ac¬ 
cording  to  customer  needs. 

“Any  automation  we  can  do 
will  allow  us  to  scale  across 
platforms  with  fewer  people 
to  manage  them."  said  Aug¬ 
ustadt,  who  uses  various  Veri¬ 
tas  products  to  handle  data 
backups  on  a  160TB  SAN. 

Veritas'  big  task  this  year  is 
to  “consolidate  and  integrate 
the  companies  we  acquired,” 
said  Jeremy  Burton,  the  com¬ 
pany's  chief  marketing  offlcei. 
“But  I  don’t  think  it  will  be 
technology  that  hinders  us.”  If 
problems  do  arise,  they  most 
likely  will  be  related  to  sales 
execution  issues,  he  noted. 

Anders  Lo%ren.  an  analyst 
at  Giga  Information  Group 
tnc„  predicted  that  other  stor¬ 
age  software  vendors  will 
adi^t  similar  expansion  plans. 


But,  he  added,  “for  Veritas  to 
build  credibility  outside  of  the 
storage  management  space  — 
that  will  take  some  time.” 

in  January.  Veritas  reported 
a  fourth-quarter  net  loss  of 
S49  million  on  revenue  of  S405 
million.  But  the  company  said 
business  was  better  than  ex¬ 
pected.  and  it  reported  a  $57 
million  profit  for  2002  as  a 
whole,  compared  with  a  net 
loss  of  $643  million  for  2001. 

NetBackup  4.5  includes  a 
new  feature  called  Instant  Data 
Recovery,  which  lets  users 
recover  data  directly  from 
disk  drives  instead  of  from 
upe  devices.  Veritas  said.  The 
upgrade  also  streamlines  the 
process  of  storing  Microsoft 
Exchange  e-mail  attachments.  I 

HOEnWMKWmi 

CcK  ComrnriicaliarB  sais  NeiBadajo 
has  helpad  inenase  usa  ol  ds  actable 
storagacapacay. 
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If  you're  busy  monitoring  your  servers, 
who's  watching  your  business? 


% 


Hi*  MW  HP  Piailuiil  D1740 
•■woy  wMi  twHptwg 


■  UltrodenM  4u  modular  chowis 
with  up  to  aiQhl  Inlol*  Xoort'*'  MP 
1.5  G1^  or  2.0  GHz  processors 

■  Up  to  64GB  oddressoble  memory 

■  Groundbreaking  F8  chipset 

•  6-64  bil/lOO  MHz  PO-X  slots 

■  Integrated  Lights-Out  Standard 
(ilO)  lor  Remote  Server  AAgmI. 


Ttw  MW  HP  PriUanl  0i7M 
03  I»woy  wMi  (M'plug 


•  Up  to  eight  Intel*  Xeon***  A4P 

I.S  GHz  or  20  GHz  processors 
-  Up  to  64GB  oddressoble  memory 

■  Groundbreaking  F8  chipset 

•  10-64  bit/100  MHz  PChX, 

1-64  bit  33  MHz  slots 

■  Remote  Insight  lights-Out  Edition  tl 
(opliortol)  lor  Remote  Server  Mgmt. 


What  cholengei  do  you  bee  today?  Oecreosing  budgets?  The 
lurkittg  possibility  ol  dmmtime?  It's  hard  enough  to  bcus  on 
moving  your  business  brword  when  ^'re  conslonlty  looking 
over  your  shoulder  to  see  il  everything  is  up  ond  running. 

Besides,  that's  the  iob  ol  the  new  HP  Proliant  01700  series 
running  Intel*  Xean”*  A4P  processors  An  adaptiw  inhosiructure 
begins  with  these  HP  ProLiortt  servers  which  come  equipped 
with  tools  that  predict,  sell-diognMe  ortd  fix  mony  fouh 
coitditions.  Aitd  nmr  with  hot-plug  RAC  memory  exclusively 
from  HR  you  con  odd  or  reploce  DIMMs  without  tumirsg 
your  systems  off.  Both  work  with  the  HP  Proliant  Essentials 
Foundation  Pock  baturing  ktsight  Manager  /software  which 
monitors  ortd  controls  your  infrastructure  for  moxirrtum  uptime. 

At  the  ertd  of  the  day,  you'll  have  rrtore  corttrol  over  your 
infrostructure,  help  ovoid  unplanned  downtime  and  reduce 
overoU  maintenance  costs.  Not  to  mention  freeing  yourself 
up  for  more  importont  things. 

To  loom  how  HP  ProLiont  lenrore  con  bo  o 
port  of  moniniiring  yossr  componyb  uptime, 


of  VHiAo«lip#cofn/^o/|wollont39  oc  cedi 

eptfon  S,  Md  membn  code  YPH. 


O  3003  Hewtee-Pockord  Company,  tnnl  and  the  Intel  Xeen  Lege  ore  trademarks  or  regiuered  trademarks  of  Mel  Cerperotian  or  Us  subsidiaries  in  the  IMited  Stales  and  odier  touneies. 
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Qwest  Execs  Face 
Fraud  Charges 

The  Justica  Department  said  a 
Denver  erand  iury  indicted  four 
former  Qwest  Corienunications 
International  Inc.  executives  00 
corporate  accounting  fraud 
charges.  The  Securite  artd  Ex¬ 
change  Commissioo  also  filed 
cnfl  fraud  charges  against  the 
four  as  wei  as  three  other  for¬ 
mer  executives  and  Qwest's  cur¬ 
rent  serdor  vice  presideM  of  fi- 
nmee.  Denver-based  Qwest  said 
it’s  cooperating  with  the  probe. 


Bankrupt  Peregrine 
Turns  to  Mediator 

Peregrine  Systems  Inc.  said  H 
has  aipeed  lo  use  a  mediator  to 
try  to  resolve  deferences  with  its 
credhors  over  a  bankruptcy  reor¬ 
ganization  plan  fiiad  by  the  San 
Oiego-based  asset  management 
software  vendor.  In  return,  the 
crerfitors  «nl  stay  a  motion  saek* 
ing  to  and  PirtgiiDt’s  exclusive 
right  to  propose  s  reorganiza¬ 
tion.  Peregrine  sought  Chapter  11 
pnitectiofl  In  September. 


SAP  Readies  CRM  Upgrade 
With  Vertical  Industry  Focus 


New  apps  will  also  include  increased 
support  tor  Web  senices,  mobile  users 


BT  MARC  L.  SONOIHI 

SAP  AG  is  readying  an 
upgrade  of  its  custo¬ 
mer  relationship  man¬ 
agement  (CRM)  soft¬ 
ware  that  officials  said  will  de¬ 
liver  more  industry-specific 
functions  and  increased  tics  to 
other  applications. 

SAP  plans  to  release  the 
next  version  of  its  mySAP 
CRM  software  in  June.  As  part 
of  the  upgrade,  it  will  expand 
the  ability  of  the  applications 
to  use  Web  services  technolo¬ 
gy  to  take  data  feeds  from 
both  internal  and  external  sys¬ 
tems,  said  Peter  Zeocke,  a 
member  of  SAP's  executive 
board.  I'hat  will  let  users  draw 
on  more  information  and  bet¬ 
ter  exploit  analytical  CRM 
tools  to  improve  their  interac¬ 
tions  with  customers,  he  said. 
The  new  release  will  also 


include  built-in  business  proc¬ 
esses  specific  to  22  vertical  in¬ 
dustries.  Zencke  said.  For  in¬ 
stance,  SAP  plans  to  expand 
its  marketing  campaign  man¬ 
agement  functions  for  compa¬ 
nies  in  the  consumer  packaged 
goods  market. 

Seeking  a  Remedy 

Eric  Bloom,  vice  president  of 
FT  at  Endo  Pharmaceuticals 
Holdings  Inc.  in  Chadds  Ford. 
Pa^  uses  SAP's  Ry3  enterprise 
resource  planning  software 
and  said  he  would  like  to  see 
SAP  roil  out  a  CRM  module 
for  the  pharmaceuticals  indus¬ 
try.  The  ability  to  lie  together 
customer  data  from  multiple 
systems  would  be  a  big  advan¬ 
tage  for  Endo.  he  noted. 

Bloom  said  SAP  has  been 
trying  to  put  togi'ihcr  such  a 
product,  but  he  added  that  it's 
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hard  for  vendors  to  create  a 
single  set  of  CRM  applications 
that  can  meet  the  needs  of 
companies  with  different  busi¬ 
ness  processes,  even  within 
the  same  industry.  Endo  cur¬ 
rently  uses  some  homegrown 
CRM  tools.  Bloom  said. 

An  SAP  spokesman  said 
pharmaceuticals  is  one  of  the 
vertical  industries  that  the 
CRM  upgrade  will  address 
through  functionality  such  as 


capabilities  for  analyzing  con¬ 
tested  charges  and  managing 
drug-sampling  procedures. 

SAP's  increased  vertical- 
market  focus  shows  that  it  rec¬ 
ognizes  there's  no  such  thing 
as  one-size-fits-all  CRM.  said 
Erin  Klnikin,  an  analyst  at 
Giga  Information  Group  Inc. 
in  Cambridge,  Mass.  Many 
users  have  struggled  to  apply 
CRM  technology  to  their  spe¬ 
cific  business  needs,  she  said. 

MySAP  CRM  in  particular 
could  appeal  to  R/3  users  be¬ 
cause  of  its  tight  integration 
with  SAP’s  back-office  appli¬ 
cations.  Kinikin  added. 

SAP  will  make  all  Us  CRM 
functionality  accessible  to  end 
users  with  mobile  devices  for 
online  or  off-line  processing. 
Zencke  said.  Currently,  hand¬ 
held  devices  are  limited  to  us¬ 
ing  SAP’s  sales  force  automa¬ 
tion  tools.  The  company  W'ill 
also  make  R/3  and  its  other 
business  applications  hand¬ 
held-accessible.  Zencke  said.  I 


MKrosoft  Upgrades 
XP  Rollout  Tools 

Mtefosoh  Cofp.  updated  toob 
that  art  designed  to  help  carpo- 
rato  uean  sp^  up  rollouts  of 
Windows  XP  Protonional  artd 
Otfios  XP.  Tht  toois.  avalabla  at 
no  cost  on  Wcrooolt’s  Wob  she, 
nckida  now  fsatures  for  testing 
appfiotion  compatliiity  and 
scanning  PCs  for  missing  securi¬ 
ty  igNtotes.  Weroseft  ako  began 
beto-toating  a  tool  kM  for  devel- 
optog  poor-to  peer  applications. 


Short  Takes 

COMPUTER  kSSOCUTES  INTER- 
NATMMAL  INC.  plMB  tids  weok 
to  rtosaii  Itoriton  7  of  Ms  eTrusI 
AfilMnm  software,  which  bun- 
des  togettwr  several  took. .. . 
ENTERASVS  NETWOltKS  INC.  in 
Roche  »tor.  Nit.  seld  H  has  set- 
tlad  an  aeceunting  investigation 
tounehod  by  ttw  SEC  iHt  yem . 


Continued  from  page  I 

CRM  Analytics 

dig  through  data  repositories 
for  customer  information  and 
then  dump  the  data  into  Excel 
spreadsheets  in  order  to  con¬ 
duct  analyses.  Carroll  said. 

The  analytical  applications 
now  take  feeds  directly  from 
Honeywell's  Siebel-based  call 
center  and  sales  force  automa¬ 
tion  systems  as  well  as  from 
other  data  sources.  In  addi¬ 
tion.  the  dashboard  user  inter¬ 
face  is  easy  to  use  and  config¬ 
ure,  Carroll  said.  **We  had 
many  pessimistic  people  here, 
but  now  it’s  'click'  and  take 
off,’’  he  added,  referring  to 
prompts  that  are  built  into  the 
software  to  help  automate 
data-analysis  procedures. 

CRM  analytics  “has  been 
the  next  'new'  thing  that  never 
really  happened  for  the  past 
few  years,’’  said  Erin  Kinikin. 
an  analyst  at  Giga  Information 


Group  Inc.  in  Cambridge. 
Mass.  But  that  could  change 
over  the  next  couple  of  years, 
now  that  San  Mateo,  Calif.- 
based  Siebcl  and  other  CRM 
vendors  are  moving  to  embed 
analysis  c^bilities  into  their 
applications,  she  said. 

In  addition  to  Siebei’s  analy¬ 
sis  technology.  PeopleSoft  Inc. 
in  December  announced  a 
marketing  module  with  30 
built-in  analytical  capabilities. 
SAP  AG  said  it  plans  lo  beef 


up  the  analysis  features  in  its 
CRM  software  as  part  of  an 
upgrade  due  in  June  (see  relat¬ 
ed  story,  above). 

The  Mutual  of  Omaha  Com¬ 
panies  is  in  the  initial  phases 
of  roiling  out  real-time  analyt¬ 
ical  CRM  software  developed 
by  San  Mateo-based  E.piphany 
Inc.  The  insurer  has  already 
implemented  E.piphany's  sales 
and  marketing  tools  and  is 
now  phasing  in  its  marketing 
and  campaign  analytics,  said 


John  O'Donovan,  first  vice 
president  of  e-business  part¬ 
nership  at  Mutual  of  Omaha. 

The  analytics  project  should 
be  wrapped  up  by  midsum¬ 
mer.  O’Donovan  said.  When 
it's  installed,  the  software  will 
let  the  company  use  CRM  ana¬ 
lytics  to  modify  its  maiiteting 
campaigns  on  the  fly.  based  on 
suggestions  derived  from  indi¬ 
vidual  customer  profiles. 

Mutual  of  Omaha  already 
uses  software  from  SAS  Insti¬ 
tute  Inc.  in  Cary,  N.C„  to  do 
data  mining  and  customer  seg¬ 
mentation  work  that  can  help 
target  its  marketing  programs 
at  specific  groups. 

But  O'Donovan  said  the 
two  products  will  comple¬ 
ment  each  other.  While  the 
SAS  technology  addresses 
historical  trending.  Epipha¬ 
ny’s  software  will  be  able  to 
help  call  center  workers  make 
marketing  decisions  when 
they’re  on  the  phone  with 
ctistomers.  I 
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QMWSt  Execs 
Fraud  Charges 

Ttw  JlirtiM  DepwtnMrt  saw  • 
Danvw  graiW  Jury  Mfelad  four 


durgsSi  Um  SecMriBut  and  Ei’ 
cfcawga  CowwiaaioB  aWo  Wed 
cMIfrMW  etegaa  aoM  the 
four  as  «ul  as  IhrM  other  for- 
nor  gMcuthfM  and  QwHt's  etr- 
font  senWf  \rica  pwiWant  of  fr 
nancs.  Diear  bawd  Qwt  saW 
It's  cewparilhig  wMi  tha  probe. 


Bankrupt  Peregrine 
Turns  to  Mediator 

fhraflrisa  Systarna  fw.  ssid  N 
has  aoraad  to  uaa  a  fnadator  to 
try  to  raaohin  dMaranees  vrtlh  its 
crodHors  over  a  bardmifley  roor 
paidattonpiaatfcdbythaSan 
Oiavo-bnad  aaaat  managornenl 
■oftwara  voador.  In  ratum.  tha 
cradHors  «■  stay  a  iMtkm  aaok' 
Jag  to  and  ftranrins's  aadustva 
to  propoaa  a  raorganiza- 
tton.  Anagrina  soogM  Chapter  t1 
protection  in  Saptanbar. 


Microsoft  Upgrades 
XPRolout  tools 

ftBcroaoflCorp.  updated  tools 
that  vodoaivMd  to  help  carpo* 
ralB  aeon  ipoad  up  raleiits  of 
wnopnis  Mr  noimonai  ano 
Oflica  XP.  Tha  taoli.  aralaUa  at 
■0  cost  00  hicroaolfs  dWb  sila, 
inchida  naar  faaluras  lor  tasttaig 
apptcalion  ceinpalMBly  and 
acanning  PCs  for  ndaokig  aaaoi* 
ty  updalBS.  Mfcronolt  also  bagw 
beta  taatingateolMtfardavai- 


Short  Takes 

COUPUTERASSOCUTESMTER- 
NATIONAL  MC.  plana  tMs  taaali 
to  raloaia  VbrslM  7  of  Ms  aTrust 
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SAP  Readies  CRM  Upgrade 
With  Vertical  Industry  Focus 


New  apps  will  also  include  increased 
support  for  Web  services,  mobile  users 


BY  MAXC  L.  SOHOINI 

SAP  AG  is  readying  an 
upgrade  of  its  custo¬ 
mer  relationship  man¬ 
agement  (CRM)  soft¬ 
ware  that  offidats  said  will  de¬ 
liver  more  industry-specific 
ftinciioos  and  increased  ties  to 
other  applications. 

SAP  plans  to  release  the 
next  version  of  its  mySAP 
CRM  software  in  June.  As  part 
of  the  up^de.  it  will  expand 
the  ability  of  the  applications 
to  use  Web  services  technolo¬ 
gy  to  take  data  feeds  from 
both  internal  and  external  sys¬ 
tems.  said  Peter  Zeocfce.  a 
member  of  SAP’s  executive 
board.  That  will  let  users  draw 
on  more  information  and  bet¬ 
ter  exploit  analytical  CRM 
toots  to  improve  their  interac¬ 
tions  with  customers,  he  said. 
The  new  release  will  also 


include  built-in  business  proc¬ 
esses  specific  to  22  vertical  in¬ 
dustries.  Zencke  said.  For  in¬ 
stance.  SAP  plans  to  expand 
its  marketing  campaign  man¬ 
agement  functions  for  compa¬ 
nies  in  the  consumer  packaged 
goods  market 

Seeking  a  Remedy 

Eric  Bloom,  vice  president  of 
IT  at  Endo  Phaimaceuticab 
Holdings  Inc.  in  Cbadds  Ford. 
Pa.,  uses  SAP’s  R/3  enterprise 
resource  planning  software 
and  said  he  would  like  to  see 
SAP  roll  out  a  CRM  module 
for  the  pharmaceuticals  indus¬ 
try.  The  ability  to  tie  together 
customer  data  from  multiple 
systems  would  be  a  big  advan¬ 
tage  for  Endo,  he  noted. 

Bloom  said  SAP  has  been 
trying  to  put  together  such  a 
product,  but  he  added  that  it's 
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hard  for  vendors  to  create  a 
single  set  of  CRM  applications 
that  can  meet  the  ne^  of 
companies  with  different  busi¬ 
ness  processes,  even  within 
the  same  industry.  Endo  cur¬ 
rently  uses  some  homegrown 
CRM  tools,  Bloom  said. 

An  SAP  spokesman  said 
pharmaceuticals  is  one  of  the 
vertical  industries  that  the 
CRM  upgrade  will  address 
through  functionality  such  as 


capabilities  for  analyzing  con¬ 
tested  charges  and  managing 
drug-sampling  procedures. 

SAP’s  increased  vertical- 
market  focus  shows  that  it  rec¬ 
ognizes  there’s  no  such  thing 
as  one-size-fits-all  CRM,  said 
Erin  Kinikin.  an  analyst  at 
Gigs  Information  Group  Inc. 
in  Cambridge,  Mass.  Many 
users  have  struggled  to  apply 
CRM  technology  to  their  spe¬ 
cific  business  needs,  she  said. 

MySAP  CRM  in  particular 
could  appeal  to  R/3  users  be¬ 
cause  of  its  tight  integration 
with  SAP’s  back-office  appli¬ 
cations,  Kinikin  added. 

SAP  will  makg  all  its  CRM 
functionality  accessible  to  end 
users  with  mobile  devices  for 
online  or  off-line  processing. 
Zencke  said.  Currently,  hand¬ 
held  devices  are  limited  to  us¬ 
ing  SAP’s  sales  force  automa¬ 
tion  tools.  The  company  will 
also  make  R/3  and  its  ocher 
business  applications  hand¬ 
held-accessible.  Zencke  said.  I 


Continued  from  page  1 

CRM  Analytics 


dig  through  data  repositories 
for  customer  information  and 
then  dump  the  data  into  Excel 
spreadsheets  in  order  to  con¬ 
duct  analyses.  Carroll  said. 

The  analytical  applications 
now  take  feeds  directly  from 
Honeywell’s  Slebel-based  call 
center  and  sales  force  automa¬ 
tion  systems  as  well  as  from 
other  data  sources.  In  addi¬ 
tion,  the  dashboard  user  inter¬ 
im  is  easy  to  use  and  config¬ 
ure.  Carroll  said  “We  had 
many  pessimistic  people  here, 
but  now  it’s  'click'  and  take 
off.“  be  added,  refenii^  to 
prompts  that  are  built  into  the 
software  to  help  automate 
data-analysis  procedures. 

CRM  analytics  “has  been 
the  next  ‘Dew*  thing  that  never 
really  happened  for  the  past 
few  years,"  said  Erin  Kinikin. 
an  analyst  at  Giga  Information 


Group  Inc.  in  Cambridge. 
Mass.  But  that  could  change 
over  the  next  couple  of  years. 
DOW  that  San  Mateo,  Calif- 
based  Siebel  and  ocher  CRM 
vendors  are  moving  to  embed 
analysis  capabilities  into  their 
applications,  she  said. 

In  addition  to  Siebel’s  analy¬ 
sis  technology.  PeopleSoft  Inc. 
in  December  announced  a 
marketing  module  with  30 
built-in  analytical  capabilities. 
SAP  AG  said  it  plans  to  beef 


up  the  analysis  features  in  its 
CRM  software  as  part  of  an 
upgrade  due  in  June  (see  relat¬ 
ed  story,  above). 

The  Mutual  of  Omaha  Com¬ 
panies  is  in  the  initial  phases 
of  rolling  out  real-time  analyt¬ 
ical  CRM  software  developed 
by  San  Mateo-based  E-piphany 
Inc.  The  insurer  has  alroady 
implemented  E.piphany's  sales 
and  marketing  toob  and  is 
now  phasing  in  its  marketing 
and  campaign  analytics,  said 


John  O’Donovan,  first  vice 
president  of  e-business  part¬ 
nership  at  Mutual  of  Omaha. 

The  analytics  project  should 
be  wrapped  up  by  midsum¬ 
mer.  O'Donovan  said.  When 
it’s  installed,  the  software  will 
let  the  con^iany  use  CRM  ana¬ 
lytics  to  modify  hs  marketing 
campaigns  on  the  fly,  based  on 
suggestions  derived  from  indi¬ 
vidual  customer  profiles. 

Mutual  of  Omaha  already 
uses  software  from  SAS  Insti¬ 
tute  Inc  in  Cary.  N.C.  to  do 
data  mining  and  customer  seg¬ 
mentation  work  that  can  help 
target  its  marketing  programs 
at  specific  groups. 

But  O'Donovan  said  the 
two  products  will  comple¬ 
ment  each  other.  While  the 
SAS  technology  addresses 
hbtorical  trending.  Epipha¬ 
ny’s  software  will  be  able  to 
help  call  center  workers  make 
marketing  decisions  when 
they’re  on  the  phone  with 
customers.  I 
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Outsourcing  Debate 
Driven  by  Q)st,  Agility 


IT  managers  find  oflfehore  outsourcing 
to  be  a  compelling  way  to  cut  costs 


G 


y  osT  PRESSURES  and 
the  need  for  in¬ 
creased 
^  business 
agility  are  leading  a 

growing  number  of _ _ 

companies  to  shift  rriunstM 
more  of  their  IT  work 
ofBhore.  according  to  pan¬ 
elists  who  disctissed  sourcing 
issues  at  the  Computerworld 
Premier  100  conference  here 
last  week. 

On  average,  60%  of  IT 
spending  now  goes  to  external 
companies  for  hardware,  soft¬ 
ware  and  services,  while  40% 
goes  to  stafC  said  Bart  Perkins, 
the  paikel  moderator  and  man¬ 
aging  partner  at  Leverage 
Partners  inc^  a  Louisville,  Ky.- 
based  CIO  consulting  firm. 

The  percentage  of  external 
spending  will  continue  to 
grow  as  more  companies  turn 
to  of&bore  outsourcing,  said 
Perkins,  who  is  also  a  Com- 
puterworid  columnist 

That's  the  trend  at  Agilent 
Technologies  Inc.,  a  spin-off 
of  Hewlett-Packard  which 
outsources  about  35%  of  its  IT 
work.  Two  years  from  now.  it 
expects  to  outsource  about 
60%  of  its  IT  functions,  partic¬ 
ularly  in  areas  such  as  applica¬ 
tion  development  and  mainte¬ 
nance.  The  reason:  Seven  con¬ 
secutive  quarterly  losses  arc 
driving  tte  Palo  Alto,  Calif.- 
based  company  to  reduce 
costs  and  become  ever  more 
agile  in  the  market  said  Marty 
Chuck.  CIO  at  the  scientific 
instrument  maker. 

The  cost  of  labor  in  places 
such  as  India  is  "too  com¬ 
pelling.’'  said  Chuck,  referring 
to  a  figure  ched  by  Merrill 
Lynch  &  Co.  Chief  Technology 
Officer  John  McfQoley  in  an 
earlier  conference  sesskm 
McKinley  estimated  the  sav¬ 


ings  from  offshore  outsourc¬ 
ing  of  n*  at  40%  to  50%. 

Currently.  90%  of  Agilent's 
IT  workforce  is  based  in  the 
U3.  and  Europe.  By 
2005.  Chuck  sees 
that  ratio  flipping, 
with  just  30%  of 
the  IT  workforce 
remaining  in  the 


U.S.  and  Europe. 

Agilent  isn't  alone.  A  few 
years  ago,  Northbrook.  Ill- 
based  Allstate  Insurance  Co. 
created  a  wholly  owned  IT 
subsidiary  in  Northern  IreUod 
to  help  cut  IT  costs  and  allow 


faster  response  to  competitive 
pressures.  Even  with  900  hi^ 
ly  skilled  IT  employees  there, 
CTO  Cathy  Brune  finds  heiself 
struggling  with  whether  to 
shift  operations  elsewhere. 

“Anytime  you  go  outside 
your  four  walls,  there's  risk  as¬ 
sociated  with  it,"  said  Brune. 
“But  if  you  have  a  very  smart 
team,  you  can  f^ure  things  out 
and  leam  from  others." 

"We'U  be  doing  more  out¬ 
sourcing  in  the  next  two 
years,"  said  George  Lin,  vice 
president  and  CIO  at  Docu- 
mentum  Inc.,  a  Pleasanton. 
Calif. -based  enterprise  con¬ 
tent  management  software 
vendor.  Both  near-shore  and 
offshore  vendors  “are  becom- 


60' ol  ll  •jgwndintj  i->  i;xliTi»dl. 


ing  more  savvy  about  under¬ 
standing  my  unique  business," 
said  Lin.  That's  one  reason  he 
expects  bis  company  to  move 
a  growing  portion  of  its  soft¬ 
ware  quality  assurance  and 
maintenance  offshore. 

While  offshore  outsourcing 
might  be  attractive  from  a  cost 
standpoint,  there  are  wrench¬ 
ing  cultural  and  political  issues 


that  IT  managers  have  to  iron 
out  with  domestic  IT  employ¬ 
ees.  '’You  have  to  be  honest 
with  people  and  [tell  them] 
what  you're  planning  on  do¬ 
ing."  said  Brune.  It's  also  im¬ 
portant  to  help  them  improve 
their  technical  skill  and  busi¬ 
ness  acumen  to  keep  them 
valuable  to  tbe  organization. 

Retaining  technical  knowl¬ 
edge  of  certain  technologies 
that  are  sent  offshore  is  a  must 
as  well,  said  Chuck.  “If  you 
don't  retain  some  of  that 
knowledge  in-bouse,  it’s  al¬ 
most  cost-prohibitive  to  bring 
it  back  in."  he  said. 

For  its  part,  Agilent  plans 
to  keep  people  with  business 
process  and  project  man^e- 
ment  expertise.  In  addition,  it 
has  optt^  not  to  outsource  its 
data  center  operations,  since  a 
recent  benchmarking  exercise 
revealed  that  Agilent  can  run 
its  back-office  operations  more 
cost-effectively  than  service 
providers  caa  I 


Microsoft  Security 
Czar  Critiques  Efforts 


‘Traffic  cop’  says 
company  making 
strides  toward  goal 


Listeners  praised  Microsoft 
Corp.'s  recent  efforts  to  im¬ 
prove  product  security  and 
patch  maiugeinent  after  bear¬ 
ing  Scott  Charney,  the  compa¬ 
ny's  chief  security  strategist, 
describe  them  in  detaU.  But 
they  agreed  that  Microsoft 
hasn't  yet  shown  it  can  reach 
its  own  security  goals. 

Speaking  here  at  the  Com- 
puterworld  Premier  100  con¬ 
ference  last  week.  Charney 
explained  bow,  as  part  of  its 
Triistwortfay  Computing  ini¬ 
tiative.  Microsoft  delayed  the 
release  of  products  such  as 
Windows  2003  and  Visual  Stu¬ 
dio  That  delay,  be  said, 
gives  developers  who  have 
been  trained  in  areas  such  as 
threat  modeling  and  penetra¬ 
tion  testing  a  chance  to  review 


the  software  code  for  flaws. 

The  company  also  added 
two  layers  of  security  verifica¬ 
tion  outside  of  the  product 
groups,  because  making  devel¬ 
opers  in  tbe  product  groups 
responsible  for  security  “was 
like  having  the  fox  guarding 
the  henhouse."  Charney  said. 

And  despite  complaints 
from  some  corporate  users. 
Microsoft  products  will  now 
be  shipped  with  maximum 
security  features  turned  on. 
Charney  said. 


Those  moves  are  essential, 
according  to  Phil  Dunkelberg- 
er,  CEO  of  PGP  Corp^  a  soft¬ 
ware  security  provider  in  Palo 
Alto,  Calif.  “Now  they  have  a 
guy  who  is  a  traffic  cc^  who 
does  not  have  money  at  stake." 
he  said  of  Charney. 

Dunkelberger  went  on  to 
praise  the  idea  of  shipping 
products  with  security  fea¬ 
tures  enabled  by  default 
“Locking  down  products  when 
they’re  released  is  good,  even 
when  faced  with  resistance 
from  larger  users,”  he  said. 

But  he  expressed  disap¬ 
pointment  that  Charney  didn’t 
discuss  the  idea  of  opening 
up  the  security  elements  of 
Microsoft's  products  to  open- 


source  evaluation.  PGP’s 
source  code  is  released  for 
open-source  review  before  it’s 
sold  commercially. 

RA  Vernon,  chief  security 
officer  at  Reuters  America  Inc. 
in  New  York,  said  that  before 
Microsoft  can  achieve  the 
goals  of  its  Trustworthy  Com¬ 
puting  initiative,  “maior  cul¬ 
tural  change  has  to  take  place" 
within  Microsoft. 

Charney  acknowledged  that 
that  was  true,  specifically  in 
relation  to  the  vendor's  patch 
management  procedures, 
which  be  characterized  as 
"not  good  today  at  all." 

He  said  Microsoft's  decen¬ 
tralized  management  ap¬ 
proach.  while  “wonder^"  in 
many  respects,  is  an  impedi¬ 
ment  to  effective  patch  man- 
agemenL  Fbr  example,  the 
company  had  eight  patch  in¬ 
stallers,  and  some  tools  can't 
determine  whether  a  patch  has 
been  installed  properly  or  not 

That,  he  sai^  will  change 
with  the  release  of  Longhorn, 
the  code  name  for  the  next  re¬ 
lease  of  tbe  Windows  operat¬ 
ing  system.  With  that  release, 
which  isn't  expected  before 
mid-2004  at  the  earliest,  a  sin- 
^  patch  installer  will  exist  I 


wwwcofflputenvDrU-corn 


NEWS  PREMIER  100 


CMIDMU  lHnkl.Mt 


CIOs  Discuss  Strategies  for 
Demonstrating  Value  of  IT 


rr  chief  warns 
against  overselling 
projects  to  execs 

ev  THOMAS  HOFFMAM 

SCOTTSDALE.  ARIZ 

CIOs  often  have  trouble  corn* 
mufucating  to  senior  manage- 
naent  the  value  IT  investments 
can  deliver  to  their  organiza¬ 
tions.  After  an  upgrade  to  his 
company's  global  network  in¬ 
frastructure  last  year.  Baxter 
International  Inc.  CIO  John 
Moon  decided  to  take  matters 
into  his  owm  hands. 

After  the  networiung  prof- 
ect  was  done.  Moon  handed 
each  of  the  business  leaders  at 
a  postproduction  senior  man¬ 
agement  meeting  a  yellow 
cable.  He  thra  told  them,  “No 
matter  where  you  are  in  the 
world  [at  any  o(  Baxter's  300 
oflficesl.  plug  this  into  the  waU. 
and  you'll  be  connected"  to 


the  company's  global  network. 

The  tactic  —  as  well  as  the 
message  —  “was  really  eye¬ 
opening  for  them."  noted 
Moon,  whose  Deerfield.  IlL- 
based  health  care  company 
has  a  S350  million  IT  budget 
for  2003. 

Moon  was  on  a  panel  of  IT 
leaders  who  discussed  IT 
investment  and  value  strate¬ 
gies  at  the  Computerworld 
Bremier  100  conference  here 
last  week. 

At  Avon  Products  Inc,  Se¬ 


nior  Vice  President  and  CIO 
Harriet  Edelman  has  squeezed 
business  value  out  of  optimiz¬ 
ing  systems  and  business  proc¬ 
esses  in  critical  areas  such  as 
procurement  and  merchandis¬ 
ing.  Those  moves  have  yielded 
$10  million  in  annualized  bene¬ 
fits  for  the  New  York-based 
beauty  products  giant,  she 
said.  rhanlr«  in  large  part  to  her 
group’s  use  of  IT  portfolio 
management  tedmiques. 

Sdll.  Edelman  was  quick  to 
acknowledge  that  it's  impor¬ 


tant  for  CIOs  and  other  IT 
leaders  to  avoid  being  arro¬ 
gant  or  evasive  when  it  comes 
to  communicating  the  value  of 
IT  to  senior  management. 

“It's  an  area  that’s  rife  with 
some  danger."  she  said. 

Even  when  IT  initiatives 
deliver  huge  returns,  Edelman 
said,  the  trick  is  to  "stay  hum¬ 
ble  and  stay  within  their  [busi¬ 
ness]  point  of  view." 

CiOs  also  sometimes  make 
the  mistake  of  overselling  IT 
prefects  to  top  brass,  Moon 
said.  That’s  one  reason  why 
Baxter  has  a  stafT  member 
whose  role  is  to  communicate 
the  value  that  IT  can  deliver, 
he  said. 

Another  way  CIOs  can 
get  senior  management  to  in¬ 
vest  more  in  IT  is  by  collabo¬ 
rating  more  closely  with  busi¬ 
ness-unit  leaders  on  specific 
prefects. 

By  persuading  her  business 
peers  to  take  the  lead  on  more 
rr/business  initiatives,  Edel¬ 
man  said  she  has  helped  in¬ 
crease  Avon's  ^>ending  on 
strategic  and  transformationai 
IT  efforts  by  30%  during  the 
past  two  years.  I 


Idei^,  Kill  Nonessential 
Projects,  CK)  Recommends 


Narrow  focus  to  a 
few  issues,  he  says 


If  be  were  writing  a  song  about 
his  first  18  months  in  the  top 
IT  post  at  BMC  Software  Inc. 
CIO  Jay  Gardner  might  call  it 
“I  Learned  It  the  Hard  Way." 

Gardner,  who  spoke  last 
week  at  the  Computerworid 
Premier  100  conference  here, 
held  sales  and  operations  po¬ 
sitions  at  Houston-based  BMC 
before  becoming  CIO.  In  that 
post.  Gardner  said  be  had  to 
learn  from  his  mistakes. 

The  first  of  those,  be  said, 
was  trying  to  solve  too  many 
problems  at  the  same  time. 
Having  reviewed  a  2002  Gart¬ 
ner  Inc.  study  of  key  issues  on 
CIOs’  mindA.  Gardner  took  a 
crack  at  more  than  a  dozen  — 


too  many,  as  it  turned  out  He 
soon  switched  gears  and  took 
direct  aim  at  the  top  three  is¬ 
sues:  aligning  FT  and  the  busi¬ 
ness,  providing  guidance  and 
leadership  about  technology 
to  top  esmeutives.  and  proving 
ITs  value. 

Tliese  are  absolutely  the 


top  three  things  to  worry 
about"  Gardner  told  a  packed 
breakout  session  titled  TT 
Governance  and  Organization¬ 
al  Effectiveness." 

“It's  not  so  much  about  tbe 
IT  organization,  but  about 
bow  I  personally  spend  my 
time."  be  said  How  and  where 
CIOs  spend  their  time  will  re¬ 
flect  directly  on  their  success 
in  meeting  their  top  three 
challenges,  he  add^ 

Topping  tbe  issues  on  which 
Gardner  aid  he  spends  the 
most  time  are  IT  governance, 
people  and  resources  manage¬ 
ment.  and  IT  architecture. 
Rounding  out  the  list  are  busi¬ 
ness  alignment  and  services 
management 

“When  ail  five  of  these  are 
working  together,  you  can 
drive  good  alignment  and  IT 
value."  be  saki. 

Among  tbe  key  challenges 
Gardner  &ccd  when  be  came 
into  tbe  CIO's  fob  was  priori¬ 
tizing  tbe  various  IT  projects 
under  way  at  tbe  software 
maker.  A  companywide  survey 


showed  that  128  different  pref¬ 
ects  were  already  in  progress, 
many  of  which  had  no  busi¬ 
ness  owner  and  no  return  on 
investment  attached  to  them. 

His  advice  to  other  CIOs: 
“Find  stuff  not  to  da  Cross  off 
prefects  from  the  list" 

One  of  Gardner's  key 
achievements  so  fv  has  been 
reposicioaing  IT  workers  to 
work  on  profccts  for  which 
they  have  the  necessary  skUls. 

“Fifteen  months  aga  we 
took  a  skills  inventory  and 
found  that  we  had  a  lot  of  tal¬ 
ent  that  was  not  being  used  by 
people  in  their  current  fobs," 
he  said.  BMC  redeployed 
workers  accordingly,  boosting 
morale  in  the  process.  I 
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MARYFRAN  JOHNSON 


Keeping  the  Faith 


w 


with  me  long  a/ter  the 
end  of  Computerworld's 
Premier  100  IT  Leaders 
Conference,  which  drew 
more  than  500  CIOs, 

CTOs  and  senior  IT  man¬ 
agers  to  Arizona  last 
week  iQuickLink  al660l. 

When  Andre  Mendes, 
chief  technology  integra¬ 
tion  officer  at  PBS,  posed 
that  question,  77%  of  the 
audience  replied,  '’Never." 

Now  that’s  faith  in  IT. 

And  in  people.  I  take  that  as  a  most 
welcome  sign  in  these  trying  times. 

It’s  also  one  of  the  distinguishing 
characteristics  of  true  leaders  — 
something  called  “adaptive  capaci¬ 
ty."  as  Warren  G.  Bennis,  one  of  our 
keynote  speakers,  so  aptly  put  it 
The  best-seilii^  author  of  On  Be¬ 
coming  a  Leader  and  distinguished 
management  professor  at  the  Uni¬ 
versity  of  Southern  California 
earned  a  prolonged  standing  ovation 
from  our  assembled  IT  leaders  after 
his  talk  about  what  makes  a  true 
leader  [Quicklink  366471. 

I  can’t  do  justice  to  his  speech  in  a 
few  semeoces.  but  Bennis  said  the 
six  core  competencies  that  people 
want  in  their  leaders  are  direction, 
mist,  acknowledgment,  hope,  op¬ 
portunity  for  personal  growth  and 
results.  "A  sense  of  'We  can  do  it!’ " 
is  something  leaders  communicate 
to  everyone  around  them,  be  said. 

Inde^ foith  in  ITis  the  tie  that 
binds  us  in  this  industry.  And  I  saw 
constant  signs  of  hope  and  determi¬ 
nation  at  our  gathering  of  IT  lead¬ 
ers.  In  one  of  our  audience  polls 
about  IT  cost-cutting,  for  example. 
43%  said  they  were  focusing  more 
on  new  projects  that  grow  the 
business  than  on  ways  to  cut  further. 

In  my  closing  remarks  at  the  coo- 


HEN  WILL  THE  accelerating  pace  of 
change  finally  overwhelm  us? 

That  one  question  —  and  the  as¬ 
tonishing  answer  —  will  resonate 


ference,  I  borrowed 
some  observations  from 
a  September  2002  col¬ 
umn  by  Computerworld’s 
Frank  Hayes,  titled  “TTie 
Faith  of  IT"  [QuickLink 
32660].  The  heart  of  his 
column  is  about  what  IT 
people  really  believe  in. 
and  Frank’s  thoughts  are 
well  worth  paraphrasing: 

You  believe  in  prog¬ 
ress,  technology,  infor¬ 
mation  and  business. 

You  believe  that  new  ideas  and 
fresh  approaches  can  be  better  than 
old  ways  and  that  technology  can 
be  used  to  make  individuals  more 
powerful  and  oiganizations  more 
effective. 

You  believe  that  we  can  use  tech¬ 
nology  to  store  and  process  infor¬ 
mation.  but  also  to  discover  new  in¬ 
formation  we  didn’t  know,  to  see 
patterns  we  didn’t  recognize  before. 

You  believe  in  communication 
and  bow  it  can  bring  people  togeth¬ 


er  to  cooperate  or  compete. 

You  believe  that  IT  can  bridge  dif¬ 
ferences.  level  inequalities  and  offer 
opportunities. 

You  believe  in  the  new.  the  unfa¬ 
miliar,  the  different  (Even,  on  occa¬ 
sion.  the  overfayped  and  the  un¬ 
proven.) 

But  most  of  all,  you  believe  in 
progress  and  change,  that  things  can 
and  will  get  better.  That  over  time, 
our  companies,  our  industries,  even 
our  societies,  can  be  transformed  by 
IT.  So  if  you  believe  we  can  solve 
our  problems,  then  you  believe  in 
the  future. 

You  believe  that  we  can  and  will 
change  the  world. 

Frank’s  words  remind  me  of  one 
of  the  greatest  teachers  I’ve  ever 
known,  who  uiged  his  students  to 
"Go  out  and  move  the  world  an 
inch."  That  takes  more  than  hard 
work,  more  than  technology  or  busi¬ 
ness  expertise,  even  more  than  an 
adventurous,  determined  spirit. 

It  takes  faith  that  what  you’re  do¬ 
ing  makes  a  difference.  Everything  I 
saw  and  beard  last  week  among 
hundreds  of  your  colleagues  tells 
me  that  you  are  out  there,  moving 
the  world  an  inch  at  a  time. 

Keep  the  faith.  I 


PIMM  FOX 

Fight  Threats 
From  Within 

You  CAN’T  PREDICT  a 
security  disaster,  but 
you  can  prepare  for 
one.  The  recent  revelation 
that  an  intruder  stole  more 
than  8  million  Visa,  MasterCard. 
American  Express  and  Discover  credit 
card  account  numbers  should  fan  the 
flames  about  the  limits  of  IT  security. 

That’s  because  even  the  best  IT  se¬ 
curity  works  only  up  to  a  certain  level 
Once  past  that  level  your  defenses 
wifi  be  breached,  either  by  a  technical 
gaffe  or  a  human  miscreant.  When 
that  happens,  you  must  be  able  to  put 
into  action  a  preparedness  plan. 

The  plan  should  include  the  active 
participation  of  your  corporate  com¬ 
munications.  legal  and  customer  rela¬ 
tions  departments  as  well  as  yotrr  ex¬ 
ecutive  committee.  In  the  wake  of  a 
breach,  these  people  will  all  be  turn¬ 
ing  to  you,  the  IT 
folks,  to  tell  them 
what  went  wrong 
and  what  you’re  do¬ 
ing  to  fix  the  prob¬ 
lem.  They'll  also  be 
asking  you  for  dam¬ 
age  assessments  and 
reports  on  third-par¬ 
ty  contacts  (because 
so  much  security 
work  has  been 
fanned  out,  to  white- 
hat  hackers,  for  ex¬ 
ample).  For  these  and  other  reasons, 
you  must  have  an  internal  and  exter¬ 
nal  communications  plan  ready  for  se¬ 
curity  failures. 

Before  you  ever  have  a  security 
breach,  assemble  the  core  group  of 
specialists  who  are  trained  and  pre¬ 
pared  to  deal  with  IT  security  as  part 
of  their  job.  Determine  who  among 
them  are  best  stilted  to  communicate 
internally  with  users,  externally  to 
customers  and  suppliers  and.  possibly, 
even  to  the  media.  Then  train  them. 
And  have  backup  ready  in  case  your 
spoke^en  are  away  when  a  crisis  is 
upon  you. 

Prepare  procedures  to  alen  these 
key  contacts  on  udiat  information  will 
be  available,  how  to  get  it  and  who  will 
be  responsible  for  IL  Make  sure  there's 
a  process  for  vetting  infonnation. 

Match  the  infonnation  with  the  au¬ 
dience.  In  the  recent  breach,  the  credit 
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card  companies  didn’t  publkly  reveal 
the  name  of  the  payment  processor 
whose  security  was  compromised,  but 
surely  the  necessary  people  inside  the 
credit  card  companies  were  briefed  in 
detail  Remember  that  responding  to 
a  security  breakdown  is  an  informa¬ 
tion  problem  as  well  as  a  technical 
problem.  Who  you  tell  and  what  you 
tell  them  is  as  important  as  who  does 
the  telling. 

In  addition,  security  failures  can 
quickly  raise  legal  liability  issues,  as 
many  financial  service  companies  and 
health  care  providers  have  come  to 
recognize.  So  it’s  of  paramount  impor¬ 
tance  for  your  company  to  speak  with 
a  chorus  of  coordinated  voices. 

A  good,  well-tested  plan  will  protect 
your  company  against  charges  of  ig¬ 
noring  a  threat  and  make  it  easier  to 
withstand  a  crisis  when  it  occurs.  I 


MICHAEL  GARTENBERG 

For  Fun  and 
Profit 

IF  I  WERE  REMAKING  The 
Graduate  today,  with 
Dustin  Hoffman's  charac* 
ter  as  an  IT  professional  who 
was  looking  to  advance  his 

career,  the  one  word  of  advice  I  would 
give  him  would  be:  weblpgs. 

Weblogs,  those  personal  journals 
and  information  sites  that  are  growing 
by  leaps  and  bounds  on  the  Internet, 
are  a  simple  way  for  an  IT  department 
to  create  some  positive  momentum 
for  itself  quickly  and  cheaply.  Web¬ 
logs.  or  blogs  as  they’re  usually  called, 
allow  for  easy,  direct  and  effective 
communication  to  a  wide  audience. 
Most  important,  the  cost  of  starting  an 
internal  blog  project  is  ridiculously 
tow.  Most  blogging  software  can  be 
acquired  on  a  trial  ba^  so  you  can 
lest  to  your  heart's  content,  and  pur¬ 
chase  costs  are  moderate  as  well 
Here's  how  to  get  started  creating  a 
corporate  blog  site. 

First,  think  “modest’*  and  “discreet.” 
WhUe  rd  love  to  see  the  CEO  of  every 
company  keep  a  public  weblog  (imag¬ 
ine  reading  what's  going  on  in  the 
mind  of  Steve  Ballmer.  Scott  McNealy 
or  (^ariy  Fiorina),  that’s  not  likely  to 
happen  in  the  near  future.  In  fact,  Td 
caution  you  about  creating  a  blog  site 
that  can  be  viewed  by  the  outside 


world  (or  even  keeping  a 
personal  weblog  that  refers 
to  your  company’s  activi¬ 
ties)  without  First  going 
through  a  very  thorough  re¬ 
view  process  internally. 

Ttiere  are  already  tales  of  a 
number  of  good  people 
who  have  tost  jobs  because 
of  corporate  discussions  on 
their  weblogs. 

Instead  of  going  for  the 
full  corporate  monry  from 
the  start,  first  launch  an  in¬ 
ternal  IT  blog.  Start  slowly, 
as  you  would  with  any  IT 
project  Create  a  beta  blog 
that  can  be  viewed  only  by  IT  man¬ 
agers,  then  open  it  to  IT  staffers  be¬ 
fore  you  roll  it  out  to  the  entire  com¬ 
pany.  Get  a  group  of  folks  to  volunteer 
to  create  your  first  series  of  weblogs 
and  use  the  beta  process  to  weed  out 
the  ones  who  don't  post  often  enough. 


Nothing  is  worse  than  a 
stale  blog. 

Use  your  blog  as  a  vehi¬ 
cle  for  communication.  Ex¬ 
plain  what's  going  on  in¬ 
side  IT  operations,  link  to 
interesting  articles  and 
create  forums  for  internal 
discussions.  While  every¬ 
one  b  comfortable  using 
PCs  and  most  software, 
they  siili  appreciate  getting 
timely  advice  and  opinions 
from  experts  in  the  field. 
Why  shouldn't  they  get  it 
from  you  and  your  team? 
During  the  beta  process, 
post  at  least  three  times  a  week,  keep¬ 
ing  your  comments  pithy  and  focused 
on  a  single  point  Don’t  make  it  avail¬ 
able  to  the  entire  firm  until  you  have 
at  least  one  month's  worth  of  content 
Once  your  blog  b  establbhed  and 
you  begin  to  find  your  voice,  you 


might  want  to  advocate  an  external 
site.  Explore  how  blog-based  eictemal 
communications  can  create  more  busi¬ 
ness  initiatives.  Lead  by  example,  and 
champion  the  cause.  Along  the  way. 
there's  a  good  chance  for  you  to  suc¬ 
ceed  and  become  a  hero.  That's  about 
as  good  as  it  gets  for  IT  these  days. 

Communication  via  blogging  b  a 
powerful  tool  that  truly  leverages  the 
power  of  the  Web.  In  fict.  I  liked  thb 
idea  so  much.  1  did  exactly  what  1  out¬ 
lined  above  and  helped  launch  Jupiter 
Research's  first  w^logs  at  httpy> 
H>eNogs.fupireTTesearclixom.  Check 
them  out  and  send  me  some  feedback, 
but  more  important,  go  download 
some  software,  find  your  voice  and 
start  blogging  your  way  to  glory.  * 
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I  mow  THAT  HAM  IMU  was 

tryino  to  sbnulale  IhougM  by  tak- 
inQ  a  contrarian  posbon  in  his  cof- 
urnn 'Forget  R()r  ({kiickLJnk 
3SSi^]  *  at  bast  I  hope  that's  what 
he  was  doing  -  but  he  is  woy  oH 
base.  I  agree  that  pure  ROI  has 
some  sh^coniings  m  evaluating 
and  prioritiang  rr  projects  and  can 
cause  oppodunites  to  be  ksL  The 
prottem  is  that  pure  ROI  doesn't 
have  a  way  to  quantify  a  lot  o(  the 
benehlsthal'yDWinstincts.know<- 
edge  and  expenence*  lei  you  wi 
come  from  a  particular  IT  iniiiaiive. 
And  trymg  to  quantify  the  benefits, 
costs  and  rtsks  assodaied  with  an 
IT  comnulmenl  is  the  only  way  to 
bring  a  level  of  dsapine  to  what 
has  been  a  hA-ortnss  proposition 
based  on  gut  feelings. 

Many  ROHnsed  efforts  come 
upshortbecausepeoplearenlwi- 
ing  to  put  a  value  on  the  benete 
that  wi  be  achieved  by  making  the 
ff  commitment  I  VIM  around  in  the 
1970$  when  people  were  ristaKng 
Wang  wod  procassors.  and  they 
were  basng  their  decisions  on  im¬ 
proved  producIMIy  and  quaity. 
Same  thing  wflh  PCs  n  die  19^ 
Whyaresoroanycompeniesmov- 
ng  to  Linux  servers?  Better  price/ 
perforrirancs  and  rekabily.  Al  of 
these  decisions  were  based  on 
commAOng  IT  resources  to  produce 
real  business  value.  The  problem 
Isn't  vMth  ROI  -  d  is  that  people  are 


afraid  to  put  down  on  paper  what 
the  IT  effort  should  produce  in  the 
way  of  business  value  .  Once  corn- 
panes  understand  how  to  show  the 
raaf  business  value  that  can  be  cre¬ 
ated  with  their  rr  efforts.  I  believe 
ROHype  factors  wK  actually  en¬ 
courage  enterprises  to  make  more 
commitments  to  fT. 
BmceSkalstb 
t*resident,  eGlobal  CIO, 

TlUso.  Okla. 

Mam  HALL’S  COUfMNS  a 
perfect  example  of  IT  Staff  ar¬ 
rogance  and  just  ore  of  the  reasons 
real  business  people  have  a  low 
opinion  of  IT  people.  The  average  IT 
staffer  has  no  idea  whH  males 
sense  to  the  business  orgomzabon 
Hal  proves  this  with  hs  comnenl 
about  ROf  and  Wang  word  proces¬ 
sors.  A  signilicarvl  ROI  was  very 
easy  to  prove  on  Wang  nstalalions 
ft  has  ahvays  been  the  stance  of  IT 
staff  that  they  donT  need  to  justify 
their  favorite  projects.  Thai's  why 
the  graveyard  ol  failed  protects  s 
so  large. 

Andrew  H.  Oben 
Monqging  dinctor,  TEAM 
fntfrTKtttonof  Grorq).  (kxtnes- 
viQe,Fla. 


Braak-in  Nets  Hackers  8  MBon 
Crodll  Card  Numbers '  Oaddjrik 
3G530I?  in  wntmg  databases  to 
store  personal  Intormabon  for  my 
company,  it  never  occuned  to  me 
to  store  (he  data  (n  an  unencrypted 
tormat(pil)bcley/prMBleley)  Isel 
up  an  XM.  format,  dven  encrypt  I. 
then  store  tt.  If  M’s  transmmed  to  a 
database  server  trom  a  Web  server. 
It's  encrypted  before  It  goes  to  the 
database  server.  It's  never  decrypt¬ 
ed  imH  it’s  bme  to  wew  S. 

Cwtle  Meurand 
Network  enginetr,  Prtxar 
LLC,  Portsmouth.  NJi. 


Ofhhore  Security 

AS  I  KAO  ABOUT  the  nient  of 
msiy  companies  to  engage  m 
offshen  outsourtang  rCoiTtoanies 
ExpectedtoBooetOfishoreOul- 
snreing.' OuickUi* 36377].  I  have 
loaH^whyiiereBnTmoresolidin- 
fonnation  being  reported  on  die 
data  sacuniy  issues  thH  oould 
arise,  ft  seems  to  me  that  oflshore 
dais  centers  negM  have  the  poten¬ 
tial  for  educaftng  the  wrong  people. 
BenMeCuBom 
ChesmuiRti^N.r 


Always  Encrypt 

WHY  WASNT  TK  QATA  tot 

was  oompramisad  at  Data 
f^Dcessors  bilemetianel  stored  In 
an  encrypted  format  rSystem 


FkewaAsandSIP 

ALTNOUBM  TK  FO.  8  Quck- 
Sftiilf. 'Sesston  IMiHion  Ao- 
toc(r[ClucMJrW353B].5ugoe5t- 
ed  olharwaaB.  interoperHiilly  be¬ 
tween  aqutomenl  is  quickfy  and 


flirty  easly  conected  vMihin  the  Sf* 
conwsmfty.  so  that's  not  causwg 
much  deploymeni  dalay.  As  lor 
concemsIhatSV^wimahartel- 
wortc  more  vuftmbie.  the  source 
may  be  the  ftrewol  and  NAT  (Net¬ 
work  AdWess  TtansfHor)  ssue.  SB* 
cornnunicalion  doesnl  traverse 
most  instaied  feevidb  and  NATs. 

Several  methods  and  aquipment 
Iwve  been  suggasted  to  soiro  te 
probtom.  but  the  most  general  one 
6  to  eiratale  Ihe  problem  where  A 
occurs.nlhefirmdlitsei.Rre- 
vdb  ftwt  include  a  SB*  server  thH 
dynarmcaly  controblha  firmdl 
have  been  avedaUe  tv  oror  a  year, 
andsincsthey’renomoreexpen- 
sive  Own  ordinary  firewdk  Aey 
slKdd  be  rxmsNfarad  tor  d  new  In- 
sdtabons. 

KwlUSbd 

Presidera,  Intertex  Data  AB. 

Stockholm. 

fcorlstohftSltritrrTeuc 

COMPUTEirWORLO  welcomes 
conenents  Irom  Us  readers.  Lenars 
wl  be  edtad  tor  bredy  and  dariy. 
They  shoHd  be  addreead  to  Jonw 
EcMi.  Wtars  witor.  Computarwoild. 
PO  Boa  9171. 500  Old  Comdicut 
Mr.  Rwringham.  Mass.  0T7DI 
F8x:(506)879-4B<a 
E-fflHt  lellweieompuiBrwortdxom 
Include  an  address  and  phone  run- 
bar  tor  nenedtole  venftcabon 
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MARYFRAN  JOHNSON 


Keeping  the  Faith 


w 


HEN  WILL  THE  accelerating  pace  of 
change  finally  overwhelm  us? 

That  one  question  —  and  the  as¬ 
tonishing  answer  —  will  resonate 


with  me  long  after  the 
end  of  CompurerworWs  j 

Premier  100  IT  Leaders  I 
Conference,  which  drew  ! 
more  than  500  CIOs, 

CTOs  and  senior  IT  man¬ 
agers  to  Arizona  last 
week  (Quicklink  al6601. 

When  Andre  Mendes, 
chief  technology  integra¬ 
tion  officer  at  PBS.  posed 
that  questioa  77%  of  the 
audience  replied,  "Never." 

Now  that's  faith  in  IT. 

And  in  people.  I  take  that  as  a  most 
welcome  sign  in  these  trying  times. 

It's  also  one  of  the  distinguishing 
characteristics  of  true  leaders  — 
something  called  "adaptive  capaci¬ 
ty."  as  Warren  G.  Bennis,  one  of  our 
keynote  speakers,  so  aptly  put  it. 

The  best-selling  author  of  On  Be¬ 
coming  a  Leader  and  distinguished 
management  professor  at  the  Uni¬ 
versity  of  Southern  California 
earned  a  prolonged  standing  ovation 
from  our  assembled  IT  leaders  after 
his  talk  about  what  makes  a  true 
leader  [QuickLink  36647}. 

I  can’t  do  justice  to  his  speech  in  a 
few  sentences,  but  Bennis  said  the 
six  core  competencies  that  people 
want  in  their  leaders  are  direction, 
trust,  acknowledgment,  hope,  op¬ 
portunity  for  personal  growth  and 
results.  "A  sense  of  'We  can  do  it!’ " 
is  something  leaders  communicate 
to  everyone  around  them,  be  said. 

Indeed,  faith  in  IT  is  the  tie  that 
binds  us  in  this  industry.  And  I  saw 
constant  signs  of  hope  and  determi¬ 
nation  at  our  gathering  of  IT  lead¬ 
ers.  In  one  of  our  audience  polls 
about  IT  cost-cuttii^  for  example, 
43%  said  they  were  fbcusiitg  more 
on  new  projects  that  will  grow  the 
busitkess  than  on  ways  to  cut  further. 

In  my  closing  remarks  at  the  con¬ 


ference.  I  borrowed 
some  observations  from 
a  September  2002  col¬ 
umn  by  Computerworfd's 
Frank  Hayes,  titled  “The 
Faith  of  IT"  IQuickLink 
32660].  The  heart  of  his 
column  is  about  what  IT 
people  really  believe  in, 
and  Frank’s  thoughts  are 
well  worth  paraphrasing: 

You  believe  in  prog¬ 
ress.  technology,  infor¬ 
mation  and  business. 

You  believe  that  new  ideas  and 
fresh  approaches  can  be  better  than 
old  ways  and  that  technology  can 
be  used  to  make  individuals  more 
powerful  and  organizations  more 
effective. 

You  believe  that  we  can  use  tech¬ 
nology  to  store  and  process  infor¬ 
mation,  but  also  to  discover  new  in¬ 
formation  we  didn’t  know,  to  see 
patterns  we  didn’t  recognize  before. 

You  believe  in  communication 
and  bow  it  can  bring  people  togeth- 
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er  to  cooperate  or  compete. 

You  believe  that  IT  can  bridge  dif¬ 
ferences,  level  inequalities  and  offer 
opportunities. 

You  believe  in  the  new,  the  unfa¬ 
miliar.  the  different.  (Even,  on  occa¬ 
sion.  the  overhyped  and  the  un¬ 
proven.) 

But  most  of  all,  you  believe  in 
progress  and  change,  that  things  can 
and  will  get  better.  That  over  time, 
our  companies,  our  industries,  even 
our  societies,  can  be  transformed  by 
IT.  So  if  you  believe  we  can  solve 
our  problems,  then  you  believe  in 
the  future. 

You  believe  that  we  can  and  will 
change  the  world. 

Frank’s  words  remind  me  of  one 
of  the  greatest  teachers  I’ve  ever 
known,  who  urged  his  students  to 
"Go  out  and  move  the  world  an 
inch."  That  takes  more  than  hard 
work,  more  than  technology  or  busi¬ 
ness  expertise,  even  more  than  an 
adventurous,  determined  spirit. 

It  takes  faith  that  what  you're  do¬ 
ing  makes  a  difference.  Everything  1 
saw  and  beard  last  week  among 
hundreds  of  your  colleagues  tells 
me  that  you  are  out  there,  moving 
the  worid  an  inch  at  a  time. 

Keep  the  faith.  I 


PIMM  FOX 

Fight  Threats 
From  Within 

You  CAN'T  PREDICT  a 
security  disaster,  but 
you  can  prepare  for 
one.  The  recent  revelation 
that  an  intruder  stole  more 
than  8  million  Visa,  MasterCard. 
American  Express  and  Discover  credit 
card  account  numbers  should  fan  the 
flames  about  the  limits  of  IT  security’- 
Thai’s  because  even  the  best  IT  se¬ 
curity  works  only  up  to  a  certain  level 
Once  past  that  level,  your  defenses 
will  be  breached,  either  by  a  technical 
gaffe  or  a  human  miscreant.  When 
that  happens,  you  must  be  able  to  put 
into  action  a  preparedness  plan. 

The  plan  should  include  the  active 
participation  of  your  corporate  com¬ 
munications.  legal  and  customer  rela¬ 
tions  departments  as  well  as  your  ex¬ 
ecutive  committee.  In  the  wake  of  a 
breach,  these  people  will  all  be  turn¬ 
ing  to  you.  the  IT 
folks,  to  tell  them 
what  went  wrong 
and  what  you’re  do¬ 
ing  to  fix  the  prob¬ 
lem.  They'll  also  be 
asking  you  for  dam¬ 
age  assessments  and 
reports  on  third-par¬ 
ty  contacts  (because 
so  much  security 
work  has  been 
farmed  out.  to  white- 
hat  hackers,  for  ex¬ 
ample).  For  these  and  other  reasons, 
you  must  have  an  internal  and  exter¬ 
nal  commuoicatioos  plan  ready  for  se¬ 
curity  failures. 

Before  you  ever  have  a  security 
breach,  assemble  the  core  group  of 
specialists  who  are  trained  and  pre¬ 
pared  to  deal  with  IT  security  as  part 
of  their  job.  Determine  who  among 
them  are  best  suited  to  communicate 
internally  with  users,  externally  to 
customers  and  suppliers  and,  possibly, 
even  to  the  media.  Then  train  them. 
And  have  backup  ready  in  case  your 
spokesmen  are  away  when  a  crisis  is 
upon  you. 

Prepare  procedures  to  alert  these 
key  contacts  on  what  information  will 
be  available,  how  to  get  it  and  who  will 
be  responsible  for  it  Make  sure  there's 
a  process  for  vetting  information. 

Match  the  information  with  the  au¬ 
dience.  In  the  recent  breach,  the  credit 


card  companies  didn’t  publicly  reveal 
the  name  of  the  payment  processor 
whose  security  was  compromised,  but 
surely  the  necessary  people  inside  the 
credit  card  companies  were  briefed  in 
detail.  Remember  that  responding  to 
a  security  breakdown  is  an  informa¬ 
tion  problem  as  well  as  a  technical 
problem.  Who  you  tell  and  what  you 
tell  them  is  as  important  as  who  does 
the  telling. 

In  addition,  security  failures  can 
quickly  raise  legal  liability  issues,  as 
many  financial  service  companies  and 
health  care  providers  have  come  to 
recognize.  So  it’s  of  paramount  impor¬ 
tance  for  your  company  to  speak  with 
a  chorus  of  coordinated  voices. 

A  good,  well-tested  plan  will  protect 
your  company  against  chafes  of  ig¬ 
noring  a  threat  and  make  it  easier  to 
withstand  a  crisis  when  it  occurs.  I 


MICHAEL  GARTENBERG 

Blogging 
For  Fun  and 
Profit 

IF  I  WERE  REMAKING  The 
Graduate  today,  with 
Dustin  Hoffman’s  charac¬ 
ter  as  an  IT  professional  who 
was  looking  to  advance  his 
career,  (he  one  word  of  advice  I  would 
give  him  would  be:  weblogs. 

Weblogs,  those  personal  journals 
and  information  sites  that  are  growing 
by  leaps  and  bounds  on  the  Internet, 
are  a  simple  way  for  an  IT  department 
to  create  some  positive  momentum 
for  itself  quickly  and  cheaply.  Web¬ 
logs,  or  bl<^  as  they’re  usually  called, 
allow  for  easy,  direct  and  effective 
communication  to  a  wide  audience. 
Most  important,  the  cost  of  starting  an 
internal  blog  protect  is  ridiculously 
low.  Most  blogging  software  can  be 
acquired  on  a  trial  basis,  so  you  can 
test  to  your  heart’s  content,  and  pur¬ 
chase  costs  are  moderate  as  welL 
Here’s  how  to  get  started  creating  a 
corporate  blog  site. 

First,  think  “modest’’  and  “discreet.” 
While  I’d  love  to  see  the  CEO  of  every 
company  keep  a  public  weblog  (imag¬ 
ine  reading  what’s  going  on  in  the 
mind  of  Steve  Ballmer.  Scon  McNealy 
or  Carly  Fiorina),  that’s  not  likely  to 
happen  in  the  near  future.  In  I’d 
caution  you  about  creating  a  blog  site 
that  can  be  viewed  by  the  outside 


world  (or  e^'en  keeping  a 
personal  weblog  that  refers 
to  your  company’s  activi¬ 
ties)  without  first  going 
through  a  very  thorough  re¬ 
view  process  internally. 

There  are  already  tales  of  a 
number  of  good  people 
who  have  lost  jobs  because 
of  corporate  discussions  on 
their  weblogs. 

Instead  of  going  for  the 
full  corporate  monty  from 
the  start,  first  launch  an  in¬ 
ternal  rr  blog.  Start  slowly, 
as  you  would  with  arty  IT 
project.  Create  a  beta  blog 
that  can  be  viewed  only  by  IT  man¬ 
agers,  then  open  it  to  IT  staffers  be¬ 
fore  you  roll  it  out  to  the  entire  com¬ 
pany.  Get  a  group  of  folks  to  volunteer 
to  create  your  first  series  of  weblogs 
and  use  the  beta  process  to  weed  out 
the  ones  who  don’t  post  often  enough. 


Nothing  is  worse  than  a 
stale  blog. 

Use  your  blog  as  a  vehi¬ 
cle  for  communication.  Ex¬ 
plain  what's  gi>ing  on  in¬ 
side  IT  operations,  link  to 
interesting  articles  and 
create  forums  for  internal 
discussions.  While  every¬ 
one  is  comfortable  using 
PCs  and  most  software, 
they  still  appreciate  getting 
timely  advice  and  opinions 
fn>m  experts  in  the  field. 
Why  shouldn’t  they  get  it 
from  you  and  your  team? 
During  the  beta  process, 
post  at  least  three  times  a  week,  keep¬ 
ing  your  comments  pithy  and  focused 
on  a  single  point.  Don't  make  it  avail¬ 
able  to  the  entire  firm  until  you  have 
at  least  one  month’s  worth  of  content. 

Once  your  blog  is  established  and 
you  begin  to  find  your  voice,  you 


might  want  to  advocate  an  external 
site.  Explore  how  blr^-based  external 
communications  can  create  more  busi¬ 
ness  initiatives.  Lead  b>'  example,  and 
champion  the  cause.  Along  the  way. 
there's  a  good  chance  for  you  to  suc¬ 
ceed  and  become  a  hero.  That's  about 
as  good  as  it  gets  for  IT  these  days. 

Communication  via  blogging  is  a 
powerful  tool  that  truly  leverages  the 
power  of  the  Web.  Id  fact.  1  liked  this 
idea  so  much,  I  did  exactly  what  I  out¬ 
lined  above  and  helped  launch  )upiicr 
Research's  first  \k-cblogs  at  hrtp^  / 
weblqgs./uptrefTcsearchxofn.  Check 
them  out  and  send  me  some  feedback, 
but  more  imponani.  go  download 
some  software,  find  your  voice  and 
start  blogging  your  way  to  glory.  I 
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Commit  to  ROI,  IT 

i  KNOW  THAT  MARK  HALL  was 

trying  to  stimulale  ttxMighi  try  tak- 
ng  a  conirsnan  position  m  his  col- 
umn  'ftiroet  ROTIQuickLink 
35575]  *  at  least  I  hope  that's  whal 
he  was  doing  -  blit  he  is  way  oft 
base,  t  agree  that  pure  RO)  has 
some  shortcominQS  in  evaluating 
and  prtoritizmg  IT  protects  and  can 
cause  opportunities  lo  be  ksL  The 
problem  is  that  pure  ROI  doesn't 
have  a  way  to  quantity  a  krt  of  the 
benefits  that  ‘your  nshnets.  knowl¬ 
edge  and  experience' tell  you  wi 
come  from  a  parhcular  (T  initiative 
And  trying  to  quantity  the  benefits, 
costs  and  risks  associated  with  an 
IT  commttnient  IS  the  only  way  to 
bnng  a  level  ot  discipline  to  what 
has  been  a  fM-or-mss  proposition 
based  on  gut  feelings. 

Many  ROI-based  efforts  come 
up  ^MXt  because  people  aieni  wil¬ 
ing  10  pul  a  value  on  the  benefits 
that  wi  be  achieved  by  maWng  the 
IT  commitment.  I  was  around  in  the 
1970$  when  people  were  mstaftng 
Wang  word  processors,  and  they 
were  basing  their  decisions  on  im¬ 
proved  productivity  and  quaHty. 
Same  thing  with  PCs  in  the  l9Ms 
Why  are  so  many  compames  mov¬ 
ing  to  bnux  servos?  Better  price/ 
performance  and  rriebility.  Al  of 


READERS'  LEHERS 


committing  IT  resources  to  produce 
real  business  value.  The  problem 
isn't  with  ROI  -  it  is  that  people  are 


afraid  lo  put  down  on  paper  what 
the  IT  effort  should  produce  in  the 
way  of  business  value.  Once  com¬ 
panies  understand  how  lo  show  the 
maf  business  value  that  can  be  cre¬ 
ated  with  their  IT  efforts.  I  believe 
ROI-type  factors  wdl  actually  en¬ 
courage  enterprises  to  make  more 
cornirnimenistorT. 

Bruce  Skatetis 
Preadent,  eClobai  CIO, 
1Usa.Okia. 


m; 


I  ARK  HALL'S  COLUMN  is  8 
I  perfect  extfnple  of  IT  Staff  ar¬ 
rogance  and  just  one  of  the  reasons 
real  business  people  have  a  low 
opinion  of  IT  people.  The  average  IT 
staffer  has  no  Ilea  what  makes 
sense  to  the  business  orgsvzahon. 
Hat  proves  the  with  fas  comment 
about  ROI  and  Wang  word  proces' 
sots  A  SKinhcant  R(M  was  very 
easy  to  prove  on  W8ng  installations 
It  has  ahnays  been  the  stance  of  rr 
staff  that  they  don't  need  to  tustrty 
their  favonte  projects.  Thai's 
the  graveyard  of  failed  projects  IS 
so  large. 

Andrew  H.  Obon 

Managing  director.  TEAM 
liuemational  Group,  Cocnes- 
vttle,f1a. 


Always  Encrypt 

WKVWASITT  THE  DATA  that 
was  compromised  ai  Data 
Processors  IrrtemMional  stored  m 
an  encrypted  tormat  rSystem 


Break-in  Nets  Hackers  8  Mifioo 
CredK  Canl  Nurnbers.*  OuKktjnk 
366301?  in  wnting  databases  to 
store  personal  information  for  my 
company,  it  never  occurred  to  me 
to  store  the  data  m  an  unenaypted 
lonnM  (pubbe  key/pnveie  key).  I  set 
up  an  XML  foimaL  then  encrypll 
then  store  it.  tl  I's  trarsmtted  to  a 
database  server  a  Web  server, 

it's  encrypted  before  a  goes  to  the 
database  server,  it's  never  decrypt¬ 
ed  unfit  it's  line  to  view  C 
Curtis  Maurand 
Nerwork  engineer,  Pnxar 
LLC.  Portsmouth.  NJ1. 


Offshore  Security 

AS  i  READ  ABOUT  the  mtent  Of 
nany  companies  to  engage  m 
offshore  (Xitscwcing  [Torrvanies 
Expected  to  Boost  OfWiore  Oul- 
sourang.'Quckljnk 36377]  lhave 
toaskwhytherefinTmoresoMn- 
(ormation  beng  reported  on  the 
data  seofiy  esues  that  could 
anse.  It  seenB  to  me  that  oHshore 
datacenteismighttievelhepolen- 
tiaf  lor  educatino  (he  wrong  people. 
BenMoCuloni 
Chestnuf  Ridge,  NY 


Rrewalls  and  SIP 

ALTHOueH  THE  FEB.  a  Oack- 
Sludy.  *Sesson  kHfiation  nro- 
tocoTfOickLink  353%].  suggest¬ 
ed  olherwse.  nteroperabitv  be¬ 
tween  equipnient  6  quiddy  and 


tarty  easdy  corrected  wKhm  the  SF 
comnwly.  so  that's  not  causmg 
much  deployment  delay  As  tor 
concerns  that  SPwi  make  net¬ 
works  more  vuinerabte.  the  source 
may  be  the  lirewQl  and  NAT  (Net¬ 
work  Address  Ttanstalor)esue  9P 
commuracahon  doesn’t  traverse 
most  iretaled  hrewaRs  and  NATs. 

Severaf  methods  and  equipment 
have  been  suggested  to  solve  the 
probiem.  bm  the  most  general  one 
6  lo  ekinnafe  the  problem  Miere  It 
occm.inlhefireviaAtseii  Fiie- 
wais  that  ncAide  a  SP  server  8)^ 
dynamcaly  controls  the  firewal 
have  been  amiable  lor  over  a  year, 
and  smee  they're  no  more  expen¬ 
sive  than  ordinary  bewals.  they 
should  be  considered  lor  al  new  in- 
stalalKXis. 

KariErfliStaM 

President,  intrrtex  Data  AB, 

StoMioUn, 

karisttMiwinartexje 

COMPUTEfrWOftti)  wckXKiws 
comnents  ftoni  Rs  readere.  UrKers 
1^  be  eifled  lor  brevty  and  danty. 
They  shoiAd  be  addressed  lo  Jamie 
Edde.  Mers  editor.  Comeuttrworid. 
PO  Box  9171 500  Old  Connedcuf 
fttfi.  PraninghMTt.  Mass.  01701. 

Fax  (508)  8794643 
E-maA  ten«s9conipderwo(f(lcom 
IndUde  an  address  and  phone  num- 
ba  lor  irenedale  verification. 

Olilare  leotre  on  Am  and  adw 
tapes  are  on  our  Wtt  Me: 


QUICKLY  CONNECT  CONTENT 


AND  CONTENTMENT. 


.NET  connected  software  from  Microsoft  helps  you  make  content  management 
more  manageable.  With  every  change  in  your  business  needs  come  demands  for  more 
Web  sites,  more  content,  and  a  faster  response  from  already  strained  IT  resources.  To 
find  contentment  m  this  setting,  consider  Microsoft’  Content  Management  Server.  With 
native  support  for  XML.  it  integrates  with  your  existing  and  future  applications  to  create  a 
centralized  infrastructure  for  publishing  content  to  intranet,  extranet,  and  Internet  sites. 
You  control  Site  consistency,  while  empowering  content  owners  to  publish  their  own  pages. 
So,  you  can  be  more  responsive  with  fewer  resources.  And  everyone  is  content. To  get 
a  technical  overview,  visit  microsoft.com/content  fsoftware  for  the  Agile  Business. 


Forfurthtr  Informatloii, contact 
NTT  ConiMunicatlons  Corporation 
nttvcr1o@ntt.com 


Wisdom 

Something  you  can  expect  from  our  vast  experience. 

NTTA^ERIO  IP  and  managed  networic  services  are  comprehensive  and  sophisticated. 

But  what  do  we  offer  that’s  different?  One  thing  is  the  wisdom  that  comes  with  the  vast  experiences 
of  covering  nearly  90  countries  around  the  globe.  It’s  a  wisdom  that  helps  our  customers  sustain  their  success. 
From  IP  connectivity  and  managed  networic  to  a  range  of  hosting  smices,  we  offer  everything 
you  need  to  thrive  in  our  networked  economy.  By  using  the  NTT/VERIO  global  services, 
you  will  be  working  with  a  partner  that  has  complete  control  over  their  networic  and  is  completely 
accountable  fcv  its  consistent  and  reliable  performance.  Which,  we  feel,  is  only  wise. 

www.nttverio.com 


NTT/VERIO 


NTT  Communications  Group  Officos  i^m  •  usa  • 

Kwm  •  Orin*  •  HontKant  •  IWtmn  •  VWBwi  •  Th^tetd  •  hUeoMki 

im  H  a  tradMMrt  of  HIPfON  TILESUPM  AND  TEUPHONt  CORPORAniW.  Verio  if 
Oadmufks  of  their  respedne  eameis.  02003  NTT  CometMicalionj  Corpontien 
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OPINION 

Dont*Ask-Don’t-Tell  E-Commerce 

The  recent  theft  of  8  million  credit  card 
numbers  shows  why  credit  card  associa¬ 
tions  should  rethink  their  security  policies, 
says  Robert  L  Mitchell.  P&go  33 


EMERBINe  TECHNOLOeiES 

VirtualhrFmtoFm 

IP-based  videoconferencing  is  fi¬ 
nally  taking  bold  as  corporations 
upgrade  their  WAN  infrastructures 
to  support  IP  telephony.  Pbqo  30 


Trades 

ATTOPSPEED 


Straight-through  proc¬ 
essing  means  that  finan¬ 
cial  services  firms  must 
move  to  all-digitai  proc¬ 
esses  to  remain  competi¬ 
tive  and  connected. 

By  Lucas  Mearian 


IMiSoRagiona] 

the  same  spectrum  as  wireless 
LANs,  but  wide-area  wireless  net¬ 
work  tecbxtologies  can  bridge 
Ethernet  LANs  in  offices 
many  miles  apart  Page  28 


IN  THE  NAME  OF  STEAIGHT-THROUGH  PROCESSING 
(STP)  of  securities  trades,  financial  services 
companies  over  the  next  two  years  will  spend  an 
estimated  $6  billion  replacing  their  manual 
processes  by  plugging  into  virtual  trade-match¬ 
ing  utilities  (VMU),  installmg  middleware  aitd 
integrating  froot-  and  back-end  computer  systems. 

In  sinqile  terms,  STP  is  the  removal  of  manual 
processes  in  the  trade-processing  cyde.  mduding  pa¬ 
per  and  diq>arate  data  systems,  creating  an  unbroken 
electronic  stream  of  information  from  the  broker/ 
dealer  to  the  clearinghouse.  At  present,  mudi  of  the 
trades  process  still  relies  on  fox  or  telephooe. 

STP  includes  messaging  standards,  cranslatioD 
middleware  and  electronic  cormectivity  among  in¬ 
vestment  managers,  brotet/dealers,  custodian  banks 
and  clearing  companies.  One  confusing  aq)ect  of 
STP  is  its  association  with  T«L  or  trade  plus  one  day. 
T+1  refers  to  reducing  the  trade  settlement  cycle 
from  tbe  current  standard  of  three  days  to  one.  and 
it’s  dependent  on  STP^  electronic  effideiKies. 

The  Securities  Industry  Associatioo  (SIA),  an  in¬ 
dustry  group  with  (Alices  in  New  York  and  Washing¬ 
ton,  hu  lead  the  charge  toward  STP  and  T*L  But  the 
Sept  11  terrorist  attacks  and  tbe  economic  downturn 
squelched  tbe  SlA's  effort  to  move  to  T*1  by  2005,  as 
attention  and  budgets  turned  toward  more  critical 
needs  such  as  disaster  recovery,  busirtess  continuity 
aixi  regulatmy  compliance.  SIA  stated  in  July 
that  it  will  fo^  on  promoting  STP  by  2004,  with  no 
ffeadlw  for  T'»L 

The  real  iiKentive  to  move  to  STP.  tbe  SIA  argues, 
is  the  return  <m  investment,  which  could  be  consid¬ 
erable  for  many  companies. 

For  example,  the  Northern  Ikust  Corp.  in  Chicago 
went  live  In  August  with  an  e-mail  alert  system  that 
replaced  a  labor-intensive  Gn  process  for  notifying 
investment  managers  of  corporate  actkms  such  as 
mergers,  acquisitions  and  name  changes.  The  home¬ 
grown  tedmology,  called  Corporate  Actkm  Delivery 
ai»d  Response  system,  took  a  year  to  develop  and 
cost  just  under  $10  milUon.  It  has  reduced  num¬ 
ber  of  enqrfoyees  required  for  data  input  by  up  to 
70%  and  im^nxived  productivity  by  50%  to  60^  says 
Teresa  Parkn  trim  is  reqMXkrible  for  securities  and 
banking  operations  woridwide  at  Northern  Triist 
Tbe  Web-based  e-mail  system  runs  off  a  Sun  So¬ 
laris  server,  while  production  data,  including  ac¬ 
counting  programs,  runs  off  IBM  iSeries  and  xSeries 
mainframes.  Hie  Web-based  e-mail  application  is  a 
proprietary  program  based  on  Java,  used  for 
*gndtng  securities-related  data  to  fond  managers, 
trim  are  online  using  cither  the  Society  for  World- 

Contimied  on  page  24 
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Straight-through  proc¬ 
essing  means  that  finan¬ 
cial  services  firms  must 
move  to  all-digital  proc¬ 
esses  to  remain  competi¬ 
tive  and  connected. 

By  Lucas  Meaiian 


IN  THE  NAME  OF  STRAIGHT-THROUGH  PROCESSING 
(STP)  of  securities  trades,  financial  services 
companies  over  tbe  next  two  years  will  spend  an 
estimated  $6  bUlion  replacing  their  manual 
processes  by  pluggii^  into  virtual  trade*match* 
ing  utilities  (VMU),  installing  middleware  and 
integrating  front-  and  back-end  computer  systems. 

In  simple  terms.  STP  is  the  removal  of  manual 
processes  in  the  trade-jHocesring  cyde.  including  pa¬ 
per  and  disparate  data  systems,  creating  an  unbroken 
electronic  stream  of  information  from  tbe  broker/ 
dealer  to  the  clearinghouse.  At  present,  much  of  the 
trades  process  still  relies  on  fax  or  telephone. 

STP  includes  messaging  standards,  translation 
middleware  and  electronic  connectivity  among  in¬ 
vestment  managers,  broker/dealers,  custodian  banks 
and  clearing  companies.  One  confusing  a^iect  of 
STP  is  its  association  with  T«l,  or  trade  plus  oae  day. 
T'^1  refers  to  reducing  the  trade  settlement  cycle 
horn  the  current  standard  of  three  days  to  one.  and 
it's  dependent  on  STPs  electronic  effideDcies. 

The  Securities  Industry  Association  (SIA),  an  in¬ 
dustry  group  with  offices  in  New  York  and  Washing¬ 
ton,  has  lead  the  charge  toward  STP  and  T«^L  But  tbe 
Sept.  U  terrorist  attacks  and  tbe  economic  downturn 
squelched  the  SIA’s  effort  to  nxive  to  T«^l  by  200S.  as 
attention  and  budgets  turned  toward  more  critical 
needs  such  as  disaster  recovery,  business  continuity 
and  regulatory  compliance.  Tbe  SIA  stated  in  July 
that  it  will  focus  on  promoting  STP  2004,  with  no 
deadlme  for  T+L 

The  real  incentive  to  move  to  STP.  tbe  SIA  argues, 
is  tbe  return  on  investment,  which  could  be  consid¬ 
erable  for  many  companies. 

For  example,  tbe  Nortbem  Trust  Corp.  in  Chicago 
went  live  in  August  with  an  e-mail  alert  system  that 
replaced  a  labor-intensive  fax  process  for  notifying 
investment  managers  of  corporate  actions  such  as 
mergers,  acquiations  and  name  changes.  Tbe  home¬ 
grown  technology,  called  Corporate  Action  Delivery 
and  Response  system,  took  a  year  to  develop  and 
cost  just  under  $10  million.  It  has  reduced  the  num¬ 
ber  of  enqiloyees  required  for  data  input  by  up  to 
70%  and  improved  productivity  by  S0%  to  60%,  says 
Teresa  Parl^,  who  is  responsfole  for  securities  and 
hanking  operations  worldwide  at  Northern  TVust. 

Tbe  Web-based  e-mail  system  runs  c^a  Sun  So¬ 
laris  server,  while  production  data,  including  ac¬ 
counting  programs,  runs  off  IBM  iSeries  and  zSeries 
mainframes.  Tbe  Web-based  e-mail  i^licatkHi  is  a 
proprietary  program  based  on  Java.  It’s  used  for 
sending  securities-related  data  to  fund  maiu^rs. 
who  are  online  u&ing  either  the  Society  for  World- 

Continued  on  pqge  24 


I  AM  A  POLICE 
OFFICER. 

I  HAVE  X-RAY  VISION.  I  HAVE  THE  POWER  TO  SEE  A  BANK  ROBBERY 
FROM  ACROSS  TOWN.  I  HAVE  THE  POWER  TO  SEE  HOW  MANY  PEOPLE 
ARE  ROBBING  THE  BANK.  I  EVEN  HAVE  THE  POWER  TO  SEE  WHICH  ONE 
IS  WEARING  THE  SKI  MASK.  I  AM  MORE  THAN  A  POLICE  OFFICER. 


I  AM  A 
NETWORK. 

I  AM  THE  X-RAY  GLASSES.  I  AM  A  WIRELESS  NETWORK.  I  HAVE 
THE  POWER  TO  SEND  VIDEO  AND  DATA  WITHOUT  THE  USE  OF  WIRES. 

I  HAVE  THE  POWER  TO  LINK  A  BANK'S  SURVEILLANCE  CAMERA  TO  A 
SQUAD  CAR  EN  ROUTE  TO  A  ROBBERY.  I  HAVE  THE  POWER  TO  SHOW 
COPS  WHAT  THEY'RE  UP  AGAINST.  I  AM  HERETO  PROTECT  AND  SERVE 
I  AM  MORE  THAN  A  NETWORK. 


THIS  IS  THE  POWER  OF  THE  NETWORK.  HOW. 

<i>e».«mi/powfiww 
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FlMtBoston  RnanctaJ  Corp.  launched  one  of 
the  industry's  first  Internet  links  for  high-value 
money-market  and  mutual-fund  customers,  cre¬ 
ating  an  electronic  straight-through  process 
connecting  its  front-  and  back-end  systems 

ReetBosion  partnered  with  Bonaire  Soft¬ 
ware  Solutions  LLC  to  develop  the  application, 
which  lets  investors  order  trades  online  and  lets 
traders  and  salespeople  view,  approve  or  reject 
customer  orders  through  an  electronic  link  to  a 
trade  blotter  It  then  sends  approved  trades  di¬ 
rectly  to  multiple  record-keeping  and/or  proc¬ 
essing  syslems.  Both  Fleet^ton  and  ^naire 
ate  based  m  Bo^on. 

ReetBoston  replaced  a  manual  process, 
which  required  customers  to  call  m  to  find  out 
what  their  position  was  on  any  given  day  and 
what  excess  cash  they  had  m  their  accounts. 

Since  the  Web-based  portal  was  launched  in 
February  2002.  Ihe  number  of  money-market 
and  muluat-fund  accounts  has  tripled  Large 
volumes  of  l/ades  that  normally  look  an  hour  to 
process  now  take  less  than  five  minutes,  says 
Dean  Richmond,  a  senior  systems  manager  at 
ReetBoston.  Thirty-one  percent  of  ReelBos- 
ton's  mutual  fund  and  money  market  cus¬ 
tomers.  or  470  users,  access  their  accounts  at 
least  once  per  day  via  the  system. 

Richmond  said  Ihe  system  took  about  a  year 
^  a  half  to  build  tut  didn't  require  replaong 
any  existing  ^ems  1!  involved  taking  existing 
le^  systems  and  gMng  them  the  ability  to 
talk  to  a  Web  application  We  had  to  build  a  lot 
of  APIsfapplicahon  programming  intertacesj 
and  make  sure  that  process  was  hardened  and 
redundant.*  says  Richmond.  The  system  ^most 
immediately  paid  lor  itself  through  time  savings 
and  customer  retention,  he  adds. 


Cortfinufd  from  page  21 
wide  Interbank  Financial  Tefecommu- 
nicaiiuns  (SWIFT)  industry  messaginte 
standard  or  Northern's  Web-based 
produci. 

“Before,  it  took  10  people  to  process 
1.000  trades  a  day,  and  now  it  takes  four  people." 
says  Parker.  But  there  is  risk  involved  in  moving;  to 
an  all-electronic  process.  “If  you  get  a  trade  wrong, 
the  most  you're  going  to  pay  for  is  the  lost  interest 
on  the  trade.  If  you  get  a  corporate  action  wrong, 
you  might  have  to  sell  a  security  you  got  by  mistake. 
That  could  K’  17  cents,  or  it  could  be  millions  of  dol¬ 
lars."  she  .says. 

rr  managers  say  that  the  benefits  of  STP  outweigh 
the  risks.  A  move  to  an  all-electnrnic  flow  of  infor¬ 
mation  allows  managers  and  broker/dealers  to  sec  a 
stock  price  first  and  react  to  it.  which  can  translate 
into  increased  profitability  and  improved  customer 
service,  according  to  Larry  Tabb,  an  analyst  at  Tow- 
erGroup  in  Needham.  Mass.  Klcctronic  systems  also 
require  fewer  salespeople,  who  arc  normally  busy- 
writing  down  orders  and  having  staff  keypunch  in¬ 
formal  ion  into  back-end  systems.  STP  also  helps  re¬ 
move  errors  from  orders  that  in  a  manual  process 
can  be  entered  at  any  point  as  orders  move  internally 
and  externally  from  a  fund  manager  or  retail  broker 
to  a  custodian  bank  and  a  clearinghouse. 

integrating  Internal  Systems 

Because  banks  work  with  multiple  brokerages  to  au- 
ihoriae  the  release  of  funds  that  are  used  to  c«>ver  se¬ 
curities  trades,  the  manual  approval  processes  used 
today  can  take  several  days  to  clear  even  one  trade. 

•‘Firms  use  multiple  systems,  and  not  all  of  them 
are  linked  together.  The  issues  have  to  do  with  link¬ 
ing  all  the  systems  together  so  transactions  flow 
from  one  to  another  with  no  orve  handling  it.  There 
arc  snafus  everywhere  along  the  line."  says  Tabb. 

Internal  messi^-  standards  for  cash  reporting, 
bulk  payments,  investment  funds,  securities  preiradc 
processes  and  customer-to-bank  credit  transfers  are 
virtually  nonexistent,  say  analysts. 

Applications  and  messaging  systems  within  securi¬ 
ties  firms  and  banks  wcrcn‘1  created  with  consistent 
architectures,  so  middieware  is  needed  to  send  data 


ST1UI6HTTA1K 

Rh  addition^  informatnn  on  the 
need  lor  messagiRg  standards.  vis<t 
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An  STP  Model  for  Facilitating  Securities  Trades 


ThBCMnoie  show  how  an  STP  siBianilBcaaies  real  IWK  iiialUMigoldtolhroutfioul  the  trade  We  cyde  Theprocessslalswilhiheninaltade 
atyeemettt  OOiMen  the  brokai  and  rMsimera  nenager.  the  subsoquM  setUameni  agnemerit  mwivvig  (he  executirig  broker,  dearng  broken  and 
cifiiodte  benks  md  the  achal  seMemant  with  lt«  dBposrtory.  The  neldiina  utily  seneb  pendKig  setttonent  instructions  to  the  deposAoty.  so  each 
agent  doesnl  rwBd  to  do  so  n  a  seperaie  transaciKin 


Settlement  noOWcattoo 


Account  aeMamairt  imtntclioca 
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from  one  message  format,  such  as  the 
Financial  Information  Exchange  (FIX) 
protocol,  to  back-end  systems  that  may 
use  proprietary'  formats. 

Generally,  high-value  customers  — 
those  who  trade  more  than  $100,000  a 
day  —  call  brokers  or  sales  representatives  on  a  trad¬ 
ing  desk  to  check  their  account  balances,  stock  hold¬ 
ings  and  what  excess  cash  they  might  have  (o  invest. 
Sales  representatives  then  write  up  order  tickets  by- 
hand  and  fax  them  to  an  operations  department, 
where  someone  else  keys  in  the  order  into  back-ofllce 
systems.  Those  orders  then  have  to  be  reconciled  be¬ 
tween  the  front  and  back  office  to  make  sure  ail  the 
tickets  were  received  without  any  missed  trades. 

Viitual  Matching  Utilities 

One  key  issue  for  all  companies  participating  in  se¬ 
curities  trading  is  connectivity  to  nascent  VMUs. 
such  as  Boston-based  Omgeo  LLC  and  the  Zurich- 
based  Global  Straigh(-*nirough  Processing  Associa¬ 
tion.  Matching  in  posttrade  message  instructions  at 
one  centralized  data  center  creates  an  unbroken  flow 
of  electronic  data  between  ftnaiKiai  services  firms. 

Matching  utilities  are  basically  trading  trafTic  man¬ 
agers.  They  use  large  servers  or  mainframes  and  com¬ 
mon  messaging  formats  based  on  XML  to  allow  bro¬ 
ker/dealers  and  investment  managers  to  communi¬ 
cate  with  one  another  and  assemble  the  many  pieces 
of  data  required  for  a  trade  to  be  confirmed  ^fore 
being  sent  on  for  settlement  by  a  custodian  bank. 

Royal  Ijondon  Asset  Management  has  been  inte¬ 
grating  back-office  systems  for  about  a  year  and 
plugged  into  Omgeo’s  Central  Trade  Manager 
(CfM)  VMU  about  three  months  ago.  Before  that, 
the  London-based  bank  was  taking  an  average  of  20 
hours  to  get  confirmation  of  a  trade,  according  to  lu- 
lian  Baines.  Royal  London’s  investment  servicing 
manager,  who  oversaw  the  deployment  ofOmgeo’s 
technology  at  his  company.  The  same  process  now 
takes  three  hours,  he  says. 

Also,  prior  to  using  Omgeo.  Royal  London’s  fund 
managers  input  data  onto  databases  that  were  trans¬ 
ferred  daily  in  batch  mode  to  a  back-o^icc  system, 
where  the  trades  weu*  physically  examined  by  clerks 
on  the  company's  settlement  team.  Those  clerks  in 
turn  printed  an  electronic  confirmation  and  used 
that  to  discover  exceptions  or  mistakes. 

“Fifty  percent  of  those  orders  were  failing  on  poor 
allocation  data,  poor  information  to  brokers  or  vice 
versa."  says  Baines,  who  adds  that  errors  were  virtu¬ 
ally  eliminated  with  the  new  electronic  messaging 
system.  Royal  London  uses  an  application  program¬ 
ming  interface  gateway  device  on  an  existing  Win¬ 
dows  NT  server  that  translates  code  from  its  Thom¬ 
son  Financial’s  Icon  invcslmeni  management,  valua¬ 
tion  and  accounting  s>'stem  into  Omgeo’s  CTM. 

“Because  our  back-end  database  was  from  Thom¬ 
son.  they  did  the  integration  work."  Baines  says.  The 
connection  into  Omgeo's  CTTM  look  about  a  year. 

I'he  greatest  hurdle,  as  Baines  puts  it,  was  under¬ 
standing  “the  new  jargon."  Royal  London  has  linked 
eight  of  its  highest-volumc  brokerages,  with  four 
more  in  the  pipeline.  ’That  would  give  us  60%  of  our 
volume,"  Baines  says.  “Once  we  hit  that,  well  be 
looking  to  increase  it  and  have  all  60  brokerages  on 
by  the  end  of  the  year."  b 


STPPays 

OffforReet 

nMtSocton  RnMdii  Coip.  launched  one  of 
the  ndusby’s  first  Infemel  links  for  high-value 
money-market  and  mutual-fund  customers,  cre- 
aiing  an  electronic  straight-through  process 
cormactinQ  its  front-  and  back-end  systems. 

FleetBostonpartneredwithBonaireSoft- 
«iare  Soiutioris  UX  to  develop  the  applicatiOT 
lets  investors  order  tra^  orine  and  lets 
traders  and  salespeople  view,  approve  or  rqect 
customer  orders  through  an  electronic  ink  to  a 
trade  blotler.  It  then  sends  approved  trades  di¬ 
rectly  to  rnultipte  record-keeping  and/br  proc- 
essing  systems.  Both  Fleet^on  arid  Bonaire 
are  based  n  Boston. 

HeetBoston  replaced  a  manual  process, 
which  required  customers  to  cal  in  to  find  out 
whet  their  position  was  on  any  given  day  and 
what  eicess  cash  they  had  in  their  accounts. 

Smce  the  Wteb^rased  portal  was  launched  In 
February  200Z  the  runber  d  trnney-markBt 
and  riuiual-fund  aocoifits  has  tripled.  Large 
voknes  of  trades  that  nomtaly  took  an  hour  to 
process  now  take  less  ths>  five  imiles.  says 
Dean  Rchmond.  a  senior  systems  martager  at 
FleetBoston.  Thirty^  penxrit  d  FieetBtt 
ton's  mutual  ftjnd  and  money  maritol  cus¬ 
tomers,  or  470  users,  access  their  accounts  at 
leest  once  per  day  m  the  system. 

Fbchmond  said  the  system  took  about  a  year 
and  a  ha4  to  diU  but  didn'l  require  replacing 
any  ensiito  systerns. 'll  invDlved  taking  exi^ 
lei^  systems  and  giving  them  the  ataiMy  to 
tair  to  a  Web  appkcaiion.  We  had  to  build  a  tot 
d  M’ls  [applet  programming  interface^ 
and  make  sure  that  process  was  hardened  and 
redundant*  says  ffichrnond.  The  system  almost 
imrtedWefypi^  tor  itseWfiwouQhtirne  savings 
and  customer  relentnn.  he  adds. 


Con/inu«d  from  page  21 
wride  Interbank  Financial  Teleconunu- 
oications  (SWIFT)  industry  messaging 
standard  or  Northern’s  Web-based 
product 

“Before,  it  took  10  people  to  process  - 

1,000  trades  a  day.  and  now  it  takes  four  people.* 
says  Paricer.  But  there  is  risk  involved  in  moving  to 
an  all-electronic  process.  “If  you  get  a  trade  wrong, 
the  roost  you’re  ^iog  to  pay  for  is  the  lost  interest 
on  the  trade.  If  you  get  a  corporate  action  wrong, 
you  might  have  to  sell  a  security  you  got  by  mistake. 
TTiat  could  be  17  cents,  or  it  could  be  millions  of  dol¬ 
lars,”  she  says. 

FT  managers  say  that  the  benefits  of  STP  outweigh 
the  risks.  A  move  to  an  all-electronic  flow  of  infor¬ 
mation  allows  managers  and  broker/dealers  to  see  a 
stock  price  first  and  react  to  it.  which  can  translate 
into  increased  profitability  and  improved  customer 
service,  according  to  Larry  Tabb.  an  analyst  at  Tow- 
erGroup  in  Needham,  Mass.  Electronic  systems  also 
require  fewer  salespeople,  who  are  normally  bus>' 
writing  down  orders  and  having  staff  keypunch  in¬ 
formation  into  back-end  systems.  STP  also  helps  re¬ 
move  errors  from  orders  that  in  a  manual  process 
can  be  entered  at  any  point  as  orders  move  internally 
and  externally  hrom  a  fund  manager  or  retail  broker 
to  a  custodian  baiUc  and  a  clearinghouse. 

Integrating  Internal  Systems 

Because  banks  work  with  multiple  brokerages  to  au¬ 
thorize  the  release  of  funds  that  are  used  to  cover  se¬ 
curities  trades,  the  manual  approval  processes  used 
today  can  take  several  days  to  dear  even  one  trade. 

“Finns  use  multiple  systems,  and  not  all  of  them 
are  linked  together.  The  issues  have  to  do  with  link¬ 
ing  all  the  systems  together  so  transactions  flow 
from  one  to  another  with  no  one  handling  it  *n»eTe 
are  snafus  everywhere  along  the  Une,”  says  TaM>. 

Internal  message  standards  for  cash  reporting, 
bulk  payments,  investment  funds,  securities  pretrade 
processes  and  customer-to-bank  credit  transfers  are 
virtually  nonexistent,  say  analysts. 

Applications  and  mes.saging  systems  within  securi¬ 
ties  firms  and  banks  weren’t  created  with  consistent 
architectures,  so  middleware  is  needed  to  send  data 
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from  one  message  format,  such  as  the 
Financial  Information  Exchange  (FIX) 
protocol,  to  back-end  systems  that  may 
use  proprietary  formats. 

Cienerally.  high-value  customers  — 
those  who  trade  more  than  $100,000  a 
day  —  call  brokers  or  sales  representatives  on  a  trad¬ 
ing  desk  to  check  their  account  balances,  stock  hold¬ 
ings  and  what  excess  cash  they  have  to  invest. 
Sales  representatives  then  write  up  order  tickets  by 
hand  and  fax  them  to  an  operations  department, 
where  someone  else  keys  in  the  order  into  back-offke 
systems.  Those  orders  then  have  to  be  reconciled  be¬ 
tween  the  front  and  back  offke  to  make  sure  all  the 
tickets  were  received  without  any  missed  trades. 

Vbtiial  Matching  unties 

One  key  issue  for  all  companies  participating  in  se¬ 
curities  trading  is  connectivity  to  nascent  VMUs, 
such  as  Boston-based  Omgeo  LLC  and  the  Zurich- 
based  Global  Strai^t-Through  Processing  Associa¬ 
tion.  Matching  in  posttrade  message  instructions  at 
one  centralized  data  center  creates  an  unbre^n  flow 
of  electronic  data  between  flnaacial  services  Anns. 

Matching  utilities  are  basically  trading  traflic  man¬ 
agers.  They  use  large  servers  or  mainframes  and  com¬ 
mon  roess^ii^  formats  based  on  XML  to  allow  bro¬ 
ker/dealers  and  investment  managers  to  communi¬ 
cate  with  one  another  and  assemble  the  many  pieces 
of  data  required  for  a  trade  to  be  confiimed  ^fore 
being  sent  on  for  settlement  by  a  custodian  bank. 

Royal  London  Asset  Management  has  been  inte¬ 
grating  back-offke  systems  for  about  a  year  and 
plugged  into  Omgeo’s  dlentrai  TVade  Manager 
(CTM)  VMU  about  three  months  ago.  Before  that, 
the  London-based  bank  was  taking  an  average  of  20 
hours  to  get  conTumation  of  a  trade,  according  to  Ju¬ 
lian  Baines.  Royal  London's  investment  servicing 
manager,  who  oversaw  the  deployroeot  of  Omgeo’s 
technology  at  his  company.  The  same  process  now 
takes  three  hours,  he  says. 

Also,  prior  to  using  Omgeo.  Royal  London's  fund 
managers  input  data  onto  databases  that  were  trans¬ 
ferred  daily  in  batch  mode  to  a  back-office  system, 
where  the  trades  were  physically  examined  by  clerks 
on  the  company's  settlement  Those  clerks  in 
turn  printed  an  electronic  conAnnation  and  used 
that  to  discover  exceptions  or  mistakes. 

“Fifty  percent  of  those  orders  were  failing  on  poor 
allocation  data,  poor  information  to  brokers  or  vke 
versa.”  says  Baines,  who  adds  that  errors  were  virtu¬ 
ally  eliminated  with  the  new  electronic  messaging 
system.  Royal  London  uses  an  application  program¬ 
ming  interfoce  gateway  device  on  an  existi^  Win¬ 
dows  NT  server  that  translates  code  from  its  Thom¬ 
son  FmanciaTs  icon  investment  management,  valua¬ 
tion  and  accounting  system  into  Omgeo's  CTTM. 

“Because  our  back-end  database  was  from  Thom¬ 
son.  they  did  the  integration  work,"  Baines  says.  The 
connection  into  On^eo’s  CTM  took  about  a  year 
The  greatest  hurdle,  as  Baines  puts  it.  was  under¬ 
standing  “the  new  Jargon.”  Royal  London  has  linked 
eight  of  its  higbest-volume  br^rages,  with  four 
more  in  the  pipeline.  “That  would  give  us  60%  of  our 
volume,"  Bafoes  says.  “Once  we  hit  that,  we’ll  be 
looking  to  increase  it  and  have  all  60  bre^rages  on 
by  the  end  of  the  year."  I 
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WIRELESS 

NEISGO 

RE6I0NAL 

Wide-area  wireless  networking 
systems  can  provide  a  cost- 
effective  alternative  to  leased  lines 
for  Internet  access  or  metio-area 
connectivity.  l^\  Bob  Brew  in 


The  unucensed  portion 
of  the  US.  radio  frequency 
spectrum  represents  just 
ooe-teoth  of  1%  of  the  total 
bandwidth  allocated  for 
communications,  but  this 
thin  slice  has  made  the  cur¬ 
rent  boom  in  wireless  LANs 
possible.  Because  WLANs 
use  the  free  spectnun,  companies  can 
set  them  up  without  the  ha^e  or  ex¬ 
pense  of  going  through  the  Federal 
Communications  Conunission’s  licens¬ 
ing  process. 

But  WLANs  aren’t  the  only  netwotk- 
ing  technologies  leveraging  the  free 
spectrum.  Corporations  are  also  using 
fhced  wireless  systems  and  services  from 
wireless  service  providers  to  extend 
connectivity  beyond  the  LAN. 

Fixed  wiraless  systems  use  the  same 
2A>  and  S-GHz  ba^  uaed  by  WLAN 
products.  But  highly  focused  (Urectton- 
al  antennas  suf^x>rt  wide-area  coonec- 
tions  over  distances  measured  in  miles, 
rad»er  than  the  hundreds  of  feet  WLAN 


devices  cover.  Fixed  wireless  devices 
let  enterprises  tie  together  r^onal  or 
metro-area  ofitce  buildings  using  a 
privately  owned  and  operated  broad¬ 
band  network.  The  systems  can  sup- 
I  port  point-to-point  Ethernet  bridging 
'  or  DP-based  multipoint  packet  routing. 
And  some  products  also  offer  a  sepa¬ 
rate  T1  channeL  eliminating  the  need 
to  lease  physical  T1  circuits  for  digital 
voice  traffic. 

Companies  that  don’t  want  to  set  up 
their  own  systems  may  And  similar 
wireless  offerings  from  service  pro¬ 
viders.  A  new  breed  of  wireless  Inter¬ 
net  service  providers  (ISP)  uses  the 
unlicensed  frequency  band  to  offer 
last-mile  broadband  services  at  rates 
lower  than  those  that  telej^ne  com¬ 
panies  charge  for  comparable  leased- 
Une  services.  Service  providers  offer 
data  rates  ranging  from  a  few  hundred 
kilobits  per  seco^  to  S4M  bit/kec.  or 
more.  And  in  some  remote  locations, 
as  well  as  In  parts  of  some  metropoli¬ 
tan  areas,  wireless  ISPs  are  the  only 
broadband  alternative. 

BiiingalMnik 

York.  Pa.-based  Kinsley  Inc.  opted  for  a 
Axed  wireless  WAN  tlmt  serves  1300 
workers  in  multfole  locations.  Patrick 
Kinsley,  a  project  co-coordinator  at  the 
construction  and  cwnmerclal  pn^tty 
management  Arm.  says  the  company 
had  to  accommodate  large  data  ffles 
generated  by  computer-aided  design 
(CAD)  workstations,  as  well  as  growing 
voice  traffic.  It  also  needed  a  way  to 
connect  telephone  and  computer  sys¬ 
tems  in  ofAce  traOers  at  construction 
sites  into  back-end  systems  more 
quickly  than  the  several  weeks  it  took 
to  provision  lines  from  the  local  tele¬ 
phone  company. 

Business  Information  Group  (BIG), 
the  York-based  systems  integrator  that 
hosts  Kinsley's  data  center,  deigned 
the  Axed  wireless  network,  which 
serves  L500  woricers  In  ei^  locations. 
Some  22  other  companies  boused  in 
buUdiz^  Kinsley  manages  also  pay  to 
use  the  systeoL  This  helped  shave 
Kinsley's  cost  in  buikUng  the  network, 
says  John  Dolmetscfa.  BIGk  president 
and  CIO.  The  wireless  netwc^  con¬ 
sists  of  a  high-speed  backbone,  with 
secondary  spurs  fanning  out  to  other 
offices  at  speeds  ranging  from  284K  to 
24Mbit/kec. 

Kinsley  routes  all  voice  traffic  from 
IP  and  diptal  phones  over  its  wireless 
IP  backbone.  Digital  phone  signals 
are  converted  to  IP  at  remote  switches. 
All  vt^  traffic  terminates  in  IP  trunk 
cards  in  a  private  branch 
from  Nortel  Networks  Ltd.  The  switch 


can  handle  up  to  336  concurrent  voice- 
over-IP  sessions,  Dolmetscb  says. 

Kinsley's  wireless  network  uses 
Tsunami  point-to-point  and  point-to* 
multipoint  wireless  networktag  equip¬ 
ment  frxHD  Proxim  Inc.  in  Sunnyvale, 
Calif.  Tsunami  operates  in  dke  SA-GHz 
unlicensed  frequency  band  and  inter¬ 
connects  bacifoooe  locations  at  speeds 
up  to  24M  bitAec  The  oetworic  also 
uses  BreezeAccess  A  2.4-GHz  wireless 
equipment  from  Alvarion  Inc  in  Carls¬ 
bad,  CaliL,  to  provide  connectivity 
with  smaller  locations  and  remote  job 
sites  (see  diagram). 

The  equipment  is  installed  on  Ave 
towers  within  a  30-mile  radius  around 
York,  each  no  farther  than  U)  or  12 
miles  frrun  an  office  location,  Dol- 
metsch  says.  Kinsley  completed  the 
Axed  wireless  backbone  in  2001  and 
has  continued  to  add  office  locatioos. 

Dolmetsch  estimates  the  syst«n’s 
Ave-year  return  on  investment  at  70% 
when  calculated  against  the  cost  of  the 
voice  and  data  drcuits  it  replaced  Sav¬ 
ings  on  phone  chaiges  akme  have  been 
S3300  per  month,  be  says.  The  wire¬ 
less  equipment  cost  alx^  1200,000. 

Ibdd  Carotfaers,  an  analyst  at  The 
Telnedty  Group  LLC  in  San  Jose,  says 
the  size  and  scope  of  the  Kinsley  wire¬ 
less  WAN  is  onusuaL  "rve  never  heard 
of  (a  wireless  WAN]  by  one  company  as 
extensive  as  tius,”  be  says. 

HwHoMWinles 

Rather  than  install  a  private  Axed  wire¬ 
less  system,  Kevin  i^igan,  vice  presi¬ 
dent  and  general  manager  of  the  Stan¬ 
ford  Park  Hotel  in  Menlo  Park,  CallL, 
contracted  with  a  service  provides. 

The  service  delivers  the  high  data  rates 
lanigan  needs  to  support  guest  Inter¬ 
net  access  and  provides  variable  band¬ 
width  —  something  he  couldn't  easily 
obtain  from  his  local  (dmne  company. 

The  boteL  located  in  the  heart  of  Sil¬ 
icon  >^lley,  hosts  large  meetings  for  lo¬ 
cal  high-tech  pninpant^  Those  guests 
require  bandwidth  for  meetings  rhar  it 
wo^d  typically  take  multiple  T1  lines 
to  support  Lanigan  initially  contacted 
the  lo^  exchange  carrier;  a  unit  of 
SBC  r.rtmmttn4rarir»««  Idc.  lo  San  AA- 
tookk,  and  was  told  that  it  would  take 
60  to  90  days  to  install  such  drcuits.  In 
contrast,  NextWeb  Inc.,  a  wireless  ISP 
in  ^etxkont,  CaliL,  provides  a  basic 
L44M  Mtkec.  T1  drcuit  from  a  small 
dish  on  the  hotel's  rooC  and  h  can 
ramp  up  the  bandwidtii  to  the  equiva¬ 
lent  of  multiple  T)  lines  in  one  day. 

David  Williams,  vice  president  ^ 
business  development  at  NextWeb,  says 
bis  5-GH2  service  su|^>orts  ^)eeds  from 
IM  to  lOM  bit^tec.  Lanin's  11  service 
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supports  WLAN  access  throus^uHit  the 
163-ro(Hn  hotel  —  a  ser^ce  which  it 
doesn’t  charge  guests  extra.  Nonethe¬ 
less.  l.anigan  says  the  broadband  wire¬ 
less  installation  has  paid  ofi:  The  hotel 
has  landed  ’’not  fewer  than  12  group 
bookings’'  in  the  past  i^ear  because  of 
its  ability  to  (rffer  such  connectivity. 

While  bro^band  wireless  was  once 
viewed  as  ideal  iw  rural  areas  with  lit¬ 
tle  telecommunications  in&astructure, 
TVent  Anderson.  CEO  of  wireless  ISP 
SkyRiver  Communications  Inc  in  San 
Diego,  says  that  even  in  densely  pt^ 
ulated  areas,  there  are  pockets  not 
served  by  telephone  companies’  Digital 
Subscriber  Lines  M  fiber  And  if  flber 
connectitMis  are  available,  they  are  of¬ 
ten  prohibitivety  eq>ensive.  be  says. 

Lhxla  Ihcker  co-founder  Aerial 
Access  LLC,  a  digital  aeri^  photogra¬ 
phy  firm  in  San  Diego,  fell  on  the  odier 
side  of  that  digital  divide  Aerial  Access 
has  a  half  terabyte  of  sttxed  aerial  {foo- 


tos  and  often  needs  to  send  10MB  or 
larger  image  files  to  prospective  custo¬ 
mers.  SBC  could  t^fer  only  fractional  TL 
at  a  cost  of  S3S0  per  month.  SkyRiver 
charges  S149  per  month  for  a  512K  bit/ 
sec  connection,  whkh  Ihdcer  says  is 
adequate  for  her  requirements.  “An  av¬ 
erage  frle  between  3  and  10MB  transmits 
in  between  30  ai>d  60  seconds."  she  says. 

BrnniPlns 

Although  vendors  such  as  Proxim  and 
■  wireless  ISPs  such  as  NextWeb  and 
SkyRiver  have  established  a  Hxed 
wireless  beachhead,  die  wireless  WAN 
market  is  still  in  its  infency,  according 
to  Wu  Sing  Lee,  an  analyst  at  ^ost  & 
Sullivan  Inc  m  San  Antmiia 
Between  L500  and  L800  wireless 
ISPs  tolerate  in  the  unlicensed  q>ec- 
trum  band  today,  according  to  Daryl 
Schoolar,  an  analyst  at  In-Stat/MDR  in 
Scottsdale,  Aria.  He  predicts  signifi¬ 
cant  growth  over  the  next  several 


years.  Free  spectrum  and  low-cost 
equqiment.  at  about  $8,000  for  a  com¬ 
plete  base  station,  will  serve  as  the  dri¬ 
vers  for  this  growth,  he  says. 

But  analysts  and  wireless  ISPs  alike 
say  growth  could  be  inhibited  by  inter¬ 
ference.  The  2^4'OHz  band  is  already 
crowded,  and  the  same  may  h^)pen  in 
the  5-GHz  band.  NextWeb’s  Williams 
says  interference  could  be  mitigated  by 
using  a  technique  called  dual  polariza¬ 
tion,  whereas  Carothers  at  Telnedty  en¬ 
virons  die  wireless  ISP  industry  devel¬ 
oping  a  self-policing  interference  body. 

Security  is  also  a  concern,  but  not 
as  much  with  fixed  wireless  as  with 
broadband,  since  fixed  wireless  uses  a 
narrow,  hard-n>-interoept  transmission 
beam.  The  Proxim  gear  used  by  Kins¬ 
ley  adds  a  proprietary  encryptkm 
sdiemc  Wireless  ISPs  like  SkyRiver 
build  in  additkmal  layers  of  security  as 
weU,  induding  a  Media  Access  Control 
layer.  They  also  offer  individual  ad¬ 


dresses  for  customer  equipment 

But  even  though  the  i^ustry  is  sdll 
evolving,  die  technology  is  stable.  Craig 
Mathias,  an  analyst  at  Farpoint  Groiq) 
in  Ashland,  Mass.,  calls  fixed  wireless 
relttively  easy  to  install  and  operate. 

And  to  users,  it  seems  like  magic.  Jeff 
LeaL  a  inofect  co-coordinattv  at  Kios- 
ley-owned  LSC  Design  Inc.,  notes  that 
‘^dien  you  tell  people  in  York  that 
you're  doing  busini^  over  a  wireless 
network,  they  dem't  have  a  clue."  When 
the  network  was  first  turned  oo.  Leaf 
says,  he  marveled  at  the  qieed  «  which 
his  CAD  files  were  transited.  Now  he 
doesn’t  think  about  the  network  or  hs 
^eed  at  all  ~  a  sure  sign  that  the  tech¬ 
nology  has  gained  acceptance.  I 


Fw  mm  w  vMhb  MiiMxiaia  vw 
WntaKnwMOsCnlw 


www.computerworld.com 


nCflNOlMY 


CMmOflU  lliiiiS.iH)  27 


supports  WLAN  access  throughout  the 
163-room  hotel  —  a  service  for  which  it 
doesn’t  charge  guests  extra.  Nonethe¬ 
less.  Lanigan  says  the  broadband  wire¬ 
less  installation  has  paid  off:  The  hotel 
has  landed  "not  fewer  than  12  group 
bookings”  in  the  past  year  because  of 
its  ability  to  offer  such  connectivity. 

While  broadband  wireless  was  once 
viewed  as  ideal  for  rural  areas  with  lit¬ 
tle  telecommunications  infrastructure, 
Trent  Anderson,  CEO  of  wireless  ISP 
SkyRjver  Communications  Inc.  in  San 
Diego,  says  that  even  in  densely  pop¬ 
ulated  areas,  there  are  pockets  not 
served  by  telephone  companies’  Digital 
Subscriber  Lines  or  fiber.  And  if  fiber 
connections  are  available,  they  are  of¬ 
ten  prohibitively  expensive,  he  says. 

Linda  Tucker,  co-founder  of  Aerial 
Access  LLC,  a  digital  aerial  photogra¬ 
phy  firm  in  San  Diego,  fell  on  the  other 
side  of  that  digital  divide.  Aerial  Access 
has  a  half  terabyte  of  stored  aerial  pho¬ 


tos  and  often  needs  to  send  10MB  or 
laiger  image  files  to  prospective  custo¬ 
mers.  SBC  could  offer  only  fractional  Tl. 
at  a  cost  of  $350  per  month.  SkyRiver 
charges  $149  per  month  for  a  512K  bit/ 
sec.  connection,  which  Tucker  says  is 
adequate  for  her  requirements.  “An  av¬ 
erage  file  between  3  and  10MB  transmits 
in  between  30  and  60  seconds,”  she  says. 

Browing  Pains 

Although  vendors  such  as  Proxim  and 
wireless  ISPs  such  as  NextWeb  and 
SkyRjver  have  established  a  fixed 
wireless  beachhead,  the  wireless  WAN 
market  is  still  in  its  infancy,  according 
to  Wai  Sing  Lee.  an  analyst  at  Frost  & 
Sullivan  Inc.  in  San  Antonio. 

Between  1.500  and  1,800  wireless 
ISPs  operate  in  the  unlicensed  spec¬ 
trum  band  today,  according  to  Daryl 
Schoolar,  an  analyst  at  In-Stat/MDR  in 
Scottsdale,  Ariz.  He  predicts  signifi¬ 
cant  growth  over  the  next  several 


years.  Free  spectrum  and  low-cost 
equipment,  at  about  $8,000  for  a  com¬ 
plete  base  station,  will  serve  as  the  dri¬ 
vers  for  this  growth,  he  says. 

But  analysts  and  wireless  ISPs  alike 
say  growth  could  be  inhibited  by  inter¬ 
ference.  The  2.4-GHz  band  is  already 
crowded,  and  the  same  may  happen  in 
the  S-GHz  band.  NextWeb's  Williams 
says  interference  could  be  mitigated  by 
usii^  a  technique  called  dual  polariza¬ 
tion.  whereas  Carothers  at  Telnecit>-  en¬ 
visions  the  wireless  ISP  industry  devel¬ 
oping  a  self-policing  interference  body. 

Security  is  also  a  concern,  but  not 
as  much  with  fixed  wireless  as  with 
broadband,  since  fixed  wireless  uses  a 
narrow,  hard-to-intercept  transmission 
beam.  The  Proxim  gear  used  by  Kins¬ 
ley  adds  a  proprietary  encryption 
scheme.  Wireless  ISPs  like  SkyRiver 
build  in  additional  layers  of  security  as 
well,  including  a  Media  Access  Control 
layer.  They  also  offer  individual  ad¬ 


dresses  for  customer  equipment. 

But  even  though  the  industiy  is  still 
evolving,  the  technolog)'  is  stable.  Craig 
Mathias,  an  analyst  at  Farpoint  Group 
in  Ashland.  Mass.,  calls  fixed  wireless 
relative!)'  easy  to  install  and  operate. 

And  to  users,  it  seems  like  magic.  |eff 
Leaf,  a  project  co-coordinator  at  Kins- 
ley-ovb-ned  LSC  Design  Inc.,  notes  that 
“when  you  tell  people  in  York  that 
you're  doing  business  over  a  wireless 
network,  they  don’t  have  a  clue.”  When 
the  netwx>rk  was  first  turned  on.  Leaf 
says,  he  marveled  at  the  ^>eed  at  which 
his  CAD  files  were  transmitted.  Now  he 
doesn't  think  about  the  network  or  its 
speed  at  all  —  a  sure  sign  that  the  tech¬ 
nology  has  gained  acceptance,  ft 
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For  more  on  wnless  networking,  visit  the  Mobde  & 
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Virtually 
Face  to  Face 


Outlook:  As  corporations  upgrade 
infrastructures  for  IP  telephony, 
integrated  IP-based  videoconfW- 
endng  systems  are  starting  to 
prolif^e.  By  Robert  L  Mitchell 


VIDEOCONFERENCING  used  tO 
require  users  to  adjourn  to 
spedally  designed  rooms 
filled  with  complex  technolo- 
gy  that  worked  over  satellite, 
Integrated  Services  Distal  Network 
(ISDN)  or  other  private  network  ser- 
vices.  Such  systems  cost  upward  of 
SS0.000  per  she.  But  no  more.  Com¬ 
pression  technology  has  improved,  de¬ 
sign  upgrades  have  cut  costs,  and  a 
new  generation  of  videoconferencing 
systems  designed  to  woiit  over  IP  net¬ 


works  as  well  as  ISDN  is  gaining  a 
foothold  in  corporations. 

“We  have  seen  a  heavy  shift  toward 
IP,"  says  Stacy  Saxon,  director  of  mar¬ 
keting  at  videoconferencing  vendor 
Polycom  Inc.  in  Pleasanton,  Calif.  She 
says  she  expects  75%  of  all  videocon¬ 
ferencing  systems  to  be  IP-based  with¬ 
in  the  next  three  years,  up  from  just 
2S%  today.  Giga  Information  Group 
Inc.  in  Cambric^,  Mass.,  predicts 
18.9%  annual  growth  in 
videoconferencing  appli-  QAM 

ance  sales  through  2005.  SBfcffi 

Several  developments  are  |  Lvll 

driving  the  technology  for-  - 

ward.  IP-based  systems  eliminate  the 
need  for  ISDN  service,  which  can  be 
expensive  and  difficult  to  provision 
and  is  unavailable  in  many  locations. 
Unlike  those  based  on  ISDN.  IP-based 
systems  can  be  moved  to  any  office 
with  an  Ethernet  jack.  Corporations 
are  gradually  replacing  network  infra¬ 


TECMNllHilES 


structures  with  switches  and  routers 
that  support  quality-of-service  stan¬ 
dards  required  for  IP  telephony  and 
enable  clear,  jitter-free  video  services. 

"We’re  piggybacking  on  what  the 
company's  doing  with  voice  over  IP," 
says  Ch^  Duncan,  global  leader  for 
e-communication  technology  at  The 
Dow  Chemical  Ca  in  Midland,  Mich., 
which  is  equipping  500  offices  world¬ 
wide  with  an  IP  videoconferencing 

system.  Ethernet  advances 
10^^  have  also  boosted  LAN 

bandwidth  to  Gigabit 
LIARmI  Ethernet  and  10  Gigabit 

-  Ethernet  speeds  that  can 

better  support  video  feeds.  And  busi¬ 
nesses  are  also  extending  those  higb- 
bandwidth  connections  to  remote  of¬ 
fices.  "Getting  frlrly  large  bandwidth 
isn’t  as  big  an  issue  as  it  was  fotir  or 
five  years  ago,"  Duncan  says,  citing  the 
current  glut  in  long-haul  fiber  capacity. 

Meanwhile,  bandwidth  requirements 
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are  shrinking.  Video  encoders  now 
support  up  to  1.000-to*l  compression, 
delivering  acceptable  quality  in  as  lit¬ 
tle  as  128K  bit/sec.  per  connectioa 
“It's  good-quality  video,  if  you  don’t 
have  a  lot  movement.”  says  Saxon, 
although  Duncan  says  be  considers 
384K  bit/sec.  to  be  the  minimum  for 
acceptable  quality.  The  newest  stan¬ 
dard,  named  by  the  Geneva- 
based  International  Telecommunica- 
ti(m  Union  (ITU),  will  soon  deliver 
DVD-quality  video  feeds  using  less 
than  IM  bit^ec.  of  bandwidth. 

Videoconferencing  technology  is 
also  starting  to  converge  with  tradi¬ 
tional  Web  conferencing  systems,  al¬ 
lowing  IT  to  create  a  single  interop- 
er^le  and  centrally  manageable  set 
of  applicatioirs  that  may  include  data 
sharing,  whiteboarding  and  stream¬ 
ing  media.  For  example,  Polycom’s 
Web  confereikcing  software,  called 
WebOfifioe,  works  with  its  PC-based 
videoconferencing  systems.  And 
Web  conferencing  veirdors  are 
adding  video  to  their  services,  al- 
thou^  analysts  say  quality-cd'-ser- 
vice  Issues  will  ke^  most  business 
videoconferencing  ofif  the  Internet 

“Enterprise  users  are  primarily  us¬ 
ing  VPNs  [virtual  private  networks] 
and  dedicated  private  IP  networks  to 


ensure  the  quality  of  service,  which 
caimot  be  offered  by  the  public  In¬ 
ternet,”  says  Rooparo  lain,  an  analyst 
at  Frost  &  Sullivan  Inc  in  New  York. 
And  while  some  q\ialhy-of-service 
standards  are  in  place  today,  analyst 
Lou  Latham  at  Gartner  Inc.  describes 
them  as  “fluid  and  incomplete."  Net¬ 
work  administrators  sdll  worry 
about  reliability  and  performance,  be 
says.  “There’s  an  anxiety  on  the  part 
of  network  administrators  that  their 
networks  are  going  to  get  saturated.” 
be  says,  adding  that  the  Itey  is  to  keep 
traffic  segr^ted  and  pricKitized  so 
it  moves  quickly. 

In  addition,  the  ITU^  H323  inter¬ 
face  standard  fM'  videoconferencing 
may  give  way  to  the  Internet  Engi¬ 
neering  Task  Force’s  evolving  Session 
InitiarioD  Protocol  (SIP).  That  could 
ease  integration  proUems  when 
adding  audio  calls  from  voioe-over-IP 


telephony  systems,  which  use  SIP  or 
proprietary  protocols,  into  a  video¬ 
conferencing  session.  “That  wasn’t  a 
problem  with  ISDN.”  Duncan  says. 

Jain  says  videoconferencii^  also 
continues  to  fltce  ease-of-use  issues. 
For  example,  users  may  need  to 
know  the  destination  IP  address  or 
phone  extension  to  establish  a  ses- 
si<m.  Some  products  allow  the  cre¬ 
ation  oS  an  address  book,  but  most 
can’t  access  infonnatioD  already 
stored  in  an  Active  Directory  or  oth¬ 
er  enterprise  directory  infrastructure. 

Despite  its  limitatioas,  IP  video- 
conferencing  can  pay  off  in  cnganiza- 
tiotts  that  require  more  than  30  hours 
of  videoconferencing  per  month, 
says  Giga  analyst  Elizabeth  HerrelL 
Gartner’s  Ladiam  is  more  cautious. 
*Y<hi  can  start  by  keeping  your  ISDN 
lines  and  test  the  IP  waters,  connec¬ 
tion  by  connection.”  he  says.  He 
doesn’t  e]q>ect  end-to-end  reliability 
to  be  worl^  out  until  next  year. 

But  Duncan  says  the  technology 
hurdles  are  surmountable.  "The  big¬ 
ger  chalfenge  ts  getting  pet^Ue  com¬ 
fortable  using  the  technology.”  I 

Jtusseff  Kdy.  a/rvefonce  wrfrer  in 
Wsrcester,  Afoss.,  contributed  to  this 
story. 
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Escape  From  SQL  Hell 


(Mck  response  to  SQL  Slammer  deflects 
potential  disaster.  By  Mathias  Thunnan 


UPFBOKT  preparation 
helped  my  company 
wa^  off  the  SQL  Slam¬ 
mer  worm,  which  ex¬ 
ploits  a  buffer  overflow  vul¬ 
nerability  in  Microsoft  SQL 


occasional  system  that  had 
slipped  through  the  cracks. 

A  few  days  after  the  initial 
SQL  Slammer  incident,  I  re¬ 
ceived  a  call  from  our  net¬ 
work  operations  center  re¬ 


Server  and  creates  a  flood  of  porting  that  our  servers  were 
packets,  simitar  to  a  denial-of-  under  a  denial-of-service  at- 


service  attack.  But  we  still 
didn’t  totally  avoid  it 


tack.  We  have  a  limited  capa¬ 
bility  to  monitor  bandwidth 


Shortly  after  the  worm  ap-  utilizatioo  on  some  edge  net- 


peared,  we  decided  to  rtin 


work  devices.  Those  utiliza- 


scans  of  our  infrastructure  to  tkm  rates  were  extremely 
find  and  patch  vulnerable  sys-  high,  and  network  perfor- 
tems.  In  the  interim,  we  Imple-  mance  was  suffering.  So  we 
mented  Cisco  Systems  Inc’s  pulled  up  data  from  our  intru- 
Network-Based  AppUcaflon  sion-detection  system  sen* 


Recognitioo  (NBAR) 
feature  on  our  core 
edge  routers,  config¬ 
uring  it  to  drop  any 
packets  that  matched 


sEcmnY 


the  signature  of  the  jonMiiLa  traffic. 


sors,  examined  the 
packets  and  discov¬ 
ered  an  excessive 
amount  of  file 
transfer  protocol 


SQL  Slammer  attack. 

The  problem  with 
NBAR  is  that  routers  are  de- 


It  turns  out  that 
our  company  had 
rust  released  a  new  software 


signed  to  route  traffic,  not  in-  download  that  was  in  excess 
spect  pacl^  payloads.  NBAR  of  40MB,  and  the  traffic  was 

consumes  a  considerable  overloading  our  network.  Un- 

amount  of  router  resources  til  we  could  maJce  significant 
and  can  lead  to  performance  changes  in  our  systems,  we 
probtems.  so  we  didn’t  want  to  decided  to  outsource  the 
keep  it  in  place  any  longer  downloads  by  using  Cam- 
than  necessary.  bri<^  Mass.-based  Akamai 

.  ,, _  Technologies  Inc’s  EdgeSuite 

NOCltyinQ  USfifS  service. 

Once  the  NBAR  rules  were  Tlie  implementation  went 

set,  we  sent  out  a  ma«  e-mail  without  a  hitch.  With  a  few 


internally  with  a  link  to  a 


modifications  in  our  server 


Web  page  we  had  assembled.  configurations  and  some  redi- 

The  page  contained  tnfbrma-  _  _ 

tion  on  SQL  Slammer,  instruc-  ]L~  ^ 

lions  on  determining  whether  S  TIia 
a  particular  system  is  vulnera-  ■ 
hie  and  a  link  to  the  patch,  B  Wwl  PBMC IS 

which  mitigates  the  vulnera-  K  fOUlOfS  dfB 

bUity.  Only  after  we  lud  com-  I  in  injlB 

pleted  our  scans  and  were  sat-  ■  _ ^ , . , 

isfied  that  our  SQL  servers  B  U  AIM&,  flOl  nSpBCt 
and  other  impacted  desktops  pacMpwloaiis,  ■ 
were  patched  did  we  remove  ^  H 

NBAR.  I  . 

Uldmately,  we  were  lucky.  * 

bat  we  weren’t  100%  success-  amount  of  routar  ■ 

All  A  few  Sony  senrera  were  g  IBSOWCBS. 

somehow  infected.  Even  a  jfi 

wedc  later,  we  still  found  an  Mfi  ^ 


reciion.  we  were  ready  to  go. 

Eventually,  we  will  either 
upgrade  our  network  to  han¬ 
dle  the  load,  outsource  to  a 
managed  service  provider  or 
possibly  stick  with  Akamai 

EDirectory  Assistance 

With  that  incident  out  of  the 
way.  fve  begun  searching  for 
an  easily  implemented,  inex¬ 
pensive  method  of  providing 
centralized  access  control  for 
our  Sun  Solaris  servers. 

In  the  past,  most  Unix  ad¬ 
ministrators  fust  used  the 
Unix  Network  Information 
Service  (NIS).  Because  of 
some  vulnerabilities  in  NIS, 
however,  we  shied  away  from 
that  and  focused  on  tools  that 
would  integrate  with  our  Nov¬ 
ell  eDirectory  service.  We  use 
eDirectory  for  all  of  our  enter¬ 
prise  accounts  and  as  a  user- 
information  repository  for 
controlling  access  to  People- 
Soft.  Siebel  and  other  applica¬ 
tions.  The  new  system  must 
allow  central  control  of  user¬ 
name,  password  and  home- 
directory  information  through 
eDirectory  and  must  let  the 
administrator  dictate  the  log¬ 
in  shell  for  each  user. 

We  use  RSA  Security  Inc.’s 
SecurlD  tokens  for  two-fector 
authentication,  so  the  log-in 
shell  will  be  the  program  that 
activates  the  SecurlD  soft¬ 
ware.  After  some  research  and 
pb(H>e  calls,  we  decided  to  im- 
piement  a  Unix  pluggable  au¬ 
thentication  module  (PAM). 
Several  PAMs  are  available, 
depending  on  what  you  want 
to  integrate.  We  wanted  cre¬ 
dentials  stored  in  an  LDAP- 
compliant  database;,  so  we 
used  the  PAM.LDAP  pro¬ 
gram.  For  this  to  work,  we 
needed  both  the  PAM  libraries 
and  the  LDAP  client  installed 
on  our  Solaris  servers. 

Unfoitunately,  we  couldn't 
get  the  native  Solaris  LDAP 
client  to  work  with  PAM  and 
properly  authenticate  to  our 
Novell  eDirectory.  Instead,  we 
had  to  use  a  third-party  LDAP 
integration  tool  developed  by 
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Melbourne.  Australia-based 
PADL  Software  Pty.  The  PADL 
libraries  let  us  successfully 
direct  the  authentication  re¬ 
quests  to  eDirectory.  We  have  I 
conducted  some  preliminary 
testing,  and  almost  everything 
seems  to  work  as  advertised. 

One  issue  that  we’re  still 
trying  to  resolve,  however,  is 
establishing  encryption  be¬ 
tween  the  Solaris  resource  and 
the  eDirectory  server.  We  ini¬ 
tially  thought  that  we  could 
implement  Secure  Sockets 
Layer  encryption  for  this,  but 
it  problems.  We’re  now 
experimenting  with  the  IPsec 
protocoL  but  that  will  require 
additional  configuration  on 
each  Unix  resource  we  want 
to  protect. 

Addhg  Features 

The  other  issue  we  face  is 
support  for  additional  fea¬ 
tures  outside  of  the  authenti¬ 
cation  portion  of  the  deploy¬ 
ment.  For  example,  we  might 
eventually  want  to  enable 
netgroups  (which  group  to¬ 
gether  machines  and  users 
with  identical  resource  ac¬ 
cess  rights  for  easier  adminis¬ 
tration)  and  Role-Based  Ac¬ 
cess  (Control. 

When  using  PAM  and  the 
PADL  libraries  with  Solaris  2.8 
and  eDirectory.  we  can't  con- 
flgure  these  additional  fea¬ 
tures.  However,  we  know 
through  our  testing  of  Solaris 
9  and  Netsc^’s  iPlanet 
LDAP  server  that  this  fime- 
tionality  is  available.  So  in  the¬ 
ory.  it  should  work  with  the 
LDAP-based  Novell  eDirecto¬ 
ry.  Perhaps  PU  have  the  an¬ 
swer  by  next  time,  i 
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HEN  IT  COMES  to  IT  security,  good 
technology  can’t  protect  an  organi¬ 
zation  against  bad  policy.  Judging 
from  the  way  the  banking  industry 
handled  the  recent  theft  of  more 


than  8  million  credit  card 
account  numbers  [Quick- 
Link  36S30),  that’s  a  lesson 
that  major  U.S.  credit  card 
associations  and  issuers 
have  yet  to  learn. 

The  situation  is  unlikely 
to  improve  in  the  near  term 
because  the  fmancial  ser¬ 
vices  firms  that  control 
most  credit  cards  see  little 
economic  incentive  to 
change  their  ways.  Those 
most  at  risk  of  incurring 
losses  include  consumers 
(through  identity  theft),  and  mer¬ 
chants  that  accept  “card-not-present** 
transactions. 

The  card  associations’  policies,  as 
demonstrated,  could  be  described 
thusly:  Don’t  publicize  credit  card 
thefts  in  any  way;  don’t  require  card 
issuers  to  notify  affected  card  owners 
unless  they  ask;  don’t  ^ure  the  list  of 
compromised  account  numbers  with 
merchants;  and  don’t  require  banks  to 
reissue  stoloi  cards.  And  don’t  worry 
~  banks  will  monitor  accounts  for 
“unusual  activity”  vritb  automated, 
high-tech  monitoring  tools. 

Card-not-present  transactions  aren't 
protected  by  the  same  zero-liability 
policy  given  to  consumers  and  mer- 
diants  at  brick-and-roortar  stores, 
where  clerits  can  physically  check  the 
credit  card  and  obtain  a  signature. 
This  puts  online  vendors  at  a  competi¬ 
tive  disadvantage. 

Meanwhile,  credit  card  fraud  is  In¬ 
creasing.  In  early  February,  the  largest 
electronic  break-in  to  d^e  took  place 
at  credit  card  process<»  Data  Proces¬ 
sors  International  (DPI)  in  Omaha. 


Some  8  million  Visa. 
MasterCard  and  other 
accounts  were  affected. 

Yet  customers  wouldn’t 
have  known  about  the 
breach  until  their  state¬ 
ments  started  arriving  if  it 
hadn’t  been  for  Citizens 
Bank,  which  decided  to  re¬ 
call  8,800  affected  cards. 

If  accounts  are  used 
ftadulently.  bow  much 
damage  will  online  mer¬ 
chants  suffer  before  the 
nsonitoring  systems  catch 
on  and  defuse  the  situation?  Probably 
nothing  will  happen.  But  merchants 
won’t  know  for  sure  until  cardholders 
receive  their  statements. 

What's  worse,  this  cloak  of  secrecy 
could  ultimately  erode  cardholder 
confidence  and  trust  For  example,  the 
story  of  the  DPI  incident  surfaced  in 
the  press  on  Feb.  17.  DPI  acknowledged 
the  incident  on  the  20ch.  A  spokes¬ 
person  declined  to  say  wben  the 
break-in  occurred,  but  unofneial  re¬ 
ports  put  it  early  in  the  month  —  per¬ 
haps  as  early  as  Feb.  3  or  4.  said  it 
“immediately  notiffed  all  affected 
card-issuing  fmancial  institutions."  Yet 
one  bank  manager  I  spt^  with  said 
she  couldn’t  confirm  whether  specific 
cards  were  on  the  list  until  19.  Her 
bank  didn't  start  receiving  the  com¬ 
promised  account  numbers  until  Feb. 
17  and  recced  tbe  last  batch  two  days 
later.  Was  this  case  tbe  exception? 

To  tbeir  credit,  some  card  issuers 
are  moving  to  protect  online  transac¬ 
tions  with  new  authentication  pro¬ 
grams.  For  example.  MasterCard 
SecureCode  and  Verified  by  Visa  re¬ 


quire  the  buyer  to  use  a  password  be¬ 
fore  making  a  purchase.  Merchants 
who  obtain  passwords  from  buyers  are 
protected  from  chargebacks.  But  most 
buyers  don’t  have  one  yet.  MasterCard 
and  others  should  follow  Visa’s  lead 
and  protect  e-commerce  providers 
that  request  passwords  from  buyers. 

This  shifts  the  cost  of  stolen  data 
away  from  merchants  but  doesn't 
solve  the  problem.  Credit  card  compa¬ 
nies  should  also  question  whether 
having  dozens  of  processing  compa¬ 
nies  handling  ctistomer  data  makes 
sense  in  a  Web-conneaed  world.  Or 
whether  seexuity  measures  that  ad¬ 
dress  the  vray  card  transaction  proces¬ 
sors,  issuers  and  merchants  handle 
and  protect  account  data  should  be 
more  strictly  dictated  and  policed.  Or 
whether  it  makes  better  business 
sense  to  assume  a  policy  of  more  open 
disdosure  with  cardholders. 

In  a  world  where  credit  card  num¬ 
bers  can  be  used  for  ftaud  or  identity 
theft,  organizations  have  a  moral 
obligation  to  disclose  such  compro¬ 
mises  to  cardholders  and  merchants 
as  soon  as  a  security  hole  is  closed. 

Tbe  industry  worries  about  the 
expense  of  reissuing  cards.  Yet  banks 
have  spent  a  lifetime  building  trust, 
and  serious  erosion  of  consumer 
confiiLmce  could  cost  far  more  than 
simply  replacing  those  cards.  It  could 
cost  billions  in  lost  sales  to  e-com- 
nserce  merchants  that  are  dependent 
on  credit  card  payment  systems. 

The  current  policies  are  bad  for 
e-commerce,  bad  for  consumers  and, 
ultimately,  bad  for  business.  Tbe  in¬ 
dustry  should  make  changes  now. 
before  consumers  finally  wake  up  to 
what’s  going  on  and  legislators  step 
into  the  breach.  A 
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HEN  IT  COMES  to  IT  security,  good  i 
technology  can’t  protect  an  organi¬ 
zation  against  bad  policy.  Judging 
from  the  way  the  banking  industry 
handled  the  recent  theft  of  more 


than  8  million  credit  card 
account  numbers  (Quick- 
Link  36530],  that's  a  lesson 
that  major  U.S.  credit  card 
associations  and  issuers 
have  yet  to  learn. 

The  situation  is  unlikely 
to  improve  in  the  near  term 
because  the  financial  ser¬ 
vices  firms  that  control 
most  credit  cards  see  little 
economic  incentive  to 
change  their  ways.  Those 
most  at  risk  of  incurring 
losses  include  consumers 
(through  identity  theft),  and  mer¬ 
chants  that  accept  “card-noi-present” 
transactions. 

The  card  associations’  policies,  as 
demonstrated,  could  be  described 
thusly:  Don’t  publicize  credit  card 
thefts  in  any  wzy,  don't  require  card 
Issuers  to  notify  affected  card  owners 
unless  they  ask;  don't  share  the  list  of 
compromised  account  numbers  with 
merchants;  and  don't  require  banks  to 
reissue  stolen  cards.  And  don’t  worry 
—  banks  will  monitor  accounts  for 
‘^inusual  activity”  with  automated, 
high-tech  monitoring  tools. 

Clard-not-present  transactions  aren't 
protected  by  the  same  zero-liability 
policy  given  to  consumers  and  mer¬ 
chants  at  brick-and-mortar  stores, 
where  clerks  can  physically  check  the 
credit  card  and  obtain  a  signature. 
This  puts  online  vendors  at  a  competi¬ 
tive  disadvantage. 

Meanwhile,  credit  card  fraud  is  in¬ 
creasing.  In  early  February,  the  largest 
electronic  break-in  to  date  took  place 
at  credit  card  processor  Data  Proces¬ 
sors  International  (DPI)  in  Omaha. 


Some  8  million  Visa. 
MasterCard  and  other 
accounts  were  affected. 

Yet  customers  wouldn't 
have  known  about  the 
breach  until  their  state¬ 
ments  started  arriving  if  it 
hadn't  been  for  Citizens 
Bank,  which  decided  to  re¬ 
call  8.800  affected  cards. 

If  accounts  are  used 
ft^duiently.  how  much 
damage  will  online  mer¬ 
chants  suffer  before  the 
monitoring  systems  catch 
on  and  defuse  the  situation?  Probably 
nothing  will  happen.  But  merchants 
won’t  toow  for  sure  until  cardholders 
receive  their  statements. 

What's  worse,  this  cloak  of  secrecy 
could  ultimately  erode  cardholder 
confidence  and  trust.  For  example,  the 
story  of  the  DPI  incident  surfaced  in 
the  press  on  Feb.  17.  DPI  acknowledged 
the  incident  on  the  20th.  A  spokes¬ 
person  declined  to  say  when  the 
break-in  occurred,  but  unofficial  re¬ 
ports  put  it  early  in  the  month  —  per¬ 
haps  as  early  as  Feb.  3  or  4.  Visa  said  it 
“immediately  notified  all  affected 
card-issuing  financial  institutions.”  Yet 
one  bank  manager  I  spoke  with  said 
she  couldn’t  confirm  whether  specific 
cards  were  on  the  list  until  Feb.  19.  Her 
bank  didn't  start  receiving  the  com¬ 
promised  account  numbers  until  Feb. 
17  and  received  the  last  batch  two  days 
later.  Was  this  case  the  exception? 

To  their  credit,  some  card  issuers 
are  moving  to  protect  online  transac¬ 
tions  with  new  authentication  pro¬ 
grams.  For  example,  MasterCard 
SecureCode  and  Verified  by  Visa  re¬ 


quire  the  buyer  to  use  a  password  be¬ 
fore  making  a  purcha.se.  Merchants 
who  obtain  passwords  from  buyers  are 
protected  from  chargebacks.  But  most 
buyers  don't  have  one  yet.  MasterCard 
and  others  should  follow  Visa's  lead 
and  protect  e-commcrce  providers 
that  request  passwords  from  buyers. 

Hiis  shift.s  the  cost  of  stolen  data 
away  from  merchants  but  doesn't 
solve  the  problem.  Credit  card  compa¬ 
nies  should  also  question  whether 
having  dozens  of  processir^  compa¬ 
nies  handling  customer  data  makes 
sense  in  a  Web-connected  world.  Or 
whether  security  measures  that  ad¬ 
dress  the  way  card  transaction  proces¬ 
sors,  issuers  and  merchants  handle 
and  protect  account  data  should  be 
more  strictly  dictated  and  policed.  Or 
whether  it  makes  better  business 
sense  to  assume  a  policy  of  more  open 
disclosure  with  cardholders. 

In  a  world  where  credit  card  num¬ 
bers  can  be  used  for  fraud  or  identity 
theft,  organizations  have  a  moral 
obligation  to  disclose  such  compro¬ 
mise^  to  cardholders  and  merchants 
as  soon  as  a  security  hole  is  closed. 

The  industry  worries  about  the 
expense  of  reissuing  cards.  Yet  banks 
have  spent  a  lifetime  building  trust, 
and  serious  erosion  of  consumer 
confidence  could  cost  far  more  than 
simply  replacing  those  cards.  It  could 
cost  billions  in  lost  sales  to  e-coro- 
merce  merchants  that  are  dependent 
on  credit  card  payment  systems. 

The  current  policies  are  bad  for 
e-commerce,  bad  for  consumers  and. 
ultimately,  bad  for  business.  The  in¬ 
dustry  should  make  changes  now, 

I  before  consumers  finally  wake  up  to 
I  what's  going  on  and  legislators  step 
I  into  the  breach.  I 
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r  Nightmare 

Author  Notra  Thilock  details  the  appallii^ 
state  of  conq>uter  security  at  the  Department 
of  Enei^  during  one  of  the  most  infamous 
espionage  scandals  in  recent  decades,  and  what 
the  corporate  world  can  learn  from  it  Pas*  40 


ROI:  Whose  Job 
Is  H,  Anyway? 

_  Columnist  John  Berry  asks.  “Why 
^  cant  IT  evolve  into  a  value-added 
business  partner  that  could  help 
business  units  with  economic 
value  management  tasks?**  PlO*  ^ 


Here  are  10  ways  to  assess  the 
financial  health  of  your  IT  vendors. 
By  Kathleen  Melymuka 


Follow 


CHOOSING  A  STRATEGIC  VENDOR  is  a 
loi^-term  commitment  that  involves  a 
lot  more  than  technt^ogy.  Before  you 
tie  your  company’s  fortunes  to  those  of 
a  supplier,  you'd  better  dig  deep  into 
your  would-be  partner’s  financial 
health.  Here  are  10  questions  that  ven¬ 
dor-management  veterans  say  can  help 
you  decide  whether  your  intended  is 
really  the  one  for  you. 

IWhif s  new  ilnul  to  Gompany?  Even 
if  you  think  you  know  all  about  a 
technology  vendor,  check  again. 
Today's  Wall  Street  darling  could 
be  tomorrow's  Enroa  Tap  a  variety  of 
sources  for  your  inteUigmce.  from 
Dun  &  Bradimeet  Inc.  (E>&B)  to  your 
industry  peers.  *Tou  may  fmd  that  this 
new  company  that  seems  realty  hot 
used  to  be  this  old  company  diat  was 
really  outdated."  says  Pamela  HolUng- 
ton,  a  director  at  Rebound  Consulting 
Ltd.  in  North  VaiKxiuver.  British  Co¬ 
lumbia.  Beware  of  companies  that 
change  their  names  to  distance  them¬ 
selves  from  poor  financial  performance. 
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portals  which  succeed  and 
those  that  don't  is  clearly  the 
amount  of  busir>ess  invotvement.” 


2HewdoaaWcpndiictbuiinawand 
wWi  whom?  Some  IT  vendors 
have  reputations  as  being  un¬ 
ethical;  others  are  Just  difficult 
to  (k)  business  with.  Either  way,  it  pays 
to  find  out  "I  can't  believe  bow  many 
clients  actually  don't  cfaedt  references," 
says  Eileen  M.  Birge,  an  analyst  special¬ 
izing  in  vendor  relationships  at  The 
Concours  Group  in  Kingwood,  Texas. 
"It  souitds  so  baric,  but  they  say.  *We 
were  in  a  hurry,’  on  ’It  was  really  dose  to 
the  end  of  the  quarter,  and  they  offered 
a  great  deal  if  we  signed  right  then.’  ” 
Go  beyond  references.  Check  the 
vendor's  ethics  with  various  sources, 
including  customers,  says  Pri  Fausett 
a  strategic  alliances  manager  ft)r  soft¬ 
ware  and  intellectual  property  at  Agi¬ 
lent  Technologies  Inc.  in  Santa  Clara, 
Calif.  Many  vrodors  list  customers  on 
their  Web  sites,  and  you  can  also  ask 
among  your  peers.  Then  call  the  cus¬ 
tomers’  accounting  departments  and 
ask  what  it’s  like  to  wc^  with  that  ven¬ 
dor.  Is  billing  timely  and  accurate?  Are 
hidden  "gotchas"  in  contracts  costing 
extra?  Is  the  vendor  flexible  about  li¬ 
cense  transfers  in  the  case  of  a  ^in- 
off?  Does  it  work  with  the  customer  on 
creative  ways  to  meet  peak  demands? 

3  Haw  hM  to  vendor’s  CMCHliva 
tom  owfarawd?  Look  at  the 
backgrounds  of  the  officers, 
e^iecially  the  chief  financial 
officer,  says  Fausen.  "See  where 
tbeyNre  been,  vriui  cbey>e  done  or 
haven't  done.”  she  says.  For  example, 
does  the  CFO  have  a  crack  record  in 
other  successful  companies,  or  is  be 
learning  on  the  lob?  Dkt  be  leave  a  for¬ 
mer  company  under  unusual  circum¬ 
stances?  Has  his  name  been  linked  to 
bankruptcies  or  Securities  and  Ex- 
cbai^  Commisskm  investigations? 

If  his  last  conqiany  is  unknown  to 
you,  run  the  company  name  throu^  a 
search  engine  and  see  vdiat  comes  up. 
If  an  officer  has  jumped  from  coaq>any 
to  company,  that's  also  a  red  fl^ 

"Look  at  where  they  were  jumping 
from  and  to,"  fousett  says.  'Think 
about  what  caused  that” 
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4Whal  is  the  vendor's  marhet  posi¬ 
tion?  If  you're  taking  a  risk  on 
a  ncu  technology,  be  sure 
you've  got  a  market  leader, 
says  Birgc-  'Unless  they  're  a  leader, 
you  don't  want  to  be  out  there  on  the 
edge  with  them."  To  get  a  quick  read 
on  the  vendor's  market  position,  check 
Web  sites  such  as  Hoovers.com  and 
The  Motley  Foi>l  (www.fool.com).  Hut 
beware  of  a  market  leader  with  no  fol¬ 
lowers,  says  Greg  Schueman.  vice  pres¬ 
ident  and  chief  technology  officer  at 
Mercury  Insurance  Group  in  Brea. 
Calif.  That  can  indicate  an  insufficient 
market  for  the  product.  "You  want  to 
see  several  strong  competitors."  he 
says.  “You  have  to  look  at  the  viability 
of  that  particular  market  segment,  not 
just  the  company." 

5  What  is  the  vendor's  financial  posi* 
tloo?  For  public  companies,  use 
resources  such  as  the  vendor's 
Web  sire  Isee  box)  and  D&B  to 
check  financials  and  earnings  state¬ 
ments.  "Go  to  Htwer's  and  pull  some 
data  there,"  says  Schueman.  “You  can 
iust  pay  for  what  you  need.  Look  at 
what's  happening  with  their  business 
model.  W^t  kind  of  customers  are 
coming  on  board?  Who  are  their  com¬ 
petitors?  Look  for  a  company  that  is 
profitable  and  becoming  increasingly 
so.  You  don't  want  to  see  that  they're 
gainir^  market  share  by  burning  cash." 

A  10-K  report,  which  publicly  traded 
companies  must  prepare  annually  for 
the  SEC.  is  a  “gold  mine,"  Fausert  says, 
it  includes  information  such  as  finan¬ 
cial  statements  and  supplementary 
data;  analysis  of  the  company's  finan¬ 
cial  condition;  quantitative  and  quali¬ 
tative  disclosures  about  market  risk; 
information  on  legal  proceedings,  di¬ 
rectors  and  officers;  and  additional  re¬ 
sources.  In  many  cases,  the  1()-K  is 
available  on  the  vendor's  Web  site. 

For  a  privately  held  vendor,  ask  the 
owner  for  permission  to  talk  with  the 
bank  that  represents  the  company.  The 
bank  probably  won’t  give  you  num¬ 
bers.  Fauseti  says,  but  it  will  give  an  in¬ 
dication  of  the  vendor's  debt  ratio  and 
the  outlook  for  its  financial  health. 

6  What  is  the  vendor's  ability  to  as¬ 
sume  financial  rM?  A  vendor 
can  promise  you  anything,  but 
can  it  deliver?  If  it  goes  belly 
up.  it  may  not  have  the  financUI  re¬ 
sources  to  refund  your  losses,  regard¬ 
less  of  good  intentions  and  contract  as¬ 
surances.  “You  have  to  be  sure  in  the 
event  they  fail  that  they  can  keep  you 
whole,"  Birge  says.  One  company  she 
worked  with  was  dealing  with  a  start¬ 


up  application  service  provider.  Tlie 
customer  required  the  vendor  to  sup¬ 
ply  financial  statements  every  month, 
including  certification  that  it  had  six 
months'  worth  of  working  capital  on 
hand.  The  contract  stipulated  that  if 
the  capital  ever  dipped  below  six 
months’  worth,  the  customer  had  the 
right  to  pul!  out  of  the  agreement  and 
bring  the  applications  back  in-housc 
over  several  months- 

7  Does  the  vendor  have  pending  or 

past  lawsuits?  "Most  salespeople 
won't  say.  'By  the  way.  we're  be¬ 
ing  sued,' "  Fausett  notes,  but 
financial  statements  will  include  a  sec¬ 
tion  on  litigation  judgments  against  the 
company.  Check  its  Form  lO-K  and  ask 
your  legal  department  to  do  a  search 
for  past  litigation  against  the  vendor. 
"Learn  who  has  been  suing  the  compa¬ 
ny  and  why."  Fausett  says.  Alsti  check 
whether  it  has  settled  out  of  court  or 
gone  to  trial.  "That  gives  me  a  flavor  for 
how  they  deal  with  adversity."  she  says. 

81s  there  an  acquisition  on  the  hori¬ 
zon?  You  sign  a  contact  with  a 
vendor  you  really  want  to 
work  with,  and  (wo  weeks  lat¬ 
er.  the  vendor  is  acquired.  "Tliere  is  so 
much  consolidation  in  the  industry 
(hat  this  comes  up  often."  says  Holting- 
ton.  The  product  you're  about  to  buy 
may  be  important  to  the  vendor,  but 
the  company  buying  the  vendor  may 
not  be  interested  in  supporting  it. 

Schueman  learned  this  the  hard  way 
tince  when  a  software  vendor  he  was 
dealing  with  went  bankrupt.  The  com¬ 
pany's  assets  were  acquired  by  another 
company,  and  the  new  owner  de- 
emphasized  the  product.  “The  lesson 
for  me  was  that  you  have  to  look  ex¬ 
tremely  carefully  at  the  iikclih<H>d  that 
a  product  will  get  the  investment  it 
needs  to  push  forward."  he  says. 

If  (he  company  is  public,  you  should 
be  able  to  snifi*  out  an  impending  ac¬ 
quisition.  Also,  ask  specifically  in  the 
request  for  proposals  about  future  or¬ 
ganizational  plans  and  the  long-term 
strategy  for  the  product. 

Once  you  have  gathered  your  intelli¬ 
gence.  make  sure  your  investigations  are 
ongoing,  “For  a  strategic  supplier,  kxdcing 
at  those  things  is  not  a  one-time  event." 
says  Larry  Graham,  vice  president  of 
IT  vendor  management  at  San  Mateo, 
Calif. -based  Inovant.  a  wholly  owned 
transaction-processing  subsidiary  of 
Visa  International  Inc. 

John  Moon.  CIO  at  Baxter  Interna¬ 
tional  Inc.  in  Deerfield,  UL.  agrees.  A 
while  ago>  his  company  was  doing 
business  with  an  Internet  service 


provider  that  w'as  experiencing  finan¬ 
cial  difficulties.  The  vendor  repeatedly 
assured  Moon  that  it  was  able  to  meet 
its  commitments  and  was  in  serious 
discussions  with  a  number  of  compa¬ 
nies  about  a  potential  acquisition. 

Then  one  day.  it  laid  off  virtually  its 
entire  workforce  without  warning. 
Moon  got  the  news  from  hid-off  em¬ 
ployees.  “We  trusted  those  folks  be¬ 
cause  they  had  been  straight  with  us," 
he  says.  “We  didn't  verify  as  much  as 
we  should  have." 

Now  Moon  monitors  his  top  30  IT 
vendors  as  he  would  the  competition 
or  a  potential  acquisition  to  see  how 
well  they're  executing  against  their 
business  plans.  He  watches  their  finan¬ 
cial  performance  on  a  quarterly  basis 
and  looks  at  their  balance  sheets  to  see 
whether  thc>'  are  consuming  cash  and 
will  need  to  boirow  money  and  how 
that  will  affect  products  and  services. 
"Now  we  use  the  old  Ronald  Reagan 
approach."  he  says.  "Trust  but  verify." 

Continual  questioning  will  help  you 
to  detect  impending  changes  that  may 
affect  your  business  and  to  anticipate 
problems  early  so  you  can  manage  them. 

9  Who  1$  your  real  partner?  If  your 
intended  partner  is  really  the 
local  value-added  reseller 
(VAR)  of  the  big  vendor's 
products  rather  than  the  big  vendor 
itself  that's  who  you  need  to  know 
about.  "Finding  out  Ithat]  Great  Plains  is 
a  stable  Microsoft  company  is  interest¬ 
ing."  Hollington  says.  “But  it's  more  in¬ 
teresting  to  know  the  VAR  (I  deal 
with]  in  Vancouver  is  about  to  be  sold 
to  someone  else." 

b  the  vofNlor  committed  to  the 
■  ■  technology?  Arc  you  buy- 
B I  ■  ing  at  the  end  of  a  product 
B  cycle?  Is  the  vendor  more 

interested  in  developing  the  next  big 
thing  than  supporting  what  you're  buy¬ 
ing?  “Look  at  the  expected  life  of  the 
technol<^‘  offered  and  the  vendor's 
commitment  to  that  technology."  Birge 
advises.  What  are  the  vendor’s  research 
and  development  expenditures  in  the 
area  you're  interested  in?  she  asks. 

How  innovative  has  it  been  in  your  in¬ 
dustry  or  field?  You  can  get  R&D  num¬ 
bers  from  the  vendor’s  lO-K.  but  don't 
neglect  your  own  internal  intelligence. 
If  you've  worked  with  the  vendor  be¬ 
fore.  has  it  brought  innovative  ideas 
and  interesting  thinking  that  made  you 
sit  up  and  take  notice?  I 
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4  What  b  the  vendor's  marMpos»- 
tion?  If  you’re  taking  a  risk  on 
a  new  technology,  be  sure 
you’ve  got  a  market  leader, 
says  Birge.  “Unless  they’re  a  leader, 
you  don't  want  to  be  out  there  on  the 
edge  with  them."  To  get  a  quick  read 
on  the  vendor’s  maiket  position,  check 
Web  sites  such  as  Hoovers.com  and 
The  Motley  Fool  (www.fix}Lcom).  But 
beware  of  a  market  leader  with  no  fol¬ 
lowers,  says  Greg  Schueman,  vice  pres¬ 
ident  and  chief  technology  officer  at 
Mercury  Insurance  Group  in  Brea. 
ralif  That  can  mdicate  an  insufficient 
market  for  the  product  Tou  want  to 
see  several  strong  competitors.”  he 
says.  ’Ton  have  to  look  at  the  viability 
of  that  particular  market  segment,  not 
just  the  company.” 

5  What  b  tht  vendor's  ftnancU  piisj- 
tton?  For  public  companies,  use 
resources  such  as  the  vendor’s 
Web  site  (see  box)  and  D&B  to 
check  ffnancials  and  earnings  state¬ 
ments.  “Go  to  Hoover’s  and  pull  some 
data  there,”  says  Schueman.  “You  can 
fust  pay  for  what  you  need.  Look  at 
what's  happening  with  their  business 
model  What  kind  of  custoo^ rs  are 
coining  on  board?  Who  are  their  com¬ 
petitors?  Look  for  a  company  that  is 
profitable  and  becoming  increasingly 
so.  You  don't  want  to  see  that  they’re 
gaining  market  share  by  burning  cash." 

A 10-K  report,  which  publicly  traded 
companies  must  prepare  annually  for 
the  SEC,  b  a  ‘'gold  mine,"  Fausett  says. 
It  includes  information  such  as  fuian- 
cial  statements  and  supplementary 
data;  analysis  of  the  company’s  finan¬ 
cial  condition:  quantitative  and  quali- 
utive  disclostires  about  maiket  risig 
infomution  on  legal  proceedings,  di¬ 
rectors  and  officers;  and  additional  re¬ 
sources.  In  many  cases,  the  10-K  is 
available  on  the  vendor’s  Web  site. 

For  a  privately  held  vendor,  ask  the 
owner  for  permisskm  to  talk  with  the 
bank  that  represents  the  company.  The 
bank  probably  won’t  give  you  num¬ 
bers.  Fausett  says,  but  h  will  give  an  in¬ 
dication  of  the  vendor’s  debt  ratio  and 
the  outlook  for  its  financial  health. 

eWlMlbtlwvMder’sabllytoaa- 
wmt  Iwinriii  rbfc?  A  vendor 
can  promise  you  anything,  but 
can  it  deliver?  If  it  goes  belly 
up,  h  may  not  have  the  financial  re¬ 
sources  to  refund  your  losses,  regard¬ 
less  of  good  mtendons  and  contract  as¬ 
surances.  "You  have  to  be  sure  in  the 
event  they  foil  that  they  can  keep  you 
whole."  Birge  says.  One  company  she 
worited  with  was  dealing  with  a  start¬ 


up  application  service  provider.  The 
customer  required  the  vendor  to  sup¬ 
ply  financial  statements  every  month, 
including  certification  that  it  had  six 
months*  worth  of  working  capital  on 
hand.  The  contract  stipulated  that  if 
the  capital  ever  dipped  below  six 
months'  worth,  the  customer  had  the 
right  to  puU  out  of  the  agreement  and 
bring  the  applicadons  back  in-house 
over  several  months. 

7  Does  ttia  vendor  have  pamSng  or 

past  lawsuits?  "Most  salespec^le 
won’t  say,  ’By  the  way.  we’re  be¬ 
ing  sued.’ "  Paused  notes,  but 
financial  statements  will  include  a  sec¬ 
tion  on  litigation  judgments  against  the 
company.  Check  its  Form  10-K  and  ask 
your  ie^  department  to  do  a  search 
for  past  litigation  against  the  vendor. 
"Learn  who  has  been  suing  the  compa¬ 
ny  and  why,”  Fausett  says.  Also  check 
whether  it  has  settled  out  of  court  or 
gone  to  trial  ‘That  gives  me  a  flavor  for 
bow  they  deal  with  adversity.”  she  says. 

8  Is  Ihora  in  acquisition  on  Iho  inri* 
nn?  You  sign  a  contact  with  a 
vendor  you  really  want  to 
work  with,  and  two  weeks  lat¬ 
er,  the  vendor  is  acquired.  "There  is  so 
much  consolidation  in  the  industry 
that  this  comes  up  often,"  says  Hoiling- 
ton.  The  product  you’re  about  to  buy 
may  be  important  to  the  vendor,  but 
the  company  buying  the  vendor  may 
not  be  interested  in  supporting  it. 

Schueman  learned  this  the  hard  way 
once  when  a  sofrivare  vendor  be  was 
dealing  with  went  bankrupt.  The  com¬ 
pany’s  assets  were  acquired  by  another 
company,  and  the  new  owner  dc- 
emphasized  the  product.  "The  lesson 
for  me  was  that  you  have  to  look  ex¬ 
tremely  carefully  at  the  likelihood  that 
a  produa  will  get  the  investment  it 
needs  to  push  forward,”  be  says. 

If  the  company  is  public,  you  should 
be  able  to  sniff  out  an  iropcndii^  ac¬ 
quisition.  Also,  ask  specifically  in  the 
request  for  proposals  about  future  or¬ 
ganizational  plans  and  the  long-term 
strategy  for  the  product. 

Once  you  have  gathered  your  intcUi- 
geoce,  make  sure  your  investigations  are 
oogoing.  "For  a  strategic  supplier,  looking 
at  those  things  is  not  a  one-time  event,” 
says  Larry  Graham,  vice  president  of 
rr  vendor  management  at  San  Mateo, 
C^alif-based  Inovant,  a  wholly  owned 
transaction-processing  subsidiary  of 
Visa  International  Inc. 

|ohn  Moon,  CIO  at  Baxter  Interna¬ 
tional  Inc.  in  Deerfield,  UL,  agrees.  A 
while  ago.  his  company  was  doing 
business  with  an  Internet  service 


provider  that  was  experienck^  finan¬ 
cial  difficulties.  The  vendor  repeatedly 
assured  Moon  that  it  was  able  to  meet 
its  commitments  and  was  in  serious 
discussions  with  a  number  of  compa¬ 
nies  about  a  potential  acquisition. 

Then  one  day,  it  laid  off  virtually  its 
entire  workforce  without  warning. 
Moon  got  the  news  from  laid-off  em¬ 
ployees.  "We  trusted  those  folks  be¬ 
cause  they  had  been  straight  with  us,” 
he  says.  "We  didn't  verify  as  much  as 
we  should  have.” 

Now  Moon  monitors  his  30  IT 
vendors  as  he  would  the  competition 
or  a  potential  acquisition  to  see  bow 
well  they're  executing  against  their 
business  plans.  He  watches  their  finan¬ 
cial  performance  on  a  quarteriy  basis 
and  looks  at  their  baiaiu^  sheets  to  see 
whether  they  are  consuming  cash  and 
will  need  to  borrow  money  and  bow 
that  will  affect  products  and  services. 
"Now  we  use  the  old  Ronald  Reagan 
approach."  he  says.  TYust  but  verify." 

Continual  questioning  will  help  you 
to  detect  impending  changes  that  may 
affect  your  business  and  to  anticipate 
problons  early  so  you  can  manage  them. 

9  Who  ii  your  real  pwlmr?  If  your 
intended  partner  is  really  the 
local  value-added  reseller 
(VAR)  of  the  big  vendor’s 
products  rather  than  the  big  vendor 
itself,  that’s  who  you  need  to  know 
about.  "landing  out  Great  Hains  is 

a  stable  Microsoft  company  is  interest¬ 
ing."  HoUington  says.  "But  it's  more  in¬ 
teresting  to  know  cbe  VAR  [I  deal 
with]  in  Vancouver  is  about  to  be  sold 
to  someone  else.” 


bthovandorcononModtotho 
■  I  technology?  Are  you  buy- 
II  I  ing  at  the  end  of  a  product 
I  ^0  cycle?  Is  the  vendor  more 
interested  in  developing  the  next  big 
thing  than  supporting  what  you’re  buy¬ 
ing?  "Look  at  the  expected  life  of  the 
technology  offered  and  the  vendor's 
commitment  to  that  technology.”  Bilge 
advises.  What  are  the  vendor’s  research 
and  devek^ment  expenditures  in  the 
area  you're  interested  in?  she  asks. 

How  innovative  has  it  been  in  your  in¬ 
dustry  or  field?  You  can  get  R&O  num¬ 
bers  from  the  vendor’s  lO-K,  but  don't 
neglect  your  own  ‘mtemal  intelligence. 
If  you’ve  worked  with  the  ^«ndor  be¬ 
fore,  has  h  brought  innovative  ideas 
and  interesting  thinking  that  made  you 
sit  up  and  tak<»  notice?  I 

Melymuka  is  a  Computerworld 
conrrihuriftg  writer.  Contact  her  at 
kmeiymuka@earridinkjtet. 
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MAGIC  GENIE  LAMP 

Can  grant  three  wishes.  At  your  command. 

Operates  on  oil,  hand  nibbing  and  suspended  disbelief. 
Brass-based.  Mysterious  and  powerful. 

Legendary  tall  tale,  completely  100%  imaginary.  Genie-driven. 
Magic  Genie  Lamp  is  not  presently 
available  in  stores,  now  or  ever. 
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THE  NEW  IBM  ©server  iSeries* 

Can  grant  on/off  added  capacity.'  On  demand. 
Operates  easily  with  ^^dowsf  Linux®  and  OS/400? 
Copper-based.  Simple  and  powerful. 

Easy  to  use,  with  self-healing,  self-managing  capabilities. 
For  more  on  iSeries  and  the  on  demand  era, 
visit  tonkeoM/eserver/genie 
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ACROW 


Howto  build  and 
maintain  portals 
that  users  will 
really  use.  By 
Connie  Winkler 


OMPANIES  typically  plan 
and  deploy  software  por¬ 
tals  to  provide  employ¬ 
ees,  customers  and  sup¬ 
pliers  with  a  sii^e,  Web- 
based  access  point  for  data,  content 
and  both  new  and  legacy  applications 
across  the  enterprise. 

But  things  don't  always  go  as 
planned.  Too  often,  companies  build 
portals,  but  users  just  don’t  come. 

"So  many  firms  with  less-than- 
hoped-for  portal  results  repeat  that 
story  that  it  has  almost  betmme  a 
cliche  in  the  industry,"  says  Nathaniel 
Palmer,  an  analyst  at  The  Delphi 


Group  in  Boston.  In  a  December  Del¬ 
phi  survey  of 500  companies  spannii^ 
20  industries,  37%  of  the  companies 
that  had  installed  portals  said  they 
were  disappointed  by  the  tack  of  "ade¬ 
quate  interest  among  target  users." 

Accordii^  to  Delphi's  fmdings,  the 
reason  people  aren’t  using  portals  is 
because  there  isn’t  a  strategy  or  life 
cycle  for  keeping  people  involved  — 
what  Delphi  calls  change  management, 
explains  Palmer.  "There’s  a  lack  of 
strategy  beyond  the  technical  architec¬ 
ture,”  he  says. 

Indeed,  too  many  companies  got 
caught  up  in  the  techie  hoopla  sur- 


www.carnputenMxkl.coni 


rounding  portal  technology,  focusing 
{Dostly  on  implementadon  and  inte' 
gradon  issues,  according  to  Delphi's 
analysis  of  its  survey  findings.  Mean¬ 
while,  cridcal  usability  issues,  such  as 
educating  users  about  the  portal's  ca* 
pabilides,  training  them  to  use  it  effi¬ 
ciently  and  marlceting  the  value  of  us¬ 
ing  the  portal,  haven't  received  the 
necessary  attention. 

"It  seems  obvious,  but  time  after 
time,  I  have  seen  the  enterprise  value 
prt^>osidon  for  a  portal  be  that  it's  go¬ 
ing  to  save  everyone  in  the  company 
20  minutes  a  day."  says  Bill  Ives,  a 
partner  at  Aorenture  Ltd.  in  Boston. 
•TTiat’s  a  little  fuzzy."  he  says.  “What 
are  they  supposed  to  do  with  that 
20  minutes?” 

Start  at  the  Top 

Another  problem  many  companies 
have  is  idling  to  involve  top  manage¬ 
ment  from  the  very  beginnii^  of  a  por¬ 
tal  proiect.  It’s  critical  to  pay  attendon 
to  the  requirements  of  top  managers 
because  they  are  often  the  busiest  of 
potential  users,  and  they’re  frequently 
on  the  road  or  located  remotely,  mak¬ 
ing  them  among  the  hardest  to  bring 
to  the  portal. 

“Bringing  the  portal  to  them  through 
off-line  access  and  proactive  nodHca- 
tion  is  one  of  the  best  opportunities 
for  successful  portals,”  notes  Palmer. 

Experts  estimate  that  prolect  portal 
teams  need  to  devote  30%  to  40%  of 
their  time  gathering  business  require¬ 
ments  and  getting  top  managers  in¬ 
volved  from  the  start  The 
difference  between  portals 
which  succeed  and  those 
that  don't  is  clearly  the 
amount  of  business 
involvement  the  portal 
project  receives  and 
the  level  of  integration 
with  the  business,”  says 
Bob  Rugare.  a  portal  con¬ 
sultant  at  Cap  Gemini  Ernst 
&  Young  in  Atlanta. 

Portal  project  teams  should  be  al¬ 
ways  looking  to  add  value  to  the  busi¬ 
ness,  Rugare  says.  That  often  begins 
with  addressing  a  very  specific  busi¬ 
ness  problem. 

At  Du  Pont  Ca's  S3.8  billion  Perfor¬ 
mance  Coatings  group,  the  issue  was 
content  management. 

”We  have  a  very  large  number  of 
documents  for  maiketiag:  brochures, 
press  releases,  warranty  information 
on  products  and  general  support 
content  for  our  distributors  and  tear 
repair]  body  shops,”  explains  Cather¬ 
ine  Marchand,  the  group's  e-business 
strategy  manager.  '^>ir  salesmen  were 
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HSouthwire  was  trying  to  be 
ahead  of  the  game  -  at  the 
urging  of  our  CEO.  With  all  this 
Internet  hoopla,  the  thinMrtg 
was  that  surely  there  was  some¬ 
thing  we  could  do  with  K. 

SHBLA  SIMPSM.  WEB  OEVEIOPMENT  MMAGER.  SOUTHWffiE 


driving  around  with  SO  pounds  of  ob¬ 
solete  literature  in  their  trunk.” 

Du  Pont  opted  to  deliver  the  infor¬ 
mation  throu^  a  Web-based  portal 
using  technology  from  Bowstreet,  a 
portal  software  and  Web  development 
tools  company  in  Tewksbury.  Mass. 

Du  Pont  wanted  the  ability  to  cus¬ 
tomize  information  about  its  half- 
dozen  coating  brands.  It  also  wanted 
each  of  its  2,500  distributors  and  repair 
shops  worldwide  to  see  the  relevant 
customized  brand  information  dis¬ 
played  in  almost  4,000  different  site 
views,  which  the  technology  would 
allow  it  to  da 

Beyond  Custom  Content 

Few  disagree  with  the  content  manage¬ 
ment  value  of  portals.  The  two  go 
hand  in  hand,”  says  Ives,  who  tells  of 
call  center  staffers  all  woriung  off  the 
same  page  when  wireless  call  plan  in¬ 
formation  is  consoUdamd  in  a  portal 

“Commonality  of  content  both  in¬ 
creases  business  effideocy,  because 
it’s  cheaper  to  do  it  once,  and  increases 
the  effectiveness  of  the  mformation. 
because  it’s  consistent  across  multiple 
channels.” 

Since  the  content  capability  was  ini¬ 
tiated.  Du  Pont's  site  h^  grown  rapid¬ 
ly.  The  body  shops  can  now  get  train¬ 
ing.  benchmarking  tools  and  car  paint 


color  formulas  via  the  portal  There's 
also  a  job-posting  and  r^sum6  service. 
Marchand  says.  And  for  the  distribu¬ 
tors.  Du  Pont  is  researching  adding 
order-tracking  and  order-accuracy 
capabilities. 

Portal  project  teams  must  think  long 
term,  advises  Ben  Gaueberio,  chief 
technology  officer  at  Sapient  Corp.. 
a  technolt^  consulting  company  in 
Cambridge,  Mass. 

“Have  a  clear  vision  and  commit¬ 
ment  to  the  long-term  picture. . . .  Ask 
what  (the  portal]  is  going  to  do  for 
your  btisiness  in  the  long  run."  Gaueb- 
erin  says.  “Over  and  over  Pve  had  con¬ 
versations  with  clients  who  are  about 
to  buy  an  expensive  piece  of  software, 
and  it  looks  very  much  like  a  short¬ 
term  value.” 

It's  also  important  to  think  enter- 
prisewide,  not  merely  department  by 


department  The  easy  depanments  to 
pick  off  for  portal  projects  are  those 
that  stand  ^ne.”  says  Rugare.  A  hu¬ 
man  resources  portal  for  example, 
may  cn^le  employees  to  enter  ffieir 
own  address  changes  into  the  HR  sys¬ 
tem  and  thus  eliminate  phone  calls  to 
HR  staffers.  But  that  do^'i  solve  the 
problem  of  updating  all  corporate  sys¬ 
tems  with  the  change. 

“Clearly,  if  you  can  implement  a 
portal  that's  integrated  to  your  supply 
chain,  your  suppliers  and  partners  or 
distributors,  or  to  your  customers,  the 
value  goes  up  almost  geomctricaUy.” 
hesays.1 


Winkler  writes  about  rhe  manugemenr 
C)ftecbnolQgy.^wn5eaaieandBCom- 
puterworld's/brmer  New  York  bureau 
chi^  Contact  her  or  wtnklerconnie^ 
yahooxom. 


Rnding  the  Real  Need:  Productivity 


SooMm*!  Ca.  a  $1.7  btton.  Canollon. 
Sa^iasad  manufacturer  o(  cafaia  and 
wire,  ddnl  aei  out  in  1990  to  bold  an 
IM  porlto.  The  priuMaly  haU  tom  just 
wtnfadaapoimfltoVIttiwfiereoja' 
toRiaracQddpiaoeord8a.llafso«art- 
ed  to  daan  (to 'RdBpte  jntomif  and  cor¬ 
porate  VUbb  ales,  wMdi  hid  baan  set 
up  by  IT  on  bMI  of  wriouB  dapart- 
menk.  eadi  (toino  dffarertf  \Mbb  daireb 
opmartf  aofhrere. 

BU  foil  yon  te.  Soulmire'i  portal 
to  yieldtoQ  IntorasaM  butfnesa  reeuls. 
Cuetomar  oite  up  33%.  and  25% 

or  ■  oroais  are  erecBonc,  iMi)  orone 
cuBtoman  ofdaring  tiatoi  ai  nuny  Aams 
iiltoeiwfioplaoaofdarei4afax.lBto- 
phone  or  atocfronic  dtoi  inlarcbanua. 
And  toanks  to  contort  nanagnanl  and 
worfdlow  cipiUlha  added  In  toa  ptot 
yaar.  Soutnrte's  imnagiis  can  approve 
and  poal  announcaniiato  to  the  portal, 
wlti^lmoMnglT.  * 

fW  nao  aavarei  iratopannirw  iwD 
aNaa  and  a  Wrty  refuto  roonanaroe 


ale.  The  portal  prawdes  an  umbniB  to 
bring  al  tooaa  aeparato  totob  altos  under, 
along  wlh  prowling  a  alnda  togn-on. 
muMBMl  aacurlty  aocaas,  cuatoniUton 
and  parsonabaloa’ aaya  Sreli  Store* 
■•a,  a  VM>  dvrefopmart  tranagar  in 
SouihiiiireaffSer^toeBgitiitoTheun- 
darfyhgportaltochnologytobomSy- 
bnetoctoOubtoiCal. 

'Soulhtore  Miaa  trying  to  be  ahead 
of  ill  game  -  to  the  (igtog  of  OUT  CEO.” 
racato  aanpaorL  nfm  II  ns  namei 
hoopla,  tie  thMdng  MB  ini  aurafy  there 
MS  something  M  cortd  do  eAt  ft.* 

The  portal  MS  toll  funded  aa  a  IT 
search  and  devefopment  effort  saparato 
frem  (T  sarvtoaa.  SouttNtoe'a  Mtof  por- 
M  oftored  only  1200  cornmonly  otdared 
products  out  of  the  company’s  ffi.000 
stock  nuntoers. 

The  emphaato  Mini  on  dototog  a 
"pranybort-atoatotafronTforlhear- 
dertng  ala.  acconlng  to  StotoftoiL  The 
true  bualnasa  need  MB  cuOIrto  cores 
aiaoctotod  wtoi  procaareng  tato  ol  paper 


and  inenaaing  productMly. 
^rtdnlMrttoebreiirNHhe- 

scanaa  manual  procnaino.*  stos  Stoto* 

son. ‘Sorehwbe  pn  2000  and  2001]  MS 
hft.  a  tot  of  ote  oompartas.  toil 

Iryrg  to  becoina  more  reiiciart.  Wirid 
not  nead  to  create  more  work.  M  need¬ 
ed  to  atonnale  mtK  to  streamftne.* 


Thus  came  the  emphMB  on  Intoipre* 
ingdieordaraietothtbacktoidayB* 
tams.Thecompenyflferiratodaagnlf- 
icarft  chunk  of  iniriuai  work,  «Meh 
meara  few  treephone  cab  to  answer 
and  toas  tand  Mormalton  to  rafray  Mo 
liecampulirsyalBm. 

The  pudi  to  akaaitoie  operreionB  Isa 
big  pret  of  toe  portre  popitoffty.  reid  ml 
jure  re  Soutwn.  accoritoig  to  Ri|  Shah, 
manager  of  tMtoeai  cnwiiino  re  Sapr- 
ant  Ihey^  looNng  for  conukdreton  of 
syatoma  and  praoinai ...  and  portals 
are  the  [lear  Merfaca]  of  todnotogy 
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ASetupfbr 
A  Security 
Nightmare 

Lessons  learned  at  the  Department 
of  Ener^  can  be  applied  to  the 
corporate  worid.  %  Dan  Verton 
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For  #■  fj  MifviBiv  tMlh  Notts  Trvtodt. 
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A  book  by  Notra  Tra- 

bck,  fi>rmer  director  of 
intelligence  at  the  US. 
Department  c^Enersy. 
derails  how  apathy  and  politics  can  in* 
/ect  the  decmon-making  of  semor  man¬ 
agers  and  create  a  security  mghtmare 
for yronrtine  odminisfrorors. 

Code  Name  Kindred  Spirit  (En¬ 
counter  Books.  2003)  takes  readers  in¬ 
side  the  Chinese  nudear  espionage 
scandal  that  occurred  between  1995  and 
2001  at  the  Los  Alamos  National  Labo- 


ratoryandledtotheDOE^investiga- 
tion  of  nuclear  scientist  Wen  Ho  Lee. 
Dvlock  also  sheds  new  light  on  how  se¬ 
nior  DOE  management  contributed  to 
the  {^palling  state  of  computer  and  en¬ 
terprise  security  that  contributed  to  the 
possibie  disclosure  of  the  US.i  most 
sensitive  nuclear  secrets. 

In  an  interview  with  Computerworld. 
Thdock  (ffered  insight  into  how  mis¬ 
management  of  security  issues  at  the 
highest  levels  of  an  organization  can 
have  devastating  results. 


Inyairbttok.youttmIttaiMiitnMyinaft' 
igOTHiit  nd  indirahip  startooiningi  at  tfw 
DOC.afMl«ipttdalylMwthoHdMrtcom- 
bigi  iMd  a  diWlaling  ttflttcl  OB  MlMpriM 
aoctflly.  Cob  you  «qniid  on  a  Im  oamptN 
dial  nii^  oflar  aoma  Mbar  laMona  for 
larga  cotporaliona?  Most  importantty,  I 
think,  security  was  sharpty  devalu^ 
by  the  Energy  Department  and  senior 
lab  managers  during  the  1990s.  It  is 
common  knowledge  that  budgets  were 
run  down  and  both  manpower  and 
training  were  sharply  cut  H^ck  By  tar 


the  worst  offense,  however,  was  the 
corruption  and  manipulation  of  securi¬ 
ty  standards  and  measures  of  perfor¬ 
mance  imposed  by  these  officials. 

Tune  and  again,  senior  managers 
fudged  or  simply  suppressed  the  re¬ 
sults  of  security  exercises,  evalxtations 
and  self-assessments.  More  than  once, 
senior  lab  managers  were  caught  red- 
handed  pressuring  security  officials  to 
revise  upward  poor  marks  on  security 
exercises.  In  other  cases,  the  outcomes 
of  such  exercises  were  rigged  to  con¬ 
ceal  vulnerabilities.  Inevitably,  senior 
management  officials  also  had  to  sup¬ 
press  and  silence  those  security  offi¬ 
cers  unwilling  to  go  along  with  the 
coverups. 

Vm  abo  wrote  that  you  “wttnassttd  many 

I-  -t-l-  M  p-  -  .  - 1 

ttiCMiaiiii  n  tancfi  u  icoumarwiaiioancaj 
ofBoara  ware  aahad  to  rapoft  on  lha  sanw 
paoptowhowretothairpartonnBncoap- 
pniinto,vantodralaatandappnwBdbud- 
oato."  What  laaaona  and  aupoMtlons  ahoidd 
oma  out  of  this  for  larga  eerpornto  aocurtty 
program  that  mi^  bo  wratoing  with  find¬ 
ing  tho  right  managamont  atmctoro?  I 
don't  know  whether  the  problems  I 
witnessed  are  unique  to  the  national 
labs.  As  counterintelligence  was  de- 
empbasized  (along  with  security}  at 
the  labs  in  the  1990s.  Cl  units  were 
pushed  further  down  the  lab  structure 
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I  to  the  point  that  multiple  layers  of  man- 
I  agement  existed  between  Cl  officers 
I  and  the  lab  director.  Consequently.  Cl 
[and  security]  problems  rarely  were 
brought  to  the  attention  of  the  lab  di¬ 
rectors  or  their  senior  management 
group.  For  a  time  at  Los  Alamos,  the  Cl 
[group]  reported  to  a  unit  that  was  also 
responsible  for  hallway  maintenance 
and  replacing  bumt-out  light  bulbs. 

First  and  foremost,  large  corporate 
enterprise  security  units  should  enjoy 
hi^  visibility  within  the  enterprise 
and  report  directly  to  either  the  chief 
executive  or  chief  operating  officers. 
The  further  down  a  [security]  unit  is  in 
the  corporate  structure,  the  greater  the 
potential  for  interference  and  obstruc¬ 
tion  in  the  performance  of  the  unit's 
mission. 

Fte  conipMtos  that  hwtt  larga  vofuniM  of 
intofhrtuol  capitol  md  propftotofy  rioiHfch 
to  protocl.  wfat  ii  your  wMcn  OB  how  to 
acMovo  an  approprtoto  loMf  of  aneurhy 
wfdtoitthoaamtontmaintototogonough 
flaiMty  to  ronain  eornpotilivt?  The 
1990s  were  a  period  in  which  senior 
managers  refused  to  think  through  the 
loi^-term  implications  of  losing  se¬ 
crets  vs.  the  short-term  political  bene¬ 
fits  of  openness  m’  declassification.  In 
an  enterprise  setting.  I  suppose  this 
would  entail  deciding  wh^  is  worthy 
of  protection  and  what  senior  man¬ 
agers  might  be  willing  to  concede  to 
potential  competitors.  The  costs  of 
lost  or  stolen  data  would  have  to  be 
factored  into  such  an  equation.  Flexi¬ 
bility  might  not  be  valu^  so  highly  if 
the  loss  of  sensitive  data  undercut  an 
enterprise's  competitiveoess. 

Vtau  nNntton  one  taatanea  In  which  a  lab 
dknctor  ibngiy  cranaad  out  ctonlficalton 
nartringi  on  a  docuntenl  and  ratonod  R  to 
fho  nwRa.  Wa  now  know  Ant  toa  decumanl 
in  giiaillon  conlainod  aanalltvo  toformalfon. 
wmi  ■mao  eorpoma  atcuny  managare 
do  whn  oonhontod  wtti  ahnlar  bhnifons? 

I  assume  you  mean  beyond  updating 
his  or  her  r^surn^  and  lookiiig  for  a  new 
job?  Security  manors  can  try  a  slow, 
steady  process  of  educating  the  CEO 
to  the  potential  downsides  of  lax  secu¬ 
rity.  1  know  one  Fortune  100  corpo¬ 
ration  whose  world-famous  CEO  total¬ 
ly  disdained  security  of  any  type  and 
made  nearly  all  corporate  locations 
open  campuses.  He  retired  just  before 
9^  and  left  his  successors  a  staggering 
problem  of  bow  to  protect  corporate 
assets  woridwide  against  terrorists  de- 
tennined  to  attack  symbols  of  Ameri¬ 
can  economic  power.  His  successors 
had  to  start  from  scratch  to  rebuild  se¬ 
curity  at  the  corporation's  facilities.  I 
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Vftol  imto  you  Mtoouta  to  Oncto?  We 

rrKived  to  Oracto  to  a  tumkM  solubon 
provKto  to  torn  appicatton.  Thsy'r^  provto* 
inasotorare.hantoar*3ndinlegi^  com¬ 
plete  enchjser  servtoes.  Tito  has  enabled  us 
to  consoMale  al  ol  our  (Oracto]  support  [to 
al  d  our  global  business  opera^i  so 
there's  a  singte  point  of  accomtabAly  to 
en(hjserservic85.Mtealsoagreedtoup- 
grato  to  11  and  M  dUnl  Mwtf  to  deal  with 
muMpte  sdulion  providafs  or  ^dependent 
support  and  consullait  finns  (tong  an  Hi 
upgrade  on  the  brndine  we  needed  to  pur¬ 
sue;  we  did  R  In  six  months  globdiy. 

Whet  eltod  wi  tMi  hm*  m  your  IT  lolls? 

The  company  has  always  bem  dedicated  to 
an  oulsotfced  IT  model  so  we  didnT  have 
internally  a  lot  d  people  doing  these  func¬ 
tions.  Two  things  help  leap  head  count  low. 
a  single-instance  environment ...  so  we 
don’t  have  people  vdw  support  m  ERP  sys¬ 
tem  dedicated  to  a  single  site  or  business 
uni.  and  [second]  because  it's  outsourced. 

The  company  first  went  wtih  Quest  to  an 
ASP  three  years  ago.  Quest  did  wel  in  some 
things  and  struggled  in  others,  so  other 
firnis  were  brought  in  to  supplement  Quest. 
And  it  just  grew  in  complerdty. 

How  «d  yH  edfeitoi  the  eMtage?  We  pay 

a  fixed  amount  md  R's  a  [targe]  part  d  my 
IT  budget.  Our  company  has  gone  through  a 
signilicantopetationalrestnictunngtocen- 
trabe  a  tot  of  hmclions.  This  deal  was  the 
trigger  that  alowed  us  to  rescale  our  IT  op¬ 
erating  expenses.  Wb've  gone  through 
tomendos  growth,  from  a  very  snnl  com¬ 
pany  to  a  S4  blion  company.  Sid  riow  with 
the  tetecom  dedtoe.  weVe  radtoaly  had  to 
scale  jemrylhinQ  companywide]  bach  dCNva 


JOHN  BERRY 


ROL  Whose  Job 
Is  It,  Anyway? 


Recently,  I  conveyed  the  elements  of  a 
comprehensive  retum-on-investment 
program  to  the  IT  organization  of  a 
small  but  fast-growing  company.  The 
presentation  included  how  a  financial 
forecast  looked,  how  the  company  needed  to  plan  for 
change  when  the  metrics  in  the  forecast  hinted  at  it, 
and  why  the  auditing  of  actual  postinvestment  re¬ 
turns  was  a  good  idea 


About  two-^irds 
through,  one  of  the  senior 
IT  fellows  interrupted 
me.  questioning  the  will* 
ingness  of  business  units 
to  adopt  these  practices. 

“Glad  you  askefL” !  said. 

I  turned  the  question 
around  and  asked  why  the 
IT  group  —  curious 
enou^  about  better  prac* 
tices  in  IT  management 
to  have  me  come  in  to 
demonstrate  some  tech* 
niques  —  couldn't  evolve 
into  a  value*added  bust* 
ness  partner  that  could 
help  business  units  with  economic 
value  management  tasks. 

For  example,  a  business  unit  would 
request  a  custom  or  packaged  appli* 
cation,  and  IT,  woriung  in  partner* 
ship,  would  deliver  an  economic 
forecast,  change  management  tactics 
and  perhaps  a  method  for  quantify¬ 
ing  the  intangible  ROI  and  a  post¬ 
investment  audit  capability. 

The  IT  executive  smiled,  nodding 
in  agreement.  Could  his  response 
have  been  more  out  of  politeness 
than  conviction  that  udiat  I  said  was 
tenable  at  his  company?  Yes,  talk  is 
cheap. 

Overlooked  but  very  much  needed 
amid  all  the  buzz  about  quantifying 
finandal  returns  on  IT  investments 
are  answers  to  some  basic  questions. 


Who  is  willing  and  able 
to  roll  up  their  sleeves 
and  get  into  the  mechan¬ 
ics  of  building  a  forecast? 
Who  will  build  consenstis 
for  the  metrics  to  be  in¬ 
cluded  in  the  fbreca^? 
Who  will  document  the 
potential  organizational 
and  business-process 
change  sonve  Software  is 
sure  to  inject  into  the 
company? 

In  other  words,  who  is 
going  to  champion  a  con- 
sbtent.  repeatable  IT 
measurement  program 
and  see  that  it  happens  and  thrives? 

Theoretically,  there  is  no  reason 
why  economic  value  management 
practices  can’t  originate  and  become 
operational  in  tbe  IT  organization. 
But  tbe  politics  of  the  situation  say 
otherwise. 

In  reality,  tbe  broad  trend  has  been 
for  such  a  management  course  to 
originate  in  business  units,  which  in¬ 
creasingly  have  control  over  discre¬ 
tionary  IT  budget  expenditures.  The 
IT  organization's  budget,  meanwhile, 
is  largely  confined  to  life-cycle  man¬ 
agement  expenditures,  upgrades,  re¬ 
placements  and  maintenance. 

However;  with  control  comes  ac¬ 
countability.  Lines  of  business  can 
chart  their  tediDological  destinies, 
but  senior  management  is  also  bold¬ 


ing  them  accountable  for  tbe  returns 
their  investments  deliver.  This  com¬ 
pels  business  units  to  manage  tbe 
risks  and  uncertainties  of  their  in¬ 
vestment  decision-making.  This  is 
accomplished  by  addti^  clarity  to 
these  decisions  ^  economic  fore¬ 
casts.  metrics  construction,  tbe 
whole  measurement  megillah. 

Now,  square  tbe  budgeting  trends 
and  related  measurement  responsi¬ 
bility  with  an  equally  in^mrtant  real¬ 
ity  showing  rrs  genuine  interest  in 
busting  out  of  its  utility  services  role. 
In  tbe  case  of  this  bigb-growth  com¬ 
pany.  tbe  IT  group  aspires  to  partki- 
pate  at  a  more  strategic  level 

Contemplate  the  tension:  Budget¬ 
ing  realities  are  driving  accountabili¬ 
ty  (meaning  ROI  mania)  to  business 
units,  while  IT  seeks  to  participate 
more  fully  in  tbe  strategic  affairs  of 
tbe  company  by  playii^  a  laiger  role 
in  ROI  measurement  and  rebted  ac¬ 
tivities.  The  business  side  might  very 
well  wish  to  relinquish  measurement 
to  IT.  but  senior  management  is  say¬ 
ing,  “You  want  that  $500,000  CRM 
application?  Then  you  show  me  the 
value,  since  you  have  tbe  budget.* 

As  It  turns  out.  this  company's  IT 
budgeting  is  centralized,  not  in  defi¬ 
ance  of  trend,  but  most  likely  be¬ 
cause  of  its  size.  As  Us  revenue 
grows,  as  its  need  for  complex  appli¬ 
cations  grows,  it  might  decentralize 
budgeting  toa  Today.  IT  in  this  com¬ 
pany  is  excited  about  tbe  chance  to 
lead  a  transformation  effort  that  em¬ 
beds  forecasting  and  measurement  in 
investment  decision-makiiig. 

Business  units  that  avoid  the  heavy 
lifting  of  IT  economic  value  manage¬ 
ment.  pinch  yourselves.  This  sce¬ 
nario  is  likely  npt  the  future.  I 
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ASecurity 

Nightmare 

Lessons  learned  at  the  Department 
of  Energy  can  be  applied  to  the 
corporate  world.  By  Dan  Verton 
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For  bw  tuN  Hiiemew  wim  Notia  TrulocK. 
viaiDurWetiste 


_  _  _  A  riew  book  by  Notra  Tni* 
lock. /brmer  director  of 
UHM  inret((gence  at  the  US. 

Deporfmertf  of  Energy, 
details  how  apathy  and  politics  can  in* 
feet  the  decision-making  of  senior  man¬ 
agers  and  create  a  security  nightmare 
for  frontline  administrators. 

Code  Name  Kindred  Spirit  (En¬ 
counter  Books.  2003)  takes  readers  in¬ 
side  the  Chinese  nuclear  espionage 
scondai  that  occurred  betH'een  1995  and 
2001  at  the  Los  Alamos  National  Labo¬ 
ratory  and  led  to  the  DOE's  investiga¬ 
tion  of  nuclear  scientist  Wen  Ho  Lee. 
Trulock  also  sheds  new  light  on  how  se¬ 
nior  DOE  management  contributed  to 
the  appalling  state  of  computer  and  en¬ 
terprise  security  that  contributed  to  the 
possible  disciosure  of  the  US.'s  most 
sensitive  nuclear  secrets. 

In  on  interview  with  Computerworld. 
Trulock  offered  insight  into  how  mis¬ 
management  of  security  issues  at  the 
hipest  levels  of  an  organization  can 
have  devastating  results. 

lnyourbook.youwroteaboutnMnyman* 
apomentairfloadOTh^ishortcotwingsitthe 
O0£.and«specia%howthoseshortcoin- 
inss  had  a  doblHattng  sffwt  on  entarpriw 
sacurity.  Can  |ou  expand  on  a  taw  axamplaa 
that  migM  offer  some  sober  lecaons  for 
large  corporations?  Most  importantly.  I 
think,  security  was  sharply  devalued 
by  the  Energy  Department  and  senior 
lab  managers  during  the  1990s.  It  is 
common  knowledge  that  budgets  were 
run  down  and  both  manpower  and 
training  were  sharply  cut  back.  By  far 


the  worst  offense,  however,  was  the 
corruption  and  manipulation  of  securi¬ 
ty  standards  and  measures  of  perfor¬ 
mance  imposed  by  these  officials. 

Time  and  again,  senior  managers 
fudged  or  simply  suppressed  the  re¬ 
sults  of  security  exercises,  evaluations 
and  self-assessments.  More  than  once, 
senior  lab  managers  were  caught  red- 
handed  pressuring  security  officials  to 
revise  upward  poor  marks  on  security 
exercises.  In  other  cases,  the  outcomes 
of  such  exercises  were  rigged  to  con¬ 
ceal  vulnerabilities.  Inevitably,  senior 
management  officials  also  had  to  sup¬ 
press  and  silence  those  security  offi¬ 
cers  unwilling  to  go  along  with  the 
coverups. 

Ybu  also  wrote  that  you  Vritnessed  many 
incidents  in  which  Cl  (counterintelligence] 
officers  were  asked  to  report  on  the  same 
people  who  wrote  their  performance  ap- 
prataab.  granted  raises  and  approved  bud¬ 
gets."  What  lessons  and  suggestions  should 
come  out  of  this  for  large  corporate  security 
programs  that  might  be  wrestling  with  find¬ 
ing  the  right  management  structure?  I 
don't  know  whether  the  problems  I 
witnessed  are  unique  to  the  national 
labs.  As  counterintelligence  was  de- 
emphasized  [along  with  security]  at 
the  labs  in  the  1990s.  Cl  units  were 
pushed  further  down  the  lab  structure 


n 


Currently 


to  the  point  that  multiple  layers  of  man¬ 
agement  existed  between  Cl  officers 
and  the  lab  director.  Consequently.  Cl 
[and  security!  problems  rarely  were 
brought  to  the  attention  of  the  lab  di¬ 
rectors  or  their  senior  management 
group.  For  a  time  at  Los  Alamos,  the  Cl 
[group]  reported  to  a  unit  that  was  also 
responsible  for  hallway  maintenance 
and  replacing  burnt-out  light  bulbs. 

First  and  foremost.  large  corporate 
enterprise  security  units  should  enjoy 
high  visibility  within  the  enterprise 
and  report  directly  to  either  the  chief 
executive  or  chief  operating  officers. 
The  further  down  a  [security)  unit  is  in 
the  corporate  structure,  the  greater  the 
potential  for  interference  and  obstruc¬ 
tion  in  the  pjerformance  of  the  unit's 


For  companies  that  have  laige  volumes  of 
intellectual  capital  and  proprietary  research 
to  protect,  what  te  your  advice  on  how  to 
achieve  an  appropriate  level  of  security 
while  at  the  same  time  maintaining  enough 
flexibility  to  remain  competitive?  The 
1990$  were  a  period  in  which  senior 
managers  refused  to  think  through  the 
long-term  implications  of  losing  se¬ 
crets  vs.  the  short-term  political  bene¬ 
fits  of  openness  or  declassification.  In 
an  enterprise  setting,  I  suppose  this 
would  entail  deciding  vriiat  is  worthy 
of  protection  and  what  senior  man¬ 
agers  mi^t  be  willing  to  concede  to 
potential  competitors.  The  costs  of 
lost  or  stolen  data  would  have  to  be 
factored  into  such  an  equation.  Flexi¬ 
bility  might  not  be  valued  so  highly  if 
the  loss  of  sensitive  data  undercut  an 
enterprise's  competitiveness. 

Vm  matrtion  otw  fostartca  in  which  a  lab 
tirector  sbnply  entssad  out  classification 
markings  on  a  (tocumorri  and  retaasodW  to 
tho  madta.  Ws  now  know  Uial  the  documont 
in  question  conteioad  sansHivo  biformalion. 
Whst  should  corporaite  socurfty  managsrs 
do  when  confronted  with  similar  situations? 

I  assume  you  mean  beyond  updaiii^ 
his  or  her  resume  and  looking  for  a  new 
job?  Security  managers  can  try  a  slow, 
steady  process  of  educating  the  CEO 
to  the  potential  downsides  of  lax  secu¬ 
rity.  1  know  of  one  Fortune  100  corpo¬ 
ration  whose  world-famous  CEO  total¬ 
ly  disdained  security  of  any  type  and 
made  nearly  all  corporate  locations 
open  campuses.  He  retired  just  before 
9fU  and  left  his  successors  a  staggering 
problem  of  how  to  protect  corporate 
assets  worldwide  against  terrorists  de¬ 
termined  to  attack  symbols  of  Ameri¬ 
can  economic  power.  His  successors 
had  to  start  from  scratch  to  rebuild  se¬ 
curity  at  the  corporation's  facilities.  I 
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IPMJLBRMKLEY.vice 
praAdwit  and  CIO  at 
JOS  Uniphaaa  Corp..  a 
SUbSonfibar-optics 
coinpafiy  in  San  JoM. 
has  cut  corporala  IT  ex- 
pandMurs  by  mft* 
lonanniHiybyout- 
aoiadng  Ms  Orada  ap- 
pfcationa  (data  cantaf. 
productdatamanagfr' 
mant  and  halp  dask  support)  to  an  urdkaGy 
vandor  -  Orada  Corp.  MseM.  JDS  has  used 
Oracle  software  for  tha  past  ttwae  years  in 
appicalfon  saryfoa  prowidar  (ASP)  deals 
with  Quest  Software  kic.  and  Cork)  Inc. 

BrMdey  taAwd  with  CcvnpufarHvriirs 
Jean  ConaMo  aboutJDS's  dedalon  lo 
outsource  to  Oracle,  wMcb  in  an  effort  to 
boisier  saggfog  sales  has  bean  fobbytng 
customers  to  pay  H  to  ru)  and  manage  its 
own  Oracle  products. 

What  made  you  outsource  to  Oracle?  We 
moved  lo  Oracle  as  a  turnkey  solution 
provider  tor  their  appbcalion.  They're  provid¬ 
ing  soltware.  hardware  and  integrated  com¬ 
plete  end-user  services.  This  has  enabled  us 
to  consolidale  all  of  our  [Oracle  ]  support  (for 
all  of  our  global  business  operations],  so 
there's  a  single  point  of  accountability  tor 
end-user  services.  We  also  agreed  lo  up¬ 
grade  to  11.  and  we  (Mn't  want  to  deal  with 
multif^  solution  providers  or  independent 
support  and  consultant  firms  doing  an  Hi 
upgrade  on  the  bmehne  we  needed  lo  pur¬ 
sue;  we  did  it  in  six  months  globalfy. 

What  eftoct  wM  this  have  on  your  (T  foAts? 

The  company  has  always  be^  dedicated  lo 
an  outsourc^  IT  modd.  so  we  didn't  have 
internally  a  lot  of  people  doing  these  func¬ 
tions.  Two  things  help  ke^  head  count  low: 
a  single-mstance  environment ...  so  we 
don't  have  people  who  support  an  ERP  sys¬ 
tem  dedicated  to  a  single  site  or  business 
unit,  and  [second]  because  it's  outsourced. 

The  company  Inst  went  with  Quest  as  an 
ASP  three  years  ago.  Quest  did  well  in  some 
things  and  struggled  m  others,  so  other 
firms  were  brought  in  to  supplement  Quest. 
And  It  just  grew  in  comf^xlly. 

How  did  you  estimtfe  the  savings?  We  pay 
a  fixed  amount,  and  N’s  a  [large]  part  of  my 
IT  budget.  Our  company  has  gone  through  a 
significant  operabonal  restructuring  lo  cen¬ 
tralize  a  lot  of  (unctions.  This  deal  was  the 
trigger  that  allowed  us  lo  rescale  our  IT  op¬ 
erating  expenses.  We've  gone  through 
trernendous  growth,  from  a  very  stnal  com¬ 
pany  to  a  $4  billion  company,  and  now  ^ 
the  telecom  decUne.  we've  radically  had  to 
scale[everything  companywtde]  back  down. 


JOHN  BERRY 


ROI:  Whose  Job 
Is  It,  Anyway? 


Recently,  I  conveyed  the  elements  of  a 
comprehensive  return-on-investment 
program  to  the  IT  organization  of  a 
small  but  fast-growing  company.  The 
presentation  included  how  a  financial 
forecast  looked,  how  the  company  needed  to  plan  for 
change  when  the  metrics  in  the  forecast  hinted  at  it, 
and  why  the  auditing  of  actual  postinvestment  re¬ 
turns  was  a  good  idea. 


About  two-ihirds 
through,  one  of  the  senior 
IT  fellows  interrupted 
me.  questioning  the  will¬ 
ingness  of  business  units 
to  adopt  these  practices. 

“Glad  you  asked,”  I  said. 

1  turned  the  question 
around  and  asked  why  the 
IT  group  —  curious 
enough  about  better  prac¬ 
tices  in  rr  management 
to  have  me  come  in  to 
demonstrate  some  tech¬ 
niques  —  couldn't  evolve 
into  a  value-added  busi¬ 
ness  partner  that  could 
help  business  units  with  ecoimmic 
value  management  tasks. 

For  example,  a  business  unit  would 
request  a  custom  or  packaged  appli¬ 
cation.  and  IT.  working  in  partner¬ 
ship.  would  deliver  an  economic 
forecast,  change  management  tactics 
and  perhaps  a  method  for  quantify¬ 
ing  the  intangible  ROI  and  a  post¬ 
investment  audit  capability. 

The  IT  executive  smiled,  nodding 
in  agreement.  Could  his  response 
have  been  more  out  of  politeness 
than  conviction  that  what  I  said  was 
tenable  at  his  company?  Yes,  talk  is 
cheap. 

Overlooked  but  very  much  needed 
amid  all  the  buzz  about  quantifying 
financial  returns  on  IT  investments 
are  answers  to  some  basic  questions. 


Who  is  willing  and  able 
to  roll  up  their  sleeves 
and  get  into  the  mechan¬ 
ics  of  building  a  foreca.st? 
Who  will  build  consensus 
for  the  metrics  to  be  in¬ 
cluded  in  the  forecast? 
Who  will  document  the 
potential  oiganizational 
and  business-process 
change  some  software  is 
sure  to  infect  into  the 
company? 

In  other  words,  who  is 
going  to  champion  a  con¬ 
sistent,  repeatable  IT 
measurement  program 
and  see  that  it  happens  and  thrives? 

Theoretically,  there  is  no  reason 
why  economic  value  management 
practices  can't  originate  and  become 
operational  in  the  IT  organization. 
But  the  politics  of  the  situation  say 
otherwise. 

In  reality,  the  broad  trend  has  been 
for  such  a  management  course  to 
originate  in  business  units,  which  in¬ 
creasingly  have  control  over  discre¬ 
tionary  IT  budget  expenditures.  The 
IT  organizatioo's  budget,  meanwhile, 
is  largely  confined  to  life-cycle  man¬ 
agement  expenditures,  upgrades,  re¬ 
placements  and  maintenance. 

How'ever.  with  control  comes  ac¬ 
countability.  Lines  of  business  can 
chart  their  technological  destinies, 
but  senior  management  is  also  hold¬ 


ing  them  accountable  for  the  returns 
their  investments  deliver.  This  com¬ 
pels  business  units  to  manage  the 
risks  and  uncertainties  of  their  in¬ 
vestment  decision-making.  This  is 
accomplished  by  adding  clarity  to 
these  decisions  —  economic  fore¬ 
casts,  metrics  construction,  the 
whole  measurement  mcgtllah. 

Now.  square  the  budgeting  trends 
and  related  measurement  responsi¬ 
bility  with  an  equally  important  real¬ 
ity  showing  IT'S  genuine  interest  in 
busting  out  of  its  utility  services  role. 
In  the  case  of  this  high-growth  com¬ 
pany.  the  IT  group  aspires  to  partici¬ 
pate  at  a  mure  strategic  level 

Contemplate  the  tension:  Budget¬ 
ing  realities  are  driving  accountabili¬ 
ty  (meaning  ROI  mania)  to  business 
units,  while  IT  seeks  to  participate 
more  fully  in  the  strategic  affairs  of 
the  company  by  playing  a  larger  role 
in  ROI  measurement  and  related  ac¬ 
tivities.  The  business  side  might  very 
well  wish  to  relinquish  measurement 
to  IT.  but  senior  management  is  say¬ 
ing,  "You  want  that  5500.000  CRM 
application?  Then  you  show  me  the 
value,  since  you  have  the  budget." 

M  it  turns  out.  this  company’s  IT 
budgeting  is  centralized,  not  in  defi¬ 
ance  of  the  trend,  but  most  likely  be¬ 
cause  of  its  size.  As  Us  revenue 
grows,  as  its  need  for  complex  appli¬ 
cations  grows,  it  might  decentralize 
budgeting  too.  Today.  IT  in  this  com¬ 
pany  is  excited  about  the  chance  to 
lead  a  transformation  effort  that  em¬ 
beds  forecasting  and  measurement  in 
investment  decision-making. 

Business  units  that  avoid  the  heavy 
lifting  of  IT  economic  value  manage¬ 
ment,  pinch  yourselves.  This  sce¬ 
nario  is  likely  not  the  future.  I 
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•  Maiteitrfilrtr-  Advanced,  remote  power  distr«ubon  and 
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Among  the  most  oggressive  industries  using 
informot^  lachnotogy  to  enc^le  business  is 
(inonciol  services  Despite  the  upheaval  of  the 
post  two  yeors.  the  ir>dustry  continues  to  leon 
on  informotion  lechr>ology  and  its  professiorv- 
all  to  drive  chonge  in  the  future.  Over  the  next 
1 2  to  48  months,  the  priorities  for  the  industry 
-  whether  a  troditionol  bonking  institution  such 
as  Wells  Forgo  or  E*Trode,  which  introduced 
onlirse  troding  20  yeors  ogo  -  fall  into  four 
cotegofies;  security,  peer-lopeer  networking, 
nwbility  end  vreb  opplicotions. 

The  issue  of  security  wos  evident  when  the 
Slammer  worm  hit  the  Internet  in  Jonuory, 
dosing  down  ATMs  ocross  the  country  for  at 
leost  port  of  the  weekerrd.  For  E*Trode,  which 
hos  tfU  secorrd  lorgest  outomoKc  tronsoction 
mochine  network  in  the  United  Slates,  ihot  kind 
of  problem  is  o  killer.  Peer-topeer  rtetworking  is 
on  issue  lor  Wells  Forgo  os  it  consolidoles  notion' 
wide  operotions.  And  for  Edward  Jones,  extend- 
irtg  the  business  copobility  and  service  to  custom¬ 
ers  through  mobility,  new  web  opplications  and 
security  is  o  model  for  what  most  institutions  face. 

Rodney  Gee,  gerterol  principol  over  human 
resources  in  information  systems  ot  Edword  Jones, 
has  a  short  list  in  terms  of  priorities  for  IT  profes- 
sionols  in  the  future.  The  bose  is  technicol  skills, 
which  at  Jones  ironslotes  to  Jovo-bosed  progrom- 


ming,  dotobose  development,  system  progromming 
and  administration.  or>d  network  ond  technical 
architecture.  'We  look  (or  people  who  hove  dem- 
onstroted  the  obility  to  learn  new  skills,'  soys  Gee. 
'So  if  you  don't  hove  Jovo  but  hove  proven  to  be 
on  excellent  progrommer  in  onother  ionguoge, 
we'il  hdp  you  get  that  copobility.' 

Edward  Jones,  heodquortered  in  St.  Louis,  supports 
o  vrorld  network  of  locations,  and  IT  pros  align 
to  ihe  businesses.  'So  it's  importont  to  be  able 
to  leveroge  the  copobilities  ^  o  teommote,'  soys 
Gee.  'At  Jorws  that  is  much  more  important  than 


your  abilities  os  o  lor>e  rortger.  Af>d,  probobty,  the 
biggest  thirtg  needed  before  folks  move  on  in  their 
coreers  is  understondir>g  the  bigger  business  corv 
text  and  how  IT  con  ervoble  that  business  model.' 

Keith  Irwin,  monoger  of  leorning  ond  development 
ol  Wells  Forgo  Services,  soys  creating  this  type 
of  workforce  encomposses  myriad  progroms.  His 
group  provides  more  thon  350  courses  online. 

The  courses  ore  configured  into  mops  that  track 
with  Wells  Forgo's  coreers  of  the  future.  'There's 
rso  one  thirtg  thot  keeps  me  awoke  at  night,'  he 
admits.  'It's  Ihe  full  range.  In  finorKiol  services, 
we're  sHlI  usirig  mainframes,  but  we  also  ore 
moving  ropidly  in  the  oreos  of  web  applications 
to  deliver  services  to  customers. 

"That  means  we're  working  to  cover  oil  the 
boses  becouse  we  con't  afford  to  foil  behind  in 
arty  one.' 
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Mas&.-based  Giga  Information 
Group  Inc.  Rymer  said  the 
tool's  Initial  version  served  as 
a  proof  of  concept  of  BEA's 
overall  design  of  an  event* 
based  Java  development  envi* 
ronmeni  similar  in  intent  to 
Microsoft  Corp.’s  Visual  Bask. 
He  predicted  that  the  new  tool 
will  have  a  substantial  effect 
on  developer  productivity. 

Even  in  the  tool’s  early  in* 
carnation,  some  companies 
found  benefit.  Richard  Lynn, 
vice  president  of  global  appli¬ 
cations  at  Pfizer  Iik.*$  plm- 
maceutical  group,  said  his  di* 
vtsicm  was  able  to  set  aggres¬ 
sive  timetables  with  the  out¬ 
sourcers  that  develop  its  ap¬ 
plications,  knowing  that  the 
BEA  tool  gave  them  added 
flexibility  to  make  dianges. 

Lynn  said  the  new  tool  will 
provide  more  benefits,  since 
developers  will  no  longer  have 
to  “Alt-Thb”  between  applica¬ 


tions.  and  they  will  be  able  to 
more  easily  reuse  code. 

BEA  is  promoting  its  new 
WebLogic  Platform  as  a  way 
to  converge  integration  and 
custom  application  develop¬ 
ment.  Kapoor  said  the  adop¬ 
tion  of  int^ration  brokers  has 
been  limited,  but  be  hopes 
WebLogic  Platform  8.L  with 
its  newly  unified  architecture, 
will  maltp  integration  nx>re 
mainstream  by  reducing  the 
complexity,  cost  and  time 
needed  for  such  projects. 

So  &r,  BEA  has  made  its 
mark  as  an  application  server 
vendor,  vying  wHb  IBM  for 
the  top  ^t  in  market  share. 
But  BEA  has  struggled  for 
rect^nition  in  the  application 
integration  space. 

Thomas  Murphy,  an  analyst 
at  Stamford,  Conn.-based 
Meta  Group  Inc.,  said  he 
thinks  that  as  developers  be¬ 
come  more  productive  using 
the  new  suite,  the  appeal  of 
BEA's  integration  products 
will  increase. 

Murphy  said  be  eiq>ects 


platform  veiKlors  such  as  BEA 
and  IBM  to  eventually  provide 
all  of  the  migration  tools  that 
most  companies  need,  pushing 
to  niche  vertical  markets  the 
vendors  that  specialize  in  inte¬ 
gration  iMokers. 

Jon  Derome.  an  analyst  at 


The  Yairkee  Group  in  Boston, 
said  that  in  the  past  10  months, 
be  has  noticed  that  IBM  and 
BEA  have  been  turning  up 
on  users’  short  lists  for  inte¬ 
gration  projects,  afongside 
integration  broker  vendors 
such  as  webMethods  Inc. 


and  Vitria  Technology  loc. 

Derome  said  the  combined 
application  server/integration 
broker  offering  can  make  a  tot 
of  sense  for  companies  witii 
cooqilex  tnicgralion  chal¬ 
lenges  involving  multiple  lega¬ 
cy  or  packaged  applications 
and  Web  applications. 

Just  because  BEA  is  promot¬ 
ing  the  new  products  and  new 
versions  doesn’t  mean  users 
will  be  rudung  to  get  them. 
Bear.  Steams  &  Co.,  for  in¬ 
stance,  has  major  financial  ap¬ 
plications  running  on  BEA's 
WebLogic  Server. 

Most  of  the  applications  are 
running  on  Vetston  SJ,  and 
Bear.  Steams  is  looking  to 
convert  to  7iX  said  Sue  ^cus, 
managing  director  in  the  ar¬ 
chitecture  office  at  the  New 
York-based  cott^umy. 

don't  just  drop  every¬ 
thing  and  coovert,”  said  Picus. 
noting  that  it  costs  money  to 
port  code  to  a  new  verston 
and  to  retest  the  complete  sys¬ 
tem.  "We  tend  to  upgrade  o^ 
when  there’s  a  need."  I 
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a  lot  of  careful  upfront  analy¬ 
sis  before  adoption. 

There  is  still  some  confu¬ 
sion.  This  b  still  tridcy  for 
some  users,"  said  Marcy  Ne- 
cbemias,  an  IBM  pricing  man¬ 
ager.  "But  the  overall  message 
here  b  that  WLC  b  here  to 
stay."  She  added.  There  have 
bera  some  rumors  that  IBM  b 
going  to  discontinue  WLC. 
Those  are  completely  untrue." 

Hewitt  Associates  LLC,  a 
human  resources  outsourcer 
in  Lincolnshire,  IlL  has  been 
using  WLC  since  November 
2001.  The  company  b  saving 
approximately  2S%  in  monthly 
mainframe  software  licensing 
costs,  said  Dan  Kaberon,  He¬ 
witt  Associates'  Parallel  Sys- 
plex  manager. 

Tt  was  a  good  deal  on  the 
first  day  of  the  first  month, 
and  it  has  become  easier  to 


implement  and  more  valuable 
for  us  to  exploit  with  every 
change  that  IBM  has  made," 
Kabenm  said. 

In  many  instances,  compa¬ 
nies  aren’t  moving  to  WLC 
simply  because  they  see  little 
benefit  in  it,  said  Stan  King, 
president  of  Information 
Technology  Co.,  an  IBM  busi¬ 
ness  partner  in  Falb  Church. 
Va.  None  of  the  6S  data  cen¬ 
ters  that  are  directly  support¬ 
ed  by  Information  Tetdinolt^ 
has  adopted  WLC,  King  said. 
In  all  65  cases,  mainframes 
and  associated  software  are 
being  used  at  ftiU  throttle  in 
production  environments. 
Sudi  shops  won't  see  the  same 
bmefits  from  WLC,  which 
fovors  users  that  don’t  fully 
max  out  capacities  or  those 
that  have  variable  workloads, 
Kii^sakL 

There  can  be  tremendous 
saving  in  thb  for  those  vdio 
own  applkation  development 
sbc^  or  are  using  mainframes 


on  a  limited  basb  or  have 
brand-new  requirements,” 

King  added. 

Nechemias  said  IBM  will  I 
work  with  users  to  uoderstasd 
specific  concerns  and  address 
t^m  where  possible. 

For  instance,  in  response  to 
user  demands.  IBM  b^  made 
changes  in  the  way  usage  b 
defined  and  measured  under 
WLC  More  recently.  IBM  dis¬ 
continued  plans  to  develop  a 
license  manager  technology 
that  was  to  h^  been  used 
with  z/OS,  after  users  com¬ 
plained  that  it  was  too  intru¬ 
sive  and  complex  to  install 

In  the  same  vein,  IBM  b 
currently  working  with  users 
to  daiify  issues  related  to  a 
four-^kour  rolling  average  met¬ 
ric  IBM  uses  in  some  cases  to 
measure  software  usage,  Ne- 
dtemias  said. 

"We  are  just  dotting  the  Ts 
and  CTOsnng  the  f  s"  to  clarify 
things  for  users,  Nechemias 
said.  Later  thb  year.  IBM  plans 


to  highlight  several  customer 
case  studies  showii^  how  ear¬ 
ly  users  who  have  implement¬ 
ed  WLC  are  taking  advantage 
of  it,  she  said. 

IBM’s  move  to  educate 
users  about  WLC  comes  at  a 
time  kriten  barely  40%  of  all 
z/OS  users  have  adopted  the 
pricing  model  despite  its  tout¬ 
ed  benefits. 

"In  terms  of  an  adoption 
rate,  one  of  the  gating  foctors 
b  that  a  lot  of  users  are  run¬ 
ning  z/OS  in  a  mixed  environ¬ 
ment"  with  OS/390.  said  Mike 
Chuba.  an  analyst  at  Stamford, 
Conn.-based  Gartner  Inc  That 
makes  WLC  hard  to  imple¬ 
ment,  be  said. 

Another  major  fisctor  b 
that  WLC’s  benefits  can  vary 
widely  depending  on  the  over¬ 
all  capacity  of  installed  main- 
frames  and  the  applications 
that  run  oo  them,  so  users 
need  m  do  the  necessary 
analysb  before  makiDg  a 
move.  Chuba  said. 


Still  Committed 


For  instance,  a  mainframe 
user  whb  less  than  LOOO  MIPS 
installed  b  unlikely  to  see 
much  of  a  price  benefit  and  b 
probably  better  off  with  cur¬ 
rent  Panllel  Sysplex  licensing 
models,  Chuba  said.  On  the 
ocher  band,  a  user  with  more 
than  LOOO  MIPS  running  mul¬ 
tiple  software  packages  could 
benefit  substantially  by  mov¬ 
ing  to  WLC  he  said.  I 
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BEA 


Mass.-based  Giya  Information 
Group  Inc.  Rymcr  said  the 
tool's  initial  version  served  as 
a  proof  of  concept  of  BEA’s 
iU'erall  design  of  an  event- 
based  lava  development  envi¬ 
ronment  similar  in  intent  to 
Microsoft  Corp.’s  Visual  Basic. 
He  predicted  that  the  new  tool 
will  have  a  substantial  effect 
on  developer  productivity. 

Even  in  the  totd's  early  in¬ 
carnation.  some  companies 
h'und  benefit.  Richard  I.ynn. 
vice  president  of  global  appli¬ 
cations  at  Pfizer  Inc.'s  phar¬ 
maceutical  group,  said  his  di¬ 
vision  was  able  to  set  aggres¬ 
sive  timetables  with  the  out¬ 
sourcers  that  develop  its  ap¬ 
plications.  know  ing  that  the 
REA  tool  gave  them  added 
flexibility  to  m;ike  changes. 

Lynn  said  the  new  tool  will 
provide  tnoa*  benefits,  since 
developers  will  no  longer  have 
to  "All-Tab"  between  applica¬ 


tions.  and  they  w'ill  be  able  to 
more  easily  reuse  code. 

BEA  is  promoting  its  new 
WebLogic  Platform  as  a  way 
to  converge  integration  and 
custom  applicativ>n  dewlop- 
ment.  Kapoor  said  the  adop¬ 
tion  of  integration  brokers  has 
been  limited,  but  he  hopes 
WebLogic  Platform  H.l.  w  ith 
its  newly  unified  architecture, 
will  make  integration  more 
mainsirc-am  by  reducing  the 
etimplexity.  cost  and  time 
needed  for  such  projects. 

So  far.  BH.A  has  made  its 
mark  as  an  application  server 
vendor,  vying  with  IBM  for 
the  top  spot  in  market  share. 
But  BEA  has  struggled  for 
recognition  in  the  application 
integration  space. 

Thomas  Murphy,  an  analyst 
at  Stamford,  Conn.-based 
Meta  Group  Inc.,  said  he 
thinks  that  as  dcwclopcrs  be¬ 
come  more  productive  using 
the  new  suite,  the  appeal  of 
BEA's  integration  products 
will  increase. 

Murphy  said  he  expects 
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IBM 


a  lot  of  careful  upfront  analy¬ 
sis  before  adoption. 

"There  is  still  some  confij- 
sion.  This  is  still  trick'y  for 
some  users."  said  Marcy  Ne- 
chemias,  an  IBM  pricing  man¬ 
ager.  "But  the  overall  message 
here  Is  that  WLC  is  here  to 
stay."  She  added.  "There  have 
been  some  rumors  that  IBM  is 
going  to  discontinue  WLC. 
Those  arc  completely  untrue." 

Hewitt  As.sociaics  IXC,  a 
human  resources  outstuirccr 
in  Lincolnshire.  HI.,  has  been 
using  WLC  since  November 
2001.  The  company  is  saving 
approximately  25%  in  monthly 
mainframe  software  licensing 
costs,  said  Dan  Kaberon,  He¬ 
witt  Associates'  Parallel  Sys- 
plcx  manager. 

"It  was  a  good  deal  on  the 
first  day  of  the  first  month, 
and  it  has  become  easier  to 


WebLogic  Upgrade 


platform  vendors  such  as  BF.A 
and  IBM  tocventuallv  provide 
all  v>f  the  integration  tools  that 
most  companies  need,  pushing 
to  niche  vertical  markets  the 
vendors  that  specialize  in  inte¬ 
gration  brokers. 

Ion  Detx'me.  .in  analyst  at 


The  Yanki*c  Gnmp  in  Boston, 
said  (hat  in  the  past  10  months, 
he  has  noticed  that  IBM  and 
BEA  have  been  turning  up 
on  users'  short  lists  for  inte¬ 
gration  projects.  al»>ng>ide 
integration  broker  vendors 
such  as  webMethods  Ine. 


.and  Vitria  Twhnology  Inc. 

Dcromc  vnd  the  combined 
applicatiirn  server  iniegraiiim 
broker  offering  can  make  a  U't 
of  .sense  for  companies  w  ith 
complex  integration  chal¬ 
lenges  involving  multiple  leg.i- 
cy  v»r  pack.iged  applications 
and  Web  applicalums. 

lust  becau.sc-  Hf  A  is  promot¬ 
ing  the  new  priHlucts  .ind  ni*w 
versMins  doesn't  me.in  usc-rs 
will  be  rushing  lo  get  them 
Iksir.  Stearns  &  Co .  for  in- 
st.tnce.  h.is  maior  financi.il  ap 
plications  running  on  BI-.Vs 
Wcbl  ogic  Server 

Most  of  the  applications  .irc 
running  on  Version  5,1.  and 
Hear.  .Stearns  is  hH*king  !«• 
com  err  lo  7l).  said  Sue  Picus. 
managing  direct*»r  in  the  ar- 
chitwturetifficeat  the  New 
York-b.ised  companv. 

"We  di*n'l  just  drv»p  everv- 
thing  and  convert,"  s.iid  Picus. 
noting  that  it  costs  money  to 
port  code  to  a  new  version 
and  to  retest  the  complete  sys¬ 
tem.  “We  tend  to  upgrade  only 
when  there's  a  need."  • 


implement  and  more  valuable 
for  us  to  exploit  with  every 
change  that  IBM  has  made," 
Kaberon  said. 

In  many  instances,  compa¬ 
nies  aren't  moving  to  WLC 
simply  bccau.se  they  sts.’  little 
benefit  in  it.  said  Stan  King, 
president  of  Information 
Technology  Co.,  an  IBM  busi¬ 
ness  partner  in  Falls  Church. 
Va.  None  of  the  65  data  cen¬ 
ters  that  arc  directly  support¬ 
ed  by  Information  Technology 
has  adopted  WLC.  King  said. 
In  all  65  cases,  mainframes 
and  associated  software  are 
being  used  at  full  throttle  in 
production  environments. 
Such  shops  won’t  see  the  same 
benefits  from  WLC.  which 
favors  users  that  don't  fully 
max  out  capacities  or  those 
that  have  variable  workloads. 
King  said. 

"There  can  be  tremendou-s 
saving  in  this  for  those  who 
own  application  development 
shofis  or  are  using  mainframes 


on  a  limited  basis  or  have 
brand-new  ^ev^uiremcnt^.'' 
King  added. 

Ncchemias  said  IBM  will 
work  with  u.sers  to  understand 
specific  concerns  and  address 
them  where  possible. 

Eor  instance,  in  response  to 
user  demands.  IBM  has  made 
changes  in  the  way  u.sage  is 
defined  and  measured  under 
WLC.  More  recently.  IBM  dis¬ 
continued  plans  to  develop  a 
license  manager  technology 
that  was  to  have  been  used 
with  z/OS.  after  users  com¬ 
plained  that  it  was  |(k>  intru¬ 
sive  and  complex  to  Install. 

In  the  same  vein.  IBM  is 
currently  wtirking  with  users 
to  clarify  issues  related  to  a 
four-hour  rolling  average  met¬ 
ric  IBM  uses  in  some  cases  to 
measure  software  usage,  Ne- 
chemias  said. 

"We  arc  just  dotting  the  Ts 
and  crossing  the  r's*'  to  clarify 
things  for  users,  Ncchemias 
said.  Later  this  year.  IBM  plaas 


to  highlight  several  customer 
case  studies  showing  how-  ear¬ 
ly  users  who  have  implement¬ 
ed  WLC  are  taking  advantage 
of  it.  she  said. 

IBM’s  move  to  educate 
u.sers  about  WI.C  comes  at  a 
time  when  barely  40%  of  all 
z-'OS  users  have  adopted  the 
pricing  model,  despite  its  tout¬ 
ed  benefits. 

"In  terms  of  an  adoption 
rate,  one  of  the  gating  factors 
is  that  a  lot  of  users  are  run¬ 
ning  z/OS  in  a  mixed  envinm- 
menl"  with  05/390.  said  Mike 
Chuba.  an  analyst  at  Stamford. 
Conn. -based  Ganner  Inc.  That 
makes  WLC  hard  to  impk‘- 
ment.  he  sakl. 

Another  major  factor  is 
that  WLC's  benefits  can  vary 
widely  depending  on  the  over¬ 
all  capacity’  of  installed  main¬ 
frames  and  the  applications 
that  run  on  them,  so  users 
need  to  do  the  necessary 
analysis  befoa*  making  a 
move.  Chuba  said. 
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For  instance,  a  mainframe 
user  with  less  than  1,000  MII*S 
installed  is  unlikely  to  see 
much  of  a  price  benefit  and  is 
probably  better  off  wtth  cur¬ 
rent  Parallel  Sy.sp)cx  licensing 
models.  Chuba  said.  On  the 
other  hand,  a  user  with  more 
than  1.000  MIPS  running  mul¬ 
tiple  software  packages  could 
benefit  substantially  by  mov- 
mg  to  WLC  he  said.  I 
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Nervous  about  offshore  outsourcing?  You 
should  be  —  and  not  just  because  offshoring  has  just 
become  the  favorite  theme  of  the  usual  IT-analyst  sus¬ 
pects.  Last  week  at  ComputerworlcTs  Premier  100  con¬ 
ference,  some  panelists  were  throwing  around  cost 
numbers,  like  8  cents  on  the  dollar  for  offshore  IT  work.  Is  that  real¬ 
istic?  No.  Will  it  get  your  CEO’s  attention?  You  bet. 

So  ask  yourself  this:  How  much  of  my  IT  shop’s  work  doesn’t  re¬ 
quire  “face  time”?  That  should  give  you  a  pretty  good  idea  how 
much  of  your  work  might  be  shipped  off  to  Bangalore. 

Along  with  a  pretty  good  idea  of  just  how  obsolete  you’ve  become. 

Not  obsolete  as  in.  “You’re  obsolete  because  actually  make  the  business  more  agile  and  ef- 
what  you  do  can  be  done  more  cheaply  off-  fective  unless  you  check  out  your  assumptions 

shore."  But  as  in.  “You’re  obsolete  because  with  warehouse  and  logistics  people  and  sup- 

what  you  do  doesn't  meet  the  needs  of  the  pliers.  You  can’t  be  sure  that  a  CRM  system 

business  any  longer."  will  help  salespeople  write  more  orders  until 

Does  that  sound  too  simple?  Think  about  it:  you  get  a  view  through  the  eyes  of  those  sales- 

Business  is  about  face  time.  Every  good  execu*  people.  That’s  face  time  and  more  face  time, 
live,  manager  and  salesman  knows  that.  And  And  you  can’t  know  how  well  systems  are 

if  ITs  top  priority  is  to  align  with  business  actually  serving  the  business  without  spending 

needs,  how  well  we’re  aligned  should  show  up  time  face  to  face  with  the  people  using  them, 
in  our  face-lime  numbers.  It’s  grim  but  true:  If  corporate  IT  shops  think 

Besides,  what  a  business  needs  from  its  IT  IT  is  all  about  making  technology,  they  can't 
shop  today  isn't  technology.  Technology  is  easy  compete.  Our  huge  homegrown  Cobol  systems 
to  buy.  Hardware  and  software  vendors  deliver  couldn’t  compete  with  SAP  and  PeopleSoft. 
it  by  the  truckload.  Sure.  IT  shops  were  once  And  our  teams  of  heads-down.  cubicle-bound 

in  the  technology-making  game.  We  routinely  programmers  working  on  big,  well-specified 
wrote  big  enterprise  applicatioos^od  even  op*  applications  can't  compete  with  teams  in  India 
erating  systems.  But  those  day's  are  long  gone.  and  Russia,  where  discipline  is  higher  and  the 
What  the  business  needs  isn’t  even  the  tech-  pay  is  much  lower, 
nical  smarts  to  get  the  technologies  working  Anything  we  can  do  isolated  in  our  IT  shop 

together.  Specialist  consultants  can  get  an  SAP  cubicles,  they  can  do  in  their  offshore  cubicles 

installation  going  fa.ster  than  internal  IT  people  —  and  almost  always  faster  and  cheaper, 
can.  or  bring  new  multitier  middleware  online  But  they  can’t  do  face  time.  And  they  can’t 

with  fewer  problems  than  you'd  have  trying  to  really  know  our  business  and  put  IT  fully  into 

j — I - .»i — .  -  -  its  scrvice.  And  thosc  are  the 

things  the  organizations  we  serve 
need  from  their  IT  shops  today. 

All  that  face  time  and  business 
focus  might  not  be  what  we'd  pre¬ 
fer.  It  may  well  not  be  the  reason 
we  wanted  to  get  into  IT  in  the 
first  place.  It  may  even  scare  some 
IT  people. 

But  that’s  what  we’re  needed  for 
today.  And  offshoring  is  just  anoth¬ 
er  reminder  that  the  business  does 
antiaiWRWtffftofr*  need  us  —  but  we  have  to  do  what 

^  . . . . |j,e  business  needs. 

big.  new  supply  chain  system  will  Or  face  becoming  obsolete.  I 


Not  obsolete  as  in.  “You’re  obsolete  because 
what  you  do  can  be  done  mure  cheaply  off¬ 
shore."  But  as  in.  “You’re  obsolete  because 
what  you  do  doesn’t  meet  the  needs  of  the 
business  any  longer." 

Does  that  sound  too  simple?  Think  about  it: 
Business  is  about  face  time.  Every  good  execu¬ 
tive.  manager  and  salesman  knows  that.  And 
if  ITs  top  priority  is  to  align  with  business 
needs,  bow  well  we’re  aligned  should  show  up 
in  our  face-lime  numbers. 

Besides,  what  a  business  needs  from  its  IT 
shop  today  isn't  technology.  Technology  is  easy 
to  buy.  Hardware  and  software  vendors  deliver 
it  by  the  truckload.  Sure.  IT  shops  were  once 
in  the  technology-making  game.  We  routinely 
wrote  big  enterprise  applicatMuis.aQd  even  op* 
erating  systems.  But  those  day's  are  long  gone. 

What  the  business  needs  isn’t  even  the  tech¬ 
nical  smans  to  get  the  technologies  working 
together.  Specialist  consultants  can  get  an  SAP 
installation  going  fa.ster  than  internal  IT  people 
can.  or  bring  new  multitier  middleware  online 
with  fewer  problems  than  you'd  have  trying  to 
dope  it  out  with  in-house  talent.  - 

What  the  business  needs  is  the 
ability  to  do  business  better,  faster 
and  more  effectively.  And  what  the 
business  needs  from  IT  is  to  make 
sure  technology  makes  the  business 
better,  faster  and  more  effective. 

So  face  time  is  bound  to  be  a  tell¬ 
tale  marker.  You  can’t  understand  a 
user’s  business  problems  without 
spending  time  watching,  listening, 
asking  questions  and  clarifying  an¬ 
swers.  That  takes  face  time. 

You  can’t  make  certain  that  some 
big.  new  supply  chain  system  will 


Mat.  hai  cevintf  IT  tor  nMn 
Ihaa  20  fMM.  CmM  Mn  «l 


FRANK  HAYES  -  FRANKLY  SPEAKING 


Offshore  Face-off 


Nervous  about  offshore  outsourcing?  You 
should  be  —  and  not  just  because  offshoring  has  just 
become  the  favorite  theme  of  the  usual  IT-analyst  sus¬ 
pects.  Last  week  at  Computerworlds  Premier  100  con¬ 
ference.  some  panelists  were  throwing  around  cost 
numbers,  like  8  cents  on  the  dollar  for  offshore  IT  work.  Is  that  real¬ 
istic?  No.  Will  it  get  your  CEO’s  attention?  You  bet. 

So  ask  yourself  this;  How  much  of  my  IT  shop’s  work  doesn’t  re¬ 
quire  “face  time”?  That  should  give  you  a  pretty  good  idea  how 
much  of  your  work  might  be  shipped  off  to  Bangalore. 

Along  with  a  pretty  good  idea  of  just  how  obsolete  you’ve  become. 


Not  obsolete  as  in,  Tou’re  obsolete  because 
¥ffaat  you  do  can  be  done  more  cheaply  oflf- 
shore.”  But  as  in.  *Tou’re  obsolete  because 
what  you  do  doesn’t  meet  the  needs  of  the 
business  any  lon^r." 

Does  that  sound  too  simple?  Think  about  it: 
Business  is  about  face  dme.  Every  good  execu¬ 
tive.  manager  and  salesman  knows  that  And 
if  ITs  top  priority  is  to  align  with  business 
needs,  how  well  we’re  aligned  should  show  up 
in  our  &ce-dme  numbers. 

Besides,  what  a  business  needs  from  its  IT 
shop  today  isn't  technology.  Technology  is  easy 
to  buy.  Hardware  and  software  vendors  deliver 
it  by  the  truckload.  Sure.  !T  shops  were  once 
in  the  technology-making  game.  We  routinely 
wrote  big  enterprise  applications  and  even  op¬ 
erating  systems.  But  those  days  are  long  gone. 

What  the  business  needs  isn't  even  the  tech¬ 
nical  smarts  to  get  the  technologies  woiking 
together.  Specialist  consultants  can  get  an  SAP 
installation  going  faster  than  internal  IT  people 
can.  or  bring  new  multider  middleware  online 
with  fewer  problems  than  you’d  have  trying  to 
dope  it  out  with  in-house  talent 

What  the  business  needs  is  the 
ability  to  do  business  better,  faster 
and  more  effectively.  And  what  the 
business  needs  ftom  IT  is  to  make 
sure  technology  makes  the  business 
better,  ftister  and  more  effective. 

So  face  riim*  is  bound  to  be  a  tell¬ 
tale  marker.  You  can’t  understand  a 
user's  business  problems  without 
spending  time  watchmg.  listening, 
asking  questions  and  clarifying  an¬ 
swers.  That  tal«s  &ce  time. 

You  can’t  make  certain  that  some 
big,  new  supply  chain  system  will 


actually  make  the  business  more  agile  and  ef¬ 
fective  unless  you  check  out  your  assumptions 
with  warehouse  and  k^tics  people  and  sup¬ 
pliers.  You  can't  be  sure  that  a  CRM  system 
will  help  salespeople  write  more  orders  imtil 
you  get  a  view  through  the  eyes  of  those  sales¬ 
people.  That's  face  time  and  more  face  time. 

And  you  can’t  know  how  well  systems  are 
actually  serving  the  business  without  spending 
time  face  to  face  with  the  people  using  them. 

It’s  grim  but  true:  If  corporate  IT  shops  think 
IT  is  all  about  malring  technology,  they  can’t 
compete.  Our  huge  homegrown  Cobol  systems 
couldn’t  compete  with  SAP  and  PeopIeSoft. 
And  our  teams  of  heads-down,  cubicle-bound 
programmers  wforking  on  big,  well-specified 
applications  can’t  compete  with  teams  in  India 
and  Russia,  where  discipline  is  higher  and  the 
pay  is  much  lower. 

Anything  we  can  do  isolated  in  our  IT  shop 
cubicles,  they  can  do  in  their  offrhore  cubicles 
—  and  almost  always  faster  and  cheaper. 

But  they  can’t  do  face  time.  And  they  can’t 
really  know  our  business  and  put  IT  fully  into 
its  service.  And  those  are  the 
things  the  organizations  we  serve 
need  from  their  IT  shops  today. 

All  that  face  time  and  business 
focus  might  not  be  what  we’d  pre¬ 
fer.  It  may  well  not  be  the  reason 
we  wanted  to  get  into  IT  in  the 
first  place.  It  may  even  scare  some 
IT  people. 

But  that’s  what  we're  needed  for 
today.  And  offshoring  is  just  anoth¬ 
er  reminder  that  the  business  does 
need  us  —  but  we  have  to  do  what 
the  business  needs. 

Or  face  becoming  obsolete.  I 


www.co(nputerworid.coffi 


\1  \K(  II  !l  -  \I>KII  .'11(1  ! 


CTO 

FORUM 


III!  I  \IR\1()\I  (  DIM  I  ^  IM  \/  \ 
KDSIDX.  \l  \SS  Mill  SI  I  IS 


im 
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PORTAL 

PLAY 


1]  WIN  WfTH  PORTALS:  Here. There.  Everywhere.  With  information 
coming  from  infinite  sources,  a  seamlessly  integrated  portal 

is  crucial  for  both  increased  productivity  and  reduced  costs. 

2]  WIN  WITH  WEBSPHERE:  WebSphere  offers  a  pre-integrafed, 
easy-to-imptement  portal  solution  complete  with  leading- 
edge  collaboration  from  Lotus?  content  management  from  DB2* 
and  the  best  in  security  capabilities  from  Tivoli? 

3]  MAKE  THE  PLAY:  Visit  ■Mn.com/websphere/portalplay 
for  a  free  portal  kit  with  downloadable  demos  and  testimonials. 


(^  business  is  the  game  Play  to  win.' 
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Ti^tlTBud^ts 
Impair  Planning 
As  War  Looms 

Companies  lack  funds  I  States  struggle  to  pay 
for  disaster  pjTotection  for  homeland  security 


Regardless  of  how  imminenc  a 
U^.-led  war  in  Iraq  might  be. 
IT  budget  constraints  are  pre¬ 
venting  many  companies  from 
taking  appropriate  security 
and  disaster-preparedness 
measures  to  defend  them¬ 
selves  against  possible  retalia¬ 
tory  terrorist  strikes. 

It’s  not  necessarily  that  the 
threat  is  being  ignored,  k’s 
just  that  the  money  many  IT 
managers  would  like  to  have 
to  combat  it  just  isn’t  there. 

John  Ervin,  a  systems  ad- 

Compames,pageS3 


States  are  rapidly  taking  steps 
to  standardize  systems,  elimi¬ 
nate  IT  redun-  - 

dancy  and  cut 
expenses  in  or¬ 
der  to  fund  cash- 
strapped  home¬ 
land  security  ini¬ 
tiatives. 

State  IT  spending  will  rise 
sli^tly  this  year,  much  of  it 
going  to  improve  administra¬ 
tive  and  heahb  systems,  Feder¬ 
al  Sources  Inc.  forecast  last 
week.  But  new  IT  projects  will 


IT  leaders  secin  tbetr 
coRipames'diorUI  assets, 
says  Patricia  Keele. 


be  rare,  because  funding  by 
Congress  for  homeland  secu¬ 
rity  is  less  than  what  IT  man¬ 
agers  say  dtey  need. 

“It’s  extremely  frustrating." 
said  Rizwan  Ahmed,  whose 
duties  include  serving  as  CIO 
of  the  Louisiana  Department 
of  Natural  Resources.  Federal 
bometand  security  oflicials 
have  asked  his  a^ncy  to  help 
produce  geographic  informa¬ 
tion  system  maps  of  critical  oil 
and  gas  pipelines.  Although 
the  mapping  is  getting  done, 
"it's  at  the  expense  of  some  of 
our  own  projects,”  he  said. 

A  telling  sign  of  the  bleak 
-  outlook  was  of¬ 
fered  last  week 
by  FSI  Presi¬ 
dent  James 
Kane  at  the 


Top  Execs  Demand  Data  Now 


company  s  an¬ 
nual  state  con¬ 
ference.  Of  approximately  SOO 
potential  IT  spending  projects 
that  FSI  is  tracking  —  projects 
that  haven't  yet  been  put  out  to 
bid  —  two-thirds  are  on  hold. 

States,  page  53 


But  legacy  systems 
hamper  delivery  of 
real-tiine  information 


A  growing  number  of  CIOs 
say  they’re  facing  increased 
pressure  to  deliver  real-time 
financial  and  operational  data 
to  their  CEOs  and  chief  finan¬ 
cial  officers,  who  want  to  be 
able  to  react  more  quickly  to 
changing  business  conditions. 

The  problem  is.  many  IT 
departments  are  struggling  to 
meet  such  demands  due  to 
legacy  system  constraints  and 
half-baked  enterprise  ^ipUca- 
tion  integration  efforts  that 
haven’t  been  aligned  with  cor¬ 
porate  business  processes. 

Extracting  financial  and  op¬ 
erational  information  for  use 
by  business  managers  "takes 
us  weeks,”  said  Steve  Scott, 
vice  president  of  IT  at  Vision 
Service  Plan,  a  Sacramento, 


Calif -based  eye  care  benefits 
administrator  that  serves  36 
million  people  in  the  U.S 
Scoa  was  one  of  several 
technology  managers  who  tx>c- 
ed  the  challenges  posed  by 
real-time  ryptyrying 
at  Computerwortds  Premier 
100  IT  Leaders  Conference 
late  last  month.  He  said  VSP  is 
currently  constrained  by  a  23- 
year-old  financial  system  that 
it  plans  to  replace  within  the 
next  12  moD^  Scott  added 
that  VSP  IS  looking  to  install  a 
Real-Time  Dora,  pqge  16 


NewBEATool 
Wins  Guarded 
User  Support 

Developers  wary  of 
proprietary  features 


BreakingOutsourcingBaniers 
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CIOs  at  Alstate  Insurance. 
OocumentuiT)  and  Coast  Capital 
Savings  al  have  outsoudng 
success  stories  to  tel.  But  none  of  them  got  where  they 
are  by  folowing  conventional  playtxnks.  Instead,  they 
focused  on  the  Idiosyncrasies  of  their  companies' busi¬ 
ness  needs.  So  did  the  CIOs  at  General  Motets  and 
Bank  One.  who  offer  up  some  of  the  tough  lessons 
they  learned  before  adopting  opposing  all-or-nothing 
approaches  to  IT  outsourcing. 

READ  niQR  STORIES.  BE6INMH0  ON  mOE  39. 


BEA  Systems  lnc.'s  new  Web- 
Logic  Workshop  8J  tool  drew 
mixed  reactiems  —  sometimes 
from  the  same  person  ~  at  the 
software  maker's  eWorld  con¬ 
ference.  held  here  last  week. 

The  allure  for  many  users  is 
the  point-and-clkk.  drop-and- 
drag  tool's  potential  to  boost 
developer  productivity.  Sever¬ 
al  developers  called  Work¬ 
shop  compelling,  and  some  re¬ 
ferred  to  it  as  "Visual  Basic  for 
java,”  referencing  the  Micro¬ 
soft  Corp.  tool  known  for  its 
ease  of  use. 

But  there's  a  trade-off  for 
the  new  features.  Many  users 
toede  note  of  various  propri¬ 
etary  applicatioo  program¬ 
ming  interfeces  and  dass  li¬ 
braries  in  WebLogic  Wfoik- 
sbop  SJ  that  they  fear  may  re- 
fi£A7boL|K«el5 


Can  your  antivirus  software  provide  double  the  scanning  power?  Ours  can. 

Making  sure  your  company  is  secure  gets  more  and  more  difficult  every  day.  That's  why  eTrust”  Antivirus  v7 
from  Computer  Associates  uses  dual  scanning  engines  to  ensure  comprehensive  virus  protection.  It  processes 
date  in  real  time  to  search  out  and  eliminate  viruses,  and  it  also  scons  files  during  prescheduled  and 
off-p)eak  hours.  All  at  the  cost  of  most  single-engine  AV  products.  It's  more  than  just  twice  the  protection. 
It's  twice  the  peace  of  mind.  ca.com/etrust/antivirus 


eTrust"  Antivirus 


Computer  Associates* 
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QuickStudy;  Presence  Technology 

bi  the  Technolooy  section:  instant  messaging  introduced  us 
to  presence  technology,  which  lets  network  users  know  when 
other  users  are  connected  to  the  network  and  available  to  re¬ 
ceive  and  respond  to  messages.  Page  36 


NEWS 


TECHN0106Y 


6  Manufacturere  expect  mod¬ 
est  IT  budget  increases,  with 
emphasis  on  integration,  sup¬ 
ply  chain  and  customer-facmg 
projects. 

6  Microsoft  expands  its  Office 
family  with  new  additions. 

7  The  push  for  antispam  laws 
heats  up.  States  rush  to  pass 
bills,  but  Congress  may  pre¬ 
empt  them. 

7  CRM  still  inspires  caution. 
Fearing  repeats  of  past  fail¬ 
ures.  companies  roll  out  soft¬ 
ware  slowly. 

B  Bug*flxing  process  improves. 

The  sendmail  episode  reveals 
some  positive  changes,  but 
more  remains  to  be  done. 

8  SANS  lauds  Microsoft  for  se¬ 
curity  efforts,  presenting  the 
vendor  with  three  awards. 

10  Group  seeks  standards  for 

managing  Web  services. 

14  AT&T  launches  an  SSL-based 
VPN  service. 

14  Vendors  team  up  to  develop  a 
device  to  manage  remote  ac¬ 
cess  to  WANs  and  authenti¬ 
cate  wireless  LAN  users. 

16  Utility  turns  to  EAI  tools  to 
revamp  supply  chain  integra¬ 
tion  initiative. 

17  Antitrust  suit  widens  rift  in 
toner  cartridge  battle. 

18  Q&A:  Dell  sxsc  pushes  for 

fast  growth  of  company’s 
SI  billion  storage  unit 


03.10.03 


Microprocessors  on  the  March 
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mance  out  of  silicon.  Page  25 


OPINIONS 


30  Compression  Relievos  Con¬ 
gestion.  Wide-area  network 
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AT  DEADLINE 


SCO  Sues  IBM 
For  SIB  Over  Unix 

Tht  SCO  Bnsup  Mid  « in  a 
UM  stili  court  charging  IBM 
wtti  breacMng  •  Unii  karoe 
•gracRMit  Mid  Motfng  trade  M* 
crab.  Undon.  Ulah-baacd  SCO. 
wMch  own*  the  source  coda  for 
Unix.  cWmad  that  IBM  is  iaoMfy 
using  IMi  MMuras  aa  part  of  Ms 
UmB  sarvicaa  buainaaa.  SCO  b 
saaMng  damagas  of  at  bast 
SI  MMon  and  tfiraataniiig  to  ra- 
«oha  BN'S  Unh  Bcansa.  An  BM 
spohsaman  said  the  sail  la  fii  of 
bare  adagatinnf  Mid  no  facts.* 


IBM  Builds  Data 
Workload  Tools 

In  Other  BM  nows,  tha  comparry 
armouncad  three  toob  daahpMd 
to  bl  syMam  automaticaly  shift 
computing  rauunaa  to  meat  in* 
craaam  b  data  procaesing  da- 
maods.  Iha  now  toob  WhaJb 
Morh  wWi  tha  btoat  varebne  of 
BM's0e2databBaaMidWah- 
Spharaappleathmsarearsoft- 
aare.  BM  sMd  Ms  IT  aarvicas  unit 
Mae  piaas  to  use  the  tadmology 
as  part  of  Ms  ofhrtags. 


SAP  Late  With  Apps 
For  Smal  Business 

SM>  A8  mMmI  Mushrwr 
cMc  verMons  of  buainaaa  appto* 
Ifor  smal  and 
LButthseem* 
parry  cwdirmad  that  a  piarwad 
U.S.  raMeiil  af  ganaraHnapoaa 
appBcalioni  far  thoaa  years  has 
bean  dsiiyad.  SAP  taM  M  aspects 
tha  inySAP  BuaMwH  Ona  soft¬ 
ware,  which  had  bean  dua  bla 
bat  yam.  to  ba  ready  within  tba 


Short  Takes 

MICPOSOR  CORP.  rnbMwd  a 
beta  toal  mraion  of  a  corporato 
bralant  aweaaging  and  raaHinw 
colifaorMion  tool,  coda-namad 
Ofiwiwich....OfroCWEICT* 
WORKS  MC..  a  oeflwara  aandor  in 
BaoMty.  Maaa..  iMd  N  racaivad 
$38  nBon  to  MW  flaancinB  but 
laMoff20%ofNiworiiars. 


Manufacturing  Firms  Expect 
Modest  IT  Budget  Increases 


Emphasis  is  on  integrarion,  suppl>’ 
chain  and  customer-feeing  projects 


Integration  ofback'end  and 
plant-Hoor  applications,  as 
well  as  projects  that  build  bet¬ 
ter  links  with  suppliers  and 
customers,  is  where  many 
manuEacturing  companies  will 
focus  their  IT  spending  this 
year. 

Despite  the  ongoing  reces¬ 
sion.  most  manufacturers  ex¬ 
pect  their  IT  spending  to  in- 
crea.<ie  modestly  thb  year,  ac¬ 
cording  CO  the  results  of  a  sur¬ 
vey  released  by  the  National 
Association  of  Manufacturers 
(NAM)  at  last  week's  National 
Manufacturing  Week  trade 
show  here. 

Nearly  70%  of  the  300  main¬ 
ly  small  and  medium-size 
manufacturers  surveyed  said 
they  expect  IT  budgets  to 
grow  by  up  to  5%  over  last 
year.  Another  8%  said  their  IT 


spending  is  expected  to  grow 
between  5%  and  10%. 

Most  of  the  spending  will  be 
directed  at  improving  cus¬ 
tomer  linkages  as  well  as 
plant-floor  and  supply  chain 
efliciencics,  said  ferry  fasi- 
nowski.  president  of  the 
Washington-based  NAM. 

Additionally,  a  lot  of  the  re¬ 
sources  that  manufacturing 
companies  acquired  to  deal 
with  the  Y2k  rollover  are 
rapidly  becoming  obsolete  and 
due  for  revamps  this  year.  Jasi- 
nowski  said. 

On  Hold 

■"We  were  really  on  hold  last 
year.  But  this  year,  we  are  ex¬ 
pecting  at  least  a  S%  increase 
in  rr  spending.”  said  Tony 
Raimondo,  CEO  of  Behlen 
Manutocturing  Co.,  a  supplier 
of  building  material  in  Colum¬ 
bus,  Neb.  One  of  the  bigger 
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projects  being  implemented 
by  Behlen  this  year  b  a  bar¬ 
code  system  that  will  allow 
the  collection  of  real-time  data 
on  products  being  assembled 
on  the  shop  floor.  Such  proj¬ 
ects  are  "key  to  unlocking  pro¬ 
ductivity  gains,"  he  said. 

"A  down  economy  is  the 
perfect  time  to  invest,”  said 
David  Krauthamer,  director  of 
information  systems  at  Ad¬ 


vanced  Fibre  Communications 
Inc.,  a  manufacturer  of  tele¬ 
communications  equipment  in 
Petaluma.  Calif.  "My  budget  is 
up,  particularly  capital.  We're 
spending  money  on  customer 
collaboration,  demand  plan¬ 
ning.  portfolio  management 
and  a  human  resources  [sys¬ 
tem].”  said  Krauthamer.  The 
company  is  also  implementing 
a  project  to  significantly  reduce 
the  amount  of  fiber  it  has  to 
run  for  data  communications. 

Dtbers,  such  as  IMC  Global, 
a  $2  billion  Lake  Forest,  Ul.- 
based  manufacturer  of  phos¬ 
phates,  expect  capital  expen¬ 
ditures  to  remain  flat  com¬ 
pared  with  last  year.  Even  so. 
projects  that  help  IMC  reach 
out  to  customers  and  suppli¬ 
ers  in  a  more  efficient  manner 
will  receive  priority,  said  Doug 
Pertz,  CEO  of  the  company. 

Such  plans  come  at  a  time 
when  three-fourths  of  NAM 
members  say  U.S  manufactur¬ 
ing  is  in  crisis.  Rising  operat¬ 
ing  costs  in  an  environment 
where  growth  and  export  sales 
are  stalled  are  the  causes,  ac¬ 
cording  to  fasinowski 

“These  are  certainly  the 
most  uncertain  times  for  man¬ 
ufacturing  in  modern  econom¬ 
ic  history.”  he  said.  I 


Microsoft  Expands  Its 
Office  Family  by  Two 


BV  CABOt.  SLiWA 

Microsoft  Corp.  today  will  be¬ 
gin  distributing  a  beta  evalua- 
tk>o  kit  of  its  newly  named 
Office  System  product  set, 
which  includes  two  new  addi¬ 
tions  to  the  family. 

One  neH'  offering,  called 
InfoPath.  allows  users  to  cre¬ 
ate  and  complete  XML-based 
forms  and  submit  them  to 
XML-enabled  systems.  The 
other,  OneNote,  b  a  digital 
note-taking  application  that 
can  be  used  on  a  laptop,  desk¬ 
top  or  Tablet  PC. 

The  beta  evaluation  kit  also 
includes  the  five  products  that 
are  pan  of  the  O^ice  2003 
suite:  Word,  ExceL  Outlook, 
PowerPoint  and  Access. 

Also  dipping  with  the  kit 


are  the  Frontpage  Web-site 
creation  and  management 
took  the  Office  Publisher 
product,  which  aims  to  help 
users  create  marketing  materi¬ 
als:  Windows  SharePoint  Ser¬ 
vices.  an  engine  for  creating 
Web  sites  that  enable  informa- 


Microsoft 
Office  System 

INFOPATH;  ApglGMiontMM- 
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tton  sharing  and  document 
collaboration:  and  SharePoint 
Ponal  Seiver  2.0,  which  inte¬ 
grates  information  from  vari¬ 
ous  systems  through  single 
sign-on  and  enterprise  appli¬ 
cation  integration  capabilities. 

Dan  Leach,  a  lead  product 
manager  in  Microsoft’s  infor¬ 
mation  worker  product  man¬ 
agement  group,  said  the  set  of 
products  b  now  referred  to  as 
the  Microsoft  Office  System  to 
reflect  the  comprehensive  set 
of  productivity  applications, 
servers  and  services  designed 
to  connect  people  and  organi¬ 
zations  to  their  information 
and  back-end  systems. 

Thb  b  the  second  beta  of 
Office  System,  and  Leach  said 
it  will  be  the  final  one.  though 
there  potentially  could  be  "re¬ 
lease  candidates”  before  the 
final  release  of  the  product  set 
thb  summer. 

New  features  that  weren't 
part  of  the  first  beta,  which 


was  released  in  October,  in¬ 
clude  junk-mail  Altering  and  a 
business  contact  manager  in 
Outlook  2003.  as  well  as  Infor¬ 
mation  rights  management 
(IRM)  capabilities  that  enable 
users  to  control  access  to  doc¬ 
uments  they  create  with  Of¬ 
fice  products.  Leach  said. 

R^ipients  of  protected  doc¬ 
uments  will  need  client  soft¬ 
ware  enabled  with  Microsoft's 
IRM  viewing  capability  in  or¬ 
der  to  open  them.  Leach  said. 
Other  major  changes  in  the 
new  version  of  Office  include 
support  for  XML  and  Web  ser¬ 
vices.  he  said. 

Microsoft  Office  System 
pricing  has  yet  to  be  an¬ 
nounced.  Microsoft  first  post¬ 
ed  the  second  beta  of  Office 
2003  to  its  developer  network 
site  last  month,  only  to  pull 
the  software  a  few  hours  later, 
claiming  that  the  product 
wasn't  ready  and  that  the  post¬ 
ing  was  inadvertent.  I 
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States  Rush  to  Pass 
Laws  to  Fight  Spam 

Congress  urged  to  preempt  states  by 
adopting  a  national  antispam  rule 


BV  PATRICK  THIBODEAU 

WASHINGTON 

Y  THE  END  of  this 
year,  all  50  states  may 
have  antisparo  laws, 
and  Congress  could 
also  act  to  adopt  a  national 
law.  Lawmakers  have  never 
been  under  greater  pressure 
to  take  action  to  fight  spam. 
But  there's  little  hope  t^t  leg¬ 
islation  will  briiQ  IT  man¬ 
agers  much  relief. 

So  far.  26  states  have  adopt¬ 
ed  spam  laws  that  do  things 
such  as  making  forged  address 
headers  illegal  Other  taws  re¬ 
quire  that  *ADVr  short  for  ad¬ 
vertisement,  be  included  in 
the  subject  line  of  unsolicited 
commercial  e-mail 

Emily  Hackett,  state  policy 
director  of  the  Internet  Al¬ 
liance  in  Washington,  which 
represents  some  large  Internet 
service  providers,  said  states 
without  an  antispam  law  will 
soon  have  one.  'There  isn't 
any  opposition  to  it,”  she  said. 

MafteUngTrouliM 

But  the  state  bills  are  trou¬ 
bling  for  the  marketing  indus¬ 
try.  Some  allow  lawsuits 
against  spammers  that  violate 
posted  policies,  which  scares 
companies  that  use  unsolicit¬ 
ed  e-mail  to  prospect  for  cus¬ 
tomers.  There  are  also  states 
eyeing  a  ”do-not*spam"  list 
similar  to  do-not-t^  telemar¬ 
keting  lists. 

Congress  is  being  pushed  to 
act.  in  part  to  preempt  state 
laws  with  a  national  one.  The 
Direct  Marketing  Association 
(DMA)  in  New  York,  long  an 
opponent  of  any  spam  regula¬ 
tion.  is  now  backing  a  federal 
law  to  end  the  hodgepodge  of 
sute  laws.  No  bills  have  been 
introduced  y^.  but  that's  ex¬ 
pected  to  change. 

”It’$  very  difficult  to  keep 
track  of  varying  state  laws," 


said  Louis  Mastria.  a  DMA 
spokesman,  who  added  that 
state  laws  are  ineffective  be¬ 
cause  a  marketer 
doesn't  necessarily 
know  the  physical 
address  of  a  person 
being  solicited. 

The  state  laws  "set 
up  legitimate 
e-mail  marketers 
for  a  black  eye.”  he  said. 

Another  major  proporrent  of 
action  is  Microsoft  Corp^ 
which  last  month  ran  ads  in 
newspapers  saying  that  ”new. 


Fearing  Mure, 
companies  roll  out 
software  slowly 

BV  MARC  L.  BONBIHI 

CHICAGO 

Despite  several  years  of  tech¬ 
nology  evolution,  rollouts  of 
customer  relationship  man¬ 
agement  (CRM)  software  still 
pose  challenges  that  are  caus¬ 
ing  many  companies  to  pro¬ 
ceed  with  caution. 

Corporate  IT  managers  con¬ 
tinue  to  fkie  considerable  pit- 
fails  on  CRM  installations,  ac¬ 
cording  to  Scott  Nelson,  a 
Gartner  Inc  analyst  who 
spoke  at  the  consulting  firm's 
CRM  Summit  Spring  2003 
conference  here  last  weeL 
Nelson  said  Gartner  last  year 
surveyed  hundreds  of  compa¬ 
nies  that  have  installed  CRM 
applications,  and  about  55%  of 
the  respondents  characterized 
their  rollouts  as  foilures. 

Several  conference  atten¬ 
dees  acknowledged  that  adop¬ 
tion  of  CRM  tools  by  end 
users  can  be  very  slow.  Many 


strong  laws  are  needed”  to 
combat  spam.  The  \JS.  Feder¬ 
al  Trade  Commission  is  plan¬ 
ning  a  three-day  forum  on 
spam  next  month,  an  event 
that’s  seen  as  a  pivotal  gather¬ 
ing  of  all  sides  in  the  debate. 

The  success  of 
any  legislation  will 
depend  on  en¬ 
forcement,  said 
Michael  Redman. 
informaiiOD  sys¬ 
tems  director  at 
Nicholson  Manu¬ 
facturing  Ca  in  Seattle.  Wash¬ 
ington  has  an  antispam  law. 
but  Redman  said  he's  seen  lit¬ 
tle  impact  from  it.  There  is  a 
substantial  aroounNof  legisla- 


users  are  interested  in  CRM 
capabilities,  but  the  technolo¬ 
gy  “causes  foar,”  said  Shawn 
Kaplan,  director  marketing 
and  business  development  at 
New  York-based  ftnancial  data 
provider  Reuters  America  Inc. 

Reuters  has  rolled  out 
Siebel  Systems  Inc's  CRM  ap¬ 
plications  internally  and  is 
now  looking  to 
provide  CRM 
functionality  to 
fmanciai  advisers 
who  use  Reuters 
data.  But  if  CRM 
tools  are  provid¬ 
ed  as  stand-alone 
applications, 
many  users  aren't 
going  to  bother 
to  launch  them. 

Kaplan  said. 

With  that  in 
mind,  he  added. 

Reuters  plans  to  use  Web  ser¬ 
vices  integration  technology 
developed  by  CRM  vendor 
Onyx  Software  Corp.  in  Belle¬ 
vue,  Wash.,  to  develop  cus¬ 
tomizable  application  screens 
that  present  CRM  capabilities 


tion  out  there  already.”  he 
said.  ”If  it’s  ignored  and  not 
enforced,  it  doesn't  do  us  any 
good.” 

There  is  much  skepticism 
that  new  taws  will  curb  spam, 
because  finding  the  roost 
egregious  spammers  is  diffi¬ 
cult.  “People  are  setting  up 
dummy  corporations  and  fly- 
by-night  operations,”  said 
Stephen  Winkelman,  an  Inter¬ 
net  attorney  at  Fennemore 
Craig  PC  in  Phoenix 

Accompanying  the  push  for 
laws  are  efforts  to  create  stan¬ 
dards  for  regulating  e-mail 

The  ePrivacy  Group  in 
Philadelphia  is  developing 
open-standards,  machine- 
readable  technology  that  sets 
minimum  principles  for  en¬ 
suring  that  an  Internet  service 
provider  doesn't  filter  a  digi¬ 
tally  signed  message  from  a 
business. 

Filtering  sometimes  screens 
out  too  much  information. 


alongside  its  ftnancial  data. 
That  way.  ftnancial  advisers 
won’t  even  know  they’re  using 
the  technology,  Kapl^  said. 

Fairchild  SemicMMluctor  In¬ 
ternational  Inc.  is  using  a  bot¬ 
tom-up  strategy  on  its  CRM 
project  by  getting  feedback 
from  end  users  after  each  roll¬ 
out  of  a  tool  said  ntsedra 
Bond,  lead  strategist  (or  sales 
and  marketing  at  the  South 
Portland,  Maine-based  maker 
of  electronics  products. 

Even  sa  the  company  is 
moving  slowly. 

Fairchild  began 
rolling  out  Peo- 
pleSoft  Inc.'s 
sales  force  au¬ 
tomation  soft¬ 
ware  early  last 
year.  More  than 
350  end  users  are 
live  on  the  soft¬ 
ware  now,  but 
Bond  said  it's  ex¬ 
pected  to  take  up 
to  three  years  to 
complete  the 
project.  “We're  taking  a  sniper 
vs.  a  shotgun  approach.”  she 
explained. 

The  company  also  is  using  a 
combination  of  techniques  to 
encourage  use  of  the  software. 
Bond  noted.  On  one  hand,  it’s 
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Canning  Spam 


said  Vincent  Schiavone,  the 
company's  presidenL  ”We 
don't  see  a  way  where  you  can 
ftx  e-mail  with  (be  current 
protocol”  be  said.  I 


giving  sales  workers  some 
flexibility  in  the  way  they  use 
the  CRM  loob  after  a  mini¬ 
mum  amount  of  required  cus¬ 
tomer  data  b  entered  into  the 
system.  But  use  of  the  soft¬ 
ware  b  being  tracked  and  b 
required  for  compensation.  If 
conqnnies  treat  CRM  projects 
solely  “as  a  technical  imple- 
mentatimt  you're  going  to 
fiul”  Bond  warned. 

starting  Smal 

Because  of  management  con¬ 
cerns  about  the  challenges  of 
implementing  CRM  software. 
American  Ttans  Air  Inc. 
(ATA)  also  started  small  ac¬ 
cording  to  Robert  EUbon.  di¬ 
rector  of  e-business  and  net- 
woik  services  at  the  Indi- 
anapoUs-based  airline. 

Since  fuly.  ATA  has  been 
rolling  out  a  set  of  data  ware¬ 
housing  and  CRM  analytics 
toob  developed  by  NCR 
Corp.'s  Teradau  <^bion  for 
use  in  such  areas  as  managing 
e-mail  marketing  campaigns 
for  its  frequent-flier  program. 

But  the  Teradau  software  b 
still  being  used  by  only 
10  end  users.  Ellison  said.  '*We 
have  been  taking  baby  steps.” 
be  noted.  ”ln  fact,  it  was  prefo- 
ably  more  like  a  crawl”  I 
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CRM  Projecte  Continue  to 
Inspire  Caution,  Users  Say 
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SCO  Sues  IBM 
For  SIB  Over  Unix 

The  SCO  Group  fited  a  lawsuit  in  a 
Utah  state  court  charging  IBM 
with  breaching  a  Unix  license 
agreement  and  stealing  trade  se¬ 
crets.  Undon.  Utah*based  SCO. 
which  owns  the  source  code  for 
Unix,  claimed  that  IBM  is  illegaily 
using  Unix  features  as  part  of  its 
Linux  services  business.  SCO  is 
seeking  damages  of  at  least 
$1  billion  and  threatening  to  re¬ 
voke  IBM's  Unix  license.  An  IBM 
spokesman  said  the  suit  "is  full  of 
bare  allegations  and  no  facts.” 


IBM  Builds  Data 
Workload  Tools 

In  other  IBM  news,  the  company 
announced  three  tools  designed 
to  let  systems  aulomabcaliy  shift 
computing  resources  to  meet  in¬ 
creases  in  data  processing  de¬ 
mands.  The  new  tools  initially  will 
work  with  the  latest  versions  of 
IBM's  D62  database  and  Web¬ 
Sphere  application  server  soft¬ 
ware.  IBM  said  Hs  fT  services  unit 
also  plans  to  use  the  technology 
as  part  of  Its  offerings. 


Manufacturing  Rrms  Expect 
Modest  IT  Budget  Increases 

F.mphysis  is  on  integration,  supply  Mivnifiimrnnt* 

chain  and  ciistomer-tacing  pmjects  rTSpendbig  ■ 

- PlaiBk)r2(X>3  ; 


av  jaiKUMAR  VIJAVAN 

Inicgraiion  ol'Kick-t-nJ  and 
planJ-tliH»r  appliauions.  as 
well  as  projects  ihat  build  bel¬ 
ter  links  with  suppliers  and 
cusKtmers.  is  where  truiny 
nianufaciurini:  companies  will 
focus  their  IT  spending  this 
year. 

IX'spite  the  ongt>ing  reces¬ 
sion.  mt*st  manufacturers  ex- 
pe-ct  their  IT'  spending  to  in¬ 
crease  modi.-stly  this  year,  ac¬ 
cording  to  the  results  of  .1  sur¬ 
vey  relea.sed  by  the  National 
Association  of  Manufacturers 
I  NAM)  at  last  week’s  National 
Manufacturing  Week  trade 
show  here. 

Nearly  70'‘i»  of  the  -MX.)  main¬ 
ly  small  and  medium-si/e 
manufacturers  surveyed  said 
they  expect  IT  budgets  to 
grow  by  up  to  5'Si  »>\er  last 
year.  Another  8*'..  said  their  IT 


spending  is  expected  to  grow 
between  5%  and  UW. 

Most  of  the  spending  will  be 
directed  at  improving  cus¬ 
tomer  linkages  as  well  as 
plant-floor  and  supply  chain 
efficiencies,  said  Jerry  Jasi- 
nowski.  president  «»f  the 
Washington-based  NAM. 

.Additionally,  a  lot  of  the  re¬ 
sources  that  manufacturing 
companies  acquired  to  deal 
with  the  Y2k  rollover  .tre 
rapidly  becoming  «>bsoleie  and 
due  for  revamps  this  year.  Iasi- 
nowski  said. 

On  Hold 

“We  were  really  on  hold  last 
year  Hut  this  year,  we  are  ex- 
pe-eting  at  least  a  5'S'  increase 
in  rr  spending."  said  Tony 
Kaimondo.  CEO  of  Bchlen 
Manufacturing  Co.,  a  supplier 
of  building  material  in  Colum¬ 
bus.  Neb.  One  of  the  bigger 


15%  growth 
m  rr  spending. 


Expect 
mcreasesof 
5.1%  to  10% 

NOTE:  NumOei^  4 
iltirwlidd  JOlb  3%  Expect 
•00“t)  (Jue  10  spending  to  grow 
-cjniing  by  10.1%  to  15%. 


projix'ts  being  implemented 
by  Hchlen  this  year  is  a  bar¬ 
code  system  that  will  allow 
the  collection  of  real-time  data 
on  products  being  assembled 
on  the  shop  flotrr.  Such  proj¬ 
ects  are  "key  to  unlocking  pit*- 
duciivity  gains."  he  said. 

"A  down  economy  is  the 
perfect  time  to  invest."  said 
David  Krauihamer.  director  of 
information  systems  at  Ad¬ 


vanced  Fibre  Communications 
Inc-.  a  manufacturer  of  tele¬ 
communications  equipment  in 
Petaluma.  Calif.  "My  budget  is 
up,  particularly  capital.  We're 
spending  money  on  customer 
collaboration,  demand  plan¬ 
ning.  portfolio  management 
and  a  human  resources  [sys¬ 
tem]."  said  Krauthamer.  The 
company  is  also  implementing 
a  project  to  significantly  reduce 
the  amount  of  fiber  it  has  to 
run  for  data  communications. 

Others?  such  as  IMC  Global, 
a  S2  billion  Lake  Forest.  III.- 
based  manufacturer  of  phos¬ 
phates.  expect  capital  expen¬ 
ditures  10  remain  flat  com¬ 
pared  with  last  year.  Even  st>. 
projects  that  help  IMC  reach 
out  to  customers  and  suppli¬ 
ers  in  a  more  efilcient  manner 
will  receive  priority,  said  Doug 
IVrtz,  CEO  of  the  ettmpany. 

Such  plans  come  at  a  time 
when  three-fourths  of  NAM 
members  say  U.S  manufactur¬ 
ing  is  in  crisis.  Rising  operat¬ 
ing  costs  in  an  environment 
where  growth  and  export  sales 
arc  stalled  arc  the  causes,  ac¬ 
cording  to  lasinowski. 

“These  arc  certainly  the 
mtist  uncertain  times  for  man¬ 
ufacturing  in  modern  econom¬ 
ic  history,"  he  said.  I 


SAP  Late  With  Apps 
For  Small  Business 

SAP  AO  added  five  industry-spe¬ 
cific  versions  of  busirwss  applica¬ 
tions  it  has  tailored  for  small  and 
midstze  cofflpanias.  But  the  com¬ 
ply  confirmed  that  a  planned 
U.S.  rolout  of  general-purpose 
applications  for  those  users  has 
been  delayed.  SAP  said  it  expects 
the  mySAP  Business  One  soft¬ 
ware.  which  had  been  due  late 
last  year,  to  be  ready  withut  the 
next  few  months. 


Short  Takes 

MICROSOFT  CORP.  released  a 
beta-test  version  of  a  corporate 
instant  messaging  and  real-time 
colaboration  toot,  code-named 
Greenwich. . . .  GROOVE  NET¬ 
WORKS  INC.,  a  software  vendor  in 
Beverly.  Mass.,  said  it  received 
S36  mMion  in  new  financing  but 
laid  off  20Ah  of  its  workers. 


Microsoft  Expands  Its 
Office  Family  by  Two 


BV  CAROL  SLIWA 

Micn*soft  CUirp.  U)da>  will  be¬ 
gin  dixiribuling  a  beta  evalua¬ 
tion  kit  of  its  newly  named 
Ofilcc  System  product  set. 
which  includes  two  new  addi¬ 
tions  to  the  farnily. 

One  new  tiffering.  called 
InfoPath.  allows  users  to  cre¬ 
ate  and  complete  XML-basL'd 
forms  and  submit  them  to 
XMI. -enabled  systems.  The 
other,  OneNotc,  is  a  digital 
note-taking  application  that 
can  be  used  on  a  laptop,  desk¬ 
top  or  Tablet  PC. 

The  beta  evaluation  kit  also 
includes  the  five  products  that 
arc  part  of  the  Office  2003 
suite;  Word.  Excel,  Outlook, 
INawerPoini  and  Access. 

Also  shipping  with  the  kit 


are  the  Frontpage  Web-site 
creation  and  management 
KH>1;  the  Office  Publisher 
product,  which  aims  to  help 
uH’rs  create  marketing  materi¬ 
als;  Windows  SharePoint  Ser¬ 
vices.  an  engine  for  creating 
Web  sites  that  enable  informa- 


NEW  PRODUCTS 


I  Microsoft 
I  (.Ift'icc  S\'steni 

iNfUPAtH  Apgkcahonihalal- 
lows  usan  to  creile  and  com¬ 
plete  XM.-haMd  forms  and  sub- 
mil  dwm  to  XML-enabM  sys- 
leim  and  busincBS  processes. 

ONOrOtf  Oigil^ note-taking 
product  intenM  to  help  users 
organoe  and  seerch  their  notes. 


lion  sharing  and  document 
cullaboratiun:  and  SharePoint 
Portal  Server  2.0,  which  tnie- 
graies  information  from  vari- 
ims  systems  through  single 
sign-on  and  enterprise  appli¬ 
cation  integration  capabilities. 

Dan  Leach,  a  lead  product 
manager  in  Microsoft's  infor¬ 
mation  worker  product  man¬ 
agement  group,  said  the  set  of 
products  is  now  referred  to  as 
the  Microsoft  Office  System  to 
reflect  the  comprehensive  set 
of  productivity  application.s. 
servers  and  services  designed 
to  connect  pet>ple  and  organi¬ 
zations  to  their  information 
and  back-end  systems. 

1'his  is  the  second  beta  of 
OfTiec  System,  and  Leach  said 
it  will  be  the  final  one.  though 
there  potentially  could  be  “re¬ 
lease  candidates"  before  the 
final  release  of  the  priHluct  set 
this  summer 

New  features  that  weren’t 
part  of  the  first  beta,  which 


was  released  in  Ocli»bcr.  in¬ 
clude  junk-mail  filtering  and  a 
business  contact  manager  in 
Outlook  200.3.  as  well  as  infor¬ 
mation  rights  management 
(IRMlcapabililies  that  enable 
users  to  L-oniix)l  access  to  dtK- 
uments  they  create  with  Of¬ 
fice  products.  Leach  said. 

Recipients  of  protected  doc¬ 
uments  will  HL-ed  client  soft¬ 
ware  enabled  with  Microsoft's 
IRM  viewing  capability  in  or¬ 
der  to  open  them.  Leach  said, 
('hher  major  changes  in  (he 
new-  version  of  Office  include 
support  for  XML  and  Web  ser¬ 
vices.  he  said. 

Microsoft  Office  System 
pricing  has  yet  to  be  an¬ 
nounced.  Micros4)ft  first  post¬ 
ed  the  st-cond  beta  <»f  Office 
2003  to  its  developer  network 
site  last  month,  only  to  pull 
the  software  a  few  hours  later, 
claiming  that  the  product 
wasn't  ready  and  that  the  post¬ 
ing  was  inadvertent.  • 
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States  Rush  to  Pass 
Laws  to  Fight  Spam 


C'ongR'ss  urged  to  preempt  states  b\ 
adopting  a  national  antispam  nile 


BY  THt  KN1»  of  this 

year,  ail  50  stales  may 
have  antispam  laws, 
and  Congress  could 
also  act  to  adopt  a  national 
law.  Lawmakers  have  never 
been  under  greater  pressure 
to  take  action  to  fight  spam. 
But  there’s  little  hope  that  leg¬ 
islation  will  bring  IT  man¬ 
agers  much  relief. 

So  far.  26  stales  have  adopt¬ 
ed  spam  laws  that  do  things 
such  as  making  forged  address 
headers  illegal.  Other  laws  re¬ 
quire  that  '■ADV."  short  for  ad¬ 
vertisement.  be  included  in 
the  subject  line  of  unsolicited 
commercial  e-mail. 

Emily  Hackett.  state  policy 
director  of  the  Internet  Al¬ 
liance  in  Washington,  which 
represents  some  lai^e  Internet 
service  providers,  said  states 
without  an  antispam  law  w  ill 
soon  have  one.  "There  isn’t 
any  opposition  to  it.''  she  said. 

Marketing  Troubled 

But  the  slate  bills  are  tit»u- 
bling  for  the  marketing  indus¬ 
try’.  Some  allow  lawsuits 
against  spammers  that  violate 
posted  policies,  which  scares 
companies  that  use  unsolicit¬ 
ed  e-mail  to  prospect  for  cus¬ 
tomers.  There  are  also  states 
eyeing  a  “dtvnot-spam"  list 
similar  to  do-noi-call  telemar¬ 
keting  lists. 

Congress  is  being  pushed  to 
act,  in  part  to  preempt  slate 
laws  with  a  national  one.  The 
Direct  Marketing  Association 
(DMA)  in  New  York,  long  an 
opponent  of  any  spam  regula¬ 
tion.  is  now  backing  a  federal 
law  to  end  the  hodgepodge  of 
state  laws.  No  bills  have  been 
introduced  yet,  but  that’s  ex¬ 
pected  to  change. 

“It's  very  diffjcuh  to  keep 
track  of  varying  state  laws," 


said  Louis  Mastria,  a  DMA 
spokesman,  who  added  that 
state  laws  arc  ineffective  be¬ 
cause  a  marketer 
doesn’t  necessarily 
know  the  physical 
addres-s  of  a  person 
being  Mkliciled. 

The  state  laws  "set 
up  legitimate 
e-mail  marketers 
for  a  black  eye."  he  said. 

Another  major  proptment  of 
action  is  Mienwoft  Corp.. 
which  last  month  ran  ads  in 
newspapers  saying  that  "new. 


NEW  TOOLS 

Cofpofale  opl>on5  tor  lighlpng 
sparri  are  growing  Readrnore 
at  our  Web  Site 
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strong  laws  are  needed"  to 
combat  spam.  The  U.S.  Feder¬ 
al  Trade  Commission  is  plan¬ 
ning  a  three-day  forum  on 
spam  next  month,  an  event 
that's  seen  as  a  pivotal  gather¬ 
ing  of  all  sides  in  the  debate. 

The  success  (»f 
any  legislation  will 
depend  on  en¬ 
forcement.  said 
Michael  Redman, 
information  sys¬ 
tems  director  at 
Nicholson  Manu¬ 
facturing  Co.  in  Seattle.  W.ish- 
ington  has  an  antispam  law. 
but  Redman  said  he's  seen  lit¬ 
tle  impact  fn>m  it.  "There  is  a 
substantial  amount  of  legisla¬ 


tion  t>ut  there  already."  hi' 
said.  “If  it’s  ignored  and  not 
enforced,  it  dm'sn'l  d*i  us  any 
good." 

ITierc  is  much  skepticism 
that  now  laws  will  curb  spam, 
because  finding  the  mitst 
egregious  spammers  is  diffi¬ 
cult.  "Pciiple  are  selling  up 
dummy  corporations  and  fly- 
by-night  operations."  said 
Stephen  Winkelman.  an  Inter¬ 
net  attorney  at  Fennemore 
Craig  K:  in  Ph«K'ni\. 

Accompanying  the  push  for 
laws  are  efforts  to  create  stan¬ 
dards  for  regulating  e-mail. 

The  el’rivacy  Group  in 
Mtiladelphia  is  developing 
open-standards,  machine- 
readable  technology'  thiii  sets 
minimum  principles  far  en¬ 
suring  that  an  Internet  ser\’ice 
prvwider  doesn't  filler  a  digi¬ 
tally  signed  message  from  a 
bu.siness. 

Filtering  sometimes  scre'ens 
out  tm)  much  information. 


CnmiTHVNlI  HircIM.SQU 


Canning  Spam 


said  Vincent  SchiaWme.  the 
company's  president.  "Uv 
don’t  see  a  way  where  you  cai 
fix  L'-matl  w  ith  the  current 
proiikcol."  he  satd.  • 


CRM  Projects  Continue  to 
Inspire  Caution,  Users  Say 


l-caiing  tailiia’.  I 
conipiinics  roll  out 
softwaa  slo\vl\’ 


Despite  several  years  of  tech¬ 
nology  evolution,  rollouts  of 
customer  relationship  man¬ 
agement  (CRM)  software  still 
pose  challenges  that  are  caus¬ 
ing  many  companies  to  pro¬ 
ceed  with  caution. 

Corporate  IT  managers  con¬ 
tinue  to  face  considerable  pit¬ 
falls  on  CRM  installations,  ac¬ 
cording  to  Scott  Nelson,  a 
Gartner  Inc.  analyst  who 
spoke  at  the  consuhing  firm's 
CRM  Summit  Spring  2003 
ct>nfcrence  here  last  week. 
Nelson  said  Gartner  last  year 
surveyed  hundreds  of  compa¬ 
nies  that  have  installed  CRM 
applications,  and  about  SS%  i>f 
the  respondents  characterized 
their  rollouts  as  failures. 

Several  conference  atten¬ 
dees  acknowledged  that  adop¬ 
tion  of  CRM  tools  by  end 
users  can  be  very  slow.  Many 


users  are  interested  in  CRM 
eapabiliiies.  but  the  technolo¬ 
gy  “causes  fear."  said  Shawn 
Kaplan,  director  of  m.irketing 
and  business  development  at 
New  York-based  financial  data 
pitivider  Reuters  America  Inc. 

Reuters  has  rolled  out 
Siebol  Systems  Inc.'s  CRM  ap¬ 
plications  internally  and  is 
now  liHiking  to 
provide  CRM 
funaionality  to 
financial  advisers 
who  use  Reuters 
data.  But  if  CRM 
tools  arc  pntvid- 
cd  as  stand-alone 
applicatioits. 
many  users  aren’t 
going  to  bi>iher 
to  launch  them, 

Kaplan  said. 

With  that  in 
mind,  he  added. 

Reuters  plans  to  use  Web  ser¬ 
vices  integration  technoiogy 
developed  by  CRM  vendor 
Onyx  Software  Corp.  in  Belle¬ 
vue.  Wash.,  to  develop  cus¬ 
tomizable  application  screens 
that  present  CRM  capabilities 


UNUSED  SOFTWARE 

42% 

of  the  CRM 
en(i-user 
licenses  bought 
last  year  aren't 
being  used. 


alongside  its  financial  data. 
lltat  way.  financial  advisers 
wtm't  even  know  they’re  using 
the  technology,  Kaplan  siiid. 

Fairchild  Semiconductor  In¬ 
ternational  Inc.  is  using  a  boi- 
titm-up  strategy  on  its  CRM 
project  by  getting  feedback 
from  end  users  after  each  roll¬ 
out  of  a  nxil.  said  Phaedra 
Bond,  lead  strategist  for  sales 
and  marketing  at  the  Siiuih 
Portland.  Maine-based  maker 
of  electronics  pixnlucts. 

Even  sii.  the  company  is 
moving  slowly. 

Fairchild  began 
rolling  out  I*eo- 
plcSoft  Inc.’s 
sales  force  au¬ 
tomation  soft¬ 
ware  early  last 
year.  More  than 
.\50  end  users  arc 
live  on  the  soft¬ 
ware  now.  but 
Bond  said  it's  ex¬ 
pected  to  take  up 
ro  three  years  to 
complete  the 

pr«)iect.  "We’re  taking  a  sniper 
vs.  a  shotgun  approach,"  she 
explained. 

The  company  also  is  using  a 
combination  of  techniques  to 
encourage  use  of  the  software. 
Bond  noted.  On  one  hand,  it's 


giving  sales  workers  some 
rtesibility  in  the  way  they  use 
the  (^KM  tools  afts'r  a  mini¬ 
mum  amtmnt  t)f  required  cu.s- 
tomer  data  is  entered  into  the 
system.  Bui  use  of  the  s*>ft- 
ware  is  being  ir.Tckcd  and  is 
required  for  compensation.  If 
ct'mpanies  ttvat  ('RM  projects 
siTlely  “as  a  technical  imple¬ 
mentation.  you’re  giving  ti> 
fail."  Bi'od  warned. 

Starting  Small 

Because'  itf  management  con¬ 
cerns  aNtui  the  challenges  of 
implenx'nting  (^RM  software, 
American  Traas  Air  Inc. 
tATA)  also  started  small,  ac¬ 
cording  to  Robert  Fll’stkn.  di¬ 
rector  of  c-business  and  net¬ 
work  services  at  the  Indi- 
;  anapolis-b.iscd  airline. 

Since  July.  ATA  has  been 
n>lling  out  a  si't  of  data  ware- 
hoitsing  and  CRM  analytics 
,  tiH)|s  developed  by  NCR 
I  CaTrp.’s  Teradaia  division  for 
I  use  in  such  areas  as  managing 
e-mail  marketing  campaigns 
for  its  ftvqueni-flier  program. 

But  (he  Tcradata  software  is 
still  being  used  by  only  about 
10  end  users.  Ellison  said.  "Wc 
have  been  taking  baby  steps." 
he  noted.  "In  faa.  it  was  prob¬ 
ably  m«)re  like  a  crawl."  % 
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Bug  Disclosure,  Fix 
Process  Improving 


Sendmail  episode  shows  progress  made 


BV  OAtKUfelAR  VUAVAM 

SEVERAL  USERS  wel¬ 
comed  the  growing 
willingness  of  ven¬ 
dors  and  security  re¬ 
searchers  to  work  together  to 
identiiy  and  fix  software  vul¬ 
nerabilities  in  the  wake  of  last 
week's  disclosure  of  a 
maior  bole  in  a  widely 
used  e-mail  protocol 
Bui  they  also  ex¬ 
pressed  concern  over  the 
practice  by  some  in  the 
security  coramunicy  to  release 
vulnerability  information  to 
certain  users  before  making  it 
available  to  the  public. 

Atlanta-based  security  ven¬ 
dor  Internet  Seoirity  Systems 
Inc.  (ISS)  and  Emeryville. 
Calif-based  Sendmail  Inc.  last 
week  disclosed  the  existence 


of  a  major  buffer-overflow 
vulnerability  in  the  sendmail 
mail-transfer  agent,  which 
handles  more  than  50%  of  all 
Internet  e-mail  traffic. 

ISS.  which  first  discovered 
the  hole  in  early  December, 
said  it  began  in  mid-Ianuary  to 
work  closely  with  the 
National  Infrastruc¬ 
ture  Protection  Cen¬ 
ter  —  now  part  of  the 
U.S.  Department  of  Homeland 
Security  —  to  warn  govern¬ 
ment  and  military  agencies  of 
the  Haw. 

The  sendmail  incident  ex¬ 
emplified  a  welcome  change 
in  attitude  relating  to  vulnera¬ 
bility  discovery,  disclosure 
and  response,  users  said. 

"The  security  community  is 
becoming  more  responsible 


and  is  making  better  decisions 
with  regard  to  when  they 
should  disclose  a  vulnerabil¬ 
ity."  said  Mike  Tindor.  vice 
president  of  network  opera¬ 
tions  at  First  USA  Inc.,  an 
Internet  service  provider  in 
St.  ClairsvUle,  Ohio. 

There  is  a  growing  realiza¬ 
tion  that  "making  a  vulnerabil¬ 
ity'  public  without  a  fix  is  not 
in  the  industry’s  best  interest," 
said  Anthony  DeVoto.  a  Win¬ 
dows  NT  administrator  at  Vol¬ 
vo  Finance  North  America 
Inc.  in  Montvale.  N.J. 

"It's  kind  of  like  a  car  com¬ 
pany  coming  out  on  the  6 
o'clock  news  and  saying  your 
car  is  going  to  blow  up  and 
they  don't  know  how  to  fix  it." 
said  David  Krauthamcr.  direc¬ 
tor  of  'mformaiion  systems  at 
Advanced  Fibre  Communica¬ 
tions  Inc.,  a  Petaluma,  Calif.- 


I  It’s  kind  of 
Mike  a  car  com¬ 
pany...  saying  your 
car  is  going  to  bkm 
up  and  you  don’t 
kiKiwhmtofixiL 

DAVID  KBAUTHAMER.  DtRECTOR 
Of  INfORMATlON  SYSTEMS. 

ADVANCED  FIBRE  COMMUNICATIONS 

based  manufacturer  of  tele¬ 
communications  equipment. 

"I  think  the  software  and  secu¬ 
rity  industry  has  matured  to 
the  point  where  it  is  unaccept¬ 
able  to  pul  customers  in  a  po¬ 
sition  of  such  vulnerability." 
he  added. 

Meanwhile,  software  ven¬ 
dors,  which  continue  to  come 
under  heavy  criticism  for  de¬ 
veloping  bugg>*  products,  are 
getting  "a  little  bit  better”  at 
disclosing  and  responding  to 
bug  reports,  said  Edward  York, 
chief  technology  officer  at  724 
Inc.,  a  Lampoc.  Calif -based 
hosting  provider. 

Groups  such  as  the  Organ!- 


SANS  Institute  Lauds 
Microsoft  Security  Efforts 


Patch  automation, 
security  tests  cited 

BV  JAIKUMAB  VIJAVAH 

Microsoft  Corp.,  loi^  at  the  re- 
criving  end  of  widespread  user 
criticism  for  buggy  products, 
last  week  received  a  rare  pat  on 
the  back  for  its  security  efforts 
ftocn  the  SANS  Institute. 

SANS,  a  research  organiza¬ 
tion  for  systems  administra¬ 
tors  and  security  managers 
in  Betbesda,  Md..  gave  Micro¬ 
soft  awards  for  demonstrating 
leadership  In  three  security 
categories  at  the  Fifth  Nation¬ 
al  Information  Assurance 
Leadership  Conference  in 
San  Diego. 

The  company  won  awards 
for  leadersUp  in  providing  au¬ 
tomated  security  updates;  pro¬ 
viding  security  training  for 
software  developers;  and  pro¬ 
viding  testing  stfftware  for 


security  vulnerabilities. 

Microsoft’s  award  in  the  au¬ 
tomated  updates  category  — 
which  it  shared  with  Linux 
supplier  Red  Hat  Inc.  —  was 
in  recognition  of  the  automat¬ 
ed  patching  service  for  Win¬ 
dows  XP  and  Win¬ 
dows  2000  Service 
Pack  3  and  above. 

Microsoft's  secu¬ 
rity  training  pro¬ 
gram  for  software 
developers  earned 
the  company  its 

second  award.  . 

while  its  extensive  mSNEB,  CIO 


U-Microsaft’ 
and ‘secu¬ 
rity’ 'm  the  same 
sentence  is  usu- 
allyajoke. 


automation  of  iB 
software  testing  process 
snagged  the  third  one. 

The  awards  were  based 
on  criteria  and  feedback  from 
security  administrators  at  IS 
large  institutions  that  SANS 
works  with  on  a  dally  basis, 
said  Alan  Pallet;  director  of  re¬ 
search  at  SANS.  Many  of  those 


%vho  participated  in  the  deci¬ 
sion  process  were  administra¬ 
tors  working  in  organizations 
with  more  than  10.000  sys¬ 
tems.  Paller  said. 

The  idea  of  illuminating 
vendors  who  are  doing  things 
that  arc  industry-leading 
grew  out  of  a  series  of  meet¬ 
ings  with  users  who  were 
complaining  about  vendors 
making  security  hard  [to 
iffiplementj," 
Paller  said. 

Word  of 
Microsoft's 
awards  was 
greeted  with 
mixed  feelings. 

"  'Microsoft' 
and  ‘security'  in 
the  same  sen¬ 
tence  is  usually  a 
foke,"  said  Man  Kesner.  chief 
tcchnoli^  officer  at  Fenwick 
&  West  LLP,  a  Mountain  View, 
Calif.-based  law  firm.  "I  give 
them  a  lot  of  credit  for  making 
security  a  higher  priority,  but  1 
would  like  to  see  a  lot  braer 
fundamental  design  ftom 
them  before  I  start  handing 


out  any  awards."  Kesner  said. 

"1  think  Microsoft  has  made 
great  strides  in  security,"  said 
Paul  Schmehl  adjunct  infor¬ 
mation  security  officer  at  The 
University  of  Texas  at  Dallas. 
They  are  ahead  of  some  of 
the  Unixes  and  at  least  on  par 
with  some  others,  [but]  they 
still  have  a  long  way  to  go." 
he  said 

The  awards  demonstrate 
the  importance  of  looking  at 
factors  other  than  just  total 
bug  count  when  evaluating  a 
vendor’s  security  practices, 
said  Pete  Lindstrom,  an  ana¬ 
lyst  at  Spire  Security  LLC  In 
Malvern,  Pa. 

"Counting  the  number  of 
identified  vulnerabilities 
alone  is  completely  without 
merit."  Lindstrom  said  It’s 
also  important  to  gather  infor¬ 
mation  on  ftictors  such  as  a 
vendor's  training  practices, 
development  processes  and 
bug  tracking  methods,  be  said 

"Sometimes,"  Lindstrom 
said  "Microsoft  gets  a  bum 
rap  just  because  they  are  wbo 
they  are."> 


zation  for  Internet  Safety  arc 
trying  to  propose  standard 
guidelines  for  reporting  and 
responding  to  vulnerability 
information.  And  several  secu¬ 
rity  companies  have  voluntar¬ 
ily  adopted  policies  governing 
the  release  of  vulnerability 
information. 

"The  processes  surrounding 
vulnerability  disclosure  have 
changed  significantly  during 
the  past  few  years  for  the 
community  as  a  whole,"  said 
Thor  Lariiolm,  a  security  re¬ 
searcher  at  PivX  Solutions 
LLC.  a  network  security  con¬ 
sultancy  in  Newport  Beach, 
Calif  Instead  of  making  ad 
hoc  disclosures,  PivX  has  a  30- 
day  grace  period  for  vendors 
to  fix  a  problem  before  the 
public  is  made  aware  of  it 

QuestkxiaUe  Practicss 

Despite  such  progress,  other 
issues  remain,  users  said 

For  instance,  ISS’s  decision 
to  prenotify  several  govern¬ 
ment  and  military  agencies  of 
the  problem  is  understandable 
given  today’s  heightened  secu¬ 
rity  concerns,  users  said.  But  it 
highlights  a  practice  that  can 
encourage  "information  segre¬ 
gation  and  concealment."  said 
Paul  Schmehl  adjunct  infor¬ 
mation  security  officer  at  The 
University  of  Texas  at  DaUas. 

Many  security  organizations 
->■  including  the  CERT  Coor¬ 
dination  Center  at  Carnegie 
Mellon  University  in  Pitts¬ 
burgh  and  ISS  —  routinely  sell 
advance  vulnerability  infor¬ 
mation  to  paying  subscribers. 
Strict  nondisclosure  agree¬ 
ments  govern  such  prenotiH- 
cations,  said  Dan  Ingevaldson. 
a  security  researcher  at  ISS. 

But  "s^e  practice  is  that 
only  the  vendor  should  be  no- 
tilled  [eff  a  flaw]  so  they  can 
test  it  and  create  a  pauii.  Only 
then  should  the  information 
be  made  avaUable  to  anyone 
else,"  said  York.  I 

MKMIM 

A  hador  BM  posM  sendmail  SEptoit  code 
Ms  ton  N  hours  after  pubic  dedosure  d 
thewAieabMy: 
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ISS  abo  raported  a  Snod  wlnerabdiiv 
teiweek: 
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If  you're  busy  monitoring  your  servers, 
who's  watching  your  business? 


Whol  chafangt!  do  you  face  today?  Oeoeising  budgab?  The 
hidiing  po$tibilily  d  downtime?  h's  hard  enough  to  focus  on 
moving  ^ur  business  (orword  when  you're  constonlfy  looking 
over  your  shoulder  to  see  if  ewrylhing  is  up  ond  running 

Besides,  that's  the  fob  of  the  new  HP  Proliont  DITOO  series 
running  Intel*  Xeon'**  h*P  processors  An  odoptive  infrostrvOure 
begins  with  these  HP  ProUont  servers  which  come  equipped 
with  tools  ihot  predict,  self-diognose  and  fix  mony  foult 
conditions.  And  now  wHh  hot-plug  KAIO  memory  exclusively 
from  Hf*  you  con  odd  or  repkxe  DIMMs  without  turning 
your  systems  off.  Both  work  with  the  HP  Proliont  Essentiols 
Foundation  Pock  featuring  Insight  Manager /software  which 
monitors  ond  controls  your  infrosiructure  for  maximum  uptime. 

At  the  end  of  the  doy,  you'll  hove  more  control  over  your 
infrastructure,  help  ovoid  unplanned  downtime  ond  reduce 
overall  mointenonce  costs.  Not  to  mention  freeing  yourself 
up  for  more  importont  things. 

To  leom  how  ProLfont  lorvre  con  bo  o 
port  of  iftojuminng  your  company^  uphmo, 
dewwiood  CMPli  onocsOieo  brief  on  high  oeoiabBt)' 
at  www»hp»cont/go/prolfontl5  or  coN 
1-«00>2t3-6672,  option  S,  and  monlion  code  TPH. 


XEON 


Iho  now  HP  Proliant  DL740 
1  way  with  hot»plug 
KAM)  memory. 

■  Ultrodense  4u  modular  chassis 
with  up  to  eight  Intel*  Xeon"*  MP 
1.5  GHz  or  2.0  GHz  processors 

■  Up  to  64GB  oddressable  memory 

■  Grourtdbreoking  F8  chipset 

•  6-64  bit/HX)  MHz  PCI-X  slots 

■  Integroled  Ughts-Out  Standard 
{iLO|  for  fiemole  Server  A4gmt 


Tho  now  HP  Proliont  Di7«0 
03  S-woy  wMi  hot'phig 
RAID  tnomory. 

-  Up  to  eight  Intel*  Xeon'**  MP 
1.5  GHz  or  2.0  GHz  processors 

■  Up  to  64GB  oddressoble  memory 

■  Groundbraoking  FB  chipset 

■  10-64  bit/100  MHz  PCI-X, 

1-64  bit  33  MHz  slots 

•  Remote  Insight  Lights-Out  Edition  II 
(oplionol)  for  Remote  Server  Mgmi. 


e  2003  HewiM-Pockord  Corr^ony.  M  and  the  Intel  Keen  logo  ore  trodernorkt  or  regislered  Irodetnorki  oi  Mel  Corporotion  er  in  wbudrories  in  die  United  States  ond  odier  countrieL 
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Airlines  Agree  to 
Sell  Worldspan 

WoridspAn  LP.  which  runs  a  com¬ 
puterized  reservations  system, 
said  its  airitne  owners  have 
agreed  to  sell  H  to  two  investment 
ffrms.  Americai)  Airlirtes  inc.. 
Delta  Air  Lines  Inc.  and  North¬ 
west  Airlines  Inc.  will  seH 
Worldspan  to  a  new  company  set 
up  by  Citigroup  Venture  Capital 
Equity  Partners  LP  In  New  York 
and  Teadiers'  Merchant  6anii 
in  Toronto. 


Microsoft  Signs  App 
Lease  Services  0^ 

MicrosoH  Corp.’s  IT  financing  unit 
amounced  a  deal  to  offload  lease 
contract  management  services 
for  users  of  Hs  business  applica- 
lions  to  another  company.  The 
leasing  functions  will  now  be  han¬ 
dled  by  Oe  Lage  Landen  Financial 
Services  Inc.  m  Wayne.  Pa.  The 
Mterosoh  CiVHtal  C^.  unit  said 
H  will  continue  to  offer  financing 
to  corporate  users  and  to  small  or 
midsize  companies. 


Peregrine  Lowers 
Revenue  by  $509M 

Peregrine  Systems  Inc.  restated 
ib  financial  results  for  the  three 
ftscal  years  from  April  t999  to 
March  2002,  chopping  the  rev¬ 
enue  R  had  reported  by  S509  mil- 
Ron.  That  reduced  the  originai 
three-yoar  total  of  S1.34  billion  by 
38%.  Peregrine,  a  San  Diego- 
based  vendor  of  asset  manage¬ 
ment  software,  said  about  S2S9 
million  was  "reversed  for  nonsub* 
stantiated  transactions.** 


Short  Takes 

INTEL  COflP.  this  weak  ptens  to 
launch  a  new  foray  into  the  note¬ 
book  PC  market  by  announcmg 
sii  moMe  processors  under  tfw 
name  Pentium  M _ SUN  MI¬ 

CROSYSTEMS  me.  said  an  open- 
setffce  group  that's  developing 
its  JXTA  peer-to-peer  computing 
software  has  released  an 


MARK  HALL  •  ON  THE  MARK 

Vendors  Scramble  to  Fill 
Web  Services  Hole . . . 

...  in  application  management,  which  could  pose  a  serious  problem  to 
companies  rolling  out  Web  services-based  software.  Oded  Noy.  CTO 
at  Path  Communications  Inc.  in  Marina  Del  Rey,  Calif.,  worries  "that 
all  the  coding  errors  we  used  to  catch  at  compile  time,  we’re  now 
going  to  catch  at  runtime  in  Web  services."  Hewlett-Packard's  Open- 
View  group  has  addressed  the  issue  by  launching  its  Web  Services 

Until  then,  developers  of  Web  services 
will  have  to  do  the  w^  themselves  to  man¬ 
age  applications  for  things  such  as  au- 


Management  Organization.  According  to 
its  CI  O.  Al  Smith,  the  move  is  both  defen¬ 
sive  and  offensive.  In  the  former  category. 
HP  secs  companies  such  as  Path  fK>ten- 
tiall>’  stealing  away  OpenView  business. 
And  Smith  points  to  recent  venture  capi¬ 
tal  investments  in  Web  services  manage¬ 
ment  start-ups  such  as  AmberPoini  Inc. 
in  0.akland.  Calif.,  and  Flamenco  Net¬ 
works  Inc.  in  Alpharetta.  Ga.,  as  proof 
that  this  will  be  a  hot. 
competithr  market.  (Of 
course,  venture  capitalists 
also  showed  their  genius  by 
pouring  millions  inlo  %ls.- 
com  and  Webvan.)  In  the 
offensive  category,  he 
clainus.  ‘  we  can  extend 
the  definition  of  what  is 
management."  Smith 
thinks  the  lack  of  Web 
services  management 
standards  and  tools  has 
dampened  its  adoption 
rate  among  users.  The 
lack  of  management  stan¬ 
dards  for  Web  services  is 
finally  being  addressed 
(see  story  K-lnwl.  but  the 
standards  committee  will 
probably  take  a  v'car  to 
complete  its  first  draft. 


Sloragp  manag^menl  gels  a 
lift  today  from 

10  Boston  wilhihe 
release  of  its  active  storaoo 
nianagemeni  pfodocl,  Astnjni 
15  T)'*' iH'W  version  incloiJes 
support  'n*  Mrcfosoft  ti 
change  2000.  Sybase  Inc 
databases  and  tocati/aimn  fnr 
German  and  french  versions  of 
Uni»  and  Window.": 

Alameda.  Calil.,  vvill  announce 
this  weoh  that  d  has  landed  a 
deal  to  manage  the  data  moiu- 
lormg  of  the  world's  largest 
offshore  wind  farm  .along  the 
coast  of  Denmark. 


rhentication.  performance  and  service 
le\  el  agreements.  If  the>-  think  of  them 
at  all.  "Management  is  not  something  de¬ 
velopers  thiri  of.  It's  an  afterthought 
when  people  write  apps."  Smith  laments. 
■  That’s  why  you  don’t  need  a  developer 
to  deploy  the  latest  version  of  the  Path 

Application  Manager,  or 
P.A.M.  3.5,  which  ships 
today.  According  to 
Path’s  Noy.  sysadmins 
can  do  it  after  an  appli¬ 
cation  is  in  production. 
He  claims  PAM.  .3.5’s 
software  behavior- 
recognition  features 
should  catch  many  man¬ 
agement  problems  in 
Web  services  and  other 
applications.  Among  the 
new  features  in  P.A.M. 

3.S  arc  controls  that  can 
identify  Ume-of-day,  llme- 
oHnorrth  and  (ime-of-year 
fluctuations  in  any  pro¬ 
gram.  •  Once  those  Web 
services  get  written  and 
widely  deployed  —  man¬ 
aged  or  otherwise  —  few 


people  have  the  slighest  clue  about  how 
they  will  affect  network  performance. 
The  engineers  at  Redline  Networks  Inc. 
in  Campbell,  Calif.,  have  readied  for  de¬ 
livery  this  week  the  E/'X  3250  Enterprise 
Accelerator  that  adds  compression.  iMd 
balancing  and  security  for  Web  servers  and  in¬ 
side  the  firewall.  CEO  Roy  lohnson  argues 
that  some  Web  scrviccs-based  applica¬ 
tions  will  require  very  large  data  struc¬ 
tures  or  interaction  among  lots  of  differ¬ 
ent  Web  services,  putting  extra  loads  on 
Web  servers  and  killing  their  perfor¬ 
mance  —  hence  the  3250.  Redline  Vice 
President  of  Engineering  Bill  Crane 
boasts  that  the  3250’s  protocol  scrubbir^ 
and  Secure  Siockets  Layer  certificates  for 
road  warriors  improvos  socurity  by  protect¬ 
ing  Web  servers  frm  buffer  overflows  and 
unauthorized  users,  a  Open  VMS  users 
cheered  when  HP  said  it  had  an  tl-year  life 
plan  for  the  venerable  operating  system.  And 
on  March  18.  they  can  let  loose  a  small 
wIhk>p  for  the  general  availability  of  Ver¬ 
sion  6.2  of  Sight  Line  Open  VMS  Power 
Agent  from  Fortcl  Inc.  in  Fremont,  Calif. 
The  performance  monitoring  and  report¬ 
ing  tool  will  be  able  to  handle  OpenVMS 
clusters  and  distinguish  among  opera¬ 
tional  diflerenccs  during  different  work¬ 
ing  hours.  ■  Whatever  your  views  on  the 
looming  war  with  Iraq.  Ivan  Eland,  direc¬ 
tor  of  the  newly  created  Center  for  l*cace 
and  Liberty  at  The  Independent  Institute 
think  tank  in  Oakland,  suggests  that  IT 
may  be  at  the  center  of  an  Iraqi  war  strategy 
because  Saddam  Hussein  learned  from 
Vietnam.  Lebanon  and  Somalia  that  ’'the 
Achilles'  heel  of  the  American  military 
fuggemaut  is  U.S.  public  opinion."  Cyber- 
attacks  would  be  a  likely  way  to  under¬ 
mine  wavering  U.S.  support  for  the  war. 
He  adds,  "It  is  difficult  to  say  how  suc¬ 
cessful  the  Iraqis  would  be,  but  they  have 
had  more  than  a  year  of  Uii.  blustering 
to  put  a  plan  into  action."  So.  take  a  little 
extra  time  this  week  to  secure  your 
systems.  I 


Web  Services  Management  Standard  Sought 


BT  MATT  HAMBLEN 

More  than  a  dozen  IT  vendors 
last  week  said  they  plan  to 
work  together  to  develop  a 
standard  way  to  manage  Web 
services  technologies  used  in 
distributed  applications. 

The  list  of  participating 
companies  includes  systems 
vendors,  such  as  IBM.  Hew¬ 
lett-Packard  Co.  and  Sun  Mi¬ 
crosystems  Inc.,  plus  develop¬ 
ers  of  management  tools,  such 
as  BMC  Software  Inc..  Com¬ 


puter  AsMKiates  International 
Inc.  and  Novell  Inc..  acc»>rding 
to  a  statement  by  the  Organi¬ 
zation  for  the  Advancement  of 
Structured  Information  Stan¬ 
dards  (OASIS)  consortium  in 
Billerica.  Mass. 

Microsoft  Corp.  wasn’t  on 
the  list.  A  Microsoft  official 
said  Web  services  manage¬ 
ment  is  an  important  topic  but 
added  that  the  company  has 
decided  nut  to  join  the  OASIS 
effort  at  this  point. 


“.Simply  put,  management  is 
the  ftext  major  barrier  to  main¬ 
stream  Web  services  adoption." 
said  HP  CEO  Carly  Fiorina  dur¬ 
ing  a  speech  at  BEA  Systems 
Inc.'s  eWorld  conference  in  Or¬ 
lando.  Fiorina  also  said  HP  has 
added  Web  services  manage¬ 
ment  tools  to  its  OpenView 
software  and  created  deploy¬ 
ment  and  management  con¬ 
sulting  programs  for  Java-based 
Web  services  applications. 

OASIS  said  the  new  Web 


Services  Distributed  Manage¬ 
ment  (WSDM)  technical  com¬ 
mittee  it’s  setting  up  will  wotk 
with  other  standards  bodies, 
including  the  World  Wide 
Web  Consortium  and  Distrib¬ 
uted  Management  Task  Force 
Inc.  in  Portland,  Ore. 

Jason  Bloomberg,  an  ana^-si 
at  ZapThink  LLC  in  Waltham. 
Mass.,  said  the  WSDM  com¬ 
mittee  might  be  able  to  pro¬ 
duce  a  standard  within  a  year. 
Microsoft's  absence  isn’t  that 
significant  for  now,  since  it 
could  adopt  the  standard  once 
it's  published,  he  said,  k 
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AHnes  Agree  to 
SelWoridspan 

WorldipM  IP.  ivMeh  nm  •  com* 
pwtorind  roorvatiora  systom. 
aW  Mi  aMm  oimari  iUM 
agraod  to  mI  R  to  t«D  Invostnmrt 
AiMricM  AMton  Inc.. 
DtotoAirLJMclnc.MdNorth* 
wwIAHm  Inc.  sail 
WorMipnn  to  «  nnw  company  set 
up  by  CMiroiip  ^fcnlure  CapRal 
EtpiMy  Partners  LP  in  New  tbrk 
and  Tnacbera' Msrchwit  Bank 
in  Toronto. 


kAcrosoft  Signs  App 
Lease  Servi^D^ 

MBcroaoA  Corp.'a  IT  Rnncino  unH 
announced  a  deal  to  nflload  lease 
contract  managament  services 
far  oaera  el  Hi  hualneai  appica- 
tions  to  another  company.  The 
laaaineluncIfanswMnowbehan- 
dfad  ^  Da  Laga  Landan  FtoMdal 
Sorvtoas  he.  h  Wayne.  Pa.  Bie 
Mcroaefl  CapNal  Corp.  unM  saM 
M  wRI  continua  to  offer  finandno 
to  eorperato  users  and  to  anal  or 
midsizo  companfas. 


Peregrine  Lowers 
Revenue  by  $509M 

^regrtoe  Systoma  Inc.  restated 
Ms  fhaodai  reeuRs  for  the  throe 
Ifacal  yean  from  Apr1 1999  to 
itarch  2002,  chopping  the  rev- 
enueRhadmportodbySSOffnrih 
Ren.  That  reduced  the  ortghai 
threritoar  total  of  St34  btfon  by 
38%.  ftregrtoa,  a  San  Dfago* 
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Vendors  Scramble  to  Fill 
Web  Services  Hole . . . 

...  in  application  management,  which  could  pose  a  serious  problem  to 
companies  rolling  out  Web  services-based  software.  Oded  Noy,  CTO 
at  Path  Communications  Inc.  in  Marina  Del  Rey,  Calif.,  worries  “that 
all  the  coding  errors  wc  used  to  catch  at  compile  time,  we’re  now 
going  to  catch  at  runtime  in  Web  services.”  Hewlett-Packard's  Open- 
View  group  has  addressed  the  issue  by  launching  its  Web  Services 


Managcmem  Organization.  According  (o 
its  CTO.  AJ  Smith,  the  movu  is  tnth  dufan- 
arvu  end  offeoaive.  In  (be  former  category, 
HP  sees  companies  such  as  Path  poies- 
tially  stealing  away  Open  View  htuiness. 
And  Smith  points  to  recent  venture  capi¬ 
tal  investments  in  Web  services  manage¬ 
ment  start-ups  such  as  AmberPoint  Inc. 
in  Oakland.  Calif.,  and  Flanvcnco  Net¬ 
works  Inc.  in  Alpharetta.  Ga..  as  proof 
chat  this  will  be  a  hot. 
competitive  market.  (Of 
course,  venture  capitalists 
also  showud  their  genius  by 
pouring  mWons  into  ftto.- 
cam  and  Webvan.  1  In  the 
offensive  category,  he 
claims,  “we  can  extend 
the  definition  of  what  is 
management.*'  Smith 
thinks  the  lack  of  Web 
services  management 
standards  and  tools  has 
dampened  its  adoption 
rate  among  users.  The 
lack  of  management  stan¬ 
dards  for  Web  services  is 
finally  being  addressed 
(sec  story  below),  but  the 
standards  committee  will 
probably  cake  a  year  to 
complete  its  Tirst  draft. 


Until  then,  developers  of  Wd)  services 
wfl  ham  to  do  thu  work  thomsulvM  to  man¬ 
age  applications  for  things  such  as  au¬ 
thentication.  performance  and  service- 
level  agreements.  If  they  think  of  them 
at  alL  “Management  is  not  something  de¬ 
velopers  think  of  It’s  an  afterthought 
when  people  write  apps.*  Smith  laments. 
■  That's  t»diy  you  don't  need  a  developer 
(o  deploy  the  latest  version  of  the  Path 

Application  Manager,  or 
PA.M.  3.S,  \d)ich  ships 
today.  According  to 
Path's  No>'.  sysadmins 
can  do  it  after  an  appli¬ 
cation  is  in  production. 
He  claims  Pj\.M.  SSs 
software  behavior- 
recognition  features 
should  catch  many  man¬ 
agement  problems  in 
Web  services  and  other 
applications.  Among  the 
new  features  in  P.A.M. 

3.5  are  controls  that  can 
identify  tima-oHlay,  tkiw* 
oHnontoaito  (lme<of-yBar 
fluctuations  in  any  pro¬ 
gram.  u  Once  those  Web 
services  get  written  and 
widely  deployed  —  man¬ 
aged  or  o^rwLsc  —  few 


people  have  the  slighest  clue  about  how 
they  will  affect  network  performance. 
'The  engineers  at  Redline  Networks  Inc. 
in  Campbell,  (^alif.,  have  readied  for  de¬ 
livery  this  week  the  E/X  3250  Enterprise 
Accelerator  that  adds  compraaNon,  toad 
balancing  and  aacwMy  far  ¥fab  aurmrs  Md  in* 
ahfa  tha  fkawaA.  CEO  Roy  Johnson  argues 
that  some  Web  services-based  applica¬ 
tions  will  require  very  large  data  struc¬ 
tures  or  interaction  among  lots  of  differ¬ 
ent  Web  services,  putting  extra  loads  on 
Web  servers  and  killing  their  perfor¬ 
mance  —  hence  the  3250.  Redline  Vice 
President  of  Engineering  Bill  Crane 
boasts  that  the  32S0's  protocol  scrubbing 
and  Secure  Sockets  L^r  certificates  for 
road  warriors  knpnivM  aucurlty  by  protoct- 
tog  Wab  aarmra  froRi  buffar  omrilowi  and 
unaoffioriiad  umra.  n  Open  VMS  users 

cheered  ulien  HP  said  it  bad  an  tHfav  Ifa 
I  plan  for  tha  vanaraihfaopwBltogsystom.  And 
on  March  18.  they  can  let  loose  a  small 
whoop  for  the  general  availability  of  Ver¬ 
sion  of  SightUne  Open  VMS  Power 

Agent  from  Fonel  Inc.  in  Fremont.  C^tf. 
'The  performance  monitoring  and  report¬ 
ing  tool  will  be  able  to  handle  Open  VMS 
clusters  and  distinguish  among  opera¬ 
tional  differences  during  different  work¬ 
ing  hours.  ■  Whatever  your  views  on  the 
looming  war  with  Iraq.  Ivan  Eland,  direc¬ 
tor  of  the  newly  created  Center  for  Peace 
and  Liberty  at  The  IiKlependent  Institute 
think  lank  in  Oakland,  sttggests  that  IT 
may  ba  at  ffto  CMitor  of  an  Iraqi  ww  itrutogy 
because  Saddam  Hussein  learned  from 
Vietnam,  Lebanon  and  Somalia  that  “the 
Achilles'  heel  of  the  American  military 
iuggemaut  is  U.S  public  opinion.“  Cyber- 
attacks  would  be  a  likely  way  to  under¬ 
mine  wavering  U.S.  support  for  the  war. 
He  adds.  “It  is  difficult  to  say  how  suc¬ 
cessful  the  Iraqis  would  be,  but  they  have 
had  more  than  a  year  of  U.S.  blustering 
to  put  a  plan  into  action.”  So,  take  a  little 
extra  time  this  week  to  secure  your 
systems.  P 


Web  Services  Management  Standard  Sought 


imM  aeffwaru.  said  about  S259 
mWon  WM  'rwMTMd  ter  nonub- 
itanttatod  tranuettons.” 


Short  Takes 

gna  COffP.  Ms  waah  plm  to 
lauDcb  a  aaw  foray  into  tha  note¬ 
book  PC  raarkat  by  announctog 
ail  mobRa  precaaaers  under  Ihs 
nama  pMihan  M. . . .  SUN  Iff- 
CffOSVSFEMS  MC.  laM  an  opart- 
aourco  group  ftafsifouatoptog 
ItoJXTApiorto  poarcominittog 


av  MATT  HAMBLEN 

More  than  a  dozen  IT  vendors 
last  week  said  they  plan  to 
work  together  to  develop  a 
standard  way  to  manage  Web 
services  technologies  used  m 
distributed  applications. 

The  Usi  of  participating 
companies  includes  systems 
vendors,  such  as  IBM.  Hew¬ 
lett-Packard  Co.  and  Sun  Mi¬ 
crosystems  Inc,H  plus  develop¬ 
ers  of  management  tools,  such 
as  BMC  Software  Inc.,  Clom- 


puter  Associates  International 
Inc.  and  Novell  Inc.,  according 
to  a  statement  by  the  Organi¬ 
zation  for  the  Advancement  of 
Structured  Information  Stan¬ 
dards  (OASIS)  consortium  in 
Billerica,  Mass. 

Microsoft  (^rp.  wasn't  on 
the  list.  A  Microsoft  official 
said  Web  services  manage¬ 
ment  is  an  important  topic  but 
added  that  the  company  has 
decided  not  to  join  the  OASIS 
effort  at  this  point. 


“Simply  put.  management  is 
the  next  major  barrier  to  main¬ 
stream  Web  services  adoption,” 
said  HP  CEO  Caiiy  Fiorina  dur¬ 
ing  a  speech  at  BEA  Systems 
Inc.^  eWorld  conference  in  Or¬ 
lando.  Fiorina  also  said  HP  has 
added  Web  services  manage¬ 
ment  tools  to  its  Open  View 
software  and  created  deploy¬ 
ment  and  management  con¬ 
sulting  programs  for  Java-based 
Web  services  applications. 

OASIS  said  the  new  Web 


Services  Distributed  Manage¬ 
ment  (WSDM)  technical  com¬ 
mittee  it’s  setting  up  will  work 
with  mher  standards  bodies, 
including  the  World  Wide 
Web  Consonium  and  Distrib¬ 
uted  Management  Task  Force 
Inc.  in  Portland.  Ore. 

Jason  Bloomberg,  an  analyst 
at  ZapThink  LLC  in  Waltham. 
Mass.,  said  the  WSDM  com¬ 
mittee  might  be  able  to  pro¬ 
duce  a  standard  within  a  year. 
Microsoft’s  absence  isn’t  that 
significant  for  now,  since  it 
could  adopt  the  standard  onn 
it’s  publis^d,  be  said.  I 
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Th«  Power  of  Now" 


.NET  connected  software  from  Microsoft  helps  you  make  content  management 
more  manageable.  With  every  change  in  your  business  needs  come  demands  for  more 
Web  sites,  more  content,  and  a  faster  response  from  already  strained  IT  resources.  To 
find  contentment  m  this  setting,  consider  Microsoft*  Content  Management  Server.  With 
native  support  for  XML.  it  integrates  wiin  your  existing  and  future  applications  to  create  a 
centralized  infrastructure  for  publishing  content  to  intranet,  extranet,  and  Internet  sites. 
You  control  site  consistency,  while  empower  ontent  owners  to  publish  their  own  p 
So.  you  can  be  more  responsive  with  fewer  resources.  And  everyone  is  content. To  get 
a  technical  overview,  visit  microsoft.com/contein  Software  for  the  Agile  Business!} 


14 


amframui  itrn^n.tm 


NEWS 


www.comwicfwofld.com 


BRIEFS 


EMC,  Hitachi  End 
Patent  Dispute 

aiGCiir|i.>nilHilacNLtlL 
agretd  to  ssitli  duoing  patent- 
infringament  claims  retalad  to 
storigs  tochnology.  Hitachi  will 
malio  uMpadfled 'ItalancinB 
paymonts"  to  EMC  aa  part  of 
a  patant  cnwt-lcanslng  daal. 
tha  companias  said.  They  also 
agreed  on  a  frameworh  for  as* 
changing  application  program- 
Bting  Martees  (API),  and  EMC 
annouTKad  a  similar  API  deal 
wWi  IMritas  Software  Corp.  in 
Mountain  View.  CaBf. 


3Com  SeSs  Off 
Carrier  Products 

3Cem  &)rp.  announced  a  daal  to 
sal  tha  hay  assets  of  its  Comm* 
Wofta  bustoess  unit  to  UTStar* 
com  bic.  in  Alsmeda.  CaVf..  tor 
S100  milion  in  cash.  Comm- 
Worts  makos  P-basad  notwrorh- 
ino  equipment  for  toiecommuni* 
cattons  carrtors.  Santa  Qara. 
Calf.*faBsad  SCom  said  it  wM  ra* 
tain  a  Acensa  to  the  tochnology. 


Pahn  Says  Sales 
Wi  Miss  Target 

Oaraing  weak  saias  of  its  hand* 
held  davicae  to  corporate  users, 
Palm  Inc.  warned  that  it  wil 
raporl  lower  *than*«spactad 
rouonue  for  As  third  quarter, 
which  andod  Feb.  20.  HNpitas, 
CaM.*basad  Palm  said  raaenua 
wN  tolM  about  S210  milion. 
(aMng  short  of  its  S230  miKon 
to  S2B0  tidKon  pniletion.  Ana- 
lytls  racardly  saU  tha  corporate 
market  lor  handhaMs  has  stag* 
ntted[QidcfcLM(  36045]. 


Short  Takes 

BH  rscMM  ^eut  56,000  PC 
monitors  soU  bi  1967  and  }998 
bacaoio  of  a  faidty  componont 
tfiat could wmrhat!  ...San 
Franci8C0*bMed  MACftOMEDIA 
MC.  wqmad  of  a  socurAy  law  to 
¥ariien  6  of  Ns  Flash  Ptoym  soft* 
wan  and  urged  unrs  to  nslal 


AT&T  Launches  VPN 
Service  Based  on  SSL 


Aventails  remote-access  devices  to  be 
used  to  expand  networking  choices 


BV  MATT  HAMBLEN 

Ar.VT  CORP.  today 

plans  to  join  forces 
with  Aventail  Corp. 
by  announcing  a 
deal  to  resell  that  company's 
new  Secure  Sockets  Layer 
(SSL)  remore*  access 
devices  as  part  of  a 
managed  vimiai  pri* 
vate  network  (VPN) 
service. 

AT&T'  said  it  will  charge 
customers  a  monthly  fee  for 
the  SSL  VPN  service  and  put 
the  tab  on  one  bill  along  with 
its  other  network  services  and 
connection  costs.  Seattle- 
based  Aventail  will  install  and 
service  its  rack-rrvountable 
EX-ISOO  appliance,  which  is 
designed  to  eliminate  the 


NETWORK 

SERVICES 


need  for  end  users  to  install 
remote-access  client  software 
on  laptop  Pds  and  other  mo¬ 
bile  computing  devices. 

The  reseller  agreement 
made  sense  partly  because  the 
two  companies  share  many 
global  customer  ac¬ 
counts.  said  John  Sul* 
livan,  extranet  prod¬ 
uct  manager  at  AT&T. 
Sullivan  wouldn't  di¬ 
vulge  the  pricing  for  the  new 
VPN  service,  which  is  due  to 
be  rolled  out  as  early  as  next 
month.  Aventail  set  a  starting 
price  of  $20.(X)0  on  the  EX- 
1500  when  the  SSL-based  ap¬ 
pliance  was  announced  in 
January  {(^ickLink  355271. 

Aventail  currently  offers  its 
own  SSL  VPN  managed  ser¬ 


vice  and  will  continue  to  do 
so.  But  Sullivan  said  the  sales 
forces  of  tK>tb  companies  will 
be  able  to  sell  AT&Ts  version 
of  the  managed  service,  with 
AT&T  acting  as  the  fust  point 
of  contact  for  users. 

Weighing  Options 

New  York-based  Deloitte  Con¬ 
sulting  has  used  Aventail's  SSL 
VPN  service  for  the  past  two 
years  to  manage  remote  access 
to  corporate  data  and  e-mail 
systems  for  15.000  workers 
worldwide,  said  CIO  Larry 
(^u'mlan.  Currently,  the  con¬ 
sulting  fum  relies  mainly  on 
WorldCom  Inc.  to  provide  re- 
motc-acccss  network  services. 

The  WorldCom  deal,  valued 
in  the  millions  of  dollars  annu¬ 
ally.  will  be  re-evaluated  with¬ 
in  the  next  12  months.  Quinlan 
said.  Deloitte  officials  “^vould 
like  more  integration  between 


remote-access  lines  and  the 
VPN."  he  said.  But  if  they  con¬ 
sidered  the  joint  AT&T/Aven* 
tail  offering,  "we  would  insist 
on  some  cost  savings"  com¬ 
pared  with  buying  separate 
services,  C^uinlan  added. 

AT&T  is  already  the  market 
leader  in  providing  VPN  ser¬ 
vices  that  support  the  IPsec 
security  protocol,  according  to 
Framingham.  Mass.-based 
IDC.  Unlike  SSL,  IPsec  re¬ 
quires  the  loading  of  client 
software  on  end-user  devices. 

Sullivan  said  AT&T  will 
continue  to  support  IPsec  in 
addition  to  offering  the  new 
SSL  VPN  service.  There's 
“very  little  overlap"  between 
the  users  of  the  two  technolo¬ 
gies.  he  said. 

Although  SSL  VPNs  are 
increasing  in  popularity 
among  corporate  users,  the 
demand  for  IPsec  VPN  ser¬ 
vices  should  continue  to  show 
some  growth  in  installations 
because  that  protocol  offers 
stronger  security  algorithms 
than  SSL  does,  said  John 
Girard,  an  analyst  at  Gartner 
Inc.  in  Stamford.  Conn.  I 


Vendors  Team  Up  to  Develop 
Remote-Authentication  Device 


Security  appliance 
controls  end-user 
access  to  networks 

BV  MATT  HAMBLEN 

Funk  Software  Inc.  and  Net¬ 
work  Engines  Inc.  today  will 
release  a  jointly  developed  se¬ 
curity  appliance  for  authenti¬ 
cating  remote  users  connect¬ 
ing  to  corporate  WANs  as  well 
as  users  on  wireless  LANs. 

Canton.  Mass. -based  Net¬ 
work  Ethanes  built  and  will 
distribute  the  hardware,  which 
runs  remote  end-user  authen¬ 
tication  and  authorization 
software  developed  by  Cam¬ 
bridge.  Mass. -based  Funk. 

The  combined  product  is  a 
rack-mountable  device  that 
runs  under  Windows  2000 
ProfessionaL  according  to  the 
two  companies,  which  an¬ 
nounced  plans  to  collaborate 


on  the  appliance  in  January. 

Size  and  case  of  deployment 
were  the  reasons  Care  New 
England  Health  System  in 
Providence,  R.L.  deployed  an 
early  version  of  the  appliance 
last  month,  said  Larry  Pesce,  a 
LAN/WAN  specialist  at  the 
health  care  company. 

Thus  far.  about  two  dozen 
end  users  have  used  the  appli¬ 
ance  for  network  authentica¬ 
tion  over  dial-up  laptop  con¬ 
nections  or  to  gain  access  to 
Care  New  England's  802.11 
WLANs,  Pesce  said.  Within 
weeks,  the  use  of  the  device 
will  be  scaled  up  to  handle 
about  1,000  medical  personnel 
at  three  major  facilities  and 
other  locations  throughout 
Rhode  Island,  he  added. 

The  appliance  not  only  pro¬ 
vides  authentication  services 
but  also  manages  the  conTigu- 
ration  process.  Pesce  said.  It 


would  have  taken  several  days 
or  weeks  to  buy  server  hard¬ 
ware  and  configure  it.  taking 
up  valuable  time  for  (2are  New 
England’s  IT  staff,  he  noted. 
But  the  new  appliance  "just 


TECHNOLOGV  DETAILS 

Steel-Belted 
Radius  Appliance 


worked  out  of  the  box.  no 
headaches  at  alL"  be  said. 

The  company  bought  and 
installed  two  of  the  appliances 
for  about  S30.(XX).  which  was 
10%  Ie.ss  than  regular  server 
hardware  would  have  cost,  ac¬ 
cording  to  Pcscc.  The  appli¬ 
ance  cakes  up  very  little 
space  in  Gare  New  En^nd's 
cramped  data  center,  be  said. 

Funk  competes  with  major 
vendors  such  as  Cisco  Sys¬ 
tems  Inc.  and  Microsoff  (^rp.. 
which  also  sell  authentication 
tools  chat  support  the  Internet 
Engineering  Task  Force’s  Re¬ 
mote  Authentication  Dial-In 
User  Service  (RADIUS)  proto¬ 
col  "But  Funk  often  gets  in  the 
door  for  ease  of  use."  said  John 
Girard,  an  analyst  at  Gartner 
Inc.  in  Stamford  Conn. 

The  market  for  RADIUS- 
based  remote  authentication 
products  and  services  is  ex¬ 
panding.  Girard  said,  adding 
that  appliances  combining 
hardware  with  software  are 
fashionable  now.  partly  be¬ 
cause  they  provide  all-in-one 
capabilities  to  users.  F 
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Continued  from  page  I 

BEATool 

strict  some  of  the  code  they 
write  to  BEA’s  runtime  engine. 

Craig  Mapes.  vice  president 
of  information  systems  and 
services  at  The  Huntington 
National  Bank  in  Columbus. 
Ohio,  said  his  company  will 
have  to  take  a  "deep  dive”  to 
see  how  much  of  the  Web- 
Logic  Workshop  tool  relies  on 
nonstandard  Java. 

“Is  it  the  silver  bullet,  or  is  it 
going  to  lock  us  into  some¬ 
thing  less  open?"  he  said.  “We 
don't  want  to  be  locked  into 
anything  proprietary.  WeVe 
been  down  t^t  path  before." 

For  many  users,  one  of  the 
most  appealing  aspects  of 
working  in  Java  has  been  its 
promise  to  run  on  any  operat¬ 
ing  system  application  serv¬ 
er.  so  long  as  the  code  con¬ 


forms  to  standards  vetted 
through  the  Java  Community 
Process  (JCP)  established  by 
the  language’s  creator.  Sun  Mi¬ 
crosystems  Inc. 

“Portability  is  the  whole 
thing  about  Java  to  me.  If  we 
want  vendor  lock-in,  we  can 
go  with  Microsoft."  said  Marc 
Cox.  a  systems  analyst  at  New 
York-based  Teachers  Insur¬ 
ance  and  Annuity  Association 
-  College  Retirement  Equities 
Fund. 

The  Need  for  Ease 

But  as  a  result  of  Java's  grow¬ 
ing  maturity  and  acceptance. 
IT  shops  with  less  skilled  de¬ 
velopers  are  taking  up  the 
technology,  and  that  makes 
the  need  for  better  tools  more 
criticaL  Also,  the  knock  that 
Java  is  too  complicated  has 
become  a  pressing  cortcem 
for  vendors  that  now  must 
compete  against  Microsoft's 


NonstandanUana  Technologies  in 
BEA’s  WebLogic  Worichop  Tool 


TECHNOLOGY  DESCRIPTION 
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year -old  .Net  technology. 

“We.  like  our  primary  com¬ 
petitors.  all  have  to  introduce 
iimovations  to  make  the  prod¬ 
ucts  easier  to  use."  said  Scott 
Dietzen.  chief  technology  ofti* 
cer  at  San  Jose-based  BEA. 

“And  some  of  those  are  in  our 
classes." 

Dietzen  said  BEA's  key  APIs 
—  such  as  Web  Services  Meta¬ 
data  and  a  Java  Rule  Engine  ^ 
are  already  moving  through 
the  Java's  standards  body.  Oth¬ 
ers,  such  as  Java  Page  Flovi' 
and  Process  Definition  for 
Java,  are  pending.  And  some 
minor  proprietary  pieces  may 
never  make  it  to  the  JCP,  he 
added. 

“We  lake  the  most  critical 
interfaces  and  get  them  into 
the  standards  {mxess  because 
that’s  where  the  investment 
protection  is  most  needed," 
said  CHetzetL  “Putting  100%  of 
our  APIs  into  the  |ava  stan¬ 
dards  process  is  too  expensive. 

It  would  cost  a  huge  amount  of 
mone>'.  and  the  net  return  to 
customers  is  very  small" 

So  BEA  is  instead  striving  to 
give  customers  "90-plus  per¬ 
cent"  investment  protection, 
Dietzen  said.  Customers  may 
have  to  do  "a  little  bit  of  re¬ 
work"  to  port  code  to  another 
Java  container,  but  that's  "dra¬ 
matically  better"  than  any  op¬ 
tion  they  ever  had.  he  said. 

However.  Mark  Driver,  an 
analyst  at  Gartner  Inc., 
claimed  that  there  is  "so  much 
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shop  that  there's  no  ^ 

port  the  code  to  Ml- 
Other  vendor’s 
products.* 


Driver  said  Gartner  is  advis¬ 
ing  BEA  customers  to  limit  the 
use  of  Woikshop  to  tactical 
projects  where  a  return  on  in¬ 
vestment  can  be  realized  with¬ 
in  two  years,  since  the  tool 
will  likely  change. 

He  didn't  fault  BEA's  ap¬ 
proach.  and  he  praised  the 
company's  efibits  to  standard¬ 
ize  its  technology.  "Any  ven¬ 
dor  who  wants  to  innovate  is 
going  to  have  to  become  more 
proprietary,  at  least  for  a  peri¬ 
od  of  time  until  the  standards 
catch  up."  Driver  said. 

But  as  several  users  pointed 


out.  there's  no  guarantee  that 
all  of  the  technology  will  be¬ 
come  a  standard.  And  even  if 
it  does,  there's  no  guarantee 
that  it  will  be  adopted  by  oth¬ 
er  vendors,  such  as  IBM. 

Robert  Moffett,  systems  ar¬ 
chitect  lead  at  United  Parcel 
Service  lnc.‘s  airlines  division 
in  Louisville,  Ky..  is  evaluating 
BEA's  WebLogic  application 
server,  integration  product 
and  workflow  capabilities 

_  against  similar 

products  from  BEA 
rival  IBM. 

Moflett  said  he 
likes  the  concept  of 
the  Workshop  tool, 
which  works 


across  all  BEA  products.  But 
be  said  he  has  concerns  about 
being  restricted  to  running 
code  written  with  Workshop 
on  only  BEA  products,  espe¬ 
cially  since  UPS  has  standard¬ 
ized  on  IBM's  WebSphere  por¬ 
tal  software. 

“Everyone's  going  to  have  to 
take  a  hard  look  at  how  [  Web- 
Lugic  Workshop]  aligns  with 
your  architectural  goals.  It's  a 
very  conscious  decision  you 
need  to  understand  that  you’re 
taking."  said  a  Web  develop¬ 
ment  manager  for  a  medical 
distributor  who  asked  not  to 
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be  identified.  He  added  that 
he  still  finds  the  tool  "com¬ 
pelling." 

James  Kline,  a  pn^eci  man¬ 
ager  at  The  ServiceMaster  Ca 
in  Downers  Grove,  lit.  said  be 
expects  that  most  of  his  com¬ 
pany's  new  development  will 
be  on  WebLogic,  so  portability 
isn't  a  huge  concern. 

David  Gallaher,  director  of 
IT  development  for  Jefferson 
County.  CoIol,  said  be  needs 
the  to^  which  ships  this  sum¬ 
mer.  **10  salvage  all  my  old 
Cobol  (Httgrammers  and  get 
them  doing  somethh^  pro¬ 
ductive  in  J2EE  (Java  2  Enter¬ 
prise  Editionj  without  having 
to  go  over  that  really  steep 
learning  curve" 

Gallaher  said  that  if  porting 
is  ever  needed,  be  can  grab  the 
code  created  with  the  tool 
copy  it  and  put  it  anywhere  be 
wants.  “It’s  still  lava  behind 
the  scenes.”  he  said.  Gallaher 
added  that  he  doesn't  expect 
to  make  calls  to  many  propri¬ 
etary  dab  libraries. 

“Would  1  prefer  that  the  tool 
was  absolutely  opeiL^  Abso¬ 
lutely.  Can  I  live  with  it  this 
way?  Yeah."  Gallaher  said.  "I 
mean,  what’s  my  alternative? 
Do  U  in  Microsoft,  where  they 
control  everything?"  I 
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EMC,  Hitachi  End 
Patent  Dispute 

EMC  Corp.  and  Hitachi  Lid. 
agreed  to  settle  dueling  paterd- 
infringement  claims  related  to 
storage  technology.  Hitachi  will 
make  unspecified  “balancing 
payments"  to  EMC  as  part  of 
a  patent  cross-licensing  deal, 
the  companies  said.  They  also 
agreed  on  a  framework  for  ex¬ 
changing  application  program¬ 
ming  interfaces  (API),  and  EMC 
announced  a  similar  API  deal 
with  Veritas  Software  Corp.  in 
Mountain  View.  Caiif. 

SCom^llsOff 
Carrier  Products 

3Com  Corp.  announced  a  deal  to 
sell  the  key  assets  of  its  Comm- 
Works  business  unit  to  UTStar- 
com  Inc.  in  Alameda.  Calif.,  for 
$100  million  in  cash.  Comm- 
Worfcs  makes  IP-based  network¬ 
ing  equipment  for  telecommuni¬ 
cations  carriers.  Santa  Clara. 
CalH.-based  3Com  said  it  will  re¬ 
tain  a  licertse  to  the  technology. 


Palm  Says  Sales 
Will  Miss  Target 

Blaming  weak  sales  of  its  hand¬ 
held  devices  to  corporate  users. 
Palm  Inc.  warned  that  it  will 
report  iower-than-eipected 
revenue  for  its  tNrd  quarter, 
which  ended  Feb.  28.  Milpitas. 
Calif.-based  Pakn  said  revenue 
will  total  about  S210  million, 
falling  diort  of  its  S230  million 
to  S290  million  prediction.  Ana¬ 
lysts  recently  said  the  corporate 
market  for  handhelds  has  stag¬ 
nated  lOuickLink  36045). 

Short  Takes 

IBM  recalled  about  56.000  PC 
monitors  sold  in  1997  and  1998 
because  of  a  faulty  component 
that  could  overheat. . . .  San 
Francisco-based  MACROMEDIA 
IHC  warned  of  a  security  flaw  in 
Version  6  of  its  Flash  Player  soft¬ 
ware  and  urged  users  to  install 
an  updated  release. 


AT&T  Launches  VPN 
Service  Based  on  SSL 


.V  cntnil's  rcmotc’-accoss  tk-x  icvs  to  bo 
usod  to  expand  notw  orkinii  cliDioos 


BV  MATT  HAMBLEN 

Ai.-.  I  .  tM;o  i.ivl.a 

plans  In  10)11  I'nrcos 
with  -\vcnt.til(-i»rp. 
t';  .iiinniilK'in^  .i 
Jcai  In  resell  that « unjpam  s 
nex\  Soeurr  Sockets  1  a\er 
tss|  )  remotc-.KVess 
Je\  iei-s  .IS  pari  ol'.i 
\irui.)l  pri- 
v.iii'  network  l\  l*N) 
service. 

.MN  I  s.»kl  ii  w  ill  ch.irj;e 
cnstoniers  a  nioiuhlx  lee  for 
tite  ‘'''I  \'1*N  ser\  ice  .inJ  put 

thk-  i.ih  «)n  i'ne  bill  .ilonc  w  ith 
tlsotlur  iieiwi»rk  serv iees  .ind 
conneclikkii  costs,  Vatlle- 
f’-iscvl  Axeiilail  will  install  and 
serxiee  its  rack-moimtahle 
KX-15UI'  appliance,  which  is 
desijjned  to  eliminate  the 


need  b'f  end  users  to  install 
remott -.iceess  client  sollxvare 
on  laptop  Pt  s  .ind  other  mo¬ 
bile  computing  devices. 

1  he  reseller  .ijtreemenl 
in.ide  sense  partly  because  the 
two  ciiinp.inies  share  many 
(■lohal  eusiomer  ac- 
eoiinis.  said  lohn  Sul- 
lixaii.evtranet  prod¬ 
uct  manajier  .it  A'l  N  1. 
Siilliv.ui  Wkiuldn'i  di¬ 
vulge  the  pricing  for  the  new 
k’I'N  serx  ick-,  which  is  due  to 
he  rolled  kuit  as  e.irlv  as  ne\l 
mt'iilh.  Axeniail  set  a  stariinji 
price  ikrsju.uno  on  the  b.V 
l.s(Ui  xvhen  the  Ssl  -based  ap 
pliance  was  .mnounced  in 
lanu.iry  [QuK'kI,ink.4s527|. 

Axentail  curreniK  offers  its 
kkwn  SSl  Vl’N  manafied  ser- 
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\  ice  and  w  ill  continue  to  d«> 
so.  Hut  Siillixan  said  the  s.iles 
forces  of  both  eoiiipanic-s  will 
be  able  to  sell  A  TN'I'  s  version 
of  (he  manaited  serx  ice,  xx  iih 
A I N  1  acting  as  the  first  point 
of  eontael  for  users. 

Weighing  Options 

Nexx  Yiirk-hased  I>eloille<Ain- 
sullinp  has  used  .Axeiitairs  SSI 
VPN  service  for  the  past  ixxo 
years  to  manajre  renu»te  access 
to  eorpkirate  data  and  e-in.iil 
systems  lor  l.\tlOn  w  orkers 
xxorldwide.  said  tilO  Larry 
tjuinlan.  tairrenilx.  the  eon- 
suit  in^  Hrm  relies  m.iinly  on 
Worldt  .otn  Ine.  tti  priivide  re- 
nn»te-jeeess  network  serviees. 

The  Wtirldlanii  deal,  valued 
in  the  millions  of  dollars  ;innu 
ally,  will  he  re-exaluated  xvith- 
in  the  next  12  months.  Quinlan 
said.  IVltiille  t»lTieials''xvould 
like  more  inlej:ratix»n  betxxven 


Vendors  Team  Up  to  Develop 
Remote-Authentication  Device 


Scciiritx'  appliance 
ciintnils  end-user 
access  Id  networks 

BV  MATT  HAMBLEN 

funk  Software  Ine.  and  Net- 
xx«*rk  Fnj:inx-s  Ine.  toJav  will 
rele.)se  a  jointlx  dex  eh»ped  se- 
1.  urity  appliance  f«»r  authenti- 
calin}*  remote  users  eonneet- 
iny  It)  Ck>rp»irate  WANs  .is  well 
as  Users  *m  w  ireli-ss  f  ANs. 

<  kintkkn.  Mass  -KiseJ  Net- 
xvork  tn^ines built  and  will 
distribute  the  hardxxare.  which 
runs  reimne  enJ-iiser  authen- 
liealion  and  authori/ali«in 
M*ftw-aredexel*»pL“d  bx  (.am- 
I  rid^tv-.  .Mass.-basi-d  Kunk. 

I'he  eombined  product  is  a 
r.)ck-mountabte  Jeviee  that 
runs  under  Windows  2D<H) 
l’rt)fe-ssion.il.  accordinfi  to  the 
txx«»eompanies,  whieh  un- 
nnuneed  plans  to  eoUuKirale 


on  the  .ipplianee  in  january. 

Si/e  and  ca.se  of  deployment 
were  the  rvasons  (^are  New 
l-.ii|:land  llc-alih  System  in 
Providence.  R.I..  deployed  an 
early  version  of  the  appliance 
List  nmnth.  said  lairrx  IVsee.  a 
LAN  \k'AN  specialist  at  the 
health  carec«>mpany. 

Thus  far.  ab«»ul  two  dozen 
end  users  have  used  the  appli¬ 
ance  lor  netxvurk  authenik-a- 
turn  xHvr  dial-up  lapt«»p  exin- 
neeiioiisor  lojiain  access  to 
Care  Nexx  f.njiland's  Kn2.i! 
i  Wl  ANs,  IVsee  said.  Within 
I  weeks,  the  use  of  the  device 
j  will  he  Hilled  up  to  handle 
I  about  l.lHH)  medie.il  personnel 
I  at  three  mak«t  faeililii-s  and 
j  other  locations  ihroujjhvxul 
I  Rhode  Island,  he  added, 
j  The  appliance  not  only  prtv 
I  vidi-s  authentication  serviee.s 
I  but  also  mana|!es  the  eonfigu- 
I*  r.ition  process.  I'esee  said.  It 


xxoiild  have  taken  several  days 
or  weeks  to  buy  serx’er  hard¬ 
ware  and  etxnfijture  it.  lakinj: 
up  valuable  time  for  (iare  Nexx 
Kn}tland‘s  IT  staff,  he  noted. 
Hut  the  nexv  .ipplianee  "just 


TECHNOLOOV  DETAILS 

Steel-Belted 
Radius  Appliance 

57,500 
availabiv  now 

Veriion  4  0  nl 
FunK  A  Sleel-B^lleil  flaJ'us/ 
Efilrtfiwtv*  Edtbon  wflwx'i* 

Network  Engmei' 
lU  (I  75-in  J  tack-fTKMnl*bte 
devic«  running  an  866-MH7 
Inlet  Pentium  III  processor 

MictCKioh  WirKluws  2000 
Protes&run.il 


remoie-aeeess  lines  and  the 
VPN."  he  said.  Hut  if  thex  con¬ 
sidered  the  joint  ATN'I  Aven- 
tail  offering,  “xxe  wtiuld  insisi 
on  stime  cost  savings"  com¬ 
pared  wilh  buying  sepanite 
services.  (Quinlan  added. 

'  A TN  1'  is  alrcjidy  the  market 
leader  in  providing  VPN  ser¬ 
vices  that  support  the  IPsec 
security  pri'tt>et*l.  aeeording  to 
I  ramingham.  Mass.-baseit 
UK  .Unlike  SSI.  IPsec  re¬ 
quires  the  loading  of  client 
sofiw.ire  on  end-user  devices, 

Sullivan  said  A  l'N  L  will 
continue  lo  support  IPsec  in 
addition  t«i  offering  the  nexv 
SSI.  VPN  service.  Lheres 
"xery  little  overlap"  betvxeen 
j  the  users  of  the  Ixx'o  leehnoltv 
gies.  he  said. 

Atlln'ugh  SSL  VPNs  are 
increasing  in  ptipulariix 
among  etirporate  users,  the 
demand  for  IPsec  VPN  ser¬ 
vices  should  continue  it»  shoxx 
some  growth  in  installations 
because  that  protocol  tiffers 
stronger  seeuriix  aigtirilhms 
than  Ssl.  dxies.  said  |ohn 
(iirard.  an  analyst  at  tlartner  “J"' 
Inc.  in  Stamford.  Uonn.  • 


xvorked  out  of  the  box.  no 
,  headaches  at  all."  he  said- 
I  The  company  Knight  and 
installed  ixvo  of  the  appliances 
I  for  about  xvhieh  was 

Uf'o  less  than  regular  sx-rver 
hardware  WiiiilJ  haxe  com,  .h-- 
I  cording  lo  Pcsx-e.  Theappli- 
j  anee  also  i.ikes  up  very  little 
space  in  Uare  Nexv  England's 
'  cramped  data  center,  he  said, 
funk  competes  xvith  major 
vendors  such  as  I'iseo  Sys¬ 
tems  Inc.  .inJ  MieroM*ft  (Torp.. 
which  also  sell  authentication 
tiKils  that  support  the  Internet 
Fngineering 'Jask  l-oixx-'s  ke- 
mote  Authentication  Dial-In 
User  Service  t  RADIUS)  proto- 
LH)I.  "Hut  Funk  ofti-n  gets  in  the 
dtwtr  for  ease- x*f  use."  said  )ohn 
(iirard.  an  analyst  at  (jariner 
Ine.  in  Stamford,  (.amn. 

The  market  for  RADIUS- 
based  remote  authentication 
products  and  serviees  is  ex¬ 
panding.  (iirard  said,  adding 
that  appliances  combining 
hardware  xvith  softxx-are  are 
fashionable  mm',  partly  be¬ 
cause  they  provide  all-in-nne 
e.ipabilities  to  users.  I 


NEWS 


CIWniTlIWWLlI  Marrii  V.  MIS 


15 


Continued  from  puge  I 

BEATool 

strict  some  of  the  code  they 
w  rite  to  BEA's  runtime  engine. 

Craig  Mapes.  vice  president 
of  infi>rmation  systems  and 
services  at  The  Huntington 
National  Rank  in  Citiumbus. 
l>hio.  said  his  company  will 
luive  tt>  take  a  "deep  dive"  to 
see  how  much  of  the  VVeb- 
Logic  Workshop  tool  relies  on 
nonstandard  lava. 

"Is  it  the  silver  bullet,  or  is  it 
going  to  lock  us  into  some¬ 
thing  less  open?"  he  said.  "We 
d«)n't  want  i(»  be  locked  into 
anything  proprietary'.  We’ve 
been  dow  n  that  path  before." 

Et»r  many  users,  one  of  the 
most  appealing  aspefts 
working  in  lava  has  been  its 
promise  to  run  on  any  operat¬ 
ing  system  or  application  serv¬ 
er.  so  long  as  the  code  ci*n- 


forms  to  standards  \  cited 
through  the  lava  l^immunity 
I  Process  (|CP)  established  by 
the  language's  creator.  Sun  Mi- 
I  crosystems  Inc. 

I  "Portability  is  the  whole 
thing  about  java  to  me.  If  we 
want  vendor  lock-in.  we  can 
go  with  Micro.soft."said  Marc- 
Cox.  a  systems  analyst  at  New 
Y»»rk-based  Teachers  Insur¬ 
ance  and  Annuity  Association 
-College  Retirement  Ei^uitics 
j  Fund. 

The  Need  for  Ease 

But  as  a  rc*suh  of  lava's  grow¬ 
ing  maturity  and  acceptance, 
rr  shops  with  less  skilled  de¬ 
velopers  are  taking  up  the 
technology,  and  that  makes 
the  need  for- better  nKils  more 
critical.  Also,  the  kiu*ck  that 
lava  is  i«m»  complicated  h.is 
become  a  pressing  concern 
for  vend«»rs  that  now  must 
compete  against  Mictx>.s*»fi's 


Nonstandard  Java  Technologies  in 
BEA's  WebLogic  Workshop  Tool 


■  1  M 

Java  Page  Flow 

New  Me  formal  that  contains 
the  business  logic,  state  and 
navigation  flow  of  a  Web  appli¬ 
cation:  buM  upon  a  Struts- 
based  Web  applicalion  pro- 
i^amming  model 

To  be  submitted  to 
Java  Community 
Process. 

Web  Services 
Metadata  for  Itw 
Java  Platform 

Defines  an  annotated  Java  for¬ 
mat  that  uses  Java  Language 
Metadata  (JSR 175}  to  enable 
easy  definition  of  J^  Web  ser¬ 
vices  in  a  J2EE  container 

JSR  161.  Work  m 
progress.  Expert 
group  formed  last 
Aprj. 

Process  Defin¬ 
ition  lor  Java 

Defines  an  annotated  Java  syn¬ 
tax  and  APIs  for  programming 
business  processes  m  Java. 

JSR  207.  Vote  on 
accet^anceol 

JSR  due  March  17 

Metadata 

Facility  for  the 
Java  Program¬ 
ming  Language 

Allows  classes,  interfaces,  fields 
and  m^hods  to  be  marked  as 
having  particular  attributes- 

JSRITS.Worttm 
progress.  Expert 
groiv  formed  last 
April. 

Content 

Repository 
for  Java 

Specifies  a  standard  API  to  ac¬ 
cess  content  repositories  « 

Java  2  Indeperxiently  of  imple¬ 
mentation. 

JSR  170.  Expert 
group  formed  last 
month. 

Portlet 

Specification 

Defines  a  set  of  APIs  tor  portal 
computing  addressing  the  areas 
of  aggregabon.  personaNzalion. 
presentation  and  seoxity. 

JSR  168  Expert 
group  formed  last 
month. 

Java  Rule 

Engine  API 

Defines  a  Java  runtime  API 
Itvmle  engines. 

JSR94.Pubhc 
review  penod 
recently  dosed. 

NOTE:  A  Jjvd  Spetikaiwo  ftegvey  ( jStt)  * '»»  »cfi.ai  JeictiptKVi  ol  i  pwpoMa  jMfuvH 

loi  the  Java  otaKo'm  unOei  -he  Java  Commuistv  Proct^  uMied  tw  Sun  MK’osvscms  kic  (o  twoivt 

fhe 'w.rn'otogv  ■  o-.  w 


year-old  .Net  technology. 

"We.  like  »>ur  primary  com¬ 
pel  ili»rs.  all  have  t*»  introduce 
innovations  to  m.ike  the  proii 
ucts  easier  to  use."  viid  Scott 
l)jet/en.  chief  technology  iflTi- 
cer  at  San  |osc-bascd  BF.A. 

"And  some  i>f  those  are  in  our 
classes." 

Hietzen  said  BF  A's  key  .APIs 
—  such  as  Web  Sen  ices  Meta¬ 
data  and  a  lava  Rule  Engine  — 
are  already  mtwing  thnmgh 
the  lava's  standards  b<»dv.  Oth¬ 
ers.  such  as  lava  Page  Flow 
and  PriKVSs  IXTinilit>ti  for 
lava,  are  pending.  .And  some 
min«ir  pnrprietary  pieces  may 
never  make  it  to  the  |(  '.P.  he 
added. 

"We  take  the  most  critical 
interl'aces  and  get  them  into 
the  standards  process  bevausc 
that's  where  the  investment 
pn>tecii»>n  is  n»i>st  needed." 
said  Dieizen.  "Putting  UK)".-  of 
<Hir  APIs  into  the  lava  stan¬ 
dards  pn>ee-ss  is  ton  expensive 
It  would  cost  a  huge  amount  of 
mi>ney.  .ind  the  net  return  to 
customers  is  very  small." 

So  REA  is  instead  striving  to 
give  customers  "<)0-plus  per¬ 
cent"  investment  protevtion. 
nietzen  said.  Customers  may 
have  to  do  "a  little  bit  of  re¬ 
work"  to  pHiri  code  to  another 
I-iv.!  container,  but  that’s  "dra¬ 
matically  better"  than  any  i>p- 
lion  they  ex  er  had.  he  said. 

Hi>wever.  Mark  DrivcT.  an 
analyst  at  Garinc'r  Ine.. 
claimed  that  there  is  "so  much 

proprietary  plumb-  _ 

ing  inside  %if  Work- 
sbiip  that  there’s  no 
practical  way  to 
port  the  e«Tde  n»  an¬ 
other  vendor’s 
products." 

Driver  said  Gartner  is  advis¬ 
ing  BE.A  cu.stomers  to  limit  the 
use  of  Workshop  to  tactical 
pn>|ects  where  a  return  on  in¬ 
vestment  can  be  realized  w  ith¬ 
in  two  vears.  simv  the  tool 
w  ill  likely  cluinge 

He  .lidn  »  f.iuli  BF.A  -.  ip 
pr.KK'h.  .invl  he  pr.iiwJ  the 
vomp.tnt  efforts  i»i  si.md.if  J 
i/e  its  leehnologv  Any  ven¬ 
dor  who  w  ants  to  innov.ite  is 
going  to  have  to  become  more 
proprietary,  at  least  for  a  peri- 
(vj  of  lime  until  the  standards 
catch  up."  Driver  said. 

But  as  several  u.sers  pointed 


BEA  Executives  Provide  Glimpse 
Into  Company’s  Direction 


ONE  ON  ONE 


BEA  Systems  wiD  locus  on  se¬ 
curity,  application-level  man¬ 
agement  and  process-onerried 
programming  m  future  product 
rele^.  companv  executives 
said  last  week 
Alfred  Chuang.  CEO  of  the 
I  San  Jose-t)ased  software  mak- 

^  er.  told  Corrvxj/erwortf  that  he 

company  e  txjiiding  a  security 
,  server,  satd  it  wiH  be  scM  as 
a  separate  product  that  can  be 
I  hooked  to  non-^  products 

"IfyourenolevenaWeb- 
Logic  shop  -  maybe  you're  a 
,  mainframe  shop  -  youH  fmd  It 
I  useful.''  Chuvtg  pledged.  He 

I  said  he's  not  sixe  when  the 
product  wi  be  ready  for  gener¬ 
al  release. 

,  BEA  m  February  acquired 
'  CrossLogn  Inc.,  a  pnv^eiy  held 

Redwood  Shores.  Calif  .-based 

I 

I  out,  there's  no  guarantee  th.it 
;  all  of  the  iechnoU>gy  will  be¬ 
come  a  standard.  And  iwen  if 
it  dot's,  there’s  fH'  guarantee 
I  that  it  will  be  adopted  by  oth- 
!  er  vendors,  such  js  I  EiM. 

1  Robert  Mi>ffeti.  systems  ar- 
chittvi  lead  at  United  l*areef 
Service  Inc.’s  airlines  divisinn 
in  I.ituisville.  Ky..  is  evaluating 
BEA’s  WebLogic  application 
I  sorter,  integration  prvvluei 
'  and  workflow  capabilities 

_  agaiast  similar 

proJuet.s  fr»>m  BEA 
rival  IBM. 

Moffett  s;iid  he 
likes  the  concept  of 
the  WorkshtTp  ti>t>l. 
which  works 
I  across  all  BEA  priKlucts.  Hut 
I  he  said  he  has  concerns  about 
I  being  restricted  to  running 
I  code  written  w  ith  Workshtip 
I  on  only  BEA  pnvJucts.  espe- 
cullv  since  L'l*S  h.is  stjnd.irJ- 
i/ed  on  IBM'-  NS’.-hsphere  p«*r- 
Ul  MUtw.ire 

•EvervMjK*  gouiu  lo  have  n. 

'  ake  a  hard  look  .it  bow  i  Web 
Logic  Workshop!  aliuns  wtih 
your  archiict'tural  givnls.  It's  a 
very  cvmseious  decision  yx»u 
netsl  to  understand  th.it  you’re 
taking."  said  a  Web  dexebip- 
ment  manager  for  a  mcJieal 
di!»tribut<Tr  who  asked  not  to 
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maker  of  enterprise  authoriza¬ 
tion  products  Tbe&ossLo9x 
leehnologv  wiH  be  part  ol 
BEA's  ongong  seoftly  work, 
according  to  Rick  Jackson, 
vice  presidenl  of  enterprise 
product  marketing  at  BEA 
BEA  wiN  release  an  en¬ 
hanced  security  framework  that 
spans  the  products  m  its  iv- 
oornmg  WebLogc  Ratform  8.1 
-  which  include  the  appixelion. 
ptxial  and  mtegraixm  servers 
The  apobcabon  server  is  due 
this  spnng.  with  the  U  plaf- 
lorm  to  foHow  this  summer. 

-CanVSbM 


MOIEONUNE 

for  OP  osanded  itrsion  ol  the  sMiy. 

vcNourMNisae 

OQuicMJnk  36892 

ww«.oirn|MlarweHdxeni 

K-  iJentified.  He  added  rhat 
he  Mill  ilnds  the  ttml  "com¬ 
pelling." 

lames  Kline,  a  proK-ci  man¬ 
ager  at  The  Serx  iceM aster  Go 
in  [bTwniTS  tinxve.  III.,  said  he 
expv'cts  that  mtist  *>f  his  cx*m- 
pany'snew  dexelopment  will 
he  on  Webl  ogic.  so  porubiliix 
isn’t  a  huge  concern. 

David  ( .allaher.  diiwtor  «»f 
IT  dcveli'pmcnt  for  lefterson 
Gitunty.  GoKu  said  he  needs 
the  tool,  which  ships  this  sum¬ 
mer.  "to  salvage  all  my  old 
(a»bol  progwninters  and  ger 
them  d«»iog  stimeihing  pro- 
duetixv  in  |2EF  Max-.i  ’  Enter- 
prise'  Edition!  with«vut  luving 
i<*  gi»  owr  that  really  steep 
learning  curxe." 

Gatlaher  said  that  it  pviriing 
is  cx-er  nexMed.  he  can  grab  the 
CTHJe  created  with  the  n«ol. 
copy  it  .md  put  it  anywhea*  he 
wants  "It's  still  lav.i  behiiKf 
•he  Stem's.' fi«- ---n.l  ■•tll.ilvr 
iJJeJ  lh.l'  IXi  J.H'sll  •  -xpCi-T 
In  c.ilis  -11  in,inx  pr»»prf 

eijrx  class  lihr.iries 

'WotilJ  I  preler  th.ii  ihv  u*ol 
was  .tbsolutv'lx  ivpeit:’  .•\l'»s,»- 
lutely  Can  I  live  with  it  this 
way'r  Yeah."<iall.ilu-r  said  "I 
mean,  w-hat'soix  .iliernaiivc? 
Do  11  m  Microsoft,  where  they 
comrxil  everyihing?"  • 
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Inventory  Costing  Systems  Pose  Real-Tbne  Data  Challenges 


Real-Time  Data 

^•5tcm  that  would  provide 
more  rapid  access  to  data,  but 
it  has  yet  to  make  any  technol- 
C¥>‘  clw'ices. 

T«ip-lesel  corporate  cxxvu- 
tives  incrcasmjtly  want  to  kwp 
a  ckise  watch  on  ke>'  business- 
performance  indicators  s<>  they 
con  take  fast  action  when  ncc- 
essar>'.  said  Satcesh  Leic.  chair¬ 
man  of  Global  Data  Systems 
USA.  a  San  losc-bascd  IT  ser¬ 
vices  tlrm.  "In  order  to  do  that, 
they  need  to  have  summarized, 
sv'nihcsizcd.  rcal-iime  inforim- 
tion,"  Lele  said. 

For  example,  if 
there's  a  drought 
in  the  Northeast, 
the  use  of  real* 
time  information 
to  gauge  demand 
for  umbrellas 
could  help  execu¬ 
tives  at  an  um¬ 
brella  maker  do 
"dynamic  pricing''  in  an  at¬ 
tempt  to  boost  sales,  said 
Siex’e  Andriole,  a  omsultam  at 
Cutter  Con.sortium  in  Arling¬ 
ton.  Mass.,  and  a  professor  of 
IT  management  at  Villanova 
University  in  Pennsylvania. 

There  are  combirutions  of 
technologies  that  can  help  put 
business  performance  infor¬ 
mation  in  the  hands  of  senior 
management  more  quickly,  in¬ 
cluding  middleware,  business 
pixKess  integration  tools.  \\'cb 
semces  applications  and  data 
mining  tools.  But  they  go  only 
so  far  in  speeding  up  the  de¬ 
livery  of  data,  according  to  an¬ 
alysts.  For  instance,  informa¬ 
tion  stored  in  decision-sup¬ 
port  data  marts  is  often  up  to  a 
month  old.  Lcle  said. 


In  addition,  many  compa¬ 
nies  have  rolled  out  enterprise 
resource  planning  systems 
that  are  tied  to  legacy  applica¬ 
tions  pv)putaicd  with  outdated 
information.  "You  still  haven’t 
solved  your  real-time  prob¬ 
lem."  said  Andriole,  a  former 
chief  technology  officer  at 
Cigna  Corp.  in  Philadelphia. 

St'me  companies  have  made 
big  strides  toward  achieving 
real-time  data  availability.  At- 
lanta-bascxl  IX-lia  Air  Lines 
Inc.,  which  has  invested  SL5 
billion  in  its  IT  infrastructure 
since  1008.  has  integrated  its 
systems  so  tightly  that  (here's 
just  a  one-second  latency  in 
exchanging  data 
between  some  of 
its  business  units, 
said  CIO  Curtis 
Robb  during  a 
session  at  the 
Premier  100  con¬ 
ference. 

Still,  some  of 
the  challenges 
facing  IT  man¬ 
agers  who  are  trying  to  install 
real-time  data  access  capabili¬ 
ties  extend  beyond  technology 
to  issues  such  as  the  quality 
and  timeliness  of  information. 
For  instance,  Chris  McMahan. 
CIO  at  Wlrcles-s  Retail  Inc.,  a 
Scottsdale.  .Ariz.-ba-sed  provid¬ 
er  of  wireless  products  and 
services  to  retailers,  said  a 
salesman  might  report  that  he 
sold  10  wireless  devices  in  a 
week  when,  in  fact,  he  sold 
eight  and  has  two  orders  in  the 
pipeline. 

"Every  company'  I  know  of 
has  to  deal  with  the  fudge  fac¬ 
tor."  Andriole  said.  "Some 
cymics  say  that  real-time  re¬ 
porting  is  terrible  because  it 
gives  you  the  ability  to  make 
wrong  decisions  faster"  I 


Another  problem  hampermo  IT 
managers  who  are  trying  to 
make  data  available  lo  business 
executives  on  a  real-time  basis 
IS  their  companies'  reliance  on 
legacy  accounting  systems  that 
are  centred  on  so*iUlled  stan¬ 
dard  costing  metrics. 

Standard  costing  IS  an  ac* 
courting  technique  that's  widely 
used  by  manufacturers  to  predict 
(he  cost  of  product  inventories 
for  a  fuN  year  based  on  the 
prices  that  are  tft  place  at  the 
end  of  the  previous  year. 


Integration  strfhvare 
to  support  R’al-time 
data  exchanges 

8V  THOMAS  HOFFMAN 

Southern  Ca.  a  S10.5S  billion 
utility  and  energy  scrv’iccs 
firm  in  Atlanta,  is  in  the  early 
stages  ofa  multiyear  enter¬ 
prise  application  integration 
(EAI)  effort  aimed  at  bolster¬ 
ing  revenue  and  lowering 
costs  throughout  its  extensive 
supply  chain  operations. 

As  part  of  a  proiecf  that  be¬ 
gan  last  year  and  is  due  to 
continue  through  2006.  South¬ 
ern  is  pushing  to  add  real-time 
energy  trading  capabilitie.s 
and  optimize  all  of  its  key  sup¬ 
ply  chain  functions,  including 
warehousing  and  inventory 
and  freight  management. 

To  support  the  effort.  South¬ 
ern  late  last  year  installed 
business  process  'mtegration 
software  developed  by  Sunny¬ 
vale.  Calif.-based  Vitria  Tech¬ 
nology  Inc.  1lie  details  of  the 
rollout  will  be  announced  this 
week.  Southern  plans  to  use 
Vitria's  BusinessWare  tools  to 
provide  real-time  exchanges 
of  purchasing  data  between  its 
systems  and  those  of  its  busi¬ 
ness  partners  through  an  ener¬ 
gy  trading  network  operated 
by  Pantellos  Group  LP  in  The 


But  applications  that  support 
the  technique  have  Iknits.  said 
Ralph  Rio.  an  analyst  at  WC  Ad¬ 
visory  Group  Inc.  hi  Dedham. 
Mass.  For  example.  disK  drives 
sold  by  a  vendor  may  fetch  S500 
each  at  the  end  of  one  year  -  a 
price  that  wiH  be  built  into  the 
standard  costing  models  m  Its 
accounting  system.  But  d  market 
conditions  dtange  and  prices 
have  to  be  cut  sharply,  the  new 
intormation  typically  won't  be  re¬ 
flected  hi  the  costino  models. 

That  can  be  *a  major  prt^ilem* 


Woodlands.  Texas. 

“We’iv  trying  to  manage  the 
sourcing  process  from  the  raw 
materials  phase  all  the  way  to 
the  disposal  of  any  assets  that 
we've  acquired,"  said  |acki 
Lowe,  vice  president  of  supply 
chain  management  at  South¬ 
ern.  which  is  also  using  rival 
mcs.sagc-queuing  middleware 
tools  from  IBM  and  Microsoft 
Corp.  as  part  of  the  project. 

Lowe  said  the  EAI  initiative 
is  aimed  at  providing  South¬ 
ern’s  business  executives  with 
greater  visibility  into  all  of  its 
supply  chain  operations.  The 
project  should  also  simplify 
some  IT  functions,  she  added. 

For  instance,  Southern's  ac- 


AT  A  GLANCE 


Southern's  Supply 
Chain  Push 

COMMNV  FACTS:  Sells  elec 
trialy  and  natural  gas  lo  4  million 
customers  in  the  Southeast:  had 
revenue  ol  S10.%8  last  year 


BUSINESS  CHALLENGE:  Im¬ 
proving  itssupply  Cham  by  lower¬ 
ing  costs  and  providing  b^er  re¬ 
liability  to  customers 


IT  STRATEGY:  Embarked  on  a 
multiyear  EAI  effort  that  mdudes 
the  use  of  Vitna's  business  proc¬ 
ess  integration  toc^  and  middle¬ 
ware  from  IBM  and  Microsoft 


w4ien  9  comes  to  using  real-time 
Information  to  react  to  dianging 
market  condKions.  Rn  said.  To 
combet  such  problems,  an 
emerging  class  of  awkeations  is 
able  to  accommodate  retd-time 
changes  in  costing  data,  he  said. 

Nevertheless,  companies  will 
likely  have  to  also  retain  thee 
legacy  accounting  systems  in  or¬ 
der  to  meet  toe  U.S.  Securities 
and  Exchange  Commission's  fi¬ 
nancial  reporting  requirements. 
Rio  added. 


counting  materials  and  pro¬ 
curement  s^-stem  links  to  75 
different  worfe-order  and 
accounting  applications 
throughout  the  company.  In 
turn,  many  of  those  systems 
are  tied  to  applicatiotvs  at 
Southern’s  suppliers  and  other 
business  partners. 

But  anytime  a  change  is 
made  to  one  work-order  sys¬ 
tem.  foltow-on  changes  have  to 
be  made  to  the  accounting  sys¬ 
tems  to  which  it’s  connected, 
Lowe  said.  The  use  of  Busi- 
ncssWare  should  help  mini¬ 
mize  the  changes  "and  reduce 
some  of  our  support  costs  for 
those  systems,”  she  said. 

Lowv  declined  to  disclose 
how  much  Southern  is  invest¬ 
ing  in  the  EAI  project,  nor 
would  she  estimate  the  size  of 
the  payback  and  efficiency  im¬ 
provements  that  the  company 
expects  to  gain. 

Zarko  Sumlc.  a  Bellevue. 
Wash. 'based  analyst  at  Meta 
Group  Inc.,  said  a  growing 
number  of  energy  companies 
with  extensive  transmission 
and  distribution  businesses 
are  beginning  to  understand 
the  potential  for  using  EA! 
technology  to  help  make  their 
operations  more  cflicicnt. 

Once  BusinessWare  is  fully 
operational.  Southern  next 
quarter  plans  to  begin  devel¬ 
oping  interfaces  to  systems  at 
some  of  its  energy  trading 
partners.  Lowe  said.  The  com¬ 
pany  expects  to  start  process¬ 
ing  transactions  through  the 
interfaces  in  )une,  she  added.  I 


How  to  Manage  Real-Time  Data 


H  Every 
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Iknowofhasto 
deal  with  the 
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STEVE  ANDRIOLE.  CONSUL 
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Real-Time  Data 

system  that  would  provide 
more  rapid  access  to  data,  but 
it  has  yet  to  make  any  technol- 
c^ctoices. 

Top-level  corporate  execu¬ 
tives  increasinudy  want  to  keep 
a  close  watch  on  key  business- 
peifurmance  indicators  so  they 
can  take  fast  action  when  nec¬ 
essary,  said  SjUeesb  Lele.  chair¬ 
man  of  Global  Data  Systems 
USA,  a  San  |ose-based  IT  ser¬ 
vices  fum  “In  order  to  do  that, 
they  need  to  have  summarized, 
synthesized,  reai-time  informa¬ 
tion.'’  Lele  said. 

For  example,  if 
there's  a  drought 
in  the  Northeast, 
the  u.se  of  real¬ 
time  information 
to  gauge  demand 
for  umbrellas 
could  help  execu¬ 
tives  at  an  um¬ 
brella  maker  do 
“dynamic  pricing'  in  an  at¬ 
tempt  to  boost  sales,  said 
Steve  Andriole,  a  consultant  at 
Cutter  Consortium  in  Arlii^- 
lOD.  Mass.,  and  a  professor  of 
IT  management  at  ViUanova 
Universiry  in  Pennsylvania. 

There  are  combinations  of 
technologies  that  can  help  put 
business  performance  infor- 
inatiaa  in  the  hands  of  senior 
management  more  quickly,  in¬ 
cluding  middleware,  business 
process  integration  tools,  Web 
services  applications  and  data 
mining  tools.  But  they  go  only 
so  far  in  speeding  up  de¬ 
livery  of  data,  according  to  an¬ 
alysts.  For  instance,  informa¬ 
tion  stored  in  decision-sup¬ 
port  data  marts  is  often  up  to  a 
month  old,  Lele  said. 


In  addition,  many  compa¬ 
nies  have  rolled  out  enterprise 
resource  planning  systems 
that  are  tied  to  legacy  applica¬ 
tions  populated  with  outdated 
information.  “You  still  haven't 
solved  your  real-time  prob¬ 
lem."  said  Andriole,  a  former 
chief  technology  officer  at 
Cigna  Corp.  in  Philadelphia. 

Some  companies  have  made 
big  strides  toward  achieving 
real-time  data  availability.  At¬ 
lanta-based  Delta  Air  Lines 
Inc.,  which  has  invested  $L5 
billion  in  its  IT  infrastructure 
since  1996,  has  integrated  its 
systems  so  tightly  that  there’s 
just  a  one-second  latency  in 
exchanging  data 
between  some  of 
its  business  units, 
said  CIO  Curtis 
Robb  during  a 
session  at  the 
Premier  100  con¬ 
ference. 

StUL  some  of 
the  challenges 
IT  man¬ 
agers  who  are  trying  to  install 
real-time  data  access  capabili¬ 
ties  extend  beyond  technok^ 
to  issues  such  as  the  quality 
and  timeliness  of  informatioa 
For  instance.  Chris  McMahan. 
CIO  at  Wireless  Retail  Inc.,  a 
Scottsdale,  Ariz. -based  provid¬ 
er  of  wireless  products  and 
services  to  retailers,  said  a 
salesman  might  report  that  he 
sold  10  wireless  dt^ces  in  a 
week  when,  in  ^t.  he  sold 
eight  and  has  two  orders  in  the 
pipeline. 

“Every  company  I  know  of 
has  to  deal  with  the  fudge  fac¬ 
tor.”  Andriole  said.  “Some 
cynics  say  that  real-time  re¬ 
porting  b  terrible  because  it 
gives  you  the  ability  to  make 
wrong  decisions  f^er."  I 


Anaiwr  pratata  hinpiifeiO  IT 
fnaraoan  an  irytao  to 

dtoa  anfeUa  to  tanlnaa 
nacuBins  on  a  laMw  baalB 
is  fnir  companlaB’ raiinca  on 
laQKy  icGounlino  systens  tiai 
■acaniBndoniocnlBdfltan 
dardooatoipnnlrtcs. 

StaraM  coBflng  is  an  an* 
couolinQtotMtoe  lliafs  iiMely 
ised  by  mmiiaduare  to  pradet 
tfiB  coal  of  product  ifiMfitonaa 
tor  a  ful  yav  baaad  on  toa 
prfeas  M  aa  in  place  a(  toe 
end  of  the  premus  year. 


Integration  software 
to  support  real-time 
data  exchanges 

ev  THOMAS  HOmiAN 

Southern  Ca,  a  S10.5S  billion 
utility  and  energy  services 
firm  in  Atlanta,  is  in  the  early 
stages  of  a  multiyear  enter¬ 
prise  iq>plicatk)n  integration 
(EAi)  effort  aimed  at  bolster¬ 
ing  revenue  and  lowering 
costs  throu^tout  its  extensive 
supply  chain  operations. 

As  pan  of  a  project  that  be¬ 
gan  last  year  and  is  due  to 
continue  through  2006.  South¬ 
ern  is  pushing  to  add  real-time 
energy  trading  capabilities 
and  optimize  all  of  its  key  sup¬ 
ply  chain  fimetioDS,  including 
warehousing  and  inventory 
and  lieight  management 

To  suppon  the  effon.  South¬ 
ern  late  last  year  installed 
business  process  integiatiOD 
software  developed  by  Sunny¬ 
vale.  Calif.-based  Vitria  Tech¬ 
nology  Inc.  The  details  of  the 
rollout  will  be  announced  this 
week.  Southern  plans  to  use 
Vitria's  BustnessWare  tools  to 
provide  real-time  exchanges 
of  purcha^ng  data  between  its 
systems  and  those  of  its  busi¬ 
ness  partners  through  an  ener¬ 
gy  trading  network  operated 
by  Pantellos  Group  LP  in  The 


But  ippicalkm  tod  atoport 
toBtocMtotltowMnid 
RitoliAo.totnlyddMCM' 
Braito  toe.  In  (MhM. 
tte.  For  «afnelB.  dUi  toiMB 
anidbyiwndorwytoWittOO 
Mch  d  to  aid  of  am  ynr '  I 
price  tod  ud  bt  but  Into  to 
standeid  coalno  modalB  In  to 
accQUdnQiydini  Bdf  imrtot 
coniMoni  dimge  ad  prioB 
law  to  be  cut  flhapbr*  to  new 
ntoniaHontypialiraanlbara' 
Heeled  to  to  coding  nodeto. 

Thd  cen  be  "e  imfor  prafton* 


Woodlands,  Texas. 

“We’re  trying  to  manage  the 
sourcit^  process  from  the  raw 
materials  phase  all  the  way  to 
the  disposal  of  any  assets  that 
we’ve  acquired,”  said  }acki 
Lowe,  vice  president  of  supply 
chain  management  at  South¬ 
ern.  which  is  also  using  rival 
message-queuing  middleware 
tools  from  IBM  and  Microsoft 
Corp.  as  ()art  of  the  project. 

Lowe  said  the  EAI  initiative 
is  aimed  at  providing  South¬ 
ern's  business  executives  with 
greater  visibility  into  all  of  its 
supply  chain  operations.  The 
project  should  also  simplify 
some  IT  functions,  she  added. 

For  instance.  Southern’s  ac- 
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Southern’s  Supply 
Chain  nish 

COMPWIY  F«CI&  Sets  el«> 
tiicity  and  natural  gas  10  4  miion 
customers  In  toe  Southeast:  tod 
revenue  of  $10.^  last  year 


BUSINESS  CHAUBIGE:  Im¬ 
proving  Hs  supply  chain  by  tower¬ 
ing  costs  «)d  providino  better  re- 
liabiHty  to  customers 


IT  snUTEflY:  Embarked  on  a 
muttyear  EAI  effort  that  Includes 
toeuseoflAtna'sbusinessproc- 
essinlegrdionloolsandmiddle- 
were  from  IBM  and  Microsoft 


utoon  t  oonm  to  udng  fnHkiie 
irdamdtan  to  md  to  cfamginQ 
rBa1dloondtoMLto«id.1d 
conbd  Hid)  pnbiMto  di 
apMdng  cldB  of  apdtobom  k 
dito  to  acoananddifBil'bmB 
dimoK  to  oodtog  ttota.  Iia  told. 

Ntoddhdiaai  ooiRptoiiaa  vd 
tofyhmetodifddntoir 
lagHyaccoddnotodaiiklnor 
dHtoimdtoUS.SKiitoB 
era  Dsnvioi  uQiwMiiona  IT 
nanddfiptiltog  dQUbtomnls, 
toaddad 


counting  maieriab  and  pro¬ 
curement  system  links  to  75 
different  worit-order  and 
accounting  applications 
throughout  the  company.  In 
cum.  many  of  those  systems 
are  tied  to  applications  at 
Southern’s  suppliers  arKl  other 
business  partners. 

But  anytime  a  change  is 
made  to  tme  woik-order  sys¬ 
tem.  foUow-on  charges  have  to 
be  made  to  the  accounting  sys¬ 
tems  to  which  it’s  connected. 
Lowe  said.  The  use  of  Busi- 
ne$s\^^re  should  help  mini¬ 
mize  the  changes  "and  reduce 
some  of  our  support  costs  for 
those  systems,"  she  said. 

Lowe  declined  to  disclose 
how  much  Southern  is  invest¬ 
ing  in  the  EAI  project,  nor 
would  she  estimate  the  size  of 
the  payback  and  efficiency  im¬ 
provements  that  the  company 
expects  to  gain. 

Zarko  Sumic,  a  Bellevue, 
Wash. -based  analyst  at  Meta 
Group  Iitc.,  said  a  growing 
num^r  of  energy  companies 
with  extensive  transmission 
and  distribution  businesses 
are  beginning  to  understand 
the  potential  for  using  EAI 
technology  to  help  make  their 
operations  more  efficient. 

Once  Business  Ware  is  hilly 
operational.  Southern  next 
quarter  plans  to  begin  devel¬ 
oping  interiiKres  to  systems  at 
some  of  its  energy  trading 
partners.  Lowe  said.  The  com¬ 
pany  expects  to  start  process¬ 
ing  transactioas  through  the 
interfaces  in  June,  she  added.  I 
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Antitrust  Suit  Widens  Cartridge  Battle 


BV  PATRICK  THIBODEAU 

A  North  Carolina  company 
that  remanufactures  toner  car* 
thdges  has  filed  an  antitrust 
lawsuit  against  printer  maker 
Lexmark  International  Inc., 
broadening  a  legal  fight  that 
could  affect  the  availability  of 
low-cost  cartridges. 

Sanford,  N.C.-based  Static 
Control  Components  Inc. 
(SCO  claims  that  Lexmark  is 
trying  to  monopolize  the  car¬ 
tridge  market  SCC's  allega¬ 
tion  comes  after  Lexington, 
Ky.-based  Lexmark  filed  a  suit 
in  December  charging  that  the 
remanufacturer  illegally 
copied  some  of  the  chips  used 
to  mate  cartridges  to  Lex¬ 
mark’s  printers  (QuickLink 
36030]. 

Lexmark  won  the  first 
round  in  a  Feb.  28  ruling  by  a 
U.S.  District  Court  judge  in 
Kentucky.  The  judge  issued  a 
preliminary  injunction  that 
bars  see  from  making  the 
chips  used  in  replacement  car¬ 
tridges  for  two  of  Lexmark’s 
laser  printers.  SCC  filed  its 
antitrust  claim  that  same  day 
in  Greensboro.  N.C. 

Congress  Takes  Notice 

The  legal  battle  is  getting  con¬ 
gressional  attention  because 
of  Lexmaric’s  attempt  to  pro¬ 
tect  its  toner  cartridges  by 
citing  the  Digital  Millennium 
Copyright  Act  (DMCA),  a  1998 
law  aimed  at  stopping  music 
and  movie  piracy. 

In  an  interview,  Rep.  Rick 
Boucher  (D-Va.)  said  the  case 
illustrates  the  law’s  shortcom- 
if^  and  charged  Lexmark 
with  using  the  DMCA  to 
“thwart  competition"  —  a 
charge  that  Lexmark  denied. 

One  of  Lexmark’s  key  com¬ 
plaints  is  that  SCC.  in  repro¬ 
ducing  the  printer  chips,  vio¬ 
lated  the  DMCA  by  circum- 
ventii^  “secret  handshake" 
authentication  software  built 
into  the  devices  by  Lexmark. 

But  DMCA  critics  contend 
that  such  authentication  pro¬ 
tections  could  be  applied  to  a 
range  of  software  and  hard¬ 
ware  products.  In  January. 
Boucher  reintroduced  legisla¬ 
tion  that  aims  to  change  the 


DMCA’s  circumvention  re¬ 
strictions.  and  last  week  he 
sent  a  letter  to  House  mem¬ 
bers  citing  his  concerns  about 


Lexmark’s  use  of  the  DMCA. 

In  its  suit.  SCC  claims  that 
Lexmark’s  alleged  anticompet¬ 
itive  practices  are  squeezing 


companies  that  remanuiacture 
toner  cartridges  out  of  the 
market.  To  buttress  that  claim. 
SCC  argued  that  about  3S%  of 
the  toner  cartridges  sold  for 
use  with  Hewlett-Packard 
Ca’s  printers  are  remanufac¬ 


tured.  conq>ared  with  about 
14%  for  Lexmark’s. 

Roger  RydeU,  a  Lexmark 
spokesman,  said  the  company 
“provides  more  choice  in  car¬ 
tridges  for  laser  printers"  than 
any  of  its  rivals.  I 
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Dell’s  Storage  Chief  Pushes  for  Fast  Growth 


As  the  executive  in  of  Dei/  Com¬ 

puter  Corp's  sforqge  unit.  Russ  HoH 


manages  w/iof  he  caUs  an  '"emer^n^ 
business  rhar  already  produces  revenue 
of  SJ  billion  per  year.  A  t  a  recent  confer¬ 
ence  held  here  fy  Cambridge.  Mass.- 


V2X  Shared  Virtual  Arrays  Subsystem 

The  anfy  disk  system  that  lets  you  use  100%  of  its  capacity,  so  you  can  consolidate 
your  data  and  save  on  your  budget  Used  with  SnapVantage'*  software,  you  can  easily 
consolidate  Linux  servers  and  centralize  system  management 


L5S00  Automated  Tape  Library 
&T9940BTape  Drive 

Our  largest  open  sysums  library  gives  you  ample  space  (up  to  1 3.2  P6)  to 
cortsoidaie  data  horn  al  yoiv  different  systems.  And  with  200  GB  capacity  per  cartridge 
and  30  MB/second  transfer  fate,  the  T90eOB  lets  you  do  more  work  in  less  time 


based  fbiresfer  Research  Inc.,  Holt,  vice 
president  and  general  manager  of  Dell 's 
Enterprise  Systems  Group,  spoke  with 
Computerworid  about  where  Dell's 
storage /only  is  headirtg. 

Given  that  many  companies  are  undergoing 
server  consolidation  by  means  of  augment* 
ing  their  storage  resources,  do  you  see 
(MTs  storage  group  taking  any  business 
away  from  its  sanmr  group?  There  is  a 
trend  toward  consolidation,  but  we 
don't  see  it  necessarily  as  fewer 
servers.  There’s  no  lack  of  necessity 
still  for  the  computing  capability  and 
the  applications,  but  from  the  CIO's 
perspective,  it  was  becoming 
very  difficult  for  him  to  manage 
that.  What  we've  seen  is  a  trend 
toward  rack-dense  or  rack-c^ti- 
mized  servers;  the  form  factors 
have  changed.  And  what  we’ve 
typically  found  is  that  cus¬ 
tomers  are  adding  new  projects 
and  applications  for  produc¬ 
tivity.  so  it  tends  to  ofl&et  the 
consolidation  that's  happening. 

But  you  do  SM  server  oonsoMdation  as  a 
(friver  for  your  storage  businesa?  Ab¬ 
solutely.  It's  an  easier-to-manage.  more 
effective  use  of  disk  space.  You  can 
have  one  administrator  supporting 
6TB  as  opposed  to  just  being  able  to 
support  1TB  before. 

What  percentage  of  Don's  business  is  stor¬ 
age  at  this  poM?  We're  over  SI  billion  in 
annual  revenue  for  our  external  stor- 
3ge.  Dell's  total  revenue  is  over  $30  bil¬ 
lion.  so  storage  is  a  small  portion  right 
now.  But  we  look  at  it  in  the  whole 
context  of  our  enterprise  business, 
which  now  accounts  for  about  20%  of 
our  total  revenue. 

What  vriN  your  storage  business  look  Ute 
in  five  years?  From  the  standpoint 
of  product  capabilities,  it  will  just  be 
to  continue  to  monitor  and  adjust 
with  the  trends.  We  have  a  very  com¬ 
plete  portfolio  of  storage  products 
right  now. 

What  is  your  monitoring  of  the  iSCSI  trend 
tsBng  you?  The  standard  for  iSCSI  was 
just  ratified  a  month  ago  [QuickUnk 
36334).  These  emerging  teclmologies 
tend  to  take  off  a  lot  slower  than  most 
analysts  would  like  them  ta  I  don't  ex¬ 
pect  that  iSCSI  is  going  to  replace  Fi¬ 
bre  Channel  However,  there  are  some 
clear  uses  where  iSCSI  will  provide 
some  benefits.  The  first  environment 


is  in  wide-area  connectivity  for  SANs 
(storage-area  networks].  Another  use 
is  providing  [block-level  data]  support 
on  network-attached  storage  [NAS]. 
Currently,  NAS  boxes  are  only  file- 
based  access. 

How  about  the  InfiniBand  1/0  tedmology? 
It's  one  of  those  products  in  the  very 
early  stages  of  standardization,  so  it's 
not  something  that’s  going  to  happen 
overnight.  As  the  modular  blade-type 
servers  start  to  standardize  a  bit  more, 
we  think  InfiniBand  will  play  a  key 
role  in  the  system-level  communica¬ 
tion  between  servers.  We  don’t  see  In¬ 
finiBand  taking  over  storage  intercon¬ 
nects  like  Fibre  Channel;  we  don’t  see 
it  taking  over  the  netwoiit  like  IP.  But  it 
will  be  an  important  transport 
medium  between  modular 
servers. 

So  would  your  stretogy  bo  to  let 
IBM  and  Sun  teat  the  hfinffiwid 
watere  or  to  jump  bi  first?  We're 
working  on  InfiniBand-related 
products  ourselves;  we  won't 
necessarily  wait  for  IBM  or  Sun 
to  pave  the  way.  But  we’re  also 
very  keen  on  delivering  rele¬ 
vant  technolc^.  InfmiBand  is  relevant, 
but  the  timing  is  what  we're  working 
through  right  now. 

How  do  you  see  your  relationship  for  re- 
selBng  OICs  Darfion  midrange  arrays 
evolving  evsr  the  next  few  years?  We  en¬ 
tered  into  the  relationship  in  October 
of  2001;  the  tenets  that  led  us  to  the  re¬ 
lationship  hold  and  have  been  validat¬ 
ed.  [Dell's]  view  [is]  that  all  technoli^ 
is  progressing  along  a  standardization 
curve.  The  area  where  there's  still  a  lot 
of  complexity  and  a  lack  of  standards 
is  in  the  Fibre  Channel  SAN  area.  From 
a  Dell  perspective,  that’s  not  an  area 
where  we  want  to  invest  a  lot  of  our 
own  resources,  because  there  aren't 
standards  there.  So  we  chose  to  part¬ 
ner  with  EMC. 

¥fhst's  gotog  to  be  new  from  DeH  storage- 
wist  over  the  next  year?  You'll  see  Fibre 
Channel-connected  ATA  [Advanced 
Technology  Attachment]  drives  com¬ 
ing  from  Dell  and  EMC  in  the  first  half 
of  this  year.  That  will  allow  customers 
to  continue  to  put  their  business  appli¬ 
cations  and  mission-critical  dau  on 
core  Fibre  Channel  systems  but  have 
the  capability  for  snapshots  or  mirror- 
ic^  [od  less  expensive  disks.  That  will 
progress  to  Serial  ATA  starting  to  show 
up  in  the  latter  part  of  the  year  and  ser¬ 
ial-attached  SCSI  devices  about  a  year 
after  that.  I 


To  me,  success  is  a  35  minute  lunch. 


At  a  restaurant  not  my  desk. 


Means  I'm  not  wasting  time  doing  the 


same  data  management  task  again  and 


Consolidate  your  work  by  consoiidatirtg  data  from  ail  your  different  systems.  Or>e  way  is  with  a  V2X  Shared  Virtual  Array”  subsystem 


and  SnapVantage*  software  to  unite  all  your  Linux  virtual  servers.  Or  an  L5500  automated  tape  library  and  T99406  tape  drive.  There 


are  other  ways,  too.  We'll  help  find  the  one  that's  best  So  storage  administration  takes  a  smaller  bite  out  of  your  day.  Learn  more 
about  this  story  and  other  ways  we  can  help  you  at  www.savethedayxom  STO/tACET^IC'SavetheDay.'' 
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Worse  Than 
Death  and 
Taxes? 


WAR.  IS  THERE  A  MORE  sobering 
word?  A  more  terrifying  prospect? 
Today,  the  threat  hangs  heavy  in  the 
air,  clouding  conversation,  darkening 

our  doorways  and  liable 
to  ^  upon  all  our  heads 
at  any  moment. 

As  the  Bush  adminis¬ 
tration  marches  resolute¬ 
ly  into  the  stiff  wind  of 
global  disapproval,  we're 
all  steeling  ourselves  for 
the  impact  —  of  what  we 
don’t  yet  know. 

For  reservists,  it  could 
mean  a  call  to  duty.  As  a 
neighbor  ottce  said  to  roe, 

"It  may  look  like  we’re 
fust  fooling  around  out 
here  one  weekend  a  month,  but  we're 
not.  This  is  serious  sniff.**  Indeed.  He 
got  called  up  almost  a  year  ago. 

Although  most  of  us  won't  be 
slinging  an  M-16  over  our  shoulders, 
the  threat  of  war  changes  everything. 

Especially  for  IT.  Sure,  we’ve  already 
spent  the  past  two  years  operating 
under  some  very  trying  circum¬ 
stances,  so  you  might  wonder  how 
much  tougdier  it  can  get. 

That  depends  mainly  on  two 
things:  how  prepared  you  are  to  se¬ 
cure  and  defend  yotu*  company's  digi¬ 
tal  assets  and  infrastructure,  and 
whether,  and  how  long,  we  go  to  war. 

Duct  tape  and  plastic  sheeting 
aside,  there  are  real  steps  you  can 
take.  The  key  for  IT  leaders,  notes 
French  Caldwell,  a  research  director 
at  Gartner,  is  that  in  an  era  when 
events  in  the  physical  world  are  re¬ 
flected  online,  systems  connected  to 
the  Internet  are  particularly  vulnera¬ 
ble.  Take  Delta  Air  Lines’  estimate  of 
500  attempts  daily  to  break  into  its 
systems  or  the  recent  theft  of  an  esti¬ 
mated  8  million  credit  card  numbers 
from  Data  Processors  International. 

Remember  the  speed  and  reach  of 
the  Slammer  worm. 

The  issue  seems  less  the  much- 
hyped  cyberterrorum,  and  more  the 
need  to  secure  crlticaU  enterprise  in¬ 
frastructure  and  data  from  haettvists. 


new  viral  strains  and 
physical  assault. 

And  yet  Gartner  last 
week  said  that  one-third 
of  the  250  businesses  it 
surveyed  face  the  loss  of 
critical  data  or  operating 
capability  in  the  wake  of 
a  “severe  calamity."  An¬ 
other  research  firm,  Meta 
Group,  estimates  that  only 
20%  of  the  Global  2.000 
have  truly  effective  busi¬ 
ness  continuity  plans  — 
cap^le  enough  to  enable 
their  organizations  to  survive  a  disas¬ 
ter  without  lasting  adverse  effects. 

Even  without  war.  you’d  better 

■  Develop  a  business  continuity 
plan,  and  appoint  a  cyberincident  re¬ 
sponse  team. 

■  Nail  down  a  serious  security 
plan.  Don’t  just  put  the  manual  in  a 
comer, 

■  Create  an  “air  gap"  between  criti¬ 
cal  infrastructure  control  systems 
and  mission-critical  applications  and 
the  Internet. 

■  Develop  an  e-tnail  policy.  Last 
week's  revelation  about  the  sendmaiJ 


vulnerability  was  a  timely  wake-up 
call  (see  Frankly  Speaking,  page  54). 

If  we  go  to  war,  you  can  eicpect 

■  A  call  from  the  CEO  asking  to  re¬ 
view  your  disaster  and  business  con¬ 
tinuity  plans. 

■  Fewer  in-person  due  diligence 
checks  from  U.S.  partners  at  overseas 
outsourcing  firms,  which  will  see  a 
possible  slowing  in  their  sales  cycles. 

■  Rising  anti-American  sentiment 
driving  the  need  to  protect  overseas 
ofifices,  personnel  and  systems.  Trav¬ 
el  screeching  to  a  near  halt  (Video- 
conferencing  and  the  telecoms  will 
be  the  big  beneficiaries  here.) 

If  the  war  drags  on,  IT  will  be 
fighting  a  battle  on  two  fronts:  eco¬ 
nomic  and  security: 

■  A  lengthy  engagement  is  expect¬ 
ed  to  bring  spending  and  the  econo¬ 
my  to  a  virtual  standstill  while  push¬ 
ing  oil  prices  skyward,  negatively  af¬ 
fecting  corporate  budgets. 

■  As  the  threat  of  physical  and  cy- 
berterrorist  attacks  spirals,  some 
companies  may  want  to  look  into  bio¬ 
metric  physical  security  devices. 

You  never  know  when  a  war-relat¬ 
ed  incident  could  give  new  meaning 
to  the  term  agile  corporation.  As  for¬ 
mer  cybersecurity  czar  Richard 
Clarke  often  reminded  us,  the  nation 
is  counting  on  the  private  sector  to 
combat  threats  to  our  critical  infm- 
structure.  Don't  be  caught  unaware.  I 


Three  THINGS  in  life 
axe  certain:  Death,  tax¬ 
es  and  lost  data. 

If  you’re  an  IT  executive, 
this  third  bane  of  your  exis¬ 
tence  probably  isn't  going  to  get  much 
worse.  But  if  you’re  in  finance,  new 
regulations  governing  the  retention 
and  management  of  internal  and  ex¬ 
ternal  communications  might  make  it 
seem  worse  than  death  or  taxes. 

The  Securities  and  Exchange  Com¬ 
mission’s  new  Rule  17a-4  goes  into  ef¬ 
fect  in  May.  (There  are  also  revised 
rules  from  the  New  York  Stock  Ex¬ 
change.)  It  specifies  communications 
compliance  that  covers  e-mail,  attach¬ 
ments,  memos  and  instant  messagiag 
as  well  as  routine 
phone  conversations. 

The  quandary  for 
IT  departments  is 
how  to  compile  Che 
arsenal  of  software 
and  hardware  tools 
necessary  to  capture, 
store  and  easily  re¬ 
trieve  the  oceans  of 
data  sloshing  around 
a  financial  services 
firm.  For  example. 

Merrill  Lynch  had 
more  than  57.000  employees  in  36 
countries  at  the  beginning  of  2002. 
That's  a  lot  of  people  communicating 
in  a  variety  of  ways  to  many  other  in¬ 
dividuals. 

This  communications  tracking  and 
management  costs  big  bucks,  accord¬ 
ing  to  Charles  Brett,  a  senior  program 
director  at  Meta  Group.  He  estimates 
that  a  firm  with  S.OOO  brokers  gener¬ 
ates  about  20GB  to  50GB  of  e-mail  per 
day  to  be  stored  on  nonerasable  opti¬ 
cal  tapes.  “Each  WORM  {wiiteKince, 
read-many]  tape  bolds  about  9GB.* 
Brett  says.  “So  you  mi^t  be  looking  at 
$150  to  $500  a  day,  every  day,  and 
that's  just  the  cost  of  the  disks.* 
Obviously,  there's  storage,  duplica- 
tioD  and  management  as  weU.  And 
youll  need  search  tools  to  check  for 
keywords  (“<3et  rich  quick"  comes  to 
mind).  Other  costs  must  be  consid¬ 
ered  as  weU.  Brett  estimates  that  com¬ 
panies  can  spend  upward  of  $1  million 
just  to  get  started. 
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'AR.  IS  THERE  A  MORE  sobering 
word?  A  more  terrifying  prospect? 
Today,  the  threat  hangs  heavy  in  the 
air,  clouding  conversation,  darkening 


our  d<X)r^’a>'s  and  liable 
to  fall  upon  all  our  heads 
at  any  moment. 

As  the  Bush  adminis¬ 
tration  marches  resolute¬ 
ly  into  the  stiff  wind  of 
global  disapproval,  we're 
all  steeling  ourselves  for 
the  impaCT  —  of  what  we 
don't  yet  know. 

For  resers’ists,  it  could 
mean  a  call  to  duty.  As  a 
neighbor  once  said  to  me. 

“It  may  look  like  we  re 
lust  fooling  around  out 
here  one  weekend  a  month,  but  we're 
not.  This  is  serious  siufr."  Indeed.  He 
got  called  up  almost  a  year  ago. 

Although  most  of  us  won't  be 
slinging  an  M-IO  over  our  shoulders, 
the  threat  of  war  changes  everything. 
Especially  for  IT.  Sure,  we’ve  already 
spent  (he  past  two  years  operating 
under  some  very  trying  circum¬ 
stances.  so  you  might  wonder  how 
much  tougher  it  can  get. 

That  depends  mainly  on  two 
things:  how  prepared  you  are  to  se¬ 
cure  and  defend  your  company's  digi¬ 
tal  assets  and  infrastructure,  and 
whether,  and  how  long,  we  go  to  war. 

Duct  tape  and  plastic  sheeting 
aside,  there  are  real  steps  you  can 
take.  The  key  for  IT  leaders,  notes 
French  Caldwell,  a  research  direaor 
at  Gartner,  is  that  in  an  era  when 
events  in  the  physical  world  are  re¬ 
flected  online,  systems  connected  to 
the  Internet  are  particularly  vulnera¬ 
ble.  Take  Delta  Air  Lines'  estimate  of 
500  attempts  daily  to  break  into  its 
systems  or  the  recent  theft  of  an  esti¬ 
mated  8  million  credit  card  numbers 
from  Data  Processors  International. 
Remember  the  speed  and  reach  of 
the  Slammer  worm. 

The  issue  seems  less  the  much- 
hyped  cybcrterrorism.  and  more  the 
need  to  secure  critical  enterprise  in¬ 
frastructure  and  data  from  hactivists. 


new  viral  strains  and 
physical  assault. 

And  yet  Gartner  last 
week  said  that  one-third 
of  the  250  businesses  it 
sun'eyed  face  the  loss  of 
critical  data  or  opemting 
capability  in  the  wake  of 
a  “severe  calamity."  An¬ 
other  research  firm.  Meta 
Group,  estimates  that  only 
20«o  of  the  Global  2.000 
have  truly  effective  busi¬ 
ness  continuity  plans  — 
capable  enough  to  enable 
their  organizations  to  surv  ive  a  disas¬ 
ter  without  lasting  adverse  effects. 

Even  without  war.  you’d  better 

■  Develop  a  business  continuity 
plan,  and  appoint  a  cyberincident  re¬ 
sponse  team. 

■  Nail  down  a  serious  security 
plan.  Don’t  just  put  the  manual  in  a 
corner. 

■  Create  an  “air  gap”  between  criti¬ 
cal  infrastructure  control  systems 
and  mission-critical  applications  and 
the  Internet. 

■  Develop  an  e-mail  policy.  Last 
week's  revelation  about  the  sendmail 


vulnerability  was  a  timely  wake-up 
call  (see  Frankly  Speaking,  page  54). 

If  we  go  to  war,  you  can  expect 

■  A  call  from  the  CEO  asking  to  re¬ 
view  your  disaster  and  business  con¬ 
tinuity  plans. 

■  Fewer  in-person  due  diligence 
checks  from  U.S.  partners  at  overseas 
outsourcing  firms,  which  will  see  a 
possible  slowing  in  their  sales  cycles. 

■  Rising  anti-American  sentiment 
driving  the  need  to  protect  overseas 
offices,  personnel  and  systems.  Trav¬ 
el  screeching  to  a  near  halt.  (Video- 
conferencing  and  the  telecoms  will 
be  the  big  beneficiaries  here.) 

If  the  war  drags  on,  IT  will  be 
fighting  a  battle  on  two  fronts:  eco¬ 
nomic  and  security: 

■  A  lengthy  engagement  is  expect¬ 
ed  to  bring  spending  and  the  econo¬ 
my  to  a  virtual  standstill  while  push¬ 
ing  oil  prices  skyward,  negatively  af¬ 
fecting  corporate  budgets. 

■  As  the  threat  of  physical  and  cy¬ 
berterrorist  attacks  spirals,  some 
companies  may  want  to  look  into  bio¬ 
metric  physical  security  devices. 

You  never  know  when  a  war-relat¬ 
ed  incident  could  give  new  meaning 
to  (he  term  agile  corporation.  As  for¬ 
mer  cybersccurity  czar  Richard 
Clarice  often  reminded  us.  the  nation 
is  counting  on  the  private  sector  to 
combat  threats  to  our  critical  infra¬ 
structure.  Don’t  be  caught  unaware.  I 
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PIMM  FOX 

Worse  Than 
Death  and 
Taxes? 

Three  things  in  life 
are  certain;  Death,  tax¬ 
es  and  lost  data. 

If  you’re  an  IT  executive, 
this  third  bane  of  your  exis¬ 
tence  probably  isn’t  going  to  get  much 
worse.  But  if  you’re  in  finance,  new 
regulations  governing  the  retention 
and  management  of  internal  and  ex¬ 
ternal  communications  might  make  it 
seem  worse  than  death  or  taxes. 

The  Securities  and  Exchange  Com¬ 
mission's  new  Rule  17a-4  goes  into  ef¬ 
fect  in  May.  (There  are  also  revised 
rules  from  the  New  York  Stock  Ex¬ 
change.)  It  specifies  communications 
compliance  that  covers  e-mail,  attach¬ 
ments,  memos  and  instant  messaging 
as  well  as  routine 
phone  conversations. 

The  quandary  for 
IT  departments  is 
how  to  compile  the 
arsenal  of  software 
and  hardware  tools 
necessary  to  capture, 
store  and  easily  re¬ 
trieve  the  oceans  of 
data  sloshing  around 
a  financial  services 
firm.  For  example. 

Merrill  Lynch  had 
more  than  57.0()0  employees  in  36 
countries  at  (be  beginning  of 2002. 
That's  a  lot  of  people  communicating 
in  a  variety  of  ways  to  many  other  in¬ 
dividuals. 

This  communications  tracking  and 
management  costs  big  bucks,  accord¬ 
ing  to  Charles  Brett,  a  senior  program 
director  at  Meta  Group.  He  estimates 
that  a  firm  with  5.000  brokers  gener¬ 
ates  about  20GB  to  50GB  of  e-mail  per 
day  to  be  stored  on  nonerasable  opti¬ 
cal  tapes.  “Each  WORM  [write-once. 
read-many]  tape  holds  about  dGB.** 
Brett  says.  “So  you  might  be  looking  at 
$150  to  $500  a  day.  every  day.  and 
that's  just  the  cost  of  the  disks." 

Obviously,  there's  storage,  duplica¬ 
tion  and  management  as  well.  And 
you'll  need  search  tools  to  check  for 
keywords  (“Get  rich  quick"  comes  to 
mind).  Other  costs  must  be  consid¬ 
ered  as  well.  Brett  estimates  (hat  com¬ 
panies  can  spend  upward  of  $1  million 
just  to  get  started. 
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Register  today  to  attend  the  \ 
premier  event  on: 

•  Storage  Management 

•  Enterprise  bifrastrucfen 

•  Business  Continuity 

•  Data  Management  anilj|B|udb^M 

•  Emerging  TochnoloflMe^^^[||UP 


Are  you  wrestling  with  storage  and  data  management  in  today's  where  fT  Managers  and  professionals  get  an  SNIA-endorsed 
chaNenging  business  climate?  Is  your  infrastructure  under  increased  education,  a  hold's  on  view  of  the  worid's  only  SNIA-sanctioned 

pressure?  Are  business  continuity  worries  keeping  you  up  at  night?  interoperability  and  Solutions  Demo,  and  access  to  legions  of  peers. 
Then  attend  Storage  Networidng  World  (SNW).  the  only  conference  experts  and  solutions  you  won't  find  anywhere  else. 


See  and  Hear  Regis  McKenna _ 

a  Regis  McKenna 

RnoMwd  lidmlaey  AdWm, 
WMynCmtaMMdAulhor 

New  "liKiwwAti^arMfcidiBlry  Standard 
SaparaHng  Hype  frtan  RuMy 

Rnd  Out  How  CIOs  Are  Coping 


Ulrich  Seif 

EWtOO 


See  the  Worid’s  Foremost  Storage 
Interoperability  &  Solutions  Demo! 
“Uniting  the  Wortd  of  Storage" 

Do  you  hM  ••  coMRidhig  MaRucw*  to  Moxrt 


ly  wtwi  s««iaM  Uh  hg»  moMd  on? 


WWwXONMltwXwAigywiocrfcallowiMliimthia 
dHonnci?  NiidtommiMnKnibrieo«ehtw 
iWMtadfewm?  fMyforSCSI?  Kyou 
nMnd to  «iy  ol  taM  (RMlIofa,  than  you  HMd 
ID  SM  ths  SMAT  NgroporWIty  and  SoUnns  Oemoi 
bi  niK  Damo*.  youl  SM  oMt  90  SNA  nwite 
carBpartaodawoHoRUethoiOeclnjmorsoluMons.  YbuY  mart  taeapetb.  gal 
yov  afwm  and  Mi  tho  tui  wfea  of  SNA  Mswiogy  voeiRcaliDns  lhal 


anaMa  landot  chotOE  AndyoulSMftaWoapraductswttilncnMtdaiDrige 
pv  aoM*  toot  n«i  look  to  aulomMa  nanigMnant  and  h)  apai>  more  (endots. 
itua  youY  SM  iSCSI  In  acHoTL 


Hear  Real-World  User 
Implementation 
Studies 

At  Storage  Networking  World.  youH  ' 
see  IT  managers  and  professionals  , 
describe  how  they  implemented  key  ' 
storage  lechnolo^  in  today’s 
world.  You’ll  learn  from  their  valuable  lessons  and  have  an 
opportunity  to  network  with  them. 

Get  an  SNIA-Endorsed  Education 

•  A  Primer  delivering  basic  Storage 
concepts,  termirtoiogy  and  busi¬ 
ness  applications. 

•  Exclusive  SNIA-produced  and 
Quivered  Tutorial  Sessions,  offer¬ 
ing  immediately  impiementable 
tips,  tools  and  techniques  that  cover: 

•  Voice  of  the  User  and  Virtualization 

•  Disaster  Recovery.  Backup/Restore  and  High 
Availability  Solutions 

•  Securing  and  Managing  Yow  Storage  Networks 

•  Focus  on  Networking  Your  Storage 

•  Focus  on  Storage 

See  the  World's  Largest  Storage 
Industry  Expo 


You1l  participate  in  live  demonstra¬ 
tions  and  meet  exhibiting  compa¬ 
nies  specializing  in  the  latest  data 
management  and  storage  network¬ 
ing  products  and  services. 


For  more  information  and  to  register, 
visit  vvww.snwusa.com/expo  or  call  1-800-883-9090 

(1-508.820-8159) 


J 


Witness  User  Case  Studies 


Register  Today! _ _ 

Options  for  IT  End-Users*  Pre-Repfetration  (through  Appiwt) _ On-Site  Reptetration  («ttef  tom  nih) 

Senegal  Conference  Package  (Apr  15. 16)  SI-095  S1.245 

(KiduMs  Em.UNtsMReeeonons] 


I  Ifitinu  .  ."I- 

solution  tips  '*• 
impletncnijiittfi 
securtly.  (.ontmii.t, 
and  intetopefAb'i**! 
Ifwt  ntadr  my  tmi 
wrjrtl'whiti- 


J 


•  cnfbtt.  * 

storage  usnrv 

f 


rnrj'j'  ■ 
storaqr  , 
and  traifiuii 


Total  4-day  Package  (Apr.  14.15, 16, 17):  S1.490  S1.690 

(Induces  General  Conference  ^ckage  techncetM Business  Tracks  SNU-oroduced  Tunnels.  SMA-Cerhlicaiton'Test-Ready'Couises.EjQe.Weetsahd  Receptions) 


Options  for  IT  Vendors** _ 

Total  4-day  Package  (Apr.  14. 15, 16. 17):  51.490  $1,690 

(A<i«l«Ue  W  Soonsoring  VertOors  ant)  Vieir  Reselers/lnlegtalors.  InilusDy  ConsrJtants  end  Storage  SokJlions  Imiilefnennrs) 


STORAGE 

NETWORKING 

wo  Rl-D 


fifd  &  Endonc<J  hy 

''XjSNIA 


Application  for  Conference  Registration 


TO  REGISTER: 

•  to  this  form  to  508-626*6524 

•  Or  register  onime  at  wvvw.sriwusaxo(ri/«xpo 

•  You  will  receive  a  confirmation  via  email 


QUESTIONS? 

•  Cal:  our  Customer  Service  Line  at  800-883-9090  f 

•  Emafcaiwieggconiputervwrldxom 


Options  for  IT  End-Users* 

Pr»*R«gi$tration 

{througli  April  tlltil 

On-Site  Registration 

(alter  Apid  mi) 

General  Conlerence  Package  (Apt.  15, 16). 

(Mudes  Expo.  Meals  end  Recepnons) 

□  $1,095 

□  $1,245 

Total  4-day  Package  (Apr.  14. 15. 16. 17):  □  $1,490  □  $1,690 

(hcludes  GenenI  ConlereiKe  RacKage.  Tedncal  and  Business  Twdis  SIM-produced  Tutonais.  SNU-CeiNical«n  Hesi-Reedy'  Courses.  Expo.  Meals  and  Receptions] 

Options  for  IT  Vendors** 

Non-SponsofXtg/Exhibiting  Vendor  Package: 

Registration  Information:  (This  section  mi 

jsi  be  completed  in  order  to  process  your  application) 

Suite.  Ant-  etc.; 

Fax  Number 

F-Mai)  Address: 

□  Special  Services  Required?  (Pieucanadiw 


Would  yen  IBw  lo  receive  laformarioo  aboot  pUrliig  iu  tbe  golf  oatiog  oa  Monday.  AprU  14tb  (PM)?  Q  Yes  □  No 
Please  indicate  yowpcefemdcofifereiiccalitat  rise:  Qs  Ql  Qxl  □  XXL  □  XXXL 


www.computefworid-cotn 
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Unfortunateiy.  few  IT  departments 
are  being  given  meaningful  guidance 
by  compUimce  and  legal  departments 
about  where  and  how  to  invest  the 
money.  So.  many  are  relying  on  ven- 
dors  to  know  what  technology  is  or 
isn't  required. 

“There  are  some  pretty  immature 
solutions  out  there.”  says  Brett. 

It's  possible  to  capture  everything 
inbound  and  outbound,  but  captiuing 
the  internal  stulf  gets  complicated. 

As  a  result,  some  companies  are  look¬ 
ing  at  this  as  a  chance  to  re-evaluate 
e-mail  at  the  enterprise  level  and  initi¬ 
ate  operational  management  of  e-mail 
—  for  example,  making  users  catego¬ 
rize  e-mail  ^fore  it's  distributed  and 
archived. 

Brett  says  the  most  important  ques¬ 
tions  for  potential  vendors  are  about 
scalability  and  ownership. 

Can  they  demonstrate  real  scalable 
soludoRS,  and  what  is  their  specific 
eiq>ertise?  Without  these  answers, 
your  communications  aren’t  being  giv¬ 
en  the  attention  the  law  demands.  I  - 

THORNTON  MAY 

Save  the 
Suits  From 
Themselves 

Rudy  giuliani  argued 
that  the  best  way  to 
fight  crime  is  to  fight 
the  disorder  that  precedes  it 
—  those  quality-of-life  crimes 
such  as  graying  grafTlH.  panhandling, 
breaking  windows.  Uttering  and  letting 
buildings  crumble  and  dec^.  I  think 
you  can  make  a  similar  arguntent  that 
the  best  way  to  improve  ROl  for  IT  is 
to  fight  the  mental  disorder  that  bur¬ 
dens  IT’S  reputation  —  those  quality- 
of-mind  crimes  such  as  underinvest¬ 
ing,  overinvesting  and  bad  personal  in¬ 
formation-management  behavior. 

What  leads  me  to  this  line  of  think¬ 
ing  is  some  work  Pve  been  doing  with 
Hal  R.  Varian.  dean  of  the  School  of 
Information  Management  and  Systems 
at  the  University  of  CaUfomia.  Berke¬ 
ley.  While  conducting  focused  re¬ 
search  in  the  financial  services  mar¬ 
ket.  we  found  the  highest  mental 
crime  areas  to  be  the  following: 

■  Information  opportunity:  Deter¬ 
mining  where  IT  money  should  be 
spent. 

■  Application  I<^  Spending  the 
money  on  the  ri^t  teiduiologies. 


•  Information  economics: 

Getting  the  best  deal  on  the 
money  we  spetuL 

In  recent  years,  the  ability 
to  purchase  technology  has 
run  ahead  of  the  typi^  or¬ 
ganization's  ability  to  ex¬ 
tract  maximum  value  from 
what  it’s  been  buying.  The 
*^vhispe^  number"  (the  one 
no  one  likes  to  publicly  ac¬ 
knowledge)  for  aimual  IT 
waste  is  around  $75  billion. 

These  are  dollars  spent 
yearly  on  failed  IT  projects. 

IT  managers  are  certainty 
not  blameless  in  this  annual  value 
sinkhole,  but  we  frequently  forget  that 
for  every  dollar  wasted,  there  were 
users  —  let’s  call  them  “Suits"  —  wdio 
were  very  close  to  the  center,  where 
choices  were  made  and  value  was  de¬ 
termined. 

The  unspoken  dirty  secret  in  IT 
waste:  "It’s  not  the  technology.  It's  the 
Suits  who  are  funding  the  te<^ology." 
For  the  longest  time.  IT  managers  had 
a  credibility  problem  with  the  busi¬ 


ness.  But  in  reality,  the  in¬ 
verse  IS  true:  the  business 
has  a  credibility  problem 
with  IT. 

John  Adams,  one  of  the 
political  geniuses  behind 
the  Declaration  of  Inde¬ 
pendence.  often  wrote  his 
mucb-lovcd  wife,  even  dur¬ 
ing  the  darkest  days  of  the 
American  Revolution.  In 
oite  note,  he  said,  “We  can¬ 
not  guarantee  success,  but 
we  can  deserve  it."  The  tru¬ 
ly  sad  reality  of  the  pr^- 
nant-with-of^rtunity  age 
we  live  in  is  that  most  Suits  don’t  de¬ 
serve  success  from  their  investments 
in  IT.  They  haven’t  laid  the  ground¬ 
work  or  done  the  homework  necessary- 
to  develop  good  IT  judgment. 

The  question  facing  FT  leaders  to¬ 
day  is.  What  is  the  minimal  obUgatioo 
of  IT  to  educate  the  Suits  in  the  non- 
toxic  or.  at  a  minimum,  nonwasteful 
use  of  information  technologies? 

Most  IT  shops  have  determined  that 
they  t>eed  do  nothing  more  than  train 


executives  in  the  use  of  low-level 
desktop  applications.  Ihis  is  the  tech¬ 
nology  equivalent  of  a  sixth-grade  ed- 
ucation.  Technology  literacy  will  be¬ 
come  foundational  to  the  economy  of 
the  future.  Suits  must  know  more 
about  IT.  IT  leaders  need  to  know 
more  about  what  the  Suits  know  and. 
more  important,  what  they  don’t  know 
about  IT. 

Regarding  the  technology  literacy  of 
executives.  IT  leaders  need  to  deter¬ 
mine  the  following: 

•  Things  Suits  currently  "know" 
that  they  need  to  unlearn- 

■  Things  Suits  should  know  that 
they  never  learned. 

•  Things  that  accelerate  the  Suit 
technology-leanuDg  processes. 

In  advanced  companies  today.  IT 
leaders  are  evaluating  their  peers  on 
their  technical  competence.  Your  com¬ 
pany  should  be  doing  it  too.  I 


WANT  III  OniM? 

OUam  c(4n«»u  and  Ms  to  arctms  ol  snwxe 
cohma  an  on  our  WM)  Sto 


READERS'  LEHERS 


AAeasuring  Risk 

The  REPORT  "Ridoe  Reteases 
Cyt)eiOeferise.Ph|«icalSlrale- 
gies'iOuckUnk  36404]  reflects 
thesenousnessollhen^forcy- 
bersecurity  improvement  -  and  the 
potenliai  for  regulaiory  intervenliori 
if  the  market  fals  to  respond  ade¬ 
quately.  Whie  oovemment  efforts 
to  establish  a  cyberattack  alert  sys¬ 
tem  are  laudable,  it  is  essential  Ito 
both  the  pnvale  and  pubic  sectors 
get  the  kind  of  guafltative  guidance, 
»xl  associated  nsk  metrics,  that 
wfienabiethemtoidentily.mes- 
sure  and  manage  the  (tsks  to  their 
information  technology  and  com- 
inxiKatKXB  environmants.  and  to 
gel  ciedibla  ROl  data  on  toforma- 
bon  security  investments.  That 
means  the  estabfishment  of  the 
GenerdyAccepledSysiamSecun- 
ty  Prina^  The  principies  are  a 
standard  population  of  threats  and 


quanSalMe  risk  assessment  tools 
that  enable  organizations  to  xtenti- 
ty.measurBandmanagBnskcorr- 
fidenlly.  «>plyino  the  l^accepied 
measure  of  busmess  -  ROl  -  to  the 
broad  array  of  safeguard  and  con¬ 
trol  investments  for  mionnation 
securty. 

WHOiter 

President  OPA  Inc^  FdafieUL 
Qtl^. 


Broad  Expertise 

MnDHMTrscolwnn*IT 
.Job  Trends  Yietd  Surprises* 
{{XMkU*  36()15]  was  mtornalive. 
buttheweyhecomparesspeoal' 
ists  to  ganaraists  seems  a  bit 
shoftsiqhtod  In  my  experience,  be- 
ing  an  expert  in  one  field  has  many 
KTiportanl  benefits,  reganflass  of 
the  job  market  One  is  that  people 
often  consaler  experts  to  be  expert 
in  other,  comptementary  fields.  An- 


Telemrking  Loses  Some  race  Vahie 


UaraRTIIMTELy.  since  most 
companies  sti  don't  have  a 
torrnal  laleerorking  plan  in  place, 
most  nonagers  stt  vtow  telecom¬ 
muting  as  a  perk  that  is  an  excep¬ 
tion  rather  than  the  rule  [(hadlink 
365T71  Aflvsixyearsofsuccess' 


Mtefecommutinginthealler- 
noons.  I  lost  my  last  |0b  because 
the  comfifions  lor  retraining  in  the 
new  system  requtred  daylong  face 
time. 

BbnCenNl 

Marbiehead  Mass. 


other  anses  dunng  the  ptfsul  of 
aroenBerYouttannlyacQunan- 
ciary  sMs.  which  often  make  you 
a  gerieraksl  as  a  side  effect. 

My  own  career  6  a  good  exam¬ 
ple,  f  have  been  a  Borland  Delphi 
speoakst  swice  Delphi's  ncapbon.  I 
marketed  mysell  only  as  such.  As  a 
DefijhI  ‘speoelBt.'  I  performed  Or¬ 
acle.  Interbese  and  Microsoh  SQL 
Server  database  design.  Web  de¬ 
sign  Onciudino  JavaScnpl  and 
Peri),  lelaconvnunications.  project 
management  and  more 
MchMl  MgehoWMi 
Presidenr.  AfcGillti  Witcor. 
Wrbsfrr  dr  Co.,  Oiicqgo 
fond  ouliior  of  The  Secret 
Path  to  Contract  Program- 
nung  Ricbe&J, 

mJugohosian@mwwcorp.com 


FblowingHIPAA 

IMWEIEBILECTUIMon 
HRAA  seoafiy  and  conduclmg 
compliance  ertpagementssmee 
199a  In  the  wticie  *Htf>AA  Oau 
RtdesLeaveOoicesloiriQuicIt- 
Link  3K26 ).  Karan  Trudd  of  Bto 
Centers  for  Mwtero  a  Medinid 
Serwees  is  quoted  es  saying  that 
encrypfionofheallhdMalransmt- 
led  over  W«  Mamet  B  no  longer 
mandated  and  can  be  beaed  on  risk 


assessments  by  companms.  Actu¬ 
al,  the  busness  npao  ot  doctors' 
ancrypong  heaflh  data  6  ulbakiw. 
but  doing  so  s  probably  the  saw^ 
best  sBoiniy  control  to  protect  data 
ihat  can  be  used  XI  a  smal  practice 
TruSecure's  Marne  Gonton  8  also 
offbasemsayinglhallbgalion- 
wary  companies  mighi  stick  «wih 
paper  xBteod  of  roing  out  auto¬ 
mated  medcM  records  TheHMA 
privacy  rule  covers  healih  raconJs  In 
al  iormats.  paper  or  aiectronc. 
There  «  no  advantage  to  not  usxiQ 
etsetrone  lacords.  because  you  are 
stI  raquead  to  protect  the  data. 
FrwdLanpten 
Senior  principaJ  cortsulAtnr. 
Guordenr /nc.,  Seoftlc. 
fredXangstontgiGuardencaim 

COMPUTeiWOMJ)  watoornes 
cummants  from  Its  waders,  tattws 
vA  be  edaed  for  breiRy  and  dvity. 
They  shoMd  be  addtea^  to  Jamie 
EcMe.  leHers  editcx.  ComputorNoild. 
PO  Box  9T7L  SOO  Old  Connecticut 
Wt.  Frareew^atn.  Mass- OlTDI 
Fax:(S(»)B79-4B43 
E-ma*  MkxwAconpilerworkLcom 
include  an  address  and  phone  num¬ 
ber  for  ininedate  verdicalKin. 

O  More  Men  cn  toeae  and  ottwr 
toan  are  an  Dtf  Mb  lie 
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Unfortunaieiy.  few  (T  departments, 
are  being  given  meaningful  guidance 
by  compliance  and  legal  departments 
about  where  and  how  to  invest  the 
money.  So.  many  are  relying  on  ven¬ 
dors  to  know  what  technology  is  or 
isn’t  required. 

“There  are  some  pretty  immature 
solutions  out  there."  says  Brett. 

It’s  possible  to  capture  everything 
inbound  and  outbound,  but  capturing 
the  internal  stuff  gets  complicated. 

As  a  result,  some  companies  arc  look¬ 
ing  at  this  as  a  chance  to  re-evaluate 
e-mail  at  the  enterprise  level  and  initi¬ 
ate  operational  management  of  e-mail 
—  for  example,  making  users  catego¬ 
rize  e-mail  before  it's  distributed  and 
archived. 

Brett  says  the  most  important  ques¬ 
tions  for  potential  vendors  are  about 
scalability  and  ownership. 

Can  they  demonstrate  real  scalable 
solutions,  and  what  is  their  specific 
expertise?  Without  these  answers, 
your  communications  aren't  being  giv¬ 
en  the  attention  the  law  demands.  I 

THORNTON  MAY 

Save  the 
Suits  From 
Themselves 

Rudy  giuliani  argued 
that  the  best  way  to 
fight  crime  is  to  fight 
the  disorder  that  precedes  it 
—  those  quality-of-life  crimes 
such  as  spraying  graffiti,  panhandling, 
breaking  windows,  littering  and  letting 
buildings  crumble  and  decay.  I  think 
you  can  make  a  similar  argument  that 
the  best  way  to  improve  ROI  for  IT  is 
to  fight  the  mental  disorder  that  bur¬ 
dens  IT'S  reputation  —  those  quality- 
of-mind  crimes  such  as  underinvest¬ 
ing.  os’erinvesting  and  bad  personal  in¬ 
formation-management  behavior. 

What  leads  me  to  this  line  of  think¬ 
ing  is  some  work  IVc  been  doing  with 
Hal  R.  Varian.  dean  of  the  School  of 
information  Management  and  Systems 
at  the  University  of  California.  Berke¬ 
ley.  While  conducting  focused  re¬ 
search  in  the  financial  services  mar¬ 
ket.  wc  found  the  highest  mental 
crime  areas  to  be  the  following: 

■  Information  opportunity:  Deter¬ 
mining  where  IT  money  should  be 
spent. 

■  Application  IQ:  Spending  the 
money  on  the  right  technologies. 


•  Information  economics: 

Getting  the  best  deal  on  the 
money  we  spend. 

In  recent  years,  the  ability 
to  purchase  technology  has 
run  ahead  of  the  typical  or¬ 
ganization's  ability  to  ex¬ 
tract  maximum  value  from 
what  it’s  been  buying.  'ITte 
“whisper  number"  (the  one 
no  one  likes  to  publicly  ac¬ 
knowledge)  for  annual  IT 
waste  is  around  S75  billioa 
These  are  dollars  spent 
yearly  on  failed  IT  projects. 

IT  managers  are  certainly 
not  blameless  in  this  annual  value 
sinkhole,  but  we  frequently  forget  that 
for  every  dollar  wasted,  there  were 
users  —  let's  call  them  ■‘Suits"  —  who 
were  very  close  to  the  center,  where 
choices  were  made  and  value  u’as  de¬ 
termined. 

The  unspoken  dirty  secret  in  IT 
waste:  "It’s  not  the  technology.  It’s  the 
Suits  who  are  funding  the  technology." 
For  the  longest  time.  IT  managers  had 
a  credibility  problem  with  the  busi¬ 


ness.  But  in  realiiv,  the  in¬ 
verse  is  true:  the  business 
has  a  credibility  problem 
with  IT 

h*hn  Adams,  one  of  the 
political  geniuses  behind 
the  Declaration  of  Indc 
pendeiHv.  iiften  wrote  his 
much-loved  wife,  even  dur¬ 
ing  the  darkest  days  of  the 
American  Revolution.  In 
one  note,  he  said.  “We  can¬ 
not  guarantee  success,  but 
we  can  deserve  it."  The  tru¬ 
ly  sad  reality  of  the  prcg- 
nani-wiih-opponunity  age 
we  live  in  is  that  most  Suits  don’t  de¬ 
serve  success  from  their  investments 
in  IT.  They  haven’t  laid  the  ground¬ 
work  or  done  the  homess’ork  necessary 
to  dcs’clop  good  IT  judgment. 

The  question  facing  IT  leaders  tiv 
day  is.  What  is  the  minimal  obligation 
of  IT  to  educate  the  Suit.s  in  the  non¬ 
toxic  or.  at  a  minimum,  nonwasteful 
use  of  information  technologies.^* 

Miwi  IT  shops  have  determined  that 
they  need  do  nothing  more  than  train 


executives  in  the  use  of  low-level 
desktop  applications.  This  is  the  lech- 
nuk>g>'  equivalent  of  a  st.xth-grade  ed¬ 
ucation.  Tcchnolog)’  literacy  will  be¬ 
come  foundational  to  the  ectinomy  of 
the  future.  Suits  must  know  mt^rt" 
about  IT-  IT  leaders  need  to  know 
more  ab«>ui  u  hat  tlie  Suits  knou  and. 
more  important,  what  they  don’t  know 
about  IT 

Regarding  the  technology  literacy  of 
executives.  IT  leaders  nos'd  to  deicr- 
minc  the  following; 

■  Things  Skiit*  currently  "know” 

I  that  they  need  to  unlearn. 

■  Things  Suits  should  know  that 
they  nes'cr  learned. 

■  Things  that  accelerate  the  Suit 
technology-learning  processes- 

In  advanced  cimtpanies  today.  IT 
loaders  are  evaluating  their  peers  on 
their  technical  competence.  Vour  ci)m- 
I  pany  slumld  be  doing  it  loo.  I 
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Measuring  Risk 

The  report  'Ridge  Releases 
CybwJelense.  Physical  Strate- 
gies"  [OuicHink  36404]  reflecis 
the  seriousness  ol  the  need  for  cy- 
bersecunty  improvement  -  and  the 
poteniial  lor  regulatory  miervention 
tf  the  market  tails  to  respond  ade¬ 
quately  While  govemmeoi  efforts 
to  estaUish  a  c^atiack  ater  i  sys¬ 
tem  are  laudable,  it  is  essential  that 
both  the  private  and  puUrc  sectors 
get  the  kind  of  qualitative  guidance, 
and  assooated  nsk  metrics,  that 
will  enable  them  to  njeniity.  mea¬ 
sure  and  manage  the  risks  to  their 
information  technology  and  com- 
municalions  environments,  and  to 
get  credible  ROI  data  on  inlorma- 
tion  security  investments.  That 
means  the  establishmeni  the 
Generaliy  Accepted  System  Securi 
tyPrinoples  Thepnnoplesarea 
standard  population  of  threats  and 


quantitative  nsk  assessment  tools 
that  enable  organizations  to  «Aenti- 
fy.  measure  and  manage  nsk  con¬ 
fidently.  apTNying  the  long-accepted 
measure  of  business  -  ROI  -  to  the 
broad  array  of  safeguard  and  con¬ 
trol  mvestmenis  tor  mtoimalion 
security. 

WaiOzier 

/•residenr.  OPA  /nc,  Fairfield. 
Calif. 


Broad  Expertise 

David  FOOTE’S  column  TT 
Job  Trends  Yield  Siffpnses' 
(OwckLink  36015]  was  inlormative 
but  the  way  he  compares  special¬ 
ists  to  generafisls  seems  a  bit 
shortstghied  lnmveKpenence.be- 
ng  an  expert  in  one  field  has  many 
important  benefits,  regaidtessol 
the  iob  market  One  IS  that  people 
often  consider  experts  to  be  expert 
in  other,  comptemeniary  fields.  An¬ 


other  arises  during  the  pursuit  of 
expertise  You  naturally  acquire  an¬ 
cillary  skiHs.  which  often  make  you 
a  generalist  as  a  side  efieci 
My  own  career  IS  a  good  exam 
pie  IhavebeenaBorMOelph' 
specialisi  since  Delphi's  inception  ( 
marketed  mysell  only  as  such.  As  a 
Oefphrspecialisi.' I  performed  Of - 
I  acle.lnierbaseandMoosofiSOl 
•  Server  database  design.  Web  de- 
!  sign  (mdudmg  JavaScript  and 
t  Peri),  tetecommunicahons.  protect 
management  and  more 
MichMl  Nigobosian 
/Vesidtmr.  McGiRii.  Wifeox. 
Wfhsrw  Go.  (Jhicugn 
(and  auihitr  of  The  Secret 
Path  (u  Otmract  Prugram- 
ming  Riches). 

ni./?(gohasHin  ,0  fnH’wcTKTUum 


Tetevrarking  Loses  Some  Face  Value 


UNFORTUNATELY,  smce  mosi 
companies  stiN  don't  have  a 
formal  teleworking  plan  m  place, 
most  managers  still  view  ttiecom- 
muting  as  a  perk  that  is  an  excep¬ 
tion  rather  thdh  the  rule  (QuichLink 
36517]  Atlei'six  years  of  success¬ 


ful  telecommuting  m  the  attei  - 
noons.  I  lost  my  last  iob  because 
the  conditions  for  retraining  m  the 
new  system  lequired  daykmg  face 
tune 

Ellen  ComeH 
Marblehead.  Mass. 


Following  HIPAA 

IHAVEBEENLECTURlNOon 
HIPAA  security  and  conckiding 
compitance  engagements  smee 
1998.  In  the  article  "HIPAA  Data 
Rules  Leave  Choices  10  ir(0uck- 
Unk  36526).  Karen  Tiudel  ol  the 
Centers  lor  Medicare  &  Medicaid 
Services  IS  Quoled  as  saying  that 
encrypAionolhealdtdatatfansntf- 
ted  over  the  inlemei  G  no  longer 
mandated  and  can  be  based  on  nsk 


assessments  by  companies  Actu¬ 
ally,  the  business  impacl  of  doctors 
encrypting  health  dtta  g  iNiiakiw. 
but  domg  so  G  probabiy  the  angle 
best  sccurtly  control  to  ptoied  daia 
that  can  be  used  m  3  stmN  practice 
TruSecure's  Maine  Gordon  g  also 
ottbaseeisayrngthatMigation- 
vb3iY  compaiMS  might  sbek  wNh 
paper  instead  ol  folkig  out  auto¬ 
mated  medical  records  The  HIPAA 
ptrvacy  rule  covers  heaih  records  n 
aN  formats,  paper  or  electronic 
There  G  nc  acKantage  to  not  tGmg 
electronic  records,  because  you  are 
siiN  reomred  lo  protect  the  data 
Fred  Langston 
Si*nji>r  prineipal  con-wltanl. 
(itiardi*nr  Inc..  Seatile. 
Frvd.Lan^on  u  Guanfenrarm 

COMPUTERWORLO  wek:omes 
comments  from  ns  leaders  Letters 
will  be  ertted  tor  brevny  and  danty 
They  should  be  addressed  to  Jame 
EcMe  letters  ednor.Compuierwork) 
PO  80X  9171. 500  Okt  Conneclcui 
Path.  Framingham.  Mass  OTTOt 
Fax  (500)079-4843 
E-maN  leneryAcomputerworid  com 
Include  an  address  and  phone  num- 
bei  for  immediate  venlicalion 


OMofe  MieG  on  these  and  otner 
topics  are  on  out  Web  Me 
compulerworM.com/Wnefs 


Magic  Pixie  Dust 

was  all  the  rage.  And 
why  not?  The  directions 
said  that  with  one  pinch, 
servers  would  be  imbued  with 


“always  on”  capabilities.  With  another  pinch, 

servers  would  be  instantly  gilded  with  more  speed 


and  performance.  The  servers  would  seH-configure.  They 


would  never  crash.  Every  server  could  connect  with  every  other 


server  in  existence.  Just  one  problem.  The  Pixie  Dust  didn’t  work. 

AND  THAT’S  WHEN  THEY  CALLED  IBM. 

The  IBM  ^server  pSeries™  650  running  UNIXf  It  can  run  multiple  partitions  that 
can  be  dynamically  reconfigured.  On  demand.  It‘s  twice  as 
powerful  as  the  Sun  Fire  \880  in  FRP.’  And  unlike  Pixie  Dust, 
it  works.  To  learn  more  about  the  flewble  p650  or  to  locate  your 

TiMUMXMnir 

IBM  Business  Partner,  head  over  to  ibin.eoni/eserver/p650 


Ttapm. 


'I8M  aSarwr  pSanas  660  (B  pnxMtore.  POVVER4..l«  GH7. 1.6  MB  L2  cacha  per  2  procawofa.  64  OB  mamory)  wias  carlified  by  SAP  on  1/W03  anth  lha  Mowing  SAP  Surdart  4<C  SO  ipmeWwn  laaiJK  X22D  SB  twratinflt 

uae«».l95«ac.a>iac^dlitogtaapcnaa»na.ia.67DMy0uBine8BprDce«aedlirwiWnia/tiouf,  36ejOOdlal06Mipe/hotf,  &130SAPS,(yUuWgalienol9e%M»i  Oegvej  indAIX5Lvaf*on5ASun  Wcicayi^^ 

UMSMfC  a.  900  iMz.  8  MB  L2  cactia.  32  GS  nwmofy)  was  certified  by  SAP  an  B/WOZ  witb  the  toBoMig  SAP  SUndad  4BC  SO  ^^fcaficn  b»icl«iart>  laetas:  600  SO  bancfwnadt  umts.  t96  we.  awnga  dWog  taapenw  lima.  e0J30 
Uy  CianaM  pro ca wad  Ikia  aana-taur.  IBtOOO  dialog  aapa/lw.  3A20  SAPS  CPU  uiization  of  99%  with  062  v7  and  Sofaita  8.  Raatas  pealed  tf  hiac/Avww.tap.cani/banelwnark.  ^SIM  prfca  aa  of  2AM)3  tor  p660  Cipreae  Confi^vtfton 
aath  AIX  SL.2-wayl.2GHz  P0WER4*.  PrtoeaanauCiacibenangatMlhoulnoaca.  Reaeftorpreasmay  vary  IBM.Staa-tMnaaa  logo,A0(SL.0B2.aSatvia.  PnTffTlli  pTatton  il  n  tiatoaw  m  flamarri  am  tiartmailni  nrmplniamrl  nwtornitii 
of  imarnational  BuHnaea  htoeWnaa  Cotporabon  n  lha  Uniiad  Solas  andtor  oOier  countriaa.  UNIX  a  a  fegatatad  ndemark  of  The  Open  Group.  Other  company,  product  and  aervica  namaa  may  be  badamarfca  or  sarvica  marks  of  otoata. 
iC  2003  IBM  CorpotaiNn.  Al  tigiw  raaarved. 


IWcrful  magk  preveots  and 
repairs  sencr  cradiee. 

IWerful  sdfdiealiDg  technology 
bdps  preveirt  server  crazies. 

Opdmiialian?  Sprinkfe  on 
ser^  three  tunes  a  day: 

I^ititioiun^  fiuih  in. 

Cunendy  unrated  in  parformance. 

IWice  as  poweshil  as  the 

Sun  Fire  V880  in  E31P' 

Could  be  the  greatest  idea 
in  the  history  of  IT. 

Could  be  the  ^eatest  idea 
in  the  history  of  UNIX. 

Not  available  through  IBM. 

AvaiLdile  throu^  IBM  and 
IBM  Business  l^itners. 

Doesn't  actually  exist 

starts  at  $3M'95f 

business  on  demand 


,  ROBUST  OBJECT  DATABAS 

;e 

jT  HIGH  PERFORMANCE  SQL 

^  MULTIDIMENSIONALACCESS 

I- 


Our 

It  combin 

in  tRe  datatTase  world. 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cach^,  the  post-relational  database. 

What  makes  Cache  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system.  Cache 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cach^  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the 
largest  hospitals.  Cache  is  so  reliable,  it’s  the  world’s 
leading  database  in  healthcare  -  and  it  powers 
enterprise  applications  in  financial  services, 
government  and  many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  million  users  in  i  *  «  * 

88  countries.  Cache  is  iji  A  I  I  P 
available  for  Windows,  r  I  A I 
Open  VMS,  Linux  and 

major  UNIX  platforms.  Make  Applications  Faster 


Download  a  fully-functional  version  of  Cache  or  request  ft  on  CD  for  free  at  www.fnterSystems.com/Dost-fetotiono/ 


VAN  traffic  compression 
ippUances  promise  to  let 
letwork  managers  increase 
oads  without  upgrading 
VAN  links.  Users  tell  us 
low  well  they  work.  PsB*  30 


When  Bad  Things  Happen 
ToGoodDMiws 

A  vendor’s  slick  security  product 
presentation  shows  Vince  Tuesday 
that  it  doesn’t  have  a  clue  what  users 
want  and  need  —  or  technolc^ 
mature  enough  to  deliver  it  Pw32 


I 


And  Here  s  the  Pitch 

The  beginning  of  base¬ 
ball’s  spring  training 
Nicholas  Petreley  thinking 
about  uriiat  mi^t  happien 
in  a  software  World  Series. 
Pae»37 


PROPROCraS^ ^ 


For  more  than  three  decades. 
micn^rocessors  have  doubled 
in  power  every  18  to  24  months. 
That  prepress  will  continue  for 
anoth^  10  years  or  so.  chip  mak¬ 
ers  say;  then  some  new  technol¬ 
ogy  may  have  to  be  found  to  re¬ 
place  the  silicon  semiconductor. 

Unfortunately,  the  companies  that 
make  microprocessors  and  use  them  to 
build  computer  systems  can't  just  catch 
a  free  ride  on  the  back  of  Moore's  Law. 
As  silicon  transistors  grow  smaller  — 
there  will  be  a  billion  on  a  sin^e  chip 
in  five  years  —  chqis  become  eiqxineo- 
tially  more  expensive  to  design,  man¬ 
ufacture  and  test.  And  the  laws  of 
physics  intrude:  In  the  mysterious 
realm  called  ‘deep  submicron.'’  for  ex¬ 
ample,  power  dissipation  gets  nearly 
impossible  to  controL  and  cosmic  rays 
cause  random  processing  errors. 

The  power-dissipation  problem 
will  prevent  the  further  scaling  after  10 
years.  Improvements  will  come  about 
from  system-level  integration  rather 
than  transistor-level  enhancements." 
says  Biian  Davari,  tedinology  vke  pres¬ 
ident  at  IBM’s  microdectronics  diviskm. 

About  60%  of  the  total  performance 
gains  in  micit^rocessors  have  come 
from  hitler  clodt  frequencies  result¬ 
ing  from  smaller  and  faster  transistors, 
balance  have  come  from  process- 
CoRtiruied  on  page  26 


Clip  maters  wl  have 
achieved  10  6Nz  and  Ibion 
transistors  in  five  years, 


harder.  By  Gary  H.Anthes 


CMmEUWi  Mii.}in 


w.computerwortd  com 


MICROPROCESSORS 


Conlinum/  from  page  25 
ing  architectures  ilut  allow  the  execu¬ 
tion  of  more  than  one  instruction  per 
clock  tick.  A  microprocessor  can  do 
that  by  predicting  the  flow  of  a  pro¬ 
gram  through  several  branches  of  pro¬ 
gram  logic  Of  by  executing  instructions 
"specubiivcly"  —  before  they  are  need¬ 
ed  But  pushing  those  tricks  hirther  is 
becoming  difficult  and  expensive. 

“We've  gone  from  being  able  to  exe¬ 
cute  two  iastructions  at  a  time  to  eight 
or  more,"  says  James  Hoc.  a  professor 
of  electrical  and  computer  engineering 
at  Carnegie  Mellon  University  in  Pitts¬ 
burgh.  “But  we  are  at  the  limit.  The  ar¬ 
chitecture  is  not  scalable."  Hoc  says 
microprocessor  developers  will  in¬ 
creasingly  rely  on  the  following  ambi¬ 
tious  schemes  to  find  “parallelism"  in 
programs  and  job  streams: 

■  MuWlhreailng:  Breaking  a  single  pro¬ 
gram  into  multiple  instruction  streams, 
or  threads,  to  be  prtx.'cssed  simultane¬ 
ously.  Each  thread  could  handle  a  data 
packet  or  transaction,  for  example. 

■  Simultaneous  muMhraadmg:  A  tech¬ 
nique  that  makes  a  single  physical  proc¬ 
essor  appear  to  software  as  two  proc- 
es.sor5,  so  two  programs  can  execute 
simultaneou.sly.  boosting  tofal  through¬ 
put.  Intel  Corp.  calls  it  “h>T>crthrcading." 

■  Chip  tmdli^ucesainp:  The  placement 
of  two  or  more  physical  processor 
"cores"  on  one  chip.  TTic  cores  can  run 
independently  but  share  some  resources. 
IBM  is  shipping  a  dual-core  Puwer4 
processor,  and  Sun  Microsystems  Inc 
is  expected  to  unveil  one  Later  this  year 
in  its  UltraSPARC  IV  Intel  will  intro¬ 
duce  a  dual-core  Itanium  chip  in  2005. 

•  Rwitfenv  opiimizaiion:  Using  a  combi¬ 
nation  of  special  processor  circuits  and 
a  dynamic  runtime  compiler  to  contin¬ 
uously  analyze  program  behavior  and 
reorder  instructions  fur  better  perfor¬ 
mance.  While  this  doesn't  make  the 
processor  run  faster,  it  does  improve 
what  the  user  cares  about*  throughput.  . 

"It’s  becoming  exponentially  expen-  j 
sive  to  find  more  parallelism  in  a  sin-  I 


glc  instruction  stream."  says  Justin 
Rattner.  an  Intel  senior  fellow  and  di¬ 
rector  of  microprocessor  research.  “So 
there  will  be  increasing  emphasis  on 
thread-level  parallelism,  the  number  of 
threads  per  processor  and  the  number 
of  processors  per  chip." 

Kattncr  says  Intel  is  also  doing  re¬ 
search  on  processors  and  compilers 
that  together  optimize  program  perfor¬ 
mance  in  real  time.  “We  are  looking  at 
program-visible  instrumentation  so 
the  compiler  has  access  Co  [runtime 
conditions],"  he  says.  "This  is  on  the 
fl>*:  this  is  the  compiler  in  the  loop." 

The  technique  has  improved  perfor¬ 
mance  by  a  factor  of  two  to  four.  Rat- 
tner  says.  lmprovemcnt.s  in  basic  semi¬ 
conductor  technology  will  triple  mi¬ 
croprocessor  clock  speeds  in  five 
years,  he  predicts.  But  those  clock  im¬ 
provements  plus  improved  exploita¬ 
tion  of  parallelism  by  various  means 
will  boost  total  ihr{)ughput  by  a  factor 
of  six  to  seven.  Rattner  says. 

Multithreading  and  chip  multiproc¬ 
essing  will  be  especially  important  in 
servers,  because  they  routinely  handle 
workloads  — ■  transaction-processing, 
Web  and  database  applicaiion.s  that 
are  inherently  threaded. 

Desktop  PCs  are  more  likely  to  run 
single-user,  single-threaded  applica¬ 
tions.  As  a  result,  the  relentless  race 
for  higher  processing  speeds  on  the 
desktop  may  soon  be  mcaningles.s.  says 
Kevin  Krewell.  a  senior  analyst  and  ed¬ 
itor  of  MicroDcsign  Resources’  "Mi¬ 
croprocessor  Report"  rwwsletter. 

“In  servers,  rtwre  power  and  scalabil¬ 
ity  are  always  welcome,"  he  says.  "But 
on  (he  desktop,  what  do  you  do  with 
3  GHz,  4  GHz.  5  GHz?  There  could  be  a 
plateau,  when  we  get  the  ‘good  enough’ 


Ota  Mi  ona  lor  M  biM  RmHms  4  an 

und  to  (aWcali  microfirooeaors. 

processor.”  Krewell  says  designs  for 
desktop  processors,  and  especially  note¬ 
books.  will  increasingly  go  after  other 
things,  such  as  low  power  consumption, 
low  mass  and  quiet  operation. 

In  the  Silicon  Trenches 

While  the  microprocessor  vcrulors 
work  to  boost  throughput,  at  another 
level  they  toil  to  find  ways  to  dodge 
the  laws  of  physics.  Current  silicon 
processors  have  circuit  features  that 
arc  130  nanometers  (nm)  wide.  Future 
generations,  coming  at  two-year  inter¬ 
vals,  will  shrink  that  to  IS  nm  or  so  — 
about  as  low  as  you  can  go  in  silicon. 
Getting  there  won't  be  easy. 

“As  wc  go  from  130  nm  to  00  nm  to 
65  nm  and  then  to  42  nm,  the  standby 
power  dissipation  is  the  single  most 
important  problem  at  the  silicon  and 
circuit  design  level."  says  IBM's  Davari. 
The  leakage  of  power,  which  is  waste¬ 
ful  and  generates  heat,  increases  "dra¬ 
matically,  exponentially."  he  says. 


IBM  and  other  companies  are  turning 
to  “strained  silicon."  a  technique  that 
boosts  performance  and  lowers  power 
consumption  by  stretching  silicon  mol¬ 
ecules  farther  apart,  allowing  electrons 
to  flow  though  the  transistors  up  to  70% 
faster.  Chip  makers  arc  also  experi¬ 
menting  with  new  materials  and  meth¬ 
ods  for  making  "gates"  —  which  con¬ 
trol  the  electrical  flow  through  a  tran¬ 
sistor  —  smaller,  faster  and  more  effi¬ 
cient.  "These  things  all  surted  as  per¬ 
formance  solutions,  but  now  they  are 
solving  power  problems,"  Davari  says. 

Davari  says  IBM  may  eventually  ex¬ 
tend  its  existing  dual-core  architecture 
to  hundreds  of  processors  on  a  chip.  It 
will  also  integrate  dynamic  RAM  with 
logic  on  a  single  chip,  greatly  reducing 
CPU-mcmory  communication  delays, 
increasing  throughput  and  lowering 
power  consumption.  And  ti  will  move 
application-specific  functions,  such  as 
encryption,  video  compression  or  speech 
processing,  from  software  or  off-chip 
hardware  to  the  processor  chip,  he  says. 

Dual-core  processor  chips  will  bring 
performance  gains,  but  there  may  be 
cost  drawbacks.  Krewell  says.  The 
question  is  whether  software  vendors 
will  view  a  dual-core  processor  as  one 
or  two  processors  for  licensing  purpos¬ 
es.  "Intel  convinced  Microsoft  that  hy- 
perthreading  is  one  processor,  although 
it  looks  to  the  software  like  two  proces¬ 
sors."  he  says.  "But  as  you  pul  two  cores 
on  there,  then  four  cores,  will  vendors 
still  consider  it  one  processor?"  I 
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Continued  fnm  page  25 
ing  architectures  that  allow  the  execu¬ 
tion  of  more  than  one  instruction  per 
clock  tick.  A  microprocessor  can  do 
that  by  predicting  the  Oow*  of  a  pro¬ 
gram  through  several  branches  of  pro¬ 
gram  logic  or  by  executing  instructions 
“speculatively"  —  before  they  are  need¬ 
ed.  But  pushing  those  tricks  fiutber  is 
becoming  di0>cuU  and  expensive. 

"WeVe  gone  from  beii^  able  to  exe¬ 
cute  two  instructions  at  a  time  to  ei^t 
or  more,"  says  James  Hoe.  a  professor 
of  electrical  arkd  computer  engineering 
at  Carnegie  Mellon  University  in  Pitts¬ 
burgh.  "^t  we  are  at  the  limit.  The  ar¬ 
chitecture  is  not  scabble."  Hoe  says 
micrc^rocessor  developers  will  in¬ 
creasingly  rely  on  the  following  ambi¬ 
tious  schemes  to  find  "parallelism"  in 
programs  and  |ob  streams: 

■  IfcjtMaaadhig.  Breaking  a  single  pro¬ 
gram  into  multiple  instructioa  streams, 
or  threads,  to  be  processed  simultane¬ 
ously.  Each  thread  could  harullc  a  data 
packet  or  transaction,  for  example. 

■  SinullafMBUsniiMibrviiIng:  A  tech¬ 
nique  thM  makes  a  single  physical  proc¬ 
essor  appear  to  software  as  two  proc¬ 
essors,  so  two  programs  can  execute 
simultaneously,  boosting  total  through- 
puL  Intel  Corp.caUs  h  "byperthreading." 

•  CMp  muldproonakig:  The  placement 
of  two  or  more  physical  processor 
“cores"  on  one  chip.  Hie  cores  can  run 
independently  but  share  some  resources. 
IBM  is  shippiitg  a  dual-core  Power4 
processor,  and  Sun  Microsystems  Inc. 
is  expected  to  unveil  one  later  this  year 
in  Us  UltraSPARC  IV.  Intel  will  intro¬ 
duce  a  dual-core  Itanium  chip  in  2005. 

■  RuiUnw  opUnnalion:  U.<ung  a  combi¬ 
nation  of  special  processor  circuits  and 
a  dynamic  runtime  compiler  to  contin¬ 
uously  analyze  program  behavior  and 
reorder  instructions  for  better  perfor¬ 
mance.  While  this  doesn't  make  the 
processor  run  faster,  it  does  improve 
what  tbe  user  cares  about:  throughput. 

"It‘s  becoming  exponentially  expen¬ 
sive  to  find  more  parallelism  in  a  sin¬ 


gle  instruction  stream,”  says  Justin 
Rattner.  an  Intel  senior  fellow  and  di¬ 
rector  of  microprocessor  research.  “So 
there  will  be  increasing  emphasis  on 
thread-level  parallelism,  tbe  number  of 
threads  per  processor  and  the  number 
of  processors  per  chip.” 

Rattner  says  Intel  is  also  doing  re¬ 
search  on  processors  and  compilers 
that  together  optinuze  program  perfor¬ 
mance  in  real  time.  “We  are  looking  at 
program-visible  instrumentation  so 
the  compiler  has  access  to  (runtime 
conditioDs]."  he  says.  “This  is  on  the 
fly;  this  is  the  compiler  in  the  loop." 

Tbe  technique  has  improved  perfor- 
marure  by  a  betor  of  two  to  four,  Rat¬ 
tner  says.  Improvements  in  bask  semi¬ 
conductor  technology  will  triple  mi¬ 
croprocessor  clock  speeds  in  five 
years,  he  predicts.  But  those  clock  im¬ 
provements  plus  improved  exploita¬ 
tion  of  parallelism  by  various  means 
will  bo^t  total  throughput  by  a  factor 
of  six  to  seven,  Rattner  says. 

Multithreading  and  chip  multiproc¬ 
essing  will  be  especially  important  in 
servers,  because  they  routinely  handle 
woridoads  —  transaction-processing. 
Web  and  database  applications  —  that 
are  inherently  threaded. 

Desktop  PCs  are  more  likely  to  run 
single-user,  single-threaded  applica¬ 
tions.  As  a  result,  the  relentless  race 
for  higher  processing  speeds  on  tbe 
desktop  may  soon  be  meaningles.s,  says 
Kevin  Krewell,  a  senior  analyst  and  ed¬ 
itor  of  MicroDesign  Resources'  “Mi¬ 
croprocessor  Report"  newsletter. 

"In  servers,  more  power  artd  scalabil¬ 
ity  are  always  welcome,"  he  says.  “But 
on  the  desktop,  what  do  you  do  with 
3  GHz,  4  GHz.  5  GHz?  There  could  be  a 
plateau,  when  we  get  tbe  'good  enough' 
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processor."  Krewell  says  designs  for 
desktop  processors,  and  e^)ecially  note- 
hot^,  will  increasin^y  go  after  other 
things,  such  as  low  power  consumption, 
low  mass  and  quiet  operatimi. 

bi  the  Silicon  Trenches 

While  tbe  microprocessor  vendors 
work  to  boost  throughput,  at  another 
level  they  toil  to  find  ways  to  dodge 
the  laws  of  physics.  Current  silicon 
processors  have  circuit  features  that 
are  130  nanometers  (am)  wide.  Future 
generations,  comii^  at  two-year  inter¬ 
vals.  will  shrink  that  to  15  nm  or  so  ~ 
about  as  low  as  you  can  go  in  silkon. 
Getting  there  won't  be  easy. 

“As  we  go  from  130  nm  to  90  nm  to 
65  nm  and  then  to  42  nm.  the  standby 
power  dissipation  is  the  single  most 
important  problem  at  the  silicon  and 
circuit  design  level”  says  IBM's  Davari. 
Tbe  leakage  of  power,  whkh  is  waste¬ 
ful  and  generates  heat,  increases  “dra¬ 
matically.  exponentially."  he  says. 


IBM  and  other  companies  are  turning 
to  “strained  silkon,"  a  technique  that 
boosts  performance  and  lowers  power 
assumption  by  stretching  silkon  mol¬ 
ecules  farther  apart,  allowing  electrons 
to  flow  though  the  transistors  up  to  70% 
faster.  Chip  makers  are  also  experi¬ 
menting  with  new  materials  and  meth¬ 
ods  for  making  “gates"  —  whkh  con¬ 
trol  the  electrical  flow  through  a  tran¬ 
sistor  —  smaller,  faster  and  more  effi¬ 
cient.  “These  things  all  started  as  per¬ 
formance  solutions,  but  now  they  are 
solving  power  problems,"  Davari  says. 

Davari  says  IBM  may  eventually  ex¬ 
tend  its  existing  dual-core  architecture 
to  hundreds  of  processors  on  a  chip.  It 
will  also  integrate  dynamk  RAM  with 
logic  on  a  single  chip,  greatly  reducing 
CPU-memory  communication  delays, 
increasing  througlq)ut  and  lowering 
power  consumption.  And  it  will  move 
appUcatioD-spedTic  hinctions.  such  as 
encryption,  video  compression  or  speech 
processing,  from  software  or  off-chip 
hardware  to  the  processor  chip,  he  says. 

Dual-core  processor  chips  will  bring 
performance  gains,  but  there  may  be 
cost  drawbacks.  Krewell  says.  T^ 
question  is  whether  software  vendors 
will  view  a  dual-core  processor  as  one 
or  two  processors  for  licensing  purpos¬ 
es.  “Intel  convinced  Mkrosoft  that  hy- 
perthreading  is  one  processor,  althot^ 
it  looks  to  the  soffwvc  like  two  proces¬ 
sors,"  he  says.  “But  as  you  put  two  cores 
on  there,  then  four  cores,  will  vendors 
still  consider  it  otre  processor?"  I 

PMHXSSNNNMnUIIIK 

Read  « toracan  of  tiew  tfn  coipemion  anong  rnk^ 
pfocassor  vandofs  wi  piay  out  over  the  nan  few  years: 

OMlMt  38226 

werw.Bowipaienaerldajiwii 


lEOROUIIY 


www.coinpulerwertd.c4xn 


I  AM  A  SHELL. 

I  CAN  FIGHT  CANCER.  I  AM  MERCENARIA  MERCENARIA.  I  HAVE  AN 
EXTRACT  IN  MY  SHELL  THAT  HAS  THE  POWER  TO  SLOW  CANCERS 
IN  MICE.  I  HAVE  THE  POWER  TO  BE  THE  NEXT  PENICILLIN.  I  AM  MORE 
THAN  A  SHELL. 


I  AM  A 
NETWORK. 

i  CAN  TURN  SHELLS  INTO  MEDICINE,  i  HAVE  THE  POWER  TO  MOVE 
CLINICAL  TRIALS  ONLINE  SO  NEW  DRUGS  GET  TO  MARKET  FASTER 
I  HAVE  THE  POWER  TO  PROTECTA  PATIENT'S  PRIVACY.  I  CAN  USE 
THE  POWER  OF  E-LEARNING  TO  LET  DOCTORS  SHARE  RESEARCH 
WITH  OTHER  DOCTORS.  I  THINK  SHARING  IS  CARING.  I  AM  MORE 
THAN  A  NETWORK. 
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Quaker  chemical  Corp. 

&ced  a  dilemma.  The  Con- 
shohocken.  Pa.-based  compa¬ 
ny  wanted  to  bring  a  band¬ 
width-intensive  enterprise 
resource  planning  (ERP)  sys¬ 
tem  online  without  making  costly  up¬ 
grades  to  its  fiaroe-relay  lints  between 
five  locations  in  Europe  and  the  U.S. 

So  Bubba  Tyler,  vice  president  and 
CIO,  tried  installing  wide-area  net¬ 
work  traffic-compression 
appliances  in  each  loca¬ 
tion.  The  devices  freed  up 
enough  bandwidth  to 
meet  the  needs  of  the  ERP  appUcatioa 
In  fact,  they  performed  so  well  that 
Tyler  is  considering  reducing  the  size 
of  the  existing  connections. 

Companies  with  far-flung  operations 
are  increasii^;ty  turning  to  traffic  com¬ 
pression  appliances  as  lower-cost  al¬ 
ternatives  to  upgrading  the  bandwidth 
of  WAN  links.  Tlie  technology  behind 
these  appliances  isn’t  all  new,  but  cor¬ 
porate  IT  budget  constraints  and  a  re¬ 
turn  on  investment  in  as  short  a  time 
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as  one  year  have  made  the  devices  an 
increasingly  attractive  option. 

Some  of  the  compression  algorithms 
used  in  these  appliances  have  been 
around  for  a  decade  or  more  and  have 
been  available  as  add-on  software  or 
hardware  to  WAN  routers  from  Cisco 
Systems  Inc.  and  others.  For  example,  a 
compression  card  can  be  added  to  Cis¬ 
co’s  2600  router  for  $995  or  to  its  3660 
and  3700  series  routers  for  $2,000. 

But  with  IT  focusing  on  cost  savings, 
several  small  WAN  compression  appli¬ 
ance  vendors  have  jumped  in  with 
plug-and-play  products  that  they  claim 
are  more  efficient  and  easier  to  config¬ 
ure.  The  vendors  claim  that  their  tools 
improve  throughput  by  a  factor  of  two 
to  10  and  boast  higher  compression 
rates  than  compression-enabled 
switches. 

Cisco  dismisses  the  claims.  "WeVe 
seen  interest  in  compression  for  years 
but  have  never  seen  the  market  take 
off,”  says  Kip  Sides,  manager  of  prod¬ 
uct  marketing  at  Cisco.  T^  reason:  the 
“expense  of  deploying  and  managing 


it.  and  the  benefits  aren’t  really  that 
significant,”  he  says.  “We  could,  over 
time,  see  a  reasonable  benefit  to  new 
technologies,  but  we  are  skepticaL” 

Some  users  and  analysts  disagree. 
Cisco  seems  focused  on  providing  big¬ 
ger.  more  comprehensive  networidi^ 
platforms  rather  than  compression 
add-ons.  says  Mark  Fabbi.  an  analyst  at 
Gartner  Inc.  in  Stamford,  Conn. 

Quaker  Chemical’s  Tyler  says  he 
didn’t  want  to  go  through  the  time  and 
complexity  of  setting  up  his  Cisco  gear 
for  compression,  opting  instead  for  ap¬ 
pliances  from  Peribit  Networks  Inc.  in 
Santa  Clara,  Calif.  “We  could  spend 
days  or  ma^ie  weeks  tuning  the  Cisco 
switches  and  have  to  use  other  equip¬ 
ment  to  do  the  analysis,  or  we  could 
just  plug  in  the  (Peribitl  SR-SOs  and  be 
up  and  running,"  he  says. 

The  results  speak  for  themselves, 
says  Tyler.  **We  now  estimate  we  won’t 
have  to  add  any  bandwidth  for  our  on¬ 
going  growth  in  the  ERP  and  other  ap¬ 
plications  we  have  on  the  drawing 
board,"  be  says.  Instead,  Tyler  is  con¬ 
sidering  reducing  the  committed  infor¬ 
mation  rate  on  some  frame-relay  links, 
which  currently  range  from  256K  to 
1.44M  bit/sec.  ITie  SR-SO  appliances 
sell  for  $6,000  each,  but  he  says  it 
would  have  cost  him  three  to  five 
times  that  amount  to  increase  band¬ 
width.  depending  on  the  link. 

GeoLo^stics  Corp.  connected  29 
branch  offices  to  its  global  data  center 
in  England  using  Accelerator  1800  de- 


WAN  traffic-compression  devices 
can  free  up  bandwidth  on  busy  links, 
eliminating  expensive  service 
upgrades.  By  Matt  Hamblen 
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lots  of  noise  about  its  DMA  cooocc- 
tioQ.  but  its  technology  is  not  signifi- 
cantiy  difTerent  than  Expand's,  [and] 
Expand  has  been  more  successful  with 
customers,*'  says  Thomas  Mendel,  an 
analyst  at  Giga  Information  Group  Inc. 
in  Cambridge.  Mass.  Expand's  aggres¬ 
sive  pricing  may  help  ei^lain  that. 
Peribtt  responded  in  January  with  the 
introduction  of  a  new  knv-end  model 
the  S2.900  SR-20. 

WAN  traffic  ai^liances  remain  a 
niche  market  dominated  by  small  play¬ 
ers.  Peribit  has  been  shipping  products 
for  fust  15  months  and  boasts  100  cus¬ 
tomers  worldwide,  and  Expand  flatms 
to  have  more  than  500  customers. 

Both  vendors  and  analysts  expect 
more  users  to  turn  to  th^  devices, 
but  they  differ  in  growth  estimates.  Jef 
Graham,  president  and  CEO  of  Peribit. 
expects  WAN  traffk-compression 
sales  to  shoot  to  $S  billion  in  coming 
years.  That's  overstated  by  a  magni¬ 
tude  of  10  or  more.”  counters  Fabbl 
Mendel  puts  that  market,  which  is 
mainly  held  by  Peribit  and  Expaiwl.  at 
about  S20  million,  and  be  says  it  will 
expar>d  to  S50  million  in  iiud-2004. 

But  Mendei  also  warns  that  the 
vendor  landscape  could  completely 
change  in  the  next  two  years.  He  ex¬ 
pects  the  market  for  stand-alone  com¬ 
pression  appliances  to  last  perhaps  an¬ 
other  two  years  before  the  functions 
are  absorb^  into  the  irext  generation 
of  routers  oflfered  by  Cisco  and  others. 
That  means  an  IT  manager  should  de¬ 
ploy  only  if  he  expects  an  ROI  in  a  year 
or  less.  ”If  you  can't  calculate  an  ROI  of 
12  months  or  less,  don’t  do  it.”  be  says.  I 
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vices  from  Expand  Networks  Inc.  at 
each  site  and  two  Accelerator  4800 
boxes  at  the  data  center,  says  interna¬ 
tional  network  manager  Morey  Straus. 
The  Santa  Ana,  Calif.-based  global 
freight  logistics  provider  began  adding 
the  devices  frmn  Roseland.  N.J. -based 
Expand  in  2001.  when  bandwidth  de¬ 
mands  starred  risii^  as  as  result  of  a 
move  from  dumb  terminals  to  PCs  and 
thin  clients. 

"When  I  Hrst  heard  about  Expand, 
my  initial  reaction  was  that  it  was 
probably  just  more  Cisco  compression, 
which  gives  you  maybe  a  15%  improve¬ 
ment,”  says  Straus.  "But  with  Expand, 
we’ve  been  getting  between  three  to 
four  and  a  half  times  the  throughput. 
It's  a  worid  away  from  Cisco  compres¬ 
sion.”  Straus  says  the  system  paid  for 
itself  in  three  months.  His  averse  cost 
to  double  the  port  speed  from  64K  to 
128K  bit/sec.  on  one  link  was  $8,000. 

He  equ4>ped  each  site  with  an  Expand 
appliance  for  less  than  $2,000;  the  two 
boxes  at  the  data  center  cost  $20,000. 

Dreyer  Medical  Clinic  in  Aurora,  IlL. 
deployed  Accelerator  boxes  on  each 
end  of  four  56K  bit/sec.  point-to-point 
circuits  in  northeastern  Illinois,  says 
Stephen  Hart,  network  and  systems  ad¬ 
ministrator. 

”We  didn’t  want  to  upgrade  the 
lines,  sintx  it  costs  from  $600  to  $2,300 
a  month  to  install  a  Tl.”  be  says.  The 
eight  appliances,  udiicb  have  been  de¬ 
ployed  for  about  two  years,  cost 
$12,000,  plus  ^50  annually  per  appli¬ 
ance  for  support,  he  says.  Hart  says  the 


boxes  paid  for  themselves  in  less  than 
one  year. 

Dreyer  has  since  installed  Citrix  Sys¬ 
tems  Inc.  thin-clieni  applications, 
wdiich  he  says  could  be  a  ”network 
bog.”  but  the  system  has  been  able  to 
support  that,  be  says.  ”We  get  up  to 
nine  times  the  performance  increase, 
and  there  are  no  data  integrity  issues,” 
be  notes.  Most  users  have  no  idea  the 
system  is  in  place,  be  says.  1  never  get 
a  call  saying  the  system  is  running  f^ 
today,  but  it  prevents  a  slowdown.” 

The  Secret  Sauce 

All  the  vendors  use  similar  technolo¬ 
gies  that  find  common  bit  or  byte  pat¬ 
terns,  replace  them  with  much  shorter 
markers  that  refer  to  the  original  data 
and  transmit  those  to  the  recipient  All 
appliances  expand  on  older,  well- 
established  compression  technologies 
such  as  Lempel-Ziv-Stac.  named  after 
its  creators.  But  that  doesn’t  mean  the 
appliances  are  standardized  —  or  in¬ 
teroperable.  Current  offerings  require 
the  installation  of  identical  compres¬ 
sion  appliances  on  each  end  of  a  WAN 
link,  usually  inside  the  corporate  ftre- 
wall,  to  avoid  security  problems. 

Expand  uses  at  least  two  different 
compression  algorithms.  Its  ^pUances 
sort  headers  by  type  of  traffk,  such  as 
file  transfer  protocol  and  remove  re¬ 
dundant  information  common  to  each 
traffk  type.  They  then  use  a  bit  pat¬ 
tern-recognition  algorithm  that  deter¬ 
mines  data  stream  patterns  and  caches 
those  on  both  sides  of  the  WAN. 


Peribit  has  patented  a  technique  it 
calls  Molecular  Sequence  Reduction 
(MSR)  that's  based  on  pattern-recogni- 
tion  algorithms  previously  used  to 
study  DNA.  says  Amit  Sii^  Peribit's 
co-fbunder  and  chief  scientist.  He 
claims  that  MSR  bolds  tens  to  hun¬ 
dreds  of  megabytes  of  patterns,  while 
other  devices  examine  only  a  2KB  win¬ 
dow  of  d^a  before  moving  to  the  next 
window.  MSR  also  has  a  built-in  ”adap- 
tive  dictionary”  of  patterns  that  puts 
greater  value  on  the  most  frequent  and 
largest  patterns  seen  in  data  streams. 

Peribit  makes  the  highest  perfor¬ 
mance  claims,  but  analysts  are  dubious 
about  the  company's  clanns  of  techno- 
l<^ical  superiority.  ”Peribit  has  made 
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To  accommodate  a  tww.  t>andwKtth' 
hungry  ERPaoplfcaUon.Quahef  in- 
stalled  nwtM  SR-50  sartas  compres¬ 
sion  appKancos  across  its  frame-relay 
netwoirtL  Now.  instead  of  increasing 
link  speeds,  tee  company  is  considering 
reducing  teem. 


vices  from  Expand  Networks  Inc.  at 
each  site  and  two  Accelerator  4800 
boxes  at  the  data  center,  says  interna¬ 
tional  network  manaitcr  Morey  Straus. 
The  Santa  Ana.  Calif.-based  (tiobal 
frei^t  lo^stics  provider  began  adding 
the  devices  from  Roseiand.  N.J.-based 
Expand  in  2001,  when  bandwidth  de¬ 
mands  started  rising  as  as  result  of  a 
move  from  dumb  terminals  to  PCs  and 
thin  clients. 

"When  I  first  heard  about  E-xpand. 
my  initial  reaction  was  that  it  was 
probably  just  more  Cisco  compression, 
which  gives  you  maybe  a  IS"®  improve¬ 
ment."  says  Straus.  "But  with  Expand, 
we’ve  been  getting  between  three  to 
four  and  a  half  times  the  throughput. 
It’s  a  world  away  from  Cisco  compres¬ 
sion."  Straus  says  the  system  paid  for 
itself  in  three  months.  His  average  cost 
to  double  the  port  speed  from  64K  to 
128K  bit,''sec.  on  one  link  was  S8.000. 

He  equipped  each  site  w  ith  an  E.xpand 
appliance  for  lcs.s  than  S2,000;  the  ttvo 
boxes  at  the  dam  center  cost  S2U.OOO. 

Dreyer  Medical  Clinic  in  Aun>ra.  III.. 
deployed  Accelerator  boxes  on  each 
end  of  four  56K  bit/scc.  point-uvpoint 
circuits  in  northeastern  Illinois.  sa>’s 
Stephen  Hart,  network  and  systems  ad¬ 
ministrator. 

“Wc  didn't  want  to  upgrade  the 
lines,  since  it  costs  from  S600  to  S2.300 
a  month  to  install  a  Tl."  he  sa>’s.  The 
eight  appliances,  which  have  been  de¬ 
ployed  for  about  two  years,  cost 
$12,000.  plus  S250  annually  per  appli¬ 
ance  for  support,  he  say.s.  Hart  says  the 
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bo.xes  paid  for  themselves  in  less  than 
one  year. 

Dreyer  has  since  installed  Citrix  Sy.s- 
lems  Inc.  ihin-clieni  applications, 
which  he  sa)’s  could  be  a  "network 
hog."  but  the  system  has  been  able  to 
support  that,  he  says.  "We  get  up  to 
nine  times  the  performance  increase, 
and  there  are  no  data  integrity  issues." 
he  notes.  Most  users  ha\'e  no  idea  the 
system  is  in  place,  he  says.  "I  never  get 
a  call  saying  the  system  is  running  fast 
today,  but  it  prevents  a  slowdown." 

The  Secret  Sauce 

All  the  vendors  use  similar  technolo¬ 
gies  that  find  common  bit  or  byte  pat¬ 
terns,  replace  them  with  much  shorter 
markers  that  refer  to  the  original  data 
and  transmit  those  to  the  recipient.  All 
appliances  expand  on  older,  well- 
established  compression  technologies 
such  as  Lempel-Ziv-Stac.  named  after 
its  creators.  But  that  doesn’t  mean  the 
appliances  are  standardized  —  or  in¬ 
teroperable.  Current  offerings  require 
the  installation  of  identical  compres¬ 
sion  appliances  on  each  end  of  a  WAN 
link,  usually  inside  the  corptiratc  fire¬ 
wall.  to  avoid  security  problems. 

Expand  uses  at  least  two  different 
compression  algitrithms.  Its  appliances 
sort  headers  by  type  of  traffic,  such  as 
file  transfer  protocol,  and  remt>ve  re¬ 
dundant  information  common  to  each 
traffic  type.  They  then  use  a  bit  pat¬ 
tern-recognition  algorithm  that  deter¬ 
mines  data  stream  patterns  and  caches 
chose  on  both  sides  of  the  WAN. 


Peribit  has  patented  a  technique  it 
calls  Molecular  Sequence  Reduction 
(MSR)  that’s  based  on  pattcm-recxigni- 
tion  algorithms  previously  used  to 
study  DNA.  sax's  Amit  Singh.  IVribit’s 
co-founder  and  chief  scientist.  He 
claims  that  MSR  holds  tens  to  hun- 
da*ds  of  megabytes  of  patterns,  while 
other  dex'ices  examine  only  a  2KB  win¬ 
dow  of  data  before  moving  to  the  next 
window.  MSR  also  has  a  built-in  "adap¬ 
tive  dieiionarx  "  of  patterns  that  puts 
greater  value  on  the  most  fre-quent  and 
largest  patterns  .seen  in  data  streams. 

IVribit  makes  the  highest  perfor- 
’  mance  claims,  but  analysis  are  dubious 
about  the  company's  claims  of  techno¬ 
logical  superiority.  "Peribit  has  made 


lots  of  muse  about  its  DNA  ctmnec- 
tion.  hut  its  technology  is  not  signifi¬ 
cantly  different  than  Expand's.{and) 
Expand  has  been  more  successful  with 
customers."  says  Thomas  Mendel,  an 
analyst  at  Giga  Information  Group  Inc. 
in  (Cambridge.  Mass.  Expand’s  aggres¬ 
sive  pricing  may  help  explain  that. 
IVribit  responded  in  January  w  ith  the 
introduction  of  a  new  low  -end  model, 
the  S2.‘XKl  SR-20. 

WAN  traffic  applianees  f\-main  a 
niehe  market  d«*minated  by  small  play¬ 
ers.  Peribit  has  been  shipping  prihlucts 
Cor  tusi  15  months  and  boasts  1(H)  cus¬ 
tomers  worldwide,  and  Expand  claims 
to  have  more  than  500  customers. 

H»>th  vendors  and  analysts  expect 
more  users  to  turn  to  these  desices. 
but  they  differ  in  growth  estimates.  |ef 
Graham,  pri-sidcnt  and  CEO  of  l*erihit. 
expects  WAN  tniffic-cx»mpri*ssion 
sales  to  shiKii  to  S5  billion  in  coming 
ye.v.s.  "That's  owrstated  by  a  m.^:ni- 
tude  of  10  t»r  more."  ctmniers  Fabbi. 
Mendel  puts  that  market,  which  is 
mainly  held  by  IVribit  and  Expand,  at 
about  S20  million,  and  he  says  it  will 
expand  to  $50  million  in  mid-2004. 

Rut  Mendel  also  warns  that  the 
vendor  landscape  could  a>mpletely 
change  in  the  next  iwi>  years.  He  ex¬ 
pects  the  market  for  stand-alone  ec»m- 
pression  appliances  to  last  perhaps  an¬ 
other  two  years  before  the  functitms 
are  absi>rbi-d  into  the  next  generation 
of  routers  offered  by  Cisco  and  others. 
That  means  an  IT  manager  shituld  de¬ 
ploy  only  if  he  expects  an  RDI  in  a  yvar 
or  less.  "If  you  can't  calculate  an  ROl  of 
12  months  or  less,  don’t  do  it."  he  says.  I 
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When  Bad  Thini 
Happen  to  Goo( 


lemos 


Asick security  product  demonstration 
only  serves  to  prove  that  vendors  often 
don't  think  enough  about  what  security 
managers  need.  By  Vince  Tuesday 


Ci 


OW  MUCH  MONEY  dO 
you  have  in  your  bud- 

nget?  You  have  to  be 
aware  that  this  is  very 
expensive  software.” 

Ah,  the  oot-so'sweet  sound 
of  the  sales  pitch. 

Much  of  my  work  as  a  secu¬ 
rity  manager  is  like  that  of  a 
ju^er.  always  keeping  balls 

in  the  air.  My  daily  - 

goal  b  to  deal  with 
the  next  falUi^  ball, 
be  it  a  virus  attack, 
a  new  e-commerce 
project  or  some  sus¬ 
pected  abuse.  _ 

This  week,  howev- 
er.  I  was  able  to  lift  my  gaze 
for  a  few  days  to  think  about 
future  needs  and  meet  with 
vendors.  And  once  again,  a 
slick  produa  demonstration 
showed  all  too  clearly  one 
vendor's  fundamental  inability 
to  understand  our  needs. 

TwoChaleiiges 

We  are  meeting  with  vendors 
to  address  two  challenges. 

First,  we  need  to  better  man¬ 
age  the  volume  of  security 
data  we  gather.  Our  antivirus 
applications,  vulnerability 
<^ta.  intrusion-detection  sys¬ 
tems.  firewalls,  routers,  oper¬ 
ating  systems  and  everyt^g 
else  we  touch  produce  valu¬ 
able  security  data,  but  in  dif¬ 
ferent  formats. 

It's  expensive  to  train  our 
staff  to  understand  this  mod¬ 
ern-day  Tower  of  Babel,  and 
it  takes  up  costly  extra  time 
vrfaen  we  must  deal  with  inci¬ 
dents.  If  we  could  automati¬ 
cally  translate  and  link  securi¬ 
ty  events,  we  would  reduce 
costs  and  further  improve 
our  defenses. 
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The  second  challenge  is  to 
step  up  monitcrieg  beyond 
our  signature-based  approach 
to  detect  unusual  or  anom¬ 
alous  behavior  that  doesn’t 
match  a  known  signature.  Giv¬ 
en  that  the  SQL  Slammer 
worm  is  reported  to  have  tak¬ 
en  less  than  10  minutes  to  in¬ 
fect  every  vulnerable  system 

-  on  the  planet,  it’s 

clear  that  waiting 
for  an  update  from  a 
vendor  isn't  going  to 
work  on  its  own. 

Pulling  tt^etber 
diverse  security  in- 
formation  is  a  com¬ 
mon  problem,  and  many  ven¬ 
dors  have  products  to  address 
it.  including  the  vendor  whose 
salesman  finisbed  up  his  ses¬ 
sion  with  thai  pitch  I  quoted 
in  the  beginning  of  this  article. 
I  looked  into  this  area  a  few 
years  aga  and  the  products 
were  very  immature.  I  was 
hoping  that  the  latest  versions 
w(^d  have  something  inter¬ 
esting  to  offer. 

We  invited  several  vendors 


Thepnxkictranand 
woriiBd,whid)in 
some  ways  was  the 
cuse  of  their  ptesen- 
talioaifthwhad 
stuck  with  PonverPoM 
scrBanshot5,we 
wouldn't  haw  seen 
what  made  the  whole 
thing  useless  to  us. 


to  demonstrate  how  their  soft¬ 
ware  could  save  us  time,  effort 
and  cost. 

The  vendor  I  mentioned 
previously  certainly  put  on  a 
good  show.  Its  salespeople  ar¬ 
rived  with  an  entire  network 
in  a  suitcase  and  proceeded  to 
unpack  and  set  up  servers, 
clients  and  a  hub.  The  product 
ran  and  worked,  which  in 
some  ways  was  the  curse  of 
their  presentation.  If  they  had 
stuck  with  PowerPoint  screen- 
shots,  we  wouldn't  have  seen 
what  made  the  whole  thing 
useless  to  us. 

Poor  Display 

The  tool  pulled  in  an  enor¬ 
mous  range  of  data,  stored  it 
in  a  database,  correlated  root 
causes  and  generated  alerts  on 
(hem.  It  sounded  good. 

However,  the  front-end  soft¬ 
ware  had  an  awful  graphical 
user  interface.  It  was  clunky 
and  slow  —  an  unpleasant 
thing  to  force  on  my  analysts, 
who  would  use  it  day  in  and 
day  out 

The  procedure  that  ad¬ 
dressed  the  detection  of  corre¬ 
lated  events  was  particularly 
bad.  A  window  popped  up  that 
displayed  an  identificatioD. 

But  when  Pro  presented  with 
an  alert  indicating  that  a 
whole  series  of  linked  things 
has  happened.  I  want  to  see 
the  deu^s  of  all  the  underly¬ 
ing  events  and  the  reasoning 
used  to  link  them,  so  I  can  un¬ 
derstand  how  to  respond.  The 
sales  team  understood  this,  so 
they  bad  ctK  and  pasted  the  ID 
into  a  SQL  report  and  rtm  a  re¬ 
port  against  the  database. 

But  the  whole  point  of  this 
application  was  to  reduce  my 
team's  manual  work.  Why 
couldn't  we  just  click?  Appar¬ 
ently.  we  could  add  our  own 
scripts  to  take  the  action  we 
wanted  when  an  ID  was 
raised. 

But  isn't  the  point  of  buying 


software  to  get  something  that 
does  the  work  for  me?  If  I 
wanted  a  ftamework.  I’d  just 
send  all  the  naoney  I  have  to 
BMC  or  Tivoli 

Then  came  the  deal-killer.  If 
you  wanted  to  see  whether 
new  events  had  occurred 
within  that  correlation,  the 
tool  couldn’t  tell  you.  Instead, 
you  had  to  rerun  the  report.  So 
you  might  get  an  ID  for  a  few 
innocuous  linked  events  and 
discount  it,  and  unless  you 
continually  reran  the  report  to 
check,  a  bwch  of  horrible 
events  could  be  added  under 
your  nose.  My  team  has 
enough  problents  keeping  up 
with  the  raw  data  without 
adding  another  layer  of  worit. 

Not  to  worry,  though.  Ap¬ 
parently,  these  "minor”  issues 
will  be  resolved  in  the  next 
version.  If  a  product  saves  me 
a  lot  of  nraney,  then  I'll  pay  a 
lot  for  it  It's  simple,  really.  In 
this  case,  I  don’t  have  to  worry 
bow  expensive  this  tool  might 
be.  since  I  won't  be  buying  it 

It  looks  like  1  won't  be  sav¬ 
ing  money  by  automatii^  our 
processes  just  yet  Pm  sure 
some  managed-service  pro¬ 
viders  have  ways  to  do  this 
welL  But  since  that’s  the  core 
of  their  business.  I  doubt 
they’ll  sell  it  to  me  on  a  CD. 

Perhaps  the  new  generation 
of  anomaly-detection  software 
will  have  something  worth 
emptymg  my  budget  into  But 
I  had  best  be  off  to  meet  with 
more  vendors  before  all  those 
balls  Pm  juggling  start  coming 
back  dowiL  I 
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Find  confidence  in  the  midst  of  chaos. 


Focus  on  the  best  In  network  security,  every  step  of  the  way. 


Start  with  a  secure  fountlation. 

Our  operating  system.  IPSO,  is  buitt  from  the  ground  up  for  security.  It  eliminates 
many  vulnerabilities  common  to  general-purpose  servers,  and  also  incorporates 
our  patented  IP  Ousterlng  technology.  Multiple  Nolda  security  appliances  can  be 
linked  as  one.  on  the  fly.  for  new  levels  of  performance,  reliability  and  scalability. 


Integrate  the  best  in  network  security  expertise. 

Partners  Mce  Check  Point  So^re  Technologies.  Internet  Security  ^ems  and  F5 
help  us  deliver  the  full  capabilities  of  their  VPN.  firewall,  intrusion  pmectioa  and 
Internet  traffic  management  applications.  To  learn  about  the  other  ways  we  give 
our  customers  greater  peace  of  mind.  Just  visit  vvwwuiokiaumfn/UKKijrlt^^ 
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Products.  People. 
Problems  solved. 

From  servers  to  service,  Dell  has  the  solution. 


Dell  I  Small  and  Medium  Business 

Your  business  has  unique  needs.  It  deserves  a  unique  solution.  From  PowerEdge  servers  featuring  Intel**  Xeon' 
processors  to  PowerVault  Storage  and  PowerConnect  Switches,  we  offer  tailored  solutions  to  rrteet  your  business  needs. 
And  of  course  it's  Dell,  so  you  know  you're  getting  the  latest  technology.  But  that's  only  half  of  the  story.  Dell  offers 
consulting  services  that  range  from  deployment  and  installation  to  training  and  certification.  All  from  one  source.  And 
everything  is  backed  by  thousands  of  service  and  support  people  at  your  beck  and  call,  on-site,  online  and  on  the  phone. 
Suddenly  your  IT  infrastructure  doesn't  seem  so  daunting.  Let  Dell's  one-of-a-kind  solutions  put  you  on  the  path  to 
one-of-a-kind  success. 

Dell  Rated  #1  in  Intel-Based  Seiver  Satisfaction 

Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 
Third  Quarter  2002 
-  December  2002 
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Remote  Office  &  File/Print  Sharing  Web  Server 


PowerEdge*  600SC  Server 

Pentium*  4  Proceuoi  el  2  40GH; 
ie?00MH}ECCD0fl  SOfiAU 
idBaUe  IG  4G8  of  Memo^ 

'(lOKRPWlSCSlHardDnvelUplolieGB  HDA>»i| 
Dnv*  Swage 

otsl4^/33MHj.  1-32/33MHZI 
iBeditoi)  Systems  Mgmt  Devices  tor  Error  OetBction 
fr  24x7  DeOcatea  Server  Phone  Tech  Suppon 
7r  Next  Susmesi  Day  On-Site  Service 


$649* 
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Presence 

Technology 


[DEUMTION 

Presence  technology  allows  a  network  user  to  know  I 
when  another  user  is  connected  to  the  network  and  I 
thus  available  to  receive  and  immediately  answer  a  | 
communication.  Instant  messaging,  pioneered  by 


America  Online,  is  the  first  and  best-known  example  I 
of  a  presence  technology.  I 


mt  nUftSELt.  KAV 

IN  TODAY'S  INFORMATION 
economy,  digital  technolo¬ 
gies  let  us  easily  communi¬ 
cate  with  colleagues  and 

customers  around  the  - 

world.  E-mail  has  giv¬ 
en  us  an  asynchronous 
communications 
medium  that  helps 

free  us  from  the  stric-  - 

tures  of  time-zone  differences. 
We  can  send  a  message  at  any 
time  and  get  a  reply  at  the  oth¬ 
er  person's  convenience. 

But  there  can  be  times  when 
we  may  need  a  quick  answer 
from,  say.  any  of  a  dozen  peo¬ 
ple.  and  it  cakes  a  white  just  to 
Tmd  one  of  that  dozen  who  is 
avaibble. 


With  the  growing  use  of  in¬ 
stant  messaging  (IM)  technol¬ 
ogy,  such  as  America  Online 
lnc.’s  AOL  Instant  Messenger 
(AIM)  and  Microsoft  Corp.'s 

-  Messenger  services. 

we  now  have  a  better 
alternative. 

If  we  have  those 
dozen  people  on  our 

-  'buddy  list,"  we  can 

tell  at  a  glance  if  any  of  their 
computers  are  logged  onto  the 
network  and  whether  they’ve 
been  active  recently.  We  can 
tell  if  fudy  in  engineering  is 
open  to  communicatiorts.  and 
we  can  send  her  a  quick  IM  to 
ask  a  question.  Her  reply  by 
IM  or  phone  can  resolve  the 
problem  efficiently. 


Although  AIM  started  as  a 
consumer-grade  technology,  it 
was  quickly  adopted  by  many 
businesses  that  saw  its  advan¬ 
tages  in  enabling  quick  com- 
muaicacions  and  providing 
presence  information. 

The  rapid  growth  in  its  use 
brou^t  competition,  notably 
from  Microsoft  and  Yahoo 
Inc.,  which  made  their  own 
products  that  interoperated 
with  the  AIM  servers.  How¬ 
ever.  AOL  soon  managed  to 
shut  them  out.  and  the  result 
for  the  past  several  years  has 
been  a  plurality  of  competing 
networks  of  IM  products  that 
can't  talk  to  one  another. 

Compatibility?  Interoper¬ 
ability?  Scandal?  Not  yet. 


Standardizing  IM  and  Presence 


THOUeHMANYMTERNETstan- 

dards  make  M  and  presence 
technology  possible,  there  aren't 
yet  any  definitive  stamtods 
across  the  industry.  However,  the 
mcompatfaiity  of  cunent  IM  prod¬ 
ucts,  which  hffi  resulted  in  three 
ma|or  sSos  of  users,  may  be  com- 
mg  to  an  end 

The  Intemef  Engtfieering  Task 
Force's  (CTF)  recently  approved 
a  new  worfong  group  to  foQJS  on 
the  Extensible  Messaging  and 


I  Presence  fVotocol(XMPP). 

According  to  the  group's  char* 

:  (er(ot)thet^at  MWjedoTQ/ 
htiridarters/xmppxhaft&.htn^). 
'XMPPisanopen.XML-tased 
protocol  for  near  reel-time  exten¬ 
sible  messaging  and  presence, 
ft's  the  core  protocol  of  (Denver- 
based  Jabber  Inc's)  Jabber  In¬ 
stant  Messaging  and  Presence 
technology,  which  is  ayrenlly  de¬ 
ployed  on  thousands  of  servers 
across  the  lnten>et  and  is  used  by 


milkons  of  people  worldwide.' 

Session  Initiation  Protocol 
(SIP),  a  signaling  standard  tor  set¬ 
ting  up  and  managing  communi¬ 
cations  sessions  between  differ¬ 
ent  media,  is  one  of  two  key  pro- 
locois  for  presence  lechnolo^ 
(QuckUnk  35318]. 

The  other  important  protocol  is 
SIP  for  Instant  Messaging  and 
Presence  Leveraging  Extensions, 
which  isn't  yet  an  IETF  standard 
but  still  serves  as  a  uniform  way  to 
add  presence. 

•RusseSKay 


but  there's  hope  for  the  near 
future  (see  box  below).  One 
potential  complication  is  that 
in  September  2002,  AOL  re¬ 
ceived  a  U.S.  patent  on  IM 
technology.  To  date,  AOL  has 
given  no  indication  that  it  in¬ 
tends  to  charge  its  competi¬ 
tors  with  infringement. 

A  Wider  Presence 

The  traditional  model  of  IM  is 
widening  rapidly  as  more 
people  carry  handheld  wire¬ 
less  devices  and  as  cellular 
telephones  perform  more 
functions. 

LM  Ericsson  Telephone  Ca, 
Motorola  Inc.  and  Nokia  Corp. 
formed  the  Wireless  Village 
Initiative  to  build  presence 
technology  into  their  mobile- 
phone  services  (also  called 
m-presence  capability).  Offi¬ 
cially  known  as  the  Instant 
Mess^ing  and  Presence  Ser¬ 
vices  Solution  (IMPS),  this 
should  let  users  know  if  the 
people  they’re  trying  to  con¬ 
tact  are  available,  even  before 
they  pick  up  the  phone.  You’ll 
only  have  to  push  a  few  but¬ 
tons  to  see  if  the  other  per¬ 
son's  phone  is  turned  on  and  if 
that  person  is  on  the  phone,  in 
a  meeting  or  even  at  lunch. 

There's  even  discussion  of 
usii^  Global  Positioning  Sys¬ 
tem  technology  in  future  ver¬ 
sions  of  m-presence  to  let  you 
know  where  a  person  is  even 
before  you  make  the  phone 
call  This  is  similar  to  recent 
moves  to  incorporate  location 
data  into  cell  phone  transmis¬ 
sions  for  law  enforcement  and 
public  safety  purposes. 

Once  that  capability  is  in 
place,  extending  it  to  other 
devices  and  other  inquiries  is 
a  potential  next  step.  But 
before  that  can  happen,  we 
need  more  and  better  inter¬ 
operability  among  messaging 
networks.  I 


Kiay  is  a  Computerworld  con- 
trihuling  writer  in  W^Kcester, 
Moss.  You  may  contact  him  at 
rus$kay@charter.net. 
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SCO  Group  Ships 
OpenServer  5.0.7 

Th«  SCO  Group  he.  has  relMsad 
Vsnhn  5.0.7  of  Hs  OpanSarvsr 
Unti  operalhg  syshm.  wfth  sn- 
hancadhardwarawpportinta- 
gratad  opan-sotreo  toob  and  a 
tww  SCO  Update  Sarvf(».rs 
avaiabla  h  Entarpriaa.  Hoh  and 
OaaMop  varahns  and  hcfudas 

UnivarabSarUBus^OMava* 

tion  and  new  (htear  support  K 
supports  htel  Corp.*s  ftnOum  4 
and  Xaon  ddpa,  IB  wol  as  AtMon 
XP  and  MP  from  Adaancad 
Micro  Devieos  he.  Undon.  Uiah- 
basad  SCO  has  prfcad  tha  oparal- 
ho  system  star^  at  %89l6. 


Oatastick  Rolls  Out 
Bluetooth  Software 

Oatastfdt  System  he.  h  Santa 
Clara.  CaH.,  teat  wash  M* 
nouncad  nm  apAwara  that  wM 
use  Bluateoth  sdratem  technoio- 
gytoconnaetmanutecturhp- 
floor  sanaors  to  Mm  he.  hand¬ 
helds.  The  aofhvara,  Oatastick 
Cormactkm  Plus  BT  for  ICHM. 
runs  on  Palm’s  Tungsten  T  and 
mSOO  sartes  handhalris  wWi 
Palm’s  Bhialoolh  cant  Tha  soft* 


enabted  maraftscliahtHteor  sen¬ 
sor  from  Ooaana  Sensor  Tach* 
nofogtes  he.  h  Vkginte  Baach. 
¥a.PririnB  wasn’t  dtedoaad. 


Vendors  Bring 
Office  to  Linux 

laraniaBa  aic.  ana  tooswaavars 
he.  are  partnarhg  to  offer  aacura 
Wab  acoMB  to  MicraaafI  Offica 
ana  omar  vfiMows  ippieiiiore 
hosted  on  Item  sarvars.  St  Md. 

^ ,  j ,m . 
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vatsionofCodaWsawsrsCroas* 
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aBows  Unui  to  rtrn  WhdowB  ap- 
pBeaHons  h  a  dtetrihited  thh- 
danl  amdronmaiA.  Tha  soflwara 
nMhaainBMdsBartfanntti  si 
part  of  XarantelB’s  Enterprtes  3. 
Pricing  stmts  at  S2.380  far  25 
ussrs  from  CodaWaoMrs  and 
SSO  par  uoar  from  Santa  Cniz. 
C«.-kttsdTmantela. 
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And  Here’s 
The  Ktch 


“W! 


'ELCOME,  FOLKS,  to  the  first  game 
of  the  software  World  Series,  with 
Microsoft  going  up  against  the  Cus¬ 
tomer.  I’m  Harv  Coney,  doing  the 
play-by-play  with  my  co-host.  Hank  Kee. 

“Bill  Gates  is  the  lead-off  hitter  for  Microsoft,  with 
Jean  Paoli  on  deck.  Bill  will  be  facing  right-hander 
Mark  Kett  tonight.  Mark  is  famous  for  his  Linux-ball, 
which  has  given  Gates  trouble  all  season.  What  do  you 
think  Bill’s  going  to  do  tonight.  Hank?” 

“It’s  hard  to  say,  Harv.  Bill  is  a  good  switch-hitter. 
Remember  back  in  1996  when  Microsoft  played  Unix 
Expo  in  New  York?  He  got  an  infield  single  by  saying 
Windows  NT  was  basically  the  same  thing  as  Unix. 


But  he’s  almost  sure  to  go 
for  a  Unix  slam  torngfat” 

“Here  comes  the  first 
pitch.  And  it’s  a  Linux-ball. 
high  and  inside.  Bill  swings 
and  misses  with  a  com¬ 
ment  about  bow  hard  it 
was  for  Microsoft  to  com¬ 
pete  when  IBM  put  all  its 
resources  behind  08/2!” 

“Wow,  I  don’t  think  any¬ 
one  saw  that  coming,  Harv. 

Everyone  knows  our  bat- 
boy  supported  OS/2  more 
than  IBM  did.” 

“Good  point.  Hank.  Now  here’s  the 
windup.  And  the  pitch.  Bill  swings  and 
misses  with  the  ’too  many  incompati¬ 
ble  versions  of  Linux'  comment.  That's 
Strike  2.  Kett  fidgets  on  the  mound. 
And  here’s  the  windup  for  the  0-2 
pitch.  He  fires  another  Unux-balL  this 
time  straight  down  the  middle!  Bill 
hits  the  ball  down  the  left-field  line 
with  the  comment  that  'Linux  is  like 
Unix,  which  is  like  building  a  747  by 
committee.’ 

“Left  fielder  Reggie  Stir  gets  a  bead 


on  the  ball  and  catches  it 
easily  with  the  old  joke 
about  how  Windows  is  like 
an  attractive  plane  that  ex¬ 
plodes  in  midair  without 
warning.  One  out:  and  that 
brings  up  Jean  PaolL” 
“Harv.  Jean's  had  a  pretty 
good  batting  average 
against  the  press  with 
XML  this  year,  but  his 
overall  average  is  low,  es¬ 
pecially  against  pennant 
contenders.” 

”Here’s  the  first  pitch  to  PaoU.  It’s  a 
Linux-ball  low  and  outside  for  Bail  L 
Kett  works  quickly;  he  winds  and 
deals.  It’s  an  OpenOflTice  change-up. 
Paoli  swii^  with  Office  11  and  hits  it 
ri^t  to  the  shortstop.  Sunny  Micro  — 
who  boots  the  ball!  Paoli  rounds  first 
base  as  Sunny  finds  the  handle  and 
throws  it  to  Dot  Org  at  second.  Now 
the  runner’s  hung  up  between  first  and 
second!  He’s  got  nowhere  to  go,  and 
Dot  runs  him  down  and  tags  him  for 
the  second  out.” 

“I  suspected  Jean  might  get  himself 


into  a  pickle.  If  he's  lying  about  open¬ 
ing  up  the  Office  document  formal, 
there’ll  be  a  backlash  ftom  customers. 
If  he  really  opens  up  the  document 
format,  the  free  OpenOffice  will  im¬ 
port  those  documents  and  draw  away 
customers.” 

“That's  right.  Hank.  WeU,  it's  up  to 
the  next  batter,  Pat  Em.  to  give  Micro¬ 
soft  a  little  life  this  inning.  Wait,  it 
looks  like  Microsoft  is  sending  in  Dee 
R.  Emm  to  pinch-hit  for  Pat.  Dee 
spends  most  of  her  free  time  promot¬ 
ing  digital  rights.” 

“Right  now  she  has  to  worry  about 
Ken’s  privacy-balL  Harv.  She's  been 
batting  under  .100  against  that  pitch  all 
season.  But  she’s  had  her  scouts  out 
researching  everything  they  can  find 
out  about  Mark  Ken  and  his  pitching 
strategy,  and  I  hear  she  has  a  pretty  de¬ 
tailed  database  on  Mark  ~  including 
what  he  does  in  his  personal  life.” 

“Here  comes  the  first  pitch.  It’s  a 
Media  Player-ball  low  and  inside. 

Emm  hits  h  with  a  list  of  all  the  DVDs 
Ken  has  watched  over  the  past  six 
months,  but  it’s  out  of  reach  in  foul 
territory.  Ken’s  into  his  windup;  be  de¬ 
livers  —  and  it’s  way  out  of  the  strike 
zone.  Wow.  that  was  almost  a  wild 
pitch.  Hank.  Dee  seems  to  have  un¬ 
nerved  him  with  that  last  swing.” 

“Maybe  she  hasn’t  listed  all  of  the 
DVDs." 

“Good  point.  Hank.  Now  Mark 
comes  back  with  the  privacy  pitch. 

Dee  hits  it  deep  into  center  field!  Go¬ 
ing,  going  ~  gone!  And  it’s  1-0  Micro¬ 
soft,  in  the  top  of  the  first!” 

“WelL  Harv.  it  looks  like  there's 
plenty  of  excitement  ^ead.  We’ll  be 
right  back  after  this  word  from  our 
sponsor.  Microsoft.”  k 
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SCO  Group  Ships 
OpenServer  5.0.7 

The  SCO  Group  bic.  has  released 
Version  5.0.7  of  its  OpenServer 
Unix  operating  system,  with  en¬ 
hanced  hardware  support,  inte¬ 
grated  open-source  tools  and  a 
new  SCO  Update  Service.  It's 
available  in  Enterprise,  Host  and 
Desktop  versions  and  includes 
Universal  Serial  Bus  2.0  integra¬ 
tion  and  new  driver  support.  H 
supports  Intel  Corp.’s  Pentium  4 
and  Xeon  chips,  as  well  as  Athlon 
XP  and  MP  chips  from  Advanced  i 
Micro  Devices  Inc.  Undon,  Utah-  I 
based  SCO  has  priced  the  operat-  . 
ing  system  starting  at  S699.  I 


Datastick  Rolls  Out 
Bluetooth  Software 

Datastick  Systems  Inc.  In  Santa  | 
Clara.  CaRf..  last  week  art-  ' 
nounced  new  software  that  will  I 
use  Bluetooth  wireless  technolo¬ 
gy  to  connect  manufacturing- 
floor  sensors  to  Pahn  bic.  hand¬ 
helds.  The  software.  Datastick  I 

Connection  Plus  BT  for  ICHM.  | 

runs  on  Palm’s  Tungsten  T  and 
mSOO  series  handhelds  with 
Palm’s  Bluetooth  card.  The  soft-  I 
ware  is  avaUable  on  a  Bkietoolh- 
enaUed  manufacturmg-floor  sen¬ 
sor  from  Oceana  Sensor  Tech¬ 
nologies  Inc.  in  \rirginia  Beach. 

Va.  Pricing  wasn’t  disclosed. 


Vendors  Bring 
Office  to  Linux 

TaranleRa  Inc.  and  CodeWeavers 
btc.  are  partnering  to  offer  secure 
Web  access  to  Microsoft  Office 
and  other  Windows  applications 
hosted  on  Linux  servers.  St.  Paul. 
Minn. -based  CodeWeavers  will 
offer  a  new  Intemet-optknixed 
version  of  CodeWeavers  Cross- 
Over  Office  Server  Edhion.  which 
aMows  Linux  to  run  Vfindows  ap¬ 
plications  in  a  distributed  thin- 
dient  environment  The  software 
will  be  available  next  month  as 
part  of  Tarantefla's  Enterprise  3. 
Pricing  starts  at  S2.380  for  25 
users  from  CodeWeavers  and 
S150  per  user  from  Santa  Cruz, 
Cafif. -based  Tarantella. 
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And  Here’s 
The  Pitch 


“W! 


'ELCOME,  FOLKS,  to  the  first  game 
of  the  software  World  Series,  with 
Microsoft  going  up  against  the  Cus¬ 
tomer,  I’m  Harv  Coney,  doing  the 
play-by-play  with  my  co-host.  Hank  Kee, 

“Bill  Gates  is  the  lead-off  hitter  for  Microsoft,  with 
Jean  Paoli  on  deck.  Bill  will  be  facing  right-hander 
Mark  Kett  tonight.  Mark  is  famous  for  his  Linux-ball, 
which  has  given  Gates  trouble  all  season.  What  do  you 
think  Bill's  going  to  do  tonight,  Hank?” 

“It’s  hard  to  say,  Harv.  Bill  is  a  good  switch-hitter. 
Remember  back  in  1996  when  Microsoft  played  Uni.x 
Expo  in  New  York?  He  got  an  infield  single  by  saying 
Windows  NT  was  basically  the  same  thing  as  Unix. 


But  he's  almost  sure  to  go 
for  a  Unix  slam  tonight." 

“Here  comes  the  first 
pitch.  And  it’s  a  Linux-ball. 
high  and  inside.  Bill  swings 
and  misses  with  a  com¬ 
ment  about  how  hard  it 
was  for  Microsiift  to  com¬ 
pete  when  IBM  put  all  its 
rcsiMJrces  behind  OS/2!" 

“Wow.  I  don’t  think  any¬ 
one  saw  that  coming.  Harv. 

Everyone  knows  our  bat- 
boy  supported  OS/2  more 
than  IBM  did." 

“Good  point.  Hank.  Now  here's  the 
windup.  And  the  pitch.  Bill  swings  and 
misses  with  the  ‘tiHi  many  incompati¬ 
ble  versions  of  Linux’  comment.  That's 
Strike  2.  Kett  fidgets  on  the  mound. 
And  here's  the  windup  for  the  0-2 
pitch.  He  fires  another  Linux-ball.  this 
time  straight  down  the  middle!  Bill 
hits  the  ball  down  the  left-field  line 
with  the  comment  that  ‘Linux  is  like 
Unix,  which  is  like  building  a  747  by 
committee.’ 

"Left  fielder  Reggie  Stir  gets  a  bead 


on  the  ball  and  catches  it 
easily  with  (he  old  joke 
about  how  Windows  is  like 
an  attractive  plane  that  ex¬ 
plodes  in  midair  without 
warning.  One  out:  and  (hat 
brings  up  lean  Paoli." 

"Harv.  lean’s  had  a  pretty 
goiKl  batting  average 
against  the  press  with 
XML  this  year,  but  his 
overall  average  Js  low.  es¬ 
pecially  against  pennant 
contepders." 

"Here's  the  first  pitch  to  Paoli.  It's  a 
Linux-ball  low  and  outside  for  Ball  1. 
Kett  works  quickly;  he  winds  and 
deals.  It’s  an  OpenOffice  changc-up. 
Paoli  swings  with  Office  11  and  hits  it 
right  to  the  shortstop.  Sunny  Micro  — 
who  boots  the  ball!  Paoli  rounds  first 
base  as  Sunny  finds  the  handle  and 
throws  it  to  Dot  Org  at  second.  Now' 
the  runner's  hung  up  between  first  and 
second!  He's  got  nowhere  to  go.  and 
Dot  runs  him  dow  n  and  tags  him  for 
the  second  out." 

"I  suspected  Jean  might  get  himself 


into  a  pickle.  If  he's  lying  ah«>ut  open¬ 
ing  up  the  Olfice  document  format, 
there’ll  be  a  backlash  from  customers. 
If  he  really  opcas  up  the  dt»cumeni 
formal,  the  free  OpenOffice  will  im¬ 
port  those  diKuments  and  draw  .nway 
i-ustomers." 

“Thai's  right.  Hank.  Well,  it's  up  to 
ilte  next  baiter.  Pa»  Ent.  to  give  Micro¬ 
soft  a  little  life  this  inning.  Wait,  it 
looks  like  Microsoft  is  sending  in  Div 
R.  Emm  to  pinch-hit  for  Pat.  iVe 
spends  miist  of  her  fiw  lime  promot¬ 
ing  digital  rights." 

"Kighi  now  she  has  tit  worry  about 
Kell's  privacy-ball,  Harv.  She’s  been 
batting  under  .100  against  that  pitch  all 
season.  Rut  she's  had  her  scout.s  out 
researching  everything  they  can  find 
out  about  Mark  Ken  and  his  pitching 
strategy',  and  I  hear  she  has  a  pretty  de¬ 
tailed  databa.se  on  Mark  —  including 
what  he  docs  in  his  personal  life." 

"Here comes  the  first  pitch.  It'sa 
Media  Pbycr-hall  low  and  inside. 

Emm  hits  it  with  a  list  of  all  the  DVDs 
Kett  has  watched  over  the  past  six 
months,  but  it’s  out  of  reach  in  foul 
territory.  Kelt's  into  his  windup:  he  de¬ 
livers  —  and  it's  way  out  of  ihe  strike' 
zone.  Wow.  that  was  almost  a  w  ild 
pitch.  Hank.  IVc  sivms  to  have  un¬ 
nerved  him  with  that  b.si  swing." 

"Maybe  she  hasn't  listed  oil  of  the 
DVDs." 

“Good  point.  Hank.  Now  Mark 
comes  back  with  the  privacy  pilch. 
l>ee  hits  it  Jeep  into  center  field!  Go¬ 
ing,  going  —  gone!  And  it’s  1-0  Micri>- 
st>fi,  in  Ihe  top  of  the  first!" 

“Well,  Harv.  it  Im>ks  like  there's 
plenty  of  exciiemeni  ahead.  We’ll  he 
right  back  after  this  word  fri>m  tnir 
sponsor.  Microsoft."  I 


WANTOWOnilON? 

ORv  iTKXt  columns  and  Mis  to  otf  Mlwes.  go  Kr 

wiviugngNlinNfld,fiMltagWoM 


Want  to  cut  your  IT  costs  without  sacrificing 
performance?  PRIMEPOWER  Servers  from  Fujitsu. 


Attend  our  webcast  to  learn  more: 
"Understanding  The  Role  of  Solaris  and 
Linux  Platforms  in  Tomorrow's  Data  Centers: 
An  IOC  Webcast.” 
www.ftsl.fujltsu.com/services/idc 


■n»esecretteout.PRlMEPOWER'’Solaris"'-compat!bte 
servers  from  Fujitsu*  deliver  a  major  breakthrough  in 
price/performance  compared  to  our  more  famous 
competition.  Want  proof?  PRIMEPCWER  serv^  offer 
such  an  advantage  that  the  world's  leading  com¬ 
panies  use  them  to  boost  their  performarviie.  And  there’s  a 
PRIMEPOWER  server  that's  right  for  any  application  you  need— 
from  single  CPU.  rack-mounted  servers  to  enterprise-ready 
systems  that  scale  to  1 26  CPUs  for  unsurpassed  performance  in 
the  data  center. 

Of  course,  it’s  not  just  the  hardware  you’re  buying.  It’s  also 
Fujitsu’s  SO-f  years  of  experience  supporting  high-perform¬ 
ance.  mission-critical  systems.  We’ve  already  helped  many 
companies  consolidate  their  IT  infrastructures  and  lov^rer  their 
Total  Cost  of  Ownership.  Our  free  white  paper,  The  Why  and 
How  of  Server  Consolidation,  explains  how.  Get  your  copy  at 
www.ftsi.fujitsu.com/ad.  Or  call  (877)  905-3644. 
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All  or  Nothing 

General  Motors  farms  out  nearly  all 
of  its  IT  operations,  while  Bank  One 
has  brought  most  of  its  IT  woric  back 
in-house.  Their  CIOs  tell  bow 
business  needs  and  the  economy 
guided  their  IT  decisions.  Page  42 


Predictable  Surprises 

Many  disasters  are  preventable  if 
you  know  how  to  ^t  them  coming, 
says  Michael  D.  Watkins,  who  wrote 
an  article  about  the  subiect  in  this 
month’s  Harvard  Business  Review 
with  Max  H.  Bazermaa  Page  44 


OPINION 

Look  Before  You 
Leap  to  Outsource 

Do  your  homework  before 
signing  on  the  dotted  line, 
advises  columnist  Bart 
Peridns.  Page  46 


WATCH 


0UTS0URC1N6  IS  OFTEN  A  DIfrTY  WORD 

among  the  IT  ranks,  but  CIO  Geor^ 
Lin  has  used  it  to  boost  morale  at  Doc- 
umenttun  Inc.,  a  maker  of  enterprise 
content  management  software  in 
Pleasanton,  Calif 

When  most  companies  outsource, 

Un  says,  they  “keep  the  core  and  out¬ 
source  the  context.”  But  Lin  gives  em¬ 
ployee  satisfactioo  equal  weight  in  the 
outsoLucing  decision  That  has  prompt¬ 
ed  him  to  keep  in-house  some  areas 

that  many  would  consider  _ 

“context”  and  outsource 
some  that  are  “core." 

“If  everybody  else  is  out¬ 
sourcing  something,  maybe 
you  should  too,  but  h  really 
depends  from  company  to  company,” 
says  Lin,  whose  unconventional  ap¬ 
proach  has  made  his  IT  group  a  model 
for  out-of-the-box  thinking  at  the  com¬ 
pany. 

Lin  isn’t  alone.  Iconoclastic  IT  lead¬ 
ers  are  learning  that  when  it  comes  to 
outsourcing,  thinking  about  the  idio¬ 
syncrasies  of  your  business  is  much 
more  important  than  following  the 
rules.  For  exunple,  the  IT  help  desk  is 
often  the  first  thing  to  go  because  it 
plays  a  supporting  role  that’s  not  seen 
as  adding  value.  But  an  early  anempt  at 
outsourdi^  taught  Lin  that  the  help 
desk  is  the  business’s  window  to  IT. 

“No  matter  how  good  your  back-end 
operation  is.  it’s  only  as  good  as  it’s 
perceived  at  the  help  desk,”  Lin  ex¬ 
plains.  “So  if  you  outsource  that  with¬ 
out  thinking  it  through,  you  can  create 
an  internal  perception  that  customers 
are  not  gettmg  the  best  service.” 

Lin’s  philosophy  also  led  him  to  out¬ 
source  Doounentum’s  worldwide  net¬ 
work,  a  core  tetduiology  for  the  compa¬ 
ny.  which  is  dispersed  geographically. 
Senior  networit  engineer  Stan  Wc^ 
was  spending  too  much  of  his  time 
manually  rerouting  trafHc  among  com¬ 
pany  sites  when  the  Internet  or  frame- 
relay  network  connections  failed. 

“He  was  pulling  his  hair  out  trying  to 
keep  the  network  working,”  Lin  recalls. 
And  because  the  company  was  grow¬ 
ing  rapidly,  the  addition  of  more  sites 


would  soon  make  thii^  worse. 

Lin  outsourced  netwoikmg  responsi¬ 
bility  to  Vlrtela  Communications  Inc. 
in  Greenwood  Village,  Colo.,  which 
provides  and  manages  a  virtual  private 
network  across  39  Documen- 
tum  locations.  Each  site  now 
has  a  single  primary  ccm- 
nection  for  Internet  and 
wide-area  network  (WAN) 
access  and  a  fallback  Digital 
Subscriber  Line  service  in 
case  of  frulure. 

Virteia  manages  every¬ 
thing,  including  the  last- 
mile  connection  and  the 
various  intricacies  of  each 
site. 

*nie  virtual  private  network  has  in¬ 
creased  bandi^th  at  the  sites  by  2S% 
to  100%.  decreased  latency  by  10%  and 
cut  WAN  costs  by  half  But  most  im¬ 
portant,  Lin  says,  “we  gave  the  network 
guy  back  his  sanity.  Now.  instead  of 
worryii^  about  li^ts  and  switches, 
he’s  really  leveraging  his  skill  set  to 
help  the  business.” 

“It  can  be  a  big  career  boost  for  peo¬ 
ple  when  you  outsource  those  thk^ 
where  you  can’t  add  value  as  an  inter¬ 
nal  IT  worker.”  says  Julie  Giera,  an  ana- 
Conrinued  on  page  40 


Breaking 

:sourcing 

Boundaries 

Forget  following  the  conven¬ 
tional  rules.  Focus  on  the  idio¬ 
syncrasies  of  your  business. 

By  Kathleen  Melymuka 
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All  or  Nothing 

General  Motors  farms  out  nearly  all 
of  its  IT  operations,  while  Bank  One 
has  brought  most  of  its  IT  work  back 
in-house.  TTieir  CIOs  tell  how 
business  needs  and  the  economy 
guided  their  IT  decisions.  Page  42 


Predictable  Surprises 

Many  disasters  are  preventable  if 
you  know  how  to  spot  them  coming, 
says  Michael  D.  Watkins,  who  wfx>le 
an  article  about  the  subject  in  this 
month’s  Harvard  Business  Beview 
with  Max  H.  Bazerman.  Page  44 


OPINION 

Look  Before  You 
Leap  to  Outsource 

Do  your  homework  before 
signing  on  the  dotted  line, 
advises  columnist  Bart 
Perkins.  Page  46 


WATCH 


OUTSOURCING  IS  OFTEN  A  DIRTY  WORD 

among  the  IT  ranks,  but  CIO  George 
Lin  has  used  it  to  boost  morale  at  Ooc- 
uraentum  Inc.,  a  maker  of  enterprise 
content  management  software  in 
Pleasanton,  Calif. 

When  most  companies  outsource. 
Lin  says,  they  “keep  the  core  and  out¬ 
source  the  context.”  But  Lin  gives  em¬ 
ployee  satisfaction  equal  weight  in  the 
outsourcing  decision.  That  has  prompt¬ 
ed  him  to  keep  in-house  some  areas 
that  many  would  consider 
"context"  and  outsource 
some  that  are  “core." 

“If  everybody  else  is  out¬ 
sourcing  something,  maybe 
you  should  too,  but  it  really 
depends  from  company  to  company." 
says  Lin.  whose  unconventional  ap¬ 
proach  has  made  his  IT  group  a  model 
for  out-of-the-box  thinking  at  the  com¬ 
pany. 

Lin  isn't  alone.  Iconoclastic  IT  lead¬ 
ers  are  learning  that  when  it  comes  to 
outsourcing,  thinking  about  the  idio¬ 
syncrasies  of  your  business  is  much 
more  important  than  following  the 
rules.  For  example,  the  IT  help  desk  is 
often  the  first  thing  to  go  because  it 
plays  a  supporting  role  that’s  not  seen 
as  adding  value.  But  an  early  attempt  at 
outsourcing  taught  Lin  that  the  help 
desk  is  the  business's  window  to  IT. 

“No  matter  how  good  your  back-end 
operation  is.  it’s  only  as  good  as  it's 
perceived  at  the  help  desk."  Lin  ex¬ 
plains.  “So  if  you  outsource  that  with¬ 
out  thinking  it  through,  you  can  create 
an  internal  perception  that  customers 
are  not  getting  the  best  service." 

Lin’s  philosophy  also  led  him  to  out¬ 
source  Documentum’s  worldwide  net¬ 
work,  a  core  technology  for  the  compa¬ 
ny,  which  is  dispersed  geographically. 
Senior  network  engineer  Stan  Wolf 
was  spending  too  much  of  his  time 
manually  rerouting  traffic  among  com¬ 
pany  sites  when  the  Internet  or  frame- 
relay  network  connections  failed. 

“He  was  pulling  his  hair  out  trying  to 
keep  the  network  working,"  Lin  recalls. 
And  because  the  company  was  grow¬ 
ing  rapidly,  the  addition  of  more  sites 


would  soon  make  things  worse. 

Lin  outsourced  networking  responsi¬ 
bility  to  Virtela  Communications  Inc. 
in  Greenwood  Village.  Colo.,  which 
provides  and  manages  a  vinual  priv’atc 
network  across  39  Documen- 
turn  locations.  Each  site  now 
has  a  single  primar>’  con¬ 
nection  for  Internet  and 
wide-area  network  (WAN) 
access  and  a  fallback  Digital 
Subscriber  Line  service  in 
case  of  failure. 

Virtela  manages  everv’- 
thing,  including  the  last- 
mile  connection  and  the 
various  intricacies  of  each 
site. 

The  virtual  private  network  has  in¬ 
creased  bandwidth  at  the  sites  by  25'’i> 
to  lOOSi,  decreased  latenc)’  by  10%  and 
cut  WAN  costs  by  half.  But  most  im¬ 
portant.  Lin  says,  “we  gave  the  network 
guy  back  his  sanity.  Now.  instead  of 
worrying  about  lights  and  switches, 
he's  really  leveraging  his  skill  set  to 
help  the  business.” 

"It  can  be  a  big  career  boost  for  peo¬ 
ple  when  you  outsource  those  things 
where  you  can’t  add  value  as  an  inter¬ 
nal  IT  worker."  says  lulie  Giera.  an  ana- 
Contimed  on  page  40 


Breaking 

sourcing 

Boundafies 

Forget  following  the  conven¬ 
tional  rules.  Focus  on  the  idio¬ 
syncrasies  of  your  business. 

By  Kathleen  Melymuka 
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Ivst  Jt  (iijiJ  tntormJlion  Cin»up  Inc.  in 

<;jmbnd>:v.  Masv 

Wolf  .ijjrccs-  •‘  I'hiN  Iroos  mo  up  tn 
|‘«K  US  I'n  husinoss  roquircmcnis  and 
ovorall  son  ico  Joli\  on  lo  iniornal  ous- 
lomors."  ho  sjys. 

Moroovor.  Lin's  unoonvomiofial  ap- 
projoh  has  mado  IT  a  modol  dopart- 
mont-  "(.>utsourcin}i  has  boon  a  very 
orilical  oompononi  <*f  our  strato'^rx." 

Nj\s  Divumontuni  CEO  Dave  Do  Walt 

showcase  <.icor>;o  and  his  operations 
to  our  oust«>mors.' 

All  in  the  Family 

Early  in  l‘*'>8.  Y2k  preparations  and 
other  lariio  mitialisc-s  were  sirainin^t 
human  resources  at  Allstate  Insurance 
Co.  in  Northbrook,  111.  Nearly  50'‘ii  of 
the  IT  workers  were  s'ontractors.  "It 
was  e.vtremciy  s*xpcnsive  and  gettine 
more  and  more  diiTicult  to  manage." 
s3>N  Mike  Seardina.  assistant  vice  pres¬ 
ident  for  finance,  (.loniractor  turnover 
was  also*  a  ptt'blem.  iVoplo  would 
walk  out  the  door  with  two  to  four 
years  of  Allstate  know  ledjtc.''  ho  says. 
Allstate  had  t»>  find  a  way  to  keep  its 
intellectual  capital  and  lower  costs. 

The  solution  was  to  hring  nuisourc- 
ini:  in-house.  Allstate's  parent  ci»mpa- 
ny.  I'he  Allstate  Corp..  developed  its 
own  olTshi're  ouistmrcinj:  operation. 
Northbrmlk  Technoh^  of  Northern 
Ireland  Ltd.  in  Belfast.  “W’e  went  to 
Belfast  and  found  the  cost  structure, 
lanjituatie  accessibility,  culture  and  time 
zone  all  extremely  advantageous."  sa>-s 
Scardina. 

Iniiiallv.  N«‘rthbr**ok  performed 
maintenance  and  low  -ctmtact  dcvel«»p- 
ment  work  that  didn't  require  much  in¬ 
teraction  with  the  U.S.  gnmp-  But  in  its 
third  year,  the  grxmp  is  dealing  more 
directly  with  use-rs  in  the  U.S..  main¬ 
taining  or  developing  more  than  tiU 
Allstate  systems,  including  Unix  ad¬ 
ministration.  security,  financial  and  in¬ 
frastructure  applications,  and  technol¬ 
ogy  for  agents,  call  centers,  underwrit¬ 
er*  and  claims.  Costs  have  K-en  re¬ 
duced  by  more  than  half.  , 

Northbrook  alstt  has  been  a  s«mree 
of  skills  in  newer  lechmdogies  that  are 
harder  to  find  in  the  CVS  marketplace, 
••uch  js  spiYcn  ••e«-ogniiion-  'It's  a 
jreat  resource  lor  us '  -..lys  t^hief  I’tvh- 
nology  •  >fTicer  Caihx  Bruiie  'And  we 
don't  have  to  think  *WKe  ibout  the 
contract  •*!  developing  a  whole  new  re- 
latUmship.'  because  ’he  people  are  em¬ 
ployees  of  the  parent  corporatiim. 

The  stx-hour  time  difference  gives 
Brune  additional  Hexibility  for  shift 
woik.  but  it  also  allows  real-time  com¬ 
munication  during  the  day. 


"It's  pretty  clever."  says  Giga's  Gicra. 
"I  think  you're  going  to  see  this  contin¬ 
ue  as  j  trend.  lust  as  companies  moved 
manufacturing  offshore  because  it's 
cheaper  to  make  sneakers  in  China, 
programming  and  IT  can  be  another 
business  pnwess  to  mow  olfshore. ' 

But  it's  not  for  everybody,  she  adds, 
citing  a  large  bank  in  New  York  that 
created  a  subsidiary  in  India  that  failed 
because  business  units  resisted  send¬ 
ing  work  out.  "The  key  is  to  have  e.xec- 
utive  support,  enough  work  to  support 
it  and  an  incentive  for  the  business 
units  to  use  the  offshore  facility."  she 
says.  "Otherwise,  it  won't  sueoeeJ.  ' 

It's  also  important  to  treat  such  out¬ 
sourcing  arrangements  as  business  — 


HWe  don’t  have 
to  think  twice 
about  the  contract  or 
developing  a  whole 
new  rektionship 
[because  the  people 
are  employees]. 

CATHY  BRUNE.  CTO  ALLSTATE 
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not  family  —  relationships,  says  Stuart 
Kliman.  a  director  at  Vantage  Partners 
LLC,  a  consulting  firm  in  Boston  that 
speciali?cs  in  helping  companies  insti¬ 
tutionalize  their  relationship  manage¬ 
ment  capabilities.  "You  shouldn't  as¬ 
sume  just  because  you  own  [the  out¬ 
sourcing  unit  that]  you  will  work  effec¬ 
tively  w  ith  them."  he  says.  "I  would  at¬ 
tend  to  the  core  organizational  work¬ 
ing  relationships  with  as  much  if  not 
more  discipline  than  I  would  with  a 
traditional  provider." 

Northbrook  is  handling  all  of  All¬ 
state's  outsourcing,  and  the  demand 
for  its  services  continues  to  grow  as 
business  units  look  to  cut  costs.  The 
Northbnxik  staff  Tiis  grown  to  more 
than  700.  with  200.^  revenue  in  excess 
of  S.TO  million,  and  Allstate's  U.S.  IT 
staff  has  grown  as  well.  Brune  says. 

The  Hybrid  Approach 

In  a  financial  services  company  like 
Coast  Capital  Savings  in  Vancouver. 
British  Columbia,  the  technology  for 
the  banking  operation  is  about  as  core 
as  you  can  gel.  but  Coast  Capital  out¬ 
sources  it  —  sort  of. 

CIO  Iwl  J.  Rosenberg  uses  Sanchez 
Computer  Assifciatcs  Inc.  in  Malvern. 
Pa.,  an  outsourcer  that  develops  and 
maintains  core  hanking  technology  for 
financial  institutions  throughout  the 
world.  But  his  internal  IT  employees 
have  access  to  the  Sanchez  source 
code,  enabling  them  to  connect  the 
core  system  to  custom  applications 
.such  as  data  warehouses.  ATMs  and 
debit  card  systems.  "We'll  leverage  the 
vendor's  expertise  and  skills  as  we  sec 
fit  in  tcrnis  of  business  needs,"  says 
Dave  Smart,  manager  of  business  solu- 
tioas.  "Because  we  have  the  source 
ctide.  we're  able  to  meet  business 
needs  with  in-h<»use  resources.’’ 

They  ffxrus  on  improving  the  icch- 
nol^Ht)'  platform."  Rosenberg  says. 

“Our  internal  IT  people  locus  on  is¬ 
sues  closer  to  the  customer."  For  exam¬ 
ple.  the  IT  group  is  currently  integrat¬ 
ing  the  core  system  w  ith  a  new  custo¬ 
mer  relationship  management  system 
from  TalLsma  Corp.  in  Kirkland.  Wash. 
"Banking  data  and  information  will  be 
flowing  in  real  time."  says  Rosenberg. 
"It  rtxjuires  real-time  linkage,  sv)  our 
folks  are  w«»rking  on  that." 

"We  understand  the  business  re¬ 
quirements  and  do  business  pmgram- 
ming."  Smart  says.  "We  don't  do  low- 
level  pn>gramming.  We  don't  support 
the  databa.se.  That's  a  skill  set  wc'rc 
not  interested  in." 

Gicra  says  leveraging  in-house  skills 
is  a  g«>od  way  lo  do  more  with  less. 
Thai's  where  companies  get  the  most 


value  out  of  their  programming  staff, 
because  they  know  not  only  the  tech¬ 
nology  but  also  the  business."  she  says. 

It’s  also  economical.  After  a  recent 
merger  with  a  financial  institution  that 
was  planning  to  convert  to  a  new  sy.s- 
tem.  the  new  partner  was  drawn  into 
the  hybrid  arrangement,  panly  be¬ 
cause  it  was  expected  to  deliver  80®\i 
savings  over  projected  costs. 

Kliman  applauds  the  practicality  of 
hybrid  outsourcing,  but  he  notes  that 
this  type  of  relationship  brings  chal¬ 
lengers.  "Companies  in  this  situation 
should  really  pay  attention  to  the  proc¬ 
esses  they  put  iti  place  to  enable  their 
in-house  folks  to  work  effectively  with 
the  outsourcers."  ho  says.  "If  they  di»n't 
manage  that  well,  negative  perceptions 
and  trust  problems  could  lessen  the 
value." 

Keeping  your  priorities  straight  is 
the  key  to  successful  outfaturcing,  says 
Doeumentum's  Lin.  "Outsourcing 
shivuld  improve  the  agility  of  the  busi¬ 
ness  and  the  .igility  of  the  IT  organiza¬ 
tion  and  make  it  more  effective.'  he 
says.  "When  it's  done  right,  outsourc¬ 
ing  is  a  win  for  everybody.  If  you  real¬ 
ize  cost  savings,  that's  a  bonus."  I 


Afc'IymuJco  is  a  Computcrworld 
confributirtg  writer.  Contact  her  at 
IcmeiymuJcai.a>eart/iIinilunet. 
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lyst  at  Giga  Infonnation  Group  Inc.  in 

Cambridge.  Mass. 

Wolf  agrees.  "This  frees  me  up  to 
focus  on  business  re<iuirements  and 
overall  service  delivery  to  internal  cus* 
comers,"  be  says. 

Moreover.  Lin’s  unconventional  ap¬ 
proach  has  made  IT  a  model  depart¬ 
ment.  "Outsourcing  has  been  a  very 
critical  component  of  our  strategy." 
says  Documentum  CEO  Dave  DeWalt. 
"I  showcase  George  and  his  operations 
to  our  customers." 

Alin  the  Family 

Early  in  1998.  Y2k  preparations  and 
other  lar^  initiatives  were  straining 
human  resources  at  Allsute  Insuxaivce 
Ca  in  Northbrook.  IlL  Nearly  50%  of 
the  IT  workers  were  contractors.  “It 
was  extremely  expensive  and  getting 
more  and  more  difiicult  to  manage." 
says  Mike  Scardina.  assistant  vice  pres¬ 
ident  for  finaoce.  Contractor  turnover 
was  also  a  p^oble^^  “People  would 
walk  out  the  door  with  two  to  four 
years  of  Allstate  knowledge."  he  says. 
Allstate  had  to  And  a  way  to  keep  its 
intellectual  capital  and  lower  costs. 

The  solution  was  to  bring  outsourc¬ 
ing  in-house.  Allstate's  parent  compa¬ 
ny.  The  Allstate  Corp..  developed  its 
own  ofebore  outsourcing  operation. 
Northbrook  Technology  of  Northern 
Ireland  Ltd.  in  Belfast.  “We  went  to 
Belfosi  and  found  the  cost  structure, 
langu^  accessibility,  culture  and  time 
zone  all  extremely  advantageous."  says 
Scardina. 

Initially,  Northbrook  performed 
maintenance  and  low-contact  develop¬ 
ment  work  that  didn't  require  much  in¬ 
teraction  with  the  U.S.  group  But  in  its 
third  year,  the  group  is  dealing  more 
directly  with  users  in  the  U.S..  main¬ 
taining  or  developing  more  than  60 
Allstate  systems,  including  Unix  ad- 
ministraUoo.  security,  financial  and  in- 
(rastTuctare  applications,  and  technol¬ 
ogy  for  agents,  call  centers,  underwrit¬ 
ers  and  claims.  Costs  have  been  re¬ 
duced  by  more  than  half. 

Northbrook  also  has  been  a  source 
of  skills  in  newer  technologies  that  are 
harder  to  And  in  the  U.S.  marketplace, 
such  as  speech  recognition.  "It’s  a 
great  resource  for  us."  says  Chief  Tech¬ 
nology  OfAcer  Cathy  Brune.  “And  we 
don’t  have  to  think  twice  about  the 
contract  or  developing  a  whole  new  re¬ 
lationship'  because  the  people  are  em¬ 
ployees  of  the  parent  corporation. 

The  six-hour  time  dUTerence  gives 
Brune  additfonal  (lexibiUty  for  shift 
work,  but  it  also  allows  real-time  com¬ 
munication  during  the  day. 


“It’s  pretty  clever."  says  Giga’s  Giera. 
“I  think  you’re  going  to  see  this  contin¬ 
ue  as  a  trend.  Just  as  companies  moved 
manufacturing  oflshore  because  it’s 
cheaper  to  make  sneakers  in  China, 
programming  and  IT  can  be  another 
business  process  to  move  offshore." 

But  it’s  not  for  everybody,  she  adds, 
citing  a  large  bank  in  New  York  that 
created  a  subsidiary  in  India  that  failed 
because  business  units  resisted  send¬ 
ing  work  out  "The  key  is  to  have  exec¬ 
utive  support,  enough  work  to  support 
it  and  an  incentive  for  the  business 
units  to  use  the  offshore  facility,"  she 
says.  "Otherwise,  it  won't  succeed" 

It’s  also  important  to  treat  such  out- 
sourcii^  arrangements  as  business  — 
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not  fomily  —  relationships,  says  Stuart 
Kliman.  a  director  at  Vantage  Partners 
LLC,  a  consulting  Ann  in  Boston  that 
sfiecializes  in  helping  companies  insti¬ 
tutionalize  their  relationship  manage¬ 
ment  capabilities.  "You  shouldn’t  as¬ 
sume  fust  because  you  own  [the  out¬ 
sourcing  unit  that]  you  will  work  effec¬ 
tively  with  them,"  he  says.  “I  would  at¬ 
tend  to  the  core  organizational  work¬ 
ing  relationships  with  as  much  if  not 
more  discipline  than  I  would  with  a 
traditional  provider.” 

Northbrook  is  handling  all  of  All- 
state’s  outsourcing,  and  the  demand 
for  its  services  continues  to  grow  as 
business  units  look  to  cut  costs.  The 
Northbrook  staff  has  grown  to  more 
than  700,  with  2003  revenue  in  excess 
of  $30  million,  and  Allstate's  Ui».  IT 
staff  has  grown  as  well.  Brune  says. 

The  HybM  Approach 

In  a  Anancial  services  company  tike 
Coast  Capital  Savings  in  Vancouver, 
British  Columbia,  the  technology  for 
the  banking  operation  is  about  as  core 
as  you  can  get.  but  Coast  Capita  out¬ 
sources  it  —  sort  of. 

CIO  ]oel ).  Rosenberg  uses  Sanchez 
Computer  Associates  Inc.  in  Malvern, 
Pa.,  an  outsourcer  that  develops  and 
maintains  core  banking  technology  for 
financial  institutions  throughout  the 
world  But  his  internal  IT  employees 
have  access  to  the  Sanchez  source 
code,  enabling  them  to  connect  the 
core  system  to  custom  applications 
such  as  data  warehouses,  ATMs  and 
d^it  card  systems.  “We'll  leverage  the 
vendor's  expertise  and  skills  as  we  see 
At  U)  terms  of  business  needs."  says 
Dave  Smart,  manager  of  business  solu- 
ttoos.  “Because  we  have  the  source 
code,  we’re  able  to  meet  business 
needs  with  in-house  resources." 

“They  focus  on  improving  the  tech¬ 
nology  platform,"  Rosenberg  says. 

“Our  internal  IT  people  focus  on  is¬ 
sues  closer  to  the  customer."  For  exam¬ 
ple.  the  IT  group  is  currently  int^rat- 
ing  the  core  system  with  a  new  custo¬ 
mer  relationship  management  system 
from  Talisma  (^rp.  in  Kirkland  Wash. 
“Banking  data  and  infonnation  will  be 
flowing  in  real  time,"  says  Rosenberg. 
“It  requires  real-time  linkage,  so  our 
folks  are  working  on  that.” 

“We  understand  the  business  re¬ 
quirements  and  do  business  program¬ 
ming.”  Smart  says.  “We  don’t  do  low- 
level  programming.  We  don’t  support 
the  database.  That’s  a  skill  set  we're 
not  interested  in." 

Giera  says  leveraging  in-house  skills 
is  a  good  way  to  do  more  with  less. 
"That's  where  companies  get  the  most 
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value  out  of  their  programming  staff, 
because  they  know  not  only  the  tech¬ 
nology  but  also  the  business."  she  says. 

It's  also  economicaL  After  a  recent 
merger  with  a  Anancial  institution  that 
was  planning  to  convert  to  a  new  sys¬ 
tem.  the  new  partner  was  drawn  into 
the  hybrid  arrangement,  partly  be¬ 
cause  it  was  expected  to  deliver  80% 
savings  over  projected  costs. 

Kitman  applauds  the  practicality  of 
hybrid  outsourcing,  but  be  notes  that 
this  type  of  relationship  brings  chal¬ 
lenges.  “Companies  in  this  situation 
should  really  pay  attention  to  the  proc¬ 
esses  they  put  in  place  to  enable  their 
in-house  folks  to  work  effectively  with 
the  outsourcers."  he  says.  “If  they  don't 
manage  that  well  negative  perceptions 
and  trust  problems  could  lessen  the 
value." 

Keeping  your  priorities  straight  is 
the  key  to  successAil  outsourcing,  says 
Documentum’s  Lin.  "Outsourcing 
should  improve  the  agility  of  the  busi¬ 
ness  and  the  agility  of  the  IT  organiza¬ 
tion  and  make  it  more  effective,"  he 
says.  “When  it’s  done  right,  outsourc¬ 
ing  is  a  win  for  everybody.  If  you  real¬ 
ize  cost  savings,  that's  a  bonus.”  I 


Melymuka  is  a  Computerworid 
conjuring  writer.  Contact  her  at 
kTnelymukaS^earthlink.net. 
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GMand 
Bank  One 
take  opposite 
approaches 
to  outsourcing. 
By  Thomas 
Hoffman 


WATCH 


INSOURCING  VS.  OUTSOURCING.  It’s  the 
great  debate  these  days  for  many  IT 
executives  who  are  stni^ling  to  cost- 
justify  the  most  effective  way  to  run 
their  IT  operations. 

But  experts  say  it's  not  a  question  of 
right  or  wrong,  but  of  which  strategy 
best  fits  a  company's  business  model 

General  Motors  Corp. 
and  Bank  One  Corp.  an¬ 
swered  the  question  by 
taking  divergent  paths. 

Along  with  the  business 
rationales  behind  their 
strategic  choices,  the  CIOs  at  the  two 
companies  offer  up  some  of  the  tough 
lessons  they  have  learned  along  their 
separate  ways. 

CM’S  Third  Warn 

For  many  people  in  the  IT  industry, 

GM  has  become  synonymous  with  out¬ 
sourcing.  The  $186.6  billion  auto  ^ant 
purchased  Electronic  Data  Systems 
Corp.  in  1984  from  Ross  Perot  and  out¬ 
sourced  virtually  all  of  its  IT  opera¬ 
tions  to  the  Plano.  Texas-based  IT 
services  provider  under  a  precedent¬ 
setting  10-year.  $40  billion  agreement. 

In  1996,  GM  spun  off  EDS  to  operate 


as  a  stand-alone  company  and  began 
redistributing  some  of  GM’s  IT  work 
to  other  services  firms  such  as  IBM, 
Cap  Gemini  Ernst  &  Young  and  Accen¬ 
ture  Ltd.  During  its  12-year  exclusive 
arrangement  with  EDS,  GM  encoun¬ 
tered  its  share  of  problems  in  the  rela¬ 
tionship,  but  the  automaker's  commit¬ 
ment  to  an  outsourced 
model  remains  fervent. 

“If  you  don't  put  a  model 
m  that  works,  it  makes 
it  look  like  outsourcing 
doesn't  work,"  says  Ralph 
Szygenda,  GM’s  CIO  since  June  19^ 
He  insists  that  most  companies  that 
switch  from  an  outsourced  to  an  in- 
house  approach  “typically  don't  have 
the  right  model  in  place  to  maiuge 
outsouicing."  As  a  result,  they  mistak¬ 
enly  end  up  blaming  outsourcing  as 
a  discipline. 

Szygenda  acknowledges  that  “GM 
had  done  things  wrong  in  outsourcing 
its  work,  but  we  changed  the  model; 
we  didn't  go  back  and  insource.”  Early 
outsourcing  mistakes  that  GM  later 
corrected  include  contracting  a  single 
source  for  services  and  farming  out 
management  and  IT  architecture 


Nothing 


responsibilities  to  a  third  party. 

Today,  in  what  he  calls  the  compa¬ 
ny’s  third  wave  of  outsourcing,  Szygen¬ 
da  and  his  team  of  L700  IT  employees 
manage  GM’s  outsourcing  relation¬ 
ships  with  a  multitude  of  vendors,  in¬ 
cluding  all  of  the  major  outsourcing 
companies.  The  GM  IT  group  also 
oversees  the  various  vendors’  relation¬ 
ships  and  alignment  with  GM’s  eight 
global  operating  groups  and  major 
subsidiaries,  including  GMAC  Finan¬ 
cial  Services.  Hu^es  Electronics  Corp. 
and  GM  Locomotive  Group. 

During  the  first  wave  of  outsourcing, 
by  contrast,  GM  banded  all  of  Its  FT  ac¬ 
tivities  over  to  EDS.  “Pricing  was  too 
high  because  there  wasn't  any  compe¬ 
tition,”  says  Szygenda. 

Even  if  a  single  outsourcer  has  the 
best  intentions  to  get  the  job  done, 
there’s  no  incentive  for  it  to  complete 
tasks  within  budget  and  scope,  because 
there's  no  threat  of  it  being  replaced, 
he  notes. 

GM  has  also  learned  that  it’s  a  mis¬ 
take  to  outsource  strategic  manage¬ 
ment  of  its  IT  enviroiunent  and  archi¬ 
tecture  to  a  third  party,  which  is  what 
it  did  under  the  original  agreement 
with  EDS.  After  Szygenda  was  broi^t 
in  and  launched  the  second  wave  in 
1996.  he  broi^t  strategic  IT  manage¬ 
ment  and  information  systems  archi¬ 
tecture  in-house  to  be  driven  by  GM. 
Szygenda  put  in  place  two  layers  of  IT 
man^ement  at  the  start  of  the  third 
wave.  These  managers  report  to  him 
and  oversee  GM’s  relationships  with 
outsourcers  and  the  business  units  that 
they  support. 

“Every  CIO  who  reports  to  me  has  a 
but^t  that  they're  measured  against,” 
says  Szygenda.  The  outsourcers  all 


have  to  work  within  the  framework 
that  GM  has  devised,  and  while  they’re 
required  to  understand  the  GM  busi¬ 
nesses  that  they  support,  “they  don’t 
direct  the  business,"  Szygenda  says. 

Szygenda  and  his  lieutenants  believe 
that  GM’s  existing  outsourced  model 
works  well  for  a  company  its  size  be¬ 
cause  it  brings  the  auto  giant  improved 
speed  and  a^ity  for  IT  decision-mak¬ 
ing  and  execution.  For  example,  before 
GM  brought  Kirk  Gutmann  over  from 
Navistar  International  Corp.  in  1997  to 
be  global  product  development  infor¬ 
mation  officer.  CM'S  glol»l  operations 
were  bloated,  the  quality  of  its  vehicles 
was  sagging,  and  it  was  taking  nearly 
four  years  for  the  company  to  bring  a 
new  vehicle  to  market. 

By  tapping  into  a  group  of  specialty 
IT  service  providers,  including  Micro¬ 
soft  Corp.  and  Hewlett-Packard  Co., 
and  automating  many  of  GM's  opera¬ 
tions.  Gutmann  has  been  able  to  help 
remot'e  more  than  SI  billion  from  GM's 
costs  and  reduce  the  time  to  market  for 
GM  vehicles  to  18  months. 

GM’s  revised  outsourcing  approach 
of  deploying  a  wide  variety  of  IT  ven¬ 
dors  instead  of  a  ringle  vendor  such  as 
EDS  "has  allowed  us  to  shift  resources 
more  quickly."  says  Gutmann.  Sy^n- 
da  says  it  has  also  helped  bring  about 
double-digit  gains  in  GM’s  engineering 
productivity,  in  part  through  GM’s 
savvy  use  of  technology. 

GM  has  driven  other  hefty  bottom- 
line  benefits  from  its  outsourcing  mod¬ 
el.  In  2001  and  2002.  GM  achieved  its 
first  consecutive  years  of  market-share 
gains  in  25  years.  The  company  has 
also  cut  S800  million  annually  from  its 
IT  costs  for  the  past  seven  years.  Still. 
Szygenda  is  the  first  to  acknowledge 
that  GM’s  outsourcing  model  wouldn't 
work  for  all  companies.  There  is  no 
one  answer  for  any  company.  You  have 
to  go  in  and  decide  what  is  best  for 
that  company."  he  says. 

Depositing  rr  at  Bank  One 

Chicago-based  Bank  One  has  taken  a 
considerably  different  approach  to 
managing  its  IT  operations.  In  1998,  U 
signed  a  six-year.  $1.4  bilUon  contract 
with  AT&T  Solutions  to  manage  the 
bank's  voice  and  data  networks  and 
build  an  IP-based  networking  platform. 

As  part  of  that  agreement,  the  bank 
also  inked  a  seven-year.  $420  million 
pact  with  IBM  to  manage  most  of  its 
data  center  operations,  including  help 
desk  support.  At  the  time.  Bank  One. 
then  called  Banc  One.  was  in  the  proc¬ 
ess  of  merging  with  First  Chicago 
NBD  Corp. 

Since  then,  a  lot  more  than  the  name 


Savvy 

Tips 

•  An  outsaurdng  moM  riMds 
•fhetivt  dMcks  and  bakncM. 

GM  compiles  report  cants  tor  an 
ttie  vendors  it  works  with,  grad¬ 
ing  them  in  20  areas. 

•  CompefHionli  hay.  Using 
mulMa  vendors  is  critical  to 
motivating  them  to  strive  tor 
quality  and  keep  costs  down 
■  Dont  outamirGa  control  of 
your  company's  ff  aichitediae 
or  business  processes. 


■  Male  sure  that  there's  a 
strong  business  case  tor  out- 
sourcinQ  specitic  IT  functions. 

a  Managamanl  controls - 

including  protect  tracking  and 
maragernent  systems  -  are  keys 
to  success. 


■  One  outsourcing  modsi  wont 
work  tor  every  company. 


has  changed.  The  bank  brought  in  a 
new  CEO.  Jamie  Dimon.  a  lecb-sawy 
veteran  of  Citigroup  Inc^  and  CIO 
Austin  Adams,  the  former  CIO  at  First 
Union  Corp.  in  Chariotte,  N.C  The 
bank  also  negotiated  to  end  its  original 
contracts  with  AT&T  Solutioos  and 
IBM  before  they  were  due  to  expire. 


Today.  Bank  One  is  intent  on  main¬ 
taining  a  ratio  of  90%  in-house  IT  staff 
and  10%  contractors,  most  of  whom 
are  application  developers.  Compare 
that  with  a  70%-to-30%  ratio  just  two 
years  aga  The  key  driver  behind  the 
change  is  the  dramatic  shift  in  the  IT 
labor  market  siiKe  the  go-go  days  of 
the  dot-com  craze,  when  Bank  One 
was  having  trouble  recruiting  skilled 
IT  workers. 

"If  we  would  have  approached  (IT 
and  telecom  workers]  about  working 
for  a  bank  four  years  ago.  they  would 
have  laughed  at  us."  says  Adams,  who 
in  March  2001  joined  the  bank,  which 
has  $277  billion  in  assets.  The  world 
has  changed  a  lot  in  the  last 
three  or  four  years.  We've 
been  able  to  attract  a  lot  of 
technology  talent  from 
firms  that  have  been  chal¬ 
lenged  over  the  last  couple 
of  years." 

One  of  the  key  accom¬ 
plishments  under  the  insourced  IT 
model  was  a  $500  million  system  con¬ 
version  project  that  put  all  of  the 
bank's  transaction-related  systems,  in¬ 
cluding  deposit,  loan  and  treasury  sys¬ 
tems.  on  a  single  platform.  The  project 
started  in  2001  and  was  completed  in 
four  stages,  wrapping  up  in  November 
2002.  The  bank  expects  the  conver¬ 
sions  to  help  it  cut  $200  million  in  an¬ 
nual  operating  costs,  improve  cus¬ 
tomer  service  and  give  it  the  ability  to 
more  quickly  implement  new  products 
and  services. 

Adams  insists  the  decision  to  re¬ 
scind  the  outsourcing  agreements  with 
IBM  and  AT&T  Solutions  last  year 
wasn't  a  result  of  dissatisfaction  with 


either  vendor.  In  tact,  the  bank  still 
does  business  with  both,  he  says. 

"It's  not  an  issue  with  an  entity;  it’s 
philosophical  about  bow  we  want  to 
do  business."  says  Adams.  "We  feel 
strongly  that  technology  is  a  key  part 
of  our  company,  and  our  ability  to 
drive  that  is  key  and  something  that  we 
want  to  more  directly  control." 

It  also  has  to  do  with  containing 
costs.  Adams  says  the  business  case  for 
outsourcing  those  IT  and  networking 
functions  no  longer  exists  for  Bank 
One.  For  instance,  he  notes  that  the  in¬ 
cremental  cost  for  a  company  its  sire 
to  buy  hardware,  software  and  services 
directly  from  manufocturers  and  ser¬ 
vice  vendors  "is  significant¬ 
ly  lower"  than  the  premi¬ 
ums  it  would  have  to  pay  an 
outsourcer  to  provide  those 
resources. 

Adams  acknow'ledges 
that  there's  a  lot  of  diver¬ 
gence  aroottg  CIOs  over 
outsourcing.  In  Bank  One's  case,  he 
says,  "we  have  a  CEO  who's  very  tech¬ 
nology-literate  and  very  supportive  of 
us  and  our  ability  to  manage  this 
space."  That  helps  explain  why  Bank 
One  has  recruited  1;800  IT  profession¬ 
als  during  the  past  17  months,  bringing 
its  IT  staff  to  4,000  people. 

Although  Adams  and  Bank  One  re¬ 
main  committed  to  insourcing,  be 
wouldn't  rule  out  outsourcing  some  of 
its  IT  functions  under  the  right  circum- 
stancev  "I  wouldn't  bury  my  head  in  the 
sand  if  there  was  a  better  value  proposi- 
tioQ.*  be  says,  "h  isn't  a  philosophy  em¬ 
bedded  in  stubbornness  but  more  about 
the  envirooinent  and  the  business  case 
and  the  economic  conditions."  I 
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your  "myself-a-year-from- 
now"  hat  and  ask.  “What  will  I 
be  sorry  for  if  I  don’t  do?" 

Tdl  me  about  organizational  vul¬ 
nerabilities.  Those  have  to  do 
with  the  way  an  organization 
processes  information  and 
puts  together  a  picture  of 
what's  going  on.  The  key  prob¬ 
lem  is  a  tendency  to  silo  infor¬ 
mation.  Different  people  have 
different  pieces  of  the  puzzle, 
but  they  never  gel  pul  togeth¬ 
er  until  after  the  fact.  The  9/11 
disaster  is  an  example. 


ting  politics  get  in  the  way  of 
the  overall  organization,  you 
have  to  clamp  down  hard. 

You  recommend  some  practical 
"surprise-avoidance  initiatives. " 
the  first  bemg  to  ask  people  what 
dangers  they  see  brewing.  Isn't 
that  obvious?  Yes.  But  it's  sur¬ 
prising  how  seldom  people  do 
it.  and  it's  not  obvious  how  you 
go  about  doing  it.  You  need  to 
get  the  right  group  and  get 
them  to  work  through  an  exer¬ 
cise,  and  that's  not  easy  to  do. 


Here’s  how  to  spot  IT 
disasters  in  the  making 


'“You’re  ne\’er  too 
old  to  be  sur¬ 
prised."  That  was 
the  response  of 
then-Chairman  Jack  Welch 
when  the  European  Commis¬ 
sion  vetoed  (ienerai  Electric 
Co.'s  proposed  S42  billion  ac¬ 
quisition  of  Honeywell  Inc.  in 
2001.  But  Michael  D.  Watitins.  an 
associate  professor  of  business 
administrarion  at  Harvard 
Business  School,  argues  that 
Welch  had  no  business  beirtg 
surprised.  In  an  article  in  (his 
mnmh’s  issue  o/ Harvard  Busi¬ 
ness  Review,  Watkins  and  co¬ 
author  Max  H.  Bazerman  posit 
that  the  insrirurionai  blind 
spots  that  scuttled  Welch's  deal 
are  common  throughout  busi¬ 
ness  and  government.  Watkins 
told  Kathleen  Melymuka  how 
those  same /Jaws  can  blindside 
an  IT  manager  to  disasters  he 
should  have  seen  comirtg. 

Mhat's  the  deference  between  a 
true  surprise  and  a  problem  that 
couU  have  bean  predicted?  There 
arv  many  surprises  that  are 
bolts  from  the  blue  and  can't 
possibly  have  been  predicted. 
But  if  you  ask  senior  managers 
in  aU  kinds  of  companies 
whether  there  are  problems 
they  know  about  that  probably 
are  going  to  get  worse  and 
have  the  potential  to  flash  into 
mafor  disa.sters.  the  answer  al¬ 
most  invariably  is  yes.  Should 
a  reasonable  leader  have  rec¬ 
ognized.  prioritized  and  mobi¬ 
lized  again-st  the  problem?  If 
the  answer  is  no.  then  hold 


them  blameless:  but  many 
problems  can  be  ideniined 
and  dealt  with. 

Ybu  found  three  common  causes 
of  failure  that  can  help  managers 
avoid  predictabie  surprises.  What 
are  Ihey?  The  causes  are  psy¬ 
chological.  organizational  and 
political.  Psychological  vulner¬ 
abilities  are  flaws  in  the  way 
people  interpret  information 
and  make  decisions.  There's  a 
well-understood  tendency,  for 
example,  to  exist  in  a  state  of 
denial,  to  stick  with  the  status 
iquo  because  it's  comfortable  or 
because  you  think  that  some¬ 
thing  with  a  very  low  probabil¬ 
ity  is  never  going  to  happen. 

Can  you  give  an  example?  The 
Slammer  worm.  This  was  a 
well-recognized  vulnerability 


in  systems.  The  patch  had 
been  available  forever.  But  ap¬ 
parently  many  IT  mangers  did 
not  do  what  was  necessary  to 
deal  with  it.  It  was  an  entirely 
predicabic  surprise. 

As  an  IT  manager,  how  would  I  rec¬ 
ognize  psychological  bias  in  my  IT 
department?  People  tend  to 
harbor  illusions  that  things  are 
better  than  they  arc;  "We’ll  get 
by."  It  can  become  a  group  ra¬ 
tionalization.  Watch  out  when 
you  hear  people  say,  “We  think 
it’s  going  to  be  OK.” 

If  I  hear  that,  what  do  I  do  about  it? 

Push  back  hard:  What  if  it  isn’t 
OK?  Test  the  assumptions 
people  are  making.  Do  they 
hold  up?  What  have  they  done 
to  test  them?  Make  sure 
they’re  not  giving  undue 
weight  to  evidence  that  sup- 
pH)rts  their  preconceptions. 
Discover  what’s  beginning  to 
happen  that,  if  left  unchecked, 
will  be  a  big  problem.  Take 
preventative  action.  Put  on 


What  can  I  do  about  organizational 
vulnerabilities?  You  need  a 
mechanism  for  sharing  infor¬ 
mation.  Sometimes,  it  requires 
a  cross-functional  team  put  in 
place  to  look  at  emerging  is¬ 
sues  and  trends.  The  best 
antidote  is  a  leader  forcing  a 
certain  kind  of  information 
integration  that  doesn't  nor¬ 
mally  happen. 

And  what  about  poUtical  vutnera- 
biUties?  Political  issues  have  to 
do  with  the  ability  of  focused, 
dedicated  special  interests  to 
advance  their  causes  or  pre¬ 
vent  action  at  the  expense 
ofbroader  interests.  In  IT.  it 
could  be  some  group  absolute¬ 
ly  dedicated  and  focused  on 
preventing  having  some  lega¬ 
cy  system  taken  away.  They 
could  be  concealing  informa¬ 
tion  to  protect  a  piece  of  over¬ 
all  architecture  that  is  ripe  for 
disaster.  They’re  not  going  to 
let  you  touch  their  baby  till 
something  blows  up. 

How  do  you  recognize  that?  Any 
time  you  have  a  fiefdom.  you 
get  into  this.  People  are  willing 
to  suboptimize  the  whole  in  re¬ 
turn  for  a  legacy  s>'stcm  getting 
protected  too  loi^  They  can 
actually  prevent  implementa¬ 
tion  of  surprise-avoidance. 

What  can  I  do?  Look  hard  at  in¬ 
centives,  and  figure  out  how 
to  alter  them  so  people  have 
more  of  a  reason  to  cooperate. 
People  often  feci  if  they  don't 
protect  what  they're  working 
on,  their  own  performance  will 
suffer.  You  have  to  convince 
people  to  took  more  broadly, 
and  you  have  to  punish  em¬ 
pire-building.  If  people  are  lei- 


Why  not?  Really  focusing  on 
problem-avoidance  means  tak¬ 
ing  time  away  from  productiv¬ 
ity.  It's  hard  to  carve  out  time 
to  engage  in  that.  People  see  it 
as  a  luxury  they  can’t  afford 
right  up  to  the  point  where 
they're  spending  24/7  dealing 
with  some  disaster  that  was 
foreseeable. 

Ortce  you've  IdentHied  surprises  in 
the  making,  how  do  you  prioritize 
there?  You  array  the  threats 
and  look  at  (their]  likelihood 
and  costs  and  multiply  those. 
Sometimes,  that  doesn’t  catch 
very-low-likelihood  but  high- 
cost  threats,  so  it  gets  back  to 
incentives.  You  need  to  create 
a  structure  where  others  see  it 
as  in  their  interest  to  attack 
these  threats.  Put  people  on 
notice  that  if  they  fail  to  pre¬ 
vent  a  preventable  problem, 
they'll  be  held  culpable. 

Why  is  coaltion-building  importani 
to  confront  throats  effactivoly? 
Unless  you’ve  got  full  author¬ 
ity,  which  never  happens, 
you're  in  the  world  of  coali¬ 
tion-building.  As  an  IT  mann¬ 
er.  if  you  see  an  emerging 
problem  and  you  also  see  or¬ 
ganizational  resistance  to 
tackling  it.  you’ve  got  to  find 
the  pocket  of  people  wbo 
agree  with  you.  Ask  your  cus¬ 
tomers  what  would  happen  if 
XYZ  were  to  occur.  Build  mo¬ 
mentum  around  an  initiative 
to  tackle  the  problem.  I 


Melymuka  is  a  Computerworid 
confriburing  writer.  Contact  her 
at  kmelymuka@earfhljnk.net. 
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Here’s  how  to  spot  IT 
disasters  in  the  making 


“You're  f»ever  too 
otd  to  be  sur¬ 
prised."  That  was 
the  response  of 
then-Ouurman  Jack  Welch 
when  the  Eurx^ean  Commis¬ 
sion  vetoed  General  Electric 
Co.'ls  proposed  $42  billion  ac¬ 
quisition  Honeywell  Inc.  in 
2001.  But  llidMaiO.¥talldns.  an 
associate  processor  of  business 
administration  o(  Harvard 
Business  School.  a;:gues  that 
tVeich  hod  no  business  being 
surprised  In  an  article  in  this 
month's  issue  of  Harvard  Busi¬ 
ness  Review.  Waifctns  and  co¬ 
author  Max  H.  Bazerman  posit 
that  the  institutional  blind 
spots  that  scuttled  Welch’s  deal 
are  common  throughout  busi¬ 
ness  and  government.  Watkins 
told  Kathleen  Melymuka  how 
those  same  flaws  can  blindside 
an  TT  manager  to  disasters  he 
should  have  seen  coming. 

Whif t  i»  dHaranca  batwean  • 
ftvt  napriaa  ad  ■  priMmi  that 
oauM  haaa  baan  pradMad?  There 
are  many  surprises  that  are 
bolts  from  the  blue  and  can’t 
possibly  have  been  predicted. 
But  if  you  ash  senior  managers 
in  an  kinds  of  companies 
whether  there  are  problems 
they  know  about  t^t  probably 
are  going  to  get  worse  and.... 
have  the  potential  to  flash  into 
major  disasters,  the  answer  al¬ 
most  invariably  is  yes.  Should 
a  reasonable  l^er  have  rec¬ 
ognized.  prioritized  and  mobi- 
against  the  problem.’  If 
the  answer  is  no.  then  hold 


them  blameless;  but  many 
problems  can  be  identified 
and  dealt  with. 

¥w  found  three  conwNon  causes 
of  foiure  that  can  help  managers 
avoid  pradctabla  swprfoss.  Wfhei 
He  thetf?  The  causes  are  psy¬ 
chological.  organizational  and 
political  Psychological  vulner¬ 
abilities  are  flaws  in  the  way 
people  interpret  information 
and  make  decisions.  There’s  a 
well-understood  tendency,  for 
example,  to  exist  in  a  state  of 
denial,  to  stick  with  the  status 
quo  because  it's  comibrtabie  or 
because  you  think  that  some- 
thif^  with  a  very  low  probabil¬ 
ity  is  never  going  to  happen. 

Can  you  give  an  eiimpfo?  The 
Slammer  worm.  This  was  a 
well-recc^nized  vulnerability 


in  systems.  The  patch  had 
been  available  forever.  But  ap¬ 
parently  many  IT  mangers  did 
not  do  what  was  necessary  to 
deal  with  it  It  was  an  entirely 
predicable  surprise. 

As  n  IT  managsr.  how  would  I  rec- 
ognto  psychofogical  bias  in  my  IT 
dopartment?  People  tend  to 
harbor  illusions  that  things  are 
better  than  they  are:  '“We'll  get 
by.”  It  can  become  a  group  ra¬ 
tionalization.  Watch  out  when 
you  bear  people  say,  ““We  think 
it’s  going  to  be  OK.” 

M I  hear  toi.  what  do  I  do  about  it? 

Push  back  hard:  What  if  it  isn’t 
OK?  Test  the  assumptions 
people  are  making.  Do  they 
bold  up?  What  have  they  done 
to  test  them?  Make  sure 
they’re  not  giving  undue 
wei^t  to  evidence  that  sup¬ 
ports  their  preconceptions. 
Discover  what’s  beginniag  to 
happen  that,  if  left  unchecked, 
will  be  a  big  problem.  Take 
preventative  action.  Put  on 


your  “myself-a-year-from- 
now”  hat  and  ask,  “What  will  1 
be  sorry  for  if  I  don’t  do?" 

Ten  me  about  organization^  vul- 
norabHNioa.  Those  have  to  do 
with  the  way  an  organization 
processes  information  and 
puls  together  a  picture  of 
what’s  going  on.  The  key  prob¬ 
lem  is  a  tendency  to  silo  infor¬ 
mation.  Different  people  have 
different  pieces  of  the  puzzle, 
but  they  never  get  put  togeth¬ 
er  until  after  the  f^t.  The  9/11 
disaster  is  an  example. 

What  can  I  do  about  organizabonal 
vulnarabSties?  You  need  a 
mechanism  for  sharing  infor¬ 
mation.  Sometimes,  it  requires 
a  cross-functional  team  put  in 
place  to  look  at  emerging  is¬ 
sues  and  trends.  The  best 
antidote  is  a  leader  forcing  a 
certain  kind  of  information 
integration  that  doesn’t  nor¬ 
mally  happea 

And  wbat  about  poibcal  vufoora- 
MRfos?  Political  issues  have  to 
do  with  the  ability  of  focused, 
dedicated  special  interests  to 
advance  their  causes  or  pre¬ 
vent  action  at  the  expense 
of  broader  interests.  In  IT.  it 
could  be  some  group  absolute¬ 
ly  dedicated  and  focused  on 
preventing  having  some  lega¬ 
cy  system  taken  away.  They 
could  be  concealing  informa¬ 
tion  to  protect  a  piece  of  over¬ 
all  architecture  that  is  ripe  for 
disaster.  They’re  not  going  to 
let  you  touch  their  baby  till 
something  blows  up. 

How  do  you  racogniza  that?  Any 
tune  you  have  a  flefdom,  you 
get  into  this.  People  are  willing 
to  suboptimize  the  v^tole  in  re¬ 
turn  for  a  legacy  system  getting 
protected  too  long.  They  can 
actually  prevent  implementa¬ 
tion  of  surprise-avoidance. 

What  cat  I  do?  Loede  hard  at  in¬ 
centives,  and  figure  out  how 
to  alter  them  so  people  have 
more  of  a  reason  to  cooperate. 
People  often  feel  if  they  don’t 
protect  what  they’re  working 
oa  their  own  performance  will 
suffer.  You  have  to  convince 
people  to  look  more  broadly, 
and  you  have  to  punish  em¬ 
pire-building.  If  people  are  let¬ 


ting  politics  get  in  the  way  of 
the  overall  organizatioa  you 
have  to  clamp  down  hard. 

¥au  recoraroand  aonw  practical 
"aurprforavDidarica  Mttadm." 
the  Aral  being  to  Mil  peopfo  what 
dangare  they  see  brewing,  bnl 
that  obvieus?  Yes.  But  it’s  sur- 
prisii^  how  seldom  people  do 
it.  and  it’s  not  obvious  bow  you 
go  about  doing  it.  You  need  to 
get  the  right  group  and  get 
them  to  work  through  an  exer¬ 
cise,  and  that’s  not  easy  to  do. 

Why  not?  Really  focusing  on 
problem-avoidance  means  tak¬ 
ing  time  away  from  productiv¬ 
ity.  It’s  hard  to  carve  out  time 
to  engage  in  that  People  sec  it 
as  a  luxury  they  can’t  afford 
right  up  to  the  point  where 
they're  spending  24/7  dealing 
with  some  disaster  that  was 
foreseeable. 

Once  you've  IdontWfod  surprfoes  in 
tho  mofong.  how  do  you  pfforiteo 
there?  You  amy  the  threats 
and  look  at  [tbeirl  likelihood 
and  costs  and  multiply  those. 
Sometimes,  that  doesn’t  catch 
very-low-ltkelihood  but  hi^- 
cost  threats,  so  it  gets  back  to 
incentives.  You  need  to  create 
a  structure  where  others  see  it 
as  in  their  interest  to  attack 
these  threats.  Put  people  on 
notice  that  if  they  fail  to  pre¬ 
vent  a  preventable  problem, 
they’ll  be  held  culpable. 

Why  to  coaMfofYdiuMno  bnportant 
to  coniront  Ihreols  offodivoly? 

Unless  you've  got  ftiU  author¬ 
ity.  which  never  happens, 
you're  in  the  world  of  coali¬ 
tion-building-  As  an  IT  manag¬ 
er.  if  you  see  an  emeiiging 
problem  and  you  also  see  or¬ 
ganizational  resistance  to 
tackling  it,  you’ve  got  to  find 
the  pocket  of  people  who 
agree  with  you.  Ask  your  cus¬ 
tomers  what  would  happen  if 
XYZ  were  to  occur.  Build  mo¬ 
mentum  around  an  initiative 
to  tackle  the  problem.  I 


Melymuka  is  a  Computerworld 
conrriiMiring  wrifer.  Contact  her 
at  kinelymuka@earthlink.net. 
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NEW  DB2.  A  SELF-STARTER 


SELF-HEALING 


SORT  OF  WAY. 


What  keeps  databases  in  game  shape?  DB2  v8,  the  most  advanced  setf-managing 
database  across  Linux?  UNtX’and  Windows?  Turbocharged  querying  and  tuning 
saves  time,  resources  and  pushes  productivity  skyward.  Ai>d,  no  matter  what  form 
your  data  is  in,  it  lets  you  access,  analyze  and  manage  it.  DB2.  It's  part  of  the  software 
team  that  includes  Lotus?Tivoli*and  WebSpherrf Learn  more  at  fciii.coiii/db2/new 
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us  Airways  Keeps  EDS 

US  Airways  Group  Inc.  has  accoptod  a  ' 
revised  outsourcing  contract  with  Qec* 
Ironic  Data  Systems  Corp.  that  if  had 
thre^ned  to  caned.  Terms  of  the  new 
deal  weren't  disclosed.  Under  a  25* 
year  contract  signed  in  late  1997. 

EDS  provides  the  airline  with  data 
processing  and  telecommunications 
services  lor  reservations,  bcketing. 
baggage  tracking,  and  flight  and  data  i 
security.  The  original  agreement  was 
valued  at  about  S200  milion  per  year. 

US  Airways,  which  has  been  under 
Chapter  11  bankruptcy  protection  since 
August  had  accu^  EOS  of  fadirtg  to 
honor  the  contract's  “most  favored 
customer'*  clause  by  providmg  better  I 
terms  to  American  Airlines  Inc.  I 


IT  Spending  Sluggish 

According  to  rocont  Surrey  results  from 
Forrester  Research  Inc.,  only  27%  of 
Horth  American  FT  dectsiofr'makers 
said  they  wfll  increase  their  staffs  this 
year.  And  although  35%  said  diey  wdt 
increase  FT  spendng  by  an  average  of 
1.9%  in  2003  -  a  decline  from  23% 
in  2002 '  the  amount  of  FT  being  out- 
sourced  wd  inch  up  from  13%  last 
year  to  16%  for  2003. 
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Look  Before 
Leap  to  Outsource 


Most  major  corporations  are 
considering  outsourcing  everything 
from  the  corporate  cafeteria  to  IT  and 
beyond.  Outsourcing  is  often  touted 
as  an  easy  way  to  achieve  more  func¬ 
tionality  for  less  money,  with  less  aggravation. 


But  how  do  these  deals 
actually  turn  out?  Cus¬ 
tomer-satisfaction  re¬ 
searchers  at  a  major  IT 
outsourcer  report  that 
most  outsourcing  relation¬ 
ships  deliver  Icss-than- 
expected  results,  often 
leaving  both  sides  disillu¬ 
sioned  by  the  end  of  the 
first  year. 

if  you  want  to  pull  the 
plug  on  your  outsourcing 
deal,  be  aware  (hat  doing 
so  is  difficult  and  expen¬ 
sive  at  best  —  outsourcing 
is  primarily  a  one-way 
street.  You  can  avoid  many 
outsourcing  pitfalls  by  do¬ 
ing  your  homework  before 
you  negotiate  a  contract: 

1  Define  explicit  outsoiwcing  boundaries. 
Many  outsourcers  will  try  to  persuade 
you  to  outsource  most  or  all  of  IT. 

Must  corporations  arc  willing  to  out¬ 
source  commodity  functions,  but  not 
the  areas  that  give  the  corporation  its 
competitive  advantage.  iXin’t  allow 
yourself  to  be  pushed  into  outsourc¬ 
ing  more  than  you  have  determined  Is 
appropriate.  And  never  outsource  one 
joeev  II  :nime  «  mu-ster  plan  | 

2.  Understand  your  mofnes  for  outsourcing. 
Belore  .-niering  into  -in  .Kitsourcing  ' 
agreement,  njihiesslv  assess  vour  mo-  . 
tives.  Are  you  primarily  seeking  cut 
costs,  improve  service  or  allow  man¬ 
agement  to  focus  on  the  business,'  Or  | 
has  your  company  simply  decided  that  i 
IT  isn’t  a  core  comptetency  and  just 
wants  to  get  rid  of  the  aggravation?  I 
Being  clear  about  your  reasons  will  I 


allow  a  fair  evaluation  of 
the  outsourcing  deal  after 
the  first  year. 

3.  Carefully  analyze  and  un¬ 
derstand  your  cost  stnicture. 
Identify  and  remove  ineffi¬ 
ciencies  before  outsourc¬ 
ing;  otherwise,  only  your 
outsourcer  will  benefit. 
Evaluate  your  cost  struc¬ 
ture  in  sufficient  detail  to 
have  leverage  over  your 
outsourcer.  Beware  of  any 
outsourcer  that  offers  to 
cut  your  costs  without 
doing  any  analysis! 

And  if  your  outsourcer 
uses  the  new  "utility"  pric¬ 
ing  for  on-demand  com¬ 
puting.  make  sure  you 
understand  all  the  implications  — 
there's  not  a  lot  of  industry  experi¬ 
ence  with  it  yet. 

4.  Analyze  the  total  cost  of  outsourcing.  Be¬ 
fore  you  weigh  the  price  of  outsourc¬ 
ing  against  your  current  costs,  start 
with  the  outsourcer's  bid.  then  add 
the  costs  of  preparing  and  evaluating 
a  request  for  proposals,  the  migra- 
tion/swiiching  costs  and  the  cost  of 
managing  the  outsourcer. 

5.  Assess  the  hidden  effects  of  outsourcing. 

K  luisoAjrring  imposes  discipline  on 
voui  otganizaiioii.  Shifts  in  .irchitcc 
luml  direction  can  be  more  dilficuH. 
unplanned  changes  necome  expen¬ 
sive  and  may  not  occur  in  the  time 
frame  you  desire.  Adapting  to  the  rig¬ 
orous  processes  required  by  an  out¬ 
sourcer  may  be  di^icult  in  some 
corporate  cultures. 

6.  Closely  examine  security  and  privacy. 


TTie  new  cyberdisclosure  laws  will 
essentially  make  security'  breaches  at 
your  outsourcer  equivalent  to  securi¬ 
ty  breaches  at  your  own  company. 

You  will  be  equally  responsible 
whether  your  customers'  data  is  com¬ 
promised.  stolen  or  hacked  at  your 
site  or  the  outsourcer's  site.  Your  ex¬ 
posure  and  liabilities  arc  significantly 
multiplied  —  investigate  carefully. 

7.  Communicate  honestly  with  your  staff. 
Outsourcing  generates  apprehension, 
and  rumors  will  fly.  Unless  you  have  a 
compelling  message  and  communi¬ 
cate  candidly,  your  best  people  may 
walk  out  the  door. 

B.  Design  a  viable  exit  strategy.  Supplier 
failures  arc  occurring  at  an  alarming 
rate.  Explore  options  and  fallback  po¬ 
sitions  before  you  need  them. 

9.  Make  sure  initial  stakaholdefs  on  both 
sides  remain  accountable.  Many  outsourc¬ 
ing  arrangements  fail  because  the 
original  stakeholders  disappear  and 
their  replacements  are  often  far  less 
committed  to  the  deal. 

10.  Consider  offshore  options.  Advances 
in  communications  technology  have 
made  offshore  outsourcing  increas¬ 
ingly  viable.  Costs  can  be  significaniiy 
lower  But  understand  the  impact  of 
international  travel,  language  difficul¬ 
ties  and  time-zone  differences  on 
your  business. 

TTie  foundation  of  successful  out¬ 
sourcing  is  clearly  understanding 
what  you  are  outsourcing  and  why. 
Outsourcing  can  be  an  excellent  solu¬ 
tion.  but  it's  not  a  panacea.  Don't 
follow  'he  outsourcing  lemmings 
blindiv  over* he  '•lift*.  Make  ••ure  you 
iullv  iindersiand  whai.  why.  when 
wticre.  who  —  and  now  much.  ► 


OFFSHORE  OUTSOUKING 

Fd  read  about  the  debate  surrounding  ottsbore 
nutsouremg.  visii  out  Web  site 
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Want  our  opinion?  For  more  coAjmrts  and  links 
lo  our  archives,  go  lo' 

O  wwwxomputmioridxain/opjnioiis 
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us  Akways  Keeps  EDS 

US  AInMys  arav  Ik.  hB  acotpM  • 
ravlMdoiiKudngGenlndwMElK- 
tranie  Otfa  Syitoms  Corp.  tel  I  hid 
direilMMi  to  caicaL  llvm  of  te  mw 
dte«Nnn1dtaclooad.Untei2&- 
yMT  GoftoKt  HgMd  to  ton  1997. 

EDS  protodM  te  aMM  wKh  data 
pncMtonQ  and  totocoMMnictotons 


hagpKi  haddns.  and  11^  and  data 
aaoBtir.  11m  original  agnamanl  was 
wiuad  al  ahad  $200  mWon  par  yaar. 
US  MnHys.  mMcIi  IMO  baan  undar 


AlipML  hid  aceuaad  BIS  of  Mtog  to 
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HO  by  praridtog  hollar 


IT  Spending  Sluggish 

Aceerdtog  to  racanl  awKy  iwdto  from 
Forioalar  ftoaaardi  toe.,  Miy  27%  of 
Worth  tearfcan  IT  dKiaton  mahan 
said  tey  «■  toaoaH  Iheir  ftalb  this 
yoar.  And  dtetei  36%  add  tey  «« 
tocnnw  rr  K*teiO  by  an  avaragi  of 
U%  to  2003  -  a  dodno  from  2J% 
to2002’teHnounlolfTboingte- 
flomad  mM  todi  K  from  tod 
yoar  to  16%  far  2003. 


fegrffOBaaotiidroB 


BART  PERKINS 


Look  Before 
Leap  to  Outsource 


Most  major  corporations  are 
considering  outsourcing  everything 
from  the  corporate  cafeteria  to  IT  and 
beyond.  Outsourcing  is  often  touted 
as  an  easy  way  to  achieve  more  func¬ 
tionality  for  less  money,  with  less  aggravation. 


But  how  do  these  deab 
actually  turn  out?  Cus¬ 
tomer-satisfaction  re¬ 
searchers  at  a  maior  IT 
outsourcer  report  that 
tnost  outsourcing  relation¬ 
ships  deliver  less-than- 
expected  results,  often 
leaving  both  sides  disillu¬ 
sioned  by  the  end  of  the 
Hrstyear. 

If  you  want  to  pull  the 
plug  on  your  outsourcing 
deal,  be  aware  that  doing 
so  is  difficult  and  expen¬ 
sive  at  best  —  outsourcing 
is  primarily  a  one-way 
street.  You  can  avoid  many 
outsourcing  pitf^ls  by  do¬ 
ing  your  homeworfr  before 
you  negotiate  a  contract: 

1  Odim  cdAci  oubourcing  baundaries. 
Many  outsourcers  will  try  to  persuade 
you  to  outsource  most  or  all  of  IT. 

Most  corporations  are  wUlii^  to  out¬ 
source  commodity  functions,  but  not 
the  areas  that  give  the  corporation  its 
competitive  advantage.  Don’t  allow 
yourself  to  be  pushed  into  outsourc¬ 
ing  more  than  you  have  determined  is 
appropriate.  And  never  outsource  one 
piece  at  a  time  without  a  master  plan. 

Z  UndBTStofd  ymr  tnollws  for  outsourcing. 
Before  entering  into  an  outsourcing 
agreement,  ruthlessly  assess  your  mo¬ 
tives.  Are  you  primarily  seeking  to  cut  { 
costs,  improve  service  or  allow  man¬ 
agement  to  focus  on  the  business?  Or 
has  your  company  simply  decided  that 
IT  isn’t  a  core  competency  and  just 
wants  to  get  rid  of  the  aggravation? 
Being  clear  about  your  reasons  will 


allow  a  fair  evaluation  of 
the  outsourcing  deal  after 
the  first  year. 

3.  Canfidy  anslya  and  un- 


Identify  and  remove  ineffi¬ 
ciencies  before  outsourc¬ 
ing:  otherwise,  only  your 
outsourcer  will  benefit 
Evaluate  your  cost  struc¬ 
ture  in  sufficient  detail  to 
have  leverage  over  your 
outsourcer.  Beware  of  any 
outsourcer  that  offers  to 
cut  your  costs  x%  without 
doing  any  analysis! 

And  if  your  outsourcer 
uses  the  new  “utility”  pric¬ 
ing  for  oD-demand  com¬ 
puting.  make  sure  you 
understand  all  the  implications  — 
there’s  not  a  lot  of  industry  experi¬ 
ence  with  it  yet. 

4.  Anatyate  told  cod  of  outsourcing.  Be¬ 
fore  you  weigh  the  price  of  outsourc¬ 
ing  against  your  current  costs,  start 
with  the  outsourcer’s  bid.  then  add 
the  costs  of  preparing  and  evaluating 
a  request  for  proposals,  the  migra¬ 
tion/switching  costs  and  the  cost  of 
managing  the  outsourcer. 

5.  Asaoas  te  hiddan  effads  of  outoourdng. 
Outsourcing  imposes  discipline  on 
your  organization.  Shifts  in  architec¬ 
tural  direction  can  be  more  difficult. 
Unplanned  changes  become  expen¬ 
sive  and  may  not  occur  in  the  time 
frame  you  desire.  Adapting  to  the  rig¬ 
orous  processes  required  by  an  out¬ 
sourcer  may  be  difficult  in  some 
corporate  cultures. 

6.  Ctoaaly  Mandne  aactrty  Kd  priKcy. 


The  new  cyberdisclosure  laws  will 
essentially  make  security  breaches  at 
your  outsourcer  equivalent  to  securi¬ 
ty  breaches  at  your  own  company. 

You  will  be  equally  responsible 
whether  your  customers’  data  is  com¬ 
promised.  stolen  or  hacked  at  your 
site  or  the  outsourcer's  site.  Your  ex¬ 
posure  and  liabilities  are  significantly 
multiplied  —  Investigate  carefully. 

7.  Convnincate  honaady  «Hlh  your  slaff . 
Outsourcing  generates  apprehension, 
and  rumors  will  fly.  Unless  you  have  a 
compelling  message  and  communi¬ 
cate  candidly,  your  best  people  may 
walk  out  the  door. 

B.DBGfrKiariafaiaadtslratogy.  Supplier 
failtues  are  occurring  at  an  alarming 
rate.  Explore  options  and  fallback  po¬ 
sitions  before  you  need  them. 

9.  Maka  aura  toMto  ftteholdere  on  Inch 
sidM  remain  KGOunlafaie.  Many  outsourc¬ 
ing  arrangements  fail  because  the 
original  stakeholders  disappear  and 
their  replacements  are  often  far  less 
committed  to  the  deal. 

10.  Coraktor  oWshore  opdona.  Advances 
in  communications  technology  have 
made  offshore  outsourcing  increas¬ 
ingly  viable.  Costs  can  be  significantly 
lower.  But  understand  the  impact  of 
international  travel,  lai^niage  difficul¬ 
ties  and  time-zone  differences  on 
your  business. 

The  foundation  of  successful  out¬ 
sourcing  is  clearly  understanding 
what  you  are  outsourcing  and  why. 
Outsourcing  can  be  an  excellent  solu¬ 
tion.  but  it's  not  a  panacea.  Don’t 
follow  the  outsourcing  lemmings 
blindly  over  the  cliff.  Make  sure  you 
fully  understand  what,  why,  when, 
where,  who  —  and  how  much. » 

OFFSMKOinSOUiaM 
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Introducing  Lotus  Notes*/Domino^  6.  the  easiest  to  manage.  nx)St  cost-effective  j 
Notes/Domino  ever.  It  streamlines  administration,  frees  up  network  resources  and  ' 

slashes  downtime.  Storage  costs  can  fall  by  up  to  15%.  Notes/Domino  6  has  unsurpassed  bUSiflBSS  iS  thO  QBfn6.  PISy  tO  Win7 

power  ar>d  control  for  managing  thousarfos  of  users.  Lotus,  part  of  foe  software  team 
that  includes  WebSphereT  OB2*  and  TivoliT  Take  a  test-drive  at  ifeni.eoifi/lotus/win 
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mimstrator  at  Tessy  Plastics 
LLC  in  Lynchburg.  Va..  said  a 
lack  of  funding  has  forced  him 
to  buy  used  equipment  to  back 
up  his  systems.  ‘*We‘ve  imple¬ 
mented  a  used  tape  drive  on 
our  main  server  and  do  good 
backups,”  he  said.  "If  I  had  to 
purchase  the  stuff  new,  I 
couldn't  have  done  it. . . .  Right 
now.  money  is  tight.” 

And  Ervin  isn't  alone,  ac¬ 
cording  to  a  study  released 
last  week  by  Dataquest  Inc.  in 
San  Jose.  The  study.  “Invest¬ 
ment  Decisions:  Preparing  for 
Organizational  Disasters,” 
found  that  IT  managers  from 
205  companies  representiitg 
eight  vertical  industries  in  the 
U.5.  aren't  investing  appropri¬ 
ately  in  disaster  plans  because 
of  inadequate  budgets. 

“Budget  constraints  are 
forcing  an  average  of  40%  of 
respondents  to  rely  on  a  best 
guess  to  determine  potential 
risk  rather  than  obtaining  for¬ 
mal  assessments,  which  would 
be  too  costly.”  said  Tony 
Adams,  principal  analyst  at 
Dataquesf  s  IT  Services  group. 

“Preparation  is  key.  and 
without  adequate  investment 
for  protection  of  critical  sys¬ 
tems,  the  repercussions  of  dis¬ 
asters  will  lengthier  and 
more  costly."  be  said. 

A  security  manager  at  one 
of  the  nation's  largest  banks, 
who  spoke  on  condition  of 
anonymity,  said  the  sheer  size 
of  his  company  means  that  de¬ 
partments  report  to  various 
executives  and  require  differ¬ 


ent  levels  of  certification  by 
third-party  disaster  assess¬ 
ment  firms.  As  a  result,  ‘busi¬ 
ness  continuity  planning  is  as 
the  business  sees  fit.”  the  man¬ 
ager  said. 

Moreover,  it's  difficult  to 
show  the  return  on  investment 
from  hiring  third-party  firms 
to  certify  disaster  recovery 
processes  and  assess  risk,  be 
said.  “Companies  in  this  space 
came  off  as  if  they’re  looking 
for  big  dollars  to  tell  you  what 
you  already  know.  We  ail  see 


Continued  from  page  1 

States _ 

“TTiat's  pretty  significant.” 
Kane  said. 

McLean.  Va.'based  FSI.  a  re¬ 
search  firm  for  the  business- 
to-government  market,  said  IT 
spending  in  the  states  will 
reach  S40.7  bUUoo  in  the  next 
fiscal  year,  an  increase  of  less 
than  2%  over  this  year.  And  as 
they  continue  to  scrape  for  IT 
funding,  more  states  are  ap¬ 
pointing  enterprise  architects 
to  map  out  IT  and  business 
process  strategies. 

7\vo  years  ago,  only  two 
states  had  specifically  ap¬ 
pointed  enterprise  architects. 
Since  then,  the  number  has 
climbed  to  22.  said  Gerry 


the  best-praetke  picture  at  the 
end  of  the  tunneL  but  we 
choose  due  care  and  sound 
business  decision  processes  to 
get  to  that  end,”  be  said. 

In  any  case,  crisis  manage¬ 
ment  plans  have  been  imple¬ 
mented  at  53%  of  the  sites  that 
responded  to  the  Dataquest 
survey,  and  an  addition^  30% 
that  don't  already  have  plans 
are  considering  developing 
them,  according  to  the  study. 
But  17%  of  respondents  said 
that  they  don't  foresee  devel- 


Wethii^on,  Missouri's  CIO 
and  president  of  the  Lexing¬ 
ton,  Ky.-based  National  Asso¬ 
ciation  of  State  Chief  Informa¬ 
tion  Officers. 

Enterprise  architecture  is  a 
process  for  defining  IT  and 
business  process  principles 
and  standards.  It's  also  used 
by  federal  and  state  govern¬ 
ments  to  integrate  and  consol¬ 
idate  IT  infrastructures  that 
have  been  built  agency  by 
ageticy  in  a  stovepipe  frshioa 
without  coordin^ion. 

Wethington  said  his  state's 
use  of  enterprise  architecture 
planning  has  given  him  the 
means  to  set  common  stan¬ 
dards  and  battle  agencies  ac¬ 
customed  to  making  their  own 
IT  decisions.  “If  I  had  not  had 
that  chief  architect ...  1  would 


oping  any  such  plans. 

“It  could  be  merely  that 
clarity  about  the  aim  and  func¬ 
tion  of  crisis  management  is 
needed,”  according  to  the 
study.  “It  could  also  be  ex¬ 
plained  in  terms  of  the  IT  sys¬ 
tems  not  being  deemed  mis¬ 
sion-critical  in  importance.” 

In  fact,  only  10%  of  compa¬ 
nies  said  they  always  evaluate 
new  initiatives  in  terms  of 
business  continuity. 

Susan  Bradley,  a  security 
manager  at  Tamiyasu,  Smith, 
Horn  and  Braun  Accountancy 
Corp.,  an  accounting  firm  in 
Fresno.  Calif.,  said  the  small  to 
medium-size  business  com¬ 
munity  is  never  {^oacUve 
when  it  comes  to  ensuring 
business  continuity. 

"Wlc  don't  plan.  We  don't  as¬ 
sess.  We  don't  analyze.  We 
don't  lest  We  don't  plan  on  re¬ 
dundancy.”  Bradley  said.  The 
Dataquest  survey  indicates 
that  many  large  companies 
aren't  doing  much  better,  she 
added. 

Although  the  Dataquest 
study  focused  on  the  respons¬ 
es  and  plans  of  IT  managers. 
John  Keast,  chief  operating  of- 
Hcer  at  SEEC  Inc.,  a  Pitts¬ 
burgh  firm  that  develops  soft¬ 
ware  for  the  insurance  and  fl- 


have  bad  eight  to  12  different 
agencies  fighting  for  their 
turf”  he  said,  referring  to  a 
particular  help  desk  consoli¬ 
dation  proiect  ”1  can  over- 


H  We  don’t 
plan.  We 
don't  assess. 

We  don't  analyze. 
We  don't  test 

SUSAN  BNAOLEV.  SECURHY  MAN 
A6CR.  TAMnrASU  SMITH.  HORN  ANO 
BRAUN  ACCOUNTJUrv  CORP 


nance  industries,  said  that  al- 
thou^  the  CIO  designs  and 
implements  the  plan  and  like¬ 
ly  orchestrates  its  execution 
during  a  disaster,  the  ultimate 
responsibility  for  focusing  the 
appre^riate  resources  on  dis¬ 
aster  recovery  and  coolimiity 
of  operations  planning  rests 
with  the  CEO,  the  chief  oper¬ 
ating  officer  and  the  board  of 
directors. 

“Losing  data  that  affects 
business  operations  is  avoid¬ 
able  and  unacceptable.”  said 
Keast  “So  CEOs  and  COOs 
must  make  it  their  priority.”  I 
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come  TDrC”  Wethington  added. 

The  states  are  also  being 
pushed  into  using  enterprise 
architecture  by  the  Bush  ad¬ 
ministration.  which  wants  in- 
teroper^ility  with  state  sys¬ 
tems,  said  Howard  Stem,  se¬ 
nior  vice  president  of  FSL 

One  IT  manager  who  says 
she  has  solved  the  problem  of 
redundant  systems  coosoUda- 
doo  is  Cathy  MarasOlxary. 
CIO  of  Cook  County.  UL  The 
second-largest  county  in  the 
U.S..  Cook  County  centralized 
storage,  mainfiyir  and  net¬ 
work  support  for  ISO  agencies. 

“You're  not  duplicating 
cost.”  Maras-OXeary  said. 
Moreover,  she  added,  “e-com- 
merce  for  us  can  be  very  easy 
because  all  our  data  is  residing 
on  our  architecture.”  I 
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ministrstor  at  Tessy  Plastics 
LLC  in  Lynchburg,  Va..  said  a 
lack  of  funding  has  forced  him 
to  buy  used  equipment  to  back 
up  his  systems.  "We've  imple¬ 
mented  a  used  tape  drive  on 
our  main  server  and  do  good 
backups,"  he  said.  "If  I  had  to 
purchase  the  stuff  new,  I 
couldn't  have  done  it —  RigJit 
now.  money  is  tight." 

And  Ervin  isn't  alone,  ac¬ 
cording  to  a  study  released 
last  week  by  Dataquest  Inc.  in 
San  Jose.  The  study.  "Invest¬ 
ment  Decisions:  Preparing  for 
Organizational  Disasters," 
found  that  IT  managers  from 
205  companies  representing 
eight  vertical  industries  in  the 
U.S.  aren’t  investing  appropri¬ 
ately  in  disaster  plans  because 
of  inadequate  budgets. 

"Budget  constraints  are 
forcing  an  average  of  40%  of 
respondents  to  rely  on  a  best 
guess  to  determine  potential 
risk  rather  than  obtaining  for¬ 
mal  assessments,  which  would 
be  too  costly,"  said  Tony 
Adams,  principal  analj'st  at 
Dataquest’s  IT  Services  group. 

"Preparation  is  key.  and 
without  adequate  investment 
for  protection  of  critical  sys¬ 
tems,  the  repercussions  of  dis¬ 
asters  will  be  lengthier  and 
more  costly."  be  said. 

A  security  manager  at  one 
of  the  nation's  largest  banks, 
who  spoke  on  condition  of 
anonymity,  said  the  sheer  size 
of  his  company  means  that  de¬ 
partments  report  to  various 
executives  and  require  dififer- 
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Why  Disaster  Planning  Isn't  Funded 
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enl  levels  of  certification  by 
third-party  disaster  assess¬ 
ment  firms.  As  a  result,  "busi¬ 
ness  continuity  planning  is  as 
the  business  sees  fit."  the  man¬ 
ager  said. 

Moreover,  it’s  difficult  to 
show  the  return  on  investment 
from  hiring  third-party  firms 
to  certify  disaster  recovery 
processes  and  assess  risk,  he 
said.  "Companies  in  this  space 
came  off  as  if  they're  looking 
for  big  dollars  to  tell  you  what 
you  already  know.  We  all  see 


the  best-practice  picture  at  the 
end  of  the  tunnel,  but  wc 
choose  due  care  and  sound 
business  decision  processes  to 
get  to  that  end."  he  said. 

In  any  case,  crisis  manage¬ 
ment  plans  have  been  imple¬ 
mented  at  53%  of  the  sites  that 
responded  to  the  Dataquest 
survey,  and  an  additional  .30% 
that  don't  already  have  plans 
arc  considering  developing 
them,  according  to  the  study. 
But  17%  of  respondents  said 
that  the>’  don't  foresee  devel¬ 


oping  an>'  such  plans. 

"It  could  be  merely  that 
clarity  about  the  aim  and  func¬ 
tion  of  crisis  management  is 
needed."  according  to  the 
study.  "It  could  also  be  ex¬ 
plained  in  terms  of  the  IT  sys¬ 
tems  not  being  deemed  mis¬ 
sion-critical  in  imponancc." 

In  faa.  only  10%  of  compa¬ 
nies  said  they  always  evaluate 
new  initiatives  in  terms  of 
business  continuity. 

Susan  Bradley,  a  security 
manager  at  Tamiyasu,  Smith. 
Horn  and  Braun  Accountancy 
Coip.  an  accountir^  firm  in 
Fresno.  CaliK  said  the  small  to 
medium-size  business  com¬ 
munity’  is  never  proactive 
when  it  comes  to  ensuring 
business  continuity'. 

“We  don't  plan.  We  don't  as¬ 
sess.  Wc  don't  analyze.  We 
don’t  test.  We  don't  plan  on  re- 
dundancy,"  Bradley  said.  The 
Dataquest  survey  indicates 
that  many  large  companies 
aren't  doing  much  better,  she 
added- 

Although  the  Dataquest 
study  focused  on  the  respons¬ 
es  and  plans  of  IT  managers. 
|ohn  Kcast,  chief  operating  of¬ 
ficer  at  SEEC  Inc.,  a  Pitts¬ 
burgh  firm  that  develops  soft¬ 
ware  for  the  insurance  and  II- 


I  We  don’t 
plan.  We 
don’t  assess. 


We  don’t  analyze. 
We  don’t  test. 


SUSAN  BRADLEY.  SECURHV  MAt» 
ACER  TAMIVASU  SMITH  HORN  AND 
BRAUN  ACCOUNTACv  CORP 


nance  industries,  said  that  al¬ 
though  the  CIO  designs  and 
implements  the  plan  and  like¬ 
ly  orchestrates  its  execution 
during  a  disaster,  the  ultimate 
responsibility  for  focusing  the 
appropriate  rcstiurces  on  dis¬ 
aster  recovery  and  continuity 
of  operations  pbnning  rests 
with  the  CEO.  the  chief  oper¬ 
ating  officer  and  the  board  of 
directors. 

"Losing  data  that  affects 
business  operations  is  avoid¬ 
able  and  unacceptable."  said 
Keast.  “So  CEOs  and  COOs 
must  make  it  their  priority."  I 
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“That’s  pretty  significant." 
Kane  said. 

McLean,  Va.-based  FSI,  a  re¬ 
search  firm  for  the  business- 
to-govemment  market,  said  IT 
spending  in  the  states  will 
reach  $40.7  billion  in  the  next 
fiscal  year,  an  increase  of  less 
than  2%  over  this  year.  And  as 
they  continue  to  scrape  for  IT 
funding,  more  states  arc  ap¬ 
pointing  enterprise  architects 
to  map  out  IT  and  business 
process  strategies. 

Two  years  ago.  only  two 
states  had  specifically  ap¬ 
pointed  enterprise  architects. 
Since  then,  the  number  has 
climbed  to  22,  said  Gerry 


Wethington.  Missouri's  CIO 
and  president  of  the  Lexing¬ 
ton,  Ky.-ba.scd  National  Asso¬ 
ciation  of  State  Chief  Informa¬ 
tion  Officers. 

Enterprise  architecture  is  a 
process  for  defining  IT  and 
business  process  principles 
and  standards.  It’s  also  u.sed 
by  federal  and  state  govern¬ 
ments  to  integrate  and  consol¬ 
idate  IT  infrastructures  that 
have  been  built  agency  by 
agency  in  a  stovepipe  fashion, 
without  coordination. 

Wethington  said  his  state's 
use  of  enterprise  architecture 
planning  has  given  him  the 
means  to  set  common  stan¬ 
dards  and  battle  agencies  ac¬ 
customed  to  making  their  own 
IT  decisions.  "If  I  had  not  had 
that  chief  architect ...  I  would 


have  had  eight  to  12  diffenmt 
agencies  fighting  for  their 
turf,"  he  said,  referring  to  a 
particular  help  desk  consoli¬ 
dation  project.  “1  can  over- 

NoBonnza 


come  turf."  Wethington  added. 

The  states  arc  also  being 
pushed  into  using  enterprise 
architecture  by  the  Hush  ad¬ 
ministration.  which  wants  in¬ 
teroperability  with  stare  sys¬ 
tems,  said  Howard  Stem,  se¬ 
nior  vice  president  of  FSI. 

One  IT  manager  who  says 
she  has  solved  the  problem  of 
redundant  systems  consolida¬ 
tion  is  Cathy  Maras-O'Leary. 
CIO  of  Cook  County.  IIL  The 
second-largest  county  in  the 
U.S.,  Cook  County  centralized 
storage,  mainframe  and  net¬ 
work  support  for  150  agcDcic*. 

"You'a*  not  duplicating 
cost."  Maras-O'Leary  said. 
Moreover,  she  added,  “e-com¬ 
merce  for  us  can  be  very  easy 
because  all  our  data  is  residing 
on  our  architecture."  6 
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FRANK  HAYES  •  FRANKLY  SPEAKING 

Patch  It  Right  Now 

Has  your  sendmail  been  patched?  Are  you  sure? 

If  the  answer  is  no,  stop  reading  this  and  get  it  taken 
care  of.  Not  later  today.  Not  later  this  minute.  You’re 
already  a  week  behind,  and  hackers  have  had  exploit 
code  working  since  last  Tuesday.  There  are  no  work¬ 
arounds.  Your  firewall  won’t  protect  you.  Your  virus  scanner  won’t 
protect  you.  A  properly  patched  sendmail  server  that’s  upstream 
from  your  site  will  remove  the  fangs  from  a  malicious  e-mail  mes¬ 
sage  that  exploits  this  security  hole  —  but  do  you  really  want  to 
depend  on  the  kindness  of  strangers? 

You  can’t  afford  that  risk.  So  find  out.  And  if  you  have  sendmail 
systems  that  haven't  been  patched  or  upgraded,  do  it  right  now! 


How  bad  is  this  mess?  Between  50«o  and  75“o 
of  all  e-mail  on  the  Internet  is  handled  by  send¬ 
mail  servers.  The  bug  that  creates  the  security 
hole  is  about  a  decade  old.  which  means  if 
you're  using  sendmail.  you  do  have  the  bug. 

And  since  it  took  less  than  48  hours  for  two 
separate  groups  of  hackers  to  come  up  with 
working  attacks  on  this  security  hole  after  it 
was  officially  announced,  you  can  reasonably 
e.xpect  attacks  to  show  up  on  the  Internet  pret¬ 
ty  quickly,  too. 

Worse  still,  you  may  already  have  been  hit  bv 
one.  A  successful  attack  w'on’i  leave  any  c\'i- 
dence  on  your  system  log.  Which  means  somi  - 
one  who's  just  testing  the  technique  may  al¬ 
ready  have  tried  it  on  your  unpatched  sendmail 
systems,  and  you  have  no  way  of  knowing. 

The  good  news  —  yes.  there  is  some  good 
news  here  —  is  that  this  is  one  very  subtle  sc 
curity  hole.  It’s  no  simple  buffer-overflow 
problem,  like  so  many  we've  heard  about.  In 
this  case,  the  buffer  that  lots  the  bad  guys  in  is 
checked  to  make  sure  it  doesn’t 
tiverflow.  Trouble  is.  thcrc'.s  a  bug 
in  one  of  the  checking  routines. 

And  if  a  bad  guy  exploits  that  cod¬ 
ing  error  —  but  only  if  tnc  baa  guy 
knows  ejruct/y  how  to  exploit  that 
specific  cinJing  crnu’  —  sendmail  is 
vulnerable. 

Which  expbins  why  it  took  10 
years  for  anyone  to  spot  the  prob¬ 
lem.  and  why  it  was  Internet  Secu¬ 
rity  Systems  in  Atlanta  that  spotted 
it.  not  some  malicious  adok’sceni  in 
his  hedrfM»m.  The  problem  was 
buri«*d  deep  in  code  ihat  has  been 
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available  to  security  e.xperts  and  nasty  crackers 
alike  —  and  until  now.  no  one  spotted  it. 

That's  how  far  we’ve  come  on  security:  We 
now  have  so  many  researchers  digging  so  deep 
and  looking  so  carefully  that  we’re  finding  se¬ 
curity  holes  we  once  would  have  called  unfind- 
able.  We’re  no  longer  finding  bugs  just  in  new¬ 
ly  released  software.  We're  finding  and  fixing 
the  flaws  deep  in  the  bedrock  of  our  IT  infra¬ 
structure.  And  that  makes  us  much  safer. 

But  ironically,  the  older  and  more  tested  and 
trusted  a  piece  of  software  is.  the  more  widely 
used  it’s  likely  to  be.  That  means  when  these 
new  deep  searches  for  security  holes  turn 
something  up.  the  potential  impact  is  huge.  Un¬ 
til  that  widely  used  software  is  widely  patched, 
w'e're  at  risk  —  in  a  big  way.  Which  is  wh\'. 
more  than  ever,  none  of  us  can  aflbrd  any  de¬ 
lays  in  finding  the  security  holes  in  our  sys¬ 
tems  —  and  closing  them. 

So  make  it  a  priority.  Subscribe  to  a  security 
service  if  you  think  you  need  it.  If  you  don't, 
put  someone  on  your  staff  in 
charge  of  scanning  security  sites 
and  news  groups  for  patches  you 
need  to  install. 

Then  cxime  up  with  a  plan  to  im¬ 
plement  those  patche.«  and  fixes 
fast.  And  make  sure  the  most  criti¬ 
cal  of  them  can  be  implemented  on 
an  emergency  basis. 

Because  finding  deep,  flmda- 
mental  security  holes  like  the  one 
in  sendmail  really  docs  make  us 
safer.  But  the  price  of  bettor  secu¬ 
rity  is  greater  risk  —  at  least  until 
wc  ?jpply  those  patches.  ( 


But  It’s  Better  Than  the 

IT  pilol  fish  Is  suddenly  responsiiie  for  phone 
so  she  aste  ioni^dslance  provider  for  a  Isi  of  phom 
rurnbers  currentty  getting  $er>4c8.  Arid  gets  it  -  86  a 
Uurry  29i}age  CouU  you  please  send  it  in  etoc* 
tronic  fonn?  feh  asks. 'An  hour  later,  I  received  an 
viilh  the  fie  attached,*  says  fish. 'll  was  a 
Word  document  with  29  pages  of  screenshots  ot 
die  spreadsheet  containing  our  phone  ftumbeis.* 
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Patch  It  Right  Now 

Has  your  SENDMAIL  been  patched?  Are  you  sure? 

If  the  answer  is  no,  stop  reading  this  and  get  it  taken 
care  of.  Not  later  today.  Not  later  this  minute.  You’re 
already  a  week  behind,  and  hackers  have  had  exploit 
code  working  since  last  Tuesday.  There  are  no  work¬ 
arounds.  Your  firewall  won’t  protect  you.  Your  virus  scanner  won’t 
protect  you.  A  properly  patched  sendmail  server  that’s  upstream 
from  your  site  will  remove  the  fangs  from  a  malicious  e-mail  mes¬ 
sage  that  exploits  this  security  hole  —  but  do  you  really  want  to 
depend  on  the  kindness  of  strangers? 

You  can’t  afford  that  risk.  So  find  out.  And  if  you  have  sendmail 
systems  that  haven’t  been  patched  or  upgraded,  do  it  right  now! 


How  bad  is  this  mess?  Between  50%  and  75% 
of  all  e-mail  on  the  Internet  is  handled  by  send- 
mail  servers.  The  bug  that  creates  the  security 
hole  is  about  a  decade  old.  which  means  if 
you're  using  sendmail.  you  do  have  the  bug. 

And  since  it  took  less  than  48  hours  for  two 
separate  groups  of  hackers  to  come  up  with 
working  attacks  on  this  security  hole  after  it 
was  olTicially  announced,  you  can  reasonably 
expect  attacks  to  show  up  on  the  Internet  pret¬ 
ty  quickly,  too. 

Worse  still,  you  may  already  have  been  hit  by 
one.  A  successful  attack  won’t  leave  any  evi¬ 
dence  on  your  system  log.  Which  means  some¬ 
one  who’s  iust  testing  the  technique  may  al¬ 
ready  have  tried  it  on  your  unpatched  sendmail 
systems,  and  you  have  no  way  of  knowing. 

The  good  news  —  yes,  there  is  some  good 
news  here  —  is  that  this  is  one  very  subtle  se¬ 
curity  bole.  It’s  no  simple  buffer-overflow 
problem,  tike  so  many  we’ve  heard  about.  In 
this  case,  the  buffer  that  lets  the  bad  guys  in  is 
checked  to  make  sure  it  doesn't 
overflow.  Tbouble  is,  there’s  a  bug 
in  one  of  the  cheekily  routines. 

And  if  a  bad  guy  exploits  that  cod¬ 
ing  error  —  but  only  if  the  bad  guy 
knows  exactly  how  to  exploit  that 
speciffc  coding  error  —  sendmail  is 
vulnerable. 

Which  explains  why  it  took  10 
years  for  anyone  to  spot  the  prob¬ 
lem,  and  why  it  was  Internet  Secu¬ 
rity  Systems  in  Atlanta  that  spotted 
it.  not  some  malicious  adolescent  in 
his  bedroom.  The  problem  was 
buried  deep  in  code  that  has  been 


available  to  security  experts  and  nasty  crackers 
alike  —  and  until  now,  no  one  spotted  it. 

That's  how  far  we’ve  come  on  security:  We 
now  have  so  many  researchers  dicing  so  deep 
and  looking  so  carefully  that  we’re  rinding  se¬ 
curity  holes  we  once  would  have  called  unfind- 
able.  We’re  no  longer  rinding  bugs  just  in  new¬ 
ly  released  software.  We're  rindii^  and  rixing 
the  flaws  deep  in  the  bedrock  of  our  IT  infra¬ 
structure.  And  that  makes  us  much  safer. 

But  ironically,  the  older  and  more  tested  and 
trusted  a  piece  of  software  is,  the  more  widely 
used  it’s  likely  to  be.  That  means  when  these 
new  deep  searches  for  sectirity  holes  turn 
something  up,  the  potential  impact  is  huge.  Un¬ 
til  that  widely  used  software  is  widely  patched, 
we’re  at  risk  —  in  a  big  way.  Which  is  why, 
more  than  ever,  none  of  us  can  afford  any  de¬ 
lays  in  rinding  the  security  holes  in  our  sys¬ 
tems  —  and  closing  them. 

So  make  it  a  priority.  Subscribe  to  a  security 
service  if  you  think  you  need  it.  If  you  don’t, 
put  someone  on  your  staff  in 
charge  of  scanning  security  sites 
and  news  groups  for  patches  you 
need  to  install. 

Then  come  up  with  a  plan  to  im¬ 
plement  those  patches  and  fixes 
fast  And  make  sure  the  most  criti¬ 
cal  of  them  can  be  in^lemented  on 
an  emergency  basis. 

Because  rinding  deep,  funda¬ 
mental  security  boles  like  the  one 
in  sendmail  really  does  make  us 
safer.  But  the  price  of  better  secu¬ 
rity  is  greater  risk  —  at  least  until 
we  apply  those  patches.  I 


What  one  thing  do  investors  understand 
about  your  company  better  than  you  do? 


Your  competitive  advantage. 


In  an  era  of  disruptive 
change,  Moore  uses  investor 
perspective  to  give  management 
teams  the  strategy  tools  they 
need  to  navigate. 


‘This  book  is  a  must  read  for  CEOs  and  their  executive 
team....  According  to  Geofhey  Moore,  you  had  better  start 
shedding  non-core  activities  quickly  or  your  company 
will  become  a  victim." 

-VICE  PRESIDENT  DICK  CHENEY 


"When  you  live  on  the  fault  line,  you  have 
to  reinvent  yourself  every  single  day.” 

-BOB  HERBOLD,  FORMER  EXECUTIVE  VICE 
PRESIDENT  AND  COO,  MICROSOFT 


"Moore  shows  convincingly  that  technology  and 
capital  marttet  efficiency  have  fundamentally 
changed  not  just  the  reality  that  all  managers  face, 
but  have  changed  the  way  they  need  to  define, 
measure  and  manage  success.  This  is  a  great  book." 
-CLAYTON  CHRISTENSEN,  AUTHOR  OF 
THE  INNOVATOR'S  DILEMMA 
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Billions  Needed  to  Meet 
Drug  Bar-Code  Mandate 


FDA  order  targets  drug  makers,  but  hospitals 
will  have  to  pay  for  underlying  IT  inftasttuctuie 


BV  BOB  BHSWIH 

The  Food  and  Drug  AdminiS' 
tratioo  last  week  mandated 
that  drug  companies  put  bar 
codes  on  all  drugs  dispensed 
in  hospitals  as  a  means  of  re¬ 
ducing  medication  errors. 
Hospitals  welcomed  the  (nos- 
pect  of  error  reduc-  ; 
tion.  even  though 
'  as  an  industry  they  ' 
will  have  to  spend  billions  to 
deploy  the  technology. 

The  regulations  apply  only 
to  drug  manufacturers  and  not 
to  hospitals.  But  as  a  practical 
matter,  hospitals  will  need  bar 
code  readers  and  the  networks 
and  systems  to  support  them. 


IT  SPENDING 


The  FDA  put  the  cost  of  de* 
ployii^  those  systems  at  about 
$7.2  billioa 

Hospitals  don't  appear  to  be 
balking  at  the  hefty  price  tag. 
because  many  see  it  as  a 
worthwhile  investment. 

Richard  Coofsh,  a  spokes- 
- man  for  the  Feder¬ 
ation  of  American 
Hospitals,  a  Wash¬ 
ington-based  association  of 
large,  investor-owned  hospital 
companies,  said  his  organiza¬ 
tion  has  solidly  backed  the 
Eur-code  regulations,  '^e  be¬ 
lieve  it  will  improve  care  and 
save  Ihres."  be  said. 

The  FDA  requirement  for 


standard  bar  codes  will  save 
money  for  hoq>itals  that  have 
already  started  to  d^loy  med¬ 
ication  management  systems, 
according  to  jane  Englebrighi. 
vice  president  of  quality  at 
HCA  Inc.  in  Nashville.  In  testi¬ 
mony  at  an  FDA  hearing  last 
year.  Englebri^  said  the  lack 
of  standard  bar  codes  required 
hospitals  to  repackage  and  add 
Bor  Codes,  page  61 


IT  Systems  at 
U.S.  Borders 
Found  Lacking 

Nation  chaDenged  to 
build  infrastructure  to 
support  biometrics 


Microsoft 


Visual  Studio  .NET  can  help  you  with  (nearly)  every  part  of  your  job.  Your  \t\t-n  dppiu  .iiiuns  lus'  ont  ’.isinr.  ASPAf  i  tiif 

Web  application  environment  m  Visual  Studio  NET.  offers  drar’-ati'  ally  improved  . ■  i  iss  .  asp  h-.-u-  s  u.  .• 

O  Compiled  Page  Execution  ASP.NE  l  pages  are  compiled  once  and  cached  ir:  memorv  instead  o‘  hemg  uiterpieied  C'f’Ch  lime 
me  page  IS  reciuested.  B  Rich  Output  Caching  ASP.  NET'S  caching  features  quickly  retrieve  database  quen'-'S.  full  cages  loi  paMs 
1  .•  p.iHPs .  aid  objects  frr^m  'ne'iior'.  foi  nnpiov'd  ape  oerhi'  i .  O  Crash  Protection  Wi.'b  applications  can  t  be  fast  it  th*-,  re 
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Can  your  software  help  keep  your  business  up  and  running  no  matter  what? 

Ours  can. 

Your  company's  infrastructure  is  for  too  important  to  risk.  That's  why  our  full  range  of  business  continuity  solutions  ensures  you're 
oble  to  hondle  anything.  BrightStor"  storage  solutions  provide  the  most  comprehensive  data  bockup  and  recovery.  eTrusf*  security 
solutions  provide  totol  protection  for  your  entire  enterprise,  not  just  pieces.  And  Unicenter*  infrastructure  softwore  keeps  your  whole 
business  up  and  running  24x7.  As  your  business  grows  and  becomes  more  complex,  you  need  software  solutions  you  can  rely  on. 
You  may  still  not  know  what's  coming.  But  you  will  know  you're  prepored.  ca.com/continuity 


Business  Continuity  Solutions  Qa)  Computer  Associates™ 
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NEW _ 

7  Microsoft  plans  pricing  change  for 

server  software.  Customers  that  run 
the  company’s  products  on  parti¬ 
tioned  servers  could  see  big  savings. 

7  SAP  ups  the  ante  for  integration. 
MySAP  ERP  bundles  traditional 
elements  of  R/3  with  products  that 
used  to  be  sold  separately. 

10  New  pricing  models:  IBM  changes 
iSeries  pricing,  but  it  won’t  benefit 
all  users.  Meanwhile.  HP  rolls  out 
usage-metering  technology. 

12  EMC  adds  ATA  drives  to  its  Clariion 
midrange  disk  arrays. 

13  3Com  launches  devices  for  trans¬ 
mitting  electrical  power  via  Ether¬ 
net  to  IP  phones  and  wireless  LAN 
access  points. 

16  The  Amber  Alert  system  could  be 
hampered  by  outmoded  technology. 
Bills  before  Congress  calling  for  a 
national  system  to  help  find  missing 
children  don't  include  funding  to 
upgrade  the  network. 
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In  the  Slow  Lane 

Leading-edge  users  have  already  moved 
to  I.iniiY,  z/OS  and  the  latest  Windows. 
Then  there’s  the  rest  of  us.  This  special 
report  provides  useful  information 
for  the  legions  of  lagging-edge  users 
who  are  new  to  Linux  or  haven’t  yet 
moved  to  the  latest  versions  of  the 
iJWSm  server  operating  systems 
aliWOl  from  IBM  and  Microsoft. 
LUiUill  PACKABE  BEGINS  OH  PAGE  27. 


90  Tha  SlOiy  So  For.  The  development  of  operating 
systems  b^an  in  1955,  when  General  Motors  cre¬ 
ated  a  batch*processing  monitor. 

34  SM  OH  Wbidcpm  NT.  Despite  Microsoft’s  best  ef¬ 
forts  to  push  them  into  upgrades,  legions  of  Win¬ 
dows  NT  Server  users  aren’t  ready  to  move  up  or 
haven’t  finished  their  migrations.  Some  say  /  y 
that  NT  4i)  works  Just  fine,  thank  you.  /  J 

36  TInw  b  RunninQ  OhL  The  clock  is  tic^^ 
ing  for  users  of  IBM’s  OS/390  main¬ 
frame  operating  environment  to 
move  to  the  64-btt  z/OS. 


40  Mb*  SMrf  NMi  Umx.  Not 

every  IT  shop  is  rushing  to  in¬ 
stall  Linux.  Many  are  Just  start¬ 
ing  to  eqriore  tbe  open-source 
phenomenon,  so  bm’t  a  guide 
to  practical  issues  such  as  ver¬ 
sion  control,  backup,  fidl-over 
and  nq>pott  ONLME:  A  coUec- 
tioo  of  Linux  TKM)  sites,  inchid- 
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ing  those  of  vendors  such  as  IBM.  HP.  Red  Hat 
SCO  and  SuSE  O  (NddJnk  36275 

42QuicfcS6i4y:A  primer  on  Logical  Volume  Manag¬ 
er.  a  software  tool  that  allows  storage  drive  space 
to  be  added  or  expanded  on  the  fly.  without  sys¬ 
tem  reboots  or  shutdowns. 

44  Strangth  b  Numbara?  IndivtduaUy  they  lack 
the  market  peoetratioD  of  Red  Hat.  but  together 
the  ftmr  companies  of  the  United  Linux  alliance 
have  shown  progress  by  sharing  cosu  and 
creatii^  common  support  and  cail  centers 
for  customers. 

46  Tht  Woridwicfa  Coda  Rebabon.  Many  foreign  gov¬ 
ernments  are  encouraging  their  IT  managers  to 
use  open-source  software.  It’s  a  powerful  move¬ 
ment  whose  roots  include  anger  over  licensing 
terms  set  by  U.S.  vendors  and  concem  about  be¬ 
ing  locked  into  proprietary  formats.  ONLME:  The 
European  Commission’s  top  software  pobc)* 
official  discusses  open-source  initiatives  in 
Europe.  O  QiMlM  36441 

460pWon;  For  IT  strat^ists.  the  operating  system 
debate  is  all  but  dead,  says  columnist  Matk  HalL 

50  Ths  Abnaiiac:  The  ‘meta  c^erating  system.”  books 
about  Windows  Server  2003  and  infonnatiOD  on 
the  latest  patents  are  included  in  this  eclectic 
roundup  of  OS  research  and  resources. 


52  Camn:  A  look  at  skills,  training  and 
salary  informatioD  for  Linux  profession¬ 
als.  ONLME:  Linux  adoption  is  on  the 
rise,  but  don’t  expect  to  see  a  hiring 
boom  in  Che  field.  The  ease  of 
learning  Linux  means  existing 
personnel  are  being  retrained. 


OQNd&Ui  36661 

54DiaNnclChmbr  In  a  collection 
of  predictioiis  about  server  operat¬ 
ing  systems,  pandits  say  that  the  OS 
wfl]  become  vital  to  W^  ser^dcei. 
And  that  Linux  will  become  hugely 
successful  but  fragmented  like  Unix. 
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iSeries  pricing,  but  it  won’t  benefit 
all  users.  Meanwhile,  HP  rolls  out 
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midrange  disk  arrays. 
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access  points. 

16  The  Amber  Alert  system  could  be 
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In  the  Slow  Lane 

Leading-edge  users  have  already  moved 
to  Linux,  z/OS  and  the  latest  Windows. 
Then  there’s  the  rest  of  us.  This  special 
report  provides  useful  information 
for  the  legions  of  lagging-edge  users 
who  are  new  to  Linux  or  haven’t  yet 
moved  to  the  latest  versions  of  the 
server  operating  systems 
from  IBM  and  Microsoft. 
PACKAGE  BEGINS  ON  PAGE  27. 
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30  The  Story  So  Far.  The  development  of  operating 
systems  began  in  1955,  when  General  Motors  cre¬ 
ated  a  batch-processing  monitor. 

34  Still  on  Windows  NT.  Despite  Microsoft's  best  ef¬ 
forts  to  push  them  into  upgrades,  legions  of  Win¬ 
dows  NT  Server  users  aren’t  ready  to  move  up  or 
haven't  finished  their  migrations.  Some  say  /  y 
that  NT  4.0  works  just  fine,  thank  you.  j  y 

36  Time  Is  Running  Out  The  clock  is  tick¬ 
ing  for  users  of  IBM’s  OS/390  main¬ 
frame  operating  environment  to 
move  to  the  64-bit  z/OS. 


ing  those  of  vendors  such  as  IBM.  HP.  Red  Hat. 
SCO  and  SuSE.  C  QuickLink  36275 

42  QuickStudy:  A  primer  on  Logical  Volume  Manag¬ 
er.  a  software  tool  that  allows  sior^e  drive  space 
to  l>e  added  or  expanded  on  the  fly.  without  sys¬ 
tem  reboots  or  shutdowns. 

44  Strength  in  Numbers?  Individually  they  lack 
the  market  penetration  of  Red  Hat.  but  together 
the  four  companies  of  the  UniiedLinux  alliance 
have  shown  progress  by  sharing  costs  and 
creating  common  support  and  call  centers 
for  customers. 

46  The  Worldwide  Code  Rebellion.  Many  foreign  gov¬ 
ernments  are  encouraging  their  IT  managers  to 
use  open-source  software.  It’s  a  powerful  move¬ 
ment  whose  roots  include  anger  over  licensing 
terms  set  by  U.S.  vendors  and  concern  about  be¬ 
ing  locked  into  proprietary  formats.  ONUNE:  The 
European  Commission's  top  software  polic>' 
official  discusses  open-source  initiatives  in 
Europe.  C  QuickLink  36441 

48  Opinion:  For  IT  strategists,  the  operating  system 
debate  is  all  but  dead,  says  columnist  Mark  HaU. 

50  The  Almanac:  The  “meta  operating  system."  books 
al>out  Windows  Server  2003  and  information  on 
the  latest  patents  are  included  in  this  eclectic 
roundup  of  OS  research  and  resources- 


40  Getting  Started  With  Linux.  Not 

every  IT  shop  is  rushing  to  in¬ 
stall  Linux.  Many  are  just  start¬ 
ing  to  explore  the  open-source 
phenomenon,  so  here’s  a  guide 
to  practical  issues  such  as  ver¬ 
sion  control,  backup,  fail-over 
and  support.  ONLME:  A  coUec- 
tion  of  Linux  Web  sites,  includ- 


wimVMStaHU 
Know  About  Linux 

Is  Linux  good  enou^  for  your 
organizariop?  Columnist  Umo- 
tby  Witham  outlines  five  points 
to  keep  in  mind  as  you  wei^ 
your  options. 
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52  Careers:  A  look  at  skills,  training  and 
salary  information  for  Linux  profession¬ 
als.  ONLINE:  Linux  adoption  is  on  the 
rise,  but  don't  expect  to  sec  a  hiring 
E>oom  in  the  field.  The  ease  of 
learning  Linux  means  existing 
I  personnel  are  being  retrained. 

"r  O  QuickLink  36551 
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54  The  Next  Chapter  In  a  collection 
of  predictions  about  server  operat¬ 
ing  systems,  pundits  say  that  the  OS 
will  become  vital  to  Web  services. 

‘  And  that  Linux  will  become  hugely 
successful,  but  iiagmented  like  Unix. 


WWW  COMPUTLRWOfriO  COM 


HawtohilMnte 

UnuxWMiiMi 

The  SCO  Group's  senior  vice 
president  of  tediDology  walks 
you  throu^  a  lew  simple  q>- 
proacbes  for  using  Linux  a^ 
Unix  together  to  strengthen 
your  corporate  IT  stnt^. 
OQNcMMtSm* 


LaantolWia 

PMtonmMAIoiig 

Avanadc^  Christopher  Burry 
offers  advice  on  haw  to  get 
^plication  devetopmem  and 
infrastructure  pl^onns  to 
work  together. 
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Symbol  Says  SEC 
lyby  File  Charges 

Symbol  Tochnobi^oi  lnc>.  ■ 
nwimr  of  bor  codo  Konmre  aitd 
OQWf  wwonoB  oowicoBt  sola  n 
MS  nobfiod  that  ttit  Secu* 
rtttis  and  Eachano*  Commission 
may  push  for  cMI  chargos 
agaimt  lha  company  as  part  of 
an  accountinB  Invostioation. 
ffobivMo.  N.V.<boood  Syndml 
abe  dalayad  wdl  Judo  a  piannod 
raatatsmont  of  Mi  financial  ro* 
suits  dabno  bock  to  1999. 

Intel  RoHs  Out 
Ethernet  Devices 

bMal  Gotp.  today  «dl  amMMnco  a 
aorios  of  Elbamal  ftitMcUng 
dtyteos,  bidudbig  a  GipabM  Eth* 
amaf  coaMrolor  Iw  PCs  and  a 
10  OigataM  Etharoal  natwofk  irt- 
tsrfaeo  card  lor  aonmrs.  Iho  In* 
larfaco  card  oosto  S7,985  and  b 
dosignad  to  comact  lAN-basod 
aortore  to  carport  natworha  so 


■ppfcalions  such  as  bnaoine. 
accordtag  to  total  officiais. 

White  House  Taps 
Coca-Cola  FT  Exec 


that  toa  praaidoni  plans  to  nama 
Rabait  Uaeouabi,  curnntty  dboc* 
tar  of  brfonnadion  aaawanea  at 
Tha  Coca-Coto  Co.  to  AllMta.  to 
ba  aatoatonl  aacralary  of  tofra* 


now  U.&  Daparlmonl  of  Homo- 
land  Socufty.  Uacoialif  a  tor- 


Short  Takes 

IT  ooiMdltao  flna  aCCENTURE 
LTD.  atodilWd  off  about  700 
amployooa.  prinmty  to  tha  OS. 
Tha  cuts  raduood  flw  eoanpafly*t 
marbforea  by  1%.  tart  Acconturt 
aafd  N  aDtoocto  a  not  toeroaaa  In 
haad  eount  taatog  Ms  currant  fis¬ 
cal  yaar. ...  WOltLOCOM  MC. 
nU  it  wrola  off  S79J  hMon 
wohb  of  tannctai  gaedadl  and 
otbar  aaaato  as  part  of  Ms  bank' 


Intel  Launches  Centrino; 
Wi-Fi  Support  Still  Lags 


Mobile  technology 
can  access  only 
older  802.11b  nets 


av  BOO  BOEWIM 

INTEL  CORP.  launched  its 
much-heralded  Centrino 
mobile  technology  last 
week.  But  unless  users  are 
willing  to  accept  relatively  slow 
Wi-Fi  access,  they  will  have  to 
wait  until  the  next  quarter  to 
get  notebooks  certiAed  by  In¬ 
tel  as  Cenmotxompatible. 

Centrino  consists  of  a  ncwly 
designed.  low-power-drain 
Pentium-M  chip  set  and  a 
PRO/Wireless  mini-PCI  card 
that  handles  Wi-Fi  connectivi¬ 
ty.  Intel  will  offer  four  standard 
versions  of  the  Pentium-M 
running  at  speeds  of  1.6. 1.5. 1.4 
and  U  GHz. 

Intel  has  touted  the  Wi-Fi 
capabilities  of  its  Centrino  ar¬ 
chitecture  and  has  made  high- 
profile  partnerships  with  Wi-Fi 
public-access  networks  and 
operators  [QuickLink  36929). 
But  Centrino’s  built-in  Wi-Fi 
can  access  only  older  802.Ub 
wireless  networics,  which 
transmit  raw  data  at  a  rate  of 
UM  bit/sec.  It  doesn’t  support 
the  Wi-Ft  802Jla  or  802 Jig 
starvdards,  both  of  which  pro¬ 
vide  54M  bit/sec.  data  speeds. 

“Vie  had  originally  planned 
to  introduce  Centrino  with 
dual-band,  both  ‘a*  and  ‘b,’  ” 
Daniel  Francisco,  an  Intel 
spokesman,  said  on  Friday. 
"We  announced  in  December 
that  the  dual  band  would  be 
delayed  due  to  us  having  to  do 
some  additional  engineering 
on  ‘a.’  We  will  have  dual-band 
I80ZJ1  a  and  b)  out  by  the  end 
of  the  second  quarter  of 2003. 
As  for  ’g*  we  believe  an  a/b/g 
tri-band  solution  makes  sense, 
and  we'U  look  at  it  when  the 
‘g’  specification  is  completed." 
The  Wi-Fi  Alliance  expects  to 
Stan  cenifying  W)2Jlg  prod¬ 
ucts  this  summer. 

Rkh  Redclfs,  president  and 
CEO  of  Atheros  Communica¬ 
tions  Inc.,  a  wireless  LAN  chip 


manufacturer  in  Sunnyvale. 
Calif.,  said  notebook  vendors 
have  the  option  of  using  the 
Pentium-M  processor  that's  at 
the  heart  of  the  Centrino  tech¬ 
nology  with  Atheros  802.Ua/b 
WLAN  chip  sets  now.  and  with 
802Jlg  or  combined  802.Ua/b/g 
chip  sets  in  the  near  future. 

Maior  hardware  manufac¬ 
turers  that  have  rigned  on  to 
use  the  Atheros  8^11  chip 
sets  include  Hewlett-Packed 
Ca,  IBM,  T'oshiba  Corp.  and 
NEC  Corp.  But  Intel  —  which 
is  backing  the  Centrino  launch 


with  a  S300  milUon  advertis¬ 
ing  campaign  —  won't  allow 
manufacturers  to  slap  a  "Cen- 
trino-compatible"  logo  on 
their  products  unless  they  in¬ 
corporate  both  the  Pentium-M 
processor  and  its  Wi-Fi  mod¬ 
ule.  IBM  and  HP.  in  addition 
to  offering  the  Atheros  optioa 
are  among  the  top-tier  note¬ 
book  vendors  that  offer  fully 
compatible  Centrino  products. 

Many  large  enterprise  users 
view  Wi-Fi  as  a  business  es- 
sentiaL  Tbny  Scott,  chief  tech¬ 
nology  officer  at  General  Mo¬ 


NIEL  S  CENTRINO  TIMELINE 


tors  Corp.,  said  be  plans  to 
support  thousands  of  traveUng 
workers  with  Wi-FL  Scott 
called  the  increase  in  battery 
life  promised  by  Centrino  a 
“great  step  forward”  and  not¬ 
ed  that  GM  intends  to  upgrade 
wireless  LANs  in  its  plants 
from  802.11b  to  802.Ug. 

Analysts  expect  Intel  to 
eventually  incorporate  all 
three  Wi-Fi  standards  into  the 
Centrino  architecture,  and 
they  view  that  as  the  begin¬ 
ning  of  the  end  of  outboard 
Wi-Fi  packaged  in  a  PC  Card. 
Keith  Waryas,  an  analyst  at 
IDC  in  Framingham.  Mass., 
said  the  use  of  PC  Cards  for 
wireless  LAN  connectivity 
'ViU  eveniuaUy  go  away”  as 
Centrino-equipped  notebooks 
replace  older  models.  I 
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moUe  processor. 


Fotne  Comets  Nelworlis  with 
AT&T  Corp.  and  8M  to  dewlop 
B  neDonw^  W-n  network 


Chanoesnameolmobileprocessorardir- 
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minrPCI  card  on  CemntxL 
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Microsoft  Steers  fifxps 
Toward  Collaboration 


■V  MARC  L.  aOMOIMI 

Microsoft  Corp.  this  week  will 
detail  plans  to  push  out  tech¬ 
nology  designed  to  simplily 
software  integration  and  to 
support  increased  collabora¬ 
tion  c:apabilities  for  users  of 
its  business  applications. 

At  its  Convergence  2003  con¬ 
ference  in  Orlando.  Microsoft 
will  try  to  sell  users  on  the  idea 
that  its  applications  can  be 
used  to  integrate  various  bu«- 
ness  processes,  said  Lynne 
Stockstad,  general  man^r  of 
global  solutions  at  Microsoft's 
business  solutions  unit.  For  ex¬ 
ample.  companies  could  link 
their  employees  and  business 
partners  in  automated  work- 
flows  that  support  customer  re¬ 
lationship  management  (CRM), 
supply  chain  operations  and 
ocher  activities,  she  said. 

As  part  of  the  strategy,  Mi¬ 
crosoft  will  unveil  integration 
and  user-intcrtocc  enhance¬ 


ments  to  simplify  development 
of  collaborative  applications, 
Stockstad  said.  She  was  sketchy 
on  the  details  but  did  say  the 
plan  includes  adding  an  end- 
user  portal  or  a  similar  role- 
based  interfk:e  that  will  give 
workers  a  view  of  the  business 
functions  relevant  to  their  jobs. 

MfadngKUp 

Integration  is  a  major  issue  for 
Tom  Racca,  vice  president  of 
sales  and  marfcetii^  at  iQ. Net- 
Solutions  Inc.  in  Westboro, 
Mass.  IQNetSolutioos,  wddeh 
makes  tcleconununtcations 
equipment,  runs  Microsoft's 
Great  Plains  back-office  appli¬ 
cations  and  its  new  CRM  soft¬ 
ware  in  a  hosted  installation. 

Racca.  who  plans  to  attend 
the  Convergence  conference, 
said  it’s  particularly  important 
for  him  to  see  continued  im¬ 
provements  in  the  integration 
between  the  Microsoft  CRM 


and  Great  Plains  applications. 
He  said  he  also  wants  to  com¬ 
bine  the  different  functioas  of 
the  applications  into  a  portal- 
style  user  interface  and  open 
up  the  systems  to  his  compa¬ 
ny's  business  partners. 

The  integration  moves 
planned  by  Mkrosoft  are  key 
requirements  for  the  midsize 
companies  that  the  software 
vendor  is  targeting  with  Us  ap¬ 
plications.  said  Katherine 
Jones,  an  analyst  at  Aberdeen 
Group  Inc  in  Bostoa 

Companies  at  diat  level  of¬ 
ten  are  plagued  by  continued 
reliance  on  repetitive  manual 
processes  that  bog  down  pro¬ 
ductivity.  such  as  having  to 
copy  customer  information 
from  one  application  to  anoth¬ 
er,  Jones  said  Adding  a  portal 
isn’t  a  unique  step  on  Micro¬ 
soft's  part,  but  it  could  help 
end  users  do  their  jobs  more 
efficieotly,  she  said.  I 
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Microsoft  to  Change  Server  Software  Pricing 


New  model  could  mean  significant  cost 
savings  for  customers  that  use  partitioning 


6V  JAMES  MICCOLAI 

Microsoft  Corp.  plans  to  adjust 
its  per*processor  licensing 
model  to  provide  relief  for 

customers  that  run  its  _ 

software  on  parti¬ 
tioned  servers,  a 
Microsoft  executive 
said  last  week. 

On  April  1.  the  company  will 
introduce  pcr-processor  li¬ 
censing  terms  for  eight  server 
products  to  provide  a  fairer 
option  for  customers  that  use 
partitioning,  said  Rebecca 
LaBrunerie,  head  of  Micro* 
soft's  licensing  program.  Un¬ 
der  the  new  system,  business¬ 
es  will  pay  for  only  the  proces¬ 
sors  that  the  software  runs  on, 
rather  than  for  every  proces¬ 
sor  in  a  partitioned  server, 
she  said. 

The  change  could  lead  to 
significant  cost  savings  for 
customers  that  use  partition¬ 
ing  to  segregate  applications 
running  on  a  single  multi¬ 
processor  server,  said  Alvin 
Park,  an  analyst  at  Gartner 
Inc.  in  Stamford,  Conn.  Some 
of  those  customers  have  com¬ 
plained  that  Microsoft's  cur¬ 
rent  pricing  system  requires 
them  to  pay  a  license  for 
each  processor  on  their  serv¬ 
ers,  even  though  the  software 
may  not  actually  be  running 
on  all  of  them.  Park  said. 

Using  partitioning  to  cut  li¬ 


censing  costs  can  be  complex 
from  a  technology  standpoint, 
but  the  new  model  offers  the 
potential  for  big  savings  for 

some  customers.  Park 
said.  The  issue  main¬ 
ly  affects  customers 
that  consolidate  sin¬ 
gle-  or  dual-processor  servers 
onto  larger  systems  as  a  way  of 
cutting  hardware  and  systems 
management  costs,  be  said. 

LaBrunerie  said  the  new 
model  will  be  “a  lot  more  fair 
and  logtcal'  than  the  current 
system  for  customers  that  use 
partitioning.  Server  consoli¬ 
dation  is  a  growing  trend 
among  businesses  seeking 
ways  to  cut  IT  costs,  and  the 
new  pricing  seeks  to  address 
that,  she  said. 

MoreFlax8)aty 

)ohn  Bielec,  CIO  at  Drexel 
University  in  Philadelphia, 
said  the  new  pricing  structure 
will  likely  help  the  university 
cut  costs  as  it  continues  to  re¬ 
place  and  consolidate  servers. 

The  new  pricing  'VUl  give 
us  flexibility  in  terms  of  mov¬ 
ing  [Microsoft  server  applica¬ 
tions]  from  smaller  to  larger 
servers  and  not  gettiitg  hit 
with  larger  costs”  for  licensing, 
he  said.  Drexel  uses  two  of  the 
affected  Microsoft  server 
products,  SQL  Server  2000 
and  BtzTalk  Server  2002.  Drex¬ 
el  replaces  about  one-third  of 
its  hardware  annually,  Bielec 
said,  adding  that  he  expects 
the  savings  ftom  the  new  pric¬ 
ing  structure  to  be  reflected  in 
his  budget  after  ]uly  L 

The  model  eventually  will  be 
extended  to  Microsoft’s  Win¬ 
dows  2000  server  operating 
system  LaBrunerie  said.  The 
company  recently  acquired 
technology  from  Conoectix 
Corp.  in  hopes  of  providing 
software  that  vrill  let  a  single 
Windows  server  act  as  a  series 
of  separate  machines.  Micro¬ 
soft  will  discuss  pricing  dianges 
for  Windows  2000  when  that 
virtualization  software  is  re¬ 
leased.  LaBrunerie  said. 


The  new  model  will  also  ap¬ 
ply  to  earlier  versions  of  the 
ei^t  Microsoft  products  af¬ 
fected  by  the  change,  although 
the  company  won't  offer  re¬ 
funds  to  customers  that  have 
already  paid  for  software 
they’re  running  on  partitioned 
servers.  Those  customers  will 
be  able  to  reuse  licenses  that 


are  freed  up  by  the  new  sys¬ 
tem  Microsoft  said.  For  exam¬ 
ple,  under  the  current  model,  a 
user  nmning  SQL  Server  on  a 
partitioned  ei^t-way  server  is 
paying  for  ei^  processor  li¬ 
censes,  even  though  the  soft- 
Vk-are  might  be  runnliq;  on  only 
four  processors.  When  the 
new  model  kicks  in  on  April  L 


that  customer  will  have  four 
unused  SQL  Server  licenses  in 
hand.  LaBrunerie  said. 

The  changes  apply  only  to 
customers  on  per-proces»or 
licenses  and  don't  affect  the 
client/server  access  license 
model  Park  said  I 

Niccofoi  writes  for  the  IDG 
News  Sen-ice.  Computer- 
svorld's  Tbdd  R.  Weiss  con¬ 
tributed  to  this  report. 


SAP  Bundles  1^3,  Other 
Apps  in  New  ERP  Release 


BY  MARC  k.  aONWNI 

SAP  AG  last  week  said  it's 
rolling  out  a  beefed-up  version 
of  its  enterprise  resource  plan¬ 
ning  (ERP)  software  aimed  at 
users  who  are  daunted  by  the 
prospect  of  buying  and  in¬ 
stalling  a  full  set  of  the  com¬ 
pany’s  applications. 

Announced  at  the  CeBIT 
2003  conference  in  Hanover, 
Germany,  mySAP  ERP  is  the 
newest  release  of  SAP's  flag¬ 
ship  R/3  software.  The  prod¬ 
uct  bundles  R/3  with  applica¬ 
tions  that  were  previously 
sold  separately,  including 
SAP's  portal  and  business- 
to-business  marketplace 
software. 

Deborah  Schmidt,  global 
vice  president  of  enterprise 
solutions  at  SAP,  said  mySAP 
ERP  users  will  also  get  built-in 
functions  from  other  applkra- 
tiofts,  such  as  tools  for  analyz¬ 
ing  human  resources  and  fi¬ 
nancial  data.  SAP  is  exploiting 
the  NetWeaver  integration 
technology  it  announced  in 
January  to  add  functionality  to 
the  ERP  software  without  re¬ 
quiring  users  to  buy  licenses 
for  all  the  pieces  of  its  mySAP 
suite,  Schmidt  said 

She  added  that  there  will  be 
special  pricing  for  mySAP 
ERP  but  didn't  disclose  details. 

Tom  Ackerman,  senior  di¬ 
rector  of  business  information 
systems  at  R/3  user  Symbol 
Technologies  Inc.  in  Holts- 
vUle,  N.Y.,  said  the  plans  out¬ 
lined  by  SAP  should  provide 
increased  integration  capabili¬ 
ties  and  more  user  InteifKC 
flexibility.  Those  are  “'two  im¬ 


portant  elements  which  have 
been  missing  from  traditional 
ERP  offerings,”  he  said. 

MySAP  ERP  also  includes 
support  for  automating  back- 
office  administrative  services, 
such  as  management  of  real 
estate,  travel  expenses  and 
payments  of  commissions  and 
ot^r  incentives,  said  Jim 
Shepherd  an  analyst  at  AMR 
Research  Inc.  in  Boston 

The  new  release  is  available 
now.  SAP  also  announced  a 
professional  services  automa¬ 
tion  application  designed  to 
let  companies  in  service  in¬ 
dustries  automate  the  manage¬ 
ment  of  their  operations. 


SAP  rival  PeopleSoft  Inc. 
also  used  the  CeBIT  show 
to  announce  an  integration 
move,  detailing  plans  to  pro¬ 
vide  links  to  instant  messaging 
and  collaboration  technology 
from  IBM,  Microsoft  Oarp. 
and  Yahoo  Inc.  in  its  end-user 
portal  and  other  applications. 

Paola  Lubet.  vice  president 
of  marketing  for  Pe^leSoft's 
AppC^nncct  integration  toob, 
said  Version  &8  of  the  compa¬ 
ny's  Enterprise  Portal  software 
will  also  include  new  a^bili- 
ties  to  help  IT  managers  devel¬ 
op  intranet  sites  for  groups  of 
end  users  who  need  to  collabo¬ 
rate  with  one  another. 

The  ponal  upgrade  will  be 
available  this  week,  although 
the  instant  messaging  connec¬ 
tions  aren't  due  until  the 
fourth  quarter.  Lubet  said  I 
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Symbol  Says  SEC 
May  RIe  Charges 

Symbol  Tochoologios  Inc.,  a 
maker  of  bar  code  scanners  ar)d 
other  Mfiretess  devices,  said  it 
was  notifiad  that  the  U.S.  Secu¬ 
rities  and  Exchange  CommissiKi 
may  push  for  civil  charges 
against  the  company  as  part  of 
an  accountiftg  iryvestigation. 
Hoftsvdie,  N.V.-based  Symbol 
also  delayed  until  June  a  planned 
restatement  of  its  financial  re- 
sutts  dating  back  to  1999. 


Intel  Rolls  Out 
Ethernet  Devices 

Intel  Corp.  today  will  announce  a 
series  of  Ethernet  networking 
devices.  tnckiiSng  a  Gigabit  Eth¬ 
ernet  controller  for  PCs  and  a 
10  Oigabit  Ethernet  network  in- 
tertaca  card  lor  servers.  The  in¬ 
terface  card  costs  S7.995  and  b 
designed  to  connect  LAN-based 
servers  to  corporate  networks  so 
they  can  run  bandwidth-hungry 
applications  such  as  imaging, 
according  to  Intel  officials. 


White  House  Taps 
Coca-Cola  IT  Exec 

Bush  admimstration  offidals  said 
that  the  presMent  plans  lo  name 
Robert  Uscouski.  currently  direc¬ 
tor  of  kiformabon  assurance  at 
The  Coca-Cola  Co.  in  Atlanta,  to 
be  asststard  secretary  of  infra¬ 
structure  protection  within  the 
new  U.S.  Department  of  Home¬ 
land  Security.  UscouskTs  ap* 
poinbnent  could  be  announced  as 
early  as  this  week,  sources  said. 


Short  Takes 

FT  consulting  Arm  ACCENTURE 
LTD  said  H  laid  off  about  760 
employees,  primarily  in  the  U.S. 
The  cuts  reduced  the  company's 
workforce  by  fib,  but  Accenture 
said  it  expects  a  net  bicrease  bi 
head  court  during  its  current  As- 
cal  yMT. . . .  WORLDCOM  INC. 
said  M  wrote  off  S79.8  blKon 
worth  of  Anandal  ooodwW  an! 
other  assets  as  pari  of  Us  bank¬ 
ruptcy  proceedings. 


Intel  Launches  Centrino; 
Wi-Fi  Support  Still  Lags 


Mobile  tecliiiologv’ 
can  acces.s  onl\’ 
older  802.11b  nets 


BY  BOB  BREWIN 

INTEL  ct)RP  launched  its 
much-hcraldcd  Centrino 
mobile  techm>logy  Iasi 
week.  But  unless  users  are 
willing  to  accept  relatively  slow 
Wi-Fi  access,  they  will  have  to 
wait  until  the  next  quarter  to 
get  notebooks  certified  by  In¬ 
tel  as  Centrino-compatiblc. 

Centrino  consists  of  a  newly 
designed.  Unv-power-drain 
Pentium-M  chip  set  and  a 
PRO /Wireless  mini-PCI  card 
(hat  handles  Wi-Fi  connectivi¬ 
ty.  Intel  will  nOer  ftnir  standard 
versions  of  the  Pcniium-M 
running  at  speeds  of  1.6. 1.5. 1.4 
and  IJ  GHz. 

Intel  has  touted  the  W'i-Fi 
capabilities  of  its  Centrino  ar¬ 
chitecture  and  has  made  high- 
profile  partrrerships  with  Wi-Fi 
public -access  networks  and 
operators  iQuickLink  .^>29). 
But  Centrino’s  buUl-in  Wi-Fi 
can  access  only  older  802.11b 
w'ireJess  networks,  which 
transmit  raw  data  at  a  rate  of 
IIM  bil/scc.  It  doe.sn‘l  support 
the  Wi-Fi  802.11a  or  802.11g 
standards,  both  of  which  pn>- 
vidc  54M  bit/sec.  data  specd.s. 

"Wc  had  origiruUy  planned 
to  introduce  Centrino  with 
dual-band,  both  *a'  and  ‘b.' " 
Daniel  Francisco,  an  Intel 
spokesman,  said  on  Friday. 
"We  announced  in  December 
that  the  dual  band  would  be 
delayed  due  lo  us  having  to  do 
some  additional  engineering 
on  'a.'  Wc  will  have  dual-band 
(802.il  a  and  b)  out  by  ih(‘  end 
of  the  second  quarter  of  2003. 
As  for  'g'  we  believe  an  a/b/g 
iri-band  solution  makes  sense, 
and  we'il  look  at  it  when  the 
‘g'  specification  is  completed.* 
TTic  Wi-Fi  Alliance  expects  to 
start  certifying  802.ng  prod¬ 
ucts  this  summer. 

Rich  Redclfs,  president  and 
CEO  of  Alheros  Communica¬ 
tions  Inc.,  a  wireless  LAN  chip 


manufacturer  in  Sunnyvale. 
Calif.,  said  notebook  vendors 
have  thi'  option  of  using  the 
Pcniium-M  priKcssor  that's  at 
the  heart  of  the  Centrino  tech¬ 
nology  with  Athcn>s  802.na/b 
WLAN  chip  sets  now.  aiKl  with 
802-ng  or  combined  802.11a/b/g 
chip  sets  in  the  near  future. 

Major  hardware  manufac¬ 
turers  (hat  have  signed  on  to 
use  the  Athen>s  802.11  chip 
sets  include  Hewlett-Packard 
Co..  IBM.  Toshiba  Corp.  and 
NEC  Corp.  But  Intel  —  which 
is  backing  the  Centrino  launch 


with  a  S300  million  advertis¬ 
ing  campaign  —  won't  allow 
manufacturers  to  slap  a  “Cen- 
trino-compatiblc"  logo  on 
(heir  products  unless  they  in¬ 
corporate  both  the  Peniium-M 
prwessor  and  its  Wi-Fi  mod¬ 
ule.  IBM  and  HP.  in  addition 
to  olTering  (he  Atheros  option, 
are  among  the  top-tier  note¬ 
book  vendors  that  offer  fully 
compatible  Centrino  products. 

Many  large  enterprise  users 
view  Wi-Fi  as  a  business  es¬ 
sential.  Tony  Scott,  chief  tech- 
noUigy  officer  at  General  Mo¬ 


tors  Corp.,  said  he  plans  to 
support  thou.sands  of  traveling 
workers  with  Wi-Fi.  Scott 
called  the  increase  in  battery 
life  promised  by  Centrino  a 
"great  step  forward"  and  not¬ 
ed  that  GM  intends  to  upgrade 
wireless  LANs  in  its  plants 
from  802.11b  to  802.Ug. 

Analysts  expect  Intel  to 
eventually  incorporate  all 
throe  W'i-Fi  standards  into  the 
Centrino  architecture,  and 
they  view  that  as  the  begin¬ 
ning  of  the  end  of  outboard 
Wi-Fi  packaged  in  a  PC  Card. 
Keith  Waryas.  an  analyst  at 
IDC  in  Framingham,  Mass., 
said  the  use  of  PC  Cards  for 
wireless  LAN  connectivity 
"will  eventually  go  away"  as 
Centrino-cquipped  notebooks 
replace  older  models.  I 


Announces  devetoomenl 
of  the  'Banias*  low-pow«( 
fnoMeprocessof 


Forms  Comela  Networks  with 
AT&T  (kKp.  and  IBM  lo  develop 
a  nationwide  Wi-Fi  network 


Changes  nameof  motHie  processor  arctu- 
tecUire  horn  Banias  to  Ce^mo 


Expects  lo  offo  an  802  lla/b 
mim-PD  card  on  Cenlnrw. 


AnnoutKes  that  Banias  wiH  use  a  nvn-PCI  card  that  can  support  only  802 11b  Wl-Fi 
because  of  engineering  (xobienis  with  a  chip  meant  to  support  the  B02  Tia  slarxtard 


Launches  Centrmo  with  an 
602 11b  mmr-PCI  canl 


Microsoft  Steers  y^ps 
Toward  Collaboration 


BV  MARC  L.  BOMOINt 

Microsoft  Corp.  this  week  will 
detail  plans  lo  push  out  tech¬ 
nology  designed  to  simplify 
software  integration  and  to 
support  inen-ased  collabora¬ 
tion  capabilities  for  users  of 
its  business  appltcations. 

At  its  Convergence  2003  con¬ 
ference  in  Orlando.  Microsoft 
Mill  try  tn  sell  users  on  the  idea 
(hat  its  applications  can  be 
used  lo  integrate  various  busi¬ 
ness  processes,  sard  Lynne 
StocKstad,  general  manager  of 
global  solutions  at  Microsoft's 
busirvess  solutions  unit.  For  ex¬ 
ample.  companies  could  link 
their  employees  and  business 
partners  in  automated  work¬ 
flows  that  support  customer  re- 
latioaship  management  (CRM), 
supply  chain  operations  and 
other  activities,  she  said. 

As  pan  of  the  strategy.  Mi¬ 
crosoft  M'ill  unveil  integration 
and  user-interface  enhance¬ 


ments  to  simplify  development 
of  collaborative  applications, 
Siockstad  said.  She  was  .sketchy 
on  the  details  but  did  say  the 
plan  includes  adding  an  end- 
user  portal  or  a  similar  role- 
based  interface  that  will  give 
workers  a  view  of  the  business 
functions  relevant  to  their  jobs. 

MudngHl^ 

Integration  is  a  major  issue  for 
Tom  Racca.  vice  president  of 
sales  and  marketing  at  iQ  Net- 
Solutions  Inc.  in  Wesiboro. 
Mass.  IQNctSolutions,  which 
makes  telecommunications 
equipment,  runs  Microsoft's 
Great  Plains  back-oflicc  appli¬ 
cations  and  its  new  CRM  soft¬ 
ware  in  a  hosted  installation. 

Racca,  who  plans  to  attend 
the  Convergence  conference, 
said  it's  particularly  important 
for  him  to  sec  continued  im¬ 
provements  in  the  integration 
between  the  Microsoft  CRM 


and  Graat  Plains  applications. 
He  said  he  also  wants  to  com¬ 
bine  the  diflcR'nt  functiorui  of 
the  applications  into  a  port.al- 
style  user  interface  and  open 
up  the  s>'stcms  to  his  compa¬ 
ny's  business  partners. 

The  integration  moves 
planned  by  Microsoft  are  key 
requirements  for  the  midsize 
companies  that  the  software 
vendor  is  targeting  with  its  ap- 
plic3lion.s.  said  Katherine 
(ones,  an  analyst  at  Aberdeen 
Gn>up  Inc.  in  Boston. 

Companies  at  (hat  level  of¬ 
ten  are  plagued  by  continued 
reliance  on  repetitive  manual 
processes  that  bog  down  pro¬ 
ductivity,  such  as  having  to 
copy  customer  information 
from  one  application  lo  anoth¬ 
er,  Jones  said.  Adding  a  portal 
isn’t  a  unique  step  on  Micro¬ 
soft's  part,  but  it  could  help 
end  users  do  their  jobs  mora 
cfTiciently,  she  said,  t 
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Microsoft  to  Change  Server  Software  Pricing 


New  model  eould  mean  siyriificant  aist 
savings  for  customers  that  use  partitioning 


BY  JAMES  NICCOLAt 

Microsoft  Corp.  plans  to  adjust 
its  per-processor  licensing 
model  to  provide  relief  for 
customers  that  run  its 
software  on  parti*  IWI 

lioned  servers,  a  UA 

Microsoft  executive 
said  last  week. 

On  April  1.  the  company  will 
introduce  pcr-proccssor  li¬ 
censing  terms  for  eight  server 
products  to  provide  a  fairer 
option  for  customers  that  use 
partitioning,  said  Rebecca 
LaBrunerie.  head  of  Micro¬ 
soft’s  licensing  program.  Un¬ 
der  the  new  system,  business¬ 
es  will  pay  for  only  the  proces¬ 
sors  that  the  software  runs  on. 
rather  than  for  every  proces¬ 
sor  in  a  partitioned  server, 
she  said. 

The  change  could  lead  to 
significant  cost  savings  for 
customers  that  use  partition¬ 
ing  to  segregate  applications 
running  on  a  single  multi¬ 
processor  server,  said  Alvin 
Park,  an  analyst  at  Gartner 
Inc.  in  Stamford.  Conn.  Some 
of  those  customers  have  com¬ 
plained  that  Microsoft's  cur¬ 
rent  pricing  system  requires 
them  to  pay  a  license  fee  for 
each  processor  on  their  scr\'- 
ers.  even  though  the  software 
may  not  actually  be  running 
on  all  of  them.  Park  said. 

Using  partitioning  to  cut  H- 
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censing  costs  can  be  complex 
from  a  technology  standpoint, 
but  the  new  model  offers  the 
potential  for  big  savings  for 

some  customers.  Park 
said.  The  issue  main- 
3IW  ly  affects  customers 
that  consolidate  sin¬ 
gle-  or  dual-processor  servers 
onto  larger  systems  a.s  a  u*ay  of 
cutting  hardH'are  and  s>’stcms 
management  costs,  he  said. 

LaBrunerie  said  the  now 
model  will  be  “a  lot  more  fair 
and  logical"  than  the  current 
system  for  customers  that  use 
partitioning.  Server  consoli¬ 
dation  is  a  growing  trend 
among  businesses  seeking 
u'a>'S  to  cut  IT  costs,  and  the 
new  pricing  seeks  to  address 
that,  she  said. 

More  Flexibility 

John  Bielec,  CIO  at  Dre.xel 
University  in  Philadelphia, 
said  the  new  pricing  structure 
will  likely  help  the  university 
cut  costs  as  it  continues  to  re¬ 
place  and  consolidate  servers. 

The  new  pricing  “will  give 
us  flexibility  in  terms  of  mov¬ 
ing  I  Microsoft  server  applica¬ 
tions]  from  smaller  to  larger 
servers  and  not  getting  hit 
with  larger  costs"  for  licensir^ 
he  said.  Drexel  uses  two  of  the 
affected  Microsoft  server 
products,  SQL  Server  2000 
and  BizTalk  Server  2002.  Drex- 
cl  replaces  about  one-third  of 
its  hardware  annually,  Biclec 
said,  adding  that  he  expects 
the  savings  from  the  new  pric¬ 
ing  structure  to  be  reflected  in 
his  budget  after  July  1. 

The  model  eventually  will  be 
extended  to  Microsoft's  Win¬ 
dows  2000  server  operating 
system.  LaBrunerie  said.  The 
company  recently  acquired 
technology  from  Connectix 
Corp.  in  hopes  of  providing 
software  that  will  let  a  single 
Window.^  server  act  as  a  series 
of  separate  machines.  Micro¬ 
soft  will  pricing  changes 

for  Windows  2000  when  that 
virtualization  software  is  re¬ 
leased.  LaBrunerie  said. 


The  ^e^^'  model  will  also  ap¬ 
ply  to  earlier  versions  of  the 
eight  Microsoft  products  af¬ 
fected  by  the  change,  although 
the  company  won't  offer  re¬ 
funds  to  customers  that  have 
already  paid  for  software 
they're  running  on  panitioned 
servers.  Those  customers  will 
be  able  to  reuse  licenses  that 


are  freed  up  by  the  new  sys¬ 
tem.  Micn>soft  said.  For  exam¬ 
ple.  under  the  current  nwidel,  a 
user  running  SQL  Server  on  a 
partitioned  eight-way  server  Is 
paying  for  eight  processor  li¬ 
censes.  even  though  the  soft¬ 
ware  might  be  running  on  only 
four  processors.  When  the 
new  model  kicks  in  on  April  1. 


that  customer  will  have  four 
unused  SQL  Sen-er  licenses  in 
hand.  laBruneric  said. 

The  changes  apply  onl>'  to 
customers  t>n  pcr-pnxressor 
licenses  and  don't  affect  the 
client /server  access  license 
mi>dcl.  Park  said.  # 


A'iccolai  writes  for  the  IDG 
N’ews  Service.  Computer- 
world's  ToddR.  Weisscon- 
trihuivd  to  this  report. 


SAP  Bundles  B/3,  Other 
Apps  in  New  ERP  Release 

portani  elements  which  have 
been  missing  from  traditional 
F-RP  offerings."  he  said. 

MySAP  ERP  also  includes 
support  for  automating  back- 
office  administrative  seivices. 
such  as  management  of  real 
estate,  travel  expenses  and 
payments  of  commissions  and 
other  incentives,  said  Jim 
Shepherd,  an  analyst  at  AMR 
Research  Inc.  in  Boston. 

The  new  release  is  available 
now.  SAP  also  announced  a 
professional  .services  automa¬ 
tion  application  designed  to 
let  companies  in  service  in¬ 
dustries  automate  the  manage¬ 
ment  of  their  operations. 


BY  MARC  L.  SONOINI 

SAP  AG  last  week  said  it's 
rolling  out  a  beefed-up  version 
of  its  enterprise  resource  plan¬ 
ning  (ERP)  software  aimed  at 
users  who  arc  daunted  by  the 
prospect  of  buying  and  in¬ 
stalling  a  full  set  of  the  com¬ 
pany's  applications. 

Announced  at  the  CeBIT 
conference  in  Hanover, 
Germany.  mySAP  ERP  is  the 
newest  release  of  SAP’s  fl^- 
ship  R/3  st>ftware.  The  pn>d- 
uct  bundles  R/3  w'ilh  applica¬ 
tions  that  were  previous!)' 
sold  separately,  including 
SAP's  portal  and  business* 
(o-business  markctpbcc 
software. 

l'>cborah  Schmidt,  global 
vice  president  of  enterprise 
solutions  at  SAP.  said  mySAP 
ERP  users  will  also  get  built-in 
functions  from  other  applica¬ 
tions.  such  as  tools  for  analyz¬ 
ing  human  rescHirces  and  fl- 
nancial  data.  SAP  is  exploiting 
the  Net  Weaver  integration 
technology  it  announced  in 
January  to  add  functionality  to 
the  ERP  software  without  re¬ 
quiring  users  to  buy  licenses 
for  all  the  pieces  of  Us  mySAP 
suite.  Schmidt  said. 

She  added  that  there  will  be 
special  pricing  for  mySAP 
ERP  but  didn't  disclose  details. 

Tom  Ackerman,  senior  di¬ 
rector  of  business  information 
systems  at  R/3  user  Symbol 
Technologies  Inc.  in  Holts- 
ville,  N.Y.,  said  the  plans  out¬ 
lined  by  SAP  should  provide 
increased  integration  capabili¬ 
ties  and  more  user  interface 
flexibility.  Those  are  "two  tm- 


SAP  rival  l*c«)plcSi»ft  Inc. 
also  used  the  CeBIT  show 
to  .announce  an  integration 
move,  detailing  plans  to  pro¬ 
vide  links  to  instant  messaging 
and  coUaboraiton  technoUigy 
from  IBM.  Microsoft  Gorp. 
and  Yahoo  Inc.  in  its  end-user 
portal  and  other  applications 

Paola  Lubet.  vice  president 
of  marketing  for  PeopkSoft's 
AppCunnect  integration  tools, 
said  Version  8Jt  of  the  compa¬ 
ny's  Enterprise  P^vrtal  software 
will  also  include  new  capabili¬ 
ties  to  help  IT  managers  devel¬ 
op  intranet  sites  for  groups  of 
end  users  whr»  need  to  collabo¬ 
rate  with  one  another. 

The  pc«rTal  upgrade  will  be 
available  this  week,  although 
the  instant  messagmg  connec¬ 
tions  aren’t  due  until  the 
fourth  quarter.  Lubet  said.  I 


Plattner  Ends  Management  Role 


SAP  last  week  said  Hasso 
nattner.flsco-CEOandchair- 
man.  OM  up  those  jots 
aid  step  away  from  a  fuHime 
management  role  at  die  com¬ 
pany  he  helped  fouid  m  1972. 
Plattner,  who  wi  become  head 
of  SAP's  supervisory  board, 
spoke  witti  Corppufenioriid 
^ter  ttie  amouncement. 

WM  SAP's  stralagiG  (frac¬ 
tion  cliM§e  wImr  Hmlng 
Kifiniiann  beconiis  tbe 
solo  ceo?  I  don1  think 
80.  fve  worked  wftti 
Henning  for  21  yeais. 
and  we  set  out  the 
straleoyow  the  last 
years  tooettiar.  n  sti 
play  an  ackve  role  in  the 
form  of  giving  advioe. 


But  this  bme.  iNs  has  been 
the  way  we've  run  the  company 
*  noH^  barking  orders,  but  by 
convincing  people  lo  do  things. 
Pretty  much  we've  been  a  con- 
sensuB-itwen  company 

Whet  has  been  your  main 
cairtributlon  to  SAP?  I  ire  to 
play  the  oeabve  role  and  took 
the  iberty  10  five  aeaiivel)i  and 
livers  things  and,  wtfi  the  help 
of  coleagues,  bring  them  nlo 
production  and  make  money. 
hobeblynsllolhaL 
mybestablRystosee 
esrty  enough  when 
sotnettengisrBechmg 
Kspeakandtosbel 
dwikino  about  what  is 
Ihenexlthnolodo. 

-MwcL&Nvn 
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Ore.  Makes  Push 
For  Open  Source 

Fnistrattd  by  budoal  wms  and 
incvnpatible  IT  systems  among 
state  agencies,  an  Oregon  legis* 
laior  has  introduced  a  bill  that 
would  require  the  agencies  to 
consider  opei^source  software 
when  making  IT  purchases.  The 
idea,  said  Democratic  Rep.  Phil 
Barnhart,  is  to  offer  cheaper  and 
more  fleiible  options  to  govern¬ 
ment  departments.  (See  related 
story,  page  46.) 

IBM  to  Offer  Digital 
Surveillance  Hdp 

Looking  to  cash  in  on  increased 
demand  for  video  survelilance 
and  other  socurity-related  ser¬ 
vices,  IBM  said  last  week  that  it 
will  offer  services  to  help  com¬ 
panies  deploy  digital  vidto  sur¬ 
veillance  and  security  systems. 
Tfw  new  services  are  designed 
to  help  companies  make  a  tran¬ 
sition  from  older,  videotape- 
based  survelllence  systems  to 
IP-based  surveillance  networks. 


Red  Hat  to  Ship 
Midlevel  Server  OS 

Red  Hat  Inc.  last  week  an¬ 
nounced  a  midlevel  server  oper¬ 
ating  system  ki  a  bid  to  expand 
its  sales  beyond  its  Mgh-end.  en¬ 
terprise-focused  Advanced  Serv¬ 
er.  The  Red  Hat  Enterprise  Linux 
ES  product  is  designed  for  less 
heavy  lifting  than  Advanced 
Server,  which  has  been  renamed 
Red  Hat  Enterprise  Linux  AS. 

The  AS  product  runs  on  both  32- 
and  64-bit  systems. 


Short  Takes 

INFiNfSWITCH  CORP  and  LANE15 
SOFTWARE  INC  said  they're 
merging  in  order  to  burfdle  their 
products,  a  network 
switch  and  management  soft¬ 
ware  for  high-performance  serv¬ 
er  dusters. .  . .  A  study  from 
EVAMS  DATA  CORP  found  that 
51%  of  companies  in  North 
America  Uid  off  software  devel¬ 
opers  last  year. 


MARK  IIAI  i  ■  ON  I  HH  MARK 


Internet  2  Speed  Tricks 
May  HobHe  SAN . . . 

. . .  operations  in  the  data  center,  if  you  don't  take  precautioRs,  warns  Loki 
Jorgenson,  director  of  research  at  jaalaM  Technologies  Inc.,  a  network 
consultancy  in  Vancouver.  British  Columbia,  involved  in  Internet  2 
development.  Jorgenson  worries  that  the  emergence  of  large  packets 
(Jumbo  Frame  or  MTU  for  maximum  transmission  unit)  that  have 
been  used  to  set  "land  speed  records"  [CJuickLink  352371  on  Internet  2 
and  are  available  in  Gigabit  Ethernet  are  incompatible  with  the 


smaller  b>'tc-sizc  packets  Ln  your  run-of- 
the-mill  Kthemct.  He  points  out  that 
there's  “no  )umbo  MTU  standard  for 
Gi^E,"  and  vendors  can  set  the  packet 
sixes  from  16.000  to  2.600  bytes,  whereas 
1.500  bytes  is  the  set  limit  for  iUMB  and 
100MB  Ethernet.  Atx-ording  to  (oivenson. 
if  Gigabit  Ethernet  vendors  “don't  default 
to  1.500.  the  data  between  devices  might  tal 
into  bladt  holes."  The  most  likely  place  for 
problems  to  occur,  he  predicts,  is  inside 
the  data  center.  e.spccialty  in  a  SAN, 
which  is  likely  to  empU)y  the  higher- 
speed  network  gear.  During 
a  restore  of  data,  a  SAN  will 
likely  need  to  transmit  it  to 
a  server  with  lower-speed 
Ethernet,  forgensun  sug¬ 
gests  that  network  admins 
add  MTU  sizes  to  their  checklist 
of  must-do  tasks  when  in¬ 
stalling  Gigabit  Ethernet 
systems,  making  certain 
that  the  network  device 
with  capacity  for  the  small¬ 
est  packet  size  is  the  largest 
.MTU  for  your  entire  net¬ 
work.  Although  you  won't 
be  setting  any  land  speed 
records,  a  slower  speed  is 


better  than  no  speed  at  all.  •  Tonsof  EAI 
to(Hs  are  potsod  fm  spring  release.  See- 
Beyond  Technology  Corp.  in  Monrovia. 
Calif.,  on  March  31  will  ship  cGate  5.0  as 
part  of  its  Integrated  Composite  Applica¬ 
tion  Network  suite.  All  of  the  adapters 
have  been  rewritten  in  compliance  with 
the  Java  Connection  Architecture  and 
run  on  SecBeyond's  own  J2EE  app  server 
or  WebLogic  and  WebSphere  servers.  By 
lunc,  the  company  will  be  adding,  among 
ocher  parT.s  of  the  suite,  eVision  Studio 
10  for  Web  and  wIrMess  application  develop¬ 
ers.  who  get  flashy  GUI 
tools  to  help  them  link  new 
apps  to  business  logic  and 
workflow  rules.  •  Farther 
north  in  Pleasanton.  Calif- 
Commerce  One  Inc.  next 
Monday  will  ship  its  Com¬ 
posite  Process  Manage¬ 
ment  Platform,  Conductor 
6.0.  The  EAI  product  in¬ 
cludes  a  host  of  "process 
accelerators"  —  templates 
for  a  variety  of  vertical 
market  business  processes 
and  workflow  operaiions- 
Although  Conductor  6.0 
will  be  new.  its  product  her- 


w.  F  <us^r-  plagued  tvrth 

aiedi  ir*iHfferefic?  .ind 
weak  and  nverlaopoig 
cuvi’iage  can  be 
equipp4-d  to  pinpoint 
them  when  ( -  m 

Sa'dioga.  Cold  '.nipMts 
Ekahju  fide  Su.’vev  10 
monitoring  tool  on  Marrh 
28  The  sohwarewill 
wgrh  on  a  laptop  ang  cn'd 
SB95  mSI  545dviu 
want  a  GPS  add-on. 


itage  warrants  the  6.0  convention,  argues 
Narry  Singh,  chief  marketing  officer.  As 
an  aside,  he  says  a  recent  company  layoff 
puts  the  company  back  on  solid  ground 
‘Nrith  money  in  the  bank."  A  far  better  place 
to  keep  it  than  the  CEO's  mattress.  •  If 
you're  one  of  those  brave  souls  pushing 
ahead  with  Web  .services  applications, 
you'll  need  a  tool  to  identify,  monitor  and 
manage  the  interdependencies  among 
those  services.  Or  youll  certainly  need  one 
when  somethirtg  goes  wrong.  That's  prompt¬ 
ing  Actional  Corp.  in  Mountain  View. 
Calif-  to  make  available  March  28  a  slew 
of  new  products  to  keep  an  eye  on  prolif¬ 
erating  Web  services.  Actional's  Looking 
Glass  server  lets  you  set  policies  and  re¬ 
ceive  usage  statistics  and  service  alerts 
through  its  Active  Agents,  which  run  on 
servers  delivering  Web  services.  lames 
Phillips.  Actional’s  senior  vice  president 
of  marketing,  claims  that  these  agents 
consume  only  10  msec  of  overhead  for 
each  transaction.  But  if  you  think  that's 
too  steep  of  a  performance  prke  to  pey.  you 
can  u.se  the  new  4.0  version  of  the  com¬ 
pany's  SOAPstation  proxy  server,  which 
also  ships  March  28.  It  can  implement 
the  policies  you  set  in  Looking  Gias.s  and 
manage  Web  services  trafTic  from  a  cen¬ 
tral  server.  •  Thinking  about  outsourcing 
your  Oracle  database  administrator's 
work?  Well,  you  might  have  already  come 
across  Newton.  Mass.-based  Ntirety  LLC. 
It  ha.s  been  remotely  administering  Ora¬ 
cle  databases  for  about  two  years.  Maybe 
Oracle  isn't  your  problem.  How  about 
Unix?  This  week.  Ntirety  is  announc'mg 
that  it's  ready  to  remotely  run  Unix  sys¬ 
tems.  And  by  the  end  of  2003.  claims 
company  founder  and  CEO  Mike  Corey, 
he'll  be  set  to  remotely  oversee  Microsoft 
SQL  Server  "lo  hiiKisight.’'  he  says.  “I'd 
have  started  with  SQL  Server."  Why? 
"They  ate  less  sophisticated  users,  and  there's 
more  of  them."  Advice  to  Mike:  Stay  away 
from  Redmond  for  a  while.  I 


New  CEO  to  Take  Helm  at  Computerworld 


I  eVOONTSHNANT 

International  Data  Group. 

I  C4>mputefworld  Inc.'s  parent 
I  company,  last  week  an¬ 
nounced  the  appointment  of 
Robert  P.  Carrigan  as  publish- 
■  er.  president  and  CEO  of  Com¬ 
puterworld.  ElTeciive  April  7. 
Carrigan  will  be  responsible 
I  for  all  business  activities  of 
I  the  print  publication,  as  well 
'  as  online,  events  and  research 
operations. 

Carrigan.  37,  is  no  stranger 
I  to  Boston-based  IDG.  having 


held  various  executive  posi¬ 
tions  at  the  company  through¬ 
out  the  'Ws.  including  four 
years  as  vice  president  and  as¬ 
sociate  publisher  of  PC  World. 
His  move  to  Framingham, 
Mass.'ba.sed  Cximputerworld 
will  follow  four  years 
spent  at  America  On¬ 
line  Inc.,  where  he  is 
senior  vice  president 
of  interactive  market¬ 
ing. 

At  AOL.  Carrigan 
led  the  Key  Accounts 


Group,  which  manages  Dulles, 
Va.-ba$ed  AOL's  largest  and 
most  strategic  accounts. 

Though  his  aim  is  to  “create 
new  and  better  ways  to  deliver 
informaiion  services  to  IT 
leaders.”  Carrigan  said,  read¬ 
ers  shouldn't  expect 
any  drastic  changes. 

"What  1  can  tell  you 
is  that  we  will  contin¬ 
ue  to  listen  to  the 
readers,"  he  said. 

“My  sense  is  that 
given  all  of  the  awards 


and  the  accolades  and  the 
reach  that  has  been  deter¬ 
mined  by  independent  studies. 
Computeru'or/d  is  in  fantastic 
shape  from  an  editorial  per¬ 
spective,”  he  said. 

Just  last  week.  Computer- 
world  received  the  Jesse  H. 
Neal  National  Business  Jour¬ 
nalism  Award  in  the  “Best 
News  Coverage"  category  for 
investigative  reports  last  year 
on  security  problems  associat¬ 
ed  with  wireless  LANs  [Quick- 
Link  26374].  Computerworld 
was  also  a  FmaUst  in  the  "Best 
Web  Site"  and  "Best  Staff- 
Written  Editorial"  categories.  I 
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Ore.  Makes  Push 
For  Open  Source 

FnaliiM  by  kudgM  WOW  and 
incoiRpibUo  CT  mctoms  amono 
staloaoaficiia,aBOrioofitogii- 
lalor  haa  Mrodvcad  a  M  that 


whw  waWm  fT  purchaaaa.  Hw 
Maa.  wM  DoaMcralic  Rap.  PM 
Banihail,  M  to  oMor  chaafNr  and 
moro  iwftla  opHona  to  govom* 
man!  dapartmonto.  (Soa  rMatod 
story,  pip*  46.) 


IBM  to  Offer  Digitai 
SurveianceH^ 

Utoktop  to  eaah  in  on  toGraaaad 
danMnd  far  vtdao  aurvofltonco 
MdsdMraacurilyfatotodaor- 
vtooa.  BM  atod  laat  wooh  tost  H 
adi  ofiar  aontow  to  halp  conr* 
pantoa  daptoy  dpNaf  tMoo  aur- 
valanco  and  aaeyrity  ayalama. 
Tho  aow  aandcw  art  daaiBnod 
to  Mp  eompaniw  natoi  a  Iran* 
atton  frora  oldar.  sfdaolapo- 
baoad  aarvoManca  mitania  to 


Red  Hat  to  Ship 
Midlevel  Ser^  OS 

Rad  Hal  Inc.  Iasi  wook  an* 
noMKad  a  ndJoool  sonar  opor* 
atteg  lyitoia  In  a  bid  to  aipand 
Ms  salia  beyond  tta  Mph-and.  an* 
larprlsa  facimad  kdaancad  Sanr* 
ar.  Tho  Rto  Hal  Eatoipriw  Unui 
ES  product  ia  datopnad  lor  laaa 
ha^  mnp  torn  Mvanoad 
Sarvar.  wMch  baa  baan  ranamad 
RmI  Hat  &d«priM  Unui  AS. 

Tha  AS  piedud  runa  on  both  32* 
aito  64-bit  lyatowi. 


Short  Takes 

MFPPStorTOt  CORP.  and  UWE15 
SOFTWARE  MC.atodtoay'ra 
iMTpbip  to  ordar  to  bundta  tooir 
bifbdBand  prodactot  a  aatwerfc 


arektan.  ...Aatodyfrow 
EVANS  0A1A  CORP.  faand  that 
SWbafrniapwtoelBltorto 
Anwrioa  Wd  off  aoRwara  daval* 
eparalaatyoar. 


MARK  HALL  -  ON  THE  MARK 

Internet  2  Speed  Tricks 
f^y  HobHe  SAN . . . 

. . .  operations  in  the  data  center,  if  you  don't  taka  procautkNis.  warns  Loki 
Jorgenson,  director  of  research  at  jaaiaM  Technologies  Inc.,  a  network 
consultancy  in  Vancouver.  British  Columbia,  involved  in  Internet  2 
development  Jorgenson  worries  that  the  emergence  of  lai^e  packets 
(Jumbo  Frame  or  MTU  for  maximum  transmission  unit)  that  have 
been  used  to  set  “land  speed  records’*  (C^ickLink  352371  on  Internet  2 
and  are  available  in  Gigabit  Ethernet  are  incompatible  with  the 


smaller  byte*size  packets  in  your  rxin-or* 
the-mili  Ethernet  He  points  out  that 
there's  "no  Jumbo  MITJ  standard  for 
GigE,"  and  vendors  can  set  the  packet 
sizes  from  16JX)0  to  2,600  bytes,  whereas 
1,500  bytes  is  the  set  limit  for  10MB  and 
100MB  Ethernet.  According  to  Jorgenson, 
if  Gigabit  Ethernet  vendors  "don't  defituli 
to  1.SOO.  Aa  data  bctwwn  dmtew  ndpM  M 
into  btocfc  hotoa.*  The  most  likely  place  for 
problems  to  occur,  he  predicts,  is  inside 
the  data  center,  especially  In  a  SAN. 
which  is  likely  to  employ  the  higher* 
speed  network  gear.  During 
a  restore  of  data,  a  SAN  will 
likely  need  to  transmit  it  to 
a  server  with  lower-speed 
Ethernet.  lorgenson  sug* 
gests  that  network  admins 
add  blTU  stew  to  todr  dwekM 
of  must-do  tasks  when  in¬ 
stalling  Gigabit  Ethernet 
systems,  making  certain 
that  the  network  device 
with  capacity  for  the  small¬ 
est  packet  size  Is  the  largest 
MTU  for  your  entire  net¬ 
work.  Although  you  won't 
be  setting  any  land  speed 
records,  a  slower  speed  is 


better  than  no  speed  at  alL  ■  Tons  of  EAl 
toola  ara  potood  for  spring  release.  See- 
Beyond  Ikchnology  Corp.  in  Monrovia. 
Calif,  on  March  31  will  ship  eGate  SX>  as 
part  of  its  Integrated  Composite  Applica¬ 
tion  Network  suite.  All  of  the  adapters 
have  been  rewritten  in  compliance  with 
the  Java  Connection  Architecture  and 
run  on  SeeBeyond’s  own  J2EE  app  server 
or  WebLogic  and  WebSphere  servers.  By 
Jur>e.  the  company  will  be  adding,  amorrg 
other  parts  of  the  suite,  eVbion  Studio 
S.0  for  VM  and  wMaw  ippPeatioo  dswlop- 
srs,  who  get  flashy  GUI 
tools  to  help  them  link  i>ew 
apps  CO  business  logic  and 
woritflow  rules.  ■  Farther 
Ckoith  in  Pleasanton,  Calif, 
Conunerce  One  Inc.  next 
Monday  will  ship  its  Com¬ 
posite  Process  Manage¬ 
ment  ^tform.  Conductor 
6.0.  The  EAI  product  in¬ 
cludes  a  host  of  "process 
accelerators"  —  tempbtes 
for  a  variety  of  vertical 
market  business  processes 
and  workflow  operations. 
Although  Conductor  6J0 
will  be  new,  its  product  har- 


Itaga  warranto  to*  6.0  convention,  argues 
Narry  Singh,  chief  marketing  oflicer.  As 
an  aside,  he  says  a  recent  company  layoff 
puts  the  company  back  on  solid  ground 
*\rito  monsy  in  tha  bank.”  A  far  better  place 
to  keep  it  than  the  CEO’s  mattress.  •  If 
you're  oite  of  those  brave  souls  pushing 
ahead  with  Web  services  applicatioas, 
you'll  need  a  tool  to  identify,  monitor  and 
manage  the  interdependencies  among 
those  services.  Or  youl  cartoMy  naad  orw 
whan  aometotoQ  goaa  wrong.  That’s  prompt¬ 
ing  Actional  Corp.  in  Mountain  View, 
Calif,  to  make  available  March  26  a  slew 
of  new  products  to  keep  an  eye  on  prolif¬ 
erating  Web  services.  Actional's  Looking 
Glass  server  lets  you  set  policies  and  re¬ 
ceive  usage  statistics  and  service  alerts 
through  its  Active  Agents,  which  run  on 
servers  delivering  Web  services.  James 
niiUips.  Actional's  senior  vice  president 
of  marketing,  claims  that  these  agents 
consume  only  10  msec  of  overhead  for 
each  transaction.  But  if  you  think  that's 
too  ttoap  of  ■  parformanca  prica  to  pay.  you 
can  use  the  new  4.0  version  of  the  com¬ 
pany's  SOAPstation  proxy  server,  which 
also  ships  March  28.  It  can  implement 
the  policies  you  set  in  Looking  Glass  and 
manage  Web  services  traffic  from  a  cen¬ 
tral  server.  ■  Thinking  about  outsourcing 
your  Oracle  database  administrator’s 
work?  WelL  you  might  have  already  come 
across  Newton.  Mass. -based  Ntirety  LLC 
It  has  been  remotely  administering  Ora¬ 
cle  databases  for  about  two  years.  Maybe 
Oracle  isn't  your  problem.  How  about 
Unix?  This  week.  Ntirety  is  announcing 
that  it's  ready  to  remotely  run  Unix  sys¬ 
tems.  And  by  the  end  of  2003,  claims 
company  founder  and  CEO  Mike  Corey, 
he’ll  be  set  to  remotely  oversee  Microsoft 
SQL  Server.  "In  hindsight,”  he  says,  "Fd 
have  started  with  SQL  Server."  Why? 
‘Thay  are  Im  sophtoBcatod  UMTS,  Mid  tosra's 
moraaftoam.*  Advice  to  Mike:  Stay  away 
from  Redmond  for  a  while.  I 


New  CEO  to  Take  Helm  at  Computerwoiid 


•V  DON  TCNNANT 

International  Data  Group. 
Computerworld  lnc.’8  parent 
company,  last  week  an¬ 
nounced  the  appointment  of 
Robert  P.  Carri^  as  publish¬ 
er.  president  and  CEO  of  Com¬ 
puterworld.  Effective  April  7, 
Carrigan  will  be  responsible 
for  all  business  activities  of 
the  print  publication,  as  well 
as  online,  events  and  research 
operations. 

Carrigan,  37,  is  no  stranger 
to  Boston-based  IDG,  having 


held  various  executive  posi¬ 
tions  at  the  company  through¬ 
out  the  *90$.  including  four 
years  as  vice  president  and  as¬ 
sociate  publisher  of  PC  World. 
His  move  to  Framingham. 
Mass.-based  Computerworld 
will  follow  four  years 
spent  at  America  On¬ 
line  Inc.,  where  be  is 
senior  vice  president 
of  interactive  market¬ 
ing. 

At  AOL,  Carrigan 
led  the  Key  Accounts 


Group,  which  manages  DuUes, 
Va. -based  AOL's  largest  and 
most  strategic  accounts. 

Though  his  aim  is  to  "create 
new  and  better  ways  to  deliver 
mformation  services  to  IT 
teaders,"  Carrigan  said,  read¬ 
ers  shouldn't  expect 
any  drastic  chaiiges. 

''What  I  can  tell  you 
is  that  we  will  contin¬ 
ue  to  listen  to  the 
readers,"  he  said. 

"My  sense  is  that 
given  all  of  the  awards 


and  the  accolades  and  the 
reach  that  has  been  deter¬ 
mined  by  independent  studies, 
Computerworld  is  in  fantastic 
shape  from  an  editorial  per¬ 
spective,”  be  said. 

Just  last  week.  Computer- 
world  received  the  Jesse  R 
Neal  National  Business  Jour¬ 
nalism  Award  in  the  "Best 
News  Coverage"  category  for 
investigative  reports  last  year 
on  security  problems  associat¬ 
ed  with  wireless  LANs  [Quick- 
Link  26374).  Computerworld 
was  also  a  finalist  in  the  "Best 
Web  Site"  and  "Best  Staff- 
Written  Editorial"  categories.  I 


MAGIC  GENIE  LAMP 

Can  grant  three  wishes.  At  your  command. 

Operates  on  oil,  hand  nibbing  and  suspended  disbelief. 
Brass-based.  Mysterious  and  powerful. 

Legendary  tall  tale,  completely  100%  imaginary.  Genie-driven. 
Magic  Genie  Lamp  is  not  presently 
available  in  stores,  now  or  ever. 

1^5. 


THE  NEW  IBM  (©server  iSeries' 

Can  grant  on/off  added  capacity.'  On  demarui. 
Operates  easily  with  Windowsf  Linux®  and  OS/400f 
Copper-based.  Simple  and  powerful. 

Easy  to  use,  with  self-healing,  self-managing  capabilities. 
For  more  on  iSeries  and  the  on  demand  era. 
visit  toni.com/eserver/genie 


@  business  on  demand 
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New  IBM  iSeries  Pricing 
Won’t  Benefit  All  Users 


10  MMiaMUMnkn.MI 


‘Sticker  shock’ 
could  await  small 
and  midsize  firms 

BT  JAIKUMAB  VIJAVAN 

<ND4AMAPOLIS 

OT  ALL  USERS  of 
IBM's  iSeries  sys¬ 
tems  will  besiefit 
from  the  new  sofr- 
ware  pricing  and  upgrade  op¬ 
tions  the  company  amtounced 
in  January,  according  to  users 
at  (be  Conunon  trade  show 
held  here  last  week. 

While  the  changes  generally 
reduce  complexity  aiKl  in¬ 
crease  cost-effectiveness, 
some  small  and  midsize  shops 
could  free  unexpected  price 
increases  as  a  result  of  the 
changes,  users  said. 

‘’Overall,  it's  a  very  good  ef¬ 
fort."  said  ten  R.  EclUrt,  IT  di¬ 
rector  at  ftin’s  Formal  Wear 
Ca  to  Trenton,  lU.  “But  there 
are  some  customers  who  will 
get  hurt  from  it" 

"It's  fine  for  what  we  are  do¬ 
ing,  but  rm  not  sure  it  will 
worit  for  everybody."  added 
Michael  Watson,  e-commerce 
manager  at  Caihatt  Inc.,  a 
clothing  manufacturer  in 
Dearborn,  Mich. 

Ian  Jarman,  an  IBM  pricing 
executive,  last  week  acknowl¬ 
edged  that  some  users  could 
see  price  increases  in  moving 
to  the  new  models.  But  he  said 
the  Charlies  were  made  in  re¬ 
sponse  to  long-standing  de¬ 
mands  by  users  for  less<om- 
plex  license  structures. 

Impact  Varies 

The  impact  of  the  changes  will 
vary  dependii^  oa  “where  you 
were  buying  in  the  previous 
pricing  range  and  where  you 
will  be  buyii^  in  the  new 
range;"  Jarman  said.  But  for 
most  users,  he  said,  the  move 
should  be  a  positive  one. 

IBM  to  January  announced  a 
major  pricing  change  aloi^ 
with  several  new  iSeries  hard¬ 
ware  models  —  previously 


known  as  AS/400  .systems  — 
featuring  a  wide  range  of 
integrated  middleware  prod¬ 
ucts  (Quicklink  ^717]. 

Users  that  upgrade  their 
systems  to  the  new  models 
will  have  the  option  of  choos¬ 
ing  either  a  Standard  Edition 
or  an  Enterprise  Edition  soft¬ 
ware  package.  The  Standard 
Edition  offers  a  bundled  data¬ 
base,  an  on/off  capacity-on- 
demand  feature  and  partition¬ 
ing  capabilities.  But  users 
won't  have  the  ability  to  run 
green-screen  applications  — 
or  interactive  workloads  —  on 
their  iSeries  systems. 

Enterprise  Edition  users  pay 
a  higher  upfront  fee  for  a 
wider  set  of  middleware  prod¬ 
ucts  and  the  ability  to  use  the 
entire  capacity  of  their  iSeries 
systems  to  run  interactive 
workloads. 

According  to  Jarman,  the 
new  pricing  structure  allows 


SV  JAIKUMAR  VIJAVAM 

A  new  automated  metering 
technology  announced  by 
Hewlett-Packard  Co.  last  week 
builds  on  the  company’s  ef¬ 
forts  to  give  users  the  ability 
to  pay  for  hardware  based  on 
actual  measured  usage. 

But  companies  will  need  to 
buy  at  least  four  of  HP's  high- 
end  Superdome  servers  and 
commit  to  using  at  least  25% 
of  the  overall  capacity  on  each 
to  be  eligible  for  the  new  me¬ 
tering  product. 

Tlve  metering  capability  will 
let  users  more  closely  align 
their  hardware  costs  with  ac¬ 
tual  system  utilization,  .said  Irv 
Rothman.  CEO  of  HP’s  finan- 
cial  services  organizatioa 
which  will  deliver  the  technol¬ 
ogy  to  users. 


(BM'S  jSERIES 


New  License  Model 

■  Biminates  mtetaclive  features. 

■  Provides  users  one  price  for  un* 
restricted  (yeen-SDeen  use. 

•  Gives  users  one  software  tier. 

■  Offers  on/off  capacity-on- 
demand  features. 


most  users  to  get  far  more 
green-screen  processing  pow¬ 
er  for  substantially  less  money 
than  they  would  have  paid  un¬ 
der  the  previous  license  model 
It  also  eliminates  the  perfor¬ 
mance  caps  and  complexity  as¬ 
sociated  with  the  previous  mul¬ 
titiered  pricing  structure.  But 
some  users,  particularly  those 
with  smaller  workloads,  will 
find  little  benefit,  users  said. 

Because  of  the  way  the  pric¬ 
ing  is  structured  now.  a  com¬ 
pany  with  a  relatively  small 


It  will  allow  users  to  keep 
extra  capadty  available  at 
hand  but  pay  for  the  capacity 
only  when  it  is  actually  used. 

"It  enables  customers  to 
lower  their  total  cost  of  own¬ 
ership  and  enhance  their  re¬ 
turn  on  IT.”  Rothman  claimed. 

The  metering  system  ex¬ 
pands  upon  technology  that 
HP  has  offered  since  t^  roll¬ 
out  of  its  first  Superdome 
servers  in  late  2(WQ.  Earlier 
HP  pay-per-usc  metering 
products  kept  track  only  of 
whether  a  CPU  was  on  or  off 
and  provided  a  monthly  usage 
average  on  that  basis. 

The  latest  version  sits  be¬ 
hind  a  company's  Hrewall  and 
determines  how  much  of  a 
CPU's  power  is  being  used 
every  five  minutes.  A  monthly 


lOO-commercial-processor- 
workload  interactive  require¬ 
ment.  for  instance,  could  be 
forced  to  sign  up  for  the  enter¬ 
prise  package  on  a  higher-end 
box,  even  if  the  unlimited 
green-screen  ability  that 
comes  with  it  isn't  needed, 
Eckert  said. 

"It  would  be  overkill  for 
them,”  he  said. 

‘State  of  Hux' 

Only  a  "small  subset  of  ac¬ 
counts”  are  likely  to  need  the 
unrestricted  grccn-scrcen  use 
promised  by  the  new  pricing 
structure,  said  Jeffrey  Corey,  a 
regional  sales  manager  at 
Computer  Configuration  Ser¬ 
vices,  an  IBM  business  partner 
in  Indianapolis.  Others  are 
still  in  a  "state  of  flux”  over 
whether  to  go  with  the  Stan¬ 
dard  Edition  and  Web-enable 
their  green-screen  applica¬ 
tions.  or  to  choose  the  Enter- 


average  is  calodated,  and  cus¬ 
tomers  are  billed  based  on  av¬ 
erage  percentage  of  CPU  pow¬ 
er  used. 

All  of  the  CPU  utilization 
data  is  automatically  collect¬ 
ed,  encrypted  and  transmitted 
to  an  HP  billing  engine  with¬ 
out  any  user  intervention  or 
administrative  overhead, 
according  to  Rothman. 


AutomaticaRy 
caatures  CPU  utiKzatwn  rates. 

The  metering 

hardware  and  software  srt  in* 
sde  a  firewall  and  read  CPU 
usage.  The  captured  informa¬ 
tion  b  then  iransmined  lo  an 
HP  biling  system. 

It  en- 

aMss  usage-based  pricioo. 

Users  who 
boy  at  bast  four  new  Super  - 
dome  servers  and  commrl  to 
using  at  least  25%  of  the  over¬ 
all  capacity  on  each  system 


prise  Edition  when  upgrading, 
he  said. 

“Pve  seen  looks  of  sticker 
shock"  over  the  price  differ¬ 
ence  between  the  two  pricing 
models,  Corey  said.  In  one  test 
configuration  for  a  customer, 
the  difference  between  an 
enterprise  software  package 
and  a  standard  one  on  the 
same  piece  of  hardware  was 
$102,000,  he  said. 

Users  who  have  already  sep¬ 
arately  purchased  much  of  the 
software  that  IBM  is  now 
bundling  with  the  higher-end 
hardware  models  are  likely  to 
see  less  benefit  as  welt  said 
Eric  Songy,  director  of  IS  at 
Standard  Companies  Inc.  in 
New  Orleans. 

As  a  result,  they  should  get 
some  credit  for  those  invest¬ 
ments,  he  said.  Otherwise, 
*>00  are  paying  for  a  bundle 
without  getting  credit  for  what 
you  have  already  paid  for." 

While  acknowledging  such 
issues,  Jarman  maintained  that 
those  users  will  still  get  addi¬ 
tional  benefits  from  some  of 
the  new  performance  tools 
and  software  that  IBM  is 
bundling  with  the  new  iSeries 
hardware.  I 


"If  a  user  operates  at  maxi¬ 
mum.  this  pay-per-use  per¬ 
centage  utilization  offering  is 
no  more  expensive  than  a 
standard  36-nionth  contract.” 
Rothman  said. 

BMO  Nesbitt  Bums  Inc.,  a 
financial  services  firm  in 
Toronto,  has  signed  up  for  the 
new  model,  according  to  Roth¬ 
man.  The  company  will  save 
$33  million  over  three  years 
compared  with  what  it  was 
paying  under  previous  hard¬ 
ware  leases,  Rothman  said. 
OfTicials  at  Nesbitt  Bums 
were  unavailable  for  comment 
by  press  time. 

Users  must  be  careful 
when  signing  up  for  such 
models,  said  Pat  Cicala,  presi¬ 
dent  of  Cicala  &  Associates 
LLC,  a  contract  management 
consultancy  in  Hoboken, 

N.J.  But  companies  that  are 
well  organized  and  know  how 
to  manage  the  peaks  and  val¬ 
leys  in  demand  can  benefit 
from  a  pay-per-use  model. 
Cicala  said.  • 


HP  Rolls  Out  Usage 
Metering  Product 


A 

■^^MANYWARe*  The  downside:  your  walk  through  the  parking  lot  was  long.  The  upside:  it  gave  you  time 
to  think  about  a  way  to  eliminate  the  high  cost  and  hassles  of  overnight  delivery. 

And  lo  and  behold,  you  found  it:  Canon  imageRUNNER™  technology.  It  lets  you  send  documents  anywhere,  in  any  form,  at  any  time, 
over  your  network  or  the  Internet.  Instantaneously.  Just  scan  a  document  into  the  imageRUNNER  and  send  it  — to  desktops.  E-mail 
addresses,  fax  machines,  databases  and  file  servers.  All  of  which  results  in  lowered  costs  and  increased  productivity.  So.  take  pride. 
Thanks  lo  Canon  know-how.  your  walk  through  the  parking  lot  is  considerably  shorter.  I -866-25-CANON  www.imagerunner.com 
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Brokerages  Face  Big  FT  Bills  to 
Comply '^th  USA  Patriot  Act 


Report  puts  total  tab  at  $700M;  many 
firms  said  not  to  have  even  started 


■T  LUCAS  MAKIAN 

REPORT  released  last 
week  estimates  that 
the  broken^ 
idustry  will  spend 
as  much  as  $700  million 
through  2005  oo  technology 
and  outsourcing  services  in 
order  to  comply  with  the  antF 
terrorism  and  anti-money- 
lauiKlering  regulations  of  the 
USA  Patriot  Act. 

The  report  by  Needham. 
Mass.-based  TowerCroup  says 
brokerages  spent  $117  million 
on  Patriot  Act  compliance 
measures  last  year  and  will 
invest  about  $404  million  this 
year,  when  most  of  the  Patriot 
Act's  provisiMis  become  law. 
The  report  also  indicates  that 
some  large  brokerages  expect 
to  spend  up  to  $90  million 
eactL  But  after  that,  budgeting 
for  compliance  initiatives 
drops  off  sharply. 

‘I  dem't  want  to  say  they're 
not  taking  it  seriousty,  but  of 
5300  registered  [securities! 
dealers  in  the  country.  I'd  esti¬ 
mate  that  LOGO  or  less  arc  ac¬ 
tively  building  or  buying  solu¬ 
tions.*'  said  Bob  lati.  a  research 
director  at  TowerGroup. 

The  Patriot  Act.  which  was 
signed  by  President  Bush  in 
October  2001  in  response  to 
the  Sept.  U  terrorist  attacks, 
requires  Hnancial  services 
companies  to  develop  im¬ 
prove  capabilities  to  identify 
customers  and  flag  suspicious 
iransactioos. 

Where  the  Money  Goes 

According  to  TowerGroup, 
about  99%  of  compliance  bud¬ 
gets  is  being  spent  on  integrat¬ 
ing  back-end  systems,  and  95% 
is  going  toward  new  software. 
Another  24%  of  the  money  is 
being  used  to  upgrade  IT  in¬ 
frastructures,  such  as  hard¬ 
ware  and  storage,  the  report 
says.  The  remaining  2%  is  pay¬ 
ing  for  outsourcing  services 


with  operators  of  customer 
databases,  such  as  Regulatory 
DataCorp  International  LLC 
(RDC)  in  New  York. 

RDC  was  launched  in  July 
by  The  Goldman  Sachs  Group 
Inc.  and  other  firms  to  devel¬ 
op  a  database  for  screening 
suspected  criminals.  Compa¬ 
nies  use  a  secure  Web  portal 
to  send  individual  names  or 
lists  of  customers  to  RDC, 
which  then  nuts  the  names 
through  an  Oracle  database  in¬ 
stalled  oo  Unix  servers. 

Bill  Camcci.  CEO  and  presi¬ 


dent  of  RDC.  said  the  compa¬ 
ny  has  about  25  clients  in  addi¬ 
tion  to  its  20  original  inves¬ 
tors,  who  included  Merrill 
Lynch  &  Co.  and  Citigroup 
Inc.  But  he  noted  that  the  stip¬ 
ulations  of  the  Patriot  Act  arc 
fuzzy  at  best. 

"When  (federal  regulators] 
say  you  should  have  a  compli¬ 
ance  system  that  meets  due 
diligence,  you  don't  know 
what  that  means,”  Catucci 
said.  "The  issue  is  that  if  you 
don't  meet  the  requirements, 
they'll  sanction  you.” 

Regulators  are  first  check¬ 
ing  to  make  sure  that  compa¬ 
nies  have  established  the  re¬ 
quired  anti-money-laundering 


and  antiterrorism  programs, 
and  then  they’re  examining 
the  actual  compliance  proce¬ 
dures,  said  Brefihi  McGuire,  a 
TowerGroup  analyst.  "And  af¬ 
ter  that,  they're  looking  to  see 
if  you  have  the  technology  in 
place  and  are  using  it  effec¬ 
tively,"  McGuire  said. 

Eric  Eriedberg  is  a  fortner 
federal  regulator  who  is  now 
executive  vice  president  and 
general  counsel  at  Stroz  Fried- 
berg  LLC  an  IT  services  and 
consulting  firm  in  New  York. 
Friedberg  said  that  although 
most  large  banks  and  broker¬ 
ages  are  on  their  way  to  Patri¬ 
ot  Act  compliance,  many 
smaller  companies  don’t  in¬ 


tend  to  get  there  because  they 
don't  think  it's  worth  the  cost 
"I  think  the  big^t  road¬ 
block  is  budgetary.”  he  said. 
The  technologies  exist  to 
meet  whatever  high  standard 
of  due  diligence  the  govern¬ 
ment  requires.  It's  just  that 
there  has  to  be  commitment 
by  the  organization  to  do  it”  I 


EMC  Mixes  Disk  Drives 
On  Hs  Midrange  Arrays 


Bridging  lets 
Clariion  users  add 
less-expensive 
AIA  disk  drives 


BY  LUCAS  MEARIAN 

EMC  Cotp.  last  week  an¬ 
nounced  a  bridging  technology 
that  lets  its  newest  midrange 
storage  arrays  use  lower-cost 
disk  drives.  The  move  is 
aimed  at  allowing  IT  man¬ 
agers  to  switch  from  tape- 
based  data  archiving  to  long¬ 
term  disk  storage. 

EMC  said  its  Clariion 
CX400  and  CX600  arrays, 
which  are  resold  by  Dell  Com¬ 
puter  Corp.,  can  be  retrontted 
with  advanced  technology  at- 
taciunent  (ATA)  disk  drives 
alongside  or  in  place  of  the  Fi¬ 
bre  Channel  drives  now  used. 
Arrays  with  ATA  drives  for  so- 
called  near-line  storage  will  be 
priced  up  to  50%  below  the 
cost  of  an  all-Fibre  Channel 
configuration,  said  EMC 

For  example,  a  CX400  array 
with  a  9.7TB  storage  capacity 
would  cost  $19.89  per  ^gabyte 


with  Fibre  Channel  drives, 
compared  with  a  price  of  $8.61 
per  gigabyte  for  an  ATA-con- 
figured  model,  said  the  Hop* 
kinton,  Mass.-based  company. 

ATA  drives  are  mainly  used 
in  PCs,  but  ATA-based  disk  ar¬ 
rays  are  an  emerging  technol¬ 
ogy  for  near-line  information 
archiving  and  storage  of  fixed 
data,  such  as  check  images. 
EMC  already  sells  an  ATA- 
based  array  called  Centcra  for 
long-term  storage  of  fixed 
data,  and  vendors  such  as  Net¬ 
work  Appliance  Inc.  and  Stor¬ 
age  Technology  Corp.  also  of- 


New  From  EMC 


fer  arrays  with  ATA  drives. 

Jerome  Wendt,  a  senior  in¬ 
formation  systems  analyst  in 
storage  administration  at  pay¬ 
ments  processor  First  Data 
Corp.  fo  Omaha,  said  EMC’s 
entry  into  the  near-line  stor- 
^  arena  is  piquing  his  inter¬ 
est  in  ATA  dih-e  technology. 

"As  I’m  starting  to  look  to 
stage  storage  in  order  to  move 
it  off  to  tape,  having  a  name¬ 
brand  vendor  like  EMC  sup¬ 
porting  this  [technology]  with 
their  services  definitely  makes 
a  difference.”  Wendt  said.  But 
be  added  that  he’s  stUi  not 
ready  to  move  to  an  ATA- 
equipped  Clariioa 

EMCsOout 

Mflce  I*eterson.  an  analyst  at 
Strategic  Research  Corp.  in 
Santa  Barbara,  Calif.,  said 
EMCs  offering  isn't  a  technical 
breakthrough.  But  EMC’s  clout 
could  help  spur  a  movement 
away  ftom  tape  archiving  by 
users  who  want  to  keep  their 
data  online,  said  Peterson, 
who's  also  executive  director 
of  the  Enhanced  Backup  Solu¬ 
tions  Initiative,  a  trade  group 
based  in  Carplnteria,  ralif 

The  concept  here  is  you 
will  be  storing  information, 
and  lots  of  copies  of  it,  in  mul¬ 
tiple  locaticms,”  he  said.  "But 


you  have  to  automate  the  data 
protection  process,  and  you 
can’t  do  that  with  tape.” 

Because  the  Clariion  arrays 
suppon  both  Fibre  Channel 
and  ATA.  users  can  build  hy¬ 
brid  stor^  servers  that  mir¬ 
ror  or  send  snapshot  copies  of 
data  between  the  two  types  of 
disk  drives,  said  Chuck  HoUis. 
vice  president  of  platforms 
marketing  at  EMC. 

EMC  is  using  2S0GB  parallel 
ATA  drives  that  run  at  5,400 
rpm,  compared  with  top  spin¬ 
dle  speeds  of  up  to  15,000  rpm 
on  the  Fibre  Channel  drives  it 
offers  with  the  Clariion  arrays. 
The  Fibre  Channel  drives  top 
out  at  a  c^iacity  of  146GB.  but 
they  support  nearly  twice  the 
I/O  performance  that  the  ATA 
devices  provide,  according  to 
technical  spedfkations. 

The  I/O  differences  leave 
Fibre  Channel  as  the  disk 
technology  of  choice  for  trans¬ 
action  processing  and  other 
high-performance  applica¬ 
tions  that  are  run  thrmgh  the 
Clariion  arrays,  EMC  said.  But 
for  longer-term  storage,  the 
ATA  drives  can  back  up  data 
about  93%  faster  than  tape 
archiva]  systems,  and  th^  can 
restore  that  data  five  rimes 
faster  than  tape  libraries  can. 
the  company  added.  9 
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3Com  Launches  Devices  for 
Sending  Power  via  Networte 


New  switch  and  IP  phone  supports 
draft  Ethernet  interoperability  standard 


8V  MATT  HAM8LCM 

3Com  Corp.  last  week  an¬ 
nounced  a  switch  that  pro¬ 
vides  electrical  power  over 
Etbemet  wiring  and  interc^ 
erates  with  new  IP  telephones 
and  wireless  LAN  access  de¬ 
vices.  freeing  users  of  those 
products  from  the  need  to 
have  separate  power  cables. 

Networking  devices  that 
supped  Power  Over  Ethernet 
technology  began  appearing 
two  years  ago  and  are  already 
being  offered  by  3Coffi.  cisco 
Systems  Inc.  and  other  ven¬ 
dors.  But  ail  the  new  3Com 
products  adhere  to  a  draff  In¬ 
teroperability  standard  called 
IEEE  8023af:  said  Doug  Hyde, 
a  product  manager  at  the  San¬ 
ta  Clara.  Calif.-based  vendor. 

Nick  Lippis,  an  analyst  at 
Lif^tS  Consulting  in  Hingham, 
Mass.,  said  3Com’s  new  switch 
and  Us  companion  devices  ate 
the  first  products  to  become 
available  that  adhere  to  the 
proposed  8023af  standard. 

The  chief  benefit  of  Power 
Over  Ethernet  is  that  U  elimi¬ 


nates  the  need  to  connect  IP 
telephones  and  WLAN  access 
points  to  power  outlets.  Lippis 
said.  Companies  that  use  the 
technology  don't  need  to  run 
power  lines  to  the  devices,  re¬ 
sulting  in  fewer  wires  running 
over  or  under  desks,  he  added. 

3Com  said  its  24-port  Power 
Over  Ethernet  switch,  called 
the  SuperStack  3  Switch  4400 
PWR.  forwards  electrical 
power  at  low  wattages  to  con¬ 
nected  devices.  Hie  company 
plans  to  add  new  Power  Over 
Ethernet  phones  in  May  and  b 
already  sfopping  a  converter 
module  that  will  let  Us  exist¬ 
ing  IP  telephones  work  with 
the  new  switch  instead  of  re¬ 
quiring  power  adapters. 

NottiinatDUnplug 

Three  new  WLAN  access  de¬ 
vices  can  also  be  connected  to 
the  switch  to  get  power  so 
they  can  be  placed  on  ceilings 
or  other  locations  where  pow¬ 
er  cables  and  outlets  aren’t 
readily  available,  Hyde  said. 

Ventura  Unified  School  Db- 


trict  in  Ventura.  Calif,  earlier 
thb  month  began  beta-testing 
the  4400  PWR  switch  to  pro¬ 
vide  power  to  some  of  the 
1.200  3Com  NBX  IP  phones  it 
has  installed  at  22  sites. 

Ted  Malos,  the  district's  di¬ 
rector  of  technology,  said  Eth¬ 
ernet  power  b  a  '‘must-have" 
for  the  schools.  If  there’s  no 
need  to  use  the  power  outlets 
in  classrooms,  there’s  no  pos¬ 
sibility  that  students  will  un- 


SCom'sPiNverOvBr 
Ethernet  Devices 

tniFSai*38rtldi4400 
PWb  hdudK  24  ports,  due  to 
shipinAorlfort2,4i6 

NBX  phoMK  Eflhenced  P  tele¬ 
phones  with  802.3af  support: 
due  in  May  for 1800  to  1700 

CoiMMler  ModidK  Lats  older 
NBX  phones  work  vnO)  the  new 
sibtdvavrinbtofKMlorSSO 

WketeeBLANMcmpeMK 

Three  models:  due  dts  monih 
and  priced  trom  SMI  to  OLOOO 


plug  the  (^ncs,  he  noted. 

Malos  said  the  school  db- 
tiict  plans  to  standardiae  its 
future  switch  purchases  on 
the  new  3Com  devices,  which 
will  also  be  used  to  power  a 
new  wireless  network  that's 
due  to  be  phased  in  thb  year. 
'The  switch  gives  us  incentive 
to  go  to  wireless,"  be  said. 

Ethernet  swUching  b  a  huge 
market,  valued  at  S10.8  bUUon 
worldwide  last  year,  according 
to  DeU'Oro  Group  inc.  in  Red¬ 
wood  City,  Calif  But  Power 
Over  Ethernet  sales  are  "still 
very  smalT  and  have  yet  to 
even  be  measured,  said  Julie 
Learmond-Criqui,  a  spokes¬ 
woman  for  DeU'Oro  I 


Gartner  Survey  Rnds  Continued 
CIO  Focus  on  Cutting  Costs 


But  IT  execs  are 
also  trying  to  aid 
innovation  efibrts 


8V  THOMAS  HOrSMAM 

Cost-cutting  continues  to  be 
the  top  business  issue  facing 
CIOs.  But  rr  leaders  are  also 
focusing  on  ensuring  hitler 
leveb  of  tnfonnatioo  security, 
improving  risk-management 
procedures  and  helping  to  fos¬ 
ter  more  rapid  business  inno- 
vatitHi,  acaKding  to  the  re¬ 
sults  of  a  Gartner  Inc.  survey 
that's  being  released  today. 

Meanwhile.  CIOs’  top  IT 
management  priorities  thb 
year  include  providing  better 
technok^  guidance  to  senior 
executives  and  demonstrating 
ITs  business  value  (see  box). 
Those  findings  also  come 
from  the  Gartner  survey, 
which  was  conducted  online 
during  last  year’s  fourth  quar¬ 
ter  and  drew  responses  fiom 
620  CIOs  and  other  IT  execu¬ 
tives  woridwide. 

The  continued  focus  on  re¬ 
ducing  internal  costs  maps 
with  what  Bob  Alsaker  b  see¬ 
ing  in  hb  fob  as  information 
systems  director  at  American 
Fence  Co^  a  Phoenix-based 
fence  coQsmiction  and  rental 
ffrm.  "We  spent  2002  shoring 
up  our  infrastructure  and  re¬ 


ducing  expenses  «riierever  hu¬ 
manly  possible,"  Alsaker  said. 

But  Gartner  said  its  survey, 
which  was  conducted  by  the 
consulting  firm’s  Gartner  Ex¬ 
ecutive  Programs  unit,  also  re¬ 
flected  an  increased  focus  on 
innovative  uses  of  IT.  Ellen 
Kiuis.  groiq)  vice  president  of 
Gartner  Executive  Progiams. 
said  many  CIOs  have  started 
looking  "at  the  future  of  busi¬ 
ness  as  opposed  to  sustain¬ 
ability,  stability  and  low  cost." 

On  the  other  hand.  Gartner 
said  the  survey  results  indi¬ 
cate  that  the  long-standing 
goal  among  CIOs  of  creating  a 
single  view  of  their  compa¬ 
nies’  customers  b  losing  some 
steam.  That  b  primarily  the 
result  of  the  empbasb  on  cut¬ 
ting  costs  ax>d  die  disappoint¬ 
ing  results  some  users  have 
experienced  with  customer 
relabonship  management 
profocts,  according  to  Gartner. 

Alsaker  said  there  "has  been 
a  slight  increase  in  customer- 
focused  ittititfives"  at  Ameri¬ 
can  Fence.  But  because  the 
company  b  still  primarily  a 
brick-and-mortar  business,  se¬ 
nior  management  to 
"shun  any  type  of  Web-based 
initiatives."  he  added. 

One  of  the  silver  linings  that 
of  the  survey  revealed:  The 
tenure  of  CIOs  has  risen  from 


Top  IT  Management 
Priorities  for  CIOs 


about  18  months  at  the  time  of 
Gartner’s  2000  survey  to  near¬ 
ly  three  years,  said  Kitzb.  She 
added  CIOs  "can't  think 

about  innovatioo"  if  they're 
worried  about  being  on  the 
fob  for  only  18  months. 

Michael  Brenner,  head  of 
executive  search  firm  Brenner 
Executive  Resources  Inc.  in 
New  York,  attributed  the  rise 
in  tenure  partly  to  a  desire  to 
maintain  coqxKate  stability 
during  the  current  poor  mar¬ 
ket  cooditioas.  Tbe  increase 
could  give  CIOs  die  diance  to 
have  a  more  sustainable  im¬ 
pact  on  companies,  he  added.  I 
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Brokerages  Face  Big  FT  Bills  to 
Comply  With  USA  Patriot  Act 


Report  puts  total  tab  at  S“(K)M:  nian\ 
tlrms  s;iid  not  to  ha\  c  o\en  started 


BV  LUCAS  MEARIAN 

AKifOKi  relcasL-d  last 
w’ixk  estimates  that 
the  U.S.  bfokerairc 
in.iustr>  will  spend 
as  much  as  S700  million 
through  2t)()5  on  technology 
and  LHitstHircing  se-rviccs  in 
order  to  comply  with  the  anti- 
terrorism  and  anti-money- 
laundering  regulations  of  the 
USA  Patriot  Act. 

The  report  hy  Needham. 
Mass.-I>ased  TowcKtroup  says 
brokerages  spent  S117  million 
•in  Patriot  Act  compliance 
measures  last  year  and  will 
invest  about  S404  million  this 
year,  when  most  of  the  I’atriot 
Act’s  provisions  become  law. 
The  report  also  indicates  that 
Mime  large  brokerages  expect 
lo  spend  up  toS3()  million 
each.  Hut  after  chat,  budgeting 
for  compliance  initiatives 
drtips  off  sharply. 

"i  don’t  want  lo  say  they're 
not  taking  it  serioiLsIy.  but  of 
5.500  registered  (securities} 
dealers  in  the  country.  I'd  L'sti- 
mate  that  1,000  or  less  are  ac- 
ih'cly  building  or  buying  solu- 
ttoas.“  said  Bob  lati.  a  research 
diiveior  at  TowerGroup. 

The  Patriot  Act.  which  was 
signed  by  President  Bush  in 
detober  2001  in  rcsptmsc  to 
the  Sept.  11  terrorist  attacks, 
requires  finandal  services 
compank's  to  dewelop  im¬ 
proved  capabilities  to  identify 
c'ustumcrs  and  flag  suspicious 
iransactioiLs. 

)M)ere  the  Money  Goes 

According  to  linyiTfiniup. 
about  39'Si  of  compliance  bud- 
gei.s  is  being  spent  on  integrat¬ 
ing  back-end  sy.siems.  and 
is  going  ttiward  new  software. 
Arwitbcr  24’*u  <»f  the  money  is 
being  used  to  upgrade  IT  in¬ 
frastructures.  such  as  hard¬ 
ware  and  -Storage,  the  repon 
says.  The  remaining  2‘^»  is  pay¬ 
ing  foroutviurcing  services 


with  operators  of  customer 
databases,  such  as  Regulatory 
HataGorp  International  I.IC 
(RDC)  in  New  York. 

RIX'  was  launched  in  luly 
by  The  (ioldman  Sachs  Group 
Inc.  and  other  firms  to  devel¬ 
op  a  database  for  screening 
suspected  criminals.  Compa¬ 
nies  use  a  secure  Web  portal 
to  send  individual  names  or 
lists  tif  customers  to  RDC. 
which  then  runs  the  names 
through  an  Oracle  database  in¬ 
stalled  on  Unix  servers. 

Bill  Caiucci.  CEO  and  presi¬ 


dent  of  RDC.  said  the  comp.i- 
ny  has  about  25  clients  in  addi¬ 
tion  lo  its  2U  original  inves¬ 
tors.  who  included  Merrill 
Lynch  &  Co.  and  Citigroup 
Ine.  But  he  noted  that  the  stip¬ 
ulations  of  the  Patriot  Act  are 
fuzzy  at  best. 

“When  (federal  regulators! 
say  you  should  have  a  compli¬ 
ance  system  (hat  meets  due 
diligence,  you  dtm't  know 
what  that  means."  Catucei 
said.  “The  issue  is  that  if  you 
don’t  meet  the  requirements, 
they’ll  sanctitin  you.” 

ReguLitors  .ire  first  check¬ 
ing  to  make  sure  that  compa¬ 
nies  have  established  the  re¬ 
quired  anti-mtiney-laundcring 


EMC  Mixes  Disk  Drives 
On  Its  Midrange  Arrays 


Hriciging  Ict.s 
{ '.lariion  users  add 
Iess-expensi\e 
A'l'A  disk  driv  es 


BY  LUCAS  MEARIAN 

EMC  Corp.  last  week  an¬ 
nounced  a  bridging  lechnolog)- 
tkat  lets  its  newest  midrange 
storage  array’s  u.sc  lower-cost 
disk  drives.  The  move  Is 
aimed  at  allowing  11'  man¬ 
agers  to  switch  from  tape- 
based  data  archiving  to  long¬ 
term  disk  storage. 

EMC  .said  its  Cbriion 
CX4(K)  and  CXCiOO  arrays, 
which  are  iVMild  b\'  Dell  Com¬ 
puter  Corp..  can  be  retrofitted 
with  advanced  technology  at¬ 
tachment  (ATAldisk  drive's 
alongside  or  in  place  of  the  Fi¬ 
bre  Channel  drives  now  used. 
Arrays  with  ATA  drives  for  so- 
called  near-line  storage  will  be 
priced  up  lo  .WV  below  the 
cost  of  an  all-Fibre  Channel 
configuration,  said  EMC. 

For  example,  a  CX400  array 
with  a  .L7TB  storage  capacity 
would  c«)st  S19JI.^  per  gigabyte 


with  Fibre  Channel  drives, 
compared  with  a  price  of  S8.6I 
per  gigabyte  for  an  ATA-con- 
figured  model,  said  the  Hop- 
kinton.  Ma.ss.-hased  company. 

ATA  drives  are  mainly  used 
in  PCs.  hut  ATA-ba.scd  disk  ar- 
rays  are  an  emerging  tcchnoL 
og)'  for  near-line  information 
archiving  and  storage  of  fixed 
data,  such  os  cheek  images. 
EMC  already  sells  an  ATA- 
based  array  called  Centera  for 
long-term  storage  of  fixed 
data,  and  vendors  such  as  Net¬ 
work  Appliance  Ine.  and  Stor¬ 
age  Technology  Corp.  also  of- 


Ne\A/  From  EMC 


and  anliterrorism  programs, 
and  then  they’re  examining 
the  actual  compliance  proce- 
dure.s.  said  Breffni  McGuire,  a 
TowerGioup  analyst.  "And  af¬ 
ter  that,  they’re  looking  to  see 
if  you  have  the  technology  in 
place  and  arc  using  it  effec¬ 
tively.”  McGuire  said. 

Eric  Eriedbcrg  is  a  former 
federal  regulator  who  is  now 
executive  vice  president  and 
general  counsel  at  Stroz  Fried- 
berg  LLC.  an  IT  services  and 
consulting  firm  in  New  York. 
Fricdberg  said  that  although 
most  large  banks  and  broker¬ 
ages  are  on  their  way  to  Patri¬ 
ot  Act  compliance,  many 
smaller  companies  don’t  in¬ 


fer  arrays  with  ATA  drives. 

(erome  Wendt,  a  senk>r  in¬ 
formation  systems  analyst  in 
storage  administration  at  pay¬ 
ments  processor  First  Data 
Corp.  in  Omaha,  said  ElMCs 
entry  into  the  near-line  stor¬ 
age  arena  is  piquing  his  inter¬ 
est  in  ATA  drive  technoU>gy. 

"As  I’m  starting  lo  l<H>k  to 
st.tge  storage  in  order  to  move 
it  off  to  tape,  having  a  name¬ 
brand  vendor  like  EMC  sup¬ 
porting  this  (technology!  with 
their  services  definitely  makes 
a  difference.’’  Wendt  said.  But 
he  added  that  he’s  still  not 
ready  to  mt)ve  to  an  AFA- 
equipped  Clariion. 

EMC's  Clout 

Mike  Peterson,  an  analyst  at 
.Strategic  Research  Corp.  in 
Santa  Barbara.  Calif.,  said 
EMC's  offering  isn't  a  technical 
breakthrough.  But  EMC’s  clout 
Lxiuld  help  spur  a  movement 
away  fnim  tape  archiving  by 
users  who  want  to  keep  their 
data  online,  said  IVtcrson. 
wht>'s  also  executive  director 
of  (he  Enhanced  Backup  Solu¬ 
tions  Initiative,  a  trade  group 
based  in  Carpinteria.  Calif. 

“The  concLTM  here  is  you 
will  he  storing  information, 
and  l(Hs  of  copies  of  it.  in  mul¬ 
tiple  UK'aiions."  he  .said.  "But 


IMRtlwftlrtBtAct 
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tend  to  get  there  because  they 
don't  think  it’s  worth  the  cost. 

"I  think  the  biggest  road¬ 
block  is  budgetary."  he  said. 
“The  technologies  exist  to 
meet  whatever  high  standard 
of  due  diligence  the  govern¬ 
ment  requires.  It'sfusi  that 
there  has  to  be  commitment 
by  the  organization  to  do  it."  I 


you  have  to  automate  the  data 
protection  prtvess.  and  you 
can't  do  that  with  tape." 

Because  the  Clariion  arrays 
supptirt  Fibre  Channel 
and  ATA.  u.sers  can  build  hy¬ 
brid  storage  servers  that  mir¬ 
ror  or  send  snapshot  copies  of 
data  between  the  two  types  of 
di.sk  drives,  said  Chuck  Hollis, 
vice  president  of  platforms 
marketing  at  EMC. 

EMC  is  using  250GB  pamllcl 
ATA  drives  that  run  at  5.400 
rpm.  compared  with  top  spin¬ 
dle  speeds  of  up  to  L^OOO  rpm 
on  the  Fibre  ClianncI  drives  it 
offers  with  the  Clariion  arrays. 
The  Fibre  Channel  drives  top 
out  at  a  capacity  of  I46GB.  but 
they  support  nearly  twice  the 
L''0  performance  that  the  ATA 
devices  pnivide.  according  to 
technical  specifications. 

The  I/O  differcncL's  leave 
Fibre  Channel  as  the  disk 
technology  of  choice  for  iraiw- 
action  processing  and  other 
high-performance  applica¬ 
tions  that  are  run  thmugh  the 
Clariion  arrays.  EMC  said.  But 
for  longer-term  storage,  the 
ATA  drive's  can  back  up  data 
about  .13%  faster  than  tape 
archival  systems,  and  they  can 
TL-storc  (hat  data  five  times 
faster  than  tape  libraries  can. 
the  company  added.  I 
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3Com  Launches  Devices  for 
Sending  Power  via  Networks 


New  switch  and  11’  phone  supports 
draft  Ethernet  interoperabilit>'  standaal 


BV  MATT  HAMBLEN 

3Com  Corp.  last  week  an¬ 
nounced  a  switch  that  pro¬ 
vides  electrical  power  over 
Ethernet  wiring  and  interitp- 
crates  with  new  IP  telephones 
and  wireless  LAN  access  de¬ 
vices.  freeing  users  of  thi>se 
products  from  the  need  to 
have  separate  power  cables. 

Networking  devices  that 
support  Power  Over  Ethernet 
technology  began  appearing 
two  years  ago  and  are  already 
being  offered  by  3Com.  Cisco 
Systems  Inc.  and  other  ven¬ 
dors.  But  alt  the  new  3Com 
products  adhere  to  a  draft  in¬ 
teroperability  standard  called 
IEEE  802.3af.  said  Doug  Hyde, 
a  product  manager  at  the  San¬ 
ta  Clara.  Calif.-hased  vendor. 

Nick  Lippis,  an  analyst  at 
Lippis  Consulting  in  Hingham. 
Mass.,  said  3Com's  new  switch 
and  its  companion  devices  are 
the  first  products  to  become 
available  that  adhere  to  the 
proposed  802.3af  standard. 

The  chief  benefit  of  Piiwcr 
Over  Ethernet  is  that  it  elimi¬ 


nates  the  need  to  connect  IP 
telephones  and  WLAN  access 
points  to  power  outlets.  Lippis 
said.  Companies  that  use  the 
technology  don’t  need  to  run 
power  lines  to  the  devices,  rc- 
-sulting  in  fewer  wires  running 
over  or  under  dc'sks,  he  added. 

3Com  said  its  24-porr  Power 
Over  Ethernet  switch,  called 
the  SupcrStack  3  Switch  4400 
PWR.  forwards  electrical 
power  at  low  wattages  to  con¬ 
nected  devices.  'I'hc  company 
plans  to  add  new  Power  Over 
Ethernet  phonos  in  May  and  is 
already  shipping  a  converter 
module  that  will  let  its  exist¬ 
ing  IP  telephones  work  with 
the  new  switch  instead  of  re¬ 
quiring  power  adapters. 

Nothing  to  Unplug 

Three  new  WLAN  access  de¬ 
vices  can  also  be  connected  to 
the  switch  to  get  power  so 
they  can  be  placc'd  on  ceilings 
or  other  locations  where  pow¬ 
er  cables  and  outlets  aren’t 
readily  available.  Hyde  said. 

Ventura  Unified  School  Dis- 


Compuware  Tools  to  Support  ATM 


ConvtMMre  Corp.  today  Mi  an¬ 
nounce  that  I’s  eadending  its  net* 
Mork  perfotnance  tnanMomo 
and  analyGis  tools  to  support 
AsynctnnoiB  TnnsMr  Mode 
(ATM)  nebiorts. 

TheATMadtKHontoCom- 
puwofe's  NstwortMntaoe  prod¬ 
uct  Ine  Mules  sofMwHiasad 
noNiofk  probes,  as  Mil  as  a  pair 
d  nalwNifk  narface  cards  thit 
toraii  data  gaharad  by  the 
probes  to  ■  desktop  ntanaQO- 
martconaole. 

Uoyd  Ooom,  a  product  man* 
agaratCampMMninfivTnno- 
tan  Hb.  MUl.  said  tie  canals’ 
fiy  Mi  alBO  pnwidi  a  gnsaii 
mansoamenl  pradetor  tarsnakr 


atlng  tv  need  to  expand  ATM 
nehvQile  based  on  mHime  end 
historical  perfornance  dale. 

Fontarra  CoHiparalive  6roup. 
aWMtootan.Naw2dahnd.com- 
peny  tal  martrsh  daky  products, 
ptare  to  use  tie  NefwDFkVMaoe 
tools  to  manage  an  ATM  neNnrk 
thi  oomects  125  siBS  in  tot 
CQur*y.  said  Shphen  ftovet.  a 
wkh-area  nelMQrtt  anglnaBr  at 
Fonhm.  RbmI  vranh  to  be  afah 
to  Uartty  tie  appicattotB  tiat 
are  uMiq  ^  irah  bandwkih 
when  nebMitk  faAs  occur.  "Wh 
ddnT  hiMf  baton  etM  sort  oi 
traiic  ooitd  be  ouatoB  down- 
lim.‘lieBid 


trict  in  Ventura.  Calif.,  earlier 
this  month  began  heta-tesling 
the  4400  PWR  switch  to  pro¬ 
vide  power  to  some  of  the 
1.200  3Com  NBX  IP  phones  it 
has  installed  at  22  sites. 

Ted  Maios,  the  district’s  di¬ 
rector  of  lechnoliTgy.  said  Eth¬ 
ernet  power  is  a  “musi-havc” 
for  the  schools.  If  there’s  no 
need  to  use  the  power  outlets 
in  classrooms,  there's  no  pos¬ 
sibility  that  students  will  un- 


TECHNOLOGV  DETAILS 


aCodi’s  Power  Over 
Ethernet  Devices 

SuperStack  3  Switch  4400 
PWR:  includes  24  pofis.  due  to 
ship  m  April  io(  S2.495 

NBX  phones:  Enhanced  IP  tele¬ 
phones  with  802.3at  support 
due  m  May  ioi  $500  to  $700 

Converter  module;  Lets  older 
NBX  phones  work  with  the  new 
swdeh.  available  now  lor  $30 

Wireless  LAN  access  points: 
Three  models,  due  the  month 
and  priced  from  $749  to  $1,099 


plug  the  phones,  he  noted. 

Mal«>s  said  the  sch<M>]  dis¬ 
trict  plans  to  sl.-indardi/e  its 
future  sw  itch  purchases  on 
the  m-w  3Com  deviTI^.  which 
will  also  be  used  to  power  j 
new  wireless  network  that’s 
due  to  be  phased  in  this  ye.ir. 
••’nie  switch  gives  us  incentive 
to  go  to  wireless."’  he  said. 

Ethernet  switching  is  a  huge 
market,  valued  at  SKUt  billion 
worldwide  last  year,  according 
to  DeirOro  Group  Inc.  in  Red¬ 
wood  City.  Calif.  But  Power 
Over  Ethernet  sales  are  "still 
very  small"  and  haw  yet  ti) 
even  K?  measured,  said  lulie 
l.earmond-Criqui.  a  spokes- 
witman  for  IXdl'Oro  I 


Gartner  Survey  Rnds  Continued 
CIO  Focus  on  Cutting  Costs 


Hut  IT  execs  ara 
also  trying  to  aid 
innovation  eflForts 


BV  THOMAS  HOEEMAN 

Cost -cutting  continues  to  be 
the  top  business  issue  facing 
CIOs.  But  IT  leaders  are  also 
focusing  on  ensuring  higher 
levels  of  information  security, 
improving  risk-management 
procedures  and  helping  to  fos¬ 
ter  more  rapid  business  inno¬ 
vation.  according  to  the  re¬ 
sults  of  a  Gartner  Inc.  survey 
(hat’s  being  released  today. 

Meanwhile.  CIOs’  top  IT 
management  priorities  this 
year  include  providing  better 
tc'chnology  guidance  to  senior 
executives  and  demonstrating 
ITs  business  value  (SL*e  box). 
Those  findings  also  come 
from  the  Gartner  surve-y, 
which  was  conducted  online 
during  last  year's  fourth  quar¬ 
ter  and  drew  responses  from 
620  CIOs  and  trthcr  IT  execu¬ 
tives  worldwide. 

The  continued  focus  on  n- 
ducing  internal  costs  maps 
with  what  Bob  ALsakcr  is  sl'c- 
ing  in  his  job  as  information 
systems  director  at  American 
Fence  Co.,  a  Phocnix-based 
fence  construction  and  rental 
firm.  "We  spent  2002  shoring 
up  our  infrastructure  and  re¬ 


ducing  expenses  wherever  hu¬ 
manly  possible,"  Alsaker  said. 

But  Gartner  said  its  survey, 
which  was  conducted  by  the 
cimsulting  firm's  Gartner  Ex¬ 
ecutive  Programs  unit,  also  re- 
flL-cted  an  increasird  focus  on 
innovative  uses  of  11*.  Ellen 
Kitzis.  group  vice  pa*siden(  of 
Gartner  ExL*cutive  I*ri>grams, 
said  many  CIOs  have  started 
looking  "at  the  future  of  busi¬ 
ness  as  opp«>sed  to  sustain¬ 
ability.  stability  and  low  cost." 

On  the  other  hand.  GartncT 
said  the  survey  results  indi¬ 
cate  that  (ho  long-standing 
goal  among  CIOs  of  creatit^  a 
single  view  of  their  LX>mpa- 
nics'  customers  Is  losing  some 
steam.  That  is  primarily  the 
rt.'suh  of  (he  emphxsU  on  cut¬ 
ting  costs  and  (he  disappoint¬ 
ing  results  some  users  have 
experienced  with  customer 
rclation^ip  management 
projects,  according  to  Gartner. 

Alsaker  said  tberv  "has  been 
a  slight  increase  in  customer- 
focused  initiatives’*  at  Ameri¬ 
can  Fence.  But  because  the 
company  is  still  primarily  a 
brick-and-mortar  business,  se¬ 
nior  management  tends  to 
“shun  any  type  of  Web-based 
initiatives."  he  added. 

One  of  the  silver  linings  that 
of  the  survey  revealc'd;  "Hie 
tenure  of  CIOs  has  risen  from 


Top  IT  Management 
Priorities  for  CIOs 


IsniWMipMi 


teaBQOlBBoawITM 


about  18  months  at  (he  lime  of 
Gartner’s  2000  t»urvx*y  to  near¬ 
ly  three  years,  said  Kitzis.  She 
added  that  CIOs  "can't  think 
about  innovation"  if  they’re 
worriL'd  about  being  on  the 
job  for  only  18  months. 

Michael  Brenner,  head  of 
executive  search  firm  Brenner 
Executive  Resources  Inc.  in 
New  York,  attributed  the  rise 
in  tenure  partly  to  a  desire  to 
maintain  corporate  stability 
during  the  current  poor  mar¬ 
ket  conditions.  Tltc  increase 
could  give  CIOs  the  chance  to 
have  a  more  sustainable  im¬ 
pact  on  companies,  he  added.  I 
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Messenger  Adds 
Camera,  Action 

Micfowft  Corp.  has  aiWad  wtb* 
cam  functionaMy  to  Ns  MSM 
Masaangar  5.0  cllant,  akwing 
usars  to  straam  and  viaw  iivo 
vidao  via  Instant  nMssages.  Tha 
wabcam  faaturos  ars  baing  pro- 
vtdsdwidaranagraomontlicrD- 
soft  stgnad  with  Siviss  Arm  100* 
Hach  intaniational  8A.  which 
is  pnntdng  tha  addHn  applica¬ 
tion  and  maintaMng  tha  connac* 
thmsarvica. 


Oracle  Upgrades 
Warehouse  Bolder 

Orada  Corp.  last  waak  rsisasad 
VarMon  9.04  of  Ns  OracMf 
Warahouaa  Buidar.  ErduKa- 
manti  inchida  a  naw  SAP  Inta- 
grdor  that  makes  H  oaaiar  to 
ai^ad  Monaation  from  SAP 
AO  R/3  syslama,  batter  amrk- 
floar  faaturas  and  support  for 
industry  standards  to  sknpiity 
the  process  of  Migrating  Wfora- 
housa  BuNdar  wllh  third-party 
products.  Mdng  is  S5.000  per 
Mamad  User  Rui  as  part  of  tha 
OraefoSi  Oavalopor  SuMa. 


Cisco  Aggregates 
SAN.  LAN  Traffic 

Qaco  Systomi  kic.  test  waak 
announced  anhancanants  to  Its 
0NS«530llidlfoarvicaAggra- 
Oallon  Pfattonn.  wflh  B»  akn 
of  cowbWiio  storagrarea  net¬ 
work  (SAN)  traffle  uMi  sarvicas 
such  aa  BigaM  Ethamot  over  a 
sfngla  Aar-oplic  bdi  fling  darna 
wafliangih  dfoiaion  moiBpieiing. 


Short  Takes 

ten  and  BEUSOUDi  COflP.  wH 
ioMly  offar  hosting  and  natworfc 
sarvfoaa  to  Anna  in  tha  south' 
aaatom  U.S..  partfodarfy  small 
and  tnadkan  dia  bflinwaas. . . . 
Paddan  ralaBar  BBtETTON 
QflOUP  SPA  pkMS  to  attach  radfo 
tfaguBWcy  idsntific  alien  smart 
tags  to  Rs  SWay  cMMng  Ina  to 
nam  vflK  snmpa^i  BvaiMry 
and  sdn  in  tha  KdAt  chain's 
S.OOO  stona  around  tha  world. 


Outdated  Technology  Hampers 
National  Amber  Alert  System 


Pending  bills  don't 
include  funding  for 
revjunp  of  network 


The  rescue  last  week 
of  Elizabeth  Smart, 
the  Utah  tcenajter 
who  was  kidnapped 
nine  months  ago.  ha.s  brought 
renewed  calls  for  a  national 
Amber  Alert  system  to  help 
Tmd  missing  childrea  But  if 
Congress  approves  the  plan,  it 
will  be  implementing  the  sys¬ 
tem  on  top  of  a  technology 
that  isn’t  fail-safe  or  as  effec¬ 
tive  as  it  could  be.  say  critics. 

The  technology  underlying 
the  Amber  Alert  system  is 
the  Emergency  Alert  System 
(EAS),  the  direct  descendant 
of  the  Emergency  Broadcast 
System  begun  during  the  Cold 
War  and  known  by  its  “This  is 
only  a  test”  warning  message. 


The  bills  before  Cot^iress 
to  require  Amber  Alert  to  be 
adopted  nationwide  don't  in¬ 
clude  funding  for  revamping 
the  EAS.  Amber  Alert  current¬ 
ly  operates  in  39  states,  and 
some  of  them  are  still  using  a 
communications  system  that 
relies  on  radio  relays  between 
radio  and  television  stations 
to  disseminate  emergency 
information. 

"The  EAS  system  doesn't 
reach  enough  people,  particu¬ 
larly  when  you  are  talking 
about  life-threatening  issues 
like  a  lerrorist  attack  or  drift¬ 
ing  gas  leak.“  said  Peter  Ward, 
chairman  of  the  Partnership 
for  ihiblic  Warning,  a  McLean. 
Va.'based  group  formed  last 
year  that  includes  emergency 
preparedness  experts. 

Ward  said  there's  a  need 
to  develop  new  systems  for 
reaching  the  public  that  can 
link  emergency  messages  to 
cell  phones,  pagers,  personal 


digital  assistants  or  any 
other  communication  device. 

There  are  no  standards  for 
developing  a  ubiquitous  warn¬ 
ing  system,  nor  is  there  much 
interest  in  Congress  at  this 
point,  be  said.  President  Bush 
in  October  proposed  $10  mil¬ 
lion  to  beef  up  the  Amber  Alert 
program,  and  pending  bills  in¬ 
clude  funding.  But  most  of  the 
money  will  go  to  electronic 
highway  signs  and  training, 
not  CO  new  technologies. 

M  The  EAS  sys¬ 
tem  doesnt 
reach  enough  peo¬ 
ple,  particubny 
whmyouare 
talking  about  life- 
threatening  issues. 

PETER  WARD.  CHAIRMAN 

PARTNERSHIP  fOR  PUBLIC  WARNING 


The  problem  with  transmit¬ 
ting  emergency  messages  over 
the  existing  EAS  is  that  “any 
one  station  alortg  the  way 
could  have  tripped  it  up  if 
they  didn't  hear  it,  or  messed 
up  if  their  equipment  was 
down,”  said  Dale  Gehman, 
vice  president  of  technology 
at  the  Pennsylvania  Associa¬ 
tion  of  Broadcasters  in  Harris¬ 
burg.  “It  was  old-fashioned. 
Cold  War  era  (technology}. . . . 
Even  though  it  was  EAS,  it  was 
still  a  daisy  chain.” 

TWo  weeks  ago,  however. 
Pennsylvania  ofTicials  tested 
the  fust  phase  of  a  new  satel¬ 
lite  communications  system 
intended  to  link  state  emer¬ 
gency  officials  directly  with 
broadcasters.  This  system  has 
made  a  remarkable  difference, 
said  Gehman.  Forty-four  key 
stations  responsible  for  relay¬ 
ing  messages  now  have  the 
satellite  capability;  in  two 
years,  about  320  broadcasters 
will  have  it.  Gehman  said. 

The  Amber  Alert  system 
was  created  in  1996  following 
the  kidnapping  and  murder  of 
9-year-old  Amber  Hagerman 
in  Arlington.  Texas.  * 


Continued  from  page  I 

Border  Security 


“That  takes  new  systems,  new 
infrastructure  that  are  not 
even  in  existence  today," 
Hutchinson  said. 

The  need  for  a  reliable  and 
efficieni  system  at  the  borders 
has  been  “made  more  urgent 
by  the  prospects  of  the  United 
States  going  to  war  with  Iraq 
and  the  possibility  that  .Sad¬ 
dam  Hussein  might  try  to  use 
weapons  of  mass  destruction 
in  America.”  said  Stephen 
Flynn,  a  senior  fellow  in  na¬ 
tional  security  studies  at  the 
Council  on  Foreign  Relations 
in  New  York. 

The  Department  of  Home¬ 
land  Security's  fiontlinc 
troops  at  the  borders  and 
ports  "are  woefully  undcr- 
stalTed,  working  with  obsolete 
technologies,  thavei  inade¬ 
quate  sui^rt  for  training 
[and]  are  simply  not  up  to  the 
challenge.”  Flynn  said. 

Under  law,  the  Department 


of  Homeland  Security  has  un¬ 
til  the  end  of  2005  to  complete 
the  deployment  of  an  integrat¬ 
ed  entry/exit  system  that 
makes  maximum  use  of  bio¬ 
metric  technologies  to  iden¬ 
tify  foreign  visitors  to  the  U.S. 
and  reduce  the  possibility  of 
terrorists  using  forged  docu¬ 
ments  to  entss  the  borders. 

So  far.  more  than  6  million 
biometric  border-crossing 
cards  have  been  issued.  And 
recent  pilot  programs  using 
the  cards  on  the  Canadian 
border  have  uncovered  more 
than  250  impostors.  Hutchin¬ 
son  said.  Additional  biometric 
card  readers  are  scheduled  to 
be  deployed  by  the  end  of  the 
year,  he  said. 

But  the  IT  infrastructure 
challenges  are  formidable. 

“Biometrics  will  be  part  of 


the  cniry/exit  program,  (butl 
we  currently  don’t  have  the  in¬ 
frastructure  in  place  to  accom¬ 
modate  that.”  said  Robert 
Moeny,  director  of  the  entr)'/ 
exit  program  at  the  U.S.  Bu¬ 
reau  of  Immigration  and  Cus¬ 
toms  Enforcement. 

“The  challenges  for  the  land 
border  are  daunting,"  Moeny 
acknowledged.  “Especially 
when  you  talk  about  (be  50 
largest  land  ports  of  entry. 
There  are  environmental 
laws  (and  other  rcstrictiorts] 
that  apply  to  the  growth  of 
infrastructure." 

Moeny  said  $245  million 
given  to  the  department  for  IT 
infrastructure  improvements 
and  a  portion  of  the  $362  mil¬ 
lion  provided  for  the  entry/ 
exit  system  will  go  toward  bio¬ 
metric  in^astructure  support. 


But  that  may  not  come  close 
to  paying  for  a  complete  sys¬ 
tem.  said  Nancy  Kingsbury,  an 
analyst  at  the  General  Ac¬ 
counting  Oflice.  the  investiga¬ 
tive  arm  of  Congress.  In  addi¬ 
tion  to  card  readers,  the  infra¬ 
structure  would  include  com¬ 
puters  and  communications 
enhancements  to  handle  more 
electronic  process'mg. 

“There  are  issues  of  scab- 
bility  that  will  require  consid¬ 
erable  testing  and  develop¬ 
ment  to  bring  the  system  to 
the  point  where  hundreds  of 
millions  of  identity  checks  an¬ 
nually  are  feasible,  accurate 
and  efficient,"  said  Kingsbury. 

There  are  also  questions 
surrounding  the  technical  and 
operational  effectiveness  of 
biometric  technologies  in 
projects  as  large  as  border 
control,  she  said. 

“The  costs  and  benefits 
of  the  system  need  to  be  a.s- 
sessed.”  Kingsbury  said.  “Suf¬ 
fice  to  say.  we’re  talking  bil¬ 
lions  of  dollars  just  to  imple¬ 
ment  biometrics.”  I 


SAS*  is  ai  you  need  to  know. 


Only  SAS  provides  a  U^impact,  low-risk  way 
to  achieve  intelligeiit  data  warehousiiig.  %u  can 
eictract,  transfotm  and  load  data  fiom  any  source, 
across  any  platform,  while  assuring  quality. 
Simplify  the  way  you  create  and  customize  reports. 
And  deliver  a  shared  version  of  the  truth.  To  fuid  out 
how  top  corrrpanies  reap  bottom-line  rewards  with 
SAS  software — by  leveraging  the  value  of  data 
from  corporate  systems,  e-business  channels,  the 
supply  chain  and  beyorrd — visit  us  on  the  Web  or  call 
toll  free  1  866  270  5727. 

www.sas.com/warehouse 
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CA  to  Push  Automated  Fraud  Detection 


BY  MARC  L.  SONOIHI 

Looking  to  capitalize  on  the 
need  for  rmancial  companies 
to  eliminate  money  laundering 
and  fraud,  Computer  Associ¬ 
ates  International  Inc.  is 
rolling  out  a  new  mana^ment 
application. 

The  Islandia.  N.Y.-based 
software  company  last  week 
announced  CleverPath  for 
Global  Compliance,  which  is 
targeted  at  the  finance,  bank¬ 
ing  anfl  insurance  industries. 

The  package  integrates  several 
^■ri^ring  products  to  offer  a 
greater  degree  of  automation, 
including  the  CleverPath  Aion 
business-rules  en^ne  and  pre¬ 
dictive  analysis  and  portal  ap¬ 
plications,  said  Tina  V^ng,  a 
CA  vice  president  and  product 
manager  for  QeverPath. 

The  global  compliance  ap¬ 
plication  will  require  cus¬ 
tomization  to  match  the  spe¬ 
cific  needs  of  a  ^ven  industry. 
CA  has  partnered  with  inte¬ 
grator  BearingPoint  Inc.  in 
McLean,  Va„  to  offer  cus¬ 
tomization  services  to  compa¬ 
nies  that  don’t  have  the  per¬ 
sonnel  to  tailor  the  softwre  to 
meet  their  needs. 

The  software  automates 
manual  processes  required  by 
regulatory  agencies  and  can 
help  companies  handle  fre¬ 
quently  changing  reporting  re¬ 
quirements.  said  CA. 

The  application  can  auto¬ 
matically  detect  fraud  or  other 
illegal  activities  based  on 
built-in  business  rules  and 
predictive  analysis.  Suspected 
fraud  cases  are  identified  and 
passed  on  to  the  appropriate 
personnel  for  action  —  poten¬ 
tially  helping  companies  avoid 
fines.  CA  officials  said. 

Customized  Interlaces 

A  customized  portal  interface 
will  present  relevant  data  and 
business-intelUgence  tools  to 
ensure  regulatory  compliance 
at  companies,  said  CA.  The 
application  can  also  be  used  in 
the  sales,  marketing  and  cus¬ 
tomer  service  fields. 

The  customization  services 
will  clearty  be  necessary  to 
the  new  offering  work, 
said  Joshua  Greenbaum.  an 


analyst  at  Enterprise  Applica¬ 
tions  Consulting  in  Daly  City. 
Calif.  Fraud  detection  is  a 
broad  field,  and  what  may  be 


standard  practice  in  one  in¬ 
dustry  could  be  a  questionable 
practice  in  another,  be  said. 
Greenbaum  also  noted  that 


companies  that  have  to  comply 
with  legislation  such  as  the 
Sarbanes-Oxley  Act  may  lack 

the  internal  processes  and  per¬ 
sonnel  to  do  so.  That  act  crimi- 
naitTtHs  the  destructicm  of  doc¬ 
uments  that  mi^t  be  needed 


for  federal  investigations. 

Available  now.  CleverPath 
for  Global  Compliaitce  runs 
on  Windows,  Linux.  Stm  So¬ 
laris,  HP-UX  and  IBM's  AIX 
and  z/OS.  Pricing  starts 
at$7S.00ai 


Award-Winning,  Economicai 
Power  Protection 
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PowerAlert  Software— to  assufe  optimum  netwoik  pfoductivity.  Leading 
n  publications  agree!  Tripp  Lite  is  consistentiy  recognized  for  its  superior 
performance,  reliability  and  compatibility.  Best  of  all  Tripp  Lite  typicaUy 
includes  advanced  features  not  found  on  comparable  competitive  modeU 
while  still  being  priced  lower. 

SmartOnline '  and  SmanPro*  UPS  SN'stcms 
with  ftjwer.Mcrt  Software 

Ideal  Sotudoos  for  Everything  from  SmoU  Servers  to  Enterprise  Networia 

•  SmartOnline  models  offer  true  on-line  operation-the  highest  level  of 
protection— at  the  same  price  as  competHois’  Une-interactrve  systems 

•  SmartPro  mod^  protect  connected  equipment  with  superior  automatic 
voltage  regulation— corrects  a  wider  input  voluge  range  to  avoid 
unnecessary  battery  depletion 

•  PowerAtert  is  the  only  power  management  software  that  provides 
unparalleled  network  power  management  and  control  over  every  major 
brand  of  UPS  system  on  your  network 

-  Up  to  four  communication  ports  {2  USB  8  2  DBSj-industnf  erdusivel 

•  RackAo*«  maximize  VA  in  space-saving  cabinets-slim  as  lU* 

•  Extended  run  capability  available  on  selert  models 

•  Up  to  SIOO.OOO  Ultimate  Lifetime  losotanee 

.  FuU  range  of  UPS  soUitions  from  450VA  to  lO.OOOWA  capacities 
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See  How  Tripp  UI«Y  SiMitPro  1500  UPS 
Outpertorms  Ow  CompottBoo — For  S200  l**s! 
Visit  www.tripplite.com/promo/cw 
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I  AM  A 
SOYBEAN. 

I  CAN  BUILD  YOUR  NEXT  HOUSE.  I  CAN  BE  MIXED  WITH  RECYCLED 
NEWSPRINT  TO  CREATE  AN  ECO-FRIENDLY  CONSTRUCTION  MATERIAL. 
I  HAVE  THE  POWER  TO  BE  STRONG.  I  HAVE  THE  PHYSICAL  PROPERTIES 
OF  WOOD.  I  HAVE  THE  POWER  TO  MAKE  A  LOVELY  COFFEE  TABLE.  I  AM 
MORE  THAN  A  SOYBEAN. 


I  AM  A 
NETWORK. 

I  CAN  BUILD  INDUSTRIES  FROM  A  BEAN.  I  CAN  GIVE  REAL-TIME 
INVENTORY  UPDATES  TO  RETAILERS,  MANUFACTURERS  AND 
FARMERS  SO  NO  BEAN  IS  WASTED.  I  CAN  GUARD  SOY  SECRETS  FROM 
ECO-FRIENDLY  YET  RUTHLESS  COMPETITORS.  I  CAN  USE  THE  POWER 
OF  CONVERGED  DATA,  VOICE  AND  VIDEO  TO  TEACH  A  GLOBAL  SALES 
FORCE  ABOUT  THIS  VERSATILE  LEGUME.  I  AM  MORE  THAN  A  NETWORK. 
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HP  Enterprise  Exec  Discusses  POstmerger  Strategy 


BV  JAJKUMAB  VUAVAN 

As  executive  vice  president  of 
Hewlett-Packard  Co.'s  Enter¬ 
prise  Systems  Group,  PBter 
Bladnnore  is  responsible  for  an 
522.4  bti/ion  business.  Black- 
more  spoice  with  Computer- 
world  lost  week  a2>our  how 
HP  has  fared  since  its  merger 
with  Compaq  Computer  Corp. 
last  year. 

Why  it  HP  so  bufch  on  Itanium 
tohan  IfM  mot  of  the  Muitry 
aoOTH  to  bo  taking  moro  of  a  wait* 
anri-oao  atMudo?  Both  pre¬ 
merger  companies  came  to  the 
same  decbion.  Both  had  RISC 
architecture,  and  prior  to  the 
merger,  both  had  decided  to 
adopt  Itanium.  The  logic  was 
the  same  in  both  cases  in  that 
we  wish  to  be  in  the  computer 


business,  not  the  chip  busi¬ 
ness.  We  saw  the  advantage  of 
using  industry-standard  chip 
sets  and  industry-standard 
building  blocks  with  more  of 
our  R&D.  then  going  into  the 
value-add  beyond  that. 

The  clustering,  the  par- 
titionii^  the  software 
and  the  management 
tool  sets  are  what  offer 
genuine  differentiation. 

Come  September  or 
October,  when  we 
launch  a  complete 
itaniitm  product,  there 
will  be  a  paradigm 
shift.  It  will  be  a  dis¬ 
ruptive  technology. 

At  a  tinw  when  other  companies 
are  ramping  up  their  mhhieware 
inrestments.  why  has  HP  eaited 


the  midffleware  business?  Where 
we  are  investing  the  money  is 
on  management  software  and 
virtualization.  Middleware  is 
only  part  of  that  What  weVe 
decided  to  do  is  have  a  very 
strong  management 
software  architecture. 
So  we  have  OpenView 
as  the  core  of  the  man¬ 
agement  software. 

Above  that,  we  have 
leadership  concepts 
such  as  Utility  Data 
Center,  which  is  ab¬ 
solutely  world  class 
and  is  18  months  ahead 
of  IBM  and  way  ahead 
of  anything  Sun  has  to  offer. 

It  enables  virtualization  and 
dynamic  reconfiguration  of  all 
the  systems  in  a  data  center  or 
across  multiple  data  centers.  It 


is  a  very  sophisticated  ap¬ 
proach  to  managing  the  infra¬ 
structure. 

What  role  do  you  see  Limn  play¬ 
ing  in  the  antorprisa?  We  see 
Linux  as  being  absolutely 
strategic.  We  see  growth  in  all 
of  the  three  standards  — 
Windows,  Linux  and  HP-UX. 
[which  is]  a  standard  by  de¬ 
fault  because  it  has  got  32%  of 
the  Unix  market. 

We  actually  have  a  S2  billion 
Linux  business.  We  have  the 
highest  market  share  of  any  of 
the  vendors  in  Linux  on  server 
platforms.  It  is  30%. 

We  have  a  b^  service  prac¬ 
tice  around  Unux:  Around 
5,000  of  our  services  people 
are  trained  on  suppoitir^ 
Linux. 


Whoro  does  Open  VMS  fit  in  the 
ovoril  sehanw  of  tilings  at 
these  days?  It  is  already  well 
on  its  way  to  being  ported  to 
IA-64.  We  will  continue  to 
support  it  on  IA-64.  It  is  a  very 
special  class  of  operating  sys¬ 
tem.  We  are  not  planning  to 
do  anything  else  other  than  to 
continue  suppoitii^  this  envi¬ 
ronment,  as  well  as  the 
450,000  users  around  the 
world  that  are  on  this. 

So  we  are  going  to  maintain 
h  and  make  it  nm  very  well  on 
Itanium.  The  same  [is  true] 
with  the  Non-Stop  environ¬ 
ment.  It  currently  runs  on  the 
MIPS  chip.  It  will  be  migrated 
to  IA-64  as  well  P 
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To  read  the  fid  interview  with  Blackmoie. 
veil  GW  Web  site; 


FIMALLY.  BUSINESS 
SOLUTIOBIS  THAT 
WORK  WITH  EXISTING 
TECHNOLOGIES  AMP 
NONEXISTENT  BUDGETS. 

You  need  to  get  more  oui  of  what  you  have.  We  have  just  the  thing:  solutions  based  on  our 
open  technology  plattorm,  SAP  NetWeaver"  Because  it’s  precontigured  to  work  with  your  current 
IT  investments  -  and  it’s  full)  operable  with  -NET  and  J2EE  -  SAP  NetWeaver  reduces  the  need  for 
custom  integration.  That  lowers  your  total  cost  of  ownership  for  your  entire  IT  landscape  and  gets 
you  (Quicker  ROI.  Everything  a  CIO  wants  (and  a  CFO  didn't  think  was  possible).  Visit  sap.com/open  or 
call  800  880 1727  for  details. 

THE  BEST-RUN  BUSINESSES  RUN  SAP 
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Spamming  Tsunami 


Ui 


TORY  IDEA!  Survey  shows  most 
needed  appliance  is  refrigerator,” 
chirped  the  subject  line  of  one  of  my 
I  e-mail  messages  last  week.  It  was 
one  of  the  many  hundreds  of  idiotic 


C'lnaiLs  rhat  clutter  my  iit- 
btJX  evvry  week.  Silly  and 
unsolicited,  but  hardly 
real  spam. 

The  genuine  garbage 
arrives  in  messages  like 
this  one:  “Attention  my 
friend,  compliments  of 
the  season!"  says  a  Mr. 

Abaku  Kwame.  who  gen- 
eniu-sly  offers  me  a  share 
in  the  millions  of  stolen 
funds  from  some  coun¬ 
try’s  royal  family  coffers. 

Both  of  these  messages 
slid  right  through  Co/nputcrworlifs 
spam  filtering  service,  which  we  out¬ 
source  to  I*ostini.  I  probably  get  one 
legitimate  e-mail  out  of  every  dozen 
messages  at  this  point,  despite  filter¬ 
ing  efforts.  To  be  fair.  Postini  does 
catch  some  20.000  messages  a  week 
in  its  spam  filters  —  a  whopping  45% 
of  ail  the  e-mail  (Inmputerworld  re¬ 
ceives.  That  percentage  unfortunate¬ 
ly  puts  U.S  on  the  far  leading  edge  of 
the  spamming  tsunami,  which  is  es- 
timati^  to  be  30%  of  all  corporate 
e-mail  today. 

We  can  ail  recite  the  litany  of  com¬ 
plaints  abt>ut  unwelcome  e-maiL  It 
drains  user  productivity,  wastes  lime 
on  e-mai!  triage,  overloads  e-mail 
systems  and  servers,  and  drives  up 
storage  costs.  It  also  gives  the  HR 
department  heartburn,  since  sexual¬ 
ly  explicit  e-mails  could  lead  to  hos¬ 
tile-workplace  lawsuits. 

But  because  there  are  so  many 
other  things  to  worr>’  about  in  the 
world.  I  usually  shrug  off  spam  as  the 
price  we  pay  for  the  convenience  of 
e-mail.  It's  the  killer  app  with  the 
killer  annoyance,  tagging  alongside 
like  an  evil  twin. 

Yet  the  trend  lines  on  spam  as  a 
corporate  IT  problem  are  rapidly 
heading  in  the  wrong  direction:  up. 

This  year,  spam  is  expected  to  cost 


U.S.  businesses  more 
than  SIO  billion  in  lost 
productivity  and  addi¬ 
tional  bandwidth,  accord¬ 
ing  to  Ferris  Research. 
And  as  wireless  e-mail 
continues  to  catch  on, 
the  toll  spam  takes  will 
spiral  even  higher. 

"Bandwidth  is  virtually 
free  on  the  Internet,  but 
it’s  not  free  in  wireless.” 
points  out  Danny  Shader. 
CEO  of  Good  Technolo¬ 
gy.  a  mobile  computing 
vendor.  “That  spam  is  costing  real 
money,  and  somebody's  gt>ing  to  be 
able  to  use  that  economic  loss  to  se¬ 
riously  nail  one  of  the  spammers.” 

Enter  the  legislators  and  the 
lawyers.  As  we  reported  last  week 
[“States  Rush  to  Pass  Laws  to  Fight 
Spam,"  QuickLink  368741,  all  50 
slates  could  have  antispam  laws  on 
the  books  by  the  end  of  this  year. 

Half  of  them  already  do.  But  these 
new  laws,  while  gratifying  to  the  le¬ 
gions  of  spam-haters,  are  largely  use¬ 


less  for  actually  slopping  the  stuff. 

For  corporate  IT.  there  are  some 
hopeful  developments  on  the  hori¬ 
zon.  but  few  products  that  scale  to 
data  center  heights. 

Both  Microsoft  and  America  On¬ 
line  are  openly  at  war  with  spam¬ 
mers.  with  AOL  reporting  last  week 
chat  its  new  antispam  feature  is 
blocking  as  many  as  I  billion  e-mails 
per  day.  Serious  attention  is  also  be¬ 
ing  paid  to  the  problem  by  the  influ¬ 
ential  (albeit  slow-moving)  Internet 
Engineering  Task  Force  standards 
body,  which  this  week  in  San  Fran¬ 
cisco  will  be  investigating  preven¬ 
tion  strategies  in  its  newly  created 
aniispam  research  group. 

In  the  meantime,  industrial- 
strength  antispam  software  for  en¬ 
terprises  is  notably  lacking,  says  in¬ 
ternet  pioneer  Eric  Hahn,  now-  a 
partner  in  Inventures  Group,  an  in¬ 
vestment  firm  for  technology  start¬ 
ups.  “There  are  interesting  things  be¬ 
ing  done  for  consumers  and  ISPs,  but 
in  the  corporate  market,  the  number 
of  offerings  are  few  and  far  be¬ 
tween."  he  contends.  “The  vendor 
community  is  just  now  responding." 

With  the  high  tide  of  spam  contin¬ 
uing  to  surge,  the  first  vendor  that 
delivers  a  truly  effective  spam  block¬ 
er  for  the  data  center  will  save  many 
a  drowning  CIO  while  making  a 
boatload  of  money  to  boot.  I 
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PIMM  FOX 

Middleware 
With  a  Twist 

As  THE  NEED  to  access 
information  grows,  the 
importance  of  reach¬ 
ing  the  brass  ring  of  integra¬ 
tion  throughout  the  organiza¬ 
tion  rises.  That's  why  you're  going  to 
hear  more  and  more  about  the  move 
away  from  a  single  database  or  data¬ 
base  management  product  to  some¬ 
thing  virtual  that  can  integrate  infor¬ 
mation  internally  as  well  as  across  sup¬ 
pliers  and  customers.  Something  like 
middleware.  But  with  a  twist. 

It's  called  federated  development, 
and  it's  defined  as  the  ability  to  have 
an  integrated  view  of  all  pertinent  in¬ 
formation  without  keeping  the  data  in 
one  central  location.  Getting  that  fed¬ 
erated  view  isn't  going  to  be  easy. 

Rather  than  writing  code,  ibis  new 
federated  method  relies  on  gluing 
code  together  using  open  standards 
that  are  defined  for 
difl'erent  platforms. 

This  approach  re¬ 
quires  an  informa¬ 
tion  integrator  — 
like  a  software  plug¬ 
in  —  that  can  learn 
the  best  way  to  an¬ 
swer  a  queiy  and 
that  can  be  reused. 

In  essence,  these  in¬ 
tegrators  build  a  vir¬ 
tual  database. 

It  certainly  makes 
sense,  given  the  myriad  platforms  that 
organizations  have  deployed  and  the 
various  geographical  locations  IT  op¬ 
erations  have  come  to  support.  But 
how  practical  is  this  sort  of  integration 
effort,  given  the  ongoing  need  for  ser¬ 
vice,  maintenance  and  enhancement.s? 
At  the  Indiana  University  School  of 
Medicine,  for  example,  about  lOOGB  of 
biomedical  information  is  produced 
every  day  —  and  it  needs  to  be  avail¬ 
able  at  multiple  sites  in  various  forms, 
depending  on  the  systems  users  have 
access  to.  Corporate  CRM  solutions 
present  similar  data  management  chal¬ 
lenges.  with  call  center  support,  cus¬ 
tomer  transactions,  e-mails,  scanned 
docuntents  and  real-time  information 
all  needing  to  be  woven  together.  How 
can  a  federated  approach,  which 
builds  its  virtual  database  over  time, 
assist  in  these  cases? 

The  scope  of  these  problems  may 


24 


WWW  computerworid.com 


MARYFRAN  JOHNSON 


Spamming  Tsunami 


Ui 


TORY  IDEA!  Survey  shows  most 
needed  appliance  is  refrigerator,” 
chirped  the  subject  line  of  one  of  my 
I  e-mail  messages  last  week.  It  was 
one  of  the  many  hundreds  of  idiotic 


e*inaUs  that  chitter  my  Lo- 
box  every  week.  Silly  and 
uQSolictted,  but  hardly 
real  spam. 

The  genuine  garbage 
arrives  in  messages  like 
this  one:  "Anention  my 
friend,  compliments  of 
the  seasonr  says  a  Mr. 

Abaku  Kwame,  who  gen¬ 
erously  oflfers  me  a  share 
in  the  millions  of  stolen 
funds  from  some  coun¬ 
try’s  royal  family  coffers.  _ 

Both  of  these  messages 
slid  right  through  Computerworlds 
spam  filtering  service,  which  we  out¬ 
source  to  Postini.  I  probably  get  one 
legitimate  e-mail  out  of  every  dozen 
messages  at  this  point,  despite  filter¬ 
ing  efforts.  To  be  fair,  Postini  does 
catch  some  20,000  messages  a  week 
in  its  spam  filters  —  a  whopping  45% 
of  all  the  e-mail  Computenvorld  re¬ 
ceives.  That  percentage  unfortunate¬ 
ly  puts  us  on  the  far  leading  edge  of 
the  spamming  tsunami,  which  is  es¬ 
timated  to  be  30%  of  all  corporate 
e-mail  today. 

We  can  all  recite  the  litany  of  com¬ 
plaints  ^XMit  unwelcome  e-mail.  It 
drains  user  producthiry,  wastes  rime 
on  e-mail  triage,  overloads  e-mail 
systems  and  servers,  and  drives  up 
storage  costs.  It  also  gives  the  HR 
department  heartburn,  since  sexual¬ 
ly  explicit  e-mails  could  lead  to  bos- 
tile-woritplace  lawsuits. 

But  because  there  are  so  many 
other  things  to  worry  about  in  the 
world.  I  usually  shrug  off  spam  as  the 
price  we  pay  for  the  convenience  of 
e-mail.  It's  the  killer  app  with  the 
killer  annoyance,  tagging  alongside 
tike  an  evil  twin. 

Yet  the  trend  lines  on  spam  as  a 
corporate  IT  problem  are  rapidly 
heading  in  the  wrong  direction:  up. 

This  year,  spam  is  expected  to  cost 


U.S.  businesses  more 
than  SIO  billion  in  lost 
productivity  and  addi¬ 
tional  bandwidth,  accord¬ 
ing  to  Ferris  Research. 
And  as  wireless  e-mail 
continues  to  catch  on. 
the  toll  spam  takes  will 
spiral  even  higher. 

"Bandwidth  is  vinually 
free  on  the  Internet,  but 
it's  not  free  in  wireless," 
points  out  Danny  Shader. 
_ CEO  of  Good  Technolo¬ 
gy.  a  mobile  computing 
vendor.  "That  spam  is  costing  real 
money,  and  somebody’s  going  to  be 
able  to  use  that  economic  loss  to  se¬ 
riously  nail  one  of  the  spammers." 

Enter  the  legislators  and  the 
lawyers.  As  we  reported  last  week 
["States  Rush  to  Pass  Laws  to  Fight 
Spam,"  (^ickLink  36874],  all  50 
states  could  have  antispam  laws  on 
the  books  by  the  end  of  this  year. 

Half  of  them  already  do.  But  these 
new  laws,  while  gratifying  to  the  le¬ 
gions  of  spam-haters,  are  largely  use¬ 


less  for  actually  stopping  the  stuff. 

For  corporate  IT,  there  are  some 
hopeful  developments  on  the  hori¬ 
zon.  but  few  products  that  scale  to 
data  center  heights. 

Both  Microsoft  and  America  On¬ 
line  are  openly  at  war  with  spam¬ 
mers,  with  AOL  reporting  last  week 
that  its  new  antispam  feature  is 
blocking  as  many  as  I  billion  e-mails 
per  day.  Serious  attention  is  also  be¬ 
ing  paid  to  the  problem  by  the  influ¬ 
ential  (albeit  slow-moving)  Internet 
Ei^neering  Task  Force  standards 
body,  which  this  week  in  San  Fran¬ 
cisco  will  be  investigating  preven¬ 
tion  strategies  in  Us  newly  created 
anttspam  research  group 

In  the  meantime,  industrial- 
strength  antispam  software  for  en¬ 
terprises  is  notably  lacking,  says  In¬ 
ternet  pioneer  Eric  Hahn,  now  a 
partner  in  Inventures  Group,  an  in¬ 
vestment  Ann  for  technology  start¬ 
ups.  "There  are  interesting  things  be¬ 
ing  done  for  consumers  and  ISPs,  but 
in  the  corporate  maricet,  the  number 
of  offerings  are  few  and  far  be¬ 
tween,”  he  contends.  "The  vendor 
community  is  just  now  responding.” 

With  the  high  tide  of  spam  contin¬ 
uing  to  surge,  the  first  vendor  that 
delivers  a  truly  effective  spam  block¬ 
er  for  the  data  center  will  save  many 
a  drowning  CIO  while  making  a 
boatload  of  money  to  boot.  I 
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Middleware 
With  a  Twist 

As  THE  NEED  to  access 
information  grows,  the 
importance  of  reach¬ 
ing  the  brass  ring  of  integra¬ 
tion  throughout  the  organiza¬ 
tion  rises.  That’s  why  you're  going  to 
hear  more  and  more  about  the  move 
a>vay  from  a  single  database  or  data¬ 
base  management  product  to  some¬ 
thing  virtual  that  can  integrate  infor¬ 
mation  internally  as  well  as  across  sup 
pliers  and  customers.  Something  like 
middleware.  But  with  a  twist. 

It’s  called  federated  development, 
and  it's  defmed  as  the  ^ilUy  to  have 
an  integrated  view  of  all  pertinent  in¬ 
formation  without  keeping  the  data  in 
one  central  location  Getting  that  fed¬ 
erated  view  isn’t  going  to  be  easy. 

Rather  than  writing  code,  this  new 
federated  method  relies  on  gluing 
code  together  using  open  standards 
that  are  defmed  for 
different  platforms. 

This  approach  re¬ 
quires  an  informa¬ 
tion  integrator  ^ 
like  a  software  plug¬ 
in  —  that  can  learn 
the  best  way  to  an¬ 
swer  a  query  and 
that  can  be  reused. 

In  essence,  these  in¬ 
tegrators  build  a  vir¬ 
tual  database. 

It  certainly  makes 
sense,  given  the  myriad  platforms  that 
oiganizations  have  deployed  and  the 
various  geographical  locations  IT  op 
erations  have  come  to  support.  But 
how  practical  is  this  sort  of  integratioD 
effort,  given  the  ongoing  need  for  ser¬ 
vice.  maintenance  and  enhancements? 
At  the  Indiana  University  School  of 
Medicine,  for  example,  about  1(X)GB  of 
biomedical  information  is  produced 
every  day  —  and  it  needs  to  be  avail¬ 
able  at  multiple  sites  in  various  forms, 
depending  on  the  systems  users  have 
access  ta  Corporate  CRM  solutions 
present  similar  data  management  chal¬ 
lenges,  with  call  center  support,  cus¬ 
tomer  transactions,  e-mails,  scanned 
documents  and  real-time  information 
all  needing  to  be  woven  together.  How 
can  a  federated  approach,  which 
builds  its  virtual  database  over  time, 
assist  in  these  cases? 

The  scope  of  these  problems  may 
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It’s  a  dedicated, 
redundant  network 
backbone. 


It's  hardened  facilities  and  high-level  security. 

SunGard  maintains  more  than  3  million  sq.  ft.  worldwide  of 
strategically  placed,  hardened  facilities,  providing  you  with 
high  availability  to  your  information  and  virtually  no  downtime. 
Well-staffed  facilities  feature  fully  redundant  power  and 
communications,  state-of-the-art  equipment,  multi-platform 
compatibility  and  high  levels  of  security. 


Every  SunGard  location  is 
connected  by  nearly  25,000 
miles  worldwide  of  dedicated 
network  backbone,  providing 
on-demand  or  dedicated 
DS1/DS3  protocol- 
^  independent 

communications. 


It’s  off-site  data 
storage  that’s 
truly  off  site. 

Some  continuity  plans 
incorporate  in-house 
backup  tapes  and  stor¬ 
age.  But  they’re  useless 
in  a  power  failure,  fire  or 
evacuation.  SunGard's 

off-site  storage  is  a  key  part  of  Information  Availability.  Our 
file  sharing,  primary  storage  and  data  backup  services  are 
unrivalled  for  data  integrity  and  reliability.  And  they  free  up 
your  equipment  and  people  for  other  purposes. 


It’s  platform-independent  professionals 
bringing  it  all  together. 

With  SunGard,  more  than  2,000  Information  Availability  experts 
are  at  your  fingertips.  We  can  help  you  with  everything  from 
vulnerability  assessment  and 
impact  analysis  to  planning,  tech-  qb 
nology  integration,  network  and 

architecture  solutions,  deployment,  ftiminHWy  Senfces 

testing  and  certification.  Everything  jy^  Beneath  Ybu 
you  need  to  keep  your  business 
running,  no  matter  what. 
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Don’t  let  lost  access  to  information  take  your  company  down. 
Stay  up  and  running  with  an  Information  Avaiiability  strategy. 


Talk  with  us.  An  Information  Availability  strategy  from  SunGard  can  be  a  life-saver  when  it 
comes  to  keeping  people  and  information  connected.  Data  is  more  time-sensitive  than  ever. 

And  SunGard’s  complete  continuum  of  services  can  protect  your  information's  availability. 

enterprise-wide.  From  tiered  applications  recovered  as  fast  as 
48  hours,  to  high  availability  applications  in  as  little  as  2  hours, 
to  managed  services  that  provide  continuous  access  to  critical 
information. 

SunGard  offers  the  industry’s  most  comprehensive  Information 
Availability  services  -  from  planning,  traditional  disaster  recovery, 
network  and  managed  services  to  IT  outsourcing,  professional 
consulting  and  high  availability  solutions.  Plus,  end-user  recovery 
facilities  where  your  people  can  go  to  reconnect  with  data  in  an 
emergency.  In  fact,  nearly  90%  of  U.S.  companies  with  $1  million 
or  more  in  revenue  are  located  within  35  miles  of  one  of  our  facilities.* 
Every  day.  we  help  ensure  that  over  10,000 
clients  worldwide  have  uninterrupted  access  to 
their  business-critical  information.  They  count 
on  us  to  supply  the  people,  technology  and 
infrastructure  necessary  to  provide  multiple 
points  of  access  to  information,  flexible  alternate 
workplace  options  for  their  employees,  and 
updated  continuity  plans  and  systems  to  meet 
their  future  technology  needs. 

SunGard  is  one  of  the  largest  providers  of 
platform-independent  business  continuity, 
managed  hosting  services  and  more.  No 

company  has  more  ways  to  keep  your  business  in  business.  See  how  your  company 
rates  on  Information  Availability  right  now.  Take  our  Information  Availability  Challenge  at 

www.availability.$ungard.com/iac 
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SunGard:  The  Net  Beneath  You. 

With  SunGard  you  get 

•  the  company  that  founded  the  recovery 
industry  in  1978 

•  comprehensive  support  for  more  than 
30  platforms 

•  75  facilities  in  10  countries  with  more  than 
15,000  end-user  positions  worldwide 
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seem  to  overwhelm  the  advent  of  data 
federation,  just  as  it  did  for  the  prom¬ 
ise  of  middleware  without  the  twist 
But  it  may  be  the  only  reasonable  ap¬ 
proach  to  integrate  complex  environ¬ 
ments  without  abandonii^  long-stand¬ 
ing  IT  inirastnictures. 

Nelson  Mattos,  director  of  integra¬ 
tion  information  at  IBM’s  Silicon  Val¬ 
ley  Laboratory,  says,  “As  change  ioify- 
pens  in  the  marketplace,  you  have  to 
be  able  to  move  pieces  of  data  around 
quickly  in  a  way  that  doesn't  require 
you  to  redo  your  entire  system." 

Sure,  It  would  be  great  to  always 
have  a  central  data  repository  and  a 
clean  access  environment.  But  that’s 
not  practical  for  most  companies  be¬ 
cause  of  mergers,  new  suppliers,  lega¬ 
cy  systems  and  a  host  of  other  rea¬ 
sons.  And  even  if  it  seems  practlcaL 
the  money  to  build  a  centr^  reposito¬ 
ry  isn't  in  the  offing.  So  a  federated  ap¬ 
proach  could  be  the  answer.  I 

DAVID  MOSCHELLA 

Lessons  From 
A  London 
Traffic  Project 

Anyone  who  has 
ever  tried  to  drive 
across  London  knows 
that  its  traffic  is  among  the 
world’s  worst.  That  great  city 

just  wasn't  built  for  cars.  Most  streets 
are  too  narrow,  and  even  the  wide 
ones  get  bogged  down  by  countless 
trainc  li^ts,  roundabouts,  bus  lanes 
and  seemingly  endless  construction 
and  repairs.  slightest  accident, 

breakdown  or.  heaven  forbid,  snow 
can  reduce  large  sections  of  the  city  to 
hopeless  gridlock. 

Happily,  it  now  appears  that  IT  can 
help.  On  Fdx  17.  London  switched  on 
its  controversial  system  for  charging 
for  congestion,  whereby  from  7:00 
ajn.  to  6J0  pjn.  on  weekdays,  anyone 
driving  into  a  rou^y  S-square-mile 
zone  of  central  London  b  charged  £5 
(about  $8).  Despite  many  dire  warn¬ 
ings.  the  system  has  mostly  performed 
as  promised.  Better  stiff,  the  volume 
of  cars  in  the  central  city  has  notice¬ 
ably  declined.  Thus  far  at  least,  the 
strongest  proponent  of  congestion 
chargmg,  Loirdon  Mayor  Ken  Uving- 
stone,  is  all  smiles. 

Here’s  bow  it  works.  According  to 
the  Capita  Group,  the  project’s  lead 


contractor,  there  are  174  en¬ 
try  and  exit  points  to  the 
charging  zeme,  each  of 
which  is  monitored  by 
banks  of  analog  cameras. 

Some  of  them  capture  li¬ 
cense  plate  numbers.  Each 
captured  number  is  sent  to 
a  central  database  that 
checks  whether  the  owner 
of  that  car  has  paid  the  re¬ 
quired  fees  or  has  one  of 
several  exemptions.  Those 
who  haven’t  are  fmed. 

The  philosophy  bchittd 
congestion  charges  appears 
to  transcetHi  political  ideol¬ 
ogy.  Livingstone  is  often  affectionately 
refoned  to  here  as  “Red  Ken."  because 
of  his  gerrerally  for-left  —  tbou^ 
jovial  —  views.  However,  the  idea  of 
using  pricing  mechanisms  to  reduce 
excessive  traffic  has  been  championed 
by  Milton  Friedman  since  the  IS^SOs. 
a^  the  only  other  major  city  to  adopt 
this  type  of  approach  is  Singapore, 


hardly  a  fovorite  of  the  left. 

For  IT  vendors,  traffic 
management  systems  are  a 
potentially  large  new  pub¬ 
lic-sector  opportunity 
(something  that  is  clearty 
needed  ri^t  now).  Consid¬ 
er  that  the  current  system 
covers  less  than  2%  of 
Greater  London  and,  more 
iroportam,  that  hundreds 
of  cities  around  the  world 
are  dosely  monitoring  this 
initiative.  If  London's  suc¬ 
cess  continues,  other  cities 
will  surely  follow. 

But  for  IT  users,  the 
main  message  is  one  of  leadership. 
Coi^estion  charges  are  a  good  exam¬ 
ple  of  a  system  that  can’t  be  done  in¬ 
crementally.  can't  be  easily  prototyped 
and  has  to  work  effectively  from  Day  L 
Someone  had  to  make  the  large  up¬ 
front  capital  investment  and  accept 
the  associated  risk.  In  London's  hyper¬ 
critical  politkaff  culture,  this  wasn't 


easy.  The  left  has  attacked  the  plan 
as  both  unfoir  to  the  poor  and  worri- 
somely  Orwellian,  the  right  as  just  an¬ 
other  tax  increase.  Both  sides  doubted 
that  such  a  complex,  quasi-govem- 
mental  system  would  ever  really  work. 

Whether  or  not  you  support  conges¬ 
tion  charges.  London's  example  shows 
how  IT  industry  leadership  is  moving 
away  from  suppliers  and  toward  cus¬ 
tomers,  who  must  provide  the  leader¬ 
ship.  risk-taking  and  perseverance  that 
n*  progress  has  always  required  (this 
is  the  main  theme  of  my  recent  book). 
In  this  sense,  congestion  diaiges  are 
just  one  example  of  the  many  impor¬ 
tant  new  systems  that  IT  b  capable  of 
supporting.  Fortunately,  the  mayor  of 
London  has  provided  the  necessary 
leadership,  much  to  the  benefit  of  the 
entire  hi^-tech  community.  I 
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A  Strict  Focus  on  ROI  Can  Be  Limiting 

coffhiriahonlhal  can  create  com- 
patitive  adtertaoe.  in  the  end.  true 
businessvalueflndincreasedcoiR' 
pellliveachaniaoewrilheipaoom' 
pany  suxaed.  end  that  success  is 
more  invortant  than  generating 
poslive  ROI  numbers. 
MaiyHtegii 

Managing  partner.  CJariston 
Consulting.  Durtum.  N.C. 
fnhaigis@darkstonconsaiittng 


WriM  K«UD  TO  the  Speed 
report  on  ROI  in  the  Feb.  17 
Bsue[QuicldJr*i^].  ClOsml 
IT  managers  may  be  tenting  thar 
resufts  by  becomng  too  foofied  on 
ROL  While  measuring  reksn  on  any 
software  project  is  importvL  N 
shouldnl  be  the  key  deienmnam  oi 
success.  As  your  writers  pointed 
out  (he  assodaied  soft  benefits, 
such  as  improwng  customer  rela¬ 
tionships,  are  dKficult  to  measure. 
But.  in  actuafity.  R  h  the  soft  bene¬ 
fits,  not  the  ROf.  Aat  can  (fisrupt 
marhetsandcrealetruecompeti- 
tive  adrantage  and  business  irelue. 

Technology  innovation  that 
creates  true,  sustainable  business 
Mlue  doesn't  always  fit  into  a  neat 
measuemenl  tool  The  focus  on 
ROI  is  a  good  starting  poin  bb  fo¬ 
cusing  sthedy  on  protect  mfobers 
vs-busnsssresbtscanbedan- 
geroux  Wttioul  tdeing  a  hofistK 
viewottheoiganaation.  inefficien¬ 
cies  csi  be  dispiaced  from  one 
depanmeni  to  another.  While  the 
ROI  numbers  may  look  good,  the 
bottom-line  business  benefits  may 
beladong. 

lnstBad.companiesshoutdto- 
CUB  on  deWenng  sustainable  busi¬ 
ness  value  and  pay  ctose  attention 
to  teveragino  peo^  and  processes 
as  wdl  as  technotogy.  ft  is  this 


The  Myth  of  ROI 

HOW  ABOVT  "The  Last  Chteter 
ROT  iTBlBed  of  "The  Ned 
Chvfer  ROr[Quirilri(  3b5B4P 
in  he  book  TheMomthon 
Pvadbr{Mc&aw4fil  1999).  John 
Thorp  pointod  out  the  myth  of  ROL 
Thorp  makes  the  definction  be¬ 
tween  ff  protects  and  business- 
change  programs.  IT  doesn't  gen- 
erate  value;  I  generates  costs. 
Tednotogy  6  an  expense.  For  that 
expense,  you  can  get  a  capabMy. 


Calcuiating  True  ROL  Associated  Risks 

DOmEWHATBSAIOlnthe 
arbeie  "Tough  Taak:  Why  roi 
k  hrvoriantTQuicldJnk  359511 


ITs  impact  on  an  organuation  is 
quanfifiabk  and  measuabie.  Ertk 
BrynioKsson's  statement  that  *up 
to  90%  of  foe  costs  and  benefits  of 
IT  investments  are  in  ikangbias*  B 
lust  plain  wrong.  IT  nrestments.  in 
generaLaesonteoffoenskiestin' 
Mslments  a  company  wi  make. 
The  risk  comes  from  the  underhang 
mcartaintiesfoatareinhetentto 
the  cost  and  benefit  varables  foal 
make  up  foe  (T  investmenl.  Very 
few  methods  have  been  succeasfuf 
In  corredly  calculBbng  the  due  ROi 
atong  with  its  associaled  risks.  An 
excapfion  k  foe  Appfied  Informa¬ 
tion  Economics  (Alb  mefoodoiogy 


ufibed  by  Information  foinomcs 
Inc  As  part  of  foe  AE  mafoodoiogy. 
weuseatachniquecaledfoeclart- 
ficalionchatrrIfiBbener.iiBdIf- 
feranl  in  sotTB  refevanl  way;  if  it  e 
differeni  in  some  reievam  way.  i  is 
observable;  I R  k  obsarvabie.  It  6 
observable  n  some  amoura.  R  R  B 
observatte  m  some  amounL  N  can 
be  measured.  The  mam  reason  IT 
anafyss  refers  to  Mangttes  6  foal 
most  people  areni  pitiperty  hainad 
to  oknfy  what  a  decsion  vanabie 
means.  Ewyihng  foal  k  reef  for 
ffiiMstmarR  kmaestfable. 
DaitferafiaU 
EjKCutivevkepraadent, 
Information  Beonomia. 
Chicoio, 
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nofonpiROta  Forlheorgviiztelon 
to  gat  value  -  to  generate  a  return 
on  nvesfinenl  -  anofoer  hey  tang 
has  to  happen.  Somaone  has  to  use 
lhscapabllvM(Btollan.foatre- 
quses  a  cfange  in  proceseas  or  be¬ 
havior  and  a  harvesting  of  those 
benefits- Then  foe  orgamzatton  gets 
vakie. 

IncTeastfigfy.  wbai  Thoto  and  fas 
groupcaledfoe'inlorTnalionpare’ 
doa*  -  foe  reason  we  doni  gal  val¬ 
ue  from  fT  -  B  not  a  lestRl  of  faBng 
tobuld  foe  capteiiRy- Wa  an  gat¬ 
ing  better  and  better  at  tuUmg 
technick  soimions.  R  is  mstoad  a 
reskloltabng  tomaketheneoas- 
satydangas  in  people,  processes 
andarganizteion& 

Jenea  Harrlian 
Sandringham.  Victoria, 
Austrolio 
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seem  to  overwhelm  the  advent  of  data 
federation,  just  as  it  did  for  the  prom¬ 
ise  of  middleware  without  the  twist. 
But  it  may  be  the*  only  reasonable  ap¬ 
proach  to  integrate  complex  environ¬ 
ments  without  abandoning  long-stand¬ 
ing  IT  infrastructures. 

Nelson  Mattos,  director  of  integra¬ 
tion  information  at  IBM's  Silicon  Val¬ 
ley  Laboratory,  says.  “As  change  hap¬ 
pens  in  the  marketplace,  you  have  to 
be  able  to  move  pieces  of  data  around 
quickly  in  a  way  that  doesn't  require 
you  to  redo  your  entire  system." 

Sure,  it  would  be  great  to  always 
have  a  central  data  repository  and  a 
clean  access  environment.  Rut  that's 
not  practical  for  most  companies  be¬ 
cause  of  mergers,  new  suppliers,  lega¬ 
cy  systems  and  a  host  of  other  rea¬ 
sons.  And  even  if  it  seems  practical, 
the  money  to  build  a  central  reposito¬ 
ry  isn’t  in  the  offing.  So  a  federated  ap¬ 
proach  could  be  the  answer,  k 

DAVID  MOSCHELLA 

Lessons  From 
A  London 
Traffic  Project 

Anyone  who  has 
ever  tried  to  drive 
across  London  knows 
that  its  traffic  is  among  the 
world’s  worst.  That  great  city 
just  wasn't  built  for  cars.  Most  streets 
arc  loo  narrow,  and  even  the  wide 
ones  get  bogged  down  by  countless 
traffic  lights,  roundabouts,  bus  lanes 
and  seemingly  endless  construction 
and  repairs.  The  slightest  accident, 
breakdown  or.  heaven  forbid,  snow 
can  reduce  large  sections  of  the  city  to 
hopeless  gridlock. 

Happily,  it  now  appears  that  IT  can 
help.  On  Feb.  17.  London  switched  on 
its  controversial  system  for  charging 
for  congestion,  whereby  from  7;00 
a.m.  to  6:30  p.m.  on  weekdays,  anyone 
driving  into  a  roughly  8-square-milc 
zone  of  central  London  is  charged  £5 
(about  S8).  Despite  many  dire  warn¬ 
ings.  the  system  has  mostly  performed 
as  promised.  Better  still,  the  volume 
of  cars  in  the  central  city  has  notice¬ 
ably  declined.  Tbus  far  at  least,  the 
strongest  proponent  of  congestion 
charging.  London  Mayor  Ken  Living¬ 
stone.  is  all  smiles. 

Here's  how  it  works.  According  to 
the  Capita  Group,  the  project's  lead 


contractor,  there  arc  174  en¬ 
try  and  exit  points  to  the 
chaiging  zone,  each  of 
which  is  monitored  by 
banks  of  analog  cameras. 

Some  of  them  capture  li¬ 
cense  plate  numbers.  Each 
captured  number  is  sent  to 
a  central  database  that 
checks  whether  the  owner 
of  that  car  has  paid  the  re¬ 
quired  fees  or  has  one  of 
several  exemptions.  Those 
who  haven’t  are  fined. 

The  philosophy  behind 
congestion  charges  appears 
to  transcend  political  ideol¬ 
ogy.  Livingstone  is  often  affectionately 
referred  to  here  as  “Red  Ken."  because 
of  his  generally  far-left  —  though 
jovial  —  views.  However,  the  idea  of 
using  pricing  mechanisms  to  reduce 
excessive  traffic  has  been  championed 
by  Milton  Friedman  since  the  1950s. 
and  the  only  other  major  city  to  adopt 
this  type  of  approach  is  Singapore, 


hardly  a  favorite  of  the  loft. 

For  IT  vendors,  traffic 
management  systems  are  a 
potentially  large  new  pub¬ 
lic-sector  opportunity 
(something  that  is  clearly 
needed  right  now).  Consid¬ 
er  that  the  current  system 
covers  less  than  2%  of 
Greater  London  and.  more 
important,  that  hundreds 
of  cities  anmnd  the  world 
are  closely  monitoring  this 
initiative.  If  London's  suc¬ 
cess  continues,  other  cities 
will  surely  follow. 

But  for  IT  users,  the 
main  message  is  one  of  leadership. 
Congestion  charges  arc  a  good  exam¬ 
ple  of  a  system  that  can't  be  done  in¬ 
crementally.  can't  be  easily  prototyped 
and  has  to  work  effectively  from  Day  I. 
Someone  had  to  make  the  large  up¬ 
front  capital  investment  and  accept 
the  associated  risk.  In  London’s  hyper¬ 
critical  political  culture,  this  wasn't 


easy.  The  left  has  attacked  the  plan 
as  both  unfair  to  the  poor  and  worri- 
somely  Orwellian,  the  right  as  ju’^t  an¬ 
other  lax  increase.  Both  sides  doubled 
that  such  a  complex,  quasi-govem- 
mental  system  would  ever  really  work. 

Whether  or  not  ymu  support  ctinges- 
tion  charges.  London’s  example  shows 
how  IT  industry  leadership  is  rmwing 
away  from  suppliers  and  toward  cus¬ 
tomers.  who  mu.st  provide  the  leader¬ 
ship,  risk-taking  and  perseverance  that 
IT  progress  has  always  n.'quired  (this 
is  the  main  theme  of  my  recent  book ). 
In  (his  sense,  congestion  charges  are 
just  one  example  of  the  many  impor¬ 
tant  new  systems  that  IT  is  capable  of 
supporting.  Fortunately,  the  mayor  of 
London  has  provided  the  necessary' 
leadership,  much  to  the  benefit  of  the 
entire  htgb-iech  community  I 
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A  Strict  Focus  on  ROI  Can  Be  Umiting 

WITHREOARO  TO  (he  special 
report  on  ROI  in  the  Frt.  17 
issue  (QuicKLinh  k2340].  OOs  and 
IT  managers  may  be  limiting  their 
results  by  becoming  too  iocused  on 
ROI.  While  measunng  return  on  any 
software  protect  is  important,  it 
shouldn't  be  the  Key  determinant  of 
success  As  your  writers  pointed 


out,  the  associated  soft  benefiis. 
such  as  improving  customer  rela¬ 
tionships.  are  diflicult  to  measure. 
But.  in  actuality,  it  e  the  soft  bene¬ 
fits.  not  the  ROI.  that  can  disrupt 
markets  and  create  true  competi¬ 
tive  advantage  and  business  value 

Technology  innovation  that 
creates  true,  aislainable  business 
value  doesn't  always  fit  into  a  neat 
measurement  tool.  The  focus  on 
R(M  is  a  good  starting  pomi,  but  fo¬ 
cusing  stnctly  on  protect  numbers 
vs.  business  results  can  be  dan¬ 
gerous.  Without  taking  a  hcAslic 
view  ot  the  organization,  inefficien- 
cies  can  be  displaced  from  one 
department  to  another  White  the 
ROI  numbers  may  look  good,  the 
botlonHme  business  benefits  may 
be  lacking. 

instead,  companies  should  fo¬ 
cus  on  dekveong  sustainable  busi¬ 
ness  value  and  pay  dose  attention 
lo  leveraging  people  and  processes 
as  well  as  technology,  it  is  this 


combination  that  can  create  com¬ 
petitive  advantage  In  the  end.  (rue 
business  value  and  moeased  com¬ 
petitive  advantage  wiH  help  a  com¬ 
pany  succeed,  and  that  success  6 
more  important  than  generating 
positive  ROI  numbers 
MaryHaigis 

Managing  partner,  Ctarksum 
Consulting,  Durham.  S.C., 
mhaigis'.avlarkstoncortsulting. 
com 


The  Myth  of  ROI 

HOW  ABOUT  The  Last  (>aotei 
ROT  instead  ol 'The  Next 
Chapter  ROTIOucklmk  3&584p 
Inhisbook  neMomtabon 
ParadmfMcfSraw  HI.  1999).  John 
Tliorp  pointed  out  the  myth  q(  ROI 
Thorp  makes  the  distinclion  be¬ 
tween  IT  protects  and  business- 
change  programs  IT  doesn't  gen¬ 
erate  value  It  generates  costs 
Technologv  ts  an  expense  For  that 
expense,  you  can  get  a  caoability. 


(kilculating  True  ROI,  Associated  Risks 

D 


ESPfTEWHATISSAIOinthe 
artide  ‘Tough  Task.  Why  R(3t 
ts  Important'  [QuickUnk  35951 }. 
rTstfnpactonan  orgamzabone 
Quantifiabte  and  measurable.  Erik 
Brynjolisson's  stalemeni  that  'up 
to  90%  ol  the  costs  and  benefits  of 
IT  investments  are  m  ntangibtes' s 
ius(  plain  wrong  IT  mvestmenis.  in 
general,  are  some  of  the  nskwst  in¬ 
vestments  a  company  WiH  make 
The  nsk  comes  from  the  underlying 
uncertainties  diat  are  mhemnt  lo 
the  cost  and  benefit  variables  that 
make  up  the  IT  invedmervi.  Very 
tew  methods  have  been  successU 
in  correctly  calculating  the  true  ROI 
along  iMth  Its  assoaaled  risks.  An 
exception  is  the  Applied  hviorma- 
tion  Economics  (AIE)  methodology 


uhkzed  by  Inlormation  Economics 
Inc  As  part  of  the  AIE  methodology, 
we  use  a  tedmique  called  the  dan- 
ficationcham  It  it  isbetter.it  isdrt- 
lerent  insomeretevaniwayifilis 
different  m  some  retevani  way.  <1  s 
oteervabte.  tl  It  Q  oteervabte  It  e 
observable  m  some  amauN:  il  It  6 
observable  m  some  amount.  It  Btfi 
bemeasured  The  mam  reason  IT 
analysis  refers  to  intangdites  is  that 
most  people  arenT  property  Irained 
lo  darify  what  a  decsion  vartabte 
means  EmySiing  that  e  real  for  an 
rr  investment  smeasurabte 
David  Gronski 
Ettfcufive  via-  prvsidCTit. 
Information  Economics, 
Chicago. 

dgrontkiiii'infocconfmicsjHZ 


{  nofteng  more.  For  the  orgamzabon 
I  to  get  value 'to  generate  a  retin 
on  mveslment  -  another  key  thng 
haslohappen  Someone  has  to  use 
the  capabililv  Most  often  that  re- 
ouves  a  change  mpmeesses  or  be¬ 
havior  and  a  harvesting  of  tfiose 
benefits  Then  the  organization  gets 
value 

Increasingly,  what  Thorp  and  hs 
group  calted  the  'mlonTialten  para¬ 
dox’ -  the  reason  we  don't  get  val¬ 
ue  from  IT  •  s  not  a  result  of  laiaig 
to  buU  the  capability  Wesegel- 
l«ig  better  and  better  at  biAkng 
technical  soluuons.  It  s  nsiead  a 

result  of  failing  tomakelheneces- 
saiy  changes  m  people,  processes 
andorgarazalDns 
Jamas  Mormon 
.Sondringfiam.  T'rrruria. 
AuxTrulia 
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If  you're  busy  monitoring  your  servers, 
who's  watching  your  business? 


WKot  challenges  do  you  face  today?  Decreosing  budgets?  The 
lurking  possibility  of  downtime?  It's  hard  enough  to  locus  on 
moving  your  business  forward  wlwi  you're  constonlly  looking 
over  your  shoulder  to  see  if  everything  is  up  ar>d  rvnnirrg. 

Besides,  that's  the  fob  of  the  new  HP  ProLiant  DITOO  series 
running  Intel*  Xeon'**  MP  processors.  An  odoptive  inIrastruchKe 
begins  with  these  HP  ProLiant  servers  which  come  equipped 
with  tools  that  predict,  self-diognose  ond  fix  many  fault 
conditions.  And  now  with  hot-plug  KAJO  memory  exclusively 
from  HP  you  can  odd  or  replace  DIMMs  without  turning 
your  systems  ofi.  Both  work  with  the  HP  ProLionl  Essentials 
Foundation  Pock  feoturirtg  Insight  Matroger  7  softwore  which 
monitors  ond  controls  your  infrastructure  for  maximum  uptime. 

At  the  end  of  the  doy,  you'll  hove  more  control  over  your 
infrastructure,  help  avoid  unplanrted  downtime  and  reduce 
overall  maintenance  costs.  Not  to  nsention  freeirtg  yourself 
up  for  more  important  thirtgs. 

To  iMm  hew  HP  Prelioni  » erven  can  ba  a 
port  of  maximizing  yew  componyli  siptima, 
Jgvmlnnd  OKPh  oxenilwe  hriel  on  hi|^  evaiafaXty 
at  www.hp.cam/9a/preliontt5  or  caH 
l-tOO-ttt-ttTt.  option  5/  and  mention  code  YPH. 


XEON 


C  2003  HewtM.Pockord  Cenpony  Intel  ond  rlw  Inlel  Xeon  logo  ore  Irodemortt  or  registered  Irodemorks  o<  Intel  Corporotion  or  ib  subsidiaries  in  ibe  United  Slotes  ond  other  countries. 


Tho  now  HP  ProUont  IH.740 
5  way  »wth  hot^phig 
RAIDmomory. 

'  Ultrodense  4u  modular  chassis 
with  up  to  eight  Intel*  Xeon'"  MP 
1.5  GHz  or  2.0  GHz  processors 

-  Up  to  64GB  oddressable  memory 
■  Groundbreaking  F6  chipset 

-  6-64  bil/100  MHz  PCI-X  slots 

-  Integrated  Lights-Out  Standard 
(ilO)  for  Remote  Server  Mgmt. 


lha  now  HP  Proliant  DL760 
G2  t-way  wMi  hot-plup 
RAID  momory. 

•  Up  to  eight  InfeT  Xeon'"  MP 
1.5  GHz  or  2.0  GHz  processors 

■  Up  to  64G6  oddressable  memory 

■  Groundbreaking  F6  chipset 

■  10-64  bif/100  MHz  PO  X, 

1-64  bit  33  MHz  slots 

■  Remote  insight  Lights-Out  Edition  II 
(optional)  for  Remote  Server  Mgmt. 
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Getting  started  With  Linux 

Many  IT  shops  are  just  starting  to  explore  the 
Linux  phenomenon.  Here’s  some  advice  from 
veterans  such  as  Dan  Agronow  (right),  vice 
president  of  technolt^  at  The  Weather 
Channel,  on  issues  such  as  version  control, 
backup,  fail-over  and  support.  Page  40 


EDITOR’S  NOTE 


The  trade  press  is  very,  very  good 
at  reporting  what  the  leading-edge 
users  are  doing.  When  Unilever  said 
it  would  move  to  Linux  in  a  big  v^y, 
for  example,  Computerworld  reporter  Todd 
R.  Weiss  was  all  over  it  [(^uickLink  3S861]. 
And  rightly  sa 

But  my  hunch  is  that  for  every  Unilever, 
there  are  thousands  of  IT  operations  that 
haven't  dipped  their  toes  in  the  Linux  wa¬ 
ters  and  mi^t  even  be  a  little  scared  to  do 
so.  Or  maybe  their  Linux  use  is  limited  to  a 
few  servers  and  they’re  wondering  how  to 
dive  in  and  swim  with  the  penguins. 

Similarly,  the  trade  press  is  very  good 
at  covering  the  companies  that  move  to 
IBM’s  latest  z/OS  operating  system  or 
Microsoft’s  newest  version  of  Windows 
Server.  But  what  about  the  rest  —  the  folks 
sticking  with  older  OS  versions,  often  for 
mighty  good  reasons?  If  the  leading-edge 
IT  users  are  comparable  to  the  cultural 
trendsetters  in  C^omia  or  Paris,  wdiat 
about  Peoria? 

In  terms  of  sheer  numbers,  about  80% 
of  the  mainframes  out  there  are  miming 
IBM's  older  OS/390  operating  system.  And 
Microsoft  itself  estimates  that  up  to  40%  of 
the  installed  base  for  the  Windows  Server 
OS  is  using  the  older  Windows  NT  Server 
4.0.  (Why?  Because  it’s  reliable,  and  it's 
hard  to  cost-justiiy  a  dismpthre  upgrade.) 

That’s  why  this  special  report  has  stories 
for  Linux  newcomers  and  OS/39Q  users 
under  pressure  to  migrate  to  z/OS,  and 
about  users  still  cm  \^rmdows  NT.  It’s  de¬ 
voted  to  the  hordes  on  the  l^ing  edge. 
Hello,  Peorial  I 


Mitch  Betts  is  director  of  Computerworld 's 
Knowledge  Centers.  He  can  be  contacted  at 
mitdi_betts@computerwor{d.  ctm 


3  'v  i*!  Midi ,  I . 


More  teobves  and  (esources  on  this  topic: 

OQHlGklMik1500 

www.computaworl(Lcoin 


The  Worldvride  Code  Rebellion 

More  aiKl  more  foreign  governments  are  encouraging 
the  use  open-source  software  by  government  IT  man¬ 
agers.  It’s  a  powerful  movement  that  has  many  roots, 
including  anger  over  licensing  terms  set  by  U.S.  vendors, 
the  leeriness  of  being  locked  into  proprietary  formats 
and  a  desire  to  build  homegrown  expertise.  Psgt  46 
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NWWlEDeE  CENTER  OPEIUTINe  SYSTEMS 


www.coiTipulerwortd.cofn 


IN  THE  EARLY  DAYS  of  Computers, 
the  operating  system  —  the  soft¬ 
ware  that  manages  applications  and 
system  resources  —  didn’t  exist, 
liiat’s  because  software  itself  didn't 
exist.  Computers  were  programmed  by 
manually  wiring  calculating  circuits 
together,  then  physically  changing  the 
wiring  for  every  new  calculation  to  be 
performed. 

That  began  to  change  in  1945,  when 
John  von  Neumann  described  a  com¬ 
puter  that  could  store  instructions  in 
memory  that  would  tell  the  computer's 
calculating  units  what  to  do.  On  June 
21, 1948,  the  first  computer  program 
ran  on  an  experimental  machine  called 
Baby  at  the  University  of  Manchester 
in  England  —  and  software  was  bom. 

But  computers  stilt  ran  only  one  pro¬ 
gram  at  a  time.  Operators  still  had  to 
load  each  program  and  its  data  into 
memory  from  tape  or  punched  cards, 
run  the  program  and  then  repeat  the 
whole  process  for  the  next  program,  (t 
was  faster  than  changing  the  wirii^ 
but  it  still  wasted  plenty  of  very  expen¬ 
sive  computer  time. 

By  the  early  1950s,  businesses  usii^ 
computers  were  looking  for  ways  to 
solve  that  problem.  In  1955,  program¬ 
mers  at  the  General  Motors  Research  I 
Center  came  up  with  a  solution  for  I 


The  Story 

Bell  Labs,  GM  and  MTI  played 
major  roles  in  the  development  of 
operating  systems.  By  Friik  Hayes 


their  IBM  701  computer,  a  batch-proc¬ 
essing  monitor  program  that  let  opera¬ 
tors  put  a  series  of  jobs  on  a  single  in¬ 
put  tape.  It  was  the  first  step  toward  a 
full-scale  operating  system. 

Computer  vendors  soon  offered 
their  ovm  batch  monitors.  In  the  early 
1960s,  they  began  to  add  what  would 
become  critical  operating  system  fea¬ 
tures.  The  Burrou^is  5000  Master 
Control  Program  offered  virtual  mem¬ 
ory  and  the  ability  to  run  several  proc¬ 


esses  at  once.  Univac’s  EXEC  I  allocat¬ 
ed  memory,  scheduled  CPU  time  and 
handled  I/O  requests.  IBM's  OS/360 
allowed  the  same  software  to  run  cm  a 
variety  of  machines. 

In  1963,  a  team  at  MIT  led  by  Fer¬ 
nando  Corbato  developed  the  Con^iat- 
ible Tune  Sharing  System (CTSS),  the 
first  practical  OS  that  let  several  users 
at  once  run  programs  from  terminals. 
Much  of  that  team  soon  went  to  work 
on  a  far  more  ambitious  OS:  Multics,  a 
joint  project  with  General  Electric  Ca 
and  AT8cT  Bell  Laboratories  that 
would  offer  a  tree-structured  file  sys¬ 
tem,  a  layered  structure  and  many  oth¬ 
er  modem  OS  features. 

AT&T  pulled  out  of  the  Multics 
project  in  1969.  But  AT&T  program¬ 
mers  Ken  Thompson  and  Dennis 
Ritchie  began  to  develop  their  own 
scaled-down  version  of  Multics,  which 
they  punningly  called  Unix.  Unix  was 
easy  to  port  to  new  computer  architec¬ 
tures  and  grew  popular  — 

fl  at  universities  because 


AT&T  made  the  Unix  source  code 
available  for  students  to  study.  By  the 
1980s.  Unix  had  spawned  a  generation 
of  workstations  —  and  displaced  many 
existii^  operating  systems. 

Meanwhile,  the  first  desktop  com- 
'  puters  arrived  in  the  mid-1970s  with 
OSs  that  were  little  more  than  the 
monitors  of  20  years  earlier.  When 
IBM  b^an  selling  PCs  in  1981.  it 
offered  several  OSs  —  but  the  least 
expensive  and  most  popular  was  PC 
DOS.  provided  by  a  small  company 
named  Microsoft  Corp. 

Microsoft  soon  dominated  PC  oper¬ 
ating  systems,  steadily  borrowii^  fea¬ 
tures  from  its  competitors,  such  as  the 
Windows  graphical  user  interface 
cribbed  ft'om  Apple  Computer  Inc's 
Macintosh.  Microsoft  also  offered 
Xenix,  the  most  popular  PC  version  of 
Unix,  and  worked  with  IBM  to  develop 
a  multitasking  PC  system.  OS/2,  in 
1987.  But  three  years  later,  the  IBM/ 
Microsoft  partnership  fell  apart,  and 
Microsoft  merged  its  OS/2  vrork  with 
its  popular  Windows  to  create  Win¬ 
dows  NT  in  1993. 

Furnish  student  Linus  Torvalds 
wasn’t  trying  to  compete  with  Micro¬ 
soft  in  1991  when  he  began  work  on  a 
Unix  clone  be  called  Linux.  After  fin¬ 
ishing  a  first  version,  Torvalds  asked 
for  help  from  other  programmers  on 
the  Internet  By  1994,  Linux  was  a  full- 
scale.  free  operating  system.  By  1999,  it 
ran  on  more  Internet  Web  servers  than 
Microsoft  OSs  —  and  was  Microsoft's 
most  significant  competitiem. 

Today.  Linux  runs  on  everything 
from  handhelds  to  mainframes,  while 
versions  of  Windows  span  nearly  the 
same  range.  How  ctmapetition  ~  and 
interoperability  —  between  Windows 
and  Linux  develops  may  shape  the 
future  of  enterprise  computing. 

And  DOW,  on  with  the  story ...  I 
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Is  Citrix  putting  the 
squeeze  on  your  budget? 

Peel  l)Hck  iinnecesb«uv  expenses  with  New  Moot' 
C.inavernl  iQ  Now  there  s  a  freslt  idea 


S<ive  40  Giiaraiiterd 


New  Moon  Canaveral  IQ:  Simply  Smarter. 


New  MOONJSYSTeMS 


The  MW  Sun  Rre*  Blade  Platform  and  N1  technology  repreMnt  a  fundamental  shift  in  how  data  centers 
are  built  and  managed.  Now  computing,  networking  and  storage  components  can  be  virtualized  and 
operated  as  a  single.  shift-on<the-fly  system.  The  result:  a  far  more  efficient  computing  environment  with 
dramatically  redu^  cost  and  comf^xity. 


The  future  of  the  data  center  starts  here,  with  the  N1>enabled  Sun  Fire  Blade  Platform. 


Based  on  open  standards,  the  new  Sun  Fire  Blade  Platform  is  the  only  platform  designed  to  integrate 
SPARC*/Solarisr  and  x8B  Linux/Solaris  Blades,  as  well  as  special  function  blades,  into  a  single  Made  shelf. 
It  also  seamlessly  integrates  with  network  attached  storage,  like  the  new  Sun  StorEdge'SSIO  NAS.  Add  the 
N1  Provisioning  Server,  part  of  our  revolutionary  new  IT  architecture,  and  you  can  virtualize  your  blade 
computing  resources  and  quickly  respond  to  changes  in  demand,  or  change  services  on  demand. 

With  the  Sun  Fire  Blade  Platform  and  N1,  you’re  not  }utt  managing  cost  and  complexityi  You’re  driving  it 
out  Bottom  line:  You’re  starting  to  make  your  data  center  work  (wertime,  instead  of  your  people. 


WHY  NOT  STMT  BOILDINO  THE  DATA  CENTER 
OF  TOMORROW,  TODAY? 


mtiTUiUj  Mn.zw 


KN0WLED6E  CENTER  0PERATIN6  SYSTEMS 


www.computerwor1d.com 


Legions  ofWindows  NT  Server 
users  aren’t  ready  to  jump  to  a 
new  version  or  haven’t  finished 
upgrading.  And  they  have  dam 
good  reasons.  By  Carol  Sliwa 


Still  on 


IT  S  NO  SECRJT  THAT  MICROSOFT  CORP  will  direct  a  Special 
marketii^  pitch  at  Windows  NT  Server  4.0  users 
when  the  company  releases  its  Windows  Server  2003 
operating  system  next  month,  just  as  it  did  for  Win- 
dows  Server  2000.  And  its  announcement  of  the 
phaseout  of  support  for  NT  Server  4.0  certainly 
caused  hordes  of  users  to  sit  up  and  take  notice. 

Yet  despite  Microsoft's  pushing  and  prodding, 
there  are  legions  ofWindows  NT  Server  users 
that  aren't  ready  to  move  or  haven’t  finished  their 
migrations. 

Bob  O'Brien,  a  group  product  manager  in  Micro¬ 
soft’s  server  division,  estimates  that  35%  to  40%  of 
the  installed  base  for  the  Windows  server  operating 
system  is  using  NT  4.0.  He  bases  that  in  part  on  a 
year-old  report  in  which  maricet  research  firm  IDC 
predicted  it  would  be  33%  at  the  end  of  last  year. 

Gartner  Inc.  analyst  Tom  Bittman  thinks  the  num¬ 
ber  of  NT  Server  users  could  be  higher.  Bittman  says 
he  stands  by  60%  to  70%,  based  on  client  anecdotes 


Windows  NT 
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and  information  from  Microsoft, 

Whichever  figure  Ls  closer  to  the 
trutK  one  simple  fact  is  clear  There’s 
still  a  lot  of  Windows  NT  Server  4.0  in 
use.  Period. 

Microsoft  knew  that  when  it  decided 
to  extend  key  support  options  for  NT 
4.0  through  2004.  Its  aging  operating 
system  was  scheduled  to  slip  off  the  support  charts 
at  the  end  of  2003.  But  Microsoft  couldn’t  afford  to 
risk  damaging  relationships  with  its  precious  corpo¬ 
rate  customers,  particularly  the  really  large  ones  that 
were  getting  anxious  about  ruiming  an  unsupported 
operating  system. 

O’Brien  says  today's  NT  Server  4.0  users  are  divid¬ 
ed  into  three  camps;  those  who  have  a  policy  to  nm 
an  operating  system  for  five  to  seven  years,  those 
who  have  key  business  applications  and  file-and- 
print  services  running  on  NT.  and  those  who  are  loo 
cash-strapped  to  do  frequent  u^^rades. 

Ijke  any  vendor.  Microsoft  would  prefer  that  cus¬ 
tomers  leap  to  new  products  as  soon  as  they  hit  the 
market.  But  users  that  have  stuck  with  NT  4i).  which 
has  been  available  since  July  1996.  often  have  the 
following  pragmatic  reasons  for  holding  out: 

Big  moves  take  time.  Krycorp  bill 

hSOO  non-Unix  servers  running  Lotus 
Notes,  nie-and-print  services  and  some 
business  applications.  The  Cleveland- 
based  financial  services  company  wanted 
to  stay  in  sync  with  or  slightly  ahead  of 
Microsoft's  support  phaseout,  so  it  de¬ 
vised  a  two-year  plan  to  go  to  Windows 
2000.  says  Wade  Totman.  executive  vice 
president  of  enterprise  technology  operations. 

The  biggest  challenge  rust  becomes  planning, 
when  you  talk  about  touching  that  many  servers  and 
employees.*'  says  Ann  Louis,  vice  president  of  enter¬ 
prise  technology  operations  at  KeyCorp. 

KeyCorp's  fT  depaitment  upgraded  450  servers  — 
some  from  NT  4,0  and  others  from  Novell  lnc.’s  Net¬ 
Ware  ^  to  Windows  2000  during  the  past  year.  Orig¬ 
inally,  the  plans  called  for  the  remaining  1300  Win¬ 
dows  NT  and  50  NetWare  servers  to  be  done  by 
year's  end.  but  competing  projects  are  intervening, 
and  the  migration  is  expected  to  extend  into  2004. 

The  delay  will  open  the  door  for  a  new  option, 
Windows  Server  2003,  which  is  due  in  April.  But  Tol- 
man  says  he  doesn't  feel  a  sense  of  urgency  to  change 
the  exiting  migration  plan,  since  support  for  Win¬ 
dows  2000  will  last  for  many  years. 

KeyCorp  might  instead  consider  skipping  the  Win¬ 
dows  2003  release  and  wait  for  its  successor,  code- 
named  Blackcomb,  which  Microsoft  claims  will  be 
out  in  2005  or  2006.  Tolman  says. 

BuBines»iafika<  aopicalians 
«MrabuK(arNT4.0  I.  ^nners 

irKtirani-v  Group  purchased  Version 
6  of  Siebel  Systems  inc's  software, 
the  core  i^rpUcation  of  its  claims  dt- 
visfon.  in  2000.  says  Sherry  Porter, 
distributed  systems  manager  at  the 
Los  Angeles-based  company. 

The  application  was  built  to  run 
on  NT  4.0.  and  because  Si^l  didn't  add  support  for 


Wuidows  2000  to  that  particular  insur¬ 
ance  version  until  the  end  of  last  year, 
Fanners  dkin'r  gain  the  option  to  move 
from  NT  4.0  until  recently. 

As  many  users  are  well  aware,  ven¬ 
dors  don't  always  rush  to  certify  their 
older  applications  to  run  on  newer 
operating  systems. 

"They  won’t  necessarily  certify  it  unless  you  have 
enough  clout  or  they  have  some  compelling  reason.” 
Porter  says. 

Siebel  was  seeing  so  much  Windows  NT  among  its 
customer  base  that  it  released  Siebel  7  in  November 
2001  on  both  Windows  2000  and  Windows  NT  4f). 
even  though  the  newer  operating  system  had  already 
been  out  for  21  months,  a  spokeswoman  for  San  Ma¬ 
teo,  Calif-based  Siriiel  says. 

When  Microsoft  announced  that  support  for  NT 
4.0  would  end.  Farmers  could  have  upgraded  to 
Siebel  7  on  Windows  2000.  But  the  insurer  didn't 
find  the  new  features  useful  enou^  to  justify  the 
expense.  Porter  says. 

Another  major  consideration  was  that  Farmers' 
Siebel  6  application  was  so  heavily  modified  with 
custom  c^e  that  an  upgrade  would  have  been  "a 
dramatic  amount  of  work."  Porter  says.  So  the  FT  de¬ 
partment  is  drawing  up  a  plan  to  move  its  Siebel  6 
application  to  Windows  2000. 

However,  some  companies  don't  get  that  option. 
They  have  to  upgrade  to  a  new  appUcatioD  on  a  new 
operating  system,  stick  with  the  old  appUcatioo  on 
an  ansi4>poited  <^>erating  system  or  buy  a  support 
contract  for  NT  from  a  Microsoft  partner. 

3  NT  4.0  Mmfcs  just  fine,  thank 

you.  Companies  that  have  upgrad¬ 
ed  to  Windows  2000  Server  may  be 
impressed  with  its  improved  stabili¬ 
ty  and  performance,  but  many  oth¬ 
ers  that  are  still  ninnii^  NT  hod 
that  the  older  OS  has  reached  a  sol¬ 
id  enough  state  to  meet  their  needs. 
CE  Franklin  Ltd.  has  16  Windows 
NT  4.0  servers  running  fUe-and-print.  mail  intranet 
and  terminal  services.  Tlie  six  terminal  servers  may 
gel  upgraded  this  year,  but  there's  no  upgrade  plan 
for  tlM  rest. 

"NT  is  the  beast  we  know,”  says  David  Curran, 
manager  of  IT  at  the  Calgary.  Alberta-based  oQ  field 
supply  company.  "We  know  what  it  takes  to  keep  it 
alive  and  h^thy.  and  without  a  real  strong  business 
case  to  move  to  Windows  2000,  we  haven't  been  able 
to  justify  the  expense." 

The  end  of  support  may  create  the  case  that  push¬ 
es  Curran  to  consider  a  "grudging  upgrade."  But  he 
says  he  doesn't  think  it  would  be  dangerous  to  run 
NT  unsupported.  Tor  the  most  part,  these  servers 
are  stable"  be  says. 

Cunan  says  he's  intrigued  by  the  notion  of  skip¬ 
ping  Winded  2000  Server  in  fovor  of  Windows 
Server  2003  so  be  can  extend  the  life  cyde  of 
CE  Franklin's  server  operating  systems  and  defray 
licensing  costs. 

"You  not  only  have  to  pay  for  server  licenses;  you 
have  to  ptay  for  hundreds  of  client-access  licenses, 
and  that  just  drives  the  cost  through  the  rooC"  says 
Curran. 


Upgrades  disn^it  the  business. 

1  ike  many  organizations,  Navy  Ex¬ 
change  Service  Command  in  Vir- 
ginia  Beach.  Va.,  has  a  heteroge¬ 
neous  mix  of  servers.  The  retailer, 
which  employs  more  than  16,000 
people  in  108  dispersed  locations, 
runs  its  most  critical  Triplications 
on  100-plus  Unix  boxes.  But  it  also 
has  a  collection  of  Novell  and  Windows  NT  servers. 

”Wc  dool  see  anything  that’s  going  to  drive  us  oft 
NT  Server  in  a  rus^"  says  CIO  Bill  Finefield,  *138011- 
ly  by  the  lime  something  like  that  gets  to  the  end  of 
its  supported  life,  it's  pretty  stable.  And  we  don't  do 
anytMng  exotic  with  it.  If  it’s  running  today,  chances 
are  it'll  be  running  tomorrow." 

Finefield  says  it’s  the  end  of  support  for  an  appli¬ 
cation.  not  for  an  cr>crating  system,  that  drives  up¬ 
grades  at  his  orgaotzation.  "It's  not  the  operating  sys¬ 
tem  that's  so  important  to  your  business.”  be  says. 

"It's  the  applications  that  run  on  it" 

One  reason  Finetield  is  rehictani  to  upgrade  server 
operating  systems  is  the  disruption  it  would  cause  to 
Navy  F-xchangg  Service’s  business.  Fmcftcld  cites  the 
time  (hat  would  be  needed  to  stage,  configure,  test 
and  deploy  both  the  new  operatii^  system  and  any 
application  that  runs  on  it.  Phis,  new  operating  sys¬ 
tems  typically  require  more  memory,  processing 
power  and  storage. 

"It  starts  a  ripple  effect  requiring  you  to  invest  in 
additional  hardware  and  training  and  resources  to 
keep  up  with  h,"  he  says.  "After  you've  gone  through 
all  that  you  just  dool  want  to  touch  it  for  a  while." 

SWhsre'sthS  ROI?  Metropolitan 
Health  Corp.  in  Grand  Rapids, 

Miclu  has  54  Windows  NT  4J0 
servers  runnir^  health  care,  finan¬ 
cial  and  supply  chain  applications, 
databases  a^  various  utilities.  CIO 
Bill  Lewkowski  says  that  with  so 
many  appUcations.  it’s  hard  for  bis 
organization  and  its  application 
vendors  to  keep  up  with  Microsoft's  new  releases 
from  a  time  and  budget  standpoint 
Also,  it’s  hard  to  calculate  a  huge  return  on  invest¬ 
ment  from  an  infmcructure  upgrade  in  conqnrison 
with  projects  that  directly  affect  end  users,  notes 
Lewkowski 

So  Metropolitan  Health  plans  to  wrap  its  server  ar¬ 
chitecture  decisions  In  high-level  busiiiess  goals,  says 
Randy  Triiax.  manager  of  technical  services. 

Truax  hopes  to  tie  the  operating  system  upgrade  to 
a  server  consolidation  project  since  Metropolitan, 
like  many  companies,  runs  one  appUcatkm  per  NT 
server  —  often  because  its  applM^km  vendors  wrote 
them  that  way. 

Metropolitan  Health  will  also  try  to  cosi-justify  the 
curating  system  upgrade  by  clustering  servers,  be¬ 
cause  Truax  wants  the  IT  departmeni  to  be  able  to 
patch  machines  without  having  to  take  them  off-line, 
so  end  users  vdio  are  expected  to  increasingly  rely 
on  computer  systems  instead  of  paper  wont  lose  ac¬ 
cess  to  thdr  applicatiotts. 

"I  want  to  drive  the  cost  of  the  infrastructure  as 
low  as  I  can  ~  but  not  give  up  st^Ulty  or  scalabili¬ 
ty."  Triiax  soys.  I 
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Time  Is 
Running 
Out 

As  IBM  phases  out  its  aging  OS/390 
mainfiame  operating  system,  users  must 
migrate  to  z/OS.  Jaikumar  Vijayan 


WHEN  tBM  STOPPED  Selling  its 
OS/390  operating  system 
last  December,  the  clock 
started  ticking  for  users  of 
the  mainframe  system  to  switch  to  the 
newer  64>bit  z/OS.  Users  who  delay 
making  that  transition  could  And 
themseNes  marooned  on  an  unsup¬ 
ported  platform  in  the  not-too-distant 
future,  users  and  analysts  say. 

This  isn't  a  big  surprise.  "IBM  has 
been  very  aggressively  informing  and 
remiiKiu^  people  about  this  for  a  num¬ 
ber  of  years."  says  Mike  Kahn,  an  ana¬ 
lyst  at  The  Clipper  Group  Inc.  in  Wel¬ 
lesley.  Mass. 

IBM  released  z/OS  in  October  2000, 
a](M^  with  new  64^it  zSeries  main¬ 
frame  hardware.  Already.  IBM  is  into 
its  fonrth  version  of  z/OS  and  poised 
to  phase  out  support  for  OS/?90  tech¬ 
nology.  For  example,  support  for 
OS/3W  Version  2.10  —  which  is  the 
last  OS/390  release  —  will  cease  in 
September  2004,  while  suppon  for 
Version  2.09  will  end  this  month. 

The  company  has  for  some  time 
now  been  telling  OS/390  users  to 
move  to  its  latest  release.  z/OS  1.4. 
not  only  to  ensure  continued  support, 
but  also  because  IBM  will  use  this  re¬ 
lease  as  a  base  for  future  hardware 
enhancements. 

In  addition.  z/OS  1.4  is  the  last  re¬ 
lease  of  z/OS  that  OS/390  users  will 
be  able  to  migraie  to  in  a  sii^le  step. 
Moving  to  future  z/OS  releases  from 
OS/390  will  involve  a  two-step  process. 


Analysts  estimate  that  more  than 
80%  of  mainframe  workloads  are  cur¬ 
rently  running  on  z/OS.  However, 
the  machines  running  OS/390  far  out¬ 
number  zSeries  systems  because  the 
OS/390  machines  tend  to  be  much 
smaller,  says  Phil  Payne,  president  of 
Isham  Research  in  Great  Stukeley.  Eng¬ 
land.  "Numerically,  [OS/390  machines) 
account  for  80%  of  the  mainframes  out 
there,  but  they  don’t  account  for  much 
of  the  power."  be  says. 

The  difrtculty  of  the  migration  task 
depends  on  the  release  of  the  curat¬ 
ing  system  aiK)  the  hardware  that  users 


are  currently  on.  say  users. 

For  instance,  users  who  are  on  OS/ 
390  Version  2.10  can  move  to  z/OS  1.4 
and  continue  running  the  operating 
system  and  all  applications  in  3l'bit 
mode  on  their  existing  31-bit  System 
390  hardware. 

For  such  users,  the  migration  really 
is  no  different  from  moving  to  any  new 
operating  system  release,  says  David 
Danner,  a  Washington-based  consul¬ 
tant  who  recently  helped  a  large  gov¬ 
ernment  agency  migrate  to  z/OS. 

For  the  many  users  who  aren’t  ready 
or  can’t  afford  the  move  to  a  full  64-bit 
eovirooment,  which  in¬ 
volves  buying  expensive 
r»ew  zSeries  hardware, 
running  z/OS  in  31-bit 
mode  on  S/390  hardware 
should  do  nicely,  users  and 
analysts  say. 

The  University  of  Flori- 
da’s  data  center  in  Gainesville,  for  in¬ 
stance.  has  already  migrated  to  a  31- 
bit  z/OS  environment  on  its  existing 
S/390  mainframes.  “It  is  current  code, 
and  it  allows  you  to  keep  up  with  new 
functionality  as  you  need  it."  says 
John  Bevis,  associate  director  of  the 
data  center. 

High  Costs  of  Upgrading 

But  for  the  moment,  the  university  has 
DO  plans  to  switch  to  64-bit  mode  on 
z/OS  because  of  the  hi^  upgrade 
costs  of  software  licenses  and  hard¬ 
ware.  “The  processor  and  software 
costs  can  loll  you.”  says  Bevis,  a  former 
president  of  Share  Inc.,  an  IBM  large- 
system  user  group. 

"I  don’t  think  64-bit  [ftmctionality] 
is  what’s  driving  some  people.  It’s 
suf^rt  and  continued  maintenance," 


TECmUlOETilU 

More  intcnnaiion  about 
migrating  to  z/OS  is  availabte 
aiSM's  Website: 
wwwJbRLooRi/sanars/ 
asarvar/zs«ries/zos 


Clipper  Group’s  Kahn  says. 

Users  who  want  to  take  advantage 
of  full  64-bit  functionality  need  to 
prepare  well  for  the  transition  from  a 
31-bit  environment,  Danner  says.  Code 
and  ^plications  that  work  well  in  a 
31-bit  mode  don’t  always  migrate  easily 
to  z/OS.  says  Eric  Bielefeld,  a  senior 
MVS  systems  programmer  at  P&H 
Mining  Equipment,  a  unit  of  Joy  Global 
Inc.  in  Milwaukee. 

"We  had  problems  with  a  buffering 
product  and  a  data-compression  prod¬ 
uct,"  Bielefeld  says.  Fixing  the  prob¬ 
lems  required  inteitsive  work  with 
the  vendors  involved.  “It 
took  me  a  good  six  months 
to  install  and  test  every¬ 
thing.”  says  Bielefeld. 
wbxKe  company  moved  to 
a  z/OS  environment  last 
October. 

Users  on  releases  of 
OS/390  prior  to  2.10  “face  a  whole 
bunch  of  change  all  at  once,"  Danner 
says,  including  moving  to  z/OS  in  mul¬ 
tiple  stages. 

For  its  part,  IBM  has  done  a  lot  to 
ease  the  migration  to  the  64'bit  world, 
users  and  analysts  say. 

A  “bimodal  migration  program." 
which  allows  users  to  switch  between 
31*  and  64-bit  mode,  has  been  particu¬ 
larly  useful,  says  Bielefeld.  With  it. 
users  can  move  applications  over  to  a 
64-bit  z/OS  environment  and.  if  prob¬ 
lems  arise,  move  them  back  to  31'bit 
mode  while  those  problems  are  Axed. 

IBM  has  also  restructured  its  pricing 
models  to  minimize  the  software  up¬ 
grade  costs  associated  with  moving  to 
z/OS.  And  IBM  handbooks  and  other 
materials  that  provide  detailed  techni¬ 
cal  help  are  available.  I 


Choose  Your 
Path  Wiselv 


One  Platfonn;  Ful  Coverage 

Sony  ATT  is  the  only  technokjgy  that  covers 
the  entire  backup  and  archiving  spectrum. 


Capacitv/Perlormance 

High-end  network  and  enterprise  backup/archiving 

Perlormaoce/Prica  Focus 
Mid-range  network  backup/archiving 

DDS  Repiaceaent 
Low-end  desktop  backup 


Sony  ATT  data  storage 
solutions  provide  a 
strategic  alternative  to 
linear  tape  formats. 

As  Rob^  Frost  makes  clear  in  his  famous  poem.  "The  Road 
Not  Taken,*  picking  one  path  over  another  can  make  all  the  dif¬ 
ference.  While  Frost  had  other  topics  in  mind  at  the  time,  his 
point  is  nonetheless  appircable  to  today's  companies  that  are 
using  or  considering  linear  tape  formats  such  as  DLT,  S-OLT  and 
ITO  as  their  data  storage  solution. 

Legacy  formats  such  as  Digital  Linear  Tape  (DLT)  were  a  rea¬ 
sonable  data  storage  altemative  In  the  past,  but  a  combination 
of  new  business  challenges  and  new  techmlogy  choices  aie 
driving  many  companies  to  rethink  their  tape  storage  path.  For 
example,  convenbonal  OLT  systems  are  approaching  the  end  of 
their  useful  life  cycle,  with  rw  well-defined  way  to  add  capacity 
without  upgrading  to  a  new  format.  While  Super  DLT  (S-OLT)  ar)d 
Linear  Tape  Open  (UO)  systems  do  have  roadmaps  to  the  future, 
neither  formal  offers  a  compatible  solution  that  can  span  the 
gamut  of  storage  needs,  from  the  entry  or  workstation  level  up 
to  the  'Super  Drive'  lev^.  In  addition,  upgrades  require  a  metka 
change,  making  long-term  use  of  linear  solutions  more  cumber¬ 
some  and  less  flexible 

Perhaps,  as  Rost  suggests,  it's  time  to  consider  a  different 
path.  Advanced  Intelligent  Tape^  (ATT)  data  storage  solutions 
from  Sony  provide  a  broader  range  of  capacities,  incrrased  per¬ 
formance.  better  reliability,  easier  maintenance  and  a  more 


strategic  path  to  the  future  than  the  alternatives  Organizations 
choosing  foe  AIT  path  will  find  themselves  with  a  more  flexfole 
and  integrated  tape  storage  format  that  can  span  backup  needs 
from  individual  PCs,  to  workgroups,  to  foe  enterprise 
AIT  is  3  proven  storage  technology  with  years  of  successful 
enterpnse  deployments  behind  it  Rrst  appearing  in  1996.  AIT  is 
a  compact,  belief  scan  8MM  tape  format  in  a  3.S-in.,  half-hei^ 
form  f»:tor.  With  its  high  capacity  (up  to  100G8  per  cassette), 
speed  and  reliability.  AIT  is  emerging  as  a  more  strategic  tape 


storage  path  con^»red  wifo  linear  formats  such  as  DLT.  S-OLT 
and  LTD.  Consider  foe  following  advantages  of  AIT. 

•  Reliability  -  Consistent  operation  and  assured  reliability  are 
two  critical  components  for  a  tape  storage  system.  Arr-3  drrves 
are  designed  for  a  mean  time  between  failure  (MTIff)  of  up  to 
400,000  httirs  (compared  wifo  Olfs  250,000  MTBF  rating)  and  a 
100%  duty  cycle 

In  contrast  DLT-IV  media  is  notoriously  unreliabie,  subtect  to 
foe  oftOT  severe  leader  problems  that  are  common  (or  leader- 
based  tapes.  AIT.  on  foe  other  hand,  has  a  soft  loading  system, 
which  allows  rt  to  load  foe  media  without  using 
motors  or  levers.  This  greatly  decreases  the  stress  on 
foe  tapes  and  increases  foe  longevity  of  foe  media  In 
fact  can  even  perform  a  soft  load  from  the  middle 
of  foe  tape. 

•  PtrforMnce  -  With  organizations  facing 
increastngfy  lar^  backup  volumes  and  a  greater  need 
for  faster  recoveries  for  business  continuity,  drive  per¬ 
formance  is  cntical.  For  large  backup  applications.  AfT 
compares  favorably  wifo  foe  higher  speeds  of  S-DLT 
and  tro.  But  for  interactive  applications.  AIT  is  far 
faster  because  of  its  superior  load,  seek  and  rewind 
times.  For  example,  AIT  has  a  39-S8Cond  access 
speed,  compared  to  80  seconds  for  S-OLT  and  LTD. 

•  HUgretiMi  Pa*  >(AirTentlY  in  its  third  generation.  ATT  has 
a  defined  and  proven  roadmap  that  has  seen  performance  and 
capacity  double  with  each  new  generation.  In  atfoibon.  alt  three 
generations  of  AIT  drives  available  today  are  both  read  and  wnte 
backward-compatible.  S-DLT  drives,  on  foe  ofoer  hand,  can  not 
write  to  DLT  cartridges,  severely  limiting  foeii  usefulness. 

•  IndMtrv  Seppoit  -  ATT  was  created  by  Sony,  one  of  foe  CO- 
inventors  of  foe  Digital  Data  Storage  (DOS)  tape  format,  and  AIT 


is  an  open  technology  supported  by  more  than  27  partners, 
mchiding  HPAfompaq,  Qualstar.  Advanced  Digital  Information 
Corp  (ADIC)  and  Spectra  Logic.  In  addition,  leading  backup  soft¬ 
ware  packages  such  as  Veritas  Software's  Veritas  Backup  btac 
and  NetBacki^.  Legato  Systems'  NetWoiker  and  Computer 
Associates'  CA  BnghtSfor  ARCserve  are  ail  compatible  with  foe 
AIT  format. 

•  Sizo  -  In  backup,  less  is  more.  For  example.  AlT-3  provides 
at  least  250%  greater  c^tadty  foai  OIT  At  its  100G8  capacity. 
ATT  tapes  are  comparable  to  S)-0lT  11068  and  LTD  100G8  mod¬ 
els.  but  at  just  one-foird  foe  size  Sknply  put  this  means  it's 
much  easier  to  use  AIT  for  automation  arid  tape  libraries  because 
it  takes  up  so  much  less  room  In  tact  many  comperues  are  able 
to  get  Twice  foe  number  of  AfT  drives  m  a  given  Iforary  compared 
wifo  traditional  half-inch  drives  AIT  also  has  foe  world's  f^  1U 
ttitoloader  (courtesy  of  its  low  power  cortsumpbon  and  small 
media  size),  making  it  foe  perfect  ht  tar  tight  locBtions 

Some  organizations  fear  that  switching  to  a  drfferem  backup 
tape  format  will  be  difficult  and  costly  8ut  it  can  be  done  pan- 
iessty  If  you  follow  a  standard  30-d^  backup  cycle,  most  of 
your  organizaUon's  data  will  be  on  newer  AfT  tapes  within  a 
month .  in  addition.  Sony  bundles  NovaStor  migration  tape 
copy  software  wifo  each  AIT  tape  drive  or  library,  making  it 
easy  to  copy  critical  or  frequently-used  tapes  from  ofoer  for¬ 
mats  onto  ATT. 

Data  badojps  should  be  there  when  you  need  them  But  you 
shouldnl  have  to  dedicate  valuable  IT  personnel  fo  maimaining 
finidev  tape  drives,  juggle  dozens  of  t^ies  to  fmd  what  you're 
looking  for  or  wart  mmutes  (or  hours  or  days)  to  retriei«  valuable 
data.  Sony’s  AfT  data  storage  solutions  enable  organizations  to 
get  on  foe  right  path  for  compatible,  reliable  and  high-perfomv 
ance  tape  backup  ATT  is  simply  foe  smart  investment 


Tape  format  Capacity 

DigHal  Lmaar  Tape  (DLT)  10GB  ta  40^ 

Sapar  DLT  (S-DLT)  SOGBtollOGB 

UiiaorTapaOpaa(LTO)  lOBGBtoZOOGB 

Soay  Advaiicod  latalligaiit  Tapa  (AIT)  25GB  to  100G6 


Learn  More  Ahoiit 


Download  the  fret*  white  paper  Sony  AIT  A  New  Path  to  Business 
Value,  and  learn  more  about  Sony  storage  solutions 
Visit  WWW  iiw'tiision  toiM/soiiy  HI  FCW 
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Time  Is 


As  IBM  phases  out  its  aging  OS  390 
mainframe  operating  sv'stem,  users  must 
migrate  to  z  OS.  B\  Jaikuniiir 


WHFN  IBM  STOPPED  Selling  itS 
OS/390  operating  system 
last  December,  the  clock 
started  ticking  for  users  of 
the  mainframe  system  to  sv^'itch  to  the 
newer  64-bjt  z/OS.  Users  who  delay 
making  that  transition  could  find 
themselves  marooned  on  an  unsup- 
poned  platform  in  the  not-too-distant 
future,  users  and  analysts  say. 

This  isn't  a  big  surprise.  “IBM  has 
been  very  «^;grcssively  informing  and 
reminding  people  about  this  for  a  num¬ 
ber  of  years."  says  Mike  Kahn,  an  ana- 
i>'st  at  The  Clipper  Group  Inc.  in  Wel¬ 
lesley.  Mass. 

IBM  released  z/OS  in  October  2000, 
alof^  with  nen-  64-bit  zSeries  main¬ 
frame  hardware.  Already.  IBM  is  into 
its  fourth  version  of  z/OS  and  poised 
to  phase  out  support  for  OS/390  tech¬ 
nology.  For  example,  support  for 
OS/390  Version  2.10  —  which  is  the 
last  OS/390  release  —  will  cease  in 
September  2004,  while  support  for 
Version  2.09  will  end  this  month. 

The  company  has  for  some  time 
now  been  telling  OS/390  users  to 
move  to  its  latest  release.  z/OS  1.4. 
not  only  to  ensure  continued  support, 
but  also  because  IBM  will  use  this  re¬ 
lease  as  a  base  for  future  hardware 
enhancements. 

In  addition,  z/OS  1.4  is  the  last  re¬ 
lease  of  z/OS  that  OS/390  users  will 
be  able  to  migrate  to  in  a  single  step. 
Moving  to  future  z/OS  releases  from 
OS/390  will  involve  a  two-step  process. 


Analysts  estimate  that  more  than 
80%  of  mainframe  workloads  are  cur¬ 
rently  running  on  z/OS.  However, 
the  machines  running  OS/390  far  out¬ 
number  zSeries  systems  because  the 
OS/'390  machines  tend  to  be  much 
smaller,  says  Phil  Payne,  president  of 
Isham  Research  in  Great  Stukeley,  Eng¬ 
land.  “Numerically.  (OS/390  machines] 
account  for  80%  of  the  mainframes  out 
there,  but  they  don't  account  for  much 
of  the  power."  he  says. 

The  difficulty  of  the  migration  task 
depends  on  the  release  of  the  operat¬ 
ing  system  and  the  hardware  that  users 


Uv,‘'s  riin'iKiQ  OS  390  V'  •  •  •  j"  2  *0 

iinS.390ha"J^=,r.  ''.v.’.'Uit.  . 

t'l-  t>4  .  OS 


are  currently  on.  say  users. 

For  instance,  users  who  are  on  OS/ 
390  Version  2.10  can  move  to  z/OS  1.4 
and  continue  running  the  operating 
system  and  all  applications  in  31-bit 
mode  on  their  existing  31-bit  System 
390  hardware. 

For  such  users,  the  migration  really 
is  no  different  from  moving  to  any  new 
operating  system  release,  says  David 
Danner,  a  Washington-based  consul¬ 
tant  who  recently  helped  a  large  gov¬ 
ernment  agency  migrate  to  z/OS. 

For  the  many  users  who  aren't  ready 
or  can’t  afford  the  move  to  a  full  64-bit 
envirorunent.  which  in¬ 
volves  buying  expensive 
new  zSeries  hardware, 
running  z/OS  in  31-bit 
mode  on  S/390  hardware 
should  do  nicely,  users  and 
analysts  say. 

The  University  of  Flori- 
da’s  data  center  in  Gainesville,  for  in¬ 
stance.  has  already  migrated  to  a  31- 
bit  z/OS  environment  on  its  existing 
S/390  mainframes.  "It  is  current  code, 
and  it  allows  you  to  keep  up  with  new 
functionality  as  you  need  it."  says 
lohn  Bevis.  associate  director  of  the 
data  center. 

High  Costs  of  Upgrading 

But  for  the  moment,  the  university  has 
no  plans  to  switch  to  64-bit  mode  on 
z/OS  because  of  the  high  upgrade 
costs  of  software  licenses  and  hard¬ 
ware.  “The  processor  and  software 
costs  can  kill  you."  says  Bevis.  a  former 
president  of  Share  Inc.,  an  IBM  large- 
system  user  group. 

“1  don't  think  64-bit  (functionality} 
is  what's  driving  some  people.  It's 
support  and  continued  maintenance." 


TECHNKAl  DETAILS 

More  information  about 
migratiriQ  to  ;/0S  is  available 
at  IBM's  Web  site 

wwwjbni.coni^erv«rs/ 

eservef/zseries/zos 


Clipper  Group’s  Kahn  says. 

Users  who  want  to  take  advantage 
of  full  64-bit  functionality  need  to 
prepare  well  for  the  transition  from  a 
31-bit  environment.  Danner  says.  Code 
and  applications  that  work  well  in  a 
31-bit  mode  don't  always  migrate  easily 
to  z/OS,  says  Eric  Bielefeld,  a  senior 
MVS  systems  programmer  at  P&H 
Mining  Equipment,  a  unit  of  Joy  Global 
Inc.  in  Milwaukee. 

“We  had  problems  with  a  buffering 
product  and  a  data-compression  prod¬ 
uct."  Bielefeld  says.  Fixing  the  prob¬ 
lems  required  intensive  work  with 
the  vendors  involved.  "It 
took  me  a  good  six  months 
to  install  and  test  every¬ 
thing.”  says  Bielefeld, 
whose  company  moved  to 
a  z/OS  environment  last 
October. 

Users  on  releases  of 
OS/390  prior  to  2.10  “face  a  whole 
bunch  of  change  all  at  once,"  Danner 
says,  including  moving  to  z/OS  in  mul¬ 
tiple  stages. 

For  its  part,  IBM  has  done  a  lot  to 
ease  the  migration  to  the  64-bit  world, 
users  and  analysts  say. 

A  “bimodal  migration  program." 
which  allows  users  to  switch  between 
31-  and  64-bit  mode,  has  been  particu¬ 
larly  useful,  says  Bielefeld.  With  it, 
users  can  move  applications  over  to  a 
64-bit  z/OS  environment  and,  if  prob¬ 
lems  arise,  move  them  back  to  31-bit 
mode  while  those  problems  are  fixed. 

IBM  has  also  restructured  its  pricing 
models  to  minimize  the  software  up¬ 
grade  costs  associated  with  moving  to 
z/OS.  And  IBM  handbooks  and  other 
materials  that  provide  detailed  techiti- 
cat  help  are  available.  I 
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ADVERTISEMENT 


Choose  Your 


Sony  AIT  data  storage 
solutions  provide  a 
strategic  alternative  to 
linear  tape  formats. 

As  Robert  Frost  makes  clear  in  his  famous  poem.  The  Road 
Not  Taken.*  picking  one  padi  over  another  can  make  all  the  dif¬ 
ference  While  Frost  had  other  topics  in  mind  at  the  time,  his 
point  IS  nonetheless  applicable  to  today's  companies  that  are 
using  or  considering  linear  tape  formats  such  as  OLT  S-DLT  and 
LTD  as  their  data  storage  solution 

Legacy  formats  such  as  Digital  Linear  Tape  IDLTl  were  a  rea¬ 
sonable  data  storage  alternative  m  the  past,  but  a  combination 
of  new  business  challenges  and  new  technology  choices  are 
driving  many  companies  to  rethink  their  tape  storage  path  For 
example,  conventional  DLT  systems  are  approaching  the  end  of 
their  useful  life  cycle,  with  no  well-defined  way  to  add  capacity 
without  uf^rading  to  a  new  format  While  Super  DLT  (S-OLTl  and 
Linear  Tape  Open  (LTD)  systems  do  have  roadmaps  to  the  future, 
neither  format  offers  a  compatible  solution  that  can  span  the 
gamut  of  storage  needs,  from  the  entry  or  workstation  level  up 
to  the  'Super  Drive”  level  In  addition,  upgrades  require  a  media 
change,  making  long-term  use  of  linear  solutions  more  cumber¬ 
some  and  less  flexible 

Perhaps,  as  Frost  suggests,  it's  time  to  consider  a  different 
path  Advanced  intelligent  Tape’”  (ATT)  data  storage  solutions 
from  Sony  provide  a  broader  range  of  capacities,  increased  per¬ 
formance.  better  reliability,  easier  maintenance  and  a  more 


Tale  of  the  Tape 


Tape  hrnnat  Capacity 

DipHal  Linear  Tape  (DL'T)  10GB  ts  40G8 

Super  DLT  (S  DLT)  S0G8  to  110GB 

Linear  Tape  Open  (LTD)  100GB  to  200G8 

Sony  Advanced  Intelligant  Tape  (AIT)  25GB  to  100G8 


strategic  path  to  the  future  than  the  alternatives.  Organizations 
choosing  the  AIT  path  will  find  themselves  with  a  more  flexible 
and  integrated  tape  storage  format  that  can  span  backup  needs 
from  individual  PCs.  to  workgroups,  to  the  enterprise 
AIT  IS  a  proven  storage  technology  with  years  of  successful 
enterprise  deployments  behind  it.  First  ^ipearing  in  1996.  AIT  is 
a  compact,  helical  scan  8MM  tape  format  in  aS.S-in..  half -height 
form  factor  With  its  high  capacity  (up  to  1006B  per  cassette), 
speed  and  reliability.  AIT  is  emerging  as  a  more  strategic  tape 


One  Platform:  Full  Coverage 

Sony  ATT  is  the  on)y  technology  that  covers 
the  entire  backup  and  archiving  spectrum. 


DOS 

Low- 


storage  path  compared  with  linear  formats  such  as  DLT.  S-OLT 
and  LTD  Consider  the  following  advantages  of  AIT 

•  Reliabilitv  -  Consistent  operation  and  assured  reliability  are 
two  critical  components  for  a  tape  storage  system  AIT-3  drives 
are  designed  for  a  mean  time  between  failure  (MTBF)  of  up  to 
400,000  hours  Icompared  with  DLT's  250,000  MTBF  rating)  and  a 
100%  duty  c^le 

In  contrast,  OLT-IV  media  is  notoriously  unreliable,  subject  to 
the  often  severe  leader  problems  that  are  common  for  leader- 
based  tapes  AIT.  on  the  other  hand,  has  a  soft  loading  system, 
which  allows  it  to  load  tee  media  witeout  using 
motors  or  levers  This  greatly  decreases  tee  stress  on 
the  tapes  and  increases  the  longevity  of  the  media  In 
fact.  AIT  can  even  perform  a  soft  load  from  tee  middle 
of  tee  tape 

•  Performance  -  With  organizations  facing 
increasingly  larger  backup  volumes  and  a  greater  need 
for  faster  recoveries  for  business  continuity,  drive  per¬ 
formance  IS  critical  For  large  backup  applications.  AIT 
compares  favorably  with  tee  higher  speeds  of  SDLT 
and  LTD  But  for  interactive  applications.  AIT  is  far 
faster  because  of  its  superior  load,  seek  and  rewind 
times  For  example.  AIT  has  a  39-second  access 
speed,  compared  to  80  seconds  for  S-DLT  and  LTD 

•  Migration  Path  -  (^rrenily  in  its  third  generation,  AIT  has 
a  defined  and  proven  roadmap  that  has  seen  performance  and 
capacity  doubie  with  eaite  new  generation  h  addition,  all  thr^ 
generations  of  AIT  drives  available  today  are  both  read  and  write 
backward-compatible  S-DLT  drives,  on  tee  other  hand,  can  not 
write  to  OLT  cartridges,  severely  limiting  teeir  usefulness 

•  Industry  Support  -  AIT  was  created  by  Sony,  one  of  the  co- 
inventors  of  tee  Oigrtal  Data  Storage  {ODSI  tape  format,  and  AIT 


m  Capacity/Performance 

High-end  network  and  enterprise  backup/archiving 

B  Periormance/Price  Focus 

Mid-range  network  backup/archiving 

Replacement 
end  desktop  backup 

is  an  open  technology  supported  by  mom  than  27  partners, 
including  HP/Compaq.  Quaistar,  Advanced  Digital  information 
Corp  (AOIC)  and  Spectra  Logic  In  addition,  leading  backup  soft¬ 
ware  packages  such  as  Veritas  Software's  Veritas  Backup  Exec 
and  NetBackup.  Legato  Systems  NetWorker  arxJ  Computer 
Associates  CA  BnghiStor  ARCserve  are  all  compatible  with  tee 
AIT  format 

•  Size  -  In  backup,  less  is  more  For  example.  AfT-3  prosndes 
at  least  250%  greater  capacity  than  OLT  At  its  10066  capacity. 
AlT  tapes  comparabte  to  ^DLT  1 1066  and  LTD  10OGB  mod¬ 
els.  but  at  just  one-teird  the  size  Simply  put.  this  means  it's 
much  easier  to  use  AIT  for  automation  and  tape  libraries  because 
It  takes  up  so  much  less  room  in  fact,  marry  compantes  are  able 
to  get  twice  tee  number  of  AIT  drives  in  a  given  library  compared 
with  irsdiiional  halfnnch  drives  AIT  also  has  tee  world's  first  1U 
autoloader  (counesy  of  its  low  power  consumpiton  and  small 
media  size),  making  it  the  perfect  frt  for  tight  locations 
Some  organizations  fear  that  switching  to  a  different  backup 
tape  format  will  be  difficult  and  costly  But  ft  can  be  done  pam- 
iessfy  If  you  follow  a  standard  30-dav  backup  cycle,  most  of 
your  organization's  data  will  be  on  newer  AIT  tapes  witem  a 
monte.  In  addition.  Sony  bundles  NovaSior  migration  tape 
copy  software  with  each  AIT  tape  drrve  or  library,  making  it 
easy  to  copy  critical  or  trequemty-used  tapes  from  other  for¬ 
mats  onto  AIT 

Data  backups  should  be  there  when  you  need  them  But  you 
shouldn't  have  to  dedicate  valuable  fT  personnel  to  maintaining 
finicky  tape  drives,  juggle  dozens  of  tapes  to  fmd  whai  you’re 
looking  for  or  wait  minules  (or  hours  or  days)  to  retrieve  valuable 
data  Sony  s  AIT  data  storage  solutions  enable  organizations  to 
get  on  the  right  path  tor  compatible,  reliable  and  high-p^orm- 
ance  tape  backup  AlT  is  simply  the  smart  investment 


Learn  More  About 

Sony  AIT  Solutions 


Download  the  tree  white  paper.  "Sony  AIT:  A  New  Path  to  Business 
Value,  "  and  learn  more  about  Sony  storage  solutions 
Visit  www  nwtusion  com/sony/HLFCW 


QUICKLY  CONNECT  CONTENT 


AND  CONTENTMENT. 


-NET  connected  software  from  Microsoft  helps  you  make  content  management 
more  manageable.  With  eve'v  change  m  vour  business  needs  come  demands  lor  more 
V.eh  Sites,  ''-ore  content,  ano  a  lastei  response  from  already  strained  IT  resources.  To 
hrd  cortf’  ■’•n-'  ■  ■"  th'S  setting,  consider  Microsoft  ConterU  Management  Server  With 
native  Support  fo'^  \Ml  it  integrates  lAdh  vour  existing  and  future  applications  to  create  a 
centra'i/erj  ■''•rastructure  'or  pubCshing  content  to  intranet,  extranet,  and  Internet  sites 
Vi-p,,  .-nr.trr.i  Site  consisfencv-  Ahiie  empowering  content  owners  to  publish  their  own  pages. 
Sc,  vou  can  be  more  responsive  w  'th  fewer  resources.  And  everyone  is  cori’.fi  • .  To  gc' 

:  ■  -  --loai  ovi-rviHA  ^  s  !  microsoft.com  content  Software  for  the  Agile  Business. 
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Getting 

Starts 
With  Linux 


Worried  about 
version  control 
and  support? 
Here’s  a  guide  for 
Linux  newbies. 
By  Robert  L 
Scheier 


To  HEAR  SOME  PEOPLE  TELL 
h.  Linux  is  taking  the 
world  by  storm.  Unilever, 
a  $52  billion  consumer 
products  giant,  is  switch¬ 
ing  to  Linux  to  run  its 
businesses  around  the  wortd.  Major 
vendors  such  as  IBM,  SAP  AG  and 
Computer  Associates  International 
Inc.  are  porting  mainstream  business 
applications  and  utilities  to  the  low- 
cost,  open-source  operating  system. 

But  not  every  IT  shop  is  out  on  the 
leading  edge  of  Linux;  many  are  just 
starting  to  explore  the  open-source 
pbenomenoa  For  them.  Linux’s 
practical  impikations  are  a  major 
concern.  IT  managers  lace  day-to- 
day  challenges  such  as  how  to  per¬ 
form  version  control  and  how  to 
badi  up  and  restore  data.  They  also 
need  to  know  bow  much  training 
their  stafi&  will  need  and  whom  to 
call  for  technical  suppon  at  2  a.m. 

The  good  news:  You  can  do  almost 
anything  <m  Linux  that  you  can  do  on  a 
ntainframe  or  distifouted  systems.  Ute 
bad  news:  It  wiU  require  you  to  learn 
sonte  new  concepts  and  terminology. 


1.  Version  Control 

You  may  think  of  the  (^>en-50urce 
community  as  worldwide  chaos, 
with  developers  releasing  dozens  or 
hundreds  of  bug  fixes  and  updates 
each  month  that  need  to  be  evaluat¬ 
ed  and  tested  before  deployment. 
Actually,  it’s  not  that  different  from 
the  computing  environments  IT 
managers  have  lived  in  for  years,  say 
some  users. 

“Microsoft  is  announcing  a  new 
security  breach  [that  requires  patch¬ 
ing]  almost  every  day."  says  Dan 
A^now.  vice  president  technolo¬ 
gy  at  Atlanta-based  weather  forecast¬ 
ing  service  The  Weather  Channel  In¬ 
teractive  Inc,  irtiidi  runs  Weather- 
com.  And  mainframe  vendors  find 
highly  pervasive  errors  in  their  (gr¬ 
ating  systems  just  as  offea 

That  doesn’t  mean  open-source 
updates  can’t  seem.  weU.  cbaotk.  In 
past  year.  Islandia,  N.Y.-based  CA 
has  seen  almost  20  versions  of  the 
operating  system  kernels  fcv  differ¬ 
ent  flavors  of  Linux,  says  Vincent  Re. 
chief  architect  at  CA.  If  you’re  a  busi¬ 


ness  customer,  you're  likely  buying  a 
distribution  from  a  major  vendor, 
such  as  Red  Hat  Inc,  SuSE  Linux  AG 
or  The  SCO  Group,  that  tests  the  up¬ 
dates,  packages  them  and  sends  them 
to  customers  throu^  Internet  ser¬ 
vices  such  as  the  Red  Hat  Network. 

Vendors  usually  provide  updates 
only  for  their  own  Linux  distribu¬ 
tions:  customers  must  go  to  other 
software  vendors  for  updates  to  oth¬ 
er  Linux-based  utilities  or  business 
applications.  (For  example.  Red  Hat 
doesn’t  distribute  Oracle  Corp.’s  Un- 
ux  offerings.) 

As  with  Unix,  in  the  Linux  worid, 
version  control  is  referred  to  as 
“package  management."  says  Erik 
Troan,  director  of  product  marketing 
at  Red  Hat  in  Raleigh.  N.C  Each  pack¬ 
age  is  a  sin^  file  that  comes  with 
metadata  containing  critical  informa¬ 
tion  such  as  which  version  (ff  the  Lin¬ 
ux  kernel  and  which  associated  soft¬ 
ware  is  needed  to  run  the  file,  be  says. 

Customers  with  strong  Unix  skills 
can  test  and  evaluate  the  updates 
themselves,  says  Re.  Version  control 
tools  include  the  Red  Hat  Package 


Manager,  tiriuch  can  also  manage  up¬ 
dates  from  other  distributors.  The 
Caldera  VolutionManager  from  SCX) 
in  Lindon,  Utah,  combines  software 
distribution  with  services  such  as  as¬ 
set  management  and  system  moni¬ 
toring.  Third-party  tools  include 
CA’s  AUFuston  Harvest  Chai^  Man¬ 
ager  for  distributed  Linux  systems 
and  its  Unicenter  Software  Delivery 
for  Linux  on  the  mainftame. 

Update  tools  such  as  the  Red  Hat 
Paclmge  Manager  aren't  perfect,  of 
course.  Red  Hat  wont  support  roll¬ 
back  (reversing  a  software  update  if 
it  doesnt  woik)  until  the  next  re¬ 
lease  of  its  Advanced  Server  and  Ad¬ 
vanced  Woricstatioa  in  the  faU.  says 
Troan.  Rollback  is  already  available 
in  Version  1.2  of  Red  (Carpet  Enter¬ 
prise  from  Ximian  Inc.  in  Boston. 

Customers  also  f^  uncertainty 
over  whether  the  new  patches  will 
run  older  q>plications  or  device  dri¬ 
vers.  Linux  “doesn’t  have  the  reputa- 
tk>o  for  forward  and  backward  com¬ 
patibility"  customers  have  come  to 
expect  ffom  mainframe  operating 
systems  such  as  z/OS,  says  Re.  Some 
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•  You  will  receive  a  confirmation  via  email 
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Account  Number 


No  Big  Deal 


THERE  ARE  SOK  ISSUES  that 
might  iaam  worrisome  to  an  fT 
administr^  who’s  now  to  LtaMO, 
but  thoy’ro  roaly  no  proUom  once 
you  look  moro  closoty.  Among  the 
aroas  yon  don’t  have  to  swnat,  say 
custoroofs,  analysts  and  vendors, 
art  backup  and  restore  tasks, 
ckieloring  and  fsfl-ovar. 

When  H  comes  to  data  protec¬ 
tion,  most  malor  vendors  have 
ported  their  premier  bachup*and* 
restore  tools  to  UnuL  Eiamples 
bKhide  BbTs  Dvol  Storage  Man- 
agw.  CA’s  ARCserve  for  Unm 
running  on  bitei  systems,  and 
CA’s  Bilghtstor  for  Umn  on  the 
mainframe. 

To  buM  dusters  of  Unax  serv¬ 
ers  for  bistairt  foS*over  to  the 
event  of  a  server  crash,  custo¬ 


mers  can  use  configuration 
scnpts  onereo  ai  weo  ones  sucn 
as  that  of  the  High-AvaiUiitty 
Linux  Protect 

They  can  also  use  tods  from 
distrlwters,  such  as  the  duster 
Hanagar  Package  for  Red  Hat’s 
Advanced  Server,  er  tkkd-pmty 
tools  suck  as  LifeKeeper  from 
sweamye  lecmoiogtes  me.  n 
Wounteto  Vfow,  CaW..  and  Matrix 
HA  from  MySorve  toe.  to  San 
Frandsco. 

Some  customers  are  finding 
that  fiisy  can  get  faster  fad-over 
and  foes  of  a  parfonnance  Ml 
when  dustartog  Una  sorvors 
nan  wnm  CMSienno  wmoows 
servers,  says  Vtocont  Re,  chief 
arcMtoct  at  CA. 

-fhbtftLSehem 


distributors  have  also  balked  at  includ¬ 
ing  device  drivers  or  other  software 
(rtnn  vendors  that  have  refused  to  in¬ 
clude  the  source  code  in  order  to  keep 
it  fttHD  competitors. 

Jeff  Davis,  global  technical  lead  at 
Amerada  Hess  Corp.,  uses  Red  Carpet 
Enterprise  to  update  about  3SO  serv¬ 
ers  running  various  versions  of  Red 
Hat  Linux  The  tool  lets  the  New 
York-based  energy  company  create 
“channels*'  that  automatically  send 
updates  for  the  Apache  Web  server  to 
Linux  servers  but  not  to  Linux  desk¬ 
top  systems. 

But  fust  as  with  Win¬ 
dows  or  mainframes,  no 
good  IT  manager  applies 
those  Linux  patches  willy- 
nilly.  Instead,  says  Agro¬ 
now.  '‘you  have  a  sched¬ 
uled  maintenance  cycle.” 

Agronow  updates  his  ap¬ 
proximately  250  Linux 
servers  once  per  quarter,  only  after 
testing  to  be  sure  the  updates  are  safe. 

2.  Support 

You  can  get  as  much  hand-holding  as 
you  want  (and  are  willii^  to  pay  for) 
ftx>m  the  Linux  distributors  or  better- 
known  vendors  such  as  IBM  and 
Hewlett-Packard  Ca 

“Just  because  the  development  mod¬ 
el  is  open  doesn’t  mean  the  support 
model  is  any  different  than  what  you’d 
find  with  a  proprietary  OS.”  says  Tim¬ 
othy  D.  Witham.  lab  director  at  the 
Opra  Source  DevelopRteni  Lab  in 
Beaverton.  Ore.,  and  a  C^bmputerworld- 
com  coltHnnist  (Quicklink  36148L  Or.  if 
you  have  the  skills  and  mind-set,  you 
can  turn  to  the  open-source  communi¬ 
ty  itself  and  get  better  support  than 
you  would  from  a  vendor  you  paid,  say 
some  customers. 

When  calling  IBM  for  support  with 
its  WebSphere  application  server. 
Agronow  bad  to  slog  through  a  script 
of  questions  read  by  a  first-level  sup¬ 
port  technician  before  being  referred 
to  an  expert  who  could  solve  the 
problem. 

After  migrating  to  the  Tomcat  open- 
source  application  server  in  June  2000. 
be  used  Web  sites  and  forums  to  get 
bis  questions  “out  to  many  different 
experts  all  at  the  same  time.”  Not  only 
did  Agrooow  get  answers  more  quick¬ 
ly,  but  he  rarely  was  told  to  upgr^e  to 
“the  latest  and  greatest  version”  of  the 
vendor's  software  to  fix  the  prc^lem. 
he  says. 

Major  vendors  such  as  IBM  and  HP 
offer  round-the-clock  service,  as  do 
Linux  distributors  such  as  Red  Hat  and 


SCX).  “A  number  of  Fortune  100  compa¬ 
nies,  such  as  Morgan  Stanley,  rely  on 
our  support  every  day.”  says  Red  Hat’s 
Troan.  Such  support  is  included  along 
with  all  upgrades  and  bug  ftxes  with 
Red  Hat's  Advanced  Server  Premium 
Edition  license  for  $2,500  per  machine 
per  year. 

3.  Training 

If  you're  coming  from  a  well-trained 
Unix  shop,  anywhere  from  a  couple  of 
days  to  a  couple  of  weeks  should  be 
enough  to  get  you  goii^  on  Linux  say 
vendors,  analysts  and  ctrs- 
toroers.  Staffers  coming 
from  a  Unix  or  Wmdows 
background  will,  however, 
need  training  on  functions 
such  as  partitioning  before 
managing  IBM’s  zA^ 
mainframe  operating  sys¬ 
tem.  says  Re. 

Becoming  a  Red  Hat  Certified  Tech¬ 
nician  generally  requires  two  weeks  of 
training,  with  another  two  weeks  to 
become  a  hi^r-level  Red  Hat  Certi¬ 
fied  Ei^ineer.  says  Troan.  Agrooow 
says  he  wants  one  to  two  years  of  job 
experience  for  a  junior  administrator 
and  four  to  six  years  for  a  senior  ad¬ 
ministrator. 

Many  customers,  such  as  Amerada 
Hess’  Davis,  are  skeptical  about  the 
value  of  the  several  flavors  of  Linux 
certification  available  on  the  market. 

One  hopeful  note  on  training:  Davis 
says  Unux  requires  less  ongoing  train¬ 
ing  than  Windows  because  there  are 
fewer  differences  among  the  various 
flavors  of  Linux  than  there  are  be¬ 
tween,  say.  Windows  NT  and  Win¬ 
dows  2000.  With  Linux  he  says,  ‘^ve’re 
not  retraining  our  staff  every  time  a 
new  version  comes  out” 

Best  Practices  Count 

OveralL  the  customers  and  analysts 
say  that  critical  data-center  took  and 
processes  are  rapidly  moving  to  Linux. 
“If  you're  coming  ftxMn  a  background 
wbm  you  have  the  disciplines  in  place 
for  communicating  changes,  making 
changes  and  doing  upgrades,  and  you 
apply  those  disciplines,  you're  going  to 
have  success,”  says  Agronow.  “If  you're 
in  an  environment  which  is  a  ftee-for- 
all,  where  are  constantly  chang¬ 
ing  and  there  are  no  controk  and  no 
standards.*  be  says,  you're  going  to  foil 
—  with  Unux  or  with  any  other  oper¬ 
ating  system.  I 
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DtHNITION 
A  logical  volume  manager  is  a 
software  tool  that  allows  stor¬ 
age  drive  space  to  be  added  or 
expanded  on  the  fly  without 
system  reboots  or  shutdowns, 
giving  systems  administrators 
more  flexibility  for  operations. 


■TTOOOll.  weiss 

5  LINUX  systems 
administrators 
watch  over  their 
hardware  and 
software  inlra* 
structures,  they  constantly 
have  to  look  ahead  to  how 
much  space  to  allocate  to 
hard-disk  partitions  to  meet 
changing  needs. 

But  the  process  of 
adding  disks  or  recon¬ 
figuring  existing  drive 
space  is  slowed  when 
servers  have  to  be  tak¬ 
en  ofT-Une  for  new 
drive  installation  and 
tune-consuming  rebooting  or 
backup,  repartitionlng  and 
data  restoration. 

Those  changes  can  more 
easily  be  made  using  a  lo^cal 
volume  manager  (LVM). 
which  precludes  the  need  for 
reboots,  shutdowns  or  down¬ 
time.  Thus,  an  LVM  can  be  an 
administrator's  best  friend. 

Microsoft's  Windows  and 
Sun's  Solaris  and  other  Unix 
operating  systems  have  similar 
volume  manager  capabilities. 

Under  Linux,  an  LVM  is 
enabled  by  a  kernel-loadable 


module,  similar  to  a  device  dri¬ 
ver  in  Windows.  Kernel  mod¬ 
ules  capture  disk  functions 
from  user  operations  and  con¬ 
vert  them  to  write  to  the  cor¬ 
rect  part  of  the  disk.  They 
work  like  a  file  system  driver, 
but  arc  ftir  more  dynamic. 

Support  for  an  LVM  wasn't 
built  into  the  Linux  kernel  un¬ 
til  Version  2.4,  but  it  was  avail¬ 
able  as  an  add-oa  It 
has  been  an  important 
tool  as  Linux  contin¬ 
ues  to  make  its  way 
into  enterprise  com¬ 
puting. 

"It's  a  common  fea¬ 
ture  because  it's  so  useful." 
says  Chris  Mason,  a  Linux  ker¬ 
nel  developer  at  Nuremburg. 
Germany-based  Linux  vendor 
SuSE  Linux  AG.  "A  lot  of  peo¬ 
ple.  especially  in  Windows, 
may  not  know  a  lot  about  it." 
Mason  says.  "It’s  an  extra  layer 
to  learn  about,  so  a  lot  of  peo¬ 
ple  don't  Then  whet?  they 
move  from  a  smaller  server  to 
a  larger  server,  they  don't  real¬ 
ize  how  much  more  easily 
they  can  make  it  work." 

liie  LVM  creates  an  ab¬ 
straction  layer  over  all  the 


combined  storage  in  a  system, 
so  that  the  details  about  where 
the  data  actually  resides  are 
hidden.  That  allows  the  total 
separation  of  hardware  and 
software  because  the  LVM 
keeps  a  table  of  where  the  data 
is  written  and  what  volume 
group  and  volume  it  belongs 
to,  allowing  drives  to  be  added 
or  changed  even  while  the  sys¬ 
tem  is  running.  And  all  this 
happens  without  software  ap¬ 
plications  or  users  noticing 
the  changes. 

Systems  without  LVMs  are 
also  set  up  with  physical  hard 
drives,  but  they  don't  have  this 
virtualization  layer.  When 
more  disk  space  is  needed,  the 
system  must  be  shut  down  and 
tl^  new  drives  installed,  and 
then  they  must  be  provided 
with  file  systems  to  organize 
data  storage.  If  the  new  drive  is 
rq>lacing  the  original  drive,  the 
old  drive  must  be  backed  up  so 
the  new  drive  can  receive  its 
data.  That  all  takes  time. 

Organized  Resources 

With  an  LVM.  the  physical 
drives  or  hard  dislu  are  orga¬ 
nized  into  "volume  groups." 
Created  inside  those  volume 
groups  are  "logical  volumes." 
which  are  comparable  to  disk 
partitions  in  systems  without 
LVMs.  By  keeping  the  hard¬ 
ware  and  software  separate, 
drive  changes  can  be  made 
without  shutdown  or  reboot- 
ii^  and  data  can  be  moved  to 
a  different  location  while  the 
system  is  ruimingt- 

loaquin  Ruiz,  vice  president 
of  marketing  and  product 


management  at  Minneapolis- 
based  Sistina  Software  Inc^ 
which  has  largely  developed 
the  LVM  for  Linux  as  an  open- 
source  program,  says  the  LVM 
is  important  because  it  makes 
it  much  easier  to  administer 
storage. 

Management  Is  Key 

“The  bottom  line  is  manage¬ 
ment."  Ruiz  says.  Without  a 
volume  manager,  the  burden 
of  how  to  represent  and  deal 
with  data  storage  is  left  up  to 
the  developer  of  the  applica¬ 
tion  you  want  to  run.  he  says. 
That  potentially  permits  "ap¬ 
plications  to  be  stepping  on 
other  applications"  as  they 
compete  for  disk  space,  says 
Ruiz.  That’s  why  all  robust 
erating  systems  have  volume 
management  features,  he  says. 

Sistina  contributed  the  LVM 
technology  to  the  Linux  open- 
source  community  to  improve 
the  lineage,  he  says.  By  adding 
the  LVM,  Linux  becomes  more 
scalable,  llie  LVM  aggregates 
information  about  physical 
volumes,  which  are  the  actual 
hard-disk  partitions,  and  pre¬ 
sents  them  through  the  file 
system  to  the  applications. 

Sistina's  LVM  is  supported 
by  the  standard  Linux  kernel 
version,  beginning  with  2.4, 
Red  Hat  73  and  Red  Hat  2.1 
Advanced  Server  editions,  and 
is  built  natively  into  Red  Hal 
8.0.  It  is  also  supported  by 
SuSE  7.3  and  8.0  and  SuSE  Lin¬ 
ux  Enterprise  Server  7.  SuSE 
was  an  eariy  supporter  of  the 
LVM  and  has  included  the 
Sistina  LVM  in  all  its  operat¬ 


ing  systems  since  SuSE  Linux 
6.3.  It  was  also  built  into  Unit- 
edLinux  Version  1.0.  which  is 
packaged  and  sold  by  the  four 
UnitedLinux  partners.  It’s 
compatible  with  all  maior  Lin¬ 
ux  applications,  including 
Web  applications,  databases 
and  the  Samba  file-sharing 
system. 

Brian  Stevens,  senior  direc¬ 
tor  of  engineering  at  Red  Hat 
Inc.  in  Raleigh.  N.C..  says  the 
LVM  addresses  three  areas  for 
IT  administrators:  availability, 
performance  and  manageabili¬ 
ty  of  storage  drive  space.  “Ad¬ 
ministrators  love  it  because  it 
gives  control,  uptime  and 
doesn't  waste  space,"  he  says. 

Presently,  the  Red  Hat  Lin¬ 
ux  Advanced  Server  operating 
system  doesn’t  include  an 
LVM  natively,  but  Red  Hat 
partners  with  Veritas  Software 
Corp.  in  Mountain  View, 

Calif.,  to  offer  an  LVM  as  an 
add-on.  LVM  software  will  be 
included  in  the  next  version  of 
Advanced  Server,  Stevens 
says.  Red  Hat  is  more  con¬ 
cerned  with  adding  to  the  OS 
enterprise-mandated  features 
such  as  scalability,  threading 
and  clustering  capabilities  be¬ 
fore  adding  an  LVM.  even 
though  customers  have  asked 
for  it,  Stevens  says. 

“It  is  a  committed  feature 
for  the  next  version."  he  says,  k 
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Strength  in 
Numbers? 

UnitedLinux,  an  alliance  of  four 
companies  battling  the  Red  Hat 
juj^emaut,  has  made  some 
progress  in  its  first  10  months. 

Here’s  an  update.  B\'  Todd  R.  Weiss 


A  YEAR  AGO.  they  were  rivals. 

four  companies  each  fighting 
for  a  tiny  share  of  the  Linux 
server  market  but  not  gaining 
much  ground  on  U.S.  market 
leader  Red  Hat  Inc. 

Then  last  May.  the  rivalry  was  re¬ 
placed  by  a  partnership  called  United¬ 
Linux.  bringing  the  former  competi¬ 
tors  together  to  share  technology,  ex¬ 
pertise  and  development  costs  as  they 
worked  to  build  a  standardized,  enter¬ 
prise-ready  Linux  operating  system  to 
compete  head-on  with  Red  Hat's  best. 

How  have  the  first  10  months  shaped 
up  for  UnitedLinux  partners  SuSE  Lin¬ 
ux  AG  in  Nuremberg,  Germany:  The 
SCO  Group  Inc.  in  Lindon.  Utah:  Tur- 
bolinux  Inc.  in  Tokyo:  and  Conectiva 
SA  in  Curitiba.  Brazil? 

“I  think  they  can  be  successful."  says 
Bill  Claybrook.  an  analyst  at  Aberdeen 
Group  Inc.  in  Boston.  ‘‘UnitedLinux 
and  Hat  will  share  the  U.S.  market, 
which  is  a  pretty  Urge  market.  Each 
company,  thou^  still  has  to  be  suc¬ 
cessful  ^one.” 

Claybrook  says  the  partnership  of¬ 


fers  the  companies  economies  of  scale. 
"They  are  sharing  a  number  of  costs 
that  are  not  talked  about  publicly  that 
lower  their  overall  development  and 
support  costs."  he  says.  The  alliance’s 
version  of  Linux  will  likely  be  the  boost 
that  some  of  the  current  and  potential 
partners  need  to  keep  going,  be  says. 

So  far.  the  effort  has  shown  progress 
by  attracting  independent  software 
vendors  to  port  their  applications  to 
UnitedLinux  and  by  creating  common 
support  and  call  centers  to  help  cus¬ 
tomers.  Claybrook  says.  "I  would  give 
them  an  A-  at  this  point:  however,  we 
will  sec  a  lot  more  in  the  next  year. 

One  thing  the  UnitedLinux  members 
have  going  for  them  is  the  [operating 
system]  itself.  I  would  ^ve  it  an  A*." 

"Each  of  the  vendors  individually 
didn't  have  a  whole  lot  of  market  pene¬ 
tration"  before  ioining  up.  says  IDC  an¬ 
alyst  Al  Gillea  "What  they've  done  in 
effect  is  put  all  their  cards  together  to 
have  a  bigger  deck.” 

Gillen  says  he  would  have  argued  a 
year  ago  that  Wakefield.  Mass.-based 
Unitc^inux  would  have  a  lough  time 


caking  on  Red  Hat's  dominance.  But 
since  then.  Raleigh,  N.C.'based  Red 
Hat  changed  its  server  licensing,  re¬ 
quiring  customers  to  purchase  a  copy 
of  its  server  operating  system  for  each 
machine,  just  as  UnitedLinux  requires. 
"Because  those  terms  are  more  restric¬ 
tive  than  a  traditional  Linux  license,  it 
levels  the  playing  field  somewhat." 
Gillen  says. 

Here's  what  the  alliance  has  offered 
users  in  its  first  10  months: 

UnHonnity  and  Robustness 

Gregory  Biepp.  SuSE  vice  president  of 
international  sales,  says  customers 
have  gained  uniformity  and  robustness 
under  UnitedLinux.  Although  none  of 
the  companies  has  a  worldwide  pres¬ 
ence.  each  has  local  market  strengths 
that  helped  build  the  alliance,  he  says. 
“The  real  global  coverage  was  missing 
...  so  this  was  one  of  the  driving  fac¬ 
tors  of  UnitedLinux."  Biepp  says. 

The  companies  sell  their  own  brand¬ 
ed  versions  of  UnitedLinux.  The  core 
operating  system  is  the  same  in  each, 
but  extra  add-ins  vary.  Each  company 
ships  its  own  version  on  four  CDs,  in¬ 
cluding  three  with  the  core  UnitedLin- 
ux  ingredients. 

The  first  version  of  UnitedLinux  En¬ 
terprise  Server,  based  on  SuSE's  Linux 
Enterprise  Server  7.  was  released  on 
schedule  in  November,  and  a  "carrier- 
grade"  version  for  the  telecommunica¬ 
tions  industry  is  in  the  works. 

Easier  App  Certification 

With  UnitedLinux,  software  vendors 
can  now  build  lust  one  version  of  an 
application  for  certification  on  one 
platform,  instead  of  having  to  get  it 
certified  with  each  of  the  four  compa¬ 
nies,  Biepp  says.  That  saves  costly 
porting,  testing  and  certification  steps 
and  is  already  encouraging  more  de¬ 
velopers  to  create  new  business  appli¬ 
cations  for  UnitedLinux,  he  says. 

Each  partner  adds  special  attributes, 
he  says.  SuSE  and  SCO  brii^  combined 
development  resources,  while  Ibrbo- 


linux  brings  expertise  in  localizing  the 
Linux  distributions  for  many  different 
spoken  langu^es.  Conectiva  special¬ 
izes  in  easy  deployment  and  support. 

Stacey  Quandt,  an  analyst  at  Giga 
Information  Group  Inc.  in  Cambridge, 
Mass.,  says  the  alliance  got  off  to  a 
slow  start  by  not  providing  an  easy 
means  for  software  developers  to  port 
their  products  to  UnitedLinux.  That 
changed  with  the  announcement  in 
fanuary  of  a  UnitedLinux  Developer 
Zone  Web  site.  "It  was  a  major  short¬ 
coming,  and  now  they  have  addressed 
that,"  Quandt  says. 

Longer  CydeTmes 

Paula  Hunter,  general  manager  of 
UnitedLinux.  says  another  key  benefit 
for  corporate  users  is  that  the  partner¬ 
ship  has  scheduled  release  cycles  for 
future  upgrades  that  are  longer  than 
traditional  open-source  software  re¬ 
lease  cycles.  That  ^ves  business  users 
more  time  to  be  sure  their  needed  ap¬ 
plications  will  run  well  she  says. 

Moreover,  the  alliance  can  provide 
support  to  customers  from  any  of  the 
partners  as  needed.  Hunter  says.  "It’s 
important  to  realize  that  we're  a  global 
concern,"  she  says. 

Hunter  says  that  because  United¬ 
Linux  didn’t  begin  shipping  its  server 
operating  system  until  November,  ana¬ 
lysts  haven't  yet  recognized  its  grow¬ 
ing  popularity  among  customers.  "It's 
still  a  little  early  for  them  to  be  count¬ 
ing  [unit]  shipments.  We  are  winning 
major  brand-name  accounts  here  in 
the  U.S.  We  recognize  that’s  where  the 
analysts  want  to  see  traction,"  she  says. 

Late  last  year.  Turbolinux  sold  its 
operating  system  business  to  Software 
Research  Associates  Iik.  in  Tokyo, 
which  is  continuing  the  partnership  in 
UnitedLinux.  says  Fumiko  Dot.  dila¬ 
tor  of  marketing  at  Turbolinux.  The 
company  remains  committed  to  the  ef¬ 
fort,  she  says. 

IBM.  Hewlett-Packard  Ca  and  Ad¬ 
vanced  Micro  Devices  Inc  have  signed 
on  as  technology  partners  in  support 
of  UnitedLinux.  IBM  and  HP  are  sup¬ 
porting  both  Red  Hat  and  UnitedLinux 
on  their  Linux  hardware. 

Quandt  says  that  even  as  the  Na  2 
player  in  the  U.S.  market.  UnitedLinux 
"has  the  potential  to  chip  away  at  Red 
Hat’s  leadership  if  its  (software 
vendor)  ecosystem  matures  rapidly." 
Elsewhere  In  the  world  —  Europe,  the 
Middle  East.  Africa,  Latin  America  and 
the  Asia-Pacific  region  —  Red  Hat's 
penetration  is  lesser  and  often  exceeded 
by  the  individual  UnitedLinux  partners. 
In  such  places,  UoitedUoux  could  erode 
Red  Hat's  market  share,  she  says.  I 
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The  Wbridwide 
Code  Rebellion 


Discontent  o\'er  proprietan'  soft- 
w'are  from  US.-dominated  vendors 
has  foreign  gox  emments  exploring 
open  source.  B)'  Patrick  niibiKleau 


OrtN-SOLiRCf  SOU'WARt  IS 
fining  ground  with  gov¬ 
ernments  in  Europe  and 
elsewhere,  as  ofncials  look 
for  ways  to  cut  IT  expenses 
and  free  themselves  of  de¬ 
pendence  on  U.S.-based  vendors. 

This  isn’t  a  short-term  phenomenon. 
It’s  a  worldwide  movement,  and  there 
arc  a  lot  of  reasons  behind  it. 

tJovemmenis  are  concerned  about 
prtiprieiary  lock-in  on  things  as  basic 
as  document  and  spreadsheet  file  for¬ 
mats.  and  they’re  leery  of  using  soft¬ 
ware  that  may  reach  the  dead  end  of 


The  Open-Source  Vangiuird 


Washington: 

The  U.S  lederai 
govemmeni's 
interest  in  Lmux  IS 
expanding  beyond 
scientihc  users 
such  as  NASA 


Brussels: 

The  European 
Community  is 
lundmg  research 
on  open-source 
sottware. 


:  New  Delhi: 

•  India's  government 
:  Is  backing  an 

•  initiative  to  study 
:  open-source  sotl- 
t  ware  use  inihe 

•  government  and 
:  other  sectors. 


Betfmg.  Bangkok, 
Manila:  Chma. 
Thailand  and  the 
niilippmes  have 
initiatives  under 
way  to  foster  the 
use  of  open- 
source  software. 


planned  obsolescence.  They  also  aren’t 
happy  about  paying  costly  licensing 
fees  to  foreign  suppliers  for  products 
that  don't  meet  all  their  needs. 

The  U.K.'s  National  Health  Service, 
in  a  study  last  year  on  the  feasibility  of 
open  source,  warned  that  the  market 
for  health  care  IT  is  becoming  domi- 
ruted  by  a  small  number  of  U.S. -based 
vendors.  These  systems  arc  expensive 
to  buy  and  maintain,  and  since  “the 
U.K.  represents  a  relatively  small  part 
of  the  market,  global  suppliers  arc  un¬ 
responsive  to  requests  for  local  varia¬ 
tions.  and/or  provide  them  at  a  very 
high  cost,"  the  report  says. 

"It's  about  money,  plain  old-fash¬ 
ioned  money."  says  AtuI  Chitnis.  a  Lin¬ 
ux  expert  at  Exocore  Consulting  Ltd.  in 
Bangalore.  India,  in  an  e-mail  inter¬ 
view  about  that  country’s  moves  to 
open  source.  “But  it's  also  a  bit  about 
sovereignty."  Chitnis  is  an  adviser  to 
the  government-sponsored  Linux  India 
Initiative,  announced  bsi  year. 

One  goal  of  pushing  open  source  is 
to  foster  the  development  of  home¬ 
grown  high-tech  businesses  and  exper¬ 
tise.  The  movement  is  also  related  to 
feelings  about  Microsoft  Corp.'s  world¬ 
wide  dominance  in  productivity  appli¬ 
cations  and  desktop  operating  systems. 
Carol  Kelly,  an  analyst  at  Meta  Group 
Inc.,  calls  it  the  "Microsoft  backlash." 
But  while  some  local  agencies  arc  con¬ 
sidering  or  have  deployed  Linux  desk¬ 
top  systems,  most  of  the  governmental 
interest  is  in  server  deployments. 

Stirring  the  Pot 

Indeed,  the  European  Commission  is 
involved  in  multiyear  studies  examin¬ 
ing  open-Si>urcc  development  for  serv¬ 
er  software  and  its  total  cost  of  owner¬ 
ship.  There  are  ob\'ious  licensing  sav¬ 
ings  with  open-source  models,  but 
total  cost  of  ownership  is  a  pot  with 
many  ingredients,  including  integra¬ 
tion.  training  and  migration. 

A  European  Commission-backed 
study  completed  last  year  advocates 
"pooling.”  or  sharing,  of  open-sourcc 
software  code  among  various  coun¬ 
tries,  as  well  as  sharing  IT  knowledge 


and  development  expertise.  Pooling 
may  not  necessarily  save  money,  but  by 
working  together,  governments  may  gel 
much  more  for  their  euros. 

"Pooling  of  knowledge  is  more  im¬ 
portant  than  pooling  of  code,"  says 
Patricc-Emmanucl  Schmitz,  a  Belgium- 
based  Unisys  Corp.consultani  who  co¬ 
authored  the  report. 

Governments  in  Europe,  Singapore, 
Taiwan.  China  and  elsewhere  are 
adopting  policies  that  encourage  IT 
managers  to  consider  deploying  open- 
source  systems.  In  the  U.S.,  neither  the 
federal  government  nor  any  states  have 
adopted  anything  similar,  but  federal 
ofllciaU  arc  showing  interest  in  open 
source  at  the  midrange  server  levcL 

Tight  Budgets,  Lean  Code 

The  revenue  shortfalls  that  are  forcing 
many  states  to  curtail  IT  investments 
arc  also  fostering  more  interest  in 
open-sourcc  software.  "What  we're 
finding  is  an  awful  lot  of  good  tools 
that  are  opcn-sourcc-based  that  olTcr  a 
tremendous  amount  of  functionality." 
says  Rock  Regan,  CIO  for  Connecti¬ 
cut’s  state  government.  "In  some  cases, 
we  don't  need  the  Cadillac  version  of 
software  that  some  vendors  have  sold." 

It's  difficult  to  say  whether  any  gov¬ 
ernment  interest  in  open  source  will 
influence  private-sector  migrations, 
especially  when  big  fums  like  IBM  arc 
already  Linux  adviKates. 

In  the  U.S..  it’s  long  been  recognized 
in  IT  that  the  private  sector  leads  and 
governments  follow,  says  Eric  Ray¬ 
mond.  a  Malvern.  Pa.-bascd  de^'eloper 
who  heads  the  Open  Source  Initiative. 
Rut  in  some  foreign  narioos,  business¬ 
es  "view  governments  as  the  genuine 
leadership  of  the  country,"  he  says. 

One  thing  to  watch  for  is  whether 
large  governments  establish  procure¬ 
ment  policies  that  require  software 
vendors  to  prtwidc  open  and  Interop¬ 
erable  file  formats  in  order  to  get  gov¬ 
ernment  business. 

The  Consumer  Pn^jeet  on  Technolo¬ 
gy  (CPT)  in  Washington  has  been  urg¬ 
ing  the  White  House  to  do  just  that,  as 
a  way  to  blunt  Microsoft's  operating 
system  monopoly.  Only  a  big  govern¬ 
ment  ha.s  the  buying  power  to  force  a 
vendor  to  make  changes,  says  CIT 
head  lames  Love.  There  ’is  nobody  in 
the  private  sector  that  is  big  enough  to 
set  standards  by  themselves,"  he  says.  I 


QU  WITH  EUROPE'S  IT  lEADEI 

PTiiknie  Aigrain.  the  European  Commission's  (op 
software  policy  offkaal.  discusses  the  open-source 
initialives  under  way  m  Europe. 
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The  Worldwide 
Code  Rebellion 


Discontent  over  proprietary  soft¬ 
ware  from  US.-dominated  vendors 
has  foreign  governments  exploring 
open  source.  By  Patrick  Thibodeau 


Open-source  software  is 
gaining  ground  with  gov- 
enunents  in  Europe  and 
elsewhere,  as  ofTicials  look 
for  ways  to  cut  IT  expenses 
and  free  themselves  of  de¬ 
pendence  on  U,S.*based  vendors. 

This  isn’t  a  short-term  phenomenon. 
It’s  a  worldwide  movement,  and  there 
are  a  lot  of  reasons  behind  it. 

Governments  are  concerned  about 
pn^rietary  lock-in  on  things  as  basic 
as  document  and  spreadsheet  file  for¬ 
mats,  and  they’re  leery  of  using  soft¬ 
ware  that  may  reach  the  dead  end  of 


The  Open-Source  Var^uard 
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planned  obsolescence.  They  also  aren’t 
happy  about  paying  costly  licensing 
fees  to  foreign  suppliers  for  products 
that  don’t  meet  all  their  needs. 

The  UJC's  National  Health  Service, 
in  a  study  last  year  on  the  feasibility  of 
open  source,  warned  that  the  market 
for  health  care  IT  is  becoming  domi¬ 
nated  by  a  small  number  of  U,S.-based 
vendors.  These  systems  are  expensive 
to  buy  and  maintain,  and  since  “the 
U,K.  represents  a  relatively  small  part 
of  the  market,  global  suppliers  are  un¬ 
responsive  to  requests  for  local  varia- 
tioits.  and/or  provide  them  at  a  very 
high  cost."  the  report  says. 

“It’s  about  money,  plain  old-fash¬ 
ioned  money,"  says  Chitnis,  a  Urn 
ux  expert  at  Exocore  Consulting  Ltd.  in 
Bangalore.  India,  in  an  e-mail  inter¬ 
view  about  that  country’s  moves  to 
open  source.  “But  it’s  also  a  bit  about 
sowreignty."  Chitnis  is  an  adviser  to 
the  govemmeoi-sponsored  Linux  India 
Initiative,  announced  last  yean 

One  goal  of  pushing  open  source  is 
to  foster  the  development  ofhome- 
grown  high-tech  businesses  and  exper¬ 
tise.  The  movement  is  also  related  to 
feelings  about  Microsoft  Corp.’8  world¬ 
wide  dominance  in  productivity  appli¬ 
cations  and  desktop  operating  systems. 
Caro)  Kelly,  an  analyst  2t  Meta  Group 
Inc.  calls  it  the  “Microsoft  backlash." 
But  while  some  local  agencies  are  con¬ 
sidering  or  have  deployed  Linux  desk¬ 
top  systems,  most  of  the  governmental 
interest  is  in  server  deployments. 


Stirring  the  Pot 


Indeed,  the  European  Commission  is 
involved  in  multiyear  studies  examin¬ 
ing  open-source  developmrat  for  serv¬ 
er  software  and  its  total  cost  of  owner¬ 
ship.  *rhere  are  obvious  licensing  sav¬ 
ings  with  open-source  models,  but 
total  cost  of  ownership  is  a  pot  with 
many  ingredients,  including  integra¬ 
tion,  training  and  migration. 

A  European  Commission-backed 
study  completed  last  year  advocates 
“pooling,"  or  sharing,  of  open-source 
software  code  among  various  coun¬ 
tries.  as  well  as  sharing  IT  knowlet^e 


and  development  expertise.  Pooling 
may  not  necessarily  save  money,  but  by 
working  together,  governments  may  get 
much  more  for  their  euros. 

“Pooling  of  knowledge  is  more  im¬ 
portant  than  pooling  of  code,”  says 
Patrice-Emmanuel  Schmitz,  a  Belgium- 
based  Unisys  Corp.  consultant  who  co¬ 
authored  the  report 

Governments  in  Europe,  Singapore. 
Taiwan.  China  and  elsewhere  are 
adopting  policies  that  encourage  IT 
managers  to  consider  deploying  open- 
source  systems.  In  the  U.S..  neither  the 
federal  government  nor  any  states  have 
adopted  anything  similar,  federal 
ofl^cials  are  showing  interest  in  open 
source  at  the  midrange  server  level 

Tight  Budgets,  Lean  Code 

The  revenue  shortfalls  that  are  forcing 
many  states  to  curtail  IT  investments 
are  also  fosterii^  more  interest  in 
open-source  software.  “What  we’re 
finding  is  an  awful  lot  of  good  Cools 
that  are  open-source-based  that  offer  a 
tremendous  amount  of  ftuKtionality." 
says  Rock  Regan.  CIO  for  Connecti¬ 
cut’s  state  government  "In  some  cases, 
we  don't  need  the  C.adillac  version  of 
software  that  some  vendors  have  sold." 

It's  difficult  to  say  whether  any  gov¬ 
ernment  interest  in  open  source  will 
influence  private-sectOT  migrations, 
especially  when  big  firms  like  IBM  are 
already  Lintu  advocates. 

In  the  U,S,.  it’s  long  been  recognized 
in  IT  that  the  private  sector  leads  and 
governments  follow,  says  Eric  Ray¬ 
mond.  a  Malvern.  Pa.-based  developer 
who  heads  the  Open  Source  Initiative. 
But  in  some  foreign  nations,  business¬ 
es  “view  governments  as  the  genuine 
leadership  of  the  country,"  be  says. 

One  thing  to  watch  for  is  whether 
large  governments  establi^  procure¬ 
ment  policies  that  require  software 
vendors  to  provide  open  and  interop¬ 
erable  file  formats  in  order  to  ^t  gov¬ 
ernment  business. 

The  Consumer  Project  on  Technolo¬ 
gy  (CPT)  in  Washington  has  been  urg¬ 
ing  the  White  House  to  do  just  that,  as 
a  way  to  blunt  Microsoft’s  operating 
system  monthly.  Only  a  big  govern¬ 
ment  has  the  buying  power  to  force  a 
vendor  to  make  chan^,  says  CPT 
head  lames  Love.  "There  is  nobody  in 
the  private  sector  that  is  big  enough  to 
set  standards  by  themselves,"  be  says.  I 
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Content  is  Key. 

Searchable  white  paper  library  delivers  the  in-depth 
information  you  need  to  make  confident  decisions. 


With  the  growth  of  the  Internet,  the  volume 
of  information  available  as  you  try  to  keep 
pace  with  technology  can  be  daunting. 

More  than  ever,  you  need  a  reliable  source 
for  the  insight  and  opinion  you  need  to  do 
your  job  effectively  and  efficiently.  The 
Computerworld.com  white  paper  library 
provides  quick,  easy  access  to  a  wealth  of 
resources  for  understanding,  evaluating  and 
implementing  products  and  technology. 


By  combining  Computerworld's  extensive 
collection  of  white  papers  with  IDG's  white 
paper  library,  we've  created  a  searchable, 
comprehensive  database  covering  the 
technology  spectrum  —  everything  from 
enterprise  storage  security  to  ROI  to  eService 
best  practices.  You'll  find  white  papers  that: 

•  introduce  technology  innovations  and  products 

•  Identify  problems  and  corvcems  and  outline 
appropriate  business  solutions 

•  Explain  a  company's  approach  to  current  IT  issues 

•  Discuss  product  or  n>arket  trends  and  their 
impact  on  your  business 


Search  Computerworhfi  WMtc  Papen 


Fully  leverage  the  content  that  is  the  key 
to  making  informed,  confident  decisions. 

Computerworld.com/whitepapers 
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Does  the  OS  Matter? 

ALK  TO  BILL  GATES.  Talk  to  Linus  Torvalds.  Talk  to  Steve  Jobs.  What 
you’ll  hear  is  that  operating  systems  matter  a  lot.  Talk  to  a  CIO,  and  you’ll 
hear  something  quite  different. 

I've  been  talking  to  quite  a  few  senior  IT  executives  at  dozens  of  large 
oi^;anizations  —  from  Boeing  and  FedEx  to  state  governments  and  major 
universities  —  and  while  everyone  agrees  that  operating  systems  are  im¬ 
portant  parts  of  their  IT  infrastructures,  they  also  agree  that  they  matter  less  and 
less.  Even  though  the  compelling  controversy  of  Linux  vs.  Windows  may  keep  devel¬ 
opers  and  systems  administrators  awake  at  night,  the  people  at  the  top  of  the  IT  food 
chain  aren’t  losing  sleep  over  the  debate.  Knowing  that  is  probably  giving  Micro¬ 
soft’s  chief  software  architect  a  nightmare  or  two. 

That's  not  to  say  that  stafT  concerns 
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about  the  pluses  or  minuses  of  one 
technology  over  another  don’t  marten 
They  do.  But  they’re  tactical  issues 
that  are  internal  to  IT  and  not  strate^ 
issues  about  the  business,  which  are 
what  CIOs  think  about. 

Plus,  operating  system  maturity  per¬ 
mits  CIOs  to  ignore  the  “problem."  For 
the  first  time  in  memory,  standard, 
proven,  supported  and,  for  the  roost 
part,  reliable  and  fast  operating  sys¬ 
tems  cover  the  gamut  of  IT  needs. 

When  the  answer  to  your  question  is  always  just 
around  the  comer,  you  cease  to  concern  yourself 
with  the  problem.  Believe  me,  for  IT  strategists, 
the  operating  system  debate  is  ail  but  dead. 

Need  to  deploy  PDAs  to  your  sales  force?  Need 
a  Web.  database  or  file-and-print  server?  Which 
operating  system  to  choose  isn't  the  first  question 
you’ll  ponder.  Instead,  you’ll  ask  yourself:  Are  the 
right  applications  available?  Does  our  IT  staffhave 
the  training  to  work  with  the  new  system?  Will  it  fit 
into  our  budget?  Can  it  be  customized?  Who  will 
service  and  support  the  technology? 

Naturally,  the  choice  of  operating  system  is  cru¬ 
cial  But  there’s  no  ri^t  or  wrong  answer  here. 

At  the  high  end,  Unix  proponents  can't  legiti¬ 
mately  slam  the  competition  (read:  Windows)  as 
not  having  the  performance,  reliability,  scalability 
or  breadth  of  applications  to  compete  for  data 
center  environments.  For  departmental  and  Web 
servers.  Microsoft  can’t  chide  Linux  users  that 
they’ll  be  left  in  the  cold  if  they  adopt  the  open- 
source  operating  system.  (After  all,  the  service 
and  support  from  IBM  is  generally  considered 
a  cut  above  that  from  Redmond.)  Even  at  the 
desktop,  where  Windows  is  a  legally  sanctioned 
monopoly,  users  are  choosing  Mac  OS  X  and. 
at  many  government  sites,  even  Linux,  and  find¬ 
ing  satisfaction  because  the  real  issues  of  applica¬ 


tion  availability,  support  and  cost  are 
being  answered. 

If  Fm  right  and  the  operating  system 
is  no  longer  a  critical  part  of  IT’s  deci¬ 
sion-making  process,  then  platform- 
specific  vendors  such  as  Microsoft  and 
Sun  will  be  at  a  disadvantage  compared 
with  the  likes  of  Hewlett-Packard  and 
IBM,  which  sell  and  service  just  about 
every  operating  system  you  can  name. 

If  you  beat  only  one  drum  but  your  lis¬ 
teners  want  a  symphony,  you’ll  lose 
your  audience. 

Of  course,  Microsoft  and  Sun  have  more  instru¬ 
ments  at  their  disposal.  But  when  chatting  with  IT 
executives,  vendor  representatives  all  too  often 
stress  their  respective  platform  advantages,  when 
those  things  matter  less  and  less.  1  think  that’s  be¬ 
cause  in  both  companies  there  is  a  fierce  competi¬ 
tive  tradition  centered  on  their  core  technologies. 
It’s  a  tradition  that’s  served  them  well  for  two 
decades.  And  it  persists  today. 

1  recently  talked  with  Paul  Harmon,  a  senior 
consultant  at  Arlington,  Mass.-based  Cutter  (Con¬ 
sortium.  about  a  report  he  vm>te  last  month  on 
Microsoft’s  response  to  Linux.  “Microsoft  likes 
having  an  enemy  because  it  gives  them  focus,"  be 
told  roe.  And  Linux  is  now  the  enemy.  While  that 
strategy  may  rally  the  troops  at  headquarters,  it  no 
longer  inspires  customers. 

Sun.  which  has  modified  its  initial  Unux-is-tbe- 
enemy  approach,  continues  to  view  Microsoft  as 
the  evil  empire  and  treats  Windows  with  disdain. 
To  do  so  is  foolish.  Sun  is  in  effect  telling  its  cus¬ 
tomers  that  they  are  supporting  a  wicked  com¬ 
pany  and  are  stupid  for  usu^  its  products.  Seems 
like  a  poor  marketing  strategy  to  me. 

My  guess  is  that  the  smart  people  who  made 
these  companies  great  will  realize  that  the  operat¬ 
ing  system  game  b  over.  And  cbey'U  turn  their  at¬ 
tention  to  issues  that  matter.  I 
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To  remain  at  the  forefront  of  industry,  today's 
IT  leaders  need  easy  access  to  strategic 
information,  news  analysis  and  advice. 
Computerworld  delivers  with  coverage  that 
emphasizes  and  advocates  for  the  user 
perspective,  providing  balanced,  objective 
reporting  on  a  wide  range  of  technologies, 
business  trends,  career  topics  and  man¬ 
agement  issues.  Computerworld  gives  you  the 
tools  you  need  to  succeed — to  evaluate  and 
implement  technology  solutions  that  put  you 
one  step  ahead  of  your  competition. 
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With  a  cutting-edge  suite  of  more  than  25 
e-mail  newsletters,  we  ensure  that  you  have 
access  to  the  information  you  need  in  a  way 
that  is  most  useful  to  you.  Whether  it's 
Computerworld  Daily,  issued  the  morning  and 
afternoon  of  each  business  day.  or  weekly 
newsletters  covering  the  technology  spectrum, 
there's  no  better  way  to  stay  in  tune,  in  touch, 
and  on  top  of  today's  ever-changing  world  of 
IT  than  with  Computerworld. 
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Windows,  Linux  Books 
Coming  This  Spring 

Here's  a  sampling  of  forthcoming 
books  about  operating  systems, 
as  reported  by  Publishers  Weekly; 

■  Untn  on  the  Mainhame.  by  lohn  Eilcrt. 
Maria  Eisenhacndler,  Dorothy 
Matihaeus  and  IngoifSalm  (Prentice 
Hail  May  2003) 

■  inside  Windows  Server 
2003,  by  William  Boswcli 
(Addisoo-Wesley.  March 
2003) 

■  Linux  Server  Hacks,  by 
Rob  Rickenger  (O'Reilly. 

March  2003) 

■  Introducing  Microsoft  ¥hR* 
dows  Server  2003.  by  Icrry 
Honeycutc  (Microsoft 
Press.  March  2003) 

■  Microsoft  Windows  Server 

2003  Admintstralor's  Companion,  by  Char¬ 
lie  Russel  Sharon  Crawford  and 
Cierend  (Microsoft  Press,  April  2003) 

■  Linux  Security  Cookbook,  by  Daniel  J. 
Barrett  and  Richard  Silverman  (O'Reil¬ 
ly,  May  2003) 

■  Windows  Server  2003:  A  Begifwier's 
Guide,  by  Martin  Matthews  (Osborne, 
April  2003) 
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■  Windows  Server  2003:  The  Complete 
Reference,  by  Kathy  Ivens  (Osborne. 
April  2003) 

Do  You  Need  a 'Meta  0S7 

As  if  it’s  not  enough  for  CIOs  to  have  to 
migrate  to  newer  versions  of  Windows 
or  decide  whether  to  jump  on  the  Lin¬ 
ux  bandwagon,  now  there's  a  buzz  sur- 
nmnding  the  fuzzy  concept  ofa  "meta 
operating  system." 

As  anaf>’st  Amy  D.  Wohl, 
president  of  Wohl  Associ¬ 
ates  in  Narbcrth.  Pa.,  re¬ 
cently  explained  in  "Mid¬ 
dleware  Spectra,'*  a  meta 
operating  system  is  a 
grand  scheme  to  use 
automated  tools  to  help 
IT  organizations  config¬ 
ure,  monitor,  manage  and 
control  their  entire  com- 
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puttng  environments.  Already,  major 
vendors  have  meta  OS  initiatives  un¬ 
der  way.  For  e.xamplc.  IBM  has  its 
"autonomic  computing"  effort  [Quick- 
Link  323421.  and  Sun  Microsystems 
Inc.  offers  N1  management  software 
(QuickUnk  .33051  J.  Grid  computing. 
Web  services  and  storage  virtualization 
are  also  pan  of  the  trend.  Wohl  says. 


Wide,  But  Not  Deep 
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raiHawMiig? 

Up  to  a  quarter  474% 
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Half  to  Ihrae  quarters  I  t9% 

More  than  three  quarters  I  U% 
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Meanwhile,  she  says.  "Microsoft  will 
try  to  create  a  new  scale  of  operating 
system  where  the  desktop  and  the  cor¬ 
porate  server  are  merely  pieces  of 
some  much  larger  operating  system 
environment  which  is  under  Micro¬ 
soft's  control" 

The  automated  management  tools 
of  a  meta  OS  could  solve  a  lot  of  prob¬ 
lems  for  short-handed  IT  operations, 
but  Wohl's  article  notes  that  CIOs  will 
have  to  be  persuaded  to  let  a  computer 
do  work  now  performed  by  IT  staffers. 


Bear  the  Penguin 

Linux  1$  expected  to  grab  a  quarter  of  the  worldwide  market  foi  server  operating  systems  by  2006 


Patent  Watch 

■  Eye  tractdng  to  manage  computer 
resources.  A  video  camera  monitors 
which  application  window  or  display 
the  user  is  looking  at.  so  a  special  oper¬ 
ating  system  can  allocate  more  re¬ 
sources  to  that  application  or  display 
(and  less  to  the  others).  For  example,  if 
there  are  two  monitors,  the  monitor 
that  isn't  being  used  will  go  into  stand¬ 
by  mode  to  save  power.  Inventor  Brian 
R.  Nickerson  at  Intel  Corp. 

—  L/.S.  Patent  Na  6J26,IS9.  issued  Feb.  25 

■  Running  multiple  Java  appfications  simul¬ 
taneously.  regardless  of  the  operating  sys¬ 
tem  and  without  invoking  separate  Java 
interpreters.  An  embedded  software 
module  sits  between  the  lava  virtual 
machine  and  the  multiple  Java  applica¬ 
tions  and  allows  the  open  applications 
to  communicate  with  each  other,  with¬ 
out  conflicts.  Inventor  Kumanan  Yoga- 
ratnam  at  Espial  Group  Inc..  Ottawa. 

—  US.  Patent  No.  6,513,158,  issued  Ian.  28 

■  Intercepting  certain  operating  system 
messages  to  make  retail  kiosks  more  user- 
friendly.  Kiosks  typically  use  off-the- 
shelf  PCs  and  software  (to  keep  costs 
down),  but  some  of  the  standard  fea¬ 
tures.  such  as  tool  bars,  dialog  boxes 
and  the  right-click  of  the  mouse,  arc 
unnecessary  or  detract  from  the  user 
experience  at  public  kiosks.  Those 
kiosks  need  to  be  foolproof,  so  a  dae¬ 
mon  program  operates  in  the  back¬ 
ground  to  block  selected  operating  sys¬ 
tem  messages.  Inventors:  Michael  T. 
Madl  William  P.  Shaouy  and  Marcus  F. 
Nucci  at  IBM. 

—  US.  Patent  No.  6SIX071.  issued  Ian.  28 

Research  Roundup 

■  In  a  survey  of  400  Linux  software  de¬ 
velopers  by  Evans  Data  Corp..  94%  of 
respondents  said  their  Linux  system 
hasn’t  been  infected  by  a  virus,  and 
more  than  7S%  said  their  Linux  system 
has  never  been  hacked. 

■  The  No.  I  barrier  to  Linux  adoption 
is  inertia:  Many  users  are  satisfied 
with  their  current  non-Linux  operat¬ 
ing  systems,  according  to  a  survey 

of  100  IT  managers  by  The  Goldman 
Sachs  Group  Inc.  The  No.  2  barrier 
is  the  lack  of  packaged  applications 
available  for  Linux. 

■  Inan  Evans  Data  survey  ofl.OOO 
software  developers  in  China,  65%  of 
the  respondents  said  they  expect  to 
write  an  application  for  Linux  this 
year,  and  44%  said  they  have  already 
done  so.  I 

MORE  RESOURCES 

Researr:)!  Imks  and  how-to  articles  are  available  at 

QuickLink  ktSOO 
wwwxompuiefworid.com 
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Windows,  Linux  Books 
Coming  This  Spring 

Here’s  a  sampling  of  fottbcoming 
books  about  operating  systems, 
as  reported  by  Publishers  Weekly: 

■  Uiiig  on  tha  Mainfrwne.  by  [ohn  Eilen, 
Maria  EiseRhaeitdler.  Dorothy 
Matthaeus  and  Ingolf  Salm  (Prentice 
Halt  May  2003) 

■  baidaWiMieMSarw 
2003.  by  William  Boswell 
(Addison-Wesley,  March 
2003) 

■  Unut  Saner  Hacks,  by 
Rob  Flkkenger  (O’Reilly. 

March  2003) 

■  kiRrodudrutfcresoftWn- 
dows  Sarvar  2003,  by  Jerry 
Honeycutt  (Microsoft 
Press,  March  2003) 

_  ^ ■  g. - 

■  nGraaoR  vfimmas  darvar 

2003  AibnMalnior's  Compantai.  by  Char¬ 
lie  Russel.  Sharon  Crawford  and  Jason 
Gerend  (Microsoft  Press.  April  2003) 

•  Lima  Sacurtty  Cookbook,  by  Daniel  J. 
Barrett  and  Richard  Silverman  (O’Reil¬ 
ly.  May  2003) 

■  1NMoiiaSarvar20(n:ABaginnar'$ 
Oidila,  by  Martin  Matthews  (Osborne, 
April  2003) 


■  Vfindows  Server  2003:  Tha  CompiatB 

Raferanca.  by  Kathy  Ivens  (Osborne, 
April  2003) 

OoYbuNeedaliletaOS? 

As  if  it’s  not  enough  for  CIOs  to  have  to 
migrate  to  newer  versions  of  Windows 
or  decide  whether  to  jump  on  the  Lin¬ 
ux  bandwagon,  now  there's  a  buzz  sur¬ 
rounding  the  fiizzy  concept  of  a  ’’meta 
operating  system.” 

As  analyst  Amy  D.  Wohl, 
president  of  Wohl  Associ¬ 
ates  in  Narberth,  Pa^  re¬ 
cently  explained  in  "Mid¬ 
dleware  Spectra."  a  meta 
rating  system  is  a 
and  scheme  to  use 
automated  tools  to  help 
IT  organizations  config¬ 
ure,  monitor,  manage  and 
control  their  entire  com¬ 
putus  environments.  Already,  major 
vendors  have  meta  OS  initiatives  un¬ 
der  way.  For  example.  IBM  has  its 
"autonomic  computing"  effort  [C)uick- 
link  32342),  and  Sun  Microsystems 
Inc.  offers  Ml  management  software 
KjuicklJnk  33051).  Grid  computing. 
Web  services  and  stoi^e  virtualization 
are  also  part  of  the  trend,  Wohl  says. 


Meanwhile,  she  says,  "Microsoft  will 
try  to  create  a  new  scale  of  operating 
system  where  the  desktop  and  the  cor¬ 
porate  se;  “er  are  merely  pieces  of 
some  much  larger  operating  system 
environment  which  is  under  Micro¬ 
soft’s  control." 

The  automated  management  tools 
of  a  meta  OS  could  solve  a  lot  of  prob¬ 
lems  for  ^on-handed  IT  operations, 
but  Wohl's  article  notes  that  CI(3s  will 
have  to  be  persuaded  to  let  a  computer 
do  work  now  performed  by  IT  staffers. 


Fear  the  Penguin 

Linux  is  expected  to  grab  a  quarter  of  the  worldwide  market  for  server  operating  systems  by  2006 


Patent  Wbtch 

■  Eye  tracking  to  manaoe  computer 
ranurcas.  A  video  camera  monitors 
which  application  window  or  display 
the  user  is  looking  at.  so  a  special  oper¬ 
ating  system  can  allocate  more  re¬ 
sources  to  that  application  or  display 
(and  less  to  the  others).  For  example,  if 
there  are  two  monitors,  the  monitor 
that  isn't  being  used  will  go  into  stand¬ 
by  mode  to  save  power.  Imrecitor  Brian 
R.  Nickerson  at  Intel  Cforp. 

—  US.  Patent  No.  6^26JS9.  issued  Feb.  25 

■  Running  tnulliple  Java  apptcaBonsaimul- 
tanaoushr.ragardtoBsofthsopentingays- 
tom  and  without  invoking  aapaiato  Java 
kitofpmteis.  An  embedded  software 
module  sits  between  the  Java  virtual 
machine  and  the  multiple  Java  applica¬ 
tions  and  allows  the  open  applications 
to  communicate  with  each  other,  with¬ 
out  conflicts,  kwantor  Kumanan  Yoga- 
ratnam  at  Espial  Group  Inc.,  Ottawa. 

—  US.  FUtent  No.  6S13JS8.  issued /on.  28 

•  kitarcaptkig  certain  operating  system 
messagas  to  mdta  rotafl  kioaks  more  usar- 
frtomly.  Kiosks  typically  use  off-the- 
shelf  PCs  and  software  (to  keep  costs 
down),  but  some  of  the  standard  fea¬ 
tures,  such  as  tool  bars,  dialog  boxes 
and  the  right-click  of  the  mouse,  are 
unnecessary  or  detract  from  the  user 
experience  at  public  kiosks.  Those 
kiosks  need  to  be  foolproof,  so  a  dae¬ 
mon  program  operates  in  the  back¬ 
ground  to  block  selected  operating  sys¬ 
tem  messages.  Invantors:  Michael  T. 
Madl,  William  P.  Shaouy  and  Marcus  F. 
Nucci  at  IBM. 

—  US.  PoCerU  No.  6S13,071.  issued  Jan.  28 

Research  Roundup 

■  In  a  survey  of 400  Linux  software  de¬ 
velopers  by  Evans  Data  C^rp..  94%  of 
respondents  said  their  Linux  system 
hasn't  been  infected  by  a  virus,  and 
more  than  said  their  Linux  system 
has  never  been  hacked. 

•  The  No.  1  barrier  to  Linux  adoption 
b  inertia:  Many  users  are  satisTied 
with  their  current  non-Linux  operat¬ 
ing  systems,  according  to  a  survey 

of  100  IT  managers  by  The  Goldman 
Sachs  Group  Inc.  The  Na  2  barrier 
b  the  lack  of  packaged  applications 
available  for  Linux. 

•  In  an  Evans  Data  survey  of  1.000 
software  developers  in  China,  65%  of 
the  respondents  said  they  expect  to 
write  an  applicadon  for  Linux  thb 
year,  and  44%  said  they  have  already 
done  sal 
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Knowledge  You  Need. 

Track  changing  market  conditions,  follow  the  latest  news  and 
develop  strategies  for  deploying  new  technology. 

No  matter  what  you're  looking  for,  you're 
sure  to  find  it  in  one  of  our  16  online 
Knowledge  Centers.  Each  seK-contained 
virtual  library  contains  a  complete 
collection  of  topically  based  resources  on  a 
specific  subject — from  storage  to  IT 
management  to  ROI.  With  a  wealth  of 
aggregated  information,  these  easy-to* 
navigate  Knowledge  Centers  are  a  single 


point  of  access  to  all  of  the  information  you 
need  to  support  important  business  and 
purchase  decisions: 

•  Up-to-the-minute  news 

•  Special  reports 

•  White  papers 

•  Research  and  analysis 

•  Vendor  listings 

•  Event  and  training  information 


Visit  Computerworld.com  and  get  all  the  knowledge 
you  need  to  make  irtformed,  confident  decisions. 

Computerworld.com/knowledgecenters 
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Lowdownon 
Linux  ^lls 

What  you  need  to  do  to  learn  Linux  and  land  a  job 
that  puts  your  skills  to  use.  By  Sharon  J.  Watson 

WHAT  DOES  rr  MEAN  for  IT  profes-  including  the  GNU  Obiect  Model  Environment. 

sionals  now  that  Unux  is  finding  its  Apache  Web  server.  Samba  file  sharing  and  others, 
way  into  a  growing  number  of  cor-  . 

porate  settings?  TFSUninQ 

For  systems  administrators  —  Unix  users  in  particular  And  Linux  easy  to  learn, 
the  corporate  IT  people  most  likely  ‘Anyone  who  knows  Solaris  or  any  major  Unix  plat* 


HAT  DOES  rr  MEAN  for  IT  profes-  including  the  GNU  Obfect  Model  Environment, 
sionals  now  that  Unux  is  ^ding  its  Apache  Web  server.  Samba  file  sharing  and  others, 
way  into  a  growing  number  of  cor-  . 

VVHS  porate  settings?  TFSUninQ 

For  systems  administrators  —  Unix  users  in  particular  And  Linux  easy  to  learn, 
the  corporate  IT  people  most  likely  ‘Anyone  who  knows  Solaris  or  any  major  Unix  plat- 
to  be  affected  by  Linux  adoption  —  it  means  they’ll  form  could  easily  switch  to  Linux."  says  Brian  Dewey, 

have  another  operating  system  to  leam  as  their  com-  network  engineer  at  Raymour  &  Flanigan  Furniture 

paaies  capitalize  on  Linux  savings  by  retraining  Co.  The  Liverpool.  N.Y.-based  company  runs  600 

staffers.  Linux-based  terminals  in  50  stores,  as  well  as  a  Lin- 

"It’s  dcAnitely  a  year  of  cost  containment."  says  ux-based  Domain  Name  System  and  e-mail  and 
Fran  Linhart,  director  of  certiAcations  at  The  Com-  Apache  and  Oracle  back-end  servers, 

puting  Technology  Industry  Association  Inc.  in  Oak-  Dewey  says  he  taught  himself  Linux  the  way  many 
brook  Terrace.  IlL.  which  offers  an  entry-level  Unux  professiottals  recommend  learning  it:  by  download* 
certiAcatioo.  She  notes  that  it’s  easier  and  cheaper  to  ing  a  free  or  inexpensive  Unux  distribution  and  ex¬ 


retrain  existing  staffers  than  to  hire  new  ones.  In¬ 
deed.  en^loyers  paid  for  most  of  the  20.000-plus  pro¬ 
fessionals  certified  by  Unux  Professional  Institute 
Inc.  in  Brampton.  Ontario,  through  the  end  of 2002. 

and  for  the  approximately  6.600  profes-  _ 

sionals  who  qiuiiAed  for  the  Red  Hat 

Certified  Systems  Engineer  designation.  I  Ifll .  J 

On  the  applications  side,  programmers 
and  developers  may  be  call^  on  to  port 
Unix-based  applications  to  Unux  systems  or  to  write 
new  ones.  But  they  won't  need  to  leam  new  lan¬ 
guages:  They  can  develop  applications  for  Unux  in 
C  C*»  Of  Java. 

That's  the  key  to  Linux,  say  its  supporters.  The  op¬ 
erating  system  will  revoluticmize  the  cost  of  back¬ 
end  servers  and  aeate  new  jobs  over  time,  building 
on  basic  programmii^  networking,  administrative 
and  business  skills  that  many  professionals  already 
have,  say  those  who  use  it 

"You  don’t  need  to  understand  business  policies 
and  practices  any  more  or  less  with  Linux  than  with 
other  systems."  says  Bill  Thompson,  director  of  IT  at 
The  Sherwin-Williams  Ca’s  paint  stores  group.  "You 
still  need  to  meet  the  needs  of  the  user,  and  Linux 
gives  you  a  lot  of  toob  to  accomplish  that"  The 
Cleveland-based  retailer  b  moving  to  Tuibolinux. 

SMb 

In  addition  to  understanding  netwoikii^  basics  such 
as  TCP/IP.  administrators  must  know  the  idiosyn¬ 
crasies  of  the  commercial  Linux  distributions  their 
companies  run  (such  as  the  Red  Hat  or  SuSE  dbthb- 
utioQs).  Linux  certiAcatioo  programs  also  test  for 
skiUs  in  networking  services  associated  with  Linux, 


perimenting  with  it. 

Formal  training  options  include  vendor-neutral 
courses  such  as  those  offered  by  Linux  CertiAed  Inc. 
in  San  lose  and  courses  from  vendors  like  Red  Hat 
Inc.  Local  Linux  user  groups  are  also  ex- 
cellent  sources  of  practical  information 
S  3  .  IkV  about  Linux  deployment.  Two  online 
sources  for  Linux  infonnation.  down¬ 
loadable  dbtributions  and  other  links 
are  www.iinux.com  and  www.desri7uirioniinux.com. 

Salary 

Linux  skiUs  offer  a  boost  to  administrator  salaries, 
Mdiich  have  been  dropping,  says  David  Foote,  presi¬ 
dent  and  chief  research  officer  at  Foote  Partners  LLC 
in  New  Canaan.  Conn.,  and  a  Computenvorid  colum¬ 
nist.  Systems  administrator  salaries  averaged  $78712 
in  total  compensation  last  year  —  a  decrease  of  9.5% 
from  200L  according  to  Foote’s  "(Juarteriy  IT  Profes¬ 
sional  Salary  Survey." 

However,  bonus  pay  for  Red  Hat  and  Linux  Profes¬ 
sional  Institute  certiAcations  increased  last  year, 
with  the  median  bonus  at  8%  of  base  pay  for  Red  Hat 
CertiAed  Systems  Engineer  and  at  7%  for  the  Linux 
Professional  Institute’s  Level  2  ceitiAcation  at  year’s 
end.  according  to  the  Arm’s  "(Quarterly  Hot  Technical 
SkiUs  and  Certifications  Pay  Index."  I 

DMHE-aMDSWIMD 

Unm  adopMm  s  OT  tM  nsa  M  dmi  expect  lo  see  a  tamg  boom 
In  ttie  Md  anytim  soon  The  ease  of  lea^  Linui  means  exsimg 
peisonnel  are  beinQ  leimned: 
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Employee  Spotlight 

Nmm:  BRAD  BICE 

TMk  Systems  adnNnistralor 

Employer  Alaska  Pacific  University.  Anchorage 

CioTaat  IT  abft  Bght 

90-aacoiid  rPaunP:  His  early  career  experience 
irKluded  seing  and  installing  hardwafe.  softvvare 
arri  networks  and  fuHnw  tedmical  support  at 
Oatatel  Inc.,  a  vendor  of  Unu-based  higher  education 
adrnnistratK)nsysterT)sinFaftax.Va.HeiolnedAias‘ 
la  Pacific  in  1999.  rranaging  a  mix  of  IM  Hal  Linux-, 
Unix*  and  Windows-based  servers.  One  of  his  first 
projecb  wm  helping  to  set  up  two  routers  using  Linux. 
$kib  booifc  Bice,  who  runs  Red  Hal  Linux  on  his 
desktop  PC  at  work,  offers  this  advice;  "Download  a 
Red  Hal  distnbuHon.  load  H  on  an  old  PC.  buy  a  ba¬ 
sic  Linux  book,  then  ptay  with  it  Get  Linux  to  dial 
into  your  ISP.  gel  the  wk>  browsers  up.  set  up  an 
FTP  server  -  ft's  very  powerful.* 

Bice  says  he  pk^  up  Ns  first  copy  of  Unux 
around  19M  and  used  It  bn  a  home  PC  not  only 
to  team  Unux  but  also  to  become  versed  in  Unix 
skAs.  Td  be  very  comfortable  taking  someone 
with  deep  Unux  skis  and  putting  th^  over  a 
Solans  server.*  he  says. 

Learning  Unux  at  home  or  via  classes  opens 
other  career  doors  too.  says  Bice.  Someone 
could  download  MySQL  and  PostgieSQL  team 
them  on  Linux  and  build  a  solid  bariqjround  for 
becomteg  an  Oracle  dat^)ase  administrator.  ‘AN 
Hrose  steRs  would  transfer,*  Bice  says. 

Having  a  mix  of  Unux  and  other  operating  sys¬ 
tems  skiils  and  experience  wi  be  vital  for  IT  pro- 
fessionals.  he  predicts.  For  example,  the  universi¬ 
ty  is  seeking  a  webmaster  to  manage  its  Red  Hal 
Unux  Web  server  running  MySQL  and  P^.  *A 
Windows  guy  would  be  1^  on  that*  Bice  says. 

Bid  a  faojlly/student  Wab  server  is  Windows- 
based,  and  the  webmaster  wi  be  expected  to 
support  those  applications  as  wei  life  need 
both  skH  sets.*  says. 

WalsonisafreelancemHerinChiaoo.Canlact 

hefatsiwatson&intetaccass.cafn. 


software 

PORTAL 

PLAY 


1  ]  WIN  WITH  PORTALS:  Here.  There.  Every'#here.  With  information 
coming  from  infinite  sources,  a  seamlessly  integrated  portal 
is  crucial  tor  both  increased  productivity  and  reduced  costs. 


2)  WIN  WITH  WEBSPHERE:  WebSphere  offers  a  pre-integrated, 
easy-to-implement  portal  solution  complete  with  leading- 
edge  collaboration  from  Lotus,*  content  management  from  DB2* 
and  the  best  in  security  capabilities  from  Tivoli* 


3]  MM(E  THE  PLAY:  Visit  ibm.com/websphere/portalplay 
tor  a  free  portal  kit  with  downloadable  demos  and  testimonials. 


(^  business  is  the  game  Play  to  win: 


HR  INFO 
THAT'S  GOOD 
TO  KNOW 
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The  Next 
Chapter 

Predictions:  Security  will  be  the  No.  1 
factor  in  choosing  a  server  operating 
system.  And  Linux  will  be  hugely 
successtlil  but  fragmented. 


■  MOREIIIPORTAMT 

Server  operating  systems  will  continue 
to  ascend  in  importance  as  more  and 
more  Web  services  are  implemented. 
Tbe  uitdertying  security  and  reliability 
models  of  Windows  Servez;  Solaris  and 
Linux  will  become  the  basic  points  of 
competition  and  differentiation.  As  the 
use  of  Web  services  grows,  companies 
will  make  server  OS  selections  based 
on  their  security  and  reliability  rather 
than  just  basic  price/perforroance. 

^  Sheblon  Laube,  chairman, 

CenterBeam  Inc.  Santa  Clara,  Calif. 


■  LESSMPORTAfrr 

Operating  systems  will  become  irrele¬ 
vant  for  application  deveiopmenL  In¬ 
stead.  developers  will  write  for  the 
next  layer  up  —  application  servers  — 
for  new.  Web-enabled  applications. 
Application  servers  will  become  tbe 
new  operating  systems  by  2005.  They 
are  hi^r-level  constructs  and  offer 
portability  across  the  old-style  operat¬ 
ing  systems. 

■  Marc  Fteury,  president.  JBoss  Group 
LLC,  Atlanta 


■  TNRS.TW0... 

Whhin  Hve  years,  there  will  be  three 
prominent  server  operating  systems 
that  dominate  the  marker.  Linux.  Win¬ 
dows  and  Solaris.  Five  years  after  that, 
there  will  be  two:  Linux  and  Windows. 

In  addition,  more  enterprise  func¬ 
tionality  will  be  bundled  in  tbe  operat¬ 
ing  system  —  like  Web  servers,  volume 
managers,  messaging  and  transaction 
managers  —  making  tbe  lines  between 
operating  system  and  middleware  even 


more  blurred  and  causing  great  pain 
for  some  enterprise  software  vendors. 
■  Pete  Manca,  vice  preside  of 
software  engineering,  ^genera  fnc.. 
Marlboro.  Mass. 


■  BYE-BYE.  JCT 

In  April  2004.  Microsoft  will  abandon 
the  .Net  platform  due  to  irresolvable 
scalability  problems  and  the  slow 
adoption  of  C#.  This  will  cause  no  dis- 
cemable  change  in  enterprisewide 
planning,  however,  because  no  one  is 
really  sure  what  .Net  is. 

■  Gerald  Boyd,  director  of  research, 
NCS  Technologies  Inc..  Piscataway,  N.J. 


■  PROPfUETARY  DINOSAURS 

Proprietary  operating  systems  for 
servers  are  the  dinosaurs  of  the  Web- 
enabled  world.  Over  tbe  next  five 
years,  server  operating  systems  will  in¬ 
evitably  consolidate  toward  two  alter¬ 
natives:  expanded  versions  of  Linux, 
and  Windows  running  on  rapidly  scal¬ 
able  bbde  servers  wi^  industry-stan¬ 
dard  prot^ssors. 

While  a  few  OS  niches  may  remain 
for  specialized  needs,  such  as  nonstop 
reliability,  even  these  are  likely  to  be 
provided  by  extensions. 

■  Shel  Tluvis,  vice  president  of  research. 
MigraTEC  Inc..  OoUas 


■  YVEB  SERVICES 

Support  for  distributed  component  ar¬ 
chitectures  and  Web  services  will  be¬ 
come  a  standard  embedded  layer  in  all 
widely  used  server  operating  systems. 
By  2004,  Windows.  Unix  and  Linux 
will  evolve  to  advanced  Web  services 


capabilities,  such  as  federation  and 
collaboration  features. 

■  Michael  Kdt^  managirig  director. 
PricewaterhouseCot^rs' Global  Tech¬ 
nology  Centre,  Menlo  Park,  Calif 


■  RNANCtAL  SERVICES 

Linux  and  open-source  software  will 
experience  substantial  growth  in  2003, 
particulariy  in  the  financial  services 
industry,  which  has  been  an  early  and 
successful  adopter. 

As  the  Web  services  model  for  appli¬ 
cation  integration  takes  hold.  Linux 
and  open  source  will  find  increasing 
use.  because  tbe  specific  technical  pro¬ 
file  of  the  Web  services  provider  will 
be  irrelevant  as  long  as  it  complies 
with  the  published  standard  at  tbe 
interface. 

•  Craig  Miller,  chief  technology  officer. 
Dimension  Data  North  America. 

Resfon,  Va. 


■  FRAOMENTATION,  ABAIN 

Within  10  years,  Linux  on  tbe  server 
side  will  make  up  over  75%  of  the  mar¬ 
ket.  but  it  will  b^me  fragmented,  just 
like  Unix.  The  players  will  be  Red  Hat 
Inc..  UnitedUnux  and  various  flavors 
of  Linux  from  hardware  vendors  such 
as  Dell  Computer  Corp.  and  IBM. 

■  Scott  Testa,  chte/operaring  officer. 
Mindbridge  So/hvoir  Inc., 

Norristown,  Pa. 


■  AYVmOOWSYYORLO 

The  winner  in  the  server  operating 
system  wars  will  be  the  one  that 


tbe  best  job  at  enabling  a  robust  and 
easy-to-use  Web  services  framework. 
Until  tbe  major  Linux  players  join  to¬ 
gether  on  an  effective  and  uniform 
Web  services  strategy,  we’re  destined 
to  live  in  a  Windows  world. 

■  /oel  Young,  vice  president.  Digi  Inter¬ 
national  Inc.,  Minneapolis 


■  SECURnVISJOBI 

In  the  wake  of  Code  Red.  Nimda  and 
the  recent  SQL  Slammer  worm,  securi¬ 
ty  will  be  come  the  determining  &ctor 
in  choosing  an  operating  system  dur¬ 
ing  the  next  12  months. 

The  major  vendors  will  be  forced  to 
integrate  security  patch  management, 
nonintrusive  uf^rades  and  better  log¬ 
ging  and  detection  systems  to  partici¬ 
pate  in  the  corporate  world. 

Open  systems  like  Linux,  running  on 
standardized  hardware  from  tradition¬ 
al  vendors,  will  gain  more  and  more 
market  share  due  to  a  fear  of  Microsoft 
products’  security  and  license  fees. 

■  left"  Guil/byk,  vice  president  of 
systems  and  security,  Solutionary  Inc., 
Omaha 


■  YVINOOYYS  ADVANCES 

Windows  Server  will  gain  increasingly 
complex  features,  including  workload 
and  partition  management  capabilities. 
The  sophistication  of  Unix  operating 
systems’  current  workload  and  parti¬ 
tion  management  features  will  in¬ 
crease  as  well 

■  Michael  Katz,  Pricewoterfiouse- 
Coopers 


Unde  Sam  Meets 
The  Penguin 

Before  the  yaar  N  out  stvtrai  slate  govonHiMcils  Mid  dapartnwili  of  the 
federal  oovornmenl  «NI  announce  stretogie  Mtiathme  to  convert  al  or  part 
of  their  ff  Mrastnidiiros  to  Linux.  Oovamment  uaars  art  attraotod  to  Linux 
because  of  the  towM  cost  of  oomarsMp  (at  a  lima  of  budget  ^ 

defidb).  bettor  security  and  the  use  of  nonproprtotory 
dM^lamM%.-BenReiftit^co-huntlerandpre^ilmt. 
QuadrixSohbo(isbK..Pisatdmy.HJ. 

Linux  wM  be  the  operating  system  of  choice  In  the  U.S. 

Defame  Oapailmant  before  2010,  probably  by  200S. 

This  is  because  the  systom  it  open,  can  be  fulydoc’ 
unientod.iieacwt.aupportevirtudlyal  proem- 
sots  and  is  supported  ^mafor  computer  and 
defense  contractorv  -  l>ic*  Jacobus.  CfQ. 
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For  more  information  on  advertising  in 

Marketplace 

STOP  everything  and  contact  me  now!, 
(800)  622-1108  ext.  6596 
rblack@computerworld.com 


Free  up  office  space  with 
your  PC-in-a-Keyboard. 

The  Brte-4  Zero-Footprint-PC*  from  Cybernet  has 
a  complete  feature-rich  PC  inside  the  keyboard. 


Bila  <  Zam  roa<pnwt-PC 
Modal  ZPCMMwMi 
15'LCDtatcrooa 


Products 
purchased 
as  a  result  of 
Marketplace: 


Hubs 


Routers 


Software  training 
Memory  products 
Ethernet  Cards 


Netware  products 
Modems 


Testing  equipment 
Multiplexers 
File  servers 


For  more 
advertising 
in  formation  in 
Marketplace 
contact  me  now!, 
(800)  622-1108 
ext.  6 596 
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Advertising  Supplement 

IT  Careers  Diversity  Report 

Country’s  Newest  Industry  Presents  Same  Face 


”'e  >aQ«}  and  mieniiit  ol  compeiiiion  fpr 

•ai^<«d  p»ol«'*on*'»,  '♦>«  cAiofmalioo  lechoolojy  pfafes5>an 
Katn  1  cnanfro  me  lateo*  iis  »o»'kfo«e 

T>  rane  Tatxt'n  launder  and  prpiidenl  □!  Career 
Cammumcai'Orrs  Group  Inc  ipublifirer  ol  US  Black  Cnfmeer). 
say^  the  data  <\  dear  about  'he  siluaticn  Less  than  10*>  ol  Ibe 
IT  avorkfcvce  comprised  o' black  Americans  There  s  aconlm 
•jedneed  lo'  new  employees  eslimaled  at  beiler  than  500,000 
‘ti  >003  Based  on  a  b'acA  population  that  >s  1?S  ol  the  lotat 
amvticAn  popu'a’ion  about  12  000  blacks  should  be  entenrsj 
the  IT  wo'hlO'ce  this  yea'  Te' 
less  than  2.000  blacks  earned 
computer  e«ecl'icat  and  systems 
enj.rsee'irsf  decrees  m  20Q? 

Taclpr  m  relirerrsenls  arsd 'he 
message  nctea/  •  the  snotiaje 
otit  warefarr.e  talent  isn'lgetlin} 
any  pester  and  arrsorsj  the  taco's 
IS  an  inability  to  ad'acJ  blacks  'a 
tT  studies  and  careers 

Taborn  says  mat  companies 
mat  ache  Irom  the  shortage  of 
talent  for  soltwaie  developers 
tni  systems  inieyalots  seldom 
loti*  to  an  appaieni  soutce  black 
studer'is  hme  hrstonca'iy  black 
coireyes  arsd  un.«e<s>ii 


accredited  enfmeennf  programs  and  are  producing  50%  of  the 
black  IT  graduates  That  leaves  plenty  of  room  for  imptovemeni 
among  the  more  than  3DQ  other  accredited  degree  programs  in 
aiiraciingand  matriculating  black  IT  students 

A  nuinber  of  initiatives  are  underway  lo  push  as  well  as 
pull  enrollmenl.  including  the  second  annual  FamilyNet  event, 
held  in  February  during  Black  History  Month  The  weeklong 
event  helps  push  technology  into  black  homes  that  Irom  a 
socio-economic  slance  might  not  otherwise  use  IT  Taborn  says 
the  effort  IS  designed  to  also  demonstrate  to  black  families  that 
technology  can  improve  their 
lives  -  from  a  healthcare  and 
mformaiion  iiandpomi,  as  well 
as  the  ability  lo  expose  a  new 
generation  early  to  the  |obs 
of  the  future  -  bridging  the 
cliche  digital  divide 

The  Federal  Bureau  of  Labor 
Statistics  reports  that  one  m  seven 
American  workers  is  employed  in 
information  technology,  eight  out 
of  Ihe  10  fastest  growing  occupa 
lions  are  IT  related  And,  one 
i|uar1er  of  all  |Ob  growth  through 
2006  will  come  in  IT  ‘ITsa 
myth  from  Ihe  dot  com  busi 
that  lech  was  |usl  a  fad,'  Taborn 


says  "It  has  permeated  every  aspect  of  the  American  economy 
Opportunities  do  exist ' 

One  of  the  errors  occurring  during  the  dol-com  blast  was  that 
more  attention  was  paid  to  hiring  people  to  push  product  and  set 
vice  to  market  rather  than  developing  a  highly  qualified  workforce 
Jobs  were  listed  online,  and  companies  waned  for  applicants  with 
little  push  to  reach  out  to  under  represented  populations  The  one 
exception  was  in  Ihe  federal  contracting  segment,  where  large  cor 
poraiions  continued  lo  pay  strict  attention  to  increased  diversity  of 
workers  as  well  as  of  the  suppliers  selected 

Taborn  sees  this  as  yet  another  opportunity  As  Ihe  mfor¬ 
maiion  technology  infrasiruclure  develops,  it's  repealing  history 
much  as  did  Ihe  building  of  Ihe  nation's  railroads  and  roadways 
Taborn  calls  il  firsl-generalion  opportunity  -  firsl-generalion  col 
lege  graduates,  first-generation  IT  workers  “These  were  national 
protects  that  in  their  infancy  weren't  standardized  With  railroads, 
the  tracks  weret*'!  standard  at  first  but  moved  m  that  direction  The 
same  situation  exists  with  IT.  a  movement  toward  standardization 
and  protocols  that  will  increase  reliability,  interactivity  and 
security  That  movement  creates  opportunity  " 

Which  brings  him  to  the  next  first-generation  element 
-  business  ownership  "Black  IT  professionals  need  to  generate 
a  different  fund  of  value  For  communities  by  setting  up  their  own 
companies ' 


IT  Careers 

For  more  information  on  reetuilment  advertising,  contact 
NancyJ  Percival.  Director,  Recruitment  Advertising  at 
800-762-2977 

500  Old  Connecticut  Path  Framingham,  MA  01701 
Produced  by  Carole  R  Hedden 
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Advertising  Suppiement 

IT  Careers  Diversity  Report 

Country’s  Newest  Industry  Presents  Same  Face 

tht  raptd  frowth  of  co«npe(Mton  for 

liteMod  proftttiontit,  ih«  uUomation  tochnolofy  pro(«*tMn 


hMn'l  chanfod  the  face  al  Ht  workforce 

Tyrone  Tabom.  founder  end  pretidenl  of  Career 
Conwnunicaboni  Croup.  Inc  (publisher  of  US  Black  Cr>|iiteer), 
tayt  the  data  w  clear  about  the  iitualion.  Less  than  lOXof  ihe 
IT  workforce  li  comprised  of  black  Americans.  There’s  a  contin¬ 
ued  need  for  new  employees,  estimated  at  belter  than  SOO.OOO 
in  20U  Based  on  a  black  populalion  that  is  12%  of  the  total 
American  poputaUon.  about  12.000  MkIq  should  be  enferlnf 
Ihe  IT  workforce  Ihls  year.  Yet. 
less  than  2.000  blacks  earrwd 
compuier.  etedncal  and  systems 
enjineertnf  def rees  In  2002. 

Factor  In  reiiremenis.  and  the 
messafe  It  clear  •  Ihe  shenafe 
of  rr  workforce  tafonl  Itn'i  fctlsnf 
any  betler.  and  amonf  Ihe  factors 
It  an  Inability  to  Mlraa  blacks  to 
IT  studies  and  careers. 

Tatem  says  thal  companies 
that  ache  from  Ihe  shertafeof 
tafeni  for  software  developers 
etfo  systems  iMefrefors  seldom 
lum  to  en  apparent  source  -  biaek 
students  Hme  htstorKafh'  black 
coHefes  and  univtrsilies  hate 


accredited  anjtnecrtnf  proframs  and  are  producln|  50%  of  Ihe 
black  IT  f  raduates.  Thai  leaves  plenty  of  room  for  improvemeni 
amonf  the  more  than  300  other  accredited  defree  proframs  in 
atlracttof  and  malriculalinf  btaek  IT  students 

A  number  of  IniliaNves  are  ursderway  to  push  at  wed  as 
pull  enrollment,  includinf  Ihe  second  annual  FamItyHei  even!, 
held  in  February  durinf  Black  History  MoniK  The  weeUonf 
event  helps  push  technolofy  Into  black  homes  (hat  from  a 
socio-economic  stence  mifht  not  otherwise  use  FT.  T  abom  says 
the  effort  ts  desffned  to  efso  demonstrate  to  black  famitiei  that 
lechrtolofy  can  improve  their 
lives  -  from  a  heallhcare  and 
informalien  slartdpoinL  as  well 
as  Ihe  abilily  lo  expose  e  new 
feneration  epriy  to  the  jobs 
of  Ihe  Future  -  bridfinf  the 
cliche  difital  divide 

The  Federal  Bureau  of  labor 
Siatititcs  reports  thal  one  In  seven 
American  workers  K  employed  in 
mformahan  technotofy.  eifhl  out 
of  the  10  fostesi  frawinf  occupa- 
Uens  are  IT  related  And.  one 
querter  of  all  fob  f rowth  Ihroufh 
200B  will  conte  in  IT.  *lfs  a 
myth  from  Ihe  dot-com  bust 
that  lech  was  |usl  a  fad'  Tabom 


says.  *11  has  permeated  every  aspect  of  the  American  economy 
Opportunities  do  exist* 

One  of  Ihe  errors  occurrinf  durirrf  Ihe  dot-com  blasi  was  thal 
more  etteniion  wes  peid  to  hwirtf  people  to  push  product  and  set 
vice  to  market  rather  Chan  devefopinf  a  hlfhly  qualified  workforce 
fobs  were  listed  online,  and  companies  waited  for  appitcanis  wtih 
little  push  lo  reech  out  to  under-represenled  populations.  The  one 
exception  was  in  Ihe  federal  coniraclinf  sefment.  where  lerfe  cor¬ 
porations  continued  lo  pay  slrKI  arteniion  lo  increased  diversity  of 
workers  as  well  as  of  Ihe  suppliers  selected. 

Tabom  sees  ihts  at  yet  another  opportunity.  As  Ihe  infor¬ 
mation  technolofy  infrastructure  develops,  il's  repealinf  history 
much  as  did  Ihe  buifdinf  of  the  nation's  rallroadi  and  roadways 
Taborn  calls  It  ftrsi  feneration  opportunity  -  firtt-ftneraiion  eof 
lefe  fraduales.  firtl-fentralion  IT  workers.  'Theta  were  national 
profocH  that  in  Ihesr  infancy  weren't  ttartdardixed  With  railroads, 
Ihe  tracks  weren't  standard  al  (irst  but  moved  in  that  dlrcctwn.  The 
same  situaiton  eiiils  wtdi  IT.  a  movement  toward  standarduatien 
and  protocols  thal  will  increase  reliabilny.  interachvtiy  and 
tecuriry.  That  movemeni  creates  opportunity ' 

Which  brinfs  him  to  the  next  firsl-feneralfon  elemeM 
-  business  ownership  *Btack  IT  professionals  need  to  feneraie 
a  different  kind  of  value  for  communlhes  by  settlnf  up  their  own 
companies* 


IT  Careers 

For  more  information  on  tecruMmeni  advcrtlsinf.  contact 
Nancy  LFereiv^PIreclor.ltecruMmcnlAdvertisinf  al 
•00-762-2977 

500  Old  Connecticut  Falh  Framinfham,  UA  01701 
Produced  by  Carole  ft.  Hedden 
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NopItSoll  has  opportunities  for  tachnicai  and 
marteling  prolassio^  in  Califomia  (Pleasvtton. 
San  lilateo.  Santa  Clara.  Encira.  Irvine,  and 
other  locations).  Bethesda,  MO.  Waltham,  MA. 
Teaneck.  NJ.  Atlanta.  GA,  Dallas,  TX.  Miami,  R. 

various  other  locations  within  the  U.S.  for 
the  following; 


Software  EafiMers 
Syrt— Malyttf 
ImMcM  Sapport  Analysts 
PreJnct  Managsn 

HiriMtiiV  Autysts 

Requirements; 

Multiple  openings/various  levels  and  types 
available. 

Bachelor^  degree  in  relevant  field  generally 
required. 

Additional  years  of  experience,  skills  and/or 
education  may  be  required  depending  on  job 
level/type 

For  consideration,  please  send  yoitf  resume  to 

PaoplBSoft,  Inc^  Atin:  Human  Resources 
Hanagor.  2377  6oM  Meadow  Way,  Suita 
110,  Gold  River,  CA  95670  or  email  to; 

workforce  cllvei^.  Please  also  visit  one  of  the 
following  w^isites.  www^Mopiesoftcom, 
www.monsterxom  or  www.cafjobsxom 


500  CM  Canmdictf  Ml.  P.O.  Ba  9t71 
Fianwiaham.lM0T7Cn^ 
Rme  (S0B)67M7OO 
Fu(S0S)67&4394 


Laumn  Austennartn 
(506)820-6522 

¥ICtHm«T/O0 

RickSmighlofl 

(506)620-7700 

VKC  HKSnnTBfTM  ■  C 

Maryiran  JohfBOfl 
(506)820-6179 


Matlhcw  C. 
(506)82a«02 


ManhewJ.  Sweeney 
(50e)27l-7KI0 


Onon  d  Cvcubllofl/HetfM  HotaK  CkoMon  Coonk 
nator/Dena  Tuca  (506)  a20«93 


Vice  Metoa  Mtucton/Caratyn  Medens 
(506)  8206232  M  (506)  87»<M46.  OBTnwnoll: 


MMWniftDlncWatMaMv^Kely  IM- 

BKS  MB  HMKn  KaEMOe  Onctor/Joerm  ^ 


aeSTOW:  Vice  fteadwiSPalegcftoyaTe  and 
EwnMeo  Lager  OhedDi.  Site  and  Martawig.  SnegK 
Mten  and  Eiwteten  Hans  ()neior.  Event  Madwlno 
and  ()arteance  nevam^Mi  Mtdqr  On*  Mmgai 


SeniGeCeotentei/ClBBlaD«:ENnlOp«teaBCDank- 
itex/lyRilteaRCanlnnceCootenaivMnaaeJu- 
rgatoan  Emm  Mam  Coonlraas^tee  Date  Ml 


tm  SnpNcs  ftoducaon  CooRinaiarAtei  Breatey.  SOO 
0UCoim1lcMM.6n917lFteitete<iLMACn7D1- 
9(71(506)  STOOnO.  fte  (506)  8756310 


Daedal  d  Oiina  Sate/Opantcna.  6ieag  Mfcy.  (506) 
77(6013;  ten  <|WOlOnlwSte^uiinogDeMl^ 
rant  Man  Oidly.  (506)8206145:  SOO  OU  (:onnacticut 
Bn  m  Fnneidm.  IM  017016171  fw  (506) 
770-3eB2lnsteSate/AccouMAssociale.NonTaTam- 
bunan.  Mach  -  CM  IV,  n  SouB)  Mmus  3rt  Root. 

Patm&  NJ  07662  (201)  SB7-73M.  M  (201)  7Q6786 


jK”  ;  CamgMwAaaocMM* . . 

. A 

. 65 

J  - . . 

. 33 

T  . . 

. .26 

■ATIMUM.  ASSOCUR  musm 


(506)271-7100 
M  (506)270-3862 


Vice  PtESaon:  Ljndi  Heteote  PfiO  IMMCTM 
MSOCUR  E6sa  Mte  177  Boaal  RomL  Site  40a  San 
Mateo.  a944Q2(650)  3576200  (V  (660)524  7000 


ACCOWlfBWITOILItetnEMwyB  SALgCIPBIA-  ACCOUKfOaecnMI:  ion  (Kite  3602  6nw&vte 

TI0»HMMaet:Einte  Hung.  <77  Bcwl  Road.  Site  tenc8.4teki.TX7B73g.(SO2e0-7«e4.FK(5O280- 

400,  S«Mteo.U  04402  (650)  367-0200.  Fac  (660)  7l04:8eiM8«lEBASaOGUIE  Jwi(WMte«B3l 

5dt-7000  VteKanianitena;Site200(r«ie.CA926l2(949)442 

4063.  Fan  (049)  4766724 


ACC0llfriMECniB:0eataS(nn.Kaw>Ebwte  Kai3£aU£Lll£aalitU&atUSS&^^ 
aB■0■»^^BASSOCM^L•Oa^ByB^ga^MLOC^  ACGOIAn6aecnteLwKltem«HB«IMIKn- 
BMnOIBIIMMAEfm  (teg.  177  BowtllteiL  Suae  MASSOCMEIE:  Debate  CnnmigL  500  OMConadoa 
40aSanMteOL  0404402(660)367-0200.  MvFtengteRkM  0(701.  (506)  STOOTOO.  (it  (506) 

Fte(660)SM-nO0  270-3682 


ACCOIIMriMeCIWMKTWOFIHHMBA  ACCOMWnfrmM  JBteeoMMteaaaaCtedr 

OtVBilUgin  m  iriMHaUM  aOHaniXOlO)  FUIIAIKTWAI80CUfLJdai(tetauk.ted 

442  4006.  M  (049)  4766724.  SBIOA  SALES  ASOOO-  CM  (V.  61  Sate  (iMS(bl3nlFh)».teMBa  *1)07652 
AR  ten  C>Mateba.«B3IVtal(innin4Mnue.  Site  200  (2Qi)S676090.FK(2D6SB76256.(20QSe7-QBO 

Irvine.  CA  02612(948}  442-4053  Fte  (949)  4766724 


ACCOMnOWtCWtetelte-tete  aSaeiMPte 
ACOXMRDICCrOllMuean  Grady  FCli)  MARKET-  teaalk.SLAteekie.a32092.{800)7796e22Fat 
RIOASBOailE:JolaiRMt2rte.Madi-CMIV.61Sate  (800)  7706622  BBniliHFT6l6AS60CMTE:0M» 

PwarnuaRd  3n(  Root.  Param&NJ  07652  (201)  567-0090.  teCnnaiiaigi.SOOOIdCannaaicMMi.FimMinn.te 
M  (201)  5676255.  (201)  587 1269  01701.  (506)  6706700.  Fat  (506)  270-3662 
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"SEiXii^ . •" 


Have  a  problem  with  your  Computerworid  subscription? 


teimagaanaategatenbbaaatetelescafceoliilormteinlotywandutteiciBhabxsby 
anadang  yof  tnagam  bbei  Oars,  a  copy  yew  name,  adtest  and  ooM  b»  •  t  maaa  on  yon 
Ute  Sind  l»  along  vMh  your  ocrraMnidanca 


Al  adtees  changes,  tte  changes  ate.  shaiid  be  accomuaraed  br  yew  address  WxL  4 
Dostea.  or  by  a  copy  d  Da  ntomteon  that  apoears  on  tw  teal,  acbdno  me  ceded  bie. 

TOM  NEW  ADDRESS  aOESHBK:  I  WRmtWWW-  ~ 


CENERAl  iNfORMATlOM 


.JftB)32E2277 


(506)620-^14 


(506)6206235 


.(617)532  7590 


(506)6206562 
.(506)6207729 
.  (301)2626243 


(506)8206204 
-.006)8206177 
(7(X3)  5309233 


.(500)620  8176 
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upgrade  of  DB2  Content  Man¬ 
ager  in  late  April. 

Version  8.2  has  built-in  inte¬ 
gration  with  customer  rela¬ 
tionship  management  (CRM) 
applications  from  Siebel  Sys¬ 
tems  Inc.  and  I^pleSoit  loc. 
That  will  let  end  users  open 
documents  and  other  types  of 


nonrelational  data  from  within 
the  CRM  software,  said  Brett 
MacIntyre,  vice  president  of 
content  management  and  in¬ 
formation  integration  at  IBM. 

The  company  also  an¬ 
nounced  an  upgrade  of  DB2 
Records  Manager,  which 
tracks  documents  that  need  to 
be  retained  to  comply  with 
regulatory  requirements.  The 
upgrade  is  IBM's  fust  since  it 
bought  the  teclmology  by  ac¬ 


quiring  Ottawa-based  Tarian 
Software  C^rp.  in  November, 
IBM  said  it  plans  to  add  a 
version  of  DB2  Ontent  Man¬ 
ager  for  small  and  midsize 
companies  by  the  third  quar¬ 
ter.  In  the  same  time  ftame. 
the  vendor  plans  to  take  initial 
steps  to  provide  native  inte¬ 
gration  with  its  Notes/Domi- 
no  coUaboratioD  tools.  Also. 
IBM  is  tying  DB2  Content 
Manager  to  its  digital  ri^ts 


management  software,  letting 
users  enforce  data  privacy 
rules  and  control  access  to  in¬ 
formation  when  documents 
are  sent  beyond  the  users' 
own  networks. 

David  Holland,  CIO  at  Cien- 
esys  Health  System  in  Flint. 
Mich.,  said  digital  rights  man¬ 
agement  will  help  Genesys  en¬ 
sure  that  it  meets  regulations 
governing  the  privacy  of  pa¬ 
tient  data  when  it  sends  med¬ 
ical  records  to  other  health 
care  providers. 

Genesys  uses  DB2  (foment 
Manager  with  electronic  med¬ 
ical  records  software  devel- 
t^>ed  by  BlueWare  Inc.  in  Cad¬ 
illac.  Mich.  Some  600,000  doc¬ 
uments  are  added  to  the  sys¬ 
tem  each  month.  Holland  said. 

IBM’s  moves  to  integrate 
DB2  Content  Manager  with  its 
other  products  are  also  help¬ 
ful  Holland  said. 

Tm  not  only  a  Content 
Manager  shop.”  he  noted.  “I'm 
also  a  TivoU  shop  and  a 
Notes/Domino  sliop  and  a 
WebSphere  ^lop.  As  all  these 
things  come  together,  it  iust 
'  mak«  my  life  easier.”  I 
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Bar  Codes 

bar  codes  to  drugs  at  a  cost  to 
a  150-bed  hospital  of  S162.000 
per  year.  That  compares  with 
a  one-time  cost  of  $250,000  to 
equip  the  hospital  with  bar- 
c<^e  technology  and  systen^s, 
she  said. 

Jeff  Schou.  director  of 
worldwide  health  care  mar¬ 
kets  at  Symbol  Technologies 
Inc.  in  Holtsville.  N.Y.,  esti¬ 
mated  that  close  to  $1  billion 
will  be  spent  on  wireless  LAN 
technology  to  provide  coimec- 
tivity  for  nurses  dispensing 
drup  bedside.  Schou  said 
there  are  roughly  6,000  hospi¬ 
tals  in  the  country  and  only 
7%  of  them  have  installed 
WLANs.  He  estinuued  the 
cost  of  installing  WLANs  at 
hospitals  that  lack  such  sys¬ 
tems  at  between  SSOXKK)  and 


$500,000  each,  depending  on 
the  size  of  the  focUity. 

Schou  said  the  bar  code 
readers  could  ftinction  in  a 
batch,  or  disconnected,  mode, 
but  be  added  that  WLANs  will 
be  the  best  way  to  manage  the 
system. 

Steve  Rough,  director  of 
pharmacy  at  the  University  of 
Wisconsin  Hospital  and  Clin¬ 
ics  in  Madison,  agreed,  noting 
that  batch  mode  doesn't  pro¬ 
vide  nurses  with  real-time  in¬ 
formation  —  a  key  to  medica¬ 
tion  management. 

The  University  of  Wiscon¬ 
sin  started  deploying  a  med¬ 
ication  management  system. 
Admin-Rz  from  San  Francis¬ 
co-based  McKesson  Corp..  in 
December  2001.  That  system 
incorporates  bar  codes,  and 
according  to  Rough,  it  win 
revrdutionize  patient  care  and 
safety.  Rou^  said  the  hospital 
has  experienced  an  87%  re¬ 


duction  in  the  number  of  med¬ 
ication  errors. 

That’s  because  the  bar-code 
system  provides  multiple 
checks  to  ensure  that  a  patient 
receives  the  correct  drug. 
When  nurses  dispense  med¬ 
ications.  they  first  scan  a  bar 
code  on  their  badges  and  then 
the  code  on  the  patient's 
bracelet  and  finally  the  code 
on  the  drug.  This  information 
is  sent  to  a  back-end  database, 
which  contains  patient  and 
prescription  informatiotL 

Rou^  said  the  cost  of  wire¬ 
less  LANs  could  be  spread 
over  multiple  applications,  in¬ 
cluding  computeriml  physi¬ 
cian  order  entry  systems  and 
supply  systems.  While  be  de¬ 
cline  to  detail  his  costs  to  in¬ 
stall  the  McKesson  Admin-Rx 
system,  be  said  a  hospital  bis 
size  should  anticipate  spend¬ 
ing  *a  couple  of  millioo  dollars 
over  a  Hve-year  period." 


Marybeth  Navarra,  director 
of  patient  safety  at  McKes¬ 
son's  Automation  Group 
called  the  FDA's  bar-co^  reg¬ 
ulations  a  "huge  step  forward” 
in  the  quest  to  climate  pa¬ 
tient  errors.  She  said  the  reg¬ 
ulations  would  also  help  break 
a  standoff  between  phama- 
ceutical  raanufocturers.  re¬ 
sellers  and  hospitals  over  the 
use  of  bar  codes.  The  manu¬ 
facturers  didn't  want  to  use 
bar  codes  because  the  hospi¬ 
tals  didn’t  have  readers,  while 
the  hospitals  didn't  want  to  in¬ 
stall  the  technology  because 
so  few  drugs  had  the  bar 
codes. 

Total  costs  for  hardware  and 
software  for  a  125-bed  hospital 
would  run  about  $200,000, 
Navarra  said.  A  hospital  that 
size  with  no  wireless  LAN. 
would  add  another  SSOjOOO  to 
hardware  costs,  she  said. 

T1)e  bar-code  regulations 
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IBM 


upgrade  of  DB2  Content  Man¬ 
ager  in  late  April. 

Version  8.2  has  built-in  inte¬ 
gration  with  customer  rela¬ 
tionship  management  (CRM) 
applications  from  Siebel  Sys¬ 
tems  Inc.  and  PeopleSoft  Inc. 
Tliat  will  let  end  users  open 
documents  and  other  types  of 


nonrelational  data  from  within 
the  CRM  software,  said  Brett 
MacIntyre,  vice  president  of 
content  management  and  in¬ 
formation  integration  at  IBM. 

The  company  also  an¬ 
nounced  an  upgrade  of  DB2 
Records  Manager,  which 
tracks  documents  that  need  to 
be  retained  to  comply  with 
regulator)'  requirements.  The 
upgrade  is  IBM’s  first  since  it 
bought  the  technology  by  ac¬ 


quiring  Ottawa-based  Tarian 
Software  Corp.  in  November 
IBM  said  it  plans  to  add  a 
version  of  DB2  Content  Man¬ 
ager  for  small  and  midsize 
companies  by  the  third  quar¬ 
ter.  In  the  same  time  frame, 
the  vendor  plans  to  take  initial 
steps  to  provide  native  inte¬ 
gration  with  its  Notc.s/Domi- 
no  collaboration  tools.  Also. 
IBM  is  tying  I)B2  Content 
Manager  to  its  digital  rights 


Data  Chief  Expects  Big  Things  From  Content  Tools 


Jml  hma.  gen¬ 
eral  manager  of 
CM’S  data  maO' 
agementdvision. 
Iasi  week  spoke  to 
Compulenmfid 
about  her  plan  to 
use  062  as  an  un- 
derlylno  technolo¬ 
gy  for  managing  Mormalion 
stored  In  other  databases  Of  cort- 
tent  reposllories. 


and  Ma^wllon  loeli  to  cem* 

para?  The  retahonal  database  is 
sti  a  larger  overal  opportinty.  but 
it's  profBcted  to  grow  in  single  dlQ' 
Its.  Content  management  is  pro¬ 
jected  to  grow  in  the  20%  to  30% 
range.  Wttiin  the  next  coitoie  of 
years.  It  wi  become  almost  as 


\Miy  da  you  tttok  your  Xperraito 


have  nformaOon  stored  in  many 
drfterenl  places.  When  they  want  a 
view  of  their  customers.  1h^  don't 
want  to  move  the  rnform^Kin  to  a 
central  place.  They  went  to  be  able 
to  aggregate  the  tofocmabon  atKl 
access  M  from  where  a  is  now. 

-CmgStedman 
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management  software,  letting 
users  enforce  data  privacy 
rules  and  control  access  to  in¬ 
formation  when  d(H;uments 
are  sent  beyond  the  users' 
own  net>vorks. 

David  Holland,  CIO  at  Gen- 
esys  Health  System  in  Flint. 
Mich.,  said  digital  rights  inan- 
agcmcni  will  help  Genesys  en¬ 
sure  that  it  meets  regulation.s 
I  governing  the  privacy  of  pa¬ 
tient  data  when  it  sends  med¬ 
ical  records  to  other  health 
care  providers. 

Geoesys  uses  DB2  C<mtent 
Manager  with  cicctrtmic  med¬ 
ical  records  software  devel¬ 
oped  by  BlueWare  Inc.  in  Cad¬ 
illac,  Mich.  Si>me  fiOO.rifX)  diK- 
uments  are  .iddcd  to  the  sys¬ 
tem  each  month.  Holland  said. 

IBM's  moves  to  integrate 
DB2  Content  Manager  with  its 
other  products  are  also  help¬ 
ful.  Holland  said. 

“I'm  iHM  only  a  Content 
Manager  shop."  he  TM>tcd.  “I'm 
also  a  Tivoli  shop  and  a 
Notes/Domimi  shop  and  a 
WebSphere  shop.  As  all  these 
things  come  tr^cther.  it  just 
makes  my  life  easier.*’  • 


cnmnnwi  viiiin.ni]  61 


IBM’s  New 
Content 
Management 
Softv^ 


062  CONTENT 
MANAOCRVERSIONa^; 

•  Adds  integration  vetb  Siebel 
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062  Content  Manager  and 
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a  redesigned  user  inierlacs 

•  Due  to  shp  March  31  on  Win¬ 
dows  2000  sarven.  costs 
$24 . 000 per  server,  pbis  $250 
lor  eadt  concurrent  user 
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bar  codes  to  drugs  at  a  cost  to 
a  150-bed  hospital  of  $162,000 
per  year.  That  compares  with 
a  one-time  cost  of  $250,000  to 
equip  the  hospital  with  bar¬ 
code  technology  and  sy-stems, 
she  said. 

leff  Schou.  director  of 
worldwide  health  care  mar¬ 
kets  at  Symbol  Technologies 
Inc.  in  Holtsvillc.  N.Y..  esti¬ 
mated  that  close  to  SI  billion 
will  be  spent  on  wireless  LAN 
technology  to  provide  connec¬ 
tivity  for  nurses  dispensing 
drugs  bedside.  Schou  said 
there  are  roughly  6,(K)0  hospi¬ 
tals  in  the  country  and  only 
7%  of  them  have  installed 
WLANs.  He  estimated  the 
cost  of  installing  WLANs  at 
hospitals  that  lack  such  sys¬ 
tems  at  between  $50,000  and 


$500,000  each,  depending  on 
the  size  of  the  facility. 

Schou  said  the  har  code 
readers  could  function  in  a 
batch,  or  disconnected,  mode, 
but  he  added  that  WLANs  will 
be  the  best  way  to  manage  the 
system. 

Steve  Rough,  director  of 
pharmacy  at  the  University  of 
Wisconsin  Hospital  and  Clin¬ 
ics  in  Madison,  agreed,  noting 
that  batch  mode  doesn't  pro¬ 
vide  nurses  with  real-time  in¬ 
formation  —  a  key  to  medica¬ 
tion  management. 

The  University  of  Wiscon¬ 
sin  started  deploying  a  med¬ 
ication  management  system. 
Admin-Rx  ftom  San  Francis¬ 
co-based  McKesson  Corp..  in 
December  2001.  That  system 
incorporates  bar  codes,  and 
according  to  Rough,  it  will 
revolutionize  patient  care  and 
safety.  Rough  said  the  hospital 
has  experienced  an  87%  re¬ 


duction  in  the  number  of  med¬ 
ication  errors. 

That's  because  the  bar-code 
system  provides  multiple 
checks  to  ensure  that  a  patient 
receives  the  correct  drtig. 
When  nurses  dispense  med¬ 
ications.  they  first  scan  a  bar 
code  on  their  badges  and  then 
the  code  on  the  patient's 
bracelet  and  finally  the  code 
on  the  drug.  This  information 
is  sent  to  a  back-end  database, 
which  contains  patient  and 
prescription  information. 

Rou^  said  the  cost  of  wire¬ 
less  LANs  could  be  spread 
over  multiple  applications,  in¬ 
cluding  computerized  physi¬ 
cian  order  entry  systems  and 
supply  systems.  While  be  de¬ 
clined  to  detail  his  costs  to  in¬ 
stall  the  McKesson  Admin-Rx 
system,  he  said  a  hospital  his 
size  should  anticipate  spend¬ 
ing  "a  couple  of  million  dollars 
over  a  five-year  period." 


Marybeth  Nav-arra.  director 
of  patient  safety  at  McKes¬ 
son’s  Automation  Group, 
called  the  FDA's  bar-code  reg¬ 
ulations  a  “huge  step  forward" 
in  the  quest  to  eliminate  pa¬ 
tient  errors.  She  said  the  reg¬ 
ulations  would  also  help  break 
a  standoff  between  pharma¬ 
ceutical  manufacturers,  re¬ 
sellers  and  hospitals  over  the 
use  of  bar  codes.  The  manu¬ 
facturers  didn't  want  to  use 
bar  codes  because  the  hospi¬ 
tals  didn’t  have  readers,  while 
the  hospitals  didn’t  want  to  in¬ 
stall  the  technology  because 
so  fets-  drugs  had  the  bar 
codes. 

I’otal  costs  for  hardware  and 
software  for  a  12$-bcd  hvispital 
would  run  about  $200,000. 
Navarra  sakL  A  hospital  that 
size  with  no  wireless  LAN, 
would  add  another  $50,000  to 
hardware  costs,  she  said. 

The  bar-code  regulations 


will  go  into  cffeci  three  years 
after  the  FDA  publishes  its  fi¬ 
nal  rules.  That's  e.vpccted  to 
happen  later  this  year,  after 
the  agency  assesses  comments 
filed  in  the  next  90  days.  I 


FDA  Drug 
Bar-Code  Rules: 
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Outsourcing  Angst 

VIVEK  PAUL  IS  WORRIED,  and  he  has  reason  to  be.  He 
figures  the  clock  is  ticking  on  the  software  engineers 
who  work  for  him  today.  Paul  told  a  reporter  last  week 
that  in  as  little  as  two  years,  it  may  be  possible  for 
much  of  that  programming  to  be  done  in  another  coun¬ 
try  for  a  lot  less  money.  In  other  words,  Paul  is  facing  the  same  off¬ 
shore  outsourcing  threat  as  many  U.S.  programmers. 

But  Vivek  Paul  runs  Wipro,  one  of  India’s  biggest  software  devel¬ 
opment  outfits.  And  he’s  looking  over  his  shoulder  at  offshore  pro¬ 
grammers  in  Vietnam,  China  and  the  Philippines. 


Paul  lold  the  AFP  news  service  that  salary 
costs  in  India  are  going  up  and  that  the  serious¬ 
ly  undervalued  rupee  could  gain  20%  to  30“b 
against  the  dollar.  That  would  eat  away  at  the 
cost  advantages  of  otTshoring  programming 
work  to  India. 

Meanwhile,  programming  companies  in  oth¬ 
er  lower-wage  countries  figure  they  can  move 
into  the  vacuum  as  Indian  costs  rise.  They’re 
building  their  own  armies  of  and  [ava  pro¬ 
grammers  and  aiming  to  do  to  the  Indian  soft¬ 
ware  business  what  India  is  doing  to  us. 

All  of  which  is  good  news  for  U3.  IT  depart¬ 
ment  budgets.  And  it's  actually  not  such  bad 
news  for  U.S.  programmers,  either. 

It’s  good  news  for  IT  budgets  because  com¬ 
petition  will  drive  down  the  price  of  offshore 
software  development.  Right  now,  a  typical  big 
project  costs  30%  less  in  India  than  it  would 
using  LI.S.  outsourcers.  That’s  largely  because  a 
typical  Indian  software  engineer  makes  88% 
less  than  a  U.S.  programmer.  (Long-distance 
development  adds  other  costs  that  reduce  the 
potential  savings.) 

If  programming  shops  in  the  Far  East  can 
mimic  the  Indian  approach  —  which  they’re 
busy  trying  to  do  right  now  —  the 
number  of  alternatives  for  an  IT 
shop  that’s  offshoring  a  big  project 
will  go  way  up.  Competitive  bid¬ 
ding  will  cut  offshoring  prices  to 
the  bone.  Lean-and-hungry  new¬ 
comers  will  keep  the  old-guard  off- 
shorers  honest  and  on  their  toes. 

That  means  we'll  spend  less  and 
get  more  for  the  money  we  do 
spend.  And  who  knows,  maybe 
we'U  even  get  to  plow  the  savings 
into  interesting  new  technologies. 

On  the  other  hand,  for  U.S.  pro¬ 
grammers  facing  an  uncertain  fu¬ 


ture.  this  may  sound  like  the  worst  possible 
news;  one  more  nail  in  the  coffin  for  code  jock¬ 
eys  who  see  their  jobs  evaporating  as  projects 
are  shipped  overseas.  But  don’t  kid  yourself. 
There  wasn’t  that  much  left  to  lose. 

Look,  we  can’t  compete  for  projects  that  can 
be  shifted  offshore  —  not  without  some  kind  of 
programming  fairy  dust.  Cutting  an  American 
programmer’s  salary  by  30%  to  match  off¬ 
shoring  prices  isn't  a  viable  option.  Nor  can 
U.S.  companies  simply  decide  not  to  send  any 
projects  oITshore.  No  business  can  stay  in  the 
game  while  competitors  get  lower  costs  and 
greater  flexibility  on  a  key  commodity,  which  is 
what  big-project  programming  has  become. 

Offshoring  is  real,  it’s  going  on.  and  it's  going 
to  get  bigger.  There’s  a  glut  of  generic  pro¬ 
gramming  talent  worldwide,  and  the  Internet 
makes  it  possible  to  tap  that  glut  for  big  proj¬ 
ects  that  need  generic  programmers.  Within  a 
few  years,  if  a  project  can  be  offshored,  it  will 
be  —  whether  it’s  to  India  or  Russia  or  China 
or  the  Philippines. 

So  if  you’re  a  programmer  in  a  U.S.  IT  shop, 
the  future  isn’t  really  uncertain  at  all.  It’s  a 
dead  certainty  that  generic,  big-project  coding 
no  longer  has  a  future  for  you.  And 
it's  certain  that  you'll  need  to  shift 
away  from  a  pure  coding  focus, 
and  toward  smaller  projects  that 
require  faster  turnaround,  special¬ 
ized  skills  or  an  intimate  knowl¬ 
edge  of  your  organization  —  in 
short,  the  things  offshore  code 
shops  can’t  comp)ete  with. 

That  way.  you'll  be  able  to  add 
more  IT  value  than  ever.  And  you 
won’t  have  to  look  over  your 
shoulder  anymore. 

You  can  let  the  offshorers  do 
that.» 
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she's  etraedy  g(il7  *She  eiys  It's  too  heMy.”  8a|6 
teh's  tus.  VIM.  f  eitt  woil  t»  corytog  to^ 
eiher,  can  f  just  instf  a  deehtop  PC  to  save  mone] 
Ash  a5l&  says  boas, 'aito  says  toat  vwaAl  na 

pnimoto  the  percejpllon  of  a  VP  on  toe  rnowe.* 


FRANK  HAYES  ■ FRANKLY  SPEAKING 


Outsourcing  Angst 


VIVEK  PAUL  IS  WORRIED,  and  he  has  reason  to  be.  He 
figures  the  clock  is  ticking  on  the  software  engineers 
who  work  for  him  today.  Paul  told  a  reporter  last  week 
that  in  as  little  as  two  years,  it  may  be  possible  for 
much  of  that  programming  to  be  done  in  another  coun¬ 
try  for  a  lot  less  money.  In  other  words,  Paul  is  facing  the  same  off¬ 
shore  outsourcing  threat  as  many  U.S.  programmers. 

But  Vivek  Paul  nms  Wipro,  one  of  India’s  biggest  software  devel¬ 
opment  outfits.  And  he’s  looking  over  his  shoulder  at  offshore  pro¬ 
grammers  in  Vietnam,  China  and  the  Philippines. 


Paul  told  the  AFP  news  service  that  salary 
costs  in  India  are  going  up  and  that  the  serious¬ 
ly  undervalued  rupee  could  gain  20%  to  30% 
against  the  dollar.  That  would  eat  away  at  the 
cost  advantages  of  oflshoring  prt^ramming 
work  to  India. 

Meanwhile,  programming  companies  in  oth¬ 
er  lower-wage  countries  figure  they  can  move 
into  the  vacuum  as  Indian  costs  rise.  They’re 
building  their  own  armies  of  and  Java  pro¬ 
grammers  and  aiming  to  do  to  the  Indian  soft¬ 
ware  business  what  India  is  doing  to  us. 

All  of  which  is  good  news  for  U3.  IT  depart¬ 
ment  budgets.  And  it’s  actually  not  such  bad 
news  for  U3.  programmers,  either. 

It’s  good  news  for  IT  budgets  because  com¬ 
petition  will  drive  down  the  price  of  offshore 
software  development.  Right  now.  a  typical  big 
project  costs  30%  less  in  India  than  it  would 
using  U.S.  outsourcers.  That's  largely  because  a 
typical  Indian  software  engineer  makes  88% 
less  than  a  U.S.  programmer.  (Long-distance 
development  adds  other  costs  that  reduce  the 
potential  savii^.} 

If  programming  shops  in  the  Far  East  can 
mimic  the  Indian  approach  —  which  they're 
busy  trying  to  do  right  now  —  the 
number  of  alternatives  for  an  IT 
shop  that's  offshoring  a  big  project 
will  go  way  up.  Competitive  bid¬ 
ding  will  cut  offishoring  prices  to 
the  bone.  Lean-and-hungry  new¬ 
comers  will  keep  the  old-guard  oCf- 
shorers  honest  and  on  their  toes. 

That  means  well  spend  less  and 
get  more  for  the  money  we  do 
spend.  And  wlw  knows,  maybe 
well  even  get  to  plow  the  savings 
into  interesdi^  new  technologies. 

On  the  other  hand,  for  U.S.  pro¬ 
grammers  facing  an  uncertain  fti- 


txire,  this  may  sound  like  the  worst  piossible 
news:  one  more  nail  in  the  cofTm  for  code  jock¬ 
eys  who  see  their  jobs  evaporating  as  projects 
are  shipped  overseas.  But  don't  kid  yourself. 
There  wasn’t  that  much  left  to  lose. 

Look,  we  can’t  compete  for  projects  that  can 
be  shifted  offshore  —  not  without  some  kind  of 
programming  fairy  dust  Cutting  an  American 
programmer’s  salary  by  30%  to  match  off¬ 
shoring  prices  isn’t  a  viable  option.  Nor  can 
U.S.  companies  simply  decide  not  to  send  any 
projects  offshore.  No  business  can  stay  in  the 
game  while  competitors  get  lower  costs  and 
greater  flexibility  on  a  key  commodity,  which  is 
what  big-project  prt^ramming  has  become. 

Offshoring  is  real,  it’s  going  on,  and  it’s  going 
to  get  bigger.  There’s  a  glut  of  generic  pro¬ 
gramming  talent  worldwide,  and  the  Internet 
makes  it  possible  to  tap  that  glut  for  big  proj¬ 
ects  that  need  generic  programmers.  Within  a 
few  years,  if  a  project  can  be  ofishored,  it  will 
be  —  whether  it’s  to  India  or  Russia  or  China 
or  the  Philippines. 

So  if  you’re  a  programmer  in  a  U.S.  IT  shop, 
the  future  isn’t  really  uncertain  at  all.  It’s  a 
dead  certainty  that  generic,  big-project  coding 
no  longer  has  a  future  for  you.  And 
it’s  certain  that  you’ll  need  to  shift 
away  from  a  pure  coding  focus, 
and  toward  smaller  projects  that 
require  ^ter  turnaround,  special¬ 
ized  skills  or  an  intimate  knowl¬ 
edge  of  your  organization  —  in 
short,  the  things  offshore  code 
shops  can’t  compete  with. 

That  way.  you’ll  be  able  to  add 
more  IT  value  than  ever.  And  you 
won't  have  to  look  over  your 
shoulder  anymore. 

You  can  let  the  offshorers  do 
that! 
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liart  iRftaaUMCtuce.  inrhetiae  TTaod 
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hacd  seeoad  look  «  Us  oonpaagh  IT 
aecviip  and  hektaaas  oootiaaitsr  pliDs. 
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veke  aaior  cyhscMads  avrinat  U.& 
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aaa  a  pceeaadoaRiy  iBoae  to  eaaae 
thatdwcaaipaiqrh*hi^^4iyaepndBe' 
tfoa  qpsteaa,*  aotaoifc  catrp  polats  and 
acBwSe  access  pcoceaasaaR  adaQuateljr 

TrSaaartty,patt6 


Under  a  State  Depactiaaat  pcogcam 
kaowB  as  the  Raaie  of  liaq  Project. 
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Ihirii  artnihiiitrathwi  ttiidiri  sbmI  fnr 
nauBeadatioaa  oa  feccasuafiiog  pest* 
war  Iraq. 

David  Suptea.  a  spokeaioaD  for  die 
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I  Company  now  says  Windows  version  that’s 
due  in  2005  may  be  accompanied  by  server  OS 


Microsoft  Corp.  went  to  great 
pains  in  November  to  get  the 
word  out  that  its  Windows  op¬ 
erating  system  code-named 
Longhorn  would  be  a  client- 
only  release. 

But  during  an  interview  at 
last  week's  Microsoft  Manage¬ 
ment  Summit  here.  Brian 
Valentine,  the  senior  vice 
president  who  heads  the  com¬ 


pany's  Windows  division,  told 
Cofl^terwodd  that  there  may 
be  a  new  server  operating  sys¬ 
tem  released  with  Lon^om. 
which  is  iKXw  pegged  for  2005. 

I  Valentine  said  support  for 
some  the  new  di^  cqiabil- 


ides  being  enabled  in  Long- 
horn,  such  as  richer  collabora¬ 
tion  and  integrated  storage. 
wiU  require  infrastructure  ser¬ 
vices  on  of  the  server  oper¬ 

ating  system.  How  those  addi¬ 
tions  or  changes  will  be  pack¬ 
aged  and  delivered  —  whether 
in  a  service  pack,  separate 
download,  overlay  or  new  op¬ 
erating  system  release  —  has 
yet  to  be  decided,  he  said. 

“We’!!  do  whatever  makes 
the  most  sense  and  is  easiest 
on  our  customers,”  be  said. 

Longhorn,  pqge  57 


QUICKLY  CONNECT  CONTENT 


SAND  CONTENTMENT. 


•  NET  connected  software  from  Microsoft  helps  you  make  content  management 
more  manageable.  yV’ir.  fu-rv  change  m  your  business  needs  come  demands  lof  more 
Web  Sites,  more  content,  and  a  faster  response  trom  already  strained  |T  resources.  To 
hnci  contentment  m  this  setting,  consider  Microsoft  Content  Management  Serve'  ^Vith 
native  support  for  XML.  't  integrates  with  vour  existing  and  future  applications  to  create  a 
centraii/ed  infrastructure  for  publishing  content  to  intranet,  extranet,  and  Internet  sites 
Vou  control  site  consistency,  while  empowering  content  owners  to  publish  their  own  pages 
So.  you  can  be  more  responsive  with  fewer  resources.  And  everyone  isjrontent  Jo  get 
a  technical  overview,  vis't  microsoft.com  content  Software  for  the  Agile  Business. 


It's  so  far  forward,  it's  a  shame  to  call  it  backup. 


ARCwnra  v9 


Apporentty  the  word  is  out  everywhere.  Brigh^tor*  ARCserve*  Backup  is  omortg  the  most  reliable  and  widely  used 
backup  solutions  in  the  world.  In  foct,  hurtdreds  of  thousdr>ds  of  people  rely  on  BrightStor  ARCserve  Bockup 
technology  to  protect  their  criticol  servers.  Now  we've  created  BrightStor"  ARCserve*  Bockup  v9,  the  most  odvorKed 
version  ever.  As  port  of  the  BrightStor"  line  of  storoge  nKinogement  solutions,  Brigh^tor  ARCserve  Bockup  v9  is  amazir>gly  powerful  yet 
one  of  the  simplest  to  use  and  easiest  to  irtstall  solutiorts  out  there.  In  fact,  most  users  con  perform  their  first  backup  within  20  minutes 
of  start-up.  And  that  mear>s  it's  the  perfect  bockup  software  choice  for,  well,  just  about  everyone.  ca.com/brightstor/orcsefve9 

BrightStor”  ARCserve'  Backup  Computer  Associates* 
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Case  Study:  Managing 
the  Other  20%. 

tn  th«  ManaoMiwm  MCtion:  Ingersoll- 
Raod  looks  to  reap  big  savings  by 
closely  scnitiniziiig  dealings  with  its 
smallest  suppliers.  Pagt  39 


NavSea’s  ROI  SMp  Comes  h. 

In  tht  MaiMflgfiiMrt  section:  SeaPort  the 
Naval  Sea  Systems  Command’s  e*procure* 
ment  system,  has  cut  tbe  time  it  takes  to 
acquire  professional  services  from  270 
days  to  less  than  4S  Pago  46 
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25  Know  Hiy  Customor.  Under- 
staiKling  users’  needs  and 
building  in  flexibUity  are  tbe 
keys  to  successful  Web  self- 
service  applications. 

30  Hwnb-On  Rwfew:  Microsoft's 
Suftt  Drowns,  Office  2003 
has  enough  new  and  im¬ 
proved  features  to  tempt  IT 
managers,  says  Russell  Kay. 

32  FuluroVMcft:  Smart  Dust. 
Tiny  wireless  sensors  could 
change  manufacturing,  medi¬ 
cine  and  even  tbe  military. 

34  Security  Manngsr’sJoumal: 
insecure  Servers  Suffer  Ini' 
age  Problem,  when  server 
administrators  take  shortcuts, 
good  security  policy  and  tech¬ 
nology  can’t  protect  Mathias 
Thurman’s  company. 


10  Unisys  updates  management 
software  for  ES7000  servers. 

12  Microsoft  plans  to  launch 

“operationally  aware”  apps  to 
ease  system  management. 

14  LAPD  sacks  a  bandwidth 
boost  from  WLAN. 

14  Pentagon  invostigatos  sys¬ 
tem  intruskm  involving  Win¬ 
dows  2000  security  flaw. 

16  i2  aims  to  simplify  supply 
chain  software. 

16  Fidelity  installs  SAN  manage¬ 
ment  tool,  switching  from 
hom^rown  application. 


42  So  You  Want  to  Bo  a  CTO. 

What  you  do  in  that  role  de¬ 
pends  on  who  hires  you.  who 
you  report  to  and  whether 
you  have  budget  authority. 

44  QAA:  Tap  Computers  for  ftie 

*0og  Work.”  in  the  bot^  Es¬ 
sentials  of  Supply  Chain  Man¬ 
agement.  Mike  Hugos,  CIO  at 
Netwoit  Services  Co.,  advises 
readers  to  leave  the  critical 
decisions  up  to  people  and  tbe 
automation  to  tite  systems. 

49  Book  Review:  IT  Customers 
Rule  bmovation.  Mark  Hall 
says  Computayforid  orfum- 
nist  David  Moscbella’s  new 
book  sboukl  send  chills  down 
tbe  spines  of  IT  vendors. 


10  On  the  Mark:  Mark  Hall 

learns  why  Web  services 
aren't  moving  beyond  tbe  ftre- 
wall,  uncovers  another  victory 
for  Linux  and  sees  3-D  dis¬ 
plays  in  your  future. 

22  Patricia  Keefe  argues  that 
most  ROI  analyses  are  half- 
baked  and  explains  why  yours 
doesn’t  have  to  be. 

22  Pimm  Fox  suggests  that  P2P 
tedmology  is  more  than  just 
cool  for  kids.  It  can  be  a  seri¬ 
ous  tool  for  IT  as  well 

23  DanM  J.  Weitznor  points  to  a 
recent  jury  decision  that 
shows  tbe  flaws  in  tbe  Digital 
MlUennlum  Copyri^t  Act 

36  Tommy  Petorson  says  self- 
service  application  vendors 
take  the  wrong  lessons  from 
the  history  of  the  ATM. 

50  Peer  To  Poors:  Ton  Ways  To 
incroase  Your  IT  VahM.  Les¬ 
son  Na  1:  Execution  is  every¬ 
thing,  so  don't  get  embroiled 
in  endless  analysis,  writes 
guest  colunmist  Matthew 
Krieger  of  Reader’s  Digest. 

58  Frankly  Speaking:  Frank 

Hayes  worries  that  your  staff 
might  be  suffering  from 
burnout,  then  worries  again 
that  you  mi^t  treat  ^ 
burnout  cases  tbe  same. 
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NavSea's  ROI  Ship  Conies  In. 

In  the  Management  section:  SeaPort,  the 
Naval  Sea  Systems  Command’s  e-procure¬ 
ment  system,  has  cut  the  time  it  uJces  to 
acquire  professional  services  from  270 
days  to  less  than  45.  Page  46 


03.24.03 


Case  Study:  Managing 
the  Other  20%. 

In  the  Management  section:  In^rsoll- 
Rand  looks  to  reap  big  savings 
closely  scrutinizing  dealings  with  its 
smallest  suppliers.  Page  39 
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25  Know  Thy  Customer.  Under¬ 
standing  users’  needs  and 
building  in  Hexibility  are  the 
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30  Hands-On  Review:  Microsoft's 
Suite  Dreams.  Office  2003 
has  enough  new  and  im¬ 
proved  features  to  tempt  FT 
managers,  says  Russell  Kay. 

32  Future  Watch:  Smart  Dust. 

Tiny  wireless  sensors  could 
change  manufacturing,  medi¬ 
cine  and  even  the  military. 

34  Security  Manager's  Journal: 
Insecure  Servers  Suffer  Im¬ 
age  Problem.  When  server 
administrators  take  shortcuts, 
good  security  policy  and  tech¬ 
nology  can’t  protect  Mathias 
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42  So  You  Want  to  Be  a  CTO. 

What  you  do  in  that  role  de¬ 
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you  report  to  and  whether 
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sentials  of  Supply  Chain  Man¬ 
agement.  Mike  Hugos.  CIO  at 
Network  Services  Co.,  advises 
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22  Patricia  Keefe  argues  that 
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Haw  to  Secure  Yfaur  Systams  Now 

SECURITY;  The  war  against  Iraq  w31  likely 
trigger  an  increase  in  international  hacker 
attadcs.  There  are  steps  you  can  take  to  re¬ 
duce  your  exposure.  QMckLJnk  97112 

rrSalaiesHaidOn 

CAREERS;  Meta  Group’s  Maria  Sdiafet.  in 
her  debtit  as  a  ComputmeorULeom  career 
cohimnist,  concludes  that  IT  salaries  »td 
raises  are  faring  better  than  those  for  non-IT 
iobs.QuiddMS7«7 

ShouUVbuKIVburPrajact? 

MANAOEMENT:  Doyou  know  when  it's  time 
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what  you  can  do  to  defend  your  networks 
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Global  Hrms  Confident 
About  Disaster  Recovery 


Post-9/t1,  many 
businesses  feel 
better  prepared 

•V  LUCAS  HCAIMAN 

eVERAL  LARGE  compa¬ 
nies  last  week  said 
they're  now  better  pre¬ 
pared  for  IT  disaster 
recovery  work  that  may  be  re* 
quired  as  a  result  of  the  war 
with  Iraq,  thanks  largely  to  in¬ 
vestments  they  made  after  the 
SepL  U,  2001.  terrorist  attacks. 

For  example.  Loews  Corp..  a 
New  Yoit-based  holding  com¬ 


pany  that  owns  businesses  in 
industries  such  as  insurance, 
travel  and  offshore  drilling, 
has  been  building  up  the  end- 
user  access  capabilities  on  its 
corporate  intranet  as  part  of  a 
business  continuity  plan  that 
was  pul  in  place  last  year. 

In  part  b^use  of 
Loews  has  deployed  multiple 
remote  access  points  through 
authentication  servers  and  vir- 
mal  private  networks,  said  Al 
Alexander,  manager  of  Loews' 
information  center.  Those 
steps  include  the  installation 
of  a  secure  access  system 


called  e-Gap.  developed  by 
Whale  Communications  Inc. 
in  Fort  Lee,  HJ. 

"If  there  was  a  reason  our 
building  was  incapacitated  — 
if  there  was  a  chemical  attack, 
where  people  couldn’t  get  to 
work  —  communications  and 
intranet-based  applications 
could  sdll  function  from  any 
machine  in  the  worid,"  Alex¬ 
ander  said. 

Wendall  Fox.  a  CIO  at  a 
global  company  in  the  hospi¬ 
tality  industry,  said  his  busi¬ 
ness  unit  made  sure  that  its 
business  continuity  plans 


were  up  to  date  before  the  war 
began  in  Iraq. 

“We’ve  learned  frwn  WU 
that  we  have  to  be  ready.”  said 
Fox.  noting  that  his  cwnpany 
lost  a  hotel  when  New  York's 
W(^  Ttade  Center  was  de¬ 
stroyed.  *1  think  that  we’ve  tak¬ 
en  all  the  precautions  neces¬ 
sary.  [But]  cotainly,  one  can't 
predict  what  might  happen." 

Chicago-based  brokerage 
Bright  lYading  LLC  last  year 
expanded  its  redundant  data- 
backup  systems  and  commu¬ 
nications  networks  in  response 
to  the  WU  attacks.  “We  have 
backups  of  data  in  our  head¬ 
quarters  aftH  maintain  aUxU- 
laiy  backups  in  Chicago  and 
New  York.”  said  director  of 
education  Don  Bright  “We 
could  switch  over  to  any  of 
our  trading  floors  in  the  event 
that  one  went  down."  I 


Continued  from  page  I 

IT  Security 

Last  week,  IT  executives  at 
couqianies  contacted  by  Cont- 
puierworid  said  they  were  re¬ 
viewing  their  security  and  dis¬ 
aster  preparedness  plans  even 
as  th^  held  out  hope  that  dis¬ 
ruptions  would  be  minimaL 

"If  history  is  any  guide.  I 
don't  expect  any  tremendous 
amount  of  cyberterrorism  be¬ 
ing  focused  on  us  now."  Kmg 
said.  "We  fust  vrant  to  make 
sure  that  we  are  not  in  any 
way  vulnerable  to  casual  or 
»rople  attacks." 

The  biggest  threat  will  come 
from  TxiUtically  motivated, 
low-level  cyberattacks"  aimed 
at  “targets  of  opportunity."  ac¬ 
cording  to  a  report  released  by 
Stamford,  Conn.-based  Gart¬ 
ner  Inc  in  February.  Such  at¬ 
tacks  will  be  designed  to  dis¬ 
rupt  operations  and  vandalize 
Web  sites  with  political  mes¬ 
sages.  the  report  stated. 

Confingency  Plans 

StiU,  most  U.S  corporations 
aren't  expecting  a  ma)or  busi¬ 
ness  disruption  from  the  war 
in  Iraq,  though  a  majority  of 
companies  have  ^obal  IT  con¬ 
tingency  plans  in  place,  ac¬ 
cording  to  the  results  of  a  sur¬ 
vey  of  60  companies  released 


last  week  by  Boston-based 
AMR  Research  Inc 

One  such  company  is  Betts 
USA  Inc.,  a  Florence.  Ky.- 
based  manufacturer  of  tubes 
and  injection-molded  compo¬ 
nents  with  operations  in  sev¬ 
eral  countries,  including  In¬ 
donesia.  India  and  China. 

Like  Lehman.  Betts  is  going 
over  its  defenses  with  a  fine- 
toothed  comb,  malting  sure 
that  its  firewalls  are  property 
configured,  that  virus  defini¬ 
tions  and  software  patches  are 
folly  updated  and  that  proper 
tape  backup  processes  are  in 
place. 

The  company  also  has  plans 
to  get  in  touch  with  its  be¬ 
ware  distributor  to  make  sure 
spare  equipment  is  available  if 
it’s  needed,  said  Dennis  RoeU, 
IT  manager  at  Betts.  Physical 
security,  focillties  access  and 
disaster  recovery  processes 
are  being  reviewed  at  ail 
plants,  and  Betts  is  getting  in 
touch  vrith  hs  Internet  service 
provider  to  review  its  security 
and  contingency  plans  as  weU. 
RoeU  said. 

“It’s  all  of  the  same  stuff  that 
went  into  the  Y2k  pref^ra- 
tion,"  he  said-  "We  are  just  re- 
afftrmii^  everything  we  have 
done  to  make  sure  we  have  in¬ 
deed  thought  this  throu^" 

"In  terms  of  IT  security,  we 
continue  to  focus  on  business 


uu»ct  aMniMa  lac  atuiroKp  cqm> 


continuity  for  key  systems  and 
heighten^  vigilance  for  polit¬ 
ical  hactivism."  said  Bill 
Smatbers.  director  of  enter¬ 
prise  security  services  at 
Avnet  Inc.,  a  $9  billion  tech¬ 
nology  distributor  in  Tempe, 
Ariz.,  that  has  customers  in  63 
countries. 

"Physical  security  is  the 
most  immediate  focus.  Avnet 


has  a  limited  presence  in  the 
Middle  East,  and  our  highest 
priority  would  be  the  safety  of 
our  employees  within  the  mil¬ 
itary  ebuter  of  operations." 
Smathers  said.  The  company 
has  formed  an  emergency  re¬ 
sponse  team  that  includes  key 
fonctions  such  as  IT.  corpo¬ 
rate  communications,  quality 
assurance,  transportation  and 
travel  be  said. 

"All  have  plans  in  place  to 
keep  business  interruptions  to 
a  minimtun  in  the  event  of  a 
crisis,”  Smathers  said,  declin¬ 
ing  to  elaborate. 

In  some  cases,  previous 
preparations  are  payii^  off. 

AU  of  Royal  Caribbean  Cruis¬ 
es  Ltd's  ships  have  been  (^>er- 
ating  at  the  "highest  level  of 
security  alert"  since  the  at¬ 
tacks  of  Sept.  U,  2001.  said 
Tom  Murphy,  CIO  at  the  Mia¬ 
mi-based  company. 

According  to  Murphy,  Royal 
Caribbean  is  the  first  cruise 
company  to  be  ready  with  the 
Advanced  Passenger  Informa¬ 
tion  System,  an  electronic 
passeitger-tracking  system 
mandated  by  the  U.S.  Depart¬ 
ment  of  Homeland  Security 
[QuiclcLink  35467).  As  a  re^t 
of  such  measures,  "we  don't 
have  any  specific  concerns 
relative  to  IT  security"  stem¬ 
ming  from  the  Iraq  crisis, 
Murphy  said  I 
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Postwar  Iraq  May  Be  Big  fT  Market 

Counby  hMlbwicU  fldMMliami 
mouQMtolwMdkltEMtinilT  pownr 


Even  before  tbe  Hm  eoMm 
wereleancfaeditBeghriert 
bat  week,  Inq**  TT  in&a- 
fitioctvre  was  prindtive.  a  re> 
ffuhofyeeisofwaraDdeco- 
Domic  lanetfoBi.  But  tf  Inq 
etnetget  from  the  riwwttowu 
with  the  U.S.  as  n  open  •oct' 
ct%  it  ocNiU  beoome  a  iD^or 
tedmofogy  tnasket  for 
conqMstiea. 

^rrrry  hnirinfM  mimVil 
penoo  is  kMkfaig  at  Inq  af¬ 
ter  the  ww  because  it  is  a 
very  rich  country*  said  Riad 
Sa^  director  of  bfiddle 
Eastern  and  Norrii  African 
operations  at  enterprise  qrs> 
teas  vendor  Stratus  Tech- 
Doknies  toe,  in  Maynard, 
Mass. ‘The  needs  are 
tremendous." 

Stratus  eqtects  to  focus  <» 


a  horinntal  market  Instead 
of  vertical  segments  becauae 
it  sea  ubiquilotti  need  for  its 
systems  in  Iraq  after  soy  mU* 
toy  actioos  have  ended. 

Stosaidbebetteva 
Iraqh  "****»  potential, »  h 
mova  ID  replace  our-ofdae 
busiiieM  and  beshfa  systems, 
is  bigger  tfasn  that  of  many  of 

its  nei^ibors,  induding 

dan,  Lebanon.  Egypt,  the 
Un^  Arab  Emirata  and 
perhapa  even  Saudi  Arabia. 

Adel  Ahnid  agreed.  The 
senior  oflkial  at  bwait- 
besedsystemskittpacarlo- 
terostional 'Hirnkey  Systeau 
said  in  a  telephone  Intenriew 
last  week  diat  he  thinks  Iraq 
w81  be  a  Taige*  market 
TVitnkey  Systenu  is  a  Sun 
Microsystems  toe.  partnec 

Iraq  currently  hss  limited 
technology  resources,  said 


Ahndd.  "hh  fflee  an  caopry 
place;  you  have  to  ftO  it  out.” 
be  said. 

One  measure  of  Iiaqh 
icdmolagical  bobtioo  Is  In¬ 
ternet  use.  Austin.  Ibxaa- 
based  Maerfi  NetSy  stems 
toc,wfaidimessaialiiier- 
net  pofocmaoce,  said  tfaat  al- 
tbou^tbenumbcroftotcr- 
nec  boats  woddwide  esoeed> 
ed  200  ofilian  to  yat; 
tberearenooeinInq.Moce- 
ovet  titere  is  only  one  do¬ 
main  witit  the  Iraq  coontry 
code  of  Jq,  and  kh  registeivd 
in  the  United  Anh  Emirates. 

Much  remains  uncertain. 
One  US.  Department  of 
Commeroe  offidai  pointed 
out  dmt  Iraq's  potential  wiP 
"depend  on  the  nature  of  the 
post-Saddagm  regime,  its 


proved  kas  adept  at  int^rat- 
is^  FTand  "»‘»*t‘***t***Yf 
infrastnictiires.  Moceovec  DO 
one  knows  whether  Saddam 


Hitmein  wfil  act  in  ways  that 
could  make  rebuiVtiiig  the 
nation  gfifficuk,  such  SB 
damping  oil  weOs  or  ttting 
radiological  chemical  or  bio- 
logkalwapans. 

While  the  war  nararaHy 
raise!  gue  stiemr  ri>out  ttie 
MiddleEaatemcouotry'sfo' 
lute,  Iraq  ha  the  population 
and  weahdt  to  finance  an  IT 
rqigrade.  b  Is  about  the  site 
of  CaHforaia  and  ha  a  popu¬ 
lation  of  24  mOlion.  a  ito^ 
rate  of  nearly  60%  and  vast 
oU  reserves. 

There  doa  promise  to  be 
a  Uorited  booaim  [for  IT 
ctwopanies]  in  the  longer 
tena,"  laid  Dan  Miklovic.  an 


Every  business- 
minded  person 
Is  looking  at  Iraq 
attei  the  war 


aoakst  at  Gartner  toe  in 
Siasnford.  Conn.  Iraq  reha 
on  00-name  PC  doo^  and 
eipoct  restrictiona  have 
u  OomtaiyingenieipfiM 
servers  from  U.S  fitins,  he 
said.  Mach  of  bs  software  it 
severai  tviraei  old,  Mftkmc 
added,  and  the  country  is 
Tieavfly  dependent  on  pirat¬ 
ed  software." 

The  potential  financial  im¬ 
pact  on  US.  firms  is  hard  CO 
gwge.  toU  Wyman,  n  ana¬ 
lyst  at  WtohiagBoo-based 
The  Precursor  Gnx9.  which 
advisainstitutionalin- 
vestocB,  said  the  needs  of 
Iraq  aren't  Iflcely  by  tbem- 
sehm  CO  make  a  meaninglttl 
difierence  to  the  bottom 
Sna  of  large  vendors. 

Bui  if  US.-substoed  IT 
pending  in  Iraq  were  so  Ut 
fS  bSUon  inbiaDy,  that  — 
coiqded  wbh  US.  govern¬ 
ment  IT  ipendlag.  whkh 
Ptecuisor  eipectB  10  riae  by 
tS%  DCS  year  from  roughly 
SSO  bOBoa  tat  3003  -  "ia  sub¬ 
stantial  enough  to  mofen"  be 
said.* 


Continued  from  page  I 

Reconstruction 

ated  in  October,  said  17  work¬ 
ing  groups  have  been  estab¬ 
lished.  includii^  an  ecoriom- 
ics  and  infrastructure  group 
focused  on  IT  infrastructure 
and  teleconuDunications  re¬ 
quirements. 

Rubar  Sandl  a  member  of 
the  infrastructure  woridng 
group,  fought  in  the  IQirdish 
revolution  in  1974  and  now 
owns  an  investment  bank  in 
Washington.  Based  on  infor¬ 
mation  provided  by  people  in¬ 
side  Iraq.  Sandi  estimat^  that 
the  cost  of  modernizing  Iraq's 
data  and  voice  networks 
would  be  between  $1  billion 
and  $1J  billion  and  that  it 
would  take  sis  to  eight  years 
to  complete. 

“It  could  definitely  go  much 
fater."  said  Sandl  "But  no¬ 
body  really  knows  exactly  how 
to  assess  the  infrastructure 
without  knowing  what  the 
damage  will  be.  So  we  ana¬ 
lyzed  everything  as  is." 


Ahmed  Al-Hayden,  a  mem¬ 
ber  of  the  infrastructure  work¬ 
ing  group  who  defected  from 
Iraq  in  1980.  works  for  a  global 
telecommunications  firm  in 
the  U5.  According  to  Al-Hay- 
derl  the  community  of  4  mil¬ 
lion  Iraqi  exiles  includes  many 
senior  corporate  executives 
from  techrology  companies 
that  are  eager  to  invest  in  Iraq 
and  assist  in  the  rebuilding. 

"There  is  significant  infra¬ 
structure  available  in  the  mili¬ 
tary  sector.”  said  Al-Haydeii 
adding  that  the  working  group 
is  concentrating  on  bow  to 
leverage  that  infrastructure  to 
"leapfrog  to  a  cost-efiective 
deployment  of  a  folly  ubiqui¬ 
tous  telecommunications  in¬ 
frastructure  throughout  Iraq.” 

Similariy.  the  U5.  Depart¬ 
ment  of  Defense  is  engaged  in 
planning  for  the  IT  ai>d  tele¬ 
communications  requirements 
of  occupation  forces  that  can 
serve  as  a  framework  for  a 
more  permanent  infrastruc¬ 
ture  for  postwar  Iraq. 

A  spokesman  for  the  De¬ 
fense  Information  Systems 


Agency  (DISA).  the  Penta¬ 
gon's  central  network  systems 
provider,  said  the  agency  has 
already  contracted  for  signifi¬ 
cant  conunercial  information 
systems  support. 

Althou^  the  spokesman 
declined  to  name  companies 
that  will  be  involved  in  the 
worit,  be  said  some  of  the  con¬ 
tracts  are  focused  on  provid¬ 


ing  OC3  terrestrial  connec¬ 
tions  throughout  the  region. 
DISA  plans  to  rely  on  com- 
merci^  contractors  "to  the 
maximum  extent  possible" 
and  will  bring  than  in  once 
planning  for  a  postwar  com- 
rounicattons  infrastructure  is 
complete,  the  spokesman  said. 

The  Pentagon  has  a  history 
of  using  commercial  firms  to 
provide  critical  telecommun¬ 
ications  and  IT  support  during 
ai>d  after  military  operations. 

For  example.  Sprint  Corp. 
wa  the  principal  U.5.  contrac¬ 
tor  for  building  the  physical 
infrastructure  for  voice  and 
dau  networks  in  Bosnia  in  the 
late  1990s  after  the  war  there. 
Sprint  is  now  in  informal  talks 
with  military  and  civilian 
agencies  about  building  a 
voice  and  data  infrastructure 
in  Iraq  after  hostilities  sub¬ 
side.  Sprint  spokesman  Steve 
Lunoefotd  said  last  week. 

Natasha  Haubold.  a  spokes¬ 
woman  for  WbridCom  Inc., 
said  WorldCom  ha  an  exten¬ 
sive  list  of  federal  contracts 
and  is  "always  workiiq(  with 


[the  government)  closely  ...  to 
discuss  current  and  future 
needs,”  which  would  tolude 
those  associated  with  U.S.  in¬ 
volvement  in  Iraq. 

Also  certrun  to  be  affected 
by  the  Iraq  war  is  Paris-based 
Alcatel  a  ma)or  r»etworking 
vendor  with  (^>eratiaos  in  130 
countries.  It  wa  des^nated  by 
tbc  United  Nations  to  provide 
basic  telecommunications  ser¬ 
vices  in  Iraq  at  the  end  of  Op¬ 
eration  Desert  Storm  in  1991, 
said  Mark  Bumworth.  an  Alca¬ 
tel  spokesman.  Alcatel  ha 

received  contracts  worth 
S8S  milUon  for  reconstruction 
of  telecommunications  infra- 
souctuie  in  Iraq,  all  approved 
by  the  UN's  Oil  for  Fcto  Com¬ 
mittee.  Burnworth  said. 

Nortel  Networks  Ltd.,  mean¬ 
while,  hasn't  made  any  busi¬ 
ness  plans  for  postwar  Iraq. 

"We’re  much  more  con¬ 
cerned  with  the  outcome  of 
the  war  rhan  whether  there's  a 
profit  for  us  at  this  stage,”  said 
Malcolm  f*.nlltn<,  president  of 
Nortel's  Enterprise  Networks 
division.  I 
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About  Disaster  Recovery 
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Post-9/tl,  many 
busineWes  fed 
better  prepared 

ev  LUCAS  MEARtAN 

EVEftAl  LARGE  COmpa* 
oies  last  week  said 
they’re  now  better  pre¬ 
pared  for  IT  disaster 
recovery  work  that  may  be  re¬ 
quired  as  a  result  of  the  war 
with  Iraq,  thanks  largely  to  in¬ 
vestments  they  made  after  the 
Sept.  U,  2001.  terrorist  attacks. 

For  example.  Loews  Corp..  a 
New  York-based  holding  com- 


Continued  from  page  1 

IT  Security 

Last  week.  IT  executives  at 
companies  contacted  by  Com- 
puterworld  said  they*  were  re¬ 
viewing  their  security  and  dis¬ 
aster  preparedness  plans  even 
as  they  held  out  hope  that  dis¬ 
ruptions  would  be  minimal. 

"If  history  is  any  guide.  I 
don't  expect  any  tremendous 
amount  of  cyberterrorism  be¬ 
ing  focused  on  us  now."  King 
said.  "We  just  want  to  make 
sure  that  we  are  nut  in  any 
way  vulnerable  to  casual  or 
simple  attacks." 

The  biggest  threat  will  come 
from  "politically  motivated, 
low-level  cyberattacks"  aimed 
at  "targets  of  opportunity."  ac- 
cordii^  to  a  report  released  by 
Stamford.  Cona -based  Gart¬ 
ner  Inc.  in  February.  Such  at¬ 
tacks  will  be  designed  to  dis¬ 
rupt  operations  and  vandalize 
Web  sites  with  political  mes¬ 
sages.  the  report  stated. 

Contingency  Plans 

Still,  most  U.S  corporations 
aren't  expecting  a  major  busi¬ 
ness  disruption  from  the  war 
in  Iraq,  though  a  majority  of 
companies  have  global  IT  con¬ 
tingency  plans  in  place,  ac¬ 
cording  to  the  results  of  a  sur¬ 
vey  of  60  companies  released 


pany  that  owns  businesses  in 
industries  such  as  insurance, 
travel  and  oflshore  drilling, 
has  been  building  up  the  end- 
user  access  capabilities  on  its 
corporate  intranet  as  part  of  a 
business  continuity  plan  that 
was  put  in  place  last  year. 

In  part  because  of  ^11, 
Loews  has  deployed  multiple 
remote  access  points  through 
authentication  servers  and  vir¬ 
tual  private  networks,  said  A1 
Alexander,  manager  of  Loews’ 
information  center.  Those 
steps  include  the  installation 
of  a  secure  access  system 


last  week  by  Boston-based 
AMR  Research  Inc. 

One  such  company  is  Betts 
USA  Inc.,  a  Florence.  Ky.- 
based  manul^lurer  of  tubes 
and  injection-molded  compo¬ 
nents  with  operations  in  sev¬ 
eral  countries,  including  In¬ 
donesia.  India  and  China. 

Like  Lehmaa  Betts  ts  going 
over  its  defenses  with  a  fine- 
toothed  comb,  making  sure 
that  its  firewalls  are  property 
configured,  that  virus  defini¬ 
tions  and  software  patches  are 
fully  updated  and  that  proper 
tape  backup  processes  are  in 
place. 

The  company  also  has  plans 
to  get  in  touch  with  its  hard¬ 
ware  distributor  to  make  sure 
spare  equipment  is  available  if 
it's  needed,  said  Dennis  Roell. 
IT  manager  at  Betts.  Physical 
security,  facilities  access  and 
disaster  recovery  processes 
are  being  reviewed  at  ail 
plants,  and  Eletts  is  getting  in 
touch  with  its  Internet  service 
provider  to  review  its  security 
and  contingency  plans  as  well. 
Roell  said. 

"It's  all  of  the  same  stuff  that 
went  into  the  Y2k  prepara¬ 
tion."  he  said.  “We  are  just  re¬ 
affirming  everything  wc  have 
done  to  make  sure  we  have  in¬ 
deed  thought  this  through." 

"In  terms  of  IT  security,  we 
continue  to  focus  on  business 


called  e-Gap.  developed  by 
Whale  Communications  Inc. 
in  Fort  Lee,  N.}. 

“If  there  was  a  reason  our 
building  was  incapacitated  — 
if  there  was  a  chemical  attack, 
where  people  couldn’t  get  to 
work  —  communications  and 
intranet-based  applications 
could  still  function  from  any 
machine  in  the  world,"  Alex¬ 
ander  said. 

Wendall  Fox.  a  CIO  at  a 
global  company  in  the  hospi¬ 
tality  industry,  said  his  busi¬ 
ness  unit  made  sure  that  its 
business  continuity  plans 
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continuity  for  key  systems  and 
heightened  vigilance  for  polit¬ 
ical  hactivism."  said  BUI 
Smathers.  director  of  enter¬ 
prise  security  services  at 
Avnet  Inc.,  a  $9  billion  tech¬ 
nology  distributor  in  Tempe. 
Ariz.,  that  has  customers  in  63 
countries. 

"Miysical  security  is  the 
most  immediate  focus.  Avnet 


were  up  to  date  before  the  war 
began  in  Iraq. 

"We’ve  learned  from  9/U 
that  we  have  to  be  ready,”  said 
Fox,  noting  that  his  company 
lost  a  hotel  when  New  York’s 
World  Trade  Center  was  de¬ 
stroyed.  “I  think  that  we’ve  tak¬ 
en  all  the  precautions  neces¬ 
sary.  [But]  certainly,  one  can't 
predict  what  might  happen." 

Chicago-based  brokerage 
Bright  Trading  LLC  last  year 
expanded  its  redundant  data- 
backup  systems  and  commu¬ 
nications  networks  in  response 
to  the  SVB  attacks.  “We  have 
backups  of  data  in  our  head¬ 
quarters  and  maintain  auxU- 
iary  backups  in  Chicago  and 
New  York,”  said  director  of 
education  Don  Bright.  "We 
could  switch  over  to  any  of 
our  trading  floors  in  the  event 
that  one  went  down.”  I 


has  a  limited  presence  in  the 
Middle  East,  and  our  highest 
priority  would  be  the  safety  of 
our  employees  within  the  mil¬ 
itary  theater  of  operations,” 
Smathers  said.  The  company 
has  formed  an  emergency  re¬ 
sponse  team  that  includes  key 
functions  such  as  FT.  corpo¬ 
rate  communications,  quality 
assurance,  transportation  and 
travel,  he  said. 

“All  have  plans  in  place  to 
keep  business  interruptions  to 
a  minimum  in  the  event  of  a 
crisis.”  Smathers  said,  declin¬ 
ing  to  elaborate. 

In  some  cases,  previous 
preparations  are  paying  off. 

All  of  Royal  Caribbean  Cruis¬ 
es  Ltd.'s  ships  have  been  oper¬ 
ating  at  the  "highest  level  of 
security  alert"  since  the  at¬ 
tacks  of  Sept.  U,  2001.  said 
Tom  Murphy.  CIO  at  the  Mia¬ 
mi-based  company. 

According  to  Murphy.  Royal 
Caribbean  is  the  first  cruise 
company  to  be  ready  with  the 
Advanced  Passei^er  Informa¬ 
tion  System,  an  electronic 
passenger-tracking  system 
mandated  by  the  U.S.  Depart¬ 
ment  of  Homeland  Security 
(QuickLink  35467].  As  a  lesult 
of  such  measures,  ”we  don't 
have  any  specific  concerns 
relative  to  IT  security"  stem¬ 
ming  from  the  Iraq  crisis, 
Murphy  said.  I 
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Postwar  Iraq  May  Be  Big  IT  Market 

(>)untiY  has  Imandal,  educalkma^ 
resources  to  be  MhMe  Eastern  IT  power 


SV  MTHiCK  THWODCAU 

WASHINGTON 

Even  before  the  first  missiles 
were  launched  at  Baghdad 
last  week.  Iraq's  IT  Inf^ 
structure  was  primkive,  a  re* 
suit  of  years  of  war  and  eco¬ 
nomic  saiKtions.  But  if  Iraq 
emerges  from  the  showdown 
with  the  U.S.  as  an  open  soci¬ 
ety.  it  could  become  a  major 
technology  market  for  U.S. 
companies. 

"Every  business-minded 
person  is  looking  at  Iraq  af¬ 
ter  the  war  because  it  is  a 
very  rich  country."  said  Riad 
Sa^.  director  of  Middle 
Eastern  and  North  African 
operatkms  at  enterprise  sys¬ 
tems  vendor  Stratus  Tech- 
nolo^es  Inc.  in  Maynard. 
?4ass.  The  needs  are 
tremendous." 

Stratus  expects  to  focus  on 


a  horuontal  market  instead 
of  vertical  segments  because 
it  sees  ubiquitous  need  for  its 
systems  in  Iraq  after  any  mil¬ 
itary  actions  have  ended. 

Safar  said  he  believes 
Iraq's  market  potential,  as  it 
moves  to  replace  out-of-date 
business  and  health  systems, 
is  bigger  than  that  of  many  of 
its  neighbors,  including  Jor¬ 
dan.  Lebanon,  Egypt,  the 
United  Arab  Emirates  and 
perhaps  even  Saudi  Arabia. 

Add  Ahmid  agreed.  The 
senior  official  at  Kuwait- 
based  systems  integrator  In¬ 
ternational  IXiRikey  Systems 
said  in  a  telephone  interview 
last  week  that  he  thinks  Iraq 
will  be  a  "huge"  market. 
T\imkey  Systems  is  a  Sun 
Microsystems  Inc.  partner. 

Iraq  currently  has  limited 
technology  resources,  said 


AhmicL  "It’s  like  an  empty 
place;  you  have  to  fill  U  out." 
be  said. 

One  measure  of  Iraq’s 
technological  isolation  is  In¬ 
ternet  use.  Austin,  Texas- 
based  Matrix  NetSystems 
loc..  which  measures  Inter¬ 
net  performance,  said  that  al¬ 
though  the  number  of  Inter¬ 
net  hosts  woridwtde  exceed¬ 
ed  200  million  last  year, 
there  are  none  in  Iraq.  More¬ 
over.  there  is  only  one  do¬ 
main  with  the  Iraq  country 
code  of  Jq.  and  it's  registered 
in  the  United  Arab  Emirates. 

Much  remains  uncertain. 
One  U.S.  Department  of 
Commerce  official  pointed 
out  chat  Iraq's  potential  will 
"depend  on  the  nature  of  the 
post-Saddam  regime,  its 
openness  and  tolerance." 
Less-open  regimes  have 
I»oved  less  adept  ai  integrat¬ 
ing  IT  and  communications 
inftastructures.  Moreover.  iu> 
one  knows  whether  SaHttam 


Hussein  will  act  In  ways  that 
could  nuke  rebuilding  du 
nation  difficult,  such  as 
damaging  oU  wells  or  using 
radiologicaL  chemical  or  bio¬ 
logical  weapons. 

While  (he  war  naturally 
raises  questions  about  the 
Middle  Eastern  country’s  fu¬ 
ture.  Iraq  has  the  population 
and  wealth  to  ftnance  an  IT 
upgrade.  It  is  about  the  size 
of  CaUfomia  and  has  a  popu¬ 
lation  of  24  million,  a  literacy 
rate  of  nearly  60%  and  vast 
oil  reserves. 

There  does  promise  to  be 
a  limited  bonanza  [for  IT 
companies]  in  the  longer 
term,”  said  Dan  Mlklovic  an 


Every  business- 
minded  person 
is  looking  at  Iraq 
after  the  war. 

OHWlor  nl 
Middle  Ejt>tprn  dtid 
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analyst  at  Gartner  loc  in 
Stai^ord.  Conn.  Iraq  relies 
on  Qo-oame  PC  clones,  and 
export  restrictions  have  kept 
it  from  buying  enterprise 
servers  from  U.S.  firms,  be 
said.  Much  of  its  software  is 
several  releases  old,  Miklovic 
added,  and  the  country  is 
"heavily  dependent  on  pirat¬ 
ed  software." 

The  potential  ftnancial  im¬ 
pact  on  U.S.  Turns  is  hard  to 
gauge.  Bill  Wyman,  an  aru- 
lyst  at  Washington-based 
Tbe  Prectirsor  Group,  which 
advises  institutioiul  in¬ 
vestors.  said  the  needs  of 
Iraq  aren't  likely  by  them- 
seh^  to  make  a  meaningful 
difference  to  tbe  bonom 
lines  of  large  vendors. 

But  if  U3.-subsidized  IT 
spending  in  Iraq  were  to  hit 
&  billion  initially,  that  — 
coupled  with  U.S.  govetn- 
nient  IT  spending,  which 
Precursor  expects  to  rise  by 
15%  next  year  from  roughly 
S50  bilUon  in  2003  - -is  sub¬ 
stantial  enough  to  matter."  he 
said.  I 
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Reconstruction 

ated  in  October,  said  17  work¬ 
ing  groups  have  been  estab¬ 
lished,  including  an  econom¬ 
ics  and  infrastructure  group 
focused  on  IT  infrastructure 
and  telecommunications  re¬ 
quirements. 

Rubar  Sandi.  a  member  of 
the  infrastructure  working 
group,  fought  in  the  Kurdish 
revolution  in  1974  and  now 
owns  an  investment  bank  in 
Washington.  Based  on  infor¬ 
mation  provided  by  people  in¬ 
side  Iraq.  Sandi  estimated  that 
the  cost  of  modernizing  Iraq's 
data  and  voice  oetworics 
would  be  between  $1  billion 
and  SLS  billion  and  that  it 
would  take  six  to  eight  years 
to  complete. 

"It  could  definitely  go  much 
faster.”  said  Sandi  “But  no¬ 
body  really  knows  exactly  how 
to  assess  tbe  infrastructure 
without  knowing  what  the 
damage  wUi  be.  So  we  ana¬ 
lyzed  everything  as  is." 


Ahmed  Al-Hayderi,  a  mem¬ 
ber  of  the  infrastructure  work¬ 
ing  group  who  defected  from 
Iraq  in  1980,  works  for  a  global 
telecommunications  firm  in 
the  U.S.  According  to  Al-Hay¬ 
deri,  the  community  of  4  mil¬ 
lion  Iraqi  exiles  includes  many 
senior  corporate  executives 
from  technolt^  companies 
that  are  eager  to  invest  in  Iraq 
and  assist  in  the  rebuilding. 

“There  is  significant  infra¬ 
structure  available  in  the  mili¬ 
tary  sector."  said  Al-Hayderi. 
adding  that  the  working  group 
is  concentrating  on  how  to 
leverage  that  infrastructure  to 
“leapfrog  to  a  cost-effective 
deployment  of  a  folly  ubiqui¬ 
tous  telecommunications  in¬ 
frastructure  throughout  Iraq." 

Similarly,  the  U.S.  Depart¬ 
ment  of  Defense  is  engaged  in 
planning  for  the  IT  and  tele¬ 
communications  requirements 
of  occupation  forces  that  can 
serve  as  a  framework  for  a 
more  permanent  infrastruc¬ 
ture  for  postwar  Iraq. 

A  spokesman  for  the  De¬ 
fense  InformatioQ  Systems 


Agency  (DISA),  the  Penta¬ 
gon's  central  network  systems 
provider,  said  the  agency  has 
already  contracted  for  signifi¬ 
cant  commercial  information 
systems  support. 

Although  the  spokesman 
declined  to  name  companies 
that  will  be  involved  in  the 
work,  he  said  some  of  the  con¬ 
tracts  are  focused  on  provid¬ 


ing  OC3  terrestrial  connec¬ 
tions  throu^out  the  region. 
DISA  plaits  to  rely  on  com¬ 
mercial  contractors  “to  tbe 
maximum  extent  possible" 
and  will  bring  them  in  once 
planning  for  a  postwar  com¬ 
munications  infrastructure  is 
complete,  the  spokesman  said. 

The  Pentagon  has  a  history 
of  using  commercial  firms  to 
provide  critical  telecommun¬ 
ications  and  IT  support  during 
and  after  military  operations. 

For  example,  Sprint  Corp. 
was  the  principal  U.S.  contrac¬ 
tor  for  building  the  physical 
infrastructure  for  voice  and 
data  networks  in  Bosnia  in  the 
late  1990s  after  the  war  there. 
Sprint  is  now  in  informal  talks 
with  military  and  civilian 
agencies  about  building  a 
voice  and  data  infnstructure 
in  Iraq  after  hostilities  sub¬ 
side,  Sprint  spokesman  Steve 
Lunceford  said  last  week. 

Natasha  Haubold.  a  spokes¬ 
woman  for  WoridCom  Inc., 
said  WorldCom  has  an  exten¬ 
sive  list  of  federal  contracts 
and  is  "always  working  with 


[the  government]  closely  - .  -  to 
discuss  current  and  future 
needs."  which  would  include 
those  associated  with  U.S.  in¬ 
volvement  in  Iraq. 

Also  certain  to  be  affected 
by  the  Iraq  war  is  Paris-based 
Alcatel,  a  major  networking 
vendor  with  operations  in  130 
countries.  It  was  designated  by 
the  United  Nations  to  prov’ido 
basic  telecommunications  ser¬ 
vices  in  Iraq  at  the  end  of  Op¬ 
eration  Desert  Storm  in  1991, 
said  Mark  Bumwonh.  an  Alca¬ 
tel  spokesman.  Alcatel  has 
since  recehrd  contracts  worth 
S85  million  for  reconstruction 
of  telecommunications  infra¬ 
structure  in  Iraq,  all  approved 
by  the  UN's  Oil  for  Foc^  Com¬ 
mittee.  Bumwonh  said. 

Nonel  Networks  Ltd.,  mean¬ 
while.  hasn't  made  any  busi¬ 
ness  plans  for  postwar  Iraq. 

"We're  mtich  more  con¬ 
cerned  with  the  outcome  of 
the  war  than  whether  there's  a 
pfofti  for  us  at  this  sf^e."  said 
Malcolm  Collins,  president  of 
Nortel's  Enterprise  Ncrworlu 
division.  I 
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CIOs  Don’t  Expect  War  to  Have 
Major  Impact  on  Global  IT  Projects 


Travel  could  be  a  problem,  but  Web  and 
videoconferencing  seen  as  alternatives 


ev  THOMAS  HOFFMAN 

Although  CIOs  in* 
terviwed  last  week 
said  they're  deeply 
concerned  about  the 
potential  business  impact  of 
the  war  with  Iraq,  few  foresee 
any  significant  effect  on  inter¬ 
national  IT  projects  that  are 
under  way  or  in  the  pipeline. 

Bui  some  IT  executives 
warned  that  that  could  chartge 
if  the  war  causes  travel  prob¬ 
lems  for  their  companies'  em¬ 
ployees  or  customers. 

For  example.  Cardinal 
Health  Inc.  in  Dublin.  Ohio,  is 
working  on  multiple  enter¬ 
prise  resource  planning  (ERP) 
pmjects  "that  may  experience 
tras'el-related  impacts  to  their 
schedules."  said  Richard  Gius, 
the  medical  equipment  suppli¬ 
er's  senior  vice  president  of  IT 
The  protects  roost  at  risk  arc 
those  that  require  consultants 
or  other  external  workers  to 
(ra\  el  from  country  to  enun- 
tr>-,  Gius  said.  IT  projects  con¬ 
tained  within  individual  coun¬ 
tries  on  any  of  the  five  conti¬ 
nents  where  Cardinal  has  op¬ 
erations  should  see  little  im¬ 
pact  from  the  war.  he  added. 

Mark  Hcdley,  senior  vice 
president  and  chief  technolo¬ 
gy  officer  at  Wyndham  Inter¬ 
national  Inc.,  said  the  Dallas- 
based  operator  of  hotels  and 
vacation  resorts  doe.sn'i  have 
any  major  IT  projects  in  the 
works  in  the  U3.  or  imema- 
tionally  that  are  likely  to  be 
adversely  affected  by  the  war. 

However.  Hcdley  added  that 
if  the  war  continued  for  more 
than  a  week  or  two  and  ad¬ 
versely  affected  the  travel  in¬ 
dustry.  \V>  ndham  w<»u!d  have 
tti  make  adiuMments  to  shore 
up  its  business.  "I'm  most  con¬ 
cerned  with  domestic  air  trav¬ 
el  and  lack  of  passenger  activi¬ 
ty."  he  said.  "Airlines  are  fct^l- 
erv  to  t»ur  hotel  markets." 
MasterCard  International 


Inc.  doesn't  expect  the  Iraq 
conflict  to  affect  any  of  its  in¬ 
ternational  projects,  including 
an  ongoing  conversion  of  its 
European  s>'siems  to  its  global 
IT  architecture,  said  lerry 
McElhation.  president  of  glob¬ 
al  technology  and  operations 
at  the  credit  card  company’s 
data  center  in  O'Failon.  Mo. 

If  International  travel  dis¬ 
ruptions  do  arise.  Purchase. 
N.Y.-based  MasterCard  plans 
to  expand  its  use  of  telecon¬ 
ferencing.  McElhatton  said. 
Teleconferencing  technology 
"is  not  always  a  suitable  alter¬ 


native"  to  travel,  but  it  can  fa¬ 
cilitate  communications  when 
necessary,  he  noted. 

Three  of  MasterCard's  IT 
staffers  have  been  called  up  to 
active  military  duty,  and  a  few 
more  could  follow.  But  McEl- 
hacton  said  he  hasn't  had  to  re¬ 
place  anyone  with  interim 
contractors,  nor  has  he  had  to 
create  internal  work-arounds 
to  support  MasterCard's  oper¬ 
ations. 

There  are  signs  that  the  un¬ 
certainties  preceding  the  war 
affected  IT  spending.  For  ex¬ 
ample.  Oracle  Corp.  last  week 
reported  a  4S  decline  in  sales 
of  new  software  licenses  for 
its  third  quarter,  which  ended 


Feb.  28.  lefT  Henley.  Oracle’s 
chief  financial  officer,  said  the 
looming  war  led  corporate 
users  to  hold  off  on  purchases 
last  month  after  business  was 
relatively  strong  in  December 
and  [anuary. 

Unisys  Corp.  has  already 
completed  the  bulk  of  a  global 
rollout  of  Oracle's  ERP  appli¬ 
cations  and  Siebei  Systems 
Inc.'s  ctistomer  relationship 
management  software,  with 
the  exception  of  putting  some 
final  touches  on  an  ERP  im¬ 
plementation  in  Latin  Ameri¬ 
ca.  “So  a  great  deal  of  our 
heavy  lifting  is  behind  us." 
said  John  Carrow.  CIO  at  the 
Blue  Bell.  Pa.-based  IT  vendor. 

Like  many  other  companies, 
Unisys  has  cut  back  on  corpo¬ 
rate  travel  because  of  the  weak 
economy  and  is  now  "very 
adept"  at  conducting  ir-relat- 
ed  business  via  teleconfer¬ 
ences.  videoconferences  and 
the  Web.  Carrow  said.  I 


War  May  Prompt  Rims 
To  Delay  Offdiore  Work 


The  Iraq  war's  impact  on  off¬ 
shore  outsourcing  could  be 
similar  to  what  happened 
last  year  during  the  crisis  be¬ 
tween  Pakistan  and  India, 
when  for  several 
months  there  was 
a  decline  in  off¬ 
shore  contracts 
and  a  renewed  fo¬ 
cus  on  contin¬ 
gency  planning. 

Once  the  threat 
declined,  out¬ 
sourcing  to  India 
largely  returned  to  normal 
Bui  if  the  Iraq  war  is  pro¬ 
tracted  and  U.S.  interests, 
such  as  India's  outsourcing 
centers,  are  attacked  by  ter¬ 
rorists,  then  US.  businesses 
will  likely  pull  operations 
back  in-house,  said  Deba- 
shish  Sinha,  an  analyst  at 
Gartner  Inc.  'There  is  an  in¬ 
finite  number  of  variables 
that  could  affect  this."  Sinha 
said. 


There’s 

a  reluctance  to 
travel,  even  in 
theU.S. 
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Meta  Group  Inc  last 
month  predicted  that  off¬ 
shore  outsourcing  would 
grow  20%  annually,  and 
Dean  Davison,  an  analyst  at 
the  Stamford.  Conn.-bued 
firm,  said  he’s  not  expecting 
that  growth  rate 
to  be  "signifi¬ 
cantly  hindered" 
by  the  war. 

But  Davison, 
who  canceled  a 
trip  to  India  he 
was  planning  to 
take  this  week, 
said  his  foreca.st 
could  change  If  the  war 
prompts  global  unrest.  “If 
this  expands . . .  then  all  bets 
are  off."  he  said. 

The  war  is  already  having 
a  short-term  impact  on  out¬ 
sourcing.  primarily  because 
of  travel  concerns. 

For  instance.  Telvista  Co., 
an  Austin,  Texas,  firm  that 
provides  offshore  services  in 
Mexico,  decided  to  resched¬ 
ule  a  conference  planned  this 


week  in  San  Diego  after  nu¬ 
merous  clients  canceled  trav¬ 
el  plans  because  of  the  war. 
'There's  a  reluctance  to  trav¬ 
el,  even  in  the  U.S.."  said 
Suzy  Weaver.  Tehista’s  vice 
president  of  operations. 

But  analysts  expect  busi¬ 
nesses  to  continue  with  their 
longer-range  off^ore  plan¬ 
ning.  if  warily. 

Baltimore-based  invest¬ 
ment  management  firm  T. 
Rowe  Price  Group  Inc., 
which  manages  more  than 
SI40  billion  in  assets,  does  a 
significant  amouni  of  its 
new-appUcatioD  develop¬ 
ment.  platform  rehosting  and 
application  management 
work  via  an  India-based  out¬ 
sourcing  firm.  The  war  so  far 
has  not  affected  its  overseas 
woik.  said  Ram  Mouii,  the 
company's  vice  president  of 
technology  planning  and  de¬ 
velopment 

“The  challenges  during  a 
war-type  emergency  are  the 
issues  related  to  travel  from 
and  to  India  by  the  on-site 
resources."  Mouii  said.  But 
future  projects  that  are  un¬ 
der  consideration,  such  as 
application  hosting  and  the 
setting  up  of  a  disaster  recov¬ 


ery  site  in  India,  may  be  re¬ 
considered.  “We  are  re-eval- 
uating  these  projects,  as  we 
are  worried  about  the  war 
and  the  long-term  effect  on 
system  and  application  ac¬ 
cess,"  Mouii  said. 

Marty  Clague,  president 
and  CEO  of  Covansys  Corp.. 
a  Farmington  Hills.  Midi.- 
based  company  that  provides 
offshore  services  in  India, 
said  be  expects  some  trip 
cancellations  and  deferr^  in 
offshore  work.  But  being 
ready  for  problems  is  part  of 
offshore  planning,  be  said. 

Covansys  has  server  farms 
in  the  U5.  connected  to  cen¬ 
ters  in  India  that  routinely 
back  up  data  and  could  be 
used  to  transfer  projects.  'The 
firm  also  has  employees  in 
India  who  have  visas  and  are 
ready  to  travel  to  the  U.S.  in 
the  event  of  an  emergency, 
said  Cl^ue.  I 


Reporter  Jaikuntar  Vijayan 
contributed  to  this  report. 


FINEPMCr 

ComparMs  should  make  sure  they're 
protedfid  in  fher  outsourcing  contracts. 

AOuldUnkaTZO 


There's 

a  reluctance  to 
travel,  even  in 
the  U.S. 
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CIOs  Don’t  Expect  War  to  Have 
M^r  Impact  on  Global  IT  Projects 


Tiavel  couM  be  a  prafaieni,  but  Wfeb  and 
videoconfereiicing  seen  as  afteniatives 


BT  THOMAS  HOWVMAM 

Although  CIOs  Id- 
terviewed  last  week 
said  they're  deeply 
coocemed  atxnit  the 
potential  business  impact  of 
the  war  with  Iraq,  few  foresee 
any  significant  effect  on  inter¬ 
national  IT  projects  that  are 
under  way  or  in  the  pipeline.  ' 
But  some  IT  executives  i 
warned  that  that  could  change 
if  the  war  causes  travel  prob¬ 
lems  for  their  companies'  em¬ 
ployees  or  customers. 

Bor  example.  Cardinal 
Health  Inc  in  Dublin,  Ohio,  b 
working  on  multiple  enter¬ 
prise  resource  planning  (ERP) 
projects  That  may  experience 
travel-related  impacts  to  their 
schedules,”  said  Richard  Gius, 
the  medical  equipment  suppli¬ 
er's  senior  vice  president  of  IT. 

The  projects  most  at  risk  are 
those  that  require  consultants 
or  other  external  workers  to 
travel  from  country  to  coun¬ 
try.  GKis  said.  IT  projects  con¬ 
tained  within  individual  coun¬ 
tries  on  any  of  the  five  conti¬ 
nents  where  Cardinal  has  op- 
erations  should  see  Ihtle  im¬ 
pact  from  the  war,  be  added. 

Mark  Hedley,  senior  vice 
president  and  chief  technolo¬ 
gy  officer  at  Wyndham  Inter¬ 
national  Inc.,  said  the  Dallas- 
based  operator  of  boteb  and 
vacation  resorts  doesn't  have 
any  major  IT  projects  in  the 
works  in  the  U.S.  or  interna¬ 
tionally  (hat  are  likely  to  be 
adversely  affected  by  the  war. 

However.  Hedley  added  that 
if  the  war  continued  for  more 
than  a  week  or  two  and  ad¬ 
versely  affected  the  travel  in¬ 
dustry.  Wyndham  would  have 
to  make  adiustroents  to  shore 
up  its  business.  ‘Fm  most  con¬ 
cerned  with  domestic  air  trav¬ 
el  and  lack  of  passenger  activi¬ 
ty.”  be  said.  ”Airlines  are  feed¬ 
ers  to  our  hotel  markets.” 
MasterCard  International 


Inc.  doesn't  expect  the  Iraq 
conflict  to  affect  any  of  its  in- 
teniatioDal  projects,  including 
an  ongoing  conversion  of  its 
European  systems  to  its  global 
IT  architecture,  said  Jerry 
McElbatton,  president  of  glob¬ 
al  technology  and  citations 
at  the  credit  card  company's 
data  center  in  OTallon,  Ma 
If  international  travel  db- 
ruptions  do  arise.  Purchase, 
N.Y.'based  MasterCard  plans 
to  expand  its  use  of  telecon¬ 
ferencing.  McElbatton  said. 
Teleconferencing  technology 
”b  not  always  a  suitable  alter¬ 


native”  to  travel,  but  it  can  fa¬ 
cilitate  commutucations  when 
necessary,  be  noted. 

Three  of  MasterCard’s  FT 
staffers  have  been  called  up  to 
active  military  duty,  and  a  few 
more  could  follow.  But  McEl- 
hattoo  said  be  hasn't  bad  to  re¬ 
place  anyone  with  interim 
contractors,  nor  has  be  had  to 
create  internal  work-arounds 
to  support  MasterCard's  oper¬ 
ations. 

There  are  signs  that  the  un¬ 
certainties  preceding  the  war 
affected  IT  spending.  For  ex¬ 
ample.  Oracle  Corp.  last  week 
reported  a  4%  decline  in  sales 
of  new  software  licenses  for 
its  third  quarter,  which  ended 


Vl^  May  Prompt  Rrms 
to  May  Offdiore  Wbrk 


The  Inq  wif^  impact  00  off* 
ahoR  oumouteaog  could  be 
simflar  to  what  happened 


tweea  Mdatan  and  bMfia. 
whoB  for  several 
months  focre  waa 
adeAieia  off¬ 
shore  coDCncti 
and  a  icaewed  fo¬ 
cus  on  coodn- 
gency  pfonnlo^ 

Once  the  tteeat 
dedined,  ooi- 
lovciiig  to  India 
largely  ictumed  to  oonasL 
But  If  the  Iraq  WIT  is  pro¬ 
tracted  and  US.  interests, 
such  M  India's  ootaonicing 
centers,  are  atta^ed  by  ter- 
rorlsts.  then  US.  bosinesaes 
iriD  Ifoely  pull  operstiaBS 
badtift’tMMse^s^Deba' 
shtsh  Sinha.  an  analyst  at 
Gartner  Inc 'There  b  an  in- 
fmlte  number  of  variables 
that  could  affect  thb,”  Sinha 
sdd. 


F^b.  28.  Jeff  Henley.  Oracle's 
chief  finandal  officer,  said  the 
looming  war  led  corporate 
users  to  bold  off  on  purchases 
last  month  after  business  was 
relatively  strong  In  December 
and  January. 

Unisys  Corp.  has  already 
completed  the  bulk  of  a  global 
rollout  of  Oracle's  ERP  appli¬ 
cations  and  Siebei  Systems 
Inc.'8  customer  relationship 
management  software,  with 
the  exception  of  putting  some 
final  toudres  on  an  ERP  im¬ 
plementation  in  Latin  Ameri¬ 
ca.  ”$o  a  great  deal  of  our 
heavy  lifting  b  behind  us,” 
said  John  Carrow,  CIO  at  the 
Blue  BeU.  Pa.-based  IT  vendor. 

Like  many  other  companies, 
Unisys  has  cut  back  on  corpo¬ 
rate  travel  because  of  the  weak 
economy  and  b  now  ”very 
adept”  at  conducting  rr-relat- 
ed  business  via  teleconfer¬ 
ences.  videoconferences  and 
the  Web.  Carrow  said.  I 


that  growth  rate 
tobe*'slgiilf}- 
cm>tly  hindered” 
bythewac 
ButDavboo, 
wbocanededa  | 
trip  to  India  be 
waaph&ningtD 
take  dds  week, 
said  bus  forecast 
codd  change  if  Che  war 
prompts  ^obal  unresL 'V 
chb  expands ...  then  aU  bets 
are  off*  he  said. 

The  war  is  already  having 
a  sbart-tenn  impact  on  ooi- 
soQrdng.  primal  because 
of  travel  coocerna. 

Fur  instance.  Telvista  Co, 
an  Austin.  Texas,  firm  Uut 
pnrvides  o&hore  services  in 
Mexico,  dedded  to  resched¬ 
ule  a  conference  planned  tfab 


Ro«e  Price  (kai9  Inc, 
wfald  masksges  BMR  than 
SMO  bOBoo  in  aaaaca,  does  a 
significant  amount  of  its 
new-appBcarion  develop¬ 
ment.  pbcfieiD  rebosting  and 
appBcadoo  matt^etnent 
work  via  an  Indiarbaacd  om- 
souremg  firm.  The  war  so  for 
has  not  affected  its  oveiaeas 
woefc.  said  Ram  Mooli,  the 
eotnpaiqr^  vice  president  of 
rechnol^  planning  and  de- 
yffopment 

The  chslhsiget  during  a 
war-type  esoeigency  are  the 
baucs  related  to  uawcl  from 
and  to  India  by  the  on-sHe 
resources.*  Mooli  said.  But 
future  projects  that  are  un¬ 
der  conrideratioii.  such  as 
appUcatloo  boating  and  the 
setting  up  of  a  disaater  cecov-  I 


in  the  US.  connected  >o  cen- 
leis  in  India  that  ramhidy 
back  up  data  and  ooold  be 
used  to  tcieafer  peojects.  The 
firm  alao  has  emirioyees  in 
hidia  who  have  vkna  and  are 
ready  to  travd  to  the  U,S  in 
foe  event  of  an  emergency 
saldQagae.1 

SMporttrfaSsumarViicyan 
ooROfouted  ft)  tMt  nqport 


If  you're  busy  monitoring  your  servers, 
who's  watching  your  business? 


ItM  MW  HP  PieUiMil  Dt740 
(•wojf  wMi  tMt'plug 
KAN)  WMiory. 

■  Ultrodense  4u  modular  chouis 
wirti  up  to  eight  Intet*  Xeon^''  MP 
1.5  Gl^  or  2.0  GHz  proceuon 

•  Up  to  64G6  oddressobie  memory 

■  Groundbreakittg  F6  chipiet 

•  6-64  brl/KX)  MHz  PQ-X  slots 

•  Intogroted  Lights-Out  Stortdard 
(iLO)  (or  Remote  Server  Mgmt. 


Ifw  MW  HP  Pwlicim  Di7M 
62  tMoy  wMi  ho4*plMg 


■  Up  to  eight  Intel*  Xeon"*  MP 
1.5  GHz  or  2.0  GHz  processors 

■  Up  to  64Gft  addressable  memory 

•  Grouftdbreoking  F6  chipset 

•  10-64  bH/100  MHz  PO-X. 

1-64  bit  33  MHz  slots 

■  Remote  Insight  Lights-Out  Edition  N 
(optionol)  lor  Remote  Server  Mgmt. 


WtMt  choMertges  do  you  (oce  today?  Deaeosing  budgets'?  The 
lurking  possibilily  of  downtirrte?  R's  hard  ertough  to  locus  on 
moving  your  business  lorword  when  you're  constonlly  lookirtg 
over  your  shoulder  to  tee  if  everything  is  up  ond  running . 

Besides,  that's  tlie  job  of  the  new  HP  ProLiont  01700  series 
running  Intel*  Xeort^  MP  processors.  An  odoptiw  inirasiruclure 
begins  wHh  these  tP  ProLiant  servers  which  come  equipped 
with  tools  that  predict,  setl-diognose  ond  Fix  mony  (ouh 
conditions.  And  now  with  hot-plug  RAID  memory  exdusivefy 
From  H^  you  con  odd  or  reploce  OIMMs  witliout  turning 
your  systems  off.  Both  work  with  the  HP  ProLiant  Essenti^ 
Foundation  Pock  ieoturing  InsigFit  AAonoger  7softwore  which 
monitors  and  controlt  your  irtFrostructore  (or  moximum  uptime. 

A(  iFie  end  of  the  day,  you'll  hove  more  control  over  your 
infrastructure,  Ftelp  ovoid  unplonned  downtime  ond  reduce 
overoll  moinlertonce  costs.  Not  to  mention  Freeing  yourself 
up  lor  more  importont  things 

To  toom  how  HP  ProUon*  eorvort  con  bo  • 
port  ol  mojdmBDng  )rato  company^  uptimo, 
downtoad  ONPb  oncmive  brief  on  hi^  owolafaSly 
ot  www.hp.com/9e/pr0lMitltS  or  coll 
l-tOO-StS-MTS,  option  5,  ond  mesNion  cede  YPH. 


O  2003  Hawtw-Paefcard  Cempony.  kwl  ond  Itw  Mel  Xaon  logo  ora  Irodamarks  or  raglMorsd  trodwnerlu  el  tnOt  Coiporolion  or  its  subwdiooer  in  Ihe  llMtid  SloiM  ond  oiwr  cewwies 
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AT  DEADLINE 


EDS  Replaces  Its 
Top  Executive . . . 

Ettctronic  D«ta  Systems  Cofp. 
said  that  [Nek  Brown  has 
steiipad  down  as  chainnan  and 
CCO  of  the  embattled  IT  siervices 
vendor.  Plano.  Texas'tiased  EDS 
has  replaced  Brown  with  Michael 
H.  Jordan,  who  retired  as  CBS 
Corp.'s  CEO  in  1998.  EDS  also 
said  that  Jeffrey  Hellsr.  who  left 
the  company  in  2000  after  34 
years  there,  has  returrted  to 
serve  as  Ks  president  and  chief 
operating  officer. 


...  And  Loses  User 
Certegy  to  IBM 

Certegy  btc.  Ml  Alpharetta,  Ga.. 
said  II  severed  a  U.S.  IT  services 
contract  with  EDS  aj>d  signed  a 
10*yaar  deal  with  IBM.  The  new 
pact  is  vakied  at  S150  mMion 
and  adds  to  agreements  under 
which  IBM  does  FT  services  work 
for  Certmy  in  the  UJC  and  Aus¬ 
tralia.  Certegy.  which  provides 
credit  and  debit  trocessing  ser¬ 
vices.  said  it  wil  take  a  charge  of 
up  to  $10  mBRon  to  cover  early- 
exM  payments  to  EOS. 


Palm  Reports  Q3 
Loss,  Sales  Drop 

Pabn  hic.  reported  a  ST72  million 
loss  for  its  third  quarter,  which 
ended  Feb.  28,  as  revenue  Ml 
29%  from  the  year-earlier  level 
to  $209  million.  Milpitas.  Cakf.- 
based  Palm  said  fourth-quarter 
revenue  wM  Hkeiy  be  down  be¬ 
tween  15%  and  20%  year  over 
year,  ft  added  that  It’s  dalaying  a 
planned  spin-off  of  its  Palm- 
Source  tnc.  operatiirg  system  unit 
from  midyear  to  late  summer. 


Survey  Cites  IT 
Burnout  Problems 

Meta  Group  bic.  this  week  plans 
to  release  the  results  of  a  survey 
in  which  71%  of  the  668  tT  man¬ 
agers  H  questioned  said  emptoy- 
ee  burnout  is  a  serious  issue  at 
thek  companies.  (See  Frankly 
SpeMiing,  page  58.) 


MARK  HALL  ■  ON  THE  MARK 

Web  Services  Remain 
Behind  Firewall . . . 

. . .  and  probably  will  stay  there  for  the  next  year  or  longer.  Or  so  say 
vendors  and  developers  who  work  in  the  field.  Everything  from  Immature 
standards  to  security  concerns  seems  to  be  holding  Web  services  in 
check,  they  say.  “It’s  an  immature  field,  and  the  standards  are  still 
evolving.”  observes  James  Franklin,  director  at  Extreme  Logic  Inc.  in 
Atlanta.  He  says  only  10%  to  20%  of  the  clients  of  his  200-person  IT 
consultancy  are  dipping  their  toes  into  Web  services,  and  they’re 
doing  so  only  for  internal  integration 
work.  "Most  of  our  customers  are  not 
ready  for  depending  on  outside  Web  ser¬ 


vices.”  he  says,  noting  that  users  are  un¬ 
nerved  by  the  fact  that  new  standards  'Vill  al¬ 
ways  crop  up.”  such  a.s  the  recent  an¬ 
nouncement  of  one  for  Web  services 
management.  Keith  Franklin  (no  known 
relationship  to  lames), 
president  and  chief  soft¬ 
ware  architect  of  Empow¬ 
ered  Software  Solutions 
Inc.,  a  .Net  consultancy  in 
Burr  Ridge,  IIL,  claims  that 
while  effective  security  is 
po.«isible  with  Web  ser¬ 
vices.  people  remain  skep¬ 
tical  "because  it's  not  part 
of  the  specification.” 

•  Mercury  Interactive 
Corp.  ha-H  leapt  into  the 
Web  services  tools  busi¬ 
ness.  But  according  to  Vta- 
ccni  Rcrolle.  vice  presi¬ 
dent  of  business  develop¬ 
ment,  the  Sunnyvale, 

Calif.-based  software  com¬ 
pany  has  seen  virtually  all 
the  demand  focused  on 
testing  tools,  which  leads 


Ai  ,.i.  ;  .  .  •  ; '  will  ship 

rt5  upqfaoefl  Xsijfve  Un-r 

bASeU  III  scf  vef’jdi  Ijli- 
April  Thf  ney»  machuves  tn 
etude  sinqle  or  dual  1.33 
GHi  Power  PC  processor-,, 
up  to  720GB  oi  mass  ■.torarie 
and  a  iO-ciitn!  M.ir.  OS  X  ii 
cense  lor  52  799 

Lmui  lover!,  wUo  are  :;parii 
halers  Will  apprecLitr- >  . 

nouncement  this  wt-p«  that 
rt's  adding  SpamBijunct-r  to 
tis  NetMai  Prolessinnal 
Suite,  it  pteconftgured  Linux 
server  environment.  The 
add-on  costs  S100 


him  to  conclude  users  aren’t  deploying 
these  new  applications  outside  their 
companies  bcc.iusc  that  would  require  a 
dilTcrcni  set  of  production  and  manage¬ 
ment  tcrols.  Part  of  the  problem  resides  in 
the  issue  of  responsibility.  For  example, 
service-level  agreements  (SLA)  are  well 
defined  and  managed  among  current 

businesvpartner  applica¬ 
tions.  “Bul.“  RcroUc  says, 
“SLAs  are  still  nascent  on  the 
Web  services  side."  e  If 
you’re  ready  to  experi¬ 
ment  with  Web  services, 
but  all  you  hear  from 
management  is  "IKN!  R(Nl 
HOB"  Franklin  (lames,  not 
Keith)  argues  that  Net  is 
the  hands-down  w  inner 
on  cost  to  deploy,  primari¬ 
ly  because  of  Microsoft 
Corp.’s  stronger  develop¬ 
ment  tools. -Still,  he  ac¬ 
knowledges  that  if  you  al¬ 
ready  have  a  Java  2  Enter¬ 
prise  Edition  (J2EE)  envi¬ 
ronment,  switching  to 
.Net  is  unlikely  to  deliver 
mc.'iningful  returas  on  in- 
ve.stment.  If  you  want  to 


jump  into  the  .Net  vs.  I2EE  Web  services 
debate,  visit  www.webservccesorchi(ecf. 
com/  and  join  the  fray.  ■  That  fray  going  on 
in  Iraq  has  affected  the  Franklin  boys  dif¬ 
ferently.  One  (fames)  attributes  the  hesi¬ 
tation  about  corporate  IT  buying  deci¬ 
sions  to  the  lingering  uncertainty  of  war. 
However,  he  says,  “if  the  war  is  quick, 
there  could  be  a  bit  of  a  bounce  in  busi¬ 
ness.”  The  other  (Keith)  says  the  war 
w'ith  Iraq  hasn't  changed  his  software 
consulting  business  at  all.  “I  haven’t 
heard  a  peep  from  one  our  clients.”  he 
says.  "They’re  not  even  asking  for  extra 
security  screening  of  our  on-site  staff.” 

•  However  the  war  affeas  IT  business, 
one  thing  you  can  bet  on  is  that  Linux  win 
emerge  victorkxus.  Research  from  Evans 
Data  Corp.  shows  that  52%  of  developers 
now  target  the  opcn-sourcc  operating 
system  to  run  their  software.  And  Linux 
will  get  another  boost  next  week  when 
Austin,  Texas-based  Metrowerks.  a  whol¬ 
ly  owned  subsidiary  of  Motorola  Inc.,  un¬ 
veils  its  Smart  Gateway  8S7  hardware/ 
software  development  combo  for  large 
network  sy.stcms  such  as  switches  and 
routers.  The  new  development  tools  will 
put  Linux  inside  systems  that  previously 
depended  on  proprietary  operating  sys¬ 
tems.  Reason?  Operating  system  licens¬ 
ing  fees  are  too  steep.  The  BSTs  evaluation 
and  developer  kits  are  avalaUe  now.  Expect 
to  sec  a  voice  module  for  voice  over  IP 
developers  by  June.  ■  No  foolin',  computer 
games  will  mate  3-D  displays  ubiquitous,  ac¬ 
cording  to  Joel  Pollack,  vice  president  for 
business  development  at  Sharp  Micro¬ 
electronics  of  the  Americas  in  L^mas. 
Wash.  He  claims  that  the  phenomenon 
will  begin  with  3-0  games  on  cell  phones 
in  Japan  this  year  and  help  drive  down 
costs  to  the  point  that,  within  the  next 
couple  of  years.  IT  managers  at  medical 
and  K&D  sites  will  need  to  bone  up  on 
3-D  displays.  And  you  thought  flat  panels 
would  be  the  end  of  it.  I 


Unisys  Updates  Server  Sentinel  Software 


BV  TOM  KRAZIT 

Unisys  Corp.  tod.-«y  is  releas¬ 
ing  the  newest  version  of  its 
server  management  software, 
along  with  new  software  that 
manages  applications  on  its 
data  center  servers. 

Server  Sentirtel  2.0  will  he 
bundled  with  the  company's 
ES7000  scries  servers,  which 
use  eight  to  32  Xeon  proces¬ 
sors  or  32  Itanium  prticessors 
from  Intel  Orp.  The  software 
is  designed  to  ease  systems 
administration  through  self¬ 


management  and  self-healing 
features,  said  Jon  Bums,  direc¬ 
tor  of  Sentinel  programs  at 
Blue  Bell.  Pa.-ba.scd  Unisys. 

The  software  was  devel¬ 
oped  to  delect  hardware  fail¬ 
ures  before  they  happen  and 
prevent  those  failures  from 
cascading  around  a  network. 
Burns  said.  Server  Sentinel 
will  determine  what  condi¬ 
tions  might  lead  to  a  specific 
problem  and  direct  traffic  on  a 
network  to  fail  over  to  the 
“best  fit"  node  based  on  that 


specific  problem,  he  said.  This 
will  allow  systems  administra¬ 
tors  to  isolate  and  repair  fail¬ 
ures  without  losing  the  entire 
network.  Hums  added. 

Unisys  today  is  also  releas¬ 
ing  a  product  called  Applica¬ 
tion  Sentinel  in  three  versions: 
Application  Sentinel  for  Re¬ 
source  Management,  for  Con¬ 
solidation  and  for  Microsoft's 
SQL  Server. 

The  consolidation  module 
allows  companies  to  run  the 
same  applications  on  fewer 


servers  by  doing  an  inventory 
of  existing  server  resources 
and  analyzing  how  to  best  dis¬ 
tribute  the  load.  Burns  said. 

The  software  Is  available 
with  F.S7000  .servers,  which 
sun  at  about  $100,000  for  an 
eight-way  configuration. 
Burns  said.  However.  Unisys 
also  plans  to  launch  a  new 
ES7000  server  in  the  next  few 
weeks  at  a  much  cheaper 
price,  he  said.  Pricing  hasn't 
been  finalized  for  the  new 
product.  I 


Knuit  writes  for  the  IDG  News 
Service. 


MARK  HALL  •  ON  THE  MARK 

Web  Services  Remain 
Behind  Firewall . . . 

. . .  and  probably  will  stay  there  for  the  next  year  or  longer.  Or  so  say 
vendors  and  developers  who  work  in  the  field.  Everything  from  immature 
standards  to  security  concerns  seems  to  be  holding  Web  services  in 
check,  they  say.  “It’s  an  immature  field,  and  the  standards  are  still 
evolving,"  observes  James  Franklin,  director  at  Extreme  Logic  Inc.  in 
Atlanta.  He  says  only  10%  to  20%  of  the  clients  of  his  200-person  IT 
consultancy  are  dipping  their  toes  into  Web  services,  and  they’re 

him  to  conclude  users  aren’t  deploying 


doing  so  only  for  internal  imcgraiiun 
work.  "Most  of  our  customers  are  not 
ready  for  depending  on  outside  Web  ser- 
yices,"  be  says,  noting  that  iMn  an  un- 
namd  by  the  fact  (hat  new  atandarda ab 
ways  crop  up.*  such  as  the  recent  an¬ 
nouncement  of  one  for  Web  services 
managemenL  Keith  Franidin  (no  known 
relationship  to  James), 
president  and  chief  soft¬ 
ware  architect  of  Empow¬ 
ered  Software  Solutions 
Inc.,  a  .Net  consultancy  in 
Burr  Ridge,  lU..  claims  that 
while  eftective  security  is 
possible  with  Web  ser¬ 
vices,  pet^le  remain  skep¬ 
tical  "because  it's  not  part 
of  the  specifkation.” 

■  Mercury  Interactive 
Corp.  has  leapt  into  the 
Web  services  tools  busi¬ 
ness.  But  according  to  Vio- 
ceni  RcroHe,  vice  presi¬ 
dent  of  business  develop¬ 
ment.  the  Sunnyvale, 

Calif.-based  software  com¬ 
pany  has  seen  virtually  all 
the  demand  focused  on 
testing  tools,  which  leads 
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these  new  applications  outside  their 
companies  because  that  would  require  a 
different  set  of  production  and  manage¬ 
ment  tools.  Part  of  the  problem  resides  in 
the  issue  of  responsfoUlty.  For  example, 
service-level  agreements  (SLA)  arc  well 
defined  and  managed  among  current 

business-partner  applica¬ 
tions.  "But,"  ReroUe  says. 
*SUb  «r»  sd  nascent  on  (t» 
KM)  MTdees  side.*  ■  If 
you're  ready  to  experi¬ 
ment  with  Web  services, 
but  all  you  hear  from 
management  is  *R0K  ROU 
ROC"  Franklin  (James,  not 
Keith)  argues  that  .Net  is 
the  hands-down  witmer 
on  cost  to  deploy,  primari¬ 
ly  because  of  Microsoft 
Cforp.*$  stronger  develop¬ 
ment  tools.  Still,  he  ac¬ 
knowledges  that  if  you  al¬ 
ready  have  a  Java  2  Enter¬ 
prise  Edition  (J2EE)  envi¬ 
ronment,  switching  to 
.Net  is  unlikely  to  deliver 
meaningful  returns  on  in- 
vestroenL  If  you  want  to 


jump  into  the  .Net  vs.  J2EE  Web  services 
debate,  visit  www.webservicesoirhired. 
com/ and  join  the  fray.  ■  That  fr^r  going  on 
in  Iraq  has  affected  the  Franklin  dif- 
ferentiy.  One  (James)  attributes  the  hesi¬ 
tation  about  corporate  IT  buying  deci¬ 
sions  to  the  lingering  uncertainty  of  war. 
However,  he  says,  "if  the  war  is  quick, 
there  could  be  a  bit  of  a  bounce  in  busi¬ 
ness."  The  other  (Keith)  says  the  war 
with  Iraq  hasn’t  changed  his  software 
consulting  business  at  all  "I  haven’t 
heard  a  peep  from  one  our  clients.”  be 
says.  ‘They’re  not  even  asking  for  extra 
security  screening  of  our  on-site  staff." 

■  However  the  war  affects  IT  business, 
one  thing  you  can  bet  on  is  that  Umix  wM 
•morga  vtetorioua.  Research  from  Evans 
Data  Ckirp.  shows  that  S2%  of  developers 
now  target  the  open-source  operating 
system  to  run  their  software.  And  Linux 
will  get  another  boost  next  wcric  when 
Austin.  Texas-based  Metrowerks.  a  whol¬ 
ly  owned  subsidiary  of  Motorola  Inc.^  un¬ 
veils  its  Smart  Gateway  857  hardware/ 
software  development  combo  for  large 
network  systems  such  as  switches  and 
routers.  The  new  development  tools  will 
put  Linux  inside  systems  that  previously 
depended  on  proprietary  operating  sys¬ 
tems.  Reason?  Operating  system  licens¬ 
ing  fees  are  too  steep.  Tha  B67k  avahialkm 
and  developer  Uts  are  mMUb  now.  Expea 
to  see  a  voice  module  for  voice  over  IP 
developers  by  June.  •  No  footin',  computer 
games  mato  9-D  dbplays  uUquHous,  ac¬ 
cording  to  Joel  Pollack,  vice  president  for 
business  development  at  Sharp  Micro¬ 
electronics  of  the  Americas  in  C^amas. 
Wash.  He  claims  that  the  phenomenon 
will  begin  with  3-0  games  on  cell  phones 
in  Japan  this  year  and  help  drive  down 
costs  to  the  point  that,  within  the  next 
couple  of  years,  IT  mana^rs  at  medical 
and  R&D  sites  will  need  to  bone  up  on 
3-D  displays.  And  you  thought  flat  panels 
would  be  the  end  of  it.  I 


Unisys  Updates  Server  Sentinel  Software 


AT  DEADLINE 


EDS  Replay  Hs 
Top  Executive . . . 

Baclroalc  Oita  System  Cerp. 
nM  tel  Dlcfc  Brown  hM 
sisppid  down  M  chaimiwi  and 
CEO  of  the  anhaBM  IT  sarvlcos 
vaodor.  Plano.  Taaaa-basad  EOS 
has  raplacod  Brown  wNh  Mchaal 
H.  JordMi,  who  roHrad  as  CBS 
Carp.*!  CEO  in  1998.  EDS  «ko 
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ai^B  naaar,  otid  wn 

9ib  con»any  la  2000  aftar  34 
yoan  9i^  haa  ratumad  to 
aarva  as  ill  pratodant  ami  cMef 
oparaBng  oflfcer. 


...And  Loses  User 
CertegytolBM 

Cwtagy  he.  h  Alpharatta,  6a.. 
saM  R  aavwod  a  U.S.  IT  aarvfcos 
contract  with  EDS  and  rignad  a 
NHw  deal  wMi  an  Tha  iww 
pad  it  valued  at  S150  Rdbm 
and  adds  to  agraanwnts  under 
adgdi  0M  doaa  IT  sarvfeas  work 
far  Cartagy  ta  the  U  JL  wd  Aus- 
traAa.  Carligy,  wWch  provAtos 
crodhanddaMprocomkigaar- 
ricaa,  aaU  A  wl  taka  a  charge  of 
igi  to  $10  mHon  to  covar  aarly- 
erit  paynwnts  to  EDS. 


Pakn  Reports  Q3 
Loss,  Sales  Dr^ 

Mm  he.  raportod  a  $172  mtton 
baa  far  ha  third  quarter,  which 
andid  Fih.  2S.  aa  rovanua  M 
29%  from  yom-amtar  bval 
to  $209  mMon.  HMat.  Cdd.- 
baaad  Paha  aaU  foomi-quartar 
ravanuawflMybadownbo- 
twoan  6%  Md  20%  yotf  over 
yav.  II  addad  thnt  ITa  datoyha  a 
ptaraiadtodn-offofhiPPtoi- 
Somca  h&  oporaHng  fyitom  unit 
from  mhtyoai  to  hto  umroer. 


Survey  Cites  FT 
Burnout  Probleins 

Mala  Oroup  he.  tMa  waah  plam 
to  rataaoa  the  rMBhi  of  a  urvoy 
totoWchTnbofttNeeBfTmMt- 
agan  H  guaalianad  aaM  omptor 
at  burnout  la  a  aatloua  iMue  at 
hair  compaatoa.  (Saa  FranUy 
Spaa*ht.pagaS8.) 


DV  TOM  tWAZIT 

Unisys  Cforp.  today  is  releas¬ 
ing  the  newest  version  of  its 
server  management  software, 
along  with  new  software  that 
manages  applications  on  its 
data  center  servers. 

Server  Sentinel  2.0  will  be 
bundled  with  the  company's 
ES7000  series  servers,  which 
use  eight  to  32  Xeon  proces¬ 
sors  or  32  Itanium  processors 
from  Intel  Corp.  The  software 
is  designed  to  ease  systems 
administration  through  self- 


management  and  self-healing 
features,  said  Jon  Burns,  direc¬ 
tor  of  Sentinel  programs  at 
Blue  Bell  Pa.-based  Unisys. 

The  software  was  devel¬ 
oped  to  detect  hardware  fail¬ 
ures  before  they  happen  and 
prevent  those  f^ures  from 
cascading  around  a  network. 
Burns  said  Server  Sentinel 
will  daermine  what  condi¬ 
tions  might  lead  to  a  specific 
problem  and  direct  traffic  on  a 
network  to  fall  over  to  the 
"best  fit"  node  based  on  that 


specific  problem,  he  said.  This 
will  allow  systems  administra¬ 
tors  to  isolate  and  repair  fail¬ 
ures  without  losing  the  entire 
network.  Burns  added. 

Unisys  today  is  also  releas¬ 
ing  a  produa  called  Applica¬ 
tion  Sentinel  in  three  versions: 
Application  Sentinel  for  Re¬ 
source  Management,  for  Con¬ 
solidation  and  for  Microsoft's 
SejL  Server. 

The  consolidation  module 
allows  companies  to  run  the 
same  applications  on  fewer 


servers  by  doing  an  inventory 
of  existing  server  resources 
and  analyzing  bow  to  best  dis¬ 
tribute  the  load  Burns  said 
The  software  is  available 
with  ES7000  servers,  which 
start  at  about  $100,000  for  an 
eight-way  conflguratioD, 
Burns  said  However,  Unisys 
also  plans  to  launch  a  new 
ES7000  server  in  the  next  few 
weeks  at  a  much  cheaper 
price,  he  said.  Pricing  hasn't 
been  finalized  for  the  new 
product  I 


Krazit  writes  far  the  IDG  News 
Service. 
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Grade  Up  in  Q3, 

But  Sales  Droop 

Despite  lower  sales  of  rtew  soft* 
ware  kcemes  and  a  declirw  in 
its  fT  services  business.  Oracle 
Corp.  reported  y«ar‘Over*year  in¬ 
creases  in  revenue  and  profits  for 
its  third  quarter.  Revenue  totaled 
S2.31  biMon  in  Hte  quarter  that 
ended  Feb.  28.  up  2%  from  a 
year  ago  as  a  result  of  increased 
user  spettding  on  software  up¬ 
dates  afKt  product  support  cort* 
tracts.  Oracle  said  profits  rose 
12%  to  SS71  million. 


Huawei  Rejects 
Cisco’s  Claims . . . 

Huawei  Technologies  Co.,  a  net- 
wortiing  vertdor  in  Shenzhen.  Chi¬ 
na.  responded  to  charges  of  pateirt 
infringement  and  techmlogy- 
copying  that  Cisco  Systens  Inc. 
lodged  in  January.  In  a  filing  to 
ttte  U.S.  District  Cotnl  in  Mar¬ 
shall.  Tetas,  Huawei  denied  many 
of  Cisco’s  claims  and  challertged 
its  legal  standing  to  bring  others. 


...And  Inks  Sales 
Deal  With  3Com 

Huawei  and  Santa  Clara.  Caiii.- 
based  SCom  Corp.  said  they're 
forming  a  joint  verdure  to  develop 
and  saH  networfiing  products. 
3Com  ia  investing  S160  million  in 
the  Hong  Kong-basod  joint  ven¬ 
ture  and  wM  Mtialy  hold  a  49% 
mterest  with  Huawei  owning  the 
rest  The  joint  venture  wll  seM  its 
products  in  China  and  Japan,  and 
3Com  wll  sel  them  under  Ifs  own 
brvtd  in  file  rest  of  the  world. 


Short  Takes 

The  Kerberos  developmerd  team 
at  MIT  warrwd  of  'crfficoT  cryp¬ 
tographic  shorteomings  in  Iferskm 
4  of  the  end-usar  authenticafion 
protocol  ft  added  that  detaih  of 
the  flaw  have  been  leaked  on  the 
Internet. . . .  GATEWAY  INC.  in 
Poway,  Calf.,  said  M’s  cuttmg 
17%  of  its  workforce.  The  compa¬ 
ny  also  said  R  wtH  launch  new 
corporate  servers  next  month. 


Microsoft  Plans  Move 
To  Autonomic  Territory 


Initiative  to  make  'o[X'rationally  aware’ 
applications  should  ease  management 


MU  ki>vor  I 

last  week  t<H)k  the 
neea.si«n  of  its  an¬ 
nual  Mana}:eraeni 
Summit  to  lay  out  a  long-term 
vision  to  help  IT  shops  simpli¬ 
fy  and  automate  their  opem- 
tions  and  manage  and  monitor 
their  sy.stems. 

Company  e.xecutives  intro¬ 
duced  a  ITynamic  Systems  Ini¬ 
tiative  (DSD  that  aims  to  sim¬ 
plify  the  design,  development 
and  depktyment  of  applica¬ 
tions  that  are  "uperationally 
aware."  IT  pr«>fcssM>n.iIs  will 
gain  the  fle.xibility  to  expand 
and  contract  hardware  and 
software  rcM>urces  based  tm 
business  logic  and  automate 
operations,  said  Bill  Veghte. 
vice  president  of  the  Windows 
Server  Group. 

The  Dynamic  Systems  Ini- 
tiativT  essentially  is  Mkro- 
si>ft’s  belated,  but  much  need¬ 
ed.  rcspvmsc  to  (he  autonomic 
computing  plans  that  IBM. 
Hewlett-Packard  Co.  and  Sun 
Microsystems  Inc.  arc  pmmot- 
ing  for  self-healing,  self-con- 
figuring  and  seif-optimizing 
systems,  analysts  said. 

Major  Differences 

But  Microsoft’s  initiative  dif¬ 
fers  from  the  competition's 
plans  in  two  maior  ways.  The 
Dynamic  Systems  Initiative  fo¬ 
cuses  i>n  Micrifsoft  products, 
whereas  the  competing  initia¬ 
tives  better  acanini  for  the 
heterogeneous  systems  found 
in  large  data  centers,  accord¬ 
ing  to  analysts. 

Another  dilTercncc  is  Mi¬ 
crosoft’s  focus  on  designing 
systems  that  are  "operational¬ 
ly  aware”  from  the  outset.  Mi- 
cnwofi  is  creating  an  XML- 
based  System  Denniiion 
Model  (SDM)  (u  define  and 
capture  the  resource,  opera¬ 
tional  and  deployment  re¬ 


quirements  of  an  application. 

The  initial  incarnation  of 
the  SDM  is  due  in  2005  with 
the  Wtndifws  release  ct>dc- 
named  l  onghorn,  Microsoft 
oiTicials  said  (see  related  sto¬ 
ry.  Page  One).  I’bns  call  for 
the  SDM  to  eventually  be 
baked  into  Micrt>soft  products 
and  developntcnt  (mils,  so  that 
any  Windows-based  applica¬ 
tion  a  customer  buys  or  builds 
can  be  managed,  provisioned 
and  adapted  more  ea.sily  as 
workhiad  or  business  needs 
change. 

Michael  Niehaus, 
an  IT  consultant  at 
Marathon  Oil  (u>rp. 
in  Houston,  said 
the  SDM  ci)ncepi 
Iwiks  interesting, 
but  he  said  he  doubts  that  it 
will  be  viewed  as  a  top  priori¬ 
ty  at  his  company. 

"At  this  point  in  time,  that 
entire  concept  would  be  kist 
on  most  of  our  developers,"  he 
said.  “Our  developers  are 
struggling  with  the  concept  of 
making  applica(ion.s  that  can 
work  across  slower  network 
links." 

The  first  fruits  of  Micro¬ 
soft’s  Dlil  are  due  with  the 
Windows  Server  2003  operat¬ 
ing  system,  although  they 
won't  all  necessarily  make  the 
April  24  launch  date.  For  In* 
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stance,  the  Window's  System 
Rcst^urce  Manager,  which  will 
allow  IT  managers  to  allocate 
CPU  and  memory  to  an  appli¬ 
cation.  is  due  to  ship  via  a  sep¬ 
arate  CD. 

Another  highly  touted  new 
feature,  called  Automated  De¬ 
ployment  Services,  is  due  in 
|une.  With  that  tool,  a  c-ompa- 
ny  will  be  able  to  deploy  hun¬ 
dreds  ofcustomi/.ed  Windows 
server  system  images  in  min¬ 
utes,  according  to  Micix>soft.  A 
beta  copy  was  made  available 
to  early  adopters  last  w'cek. 

Many  of  the  new  features 
and  tools  eventually  may  be¬ 
come  appealing  to  IT  shops, 
but  they  didn't  appear  to  en¬ 
gender  much  en¬ 
thusiasm  among 
conference  .itien- 
decs.  Several  IT 


managers  ex¬ 
pressed  confusion 
about  or  indifference  to  the 
new  long-term  strategy,  and 
they  directed  (heir  attention  at 
Microsoft’s  more  immediate 
product  plaas. 

Sara  Scuercb.  an  infrastruc¬ 
ture  engineer  .it  Daimler- 
Chrysler  Services  North 
America  I.LC.said  she  was 
frustrated  to  learn  (hat  the 
long-delayed  Systems  Man¬ 
agement  Server  (SMS)  won’t 
be  released  to  rtunufacturing 
until  September.  Ac  last  year’s 
Management  Summit.  Micro¬ 
soft  said  (he  product  w-ould 
ship  by  the  end  oflune. 


Microsoft’s  Dynamic  Systems  Initiative 


DMhMOT:  hDvWon- 
inoandatMnisfeMion 
tod  fai  Moms  com- 

pmntodiddr 

■nKBlnadMacMt- 
tot  cnMramqnl  kont 
s  tare^QslBl  sUp 
DiiKJunt2003. 


SyitemOMWfion 

MotW 

DMtaMoKAnXML- 

based  manlesL  or 
biuepfioLdeUnglhe 
raeouces  on  which  m 
appkalion  depends, 
Sw  applicalion'e  oper¬ 
ational  behaviot  and 
tftotnamer  in  which 
itisdepto)iedand 
itodalad. 

DaKSlirtinain2(Xfi. 


mart  suite  that  In- 
iiKieMfennoitOpara- 
twns  Manager  and 
Sptero  Managernent 
Server. 

OnKMidMOM 

20D4«n1  SMS  2003 
bundh  in  Simmer 
2004:11%  integrated 
product  in  2006. 


“We  can  only  wait  so  long." 
she  said. 

Scuercb  said  her  company  is 
anxious  to  use  the  mobile 
client  and  asset  management 
features  in  the  SMS  2003 
product,  but  the  delay  has 
prompted  it  to  lo«>k  at  a  com¬ 
peting  product  from  Alliris 
Inc.  in  Lindon,  Utah. 

The  other  main  product  in 
Microsoft's  management  ar¬ 
senal  is  also  being  refreshed. 
The  company  announced  last 
week  that  a  new  version  of 
Microsoft  Operations  Manag¬ 
er  (MOM),  its  event  and  per¬ 
formance  management  soft¬ 
ware  for  servers  and  applica¬ 
tions.  is  due  in  2004.  New  fea¬ 
tures  will  include  a  (ask-based 
operator  console,  auto-alert 
resolution,  improved  report¬ 
ing  capabilities  and  a  broader 
array  of  management  packs 
for  managing  Microsoft  prod¬ 
ucts.  such  as  Exchange  Server 
and  SCiL  Server. 

New  Product 

As  part  of  the  DSl.  Microsoft 
also  announced  that  SMS  and 
MOM  will  be  integrated  into  a 
new  product  called  System 
Center.  The  initial  version, 
due  nc.vt  year,  will  bundle  (he 
two  products  and  enable  them 
to  share  the  same  data  ware¬ 
house  for  unified  reporting. 
The  follow-on.  due  in  2005. 
will  feature  deeper  integration 
of  the  two  products  and  build 
on  the  SDM  foundation,  said 
Kirill  Taiarinov.  vice  president 
of  Microsoft’s  enterprise  man¬ 
agement  division. 

While  some  users  Liuded 
the  move  and  said  (hat  (hey 
expect  System  Center  to  be 
useful,  others  questioned  how 
the  product  will  fit  with  (heir 
organizational  structures. 

Brad  Jacobson,  an  operating 
systems  engineer  at  Wells  Far¬ 
go  Financial  Inc.  in  I>cs 
Moines  Iowa,  said  large  com¬ 
panies  often  have  departments 
focusing  on  difTerent  areas  of 
management.  SMS  is  typically 
used  for  desktop  administra¬ 
tion.  and  MOM  is  for  servers. 

“Butting  MOM  and  SMS  to¬ 
gether  doesn’t  fit  our  company 
structure."  he  said. 

Tatarinov  said  SMS  and 
MOM  will  also  continue  to  be 
available  separately.  I 


Microsoft  Plans  Move 
To  Autonomic  Territory 

Initiative  to  make  ‘operationally  aware’ 
applications  should  ease  management 
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LAS  VECAS 

JCROSOFT  CORP- 
last  week  took  the 
occasion  of  its  an¬ 
nual  Management 
Summit  to  lay  out  a  long-term 
vision  to  help  IT  shops  simpli¬ 
fy  and  automate  their  opera¬ 
tions  and  manage  and  monitor 
their  systems. 

Company  executives  intro¬ 
duced  a  Dynamic  Systems  Ini¬ 
tiative  (DSI)  that  aims  to  sim¬ 
plify  the  design,  development 
and  deployment  of  applica¬ 
tions  that  are  ’’operationally 
aware."  IT  professionals  will 
gain  the  flexibility  to  expand 
and  contract  hardware  and 
software  resources  based  on 
business  logic  and  automate 
operations,  said  Bill  Veghie, 
vice  president  of  the  Windows 
Server  Group. 

The  Dynamic  Systems  Ini¬ 
tiative  essentially  is  Micro¬ 
soft's  belated,  but  much  need¬ 
ed,  response  to  the  autcmomic 
computing  plans  that  IBM. 
Hewlett-Packard  Ca  and  Sun 
Microsystems  Inc  are  promot¬ 
ing  for  self-healing,  self-coo- 
figuring  and  self-optimizing 
systems,  analysts  said. 

Major  Djfhrances 

But  Microsoft's  initiative  dif¬ 
fers  from  the  competition’s 
plans  in  two  major  ways.  The 
Dynamic  Systems  Initiative  fo¬ 
cuses  on  Microsoft  products, 
whereas  the  competing  initia¬ 
tives  better  account  for  the 
heterogeneous  systems  found 
in  Urge  data  centers,  accord¬ 
ing  to  analysts. 

Another  difference  is  Mi¬ 
crosoft’s  focus  on  designing 
systems  that  are  "(^wTational- 
ly  aware"  from  the  outset  Mi¬ 
crosoft  is  creating  an  XML- 
based  System  Definition 
Model  (SDM)  to  define  and 
capture  the  resource,  opera¬ 
tional  and  deployment  re¬ 


quirements  of  an  application. 

The  initial  incamaiion  of 
the  SDM  is  due  in  2005  with 
the  Windows  release  code- 
named  Lon^om.  Microsoft 
officials  said  (see  related  sto¬ 
ry,  Page  One).  Plans  call  for 
the  SDM  to  eventually  be 
baked  into  Microsoft  products 
and  development  tools,  so  that 
any  Windows-based  applica¬ 
tion  a  customer  buys  or  builds 
can  be  managed,  provisioned 
and  adapted  more  easily  as 
workload  or  business  needs 
change. 

Michael  Niehaus, 
an  IT  consultant  at 
Marathon  Oil  Corp. 
in  Houston,  said 
the  SDM  concept 
looks  interesting, 
but  be  said  he  doubts  that  it 
will  be  viewed  as  a  top  priori¬ 
ty  at  his  company. 

"At  this  point  in  time,  that 
entire  concept  would  be  lost 
on  most  of  our  developers."  be 
said.  "Our  developers  are 
struggling  with  the  concept  of 
making  applications  that  can 
work  across  slower  network 
links." 

The  first  fruits  of  Micro¬ 
soft’s  £>S1  are  due  with  the 
Windows  Server  2003  operat¬ 
ing  system,  although  tb^ 
won't  all  necessarily  mal»  the 
April  24  launch  date.  For  in¬ 


stance,  the  Windows  System 
Resource  Manager,  which  will 
allow  IT  managers  to  allocate 
CPU  and  memory  to  an  appli¬ 
cation.  is  due  to  ^ip  via  a  sep¬ 
arate  CD. 

Another  highly  touted  new 
feature,  called  Automated  De¬ 
ployment  Services,  is  due  in 
June.  With  that  tool,  a  compa¬ 
ny  will  be  able  to  deploy  hun¬ 
dreds  of  customized  Windows 
server  system  images  in  min¬ 
utes.  according  to  Microsoft.  A 
beta  copy  was  made  available 
to  early  adt^ters  last  week. 

Many  of  the  new  features 
and  tools  eventually  may  be¬ 
come  appealing  to  IT  shops, 
but  they  didn’t  appear  to  en¬ 
gender  much  en¬ 
thusiasm  among 
conference  atten¬ 
dees.  Several  IT 
managers  ex¬ 
pressed  confusion 
about  or  indifference  to  the 
new  long-term  strategy,  and 
they  direaed  their  attention  at 
Microsoft’s  more  immediate 
produa  plans. 

Sara  Scuereb,  an  infrastruc¬ 
ture  engineer  at  Daimler- 
Chrysler  Services  North 
America  LLC  said  she  was 
frustrated  to  learn  that  the 
long-delayed  Systems  Man¬ 
agement  Server  (SMS)  won’t 
be  released  to  manufacturing 
until  September.  At  last  year’s 
Management  Summit.  Micro¬ 
soft  said  the  product  would 
ship  by  the  end  of  June. 


Mcrasoft  gels  more  senous 
about  systems  management 
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“We  can  only  wait  so  long,” 
she  said. 

Scuereb  said  her  company  Is 
anxious  to  use  the  mobile 
client  and  asset  management 
features  in  the  SMS  2003 
product,  but  the  delay  has 
prompted  it  to  look  at  a  com¬ 
peting  product  from  Alliris 
Inc.  in  Lindon.  Utah. 

The  other  main  product  in 
Microsoft’s  management  ar¬ 
senal  is  also  being  refreshed. 
The  company  announced  last 
week  that  a  new  version  of 
Microsoft  Operations  Manag¬ 
er  (MOM),  its  event  and  per¬ 
formance  management  soft¬ 
ware  for  servers  and  applica- 
tions,  is  due  in  2004.  New  fea¬ 
tures  will  include  a  task-based 
operator  console,  auto-alert 
resolution,  improved  report¬ 
ing  capabilities  and  a  broader 
array  of  managernem  packs 
for  managing  Microsoft  prod¬ 
ucts,  such  as  Exchange  Server 
and  SQL  Server. 

Newnxxhict 

As  part  of  the  I>SL  Microsoft 
also  announced  that  SMS  and 
MOM  will  be  integrated  into  a 
new  product  called  System 
Onter.  The  initial  version, 
due  next  year,  will  bundle  the 
two  products  and  enable  them 
to  share  the  same  data  ware¬ 
house  for  unified  reporting. 
The  foUow-on,  due  in  2005, 
will  feature  deeper  integration 
of  the  two  products  and  build 
on  the  SDM  foundation,  said 
Kirill  Tatarinov,  vice  president 
of  Microsoft’s  enterprise  man¬ 
agement  division. 

While  some  users  lauded 
the  move  and  said  that  they 
expect  System  Ooter  to  be 
usefril,  others  questioned  bow 
the  product  will  fit  with  their 
organizational  structures. 

Brad  Jacobson,  an  operating 
systems  engineer  at  Wells  Far¬ 
go  Financial  Inc.  in  Des 
Moines.  Iowa,  said  large  com¬ 
panies  often  have  departments 
focusing  on  different  areas  of 
management.  SMS  \s  typically 
used  for  desktop  administra¬ 
tion,  and  MOM  is  for  servers. 

"Putting  MOM  and  SMS  to¬ 
gether  doesn’t  fit  our  company 
structure,”  he  sakL 

Tatarinov  said  SMS  and 
MOM  will  also  cominue  to  be 
available  separately.  I 


IV 
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in  a  world  where  there’s  a  different  land  of  threat  every  day,  you  need  a  different  kind  of  security. 

0 

New  threats  can  blow  through  any  firewall  or  antr-virus  software.  That!s  why  we  deliver  seamless  information  protection 
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LA  Police  Seek  Bandwidth 
Boost  From  WLAN  Technology 


Officials  expect  new  s\'stems  to  speed 
deliveries  of  graphical  data  to  officers 


Facing  a  Nttn  for 
higher 'bandwidth 
communications  s>’s- 
terns  in  order  to  meet 
increased  homeland  security 
requirements,  the  Los  Angeles 
Police  Department  (LAPD) 
plans  to  install  wireless  LANs 
at  its  27  police  stations  within 
the  next  three  months. 

K(vgcr  Ham.  deputy  chief  fur 
communications  at  the  LAPD. 
said  at  the  Cellular  Telecom- 
municaiions  St  Internet  Asso¬ 
ciation's  Wireless  200.^  confer¬ 
ence  here  that  the  WLANs  will 
be  used  to  send  mug  shots, 
maps  and  other  graphical  data 
to  police  officers.  Transmis¬ 
sions  like  that  aren't  feasible 
on  the  wireless  wide-area  net¬ 
work  the  department  installed 
citywidc  two  years  ago. 

As  part  of  the  WLAN  pr**!- 
cct,  the  LAPD  plans  to  deploy 
about  IJOO  Pocket  PC  hand¬ 
held  computers  to  officers 
working  in  vehicles  and  on 
font  patrols.  The  handhelds, 
made  by  Symbol  Technologies 
Inc.  in  Holtsville.  N.Y..  will  in¬ 
clude  802.Ub  WLAN  cards  de¬ 
signed  to  let  them  communi¬ 
cate  with  wireless  access 
pitints  inside  the  police  sta- 
titms  at  raw  data  transfer  rates 
of  up  to  IIM  bit/sec-  By  com¬ 
parison,  the  LAPlVs  wireless 
WAN  delivers  peak  thrt>ugh- 
put  of  I9.2K  bit/scc. 

Faster  Mug  Shots 

The  range  of  WLAN  transmis¬ 
sions  is  limited  to  about  300 
feet,  but  Ham  said  the  technol- 
og>'  will  make  it  easier  lo  dis¬ 
tribute  images  to  police  offi¬ 
cers  in  real  time.  Currently, 
mug  shots  are  handed  out  on 
paper  at  the  roll  call  for  each 
shift.  The  WLAN  system 
could  also  provide  a  fast  way 
to  distribute  photos  of  lost 
children  as  part  of  the  Amber 


Alert  system.  Ham  said. 

Will  Strauss,  an  analyst  at 
Forward  Concepts  Co.  in 
Tempe,  Ariz..  called  the 
LAPD's  plan  “a  cheap  way  to 
get  bandwidth"  that  officers 
could  use  to  periodically 
download  important  data  as 
they  passed  by  police  stations. 

Ham.  who  declined  to  dis¬ 
close  the  expected  cost  of  the 
project,  said  he  eventually 
wants  to  develop  an  interface 
between  the  WI.AN  radios 


built  into  the  Symbol  hand¬ 
helds  and  the  WAN-based 
Motorola  Inc.  radios  that  are 
now  used  in  police  cars.  That 
would  let  officers  use  the 
handhelds  as  remote  units  con¬ 
nected  to  the  WAN  while  out¬ 
side  their  vehicles,  he  noted. 

Other  police  departments, 
includir^  the  ones  in  Balti¬ 
more  and  in  Glendale.  Calif., 
have  already  installed  similar 
WLAN-to-WAN  systems. 

Mike  Shlasko.  director  of 
the  public-safety  business  unit 
at  Symbol,  said  the  company 
will  provide  ruggedized  hand¬ 
helds  running  Microsoft 


Corp.'s  Pocket  PC  operating 
system  to  the  LAPD.  He  added 
that  Symbol  is  a  subcontractor 
on  the  WLAN  project  to  Vytek 
Wireless  Inc.  in  White  Plains, 
N.Y.  The  deal  between  the  two 
firms  and  the  LAPD  was  final¬ 
ized  during  the  past  few  weeks 
but  has  yet  to  be  announced, 
according  to  Shlasko  and 
Ham.  Vytek,  a  developer  of 
wireless  applications,  would¬ 
n't  comment  about  the  project. 

Ham  said  that  he  views 
WLANs  as  a  stopgap  measure 
and  added  that  the  LAPD 
needs  additional  WAN  spec¬ 
trum  for  routine  duties  and 


homeland  security  require¬ 
ments.  For  example,  the  LAPD 
now  has  patrols  at  Los  Ange¬ 
les  International  Airport.  Ham 
said  the  department  could  use 
more  WAN  bandwidth  to 
transmit  data  from  the  air¬ 
port's  facial  recc^ition  sys¬ 
tems  to  police  headquarters.  I 


Military  Investigates  System  Intrusion 
Involving  Windows  2000  Security  Raw 


Miemsoft  issues 
patch,  but  some 
users  may  have 
R'boot  problems 


IV'ntagon  sources  last  week 
confirmed  that  officials  arc  in¬ 
vestigating  an  apparent  intru¬ 
sion  into  at  least  one  military 
server  through  a  previously 
unknown  vulnerability  in  Mi¬ 
crosoft  Corp.’s  Windows  2000 
operating  s>’sicm. 

Microsoft  gave  the  buffer 
overflow  vulnerability  a  "criti¬ 
cal"  severity  rating  and  is.sued 
a  software  patch  designed  to 
fix  the  flaw,  which  involves  a 
component  of  Windows  2000 
that's  used  to  manage  the  Web 
Distributed  Authoring  and 
Versioning  (WebDAV)  protvi- 
col.  Hackers  could  use  the 
hole  to  lake  control  of  unpro¬ 
tected  Web  servers,  and  Mi- 
crosvift  said  it  has  received 
isolated  reports  of  attempts  to 
exploit  the  vulnerability. 

The  initial  attack  reports 
centered  around  a  LJ.S.  Army 
Web  server.  But  after  an  inves¬ 


tigation.  the  Army  said  it  had 
no  evidence  that  any  of  its  sys¬ 
tems  had  been  compromised. 

“To  the  best  of  our  knowl¬ 
edge.  an  Army  system  was  not 
attacked."  said  Col.  Ted  Dmu- 
chowski,  director  of  informa¬ 
tion  assurance  at  the  Army's 
Network  Technology  Enter¬ 
prise  Ctommand.  "According  to 
our  records,  the  military  sites 
that  were  attacked  did  not  be¬ 
long  to  the  Army." 

Nonetheless,  Dmuchowski 
said  in  a  .statement  that  IT 
staffers  "have  taken  measures 
to  push  the  appropriate  patch 
down  lo  all  Army  netwwks." 

Security  analysts  described 
the  reported  attack  as  a  rare 
example  of  a  "zero-day"  cx- 
pUm,  in  which  hackers  try  to 
take  advantage  of  a  soflwarc 
vulnerability  that  has  yet  to  be 


rcptirtcd  and  for  which  there 
is  no  available  patch. 

Jeffrey  Jones,  senior  director 
of  marketing  for  Microsoft's 
Trustworthy  Computing  secu¬ 
rity  initiative,  said  company 
officials  were  told  about  the 
vulnerability  on  March  12  by 
two  customers  who  reported 
that  they  were  being  actively 
attacked.  |uncs  declined  to 
disclose  further  information 
about  the  users. 

Microsofl  typically  issues 
security  bulletins  on  Wednes¬ 
days.  but  Jones  said  it  decided 
to  post  the  WebDAV  warning 
on  its  Web  site  last  Monday 
because  of  the  repivrts  of  ac¬ 
tive  attacks. 

The  company  also  specified 
work-arounds  for  users  who 
may  not  be  able  to  apply  the 
fu  right  away. 


"We're  trying  to  put  an  extra 
emphasis  on  alternative  ways 
to  protect  yourself,"  he  said. 

Indeed.  Microsoft  acknowl¬ 
edged  that  the  patch  itself 
could  cause  problems  for 
some  users  of  Windows  2000 
and  its  Service  Pack  2  bug-fix 
update.  After  issuing  the 
patch,  the  company  said  that 
it’s  incompatible  with  a  dozen 
other  fixes  developed  for  the 
operating  system  from  De¬ 
cember  2001  to  February  2002. 

Incompatibinties 

The  incompatibilities  may 
leave  IT  managers  unable  to 
reboot  their  systenui  after  they 
install  the  new  patch,  accord¬ 
ing  to  Microsoft.  Users  with 
certain  versions  of  a  file  called 
ntoskrnixxc  on  their  Win¬ 
dows  2000  systents  slumid  call 
Microsoft’s  product  support 
services  unit  before  they  apply 
the  patch.  Microsoft  said. 

WebDAV  is  enabled  by  de¬ 
fault  in  Version  5.0  of  Micro¬ 
soft’s  Internet  Information 
Server  (US)  software,  which  is 
bundled  with  Windows  2000. 
The  protoctil  is  a  set  of  HTTP 
extensions  that  let  users  edit 
and  manage  files  on  remote 
servers.  Micr^isoft  .said  the 
bulTcr  overflow  vulnerability 
could  be  exploited  by  sending 
a  specially  written  HTFP  re¬ 
quest  to  systems  running  US.  I 
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LA  Police  Seek  Bandwidth 
Boost  From  WLAN  Technology 

Officials  expect  new  systems  to  speed 
deliveries  of  graphical  data  to  officers 
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NEW  OALEAMS 

ACmc.  A  NEED  for 
higher-bandwidth 
communications  sys¬ 
tems  in  order  to  meet 
increased  homeland  security 
requirements,  Che  Los  Angeles 
Police  Department  (LAPD) 
plans  to  install  wireless  LANs 
at  its  27  police  stations  within 
the  next  three  months. 

Roger  Ham.  deputy  chief  for 
communications  at  the  LAPD. 
said  at  the  Cellular  Telecom¬ 
munications  &  Internet  Asso¬ 
ciation's  Wireless  2003  confer¬ 
ence  here  that  the  WLANs  will 
be  used  to  send  mug  shots, 
maps  and  other  graphical  data 
to  police  officers.  Transmis¬ 
sions  like  that  aren’t  feasible 
on  the  wireless  wide-area  net¬ 
work  the  department  installed 
citywide  two  years  aga 

As  part  of  t^  WLAN  pro)- 
ect.  the  LAPD  plans  to  deploy 
about  1.500  Po^et  PC  hand¬ 
held  computers  to  officers 
working  in  vehicles  and  on 
foot  patrols.  Hie  handhelds, 
nude  by  Symbol  Technolo^es 
Inc.  in  HoltsviUe,  N.Y.,  will  in¬ 
clude  802Jlb  WLAN  cards  de¬ 
signed  to  let  them  communi¬ 
cate  with  wireless  access 
points  inside  the  police  sta¬ 
tions  at  raw  data  transfer  rates 
of  up  to  IIM  bit/sec.  By  com¬ 
parison.  the  LAPP'S  wireless 
WAN  delivers  peak  through¬ 
put  of  19JK  bit/sec. 

Faster  Mug  Shots 

The  range  of  WLAN  transmis¬ 
sions  is  limited  to  about  300 
feet,  but  Ham  said  the  technol¬ 
ogy  will  make  it  easier  to  dis¬ 
tribute  images  to  police  offi¬ 
cers  in  real  time.  Currently, 
mug  shots  are  handed  out  on 
paper  at  the  roll  call  for  each 
shift  The  WLAN  system 
could  also  provide  a  fast  way 
to  distribute  photos  of  lost 
children  as  part  of  the  Amber 


Alert  system.  Ham  said. 

Strauss,  an  analyst  at 
Forward  Concepts  Co.  in 
Tempe,  Ariz..  called  the 
LAPP’S  plan  “a  cheap  way  to 
get  bandwidth"  that  officers 
could  use  to  periodically 
download  important  data  as 
they  passed  police  stations. 

Ham.  who  declined  to  dis¬ 
close  the  expected  cost  of  the 
project,  said  be  eventually 
wants  to  develop  an  interne 
between  the  WLAN  radios 


Microsoft  issues 
patch,  but  some 
users  may  have 
reboot  problems 

SV  DAN  VCITTOM 
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Pentagon  sources  last  week 
confirmed  that  officials  are  in¬ 
vestigating  an  apparent  intru¬ 
sion  into  at  least  one  military 
server  through  a  previously 
unknown  vulnerability  in  Mi¬ 
crosoft  Corp.’s  Windows  2000 
operating  system. 

Microsoft  gave  the  buffer 
overflow  vulnerability  a  "criti¬ 
cal"  severity  rating  aiwi  issued 
a  software  patch  designed  to 
fix  the  flaw,  which  involves  a 
component  of  Windows  2000 
that's  used  to  manage  the  Web 
Distributed  Authoring  and 
Versioning  (WebDAV)  proto¬ 
col  Hackers  could  use  the 
hole  to  take  control  of  unpro¬ 
tected  Web  servers,  and  Mi¬ 
crosoft  said  it  has  received 
isolated  reports  of  attempts  to 
exploit  the  vulnerability. 

The  initial  attack  reports 
centered  around  a  U5.  Army 
Web  server.  But  after  an  inves- 


built  into  the  Symbol  hand¬ 
helds  and  the  WAN-based 
Motorola  Inc.  radios  that  are 
now  used  in  police  cars.  That 
would  let  officers  use  the 
handhelds  as  remote  units  ctm- 
nected  to  the  WAN  while  out¬ 
side  their  vehicles,  be  noted. 

Other  police  departments, 
including  the  ones  in  Balti¬ 
more  and  in  Glendale.  Calif, 
have  already  installed  similar 
WLAN-to-WAN  systems. 

Mike  Shlasko,  director  of 
the  public-safety  business  unit 
at  Symbol,  said  the  company 
will  provide  ruggedized  hand¬ 
helds  running  Microsoft 


dgatioo,  the  Army  said  h  had 
no  evidence  that  any  of  its  sys¬ 
tems  had  been  compromised. 

To  the  best  of  our  knowl¬ 
edge.  an  Army  system  was  not 
attacked,"  said  Col  Ted  Dmu- 
chowskt  director  of  informa¬ 
tion  assxirance  at  the  Army’s 
Netwoik  Technology  Enter¬ 
prise  Command.  "According  to 
our  records,  the  military  sites 
(hat  were  attacked  did  not  be¬ 
long  to  the  Army." 

Nonetheless.  Dmuchowski 
said  in  a  statement  that  IT 
staffers  "have  taken  measures 
to  push  the  appropriate  patch 
down  to  all  Army  networks.” 

Security  analysts  described 
the  reported  attack  as  a  rare 
example  of  a  "zero-day”  ex¬ 
ploit.  in  which  backers  try  to 
take  advantage  of  a  software 
vulnerability  that  has  yet  to  be 


Corp.'s  Pocket  PC  operating 
system  to  the  LAPD.  He  added 
that  Symbol  is  a  subcontractor 
on  the  WLAN  project  to  Vytek 
Wireless  Inc  in  White  Plains, 
N.Y.  The  deal  between  the  two 
firms  and  the  LAPD  was  final¬ 
ized  during  the  past  few  weeks 
but  has  yet  to  be  announced, 
acaxding  to  Shlasko  and 
Ham.  Vytek,  a  developer  of 
wireless  applications,  would¬ 
n’t  comment  about  the  project 
Ham  said  that  he  views 
WLANs  as  a  stopgap  measure 
and  added  that  the  LAPD 
needs  additional  WAN  spec¬ 
trum  for  routine  duties  and 


reported  and  for  which  there 
is  no  available  patch. 

Jeffrey  Jones,  senior  director 
of  marketing  for  Microsoft’s 
Trustworthy  Computing  secu¬ 
rity  initiative,  said  company 
officials  were  told  about  tbe 
vulnerability  oo  March  12  by 
two  customers  who  reported 
that  they  were  being  actively 
attacked  Jones  declined  to 
disclose  further  information 
about  the  users. 

Microsoft  typically  issues 
security  bulletins  on  Wednes¬ 
days.  but  Jones  said  it  decided 
to  post  the  WebDAV  warning 
on  its  Web  site  last  Monday 
because  of  the  reports  of  ac¬ 
tive  attacks. 

Tbe  company  also  specified 
work-arounds  for  users  who 
may  not  be  able  to  apply  the 
fix  right  away. 


WflWxonxiulsrwofkLconi 


homeland  security  require¬ 
ments.  For  example,  the  LAPD 
now  has  patrols  at  Los  Ange¬ 
les  International  Airport  Ham 
said  tbe  department  could  use 
more  WAN  bandwidth  to 
transmit  data  from  the  air¬ 
port’s  facial  recognition  sys¬ 
tems  to  police  headquarters.  I 


"We're  trying  to  put  an  extra 
emphasis  on  alternative  ways 
to  protect  yourself."  he  said. 

Indeed  Microsoft  acknowl¬ 
edged  that  tbe  patch  itself 
could  cause  pr^lems  for 
some  users  of  Windows  2000 
and  its  Service  Pack  2  bug-flx 
update.  After  issuing  the 
patch,  tbe  company  said  that 
it's  incompatible  with  a  dozen 
other  fixes  developed  for  the 
operating  system  from  De¬ 
cember  2001  to  February  2002. 

bwompatibiSties 

The  iocompatibilides  may 
leave  IT  managers  unable  to 
reboot  their  systems  after  they 
install  the  new  patch,  accord¬ 
ing  to  Microsoft.  Users  with 
certain  versions  of  a  file  called 
Qtoskrnlexe  oo  their  Win¬ 
dows  2000  systems  should  call 
Microsoft’s  product  support 
services  unit  before  they  apply 
the  patch,  Microsoft  said 

WebDAV  is  enabled  by  de¬ 
fault  in  Version  SJ)  of  Micro¬ 
soft’s  Internet  Information 
Server  (IIS)  software,  which  is 
bundled  with  Windows  2000. 
Tbe  protocol  is  a  set  of  HTTP 
extensions  that  let  users  edit 
and  manage  files  on  remote 
servers.  Microsoft  said  the 
buffer  overflow  vulnerability 
could  be  exploited  by  sending 
a  specially  written  HTi'P  re¬ 
quest  to  systems  running  IIS.  I 
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Glitch  Hits  HMO’s 
Rx  Label  System 

Kaiser  PwmuMnte  HMith  Plan 
he.  saM  a  systems  gMch  foBow' 
Ing  a  power  outage  may  have 
caused  labeling  errors  on  pre~ 
scriptions  dispensed  to  about 
4.700  of  its  pabentf  on  March 
13.  Tttt  Oakland.  CaW.-based 
health  maintenance  organization 
added  that  n  was  conducthg 
diagnostic  testing  to  determine 
what  happened.  No  adverse 
reactions  have  been  reported 
thus  far  by  patients,  Kaiser  said. 


Cisco  Agrees  to 
Buy  Two  Vendors 

Cisco  Systems  he.  annoufKOd 
deals  to  buy  The  Linksys  Group 
he.  h  Irvine,  Calf.,  and  Signal- 
Works  he.  h  Mountain  View, 
Calf.  Cisco  wM  eichange  stock 
that's  currently  vahiad  at  about 
$500  miWon  to  acquire  Unksys. 
which  makes  networking  prod¬ 
ucts  for  consumers.  The  compa¬ 
ny  wM  use  S13.S  millon  worth  of 
stock  to  buy  SkpiaMforks,  which 
develops  P  telephony  software. 


Publishing  Rrm 
Names  New  CIO 

The  McOrawHH  Cos.,  a  pubRsh- 
er  and  data  providar  h  New 
folk,  said  M  has  hired  Mostafa 
Mehrabani  as  its  CK).  Mahra- 
banl.  who  was  named  one  of 
Cdfflputerwwkfs  Premier  100  IT 
Leaders  h  2001.  wW  report  to 
MeGr««r-WI‘s  chief  fhendal 
officer.  He  was  previously  CIO  at 
TftW  he„  an  aerospace  compa¬ 
ny  that  Northrop  Orumman  Corp. 
bought  h  December. 


Short  Takes 

SUN  MICROSVSTEMS  WC.  re¬ 
leased  a  set  of  tools  for  develop¬ 
ing  Java-based  Web  sorvices 
appications  that  utttze  its  Sun 
ONEeo(twere....HEmnT- 
PACKARO  CD.  sNd  H  plans  to  of¬ 
fer  fuR  tochnical  support  for  RED 
HAT  INC.*s  Enterprise  Lima  soft¬ 
ware  to  users  of  HP  servers. 


i2  Looks  to  Simplify  Supply 
Chain  Software  With  Upgrade 


New  release  includes  vertical  industn’ 
templates,  support  for  Web  services 


BV  MARC  L.  SOMOINI 

Beset  by  ongoing  loss¬ 
es  and  a  probe  by  the 
U.5.  Securities  and 
Exchange  Commis¬ 
sion.  i2  Technologies  Inc. 
hopes  an  upgrade  of  its  supply 
chain  management  software 
that's  being  announced  this 
week  will  help  it 
get  back  on  track 
with  users. 

The  Dallas- 
based  software  vendor  said  its 
(2  Six  release  will  be  less  ex¬ 
pensive  to  install  and  easier  to 
use  than  prior  versions  were. 
The  new  applications  include 
prebuilt  templates  for  various 
vertical  industries  and  will 
support  oui-of-the-box  inte¬ 
gration  with  enterprise  re¬ 
source  planning  systems, 
according  to  i2. 

In  addition,  the  company  is 
building  Web  services  support 
into  the  new'  applications.  For 
users,  that  should  speed  up 
the  process  of  developing  data 
integration  links  between  i2 
Six  and  applications  devel¬ 
oped  by  other  vendors.  i2  ofli- 
cials  said.  The  new  software 
will  also  be  able  to  exploit 
technologies  such  as  lava  2 
Enterprise  Edition  and  XML 
Pallab  Chaitcricv,  president 
of  solutions  operations  at  t2. 
said  the  company's  goal  is  to 
reduce  the  pain  users  feel 
when  they  install  the  applica¬ 
tions  and  to  speed  up  the  re¬ 
turns  on  their  investments. 

"We  believe  if  we  can  help 
the  CIO  reduce  the  total  Ci>st 
and  then  send  some  money 
back  to  the  CEO.  he  can  get 
some  brownie  points,"  he  said. 

For  example.  Chatlerjec  not¬ 
ed  that  a  new  tool  kit  coming 
with  i2  Six  is  designed  to  help 
corporate  developers  more 
easily  create  integrated  data 
and  business  process  work- 
flows.  'The  tool  kit  includes  a 
common  data  dictionary  and  a 


SCI  of  workflow  design  mecha¬ 
nisms,  he  said. 

Mitsubishi  Oterpillar  Fork¬ 
lift  America  Inc.  is  a  beta 
tester  that  upgraded  fmm 
Version  4.5  of  i2's  Facior>' 
Planner  to  i2  Six  in  November. 

Kent  Hornbacker.  manager 
of  manufacturing  materials 
systems  at  the 
Houston-based 
company,  said  the 
new  software 

helped  Mitsubishi  Caterpillar 
cut  the  time  it  takes  to  run 
production-scheduling  miKtels 
from  as  much  as  three  hours 
to  just  20  minutes. 

Mitsubishi  Caterpillar  was 
also  able  to  optimize  its  mod¬ 


eling  processes  by  factoring  in 
transportation  and  supplier 
data  that  wasn't  taken  into  ac¬ 
count  by  the  older  i2  applica¬ 
tion,  Hornbacker  said.  The 
company  now  plans  to  use  i2 
Six  to  collaborate  with  a  third- 
party  logistics  company  in  a 
bid  to  improve  transponation 
performance,  he  added. 

The  fact  that  i2  has  devel¬ 
oped  an  integrated  system  that 
supports  high-vclocity  supply 
chain  integration  is  of  particu¬ 
lar  interest,  said  Dwight  Klap- 
pich.  an  analyst  at  Meta  Group 
Inc.  in  Stamford.  Conn.  But  12 
Six  will  simultaneously  sup¬ 
port  real-time  data  exchanges 
and  the  more  typical  batch 
processing.  Klappich  said.  “A 
completely  real-time  supply- 
chain  is  a  dangerous  thing."  he 
said.  "It  would  be  anarchy." 


New  in  i2  Six 
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‘fhe  upgraded  applications 
are  available  now.  said  i2. 

The  company,  which  has  re¬ 
ported  five  straight  quarterly 
losses,  in  fanuary  acknowl¬ 
edged  that  the  SEC  had 
launched  an  informal  inquiry 
into  the  accounting  proce¬ 
dures  it  used  in  2000  and  2001 
[QuickLink  36004).! 


Rdelity  Installs  SAN  Management  Tool 


Company  switche.s 
from  hnmegnnvTi 
provisioning  app 


BY  LUCAS  MEARIAN 

Fidelity  Investments  this  week 
plans  to  announce  that  it's 
rolling  out  a  packaged  storage- 
area  networit  (SAN)  manage¬ 
ment  tool  to  replace  an  in- 
house  application  used  to  au¬ 
tomatically  provision  storage 
space  and  charge  business 
units  for  using  the  capacity. 

For  the  past  three  months. 
Boston-based  Fidelity  has 
been  working  to  install  Inter- 
SAN  Inc.'s  Pathline  2.5  soft- 
wan*  at  multiple  data  centers. 
Scotts  Valley.  Calif.-basc’d 
InierSAN  said  it  will  formally 
announce  that  version  this 
week;  the  software  includes 
features  such  as  chargeback 
reports  and  automated  rccon- 
ftguration  of  data  paths. 

Ken  Ayotte.  a  systems  archi¬ 
tect  at  Fidelity,  said  the  mutual 
funds  company  is  using  Path- 
line  to  help  its  IT  staft  central- 


REUIMK 


ly  manage  about  50%  of  a  SAN 
with  more  than  200TB  of  data 
stored  primarily  on  EMC 
Corp.’s  Symmetrix  disk  arrays 
and  IBM's  Shark  devices.  By 
year's  end.  Fidelity  plans  to 
use  the  software  to  manage 
100%  of  the  networked  stor¬ 
age,  Ayotte  added.  _ 

Fidelity  has  al¬ 
ready  been  auto- 
provisioning  its 
storage  devices  for 
the  past  18  months 
with  homegrown 
software;  switching 
to  a  commercial  application 
has  let  the  company  free  up 
several  systems  architects 
who  had  been  working  to 
maintain  the  in-house  technol¬ 
ogy,  said  Ayotte. 

“For  anybody  who’s  got  a 
team  of  architects,  that's  the 
last  thing  you  want  them  do¬ 
ing  full  time."  he  said.  "You 
want  them  looking  out  into 
the  future  and  doii^;  architect 
work."  Ayotte  declined  to 
disclose  how  much  Fidelity  is 
spending  to  install  the  Path- 


For  more  mlonrution  about 
this  lope,  veil  our  Storage 
KnoNtedge  Center 
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tine  software. 

Storage  administrators  at 
Fidelity  sometimes  handle 
more  than  l(K)  provisioning  re¬ 
quests  per  month,  which  can 
translate  into  hundreds  of 
changes  to  the  company's 
SAN.  Ayotte  said  the  IT  dc- 

_  partment  saved 

hundreds  of  man¬ 
hours  on  a  monthly 
basis  by  moving 
from  a  manual 
provisioning  model 
to  the  homegrown 
-  application. 

Now  the  addition  of  Path¬ 
line  is  giving  Fidelity  the  abili¬ 
ty  to  tie  available  storage  ca¬ 
pacity  on  the  SAN  to  specific 
applications  and  then  provi¬ 
sion  (he  disk  space  for  "an 
application  instead  of  a  serv¬ 
er.”  Ayotte  said. 

Switching  to  the  packaged 
software  has  also  helped  the 
company  automate  tasks  such 
as  storage  inventory  manage¬ 
ment.  SAN  performance  mon¬ 
itoring  and  device  configura¬ 
tion.  he  added. ! 
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ORchHtsHMO’s 
Rx  Label  System 


i2  Looks  to  Simplify  Supply 
Chain  Software  With  Upgrade 


KiiMf  ftnHMMMs  HmIMi  PIv 
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int «  pMuriWhqi  HMy  ton 
cMMd  IMbig  ■mn  oe  pr»- 
icriptiom  dtapMMd  to  about 
4,700  ol  lli  ptotonti  on  March 
tS.  Tin  OtodMto.  CaM.-b«Md 
hMWiinatotonanco  organteatton 
adM  thM  H  ww  conducting 
dognoalfc  tooling  to  dotomino 
wImI  hnppanod.  No  advorao 
roaeltona  tMM  boM  foportod 
Ihu  tor  by  pnttonla.  Kaioer  mM. 


Cisco  Aorees  to 
BuyTwolfendors 

CtMO  Syotons  toc>  announcod 
daato  to  buy  Tht  Unkaya  Oroup 
bn.  to  bvbw.  CdH„  aid  Signal 
^porua  UflC,  ut  MooncoM  mow, 
Ctod.  Cloco  wM  OMtianga  stock 
dMfs  GMiondy  vtouod  at  ^out 
SSOO  ndMon  to  acguira  Unkaya, 
wMcb  nokH  noCworking  prod* 
ucia  lor  conounmn.  Tho  compt- 
ny  adi  000  $0,5  mMton  worth  of 
stock  to  buy  SignoMbrka.  which 
dovoiopa  O  toiaphony  floflwavo. 


njbkhing  Rmi 
Names  Nm  CIO 

ThoMB6raw-HiCoa,.apubiish- 
or  and  data  praiMor  in  Nm 
itofk,  sMd  H  boo  bkod  Mootab 
Mohr^MilMltoCIO.Mohfa- 
bani,  ntoo  WM  nomad  000  of 
Contputarwnrld'a  PtomiorlOO  IT 
Uadan  to  2001,  wM  raport  to 
MoOrawITachiofftoMtctol 
ofHcar.  Ha  was  pmeieuaiy  CM)  al 
TRW  ta6„  an  aaroapaco  compa¬ 
ny  dial  NarWrap  Orumman  Carp, 
bough!  to  Daoambar. 


Siort  takes 

9m  INCROSySTEMS  die.  ra- 
laaaad  a  aal  at  toala  tor  dovalop- 
tog  JoM-baaad  ¥tob  aorvleaa 
applcaliono  dial  udfao  Ha  Sun 
ONEsollWBra....HEWl£n- 
MCtURDCO.aaidilplanstoof- 
far  fci  tochnical  support  tor  RED 
HATMC.’tEfilirpriHUnuiaoft- 
wara  to  UMTt  of  HP  lorvori. 
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ESET  BY  ongoing  loss¬ 
es  and  a  probe  by  the 
U,S.  Securities  and 
Exchange  Commis¬ 
sion.  i2  Technologies  tnc. 
hc^>es  an  upgrade  of  its  supply 
chain  management  software 
that's  being  announced  this 
week  will  help  it 
get  back  on  track 
with  users. 

The  Dallas- 
based  software  vendor  said  its 
i2  Six  release  will  be  less  ex¬ 
pensive  to  install  and  easier  to 
use  than  prior  versions  were. 
The  new  applications  include 
prebuilt  templates  for  various 
vertical  industries  and  will 
support  out-of-the-box  inte- 
gration  with  enterprise  re¬ 
source  planning  systems, 
according  to  i2. 

In  addition,  the  company  is 
building  Web  services  support 
into  the  new  applications.  For 
users,  that  should  speed  up 
the  process  of  developing  data 
integration  links  between  i2 
Six  and  applications  devel¬ 
oped  by  other  vendors,  12  offi- 
cials  said.  The  new  software 
will  also  be  able  to  exploit 
technologies  such  as  Java  2 
Enterprise  Edition  and  XML. 

Pallab  Chatteriec.  president 
of  solutions  operations  at  i2, 
said  the  company's  goal  is  to 
reduce  the  pain  users  feel 
when  they  install  the  applica¬ 
tions  and  to  speed  up  the  re¬ 
turns  on  their  investments. 

‘'We  believe  if  we  can  help 
the  CIO  reduce  the  total  cost 
and  then  send  some  money 
back  to  the  CEO.  be  can  get 
some  brownie  points,”  be  said. 

For  example,  Chatterjee  not¬ 
ed  that  a  new  tool  kit  coming 
with  i2  Six  is  designed  to  help 
corporate  developers  more 
easily  create  integrated  data 
and  business  process  work- 
flows.  The  tool  kit  includes  a 
common  data  dictionary  and  a 


set  of  workflow  design  mecha¬ 
nisms,  he  said. 

Mitsubishi  Caterpillar  Fork¬ 
lift  America  Inc.  is  a  beta 
tester  that  upgraded  from 
Version  4  J  of  i2‘s  Factory 
Planner  to  12  Six  in  November. 

Kent  Hombacker.  manager 
of  manufacturing  materials 
systems  at  the 
Houston-based 
company,  said  the 
new  software 
helped  Mitsubishi  Caterpillar 
cut  the  time  it  takes  to  run 
production-scheduling  models 
from  as  much  as  three  hours 
to  just  20  minutes. 

Mitsubishi  Caterpillar  was 
also  able  to  optimize  its  mod- 


Company  switches 
from  homegrowTi 
provisioning  app 

av  LUcas  meahian 

Fidelity  Investments  this  week 
plans  to  aimounce  that  it's 
rolling  out  a  packaged  storage- 
area  network  (SAN)  manage¬ 
ment  tool  to  replace  an  in- 
hou.se  application  used  to  au¬ 
tomatically  provision  storage 
space  and  charge  business 
units  for  using  the  capacity. 

For  the  past  three  months, 
Boston-b^ed  Fidelity  has 
been  working  to  install  Inter- 
SAN  lnc.'s  Pathline  2.5  soft¬ 
ware  at  multiple  data  centers. 
Scons  Valley,  Calif.-based 
InterSAN  s^  it  will  formally 
announce  that  version  this 
week;  the  software  includes 
features  such  as  chargeback 
reports  and  automated  recoit- 
flguration  of  data  paths. 

Ken  Ayone.  a  systems  archi¬ 
tect  at  Fidelity,  said  the  mutual 
fonds  company  is  using  Path¬ 
line  to  help  its  IT  staff  central- 


eling  processes  by  factoring  in 
transportation  and  supplier 
data  that  wasn't  taken  into  ac¬ 
count  by  the  older  12  applka- 
tioru  Hombacker  said, 
company  now  plans  to  use  12 
Six  to  collaborate  with  a  third- 
party  logistics  company  in  a 
bid  to  improve  transportation 
performance,  be  added. 

The  fact  that  i2  has  devel¬ 
oped  an  integrated  system  that 
supports  high-velocity  supply 
chain  integration  is  of  particu¬ 
lar  interest,  said  Dwight  Klap- 
pich,  an  analyst  at  Meta  Group 
loc.  in  Stamford.  Cona  But  12 
Six  will  simultaneously  sup¬ 
port  real-time  data  exchanges 
and  the  more  typical  batch 
processing.  Klappich  said.  “A 
completely  real-time  supply 
chain  is  a  dangerous  thing.”  be 
said.  "It  would  be  anarchy.” 


ly  manage  about  50%  ofa  SAN 
with  more  than  200TB  of  data 
stored  primarily  on  EMC 
Corp.‘s  Symmetrix  disk  arrays 
and  IBM's  Sharic  devices.  By 
year's  end.  Fidelity  plans  to 
use  the  sofhvaie  to  manage 
100%  of  the  networked  stor¬ 
age,  Ayotte  added. 

Fidelity  has  al¬ 
ready  been  auto¬ 
provisioning  its 
storage  devices  for 
the  past  18  months 
with  homegrown 
software;  switching 
to  a  commercial  application 
has  let  the  company  free  up 
several  systems  ardutects 
who  had  been  umiking  to 
maintain  the  in-house  technol¬ 
ogy.  said  Ayotte. 

”For  anybody  who's  got  a 
team  of  architects,  that's  the 
last  tbii%  you  v/ant  them  do¬ 
ing  full  time,”  be  said.  ”You 
want  them  looking  out  into 
the  future  and  doing  architect 
woiIl”  Ayotte  declined  to 
disclose  bow  much  Fidelity  b 
spending  to  install  the  Path- 


New  ini2Six 


The  upgraded  applications 
are  available  now,  said  12. 

The  company,  vdiich  has  re¬ 
ported  five  straight  quarterly 
losses,  in  January  acknowl¬ 
edged  that  the  SEC  had 
launched  an  informa)  inquiry 
into  the  accounting  proce¬ 
dures  it  used  in  2000  and  2001 
rC^iickUnk  36004]. » 


line  software. 

Storage  administrators  at 
Fidelity  sometimes  handle 
more  than  100  provbioning  re¬ 
quests  per  month,  which  can 
translate  into  hundreds  of 
changes  to  the  company's 
SAN.  Ayotte  said  the  IT  de¬ 
partment  saved 
hundreds  of  man¬ 
hours  on  a  monthly 
basb  by  moving 
from  a  manual 
provbioning  model 
to  the  homegrown 
application. 

Now  the  addition  of  Path- 
line  b  giving  Fidelity  the  abili¬ 
ty  to  tie  available  storage  ca¬ 
pacity  on  the  SAN  to  q>ecinc 
applications  and  then  provi¬ 
sion  the  disk  space  for  “an 
appUcatkm  instead  of  a  serv¬ 
er.”  Ayotte  said. 

Switching  to  the  packaged 
software  has  also  helped  the 
company  automate  tasks  such 
as  storage  inventory  manage¬ 
ment.  SAN  performairce  mon¬ 
itoring  and  device  configura¬ 
tion.  he  added.  I 


New  release  includes  vertical  industry 
templates,  support  for  Web  services 


Rdelity  Installs  SAN  Management  Tool 
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Sun  Server  Exec  Calls  Linux  a  ‘Friend’ 


BY  JAIKUMAR  VIJAVAN 

/n  an  interview  this  month,  Neil 
Kimo.  executive  vice  president 
of  Sun  Microsystems  Inc.’s  vol¬ 
ume  systems  product  group, 
talked  about  blade  servers,  Lin¬ 
ux  support  and  the  company’s 
low-end  server  strategy. 

How  has  Sun’s  now 
quartsriy  product- 
rile■soacheduloa^ 
foclod  your  low  end 
dtoctton?  I  think 
it’s  no  longer  just  a 
question  of  provid¬ 
ing  low-cost  hard¬ 
ware.  That’s  an 
old,  single-element 
strategy.  So  this  is  where  the 
design  of  the  Sun  Fire  blade 
[server]  platform  really  comes 
into  play.  We  gave  it  a  mix- 
and-match  environment  so 
that  [users]  can  pick  their  ar¬ 
chitectures.  If  they  want 
SPARC/Solaris  or  Soiaris/x86 
or  LinuxA86  environments, 
they  have  that  choice. 

What  is  Sun's  UnuK  itralegy?  It 

isn’t  a  competitor  to  us;  it’s  a 
friend.  Anybody  that  buys  or 
installs  Linux  means  the^re 
not  buying  [Th^ndowsl.  I  think 
you’ll  see  us  over  a  period  of 
time  go  more  and  more  to  a 
general-purpose  Linux  envi¬ 
ronment 

That’s  why  we  announced 
the  blades  with  the  mix,  match 
and  manage  environment  for 
Solaris  and  Linux.  Some  peo¬ 
ple  think  we’re  not  serious 
[about  Linux].  But  we  are 
deadly  serious. 

k  Sun  struggling  over  wlwttwr  to 
push  Solaris  or  UnuK  at  the  low 
end?  Customers  are  coming  to 
us  and  saying,  ‘Vou’ve  got  to 
continue  providing  us  with 
the  environment  that  we  have 
become  used  to  on  Solaris.” 
On  the  other  hand,  they  may 
also  be  deploying  Linux  some¬ 
where  else,  and  they  want  to 
be  able  to  get  that  horn  Suil  I 


MffINIE 

To  read  an  expanded  vemion  ot  this 
Menww.  ^  our  \Mb  site: 
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don’t  believe  we're  stru^ling 
at  all  I  think  we  have  a  very 
simple  and  very  effective  ar¬ 
chitecture  strategy. 


What  is  driving  Sun's  low-«nd 
thrust  aftar  yaars  o(  pushing  high* 
and  stuff?  I’m  on  the  second 
floor.  Every  time  I  hear  this 


question,  I  want  to  jump  out 
of  the  window.  Where  do  you 
think  we  came  from?  We  were 
a  low-end  shop  when  we  start¬ 
ed.  Yes,  we  were  supersuccess¬ 
ful  with  the  Cray  acquisition, 
and  we  have  introduced  killer 


[high-end]  products.  In  the 
meantime,  the  little  volume- 
server  business  has  continued 
to  be  a  major  element  in  the 
company.  I  think  our  siiccess 
at  the  high  end  has  kind  of 
overshadowed  [that].  I 
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Canadian  Credit  Union  Installs  Wireless  SAN  Link 


BY  LUCAS  MEARIAN 

In  one  of  the  first  projects  of  its  kind,  a 
Canadian  credit  union  this  month  said 
it  has  set  up  a  wireless  IP  nem  ork  to 


replicate  banking  data  and  other  infor¬ 
mation  from  its  primary-  data  center  to 
a  disaster  recovery  site  32  miles  away. 
Steinbach  Credit  Union  Inc.  in  Stein- 


Shorten  backups. 

Keep  information  available  to  users  with  a  StorageTek  high 
performance  library  and  the  new  LTO  Ullrium  Generation  2 
drive.  With  a  capacity  of  200GB  and  a  blistering  30MB/second 
transfer  rate,  you  can  complete  backups  in  no  time.  And  it's  fully 
read/write  compatible  with  LTO  Ultrium  Generation  1  tape 
drives,  so  it  seamlessly  integrates  with  your  existing  StorageTek 
library.  This  kind  of  capacity,  speed  and  affordability  make  the 
LTO  Generation  2  drive  right  for  any  demanding  IT  environment. 
Like  yours.  For  more  information,  visit  www.storagetek.com. 


StorageTek's  L1 80  hig^ 
performance  libr^ 


StorageTek 

Save  the  Day."" 


bach.  Manitoba,  said  it's  saving  570,000 
(Canadian)  per  month  by  using  the 
wireless  setup  instead  of  a  leased  vir¬ 
tual  private  network.  Steinbach  went 
live  in  February  with  the  wireless  link 
between  the  data  center  at  its  head¬ 
quarters  and  a  backup  facility  at  a 
branch  office  in  Winnipeg.  Manitoba. 

The  credit  union  is  using  the  wire¬ 
less  wide-area  network  to 
replicate  customer  data  stored 
in  Microsoft  SQL  Server  data- 
bases,  as  well  as  loan  origination  infor¬ 
mation.  other  banking  data,  e-mail 
messages  and  streaming  video  from 
surveillance  cameras.  About  600GB  of 
data  is  continually  being  updated  be¬ 
tween  the  two  facilities. 

Denis  Van  Dale,  network  administra¬ 
tor  at  Steinbach,  said  the  company  built 
three  radio  towers  that  are  each  more 
than  100  feet  tall,  bought  four  transmit¬ 
ters  and  installed  new  storage-area 
network  (SAN)  equipment  for  a  total 
of  about  5700,000  (Canadian).  It  also 
spent  an  unspecified  amount  of  money 
on  things  such  as  planning  and  con¬ 
sulting  services,  he  added.  Steinbach 
expects  to  get  a  return  on  its  invest¬ 
ment  within  20  months,  Van  Dale  said. 

The  wireless  connection  offers  full- 
duplex  bandwidth  of  lOOM  bit/sec.,  ac¬ 
cording  to  Van  Dale.  About  65M  bit/ 
sec.  is  reserved  for  data  replication, 
and  the  remainder  is  used  for  Internet 
connectivity,  other  data  transfers  and 
remote  data  sharing. 


Steinbach  installed  multiprotocol 
switches  made  by  Nishan  Systems  Inc. 
in  San  Jose  to  wrap  Fibre  Charuiel  data 
packets  in  IP  headers  for  transmission 
over  the  wireless  network.  Ethernet 
switches  from  Cisco  Systems  Inc.  con¬ 
vert  the  data  transmissions  between 
lOOM  bit/sec.  speeds  and  the  Gigabit 
Ethernet  rates  used  inside  the  two  data 
centers  (see  diagram). 

Proxira  Corp.  in  Sunnyvale.  Calif., 
provided  the  wireless  WAN  bridging 

■  technology,  which  includes 

built-in  data-scrambling  capa¬ 
bilities  for  encrypting  informa¬ 
tion.  The  switches  and  bridges  link  two 
disk  array's  made  by  XIOtech  Corp.  in 
Eden  Prairie,  Miim.  Steinbach  also  uses 
XIOtech’s  data  replication  software. 

Robert  Gray,  an  analyst  at  IDC  in 
Framingham,  Mass.,  said  it's  extremely 
rare  for  companies  to  use  wireless 
links  for  data  backup  and  disaster  re¬ 
covery  purposes.  Steinbach's  installa¬ 
tion  shows  how  flexible  IP  networks 
can  be,  he  said.  But.  Gray  added,  such 
setups  "could  face  interference,  degra¬ 
dation  over  distance  or  objects  such  as 
buildings  and  people  in  the  path." 

Earlier  this  month,  Steinbach  ran 
into  transmission  difficulties  when  a 
radio  station  at  the  University  of  Mani¬ 
toba  in  Winnipeg  began  broadcasting 
on  the  frequency  used  by  the  credit 
union’s  WAN.  That  added  to  the 
WAN's  data  stream,  sending  bit  levels 
above  certain  thresholds  and  causing 
network  disconnects,  Van  Dale  said. 
Proxim  resolved  the  issue  by  adjusting 
Steinbach's  frequency.  I 
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FIBRE  CHANNEl  —  100M  BH/SEC.  ETHERNET  <—  OiCABiT  CTtirRNET  — 


1)  The  data  ts  stored  on  matching 
XIOtach  disk  arrays  with  6006B 
storage  capacities. 


3)  Cisco  network  swHchos  handle  con¬ 
versions  between  Orgabil  Ethernet  and 
1(X)M  bil/sec.  Ethernet  speeds. 


2)  Nishan  storage  switches  convert 
the  data  between  Fibre  Oannel  and 
IP  formats. 


4)  ProKkn  bridges  and  Steinbach-owned 
transmission  towers  connect  the  data 
centers  via  two  16-tnile  wireless  links. 


20 


CMilTBINU 


w<ivw.computefwortd.coiTi 


Canadian  Credit  Union  Installs  Wireless  SAN  Link 


•V  LUCAS  HEARIAN 

In  one  of  the  first  protects  of  its  kind,  a 
Canadian  credit  union  this  month  said 
it  has  set  up  a  wireless  IP  networit  to 


replicate  banking  data  and  other  infor¬ 
mation  &om  its  primary  data  center  to 
a  disaster  recovery  site  32  miles  away. 
Steinbach  Credit  Union  Inc.  in  Stein- 


Shorten  backups. 


Keep  information  available  to  users  with  a  StorageTek  high 
performance  library  and  the  new  LTO  Ulthum  Generation  2 
drive.  With  a  capacity  of  200GB  and  a  blistering  SOMB/secorni 
transfer  rate,  you  can  complete  backups  in  no  time.  And  it's  fully 
read/write  compatible  with  LTO  Ultrium  Generation  1  tape 
drives,  so  it  seamlessly  integrates  with  your  existing  StorageTek 
library.  This  kirtd  of  capacity,  speed  and  affordability  make  the 
LTO  Generation  2  drive  right  for  any  demanding  IT  ertvironment 
Like  yours.  For  more  information,  visit  www.stora9etelccom. 
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bach.  Manitoba,  said  it’s  saving  $70,000 
(Canadian)  per  month  by  using  the 
wireless  setup  instead  of  a  lea^  vir¬ 
tual  private  network.  Steinbach  went 
live  in  February  with  the  wireless  link 
between  the  data  center  at  its  bead- 
quarters  and  a  backup  facility  at  a 
branch  office  in  Winnipeg,  Manitoba. 

The  credit  union  is  usii^  the  wire¬ 
less  wide-area  network  to 
replicate  customer  data  stored 
in  Microsoft  SfJL  Server  data- 
bases,  as  well  as  loan  origination  infor¬ 
mation.  other  banking  data,  e-mail 
messages  and  streaming  video  from 
surveillance  cameras.  About  600GB  of 
data  is  continually  being  updated  be¬ 
tween  the  two  facilities. 

Denis  Van  Dale,  networic  administra¬ 
tor  at  Steinbach,  said  the  company  built 
three  radio  towers  that  are  each  more 
than  100  feet  tail  bought  four  transmit¬ 
ters  and  installed  new  storage-area 
network  (SAN)  equipment  for  a  total 
of  about  $700,000  (C^anadian).  It  also 
^>eot  an  unspecified  amount  of  money 
on  things  such  as  planning  and  con¬ 
sulting  services,  he  added.  Steinbach 
expects  to  get  a  return  on  its  invest¬ 
ment  within  20  months,  Van  Dale  said. 

The  wireless  connection  offers  full- 
duplex  bandwidth  of  lOOM  bit/sec.,  ac- 
cordii^  to  Van  Dale.  About  65M  bit/ 
sec  is  reserved  for  data  replication, 
and  the  remainder  b  used  for  Internet 
connectivity,  other  data  transfers  and 
remote  data  sharing. 


Steinbach  installed  multiprotocol 
switches  made  by  Nbhan  Systems  Inc. 
in  San  Jose  to  wrap  Fibre  Channel  data 
packets  in  IP  headers  for  transmission 
over  the  wireless  network.  Ethernet 
switches  from  Cisco  Systems  Inc.  con¬ 
vert  the  data  transmissions  between 
lOOM  bit/sec.  speeds  and  the  Gigabit 
Ethernet  rates  used  inside  the  two  data 
centers  (see  diagram). 

Proxim  Corp.  in  Sunnyvale,  Calif., 
provided  the  wireless  WAN  bridging 

■  technology,  which  includes 

built-in  data-scrambling  capa¬ 
bilities  for  encrypting  informa¬ 
tion.  The  switches  and  bridges  link  two 
disk  arrays  made  by  XIOte<±  Corp.  in 
Eden  Prairie,  Minn.  Steinbach  abo  uses 
XIOtech's  data  replication  software. 

Robert  Gray,  an  analyst  at  IDC  in 
Framingham,  Mass..  said  it’s  extremely 
rare  for  companies  to  use  wireless 
links  for  data  backup  and  disaster  re¬ 
covery  purposes.  Steinbacb*s  installa¬ 
tion  shows  how  flexible  IP  netwoiks 
can  be,  be  said.  But.  Gray  added,  such 
setups  “could  face  interfer^ice.  degra¬ 
dation  over  distance  or  objects  sudi  as 
buildup  and  people  in  the  path." 

Earlier  thb  month.  Steinbach  ran 
into  transmission  difficulties  when  a 
radio  station  at  the  University  of  Mani¬ 
toba  in  Winnipeg  began  broadcasting 
on  the  fr^uency  used  by  the  credit 
union’s  WAN.  That  add^  to  the 
WAN's  data  stream,  sending  bit  leveU 
above  certain  thresholds  and  causing 
network  disconnects,  Van  Dale  said. 
Proxim  resolved  the  bsue  by  adjusting 
Steinbadi’s  frequency.  I 
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1)  The  dab  is  Stored  on  matching 
XWtodi  dWi  arrsyt  with  6006B 
storage  capacities. 
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3)  Ctaco  nahvork  swRctiM  handb  con¬ 
versions  between  Gigabit  Bhemet  and 
lOOM  bit/sec.  Ethernet  speeds. 


2)  NWm  ateraoi  iwitEhae  convert 
the  dab  between  Rbre  Channel  and 
IP  formats. 


4)  ftwdm  brldgie  and  StMwhich  awned 
tranemMen  Iowan  connect  the  dab 
centets  via  two  lOinile  wireless  links. 


Today,  if  Vm  lucky, 


Keep  bad  things  from  reaching  users  and  you'll  get  noticed  for  all  the  good  you  daOr>e  way  is  to  use  an  L5500  autonuted  tape 
library  with  Tape  Mirroring  software  for  foolproof  backup  and  restore.  Or  a  D260  disk  system  with  Remote  Volume  Mirroring 
software  so  systems  rebound  fost.  Whatever  your  solution,  well  nf>ake  sure  you  only  get  noticed  when  you  want  Learn  more 
about  this  story  and  other  ways  we  can  help  you  at  www.savetheday.com  STORACf  ff*  Save  the  Day." 
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Backing  Up  ROI 


IN  THE  FACE  OF  A  WAR  that’s  being  launched 
as  I  wTite  this,  it  seems  trivial  to  talk  about 
ROI.  And  yet,  inside  the  halls  of  cash-crunched 
corporations  nationwide,  there’s  no  greater 
battle  cry. 

You’ve  read  the  articles,  sat  through  the  panel  dis- 


cussions  and  studied  the 
mcthodoSogies  [Quick- 
Link  k2340).  You  work  it, 
you  eat  it.  you  dream  it. 

But  while  ROI  tops  every 
project  checklist  and 
turns  up  in  most  project 
pitches,  that’s  pretty 
much  where  it  stays. 

Once  a  projea  is  com¬ 
pleted.  IT  organiza¬ 
tions  go  back  and  audit 
ROI  expectations. 

Figuring  out  what  to 
put  in  those  models  —  especially 
when  working  with  major  infra¬ 
structure  projects  that  don’t  have  an 
immediate  ROI  to  speak  of  —  and 
tr>’ing  to  cost-justi^‘  finished  de¬ 
ployments  when  10  other  must-do 
projects  await  your  attention  are  the 
missing  parts  of  the  ROI  equation. 

As  Management  editor  Julia  King 
so  succinctly  puts  it.  as  much  as 
CEOs  and  CFOs  hammer  away  at  IT 
to  demonstrate  ROI.  IT  is  often 
powerless  to  do  so  without  the  busi¬ 
ness  unit's  help.  And  the  business 
side?  It  doesn’t  have  a  clue  how  to 
translate  improvements  made  possi¬ 
ble  by  IT  into  any  kind  of  IT-related 
ROI  metrics. 

The  argument  could  be  made  that 
it's  not  the  IT  managers  who  need 
executi^-e  education  to  learn  how  to 
demonstrate  ROI  and  come  up  with 
metrics;  it's  the  middle  managers 
and  heads  of  the  business  units. 

Take  Ascential  Software  Corp.'s 
customer  advisory  board,  which  is 
made  up  of  its  13  laigcst  customers 
—  companies  like  General  Motors, 
McKesson.  DHL  and  New  York 
Life.  How  to  calculate  the  ROI  at 
the  end  of  projects  and  where  to 
go  for  help  were  hot  topics  at  the 


board’s  recent  meeting. 

The  board  members 
were  pretty  clear  about 
what  they  need:  They 
need  the  business  units  to 
commit  to  the  ROI  up¬ 
front  and  to  include  the 
ongoing  costs  of  support 
and  maintenance  in  those 
calculations.  Interesting¬ 
ly,  they  want  Ascential’s 
strategic  vendors  to  lend 
a  hand  as  well,  especially 
in  those  cases  where  the 
ROI  is  intangible. 

These  ROI  postmortems  are  im¬ 
portant.  ROI  models  are.  after  all. 
expectations,  not  exact  compass 
headings.  Testing  those  assumptions 
can  help  wring  out  inefficiencies. 
The  information  gained  can  become 
part  of  the  collective  knowledge 
that’s  used  to  support  and  inform  fu¬ 
ture  project  planning.  This  benefits 
everyone. 


But  none  of  this  can  be  accom¬ 
plished  unless  the  business  units  — 
which  these  days  are  often  the  ones 
funding  the  projects  —  are  held  ac¬ 
countable  for  the  bets  they  place  on 
these  capital  investments.  As  one 
Ascential  customer  notes.  “Business 
owners  have ...  to  accept  some  re¬ 
sponsibility  for  executing  on  the 
new  data  and  achieving  some  busi¬ 
ness  impact." 

If  upper  management  is  really  se¬ 
rious  about  wanting  to  infuse  IT 
projects  with  more  economic  justifi¬ 
cation.  it  must  mandate  the  coopera¬ 
tion  that  IT  needs  to  produce  and 
support  those  ROI  numbers.  The 
whole  exercise  has  to  be  built  on  a 
shared  understanding  of  the  costs 
and  benefits  that  the  business  unit 
will  extract  from  the  IT  investment, 
says  IT  management  consultant  and 
Compuferworld  columnist  John 
Berry  (QuickLink  s30001. 

I  think  Ascential's  advisory  coun¬ 
cil  is  onto  something.  As  Berry  says, 
this  kind  of  teamwork  should  hap¬ 
pen  if  IT  is  the  fabric  of  the  busi¬ 
ness.  “All  these  islands  of  responsi¬ 
bility.  prerogative  and  control  sim¬ 
ply  can’t  exist  in  a  well-functioning 
organization  where  there  is  the  need 
and  desire  for  economic  value  out  of 
the  IT  investment"  Amen  to  that.  8 
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PIMM  FO.X 

P2P  for 
Grown-up® 

IT'S  EASY  to  understand 
why  peer-to-peer  comput¬ 
ing  gets  overlooked  in  the 
enterprise.  It’s  viewed  primar¬ 
ily  as  a  way  to  use  disparate 
resources,  but  with  loads  of  extra  se¬ 
curin'  management  hassles. 

Yet  P2P  is  more  than  kids  swapping 
bootlegged  music  on  Napster.  Inside 
the  enterprise.  P2P  can  encompass 
collaboration  and  communication  to 
and  from  any  networked  device,  any¬ 
where.  And  now  P2P  tools  are  matur¬ 
ing  to  a  point  where  you  can  knit  to¬ 
gether  your  network  without  elimi¬ 
nating  safeguards  and  supervision. 

For  example.  Sun  Microsystems' 
open-source  P2P  technology,  dubbed 
JXTA.  is  a  development  standard  ca¬ 
pable  of  supporting  initiatives  for  lap¬ 
tops.  ceil  phones.  PDAs  and  just  about 
any  digital  device  or 
sensor. 

JXTA  eliminates 
interoperability 
roadblocks.  That 
means  that  adding 
chat  or  directory 
look-up  features  to 
different  devices 
doesn't  require  a 
rewrite  of  code.  By 
offering  standard 
protocols.  JXTA 
makes  possible  a 
P2P  community 

whose  members  might  —  if  they’re 
thoughtful  enough  —  create  a  devel¬ 
opment  environment  that  crosses  lan¬ 
guages  and  devices.  There  are  already 
JXTA  implementations  in  C.  Java,  Perl. 
Python  and  Cs  for  .Net  that  let  you  do 
device  or  service  discovery.  More  are 
needed. 

I  think  there  are  three  areas  in 
which  P2P  might  be  used  inside  com¬ 
panies.  Hie  first  is  in  content-deliveiy 
networks.  Rather  chan  making  a  call 
on  a  central  server  for  each  query,  it 
may  be  faster  and  cheaper  to  fetch 
data  from  a  device  that's  already 
cached  the  information.  Why  go  to  a 
central  server  to  view  the  CEO’s  me¬ 
dia  presentation  ikiien  you  can  get  it 
from  someone  in  your  depanment 
who  has  already  viewed  it? 

Second,  a  class  of  real-time  collabo¬ 
ration  and  workgroup  applications 
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Backing  Up  ROI 


IN  THE  FACE  OF  A  WAR  that’s  being  launched 
as  I  write  this,  it  seems  trivial  to  talk  about 
ROI.  And  yet,  inside  the  halls  of  cash-crunched 
corporations  nationwide,  there’s  no  greater 
battle  cry. 

You’ve  read  the  articles,  sat  through  the  panel  dis- 


otssions  and  studied  the 
methodologies  [Quick* 

Link  k2340l.  You  work  h, 
you  eat  h,  you  dream  it. 

But  while  ROI  tops  every 
project  checklist  and 
rums  up  in  most  project 
pitches,  that's  pretty 
much  where  it  stays. 

Once  a  project  is  com¬ 
pleted,  few  IT  organiza¬ 
tions  go  back  and  audit 
ROI  expectations. 

Figuring  out  what  to 
put  in  those  models  —  especially 
when  working  with  major  infra¬ 
structure  projects  that  don’t  have  an 
immediate  ROI  to  speak  of  —  and 
trying  to  cost-justify  finished  de¬ 
ployments  udien  10  other  must-do 
projects  await  your  attention  are  the 
missing  parts  of  the  ROI  equatioa 

As  Management  editor  Julia  King 
so  succinctly  puts  it.  as  much  as 
CEOs  and  CFOs  hammer  away  at  IT 
to  demonstrate  ROL  IT  is  oflen 
powerless  to  do  so  without  the  busi¬ 
ness  unit’s  help.  And  the  business 
side?  It  doesn’t  have  a  clue  how  to 
translate  improvements  made  possi¬ 
ble  by  IT  into  any  kind  of  IT-related 
ROI  metrics. 

The  argument  could  be  made  that 
it’s  not  the  IT  managers  who  need 
executive  education  to  learn  how  to 
demonstrate  ROI  and  come  up  with 
metrics;  it’s  the  middle  managers 
and  heads  of  the  business  units. 

Take  Ascential  Software  Corp.'s 
customer  advisory  board,  which  is 
made  up  of  its  13  largest  customers 
—  companies  like  General  Motors, 
McKesMO.  DHL  and  New  York 
Life.  How  to  calculate  the  ROI  at 
the  end  of  projects  and  where  to 
go  for  help  were  hot  topics  at  the 


board's  recent  meeting. 

The  board  members 
were  pretty  dear  about 
what  they  need:  They 
need  the  business  units  to 
commit  to  the  ROI  up¬ 
front  and  to  include  the 
ongoing  costs  of  support 
and  maintenance  in  those 
calculations.  Interesting¬ 
ly,  they  want  Ascential’s 
strategic  vendors  to  lend 
a  hand  as  weU,  especially 
in  those  cases  where  the 
ROI  is  intangible. 

Hiese  ROI  postmortems  are  im¬ 
portant.  ROI  models  are,  after  all. 
expectations,  not  exact  compass 
headings.  Testing  those  assumptions 
can  help  wring  out  inefndencies. 
The  information  gained  can  become 
part  of  the  collective  knowledge 
that's  used  to  support  and  inform  fu¬ 
ture  project  planning.  This  benefits 
everyone. 


But  none  of  this  can  be  accom¬ 
plished  unless  the  business  units  — 
which  these  days  are  often  the  ones 
funding  the  projects  —  are  held  ac¬ 
countable  for  the  bets  they  place  on 
these  capital  investments.  As  one 
Ascential  customer  notes,  “Business 
owners  have ...  to  accept  some  re¬ 
sponsibility  for  executing  on  the 
new  data  and  achieving  some  busi¬ 
ness  impact." 

If  upper  management  is  really  se¬ 
rious  about  wanting  to  infuse  IT 
projects  with  more  economic  justifi¬ 
cation.  it  must  mandate  the  coopera¬ 
tion  that  IT  needs  to  produce  and 
support  those  ROI  numbers.  The 
vriiole  exercise  has  to  be  built  on  a 
shared  understanding  of  the  costs 
and  beneHts  that  the  business  unit 
will  extract  from  the  FT  investment, 
says  IT  management  consultant  and 
Computerworld  columnist  John 
Berry  [Quicklink  s3000]. 

I  think  Ascential's  advisory  coun¬ 
cil  b  onto  somethii^.  As  Berry  says, 
thb  kind  of  teamwork  should  hap¬ 
pen  if  IT  is  the  fabric  of  the  busi¬ 
ness.  “All  these  blands  of  responsi¬ 
bility.  prerogative  and  control  sim¬ 
ply  can’t  exbt  in  a  well-functioning 
organization  where  there  b  the  need 
and  desire  for  economic  value  out  of 
the  IT  investment."  Amen  to  that.  I 
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PIMM  FOX 

P2P  for 
Grown-ups 

IT’S  EASY  to  understand 
why  peer-to-peer  comput¬ 
ing  gets  overlooked  in  the 
enterprise.  It’s  viewed  primar¬ 
ily  as  a  way  to  use  disparate 
resources,  but  with  loads  of  extra  se¬ 
curity  and  management  hassles. 

Yet  P2P  b  more  than  kids  swapping 
bootlegged  music  on  Napster.  Inside 
the  enterprise,  P2P  can  encompass 
collaboration  and  communication  to 
and  from  any  networked  device,  any¬ 
where.  And  now  P2P  toob  are  matur¬ 
ing  to  a  point  where  you  can  knit  to¬ 
gether  your  network  without  elimi¬ 
nating  safeguards  and  supervbion. 

For  example,  Sun  Microsystems’ 
open-source  P2P  technology,  dubbed 
JCTA.  b  a  development  standard  ca¬ 
pable  of  supporting  initiatives  for  lap¬ 
tops.  cell  phones.  PDAs  and  just  about 
any  digital  device  or 
sensor. 

JXTA  eliminates 
interoperability 
roadblocks.  That 
means  that  adding 
chat  or  directory 
look-up  features  to 
different  devices 
doesn’t  require  a 
rewrite  of  code.  By 
offering  standard 
protocob.  JXTA 
makes  possible  a 
P2P  community 
whose  members  might  —  if  they're 
thoughtful  enough  —  create  a  devel¬ 
opment  environment  that  crosses  lan¬ 
guages  and  devices.  There  are  already 
JXTA  implementations  in  C,  Java,  PerL 
Python  aind  C#  for  .Net  that  let  you  do 
device  or  service  discovery.  More  are 
needed. 

I  think  there  are  three  areas  in 
which  P2P  might  be  used  inside  com¬ 
panies.  The  first  b  in  content-delivery 
networks.  Rather  than  making  a  caU 
on  a  central  server  for  each  query,  it 
may  be  faster  and  cheaper  to  fetch 
data  from  a  device  that’s  already 
cached  the  information.  Why  go  to  a 
central  server  to  view  the  CEO's  me- 
db  presentation  when  you  can  get  it 
from  someone  in  your  department 
who  has  already  viewed  it? 

Second,  a  class  of  real-time  collabo¬ 
ration  and  workgroup  applications 
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Are  you  wrestling  with  storage  and  data  managem^it  in  today's  where  IT  Managers  and  professionals  get  an  SNIA-erxIorsed 

challenging  business  dimate?  Is  your  infrastructure  under  increased  education,  a  hand's  on  view  of  the  world's  only  SNlA-sanctioned 
pressure?  Are  business  continuity  worries  keeping  you  up  at  night?  Interoperability  and  Solutions  Demo,  and  access  to  legions  of  peers. 
Then  attend  Storage  Networking  World  (SNW).  the  only  conference  experts  and  solutions  you  won't  find  anywhere  else. 


Register  today  to  attend  the 
premier  event  on: 

•  Storage  Managemmt  ^ 
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Hear  Real-World  User 
Implementation 
Case  Studies 

At  Storage  Networking  World,  youl 
see  IT  managers  and  professionals 
describe  how  they  implemented  key 
storage  technologies  in  today’s 
world.  YouTI  learn  from  their  valuable 
opportunity  to  network  with  them. 


Get  an  SNIA-Endorsed  Education 

•  A  Primer  delivering  basic  storage 
concepts,  terminology  and  busi¬ 
ness  applications. 

•  Exclusive  SNIA'produced  and 
Delivered  Tutorial  Sessions,  offer¬ 
ing  immediately  implementable 
tips,  tools  and  techniques  that  cover: 

•  Voice  of  the  User  and  Virtualization 

•  Disaster  Recovery.  Backup/Restore  and  High 
Availability  SolutioRS 

•  Securing  and  Managing  Your  Storage  Networks 

•  Focus  on  Networking  Your  Storage 

•  Focus  on  Storage 

See  the  World's  Largest  Storage 
Industry  Expo 


YouTI  participate  In  live  demonstra¬ 
tions  and  meet  exhibiting  compa¬ 
nies  specializing  in  the  latest  data 
management  and  storage  network¬ 
ing  products  and  services. 


For  more  information  and  to  register, 
visit  WWW.snwusa.com/expo  or  call  1-800-883-9090 

(1-508-820-8159) 
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Application  for  Conference  Registration 


TO  REGISTER: 

•  Fax  this  form  to  508*626*8524 

•  Ch  register  oriline  at  www.siiiMusa.conVexpo 

•  You  wffl  receive  a  confirmation  via  email 


QUESTIONS? 

•  Cal:  our  Customer  Service  Line  at  800*683*9090 

•  Emat  srwwegtoinputBrvwridxom 


Options  for  IT  End'Users* 

Pre-Registration 
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On*Site  Registration 

(alter  AonITtih) 

General  Conletence  Package  (Apr.  15, 16): 
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□  $1,245 

Total  4-day  Package  (Apr.  14. 15. 16. 17);  □  $1,490  □$1,690 
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Registration  Information:  (This  section  must  be  completed  in  order  to  process  your  application) 


Namp* 
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makes  it  possible  to  share  files,  invite 
new  members  and  create  new  work* 
spaces  easily  on  the  fly.  People  should 
be  able  to  work  on  the  same  diagram, 
chat  in  real  time  and  engage  their 
peers  remotely  without  added  stress 
to  IT  infrastructure. 

Finally  —  and  this  is  still  more  hope 
than  reality  —  a  good  P2P  architecture 
should  let  wireless  encrypted  data 
flow  back  and  forth  between  mobile 
users  for  things  such  as  group  e*mail 
lists,  phone  directories  and  schedules. 
Changes  can  be  synced  when  one  user 
gets  tethered  to  the  central  nervous 
system. 

There  have  already  been  1  million 
downloads  of  pCTA.  which  comes  with 
a  pretty  good  open-source  license  that 
requires  no  royalty,  no  givebacks  for 
fixes  and  changes,  and  no  restrictions 
on  the  redistribution  of  any  set  of  de¬ 
veloped  protocols. 

Perhaps  this  will  spur  some  P2P 
creativity.  • 

DANIEL  J.  WEITZNER 

The  DMCA 
Jury  Is  In 

Legislators.  Holly¬ 
wood  lobbyists,  IT  in¬ 
dustry  heavyweights 
and  law  professors  have  been 
battling  over  how  copyright 
law  should  apply  to  the  Internet. 
While  these  ml^ty  forces  struggle 
over  what  the  legal  and  technic^ 
landscape  should  look  like,  we  may 
learn  something  about  that  future 
from  what  happened  when  a  jury 
weighed  In  on  the  practical  bound¬ 
aries  of  copyright  law. 

Higb-stakes  lobbying  and  court  bat¬ 
tles  brought  us  a  law  called  the  Digi¬ 
tal  MUlcnnium  Copyright  Act 
(DMCA),  which  both  extends  copy¬ 
right  protection  to  digital  works  aiKl 
makes  it  a  crime  to  use  or  distribute 
tools  that  help  to  break  the  copyright 
protection  of  digital  works.  These 
'anticircumvention”  provisions  have 
been  controversial  both  with  civil  lib¬ 
erties  advocates,  who  see  them  as  re¬ 
stricting  free  speech,  and  with  some 
people  in  the  computer  industry,  who 
worry  that  they  will  regulate  out  of 
existence  basic  system  functions  such 
as  cut  and  paste.  The  debate  is  fu* 
from  over,  but  whatever  the  result,  it 
will  certainly  have  a  fundamenul  im¬ 
pact  on  the  kinds  of  computing  tools 


available  to  the  enterprise. 

The  technology  for  anti¬ 
circumvention  has  also 
been  quite  controversial. 

Should  computing  plat¬ 
forms  in  the  enterprise  and 
the  home  be  built  to  assure 
that  it's  impossible  to  copy 
documents,  songs  or  im¬ 
ages  unless  we  have  the  ex¬ 
plicit  permission  of  (he 
copyri^t  holders?  While 
this  might  help  reduce  the 
widespread  infringement  of 
music  files,  what  effect 
would  it  have  on  the  flexi¬ 
bility  of  basic  enterprise 
computing?  Hem  about  the 
free  flem  of  information  — 
the  driving  engine  of  the 
Internet  and  the  key  to  pro¬ 
ductivity  ifflprovement.s 
brought  about  by  net- 
worieed  computing? 

Still,  if  computers  don't  enforce 
copyrights  on  digital  works,  will  the 
entertainment  industry  suffer  irrevo¬ 
cably? 

For  the  first  time  in  this  debate,  a 
federal  jury  decided  on  this  con¬ 


tentious  question.  They 
were  asked  whether  soft¬ 
ware  that  breaks  eBook 
copy  protection  codes  vio¬ 
lates  the  DMCA.  In  consid¬ 
ering  crinunal  charges  lev¬ 
eled  against  a  Russian  soft¬ 
ware  company  that  makes 
software  to  break  the  copy 
protection  built  into 
eBo«:^  the  jury,  in  a  feder¬ 
al  court  in  San  lose,  found 
that  the  sofrivare  isn't 
criminal  because  there  are 
legitimate  reasons  to  allow 
users  to  make  copies  of  in¬ 
formation  in  eBoc^  format. 
In  the  view  of  this  jury,  at 
least,  it's  not  right  to  im¬ 
pose  restrictive  tools  (ki  all 
users  just  to  catch  a  few 
lawbreakers. 

This  decision  calls  into 
question  the  tough  provisions  enacted 
^  legislators  all  around  the  world.  Or¬ 
dinary  folks,  it  seems,  are  much  less 
inclined  to  throw  people  in  jail  in  or¬ 
der  to  assure  copyright  holders  that 
their  works  will  be  perfectly  secure  on 
the  Internet. 


Whether  or  not  you  agree  with  the 
jury's  view,  it  does  suggest  that  it's 
time  to  rethink  the  heavy-duty  lock- 
and-key  approach  that  many  digital 
r^ts  management  systems  are  taking 
to  protecting  copyrighted  works. 

The  dramatic  rise  (and  foil)  of  ser¬ 
vices  like  Napster  have  focused  law¬ 
making  and  ledinical  attention  on  the 
15-year-old  who  may  care  more  about 
getting  the  latest  music  than  the 
virtues  of  copyright.  But  in  building 
systems  designed  to  lock  out  the  urges 
of  teenagers,  we've  forgotten  the  vast 
majority  of  users,  especially  in  the 
commercial  and  academic  worlds, 
who  respect  copyright  law. 

Although  in  some  cases  heavy-duty 
technologies  are  in  order,  in  this  case 
perhaps  (he  jury  was  ri^L  We  need 
techiralogy  to  make  it  easier  for  law- 
abiding  users  to  continue  to  respect 
copyri^ts,  Qot  more  heavy-handed 
protection  in  general-purpose  com¬ 
puting  platforms.  > 
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Can  the  Rhetoric  and  the  Cheap  Shots 

ItNASvanrnSAPPOMTEDIo  |  expressions  of  poHbcal  bias  that  are 
read  Fatncia  Kaafa's  artete  on 
the  Opinion  page  o4  he  March  X) 
issue  of  CbrriDuMtoadif  (QuickC 
36857].  The  bde  of  the  arheie. 

IreqnQPhotM.*  and  he  hxfflh  sen¬ 
tence. ‘As  the  Bush  administralion 
marches  resolutety  into  he  stiff 
wnd  of  ptobri  disapproval  ...*  are 


urewteome  and  inappropriate  tor 
Conipul&worid 

This  cheap  shot,  unworthy  of  he 
qualityandinBswnofCornpiMr- 
HorU.wes$neal«dvikianoher- 
toise  good  articfe  iul  of  sold  advice 
tor  IT  protessionafs  trying  to  cope 
nwh  an  tncreastfigly  dangerous  and 


‘Onshore  Offshore’ Is  Better  Way  to  Oo 

I’MSTAimMTOBELCWIhal 
the  khd  of  offshore  otdsoucino 
described  in  he  Feb.  17  article 
‘Companies  Expected  to  Boost  Off¬ 
shore  Outsourcing*  (OutekUnk 


36377)  la  a  bad  Idea  -  and  maibe 
downright  dumb. 

R's  not  hard  to  figure  out  why 
the  appette  tor  hese  services  6 
growlno.bullhereareblgrBlcs.in- 
dudrig  nuclear  wer  between  Inde 
and  Pakistan. 

But  Tve  tong  been  In  favor  of 
whalical'onshoreciffshore'oui' 
sourang.  in  which  hese  same  jobs 
areoutsourcedlohigh-unemploy- 
ment  pockets  in  he  US  where  he 
same  fT  skis  can  be  deveioped 
Vteges  wi  be  hiiher  than  in  hdB 


but  sM  considarabhf  lower  han  in 
major  metro  aress.  This  has  been 
done  in  a  handU  of  pieces  in  the 
U.S.  One  of  he  most  recent  exam¬ 
ples  B  lAkshinolon's  Onter  10 
BridgetheOigiteiDivideandibnr- 
ai  leleworfc  program  al  Washmgton 
Stale  Uimereity.  This  land  of  pro¬ 
gram  keeps  he  work  incames 
and  ski  devetopmenl  in  he  U5. 
achievescostsavingsBndhelpsin- 
sufaie  U.&  errtofoyeis  from  the  rde 
haf  are  part  of  any  ntemabonal 
business  deahngs  wih  deMopmg 
cotnines. 

QiL6edM 

Prestdmr.  GU  Gordon  Asson- 
ates,  Monmouth  Junction,  NJ^ 
^@fflgordofuom 


isicsrtainwDrtd.Sarfy.il6anunn* 
famed  cheap  shot  as  wakfliedB- 
apprcnol  Keefe  speaks  of  6  not 
even  dose  to  global.  A  signihcanl 
portion  of  he  ArahAstamc  world 
supports  U.S.  nlervenhon.  Her 
stafaneni  hat  he  topR  of  WB 
‘hangs heavy  .. ckjuiingconvBi- 
satnn.  darkerwig  doorways' B 
largefy  maccurale  on  the  domasttc 
tronlTheseiiousnessandsamber- 
ness  of  he  subject  does  not  imply 
naliorNwdetaaranddepression.ln- 
deed,  merfca  polls  todicate  SB'^b- 
eO^ofAmencansfevormitaryin- 
terverhon. 

Bui  my  purpose  here  is  not  to 
defend  he  currerfl  adnwieJiattori. 
it's  10  poM  out  an  error  in  judg¬ 
ment,  taste  end  tacts  n  one  of  my 
fflorevefuedjoivTBls. 

EvervoneBenMedtoheeapn- 
ion.  expressed  in  an  aopropnafe 
venue.  Lafs  not  taint  Compuier- 
NoflffwihimoproonateandB- 
stDpcirtedrheterto 
TknDala 

dodcomas.  Ore. 


Saving 

FRMRIuyiSNlthenaionhe 
head  regardhg  he  amount  of  IT 


work  hal  reqms  "tece  ttma*  w«h 
business  people  rOffshore  Facr 
off.'Qucklj*  36668]. 

N  ff  departments  are  trtey  gong 
10  be  niegral  in  redesvwig  (and 
redekreng)  business  processes,  we 
need  to  become  boh  wshle  and 
vocal  n  al  areas  of  the  business. 
Thai  means  aflendmg  more  of 
hose  meehngs  haf ‘never  appbecT 
lo  IT before 

Besxles.  if  no  one  ever  sees  he 
ff  peopte  arid  everything  B  wortong 
irM  people  vwi  start  to  wonder  why 
they're  paying  so  nuch  fa  iS  whan 
It  doesn't  look  Bte  we  do  arryhmg. 
Jerry  Shwan 

IT  nuxnoger.  New  VbHc 
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makes  it  possible  to  share  files,  invite 
new  members  and  create  new  work¬ 
spaces  easily  on  the  Hy.  People  should 
be  able  to  work  on  the  same  diagram, 
chat  In  real  time  and  engage  their 
peers  remotely  without  added  stress 
to  IT  infrastructure. 

Finally  —  and  this  is  still  more  hope 
than  reality  —  a  good  P2P  architecture 
should  let  wireless  encrypted  data 
flow  back  and  forth  between  mobile 
users  for  things  such  as  group  c-mail 
lists,  phone  directories  and  schedules. 
Changes  can  be  synced  when  one  user 
gets  tethered  to  the  central  nervous 
system. 

There  have  already  been  1  million 
downloads  of  fXTA,  which  comes  with 
a  pretty  good  open-source  license  that 
requires  no  royalty,  no  givebacks  for 
fixes  and  changes,  and  no  restrictions 
on  the  redistribution  of  any  set  of  de¬ 
veloped  protocols. 

Perhaps  this  will  spur  some  P2P 
creativity,  t 

DANIEL  I.  WEITZNER 

The  DMCA 
Jury  Is  In 

Legislators,  Holly¬ 
wood  lobbyists,  IT  in¬ 
dustry  heavyweights 
and  law  professors  have  been 
battling  over  how  copyright 
law  should  apply  to  the  Internet. 

While  these  mighty  forces  struggle 
over  what  the  legal  and  technical 
landscape  should  look  like,  we  may 
Icam  something  about  that  future 
from  what  happened  when  a  jury 
weighed  in  on  the  practical  bound¬ 
aries  of  copyright  law. 

High-stakes  lobbying  and  court  bat¬ 
tles  brought  us  a  law  called  the  Digi¬ 
tal  Millennium  Copyright  Act 
(DMCA),  which  both  extends  copy¬ 
right  protection  to  digital  works  and 
makes  it  a  crime  to  use  or  distribute 
tools  that  help  to  break  the  copyright 
protection  of  digital  works.  These 
’’anticircumveotioD”  provisions  have 
been  controversial  both  with  civil  lib¬ 
erties  advocates,  who  see  them  as  re¬ 
stricting  free  speech,  and  with  some 
people  in  the  computer  industry,  who 
worry  that  they  will  regulate  out  of 
existence  basic  system  functions  such 
as  cut  and  paste.  The  debate  is  far 
from  over,  but  whatever  the  result,  it 
will  certainly  have  a  fundamental  im¬ 
pact  on  the  kinds  of  computing  tools 


available  to  the  enterprise. 

The  technology  for  anti- 
circumvention  has  also 
been  quite  controversial. 

Should  computing  plat¬ 
forms  in  the  enterprise  and 
the  home  be  built  to  assure 
that  it's  impossible  to  copy 
documents,  songs  or  im¬ 
ages  unless  we  have  the  ex¬ 
plicit  permission  of  the 
copyright  holders?  While 
this  might  help  reduce  the 
widespread  infringement  of 
music  files,  what  effect 
would  it  have  on  the  flexi¬ 
bility  of  basic  enterprise 
computing?  How  about  the 
free  flow  of  information  — 
the  driving  engine  of  the 
Internet  and  the  key  to  pro¬ 
ductivity  improvements 
brought  about  by  net¬ 
worked  computing? 

Still,  if  computers  don't  enforce 
copyrights  on  digital  works,  will  the 
entertainment  industry  suffer  irrevo¬ 
cably? 

For  the  first  time  in  this  debate,  a 
federal  jury  decided  on  this  con¬ 


tentious  question.  They 
were  asked  whether  soft¬ 
ware  (hat  breaks  eBook 
copy  protection  codes  vio¬ 
lates  the  DMCA.  In  consid¬ 
ering  criminal  charges  lev¬ 
eled  against  a  Russian  soft¬ 
ware  company  that  makes 
software  to  break  the  copy 
protection  built  into 
eBooks,  the  jury,  in  a  feder¬ 
al  court  in  San  {ose.  found 
(hat  (he  software  isn't 
criminal  because  there  are 
legitimate  reasons  to  allow 
users  to  make  copies  of  in¬ 
formation  in  eBook  format. 
In  the  view  of  this  jury,  at 
least,  it's  not  right  to  im¬ 
pose  restrictive  tools  on  all 
users  just  to  catch  a  few 
lawbreakers. 

Thb  decision  calls  into 
question  (he  tough  provisions  enacted 
by  legislators  all  around  the  world.  Or¬ 
dinary  folks,  it  seems,  are  much  less 
inclined  to  throw  people  in  jail  in  or¬ 
der  to  assure  copyright  holders  that 
their  works  will  be  perfectly  secure  on 
the  Internet. 


Whether  or  not  you  agree  with  the 
jury’s  view,  it  docs  ?*uggcst  that  it's 
time  to  rethink  the  heavy-duty  lock- 
and-key  approach  (hat  many  digital 
rights  management  systems  are  taking 
to  protecting  copyrighted  works. 

The  dramatic  rise  (and  fall)  of  ser¬ 
vices  like  Napster  have  focused  law¬ 
making  and  technical  attention  on  the 
15-year-old  who  may  care  more  about 
getting  the  latest  music  than  the 
virtues  of  copyright.  But  in  building 
systems  designed  to  lock  out  the  urges 
of  teenagers,  we've  forgotten  (he  vast 
majority  of  users,  especially  in  the 
commercial  and  academic  worids. 
who  respect  copyright  law. 

Although  in  some  cases  heavy-duty 
technologies  arc  in  order,  in  this  case 
perhaps  the  jury  was  right.  VW*  need 
technology  to  make  it  easier  for  law- 
abiding  users  to  continue  to  respect 
copyrights,  not  more  heavy-handed 
protection  in  general-purpose  com¬ 
puting  platforms.  I 
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uncertamwortd-Sady.Aeanunin- 
tormedcheapshofaswelTheiks- 
approval  Keele  speaks  of  IS  not 
even  close  to  global  A  significani 
portico  ot  the  Arab/Hlamic  world 
supports  US  mlervention  Her 
statement  that  the  topic  of  war 
“hangsheavy.  .douding conver¬ 
sation.  darkening  doorway' « 
largely  ^accurate  on  the  domestic 
front  Thesenousnessandsomber- 
ness  of  the  subject  does  not  ntply 
nationwide  fear  and  depressmn.  In¬ 
deed,  media  pols  wkcale  50^ 
66%  of  Americans  iavor  nHhtary  m- 
lerventnn 

Bui  my  pupose  here  IS  not  to 
defend  the  current  admmstration 
tfs  to  point  oul  an  error  n  judg¬ 
ment,  taste  and  tads  «i  one  of  my 
more  valued  foumats 

Everyone  IS  entided  to  iheir  opin¬ 
ion,  expressed  m  an  appropriate 
venue.  Let's  not  lamt  Contpule/- 
wonid  with  mappropnate  and  ■- 
supported  ihetonc 
TknOale 
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Saving  Rue 

Frank  HAYES  Nt  the  nail  on  the 
head  regankng  the  amount  of  fT 


work  tfwt  retwres  *face  tane' vHih 
business  people  (“Offdiora  Face- 
off.' Ouddjnk  36668] 

H  IT  departments  are  truly  gong 
to  be  mtegral  n  redesqrung  (and 
redefnng)  business  processes,  we 
need  to  become  both  visRile  and 
vocal  m  al  areas  of  the  business 
That  means  attending  more  of 
those  meelmgs  that  'never  apoketT 
to  IT  before 

Besides,  d  no  one  ever  sees  the 
fT  people  and  everythmo  fi  workng 
fme.  peopki  wdl  start  to  wonder  why 
they're  paying  so  nudi  tor  us  when 
R  doesn't  look  like  we  do  anydvng 
Jerry  Simon 
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For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cache,  the  post-relational  database. 

What  makes  Cache  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don’t  require  h'equent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cache 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the 
largest  hospitals.  Cach^  is  so  reliable,  it’s  the  world’s 
leading  database  in  healthcare  -  and  it  powers 
enterprise  applications  in  financial  services, 
government  and  many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
tofourmiUionu«rsin  InterSystems/- 

88  countries.  Cach^  is  iji  k  IT 

available  for  Windows,  t  I  A I  UL 
OpenVMS,  Linux  and  CLfC' 

major  UNIX  platforms.  Make  Applications  Faster 


Download  a  full^functional  version  of  Cache  or  request  it  on  CD  fi)r  free  at  www.lnterSystems.com/t)ost-relational 
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HANDS-ON  REVIEWS 

Mcrosoft’s  Suite  Dreams 

The  enhancements  to  Outkx>k  are  enough 
to  make  IT  managers  consider  an  upgrade 
to  Office  2003,  ai»d  there  are  plenty  of  oth¬ 
er  new  and  improved  features  in  the  suite, 
says  reviewer  Russell  Kay.  PNb>  30 


FUTURE  WATCH 

Smart  Dust 

Tiny  wireless  sensors  that  can 
detect  everything  from  li^t  to 
vibrations  could  change  manu¬ 
facturing.  medicine  and  even 
the  military.  PlQA  32 


SECURITY  MANASER'S  JOURNAL 

Insecure  Servers 
Suffer  bna^  Problem 

A  good  security  policy  and  solid  technology 
fail  to  protect  servers  when  administrators 
take  shortcuts  around  carefully  designed 
procedures  for  updating  them.  PaQl  34 


H. 


1*^^  ”^^HEN  WEB-BASED  self-service 

^  /  is  good,  it’s  really  good.  Cus- 

^  /  tomer  satisfoction  soars  and 

^  ^  /  call  center  costs  plummet  as 

m/  customers  answer  their  own 

T  T  questions,  enter  tbdr  own 
credit  card  numbers  and  change  their  own  pass¬ 
words  without  expensive  live  help. 

But  when  Web-based  self-service  is  bad.  if  s  really 
bad.  Frustrated  custtmieis  click  to  a  competxtf^s  site 
or  Hial  tq)  your  call  center  —  meaning  you've  paid  for 
both  a  self-service  Web  site  and  for  a  call 
center,  and  the  customer  is  still  unhappy. 

Greeting  self-service  users  vnth  a  con¬ 
fusing  menu  of  options  or  asking  them 
questions  they  can't  answer  is  a  sure  way 
to  force  them  to  call  a  help  center.  For  example, 
when  ATScT  Wireless  Services  Inc.  be^  rt^ling  out 
its  new  hi^i-bandwidth  wireless  networks,  its  self- 
service  Web  she  required  customers  to  say  whether 
their  pbcmes  used  the  older  Tune  Division  Multiple 
Access  (TDMA)  network  or  the  newer,  third-genera¬ 
tion  networic.  Most  pe<q>le  didn't  know  which  net¬ 
work  they  used,  oo^  vrhich  calling  plan  they  had 
signed  up  for,  says  Scott  CantreU.  e-business  IT  pro¬ 
gram  manager  at  ATScT  Wireless.  So  ATScT  re¬ 
designed  the  site  so  the  customer  fost  enters  his  user 
ID  and  password,  "and  the  application  automatically 
sends  you  to  the  rig^  fWeb]  site.”  Cantrell  says. 

According  to  Gartner  Inc.,  more  than  a  third  of  all 
customers  or  users  who  initiate  queries  over  the 
Web  eventually  end  up  calling  to  get  their  questions 
answered.  And  altboi^  health  insurers  have  busily 
rolled  out  self-service  applications  to  help  policy¬ 
holders  with  daiiTK  questions.  Che  "great,  great  ma- 
fority”  transactions  still  go  through  a  call  center, 
says  lohnDistefano.  national  leader  <rf  IT  sohitioos 
in  Cap  Gemini  Ernst  &  Young’s  paytw  practice. 
Whether  a  self-service  ^>|HicatiOQ  is  aimed  at  ex- 
terniiti  customers  or  internal 
^  users  such  as  employees,  the  keys 
■  /  to  success  remain  the  same:  under- 

H  /  standing  «here  self-service  can  save 

H  /  the  most  money,  building  BexRnlity 

H  into  an>ticatioointerfoces  and  busi- 

y  ness  rules  so  the  site  can  be  donged  as 
/  xteedecL  and  setting  aside  money  and 
time  for  maiittaining  the  site. 
Knowii^whidi  problems  generate  calls 
to  e3q>ensive  staffers  is  the  friA  step  to  finding  out 
where  tiie  greatest  potential  savings  lie  and  vdiich 
costly  integration  work  is  worth  doing,  according  to 

Continued  on  pcse  28 
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The  key  to  successful 
self-service  appicalions  is 
understandmg  exactly  what 
users  need  and  buMkig  in 
flexl)ity  for  change. 
ByRobertLSch^ 


Microsoft 


{'on/iVjut’d  tram  pti^f 

h*rrcsuT  Kcsc.ifv'h  Int'-  an^lysi  Bruce  Tcnikin.  Syra¬ 
cuse  University  in  New  Y<*rk.  for  e\.tmrlc,  held  puhlic 
forums  on  the  topic  in  the  spring  of  20(>l  K-forv  giving 
students  online  acct*ss  to  information  such  as  class 
siheduli's  and  the  status  tif  tuition  payments,  riays 
t.ary  MiSJinnis.  director  of  client  service's  at  the  uni 
versity’s  computing  and  media  services  department 

Companies  can  learn  a  lot  about  customer  iK*eds 
by  analyzing  calls  coming  into  their  call  centers,  says 
Temkin.  such  as  how  many  times  customers  call  to 
dispute  a  single  phone  call  on  their  bills  vs.  how 
many  times  they  call  because  they  don’t  understand 
their  bills.  Mmi  call  center  software  can  gather  .ind 
present  such  information.  Temkin  recommends  cn*- 
diing  very  precise  categories  to  "tag"  different  calls 
tt>  pnivide  j  detailed  view 

The  more  svmplex  lhi*<r.insaciion  is.  the  more  ex¬ 
pensive  the  integration.  To  let  customers  challenge 
charges  online,  says  lemkin.  a  wireless  provider  must 
supply  links  to  its  billing  system,  a  phone  number 
h-ik-up  system  ti»  determine  the  actual  recipient  of  a 
disputed  call,  and  a  rules-Kised  system  to  evaluate  the 
cu-sttuner's  claim.  Since  you  may  lose  any  savings  if 
the  Web  customer  winds  up  caliiiyfiktsays.  "you 
might  as  well  noi  bother  goy^-^iwn  tie  integration 
p.iih  if  you’re  nm  go^^g  th  integrate  allthe  pieces  re¬ 
quired  to  make  that  a  st*lf-service  environment." 

Before  moving  to  the  Oracle  suite  of  business  appli- 
s'aiions  m  2001.  Mcl>;ua  Corp,  estimated  that  it  would 
take  six  weeks  to  load,  clean  and  test  the  data  from  its 
legacy  applications,  says  IX'bra  Morton,  director  of 
business  systems  at  the  Broomfield.  Colo.-based  sitir- 
.»ge  vendor.  “It  ended  up  taking  more  like  three 
months  and  four  times  the  .imouni  budgeted,  because 
we  had  so  many  sources  of  information.”  she  says. 

Rather  chan  buying  or  building  a  separate  self-ser¬ 
vice  application.  McDaia  relied  on  Oracle  Corp.'s 
business  application  suite.  Using  the  self-service  ca¬ 
pabilities  w  ithin  an  existing  product  suite  reduces 
the  need  for  integrating  applications,  which  ha.s  diva- 


bled  or  tripled  the  cost  of  some  application  efforts 
.Morton  has  seon. 

McData  is  implementing  self-service  capabilities  so 
its  suppliers  can  get  up-to-the-minute  forecast.s  of  its 
manufacturing  plans.  Tlie  company  is  alsv)  automating 
customer  support  for  its  software  products. 

(iompanies  th.tt  build  their  own  interfaces  among 
applications  often  find  that  they’re  not  secure  or  don’t 
scale  well.  s;»y  analysis.  "Many  of  our  new  customers 
over  the  last  year  or  so  are  replacing  homegrown  sys¬ 
tems  that  couldn't  scale."  says  Ted  Morgan,  vice  presi¬ 
dent  of  marketing  at  Bdivs  Inc.  in  Natick.  Mass. 

When  ATA:  r  Wireless  built  a  self-service  site  for 
its  I’DMA-based  wireless  technology,  it  used  the  Dy¬ 
namo  Web  application  suite  fn*m  Art  Technology 
tiroup  Inc.  in  Cambridge.  Mafi.s..  as  well  as  Kdivcs’ 
eaDireet  to  give  customers  access  to  billing  informa¬ 
tion.  says  c:antrell-  The  company  had  to  develop  its 
i>vvn  interfaces  to  the  eight  to  10  back-end  system-s 
that  feed  information  to  the  W'ch  application. 

In  building  self-service  capabilities  for  its  latest 
high-speed  w  irelcss  services.  AT&T  Wireless  will 
use  Siebel  Systems  Inc.  customer  relationship  man- 
■igement  (CRM)  software,  which  wasn't  in  produc¬ 
tion  w  hen  the  company  built  earlier  self-service  sites. 

Embedding  Business  Rules 

Developers  must  also  find  a  way  loem^’d  business 
rules  into  their  Web  self-si-rvice  yivnVfmmenis.  Of¬ 
ten.  as  many  as  half  of  thosiyulcs  have  never  been 
written  down,  say.s  Kdin-s  pnvduci  manager  David 
Chang.  To  find  lhi»se  missing  rules.  Edoes  gathers 
experts  from  tluviughout  a  company  to  walk  through 
processes  such  as  changing  an  order 

Hard-coding  business  rules  by  writing  them  into 
the  Web  application  may  be  easiest  in  the  short  run. 
but  it  makes  the  rules  harder  to  change,  says  Andrew 
Kass.  vice  president  of  application  development  at 
Oracle.  Instead,  analysts  and  self-service  vendors 
recommend  encapsulating  business  logic  in  reusable 
application  components  so  rules  can  be  changed 


Some  Self-service  Offerings 


VENDOR  PRODUCT  DESCRIPTION 


A  single  source  (or  identilying  users  and  providing  them  with  digital 
and  physical  resources  such  as  e-  mail  accounts  and  PCs.  A  stand 
alone  self -seniice  password  reset  application  is  also  available 
Uses  cataloging  and  middleware  technologies  to  gather  data  (rom 
legacy  systems  and  update  the  knowledge  base 
Provtdes  self -service  applications  for  Web  and  internal  users 
Include  self  -service  cafabilities  for  human  services,  expense 
reporting  and  procurement. 

PeopteSoH  Multichannel  Interactions  delivers  e-mail  resporrse 
management  and  chat;  PeopfeSofI  Order  CaptureSelf-Servicelets 
customers  place  and  check  the  status  of  orders  over  the  Web 
Based  on  the  Aaswet  Engine  search  tool  and  eServer 
loiowledgcbase. 

Indudes  eService  Site  (or  Web  based  customer  sett-service.  eSei- 
vice  Professiwal  for  customer  service,  sales  and  field  service,  and 
eService  Architect  lor  building  and  mainiaining  knowledge 
A  Web  service  portal 


Justifying  the  Cost 

Wto  OOIC  neHT.  VWb 
canreducecilcenterstannssaMonttiecostofprrt- 
na  RwiinQ  wd  hMing  bfe  earn  8  oornpany  vol^ 
dscounls;  arid  nipriMe  ojshins 
WBhout  dadosino  spedlics.  ATtT  Wadess 
sixtesnan  Rich  Blaati  saw  that  the  tamoa^aai**^ 
ing  'several  miion  doiaw  ptftnK^^MeBOSdals 
to  Its  cal  centers  and lIlllMBrediiiad  the  nurte 
ot  customers  wM  sMlch  to  dtflerent  camera 
Nebrnrit  storage  vendor  McOata  has  seen  a  170% 
retun  on  its  SSii  mBon  hvestmant  in  Oracle’s  bush 
r)ess  appicalion&  whidi  indude  err^^ 
service,  says  Debra  Mortoa  dnetor  of  business 
systems-SheostinatesthatMcOBlaissavngStmt- 
liofltoSSrniiDnperyearbecauseirnprovedprrchas' 
ing  tradorig  quaifes  McOato  for  grealer  vdurne  dis¬ 
counts  and  eirrinates  dupicaie  pudiasng. 

Bd  rernembor  to  factor  in  the  cost  of  pubficizirig 
your  site  w4)en  calailatlng^tOI.  say  veterans. ‘The 
reason  fotks  Mte  American  Express  and  AT&T  Wlre- 
fess  have  miions  of  people  at  their  site  Is  because 
they  actively  promote  it'  says  led  Morgan,  vice  presi¬ 
dent  ol  marketing  at  Edocs. 

~  Robert  L  ScMer 

without  every  application  that  uses  them  having  to 
be  rewritten. 

To  ensure  that  customer  data  is  current  across 
multiple  channels  (such  as  the  self-service  applica¬ 
tion  and  the  call  center),  many  customers  arc  turning 
to  operational  data  stores,  says  Cap  Gemini  Ernst  & 
Young’s  Disiefano.  The  information  in  them  might  he 
15  minutes  to  an  hour  old,  he  says,  which  is  recent 
enough  to  ensure  consistency.  Another  approach  tak¬ 
en  by  vendors  like  Edocs  is  using  data  cataloging  to 
help  the  self-service  application  find  data  that’s  still 
in  transactional  systems. 

Continually  updating  the  knowledge  base  of  cor¬ 
rect  answers  to  customer  questions  can  be  one  of  the 
largest  hidden  expenses  of  self-service  applications. 
Temkin  recommends  monitoring  call  center  person¬ 
nel  and  providing  incentives  to  encourage  them  to 
make  their  updates  clear  and  understandable. 

There  is  no  single  too!  that  can  provide  end-to-end 
Web  .self-service  for  every  company  that  needs  it.  ac¬ 
cording  to  analysis.  Syracuse  University,  fo?  example, 
turned  to  Bu,sincss  Layers  Inc.,  a  provider  of  provi¬ 
sioning  software  in  Rochelle  Park.  N.J..  to  provide  a 
directory  and  a  single  source  of  authentication  that 
would  let  students  sign  on  once  to  gain  access  to  any 
online  resources.  But  the  Web  portal  itself,  and  the 
links  to  the  school’s  PeopleSofi  applications,  were  de¬ 
veloped  by  a  consortium  of  vendors  and  customers. 

Whichever  tools  you  use.  "take  a  more  holistic  view 
of  the  world"  when  designing  your  self-service  site, 
says  Cantrell  “It’s  easy  to  say  we’re  focusing  on  hav¬ 
ing  the  customer  change  a  [specific]  feature"  over  the 
Web.  he  says,  but  it’s  more  important  to  build  in  flexi¬ 
bility  so  customers  can  help  themselves  to  any  other 
service  AT&T  offers  in  the  future.  I 


Scheier  is  a ^eefunce  writer  in  Boylston,  Mass.  He  con 
be  reached  of  rsche/ertfficharter.net. 
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Continued  ftxm  fxtge  25 

Forrester  Research  loc.  analyst  Bruce  Temkin.  Syra¬ 
cuse  University  in  New  York,  for  example,  held  public 
fortuns  <m  the  topic  in  the  ^ring  of 2001  before  giving 
students  online  access  to  information  such  as  dass 
schedules  and  the  status  of  tuition  payments,  says 
Gary  McGinnis,  direaor  of  client  services  at  the  uni¬ 
versity’s  computing  and  media  services  department. 

Compaiucs  can  learn  a  lot  about  customer  needs 
by  analyzing  calls  coming  into  their  call  centers,  says 
Temkm,  such  as  how  many  times  customers  call  to 
dispute  a  single  phone  call  on  their  bills  vs.  bow 
many  times  they  call  because  they  don’t  understand 
their  bills.  Most  call  center  software  can  gather  and 
present  such  information.  Temkin  recommends  cre¬ 
ating  very  precise  categories  to  ‘‘tag”  different  calls 
to  provide  a  detailed  view. 

The  more  coa4>lex  the  transaction  ts.  the  more  ex¬ 
pensive  the  integration.  To  let  customers  challgngp 
charges  online,  says  Temkin.  a  wireless  provider  must 
supply  links  to  Us  billing  system,  a  phone  number 
look-up  system  to  determine  the  actual  recfoient  of  a 
disputed  calL  and  a  rules-based  system  to  evaluate  the 
customer’s  claim.  Since  you  may  lose  any  savings  if 
the  Web  customer  winds  up  railing,  be  says,  "you 
might  3S  well  not  bother  going  down  the  integration 
path  if  you're  not  going  to  integrate  all  the  pieces  re¬ 
quired  to  make  that  a  self-service  enviroiunent'* 

Before  moving  to  the  Oracle  suite  of  business  appli¬ 
cations  in  2001,  McOata  Corp.  estimated  that  it  woidd 
take  six  weeks  to  load,  clean  and  test  the  data  ftom  its 
legacy  applications,  says  Debra  Morton,  director  of 
business  systems  at  the  Broomfield,  Cola -based  stor¬ 
age  vendor.  ‘It  ended  up  taking  more  like  three 
months  and  four  times  the  amount  budgeted,  because 
we  had  so  many  sources  of  information."  she  says. 

Rather  than  buying  or  building  a  separate  self-ser¬ 
vice  application.  McData  relied  on  Oracle  Corp.'s 
business  application  suUe.  Using  the  self-service  ca¬ 
pabilities  within  an  existing  product  suite  reduces 
the  need  for  integrating  applications,  which  has  dou¬ 
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bled  or  tripled  the  cost  of  some  application  efforts 
Morton  has  seen. 

McData  is  implementing  self-service  capabilities  so 
its  suppliers  can  get  up-to-the-minute  forecasts  of  hs 
manufacturing  plans.  The  company  is  also  automating 
customer  suf^rt  for  its  software  products. 

Companies  that  build  their  own  interfaces  among 
applications  often  find  that  they’re  not  secure  or  don’t 
scale  well,  say  analysts.  ‘Many  of  our  new  customers 
over  the  last  year  or  so  are  replacing  homegrown  sys¬ 
tems  that  couldn't  scale,"  says  Ted  Morgan,  vice  presi¬ 
dent  of  marketing  at  Edocs  Inc.  in  Natick,  Mass. 

When  AT&T  Wireless  built  a  self-service  site  for 
its  TDMA-based  wireless  technology,  it  used  the  E>y- 
namo  Web  application  suite  from  Art  Technology 
Group  Inc.  in  Cambridge.  Mass.,  as  well  as  Edocs’ 
eaDirect  to  give  customers  access  to  billing  informa¬ 
tion.  says  Cantrell.  The  company  had  to  develop  its 
own  interfaces  to  the  ei^t  to  10  back-end  systems 
that  feed  information  to  the  Web  application. 

In  building  self-service  capabilities  for  its  latest 
high-speed  wireless  services,  AT&T  Wireless  will 
use  Siebel  Systems  Inc.  customer  relationship  man¬ 
agement  (CRM)  software,  which  wasn't  in  produc¬ 
tion  when  the  company  built  eariler  self-service  sites. 

Emfaeddhg  Business  Rules 

Developers  must  also  And  a  way  to  embed  business 
rules  into  their  Web  self-service  environments.  Of¬ 
ten.  as  many  as  half  of  those  rules  have  never  been 
written  down,  says  Edocs  product  manager  David 
Chax^  To  And  those  missing  rules,  Edocs  gathers 
experts  from  throughout  a  company  to  walk  through 
processes  such  as  changing  an  order. 

Hard-coding  business  rules  by  writing  them  into 
the  Web  application  may  be  easiest  in  the  short  run, 
but  it  makes  the  rules  harder  to  change,  says  Andrew 
Kass,  vice  president  of  application  development  at 
Oracle.  Instead,  analysts  and  self-service  vendors 
recommend  encapsulating  business  logic  in  reusable 
application  components  so  rules  can  be  rhang«»<f 
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without  every  application  that  uses  them  havii%  to 
be  rewritten. 


To  ensure  that  customer  data  is  current  across 
multiple  channels  (such  as  the  self-service  applica¬ 
tion  and  the  call  center),  many  customers  are  turning 
to  operational  data  stores,  says  Cap  Gemini  Ernst  & 
Young’s  Distefana  The  information  in  them  might  be 
IS  minutes  to  an  hour  old.  be  says,  which  is  recent 
enough  to  ensure  consistency.  Another  ai^roach  tak¬ 
en  by  vendors  like  Edocs  is  using  data  cataloging  to 
help  the  self-service  application  And  data  that’s  still 
in  transactional  systems. 

Continually  updating  the  knowledge  base  of  cor¬ 
rect  answers  to  customer  questions  can  be  one  of  the 
largest  hidden  expenses  of  self-service  applic^ions. 
Temkin  recommends  monitoring  call  center  person¬ 
nel  and  providing  incentives  to  encourage  them  to 
make  their  updates  clear  and  understandable. 

There  is  no  sin^e  tool  that  can  provide  end-to-end 
Web  self-service  for  every  company  that  needs  it.  ac- 
cordii^  to  analysts.  Syratmse  University,  for  example, 
turned  to  Business  Layers  Inc.,  a  provider  of  provi¬ 
sioning  software  in  Rochelle  Park.  R|.,  to  provide  a 
directory  and  a  single  source  of  authentication  that 
would  let  students  sign  on  once  to  gain  access  to  any 
online  resources.  But  the  WSeb  portal  itself  and  the 
links  to  the  school’s  PeopleSoft  applications,  were  de¬ 
veloped  by  a  consorthuD  of  vendors  and  customers. 

Whichever  tools  you  use,  "take  a  more  holistic  view 
of  the  world"  when  designing  your  self-service  site, 
says  CantrelL  "If  s  easy  to  say  we're  focusing  on  hav¬ 
ing  the  customer  change  a  [^leciAc]  feature"  over  the 
Web.  he  says,  but  it’s  more  important  to  build  in  flexi¬ 
bility  so  customers  can  help  themselves  to  any  other 
service  AT&T  offers  in  the  future.  I 


Scheier  is  n/heelance  writer  ui  Boylston,  Moss.  He  con 
be  readied  at  ndteier^dtarternet 
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AsinglesourttforidertfykiousefsandpRnvir^ 

and  physical  i«soivi»  such  as  e-mari  accouih  and  A 

akne  seff  passwxd  reset  appication  is  also  avaiaUe. 

lAes  calaiogno  ard  rriklaNBre  tecinefoQ^ 
tegacy 'Tystenu  ard  update  the  kntMtedge 

RtMdes  sell^erw^e  appicahonskx  and  iritemal  leers. 

Include  seff-servkx  capahilie  fcx  hianan  services,  expe^ 
reportino  and  proctfernenl 

l^opleSoft  Mdlkharind  Inlerachom  deliveis 
tnanagemenl  and  chat  PaoifeSGft  CMer  C«lue  SelFServra 
ewtorners  place  ard  rhecK  the  status  oi  order*  over  the 

Based  on  ArsMT  Engine  search  tool  and  eServer 
faxmlcdocbase- 

indudeseServvaSilelorWehteedcustornerseli-serviceieSer- 
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Microsoft’s 
Suite  Dreams 


Office 2003  has  enough  new 
features  and  improvements  to 
tempt  users,  de^e  the  cost  of 
an  upgrade.  By  Russell  Kay 


ITS  2003.  AND  MICROSOFT 

Corp.  is  getting  ready  to  roU 
out  its  approximately  biennial 
upgrade  to  Office,  causing  IT 
managers  to  ask  themselves, 
one  more  time,  whether  they 
should  (or  indeed  whether 
they  can  afford  to)  upgrade.  Such  an 
u^rade  is  never  simple  or  cheap  for 
enterprise  IT.ln  the  past,  there  have 

been  serious  downsides,  such  _ 

as  when  Microsoft  changed 
the  bask  ffle  formats  and  cre¬ 
ated  incompatibility  head¬ 
aches  for  users  who  hadn’t 
been  switched  over.  And  in¬ 
evitably  there  are  issues  with  - 

training  and  support. 

This  time  around,  with  Office  2003 
(apparently,  that  “XP”  nomenclature 
cauWd  more  problems  than  it  solved). 
Microsoft  is  concentrating  on  expand- 
ii^  the  envelope  with  new  tools  aimed 
at  better  collaboration  among  people. 

I've  been  working  with  beta  copies  of 
the  new  software,  and  IT  departments 
should  seriously  consider  this  upgrade. 
Even  if  you  decide  not  to  upgrade  the 
suite,  remember  that  the  component 
^>pUcations  of  Offke  are  available  as 
stand-alone  products.  There  may  be 
good  reason  to  upgrade  individual  ap¬ 
plications  —  Outlook  in  particular  — 
and  perhaps  add  new  ones. 

Ongoing  Evolution 

Created  by  Microsoft  in  1989,  the  office 
suite  concept  has  proved  to  be  a  clever 
marketing  device.  By  pack^ing  a  few 
basic  applications  in  a  single  b^  Mi¬ 


crosoft  sold  a  lot  of  software  because  it 
offered  a  convenient  way  for  users  and 
businesses  to  get  most  of  what  they 
needed  for  word  processing,  spread¬ 
sheets.  presentation  graphics  and  sim¬ 
ple  databases. 

Over  many  generations  of  develop¬ 
ment.  these  applications  improved  in¬ 
dividually,  worked  better  together  and 
got  bigger  —  lots  bigger.  Microsoft  has 
steadily  added  applications  —  Visio, 
Publisher,  Mapl^int.  Project  and 
Frontpage  —  to  the  original  "core”  set. 
with  the  devel(q>ing  goal  of  making  Of¬ 
fice  a  platform  for  workgroup  collabo¬ 
ration  and  communicatioa  (There's  a 
timeline  detailing  the  evolution  of  the 
Oftke  suite  at  (^delink  a2990  on 
Computerworidxom.) 

_  With  Office  2003,  Micro¬ 
soft  has  taken  the  biggest 

HANDS^N  leap  yet  It  has  made  XML  a 


standard  file  formal  for  most 
PCUpllK  applications  and  has 
**^"**”*' ’^  launched  two  applications 

-  —  InfoPath  (formerly  known 

as  XDocs  and  NecDocs)  and  OneNote 
(nee  Scribbler)  —  that  offer  new  capa¬ 
bilities  in  the  areas  of  forms,  intelli^nt 
documents,  note-taking  and  research. 

Enterprise  IT  will  want  to  investi¬ 
gate  the  new  information  rights  man- 
a^ment  (IRM)  controls  debuting  with 
Offke  2003.  This  file-level  security  ca¬ 
pability,  wdiich  can  be  used  only  with 
Windows  Server  2003,  makes  it  easier 
for  document  owners  to  restrict  access 
and  change  rights  to  specific  content 
inside  Oflice  documents  and  e-mails. 

For  example,  users  can  put  expira¬ 
tion  dates  on  messages  and  dociuneots, 
and  after  those  d»es  have  passed,  oth¬ 
ers  wouldn't  be  able  to  read  the  docu¬ 
ments  without  special  permissions. 
Users  can  also  make  documents  read¬ 
only.  nonforwardable  and  nonprint- 
able.  After  expiration,  the  documents 
still  reside  on  the  server  or  remote 
user's  PC  but  in  encrypted  form.  A  free 


IRM  viewer  will  be  available  to  users  of 
older  Office  versions  who  need  to  work 
with  IRM-protected  documents. 

What  about  Office's  core  applica¬ 
tions:  Word,  Excel,  PowerPoint,  Access 
and  Outlook?  All  but  the  last  include 
minor  changes  and  improvements,  but 
basically  they're  mature  applications 
that  haven't  showed  much  need  for 
new  capabilities.  One  noteworthy  ad¬ 
dition  to  Word  is  a  nice  viewing  mode 
specifically  fcH*  reading  dociunents  on¬ 
screen.  And  a  useful  new  feature  that 
all  Office  applications  share  is  a  re¬ 
search  task  pane  for  performing  infor¬ 
mation  and  Internet  searches.  This 
task  pane  can  be  shared  with  a  work¬ 
group.  Beyond  that,  there's  little  new 
in  the  four  primary  applications  to 
cause  IT  mam^rs  much  concern  —  or 
spark  much  interest,  for  that  matter. 

Outlook  is  the  big  exception.  It  has 
been  significantly  overhauled  and  is 
DOW  the  productive  and  useful  e-mail 
client  and  personal  information  man¬ 
ager  h  always  should  have  been. 

A  Brighter  Outlook 

The  new  version  of  Outlook  is  a  drasti¬ 
cally  improved  e-mail  client  Microsoft 
has  tweaked  the  user  interf^  to  put 
more  information  on-screen,  make 
mail  easier  to  read  and  let  you  orga¬ 
nize  your  mail  much  more  simply  and 
quickly  than  before.  If  yours  is  an  Ex¬ 
change  shop,  your  users  will  benefit 
greatly  from  using  the  new  Outlook 
client;  so  even  if  you  plan  to  stick  with 
an  older  version  of  Offtce,  you  should 
consider  buying  Outlook  2003  sepa¬ 
rately.  A  Microsoft  project  manager 
says  the  interface  for  Outlook  Web 
Access  will  be  similarly  changed  to 
add  the  new  cafiabilities. 

On  this  new  user  interface  (see  left 
screenshot  in  diagram),  ffke  simplest 
change  was  putting  the  previewAead- 
ing  pane  on  the  right  instead  of  at  the 
bottom.  This  eliminates  white  space  in 


the  navi^tioa  bar.  which  is  now  the 
middle  pane,  and  the  narrower  width 
speeds  reading.  The  navigation  bar  it* 
self  now  can  be  quickly  organized  via 
drop'down  list,  with  messages  sorted 
by  date,  sender,  recipient,  subject,  con* 
versation  thread  and  more.  Also,  you 
can  put  a  flag  in  one  of  seven  colors  on 
any  messa^  for  later  follow-up. 

The  neatest  feature  in  the  new  Out¬ 
look  may  be  the  “search  folders.*  which 
quickly  bring  you  to.  for  example,  all 
umead  mail  regardless  of  what  folder 
it’s  in.  all  items  flagged  for  foUow-up  or 
very  large  files.  It’s  easy  to  make  new 
search  folders  to  meet  other  needs. 

Other  mail  improvements  include  a 
much  more  effective  spam-filtering 
process  and  what  Microsoft  calls  “in¬ 
telligent  connectivity."  If  you’re  on  a 
high-speed  network  connection,  your 
mail  is  downloaded  normally.  But  if 
you're  on  a  slower  line.  Outlook  down¬ 
loads  only  the  headers  and  a  small  por¬ 
tion  of  the  message  for  review. 

One  appealing  touch  is  the  way  Out¬ 
look  announces  new  messages.  If 
you’re  In  another  a{^iication  or  win¬ 
dow  when  e-mail  arrives.  Outlook 
Hashes  a  quick  summary  (the  From 
and  Subject  lines,  plus  the  opening 
words)  in  a  box  in  the  lower  right  cor¬ 
ner  of  your  screen.  After  three  to  five 
seconds,  the  summary  gradually  fades 
away.  This  lets  you  know  imme^tely 
if  the  mail  needs  your  attention  now  or 
can  wait  until  later,  without  makii^ 
you  leave  the  application  you're  in. 

In  addition,  the  display  is  now  com¬ 
pletely  tailored  to  each  of  Outlook’s 
various  sections  —  mail,  calendar,  con¬ 
tacts  and  tasks  —  presenting  often- 
used  choices  at  the  left  instead  of 
buried  under  a  menu  tree.  Contacts 


can  be  switched  more  quickly  from  the 
normal  card  view  to  a  simple  phone 
listing  or  sorted  by  company  or  catego¬ 
ry  and  more.  And  you  can  now  store 
pictures  for  individual  contacts  inside 
Outlook  (see  top  ri^t  screenshot). 

For  individual  users.  Calendar  is 
only  slightly  better:  But  for  shops  that 
use  Exchange  enterprisewide.  Out¬ 
look’s  calendar  has  a  useful  new  fea¬ 
ture  that  shows  multiple  people's  cal¬ 
endars  side  by  side  for  easier  scbedul- 
ii^  (see  bottom  right  screenshot). 

Overal,  it's  Worth  a  Look 

With  Office  2003.  Microsoft  has  shift¬ 
ed  its  focus  away  from  application-spe¬ 
cific  issues  and  toward  coUaboratioD 


and  connectivity.  The  core  applica¬ 
tions.  which  have  been  pretty  good  and 
essentially  complete  for  nearly  three 
years,  were  tweaked,  but  there's  hardly 
anything  there  to  upset  or  interest  en¬ 
terprise  IT.  Outlook  got  the  overhaul  it 
has  needed  for  years;  every  company 
running  Exchange  Server  should  look 
at  it  carefully. 

Of  the  new  applications.  OneNote  i,s 
a  valuable  additicm  that  will  hcfisfiS-' 
cially  useful  for  most  knowM^  work¬ 
ers  ajxl  researchers.  InifoPatb  is  a  more 
spedalized  forms-based  application 
tlm  will  require  significant  IT  partici¬ 
pation  to  implement,  but  it  may  ex¬ 
pand  dau-gatbering  capabilities  for 
many  enterprises. 


Every  part  of  Office  2003  is  more 
XML-awareand  bener  suited  to  con¬ 
tent  mining  and  data  interchange.  But 
whether  that  makes  the  entire  suite  an 
attractive  package  depends  on  your 
company’s  needs.  However.  OneNote 
and  OutlocA  are  clear  winners  that 
eveiyone  should  look  at.  I 


Kay  is  a  Computerworid  conrriburtng 
writer  in  Worcester.  Moss.  Coniaet  him 
atrusskay@duirier.net 
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OneNote:  A  Harmonious  Tool 


THE  MOST  PfTERESTINe  NEW  MEMBER  of  ttw  Office  fanXiy  is 
OnefikHe.  an  apphcabon  designed  for  taking  rKJtes  and  doi^ 
search,  as  wel  as  orottiiang.  accessing,  reusing  and  shving  free- 
forni  iriforrnation  from  a  variMy  ol  sotjrces  and  in  diveise  torinals. 
Unlike,  say.  Word,  where  (he  expected  goal  is  a  finshed  doaanent. 
Oneffote  is  int^Kfed  as  a  prelirninary  tool  for  taking  rough  notes  and 
assembiingcontenlfromavanetyofsourcesandinavanetyolfor- 
rnals.  iTKiiding  soundl  graphics  and  Web-based  infonn^^ 

OneNole  presents  you  with  a  blank 
page.  Thu  can  dick  anyvNiere  on  the 
page  and  start  typing:  il  you're  using  a 
Tablet  PC.  you  can  write  anyehere  on 
the  screen  using  *digitai  Me’  Ybu  can 
create  new  tolders.  accessed  via  tabs  at 
the  top  of  the  screea  and  new  pages 
within  folders,  accessed  with  tabs  on 
the  rigM  of  the  screen. 

When  you  »iter  copy  onto  a  On^fote 
page,  a  recognizes  bulets  and  num¬ 
bered  fists,  ft  understands  outlines  and 
offers  several  outline  modes.  Ybu  can 


highlight  all  or  part  of  a  Web  page,  a  PowetfoM  side  or  an  Excel 
spreadshed  and  just  drag  tt  Info  OneNote.  includax)  any  graphics. 
Rndy.  OneNote  automfocalN  saves  evetyfoing  al  (he  tone. 

If  yota  computer  has  a  miemphone.  you  can  record  sound  at  the 
sarrw  tone  you're  takng  rrates  -  you  can  take  a  OneNote-equpped 
taploptoameelingandtakenoteswhilerecordingthewholerneet- 
ing.  Afterward,  you  can  review  your  notes  and  einari  folow-ups. 
Ounng  tf»  review,  you  can  dick  on  any  part  of  your  notes  and  have 
the  aufio  replay  what  was  recorded  at 
the  tone  you  that  note. 

The  synchronized  recordng  is  opti¬ 
mized  for  speech,  using  vanr  figh 
compression  that  needs  abM  SMB  of 
storage  for  an  hour  of  reconing. 

At  the  tone  of  this  writing.  MierDSoft 
had  not  yet  decided  whether  ()neNote 
would  be  an  niegral  part  of  any  of  the 
standard  Office  packages  or  whether 
(he  application  would  have  to  be  pur- 
chas^  separtoefy. 
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Microsoft’s 
Suite  Dreams 


Office 2003  has  enough  new 
features  and  improvements  to 
tempt  users,  despite  the  cost  of 
an  upgrade.  By  Russell  Kay 
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IT’S  200».  AND  MICROSOFT 

Corp.  is  {getting  ready  to  roll 
out  its  approximately  hiennial 
upgrade  to  OfTice,  causing  IT 
managers  to  ask  thcmseK’cs. 
one  more  time,  whether  they 
should  (or  indeed  whether 
they  can  aflbrd  to)  upgrade.  Such  an 
upgrade  is  nes-er  simple  or  cheap  for 
enterprise  IT.  In  the  past,  there  have 

been  serious  downsides,  such  _ 

a.s  when  Microsoft  changed 
the  basic  file  formats  and  cre¬ 
ated  incompatibility  head¬ 
aches  for  users  who  hadn’t 
been  switched  over.  And  in¬ 
evitably  there  are  issues  with  - 

training  and  support. 

This  time  around,  with  Office  2003 
(apparently,  that  “XP“  nomenclature 
caused  more  problems  than  it  solved). 
Microsoft  is  concentrating  on  expand¬ 
ing  the  envelope  with  new  tools  aimed 
at  bencr  collaboration  among  people. 

I’ve  been  working  with  beta  copies  of 
the  new  software,  and  IT  departments 
should  seriously  consider  this  upgrade. 
Even  if  you  decide  not  to  upgrade  the 
suite,  remember  that  the  component 
applkattons  of  Office  are  available  as 
stand-alone  products.  There  may  be 
good  reason  to  upgrade  individual  ap¬ 
plications  —  Outlook  in  particular  — 
and  perhaps  add  new  ones. 

Ongoing  Evolution 

Created  by  Microsoft  in  1989,  the  office 
suite  concept  has  proved  to  be  a  clever 
marketing  device.  By  packaging  a  few 
basic  applications  in  a  single  box.  Mi¬ 


crosoft  sold  a  lot  of  software  because  it 
offered  a  convenient  way  for  users  and 
businesses  to  get  most  of  w  hat  they 
needed  for  word  processing,  spread¬ 
sheets.  presentation  graphics  and  sim¬ 
ple  databases. 

Over  many  generations  of  develop¬ 
ment.  these  applications  improved  in¬ 
dividually.  worked  better  together  and 
got  bij^r  —  lots  bigger.  Microsoft  has 
steadily  added  applications  —  Visio, 
Publisher.  MapPoint.  Project  and 
FrontP^e  —  to  the  original  "core"  set. 
with  the  developing  goal  of  making  Of¬ 
fice  a  platform  for  workgroup  collabo¬ 
ration  and  communication.  (There's  a 
timeline  detailing  the  evolution  of  the 
Office  suite  at  C^ickLink  a2990  on 
Computerworld.com. ) 

_  With  Office  2003.  Micro¬ 
soft  has  taken  the  biggest 
H^iinOflU  leap  yet.  It  has  made  XML  a 
standard  file  format  for  most 

REVIEWS  ^  applications  and  has 


launched  two  applications 
—  InfoPath  (formerly  known 
as  XDocs  and  NetDocs)  and  OneNotc 
(nee  Scribbler)  —  that  offer  new  capa¬ 
bilities  in  the  areas  of  forms,  intelligent 
documents,  note-taking  and  research. 

Enterprise  IT  will  want  to  investi¬ 
gate  the  new  information  rights  man¬ 
agement  (IRM)  controls  debutir^  with 
Office  2003.  This  file-level  security  ca¬ 
pability.  which  can  be  used  only  with 
Windows  Server  2003,  makes  it  easier 
for  document  owners  to  restrict  access 
and  change  rights  to  specific  content 
inside  Office  documents  and  e-mails. 

For  example,  users  can  put  expira¬ 
tion  dates  on  messes  and  documents, 
and  after  those  dates  have  passed,  oth¬ 
ers  wouldn't  be  able  to  read  the  docu¬ 
ments  without  special  permissions. 
Users  can  also  make  documents  read¬ 
only.  nonforwardable  and  nonprint- 
able.  After  expiration,  the  documents 
still  reside  on  the  server  or  remote 
user’s  PC.  but  in  encrypted  form.  A  free 


IRM  viewer  will  be  available  to  users  of 
older  Office  versions  who  need  to  work 
with  IRM-protected  documents. 

What  about  Office’s  core  applica¬ 
tions;  Word.  Excel.  PowerPoint,  Access 
and  Outlook?  All  but  the  la.st  include 
minor  changes  and  improvements,  but 
basically  they’re  mature  applications 
that  haven't  showed  much  need  for 
new  capabilities.  One  noteworthy  ad¬ 
dition  to  Word  is  a  nice  viewing  mode 
specifically  for  reading  docunicnts  on¬ 
screen.  And  a  useful  new  feature  that 
all  Office  applications  share  is  a  re¬ 
search  task  pane  for  performing  infor¬ 
mation  and  Internet  searches.  This 
task  pane  can  be  shared  with  a  work¬ 
group.  Beyond  that,  there’s  little  new 
in  the  four  primary  applications  to 
cause  IT  managers  much  concern  —  or 
spark  much  interest,  for  that  matter. 

Outlook  is  the  big  exception.  It  has 
been  significantly  overhauled  and  is 
now  the  productive  and  useful  e-mail 
client  and  personal  information  man¬ 
ager  it  always  should  have  been. 

A  Brighter  Outlook 

The  new  version  of  Outlook  is  a  drasti¬ 
cally  improved  e-mail  client.  Microsoft 
has  tweaked  the  user  interface  to  put 
more  information  on-screen,  make 
mail  easier  to  read  and  let  you  oiga- 
nize  your  mail  much  more  simply  and 
quickly  than  before.  If  yours  is  an  Ex¬ 
change  shop,  your  users  will  benefit 
greatly  from  using  the  new  Outlook 
client:  so  even  if  you  plan  to  stick  with 
an  older  version  of  Office,  you  should 
consider  buying  Outlook  2003  sepa¬ 
rately.  A  Microsoft  project  manager 
says  the  interface  for  Outlook  Web 
Access  will  be  similarly  changed  to 
add  the  new  capabilities. 

On  this  new  user  interface  (see  left 
screenshot  in  diagram),  the  simplest 
change  was  putting  the  preview/read- 
ing  pane  on  the  right  instead  of  at  the 
bottom.  This  eliminates  white  space  in 
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the  navigation  bar.  which  is  now  the 
middle  pane,  and  the  narrower  width 
speeds  reading.  The  navigation  bar  it- 
sel/  now  can  be  quickly  oi^anizcd  via 
drop-down  list,  with  messages  sorted 
by  date,  sender,  recipient,  subject,  con¬ 
versation  thread  and  more.  Also,  you 
can  put  a  Hag  in  one  of  seven  ciders  on 
any  message  for  later  follow-up. 

The  neatest  feature  in  the  new  Out¬ 
look  may  be  the  "search  folders,"  which 
quickly  bring  you  to.  for  example,  all 
unread  mail  regardless  of  what  folder 
it*s  in.  ail  items  flagged  for  follow-up  or 
very  large  files.  It’s  easy  to  make  new 
search  folders  to  meet  other  needs. 

Other  mail  improvements  include  a 
much  more  effective  spam-filtering 
process  and  what  Microsoft  calls  "in¬ 
telligent  connectivity."  If  you’R'  on  a 
high-speed  network  connection,  your 
mail  is  downloaded  normally.  But  if 
you're  on  a  slower  line.  Outlook  down¬ 
loads  only  the  headers  and  a  small  por¬ 
tion  of  the  message  for  review. 

One  appealing  touch  is  the  way  Out¬ 
look  announces  new  messages.  If 
you're  in  another  application  or  win¬ 
dow  when  e-mail  arrives.  Outlook 
flashes  a  quick  summary  (the  From 
and  Subject  lines,  plus  the  opening 
words)  in  a  box  in  the  lower  right  cor¬ 
ner  of  your  screen.  After  three  to  five 
seconds,  the  summary  gradually  fades 
away.  This  lets  you  know  immedtaiely 
if  the  mail  ncedis  your  attention  now  or 
can  wait  until  later,  without  making 
you  leave  the  application  you're  in. 

In  addition,  the  display  is  now  com¬ 
pletely  tailored  to  each  of  Outlook’s 
various  sections  —  mail,  calendar,  con¬ 
tacts  and  tasks  —  presenting  often- 
used  choices  at  the  left  instead  of 
buried  under  a  menu  tree.  Contacts 


can  be  s'wiichcd  more  quickly  from  the 
normal  card  view  to  a  simple  phone 
listing  or  sorted  by  company  or  catego¬ 
ry  and  more.  And  you  can  now  store 
pictures  for  individual  contacts  inside 
Outlook  (see  top  right  screenshot). 

For  individual  users.  Calendar  is 
only  slightly  better.  But  for  shops  that 
use  Exchange  enterprisewidc.  Out¬ 
look’s  calendar  has  a  useful  new  fea¬ 
ture  that  shows  multiple  people's  cal¬ 
endars  side  by  side  for  easier  schedul¬ 
ing  (see  bottom  rigdit  screenshot). 

Overall,  It’s  Worth  a  Look 

With  Office  2003,  Microsoft  has  shift¬ 
ed  its  focus  away  from  application-spe¬ 
cific  issues  and  toward  coU^ration 


and  connectivity.  The  core  applica¬ 
tions,  which  have  been  pretty  goi>d  and 
essentially  complete  for  neariy  three 
years,  were  tweaked,  but  there’s  hardly 
anything  there  to  upset  or  interest  en¬ 
terprise  IT.  Outlook  got  the  overhaul  it 
has  needed  for  years;  every  company 
running  Exchange  Scn'cr  should  liH>k 
at  it  carefully. 

Of  the  new  applications.  OneNotc  is 
a  valuable  addition  that  will  be  espe¬ 
cially  useful  for  most  knowledge  work¬ 
ers  and  researchers.  InfoFath  is  a  more 
specialized  forms-based  application 
that  will  require  significant  FT  partici¬ 
pation  to  implement,  but  it  may  ex¬ 
pand  data-gatbering  capabilities  for 
many  enterprises. 


Every  part  of  Office  2003  is  more 
XML-aware  and  better  suited  to  con¬ 
tent  mining  and  data  interchange.  But 
whether  that  makes  the  entire  suite  an 
attractive  package  depends  on  your 
company's  needs.  However.  OneNoic 
and  Outlook  arc  clear  winners  that 
everyone  should  lotvk  at.  ft 


Kay  is  a  Computerworld  confributtng 
writer  in  Worcester,  Mass.  Contaa  him 
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OneNote:  A  Harmonious  Tool 


highlighi  all  oi  patt  of  a  Web  page,  a  Powetftxnl  slide  or  an  Excel 
^readsheet  and  lust  drag  i(  into  OneNole.  inciudng  any  graptKS 
Finally.  OneNole  automatically  saves  everything  al  the  time 
H  your  compute  has  a  mtcroc^one  you  can  record  sound  at  the 
same  time  you're  taking  notes  *  you  can  take  a  OneNote-eoupped 
laptop  to  a  meeting  and  take  notes  while  recortkng  thrwhole  meei- 
mg  Merward.  you  can  review  your  notes  and  e-mail  folow-ups. 
Ourmg  this  review,  you  can  click  on  any  part  of  yoif  notes  and  have 
the  audio  replay  whal  was  recorded  at 
the  time  you  made  that  no<e 
~'~T  The  synchronized  reoofdmQ  IS  opli- 
^‘rr.  m«ed  tor  speech,  using  very  high 

*".*.7  :4  *  corrvression  that  needs  ab^  8M6  of 

•  •  storage  tor  an  hour  of  recordmg. 

Atthetimeolthcwnlng.  Mtciosoh 
had  not  yet  decided  whefber  OneNole 
s:=r-  would  be  an  nlegnri  part  of  any  of  the 
SSvr  standard  Office  packages  or  vtfwthei 

the  appftcabonwoiid  have  lobe  pig- 
chased  separately 

^  -RusseHHay 


THE  MOST  INTERESTING  NEW  MEMBER  of  the  Office  tamify  6 
OneNole.  an  af^icalion  designed  for  laKmg  notes  and  domg  re¬ 
search.  as  wen  as  organizing,  accessing,  reusing  and  shanng  free¬ 
form  information  from  a  variety  of  sources  and  m  diverse  formats. 
Unlike,  say.  Word,  where  the  expected  goal  is  a  finished  document. 
OneNole  is  intended  as  a  prefiminary  tool  for  taking  rough  notes  arxl 
assembling  content  from  a  variety  of  sources  and  m  a  variety  of  for¬ 
mats.  including  sound,  graphics  and  Web-based  intormalnn. 

OneNote  presents  you  with  a  blank 
page.  You  can  dick  anywhere  on  the 
page  and  start  typing:  if  you're  using  a 
Tablet  PC.  you  can  write  anywhere  on  o»iiiiiiii— ■■ 
the  screen  using 'digital  ir4(.' You  can 
create  new  foWets.  accessed  va  tabs  aJ  .. 

the  lop  of  thescreea  and  new  pages  ■■ ,  .  . . 

within  folders,  accessed  with  tabs  on  -n.t  -rr- 

the  right  of  the  saeen. 

When  you  enter  copy  onto  a  OneNote 
page,  it  recognizes  bullets  and  num¬ 
bered  lists.  It  understands  outlines  and 
offers  several  oudine  modes.  Ybu  can  - 
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PICTURE  being  able  to  scatter 
hundreds  of  tiny  sensors 
around  a  building  to  monitor 
temperature  or  humidity.  Or 
deploying,  like  pixie  dust,  a 
network  of  minuscule,  remote  sensor 
chips  to  track  enemy  movements  in  a 
military  operation. 

*^inart  dust”  devices  are  tiny  wire¬ 
less  microciectromechanical  sensors 
<MEMS)  that  can  detect  everything 
from  light  to  vibrations.  Thanks  to  re¬ 
cent  breakthroughs  in  silicon  and  fab¬ 
rication  techniques,  these  "motes” 
could  eventually  be  the  size  of  a  grain 
of  sand,  though  each  would  contain 
sensors,  computing  circuits,  bidirec¬ 
tional  wireless  communications  tech¬ 
nology  and  a  power  supply.  Motes 
would  gather  scads  of  data,  run  com¬ 
putations  and  communicate  that  infor¬ 
mation  using  two-way  band  radio  be¬ 
tween  motes  at  distances  approaching 
1.000  feet. 

Potential  commercial  applications 
are  varied,  ranging  from  catching  man¬ 
ufacturing  defies  by  sensing  our-of- 
range  vibrations  in  industrial  equip¬ 
ment  to  cracking  patient  movements  in 
a  hospital  room. 

Design  hnpasse 

Still,  for  all  the  promise,  there  are  a 
number  of  technical  obstacles  to 
wtde^rcad  commercial  adc^tion.  For 
instance,  researchers  are  wrestling 
with  design  challenges  in  fusing 

MEMS  and  electronics  onto  a  _ 

single  chip,  says  Gary  Fedder. 
associate  professor  of  electrical 
and  computer  engineering  and 
robotics  at  Came^  Mellon 

University  in  Pittsburgh.  - 

Fedder.  a  co-fouiKler  of  Carnegie 
Mellon's  MEMS  Laboratory,  has  been 
trying  to  tackle  these  development  is¬ 
sues  through  t>ew  fabrication  and  de¬ 
sign  techniques,  but  he  acknowledges 
that  the  lab  has  quite  a  bit  of  work 
ahead  of  it 

**1116  paradigm  has  been  to  have  a 


Multifunctional  Mote 

The  goal  of  the  smart-dust  profset  at  UC  Berfcsiey  is  to  buW  self-con¬ 
tained.  mIRmeteracaie  devices  that  include  sensors,  cwnputationa] 
abiBty.  bidkoctional  wirelest  communications  technology  and  a  power 
supply,  wtifle  being  ktexperaive  enough  to  be  deployad  by  the  hundreds. 


r*  inrt  rtcMW 


single  engioeer  be  the  champion  of 
these  systems  and  fuse  it  all  together 
to  make  a  [single]  chip.  That  requires  a 
superhuman  efFixt"  says  Fedder.  The 
lab  has  been  developing  design  tool 
technology  to  aid  the  ei^neers  who 
may  ultimately  design  these  kinds  of 
systems,  he  says. 

What  makes  all  this  effort  worth- 

_  while  is  a  growing  feeling 

among  researchers  that  these 
technologies  may  eventually 
have  a  huge  impact  on  society. 
That  also  helps  explain  w^hy 
the  Defense  Advanced  Re¬ 
search  Projects  Agency  began  funding 
aspects  of  this  vrork  at  the  University 
of  California.  Berkeley,  in  1998. 

The  goal  for  researchers  is  to  get 
these  chips  down  to  Inun  on  a  side. 
Current  motes  are  about  Smin.  says 
Kristofer  Pister.  professor  of  elec^cal 
engineering  at  UC  Berkeley,  who’s  been 
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workii^  with  smart  dust  since  1997. 

Pister  is  on  sabbatical  from  the  uni¬ 
versity  until  early  2004  at  Dust  inc..  a 
Berkeley-based  developer  of  peer-to- 
peer  wireless  sensor  networks.  Dust’s 
charter  is  to  give  developers  hardware 
and  software  interfaces  ”that  are  sta¬ 
ble,  reliable  and  low  cost,”  he  says. 

The  cost  of  motes  has  been  dropping 
steadily.  Prices  range  from  SSO  to  $100 
each  today,  and  Pister  anticipates  that 
they  will  fall  to  S)  within  five  years. 

He  sees  a  plethora  of  potential  com¬ 
mercial  applications  for  smart  dust,  in¬ 
cluding  serving  as  traffic  sensors  in 
congested  urban  areas  and  monitoring 
the  power  consumption  of  household 
appliances  to  determine  whether 
they're  operating  at  peak  efficiency. 

Pister  and  others  are  quick  to  point 
out  that  the  size  of  these  microma¬ 
chines  presents  thorny  power  supply 
challenges.  Ideally,  researchers  and 


Smart  Dust 

Mighty  motes  for  medicine,  manufacturing,  the  military  and  more. 
By  Thomas  Hoffman 


commercial  contractors  want  to  be  able 
to  deploy  wireless  motes  that  aren’t 
tethered  to  power  sources,  and  many  of 
the  systems  being  tested  or  in  use  to¬ 
day  rely  on  miniature  battery  power. 

■Ttou’ve  got  this  limited  pile  of  ener¬ 
gy  in  your  battery,  and  you  need  to 
distribute  that  out  and  make  it  last." 
says  Mike  Horton,  CEO  of  Crossbow 
Technology  Inc.,  a  San  Jose-based 
maker  of  MEMS  technologies  whose 
customers  include  a  cosmetics  compa¬ 
ny  that  uses  wireless  sensors  to  gauge 
humidity  levels  in  its  warehouses  for 
moisture-sensitive  products,  '^ou  can 
plug  it  into  the  wall,  but  that  kind  of 
defeats  the  purpose  of  these  auton¬ 
omous  sensors.” 

Breakthroughs  Expected 

Researchers  are  attacking  the  problem 
in  part  by  focusing  on  so-called  low- 
power  ad  hoc  routing  protocols,  which 
figure  out  how  to  get  a  message  from 
one  mote  to  another  using  the  least 
amount  of  energy.  Research  on  this 
kind  of  power  has  been  emerging  over 
the  past  two  years  at  UC  Berkeley, 

MIT  and  the  University  of  California. 
Los  Angeles. 

"We  haven’t  found  a  one-size-fits-all 
approach  yet."  Horton  says.  StiU,  he  be¬ 
lieves  two  near-term  technical  break¬ 
throughs  for  these  wireless  sensors  in 
the  areas  of  power  and  size  arc  poised 
to  occur.  ’The  first  involves  paring  the 
several  semiconductors  needed  today 
to  operate  these  motes  down  to  a  sin¬ 
gle  semiconductor,  a  development 
Horton  foresees  occurring  about  two 
years  from  now. 

On  the  power  side.  Horton  points 
to  research  by  UC  Berkeley’s  Shad 
Roundy  on  fuel  cells  that  can  "scav¬ 
enge"  energy  to  make  smart-dust  de¬ 
vices  run  longer.  This  includes  draw- 
off  the  ambient  vibration  energy 
generated  by  an  industrial  machine  or 
gathering  energy  ffora  low  levels  of 
light.  TTiese  scavei^r  energy  tech¬ 
nologies  might  be  five  years  off.  Hor¬ 
ton  says. 

While  researchers  and  commercial 
developers  are  agog  over  the  potential 
applications  for  smart  dust,  they’re 
also  careful  to  point  out  the  design  and 
power  issues  that  still  need  to  be  re¬ 
solved.  Says  Fedder.  ’There  are  a  lot  of 
people  ch^pii^  at  the  bit  to  commer¬ 
cialize  this  technology,  hut  the  technol¬ 
ogy  still  has  to  mature,  and  widespread 
use  is  still  several  years  off.”  k 
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Ironic  how  it  takes  the  cutting  edge 
technology  of  2003  to  access  the 
cutting  edge  technology  of  1973. 

myEXTRA!™  Smart  Connectors  let  you  leverage  your  existing  legacy  data  and  logic. 


“Cutting  edge"  doesn’t  cut  it.  You  need  products 
that  do  what  they  say  they  will  do.  This  is  what 
we  say:  Our  myEXTRA!  Smart  Connectors  give  you 
XML-based  Web  services — they  let  you  get  at  legacy 
information  without  changing  host  applications. 
You  can  put  all  of  the  business  data  and  applica¬ 
tions  locked  up  in  mainframes  to  new  use  In  hours 
or  days,  not  weeks  or  months.  We've  spent  the  last 
18  years  making  legacy  data  more  useful.  Smart 
Connectors  are  the  logical  next  step,  making  data 
easier  to  get  at. 

Find  out  more.  Download  our  free  White  Paper 
“Leveraging  legacy  Applications  to  Serve  New 
Business  Initiatives"  at  www.attachmate.e0m/SC7. 
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Insecure  Servers 
Suffer  Image  Problem 


A  nxitine  secui%  assessment  shows  that 
secure  basefine  images  must  be  up  to  date 
or  server  administradors  win  ignore  them. 


By  Mathias  Thurman 

This  week.  I  conducted  a 
qakk,  routine  vuloera- 
bility  assessment  of  a 
sample  of  our  produc¬ 
tion  enviroiunent.  I  wasn't 
pleased  with  the  results. 

Ongoing  vuberabUity  as¬ 
sessments  are  critical  in  deter¬ 
mining  my  company's  security 
posture  at  any  given  time. 

My  methodology  is  fairly 
straightforward  1  use 
a  comhinaiion  of 
three  scanning  tools: 

Internet  Scanner 
from  Internet  Securi¬ 
ty  Systems  Inc.  in  At¬ 
lanta.  Retina  Networic 
Scanner  from  eEye 
Digital  Security  in  AUso  Viejo, 
Calif.,  and  Nessus.  a  free  net¬ 
work  scaiuer  available  at 
wwwj(essus.org.  With  these 
powerful  fools.  1  can  get  a 
comprehensive  view  of  our  IT 
infrastructure’s  vulnerabili¬ 
ties.  Tm  not  suggesting  that 
this  method  discovers  100%  of 
all  possible  problems,  but  it 
gets  close.  And  our  other  ac¬ 
tivities.  sucb  as  application- 
level  assessments,  architec¬ 
ture  reviews  and  code  re¬ 
views.  get  us  even  closer. 

All  three  tools  are  simj^e  to 
use  and  can  scan  from  a  pre- 
con%ured  list  of  IP  addresses. 
For  my  assessment.  I  selected 
a  sample  from  each  frincticmai 
area.  For  example,  I  picked 
Web  servers,  databa^  servers. 
^jplkatioD  servers,  e-mail 
servers,  Domain  Name  System 
servers,  Lightweight  CHrectory 
Access  Protocol  servers,  do¬ 
main  controllers  aiKi  a  few 
nrewalls.  routers  and  network 
switches.  I  used  the  Windows 
Notepad  applet  to  create  a 
host  Ale  and  entered  about  40 
IP  addresses  into  the  list 


We  have  more  than  300 
servers  in  our  production  en¬ 
vironment.  but  I  scanned  only 
40  of  them.  I  don’t  have  time 
to  assess  and  review  every 
server,  and  1  shouldn’t  have  to 
do  so.  since  all  servers  for  a 
given  frinction  are  identically 
configured.  Or  so  I  thought. 

To  achieve  consistency, 
server  administrators  are  sup¬ 
posed  to  use  a  stan¬ 
dard  jump-start  im¬ 
age  and  then  run 
postinstall  scripts 
that  install  addtiioo- 
al  software  and 
make  security  modi¬ 
fications.  depending 
on  the  server's  frtnetioa  Our 
administrators  are  supposed 
to  maintain  and  use  these  im¬ 
ages  whenever  they  build  a 
new  system,  so  an  assessment 
of  one  type  of  resource  should 
yield  the  same  result  for  every 
server. 

My  assessment  included 
five  Oracle  database  servers, 
three  of  which  had  serious  se¬ 
curity  boles.  For  example,  one 
server  was  running  a  vulnera¬ 
ble  version  of  the  Secure  Shell 
(SSH)  program.  Our  current 
baseline  includes  the  most 
current  version  of  SSH,  so  un¬ 
less  someone  had  downgraded 
the  current  version,  that  Ora- 


Ibeprofaleni 
went  beyond  just 
one  program....  The 
junip-^art  process 
was  deafly  brokea 


cle  server  hadn't  been  built  us¬ 
ing  the  standard  baseline  im¬ 
age.  To  my  surprise,  many  oth¬ 
er  servers  weren’t  built  with 
the  jump-start  image  either. 
Instead,  administrators  had 
built  tbero  using  a  full  install 
of  the  Solaris  2.8  operating 
system.  That  includes  more 
than  600  programs,  of  which 
we  use  only  a  small  number. 

Alarmed,  I  called  a  meeting 
of  the  Unix  administration 
and  security  groups.  It  turned 
out  that  the  Unix  group  had 
created  a  new  jump-start  im¬ 
age  based  on  the  frill  comple¬ 
ment  of  the  operating  system 
because  it  was  having  prob¬ 
lems  with  an  application  that 
needed  some  shared  libraries 
that  weren't  part  of  the  origi¬ 
nal,  secure  image. 

Furthermore,  the  develop¬ 
ers  of  the  application  in  ques¬ 
tion  weren’t  sure  which  li¬ 
braries  were  needed  for  prop¬ 
er  operation,  so  the  Unix 
had  decided  it  would  be  easier 
to  create  a  new  image  that  in¬ 
cluded  the  full  Solaris  install 

But  the  problem  went  be¬ 
yond  just  one  program:  The 
Unix  group's  manager  cited 
examples  of  other  applications 
that  didn’t  work  bet^use  the 
needed  libraries  weren't  avail¬ 
able.  The  jump-start  process 
was  clearly  broken. 

The  Fix 

After  some  debate,  we  agreed 
on  a  procedure.  First,  we  re¬ 
viewed  our  baseline  image.  To 
come  up  with  a  new  one,  we 
printed  out  a  list  of  all  the  ap¬ 
plication  packages  deployed 
during  a  full  Solaris  2.8  instal¬ 
lation.  We  then  crossed  out 
all  the  programs  we  knew 
weren't  needed,  such  as  sup¬ 
port  for  unused  hardware 
types  and  software  used  to 
play  music  or  render  graphics. 
Our  seasoned  Solaris  admiius- 
trators  easily  went  through 
this  list  in  less  than  an  hour. 


We  then  installed  our  Web 
and  database  server  software 
to  determine  which  packages 
and  libraries  they  needed. 
Most  of  the  servers  in  our  pro¬ 
duction  environment  fail  into 
three  areas;  Web,  application 
and  database.  The  Web  and 
database  environments  are 
fairly  static.  We  know  what 
they  need  to  function  proper¬ 
ly,  but  with  the  application 
servers,  we  never  know  what 
will  be  needed  for  them  to 
function  property.  This  is  what 
was  causing  our  problems. 

Fortunately.  Solaris  includes 
utilities  that  can  trace  each  ap¬ 
plication’s  system  calls  and 
determine  which  software  and 
libraries  it  needs.  Usually,  we 
start  with  the  baseline  image 
and  run  these  utilities  in  a  lab 
environment,  but  the  Unix 
group  hadn't  done  this  be¬ 
cause  of  a  lack  of  time  and 
resources.  My  security  team 
asked  a  Unix  administrator  to 
write  a  script  we  could  use  to 
run  these  utilities  for  each  ap¬ 
plication  and  to  create  a  re¬ 
port  of  all  the  needed  Solaris 
packages  and  libraries. 

Now  we  have  a  static  Web 
and  database  tier  and  an  appli¬ 
cation  tier  that  starts  with  a 
better  baseline  jump-start 
build.  We  can  then  add  or  re¬ 
move  any  components  based 
on  each  application's  needs. 

We  hope  we  can  live  with 
this  methodology  until  the  se¬ 
curity  group  can  find  the  time 
to  do  some  research  on  com¬ 
mercially  available  tools  that 
might  assist  us  in  this  area.  I 
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llik  week's  jourai  is  witen  by  e  real 
seeuXy  manager.  *Mtfhi3S  Thunan.* 
whose  name  and  employer  have  been 
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MAGIC  SERVER  BEANS 

Instant  information  infrastructure  from  a  bean,  on  demand. 
Thrives  or^nically  in  data-rich  environment. 

With  64  beans  per  pouch  (bpp),  you  can  create  64  separate  servers. 
Lithium-l^ume  magic  distributes  power  where  needed. 
Patented  plant-and-play  technology,  on  demand. 

Magic  Server  Beans  are  a  complete  fable. 

VS. 


THE  IBM  (f)  server  iSeries"  440 

Up  to  16  processors  for  pay-as-you-grow  capacity,  on  demand. 
Minimizes  painful  upgrades  and  redeployment. 

Logical  partitioning  deploys  up  to  64  virtual  servers  with  VMware""  software. 
Powered  by  Intel®  Xeon"'  processors  for  scalability  and  flexibility. 

For  a  virtual  tour  or  to  locate  a  Business  I^rtner, 
visit  tom.eom/e6erver/x440 


(@  business  on  demand 
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WorKsc^  Boosts 
HR  Applications 

Worfcseape  inc.  Mfior  this  month 
amouncMl  that  R  has  upgraded 
ib  sidte  ol  human  resources  ap- 
pBcattons.  Wotliscape  &it8rprise 
4^  indudes  new  configmbon 
tods  and  enhanced  support  for 
pianninB  and  eiecuting  camplei, 
pertorreance-faased  comperaa- 
tkm  programs.  The  sdte  also  fee* 
taaos  enhanced  employee  self- 
sertdce  appBcahons  and  added 
deciaioo-support  capabities.  the 
Framingham.  Iiass.*h8sed  com* 
pany  said.  Worfocape  Enterprise 
4.2  wS  tw  avaiafaie  next  month 
in  both  KcerBe-based  end  hasted 
options,  licensed  software  prfc* 
Big  lor  the  hJ  tOfaffacape  Enter* 
priee  4.2  suite,  induding  ai  seH- 
sendca  appications.  ranges  from 
$350,000  to  $450,000  fori 
n.OOO-emptoyee  organization. 
For  more  Mormetion,  visit 


Senega  Ships  New 
Tools  for  Switches 

Servega  fric.  in  Burr  Ridge.  HI. 
announced  it's  ddpping  XESOS 
Shidk).  eoftwore  management 
took  and  an  tetorface  for  oparat* 
ing  Rs  Swvagi  XPE  2000  line  of 
switches.  The  eoftwwa  supports 
deptoywents  of  XML  acceiarttion. 
security  and  routing  settings  and 
is  desiyied  to  reduce  administra- 
tion  costs.  It  ships  at  no  extra 
cost  wHh  XPE  2000  swRches. 


Pen&Intemet 
Upgrades  riteMail 

Mtotemet  UC  lad  wed( 
reteeaed  riteilai  2.0  for  Windows 
and  Podief  PC  systams.  The  soft* 
wore  aiows  mobia  users  to 
transter  hindwrftton  notes  from 
hMidhald  dmices  to  desktop  PCs 
tor  fr-nadtag.  edRIng  and  print* 
tog.  saM  the  Sumyvate,  CaM.* 
based  company.  RHeHal  abo 
recogazes  comriMn  freehand 
shapes  and  handwi  Rian  text  en- 
abiog  that  type  d  eontenl  to  be 
copied  into  other  appfcatioos. 
RMlai  cods  $21.%  for  ftmliBt 
PC«d$24%forWtodow$. 


TOMMY  PETERSON 


Eyes  on  the 
Self-service  Prize 


IT  OCCURS  TO  ME,  at  the  risk  of  seeming 

immodest,  that  I  may  be  the  ideal  customer  for 
developers  of  self-service  applications  to  keep 
in  mind.  And,  as  Robert  L.  Scheier’s  story  (“Know 
Thy  Customers,”  page  25)  points  out,  if  you’re 
going  to  lure  people  away  from  person-to-person  inter- 


actions  to  less*expcnsive 
automated  Web  transac* 
lions,  you  need  to  know 
what  those  people  are  look¬ 
ing  for. 

The  product  of  a  long 
line  of  Luddites  and  impa¬ 
tient  by  nature,  I  was  slow 
to  come  to  online  shopping 
or  even  to  free  transactions 
over  the  Web.  I  still  would 
rather  browse  my  local 
brick-and-mortar  book¬ 
store  than  Amazon.com. 

I'm  always  ready  to  abandon  almost 
any  Internet  transaction  that  requires 
me  to  answer  more  than  three  ques¬ 
tions  before  I  can  get  on  with  the 
business  at  hand.  Despite  the  less- 
than*subtle  efforts  of  the  financial  ser¬ 
vices  firm  that  manages  my  401<k)  to 
force  all  our  communications  onto  the 
Web.  I  have  ferreted  out  its  customer 
service  phone  number  (no  easy  task) 
and  use  it  at  the  first  twinge  of  Inter¬ 
net  fhistration.  Given  the  choice  of 
going  to  the  office  of  the  nice  woman 
in  human  resources  to  get  benefits 
forms  vs.  filling  them  out  online.  I'll 
take  the  personal  visit  every  time. 

I  have  even  been  known  to  lash  out 
at  that  most  basic,  ubiquitous  and 
relatively  low-tech  symbol  of  self- 
service.  the  automated  teller  machine. 
The  security  camera  at  my  local 
branch  has  caught  me  cursing  almost 
every  time  1  try  to  negotiate  any  trans¬ 
action  more  complex  than  withdraw¬ 
ing  a  quick  50  bucks. 

There  are  lots  of  people  out  there 
like  me.  That's  why  companies  look¬ 
ing  to  implement  self-service  applica¬ 


tions  should  pay  attention 
to  our  needs. 

Our  resistance  to  seif* 
service  has  nothing  to  do 
with  technophobia  —  we 
can  fall  foolishly  in  love 
with  slick  technology  as 
quickly  as  the  next  person. 
But  we’re  less  vulnerable 
to  such  infatuations  when 
our  time  and  money  are  at 
stake.  At  those  times, 
we’re  looking  for  conve¬ 
nience,  control  and  the 
kind  of  flexibility  of  response  that  has 
proved  hard  to  automate. 

But  let’s  take  a  closer  look  at  ATMs, 
whose  acceptance  is  often  cited  as  a 
pertinent  precedent  by  many  self- 
service  technology  vendors.  Three 
of  the  last  four  vendors  I’ve  spoken  to 
acknowledged  that  their  applications 
sometimes  meet  “cultural  resistance” 
but  pointed  to  ATMs  as  the  model  for 
the  public  simply  “getting  used  to"  the 
idea  of  technology  replacing  human 
interaction. 

In  reality,  the  simple  range  of  bank¬ 
ing  functions  available  through  your 
ATM  is  perfectly  suited  for  automa¬ 
tion.  The  bank  has  a  database  of  the 
information  it  needs  (account  bal¬ 
ances).  and  the  combination  of  pro¬ 
grammed  card  and  four-digit  personal 
identification  number  provides  easy 
and  cfTective  identity  authentication 
and  access  control.  ATMs  appeared  in 
19<>9  as  cash  dispensers,  and  though 
some  big  banks  such  as  Citigroup  and 
Bank  of  America  are  moving  to  Web 
ATMs  with  a  dazzling  array  of  poten¬ 
tial  services,  the  function  they're  most 


often  used  for  hasn't  changed  much. 

ATMs  were  designed  to  fill  a  simple 
need  —  round-the-clock  access  to  cash 
—  and  they  deliver  (well,  most  of  the 
time).  The  machines  allow  banks  to 
keep  customers  happy  without  increas¬ 
ing  their  hours  of  business  or  staff. 

But  rather  than  allow  the  successful 
saga  of  the  ATM  to  generate  illusory 
hopes,  developers  of  self-service  tech¬ 
nologies  would  do  better  to  take  away 
a  couple  of  humbling  lessons.  After 
all.  although  about  63%  of  bank  cus¬ 
tomers  say  they  use  ATMs,  according 
to  the  American  Bankers  Association, 
less  than  2S%  do  banking  online  from 
their  homes  or  offices. 

The  first  of  those  lessons  is  that 
you’ve  always  got  to  figure  out  exactly 
what’s  in  it  for  the  user  of  a  self-ser¬ 
vice  application.  The  answer  i.s  usual¬ 
ly  convenience.  Do  the  perceived  user 
benefits  outweigh  any  time,  effort  and 
frustration  incurred  while  using  the 
application?  Failure  to  pay  attention  to 
this  calculation  will  send  users  direct¬ 
ly  to  the  nearest  potentially  helpful 
human,  the  phone  or  somebody  clse’s 
Web  site,  depending  on  the  situation. 

The  other  lesson  is  to  simplify,  sim¬ 
plify.  simplify.  Make  self-service  func¬ 
tions  as  straightforward  as  you  can 
while  still  achieving  your  goals  (sav¬ 
ing  money  usually  being  chief  among 
those).  During  development,  take  the 
lime  to  make  the  application  easy  to 
negotiate:  Reduce  tbe  number  of  fields 
the  user  needs  to  fill  out,  and  mini¬ 
mize  the  amount  of  information  he 
needs  to  provide.  If  a  piece  of  informa¬ 
tion  isn’t  central  to  the  business  func¬ 
tion  of  the  application,  don't  ask  for  it 

Repeat  after  me:  Card  and  PIN  go 
in.  cash  comes  out.  It's  an  unattainable 
ideal  for  many  self-service  applica¬ 
tions.  but  it  will  help  keep  developers 
focused.  I 
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SarvegaShi^New 
Tools  for  Switches 

Sarvapa  he.  to  Burr  ndga.  In 
maMuaead  rt  toipptao  XBOS 
Tfiatn  awltawfa  manuganumt 
tootoandantotortocafaroparat- 
tap  ito  Saraapa  IPE  2000  tow  ol 
aarihtoaa.  Tha  aafimra  aupporto 
daptoynwata  of  XMl  aecalaraBon. 
aauaily  and  taattap  aatfinga  and 
ia  daaipwd  to  ladaoa  adadnlatra* 
itaa  eoato.  R  tadpa  at  no  aKtra 
taal  adOi  XPC  MOO  ladtehaa. 
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IT  OCCURS  TO  ME.  at  the  risk  of  seeming 

immodest,  that  I  may  be  the  ideal  customer  for 
developers  of  self-service  applications  to  keep 
in  mind.  And,  as  Robert  L  Scheier’s  story  (“Know 
Thy  Customers,”  page  25)  points  out,  if  you’re 
going  to  lure  people  away  from  person-to-person  inter- 


actions  to  less-expensive 
automated  Web  transac¬ 
tions.  you  need  to  know 
what  those  people  are  look¬ 
ing  for. 

The  product  of  a  long 
line  of  Luddites  and  impa¬ 
tient  by  nature,  I  was  slow 
to  come  to  online  shopping 
or  even  to  free  transactions 
over  the  Web.  I  still  would 
rather  browse  my  local 
brick-and-mortar  book¬ 
store  than  AmazoiLcoitL 
Fm  always  ready  to  abandon  almost 
any  Internet  transaction  that  requires 
me  to  answer  more  than  three  ques¬ 
tions  before  I  can  get  on  with  the 
business  at  hand.  Despite  the  less- 
than-subtle  efforts  of  the  financial  ser¬ 
vices  firm  that  manages  my  401(k)  to 
force  all  our  communications  onto  the 
Web,  I  have  ferreted  out  its  customer 
service  phone  number  (no  easy  task) 
and  use  it  at  the  first  twinge  of  Inter¬ 
net  frustration.  Given  the  choice  of 
going  to  the  office  of  the  nice  woman 
in  human  resources  to  get  benefits 
forms  vs.  filling  them  out  online,  Fll 
take  the  personal  visit  every  time. 

I  have  even  been  known  to  lash  out 
at  that  most  basic,  ubiquitous  and 
relatively  low-tech  symbol  of  self- 
service,  the  automated  teller  machine. 
The  security  camera  at  my  local 
branch  has  caught  me  cursing  almost 
every  time  I  try  to  negotiate  any  trans¬ 
action  more  complex  than  withdraw¬ 
ing  a  quick  SO  bucks. 

There  are  lots  of  people  out  there 
like  me.  That's  why  companies  look¬ 
ing  to  implement  self-service  applica¬ 


tions  should  pay  attention 
to  our  needs. 

Our  resistance  to  self- 
service  has  nothing  to  do 
with  technophobia  —  we 
can  f^  foolishly  in  love 
with  slick  technology  as 
quickly  as  the  next  person. 
But  we’re  less  vulnerable 
to  such  infatuations  when 
our  time  and  money  are  at 
stake.  At  those  times, 
we're  looking  for  conve¬ 
nience.  control  and  the 
kind  of  flexibility  of  response  that  has 
proved  hard  to  automate. 

But  let’s  take  a  closer  look  at  ATMs, 
whose  acceptance  is  often  cited  as  a 
pertinent  precedent  by  many  self- 
serviM  technology  vendors.  Three 
of  the  last  four  vendors  I've  spoken  to 
acknowledged  that  their  applications 
sometimes  meet  "cultural  resistance” 
but  pointed  to  ATMs  as  the  model  for 
the  public  simply  "getting  used  to”  the 
idea  of  technology  replacing  human 
interaction. 

In  reality,  the  simple  range  of  bank¬ 
ing  functions  available  throu^  your 
ATM  is  perfectly  suited  for  automa¬ 
tion.  The  bank  has  a  database  of  the 
information  it  needs  (account  bal¬ 
ances),  and  the  combination  of  pro¬ 
grammed  card  and  four-d^t  personal 
identification  number  provides  easy 
and  effective  identity  authentication 
and  access  control.  ATMs  appeared  in 
1969  as  cash  dispensers,  and  though 
some  big  banks  such  as  Citigroup  and 
Bank  of  America  are  moving  to  Web 
ATMs  with  a  dazzling  array  of  poten¬ 
tial  services,  the  function  they're  most 


often  used  for  hasn’t  changed  much. 

ATMs  were  designed  to  fiU  a  simple 
need  ~  round-the-clock  access  to  cash 
—  and  they  deliver  (well  most  of  the 
time).  The  machines  allow  banks  to 
keep  customers  happy  without  increas- 
ii^  their  hours  of  busii^ss  or  staff. 

But  rather  than  allow  the  successful 
saga  of  the  ATM  to  generate  illusory 
hopes,  develo(>ers  of  self-service  tech¬ 
nologies  would  do  better  to  take  away 
a  couple  of  humbling  lessons.  After 
all,  although  about  63%  of  bank  cus¬ 
tomers  say  they  use  ATMs,  according 
to  the  American  Bankers  Association, 
less  than  25%  do  hanking  online  from 
their  homes  or  offices. 

The  first  of  those  lessons  is  that 
you've  always  got  to  figure  out  exactly 
udiat's  in  it  for  the  user  of  a  self-ser¬ 
vice  application.  The  answer  is  usual¬ 
ly  convenience.  Do  the  perceived  user 
benefits  outweigh  any  time,  effort  and 
frustration  incurred  while  using  the 
application?  Failure  to  pay  attention  to 
this  calculation  will  send  users  direct¬ 
ly  to  the  nearest  potentially  helpful 
human,  the  phone  or  somebody  else's 
Web  site,  depending  on  the  situation. 

The  other  lesson  is  to  simplify,  sim¬ 
plify,  simplify.  Make  self-service  func¬ 
tions  as  straightforward  as  you  can 
while  still  achievii^  your  goals  (sav¬ 
ing  money  usually  being  chief  among 
those).  During  development,  take  the 
time  to  make  the  application  easy  to 
negotiate:  Reduce  the  number  of  fields 
the  user  needs  to  fill  out,  and  mini¬ 
mize  the  amount  of  information  he 
needs  to  provide.  If  a  piece  of  informa¬ 
tion  isn’t  central  to  the  business  func¬ 
tion  of  the  application,  don't  ask  for  it. 

Repeat  after  me:  Card  and  PIN  go 
in.  cash  comes  out  It’s  an  unattainable 
ideal  for  many  self-service  applica¬ 
tions,  but  it  will  help  keep  developers 
focused.! 
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Can  grant  three  wishes.  At  your  command. 

Operates  on  oil,  hand  rubbing  and  suspended  disbelief. 
Brass-based.  Mysterious  and  powerful. 

Legendary  tall  tale,  completely  100%  imaginary.  Genie-driven. 
Magic  Genie  Lamp  is  not  presently 
available  in  stores,  now  or  ever. 


THE  NEW  IBM  (©server  iSeries' 

Can  grant  on/off  added  capacity.'  On  demand. 
Operates  easily  with  Windows?  Linux®  and  OS/400? 
Copper-based.  Simple  and  powerful. 

Easy  to  use,  with  self-healing,  self-managing  capabilities. 
For  more  on  iSeries  and  the  on  demand  era, 
visit  ibm.eoin/eserver/genie 
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Leading  Geeks 

Just  Got  Easier 


The  Definitive  Inside  Guide 
to  Geek  Management 

By  Paul  Glen 

$26.95  ♦  253  pages  ♦  http://www.leadinggeeks.com 

"Paul  Glen's  insights  and  experience  provide  the  keys  to 
unlocking  (he  potential  [of  geeks]." 

-l^arren  Bennis 
Co-author  Geeks  and  Geezers 


"Leading  Geeks  provides  a  unique  and  pragmatic  perspective  of 
the  issues  faced  by  technologists  as  they  create  value  within  an 
organization.  The  ideas  here  will  help  any  technical  business." 

.  .f’- 

1 

— Allen  Dickason 

Sr  VP  and  CTO.  Ktnko's 

• 

in 

Leading  Geeks  challenges  the  conventional  wisdom 
about  leadership.  This  landmark  book  explains 
why  the  culture  of  technologists,  the  nature  of 
technical  work,  and  dynamics  of  power  undermine  tradi¬ 
tional  approaches  to  leadership. ..and  gives  you  the  tools 
to  lead  geeks  effectively. 
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Who  is  Likely  to  Become  a 
Leader  — and  why 

By  Warren  Bennis  &  Robert  Thomas 

$26.95  ♦  256  pages  ♦  http://www.geeksandgeezers.com 

"An  inspired  idea,  a  tantalizing  title,  an  essential  book. ' 

—Howard  Gardner 

Co-Author  of  Good  Work:  When  Excellence  and  Ethics  Meet 
■Required  reading  for  every  aspiring  leader" 

—Howard  Schuldr 
CEO.  Starbucks 

Today's  young  leaders  grew  up  in  a  very  different 
world  from  that  of  their  grandparents.  In  a  ground¬ 
breaking  study  of  these  two  disparate  groups— 
affectionately  labeled  'geeks*'  and  "geezers'— the 
authors  set  out  to  find  out  how  era  and  values  shape 
those  who  lead.  What  they  discovered  was  the  powerful 
process  through  which  leaders  of  any  era  emerge. 
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Foreword  by  David  Gergen 

Geeks  d" 
Geezers 

How  Era,  Values. 

and  Defining  Moments 
Shape  Leaders 


Warren  G.  Bennis 
Robert  J.  Thomas 
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i|  Are  wires  getting  in  the 
||  way  of  your  enterprise? 

|l  Attend  the  content-rich  conference  that  sees 
l  i  an  enterprise  without  wires 
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May  6-9,  2003 

|W  Marriott  Desert 
Springs  Resort 
Palm  Desert,  California 


Attend  Computerworld's 
Executive  Conference  on 
Mobile  and  Wireless 
Technologies! 

Mobile  and  wireless  technologies  push  the  enter¬ 
prise  envelope  every’  day,  from  customer-facing 
applications  all  the  way  to  the  factory  floor.  With 
the  proliferation  of  mobile  and  wireless  applica¬ 
tions,  devices  and  services,  how  can  you  keep 
your  enterprise  on  the  cutting  edge?  How  can  you 
find  today's  most  promising  mobile  and  wireless  technologies?  And 
how  can  you  learn  how  other  companies  and  industries  apply  the  latest 
and  greatest  mobile  and  wireless  tools? 

Brought  to  you  by  Computerworld,  you  will: 

•  Hear,  discuss  and  witness  winning  mobile  and 
wireless  strategies  in  the  enterprise 

•  Gain  first-hand  knowledge  that  can  enhance  your 
own  company's  mobile  and  wireless  strategy 

•  Examine  the  industry's  major  issues 
and  challenges 

•  See  developing  technologies 

•  Network  with  peers 

•  Meet  potential  partners 

•  Converge  with  analysts  and  press 

•  And  take  home  practical  tips  and  knowledge  of  technologies 
you  can  implement  right  away 


I  2003  JESSE  R  NEAL  AWARD 
BEST  rcws  COVERAGE 
"WK^LESSUNs- 


Keynote  &  Featured 


0  Nancy  Victory 

Assistant  Secretary  for  Information 

&  Communications 

U.S.  Department  of  Commerce 

Nancy  I  Vicwiy  has  the  unusual  distinction  of  playing  two  roles 
at  once  m  the  Bush  Administration  As  Assistant  Secretary  of 
Commerce  for  Communications  and  Information,  she  repotu 
diractly  to  Commerce  Seematy  Don  Evans  and  oversees  the  agency  within  the 
Commerce  Department  that  manages  the  fedetal  government's  use  of  specuum.  At 
the  same  nmfe  she  leivcs  as  AdmiiuAiaior  of  the  Naoonal  Tekcommunicaiioiu  and 
Information  Admmutraiion  (KTIA)  and  reports  rliiealy  id  the  Presideru  on  comimi- 
niiaiions  policy  matias.  la  rafe  Aswont  Scoetaiy  Viooty  has  advocated  oxn- 
pemiuu.  encDinged  inwvsiiaa  and  promoied  public  safely  and  seiui^. 


Tony  Scott 

CTO 

General  Motors 

Anthony  ( tony)  T  Scon  is  the  Chief  lechnoUigy  OfHcer  for 
I  cm's  Information  Systems  and  Services  (IS&S)  organisation 
J  Scott  is  responsible  for  defining  the  information  technology 
computing  and  telecommunications  architecture  and  stan¬ 
dards  across  atl  of  CM's  business  globally  tie  provides  leader¬ 
ship  in  the  areas  of  IT  atchiteaure  and  standards,  and  emerging  technology.  Me 
foined  CM  ftoin  Bristol-Myen  Squibb  where  he  was  Vice  Prestdent  Information 
Matugemeni.  responsible  for  the  management  of  the  global  computing 
infnMiucture. 


Leam  from  User  Case  Studies  and  Perspectives 


For  more  information  and  to  register,  visit  www. 


CONFERENCE  AGENDA  ptbftct  $0  ckMi* 


K  deuUa.  updaut,  and  to  icgitttr  vWi « 


uoi/cwt 


rUESDAY.  MAY  6 


1:00pm 

2:00pm 


Pre-Conference  Coif  Outing 
Concurrent  Worktops  and  Sessions: 

•  Technology  Workshops 
Ptrsented  by  Prenm,  Mutoroid  and  AVAVA 
and  other  ixMihops  to  be  announced 

•  Industry  Pipeline  Sessions 

•  Techrtology  Productivity  Training 
Presenud  by  Handheid  Mftiid  Cnnip 

Pre-Conference  Networking  Reception 


WEDNESDAY,  MAY  7 


7:00am 

8:00am 


Buffet  Breakfast 


Welcome  and  Opening  Remarks 

Ron  Millon.  Cxecuave  Presuienc  Computeruvrld 


Opening  Keynote  Presentation 
Nimcy  Vuvry.  .A^sutanr  Secreury  Jbr  Infijrmation  & 
OrnimuHicatwru.  US  DefunTmeni  of  Commerce.  Mmintstraur 
the  Naiionat  Information  &  Comrminkattons  Mmimstranon 


Wireless  Enterprise  Panel 

ftmrf  Moderator  Bob  Bream.  Mobile  &  Winstess  Reporter, 
Computeruvrld 

Panel  Membos:  Tom  Oiikm,  Manager.  Mobile  &  Wwetess,  Hilion 
Hotels,  loe  Prupwra.  CTT8  Mltq^9rr,  CinpH.  AUdn  TTwmpson. 
Prtsideni  6  CTO,  Rappcne  Techneiogief  (alhen  to  be  annatnced) 


User  Case  SUidy:  Wireless  Security  -  Risk  Management 
Ken  Newman.  Diitcior  of  In/ormation  SAuniy  &  Risk 
MarutgemenL  Deutsche  Bank 


10: 15am 
I0:30am 


Break 

Industry  Insists 
Presented  by  IBM 

Analyst  Update:  Mobile  Coes  Mainstream  -  What  FT 
Needs  To  Know 


Noon 

1:30pm 


Sponsor  Inuoduced  End-User  Case  Studies 
(concurrent  sessions] 

Networkirtg/Birds  of  a  Feather  LuiKheon 


Industry  Innovations  Panel 

.MoikT«nor  Crny  Purdy.  DiD.,  Prinnful  Analyst.  MobtlcTrox 


End-User  Case  Study:  Effective  Use  of  Wireless 
Networks 

Mike  Taylor,  CJO.  Todd  Pacifa  Shipyards 

industry'  insights-  The  Future  of  \fc»ice  Data  Converged 

Wireless  Networks 

Presented  by  Ptoxtm,  Molorpld  and  AVAVA 


3:15pm 

3:3C^m 


4:30pm 


Industry  Insights 
Presented  by  Toshiba 


5:00pm 

5:30pm 


Closing  Remarks 
Solutions  Showcase  &t  Expo 


with  Buffet  Dinner 


THURSDAY.  MAY  8 


7:00am 
8:00am 
8: 1  Sam 


Buffet  Breakfast 
Opening  Remarks 

Opening  Keynote  Presenuiion:  The  Wireless  Future 


In  The  Automotive  World 
Tony  &on.  C7D.  General  Motors 


End-User  Case  Study 

Sieie  Ikippe.  CIO.  Roio-Roaier.  and  Todil  Crautkrmet.  Senior  Vex 
Prtsideru.  Ceartvirrib 


Break 

Industry  Insights 
Pmenini  by  Symbun 

User  Case  Study  The  CIO's  Perspective  erf  Interring 
Mcrfiile  &  Wireless  Technology  into  Pacific  University's 
Objectives  -  Lessons,  Benefits  and  Red  Fla^ 

Lee  Colaw,  OO.  Pacific  Untversity 


9:30am 
10: 1  Sam 


Noon 

1:30pm 


2:00pm 

2:30pm 


CTO  Insists  Panel 
Break 


10:30am  industry  Insights 

Presented  by  Heulett-lkickard 

n:00am  End-User  Case  Study:  UPS  Unplugged 

Onv  SobniR.  PiQgiam  Mamger.  Uraied  Parcel  Senwr 


II  :30am  Sponsor  Introduced  End-User  Case  Studies 
(concurrent  sessions) 


Solutioiu  Showcase  &  Expo  with  Buffet  Lunch 


Industry  Insights 
liKob  Christfori  CIO.  Oracle 


End-User  Case  Study 
Ken  Vernier,  CTO.  Broadcom 


Industry  Insights 
PmentAl  by  IBM 


3:00pm 

3;15pm 


Technology  'Spoili^i'  -  Innovation  On  St^ 
liMtunng  demortstraiions  by  EFIfPrtmME.  Crtdant.  bynebrnk^. 
NAModffi  and  odten  to  be  annaunetd 


End-User  Case  Studies  (concurrent  sessions) 
Leveraging  Advanced  Technologies  to  Support 
Mobile  Wofken 

lim  Uidee.  Director  of  Bwinns  .Smtu^  and  Ptarmir^  GAivma 
Wireless  Locating  Systems  -  The  Technology 
for  Large  ROI 

Tim  Van  de  Merwe.  Iniemal  logaacs  Maru^. 

Aisoctated  Food  Stores 


End-User  Case  Studies  (concurrent  sessions) 

Access  to  Coqrorate  Dau  in  Wireless  Environments 


Andurny  Kuifc  Dtrector  of  Softioart  and  Enpiteermg  S)WW. 
Wmana  Meacai  S^wms 


'Pumpii^*  The  Most  Out  ofVbur  Database  with  Wliekss 
Eddte  Hiaqt  Manager.  fAvance  ReseoKh  arut  Technologtrs.  City 
of  Richmond.  BC  Canada 


Gala  Evening 

'Best  Practices  in  Mobile  A  Wireless'  Awards  Ceiemony 


FRIDAY,  MAY  9 


8:00ain 

S:30am 


Buffet  Breakfast 

Concurrent  WcHkshops  and  Sessions: 
•  Technologv  Wwkslwps 
rfbylBM 


and  other  MMshapi  lo  hr  announced 
•  Industry  PipeliiK  Sessions 
CofrfereiKe  Concludes 


avel  and  Accommodations 


I  ratiH  IS  the  official  navri  vmpany  for  Mobile  S  Witrkw  World 
are  your  one-Mop  shop  for  nrlusive  diwixmled  rales  on  hotel 
mmodaiions 


leive  your  accummoUaiions 
ww.rttenualcoat  OK 
M»i40-2»2  (ur  l-VH-8j0415<l) 


IIDG 


Pre-Conference  Golf  Outing 

Complimentaiy  for  Registered  fT  Users 

TV  Pre-Conference  GoK  Uulingat  The  Palms  Count  lucaied  ai  the  IW  Mamotl 
IVsen  Spring  Heson.  is  complimeniary  (SI6S  value)  tor  rejiwered  n  fnd-llien 


For  detaih  conucl  Chhs  Leget  at  l-S0S-82iraj77 


nwwusa.com/cwtor  call  1-800-883-9090 


Owneo  &  ^rooucvc  &v 

mmnm 

May  6-9,  2003 

|W  Marriott  Desert 
Springs  Resort 
Palm  Desert,  California 


Application  for  Conference  Registration 


TO  REGISTER: 

•  Fax  this  form  to  508-626-8524 

•  Or  register  online  at  www.mwwusa.com/cwt 

•  You  will  receive  a  confirmation  via  email 


QUESTIONS? 

•  Call:  Pam  Malingowski  at  800-883-9090 

•  Email:  mwwTcg@computerworld.com 


OPTIONS: 

All  dtilLit^mouinv  ere  mils  lunds  irgisluU' 
jII  wvuonc  the  I>pi>  muh  jihI  rctiyiiium  li 

wwwi-lienlruliCHn  exiling  1  ttiHl  Ml'  u 

nnv  include  full  xciru  lo 
[xnsporuiKm  and  hotel 
an  be  reserved  bt-  viviimg 

T  emailing  evmihuusmgSidg  con 

Earlybird 

Registration 

'  |ilunu(ji  vtanh  11  .'n'H 

Pre.Conference 

Registration 

(Apnl  1  ihniushNav  1  20t>l| 

Full/On-Site 

Registration 

(inwahriMat  j  M»| 

IT  F.nd-User:* 

□  $995 

□  $1,295 

□  $1,495 

Non-Sponsoring  Vendor:  ‘ 

■ 

□  $5,000 

□  $5,000 

□  $5,000 

‘II  Lnil-llwn  dtv  JellnnJ .»  those  who  arc  at 
poteniiaJiv  hu>/i>urchaM-  hardware, 'software/ 
JovlopmeiTi  Irom  anv  <ontpan>'.  analysis,  n 
iiigani/alion  are  escluUed  from  the  ‘IT  I  nd-l 
I  .iinputerviirlJ  Questions'  Please  rail  MH 
"Wrndors  arreitiourafird  to  partiopaie  in  C 
at  1  SOK-rQtMJI^  )  Mtenuliseh.  vendi'TS  (. 
(ompuierwoildl  inav  apply  hw  regitlraiion 
H  at  the  sole  dmiviHm  of  (iwnpuierwurU 


mding  (atmpulerseorld's  Mssbtle  S  Wireless  World  seiih  an  intent  (and  an  IT  spending  budgrt)  to 
crvices.'ete  from  our  conference  sponsors  and  exhibitors  As  such,  account  irpresentatives/business 
tiure  rapiiahsis.  and  anyone  else  attending  who  does  not  have  IT  purchasing  influence  within  tlieli 
Iset’  designation  I  nforcenient  of  this  interpretation  and  policy  is  at  the  sole  discretion  of 
SCKISSI-WO 

intpuieiworlds. Mobile  &  Wireless  World  through  sponsorship  (IWailsare  available  by  calling  Leo  legei 
i  wdl  as  venture  capitalists,  enuih'  anahw  and  other  ‘non-fl  end-user’  pirrfessionals  as  defitsed  bs 
I  the  ‘non-sporttoring  vendor'  rate  IVterminaiK'nofwhai  cnmtiiuees  a  'non  sponsonng  vendor’  regtsiraiioi 


Registration  Information:  (This  section  must  be  completed  in  order  to  process  your  application) 

1  ifst  Name;  _ 

Middle  Initial:  Last  Name: 

1  III.- 

finmnanv 

Street  .Address: 

Suite  Am  .  eic. 

Ciri: 

Staie/Prov: 

/in/Pnsial  Tode- 

tcvuniry:  _ 

Phnne  Number 

Extension; 

1  ax  Number: _ 

K-M.sil  Address: 

Radge  Name. _ 

□  .Snerial  Services  Reniiired?  iPliawauarhwniicndescnnuonl 

Would  ^-ou  like  to 

Please  indicate  yoi 

receive  information  about  playing  in  the  golf  outing  on  Tuesday,  May  6?  □  Yes  □  No 
ir  preferred  conference  shirt  size:  □  S  □  SI  □  L  □  Xi.  □  XXL  □  XXXI. 

Attendee  Profile:  ( Ihts  section  must  hr  completed  in  order  lo  process  your  application] 


Your  Organization's  Rusiness  /  Industryf 
(i.hnk  l>nly  One) 

J  Itanspitftaiiiui  llnliues 


O.iiSeiing  PuMu  Ih-tauoii 


J  I  omputrrs  (. 
I  itiiipineni 

J  Sgluulluu-  I 


";x~. 


J  Ihhn  IS  II  Managi'i 
J  ( lumnan.  (Id.  PirMdriii  l  tto 
J  t.Ki-tamiHairi  lieavuici 
J  t.M  \  P  ISueiSor 
J  itihei  i  aitpncate  '  Husiness  stanagrr 
J  (  orpoiatr  Business  Suit 
J  (  iinsuliani 

Your  Persona)  FT/tS  Spending  Authority? 


Number  of  Bmployees  (ALL  Locations)? 
J  T.lW- 
J  i.iKHv  a.’jnn 
3  >00  ‘Wl 
J  Under  Still 

What  is  your  Company  IT/IS  Budget? 

J  tXeiSI  billion 
J  Sion  million  S^on  9  million 

J  Sill  million  sn  9  millKin 

J  lessthanSI  million 


J  Hewlett  I'ackard  ‘ 


Your  Organization's  bnierprise  Standard  for 
Mobile  Device  Management  Software? 

J  Aether  Systems 


3  Mewleti  Packard  '  I 
3  IHM  livoli 
J  Undesk  Software 
3  Managesofi 


3  lAimaiech 
J  Marflih 
J  SynchruUigM 
3  Wavriink 
3  XcellNel 


Payment  Method 


□  check  Enclosed  (checks  must  be  received  by  April  29,  200} 
payable  to  Czsmpuierworid) 

Mail  to  Computetworld,  Attn.  Pam  Malingowski.  AOO  Old 
(xtnneaicut  Path,  framingham.  MA0I70I 

□  American  Express  QVISA  □  MasteKLard 
/Account  Number: 


Card  Holder  Name: 


Signature  of  Card  Holder: 


Cancellation  Policy 

[All  of  the  below  options  reijuire  wnlien  lUiiiFicanim  ) 

In  the  event  of  cancellation,  the  regisiram  has  ihtee  options: 

1 )  He  or  she  may  substitute  another  attendee  for  this  conference 

2 )  He  or  she  may  transfer  this  regisuation  to  the  next  Mobile  &  Wireless 
World  if  written  notice  is  received  by  April  17,  2003. 

})  the  registration  fee  will  be  refunded  less  $250  service  charge,  if 
wriiien  notice  is  received  by  April  1 7.  2003 
Please  send  cancellation  requests  via  email  to  mwwregOcompuier- 
world  com  or  call  I-800-Se3-9090  for  assistance 


3  So  MxndAtd  ^rl  l-sublishrd 


Computerworld  reserves  the  ri^i  to  limit  and/or  refuse 
any  registration  for  any  reason. 


03.24.03 


PEER  TO  PEERS 

Ton  W»s  To  Increase 
YourlTVakie 

Unm  Nft.  t  EMOutton  ii  tvwyttitag.  E)oD‘t 
get  embroiled  in  endless  analysis,  and 
take  risks,  writes  Matthew  Krieger, 
associate  director  of  global  netwoik 
services  at  Reader’s  Digest  Pagt  52 


So  You  Want  to  Bo  a  CTO 

Just  what  a  CTO  does  on  a  day-to-day 
basis  depends  on  who  hires  you,  whom 
you  report  to  and  vdiether  you  have 
budget  authority.  Lending  TVee  CTO 
Rick  Stiegler  (far  right)  is  in  the  minority 
in  that  he  reports  to  his  company's  CIO. 
Steve  Camp^lL  PaQS  42 


>/ 
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QUOTE  OF  THE  WEEK 

M  When  pooplt  rip  out  evgrythiiig  and 
put  in  an  aN^new  [supply'i:hain] 
system,  it's  the  equivalent  of  a  hevt  kmo 
ami  livm  transplant  aH  at  once.  H's  so 
risky  that  you  should  never  do  it  uidess 
the  patient  is  going  to  die  anyway.” 

>  Mki  Hugos.  00.  IMwerk  SwvkM  Co. 


Sa  INGER50U.-RAND  CO.,  a  manufacturer 
of  industrial  equipment,  is  always  seek¬ 
ing  to  reduce  its  supply  chain  costs. 

And  like  most  big  ctKnpanies.  the 
$8  billkm  company  tends  to  focus  its 
efibrts  on  its  20  largest  suppliers  —  wfaidi.  in  line 
with  a  widely  accepted  rule  of  thumb,  account  for 
about  80%  of  procurement  expenditures. 

But  two  years  ago,  driven  by  the  economic  slump 
that  persists  today.  Woodcliff  Lake.  N.I.-based  Inger- 
soll-Rand  began  paying  more  Mentioo  to  its  smaller 
suppliers  in  an  intensiTied  effort  to  drive  down  costs. 
The  manufacturing  OMnpaiiy  learned  there  were  sig- 
niHcant  savings  to  be  had  in  this  area  simply  because 
it  hadn't  been  scrutinized  before.  For  ezanq>le,  Inger- 
soU-Rand  found  that  while  mai<w  suppliers  were 
bending  over  backward  to  reduce  prices,  somesmall- 
er  ones  had  actually  passed  along  increases  of  up  to 
10%  annually  —  during  years  when  inflation  was 
practically  nooexistent 

Smaller  suppliers  were  also  more  likely  to  have 
poor  on-time  records,  vriiich  added  costs  by  fwdng 
IngersoU-Rand  n>  pay  premium  freight  charges  for 
last-minute  shipping.  Mom-and-pc^  trading  partners 
often  played  k  hist  and  k>ose  in  ways  chat  would  nev¬ 
er  be  tolerated  among  larger  suppliers.  The  company 
questioned  peers,  inctuding  competimrs.  and  discov¬ 
ered  that  it  wasn't  alone;  other  manufocturers  were 
also  leaving  savings  on  the  table  where  their  smaller 
trading  partners  were  concerned. 

Its  new  derennination  to  cut  supply  chain  costs 
prompted  Ingersoll-Rand  to  forge  an  alliance  with 
SupplyWocks  Inc.,  a  Bedford,  Mass.-based  vendor  of 
supplier-relationship  management  software,  and 
with  the  Woridwide  Logistics  Solutioas  business  unit 
of  height  company  Roboson  Tiansportatioa  The 
three  formed  a  procurement  outsourcing  business 
based  in  Tbrriiigtoa.  Omul,  called  The  21st  St^plier, 
which  aims  to  cut  companies*  costs  of  doing  business 
with  thousands  of  small  yet  indispensable  suppliers. 

Champaign,  QL-based  Roberson’s  logistks  dMskm 
had  a  long-standing  relatioash^  wkb  IngersoU-RaiuL 
That  partnership  persuaded  The  21st  Supplier  that 

Conrinued  on  poge  40 


Ingersoll-Rand  looks  to 
re^  big  savings  by  scru¬ 
tinizing  its  smeJIest  sup¬ 
pliers.  By  Steve  UHelder 


40 
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Rtiberson's  tcchnoU»g>'  and  capabilities  \v«»uld  mesh 
well  with  the  Supply  Works  sofmarc. 

Companies  that  sijtn  on  as  customers  swap  their 
smaller  suppliers  —  which  may  number  in  the  hun¬ 
dreds  —  for  just  one:  The  2Ist  Supplier.  Levx’ragtnfj 
lnjjersi>ll-Rand's  procurement  experience.  pers*)nnel 
and  massive  supply  chain  netwtirk.  the  outsourcer 
moves  in.  takes  over  the  manajiement  of  clients’  rela- 
tioaships  w  ith  small  suppliers  and  ajtret's  to  deliver 
cost  reductions.  Operating  in  full  st.irt-up  mode.  The 
21st  Supplier  has  nine  full-timers  and  plans  to  add 
stolTers  as  needed.  The  company  views  as  potential 
clients  all  manufactua'rs  that  have  annual  sales  over 
S500  million  and  assemble  discrete  components  — 
such  as  automakers  and  electronics  comp.inies. 

The  21st  Supplier  s  first  customer  was  Hussmann 
Corp..  j  SoOO  millitm  Ingcrsoll-Rand  unit  in  Bridge- 
ton.  M«v.  that  manufacturescommercial  refrigeration 
systems.  According  to  Bill  Lindquist,  business  unit 
IsMdcr  at  The  21sf  Supplier.  Hussmann  has  seen  ci>st 
reductions  of  to  I5''i-  in  several  an.*as:  kreighi 
charges  are  down:  inventories  have  been  cut  through 
lighter  cycle  limes;  suppliers  have  been  consolidated 
tand  supplier  performance  is  better  thanks  to  im¬ 
proved  measurement  and  incentives):  and  shortages 
and  line  stoppages  have  been  reduced.  “And  we 
haven’t  even  allied  up  our  sleeves  yet,"  he  says- 
Tony  Merlo.  Hussmann's  director  of  strategic 
sourcing,  says  that  pa-viously.  n«>  viik  in 
the  company  had  j  program  to  jdda.*ss 
that  lower  2<)'‘'-  of  the  spending,  which 
gtH's  to  about  M>'>i  of  Ilussmann's  suppli¬ 
ers.  'll  makes  sen-se  to  take  and  manage 
that  gniup.  .inJ  it's  working."  he  says, 

.\  JiversU'ied  manufacturing  cimglom- 
erjte.  lngers«»ll-Rand’s  business  units 
make  everything  from  Schlage  and 
Kryptonile  liwks  to  Bobcat  carthmowrs 
and  rhermo  King  cliraate-coninil  sys¬ 
tems.  AH  told,  its  direct  pnH'uremeni 
spending  tallies  S-)  billion  a  year  in  400 
commodity  categories-  l’■Ii^rcct’’  refers 
to  components  that  actually  go  into 
products,  as  opposed  to  indirect  materi¬ 
als  such  as  olTice  suppliev) 

Naturally,  managing  the  supply  chain 
is  critical  to  such  an  enterprise.  Inger- 
soll-Kand  urges  its  business  units  to 
continually  esuluate  their  suppliers, 
sorting  them  into  a  four-quadrant  ma¬ 
im  like  that  favored  by  Oartner  Inc. 

<scc  chart).  The  variables  in  the  matrix 


are  nsk  (to  the  manufacturer,  should  it  decide  to 
drop  3  given  supplier)  and  spending. 

Prior  to  the  formation  of  The  21st  Supplier.  Inger- 
soll-Rand  evaluated  offerings  from  several  supplier- 
relationship  management  vendors  and  determined 
that  SupplyWorks'  Max.  a  hosted  application,  could 
serve  as  business  units’  technology  enabler.  In  addi¬ 
tion.  IngersoH-Rand  figured  that  its  business  units 
could  gain  economies  of  scale  by  standardizing  on 
Roberson  tv»  manage  freight  requirements  wherever 
possible. 

SupplyWorks  aims  to  help  enterprise.s  work  with 
tens  of  ihs^usands  of  smaller  trading  partners  on  mat¬ 
ters  both  tactical  and  strategic.  In  the  former  caieg^>* 
ry.  the  software  performs  tasks  such  as  issuing  alerts 
when  the  purchasing  company  is  close  to  pricing  trip 

points.  “It  will  say.  ’Hey.  you're  order-  _ 

ing  140  units  here,  and  at  150.  you  get  a 
price  break,’ "  says  SupplyWorks  CEO 
leff  Henmann. 

This  type  of  information  tends  to  be 
watchisJ  chwely  in  the  case  of  strategic 
suppliers  but  often  slips  through  the 
cracks  with  smaller  ones  for  two  rea¬ 
sons.  First,  small  suppliers  are  most 
likely  to  be  managed  manually  with  hard-copy  forms. 
Second,  businesses  understandably  assign  their  top 
account  representatives  to  major  suppliers:  the 
mom-and-pop  outfits  are  often  handled  by  new  —  or 
simply  less  experienced  —  reps,  who  don't  catch 
everything  they  should  catch. 

By  encouraging  business  units  to  scrutinize  their 
smaller  suppliers  the  same  way  they  do  their  biggest 
vendors.  Lindquist  says.  Ingcrsoll-Rand  pared  down 
the  total  number  of  suppliers  and  cut  costs  “signifi¬ 
cantly"  in  addition  to  reducing  inventory. 

But  that  doesn't  mean  the  process  was  smooth  as 
silk  or  that  there's  no  more  work  to  do.  “Within 
Ingersoll'Rand.  we  need  to  make  more  progress.” 


Lindquist  says.  The  conglomerate  has  12  major  busi¬ 
ness  units  and  many  smaller  ones,  and  “because 
they're  all  so  independent,  each  unit  isn't  much  dif¬ 
ferent  than  a  separate  company."  (The  2lst  Supplier 
has  met  with  other  Ingersoll-Rand  business  units 
about  outsourcing,  but  Lindquist  says  there  is  no 
company'widc  mandate  to  sign  on.) 

For  example,  while  Ingersoll-Rand  has  standard¬ 
ized  on  Oracle  Corp.'s  software  for  financials,  each 
unit  may  have  its  own  enterprise  resource  planning 
software.  This  makes  sharing  data  across  units  diffi- 
cull.  which  in  turn  means  some  units  are  unaware  of 
potential  gains  to  be  had  in  the  supply  chaia  The 
company  has  begun  to  address  this  issue  by  creating 
cross-unit  “centers  of  excellence”  for  ferreting  out 
exactly  this  type  of  data,  but  it's  too  early  to  tel!  what 
effect  those  centers  will  have. 


SPINNING  PROFITS 
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HMse  ara  InoBme-ftand 
burinecs  unto*  ctrategic 
supphr  chain  parimn: 
(ha  manirfactwwi  work 
doaoly  w4th  them  lo 
drkfo  out  costs  wherever 


CoHecBvely.  these  ven* 
dors  repraeent  only  a 
smal  portion  of  owwaA 
spending  on  purchases, 
bid  they  himiih  strata^ 
one-oHHdnd  oempo- 
nenls  that  IngarsoiHbnd 
buiinaae  (Mils  must  have 
for  production. 


Thaae  are  providers  of 
commodity  Hama  hiT' 
nished  by  aaverai  ouppil- 
ars.  ingw«od*Rand  units 
cut  costs  by  oonaoldating 
buys  wMi  other  busfaiess 
unfit,  buying  from  coun¬ 
tries  vdth  low  labor  costs 
and  conducting  reverse 
auctions  bi  which  multi¬ 
ple  supplisrs  are  ashed  to 
name  their  best  prices. 


A  catchall  category  for 
»i\  other  suppiers.  They 
represent  a  hodgepodge 
of  mom-and-pop  shops 
that.  boceuM  businsss 
unib  spand  little  with 
them,  have  often  flown 
undor  the  cost-ojtting 
radar. 


Guinea  Pig 

Several  factors  made  Hussmann  a 
sound  testbed  for  The  21st  Supplier's 
service.  As  Ingersoll-Rand's  most 
recently  purchased  business  unit,  it 
didn't  have  Oracle  Financials  software 
in  place.  Moreover,  its  IT  system  was  a 
mess,  with  no  fewer  than  five  major  operating  sys¬ 
tems  at  its  sole  facility.  Lindquist  says  the  integration 
challenges  led  to  changes  in  The  2lst  Supplier's 
business  model. 

For  c.Kampie,  a  full-time  programmer  was  hired  to 
work  on  integration,  with  Hussmann  and  The  21st 
Supplier  splitting  the  unforeseen  expense  —  which 
will  now  be  budgeted  in  for  ever>'  engagement.  And 
the  outsourcer  found  that  the  best  way  to  address 
Hussmann's  security  and  access  concerns  was  to 
lea.se  a  server  with  a  firewall,  thus  establishing  a 
buffer  zone  that  determined  wliich  data  could  be 
shared  and  which  was  off-iimits.  'That  gives  (Huss- 
mann]  a  comfort  level.”  Lindquist  says.  “We're  going 
in  do  that  from  now  on”  with  all  customers,  both  in¬ 
side  and  outside  Ingersoll-Rand.  he  adds. 

Merlo  says  Hus.smann  started  small,  testing  the 
integration  and  .shifting  a  small  group  of  its  low- 
risk/ low-spend  suppliers  to  The  21st  Supplier's  over¬ 
sight.  Results  were  positive.  “Next  week,  I  present  to 
the  next  group."  Merlo  says,  at  which  time  most  of 
Hussmann's  suppliers  outside  the  top  20  —  about  70 
vendors  in  all  —  will  have  been  transferred  over. 

Although  Hussmann's  5%  to  15%  savings  are  per- 
suasivc.  outsourcing  supplier  relationship  manage¬ 
ment  may  not  be  for  evcrj'one.  Oerald  McNcrncy.  a 
senior  analyst  at  Bosum-based  AMR  Research  Inc.. 
says  there’s  “clearly  a  lot  of  value"  to  be  found  in  out¬ 
sourcing  procurement.  However,  he  adds,  any  logis¬ 
tics  outsourcing  can  be  “disruptive."  to  say  the  least. 
The  thought  of  a  factory  floor  being  brought  to  its 
knees  —  or  a  standstill  —  by  an  outsourcer's  error  is 
simply  too  risk>'  for  many  manufacturers  to  corvsider. 
"Even  th(}ugh  it  can  save  them  a  few  bucks,  compa¬ 
nies  can  be  reluctant  to  enter  these  {outsourcing]  re¬ 
lationships."  McNemey  says. 

In  light  of  The  2lst  Supplier's  promises  and  Huss¬ 
mann's  early  experience,  (hough,  enterprises  may 
want  to  take  a  second  look.  I 


Ulfelder  is  a  freelance  writer  in  Southboro.  Mass. 
Contact  him  at  sulfelderyojcharter.net. 
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Roberson's  lechnology  and  capabilities  would  mesh 
well  with  the  Supply  Works  software. 

Companies  that  sign  on  as  customers  swap  their 
smaller  suppliers  —  which  may  number  in  the  hun¬ 
dreds  —  for  lust  one:  The  21st  Supplier.  Leveragmg 
IngersoU-Rand’s  procurement  experience,  personnel 
and  massive  supply  chain  network,  the  outsourcer 
moves  in,  takes  over  the  management  of  clients’  rela- 
tion^ps  with  small  suppliers  and  agrees  to  deliver 
cost  reductions.  Operating  in  full  start-up  mode.  The 
21st  Supplier  has  nine  full-timers  and  plans  to  add 
staffers  as  needed.  The  company  views  as  potential 
clients  all  manufacnirers  that  have  annual  sales  over 
$500  millioQ  and  assemble  discrete  components  — 
such  as  automakers  and  electronics  companies. 

The  21st  Supplier’s  first  customer  was  Hussmann 
Corp^  a  $600  million  IngersoU-Rand  unit  in  Bridge- 
ton.  Mo.,  chat  manufactures  commercial  refrigeration 
systems.  According  to  Bill  Lindquist,  business  unit 
leader  at  The  21st  Supplier,  Hussmann  has  seen  cost 
reductions  of  5%  to  15%  in  several  areas:  Freight 
charges  are  down:  inventories  have  been  cut  through 
tighter  cycle  times:  suppliers  have  been  consolidated 
(and  supplier  performance  is  better  thanks  to  im¬ 
proved  measurement  and  incentives):  and  shortages 
and  line  stoppages  have  been  reduced.  “And  we 
haven’t  even  rolled  up  our  sleeves  yet.”  he  says. 

Tony  Merio,  Hussmann's  director  of  strategic 
sourcing,  says  that  previously,  no  one  in 
the  company  had  a  program  to  address 
that  lower  20%  of  the  spending,  which 
goes  to  about  60%  of  Hussmann’s  suppli¬ 
ers.  “It  makes  sense  to  take  and  manage 
that  group,  and  it's  working."  be  says. 

A  diversified  manufacturing  conglom¬ 
erate.  IngersoU-Raiwl’s  business  units 
make  everything  from  Schlage  and 
Kryptonite  locks  to  Bobcat  earthmovers 
and  Thermo  King  climate-control  s^- 
tems.  All  told,  its  direct  procurement 
spending  tallies  $4  billion  a  year  in  400 
commodity  categories.  ("Direct”  refers 
to  components  that  actually  go  into 
products,  as  opposed  to  indirea  materi¬ 
als  such  as  office  supplies.) 

Naturally,  managing  the  supply  chain 
is  critical  to  such  an  enterprise.  In^r- 
soll-Rand  urges  its  business  units  to 
continually  evaluate  their  suppliers, 
sorting  them  into  a  fbur-qtiadrant  ma¬ 
trix  like  that  favored  by  Gartner  Inc. 

(see  chart).  The  variables  in  the  matrix 


are  risk  (to  the  manufacturer,  should  it  decide  to 
drop  a  given  supplier)  and  spending. 

Prior  to  the  formation  of  The  21st  Supplier.  Inger- 
soll-Rand  evaluated  offerings  from  several  supplier- 
relationship  management  vendors  and  determined 
that  SupplyWorks’  Max,  a  hosted  application,  could 
serve  as  business  units’  technology  enabler.  In  addi¬ 
tion,  IngersoU-Rand  figured  that  its  business  units 
could  gain  economies  of  scale  by  standardizing  on 
Roberson  to  manage  frei^i  requirements  udierever 
possible. 

SupplyWorks  aims  to  help  enterprises  work  with 
tens  of  thousands  of  smaUer  trading  partners  on  mat¬ 
ters  both  tactical  and  strategic.  In  the  former  catego¬ 
ry,  the  software  performs  tasks  such  as  issuing  alerts 
when  the  purchasing  company  is  close  to  pricing  trip 
points.  "U  wUl  say,  ‘Hey.  you’re  order¬ 
ing  140  units  here,  and  at  150,  you  get  a 
price  break.’ "  says  SupplyWorks  (^EO 
Jeff  Herrmann, 

This  type  of  information  tends  to  be 
watched  closely  in  the  case  of  strategic 
suppUers  but  often  slips  through  the 
cracks  with  smaller  ones  for  two  rea¬ 
sons.  First.  smaU  suppliers  are  most 
likely  to  be  managed  manually  with  hard-copy  forms. 
Second,  businesses  understandably  assign  their  top 
account  representatives  to  major  suppliers;  the 
mom-and-pop  outfits  are  often  handled  by  new  —  or 
simply  less  experienced  —  reps,  who  don’t  catch 
everything  they  should  catch. 

By  encouraging  business  units  to  scrutinize  their 
smaller  suppliers  the  same  way  they  do  their  biggest 
vendors.  Lindquist  says,  IngersoU-Rand  pared  down 
the  total  number  of  suppliers  and  cut  costs  "signifi¬ 
cantly"  in  addition  to  reducing  inventory. 

But  that  doesn’t  mean  the  process  was  smooth  as 
silk  or  that  there's  no  more  work  to  da  "Within 
IngersoU-Rand.  we  need  to  make  more  progress." 


Ingersoll-Rand  Suppliers 


Lindquist  says.  The  conglomerate  has  12  major  busi¬ 
ness  units  and  many  smaUer  ones,  and  "because 
they're  aU  so  independent,  each  unit  isn't  much  dif¬ 
ferent  chan  a  separate  company.”  (The  21st  Supplier 
has  met  with  other  IngersoU-Rand  business  units 
about  outsourcing,  but  Lindquist  says  there  is  no 
companywide  mandate  to  sign  on.) 

For  example,  while  IngersoU-Rand  has  standard¬ 
ized  on  Oracle  Corp.’s  software  for  financials,  each 
unit  may  have  its  own  enterprise  resource  planning 
software.  This  makes  sharing  data  across  units  diffi¬ 
cult,  which  in  turn  means  some  units  are  unaware  of 
potential  gains  to  be  had  in  the  supply  chain.  The 
company  has  begun  to  address  tlUs  issue  by  creating 
cross-unit  “centers  of  exceUence"  for  ferreting  out 
exactly  this  type  of  data,  but  it’s  too  early  to  teU 
effect  those  centers  wiU  have. 


SPINNING  PROFITS 
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Guinea  Ptg 

Several  Actors  made  Hussmann  a 
sound  testbed  for  The  21st  SuppUer's 
service.  As  IngersoU-Ramd's  most 
recently  purchased  business  unit,  it 
didn’t  have  Oraclq  Financials  software 
in  place.  Moreover.  Us  IT  system  was  a 
mess,  with  no  fewer  than  five  major  operating  sys¬ 
tems  at  its  sole  facility.  Lindquist  says  the  integration 
challenges  led  to  changes  in  The  2l5t  Supplier’s 
business  model 

For  example,  a  full-time  programmer  was  hired  to 
work  on  integration,  with  Hussmann  and  The  21st 
SuppUer  spUtting  the  unforeseen  expense  —  which 
will  now  be  budgeted  in  for  every  engagement.  And 
the  outsourcer  found  that  the  best  way  to  address 
Hussmann’s  security  and  access  concerns  was  to 
lease  a  server  with  a  firewall  thus  establishing  a 
buffer  zone  that  determined  which  data  could  be 
shared  and  which  was  off-limits.  “That  gives  [Huss¬ 
mann]  a  comfort  level,"  Lindquist  says.  “We’re  going 
to  do  that  from  now  on”  with  all  customers,  bo^  in¬ 
side  and  outside  IngersoU-Rand,  he  adds. 

Merio  says  Hussmann  started  small,  testing  the 
integration  and  shifting  a  small  group  of  Its  low- 
risk/low-spend  suppliers  to  The  21st  SuppUer's  over¬ 
sight  Results  were  positive.  "Next  week,  I  present  to 
the  next  group.”  Mt^o  says,  at  which  time  most  of 
Hussmann's  suppUers  outside  the  top  20  —  about  70 
vendors  in  all  —  wUl  have  been  transferred  over. 

Although  Hussmann's  5%  to  15%  savings  are  per¬ 
suasive.  outsourcing  suppUer  relationship  manage¬ 
ment  may  not  be  for  everyone.  Gerald  McNerney,  a 
senior  analyst  at  Boston-based  AMR  Research  Inc., 
says  there's  "cleariy  a  lot  of  value”  to  be  found  in  out¬ 
sourcing  procurement.  However,  be  adds,  any  logis¬ 
tics  outsourcing  can  be  "disruptive,”  to  say  tlM  least. 
The  thought  of  a  &ctory  floor  being  brought  to  its 
knees  ~  or  a  standstUl  —  by  an  outsourcer’s  error  is 
simply  too  ri^  for  many  manufacturers  to  consider. 
"Even  thou^  it  can  save  them  a  few  bucks,  compa¬ 
nies  can  be  reluctant  to  enter  these  [outsourcing]  re¬ 
lationships."  McNemey  says. 

In  light  of  The  21st  SuppUer’s  promises  and  Huss¬ 
mann’s  early  experience,  though,  enterprises  may 
want  to  take  a  second  look.  I 


Ulfelder  is  a  freelance  writer  in  Southboro.  Mass. 
Contact  him  atsuI/elder@charteT.net. 
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Looking  Deeper, 

Working  Smarter 

An  intelligent  infrastructure  provides  end-to-end  QoS 
for  superior  performance  and  control. 

Every  business  has  its  priorities.  So  why  not  share  them  with  your  network?  When  you  run 
your  applications  over  an  intelligent  network  infrastructure,  you  can  ensure  every  data  packet 
is  handled  according  to  the  priorities  and  policies  you  set,  bringing  your  network  operations 
into  perfect  sync  with  your  business  goals. 

Cisco  intelligent  switches  and  routers  come  equipped  with  the  most  sophisticated  quality-of- 
service  features  available,  allowing  you  to  deliver  predictable,  measurable,  even  guaranteed 
levels  of  performance  across  the  LAN  and  WAN. 

An  intelligent  infrastructure  looks  deeper  into  network  traffic,  identifying  the  users  and 
applications  behind  the  streams  of  data.  As  a  result,  it  can  classify  and  mark  packets  to  make 
sure  your  most  pressing  needs  are  met  first,  without  stranding  anyone  or  anything  else.  IP 
voice  and  video  applications,  for  example,  can  be  given  precedence  over  less  time-sensitive 
applications,  eliminating  the  delays  and  packet  loss  that  would  otherwise  get  in  the  way  of 
clear,  cost-effective  communication. 

An  intelligent  infrastructure  also  makes  more  efftcient  use  of  bandwidth,  which  becomes 
particularly  important  as  applications  and  services  are  extended  across  the  WAN,  where  band¬ 
width  is  a  scarce  and  pricey  commodity.  Applying  QoS  can  significantly  improve  the  response 
times  of  your  most  demanding  applications,  without  increasing  your  company’s  bandwidth  costs. 

Cisco’s  QoS  features  are  based  on  advaiKed  networking  protocols,  which  are  seamlessly 
integrated  with  each  other  and  the  hardware  through  Cisco  lOS*  Software,  the  operating  system 
that  unifies  all  Cisco  switches  and  routers  and  provides  most  of  the  intelligertce  in  the  network. 

Cisco  management  software  lets  you  can  take  full  advantage  of  these  capabilities  without 
being  an  expert,  and  will  even  automatically  apply  best  practices  across  all  network  devices. 
These  management  tools  can  help  your  company  become  more  agile,  too,  making  it  easy  to 
adjust  to  changing  priorities.  So  easy,  in  fact,  that  policies  can  shift  according  to  time  of  day, 
accommodating  different  business  needs  and  patterns  of  networic  usage. 

The  end  result  is  a  network  optimized  to  make  your  company  as  productive,  efficient,  and 
profitable  as  possible.  And  after  all,  isn’t  that  the  top  pri<mty? 
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Advtinced  QoS  mechamsens 
offer  unprecedented  control 


Cisco  intelligent  switches  and  routers 
provide  the  industry's  most  comprehensive 
quality-of-service  features,  enabling  you  to 
maintain  predictable  performance  levels 
arHl  support  delay-sensitive  IP  voice  and 
video  communications  across  the  LAN  and 
WAN.  Features  include: 

CleniBrelioii:  Allows  the  network  to 
distinguish  different  types  of  traffic  based 
on  the  applications  involved,  then  sort  them 
according  fo  established  priorities. 


Merida^  Rags  data  packets  to  ensure 
they  are  handled  based  on  their  relative 
importance  to  your  business  goats,  so  the 
most  critical  r)eeds  are  met  first 
Poheing:  Limits  traffic  flows  to  defined  rates 
so  large  files  won't  swamp  the  network  and 
degrade  application  performance  levels. 

Buffering:  Holds  low-priority  packets 
while  urgent  traffic  moves  ahead,  which 
conserves  bandwidth  by  avoiding  the  need 
to  retransmit  data. 

Scbediilieg:  Controls  the  timely  delivery  of 
traffic  and  alleviates  congestion  so  applica¬ 
tions  can  maintain  peak  performance  levels. 


Cisco  STiTtm 


42 


MflTBRNU  IMM.2M 


MANAGEMENT 


www.computenworld.coni 


IK  lAKUARY  2001.  three  stories 
m  Computerworld  mentioned 
a  chief  technology  officer,  or 
CTO.  In  January  2003, 26  stories 
did.  The  CTO  is  clearly  becom* 
ing  more  common,  but  it's  a  dif- 
fkuh  role  to  pin  down.  CTOs 
can  be  technology  gurus,  vh 
siooaries,  tnfrastnicture  experts  or 
policy  enforcers,  and  contrary  to  popu¬ 
lar  belief^  they  don't  usually  work  for 
the  CIO.  “If  you  talk  to  six  people, 
youll  get  six  definitions  of  the  CTO.” 
says  John  J.  Davis,  president  of  John  J. 
Davis  &  Associates  Inc.,  an  IT  execu¬ 
tive  search  firm  in  New  York. 

To  get  a  feel  for  what  CTOs  are 
really  about,  h  helps  to  look  not  only 
at  ihrir  work,  but  also  at  the  human 
and  financial  dynamics  around  them. 

Altbou^  the  role  is  becoming  more 
common,  CTOs  are  found  in  only  37% 
of  companies,  according  to  a  2002  sur¬ 
vey  of  several  hundred  midsize  m  large 
companies  by  Cutter  Consortium  in 
Ariington.  Mass.  The  CIO  may  be  in¬ 
volved  in  recruiting  and  hiring  the 
CTO,  but  most  CTOs  report  to  another 
senior  executive,  such  as  the  CEO  or 
the  chief  financial  officer,  and  they  fill 
a  variety  of  roles. 

In  lar^  companies,  the  CIO's  in¬ 
creasing  emphasis  on  business  ~  often 
oo  a  worldwide  scale  —  may  leave  no 
octe  minding  the  IT  store,  Davis  says. 

In  those  cases,  the  CTO  is  brought  in 
to  keep  an  eye  on  infrastructure  and 
technology. 

That’s  tte  situation  at  Foster  City. 
Calif.-based  Inovant  Inc.,  where  Scott 
Thompson  is  in  the  process  of  hiring  a 
CTO.  '’When  you're  running  a  big 
global  business,  there  are  a  lot  of  [in- 
fiastructure]  decisions  that  have  to 
be  made  tm  a  daily  basis,”  explains 
Thompson,  who  U  executive  vice  pres¬ 
ident  for  technology  solutimts  and  de 
facto  CIO  at  the  wholly  owned  transac¬ 
tion-processing  subsidiary  of  Visa  In¬ 
ternational  Inc. 

“My  Job  is  about  translating  business 
plans  into  technology  priorities  and 
creating  that  constant  linkage  back  to 
the  business  and  the  strategy  of  the 
business.”  be  explains.  ”That  translates 
into  a  series  of  initiatives  and  projects 
and  a  development  agenda.” 

In  contrast,  the  CTO,  wbo  will  re¬ 
port  to  Thompson,  will  have  ”day-in 
and  day-out  responsibility  for  global 
enterprise  architecture,  making  sure 
all  our  transactions  in  nearly  200  coun¬ 
tries  always  woik."  be  says. 

In  start-ups,  the  CTO  often  fills  a 
catchall  technology  role.  The  smaller 
the  company,  the  they  can  afford 
the  luxury  of  a  guy  [who  is]  more  into 


strategy  than  technology  delivery." 
Davis  says.  ”So  they  get  someone  with 
technology  as  the  prime  skill  set." 

Rick  Stiegler  has  been  CTO  at  Lend¬ 
ing  lYee  Inc.  in  Charlotte.  N.C..  since 
the  mortgage  company's  founding  in 
1997.  In  the  early  days,  because  the  staff 
was  small  his  Job  ranged  from  soft¬ 
ware  design  and  configuration  man¬ 
agement  to  business  analysis  and  tech¬ 
nical  presentations  for  investors. 

Now.  with  250  employees  and  a  tech¬ 
nology  department  of  more  than  100. 
the  company  has  hired  CIO  Steve 
Campbell,  and  Stiegler  is  moving  away 
from  business  concerns.  Stiegler  pro¬ 
vides  architectural  guidance,  reviews 
the  technical  design  for  all  projects 
and  examines  the  technical  implica¬ 
tions  of  strategic  initiatives. 

Stiegler.  who  now  reports  to  Camp¬ 
bell  works  primarily  on  architecture. 
Campbell  does  “all  the  hard  stuff.”  in¬ 
cluding  handling  vmdors  and  purchas- 


HlVe  done  enough 
of  wearing  al  me 
hats.  I  want  tom  back 
to  the  cool  stun. 

RICK  STIEGLER.  CTO.  LENDING  TREE  INC 
ing  technology.  Stiegler  says.  “He  man¬ 
ages  air  cover  to  the  business.”  be  says. 
“When  fm  trying  to  figure  out  a  bot¬ 
tleneck  in  the  database,  he's  explaining 
to  the  business  what’s  going  on  and 
when  we'll  get  it  going  again." 

Stiegler  checks  with  Campbell  on 
any  proposed  adjustments  in  architec¬ 
ture  or  technical  philosophy.  If  they 
disagree.  Stiver  says,  “^ve  arm-wres¬ 
tle,  and  I  usu^y  lose.”  But  it  almost 
never  comes  to  that.  “When  we  dis¬ 
agree.  it’s  usually  because  one  of  us  has 
incorrect  data,”  Stiegler  says.  “Once  we 
both  have  the  same  facts,  we  arrive  at 
the  same  conclusion.” 


Stiegler  enjoys  having  a  CIO  to  han¬ 
dle  the  business  aspects  of  technology. 
"I've  done  enough  of  wearing  all  the 
hats,”  he  says.  ”I  want  to  go  back  to  the 
cool  stuff." 

At  some  companies,  the  CTO  is 
steeped  in  the  cool  stuff  as  the  technol¬ 
ogy  visionary.  "Companies  often  bring 
CTOs  in  to  develop  a  loi^r-term 
technology  strategy,  one  the  CIO  Jtist 
doesn’t  have  time  to  develop,"  said 
Steve  Andriole,  a  consultant  at  Cutter 
Consortium. 

That's  the  case  at  Black  &  Veatcb 
Corp..  an  engineering,  construction 
and  consulting  company  in  Kansas 
City.  Ma.  and  one  of  the  100  largest 
private  corporations  in  the  U5.  CTO 
John  G.  Voeller  is  a  lone  visionary 
whose  Job  transcends  traditional  IT 
boundaries.  “I  don't  Just  look  at  the 
technology  of  my  enterprise,”  he  says. 
“I  look  far  beyond  IT.  at  oanotechndo- 
gies,  biotech  and  other  domains.”  His 


Just  what  a  CTO  does  depends  on  wJio  hires 
you,  vdiom  you  report  to  and  vdiether  you  have 
budget  authority.  By  Kathleen  Melymuka 
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mission  is  to  understand  the  goals  of 
the  business  and  of  its  clients,  antici¬ 
pate  their  needs  and  guide  them  to¬ 
ward  technologies  of  value. 

As  Black  &  Veatch  evolved  firom  a 
partnership  to  a  corporation  in  the 
1990s>  Voeller,  who  used  to  head  IT. 
passed  the  reins  to  Bob  Fine,  a  busi¬ 
ness-oriented  CIO  >^o  had  "fou^t 
the  corporate  wars.”  As  CIO,  Fine  has 
improved  vendor  relationships,  cut 
costs  and  streamlined  IT  activities. 
CTO  Voeller  concentrates  on  the  tech¬ 
nology  vision.  Both  report  to  the  chief 
administrative  officer,  but  Fine  has  the 
power  of  the  purse.  All  IT  purchases 
are  made  through  his  office,  and  he 
manages  vendors. 

Andriole  says  that  in  companies 
where  the  CIO  and  CTO  report  to  a 
senior  executive,  their  different  focus¬ 
es  frequently  cause  friction  because 
they  compete  for  funding.  ”Tfae  ten¬ 
sion  comes  from  having  the  CTO  al¬ 
ways  pushing  the  envelope,  while  the 
CIO  is  worrying  about  making  the 
train  run  on  time,”  be  says. 

Usually,  the  CTO  and  the  CIO  share 
the  technology  budget,  Andriole  says, 
and  tension  can  arise  if  the  CTO  seeks 
to  divert  money  from  ^putting  out 
brush  fires”  to  building  new  architec- 


HOWTHEYGOTTHERE 


JOHN  G.  VOELLER:  As  a  mechanical 
engineer  at  Black  &  Veatch.  he  took 
a  short  assigmTierrt  to  solve  a  problem 
in  MIS  and  never  left.  He  became  part* 
ner  in  charge  of  technology  in  the  early 
'80s  vrd  CTO  in  the  early '90s. 

DEBRA  DOMEYER:  Worked  on  comput¬ 
er  sy^ems  and  encrypted  satelite  tech* 
nokigy  at  the  White  House  and  on  Capi¬ 
tol  Hi.  Managed  the  White  House  Of¬ 
fice  of  Automation.  instaingthefirsl 
PCs  in  the  West  Wing  in  1984.  Worked 
in  IT  at  firuuxaal  s^vices  conytanies. 


tures.  “They  [CTOs]  hate  to  spend 
money  on  things  like  life  support  for 
old  systems,  so  they’ll  recommend  di¬ 
verting  funds  from  those  server  up¬ 
grades  to  build  the  architecture  to  ex¬ 
ploit  Web  services,”  be  says. 

But  Voeller  says  that’s  not  the  case  at 
Blade  &  Veatch.  “We  woric  as  a  very 
good  team  because  we  respect  each 
other’s  ideas,”  be  says.  “Our  executives 
are  receptive;  they  telieve  in  and  re¬ 
vere  imagination.” 


Served  as  CK)  at  Panes  Mhor  Corp.  and 
Pacific  6as  &  Dednc  Co. 

RKX  STCGLER:  Served  as  vice 
president  of  arhanced  technology 
at  Greenwich  Capital  Markets  Inc.  and 
was  a  vice  presklent  of  IT  at  Morgan 
Stanley. 

CATHY  BRUNE:  Started  as  a  data  cen¬ 
ter  tapes  mounter  at  Mstate.  Moved  to 
business  positions  in  dairns.  marketing 
and  pricing.  Served  as  regional  vice  pres¬ 
ident  ol  sales,  director  of  the  call  center 
and  vice  presxtont  (or  infrastructure. 


The  key  to  a  good  CTO/CIO  rela¬ 
tionship,  Voeller  says,  is  “clear  delin¬ 
eation  of  roles  and  responsibilities  and 
a  reward  system  based  on  doing  these 
well”  A  sure  road  to  ruin,  be  adds. 

.  would  be  “a  CIO  with  a  technology 
I  bent  who  secretly  wants  to  do  the  CTO 
job  —  or  vice  versa.” 

The  fact  that  Voeller  doesn’t  report 
to  the  CIO  isn’t  unusual  The  Cutter 
survey  found  that  74%  o(  CTOs  don’t 
At  Allstate  Insurance  Ca  in  Nwtb- 


brook.  ni,  CTO  Cathy  Brune  reporu  to 
the  rhairman,  and  sbe  is  the  undisput¬ 
ed  technology  leader.  “I  was  made  a 
senior  VP  and  CTO  because  we  want¬ 
ed  (>eople  to  understand  that  1  am  in 
charge  of  technology,  and  I  «dll  make 
calls  and  break  the  ties.”  she  says.  Her 
role  is  to  manage  overall  architecture, 
infrastructure  and  security,  a  task 
made  trickier  by  the  fact  that  Albute's 
two  main  divisioDS  have  their  own  IT 
groups.  CIOs  and  technology  budgets. 

As  Allstate’s  first  CTO.  Brune  needs 
to  reconcile  the  IT  wish  lists  of  the  two 
business  units  with  the  technical  stan¬ 
dards  she’s  hammering  into  place.  “I 
cut  the  baby  in  half  between  the  two 
businesses  if  necessary.”  she  says.  In 
ocher  words,  if  one  business  wants  one 
sort  of  infrascructure/architecture  and 
the  other  wants  another,  sbe  decides 
which  will  be  tbe  corporam  standard. 
“The  business  unit  presidents  listen  to 
roe.”  Brune  says. 

Before  sbe  became  CTO.  there  was 
one  CIO  iriio  owned  tbe  IT  budget, 
and  tbe  business  unit  presidents  had  to 
come  to  him  for  teefantriogy  frindii^ 
Now  the  two  businesses  have  their 
own  IT  budgets,  and  they  can  choose 
the  q}plicatioos  they  need  to  drive 
their  strategies  —  as  long  as  those  fol¬ 
low  the  CTO’s  technology  standards. 
Infrastructure,  governance,  security 
and  companywide  architecture  belong 
to  Brune. 

Because  Brune  repc^  directly  to 
Allstate’s  chairman,  sbe  could  wield  a 
big  stick.  But  instead,  sbe  is  persuading 
tbe  CIOs  and  their  business  unit  presi- 
dents  to  do  things  her  way.  Sbe  ac¬ 
knowledges.  though,  that  this  entaUs  a 
lot  of  “mud  wrestling.” 

“This  job  is  a  lot  more  relationship- 
driven  than  1  would  have  imagmed.” 
Brune  says.  “But  by  doing  this  early, 
we  get  buy-in  from  everyone  around 
our  tech  strat^.” 

The  ioevit^le  friction  between 
CTOs  and  QOs  is  a  good  thing,  Andri- 
<rie  says,  because  it  makes  companies 
consider  technology  trade-offr.  “It 
forces  you  to  think  about  the  implica¬ 
tions  of  putting  out  those  brush  fires 
for  what  you  have  to  be  doing  in  two 
m  three  years.*  he  explains.  “It  sets  up 
a  great  dialogue  in  the  corporatioa"  I 


Mefynuikn  is  <2  Computerworld 
confrihitfuig  writer.  Contact  her  or 
krnelyimika@earthUnk.net. 
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SUPPLY  CHAIN  ADVICE: 


Tap  Computers  for 
TheDogWor1(’ 


ESrreamlinii^  a  supply 
chain  isn't  easy,  but  the 
simpler  the  fechno/oj^ 
inv^ved.  the  better.  TTie 
reason:  "Most  of  us  are 
regular  folks.  If  you  have 
to  be  a  genius  to  figure 
something  out,  we’re 
doomed."  So  says  I0ke 
Hugos.  CIO  of  Network 
Services  Co„  a  56.8  bil¬ 
lion  distribution  cooperative  company 
in  Chicago  suburb  Mount  Prospect. 

In  his  new  book.  Essentials  of  Supply 
Chain  Management  (/ohn  Wi{ey&  Sons 
Inc.,  2003),  Hugos  lays  out  how  to  de¬ 
cide  what  hind  of  supply  chain  technol¬ 
ogy  your  company  needs  and  how  much 
to  spend  to  get  it.  Hugos  recently  spoke 
with  Coroputerworld's  /ulta  ATng. 

As  a  CIO.  how  (fid  you  gtl  involved  in  ttw 
supply  chain  process?  We're  a  coHip. 
There  are  75  owner  companies,  each 
with  an  individual  ERP  [enterprise  re¬ 
source  planning]  system.  When  I  came 
on  in  the  fall  of '99,  we  were  updating 
our  strategic  plaa  The  owner  compa¬ 
nies  made  it  very  clear  to  me  to  not 
even  suggest  that  we  alt  standardize  on 
SAP  or  Oracle  or  some  other  software. 

Meanwhile,  some  of  our  big  cus¬ 
tomers  —  which  include  Baskin- 
Robbins,  all  of  the  Starbucks  stores  — 
wanted  to  trentralize  their  procure¬ 
ment  operations.  The)'  didn't  want  to 
phone  and  fax  orders.  They  were  cre¬ 
ating  electronic  order  management 
systems  that  we  needed  to  plug  into 
and  then  route  orders  to  our  members 
to  fill.  Our  customers  wanted  state¬ 
ment  billing.  They  wanted  a  seamless 
coordinated  supply  chain.  They  said  to 
me.  “^ou  figure  it  out." 

Where  do  you  start  such  an  obviously  huge 
profoct?  TV  first  thing  I  like  to  do  is  on 
a  big  sheet  of  white  paper  draw  out  the 
sequence  of  activities  as  you  know 
your  supply  chain.  UTicre  you  don't 
know  things,  put  in  a  question  mark. 

If  you’re  a  manufacturer,  look  back  to 


raw  material  providers.  Then,  look 
forward  to  your  customer.  1  learned  a 
long  time  ago  in  sales  to  look  at  what 
your  customer’s  customer  is  doing.  Lay  | 
that  out  as  part  of  the  major  flow  of 
activities.  Pve  found  again  and  again 
that  if  everyone  has  a  common  visual 
framework  to  look  at.  and  then  you 
start  plugging  details  into  slots  on  that 
framework,  a  picture  will  emerge. 

And  then  what?  Steady  as  she  goes.  Solve 
a  piece  at  a  time.  It's  a  lesson  that  didn’t 
play  well  in  the  '90s.  When  people  rip 
out  everything  and  put  in  an  all-new 
(supply  chain]  system,  it’s  the  equiva¬ 
lent  of  a  heart,  lung  and  liver  transplant 
all  at  once.  It's  so  risky  that  you  should 
never  do  it  unless  the  patient  is  going 
to  die  anyway.  Instead,  you  ou^t  to 
take  a  look  at  the  supply  chain  diagram 
—  a  simple  circle-and-arrow.  basic  ref¬ 
erence  diagram  —  and  ask.  “Where  are 
the  bottlenecks  ri^t  now?”  Maybe  the 
bottleneck  is  procurement  or  inven¬ 
tory  control  or  forecasting.  Identif)' 
the  worst  bottlenecks, 
then  come  up  with  point- 
specific  [IT]  solutions  to 
those  bottlenecks.  Fifty- 
million-dollar  SAP  solu¬ 
tions  played  well  in  the 
'90s.  but  I  don't  think 
they  were  ever  good 
practices. 


equivalent  of  speeding  up  the  assembly 
line,  they’ll  take  a  passive-aggressive 
attitude  and  do  everything  ^om  spill 
coffee  on  the  keyboard  to  feed  the  sys¬ 
tem  goofy  data.  As  soon  as  that  hap¬ 
pens.  you  can  typically  blame  the  tech¬ 
nologists  who  are  so  absorbed  in  tech¬ 
nology  and  the  least  politically  avs'arc 
that  they  make  very  eas)'  scapegoats. 


So.  are  you  saying  to  solve  the  botttenecKs 
ono  by  one.  with  dMerent  softwsv.  and  worry 
later  about  infograhrtg  those  software  appli- 
cabons?  There’s  something  called  the 
miracle  of  the  ASCII  file.  I  tell  members 
I  will  never  stand  up  in  front  of  a  tech¬ 
nolog)'  organization  and  brag  about 
sending  encrypted  ASCII  files  over  the 
Internet,  but  it  works.  Every  system 
has  batch-import  capability,  and  that’s 
where  I  believe  in  about  2001  a  new 
acronym  appeared  called  £A1  (enter¬ 
prise  application  integration].  EAI  is 
really  a^ut  passing  ASCII  files  across 
separate  applications.  It's  not  that  we 
didn't  know  how  to  do  that  in  the  late 


How  come?  We  spent  the 
last  10  years  with  mas¬ 
sive  all-in-one  systems. 

I  think  the  answers  are 
there  for  everyone  to  see. 
They  don't  work  very 
often,  and  the  world 
changes  so  quickly  that 
you'll  come  up  with  a 
new  solution  to  an  old 
business  model.  And  if 
the  people  who  have  to 
use  a  new  system  either 
don’t  buy  into  it  or  feel 
it’s  simply  a  prelude  to 
beii^  laid  off  or  the 
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'80s;  it's  that  it  wasn’t  cool.  I  come 
down  in  fovor  of  the  practical  approach. 

How  does  H  work?  For  companies  with 
EDI  [electronic  data  interchange],  we 
reformat  ASCII  files  to  an  EDI  850  or 
other  file  for  EDI.  We’ve  all  agreed  on 
a  certain  ASCII  file  format.  If  they 
have  to  reformat  to  that,  it's  a  trivial 
thing  to  do.  People  will  call  me  primi¬ 
tive,  but  the  use  of  ASCII  flat  files  sent 
over  the  Internet  is  an  amazing  thing. 
When  people  wax  enthusiastic  about 
Web  services  or  the  Internet  version 
of  object -orienied  XML,  it’s  basically 
an  ASCII  flat  file  with  angle  brackets 
that  tells  you  what  that  means.  In  a 
high-change,  tight  economy,  I  think 
you're  always  better  off  to  go  with 
point  solutions  and  a  guaranteed 
12-month  payoff 


Can  you  give  me  an  example  from  your  own 
experience?  We  have  a  wholly  owned 
redistributor  that  stocks  slower-mov¬ 
ing  items,  but  items  that  are  necessary 
for  national  account  contracts.  That  or¬ 
ganization  works  on  very  thin  margins. 
We’ve  been  very  reluctant  to  add  head 
count.  But  our  business  is  growing 
steadily,  so  they're  swamped.  Members 
order  from  the  warehouse,  then  the 
warehouse  turns  around  and  places  the 
order  with  a  supplier.  We're  now  work¬ 
ing  on  an  initiative  where  everyone 
agrees  on  standard  format  for  an  invoke. 
Instead  of  a  member  calling  us  or  faxing 
an  order,  they  can  export  it  in  a  stan¬ 
dard  ASCII  flat  file,  encrypt  and  trans¬ 
port  the  ASCII  file  over  the  Internet. 

Our  order  entry  [system)  simply  im¬ 
ports  that  file  and  all  order  entry  work, 
and  data  entry  work  is  automated.  Au¬ 
tomate  the  “dog  work"  and  let  the  peo¬ 
ple  handle  the  exceptions.  Why  spend 
money  on  computers  and  artifici^  in¬ 
telligence  when  I  have  real  intelligence 
yearning  to  break  free  of  the  dog  work 
that  plagues  them  everyday. 

People  get  into  these  exquisitely 
complex  s>'$tems.  Meanwhile,  we’re 
havii^  this  recovery  that  is  not  creating 
I  believe  [that]  if  computers  moni¬ 
tor  the  daily  in-and-out  work  and  you 
can  design  a  system  where  people  are 
•enred  by  computers,  you'll  get  somc- 

IBfflwtive.  But  when  you  try  to 

Dmputers  do  everything,  it  won't 
Computers  are  great  at  dog 
but  I  don't  need  computers  to 
decisions  for  me.  I 

EXCBIPTONllHE 

excefpt  from  Chapter  4  of  of  SiscVr 

inapeme/if  on  our  Web  site. 

■^muuiclilJnk:  37065 
cainputenwrfd.com 
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SUPPLY  CHAIN  ADVICE: 


Tap  Computers  for 
The'DogWbrk’ 


IStTKtmfuwtg  a  supply 
chain  isnt  easy,  but  t/ie 
simpler  rhe  technology 
involved,  the  better.  TV 
recaon:  "^Most  of  us  an 
regular  foOcs.  {Tyou  have 
to  be  agenius  to/tgure 
sorrtethirtg  out.  weVe 
doomed  "  So  soys  Mb* 
fhipoa.  C/0  of  Network 
Services  Co.,  o  S6.S  btl* 
lion  rfistribution  cooperative  con^Kiny 
in  Chicago  suburb  Mount  Prospect. 

/n  his  new  book.  Essentials  of  Supply 
Chain  Management  (John  Wiley  &  Sons 
Inc.,  20Q3).  Hugos  lays  out  how  to  de¬ 
cide  what  kind  supply  chain  technol¬ 
ogy  your  company  needs  and  how  much 
to  spend  to  get  it  Hugos  recently  spoke 
with  CtMDpuierworld^  Julia  IQng. 

As  a  Cn.  how  Jd  you  gal  invDhrid  in  the 
uypkf  I'iiiin  praoeee?  We’re  a  co-op. 
There  are  75  owner  companies,  each 
with  an  individual  ERP  (enterprise  re¬ 
source  planning]  system.  When  I  came 
on  in  the  &dl  of  *99.  we  were  updatii^ 
our  strategic  plan.  The  owner  compa¬ 
nies  made  it  very  clear  to  me  to  not 
even  suggest  that  we  all  standardize  on 
SAP  or  Oracle  or  some  other  software. 

Meanwhile,  some  of  our  big  cus¬ 
tomers  vdiich  include  Baskin- 
Robbins,  all  of  the  Starbucks  stores  — 
wanted  to  centralize  their  procure¬ 
ment  (^rations.  They  didn't  want  to 
phone  and  fu  orders.  They  were  cre¬ 
ating  electronic  order  management 
systems  that  we  needed  to  plug  into 
and  then  route  orders  to  our  members 
to  niL  Our  customers  wanted  state¬ 
ment  billing.  They  wanted  a  seamless 
coordinated  supply  chain.  They  said  to 
me.  “You  figure  it  out” 

Whm  do  yw  iiirt  Mch  an  obrieiwiy  huge 
pniMt?  The  first  thing  I  like  to  do  is  on 
a  big  sheet  of  white  paper  draw  out  the 
setiuence  of  activities  as  you  know 
your  supply  ghain.  Where  you  don’t 
know  things,  put  in  a  question  mark. 

If  you're  a  mamifacturer,  look  back  to 


raw  material  providers.  Thea  look 
forward  to  your  customer.  I  learned  a 
long  time  in  sales  to  look  at  what 
your  customer’s  customer  is  doing.  Lay 
that  out  as  part  of  the  major  flow  of 
activities.  Tve  found  again  and  again 
that  if  everyone  has  a  common  visual 
framework  to  look  at,  and  then  you 
start  plugging  details  into  slots  on  that 
framework  a  picture  will  emerge. 

And  than  whit?  Steady  as  ^  goes.  Solve 
a  piece  at  a  time.  It’s  a  lesson  that  didn’t 
play  well  in  the  *90$.  When  pet^le  rip 
out  everything  and  put  in  an  all-new 
[supply  chain]  system,  it’s  the  eqxitva- 
lent  of  a  heart,  lung  and  liver  transplant 
all  at  once.  It's  so  risky  that  you  should 
never  do  it  unless  the  patient  is  going 
to  die  anyway.  Instead,  you  ought  to 
take  a  look  at  the  supply  cb^  diagram 
—  a  simple  circle-and-arrow.  basic  ref¬ 
erence  diagram  —  and  ask  "Where  are 
the  bottlenecks  ri^t  now?"  Maybe  the 
bottleneck  is  procurement  or  inven¬ 
tory  control  or  forecasting.  Identify 
the  worst  bottlenecks, 
then  come  up  with  point- 
specific  [ITl  solutions  to 
those  bottlenecks.  Fifty- 
million-doUar  SAP  solu¬ 
tions  played  well  in  the 
'90s.  but  I  don’t  think 
they  were  ever  good 
practices. 

Hm  com?  We  spent  the 
last  to  years  with  mas¬ 
sive  alt-in-one  systems. 

I  think  the  answers  are 
there  for  everyone  to  see. 

They  don't  work  very 
often,  and  the  world 
cban^  so  quickly  that 
you’ll  come  up  with  a 
new  solution  to  an  old 
business  model  And  if 
the  people  who  have  to 
use  a  new  system  either 
don't  buy  into  it  or  feel 
it’s  simply  a  prelude  to 
being  laid  off  or  the 


equivalent  of  speeding  up  the  assembly 
lii^  they'll  take  a  passive-aggressive 
attitude  and  do  everything  from  spill 
coffee  on  the  keyboard  to  feed  the  sys¬ 
tem  goofy  data.  As  soon  as  that  hap¬ 
pens.  you  can  typically  blame  the  tech¬ 
nologists  who  are  so  absorbed  in  tech¬ 
nology  and  the  least  politically  aware 
that  they  make  very  easy  scap^oats. 

So.  art  you  aqfkiQ  to  mIm  the  betdansela 
one  by  ono,  wNb  dWwwit  Hllwm,  and  worry 
ttow  about  IntoaiittiglhoMSoftwiwiWdh 
cottorw?  There’s  sometiiing  called  the 
miracle  of  the  ASCII  fOe.  I  tell  members 
I  will  never  stand  up  in  front  of  a  tech¬ 
nology  organization  and  brag  about 
sending  encrypted  ASCII  files  over  the 
Internet,  but  it  works.  Every  system 
has  batch-import  capability,  and  that's 
wbere  1  believe  in  about  2001  a  new 
acronym  appeared  called  EAl  [enter¬ 
prise  appl^tion  integration].  EAl  is 
really  alMut  passing  ASCII  flies  across 
separate  applications.  It’s  not  that  we 
di^'t  know  bow  to  do  that  in  the  late 


essentials 


’80s;  it’s  that  h  wasn’t  cool  I  come 
down  in  fevor  of  the  practical  approach. 

HowrtoiaKwnt?  For  companies  with 
EDI  (electronic  data  interchange],  we 
reformat  ASCII  flies  to  an  EDI  8S0  or 
other  file  for  EDI.  We've  all  agreed  on 
a  certain  ASCII  file  format.  If  they 
have  to  reformat  to  that,  tfs  a  trivial 
thing  to  do.  People  will  call  me  primi¬ 
tive.  but  the  use  of  ASCII  flat  flies  sent 
over  the  Internet  is  an  amazing  thing. 
When  people  wax  enthusiastic  about 
Web  services  or  the  Internet  version 
of  object-oriented  XML.  it’s  basically 
an  ASCII  flat  flle  witii  angle  brackets 
that  tells  you  uriut  chat  means.  In  a 
hi^-change.  ti^t  economy,  I  think 
you're  always  better  off  to  go  with 
point  solutions  and  a  guaranteed 
12-month  payoff. 

Can  you  idv*  iiw  ai  wtampls  hoM  yaur  own 
upwlsnuf?  We  have  a  wholly  owned 
redistributor  that  stocks  slower-mov¬ 
ing  items,  but  hems  that  are  necessary 
for  national  account  contracts.  That  or¬ 
ganization  works  on  very  thin  margins. 
We've  been  very  reluctant  ro  add  bead 
count.  But  our  business  is  growing 
steadily,  so  they’re  swamped.  Members 
order  from  the  warehouse,  then  the 
warehouse  turns  around  and  places  tiie 
order  with  a  supplier.  We're  now  work¬ 
ing  on  an  initiative  where  everyone 
agrees  on  standard  format  for  an  invoice. 
Instead  of  a  member  calling  us  or  faxing 
an  order,  they  can  export  it  in  a  stan¬ 
dard  ASCn  flat  file,  encrypt  and  trans¬ 
port  the  ASCn  flle  over  the  Internet 
Our  order  entry  (system]  simply  im¬ 
ports  that  flle  and  all  order  entry  woA. 
and  data  entry  work  is  automat^  Au¬ 
tomate  the  "dog  wmk"  and  let  the  peo¬ 
ple  handle  the  exceptions.  Why  sp^ 
money  on  computers  and  artifici^  in- 
telUgence  when  I  have  real  intelligeoce 
yearning  to  break  free  of  the  dog  work 
that  plagues  them  everyday. 

P^le  get  into  these  e»iuishely 
ccwnpicx  systems.  Meanwhile,  we’re 
haring  dits  recovery  that  is  not  cresting 
Jobf.  I  believe  (chat)  if  computers  moni- 
daffy  in-and-out  wi^  and  you 
a  system  where  people  are 
computers,  you’ll  get  smne- 
'e.  But  when  you  try  to 
Iters  do  everytiiing,  it  won’t 
imputers  are  great  at  dog 
but  I  don’t  need  computers  to 
decisions  for  me.  I 
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The  business  intelligence 
test  that  our  competitors 
don’t  want  you  to  take. 

1.  Want  a  Free  Buyers  Guide? 


2.  Want  a  Free  Test  Drive? 


3.  Want  a  Guarantee? 


For  more  information  on  the  NEW  Brio  Performance 
Suite  8  go  to  www.brio.com  or  cal!  1-877-289-2746. 
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NavSea’s  ROI 
Ship  Comes  In 

E-procurement  system  cuts  buying  time  by  over  85%.  By  Matt  Hamblen 


The  dot-com  bubble  was 
already  bursting  when  the 
Naval  Sea  Systems  Command 
(NavSea)  launched  its  SeaPort 
e-procurement  system  in  April  2001. 
Since  then,  tfs  earned  a  hi^  enough 
return  on  investment  and  regolar  posi¬ 
tive  feedback  to  be  coitsidered  a 
by  more  than  300  pro¬ 
curement  martagers,  says  Claire 
Grady.  SeaIH)ft  program  manager. 

Key  to  the  project’s  success 
was  that  NavSea  was  able  to  woric 
with  a  sii^e  e-commerce  procure¬ 
ment  software  vendor.  Commerce 
One  Inc,  and  follow  specific  guide¬ 
lines  agreed  upon  by  higher-ups  at  the 
naval  coimnand. 

The  insuUatioD  required  a  little 
more  customization  than  was  antici¬ 
pated.  but  the  system  works  reliably. 
Grady  says.  Yet  she’s  somewhat  skepti¬ 
cal  about  expanding  the  Seaport  sys¬ 
tem  beyond  its  current  use  of  buying 
professional  services  to  include  pur¬ 
chasing  specialized  goods  for  building 
ships  and  weapon  systems  for  the  U.S. 
Navy  and  Marines,  which  provide  the 
lion’s  share  of  NavSea’s  current  annual 
budget  of  $19  billion. 

The  project  grew  out  of  pressure 
from  the  secretary  of  Defense  to  cut 
costs  in  1998.  a  vastly  different  era  for 
defense  spending  than  today.  NavSea 
was  told  to  cut  about  10% 
of  its  professional  ser¬ 
vices  procurement 
^etuting  over  five  years, 
from  2001  to  2005.  Pro¬ 
fessional  services  include 
program  mana^ment. 
logistics  support  engi¬ 
neering  and  fuiancial 
management. 

“Seaport  is  on  track  to 
meet  its  savings  (goal).'* 

Grady  says.  The  time  to 
complete  an  acquisition, 
from  start  to  fmish.  has 
dropped  drastically  — 


from  270  days  to  between  30  and  42 
days,  or  by  over  85%  —  mainly  because 
paperwork  has  been  eliminated. 

NavSea  has  also  been  able  to  save  with 
volume  discounts  by  working  with  reg¬ 
ular  bidders,  which  the  system  ranks 
based  upon  quality  of  service  and  past 
performance,  not  just  price,  ac¬ 
cording  to  Grady  and  Kathleen 
Monahan,  who  recently  retired 
as  director  of  the  surface  sys¬ 
tems  division  at  NavSea. 

NavSea  picked  Commerce  One  in 
Pleasanton,  ralif.,  over  nine  other  ven¬ 
dors  partly  because  its  off-the-shelf 
software  required  little  customization. 
In  two  years  of  operation,  one  of  the 
few  difficulties  tl^t  NavSea  has  faced 
is  customizing  Commerce  One's  soft¬ 
ware  to  track  small,  disadvantaged 
businesses  that  the  government  wants 
to  support.  Grady  says. 

Upfront  software  license  and  instal¬ 
lation  costs  were  $500,000.  Aimual 
support  costs  are  $160,000,  and  annual 
Web  hosting  costs  are  $240,000.  Nav¬ 
Sea  has  a  five-year  contract  for  hosting 
and  support.  Based  on  current  and 
project^  savings,  the  ROI  goal  that 
NavSea  set  with  Commerce  One  has 
been  met  “very  easily."  says  Grady. 

Monahan  and  Grady  say  that  85%  of 
purchasing  managers  consistently  rate 
I  Seaport  an  Improvement  over  the  old 
paper-based  system. 

“Commerce  One  bent 
over  backward  to  make 
the  portal  screens  the 
managers  use  very  user- 
fncndly.”  Monahan  says. 

Grady  attributes  the 
prefect's  success  to  top 
management  acceptii^ 
the  objectives  early  on. 
as  weU  as  to  all  of  the 
main  players  getting  in¬ 
volved  in  the  ways  that 
NavSea  needed  to  im¬ 
prove  procurement. 
This  included  rating 


SeaPort 

The  e-procairanenl  system  «1 
NetfSei  tepleced  a  pepeHneed 
sysim  ihei  dUnT  «ialy  enable 
an  eMkadon  ol  e  conlrador’s 
perfonrnnee.  Here's  a  look  el 
thepiDcaasnow. 
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bidders  by  their  performance.  “It  was  a 
holistic  locdi,"  she  says. 

The  10%  savings,  while  a  mandate  in 
the  case  of  NavSea.  is  realistic  for  any 
organization  to  achieve  from  e-pro¬ 
curement  implementations,  according 
to  analyst  Albert  Pang  at  Framingham. 
Mass.-ba5ed  research  firm  IDC.  "Ten 
percent  is  consistent  with  what  other 
companies  have  achieved  when  they 
start  deploying  e-procurement  apps." 
Pang  notes.  “When  you  talk  about  an 
organization  that  processes  tens  of 
thousands  of  purchase  orders  a  year 
or  higher,  certainly  10%  would  help 
tremendously." 

Strearriining  Necessary 

Pang  said  he  has  followed  the  SeaPort 
implementation  and  spoke  to  Navy  of¬ 
ficials  several  years  ago  about  the  need 
to  consolidate  the  procurement  proc¬ 
esses  the  Navy  had  set  up  with  thou¬ 
sands  of  suppliers.  One  administrative 
change  to  SeaPort  allows  for  21  prima¬ 
ry  supplier  teams  to  bid  on  wo^  and 
each  team  works  with  multiple  con¬ 
tractors  and  a  recognized  team  leader. 

When  I  talked  to  the  Navy  in  the 
late  '90s,  they  had  no  idea  at  the  lop 
manager  level  who  was  buying  the 
stuff,  how  much  they  were  paying,  bow 
many  suppliers  there  were,"  Pang  re¬ 
calls.  “The  U.S.  Navy  was  dealing  with 
so  many  operations  around  the  coun¬ 
try  and  world,  and  some  people  were 
able  to  buy  stuff  on  their  own.  Maver¬ 
ick  spending  was  rampant  in  many 
parts  of  govemment.” 

Pang  acknowledges  that  the  e-pto- 
curement  software  can  organize  only 
the  processes  that  administrators  put 
in  place.  "If  people  doing  procurement 
aren’t  adhering  to  business  rules,  the 
idea  will  fall  apart."  he  adds. 

So,  wheffier  NavSea  will  be  able  to 
drastically  control  costs  to  make  tax¬ 
payers  happy  is  an  open  question.  In 
£a^  procurement  of  professional  ser¬ 
vices  amounts  to  only  $500  million  an¬ 
nually.  a  fraction  of  NavSea’s  current 
budg^  And  Grady  doesn't  think  buy¬ 
ing  parts  or  materials  for  ships  online 
makes  much  sense  because  “a  lot 
of  what  we  buy  is  unique,  and  there 
aren't  a  lot  of  efficiencies  in  buying 
a  unique  item  online."  Still.  NavSea 
will  look  to  continuously  improve  cur¬ 
rent  processes  to  try  to  derive  greater 
benefit  from  its  e-procurement  system, 
she  says.  I 


yOKNMVSU 

NmSaa  olfeMs  hoped  tmuM 

the  procumment  pnicBss  «h8o  a  went  Ive  n  2001. 

OQuttUnka2970 

wwwxompalarworldxoin 


all  media, 


odds. 

ago  a  drop 
been  nearly 


in  scattered 
qukkiy  shift 


drop  coordinates.  At  Nortel  Networks,  we  call  this  'the  engaged  business 
model:  And  we  make  it  happen  by  allowing  businesses  to  engage  their 
employees  with  ways  to  work  more  productively  as  teams.  Eliminating 
boundaries  by  anticipating  user  needs.  Delivering  critical,  time-sensitive 
information  on  whatever  (tevice  they  can  access.  Encrypted  for  security, 
info  gets  to  where  it  needs  to  go  and  nowhere  else.  End  of  story  Rachel 
and  her  team  save  time  and  money  as  they  race  to  help  people  in  need. 
All  delivered  by  our  enterprise  vision.  One  network.  A  world  of  choice. 
nortelnetworks.com/onenetwork 
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STORAGE 

MANAGEMENT 

PLAY 


11  WIN  WITH  STORAGE  MANAGEMENT:  Information  is  growing 
exponentially.  To  efficiently  run  your  business,  you  need  powerful 
tools  to  understand  and  manage  your  storage  environment. 

2]  WIN  WITH  TIVOLI:  fivoli  Storage  Resource  Management  Solutions 
are  open,  easy  to  deploy  and  self-optimizing.  For  improved 
utilization,  easier  administration  and  better  ROI.  Tivoli.  Part  ot 
our  software  portfolio  Including  DB2r  Lotus*  and  WebSphereT 

3]  MAKE  THE  PLAY:  To  find  a  Tivoli  Business  Partner  or  to  learn 
more,  visit  ■Nn.com/tivoli/partners 
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IT  Customers 
Rule  Innovation 


Users  must  demand  technologies 
to  improve  business.  By  Mark  Hall 


Corry^uterworld  columnist 
David  Moscbella's  new 
book,  Customer-Driven  m 
How  Users  Are  Shaping 
Technology  Industry 
GrowtK  should  send  chills  down  the 
spines  of  executives  inside  the  board- 
rooms  of  major  IT  vendors.  He  bril¬ 
liantly  argues  that  since  the  beginning 
of  the  computer  industry,  IT 
suppliers  have  been  the  main 
drivers  behind  technology  inno- 
vatioo  and,  therefore,  its  growth 
and  success.  But  that  game,  or 

‘Nrave,’'asbecaUsit,isover.  - 

Customers  are  now  the  big  players  in 
the  innovation  game,  and  the  likes  of 
Bill  Gates,  Scott  McNeaty  and  Carly 
Fiorina  are  mere  onlookers. 

Moschella  ri^tly  labels  this  a  “huge 
cultural  and  business  change"  that's 
fraught  with  danger.  Hiat’s  because 
users  are  too  comfortable  letting  IT 
suppliers  point  them  in  the  right  direc¬ 
tion  with  cooler,  foster  and  more  effi¬ 
cient  technology  to  improve  existing 


BOOKM 

REVIEW 


systems.  But  IT  customers  no  longer 
need  to  improve  IT  for  its  own  s^. 
Now  the  reason  they  ireed  technology 
is  to  make  their  businesses  better.  And 
if  IT  users  fumble  the  opportunity  to 
e]q>loit  IT  for  that  purpose,  Moschella 
vnims,  “IT  business  will  almost  cer¬ 
tainly  stagnate” 

AtkI  fumble  they  might.  The  author 

-  points  out  that  users  can 

botch  opportunities  to  exploit 
technok)^  by  refusing  to  see 
its  value  to  business.  He  cites 
the  music  industry’s  opposi- 

-  tion  to  peer-to-peer  systems 

such  as  Napster  as  the  kind  of  back¬ 
ward  customer  thinking  that  can  stifle 
IT  iimovation. 

He  also  slams  some  custcuners'  nar¬ 
row  focus  on  sifting  every  IT  opportu¬ 
nity  through  the  return  on  investment 
sieve.  He  writes  that  “customers  have 
to  forget  formal  ROI  numbers  aitd  sim¬ 
ply  ‘Rely  On  Instinct.*  ” 

Customer-driven  innovation  is  also 
at  risk  because  IT  veiKlors  need  to  get 
with  the  new  program  and  shifl  their 
focus  to  developing  products  that  let 
users  iimovate.  One  other  phfall  focing 
this  new  wave  of  technology  inrtova- 
tion  is  that  the  historical  supplier- 
driven  waves  are  boosted  by  entrepre¬ 
neurs  motivated  by  wealth  and  status. 
But  among  users  in  maricets  such  as 
health  care  and  insurance,  that  mociva- 
lloQ  is  sorely  lacking  and  “will  likely 
a  serious  IT  mdustry  market 
Moschella  writes. 

Dot  all  is  gloom  and  doom. 

lOut  the  book,  Moschella  cites 
rous  examples  that  IT  users  can 
to  see  bow  other  customer  inno¬ 
ion  of  IT  has  worked.  And  be  also 
'shows  where  it’s  likely  to  play  out  in 
the  fomre.  For  example,  in  one  two- 
column  chart,  he  identifies  40  areas 
where  customer  business  iniMivations 
are  likely  to  inspire  vendor  product  de¬ 


velopment  and  not  the  other  way 
around. 

As  is  the  case  with  most  IT  business 
books,  readers  will  need  to  slog 
through  this  author’s  review  of  com¬ 
puter  history.  For  those  few  unfomiliar 
with  this  terrain,  Moscbella’s  analysis 
of  the  prior  waves  of  coopting  (such 
as  mainframes  and  PCs)  is  concise  and 
readable.  But  although  it  does  help  set 
up  his  thesis,  it’s  not  essential  to  get- 
tii^  to  the  vital  part  of  this  important 
book,  which  posits  that  ITs  future  is 
no  longer  centered  amid  engineers  in 
Armonk  or  Redmond  or  even  Silicon 
Valley.  It  rests  with  IT  leaders  in  every 
IT  data  center  in  the  world.  I 
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WIN  WITH 
TIVOLI  AND 
IBM  BUSINESS 
PARTNERS. 

Are  you  equipped  with  the  best  storage 
solutions  for  your  business?  Ask  one  o( 
these  IBM  Business  Partners.  They  haw 
Tivoli  Storage  Resource  Management 
Solutions  and  the  expertise  to  go  with 
them.  For  more  information  on  SRM 
or  to  find  more  Business  Partners  k) 
help  you  optimize  your  business,  visit 
bfii.eomAivoli/partner$ 
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IT  Customers 
Rule  Innovation 


Users  must  demand  technologies 
to  improve  business.  By  Mark  Hall 


Con^uterworld  columnist 
David  Moschella's  new 
book.  Customer-Driven  IT: 
How  Users  Are  Shaping 
Technology  Industry 
Growth,  should  send  chills  down  the 
spines  of  executives  inside  the  board- 
rooms  of  major  IT  vendors.  He  bril¬ 
liantly  argues  that  since  the  beginning 
of  the  computer  industry.  IT 
suppliers  have  been  the  main 
drivers  behind  technology  inno¬ 
vation  and.  therefore,  its  growth 
and  success.  But  that  game,  or 

“wave."  as  he  calls  it,  is  over.  - 

Customers  are  now  the  big  players  in 
the  innovation  game,  and  the  likes  of 
BUI  Gates,  Scott  McNealy  and  Cariy 
Fiorina  are  mere  onlookers. 

Moscbella  r^tly  labeb  this  a  “huge 
cultural  and  business  change"  that's 
frau^t  with  danger.  That’s  because 
users  are  too  comfortable  letting  IT 
suppliers  point  them  in  the  ri^t  direc¬ 
tion  with  cooler,  faster  and  more  effi¬ 
cient  technology  to  improve  existing 
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systems.  But  IT  customers  no  longer 
need  to  improve  IT  for  its  own  sake. 
Now  the  reason  they  need  technolc^' 
is  to  make  their  businesses  better.  And 
if  IT  users  fumble  the  opportunit>'  to 
exploit  IT  for  that  purpose.  Moschella 
writes.  "IT  business  will  almost  cer¬ 
tainly  stagnate.” 

And  fumble  they  might.  The  author 

-  points  out  that  users  can 

botch  opportunities  to  exploit 
technology  by  refusing  to  see 
its  value  to  business.  He  cites 
the  music  industry's  opposi- 

-  lion  to  peer-to-peer  systems 

such  as  Napster  as  the  kind  of  back¬ 
ward  customer  thinking  that  can  stifle 
IT  innovation. 

He  also  slams  some  customers'  nar¬ 
row  focus  on  sifting  every  IT  opportu¬ 
nity  through  the  return  on  investment 
sieve.  He  writes  that  "customers  have 
to  forget  formal  ROI  numbers  and  sim¬ 
ply  'Rely  On  Instinct'  “ 
Customer-driven  innovation  is  also 
at  risk  because  IT  vendors  need  to  get 
with  the  new  program  and  shift  their 
focus  to  developing  products  that  let 
users  iimovate.  One  other  pitfall  &cing 
this  new  wave  of  technology  iimova- 
tion  is  that  the  historical  supplier- 
driven  waves  are  boosted  by  entrepre¬ 
neurs  motivated  by  wealth  and  status. 
But  among  users  in  markets  such  as 
health  care  and  insurance,  that  motiva¬ 
tion  is  sorely  lacking  and  “will  likely 
remain  a  serious  IT  industry  market 
buiier.”  Moschella  writes. 

But  not  all  is  gloom  and  doom. 

Lghout  tb^  book.  Moscbella  cites 
icrous  examples  that  IT  users  can 
idy  to  see  how  other  customer  inno- 
lion  of  IT  has  worked.  And  he  also 
shows  where  it’s  likely  to  play  out  in 
the  future.  For  example,  in  one  two- 
column  chart,  be  identifies  40  areas 
ii^ere  customer  business  innovations 
are  likely  to  inspire  vendor  product  de¬ 


velopment  and  not  the  other  way 
around. 

As  is  the  case  with  most  IT  business 
books,  readers  will  need  to  slog 
through  this  author's  review  of  com¬ 
puter  history.  For  those  few  unfamiliar 
with  this  terrain,  Moschella's  analysis 
of  the  prior  waves  of  computing  (such 
as  mainframes  and  PCs)  is  concise  and 
readable.  But  although  it  does  help  set 
up  his  thesis,  it's  not  essential  to  get¬ 
ting  to  the  vital  part  of  this  important 
book,  which  posits  that  ITs  future  is 
no  longer  centered  amid  engineers  in 
Armonk  or  Redmond  or  even  Silicon 
Valley.  It  rests  with  IT  leaders  in  every 
IT  data  center  in  the  world.  I 
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WIN  WITH 
TIVOLI  AND 
IBM  BUSINESS 
PARTNERS. 

Are  you  equipped  with  the  best  storage 
solutions  tor  your  business?  Ask  one  o( 
these  IBM  Business  Partners.  They  have 
Tivoli  Storage  Resource  Management 
Solutions  and  the  expertise  to  go  with 
them.  For  more  information  on  SRM 
or  to  find  more  Business  Partners  lo 
help  you  optimize  your  business,  visit 
tofikcom/tivoli/parmers 
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THW  Establisiies 
Offshore  rr  Center 

Sttyam  Computer  Services  Ltd., 
one  of  India's  largest  fT  outsourc* 
ing  companies,  announced  that  it 
has  set  up  a  dedicated  offshore 
solutions  center  for  TIfW  Auto* 
motive  Inc.,  a  Lrvonia.  Mich.- 
hased  automotive  parts  manufac¬ 
turer.  Located  in  Chennai.  India, 
the  new  center  w9  provide  TRW 
with  e  broad  range  of  IT  and  busi* 
ness  services,  incbidmg  process 
consulting,  business  process 
re  engineering  and  application 
management. 


Training  Portal  Set 
To  Save  Ford  S17M 

Ford  Motor  Co.  today  is  launching 
tiw  Ford  Learning  Networh.  a 
massive  Web-based  portal  that 
integrates  al  training  manage¬ 
ment  online  testing  and  learning 
resources  in  a  sirtgle  place  for 
use  by  the  automaker's  300.000 
employees  worldwide.  The  net¬ 
work's  library  includes  more  than 
400.000  tides,  including  1.500 
online  courses,  1.900  e-books, 
an  array  of  Ford  internal  online 
Web  sites  and  hundreds  of  jour- 
uls  and  periodicals.  Today's 
launch  is  the  culmination  of  a 
three-year  project  that  will  resuH 
in  savings  of  $17  million,  accord¬ 
ing  toRird. 


Perot  Gets  Medical 
IT  Outsourcing  Deal 

Plano.  Texas-based  Perot  Sys¬ 
tems  Corp.  wH  provide  al  fT 
management  services,  mdudirtg 
appicabon.  program  and  project 
management,  as  wel  as  systems 
implsinsnlalion  and  infrastruc¬ 
ture  services,  to  Tufts-New 
EnMMsdfoai  Center  Inc. 
under  an  agreement  announced 
last  week. 

The  deal  cals  for  Perot  to 
help  the  medical  center  split 
from  its  former  corporate  part¬ 
ner.  lifespan,  a  Rhode  Island- 
based  he^  system.  LHespan 
previously  provided  al  IT  ser¬ 
vices  to  the  Bostim-based  med¬ 
ical  center. 


MATTHEW  KRIEGHR  •  PEER  TO  PEERS 

Ten  Ways  to  Increase 
TburlT  Value 


INFORMATION  TECHNOLOGY  departments  are 
under  more  pressure  than  ever  to  prove  their 
value  in  today’s  climate  of  continued  economic 
constraints  and  depressed  IT  spending.  In  these 
times,  we  must  be  diligent  about  not  losing  sight 
of  the  fundamentals.  Based  on  my  nine  years  of  experi¬ 
ence  in  IT,  here  are  10  ways  to  increase  your  value  and 
that  of  IT  at  your  company: 


t  Execution  is  everything:  just 
get  it  done.  True,  it’s  a  cliche, 
but  more  than  ever,  the 
business  is  in  need  of  an  IT 
department  that  can  deliv¬ 
er.  Don't  get  embroiled  in 
endless  analysis:  take  rea¬ 
sonable  risks  and  just  do  it. 

You'll  show  the  business 
that  your  department  is 
competitive  and  action- 
oriented. 

2.  Driver  solutions,  not  kteofo- 
gies.  Drop  the  religious  de¬ 
bates  over  Uni-x  vs.  Linux 
vs.  Windows.  Forget  about 
historical  allegiances  to 
specific  platforms,  and  re¬ 
sist  the  habit  of  calling 
yourselves  the  "Windows 
group"  or  the  “Unix  team.” 
lust  deliver  the  mo.st  ap¬ 
propriate  solutions  that  arc  consistent 
with  your  enterprise's  overall  IT  archi¬ 
tecture  at  the  most  competitive  cost. 

3.  Oelver  a  consistent  message.  Tactics 
change,  but  your  strategy  and  vision 
should  be  good  for  the  long  haul.  If 
you've  got  a  solid  message  that's  con¬ 
sistent  with  the  overall  corporate 
strategy  and  vision,  repeat  it  enough 
and  people  will  follow.  But  also  remain 
agile  and  prepared  to  change,  because 
at  some  point  the  technology  and  busi¬ 
ness  will  change. 

4.  Ifofsonaly  engage  the  business.  Every¬ 
one  knows  that  successful  IT  depart¬ 
ments  are  closely  aligned  with  the 


business,  but  for  IT  em¬ 
ployees  who  work  behind 
the  scenes  on  networking 
and  infrastructure  issues,  it 
may  be  difficult  to  see  how 
your  work  contributes  to 
the  overall  business. 

Find  your  own  hook  into 
the  business.  Pick  a  project 
or  a  department,  build  the 
relationships,  and  show 
how  you  and  your  depart¬ 
ment  can  contribute  to 
their  goats. 

S.  Lean)  the  “stack.*'  In  our 
rr  department,  we  use  the 
term  stack  to  describe  all 
the  components  of  a  par¬ 
ticular  system.  from  the 
physical  infrastructure  to 
the  business  application 
and  content,  and  every¬ 
thing  in  between.  The  best  IT  people 
understand  the  application  stack  from 
bottom  to  top.  Understanding  applica¬ 
tions  and  technologies  this  way  makes 
you  more  valuable,  engages  you  with 
the  business  and  gives  you  a  competi¬ 
tive  advantage  over  those  who  under¬ 
stand  just  their  piece. 

For  example,  there's  traditionally  a 
gap  between  the  developers  who  write 
an  application  and  the  network  infra¬ 
structure  people  who  provide  the 
transport.  Those  who  can  bridge  the 
gap  by  understanding  how  the  applica¬ 
tion  and  the  network  interact  offer  ex- 
I  tra  value. 


6.  Consider  less-conventional  technology 
aKematrves.  Competitive  IT  depart¬ 
ments  recognize  the  value  in  low-cost, 
functional  solutions.  For  example,  a 
year  and  a  half  ago  it  was  almost  in¬ 
conceivable  to  consider  running  a 
business  with  a  productivit>‘  suite  oth¬ 
er  than  Microsoft  Office.  Today  there 
arc  several  lower  cost  or  free  alterna¬ 
tives,  such  as  open  source  or  inexpen¬ 
sive  commercial  suites,  that  are  rapid¬ 
ly  becoming  functional  replacements. 
The  same  is  true  for  other  product 
segments  as  well,  so  consider  these 
before  your  next  major  upgrade. 

7.  H’s  a  buyer's  market  so  take  advantage  of 
it  Vendors  arc  more  willing  to  negoti¬ 
ate  than  ever.  Simply  needing  to  sur¬ 
vive.  they’re  hot  to  compete.  Take  ad¬ 
vantage  by  playing  the  field  for  com¬ 
modity  buys  and  driving  down  prices. 

8.  Think  enterprisewide.  Target  your  IT 
initiatives  across  the  entire  enterprise 
when  possible.  Cost  pressures  make  it 
a  necessity,  because  management  will 
resist  site-specific  implementations. 

9.  Respect  technotogy  and  the  business  H 
enables.  It  has  become  popular  in  the 
past  several  years  to  proclaim.  "It’s  not 
the  technology  that's  important:  it's 
the  business.”  While  generally  true, 
this  phrase  is  overused.  Let’s  face  it  — 
good  technology  can  help  to  drive 
down  the  costs  of  doing  business  and 
enable  new  business,  and  that's  a  good 
thing.  Maintain  a  healthy  balance  in 
your  business/tcchnology  focus. 

10.  Develop  a  VKirtung  knowledge  of  Linux. 
Windows  isn't  the  only  game  in  town 
anymore.  L  inux  is  becoming  increas¬ 
ingly  common,  so  it's  important  to  un¬ 
derstand  the  economic  and  technical 
issues  around  it.  You1l  be  better  pre¬ 
pared  to  answer  your  customers'  ques¬ 
tions  as  a  result,  k 
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1RW  Establishes 
OKshore  IT  Center 
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Training  Portal  Set 
ToSaweFordSITM 

Ford  Maler  Co.  today  ia  tauncMng 
iia  Ford  Uandag  Natwnrk.  a 
mairioatfct  bawl  porty  that 
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bigtoFord. 


Parat  Gets  Medical 
IT  Outsourcing  Deal 
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MATTHEW  KRIEGER  ■  PEER  TO  PEERS 

Ten  \\&ys  to  Increase 
Your  rr  Value 


INFORMATION  TECHNOLOGY  departments  are 
under  more  pressure  than  ever  to  prove  their 
value  in  today’s  climate  of  continued  economic 
constraints  and  depressed  IT  spending.  In  these 
times,  we  must  be  diligent  about  not  losing  sight 
of  the  fundamentals.  Based  on  my  nine  years  of  experi¬ 
ence  in  IT,  here  are  10  ways  to  increase  your  value  and 
that  of  IT  at  your  company: 

1  Eacudon  b  avaryttdng;  fust 


grt  H  dona.  True,  it’s  a  cliche, 
but  more  than  ever,  the 
business  is  in  need  of  an  IT 
department  that  can  deliv¬ 
er.  Don’t  get  embroiled  in 
endless  analysis:  take  rea¬ 
sonable  risks  and  just  do  it. 

You'll  show  the  business 
that  your  department  is 
competitive  and  action- 
oriented. 

2.  OilMr  sokrtona,  not  idaolo- 
gias.  Drop  the  religious  de¬ 
bates  over  Unix  vs.  Linux 
vs.  Windows.  Forget  about 
historical  allegiances  to 
specific  platforms,  and  re¬ 
sist  the  habit  of  calling 
yourselves  the  “Windows 
group"  or  the  “Unix  team." 

Just  deliver  the  ax>st  ap¬ 
propriate  solutions  that  are  consistent 
with  your  enteiprise's  overall  IT  archi¬ 
tecture  at  the  most  competitive  cost. 

3.  Dafciara  Bawtelmd  mwaaga.  Tactics 
change,  but  your  strategy  and  vision 
should  be  good  for  the  long  haul  If 
you’ve  got  a  solid  message  that's  con¬ 
sistent  with  the  overall  corporate 
strategy  and  vision,  repeat  it  enough 
and  people  will  follow.  But  also  remain 
agile  and  prepared  to  change,  because 
at  some  point  the  technology  and  busi¬ 
ness  will  change. 

4. ta«MlyaagigattabBrtiaaB.  Every¬ 
one  knows  that  successful  IT  depart¬ 
ments  are  closely  al%ned  with  t^ 


business,  but  for  IT  em¬ 
ployees  who  woric  behind 
the  scenes  on  networking 
and  infrastructure  issues,  it 
may  be  difficult  to  see  how 
your  work  contributes  to 
the  overall  business. 

Find  your  own  hook  into 
the  business.  Pick  a  project 
or  a  department,  build  the 
relationships,  and  show 
how  you  and  your  depart¬ 
ment  can  contribute  to 
their  goals. 

S.  Loam  the  "stacfc.*  In  our 
IT  department,  we  use  the 
term  stack  to  describe  all 
the  components  of  a  par¬ 
ticular  system,  from  tbe 
physical  infrastructure  to 
the  business  application 
and  content,  and  every¬ 
thing  in  between.  The  best  IT  people 
understand  the  application  stack  from 
bottom  to  top.  Understanding  applica¬ 
tions  and  technologies  this  way  makes 
you  more  valuable,  engages  you  with 
the  business  and  gives  you  a  competi¬ 
tive  advantage  over  those  who  under¬ 
stand  just  their  piece. 

For  example,  there's  traditionally  a 
gap  between  the  developers  who  write 
an  application  and  the  network  infra¬ 
structure  people  who  provide  the 
transport.  Those  who  can  brid^  tbe 
gap  by  understanding  how  tbe  applica¬ 
tion  and  tbe  netwoik  interact  offer  ex¬ 
tra  value. 


6. ConMdBflBM  cotwanBanal  ladwiolDgy 
•Namallrts.  Competitive  IT  depart¬ 
ments  recognize  the  value  in  low-cost, 
functional  solutions.  For  example,  a 
year  and  a  half  ago  it  was  almost  in¬ 
conceivable  to  consider  running  a 
business  with  a  productivity  suite  oth¬ 
er  than  Microsoft  Office.  Today  there 
are  several  lower  cost  or  free  alterna¬ 
tives,  such  as  open  source  or  inexpen¬ 
sive  commercial  suites,  that  are  rapid¬ 
ly  becoming  functional  replacements. 
Tbe  same  is  true  for  other  product 
s^^ents  as  well  so  consider  these 
before  your  next  major  upgrade. 

7.  M's  a  fauyar't  mifkat,  ao  bte  adMrtage  of 
M.  Vendors  are  more  willing  to  negoti¬ 
ate  than  ever.  Simply  needing  to  sur¬ 
vive.  they're  hot  to  compete.  Take  ad¬ 
vantage  by  playing  the  Held  for  com¬ 
modity  buys  and  driving  down  prices. 

6.  TWnk  srtwprfaartda.  Target  your  IT 
initiatives  across  tbe  entire  enterprise 
when  possible.  Cost  pressures  make  it 
a  necessity,  because  management  will 
resist  site-specific  implementations. 

9.  Rampart  tsdinofcigy^  the  buakMWill 
onablas.  It  has  become  popular  in  the 
past  several  years  to  proclaim,  “It’s  not 
the  technology  that's  important;  it’s 
the  business."  While  generally  true, 
this  phrase  is  overused.  Let's  face  it  — 
good  technology  can  help  to  drive 
down  tbe  costs  of  doing  business  and 
enable  new  business,  and  that's  a  good 
thing.  Maintain  a  healthy  balance  in 
your  businessAechnoIogy  focus. 

ML  Oartliv  a  woridng  tawadadge  af  Un^ 
Windows  isn’t  tbe  only  game  in  town 
anymore.  Linux  is  becoming  increas¬ 
ingly  common,  so  it’s  important  to  un¬ 
derstand  the  economic  and  technical 
issues  around  H.  Youll  be  better  pre¬ 
pared  to  answer  your  customers’  ques¬ 
tions  as  a  result.  I 
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and  Informalion  lechnoto|y.  Companies  are  looking 
lor  people  wdto  have  built,  used  and  applied  IT  tools 
to  data,  from  DMA  to  outcomes  of  clinical  testing.  TKe 
Whitehead  Institute  Center  for  Gersome  Research 
estimates  that  about  half  as  many  people  are 
prepared  for  the  field  as  are  needed  long'term 

For  IT  professionals  interested  in  the  bio-tT  field, 
there  are  some  stepping  stones  to  landing  Ihe  jobs. 
The  key  languages  used  are  C-m-,  Java.  Fortran  and 
Pert.  Many  times,  the  toughest  eiperience  to  get  is  in 
the  biological  sciences  -  where  IT  is  applied  for  the 
purpose  of  biological  firtdlngs.  not  fust  for  develop¬ 
ment  of  rtew  applications.  Dual  degrees,  for  that 
reason,  are  important.  Nunserous  master's  degree 
programs  have  opened  in  btoinformatlcs.  and  the 
Center  for  Bioinformatics  arsd  Computaliorval  Biology 
offers  a  mentoring  program  On-line  courses  also  can 
supplement  experience.  CerttficatlorK  include  Ihe 
Certified  Bioinformatics  Specialist  and  the  Certified 
Bioinformatics  Master. 
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Department  of  Defense,  both  areas  are  looking  al 
annual  growth  of  up  to  16%  per  year,  according  to 
IDC  research.  Theo Chisholm,  spokeswoman  for  IBM 
Health  Sciences,  said  once  mapping  of  the  human 
gertome  opened  the  gate,  the  need  for  systems  to 
mine  and  process  data  exploded.  IBM  estimates  the 
market  to  exceed  S30  billion  per  year  in  the  tJ5. 
by  2006. 


Take  note:  the  growth  isn't  Just  a  U6.  phervomermn 
Bio-IT  spersding.  according  to  IDC  will  more  than 
double  In  the  next  three  years  in  Australia  and  New 
Zealand,  where  more  than  300  biotech  firms  are 
employing  over  6.500  people. 


One  way  to  trace  career  opportunity  is  to 

trace  dollars  allocated  for  research  artd  new 
product  development.  The  search  in  2003 
through  2006  points  to  bio-  and  chem-informatics. 
With  funding  from  the  National  Science  Fourvda- 
tion.  the  Department  of  Homeland  Security  and  the 


The  mission  for  Informatics  is  two-fold.  First,  there  is 
intense  pressure  to  identify  new  targets  in  pharma¬ 
ceuticals  and  health  treatment  quickly  and  at  a  lower 
cost.  Just  as  important  is  eliminating  targets  that 
won't  prove  out  as  quickly  as  possible.  In  the  defense 
artd  security  category,  there's  pressure  on  everything 
from  sourcing  a  new  smallpox  vaccine  to  addressing 
probable  bio-toxins  that  could  be  used  as  weapons. 
On  the  chem-lnformatics  front,  chemistry  arvd  IT  are 
married  up  in  developing  new  detection  systems  for 
use  In  public  buildings  and  areas,  as  well  as  In 
military  action. 


What's  rare  in  the  industry  are  people  qualified  for 
the  work,  knowledgeable  in  Ihe  sciences  -  biology 
and  chemistry  -  as  well  as  in  apf^ied  mathematics 
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Every  ofner  week,  you  M  reach  more 
than  1.8  million’  IT  professionals 
with  your  ad  in  ComputerwoiM's 
Marketplace.  URth  a  variety  of 
sizes— from  a  tradWonal  column  inch 
ad  to  a  full-page,  four-color  format 
lHyS^i^frequencies,  Marketplace 
jiffer^eeveral  unique  and  affordable 
— your  company  to  show- 
— ^.mriiirtg  and  serves. 

more  information  on  these 
i^(a(iiiiities,  contml^Richard  Black 
•t  (800)  622-l|0%x6696 
or  i1Aaklie>compu 
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Microsoft  App  Users  Like 
Portal  Plans  but  ^^&nt  More 


Initial  ties  between  CRM  software  and 
back-office  applications  due  in  April 


At  uicsosorr  Corpi.'s 
Convergence  2003 
conference  here  last 
week,  a  half-dozen 
users  expressed  inttrest  in  a 
portal-si^  user  inter£ice  that 
the  softv^  vetrdor  is  devel¬ 
oping  for  its  business  applica¬ 
tions.  But  some  attendees  said 
they’re  still  looking  for  more 
fonctioaaiity  from  Microsoft. 

For  example.  Bill  Siemering. 
CIO  at  HealthForce  Partners 
Irrc.  in  Seattle,  said  the  health 
care  provider  began  beta-test¬ 
ing  tto  Microsoft  Business 
Portal  earlier  this  month. 
HealthForce,  which  rtms  Mi¬ 
crosoft's  Great  Plains  ftnandal 
and  accounting  applications, 
plans  to  use  the  pc^  as  a 
central  spot  for  deUvermg 
compairy  news  and  lettfog  end 
users  access  data  related  to 
tbek  fobs  or  to  specific  busi¬ 
ness  proiects,  Siemering  said. 

One  big  plus  of  the  portal 
software  is  that  it’s  ti^tly  in¬ 
tegrated  with  the  Great  Plains 
products,  Siemering  said.  But 
he  added  that  be  also  wants  to 
see  Microsoft  provide  out-of- 
tbe-box  connections  between 
the  portal  and  other  applka- 
tions,  such  as  the  customer 
reladon^iip  management 
(CRM)  software  it  shipped 
in  January. 

Daveloiiing  Tias 

As  expected,  Microsoft  used 
the  conference  to  announce 
the  portal  and  to  preview  an- 
otbCT  upcoming  software  of¬ 
fering  that’s  designed  to  boost 
the  ability  of  its  applications 
users  to  collaborate  with  their 
customers  and  suppliers 
[QiiickLink  37030]. 


Mark  Jensen,  a  group  prod¬ 
uct  manage  at  Microsoft’s 
business  solutions  unit,  said 
IT  managers  will  be  able  to 
collapse  multfole  applscadon 
screens  into  a  single  Web 
browser  inteT6Ke  and  then 
custom-cooflgure  the  portal 
for  dlfterent  wotkeis.  End 
users  will  get  direct  access  to 
applicatioDs  through  a  single 
I  sigD'tm  tool  Jensen  said. 

I  The  first  portal  release,  due 


Continued  from  page  1 

Longhorn 

Valentine  said  be  doesn’t 
think  operating  system  waves 
can  be  absorbed  by  custtMners 
any  foster  than  in  two-  to 
three-year  cycles.  That  means 
the  successor  to  Longhorn, 
code-named  Blackcomb.  is 
DOW  loosely  pegged  for  2007 
or  2006.  be  confirmed. 

Those  dates  extend  the  most 
recent  tuneUnes  that  Micro¬ 
soft  has  supplied.  Until  last 
week,  company  officials  had 
been  saying  that  Longhorn 
wouldn't  ship  befoie  mid-2004 
and  that  Blackcomb  wouldn’t 
ship  before  late  2005  or  early 
2006  (C^ckLink  344S4). 

Also  contrary  to  prior  infor¬ 
mation  supplied  by  Microsoft, 
Blackcomb  may  have  both 
client  and  server  releases,  ac¬ 
cording  to  Valentine.  Microsoft 
had  indicated  that  Blackcomb 
would  be  for  servers  only,  but 
last  week  Valentine  said  that 
every  Windows  wave  has  to  in- 
,  elude  a  desktop  operating  sys¬ 
tem  because  *’we  always  want 
to  demonstrate  the  inftastroc- 
rure  with  improvements  in  our 
own  end-user  device  stuff." 


next  month,  will  include  full 
integration  with  Microsoft’s 
Great  Plains  and  Solomon  ap- 
plkatioas.  Ties  between  (2reat 
Plains  and  the  new  CRM  soft¬ 
ware  are  being  beta-tested  and 
should  be  available  right  off 
the  bat,  Jensen  said.  Integra¬ 
tion  of  Microsoft  CRM  and 
Solomon  should  follow  later 
this  year,  be  added. 

Gibson  Musical  Instruments, 
a  maker  of  guitars  and  other 
stringed  mstniments  in  Nash¬ 
ville.  is  a  Great  Plains  user  and 
has  been  beta-testing  Micro¬ 
soft  Business  Portal  with  about 


Valentine  said  a  new  server 
kernel  will  probably  be  required 
for  the  Blackcomb  release,  so 
he  expects  that  there  will  be 
both  client  and  server  operat¬ 
ing  system  releases.  But  be  was 
quick  to  add  that  no  commit¬ 
ments  have  been  made  yet  and 
that  it’s  too  early  to  tell  if  there 
will  be  a  Windows  Server  2005. 

To  support  client  capabili- 
,  ties  in  Longbom,  Valentine 
I  said,  minor  or  simple  infta- 
I  structure  services  might  be 
delivered  as  part  of  an  option¬ 
al  service  pa^  But  be  the 
Windows  team  wants  to  re¬ 
strict  service  packs  primarily 
to  bug  fixes. 

Valentine  said  more  exten- 


a  dozen  users  for  five  weeks. 

Gibson  is  considering  using 
the  software  as  a  general  cor¬ 
porate  portal  said  Man  Mul¬ 
lins,  the  company’s  chief 
knowledge  officer.  Bdt  MuUins 
said  be  would  also  likrto  see 
Microsoft  offer  vertical  appli¬ 
cations  taikmd  to  his  indus¬ 
try,  plus  an  integrated  point- 
of-sale  system  within  the 
Great  (Hains  suite. 

As  part  of  the  Microsoft 
Business  Network  ooUabora- 
tioo  initiadve.  Microsoft  plans 
to  release  software  In  June 
that  will  let  cOTq>aaies  use 
XML  to  exchange  documents 
in  electronic  data  interchange 
formats.  The  company  said  it 
will  add  W^  services  broker 
technology  to  the  coUabora- 
don  offering,  but  it  didn’t  dis¬ 
close  a  specific  schedule.  I 


sive  changes  will  likely  be  de¬ 
livered  separately.  He  pointed 
to  the  real-time  communica- 
titms  capabilities  being  en¬ 
abled  in  the  next  version  of 
Ofike  as  one  example.  He  said 
that  will  spur  the  need  for  a 
real-time  communications  in¬ 
frastructure  involving  the 
server  operating  system. 

Kamd  ConsWancy 

Any  additkms  or  changes  to 
the  Wlndofm  server  operating 
system  that  coincide  with  the 
Longhorn  release  will  be  done 
on  top  of  the  kernel  for  Win¬ 
dows  Server  2003,  triiich  is  due 
to  ship  next  month,  according 
to  Vaieodne.  He  said  he  views 
the  server  kernel  as  more  than 
a  memory  manager  and  I/O 
subsystem;  it  also  encompass¬ 
es  core  serrices  such  as  Active 
Directory  and  public-key  in- 
ftastructure  technology. 

Those  things  aren’t  going 
to  dramadcally  change  for  the 
Longbom  wave;"  be  said. 
There  will  be  some  new  man¬ 
agement  inftastTucture  that 
comes  out  in  there,  but  thatl) 
be  overlaid  on  top  of  the  serv¬ 
er  kerocL" 

Because  the  kernel  won't 
change,  customers  who  mi¬ 
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grate  to  Windows  Server  2003 
won't  lose  their  investment  in 
that  operating  system  should 
Mkrmoft  decide  to  release 
the  Longbom  server  operating 
system.  Valendne  said. 

In  November,  when  Micro¬ 
soft  announced  that  Lon^iom 
would  be  a  cliem-ooty  release, 
an  official  cited  the  delayed 
dipping  date  for  .Net  Server 
2003  as  the  impetus  for  that 
change  in  plans.  Bob  O'Brien, 
a  group  pnxluct  manager  in 
Microsoft’s  Windows  server 
division,  called  it  a  “common- 
sense  dedsion"  based  on  cus¬ 
tomer  feedbadc  that  Longbom 
would  emerge  too  soon  after 
Windows  >let  Server  2003. 

Valendne  last  week  called 
the  November  announcement 
“a  bit  premature,"  based  on 
engineering  planning. 

Dwight  Davis,  an  analyst  at 
Summit  Strategies  Inc.  in  Bos¬ 
ton,  speculated  that  the  changes 
disclosed  last  week  could  re¬ 
late  to  new  management  initia- 
dves  that  Microsoft  also  an¬ 
nounced  (sec  story,  page  12). 

It’s  going  to  be  a  big  initia¬ 
tive,  sucking  lots  of  Microsoft 
R&D  doUarv  and  the  operat¬ 
ing  system  groups  have  to  be 
align^  with  that,"  be  said.  # 
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Microsoft  App  Users  Like 
Portal  Plans  but  Want  More 

Initial  ties  between  CRM  software  and 
back-office  applications  due  in  April 


BY  MABC  L.  SONBINI 

KiSStMUEE  FLA 

At  MICROSOFT  Corp.'s 
Convergence  2003 
conference  here  last 
week,  a  halMozen 
users  expressed  interest  in  a 
portal-style  user  interface  that 
the  software  vendor  is  devel¬ 
oping  for  its  business  applica¬ 
tions.  But  some  attendees  said 
they're  still  looking  for  more 
functionality  from  Microsoft. 

For  example,  Bill  Siemering. 
CIO  at  HealthForce  Partners 
Inc.  in  Seattle,  said  the  health 
care  provider  began  beta-test¬ 
ing  the  Microsoft  Business 
Portal  earlier  this  month. 
HealthForce.  which  runs  Mi¬ 
crosoft's  Great  Plains  fmancial 
and  accounting  applications, 
plans  to  use  the  ponal  as  a 
central  spot  for  delivering 
company  news  and  letting  end 
users  access  data  related  to 
their  iobs  or  to  specific  busi¬ 
ness  proiects,  Siemering  said. 

One  big  plus  of  the  portal 
software  is  that  it's  lightly  in¬ 
tegrated  with  the  Great  Plains 
products.  Siemering  said.  But 
he  added  that  he  also  wants  to 
see  Microsoft  provide  out-of- 
ibe-box  connections  between 
the  portal  and  other  applica¬ 
tions.  such  as  the  customer 
relationship  management 
(CRM)  software  it  shipped 
in  lanuary. 

Developing  Ties 

As  expected.  Microsoft  used 
the  conference  to  announce 
the  portal  and  to  preview  an¬ 
other  upcoming  software  of¬ 
fering  that's  designed  to  boost 
the  ability  of  its  applications 
users  to  collaborate  with  their 
customers  and  suppliers 
[(^uickLink  370301. 


Mark  Jensen,  a  group  prod¬ 
uct  manager  at  Microsoft’s 
business  solutions  unit,  said 
IT  managers  will  be  able  to 
collapse  multiple  application 
screens  into  a  single  Web 
browser  interf^e  and  then 
custom-configure  the  portal 
for  difTerent  workers.  End 
users  will  get  direct  access  to 
applications  through  a  single 
sign-on  took  Jensen  said. 

The  first  portal  release,  due 


Contimiedfrom  page  / 

Longhorn 

Valentine  said  be  doesn’t 
think  operating  system  waves 
can  be  absorbed  by  customers 
any  faster  than  in  two-  to 
three-year  cycles.  Tliat  means 
the  successor  to  Longhorn, 
code-named  Biackcomb,  is 
now  loosely  pegged  for  2007 
or  2008.  he  confirmed. 

Those  dates  extend  the  most 
recent  timelines  that  Micro- 
.soft  has  supplied.  Until  last 
week,  company  officials  had 
been  saying  that  Longhorn 
wouldn't  ship  before  mid-2004 
and  that  Biackcomb  wouldn't 
ship  before  late  2005  or  early 
2006  (QuickLink  344S4]. 

Also  contrary  to  prior  infor¬ 
mation  supplied  by  Microsoft. 
Biackcomb  may  have  both 
client  and  server  releases,  ac¬ 
cording  to  Valentine.  Microsoft 
had  indicated  that  Biackcomb 
would  be  for  servers  only,  but 
last  week  Valentine  said  that 
every  Windows  wave  has  to  in¬ 
clude  a  desktop  operating  sys¬ 
tem  because  "we  always  want 
to  demonstrate  the  infrastruc¬ 
ture  with  improvements  in  our 
own  end-user  device  stuQl" 


next  month,  will  include  full 
integration  with  Microsoft's 
Great  Plains  and  Solomon  ap¬ 
plications.  Ties  between  Great 
Plains  and  the  new  CRM  soft¬ 
ware  are  being  beta-tested  and 
should  be  available  right  off 
the  bat.  Jensen  said.  Integra¬ 
tion  of  Microsoft  CRM  and 
Solomon  should  follow  later 
this  year,  he  added. 

Gibson  Musical  Instruments, 
a  maker  of  guitars  and  other 
stringed  instruments  in  Nash¬ 
ville.  is  a  Great  Plains  user  and 
has  been  beta-testing  Micro¬ 
soft  Business  Portal  with  about 


Valentine  said  a  new  server 
kernel  will  pnfttably  be  required 
for  the  Biackcomb  release,  so 
he  expects  that  there  will  be 
both  client  and  server  operat¬ 
ing  system  releases.  But  he  was 
quick  to  add  that  no  commit¬ 
ments  have  been  made  yet  and 
that  it’s  too  early  to  tel!  if  there 
win  be  a  Windows  Server  2005. 

To  support  client  capabili¬ 
ties  in  Longhorn.  Valentine 
said,  minor  or  simple  infta- 
siructure  services  might  be 
delivered  as  part  of  an  option¬ 
al  service  pack.  But  he  said  the 
Windows  team  wants  to  re¬ 
strict  service  packs  primarily 
to  bug  fixes. 

Valentine  said  more  exien- 
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a  dozen  users  for  five  weeks. 

Gibson  is  considering  using 
the  software  as  a  general  cor¬ 
porate  portal,  said  Man  Mul¬ 
lins,  the  company’s  chief 
knowledge  officer.  But  Mullins 
said  he  would  also  like  to  see 
Microsoft  offer  vertical  appli¬ 
cations  tailored  to  bis  indus¬ 
try.  plus  an  integrated  point- 
of-sale  s>*stem  within  the 
Great  Plains  suite. 

As  part  of  the  Microsoft 
Business  Network  collabora¬ 
tion  initiative.  Microsoft  plans 
to  release  software  in  June 
that  will  let  companies  use 
XML  to  exchange  documents 
in  electronic  data  Interchange 
formats.  The  company  said  it 
will  add  Web  services  broker 
technology  to  the  collabora¬ 
tion  offering,  but  it  didn't  dis¬ 
close  a  specific  schedule  I 


sive  changes  will  likely  be  de¬ 
livered  separafeiy.  He  pointed 
to  the  real-time  communica¬ 
tions  capabilities  being  en¬ 
abled  in  the  next  version  of 
Office  as  one  example.  He  said 
that  will  spur  the  need  for  a 
real-time  communications  in¬ 
frastructure  involving  the 
server  operating  system. 

Kernel  Consistency 

Any  additions  or  changes  to 
the  Windows  server  operating 
system  that  coincide  with  the 
Longhorn  release  will  be  done 
on  top  of  the  kernel  for  Win¬ 
dows  Server  2003,  which  is  due 
to  ship  next  month,  according 
to  Valentine.  He  said  he  views 
the  server  kernel  as  more  than 
a  memory  manager  and  I/O 
subsystem:  it  also  encompass¬ 
es  core  services  such  as  Active 
Directory  and  public-key  in¬ 
frastructure  technology. 

"Those  things  aren't  going 
to  dramatically  change  for  the 
Longhorn  wave."  he  said. 
"There  will  be  some  new  rrun- 
agemeni  infrastructure  that 
comes  out  in  there,  but  that'll 
be  overlaid  on  top  of  the  serv¬ 
er  kernel" 

Because  the  kernel  won’t 
change,  customers  who  mi- 
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grate  to  Windows  Server  2003 
won't  lose  their  investment  in 
that  operating  system  should 
Microsoft  decide  to  release 
the  Lon^orn  server  operating 
system.  Valentine  said. 

In  November,  wlien  Micro¬ 
soft  announced  that  Longhorn 
would  be  a  client-only  release, 
an  offictaj  cited  the  delayed 
shipping  date  for  .Net  Server 
2003  as  the  impetus  for  that 
change  in  plans.  Bob  O'Brien, 
a  group  produa  manager  in 
Microsoft's  Windows  server 
division,  called  it  a  "cominon- 
sense  decision"  based  on  ctrs- 
lomer  feedback  that  Longhorn 
would  emerge  loo  soon  after 
Windows  .Net  Server  2003. 

Valentine  last  week  called 
the  November  announcement 
"a  bit  prcmaiure."  based  on 
engineering  planning. 

Dwi^t  Davis,  an  analyst  at 
Summit  Strategies  Inc.  in  Bos¬ 
ton.  speculated  that  the  changes 
disclosed  last  week  could  re¬ 
late  to  new  management  initia¬ 
tives  that  Microsoft  also  an¬ 
nounced  (see  story,  page  12). 

"It's  going  to  be  a  big  initia- 
tire.  sucking  lots  of  Microsoft 
R&O  dollars,  and  the  operat¬ 
ing  system  groups  have  to  be 
aligned  with  that."  he  said.  I 


Avoid  Burnout 


How  BAD  IS  THE  IT  BURNOUT  PROBLEM?  Pretty  bad. 

Next  week,  Meta  Group  will  issue  a  report  that  says 
71%  of  IT  managers  surveyed  believe  employee 
burnout  is  a  serious  issue  in  their  organizations. 
Burnout  means  reduced  productivity,  higher  turnover 
and  generally  lousy  performance  —  which  is  exactly  what  corporate 
IT  shops  can’t  afford  as  budgets  keep  getting  tighter  and  demands 
from  the  business  side  keep  getting  louder. 

Of  course,  that  survey  doesn’t  actually  mean  that  only  71%  of  IT 
shops  have  a  serious  burnout  problem  among  their  employees. 

It  means  the  other  29%  haven’t  figured  it  out  yet. 


The  scatistics  are  part  of  Meta's  annual  "IT 
Staffing  and  Compensation  Guide,"  which  also 
says  the  way  most  IT  departments  are  dealing 
with  the  problem  is  by  offering  skills-develop- 
ment  programs.  A  minority  are  beefing  up 
their  retention  programs,  raising  .salaries,  offer¬ 
ing  cash  incentives  and.  in  a  few  cases,  even 
moving  employees  to  completely  new  locales 
to  tr>'  to  improve  morale. 

Those  are  all  good  ideas.  Some  cost  more 
than  others,  and  now  is  a  bad  time  to  look  for 
money  to  spend.  Still,  if  you're  a  CIO.  you 
should  throw  your  support  behind  solving  the 
burnout  problem. 

But  if  you’re  an  IT  manager  or  team  leader, 
don't  jump  into  this  one  with  both  feet  just  yet. 

Before  wu  look  for  money  for  training  or 
raises  or  bonuses,  first  understand  the  problem 
you’re  trv’ing  to  solve. 

Burnout  means  people  have  stopped  caring. 
That's  the  symptom. 

But  before  you  can  make  your  people  care 
again,  you've  got  to  know  what  they  care  about 
—  what  drives  them. 

Raises  and  bonuses  will  work  for  employees 
who  are  driven  by  the  money.  (That 
doesn't  mean  they're  greedy,  just 
that  they  keep  score  with  those  dol- 
br$,  and  more  money  makes  the 
game  more  interesting.) 

And  training  will  work  for  em¬ 
ployees  who  are  driven  by  a  desire 
to  learn  new  things.  TTiat  category 
includes  a  lot  of  IT  people. 

But  not  all  of  them. 

Some  employees  are  driven  by- 
challenges.  They  want  to  try  things 
they're  not  sure  they  can  do. 

Some  arc  driven  by  accomplish¬ 
ment.  They  get  their  satisfaction 


from  finishing  the  job. 

Some  live  for  variety  —  they  want  to  keep 
trying  new  things.  Some  are  happiest  with  sta¬ 
bility  that  lets  them  keep  getting  better  at  what 
they  do.  Some  want  to  do  small  things  well. 
Some  want  to  work  on  big  projects  that  will 
change  the  world. 

Some  are  driven  by  the  desire  for  praise. 
Some  are  driven  by  loyalty.  Some  are  driven  by 
commitment  to  the  team. 

In  each  case,  if  they’re  not  doing  what  they 
care  about,  they'll  gel  burned  out.  And  if  you 
throw  bonuses  or  training  at  people  who  are 
driven  by  challenge  or  variety  or  accomplish- 
I  ment  or  praise  or  team  commitment,  you're 
wasting  lime  and  money.  That's  not  whal  they 
care  about,  so  it  won't  help  their  burnout.  One 
size  won’t  fit  all.  It  never  does. 

You  know  w  hat  drives  many  of  your  people. 
If  you  don't  know,  ask  their  former  managers 
and  team  leaders.  Or  ask  the  employees  them¬ 
selves.  lust  don't  assume  the  things  that  moti¬ 
vate  you  also  motivate  them.  And  don't  decide 
they  should  be  motivated  by  those  same  things. 

Figure  out  what  each  of  your  people  needs. 

starting  with  the  ones  showing  the 
clearest  signs  of  burnout.  Then 
start  looking  for  wa>^  to  tweak 
their  jobs  so  they're  getting  more 
of  what  they  really  care  about. 

Yeah,  that’s  a  lot  of  fine-tuning. 
And  it's  a  lot  more  touchy-feely 
than  many  IT  people  —  in  the 
trenches  and  in  management  — 
are  really  comfortable  with. 

But  if  you  want  to  turn  your 
burnouts  around,  give  them  what 
they  need. 

Then  they  can  give  you  the  per¬ 
formance  you  need.  I 
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Avoid  Burnout 

How  BAD  IS  THE  IT  BURNOUT  PROBLEM?  Pretty  bad. 

Next  week,  Meta  Group  will  issue  a  report  that  says 
71%  of  IT  managers  surveyed  believe  employee 
burnout  is  a  serious  issue  in  their  organizations. 
Burnout  means  reduced  productivity,  higher  turnover 
and  generally  lousy  performance  —  which  is  exactly  what  corporate 
IT  shops  can’t  afford  as  budgets  keep  getting  tighter  and  demands 
from  the  business  side  keep  getting  louder. 

Of  course,  that  survey  doesn’t  actually  mean  that  only  71%  of  IT 
shops  have  a  serious  burnout  problem  among  their  employees. 

It  means  the  other  29%  haven’t  figured  it  out  yet. 


The  statistics  are  part  of  Meta’s  annual  “rr 
Staffing  and  Compensation  Guide,”  which  also 
says  the  way  most  IT  departments  are  dealing 
with  the  problem  is  by  offering  skills*<levelop* 
ment  programs.  A  minority  are  beefing  up 
their  retention  prc^rams,  raising  salaries,  offer¬ 
ing  cash  incentives  and.  in  a  few  cases,  even 
moving  e^^)loyees  to  completely  new  locales 
to  try  to  improve  morale. 

Those  are  all  good  ideas.  Some  cost  more 
than  others,  and  now  is  a  bad  time  to  look  for 
money  to  spend.  Still,  if  you’re  a  CIO,  you 
should  throw  your  support  behind  solving  the 
burnout  problem. 

But  if  you’re  an  IT  manager  or  team  leader, 
don't  jump  into  this  one  with  both  feet  just  yet. 

Before  you  look  for  money  for  training  or 
raises  or  bonuses,  Hrst  understand  the  problem 
you’re  trying  to  solve. 

Burnout  means  people  have  stopped  caring. 
That's  the  symptom. 

But  before  you  can  make  your  people  care 
again,  you’ve  got  to  know  what  they  care  about 
—  what  drives  them. 

Raises  and  bonuses  will  work  for  employees 
who  are  driven  by  the  money.  (That 
doesn't  mean  they're  greedy,  just 
that  they  keep  score  with  those  dol¬ 
lars.  and  more  money  makes  the 
game  more  interesting.) 

And  training  will  work  for  em¬ 
ployees  who  are  driven  by  a  desire 
to  learn  new  things.  That  category 
includes  a  lot  of  IT  people. 

But  not  all  of  them. 

Some  employees  are  driven  by 
challenges.  They  want  to  try  things 
they’re  not  sure  they  can  da 

Some  are  driven  by  accomplish- 
menL  They  get  their  satisfiurtion 


from  fmishing  the  job. 

Some  live  for  variety  —  they  want  to  keep 
tryii^  new  things.  Some  are  happiest  with  sta¬ 
bility  that  lets  t^m  keep  getting  better  at  what 
they  do.  Some  want  to  do  small  thirds  well. 
Some  want  to  work  on  big  projects  that  will 
change  the  world. 

Some  are  driven  by  the  desire  for  praise. 
Some  arc  driven  by  loyalty.  Some  are  driven  by 
commitment  to  the  team. 

In  each  case,  if  they’re  not  doing  what  they 
care  about,  they’ll  get  burned  out.  And  if  you 
throw  bonuses  or  training  at  people  who  are 
driven  by  challenge  or  variety  or  accomplish¬ 
ment  or  praise  or  team  commitment,  you’re 
wasting  time  and  money.  That’s  not  what  they 
care  about,  so  it  won’t  help  their  burnout  One 
size  won’t  fit  all.  It  never  does. 

You  know  what  drives  many  of  your  people. 
If  you  don't  know,  ask  their  former  managers 
and  team  leaders.  Or  ask  the  employees  them¬ 
selves.  Just  don’t  assume  the  things  that  moti¬ 
vate  you  also  motivate  them  And  don’t  decide 
they  should  be  motivated  by  those  same  things. 

Figure  out  what  each  of  your  people  needs. 

starting  with  the  ones  showing  the 
clearest  signs  of  bumouL  Then 
start  looking  for  ways  to  tweak 
their  jobs  so  they’re  getting  more 
of  what  they  really  care  about. 

Yeah,  that’s  a  lot  of  fine-tuning. 
And  it’s  a  lot  more  touchy-feely 
than  many  IT  people  —  in  the 
trenches  and  in  management  — 
are  really  comfortable  with. 

But  if  you  want  to  turn  your 
burnouts  around,  give  them  what 
they  need. 

Then  they  can  give  you  the  per¬ 
formance  you  need.  I 
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on  IBM's  fastest  computer 
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When  IBM  wanted  to  show  off 
their  fastest  computer, 
IBM  chose  Oracle. 

Again. 


ORACLe 


VOL 

37 

ISS 

1  3 

MR 

31 

2003 


U  M  I 


TMC  NCWSNKi  FOi  IT  LEAOEN  •  WWW.COMPUTERWORLD.COU  MARCH  St.  SOOS  •  VOL  S7  •  NO  13  >  tS/COPV 


Running  mission-critical 
applications  on  an  untried 
operating  system  is  a 
bigger  gamble  than  most 
companies  are  willing  to 
take.  Early  adopters  of 
Microsoft's  Datacenter 
Server  say  the  high-end 
Windows  operating  ex¬ 
tern  delivers  on  reliability 
but  could  benefit  from  less 
I  miAIAll  lin  I  vendor  finger-pointing  and 
I  IUIIUb  IJIfl  I  U  more  flexible  hardware 

UllllU  III  I  n  offerings. Rage27 

MTHCEHIIRSEMER 

FT  at  Heart  of ‘Shock  and  Awe’ 


Technology  Aims 
To  Sync  Users’ 
Communications 

Siemens  and  Verizon  moving  to  consolidate 
end-user  access  to  voice  and  messaging  systems 


With  US.  invasion,  era 
of ‘network-centric 
war&re’ has  dawned 


BY  DAN  VEWTOH 

WASHINSTON 

Military  officials  and  experts 
are  characterizing  Operation 
Iraqi  Freedom  as  the  most  IT- 
intensive  military  can^xaign  in 
history.  The  campaign,  offi¬ 
cials  said,  puts  to  the  test  a 
“network-centric  warfare” 


strata  that  has  been  under 
development  since  the  first 
Persian  Gulf  War  12  years  aga 
“There  are  more  computers 
on  the  battlefteld  than  ever 
before,”  said  CoL  Mark  Bow¬ 
man,  operations  officer  for  the 
U.S.  Anny’s  11th  Signal  Bri¬ 
gade.  In  fact,  there  are  so  many 
computers  involved  in  manag¬ 
ing  the  modem  battlefield  that 
digital  data  networks  have  be¬ 
come  more  important  to  se¬ 
nior  commanders  than  tradi¬ 


tional  voice  networks,  he  said. 

The  deployable  headquar¬ 
ters  ^ility  of  the  U.S.  Central 
Command  in  Doha.  Qatar,  was 
designed  by  Lexington,  Mass.- 
based  Raytheon  Ca  prior  to 
the  terrorist  attacks  of  Sept  11. 
2001.  Howevec,  as  military 

mn/raq,p<jge7 


BY  MATT  HAMBLEN 

Siemens  AG  today  will  an¬ 
nounce  IP-based  networking 
software  desigi>ed  to  synchro¬ 
nize  voice  communications, 
mess^ing  and  real-dme  col¬ 
laboration  tools  on  a  mix  of 
devices,  including  PCs.  cell 
phones  and  pagers. 

New  York-based  Verizon 
Communications  last 
week  confinned  that 
it  plans  to  roll  out 
si^ar  functionality  later  this 
year  as  a  service  for  both  cor¬ 
porate  and  residential  cus¬ 
tomers.  Analysts  said  other 
teiecommunications  carriers 
are  also  planning  such  moves. 

Mark  Straton.  senior  vice 
president  of  global  marketing 
at  Siemens  Information  and 
Communication  Networks 
Inc  in  Boca  Raton.  Fla.,  said 


Retirements  to  sap 
expertise,  data  center 
group  offers  training 

BV  PATRICK  THIBODEAU 

LAS  VEGAS 

A  mainframe  skills  shortage  is 
emerging  as  subtly  as  gray  hair. 
It’s  bumping  up  training  costs 
and  raising  concerns  among 
data  center  managers  wtK> 
wonder  how  they  will  replace 
retiring  green-screen  wizards 
with  wcxkers  weaned  on  Win¬ 
dows  and  open  systems. 


the  Siemens  unit's  OpenScape 
Version  1.0  software  will  pro¬ 
vide  users  with  consolidated 
access  to  all  corporate  com¬ 
munications  resources.  That 
includes  phone  calls,  voice 
mail,  e-maU,  instant  messaging 
and  tools  for  Web,  voice  and 
videoconferencing,  be  said. 

Users  will  be  able  to  config¬ 
ure  OpenScape  with 
personalized  rules  to 
govern  bow  incom¬ 
ing  phone  calls  and  e-mail 
messages  should  be  forwarded 
to  them,  Straton  said.  Like  IM 
systems.  OpenScape  suppons 
presence  awareness  so  users 
can  see  when  other  workers 
are  logged  emto  itetworks. 

IXiuglass  Crawford,  direaor 
of  network  services  at  Kaiser 
Permanente  Health  Plan  Inc. 

Convergence,  pqge  16 


Addressing  a  problem  it 
says  has  the  potential  to  be¬ 
come  acute  over  the  next  five 
to  seven  years,  a  data  center 
professional  association  last 
week  announced  a  program  to 
help  companies  attract  and 
train  IT  professionals  to  pre¬ 
vent  a  future  shortage  of 
mainframe  workers. 

At  its  semiannual  confer¬ 
ence  here,  AFCOM  outlined  a 
Data  Center  Knowledge  Initia¬ 
tive  that  includes  offering  on¬ 
line  courses  in  data  center 

Mainfnimers,  page  61 
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CONVERGENCE 


Mainframe  Brain  Drain  Looms 


SOYBEAN. 

I  CAN  BUILD  YOUR  NEXT  HOUSE.  I  CAN  BE  MIXED  WITH  RECYCLED 
NEWSPRINT  TO  CREATE  AN  ECO-FRIENDLY  CONSTRUCTION  MATERIAL. 
I  HAVE  THE  POWER  TO  BE  STRONG.  I  HAVE  THE  PHYSICAL  PROPERTIES 
OF  WOOD.  I  HAVE  THE  POWER  TO  MAKE  A  LOVELY  COFFEE  TABLE.  I  AM 
MORE  THAN  A  SOYBEAN. 


A 


NETWORK. 


I  CAN  BUILD  INDUSTRIES  FROM  A  BEAN.  I  CAN  GIVE  REAL-TIME 
INVENTORY  UPDATES  TO  RETAILERS,  MANUFACTURERS  AND 
FARMERS  SO  NO  BEAN  IS  WASTED.  I  CAN  GUARD  SOY  SECRETS  FROM 
ECO-FRIENDLY  YET  RUTHLESS  COMPETITORS.  I  CAN  USE  THE  POWER 
OF  CONVERGED  DATA,  VOICE  AND  VIDEO  TO  TEACH  A  GLOBAL  SALES 
FORCE  ABOUT  THIS  VERSATILE  LEGUME.  I  AM  MORE  THAN  A  NETWORK. 


Cisco  SmsHt 


THIS  IS  THE  POWER  OF  THE  NETWORK.  ROW. 

clMe.cofii/pow«riiow 


Can  your  antivirus  software  provide  double  the  scanning  power?  Ours  can. 

Making  sure  your  company  is  secure  gets  more  and  more  difficult  every  doy.  That's  why  eTrust""  Antivirus  v7 
from  Computer  Associates  uses  dual  scanning  engirtes  to  ensure  comprehensive  virus  protection.  It  processes 
data  in  real  time  to  search  out  and  eliminote  viruses,  and  it  also  scans  files  during  prescheduled  and 
off-peak  hours.  All  at  the  cost  of  most  single-engine  AV  products.  It's  more  than  just  twice  the  protection. 
It's  twice  the  peace  of  mind.  co.com/etrust/antivirus 


eTrust”  Antivirus  Computer  Associates* 
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Serial  ATA  Takas  On  SCSI 

In  th«  Technoloinf  section:  Lxtw-cost  Advanced  Technol¬ 
ogy  Attachment  disk  arrays  are  gaining  ground  in  near¬ 
line  storage  and  disk-to-disk  backup  applications,  and  a 
faster  class  of  drive  arrays  that  use  the  new  Serial  ATA 
interface  standard  is  likely  to  challenge  SCSI  for  high- 
performance  applications  as  well  Pega  36 
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Army  Uses  Mobile  Technology, 
Satellite  link  to  Track  Supplies 

Data  scanned  finm  supply  convoys 
updates  asset-tracking  system  in  US. 


av  MAac  L.  SOHOIHI 

s  PAST  of  the  war 
with  Iraq,  the  VS. 
Army  has  deployed 
64  mobile  units 
equipped  whh  portable  sys¬ 
tems  that  are  being  used  to 
scan  information  about  com¬ 
bat  and  supply  vehicles  and 
send  the  d^  via  a  secure 
satellite  link  to  the  Army's 
central  asset-tracking  system. 

The  deployment  of  the  units 
in  Kuwait  and  unspecified 
other  locations  marks  the  first 
time  the  Army  has  connected 
mobile  users  to  the  asset¬ 
tracking  system,  said  Gary 
Winkler,  protect  manager  of 
the  Army’s  lYansportaiion 
Systems  loini  Prt^gram  Man¬ 
agement  Office. 

The  application,  called  the 
Transportation  Coordinator's 
Automated  Information  for 
Movements  System  II  (TC- 
AIMS  n).  is  built  around  a 
Sybase  Ijk.  database  that  runs 


on  a  Windows  server.  The 
technology  was  first  used  in 
1998  and  is  located  at  a  facility 
near  Fort  Belvoir.  Va. 

Winkler  said  the  mobile 
units  sent  to  the  Gulf  region 
each  have  a  65-lb.  case  con¬ 
taining  a  ruggedized  laptop 
PC.  wireless  bar  code  and  ra¬ 
dio  frequency  identification 
readers,  a  printer  and  other 
peripheral  devices. 

The  equipment  can  be  sta¬ 
tioned  at  roadsides  or  inter¬ 
sections  and  used  to  scan  ve¬ 
hicles  in  army  columns  and 
supply  convoys  as  they  ap¬ 
proach,  he  said. 

Wireless  Transmission 

The  data  is  sent  to  the  TC- 
AIMS II  system  via  the  U.S. 
Department  of  Defense’s 
secure  wireless  network, 
which  is  provided  by  Iridium 
Satellite  LLC  in  Arlington,  Va. 
When  TC-AIMS  n  gets  a  feed 
from  the  Iridium  network,  it 


automatically  creates  new  en¬ 
tries  and  updates  information 
in  the  Sybase  database.  Win¬ 
kler  explained. 

From  there,  the  data  is  pre¬ 
sented  to  military  offi¬ 
cials  in  the  field  and  at 
the  Pentagon  via  map- 
style  graphical  user  in¬ 
terfaces.  "It  gives  com¬ 
manders  real-time  infor¬ 
mation  about  where  peo¬ 
ple  and  equipment  are," 
Winkler  said  "And  they 
know  wdien  they  get  to 
the  final  destinatioa" 

Up  to  15.000  end  users 
access  the  system  at  any 
given  time,  he  added. 

By  comparison,  earlier 
applications  used  to 
track  materials  "did  not 
provide  ’in-thc-box’  visi¬ 
bility,"  Winkler  said 
They  simply  document¬ 
ed  that  a  container  was 
shipped  and  arrived. 
Consequently,  all  that 
was  known  was  that 
there  was  a  box  contain¬ 
er  in  a  [military)  theater, 
but  DO  one  knew  exactly 


what  was  in  the  box." 

TC-AIMS  n  was  developed 
in  the  aftermath  of  the  first 
Gulf  War  in  a  joint  services 
project  led  by  the  Army.  The 


Navy  deployed  the  system  in 
December  and  used  it  to  pre¬ 
pare  manifests  of  cargo  and 
military  personnel  on  ships 
that  were  sent  to  the  Persian 
Gulf  Winkler  said 

OtobalVIew 

The  Army  is  also  woridng  to 
integrate  TC-AIMS  11  with  two 
other  logistics  and  transporta¬ 
tion  systems  in  an  effort  to 
provide  a  consolidated 
view  of  the  location  of 
military  personnel  and 
materials  in  the  air  and 
on  sea  or  land  he  said 
One  of  those  applica¬ 
tions.  called  the  Auto¬ 
mated  Air  Load  Planning 
System  (AALPS),  calcu¬ 
li  lates  the  amount  of  cargo 
space  available  on  air¬ 
craft  An  integrated  ver- 
^n  of  TC-AIMS  II  and 
AALPS  is  now  in  testing, 
according  to  Winkler. 

The  integration  proj¬ 
ect  is  also  due  to  include 
the  Int^rated  Comput¬ 
erized  Deployment  Exe¬ 
cution  System,  which 
manages  the  loading  of 
ships.  Winkler  said  IT 
managers  plan  to  seek 
approval  f^m  the  Penta¬ 
gon  to  put  the  combined 
system  into  production 
in  December.  I 


U.S.  IT  Workers  in  Middle  East  Stay  Put 


BV  TOGO  R.  WeiBB 

As  the  war  in  Iraq  intensifies, 
multinational  companies  are 
keeping  a  dose  watch  on  their 
IT  operations  in  the  Middle 
East  and  are  preparing  to  react 
quickly  if  condhtons  deterio¬ 
rate.  But  ttcme  of  the  compa¬ 
nies  that  spoke  whh  Compur- 
erworid  Ian  week  have  re¬ 
called  any  U.$.  IT  workers 
from  the  region. 

For  example.  American 
Express  Col  has  about  200  IT 
workers  in  the  Middle  East,  in- 
dudtng  an  undisclosed  num¬ 
ber  of  Americazks,  said  compa¬ 
ny  spokesman  Tony  Mitchell 
While  no  employees  have 
yet  been  puU^  out,  Amex 
has  been  re-evaluating  aiKl 
strengthening  its  security  pro¬ 
cedures  in  the  area  as  a  pre¬ 


caution.  Mitchell  said. 

Companies  are  generally 
tight-lipped  abont  their  con¬ 
tingency  plans  in  the  area 
for  security  reasons.  Out¬ 
sourcing  vendors  Affiliated 
Computer  Services  Inc.  and 
Computer  Sciences  Corp., 
automaker  Ford  Motor  Co. 
and  energy  compairy  British 
Petroleum  PLC  all  refused  to 
comment  for  this  story.  Other 


J0£  STUNKAfn.  SPOKESMAN.  IBM 


companies  spoke  only  in  gen¬ 
eral  terms. 

Stephanie  Hampton,  a 
spokeswoman  for  Washing¬ 
ton-based  Marriott  Interna¬ 
tional  Inc.,  said  the  company 
has  six  hoteb  in  the  Middle 
East,  each  with  its  own  IT 
systems  managers. 

"It's  business  as  usual  at 
this  point.”  Hampton  said. 
The  company  has  contingency 
plans  in  place  for  workers,  but 
no  details  are  being  released. 
Hampton  said. 

Diesel  engine  manufacturer 
Cummins  Inc.  in  Columbus, 
Ind.,  doesn’t  have  a  large  IT 
presence  in  the  region,  said 
spokesman  Jason  Rawlings. 
But  the  company  will  make  re¬ 
location  available  to  any  expa¬ 
triate  workers  who  feel  un¬ 


comfortable  where  they  are. 
he  said.  Most  of  Cummins'  IT 
employees  in  that  part  of  the 
wortd  are  in  India  and  aren't 
directly  affected  by  the  war. 
he  said. 

Maintaining  Systems 

Sun  Microsystems  Inc.  has  a 
“yery  small  nunfoer"  of  U.S. 

IT  workers  in  the  Middle  East 
and  has  plans  in  place  to  main¬ 
tain  its  IT  systems  in  the  event 
of  an  evacuation,  said  Sun 
spokeswoman  Diane  CarlinL 
Joe  Stunkard.  a  spokesman 
for  IBM.  said  few  IBM  em¬ 
ployees  are  in  the  countries 
surrounding  Iraq  and  that 
most  of  the  company's  work  in 
the  region  is  carried  out  by 
business  partners.  "We're  as¬ 
sessing  potential  impact 
on  our  employees,  customers, 
fecilities  and  partners,  and 
will  take  appropriate  actions 


to  protect  and  maintain  our 
business  operations.”  he  said. 
“At  this  present  time,  we're 
not  aware  of  any  business  dis¬ 
ruptions  related  to  Iraq." 

John  Shaw,  a  spokesman  for 
air  conditioniitg  and  heating 
supplier  Carrier  Corp.  in 
Farmington.  Conn.,  said  there 
are  no  U.S.  IT  workers  in  the 
company’s  offices  in  Saudi 
Ar^ia,  Bahrain.  Lebanon. 
Egypt  CH-  the  United  Arab  Emi¬ 
rates.  And  so  far,  be  said,  con¬ 
ditions  haven't  deteriorated 
for  the  company  as  a  result 
of  the  war. 

"There  doesn’t  seem  to  be 
any  backlash  against  Ameri¬ 
can  companies  that  fm  aware 
of."  Shaw  said.  "Business  is 
business,  and  politics  is  what 
it  is.”* 

Reporter  Thomas  Hoffman 
contributed  to  this  story. 
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Little  War-Related  Hacthnsm  Reported 


BV  JAiKUMAN  VIJAVAM 

The  vast  majority  of  war-relat¬ 
ed  cyberattacks  last  week  ap¬ 
pear  to  have  been  little  more 
than  low-level  Web  site  de¬ 
facements  that  had  little  or  no 
impact  on  U.S.  businesses. 

But  the  sustained  denial- 
of-service  attacks  that  crip¬ 
pled  the  English-language 
Web  site  of  Arab  satellite  TV 
network  Al-Jazeera  served  as 
a  sobering  reminder  of  just 
what  can  happen  if  a  company 
does  become  a  hactivist  target. 

One  week  into  the  war  with 
Iraq,  most  of  the  predicted  cy- 
ber&Uout  appears  to  have  been 
limited  to  the  Web  equivalent 
of  grafiiti  said  security  ex¬ 
perts.  "At  least  99%  of  the  at¬ 
tacks  are  pure  defacement  of 
Web  sites"  with  pro-  and  anti¬ 
war  messages,  said  Mkhael  Al¬ 
brecht,  a  manager  at  F-Secure 


Corp.  in  Helsinki.  Fmland 
Tbe  company  estimated 
that  as  many  as  10.000  Web 
sites  worldwide  may  have 
been  defaced  since  the  war 
began.  Although  U.S.  govern¬ 
ment  and  military  sites  appear 
to  be  targets  of  choice,  vandals 
are  attacking  any  vulnerable 
service  they  can  find.  Albrecht 
said.  In  most  instances,  the  at¬ 
tacks  appeared  to  be  coming 
^m  individuals  rather  than 
from  organized  groups  or  gov¬ 
ernment  entities,  he  added. 

No  Surprises 

The  level  of  hacking  activity 
has  been  no  different  from 
usuaL  said  Marty  Lidner,  an 
incident-handling  team  leader 
at  the  CERT  Coordination 
Center  at  Carnegie  Mellon 
University  in  Pittsburgh.  "In 
the  big  scheme  of  things,  the 


level  of  activity  reported  to 
us  hasn’t  really  changed."  Lid¬ 
ner  said. 

"There  has  been  no  signifi¬ 
cant  increase  in  Web  defree- 
ment  activity  between  prewar 
chatter  and  actual  war."  said 
Russ  Cooper,  an  analyst  at 
TruSecure  Corp.  in  Herndon. 
Va.  "A  defacement  may  say 
‘No  war.'  but  it  would  have 
said  ‘No  cheese*  or  something 
else  If  there  had  been  no  war.” 

The  minimal  impact  on 
business  systems  so  far  isn’t 
surprising,  said  Dave  Kraut- 
hanier.  director  of  information 
systems  at  Advanced  Fibre 
Communications  Inc  in 
Petaluma.  Calif.  "I  thiwW  you 
need  to  be  extremely  skilled  to 
hack  into  corporate  systems." 
be  said.  “1  don’t  think  current 
events  make  the  risk  of  cyber¬ 
terrorism  any  greater." 


»  A  defacement 
may  say ‘No 
war,’ but  it  would 
have  said ‘No 
cheese’ or  some¬ 
thing  else  if  there 
had  been  no  war. 


mss  COOPER.  TRUSECURE  CORP 

Moreover,  most  companies 
have  revamped  their  manage¬ 
ment  of  security  threats  since 
Sept.  U.  2001,  said  Bruce 
Blitch,  CIO  at  Tessenderlo 
Kerley  Inc.,  a  multinational 
chemical  company  with  U.S. 
headquaners  in  Phoenix.  For 
instance,  Tessenderlo  has  fur¬ 
ther  isolated  critical  plant- 
control  systems  and  tightened 


securit)'  policies  relating  to  its 
IT  infrastructure. 

"If  what  happened  nearly 
two  years  ago  didn’t  make  a 
company  pay  attention  to  se¬ 
curity.  then  it's  unlikely  that 
war  with  Iraq  would  change 
that,"  Blitch  said. 

Even  so.  the  attacks  on  Al- 
lazeera  show  what  can  happen 
if  attackers  get  it  right.  The  at¬ 
tacks  began  March  2S  after  the 
networt:  posted  photos  of  U.S 
prisoners  of  war.  The  Web  sire 
was  almost  totally  inaccessible 
most  of  last  week 

The  site  appears  to  have 
been  hit  with  twin  denial- 
of-service  attacks,  said  Eric 
SeigcL  a  consultant  at  Internet 
performance  monitoring  com¬ 
pany  Keynote  Systems  Inc  in 
San  Mateo.  Calif.  One  was  di¬ 
rected  at  the  company’s  Web 
servers,  dve  other  at  a  core 
Domain  Name  System  server 
that  provides  browsers  with 
the  address  of  Al-Iazecra’s 
Web  site,  Seigel  said.  I 


Continued  from  page  1 

IT  in  Iraq 

tensioas  with  Iraq  began  to 
rise,  CENTCX)M  commander 
in  chief  Gen.  Tommy  Franks 
put  the  project  into  high  gear. 

Although  Raytheon  has 
been  asked  by  the  military  not 
to  divulge  the  specific  IT  sys¬ 
tems  in  use.  Computtrworid 
has  confirmed  that  the  mobile 
headquarters  facility  includes 
a  bi^r-speed  fiber-optic  net¬ 
work  backbone  that  can  deliv¬ 
er  video  over  IP  to  the  desk¬ 
top.  as  well  as  direct  links  to 
the  hundreds  of  Intelligence 
and  surveillance  systems  and 
deployed  forces  in  and  around 
the  Persian  Gulf. 

Video  on  the  BattlefMd 

CoL  Dan  Gerstein,  comman¬ 
der  of  the  Army's  93rd  Signal 
Brigade  in  Fort  Gordon,  Ga., 
said  the  integration  of  real¬ 
time  video  into  the  military's 
command  and  control  opera¬ 
tions  marics  a  significant  de¬ 
parture  from  the  first  Persian 
Gulf  Wax.  Although  there  was 
limited  use  of  videoconferenc¬ 
ing  during  Operation  Desert 
Storm,  ground  forces  today 


are  making  use  of  battlefield 
videoconferencing  systems 
as  they  advance  on  Baghdad, 
said  Gersieia 

What’s  enabling  that  is  the 
U.5.  Department  of  Defense’s 
Global  Broadcast  Service 
(CBS),  wtiidi  provides  mas¬ 
sive  amounts  of  bandwidth  to 
allow  tactical  commanders  to 
receive  imagery  and  other 
data  from  CENTCOM  head¬ 
quarters  or  unmanned  aerial 
vehicles,  said  Gerstein. 

The  SSOO  millioo  GB5  is 
based  on  cominercia]  direct 
broadcast  satellite  technology 
and  provides  hi^Hspeed  data 
connections  of  more  than  24M 


bit^ec.  to  tactical  computers 
equipped  with  antennas  as 
siruU  as  22  in.  in  diameter. 

The  tae  of  Global  Positioo- 
ing  System  (GPS)  technolo¬ 
gies  is  also  being  touted  as  a 
major  improvement  since  Op¬ 
eration  Desert  Storm,  Gerstein 
said  some  units  are  deploying 
GPS  for  "real-time  situational 
awareness,"  allowing  for  the 
direct  exchai^  of  informa¬ 
tion  among  soldiers  on  the 
front  lines,  rather  than  requir¬ 
ing  infbnnatioa  to  be  routed 
through  headquarters. 

"The  Gulf  War  was  an  ana¬ 
log  conflict."  said  Gerstein. 
"Today,  there  are  digital  for¬ 


mations  at  much  lower  levels 
of  command." 

One  such  command  is  the 
Army's  4tb  Infantry  Divi^n, 
which  has  yet  to  arrive  in  Iraq. 
Based  at  Fort  Hood.  Texas,  the 
4th  Infantry  Division  b  the 
Army's  first  fiiUy  IT-equipped 
division.  It  will  arrive  in  Itm) 
armed  with  software  called 
Force  XXI  Battle  Command 
Brigade  and  Below,  which  is 
designed  to  provide  soldiers 
with  vital  battlefield  infonna- 
tion.  espiecially  the 
location  of  friendly  and  ene¬ 
my  forces. 

Meanwhile,  the  U.S.  Navy's 
missile-guided  cruiser  USS 
Shiloh  b  for  the  first  time  us¬ 
ing  a  system  called  Area  Air 
Defense  CZommander  (AADC). 
Designed  by  General  Dynam¬ 
ics  Corp.  in  Falls  Church.  Va.. 
and  powered  by  a  suite  of 
supercomputers  and  high- 
performance  servers  from 
Silicon  Graphics  Inc  In  Moun¬ 
tain  View,  (^ifn  AADC  tracks 
hundreds  of  planes  and  mb- 
siles  simultaneously.  The  sys¬ 
tem  then  dbpiays  the  data 
on  a  3<)-by-30-ft.  ‘freality" 
screen  that  enables  rapid 
transfer  of  digital  information 
to  end  users. 


The  average  commander 
has  30  to  SO  gigabytes  of  data 
to  interpret  at  any  given  time." 
said  Ic^  BurwelL  SGFs  senior 
director  of  govenuneni  indus¬ 
try.  By  using  a  screen  with  a 
wide  field  of  vbion.  the  system 
enables  users  to  interpret  a  lot 
of  data  in  real  time,  be  sakl 
Hillen,  senior  vice 
president  of  Fairfox.  Va. -based 
American  Management  Sys¬ 
tems  loc.  and  a  veteran  of  the 
first  Persian  Gulf  War.  said  the 
pace  and  scale  of  the  current 
conflict  b  nearty  seven  tiroes 
that  of  Operatioo  Desert 
Storm,  though  approximately 
one-third  the  number  of 
troops  are  participating. 

‘ntlib  b  where  transforma¬ 
tion  has  paid  said  Hillen. 

"The  real  IT  story  of  thb  war 
b  that  it  b  the  bi^  of  net¬ 
work-centric  warfare  and  the 
ability  to  make  decisions 
rapidly.  We’re  changing  air 
sorties  in  fli^L  That  was  un¬ 
heard  of  10  years  ago."  I 
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AT  DEADLINE 


CSC  to  Manage  IT 
For  Motorola 

Motorola  he.  said  H  has  ligned  a 
lO-yoar  fT  outsourcing  contract 
vahiod  al  S1.6  bMion  with  Cont- 
putor  Sdencos  Corp.  (CSC)  h  E) 
Segundo.  CaM.  Effoctivo  M^  1. 
CSC  will  tabs  ovor  management 
of  Motorola's  mithanBe.  desktop 
and  distfhutod  systems  as  well  as 
its  networks  and  help  desk  opera- 
tioRs.  About  tSOO  IT  workers  at 
Schaumburg.  M. -based  Motorola 
wW  be  shifted  to  CSC. 


Lucent  Settles  54 
Shareholder  Suits 

Lucent  Technologies  he.  said  it 
has  agreed  to  settle  54  share¬ 
holder  lawsuits  that  wore  filed  af¬ 
ter  the  Murrey  HU.  N  J.-based 
company  ran  into  financial  prob¬ 
lems  h  2000.  Lucent  win  pay 
$415  mWen  h  caMi.  stock  and 
warrants  to  buy  rts  sham  as  part 
oflhedsal,aiMltwaaleo(»n- 
Iribute  up  to  SS  mAion  to  cover 
settlement-administration  costs. 
The  company's  hsurors  wM  pay 
another  S148  mlKon  h  cash. 


SAP  Ships  Apps 
For  Midsize  U%rs 

SAP  AO  has  rehased  a  U.S.  ver¬ 
sion  of  Ks  SAP  Buslnoss  One  ap¬ 
plications,  which  are  tailorod  for 
midsize  companies  with  up  to 
several  hundred  workers.  SAP  of¬ 
ficials  said  users  should  be  able  to 
instal  the  appfications  h  as  kttle 
as  two  weeks.  The  midmarket 
software  uses  a  dtfhrent  code 
base  than  the  vendor's  flagship 
SAP  Business  Suite  products. 


Appeals  Court  to 
Trade  Groups 

A  federal  appeeh  court  said  it  wM 
hear  arguments  from  two  bade 
groups  opposed  to  the  antitrust 
BettiementbetwsantheU.S.Oe- 
partment  of  Justice  and  Micnaoft 
Corp.  The  groups.  wMch  are 
backad  by  some  of  Mterosoft's  lop 
rkreh.  argue  that  the  sotllement 
deal  istT  sbhgent  enough. 


MARK  HALL  •  ON  THE  MARK 

OverworkeiJ  (or  Lazy) 
Sysadmins  Get  a . . . 

. . .  security  tool  that  automates  fixes  of  vulnerabilities  in  network 
servers  and  PCs.  Citadel  Security  Software  Inc.  will  release  Hercules 
2.0  on  April  15.  The  upgrade  will  defend  Solaris  and  Linux  in  addition 
to  Windows.  Hercules  works  with  vulnerability-assessment  products 
from  companies  like  Internet  Security  Systems  Inc.  and  Harris  Corp. 
that  identify  security  gaps  on  your  network.  Hercules  collects  all  the 
problems  in  a  single  screen  and  lets  a  sysadmin  fix  them  with  a  single 
mouseciick.  And  in  the  new  release,  you  can  set  policies  to  remediate 


known  problams  immtdiately  without  noii- 
an  admin.  According  to  Carl 
Banzhof.  Dallas-based  Citadel's  CTO, 
Hercules  maintains  the  latest  software 
patches  for  known  bugs,  slams  shut  open 
back  doors  in  servers,  secures  insecure 
user  accounts  and  properly  configures 
misconfigured  systems, 
among  other  automated  fix¬ 
es.  He  also  points  out  that 
Windows  sen’ers  have  the 
most  vulnerabilities,  avan 
whan  welghtad  for  thak  markal 
share,  because  so  many 
sysadmins  simply  use  out- 
of-the-box  configurations, 
which  historically  have 
been  “wide-open  doors  to 
networks."  It's  not  as  if 
those  configuration  lapses 
have  been  a  big,  dark  secret, 

Banzhof  admits.  Lazy  sysad¬ 
mins.  perhaps?  Well  the 
CTO  demurs.  ‘They’re  an 
overworked  bunch."  •  An¬ 
other  vendor  CTO  has  tak¬ 
en  a  slight  swipe  at  users. 

Eric  Newcomer  at  Waltham, 

Mass.-based  Iona  Technolo¬ 
gies  Inc.  says  vendor  com- 
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petition  may  derail  the  Web  services 
standards  effons  (see  "Standards  Stupidi¬ 
ty."  page  24).  He  argues.  "Vendors  natu¬ 
rally  move  toward  creating  competitive 
advantage."  which  imperils  the  standards 
process.  But  he  thinks  H's  possible  users 
can  save  the  day.  though  he's  skeptical  you 
will  step  up  to  the  task. 
“Users  are  going  to  have  to 
take  control  in  their  pro¬ 
curement  process."  he  says. 
"It’s  the  only  way  standards 
will  happen  in  Web  ser¬ 
vices.”  So.  will  users  reject 
Microsoft  or  IBM  products 
when  they  veer  away  from 
industry’  standards?  "It  re¬ 
mains  to  be  seen."  ¥ou  can 
oknosl  see  him  croesRig  hb  fin¬ 
gers.  ■  If  you  think  of  your 
IT  operations  as  a  ser\‘ice 
business  inside  the  compa¬ 
ny,  the  arrival  today  of 
Changepoint  8.0  should 
grab  your  attention.  The 
software,  which  can  inte¬ 
grate  with  Microsoft  Ihoj- 
ect.  docs  more  than  project 
management,  according  to 
Chuck  Tatham.  marketing 


VP  at  Changepoint  Corp.  in  Richmond 
Hill.  Ontario.  It  handles  all  aspects  of 
workAow  process  and  oversees  everyday 
interrupt-driven  tasks  that  plague  fT  depart¬ 
ments  and  are  overlooked  by  project  man¬ 
agement  systems.  The  upgrade  is  now 
100%  Web-based  and  adds  Oraclc9i  to 
W'mdows  SQL  Server  as  its  database, 
along  with  support  for  Microsoft  Out¬ 
look.  among  other  improvements.  Pric¬ 
ing  averages  about  Sl.OOO  per  user.  •  Paul 
Giardina,  marketing  veep  at  CartesLs  SA 
in  Par  ts,  says  today's  release  of  its  finan¬ 
cial  management  application.  Magnitude 
Version  8.2,  grsotfy  improves  the  software's 
scalability  by  adding  multiserver  capabili¬ 
ties  and  toad  balancing  as  well  as  support 
for  DB2  and  Oracle  to  its  existing  sup¬ 
port  for  SQL  Server.  It  will  also  add  Crys¬ 
tal  Analysis  software  as  an  option  to  the 
product.  Finally,  be  says,  the  software 
now  includes  advanced  budgeting  tools 
that  target  competitors  like  SRC  Soft¬ 
ware  Inc.  Before  the  year  is  out.  Giardina 
says  to  expect  Magnitude  to  include  im¬ 
proved  workAow  operations  and  support 
for  both  the  U.S.  and  European  versions 
of  £xten.sible  Business  Reporting  Lan¬ 
guage.  ■  Portland.  Ore.-based  SRC  must 
have  been  spying  on  its  French  competi¬ 
tor  because  it.  loo.  announces  a  new 
product  today.  The  new  software.  Advi¬ 
sor  Series  FI,  lets  bank  employees  at  all 
levels  perform  financial  modelir^  func¬ 
tions.  Perl  Pierone.  SRCs  VP  of  financial 
institutions,  says  that  unlike  other  ven¬ 
dors'  oAerings.  SRC  “emphasizes  ease  of 
use  without  sacrificing  sophistication." 
For  example,  he  claims  that  with  minimal 
training,  branch  managers  will  be  able  to 
create  models  on  the  effect  of  maturing 
money-market  certificates  of  deposit  and 
shifting  interest  rates.  The  application  is 
.NM-basad  and  works  with  either  SQL  Servw 
or  Oracle  databases.  It  can  run  as  a  Web- 
only  application  or  by  using  Microsoft 
Terminal  Server  or  Citrix  MetaFramc. 
And.  for  those  of  you  who  care,  it's  not 
from  France.  I 


Dell  Rolls  Out  Rrst  Printers;  Rivals  React 


BV  BOB  BREWIN 

Dell  Computer  Corp.  made  its 
entry  into  the  printer  market 
official  last  week  by  rolling 
out  four  models,  including  a 
pair  of  machines  designed  for 
use  by  corporate  workgroups. 

Rivals  are  responding  to 
Dell's  move.  Analysis  expect 
Hewlett-Packard  Ca  this  week 
to  introduce  a  line  of  printers 
for  small  businesses  and  home 
users.  HP  officials  didn't  re¬ 


turn  calls  seeking  comment. 

And  just  one  day  after  Dell’s 
launch.  IBM  announced  a 
“plug-and-print"  wireless  LAN 
adapter  to  make  it  easier  for 
companies  to  hook  end  users 
to  the  printers  IBM  resells. 

Deli  was  a  reseller  of  HP's 
printers  until  last  fuly,  when 
HP  ended  the  deal  b^use  of 
expectations  that  Dell  would 
enter  the  market.  In  Septem¬ 
ber,  DcU  said  it  had  signed 


Lexmark  International  tnc.  to 
make  Dell-branded  printers. 

Dell’s  models  range  in  price 
from  S139  to  S839.  They  in¬ 
clude  software  that  monitors 
ink  consumption  and  prompts 
users  to  order  replacement 
cartridges  from  Dell  Greg 
Davis,  sales  director  for  Dell's 
imaging  group,  said  users  may 
buy  cartridges  from  other  sup¬ 
pliers.  But  Dell's  cartridges  are 
unique  sizes  and  shapes,  so  af¬ 


termarket  vendors  won’t  be 
able  to  offer  alternatives  until 
they  figure  out  how  to  reverse- 
engineer  Dell's  cartridges. 

Dell's  printers  "will  be  ac¬ 
cepted  as  good-enough  tech¬ 
nology"  by  Dell  customers, 
said  Peter  Kastner,  an  analyst 
at  Aberdeen  Group  Inc.  But  an¬ 
alyst  Peter  Grant  at  Dataquest 
Inc.  said  it  will  be  years  before 
Dell  has  any  significant  im¬ 
pact  on  HFs  installed  base.  I 


Tom  fTrozif  o/ JDC  News  Ser¬ 
vice  contributed  to  this  report. 
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Overworked  (or  Lazy) 
Sysadmins  (>t  a . . . 

. . .  security  tool  that  automates  fixes  of  vulnerabilities  In  network 
servers  and  PCs,  Citadel  Security  Software  Inc,  will  release  Hercules 
2,0  on  April  15,  The  upgrade  will  defend  Solaris  and  Linux  in  addition 
to  Windows.  Hercules  works  with  vulnerability-assessment  products 
from  companies  like  Internet  Security  Systems  Inc.  and  Harris  Corp. 
that  identify  security  gaps  on  your  network.  Hercules  collects  all  the 
problems  in  a  single  screen  and  lets  a  sysadmin  fix  them  with  a  single 
mouseclick.  And  in  the  new  release,  you  can  set  policies  to  remediate 


knomm  prabtems  immadUMy  without  noti¬ 
fying  an  admin.  According  to  Carl 
Banzhof,  Dallas-based  Citadel's  CTO. 
Hercules  maintains  the  latest  software 
patches  for  known  bugs,  slams  shut  open 
back  doors  in  servers,  secures  insecitre 
user  accounts  and  properly  configures 
roisconfigured  systems, 
among  other  automated  fix¬ 
es.  He  also  points  out  that 
Windows  servers  have  the 
most  vulnerabilities,  evan 
whan  walQhted  for  IfMk  market 
sham,  because  so  many 
sysadmins  simply  use  out- 
of-the-box  configurations, 
which  historically  have 
been  'Svtde-open  doors  to 
networks.**  It’s  not  as  if 
those  configuration  lapses 
have  been  a  big.  dark  secret, 

Banzhof  admits.  Lazy  sysad¬ 
mins.  perhaps?  Well,  the 
CTO  demurs,  "they’re  an 
overworiced  bunch.”  •  An¬ 
other  vendor  CTO  has  tak¬ 
en  a  slight  swipe  at  users. 

Eric  Newcomer  at  Waltham, 

Mass.-based  Iona  Technolo¬ 
gies  Inc.  says  vendor  com¬ 


petition  may  derail  the  Web  services 
standards  efforts  (see  "Standards  Stupidi¬ 
ty,"  page  24).  He  argues,  “Vendors  natu¬ 
rally  move  toward  creating  competitive 
advantage."  which  imperils  the  standards 
process.  But  be  thinks  R*s  poasfhia  toars 
cm  taw  Ilia  day,  though  he’s  skeptical  you 
will  step  up  to  the  task. 
"Users  are  going  to  have  to 
take  control  in  their  pro¬ 
curement  process,”  be  says. 
"It’s  the  only  way  standards 
will  happen  In  Web  ser¬ 
vices."  So.  will  users  rejea 
Microsoft  or  IBM  products 
when  they  veer  away  from 
industry  standards?  "It  re¬ 
mains  to  be  seen.”  Vm  cm 
afenoat  am  him  ennaing  hit  flft- 
gan.  ■  If  you  think  of  your 
IT  operations  as  a  service 
business  inside  the  compa¬ 
ny.  the  arrival  today  of 
Changepoint  8X)  should 
grab  your  attention.  The 
software,  which  can  inte¬ 
grate  with  Microsoft  Proj¬ 
ect,  does  more  than  project 
management,  according  to 
Chuck  Tatham.  mariceting 


VP  at  Changepoint  Corp.  in  Richmond 
Hill,  Ontario.  It  handles  all  aspects  of 
workflow  process  and  oversees  evaryday 
Mamipl-drfvm  tasks  that  piagua  IT  dap^- 
manti  and  are  overlooked  by  project  man¬ 
agement  systems.  The  upgrade  is  now 
100%  Web^ased  and  adds  Oracled  to 
Windows  SQL  Server  as  its  database, 
along  with  support  for  Microsoft  Out¬ 
look.  among  other  improvements.  Pric¬ 
ing  averages  about  $1,000  per  user,  a  Paul 
Giardina,  marketing  veep  at  Cartesis  SA 
in  Paris,  says  today's  release  of  its  finan¬ 
cial  management  application,  Magnitude 
¥arslm  8.2.  grsatfr  knprtrws  the  aoftimri's 
iralabttty  by  adding  multiservcr  capabili¬ 
ties  and  load  balancing  as  well  as  support 
for  DB2  and  Oracle  to  its  existing  sup¬ 
port  for  SQL  Server.  It  will  also  add  Crys¬ 
tal  Analysis  software  as  an  option  to  the 
product.  Finally,  be  says,  the  software 
now  includes  advanced  budgetit^  tools 
that  target  competitors  like  SRC  Soft¬ 
ware  Inc.  Before  the  year  is  out,  Giardina 
says  to  expect  Magnitude  to  include  im¬ 
proved  workflow  operations  and  support 
for  both  the  U.S.  and  European  versions 
of  Extensible  Business  Reciting  Lan¬ 
guage.  ■  Portland.  Ore.-ba^  SRC  must 
have  been  spying  on  Hs  French  competi¬ 
tor  because  it,  too.  announces  a  new 
product  today.  The  new  software.  Advi¬ 
sor  Series  FI.  lets  hank  employees  at  all 
levels  perform  financial  modeling  ftuic- 
tioos.  Peri  Pierone,  SRC’s  VP  of  financial 
institutions,  says  that  unlike  other  ven¬ 
dors'  offerings.  SRC  "emphasizes  ease  of 
use  without  sacrificing  sophistication.” 
For  example,  he  claims  that  with  minimal 
training,  branch  managers  will  be  able  to 
create  models  on  the  effect  of  maturing 
money-market  certificates  of  deposit  and 
shifting  interest  rates.  The  application  is 
.NaHiaMd  and  werks  with  attwr  SQL  Server 
or  Oracle  detebeees.  It  can  run  as  a  Web- 
only  application  or  by  using  Microsoft 
Tennin^  Server  or  Citrix  MetaFrame. 
And.  for  those  of  you  who  care,  it’s  not 
from  France.  I 


Dell  Rolls  Out  Rrst  Printers;  Rivals  React 
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AT  DEADLINE 


CSC  to  Manage  FT 
For  Motorola 

Metorele  hic.  eaM  H  has  skgiad  a 
lO-yaar  IT  euteNveing  contract 
Mbad  at  Ste  bMon  with  Com- 
pular  Sdancaa  Carp.  (CSC)  in  El 
Saguade,  CaM.  eiactlM  Hay  L 
CSC  wfl  taha  over  maMgamsnt 
of  Motorola's  midrange  dtiktep 
and  dtaMbytad  qtstams  as  wel  as 
Ksnatwoitoaadhalpdnkogsra- 
Hom.  Aboal  LSOO  IT  workara  at 
Schaambivg.  M. -based  Motoroia 
wMbasMftadtoCSC. 


Lucent  Settles  54 
Shareholder  Suits 

Lucont  Tactmotogiae  Inc,  said  W 
hasagraadtosattliSdaltaro- 
hoMar  iaarsuka  that  ware  Med  af- 
tv  tha  Murray  ML  NJ.-baasd 
company  ran  Into  flnviclal  prob- 
lsmsin2000.Laean(wMpay 
$46  ndlan  la  cash,  stock  and 
warrants  to  buy  Hi  aharet  as  part 
oflhsdaaLvidiwMabocon- 
tfMuto  up  to  $5  mMton  to  cow 
sottiomoiil-admintolTalioo  coots. 
Ths  eempony’s  bows  wM  pay 
anothv  St48  nriMon  In  cash. 


SAP  Ships  Apps 
F^MMsizeU^ 

S4PAehasr«toaMdaU,S,w- 
sknolitoSAPBwinaaBOnoip- 
pBcativia.  wMeh  va  Mtorad  for 
tnidton  compantos  wHh  up  to 
sawallaaMlradwDriMn.$tfol- 
tieWs  said  uasn  should  ha  aUa  to 
tnataltha  appicattona  in  as  me 
as  two  waaki.  The  midmarket 
sonwan  uaaaa  ■isarani  cooo 
haaa  than  ttw  widor’s  llagsWp 
SAP  Buatoaaa  SuHt  products. 


Appeals  Court  to 
Hw  Trade  Groups 

A  todoral  appoafs  court  iMd  H  wM 
hsv  argumsnb  from  two  trade 
groups  apposed  to  tha  antibust 
sattlimanl  hutwaan  tha  U.S.  Do- 
partwant  of  Jurtka  and  Microaoft 
Carpi  The  graupa.  which  an 
haefcad  by  asms  of  Mteraaeft's  top 
rlwali,  arguo  dial  tho  santamont 
deal  Mnl  shkigant  enough. 


av  aoe  anewiM 

Dell  Computer  Corp.  made  its 
entry  into  the  printer  market 
official  last  week  by  rolling 
out  four  models,  including  a 
pair  of  machines  designed  for 
use  by  corporate  woikgroups. 

Rivals  are  responding  to 
Dell’s  move.  Analysts  expect 
Hewlett-Packard  Co.  this  week 
to  introduce  a  line  of  printers 
for  small  businesses  aiod  borne 
users.  HP  officials  didn’t  re¬ 


turn  calls  seeking  comment. 

And  just  one  day  after  Dell's 
launch,  IBM  announced  a 
“plug-and-print"  wireless  LAN 
adapter  to  make  it  easier  for 
companies  to  hook  end  users 
to  the  printers  IBM  resells. 

Dell  was  a  reseller  of  HP’s 
printers  until  last  luly.  when 
HP  ended  the  deal  because  of 
expectations  that  Dell  would 
enter  the  market.  In  Septem¬ 
ber,  Dell  said  it  had  signed 


Lexmark  International  Inc.  to 
make  Dell-branded  printers. 

Dell's  models  range  in  price 
from  $139  to  $839.  They  in¬ 
clude  software  that  monitors 
ink  consumption  and  prompts 
users  to  order  replacement 
cartridges  from  Dell  Greg 
Davis,  sales  director  for  Dell’s 
imaging  group,  said  users  may 
buy  cartridges  from  other  sup¬ 
pliers.  But  Dell’s  cartridges  arc 
unique  sizes  and  shapes,  so  af¬ 


termarket  vendors  won’t  be 
able  to  offer  alternatives  until 
they  figure  out  how  to  reverse- 
engineer  Dell’s  cartridges. 

Dell’s  printers  “will  be  ac¬ 
cepted  as  good-enougd)  tech¬ 
nology”  by  Dell  customers, 
said  Peter  Kastner.  an  analyst 
at  Aberdeen  Group  Inc.  But  an¬ 
alyst  Peter  Grant  at  Oataquest 
Inc.  said  it  will  be  years  before 
Dell  has  any  significant  im¬ 
pact  on  HP's  installed  base,  b 


Tom  Rhizir  ofJDC  News  Ser¬ 
vice  contributed  to  this  report. 


Are  you  really  as  dense 
as  we  think  you  are? 


As  racks  bacoma  incfaasingiv  popii> 
latad  with  thkHtar,  daapar  sarvars. 
high  powar  ciansitias  in  your  sarvar 
room  or  data  cantar  can  craata 
havoc,  from  aarly  aquipmant  faHuraa 
to  axpansiva.  forgat-about-your^ob' 
sacuiity  downtima. 

lntroducir>g  InfraStruXure'*  architec¬ 
ture,  the  industry's  only  patent-pend- 
irrg,  network-critical  physical  infra¬ 
structure.  InfraStruXure"  lets  you 
target  power  and  coolirtg  precisely 
where  your  mission-critical  applica¬ 
tions  live — the  rack  er>closure. 

And  because  InfraSmiXure  architec¬ 
ture  uses  a  modular,  manageable,  pre¬ 
engineered  approach,  you  can  select 
star>dardized  components  to  create 
your  own  customized  solutiorts. 

Which  means  you  can  target  avail¬ 
ability.  pay  as  you  grow,  adapt  to 
change,  and  maximize  efficiency 
while  minimizing  installation,  operat¬ 
ing.  service,  and  maintenance  costs. 

In  times  like  these,  it  pays  to  think 
smart.  For  more  information  on 
InfraStruXure's  open,  adaptable, 
and  integrated  architecture  for  on- 
demand,  network-critical  physical 
infrastructure,  visit  us  online  today 
at  vww.apc.com. 


Wmar  ot  0it  WMimi  and  .N«  Maeuin*  *200? 
Saadari  Dxaca  Aumrd  fof  Saar  High  AwHabHiY 
SoMeo’  and  th$  6CN  *8aat  Maw  Ttchnohgy 
AmrU'  ar  fOSe  Marv/i  2002  (AwanM  to 
PomrStivXiinr,  Wtieh  «  now  indudad  undar  tha 
IntraStniXunT  brand.) 


(hot  air}^ 


[daa  rmrtmgj^ 


lnfraStru>\ure' 


POWER  RACK  AIR 


Open,  edarttable  and  integratad 
architecture  for  on-demend 
network-critical  physical  infrasbucture 


(power  ror/Pngn 


High  powar  dansHias  can  create  hot 
spots,  which  causa  aguipment  failures 
arid  expensive  downtime. 


(cold  airj 


InfraStruXure’s  advartced  coo/Mg 
components  help  remove  heat  from 
your  servers  artd  target  air  circulation 
where  it  is  most  needed. 

Air  components  designed  for 
InfraStruXure'"  are  manageable  via 
network  ^chnotogy.  end  feature  a 
modern,  reliable  design  with  fewer 
moving  parts. 


TradtdMwl  date  caaten  are  built  out 
for  future  capacity  and  raquire  a 
large  amount  of  floor  ^ce  that 
could  be  otherwise  utilized.  High 
power  density  racks  craata  danger- 
oushotspots- 


tefraSaraXaft*  lets  you  buM  out  capacity 
only  as  it’s  required.  Save  up  to  50% 
CepEx  and  20%  OpEx*.  wtd  reclaim  an 
average  of  20%  useWe  space. 
InfraStruXure  AIR  delivers  cooling 
tfirectfy  where  it  is  needed,  eliminating 
dangerous  hot  spots. 


‘Our  Video  on  Demand  (VODI 
servers  are  eir  cooled  from  front 
to  back.  The  APC  racks  that 
house  the  InfraStruXure  are  also 
designed  to  cool  from  front  to 
back.  So  the  same  racks  can 
effectivelY  house  our  power  sys¬ 
tem  and  our  servers ' 

WMePwtee 
Vice  erasHlent  of  Engvwnne 
Hicaniiiin 
(brecter  of  Enemeenne 

'If  I  had  purchased  the  incum¬ 
bent  vendor's  3-phasa  upgrade 
mode),  I  would  have  paid  75% 
more  in  service  costs  over  the 
next  four  years  and  I  would 
have  had  to  utilize  50%  more  of 
my  precious  floor  space.' 

CipWteTtetewteley 

Suepwi  Services  OiMiion 


For  t  closer  h)ok  at  MraSIniXum',  attend  »fKl  APC  BxecuOve 
BreMestSerraaerm  year  maa.  For  mere  udotmaSonmit 
laif://promo.apc.eomaad  ardor  key  coda  bakm. 


w  MSmetw  cserpervat 


Evwy  pnteMt  canyiag  irit  tetefc  has 
baea  tealad  and  cartAed  far  Mt  wite 

tafraSaraXare*  tecUiactera.  Bafata 
yoa  boy.  chack  far  dte  X  te  gaaraatee 

predact  compteteilily. 


Legendary  Reliability' 


rnrr  white  Paper  on  Avoiding  Costs  from  Oversizing  Data  Center 

rilLL  Infrastructure  and  Free  InfraStruXure"  Brochure 

Visit  ldif//pnmxfetom  Key  Code  j397y  •  CoH  888-289-APCC  x2706  •  Fex  401-788-2797 

€8003  Amwcm  Power  Convetsan  Coiporeum  AO  Tfedemerts  ere  Te  property  dt  tht  owewv  Smeil  ejuawiawi »  rivn  •  13Z  Teigwids  Rom,  VWst  faiqsMn.  Rl  02882  USA  l9()83£KrS 
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Users  Find  Microsoft’s 
Server  OS  Plans  Unclear 


SYSTEMS 


Sa\’  feature  packs 
OK  prvi\idcd  there’s 
no  price  increase 

BV  CAROL  SUWA 

Microsoft  corp  s 
lack  ofciariry 
about  plans  for 
Us  future  server 
operating  system  releases 
doesn't  appear  to  be  ■■■■ 
disturbing  too  many  ■J’^T 
corporate  users,  who  ^  ^  * 
rarely  rush  to  up¬ 
grade  to  the  latest  re¬ 
lease  anyway. 

But  they're  certain  to  start 
clamoring  if  they  Hnd  that  any 
of  the  plans  under  considera¬ 
tion  lead  to  cost  increases. 
Several  IT  managers  said  last 
week  that  optional  add-ons  or 
feature  packs  might  be  helpful, 
but  they  don't  want  to  pay  for 
them  unless  they  use  them. 

"The  important  thing  is  no 
new  licenses.'*  said  Alejandro 
Bombaci.  CIO  at  Empresas  Po¬ 
lar.  a  consumer  goods  manu¬ 
facturer  and  distributor  in 
Caracas.  Venezuela. 

The  prospea  of  separate 
downloads,  overlays  or  option 
packs  for  the  Windows  release 
code-named  Longhorn  came 
to  light  two  weeks  ago  when 
Brian  Valentine,  senior  vice 
president  of  Microsoft's  Win¬ 
dows  division,  spoke  with 
Compulerworid.  Valentine  said 
new  server  functionality  will 
be  needed  to  accompany  the 
Longhorn  client  operating  sys¬ 
tem  release,  which  he  said  is 
due  in  2005  [QuickLtnk  37215). 

Noting  that  plans  are  ‘‘flu¬ 
id.”  Valentine  also  said  there 
might  be  a  Longhorn  server 
operating  system  release,  even 
though  Microsoft  in  Novem¬ 
ber  had  taken  great  care  to 
inform  the  media  that  Long¬ 
horn  would  be  a  ctieni-only 
release.  Valentine  told  Co«i- 
puferworid  that  the  November 
pronouncement  was  *'a  bit 
premature." 

fay  fanuson.  director  of 
product  planning  in  the  Win¬ 


dows  server  group,  confirmed 
last  week  that  Microsoft  is 
considering  a  full  range  of  op¬ 
tions.  including  a  new  server 
operating  system,  a  supple¬ 
mental  add-on  similar  to  the 
option  pack  that  shipped  after 
Windows  NT  4.0  or  an  “out- 
of-band  feature  release"  to  the 
server  operating  system, 
lamison  said  Microsoft 

could  make  available 
a  feature  in  the  same 
manner  that  it  will 
release  the  group 
policy  mana^ment 
console  after  the  April  24 
launch  of  Windows  Server 
2003,  which  was  released  to 
manufaauring  last  Friday.  Sev¬ 
eral  other  components  for  the 
new  server  operating  system 
will  also  be  delivered  in  piece¬ 
meal  fashion  following  the 
product  launch  (see  box). 

But  Valentine  said  it’s  loo 
early  to  tell  how  the  server 


enhancements  expected  along 
with  Longhorn  will  be  pack¬ 
aged  and  priced. 

"If  they're  going  to  bundle 
software  that  I  won’t  use  and 
then  increase  the  price  of  the 
base  operating  system,  then 
I've  got  a  problem,”  said 
Neville  Teagarden.  CIO  at 
Navigant  International  Inc.  in 
Englew-ood.  Cola  "If  it  be¬ 
comes  too  complicated  to  de¬ 
termine  the  actual  server  pric¬ 
ing,  software  configuration 
and  license  compliance  be¬ 
cause  everything  is  a  la  carte, 
then  that’s  also  a  problem.” 

Teagarden  said  be  prefers  a 
full  server  operating  system 
release  because  he  wants  solid 
integration  testing  doite  by 
Microsoft  “rather  than  having 
to  figure  out  which  combina¬ 
tions  of  software  work  or 
don't  woric  on  our  own." 

Other  users,  however,  said 
optional  feature  packs  or  add¬ 


ons  might  be  useful.  Bill  Fine- 
field.  CIO  at  Navy  Exchange 
Service  Command  in  Virginia 
Beach.  Va..  said  it  would  be 
helpful  to  be  able  to  choose 
what  his  company  could  use 
*Vs.  what  just  takes  up  space." 
as  long  as  the  add-ons  or  fea¬ 
ture  packs  are  easy  to  install 
and  deploy. 

lim  Prevo.  CIO  at  Green 
Mountain  CoflTec  Roasters  Inc. 
in  Waterbury.  Vt..  said  one  po¬ 
tential  downside  is  the  in¬ 
creased  complexity  of  mainte¬ 
nance  for  both  Microsoft  and 
his  company.  “They  would 
have  more  variability  in  the 
configuration  of  their  installed 
base,  and  that  would  make 
their  patches  and  fixes  harder 
to  maintain.”  he  said. 

Uncertainty  Remains 

Any  worries  are  premature, 
with  so  much  uncertainty  sur¬ 
rounding  Microsoft's  Long¬ 
horn  server  plans.  Rob  Ender- 
le.  an  analyst  at  Cambridge. 
Mass.-based  Giga  Information 
Group  Inc.,  said  that  because 
Longhorn  has  slipped  from 
2004  to  2005.  be  thinks  there 
will  have  to  be  a  Longhorn 
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server  operating  system.  En- 
dcrle  predicted  that  the  Long¬ 
horn  server  version  will 
emerge  in  2006. 

Gartner  Inc  in  Stamford. 
Conn.,  however,  predicts  that 
there  will  be  server  function 
packs,  rather  than  a  full  Long¬ 
horn  server  operating  system 
release. 

“Our  belief  is  that’s  too  big 
—  too  much  too  quickly,”  said 
Gartner  analyst  Tom  Bitunan. 
noting  that  Windows  Server 
2003  is  just  coming  out  Teo- 
pie  are  not  going  to  want  to 
absorb  a  full  release."  I 


Proposed  Air  Passenger  Screening 
System  Aiarms  Privacy  Advocates 


Puts  civil  rights  at  serious  risk,  groups  say 


BV  JAiKUMAR  VIJAVAN 

A  coalition  of  privacy  and  civil 
rights  organizations  is  asking 
Congress  to  stop  the  deploy¬ 
ment  of  the  Transportation  Se¬ 
curity  Administration's  (TSA) 
recently  announced  airline 
passenger  profiling  system. 

In  a  letter  addre^-d  to  the 
chairman  of  the  House  Select 
Committee  on  Homeland 
Security  last  week,  coalition 
members  urged  Congress  to 
carefully  assess  the  program's 
effectiveness  and  its  privacy 
implications  before  allowing 
the  TSA  to  move  forward. 
Coalition  members  include  the 
Electronic  Privacy  Informaiioa 
Center  (EPIC)  and  American 
Civil  Liberties  Union. 

The  TSA  is  believed  to  have 
suned  testing  a  second-gen¬ 


eration  airline  passenger  pro¬ 
filing  system  known  as  the 
Computer  Assisted  Passenger 
Pre-Screening  System  II 
(CAPPS-II>  in  early  March. 

TSA  has  asked  Delta  Air 
Lines  Inc  to  provide  assistance 
duruig  cariy  infrastructure  test- 
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Ing  by  providing  it  with  passen¬ 
ger  data  relating  to  name,  ad¬ 
dress.  telephone  number  and 
date  of  birth  of  passengers. 

The  system  is  being  devel¬ 
oped  in  collaboration  with 
Lockheed  Martin  Management 
and  Data  Systems.  It  can  con¬ 
firm  a  passenger's  identity  and 
any  potential  security  threat 
the  passenger  might  pose  in 
less  than  frve  seconds,  accord¬ 
ing  to  a  description  of  the  sys¬ 
tem  on  the  TSA’s  Web  site. 

Under  the  plan,  the  TSA 
wall  require  every  U.S.  com¬ 
mercial  air  carrier  to  supply  it 
writh  passenger  information 
collected  during  the  reserva¬ 
tion  and  ticketing  process. 
This  informatton  will  then  be 
combined  with  credit  and  oth¬ 
er  personal  data  contained  in 
government  and  commercial 
databases  to  arrive  at  a  risk 


score  for  every  passenger. 

The  proposed  plan  is  evok¬ 
ing  a  maelstrom  of  protest 
from  privacy  and  ctvU  rights 
groups  that  are  questioning 
the  efficacy  of  such  a  profiling 
system  and  charge  that  it’s  a 
violation  of  privacy. 

"There  are  serious  dvU  lib¬ 
erties  issues  with  any  data 
mining  program  whose  result 
will  be  used  to  determine 
whether  Americans  are  eligi¬ 
ble  to  fly  or  not,”  said  Lee 
Tiea  a  senior  staff  attorney  at 
the  Electronic  Frontier  Foun¬ 
dation.  a  privacy  rights  organi¬ 
zation  in  San  Francisco. 

There  arc  also  serious  ques¬ 
tions  about  whether  such  pro¬ 
filing  is  elective,  said  Chris 
Hooftiagle.  a  deputy  consul  at 
the  EPIC  in  Washingtort  ‘One 
should  ask  why  we  .should 
build  this  incredible  system  of 
identifkatioa.  authentication 
and  profiling  when  we  could 
take  the  money  and  focus  on 
less-invasive  and  proven  tech¬ 
nologies”  such  as  bomb-detec¬ 
tion  equipment,  he  said.  I 
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Users  Find  Microsoft’s 
Server  OS  Plans  Unclear 


Say  feature  packs 
OK  provided  there’s 
no  price  increase 

BV  CJUKH.  SLIWA 

ICBOSOFT  CORP.S 
lack  of  clarity 
about  plans  for 
its  future  server 
operating  system  releases 
doesn't  appear  to  be 
disturbing  too  many 
corporate  users,  who 
rarely  rush  to  up- 
grade  to  the  latest  re* 
lease  anyway. 

But  they're  certain  to  start 
clamoring  if  they  find  that  any 
of  the  plans  under  amsidera- 
tion  lead  to  cost  increases. 
Several  IT  managers  said  last 
week  that  optional  add-ons  or 
feature  packs  might  be  helpful 
but  they  don't  want  to  pay  for 
them  unless  they  use  titem. 

"The  important  thing  is  no 
new  Ucenses."  said  Aleiandro 
Bombacl  CIO  at  Empresas  Po¬ 
lar.  a  consumer  goods  manu¬ 
facturer  and  distributor  in 
Caracas.  Venezuela. 

The  prospect  of  separate 
downloads,  overlays  or  option 
packs  for  the  Windows  release 
code-named  longhorn  came 
to  light  two  weeks  ago  when 
Brian  Valentine,  senior  vice 
president  of  Mkrosolt’s  Wn- 
dows  divisioci,  ^oke  with 
CompiUerworid.  Valentine  said 
new  server  functionality  will 
be  needed  to  accompany  the 
Longhorn  client  operating  sys¬ 
tem  release,  which  be  said  is 
due  in  200$  [QukkUnk  3721SI 

Noting  that  plans  are  "flu¬ 
id."  Valentine  also  said  there 
mi^t  be  a  Longhorn  server 
operating  system  release,  even 
though  Microsoft  in  Novem¬ 
ber  had  taken  great  care  to 
infonn  the  media  that  Long¬ 
horn  would  be  a  client-only 
release.  Valentine  told  Cbm- 
purerwoHd  that  the  November 
pronouitcement  was  "a  bit 
premature." 

Jay  Jamison,  director  of 
product  planning  in  the  Wm- 


dows  server  group,  confirmed 
last  week  that  Microsoft  is 
considering  a  full  range  of  op¬ 
tions.  including  a  new  server 
operating  system,  a  supple¬ 
mental  add-on  similar  to  the 
option  pack  that  shipped  after 
Windows  NT  4.0  or  an  “out- 
of-band  feature  release"  to  the 
server  operating  system. 

Jamison  said  Microsoft 

could  make  available 
a  feature  in  the  same 
manner  that  it  will 
release  the  group 
policy  management 
console  after  the  April  24 
launch  of  Windows  Server 
2003,  Mdiich  was  released  to 
manufacturing  last  Friday.  Sev¬ 
eral  other  components  for  the 
new  server  operating  system 
will  also  be  delivered  in  piece¬ 
meal  ^shion  following  the 
product  launch  (see  box). 

But  >^entlne  said  it’s  too 
early  to  tell  bow  the  server 


BY  JAIMUMAB  VIJAVAN 

A  coalition  of  privacy  and  dvil 
rights  organizations  is  asking 
Congress  to  stop  the  deploy¬ 
ment  of  the  Tkansportation  Se¬ 
curity  Administration’s  (TSA) 
recently  announced  aiiiine 
passenger  profiling  system 
In  a  letter  addressed  to  the 
chairman  of  the  House  Select 
Committee  on  Homeland 
Security  last  week,  coalition 
members  urged  Cot^ress  to 
carefully  assess  the  prt^Tam^ 
effectiveoess  and  its  privacy 
implications  before  allowing 
the  TSA  to  move  forward. 
Coalition  members  include  the 
Electronic  Privacy  Information 
Center  (EPIC)  and  American 
Civil  Liberties  Unioa 
The  TSA  is  believed  to  have 
started  testing  a  second-gen- 


enhancements  expected  along 
with  Longhorn  will  be  pack¬ 
aged  and  priced. 

“If  they're  going  to  bundle 
software  that  I  won't  use  and 
then  increase  the  price  of  the 
base  operating  system,  then 
fve  got  a  problem”  said 
Neville  Teagarden.  CIO  at 
Navigant  International  Inc.  in 
Englewood.  Cola  “If  it  be¬ 
comes  too  complicated  to  de¬ 
termine  the  actual  server  pric¬ 
ing,  software  configuration 
and  license  compliance  be¬ 
cause  everything  is  a  la  carte, 
then  that’s  also  a  problem" 

Teagarden  said  he  prefers  a 
full  server  operating  system 
release  because  he  wants  solid 
integration  testing  done  by 
Microsoft  “rather  than  having 
to  f^re  out  which  combina¬ 
tions  of  software  work  or 
don't  work  on  our  own." 

Other  users,  however,  said 
optional  feature  packs  or  add- 


eratiOD  airline  passenger  pro¬ 
filing  system  known  as  the 
Computer  Assisted  Passei^er 
Pre-Screening  System  n 
(CAPPS-n)  in  early  March. 

TSA  has  asked  Delta  Air 


Lines  Inc.  to  provide  assistance 
during  early  infrastructure  test- 


ons  might  be  useful  Bill  Fine- 
field.  CIO  at  Navy  Exchange 
Service  Command  in  Virginia 
Beach.  Va.,  said  it  would  be 
helpful  to  be  able  to  choose 
what  his  company  could  use 
“vs.  what  just  takes  up  space." 
as  long  as  the  add-ons  or  fea¬ 
ture  packs  are  easy  to  install 
and  deploy. 

Jim  Preva  CIO  at  Green 
Mountain  Coffee  Roasters  Inc. 
in  Waterhury.  Vt.,  said  one  po¬ 
tential  downside  is  the  in¬ 
creased  complexity  of  mainte¬ 
nance  for  both  Microsoft  and 
his  company.  They  would 
have  more  variability  in  the 
configuration  of  their  installed 
base,  and  that  would  make 
their  patches  and  fixes  harder 
to  maintain,"  he  said. 

Uncertainly  Ramains 

Any  worries  are  premature, 
with  so  much  uncertainty  sur¬ 
rounding  Microsoft's  Long- 
bora  server  plans.  Rob  Ender- 
le.  an  analyst  at  Cambridge, 
Mass.-based  Giga  Information 
Group  InCn  said  that  because 
Longhorn  has  slipped  from 
2004  to  200$,  be  thinks  there 
will  have  to  be  a  Lon^ora 


ing  by  providing  it  with  passen¬ 
ger  diua  relating  to  name,  ad¬ 
dress,  telephone  number  and 
date  of  birth  of  passengers. 

The  system  is  being  devel¬ 
oped  in  collaboration  with 
Lockheed  Martin  Management 
and  Data  Systems.  It  can  con- 
fum  a  passenger's  identity  and 
any  potential  security  thr^ 
the  passenger  might  pose  in 
less  than  five  seconds,  accord¬ 
ing  to  a  description  of  the  sys¬ 
tem  on  the  TSA!s  Web  site. 

Under  the  plan,  the  TSA 
will  require  every  U.S.  com- 
merdal  air  carrier  to  supply  h 
with  passenger  information 
collected  durii^  the  reserva¬ 
tion  and  ticketing  process. 
This  information  will  then  be 
combined  with  credit  and  oth¬ 
er  personal  data  contained  in 
government  and  commercial 
databases  to  arrive  at  a  risk 
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server  operating  system.  En- 
derie  pr^cted  that  the  Long¬ 
horn  server  version  will 
emerge  in  2006. 

Gartner  Inc.  in  Stamford. 
Conn.,  however,  predicts  chat 
there  will  be  server  function 
packs,  rather  than  a  foil  Long- 
bora  server  operating  system 
release. 

“Our  belief  is  that’s  coo  big 
—  too  much  too  quickly.”  said 
Gartner  analyst  Tom  Bittman. 
noting  chat  Windows  Server 
2003  is  just  comii^  out  “Peo¬ 
ple  are  not  going  to  want  to 
absorb  a  full  release.”  I 


score  for  every  passenger. 

The  proposed  plan  is  evok¬ 
ing  a  maelstrom  of  protest 
from  privacy  and  ci^  rights 
groups  that  are  questioning 
the  efikacy  of  such  a  profiling 
system  and  chatge  that  it’s  a 
violation  of  privacy. 

There  are  serious  civil  lib¬ 
erties  issues  with  any  data 
mining  program  whose  result 
will  be  used  to  determine 
whether  Americans  are  eligi¬ 
ble  to  fly  or  not,"  said  Lee 
Tiea  a  senior  staff  attorney  at 
the  Electronic  Frontier  Foun- 
datioa  a  privacy  rights  organi¬ 
zation  in  San  Franctsca 

There  are  also  serious  ques¬ 
tions  about  whether  such  pro¬ 
filing  is  effective,  said  Chris 
Hoofnagie,  a  deputy  consul  at 
the  EPIC  in  Washington.  “One 
should  ask  why  we  should 
build  this  incredible  system  of 
identificatioa  authentication 
and  profiling  when  we  could 
take  the  money  and  focus  (Mi 
less-invasive  and  proven  tech¬ 
nologies”  such  as  bomb-detec- 
liOQ  equipment,  be  said.  I 
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Proposed  Air  Passenger  Screening 
System  Alarms  Privacy  Advocates 

Puts  dvil  rights  at  serious  risk,  groups  say 


If  you're  busy  monitoring  your  servers, 
who's  watching  your  business? 


Whar  chdlanges  do  you  bee  lodoy?  Dacreosing  budgM?  Th* 
lurking  pouibiiity  of  downtime?  It's  hard  enough  to  focus  on 
moving  ^ur  business  forword  when  you're  constondy  fooking 
over  your  shoulder  to  see  if  everything  is  up  ond  running. 

Besides,  that's  the  job  oi  the  new  hff  Proliant  OlTDO  series 
ruttning  Intel*  Xeon”*  MP  processors.  An  odoplive  inlrasiruclure 
begins  with  these  HP  ProLioni  serws  which  come  equipped 
with  tools  that  predict,  self*diognose  and  fw  many  foult 
conditions.  Arsd  now  with  hot-pkig  RAD  memory  exclusively 
from  HP  you  con  odd  or  reploce  OIMMs  vrithoul  tumirsg 
your  systems  oA.  Both  work  with  the  HP  ProLioni  Esserttiols 
Foundation  Podi  feoturing  Insight  Morsoger  7sohwore  which 
monitors  and  controls  your  infrastructure  for  moximum  uptime. 

At  the  ertd  of  the  day,  you'll  hove  more  control  over  your 
infrostruclure,  help  ovoid  uttplorwted  dowrtlime  ond  reduce 
overoll  mointenorKe  costs.  Not  to  mertlion  freeirtg  yourself 
up  for  more  importont  things. 

T*  laoni  hew  HP  PreUenR  ■Tver*  can  be  a 
port  ef  iwnhiiiihig  yeur  uimpewifli  uptime, 
rfeemleod  €MP%  eneoitfoe  fatfef  ee  eeoicMhy 
et  wwwJsp.cem/ge/proMewttS  er  coi 
l-MO'Sta'ddn,  epiian  5,  mid  HMnlfen  cede  vm. 


XEON 


1 


Ihe  new  HP  PieUnnt  Di740 
t*wa)rwMi  het'phig 
MR)  memery;. 

■  Ultradense  Au  modular  chossis 
with  up  to  eight  Intel*  Xean'"  MP 
I.S  GHz  or  2.0  GHz  promssors 

•  Up  to  64GB  oddressable  memory 

■  Grourvdbreaking  F8  chipset 

■  6-64  bit/KX)  MHz  PO-X  slots 

■  Integrated  Ughts-Out  Stondord 
(ilO)  for  Remote  Server  Mgmt. 


Ihe  new  HP  PreUent  01760 
02  t-wey  wMi  het  pbsg 
KAN)  memery. 

•  Up  to  eight  Intel*  Xeon^  MP 
1.5  GHz  or  20  GHz  processors 

■  Up  to  64G6  oddressable  memory 

■  Groundbreaking  F8  chipset 

■  10-64  bH/KX)  MHz  PO  X, 

1-64  bit  33  MHz  slots 

■  Remote  Insight  lights-Out  Edition  II 
(optiortal)  for  Remote  Server  Mgmt 


6  2003  HewiMt-Podiord  Compviy.  Intel  ond  the  Inwl  Jteen  logo  ore  trodemoHu  or  registered  Iredemoriu  of  Inlei  Corporation  er  tH  sobsidieriet  in  Ihe  Uniwd  Sloes  ond  other  coutnnes. 
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NASAmiMfPtlifeiaDuviinff- 
len  « ib  rmr  CM).  dlKfivt  im* 
imdbaly.  Oumingloa,  n(io  hts 
bMA  tlw  iQMiey’i  dipuly  CM) 
she*  Augub.  tihM  OMT  iMft- 
iwporafeMMy  froni  Ml* 
ine  CIO  tad  A.  StTvamann. 
StraMMoii,  a  fiinnar  Convutir* 
mdrIdakMimM,  nn  NASA's  IT 
dapwtBMnI  afettt  July.  A  NASA 
ipolianaa  aaM  Sifiaamann 
piam  to  raSra  to  prtvala  Wa. 


Mficrosoft  Warns  of 
Flaw  in  Windows 

Mkraaafl  Corp.  awnad  ftat  a 
aocwMylawInanotiMirfceom- 
ponant  of  WMcms  XP.  2000 
and  NT  4.0  ooidd  aipaaa  ayo* 

lacte.  The  praMaia  Mat  In  Mfcro- 
aofl*s  implanMidalfon  of  a  ra- 
mota  proeodura  eai  protocoi 
lhal  Iota  appIcaUonaon  dffforant 
compulan  convaynicafe  «Wi 
000  anoOiar.  Tha  cowbany  has 
poatad  a  patch  on  Ma  Wab  bHo. 


Huawei  Admits  It 
Used  decode 

A  waok  aftar  rafacOng  CiiBo 
Syalama  lnB.'a  alagattoni  in 
Janoaiy  of  palant  inMogomant 
and  tadmlogy  copytfig,  not* 
awrthig  aaodof  Huniaai  Tacfr* 
nongM  M.  acanoanaapao  n 
a  court  Hbig  that  ona  of  Ha 
omployaao  ohtabiad  aona  Clioe 
aourca  coda  in  1800.  Shanahan. 
CMna-haoad  IhMwai  abd  ra 
piling  from  tha  U.S.  maritot 
products  tHdR  wtth  tho  aourca 


Short  Takes 

CHtag  hdormaOon  iMcavsrad  by 
fadatW  Inaaotigalloni  about  to 
attuantiat  practicaa,  NETWORK 
ASSOCUTES  MC.  in  Sanu  Chn. 
GaM..  aaM  R  «■  raatala  Ms  0* 
naneW  raaulla  for  me  ttnugh 
2000. . . .  Ottaam^naad  soft* 
aiara  vendor  COREL  CORP.  aaM 
M's  taUng  to  taro  vanlura  capHai 
%ma  ahaut  a  poaaRda  tahaovar. 


Pennsylvania  Delays 
Portion  of  SAP  Project 


State  pushes  paj'roU  module  back  by 
nine  months;  other  apps  work  continues 


ay  MARC  L.  SONOINI 

STATE  OFFICIALS  in 

Pennsyivaoia  have  put 
the  brakes  on  a  major 
piece  of  a  S160  million 
rollout  of  SAP  AG’s  enterprise 
resource  planning 
(ERP)  applications 
because  of  soft* 
ware  customiza¬ 
tion.  system  integration  test* 
ing  and  end-user  training  re¬ 
quirements. 

Pennsylvania  Secretary  of 
Administration  Bob  Barnett 
last  week  said  the  state  gov¬ 
ernment  has  temporarily  halt¬ 
ed  the  installation  of  the 
human  resources  modules  that 
are  pan  of  a  planned  state¬ 
wide  SAP  R/3  implementa¬ 
tion.  The  go-live  date  on  those 


applications  was  pushed  from 
next  month  to  January. 

The  delay  underscores  the 
findings  of  a  report  that’s  be¬ 
ing  released  today  by  Nucleus 
Research  Inc.  in  Wellesley. 

Mass.  In  the  re¬ 
port.  which  was 
based  on  inter¬ 
views  with  21  of 
SAP's  customers.  Nucleus  said 
returns  on  investment  can  be 
hard  to  achieve  on  R/3  roll¬ 
outs  —  especially  when  users 
customize  the  applicatioos. 

According  to  Nucleus,  12  of 
the  2i  users  said  they  hadn’t 
achieved  an  ROI  after  working 
with  R/3  for  an  average  of 
nearly  three  years.  In  particu¬ 
lar,  said  Nucleus  analyst  Re¬ 
becca  Wetteman.  companies 


that  customized  R/3  slowed 
down  their  deployments  and 
Increased  their  costs. 

But  SAP  users  aren't  alone 
in  facing  such  challenges,  said 
Wetteman.  Nucleus  recently 
released  similar  reports  about 
users  of  Stebel  Systems  Inc.’s 
customer  relationship  man¬ 
agement  software  and  i2  Tech¬ 
nologies  Inc.’s  supply  chain 
applkations. 

In  Pennsylvania,  work  has 
bogged  down  on  SAP's  payroll 
application.  Barnett  said  the 
software  itself  isn't  the  prob¬ 
lem.  But.  be  added,  it  required 
tweaking  to  handle  thousands 
of  work  schedules  and  hun¬ 
dreds  of  pay  grades  for  the 
state’s  80.000  employees. 

Tlie  ERP  system  is  also  re¬ 
quiring  more  extensive  train¬ 
ing  for  end  users  than  expect¬ 
ed.  Barnett  said.  In  addition, 
more  testing  is  needed  to  en¬ 


sure  that  the  payroll  software 
can  interoperate  with  a  sepa¬ 
rate  accounting  system  used 
by  the  state  treasurer’s  office. 

Despite  the  payroll  setback, 
Bamen  said  Pennsylvania  “is 
going  on  a  faster  tunetable 
than  others  doing  a  major 
project  like  this."  The  project 
also  involves  the  ongoing  in¬ 
stallation  of  financi^  pro¬ 
curement  and  other  applica¬ 
tions  to  replace  a  variety  of 
homegrown  and  third-party 
products. 

William  Wohi.  a  spokesman 
for  SAP  America  Inc  in  New¬ 
town  Square,  Pa.,  said  the  soft¬ 
ware  vendor  was  encouraged 
by  Pennsylvania's  decision  to 
slow  down  the  pa)rroU  installa¬ 
tion.  They  are  setting  an  ex¬ 
ample  to  other  state  govern¬ 
ments  to  learn  to  take  their 
time  and  do  it  right,"  be  said. 

In  response  to  the  Nucleus 
report  Wohl  acknowledged 
that  R/3  (unjects  can  be  com¬ 
plex  —  not  because  of  the 
software  itself  but  because 
ERF  rollouts  usually  require 
“a  whole  new  way  of  thinking" 
about  business  processes.  I 


Oracle  Modifies  Pricing, 
Bundling  of  Applications 


Vendor  drops 
S250K  spending 
requirement 


nv  MARC  L.  SOMStMl 
Looking  to  boost  sales  of  its 
enterprise  applications.  Ora¬ 
cle  Corp.  last  week  announced 
new  software  licensing  terms 
that  it  said  will  make  it  easier 
for  users  to  qualify  for  the  flat- 
foe  pricing  the  company  put  in 
place  14  months 

But  Oracle  is  also  removing 
some  products  from  the  soft¬ 
ware  bundle  covered  by  the 
flat-fee  approach,  which  lets 
users  license  a  set  of  the  com¬ 
pany’s  E-Business  Suite  appli¬ 
cations  for  a  single  price.  The 
modules  being  excised,  which 
are  primarily  user  self-service 
tools  in  areas  such  as  human 
resources,  will  now  have  to  be 
bought  separately.  Oracle  said. 

On  the  plus  side,  Oracle  is 


eliminating  a  requirement  that 
customers  spend  at  least 
S2SO,000  to  qualify  for  the  all- 
encompassing  pricing.  It's  also 
reducing  from  20%  to  10%  the 
minimum  number  of  employ¬ 
ees  for  wdiich  a  company 
needs  to  buy  licenses. 

“We've  streamlined  (the 
pricing]  and  made  it  more 
flexible,  not  only  for  smaller 
cxistomers,  but  (also  for]  larg¬ 
er  customers."  said  Jacqueline 
Woods,  vice  president  of  glob¬ 
al  practices  at  Oracle. 

Company  officials  decided 
that  the  previous  user-lkens- 
ing  minimum  "was  more  than 
the  market  could  haiwtu  u^. 


der  the  current  economic  con¬ 
ditions,"  Woods  said 
The  changes  could  help 
some  companies  reduce  their 
licensing  costs.  Woods  said 
(see  chart).  But  users  will  sdll 
be  able  to  buy  any  of  Oracle's 
applkations  on  an  individual 
basis  if  that's  less  expensive 
than  the  flat  fees  are,  she  said 
In  addition  to  the  prktng 
changes,  the  company  re¬ 
named  the  software  E-Busi- 
ness  Suite  2003. 

At  the  independent  Oracle 
Applications  Users  Group 
(OAUG)  in  Atlanta,  the  jury  is 
stifl  out  on  the  new  pricing 
scheme.  “We  have  to  keep  in 
mind  the  global  aspect  of  this 
and  wait  for  input  from  mem¬ 
bers."  said  Pat  Dues,  an  OAUG 
board  member  who  works  as  a 
project  officer  at  the  Las  Ve* 


POO  COMPANV  WITM  ?l>0  f  MOLOVtr  s. 


gas  city  manager's  office. 

Frank  Milano,  CIO  at  Terra- 
con  Inc.,  an  engineering  con¬ 
sulting  firm  in  Lenexa.  Kan., 
said  be  may  consider  using  the 
new  licensing  approach  if  be 
expands  his  installation  of  Or¬ 
acle’s  enterprise  resource 
planning  applications. 

“As  a  CIO,  I  always  think 
that  their  pricing  is  too  high," 
Milano  said.  But  the  licensing 
changes  make  it  look  like  Ora¬ 
cle  is  “starting  to  become  mar¬ 
ket-driven,*'  he  added 

Like  SAP  AG.  Oracle  has 
had  a  mishmash  of  pricing 
structures  because  it  offers 
such  a  wide  range  of  applica¬ 
tions.  said  Joshua  Greenbauin, 
an  analyst  at  Enterprise  Appli¬ 
cations  Consulting  to  Daly 
City,  CaliL  The  flat-foe  pricing 
scheme  was  designed  to  ad¬ 
dress  that,  but  Greenbaum 
said  the  S2SO.OOO  minimum 
buy-in  figure  was  a  deterrent 
to  smaller  companies.  I 


James  Niccoloi  o/the  IDG 
News  Service  contributed  to 
this  report 
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Gartner:  Business  Units  to  Get 
More  Control  of  IT  Spending 


Stime  n'  L-xecs  sa\'  it  s  ;ilrcad\  happening 
and  \  iew  it  as  a  pnsitiw  dexelopnient 


Gari  Nik  ist-  ana¬ 
lysts  last  week  pre¬ 
dicted  that  business 
units  will  gain  con¬ 
trol  over  a  mainrity  of  discre¬ 
tionary  spending  on  technolo¬ 
gy  this  year.  If  that  happens,  it 
could  force  IT  departments  to 
meet  pn>iect  milestones  set  by 
business  managers  before  they 
get  funding  to  pay  foraddi- 
tiorul  work. 

Some  attendees  at  Ganner’s 
Symposium  ITxpo  2005  con¬ 
ference  here  said  they  don't 
expect  that  scenario  to  play 
out  in  their  organizations,  at 
least  in  the  short  term.  But 
other  rr  executives  said  they 
have  already  seen  the  trend 
emerge  —  and  it  has  been  to 
their  advantage  thus  far. 

"I'm  already  seeing  some  of 
that  occur  in  our  organization, 
and  it's  helpful"  said  Craig 
Bens,  director  of  enierprlse 
resource  planning  and  distrib¬ 
ution  technology  at  Sierra  I’a- 
cific  Rcstiurces  in  Reno.  Nev. 
Although  Sierra  Pacific  has 
shifted  control  of  IT  spending 
only  to  a  few  business  units. 
Betts  said  the  change  has 
helped  his  company's  IT  dc- 
paiimcnt  by  giving  business 
managers  responsibility  for 
planning  and  overseeing  IT 
proiea  requirements. 

"When  we  own  everything. 

I  have  to  handle  the  budget, 
and  if  the  bu.sLncs.s  units  aren't 
aligned  with  IT.  they  hand 
everything  over  to  u.s."  Betts 

Corredion 

The  March  17  articlB  *6ening 
Started  urth  Unut'' staled  that 
the  Wbalher  Channei  Interactive 
he  migralad  to  the  Tomcat 
open-80uree  appica&on  server  n 
June  2000.  The  moraiion  iMn'l 
take  ohee  tail  June  2002. 


said.  Without  direct  input 
from  business  leaders  on  their 
IT  needs,  keeping  require- 
ments-planning  effons  on 
track  is  "a  shot  in  the  dark."  he 
added. 

An  IT -Spending  shift  also 
has  started  at  Industrie  Cana¬ 
da.  the  Canadian  department 
of  commerce.  Thai's  accord¬ 
ing  to  Sean  Barr,  industry  sec¬ 
tor  officer  for  the  agency's 
Spectrum.  Informaiion  Tech¬ 
nologies  and  Telecommunica¬ 
tions  Gatew-ay  division,  which 
is  the  Canadian  equivalent  of 
(he  U.S.  Federal  Communica¬ 
tions  Commission. 

“It's  been  good  for  me  and 


Other  Gartner 
Predictions 

■  Underiundino  necessary  n 
upgrades  today  wi  lead  to 
higher  costs  once  the  economy 
improves  »id  demand  lor  IT 
product  increases. 


■  By 2006. 309b  of  data  pUKSSS- 
ingwilbedonelhroughubhy' 
based  computing  models  that 
let  companies  pay  for  computing 
resources  as  needed. 


our  business  unit  when  it  has 
occurred,  because  there's 
more  of  a  direct  path  for  fund¬ 
ing."  Barr  said.  "But  I  can  see 
how  this  could  be  a  problem 
for  other  CIOs." 

Carl  Schulz,  an  IT  consul¬ 


tant  at  Delta  Corporate  Ser¬ 
vices  Inc.  in  Parsippany.  NJ.. 
said  a  growing  number  of 
companies  arc  giving  business 
units  control  of  discretionary' 
IT  spending  —  the  money 
above  and  beyond  what’s 
needed  to  run  day-to-day  IT 
operations.  Schulz  said  he  has 
also  seen  business  units  "place 
their  own  people  in  an  IT  or¬ 
ganization  to  oversee  spend¬ 
ing  and  manage  projects." 

But  other  IT  managers  at 
the  conference  said  project 
purse  strings  either  remain  in 
their  grips  or  have  even  been 
returned  to  them. 

"We  started  taking  back 
control  of  some  IT  spending 
that  was  taking  place  in  busi¬ 
ness  units,  where  (rogue]  'IT 
entities'  had  cropped  up."  said 


an  IT  manager  who  works  for 
a  branch  of  the  U.S.  military 
and  requested  anonymity.  "In 
some  instances,  business  units 
will  receive  funding  for  IT 
projects  and  direct  that  to  us." 

Some  companies  have  taken 
approaches  that  combine  IT 
and  business-unit  control  over 
spending.  Four  years  ago.  The 
Northwestern  Mutual  Life  In¬ 
surance  Co.  began  moving  to  a 
funding  model  in  which  busi¬ 
ness-unit  leaders  sit  on  a  cor¬ 
porate  planning  board  that  de¬ 
cides  on  all  discretionary  IT 
spending  before  funding  is  al¬ 
located  to  (ho  IT  department. 
That  setup  “has  worked  out 
very  well  for  us,"  said  John 
Hillmer,  director  of  technolo¬ 
gy  services  at  the  Milwaukee- 
based  insurer.  I 


KAI-TIHE  CHANGES 

Conference  attendees  said  l)el^erlng  real¬ 
time  data  10  business  eteculives  requires 
tug  changes  outside  of  IT 
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Omgeo  Readies  Web  Portal 
For  Allocating  Stock  Trades 


Ibol  potentially 
reduces  manual 
communications 


Omgeo  LLC  (his  week  plans  to 
begin  beta-testing  a  Web- 
based  tool  aimed  at  boosting 
straight-through  processing  of 
trades  between  brokerages  and 
investment  managers  by  elimi¬ 
nating  the  need  for  the  firms 
to  communicate  via  fax  and 
telephone  to  allocate  shares. 

Boston-based  Omgeo.  which 
offers  an  automated  trade- 
matching  service,  announced 
the  allocation  management 
engine  last  week  and  said  il 
should  be  ready  for  commer¬ 
cial  release  by  midyear.  The 
tool  is  an  end-user  portal 
that's  based  on  XML  and  Java 
2  Enterprise  Edition  and  will 
be  run  on  Solaris  servers  with 
BEA  Systems  Inc.’s  WcbLogic 
application  server  software. 

Omgeo  ofTiciaLs  said  at  a 


press  conference  here  that  in¬ 
dependent  investment  man¬ 
agement  firms  will  be  able  to 
use  the  Allocation  Manager 
portal  free  of  charge.  'The 
company,  which  is  jointly 
owned  by  The  Depository 
Trust  &  Clearing  Corp.  in 
New  York  and  ITtomson 
Financial  in  Boston,  plans  to 
charge  brokerages  about  SI 
for  each  trade  they  process  via 
Allocation  Manager. 

David  Oxenstiema,  an  exec¬ 
utive  director  at  Morgan  Stan¬ 
ley  in  New  York,  said  that 
could  add  up  to  thousands  of 
dollars  a  day.  But  he  added 
that  he’s  willing  to  pay  the  fee 
in  order  to  streamline  the 
processing  of  transactions 
with  inve.stmeni  firms  (hat 
currently  lack  auiomaied 
trade-matching  capabilities. 

"To  us.  (using  faxes  and 
phones]  is  an  inefficient  way 
to  process  trades,"  Oxcnsticr- 
na  said.  “It  represents  [added] 
operational  costs  and  the  risk 
of  mishandling  things.’' 


Gordon  Marchand.  vice 
president  and  treasurer  at 
Yeager.  Wood  &  Marshall  Inc., 
a  New  York-based  investment 
firm  that  manages  about  $600 
million  in  assets,  said  he  pilot¬ 
ed  Allocation  Manager  and 
likes  its  ease  of  use.  For  exam¬ 
ple.  the  software  lets  users  set 
up  drop-down  lists  of  Invest- 
mem  clients  that  “can  be  cus¬ 
tomized  and  configured  to  our 
needs.'"Marchand  said. 

But  Allocation  Manager  has 
some  gaps  that  need  to  be 
filled,  added  Marchand.  whose 
firm  is  among  the  thousands 
of  small  and  midsize  bvest- 
ment  managers  that  continue 
to  manually  transmit  trade- 
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allocation  data  to  brokerages. 

Omgeo  has  to  add  the  abili¬ 
ty  to  print  and  save  transac¬ 
tion  data  to  meet  the  U.S.  Se¬ 
curities  and  Exchange  Com¬ 
mission's  record-keeping 
rules.  Marchand  said.  Alloca¬ 
tion  Manager  also  needs  to  be 
able  to  automatically  notify 
investment  manners  when 
trades  have  been  executed, 
he  said.  In  addition,  major 
brokerages  "have  to  adopt  this 
thing,”  he  noted.  “Otherwise, 
we’re  still  going  to  be  in  a  fax- 
and-phone  environmeni." 

Omgeo  developed  Alloca¬ 
tion  Manager  with  financial 
backing  from  four  brokerages: 
Morgan  Stanley.  Credit  Suisse 
First  Boston  Corp.,  ).P.  Morgan 
Chase  &  Co.,  and  UBS  War¬ 
burg.  Adam  Bryan.  Omgeo's 
president  and  CEO.  last  week 
said  21  other  brokerages  have 
signed  up  to  use  (he  portal. 

Bryan  added  that  he  will 
continue  to  meet  with  invest¬ 
ment  managers  to  fine-tune 
the  software  before  it’s  made 
available  in  May  or  June.  Om¬ 
geo  is  exploring  technologies 
that  could  be  used  to  send 
trade-execution  notices  to 
pagers  or  via  e-mail,  he  said.  I 
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Gartner:  Business  Units  to  Get 
More  Control  of  IT  Spending 


Some  IT  execs  say  it’s  already  happening 
and  view  it  as  a  positive  development 


Gartner  inc.  ana¬ 
lysts  last  week  pre¬ 
dicted  that  business 
units  will  gain  con¬ 
trol  over  a  majority  of  discre¬ 
tionary  spending  on  technolo¬ 
gy  this  year.  If  that  happens,  it 
could  force  IT  departments  to 
meet  project  milestones  set  by 
business  managers  before  they 
get  funding  to  pay  for  addi- 
ticmal  work. 

Some  attendees  at  Gartner’s 
Symposiutn/rTapo  2003  con¬ 
ference  here  said  they  don’t 
expect  that  scenario  to  play 
out  in  their  organizations,  at 
least  in  the  short  term.  But 
other  IT  executives  said  they 
have  already  seen  the  trend 
emerge  —  and  it  has  been  to 
their  advantage  thus  far. 

’’fm  already  seeing  some  of 
that  occur  in  our  organization, 
and  it's  helpful.”  said  Craig 
Betts,  director  of  enterprise 
resource  planning  and  distrib¬ 
ution  technology  at  Siena  Pa¬ 
cific  Resources  in  Reno.  Nev. 
Although  Sierra  Pacific  has 
shifted  control  of  IT  spendii^ 
only  to  a  few  business  units, 
Betts  said  the  change  has 
helped  his  company’s  IT  de¬ 
partment  by  giving  business 
managers  responsibility  for 
planning  and  overseeing  IT 
project  requirements. 

“When  we  own  everything. 

I  have  to  handle  the  budget, 
and  if  the  business  units  aren't 
aligned  with  IT.  they  hand 
everything  over  to  us,"  Bens 


said.  Without  direct  input 
from  business  leaders  on  their 
IT  needs,  keeping  require- 
ments-planning  efforts  on 
track  is  "a  shot  in  the  dark."  he 
added. 

An  IT  spending  shift  also 
has  started  at  Industrie  Cana¬ 
da.  the  Canadian  department 
of  commerce.  That’s  accord¬ 
ing  to  Sean  Barr,  industry  sec¬ 
tor  ofTicer  for  the  agency's 
Si>ectrum.  Information  Tech¬ 
nologies  and  Telecommunica¬ 
tions  Gateway  division,  which 
is  the  Canadian  equivalent  of 
the  U,S.  Federal  Communica¬ 
tions  Commission. 

"It’s  been  good  for  me  and 
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our  business  unit  when  it  has 
occurred,  because  there's 
more  of  a  direct  path  for  fund¬ 
ing."  Barr  said,  “^ut  1  can  see 
how  this  could  be  a  problem 
for  ocher  CIOs.” 

Carl  Schulz,  an  IT  consul¬ 


tant  at  Delta  Corporate  Ser¬ 
vices  Inc.  in  Parsippany.  N.J.. 
said  a  growing  number  of 
companies  are  giving  business 
units  control  of  discretionary 
IT  spending  —  the  money 
abow  ai>d  beyond  what’s 
needed  to  run  day-to-day  IT 
operations.  Schulz  said  he  has 
also  seen  business  units  Tiace 
their  own  people  in  an  IT  or¬ 
ganization  to  oversee  spend¬ 
ing  and  manage  projects.” 

But  other  IT  managers  at 
the  conference  said  project 
purse  strings  either  remain  in 
their  grips  or  have  even  been 
returned  to  them. 

"We  started  taking  back 
control  of  some  IT  spending 
that  was  taking  place  in  busi¬ 
ness  units,  where  Irogue]  'IT 
entities’  had  cropped  up,”  said 


an  IT  manager  who  worics  for 
a  branch  of  the  US.  military 
and  requested  anonymity.  ”ln 
some  instances,  business  units 
will  receive  funding  for  IT 
projects  and  direct  that  to  us." 

Some  companies  have  taken 
approaches  that  combine  IT 
and  business-unit  control  over 
spending.  Four  years  ago,  The 
Northwestern  Mutual  Life  In¬ 
surance  Ca  began  moving  to  a 
funding  model  in  which  busi¬ 
ness-unit  leaders  sit  on  a  cor¬ 
porate  plaimlng  board  that  de¬ 
cides  on  all  discretionary  IT 
spending  before  funding  is  al¬ 
located  to  the  IT  department. 
That  setup  "has  worked  out 
very  well  for  us,”  said  fohn 
HiUmer,  director  of  technolo¬ 
gy  services  at  the  Milwaukee- 
based  insurer.  I 
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Omgeo  Readies  Web  Portal 
For  Allocating  Stock  Trades 


Tool  potentially 
reduces  manu^ 
communications 


Omgeo  LLC  this  week  plans  to 
begin  beta-testing  a  Web- 
based  tool  aimed  at  boostii^ 
straight-through  processing  of 
trades  between  broker^tes  and 
investment  managers  by  elimi¬ 
nating  the  need  for  the  firms 
to  communicate  via  fax  and 
telephone  to  allocate  shares. 

Boston-based  Omgeo,  which 
offers  an  automated  trade- 
matchii^  service,  announced 
the  allocation  management 
engine  last  week  and  said  it 
should  be  ready  for  commer¬ 
cial  release  by  midyear.  The 
tool  is  an  end-user  portal 
that's  based  on  XML  and  Java 
2  Enterprise  Edition  and  will 
be  run  on  Solaris  servers  with 
BEA  Systems  lnc.‘s  WebLogic 
application  server  software. 

Omgeo  ofilcials  said  at  a 


press  conference  here  that  in¬ 
dependent  investment  man¬ 
agement  firms  will  be  able  to 
use  the  Allocation  Manager 
portal  fm  of  charge.  The 
company,  which  b  jointly 
owned  by  The  Depository 
Thist  &  Clearing  Corp.  in 
New  York  and  Thomson 
Financial  in  Boston,  plans  to 
charge  brokerages  about  SI 
for  each  trade  they  process  via 
Allocation  Manager. 

David  Oxenstiema.  an  exec¬ 
utive  director  at  Morgan  Stan¬ 
ley  in  New  York,  said  that 
could  add  up  to  thousands  of 
dollars  a  day.  But  he  added 
that  he’s  willing  to  pay  the  fee 
in  order  to  streamline  the 
processing  of  transactions 
with  investment  firms  that 
currently  lack  automated 
trade-matching  capabilities. 

"To  us,  [using  Cues  and 
phones)  b  an  inefTicient  way 
to  process  trades,”  Oxenstier- 
na  said.  ”Ii  represents  [added] 
operational  costs  and  the  risk 
of  mishandling  things.” 


Gordon  Marchand.  vice 
president  and  treasurer  at 
Yeager.  Wood  &  Marshall  Inc., 
a  New  York-based  investment 
firm  that  mam^es  about  $800 
million  in  assets,  said  he  pUot- 
ed  AUocatioD  Manager  and 
likes  its  ease  of  use.  For  exam¬ 
ple.  the  software  lets  users  set 
up  drop-down  Usts  of  invest¬ 
ment  clients  that  "can  be  cus¬ 
tomized  and  configured  to  our 
needs.”  Marchand  said. 

But  Allocation  Man^r  has 
some  gaps  that  need  to  be 
filled,  added  Marchand,  whose 
firm  b  among  the  thousands 
of  small  and  midsize  invest¬ 
ment  managers  that  continue 
to  manually  transmit  trade- 


allocation  data  to  brokerages. 

Omgeo  has  to  add  the  abili¬ 
ty  to  print  and  save  transac¬ 
tion  data  to  meet  the  U,S.  Se¬ 
curities  and  Exchange  Com¬ 
mission's  record-keeping 
rules,  Marchand  said.  Alloca¬ 
tion  Manager  also  needs  to  be 
able  to  automatically  notify 
investment  managers  when 
trades  have  been  executed, 
be  said.  In  addition,  major 
brokerages  ‘liave  to  ad<^t  thb 
thing,”  he  noted.  "Otherwise, 
we’re  still  going  to  be  in  a  fax- 
and-phone  environment.” 

Omgeo  developed  Alloca¬ 
tion  Manager  with  financial 
backing  from  four  brokerages: 
Morgan  Stanley,  Credit  Suisse 
First  Boston  Corp..  ).P.  Morgan 
Chase  &  Co.,  and  UBS  War¬ 
burg.  Adam  Bryan,  Omgeo’s 
president  and  CEO,  last  week 
said  21  other  brokerages  have 
signed  up  to  use  the  portal. 

Bryan  added  that  he  will 
continue  to  meet  with  invest¬ 
ment  managers  to  fine-tune 
the  software  before  it’s  made 
available  in  May  or  June.  Om¬ 
geo  b  exploring  technologies 
that  could  be  used  to  send 
trade-execution  notices  to 
pagers  or  vb  e-maU,  be  said.  9 


Continued  from  page  I 

Convergence 


in  Oakland.  Calif.,  said  the 
health  care  provider  plans  to 
rest  OpenScape  in  a  lab  and 
then  run  a  pilot  project  that’s 
expected  to  last  through  year’s 
end  tf  the  software  works  as 
promised,  OpenScape  could 
improve  productivity  for  many 
of  Kaiser's  135,000  woiken  and 
reduce  the  number  of  devices 
that  the  company  has  to  buy 
for  them,  Crawford  said 
'Taking  voice  mail,  e>mai] 
and  IM  and  putting  them  into 
a  portal  leverages  all  the  dis' 
(>arate  capabilities  we  have  to> 
day  and  drives  efnciencies,"  he 
said  *'So  my  question  is.  Can 
Siemens  really  pull  it  offT 
Crawford  said  he  needs  to 
evaluate  how  Kaiser's  business 
units  would  deploy  and  use 
the  product  and  what  it  would 
cost  to  implement.  For  exam¬ 
ple.  the  software  could  require 
the  addition  of  new  Windows 
servers  and  some  restructur¬ 
ing  of  the  company's  network 
architecture.  Kaiser  has  also 
been  approached  by  a  Baby 
Bell  offering  OpenScape-like 
functionality  as  a  monthly  ser¬ 


OpenScape  Stands  Out,  Analyst  Says 
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vice.  Crawford  said,  declining 
to  idenriiy  the  company. 

Instead  of  running  on  con- 
ventionai  telecommunications 
switches.  OpenScape  will  be 
server-based.  Stratoo  said. 

The  software  will  toitially 
work  only  with  Microsoft 
Corp.’s  forthcoming  Windows 


Server  2003  operating  system. 
But  Straton  said  Siemens  plans 
to  add  Unix  and  Linux  support 
within  the  next  two  years. 

OpenScape,  which  supports 
the  emerging  Session  Initia¬ 
tion  ProtocoL  is  due  for  com¬ 
mercial  release  in  September 
at  a  cost  of  $400  per  user  (see 


chart).  But  Siemens  is  taking  a 
go-slow  approach  with  the 
technology.  Straton  said  the 
company  initially  plans  to  lim¬ 
it  marketing  to  about  50  cus¬ 
tomers  for  up  to  nine  months 
of  beta  testing  and  trials. 

Chris  Kozup,  an  analyst  at 
Meta  Group  Inc.  in  Stamford, 
(^nn..  said  one  question  that 
needs  to  be  answered  is  bow 
scalable  OpenScape  will  be  in 
its  fust  release.  He  noted  that 
Siemens  is  pushing  the  soft¬ 
ware  for  use  only  by  branch 
offices,  departments  and 
workgroups  at  this  point 

Straton  said  the  technolc^ 
is  being  pitched  for  small  in¬ 
stallations  for  now  because  it 
requires  a  cultural  shift  that 
could  be  hard  (or  entire  com¬ 
panies  to  make.  'The  software 
will  initially  be  able  to  handle 
up  to  500  users  per  server  and 
5,000  in  a  linked  setup,  be  said. 

Verizon  spokesman  Bill 
Kula  said  his  company  is 
working  with  Microsoft  and 
Son  Microsystems  Inc.  to  de¬ 
velop  some  of  the  same  capa¬ 
bilities  that  are  in  OpenScape, 
including  connections  be¬ 
tween  voice  and  text  messag¬ 
ing  using  any  device.  The 
technology  will  be  used  as 


part  of  a  service  that's  due  to 
be  announced  this  spring  or 
summer.  Kula  said.  He  added 
that  Verizon  has  trials  under 
way  with  internal  workers  and 
some  large  U.S.  businesses. 

Analyst  Kndco  Burney  at 
In-Sut/MOR  in  Scottsdale, 
Ariz..  expects  several  tele¬ 
communications  carriers  to 
offer  converged  communica¬ 
tions  services  this  year.  But 
she  wouldn't  name  any  of  the 
carriers.1 


OpenScape 
Version  1.0 

CAPABfUnES:  Meorales  and 
syrdvorazes  (nessagino.  calen- 
(larlrH)  and  reaFlm  (33labora(ion 
tocto  wito  corporate  applcabcins 

SUPPWTOOCH^ . 

DEVKCS:  Desktop  and  laptop 
PCs,  handheld  deuces,  cell 
phones  «xf  IP  phones 

RUNS  ON:  MlcrGSofl's  upcomina 
Wtedows  Server  2003 and 
GreeniMch  teeHintt  corraiuHca- 
bonsserwrsoltwBie 

UST  PNICE:  per  end  user 

due  for  beta  testing  in  May  and 
general  retoase  in  Septernber 


Vendors  Offer  Tools  to  Track 
License  (k)mpliance,  Usage 


rr  managers  could 
use  software  to  root 
out  unneeded  apps 

BV  MATT  HAMBL£N 

Two  software  vendors  last 
week  separately  announced 
products  that  IT  managers  can 
use  to  track  software  license 
compliance  and  to  identify 
licenses  that  are  no  longer 
needed. 

Novadigm  Inc  in  Mahwah. 
N.J..  released  a  tool  called  Ra- 
dia  Usage  Manager  that  tracks 
software  use  on  servers,  desk- 
and  laptops.  The  software 
works  with  existing  Novadi^ 
products  that  manage  the  de- 
pfoyment  of  new  applications, 
said  George  Keilar,  Novadigm 


vice  president  of  marketing. 

Meanwhile,  Softricity  Inc.  in 
Boston  introduced  SoftGrid 
Dual-Mode,  a  product  primari¬ 
ly  designed  for  use  in  deploy¬ 
ing  and  managing  WomIoWS 

and  Citrix  MetaFrame  iqrplica- 
tions.  But  the  technolog/s  abil¬ 
ity  to  track  license  compliance 
is  "icing  on  the  cake,"  said  a 
spokeswoman  for  Softricity. 

Big  Savings 

Royal  and  SunAUiance  USA 
plans  to  install  Radia  Usage 
Manager  next  year,  when 
funding  for  the  project  is  due 
said  Roger  Thibodeau.  IT  ex¬ 
ecutive  at  the  prc^>eity  and  ca¬ 
sualty  insurer  in  Rale^  N.C 
Thibodeau  said  be  expects  to 
save  millions  of  dolUn  by  us¬ 


ing  the  Novadigm  software  to 
find  unneeded  licenses. 

He  based  his  estimate  on  a 
laborious  manual  survey  of  li¬ 
cense  usage  among  7,0<X)  end 
users.  The  survey,  dooe  in  Jan¬ 
uary  and  February,  uncovered 
$500,000  that  cot^  be  saved 
by  not  renewing  licenses  for  12 
of  the  company's  131  commer¬ 
cially  licemed  applications. 
Thibodeau  said.  Many  users 
had  installed  applications  aiul 
never  used  them,  be  noted. 

Radia  Usage  Manager  will 
be  used  to  examine  the  re¬ 
maining  U9  applications.  The 
manual  effort  on  cbe  first  12 
to(dc  a  pair  of  IT  workers  two 
months  to  complete.  By  com¬ 
parison,  the  software  should 
take  only  about  a  day  to  count 


who  uses  all  the  other  applica¬ 
tions,  Thibodeau  said. 

The  Northwestern  Medical 
Faculty  Foundation  in  Chicago 
will  begin  rolling  out  SoftGrid 
Dual-Mode  this  week  for  1.5(X} 
doctors  and  other  users,  said 
Julie  Often,  the  foundation's 
director  of  information  sys¬ 
tems.  The  organization  is  a 
nonprofit  group  of  doctors  and 
health  care  professionals  who 
provide  cliciicai  care  and  are 

H  In  the  past. 

we’d  buy  100 
more  licenses  when 
we  ran  against  the 
limit,  but  this  way  we 
can  fine-tune  what 
we  need  to  buy. 

JULIE  OTTEN,  DMECIOR  OF 
INFORMATION  SYSTEMS. 
NORTHWESTERN  UEOKAL 
FACULTY  FOUNDATION 


affiliated  with  Northwestern 
University  Medical  Center. 

The  Softricity  product 
streams  applications  to  users 
from  a  server  instead  of  in¬ 
stalling  them  on  end-user  PCs. 
That  should  help  in  tracking 
the  usage  of  applications.  Of¬ 
ten  said.  "In  past,  we'd  buy 
100  more  licenses  when  we 
ran  against  the  limit,  but  this 
way  we  can  fine-tune  what  we 
need  to  buy,"  she  said. 

Fred  Broussard,  an  analyst 
at  IDC  in  Framingham.  Mass., 
said  capabilities  similar  to 
those  developed  by  Novadigm 
and  Softricity  are  also  offered 
by  Microsoft  Corp.,  Computer 
Associates  International  Inc.. 
IBM’s  Tivoli  unit  and  Altiris 
Inc.  in  lindOD,  Utah. 

But  Ronni  Colville,  an  ana¬ 
lyst  at  Gartner  Inc  in  Stam¬ 
ford,  Conn.,  said  Novadigm's 
technology  for  tracking  soft¬ 
ware  liceoM  inventories  ^ 
pears  to  be  tbe  most  compre¬ 
hensive  DOW  available.  I 


IDC  Enterprise  ServerVision  2003 


Creating  Unique  Markets  in  a  Standards-Driven  Industry 


IDC  Enterprise 
ServerVision 

May  22, 2003 

The  Fairmont  Hotel,  San  Jose,  CA 

Register  Online 

www.idc.com/esvOS 

or  Cali 

800-605-5849 

(978-597-0133  outside  the  United  States) 

*IDC 

Analyze  the  Future 


Sponsors: 


Partner:  invent 


www.co(nputer\w)rid.coni 


CMfnoMU  Mnan 


19 


Feds  Test  Network  to  Send  Alerts  to  M.D.S 


SV  BOB  BRCWIN 

The  U^.  Department  of 
Health  and  Human  Services 
(HHS)  has  begun  testing  the 
use  of  a  health  care  data-deliv- 
ery  network  operated  by 
ePocrates  Inc.  to  transmit 
bioterrorian-related  alerts  to 
doctors  equipped  with  Palm 
OS-based  handheld  devices. 

HHS  and  San  Mateo,  Calif.- 
based  ePocrates  launched  the 
three-month  pilot  this  month. 
The  agency  is  finalising  the 
data  files  it  plans  to  distribute 
for  the  test,  said  Dr.  John 
Whyte,  the  medical  director  of 
an  HHS  panel  set  up  last  year 
to  explore  new  technologies. 
But  HHS  could  immediately 
send  data  via  ePocrates’  net¬ 
work  if  bioterrorism  attacks 
occurred,  he  added. 

Bob  Quinn,  chief  technolo¬ 
gy  ofiker  at  ePocrates,  said 
t^t  about  10,000  emergency 
room  physicians  and  infec¬ 
tious  disease  and  primary  care 
specialists  will  participate  in 
tte  pilot  EPocrates  plans  to 
launch  a  version  of  its  soft¬ 
ware  for  Pocket  PC  devices  in 
^ril,  but  Quinn  said  the  doc¬ 
tors  involved  in  the  test  will 
use  handhelds  running  Palm 
lnc.’s  operating  system. 

HHS  will  transmit  alerts  to 
ePocrates  as  Word  documents 
in  e-mail  attachments,  Quinn 
said.  The  company  will  store 
the  alerts  in  a  central  Oracle 
database  and  convert  them 
into  files  that  can  be  read  by 
Palm  devices  i^en  doctors 
synchronize  their  handhelds 
mtb  the  database. 

Quinn  said  ePocrates.  which 
runs  a  mix  of  Unix  and  Win¬ 
dows  systems,  can  tailor  infor- 
maticH)  to  subscribers  based 
on  parameters  such  as  medical 
specialty  and  locatioiL  Eventu¬ 
ally,  he  added,  ePocrates  wants 
to  provide  HHS  with  an  extra- 
net  tool  so  the  agency  can 
transmit  alerts  directly. 

Whyte,  who  woAs  for  the 
HHS  Council  on  Private  Sec- 
tcv  Initiatives  to  Improve  the 
Security,  Slafety  and  Quality  of 
Health  Care,  wouldn’t  disclose 
the  cost  of  the  pilot  program 
or  say  how  quickly  HHS  plans 
to  broaden  distribudon  of  the 


alerts  if  the  test  is  successful 
About  250,000  doctors  and 
450,000  other  medical  work¬ 
ers  have  signed  up  to  use  the 


ePocrates  network.  The  com¬ 
pany  stores  information  ^>out 
prescriptioo  drugs  in  its  data¬ 
base  and  sends  out  its  own 


alerts  with  updated  drug  safe¬ 
ty  data  and  news. 

The  Atlanta-based  Centers 
for  Disease  Control  and  Pre¬ 
vention  (CDC),  an  arm  of 
HHS,  already  operates  a  net- 
woric  that  distributes  informa¬ 


tion  to  public-health  depart¬ 
ments.  Whyte  said  the  deal 
with  ePocrates  will  let  HHS 
quickly  send  alerts  about  po¬ 
tentially  threatening  biok^al 
agents  to  doctors  w^  aren't 
tied  into  the  CDCs  itetwork.  I 
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Microsoft  Exec  Eyes 
Midsize  Users  for  Apps 


Buigum  says  vendor  to 
focus  on  ‘high-volume’ 
business  applications 

BV  MARC  L.  SOMBIHI 

Douglas  Burgum,  a  senior  vice  president 
at  Microsoft  Corp,  who  heads  die  com¬ 
pany’s  business  solutions  division, 
spoke  about  the  unites  enterprise  appli¬ 
cations  strategy  during  an  interview  at 
Microsoft’s  Convergence  2003  cot^- 
enee  in  Kissimmee,  FTo..  this  montft 


Can  you  dwtfy  ariiaro  Mcrosoft  sits 
In  tha  corinralt  appieatlons  mar 
kat?  If  you  drew  a  bell  curve  for 
us,  the  center  is  in  the  midmar- 
keL  We're  not  focused  on  sell¬ 
ing  applications  through  a  di¬ 
rect  sales  force  to  the  world's 
largest  corporations.  Those  ap- 
plicadcMis  are  very  expensive 
and  require  ongoing  customiza- 
tioa  We're  in  the  business  of  hi^- 
volume,  low-price  software  sold 
through  partners. 


Ulnar  pans  OS  BRCtoaon  iio  Dusmoas  wim 
rival  appicaliona  vandors  such  as  SAP  and 
PioplaSefL  b  that  an  issus  for  your  unit? 
We  want  to  work  widi  those  folks  on 
our  [undertying  technology]  platforms. 
We  want  them  to  adopt  our  tools  that 
sufi^rt  XML  connectivity  and  offer 
oistomers  support  for  l<let  To  the  de¬ 


gree  that  SAP  has  announced  aggres¬ 
sive  plans  in  the  midmarket  (with  its 
SAP  Business  One  initiativel  we  will 
find  SAP  a  partner,  but  also  well  be 
competing  with  them  for  c\i$tomer 
accounts. 

Vdu  neanliy  sMppad  your  tint  customar 


Any  mbgivliigs  Mmol  taUng  on  Sbbol 
Systsms  CGO  Tom  SbM?  We're  not  tak¬ 
ing  him  on.  He  sells  directly  in  deals 
that  are  worth  multiple  millions,  with 
lots  of  rich  customizations. 
That's  not  the  market  we're 
pursuing.  We  see  Siebel  as  a 
strong  partner  doing  nice  work 
with  our  SQL  Server  database 
and  Windows  and  .Net  and  our 
support  tools. 

Do  you  vbw  any  of  tho  appHcotlons 
BhI  Mbrooofl  lioa  bought  ovor  the 
past  fow  yoora  as  redundant?  Na 

The  products  won’t  fade  away  in  any 
near-  or  midterm  time  frame.  There 
are  large  customer  bases  for  Solomon 
and  Navision  and  Azapta  and  Great 
Plains.  We've  got  a  deep  commitment 
[to  them]  and  are  planning  for  the  next 
generation.  We're  not  going  to  try  to 
merge  those  lines  together  in  the  tradi¬ 
tional  sense,  so  much.  [But]  to  some 
degree,  the  future  generation  will  have 
a  migration  path  to  one  single  global 
code  base.  I 


Oracle  Offers  to  Fund  Linux  Efforts 


BV  JAMES  NICCOLAI 

Oracle  Corp.  last  week  said  it  plans  to 
pay  out  about  SISO  million  per  year  in 
an  effort  to  encourage  software  ven¬ 
dors  to  develop  Linux  applications  for 
its  Oracle9i  databases. 

‘'We've  heard  from  our  customers 
that  the  things  inhibiting  their  move¬ 
ment  to  Linux  are  technical  support, 
which  we  addressed  last  summer,  and 
also  the  availability  of  applications,” 
said  Bob  Shimp,  vice  president  of 
Orac]e9i  database  marketing.  ”So  we're 
providing  technical  and  financial  in¬ 
centives  to  [software  vendors].” 

Oracle  will  give  qualifying  software 
vendors  S2  for  every  SI  that  they  invest 
in  developing  and  marketing  Linux 
software.  Shimp  said.  The  company 
will  also  share  its  customer  list  with 


vendors  and  let  them  market  their  Lin¬ 
ux  offerings  through  its  Web  site. 

Oracle  expects  to  continue  ^>eDding 
SISO  millkm  annually  on  the  program 
for  "a  number  of  years,”  Shimp  said.  In 
a  related  effort,  company  officials  said 
Oracle’s  own  developers  are  working 
on  proposed  additions  to  the  Linux 
kernel  aimed  at  making  the  operating 
system  more  suitable  for  use  with  Ora- 
cle9i  in  large  corporate  applications. 

Ensuring  the  availability  of  a  broad 
set  of  applications  is  a  crucial  part  of 
Oracle’s  strategy  to  use  Linux  to  com¬ 
pete  against  Microsoft  Coip.'8  SQL 
Server  database,  said  Stephen  O'Grady, 
an  analyst  at  RedMonk  in  Hollis,  NJL I 


James  hnccoloi  writes/br  the  IDG  News 
Service. 


MaftePWaOttt. 
TiM  Mincli  mryMt 
ImwaiMfor. 


Magic  Pixie  Dust 

was  all  the  rage.  And 
why  not?  The  directions 
said  that  with  one  pinch, 
servers  would  be  imbued  with 


“always  on”  capabilities.  With  another  pinch, 

servers  would  be  instantly  gilded  with  more  speed 


and  performance.  The  servers  would  self-configure.  They 


would  never  crash.  Every  server  could  connect  with  every  other 


server  in  existence.  Just  one  problem.  The  Pixie  Dust  didn’t  work. 


AND  THAT’S  WHEN  THEY  CALLED  IBM. 

The  IB.M  ^server  pSeries'"  650  running  UNIXI^  It  can  run  multiple  partitions  that 
can  be  dynamically  reconfigured.  On  demand.  It's  twice  as 
powerful  as  the  Sun  Fire  V880  in  ERP.’  And  unlike  Pixie  Dust, 
it  works.  To  learn  more  about  the  flexible  p650  or  to  locate  your 

IktUNU 

IBM  Business  Partner,  head  over  to  ibin.coin/eserver/p650 


IktpM. 


'IBM  •S«n>«r  pSanM  660  (6  pmcmaon.  POWCR4..t45  QHz.  IS  MB  L2  par  2  procaaacrs.  64  GB  rrwnory)  carMaO  by  SAP  on  Via«3  with  tha  Wowing  SAP  SWvM  4«C  SO  ba 

iMfi.  US  aac.  pwaga  dWog  iwponaa  ana,  122.670  Uy  buiinaaa  procaaaafl  liw  llama/how.  366.000  iMog  aiapa/hour.  S130  SAPS.  CPU  uaatan  ol  BB%  wMb  CB2  «61 »«  AlX  SL  varaion  Swi  Mao 
MraSPARC  ■.  900  MHz.  B  MB  U  cacha.  32  GB  manmy)  waa  carWad  by  SAP  v  VTTim  w«h  ma  Wowaig  SAP  SUnM  4.60  SO  vplicainn  twtfnwk  raaUB:  600  SO  bvMtfnaiK  uaara.  196  mc.  i 
Uy  bwraaa  pweiaiaa  Kna  IMmaAow.  iStOOO  dWog  aMpa^w,  3X00  SAPS.  CPU  iMzabon  ol  99%  «Wi  062  v7  ml  SolarB  S  RaaUs  poaiad  al  M^/toww.^cam/bancftnaffc.  niSW  prW  m  ol  2;! 
«ithAIXSL.2^l.2QHzPOWeR4*  PrtaawaauCtaclbtf«ngi«MD«u(nollea.RaaalarpnoaamayvancieM.lha»4uaawaalooaAIXSL.  De2.oSaivar.POWEH4».pSafiaa»«a-bMaiaaaandanw«« 
ol  Mtarnabonal  DtaWaa  Mcbawa  CorpotMon  ii  tha  Undad  SWaa  andAr  offiar  counthaa  UNIX  «  a  laglaraa  tradamark  ol  Tha  Opan  Ooup.  Ollw  eompmy.  product  ml  arnica  nmaa  mav  ba  Bi 
02003  IBM  CorpotMan.AlrighMiaaan«d.  r  h-  j 


Hk  raaulta:  1.220  SO  banchnwk 
na  Stfi  Pirn  VB80  (8  pncaaaora. 
«  dWog  taaponaa  ama.  60.330 
kv  peso  Eidiraaa  Conflgjraben 
wnartaoriajBiaiadtrwImma 
Ida  or  larvca  marta  ol  Ohara. 


magic  pre^nte  and 
r^Mun  saver  cruhea. 

Opdmizatioa?  Sprinide  on 
saver  three  times  a  day. 

Current  unrated  in  performance. 

Could  be  dte  ^eatest  idea 
in  the  histay  of  FT. 

Not  availaUe  tfarou^  IBM. 

Doesn’t  actua%  exist 


Ibvaful  self-healing  tedmology 
hdps  prevent  serva  crashes. 

I^rtitioiiing?  Buik  in. 

'Bvice  as  powerful  as  the 
Sun  Fire  V880  in  ERF’ 

Could  be  die  greatest  idea 
in  the  history  of  UNIX. 

Available  tfaroi^  IBM  and 
IBM  Business  Butners. 

2-w^  starts  at  $31A95f 


(@  business  on  demand 
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MARYFRAN  JOHNSON 


Standards  Stupidity 


G 


IVEN  THE  CHOICE  of  watching  paint  dry 
or  paying  attention  to  the  techno-political 
infighting  that  goes  on  within  industry 
standards  bodies,  most  of  us  would  opt  for 


the  paint.  But  when  there's 
big  trouble  brewing  over 
Web  services  —  between 
the  Wri>'s  leadii^  stan¬ 
dards  organization  and  the 
dominating  duo  of  IBM 
artd  Microsoft  —  it's  lime 
CO  take  notice. 

Last  week.  Microsoft 
dropped  out  of  a  workii^ 
group  at  the  World  Wide 
Web  Consortium  (W3C), 
opting,  as  IBM  has,  to  go 
its  own  way  in  develop¬ 
ing  a  ‘'choreography”  standard  for 
Web  services.  This  Is  bad  news  for 
future  users  of  products  depending 
on  this  particular  standard  to  inter¬ 
operate. 

'The  most  controversial  area  in 
Web  standards  now  is  the  choreogra¬ 
phy  or  orchestration  of  the  services," 
says  Erk  Newcomer,  chief  technolo¬ 
gy  officer  at  Iona  Technologies  Inc. 
and  an  active  member  of  the  W3C. 
"It's  about  bow  to  combine  them 
rapidly  and  change  the  combirutions 
to  change  business  processes  quickly 
and  create  affordable  integration." 

If  Microsoft's  latest  move  was  the 
only  point  of  standards  contention, 
we  could  all  go  back  to  watching  that 
paint  dry.  But  similar  fractures  have 
taken  place  in  both  the  Web  services 
security  and  messagii^  arenas.  For 
example,  there  are  two  camps  push¬ 
ing  a  Web  service  specification  for 
reliable  messaging  The  original  spec, 
published  in  January  by  Oracle.  Sun 
and  others,  now  has  a  rival  from  IBM. 
Microsoft  and  their  supporters. 

Whose  offering  is  bmer?  Does  it 
matter?  The  key  reason  to  standard¬ 
ize  b  to  create  a  common  base  of 
technology  from  which  industry 
players  can  then  innovate  and  com¬ 
pete.  leaving  customers  to  enjoy  an 
array  of  product  choices. 

The  last  place  we  need  another 


pointless,  stupid  stan¬ 
dards  battle  b  in  Web  ser¬ 
vices.  Did  vendors  learn 
nothing  from  the  Unix 
wars  of  a  decade  ago? 
From  the  tangled  mess 
chat  client/server  became? 

The  first  phase  of  set¬ 
ting  Web  services  stan¬ 
dards  went  uncommonly 
well,  with  the  swift  estab- 
Ibhment  of  the  core  tech¬ 
nologies  of  XML,  SOAP. 
WSDLand  UDDl.  But  ihb 
second  phase  we're  now  in  —  where 
security  and  reliability  must  be  ad¬ 
dressed  —  b  collapsing  into  a  mud¬ 
dle  of  conflicting  vendor  agendas. 

"It’s  easy  to  agree  on  the  low  leveb  of 
the  technologies."  Iona’s  CTO  points 
out  "But  where  you  get  to  real  busi¬ 
ness  value,  it’s  harder  to  get  agree¬ 
ment  (among  the  vendors]." 

Adding  to  the  complexity  of  it  all  b 
the  proliferation  of  standards  groups 
circling  their  wagons  around  Web 
services.  Along  with  the  influential 
W3C,  there's  OASIS  (the  Organiza¬ 


tion  for  the  Advancement  of  Struc¬ 
tured  Information  Standards),  the 
IETF  (the  Internet  Engineering  Task 
Force)  and  the  newest  one.  the  WS-1 
(the  Web  Services  Interoperability 
Organization). 

Despite  these  widening  cracks  in 
the  Web  services  foundation,  there  is 
still  hope  rising  around  the  integra¬ 
tion  possibilities  and  potential  busi¬ 
ness  benefits.  Major  companies  in 
every  industry  are  rolling  out  Web 
services  products,  albeit  cautiously. 
Forrester  Research  surveyed  292  CIOs 
last  summer  and  found  that  only  30% 
had  active  Web  services  projects  un¬ 
der  way.  IDC  pegs  last  year’s  Web 
services  market  at  about  $416  million 
but  predicts  that  by  2006  it  will  blos¬ 
som  into  a  $2.9  billion  market.  For 
Web  services  to  really  take  off  how¬ 
ever.  key  standards  must  be  in  place. 

"Everyone,  from  vendors  to  cus¬ 
tomers  to  standards  bodies,  wants  to 
see  Web  services  succeed,  in  view  of 
the  key  role  they  are  destined  to  play 
in  enterprise  architecture,"  a  Gartner 
analyst  pointed  out  in  a  recent  re¬ 
search  note. 

That's  certainly  true  for  the  cus¬ 
tomers,  and  it’s  likely  true  for  the 
standards  bodies.  But  the  jury  b  still 
out  on  the  vendors,  especially  IBM 
and  Microsoft.  I 
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Security 
Lessons 
From  Israel 

ONE  OF  THE  differ¬ 
ences  between  how 
Israeli  and  American 
companies  handle  IT  securi¬ 
ty  is  simple:  seriousness.  We 
have  yet  to  treat  IT  security 
as  a  paramount  issue.  But 
as  the  U.S.  enters  a  time  of 
heightened  threats,  we  can  adapt 
some  Israeli  lessons  for  our  own 
purposes. 

Every  corporation  must  have 
someone  who  reports  to  the  chief  se¬ 
curity  officer  and  has  overall  respon¬ 
sibility  for  the  security  and  protec¬ 
tion  of  hardware.  Routers,  switches 
and  storage  devices  must  be  invento¬ 
ried  and  supervised  against  tamper¬ 
ing  or  theft. 

Security  for  PCs 
and  local  communi¬ 
cations  networks 
must  be  assured 
through  best  prac¬ 
tices  and  personal 
attention.  Israel  has 
no  companies  the 
size  of  those  in  the 
Fortune  500,  and 
that  smaller  size 
makes  it  easier  for 
security  officers  at 
Israeli  firms  to  monitor  IT  opera¬ 
tions.  StUL  the  consequences  of  even 
a  minor  aruck  on  Israeli  IT  infra¬ 
structure  are  potentially  so  deadly 
that  greater  security  awareness  b 
essentiaL 

Companies  need  to  treat  software 
security  as  a  separate  discipline,  with 
dedicated  reviews  and  vendor  certi¬ 
fications.  If  vendors  can’t  help  build 
and  verify  security  for  their  prod¬ 
ucts,  look  elsewhere. 

Communications  security  should 
not  cake  second  place  —  indeed  re¬ 
dundant  telephone  and  data  systems 
should  be  tested  on  an  random  basb 
and  fully  integrated  into  the  IT  secu¬ 
rity  plan. 

A  careful  and  up-to-date  review  of 
legal  and  contractual  obligations  re¬ 
lated  to  IT  sectuity  should  be  built 
into  a  corporate  curriculum  designed 
to  protect  hardened  IT  assets. 

An  advantage  Israeli  firms  have  b 
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the  flow  of  IT  talent  between  the 
anned  forces  and  the  private  sector. 
This  gives  companies  a  ready  supply 
of  weU'trained,  experienced  p>erson- 
oel.  maity  of  whom  have  formed  long¬ 
term  working  relationships  with  their 
military  colleagues.  While  U.S.  com¬ 
panies  may  not  be  able  to  call  upon 
military  personnel,  they  can  promote 
industry  associations,  support  work¬ 
ing  groups  and  build  corporate  part¬ 
nerships  for  IT  security,  lliey  must 
move  from  competing  in  IT  security 
to  cooperating. 

Companies  must  produce  a  review 
of  computerized  data  systems  and  or¬ 
ganize  damage  assessments  and  re¬ 
covery  plans  in  the  event  of  an  attack. 
Israel's  constant  exposure  to  external 
threats  has  bred  planning  for  the 
worst  with  sophi^kated  IT  skills. 

U.S.  IT  managers  must  form  relation¬ 
ships  with  U.S.  government  officials 
so  that  both  sides  understand  the  oth¬ 
er's  needs. 

Finally,  it's  time  companies  send  a 
signal  to  IT  personnel  by  funding 
diploma-level  course  work  for  sectui- 
ty.  Who  knows,  maybe  the  U3.  gov¬ 
ernment  will  give  its  stamp  of  ap¬ 
proval  to  sectmty  education,  similar  to 
what  Israel's  Ministry  of  Education 
does,  by  funding  student  loans.  It's 
time  to  get  serious.  I 

DAVID  FOOTE 

Building 
Confidence  in 
Tough  Times 

A  FEW  YEARS  of  down¬ 
sizing,  belt-tightening 
and  fanatical  attention 
to  ROI  have  tested  IT  profes¬ 
sionals’  patience  and  confi¬ 
dence.  Many  have  been 
through  tough  economic 
times  before,  and  they're  cop- 

Ing  reasonably  weU.  But  th^'re  not 
dealing  as  well  with  fears  of  terrorism 
and  concern  about  the  Iraq  war.  These 
have  left  most  people  confiised  and 
uncertain  and  searching  for  sources  of 
stability  and  comfort  b^h  at  work  and 
at  home. 

How  much  can  an  employer  help?  A 
lot,  it  turns  out  This  column  has  fo¬ 
cused  on  successful  IT  management 
practices  for  four  years,  and  a  glance 
backward  reveals  a  treasure  trove  of 
practical  strategies  and  ideas  ripe  for 


IMirUNU  MU. Ml 


2S 


today.  They  needn't  be  an¬ 
chored  in  altruism;  they're 
all  profitable  business  prac¬ 
tices  within  the  grasp  of 
any  employer. 

Hit  pearar  of  procaat.  You 
may  think  that  the  recent 
attention  to  project  man¬ 
agement  practices  is  being 
driven  strictly  by  budget 
controls,  risk  aversion  and 
a  desire  to  reduce  complex¬ 
ity.  But  think  again.  Doing 
things  in  a  routine,  pre¬ 
dictable  manner  builds  fa¬ 
miliarity  and  confidence, 
which  IT  woricers  are  crav¬ 
ing  right  now.  What  better 
antidote  for  stress  than  working  with¬ 
in  a  system  of  well-defuied  beginnings 
and  endings,  systematic  approaches  to 
managing  portfolios  of  concurrent 
projects,  and  stringent  attention  to 
communication  and  collaboration  is¬ 
sues,  especially  when  problems  arise? 

Organizations  should  be  investing  in 
project  management  as  a  key  strategy 
(as  well  as  corporate  cultural  beacon) 
to  become  more  adaptive,  responsive 
and  profitable  in  a  rapidly  changing 
business  environment.  Best  practice: 
Organize  prefect  management  offices, 
staffed  by  both  business  and  IT  work¬ 
ers.  and  make  them  responsible  for 
training  workers.  These  offices  would 


And  ways  to  incorporate 
project  management  into 
daily  routines  and  serve  as 
project  management  infor¬ 
mation  repositories. 

Focus  on  kmMon  inuia. 
Business  leaders  are  noto¬ 
rious  for  undermining 
change  initiatives  by  fail¬ 
ing  to  anticipate  who  will 
have  to  let  go  of  what  and 
for  not  adeqtutely  prepar¬ 
ing  their  workers  for  the 
psychological  and  emo¬ 
tional  adjustments  needed 
in  new  situations.  Look  no 
further  than  recent  heavy- 
handed  workforce  reduc¬ 
tions  and  the  deep  resentment  still 
palpable  among  those  workers  who 
kept  their  jobs. 

The  management  challenge  is  to  get 
people  to  stop  doing  things  the  old 
way.  which  re<)uires  attending  to  ex¬ 
tremely  unsettling  personal  stuff  in 
projects,  workload,  pay  and  careers. 
That  can't  be  accomplished  imperson¬ 
ally.  Required  road  map:  Managing 
7>ansirions:  Making  (he  Most  of 
(Change,  by  William  Bridges. 

Pay  olMiaa  to  rstinlien.  Lack  of  com¬ 
mitment  is  the  major  reason  you  lose 
good  people,  or  at  least  see  t^ir  pro¬ 
ductivity  decline.  Among  the  top  20% 
of  your  best  performers  (the  ones  you 
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can't  afford  to  lose),  some  are  bound 
to  leave.  c\‘co  in  a  rotten  economy. 
Everything  that  binds  them  to  their 
jobs  and  to  their  en^loyer  needs  to  be 
unearthed  and  deftly  managed.  es;>e- 
cially  now  that  they  are  hrustnited  by 
increased  woridoadi.  Build  their  loyal¬ 
ty  with  thoughtful  well-executed  re¬ 
tention  strategies  and  a  willingness  to 
listen  and  continually  recalibrate. 
What  you  do  with  the  other  B0%  is  ar¬ 
guably  less  important. 

OMnctormdithksRitotor.How  we 
handle  ourselves  and  treat  others  is 
even  more  important  in  unsettled 
times,  because  perceptions  arc  more 
emotionaUy  charged  Ethical  issues 
aren't  simply  about  right  and  wron^ 
they're  about  making  tough  choices  in 
a  brutal  world  Your  superiors,  cus¬ 
tomers  and  peers  take  character  and 
ethics  into  account  far  more  than  you 
realize.  Required  reading:  Daniel 
Coleman's  books  about  emotional  in- 
teUigence  and  the  writings  on  ethical 
issues  in  engineering  by  Hiram  Ckil' 
lege  ethics  professor  Kenneth  Alpern. 

Confident  people  perform  at  higher 
levels.  That's  the  kind  of  ROI  you  can't 
^ore.  I 
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Forgotten  father 

ORE  PERSON  Who  seems  to 
have  been  forgonen  about  in 
(he  operatino  ^fstem  history 'The 
Story  So  Fv'lOuicIlaik  36541]  B 
(he  late  Gary  Kildall.«vhos8(:p« 
was  the  predominant  nscfocom- 
outer  operating  syston  of  the  1970s 
and  is  generaly  regarded  as  the 
core  of  MS-OOS.  He  MBS  the  true 
father  of  modem  compufang. 

Fred  Cooper 
Saratoga  Springs,  N.Y 


Looking  Past  ROt 

Gwen  THE  nCT  that  the  major- 
tty  of  costs  assoaated  With  IT 
investments  wi  occur  during  oper- 
atiora  (arid  not  during  the  tradition¬ 
al  investment  period  ^  design  and 
buMmgXIiMshalthosac^cutat- 
ing  ROt  loads  of  kick  nhe  Next 
CMr  ROI.' (kMkUnk 35564 ]. 
Pleasetelmewheretheinvest' 
meni  stops?  Frianci^  manage¬ 
ment  (rf  IT  is  truly  essential  and 


easmr  than  most  pe^  ttank.  A  He 
cyde  approach  is  essential,  how¬ 
ever.  Wal-pubkshed  wproaches 
are  those  of  John  Thorp  and  Dan 
Remenyt 
Epan  Bergheut 

Prci^ssor  c/ business  and /CD 
University  of  Groningen. 
Rorrerdam.  N^herlonds, 
ewberghota@eoan<gjii 


Not  a  Strong  Suit 

ALTHOUMt  IT  S  TRUE  that  irany 
tones  management  refuses  to 
performduedNgenceonlTnvesi- 
meats,  i  must  point  out  that  some  fT 
shops  refuse  to  even  provide  ade¬ 
quate  infonralion  to  rtiale  an  ir^ 
(ormed  decision  fSavB  the  Suits 
From  Themselves.*  OtockLmk 
36692). 

I  spent  several  years  wortong  on 
a  rntoor  upgrade/dviversiori.  Mien 
busmaes  representatives  vrere  final- 
lyalowedtoiniiateanopendBCus' 
Sion  where  el  of  the  options  could 
be  presented,  we  found  that  the  OO 


had  sipoed  in  ahead  of  us  am 
'prasokf  the  sponsors  wto) 
Dromees  that  were  never  kept.  That 
CIO  moved  on  before  the  system 
went  live  and  before  the  buaness 
codd  see  exacBy  what  It  had  in¬ 
vested  in.  There  tnjsl  be  an  honest 
represenlalive  Involved  fi  the 
process  who  has  the  best  tong- 
term  nlerasts  of  the  buaness  in 
mind  and  not  just  Its  resume. 
CtwckHiMto 

Senior  consuhonr.  Impoc, 
PtHtlond,  Ore. 


Trapped  in  NT 

MV  BUSMESS  B  slayino  on 
NT  4  lor  the  toresaaable  fu¬ 
ture  for  die  same  reason  that  many 
others  are  -  it's  stable  and  rehable 
and  runs  witthm  the  footomi  of  our 
exEbngservnrhardwarelQuick- 
Link 36543].  We  had  constoered 
upgradng  to  WMows  2000.  but 
that  option  vemhad  pretty  quctoif 
when  XP  was  releBsed;  Windpws 
2000  suddenly  became  unaMi- 


abte  from  tocatnaelen  Many  of 
otf  appkcations  wmidd  swwe  the 
banshon  tp  Mndows  2(XX).  but 
nmv  versKirB  would  be  needed  to 
go  to  XP.  The  cost  at  appbeabon 
upgrades,  taster  servers  and  toiger 
storage  makes  the  trip  to  XP  across 
Ihe  b^  Drohtoilive  for  now.  So  in 
a  sense,  vra  are  trapped  -  and  yotf 
artde  suggests  that  we  have  tots  ol 
company. 

Gregory  Lattoh 
Oinsuitant  Tbranto 

COMFUTOmORU)  welcotrws 
comments  from  Ns  readers  Lattara 
wi  be  edited  tor  brevity  and  ctortty. 
They  shoUto  be  addressed  to  Janw 
Edito  totters  edfeor.  ComputHWoctil 
PO  Boi  gra  500  Old  Comackcui 
PattL  BaranghatTL  Mass.  OTTOI 
Fax  (506)  879^643 
E-mai:tottoraBcomputerwiortd.cofn 
Indude  an  adtoess  and  phone  num¬ 
ber  tor  immeckaie  vonkcabon. 
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Standards  Stupidity 


G 


IVEN  TFIE  CHOICE  of  watching  paint  dry 
or  paying  attention  to  the  techno-political 
infighting  that  goes  on  within  industry 
standards  bodies,  most  of  us  would  opt  for 


the  paim.  But  when  there’s 
big  tamble  brewing  ovit 
Web  services  —  between 
the  Web's  leading  stan¬ 
dards  organization  and  the 
dontinating  duo  of  IBM 
and  Microsoft  —  it's  lime 
to  take  notice. 

Last  week,  Microsoft 
dropped  out  of  a  working 
group  at  the  World  Wide 
Web  Consortium  ( W3C ). 
opting,  as  IBM  has.  to  go 
its  own  way  in  develop¬ 
ing  a  “choreography"  standard  for 
Web  services.  This  is  bad  news  for 
future  users  of  products  depending 
on  this  particular  standard  to  inter¬ 
operate. 

“The  most  controversial  area  in 
Web  standards  now  is  the  choreogra¬ 
phy  or  orchestration  of  the  services." 
says  Eric  Newcomer,  chief  technolo¬ 
gy  ofTtccr  at  Iona  Technologies  Inc. 
and  an  active  member  of  the  W3C. 
~If'$  about  how  to  combine  them 
rapidly  and  change  the  combinations 
to  change  business  processes  quickly 
and  create  affordable  integration." 

If  Microsoft’s  latest  move  wa.s  the 
only  point  of  standards  contention, 
we  could  all  go  back  to  watching  that 
paint  dry.  But  similar  fractures  have 
taken  place  in  both  the  Web  services 
security  and  messaging  arenas.  For 
example,  there  are  two  camps  push¬ 
ing  a  Web  service  specification  for 
reliable  messaging.  'Hie  original  spec, 
published  in  January  by  Oracle.  Sun 
and  others,  now  has  a  rival  from  IBM. 
Microsoft  and  their  supporters. 

Whose  offering  is  better?  Docs  it 
matter?  The  key  reason  to  standard¬ 
ize  is  to  create  a  common  ba.se  of 
technology  from  which  industry 
players  can  then  innovate  and  com¬ 
pete.  leaving  customers  to  enjoy  an 
array  of  product  choices. 

The  last  place  we  need  another 


pointless,  stupid  stan¬ 
dards  battle  is  in  Web  ser¬ 
vices.  Did  vendors  learn 
nothing  from  the  UnLv 
wars  of  a  decade  ago? 
From  the  tangled  mess 
that  client/server  became? 

The  first  phase  of  set¬ 
ting  Web  services  stan¬ 
dards  went  uncommonly 
well,  with  the  swift  estab¬ 
lishment  of  the  core  tech¬ 
nologies  of  XML.  SOAP. 
WSDL  and  UDDI.  But  this 
second  phase  we’re  now  in  —  where 
security  and  reliability  must  be  ad¬ 
dressed  —  is  collapsing  into  a  mud¬ 
dle  of  conflicting  vendor  agendas. 

"It’s  easy  to  agree  on  the  low  levels  of 
the  technologies,  "  Iona’s  CTO  points 
out.  "But  where  you  get  to  real  busi¬ 
ness  value,  it’s  harder  to  gel  agree¬ 
ment  laraong  the  vendors)." 

Adding  to  the  comple.\ity  of  it  all  is 
the  proliferation  of  standards  groups 
circling  their  wagons  around  Web 
services.  Along  with  the  influential 
W3C.  there’s  OASIS  (the  Organiza¬ 


tion  for  the  Advancement  of  Struc¬ 
tured  Information  Standards),  the 
IETF  (the  Internet  Engineering  Task 
Force)  and  the  newest  one.  the  WS-1 
(the  Web  Services  Interoperability 
Organization). 

Despite  these  widening  cracks  in 
the  Web  services  foundation,  there  is 
still  hope  rising  around  the  integra¬ 
tion  possibilities  and  potential  busi¬ 
ness  benefits.  Major  companies  in 
every  industry  are  rolling  out  Web 
services  products,  albeit  cautiously. 
Forrester  Research  surveyed  292  CIOs 
last  summer  and  found  that  only  30% 
had  active  Web  services  projects  un¬ 
der  w'ay.  IDC  pegs  last  year’s  Web 
services  market  at  about  S416  million 
but  predicts  that  by  2006  it  will  blos¬ 
som  into  a  S2.9  billion  market.  For 
Web  services  to  really  take  off.  how¬ 
ever.  key  standards  must  be  in  place. 

"Everyone,  from  vendors  to  cus¬ 
tomers  to  standards  bodies,  wants  to 
see  Web  services  succeed,  in  view  of 
the  key  role  they  are  destined  to  play 
in  enterprise  architecture."  a  Gartner 
analyst  pointed  out  In  a  recent  re¬ 
search  note. 

That's  certainly  true  for  the  cus¬ 
tomers.  and  it’s  likely  true  for  the 
standards  bodies.  But  the  jury  Is  still 
out  on  the  vendors,  especially  IBM 
and  Microsoft.  I 
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Security 
Lessons 
From  Israel 

ONE  OF  THE  differ¬ 
ences  between  how 
Israeli  and  American 
companies  handle  IT  securi¬ 
ty  is  simple:  seriousness.  We 
have  yet  to  treat  IT  security 
as  a  paramount  issue.  But 
as  the  US.  enters  a  time  of 
heightened  threats,  wc  can  adapt 
some  Israeli  lessons  for  our  own 
purposes. 

Eveiy  corporation  must  have 
someone  who  reports  to  the  chief  se¬ 
curity  officer  and  has  overall  respon¬ 
sibility  for  the  security  and  protec¬ 
tion  of  hardware.  Routers,  switches 
and  storage  devices  must  be  invento¬ 
ried  and  supervised  against  tamper¬ 
ing  or  theft. 

Security  for  PCs 
and  local  communi¬ 
cations  networks 
must  be  assured 
through  best  prac¬ 
tices  and  personal 
attention.  Israel  has 
no  companies  the 
size  of  those  in  the 
Fortune  SOO,  and 
that  smaller  size 
makes  it  easier  for 
security  officers  at 
Israeli  firms  to  monitor  IT  opera¬ 
tions.  Still,  the  consequences  of  even 
a  minor  attack  on  Israeli  IT  infra¬ 
structure  are  potentially  so  deadly 
that  greater  security  awareness  is 
essential. 

Companies  need  to  treat  software 
security  as  a  separate  discipline,  with 
dedicated  reviews  and  vendor  certi¬ 
fications.  If  vendors  can't  help  build 
and  verify  security  for  their  prod¬ 
ucts.  look  elsewhere. 

Communications  security  should 
not  take  second  place  —  indeed  re¬ 
dundant  telephone  and  data  systems 
should  be  tested  on  an  random  basis 
and  fully  integrated  into  the  IT  secu¬ 
rity  plan. 

A  careful  and  up-to-date  review  of 
legal  and  contractual  obligations  re¬ 
lated  to  IT  security  should  be  built 
into  a  corporate  curriculum  designed 
to  protect  hardened  IT  assets. 

An  advantage  Israeli  firms  have  is 
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the  flow  of  IT  talent  between  the 
armed  forces  and  the  private  sector. 
This  gives  companies  a  ready  supply 
of  well-trained,  experienced  person¬ 
nel.  many  of  whom  have  formed  long¬ 
term  working  relationships  with  their 
military  colleagues.  While  U.S.  com¬ 
panies  may  not  be  able  to  call  upon 
military  personnel,  they  can  promote 
industry  associations,  support  work¬ 
ing  groups  and  build  corporate  part¬ 
nerships  for  IT  security.  They  must 
move  from  competing  in  IT  security 
to  cooperating 

Companies  must  produce  a  review 
of  computerized  data  systems  and  or¬ 
ganize  damage  assessments  and  re¬ 
covery  plans  in  the  event  of  an  attack. 
Israel’s  constant  exposure  to  external 
threats  has  bred  planning  for  the 
worst  with  sophisticated  IT  skills. 

U.S.  IT  managers  must  form  relation¬ 
ships  with  U3.  government  officials 
so  that  both  sides  understand  the  oth¬ 
er’s  needs. 

Finally,  it's  time  companies  send  a 
signal  to  IT  personnel  by  funding 
diploma-level  course  work  for  securi¬ 
ty.  Who  know-s,  maybe  the  U.S.  gov¬ 
ernment  will  give  its  stamp  of  ap¬ 
proval  to  security  education,  similar  to 
what  Israel's  Ministry  of  Education 
does,  by  funding  student  loans.  It's 
time  to  get  serious.  I 

DAVID  FOOTE 

Building 
Confidence  in 
Tough  Times 

A  FEW  YEARS  of  down¬ 
sizing,  belt-tightening 
and  fanatical  attention 
to  ROI  have  tested  IT  profes¬ 
sionals’  patience  and  confi¬ 
dence.  Many  have  been 
through  tough  economic 
times  before,  and  they’re  cop¬ 
ing  reasonably  well  But  they're  not 
dealing  as  well  with  fears  of  terrorism 
and  concern  about  the  Iraq  war.  These 
have  left  most  people  conKised  and 
uncertain  and  searching  for  sources  of 
stabUity  and  comfort  both  at  work  and 
at  home. 

How  much  can  an  employer  help?  A 
lot.  it  turns  out.  This  column  has  fo¬ 
cused  on  successful  IT  management 
practices  for  four  years,  and  a  glance 
backward  reveals  a  treasure  trove  of 
practical  strategies  and  ideas  ripe  for 


today.  They  needn’t  be  an¬ 
chored  in  altruism:  they're 
all  profitable  business  prac¬ 
tices  within  the  grasp  of 
any  employer. 

The  powrer  of  process.  You 
may  think  that  the  recent 
attention  to  project  man- 
.igement  practices  is  being 
driven  strictly  by  budget 
controls,  risk  aversion  and 
a  desire  to  reduce  complex¬ 
ity.  But  think  again.  Doing 
things  in  a  routine,  pre¬ 
dictable  manner  builds  fa¬ 
miliarity  and  confidence, 
which  IT  workers  are  crav¬ 
ing  right  now.  What  better 
antidote  for  stress  than  working  with¬ 
in  a  system  of  well-defined  beginnings  j 
and  endings,  systematic  approaches  to  | 
managing  ponfoUos  of  concurrent 
projects,  and  stringent  attention  to 
communication  and  collaboration  is¬ 
sues.  especially  when  problems  arise? 

Organizations  should  be  investing  in  | 
project  management  as  a  key  strategy 
<as  well  as  corporate  cultural  beacon) 
to  become  more  adaptive,  responsive 
and  profitable  in  a  rapidly  changing 
business  enviroomeni.  Best  practice: 
Organize  projea  management  offices, 
staffed  by  both  business  and  IT  work¬ 
ers.  and  make  them  responsible  for 
training  workers.  These  offices  would 


find  ways  to  incorporait* 
project  management  into 
daily  routines  and  serve  as 
project  management  infor¬ 
mation  repositories. 

Focus  on  transMon  issues. 
Business  leaders  are  noto¬ 
rious  for  undermining 
change  initiatives  by  fail¬ 
ing  to  anticipate  who  will 
have  to  let  go  of  what  and 
for  not  adequately  prepar¬ 
ing  their  workers  for  the 
psychological  and  emo¬ 
tional  adjustments  needed 
in  new  situations.  Look  no 
further  than  recent  heavy- 
handed  workforce  reduc¬ 
tions  and  the  deep  resentment  still 
palpable  among  those  workers  who 
kept  their  jobs. 

The  management  challenge  is  to  get 
people  to  stop  doing  things  the  old 
way.  which  requires  attending  to  ex¬ 
tremely  unsettling  personal  stuff  in 
projects,  workload,  pay  and  careers. 
That  can't  be  accomplished  imperson¬ 
ally.  Required  road  map:  Managing 
Transirions;  Making  the  Most  of 
Change,  by  William  Bridgc.s. 

Pay  attmtioft  to  ratention.  Lack  of  com¬ 
mitment  is  the  major  reason  you  lose 
good  people,  or  at  least  see  tl^eir  pro¬ 
ductivity  decline.  Among  the  top  20^ 
of  your  best  performers  (the  ones  you 
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can't  afford  to  lose),  some  are  bound 
to  ]ea\'e.  even  in  a  rviien  economy 
Ever>'thing  that  binds  them  to  their 
jobs  and  to  their  employer  needs  to  be 
unearthed  and  deftly  managed,  espe- 
ciall>  now  that  ihc>-  arv  frustrated  by 
increased  workloads.  Build  their  lo\'al- 
ty  with  thoughtful,  wcll-cxecutcd  re¬ 
tention  strategies  and  a  willingness  to 
listen  and  coniinually  recalibratc- 
Whai  you  do  with  the  other  80**«  is  ar¬ 
guably  less  important. 

Chaivtar  and  ethics  malter.  How  we 
handle  ourselves  and  treat  others  i» 
even  more  important  in  unscnled 
times,  because  perceptions  are  more 
emotionally  charged.  Ethical  issues 
aren't  simply  about  right  and  wrong: 
they’re  about  making  tough  choices  in 
a  brutal  world.  Your  superiors,  cus¬ 
tomers  and  peers  take  character  and 
ethics  into  account  far  more  than  you 
realize.  Required  reading:  Daniel 
(ioleman's  books  about  emotional  in¬ 
telligence  and  the  writings  on  ethical 
issues  in  engineering  by  Hiram  Col¬ 
lege  ethics  professor  Kenneth  Aipem. 

Confident  people  perform  at  higher 
levels.  That’s  the  kind  of  ROI  you  can't 
ignore.  I 
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>More  talumisls  aM  Ma  lo  arctwes  ol  prewxn 
cMnre  are  on  or  Web  sse 


Forgotten  Father 

0  HE  PEiSON  who  seems  lo 
h»re  been  forgonen  aboul  in 
the  operating  system  history  ‘The 
Sloiy  So  Far'  lOuKkLink  36541]  is 
the  late  Gary  Mdal.  whose  CfVM 
was  the  predominant  miaocom- 
puter  operating  system  ot  the  1970s 
and  IS  gener^  regarded  as  the 
core  of  MS-DCS.  He  was  the  tnie 
lather  of  modem  computing 
Fred  Cooper 
Saratoga  ^ririgs.  NX 


Looking  Past  ROI 

GnrENTNEFACTthatthemaior- 
tty  of  costs  associated  with  IT 
investments  will  occur  during  oper¬ 
ations  (and  not  during  the  tradition¬ 
al  investment  period  d  design  and 
building).  I  wish  all  those  caicufat- 
ing  ROI  loads  of  ludi  pThe  Next 
Chapter  ROl.'QuickLink 35564). 
Please  teH  me  where  the  invest¬ 
ment  stops?  Financial  manage¬ 
ment  of  IT  is  tnHy  essential  and 


easier  than  most  people  ttvdi.  A  hfe 
cycle  approach  is  essential,  how¬ 
ever.  WeN-pubh^ied  approaches 
are  Ihose  of  John  Thorp  and  Dan 
Remenyi 
Egon  Borghout 

Professor  o/hurimss  and  ICT. 
University  of  Greningrn. 
Hotterdam,  Netherlands. 
CMherghaao^eco-rus^jd 


Not  a  Strong  Suit 

Although  IT  IS  TIME  that  many 
times  management  reluses  to 
perform  due  diligence  on  IT  nvest- 
ments.  I  must  poirtt  out  that  some  IT 
shops  refuse  to  even  provide  ade¬ 
quate  informalion  to  mdie  an  in¬ 
formed  decis«n  [*Save  the  Suits 
From  Themselves.*  (3uickLink 
36692] 

I  spent  several  years  working  on 
a  maior  upgrade/conversion. 
busmess  representatives  were  hnat- 
ly  allowed  to  initiate  an  open  discus¬ 
sion  where  al  of  the  options  codd 
be  presented,  we  found  that  the  CX) 


had  slipped  m  ahead  of  us  and 
'presdd*  the  sponsors  with 
promises  that  were  never  kept  That 
CIO  moved  on  before  the  system 
went  live  vid  before  the  biAmess 
could  see  exKtty  1^  4  had  m- 
vestedn  There  must  be  an  honest 
representative  involved  in  die 
process  who  has  the  best  long- 
lerni  mieresls  of  the  business  n 
mmd  and  not  iu5t  he  resune 
Chuck  Houle 

Senior  consultant.  Impac. 
Portland,  Ore. 


Trapped  in  NT 

My  SUSWess  (5  staying  wi 
^^f  4  lor  the  foreseeable  fu¬ 
ture  for  the  same  reason  that  many 
others  are  ■  it's  stable  and  rekable 
and  runs  withm  the  tootpnnt  ot  our 
exisling  server  hardware  [QiKk- 
Link36543]  Mehadconsideted 
upgrading  to  Windows  2000.  but 
that  option  vanished  preny  qucMy 
when  )d3  was  released  Windows 
2000  suddenly  became  unavail¬ 


able  from  local  reselers.  Many  of 
oif  appkeaPons  woiid  siwive  the 
transition  to  Wndows  2000.  but 
new  versions  would  be  needed  lo 
go  to  XP.  The  cost  of  appkciton 
upgrades,  faster  servers  and  larger 
storage  makes  the  mp  to  XP  across 
the  board  prohMwe  lor  now  Som 
asense.weare  trapped' and  yotf 
arbde  suggests  that  we  have  lots  of 
company 
Gregory  Utiak 
Consulronr.  Toronto 

COMPUTERWORLO  welovnes 
comments  from  its  readers  Leders 
wi  be  edited  for  brewiy  and  dinty. 
They  should  be  addressed  lo  Jamie 
EcMe.  letleis  edtor.  Computarworid. 
PO  Boi  9T71. 500  Old  (^ormeriKut 
FM.  Framingham.  Mass  01701. 

Fax  (506)  679-4843 
E-tna4.  leners(4conriputervvorld  corn 
InckxJe  an  address  and  phone  lun- 
ber  lor  mmediale  venkcation 


(More  Men  on  these  ant  other 
topes  ue  on  ou  Web  see 


EMC  REDEFINES 
HIGH-END  STORAGE. 

Again. 

Introducing 
Direct  Matrix 
Architecture. 

OnlySymmetrix' 
DMX  HAS  IT. 


EMCr 

where  information  lives 


EMC’s  new  Symmetrix  DMX  series  with  Direct  Matrix  Architecture. 

4  times  the  internal  bandwidth  and  lo  times  the  cache  bandwidth  of  any  other  storage  system. 
100%  software  compatibility.  Unprecedented  application  performance,  protection  and  avaiiabiiity. 
And  ait  with  surprising  affordability.  Now  high-end  storage  has  a  new  high  end. 

emc.com/dmx  or  call  i.866.symm.dmx/i.866.796.6369 

EMC'.  EMC.  and  Symmetrix  arc  registered  trademarks  and  Direct  MatrU  Architecture  and  urhere  informaiion  iives  are  tradentarks  of  EMC  Corporation. 

All  other  trademarks  used  herein  are  the  property  of  their  respective  owners.  C  :oo3  EMC  Corporation.  All  rights  reserved. 
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Q«A 

MaUng  the  Connection 

Netegrity  CTO  Deepak  Taneja  (left) 
discusses  the  future  of  identity  and 
access  management  technologies  in 
an  environment  transformed  by  the 
Internet  and  in  which  the  definition  of 
an  application  is  changing.  Pegs  34 
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SECURITY  MAMABER'S  JOURNAL 

PomPolcyCalarsa 
MMon  Dobr  Customer 

Vince  'Hiesday  decides  that  strict  policies 
against  pornographic  e-mail  messages 
will  have  to  bend  a  bit  when  one  offender 
turns  out  to  be  a  rep  for  his  company's 
best  customer.  Page  40 


Scope  Creep  and 
Exchange  Server  2003 

Realizing  the  full  benefits  of  Micro¬ 
soft’s  latest  e-mail  server  software  will 
require  much  more  than  just  upgrading 
existing  e-mail  servers,  writes  Robert  L 
MitchelL  Page  42 


Users  say  they’ve  experienced  a  few 
glitches,  but  the  high-end  operating  system 
has  largely  delivered  on  its  reliability  and 
scalability  promise.  By  Carol  Sliwa 


Running  mission-critical  appucations  on  an 
unproven  operating  system  b  too  dicey  for  many 
corporations  to  stomach.  But  three  trailblazers  now 
running  Windows  2000  Datacenter  Server  say  they 
had  good  reasons  to  consider  it 
Microsoft  Corp.’s  Windows  Datacenter  Program  calls 
for  well-establisJ^  hardware  makers  to  sell,  support  and 
test  the  product  in  configurations  guaranteed  to  produce 
the  sort  of  reliable  and  stable  results  that  customers  of 
rival  Unix  systems  expect 

And  Wmdows  Datacenter  Server  is  a  logical  considera- 
don  for  conqanies  using  Microsoft  software,  particularly 
those  pulling  the  limits  of  eight-way  boxes  running  S(^L 
Server  on  Windows  2000  Advanced  Server.  Datacenter 
Server  scales  to  32  processors,  and  its  license  allows  for  as 
many  partitions  as  desired  on  a  sin^  physical  server. 

So  the  only  dtoioe  for  a  32-way  box  has  been  the 
ES7000  from  Unisys  Corp  in  Blue  Bell.  Pa.  But  three  early 
adopters  who  were  ^ad  to  Hnd  the  ES7000  say  their  Data¬ 
center-based  systems  have  largely  delivered  on  the 
promise  of  hi^  availability,  scalability  and  reliability. 

I^KAYC^^ 

Mary  Kay  Inc  in  Addison,  Texas,  purchased  a  32-way 
ES7000  server  in  April  2001  to  cope  with  the  explo¬ 
sive  growth  of  its  online  offerings. 

Prior  m  that  the  cosmetics,  skin  care  and  dietary  prod¬ 
ucts  manufacturer  and  distributor  had  clustered  four-way 
servers,  upgraded  processors  and  shifted  from  Windows 
NT  to  Windows  2000  Advanced  Server 
But  Morris  Koeneke,  database  services  manager,  says 
distributing  databases  evenly  was  becoming  difflcult 
Database  replication  was  gobbling  up  resources.  Sing^ 
user  interactions  could  trigger  requests  to  multiple  dau- 
base  servers,  slowing  the  network.  And  Mary  K^  was 
outgrowing  servers  before  its  leases  were  up. 

The  company  went  live  in  June  2001  with  hs  ES7000.  ini¬ 
tially  on  Windows  Advanced  Server.  Using  Unisys  tools.  IT 
staffers  carved  up  the  32 -processor.  32GB  frame  into  four 
ei^t-CPU  partitions  arul  configured  them  as  two  clusters: 
one  for  S(2L  Server  2000  production  databases  and  the  oth¬ 
er  for  testing,  staging  ai^l  fail-over. 
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Mar>'  Kay  was  able  to  consolidate  four  production 
database  sen>'ers  to  rwo.  but  it  soon  needed  more 
horsepower  and  shifted  to  Windows  Datacenter  in 
April  2002.  Administrators  converted  the  four  eight- 
way  partitions  to  two  16-CPU,  16GB  partitioas:  one  for 
the  production  SQL  Ser>'er  and  the  other  for  backup. 

“Datacenter  is  basically  Advanced  Server  on 
steroids,"  Koeneke  says.  "It's  the  same  operating  sys¬ 
tem.  It  just  has  gates  opened  up  that  let  you  manage 
large  seners.” 

Consolidating  to  a  single  SQL  Server  instance  for 
e-commerce  improved  performance  and  eliminated 
redundant  databases  and  replication  headaches,  says 
Koeneke.  Processing  capacity  went  from  1,800  orders 
per  hour  to  more  than  3,000.  And  Koeneke  says  prob¬ 
lems  were  scarce  and  insignificant  compared  with 
prior  Windows  versions. 

Mary  Kay  purchased  three  more  ES7000s  last  year 
for  3  supply  chain  initiative.  One  has  a  16-CPU  in¬ 
stance  of  SQL  Server  and  two  eight -CPU  partitioas  of 
BizTalk  Server.  Another  has  SQL  Server  running  on  12 
CPUs,  clustered  to  the  16<^PU  SQL  Server  on  the  oth¬ 
er  box.  and  five  four-way  partitions  for  Mar>'  Kay's  T.D. 
Edwards  &  Co.  enterprise  resource  planning  <£RP) 
system.  The  third  box  is  for  development  and  testing. 

Plans  call  for  the  BizTalk  and  ERP  database  servers 
to  be  consolidated.  Koeneke  says  he  also  hopes  to 
run  a  four-way  Datacenter  cluster  with  three  active 
16'way  nodes  and  one  passive  IG-way  node  hosting 
all  of  the  company’s  databases. 

Koeneke  sa>*s  he  isn't  convinced  that  total  cost  of 
ownership  is  cheaper  with  Datacenter  Server  than  it 
would  be  with  Unix,  but  given  Mary  Kay's  commit¬ 
ment  to  Microsoft  products.  Datacenter  made  sense. 
His  only  gripe  is  with  the  Datacenter  program,  which 
Microsoft  is  revamping.  Under  the  existing  program, 
the  hardware  provider  is  supposed  to  be  the  single 
point  of  contact  for  problems,  yet  Koeneke  says  he 
often  waits  for  answers  as  vendors  point  fingers. 

Koeneke  would  also  like  nwre  choice  in  (he  sub¬ 
systems  that  attach  to  his  Datacenter  Server  beyond 
those  in  the  exact  configuration  Unisys  tested.  "They 
tell  us  how  great  everyone  gets  along  and  that  we 
have  one  throat  to  choke,"  he  says.  "But  (he  reality  is 
we  get  total  certification  on  a  solution  provided  by 
one  OEM.  Our  nexibllity  is  limited." 


PREMERA  DOWNSIZES 

Premera  Blue  Cross  in  Mountlake  Terrace.  Wash., 
wanted  to  replace  the  homegrown,  mainframe- 
based  core  systems  suite  that  its  3,000  employees 
used  to  administer  membership,  enrollment  and 
claims.  Tlie  S3  billion  health  insurance  company.  w*ith 
1.4  million  members  in  the  l^icific  Northwest,  already 
used  Windows  on  the  desktop:  has  about  450  Win¬ 
dows  servers  running  e-mail,  file-and-print  scmces 
and  various  applications;  and  planned  to  use  Micro¬ 
soft's  dev'elopment  environment. 

CIO  Alan  Smit  says  he  saw  an  opportuni¬ 
ty  to  focus  on  a  single  vendor,  even  (hough 
he  shared  the  general  industry  skepticism 
ab<»ut  Microsoft’s  ability  to  support  enter¬ 
prise  transaction  processing. 

Careful  analysis  of  the  technology;  bench¬ 
marks  and  Datacenter  program  helped  ease 
his  concerns.  So  did  the  Windows-based 
client/server  claims  and  membership  ad¬ 
ministration  system  Premera  bought  from 
TriZetio  Group  Inc.  in  Newport  Beach.  Calif. 

In  July  2001,  Premera  went  live  with  two  ESTOOOs 
running  Datacenter  Server  —  one  32-way  system  and 
one  l(v-w’ay  box  in  a  clustered,  fault-tolerant  cortfigu- 
ration.  IT  staffers  created  an  eight-way  partition  on 
the  32-way  box  to  run  SQL  Server  and  used  a  clus¬ 
tered  eight-way  partition  on  the  i6-way  box  as  a  fail¬ 
over  system.  That  paid  off  late  last  year  when  a  mem¬ 
ory  problem  caused  the  active  server  to  crash.  Users 
noticed  only  a  20-second  slowdown  as  the  second 
node  took  over  the  workload,  says  Bob  Crownharl. 
an  IT  director  at  Premera. 

Premera  now  has  172.000  members 
loaded  into  the  Datacenter-based  system 
and  has  been  nmning  nonstop  since  August, 
when  it  took  dow-n  the  system  to  address  a 
hardware  problem,  says  Crownhart. 

The  company  plans  to  move  to  16-W3y 
partitions  as  it  scales  to  more  than  1  nullion 
members.  “Knowing  wc  can  scale  beyond 
eight-way  panition.s  is  the  biggest  comfort 
Thai's  what  we  needed  to  convince  our¬ 
selves  that  we  could  scale  (n  1.4  million 
members  and  beyond,"  Crownhart  says,  not¬ 
ing  that  the  target  completion  date  is  2005. 

Premera  is  also  looking  to  shift  online  analytic 
processing  from  its  mainframes  to  Datacenter  Server. 
“The  fewer  plaiforttLs  I  have  to  support,  the  better." 
Smit  .says. 

HRST  AMERICAN  MAXES  OUT 

^  irsi  American  Title  lasurance  was  pushing  CPU 
•  utilization  in  Us  eight-way  Compaq  ProLiant 
'  database  servers  to  over  90%  when  it  decided  to 
convert  to  a  32-way  Unisys  ES7D00  running  Win¬ 
dows  2000  Datacenter  Server. 

At  the  time,  the  Santa  Ana.  Calif. -based  insurer 
was  halfway  through  the  rollout  of  its  homegrown 
First  American  Software  Technology  (FAST)  Trans¬ 
action  System,  a  consolidated  title  and  escrow  sys¬ 
tem  for  10.000  users  in  1,200  offices,  says  CIO  Larry 
Codec.  Tuning  the  application  to  make  fewer  data¬ 
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base  calls  was  one  w'ay  to  solve  the  problem.  Porting 
the  databa.se  server  to  Unix  was  another  possibility, 
but  that  would  have  meant  an  extra  six  months  to 
rewrite  application  code  in  Java.  sa>’S  Codec. 

Yet  another  choice  was  splitting  the  database  and 
creating  a  number  of  regional  databa.ses.  However. 
Codec  frowned  on  that  option  from  a  support  and 
maintainability  standpoint. 

First  American  was  adding  hundreds  of  users  each 
week  and  didn't  want  to  stop  (he  rollout's  momen¬ 
tum.  so  it  turned  to  a  bigger  box  for  its  application's 
SQL  Server  2000. 

Codec  figured  (hat  switching  to  an 
ES7000  wouldn't  stop  the  rollout  for  more 
than  a  few  weeks.  Coordinating  the  setup 
with  Unisys.  Microsoft  and  EMC  Corp., 
which  was  supplying  a  storage-area  net¬ 
work.  required  about  six  weeks.  The  con¬ 
version  itself  took  12  to  16  hours. 

But  the  rush  through  the  migration  proc¬ 
ess  wasn't  without  incident.  A  bad  ES^)00 
CPU  caused  a  business  interruption,  and  in¬ 
correct  settings  caused  two  more  outages. 
Codec  says.  He  advises  users  to  make  sure 
all  processors  are  burned  in  appropriately  and  all 
settings  arc  tripic-checked  before  going  live. 

As  the  system  load  soared.  First  American  encoun¬ 
tered  a  problem  with  the  Datacenter  Server's  sched¬ 
uler,  which  is  part  of  the  operating  system's  kernel. 
The  operating  system  froze  when  the  scheduler 
backed  up  under  extremely  hcav)*  load.  Codec  says. 

"Adding  that  number  of  users  that  quickly  to  a  sys¬ 
tem.  >'ou’re  going  to  find  the  stress  points  pretty 
quick."  he  says. 

Microsoft  tested  the  application  to  identi¬ 
fy  the  problem  and  developed  a  mure  cfli* 
ciem  scheduler  that  will  ship  in  April  with 
Windows  Server  2003,  Codec  says.  First 
American  plans  to  upgrade  as  soon  as  it  can. 

In  the  meantime,  turning  off  the  affinity 
setting,  which  can  dedicate  processors  to  a 
specific  system,  such  a.s  the  operating  sys¬ 
tem  or  the  dat^se.  has  help^  to  oAload 
some  of  the  work  from  SQL  Server  and  re¬ 
duce  the  overall  load.  Codec  says.  Reducing 
the  frequency  of  the  database  monitoring 
and  application  on  the  EMC  storage  system 
also  helped,  he  adds. 

Unlike  other  companies  that  partition  their 
ESTOOOs.  First  American  ha.s  all  32  proces.sors  m,inag- 
ing  the  workload  of  the  operating  system  and  the  data¬ 
base.  Codec  says  he  consideapd  i6-way  panitions,  but 
uncertainty  about  the  effect  on  utilization  led  his  team 
to  use  all  the  processors  and  add  a  second  ES7000  at 
its  Dallas  site  for  redundancy  and  fault  tolerance. 

The  Unisys  box  now  runs  at  40%  capacity,  so  First 
American  has  plenty  of  headroom.  Codec  says.  And 
he  adds  that  he  has  been  happy  with  the  Datacenter 
Server  technology. 

"I  would  equate  the  ES7000  to  other  things  that 
I've  known  and  run  in  the  past,  which  include  the 
ElOOOO  from  Sun,  and  the  Hitachi  and  IBM  main¬ 
frames."  he  says.  “It’s  every  bit  as  reliable." 

Codec  says  he  never  had  a  scheduler  problem  on 
an  IBM  mainframe,  but  he  has  encountered  problems 
on  large  systems  where  the  vendor  response  has 
been,  “You  need  to  upgrade  to  the  new  release."  I 
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Mary  Kay  was  ^le  to  consolidate  four  production 
database  servers  to  two.  but  it  soon  needed  more 
horsepower  and  shifted  to  Windows  Datacenter  in 
April  2002.  Administrators  converted  the  four  eight¬ 
way  partitioas  to  two  16-CPU,  16GB  partitions:  one  for 
the  production  SQL  Server  and  the  other  for  backup. 

"Datacenter  is  basically  Advanced  Server  on 
steroids.''  Koeneke  says,  "b’s  the  same  operating  sys¬ 
tem.  It  just  has  gates  operved  up  that  let  you  manage 
large  servers." 

Consolidating  to  a  single  SQL  Server  instance  for 
e-commerce  improved  performance  and  eliminated 
redundant  databases  ar>d  replication  headaches,  says 
Koeneke.  Processing  capacity  went  from  1.800  orders 
per  hour  to  more  than  3,000.  And  Koeneke  says  prob¬ 
lems  were  scarce  and  insignificant  compared  with 
prior  Windows  versions. 

Mary  Kay  purchased  three  more  ESTOOOs  last  year 
for  a  supply  chain  initiative.  One  has  a  16-CPU  in- 
stattce  of  SQL  Server  attd  two  eight-CPU  partitions  of 
BizTalk  Server.  Another  has  SQL  Server  running  on  12 
CPUs,  clustered  to  the  16-CPU  SQL  Server  on  the  oth¬ 
er  box.  and  Ove  four-way  partitions  for  Mary  Kay’s  )J). 
Edwards  &  Co.  enterprise  resource  planning  (ERP) 
system.  The  third  box  is  for  development  and  testing. 

Plans  call  for  the  BizTalk  and  ERP  database  servers 
to  be  consolidated.  Koeneke  says  be  also  hopes  to 
run  a  four-way  Datacenter  cluster  with  three  active 
16-way  nodes  and  one  passive  16-way  node  hosting 
all  of  the  company's  databases. 

Koeneke  says  he  isn't  convinced  that  total  cost  of 
ownership  is  cheaper  with  Datacenter  Server  than  it 
would  be  with  Unix,  but  given  Mary  Kay's  commit- 
meni  to  Microsoft  products.  Datacenter  nude  sense. 
His  only  gripe  is  with  the  Datacenter  program,  which 
Microsoft  is  revamping.  Under  tbe  ezistiog  program, 
the  hardware  provider  is  supposed  to  be  the  stn^e 
point  of  contact  for  pnfolems,  yet  Koeneke  says  be 
often  waits  for  answers  as  vendors  point  fingers. 

Koeneke  vrould  also  like  more  choice  in  the  sub¬ 
systems  that  attach  to  his  Datacenter  Server  beyond 
those  in  the  exact  configuration  Unisys  tested.  "They 
tell  us  bow  great  everyone  gets  along  and  that  we 
have  one  throat  to  choke,"  be  says.  "But  tbe  reality  is 
we  get  total  certilkation  on  a  solution  provided  by 
one  OEM.  Our  flexibUity  is  limited." 


PREIIERIi  DOWNSIZES 

Premera  Blue  Cross  in  Mountlake  Terrace.  Wash., 
wanted  to  replace  tbe  homegrown,  mainframe- 
based  core  systems  suite  that  its  3JX)0  employees 
used  to  administer  membership,  enrollment  and 
claims.  The  S3  billion  health  Insurance  company,  with 
1.4  million  members  in  tbe  Pacific  Northwest,  already 
used  Windows  on  the  desktop;  has  about  4S0  Win¬ 
dows  servers  running  e-maiL  file-and-print  services 
and  various  applications;  and  planned  to  use  Micro¬ 
soft's  development  environment. 

CIO  Alan  Smit  says  he  saw  an  opportuni¬ 
ty  to  focus  on  a  single  vendor,  even  though 
be  shared  the  general  industry  skepticism 
about  Microsoft's  ability  to  support  enter¬ 
prise  transactioo  processing. 

Careful  analysis  of  the  technology,  bench¬ 
marks  and  Datacenter  program  helped  ease 
his  concerns.  So  did  the  Wmdows-based 
client/server  claims  and  membership  ad¬ 
ministration  system  Premera  bought  from 
Tri2>tto  Group  Inc.  in  Newport  Beach,  Calif 
In  July  2001,  Premera  went  live  with  two  ESTOOOs 
runnit^  Datacenter  Server  —  one  32-way  system  and 
one  16-way  box  in  a  clustered,  fault-tolerant  configu¬ 
ration.  IT  staffers  created  an  eight-way  partition  on 
the  32-way  box  to  run  SQL  Server  and  used  a  clus¬ 
tered  eight-way  partition  on  the  Ib-way  box  as  a  fail¬ 
over  system.  That  paid  off  late  last  year  when  a  mem¬ 
ory  problem  caused  the  active  server  to  crash.  Users 
noticed  only  a  20-second  slowdown  as  the  second 
node  took  over  the  workload,  says  Bob  Crownhart. 
an  IT  director  at  Premera. 

Premera  now  has  172,000  members 
loaded  into  the  Datacenter-based  system 
and  has  been  running  nonstop  since  August, 
when  U  took  down  the  system  to  address  a 
hardware  problem,  says  Crownhart 
The  company  plans  to  move  to  16-way 
partitions  as  it  scales  to  more  than  1  million 
members.  "Knowing  we  can  scale  beyond 
eight-way  partitions  is  the  biggest  comfort 
That's  what  we  needed  to  convince  our¬ 
selves  that  we  could  scale  to  L4  million 
members  and  beyond."  Crownhart  says,  iwt- 
ing  that  the  target  completion  date  is  2005. 

Premera  is  also  looking  to  shift  online  analytic 
processing  from  hs  mainframes  to  Datacenter  Server. 
“The  fewer  platforms  I  have  to  support  tbe  better." 
Smit  says. 

First  American  Title  Insurance  was  pushing  CPU 
utilization  in  its  eight-way  Compaq  Proliant 
database  servers  to  over  90%  when  it  decided  to 
convert  to  a  32'way  Unisys  ESTOOO  running  Win¬ 
dows  ^)00  Datacenter  Server. 

At  tbe  time,  tbe  Santa  Ana,  Calif-based  insurer 
was  halfway  through  tbe  rollout  of  its  homegrown 
First  American  Software  Technology  (F^T)  Trans¬ 
action  System,  a  consolidated  title  and  escrow  sys¬ 
tem  for  10i>00  users  in  1,200  offices,  says  CIO  Larry 
Codec  'nming  the  application  to  make  fewer  dau- 
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base  calls  was  one  way  to  solve  the  problem.  Porting 
the  database  server  to  Unix  was  another  possibility, 
but  that  would  have  meant  an  extra  six  months  to 
rewrite  application  code  in  Java,  says  Codec 

Yet  another  choice  was  splitting  tbe  database  and 
creating  a  number  of  regional  databases.  However. 
Codec  frowned  on  that  option  from  a  support  and 
maintainability  standpoint. 

First  American  was  adding  hundreds  of  users  each 
week  and  didn't  want  to  stop  the  rollout's  momen¬ 
tum,  so  It  turned  to  a  bigger  box  for  its  application's 
SQL  Server  2000. 

Codec  figured  that  switching  to  an 
ESTOOO  wouldn't  stop  the  rollout  for  more 
than  a  few  weeks.  Coordinating  the  setup 
with  Unisys,  Microsoft  and  EMC  Corp.. 
which  was  supplying  a  storage-area  net¬ 
work,  required  about  six  weeks.  The  con¬ 
version  itself  took  12  to  16  hours. 

But  the  rush  through  the  migration  proc¬ 
ess  wasn’t  without  incident  A  bad  ESTOOO 
CPU  caused  a  business  interruption,  and  in¬ 
correct  settings  caused  two  more  outages. 
Codec  says.  He  advises  users  to  make  sure 
all  processors  are  burned  in  appropriately  and  all 
settings  are  triple-checked  before  going  live. 

As  the  system  load  soared.  First  American  encoun¬ 
tered  a  problem  with  the  Datacenter  Server's  sched¬ 
uler.  which  is  part  of  tbe  operating  system’s  kernel 
The  operating  system  froze  when  the  scheduler 
backed  up  under  extremely  heavy  load.  Codec  says. 

"Adding  that  number  of  users  that  quickly  to  a  sys¬ 
tem.  you’re  going  to  And  the  stress  points  pretty 
quick,”  he  says. 

Microsoft  tested  tbe  application  to  identi¬ 
fy  tbe  problem  and  developed  a  more  effi¬ 
cient  scheduler  that  will  sUp  in  April  with 
Windows  Server  2003,  Codec  says.  Fust 
American  plans  to  upgrade  as  soon  as  h  can. 

In  the  meantime,  turning  off  the  affinity 
setting,  which  can  dedicate  processors  to  a 
specific  system,  such  as  the  operating  sys¬ 
tem  or  tbe  database,  has  helped  to  offload 
some  of  the  work  ftom  SQL  Server  and  re¬ 
duce  tbe  overall  load.  Codec  says.  Reducing 
tbe  frequency  of  the  database  monitoring 
and  replication  on  the  EMC  storage  system 
also  helped,  be  adds. 

Uidike  other  companies  that  partition  their 
ESTOOOs,  Hrst  American  has  all  32  processors  manag¬ 
ing  the  workload  of  the  operating  system  and  tbe  data¬ 
base.  Codec  says  he  considered  IS-way  partitions,  but 
uncertainty  abmt  the  effect  on  utilization  led  his  team 
to  use  all  tbe  processors  and  add  a  second  ESTOOO  at 
its  Dallas  she  for  redundancy  and  foult  tolerance. 

The  Unisys  box  now  runs  at  40%  capacity,  so  First 
American  has  plenty  of  headroom.  Codec  says.  And 
be  adds  that  he  has  been  happy  with  the  Datacenter 
Server  technology. 

"1  would  equate  the  ESTOOO  to  other  things  that 
I've  known  and  run  fo  the  jnst,  which  include  the 
ElOOOO  from  Sun,  and  the  Hitachi  and  IBM  main¬ 
frames,”  be  says.  ”Ifs  every  bit  as  reliable* 

Codec  says  he  never  had  a  scheduler  problem  on 
an  IBM  mainlraffle,  but  be  has  encountered  problems 
on  large  systems  where  the  vendor  response  has 
been.  Tou  need  to  upgrade  to  the  new  release.”  I 
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YOU  CAN  DEPLOY  a]l  of  the 
firewalls  and  intrusion- 
detection  devices  money 
can  buy  to  protect  your 
network  hackers  and 
malicious  code,  but  when  it  comes  to 
truly  knowing  what's  happening  on 
your  network,  there's  no  substitute  for 
digging  through  system  log  files. 

Telltale  signs  that  appear  in  togs  offer 
strong  indications  that  you  may  have 
been  hacked,  say  experts.  The  follow¬ 
ing  should  raise  alarms  in  any  IT  ad¬ 
ministrator's  head:  long  entries  of  ran¬ 
dom  characters,  repeated  occurrences 
of  passwords  that  have  been 
changed  by  someone  using  a  user  ID 
of  "0"  and  a  null  log-in.  unexpected 
configuration  changes  to  systems  or 
devices,  and  a  sudden  increase  or  de¬ 
crease  in  the  number  of  log  messages 
gcneraietl.  to  name  just  a  few.  But  even 
with  these  known  indicators,  uncover¬ 
ing  hacker  activity  can  be  difficult. 

"Log  analysis  is  a  dirty  job."  says 
Chris  Kirschke,  senior  security  analyst 
at  Santa  Clara.  Calif.-based  Silicon  Val¬ 
ley  Bank,  where  1.200  users  in  27  loca¬ 
tions  create  25GB  of  log  data  every 
month.  “Logs  are  where  you  go  to  find 
out  what  has  happened."  Kirschke  says. 

System  logs  can  differ  slightly  from 
operating  system  to  operating  system, 
but  the>'  all  follow  a  general  format: 
date/time  stamp.  IP  address  of  the  sys¬ 
tem.  the  name  of  the  process  that  has 
created  the  log  entry  and  the  process 
ID  number  that  is  assigned  by  the  sys¬ 
tem.  Know  ing  the  format  of  a  log  entry 
for  a  legitimate  event  is  critical  to  be¬ 
ing  able  to  identify  red  flags. 


Digging  for  Clues 

One  expert  shows  you  how  it's  done 

Tina  Bird,  head  of  FT  systems  and  services  at  Stanford  University,  offered 
the  exatriplas  below  last  rnonth  durvig  a  live  webcast  sponsored  by  the 
Belhesda.  Md. -based  SANS  Institute 


Example  1 


Example  2 


Example  I  shows  a  loo  entry  from 
a  system  that's  nimino  Solars  as 
a  remote  host  attempts  to  connect 
to  the  network  through  a  process 
caled  a  remote  procedure  cal 
{RPO. 

However.'withthisdatabylt- 
seH.  we  rerfy  cant  teB  what's  go¬ 
ing  on.*  said  Bed.  But  A's  in  the 
next  entry,  shown  in  bample  2. 
where  things  get  nterestmo  and 
start  to  show  signs  of  a  bulfer- 
overfiow  attempL 


A  system  log  on  a  Unix  machine,  for 
example,  may  have  an  entry  that  ap¬ 
pears  legitimate  at  the  beginning  but 
contains  the  remnants  of  a  buffer-over¬ 
flow  exploit  at  the  end,  says  Chris 
Romeo,  an  incident  response  and  in¬ 
vestigative  expert  at  London-based 
Cable  &  Wireless  PLC. 

Although  Web  server  logs  aren't  as 
useful  to  intrusioo  analysis  as  system 


Bird.  The  random  numbers  and 
chtfacters  that  begin  on  the  third 
Hne  are  actually  data  that  the  at¬ 
tacker  is  uang  to  foice  the  vulner¬ 
able  application  to  generate  a 
buffer  overflow. ‘Anytime  you  took 
at  your  log  data  and  you  Arid  a 
large  quanbty  of  random  charac¬ 
ters  or  nonsense,  that's  worth  «n- 
vestigating.’  s^  Bird.  'That's  a 
good  sign  that  there’s  a  buffv 
overflow  or  tfi  attempt  to  teed  bad 
data  into  you  systam.' 

The  addition  of  new  user 
names  and  changes  to  passwords 
can  also  be  Indicators  of  maicious 
activity  on  Unix  systems.  For  ex¬ 
ample.  Uno  systems  oHan  assign 
accounts  to  iegHimate  processes. 
suchas'maTuINBb.* 

Examples 


A  close  look  at  system  logs 
provides  clues  to  ^ot  hacking  or 
worm  activity.  By  Dan  Verton 

Trace 
Evidence 


Everything  folowing  the  colon  n 
the  flial  Hne  of  the  1^  entry  in 
Sample  2  is  nodkng  mors  than  a 
tree-formteidmessaoethalindi- 
caies  m  error  has  occurred,  said 

logs  are.  there  are  entries  that  can  tip 
you  off  to  hacking  activity.  One  such 
entry  in  Web  servers  running  Internet 
Information  Server  includes  multiple 
occurrences  of  “_\ 

JeffRovelli.  an  FBI  special  agent  in 
New  Haven.  Conn.,  says  identifying 
and  locating  just  such  an  entry  was 
one  of  the  key  first  steps  that  led  to  the 
arrest  of  a  hacker  who  had  used  the 
vulnerability  to  gain  access  to  a  major 
e-commerce  company's  customer  data¬ 
base  for  use  in  a  major  scam.  Here’s  an 
example  of  this  type  of  suspicious 
entry,  also  known  as  the  Web  traversal 
vulnerability:  http://bost/iDdex.asp? 
something*..\..\..\-\WINNTsystem32\ 
cmd.exe’/c*DIR»e:\WINhm*.txt. 

Looking  for  Back  Doors 

Some  log  entries  can  also  show  how  a 
worm  may  be  exploiting  a  back  door 
left  open  by  another  malicious  intrud¬ 
er.  For  example,  in  September  2001,  the 
Nimda  worm’s  incessant  scanning  cre¬ 
ated  a  surge  in  tog  activity  that  should 
have  been  a  red  flag  to  many  adminis- 


In  Example  3.  the  perpetratu  of 
the  buffer  ovuflow  has  created  an 
account  named  *cgi*  using  the 
Unix  command  ‘adduser  ' 

Example  4 


Then,  in  Bcample  4,  the  hacker 
changes  the  password. 

Whet's  interesting  aboU  the 
last  two  enoiBS  Is  hat  the  hacker 
uses  the  user  name ‘ogT  in  hopes 
of  avoldng  detection  by  posing  as 
a  legitimate  process.  In  addflioa 
the  user  0  (uid)  in  Example  3  has 
been  set  to  0.  indcating  root-level 
access  to  the  system.  Ukewise. 
the  reference  in  the  last  Ine  of 
Example  4  -  changed  by  ((mJVO) 
-  indcates  the  hacker  changed 
the  password  for  the  account 
without  logging  into  the  system, 
which  is  another  red  flag. 

-DanVsrton 


trators.  Nimda  scaimed  for  16  known 
vulnerabilities,  including  the  Unicode 
and  directory  traversal  vulnerabilities, 
a  total  of  13  times  each.  That  meant 
that  every  time  a  Nimda-infected  sys¬ 
tem  tried  to  infect  another  system  it 
generated  208  log  entries. 

But  sometimes  log  entries  aren't 
enough.  For  example,  the  Slapper  Lin- 
ux/SSL  worm  discovered  in  September 
2002  exploited  a  buffer  overflow  in 
Secure  Sockets  Layer  (SSL)  Version  2. 
However,  log  entries  indicating  an  er¬ 
ror  only  show  up  when  the  worm 
probes  an  Apache  server  running  the 
patched  version  of  SSL.  says  Tina  Bird, 
head  of  IT  systems  and  services  at 
Stanford  University.  But  when  the 
worm  hits  a  vulnerable  system,  it 
leaves  no  evidence  in  the  Apache  togs 
or  in  the  system  logs,  she  says. 

Other  forms  of  malicious  code,  such 
as  IVojan  horses,  can  be  lurking  in 
your  systems  without  showing  up  in 
log  files,  according  to  Mike  Geraghty. 
vice  president  of  high  technology  in¬ 
vestigations  at  Newark.  N.f. -based  Pru¬ 
dential  Financial  Geraghty  says  it’s  im¬ 
portant  to  look  through  the  win.ini  and 
system.ini  files  for  suspicious  executa¬ 
bles  that  are  being  initiated,  as  well  as 
through  the  registry  for  odd  or  unusual 
.exe  or  .dU  files. 

“To  understand  (malicious)  behav¬ 
ior.  you  have  to  understand  what  the 
normal  behavior  is,"  says  Bird,  b 


(rators.  Nimda  scanned  for  16  known 
vulnerabilities,  including  the  Unicode 
and  directory  traversal  vulnerabilities, 
a  total  of  13  times  each.  That  meant 
that  ever)'  time  a  Nimda-infected  sys¬ 
tem  tried  to  infect  another  system  it 
generated  208  log  entries. 

But  sometimes  log  entries  aren't 
enough.  For  example,  the  Shipper  Un- 
ux/SSL  worm  discovered  in  S^tember 
2002  exploited  a  buffer  overflow  in 
Secure  Sockets  Layer  (SSL)  Version  2. 
However,  log  entries  indicating  an  er- 
ror  only  show  up  when  the  worm 
probes  an  Apache  server  running  the 
patched  version  of  SSL,  says  Tina  Bird, 
head  of  IT  systems  and  services  at 
Stanford  University.  Elut  when  the 
worm  hits  a  vulnerable  system,  it 
leaves  no  evidence  in  the  Apache  logs 
or  in  the  system  logs,  she  says. 

Other  forms  of  malicious  code,  such 
as  Tbajan  horses,  can  be  lurking  in 
your  systems  without  showing  up  in 
log  files,  according  to  Mike  (Sera^ty. 
vice  president  of  high  technology  in* 
vestigations  at  Newark.  N.L*based  Pru¬ 
dential  Financial.  Geraghty  says  it’s  im¬ 
portant  to  look  tfarou^  the  win-ini  anrf 
systenLini  files  for  suspicious  executa¬ 
bles  that  are  being  initiated,  as  well  as 
through  the  registry  for  odd  or  unusual 
.exe  or  ^111  files. 

‘To  utklerstand  [malicious]  behav¬ 
ior.  you  have  to  understand  n^t  the 
normal  behavior  is,”  says  Bird.  I 


You  CAN  DEPLOY  all  of  the 
firewalls  and  btrusioD- 
detection  devices  money 
can  buy  to  protect  your 
network  from  hackers  and 
malicious  code,  but  when  it  comes  to 
truly  knowing  what’s  happening  on 
your  network,  diere's  no  substitute  for 
digging  through  system  log  files. 

Telltale  signs  t^  appear  b  logs  offer 
strong  indications  that  you  may  have 
been  hacked,  say  experts.  The  follow¬ 
ing  should  raise  alarms  b  any  IT  ad- 
ministratOT’s  bead:  long  entries  of  ran¬ 
dom  charaaers,  repeated  occurrences 
of  passwords  that  have  been 
chatted  by  someone  using  a  user  ID 
of  ”0”  and  a  null  log-b.  unexpected 
configuration  changes  to  systems  or 
devices,  and  a  sudden  increase  or  de¬ 
crease  b  the  number  of  log  messages 
generated,  to  name  just  a  few.  But  even 
with  these  known  bdicators.  uncover¬ 
ing  hacker  activity  can  be  difficult. 

"Log  analysis  is  a  dirty  job.”  says 
Chris  Kirscfake.  senior  security  analyst 
at  Santa  Clata.  (3alif.-based  Silicon  Val¬ 
ley  Bank,  where  1.200  users  b  27  loca¬ 
tions  create  25GB  of  log  dau  every 
month.  ”Logs  are  where  you  go  to  fbd 
out  what  has  happened,”  Kirschke  says. 

System  logs  can  differ  slightly  from 
operating  system  to  c^>efatbg  system, 
but  they  aO  follow  a  general  format: 
datcAime  stamp.  IP  address  of  the  sys¬ 
tem.  the  name  of  the  process  that  has 
created  the  log  entry  and  the  process 
ID  number  that  is  assigned  by  the  sys¬ 
tem.  Knowing  the  format  of  a  log  entry 
for  a  legitimate  event  is  critical  to  be¬ 
ing  able  to  identify  red  flags. 
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A  system  log  on  a  Unix  machine,  for 
example,  may  have  an  entry  that  ap¬ 
pears  legitimate  at  the  bpginning  but 
contains  the  remnants  of  a  buffer-over- 
flow  exploit  at  the  end.  says  Chris 
Romeo,  an  bcident  response  and  in¬ 
vestigative  expert  at  London-based 
Cable  &  Wireless  PLC. 

Although  Web  server  logs  aren’t  as 
useful  to  btrusion  analysis  as  system 


A  close  look  at  system  logs 
provides  clues  to  ^ot  hacking  or 
worm  activity.  By  Dan  Verton 

Trace 
Evicdence 


logs  are.  there  are  entries  that  can  tip 
you  off  to  hacking  activity.  One  such 
entry  b  Web  servers  running  Internet 
Information  Server  includes  multiple 
occurrences  of  “A  A” 

Jeff  Rovelli,  an  FBI  special  agent  b 
New  Haven.  Conn.,  says  identifybg 
and  locating  just  such  an  entry  was 
one  of  the  key  first  steps  that  led  to  the 
arrest  of  a  hacker  who  had  used  the 
vulnerability  to  gam  access  to  a  mafor 
c-commerce  company's  customer  data¬ 
base  for  use  b  a  mafor  scam.  Here’s  an 
example  of  this  type  of  suspicious 
entry,  also  knowm  as  the  traversal 
vuberability:  http'y/bost/index.asp? 
somethbg=_V.V.V.\WINNTsy8tem32\ 
cmd.exe?/c«DIR*e:\WINNT\*.txL 

Looking  for  Back  Doors 

Some  log  entries  can  also  show  how  a 
worm  may  be  exploiting  a  back  door 
left  open  by  another  m^cious  btrud- 
ez.  For  example,  b  September  2001,  the 
Nimda  worm's  incessant  scanning  cre¬ 
ated  a  sur^  b  tog  activity  that  should 
have  been  a  red  fl^  to  many  adminis- 
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Introducing  Intel*  Centiino™  mobile  technology. 
The  new  generation  of  iaptop  technoiogy 
engineered  to  unwire  your  business. 


Until  now,  the  promise  of 
a  truiy  wireiess  workforce 
has  been  just  that:  a 
mmr  promise.  Intei*  Centrino" 

mobiie  technoiogy  deiivers 
on  that  promise  with  unprecedented 
levels  of  mobility  for  your  users 
and  an  easier  depioyment  for  you. 
Intei  is  working  with  other 
industry  ieaders  to  make 
wireless  networking  not  oniy 
reliable,  but  secure.  Intel  Centrino 
mobile  technology  is  compatible 


and  validated  with  Cisco  enterprise 
access  points.  And  Intel  continues 
to  work  closeiy  with  VeriSign, 
Check  Point  Software  and 
other  leading  technology  companies 
to  optimize  security  solutions. 
The  unwired  office  starts  inside. 
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Making  the 
Connection 

The  link  between  users  and  applications  is  the 
focus  for  Netegrity’s  CTO.  By  Tommy  Peterson 


ChitV’Ttvhno/oi.TOiyFivrDeepaliTaneia 
B  is  in  ciiorjti'  of  technology  strategy  and 
UQMl  rnifiurrvt’s  jr  Wafr/iam.  Mass.-ba.st'tt 
Setegrity  Inc.,  o  ifodor  in  f/i«' 
idi’nftty  und  utwss  management  market.  He  reeently 
spoke  with  Computers orlJ  rei'hnriin^,'>- t-difor  rommy 
Peterson  about  flow'  the  Web  has  changed  the  notions 
of  identity  and  uccess  conrro/  in  corporute  t-ompufinj;. 
as  uvii  ds  the  di’/Trtitii>n  of  an  application,  Tuneja  also 
dcscrihcd  how  Ncfcjtrity’s  ti’chnical  fwus  i.s  shifting  to 
match  thtfse  transformations. 

Identity  and  access'control  issues  have  been  around  for  as 
long  as  there  has  been  corporate  computing,  but  ttus  particu¬ 
lar  martet  has  emerged  in  the  past  four  or  five  years.  Why 
noM?  In  (he  the  Internet  caused  companies 

to  think  about  puttinj:  intranets  and  extranets  in 
place.  As  these  extranets  were  dcxeloped.  the>  prt«- 
vided  an  opp4»nunity  for  companies  like  Nete^rity  to 
et>n)e  in  with  technoiog)-  that  delivered  security  as  a 
shared  service  for  the  entire  extranet. 

The  center  of  gravity  for  us  and  other  companies 
in  (he  space  was  Web-based  applic.i(ions.  which 
didn't  exist  lO  years  ago.  \\T>at‘s  happened  now  is 
people  have  gotten  cimtrol  over  their  extranet,  but 
ihes  ’ve  got  a  mess  on  their  hands  inside  the  enter¬ 
prise.  So  they're . . .  unifying  the  infrastructure  for 
the  extranet  and  the  enterprise.  They're  rationalizing 
the  overall  problem  of  how  you  connect  users  and 
principals  in  general  to  applications  and  restmrees, 
whether  they're  Web-based  applications  or  non-Web. 
whether  it’s  legacy  or  tuM.  whether  it's  enterprise  ap¬ 
plications  (nr  not),  portal  applications  or  nonportal 
applications.  The  real  problem  is  how  you  connect 
kiNcrs  i«»  (hose  .ipplic.itions 

How  has  your  technology  focus  changed  in  the  five  years 
you've  been  at  Netegrity?  The  «ni(i.ii  i«>«.nis  w.ts.icccss 
.oninOs  .inJ  .luihcnticaiion  (or  Wch-Pased  applic.i- 
turns.  I'hc  usiT  managcmeni  side- .*f  things  has  be¬ 
come  a  whole  lot  more  imptirtant  (Companies  have 
s;iid  to  us.  'It's  great  to  take  a  ptilicy-based  .ippncich 
to  sevuring  applications  for  the  extranet,  but  help  us 
maruge  our  user  populations  Help  us  delegate  the 
administration  of  our  user  population.' 

We've  been  pulled  in  two  directions,  (iustomers 


say.  "Help  us  deal  with  the  enterprise  problems." 
which  is  the  provisioning  issue,  which  is  user  m.in- 
agement  acriws  the  enterprise. 

We've  also  been  pulled  out  of  the  extranet  with 
respect  to  business-to-busincss  interactions  with 
p.irtners.  with  respect  to  business-to-eonsumer  is¬ 
sues  and  from  one  Web  site  to  another  Web  site.  The 
real  issue  there  is.  How  Jo  you  deal  with  partners 
and  alTiliates.  and  how  d«>  you  federate  your  .secnirity? 
So  the  problem  has  gn>wn  —  it’s  stretched  into  the 
enterprise  and  stretched  out  to  partner  sites. 

The  other  kc>-  change  over  the  past  few  years 
is  the  shift  in  distributed  computing  to  a  senice- 
oriented  architecture.  The  very  definition  of  an  ap¬ 
plication  is  now  changing.  This  whole  space  is  based 
on  connecting  users  with  applications,  but  the  appli¬ 
cation  is  no  longer  the  application  it  used  to  be.  It's 
not  this  big  monolithic  thing.  It's  now  Web  serx’ices. 
which  are  these  relatively  small  things  that  can  be 
reused  and  integrated. 

How  (to  yw  differentiate  your  technology  from  your  eompeti- 
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lors?  How  do  you  say.  ‘mits  is  the  way  we  do  it.  and  It's  dH- 
ferent  from  the  way  somebody  else  does  it*7  First,  a  key- 
design  principal  for  us  is  whatever  we  do.  we  do 
assuming  it's  a  heterogeneous  environment.  So  wc 
have  to  support  a  heterogeneous  environment.  We're 
not  a  Microsoft  that  can  make  the  assumption  that  all 
the  applications  are  going  to  he  Kerberos-based. 

Second,  the  model  to  us  is  an  end-to-end  model. 

It's  not  merely  about  the  extranet  or  about  the  enter¬ 
prise  or  about  the  partner  side.  It's  end  to  end.  all  the 
way  from  interactions  with  partners,  interactions  be¬ 
tween  users  and  extranet  applications,  interactions 
between  users  and  enterprise  applications. 

A  third  issue  is  integration.  A  giKtd  way  to  think 
about  it  is.  What  do  administrators  deal  with  in 
managing  this  converged  infrastructure?  We  think 
that  giving  them  two  different  role  mixiels.  two 
difTcrent  delegated  administration  models,  two  dif¬ 
ferent  workflow  models,  two  difTcrent  auditing 
models  is  the  wrong  thing  to  do.  All  audit  data  goes 
to  one  place,  and  there's  a  single  set  of  reports  that 
people  can  run.  IIk'  delegation  model  is  the  same 
whether  you're  a  policy  administrator  or  a  user  ad¬ 
ministrator.  So  provisioning,  whether  it’s  extranet 
user  provisioning  or  enterprise  provisioning,  is  the 
same  workflow  model. 

Another  really  important  point  is  the  shift  to  ser¬ 
vice-oriented  architecture.  We  started  thinking  about 
XML  messaging  and  Web  services  security  three  and 
a  half  or  four  years  ago.  Through  our  partnerships, 
we  are  going  to  bnviden  our  ftwtprint  in  that  area. 
The  last  point  is  scalability.  We  think  in  terms  of  tens 
of  millions  of  users  and  hundreds  of  thousands  of  ap¬ 
plications.  We're  not  really  worried  about  small  com¬ 
panies  here.  This  is  about  the  needs  of  the  Fortune 
5(10  and  the  Global  2000. 

The  convenlionaf  wisdom  is  that  security  is  one  of  the  biggtsi 
barriers  to  adoptton  of  Web  services.  How  (to  you  spedficatty 
get  over  that  barrier?  The  challenge  with  Web  services 
is  that  the  standards  are  not  in  place  yet.  We've 
worked  very  diligently  with  other  vendors  to  come 
up  with  SAML  {Security  Assertions  Markup  Lan¬ 
guage!.  and  that’s  going  to  help  us  on  the  Web  ser¬ 
vices  side.  But  overall,  thong's  a  lot  of  piHential  stan¬ 
dards  battling  for  attention,  and  there’s  a  lot  political 
agendas  in  the  mi.x.  And  without  having  standards  in 
place,  people  arc  uncomfortable  putting  a  Web  ser¬ 
vices  architecture  in  place  that’s  based  on  one  imple¬ 
mentation  or  another. 

Having  said  that.  I  think  you  can  gel  started  with 
what  already  has  been  standardized  to  some  extent. 
So  there’s  WS  Security:  there  arc  companies  coming 
up  with  WS  Trust  and  WS  IVliey:  and  Sun  has  just 
•innouncL-d  M.»mething  —  they’re  working  with  Fujit¬ 
su  .ind .( bunch  oi  •HhereikmpanK’s  on  WS  Reliability. 
AH  (his  will  take  time,  but  the  h.nMcs  .iix-  in  place. 
WsHL.  SOAR.  Ul>l)L  SAMI,  —  you  can  get  started, 
and  I  think  .i  lot  of  pv’ople  .ire  starting  to  do  thai. 

Overull.  I  think  ii 
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Making  the 
Connection 

The  link  between  users  and  applications  is  the 
fooisfor  Netegiity’s  CTO.  By  Tommy  Peterson 


0\ief  Technology  Officer  Qmpek  Taiw^ 
is  in  diorge  of  technology  strategy  and 
iniriotives  at  Waltham.  Mo55.-bas€d 
Netegrity  Me,  a  leader  in  the  burgeoning 
idemity  and  access  management  morfcet.  He  recently 
spoke  with  Computerworld  Tichnotogy  editor  Tommy 
/Person  about  how  the  Web  has  changed  the  notions 
of  ulenrity  and  access  control  in  corporate  ron^)utir^ 
os  well  as  the  definition  of  on  oppiicotton.  Tanefa  also 
described  how  Netegrity’s  tech^al  focus  is  shi^Hr^  to 
match  those  transfinmations. 

UeiiWy  and  iccaM  canlreitMueshawbewafBiwdfaras 
tam  M  ewre  has  h>wt  ootporalt  compuliBB,  but  this  pirticu* 
Iv  iMfhil  his  aiNTgad  h  tt»  pMl  four  or  fIvB  yaw  Why 
now?  tn  the  nud*'90s,  the  InterDet  caused  companies 
to  think  about  putting  intranets  and  extranets  in 
place.  As  these  extranets  were  developed,  they  pro¬ 
vided  an  opportunity  for  companies  like  Netegrity  to 
come  in  with  technology  that  delivered  security  as  a 
shared  service  for  the  entire  extranet. 

The  center  of  gravity  for  us  and  other  companies 
in  the  space  was  Web-based  applications,  udiicb 
didn’t  exist  10  years  aga  What’s  happened  now  is 
people  have  gotten  control  over  their  extranet,  but 
they've  got  a  mess  on  their  hands  inside  the  enter¬ 
prise.  So  they’re . . .  unifying  the  inirastructure  for 
the  extranet  and  the  enterprise.  They’re  rationalizing 
the  overall  problem  of  how  you  connect  users  and 
principals  in  general  to  applications  and  resources, 
whether  they’re  Web-based  applications  or  non-Web, 
whether  it’s  legacy  or  not.  whether  H’s  enterprise  ap- 
pUcations  [or  not],  portal  applications  or  nonponat 
applications.  The  real  problem  b  how  you  connect 
users  to  those  applications. 

How  has  your  tadmology  focus  changad  in  thi  fh«  ynrs 
yo«>M  baan  at  Wataurtty?  The  initial  focus  was  access 
controls  and  authentication  for  Web-based  applica¬ 
tions.  The  user  managemcm  side  of  things  has  be¬ 
come  a  whole  lot  more  important.  Companies  have 
said  to  us.  “It’s  great  to  take  a  policy-based  approach 
to  securing  appUcaiions  for  the  extranet,  but  help  us 
manage  our  user  populations.  Help  us  delegate  the 
administration  of  our  user  population.” 

We've  been  pulled  in  two  directions.  Customers 


say.  “Help  us  deal  with  the  enterprise  problems," 
which  is  the  provisioning  issue,  which  is  user  man¬ 
agement  across  the  enterprise. 

We’ve  also  been  pulled  out  of  the  extranet  with 
respect  to  business-to-business  interactions  with 
partners,  with  respect  to  business-to-consumer  is¬ 
sues  and  from  one  Web  site  to  another  Web  site.  The 
real  issue  there  is,  How  do  you  deal  with  partners 
and  afTiUates,  and  how  do  you  federate  your  security? 
So  the  problem  has  grown  —  it’s  stretched  into  the 
enterprise  and  stretched  out  to  partner  sites. 

The  other  key  change  over  the  past  few  years 
is  the  shift  in  distributed  computing  to  a  service- 
oriented  architecture.  The  very  definition  of  an  ap¬ 
plication  is  now  changing-  This  whole  space  is  based 
on  connecting  users  with  applications,  but  the  appli¬ 
cation  is  no  longer  the  application  it  used  to  be.  It’s 
not  this  big  monolithic  thing.  It's  now  Web  services, 
which  are  these  relatively  small  things  that  can  be 
retxsed  and  integrated. 
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tan?H0wdoyouaay,’TMBislhsiMywadoll.andM*tdH- 
farenl  from  tha  way  aomatody  alia  doas  IT?  First,  a  key 
design  principal  for  us  is  whatever  we  do,  we  do 
assuming  it's  a  heterogeneous  environment.  So  we 
have  to  support  a  heterogeneous  environnrent.  We're 
not  a  Microsoft  that  can  make  the  assumption  that  all 
the  applications  are  going  to  be  Kerberos-based. 

Second,  the  model  to  us  is  an  eiKl-tO'etKl  model. 

It’s  not  merely  about  the  extranet  or  about  the  enter¬ 
prise  or  about  the  partner  side.  It's  end  to  end,  all  the 
way  from  interactions  with  partners,  interactions  be¬ 
tween  users  and  extranet  applications,  interactions 
between  users  and  enterprise  applications. 

A  third  issue  is  integradon.  A  good  way  to  think 
about  it  is,  What  do  administrators  deal  with  in 
managing  this  converged  infrasmicture?  We  think 
that  giving  them  two  different  role  models,  two 
different  delegated  administiation  models,  two  dif¬ 
ferent  woritflow  models,  two  different  auditing 
models  is  the  wrong  thing  to  da  All  audit  data  goes 
to  one  place,  and  there's  a  single  set  of  reports  that 
people  can  run.  The  delegation  model  is  the  same 
whether  you're  a  policy  administrator  or  a  user  ad¬ 
ministrator.  So  provisioning,  whether  it’s  extranet 
user  provisioning  or  enterprise  provisioning,  is  the 
same  woridlow  model. 

Aimther  really  important  point  is  the  shift  to  ser¬ 
vice-oriented  architecture.  We  started  thinking  about 
XML  messaging  and  Web  services  security  three  and 
a  half  or  four  years  aga  Through  our  partnerships, 
we  are  going  to  broaden  our  footprint  in  that  area. 
The  last  point  is  scalability.  We  think  in  terms  of  tens 
of  millions  of  users  and  hundreds  of  thousands  of  ap¬ 
plications.  We’re  not  realty  worried  about  small  com¬ 
panies  here.  This  is  about  the  needs  of  the  Fortune 
500  and  the  Global  2000. 

lha  convanlionii  wiadam  is  that  Mcuribf  Is  OM  of  the  MggHt 
barTfars  to  adoption  of  IWib  aanfoas.  How  do  you  apodllcafy 
pal  ovarllHllMiTl»?'rbe  challenge  with  Web  services 
is  that  the  standards  are  not  in  place  yet  We’ve 
worited  very  diligently  with  other  vendors  to  come 
up  with  SAML  (Security  Assertions  Mari:up  Lan¬ 
guage!,  and  that’s  going  to  help  us  on  the  Web  ser¬ 
vices  side.  But  overall,  there's  a  lot  of  potential  stan¬ 
dards  battling  for  attention,  and  there’s  a  lot  political 
agendas  in  the  mix.  And  without  having  standards  in 
place,  people  are  uncomfortable  putting  a  WH)  ser¬ 
vices  architecture  in  place  that’s  based  on  one  imple- 
mentation  or  another. 

Havii^  said  that.  I  think  you  can  get  started  wHb 
what  already  has  been  standardized  to  some  extent 
So  there's  WS  Security:  there  are  companies  coming 
up  with  WS  TVust  and  WS  Policy;  and  Sun  has  just 
announced  something  —  they’re  working  with  Fujit¬ 
su  and  a  bunch  of  other  companies  on  WS  Reliabiiit>'. 
All  thb  will  take  time,  but  the  basics  are  in  place. 
WSOU  SOAP.  UDDI.  SAML  -  you  can  get  staned. 
and  I  think  a  lot  of  people  are  starting  to  do  that. 

Overall  I  think  it 
will  take  a  while  before 
the  standards  come  to¬ 
gether  and  large  com¬ 
panies  feel  comfortable 
committing  to  Web 
services.  I 
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Serial  ATA 
Tal^onSCSI 

Outlook:  Serial  Advanced  Techiralogy  Attachment  storage 
a)uld  leplace  SCSI  for  some  appiicatiMis.  By  Lucas  Mearian 


Interface  Advantage 

«MihaaAXIkdrimuMa40- 
plH  Mirim  (bottom).  Striil 
HA  dwrieoo  on  0  oompoct, 
iotfiii~pin  odpo  conMclor  wHh 
•  ribbon  cMIt  thoTi  iMt  5/16 
ta.Mdo(top).TlMaodrivio 
rimrid  bo  fistir.  roquM  Ml 
pomridrihwrlof  mofooffr 
dMt  and  ralaUt  array  daoigm. 


Low-cost  Advanced 

Technology  Attachment 
(ATA)  disk  arrays  are  al¬ 
ready  gaining  ground  in 
near-line  storage  and  disk-to- 
disk  backup  applications,  but  a 
faster  class  of  drive  arrays  that 
uses  the  new  Serial  ATA  inter¬ 
face  standard  is 
likely  to  challenge 
SCSI  for  h^b-per- 
fortnance  applica¬ 
tions  as  well 
The  Serial  ATA 
standard,  approved  in  Novem¬ 
ber  by  the  Institute  of  Electri¬ 
cal  and  Electronics  Engineers 
Inc  (IEEE),  has  several  ad¬ 
vantages  over  the  parallei, 
shared-bus  master/slave 
architecture  of  ATA- 
Serial  ATA  works  at 
lower  voltages,  and  be¬ 
cause  it  uses  just  four  data 
lines  compared  with  ATA’s  32. 
it’s  50%  foster.  It  also  supports 
hot-swappable  drives  and  ad¬ 
vanced  features  such  as  native 
command  queuing,  which  lets 
a  disk  drive  make  multiple 
requests  for  data  from  the 
processor  and  rearrange  the 
order  of  the  data  to  maximize 
throughput  —  a  feattire  tradi¬ 
tionally  available  only  on  S(2SI 
and  Fibre  Channel  drives.  Fi¬ 
nally,  Serial  ATA  can  support 
up  to  128  devices  per  chaiuiel 
(vs.  two  for  ATA  and  IS  for 
SCSI)  and  extends  the  maxi¬ 
mum  supported  cable  length 
from  18  inches  to  1  n>eter. 

Serial  ATA's  biggest  poten¬ 
tial  beneftt  lies  in  its  price/ 
performance.  Analyst  compa¬ 
ny  IDC  estimates  that  ^>out 
87%  of  all  drives  today  use 
ATA.  Economies  of  scale 
have  made  ATA  disk  arrays. 
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at  1  to  2  cents  per  megabyte, 
much  cheaper  than  SCSL  at 
3  to  5  cents  per  megabyte. 
Serial  ATA  disk  arrays  should 
benefit  from  those  same 
economies  and  could  displace 
SCSI  in  small  servers  and  even 
large  storage  arrays  using  the 
emerging  iSCSI 
storage  network¬ 
ing  protocol. 

“Five  to  10  years 
from  now,  Serial 
ATA  with  iSCSI 
will  be  the  dominant  storage 
modeL"  predicts  IDC  analyst 
Robert  Grey. 

Serial  ATA's  first  incarna¬ 
tion,  available  In  drives  and 
controllers,  won’t  do  much  for 
end  users.  That's  because  ATA 
disk  speeds,  at  a  maximum 
sustained  throu^put  rate  of 
about  75MB/sec„  can’t  use  the 
bandwidth  increase  that  Serial 
ATA  offers.  And  initial  pricing 
will  be  about  10%  higher  than 
for  ATA  drives,  says  Jason 
ZiUer,  chairman  of  the  IEEE's 
Serial  ATA  Working  Group. 

But  manufacturers  will  ben¬ 
efit.  Serial  ATA’s  seven-pin 
connector  cable,  which  is  5/16 
in.  wide,  replaces  ATA's  40-pin 
ribbon  cable,  which  is  2  ia 
wide,  restricts  airflow  and  in¬ 
creases  heat  in  an  enclosure. 


In  addition,  chips  are  now 
I  smaller,  and  their  voltage 
needs  are  lower  than  ATA’s 
I  S-volt  requirement.  Serial  ATA 
I  requires  just  O.S  volt. 

Vendors  plan  to  offer  Serial 
ATA  disk  arrays  that  deliver 
real  performance  gains.  En¬ 
hanced  specifications  are  on 
the  way.  Serial  ATA  n.  due  by 
iiud-2004.  is  expiected  to  dou¬ 
ble  transfer  rates,  and  a  third- 
generation  standard  could 
I  double  them  again  by  2007 
j  (see  chart). 

BestAppKcalions 

In  the  data  center.  Serial  ATA 
is  likely  to  boost  emerging 
ATA  disk-based  storage  appli¬ 
cations  such  as  near-line  stor¬ 
age  and  virtual  tape  servers, 
since  the  faster  bus  speed 
works  well  for  streaming  data 
and  la^  file  transfers. 

As  the  technology  evolves, 
some  analysts  say  ATA  disks 
could  be  used  in  high-end  pri¬ 
mary  storage  devices,  such  as 
EMC  Corp.’s  Symmetrix  and 
Hitachi  Ltd's  Lightning  arrays. 

For  the  time  being,  though, 
SCSI  and  Fibre  Channel  disks 
have  the  advant^e  for  storing 
data  associated  with  hi^- 
performance,  online  transac¬ 
tion-processing  applications 
because  SCSFs  hi^r  spindle 
speeds,  at  up  to  15.000  rpm. 
enable  faster  access  to  smaller 
files.  And  the  mean  time  be¬ 
tween  failures  of  ATA  drives, 
at  500,000  to  600,000  hours, 
still  doesn't  stack  up  to  SCSPs 
1.2  million  hours. 

That  doesn't  worry  Jamie 
Riis,  CIO  at  BayView  Finan¬ 
cial  Trading  Group  LP  in 
Miami.  The  mortgage  banking 
firm  uses  Network  Appliance 
Inc.’$  ATA-based  NearStore 
EUOO  near-line  storage  array 
for  disk-to-disk  backup  of  its 
e-maU,  SQL  and  Oracle  data¬ 
bases. 


“As  long  as  I  have  a  RAID  5- 
capable  system ...  so  I  can 
quick  access  to  the  informa¬ 
tion.  then  Pm  kind  of  ^;nostic 
when  it  comes  to  SCSl- 
anached  vs.  ATA.”  he  says. 
Then  it  really  Just  becomes  a 
cost  issue  for  me.”  I 

KKcmEssauis^ 

Serial  SCSI  CDuU  soon  alow  nwed 
ATA/SCSImys 

QiMlMiaatTB 


Li«M  Ittft  ATk  BsiView  Financial 
Tiadtag  Groiv's  Jamie  Rks  decusses  Ns 
cofflpan/s  use  of  ATA  aray  technologies. 
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Revenue 
Optimization 
Software 


DEFINITION 

Revenue  optimization  software  auto¬ 
mates  the  process  of  calculating 
the  prices  businesses  need  to 
charge  to  maximize  profits.  It  can 
adjust  prices  using  an  algorithm 
that  factors  in  variables  such  as 
demand  forecasts  and  inventory. 


8T  MAMC  L.  SOHOINt 

JUST  ABOUT  ALL  any 
business  is  looking  for 
is  a  way  to  maintain 
precisely  the  right 
amount  of  product  in* 
ventory  or  resources  to  supply 
a  service  and  to  know  the 
est  possible  price  the  market 
for  its  products  or  services 
will  bear.  That  would  mean  no 
overstocks,  no  disappointed 
customers  and  no  write-ofi&  to 

explain  to  investors.  _ 

And  the  price  would 
always  be  right  to 
maitimizg  profits. 

Until  someone 
comes  up  with  a  work¬ 
ing  crystal  ball,  rev* 
enue  optimization  software 
may  o^  the  best  hope  to 
companies  looking  to  achieve 
those  goals. 

This  business  intelligence 
software  factors  variables 
such  as  demand,  the  cost  of 
a  good  or  service,  and  the 
amount  of  revenue  the  compa¬ 
ny  needs  to  be  profitable.  It 
t^n  calculates  the  best  sales 
price  for  a  good  or  service. 
When  key  parameters  change, 
the  software  is  designed  to  re¬ 


vise  prices  almost  instantly. 

For  example,  if  a  travel  com¬ 
pany  selling  space  on  a  cruise 
ship  knows  from  historical 
trends  that  February  is  a  bad 
month  for  a  particular  trip,  it 
can  drop  the  price  to  a  level 
most  litely  to  dose  the  deal 
with  a  given  customer. 

At  the  time,  the  com¬ 
pany's  price  planners,  using  a 
revenue  optimization  system, 
can  draw  data  from  applica- 

_  dons  that  handle  sales 

and  maiketing  opera* 
A  tions.  as  well  as  from 
data  repositories 
f*  containing  customer- 
related  information. 

-  in  order  to  make  their 

calculations. 

Hie  planners  can  also  factor 
in  other  variables,  such  as  the 
cost  of  the  trip  at  this  particu¬ 
lar  time  (rf  the  year  ba^  on 
fuel  prices  or  the  weather. 
They  can  even  launch  maricet- 
ing  campaigns  targeted  at  the 
audience  most  likely  to  re¬ 
spond  to  an  offer. 

'Kevenue  optimization 
takes  a  finite  good,  foctors  in 
demand  and  comes  out  with  a 
price.”  «»yrlaing  Donald  David- 


off.  vice  president  of  pricing 
and  revenue  management  at 
Archstone-Smith,  an  Engle¬ 
wood,  Cola-based  national 
apartment  owner-operator. 

Archstone-Smith  uses  an 
application  from  Manugistics 
Inc.  in  Rockville,  Md.,  that 
forecasts  the  demand  and  sup¬ 
ply  for  its  ^>ace  to  create  the 
best  pricing  across  a  variety  of 
leasing  scenarios. 

The  software,  called  Lease 
Revenue  Optimizer,  comes  up 
with  a  number  by  foctoring  in 
what  the  competition  is  doing 
and  Archstone’s  own  corpo¬ 
rate  goals  for  profitabUity.  The 
software  also  has  rules  that 
dictate  how  to  respond  to 
changes  in  competitors’  pric¬ 
ing,  Davidoff  says. 

The  analytical  capabilities  in 
revenue  management  software 
can  automatically  identify  and 
segment  a  company's  roost 
profitable  customers,  explains 
Steven  Pincfauck,  corporate 
director  of  revenue  manage¬ 
ment  at  Harrah's  Entertain¬ 
ment  Inc.  in  Memphis.  The 
company,  which  operates 
hotels  and  gaming  establish¬ 
ments,  also  uses  revenue 
management  software  from 
Manugistics  (see  diagram). 

Bult-in  Business  Rules 

There  can  be  considerable 
complexity  buih  into  the  busi¬ 
ness  rules  embedded  in  the 
software.  For  instance,  a  com¬ 
pany  in  a  retail  environment 
may  tweak  the  price  difiereni- 
ly  for  a  special  promotion,  us¬ 
ing  variables  such  as  budget 
constraints  and  sales  goals, 
says  Ben  Viood.  vice  present 
of  sohitiofl  development  at  i2 
Technologies  Inc.  in  Dallas. 

On  the  other  hand,  if  for 
instance  the  product  isn't  sell¬ 
ing,  there  may  be  an  end-of- 
Ufe  price  optimization,  which 


factors  in  bow  much  of  a 
markdown  will  be  available 
and  how  much  stock  is  still  in 
place. 

Once  the  software  is  up  and 
running,  configurations  can  be 
altered  on  the  fly,  depending 
on  whatever  priorities  make 
the  most  sense,  says  Vinod. 
The  applications  can  foaor  in 
key  performance  indicators 
for  a  particular  industry. 

The  software  can  also  be 
programmed  to  recognize  a 
particular  sales  region  or  a 
certain  line  of  products  that 
are  underperforming  and  cal¬ 
culate  the  best  pricing  scheme 
to  effect  a  turnaitnmd. 

Profit  may  not  even  be  the 
key  factor  a  company  may 
be  more  interested  in  increas¬ 
ing  its  market  presence  and 
may  be  willing  to  mark  down  a 
product  accordingly,  be  says. 

The  software's  capabilities 
are  still  in  their  infoi^  outside 
of  the  supply  chain  planning 
applications  Beld.  says  Gartner 
Inc.  analyst  Karen  Peterson. 

The  retail  industry  has 
tiKnvn  the  biggest  demand  for 
the  applications  tiius  far.  be¬ 


cause  companies  have  to  fig¬ 
ure  out  the  best  way  to  price 
products  and  move  them  off 
shelves.  The  software  has  yet 
to  be  deployed  with  much  suc¬ 
cess  in  otbCT  industries  where 
there  is  some  interest  in  rev¬ 
enue  optimization,  such  as 
hi^tech. 

Revenue  optimization  soft¬ 
ware  reqiures  clean  legacy 
data,  says  Davidoff.  The  legacy 
data  often  isn't  formatted  to  be 
recognizable  by  the  software, 
so  users  roust  build  a  data  inte¬ 
gration  layer  that  can  find  and 
correct  errors. 

And  users  can’t  typically 
iust  install  and  use  revenue 
optimization  software  out  of 
the  box.  says  Peterson.  Rather, 
they  can  get  a  competitive  ad¬ 
vantage  with  it  only  by  under¬ 
standing  the  specifics  of  tiieir 
industry  and  their  corporate 
strategy  and  then  modeling 
the  software  accordingly.  I 
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Serial  ATA 
Tates  on  SCSI 

Outlook:  Serial  Advanced  Technology  Attachment  storage 
could  replace  SCSI  for  some  applications.  By  Lucas  Mearian 


Interface  Advantage 

WMt  tiM  ATA  M  IMS  a  40- 
pin  Marfaca  (bottom).  Serial 
ATA  davioas  use  a  compact, 
nven-pln  adga  connactorarith 
a  rfeboa  cable  thafa  )Hst  S/16 
in.  wUa  (lop).  Thaae  drives 
shouM  be  fHlar.  raquira  less 
pewarandalowformoraaffi* 
dant  and  ralabla  array  designs. 


Low-cost  Advanced 

Technology  Attachment 
(ATA)  disk  arrays  are  al¬ 
ready  gaining  ground  in 
near-line  storage  and  disk-to- 
disk  backup  applications,  but  a 
faster  class  of  drive  arrays  that 
uses  the  rtew  Serial  ATA  inter¬ 
fat*  standard  is  _ 

likely  to  challenge 
SCSI  for  high-per¬ 
formance  applica¬ 
tions  as  well 
The  Serial  ATA 
standard,  approved  in  Novem¬ 
ber  by  the  Institute  of  Electri¬ 
cal  and  Electronics  Engineers 
Inc.  (IEEE),  has  several  ad- 
vant^es  over  the  parallel, 
shared-bus  master/slave 
architecture  of  ATA. 
Serial  ATA  works  at 
lower  voltages,  and  be¬ 
cause  it  uses  just  four  data 
lines  compared  with  ATA's  32, 
it's  50%  faster.  It  also  supports 
hot-swappable  drives  and  ad¬ 
vanced  features  such  as  native 
command  queuing,  which  lets 
a  disk  drive  make  multiple 
requests  for  data  from  the 
processor  and  rearrange  the 
order  of  the  data  to  maximize 
throughput  —  a  feature  tradi- 
tiortally  available  only  on  SCSI 
and  Fibre  Channel  drives.  Fi¬ 
nally.  Serial  ATA  can  support 
up  to  128  devices  per  channel 
(vs.  two  for  ATA  and  15  for 
SCSI)  and  extends  the  maxi- 
mum  supported  cable  length 
from  18  inches  to  1  meter 
Serial  ATA's  biggest  poten- 
dal  benent  lies  in  its  price/ 
performance.  Analyst  compa¬ 
ny  IDC  estimates  that  about 
87%  of  all  drives  today  use 
ATA.  Economies  of  scale 
have  made  ATA  disk  arrays. 
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at  I  to  2  cents  per  megabyte, 
much  cheaper  than  SCSI,  at 
3  to  5  cents  per  megabyte. 
Serial  ATA  disk  arrays  should 
benefit  from  those  same 
economies  and  could  displace 
SCSI  in  small  servers  and  even 
large  storage  arrays  using  the 

_  emerging  iSCSI 

storage  network¬ 
ing  protocol. 

“Five  to  10  years 
from  now.  Serial 
ATA  with  iSCSI 
will  be  the  dominant  stora^ 
model."  predicts  11X3  analyst 
Robert  Grey. 

Serial  ATA’s  first  incarna¬ 
tion.  available  in  drives  and 
controllers,  won't  do  much  for 
end  users.  That's  because  ATA 
disk  speeds,  at  a  maximum 
sustained  throughput  rate  of 
about  75MB/sec..  can’t  use  the 
bandwidth  increase  that  Serial 
ATA  offers.  And  initial  pricing 
will  be  about  10%  higher  than 
for  ATA  drives,  says  Jason 
Ziller,  chairman  of  the  IEEE's 
Serial  ATA  Woriting  Group. 

But  manufacturers  will  ben¬ 
efit.  Serial  ATA’s  seven-pin 
connector  cable,  which  is  5/16 
in.  wide,  replaces  ATA's  40-pin 
ribbon  cable,  which  is  2  in. 
wide,  restricts  airflow  and  in¬ 
creases  beat  in  an  enclosure. 


In  addition,  chips  are  now 
I  smaller,  and  their  voltage 
needs  are  lower  than  ATA's 
[  5-volt  requirement.  Serial  ATA 
I  requires  just  0.5  volt. 

Vendors  plan  to  offer  Serial 
ATA  disk  arrays  that  deliver 
real  performance  gains.  En¬ 
hanced  specifications  are  on 
the  way.  Serial  ATA  II,  due  by 
mid-2004.  is  expected  to  dou¬ 
ble  transfer  rates,  and  a  third- 
generation  standard  could 
double  them  again  by  2007 
,  (see  chart). 

Best  Applications 

In  the  data  center.  Serial  ATA 
is  likely  to  boost  emergii^ 

ATA  disk-based  storage  appli¬ 
cations  such  as  near-line  stor¬ 
age  and  virtual  tape  servers, 
since  the  faster  bus  speed 
works  well  for  streaming  data 
and  large  file  transfers. 

As  the  technology  evolves, 
some  analysts  say  ATA  disks 
could  be  used  in  high-end  pri¬ 
mary  storage  devices,  such  as 
EMC  (3orp.’s  Symmetrix  and 
Hitachi  Ltd's  Lightning  arrays. 

For  the  time  being,  though, 
SCSI  and  Fibre  Channel  disks 
have  the  advantage  for  storing 
data  associated  with  high- 
performance.  online  transac¬ 
tion-processing  applications 
because  SCSI's  hitter  spindle 
speeds,  at  up  to  15,000  rpm, 
enable  faster  access  to  smaller 
riles.  And  the  mean  time  be¬ 
tween  failures  of  ATA  drives, 
at  500.000  to  600,000  hours, 
still  doesn’t  stack  up  to  SCSfs  . 
1.2  million  hours. 

That  doesn't  worry  Jamie  i 

Riis,  CIO  at  BayView  Finan-  | 

cial  leading  Group  LP  in  I 
Miami  The  mortgage  banking 
firm  uses  Network  Appliance 
Inc.'s  ATA-based  NearStore 
RlOO  near-line  storage  array 
for  disk-to-disk  backup  of  its 
e-maii  SQL  and  Oracle  data- 
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“As  long  as  I  have  a  RAID  5- 
capable  system ...  so  I  can  get 
quick  access  to  the  informa¬ 
tion.  then  fm  kind  of  agnostic 
when  it  comes  to  SCSI- 
attached  vs.  ATA,"  he  says, 
“Then  it  really  just  becomes  a 
cost  issue  for  me."  I 

HERE  COVES  SERIAL 

Serial  S(^  oouU  soon  alow  mixed 
ATA/SCSI  arrays 

QuicfcLMi  36078 

IMng  WWi  BayView  Fnanoal 

Trading  Group's  Jamie  Riis  disajsses  his 
company's  use  ol  ATA  array  technotogiee: 

^QricUJiik  36(77 
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Revenue 
OptimiTation 
Sonwaie 


DEFINITION 
Revenue  optimization  software  auto¬ 
mates  the  process  of  calculating 
the  prices  businesses  need  to 
charge  to  maximize  profits.  It  can 
adjust  prices  using  an  algorithm 
that  factors  in  variables  such  as 
demand  forecasts  and  inventory. 


8V  MAJIC  L.  SOHOtNI 

JUST  ABOUT  ALL  any 
business  is  looking  for 
is  a  way  to  maintain 
precisely  the  right 
amount  of  product  in' 
ventory  or  resources  to  supply 
a  service  and  to  know  the  high- 
est  possible  price  the  market 
for  its  products  or  services 
will  be^.  That  would  mean  no 
overstocks,  no  disappointed 
customers  and  no  writeolis  to 

explain  to  investors.  _ 

And  the  price  would 
always  be  right  to 
maximize  profits. 

Until  someone 
comes  up  with  a  work¬ 
ing  crystal  ball  rev* 
enue  optimization  software 
may  offer  the  best  hope  to 
companies  looking  to  achieve 
those  goals. 

This  business  intelligence 
software  factors  variables 
such  as  demand,  the  cost  of 
a  good  or  service,  and  the 
amount  of  revenue  the  compa¬ 
ny  needs  to  be  profitable.  It 
then  calculates  the  best  sales 
price  for  a  good  or  service. 
When  key  parameters  change, 
the  softwrue  is  designed  to  re^ 


vise  prices  almost  instantly. 

For  example,  if  a  travel  com¬ 
pany  selling  space  on  a  cruise 
ship  knows  from  historical 
trends  that  February  is  a  bad 
month  for  a  particular  trip,  it 
can  drop  the  price  to  a  level 
most  likely  to  close  the  deal 
with  a  given  customer. 

At  the  same  lime,  the  com¬ 
pany's  price  planters,  using  a 
revenue  optimization  system, 
can  draw  data  from  applica- 

_  tions  that  handle  sales 

and  marketing  opera- 
tions.  as  well  as  from 
data  repositories 
ny*  containing  customer- 
^  *  related  information. 

-  in  order  to  make  their 

calculations. 

The  planners  can  also  factor 
in  other  variables,  such  as  the 
cost  of  the  trip  at  this  particu¬ 
lar  time  of  the  year  based  on 
hiel  prices  or  the  weather. 
They  can  even  launch  market¬ 
ing  campaigns  targeted  at  the 
audience  most  likely  to  re¬ 
spond  to  an  offer. 

“Revenue  optimization 
takes  a  finite  good,  bctors  in 
demand  and  comes  out  with  a 
price.'*  explains  Donald  David- 


off.  vice  president  of  pricii^ 
and  revenue  management  at 
Archstone-Smith.  an  Engle¬ 
wood.  Colo.-based  national 
apartment  owner-operator. 

Archstone-Smith  uses  an 
application  from  Manugistics 
Inc.  in  Rockville.  Md..  that 
forecasts  the  demand  and  sup¬ 
ply  for  its  space  to  create  the 
best  pricing  across  a  variety  of 
leasing  scenarios. 

The  software,  called  Lease 
Revenue  Optimizer,  comes  up 
with  a  number  by  factoring  in 
what  the  competition  is  doing 
and  Archstor»e’s  own  corpo¬ 
rate  goals  for  profitabilit)'.  The 
software  also  has  rules  that 
dictate  bow  to  respond  to 
changes  in  competitors'  pric¬ 
ing.  Davidoff  says. 

The  analytical  capabilities  in 
revenue  management  software 
can  automatically  identify  and 
segment  a  company's  most 
profitable  customers,  explains 
Steven  Pinchuck.  corporate 
director  of  revenue  mana^ 
ment  at  Harrab’s  Entertain¬ 
ment  Inc.  in  Memphis.  The 
company,  which  operates 
hoteb  and  gaming  establish- 
roents,  also  uses  revenue 
management  software  from 
Manugistics  (see  diagram). 

BuiK-in  Business  Rules 

There  can  be  considerable 
complexity  built  into  the  busi¬ 
ness  rules  embedded  in  the 
software.  For  instance,  a  com¬ 
pany  in  a  retail  environment 
may  tweak  the  price  different¬ 
ly  for  a  special  promotion,  us- 
ii^  variables  such  as  budget 
constraints  and  sales  goals, 
says  Ben  Vinod.  vice  president 
of  solution  development  at  t2 
Technologies  Inc.  in  Dallas. 

On  the  other  hand,  if  for 
instance  the  product  isn't  sell¬ 
ing.  there  may  be  an  end-of- 
life  price  optimization,  which 


factors  in  how  much  of  a 
markdown  will  be  available 
and  bow  much  stock  is  still  in 
place. 

Once  the  softH*are  is  up  and 
running,  configurations  can  be 
altered  on  the  fly.  depending 
on  whatever  priorities  make 
the  ntost  sense,  says  Vinod. 
The  applications  can  foctor  in 
key  performance  indicators 
for  a  particular  industry. 

The  software  can  also  be 
programmed  to  recognize  a 
particular  sales  region  or  a 
certain  line  of  products  that 
are  underperforming  and  cal¬ 
culate  the  best  pricing  scheme 
to  effect  a  turnaround. 

Profit  may  not  even  be  the 
key  factor  —  a  company  may 
be  more  interested  in  increas¬ 
ing  its  market  presence  and 
may  be  willing  to  mark  down  a 
product  accordingly,  he  says. 

The  software's  capabilities 
are  still  in  tbeir  infancy  outside 
of  the  supply  chain  planning 
appUcatioDS  field,  says  Gartner 
Inc.  analyst  Karen  Peterson. 

The  retail  industry  has 
shown  the  biggest  demand  for 
the  applkatioos  thus  for.  be¬ 


cause  companies  have  to  fig¬ 
ure  out  the  best  way  to  price 
products  and  move  them  off 
shelves.  The  software  has  yet 
to  be  deployed  with  much  suc¬ 
cess  in  other  industries  vriiere 
there  is  some  interest  in  rev¬ 
enue  optimization,  such  as 
high  tech. 

Re\*enue  optimization  soft- 
w'are  requires  clean  iegac)' 
data,  says  Davidoff.  The  legacy 
data  often  isn't  formatted  to  be 
recognizable  by  the  software, 
so  users  must  build  a  data  inte¬ 
gration  layer  that  can  find  and 
correct  errors. 

And  users  can't  typically 
just  install  and  use  revenue 
optimization  software  out  of 
the  box.  says  Peterson.  Rather, 
they  can  get  a  competitive  ad- 
vantajge  with  it  only  by  under¬ 
standing  the  specifics  of  their 
industry  and  their  corporate 
strategy  and  then  modeling 
the  software  accordii^y.  I 

An  there  ledmologes  v  issues  you'd  Uc 
to  learn  about  n  ()ui66luittf?  Se^  totf 
■ com 


To  fn)  a  corntfeAe  anrive  ol  ou 
OockStudes.  go  onlra  to 


Revenue  Optimization  at  Harrah’s 
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Products.  People. 
Problems  solved. 

From  servers  to  service,  Dell  has  the  solution. 


XEON 


Dell  I  Small  and  Medium  Business 

Your  business  has  unique  needs.  It  deserves  a  unique  solution.  From  PowerEdge  servers  featuring  Intel*  Xeon' 
processors  to  PowerVault  Storage  and  PowerConnect  Switches,  we  offer  tailored  solutions  to  meet  your  business  needs. 
And  of  course  it's  Dell,  so  you  know  you're  getting  the  latest  technology.  But  that's  only  half  of  the  story.  Dell  offers 
consulting  services  that  range  from  deployment  and  installation  to  training  and  certification.  All  from  one  source.  And 
everything  is  backed  by  thousands  of  service  and  support  people  at  your  beck  and  call,  on-site,  online  and  on  the  phone. 
Suddenly  your  IT  infrastructure  doesn't  seem  so  daunting.  Let  Dell's  one-of-a-kind  solutions  put  you  on  the  path  to 
one-of-a-kind  success. 

Dell  Rated  #1  in  Intel-Based  Seiver  Satisfaction 

Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 
Third  Quarter  2002 
-  December  2002 
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Porn  Pdlicy  Collars  a 
Million-Dollar  Customer 


The  HR  detiartment  bends  some  rules 
when  offensive  content  comes  in  from  the 
compan/s  largest  dienL  By  Vmce  Tuesday 


A  BRIEF  ALTERCATION 

this  week  with  a  stafT 
salesperson  gave  me  a 
new  perspective  on 
bow  pornographic  e-mail  can 
affect  our  business. 

Like  most  companies  with 
Internet  access,  we've  had 
our  share  of  employees  who 
download  inappropriate  mate- 
riaL  To  eliminate  the  excuse 
that  the  pom  came  unsolicited, 

our  roost  recent  poU-  - 

cy  is  quite  strict:  Any-  upmi 
one  who  doesn't  re-  SlCU 
port  even  inadvertent 
access  to  inappropri¬ 
ate  material  wil]  be 
held  accountable. 

Because  of  this  pol- 
icy.  the  security  staff  has  to 
Held  calls  and  e-mails  about 
every  offensive  message.  StilL 
Tm  happy  to  accept  those 
messages  if  it  means  that  no¬ 
body  can  get  away  with  down¬ 
loading  pornography  by 
claiming  that  it  was  a  mistake. 
But  then  we  beard  from  Mal¬ 
colm  in  sates,  who  reported 
recetving  an  inappropriate 
e-mail. 

Comedy  of  Errors 

I  arrived  at  Malcolm's  office 
with  a  set  of  Soppy  disks, 
ready  to  take  a  copy  of  the 
e-mail  and  its  contents  for  in¬ 
vestigation.  This  was  the  first 
time  rd  done  an  investigation 
with  the  sales  team,  and  I 
wanted  to  make  a  good  im- 
pressioo,  since  we  want  them 
to  stress  to  our  citstomers  how 
secure  our  company  is. 

My  plan  was  simple:  Copy 
the  e-mail  and  message  head¬ 
ers.  driete  the  original  to  stop 
the  content  from  spreading 
further  and  investigate  the 
source.  Case  closed. 

But  it  didn't  exactly  go  weU. 


My  company  gives  Compaq 
iPaq  desktops  to  most  employ¬ 
ees.  The  units  are  quiet,  have  a 
small  footprint  and  work  well 
but  they  don't  have  a  great 
deal  of  expandability  and 
aren't  designed  to  be  upgrad¬ 
ed  or  modified. 

The  next  problem  was  that 
Malcolm's  machine  didn't 
have  a  floppy  drive.  1  left 
him  twiddling  his  thumbs  and 

-  returned  10  minutes 

later  with  a  remov- 
II I  able  drive.  Then  I 
discovered  that 
iPaqs  come  with  a 
locked  assembly  to 
stop  users  from  re¬ 
moving  the  blank 
plate  in  order  to  insert  a  flop¬ 
py  drive.  So  I  left  again.  An¬ 
other  10  minutes  later,  I  re¬ 
turned.  this  time  with  a  key 
and  the  drive.  At  this  point.  I 
was  slightly  flushed  and  a  lit¬ 
tle  embarrassed 
I  installed  the  drive  without 
a  problem  and  was  getting 
ready  to  copy  the  e-mail  when 
Malcolm  asked  what  I  was  do¬ 
ing.  When  I  started  to  explain 
the  plan,  he  suddenly  pan¬ 
icked.  “Whoa,"  he  screamed, 
as  be  tried  to  grab  the  floppy 
disk  out  of  my  hand. 


It  was  aduR  content 

thatwasuiAalytobe 

legal  but  was  cer¬ 
tainly  in  breach  of  our 
poficy- and  no  doubt 
bibreacbofour 
customer’s  pdcy. 


Apparently  the  porno¬ 
graphic  e-mail  he  received 
came  from  the  key  contact  at 
our  largest  customer.  Mal¬ 
colm  was  terrified  that  any 
kind  of  formal  complaint 
would  alienate  his  contact. 
Our  company  might  then  lose 
the  account,  and  there  would 
be  hell  to  pay. 

I  gave  him  our  normal  plati¬ 
tudes  that  the  course  of  action 
is  up  to  the  human  resources 
and  legal  departments  and 
that  we  just  carry  out  the  in¬ 
vestigations.  However.  I  also 
knew  that  those  departments 
tend  to  follow  my  team's  ad¬ 
vice  because  of  our  experi¬ 
ence  in  these  matters. 

I  returned  to  our  lab  and  re¬ 
viewed  the  material.  It  was 
adult  content  that  was  xmlikely 
to  be  illegal  but  was  certainly 
in  breach  of  our  policy  —  and 
no  doubt  in  breach  of  our  cus¬ 
tomer’s  policy. 

Moral  Dilemma 

Did  1  want  to  stand  firm  and 
help  stamp  out  this  kind  of  be¬ 
havior.  even  if  my  company 
might  lose  its  largest  cus¬ 
tomer  and  millions  of  dollars 
in  revenue?  Or  should  I  rec¬ 
ommend  that  our  company 
just  ask  Malcolm  to  drop  a  po¬ 
lite  note  to  his  contact  saying 
he’d  rather  not  receive  any¬ 
thing  like  that  and  let  the  mat¬ 
ter  drop? 

I  must  confess  that  I  took 
the  easy  route  and  recom¬ 
mended  to  human  resources 
that  we  let  the  matter  drop  as 
long  as  Malcolm  told  the 
sender  informally  that  he 
should  stc^  sending  such  stuff 
—  and  that  we  would  be 
forced  to  take  a  formal  ap¬ 
proach  next  lime. 

It  would  be  much  better  if 
we  could  find  a  way  to  stop 
this  kind  of  content  from  get- 
tir^  into  our  company  in  the 
first  place.  Tve  always  been  a 
little  wary  of  content  inspec¬ 


tion  products,  particularly 
those  that  look  for  embedded 
images,  because  in  my  experi¬ 
ence,  they  just  don't  work. 

Still,  if  we  could  catch  even 
half  the  pom  being  sent  in,  we 
could  block  or  warn  off  the 
top  senders. 

Rdse  Alarms 

The  reason  these  products 
don't  work  isn’t  because  they 
can't  identify  pornographic 
images  but  because  they  tend 
to  have  a  high  folse-alann 
rate.  Pictures  of  babies,  the 
Mona  Lisa  and  just  random 
landscapes  and  business  logos 
can  be  misidentified  as 
pornography. 

1  did  find  one  company 
making  bold  in  thi< 
area.  I  didn't  believe  them,  but 
it  was  willing  to  provide  an 
evaluation  copy  of  its  soft¬ 
ware.  The  company  did.  how¬ 
ever,  warn  me  about  the  one 
area  that  the  software  has 
problems  with:  Pictures  of  ele¬ 
phants  are  known  to  cause 
false  alarms.  Apparently,  the 
combination  of  two  large 
round  ears  and  a  long  trunk 
raises  the  red  fl^ 

With  this  tool,  we  should  be 
able  to  successfully  block  of¬ 
fensive  content  —  so  long  as 
that  customer  doesn't  send 
Malcolm  any  photos  of  safari 
trips,  rtl  report  back  on  how 
well  the  product  works  in  a 
future  column.  In  the  mean¬ 
time,  if  you  know  of  any 
good  ways  to  protect  staff 
from  e-mail  with  offensive 
content,  drop  me  a  line  with 
your  suggestions.  I 


WUTNYHIMK? 

This  Meek's  joinal  B  wtBsn  tv  a  fsai 
security  manager,  Vince  Tuesday.*  whose 
nsne  and  employer  hare  been  dBouBed 
for  oMous  reesona  ConiBCl  him  at  vmce. 
tuesday^hushmeiooin.  or  jom  he  dis¬ 
cussion  n  ox  form  (MofeLfek  aMO 
To  fed  a  convM  srdiita  of  our 
Security  Manager’s  Joumds.  go  online  to 


Find  confidence  in  the  midst  of  chaos. 


d 


Focus  on  the  best  In  network  security,  every  step  of  the  way. 


Start  with  a  secure  foundation. 

Our  operating  syaem.  IPSO,  is  built  from  the  ground  up  for  security.  It  eliminates 
many  vulnerabilities  common  to  general-purpose  servers,  and  also  incorporates 
our  patented  IP  Clustering  technology.  Multiple  Nokia  security  appliances  can  be 
linked  as  one.  on  the  fly.  for  new  levels  of  performance,  reliability  and  scalability. 


Integrate  the  best  in  network  security  expertise. 

Partners  tike  Check  Point  Software  TetJinologies.  Internet  Security  Systems  and  F5 
help  us  detiver  the  full  capabilities  of  their  VPN.  firewall,  intrusion  protection,  and 
Internet  traffic  management  applications  To  learn  about  the  other  ways  we  give 
our  customers  greater  peace  of  mind,  just  visit  wnNftiiuMkiaxom/lpseairft)^ 
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URoam  Upgrades 
Vra  /^pliance 

LPRoamCorp.  in  Sunnyvale.  CalH..  , 
announced  last  week  that  it‘s 
shipping  a  revision  of  Ms  Secure 
Sockets  Layer  (SSL)  virtual 
private  network  (VPfi)  appliance, 
the  FvePass  1000/4000  server. 
Version  3.5  offers  greater  securi' 
ty  and  corrtrol  for  IT  managers, 
accortkng  to  uRoam.  H  aho  offers 
policy*based  access  for  users, 
giving  them  e*inail  and  file  access  ' 
from  can  phones,  as  well  as 
e-mal,  irrtrmt  and  file  access 
from  Uoeks.  Mo  preinstalled  client 
software  is  required.  Pricing 
starts  at  StLOOO  for  a  license 
serving  100  concurrent  users. 

Vendor  Announces 
PlanView  v7.3 

PlanView  Inc.  has  announced 
Version  7 J  ol  Hs  PlenVItw 
PortWio  Management  program. 

The  Austin,  Taxarbasod  IT  port* 
MIo.  resource  and  protect  man* 
agement  tool  vendor  said  the  new 
version  indudes  tools  to  rank 
pMarrtiai  IT  invBstmants.  Plan- 
View  7J  also  includas  portals  lor 
viewing  IT  trwestmants.  tracking 
IT  asset  performance  and  manag* 
ing  IT  protect  resources.  Other 
Iselurts  inchide  a  Vfeh-based 
tm  and  axpense  module  and 
ful-taxt  saarch  capabklty.  dicing 
tor  Version  7  J.  which  ships  in 
June,  starts  at  S50.000. 

Lpiphany  Ships 
Two  CRM  Products 

San  Mateo,  CaM.-tiaaed  cus¬ 
tomer  retatknship  management 
(CRM)  software  maker  Lpiphany 
tnc.  last  weak  arswimced  that  it 
IS  shipping  two  new  products  to 
help  companies  in  the  telecom- 
mmcahons  and  finance  markets 
increase  sales  volume.  Mer- 
action  Advisor  for  Telecommurw- 
cations  and  Meraction  Advisor 
for  Ratad  Finance  take  historical 
data  to  help  upaell  and  cross-sell 
to  eustomen  who  OMrtact  a 
company  by  phone  or  e-maiL 
according  to  Epiphany.  Pricing 
starts  at  S100.(KM. 


ROBERT  L.  MITCHELL 


Scope  Creep  and 
Exchange  Server  2003 


"HEN  I  WAS  IN  SCHOOL,  I  was  al¬ 
ways  working  on  my  car.  I  had  it  fig¬ 
ured  that  I’d  save  a  bundle  by  modi¬ 
fying  it  myself.  But  inevitably.  I’d 
would  fail  to  estimate  the  scope  of 


the  project,  and  I’d  spend 
ridiculous  amounts  of  time 
throwing  good  money  after 
bad.  Tliat  upgrade  to  a 
four-barrel  carburetor 
didn’t  fit  unless  I  changed 
out  a  few  hoses  and  feed 
lines.  Then  I  needed  a  big¬ 
ger  fuel  pump  to  keep  the 
supply  lines  humming.  In 
the  end.  I  decided  that  the 
carburetor  wasn’t  going  to 
work  as  advertised  unless  I 
had  the  right  motor  under¬ 
neath  it.  Upgrading  IT  in¬ 
frastructure  is  a  lot  like  that,  especially 
when  it  comes  to  Microsoft's  products. 

Exchange  Server  2003,  the  upcom¬ 
ing  release  of  Microsoft’s  e-mail  server  | 
software,  is  a  classic  example.  Micro¬ 
soft  does  a  very  good  job  of  integrat¬ 
ing  its  products  and  creating  interde¬ 
pendent  feature  sets  that  it  hopes  will 
push  IT  into  lock-step  upgrades  of  its 
desktop,  server  and  application  soft¬ 
ware.  And  to  exploit  the  most  com¬ 
pelling  features  of  Exchange  2003. 
you'll  need  to  do  exactly  that. 

E-mail  administrators  who  already 
got  their  fingernails  dirty  migrating 
from  Exchange  5.5  to  2000  can  identify 
with  these  sentiments.  Exchange  2000 
was  the  first  version  lo  use  Window^ 
iiktn  Ser\'ef’s  Active  Directorv  js  nv 
roDiKHors’  tor  'iser  mtormatum.  i  *"»•• 
quiremcni  that  nas  led  many  compa¬ 
nies  mio  maior  server  inirastructure 
upgrades.  Bui  Exenange  2UUU  also  de¬ 
livered  real  bcnefiis  to  administrators, 
enabling  faster  backbone  communica¬ 
tions.  more  granular  administrative 
controls  for  delegating  tasks,  im¬ 
proved  reliability  and  server  consoli¬ 


dation  through  support  for 
four-way  servers,  active- 
active  clustering  and  mul¬ 
tiple  message  databases 
per  server. 

If  Exchange  2000  was 
about  the  back  end.  Ex¬ 
change  2003  is  very  much 
user-focused.  New  features 
include  greatly  improved 
performance  between  Out¬ 
look  and  Exchange  ovpr 
slow  links,  support  for  SSL 
session  encryption  and 
changes  to  the  Outlook 
Web  Access  user  interface  to  make  it 
look  like  the  standard  Outlook  2003 
client.  Exchange  2003  also  supports 
snapshot-backup  technology  that 
could  rex'erse  the  trend  toward  creat¬ 
ing  multiple,  smaller  message  data¬ 
bases  in  order  to  meet  backup  and 
restore-time  commitments. 

Exchange  5.5  users  considering  a  mi¬ 
gration  to  Exchange  2003  face  all  the 
same  challenges  Exchange  2000  users 
faced,  and  then  some.  But  for  those  al¬ 
ready  on  Exchange  2000.  going  to  Ex¬ 
change  2003  might  look  like  a  Sunday 
drive.  It  requires  upgrading  to  Win¬ 
dows  Server  2003.  but  the  Exchange 
server  upgrade  shouldn't  require  the 
major  revamping  of  hardware  and 
server  confuatratiori'.  »hai  ’ooo  did 
8ii*  wna'  tiMniif  'nose  oerformance 
impnivements  over  slow  links.'  Users 
at  remtiiL-  sites  will  oenefit.  And  heck, 
you  might  even  oe  able  to  cons<mdatc 
by  removing  servers  no  longer  needed 
at  remote  sites.  But  you  won  t  see 
these  benefit.s  from  Exchange  2003  un¬ 
less  you  also  upgrade  to  Outlook  2003. 
which  ships  with  Office  2003  later  this 


year.  The  latter  won’t  work  with  any¬ 
thing  older  than  Windows  2000  with 
Service  Pack  3.  And  you’ll  probably 
need  at  least  245MB  of  disk  space  and 
256MB  of  RAM  per  machine.  Are  you 
ready  to  go  dow'n  that  road? 

Then  there’s  Windows  Server  2003. 
You  could  just  slide  it  under  your  Ex¬ 
change  2003  servers  and  be  done  with 
it.  But  unless  you  upgrade  the  entire 
Active  Directory  infrastructure,  you 
probably  won’t  be  able  to  use  en¬ 
hancements  such  as  the  ability  to  sup¬ 
port  more  than  5.000  users  in  a  group 
or  to  rebuild  branch  office  servers 
from  a  CD  instead  of  resynchronizing 
them  over  the  network. 

Add  to  that  the  fact  that  we’re  talk¬ 
ing  about  new  technology  here.  Win¬ 
dows  Server  2003  won’t  ship  until 
April  24.  And  Office  2003  and  Ex¬ 
change  Server  2003  aren’t  expected  to 
ship  until  midyear  at  the  earliest.  Even 
if  Microsoft  releases  these  products  on 
schedule  (and  how  often  does  that 
happen?),  you  could  be  looking  at  roid- 
2004  or  later  for  .service  pack  updates. 

All  this  is  not  to  say  that  Exchange 
2003  doesn’t  have  many  features  to 
recommend  it.  But  for  the  20%  or  so  of 
Exchange  users  that  Gartner  says  have 
already  migrated  to  E.xchange  2000, 
there’s  no  reason  to  rush  to  2003  un¬ 
less  a  new  feature  is  critical  —  and 
worth  the  risk  and  expense  of  related 
upgrades.  The  10%  who  haven't  started 
migrating  yet  probably  should  go  with 
Exchange  2000  now  rather  than  wait 
for  Exchange  2003  to  shake  itself  out. 
.since  support  for  NT  4.  which  under¬ 
lies  Exchange  5.5.  expires  Dec.  ^1.  For 
■•vervnne  else  jlre.idv  working  ihmugh 
Exchange  migrations,  slapping  .i 
new  engine  in  the  IT  chassis  probablv 
doesn  t  make  a  lot  of  sense  right  now 
Thai  IS.  unless  vini  re  the  type  who 
enjoys  working  on  cars _ I 

WANT  MIR  OPINION? 

For  more  columns  and  hnks  to  our  archives,  go  to 
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Scope  Creep  and 
Exchange  Server  2003 


"HEN  1  WAS  IN  SCHOOL,  I  was  al¬ 
ways  working  on  my  car.  I  had  it  fig¬ 
ured  that  I’d  save  a  bundle  by  modi¬ 
fying  it  myself.  But  inevitably,  I’d 
would  fail  to  estimate  the  scope  of 


the  project,  and  Td  spend 
ridiculous  amounts  of  rime 
throvring  good  money  after 
bad.  That  upgrade  to  a 
fouT'barrel  cartmretor 
didn't  fit  unless  I  changed 
out  a  few  hoses  and  feed 
lines.  Then  I  needed  a  big* 
ger  fuel  pump  to  ke^  the 
supply  lines  humming.  In 
the  end.  I  decided  that  the 
carburetor  wasn't  going  to 
work  as  advertised  unless  I 
had  the  right  motor  under¬ 
neath  it  U^rading  IT  in¬ 
frastructure  is  a  lot  like  that  especially 
when  it  comes  to  Microsoft's  products. 

Exchange  Server  2003,  the  upcom¬ 
ing  release  of  Microsoft's  e-mail  server 
software,  is  a  classic  example.  Micro¬ 
soft  does  a  very  good  job  of  integrat¬ 
ing  its  products  and  creating  interde¬ 
pendent  feauire  sets  that  it  hopes  will 
push  IT  into  lock-step  upgrades  of  its 
desktop,  server  and  application  soft¬ 
ware.  And  to  exploit  the  most  com¬ 
pelling  features  of  Exchange  2003, 
you'll  need  to  do  exactly  t^t 

E-mail  administrators  vdio  already 
got  their  fingernails  dirty  migrating 
from  Exchange  SLS  to  2000  can  identify 
with  these  sentiments.  Exchange  2000 
was  the  Hrst  version  to  use  Windows 
200U  Server's  Active  Directory  as  its 
repository  for  user  inl'ormation.  a  re¬ 
quirement  that  has  led  many  compa¬ 
nies  mto  major  server  infrastructure 
upgrades.  Out  Exchange  2000  also  de¬ 
livered  real  benefits  to  administrators, 
enabling  faster  backbone  communica¬ 
tions.  more  granular  administrative 
controls  for  delegating  tasks,  im¬ 
proved  reliability  and  server  consoU- 


datioD  through  support  for 
four-way  servers,  active- 
active  clustering  and  mul¬ 
tiple  message  databases 
per  server. 

If  Exchange  2000  was 
about  the  back  end,  Ex¬ 
change  2003  is  very  much 
user-focused.  New  features 
include  greatly  improved 
performance  ^tween  Out¬ 
look  and  Exchange  over 
slow  links,  support  for  SSL 
session  encryption  and 
changes  to  the  Outlook 
Web  Access  user  interface  to  make  it 
look  like  the  standard  Outlook  2003 
client.  Exchange  2003  also  supports 
snapshot-backup  technology  that 
could  reverse  the  trend  toward  creat¬ 
ing  multiple,  smaller  message  data¬ 
bases  in  order  to  meet  backup  and 
restore-time  commitments. 

Exchange  S3  users  considering  a  mi¬ 
gration  to  Exchange  2003  foce  all  the 
same  challenges  Exchange  2000  users 
faced,  and  then  some.  But  for  those  al¬ 
ready  on  Exchange  2000,  going  to  Ex¬ 
change  2003  might  look  like  a  Sunday 
drive.  It  requires  upgrading  to  Win¬ 
dows  Server  2003.  but  the  Exchange 
server  upgrade  shouldn’t  require  the 
major  revamping  of  hardware  and 
'Server  conriguraiions  chat  2000  did 
But  what  about  those  performance 
unprovements  over  slow  linksf  Users 
at  remote  sites  will  benefit.  And  heck, 
you  might  even  be  able  to  consolidate 
by  removing  servers  no  longer  needed 
at  remote  sites.  But  you  won't  see 
these  benefits  from  Exchange  2003  un¬ 
less  you  also  upgrade  to  Outlook  2003. 
whit^  ships  with  Office  2003  later  this 


year.  The  latter  won't  work  with  any¬ 
thing  older  than  Windows  2000  vrith 
Service  Pack  3.  And  you'll  probably 
need  at  least  245MB  of  disk  space  and 
2S6MB  of  RAM  per  machine.  Are  you 
ready  to  go  down  that  road? 

Then  there's  Windows  Server  2003. 
You  could  just  slide  it  under  your  Ex¬ 
change  2003  servers  and  be  done  with 
iL  But  unless  3n>u  upgrade  the  entire 
Active  Directory  infrastructure,  you 
probably  won't  be  able  to  use  en¬ 
hancements  such  as  the  ability  to  sup¬ 
port  more  than  SJ)00  users  in  a  group 
or  to  rebuild  branch  office  servers 
from  a  CD  instead  of  resynchronizing 
them  over  the  network. 

Add  to  that  the  fact  that  we're  talk¬ 
ing  about  new  technology  here.  Win¬ 
dows  Server  2003  won’t  ship  until 
April  24.  And  Office  2003  and  Ex¬ 
change  Server  2003  aren't  expected  to 
ship  until  midyear  at  the  earliest.  Even 
if  Microsoft  releases  these  products  on 
schedule  (and  bow  often  d^s  that 
happen?),  you  cottld  be  looking  at  mid- 
2004  or  later  for  service  pack  updates. 

All  this  is  not  to  say  that  Exchange 
2003  doesn’t  have  many  features  to 
recommend  it.  But  for  the  20%  or  so  of 
Exchange  users  that  Gartner  says  have 
already  migrated  to  Exchange  2000. 
there's  no  reason  to  rush  to  2003  un¬ 
less  a  new  feature  is  critical  —  and 
worth  the  risk  and  expense  of  related 
upgrades.  The  10%  who  haven't  started 
migrating  yet  probably  should  go  with 
Exchaige  2000  now  rather  than  wait 
for  Exchan^  2003  to  shake  itself  out. 
since  support  for  NT  4.  which  under¬ 
lies  Exchange  5.5.  expires  Dec.  31.  Ifor 
everyone  else  already  working  through 
Exchaige  2000  nugrarions.  slappug  a 
new  engine  in  the  TT  chassis  probably 
doesn't  make  a  lot  of  sense  right  now. 
That  IS.  unless  you’re  the  type  who 
enjoys  working  on  cars. ...  I 
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Leading  Geeks 
Just  Got  Easier 


The  Definitive  Inside  Guide 
to  Geek  Management 

By  Paul  Glen 

$26.95  *  253  pages  ♦  http://www.leadinggeek5.com 


"Paul  Glen's  insights  and  experience  provide  the  keys  to 
unlocking  the  potential  (of  geeks]." 

-Warren  Bennis 
Co-aufhor  Geeks  and  Geezers 


"Leading  Geeks  provides  a  unique  and  pragmatic  perspective  of 
the  issues  faced  by  technologists  as  they  create  value  within  an 
organization.  The  ideas  here  will  help  any  technical  business." 

— Allen  Dickason 
Sr.  VP  and  CTO.  Kinko's 


Leading  Geeks  challenges  the  conventional  wisdom 
about  leadership.  This  landmark  book  explains 
why  the  culture  of  technologists,  the  nature  of 
technical  work,  and  dynamics  of  power  undermine  tradi¬ 
tional  approaches  to  leadership...and  gives  you  the  tools 
to  lead  geeks  effectively. 


Who  is  Likely  to  Become  a 
Leader  — and  why 

By  Warren  Bennis  &  Robert  Thomas 

$26.95  ♦  256  pages  ♦  http://www.geeksandgeezers.com 

"An  inspired  idea,  a  tantalizing  title,  an  essential  book." 

—Howard  Gardner 

Co-Author  of  Good  Work:  When  Excellence  and  Ethics  Meet 
■Required  reading  for  every  aspiring  leader." 

— Howard  Schultz 
CEO,  Starbucks 

Today's  young  leaders  grew  up  in  a  very  different 
world  from  that  of  their  grandparents.  In  a  ground¬ 
breaking  study  of  these  two  disparate  groups— 
affectionately  labeled  "geeks"  and  "geezers"— the 
authors  set  out  to  find  out  how  era  and  values  shape 
those  who  lead.  What  they  discovered  was  the  powerful 
process  through  which  leaders  of  any  era  emerge. 
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High-speed  Access 

TD  High-speed  talent 


Network  Administrators  are  a  phone  call  away. 

To  keep  your  business  competitive,  you  need  the  right  IT  talent  at  just  the  right  time. 

With  more  than  100  locations  worldwide,  Robert  Halt  Technology  is  a  leading  provider  of: 

•  Network  Administrators  •  Help  Desk  Professionals 

•  Programmers  •  Database  Administrators 

•  Web  Developers  •  And  other  Technology  Professionals 

•  Network  Security  Engineers 

With  our  exceptional  connections  to  the  best  technology  talent  available,  we'll  do  more  than  provide 
cost-effective  solutions  to  your  needs  -  we'll  do  it  exactly  when  you  need  it. 

Call  today! 

800.793.5533 
roberthalfteclinology.com 


ROBERT  HALF  * 

TECHNOLOGY 

Information  Technology  Professionals  ** 
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Snake  Pit  or  Gold  Mine? 

Tunes  are  tough,  and  most  IT 
execs  love  a  challei^e.  but  not 
every  CIO  job  is  worth  acceptii^ 
IT  professionals  like  Atefeh  Riazi 
(left)  offer  tips  on  how  to  analyze 
a  job  offer.  PiQa  48 


Premium  Protection 

A  small  but  growii^  number 
of  organizations  are  taking 
steps  to  buy  insurance  as 
protection  against  cyber¬ 
attacks  and  data  theft. 

Pan  SO 


Sealing  the  Deal  and 
Collecting  Their  Due 

Sales  forces  are  gainii^  access  to 
tracking  and  reporting  data  through 
information-sharing  software,  which 
helps  ensure  that  they  collect  accurate 
commissicMts.  Pan  52 


IN  THE  PAST  18  MONTHS,  the 

U.S.  retail  motto  has  gone 
from  “buyer  beware"  to  “sell¬ 
er  beware"  when  it  comes  to 
mariceting  goods  and  ser¬ 
vices  over  the  phone. 
Thanks  to  a  flc^  of  state- 
based  do-not-call  laws,  com¬ 
panies  in  industries  ranging  from  insur¬ 
ance,  hospitality  and  travel  to  real  es¬ 
tate,  finance  and  telemarketing  need  to 
pay  attention  to  whose  number  they're 
dialing  —  or  face  Tust-time  offender 
fmes  ranging  from  $100  in  Wisconsin  to 
$25000  in  Indiana. 

That's  the  price  they  stand  to  pay  for 
calling  consiuners  who  are  registered 
on  any  of  the  do-not-call  lists  that 
more  than  half  of  the  states  now  main¬ 
tain.  States  are  becoming  more  aggres¬ 
sive  about  encouraging  people  to  re¬ 
port  violators,  and  they're  collecting 
fines  from  the  offenders  and  publiciz¬ 
ing  their  names.  And  fearing  that  nega¬ 
tive  publicity  could  cut  into  the  hun¬ 
dreds  of  billions  in  revenue  they  make 
from  telephone  solicitations,  compa¬ 
nies  are  scrambling  to  perfect  their 
databases  and  dialing  systems. 

Do-not-call  laws  aren’t  new.  Florida 
enacted  the  first  such  law  in  1990. 

Since  then,  companies  have  been  pur¬ 
chasing  lists,  which  can  cost  up  to 
$800  annually,  and  IT  departments 
have  been  merging  their  companies’ 
lead  databases  with  these  lists,  purging 
numbers  that  shouldn't  be  called. 

Database  administrators  also  have  to 
integrate  their  companies’  internal  do- 


not-call  lists,  which  are  required  by  the 
Federal  Trade  Commission,  with  their 
customer  lists,  T^ch  could  be  in  sev¬ 
eral  separate  databases  across  the 
company.  In  one  exemption  from  do- 
not-call  laws,  companies  can  call  their 
own  customers,  even  if  those  cus¬ 
tomers  are  on  a  state  do-not-call  list. 

Unfortunately,  the  way  most  compa¬ 
nies  find  out  that  their  in-house  list- 
scrubbing  is  imperfect  is  by  commit¬ 
ting  a  violation.  In  the  past  couple  of 
years,  even  large  companies  like  Chase 
Manhattan  Bank,  Wells  Fargo  Bank, 
Discover  Financial  Services  and  Mar¬ 
riott  Ownership  Resorts  Inc.  have 
faced  fines.  As  a  result,  companies  are 
turning  to  outside  service  providers 
for  list-scrubbing  services,  and  they’re 
implementing  systems  that  automati¬ 
cally  block  noncompliant  calls. 

Future  Call 

“There  mic^t  be  a  few  companies  out 
there  that  rhink  they  can  handle  this 
in-house,  but  I  don’t  think  it’s  possible, 
unless  they  have  a  staff  dedicated  day- 
in  and  day-out  to  doing  the  research, 
pulling  down  the  information,  verify¬ 
ing  it,  scrubbing  their  internal  lists  and 
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checkiDg  it  again,"  says  B.|.  Neider. 
manager  of  data  transmissions  and  re¬ 
sponse  modeling  in  the  IT  department 
at  FutureCall  LLC  a  telemartteting  out¬ 
sourcer  in  Oriorado  Springs. 

Neider  says  achieving  perfect  com¬ 
pliance  required  "too  much  time  and 
money  to  tacUe  with  the  resources  we 
had.'  He  estimates  that  it  took  four  IT 
employees  10  hours  each  per  week  to 
subscribe  to  the  new  state  lists  as  they 
came  out.  keep  up  with  which  states 
had  new  laws  and  bring  the  lists  in- 
house.  convert  them  to  a  workable  for¬ 
mat  and  scrub  them  against  all  the 
contact  databases  maintained  in  the 
call  center.  Even  with  all  that  due  dili¬ 
gence.  EutureCali  was  once  fmed 
575,000  in  New  York. 

Neider  signed  on  14  months  ago  with 
PossibleNow.com  Inc.,  an  application 
service  provider  in  Duluth.  Ga..  that 
offers  DNCSohitioa  a  Web-based  list- 
scrubbing  application  that  sends  an 
e-mail  when  any  state  list  has  been 
updated.  Upon  receipt  of  the  e-mail,  a 
FutureCall  employee  pulls  the  contact 
database  from  the  automated  dialers  in 
the  call  centers  and  sends  them  to  Pos- 
sibleNow.  which  returns  the  database 
with  flags  next  to  numbers  that  must  be 
suppressed.  The  employee  then  sends 
the  updated  daubases  back  to  the  call 
centers,  all  within  a  matter  of  hours. 

For  example,  Neider  says,  'If  Indi¬ 
ana's  [do-Dot-call  list]  was  just  updated 
and  goes  into  effect  tonight,  we  can  log 
on.  go  to  our  client  folder,  have  the  sys¬ 
tem  scrub  the  leads,  get  a  return  fUe  ^ 
have  It  in  place  the  next  morning  be¬ 
fore  dialir^  begins,'  Neider  says.  Speed 
is  imponant,  be  says;  'Every  hour  1 
spend  not  dialii^  is  revenue  lost." 

FutureCall  sdll  needs  to  subscribe  and 


pay  for  the  state  lists,  but  it  no  longer 
has  to  be  proactive  about  the  updates. 
\^ith  this  service.  Neider  figures  be 
can  scrub  18  million  records  per  month 
at  a  cost  of  S36.000  annually.  'If  I  have 
two  violations  in  Indiana,  there's  ray 
535.000  right  there."  he  says.  “The 
money  we  paid  out  for  fines  exceeded 
our  yearly  cost  with  PossibleNow." 

Bankers  Life 

Other  companies  find  that  even  that 
process  is  too  manual  One  is  Bankers 
Life  and  Casualty  Ca.  which  uses 
phone  marketing  to  sell  some  of  its 
insurance  products. 

"There  are  do-not-call  lists  from  30- 
plus  states  at  this  point,  and  they  all 
come  in  different  formats,  with  different 
update  frequencies,  some  via  the  Inter¬ 
net.  some  on  floppies.  So  first  you  have 
to  aggregate  all  the  lists  and  then  deploy 
them  somehow  [to  your  various  loca¬ 
tions],  whether  manually  or  via  a  cen¬ 
tralized  database.  That  allows  people 
to  query  it  before  making  a  call."  says 
Michael  Snavely.  a  maiketing  executive 
at  Chicago-based  Bankers  Life.  "It's  an 
incredible  investment  of  money." 

Bankers  Life  chose  a  service  from 
Norwood.  Mass.-based  Gryphon  Net- 
nxiiks  Corp.,  which  claims  to  block 
noncompUant  cafU  in  two  ways:  One  ts 
via  a  network-based  service,  for  which 
companies  pay  a  per-call  fee.  The  sec¬ 
ond  is  with  a  system  the  marketer  im¬ 
plements  itself  and  hooks  into  its  auto¬ 
mated  dialers.  The  latter  system  b  of¬ 
ten  used  by  large  telemarteting  out¬ 
sourcing  companies. 

Bankers  Life  uses  Gryphon's  net¬ 
work-based  system.  Any  call  ori^nated 
by  a  Bankers  Life  agent  gets  routed  by 
a  local  or  loi^-distance  carrier  through 


a  Gryphon  database  that  contains  rele¬ 
vant  state  do-not-call  lists,  upKlated  in 
real  time,  as  well  as  Bankers  Life's  in¬ 
ternal  do-not-call  list.  If  the  number 
matches  one  in  the  database,  the  sales 
agent  hears  a  message  saying  it's  a  re¬ 
stricted  number  and  the  call  never  goes 
chroi^  A  call  will  also  be  blocked  if 
the  agent  is  falhng  at  a  time  that's  off- 
limits  in  the  state  being  called  —  say. 
before  9  a.m.  in  Connecticut. 

Furthermore,  if  consumers  ask  to  be 
added  to  Bankers  Life's  internal  list  or 
say  they  are  on  a  state  do*noc<aD  list  the 
agent  can  simply  press  the  pound  key 
to  record  the  name  and  number  in  a 
Gryphon  database,  blocking  access  to  it 
in  every  Bankets  Life  branch. 

"You  don’t  have  to  buy  any  equip¬ 
ment  of  any  kind."  says  Keith  Fotta, 
president  of  Gryphon.  Tou  access  the 
service  via  a  network  access  number 
and  put  in  your  code,  which  locks  you 
in  for  the  «^le  session.” 

Snavely  estimates  that  he  spends 
about  5100.000  a  year  to  buy  the  state 
lists,  and  about  the  same  for  Gryphon's 
annual  subscription  fee,  which  is  based 
on  the  number  of  calls  the  company 
makes  or  the  nunfoer  of  sales  agents 
maicing  calls.  Without  the  system,  he 
figures,  be  would  easily  pay  $100X>00 
per  year  in  fines.  "And  if  you're  a  mul¬ 
tiple  offender,  the  state  can  theoretical¬ 
ly  eliminate  your  ability  to  conduct 
telemarketing  in  that  state.'  be  says. 

AMatterofSwvivai 

The  bottom  line  is  that  compliance 
with  do-not-call  laws  is  becoming  a  mat¬ 
ter  of  survival  for  companies  chat  reap 
big  revenues  through  phone-based  so¬ 
licitations.  Automating  tbe  compliance 
process  may  take  some  control  out  of 
IPs  bands,  but  technology  managers 
can  play  a  huge  role  in  helping  their  le¬ 
gal  and  marketing  departments  under¬ 
stand  the  various  techntdogy  choices. 

IT  will  also  need  to  remain  involved 
at  the  implementation  level  panicularly 
at  companies  where  customer  lists  and 
contact  databases  are  scattered  in  dif¬ 
ferent  formats  and  on  different  systems. 

"Based  on  the  list  of  violators  I  see  on 
a  regtilar  ba^  [as  they  are  pubUdied  by 
tbe  states),  I  get  a  strong  sense  that  our 
competitors  and  peers  within  insurance 
and  b  different  industries  are  doing  a 
lousy  job  of  this  and  are  getting  hit  agab 
and  agab  and  again,"  Snavely  says. 
Reputations  are  at  stake  not  just  those 
of  telemaiketers  but  of  anyone  who 
engages  b  phone-based  marketing.  I 


Brandel  is  a  fnelance  writer  in  Sewton, 
Mass.  You  can  contact  her  at 
bnjiuklst^attbicom. 


CARRIERS 

OFFERING 
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Another  network-based  option 
is  TeleBlock  from  Can  Cornpli- 
ance  Inc.  in  Glen  Cove.  N.Y. 
TeleSiock  automabcatly 
screens  and  blodts  cafe  to 
people  on  state,  in-house  and 
tNrd-party  do-not-call  lists 
within  the  network  of  a  paitici- 
pating  telephone  company. 

A  corr^ny  in  need  of  tele- 
marketino  services  signs  up 
for  TeleBlock  through  its  kmg- 
distance  carrier.  Mfiere  the 
system  is  insIaBed. 

One  drawback  is  that  Tele- 
block  is  offered  by  only  three 
small  long-distance  carriers - 
eMerttus  Communications  Inc., 
Covista  Communications  Inc. 
and  iumlnet  now  owned  by 
\teriSign  Inc.  But  through  an 
agreement  that  VariSign  and 
Can  Compliance  reached  last 
year.  TeleBlock  is  now  avail¬ 
able  to  all  telecommunications 
carriers  nationally. 

Robert  Brous.  president  of 
HO  Brous  &  Co.,  a  Wi  Street 
investment  litm  with  200  em¬ 
ployees.  says  it  "wasn't  realis¬ 
tic"  for  the  company  to  require 
brokers  to  constant  check 
against  state  do-not-call  lists 
before  making  a  cd.  He  con¬ 
tracted  with  eMeriUis  for  long- 
distanoe  service  when  Tete- 
Block  first  became  avadable 
three  and  a  half  yeais  ago.  It 
basically  took  any  questions 
away  of  compliance  head- 
ach^*  Brous  says. 

Brous  says  he  also  looked 
into  buiding  his  own  database 
arxl  attaching  R  to  the  phone 
system,  but  toat  Muldn't  have 
worked  with  his  company's 
multiple  locations.  L^-scnib- 
bing  doesn't  address  the  prob¬ 
lem  because  R  doesnl  w^  in 
real  time,  he  says,  "plus,  you're 
relying  on  how  weH  the  com¬ 
pany  does  the  scrubbing." 

‘MafyBfdndel 


>  The  most  reliable  servers  are  the 
ones  you  don't  have  to  think  about. 


•VawAAedil 

•htwl*  PMiwni*  i  piocMMf  2.53  GHx  - 
(2.80GH*<i.ailabb| 

•254MB PC2I<»  RasniMd  ECC  DM  SDRAM  Mmxy 
•kttsDMd  Dual  Channd  Un  AlA-KW  tX  MofUtt  wi* 
M«7iMdATARAD0.1.&  1*0 
•AOGB  AU  7200  ipm  Driw  I** 

•NC7760  Ntfwofk  CoMrelv 


(mdudlng  SmortSlart^  &  Imigta  Managur'*^ 

•  l-ltoWafMMdiPtu-MumWanaiUy  Iproaiioo,  momofyB 
hori  Awtt  notf-biainii  do>’  pom.  labor  &  cn^  dritwy' 


$1,048 


HP  servers  are  as  reliable  as  they  are  affordable 
so  if  costs  less  to  maximize  your  server's  uptime. 

In  fact,  our  Intel' processor-powered  HP  servers  ore 
the  best-designed  servers  built  on  the  most  reliable 
plathrm  available  They're  custom  configured  to  meer 
your  componys  nonstop  demands  and  tfiey're 
easier  to  install  than  ever  before.  And  every  HP 
server  can  be  managed  today  as  easily  as  they  are 
adopfive  and  expandable  for  tomorrow  Plus  they're 
ail  backed  with  an  impressive  warranty  and  our 
experienced  service  ond  support  leom  So  your 
busirjess  heads  in  the  only  direction  it  should— up. 


•lnlil*Ci<won*  1.60  GHz  prscMior 
•  )26M0  PC2I00  RogoMrwl  ECC  DM  Mwnory. 

up0radMbl*K>4Ge 
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•40Ge  UkoAIA  7200  rpm  Hwd  Driva' 

•NC7760  G<oab>)  rJMuort  CoMrelw  (ambuddudl 


$549 


>  hp  FreUt  MiMO 

•ItMur  Modal 

•taM*  Iteen"*  pcocwMc  2.40  OHt 
•256h«1bid  PC3IOO  RogiMrad  ECC  DM 
SDRAM  MmkxvOx  2561 
•InMgraMd  Owd  Widi  Uka3  SCSI  Adaptor 
•6  X  I*  Hot  PluggabU  H»d  Drrao  Boin 
•36.4Ge  U320UnMnalH<sdOrM|n 

10,000  rpm* 

•NC7760  Gipte  Centroltr  lamboddad) 

•ProUoni  Evanliak  FoundaiiOA  Pock  (indwdiag 
SfwtSicl"*  *  InoigH  Mgiogar"*) 

•a-Vdoi  WgridMdi  Ppa.Foiiura  Wotrority  (procauort. 
iratnory  &  hard  dfwa^.  nax>-bu»inau-doy  pom. 
labor  &  ort-tilt  dohaiy' 


$1,938 


•Rock  Modal 

•M^  Xoo)'^  proCMMtr  2.40  GHz 
•5 1 2A«  M  fC2 1 00  Rogutorod  ECC  DM 
S0RAM«Mfaeiv(2«25^ 

•Mogrolad  Snarl  Artoy  Si  Ha  CoriaoRar 
•Hot  Hug  Ornu  Ccgo-lliaeS 
{5  X  I*  and  I  ■  1.6*) 

•36  4GB  U320  Utwond  Hord  Orno  in 
10.000  rpn* 

•Tw>NC77ei  POX  Orgobit  MC»  jonbaddadl 
PO  )O/)00WCX 

•Sliding  R^  and  CoUa  Monogananl  Am 
•ProlaM  rtianliidi  Fovndtfien  Pock  (oidirfag 

SnviStort**  6  kHigb  Mmogarn 

•3-yaar  Wbtidmida  Pig  foRurg  Warranty 
IprocOMOn,  noniory  B  hard  ^na«|, 
inrlbiiiinaat  dny  pwP.  bbor  &  otioll  dbwory' 

$3,663 


0%  FOR  24  MONTHS. 

For  a  limited  time,  get  0%  lease  rate  on  quailing  purchases  nwde  before  April  3a  2003? 


Toll  Free  1-866-625-0783 
www.hp.com  90  ma9azine3 
Or  call  your  local  reseller 


nofca.foaxaiJlomSm,all4»2775942.laldk«dhida,folnUlmdilty,Xaon.Paai«a.aMCalammitadm»kioriigiaiiiil»i.ibai»lidSadCaTX^ 
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Snake  Pit  or 

Gold  Mine? 


Here  are  10  ways 
to  analyze  a  CIO 
job  offer.  By  Alan 
S.  Horowitz 


1  Ht  MARKET  FOR  CIO  isn't  what  it 
used  to  be.  "Times  are  poor,  and  the 
market  Is  kind  of  soft,"  notes  Rick 
Schoenhals,  senior  director  for  IT  for 
the  National  Football  League's  Denver 
Broncos.  The  temptation  is  great  to 
jump  at  any  decent-sounding  offer. 
Slop.  Not  evcr>'  job  offer  thrown  your 
way  should  be  caught.  How  can  a  CIO 
know  which  offers  are  worth  serious 
consideration  and  which  should  be 
given  a  pass?  Here  are  10  points  to  con¬ 
sider  when  analy'zing  an  offer; 


11s  the  organization  financially 
sound?  Unless  you’re  a  turn¬ 
around  specialist,  beware  of  a 
troubled  company.  It  will  likely 
promise  more  than  it  can  deliver. 

"The  biggest  red  flag  is  the  financial 
condition  of  the  company."  advises 
M.  Victor  fanulaitis,  CEO  of  fanco 
Associates  Inc.,  an  IT  consulting  firm 
in  Park  City.  Utah. 

2  Starting  compensation  matters. 

Beware  if  the  flnancial  package 
offered  is  filled  with  promises  for 
the  future.  "I'd  really  look  for 
them  to  want  me  as  much  as  I  want  to 
work  for  them.  They  need  to  step  up 
with  an  offer  that  shows  an  interest  in 
you."  recommends  Schoenhals. 


Pay  attention  to  the  personal 
chemistry,  especially  between 
you  and  die  person  to  wtwm 
yOuH  report.  "Can  you  work  with 


3 


Should  I  Stay  or  Should  I  Go? 

CX)s  and  Ihe  heads  of  IT  have  held  lhe«  tntes  for  an  average  of  lour  years  and  ei{yit  monitis.  accoid- 
mg  to  a 2002  CIO  magazne  study  titled  "the  State  of  the  QO.*  Here'saciosar  kxA  ai  Iheir  ten>.rn>: 


How  kmg  did  you 
stay  at  your  Int  job? 


How  long  do  you  expect  to 
stay  at  your  current  job? 


tyear 


-  Belvwenl- 
andSyews 


-0ehwen3- 

andOyears 


-  BcfwcenS  - 
and  K)  years 


-  Morethan- 
X)  years 


each  other:  do  you  have  common  goals 
and  a  common  point  of  view?"  asks 
Atefeh  Riazi,  CIO  and  senior  partner  at 
New  York  advertising  agency  Ogilvy  Sc 
Mather  Worldwide.  No  hard  and  fast 
rules  exist  for  gauging  personal  chem¬ 
istry.  Trust  your  intuition,  says  Riazi. 
who  adds.  “The  brain  decides  if  the 
money  is  right,  but  then  there  is  more 
—  and  that  more  is  your  gut." 

4  How  important  is  IT  to  the  com' 
pany’s  top  management?  if 

you'll  be  reporting  to  the  CEO.  IT 
is  probably  viewed  as  important. 
What’s  the  chief  financial  officer’s  atti¬ 
tude  toward  IT?  Ask  the  CFO  for  his 
vision  for  IT  within  the  company.  If 
the  answer  is  long  and  detailed,  that's 
good;  if  it’s  short  or  vague,  watch  out. 
Look  at  the  organization’s  metrics  to 
get  an  understanding  of  how  IT  is 
viewed  and  measured.  Jo  Haraf.  CIO  at 
San  Francisco-based  law  firm  Morri¬ 
son  &  Foerster  LLP.  says  that  in  law 
firms,  a  good  ratio  of  IT  staff  to  overall 
staff  is  1-IO-20  or  1-25.  If  the  firm  you’re 
considering  has  a  1-10  or  1-50  ratio,  it 
would  indicate  a  very  strong  or  very 
weak  commitment  to  IT. 

5  How  wW  your  performance  be 
measured?  Ask  the  person  who 
will  be  your  boss.  “How  will  you 
know  if  I'm  doing  a  good  job  or 
not?"  You  want  to  know  the  criteria  by 
which  you'll  be  judged,  says  Gerry  Mc¬ 
Cartney.  CIO  at  University  of  I^nnsyl- 
vania's  Whanon  School  in  Philadel¬ 
phia.  You  want  a  prospective  boss  who 
can  articulate  these  standards  in  some 
detail.  "You  don’t  want  (he  job  if  they 
can’t  tell  if  you're  successful  or  not," 
says  McCartney. 

6  Know  the  State  of  drivers  b^ind 
yow  potentia)  success.  Tim 

Buckley.  CIO  at  mutual-fund 
company  The  Vanguard  Group 
Inc.  in  Malvern.  Pa.,  says  for  a  CIO  to 
be  successful,  he  needs  drivers  such  as 
good  people  to  work  with,  a  business 
side  that  views  IT  as  a  partner  and  a 
company  committed  to  professional 
development  for  IT  siafl*. 

Understand  management  and  its  ex¬ 
pectations.  Katherine  Spencer  Lee.  ex¬ 
ecutive  director  at  IT  placement  firm 
RHl  Consulting  Inc.  In  Menlo  Park. 
Calif.,  says  you  should  ask  yourself  the 
following  questions:  How  experienced 
is  the  management  team  you're  going 
to  be  a  part  of?  Does  it  have  a  history 
of  stability?  Whai  are  the  goals  of  that 
management  team,  and  are  they  smart 
goals?  Have  the  goals  been  quantified, 
and  arc  they  realistic?  And,  of  course. 


CIO  anJ  tiiiniur  partner  at  Oqilvy 
4  M.ather  WarlfJwiIe  '.ayr.  "Thi-prain 
deetdv.  it  but  then  there 

IS  more  -  and  that  mote  is  your  qut." 


could  you  realistically  deliver  what 
they’re  looking  for? 

Can  you  answer  all  of  these  ques¬ 
tions  positively  regarding  the  company 
you’re  considering?  If  not.  you  may 
never  be  successful,  no  matter  bow 
good  you  are. 

7  How  does  the  job  Situation  At 
your  interests?  “Can  you  have 
passion  for  the  industry  and  the 
company?"  asks  Buckley.  “If  you 
don’t  groove  on  the  company,  you’ll 
never  click." 

Lee  makes  the  point  that  you  should 
wake  up  each  day  wanting  to  go  to 
work.  If  the  company  seems  unlikely  to 
generate  that  kind  of  passion  in  you. 
look  elsewhere. 

8  Does  the  fut  scope  of  your  re¬ 
sponsibilities  sound  interesting? 

This  refers  to  not  only  the  re¬ 
sponsibilities  of  IT.  but  also  to  the 
scope  of  the  problems  the  company 
faces,  what  you  will  be  asked  to  do  and 
how  IT  and  the  business  side  work  to¬ 
gether.  says  Lars  Rabbc.  former  CIO  at 
Redback  Networks  Inc.  and  now  an  ex¬ 
ecutive  in  residence  at  Ciearstone  Ven¬ 
ture  Partners  in  Menlo  Park. 

9  Be  waiy  da  complin  a  major 
metropolian  area  is  wiling  to 
relocate  you.  -why  are  they 
spending  a  lot  of  money  to  relo¬ 
cate  you?  Why  didn’t  locals  take  the 
position?"  asks  Janulaitis. 

A  f\  Realistically  consider  the 
III  demands  of  the  job.  Do  you 

III 

■  w#  your  life?  If  the  company's  IT 
department  is  troubled,  you  may  have 
to  put  in  more  time  on  the  job  than  you 
want.  “People  are  looking  for  a  job  that 
allows  them  to  have  a  life."  says  Riazi 
of  Ogilvy  &  Mather.  I 


Horowitz  is  a  freetance  business  and 
technology  writer  in  Salt  Lake  City. 
Contact  him  at  alan@*ahorowit2.com. 


SnatePitor 

Gold  Mine? 


Here  are10  ways 
to  analyze  a  CIO 
job  offer.  By  Alan 
S.  Horowitz 

THE  MARKET  FOR  CIOs  isn’t  what  it 
used  to  be.  'Tunes  are  poor,  and  the 
market  is  kind  of  soft”  notes  Rick 
Scboenhals,  senior  director  for  IT  for 
the  National  Football  League's  Denver 
Broncos.  Hie  temptation  is  great  to 
jump  at  ai^  decent 'Sounding  offer. 
Stop.  Not  every  fob  offer  thrown  your 
way  should  be  caught.  How  can  a  CIO 
know  which  offers  are  worth  sertous 
consideration  and  which  should  be 
given  a  pass?  Here  are  10  points  to  con¬ 
sider  when  analyzing  an  offer 


1b  the  OfQanization  flnandaly 
sound?  Unless  you’re  a  turn¬ 
around  specialist,  beware  of  a 
troubled  company.  It  will  likely 
promise  more  than  it  can  deliver. 

The  biggest  red  flag  is  the  financial 
condition  of  the  company.”  advises 
M.  Wrtor  lanulaicis,  CEO  of  fanco 
Associates  Inc.,  an  IT  consulting  firm 
in  Park  City,  Utah. 

2Staritig  campefBalian  iratteis. 

Beware  if  the  financial  package 
offered  is  filled  with  promises  for 
the  future.  "I’d  really  look  for 
them  to  want  me  as  much  as  I  want  to 
work  for  them.  They  need  to  step  up 
with  an  offer  that  shows  an  interest  in 
you,”  reccnnmends  Scboenhals. 

Pay  aUantton  to  ttiB  pereonal 
dwniMiY,  imieriilif  bohaeen 
you  and  liie  perm  to  whom 
you*!  report.  “Can  you  wori  with 


each  other  do  you  have  common  goals 
and  a  common  point  of  view?”  asks 
Atefeh  Riazi,  CIO  and  senior  partner  at 
New  York  advertising  agency  Ogilvy  & 
Mather  Worldwide.  No  hard  and  fast 
rules  exist  for  gauging  personal  chem¬ 
istry.  IVust  your  intuition,  says  Riazi. 
who  adds.  The  brain  decides  if  the 
money  is  right,  but  then  there  is  more 
—  and  that  more  is  your  gut.” 


4  How  important  b  IT  to  the  com- 
pony's  lop  manaoement?  If 

you1l  be  reporting  to  the  CEO.  IT 
is  probably  viewed  as  important. 
What's  the  chief  financial  officer’s  atti¬ 
tude  toward  n?  Ask  the  CFO  for  his 
vision  for  IT  within  the  company.  If 
the  answer  is  long  and  detailed,  that's 
good;  if  it’s  short  or  vague,  watch  out. 
Look  at  the  organization's  metrics  to 
get  an  understanding  of  how  IT  is 
viewed  and  measured.  Jo  Harat  CIO  at 
San  Francisco-based  law  firm  Morri¬ 
son  &  Foerster  LLP,  says  that  in  law 
firms,  a  good  ratio  of  IT  staff  to  overall 
staff  is  Mo-20  or  1-2S.  If  the  firm  you’re 
considering  has  a  1-10  or  1-50  ratio,  it 
would  indicate  a  very  stroi^  or  very 
weak  commitment  to  IT. 

5How  wi  your  perfcnnancB  be 
measured?  Ask  the  person  who 
will  be  your  boss,  ”How  will  you 
know  if  fm  doing  a  good  job  or 
not?”  You  want  to  know  the  criteria  by 
which  you’ll  be  judged,  says  Gerry  Mc¬ 
Cartney.  CIO  at  University  of  Pennsyl¬ 
vania's  Wharton  School  in  Philadel¬ 
phia.  You  want  a  prospective  boss  who 
can  articulate  these  standards  in  some 
detail  Tou  don’t  want  the  job  if  they 
can't  tell  if  you're  successful  or  not." 
says  McCartney. 


6  Knew  the  state  oidrimn  behind 
your  potential  success.  Tim 

Buckley,  CIO  at  mutual-fund 
company  The  Vanguard  Group 
Inc.  in  M^vem.  Pa.,  says  for  a  CIO  to 
be  successful  he  needs  drivers  such  as 
good  people  to  work  with,  a  business 
side  that  views  IT  as  a  partner  and  a 
company  committed  to  professional 
development  for  IT  staff. 

Understand  management  and  its  ex¬ 
pectations.  Katherine  Spencer  Lee,  ex¬ 
ecutive  director  at  IT  placement  firm 
RHI  Consulting  Inc.  in  Menlo  Park. 
Calif,  says  you  should  ask  yourself  the 
following  questions:  How  experienced 
is  the  management  team  you're  going 
to  be  a  part  of?  Does  it  have  a  history 
of  stability?  What  are  the  goals  of  that 
management  team,  and  are  they  smart 
goals?  Have  the  goals  been  quantified, 
and  are  they  realistic?  And,  of  course. 


could  you  realistically  deliver 
they’re  looldttg  for? 

Can  you  answer  all  of  these  ques¬ 
tions  positively  regarding  the  company 
you’re  considering?  If  not.  you  may 
never  be  successful  no  matter  bow 
good  you  are. 


7HowdoestfMiobsHualionfK 
your  MBfHlSf ‘H3an  you  have 
passion  for  the  industry  and  the 
company?"  asks  Buckley.  "If  you 
don’t  groove  on  the  company,  you’ll 
never  click." 

Lee  makes  the  point  that  you  should 
Mrake  up  each  day  wanting  to  go  to 
work.  If  the  company  seems  unlikely  to 
generate  that  kind  of  passion  in  you. 
look  elsewhere. 

8Doesliielulacapeo<ynrtp- 
sponsMItes  sound  Mamting? 

liiis  refers  to  not  only  the  re¬ 
sponsibilities  of  IT.  but  also  to  the 
scope  of  the  problems  the  company 
faces,  what  you  will  be  asked  to  do  and 
bow  IT  and  the  business  side  work  to¬ 
gether.  says  Lars  Rabbe.  former  CIO  at 
Redback  Networks  Inc.  and  now  an  ex¬ 
ecutive  in  residence  at  Clearstone  Ven¬ 
ture  Partners  in  Menlo  Park. 


9Bew>yVacainpaiyinann|ar 
nwlnipalten  area  is  wUng  to 
ralocato  you. -Why  are  they 
spending  a  lot  of  money  to  relo¬ 
cate  you?  Why  didn't  locals  take  the 
position?”  asks  Janulaitis. 


4  Rnrtrtirrfyconsiderthe 
III  dmiandsofthaiob.  Do  you 

III  want  to  live  your  job  or  live 
1  w#  your  life?  Iftbe  company's  IT 
department  is  troubled,  you  may  have 
to  put  in  more  time  on  the  job  than  you 
want  ’’People  are  looking  for  a  job  that 
allows  them  to  have  a  life,”  says  Riazi 
of  Ogilvy  &  Mather.  I 


Horowitz  is  a  freelance  business  and 
technology  writer  in  Salt  Lake  City. 
Contact  him  at  alan@ahorowitz.com. 
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1  ]  WIN  WITH  SPEED;  No  question  about  it.  Whether  it^  on  a  PDA 
or  a  PC,  the  faster  your  workforce  can  exchange  ideas,  the  faster 
they  can  act  on  them. 
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2]  WIN  WITH  LOTUS;  As  the  leader  in  business  instant  messaging, 
Lotus  Sametime*  helps  you  locate  and  communicate  with 
the  people  you  need,  instantly  and  securely.  Lotus.  Part  of  our 
software  portblio  including  D62rrtvoli*  and  WebSphere* 

3]  MAKE  THE  PLAY;  Visit  tonueom/lotus/team  for  a  Webcast 
on  instant  messaging  and  its  effects  on  speed  of  collaboratkKi 
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PROTECTION 

Security  breaches.  Viruses.  Should  you 
amend  your  IT  insurance  plan  to  cover 
such  risks?  By  Thomas  Hoffman 


blt  growing  number  of  compa¬ 
nies  are  looking  to  buy  insurance  that 
would  provide  Hnancial  relief  in  the 
event  of  a  data  security  breach  caused 
by  cyberattack  or  digital  terrorism. 

Let's  say  a  hacker  broke  into  your  company’s  net¬ 
works  and  accessed  reams  of  sensitive  customer  ac¬ 
count  data.  Would  your  company  be  covered  under 
its  general  liabilirs-  insurance?  Probably  not. 

Three  or  four  years  ago.  there  were  a  lot  more  gra\ 
areas  as  to  whether  information  security  was  cov¬ 
ered  under  general  corporate  liability  policies,  says 
Emily  Freeman,  a  security  coasultant  at  .MG  cBusi- 
ncs.s  Risk  Solutions  in  San  Francisco,  an  American 
International  Group  Inc.  t.AIG)  division. 

Computer  and  data  security  "w'asn't  alTirmatively 
covered,  but  it  wasn't  excluded  either.  But  now.  the 
drift  is  for  exclusion."  sa>*s  Freeman.  As  a  result,  fi¬ 
nancial  services  companies,  retailers,  hotels,  travel- 
related  businesses  and  lechnologj-  companies  arc 
showing  strong  interest  in  data  security  insurance. 

Commercial  insurers  such  as  AIG.  Zurich  North 
America  Insurance  Co  and  The  Chubb  Corp.  are  re¬ 
sponding  with  customized  cybersecurity  pi>licies 
based  on  individual  companies'  e.xposure  to  risk. 

Better  Policies 

Initial  security  policies  that  were  available  a  few  years 
ago  "had  high  fees,  and  they  wen-n't  selling  well." 
says  5H:ot!  Chamey.  chief  security  strategist  at  Micro¬ 
soft  Corp.  But  over  the  past  few  years,  be  says,  insur¬ 
ers  “have  become  more  savs-y  in  crafting  e-polictes." 
e\  en  thirugh  the  amount  of  business  they’re  booking 
“is  still  relatively  small.”  he  adds.  AIG  has  2.000  net¬ 
work  security’  insurance  customers  and  roughly  70“u 
of  the  global  market.  Freeman  claims. 

But  IT  and  business  managers  should  be  aware  that 
potentially  crippling  worms  and  viruses  like  the  re¬ 
cent  Slammer  virus  typically  aren’t  ctnered  under 
these  newer  data  security  insurance  policies. 

Why  not?  Consider  the  following  analt^;  Compa¬ 
nies  can  buy  fire  insurance  for  20  buildings  in  one 
city  because  the  chance  of  a  fire  sweeping  through 
all  of  the  facilities  at  the  same  time  is  pretty  remote, 
says  Alan  Paller.  director  of  the  SANS  Institute  m 


Bethesda,  Md.,  a  research  organization  for  security 
managers  and  systems  administrators.  '’But  the  rules 
for  viruses  are  completely  different  —  they  can  affect 
everyone."  he  says.  Therefore,  insurers  typically  ci¬ 
ther  won’t  pro\'ide  general  liability  coverage  against 
worms  and  viruses  or  will  offer  only  extremely  limit¬ 
ed  property  coverage,  says  Freeman. 

Outside  of  the  financial  services  industry,  where 
electronic  transactions  with  customers  are  an  inte¬ 
gral  business  component  and  high  levels  of  security 
are  critical,  few'  CIOs  and  chief  security  officers  are 
aware  of  the  need  for  c>'bersecurity  insurance,  and 
senior  managers  rarely  seek  their  advice  when  they 
are  considering  the  company’s  insurance  needs.  "We 
haven't  done  any  work  on  this  yet.  but  there’s  a  slow 
gmundswetl  among  some  companies  to  begin  taking 
actions  «>n  these  issues."  says  RA  Vemi>n.  vice  presi¬ 
dent  and  CIO  at  Reuters  America  Inc.,  which  pro¬ 
vides  information  to  Wall  Street  brokerages  and  the 
financial  services  industry. 

Before  obtaining  cx’K’rsccurity  insurance,  compa- 
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nies  should  have  a  third  party  conduct  a  network  se¬ 
curity  risk  assessment  to  demonstrate  compliance  to 
insurers.  [See  "How  to  Do  an  IT  Security  Audit." 
QuickLink  35761.]  The  process  includes  following  se¬ 
curity  compliance  steps  that  are  mapped  out  b>'  the 
ISO  17799  standard,  a  set  of  controls  that  detail  best 
practices  in  information  security. 

While  the  ISO  standard  is  widely  used,  critics  say 
it's  too  high-level  and  specifies  security  practices 
that  are  common  sense.  An  example,  says  Pailer 
"Make  sure  your  systems  are  safe."  A  revamped  ver¬ 
sion  of  the  standard  is  being  wTitten  to  address  some 
of  these  shortcomings.  "Like  any  tech-related  field. 
(ISO  17799)  is  moving  in  a  million  different  direc¬ 
tions  at  a  crazy  pace."  says  Chris  Mullins,  director  of 
policy  and  compliance  products  at  Bindview  Corp..  a 
security  software  vendor  in  Houston. 

Evaluation  Guidelines 

Mullins  advises  IT  managers  to  follow  the  guidelines 
offered  by  the  National  Security  Agency  and  the  Na¬ 
tional  Institute  of  Standards  and  Technology'  to  eval¬ 
uate  their  security  compliance.  These  guidelines  are 
also  used  by  some  companies  to  demonstrate  their 
security  readiness  to  would-be  insurers,  he  says. 

Insurance  companies  also  look  at  other  factors, 
such  as  the  frequency  of  internal  security  audits,  the 
transfer  of  internal  auditors  among  business  units 
and  the  clauses  in  contracts  between  companies  -and 
their  customers  and  business  partners  that  stipulate 
the  security'  compliance  obligations  necessary  to  re¬ 
ceive  online  access  to  data. 

They  also  consider  human  resources  policies,  says 
Tracey  Vispoli,  a  manager  at  Chubb,  in  Warren.  N.J. 
These  include  examinations  of  how  employees  are 
trained  on  IT  security  practices,  how  often  pass¬ 
words  are  changed  on  laptops  and  whether  organiza¬ 
tions  conduct  criminal  background  checks  of  job  ap¬ 
plicants.  “We’re  not  so  much  concerned  with  the 
products  (customers)  are  using  to  mitigate  attacks  as 
we  are  \%'ith  the  (employee  and  access)  controls  and 
policies  they’ve  put  in  place."  she  says. 

In.surers  also  tend  to  consider  how  vulnerable  a 
particular  industry  is  to  attack.  For  e.xampic.  if  a 
S15  million  office  supplies  retailer  with  a  limited  on¬ 
line  presence  wanu-d  to  buy  insurance.  AIG's  Free¬ 
man  says  she  first  would  have  it  conduct  a  security 
self-assessment  using  AIG's  Web-based  auditing  tool. 
But  if  the  client  was  a  bank.  AIG  would  probably 
require  a  third-party  audit  or  perform  an  audit  itself, 
she  says.  "It  depends  on  the  amount  of  exposures 
they  have  and  the  amount  and  type  of  insurance  they 
want."  Freeman  says. 

For  its  part.  Bindview  held  a  Web-based  seminar  in 
association  with  SANS  in  late  February  on  the  legal 
liability  for  security’  breaches.  "We’ve  done  enough 
of  these  to  anticipate  audience  attendance,  and  we 
had  four  times  the  number  of  people  (4.000  total  ] 
register  for  this  event  than  we  normally  have."  says 
Mullins.  "We' re  definitely  seeing*a  lot  more  interest 
in  this  space.”  I 
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Security  breaches.  Viruses.  Should  you 
amend  your  IT  Insurance  plan  to  cover 
such  risks?  By  Thomas  Hoffman 


A  SMALL  BUT  GROWING  number  of  compa- 
ni«s  are  looking  to  buy  insurance  that 
vrould  provide  financial  relief  in  the 
event  a  data  security  breach  caused 
by  cyberattack  or  digital  terrorism. 

Let's  say  a  hacker  broke  into  your  company's  itet- 
works  and  accessed  reams  of  sensitive  customer  ac¬ 
count  data.  Would  your  company  be  covered  under 
its  general  liability  insurance?  Probably  not. 

Three  or  four  years  ago.  there  were  a  lot  more  gray 
areas  as  to  whet^  information  security  was  cov¬ 
ered  under  general  corporate  liability  policies,  says 
Emily  Freeman,  a  security  consultant  at  AIG  eBusi¬ 
ness  Risk  Solutions  in  San  Francisco,  an  American 
International  Group  Inc.  (AIG)  division. 

Computer  and  dau  security  ‘‘wasn’t  affirmatively 
covered  but  it  wasn't  excluded  either.  But  now,  the 
drift  is  for  exclusion.**  says  Freeman.  As  a  result,  ft- 
nancial  services  companies,  retailers,  hotels,  travel- 
related  businesses  and  technology  companies  are 
showing  strong  interest  in  data  security  insurance. 

Commercial  insurers  such  as  AIG,  Zurich  North 
America  Insurance  Ca  and  The  Chubb  C>3rp.  are  re- 
spoitding  with  customized  cybersecurity  policies 
based  on  individual  companies*  exposure  to  risk. 

Better  Poides 

Initial  security  policies  that  were  available  a  few  years 
ago  "had  high  fees,  and  they  weren't  selling  well,'* 
says  Scott  Chamey,  chief  security  strategist  at  Micro¬ 
soft  Corp.  But  over  the  past  few  years,  be  says,  insur¬ 
ers  ‘have  become  more  savvy  in  crafting  e-policies," 
even  though  the  amount  of  business  they’re  booking 
‘is  still  relatively  small"  he  adds.  AIG  has  2,000  net¬ 
work  security  insurance  customers  and  roughly  70% 
of  the  global  market.  Freeman  ctaimK. 

But  IT  and  business  managers  should  be  aware  that 
potentially  crippling  worms  and  viruses  like  the  re¬ 
cent  Slammer  virus  typically  aren't  covered  under 
these  newer  data  security  insurance  policies. 

Why  not?  Consider  the  following  analogy:  Compa¬ 
nies  can  buy  tire  insurance  for  20  buildings  in  one 
city  because  the  chance  of  a  fire  sweeping  through 
all  of  the  facilities  at  the  same  time  is  pretty  remote, 
says  Alan  Paller,  director  of  the  SANS  Institute  in 


Bethesda.  McL,  a  research  organization  for  security 
managers  and  systems  administrators.  ‘But  the  rules 
for  viruses  are  completely  different » they  can  affect 
everyone."  be  says.  Therefore,  insurers  typically  ei¬ 
ther  won't  provide  general  liability  coverage  against 
worms  and  viruses  or  will  offer  only  extremely  limit¬ 
ed  property  coverage,  says  Freeman. 

Outside  of  the  financial  services  industry,  where 
electronic  transactions  with  customers  are  an  inte¬ 
gral  business  component  and  high  levels  of  security 
are  critical  few  CIOs  and  chief  security  officers  are 
aware  of  the  need  for  cybersecurity  insurance,  and 
senior  managers  rarely  seek  their  advice  when  they 
are  considering  the  company's  insurance  needs.  "We 
haven't  done  any  work  on  this  yet,  but  there's  a  slow 
groundswell  among  some  companies  to  begin  taking 
actions  on  these  issues."  says  RA  Vernon,  vice  presi¬ 
dent  and  CIO  at  Reuters  America  Inc.,  whkb  pro¬ 
vides  information  to  Wall  Street  brokerages  a^  the 
financial  services  industry. 

Before  obtaining  cybersecurity  insurance,  compa¬ 


nies  should  have  a  third  party  conduct  a  network  se¬ 
curity  risk  assessment  to  demonstrate  compliance  to 
insurers.  [See  TIow  to  Do  an  IT  Security  Audit." 
QuickLink  3576L}  The  process  includes  following  se¬ 
curity  compliance  steps  that  are  mapped  out  by  Ae 
ISO  17799  standard,  a  set  of  controls  that  detail  best 
practices  in  information  security. 

While  the  ISO  standard  is  widely  used,  critics  say 
it's  too  hi^level  and  specifies  security  practii^ 
that  are  common  sense.  An  example,  says  Paller 
‘Make  sure  your  systems  are  safe."  A  revamped  ver¬ 
sion  of  the  standard  is  being  written  to  addi^  some 
of  these  shortcomings,  ‘like  any  tech-related  fkld. 
[ISO  17799]  is  moving  in  a  million  different  direc¬ 
tions  at  a  crazy  pace,"  says  Chris  Mullins,  director  of 
policy  and  compliance  products  at  Bindview  C^rp^  a 
security  software  vendor  in  Houston. 

Evaluation  Guidelines 

Mullins  advises  IT  managers  to  follow  the  guidelines 
offered  by  the  National  Security  Agency  and  the  Na¬ 
tional  Institute  of  Standards  ai^  Technology  to  eval¬ 
uate  their  sectirity  compliance.  These  guidelines  are 
also  used  by  some  companies  to  demonstrate  their 
security  readiness  to  would-be  insurers,  he  says. 

Insurance  companies  also  look  at  other  factors, 
such  as  the  frequency  of  internal  security  audits,  the 
transfer  of  internal  auditors  among  business  units 
and  the  clauses  in  contracts  between  companies  and 
their  customers  and  business  partners  that  stipulate 
the  security  compliance  obligatioos  necessary  to  re¬ 
ceive  online  access  to  data. 

They  also  consider  human  resources  policies,  says 
TVacey  Vispoll  a  man^r  at  Chubb,  in  Warren.  N.]. 
These  include  examinations  of  bow  employees  are 
trained  on  IT  security  practices,  how  often  pass¬ 
words  are  changed  on  laptops  and  whether  organiza¬ 
tions  conduct  criminal  background  checks  of  job  ap¬ 
plicants.  "We're  not  so  much  concerned  with  the 
products  [customers)  are  using  to  mitigate  attacks  as 
we  are  with  the  [employee  and  access]  controb  and 
policies  they've  put  in  place,”  she  says. 

Insurers  also  tend  to  consider  bow  vulnerable  a 
particular  industry  is  to  attack.  For  example,  if  a 
SIS  million  office  supplies  retailer  with  a  limited  on¬ 
line  presence  wanted  to  buy  insurance,  AIG's  Free¬ 
man  says  she  first  would  have  it  conduct  a  security 
self-assrcssmeot  using  AIG's  Web-based  auditing  tool 
But  if  the  client  was  a  bank.  AIG  would  probably 
require  a  chird-paity  audit  or  perform  an  audit  itself 
she  says.  "It  de^ods  on  the  amount  of  exposures 
they  have  and  the  amount  and  type  of  insurance  they 
want,”  Freeman  says. 

For  its  part.  Bindview  held  a  Web-based  seminar  in 
association  with  SANS  in  late  February  on  the  l^al 
liability  for  security  breaches.  "We’ve  done  enough 
of  these  to  anticipate  audience  attendance,  and  we 
had  ftmr  times  the  number  of  people  [AJOOO  total] 
register  for  thb  event  than  we  normally  have,"  says 
Mullins.  "We’re  definitely  seeing  a  lot  more  interest 
in  thb  space."  I 
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2]  WIN  WITH  WEBSPHERE;  WebSphere  otters  a  pre-integrated, 
easy-to-irrrplement  portal  solution  complete  with  leading- 
edge  collaboration  trom  LotusTcontent  management  trom  D62* 
and  the  best  in  security  capabilities  trom  Tivoli* 

3]  MAKE  THE  PLAY;  Visit  RNn.cpni/websphere/portalplay 
tor  a  tree  portal  kit  with  downloadable  demos  and  testimonials. 


(^  business  Is  the  game.  Play  to  win: 


software 


PORTAL 

PLAY 


1  ]  WIN  WITH  PORTALS;  Here,  There.  Everywhere.  With  information 
coming  from  infinite  sources,  a  seamlessly  integrated  portal 
is  crucial  for  both  increased  productivity  and  reduced  costs. 


HR  INFO 
THAT'S  GOOD 
TO  KNOW 


52  COVraTmiMlII  MiritSI.SIIO] 


WWW  computerworld.coin 


Sealing  the 
Dealand 
Collecting 
Their  Due 

IT  helpssalespeopleatthefrontlines 
and  on  payday.  By  Julia  King 


C  AM  It  \  <  I  Assii  I  ANf  of 

silDsyndrumiv  tvcn 
month,  corpt'ritc  market¬ 
ing:  departments  spend 
hundreds  ot'hours  and 
lens  of  thousands  of  dollars  conduct 
in}.'  rs*search.  preparing  repi*rts  and 
developin}:  promotton.il  materials 
desi}nied  to  help  their  companies’ 
salespeople  sell  more  pnvducts  .md 
services.  The  prt»blein  is  that  salespeo¬ 
ple  often  has'c  no  easy  way  to  access 
the  gold  mine  ofinhirmation. 

••Like  a  lot  of  companies.  K»>dak  was 
}KM>d  at  colkviing  data  hut  not  ven’ 
g<»»vj  at  sharing  .md  updating  that 
data.”  says  Jami-s  Sanft*rd.  senior  man¬ 
ager  of  sales  communk'.ition  and  strut  • 
egy  Jeveli»pment  at  Eastman  Kt>dak 
( jc's  consumer  imaging  unit  in  Atlanta. 
The  upsh»»t  was  that  a  lot  «»f  scattered 
but  vaiuabk*  marketing  informaikm 
and  4tther  intellectual 
property,  such  as  details 
aNiut  v-ustomer  prefer¬ 
ences  and  orders,  was 
going  untapped  b>  the 
Kochester,  N  Y.-ba.scd  com- 
p.iny’s  sales  Ibrei". 

That’s  the  business  chal¬ 
lenge  Eloquent  Ine.  b>  ad- 
dressing  with  its  Liunch- 
Foreeeonteni  pr<Kluctum 
and  navi}ution  software, 
which  enables  Kodak. 
lk*wktt-I’;K‘kard  Co.  and 
several  other  big  compa¬ 
nies  to  deliver  a  full  range 
of  product  information  — 
including  text,  synchro¬ 
nized  video,  graphics,  au¬ 
dio  and  search  capabilities 
—  to  globally  dispersed 


sales  organizations.  Harlier  this  month. 
San  Matety  Calif  -based  Eloquent 
merged  with  Open  Text  C*irp..  a  knowl¬ 
edge  management  and  collaboration 
I  solhvare  vendor  in  XSaterUni.  Ontario. 

The  vendor  bills  the  software  as  a 
■'sak'S  re.idiness  tool"  that  can  give  sales¬ 
people  instant  access  to  information 
about  new  products,  pricing  and  spi-eial 
promotions,  all  of  which  can  be  critical 
to  se.iling  a  deal  and  boosting  sales. 

In  August.  Kodak  deployed  Elo¬ 
quent's  software  as  a  means  of  estab¬ 
lishing  a  central  Web-based  repository 
for  all  product  information  and  collat¬ 
eral  marketing  materials. 

The  results  so  far  h.ive  been  "very 
positive."  Sanford  says.  But.  he  adds. 

"i  don't  think  you  can  say  it  increasi.s 
I  sales.  W'hat  it  has  really  done  is  allow 
people  to  get  more  done  and  spend 
I  more  face  lime  with  customers  as  op¬ 
posed  to  calling  around  for 
information  on  the  phone." 

At  HP's  Nonstop  Enter¬ 
prise  division  in  Cuper- 
timi.  Calif.,  program  man¬ 
ager  Tom  Hill  says  the 
Eloquent  system  has  deliv¬ 
ered  a  tenfold  return  on 
investment  since  its  de- 
phnment  in  NovemK-r 
2001.  Unc  of  the  system's 
biggest  tests  came  w  ith  the 
merger  of  HP  .and  Compaq 
tktmputer  Corp..  when  the 
newly  combined  company 
needed  to  get  hundreds  of 
salespi-opk*  up  to  speed 
very  quickly  on  an  e.x- 
panded  prxiduct  line. 

"■I’hc  business  problem 
was  real  simple.  Before 


HOur  sales 
reps  had 
no  confidence 
in  our  ability 
to  produce 
accurate  sales 
reports. 


DAN  ELOmOGE. 
AmefshAm  Bto&ciences 


the  meiger  was  final¬ 
ized  on  May  7.  wo 
couldn't  do  any  (prod¬ 
uct]  training  4)f  sales¬ 
people  prior  to  that 
date."  Hill  explains. 

••We  also  didn’t  have 
travel  money  to  spend." 

Instead,  all  of  the 
Compaq  product  infor¬ 
mation.  complete  with 
technical  manuals, 
graphics,  video  and 
audio,  was  loaded  into 
the  EK>qucnt  system 
running  on  a  Compaq/ 

HP  server,  which  was 
then  accessible  simul¬ 
taneously  via  the  Web 
to  HP's  salespeople 
around  the  globe. 

Hill  says  HP  is  in  the 
process  of  "closing  the 
hiop  »in  sales  readi¬ 
ness"  by  tapping  the  Eloquent  soft¬ 
ware's  capability  to  track  and  report  on 
how  frequently  people  actually  use  the 
system  and  to  measure  what  they  learn 
from  it.  For  example.  Hill  says  he  can 
provide  a  sales  manager  in  California 
w  ith  information  on  how  a  sales  and 
support  engineer  in  El  Salvador  per¬ 
forms  on  an  online  test  about  a  partic¬ 
ular  product.  "We’re  finally  taking 
learning  content  and  integrating  it 
with  sales."  Hill  says.  "When  we  have 
additional  product  lines  and  salespeo¬ 
ple.  it  will  probably  add  up  to  a  ten-  to 
twentyfold  ROI  on  the  system." 

.At  SI  billion  .Amersham  Bii'wcicnces 
Corp..  the  business  issue  wasn’t  getting 
information  to  salespeople,  but  rather 
paying  them  accurately  for  what  they 
had  already  sold,  says  Dan  Eldridge. 
manager  of  business  operations  at  the 
Piscataway.  N-I.-bascd  company.  Again, 
information  silos  —  in  the  form  of 
dozens  of  Microsoft  E.xcel  spread¬ 
sheets  with  data  downloaded  from  Or¬ 
acle  (kirp.  databases  —  were  to  Name. 

"Wo  were  managing  incentive  com¬ 
pensation  for  L^  to  l(iO  employees  via 
Excel  spreadsheets,  which  was  a  very 
manual  proce.ss.  very  labor-intensive 
and  fraught  with  ernm"  Eldridge  says. 
“t>ur  sales  reps  had  no  confidence  in 
our  ability  to  produce  accurate  sales 
reports  and  accurate  incentive  [pay¬ 
ments!.  The  financial  quarter  would 
end.  and  we'd  begin  culcutaiing  incen¬ 
tives,  and  then  it  would  take  us  si.x 
weeks  to  pay.  After  that,  we'd  spend  the 
next  four  weeks  putting  tnit  fires,  mak¬ 
ing  c4»iTectiuns.  So  we'd  spend  12  weeks 
out  of  every  quarter  paying  incentives." 

The  issue  came  to  a  head  when 
Amersham  named  a  new  president. 


who  spent  his  first 
weeks  in  oiTice  getting 
an  earful  from  disgrun¬ 
tled  salespeople. 

Eldridge  evaluated 
payment  software  from 
several  vendors,  includ¬ 
ing  Siebel  Systems  Inc. 
and  Callidus  Software 
Inc.  Ultimately,  he  opt¬ 
ed  to  deploy  Consho- 
hocken.  Pa. -based 
Synygy  Inc.'s  compen¬ 
sation  software  under 
an  application  service 
provider  model. 

Amersham  electroni¬ 
cally  transfers  its  sales 
dat.i  to  Synygy  once  a 
week,  and  compensa¬ 
tion  payments  arc  cal¬ 
culated  and  paid  on  an 
ongoing  basis.  Amer¬ 
sham  pays  Synyg>-  a 
monthly  fee  that  Eldridge  declined 
to  disclose,  but  he  says  the  ROI  has 
already  been  positive. 

“To  calculate  ROl,  I  looked  at  things 
like  ’shadow  accounting.’  which  is  how 
much  time  sales  reps  were  spending 
analyzing  their  reports  for  mistakes 
rather  than  spending  it  out  in  the  field 
selling."  Eldridge  says.  He  was  also 
able  to  reduce  his  department’s  head 
count  by  one  full-time  worker. 

The  biqtom  line;  “We  used  to  spend 
four  weeks  after  we  paid  salespeople 
fixing  problems.  Now.  we  don’t  even 
spend  a  week  because  ver\’  few  sales¬ 
people  have  paiblems  with  their  pay¬ 
ments,"  he  says.  I 


Not  Your 
Average 
Paycheck 

SaJespwple's  pay  is  based  on 
a  comtMnatlon  of  ever-shifting 
factors.  This  year,  for  example. 
90%  of  companies  will  change 
their  sales  compensation  plans, 
which  typically  include  the  fol¬ 
lowing  metrics: 

■  Prom 

■  Quotas 

■  Customer  retention 

•  Customer  satisfaction 

■  Team*based  measures 

■  Product  mix 

SOU<tCC»  rue  *CEXAMPE»  MOU*  IMC  ANO 


MOfnCAN  COMPUSA riOH  ASMCIAtlOM 


Overpayment  of 
incentive  and  sales 
compensation 


Systems  for  tiack- 
tng  commissions 
and  bonuses 


Incentive  m.jn- 
agoment  systems 


THE  PAPER  AND  INK  USED  IN  THE  ORIGINAL 
PUBLICATION  MAY  ATFECl  THE  QUALITY  OF 
THE  '.TILROFOR'.' EDITION 
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Seeding  the 
Deed  and 
Collecting 
Their  Due 

IT  helps  salespeople  at  the  front  lines 
and  on  payday.  By  Julia  King 


CALL  tT  A  CLASSIC  CASE  of 
sUo  syndrome.  Every 
month,  corporate  meet¬ 
ing  departments  spend 
bundr^  of  hours  and 
tens  of  thousands  of  doUais  conduct¬ 
ing  research,  preparing  reports  and 
developing  promotional  materials 
de»gD^  to  help  their  companies' 
salespeople  sell  more  products  and 
services.  The  problem  is  that  salespeo¬ 
ple  often  have  no  easy  way  to  access 
the  gold  mine  of  information. 

like  a  lot  of  companies.  Kodak  was 
good  at  collecting  data  but  not  very 
good  at  sharing  and  updating  that 
data.”  says  James  Sanford,  senior  man¬ 
ager  of  sales  cmnmuaication  and  strat¬ 
egy  development  at  Eastman  Kodak 
Ca's  consumer  imagii^  unit  in  Atlanta. 
The  upshot  was  that  a  lot  of  scattered 
but  valuable  marketing  information 
and  other  miellectual 
property,  such  as  details 
about  customer  prefer¬ 
ences  and  orders,  was 
going  untapped  by  the 
Rochester.  N.Y.-based  com¬ 
pany's  sales  force. 

That's  the  business  chal¬ 
lenge  Eloquent  Inc  is  ad¬ 
dresing  with  its  Launch- 
Force  content  production 
and  navigation  software, 
which  enables  Kodak, 

Hewlett-Packard  Co.  and 
several  other  big  compa¬ 
nies  to  deliver  a  foil  range 
of  product  information  — 
including  text,  syndiro- 
nized  video,  grtfihiics.  au¬ 
dio  and  search  capabilities 
—  to  ^obally  dispersed 


Hour  sales 
reps  had 
no  confidence 
IncurabMty 
to  produce 
accurate  sales 


DWELOnDOe, 


sales  organizations.  Earlier  (his  month. 
San  Mateo,  Calif. -based  Eloquent 
merged  with  Open  Text  Corp.,  a  knowl¬ 
edge  management  and  collaboration 
software  vendor  in  Waterloo,  Ontario. 

The  vendor  bills  the  software  as  a 
"sales  readiness  tooT  that  can  give  sales¬ 
people  instant  access  to  information 
about  new  products,  pricing  and  special 
promotions,  all  of  which  can  be  critical 
to  sealing  a  deal  and  boosting  sales. 

In  August.  Kodak  deployed  Elo¬ 
quent's  sofmare  as  a  means  of  estab¬ 
lishing  a  central  Web-based  repository 
for  all  product  information  and  collat¬ 
eral  marketing  materials. 

The  results  so  far  have  been  “very 
positive,”  Sanford  says.  But.  be  adds. 

”1  don't  think  you  can  sa>'  it  increases 
sales.  What  it  has  really  doite  is  allow 
people  to  get  more  done  and  spend 
more  face  time  with  customers  as  op¬ 
posed  to  calling  around  for 
information  on  the  phone.” 

At  HPs  Nonstop  Enter¬ 
prise  Division  in  Cuper¬ 
tino,  f.alif  .  program  man¬ 
ager  Tom  says  the 
Eloquent  system  has  deliv¬ 
ered  a  tenfold  return  on 
investment  since  its  de¬ 
ployment  in  November 
2001.  One  of  the  system's 
biggest  tests  came  with  the 
merger  of  HP  and  Compaq 
Computer  Corp..  when  the 
newly  combined  company 
needed  to  get  hundreds 
salespeople  up  to  speed 
very  quickly  on  an  ex¬ 
pand^  product  line. 

The  business  problem 
was  real  simple.  Before 


the  merger  was  final¬ 
ized  on  May  7.  we 
couldn't  do  any  [prod¬ 
uct]  training  of  sales¬ 
people  prior  to  that 
date.”  Hill  explains. 

'^e  also  didn't  have 
travel  money  to  spend.” 

Instead,  all  of  the 
Compaq  product  infor¬ 
mation,  complete  with 
technical  manuals, 
graphics,  video  and 
audio,  was  loaded  into 
the  Eloquent  system 
running  on  a  Compaq/ 

HP  server,  which  was 
then  accessible  simul¬ 
taneously  via  the  Web 
to  HP’s  salespeople 
around  the  globe. 

Hill  says  HP  is  in  the 
process  of  "closing  the 
loop  on  sales  readi¬ 
ness”  by  tapping  the  Eloquent  soft¬ 
ware's  capability  to  track  and  report  on 
how  frequently  people  actually  use  the 
system  and  to  measure  what  they  learn 
from  it.  For  example,  HUl  says  he  can 
provide  a  sales  manager  in  California 
with  information  on  bow  a  sales  and 
support  engineer  in  Ei  Salvador  per¬ 
forms  on  an  online  test  about  a  partic¬ 
ular  product.  "We're  finally  taking 
leamiitg  content  and  integrating  it 
with  sales,”  Hill  says.  “When  we  have 
additional  product  lines  and  salespeo¬ 
ple,  it  will  probably  add  up  to  a  ten-  to 
twentyfold  ROI  on  the  system.” 

At  SI  billion  Amersham  Biosciences 
Corpn  the  business  issue  wasn't  getting 
infonnarion  to  salespeople,  but  rather 
paying  them  accurately  for  what  they 
had  already  sold,  says  Dan  Eldridge, 
manager  of  business  operations  at  the 
Piscataway,  N.).-based  company.  Again, 
information  silos  —  in  the  form  of 
dozens  of  Microsoft  Excel  spread¬ 
sheets  with  data  downloaded  from  Or¬ 
acle  Corp.  databases  —  were  to  blame. 

"We  were  managing  incentive  com¬ 
pensation  for  150  to  160  employees  via 
Excel  spread^eets.  which  was  a  very 
manual  process,  very  labor-intensive 
and  fraught  with  error,”  Eldridge  says. 
“Our  sales  reps  bad  no  confidence  in 
our  ability  to  produce  accurate  sales 
reports  and  accurate  incentive  [pay¬ 
ments].  The  financial  quarter  would 
end.  and  we'd  begin  calculating  incen¬ 
tives.  and  then  it  would  take  us  six 
weeks  to  pay.  After  that,  we’d  spend  the 
next  four  weeks  putting  out  fu^  mak¬ 
ing  corrections.  So  we’d  spend  12  weeks 
out  of  every  quarter  paying  incentives.” 

The  issue  came  to  a  head  when 
Amersham  named  a  new  president. 


who  spent  his  first 
weeks  in  office  getting 
an  earful  from  disgrun¬ 
tled  salespeople. 

Eldrid^  evaluated 
payment  software  from 
several  vendors,  includ¬ 
ing  Siebel  Systems  Inc. 
and  Callidus  Software 
Inc.  Ultimately,  he  opt¬ 
ed  to  deploy  Consho- 
hocken.  Pa.-based 
Synygy  Inc's  compen¬ 
sation  software  under 
an  application  service 
provider  model 
Amersham  electnKii- 
cally  transfers  its  sales 
data  to  Synygy  once  a 
week,  and  compensa¬ 
tion  payments  are  cal¬ 
culated  and  paid  on  an 
ongoing  basis.  Amer¬ 
sham  pays  Synygy  a 
monthly  fee  that  Eldridge  declined 
to  disclose,  but  be  says  the  ROI  has 
already  been  positive. 

To  calculate  ROL 1  looked  at  things 
like  'shadow  accounting.'  which  is  how 
much  time  sales  reps  were  spending 
analyzing  their  reports  for  mistakes 
rather  than  spending  it  out  in  tbe  field 
selling,"  Eldridge  says.  He  was  also 
able  to  reduce  his  department’s  head 
count  by  one  full-time  worker. 

Tbe  bottom  line:  '^e  used  to  spend 
four  weeks  after  we  paid  salespeople 
fudng  problems.  Now.  we  don't  even 
spend  a  week  because  very  few  sales¬ 
people  have  problems  with  their  pay¬ 
ments,”  he  says.  I 


software 


NEW  DB2.  A  SELF-STARTER 


SELF-HEALING 


SORT  OF  WAY. 


T  4  ’ 


i  Whal  keeps  databases  in  game  shape?  DB2  v8,  the  most  advanced  sett-managing 

database  across  Linux!  UNIX"  and  Windows?  Turbocharged  querying  and  tuning  _  nr  .  •  - 

saves  time,  resources  and  pushes  productivity  skyward.  And.  no  matter  what  form  bUSIflBSS  IS  W6  QSITIB.  PtSjf  TO  Wit!. 

your  data  is  in,  it  iets  you  access,  anaiyse  and  manage  it.  DB2.  its  part  of  the  software 
team  that  inciudes  Lotus!  Tivoir  and  WebSphetrf  Learn  more  at  fciii.eooi/db2/new 
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BRIEFS 


Purchasing  Tactics 

Business  msragsrs  and  chief 
financial  officers  are  playing  an 
increasingfy  important  role  in 
fT  procurement  according  to 
research  firm  SummK  Strategies 
Inc.  in  Boston.  Once  a  company 
decides  to  evaluate  or  do  busi¬ 
ness  erfth  a  vendor.  Summit 
said,  the  business  side  w<ll  turn 
iV  the  heat  on  the  vendor  using 
five  tactics: 

■  Testing  the  waters  with  small, 
measurable  pilot  projects. 

■  Forang  the  vendor  to  share  the 
business  rish. 

■  Shifting  to  pay-as-you-go 
strategies. 

•  Seeking  offshore  professional 
services  support 

■  Training  the  IT  staff  as  contract 
martagers  rather  than  as  pure 
technologists. 


Where  We  Work 

According  to  a  recent  swvey.  a 
nudvky  of  employees  work 

off -she.  but  from  Mrious  localiaRs. 


0»-s«e 

wortws 


FMocnie 
r  worker 

_  12^ 

Remote  _ 

CusXimer 

—  - - '  sae  workers  j 

Reguar  letewcrkers  7%  12%  ’ 
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Outsourcing  Deals 
Are  Filing  Short 

Through  2003.  senior  executives 
wil  give  faring  trades  to  S0%  of 
al  outsourced  fT  deals  because 
they  don't  delver  the  anticipated 
value,  accortfing  to  Banner  Inc. 
One  problem  is  that  many  compa¬ 
nies  have  failed  to  develop  a  com¬ 
prehensive  strategy  and  irstead 
try  to  fix  problems  and  change 
contracts  on  the  fty.  Gartner  esti¬ 
mates  that  fewer  than  30%  of 
companies  have  formal  plans  for 
managing  long-term  relationshq)s 
wM)  external  IT  service  providers. 


MICHAEL  H.  HUGOS 


Working  Hard:  Making  the 
Same  Mistakes  Over  and  Over 


I  BELIEVE  that  IT  is  not  yet  a  profession  because 
we  do  not  learn  from  our  mistakes.  We  do  not 
change  our  behavior.  We  have  not  codified  the 
body  of  knowledge  gained  from  the  past  40  years 
of  experience,  and  we  do  not  teach  this  knowl¬ 
edge  in  any  coherent  manner  to  those  entering  or  al¬ 
ready  working  in  the  field.  Massive,  multimillion-dollar 
debacles  are  not  just  isolated  occurrences  in  IT.  They 
are  the  norm. 


Wc  are  ail  aware  of  The 
Scandish  Group's  studies  of 
the  past  few  years  that  docu¬ 
ment  a  70%  failure  rate  for  IT 
projects.  Some  30%  fail  out¬ 
right.  and  another  40%  drag 
on  for  years,  propped  up  by 
huge  cash  infusions  until 
they  are  finally  shut  down. 

How  can  a  group  that  has 
a  70%  failure  rate  call  itself  a 
profession?  What  if  surgei>ns 
had  a  70  %  failure  rate?  What 
if  airline  pilots  had  a  70% 
failure  rate?  Would  they 
even  be  allowed  to  continue 
to  practice  their  professions? 

People  in  the  construction 
industry  routinely  build 
buildings  that  don't  fall  down  until  they 
are  torn  down.  We  IT  folks  —  many  of 
whom  have  fancy  advanced  degrees  — 
can  barely  build  an  accounting  system 
that  will  survive  a  month-end  dose. 

Companies  can't  afford  to  continue 
throwing  money  at  IT  projects  and  ac¬ 
cept  the  paltry  30%  success  rale  that's 
the  current  norm.  Yes,  the  IT  field  is  full 
of  complexity-  Yes.  the  pace  of  change 
seems  overwhelming  at  times.  Yet  if  we 
who  claim  to  be  professionals  in  the 
field  can't  define  a  basic  set  of  practices 
and  use  them  to  drastically  increase  the 
success  rate  of  IT  projects,  then  wc  have 
little  reason  to  exist. 

I  propose  a  set  of  seven  design  guide¬ 
lines  and  six  organizational  principles 
for  developing  information  systems. 
These  guidelines  and  principles  should 
remain  constant  over  time,  regardless  of 
the  technology'  being  used.  They  create 


a  clear  and  accurate  frame¬ 
work  that  codifies  what  has 
been  learned  about  building 
information  systems.  The 
simplicity  of  the  framework 
makes  it  readily  under¬ 
standable  so  that  it  can  be 
widely  used. 

Design  Guidelines 

A  system  design  that  re¬ 
spects  all  seven  of  these 
guidelines  is  the  best.  It's 
still  a  competent  design  if 
one  of  these  guidelines  is 
violated,  as  long  as  it's  not 
the  first  guideline.  If  two 
guidelines  are  violated, 
there  need  to  be  very  good 
reasons  for  doing  so.  and  compensations 
must  be  made  for  those  guidelines  that 
arc  broken.  If  three  or  more  guidelines 
are  broken,  then  the  design  is  seriously 
flawed,  and  the  system  can't  be  success¬ 
fully  built. 

The  guidelines  are  as  follows: 

t  Closely  align  systems  projects  to  re¬ 
spond  to  specific  business  opportunities 
or  needs. 

2.  Use  systems  to  change  the  competi¬ 
tive  landscape. 

3.  Leverage  the  strengths  of  existing 
systems  to  build  new  systems. 

4.  Use  the  simplest  possible  combi¬ 
nations  of  technology  and  business 
processes. 

5.  Break  the  design  of  big  systems  into 
smaller  subsy-stems  to  reduce  the  overall 
complexity  and  lower  the  risk  of  build¬ 
ing  each  subsystem. 

6.  Don't  try  to  build  a  system  whose 


complexity  exceeds  the  organization's 
capabilities. 

7.  Don’t  renew  a  project  that  has  failed 
once  using  the  same  system  design  and 
project  organization. 

Organizational  Principles 

If  the  design  of  a  system  respects  the 
guidelines  listed  above,  then  the  use  of 
these  six  principles  will  ensure  a  suc¬ 
cessful  project.  If  any  one  of  these  prin¬ 
ciples  is  ignored,  then  special  precau¬ 
tions  must  be  taken  to  compensate 
for  that.  If  two  or  more  principles  arc 
violated,  then  the  project  will  flounder 
and  fail. 

The  principles  are  as  follows: 

t  Make  sure  that  every  project  has  a 
qualified  full-time  leader  with  overall 
responsibility  and  authority. 

2.  Define  a  set  of  measurable  and 
nonoverlapping  objectives  that  are  both 
necessary  and  sufficient  to  build  the 
system  that's  the  goal  of  the  project. 

3.  Assign  project  objectives  (or  sub¬ 
systems)  to  teams  of  two  to  seven  peo¬ 
ple.  with  hands-on  team  leaders  and  the 
appropriate  mix  ofbusinessand  techni¬ 
cal  skills. 

4.  Tell  project  teams  what  to  do,  but 
let  each  team  figure  out  how  to  do  what 
has  been  assigned  to  them. 

5.  Break  project  work  into  tasks  that 
are  each  a  week  or  less  in  duration  and 
that  produce  usable  subsystems  every 
30  to  90  days. 

6.  Provide  office  staff  to  work  with  the 
project  leader  and  the  team  leaders  to 
keep  project  plans  and  budgets  up  to 
dale  and  accurate. 

We  IT  people  need  to  understand 
these  guidelines  and  practice  these  prin¬ 
ciples  in  different  situations.  The  ability 
to  do  this  consistently  is  what  will  deliv¬ 
er  the  successful  results  that  enable  us 
to  truly  call  ourselves  professionals.  I 
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MICHAEL  H.  HUGOS 


Working  Hard:  Making  the 
Same  Mistakes  Over  and  Over 


I  BELIEVE  that  rr  is  not  yet  a  profession  because 
we  do  not  learn  from  our  mistakes.  We  do  not 
change  our  behavior.  We  have  not  codified  the 
body  of  knowledge  gained  from  the  past  40  years 
of  experience,  and  we  do  not  teach  this  knowl¬ 
edge  in  any  coherent  manner  to  those  entering  or  al¬ 
ready  working  in  the  field.  Massive,  multimillion-doUar 
debacles  are  not  just  isolated  occurrences  in  IT.  They 
are  the  norm. 


We  are  all  aware  of  The 
Standish  Group’s  studies  of 
the  past  few  years  that  docu¬ 
ment  a  7D%  failure  rate  for  IT 
projects.  Some  30%  fell  out- 
ri^u,  and  another  40%  drag 
on  for  years,  propped  up  by 
huge  cash  in^ions  until 
they  are  finally  shut  dowa 
How  can  a  group  that  has 
a  70%  failure  rate  call  itself  a 
professioa^  What  if  surgeons 
had  a  70  %  failure  rate?  What 
if  aiiiine  pilots  had  a  70% 
failure  rate?  Would  they 
even  be  allowed  to  continue 
to  practice  their  professions? 

People  in  the  construction 
industry  routinely  build 
buildings  that  don’t  fall  down  until  they 
are  tom  down.  We  IT  folks  many  of 
whom  have  fancy  advanced  degrees  — 
can  barely  build  an  accounting  system 
that  will  survive  a  month-end  close. 

Companies  can't  afford  to  continue 
throwing  money  at  IT  projects  and  ac¬ 
cept  the  paltry  30%  success  rate  that's 
the  current  norm.  Yes.  the  IT  Held  is  full 
of  complexity.  Yes.  the  pace  of  change 
seems  overwhelming  at  times.  Yet  if  we 
who  claim  to  be  professionals  in  the 
field  can't  defuie  a  basic  set  of  practices 
and  use  them  to  drastically  increase  the 
success  rate  of  IT  projects,  then  we  have 
little  reason  to  exisL 
I  propose  a  set  of  seven  design  guide¬ 
lines  and  six  organizational  principles 
for  developing  information  systems. 
These  guidelines  and  principles  should 
remain  constant  over  time,  regardless  of 
the  technology  being  used.  They  create 


a  clear  and  accurate  frame- 
wodt  that  codifies  what  has 
been  learned  about  building 
information  systems.  The 
simplicity  of  the  framework 
makes  it  readily  under¬ 
standable  so  that  it  can  be 
widely  used. 

Design  Guideines 

A  system  design  that  re¬ 
spects  all  seven  of  these 
guidelines  is  the  best.  It's 
still  a  competent  design  if 
one  of  the^  guidelines  is 
violated,  as  long  as  it's  not 
the  first  guideline.  If  two 
guidelines  are  violated, 
there  need  to  be  very  good 
reasons  for  doing  so.  and  compensations 
must  be  made  for  those  guidelines  that 
are  broken.  If  three  or  more  guidelines 
are  broken,  then  the  design  is  seriously 
flawed,  and  the  system  can’t  be  success¬ 
fully  built. 

The  guidelines  are  as  follows: 

t  Closely  align  systems  projects  to  re¬ 
spond  to  specific  business  opportunities 
or  needs. 

2.  Use  systems  to  change  the  competi¬ 
tive  landscape. 

3.  Leverage  the  strengths  of  existing 
systems  to  build  new  systems. 

4.  Use  the  simplest  possible  combi¬ 
nations  of  technology  and  business 
processes. 

5.  Break  the  design  of  big  systems  into 
smaller  subsystems  to  reduce  the  overall 
complexity  and  tower  the  risk  of  build¬ 
ing  each  subsystem. 

8.  Don't  try  to  build  a  system  whose 


complexity  exceeds  the  organization's 
capabilities. 

7.  Don’t  renew  a  project  that  has  failed 
once  using  the  same  system  design  and 
project  organizarion. 

Organizational  Prindpies 

If  the  design  of  a  system  respects  the 
guidelines  listed  above,  then  the  use  of 
these  six  principles  will  ensure  a  sue- 
cessfol  project.  If  any  one  of  these  prin¬ 
ciples  is  ignored,  then  special  precau¬ 
tions  must  be  taken  to  compensate 
for  that.  If  two  or  more  principles  are 
violated,  then  the  project  will  flounder 
and  fail 

The  principles  are  as  follows: 

t  Make  sure  that  every  project  has  a 
qualified  foil-time  leader  with  overall 
responsibility  and  authority. 

Z  Define  a  set  of  measurable  and 
nonoverlapping  objectives  that  are  both 
necessary  and  sufifleient  to  build  the 
system  t^f  s  the  goal  of  the  project 

3.  Assign  project  objectives  (or  sub¬ 
systems)  to  teams  of  two  to  seven  peo¬ 
ple.  with  hands-on  team  leaders  and  the 
appropriate  mix  of  business  and  techni¬ 
cal  skills. 

4.  Tell  project  teams  what  to  do.  but 
let  each  team  figure  out  how  to  do  what 
has  been  assigned  to  them. 

5.  Break  project  work  into  tasks  that 
are  each  a  week  or  less  in  duration  and 
that  produce  usable  subsystems  every 
30  to  90  days. 

6.  Provide  office  staff  to  work  with  the 
project  leader  and  the  team  leaders  to 
keep  project  plans  and  budgets  up  to 
date  and  accurate. 

We  IT  people  need  to  understand 
these  guidelines  and  practice  these  prin¬ 
ciples  in  different  situations.  The  ability 
to  do  this  consistently  is  what  will  deliv¬ 
er  the  successful  results  that  enable  us 
to  truly  call  ourselves  professionals.  I 
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Mainframers 

skills  in  conjuDction  with 
Poughkeepsie.  N.Y.*based 
Marist  College  and  developing 
a  best>practice  knowledge  base 
to  which  data  center  managers 
can  contribute  their  expertise. 

■We  believe  it*s  a  very  im¬ 
portant  issue.”  said  Brian 
Koma,  vice  president  of  mar¬ 
keting  at  Orange.  Calif-based 
AFCOM  (the  Association  for 
Computer  Operations  Man¬ 
agement).  He  said  the  organi¬ 
zation  hopes  the  initiative  will 
prompt  FT  managers  ”to  take 
some  early  acrion”  to  plan  for 
retirements  “so  they  don’t  have 
to  spend  more  money  later.” 

In  addition  to  ofiering 
hands-on  training  sessions  at 
AFCOM’s  semiannual  confer¬ 
ences.  the  initiative  provides 
for  undergraduate  and  certifi¬ 
cate  courses  in  data  center 
technology. 

Aging  Mainframers 

A  study  last  year  by  Meta 
Group  Inc.  in  Stamford.  Coim.. 
found  that  of  IT  workers 
with  mainfrante  experience 
are  over  50  years  old.  Confer¬ 
ence  attendees,  such  as  Gerald 
Tucker,  data  center  operations 
inaiu^r  at  Foster  Farms  Inc., 
one  of  the  largest  poultry  op¬ 
erations  in  the  U.Sh  readily 
agreed  with  that  finding.  But 
be  said  he  isn't  sure  what  to  do 
about  it 

Tucker  has  two  mainframe 
operators  with  more  than  20 
years  of  experience  who  plan 
to  retire  in  about  six  years, 
and  he  said  finding  replace¬ 
ments  could  be  a  problem. 

“The  solution  could  be  an 
outsourcing  possibility  at  that 
time.”  be  said. 

The  Livingston,  CMil-based 
company  needs  to  find  people 
with  a  rare  set  of  characteris¬ 
tics:  They  must  have  good 
technical  skills  and  be  com¬ 
fortable  dealii^  with  repeti¬ 
tive  and  mundane  tasks,  said 
Tiicker.  “They  are  usually  one 
or  the  other.”  be  said. 


Getting  IT  professionals,  es¬ 
pecially  young  ones,  interest¬ 
ed  in  learning  main^ame 
work  isn't  easy.  But  Ruben 
Trujillo,  a  technical  specialist 
at  U.S.  Foodservice  in  Phoe¬ 
nix,  said  a  company  program 
seems  to  be  helping. 

New  IT  employees  who  may 
be  destined  to  work  in  finance, 
for  instance,  can  volunteer  to 
tour  the  data  center  and  be  ex¬ 
posed  to  its  operations.  “It's 
opened  up  interest,”  be  said. 

One  of  the  data  center's  sell¬ 
ing  points  is  its  critical,  round- 
tbe<lock  nature,  said  TVujilla 
The  pressure  and  importance 
of  it  are  very  high.”  be  said, 
noting  that  that  can  be  appeal¬ 


ing  to  some  prospective  em¬ 
ployees.  Moreover,  the  work 
schedule  —  12.S-hour  shifts 
with  alternate  three-  and  four- 
day  weeks  —  is  attractive  to 
some,  said  TVujUla  ”I  love  it.  It 
allows  me  to  spend  more  time 
with  my  family.”  he  said. 

Training  Cosb  Rise 

IT  managers  said  they’re  ex¬ 
periencing  a  rise  in  training 
costs.  Mainframe  skills  aren't 
widely  taught,  which  means 
companies  typically  have  to 
pay  a  premium  for  travel  and 
training  that  can  be  as  high  as 
$30,000  to  SSO.OOO  annually 
per  employee.  “Our  training 
bud^ts  are  definitely  going 


Looking  Ahead 


up.”  said  Gary  Rose,  infor¬ 
mation  services  operations 
manager  for  Bexar  County. 


Tight  fT  Budgets  Boost  Server 
And  Data  Ccmer  ConsofidatkMi 
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Texas,  in  San  Antonia 

At  the  same  time,  many 
companies  are  confoooting  the 
mainframe  training  issue  in 
reverse,  as  they  begin  to  phase 
out  mainftame  systems. 

For  example.  Mattel  Toys 
Inc  is  training  mainftame  op¬ 
erators  to  worii  on  Sun  Micro¬ 
systems  Inc.'s  Solaris  operat¬ 
ing  system,  among  others. 

Learning  these  new  systems 
isn't  easy  for  mainframe  work¬ 
ers,  said  Lynn  Hartman,  data 
center  manager  at  Matte)  in 
Phoenix. 

“For  the  older  guys,  it’s  a 
major  leap.”  Hartman  said. 
“But  we  made  it  clear  It's  a  ne¬ 
cessity.  not  an  option.”  t 
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Mainframers 

skills  in  conjunction  with 
Poughkeepsie.  N.Y. -based 
Marist  College  and  developing 
a  best-practice  knowledge  base 
to  which  data  center  managers 
can  contribute  their  expertise. 

“We  believe  it's  a  very  im¬ 
portant  issue,”  said  Brian 
Koma,  vice  president  of  mar¬ 
keting  at  Orange.  Calif. -based 
AFCOM  (the  Association  for 
Computer  Operations  Man¬ 
agement).  He  said  the  organi¬ 
zation  hopes  the  initiative  will 
prompt  IT  managers  "to  take 
some  early  action"  to  plan  for 
retirements  “so  tbe>'  don’t  have 
to  spend  more  money  later." 

In  addition  to  offering 
hands-on  trainir^  sessions  at 
AFCOM’s  semiannual  confer¬ 
ences.  the  initiative  provides 
for  undeigraduate  and  certifi¬ 
cate  courses  in  data  center 
technology. 

Aging  Mainframers 

A  study  last  year  by  Meta 
Group  Inc.  in  Stamford.  Conn., 
found  that  55%  of  IT  workers 
with  mainframe  experience 
are  over  50  years  old.  Confer¬ 
ence  attendees,  such  as  (^rald 
Tucker,  data  center  operations 
manager  at  Foster  Farms  Inc., 
one  of  the  largest  poultry  op¬ 
erations  in  the  US.,  readily 
^eed  with  that  finding.  But 
he  said  he  isn’t  sure  what  to  do 
about  it. 

Thcker  has  two  mainframe 
operators  with  more  than  20 
years  of  experience  who  plan 
to  retire  in  about  six  years, 
and  he  said  finding  replace¬ 
ments  could  be  a  problem. 

The  solution  could  be  an 
outsourcing  possibility  at  that 
time  "  he  said 

The  Utingston,  Calif.-based 
company  needs  to  fmd  people 
with  a  rare  set  of  characteris¬ 
tics:  They  must  have  good 
technical  skills  and  be  com¬ 
fortable  dealing  w'ith  repeti¬ 
tive  and  mundane  tasks,  said 
Tucker.  “They  are  usually  one 
or  the  other,"  he  said. 


Gening  IT  professionals,  es¬ 
pecially  young  ones,  interest¬ 
ed  in  learning  mainframe 
work  isn’t  easy.  But  Ruben 
Trujillo,  a  technical  specialist 
at  U.S.  Foodservice  in  Phoe¬ 
nix.  said  a  company  program 
seems  to  be  helping. 

New  IT  employees  who  may 
be  destined  to  work  in  fmance. 
for  instance,  can  volunteer  to 
tour  the  data  center  and  be  ex¬ 
posed  to  its  operations.  “It's 
opened  up  interest,"  he  said. 

One  of  the  data  center's  sell¬ 
ing  points  is  its  critical,  round- 
the-clock  nature,  said  IVujillo. 
The  pressure  and  importance 
of  it  are  very  high."  he  said, 
noting  that  that  can  be  appeal¬ 


ing  to  some  prospective  em¬ 
ployees.  Moreover,  the  work 
schedule  —  123-bour  shifts 
with  alternate  three-  and  four- 
day  weeks  —  is  attractive  to 
some,  said  Trujillo.  "I  love  it.  It 
allows  me  to  spend  more  time 
with  my  family."  he  said. 

Training  Costs  Rise 

IT  managers  said  they're  ex¬ 
periencing  a  rise  in  training 
costs.  Mainframe  skills  aren't 
widely  taught,  which  means 
companies  typically  have  to 
pay  a  premium  for  travel  and 
training  that  can  be  as  high  as 
$30,000  to  $50,000  annually 
per  employee.  “Our  training 
budgets  are  definitely  going 


Looking  Ahead 


up."  said  Gary  Rose,  infor¬ 
mation  services  operations 
manager  for  Bexar  County. 


Texas,  in  San  Antonio. 

At  the  same  time,  many 
companies  are  confronting  the 
mainframe  training  issue  in 
reverse,  as  they  begin  to  phase 
out  mainframe  systems. 

For  example.  Mattel  Toys 
Inc.  is  training  mainframe  op¬ 
erators  to  work  on  Sun  Micro¬ 
systems  Inc.'s  Solaris  operat¬ 
ing  system,  among  others. 

Learning  these  new  systems 
isn't  cas>’  for  mainframe  work¬ 
ers.  said  Lynn  Hartman,  data 
center  manager  at  Mattel  in 
Phoenix. 

“For  the  older  guys,  it’s  a 
major  leap,"  Hartman  said. 
"But  we  made  it  clear  it's  a  ne¬ 
cessity.  not  an  option."  I 


Tight  FT  Budgets  Boost  Server 
And  Data  Center  Consolidation 


LAS  VCOAS 

The  njsh  to  cQftsoldtfe  servos 
and  the  date  center  i$  0ft.  Many 
compoiiesappeerlobeequeez- 
ino  redtfxiant  hardwie.  soft¬ 
ware,  noimenance  and  service 
costsouloftheirdatacenlers- 
and  the  effort  is  quicMy  paying 
off.  accanAng  to  IT  moagers. 

Bayer  Corp.  to  ntstugh  offers 
a  dramalto  example  of  how  much 
money  can  be  sarad  The  compa¬ 
ny  last  year  coneoBdited  42  d^ 
centers  into  two  and  cut  the  num¬ 
ber  of  servers  from  1.335  to  615. 
Expected  savings:  S76  mlion 
over  five  years,  according  to  Ho¬ 
bart  Moore,  an  IT  manager  in¬ 
volved  to  the  profed 

The  iniliative  was  completed  to 
July  and  defivered  S10  miion  in 
sawngs  last  year  alone,  said 
Moore.«hoapokBabouttheoon- 
soidalton  at  a  data  center  corfer 
ence  held  here  last  week  by  the 
date  center  professional  associa¬ 
tion  AFCOM. 

"We  showed  that  we  aren’t 
just  out  there  ptmidtog  servicss 
and  that  we  can  actualy  save  toe 
company  money  when  9  became 
necessary  to  do  so."  said  Moore. 


.  "We  came  up  with  >«ry  solid 
'  ways  of  redudng  cost 
;  slashing  serwees." 

In  tect  nwny  IT  managers  at 
:  toe  conference  said  they  are  to- 
;  vofved  in  date  center  or  server 
•  consolidailonproiecls. 

Over  toe  pest  two  years.  Wi- 
’  iams-Sonoma  Inc.  has  puchased 
:  five  of  cm's  high-end  Regatta 
'  UnixserversafacostofSI^mi- 
lion  each.  The  San  Francisco 
company  is  halfway  through  a 
-  yearlong  pten  to  reduce  100 
stand-atom  servers  to  fhe. 

.  Thoseservwswibemovedtoa 
partitioned  emKonmenl  on  toe 
Regatta  servers,  because  parti¬ 
tioned  servers  can  nto  muKipie 


HVbuspenda 
lot  of  money 
up(raiiL[Biil]ilwas 
ettnr  that  or  they 
weragoingtobiiy 
another  50  aarvers 
bittie  next  year. 


srm  iTTMir.  data  cDnEn 

UANAeCe.  WIILIAUS-SONOUA  INC. 


appbcalions  on  the  same  boK. 

"Ybu  spend  a  lol  ot  money  up¬ 
front,"  said  Steve  Stewart  the 
manager  of  toe  retekr's  data  cen¬ 
ter.  BuL  he  added.  "R  wbs  either 
toal  or  they  were  going  to  faujf  an¬ 
other  SO  servers  to  toe  next  year  * 

Stewart  expects  a  retim  on 
investment  In  two  or  three  years 
and  foresees  savings  coming 
from  just  rixKit  every  aspect  of 
toe  dete  center's  operation,  to- 
ckidtog  power,  mainlanance. 
persormef  and  bcenstog  fees. 

Ekninaling  one  stand-alone 
server  often  AwfS  companies  to 
get  rid  of  four  more  servers:  toe 
produettoft  server,  toe  testing 
senier,  toe  fati>ver  server  and  a 
development  server,  said  Marvin 
KamanrL  deector  of  oparalions 
at  Supervalu  too,  an  Eden 
name.  Minn.-baBed  wholesatef 
and  dbtrfbulor  of  food  and  gen¬ 
eral  merchandise  to  grocery  and 
discoifit  stores. 

Hamann  is  reducing  toe  num¬ 
ber  of  siandidone  servers  at  his 
company  from  120  to  00  by  mov¬ 
ing  to  partttoned  servers,  tad 
that’snotlheendoftoeconsfli- 
dalioa  ^Mren  we  gel  to  that  goal. 


we  wi  set  a  new  gcai."  he  said. 

Consokdatng  data  canters  or 
servers  isn't  a  new  concept  and 
IT  managers  at  toe  conferance 
wetedeeriyaMveofthepoten- 
tialprobtomsandcostsofBMmr- 
tog  business  unto  to  add  server 
.  after  server  to  hoEtappicalions. 
But  toe  contiung  economic 
downium  has  pul  pressure  on  IT 
;  departments  to  cut  back.  And.  as 
!  Mm  piRIL  "costs  were  just 
getongoutofeoraraL" 

M»k  Lml  «)  arwiyst  at  Meta 
.  Group  Inc.  In  Stsntord.  Com., 
caied  coneohdatton  toe  "hottest 
thing*  md  said  the  most  dMcuk 
aspect  of  toe  effort  often  is  com¬ 
ing  to  terms  with  toe  inventory. 
ConsoUatag  servers  can  lead  to 
some  management  retestence. 
particulatiy  If  a  busness  unit 
.  hosts  a  parbeuiar  server.  But  as 
tong  as  service  defrvery  is  unaf¬ 
fected,  company  buy-m  is  uaualy 
easy  to  get  IT  managers  said. 

Mdiaai  MeShane.  manager  of 
tecfiacal  services  and  opamPons 
at  KrasdMe  Food  Inc.  a  WNte 
Plains.  RT.-based  food  dBlitou- 
.  tor.  said  gatong  cooperation  from 
buanass  laiiis  lor  consoUalton 
profads  is  ullimatefy  not  a  prab- 
!  lam.  "The  dolafs  arid  cents  of  I 
:  conwnca$hioherijp5.andli'5a 
;  done  deal.' satoMcShana 
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Suppose  there's  a  shortage  of  a  particular  IT  skill  set. 
We  all  know  what  happens,  don’t  we?  Those  skills  become 
hot.  Training  courses  spring  up.  Salaries  go  through  the 
roof.  And  the  one  thing  that  surely  won’t  happen  is  that 
people  with  expertise  in  that  skill  set  wiU  be  retrained  to 
do  something  else,  thus  making  the  shortage  worse  —  right? 

Except  when  it  comes  to  mainframes.  Crazy,  huh? 

As  Computerworld’s  Patrick  Thibodeau  reports  this  week  (see 
story,  page  1),  mainframers  are  in  such  short  supply  that  one  pro- 


fessional  group  for  data  center  managers  is  set¬ 
ting  up  hs  own  coUe^Ievel  online  courses  for 
potential  mainframers.  But  at  the  same  time,  IT 
shops  that  are  phasing  out  mainframes  are  actu¬ 
ally  retraining  experienced  mainframers  to  do 
nonmainframe  IT  work. 

Insane  as  that  sounds,  it  does  make  sense 
when  you  remember  that  55%  of  mainframers 
are  in  their  50s  or  60s.  These  aren't  kids  who 
are  ready  to  jump  to  another  company  at  the 
drop  of  a  hat.  These  people  are  fully  vested  in 
their  pension  plans.  They’d  rather  struggle  to 
learn  new  technologies  than  start  over  at  an¬ 
other  company  that  needs  their  mainframe 
skills  for  the  few  years  before  they  retire. 

Meanwhile,  young  IT  people  aren't  jumping 
into  mainframe  work.  They  were  never  taught 
mainframe  skills.  After  alt  pundits  and  analysts 
and  other  industry  blowhards  have  been  saying 
mainframes  are  dead,  or  at  least  dying,  for  a 
decade  now.  Why  learn  something  that’s  dyiitg? 

But  mainframes  aren't  dead  at  many  IT 
shops.  And  they  show  no  signs  of  dying  soon. 
Unix  didn't  kill  them.  PC  networks  didn't  kill 
them.  Y2k  was  supposed  to  kill  them  when  all 
that  mainframe  code  stopped  running  on  }an.  1. 
2000.  But  instead  we  spent  billions  of  dollars 

fixing  that  code  —  and  now  we  - 

have  to  earn  out  that  investment. 

That's  not  the  only  reason  main¬ 
frames  refuse  to  die.  Mainframes 
worie  They  still  set  the  standards 
for  security  and  reliability  and 
availability  in  IT.  And  mainframe 
MIPS  have  kept  getting  cheaper  in 
the  10  years  since  IBM  realized  it 
could  no  longer  survive  by  soakmg 
its  mainframe  customers. 

So  mainframes  aren't  going  away. 

But  mainframers  are.  And  they're 
not  being  replaced. 

What  do  you  do  if  you’re  looking 


at  a  staff  of  highly  experienced  mainframers 
who  will  be  retiring  in  a  few  years?  You  can 
outsource,  but  that  limits  your  flexibility  — 
and  it  hands  the  management  of  your  most 
critical  data  to  someone  for  whom  it’s  just 
another  job.  You  can  migrate  off  those  main¬ 
frames.  and  if  that's  your  plan,  now's  the  time 
to  start  —  it’ll  take  years  to  re-create  or  trans¬ 
form  the  business  processes  embedded  in  that 
mainframe  code.  (That’s  why  it  was  worth 
making  all  those  Y2k  fixes  instead  of  rewriting 
the  code,  remember?) 

Or.  since  you  won't  be  able  to  hire  the  main¬ 
frame  talent  you  need,  you  could  start  creating 
it  yourself. 

You  could  make  it  part  of  your  shop's  prirrta- 
ry  career  path.  That  means  everyone  learns  the 
basics.  Not  everyone  will  have  the  right  mix  of 
skills  and  temperament  for  mainframe  work, 
but  a  few  probably  will. 

And  if  those  few  people  with  the  right  apti¬ 
tude  pull  the  average  age  of  your  mainframers 
down  in  a  few  years  from,  say.  55  to  40.  your 
mainframe  skills  crisis  is  over. 

Besides,  if  your  mainframes  aren’t  going 
away,  they're  a  key  piece  of  your  IT  infrastruc¬ 
ture.  Like  the  Internet  and  security,  the  main¬ 
frame  is  something  everyone  in 
your  shop  needs  to  understand. 
And  for  that,  there’s  no  replace¬ 
ment  for  hands-on  experience. 

So  you  have  options:  outsourc¬ 
ing.  migration  or  building  your 
own  mainframers.  But  whatever 
you're  going  to  do  about  your 
mainframe  skills  problem,  start 
working  on  it  now. 

Because  if  your  mainframers  are 
gone  before  you've  got  something 
or  someone  to  replace  them  with, 
you’ll  find  out  just  how  crazy  a 
skills  shortage  can  be.  I 
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Missing  Mainframers 

Suppose  THERES  a  shortage  of  a  particular  IT  skill  set. 
We  all  know  what  happens,  don’t  we?  Those  skills  become 
hot.  Training  courses  spring  up.  Salaries  go  through  the 
roof.  And  the  one  thing  that  surely  won’t  happen  is  that 
people  with  expertise  in  that  skill  set  will  be  retrained  to 
do  sometWg  else,  thus  making  the  shortage  worse  —  right? 

Except  when  it  comes  to  mainframes.  Crazy,  huh? 

As  ComputerworlcFs  Patrick  Thibodeau  reports  this  week  (see 
story,  page  1),  mainfiramers  are  in  such  short  supply  that  one  pro- 


fessional  group  for  data  center  mana^rs  is  set¬ 
ting  up  its  own  college-level  online  courses  for 
potential  mainframers.  But  at  the  same  time,  IT 
shops  that  are  phasing  out  mainframes  are  actu¬ 
ally  retrmning  experienced  mainframers  to  do 
nonmainframe  IT  work. 

Insane  as  that  sounds,  it  does  make  sense 
when  you  remember  that  55%  of  mainframers 
are  in  their  50s  or  60s.  These  aren’t  kids  who 
are  ready  to  jump  to  another  company  at  the 
drop  of  a  haL  These  people  are  fully  vested  in 
their  pension  plans.  They’d  rather  stru^e  to 
learn  new  technologies  than  start  over  at  an¬ 
other  company  that  needs  their  mainframe 
for  the  few  years  before  they  retire. 

Meanwhile,  young  IT  people  aren’t  jumping 
into  mainframe  work.  Hiey  were  never  taught 
mainframe  skills.  After  all,  pundits  and  analysts 
and  other  industry  blowfaards  have  been  saying 
mainframes  are  dead,  or  at  least  dying,  for  a 
decade  now.  Why  learn  something  that’s  dying? 

But  mainframes  aren't  dead  at  many  IT 
shops.  And  they  show  no  signs  of  dying  soon. 
Unix  didn’t  kill  them.  PC  networks  didn’t  kill 
them.  Y2k  was  supposed  to  kill  them  when  all 
that  mainframe  code  Stopped  running  on  Jan.  1, 
2000.  But  instead  we  spent  billions  of  dollars 
fiiring  that  code  —  and  now  we 
have  to  earn  out  that  investment. 

That’s  not  the  only  reason  main¬ 
frames  refuse  to  die.  Mainframes 
work.  They  still  set  the  standards 
for  security  and  reliability  and 
availability  in  IT.  And  mainframe 
MIPS  have  kept  getting  cheaper  in 
the  10  years  since  IBM  realized  it 
could  no  longer  survive  by  soaking 
its  mainframe  customers. 

So  mainframes  aren’t  going  away. 

But  mainframers  are.  And  they’re 
not  being  replaced. 

What  do  you  do  if  you’re  looking 


at  a  staff  of  highly  experienced  mainframers 
who  will  be  retiring  in  a  few  years?  You  can 
outsource,  but  that  limits  your  flexibility  — 
and  it  hands  the  management  of  your  most 
critical  data  to  someone  for  whom  it’s  just 
another  job.  You  can  migrate  off  those  main¬ 
frames.  and  if  that’s  your  plan,  now’s  the  time 
to  start  —  it’ll  take  years  to  re-create  or  trans¬ 
form  the  business  processes  embedded  in  that 
mainframe  code.  (That’s  vifhy  it  was  worth 
making  all  those  Y2k  fixes  instead  of  rewriting 
the  code,  remember?) 

Or.  since  you  won’t  be  able  to  hire  the  main¬ 
frame  talent  you  need,  you  could  start  creating 
it  yourself 

You  could  make  it  part  of  your  shop’s  prima¬ 
ry  career  path.  That  means  everyone  learns  the 
basics.  Not  everyone  will  have  the  right  mix  of 
skills  and  temperament  for  mainframe  work, 
but  a  few  probably  will 

And  if  those  few  people  with  the  right  apti¬ 
tude  pull  the  average  age  of  your  naainframers 
down  in  a  few  years  from,  say.  55  to  40.  your 
mainframe  skills  crisis  is  over. 

Besides,  if  your  mainframes  aren’t  going 
away,  they’re  a  key  piece  of  your  IT  infrastruc¬ 
ture.  like  the  Internet  and  security,  the  main¬ 
frame  is  somethir^  everyone  in 
your  shop  needs  to  understand. 
And  for  that,  there’s  no  replace¬ 
ment  for  hands-on  experience. 

So  you  have  options:  outsourc¬ 
ing.  migration  or  building  your 
own  mainframers.  But  whatever 
you're  going  to  do  about  your 
mainframe  skills  problem.  Start 
working  on  it  now. 

Becatjse  if  your  mainframers  are 
gone  before  you’ve  got  something 
or  someone  to  replace  them  with, 
you’ll  find  out  just  how  crazy  a 
skills  shortage  can  be.  I 
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>  If  it's  not  an  iPAQ, 
it's  just  an  organizer. 


>oijr  peop'e  CO"  ge>  the  cortvenience  and  power  of  o  total  wuelefs’  solution  from  a  handheld  That 
*  ,1  <  ac  HP  ’PAQ  The  HP  iPAO'  5A50  is  the  latest  member  of  the  top-sellmg  Pocket  PC  family 
"•  tne  >sa’ld  jna  features  Microsoft  Windows  Pocket  PC  2002  Arid  it  s  equipped  with  Integrated 
B'li  etooin  i■^’pgla'ed  W^.-eiess  LAN  [802  Hbj'  b'ometnc  fingerprint  reader  for  unrivaled  secinity 
ordabngnte’  .Ho'  ...'e.’n  So  ^orqei  obouf  coWes  Forget  about  gomg  ha'fwaii  Instead  send  yow 
th  A  'eies-  access  'c  >hei'  corporate  data  and  applications  os  web  as  the  tried  and  true 
contacts  an,:  co'enda'  I's  s  moiy  a  smaihv  engineered  way  to  go  mobile 


>  hpiPAQ'5450 


•Wireless  copobility  with  biomefric 
fingerprint  security 

•Integrated  802.11b  Wireless  IAN,  Bluetooth',” 
for  complete  mobility' 

•Enhanced  security  with  biometric  fir>gerprint  reader 

•Removable  battery 

•Universol  cradle  for  USB  or  serial  interface 

•Window$*-based  operating  system 
allows  for  enterprise  applications 

Starting  ot 


$699 
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Compaq  Tablet  PC  TC1000 

•Easily  converts  to  a  desktop,  notebook  or  tablet 
•Easy  to  carry,  less  than  3  lbs. 

•Small  as  a  notepad,  8.3*  x  10.8* 

•Battery  lasts  over  4.5  hours 
•Removable  keyboard,  point  stick 
and  octive  pen 

•Integroted  10/100  Ethernet  LAN 
ar>d  56K  Modem 
♦WifKlows*  XP  Tablet  PC  Edition 


Starling  ot 


$1,699 


4" 

hp  deskjef  450€i 
mobile  printer 

•AAobility,  flexibility  and  convenience 
•Stunning  results  with  up  to  4800 
optimized  dpi' 

•Up  to  9  ppm  black  text  and  up 
to  8  F>pm  color 

•Bluetooth'**  cord  for  wireless  printirrg 
sold  separately 

•Optional  lortg-losting  Lithium-Ion 
battery  sold  seporotely 

Starting  at 

$299 
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Sun  Launches  Fresh  Attack 
On  Low-End  Server  Market 


Price  cuts  and  new  hardware  with  bundled 
software  mark  strategy  to  compete  against  Intel 


0V  JAiKUMAIt  VIJAVAH 

Sun  Microsystems  loc.  tomor¬ 
row  will  announce  two  low- 
end  Solaris  servers  featuring 
integrated  sofhvare  stacks  that 
it  will  position  as  lower-cost 
alternatives  to  Intel  Corp. 
servers  runnmg  UnuiL 
Sun  will  also  introduce  a 
new  family  of  midrange  stor¬ 
age  products  featuring  its  N1 
virtualization  and  provision¬ 
ing  technologies,  according  to 
sources  familiar  with  its  plans. 


i2B^by 
Restatements, 
SEC  Probe 

User  group  says  it  still 
backs  reeling  supply 
chain  softwie  vendor 

BV  MARC  L.  SONOIMI 

The  fortunes  of  i2  Technolo¬ 
gies  Inc.  took  aiMther  turn  for 
the  worse  last  week,  as  the 
struggling  supply  chain  soft¬ 
ware  vendor  disclosed  that 
the  Securities  and  Exchange 
Commission  has  launched  a 
full-blown  investigation  of  its 
accounting  practices. 
Dallas-based  i2  also  said  it 


will  likely  have  to  make  "ma¬ 
terial  adfustments"  to  its  fi¬ 
nancial  results  as  far  back  as 
1999.  In  addition,  the  company 
warned  chat  it  faces  a  possible 
delisting  by  Nasdaq  Stock 
Market  Inc.  and  that  it  may 
breach  a  financial  covenant 
with  its  bondholders. 

"12  looks  like  they  could  be 
in  serious  financial  trouble," 
said  a  user  at  a  Fortune  500 
company  that  runs  i2*s  trans¬ 
portation  management  soft¬ 
ware.  “We’re  evaluating  our 
options  and  contingency 
plans."  The  user,  who  asked 
not  to  be  identified,  said  he’s 
concerned  about  what  might 
happen  if  i2  goes  under  but 
added  that  he  thinks  another 
i2  Technologies,  page  12 
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The  announcements  are  part 
of  the  quarterly  technology  re- 
ft^hes  that  Sun  promised  ear¬ 
lier  this  year  and  will  also  in¬ 
clude  price  cuts  and  several 
services-related  plans,  the 
sources  said.  Sun  declined  to 
comment  in  advance  on  the 
announcements. 

Sun’s  new  Sun  Fire  V210 
and  Sun  Fire  V240  servers 
mark  a  fresh  assault  on  the 
low  end.  said  Gordon  HafT,  an 
analyst  at  Illuminata  Inc.  in 
Nashua,  N.H.  The  systems  are 
based  oa  Sun's  UltraSparc  mi 
Jalapeno  chip,  which  is  opti¬ 
mize  for  use  in  low-end 
servers. 

The  V210,  which  measures 
lU  (L7S  in.  high),  can  support 
two  processors,  up  to  4GB  of 
memory,  two  drive  bays  and  a 
PCI  slot.  Pricing  will  start  at 

Sun,p<3ge49 


Striding  Airlines  Scrutinize  U 
Projects  Amid  Mounting  Losses 


Pressure  is  on  to  show 
significant  ROl  or 
to  boost  bottom  line 


As  they  struggle  to  survive  an 
economic  downturn  that's  be¬ 
ing  exacerbated  by  the  war  in 
Iraq,  U3.  airiines  are  taking  an 
increasingly  demanding  took 
at  return  on  investn»en( 
and  "transformational* 
benefits  before  funding 
IT  projects. 

Already  trying  to  recover 
from  $18  billion  in  losses  since 
the  SepL  11  attacks,  the  airiines 
now  face  the  prospect  of  los¬ 
ing  another  $10  billion  and 
tens  of  thousands  more  jobs  if 
the  war  in  Iraq  lasts  longer 
than  expected,  according  to 
the  Intematitmal  Air  Trans¬ 
port  Association.  As  a  result, 


the  pressure  on  airline  IT  de¬ 
partments  to  prove  the  ROl 
and  cost-reduction  beoefits  of 
new  IT  projects  has  never 
been  greater,  according  to 
some  industry  executives. 

For  example,  America  West 
Airiines  Inc.  has  always  fo¬ 
cused  on  ROl  before  funding 
new  IT  projects.  But  "the  rig¬ 
ors,  constraints  and  mile¬ 
stones  that  you  have  to  meet 
to  move  forward  with 
new  programs  have  now 
become  much  more  in¬ 
tense,"  said  joe  Beery. 
CIO  at  America  West  in 
Tempe,  Ariz.  “We've  con¬ 
strained  the  projects  to  the 
hi^iest  ROl  you  can  imagine." 

America  West  has  increasied 
deployment  of  service  kiosks 
and  recently  rolled  out  a  wire¬ 
less  system  for  "roving  gate 
agents"  at  Baltimore/Wash- 

Airlines,  page  49 
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m-source  strategy  at  Merrill  Lynch,  M 


ROBERT  M.  LEFKawrrz.  director  of  open-source  strategy  at  Merrill  Lynch.  _ 
urges  companies  that  rely  on  open-source  software  such  as  Linux  to  regularly 
share  code  patches,  modifications  and  new  implementations.  The  payoff  is 
more  stable  and  reliable  software. ‘If  we  find  a  bug  or  a  problem,  we're  Interested 
In  fixing  that  problem.  We're  also  Interested  in  not  fixing  It  again  in  the  next  ver¬ 
sion,'  Lelkowitzsays.  moE  37 


Microsoft 
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Windows  XP  Professional  has  an  average  system  u 
10  times  better  than  Windows  98  SE,  and  3  times 
Windows  NT  4.0,  so  there  are 
With  AutoRecovery,  Office  XP 


Can  your  antivirus  software  provide  double  the  scanning  power?  Ours  can. 

Making  sure  your  compony  is  secure  gets  more  and  more  difficult  every  day.  That's  why  eTrust'”  Antivirus  v7 
from  Computer  Associates  uses  dual  scanning  engines  to  ensure  comprehensive  virus  protection.  It  processes 
data  in  real  time  to  search  out  and  eliminate  viruses,  and  it  also  scans  files  during  prescheduled  and 
off-peak  hours.  All  ot  the  cost  of  most  single-engine  AV  products.  It's  more  than  just  twice  the  protection. 
It's  twice  the  peace  of  mind.  co.com/etrust/antivirus 


eTrust'“  Antivirus  (fa)  Computer  Associates* 
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«  Running  [Exchange  5.5 
and 2000]  beside  each 
other  is  costly,  so  it's  better  to 
upgrade  fast. 

ROLF  lUNSIUIIII,  DIRECTOR  OF  GLOOAL 
E-MAIL  AND  COLLABORATION  SERVICES. 
AVENTIS  PHARMACEUTICALS  INC 


E-mail  Upgrade  From  the  Ground  Up 

Aventis  Pharmaceuticals  took  three  years  to  complete  an  up¬ 
grade  of  its  e-mail  system,  which  spans  more  than  50  coun¬ 
tries  and  links  55,000  users.  The  project  served  as  a  catalyst 
for  the  company  to  redesign  its  entire  server  infrastructure. 
This  step-by-step  report  on  the  upgrade  offers  up  lessons  that  could  be  applic¬ 
able  to  your  next  big  project.  Page  25 
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6  Microsoft  moves  to  boost  the 
level  of  wireless  security  in 
Windows  XP. 

6  Computer  Associates  says  it 
will  rely  on  resellers  more. 

7  IBM  and  Oracle  are  out  to 
lure  customers  away  from 
BEA  Systems'  application 
server. 

7  Unisys  offers  a  scaled-down 
version  of  its  ES7000  server 
with  a  lower  cost  of  entry. 

6  Cisco  expands  its  Catalyst 
6500  switch  family. 

9  Many  U.S.  companies  hold 
the  line  on  IT  hiring  during 
the  fourth  quarter.  And  the 
job  market  isn't  expected  to 
improve  much  this  year. 

9  Dell  and  Oracle  try  to  build  a 
case  for  user  adoption  of  Ora¬ 
cle  databases  ninning  on  Dell 
clusters. 

10  3Com’s  strategy  to  re-enter 
the  enterprise  server  market 
yields  a  high-end.  software- 
based  IP  switch. 

11  EMC  is  the  latest  vendor  with 
plans  to  put  its  storage  man¬ 
agement  software  on  new 
Brocade  switches. 

11  A  securities  trade  group 

wants  the  SEC  to  drop  the 
WORM  archiving  require¬ 
ment. 

12  Melding  IT  security  with  non- 
IT  corporate  security  hinc- 
tions  can  yield  real  benefits, 
users  say. 


30  Web  Sites  Take  Full  Measure. 

Performance  monitoring  tools 
can  track  your  site's  activity, 
but  they  don't  cover  every¬ 
thing  and  can  be  expensive. 

32  CRM  With  a  Family  Touch. 

An  online  genealogy  company 
finds  that  a  self-service  CRM 
application  has  cut  costs  and 
improved  customer  service. 

33  Future  Watch:  The  Ins  and 
Outs  of  IT.  Futurist  John 
Parkinson  says  major  up¬ 
heavals  in  IT  are  on  the  hori¬ 
zon  in  outsourcing,  supply 
chains  and  operating  systems. 

34  Security  Manager’s  Journal: 
Directory  OlHch  Trips 
Authentication  Efforts.  Math¬ 
ias  Thurman  has  problems 
implementing  two-factor  au¬ 
thentication  for  his  company’s 
Unix  and  NT  environments. 
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37  In  the  Linux  Loop.  Companies 
that  regularly  share  code  fixes 
and  revisions  benefit  from 
more  stable  and  reliable  open- 
source  software. 

38  The  Leap  to  Linux.  How  do 

you  determine  your  training 
needs.’ 

40  Market  Rally.  An  IT  turn¬ 
around  has  brought  the 
world's  oldest  commodities 
exchange  back  to  profitability. 

42  The  Elevator  Speech.  Turn  a 
dreaded  encounter  into  an  op¬ 
portunity  for  some  high-level 
PR  for  IT 


8  On  the  Mark:  Mark  Hall  looks 

at  the  coming  battle  for  (yes) 
the  desktop  while  he  peeks  at 
a  new  encryption  appliance- 

20  Patricia  Keefe  wants  IT  man¬ 
agers  to  take  out  some  credi¬ 
bility  insurance  in  the  form 
of  business-and-IT  project 
committees. 

20  Pimm  Fox  argues  that  appli¬ 
cation  service  providers  lost 
their  luster  by  failing  to  live 
up  to  the  hype.  But  in  these 
more  cost-constrained  times. 
IT  may  lake  a  new  shine  to 
old  ASPs. 

21  Michael  Gartenberg  sa>’s  you 
need  a  Loogbom  strategy  to¬ 
day  even  though  Longhorn  — 
Windows’  next  major  new 
client  operating  system  — 
may  not  arrive  until  2005. 

36  Nicholas  Petreiey  thinks  he 
knows  what  would  happen  if 
Perry  Mason  defended  IBM  in 
the  lawsuit  filed  t>y  SCO. 

43  John  Berry  says  fears  that 
ROI  will  fall  short  of  its  pro¬ 
jections  prevents  IT  managers 
from  conducting  postinvest¬ 
ment  audits  of  their  projects. 

50  Frankly  Speaking;  Frank 
Hayes  warns  that  for  the  next 
year,  project  planning  will  be¬ 
come  even  more  difiTicult 
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Qm  Me  a  Test  Hook  -  or  Else 

OEVELOPMENT:  b  h  igDonnce,  paranoia  or 
pure  laziness  that  keeps  devek^ten  from 
tweaking  their  code  to  alknv  for  successful 
automated  testing  asks  colunudst » 

Hayes.  QMeMMSTBOl 

Detabase  Security  Breaches 
Are  on  the  Rise 

STORAGE:  Itwridm  who  commit  in- 

tnisioDa  often  have  access  codes  and  a  pre- 
dseideaofthevahiabledsutheywaattoex- 
ploiL  cautioos  Slon^  Networid/^  WorU  On¬ 
line.  What  can  you  do  to  protect  your  comps- 
oy?CMlBMJiASM2i 

Running  Windows  i^ips  on 

OPOUTMe  SmCHS:  The  SCO  Gtoup's 
Opinder  Bawa  oflien  adnce  on  getting  your 
^^findows  appUcMaons  to  run  oo  Linux  sys¬ 
tems.  MlMSIBa 

802.1i  Authentication 

HOeiLr/WnaESS:  Beadet  run  Bunn  d- 
pbins  bow  8Q2Jx  asdiemk^ioo  worics  and 
bow  k  could  h^  promote  wider  acceptance 
of  wirdeas.  QMbHM  nm 

TMnHWnSoeurity: 

WhoGnmiTiiw 

PRIVACV:  a  awdy  emciBe  to  cosiduct  for¬ 
mal  reviews  of  yow  boatnem  putnen' lecv- 
rky  practices,  myt  privacy  cokimniat  Jay 
GUn&BmtheBvkbfahivedevelopedastao- 
dard  to  Bike  the  job  easiet.  QWMM  SM4S 
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AT  DEADLINE 


HeafthSouthCK) 
Fred  Over  Finances 

HuHhSouth  Corp.  In  Biraibio- 
ham.  AIl,  saM  tt  firad  CIO  Ken- 
nath  Uvaaay  aftar  he  plaadad 
Oirity  to  federal  charges  of  fatsi- 
fying  financial  wfonruLion  and 
cansphacjr  to  commit  win  and 
securities  fraud.  Uvesay  was  one 
of  five  HealttSouth  eaecutrves 
dwged  in  connactioo  with  a 
scheme  to  artfficialy  inflate  the 
healih  care  company's  atfnings 
and  to  fRe  (ahe  financial  state¬ 
ments  wMi  the  government 

Microsaft  to  Alter 
XPs  Start  Menu 

Microaofl  Corp.  said  tt  wM  give 
a  more  prominant  place  in  the 
Windows  XP  start  merw  to  a 
program  that  helps  users  set 
products  from  other  vendors  as 
their  default  eoltware.  The  com¬ 
pany  agreed  to  make  the  change 
as  part  of  Hs  antttruit  aetttement 
proceedfrigs  witti  the  U.S.  Oe- 
pertmanl  of  Justice.  The  DOJ 
dednsd  to  cemmant,  other  than 
to  lay  that  R's  wertdng  vdth  Mi- 
croaolt  "to  addreaa  issuai  that 
ariaa  hi  thlB  precaaa.* 

Sybase,  PaopleSoft 
Say  Q1  Below  Plan 

Sybaat  bK.  in  DiMi.  CaW..  and 
PeapteSeft  toe,  in  Pteasanton, 
CaK..  both  wvoad  Wat  their 
Writ  guartar  financial  reautts  wM 
be  tosMT  dian  aipactod.  SytMsa 
CEOJehnChanaaMuaarsde- 
terrad  •‘nuwtroui*  ^armad  »ft- 
wara  purchaaia  bacauaa  of  aco- 
nande  eancama.  ^epfaSoA  ft- 
ported  ahniar  purchtting  dalays. 

Network  Associates 
Buying  Two  Vendors 

Natwarfi  AaaocialaB  Inc.  In  Santa 
Oara.  CdR..  ^  I  ptam  to  buy 
tern  San  Jaarfraaad  cmapanlaa 
Wat  aad  IsWealBn'pravMdpn 
toehnalagg.  Nalwarli  Aamiatos 
aWi  m  Sin  adHaa  la  caWi  to 
MqiWaEatoreaptSaartvTach- 
aelo^  lac.  and  S100  laMon  to 
any  amvan  naneam  aic. 


Microsoft  Adds  Wireless 
Security  Support  to  ^ 


Free  software  replaces  less  secure  VVEP 
w  ith  new  Wi-Fi  Protected  Access  specs 


av  eoe  brewin 

Microsoft  corp 
last  week  added 
support  for 
a  new  set  H| 
of  wireless  LAN  sccur- 
ity  specifications  to 
Windows  XP.  and  WLAN 
hardware  thai  uses  the  same 
specs  is  expected  from  several 
vendors  later  this  month. 

Microsoft  said  software  that 
complies  with  the  Wi-Fi  Pro¬ 
tected  Access  (WPA)  security 
mechanisms  can  be  down¬ 
loaded  from  its  Web  site  for 
free.  WPA.  which  was  devel¬ 
oped  by  Microsoft  and  other 
vendors  under  the  auspices  of 
the  Wi-Fi  Alliance  trade  group, 
will  replace  the  older  and  less 
secure  Wired  Equivalent  Pri¬ 
vacy  (WEP)  security  standard 
that  XI’  DOW  supports. 

Sam  Bhavnani.  an  analyst 
at  ARS  Inc.  in  La  foUa,  r.alif., 
said  securit>’  remains  corpo¬ 
rate  users'  No.  1  concern  about 
Wi-Fi  technology.  Microsoft's 
decision  to  build  WPA  sup¬ 
port  into  Windows  XP  should 
help  alleviate  those  concenu 
because  it  will  provide  en¬ 
hanced  security  that  cod  users 
‘‘will  not  even  have  to  think 
about."  Bhavnani  said. 

Other  Choices 

But  Dave  Sankey,  director  of 
process  technology  develop¬ 
ment  for  the  product  repair 
service  division  at  Sears,  Roe¬ 
buck  and  Ccc,  said  some  Wi-Fi 
security  toob  already  on  the 
market  are  at  least  as  good  as 
the  WPA-compliant  ones.  For 
example.  Sean  has  deployed 
to  its  service  technicians 
10.000  notriwok  PCs  that  are 
equipped  with  Wi-Fi  connec- 
tkuts  and  use  security  middle¬ 
ware  from  IBM  that  Sankey 
called  "as  good  as  WPA.” 

WPA.  which  was  announced 
in  October,  b  an  interim  set  of 
speciricatioos  that  its  backers 


hope  can  bridge  the  gap  be¬ 
tween  WEP  and  a  draft  802.11i 
WLAN  standard  that  a  work¬ 
ing  group  within  the  In- 

■  stitute  of  Electrical  and 
Electronics  Engineers 
Inc.  b  expected  to  com¬ 
plete  by  next  year. 

The  specifications  prescribe 
the  use  of  the  Extensible  Au¬ 
thentication  Protocol  to  deter¬ 
mine  the  identities  of  end 


users  who  try  to  access  corpo¬ 
rate  Wi-Fi  networks.  WPA 
also  replaces  the  static  en¬ 
cryption  keys  in  WEP  with 
harder-to-crack  dynamic  keys 
based  on  the  Temporal  Key  In¬ 
tegrity  Protocol,  which  is  part 
of  the  802ili  proposal. 

Wi-Fi  Alliance  officials  said 
Microsoft's  move  dovetaib 
with  hardware  announcements 
planned  for  thus  month's  Net- 
worid'Inierop  conference.  Bri¬ 
an  Grimm,  a  spokesman  for  the 
trade  group,  declined  to  speci¬ 
fy  how  many  vendors  plan  to 


introduce  WPA-certified  hard¬ 
ware  at  N*I,  but  he  said  it 
would  “be  more  than  five." 

Companies  that  previous¬ 
ly  said  they  plan  to  support 
WPA  include  Cisco  Systems 
Inc.,  Hewlett-Packard  Ca  and 
Sunnyvale.  Calif.-based  Prox- 
im  Corp. 

Bill  Carney,  a  vice  president 
at  Texas  Instruments  Inc.  and  a 
member  of  the  Wi-Fi  Alliance’s 
board,  said  that  starting  in  Au¬ 
gust  the  trade  group  won’t  put 
its  certification  stamp  on  any 
new  Wi-R  hardware  that  does 
not  support  WPA.  • 
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CA  to  Hand  Off  More 
Users  to  Resellers 


Changes  sales 
strategy  for  three 
sofhvare  lines 


BV  MARC  L.  SOMOINI 

Computer  Associates  Inter¬ 
national  Inc.  last  week  an¬ 
nounced  restructuring  moves 
in  its  rr  services  and  indirea 
sales  organizations,  including 
a  plan  to  put  more  emphasis 
on  using  channel 
panners  to  sell 
some  of  its  key 
products. 

As  part  of  the 
changes,  which 
were  disclosed  at 
the  start  of  CA's 
new  fiscal  year, 
the  software  ven- 


sharc  more  sales  leads  with 
channel  partners  and  let  them 
take  the  lead  in  the  selling 
process,  said  George  Kafkar- 
kou.  senior  vice  president  of 
CA's  worldwide  channel  oper¬ 
ations. 

Customer  Contact 

The  new  approach  b  largely 
geared  toward  small  and  mid¬ 
size  businesses,  KaOcaricou 

said,  adding  that 
company  offi- 
ciab  hope  the 
increased  focus 


Iprefer 

todeal 


wiihCAdirectiy.  "ST” 
...That  rela¬ 
tionship  is  im¬ 
portant  to  us. 


over  the  top 
spots  in  the  stor¬ 
age  and  security 
management 


dor  said  it  wU!  lay  .  markets. 


ANDREW  WINER,  CIO. 
MYtfiS  INDUSTRIES  INC. 


off  about  450  em¬ 
ployees  world¬ 
wide  over  the 

next  few  months.  Thai's  about 
3%  of  its  workforce  of  16,000. 

The  products  that  will  be 
more  frequently  handed  off  to 
resellers  include  CA’s  eTnist, 
BrigbtStor  and  AJlFusion 
lines,  which  support  security, 
storage  and  application  life¬ 
cycle  management,  respec¬ 
tively.  The  company  plans  to 


But  Andrew 
Winer,  CIO  at 
Myers  Industries 
Inc.  in  Akroa  Ohta  said  he 
wouldn’t  want  to  give  up  hb 
existing  relationship  with  CA’s 
sales  force.  "I  prefer  to  deal 
with  CA  directly,"  he  said. 
"Our  account  team  at  CA. 
whether  sales,  service  or  cus¬ 
tomer  satbfaction.  all  know 
us.  That  relationship  b  impor¬ 
tant  to  us." 


Myers,  which  makes  plastic 
and  rubber  goods.  u.scs  CA’s 
CleverPath  business  intelli¬ 
gence  software.  For  some 
products,  it  m^t  not  matter 
who  the  seller  is,  Winer  said, 
but  the  contacts  that  Myers 
deals  with  at  CA  already  know 
the  company  and  its  hbtory. 
He  said  he's  also  not  sure 
whether  resellers  would  nego¬ 
tiate  on  price  to  the  same  ex¬ 
tent  that  CA  docs. 

Kaflearkou  said  that  in  some 
cases,  users  will  be  able  to 
keep  their  accounts  CA-only  if 
they  want  to  do  so.  However, 
he  pointed  out  that  some  of 
CA’s  products,  such  as  its 
ARCserve  data  protection 
software,  are  already  sold  hy 
resellers  only. 

CA  also  said  it's  combining 
its  presales  technical  support 
and  professional  services  or¬ 
ganizations  into  a  single  unit 
as  part  of  a  previously  db- 
closed  plan  to  narrow  the  fo¬ 
cus  of  the  company's  IT  ser¬ 
vices  offerings  to  its  own 
products.  The  new  unit.  CA 
Technology  Services,  will  be 
responsible  for  the  company’.s 
user  training  services  as  well. 

CA  said  the  services  opera¬ 
tion  has  about  2.SOO  employ¬ 
ees  and  urill  woric  closely  with 
the  sales  force  in  an  effort  to 
reduce  the  time  it  takes  users 
to  get  retunui  on  theb  invest¬ 
ments  in  the  company’s  soft¬ 
ware.! 
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IBM,  Oracle  Take  Shots  at  BEA 


Trv'  to  lure  users 
away  from  rival’s 
application  ser\'er 

SV  CAROL  8LIWA 

There  is  rea]l>’  no  subtlety  to 
the  attacks  chat  IBM  and  Ora¬ 
cle  Corp.  are  hurling  at  rival 
BEA  Systems  Inc. 

Oracle  last  week  directed  a 
“switch-and-save“  migration 
program  squarely  at  users  of 
BEA’s  WebLogk  application 
server.  At  no  charge,  BEA  cus¬ 
tomers  will  be  eligible  to  swap 
their  WebLogic  per-proces.sor 
enterprise  licenses  on  a  one- 
for-or>c  basis  for  per-processor 
licertses  of  Oracle’s  9i  Applica¬ 
tion  Server  Java  Editioa  which 
was  introduced  last  week.  Ora¬ 
cle  experts  will  even  help  those 
BEA  users  mth  their  migra¬ 
tions,  the  company  said. 

Meanwhile,  this  week  at  its 
developerWorks  Live  confer¬ 
ence.  IBM  will  release  a  free 
plug-in  that  will  let  users  of  its 
WebSphere  Studio  develop¬ 
ment  environment  test  and 


Lighter  Side 


deploy  applications  on  the 
WebLogic  application  server. 

An  IBM  spokesman  ac¬ 
knowledged  that  the  newly 
added  support  for  WebLogic 
will  make  it  “easier  to  migrate 
from  WebLogic  to  Web¬ 
Sphere,"  in  addition  to  making 
the  tools  available  to  a  broader 
spectrum  of  developers. 

Carl  Sjogreen.  senior  prod¬ 
uct  manager  of  WebLogic 
Workshop.  welcon>ed  support 
from  other  tool  veivdors  to  help 
developers  build  applications 
to  run  on  the  BEA  platform 
"lUsers  are]  going  to  sec  the 
merits  of  our  platform  under¬ 
neath."  he  said. 

It’s  no  secret  that  IBM  and 
BEA  have  been  embroiled  in  a 
heated  battle  for  the  lead  in 
the  application  server  market, 
with  Oracle  trailing  in  third 
place.  But  so  far,  BEA  hasn't 
made  a  serious  play  in  the 
tools  market. 

That  will  change  this  sum¬ 
mer  when  BEA  releases  the 
second,  more  all-purpose  ver¬ 
sion  of  its  WebLo^c  Work¬ 
shop,  which  will  work  across 
all  of  the  company’s  products. 
The  first  release  was  only  for 
building  services. 

Craig  Roth,  an  analyst  at 
Meta  Group  Inc.  in  Stamford. 
Coim..  said  he  doesn’t  think 
IBM  will  find  many  takers  to 
develop  in  WebSphere  and  de¬ 
ploy  on  WebLogic.  Roth  said  be 
would  consider  “the  shot  from 
IBM ...  to  be  a  compliment  to 
BEA  and  WebLc^  Workshop." 

Oracle,  which  doesn’t  have 
much  of  a  presence  in  the  ap¬ 
plication  server  market,  likely 
sees  BEA  as  a  more  vulnerable 
target  than  IBM.  Roth  added. 
’'With  BEA,  you  feel  you  are  at- 
tadting  an  architecture  group 

an  infiasmtctuie  group  that 
you  may  have  a  chance  of  actu¬ 
ally  swaying,"  he  sakL  "You  can't 
sway  a  CEO  with  a  switeb-and- 
save  offer,  and  IBM  often  makes 
handshake  deals  at  that  level” 

But  Mike  Gilpin,  an  analyst 
at  Forrester  Research  Inc.  in 
Cambridge,  Mass.,  said  BEA 
generally  takes  good  care  of  its 
customers.  "Most  of  their  cus¬ 
tomers  that  I  run  into  are  quite 
happy  and  loyal"  he  said. 


Gilpin  said  that  although  Or¬ 
acle’s  application  server  has  im¬ 
proved  significantiy.  the  prod¬ 
uct  generally  has  held  appeal 
only  for  Oracle’s  database  and 
application  customers. 

Lightening  Up 

That’s  exactly  the  grounds  on 
which  Oracle  is  hoping  to  sway 
BEA  customers.  If  they’re  al¬ 
ready  using  Oracle's  database 
server,  they  may  want  to  get 
their  application  server  from 
the  same  vettdor,  said  lohn 
Magee,  Oracle’s  vice  president 
of  product  marketing. 

Oracle  sells  a  standard  edi¬ 
tion  of  its  application  server, 
at  SIO.OOO  per  processor,  that 
includes  portal  and  content 
management  capabilities.  Its 


enterprise  edition,  price-d  at 
S20.000  per  processor,  includes 
features  such  as  a  director^’  in¬ 
frastructure.  security,  caching 
and  wireless  capabilities. 

The  new.  lighter  lava  Edi¬ 
tion.  which  sells  for  $5,000  per 
CPU.  features  support  for  core 
lava  2  Enterprise  Edition  tech¬ 
nology.  an  HTTP  server,  five 
scats  of  the  company’s  JDevel- 
oper  tiwl  and  the  TopLink  trt>- 
ject-to-relational  persistence 
software  that  Oracle  acquired 
last  year  from  WebGain  Inc. 

Magce  said  Oracle's  nevi' 
lava  Edition  has  more  capabil¬ 
ities  than  the  Express  prod¬ 
ucts  from  BEA  and  IBM.  He 
said  Oracle  can  give  away  the 
lava  Edition  to  BEA  customers 
because  its  long-term  business 
model  is  based  on  the  "extend¬ 
ed  middleware  functionality." 
such  as  portal,  integration  and 


Unisys  ES7000  Features 
New  Design,  Entry  Price 


Unisys  Corp.  today  will  an¬ 
nounce  a  variation  of  its  Win¬ 
dows-based  32-way  enterprise 
server  that  has  a  price  and  de¬ 
sign  configuration  intended  to 
attract  midrange  users. 

At  its  data  center  lab  here, 
Unisys  last  week  previewed 
part  of  its  ES700<V500  “Dylan" 
line  to  show  off  a  new  design 
configuration.  The  processors 
are  built  in  modules,  which 
the  company  says  will  let 


users  qukkly  assemble  large 
systems  in  building-block 
f^hion  in  a  matter  of  hours. 

The  ES7000,  which  can  scale 
up  to  32  processors,  was  previ¬ 
ously  available  with  a  mini¬ 
mum  of  eight  proccsitors,  start¬ 
ing  at  about  $80,000.  Unisys  is 
now  offering  a  four-way  ver¬ 
sion  with  a  starting  price  of 
$35,000.  The  company  is  call¬ 
ing  U  a  “pay-as-you-grow" 
approach. 

The  move  may  be  attraaive 
to  IT  managers  who  are  inter- 


business  intelligence,  in  its 
higher-end  versions. 

Erik  StahL  BEA’s  director  of 
product  marketing,  said  he  "al¬ 
most  never"  sees  Oracle  in  the 
5uiles  cycle.  He  added  that  he 
has  witnessed  similar  Oracle 
campaigns  in  the  past.  "It's  an 
acknowledgment  of  our  lead¬ 
ership  in  the  space,"  he  said. 

BEA  last  week  announced 
the  availabilir>’  of  WebLogic 
Server  8.1  and  its  IRockit  8.1 
server-side  Java  virtual  ma¬ 
chine  that’s  optimized  to  run 
on  the  Intel  Corp.  architecture.  I 


DEVElOPEinifMKSUVE 
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ested  in  having  a  sy  mmetrical 
multiprocessing  server  envi¬ 
ronment  bur  have  been  scared 
off  by  the  price,  said  jean  Boz  - 
man.  an  analyst  at  IDC.  Ac¬ 
cording  to  the  research  firm, 
worldwide  server  revenue  has 
fallen  horn  $60  billion  in  2000 
to  $44  billion  in  2002  as  a  re¬ 
sult  of  the  economic  downturn. 

Unisys  also  has  upgraded  its 
Server  Sentinel  management 
i  tools  with  features  that  include 
self-healing  functions.  I 


ME  ON  ONE 

To  road  *1  rdcr^ew  with  Umsys  Gooige 
Gozswtz.  MSI  our  Web  ate 


MicFosoft  Reveals  Office  Packaging  Options 


av  CAROL  SLIWA 

Microsoft  Corp.  last  week  un¬ 
veiled  the  padcaging  options 
that  will  be  available  for  its 
Office  System  2003  family  of 
applications,  which  is  due  this 
summer. 

Simon  Maiks,  a  product  man¬ 
ager  at  Microsoft,  said  he  ex¬ 
pects  that  the  majority  of  cor¬ 
porate  customers  will  get  the 
Office  Professional  2003  Enter¬ 
prise  Edition,  which  comes 
with  their  volume  licenses. 

The  Enterprise  Edition  in¬ 
cludes  familiar  applications 


like  Word,  Excel  Outlook, 
PowerPoint  and  Access.  But  it 
will  also  include  InfoPath,  a 
new  product  that  allows  users 
to  create  and  complete  XML- 
based  forms  and  submit  them 
to  XML-enabled  systems: 
Business  Contact  Manager 
the  desktop  Publisher  tool- 
support  for  customer-defined 
XML  schema:  and  support  for 
Information  Rights  Manage¬ 
ment  content  creation  and  au¬ 
thoring  capabilities. 

The  Office  Professional 
2003  version  that  will  be  avail¬ 


able  through  hardware  makers 
and  retail  and  academic  sales 
channeb  will  include  every¬ 
thing  in  the  Enterprise  Edition 
except  InfoPath. 

Another  new  Microsoft 
product,  the  OneNote  digital 
note-taking  application  that 
can  be  used  on  laptops,  desk¬ 
tops  and  Tablet  PCs,  will  be 
sold  as  a  stand-alone  product. 

Pricing  for  the  Office  family 
of  products  has  yet  to  be  an¬ 
nounced.  However,  Marks  said 
prices  won’t  change  signifi¬ 
cantly  from  past  vef»ans.  I 
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Del  Stands  by  Q1 
Growth  Goak 

DnpHt  Iht  ww  in  Iraq  and  con- 
Umdng  aconemic  uncartainty. 
(MCMnputarCerp.aaidila* 
ptdatoHiaaltarvalaofdouMr* 
digil  grawtli  in  ravanua,  unA 
liipwania  aod  aaniinga  during 
Hi  bat  quartv.  Dal  laafHiinad 
Ms  pradetbn  that  rawanua  wil 
incraaaa  W%  yaar  om  yaar  in 
lha  Irat  qurtar.  wMeh  wM  and 
Aqrl  30.  Tha  canqiany  npacts  a 
35%  Jump  in  aarniigi  par  ahara. 


Peregrine  Amends 
Banloiiptcy  Course 

Avagrina  ^talania  In6.i  an  aaaat 
mawagwnani  adhaafa  aandof  in 
San  Olafo.  Mad  a  ravtaad  raor- 
gardraMnn  plan  «Mi  tba  U.S. 
Banhraplcy  Cam  in  DelMvara 
aflar  fate  adOi  Na  cradHori. 
Sons  af  Ilia  cndton  now  sup- 
part  flw  plHi.  Paragrina  add.  but 
ttwefSdaleoaanMaaofunsa- 
curad  cradtora  stM  oppoaas  M, 
and  dit  >idgi  auaraaainq  the 


Sprint  Plans  IP 
Network  for 

Sprint  Carp,  aanaunoad  plans  to 
laiaich  a  priada  y  natwofii  far 
uaa  as  an  iniranat  by  aaeurity- 
conaciaus  U3.  govarnnwnl 
agendas.  Tha  company  said  lbs 
gavsrnraanl  natworii,  which  is 
dua  la  ba  raady  by  nddyaar,  wM 
aflaraMtalefliiosamohinction- 
ally  as  Ms  SprintLMi  carparata 
y  bnchbana  but  want  inehida 
galaawyf  to  tha  pubic  bitarnat 


Short  Takes 

HEWLfn-MCMRO  CO.  cut  lha 
prleao  af  Ns  nddraoga  Unti 
sarvara  by  about  20%  and  said 
N  nd  allar  Mean  Iraa  bHaetary 


lha  solid  of  systam  partflians. 
. . .  SUSE  UNUX  AO  in  Naram- 
burg.  Oarmany.  said  N  has  da- 
tagodHsaWpiiiiololanonlar- 
priia  doafclop  vardon  af  Lima 
from  tha  Ural  quartsr  to  June. 


MARK  HALL  •  ON  THE  MARK 

Sun,  Apple  Ignite  New 
Desktop  Skumish . . . 

. . .  with  Microsoft  Corp.  While  it’s  doubtfti)  that  either  company  will 
be  able  to  unseat  Windows’  monopoly  status  in  the  PC  market,  you’ve 
got  to  admire  their  pluck.  Sun  Microsystems  Inc.’s  attack  on  Micro¬ 
soft’s  desktop  fortress  is  called  Project  Mad  Hatter  (QuickLink  36292] 
and  uses  Linwc  combined  with  StarOffice  and  other  open-source 

goodies.  Although  most  of  the  attention 
has  been  given  to  Sun's  embrace  of  Linux 
and  open  source,  lha  rail  story  is  about 
hardwara.  |<din  Loaicano,  vice  president 
of  Sun's  operating  platforms  group,  says, 

"file  advantage  of  Linux  Is  its  low-cost 


hardware.”  Translated:  Intel  Corp.  hard¬ 
ware  will  always  be  cheaper  than  Ultra- 
Sparc  systems.  After  all.  Sun  could  have 
pushed  Linux  on  its  own  microprocessor, 
since  there  are  numerous  versions  run¬ 
ning  on  it  (see  www.iiitraitnuz.org).  but 
Sun  oplad  for  intal  U-32  chipa.  Sun’s  Intel 
hardware  story  gets  more 
interesting.  According  to 
Loaicano.  Sun  will  stop 
its  ”Lucy-8nd-the-foot- 
baJl  approach  with  So¬ 
laris  on  kSG."  While  the 
effect  of  Sedaris  running 
on  Intel  hardware  may 
not  dent  the  Windows 
desktop  monopoly,  it  may 
slow  Linux’s  incursion 
into  Sun’s  territory. 

Thomas  Cunningham. 

CEO  of  Baltimore-based 
Alabanza  Corp..  says  he’d 
consider  returning  to  So¬ 
laris  “if  the  hardware 
were  less  expensive.”  His 
company  uses  1.000  In- 


Othfii  jopiii-.jt.ii 


tcl-based  Linux  servers  in  its  Web  host¬ 
ing  center,  which  he  ran  for  three  years 
on  Sun  systems  until  the  costs  got  out  of 
band.  Cunningham  prafora  Solaris  bacauso 
tha  patfomianca  is  battar.  So  he  might  be 
pleased  to  hear  Loaicano  say  that  Sun’s 
price  for  Solaris  or  Linux  on  IA-32  sys¬ 
tems  “will  be  the  same."  a  Apple  Com¬ 
puter  Inc.  has  long  been  the  only  serious 
alternative  to  Microsoft's  approach  to  the 
desktop.  In  large  measure  that’s  because 
Macintosh  has  been  the  only  ocher  plat¬ 
form  that  can  run  the  Microsoft  OfTice 
Suite  natively.  It  has  also 
meant  that  Apple  has  baan 
capifot  to  Mforasoff s  com- 
aritmanl  to  the  Mac.  which 
seems  to  be  in  constant 
jeopardy  because  Office 
for  the  Mac  contributes 
so  little  to  Redmond's 
overflowing  coffers.  For 
years.  Macs  have  come 
bundled  with  Apple- 
Works.  a  usable  Office  al¬ 
ternative,  but  the  suite 
has  lacked  an  equivalent 
to  PowerPoint  This  has 
left  Mac-loving  mar¬ 
keters  without  their  es¬ 
sential  tool,  so  many  have 
switched  to  Windows. 


With  the  arrival  of  a  $99  package  called 
Keynote,  Apple  hn  a  solid  attemethro  for 
those  Mac  lovers  who  want  to  create  pre¬ 
sentations.  Keynote  Is  fast  and  easy  to 
use.  but  more  important,  it  reads  in  and 
exports  out  PowerPoint  files  flawlessly. 
It's  so  good,  it  may  make  Microsoft  won¬ 
der  why  it  needs  to  continue  supporting 
the  Mac.  ■  Another  Ritarssting  conflct  Is 
brewing  among  the  companiea  batting  to  take 
the  lead  In  Web  services  management.  Ed 
Horst,  vice  president  of  marketing  at 
AmberPoint  Inc.  in  Oakland.  CaliL. 
claims  that  enterprise  application  design¬ 
ers  using  Web  services  will  want  to  use 
products  like  AmberPoint's  Management 
Foundation  to  control  content  with  busi¬ 
ness  logic  as  well  as  oversee  the  health  of 
the  Web  services  themselves.  That  strikes 
|ohn  Haider,  senior  vice  president  of 
sales  and  marketing  at  competitor  Fla¬ 
menco  Netwoiics  Inc.  in  Alpharetta.  Ga., 
as  a  mistake.  Although  he  says  Flamenco 
WSM  Enterprise  Edition  can  also  man¬ 
age  content.  Web  services  management 
“is  the  wrong  place  to  put  business 
rules."  He  compares  products  like  his  and 
AmberPoint’s  with  Open  View  and  Tivoli, 
which  manage  networics,  not  the  data 
running  on  the  networks.  Horst  dismisses 
the  point.  BuMng  biiibnw  mmagars  in- 
vokrad  in  Vfob  MTricos  is  what  will  make 
them  a  success,  be  says.  Stay  tuned. 

■  Data  encryption  b  one  of  the  best  ways 
to  protect  your  Information.  But  I.  has 
ways  caused  a  nMfor  pariormanca  panalty. 
The  folks  at  cipberOptics  Inc.  in  Raleigh, 
N.C..  claim  that  their  Security  Gateway 
appliance  licks  that  problem.  It  does 
tripIc-DES  encryption  and  coarse  packet 
filtering  and  han^es  endpoint  authenti¬ 
cation  of  systems  while  humming  along 
with  two  IGbit/sec.  ports.  In  June,  the  ap¬ 
pliance  will  sport  an  option  for  the  Ad¬ 
vanced  Encryption  Standard  and  a  global 
policy  configuration  manager,  adding 
ease  of  use  to  its  speediness.  I 


Cisco  Upgrades  Catalyst  6500  Switch  Line 


0V  MATT  HAMBLEN 

Cisco  Systems  Inc.  last  week 
unveiled  six  modules  and  oth¬ 
er  technology  upgrades  for  its 
Catalyst  6500  Series  switches, 
including  a  new  processing 
engine  that  the  company  said 
will  nearly  triple  the  perfor¬ 
mance  of  its  existing  switches. 

Cisco  already  comrols 
about  70%  of  the  worldwide 
switch  market  with  the  Cata¬ 
lyst  line,  according  to  Joel 
Conover,  an  analyst  at  Current 
Analysis  Inc.  in  Sterling.  Va. 


The  new  offerings  stand  to  so¬ 
lidify  the  company's  market 
prominence,  he  said. 

The  upgrades  should  also 
help  spur  migrations  to  de¬ 
vices  that  support  up  to  Giga¬ 
bit  Ethernet  transmission 
rates  in  wiring  closets  and 
10  Gigabit  Ethernet  in  core 
networks,  Conover  said.  Cisco 
has  created  a  '^velJ  laid-out 
migration  path,”  be  said. 
“These  amunincements  give 
[users]  some  of  the  best  per¬ 
formance  in  the  industry." 


Conover  added  that  Cisco's 
pricing  could  also  boost  10  Gi¬ 
gabit  Fernet,  which  is  now 
confined  largely  to  research 
and  supercomputing  centers. 
For  example,  Cisco  announced 
a  four-port  10  Gigabit  Ethernet 
module  that  costs  $20,000,  the 
same  price  as  a  device  with 
four  Gigabit  Ethernet  ports. 

However,  the  Catalyst  line 
"Is  still  very  expensive.”  Con¬ 
over  said.  He  noted  that  a 
6500  chassis  configured  to 
support  10  Gigabit  Ethernet 


can  cost  as  much  as  $300,000. 

Cisco  said  its  new  Supervi¬ 
sor  Engine  720  module  is 
priced  at  $28,000  and  provides 
forwarding  functions  for  40 
ports  of  Gigabit  Ethernet  or 
four  ports  of  10  Gigabit  Ether¬ 
net  The  processing  engine 
can  move  data  at  speeds  up  to 
720Gbit/$ec.,  compared  with 
256Gbit/sec.  on  the  2-year-old 
model  that  it’s  replacing. 

Ocher  additions  to  the  6500 
line  include  a  16-port  Gigabit 
Ethernet  module  for  data  cen¬ 
ters  and  a  carrier-class  10  Gi¬ 
gabit  Ethernet  module  with 
two  ports,  Cisco  said.  I 
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War,  Economic  Woes 
Put  Drag  on  IT  Hires 


Report  says  fourth-quarter  hiring  was 
down  compared  with  earlier  quarters 


BY  THOMAS  HOPPMAN 

WEAK  BUSINESS 
conditions  and 
fears  about  the 
potential  im¬ 
pact  of  a  war  with  Iraq  led 
many  U3.  companies  to  hold 
back  on  hiring  IT  employees 
during  last  year's  fbuitb  quar¬ 
ter.  according  to  a  repon  re¬ 
leased  last  week. 

The  report  by  Dice  Inc.  and 
the  Information  Technology 
Association  of  America 
(ITAA),  which  conduct  quar¬ 
terly  surveys  of  more  than 
300  hiring  managers,  says 
companies  added  fewer  tech¬ 
nology  workers  from  October 
to  December  than  they  did  in 
each  of  the  previous  three 
quarters.  A  total  of  265.000  IT 
woikers  were  hired  in  the 
fourth  quarter,  while  168,000 
were  let  go  —  a  net  gain  of 
97.000  jobs. 

The  job  market  isn't  expect¬ 
ed  to  change  much  for  the  bet¬ 
ter  this  year,  according  to  the 
report.  Dice  and  the  Arlington. 
Va.-based  ITAA  predicted  that 
companies  will  hire  a  total 
of  about  874,000  IT  workers 
this  year. 

“January  was  very  strong  for 
recruiting,  [but]  hiring  has 
pulled  back  since  then,  largely 
driven  by  the  economy  and 
the  situation  in  Iraq.*  said  Scot 
Melland,  president  and  CEO 
of  Dice,  a  New  York-based 
provider  of  online  recruiting 
services  for  IT  professionals. 

No  Recovery  YM 

Some  IT  executives  said  the 
findings  jibe  with  their  cur¬ 
rent  workforce  strategies. 

“Our  hiring  plans  have  de¬ 
creased,*  said  Malcolm  Fields. 
CIO  at  HON  Industries  Inc. 
The  Muscatine,  lowa-based 
maker  of  office  furniture  and 
fireplaces  was  anticipating  an 
economic  recovery  “that 
hasn’t  come.*  Fiel^  said.  As  a 


result,  all  hiring  within  HON's 
IT  department  has  been  put 
on  hold,  with  the  exception  of 
a  few  replacement  workers. 

Diane  Moretlo.  an  analyst  at 
Stamford.  Conn.-based  Gart¬ 
ner  inc.  said  she  expects  IT 
hiring  in  the  U5.  this  year  to 
be  even  weaker  than  what 
Dice  and  the  ITAA  are  fore¬ 
casting.  'They  “subtly  assume 
that  demand  will  be  filled  by 
permanent  hires  in  the  U.S..* 
Morello  said,  characterizing 
that  as  a  frlse  assumption 

The  increasing  shift  of  IT 


work  offshore  “shows  bow 
companies  are  filling  demand 
—  at  considerably  lower  {com¬ 
pensation]  rates"  than  they 
would  have  to  pay  U.S.  work¬ 
ers,  Morello  said.  She  added 
that  many  IT  managers  are  in¬ 
creasing  their  reliance  on  con¬ 
tract  labor  and  supplemental 
staffers  as  part  of  t^ir  efforts 
to  control  variable  costs. 

Tom  Pohlmann.  an  analyst 
at  Forrester  Research  Inc.  in 
Cambridge,  Mass.,  said  he  ex¬ 
pects  IT  staffing  levels  to  re¬ 
main  Hat  overall  on  a  year-to- 
year  basis.  Even  if  the  clamps 
are  taken  off  technology 
bud^ts.  IT  departments  “will 
still  be  pressed  over  the  medi¬ 


um  term  to  deliver  more  with 
less,"  be  said. 

It's  also  far  from  certain  that 
companies  will  free  up  their 
spending  on  IT  this  year. 
Framingham,  Mas5.-based  IDC 
I  last  week  said  it  is  now  fore¬ 
casting  a  growth  rate  of 
for  worldwide  IT  spending  in 
2003.  down  from  an  earlier 
prediction  of  374b  growth. 

Losses  Drop 

Although  fewer  IT  workers 
were  hired  during  the  fourth 
quarter  than  in  previous  peri¬ 
ods.  there  were  also  fewer  job 
losses,  according  to  Dice  and 
the  ITAA.  By  comparison  to 
the  168,000  IT  workers  who 
were  let  go  in  the  fourth  quar¬ 
ter.  211.000  were  dismissed 
during  the  third  quarter,  and 
about  350,000  were  pared  dur- 
ii^  both  the  first  and  second 
quarters,  they  said. 

At  year's  end,  there  were 


about  107  million  IT  workers 
in  the  U.S..  Dice  and  the  ITAA 
said.  That's  a  3J4e  rise  from 
the  number  at  the  surt  of 
2002.1 


Dell,  Oracle  Team  on  Non-Unix  Clustering 


Duo  wants  users 
to  migrate  servers 


Deli  Computer  Corp.  CEO 
Michael  Dell  and  Oracle  Corp. 
CEO  Larry  EUison  sat  shoul¬ 
der  to  shoulder  last  week  to 
detail  a  growing  alliance  built 
around  selling  clustered  serv¬ 
er  systems  to  emerprises. 
Their  message:  Rl^/Utux 
systems  are  being  relegated  to 
niche  status. 

‘There  is  no  question  that 
standardization  is  increasingly 
taking  bold  in  an  increasingly 
large  portion  of  the  enterprise 
opportunity,*  said  DeU. 

Dell's  strategy  is  to  sell 
servers  primarily  using  two  to 
four  processors  that  can  be 
combined,  or  clustered,  to 
boost  processing  power.  A  key 
component  of  that  strategy  is 
Oracle9i's  ability  to  run  on 
such  clustered  systems. 

The  Dell/Ora^  partner¬ 
ship  is  aimed  at  easing  the  mi¬ 
gration  from  RlSCAJnix  sys¬ 
tems  to  Windows  and  Linu» 
Prices  will  depend  on  project 
requirements,  but  a  migration 


to  C>racle9i  that  takes  10  da)’S 
would  cost  about  $35,000. 

DeU  is  already  a  major  re- 
seUer  of  Oracle  databases  on 
its  servers,  but  the  two  compa¬ 
nies  hope  their  migration  ser¬ 
vices.  coupled  with  a  price 
that  begins  at  about  S18.000 
for  the  cluster,  will  draw  even 
more  customers. 

Broadening  Utar  Options 

Oracle,  which  depends  heavi¬ 
ly  on  revenue  from  Unix 
users,  said  the  strategy  is  in¬ 
tended  to  give  users  more 
choices.  "The  Linux  strategy 
docs  not  supercede  what 
we  arc  doing  with  Unix,"  a 
spokesperson  said. 

Charlie  Garry,  an  analyst  at 
Meta  Group  Inc  in  Stamford, 
Conn.,  said  the  risk  of  Oracle 
alienating  its  Unix  users  is  low 
because  Oracle  "already  owns 
that  market,  and  all  the  major 
Unix  vendors  are  jumping  on 
the  Linux  bandwagon  as  weU." 

WhUe  users  at  the  launch 
supported  the  approach.  DeU's 
goal  to  replace  RJSC/Unix 
vendors  in  the  enterprise 
could  raise  costs,  said  Steve 
Randich.  CIO  of  Nasdaq  Stock 
Market  Inc  in  Washington. 


Nasdaq  needs  the  very  top 
tier  of  reli^Uity.  but  commod¬ 
ity  vendors  aren't  going  to  try 
to  fiU  that  niche  because  they 
don't  have  the  economic  in¬ 
centive  to  do  so.  be  said. 

Randich  is  a  heavy  DeU 
user,  but  be  said  be  fears  that 
if  vendors  of  high-perfor¬ 
mance  systems  arc  pushed  out 
of  the  mainstream,  "they  are 
going  to  have  to  drive  up  the 
price  for  that  (highly  reliable 
system]  in  order  to  maintain  a 
reasoiuble  pront.”  If  chat  hap¬ 
pens.  be  said,  it  “wiU  compel 
firms  like  ours  to  use  standard 

M  The  more 
open  source, 
the  more  open- 
standards-based  it 
is,themoreflexliiK- 
ty  I  have,  the  more 
choices  I  have.  And 
that  to  me  is  a  huge 
benefit. 

AMOV  WLLeR.WRECTOAOF 
NETWORK  OPOUriCMS 
WYNDHAM  MTERNADONAL 


solutions  in  order  to  meet  the 
cost  and  economic  require¬ 
ment.  but  then  customize  our 
appUcaiions  to  dose  that  rcU- 
abiUty  gap." 

Andy  MiUer.  director  of  net¬ 
work  operations  at  Dallas- 
based  hotel  and  resort  opera¬ 
tor  Wyndham  International 
Inc,  is  running  a  vartecy  of  op¬ 
erating  systems,  including 
IBM’s  AIX  and  Sun  Microsys¬ 
tems  Inc.'s  Solaris. 

Solaris  is  a  prime  candidate 
for  replacement  with  a  combi¬ 
nation  of  OeU  hardware  and 
Linux  because  of  price.  Miller 
said.  A  proprietary  Unix  sys¬ 
tem  "locks  me  in  as  the  con¬ 
sumer  of  those  products  into 
very  spedfk.  regulated 
growth  models."  said  MiUer. 
“The  more  open  source,  the 
more  open-staitdaids-based  it 
is,  the  more  flexibUity  1  have, 
the  more  choices  I  h^.  Atkd 
that  to  me  is  a  huge  benefiL* 

Ed  Wojctechowski,  CIO  of 
Menasha  Corp,.  a  Necnah. 

Wis. -based  nudter  of  packag- 
ii^  and  ocher  products,  said 
be  welcomed  the  move. 

“Our  model  is  Linux,  DeU 
and  Oracle,'  Wofctechowsld 
said.  “So  anything  that  brmgs 
those  closer  together  we  think 
is  a  benefit  and  fits  our  busi¬ 
ness  model*  I 
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MARK  MAI  I  ■  ON  1111  MARK 

Sun,  Apple  Ignite  New 
Desktop  Skirmish . . . 

. . .  with  Microsoft  Corp.  While  it‘s  doubtful  that  either  company  will 
be  able  to  unseat  Windows’  monopoly  status  in  the  PC  market,  you've 
got  to  admire  their  pluck-  Sun  Microsystems  Inc.’s  attack  on  Micro- 
-soft’s  desktop  fortress  is  called  Project  Mad  Hatter  iQuickLink  36292] 
and  uses  Linux  combined  with  StarOfTicc  and  other  open-source 


goodies.  .Although  most  of  the  .iticniinn 
has  been  given  to  Sun’s  embrace  of  Linux 
and  open  source,  the  real  story  s  about 
hardware.  |ohn  Loaicamc  vice  president 
of  Sun's  operating  platforms  group,  .says, 
“The  advantage  of  Linux  is  its  low-cost 
hardware."  Translated:  Intel  Corp.  hard¬ 
ware  will  always  he  cheaper  than  Ultra- 
Sparc  systems.  After  all.  Sun  could  h.ive 
pushed  Linu.x  on  its  own  micropmccssor, 
since  there  are  numerous  versions  run¬ 
ning  on  it  (see  www.ulrraiinux.o/}').  hut 
Sun  t^tad  for  Intel  (A*32  chips.  Sun's  Intel 
hardware  story  gets  more 
interesting.  According  to 
Loaicano,  Sun  will  stop 
its  “Lucy-and-the-foot- 
hall  approach  with  So- 
laris  on  x86.'’  While  the 
effect  of  .Solaris  running 
on  Intel  hardware  may 
not  dent  the  Windows 
desktop  monopoly,  it  may 
slow  Linux's  incursion 
into  Sun’s  territory. 

Thomas  Cunningham, 

CEO  of  Battimorc*ba.scd 
Alabanza  Corp.,  says  he’d 
consider  returning  to  Si> 
laris  “if  the  hardware 
were  less  expensive.”  His 
company  uses  1.000  In- 


Systetns  rtiiinagemerit  qcti  a 
boost  today  with  lht.>  rifleast?  ul 
the  miiltiDljtlorrD  rO  Miinagc  - 
meni  Suite  i’ 0  Irom  :i  . 

'  •  '  inNtwton  M.isa  The 
upurade  adds  more  templates 
and  wirarus  to  its  Solution 
StiKl*n  policy  enQin!!.  idlitf'i 
command-and-conlfol  access 
yia  the  Wet.  includes  ile<t:- 
based  on  trendino  dat.i  as  well 
as  events  and  supparts  Of  a 
cle9i,  Windows  Sufver  ?003. 
Vftfitas  NiilBackup  and  many 
other  applications 


tel-b.ised  Linux  servers  in  its  Web  host¬ 
ing  center,  which  he  ran  for  three  years 
on  Sun  systems  until  the  costs  got  out  of 
hand.  Cunningham  prefsrs  Solaris  because 
the  performance  is  better.  So  he  might  be 
pleased  to  hear  Loaicano  say  that  Sun’s 
price  for  Solaris  or  Linux  on  IA-32  sys¬ 
tems  “will  be  the  same.”  «  Apple  Com¬ 
puter  Inc.  has  long  been  the  only  serious 
alternative  to  Microsoft's  approach  to  the 
desktop.  In  large  measure  that's  because 
Macintosh  has  been  the  only  other  plat¬ 
form  that  can  run  the  Microsoft  Ofilce 
Suite  natively.  It  has  also 
meant  that  Apple  has  been 
captive  to  Micrasoft's  com- 
mHment  to  the  Mac,  which 
seems  to  be  in  constant 
jeopardy  becau.se  Office 
for  the  Mac  contributes 
so  little  to  Redmond’s 
overflowing  coffers.  For 
years.  Macs  have  come 
bundled  with  Apple- 
Works.  a  usable  Office  al¬ 
ternative.  but  the  suite 
has  lacked  an  equivalent 
to  I*owcrPoint.  This  has 
left  Mac -loving  mar¬ 
keters  without  their  es¬ 
sential  tool,  so  many  have 
switched  to  Windows. 


With  the  arrival  of  a  S99  package  called 
Keynote.  Apple  has  a  solid  ahemative  for 
tho.'ic  Mac  lovers  who  want  to  create  pre¬ 
sentations.  Keynote  is  fast  and  easy  to 
use.  but  more  important,  it  reads  in  and 
exports  out  PowerPoint  files  flawlessly. 
lt's.s«g(K>d.  it  may  make  Microsoft  won¬ 
der  why  it  needs  to  continue  supporting 
the  Mac.  ■  Another  interesting  conflict  is 
brewing  among  the  companies  battling  to  take 
the  lead  in  Web  services  management.  Ed 
Horst,  vice  president  of  marketing  at 
AmberPoint  Inc.  in  Oakland.  Calif., 
cl.tims  that  enterprise  application  design¬ 
ers  using  Web  services  will  want  to  use 
products  like  AmberPoinfs  Management 
Foundation  to  control  content  with  busi¬ 
ness  logic  as  well  as  oversee  the  health  of 
the  Web  services  themselves.  That  strikes 
John  Hanger,  senior  vice  president  of 
sales  and  marketing  at  c«>mpeiitor  Fla¬ 
menco  Networks  Inc.  in  Alpharetta.  Gx. 
as  a  mistake.  Although  he  says  Flamenco 
WSM  Enterprise  Edition  can  also  man¬ 
age  content.  Web  services  management 
“is  the  wrong  place  to  put  business 
rules."  He  compares  products  like  his  and 
AmberPoint’s  with  Open  View  and  Tivoli, 
which  manage  networks,  not  the  data 
running  on  the  nctwork.s.  Horst  dismisses 
the  point.  Getting  business  managers  in¬ 
volved  in  Web  services  is  what  will  make 
them  a  success,  he  says.  Stay  tuned. 

•  Data  encryption  is  one  of  the  best  ways 
to  protect  your  information.  But  it  has  al¬ 
ways  caused  a  major  performance  penalty. 
The  folks  at  cipherOpiics  Inc.  in  Raleigh, 
N.C..  claim  that  their  Security  Gatew’ay 
appliance  licks  that  problem.  It  does 
triple-DES  encryption  and  coarse  packet 
filtering  and  handles  endpoint  authenti¬ 
cation  of  systems  while  humming  along 
with  two  IGbit/sec.  ports.  In  June,  (he  ap¬ 
pliance  will  sport  an  option  for  the  Ad¬ 
vanced  Encryption  Standard  and  a  global 
policy  configuration  manager,  adding 
ease  of  use  to  its  speediness.  I 


Cisco  Upgrades  Catalyst  6500  Switch  Line 


Dell  Stands  by  Q1 
Growth  Goals 

Despite  the  war  in  Iraq  and  con¬ 
tinuing  economic  uncertainty. 
DeM  Computer  Corp.  said  it  ex¬ 
pects  to  meet  targets  of  double- 
digit  growth  in  revenue,  unit 
shipments  and  eamhtgs  during 
Hs  first  quarter.  Dell  reaffirmed 
its  prediction  that  revenue  will 
incriase  18%  year  over  year  in 
the  first  quarter,  which  will  end 
April  30.  The  company  expects  a 
35%  jump  in  earnings  per  share. 


Peregrine  Amends 
Bankruptcy  Course 

Peregrine  Systems  Inc.,  an  asset 
management  software  vendor  in 
San  Diego,  filed  a  revised  reor¬ 
ganization  plan  with  the  U.S. 
Bankruptcy  Court  in  Delaware 
after  talks  with  its  creditors. 
Some  of  the  creditors  now  sup¬ 
port  the  plan.  Peregrine  said,  but 
the  official  committee  of  unse¬ 
cured  creditors  stM  opposes  H. 
and  the  judge  overseeing  the 
case  ordered  more  negotiatiorts. 


Sprint  Plans  IP 
Network  for  Feds 

Sprint  Corp.  announced  plans  to 
launch  a  private  IP  network  for 
use  as  an  intranet  by  security¬ 
conscious  U.S.  government 
agondas.  The  company  said  the 
government  network,  which  is 
due  to  be  ready  by  midyear,  will 
offer  most  of  the  same  fundion- 
alrty  as  its  SprintLink  corporate 
IP  backbone  but  won't  include 
gateways  to  the  public  brtemet. 


Short  Takes 

HEWLEn-PACKAftO  CO  cut  the 
prices  of  its  midrange  Unix 
servers  by  about  20%  and  said 
it  wil  ofier  users  free  in-factory 
configuration  services,  including 
the  setup  of  system  partitions. 
...SUSf  LINUX  AGinNurem- 
burg.  Oermany,  said  it  has  de¬ 
layed  its  shipment  of  an  enter¬ 
prise  desktop  version  of  Linux 
from  the  first  quarter  to  June. 


ev  MATT  HAMetCN 

Cisco  Systems  Inc.  last  week 
unveiled  six  modules  and  oth¬ 
er  Icchnohigy  upgrades  for  its 
Catalyst  6500  Scrie.s  switches, 
irrcluding  a  new'  processing 
engtrte  that  (be  company  said 
will  nearly  triple  the  perfor¬ 
mance  of  its  existing  switche.s. 

Cisco  already  controls 
about  70'S?  of  the  worldwide 
switch  market  with  the  Cata¬ 
lyst  line,  according  to  foel 
Conover,  an  analyst  at  Current 
Analysis  Inc.  in  Sterling.  Va. 


TTic  new  offerings  stand  to  so¬ 
lidify  the  company's  nvarket 
prominence,  he  said. 

The  upgrades  should 
help  spur  migrations  to  de¬ 
vices  that  support  up  to  Giga¬ 
bit  Ethernet  tran.smls.sion 
rates  in  wiring  closets  and 
10  Gigabit  Ethernet  in  core 
networks,  Conover  said.  Cisco 
has  created  a  “well  laid-out 
migration  path."  he  said. 
••These  announcements  give 
(users!  some  of  the  best  per¬ 
formance  in  the  industry.” 


Conover  added  chat  Cisco’s 
pricing  could  also  boost  10  Gi¬ 
gabit  Ethernet,  which  is  now 
confined  brgely  to  research 
and  supercomputing  centers. 
For  example.  Cisco  announced 
a  four-port  10  Gigabit  Ethernet 
module  chat  costs  S20.000,  the 
same  price  as  a  device  with 
four  Gigabit  Ethernet  ports. 

Howc*vcr.  the  Catalyst  line 
“is  still  very  expensive,"  Con¬ 
over  said.  He  noted  chat  a 
6500  chassis  configured  to 
suppon  10  Gigabit  Ethernet 


can  cost  as  much  as  $300,000. 

Cisco  .said  Us  new  Supervi¬ 
sor  Engine  720  module  is 
priced  at  $28,000  and  provides 
forwarding  functions  for  40 
ports  of  Gigabit  Ethernet  or 
four  ports  of  10  Gigabit  Ether¬ 
net.  The  processing  engine 
can  move  data  at  speeds  up  to 
720Gbit/sec..  compared  with 
256Gbit/sec.  on  the  2-year-old 
model  that  it's  replacing. 

Other  additions  to  the  6500 
line  include  a  16-port  Gigabit 
Ethernet  module  for  data  cen¬ 
ters  and  a  carrier-class  10  Gi¬ 
gabit  Ethernet  module  with 
two  ports.  Cisco  said.  I 
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War,  Economic  Woes 
Put  Drag  on  IT  Hires 

Report  sa\’s  fourth-quarter  hiring  \\  as 
dowTi  compared  with  earlier  quarters 


BV  THOMAS  HOFFMAN 

tAK  BL'SINFSS 
conditions  and 
fears  about  the 
potential  im¬ 
pact  of  a  war  with  Iraq  led 
many  U.S.  companies  to  hold 
back  on  hiring  IT  employees 
during  last  year's  fourth  quar¬ 
ter.  according  to  a  report  re¬ 
leased  last  week. 

The  report  by  Dice  Inc.  and 
the  Information  Technology 
Association  of  America 
(ITAA).  which  conduct  quar¬ 
terly  sur\'eys  of  more  than 
300  hiring  managers,  says 
companies  added  fewer  tech¬ 
nology  workers  from  October 
to  December  than  they  did  in 
each  of  the  previous  three 
quarters.  A  total  of  265.000  IT 
workers  were  hired  in  the 
fourth  quaner.  while  I6S.OOO 
were  let  go  —  a  net  gain  of 
97.000  jobs. 

The  job  market  isn’t  expect¬ 
ed  to  change  much  for  the  bet¬ 
ter  this  year,  according  to  the 
report.  Dice  and  the  Arlington. 
Va. -based  ITAA  predicted  that 
companies  will  hire  a  total 
of  about  874.000  IT  workers 
this  year. 

'ianuary  was  very  strong  for 
recruiting,  (but)  hiring  has 
pulled  back  since  then,  largely 
driven  by  the  economy  and 
the  situation  in  Iraq."  said  Scot 
Melland.  president  and  CEO 
of  Dice,  a  New  York-based 
provider  of  online  recruiting 
services  for  IT  professionals. 

No  Recovery  Yet 

Some  IT  executives  said  the 
findings  jibe  with  their  cur¬ 
rent  workforce  strategies. 

"Our  hiring  plans  have  de¬ 
creased."  said  Malcolm  Fields, 
CIO  at  HON  Industries  Inc. 
The  Muscatine,  lowa-based 
maker  of  office  furniture  and 
fireplaces  was  anticipating  an 
economic  recovery  "that 
hasn't  come."  Fields  said.  As  a 


result,  all  hiring  within  HON'.s 
IT  depanment  has  been  put 
on  hold,  with  the  e.xcepiion  of 
a  few  replacement  workers. 

Diane  Morelto.  an  analyst  at 
Stamford,  Conn. -based  Gart¬ 
ner  Inc.,  said  she  e.xpecis  IT 
hiring  in  the  U.S.  this  year  to 
be  even  weaker  than  what 
Dice  and  the  ITAA  are  fore¬ 
casting.  They  "subtly  assume 
that  demand  will  be  filled  by 
permanent  hires  in  the  U3.." 
Morello  said,  characterizing 
that  as  a  false  assumption. 

The  increasing  shift  of  IT 


1  >uo  wants  users 
to  migrate  seners 


BV  PATRICK  THtBOOCAU 

NEW  VORK 

Dell  Computer  Corp.  CEO 
Michael  Dell  and  Oracle  Corp. 
CEO  Larry  Ellison  sat  shoul¬ 
der  to  shoulder  last  week  to 
detail  a  grotA-ing  alliance  built 
around  selling  clustered  serv¬ 
er  systems  t6  enterprises. 
Their  message:  RISC/Uni.x 
syTtiems  arc  being  relegated  to 
niche  status. 

“There  is  no  question  that 
standardization  is  increasingly 
taking  hold  in  an  increasingly 
large  ponion  of  the  enterprise 
opportunity."  said  Dell. 

Dell's  strategy  is  to  sell 
servers  primarily  using  two  to 
four  processors  that  can  be 
combined,  or  clustered,  to 
boost  processing  power.  A  key 
component  of  that  strategy'  is 
Oracle9i’s  ability  to  run  on 
such  clustered  systems. 

The  Dell/Oraclc  partner¬ 
ship  is  aimed  at  easing  the  mi¬ 
gration  from  RISC/Uni.\  sys¬ 
tems  to  Windows  and  Linux. 
Prices  will  depend  on  project 
requirements,  but  a  migration 


work  offshore  ■*sht>ws  ho\v 
companies  are  filling  demand 
—  at  considerably  lower  Icom- 
pcnsationl  rates"  than  they 
^^  ould  have  to  pay  U.S.  work¬ 
ers.  Morello  said.  She  added 
that  many  IT  managers  are  in¬ 
creasing  their  reliancx*  on  con¬ 
tract  labor  and  supplemental 
staffers  as  pan  of  their  efforts 
to  control  variable  costs. 

Tom  Pohlmann.  an  analyst 
at  Forrester  Research  Inc.  in 
Cambridge.  Mass.,  said  he  e.\- 
pects  IT  staffing  lends  to  re¬ 
main  fl.it  overall  on  a  year-to- 
year  basis.  Even  if  the  damps 
are  taken  off  of  technology 
budgets.  IT  departments  “will 
still  be  pressed  over  the  medi- 


lo  OracIcOt  that  lakes  10  days 
would  cost  about  135,000. 

Deli  is  already  a  major  re¬ 
seller  of  Oracle  databases  on 
its  ser\-ers.  but  the  two  compa¬ 
nies  hope  their  migration  ser¬ 
vices.  coupled  with  a  price 
that  begins  at  about  S18.000 
for  the  cluster,  will  draw  even 
more  customers. 

Broadening  User  Options 

Oracle,  which  depends  heavi¬ 
ly  on  revenue  from  Unix 
users,  said  the  strategy'  is  in¬ 
tended  to  give  users  more 
choices.  'The  Linux  strategy 
docs  not  supercede  what 
we  are  doing  with  Uni.v."  a 
spokesperson  said. 

Charlie  Garry,  an  analyst  at 
Meta  Group  Inc.  in  .Stamford. 
Conn.,  said  the  risk  of  Oracle 
alienating  its  Unix  users  is  low 
because  Oracle  "already  owns 
that  market,  and  all  the  major 
Unix  vendors  are  jumping  on 
the  Linux  bandwagon  as  well.” 

While  users  at  the  launch 
supported  Che  approach.  Dell's 
goal  to  replace  RlSC.-Unix 
vendors  in  the  enterprise 
could  raise  costs,  said  Steve 
Randich,  CIO  of  Nasdaq  Stock 
Market  Inc.  in  Washington. 


urn  term  it*  deliver  more  with 
'  less,"  he  said. 

It's  also  far  fn>ni  cenatn  that 
companies  will  free  up  thetr 
spending  tin  IT  this  year. 
Framingham.  Mass.-based  IIK' 
Iasi  week  .said  it  is  nt»w  fore¬ 
casting  a  growth  rate  of 
for  worldwide  I  T  spending  in 
2(8)3.  dtmn  from  an  c.irlior 
prediction  of  3,?'v  grt»wth. 

Losses  Drop 

Although  fewer  IT  workers 
were  hired  during  the  fourth 
quarter  titan  in  previous  peri- 
t*ds.  there  were  alst*  fewer  job 
losses,  according  to  Dice  and 
the  ITAA-  By  comparistin  to 
the  168.0CK)  IT  workers  who 
wen*  let  go  in  the  fourth  quar¬ 
ter.  211.()(X)  were  dismissed 
.  during  the  third  quarter,  and 
about  350.000  were  pared  dur¬ 
ing  both  the  first  and  second 
j  quarters,  they  said. 

I  At  year's  end.  there  were 


Nasdaq  needs  the  very  top 
tier  of  reliability,  but  commod¬ 
ity’  vendors  aren’t  going  to  try 
to  fill  that  niche  because  they’ 
don’t  have  the  economic  in¬ 
centive  to  do  so.  ho  said. 

Randich  is  a  heav^  Dell 
user,  but  he  said  he  fears  that 
if  vendors  of  high-perfor¬ 
mance  systems  aix*  pushed  out 
of  the  mainstream,  "they  are 
going  to  have  to  drive  up  (he 
price  for  that  (highly  reliable 
system)  in  order  to  maintain  a 
reason.’ible  profit."  If  that  hap- 
pen.s.  he  said,  it  "will  compel 
firms  like  inirs  to  use  standard 

H  The  more 
open  source, 
the  more  open- 
standards-based  it  i 
is,  the  more  flexibili¬ 
ty  I  have,  the  more 
!  choices  I  have.  And 
that  to  me  is  a  huge 
benefit 

ANDY  MILLER  DIRECTOR  OF 
NETWORK  OPERATIONS 
WVNOHAM  INrERNATlONAl 


Dell,  Oracle  Team  on  Non-Unix  Clustering 


Key  raaBs  from  ttw 
OiH^AAqwrteriy 
rTwcridweeBiidy 

Hirino  by  non-(T  cofnpmhB 
oulpand  the  fwfflbef  of  jobs 
added  by  technology  vendors  by 
arabooi1(H»'1 


TechnicBl  support  worksn  rep¬ 
resented  99%  of  el  Rw  ff  hires 
(koig  the  fotylh  guvter. 

Database  devetepers  sawVte 
I  largest  employnientgrpNih  lor 

'  test  year  as  «  whole.  wMt  jobs  in- 

I  crea5ng9.2%. 


The  most  in-ttemand  IT  sWfc 
conbnue  to  bedava,  SQL  C.  C^. 
Onde  and  Windows  NT. 

about  10.2  millitin  ITworker» 
tn  the  Uii..  Dice  and  the  FIA.A 
said-  That’s  a  3  J'’p  nse  from 
I  the  number  .It  the  start  of 
'  2002  » 


,  solutk)n.s  in  order  tu  tTwet  the 
1  c**st  and  economic  require¬ 
ment.  but  then  customt/e  our 
I  applications  to  close  that  reli¬ 
ability  gap." 

Andy  Miller,  director  of  net¬ 
work  operations  at  Dallas- 
based  hotel  and  rcv*rT  opera¬ 
tor  Wyndham  Inicmaiional 
Inc.,  is  running  a  variety  of  op¬ 
erating  sy'sicms.  including 
I  IBM's  AIX  and  Sun  Microsys¬ 
tems  Inc.'s  Solaris. 

Solaris  is  a  pnmc  candidate 
for  replacement  with  a  combi¬ 
nation  of  Dell  hardware  and 
Linux  because  uf  price.  Miller 
said.  A  proprietary  Unix  sys¬ 
tem  "locks  me  in  as  the  con¬ 
sumer  of  those  products  into 
very  specific,  reflated 
growth  models."  said  Miller. 
“The  more  open  source,  the 
more  open-standards-based  it 
is.  the  more  ffexibility  I  have, 
the  more  choices  I  have.  And 
that  to  me  is  a  huge  benefit.” 

Ed  Wojciechowski.  CIO  of 
Menasha  Corp..  a  Neenah. 
Wis.-hased  maker  of  packag¬ 
ing  and  other  products,  said 
he  weicumcJ  the  move. 

"Our  mitdel  b  Linux.  Dell 
and  Oracle,"  Wojciechowski 
said.  '*$0  any  thing  that  bring.s 
those  closer  together  we  think 
is  a  beoefii  and  fits  our  busi¬ 
ness  model."  I 
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Judge  Disniisses 
6TFsY2kSuit 

A IXS.  CHtfrict  Court  iudga  In 
Nuw  JwMy  hn  dhfflisMd  a 
S381  fiMon  IhmuM  that  tha  for' 
mar  811  Cory.  IM  four  jnan 
ago  In  a  bid  Is  racai9  iti  yoar 
2000  ramadbUon  costs  from 
ffaa  inaurars.  Tha  judga  ndad  that 
tha  biauranea  pol^  dMnl  emr* 
ar  tha  cost  of  fUng  Aasvs  in  n 
systama.  Ntv  TWt'btaad  Vhrt* 
zon  CommimiBatfona.  which  now 
owns  STTt  ogsraliona.  said  A*s 
rsrtswing  ito  ogOons  in  tha  case. 


DeMne  Decides 
To  Keep  IT  Unit 

Nsw  Itarfc-baaad  DafoMa  Toucha 
Tbhmitau  said  K*t  drogping 
plana  to  agin  off  Ms  IT  comuKing 
unit  Tha  company  armounead  In 
Fdbruary  2002  that  M  would 
aaparato  Datama  Consulting 
from  Ms  bualnoss  to 

wold  potontiai  conllcts  of  bdar' 
ast  But  M  has  cMcaiad  thosa 
plans  bacauM  of  tha  tight  cradH 
mtfhat  and  shigglah  aconomy. 


Vtfeb  Services  Group 
To  Take  on  Security 

Tha  Mfsb  Sarvicas  IntoroparafaB- 
tty  Organlzatton  (Vm)  in  Pah) 
AMo,  CaK,  said  it  has  sal  up  a 
worting  group  to  davaiop  pro- 
poaod  aaeurtty  spacSealfons  for 
Wsb  sarvicas  appicattons.  It  wBI 

iaauBS  such  as  tha  sacurfty  of 
data  traaaperto  and  Sbnplo  Oh- 
jact  Accasi  Protocol  maraigar. 
Tha  WSH  said  a  davatopmant 
Hmalna  la  dua  wMMn  a  month. 


Short  Takes 

MfCItOSOPT  CORP.  latar  this  yaar 
ptons  to  ratoaso  vanlons  of  Ms 
6raat  Ptaina.  fiaviiioo  and 
Solomon  hnaln  aw  applications 
whh  uniflid  pricing  and  packag¬ 
ing  for  oempnniio  wtth  ito  to  100 
mployaoa. . . .  Poway.  CaW.- 
baaad  8ATEWAY  INC.  stod  K  wa 
raduca  tha  ravanus  H  raportod 
for2000Md200fbyacam- 
Mnad  lotto  of  UTOmBon. 


3Com  Software-based 
IP  Switch  Being  Tested 


Company  hopes  high-end  product  will 
help  its  re-entry  into  enterprise  market 


BV  MATT  HAMBLCN 

Ahigh-£nd.  software- 
based  IP  switch 
from  3Coin  Corp.  is 
being  tested  by  four 
large  companies  for  general 
release  in  August  as  part  of 
the  network  device  maker's  ef¬ 
forts  to  re-establish 
itself  in  the  enter¬ 
prise  marketplace. 

Last  week.  3Com 
CEO  Bruce  Cla/Un  said  the 
switch  will  scale  to  hundreds 
of  thousands  of  users,  com¬ 
pared  with  the  hundreds  sup¬ 
ported  by  the  company's  exist¬ 
ing  NBX  line.  The  sof^are 
switch,  or  “softswitch."  should 
help  Santa  Clara.  CaliL-based 
3Com  woo  back  enterprise 
customers  that  were  aban¬ 
doned  three  years  ago,  ClafUn 
said  (see  story  below).  3<3om 
declined  to  identify  the  com¬ 
panies  testing  the  switcK 


The  Softswitch  will  handle 
more  than  voice  traffic,  in¬ 
cluding  “applications  and  ser¬ 
vices  that  an  IP  infrastrucnire 
can  allow  you  to  deliver  that 
are  not  possible  or  practical  in 
a  traditional  telephone  envi¬ 
ronment,"  ClaAin  said. 

"If  you  try  to  sell 
VOIP  to  an  enter¬ 
prise  today  and 
justify  it  on  the 
value-add  features,  you  are 
unlikely  to  be  successftiL  be¬ 
cause  the  CEO  is  saying  ‘hard- 
dollar  payback,' "  he  added. 
“And  the  way  you  get  the  hard- 
dollar  payback  is  to  displace 
the  basic  telephone  services 
cost  inside  your  business." 

Claflin  said  the  softswitch 
supports  both  IP  and  public 
switched  telephone  network 
standards,  and  he  claimed  that 
it  offers  the  same  99.999%  lev¬ 
el  of  reliability  of  traditional 


private  branch  exchanges.  It 
will  also  provide  emergency 
911  support  for  locating  a  user 
based  on  his  desktop  phone 
instead  of  the  nearest  wiring 
closet.  ClaAin  said. 

He  said  that  3(Ik>m  itself  is 
one  of  the  beta  sites  for  the 
switch  and  that  the  company 
expects  to  reduce  its  annual 
voice  costs  by  70%.  partly 
by  eliminating  long-distance 
phone  charges.  In  addition, 
the  company  would  save  on 
the  expense  of  adding  and  re¬ 
moving  users  and  by  axing 
conference  call  costs,  which 
would  mean  a  13-month  pay¬ 
back.  ClaAin  claimed. 

The  development  of  a  high¬ 
ly  scalable  IP  softswitch  im¬ 
pressed  two  3Com  customers 
who  nonetheless  said  their 
operations  are  probably  too 
small  to  deploy  it 

“We'd  probably  benefit  from 
the  technology  enhancements 
they'd  make  in  developing  it" 
said  Debbi  Pryor.  CIO  at 
MountainBank  in  Henderson- 
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ville.  N.C.  MountainBank  has 
saved  S3,000  per  month  in 
long-distance  charges  and 
thousands  of  dollars  more  in 
IT  management  costs  vrith 
3Com's  NBX  technology  and 
LAN  switches,  Pryor  said. 

Jim  Maass.  director  of  tech¬ 
nology  for  the  Tahoe  Truckee 
Unified  School  District  in 
Truckee.  Calif.,  has  imialled 
3Com  voice-over-IP  gear  in 
12  buildings  that  house  4,500 
students,  but  be  said  his  oper¬ 
ation  is  still  too  small  for  the 
softswitch.  “I  am  a  real  3Com 
advocate."  he  said,  adding  that 
he  hopes  the  focus  on  larger 
customers  “doesn't  mean 
that  3<3om  forgets  about  us 
smaller  clients.” 

The  softswitch  is  based  on 
intellectual  property  devel¬ 
oped  within  3Com*s  Conun- 
Works  division,  which  is  being 
sold  to  UTStarcom  Inc.  in 
Alameda.  Calif.,  for  SlOO  mil¬ 
lion.  The  sale  lets  3Com  focus 
more  on  enterprises,  since 
ComroWorits  targeted  net¬ 
work  carriers,  ClaAin  ex¬ 
plained.  To  deal  with  what 
promises  to  be  an  “ugly"  econ¬ 
omy  for  two  to  three  more 
years,  he  added.  3Com  vriil 
need  to  capture  market  share 
from  other  b^  switch.  I 
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EMC  Joins  Brocade  in  Push  for 
Storage  Virtuaiization  Technology 


nwnBMu  tair.iw 


Vendors  sign  deal  to  put  EMC’s  storage 
management  software  on  SAN  switches 


BY  LUCAS  MEAIHAN 

EMC  Corp.  last  week  said  it 
plans  to  develop  storage  man¬ 
agement  software  for  a  new 
line  of  Brocade  Communica¬ 
tions  Systems  Inc.  switches 
that  support  networic-based 
storage  virtualization. 

EMC  is  the  second  maior 
storage  vendor  to  embrace  the 
SiikWbrm  Fabric  Application 
Platform  switch  technology, 
which  San  Jose-based  Brocade 
obtained  as  part  of  its  January 
acquisition  of  Rhapsody  Net¬ 
works  Inc  Brocade  and  Hew¬ 
lett-Packard  Co.  announced  a 
similar  agreement  in  January 
[QuickUnk3S826j. 

IT  managers  will  be  able  to 
use  the  switches,  which  Bro¬ 
cade  plans  to  sell  through 


storage  vendors  like  HP  and 
EMC,  to  manage  the  devices 
on  multivendor  storage-area 
networics  (SAN)  as  if  they 
were  a  single  entity,  a  process 
known  as  virtualization. 

Brocade,  the  largest  maker 
of  SAN  switches,  acknowl¬ 
edged  that  the  new  hardware 
won't  be  of  any  practical  use 
until  at  least  the  end  of  this 
year,  when  HP,  EMC  and  a 
group  of  seven  smaller  ven¬ 
dors  are  due  to  start  making 
their  storage  management 
applications  available  on 
the  devices. 

But  some  IT  managers  are 
already  saying  that  intelligeni 
switches  like  Brocade's  are  a 
step  in  the  right  directioa 

Mark  Deck,  director  of  in¬ 


frastructure  technology  at  Na¬ 
tional  Medical  Health  Card 
Systems  loc.,  a  medical  bene¬ 
fits  management  company  in 
Port  Washington.  N.Y„  plans 
to  use  HP’s  VersaStor  storage 
viitualizatioo  software  to  help 


manage  his  S.6TB  SAN. 

But  Deck  said  he  has  run 
into  an  I/O  bottleneck  be¬ 
tween  HP’s  CoDiinuowi  Ac¬ 
cess  Storage  Appliance  and  its 
higher-speed  Surestore  Kp2S6 
di^  array.  Once  HP  puts  Versa¬ 
Stor  on  Brocade's  switches. 
Deck  said,  he  should  be  able 
to  use  the  SAN’s  full  IGbit/sec. 
bandwidth  to  transfer  data  be¬ 
tween  the  different  storage  de¬ 
vices,  thereby  eliminating  the 
bottleneck. 

Bob  Siravo.  manager  of  en¬ 
terprise  stor^  at  drug  maker 
Wyeth  in  Madison,  N.J.,  is 
rolling  out  the  latest  version 
ofEMC's  (^mrolCenter  soft¬ 
ware  to  help  manage  a  SOTB 
SAN  that  includes  HP  and 
EMC  arrays.  Siravo  said  he 
thinks  the  SAN  is  where  stor¬ 
age  management  intelligence 
belongs,  because  it  would  let 
him  divvy  up  storage  capacity 
like  an  energy  utility  distrib¬ 
utes  electricity. 

But  the  foocadc/EMC  an¬ 
nouncement  won't  prechide 
Siravo  from  installing  Control- 
Center.  on  individual  disk  ar¬ 


Rnancial  Rrms  Seek  Revision 
Of  WORM  Archiving  l^le 


Industry  group 
asks  SEC  to  allow 
adoption  of  newer 
storage  technology 


BY  LUCAB  MEABIAM 

Brokerages  are  lining  up 
against  a  12-year-old  regula¬ 
tion  that  requires  them  to 
store  electronic  documents 
on  unchangeable  optical 
media,  saying  the  archival 
method  is  too  expensive  and 
cumbersome  to  manage  and 
doesn't  necessarily  safeguard 
information. 

Tbe  Securities  Industry 
Association  (SIA)  in  late 
February  sent  the  U.S.  Securi¬ 
ties  and  Exchange  Commis¬ 
sion  a  letter  asking  the  agency 
to  remove  the  technology- 
specific  language  from  its  rule 
on  the  retention  of  electronic 
records.  The  rule  currently 
dictates  that  brokerages  store 


electronic  records  on  WORM 
devices.  The  New  York-based 
SIA  last  week  said  it  wants  the 
SEC  to  instead  focus  on  the 
creation  of  policies  and  proce¬ 
dures  to  ensure  that  important 
data  won’t  be  modified. 

WORM,  which  stands  for 
‘Svrite-once,  read-many,”  is 
an  optical  storage  technology 
that  lets  users  write  data  to  a 
disk  or  tape  just  once  in  order 
to  create  a  permanent,  unal¬ 
terable  set  of  records. 

But  Scott  Kursnun.  associ¬ 
ate  general  counsel  at  the  SIA. 
said  the  use  of  WORM  devices 


doesn't  prevent  brokers  from 
changing  documents  before 
they  get  archived.  "If  you 
have  controls  and  procures 
around  things  tike  access  and 
the  archiving  environment, 
that  gets  you  to  a  place  that 
would  result  in  a  more  robust 
rule  than  what  we  have  today." 
Kursman  said.  He  added  that 
brokerages  would  much 
rather  use  technology  like 
EMC  (Zorp.’s  Ontera  fixed- 
data  disk  array  or  inexpensive. 
high<apacity  magnetic  tapes. 

Woridng  on  WORM  Time 

Financial  services  firms  are 
finding  that  it  can  be  an 
‘Oiours-long  procedure"  to 
retrieve  documents  from 
WORM  disks,  Kursman  said. 


nff  you  ham  mntrok  ami  procedures 
around  things  Gke  access  and  the 
archiving  environinerrt,  that  gets  you  to  a 
place  that  vwhiM  lesutt  in  a  nrare  robust 
rule  than  what  we  ham  today. 

SCOTT  WWSIIAN.  ASSOQATE  6CNERAL  COUNSa. 

SCCURniES  INDUSTRY  ASSOaATION 


Costs  to  Store  1TB 
Worth  of  Documents 
On  Different  Med»d 


In  comparison,  documents 
archived  on  newer  storage  de¬ 
vices  are  instantly  identifiable 
from  indexing,  he  said. 

An  SEC  spokesman  said  the 
agency  has  yet  to  respond  to 
tte  SlA’s  request  and  added 
that  there  is  no  timetable  in 
which  it  would  have  to  do  so. 

The  WORM  storage  re¬ 
quirement  dates  back  to  1991. 
when  brokerages  were  looking 
to  move  away  from  storing 
records  on  paper  and  micro¬ 
fiche.  Ironically,  the  SEC 
chose  WORM  technology  in 
response  to  a  petition  from 


rays  and  servers.  Wyeth  has 
"an  immediate  need  to  have 
as  much  of  a  common  tool  to 
manage  the  environment  as 
possible,"  he  said. 

)ohn  Webster,  an  analyst  at 
Data  Mobility  Group  (nc.  in 
Nashua.  N.H..  said  network- 
based  storage  virtualization 
technology  has  been  available 
for  a  couple  of  years,  mainly 
from  start-ups  such  as  Data- 
Core  Software  Corp.  in  Fort 
Lauderdale,  Fla.,  and  Fakon- 
Stor  Software  Inc.  in  Melville. 
N.Y.  But  Brocade's  entry  lends 
credibility  to  the  lechnoiogy, 
he  added. 

Officials  at  Hopkinton, 

Mass. -based  EMC  said  the 
company  initially  plans  to  sup¬ 
port  virtualization,  dynamic 
data  routing  and  data  classifi¬ 
cation  capabilities  on  the  Bro¬ 
cade  switches,  t 

AmMuniuE 

If*  upgreded  Ms  CofMnuous  Access 
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the  SIA  for  a  rule  that  would 
allow  electronic  forms  of 
data  storage. 

But  Patrick  C.  Cordon, 
an  analyst  at  Milford.  Mass.- 
based  Enterprise  Storage 
Group,  said  very  few  vendors 
sell  WORM  devices  now. 
which  has  left  many  broker¬ 
ages  to  nm  systems  that  are 
no  longer  supported. 

Because  of  the  ubiquitous 
use  of  e-mail  by  brok^  and 
new  federal  regulations  such 
as  the  Sarbanes-Oxley  Act. 
complyii^  with  e-mail  reten¬ 
tion  requirements  will  be  one 
of  the  most  important  IT-relat¬ 
ed  issues  for  financial  services 
firms  during  the  next  two 
years.  Gordon  said. 

In  recent  months,  the  SEC 
has  been  closely  scrutinizing 
the  archiving  of  cooununica- 
tions  between  broken  and 
their  customers,  particularly 
e-mail  transmissions. 

For  example,  the  agency  to 
December  fioed  five  broker¬ 
ages  a  total  of  $8  J5  million 
for  violating  hs  e-maii  record¬ 
keeping  requirements  [(^uick- 
Link  349121.1 
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EMC  Joins  Brocade  in  Push  for 
Storage  Virtualization  Technology 

Vendors  sign  deal  to  put  EMCs  storage 
management  software  on  SAN  switches 


BY  LUCAS  MEARUN 

EMC  Corp.  last  week  said  it 
plans  to  develop  storage  man¬ 
agement  sofh^’are  for  a  new 
line  of  Brocade  Communica¬ 
tions  Systems  Inc.  switches 
that  support  network-based 
storage  virtualization. 

EMC  is  the  second  major 
storage  vendor  to  embrace  the 
Silkworm  Fabric  Application 
Platform  sw'itch  technology, 
which  San  |ose-based  Brocade 
obtained  as  part  of  its  January 
acquisition  of  Rhapsody  Nct- 
woiics  Inc.  Brocade  and  Hew¬ 
lett-Packard  Co.  announced  a 
similar  agreement  in  January 
(QuickLink  35826]. 

IT  managers  will  be  able  to 
use  the  switches,  which  Bro¬ 
cade  plans  to  sell  through 


storage  vendors  like  HP  and 
EMC.  to  manage  the  devices 
on  mulfivendor  storage-area 
networks  (SAN)  as  if  they 
were  a  single  entity,  a  process 
known  as  virtualization. 

Brocade,  the  largest  maker 
of  SAN  switches,  acknowl¬ 
edged  that  the  new  hardware 
won't  be  of  any  practical  use 
until  at  least  the  end  of  this 
year,  when  HP.  EMC  and  a 
group  of  seven  smaller  ven¬ 
dors  are  due  to  start  making 
their  storage  management 
applications  available  on 
the  devices. 

But  some  IT  managers  are 
already  saying  that  imeiligent 
switches  like  Brocade's  are  a 
step  in  the  right  direction. 

Mark  Deck,  director  of  in- 
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fra.structure  icchnologcy  at  Na¬ 
tional  Medical  Health  Card 
Systems  Inc.,  a  medical  bene¬ 
fits  management  company  in 
Port  Washington.  N.Y..  plans 
to  use  HP's  VersaStor  storage 
virtualization  software  to  help 


manage  his  5,o  TB  SAN. 

But  Deck  said  he  has  run 
into  an  J  O  bonlcncvk  be¬ 
tween  np*sCominu»*us  .Ac¬ 
cess  Storage  .Appliance  and  its 
higher-speed  Surestt're  \p25o 
disk  array.  Once  1  IP  puts  Versa- 
Sior  on  Brocade's  switches. 
Deck  said,  he  should  be  able 
to  use  the  S.AN’s  full  ICbit  sec. 
bandwidth  to  transfer  d.iia  be¬ 
tween  the  different  stt>rage  de¬ 
vices.  thereby  eliminating  the 
btmlcneck. 

Bob  Siravo.  manager  of  en¬ 
terprise  storage  at  drug  maker 
Wyeth  in  Madison.  N.J..  is 
rolling  out  the  latest  version 
of  EMCs  ControlCenter  s«»ft- 
ware  to  help  manage  a  50TB 
SAN  that  includes  HI*  and 
EMC  arrays.  Siravo  said  he 
think.s  the  SAN  is  where  stor¬ 
age  management  intelligence 
belongs,  because  it  would  let 
him  divv>’  up  storage  cap3cit> 
like  an  enci^-  utility  distrib¬ 
utes  electricit>'- 

But  the  Brocade-' b^C  an- 
noune'ement  won't  preclude 
Siravo  from  installing  Control- 
Center.  on  individual  disk  ar¬ 


rays  and  senersWxeth  has 
"an  immediate  ntvd  it*  h.ivc 
as  much  of  a  comitum  iiH*l  to 
manage  the  environment  as 
pv*ssible,"  he  said 
I  |»*hn  Webster,  an  analyst  ai 
I  !)ata  Mobility  (ifoup  Inc  in 
Nashua.  .N.I  L  said  network- 
I  Kised  storage  vinuali/aiion 
lechnologv  has  been  available 
f»*r  a  couple  of  years,  matniv 
I  from  st.in-ups  such  as  Data- 
I  Core  St)ftw.»re  i\irp.  m  Fort 
I  I.auderdak*.  Fla.,  and  Falcon- 
'  Stor  Siifiware  Inc.  in  Melville, 
j  N.Y.  But  Brocade's  cm  rv- lends 
'  credibility  to  the  lechmdogv. 

I  he  added. 

^  DfTiciaU  at  Hopkinton. 

Ma.ss.-based  FAR'  said  the 
j  company  initially  plans  to  sup- 
I  port  virtualization,  dynamic 
data  routing  and  data  classifi- 
!  cation  capabilities  on  the  Bro¬ 
cade  sw'itches.  I 
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Rnancial  Rrms  Seek  Revision 
Of  WORM  Archiving  Rule 


Industn'  group 
asks  SEC  to  allow 
adoption  of  newer 
storage  technolog\’ 

BY  LUCAS  MEARIAN 

Brokerages  are  lining  up 
against  a  12-year-oid  regula¬ 
tion  that  requires  them  to 
store  electronic  documents 
on  unchangeable  optical 
media,  saying  the  archival 
method  is  too  expensive  and 
cumbersome  to  manage  and 
doesn't  necessarily  safeguard 
information. 

The  Securities  Industry 
Association  (SIA)  in  late 
February  sent  the  US.  Securi¬ 
ties  and  Exchange  Commis¬ 
sion  a  letter  asking  the  agency 
to  remove  the  technology- 
specific  language  from  its  rule 
on  the  retention  of  electronic 
records.  The  rule  currently 
dictates  that  brokerages  store 


electronic  records  on  WORM 
devices.  The  New  York-based 
SIA  last  week  said  it  wants  the 
SEC  to  instead  focus  on  the 
creation  of  policies  and  proce¬ 
dures  to  ensure  that  important 
data  vvon't  be  modified. 

WORM,  which  stands  for 
“write-once,  read-many.*  is 
an  optical  storage  technology 
(hat  lets  users  write  data  to  a 
disk  or  tape  just  once  in  order 
to  create  a  permanent,  unal¬ 
terable  set  of  records. 

But  Scott  Kursman.  associ¬ 
ate  general  counsel  at  the  SIA. 
said  the  use  of  WORM  devices 


doesn't  prevent  brokers  from 
changing  documents  before 
they  get  archived.  “If  you 
have  controls  and  procedures 
around  thii^  like  access  and 
the  archiving  environment, 
that  gets  you  to  a  place  that 
would  result  in  a  more  robust 
rule  than  what  we  have  today,** 
Kursman  said.  He  added  that 
brokerages  would  much 
rather  use  technolv^  like 
EMC  Corp.’s  Ceniera  fixed- 
data  disk  array  or  inexpensive, 
high-capacity  magnetic  tapes. 

Woriung  on  WORM  lime 

Financial  services  firms  are 
finding  that  it  can  be  an 
“hours-long  procedure"  to 
retrieve  documents  from 
WORM  disks.  Kursman  said. 


Costs  to  Store  1TB 
Worth  of  Documents 
On  Different  Media 
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In  comparison,  docuroenis 
archived  on  neviver  storage  de¬ 
vices  are  instantly  identifiable 
from  indexing,  he  said. 

I  An  SEC  spokesman  said  the 
I  agency  has  yet  to  respond  to 
{  the  SlA's  request  and  added 
I  (hat  there  is  no  timetable  in 
w'hiclvit  would  have  to  do  so. 

The  WORM  storage  re¬ 
quirement  dates  back  to  1991, 
when  brokerages  were  looking 
to  move  away  from  storing 
records  on  paper  and  micro- 
I  fiche.  Ironically,  the  SEC 
chose  WORM  technology  in 
!  msponse  to  a  petition  from 


the  SIA  for  a  rule  that  would 
allow  electronic  fornis  of 
data  storage. 

Hut  Patrick  C.  Gord«.*n. 
an  analyst  at  Milford.  Mass.- 
based  Enterprise  Storage 
Group  said  very  few  vendors 
sell  WORM  devices  now. 
which  has  left  many  broker¬ 
ages  to  run  s>-stems  that  are 
no  longer  supported. 

Because  of  the  ubiquitous 
use  of  e-mail  by  bmkers.  and 
new  federal  regulations  such 
as  the  Sarbancs-Oxley  Act. 
complying  with  e-mail  reten¬ 
tion  requirements  will  be  one 
of  the  most  important  IT-relat- 
cd  issues  for  financial  siTvices 
firms  during  the  next  tvs-o 
>\'ars.  Gordon  said. 

In  recent  months,  the  SEC 
has  been  closely  scrutinizing 
the  archiving  of  communica¬ 
tions  between  brokers  and 
their  customers,  particukirly 
e-mail  transmissions. 

For  example,  the  agency  in 
December  fined  five  broker¬ 
ages  a  total  of  S8.25  millivvn 
for  violating  its  e-mail  rveord- 
kcc'ping  requirements  (Quick- 
Link  349121.1 


H  If  you  have  controls  and  procedures 
around  things  like  access  and  the 
archiving  environment,  that  gets  you  to  a 
place  that  would  result  in  a  more  robust 
rule  than  what  we  have  today. 

SCOTT  KURSMAN,  ASSOCIATE  GENERAL  COUNSEL 
SECURITIES  INDUSTRY  ASSOCIATION 
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Handle  Corporate  Security 
As  Single  Entity,  Users  Say 


Tying  IT  security  with 
other  aspects  oi 
corporate  security  can 


Stress  that  FF  seeuriU  can’t  be  di\'oreed 
fn)ni  phxsieal.  peTsonnel  seciiriU  plans 


Co.sti'AMFS  can  im¬ 
prove  their  ability  to 
detect  and  respond 
to  both  cyber  and 
physical  threats  by  tyint:*their 
IT  somrity  to  other  aspects  of 
corporate  securit>’. 

Bui  the  euliural  and  busi¬ 
ness-process  changes  involved 
in  implementing  such  a  holis- 
tic  view  of  security  can  be 
daunting  for  must  corpora¬ 
tions.  users  said  here  last 
week  at  a  conference  orga* 
nued  by  ASIS  International, 
an  Alexandria.  Va.-based 
organization  of  security 
professionals. 

“The  benefits  of  integrating  | 
corporate  security  with  IT  se¬ 
curity  can  be  tremendous." 
said  Lew  Wagner,  chief  Infor¬ 
mation  security  officer  at  the 
MI)  Anderson  Cancer  Center 
at  the  University  of  Texas  in 
Houston. 

Coordinating  IT  securiry 
functioRS  with  areas  such  as 
phy’sical  protection,  facilities 
management,  human  re¬ 
sources  and  legal  and  audit 
functions  has  helped  enhance 
overall  threat-detection  and 
incident-response  capabilities 
at  the  hospital.  Wagner  said. 

“It  streamlines  corporate  in¬ 
vestigations.  Whenever  some¬ 
body  runs  afoul  of  the  policies 
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of  the  institution,  you  don’t 
have  a  bunch  of  people  doing 
I  siovepipe  things."  he  said. 

'  A  holistic  view  of  enterprise 
security  can  help  plug  gaps 
that  might  otherwise  be 
missed,  said  lames  Litehko. 
president  of  Litehko  &  Associ¬ 
ates  Inc.,  a  security  consultan¬ 
cy  in  Kensington.  MJ. 

Outside  Factofs 

For  instance,  the  majority  of 
IT-related  security  threats  still 
stem  from  procedural  and 
process  flaws  —  such  as  fail¬ 
ure  to  secure  access  to  crucial 
systems,  inadequate  backups 
and  lack  of  auditing  —  rather 
than  from  technology  glitches. 
Litehko  said.  Consequently, 
it's  important  to  factor  in 
physical  and  personnel  securi- 
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vendor  would  take  over  and 
support  its  products. 

Gene  Hunt,  chairman  of  the 
Atlanta-based  i2  User  Group, 
said  in  a  statement  (hat  the 
SEC  investigation  and  the  oth¬ 
er  developments  will  likely 
■'spark  a  ripple  of  concern" 
among  the  company’s  users. 
Nevertheless.  Hunt,  a  member  ' 
of  the  technical  staff  at  Texas  I 
tnstrument.s  Inc.  in  Plano. 

Texas,  said  the  user  group  still 
supports  i2’s  executives. 

Hunt  said  the  management 
team  has  been  w*orking  to  re¬ 
focus  12  on  improving  cus¬ 
tomer  satisfaction.  The  SEC 
investigation  shouldn’t  affect 
the  quality  of  the  company's 
products  or  ongoing  installa¬ 
tions  of  its  software,  he  said. 

On  the  other  hand,  foshua 
Greenbaum.  an  analyst  at  En¬ 
terprise  Applications  Consult¬ 
ing  in  Daly  City.  Calif.,  said  i2 


I  ty  when  implementing  IT 
.security,  he  added, 

"To  some  degree,  this  is 
happening  naturally  as  IT  be¬ 
comes  intertwined  in  almost 
all  aspects  of  corporate  life.” 
said  David  Rymal.  director  of 
technolog)-  at  Everett.  Wash.- 
based  Prrwidcnce  Health 
System. 

“Even  physical  security  is 
tied  to  IT.  as  all  of  our  elec¬ 
tronic  access  controls  feed 
databa.ses."  Rymal  said. 

In  the  case  of  the  health 
care  industiy.  regulations  such 
as  the  Health  Insurance  Porta¬ 
bility  and  Accountability  Act 
are  driving  such  collaboration 
further  in  order  to  protect 
patients’  privacy.  Rymal  said. 

As  more  computing  devices 
become  mobile,  "we  must 
guard  against  not  only  theft  of 
the  devices  but  (also)  protec¬ 
tion  of  the  data  on  those  de¬ 
vices.”  he  said. 


is  in  a  “tailspin”  that  will  be 
tough  to  pull  out  of.  ’’The 
financial  difficulties  are  bad 
enough,  but  customer  flight  is 
the  real  problem.”  he  said.  "It's 
hard  to  justify  spending  more 
on  i2  technology  when  the 
company  is  looking  so  shaky." 

12.  which  has  reported  five 
straight  quarterly  losses,  said 
it  will  continue  to  cooperate 
fully  with  the  SEC  The  formal 
investigation  follows  an  infor¬ 
mal  inquiry  into  the  compa¬ 
ny’s  revenue  recognition  and 
financial  reporting  practices 
that  the  SEC’s  staff  began  in 
January  (QuickLink  36004!. 

At  that  time.  i2  CEO  Sanjiv 
Sidhu  said  he  had  ’’basic  com¬ 
fort"  about  the  accuracy  of  the 
S12.4  million  loss  the  company 
reported  on  a  preliminary  ba¬ 
sis  for  the  fourth  quarter.  But 
Sidhu  acknowledged  that  a 
planned  reauditing  of  it.s 
books  by  Dcloitte  &  Touche 
LLP  could  lead  to  adjustments 
of  i2’s  financial  results. 

Last  week.  i2  said  the  re¬ 


integration  of  security  func¬ 
tions  can  also  lead  to  better 
operational  efficiency,  said 
Steve  Hunt,  an  analyst  at 
Forrester  Research  Inc.  in 
Cambridge.  Mass. 

“The  greatest  sin  of  all  for  a 
CEO  is  to  have  different  busi¬ 
ness  units  with  the  same  mis¬ 
sion  so  everyone  is  feeling 
some  pressure  to  justify  what 
they  arc  doing."  Hunt  said. 

Even  siv.  few  corporations 
are  embarking  on  such  a  ven¬ 
ture,  he  said.  That’s  becau.se 
implementing  an  enterprise- 
wide  security  and  risk  man¬ 
agement  program  can  be  a 
cultural  and  business-process 
challenge,  given  the  silo.s  that 
security-related  functions  are 
relegated  to  within  many  cor¬ 
porations.  users  said. 

For  instance,  IT  functions 
may  report  to  a  CIO.  w'hile 
facilities  management  is  han¬ 
dled  by  finance  and  risk  man- 


audit  had  been  expanded  to 
include  1999.  and  it  disavowed 
all  the  numbers  it  had  previ¬ 
ously  reported  for  that  year 
through  the  end  of 2002.  The 
company  added  that  it  hopes 
to  complete  the  reaudii  by 
early  June,  but  it  said  it  won't 
be  able  to  file  its  Form  10-K  fi- 
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agement  and  business  conli- 
nuit>'  are  handled  by  yet 
another  group. 

Connecting  these  silos  can 
lead  to  "better  identification 
and  mitigation"  of  risks,  said 
Robert  Gerden.  director  of 
corporate  and  .systems  securi¬ 
ty  at  Brampton.  Ontario-ba.sed 
Nortel  Networks  Ltd.  during  a 
presentation  at  the  confer¬ 
ence. 

But  it  can  be  “very  hard  to 
quantify  the  ROI"  on  the  bene¬ 
fits  gained  from  such  integra¬ 
tion.  Gerden  said.  I 

MORE  ON  SECURITY 
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nancial  statement  for  last  year 
in  time  to  satisfy  the  rules  of 
either  the  SEC  or  Nasdaq. 

The  stock  market,  which 
had  previously  withdrawn  a 
delisting  notice  to  i2.  halted 
trading  of  the  company's  stock 
until  i2  responds  fully  to  a  re¬ 
quest  for  more  information 
about  its  financial  status. 

Another  looming  issue  is 
t2’s  potential  breach  of  the 
covenant  with  bondholders.  If 
it  doesn't  finish  the  reaudit 
process  by  June,  the  company 
will  be  in  violation  of  provi¬ 
sions  that  require  it  to  provide 
timely  financial  information  to 
bond  trustees.  As  a  result,  i2 
could  be  forced  to  pay  S3S0 
million  to  the  bondholders. 

An  i2  spokeswoman  said  the 
various  issues  dogging  the 
software  vendor  won’t  affect 
its  intellectual  property  or 
cash  position.  Company  offi¬ 
cials  “are  totally  focused  on 
meeting  the  June  deadline”  for 
finishing  the  new  audits,  the 
spokeswoman  said.  I 
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Handle  Corporate  Security 
As  Single  Entity  Users  Say 


Stress  that  IT  security  can’t  be  divorced 
from  physical,  personnel  security  plans 


COMPANIES  can  im¬ 
prove  their  ability  to 
detect  and  respond 
to  both  cyber  and 
physical  threats  by  tying  their 
tr  security  to  other  aspects  of 
corporate  security. 

But  the  cultural  and  busi¬ 
ness-process  changes  involved 
in  implementing  such  a  holis¬ 
tic  view  of  security  can  be 
daunting  for  most  corpora¬ 
tions,  users  said  here  last 
week  at  a  conference  orga¬ 
nized  by  ASIS  International, 
an  Alexandria.  Va.-based 
organization  of  security 
professionals. 

The  benefits  of  integrating 
corporate  security  with  IT  se¬ 
curity  can  be  tremendous.’' 
said  Lew  Wagner,  chief  infor¬ 
mation  security  oflfker  at  the 
MO  Anderson  Cancer  Center 
at  the  University  of  Texas  in 
Houstoa 

Coordinating  IT  security 
fonctioas  with  areas  such  as 
physical  protection,  lacilities 
management,  human  re¬ 
sources  and  legal  and  audit 
functions  has  helped  enhance 
overall  threat-detection  and 
incident-response  capabilities 
at  the  hospiuL  Wagner  said 
“It  streamlines  corporate  in¬ 
vestigations.  Whenever  some¬ 
body  runs  afoul  of  the  policies 


of  the  institution,  you  don’t 
have  a  bunch  of  people  doing 
stovepipe  things.**  he  said 
A  holistic  view  of  enterprise 
security  can  help  plug  gaps 
that  might  otherwise  be 
missed,  said  James  Utchko. 
president  of  Litchko  &  Associ¬ 
ates  Inc.,  a  security  consultan¬ 
cy  in  Kensington,  Md. 

Outside  Factofs 

For  instance,  the  majority  of 
IT-related  security  threats  still 
stem  from  procedural  and 
process  flaws  —  such  as  fail¬ 
ure  to  secure  access  to  crucial 
systems,  inadequate  backups 
and  lack  of  auditing  —  rather 
than  from  technology  glitches. 
Utchko  said.  Consequently, 
it’s  important  to  factor  in 
physical  and  personnel  securi¬ 


ty  when  implementing  IT 
security,  be  added. 

“To  some  degree,  this  is 
happening  naturally  as  IT  be¬ 
comes  intertwined  in  almost 
all  aspects  of  corporate  life.’* 
said  David  RymaJ,  director  of 
technology  at  Everett.  Wash.- 
based  Providence  Health 
System. 

“Even  physical  security  is 
tied  to  FT,  as  alt  of  our  elec¬ 
tronic  access  controb  feed 
databases,”  Rymal  said. 

In  the  case  of  the  health 
care  industry,  regulations  such 
as  the  Health  Insurance  Porta¬ 
bility  and  Accountability  Act 
are  driving  such  coUaboration 
further  in  order  to  protect 
patients'  privacy,  Rymal  said. 

As  more  computing  devices 
become  mobile,  “we  must 
guard  against  not  only  theft  of 
the  devices  but  [also]  protec¬ 
tion  of  the  data  on  those  de¬ 
vices,”  he  said. 


Integration  of  security  func¬ 
tions  can  also  lead  to  better 
operational  efnciency.  said 
Steve  Hunt,  an  analj’st  at 
Forrester  Research  Inc.  in 
Cambridge,  Mass. 

“The  greatest  sin  of  all  for  a 
CEO  is  to  have  different  busi¬ 
ness  units  with  the  same  mis¬ 
sion  so  everyone  is  feeling 
some  pressure  to  justify  what 
they  are  doing,”  Hunt  said. 

Even  so.  few  corporations 
are  embarking  on  such  a  ven¬ 
ture.  he  said.  That’s  because 
implementing  an  enterprise¬ 
wide  security  and  risk  man¬ 
agement  program  can  be  a 
cultural  and  business-process 
challenge,  given  the  silos  that 
security-related  functions  are 
relegated  to  within  many  cor¬ 
porations.  users  said. 

For  instance.  IT  functions 
may  report  to  a  CIO,  while 
facilities  management  b  han¬ 
dled  by  finance  and  risk  man- 


Tyinij  IT  seciinty  with 
other  aspects  of 
corporate  secunlv  can 


agement  and  business  conti¬ 
nuity  are  handled  by  yet 
another  group. 

Connecting  these  silos  can 
lead  to  “better  identification 
and  mitigation”  of  risks,  said 
Robert  Gerden,  director  of 
corporate  and  systems  securi¬ 
ty  at  Brampton.  Ontario-based 
Nortel  Networks  Ltd.  during  a 
presentation  at  the  confer¬ 
ence. 

But  it  can  be  “very  hard  to 
quantify  the  ROT  on  the  bene¬ 
fits  gained  from  such  integra¬ 
tion.  Gerden  said.  I 
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vendor  would  take  over  and 
support  its  products. 

Gene  Hunt,  chairman  of  the 
Atlanta-based  12  User  Group, 
said  in  a  statement  that  the 
SEC  investigation  and  the  oth¬ 
er  devefopments  will  likely 
“spark  a  ripple  of  concern” 
among  the  company’s  users. 
Nevertheless.  Hunt,  a  member 
of  the  technical  staff  at  Texas 
Instnimems  Inc.  in  Plano. 
Texas,  said  the  user  group  still 
supports  i2's  executives. 

Hunt  said  the  management 
team  has  been  U'orking  to  re¬ 
focus  12  on  improving  cus¬ 
tomer  satisfaction.  The  SEC 
investigation  shouldn’t  affect 
the  qu^ity  of  the  company’s 
products  or  ongoing  instaila- 
cions  of  its  software,  he  said. 

On  the  other  hand.  Joshua 
Greenbaum.  an  analyst  at  En¬ 
terprise  Applications  Consult¬ 
ing  in  Oaly  Chy,  Calif,  said  12 


is  in  a  “tailspin”  that  will  be 
toufdi  to  puU  out  of.  “The 
financial  difTiculties  are  bad 
enough,  but  customer  flight  is 
the  real  problem.”  be  said.  “It's 
hard  to  justify  spending  more 
on  12  technology  when  the 
company  is  looking  so  shaky.” 

12.  which  has  reported  five 
straight  quarterly  losses,  said 
it  will  continue  to  cooperate 
folly  with  the  SEC.  The  formal 
investigation  follows  an  infor¬ 
mal  inquiry  into  the  compa¬ 
ny’s  revenue  recognition  and 
financial  reportii^  practices 
that  the  SEC's  staff  began  in 
January  [QuickLink  36004]. 

At  that  time.  12  CEO  Sanjiv 
Sidhu  said  he  bad  “basic  com¬ 
fort”  about  the  accuracy  of  the 
$12.4  million  loss  the  company 
reported  on  a  preliminary  ba¬ 
sis  for  the  fourth  quarter.  But 
Sidhu  acknowledged  that  a 
planned  reauditing  of  its 
books  by  Deloitte  Sc  Ibucbe 
LLP  could  lead  to  adjustments 
of  i2’s  financial  results. 

Last  week.  i2  said  the  re¬ 


audit  had  been  expanded  to 
include  1999,  and  it  disavowed 
all  the  numbers  it  had  previ¬ 
ously  reported  for  that  year 
through  the  end  of  2002.  The 
company  added  that  it  hopes 
to  complete  the  reaudit  by 
early  Jime.  but  it  said  U  won't 
be  able  to  file  its  Form  10-K  fi¬ 


nancial  statement  for  last  year 
in  time  to  satisfy  the  rules  of 
either  the  SEC  or  Nasdaq. 

The  stock  market,  which 
had  previously  withdrawn  a 
delisting  notice  to  i2.  halted 
trading  of  the  company’s  stock 
until  i2  responds  folly  to  a  re¬ 
quest  for  more  information 
about  its  financial  ^atus. 

Another  looming  issue  is 
i2's  potential  breach  of  the 
covenant  with  bondholders.  If 
it  doesn’t  finish  the  reaudit 
process  by  June,  the  company 
will  be  in  violation  of  provi¬ 
sions  that  require  it  to  provide 
timely  fmancial  information  to 
bond  trustees.  As  a  result,  12 
could  be  forced  to  pay  S350 
million  to  the  bondholders. 

An  i2  spokeswoman  said  the 
various  issues  dogging  the 
software  vendor  won’t  affect 
Us  intellectual  property  or 
cash  posUion.  Company  offi¬ 
cials  “are  totally  focused  on 
meetii^  the  June  deadline”  for 
finishing  the  new  audits,  the 
spokeswoman  said.  I 


You  trust  the  rivets  to  hold  the 
44, 000- ton  steel  skeleton  together. 

You  trust  the  skeleton  to  support 
three  miles  of  braided  cable. 

You  trust  the  cable  to  keep  you 
suspended  in  mid-air. 


Shouldn’t  you  feel  the  same 
way  about  the  security  of 
your  network  infrastructure? 
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SAS  Tries  to  Broaden  Its  Software’s  Appeal 


BV  MARC  L.  SOMOINt 

SAS  Institute  Inc.  last  week  announced 
plans  for  an  upgrade  of  its  data  analy- 
sb  software  that  will  expand  a  10- 


month-old  effort  to  simplify  the  tech¬ 
nology  so  it  can  be  used  more  widely 
within  companies. 

The  promised  ease-of-use  improve- 


Shorten  backups. 

Keep  information  available  to  users  with  a  StorageTek  high 
performance  library  and  the  new  LTO  Ultrium  Generation  2 
drive.  With  a  capacity  of  200G8  and  a  blistering  30MB/second 
transfer  rate,  you  can  complete  backups  in  no  time.  And  it's  fully 
read/write  compatible  with  LTO  Ultrium  Generation  1  tape 
drives,  so  it  seamlessly  integrates  with  your  existing  StorageTek 
library.  This  kir>d  of  capacity,  speed  and  affordability  nnake  the 
LTO  Generation  2  drive  right  for  any  demanding  IT  environment. 
Like  yours.  For  more  information,  visit  www.storagetek.com. 


^  StorageTek’ 

Save  the  Day  ~ 


^  Can*<«M  3Q(U  Ctrptnhan.  00.  i 
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meats  got  a  thumbs  up  from  some  at¬ 
tendees  at  the  SAS  Users  Group  Inter¬ 
national  armual  conference  in  Seattle. 

But  users  will  have  to  be  patient 
SAS  ofiiciab  said  the  9J  upgrade  b  in 
the  hands  of  some  early  adopters  but 
won't  be  shipi>ed  until  a  phased  re¬ 
lease  staning  Aug.  31.  Full  availability 
is  expected  by  year’s  end. 

SAS  9.1  will  include  a  pair  of  user  in¬ 
terfaces  tailored  for  different  kinds  of 
end  users,  based  on  their  specific  jobs 
and  IT  skill  leveb.  The  addition  of  the 
Report  Studio  and  Web  Report  Studio 
interfaces  b  an  attempt  to  reach  out  to 
'‘decision-makers  who  have  experience 
and  strengths  in  what  they  do.  but  not 
in  confuting.”  said  Eleanor  Taylor, 
manager  of  business  intelligence  strat¬ 
egy  at  the  Cary,  N.C. -based  company. 

SAS  b  embeddii^  a  metadata  layer 
to  filter  out  irrelevant  data  for  end 
users.  Taylor  said.  SAS  is  also  building 
in  business  rules  to  help  users  conduct 
more  detailed  analyses  of  data,  and  it’s 
tightly  integrating  the  software  with 
Microsoft  Office  so  queries  can  be  run 
from  within  applications  such  as 
Word.  Excel  and  Outlook. 

In  addition.  Report  Studio  and  Web 
Report  Studio  will  offer  wizard  tech¬ 
nology  to  help  users  And  information 
without  having  to  write  SQL  queries. 
Tlie  same  technology  b  part  of  a  role- 


based  user  interface  that  SAS  shipped 
in  September  for  more  IT-sawy  users. 

Irvii^  Tyler.  CIO  at  Quaker  Chemi¬ 
cal  Corp.  in  Conshohocken.  Pa.,  said 
the  Web  Report  Studio  tool  will  let  hb 
company’s  business  analysts  and  man¬ 
agers  generate  their  own  reports,  free¬ 
ing  Quaker  Chemical’s  IT  staff  &om 
having  to  respond  to  many  of  the  ad 
hoc  reporting  requests  it  gets  now. 

“Our  goal  b  to  give  people  access 
and  let  them  put  information  in  any 
format  they  like."  Tyler  said.  He  added 
that  SAS  9.1  could  also  eliminate  the 
need  for  Quaker  Chemical’s  IT  depart¬ 
ment  to  develop  specialized  data  marts 
that  combine  information  from  differ¬ 
ent  systems.  “We  can  just  give  users 
raw  data  and  metadata,  and  they  can 
combine  that  themselves,”  he  said. 

The  user-friendly  enhancements 
could  open  up  SAS  applications  to  end 
users  who  want  to  run  online  analyti¬ 
cal  processing  queries  but  are  intimi¬ 
dated  by  the  software’s  complexity, 
said  Randy  CoUica,  a  senior  business 
analyst  at  Hewlett-Packard  Co.  HP 
uses  a  variety  of  SAS  tools  for  tasks 
such  as  studying  customer  data. 

The  upgrade  should  also  help  dbpel 
a  lingering  perception  among  some 
potential  customers  that  SAS’s  prod¬ 
ucts  “can  only  be  used  by  actuaries.” 
said  Mike  ScUff.  an  analyst  at  Current 
Analysb  Inc.  in  Sterling.  Va  I 


CEO  Says  SAS  Isnt  Proprietary 


nvri  fHHHBl  tas.  VKHt  da  yaR  tad 


A  few  days  balota  last  waak’s  conference 
started.  Jin  0aaM|ht  president  and 
CEO  of  SAS.  spoke  wlh  the  D6  News 
Serrioe.  Btoerplsfolow. 
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poeWanyaweoAnmaaapiiprf- 
e*aiy  iurtin.  wiirHawdaMi  irij 
aoeoMiMis.  This  is  predaeiy  ediai  com* 
pantesansuppoaedtosayaboulcam- 
peMors.  I  heard  tw  C8)  d  SusineGS  Ob' 
jects  do  tat.  sayino  SAS  is  up  here  just 
servicing  a  ooupfa  of  stafisUeiBns  in 
each  organIzaBon.  That’s  how  tay 
postton  us.  But  certainly  none  of 
tat  is  true.  SAS  attares  to  abnoat 
d  the  dKeranI  abndards  h  ta 
Mwid.  and  we  re  no  more  propri' 
eiaiy  tan  kbcnisofl  or  Or^ 

Vm  eltar  a  lin  etay  priea.  M 
yea  ehnga  a  ralMMy  Mill 


line  riwa  lata  par 

In  taialMa?me’v8  purposely  tod 
our  fees  very  waaonahia.  pm)  our  leans- 
ngniodeiisagiiaranleetfiaiwelbede- 
Ihretta  new  funeflone  year  after  year.  Ws 
have  not  tod  off  anybody  in  ta  test  two 
yaate.  We  were  Ida  to  use  the  fact  tal 
vre  have  cortauino  ravanue  to  adualy 
bring  In  addUonal  lalad  to  try  to  spaed 
ta  software  development  process  ret. 


Canapilealaa 
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tos  can  albact  al  ta  ouWde  tal¬ 
ent  we  wart.  I  promisa  you  tat 
If  wa  had  been  a  pubic  company 
dutno  ta  last  (wo  years,  we 

would  have  been  liylno  paopte 

off.  Irytno  to  maintain  ta  bottom 
ha.  VWh  a  prhate  company. 

Tm  Ida  to  taka  a  contnrian 
approach. 


What  day  is  it?  Sunday? 


I'm  only  9  hours  into  a  32  hour  backup. 


That's  just  too  long. 


There  are  plenty  of  ways  to  shorten  backup  windows.  And  StorageTek  is  Just  the  company  to  find  the  one  that's  right 
for  you.  Maybe  it's  BladeStore  as  part  of  disk-to^iisk  backup,  or  an  L-Series  automated  tape  library  with  the  industry's 
fastest  tape  drive  -  the  T99406.  Whatever  the  solution,  we  think  you  deserve  a  day  of  rest  Learn  more  about  this 
story  and  ottier  ways  we  can  help  you  at  www.savetheday.com  STORACETCIC  Save  the  Dayr 
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Sun  Bows  to  Users,  Drops  Its  Own  Linux 


BY  TODD  R.  WEISS 

Sun  Microsystems  Inc.  is  end¬ 
ing  a  seven-month  effort  to  es¬ 
tablish  its  own  Linux  distribu- 


I  tion,  because  of  reluctance  on  Sun  spokeswoman  Ann 
I  the  part  of  users  to  deal  with  O’Leary  said  marketing  of  the 
I  yet  another  version  of  the  Sun  Linux  5.0  software  that 
open-source  operating  system,  the  company  announced  last 


August  is  being  curtailed  in  fa¬ 
vor  of  developii^  partnerships 
with  other  Linux  vendors.  Sun 
had  positioned  its  release  as 
nothing  but  a  slightly  tweaked 
version  of  a  standard  Linux  2.4 
kernel.  But  O’Leary  acknowl- 


Remedy  is  die  leader  in  Service  Management  sohidons.  Our  numbers  speak  for  themselves. 

Yet,  there  are  other  numbers  important  to  Remedy.  Operating  cost  reductions,  improvements  in  customer 
sads&cdon,  increased  en^loyee  pioducdvityi  shorter  time  to  value — die  bottom-line  numbers  you  will  achieve 
by  uang  Remedy’s  out-of-box  best  pracdce  applications  to  automate  service  management  processes. 

Your  success  depends  on  those  numben.  Remedy  delivers  them. 


wwwjemedyxom/strength 

Of  call  us  at  1.888,294.5757 
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edged  that  the  company  felt 
pressure  horn  users  that 
weren’t  interested  in  having  to 
install  and  manage  multiple 
versions  of  Linux. 

Mike  Prince,  CIO  at  Bur- 
lii^on  Coat  Factory  Ware¬ 
house  Corp.,  where  Linux  is  a 
big  part  of  the  IT  infrastruc¬ 
ture,  said  Sun’s  decision  is  a 
wise  one.  “There’s  little  Sun 
could  add  to  its  own  release  of 
Linux  that  can’t  be  done  by 
companies  that  are  focusing 
on  that.”  Prince  said.  “I  don’t 
think  a  custom  Linux  version 
was  a  value-add.  I  think  it  was 
a  distraction.” 

The  Burlington,  N.J.-based 
clothing  retailer  uses  Red  Hat 
Linux  on  many  of  its  systems 
and  has  a  small  amount  of  Sun 
hardware  in  place.  Prince  said 
be  would  be  receptive  to  the 
idea  of  running  the  Red  Hat 
software  on  Sun  servers. 

O’Leary  wouldn’t  identify 
the  Linux  vendors  that  Sun  is 
talking  with  about  possible 
parmership  deals.  No  deadline 
has  been  set  for  reaching  any 
^reements,  she  said. 

Upha  Battle 

I  Bill  Claybrook,  an  analyst  at 
Aberdeen  Group  Inc.  in 
'  Boston,  said  be  wasn’t  sur- 
I  prised  that  Sun  changed  its  di¬ 
rection  on  Linux  so  quickly. 

“I  thoi^t  they’d  eventually 
have  to  do  iC  he  said.  “It  was 
stupid  to  try  to  develop  or 
support  their  own  Sun  Linux." 
Competing  with  vendors 
such  as  Red  Hat  Inc.  and  the 
UnitedLinux  consortium 
would  have  been  a  tough  task, 
Claybrook  added. 

Sun’s  plan  made  some  sense 
I  at  first  because  selling  its  own 
'  version  of  Linux  would  let  the 
company  more  closely  inte¬ 
grate  its  Sun  Open  Network 
Environment  software  with 
the  operating  system,  said  A1 
Gillen,  an  analyst  at  IDC  in 
Framingham.  Mass. 

The  problem,  though,  was 
that  trying  to  get  other  ven¬ 
dors  to  port  their  applications 
to  a  new  version  of  Linux  was 
unlikely  to  be  successful  ac- 
cordii^  to  Gillen.  “That’s  an 
uphill  battle,"  he  said.  “If  Sun 
had  a  huge  market  share,  it 
wouldn’t  be  a  problem.  But 
they’re  starting  from  zera”  I 


;|  Everything 
jl  you  Know  i 
!  about 
enterprise 
integration, 
is  about 
to  change. 
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We  re  saving  a  boatload 


We're  hemorrhaging  cash. 


Ouch 
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Dell  I  Enterprise 

In  a  receirt  Dell  test,  running  Oracle*  9/ona  Dell  server  solution  had  anywhere  fromaSM  to  Sxpric^perfonnance  advantage  over  Sun! 

Whether  using  an  Inten  Xeon'’  processor-based  4P  PowerEdge"  6650  or  2P  PowerEdge  2650,  the  Dell  solution  was  faster  and  less  expensive  than 
a  Sun  Fire  V480  solution.  To  see  complete  test  results,  go  to  www-dell.com/migrationl3 

There's  little,  if  any,  debate  Migrating  from  UNIX  to  a  siandards-based  solution  lowers  TCO.  The  real  questions  are  ‘How  does  it  perform?:  ‘How 
much  will  it  lower  TCO?'  and  "TA/ho  do  we  turn  to?'  Well,  when  you  migrate  to  open  standards,  remember  this:  Dell  gives  you  both  mind-bending 
performance  and  unparalleled  expertise,  at  a  TCO  so  small  you'll  need  a  microscope  to  find  it.  And  the  entire  solution  is  backed  by  enterprise 
level,  24/7  service  and  support. 

The  migration  is  on.  Find  out  how  you  can  make  the  most  of  it  for  your  organization.  Call  1-877-442-OELL,  or  go  to  the  Dell  UNIX  Migration  online 
calculator  at  www.dell.com/migratlon13  to  see  how  a  Dell  solution  can  lower  your  migration  costs  and  help  simplify  the  transition. 


Get  more  out  of  your  enterprise  for  less.  Easy  as 


D^L 


Click  www.dell.com/migration13  Call  1-877-442-DELL 
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Web  Services  Are  Coming  Along,  Says  BEA  Exec 


SV  CAROt  SUWA 

Adm  Bosworth  says  he  spends  50%  of 
his  rime  Mrirh  corporoTe  users  in  his  roie 
as  chief  <ux:hitect  and  senior  vice  presi* 
dent  of  advanced  development  at  BEA 
Systems  Inc  in  Son  Jose.  Boswordt 
worked  Microsoft  Coq>.  for  U  years 
before  joining  BEA  when  it  acqtdred 
Crossgain  Corp.  in  July 2001.  He  spoke 
with  Computerworid  iast  week  obour 
trends  in  the  technoio^  industry,  such 
as  the  evolution  of  Web  services.  Ex¬ 
cerpts  follow. 

How  much  vMih  stM  iwads  to  tw  doM  in  the 
WM  of  Web  forvicos?  There  were  two 
things  that  were  missing  6x>m 
Web  services.  One  was  the 
model  for  reliable  (message} 
delivery.  We  [now]  get  around 
this  by  using  the  reliable  deliv¬ 
ery  mechanisms  through  the 
message  bus  technologies  that 
are  there,  and  BEA  provides 
those  as  an  alternative. 

But  if  you're  going  to  go 
B2B.  when  you  can’t  really  do 
that,  you  really  need  to  have  a 
standard  in  the  Web  services 
sack.  Very  recently,  a  standard 
came  out  We  signed,  along 
with  IBM  and  Microsoft,  a  proposal  for 
Web  services  reliable  messaging. 

The  other  one  you  need  is  asyn¬ 
chrony.  You  need  to  be  able  to  send  a 
message  to  someone  and,  when  they 
respond,  be  able  to  realize  that  this  is  a 
response  to  a  message  you  sent  out  ear¬ 
lier.  We  do  that  today,  but  we  do  h  us¬ 
ing  SOAP  headers,  which  means  the 
programmers  on  the  other  side  have  to 
be  aware  of  it 

So  the  rucanthr  pidritahad  ttindards  for 
Tfftvrir  wtI  titynrhmnniii  minip 
ing  arc  two  of  Itw  most  Invortard  onos.  in 
your  citiinalion?  WS-Addressing  and 
W$-Reliable  Messaging  were  pretty 
profound,  because  these  have  the  po¬ 
tential  to  effectively  make  mg««aging  a 
standard  protocol.  And  once  you've 
done  that  all  the  messaging  layers  no 
longer  really  have  the  lock-in  they  cur¬ 
rently  have. 

I  think  those  are  seminal,  as  was 
WS-Security,  because  those  three  tak¬ 
en  together  give  roe  secure,  reliable 
messaging,  and  that’s  all  I  need.  That’s 
all  Web  services  should  da 

Umts  stW  oproac  eoncomc  about  the 
accvlty  of  VM  aorvtecc.  How  much  more 
worit  mods  to  be  done  on  that?  I  think 
people  tend  to  worry  more  about  secu¬ 


rity  than  they  should  now  that  WS- 
Security  is  out  there,  which  is  to  say 
there  is  no  perfect  solutiort  Anytime 
you  build  software,  there  are  always 
security  risks  to  be  managed  and  con¬ 
trolled.  And  the  biggest  risk  is  always 
people.  It's  not  software. 

What  win  be  BEA's  main  focw  going  for¬ 
ward?  Make  it  easy  to  fnanag»»  and 
change  systems.  That's  the  next  thing 
I  bear  about  ftom  every  customer.  To¬ 
tal  cost  of  ownership  is  not  just  about 
devdopment.  It’s  about  once  the  sys¬ 
tem  is  up  and  running,  how  do  I  man¬ 
age  it.  maintain  it,  control  it  in  the  foce 
of  change  and  in  the  face  of 
unpredictability?  And  that’s  a 
key.  key  thrust  for  the  next  big 
release  from  BEA. 

Seme  of  your  customart  have  ax* 
praaaad  coaemw  about  tho  non* 
ctandard  Jam  toGhnologioi  that 
BEA  hac  Mradacad  to  acMom  Ns 
fcala.  How  strong  ii  BEA’s  com- 
adtmifit  to  standardha  ttiosa 
tachnofogim?  Fundamentally, 
we  are  going  to  do  whatever  it 
takes  to  make  sure  that  these 
things  that  improve  productiv¬ 
ity  for  the  lava  community  become 
standards,  and  that  means  more  invest¬ 
ment  in  the  standards  process.  It  means 
more  investment  in  providing  other 
ways  to  use  these  components.  It  means 
just  more  explanation  to  people  about 
how  this  stuff  works.  It  means  more 
collaboration. 

Do  you  worry  did  «  competitor  such  as  IBM 
might  not  adopt  sonw  of  disoe  standards 
and  the  Jam  community  wW  bscomt  frac- 
tiaod?  If  IBM  viewed  them  as  propri¬ 
etary  lock-in,  that  would  be  a  problem, 
and  we  would  worry  about  it.  IBM  is 
in  somewhat  of  the  same  boat  we  are. 
)2EE,  in  general,  has  a  large  competitor 
these  days,  and  it's  .Net. 

If  you're  a  J2EE  vendor,  one  of 
your  key  focuses  is  making  sure  that 
you  have  the  same  developer  produc¬ 
tivity  story  [as],  or  better  than,  J4et. 
And  at  least  on  the  enterprise,  we 
think  we're  bet^.  In  order  to  deliver 
on  that,  though,  you  have  to  that 
a  pervasive  part  of  the  standard.  And  at 
tlut  level,  I  think  —  as  with  Web  ser¬ 
vices  ~  you'd  be  surprised  at  how 
much  agreement  there  is  between  oth¬ 
erwise  very  competitive  companies. 

Am  you  dways  wdehing  what  BM  is  do¬ 
ing?  I  keep  an  eye  on  them,  but  I  don't 


obsess.  I  think  more  products  have  failed 
by  far  because  people  were  looking 
over  their  shoulders  when  they  should 
have  been  looking  at  the  customer. 


I  try  and  make  sure  that  BEA  is, 

Na  1.  focused  on  the  customer  and. 
Na  2,  looks  at  the  competition.  Our 
customers  are  very  aware  of  what  our 
competition  does.  And  if  they're  doing 
anything  good,  [customers]  tend  to  tell 
us  anyway.  I 


Gel  on  the  fast  track  to  rmgiation 


Visit  www.dell.com/ffligrationIS  and  go  to  the  Deli  UHK  Migration  online 
calculator  for  a  free  migration  assessment.  A  DeQ  UNIX  rmgraton  solution  comes 
complett  with  end-to-end  Fast  Track  Migration  services  covering  apphcations  such 
as  Oracle.  C/Ci-f.  Sybase  to  SQL  Server.  Java  and  a  full  range  of  Web  applications 


Cali  1-877-442-OELL  today  to  speak  with  a  Dell  representative  Together,  you 
can  assess  your  individual  needs  and  then  develop  a  cost-effective  plan  tor 
UNIX  migration 


Easy  as 
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Call  1-877-442-DELL 
Click  www.dell.com/migration13 
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OPINION 
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Credibility  Insurance 


Life  would  be  infinitely  easier  for 
IT  if  there  were  no  such  thing  as  an  IT 
project.  And  in  fact,  there  isn’t.  Any  proj¬ 
ect  worth  doing  has  to  serve  a  business 
need,  which  in  effect  makes  it  a  business 
project.  So  where  are  the  suits  when  it’s  time  to  sit 
down  and  justify,  prioritize,  evangelize  and  verify 
the  value  of  these  projects? 

Sininj:  safely  off  in  the  ■  — 


distance,  that’s  where. 

For  the  most  part,  tech- 
milotty  initiatives  are  still 
seen  and  positioned  as 
only  rr  projects,  no  mat¬ 
ter  where  the  idea,  re¬ 
quest  or  money  orijti- 
nates.  This  hasn't  worked 
to  IT'S  advantage  and 
ha.s  instead  contributed  rmfmti 

mightily  to  the  credibili-  laro^.Yi 

tv  issues  dogging  IT  de- 
partments  today.  It's  a 
vicious  cycle,  and  one  that  CIOs 
have  got  to  get  a  handle  on. 

While  it  may  not  be  your  fault,  it 
is  your  problem.  As  Network  Ser- 


that  are  as  much  as  40'’ii 
higher  than  those  of 
their  c<»mpoiitors.  ac¬ 
cording  to  a  November 


projects  based  on  business  straieg>’. 
tracking  projects  under  way.  creat¬ 
ing  a  shared  vision  of  the  future 
'  technical  environment  and  safely  re- 
'  jeciing  projects  that  don’t  serve 
j  these  goals.  They  have  the  added 
I  value  of  forcing  a  public  commit- 
I  ment  and  support  from  the  sponsor- 
I  ing  business  unit.  And  as  these  joint 
^  efforts  succtvd.  they  build  trust  be- 
I  tween  IT  and  business  leaders. 

A  driving  force  behind  these  com¬ 
mittees  has  been  the  failures  of  ma- 
j*>r  initiatives  such  as  ERP.  CRM  and 
supply  chain  applications.  Buchanan 


//urvurJ  Bu,sine.s\s  Review  I  says  they  fail  because  no  one  really 
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article  by  feanne  W. 
R«is.sand  iVier  Weill, 
These  steering  com- 
miiiecs  are  ’’not  just 
project  management  on 
tf  vdHof  a(  steroids."  says  Buchan- 

acanlact  an.  "It's  determining 

which  project  we'll  actu¬ 
ally  do.  based  on  its 
strategic  business  value  and  what  is 
the  most  efficient  engineering  se¬ 
quence  in  w  hich  to  do  them.  ” 

The  committees  do  this  by  de¬ 


vices  Co.  CIO  Michael  H.  Hugos  ob-  i  veloping  a  global  view  and  an  over¬ 


serves.  "Wc  are  still  the  propeller- 
head  in  the  corner  of  the  room  with 
a  target  on  our  back.  When  things 
gv)  south,  w  ho  is  the  easiest  persim 
to  blame?"  But  he  also  warns  that 
“gening  into  a  piwvcr  struggle  with 
more  piiwerful  people  is  a  bad  wa\' 
to  pel  what  you  want"  [QuickI.ink 
37.^071.  I 

An  ingenious  way  to  put  the  busi-  i 
ness  side’s  feet  to  the  fire  is  to  es-  I 
tablish  a  joint  committee  composed 
of  senior  I  T  and  business  strategists 
charged  with  developing  an  inte¬ 
grated  strategy  designed  to  keep  all 
projects  on  the  straight  and  narrow 
lo  achieve  their  defined  bu.siness  i 

goals.  Abt>ut  15"ii  to  20".i  of  Global  ^ 
2.000  companit-s  already  have  such  ' 
commirtevs  in  place,  estimates  Meta 
Group  analyst  Richard  Buchanan. 

And  they  work.  i 

The  payoff  can  be  big.  (aunpanics  [ 
that  manage  their  IT  investments 
most  successfully  generate  returns  > 


all  sirateg)'  for  all  major  IT  projects, 
laying  out  the  expected  technical 
and  business  benefits,  enacting  IT 
portfolio  management,  prioritizing 


knows  what  they  were  trying  to 
achieve  from  a  business  standpoint. 
And  he  says  it's  usually  the  business 
people  who  arc  unwilling  to  take  the 
time  to  do  this  work. 

Making  tht^se  committees  suc- 
cc-ssful  is  laborious,  requiring  disci¬ 
pline  and  the  support  of  upper  man¬ 
agement.  But  as  Meta  analyst  and 
CIO  coach  Doug  Lynn  fold  me. 
"When  a  CIO  gws  out  the  door,  it’s 
not  that  he  didn't  do  the  job:  it’.s  that 
he  didn’t  communicate  well.  The 
business  didn’t  know  w'hat  was  go¬ 
ing  on  or  why."  Which  is  w'hy  these 
steering  committees  are  a  sure  bet 
to  keep  you  in  your  scat  and  the 
credibility  monkey  off  your  back.  I 
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asp  Redux: 
It’s  About 
I  Service 

WHATEVER  hap¬ 
pened  to  all  those 
application  service 
providers? 

When  they  first  appeared 
I  about  four  years  ago.  ASPs 
I  were  going  to  change  the  way  compa¬ 
nies  buy  .ind  use  software.  In  the 
process,  they  were  going  to  make  cor- 
poraic  data  centers  difficult  to  ju.stify. 
if  not  obsolete.  Back  then.  ASPs  made 
outlandish  claim.s  that  they  could  pro¬ 
vide  robust,  enterprise-level  software 
and  services  at  a  fraction  of  the  typical 
maintenance  and  life  cycle  costs. 

They  were  going  to  be  fabulous,  re¬ 
member? 

But  stock  market  reality  —  and  the 

sinking  of  marketing  _ 

budgets  —  have  1^^^^ 
muled  the  ASP  mes-  ^ 

sage,  forcing  ASI*s  to  _  * 

become  more  fo- 

cused  on  their  capa-  ^ 

bilities  and  less  de-  ^ 

fen.sive  about  the 

rate  IT  center.  nMlWiivhMltM 

Yet.  with  many  wrtitr  in  San  Franeisc 

onec-una.s.sailable  IT  Conlae*  htat  at 
budgets  under  siege. 
there’s  reason  to  re-, 
visit  the  cost-saving  benefits  of  em¬ 
ploying  an  ASP.  For  e.xampic.  if  you're 
spending  80%  of  your  IT  budget  main¬ 
taining  existing  systems,  you  can’t  in¬ 
vest  heavily  in  projects  that  could  gen¬ 
erate  new  business.  An  ASP  might  be 
able  to  free  up  some  of  those  mainte¬ 
nance  dollars. 

Good  candidates  for  shifting  to  an 
ASP  are  human  resources  and  payroll 
systems  or  a  sales  automation  pro¬ 
gram.  And  given  the  current  competi¬ 
tiveness  among  ASl*s.  your  deal 
should  include  software  management 
as  well  as  hardware  services.  Many 
ASPs  offer  packages  that  include  soft¬ 
ware  from  Oracle.  Siebel.  SAP  and  Arl- 
ba.  and  you  can  get  specific  service- 
level  agreements  that  call  for  financial 
penalties  and  technical  acamntability 
when  things  go  wrong. 

ASIN  have  also  dropped  their  anti- 
customization  positions.  They  discov- 
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Life  would  be  infinitely  easier  for 
IT  if  there  were  no  such  thing  as  an  IT 
project  And  in  fact,  there  isn’t.  Any  proj¬ 
ect  worth  doing  has  to  serve  a  business 
need,  which  in  effect  makes  it  a  business 
project  So  where  are  the  suits  when  it’s  time  to  sit 
down  and  justify,  prioritize,  evangelize  and  verify 
the  value  of  these  projects? 


Sitting  safely  off  in  the 
distance,  that's  where. 

For  the  most  part,  tech¬ 
nology  initiatives  are  still 
seen  and  positioned  as 
only  IT  projects,  no  mat¬ 
ter  where  the  idea,  re¬ 
quest  or  money  origi¬ 
nates.  This  hasn't  worked 
to  IT'S  advantage  and 
has  instead  contributed 
mightily  to  the  credibili¬ 
ty  issues  dt^ging  IT  de¬ 
partments  today.  It's  a 
vicious  cycle,  and  one  that  CIOs 
have  got  to  get  a  handle  on. 

While  it  may  not  be  your  fault,  it 
is  your  problem.  As  Network  Ser¬ 
vices  Co.  CIO  Michael  H.  Hugos  ob¬ 
serves,  "We  are  still  the  propeller- 
head  in  the  comer  of  the  room  with 
a  target  on  our  back.  When  things 
go  south,  who  is  the  easiest  person 
to  blame?"  But  he  also  warns  that 
"gening  into  a  power  struggle  with 
more  powerful  people  is  a  bad  way 
to  get  what  you  want"  [QuickLink 
J7307}. 

An  ingenious  way  to  put  the  busi¬ 
ness  ride's  feet  to  the  fue  is  to  es¬ 
tablish  a  joint  committee  composed 
of  senior  IT  and  business  strategists 
charged  with  developii^  an  inte¬ 
grated  strategy  designed  to  keep  all 
projects  on  the  straight  and  narrow 
to  achieve  their  defined  business 
goals.  About  15%  to  20%  of  Global 
2,000  companies  already  have  such 
committees  in  place,  estimates  Meu 
Group  analyst  Richard  Buchanan. 
And  they  work. 

The  payoff  can  be  big.  Companies 
that  manage  (heir  IT  investments 
most  successfully  generate  returns 


$ 


that  arc  as  much  as  40% 
higher  than  those  of 
their  competitors,  ac¬ 
cording  to  a  November 
Harvard  Business  Review 
article  by  Jeanne  W. 

Ross  and  Peter  WeilL 
These  steering  com¬ 
mittees  are  "not  just 
project  management  on 
steroids."  says  Buchan¬ 
an.  "It's  determining 
which  project  we'll  actu¬ 
ally  do.  based  on  its 
strategic  business  value  and  what  is 
the  most  efficient  engineering  se¬ 
quence  in  which  to  do  them." 

The  committees  do  this  by  de¬ 
veloping  a  global  view  and  an  over¬ 
all  strategy  for  all  major  IT  projects, 
laying  out  the  expected  technical 
and  business  benefits,  enacting  IT 
portfolio  management,  prioritizing 


projects  based  on  business  strategy, 
tracking  projects  under  way.  creat¬ 
ing  a  shared  vision  of  the  future 
technical  environment  and  safely  re¬ 
jecting  projects  that  don’t  serve 
these  goals.  They  have  the  added 
value  of  forcing  a  public  commit¬ 
ment  and  support  from  the  sponsor¬ 
ing  business  unit  And  as  these  joint 
efforts  succeed,  they  build  trust  be¬ 
tween  IT  and  business  leaders. 

A  driving  force  behind  these  com¬ 
mittees  has  been  the  failures  of  ma¬ 
jor  initiatives  such  as  ERP,  CRM  and 
supply  chain  applications.  Buchanan 
says  they  fail  because  no  one  really 
knows  what  they  were  trying  to 
achieve  from  a  bu.sincss  standpoint. 
And  he  says  it’s  usually  the  business 
people  who  are  unwilling  to  take  the 
time  to  do  this  woric. 

Making  these  committees  suc¬ 
cessful  is  laborious,  requiring  disci¬ 
pline  and  the  support  of  upper  man¬ 
agement.  But  as  Meta  analyst  and 
CIO  coach  Doug  Lynn  told  me. 
“When  a  CIO  goes  out  the  doon  it’s 
not  that  he  didn’t  do  the  job;  it's  that 
he  didn't  communicate  well.  The 
business  didn't  know  what  was  go- 
ii^  on  or  why."  Which  is  why  these 
steering  committees  are  a  sure  bet 
to  keep  you  in  your  seat  and  the 
credibility  monkey  off  your  back.  I 
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ASP  Redux: 
It’s  About 
Service 

WHATEVER  hap¬ 
pened  to  all  those 
application  service 
providers? 

When  they  first  appeared 
about  four  years  ago,  ASPs 
were  going  to  change  the  way  compa¬ 
nies  buy  and  use  software.  In  the 
process,  they  were  going  to  make  cor¬ 
porate  data  centers  difficult  to  justify, 
if  not  obsolete.  Back  then.  ASPs  made 
outlandish  claims  that  they  could  pro¬ 
vide  robust,  enterprise-level  sofhiw 
and  services  at  a  fraction  of  the  typical 
maintenance  and  life  cycle  costs. 

They  were  going  to  be  fabulous,  re¬ 
member? 

But  stock  market  reality  —  and  the 
sinking  of  marketing 
budgets  —  have 
muted  the  ASP  mes¬ 
sage,  forcing  ASPs  to 
become  more  fo¬ 
cused  on  their  capa¬ 
bilities  and  less  d^ 
fensive  about  the 
virtues  of  joint  oper¬ 
ations  with  a  corpo¬ 
rate  IT  center. 

Yet.  with  many 
once-unassailable  IT 
budgets  under  siege, 
there’s  reason  to  re¬ 
visit  the  cost-saving  benefits  of  em¬ 
ploying  an  ASP.  For  example,  if  you’re 
spending  80%  of  your  IT  budget  main¬ 
taining  existing  systems,  you  can't  in¬ 
vest  heavily  in  projects  that  could  gen¬ 
erate  new  business.  An  ASP  might  be 
able  to  free  up  some  of  those  mainte¬ 
nance  dollars. 

Good  candidates  for  shiffing  to  an 
ASP  are  human  resources  and  payroll 
systems  or  a  sales  automation  pro¬ 
gram.  And  given  the  current  competi¬ 
tiveness  among  ASPs,  your  deal 
should  include  software  management 
as  well  as  hardware  services.  Many 
ASPs  offer  packages  that  include  soft¬ 
ware  from  Oracle,  Siebel.  SAP  and  Ari- 
ba.  and  you  can  get  specific  service- 
level  agreements  that  call  for  fmanciai 
penalties  and  technical  accountability 
when  things  go  wrong. 

ASPs  have  also  dropped  their  anti¬ 
customization  positions.  They  discov- 
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s  getting  in  the 
your  enterprise? 


Attend  the  content-rich  conference  that  sees 
an  enterprise  without  wires 


May  6-9,  2003 

IW  Marriott  Desert  Springs  Resort  •  Palm  Desert,  California 


Kt^ote  &  Featured  Speakers 


NANCY  TONY  MIKE  LEE 

VICTORY  SCOTT  TAYLOR  COLAW 

Aml  Seocuiy.  CTO  QO  QO/DiRClor 

Infoctna^a  General  Moton  Todd  Pacific  Univcnity 
CranrawMons  Shipiraids  IntemMion 


KEN  ANTHONY 

VENNER  KING 

VP  a  QO  Dii.  of  Software 
BroadoMn  A  En^neeting 


DAVID  IIM  STEVE 

SALZMAN  LEAKE  POPPE 
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Wire^s 

Worki 


Attend  Computerworld's 
Executive  Conference  on 
Mobile  and  Wireless 
Technologies! 


Owned  &  Produced  by: 

aMvinwaiiji 

May  6-9,  2003 

JW  Marriott  Desert 
Springs  Resort 
Palm  Desert  California 


a  Mobile  and  wireless  technologies  push  the  enter¬ 
prise  envelope  every  day,  from  customer-facing 
applications  all  the  way  to  the  faaory  floor.  With 
the  proliferation  of  mobile  and  wireless  applica¬ 
tions,  devices  and  services,  how  can  vou  keep 
your  enterprise  on  the  cutting  edge?  How  can  you 
find  today's  most  promising  mobile  and  wireless  technologies?  And 
how  can  you  learn  how  other  companies  and  industries  apply  the  latest 
and  greatest  mobile  and  wireless  tools? 

Brought  to  you  by  Computerworld,  you  will: 

•  Hear,  discuss  and  witness  winning  mobile  and 
wireless  strategies  in  the  enterprise 
•  Gain  first-hand  knowledge  that  can  enhance  your 
own  company's  mobile  and  wireless  strategy 
•  Examine  the  industry's  major  issues 
and  challenges 

•  See  developing  technologies 
•  Network  with  peers 
•  Meet  potential  partners 
•  Converge  with  analysts  and  press 

•  And  take  home  practical  tips  and  knowledge  of  technologies 
you  can  implement  right  away 
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Nancy  Victoiy 

Assistant  Seort^  for  Informaiion 

&  Communications 

U.S.  Department  of  Commerce 


I  Nancy  I.  Wloiy  has  the  unusual  disbnction  of  playing  (wo  roles 
at  once  in  the  Bush  Adrninistntion  As  Assisiani  Secretary  of 
Commerce  for  Cominunkations  and  Infonnaooa  she  lepotts 
directly  to  Ccanmetce  Scaeuty  Dim  Eveni  and  ouetsecs  the  ^ency  within  *e 
CoRtmcicr  OepMtment  that  mana^  the  fideni  gcroemment's  use  of  ipectium.  At 
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Tony  Scott 

CTO 

General  Motors 

Anthony  (Tony)  E.  Scott  is  the  Chief  IMmolog>'  Officer  for 
GM's  Information  Systems  and  Services  (IS&S)  organuaiion 
/  Scott  is  responsible  for  defining  the  information  technology 
computing  and  telecommunications  archiieaure  and  stan¬ 
dards  across  all  of  CM'i  buaincM  globally  He  provides  leader¬ 
ship  in  the  areas  of  tT  aichitectuie  and  standards,  and  emerging  technology.  He 
joined  CM  bom  Briuol-Mycis  Squibb  wbete  he  was  Vice  President,  fnfbnnation 
Manaaemem.  responsible  for  the  minsfement  of  the  gtohal 


User  Case  Studies  and  Perspectives 


■  ■  H 

KEN  AhTTHONY  DAVID 

VENNER  KING  SALZMAN 

vraao  Dir.ofSo6wire  ItaBaBManaart 


GERRY 

PURDY 

Prucipat  Anslysi 


JIM  STEVE 

LEAKE  POPPE 

Director  of  CIO 


For  more  information  and  to  register,  visit  wwv 
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TUESDAY,  MAY  6 


1:00pm  Pre-Conference  Golf  Outing 
2:00pm  Concurrent  Woricshops  and  S 

•  Technology  Workshops 
Presenud  by  Pmiim.  Motoroia  and  WAXA 
and  othtr  Worlahofa  w  beannounced 

•  Industry  Pipeline  Sessions 

•  Technology  Produciivit>' Training 
Praenud  by  Handheld  Media  Cwup 

7:00pm  Pre-Conference  Netwoddng  Reception 


WEDNESDAY,  MAY  7 


7:00am  Buffet  Breakfast 

8:00am  Welcome  and  Opening  Remarks 

Ron  Mdum.  Executive  Vice  Present.  Campuunivdd 

8;  15am  Opening  Keynote  Presentation 

Nancy  Vkmy.  AuiMom  Secretary  (or  Information  & 

(  'ommumcaaom,  U.S.  Deparment  of  Commerce,  ^mirasoawr 
of  the  Natiortai  Infirmaaon  &  Communications  Adminotration 
9:00am  Wireless  Enterprise  Panel 

Panel  Moderator  Bob  Braoin.  Mobile  S>  Wmkss  Reporter 
Cornpuieru/orld 

Panel  Membert:  Tom  DiBon  Manager.  Mobile  &  Wirdeu,  Hilton 
Hotels;  loe  Preepiora.  errs  Manager.  Allan  Thoniffon. 

President  &  CEO.  Rappore  TedinSogies  (odim  to  be  armouncal} 
9:45am  User  Case  Study:  Wireless  Security  •  Risk  Management 
Ken  Neu-man,  Director  of  Inhrmaoon  Secunty  6  Risk 
Managemeru.  DeusebeBank 

10: 1 5am  Break 
I0:30am  Industry  Insights 
Presented  by  IBM 

1 1 :00am  Analyst  Update:  Mobile  Goes  Maiiuiream  -  What  IT 
NeetlsTo  Know 

11:30am  Sponsor  introduced  End-User  Case  Studies 
(concurrent  sessions) 

Networkin^Biids  of  a  Feather  Lundteon 
Industry  innovations  Panel 

Maimtor:  Gerry  Purdy  Ph.D.,  l^nopal  Anatyu.  MobdeTrax 
End-User  Case  Study:  Effective  Use  of  Wireless 
Networks 

MAr  Taylor  CIO.  Todd  Pacific  Shipimds 

Industry  Insights:  The  Fuuiieof  Vbice  Data  Converged 
WiieiesB  Networks 
Presenud  by  Pnadm.  Motorola  and  WAXA 
Break 


Noon 

1:30pm 

2: 1 5pm 


3:I5pm 

3:30pm 


Industry  Insists 
Preunud  by  Syrtdnan 
4:00pm  User  Case  Study:  The  GO'S  Perspective  of  Integrating 
Mobile  A  Wireless  Technology  into  PadEc  University's 
Objectives  -  Lessons.  Benefits  and  Red  Flags 
L«r  Colaic!  QO  Podfk  Uniunsiiy 
4:30pm  Industry  Insights 

''  Preentsf  by  Toshdta 

5:00pm  Closing  Remarks 

5  JOpm  Solutions  Showcase  A  Expo 

with  Buffet  Dinner  * 


THLIRSn.A^',  MAY  8 

7:00am 

Buffet  Breakfast 

8:00am 

Opening  Remarks 

8: 1  Sam 

Opening  Keynote  Presentation:  The  Wireless  Future 

In  The  Automotive  World 

Tony  Seen.  CIO.  General  Moton 

9:00am 

End-User  Case  Study 

Poppe.  CIO.  Rou^Rooter.  and  Todd  Crautkrrmer.  Senior  Vice 
PresidenL  CearWorks 

9:30am 

CTD  Insists  Panel 

10;  15am 

Break 

10:30am 

Industry  Insists 
minted  by  HtuHeti-P^tard 

11:00am 

End-User  Case  Study:  UPS  Unplugged 

Dave  Sahnan.  Pmpam  Managrr.  Unded  Parcel  Service 

U:30affl 

Sponsor  Introduced  End-User  Case  Studies 
(concurrent  sessions) 

Noon 

Solutions  Showcase  A  Expo  with  Buffet  Lunch 

I;30pm 

Industry  Insights 
lacob  Oaistfn  CTD.  Oracle 

2:00pm 

End-User  Case  Study 

Ken  Vernier.  QQ  Brouii^ 

2:30pm 

Industry  Insights 
rmmudiiyfBM 

3:00pm 

Break 

3;  I  Spm 

Tedinoiogy  *^)od^t’  -  Innovabon  On  Stage 

Featuring  demonsomons  by  EFI/PrintML  Ctedam.  Synchrelegic. 
NMMotwn  and  others  to  be  announced 

4;15pm 

End-User  Case  Studies  (concurrent  sessions) 

Leveraging  Advanced  Tedmologies  to  Support 

Mc^iie  Workm 

/im  laahe.  Dbeaor  of  Butfneu  Strategy  and  Plarmmg,  Getromes 
Wireless  Locating  Systems  -  The  Technolt^ 
for  Large  ROl 

Tim  Van  de  Merwe.  Inienul  Logisttet  Manager. 

Associated  Food  Stores 

4:45pm 

Eixl-User  Case  Studies  (concurrent  sessions) 

Access  to  Corpotaie  Data  in  Wirdess  Environments 
Anthony  King  Directer  of  Sc^nee  and  Engineerittg  Syrtnns 

Ventana  Meatc^  Systems 

'Pumping'lhe  Moat  Out  of  Vbur  Database  tvith  WireksE 

Eddu  Hung  Manager.  Advance  Research  and  Terhnologui  Cdy 

1^  Richmond  BC  Canada 

7KX)pm 

Gala  Evening 

'Best  Practice  in  Mobile  A  Witdess'  Awards  Ceremony 

FRIDAY,  MAY  9 


6KX)ain  Buffet  Breakfast 

8:30afn  Concurrent  Wotkshc^  and  Sessions: 

•  Technology  Workshops 
Presetttad  by  IBM 

ondoiherViMidiopitobeaimottmed 

•  Industry  Pipeline  Sessions 

Noon  Conferenre  Condudes 


Travel  and  Accommodations 

ItX:  I  ravel  n  the  official  travel  companv  fur  Mobili  a  W'irdess  World 
iltev  are  vour  une-su^  shop  fur  exclusiw  diKOunied  tales  on  hold 
acrommodaiiuiu 


To  reserve  vour  accommudaiiuns 

vuii  wMwetcmual.com  OR 

call  i.s(ia-MO-U62  (or  i-wsaro-siss) 


ilDG 


Pre-Conference  Golf  Outing 

Complimentary  for  Registered  IT  Users 

nie  rre-Confetence  Coif  Oulii^  at  The  Palnu  Coune  located  at  the  IW  Matnon 

Desen  Spnnp  Reion.  iscomplimenuiy  (SiSS  value)  for  regiaeied  rTEjid-Uicn 

(Other  panicipants.  including  tponaon  and  vendoiv  mav  play  on  an  *as  available' 

bash  and  are  responsible  for  all  applicable  golf  oiuing  expenses. ) 

for  dnadLconua  Chris  Legeiai  l-S0e42(fR277 


i^.mwwusa.com/cwt  or  call  1-800-883-9090 


Application  for  Conference  Registration 

TO  REGISTER:  QUESTIONS? 

•  Fax  this  form  to  508-626-8524  •  Call:  Pam  Malingowski  at  800-883-9090 

•  Or  register  online  at  www.mwwusa.com/cwt  •  Email:  mwwreg®computerworid.com 

•  You  will  receive  a  confirmation  via  email  r  r*r.c  rwr 


OPTIONS: 

All  dull«  Miounu  JR  in  (I  S  Kindv  Ri^isiuiion^  mrludr  full  jcccsh  lo 
jll  »f»ii)ns.  ih«  nwjl^  jnd  tftrptmm  I  rjn^pocuiion  jnd  hold 
urcominodjuons  arc  \‘our  mpomihilily  and  can  tR  mm^d  hv  i-uiling 
wwwiicrnlralrom.  railing  I  |UXI-U0-J^62.  nr  mailing  OTnihousingSidfirii 


Earlybird 

Registration 

(ihii.>«nMai.h  II  iuni) 


Pre-Gsnference  Full/On-Site 

Registration  R^istration 

lAprJ  I  ihmu(#i  Mav  I  2001)  (on  w  ahfi  >.la»  J.  »0») 


May  6-9,  2003 

JW  Marriott  Desert 
Springs  Resort 
Palm  Desert,  California 


Non-Sponsoring  Vendor;  *  • 


*n  Fnd'll«n«  arr  ddinrd  a»  thc<«r  who  are  ailendmgCampuleiworld'i  Mohilc  A  V\'iirlns  World  wiih  an  inrrni  (and  an  FT  spending  hudgn)  lo 
poieniially  huvypurchasr  hardw.irr/»oftware)trtvlcrs;e(c  From  our  (onfetrncr  sponsors  and  nhihiiors  As  such,  account  rrprnentatives/busrncss 
desrlopmmi  from  any  company,  analysis,  vmiurr  capitalisis.  and  amonc  fisc  .mending  who  dues  not  h.rve  FI  purchasing  influence  within  Iheir 
organiaalion  are  excluded  from  (he  'FI  rnd  llser'  drsignalion  Fnforccmfni  of  this  inutpmalion  and  policy  is  at  the  sole  disccelion  of 
(ompulerwxirld  QueslKins' Please  call  l  -SCKI-SSF-OOOO 

'  ‘Vendors  are  encouraged  lo  pankipaie  In  fiompuiersvorld  s  Mohilr  &  Wireless  World  through  sponsorship  (Details  are  available  by  calling  tro  Leger 
at  1  •V)S.420-82I2  )  AJlemauselv.  vendors  [as  well  as  venluR  capitalists  eipjiis  anaivsts,  and  other  ‘nun-FI  end-user*  prrslessionaU  as  defined  by 
(xrmputersvorld).  irtay  apph' for  legistratKin  ai  the  'non -sponsonr^vetsdru'  rate  (XtemnnaiKsn  t)l  whal  consiituiesa  ‘non-sponsoring  sendor*  legistration 
IS  al  the  sole  Jiscrerion  of  (aimpulrrswirld  * 


Registration  Information:  (This  section  must  be  completed  in  ordcF  to  process  jour  application) 


Badge  Name: _ _ _  □  Special  Services  Required?  (Please  aiiach  svriiien  desenpnon) 

Would  you  like  to  receive  inronnalion  about  playing  in  the  goir  outing  on  Tuesday.  May  6?  □  Yes  □  No 
Please  indicate  your  preferred  conference  shin  size:  Os  Qm  Ql  Oxi  O  XXL  □  XXXL 


Attendee  Profile:  (This  seaion  must  be  completed  in  order  to  process  your  application)  I  Payment  Method 


Q  Check  Enclosed  (checks  must  be  received  by  April  29.  2003 
payable  to  Compuierworid) 

Mail  lor  Compuierworid,  Ann:  Pam  Malingowski.  SOO  Old 
Conneciirrui  Path,  hramingham.  MA  0!  701 

□  American  Express  □  VISA  □  MasterCard 
Account  Number: 


Signature  of  Card  Holder: 


Cancellation  Policy 

(  All  of  (he  below  opiums  retjuirr  wntten  noiififaiion  ) 

In  the  event  of  cancellation,  the  registrant  has  three  opiions: 

I  ]  I  ie  or  she  may  subsutule  another  atietsdee  for  this  conferertce 
2|l(eor  she  may  irarufer  this  registration  lo  the  rtexi  Mobile  &  Wireless 
VS'brld.  if  written  notice  is  received  by  April  17,  2003. 

3)  (he  regrstraiion  fee  will  be  refunded,  less  $250  service  charge,  if 
written  noitce  is  received  by  April  17,  2003. 

Please  send  cancdlaiion  requests  via  email  to  mwwreg@compuier- 
wor1d.com  or  call  1-800-883-9090  for  assistance. 


Computcrworld  reserves  the  right  to  limit  and/or  refuse 
any  registration  for  any  reason. 


www.computerworld.coni 
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ered  that  there  was  no  plain-vaniUa  in¬ 
stallation  for  each  customer.  Now.  de¬ 
liverables  such  as  reports  can  be  gen¬ 
erated  on  the  fly  via  the  Web. 

George  Kadi^  chairman  and  CEO 
of  San  Carlos.  Calif.-based  ASP  Corio 
Inc.,  told  me  that  the  value  of  a  com¬ 
pany  like  his  is  most  obvious  when 
software  becomes  more  complex.  An 
ASP's  real  value,  then,  isn’t  in  its  abili¬ 
ty  to  deliver  generic  software  pack¬ 
ages.  Rather,  the  value  is  in  the  ability 
to  deliver  consistent  standards  of  op¬ 
eration.  expertise  and  customer  rela¬ 
tions  to  a  business  in  specific  areas.  If 
an  ASP  lets  a  cookie-cutter  approach 
to  IT  drive  its  business,  it’s  probably 
not  a  lot  of  use  to  you. 

The  issues  of  viability  and  control 
are  also  being  addressed  via  Web- 
based  technology.  ASPs  now  offer  an 
on-demand,  secure  environment  with 
views  of  hardware  and  software  assets, 
as  well  as  real-time  usage  data  and  re¬ 
newal  information. 

But  the  best  way  for  ASPs  to  regain 
their  lost  luster  is  to  demonstrate  that 
they  provide  "service"  and  not  Just  an 
"application."  k 


MICHAEL 

GARTENBERG 

Waiting  for 
Longhorn 

IIUST  CAME  BACK  from 
Microsoft's  Analyst  Sum¬ 
mit  in  Redmond.  Together 
with  about  ISO  of  my  col¬ 
leagues.  I  listened  to  a  lot  of 
presentations,  many  of  which 
referred  to  Lon^orn,  the  code  name 
for  the  next-generation  Windows 
client.  [>espite  the  incessant  refer¬ 
ences  to  the  new  operating  system, 
there  was  almost  no  infonnatioD 
about  U.  Still.  Lon^om  looms  on  the 
horizon,  and  IT  planners  need  to  start 
making  preparations  now. 

Prior  generations  of  Windows- 
client  upgrades  focused  on  issues 
such  as  unifying  the  code  base,  elimi* 
nadng  Windows’  core  DOS  roots  and 
improving  stability  and  reliability.  Al- 
thwgfa  all  of  these  were  daunting  ob- 
iectives,  most  have  been  achieved 
with  Windows  XP. 

The  challenge  of  Longhorn  will  be 
to  add  significant  funcrions  to  the 
next  generation  of  PCs  while  uniting 
all  the  divergent  technologies  that 


were  introduced  with  the 
XP  family,  such  as  Tkblet, 

Media  Center  Edition, 

Smart  Displays,  Mobility 
and  Media. 

In  fact,  most  of  these 
products  are  scheduled  for 
major  updates  within  the 
“Longhorn  time  frame" 

(which  is  Mterosoftspeak 
for  who  knows  what).  This 
means  that  not  only  does 
the  Longhorn  team  have  to 
create,  test  and  evolve  core 
Windows  functions,  but  it 
also  has  to  branch  in  the 
code  ffom  these  other 
products  for  a  unified  whole. 

Microsoft  has  no  firm  Longhorn 
ship  date.  But  this  summer  will  mark 
the  second  anniversary  of  XP.  Micro¬ 
soft  has  apparently  missed  its  former 
target  of  revising  the  operatir^  system 
every  18  to  24  months. 

on  unauthorized  builds  of 
Longhorn  that  have  made  the  rounds 
on  the  Internet,  it  looks  like  a  formal 
beta  for  Longhorn  won’t  be  ready  until 
at  least  this  summer,  with  a  minimum 


of  a  year  in  beta  testing. 

The  earliest  possible  re¬ 
lease  date  for  Longhorn 
would  then  be  late  summer 

2004,  with  the  possibility 
of  that  date  slipping  into 

2005.  should  Microsoft  en¬ 
counter  any  problems  in 
testing  (most  likely  in  ar¬ 
eas  like  security  and  inte¬ 
gration).  That  means  most 
IT  departments  can  safely 
put  tfos  issue  on  the  shelf 
until  at  least  2005. 

But  what  about  the  short 
term?  It's  unlikely  that  Mi¬ 
crosoft  will  let  four  years 
go  by  between  major  operating  system 
releases.  That  means  t^t  sometime  in 
the  second  half  of  this  year  we  might 
see  an  update  of  Windows  XP  on  the 
order  of  what  Windows  98  was  to  Win¬ 
dows  95.  That  might  include  bug  Axes, 
service  packs  and  updates  for  things 
like  Tablet  and  Media  Center  Edition, 
it  XP  L5,  if  you  wUL 
You  need  to  look  closely  at  your 
IT  infrastructure  now  and  make  the 
transitioo  off  of  the  old  9x  code  if 


you  haven’t  already  done  so.  Keeping 
a  minimum  of  Windows  2000  with 
some  XP  where  appropriate  is  the 
proper  strategy,  with  a  slow-phased 
XP  migration  as  warranted  by  ma¬ 
chine-replacement  cycles. 

Microsoft  Is  going  to  be  pushing  XP 
hard  over  the  next  few  months.  Most 
new  software  releases  and  updates 
will  require  XP  and  Service  Pack  1  for 
foil  functionality,  but  that  doesn't 
mean  you  need  to  be  the  first  on  the 
block  to  get  it. 

Focus  on  where  these  features  are 
needed  (for  example,  if  you're  deploy¬ 
ing  Tablet  PCs.  you  will  need  XP  and 
Service  Padt  1)  and  continue  to  deploy 
Windows  2000  in  other  areas  that 
don’t  meet  those  demands. 

Coexistence  of  Windows  2000  and 
XP  will  be  the  best  strategy  until 
Longhorn  makes  an  appearance  and 
drives  another  cycle  of  upgrades  in 
2005.1 
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READERS’  LEHERS 


The  Real  Cause  of 
Employea  Burnout 

I  AM  AHtM)  that  columnist  Frank 
Hayes.  Meta  Group  and  appar¬ 
ently  7Nb  ol  IT  managers  have 
missed  the  inderlyinQ  Issue  of 
burnout  pAvoid  GumouL*  Ouick- 
Urik  3711^1.  Baople  are /ired  and 
they're  asked  to  do  loo  many  (hrigs 
at  once.  No  amount  of  money, 
training,  praise  or  other  Incentives 
wi  lekeve  the  mental  taboue  that 
plagues  fT  shops. 

Perhaps  Meta  Group  should  ask 
IT  managers  whether  they  consider 
vecabon  time,  sick  hme.  holidays 
and  the  current  number  ot  active 
proiects  when  scheduling  projects. 
Oo  you  think  71%  wi  answer  no? 
JohnlbiaM 
West  Havm,  Corm. 


Wb  Pay  for  Spam 

TfC  PMSiei  that  the  Orect 
Martoling  Association  seems 
wiing  to  ignore  is  that  spam  is  an 
added  expense  for  those  who  are 
forced  to  carry  A  and  those  who  re¬ 
ceive  N  pSlates  Rush  to  Pres  Laws 
to  Fight  Spam.*  OackUnk 36674]. 

These  expenses  should  be 
borne  by  the  adraneer.  not  the  car¬ 


rier  or  the  recipient.  I  propose  that 
spammers  be  required  to  pay  carn¬ 
ets  a  fee  of  25  cents  for  each  piece 
of  spam  carried.  One  half  of  this  fee 
mxAI  be  applied  to  the  recipient's 
ISP  account.  WAh  this  sokjiion.  I 
shodd  be  able  to  aftord  a  high¬ 
speed  cormeetton. 

Qiartw  J.Uwge 
Poncholouio.  La 


The  Transparent  OS 

Mark  HAU  was  right  on  with 
hiscoluninDoestheOS 
MMIerr[Quckljnk363871.H»d- 
ware  and  operating  systems  are 
meant  to  run  appHcabons.  The 
operating  systom  should  be  trans¬ 
parent.  Whether  St-biL  32*bll  or 
54*^  -  who  cares,  as  long  as  the 
operabng  system  IS  avallate.re- 


lable.scdaUeM]  secure. 
Ibanel  fbagMbra 

IT  reseorch  analyst 
West  Windsor.  N/. 
mc^i5(Ni<^ooLcom 


Recording  for  ROI 

The  BEST  WAV  to  back  up  ROI 
esilmatesistoiecordpoet- 
projectcosisandbenetitsrBack- 
ngUpRa’QuckUrkSTien-ite' 
cenHydevefopedadigitatpraiect- 
aufhorgafioo  request  tool  tor  a  6E 
business  that  look  Ihe  estsraied 
banefils  and  transferred  them  to  a 
postproyect  directory  at  protect  end 
(or  when  desgnated.  since  some 
benete  may  predete  protect  cotr^ 
ptohon).  The  system  was  a  sanpte 
\fouaf  Basic  6X)ractoei  appixatior). 
and  R  wasn't  very  (Mficuli  to  use. 


i  HarecohxmsaandMstDarciwesof  omnom 
'  cohcMisveonatfWabstt 


Thesupponedmanagerisrespon- 
slile  tor  reconfeng  these 'actuals* 
and  reports  to  the  CFO. 

It  anT  suipnsmg  how  much 
more  abenbon  requesters  pay  to 
eshmales  when  the  rasulls  wi  be 
documeread  for  tt«  CEO  and  (70 
and  wi  figuie  into  future  budgets 
and  head  courRs. 

tf  used  correctly.  postprofecS 
analysescananprovetoeestriat- 
mg  process  and  ato  in  deleimnng 
who  should  be  fmlad  This  isn1 
puntlive:  R  is  nwrefy  a  tool  for  ahy- 
cation  of  resources  -  a  manage- 
meni  xrperabve 
ChateCwnl 
Oiathe.Kafu 
ctcam)Wi4(Smsn.am 


Open  Source  k  Just  Another  Tool 

i  TIE  TtOEDOrai  SOURCE  rThe 

VtofdvAde  Oxte  Rebellion.* 

Quddj*  36438).  H  can  be  agood 
thino.  but  R  enl  tor  everyone.  Reel 
business  needs  wry  greedy,  from 
compwiies  that  prefer  to  KKxk  wAh 
a  welestabtehed  vendor  BteMF 
crosoft  to  those  wRh  IT  shops  that 
haw  a  pool  of  talented  people  who 


cwi  make  open  sauce  work  tor 
thee  needs.  I  thmk  there  is  room  tor 
both  pruprieiary  and  open  source  n 
the  world.  Neilher  s  a  perfect  soki* 
bore  they're  pot  eokrttons 

aiLllcOowMl 

Senior  software  engineer. 
Mtlptras,  Cat(f. 
dtltORm@mccomsqftxDm 


COMPUTBIWOmj)  welcomes  r 
comments  from  as  readers.  Unem 
wi  be  editod  tor  breWy  and  cMnty 
They  shoiid  be  addrea^  to  itamie 
EcUa.  ieOers  edftir.  CorrpuiarwQrtd. 
PO  Box  3171.  SOO  OU  (^omedcut 
FWh.  Framinghm.  Mass.  01701. 
fix;  (506)  879^843 
E-rnat  lattorsfcofflpuiarworldcorn. 
Inctoda  an  address  and  phone  lum¬ 
ber  tor  immeclaae  wrificabon. 


E  McniMnanewMaRloewr 
‘  topKsaeonatftWbeto: 


i 


www.compulerworld.com 
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ercJ  that  there  was  no  ptain-vanilla  in- 
stallation  for  each  customer.  Now.  de¬ 
liverables  such  as  reports  can  be  gen¬ 
erated  on  the  fly  via  the  Web. 

George  Kadifa.  chairman  and  CEO 
of  San  Carlos.  Calif.-based  ASP  Corio 
Inc.,  told  me  that  the  value  of  a  com¬ 
pany  like  his  is  most  obvious  when 
software  becomes  more  comple.v.  An 
ASP's  real  value,  then,  isn't  in  its  abili¬ 
ty  to  deliver  generic  software  pack¬ 
ages.  Rather,  the  value  is  in  the  ability 
to  deliver  consistent  standards  of  op¬ 
eration.  expertise  and  customer  reb- 
tions  to  a  business  in  specific  areas.  If 
an  ASP  lets  a  cookie-cutter  approach 
to  IT  drive  its  business,  it’s  probably 
not  a  lot  of  use  to  you. 

The  issues  of  visibility  and  control 
are  also  being  addressed  via  Web- 
based  technology.  ASPs  now  nfler  an 
on-demand,  secure  environment  with 
views  of  hardware  and  software  assets, 
as  well  as  real-time  usage  data  and  re¬ 
newal  information. 

But  the  best  way  for  ASPs  to  regain 
their  lost  luster  is  to  demonstrate  that 
they  provide  ‘‘ser^’ice"  and  not  just  an 
"application.’' » 


MICHAEL 

GAKTENBERG 

Waiting  for 
Longhorn 
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lUST  CAME  BACK  from 
Microsoft’s  Analyst  Sum¬ 
mit  in  Redmond.  Together 
with  about  150  of  my  col¬ 
leagues.  I  listened  to  a  lot  of 
presentations,  many  of  which 
referred  to  Longhorn,  the  code  name 
for  the  next-generation  Windows 
client.  Despite  the  incessant  refer¬ 
ences  to  the  new  operating  system, 
there  was  almost  no  information 
about  it.  Still.  Longhorn  looms  on  the 
horizon,  and  IT  planners  need  to  start 
making  preparations  now. 

Prior  generations  of  Windows- 
clicnt  upgrades  focused  on  issues 
such  as  unifying  the  code  base,  elimi¬ 
nating  Windows'  core  DOS  roots  and 
improving  stability  and  reliability.  Al¬ 
though  all  of  these  were  daunting  ob¬ 
jectives.  most  have  been  achieved 
with  Window’s  XP. 

The  challenge  of  Longhorn  will  be 
to  add  significant  flmetions  to  the 
next  generation  of  PCs  while  uniting 
all  the  divergent  technologies  that 


were  introduced  with  the 
XP  family,  such  as  Tablet. 

Media  Center  Edition. 

Smart  Displays.  Mobility 
and  Media. 

In  fact,  most  of  these 
products  are  scheduled  for 
major  updates  within  the 
■'Longhorn  time  frame" 

(which  is  Microsoftspeak 
for  who  know’s  what ).  This 
means  that  not  only  does 
the  Longhorn  team  have  to 
create,  test  and  evolve  core 
Windows  functions,  but  it 

also  has  to  branch  in  the  _ 

code  from  these  other 
products  for  a  unified  whole. 

Micros4)fi  has  no  firm  Longhorn 
ship  date.  But  this  summer  will  mark 
the  second  anniversary  of  XP.  Micro¬ 
soft  has  apparently  missed  its  former 
target  of  revising  the  operating  system 
every  18  to  24  months. 

Based  on  unauthorized  builds  of 
Longhorn  that  have  made  the  rounds 
on  the  Internet,  it  looks  like  a  formal 
beta  for  Longhorn  won't  be  ready  until 
at  least  this  summer,  with  a  minimum 


theOM. 
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of  a  year  in  beta  testing. 

The  earliest  p«issible  re¬ 
lease  date  for  Longhorn 
would  then  be  late  summer 
2004.  with  the  possibility 
of  that  date  slipping  into 
2U0.\  should  Micros*Mt  en¬ 
counter  any  problems  in 
testing  tmost  likely  in  ar¬ 
eas  like  security  and  inte¬ 
gration).  That  means  most 
IT  departments  can  safely 
put  this  issue  on  the  shelf 
until  at  least  2(X)5. 

But  wh.li  about  the  shon 
lerm^  It's  unlikely  that  Mi¬ 
crosoft  will  let  four  years 
go  by  between  major  operating  sx’stem 
releases.  That  means  that  sometime  in 
the  second  half  of  this  year  we  might 
see  an  update  of  Windows  XP  on  the 
order  of  w  hat  Windows  08  was  to  Win- 
ditws  05.  That  might  include  bug  fixes, 
serx'ice  packs  and  updates  for  things 
like  Tablet  and  Media  Center  Edition. 
Call  it  XP  L5.  if  you  will. 

You  need  to  look  ckisely  at  your 
IT  infrastructure  now  and  make  the 
transition  off  of  the  old  Ox  code  if 


you  haven't  already  done  so.  Keeping 
a  minimum  of  Windows  2000  with 
some  XP  where  appn.'pnate  is  the 
proper  strategy,  with  a  slow-phased 
XP  migration  as  warranted  b\  ma¬ 
chine-replacement  o’cles. 

Microsoft  is  going  to  be  pushing  XP 
hard  over  the  next  few  months.  Most 
new  software  releasees  and  updates 
will  requia*  XP  and  Service  Pack  1  for 
full  functitinaliiy,  but  that  dok'sn't 
mean  you  need  to  be  the  first  on  the 
bitH'k  to  get  it. 

Focus  on  where  these  features  are 
needed  ( for  example,  if  you’re  deploy  ¬ 
ing  Tablet  PCs.  you  will  need  XP  and 
Ser\  ice  Pack  I)  and  continue  to  deploy 
Windovs's  2000  in  other  area.s  that 
don't  meet  thtvse  demands. 

Cw.vistence  of  Windows  200()  and 
XI*  w  ill  be  the  best  strategy  until 
Longhorn  ma)u‘.s  an  appearance  and 
drives  another  cyele  of  upgrades  in 
2005  I 
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The  Real  Cause  of 
Employee  Burnout 

IAH  AFRAIO  that  columnisl  Frank 
Hayes.  Mela  (Voup  and  aDpar-  I 

ently  71^)0  of  IT  manaoers  have 
missed  the  undeflying  issue  of 
burnout  ["Avoid  Burnout."  Quick- 
Link  371B]  People  are  f/n?d.  and  i 
they're  asked  to  do  loo  many  Ihings  | 
at  once  No  amount  ol  money.  , 

training,  praise  or  other  incentives 
will  relieve  the  mental  fatigue  that  | 

plagues  IT  shops.  i 

Perhaps  Meta  Group  should  ask  \ 

IT  managers  whether  (hey  consider  | 
vacation  time,  sick  time,  holidays  I 

and  the  current  number  ol  active  j 

protects  when  scheduling  protects  | 

Do  you  think  71%  will  answer  no?  I 

John  Russo  i 

W'esf  Haven,  Ci>nn.  | 

We  Pay  for  Spam 

The  problem  that  the  Direct 
Marketing  Association  seems 
willing  to  ignote  is  that  spam  is  an 
added  expense  for  those  who  are 
forced  to  carry  it  and  those  who  re¬ 
ceive  it  ("Stales  Ru^  to  Pass  Laws 
to  Fight  Spam."  QutckLmk  36874] 
These  expenses  should  be 
borne  by  the  adverttser .  not  the  ear¬ 


ner  or  the  recipieni  I  propose  that  | 
spammers  be  required  to  pay  carri¬ 
ers  a  tee  of  25  cents  for  each  piece 
of  spam  earned.  One  half  of  this  fee  | 
would  be  applied  to  the  reopieni's  | 
ISP  account  WiththissokJtion.  I  I 
^ould  be  able  to  afford  a  high¬ 
speed  connection 

Charles  J.  Lingo  j 

Prmchiiroufd.  I^i.  j 

The  Transparent  OS; 

Marx  hall  was  nght  on  with 
his  cofumn  "Does  the  OS 
Malfer'^*(OuickLiftk363871  Hard¬ 
ware  and  operating  systems  are 
meant  to  mn  appfacations.  The 
operating  system  should  be  trans¬ 
parent  Whether  31-bft.  32-bil  or 
64 -bit  -  who  cares,  as  tong  as  the 
operating  system  is  available,  re¬ 


liable  scalable  and  secure 
Russelt  Ruggiero 
!T  reseoKh  analyst. 
West  U'lndsor.  S.I.. 
migg<S(}4l  a  auf-t-orn 


Recording  for  ROI 

The  BEST  WAV  10  back  UP  RO 
estimates  is  to  record  post- 
proied  costs  and  benefits  ("Back 
ingUpR0l."0uickbnk37181]  I  re¬ 
cently  developed  a  digital  proiect- 
authonzation  reouesi  tool  for  a  6E 
business  that  took  the  estimated 
benehis  and  transferred  them  to  a 
Dostprofect  direaory  at  protect  end 
(or  when  designafed.  since  some 
benefits  may  predate  protect  com 
ptetion).  The  system  was  a  simple 
Vtsual  Basic  6>0ecie8>  application, 
and  If  wasn't  very  cMfcult  to  use 


k  AArxeuiifmistsanaknAf  ioarcriiveso*ptmy>e 
'  miumns«r*anotirWebs>le 


I  The  Supported  manager  e  respon- 
I  sible  tor  recording  these  "actuals' 
and  reports  to  the  CFO 
I  It  isn't  supnsmg  how  much 
I  more  attention  laQuesters  pay  to 
I  estimates  ix^  the  results  wiN  be 
documented  lor  the  CEO  and  CFO 
and  wi  ligure  mio  iulure  budgets 
i  and  headcount 

If  used  correcfly.  oostproteci 
arafyses  can  improve  the  estimat¬ 
ing  process  and  an]  m  detenTwung 
who  should  be  hmded  Thisisn't 
punitive.  il  IS  merefy  a  tool  for  aNc- 
cation  oi  resources  -  a  rrvanage 
mem  imperative 
Charlie  Carroll 
‘  Ofarhe.  Kan.. 

'  t'ft’amJfia  a  msn-fom 


Open  Source  Is  Just  Another  Tool 


I’VE  TRIED  OPEH  SOURCE  [The 

Worldwide  Code  Rebellion.' 
QmcKtjnk  36438]  II  can  be  a  good  i 
thing,  but  It  isn't  for  everyone  Real  j 
business  needs  vary  greatly,  from 
companies  that  prefer  to  work  with 
a  wetl-established  vendor  tike  Mi- 
CTOsoft  to  those  with  (T  shops  that  | 
have  a  pool  ol  talented  people  vi4io  ^ 


can  make  open  source  work  (or 
their  needs  I  think  theie  ts  room  for 
both  proprietary  and  open  source  m 
(he  world.  Neither  is  a  perfect  solu¬ 
tion  they’re  iust  solutions 
O.M.McOowanll 
Siviior  sofrwure  enjiiniv'. 
.\filpi(as.  Cafff. 
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COMPUTERWORLO  rrefcomes 
comments  from  as  readers  Letters 
wiN  be  ediied  for  brevity  and  claniv 
They  should  be  addre»ed  to  Jarmc 
EcUe.  letters  editor,  (^omputerworld 
PO  Box  9T71. 500  Old  Connecticut 
Path.  Framingham.  Mass  0170T. 
Fax  (506)879-4843 
E-marf  letterslcorrputerworldcom 
Include  an  address  and  phone  num¬ 
ber  lor  irnmedpte  venficalion 

O  More  ianers  on  these  and  other 
topes  are  on  our  Web  sae 

com(wtarwortd.c9m/IMt«rs 
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■AGILE  TEAMS”  IS  NOT  AN  IRRATIONAL  CONCEPT, 

i 

-  < 

When  the  whole  development  team  is  both  fast  and 
flexible,  it's  not  irrational.  It's  Agile.  It's  Borland.  Introducing  i 
the  Borland  Suite  -  a  new  era  in  accelerated  application  life-  , 
cycle  management.  Seamlessly  integrated  best-in-class  , 
products  for  the  entire  development  team,  including  the  ana-  ’ 
lyst.  architect,  developer,  tester,  deployment  group,  and 
manager.  And  the  freedom  to  work  with  the  technologies  you 


^  The  first  compsny  approve!!  by  Microsoft  to  redistribute  the  Microsoft  NET  Fiamewoih  SDK  ' 
—  in  Linux  development  solutions 


*■/  in  J3V3  development  solutions 


IT'S  THE  STORY  OF  BORLAND 


have  today,  bringing  you  to  the  future  without  abandoning 
the  past.  Platforrrr  independent.  Internet  enabled,  and 
empowering  to  everyone  on  the  development  team. 
Technology  that's  passionately  used,  not  dispassionately 
shelved.  Leave  the  slow,  cumbersome,  lock-step  processes 
behind,  and  discover  for  yourself  what  most  of  the 
Fortune  500  already  know:  Agile  is  Borland. 


Download  the  while  paper  Building  bettei  software,  faster 
agile.borland.com/4it 
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ROBUST  OBJECT  DATABASE 

HIGH  PERFORMANCE  SQ 

L 

tT 

MULTIDIMENSIONAL  ACCESS 

Our  post-relational  database^ 
New  dimensions  of  scalability. 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cache,  the  post-relational  database. 

What  makes  Cache  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cach^ 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the  largest 
hospitals.  Cache  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  -  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 

to  four  million  users  in  .  *  «  . 

oo  ^  InterSystems  > 

88  countries.  Cach6  IS  —  - - — 

available  for  Windows, 

OpenVMS,  Linux  and 
major  UNIX  platforms.  Make  Appiicatfens  Faster 


inierdysiems  ^ 


Download  a  fuHy-functional  version  of  Cache  or  request  it  on  CD  for  free  at  www.lnterSYStems.com/t>ost-relatk)nal 
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Web  Sites  Take  Fidl  Measure , 

Web  site  tools  can  track  per¬ 
formance  from  the  customer¬ 
facing  front  end  to  the  back-end 
supporting  infrastructure.  But 
the  systems  don’t  cover  every¬ 
thing  and  are  expensive  and 
difTicult  to  set  up.  Page  30 


FUTURE  WATCH 

The  Ins  and  Outs  of  IT 

Information  technologist  and 
futurist  John  Parkinson  predicts  that 
major  upheavals  in  IT  are  on  the 
horizon  in  outsourcing  and  supply 
chains  —  and  that  operating  systems 
may  disappear  altogether.  Page  33 


SECURITY  MANAGER'S  JOURNAL 

Directory  Glitch  Trips 
Authentication  Efforts 

Interoperability  issues  thwart  Mathias 
Thurman's  efforts  to  use  an  LDAP-based 
directory  serx'er  for  implementing  rwo-factor 
authentication  in  both  Unix  and  W’indows 
NT  environments  in  his  company.  Page  34 


E-mail  Upgrade 

FROMTHEGf^DUP 


FIELD 

REPORT 


THREE  YEARS  after  be- 
_  ginning  a  55.000-user 
W  e-mail  system  upgrade 
that  spans  some  50 
countries.  Rolf  Hansmann.  director  of 
global  e-mail  and  collaboration  ser¬ 
vices  at  Aveotis  Pharmaceuticals  Inc.. 
has  reason  to  celebrate. 

His  eight-member  global  messaging 
group  has  upgraded  more  than  162  of 
the  company's  214  Microsoft  Exchange 
5.5  servers  to  Exchange  2000  and  has 
migrated  more  than  94%  of  ail  user  ac¬ 
counts  to  Exchange  2000  servers.  This 
spring,  as  the  last  user  mailboxes  final¬ 
ly  migrate  off  Exchange  5.5.  Aventis 
will  have  an  entirely  new  messaging 
architecture  that  requires  fewer 
servers  while  making  e-mail  delivery 
virtually  instantaneous  across  the 
company.  Hansmann  says.  The  new 
system  also  introduced  Exchan^  in¬ 
stant  messaging  and  conferencing  fea¬ 
tures.  as  well  as  Outlook  Web  Access 
for  remote  users,  all  of  which  are  pop¬ 
ular  with  users. 

But  getting  there  hasn't  been  easy. 
The  project  involved  more  than  simply 
upgrading  Exchange  servers;  it  served 
as  the  catalyst  for  a  massive  redesign 
of  the  Bridgewater.  N.J. -based  compa¬ 
ny’s  Windows  NT  domain  server  infra¬ 
structure  around  Windows  2000  Serv¬ 
er  and  Active  Directory,  which  Ex¬ 
change  2000  requires  to  store  user 
account  informatioa 

The  project  began  shortly  after 
Hoechst  Marion  Roussel  Inc.  and 
Rhone-Poulenc  SA  merged  to  form 


Aventis  Pharmaceuticals’  55,000- 
user  Exchange  Server  upgrade  forced 
a  complete  rebuilding  of  its  global  IT 
infrastructure  that  fes  taken  three 
years  to  complete.  By  Robert  L.  Mitchell 


Aventis  SA  and  its  Aventis  Pharmaceu¬ 
ticals  subsidiary  in  December  1999.  The 
merged  pharmaceutical  business  units 
both  used  Exchange  5.5  and  ^\^indows 
NT  4.  but  the  combined  company  had 
U  Windows  account  domains,  150  re¬ 
source  domains  and  two  separate  Ex¬ 
change  5.5.  Domain  Name  System 


y  li-ttifllr  i  itr.  'll.'  .’r.-iyltt  iil .  ciud  vOllll'ie. 


(DNS)  and  Windows  Internet  Naming 
Service  infrastructures.  In  stitching  the 
two  tc^ether,  the  Strasbourg.  France- 
based  company  created  an  elaborate 
web  of  about  2,000  cross-domain  trusts. 

Hoechst  had  already  been  experi¬ 
menting  with  Release  Candidate  1  of 
Exchange  2000  as  a  Microsoft  Joint 


Development  Prt^ram  partner.  Aven¬ 
tis  enlisted  consultants  from  Microsoft 
Corp.  and  St.  Louis-based  Horizons 
Consulting  Inc.  to  help  with  the  infra¬ 
structure  changes.  "We  wanted  all 
Windows  2000  domain  controllers  and 
global  catalogs  set  up  before  Exchai^e 
2000  was  installed.”  says  Harjinder 
“Nij"  Nijar.  head  of  global  Active  Di¬ 
rectory  services  at  Aventis.  The  team 
began  in-place  upgrades  of  the  NT  4 
domain  controllers  in  early  2000. 
Within  two  months,  it  bad  migrated  all 
old  account  and  resource  domains  into 
a  new  Aaive  Directory  structure. 

Although  a  different  group  manages 
Windows  servers,  the  global  messag¬ 
ing  group  kept  control  of  the  Active 
Directory  design  and  domain  con¬ 
troller  deployments.  "Active  Directory. 
[DNS]  naming  resolution  and  Ex¬ 
change  belong  so  close  together  that  if 
you  don’t  own  that  in  one  group,  you 
will  run  into  big  problems."  Nijar  says. 

To  speed  message  deliver)'.  Aventis 
used  a  three-tier  e-mail  server  archi¬ 
tecture  consisting  of  dedicated,  redun¬ 
dant  "connector  servers"  routing  mes¬ 
sages  and  "user  servers"  handling  local 
m^boxes.  Both  the  Active  Direaory 
and  Exchange  server  topolt^  follow 
the  corporate  WAN  topology.  In  that 
way.  "you  always  know  what  your 
next  bop  is."  says  Horizon  consultant 
Henry  Creagh. 

Hansmann  says  connector  servers 
pla)'  another  key  role;  "They . . .  pro¬ 
vide  language  interfaces  because  we 
are  providing  Outlook  in  42  languages." 
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Thf  messaging  group  also  set  up  a 
testing  lab  with  22  sers'ers  that  mir¬ 
rored  Avcniis'  messaging  and  domain 
controller  lopolog)'.  before  beginning 
initial  deployments 

Exchange  Phases  In 

Aveniis  upgraded  the  connector 
servers  before  migrating  user  servers. 
The  user  serser  rollout  involved  in¬ 
stalling  new  Windows  2000  rrvachines 
with  Exchange  5.5.  moving  the  messag¬ 
ing  databases  over  and  then  upgrading 
the  svstem  to  Exchange  2000. 

But  first  the  mcwiaging  team 
used  E.xchange  2000's  Active 
Directory-  Connector  t  ADC ) 
utility  to  import  information 
about  user  mailbox  accounts  and  pub¬ 
lic  folders  from  the  5.5  servers  into  Ac¬ 
tive  Directory.  The  ADC  also  helps 
synchronize  mailbvix  objects  with  lega¬ 
cy  Exchange  5.5  servers.  Avenils  also 
had  to  set  up  the  Site  Replication  Ser¬ 
vice  (SRS).  which  emulates  an  Ex¬ 
change  5.5  directory,  to  allow  interop¬ 
erability  between  the  Exchange  2000 
and  Exchange  5.5  directories. 

Unlike  Exchange  5.5.  E.xchange  2000 
requires  a  one-to-one  mapping  of  mail¬ 
box  and  user  accounts,  and  since  ADC 
imports  only  the  first  mailbox  it  en¬ 
counters.  redundant  accouni.s  had  to 
be  eliminated  beforehand.  Creagh  says. 
Rwting  those  out  was  a  time-consum¬ 
ing  process  for  administrators,  he  adds. 

The  first  pilot,  in  Kansas  City.  Mo,, 
consolidated  4.000  mailboxes  on  nine 
sen-ers  to  four  machines  running  Ex¬ 
change  2000.  Exchange's  ability  to  sup¬ 
port  up  to  20  mes.sage  databases  per 
server  enabled  the  consolidation,  as  did 


i  installing  more  powerl'ul  server  hard¬ 
ware  and  moving  the  message  databas¬ 
es  onto  a  Hewlett-Packard  Co.  SAN- 
works  storage-area  network  (SAN). 

Lix-a!  backup-and-resiore  time  re¬ 
quirements  and  backup  capabilities 
dict.afed  the  message  database  design 
at  each  site.  Creagh  says.  "We  size  it  to 
meet  their  SLA  Iservicc-level  agree- 
menij,"  he  says.  "If they  have  an  old, 
junky  tape  drive,  we  size  it  for  that.”  In 
a  few  larger  sites  with  a  SAN.  faster 
servcrless  backup  technologies  can  sup¬ 
port  larger  databases,  but  most 
message  databases  don't  e.xceed 
20MB  to  25MB.  Creagh  says. 

Aventis  .specified  basic  serv¬ 
er  configurations,  but  it  didn't 
make  sense  to  specify  server  brands  or 
models  globally.  Hansmann  says.  Aven¬ 
tis  avoided  E.vchange  2000’s  clustering, 
despite  high  uptime  requirements. 

“Any  errors  that  have  been  cata¬ 
strophic  have  been  data  corruption," 
Creagh  says.  "Once  you’ve  got  ixirrup- 
tion.  who  cares  if  yini've  got  cluster¬ 
ing?"  To  optimize  performance,  Aventis 
also  n*quires  mailbox  servers  to  sepa¬ 
rate  the  operating  system  and  Exchange 
binaries  from  log  files  and  data  by  plac¬ 
ing  them  on  separate  physical  drives. 

Initially,  even  sites  that  had  entirely 
cut  over  to  Exchange  2000  still  had  to 
use  SRS  and  its  less  efficient  remote 
pnKedure  call  mechanism  to  replicate 
directory  information  with  downstream 
Exchange  2000  sen'crs.  This  wasted 
handwHdth  over  slower  WAN  links. 

Working  with  Microsoft,  Aventis 
found  a  way  to  let  the  connector 
servers  handle  SRS  replication  for  the 
user  servers  at  Exchange  2000  sites. 


Migration 

Le^ns 

■  Ctean  the  data.  Ayoid  enportlrio 
Exchange  S.S  kiiotrallon  until  redun¬ 
dant  and  dsabied  accounts  an 
removed. 

■  Own  Active  Oiractory.  As  (he 
reposMoty  for  Exchange  2000  user 
inailbcixes.  diaIrtMion  tea  and  01^ 
ettonnalioci.  the  fnaasaging  group 
shoiAd  be  intimileiy  involvad  in  Ac¬ 
tive  Dlreciiyy  design  end  deployment 

■  Train  Exchange  adminiatralors. 
Adrnnistfaiiiie  tools  daectfytninipu- 
late  ActM  Okeclory.  Administrators 
need  to  understand  (he  Implcations. 

■  Move  quickly.  MaMaiiiino  a 
mixed  Exchange  5.5/2000  enwon- 
meni  is  ctxnplicaled  and  costly. 


allowing  the  sites  to  use  Exchange 
2000’s  support  for  the  more  efTicicni 
Simple  Mail  Transport  Protocol. 

Aventis  also  deployed  an  Exchange 
Conferencing  Server  in  Frankfurt  to 
coordinate  online  meetings.  But  get¬ 
ting  multicast  video  support  required 
the  messaging  group  to  work  with  the 
networking  group  to  configure  the 
routers  worldwide  —  a  process  that 
HH)k  about  a  year  to  complete.  Hans¬ 
mann  .sa>'s  biuh  instant  messaging  and 
data  conferencing  are  used  often,  but 
he  laments  that  many  users  view  the 
video  option,  with  its  tiny  image  win¬ 
dows.  as  more  of  a  toy. 

Also,  he  says  the  NeiMeeiing  client 
software  relics  on  D^mamic  Link  Li¬ 
braries  on  his  Windows  2000  worksta¬ 
tions  that  don't  support  echo  cancella¬ 
tion  or  background-noise  reduction. 
Windows  XP  supports  it.  but  not 
with  Conferencing  Server,  according 
to  Microsoft. 

Examining  the  Trade-offs 

Although  Exchange  2(X>0  is  faster  and 
more  reliable,  the  benefits  of  the  up¬ 
grade  are  mostly  invisible  to  end  users. 
Han.smann  says.  Administrators,  how¬ 
ever.  have  seen  a  big  difference.  Once 
the  last  Exchange  5.5  server  cuts  over. 
Exchange  2000  will  run  in  peer  mode, 
allowing  more  granular  control.  The 
global  mes.saging  group  will  take  ex¬ 
clusive  control  of  the  connector  server 
infr3.structure  and  delegate  user  server 
chores  to  local  administrators. 

Hansmann  says  it  will  be  a  relief  to 
do  away  with  the  ADC  and  SRS  config¬ 
urations.  "You  need  to  maintain  5.5  and 


2000  simultaneously  with  ADC  con¬ 
nectors  and  (SRS],  w'hich  is  not  easy." 
he  says.  "Running  these  environments 
beside  each  other  is  costly,  so  it's  bet¬ 
ter  to  upgrade  fast.” 

User  server  administrators  now 
must  use  two  tools  Instead  of  one:  Ac¬ 
tive  Directory  and  a  new  version  of  Ex¬ 
change  System  Manager  (ESM).  says 
Sigrid  Vogel,  a  systems  engineer  in 
Frankfurt.  She  likes  the  new  version  of 
the  ESM's  Tracking  Tool,  which  is 
much  faster,  but  she  says  it  lacks  some 
search  criteria  that  were  available  in 
the  previous  version.  For  example,  it 
can't  track  messages  coming  in 
through  one  specific  connector,  she 
says.  Ed  Wu.  Microsoft's  product  man¬ 
ager  for  Exchange,  says  you  can  track 
by  sender,  recipient  message  ID.  time 
and  server. 

Vogel  says  Aventis  also  experienced 
pmblems  with  Exchange  message 
transfer  agents  failing  over  Exchange 
5,5  to  2000  connections  during  peak 
traffic  loads.  Now  servers  are  moni- 
I  tored  and  restarted  once  memory  us¬ 
age  reaches  a  certain  threshold.  "Mi¬ 
crosoft  has  dom.*  work  to  mitigate  this 
issue  in  Exchange  2003,"  says  Wu.  but 
a  fix  Lsn  t  available  for  Exchange  2(X)0. 

Maurene  Grey,  an  analyst  at  Gartner 
Inc.  in  Stamford.  Conn.,  pegs  the  cost 
of  an  Exchange  2000  migration  at  $150 
to  S200  per  user,  not  including  the  Ac¬ 
tive  Directory  migration.  But  Hans¬ 
mann  say's  his  costs  fell  far  short  of 
that.  Server  hardware  upgrades  were 
due  anyway,  he  says,  and  by  stretching 
out  the  migration  timeline,  he  was  able 
to  complete  part  of  the  rollout  using 
existing  staff.  He  estimates  that  the  to¬ 
tal  project  cost,  includii^  incremental 
labor,  will  be  $2  million  to  S.3  million, 
or  about  $36  to  $55  per  seat. 

Hansmann  measures  the  success  of 
the  consolidated  system  by  its  ability 
to  handle  extreme  message-volume 
growth.  In  a  14-monih  period  that  end¬ 
ed  in  October  2002,  monthly  e-mail 
message  volume  doubled  to  39  million, 
or  3.7TB  of  data.  Aveniis  is  already  plan¬ 
ning  on  Exchange  Server  2003  upgrade 
to  leverage  that  product's  backup-snap¬ 
shot  capability  and  more  efficient  re¬ 
mote-access  capabilities.  "I  need  these 
kinds  of  improvements  to  stay  ahead  of 
my  e-mail  traffic."  Hansmann  says.  I 
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AVENTIS’  EXCHANGE  2000  SERVER  TOPOLOGY 

Aventts'  three-tier  Eichioge  server  topology  indudes  routing  ‘cormeetor  servor"  hubs  (gold), 
beckfaone  hubs  (red)  and  loeai  melMx  "user  servers’ (orwigeX  By  dosely  mirroring  its 
WAN  and  Active  Oiroctory  topology,  tho  design  eNows^noariy 
instantanaous  e-ineii  daivery  worWwWe.  the  company  says. 
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The  messaging  group  also  set  up  a 
testily  lab  with  22  servers  that  mir* 
rored  Aventis'  messaging  and  domain 
controller  topology,  before  beginning 
initial  deployments. 

Exchange  Phases  In 

Avends  upgraded  the  conzrector 
servers  before  migrating  user  servers. 
The  user  server  rollout  involved  in- 
stallii^  new  Wmdows  2000  machines 
with  Exchange  S3,  moving  the  messag¬ 
ing  databases  over  and  then  upgrading 
the  system  to  Exchange  2000. 

But  first  the  messaging  team 
used  Exchange  2000’s  Active 
Directory  Connector  (ADC) 
utility  to  import  information 
about  user  nrailbox  accounts  and  pub* 
tic  folders  from  the  S3  servers  into  Ac¬ 
tive  Directory.  The  ADC  also  helps 
synchronize  mailbox  objects  with  lega¬ 
cy  Exchange  S3  servers.  Aventis  also 
bad  to  set  up  the  Site  Replication  Ser¬ 
vice  (SRS).  which  emulates  an  Ex¬ 
change  S3  directory,  to  allow  interop¬ 
erability  between  tire  Exchange  2000 
and  Exchange  S3  directories. 

Unlike  Exchange  S3,  Exchange  2000 
requires  a  one-to-one  mapping  of  mail¬ 
box  and  user  accounts,  and  since  ADC 
imports  only  the  first  mailbox  it  en¬ 
counters,  redundant  accounts  had  to 
be  eliminated  beforehand,  Creagh  says. 
Rooting  those  out  was  a  time-consum¬ 
ing  process  for  administrators,  be  adds. 

The  first  pilot,  in  Kansas  City.  Ma. 
consolidated  4JM0  mailboxes  on  nine 
servers  to  four  machines  running  Ex¬ 
change  2000.  Exchange’s  ability  to  sup¬ 
port  up  to  20  message  databases  per 
server  envied  the  consolidation,  as  did 


installing  more  powerful  server  hard¬ 
ware  and  moving  the  messs^e  databas¬ 
es  onto  a  Hewlett-Packard  Co.  SAN- 
works  storage-area  network  (SAN). 

Local  backup-and-restore  time  re¬ 
quirements  and  backup  capabilities 
dictated  the  message  database  design 
at  each  site,  Creagh  says.  "We  size  it  to 
meet  their  SLA  [service-level  agree¬ 
ment)."  he  says.  "If  they  have  an  old, 
junky  tape  drive,  we  size  it  for  that."  In 
a  few  larger  sites  with  a  SAN,  faster 
serverless  backup  technologies  can  sup¬ 
port  larger  databases,  but  most 
message  databases  don’t  exceed 
20MB  to  25MB,  Creagh  says. 

Aventis  specified  b^c  serv¬ 
er  configuratioos.  but  it  didn't 
make  sense  to  specify  server  brands  or 
models  globally.  Hansmann  says.  Aven¬ 
tis  avoided  Exchange  2000’s  clustering, 
despite  high  uptime  requirements. 

"Any  errors  that  have  been  cata¬ 
strophic  have  been  data  corruption," 
Creagh  says.  “Once  you’ve  got  corrup¬ 
tion.  who  cares  if  you’ve  got  cluster¬ 
ing?"  To  c^timize  performance.  Aventis 
also  requires  mailbox  servers  to  sepa¬ 
rate  the  operating  system  and  Exchange 
binaries  ffom  log  files  and  data  by  plac¬ 
ing  them  on  separate  physical  driv^ 
Initially,  even  sites  that  had  entirely 
cut  over  to  Exchange  2000  still  had  to 
use  SRS  and  its  less  efficient  remote 
procedure  call  mechanism  to  replicate 
directory  information  with  downstream 
Exchange  20(X)  servers.  This  wasted 
bandwidth  over  slower  WAN 
Working  with  Microsoft.  Aventis 
found  a  way  to  let  the  connector 
servers  handle  SRS  replication  for  the 
user  servers  at  Exchange  2000  sites, 


allowing  the  sites  to  use  Exchange 
2000's  support  for  the  more  efficient 
Simple  Mail  Transport  Protocol 

Aventis  also  deployed  an  Exchange 
Conferencing  Server  in  Frankfurt  to 
coordinate  online  meetings.  But  get¬ 
ting  multicast  video  support  required 
the  messaging  group  to  work  with  the 
networking  group  to  configure  the 
routers  worldwide  —  a  process  that 
took  about  a  year  to  complete.  Hans¬ 
mann  says  both  instant  messa^g  and 
data  conferencing  are  used  often,  but 
he  laments  that  many  users  view  the 
video  option,  with  its  tiny  image  win¬ 
dows.  as  room  of  a  toy. 

Also,  he  says  the  NetMeeting  client 
software  relies  on  Dynamic  Link  li¬ 
braries  on  his  Windows  20<>0  worksta¬ 
tions  that  don't  support  echo  cancella¬ 
tion  or  background-noise  reductioiL 
Windows  XP  supports  it.  but  not 
with  (Conferencing  Server,  according 
to  Microsoft. 

Examining  the  Trade-ofis 

Although  Exchange  2000  is  foster  and 
more  reliable,  the  benefits  of  the  up¬ 
grade  are  mostly  invisible  to  end  users. 
Hansmann  says.  Administrators,  how¬ 
ever.  have  seen  a  big  difference.  Once 
the  last  Exchange  S3  server  cuts  over, 
Excfaan^  2000  will  run  in  peer  mode, 
allowing  more  granular  control.  The 
global  messaging  group  will  take  ex¬ 
clusive  control  of  the  coruiector  server 
infrastructure  and  delegate  user  server 
chores  to  local  administrators. 

Hansmann  says  it  will  be  a  relief  to 
do  away  with  the  ADC  and  SRS  config¬ 
urations.  Tou  need  to  maintain  S3  and 


2000  simultaneously  with  ADC  con¬ 
nectors  and  [SRS],  which  is  not  easy," 
be  says.  “Running  these  environments 
beside  each  other  is  costly,  so  it’s  bet¬ 
ter  to  upgrade  fast." 

User  server  administrators  now 
must  use  two  tools  instead  of  one:  Ac¬ 
tive  Directory  and  a  new  version  of  Ex¬ 
change  System  Manager  (ESM),  says 
Sigrid  Vogel,  a  systems  engineer  in 
Frankfurt  She  likes  the  new  version  of 
the  ESM’s  'Dracking  Tool  which  is 
much  foster,  but  she  says  it  lacks  some 
search  criteria  that  were  available  in 
the  previous  version.  For  example,  it 
can't  track  messages  coming  in 
throxtgh  one  specific  connector,  she 
says.  Ed  Wu.  Microsoft’s  product  man¬ 
ager  for  Exchange,  says  you  can  track 
by  sender,  recipient  message  ID.  time 
and  server. 

Vogel  says  Aventis  also  experienced 
problems  with  Exchange  message 
transfer  agents  foiling  over  Exchange 
S3  to  2000  connections  during  peak 
traffic  loads.  Now  servers  are  moni¬ 
tored  and  restarted  once  memory  us¬ 
age  reaches  a  certain  threshold.  "Mi¬ 
crosoft  has  done  woric  to  mitigate  this 
issue  in  Exchange  2003,”  says  Wu,  but 
a  fix  isn't  available  for  Exchange  2000. 

Maurene  Grey,  an  analyst  at  Gartner 
Inc.  in  Stamford,  C^on,.  pegs  the  cost 
of  an  Exchange  2000  migration  at  $150 
to  $200  per  user,  not  inchiding  the  Ac¬ 
tive  Directory  migraHon.  But  Hans¬ 
mann  says  his  costs  fell  for  short  of 
that.  Server  hardware  upgrades  were 
due  anyway,  he  says,  and  by  stretching 
out  the  migration  timeline,  he  was  able 
to  complete  part  of  the  rollout  using 
existing  staff.  He  estimates  that  the  to¬ 
tal  project  cost,  including  incremental 
labor,  will  be  $2  million  to  S3  million, 
or  about  $36  to  $SS  per  seat 

Hansmann  measures  the  success  of 
the  consolidated  system  by  its  ability 
to  handle  extreme  message-volume 
growth.  In  a  14-inontb  period  that  end¬ 
ed  in  October  2002,  monthly  e-mail 
message  volume  doubled  to  39  milUoa 
or  3.7rB  of  data.  Aventis  is  already  plan¬ 
ning  an  Exchange  Server  2003  upgi^e 
to  leverage  that  product’s  backup-snap- 
shot  capability  and  more  efficient  re¬ 
mote-access  capabilities.  1  need  these 
kinds  of  improvements  to  stay  ahead  of 
my  e-mail  traffic,"  Hansmann  says.  > 
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The  Unwired  Office 
starts  inside. 


intel.com 


Introducing  Inter  Centrino"  mobile  technology. 
The  new  generation  of  laptop  technology 
engineered  to  unwire  your  business. 


Until  now,  the  promise  of 

_  a  truly  wireless  workforce 

has  been  just  that:  a 
promise.  Intel*  Centrino™ 
tkmSSS?  mobile  technology  delivers 
on  that  promise  with  unprecedented 
levels  of  mobility  for  your  users 
and  an  easier  deployment  for  you. 
Intel  is  working  with  other 
industry  leaders  to  make 
wireless  networking  not  only 
reliable,  but  secure.  Intel  Centrino 
mobile  technology  is  compatible 
and  validated  with  Cisco  enterprise 
access  points.  And  Intel  continues 
to  work  closely  with  VeriSign, 
Check  Point  Software  and 
other  leading  technology  companies 
to  optimize  security  solutions. 
The  unwired  office  starts  inside. 
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Ir  WAS  AN  i>NLiNF  retailer’s  worst 
nightmare.  Most  customers  of  the 
Louisville  Slugger  Museum’s  on¬ 
line  gift  shop  arrived  by  way  of 
Hillerich  &;  Bradsby  Co.'s  home 
page  for  its  famous  bats.  wunv. 
sluggtT.com.  But  last  July.  st>meone  up¬ 
loaded  the  wrong  file  to  the  company's 
Web  site,  and  for  si.\  weeks,  all  at¬ 
tempts  to  go  to  the  gift  shop  from  the 
Louisville  Slugger  home  page  were 
redirected  to  another  company's 
Web  site. 

The  glitch  txvurred  in  mid-)uly. 
End-of-month  reports  showed  a  re¬ 
duced  activit>'  level,  but  the  company 
attributed  that  to  other  causes.  Anoth¬ 
er  month  passed  before  it  became 
clear  that  the  online  shop  was  getting 
no  home-page  referrals.  "When  we  ran 
the  .August  reports  in  September,  we 
realized  that  u'ww.slugger.com  didn't 
send  us  any  referrals."  s3>-s  Christo¬ 
pher  Caudhill.  a  developer  at  Hillerich 
&  Bradsby.  "We  knew  we  had  a  prob¬ 
lem  then." 

Caudhill  needed  something  that 
would  alert  him  to  problems  faster  and 
eventually  decided  to  use  IntegriTea 


trom  TeaLeaf  Technology  Inc.  in  San 
Francisco.  The  software  tracks  Web 
site  activity  and  sends  an  e-mail  .alert 
when  trafilc  falls  below  a  set  thresh¬ 
old.  It  also  captures  and  logs  end-user 
sessions,  compares  them  to  established 
norms  for  response  times  and  other 
criteria,  and  reports  system  errors  and 
user  errors  such  as  log-in  failures. 

IntegriTea  is  part  of  a  growing  fami¬ 
ly  of  tcKils  that  help  Web  site  managers, 
systems  administrators,  application 
developers,  help  desks  and  database 
administrators  design,  develop,  lest, 
monitor,  troubleshoot  and  tune  Web- 
ba.sed  systems.  And  Hillerich  &  Brads¬ 
by  isn't  the  only  ettmpany  that  sees  a 
need.  According  to  a  study  last  year  by 
research  firm  Newport  Group  Inc.  in 
South  Yarmouth.  Mass.,  the  number  of 
companies  that  continuously  monitor 
systems  performance  rose  from  just 
in  1999  to  last  year  (see  chart). 

Performance  monitoring  and  tuning 
software  originated  in  the  mainframe 
world  decades  agi>.  More  recently, 
tools  have  sprung  up  specifically  for 
today's  multitier,  highly  distributed 
e-commerce  systems.  TTie  most  com¬ 


How  often  does  your  company  review 
reported  data  to  measure  performance? 


-Rarely/never 


prehensive  of  these  monitor  perfor¬ 
mance  and  information  flows  at  three 
levels;  the  Web  server  front  end.  the 
midticr  application  server  and  the 
database  back  end. 

Some  also  go  outside  the  firewall, 
using  geographically  distributed  soft¬ 
ware  agents  on  remote  client  machines 
to  look  through  the  eyes  of  end  users 
and  report  problems  with  local  Inter¬ 
net  service  providers  and  third  parties 


such  as  credit  card  authorization 
systems.  These  can  be  set  up  either  to 
simply  monitor  page-access  times  or  to 
run  elaborate  scripts  to  see.  for  exam¬ 
ple,  how  long  it  takes  to  rent  a  car 
online. 

Users  such  as  Caudhill  praise  these 
tools  for  their  ability  to  quickly  identi¬ 
fy  —  and  to  some  c.\tent  diagnose  — 
problems,  from  slow  responses  and 
system  crashes  to  network  outages  and 


Web  performance  monitoring  tools  can  track  activity 
from  end  to  end,  but  setup  and  management  can  be 
difficult  and  costly.  By  Gary  H.  Anthes 

WEB  sins  TAKE 
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How  often  does  your  company  review 
reported  data  to  measure  performance? 


IT  WAS  AN  ONLINE  retailer's  worst 
nightmare.  Most  customers  of  the 
Louisville  Slugger  Museum's  on- 
Hne  gift  shop  arrived  by  way  of 
Hiilerich  &  Bradsby  Ca's  home 
page  for  its  famous  bats.  www. 
siitggercom.  But  last  July,  someone  up* 
loaded  the  wrong  fUe  to  the  company's 
Web  site,  and  for  six  weeks,  all  at¬ 
tempts  to  go  to  the  gift  shop  from  the 
Louisville  Slugger  home  page  were 
redirected  to  another  company’s 
Web  site. 

The  glitch  occurred  in  mid*July. 
End-of*roonth  reports  showed  a  re¬ 
duced  activity  level,  but  the  company 
attributed  that  to  other  causes.  Anoth¬ 
er  month  passed  before  it  became 
clear  that  the  online  shop  was  getting 
no  home-page  referrals.  "When  wre  ran 
the  August  r^>orts  in  September,  we 
realized  that  www.siugger.com  didn’t 
send  us  any  referrals.”  says  Christo¬ 
pher  CaudhiU,  a  developer  at  Hiilerich 
&  Bradsby.  “We  knew  we  had  a  prob¬ 
lem  then.” 

CaudhiU  needed  something  that 
would  alert  him  to  problems  foster  and 
eventually  decided  to  use  IntegriTea 


from  TeaLeaf  Technolc^  Inc.  in  San 
Francisco.  The  software  tracks  Web 
site  activity  and  sends  an  e-mail  alert 
when  trafiTic  falls  below  a  set  thresh¬ 
old.  It  also  captures  and  logs  end-user 
sessions,  compares  them  to  estabUshed 
norms  for  response  times  and  other 
criteria,  and  reports  system  errors  and 
user  errors  such  as  log-in  faUures. 

IntegriTea  is  part  of  a  growing  fami¬ 
ly  of  tools  that  help  Web  site  managers, 
systems  administrators,  application 
developers,  help  desks  and  database 
administrators  design,  develop,  test, 
monitor,  troubleshoot  and  tune  Web- 
based  systems.  And  HiUerich  &  Brads¬ 
by  isn’t  the  only  company  that  sees  a 
need  Accordir^  to  a  study  last  year  by 
research  Hrm  Newport  Group  Inc.  in 
South  Yarmouth.  Mass.,  the  number  of 
companies  that  continuously  monitor 
systems  performance  rose  from  just 
6%  in  19W  to  53%  last  year  (see  chart). 

Performance  monitoring  and  tuning 
software  originated  in  the  mainframe 
worid  decat^  aga  More  recently, 
tools  have  sprung  up  specifically  for 
today’s  multitier,  highly  distributed 
e-coi^erce  systems.  The  most  com¬ 


prehensive  of  these  monitor  perfor¬ 
mance  and  information  flows  at  three 
levels:  the  Web  server  front  end,  the 
midtier  appUcation  server  and  the 
database  back  end. 

Some  also  go  outside  the  flrewaU, 
using  geographically  distributed  soft¬ 
ware  agents  on  remote  client  machines 
to  look  through  the  eyes  of  end  users 
and  report  problems  with  local  Inter¬ 
net  service  providers  and  third  parties 


such  as  credit  card  authorization 
systems.  These  can  be  set  up  either  to 
simply  monitor  page-access  times  or  to 
run  elaborate  scripts  to  see,  for  exam¬ 
ple,  how  long  it  takes  to  rent  a  car 
online. 

Users  such  as  CaudhiU  praise  these 
tools  for  their  ability  to  quickly  identi¬ 
fy  —  and  to  some  extent  diagnose  — 
problems,  ftxim  slow  responses  and 
system  crashes  to  network  outages  and 
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[Performance 
tools]arenot 
simple,  and 
they  are  not  cheap. 

TIM  TAIBOT.  CK).  PHH  UdkL 


user  errors.  But  they  caution  that  the 
software  generally  isn’t  cheap  or  easy 
to  use  and  is  no  substitute  ft>r  having 
experienced  systems  people  on  staff. 


record  that  and  give  us  the  sudstics. 
That’s  really  hard  to  duplicate  with  in- 
house  scripts." 

In  addition  to  spotlighting  problems, 
San  Mateo,  Cali£-based  Keynote  al¬ 
lows  REI  to  do  ad  hoc  performance 
testing.  "I  can  put  in  a  URL  —  any  page 
at  any  site  —  and  it  will  tell  me  exactly 
how  long  each  part  of  the  page  takes." 
Ketcbuffl  says.  In  doing  that.  Keynote 
acts  as  a  development  tool  allowing 
REI  to  test  the  effects  of  Web  page 
changes  before  they’re  put  into 
production. 


Agents  Are  Watching 

Lastminute.com  PLC's  Web  sites  re¬ 
ceive  some  SO  million  page  views  per 
month.  ’The  London-based  seller  of 
discount  travel  and  entertainment  tick¬ 
ets  uses  subscription  services  from 
Gomez  Inc.  in  Waltham,  Mass.,  to 
watch  the  performance  of  its  three-tier 
architecture  in  two  UX  data  centers. 
Gomez  also  monitors  the  telecommu¬ 
nications  services  that  bring  in  Last- 
minute.com  users  from  around  the 
world  and  the  third-party  services, 
such  as  flight  reservation  systems,  for 
which  Ia8tminute.com  acts  as  a  portal 

Gomez  has  software  agents  on  PCs 
in  the  12  countries  where  Lastminute.- 
com  does  business.  At  specified  inter¬ 
vals  —  every  15  minutes,  say  —  agents 
at  20  locations  pt^  a  half-dozen  or  so 
lastminute.com  Web  addresses  to  test 
for  end-to-end  response  dine. 

Lastininute.com  also  uses  a  "trans¬ 
actional  service*  from  Gomez  that 
automatically  executes  a  script  that 
mirrors  an  entire  user  sessioa  For  ex¬ 
ample,  it  runs  through  a  hotel  booking 
once  per  hour,  says  Brendon  CoweU, 
global  technical  operations  manager  at 
Lastminutexom. 

“With  the  reports  you  get  back  from 
Gomez,  you  can  drill  down  and  isolate 
faults  —  at  the  networit  level  applica¬ 
tion  level  or  whatever.”  be  says.  “With¬ 
out  something  like  this,  identifying  the 
source  of  the  problem  would  be  very, 
very  tricky." 

Every  2,5  minutes,  software  agents 
maintained  by  Keynote  Systems  Inc  go 
shopping  at  RELcom  and  REI-outlet.- 
com.  the  online  stores  for  Recreational 
Equipment  Inc  in  Kent,  Wash.  Located 
around  the  country,  the  agents  execute 
a  five-p^  script  that  includes  search¬ 
ing  for  a  product,  putting  it  in  a  shop¬ 
ping  basket,  entering  address  and  c^- 
it  c^  information  and  so  on. 

"If  they  get  two  &Uures  in  rive  min¬ 
utes,  it  beeps  me,”  says  Rod  &tchum, 
system  arcUtect  at  REL  “And  they 


through  millions  of  gas-receipt 
records,  so  a  two-minute  response 
may  be  very  acceptable." 

PHH  supplements  the  Mercury 
products  with  more  placform-specir>c 
tools  that  can  drill  dw'n  to  a  finer  lev¬ 
el  of  detail  For  example,  if  Topaz  says 
a  Windows  NT  server  is  slow.  PHH 
uses  a  product  from  NetlQ^Corp.  in 
San  Jose  to  dig  out  the  details.  Talbot 
say^  PHH  could  have  integrated  all  of 
its  performance  tools  but  decided  that 
doing  so  wouldn't  deliver  enough  val¬ 
ue  to  justify  the  effort. 

Despite  the  help  they  give,  perfor¬ 
mance  tools  "are  not  simple,  and  they 
are  not  cheap."  Talbot  says.  "You  can’t 
just  say.  ’Oh.  a  couple  of  weeks  to  write 
scripts  and  we  are  done.'  You  have  to 
involve  the  business  to  understand 
v.'hat's  truly  imponant  to  them.  We've 
been  evolving  this  for  years. 

“There  are  other  tools  that  are  much 
simpler,  and  they  are  priced  according¬ 
ly.”  Talbot  adds.  "But  you  get  what  you 
pay  for."  I 
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Getting  Al  the  Numbers 

Ketcbum  points  out  that  external 
agent-based  performance  monitors 
may  spotlight  problems  that  aren't 
under  the  direct  control  of  REI,  such 
as  an  Internet  provider  whose  service 
is  down  or  slow.  But  the  performance 
summaries  can  be  useful  udien  negoti¬ 
ating  with  Internet  providers,  he  says. 

“Having  the  backup  numbers  is  very 
handy,”  Ketchum  says.  “It's  like  ndien 
you  go  to  buy  a  car  and  you  have  all 
the  prices  printed  out.  You  can  say, 
Tou  can’t  fool  us  anymore.’  “ 

But  the  benefits  go  beyond  simple 
perfbnnance  summaries.  Testing  the 
response  time  of  a  Web  page  b  useful 


but  it's  more  important  to  have  a  moni¬ 
toring  tool  that  can  simulate  an  entire 
user  session,  says  Tun  Talbot,  CIO  at 
PHH  Arval  The  Hunt  Valley.  Md.- 
based  subsidiary  of  Cendant  Corp. 
manages  fleets  of  vehicles  for  corpo¬ 
rate  clients  and  has  several  Web  sites, 
including  one  for  customers.  PHH  uses 
the  LoadRunner  testing  tool  and  the 
Topaz  performance  monitor  from  Mer¬ 
cury  Interactive  Corp.  PHH  worked 
with  Sunnyvale,  Calif-based  Mercury 
to  write  more  than  50  scripts  to  cap¬ 
ture  "the  user  experience,”  Talbot  says. 

The  perfonnance  goals  used  by 
these  products  must  be  carefully  cho¬ 
sen  to  match  the  expectations  of  users 
as  well  as  processing  realities,  Talbot 
says.  ”It  might  take  one  to  t%vo  minutes 
to  run  a  rqiort,"  he  explains,  “but  the 
same  report  used  to  take  two  to  three 
weeks  to  receive,  h  might  be  going 


32 


CiffTBiNU  lprir.2M 


TEcmnioeY 


w.computerworld.com 


CRM  With  a 
Family  Touch 

MyFamily.com  turns  to  Rig htNow  for  a  self-service 
system  that  reduces  staffing  needs  and  waiting  time 
for  customers.  By  Linda  Rosencrance 


Myfamily-com  INC.,  an  online 
genealogy  service  that  con¬ 
nects  Emilies  with  their  his¬ 
tories  and  one  another,  was 
beginning  to  feel  the  pinch  of  its  own 
success  last  year.  Providing  top-notch 
customer  service  was  becoming  in¬ 
creasingly  expensive  because  the  num¬ 
ber  of  subscribers  to  its  Web  sites  bad 
doubled  each  year  since  1999.  accord¬ 
ing  to  Jared  Richards,  call  center  man¬ 
ager  at  the  Provo.  Utah-based  compa¬ 
ny.  Launched  in  1997.  MyFamily.com  is 
on  track  to  fmtsh  this  year  with  L6  mil¬ 
lion  customers,  be  says. 

The  risii^  number  of  customers 
meant  that  the  number  of  e-mail  in¬ 
quiries  the  company  received  would 
likely  rise  beyond  the  2.000  to  5.000 
already  arriving  daily  —  and  that  the 
costs  associated  with  customer  sup¬ 
port  would  go  up.  says  Richards. 

“In  order  to  handle  that  amount  of 
e-mail  within  48  hours,  we  bad  to  em¬ 
ploy  15  full-time  equivalents  just  to  an¬ 
swer  e-mail.*  Richvds  says.  And  com¬ 
pany  ofitcials  knew  they  would  need 
far  more  employees  to  handle  the  in¬ 
creased  volume  of  e-maiL 
To  save  money  and  improve  cus¬ 
tomer  service  in  the  midst  of  such 
growth.  MyFamilycom  in  August  2002 
deployed  eServioe  Center,  a  self-service 
CRM  application  from  RightNow 
Technologies  Inc.  in  Bozeman.  Mont. 

Before  MyFamilyxom  started  using 
RightNow's  technology,  live  customer 
support  personnel  handled  queries  via 
e-maiL  But  as  the  business  grew,  My- 
Family.coni.  like  other  online  compa¬ 
nies.  began  to  see  the  berteftts  of  lu¬ 
ting  customers  find  immediate  an¬ 
swers  to  their  questions  via  the  Web  24 
hours  a  day.  seven  days  a  week.  Those 
benefits  include  eliminating  the  need 
for  customer  service  representatives  to 
answer  routine  questions,  freeing  them 
to  respond  to  higher-level  inquiries. 
RightNow’s  eService  Center  is  an 
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online  CRM  tool  that  allows  compa¬ 
nies  to  manage  customer  service  prob¬ 
lems  with  limited  human  interactioa 
It  integrates  a  single  self-learning 
knowledge  base  across  all  customer 
communication  channels,  including 
the  Web.  e-mail,  chat  and  telephone. 

EService  Center  also  iiKludes  ana¬ 
lytics  and  the  ability  to  measure  cus¬ 
tomer  satisfaction  through  surveys, 
says  Greg  Gianforte,  RightNow's  CEO. 

RightNow’s  eService  Center  makes 
it  possible  for  customers  to  find  an¬ 
swers  to  questions  on  their  own  be¬ 
cause  it  uses  technology  that  automati¬ 


cally  brings  the  most  requested  and 
relevant  information  to  the  (op  of  the 
knowledge  base,  says  Gianforte.  In 
MyFamily’s  case,  the  knowledge  base 
includes  more  than  400  prewritten  re¬ 
sponses  to  common  questions. 

Although  RightNow  hosts  eService 
Center  on  its  own  platform  for  90%  of 
its  clients,  includii^  MyFajnily.com.  it 
does  support  Windows  NT,  SQL  Serv¬ 
er,  Linttx,  Oracle  and  MySQL 

Richards  says  that  while  MyFamily.- 
com  primarily  wanted  to  ctirb  its  costs, 
it  also  wanted  to  be  able  to  ajiswer  cus¬ 
tomer  e-mails  faster  its  goal  was  to  re¬ 
spond  to  them  in  less  than  a  day. 

The  results  of  using  eService  Center 
speak  for  themselves,  says  Richards. 
MyFamity.com  now  needs  the  equiva¬ 
lent  of  Just  five  full-time  staffers  to 
respond  to  e-mail:  and  all  customer 
questiotis  are  answered  within  24 
hours.  Within  30  days  after  MyFamiiy- 
.com  implemented  RightNow's  system, 
the  number  of  e-mails  that  employees 
had  to  answer  personally  fell  30%.  says 
MyFamilyxoro  spokeswoman  Mary 
Kay  Evans. 

After  adding  up  the  salaries  and  ben- 
eff  (s  that  would  have  been  paid  to  cus¬ 
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tomer  service  representatives  and 
comparing  that  figure  with  the  cost  of 
the  RightNow  license.  Richards  says 
MyFamily.com  experienced  an  ROI  of 
260%  in  nine  months;  the  company  has 
declined  to  release  financial  details. 

A  RightNow  spokeswoman  says  cus¬ 
tomers  typically  purchase  a  two-year 
license,  which  can  range  from  $35,000 
to  more  than  $100,000.  However,  large, 
multisite  implementations  cost  well 
over  $1  million,  she  says. 

Knowledge  Transfer 

Before  moving  to  eService  Center.  My* 
Family.com  used  software  from  Menlo 
Park,  Calif.-based  Kana  Inc.  for  e-mail 
manj^ment  and  had  built  its  database 
of  responses  using  Kana's  system.  But 
the  process  wasn't  completely  auto¬ 
mated.  “When  someone  e-mailed  us  a 
question,  we  would  find  an  answer 
that  matched  their  question  and  send 
it  back  to  them,*  Richards  says. 

Richards  says  MyFamilyxom  wanted 
a  less  labor-intensive  system  —  and 
one  that  would  serve  customers  more 
effectively.  Company  officials  liked 
eService  Center  because  of  the  way  it 
integrated  existing  content. 

“My  team  and  RightNow  took  the 
canned  messages  we  had  already  creat¬ 
ed  and  ported  them  over  into  R^t- 
Now,  and  within  24  hours  we  had  it 
switched  over."  Richards  says.  “With 
RightNow,  the  customer  goes  to  the 
Web  site  and  types  in  a  question  and  is 
presented  with  an  accurate  answer  on¬ 
line  in  a  few  seconds,  so  they  don't 
have  to  wait  for  an  e-mail." 

Richards  says  MyFamily.com  looked 
at  other  vendors'  products  before  se¬ 
lecting  RightNow’s  offering,  but  he  de¬ 
clined  to  name  the  other  contenders. 
He  says  the  company  didn't  even  con¬ 
sider  creatii^  its  own  software  be¬ 
cause  it  wanted  something  it  could  put 
in  place  immediately. 

“Since  we  implemented  RightNow. 
we  haven't  had  any  issues  with  stabili¬ 
ty  or  uptime."  Richards  says.  “Every 
day  we're  continuing  to  build  up  our 
database  of  answers." 

Bruce  Temkin,  an  analyst  at  Cam¬ 
bridge.  Mass. -based  Forrester  Research 
Inc.,  says  a  self-service  application  tike 
RightNow  that  provides  companies 
with  an  online  knowledge  base  makes 
it  easy  for  customers  to  find  answers 
to  their  questions.  And  self-service  is 
imponani  to  a  company  like  MyFami- 
ly.com  that  uses  the  Internet  as  its  pri¬ 
mary  sales  channel  “When  a  prospect 
is  online  and  interested,  the  last  thing 
you  want  to  do  is  have  them  leave  your 
site  without  some  information  that 
they  need,"  says  Temldn.  I 


John  Paridnson  (5  senior 
vicepresiden/  and  chief 
technologist  for  the 
Americas  region  of  Cap 
Gemini  Ernst  &  Young 
LT^.  Lie  in  Chicago.  He 
recently  told  Computer- 
world’s  Gary  H.  Anfhes 
why  he  thinks  fT  out¬ 
sourcing  and  agent-based 
systems  will  become  ubiquitous,  why 
collaboration  software  will  not.  and  why 
data  warehouses  and  operating  systems 
might  disappear  altogether. 

What's  ths  hjtm  of  outsourcing?  Ten 

years  out,  there  will  be  less  than  100 
companies  in  the  woiid  that  run  their 
own  IT.  Everyone  else  will  move  more 
and  more  of  their  IT  into  what  looks 
like  a  utility  model,  some  kind  of  buy- 
it-by-the-drink  consumption  OMxieL 
There  are  some  things  that  have  to 
happen  for  this  to  catch  on  big-time. 
Security  and  confidentiality  of  data 
have  to  be  addressed  in  a  fundamental 
fashion.  But  that’s  happening. 

How  wM  this  utilty  modd  WDffc?  The 
drive  will  be  to  outsourced  shared 
instances  —  where  there  is  one  copy 
of  the  sofHvare  but  20  companies  on  it 
The  vendors  have  figured  out  that  one- 
instance  company  licensing  is  over  be¬ 
cause  companies  won't  pay  that  kind 
of  money  anymore.  So  you  take  what 
SAP  does  and  break  it  into  a  series  of 
services,  then  each  company  simply 
pays  for  the  services  it  consumes.  All 
the  big  guys  are  moving  their  product 
architectures  in  that  direction,  and  it 
will  take  one  to  three  years  to  com¬ 
plete  that  transition. 


What's  coming  in  aiformation  security? 
Vendors,  after  a  decade  of  pretending 
it  wasn't  a  problem,  have  finally  fig¬ 
ured  out  it’s  not  enoi^  to  put  patches 
out:  you’ve  got  to  make  them  realty 
easy  to  apply.  We'll  see  more  tautomat- 
ed]  enforcement  and  simpler  adminis¬ 
tration.  And  there  will  be  role-based 
security;  when  I  show  up  and  an¬ 
nounce  myself,  wdiat  I  get  to  do  is  de¬ 
pendent  on  the  role  I’m  currently  play¬ 
ing.  Hiis  becomes  essential,  because  as 


the  complexity  of  technolog)-  increas¬ 
es.  and  as  the  range  of  tasks  that 
knowledge  workers  do  increases,  it's 
going  to  be  too  hard  for  you  to  remem¬ 
ber  who  you  are  supposed  to  be  for  the 
next  10  minutes.  I  see  a  ftve-year  hori¬ 
zon  to  get  all  the  pieces  in  place. 

What  are  the  pieces?  These  things  vi'ill 
be  in  the  operating  system,  and  there 
will  be  security  APIs  available  to  any 
application.  There  will  be  standards, 
like  SAML  (Security  Assertion  Markup 
Language],  that  applications  must  con¬ 
form  to  or  they  won't  install  into  your 
data  center. 

What  wW  the  arrival  of  ultradense.  very 
cheap  data  storage  moan?  We  are  within 
three  to  five  years  of  having  a 
[portable]  device  that  could  hold 

everything  that  you’d  ever  want.  _ 

Then  you  don't  need  central¬ 
ized  storage.  You  could  have  all 
business  data  basically  portable, 
walking  around  in  a  huge,  bil¬ 
lion-node  peer-to-peer  network.  - 

There's  a  strategy  called  LOCKSS 
[lots  of  copies  keep  stuff  safe]  for  do¬ 
ing  backups.  The  theory  is.  if  there  are 
enough  copies  in  the  network,  you  can 
always  re-create  what  you  want  if  you 
lose  it  With  a  billion  nodes,  and  every 
node  storing  a  couple  of  terabytes,  it 
would  be  relatively  easy  to  do  away 
with  those  ^>ecialtzed  data  manage¬ 
ment  architectures  that  we  have  today. 

Whifs  coining  in  data  nMng  and  anaiyt- 

ka?  With  federated  [distributed]  data 
management,  we  stop  needing  data 
warehouses.  We  have  instead  embed¬ 
ded  analytics,  so  applications  simply 
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The  Ins  and 
Outs  of  IT 

Avisionary  looks  to  new  technology  models. 
ByG^H.Ajrithes 


use  transaction  data  on  the  fly.  Over 
the  next  two  or  three  years,  well  see 
3  lot  of  emphasis  aviay  from  conven¬ 
tional  data  warehousing  and  toward 
the  embedded  analytics,  toward  on- 
demand  business  intelligence. 

WW  agent 'based  systems  based  on  com¬ 
plexity  theory  become  commonpiece?  Yes. 
within  five  or  six  years,  because  we  are 
at  the  limit  of  what  we  can  architect 
reliably  in  a  large,  complex  enterprise. 
There  are  too  many  moving  parts.  If 
you  try  to  design  it  deterministically, 
you  discover  you  can't  predict  ail  its 
behavior.  This  will  [make]  obsolete 
almost  all  the  architecture  design 
knowledge  now  in  use. 

How  wil  operating  systems  evolve?  One 

scenario  is  they  will  go  away,  shrink 

_  and  simply  become  the  DNA 

of  agents  —  much  simplified 
and  localized.  The  other  sce¬ 
nario  is  the  opposite  —  that 
they  will  sub^me  almost 
everything  else  and  become 
the  service-provisioning  platform.  The 
service-oriented  guys  are  going  for  the 
latter,  and  complexity  theory  and  ^nt 
guys  are  going  for  the  former,  so  we 
will  probably  end  up  with  a  mixture. 

Whafs  coming  in  groupwara/colaboration? 
We  are  a  long  way  from  having  a 
worthwhile  collaboration  technology. 
The  problem  is,  the  technologies  are 
attempting  to  make  us  work  in  patterns 
we  wouldn’t  normally  choose.  The 
benchmark  for  utility  is  the  telephone. 
After  voice,  e-mail  gives  you  about  95% 
of  the  benefit  of  connection.  And 
c-mail  plus  instant  messaging  gives 
you  about  99%.  The  next  piece  is  realty 
hard.  And  the  only  reason  we  are  even 
thinkif^  about  it  b  because  we  have  so 
perverted  e-mail  and  IM  with  nobc 
that  we  are  now  convincing  ourselves 
there  must  be  a  better  way. 

How  inigM  loobtic*  systems  fvolva?  The 
problem  with  ERP  systems  b  that  they 
focus  on  the  enterprise,  while  the  real 
problem  b  interenterprise.  If  you  can 
make  things  vrork  really  well  across 
the  players  in  a  supply  chain,  you  can 
produce  huge  operating-cfftciericy  im¬ 
provements,  and  that's  where  agents 
come  in.  Supply  chain  systems  will  be¬ 
come  much  more  responsive.  They 
will  know  who’s  in  the  store,  what  they 
are  likely  to  buy  next,  what  ^ould  be 
on  the  trucks  in  transit,  what  should  be 
in  the  distribution  centers  and  what 
should  be  ordered  —  all  adjusted  in 
close  to  real  time.  We’ll  have  the  tech¬ 
nologies  to  do  that  within  five  years.  I 


CRMWitha 
Family  Touch 

MyFamily.com  turns  to  RightNow  for  a  self-service 
system  that  reduces  staffing  needs  and  waiting  time 
for  customers.  By  Linda  Rosencrance 


rAMin  I  OM  i\«  .  an  onlinL’ 
gcnvaUitn  son  icc  that  con¬ 
nects  families  with  their  his¬ 
tories  and  one  another,  was 
beginning  to  feel  the  pinch  of  its  own 
success  last  year.  Providing  top-noieh 
customer  s«.Tviee  was  becoming  in- 
creasing!)  expensive  because  the  num¬ 
ber  of  subscribers  to  its  Web  sites  had 
doubled  each  year  since  1900.  accord¬ 
ing  to  fared  Richards,  call  center  man¬ 
ager  at  the  Prov’t*.  L'tah-based  compa¬ 
ny.  Launched  in  I'W.  MyFamUv.com  i.s 
t*n  track  to  finish  this  year  with  U>  mil¬ 
lion  customers,  he  says. 

The  rising  number  of  customers 
meant  that  the  number  of  e-mail  in- 
gutries  the  company  rcceised  would 
like!)  rise  beyond  the  2.000  to  5.000 
already  arriving  daih-  —  and  that  the 
Ct>st.s  associated  with  customer  sup¬ 
port  would  go  up.  says  Richards. 

“In  order  to  handle  that  amount  of 
e-mail  w  ithin  48  hours,  we  had  to  em¬ 
ploy  15  full-time  equisalents  ju.st  to  an¬ 
swer  e-mail.”  Richards  says.  .And  com¬ 
pany  otTicials  knew  they  would  need 
far  more  employees  to  handle  the  in¬ 
creased  volume  of  e-mail. 

Tti  save  money  and  improve  cus¬ 
tomer  scrx  ice  in  the  midst  of  such 
growth.  MyFamiiy.com  in  August  2002 
deploy  ed  eServicx*  Center,  a  self-service 
t:RM  application  from  RightNow 
Technologies  Inc.  in  Bozeman.  Mont. 

Before  MyFamily.com  started  using 
RightNow'.s  technology,  live  customer 
support  personnel  handled  queries  via 
e-mail.  But  as  the  business  ga’w;  My- 
Faroily.com.  tike  other  online  compa¬ 
nies.  began  to  see  the  benefits  of  let¬ 
ting  customers  find  immediate  an¬ 
swers  to  their  questions  via  the  W'eb  24 
hours  a  day.  seven  days  a  week.  Those 
herH'fiis  include  eliminating  the  need 
for  customer  service  representatives  to 
answer  routine  quc'stions.  freeing  them 
to  respond  to  higher-level  inquiries. 

RightNow "s  eScrvicc  Center  is  an 


L’HftLifS'E  MyFamiiy.com. an 
online  genealogy  service,  needed  a 
way  to  handle  burgeoning  customer 
e-mail  to  cut  costs  and  improve 
customer  service 

•  N  The  company  decided  to 
use  a  self-service  CRM  app  Irani 
RightNow  Technologies  that  allows 
round-thc-ctoch  service  to  customers 
and  incorporates  MyFamily’s  rixisting 
hr>owledge  base. 


j  online  CRM  tool  that  allows  comp.a- 
I  nics  to  manage  customer  service  prob- 
I  iems  with  limited  human  interaction. 

1  It  integrates  a  single  self-learning 
j  knowledge  base  across  ail  customer 
I  communication  channels,  including 
J  the  Web.  e-mail,  chat  and  telephone. 

ESeix'ice  Center  also  includes  ana- 
I  lyrics  and  the  ability  to  measure  cus¬ 
tomer  saiUfaciion  through  surveys. 

I  says  Greg  Gianforte.  RightNow's  CEO. 

I  RightNow’s  eScrvice  Center  makes 
it  possible  for  customers  to  find  an- 
s-wers  to  questions  on  their  own  be¬ 
cause  it  u.ses  technology  that  automati¬ 


cally  brings  the  most  requested  and 
relevant  information  to  the  top  of  the 
knowledge  base,  says  Gianforte.  In 
MyFamily’s  case,  the  knowledge  base 
includes  more  than  400  prewritten  re¬ 
sponses  to  common  questions. 

Although  RightNow  hosts  eService 
Center  on  its  own  platform  for  90"<i  of 
its  clients,  including  MyFamiiy.com.  it 
does  support  Windows  NT.  SQL  Ser\’- 
er.  Linax,  Oracle  and  MySQL 

Richards  says  that  while  MyFamiiy.¬ 
com  primarily  wanted  to  curb  its  costs, 
it  also  wanted  to  be  able  to  answer  cus¬ 
tomer  e-mails  faster;  its  goal  was  to  re¬ 
spond  to  them  in  less  than  a  day. 

The  results  of  using  eSei  v  itt-  Center 
speak  for  themselves,  says  Richards. 
MyFamiiy.com  now  needs  the  equiva¬ 
lent  of  just  five  full-time  stafTers  to 
respond  to  e-mail:  and  all  customer 
questions  are  answered  within  24 
htHirs.  Within  .^0  days  after  MyFamiiy¬ 
.com  implemented  RightNow's  system, 
the  number  of  e-mails  that  employees 
had  to  answer  personally  fell  says 
MyFamily.c'om  spokeswoman  Mar)- 
Kay  Evans. 

After  adding  up  the  salaries  and  ben¬ 
efits  that  would  have  been  paid  to  cus¬ 


tomer  service  representatives  and 
comparing  that  figure  with  the  cost  of 
the  RightNow  license.  Richards  says 
MyFamiiy.com  experienced  an  ROl  of 
I  260%  in  nine  months;  the  company  h.-ts 
I  declined  to  release  financial  details. 

I  A  RightNow  spokeswoman  says  cus- 
I  tomers  typically  purchase  a  two-year 
I  license,  which  can  range  from  S35.000 
j  to  more  than  SIOO.OOO.  However,  large. 

I  multisite  implementations  cost  well 
over  SI  million,  she  says. 

Knowledge  Transfer 

Before  moving  to  eService  Center.  My- 
I  Family.com  used  software  from  Menlo 
.  Park.  Calif.-based  Kana  Inc.  for  e-mail 
management  and  had  built  its  database 
of  responses  using  Kana’s  system.  But 
the  process  wasn't  completely  auto¬ 
mated.  "When  someone  c-mailed  us  a 
question,  we  would  find  an  answer 
that  matched  their  question  and  send 
it  back  to  them."  Richards  says. 

Richards  says  MyFamiiy.com  wanted 
a  less  labor-intensive  system  —  and 
one  that  would  ser\'e  customers  more 
effectively.  Company  otTicials  liked 
eService  Center  because  of  the  way  it 
integrated  existing  content. 

“My  team  and  RightNow  took  the 
canned  messages  we  had  already  creat¬ 
ed  and  ported  them  over  into  Right- 
!  Now.  and  within  24  hours  we  had  it 
switched  over,"  Richards  says.  “With 
RightNow,  the  customer  goes  to  the 
Web  site  and  types  in  a  question  and  is 
presented  with  an  accurate  answer  on¬ 
line  in  a  few  seconds,  so  they  don't 
have  to  wait  for  an  e-mail." 

Richards  says  MyFamiiy.com  looked 
at  other  vendors'  products  before  se¬ 
lecting  RightNow's  offering,  but  he  de¬ 
clined  to  name  the  other  contenders. 

He  sa)’s  the  company  didn’t  even  con¬ 
sider  creating  its  own  software  be¬ 
cause  it  wanted  something  it  could  put 
in  place  immediate!)'. 

“Since  we  implemented  RightNow. 
wc  haven't  had  any  issues  with  stabili¬ 
ty  or  uptime.'*  Richards  says.  “Every 
day  we're  continuing  to  build  up  our 
database  of  answers." 

Bruce  Temkin.  an  analyst  at  Cam¬ 
bridge.  Mass.-based  Forrester  Research 
Inc.,  says  a  self-service  application  like 
RightNow  that  provides  companies 
with  an  online  knowledge  base  makes 
it  easy  for  customers  to  find  answers 
to  their  questions.  And  self-service  is 
imponant  to  a  company  like  MyFami- 
ly.com  that  uses  the  Internet  as  its  pri¬ 
mary  sales  channel.  "When  a  prospect 
is  online  and  interested,  the  last  thing 
you  want  to  do  is  have  them  leave  your 
site  without  some  information  that 
they  need."  sa)'s  Temkin.  I 


John  Parkinson  is  senior 
vice  presidenf  tind  chivf 
'  fcchno/o^’isr /or  fhi* 
j  Americas  region  o/f.'ap 
I  Gemini  Ernst  &  Voung 
as.  LLC  in  Chicago.  He 
recenfly  to/d  Computer- 
world  s  Gary  H.  .■Anthe.s 
why  he  think-s  IT  out¬ 
sourcing  and  agent-based 
systems  \eiil  become  ubiquitous,  why 
co/iaborafion  software  will  not.  and  why 
data  warehouses  and  operating  systems 
might  disappear  altogether. 

What's  the  future  of  outsourcing?  Ten 

years  out.  there  will  be  less  than  100 
companies  in  the  world  that  run  their 
own  IT.  E\'er>'one  else  w  ill  move  more 
and  more  of  their  IT  into  what  kK>ks 
like  a  utility  model,  some  kind  of  buy* 
it-by-the-drink  consumption  model. 
There  are  some  things  that  have  to 
happen  for  this  to  catch  on  big-time. 
Security  and  confidentiality  of  data 
have  to  be  addix'ssed  in  a  fundamental 
fashion.  But  that's  happening. 

How  will  this  utility  model  work?  The 
drive  will  be  to  outsourced  shared 
instances  —  where  there  is  one  copy 
of  the  software  but  20  ct>mpanies  on  It. 
The  vendors  have  figured  out  that  one- 
instance  company  licensing  is  over  be¬ 
cause  companies  won't  pay  that  kind 
of  money  anymore.  So  you  take  what 
SAP  does  and  break  it  into  a  scries  of 
services,  then  each  company  simply 
pays  for  the  services  it  consumes.  All 
the  big  guys  are  moving  their  product 
architectures  in  that  direction,  and  it 
will  take  one  to  three  years  to  com¬ 
plete  that  transition. 


What's  coming  in  information  security? 
Wndors.  after  a  decade  of  pretending 
it  wasn’t  a  pr^tblem.  have  finally  fig¬ 
ured  out  it's  not  en<»ugh  to  put  patches 
out:  you’ve  got  to  make  them  really 
easy  to  apply.  We’ll  see  more  |autt>mat- 
ed  I  enforcement  and  simpler  adminis¬ 
tration.  And  there  will  be  role-bused 
security:  when  1  shtm  up  and  an¬ 
nounce  myself,  what  1  get  to  do  ts  de¬ 
pendent  on  the  role  I’m  currently  pla\  - 
ing.  This  becomes  essential,  because  as 
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the  c«’mple\ity  oftechnologv  increas¬ 
es,  and  as  the  range  of  tasks  th.ii 
knowledge  wt>rkers  do  increases,  it's 
going  to  be  loo  hard  Inr  you  remem¬ 
ber  who  \oii  arc  supposed  to  K-  for  the 
next  10  minutes.  1  si.-c  .i  fi\e->e.ir  liori- 
/on  to  get  all  the  pieces  in  pl.ice. 

What  are  the  pieces?  I  hese  things  w  ill 
be  in  the  operating  s\stem.  .inJ  there 
will  be  securitx  .-XPls  avuil.tble  to  .m\ 
application.  There  will  be  standards, 
like  SAMI.  iSecuritv  .\ss<  rtion  Markup 
Language),  that  applications  must  con¬ 
form  to  or  the\  wi>ii‘t  install  into  \t’»r 
datacenter 

What  will  the  arrival  of  ultradense.  very 
cheaj)  data  storage  mean?  Wc  are  within 
three  to  five  years  of  having  a 
(pt>rt.'ible)  device  that  c»>uld  hold 

everything  that  you’d  ever  want.  _ 

Then  you  didn’t  need  central¬ 
ized  storage.  Vou  ci>uld  h:t\e  all 
business  data  basicallv  portable, 
walking  anmnd  in  a  huge,  bil¬ 
lion-node  pocr-to-pecr  network. 

TheiX’'s  a  sirategv  called  I.OCKSS 
(lots  of  copies  keep  stuff  .safe!  for  do¬ 
ing  backups.  ITie  the«»r\'  is.  if  there  are 
enough  copies  in  the  network,  you  can 
aluays  re-create  what  you  want  if\ou 
lose  iL  With  a  billion  mtdes.  and  everv 
mxle  storing  a  cimple  of  terabytes,  it 
would  be  relatively  easv  to  do  away 
with  those  spi-cialized  data  manage¬ 
ment  architectures  that  we  have  t»»djy. 

What’s  coming  in  data  mining  and  analyt¬ 
ics?  With  federated  (distributed  I  data 
management,  we  stop  needing  Jala 
warehouses.  We  have  instead  embed¬ 
ded  analytics,  so  applications  simply 


The  Ins  and 
Outs 

A  visionary  looks  to  new  technology  models. 
ByGaryH.Anthes 


use  tr.ms.iciti«n  d.u.i  «•»  the  ll\.  iHei 
the  ne\i  iwn  or  three  >ears.  we  ll  se.- 
.1  lot  >>)  emphasi'-  .iw.w  from  conven 
tiiMul  d.tt.t  w.trehoiistng  .ind  low.ud 
the  entbcJded  .tn.iK  ttcs.  tow.irJ  on- 
Jeni.mj  bllMiless  intelligetue 

Will  agent-based  systems  based  on  com¬ 
plexity  theory  become  commonplace’’  't'es. 
wtthiti  five  or  si\  ve.trs.  becjtw  v\e  .^r^ 
.It  the  limit  o|  vvh.ii  we  e.m  .trchitect 
reh.iblv  in  .t  large,  eomplcv  enterprise. 
Tliere  are  too  m.inv  moving  parts  If 
vou  trv  to  design  it  deterministicallv, 
vou  disctwer  ton  i.in’i  predict  all  its 
behavior.  I  his  w  ill  |m.»ke)  obsolete 
.liimist  all  the  .irchiiecuire  design 
ktuwv  ledge  now  inuv. 

How  will  operating  systems  evotve?  ( >ni' 
sivnario  is  they  will  g»* awav. slirink 
and  simply  K\onie  the  I'N.V 
of  agents  —  much  simplified 
and  l«*eali/ed-  The  other  sce¬ 
nario  is  the  oppersite  —  that 
thev  w  ill  subsume  almost 
ev  cryihing  else  and  become 
the  seTvice-pr«*visi«»mng  platform.  I  he 
service-oriented  guv  s  are  going  for  the 
latter,  and  complexitv  theorv  and  agent 
guys  are  going  for  the  former,  so  we 
will  probablv  emd  up  with  a  mixture 

What's  coming  in  groupware/collaborabon? 
We  are  a  long  way  from  having  a 
worthwhile  eolkiboration  teehnology. 
lllc  problem  is.  the  lechnol«>gies  are 
attempting  to  make  us  work  in  patterns 
we  wouldn't  nornuilly  cIuhisc.  The 
benchmark  for  utility  is  the  telephone. 
After  voice,  e-mail  gives  u*u  about 
of  the  benefit  of  ctinncetion.  And 
e-mail  plus  instant  messaging  gives 
vou  about  W...  The  next  piece  is  realiv 
hard.  And  the  only  re.iM»n  we  are  even 
thinking  aKmi  it  is  Kvause  we  tuivv  so 
perverted  e-mail  and  IM  w  ith  noise 
that  wc  are  now  convincing  ourselves 
there  must  be  a  better  way, 

I  How  might  logistics  systems  evolve?  The 
;  problem  with  MRP  sv stems  is  that  they 
fiK*uson  the  enterprise,  while  the  real 
j  problem  is  inierenierprise.  If  you  can 
make  things  work  re.nlly  well  acMss 
;  the  players  in  .i  supply  chain,  you  can 
produce  huge  operaiing-eflVicmcy  im¬ 
provements.  and  that’s  where-  .ige*nts 
come  in.  Supply  chain  systems  will  K-- 
'  come  much  nu»fe  resp«»nsivc.  'They 
'  will  know  whv*’s  in  the  store,  wliat  they 
arc  likely  to  buy  next,  w  hat  shimtd  be 
on  the  trucks  in  transit,  what  should  K' 
in  the  distribution  centers  and  what 
should  be  ordered  —  all  aJiusteJ  in 
ehvw  It)  real  time.  We’ll  have  the  tcch- 
noiogk's  to  do  that  within  fivv  years.  I 
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Directory  Glitch  Trips 


interopeiabifity  issues  derail  an  attempt  to 
use  an  LOAP-based  directory  server  fw 
global  authentication.  By  Thurman 


I  HAVE  HAD  MIXED  success 
with  a  project  to  provide 
two-^Ktor  authentication 
access  to  our  critical  Unix 
and  Wiodo\^’S  NT  servers.  We 
want  to  set  up  a  system  that 
requires  employees  to  use 
SecurtD  tokims  for  adminis¬ 
trative  access  to  our  produc¬ 
tion  Solaris,  Windows  NT  and 
Windows  2000  servers,  but  we 
have  run  into  a  few  snags. 

The  fust  problem  occurred 

on  the  Sola^  side.  - 

Our  company  uses  ^ 

Novell  Inc.*s  eDirec-  SrlJ 

tory  for  our  corporate 
directory  services.  It's 
based  on  the  Light¬ 
weight  Directory 
Access  Protocol 
(LDAP).  But  as  wc  learned, 
LDAP  compliance  doesn't 
guarantee  interoperability. 

We  wanted  to  conTtgure  all 
of  our  Solaris  servers  to  point 
to  the  eDirectory  server  for 
authentication  (uedentials.  Wc 
considered  using  special  soft¬ 
ware  called  the  Pluggable  Au¬ 
thentication  Module  (PAM) 
from  Melbourne.  Australia- 
based  PADL  Software  Pty. 

This  set  of  open-source 
libraries  enables  LDAP  com¬ 
munication  between  Solaris 
2.8  and  eDirectory.  But  be¬ 
cause  of  a  lack  of  support 
from  PADL  and  concerns 
about  compatibility  with 
future  patches  and  software 
updates,  we  decided  to  stick 
with  a  supported  methodol¬ 
ogy.  In  retrospect,  perhaps  we 
should  have  t^en  the  ri^ 

The  Solaris  distribution  in- 
dudes  a  native  LDAP  client 
that’s  supposed  to  work  with 
ocher  LDAP-compliant  direc¬ 
tory  servers.  In  theory,  when 
an  administrator  logs  in.  eDi¬ 
rectory  should  compare  the 
log-in  information  against  its 


database.  If  the  account  has 
the  proper  authorization,  cre¬ 
dentials  and  a  valid  SecurlD 
tokea  the  eDirectory  server 
should  grant  the  administrator 
access  to  the  resource.  This 
setup  should  woik  well,  since 
it  lets  us  avoid  maintaining 
local  accounts  on  every  Solaris 
system.  We  also  could  have 
used  Solaris'  Network  Infor¬ 
mation  Service,  but  we  steered 
away  from  it  because  of  known 
-  vulnerabilities. 

Since  our  com- 
II I  pany  is  using  eDi¬ 

rectory.  it  made 
sense  to  use  the 
same  repository  and 

_  add  an  authorization 

mechanism  to  pro¬ 
vide  centralized  access  control 
to  our  production  environ¬ 
ment,  which  consists  of  300- 
plu.s  Solaris  servers.  Right 
away,  we  ran  into  a  problem 
with  the  Solaris  2.8  native 
LDAP  client.  Apparently,  it 
has  problems  negotiating  with 
eDirectory.  We  contacted  the 
support  folks  at  Novell,  and 
they  have  confirmed  that  such 
problems  exist.  So  much  for 
standards! 

This  won't  be  a  problem 
once  we  upgrade  all  of  our 


tntheonr.when 
an  administrator 
logsin,eDirectoiy 
should  compare  the 
log-in  infonnation 
against  its 


servers  to  Solaris  9,  since  Its 
native  LDAP  client  works  fine. 
But  it's  going  to  be  at  least 
eight  months  before  we  can 
even  start  chat  upgrade.  Be¬ 
tween  now  and  then,  we  have 
few  options.  We  could  use 
Novell’s  dirXML.  a  bidirec¬ 
tional  metadirectory  data- 
sharing  service  that  wUl  sup¬ 
posedly  let  us  use  eDirectory 
to  distribute  new  and  updated 
directory  infonnation  to  our 
Solaris  servers.  But  if  we  can't 
address  the  problem  with  Nov¬ 
ell.  well  have  to  use  a  different 
LDAP  server  for  this  function. 

Netscape  (^mmunications 
Corp-’s  iPlanet  directory  server 
works  well  with  the  Solaris  2£ 
LDAP  client,  but  if  we  used 
that,  we  would  have  another 
directory  server  to  administer. 
Thb  isn't  a  big  deal  however, 
since  only  about  30  administra¬ 
tors  will  need  to  be  configured. 

The  big  issue  is  political. 

The  e-business  group  has  set 
up  its  own  iPlanet  directory 
server,  and  the  architecture 
group  has  been  trying  to  get  it 
to  switch  over  to  the  corporate 
eDirectory  standard.  If  we 
bring  up  another  instance  of 
iPlanet.  it  will  give  the  e-busi- 
ness  group  justification  to 
keep  what  it  ha.s.  So,  this  week, 
we  will  attempt  to  use  dirXML 
to  address  our  problem. 

Enter  Active  Oirec^ 

Another  problem  arose  in  our 
Windows  environment.  To 
provide  centralized  authenti¬ 
cation  within  this  environ¬ 
ment,  we  use  Microsoft's  Ac¬ 
tive  Directory,  along  with  Ter¬ 
minal  Services  for  remote  ad¬ 
ministration.  Now  we  want  to 
add  SecurlD  authentication 
for  administrator  access.  Un¬ 
der  this  scenario,  the  adminis¬ 
trator  would  launch  a  Termi¬ 
nal  Services  window  to  con¬ 
nect  to  a  production  Windows 
server.  He  would  then  submit 
his  enterprise  log-in  creden¬ 
tials  (vs.  having  a  local  ac¬ 


count  on  the  system)  and  must 
use  a  SecurlD  token  before 
gaining  access. 

We  store  the  administrator's 
credentials  within  Active  Di¬ 
rectory.  not  on  the  target  serv¬ 
er.  We  have  over  300  Windows 
servers,  including  domain 
controllers.  Exchange  e-mail 
servers  and  other  servers. 

Back  in  the  NT  4.0  Server 
days.  RSA  Security  Inc.’s  Ace 
Agent  worked  flawlessly  with 
this  configuration.  However, 
that  same  agent  won’t  work 
with  Windows  2(XX)  and  Ac¬ 
tive  Directory.  Instead.  RSA 
produced  a  ^>ecial  client 
for  Active  Directory.  We  ob¬ 
tained  a  copy,  and  everything 
seemed  to  work  fine  as  long  as 
we  were  directly  connected  to 
the  server  at  its  console.  But 
we  use  Terminal  Services  to 
access  them  remotely. 

Initially,  everything  seemed 
to  work  fine.  The  Terminal 
Services  client  connected  to 
the  remote  server,  and  up 
popped  a  log-on  dialog  box. 

We  submitted  our  user  names 
and  passwords,  pointing  to  the 
domain  for  authentication.  At 
that  point,  a  separate  dialog 
box  should  have  appeared, 
forcing  us  to  enter  our  SecurlD 
token  credentials  before  letting 
the  log-on  process  continue. 

That  didn’t  happen.  Instead, 
the  event  logs  showed  a  cer¬ 
tificate  mismatch  enx>r,  and 
we  were  unable  to  authenti¬ 
cate  to  the  server.  RSA’s  sup¬ 
port  group  confirmed  that 
this  was  a  problem  and  said 
it  was  “working  on  it."  Until 
the  problem  is  resolved,  we 
have  to  disable  two-factor 
authentication. 

If  this  is  still  a  problem  in 
a  few  weeks,  we’U  have  to  look 
at  alternative  vendors.  But 
perhaps  this  implementation 
can  be  saved.  rU  let  you  know 
how  everything  turns  out  in 
my  next  column.  I 
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Extreme  Launches 
Switch  Modules 

Ejrtmne  Networks  Inc.  in  Santa 
Clara.  CaMo  last  week  announced 
two  new  BtackOiamond  switch 
modules  based  on  its  Triumph 
chip  set  that  are  designed  to  im¬ 
prove  Gigabit  Ethernet  switching 
migration.  The  024T3  module 
has  24  copper  ports,  and  the 
G16X3  has  16  fiber  ports  for 
10/100/1000  Ethernet.  Both  scale 
up  to  360  Gigabit  Ethernet  con¬ 
nections  on  the  BlackOiamond 
6616  switch  vid  feahae  the 
T-Control  technohjgy  for  network 
traffic  management.  The  G24T3 
is  laiced  at  S12.99S.  and  the 
616X3  (S  priced  at  $13,994.  Both 
are  available  now. 


Adobe  Acrobat  6  to 
Ship  Next  Month 

Adobe  Systems  Inc.  in  San  Jose 
announced  the  upcoming  release 
of  Acrobat  6.  The  new  version 
wH  support  e-mail-based  docu¬ 
ment  review  and  change  tracking, 
be  able  to  cortsofidate  changes 
into  Word  source  documents 
and  support  public-key  infra¬ 
structure  certificates  and  digitaJ 
signatures  on  e-mailed  PDF  files. 
The  software  wfll  support  “one- 
cfick"  file  conversions  within  ap¬ 
plications  and  aggregate  multi^ 
docunent  types  into  one  PDF 
file.  Acrobat  6  wffl  ship  in  mid- 
May.  Adobe  Bements  wiM  cost 
S29.000  for  1.000  seats;  Acro¬ 
bat  Standard  and  ProfessiortaJ 
wfll  cost  $299  and  $499  per 
seat,  respectively. 


Procom  Releases 
NewNASRIers 

Procom  Technology  Inc.  in  Iroine, 
CaM..  last  week  announced  Hs 
Netforce  4000  series  of  net¬ 
work-attached  storage  (NAS)  fil¬ 
ers  with  improved  performance, 
storage  density  and  a  modular 
design.  The  new  file  servers  come 
with  a  2Gbit/sec.  Fibre  Oiannel 
bach  end  and  can  scale  to  a  ca¬ 
pacity  of  32.7TB.  The  4000  se¬ 
ries  wM  begin  shipping  tNs  quar¬ 
ter.  starting  at  $113,000. 
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IBM  Hires  Perry  Mason 


SCO  RECENTLY  FILED  a  $1  billion  lawsuit 
against  IBM.  The  most  notable  allegations 
are  that  IBM  leaked  SCO  intellectual  proper¬ 
ty  to  Linux  developers  and  that  IBM  used 
said  intellectual  property  to  make  Linux 
competitive  with  SCO  Unix  in  the  enterprise.  Accord¬ 
ing  to  SCO,  Linux  was  a  toy  operating  system  until  IBM 
“fixed"  it.  SCO  hired  David  Boies,  and  IBM  responded 
by  hiring  Cravath,  Swaine  &  Moore,  the  firm  where 
Boies  had  once  been  a  partner.  IBM  made  an  excellent 
choice,  but  I  would  have  gone  with  Perry  Mason  in¬ 
stead  —  and  not  just  because  of  my  boyhood  crush  on 
Della  Street.  I  have  a  pretty  good  idea  of  how  the  case 
would  go  with  Mason  on  the  job. 


Mason  (addressing  witness): 

Do  yi)u  swear  to  tell  the 
truth,  the  whole  truth  and 
nothing:  but  the  truth,  so 
help  you  Godzilla? 

¥fitness;  Um.  I  guess  so. 

Mason:  Please  state  your 
full  name. 

Witness;  SCO. 

Mason:  Your  /ufl  name, 
including  any  aliases  you 
may  have  used.  And  let  me 
remind  you.  you  are  under 
oath. 

SCO:  The  SCO  Group. 

Santa  Cruz  Operations. 

Caldera  International.  Caldera  Sys¬ 
tems.  Caldera  Inc..  Scoldera.  Salt  Lake 
City  Operations  and  Sugarlips. 

Mason:  Isn't  it  true  that  you  have  S4i 
many  aliases  because  you  are  a  Capri¬ 
corn.  .and  all  Capricorns  have  multiple 
personalities? 

Boies:  Obieciion!  (ioating  the  wit¬ 
ness. 

Judge:  Sustained.  You  will  refrain 
from  issues  of  multiple  personalities. 
Mr.  Thorwald. 

Mason:  That's  Mason,  your  honor. 

I'll  rephrase  the  question,  then.  Which 
name  were  you  using  when  you  pur¬ 
chased  the  Unix  inicUectual  property 
from  SCO  in  2001? 


SCO:  Caldera  Systems. 
Mason:  So  when  did  the 
SCO  name  re-emerge? 

SCO:  In  2002. 

Mason:  How  is  it  that 
you  were  able  to  afford 
this  rather  extravagant 
purchase? 

S(J0:  We  made  a  good 
bit  of  money  from  our  ini¬ 
tial  public  offering. 

Mason:  Who  made  this 
offering? 

SCO:  Uh.  I  don't  recall. 
Mason:  Isn’t  it  true  that 
it  was  the  Caldera  Systems 
IPO  that  enabled  you  to  purchase 
SCO  Unix?  1 

SCO:  1  don’t  recall. 

Mason;  Tell  me.  what  were  you  do¬ 
ing  on  the  night  in  question  in  1995? 

SCO:  I  was  purchasing  the  intellec¬ 
tual  property  rights  to  the  Unix  sys¬ 
tem  source  from  Novell. 

Mason:  It  was  SCO  that  made  this 
purchase,  wasn't  it?  What  were  you 
doing  as  Caldera? 

SCO:  1  don't  recall.  I  think  we  were 
selling  Linux  to  hobbyists. 

Mason;  Think  hard.  Mr.  SCO.  Isn’t  it 
true  that  you  coined  the  phrase  “Lin¬ 
ux  for  business"  on  the  very  same 
night?  I 


I  SCO:  1  don't  know;  it’s  possible.  Yes. 

I  I  think  so. 

'  Mason:  But  your  complaint  alleges 
that  Linux  was  inappropriate  for  busi¬ 
ness  use  until  IBM  infused  it  with 
SCO  intellectual  property.  Are  you 
saying  you  lied  to  your  customers? 

SCO  (nervous,  beginning  to  perspire): 
Yes.  No!  We  weren't  lying.  Exaggerat¬ 
ing  maybe.  Besides.  IBM  violated  its 
contract  by  donating  its  journaling 
file  system  to  Linux. . . . 

I  Mason:  You  are  referring  to  IBM  JFS. 
correct?  Is  there  any  SCO  code  in  |FS? 

SCO  (perspiring  more  heavily);  I  don't 
know.  I  don’t  recall. 

Mason:  Why  did  JFS  make  Linux 
more  appropriate  for  enterprise 
use  than.  say.  ReiserFS.  an  open- 
sourco  journaling  file  system  already 
available? 

SCO:  I  don't  know.  It  just  was. . . . 

Mason:  Isn't  it  true  that  Linux  was 
already  quite  successful  without  the 
help  of  IBM? 

S(X)  (panicking):  No.  nobody  was 
making  any  money  on  Linux  yet. . . . 

Mason:  Isn’t  it  true  that  you  made 
enough  money  to  hire  Nicholas  Petre- 
ley  to  work  on  the  nonprofit  Linux 
Standard  Base? 

SCO:  That's  a  clever  way  to  work  in 
a  disclaimer,  but. . . . 

Mason:  And  isn’t  it  also  true  that  it 
was  your  contribution  to  the  Linux 
market  and  the  money  you  made  on 
the  business  momentum  chat  allowed 
you  to  purchase  the  SCO  intellectual 
property  in  the  first  place?  Shouldn't 
you  be  suing  yourselves? 

SCO  (sobbing):  Yes,  yes.  it's  all  true! 
We  confess! 

Judge;  I  rule  in  favor  of  the  plaintiff. 
SCO.  which  has  to  pay  itself  SI  billion 
in  damages. 

Mason:  Thank  you.  your  honor. 

And  now  I'd  like  to  call  my  first  wit¬ 
ness  for  the  next  case,  Rodun  vs.  Mon¬ 
ster  Zero.  I 
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Extreme  Launches 
Switch  IModutes 
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IBM  Hires  Perry  Mason 


SCO  RECENTLY  FILED  a  $1  billion  lawsuit 
against  IBM.  The  most  notable  allegations 
are  that  IBM  leaked  SCO  intellectual  proper¬ 
ty  to  Linux  developers  and  that  IBM  used 
said  intellectual  property  to  make  Linux 
competitive  with  SCO  Unix  in  the  enterprise.  Accord¬ 
ing  to  SCO,  Linux  was  a  toy  operating  system  until  IBM 
“fixed”  it.  SCO  hired  David  Boies,  and  IBM  responded 
by  hiring  Cravath,  Swaine  &  Moore,  the  firm  where 
Boies  had  once  been  a  partner.  IBM  made  an  excellent 
choice,  but  I  would  have  gone  with  Perry  Mason  in¬ 
stead  —  and  not  just  because  of  my  boyhood  crush  on 
Della  Street.  I  have  a  pretty  good  idea  of  how  the  case 
would  go  with  Mason  on  the  job. 


Mason  (addressing  witness): 

Do  you  swear  to  teli  the 
truth,  the  whole  truth  and 
nothing  but  the  truth,  so 
help  you  Godzilla? 

Witness:  Um,  I  guess  so. 

Mason:  Please  state  your 
full  name. 

Witness:  SCO. 

Mason:  Your  full  name, 
including  any  aliases  you 
may  have  used.  And  let  me 
remind  you,  you  are  under 
oath. 

S(JO:  The  SCO  Group. 

Santa  Cruz  Operations. 

Caldera  International,  Caldera  Sys¬ 
tems.  Caldera  Inc.,  Scoldera.  Salt  Lake 
City  Operations  and  Sugarlips. 

Mason:  Isn't  it  true  that  you  have  so 
many  aliases  because  you  are  a  Capri¬ 
corn.  and  all  Capricorns  have  multiple 
personalities? 

Boles:  Obiectionl  Coating  the  wit¬ 
ness. 

Judge:  Sustained.  You  will  refrain 
from  issues  of  multiple  personalities. 
Mr.  Thorwald. 

Mason:  That's  Mason,  your  honor. 

I’ll  rephrase  the  question,  then.  Which 
name  were  you  using  when  you  pur¬ 
chased  the  Unix  intellectual  property 
from  SCO  in  2001? 


S(^  Caldera  Systems. 
Meson:  So  when  did  the 
SCO  name  re-emerge? 
SCO:  In  2002. 

Mason:  How  is  it  that 
you  were  able  to  afford 
this  rather  extravagant 
purchase? 

SCO:  We  made  a  good 
bit  of  money  from  our  ini¬ 
tial  public  offering. 

Mason:  Who  made  this 
offering? 

SCO:  Uh,  I  don’t  recall. 
Mason:  Isn't  it  true  that 
it  was  the  Caldera  Systems 
IPO  that  enabled  you  to  purchase 
SCO  Unix? 

S(^  I  don't  recall. 

Meson:  Tell  me,  what  were  you  do¬ 
ing  on  the  night  in  question  in  1995? 

SCO:!  was  purchasing  the  intellec¬ 
tual  property  rights  to  the  Unix  sys¬ 
tem  source  from  Novell. 

Mason:  It  was  SCO  that  made  this 
purchase,  wasn’t  it?  What  were  you 
doing  as  Caldera? 

SCO;  I  don't  recall  1  think  we  were 
selling  Linux  to  hobbyists. 

Meson:  Think  hard,  Mr.  SCO.  Isn't  it 
true  that  you  coined  the  phrase  "Lin¬ 
ux  for  business"  on  the  very  same 
night? 


S(^:  I  don't  know;  it's  possible.  Yes. 
I  think  so. 

Meson:  But  your  complaint  alleges 
that  Linux  was  inappropriate  for  busi¬ 
ness  use  until  IBM  infused  it  with 
SCO  intellectual  property.  Are  you 
saying  you  tied  to  your  customers? 

S(^  (nervous,  beginntog  to  perspire): 
Yes.  No!  We  weren’t  lying.  Exaggerat¬ 
ing  maybe.  Besides.  IBM  violated  its 
contract  by  donating  its  journaling 
file  system  to  Linux. . . . 

Mem:  You  are  referring  to  IBM  JFS, 
correct?  Is  there  any  SCO  code  in  JFS? 

SCO  (perspiring  more  haevily):  I  don't 
know.  I  don’t  recall. 

Mason:  Why  did  JFS  make  Linux 
more  appropriate  for  enterprise 
use  than,  say,  ReiserFS,  an  open- 
source  journaling  file  system  already 
available? 

SCO:  I  don’t  know.  It  just  was. . . . 

Mesorc  Isn’t  it  true  that  Linux  was 
already  quite  successful  without  the 
helpoflBM? 

SCO  (paniddng):  No.  nobody  was 
making  any  money  on  Linux  yet . . . 

Mason:  Isn't  it  true  that  you  made 
enough  money  to  hire  Nicholas  Petre- 
ley  to  work  on  the  nonprofit  Linux 
Standard  Base? 

SCO:  That’s  a  clever  way  to  work  in 
a  disclaimer,  but. . . . 

Mason:  And  isn’t  it  also  true  that  it 
was  your  contribution  to  the  Linux 
market  and  the  money  you  made  on 
the  business  momentum  that  allowed 
you  to  purchase  the  SCO  intellectual 
property  in  the  first  place?  Shouldn’t 
you  be  suing  yourselves? 

SCO  (sobbing):  Yes.  yes.  it’s  all  true! 
We  confess! 

JudgKl  rule  in  favor  of  the  plaintiff. 
SCO,  which  has  to  pay  itself  $1  billion 
in  damages. 

Mason;  Thank  you.  your  honor. 

And  now  I'd  tike  to  call  my  first  wit¬ 
ness  for  the  next  case.  Radon  vs.  Mon¬ 
ster  Zero.  B 
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Audit  Instead 

Columnist  John  Bony  says  fear, 
uncertainty  and  doubt  atout 
ROI  falling  short  of  its  projec- 
dons  prevent  IT  managers  from 
conducting  postinvestment 
audits  of  their  projects.  Page  43 


The  Elevator  Speech  quote  of  the  week 

^  Turn  that  30-second  #  #  Tech  jobs  were  called  the  golden 

V  elevator  ride  with  the  HH  hafTHnock.*  Once  you  got  in.  you 

CEO  into  a  great  info-  could  have  a  very  easy,  very,  very  long 

merciai  about  w^t  you  I  career  In  technology  here. 


elevator  ride  with  the 
CEO  into  a  great  info¬ 
mercial  about  \^\at  you 
and  your  IT  department 
have  done  for  business 
users.  Page  42 


oer  in  technology  here, 
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Corrmanies  that 
regularly  share 
code  fixes  and 
revisions  benefit 
from  more  sta¬ 
ble  and  reliable 
open-source 
software. 

BY  MINDA  ZETLIN 


USING  OPEN-SOURCE 

software  tike  Linux  is  a 
no-brainer  for  many 
companies,  h’s  stable 
and  can  be  fixed  easily 
if  bugs  appear,  and  you 
can’t  beat  the  price.  But  some  compa¬ 
nies  and  government  organizadons 
are  taking  their  commitment  to  open 
source  a  step  further  by  actively  pardc- 
ipadng  in  tlu  open-source  community. 

The  Linux  operating  system  is  only 
one  example  of  the  many  pieces  of 
open-source  software  currendy  in  cir- 
culadoiL  In  each  case,  (be  software’s 
license  allows  it  to  be  freely  copied 
and  distributed  by  anyone,  the  source 
code  is  available  ^ong  with  a  working 
version  of  the  software,  and  anyone 
can  modify  or  expand  on  the  code. 
Most  (^n-source  software  can  be 
downloaded  free  from  the  Internet  and 
is  maintained  and  expanded  by  a  com¬ 
munity  of  devel(^>ers  who  donate  their 
patches  and  modificadons. 

These  days,  some  corporate 
and  government  eoddes  are  getting 
into  the  act  as  weU.  When  their  devel¬ 
opers  write  patches,  modificadons 
or  new  implementations  of  open- 
source  software  for  in-house  use,  these 
organizadons  are  releasing  that  new 
code  back  to  the  open-source  com¬ 
munity.  thereby  assisting  in  the  soft¬ 


ware's  ongoing  development. 

What's  the  payoff?  It  makes  for 
better  software.  “If  we  find  a  bug  or 
a  problem,  we're  interested  in  ftxii^ 
that  problem.  We’re  also  interested  in 
not  fudi^  it  ^in  in  the  next  version,” 
explains  Robert  M.  Lefkowitz,  director 
of  open-source  strategy  at  Merrill 
Lynch  &  Ca  In  New  York. 

“If  you  download  open-source  soft¬ 
ware,  then  take  it  in-house  and  don't 
share  your  revised  code,  you  wind  up 
maintaining  your  own  separate  fork  of 
the  software  for  all  dme,"  says  Eric  Ray¬ 
mond.  president  of  the  Opra  Source 
Inidadve  (www.opensource.org),  a 
Web-based  nonpn^t  group  that  helps 
dedne  and  promote  the  open-source 
concept  “On  the  other  hand,  by  pardc- 
ipatii^  in  open-source  projects,  you 
make  sure  your  corporate  needs  have 
a  seat  at  the  table  «^en  large-scale 
design  decisimis  are  being  made.” 

This  is  why  Merrill  Lynch  sent  the 
fixes  it  made  to  open-source  software 
during  one  its  prefects  back  to  the 
open-source  community.  “The  way  a 
typical  open-source  project  works  is 
that  there  is  a  core  team  in  the  commu¬ 
nity  with  direct  access  to  modifying  the 
co^  on  hs  central  Web  site,”  Lefko¬ 
witz  says,  “People  wdio  want  to  con¬ 
tribute  to  that  community  submit  their 
code,  wdiich  is  lodced  at  by  a  core  team 
and  integrated  if  found  appropriate.” 

Creative  Archiving 

Sharing  can  be  especially  helpful  if 
your  software  ne^  are  different  from 
those  of  most  oiganizadons,  notes  Jim 
Willis,  director  of  eGovemment  at  the 
Rhode  Island  Department  tA  State. 

His  office  used  open-source  software 
to  des^  a  repository  for  the  vast  li¬ 
brary  of  cbotent,  which  ranges  from 
rules  and  reguladons  to  the  minutes 
of  municipal  meetings,  that  the  State 
Department  must  keep  on  hand  and 
make  available  to  the  general  public 
A  colleague  from  the  state  of  Hawaii 
beard  abmit  Willis’  wort;  and  e-mailed 
to  ask  his  advice  about  a  similar  proj¬ 
ect  Hiat  got  Willis  thinking  that  states 
could  help  one  another  by  sharing  the 
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ficd  IiT  spcci.il  stall'  usi-s  ■•\\V  rs'  n'»«  l-'tr  cumpanics  th.n  di'ciJc  i**  imn  in 
tr\  mji  li>  ss't  up  [an  imlini-)  n.’pt*s(t*>n  thi-  »>pi-n-suiirii'  i.iimniunit>.  ihiTf's  a 
.*1  which  stale  ajicncii-^  arc  usinjiopi'n  rij:hi  wa\  and  a  w  ronj:  w  i*»p»  aboiii 
source  and  for  what  proKvts."  he  iwns.  ii  RayntonJ  advis<-s  that  corporate  con* 
.\iih«>U):l)  tile  details  have  yet  to  he  inhtitions  to  any  open-sonree  diriviory 
ironed  out.  Wilhs  plans  lor  the  states'  should  come  ln*tn  individual  develop- 
opt-n  situree  repositorv  to  he  axaihihle  ers.  rather  than  ^eiierieally  from  the 

to  everyone,  .so  the  rest  o|  the  open-  corporation.  "In  jieneral.  people  in  the 

M'ureeeMininunny  eanhenellt  —and  open-souree  eiuntnunify  doo'lwaniio 
contribute.  The  plan  is  tor  Rhode  Is-  de.il  with  corporate  entities.  They  want 

land  and  H.twati  to  jointly  create  .ind  to  deal  w  iih  speeitle  people  whom  they 

maintain  a  Web  site  that  will  archive  c.in  reach  by  c-mail.  So  yon  need  to  .li¬ 
the  diicumetitatum  I’l'lhe  wi*rk  each  liw\  in-house  developi-rs  to  fjrow  indi- 

stafc  has  done  on  its  open-source  suit-  \  idual  reputations."  he  says, 
ware.  The  hope  is  that  in  the  future  oth-  Willis  also  advises  aytainsi  junipin}i 
er  states  will  also  Jos-ument  their  work,  in  ti'o  soon.  "Most  developers  aren’t 
•THieumenting  our  practices  with  thi’  ^  ready  to  start  i^ivinj:  kick  the  day  they 
intent  to  share  them  with  others  has  start  usin):  a  piesv  of  open-source  sott- 
ihres'fold  benefilv"  Willis  notes.  "We  ware."  he  notes,  'it  takes  a  while  to  jtei 
learn  from  the  cxps'rience  of  other  to  know  the  software  well  enough  to 

States,  we  share  development  rt*Mnirces  |  make  a  contribution."  How  long  thi.s 
with  other  states,  and  we  have  better  '  takes  varies  fmm  developer  to  dcvel- 
iniemal  documentation  of  our  »nvn  oper.  he  says.  But  he  recommends 

practices.  All  this  for  the  effort  of  .iriic*  !  waiting  until  you're  quite  ctimfonable 
ulating  our  pnictices  and  dotumeniing  w  ith  the  software  before  contributing, 
our  intern.ally  developed  software  such  ,  Loikowitz  says  source  code  is  only 
that  it  makes  si-nsi.-  to  others."  i»ne  of  several  types  of  donation  your 


comp.mv  or  its  dev  elojHTS  can  make.  rector  for  Open  Source  and  cOoi  ern- 

■V\  lot  of  open-source  communities  say  meni  at  the  Cyber  Security  Policy  and 
ihev  have  all  the  coders  they  need."  he  Research  Institute  at  Geoige  Washing- 
viy  s,  "But  they  need  docutnL-nlalion.  ton  L'niversily  in  Washington.  For  ex- 
I'hey  need  ih.ii  documentation  trans-  ample,  one  large  company  created  a 
lilted  into  l.ingtiagi*s  other  th.m  Kng-  separate  foundation  for  releasing  code 
lish.  and  they  need  graphic  artists  to  for  liability  rextsons.  I'he  mics  for  re¬ 
design  .iitd  contribute  ieons."  '  leasing  code  vary  for  different  type's  of 

l-or  all  contributions,  [.etlcow  iiz  cm-  open-source  software  Ivcause  tiiey  are 
phasi/es  the  importance  of  ereating  a  '  governed  by  many  ditTerent  types  of 
corporate  policy  with  help  from  the  licenses.  But  even  without  a  policy, 
departments  that  could  be  aft’eeled  by  there's  a  good  chance  ikat  your  compa- 
open-sourcc  involvement.  At  Merrill  ny's  programmers  will  share  their  open- 
1  yneh.  an  eight-member  Open  Source  source  work  —  and  it  might  not  evvn 
Review  Board  determines  when  con-  occur  ti>  them  to  .tsk  for  permission, 
iribiiting  is  appropriate.  "We  have  rep-  ;  A  lot  of  it  goes  on  under  the  rad.ar." 
resentatives  from  seeuriiy.  legal,  net-  Stanco  says,  "developers  spend  a  lot  of 
work,  architecture,  infra.structure  sup-  time  working  on  something,  and  it  re¬ 
port  and  purchasing."  he  says.  "We  quires  them  to  do  modifications.  Re¬ 

work  through  the  questions  of  where  cause  they  know  it's  open-source  soft- 
we  want  to  have  engagenienls  and  ware,  they'll  put  it  out  to  the  commu- 

I  where  we  have  concerns  "  nity  as  a  matter  of  course."  But.  he 

Having  a  policy  in  place  is  especially  adds,  “that's  why  we  have  such  great 
important  for  controlling  when  and  open-source  software."  I 

how  source  code  is  released,  which  - 

can  h.ive  legal  ramifications  in  terms  Zcfi/n  is  u6usine.ss  technology  writer  m 

'  of  liability  and  licensing.  s;iys  Tony  Woodstock.  .V.V,.undoiJthoro/Tele- 

Stanco.  an  attorney  and  associate  di-  commuting  for  dummies  (Wi/ey,.^0(ll>. 
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How  do  you 
determine  your 
training  needs? 

Many  companies  initialty  installed  bnuK  for 
noocriticai  uses,  but  now  ti%  operating  system 
6  frequently  being  used  lo  run  core  applica¬ 
tions  To  keep  those  applications  tunning 
sntoolNy.  IT  managers  must  provide  iheir 
staff  with  the  necessaty  Linux  expertise 
1he  chaftenge  is  determining  what  kind  of 
trainmo  wiH  work  best  in  yoif  IT  allure.  The 
toUowing  are  guestiors  IT  manager  must 
considef  when  deckfinQ  how  to  estabksh  a 
framing  program  for  Linux 

■  Should  IT  staff  attend  formal 
training  sessions?  The  wide  avatlabify 
of  onhne  self-lraining  courses  in  Linux  allows 
many  organizations  lo  skip  formal  Lmux  cours¬ 
es  and  instead  encouage  staff  to  team  the  sys¬ 
tem  on  thew  own.  Other  managers  consider 
formal  trainino  to  be  essential 


"Four  Of  five  of  om  lead  technologists  are 
currently  taking  Linux  courses.*  says  Martin 
Armitage.  senior  vice  prcsidcnl  and  head  of  the 
Global  Intraslruclure  Organization  at  Unilever  in 
London  "Those  four  oi  five  will  run  workshops 
(or  Iheir  extended  teams  of  20  or  30  people.* 
in  this  way.  he  says.  Linux  proficiency  can 
'grow  like  mushrooms’  throughout  the  organi¬ 
zation.  The  consumer-goods  gonl  plans  lo 
completely  move  rts  global  IT  infrastructure 
from  Unix  to  Linux  by  2006.  By  then.  Armitage 
says.  200  people  fnm  his  IT  staff  of  2.000  will 
be  trained  m  Linux.  As  this  work  progresses, 
the  company  plans  lo  use  certification  testing 
to  make  sure  tlial  everyone  who's  trained  is  up 
to  speed.  Because  ot  the  scale  oi  the  effort,  he 
adds,  ‘this  is  better  than  having  people  going 
out  and  self-leacfung*  (that  s.  learning  on  their 
own  from  books  and  online  courses). 

For  Barry  West.  CIO  at  the  National  Weather 
Service  (NWS)  in  Stiver  Spring.  Md..  the  ratio¬ 
nale  for  lormal  training  is  that  the  stakes  riding 
on  NWS  systems  lend  a  whole  new  meaning 
lo  Ihe  term  musswrr-cnftca/.  *We’re  using  Linux 
in  an  environment  where  lime  can  make  the 
difference  between  fife  and  death,  with  the 
weather  warnings  we  pul  out.'  he  explains. 

'The  more  om  staff  can  be  tramed.  the  better 
off  we'll  be.*  The  NWS  will  need  to  tram  more 
than  120  IT  workers  In  Linux. 

■  What  about  certification?  Many 
IT  executives  don't  require  certification  ~  at 
least  for  those  on  staff.  Working  hands-on  with 
Linux,  the  reasoning  goes,  is  a  better  test  ot 
whether  you  know  it  than  a  certiFicatlon  exam. 


But  tor  others,  having  staff  get  certified  seems 
well  worth  the  effort. 

‘You'll  be  exposed  lo  topics  you  might  not 
be  otherwise.*  says  Steve  Evans,  vice  presi¬ 
dent  of  information  services  at  PGA  Tour  Inc.  in 
Ponte  Vedra  Beach.  Ra.  It's  also  a  good  tech¬ 
nique  for  evaluating  peoi^  aaoss  their  peer 
group,  so  that  as  we  do  compensation  reviews, 
certification  will  help  us  determine  where 
there's  equity  and  inequity  * 

The  P^  Tour's  use  of  Linux  is  r^atrvely  new. 
and  so  far.  the  six  staff  members  who  work  with 
ft  have  been  ‘picking  It  up  in  bits  and  pieces.* 
Evans  says ‘As  the  project  moves  down  the 
ro»l.  we  will  need  to  do  formal 


That  transition  is  harder  lo  undertake  tor 
those  working  on  a  mainframe,  he  notes 
‘There's  more  that's  unfamiliar." 

Even  if  IT  workers  don't  know  Unix,  it  helps  if 
they  are  accustomed  to  a  command-lme  envi¬ 
ronment.  such  as  non-Windows  DOS.  says 
Dave  Ennen.  technical  support  manager  at 
Winnebago  Industries  Inc.  in  Forest  Iowa. 
'The  people  who  are  from  a  pre-GUI  envkon- 
menl  are  learning  it  faster  than  those  who've 
worked  only  in  Windows,’  he  says. 

•  Are  they  Inspired  to  learn  on 
their  own?  One  of  the  most  powerful  ben¬ 
efits  of  Linux  IS  the  innova- 


education  and  certification.’ 

Certification  can  also  re¬ 
veal  what  type  of  training 
each  staff  member  needs, 
says  Evan  Leibovitch.  presi¬ 
dent  of  Ihe  Linux  Professional 
Institute  in  Brampton.  0f>- 
tario.  ‘Sometimes  It  boils 


lion  and  enthusiasm  (hat  IT 
staff  bring  to  it.  At  Winneba¬ 
go.  for  instance,  the  move  to 
Linux  was  initiatsd  by  a  single 
staff  member  who  had  be¬ 
come  expert  at  using  the  sys¬ 
tem  and  inspired  his  col¬ 
leagues  to  learn  it  as  well. 


down  to  the  individual.’  he  notes.  "Some  of 
your  staff  writ  need  a  class,  while  others  do  tine 
reading  a  book.  Certification  measures  results: 
If  someone  studies  on  their  own  and  then  pass¬ 
es  the  test,  they  clearly  didn't  need  the  class.* 

•  What  does  your  staff  already 
know?  'Going  from  Unix  to  Linux  fi  like 
going  from  Windows  2000  to  Windows  NT,’ 
notes  Robert  M.  Lefkowitz.  director  of  open- 
source  strategy  at  Merrill  Lynch  "They  're  not 
the  same,  but  the  differences  are  much  smaller 
than  the  similarities.’ 


Ennen  says.  In  fact,  they  learned  to  use  il  on 
their  own  time,  outside  of  business  hours. 

Evans  says  PGA  Tour's  IT  staff  is  excited 
about  Linux  because  it  lets  them  do  more,  such 
as  write  software  to  help  monitor  data.  In  a  dif¬ 
ferent  environment.  Evans  says,  they  would 
have  had  to  hand  that  job  off  to  an  application 
developer.  That  ability  to  do  more  on  their  own 
gives  them  a  feeling  ^  empowerment,  he  says. 

That  enthusiasm  and  energy  for  learning  is 
more  important  than  past  experience.*  he  adds. 
‘Anytime  someone's  pumped  up  about  learning 
somediing  new.  good  things  happen.'  I 
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open-source  software  tbe>'  had  modi¬ 
fied  for  special  state  uses.  ‘*We’re  now 
tr>'ing  to  set  up  [an  online!  repository 
of  which  state  agencies  are  using  open 
source  and  for  what  projects.''  he  says. 

Although  the  details  have  yet  to  be 
ironed  out,  Willis  plans  for  the  states' 
open-source  repository*  to  be  available 
to  everyone,  so  the  rest  of  the  open- 
source  community  can  benefit  —  and 
contribute.  The  plan  is  for  Rhode  Is¬ 
land  and  Hawaii  to  jointly  create  and 
roaintain  a  Web  site  that  wQl  archive 
the  documentation  of  the  work  each 
state  has  done  on  its  open-source  soft¬ 
ware.  Tbe  hope  is  that  in  the  future  oth¬ 
er  stales  will  also  dociimcnt  their  work. 

'‘Documenting  our  practices  with  the 
intent  to  share  them  with  others  has 
threefold  benefits."  Wilis  notes.  “Wc 
learn  from  the  experience  of  other 
states,  we  share  development  resources 
with  other  states,  and  we  have  better 
internal  documentation  of  oar  own 
practices.  All  this  for  the  effort  of  artic¬ 
ulating  our  practices  and  documenting 
our  internally  developed  software  such 
that  it  makes  sense  to  others." 
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Mwy  oompmes  kiMy  instaled 
noncrittcaf  uBasc  but  rKM  the  operatic 
BfcequenllybeinoiMdtorwcomappto- 
tione.fohB^thtCTaopteatlon6njnnin^ 
snnotMit  ff  rnnaQ8(8  nitst  pro^ 
staff  wtt)  the  raKeesaty  Linux  expertise. 

The  thdhnge  b  deterniMna  IM 

iranftv  «•  Mik  bvt  In  )uur  IT  cuhfe.  The 
foiDwing  am  (pjeeSons  eech  IT  maitaoer 
ocmiite  iNhert  deddhg  how  to  est^ 
Mring  program  for  UnuL 

■  SlMiild  fT  alaff  alland  formal 
Ir^nlwg  iiMleni?Theii<de»aieiiity 
of  oniw  aaff^alnfna  Gouraes  to  Unut  alow 
mraiyfligtfiBMmkieiffDfaifniUntatcourS' 
«  art  Maad  onoouacpe  itiff  to  loam  ta  sys¬ 
tem  on  tiair  own  OVier  imragan  conardar 
tomal  Mning  to  to  eaairliiL 


Best  Practices 

For  companies  that  decide  to  join  in 
the  open-source  community,  there’s  a 
right  way  and  a  wrong  way  to  go  about 
iL  Raymond  advises  that  corporate  con¬ 
tributions  to  any  open-source  directory 
should  come  from  individual  develop¬ 
ers.  rather  than  gcncrically  from  the 
corporation.  “In  general,  people  in  the 
open-source  community  don't  want  to 
deal  with  corporate  entities.  They  want 
to  deal  with  specific  people  whom  they 
can  reach  by  e-mail.  So  you  need  to  al¬ 
low  in-house  developers  to  gniw  indi¬ 
vidual  reputations,"  he  says. 

Willis  also  advises  against  jumping 
in  too  soon.  "Most  developers  aren't 
ready  to  start  giving  back  the  day  they 
start  using  a  piece  of  open-source  soft¬ 
ware."  he  notes.  "It  takes  a  while  to  get 
to  know  the  software  well  enough  to 
make  a  contributioa"  How  long  this 
takes  varies  from  developer  to  devel¬ 
oper,  he  says.  But  be  recommends 
waiting  until  you're  quite  comfortable 
with  the  software  before  contributing. 

Lefkowitz  says  source  code  is  only 
one  of  several  types  of  donation  your 


'Rmt  w  fw  of  ora  leto  tadinalogisls  are 
ofrento  taUng  Urw  corases.’ saii^  Mar^ 
Aimtoge.  asnira  vice  pmsideni  afto  head  of  toe 
Global  Infrestnictrae  Organization 
Londoa 'TIkw  fora  or  fw  rra>  wffdiops 
for  toek  extended  toams  of  20  or  30  paopte.* 

In  tols  way,  be  says,  Lna  proficiency  can 
’gRwVatnutovDorrB’tofDughouttoeorgeni' 
raUon.  The  consumer-goods  giant  plans  to 
completoly  rmwe  Ms  gtabal  IT  infratoructrae 
from  Unix  to  Unux  by  2006.  By  toen.  Armeage 
says.  2(N)  peopto  from  Ms  IT  staff  of  2.000 wi 
to  trained  to  Untsc  As  tMs  work  progreases. 
toe  company  ptafs  to  use  certiliation  testis 
to  make  sue  that  everyone  win’s  trained  is  tg) 
to  speed  Because  of  toe  scate  of  toe  effort  to 
adtk 'tois  is  better  than  having  people  going 
out  and  seN-taaching*  (tfto  is,  feerntog  on  toak 
own  from  books  and  onfine  counes). 

For  Bany  WW.  CIO  at  toe  Itoional  Waatoer 
Serytoa(N^lnSlMerSpftog.Md,toerallo- 
nato  for  formal  totolng  is  thM  the  stalw  rkfog 
on  NWS  systaim  land  a  whole  new  meantog 
totoatoim/nteiorwifcaf'W^^ 
to  an  erwkorwTianl  vtoere  time  can  mtoe  toe 
dfferanoe  between  ie  and  deato,  with  toe 
woatoor  warnings  we  put  out*  to  flxplatos. 

*Tto  more  ora  staff  can  be  tratoad.  toe  better 
off  w«1  ba*  The  NWS  wi  need  to  train  more 
torat  120  rr  workers  In  Linux. 

■  What  about  owrlHIcratlon?  Many 
IT  eMCUtoes  doni  require  carMcafion  *  at 
least  for  toon  ito  staff.  Worktop  hanttoon  wto 
Una.  tto  raaaontoo  goal  is  a  betor  M  of 
wtatoer  you  krww  k  than  a  cartileaiion  earn. 


company  or  its  developers  can  make. 
“A  lot  of  open-source  communities  say 
they  have  all  the  coders  they  need."  he 
says.  "But  they  need  documentation. 
They  need  that  documentation  trans¬ 
lated  'mto  languages  other  chan  Eng¬ 
lish.  and  they  need  graphic  artists  to 
design  and  contribute  icons." 

For  all  contributions,  Lefkowitz  em¬ 
phasizes  the  importance  of  creating  a 
corporate  policy  with  help  from  the 
departments  that  could  be  affected  by 
open-source  involvement.  At  Merrill 
Lynch,  an  eight-member  Open  Source 
Review  Board  determines  when  con¬ 
tributing  is  appropriate.  "We  have  rep¬ 
resentatives  from  security,  legal,  net¬ 
work.  architecture.  Infrastructure  sup¬ 
port  and  purchasing,"  he  says.  "We 
work  through  the  questions  of  where 
we  want  to  have  engagements  and 
where  we  have  concerns." 

Having  a  policy  in  place  is  especially 
important  for  controlling  when  and 
how  source  code  is  released,  which 
can  have  legal  ramifications  in  terms 
of  liability  and  licensing,  says  Tony 
Stanco,  an  attorney  and  associate  di¬ 


But  fra  otosrs.  having  atofi  get  certified  seene 
weK  worth  toe  effort 

*>1X11  to  exposed  to  topics  you  rnight  not 
teotoerwis8.'$sysSleveEvaik^pre6i- 
derk  of  kilvmstion  services  to  F^  Tour  toe  in 
F^Wdra8each.Ra.1fstosoagoodtoch* 
raqus  fra  evahaltoo  people  across  took  peer 
group,  so  Ihto  05  we  do  compensation  re^dews. 
certlAcalion  wi  help  U8  dtoramtoe  where 
there's  equity  and  toequHy.* 

The  PGA  fora's  UB8  of  Linux  is  rtotowely  new. 
and  so  far,  the  sb  staff  mantoers  who  work  with 
k  hove  been ’picking  I  up  to  bib  arid  piicas.’ 
Ewfw  says ’As  toe  proftf  moves  dowri  toe 
road,  we  wi  need  to  do  formal 
education  and  cerlifictoiort’ 

Certification  can  also  re¬ 
veal  whto  type  of  training 
each  staff  member  needs. 
say5Evanltobovllch,pre5F 
denl  of  toe  Linux  ftofesaional 
tosbhjte  to  Bramplon.  On¬ 
tario.  "Somelknei  I  bols 
down  to  toe  todMduto,’ he  note. ‘Srarn  of 
your  staff  wi  need  a  dees,  wliie  otoara  do  fine 
readtog  a  book.  Certifictoon  meearaea  nsuks: 
I  someone  studies  on  took  own  and  then  peas¬ 
es  toe  tost  toey  dearly  dhtol  need  the  d^* 

■  What  doM  your  staff  tobtoady 
kiMiW?  "Gokto  Iran  IMx  to  Ltoux  Is  Na 
gotog  from  \Widoia 2000  to  VMowe  NT.’ 
notosftobertMltolawItidkectraafopen- 
sorace  tortosgy  to  Mviff  Lynd)  Ihsy're  not 
toe  same,  but  toe  dfferences  are  fiu^  smaler 
thantoastodirlllas.* 


rector  for  Open  Source  and  eGovem- 
ment  at  the  Cyber  Security  Policy  amd 
Research  Institute  at  George  Washing¬ 
ton  University  in  Washington.  For  ex¬ 
ample,  one  Large  company  created  a 
separate  foundation  for  releasii^  code 
for  liability  a-asons.  ITie  rules  for  re¬ 
leasing  code  vary  for  different  types  of 
open-source  software  because  they  are 
governed  by  many  different  types  of 
licenses.  But  even  without  a  policy, 
there's  a  good  chance  that  your  compa¬ 
ny's  programmers  will  share  their  open- 
source  work  —  and  it  might  not  even 
occur  to  them  to  ask  for  permission. 

"A  lot  of  it  goes  on  under  the  radar," 
Stanco  says.  "Developers  spend  a  lot  of 
time  working  on  something,  and  it  re¬ 
quires  them  to  do  modifications.  Be¬ 
cause  they  know  it’s  open-source  soft¬ 
ware,  they’ll  put  it  out  to  the  commu¬ 
nity  as  a  matter  of  course."  But,  he 
adds,  “that’s  why  we  have  such  great 
open-source  software  "  k 


Zetlin  is  a  business  technology  writer  in 
Woodstock,  N.Y^  and  author  of  Tele¬ 
commuting  for  Dummies  (Wiley, 2001). 


That  transition  Is  hanfsr  to  undertake  fra 
tooae  wofking  on  a  msinfrarne.  he  notes. 
'There’s  more  that’s  unfnminf* 

Bwn  tf  ff  wortm  drail  blow  Ltob.  I  helps  If 
toey  are  accustomed  to  a  command-fine  etM- 
ronmanL  aich  B  non-Wtodows 006, 

Oeve  Ennaru  lachnicto  support  manager  to 
VVtonebago  todutoiles  toe.  to  Fbreto  Cly.  feme. 
'Thapeoptewhoaraframapfa-GUIerMron- 
ment  are  laaming  It  faster  tom  toose  vtooVe 
worked  only  In  Wtodowa,’ he  says. 

■  Are  thwy  Inepbwd  to  foam  on 
thelrowm70neofthemotopowBrfulban- 
ete  of  LJtut  Is  toe  innova¬ 
tion  and  ailhustaam  that  IT 
toaffbttogtolLAltMtonaba- 
go.  fra  toebnee,  toe  moveto 
UmjxwesInlliMedbyasinglB 
toaNfflamberwhohadbe- 
comaexperttoutongtoasys* 
tomandtoepkadMacol* 
leaguaslolaamiBwal. 
Ennan  says,  to  fact  lhay  laamed  to  tea  It  on 
toek  own  time.  oulaidB  of  buBtoea  hours. 

Evms  stob  PGA  fora’s  fT  staff  b  SNcAad 
about  LtoiB  because  t  lab  toam  do  more,  such 
aswrlesoffwwatoheipmanlradMa.toa(to‘ 
farerk  anvkonrnani  Eons  stos.  toey  wotod 
hsra  had  to  hand  toto  lob  off  to  an  appIcBlion 
deiralopar.  That  toiily  to  do  more  on  toak  own 
gives  toam  a  feeing  to  empowermanL  he  say& 
Ihto  artoutoitoR  and  aneigy  far  hamkig  b 
more  htoortmt  toan  pato  btoaitance.' he  adds. 
‘Ari)toim  araneone's  praitoid  (to  tonui  laarntog 
somatoing  new.  good  things  happerL*  I 


>  The  most  reliable  servers  are  the 
ones  you  don't  have  to  think  about. 


>  hp  t  auaio 


I  *M*l*P«ntiuni*4prac«uor2.53GH2> 

I  {2.80  GHz  avo.lcibb| 

'  •2S6MB  Ibid  PC2)00Raelslar«iECC  DM  SDRAM  Mwnery 
•iMignjIwi  Dud  Chonnd  URra  ATA-lOO  CE  AdapMr  with 
Intagrotad  ATA  RAID  0.1,  &  1*0 
•40GB  AU  7200  tpm  Dm*  1‘* 

•NC7780  Gigabit  Nttswork  Contrdtof  |•fnb•dd•d| 

•Proliant  EsMMiob  Poundolian  Pock 
(induding  SnulSlufl'**  &  bttighl  Monogar’**) 

•  I  -Hwr  VkMttidt  ft»-fdlure  Vi/anortf  iprocmton.  tnomory  & 
hard  drraMl.  naxt-bMinettdor  parti,  labor  &  on-iiM  ddiviry' 


$1,048 


HP  servers  ore  os  lehoble  as  they  are  aftordabie 
so 't  cosfs  less  to  rr,o/tim>ze  yovr  servers  uptime 
'n  fact  our  Intel  processor  Dowered  HP  sei  ve^s  o’e 
tl'e  best-designed  servers  built  cn  rhe  most  rehab'e 
vhifoirv  available  Thev  re  custom  contr^ured  to  jneet 
vouf  compary  's  oorstoo  denionds  and  ttyeyre 
easier  ic  install  than  ever  before  And  every  HP 
server  can  be  managed  loday  as  easily  as  they  O'c 
octaptive  and  expandable  for  ipma-row-  PIjs  '.hej  re 
all  faociied  with  an  .mpressive  warrorty  ana  our 
exae:  ler'ced  service  and  support  team  So  yoi/r 
business  heads  in  the  only  direcfto.'’  (■  should— up 
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•Temiar  Modd 

•Imd*  Cdwon*  1.00  GHz  preeauor 
•  1 28MB  PC2I00  RagiMMd  ECC  DM  Memory, 
upgrodeobie  Id  4G6 
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•40GB  UkroAlA  7200  ipm  H«d  Drive’ 

H<iC7760  Gigabit  Pielwort  ConPoBei  |embedded| 


$549 


>  hp  PrMiM*  attMO  •« 

•Tower  Model 

•iMel*  Xew'*'  praceuor  2.40  GHz 
•256MB  Tdd  PC2100  Regidered  ECC  DOR 
SDRAM  Mamery  {>  >  256) 

•IfMagroiad  Dud  VVde  Ubro3  SCSI  Adopter 
•6  ■  1 '  Hot  Pluggoble  Herd  Drive  Boyt 
•364GB  U320  Umvend  Hvd  Dm*  {I*} 

10,000  rpm* 

•NC7760  Gigabit  Natworli  Conedbr 
•Probonl  EtteMiab  Feundolion  Podi  {Induding 
SmonSlivt’*'  &  Imighl  Monogar’*^ 

•3-Ybar  Vfcridwida  fte-Fo4u»e  Wfatroniy  |praee»on, 
menory  &  hard  dmei),  next-buunau-day  pom. 
labor  &  on-iile  delivery’ 

$1,938 

liowlwiMdei  $t1  opwwdilBi  XmoHie' 


•Rod  Modal 

•iMal*  Xeen'*'  procatier  2  40  GHz 
•5l2Me  Idd  PC2l00RagMerad  ECC  DM 
SDRAM  Memory  [2  >  256) 

•Inlagralad  Smart  Arroy  5i  PTui  CantreBar 
•Hot  Plug  Drive  Coge-UhraS 
I5>  I'ond  I  «  I  B*) 

•36  4Ge  U320  Unwarid  Hoid  Drive  |1*) 

10.000  rpm’ 

•Two  NC77B1  PCM  Gigabit  NO  (embaddedl 
PO  10/100  WOl 

•Sliding  Roili  and  Code  Monogamanl  Arm 
•Preliont  Ewenrioti  Foundation  Pod  (mduduig 
SmortSton'**  &  Iniighl  Atanogar”^ 

■3-Tleai  Mferldwide  Pre-Foiiuie  Worronty 
|prec«Mor>.  memory  &  hord  dwes). 
nent^unneieday  pom,  labor  &  eivfiie  deirmry' 

$3,663 


0%  FOR  24  MONTHS. 

For  a  limited  time,  get  0%  lease  rate  on  quailing  purchases  made  before  April  30. 2003.' 


Totl  Free  1-866-625-0783 
www.hp.com  go  magazinc3 
Or  call  your  local  reseller 
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cenfained  wiA  any  ^  dhr  or  dncouM  md  ore  goad  whRe  appim  be.  United  oidn  quoMMai.  Picmcnoe  lod ' 
leeridiem  and  CBckaioni  nay  apply  For  conpbfewamMy  daioih,  cd  1-3003451516  |U.S.|  hn^boNim  i 


$100,000.  UoM  ptedim  odbUe  Aravgk  HPFSC  to  qiidBtd  carnmncial  aaMnn  in  *e  US.  and  n  oedt 
ndce.  For  note  efcnwduii.  cd  18882^-S943.  Mel,  Ind  Imidi.  tie  InnI  keide  logo,  Kaon.  PWiun  and  Cdnen  or 
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a  IT  challenges:  Restore 
leadership  artd  build  a 
new  relationship  with  the 
business  side;  imple¬ 
ment  project,  budget 
and  quality  controls:  and  replace  out¬ 
dated  system  with  Sun  Unix  servers 
and  Oracle  databases. 

The  payoff:  Completed  66  projects 
in  2002.  compared  with  no  complet¬ 
ed  projects  during  the  previous  four 
years,  and  automated  the  collection  of 
all  IT  project  data. 

Lessons  learned:  By  restoring  ITs 
credibility,  other  departments  (such  as 
operations  and  real  estate)  see  the 
benefit  of  breaking  the  silo  mentality 
and  fostering  communication  with  IT. 


PICTURE  3.000  TRADERS  in  “the  pit"  wav¬ 
ing  their  hands  and  screaming  orders  for 
stocks,  bonds  and  commodities.  Millions 
of  dollars  in  investments  are  changing 
hands  every  minute.  Suddenly,  screens 
freeze;  orders  won’t  execute.  Mayhem  re^ns  as  mil¬ 
lions  of  dollars  are  tost  with  every  tick  of  the  clock. 

“That’s  the  worst  thing  that  can  happen.”  says 
Carol  Burke,  executive  vice  president  and  chief  of 
staff  at  the  Chicago  Board  of  Trade  (CBOT).  But  two 
years  ago.  trading-floor  systems  were  crashing  al¬ 
most  weekly  because  of  a  deterioratii^  infrastruc¬ 
ture.  Tradir^-floor  systems  capture  the  Buy  and  Sell 
orders,  match  them  with  Sell  and  Buy  offers,  route 
them  to  completion  and  send  back  acknowledg¬ 
ments.  The  crashes  were  costing  the  exchange  and 
its  members  millions  of  dollars. 

In  July  2001,  after  two  years  of  operatii^  in  the  red, 
the  board  of  directors  brought  in  a  new  management 
team,  includii^  Executive  Vice  President  and  CIO 
Bill  Farrow.  A  total  IT  revamp  got  the  exchange  back 
to  in-house  profitability.  By  2002,  its  profit  had  risen 
to  $25  million,  trading-system  crashes  were  virtually 
unheard  of  and  CBOT  was  bullish  on  technology. 

Bear  Market 

CBOT.  established  in  184S,  is  the  world's  oldest  fu¬ 
tures  exchange.  There,  more  than  3,600  members, 
such  as  Cargill  Inc.  and  J.P.  Morgan  Chase  &  Co., 
trade  47  products,  including  contracts  on  i^cultural 
futures  and  options  on  US.  Treasury  bonds.  The  not* 
for-proflt,  nonstock  corporation  has  about  600  em¬ 
ployees,  200  of  them  in  IT. 

Farrow  walked  into  an  IT  situation  that  was  grim. 
“The  chairman  said,  ’Bill,  you  have  very  small  shoes 
to  fill,’ "  he  recalls.  “That  tells  you  a  lot." 

“IT  was  in  disarray."  agrees  Burke,  a  20-year 
CBOT  veteran. 

“There  were  a  lot  of  good  people  in  IT,  but  there 
was  a  real  lack  of  leadership,"  says  Chip  Bermett. 


CiOB’:  ? 

was  Step  )  in  an  overall  fevamp 
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An  IT  turnaround  has  brought  the 
world’s  oldest  commodities  exchange 
back  to  profitability.  By  Kathleen  Melymuka 
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senior  vice  president  of  technology  solutions  and 
Farrow’s  first  hire  at  CBOT. 

The  infrastnicture  was  ancient,  unreliable  and  un¬ 
documented.  "When  1  got  here,  85%  of  it  was  end-of- 
life,”  Farrow  says,  "It  was  like  owning  a  house  and 
wondering  which  l^t  bulb  would  bum  out  next." 

For  example,  the  phone  system  was  20  years  old- 
*TVe  literally  had  to  put  someone  in  a  van  and  send  him 
to  Colorado  to  get  parts  for  it,"  Farrow  recalls.  Desk¬ 
tops  ran  a  version  of  Windows  no  longer  supported 
by  Microsoft  Corp.  Nearly  every  key  process  was 
routed  through  a  group  of  old.  midrai^  Tandem 
computers  in  an  environment  so  complex  that  devel¬ 
oping  a  new  process  took  more  than  90  steps. 

Management,  project  and  budget  controls  were 
lackii^  and  quality  control  was  substandard.  Trad¬ 
ing-floor  systems  would  crash  repeatedly  because 
they  tvere  patched  but  never  permanently  fixed, 
i  Staffers)  were  very  adept  at  scrambling  and  fixing 
ihii^  on  the  fly."  Farrow  says.  As  a  result,  roost  doc¬ 
umentation  existed  only  in  people’s  beads. 

IT  was  fiiU  of  silos  and  fiefdoms,  so  there  were  no 
economies  of  scale.  Morale  was  low.  There  was  a  place 
called  “the  wall"  where  nearly  100  yellow  sticky  notes 
commemorated  people  who  had  gotten  fed  up  and  left. 

But  not  everyone  in  IT  was  frustrated:  some  were 
complacent  Tech  jobs  were  called  *the  golden  ham¬ 
mock.'  "  Farrow  says.  “Oaix  you  got  in,  you  could  have 
a  very  easy.  very,  very  long  career  in  technology  here." 

That  attitude  made  no  friends  on  the  business  side. 
“We  would  go  to  IT  and  say,  ‘Help  \is.’ "  recalls  Kevin 
Lennon,  vice  president  of  real  estate  operations. 

“The  feeling  we  got  was  that  we  were  taking  them 
away  from  something  more  important." 

Other  than  Y2k.  IT  hadn't  completed  a  single  proj¬ 
ect  in  four  years.  As  a  result,  people  had  no  experi¬ 
ence  in  project  management  disciplines,  and  return 
on  investment  was  a  foreign  concept  “No  ROIs  were 
done  —  ever."  Farrow  says.  Technology  did  not  have 
to  provide  a  return  for  Investing  the  money  in  it" 

There  was  such  a  lack  of  credibility  between  the 
business  and  IT  sides  that  the  business  pet^Ie  bad  to¬ 
tally  given  up.  Farrow  says.  Their  attitude  was.  'Just 
keep  the  place  going  and  leave  us  alone.' "  be  says. 

The  Turnaround 

Farrow  began  by  taking  inventory  of  what  he  had. 

He  documented  systems  and  technical  architecture, 
nailed  down  vendor  relationships  and  service-level 
agreements,  and  evaluated  security  systems. 

Simultaneously,  be  faced  the  bigger  ghall<»ngp  of 
building  new  relationships  with  the  skeptical  busi¬ 
ness  people.  He  assigned  IT  managers  to  counter¬ 
parts  oo  the  business  side  to  brainstorm  regularly 
about  how  technology  could  support  business  goals. 

Denise  Schaller,  director  of  tet^uiology  and  data 
products  for  floor  support  applications,  who  has  21 
years’  experience  at  CBOT.  says  her  weekly  meeting 
with  the  two  vice  presidents  of  exchange  operatioits 
has  changed  everything  "If  I  have  any  business  ques¬ 
tions,  issues,  priorities  —  if  Tm  conftised  on  what  my 
team  should  be  working  oo  —  they  sort  U  out."  she 
sayi.  “Before.  I  would  have  to  try  to  make  those  judg¬ 
ments  myself.” 

Replacing  the  ancient  Tandems  with  Sun  Unix 
servers  and  Oracle  databases,  a  process  that  Schaller 
thought  would  take  two  years,  got  done  in  half  the 
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time  becaiise  her  new  partners  in  business  helped 
with  the  analysis,  legwork  and  scope. 

“It’s  much  more  consultative."  says  Lennon.  “[IT 
will]  dive  right  in  and  try  to  understand  our  business 
needs  and  help  us  determine  what  kind  of  technolo¬ 
gy  can  help  us.” 

Farrow  boosted  quality  a»urance  with  additional 
software  testing  and  backed  it  up  by  putting  IT 
troubleshooters  on  the  trading  floor  every  day  when 
the  market  opens.  "I'm  on  the  spot,  so  I  can  see  any 
problems  and  react  Immediately,"  says  Schallen 

Even  so,  there  were  early  setbacks.  “We  bad  to  have 
a  trading  halt  a  time  or  two  because  of  some  really 
old  issues,”  Bennett  recalls.  That  was  frustrating 


and  there  were  times  when  I  went  home  pretty 

But  the  IT  leaders  kept  the  faith.  Farrow  est^ 
lisbed  a  projeCT  office  to  centralize  the  project  port¬ 
folio  and  the  IT  skills  pool.  He  chose  emerprisc 
change  management  software  from  Kintana  Inc.  in 
Sunnyvale,  CaliL,  to  automate  processes  and  provide 
real-time  status  reports  on  projects. 

The  office  provides  a  "single  point  of  entry"  for 
demands  on  IT.  Farrow  says  —  "No  more  backdoor 
requests  or  jumping  the  queue."  It  gives  a  broad  view 
of  how  IT  skills  are  needed  and  used  across  the  ex¬ 
change.  enabling  him  to  deploy  human  resources  effi- 
cienily.  It  also  helps  the  business  people  understand 
IT  resources.  “If  they  want  additional  staff  hours,  tbe>- 
can  see  that  [it’s]  at  the  expense  of  something  else." 
Farrow  explains.  That's  a  very  cottstructive  dialog  to 
have  with  business  people." 

Farrow  abo  brought  ROI  to  project  agendas.  "We 
(know)  a  lot  more  in  terms  of  what  projects  will  pro¬ 
vide  as  return  on  investment,"  says  Bryan  Durkin,  se¬ 
nior  vice  president  of  operations  at  CBOT. 

Farrow  used  news  of  the  turnaround  to  anract  lech- 
nology  professionals  with  new  skills,  particularly  in 
the  areas  of  security  and  business  analysis.  But  there 
were  painful  decisions  as  welL  inchidi^  letting  15  FT 
managers  go  The  permanent  IT  workforce  shrank 
from  230  to  fewer  than  200,  supplemented  by  tempo¬ 
rary  contract  help  as  required  b>-  the  project  load 

The  projects  have  made  the  business  nunagets  be¬ 
lievers  in  IT  With  IT  consultation.  Lennon  enhanced 
and  expanded  security  foom  just  the  trading  floor  to 
the  whole  building  “Now  real  estate  and  tiadii^  floor 
are  interconnected."  he  says.  "Before  Bill  got  here,  I 
fiankly  never  would  have  tried  that"  Trading-floor 
and  building  security  would  have  been  separate  sys¬ 
tems,  Lerwon  says.  "But  [IT]  worked  with  us  from  be¬ 
ginning  to  end.  and  it’s  been  a  phenomenal  success." 

IT  has  also  helped  Lennon  sort  out  telecommuni¬ 
cations  options  for  the  building  which  CBOT  owns 
and  leases  to  its  tenants,  and  has  even  offered  to  ex¬ 
plain  the  options  to  new  tenants.  "That  makes  the 
building  more  attractive  to  tenants  because  it's  an 
easy  move,"  he  says. 

Duritin  is  particularly  h^py  with  a  new  master- 
antenna  system  for  the  trading  floor.  "It  gives  us  an 
immense  amount  of  growth  for  wireless  technology 
on  the  floor."  he  says.  There’s  been  a  phenomenal 
growth  of  activity." 

In  2002,  IT  completed  66  projects.  In  February. 
CBOT  handled  53  millioo  contracts  ~  33%  more  than 
in  the  previous  February,  without  a  sin^  system  stut¬ 
ter.  “We  have  a  much  more  stable  and  robust  environ¬ 
ment  with  fail-over  abilities,"  says  Duikln.  “If  there 
were  a  problem  in  a  primary  system,  it  would  fail  over 
lo  a  backup  and  be  seamless  to  the  marketplace." 

Throughout  the  turnaround,  IT  has  maintained  a 
flat  budget  "If  you  are  wasting  35%  of  your  money 
and  you  can  make  that  35%  productive,  that’s  a  lot  of 
money  to  put  back  into  the  teclmology  to  make  it  ro¬ 
bust"  Farrow  says. 

There  is  also  a  new  IT  spirit  at  CBOT.  "1  enjoy 
working  for  Chip  and  BUL”  Schaller  says.  They're 
very,  very  supportive.  Now  that  we're  accomplishing 
things,  my  team  feels  good  ^>out  it"  I 


Melymuka  isaCompuierworidcontriburtrtgwrirer. 
Cont<Kt  her  at  icme/ymuka@yahooxom. 
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Speech 


Turn  a  dreaded 
encounter  into  an 
opportunity  for 
some  high-level  PR. 

BY  KATHLEEN 
MELYMUKA 


A  FEW  WEEKS  AGO.  The  Wall  Street 
Journal  ran  a  colunui  on  the  dreaded 
elevator  encounter.  It  discussed  the 
terror  many  rank-and-file  employees 
feel  at  the  thought  of  sharing  a  30- 
second  ride  with  the  CEO  or  some 
other  top  executive  for  fear  they'll 
conunit  some  career-ending  faux  pas. 

But  why  not  see  the  chance  encounter 
as  a  great  opportunity  to  let  them  know 
fust  what  technology  has  done  for 


them  lately?  Why  not  make  sure  every' 
one  in  IT  is  ready  to  grab  the  opportu¬ 
nity  when  those  doors  slide  open? 

“I  think  the  challenge  here  is  not  the 
elevator  speech,  but  what  comes  be¬ 
fore  it,"  says  Mark  Endry.  senior  vice 
president  and  CIO  at  ).D.  Edwards  & 
Ca  in  Denver.  Your  company  should 
have  clear  goals  and  obiectives;  IT 
should  be  aligned  with  them,  and  each 
IT  employee  should  know  how  his 
own  work  is  helping  to  attain  them, 
he  says.  Endr/s  managers  coach  IT 
workers  on  this  linkage  at  every  op¬ 
portunity.  from  performance  reviews 
to  events  where  they  play  “The  Weak¬ 
est  Link"  using  questions  about  IT  and 
company  goals. 

Speak  Business  Value 

Good  metrics  can  help  you  pinpoint 
how  you're  adding  value  to  the  busi¬ 
ness  in  ways  mam^ement  can  easily 
grasp,  says  John  Boushy.  senior  vice 
president  for  operations,  products  and 
services,  and  IT  at  Harrah's  Entertain¬ 
ment  Inc.  in  Las  Vegas.  For  example,  a 
help  desk  person  who  tells  the  CEO 
that  his  Job  is  to  solve  internal  custo¬ 
mers'  technical  problems  won't  have 
the  same  impact  as  the  one  who  states 
that  his  group  has  cut  response  time  by 
30%  in  the  past  year  and  b  now  closing 
half  of  its  c^  on  the  spot. 

Once  you  understand  your  business 
value,  get  psyched  about  the  opportuni¬ 
ty  to  demonstrate  it  “People  haw  to 
want  to  be  ready,"  says  Dennis  Klinger, 
vice  president  of  IT  at  Florida  Power& 
Light  Ca  in  Juno  Beach,  Fla.  They  have 
to  realize  that  thb  b  a  good  thing  to  do 
and  agree  that  if  they  get  the  opportuni¬ 
ty  to  do  it.  they  will"  A  good  elevator 
speech  b  great  public  relations  for  your 
career  as  well  as  for  IT.  he  says. 

As  for  the  speech  itself  a  manager 
can  help  with  the  framework,  but  each 
message  delivered  spontaneously  will 
of  course  be  different.  Think  ab<mt 
what  you  do  that  b  most  important  to 
the  business  in  terms  of  rabing  rev¬ 
enue  and  cutting  costs,  Boushy  says. 
“Look  at  profit,  growth  and  customer 
loyalty,  and  try  to  isolate  the  things  you 
are  doing  that  would  make  an  impact 
on  those."  says  Klinger.  Those  areas 
get  right  to  the  chairman's  heart" 
Choose  to  talk  about  projects  that 
include  lots  of  non-IT  people,  says 
Virginb  Robbins,  director  of  IT  at 
Cheb  rinancial  Inc.  in  San  Francbca 
Select  an  action  verb  that  truly  reflects 
your  role.  If  you're  excited  abwt  the 
project  say  sa  And  it's  OK  to  acknowl¬ 
edge  that  you  don't  know  all  the  de¬ 
tails.  Neither  does  the  CEO. 

“Stay  truthful  and  articulate  your 


actual  contribution."  Robbins  says. 
“And  remember  No  acronyms!" 

Robbins  gives  an  example  of  how 
even  a  low-level  IT  worker  can  make 
an  impression  on  a  senior  executive: 
'T’m  learning  tape-labeling  for  the  cus¬ 
tomer  retention  project.  I  don't  know 
all  the  detaib.  but  flom  what  I  under¬ 
stand,  this  will  help  retain  customers 
by  reducing  the  time  spent  responding 
to  their  requests.  My  part  b  to  make 
sure  that  the  tapes  storing  all  of  their 
data  are  labeled  and  loaded  on  time." 

A  programmer  might  talk  about 
working  with  the  maiketing  depart¬ 
ment  on  the  new  customer-rewards 
program  that  will  increase  customer 
loyalty  and  market  share.  Operations 
people  can  tie  their  value  to  maintain¬ 
ing  IT  toob  that  the  CEO  uses  every 
day.  Can  be  turn  on  bb  PC  and  get  the 
latest  balance  sheet  and  data  on  prof¬ 
itability  by  customer  and  product?  Not 
without  operations  folks. 

Keep  updating  the  speech  as  your 
job  chains,  and  think  topical.  When 
the  government  upgraded  the  national 
security  level  to  “orange"  in  February, 
Klinger’s  IT  group  had  to  segment  the 
network  and  shut  down  some  areas, 
with  mimmal  dbruption  to  the  busi¬ 
ness.  "That’s  something  that  involves 
people  at  every  level"  he  says.  They 
can  all  talk  about  that." 

The  venue  doesn't  have  to  be  the  ele¬ 
vator.  Last  year,  when  Endry's  chief  op¬ 
erating  ofiicer  held  breakfost  meetings 
with  employees,  the  IT  people  im¬ 
pressed  him  with  how  much  they  knew 
about  their  impact  on  the  business. 

Nor  should  your  audience  be  limited 
to  the  CEO.  Klinger  and  hb  higher- 
level  IT  people  often  plan  targeted 
quick-hit  messages  for  certain  execu¬ 
tives.  Thirty  seconds  with  your  chief 
financial  officer,  for  example,  mi^t 
start  a  ripple  that  leads  to  a  new  finan¬ 
cial  system.  "That  30  seconds  might 
leave  a  seed  that  can  cause  something 
good  to  happen  or  generate  another  db- 
cussion  in  more  depth,"  Klinger  says. 

Regardless  of  the  venue,  the  elevator 
speech  b  an  opportunity  that  shouldn't 
be  missed.  And  by  the  way.  make  sure 
everyone  in  the  department  knows 
what  the  CEO  and  other  top  executives 
look  like.  It  would  be  a  shai^  to  wa^e 
a  perfectly  good  ride.  I 


Melymuka  b  a  Computerworld 
contrihuri/tg  wrifer.  Contact  ker 
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M«TflL«nch« 
Co.  has  shrunk 
from  70,000 


1 

2001to53,SO0 
todoy.(t82003 
ITbudgotof 
SUbHonta 
donmSO^from 
two  yom  aov- Vrt  mfraculoiisiy. 
its  rr  training  budgat  has  rr 
mabisd  bilaet.  iaigoijr  dus  to  tfw 
fiorcs  lobbytog  offorts  of  CMsf 
Tochnetogy  ORtoor  STEPKN 
NORMAN.  Nonnan  says  IT  ffian- 
agon  mat  dbtingutah  bslwson 
‘stormOon”  Mid  ‘^odybuMng” 
budgot-cuHing  onraiaos.  Trafri' 
ing.hnsoyi,lsabodybuliingoi- 
Molas.  to  ttia  and,  K  «vl  maha  tho 
company’s  (T  ^oup  sfrongsi. 
Norman  rooonlly  apohs  wNh 
CafftontonaordfsJulaKlng. 

Hmt  do  you  praaarvs  yeia  IT  frain* 
ing  bHdgaf?  Whenever  N«  get  hand¬ 
ed  a  target  to  save  X  amount  ot  mon¬ 
ey.  I  keep  on  saying  we  can’t  touch 
training.  Training  is  usually  about  2% 
o1  the  total  headxounl  cost  so  you're 
not  going  to  save  the  planet  by  cut¬ 
ting  training.  I  tM  them  [top  man- 
agere}  that  n  make  them  happy  by 
cutting  something  else. 

Whore  an  you  putting  your  IT 
training  dolHa?  We're  putting  mon¬ 
ey  into  project  rnanagernent  training, 
service  managernent  trairiing.  tirne 
management  tranino  and  courses  we 
developed  about  knowng  yourself 
and  knowing  your  customers.  Most  of 
our  people,  for  instance,  had  no  for¬ 
mal  training  around  how  to  deal  with 
difficult  customeis. 

Why  amphanitt  Guatonar  sarvteo? 

We're  setting  up  services  for  unit 

pricing.  Charging  back  [busness 
units  ^  the  IT  services  they  use] 
started  about  18  months  ago.  The 
compelling  story  with  unit  pricing  [tor 
the  business  units]  is. ‘Use  less, 

^lend  less.*  It  gives  customers  the 
idea  that  they  can  control  their  costs 
by  using  less.  In  IT.  unit  pricing  allows 
us  to  compare  ourselves  to  external 
providers  and  Nso  to  compare  our¬ 
selves  tntemdly  across  differeni  IT 
centers,  which  cretoes  heNihy  com¬ 
petition.  say.  between  New  Ybrk  and 
London.  P 


JOHN  BERRY 


Assume  Nothing. 
Audit  Instead 


The  IT  manager  who  assumes  that  a  tech¬ 
nology  investment  will  meet  or  exceed  an 
economic  or  return  on  investment  fore¬ 
cast  reminds  me  of  the  anecdote  about  the 
economist  trapped  in  a  burning  building. 
“No  problem,”  he  says.  “TU  assume  a  fire  hose.” 

While  the  dismal  science 
of  economics  relies  on  as* 
sumptions  to  build  theo¬ 


ries  to  explain  economic 
phenomena,  IT  managers 
are  under  no  such  obla¬ 
tion.  In  &ct.  the  practice 
might  be  dangerous. 

One  of  the  roost  damag¬ 
ing  assumptions  an  IT 
manager  can  make  is  that 
the  cost  savings  or  revenue 
increases  forecast  in  an 
ROI  exercise  will  material¬ 
ize  on  schedule,  or  at  all 
Yet  it  happens  all  the  time. 

How  el»  to  reconcile 
the  fact  that  most  organi¬ 
zations  don’t  bother  to  confirm  that 
all  the  economic  returns  depicted  in  a 
forecast  actually  materialize?  Too  of¬ 
ten,  the  effon  invested  in  constructing 
such  a  forecast  as  a  decision-making 
tool  becomes  digital  dust  on  some¬ 
one’s  hard  drive  after  the  project  has 
gone  live.  The  thinking  goes:  The 
forecast  is  irrelevant  because  the  proj¬ 
ect  is  done  —  let’s  move  on. 

What’s  likely  lurking  behind  the  ab¬ 
sence  of  postinvestment  auditing  at 
most  companies  is  fear,  uncertainty 
and  doubt  that  the  real-world  results 
will  fall  below  forecast  No  one  enjoys 
evaluations,  especially  when  the  out¬ 
comes  are  less  than  expected,  and 
people  in  a  position  of  accountability 
—  the  project  champions  and  those 
who  control  the  budget  —  fear  a 
metaphorical  courtyard  stoning. 

There  are  ways  to  conduct  a  consis¬ 
tent  repeatable  postinvestment  audit 
and  no  one  need  fear  being  shot  at 
dawn.  If  you  accept  the  lofty  principle 


that  one  of  employees’ 
most  powerful  capabilities 
is  the  ability  to  learn  and 
to  turn  the  learning  proc¬ 
ess  into  improvements, 
then  you  should  see  audits 
as  an  effective  component 
of  IT  management. 

The  maximum  value 
from  an  IT  investment 
isn’t  realized  from  simply 
confirming  that  the  re¬ 
turns  match  the  forecast, 
but  rather  from  improving 
the  technology  asset’s  per¬ 
formance  should  it  turn 
out  that  the  returns  are 
lower  than  planned  — 
which  is  often  the  case  with  more 
strategic  kinds  of  technology  requir¬ 
ing  process  and  organizational 
change.  The  act  of  investigating  why 
some  element  of  the  deployment  isn’t 
reruniii^  the  projected  cost  savings  or 
iruneased  revenue  is  the  first  step  of 
the  remediation  process  by  which 
maximum  value  is  extracted  from  die 
technology.  This  might  be  the  single 
strongest  argument  for  devoting  the 
time  and  money  to  an  auditing 
process. 

Consider  the  example  of  a  hospital 
that  decided  to  expand  its  lab  busi¬ 
ness.  Instead  of  doing  the  lab  work  of 
hospital  patients  only,  it  took  on  refer¬ 
ral  business  from  physicians  and  clin¬ 
ics  as  a  way  to  increase  revenue  by 
leveraging  unused  lab  capacity  in  the 
off  hours.  This  was  a  big-risk,  big-pay¬ 
off  project,  involving  an  investment  in 
people,  processes  and  technology  ~ 
an  ideal  candidate  for  a  postinvest¬ 
ment  forecast  validation  eiwrcise. 


The  hospital  correctly  anticipated 
that  the  specialized  lab  management 
software  it  rolled  out  to  support  rhi'c 
venture  might  introduce  some  busi¬ 
ness-process  incompatibilities  that 
could  drag  down  forecast  ROI.  How¬ 
ever,  it  had  little  visibility  into  what 
those  exact  incompatibilities  would 
look  like  and  how  they  would  affect 
returns.  The  hospital’s  IT  team  decid¬ 
ed  to  conduct  an  audit  concurrent 
with  technology  deptoymem.  It  could 
have  waited  to  audit  the  returns  until 
some  point  after  deployment,  but  the 
risks  were  high  enough  that  it  sought 
to  catch  any  operating  dysfunaion 
quickly. 

The  audit  team  discovered  soon 
after  the  platform  went  live  that  the 
software  collected  far  more  data  than 
it  needed  for  referral  patients.  The 
system  required  bb  workers  to  cap¬ 
ture  20  data  elements  from  each  pa¬ 
tient  with  a  bb  order.  This  demanding 
screening  process  was  optimized  for 
in-hospital  patients,  but  for  referral 
patients,  the  bb  really  needed  only  a 
few  pieces  of  information  such  as 
name,  age  and  insurance  carrier. 

The  dysfunction  wasn’t  catastroph¬ 
ic  but  it  clearly  could  have  compro¬ 
mised  the  volume  of  referral  patient 
traffic  the  bb  was  equipped  to  handle. 
Having  discovered  through  an  audit 
the  operational  tension  between  the 
needs  of  the  referral  patient  service 
and  the  information  acquisition  over¬ 
kill  of  the  software,  the  IT  organiza¬ 
tion  recognized  the  potential  drag  on 
revenue  and  went  to  work  immediate¬ 
ly  on  a  code  fix. 

Today,  this  reference  bb  is  a  S7  mil¬ 
lion  profit  center  for  the  hospital  In 
the  absence  of  an  audit  capability,  it 
would  have  been  less  profitable  be¬ 
cause  bb  persoimel  would  continue 
to  grill  patients  as  if  they  had  commit¬ 
ted  a  crime  rather  than  gonen  sick.  I 
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Merrill  Lynch  A 
Co.  has  shrunk 
from  70,000 
employees 
worldwide  in 
2001  to  53.500 
today.  Its  2003 
IT  budget  of 
S2.2  billion  is 
down  30%  from 


two  years  ago.  Vet  miraculously, 
its  IT  training  budget  has  re¬ 
mained  Intact,  larg^  due  to  the 
fierce  lobbying  efforts  of  Chief 
Technology  Officer  STEPHEN 
NORMAN.  Norman  says  fT  man¬ 
agers  must  distinguish  between 


“starvation''  and  “bodybuilding'' 
budget-cutting  eiercises.  Train¬ 
ing.  he  says,  is  a  bodybuilding  ex¬ 
ercise.  In  the  end.  H  will  make  the 
company's  IT  group  stranger. 
Norman  recently  spoke  with 
ComputerworkTs  JuKa  King. 


How  do  you  preserve  your  IT  tram- 
ing  budget?  Whenever  we  get  hand¬ 
ed  a  target  to  save  x  amount  of  mon¬ 
ey.  I  keep  on  saying  we  can't  touch 
training.  Training  is  usually  about  2% 
of  the  total  head-count  cost,  so  you're 
not  going  to  save  the  planet  by  cut¬ 
ting  training.  I  tell  them  [top  man¬ 
agers]  that  I'll  make  them  happy  by 
cutting  something  else 

Where  are  you  putting  your  IT 
training  doflars?  We're  putting  mon¬ 
ey  into  proiect  management  training, 
service  management  training,  lime 
management  training  and  courses  we 
developed  about  knowing  yourself 
and  knowing  your  customers.  Most  of 
our  people,  for  instance,  had  no  for¬ 
mal  training  around  how  to  deal  with 
difficult  customers. 


Why  emphasize  customer  service?  , 
We're  setting  up  our  services  for  unit  ' 
pacing.  Charging  back  [business  j 

units  for  the  IT  services  they  use] 
started  about  16  months  ago  The 
compelling  story  with  unit  pncmg  [lor 
the  business  units]  is.  'Use  less, 
spend  less  ’  It  gives  customers  the 
idea  that  they  can  control  their  costs 
by  using  less.  In  IT.  unit  pricing  allows 
us  to  compare  ourselves  to  external 
providers  and  also  to  compaie  our¬ 
selves  internally  across  different  (T  | 

centers,  which  creates  healthy  com-  i 

petition,  say.  between  New  York  and  I 

London  I  I 
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Assume  Nothing. 
Audit  Instead 


The  IT  manager  who  assumes  that  a  tech¬ 
nology  investment  will  meet  or  exceed  an 
economic  or  return  on  investment  fore¬ 
cast  reminds  me  of  the  anecdote  about  the 
economist  trapped  in  a  burning  building. 
“No  problem,”  he  says.  “I’ll  assume  a  fire  hose.” 


While  the  dismal  science 
of  economics  relies  on  as¬ 
sumptions  to  build  theo¬ 
ries  to  explain  economic 
phenomena.  IT  managers 
are  under  no  such  obliga¬ 
tion.  In  fact,  the  practice 
might  be  dangerous. 

One  of  the  most  damag¬ 
ing  assumptions  an  IT 
manager  can  make  is  that 
the  cost  savings  or  revenue 
increases  forecast  in  an 
ROl  exercise  will  material¬ 
ize  on  schedule,  or  at  all. 

Yet  it  happens  all  the  time. 

How  else  to  reconcile 
the  fact  that  most  organi¬ 
zations  don't  bother  to  confirm  that 
all  the  economic  returns  depicted  in  a 
forecast  actually  materialize?  Too  of¬ 
ten.  the  effort  invested  in  constructing 
such  a  forecast  as  a  decision-making 
tool  becomes  digital  dust  on  some¬ 
one's  hard  drive  after  the  project  has 
gone  live.  The  thinking  goes:  The 
forecast  is  irrelevant  because  the  proj¬ 
ect  is  done  —  let’s  move  on. 

What’s  likely  lurking  behind  the  ab¬ 
sence  of  postinvestment  auditing  at 
most  companies  is  fear,  uncertainty 
and  doubt  that  the  real-world  results 
will  fall  below  forecast.  No  one  enjoys 
evaluations,  especially  when  the  out¬ 
comes  are  less  than  expected,  and 
people  in  a  position  of  accountability 
—  the  project  champions  and  those 
who  control  the  budget  —  fear  a 
metaphorical  courtyard  stoning. 

There  are  way's  to  conduct  a  con-sis- 
tent.  repeatable  postinvestment  audit, 
and  no  one  need  fear  being  shot  at 
dawn.  If  you  accept  the  lofty  principle 


that  one  of  emph«yces' 
most  powerful  capabilitits 
is  the  ability  to  learn  and 
to  turn  the  learning  prix- 
ess  into  impnwements. 
then  you  should  see  audits 
as  an  ctTective  component 
of  IT  management. 

The  ma.\imum  value 
from  an  IT  investment 
isn’t  realized  from  simply 
confirming  that  the  re- 
lum-s  match  the  forecast, 
but  rather  from  improWng 
the  technology  asset’s  per¬ 
formance  should  it  turn 
out  that  the  returns  are 
lower  than  planned  — 
which  is  often  the  case  with  more 
strategic  kinds  of  technology  requir¬ 
ing  process  and  organizational 
change.  The  act  of  investigating  why- 
some  element  of  the  deployment  isn’t 
reluming  the  projected  cost  savings  or 
increased  revenue  is  the  first  step  of 
the  remediation  process  by  which 
maximum  value  is  extracted  from  the 
technology.  This  might  be  the  single 
strongest  argument  for  devoting  the 
time  and  money  to  on  auditing 
process. 

Consider  the  example  of  a  hospital 
that  decided  to  expand  its  lab  busi¬ 
ness.  Instead  of  doing  the  lab  work  of 
hospital  patients  only,  it  took  on  refer¬ 
ral  business  from  physicians  and  clin- 
(  ics  as  a  way  to  increase  revenue  by 
I  leveraging  unused  lab  capacity  in  the 
off  hours.  This  was  a  big-risk,  big-pay¬ 
off  project,  involving  an  investment  in 
j  people,  processes  and  technology  — 

I  an  ideal  candidate  for  a  postinvest- 
<  ment  forecast  validation  c.xcrciso. 


The  hospital  correctly  aniidpated 
ih.if  the  specialized  l;ib  m.inagemeni 
SMftvv.ire  it  ndled  t»ut  to  support  this 
venture  might  introduce  some  busi¬ 
ness-process  incompatibilities  that 
Ct>uld  drag  down  forecast  ROl.  How¬ 
ever.  it  had  little  visibility  into  what 
those  exact  inc«>mpatibniiies  would 
look  like  and  how  they  would  affect 
returns.  The  httspiial’s  I'l'  team  decid¬ 
ed  to  conduct  an  audit  concurrent 
with  technology  deploy  ment.  It  amid 
have  wailed  ti*  audit  the  returns  until 
?M>me  point  after  deployment,  but  the 
risks  were  high  enough  that  it  sought 
to  catch  any  operating  dysfunciion 
quickly. 

The  audit  team  discovered  simn 
after  the  platform  went  live  that  the 
:  software*  collected  far  mi»re  data  than 
i  it  net,‘ded  for  referral  patients.  The 
I  system  required  lab  workers  m  cap- 
j  turc  20  data  elements  from  each  pa¬ 
tient  with  a  lab  order.  This  dehianding 
scrivning  pnxess  was  optimized  for 
in-ho.spital  paiieni.s.  hm  for  referral 
patients,  the  lab  really  needed  only  a 
few  pieces  of  informaiUm  such  as 
name,  age  and  iasurance  carrier. 

'  The  dysfunciion  wxsn't  caiasiroph- 
j  ic.  but  it  clearly  could  have  compro- 
I  mised  the  volunu*  of  referral  patient 
I  traffic  the  lab  was  equippi'd  t<»  handle. 

'  Having  discovea*d  through  .tn  audit 
I  the  operaiional  tension  beiw-een  the 
needs  of  the  referral  patient  service 
and  the  information  acquisiiii^n  over¬ 
kill  of  the  software,  the  IT  organiza- 
I  tion  recognized  the  potential  drag  on 
'  revenue  and  went  to  w  ork  immediaic- 
\  ly  on  a  code  fix. 

j  Today,  this  reference  lab  is  a  S7  mil- 
j  Hon  profit  center  for  the  hi>spital.  In 
I  the  absence  of  an  audit  capabtliiv,  it 
would  have  been  less  profitable,  be¬ 
cause  lab  perstmnel  would  continue 
^  to  grill  patients  as  if  they  had  commit- 
I  ted  a  crime  rather  than  gotten  sick. » 
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Airlines 


ington  International  Airport  at 
far  less  cost  than  expanding 
the  number  of  ticket  counters. 

Monte  Ford,  CIO  at  Ameri¬ 
can  Airlines  Inc.  in  Fort 
Worth,  Texas,  said  IT  projects 
that  aren’t  focused  on  in¬ 
creased  productivity,  cus¬ 
tomer  self-service  and  Inter¬ 
net  functionality  have  been 
“slowed  down"  at  the  airline. 
American  has  also  delayed 


projects  that  “simply  add 
granularity  to  systems  that  al¬ 
ready  exist.”  he  said. 

However.  Ford  said.  Ameri¬ 
can  differs  from  some  other 
airlines  in  its  approach  to  ROI. 
“Many  IT  departments  spend 
time  stewing  over  ROI  num¬ 
bers  that  will  justify  their  exis¬ 
tence."  be  said.  “Not  at  Ameri¬ 
can.  My  staff  and  I  implement¬ 
ed  a  portfolio  management  ap¬ 
proach  to  all  FT  projects  nearly 
two  years  ago.  and  it  took  the 
guesswork  out  of  determining 
which  projects  to  work  on." 

American’s  approach  to 
portfolio  management  divides 
all  IT  projects  into  categories 
that  are  aligned  with  the  com¬ 
pany's  business  objectives.  “As 
a  result,  we  can  quickly  see 
which  projects  have  im¬ 
mediate  impact  on  the  busi¬ 
ness  vs.  projects  with  long¬ 
term  payback."  Ford  said.  That 
way,  "there  is  no  need  for 
knec-jetk  reactions  to  finan¬ 
cial  circumstances." 

Atlanta-based  Delta  Air 
Lines  Inc.  hasn’t  backed  away 
from  new  IT  projects.  But  it 
has  also  refocused  on  ROI  and 
projects  that  offer  clear  bene¬ 
fits  to  the  bottom  line. 

“We’re  focusing  on  those 
projects  that  enhance  Delta's 
core  business  processes,  infra¬ 
structure  and  productivity  and 
have  an  ROI  of  12  to  18 
months,"  said  Betsy  Talton.  a 
Delta  spokeswoman. 


TSA  Standardizes  on  Oracle 

WA8HHMT0M  I  SiAt  to  entunoB  CSSS 


ttto  Traraportoltan  Securlv  Ad- 
mtoWolion  (TSAX  woiHno 
throuidi  Ito  prim  ooniractor. 
Untojn  Cofi^  mnaunced  today 
that  I  he  tapped  Oiada  Corp.  to 
pnwfde  toa  aoKwan  nacaasaty  to 
manaoB  is  Mnatniduv. 

Unfeya.  toe  inanaoBd  saivtoes 
prtidd«tortoaTSA.hasa8tab- 
Atoad  a  fcentoiQ  Kpaamaw  to 
pnMde  toe  Oradito  Oalatasa 
«Mto  fW  AppIcaHtm  OuBton  and 
Ckadato  Applcalion  Saner  soft- 
wan  to  toe  TSA  The  agency  aril 
dsodaptayOractoCRMippIca- 
Ikra  irorn  toe  Onda  S-Businas 


menl  and  todderw  Inddno. 

Orade  ConsuMno  wii  bUU  a 
portaf  tor  TSA's  tobanal  uatoQ  Or- 
adato  Appdetfon  Senv  RortaL 
TheTSAisaneoftoe22toder- 
d  apanoea  tod  now  make  up  toe 
OepertwemoHtorwetondSeaw 
ty.TheOradededannQiiicedto' 
day  d  part  of  toe  TSA  Intormdion 
lednotogy  Uanaged  Services 
F^ognm  ConlracL  aevded  to 
In  August  2002.  The  con¬ 
tract  wff  supply  FT  ininstojctue 
support  tor  toe  TSA's  field  offices 
and  headquarters. 
08inka0^(*an.atSA 


Through  what  Talton  called 
"transformation"  projects, 
Delta  plans  to  realize  nearly 
SI  billion  in  savings  this  year 
as  part  of  a  companywide 
profit-improvement  initiative 
designed  to  save  S2.S  billion 
by  the  end  of 2005.  Many  of 
the  changes  being  implement¬ 
ed  are  technology-driven,  said 
Talton. 

For  example,  this  year  Delta 
will  deploy  more  tliM  400 
self-service  kiosks  at  81  air¬ 
ports,  bringing  its  texal  to 
more  than  800  throughout  its 
domestic  system. 

Gary  Kelly,  chief  financial 
officer  at  Dallas-based  South¬ 


west  Airlines  COh  said  that 
the  carrier  is  also  focusii^  on 
projects  that  will  improve  cus¬ 
tomer  service  and  overall  effi¬ 
ciency,  but  he  added  that  over¬ 
all  n*  budgets  and  head  count 
will  likely  remain  flat  for  the 
next  two  to  three  years. 

Southwest  recently  intro¬ 
duced  automated  boarding 
passes,  kio^  and  automated 
bag  tags,  said  Kelly. 

Ron  Knhlmann.  vice  presi¬ 
dent  of  die  R2A  transportation 
management  consulting  unit 
of  Unisys  Corp..  said  many  air¬ 
lines  are  burdened  by  back¬ 
end  systems  that  are  more 
than  20  years  old.  And  while 


spotorawpmaA  sari  toe  aiiraflrtic- 
hse  management  proied  b  a 
naesM  imdertaWng  toil  spans 
429  oommaicjat  airports. 

StovefMnB.9anionAcepres- 
Ideni  of  Oracle's  pitokc-seclor  end 
hometand  aeciffty  Mon.  sato 
toeTSAprogrambalMslepto- 
wrardthentogntoonoftoeagen- 
cne  wdftn  toe  Oepertmeni  of 
HotnetondSocufy. 

The  TSA  deal  faknvs  senfar 
Orade-based  protects  at  other 
Department  of  Hometand  Security 
otgtfizaltoRS.  such  as  toe  U.S 
Goes!  Ouard,  which  purchaaed 
Orade's  Raal  Appicalion  Ous¬ 
ters.  AppRcabon  Server  and  secu¬ 
rity  options  last  May. 

-DanValon 

many  have  expressed  interest 
in  replacing  those  systems 
wito  modem,  open  archiiec' 
lures,  doing  so  would  require 
infrastructure  overhauls  that 
Done  of  them  can  afford  right 
now.  he  said 

The  new  kiosks,  wireless 
systems  and  other  enhance¬ 
ments  "are  only  as  good  as  the 
core  data  stored  on  the  legacy 
systems,"  Kuhlmann  said. 
“Eventually,  those  systems  will 
have  to  be  replaced." 

But  not  anytime  soort  “The 
nicc-to-have  stuff  is  on  our 
road  map."  Beery  said  “But 
we're  not  going  to  foird  those 
projects."  I 


Conrinued  from  page  I 

Sun 


around  S2.99S.  The  V240  can 
support  two  processors  and 
up  to  8GB  of  memory  and  fea¬ 
tures  more  expansion  slots 
and  disk  space.  Pricing  starts 
at  $3,495. 

Both  systems  will  also  come 
with  a  full  stack  of  preinte- 
graied  software  that  Sun 
bc^>es  will  be  a  crucial  differ¬ 
entiator  in  the  low-end  ^ace, 
according  to  another  source 
close  to  the  announcement. 

That  software  includes  the 


Solaris  8  operating  system. 
Sun  Open  Net  Environinem 
(ONE)  application  server.  Sun 
ONE  Active  Server  Pages  soft¬ 
ware,  Sun  ONE  messaging 
server  for  200  mailboxes  and 
Sun  ONE  directory  server 
with  up  to  200,000  entries. 
Haff  s^.  Also  included  in  the 
stack  is  Sun's  SunScreen  fire¬ 
wall  technology  and  basic  vir- 
tual  private  network  support, 
he added 

“One  of  the  things  that  Sun 
is  certainly  trying  to  play  up  is 
the  value  they  are  offering 
with  this  whole  bundled  ap¬ 
proach."  he  said. 


The  problem  is  that  what 
Sun  is  bundling  may  not  al¬ 
ways  be  what  users  want,  said 
Eric  Greenwade.  a  fellow  at 
the  Idaho  National  Engineer¬ 
ing  and  Environmental  Labo¬ 
ratory  in  Idaho  Fails.  “On  the 
surface,  it  doesn’t  seem  to  of¬ 
fer  us  anything  that  we  aren’t 
getting  out  of  our  [Advanced 
Mkro  Devices  Inc.  Athlon] 
Unux  boxes,"  Greenwade  said 

But  the  integrated  approach 
could  make  a  lot  of  sense,  es¬ 
pecially  for  corporations  that 
want  to  standardize  on  Sun 
technologies,  he  added. 

On  the  storage  ^e,  mean¬ 


while.  Sun  will  introduce  its 
StorEdge  6120  and  StorEdge 
6320  systems,  which  will  be 
the  first  products  in  a  new 
family  of  StorEdge  6000  Fibre 
Channel  RAID  products.  The 
products  will  feature  virtual¬ 
ization  and  provisioning  tech¬ 
nologies  from  the  company's 
acquisition  of  Pirus  Networks 
Inc.  last  year.  The  technolo¬ 
gies  are  aimed  at  letting  users 
better  utilize  their  storage  re¬ 
sources  by  pooling  and  shar¬ 
ing  them  across  multiple  ap¬ 
plications. 

Sun's  efforts  in  this  area  are 
aimed  at  helping  it  close  the 


gap  with  rivals  in  the  area  of 
storage  management  capabili¬ 
ties,  said  Anne  Skamarock.  an 
analyst  at  Enterprise  Manage¬ 
ment  Associates  Inc.  in  Boul¬ 
der.  Cola  "Sun  is  a  laiecomer 
in  this  space,  but  they  are  do¬ 
ing  a  really  nice  job  of  catch¬ 
ing  up."  she  said. 

Sun  will  also  announce 
price  cuts  for  several  of  its 
low-end  hardware  products, 
sources  said.  Prices  for  the 
Sun  Fire  280R.  for  instance, 
are  beu$  rolled  back  by  up  to 
40%.  Also  include  in  the 
price  cuts  are  Sun's  Sun  Blade 
2000  workstations.  I 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 


rr  Plans:  Stop  or  Go? 


JUST  WHEN  WE  THOUGHT  the  budget  purse  strings  for  IT 
projects  were  beginning  to  loosen,  word  comes  that  they’re 
about  to  snap  tight  again.  Last  week,  Morgan  Stanley  chief 
economist  Stephen  Roach  told  his  clients  that  he  now  predicts 
a  worldwide  recession  in  2003,  triggered  by  war,  the  rapid 
spread  of  the  “mystery  virus”  SARS,  uncertainty  and  econom¬ 
ic  imbalances. 

Or  maybe  it  won’t  happen.  Other  economists  figure  the  chance  of 
a  new  recession  is  still  less  than  50%,  especially  if  a  quick  end  to  the 
war  in  Iraq  generates  optimism  that  jump-starts  the  economy. 


Economic  indicators  in  February  and  March, 
even  before  shooting  started,  were  pretty  dis¬ 
mal  Consumer  confidence  plunged,  manufac¬ 
turing  shrank,  and  payrolls  were  slashed.  That’s 
showing  up  in  IT  hiring  plans  as  well  —  they’ve 
shrunk  by  26%  since  last  fall,  according  to  a  sur¬ 
vey  by  Dice  Inc.  and  the  Information  Technolo¬ 
gy  As^iadon  of  America  (see  story,  page  9). 

On  the  other  hand,  we’ve  recently  been  hear¬ 
ing  that  CEOs  are  starting  to  understand  that 
it's  time  to  invest  in  IT  again.  Projects  that  have 
been  on  bold  are  being  given  a  green  light. 

We’re  finally  getting  a  chance  to  show  once 
more  how  IT  can  help  grow  the  business. 

So  which  is  it  —  a  new  recession  or  the  start 
of  a  robust  recovery?  “nroe  to  restart  those  proj¬ 
ects.  or  time  to  batten  down  the  hatches  for  a 
rerun  of 2002? 

Sure,  you'd  love  to  be  optimistic  and  just  de¬ 
cide  things  will  get  better.  But  you  don't  know 
that  And  you  won’t  know  undl  it's  too  late  to 
change  course. 

You  need  to  prepare  for  both  possibilities. 

If  you’re  taking  projects  out  of  mothballs, 
you’ve  probably  already  begun.  You’re  looking 
at  how  well  those  projects  you  orig¬ 
inally  planned  to  do  last  year  still 
match  up  with  your  business  needs 
and  technology  options. 

After  a  year  or  so  on  the  shelt 
some  projects  no  loi^r  make  busi¬ 
ness  or  technical  sense.  Others  will 
need  a  complete  overhaul  because 
business  processes  have  changed, 
better  technolt^  has  arrived,  or 
products  you  were  planning  to  use 
no  loi^r  exist  Still  others  may 
have  changed  priority,  lost  their 
sponsorship  because  of  political 
shifts  or  layoSs,  or  simply  dropped 


oft*  the  radar  of  people  who  once  backed  them. 

So  while  you’re  figuring  out  how  to  refactor 
these  projects  for  the  situation  you’re  in  today, 
take  the  next  step:  Refactor  them  for  the  possi¬ 
bility  you'll  have  to  mothball  them  again. 

Which  projects  look  like  they'll  produce  pay¬ 
back  fastest?  Which  ones  have  backers  too  pow¬ 
erful  to  buck?  These  are  the  projects  you  may 
not  have  to  suspend,  especially  if  they  can  be 
rolled  out  before  a  downturn  hits. 

Which  projects  will  use  stable,  mature  tech¬ 
nology?  Which  ones  solve  classic  business 
problems  for  your  industry?  Which  ones  have 
sponsorship  from  political  survivors?  These  are 
the  ones  you  likely  won’t  have  to  junk  if  they’re 
stopped  and  restarted. 

For  the  rest,  which  parts  of  the  projects  are 
the  least  volatile?  Which  are  the  most  flexible 
or  reusable?  Sketch  out  your  project  plans  so 
these  parts  get  done  first  They  have  the  best 
chance  of  surviving  another  year  if  things  come 
to  a  screeching  halt 

These  may  not  be  the  projects  you’d  like  to 
build,  or  the  ones  you  think  are  most  important. 
This  may  not  be  the  way  you’d  prefer  to  do 
those  projects.  But  this  is  how 
you'll  be  least  likely  to  have  wasted 
work  if  the  economy  heads  south 
and  your  projects  have  to  go  back 
into  the  deep  fteeze. 

Don’t  let  your  optimism  get  the 
better  of  you.  Build  contingency 
plans  into  the  projects  you’re 
restarting  —  with  an  eye  toward 
the  real  possibility  of  another  re¬ 
cession  this  year. 

That  way,  whether  your  CEO 
comes  to  you  with  a  bigger  pot  of 
money  or  slashes  your  budget  to 
shreds,  youH  be  ready.  I 


SAS*  is  aH  you  need  to  know. 


(My  SAS  piDvides  a  high-impact,  low-risk  way 
to  achieve  intelligent  data  warehousing.  Vhu  can 
extract,  transform  and  load  data  fiom  any  source, 
across  any  platform,  while  assuring  quality. 
Sinqtliiy  the  way  you  create  and  customize  reports. 
And  deliver  a  shared  version  of  die  truth.  To  find  out 
how  top  companies  reap  bottom-line  rewards  with 
SAS  software — by  leveraging  the  value  of  data 
from  corporate  systems,  e-business  channels,  the 
supply  chain  and  beyond — visit  us  on  the  Web  or  call 
toU  free  1  866  270  5727. 


www.sas.com/warehouse 


Performance  tests  show  VERITAS  makes  Lmiu  five  times  taster  Eve'  seen  a  ueiiguiii  fiv’ 
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Mining  for  Gems 


BiLsiness-intclli^'nce 

■liaiidl  vnluahlc  insights 
about  UHir  business — ew-'n  pa*- 
dict  customers  will  do  next. 

But  be  caivftil  that  those  data 
|e\scls  dcHi't  foil  into  the  w  rong 
hands.  Stories  begin  on  page  25. 


MUEEXCUISIVE 

Manaoemerrt  dashboards  nx>ve  down  nto  the  cutHdes: 
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RriarK»  1^  May  Force  IT  Systeni  Overhauls 


Qjmpanies  brace  for 
fill!  impact  of  new 
federal  reporting  pegs 


BV  OAMV  H.  AMTHES 

The  Sarbanes-Oxley  Act,  the 
U.S.  government's  attempt  to 
bring  honesty,  clarity  and 
speed  to  corporate  financial 
reporting,  may  ultimately  re¬ 
quire  costly  overhauls  of  bud¬ 
geting,  reporting  and  decision- 
support  systems. 

But  much  remains  unclear 
about  the  potential  impact  of 
the  law,  which  was  passed  last 


summer.  Even  companies 
whose  systems  appear  to  com¬ 
ply  with  the  act  are  uncertain 
as  to  exactly  what  some  provi¬ 
sions  mean  and  when  they 
must  comply  with  the  require¬ 
ments,  according  to  recent  in¬ 
terviews  with  IT  and  business 
executives. 

The  uncertainty  steins  from 
the  fact  that  the  Securities  and 
Exchange  Commission  is  still 
fleshii^  out  the  details  of  the 
law  throi^  a  series  of  pro¬ 
posed  rules.  Moreover,  the 
SEC  has  delegated  some  regu¬ 
latory  tasks  to  other  organiza- 
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dons,  such  as  stock  exchai^es. 
and  they  have  yet  to  act. 

But  the  combined  weight  of 
Sarbanes-Oxley  and  other  new 
regulations  is  expected  to  re¬ 
sult  in  major  systems  changes 
Finance  £4Zw.  page  57 


IBM  Begins  to 
Plot  Integration 
OfRationalTbols 


Says  it’s  working  on  a  road  map  for  the  S2.1B 
acquisition;  products  may  arrive  later  this  year 


Developers  hoping  to  hear 
IBM  convey  deAnitive  plans 
for  its  new  Rational  tool  line 
may  have  been  disappointed 
at  last  week's  develc^rWorks 
Live  conference  here. 

But  throu^  interviews. 

IBM  executives  began  to  pro¬ 
vide  more  details  about  its 
plans  for  Rational  Software 
Corp..  whidi  it  acquired  for 
S2.1  billion  in  February. 

Steve  Mills,  senior  vice  pres¬ 
ident  of  IBM’s  Software  Group, 
said  his  application  integration 
and  middleware  unit  is  work¬ 
ing  with  the  Rational  team  on 
a  road  map.  Customers  can 
expect  announcements  and 
possibly  some  integrated  prod¬ 
uct  deliveries  begmning  later 


IBM  G 

S'... 

M.IK  •  -n,.  -■ 

this  year,  with  more  expansive 
product  rollouts  starting  next 
year.  Mills  said. 

Several  users  said  the  inte¬ 
gration  of  the  companies' 
product  lines,  particularty  the 
Rational  XDE  modeling  tool 
that  some  of  them  already  use 
and  IBM’s  WebSphere  Studio 
Application  Developer,  will  be 
of  key  importance  to  them. 

“We’re  pretty  happy  with 
WebS{rfiere  Studio  Applica¬ 
tion  Developer,  but  if  they 
could  add  t^  (Rational]  mod¬ 
eling  pieces,  that’s  a  plus,"  said 
IBM/Eational  page  16 
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ALSO  IN  OUR  NEWS  SECTION 


•  IT  execs  weigh  the  merils  of  services  that  Jest  programmers’  accuracy  and  expertise  P  ; .  '• 

■  A  preview  of  key  announcements  slated  for  this  week's  Storage  Networking  World  event.  Page-  7 
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INSIDE:  ONE  ON  ONE 

IBM  Software  Group’s  Steve 
Mills  scans  the  comoetilive 
landscape.  P.rtK  lO 
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MORE  THAHE^Tfar., 
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IBM  Begins  to 
Plot  Integration 
Of  Rational  Tools 


Sa\  s  it  s  working;  (in  n  nwd  map  Tor  the 
acquisition:  pmciucts  ina\  arric  c  later  this  year 
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1  i.n  TvU,  Stones  begin  on  paqy  25 


BY  CAROL  SLIWA 

Nf  A  r.H,  t-AS., 

Dcvelirpcrs  hoping  to  hear 
IBM  convey  dertnitiw  plans 
for  its  new  Rational  tool  line 
may  have  been  disappointed 
at  last  week’s  devcIoperWttrks 
Live  conference  here. 

But  through  interviews. 

IBM  executives  began  ttt  pn>- 
vide  more  details  abt>ut  its 
plans  for  Rational  Software 
Corp..  which  it  acquired  for 
S3.1  billion  in  February. 

Steve  Mills,  senior  vice  pres¬ 
ident  of  IBM’s  Software  Group, 
said  his  application  integration 
and  middleware  unit  is  workr 
ing  with  the  Rational  team  on 
a  road  map.  Custirmers  can 
expect  announcements  and 
possibly  some  integrated  prod¬ 
uct  deliveries  beginning  later 
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this  year,  with  more  expansive 
piXKluct  nrllouts  starting  next 
year.  Mills  said. 

Several  users  said  the  inte¬ 
gration  the  companies’ 
pnMJuct  lines,  particularh  the 
Rational  .\IiF.  modeling  hnil 
that  some  «*fthem  already  use’ 
and  IBM’s  WebSphere  Studio 
Application  iKtvIopcr.  will  be 
of  key  importance  t<'  them. 

"We’re  pretty  happy  with 
WebSphere  Studio  Applica- 
tiim  IX‘\  eloper,  hut  if  they 
could  add  the  I  Rational  I  mod¬ 
eling  pieces,  that’s  a  plus."  said 
IHM  fiarional.  pofie  lo 


Managemen!  dashboards  move  down  mfo  me  cubicles 
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Rnance  Law  May  Force  IT  System  Overliauls 


summer.  Even  companies 
whose  systems  appear  to  com¬ 
ply  with  the  act  arc  uncenain 
as  to  exactly  what  some  provi¬ 
sions  mean  and  when  they 
must  comply  with  the  require¬ 
ments.  according  to  recent  in¬ 
terviews  with  IT  and  business 
executives. 

The  uncertainty  stems  from 
the  fact  that  the  Securities  and 
Exchange  Commission  is  still 
fleshing  out  the  details  of  the 
law  through  a  series  of  pro¬ 
posed  rules.  Moreover,  the 
SEC  has  delegated  some  regu¬ 
latory’  tasks  to  other  organiza¬ 


tions.  such  as  struck  exchanges, 
and  they  have  yet  to  act. 

But  the  combined  weight  of 
Sarbanes-Oxlcy  and  other  new 
regulations  is  expected  to  re¬ 
sult  in  major  systems  changes 
finance  Law.  page  57 
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BV  OARVH.ANTHES 

The  Sarbanes-Oxley  Act,  the 
U.S.  government’s  attempt  to 
bring  honesty,  clarity  and 
speed  to  corporate  financial 
reporting,  may  ultimately  re¬ 
quire  costly  overhauls  of  bud¬ 
geting,  reporting  and  decision- 
support  systems. 

But  much  remains  unclear 
about  the  potential  impact  of 
the  law.  which  w’as  passed  last 


Microsoft 


It  can  make 
your  Web  apps  three 
times  faster. 


Visual  Studio  .NET  can  help  you  with  (nearly)  every  part  of  your  job.  Vnur  \A,ob  nppiiration  .  o(,-  asp  \E1 

Web  apoiication  er vKi'.i  -.:rt  >>  wsual  Slucbo  .\Et.  :“ers  dramatic.'ilb  ptT’un>.,ir-,  c  o.-t  ."lass  i  ASP.  H-.  (-•  a  fssv 

O  Compiled  Page  Execution  ASP.\E  '  pages  ar---  r-'-  'i/iP-.i  a'Ci-  .tc.cl  cached  n’  n.en'O'',  ir  .vl  ni  :■  W'n  '.'‘V.,]  ,  i. 

'he  page 'S '■f'Qi.iesfed.  B  Rich  Output  Caching  ASP \ET  s  caching .  . '•■"une  .ricVdS'is.  p.ig--^  .'parts 

I..IC--S  .ii’cJ  objects  tro'Ti  '' . .  '  jr  .mprov.et!  app  .  •  ■  ■  .  Q  Crash  Protection  Web  appiicatio'is  '.an  t  i)e  tas»  ■*  they  m 


down.  Duh.  So  ASP.NET  autoinattcall>  detects  di'd  ft-cove-'S  ef'ofs  i't>e  dc-daicchs  ‘.o 
your  apohcdtion  (S  aiwavs  availaoie.  And  now  the  rev.;,  't-h.-ased  visuH'  bti-d  ci  NET  j003  is 
Mere  for  bunding  and  depiovmg  even  faster  artd  nore  staDu  fippiir rit'ons  Tf,  t  nuw.  'oc 
on  to  a  tu!!>  featured,  free"  onnne  hosted  session  .diu  get  • 

'  on  \  '  -  .  -  msdn.microsoft.com/vstudlo/tryit  VisualStudio.net 


HUE  BCNCHMARH 
S  CPU  PEAR  THROUGHOUT 


ASP  ASP.NET 


Can  your  antivirus  software  provide  double  the  scanning  power?  Ours  can. 

Making  sure  your  company  is  secure  gets  more  and  more  difficult  every  day.  That's  why  eTrust'“  Antivirus  v7 
from  Computer  Associates  uses  dual  scanning  engines  to  ensure  comprehensive  virus  protection.  It  processes 
data  in  real  time  to  search  out  and  eliminate  viruses,  and  it  also  scans  files  during  prescheduled  and 
off-peak  hours.  All  at  the  cost  of  most  single-engine  AV  products.  It's  more  than  just  twice  the  protection. 
It's  twice  the  peoce  of  mind.  ca.com/etrust/antivirus 

eTrust'“  Antivirus 


Computer  Associates® 
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6  fT  flMlMO^n  trsn't  sold  on  the  val¬ 
ue  of  services  that  test  their  pro¬ 
grammers'  development  skills. 

7  At  Storage  Networking  World. 

Hitachi  will  announce  its  first  foray 
into  high-end  network-attached 
storage  devices,  and  Cisco  will  re¬ 
lease  several  products  for  SANs- 

10  Sun  plans  to  make  its  Trusted  So¬ 
laris  technology  pan  of  the  next 
Solaris  release,  due  out  next  year. 

12  Intrusion-prevention  products 

promise  to  help  users  go  on  the  of¬ 
fensive  against  security  threats. 

14  Application  upgrades  that  are  in  the 
works  are  designed  to  provide  users 
with  a  better  view  of  their  supply 
chain  operations. 

57  6E  Industrial  Systems  roils  out  a 
PLM  project  that  it  hopes  will  im¬ 
prove  global  collaboration  in  the 
design  and  manufacturing  of  its 
products. 
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Mining  for  Gems 

Many  executives  seem  content  to  man¬ 
age  their  businesses  by  gut  feelings, 
even  though  valuable  truths  about  their 
customers,  costs  and  profits  are  sitting 
unexplored  in  their  data  warehouses. 
This  report  will  help  you  discover  and 
protect  your  company’s  most 
valuable  data  assets. 

MCKABE  BEOMS  ON  PME  25. 

26'nMStnTSoFar.  William  H.  Imnoo.  the  father  of 
data  wardMusing.  describes  the  genesis  of  the 
concept,  the  challenge  of  integrating  data  from 
legacy  systems  and  what  he's  working  on  now. 

31  Tht  Foracut  ll  Ctav.  Predictive  analytics  use  data 
mining  and  tools  like  regression  and  neural  net- 
woriis  to  predict  customer  behavior  and  other 
things.  Tlte  mathematics  can  be  daunting,  but  the 
tools  are  getting  easier  to  use.  ONUNE:  A  Cosu 
Rican  bank  uses  cost  "wwtoimg  to  better  under¬ 
stand  its  operations  and  figure  out,  say.  whether  to 
add  more  bank  telkrs,  O  QMdlMi  STtM 

34  Unoptctod  ImiBMi.  The  re¬ 
sults  of  data  mining  efibrts  can 
range  from  utterly  baffling  to 
very  usefriL  with  lots  of  surpris¬ 
es  in  between.  And  they  often 
I  provide  the  frets  that  prove  or 
diqnove  managers' gut  feelings. 
i  Itoe's  a  coUectioo  of  data  min¬ 
ing  results  that  gave  businesses 
V  insi^us  about  tbdr  cus¬ 
tomers  and  marlots. 


38  OpMon:  The  growing  population  of  data  gate¬ 
keepers  should  be  as  guarded  as  bouncers  and 
just  as  selective  about  who  gets  in  to  see  your  or¬ 
ganization's  data,  says 
rolumnist  Mark  Hall. 

36  Too  Much  of  a  Good 
Thing?  Real-time 
data  feeds  are  just 
an  added  expense  if 
data  qtiality  is  poor 
or  the  company  is 
un^le  to  actually 
analyze  and  act  on 
the  incoming  data. 

40  The  Almanac:  Users  are  looking  for  simple,  core 
functions  in  their  business-inteUigence  software 
—  not  fads.  And  IT  managers  arc  a  bit  more  skep¬ 
tical  than  business  managers  are  about  the  quali¬ 
ty  of  corporate  data.  These  and  other  insights  are 
in  our  collection  of  research  and  resources. 

42  Keys  to  tha  KJngdom.  How  do  you  keep  the  valu¬ 
able  and  competitive  information  your  company 
has  collected  about  its  customers  from  walking 
out  the  door?  The  first  step  is  to  cleariy 
define  who  has  access  to  what  data. 

44QuicfcStiidr  A  primer  on  data 
models,  the  organmation  of  a 
database  that  gives  meaning  and 
utility  to  the  data  inside  it 

46  Careers:  A  roundup  of  skills, 
training  and  salary  information 
for  data  architects. 

52  ThsNnt  Chapter  Asked  to  pre¬ 
dict  the  future  of  business  intelli¬ 
gence,  these  pundits  say  that  dash¬ 
boards  will  be  hot,  e-m^  will  be 
mined  for  business  insights,  and 
middle  managers  may  be  out  of  woik. 

OMJC:  Industry  visioiiaries  say  the  future  in¬ 
cludes,  among  ocher  things,  expectations  of 
instant  information.  O  (I 
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Computerworkt  Store 
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OiAtDeciaion  support  pioneer 
)ohn  Kopeks  says  mamgement 
datfahoardi  arc  aaovipg  from 
the  executive  auiie  down  to 
froot-Bae  managm  who  need 
^ecifk  iafooBatioD. 
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INMUNih  SaniMP  Cm  Do 

FbtIMmm  talllgMKO 

Oranfc  Web  services  promise 
to  make  the  fob  of  integrating 
burinesa  intei%ence  systems 
easict;  but  they  won’t  signifl- 
caidyreAaoetheovetnUITin- 
vestaeat  needed  to  build  soefa 
a  ayatea,  aayi  one  CKX 
•  OMiMMITIH 


OHMOfc  Prom  the  supcrspiedy 
to  the  feature’-ddu  several 
open-wouroe  databsses  are 
equipped  to  meet  your  needs, 
tqrs  cohnniitst  Rittsell  C 
PavlicelL 
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AT  DEADLINE 


P&G  Chooses  HP 
For  Outsourcing . . . 

Procttr  A  OamU«  Co.  said  R  hss 
signod  a  Itntatrn  dost,  vakied  at 
S3  bWofi  ovar  10  years,  to  out¬ 
source  most  of  tts  fT  operations 
to  Hewfett-Paclard  Co.  H  final¬ 
ized,  the  agreoment  wouM  and 
the  IT  portion  of  an  outsourcing 
negotiations  saga  that  Rrciuded 
aborted  contract  talks  between 
PM  and  two  other  vendors 
IQukMJnk  34271].  About  1,850 
worhars  wH  transfer  to  HP  from 
Cincirwiati-basod  PM. 


. ..  And  Ericsson 
Signs  Similar  Deal 

LM  Ericsson  Telephone  Co.  also 
announced  plans  to  outsource  IT 
activltiee  to  HP.  Stockholm- 
based  Erlcseen  said  R  has  sigrtad 
an  agreement  in  principis  wRh 
1^  for  a  contract  covering  Rs 
worldwide  IT  operations,  eicepi 
for  application  devatopment  and 
managamant  Tht  companies 
didnl  dtadooe  the  financial 
terme  of  the  deal,  which  they  ei- 
psct  to  finalize  by  midyear. 


Siebei  Asks  FBI 
To  Probe  Leak 

Slebel  Systoras  Inc.  said  M  has 
artad  the  FBI  to  investigate  a 
teak  of  BKoarpts  from  its  third' 
quarter  2002  customer-satisfac¬ 
tion  swvey  showing  that  some 
user  reviews  were  lass  than  fa- 
vorabla.11wSanMalao.  CaM.* 
based  OHd  eoflwora  vendor 
dMn*t  dbputa  the  aidhentidty  of 
the  leaks  but  said  the  Merma- 
tton  was  takan  out  of  contezt 


CK)  Plans  to  leave 
AT&TWbeiess 

ATiT  WMbss  Sarvfcas  Inc.  In 
Rsdmond,  MhIl,  confirmad  that 
CK)  Michesi  Benson  subrnMad 
Ms  rssignitioo  on  Apri  10.  A 
company  spoktaman  said  tbs 
move  wsani  ralatsd  to  planned 
tayofls.  wWcfa  ate  especled  to 
kwhide  cutbacks  in  fT. 


Programmer  Testing  Services 
Get  Wary  Reception  From  IT 


Some  CIOs  say  exams  can’t  measure 
key  capabilities  beyond  coding  skills 


BV  THOMAS  HOFFMAN 

INFORMATION  technology 
executives  last  week  had 
mixed  reactions  to  the 
emergence  of  so-called 
programmer  testing  services 
that  can  be  used  to  measure 
and  rank  the  accuracy  and 
technical  know-how  of  both 
offshore  and  domestic  soft¬ 
ware  developers. 

For  instance.  TopCoder  Inc., 
a  Glastonbury.  Conn.-based 
company  that  hosts  weekly 
online  programming  competi¬ 
tions.  recently  rolled  out  a 
testing  service  for  corporate 
IT  managers  who  want  to 
evaluate  the  skills  of  current 
workers,  job  candidates  or 
employees  of  IT  services 
finns.  Programmers  who  take 
one  of  the  500-plus  tests  of¬ 
fered  by  TopCoder  can  be  rat¬ 
ed  against  a  database  with  in¬ 
formation  about  more  than 
5.000  developers,  said  Rob 
Hughes.  TopCoder’s  president 
and  chief  operating  officer. 

Meanwhile.  Brainbench  Inc.. 
a  Chantilly,  Va.-based  skills 
testing  and  certification  ven¬ 
dor.  last  month  signed  a  con¬ 


tract  with  Wipro  Ltd.  to  pro¬ 
vide  tests  to  programmers  at 
the  Bangalore.  India-based 
software  services  firm.  Brain- 
bench  has  about  100,000  re¬ 
sults  for  each  of  the  major 
programming  languages  for 
which  it  offers  tests,  said  Mike 
Russiello,  the  company's  pres¬ 
ident  and  CEO. 

Both  Hughes  and  Russiello 
said  they’re  increasing  efforts 
to  market  their  testing  ser¬ 
vices  to  companies.  But  some 
IT  managers  were  skeptical 
about  the  value  of  such  test¬ 
ing.  particularly  for  dealings 
with  potential  offshore  pro¬ 
grammers. 

"I  would  be  wary  about  us¬ 
ing  this  type  of  service.”  said 
David  Dart,  CIO  at  HVB 
America  Inc.,  a  New  York- 
based  division  of  financial  ser¬ 
vices  firm  HVB  Group  in  Mu¬ 
nich,  Germany.  Dart  said  he 
thinks  it  would  be  more  ap¬ 
propriate  for  an  IT  services 
company  to  put  its  program¬ 
mers  through  "an  indepen¬ 
dently  validated  quality- 
assurance  program." 

He  added  that  his  offshore 
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programming  concerns  go 
deeper  than  just  evaluating 
programmers'  skills. 

On  previous  software  devel¬ 
opment  projects  that  HVB 
America  sent  offshore.  Dart 
found  that  the  problems  that 
emerged  weren’t  the  result  of 
low-quality  coding.  Rather, 
business  process  and  lan¬ 
guage-barrier  issues  cropped 
up.  he  said. 

Seeking  Soft  Skills 

John  Radko,  chief  architect  at 
Gaithersburg,  Md. -based 
Global  Exchange  Services  Inc. 
(GXS),  said  he  sees  the  kind  of 
testing  services  offered  by 
TopCoder  and  Brainbench  as 
"a  great  concept.”  However, 
Radko  added  that  he  doesn’t 
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think  GXS.  which  operates  a 
business-to-business  e-com¬ 
merce  network,  would  make 
use  of  the  services  for  hiring 
developers  at  its  facility  in 
Bangalore. 

"We  have  less  difficulty 
finding  people  that  program 
well  and  more  difficulty  with 
[hiring]  people  that  can  work 
on  geographically  distributed, 
cross-functional  teams,”  Rad¬ 
ko  said,  citing  functions  such 
as  marketing,  engineering  and 
customer  service.  As  a  result, 
it’s  the  latter  qualities  "and 
other  softer  skills  that  we  tend 
to  make  hiring  decisions  on.” 
he  noted. 

Ron  Glickmait  CIO  at  DFS 
Group  Ltd.,  a  San  Francisco- 
based  retailer  of  duty-free 
goods,  said  he  trusts  the  work¬ 
ing  relationship  his  company 
has  with  Cognizant  Technolo¬ 
gy  Solutions  Corp..  a  Teaneck, 
N.J.-based  firm  that  has  pro¬ 
vided  offshore  programming 
services  to  DFS  for  the  past 
three  years. 

"It’s  their  job  to  constantly 
maintain  the  highest  possible 
quality  and  productivity  stan¬ 
dards.  and  I  expect  them  to 
make  investments  in  tools  and 
services  as  they  see  fit.”  Glick- 
man  said.  He  cited  Cognizant’s 
Level  5  certification  under  the 
Capability  Maturity  Model,  a 
rating  system  developed  at 
Carnegie  Mellon  University  to 
gauge  the  maturity  of  applica¬ 
tion  development  processes 
on  a  scale  of  one  to  five.  I 
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EMC  Rne-tunes  Centera  Array  for  Data  Retention 


Adds  technology 
to  aid  compliance 
with  new  niles 


av  LUCAS  MEARIAM 

EMC  Corp.  last  week  an¬ 
nounced  a  specialized  version 
of  its  Centera  fixed-data  disk 
array  for  financial  services 
firms  and  other  companies 
that  need  to  comply  with 
new  regulations  on  retaining 
e-tnail  and  ensuring  the  au¬ 
thenticity  of  their  earnings 
statements. 

The  Centera  Compliance 
Edition  array  will  cost  15%  to 
20%  more  than  the  general- 
purpose  model  released  last 


April,  according  to  EMC.  Bui 
the  company  said  the  new 
product  includes  software  and 
hardware  features  that  let  IT 
managers  set  strict  rules  for 
retaining  and  deleting  e-mail 
messages  and  ocher  docu¬ 
ments.  as  well  as  increased 
security  mechanisms  for  con¬ 
trolling  access  to  records. 

Steve  Rubinow.  chief  tech¬ 
nolog)'  officer  at  Archjf>eiago 
LLC,  which  operates  an  elec¬ 
tronic  stock-trading  network, 
said  the  Chicago-based  com¬ 
pany’s  IT  department  uses  op¬ 
tical  disks  to  store  data  for  in¬ 
spection  by  the  Securities  and 
Exchange  Commission  and 
other  regulators. 


Archipelago  doesn’t  have  a 
data  retention  policy,  other 
than  to  “put  it  on  this  disk  . . . 
and  keep  it  for  seven  years.” 
Rubinow  said.  “It  would  be 
worth  thinking  about  where 
[Centera]  might  fit  into  our 
environment,  because  you  can 
see  it  has  an  advantage  over 
what  we*re  doing  now."  For 
example,  he  said,  a  device  like 
Centera  could  help  automate 
tasks,  reducing  the  need  for  IT 
staffers  to  manually  remove 
and  store  optical  platters. 

Regulatory  Push 

Centera  uses  inexpensive  Ad¬ 
vanced  Technology  Attach¬ 
ment  (ATA)  disk  drives  and 


Hitachi,  Cisco  Plan  Key  Rollouts 
At  Storage  Networking  Show 


Will  announce  NAS, 
IP  switch  products 

BY  LUCAS  MCAIttAN 

Cisco  Systems  Inc.  and  Hi¬ 
tachi  Data  Systems  Corp.  both 
plan  to  use  this  week’s  Storage 
Networking  World  conference 
to  announce  maior  additions 
to  their  storage  product  lines. 

The  conference  _ 

starts  today  in 
Phoenix  and  is  co¬ 
sponsored  by  Com- 
puterworld  and  the 
Storage  Networic- 

ing  Industry  Asso-  - 

ciation.  HDS  plans  to  disclose 
at  the  conference  that  it's  us¬ 
ing  Network  Appliance  Inc.’s 
FAS900  file  server  engine  in 
front  of  its  Lightning  9900V 
storage  array  to  create  a  high- 
end  network-attached  storage 
(NAS)  device.  The  combined 
product  will  be  available  with¬ 
in  the  next  few  weeks,  said 
Phil  Townsend,  senior  direc¬ 
tor  of  product  marketing  at 
Santa  Clara,  (2alif. -based  HDS. 

Chicago-based  Archipelago 
LLC,  which  operates  an  elec¬ 
tronic  stock-trading  network, 
uses  one  of  HDS’s  Lightning 
9970  arrays  to  back  up  Winte) 
and  Sun  Solaris  servers  on  a 
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storage-area  network  (SAN). 
Steve  Rubinow.  Archipelago’s 
chief  technology  officer,  said 
the  NAS  device  is  of  interest 
to  him  because  it  uses  proven 
technology  from  two  industry 
leaders.  But  Rubinow  added 
that  his  storage  infrastructure 
still  has  room  to  grow,  so  be 
has  no  immediate  plans  to  buy 
the  NAS  products. 

Michael  Peter¬ 
son.  an  analyst  at 
Strategic  Re¬ 
search  Corp.  in 
Santa  Barbara. 
Calif.,  said  HDS’s 
position  as  one  of 
the  top  vendors  of  storage 
devices  for  SANs  should  help 
it  as  it  enters  the  high-end 
NAS  sector. 

“Anything  that  gives  the 
customer ...  a  single  throat  to 
choke  is  good  in  the  end." 
Peterson  said,  referring  to 
HDS’s  new  ability  to  supply 
both  SAN  and  NAS  products. 

The  K*  Connection 

Cisco  is  announcing  a  series 
of  products  that  use  Fibre 
Channel  over  IP  (FCIP)  to 
transport  block-level  data  via 
the  Internet  at  Gigabit  Ether¬ 
net  speeds.  FCIP,  a  tunneling 
technology  that  began  to  show 


up  in  products  last  year,  is 
most  often  used  to  connect  re¬ 
mote  SANs  to  a  central  data 
center  for  data  backup  pur¬ 
poses. 

Cisco’s  FCIP  products  in¬ 
clude  an  upgrade  to  its  SN 
5428  storage  switch  that  will 
let  storage  administrators  liidc 
departmental  or  workgroup 
SANs.  The  company  will  also 
announce  an  eight-port  line 
card  that  can  send  data  via 
both  FCIP  and  SCSI  over  IP 
for  its  MDS  9000  series  of 
SAN  directors  and  switches, 
plus  Fibre  Channel  pon 
adapters  for  its  7200  and  74(X) 
series  routers. 

Total  System  Services  Inc., 
a  credit  card  transaction- 
processing  company  in 
Columbus.  Ga^  is  using  two 
Cisco  MDS  9216  multilayer 
fabric  switches  equipped  with 
the  new  line  cards  to  provide 
FCIP  connectivity  between  a 
pair  of  IBM  FAStTSOO  storage 
arrays  in  data  centers  17  miles 
apart.  Total  System  Services  is 
mirroring  up  to  2TB  of  data 
between  the  arrays,  said  Sehin 
Hollingsworth,  the  company's 
director  of  network  services. 

Hollingsworth  said  it  took 
just  minutes  to  install  the  line 
cards  and  noted  that  the  tech¬ 
nology  has  worked  flawlessly. 
He  said  he's  considering  using 
it  to  cobble  together  storage 
devices  in  ocher  data  centers 
around  the  southeastern  U.S.  I 


includes  software  that  creates 
a  27-character  identifier  for 
each  document  or  image.  A 
separate  file  with  a  new  iden¬ 
tifier  is  created  when  records 
are  up>datcd  in  transaction  sys¬ 
tems.  preventing  earlier  ver¬ 
sions  of  the  information  from 
being  overwritten. 

Brad  Nisbet.  an  analyst  at 
IDC  in  Framin^dum.  Mass., 
said  adoption  of  storage  sys¬ 
tems  such  as  Centera  is  being 
driven  by  regulations  such  as 
the  SEC’s  rule  on  electronic- 
records  retention  and  laws 
like  the  Sarbanes-Oxlej’  Act. 
which  requires  CEOs  to  sign 
off  on  the  accuracy  of  corpo¬ 
rate  financial  reports.  Similar 
devices  arc  sold  b>'  vendors 
such  as  Network  Appliance 
Inc.  and  Storage  Tcchnolog>' 
Corp..  but  they  lack  Ontera’s 
content-addressing  feature. 

Nisbet  said  the  most  signifi¬ 
cant  new  feature  in  the  Cen- 
tcra  Compliance  Edition  is  a 
capability  that  lets  users  set 
automated  rules  governing 
how  long  electronic  records 
have  to  be  tvtained. 

Roy  Sanford,  vice  president 
of  content-addressed  storage 
at  EMC  in  Hopkinton.  Mass.. 


NEW  FEATURES 


Centera 

Compliance  Edition 

•  Dalif  atanUon  policy 
entorovnml  toots  that  let 
compliance  othcers  set  rules  on 
trow  long  data  must  be  Kepi 

■  Electronic  “shr«Ung“  capa- 
bHitlBs  that  ensure  docunents 
can  t  be  recovered  wftb  dok- 
scanning  tools  once  they're 
erased 

*  Application  accosa-control 
machanianis  that  can  be  used 
to  saleguard  sensdive  data  irom 
unaulhonred  end  users. 


said  Centera  Compliance 
Edition  stores  metadata  about 
each  record  and  uses  it  to 
determine  whether  deletion 
requests  should  be  honored. 

For  example,  if  the  array  re¬ 
ceives  a  request  to  delete  an 
archived  e-mail  message,  it 
first  calculates  whether  the 
e-mail  has  reached  the  end  of 
its  regulated  life  cycle. 

The  list  price  for  an  entry- 
level  Centera  Compliance  Edi¬ 
tion  system  with  4TB  of  us¬ 
able  storage  space  is  $148,000. 
which  adds  up  to  about  $10 
per  gigabyte  more  than  the 
cost  of  the  regular  version  of 
the  array,  t 
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Programmer  Testing  Services 
Get  Wary  Reception  From  IT 


Some  C'.IOs  s;n  exams  can’t  measure 
ke\  capabilities  bcNond  coding  skills 
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P&G  Chooses  HP 
For  Outsourcing . . . 

Procter  A  Gambte  Co.  said  it  has 
signed  a  tentative  deaJ,  valued  at 
S3  MKon  over  10  years,  to  out* 
source  most  of  its  (T  operations 
to  HewHett*Packard  Co.  If  RnaF 
ized,  the  agreement  would  end 
the  IT  portion  of  an  outsourcing 
negotiations  saga  that  included 
aborted  contract  talks  between 
PAG  and  two  other  vendors 
(QuiefcUnk  34271).  About  1.850 
workers  will  transfer  to  HP  from 
Cincinnafi'based  PAG. 


. . .  And  Ericsson 
Signs  Similar  Deal 

LM  Ericsson  Telephone  Co.  also 
announced  plans  to  outsource  IT 
activities  to  HP.  Stockholm- 
based  Ericsson  said  it  has  signed 
an  agreement  in  principle  with 
HP  for  a  contract  covering  its 
worfdwkfe  IT  operations,  except 
lor  application  development  and 
management  The  companies 
(Mn’t  disclose  the  financial 
terms  of  the  deal,  which  they  ex¬ 
pect  to  finalize  by  midyear. 


Siebel  Asks  FBI 
To  Probe  Leak 

Siebel  Systems  he.  said  it  has 
asked  (he  FBI  to  investigate  a 
leak  of  excerpts  from  its  third- 
quarter  2002  customer-satisfac¬ 
tion  survey  showing  that  some 
user  reviews  were  less  than  fa¬ 
vorable.  The  San  Mateo.  CalH.- 
based  CRM  software  vendor 
didn't  dispute  the  authenticity  of 
the  leaks  but  said  the  informa¬ 
tion  was  taken  out  of  context. 


CK)  Plans  to  Leave 
ATAT  Wireless 

ATAT  Wireless  Services  Inc.  in 
Redmond.  Wash.,  confirmed  that 
OO  Michael  Bertson  submitted 
Ms  resignation  on  April  10.  A 
company  spokesman  said  the 
move  wasn't  related  to  planned 
layoffs,  which  are  expected  to 
hdude  cutbacks  in  IT. 


BV  THOMAS  HOFFMAN 

NM»kMA’i  u>N  tochnolojiy 
executives  List  week  had 
mi.xcd  reactions  to  the 
emergence  of  stvcalled 
I  prtrgrammer  testing  services 
I  that  can  be  used  to  measure 
:  and  rank  the  accuracy  and 
technical  know-how  of  both 
offshore  and  domestic  solt- 
w.irc  develoi>ers, 
for  instance.  TopCiKlcr  Inc.. 
I  a  Glastonbury.  Gonn.-based 
company  that  hosts  weekly 
online  programming  competi¬ 
tions.  recently  rolled  out  a 
testing  seri-ice  for  corporate 
IT  managers  who  want  to 
evaluate  the  skills  of  current 
wt>rkers,  job  candidates  or 
I  employees  of  IT  ser>’ices 
firms.  I’fx>grammers  who  take 
one  of  the  500-plus  tests  of¬ 
fered  by  TopCodcr  can  be  rat¬ 
ed  against  a  database  with  in¬ 
formation  about  more  than 
5.000  developers,  said  Rob 
Hughes.  TopCoder's  president 
and  chief  operating  officer. 

Meanwhile.  Brainbench  Inc., 
a  Chantilly.  Va.-hased  .skills 
testing  and  certification  ven¬ 
dor,  Iasi  month  signed  a  con- 


Daniel  Rohrer.  manager  ol 
Nvidia  Corp.'s  OirectXGraphics 
business  unit,  has  used  Top¬ 
Coder's  ratings  in  an  ad  hoc  way 
to  measure  the  programming 
skills  ol  two  college  students 
who  irrtemed  at  his  company. 
But  Rohrer  said  he  hasn't  d^- 
ed  whether  it  makes  sense  lor 
Nvidia  to  pay  to  use  TopCoder’s 
service. 

The  students  are  TopCoder 
members  who  take  part  in  Hs 
weektyprogrammingcompeti- 
lions.  After  Rohrer  saw  how  w^ 
they  had  scored,  he  offered  jobs 


tract  with  Wipro  Ltd.  to  pro¬ 
vide  tests  to  pri>gr3mmers  at 
the  Bangalore.  India-based 
software  services  firm.  Brain- 
I  bench  ha.s  about  100.000  rc- 
I  suits  for  each  of  the  major 
PR>gramfning  languages  for 
which  it  offers  tests,  said  Mike 
Russicll<».  the  company’s  pres¬ 
ident  and  CEO. 

Both  Hughes  and  Russiello 
said  they're  increasing  efforts 
to  market  their  testing  ser¬ 
vices  to  companies.  But  some 
IT  managers  were  skeptical 
I  about  the  value  of  such  test¬ 
ing.  particularly  for  dealings 
with  potential  offshore  pro¬ 
grammers. 

“1  would  be  wary  about  us¬ 
ing  this  type  of  service,"  said 
David  Dart.  CIO  at  HVB 
America  Inc.,  a  New  York- 
based  division  of  financial  ser¬ 
vices  firm  HVB  Group  in  Mu¬ 
nich.  Germany.  Dart  said  he 
!  thinks  it  would  be  more  ap¬ 
propriate  for  an  IT  scr\-ices 
company  to  put  its  pri>gram- 
mers  through  "an  indepen¬ 
dently  validated  quality- 
assurance  program." 

He  added  that  his  «)frshorc 


to  them  and  to  one  other  Top- 
Coder  mefTtoer.  The  offers  have 
yet  to  be  accepted. 

Rohrer  typiuOy  assigns  up  to 
eight  developers  lo  spend  45 
minutes  with  job  candidates  to 
assess  dieir  technical  acumen. 
Tm  looking  tor  people  who  have 
farmlianty  with  graphics  APIs 
and  algonthm  experience,  and 
there's  no  certification  ter  what 
we  do.*  he  said. 

Rohrer  said  the  ability  to  pul  a 
potential  hire  through  Top¬ 
Coder’s  tests  could  provide  an 
auxiliary  assessment  tool  lor 


programming  concerns  go 
deeper  than  just  evaluating 
programmers’  skills. 

On  previous  software  devel¬ 
opment  projects  that  HVB 
America  sent  offshore.  Dart 
found  that  the  problems  that 
emerged  weren't  the  result  of 
low-quality  coding.  Rather, 
business  prtK'ess  and  lan¬ 
guage-barrier  issues  cropped 
up,  he  said. 

Seeking  Soft  Skills 

John  Radko.  chief  architect  at 
Gaithersburg.  Md.-based 
Global  Exchange  Services  Inc. 
(GXS).  said  he  secs  the  kind  of 
testing  services  offered  by 
TopCoder  and  Brainbench  as 
"a  great  concept."  However. 
Radko  added  that  he  doesn't 


Nvidia,  a  maker  of  graphics  and 
communications  processois  in 
Santa  Clara.  CaKf.  But  he  added 
that  Nvidia  officials  wdl  have  to 
weigh  the  potential  value  of  the 
service  against  its  cost. 

Marc  I^amuk.  an  analyst  at 
IDC  in  Framingham.  Mass.,  said 
he  sees  a  strong  potential  mar- 
tet  tor  testing  services  like  Top- 
Code’s  and  Brainbench's.  ‘With 
the  down  economy  and  high  un¬ 
employment  rates  among  IT 
workers,  it’s  a  real  buyer's  mar¬ 
ket.  and  [this  is]  a  great  way  for 
companies  to  extend  the  bendi 
strength  of  their  organizations.* 
hesaid.  ‘Ihantas  Hoffman 


think  GXS.  which  operates  a 
business-to-business  c-com- 
merce  network,  would  make 
use  of  the  services  for  hiring 
developers  at  its  facility  in 
Bangalore. 

“We  have  less  difflcnilty 
finding  people  that  program 
well  and  more  difficulty  with 
(hiring]  people  that  can  work 
on  geugraphicaliy  distributed, 
cross-functional  teams."  Rad¬ 
ko  said,  citing  functions  such 
as  marketing,  engineering  and 
customer  service.  As  a  result, 
it's  the  latter  qualities  "and 
other  softer  skills  that  wc  tend 
to  make  hiring  decisions  on." 
he  noted. 

Ron  Glickman,  CIO  at  DFS 
Group  Ltd.  a  San  Francisew 
based  retailer  of  dut)’-free 
goods,  said  he  trusts  the  work¬ 
ing  relationship  his  company 
has  with  Cognizant  Technokv- 
gy  Solutions  Corp..  a  Tcaneck. 
N.]. -based  firm  that  has  pro¬ 
vided  offshore  programming 
services  to  DFS  for  the  past 
three  years. 

“It’s  their  jt^  to  constantly 
maintain  the  highest  possible 
quality’  and  productivity  stan¬ 
dards.  and  I  expect  them  to 
make  investments  in  tools  and 
services  as  they  see  fit.’’  Click- 
man  said.  He  cited  Cognizant's 
Level  5  certification  under  the 
Capability  Maturity  Model,  a 
rating  system  developed  at 
Carnegie  Mellon  University  to 
gauge  the  maturity'  of  applica¬ 
tion  development  processes 
on  a  scale  of  one  to  five.  I 


Nvidia  Weighs  TopCoder’s  Benefits,  Cost 
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EMC  Fine-tunes  Centera  Array  for  Data  Retention 


Adds  tcvhnolog)’ 
U)  aid  compliance 
with  new  niles 


BV  LUCAS  MEARIAH 

EMC  Corp.  last  week  an¬ 
nounced  a  specialized  version 
of  its  Centera  fixed-data  disk 
array  for  financial  seiA’ices 
firms  and  other  companies 
that  need  to  comply  with 
new  repulations  on  retaining 
e-mail  and  ensuring  the  au¬ 
thenticity  of  their  earnings 
statements. 

The  Centera  Compliance 
Edition  array  will  cost  15%  to 
20%  more  than  the  general- 
purpose  model  released  last 


April,  accttrding  to  EMC.  But 
the  company  said  the  new 
product  includes  software  and 
hardware  features  that  let  IT 
managers  set  strict  rules  for 
retaining  and  deleting  e-mail 
messages  and  other  di>cu- 
ments.  as  well  as  increased 
security  mechanisms  for  con¬ 
trolling  access  to  records. 

Steve  Rubinow,  chief  tech¬ 
nology  officer  at  Archipelago 
LLC.  which  operates  an  elec¬ 
tronic  sUKk-tradifig  nct\vork. 
said  the  Chicago-based  com¬ 
pany's  IT  department  uses  op¬ 
tical  disks  to  store  data  for  in¬ 
spection  by  the  Securities  and 
Exchange  Commission  and 
other  regulators. 


.Archipelago  diK'sn't  have  a 
data  retention  policy,  other 
than  t<»  -pm  it  on  this  disk  . . . 
and  keep  it  for  SL*vcn  years." 
Rubinow  said.  "Ii  would  be 
worth  thinking  about  where 
[Centeral  might  fit  into  our 
environment,  btvausc  yt>u  can 
see  it  has  an  advantage  over 
what  we’re  doing  now."  bor 
example,  he  said,  a  device  like 
Centera  could  help  automate 
tasks,  reducing  the  need  for  I  T 
staffers  to  manually  remox  c 
and  store  optical  platters. 

Regulatory  Push 

Centera  uses  inexpensive  Ad¬ 
vanced  Technolog)-  Attach¬ 
ment  (ATA)  disk  drives  and 


Hitachi,  Cisco  Plan  Key  Rollouts 
At  Storage  Networking  Show 


will  announce  NAS. 
II’  switch  products 

BV  LUCAS  MEARIAN 

Cisco  Systems  Inc.  and  Hi¬ 
tachi  Data  Systems  Corp.  both 
plan  to  use  this  week's  Storage 
Networking  World  conference 
to  announce  major  additions 
to  their  storage  product  lines. 

TTie  conference  _ 

starts  today  in 
Phoenix  and  is  co¬ 
sponsored  by  Com- 
puferworW  and  the 
Storage  Network¬ 
ing  Industry  Asso- 
elation.  HDS  plans  to  disclose 
at  the  conference  that  it’s  us¬ 
ing  Network  Appliance  Inc.’s 
FAS900  file  serv  er  engine  in 
front  of  its  Lightning  9900V 
storage  array  to  create  a  high- 
end  network-attached  storage 
(NAS)  device.  The  combined 
product  will  be  available  with¬ 
in  the  next  few  weeks,  said 
Phil  Townsend,  senior  direc¬ 
tor  of  product  marketing  at 
Santa  Clara,  Calif.-based  HDS. 

Chicago-based  Archipelago 
LLC,  which  operates  an  elec¬ 
tronic  stock-trading  network, 
uses  one  of  HDS's  Lightning 
9970  arrays  to  back  up  Winte! 
and  Sun  Solaris  servers  on  a 


STOUeEDOWNlOAO 

For  mofe  on  Ibis  subied.  vsfl 
our  Storage  Knowledge  Center 

OOucHJnkklTaO 

www.cenipiiterworidxofn 


storage-area  network  (SAN). 
Steve  Rubinow.  Archipelago’s 
chief  lechnolog)-  officer,  said 
the  NAS  device  is  of  interest 
to  him  because  it  uses  proven 
technology  from  two  industr)- 
leaders.  But  Rubinow  added 
that  his  storage  infrastructure 
still  has  room  to  grow,  so  he 
has  no  immediate  plans  to  buy 
the  NAS  products. 

Michael  PetcT- 
son.  an  analyst  at 
Strategic  Re¬ 
search  (!Iorp.  in 
Santa  Barbara, 
Calif.,  .said  HDS'.s 
position  as  one  of 
the  top  vendors  of  storage 
devices  for  SANs  should  help 
it  as  it  enters  the  high-end 
NAS  sector. 

“Anything  that  giv-es  the 
customer ...  a  single  throat  to 
choke  is  good  in  the  end.” 
Peterson  said,  referring  to 
HDS’s  new  ability  to  supply 
both  SAN  and  NAS  products. 

The  IP  Connection 

Cisco  is  announcing  a  seric’s 
of  products  that  use  Fibre 
Channel  over  IP  (FCIP)  to 
transport  block-level  data  via 
the  Internet  at  Gigabit  Ether¬ 
net  speeds.  FCIP.  a  tunneling 
technology  that  began  to  show 


up  in  products  last  year,  is 
most  often  used  to  connect  re¬ 
mote  SANs  to  3  central  data 
center  for  data  backup  pur¬ 
poses. 

CisL'o’s  FCIP  products  in¬ 
clude  an  upgrade  to  its  SN 
5428  .storage  switch  that  will 
let  storage  administrators  link 
departmental  or  workgroup 
SANs.  The  company  will  alsti 
announce  an  eight-port  line 
card  that  can  send  data  via 
bitth  FCIP  and  SCSI  over  IP 
for  its  MDS  90(X)  series  of 
SAN  directors  and  switches, 
plus  Fibre  Channel  port 
adapters  for  its  7200  and  7400 
series  routers. 

Total  System  Sen-ices  Inc., 
a  credit  card  transaction- 
processing  company  in 
Columbus,  Ga..  is  using  two 
Cisco  MDS  92I6  multilayer 
fabric  switches  equipped  with 
the  new  line  cards  to  provide 
FCIP  connectivity  between  a 
pairoflBM  FAStTSOO  storage 
arrays  in  data  centers  17  mile’s 
apart.  TtMal  System  Services  Ls 
mirroring  up  to  2TB  of  data 
between  the  arrays,  said  Selvin 
Hollingsworth,  the  company's 
director  of  network  services. 

Hollingsworth  said  it  took 
just  minutes  to  install  the  line 
cards  and  noted  that  the  tech¬ 
nology  has  worked  flawlc^ssly. 
He  said  he’s  corniidering  using 
it  to  cobble  together  storage 
devices  in  other  data  centers 
around  the  southeastern  U.S.  I 


includes  MTftware  ilut  creati-s 
a  27-ch3r3cter  identifier  f«*r 
each  d«H.‘ument  4'r  image.  A 
separate  file  with  a  new  tden- 
lifier  is  cre.-Tied  when  records 
are  updated  in  transaction  sys¬ 
tems.  preventing  earlier  ver- 
sU»ns  of  the  information  from 
be’ing  overwritten. 

Brad  Nisbet.  an  analyst  at 
IDC  in  Framingham.  Mass., 
said  adoption  t»f  sttirage  sys¬ 
tems  such  as  Centera  is  being 
driven  by  rcgulaiitins  such  as 
the  SECs  rule  on  electronic- 
records  retention  and  laws 
like  the  Sarbanes-Ovley  Act. 
which  requires  CEOs  to  sign 
off  on  the  accuracy  tif  corpo¬ 
rate  financial  reports.  Similar 
devices  are  sold  by  vendors 
such  as  Network  Appliance 
Inc.  and  Storage  Technt*kigy 
Corp..  but  they  lack  Centcra’s 
c«)ntent-addressing  feature. 

Nisbet  said  the  most  signifi¬ 
cant  new-  feature  in  the  Cen- 
lera  Compliance  Edition  Ls  a 
capability  that  lets  users  set 
automated  rules  governing 
how-  long  clc’ctronic  rctxirds 
have  to  be  retained. 

Roy  Sanford,  vice  president 
of  content-addressed  storage 
at  EMC  in  Hopkinion,  Mass.. 
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Centeta 

Compliance  Edition 

*  OaU -retention  policy 
enlof cement  tools  (tvat  lei 
compfcance  ohicets  sei  nAs  on 
iTGW  long  data  musi  be  i%oi 

■  Dectronic  “shredding"  capa¬ 
bilities  It^t  ensure  documents 
can  I  be  lecoveied  with  disk 
scanning  tools  once  (hev  te 
erased 

•  Application  access-control 
mechanisms  that  can  be  used 
to  saleguard  sensKive  data  from 
uivwlhonzed  end  iisef.s 


said  Centera  Ctimpliancc 
Editkm  stores  metadata  about 
c  K'h  revord  and  uses  it  to 
determine  whether  deleti«»n 
requests  shi'uld  be  honored. 

For  e.\ample.  if  the  array  re- 
ceivc-s  a  request  in  delete  an 
archivi.’d  e-mai)  mi*ssage.  it 
first  calculates  whether  the 
e-mail  has  reached  the  end  of 
its  regulated  life  cycle. 

The  list  price  for  an  entry- 
level  Centera  Compliance  Edi¬ 
tion  system  with  4TB  of  us¬ 
able  storage  space  is  S148.i)O0. 
which  adds  up  to  aKiui  SIU 
per  gigabyte  more  than  the 
cost  of  the  regular  versitm  of 
the  array.  I 


NetApp  to  Release  Nonrewrltable  Array 


NshMxk  Appkance  iNs  week  fe 
(upedad  to  announce  Ml  up* 
grade  ol  its  NearSloie  (ftsk  array 
that  addresses  dale-fetenbon 
comptance  Issues  and  is 
sgunly  anied  at  grabbing  sates 
alley  km  BlCs  Centeia.  ac* 
coning  to  InduabYSOiffces 

AvoinswoiiwtDrSunny- 
wte.  CaM  -baaad  NetApp  con¬ 
firmed  that  I  wf  Mroduce  a 
new  product  tMs  week  bill 
wouUnl  (ksetese  any  deials. 

The  souroea  said  NslApp  wtf 
inuel  tsebnoiogy  calted  Snap- 
look.  wMdi  Ml  let  users  parti¬ 
tion  dsk  apace  on  NearSloce  Me 
servers  as  nonrewrlahte  capao- 
iy.  lie  Centera.  Snaplpcfc  toes 
ATA  liik  drwss  Id  store  ftaed 
data  such  as  »rnal  nteanges, 
X-riys  and  document  images. 
Buithe  aoufoss  added  diatNBt- 


AppwDn'imincEIIC'sap- 
proach  of  Bsaignng  a  dMerent 
identAv  to  each  record. 

One  vofyat  said  that  Snap- 
Lock  «i  probably  ael  wel  in 
industries  web  as  haelttt  care 
and  detense,  because  U  s  easy 
to  deploy  on  enabno  NearSlore 
array5.1ldoe5prowdatbefle»* 
bUfyofhaMiQsameoldwflte- 
sarver  [dak  space]  iodred  down 
andsomeatlnolloGiad 
down.*  said  ttw  anafysl  who 
aakad  not  to  faa  kterWAad. 

But  ha  added  tat  &vLxk 
ianl  eepaclad  to  luly  meet  ta 
SECs  lutea  on  dtea  retenborL 
whicb  reqUre  tanctelearvnas 
tens  to  anaure  that  ateebone 
documents  are  Meaed  for  rr 
trimal  purposes  and  can  be  ren¬ 
ted  as  authentic  ortaialE 

-HcasAtem 
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NetWare  Stalwarts  Remain  Loyal 
Despite  Dwindling  Market  Share 


Most  users  want  to 
sta\  w  itli  \(  )S  'as 
long  as  possible' 

BV  MATT  HAMBLEN 

lit  J  HOI  s\M*s  ot 

NtiWare  faithful 
meeting  this  week  .K 
Novell  Inc.'s  annual 
Hr.iinSh.ire  user  c«*nfer«.*nce  in 
Salt  Like  City  leill  see  the  lat¬ 
est  version  ofthe  venerable 
network  operating  system  as 
it's  released  for  public  beta. 
-And  they  w  ill  no  doubt  cheer 
its  arrival. 

Seventv-nine  percent  of 
NetWare  users  want  to  up¬ 
grade  to  NetWare  («.5.  accord¬ 
ing  to  .in  online  pv>ll  of  1.04J 
NetWare  users  conducted  by 
t'ompoferu’or/d  last  week.  And 
a  nearly  equal  percentage  said 
thev  expect  to  stay  w  ith  Net¬ 
Ware  for  "us  long  as  possible." 
di*spitc  proicerions  that  shiwv 
NetWare  eontinuing  to  lose 
share  in  the  server  operating 
system  market- 

Manv  Users  said  that  they 
want  a  moreconwilidated. 
e.isier-to-u.se  interface  for 
NetWaiX'  and  that  they  wish 
.Novell  would  rmally  get  its 
iTuirkeiing  act  together  Hut 
they  continued  ii>  overw  helm¬ 


ingly  endorse  the  oper.iting 
system  for  its  reliability  and 
its  lower  total  ciisi  of  owner¬ 
ship  compared  w  ith  competi¬ 
tors'  pnidiiets.  the  poll  found. 

■'I'd  be  hurting,  pt'rsonally.  if 
NetWare  JeeliiK's  in  the  next 
two  years."  said  Doug  Boval. 
systems  engineer  at  St.  Vin¬ 
cent  Hospital  in  tndian.ipolis. 
"NetWare  is  awesome,  but 
two  to  live  years  from  now.  it 
could  be  snuffed  out . . .  with 
more  applications  taken  t>lT 
NetWare  and  moved  to  Win¬ 
dows  or  elsewhere." 

Stephen  Millington,  tech¬ 
nology  manager  at  North  Car¬ 
olina  Mutual  I  ife  Insurance 
I  t!o.  in  Durham,  said  Windows 
isn't  as  dependable  as  Net¬ 
Ware  for  building  a  network¬ 
ing  infrastnieture.  .ind  there¬ 
fore  NetWare  deserves  to  sur¬ 
vive.  "1  think  NetWare  w  ill 
I  be  around  for  a  while,  partly 
I  because  there's  m«  one  shoe 
j  thill  fits  everybody's  needs." 
Millington  said. 

Novell  oftlewls  can't  deny  ! 
the  decline  but  have  stri'sseJ  I 
thiit  they  are  transforming  ! 
NetWare  from  its  traditional 
role  as  a  network  operating  j 
system  to  a  set  of  services.  j 
such  as  a  continuous  backup  | 
and  .server  .iggregatntn.  They 


have  also  n«»Ied  that  Novell 
i.sn‘l  solely  reliant  on  Net¬ 
Ware.  which  accounted  for 
S3<tl  million,  or  32V  of  the 
company's  2(H)2  revenue. 

"It's  no  secret  that  a  Net- 
W.tre  market  decline  is  hap¬ 
pening.  but  we're  taking  mea- 
sua’s  to  rL'solve  that  Ibyl 
adding  a  broad  range  of  tech¬ 
nologies  that  have  m*t  been 
there  before."  siiid  Tracy 
LLiyne.  director  of  s«ilutions 
marketing  at  Novell. 

'I'hose  technologies  include 
open-sourec  .software  support 
and  the  ability  to  run  lava  ap¬ 
plications  natively  on  a  |2Eb 


server,  according  to  rhayne. 

A  February  forecast  by 
Gartner  Ine.  projected  that  (he 
4“i>of  global  server  operating 
system  sales  that  Novell  held 
in  2002  will  decline  to  L.^'Si  by 
200(1.  Novell  introduced  Net¬ 
Ware  in  1083.  long  before  Win¬ 
dows  ran  on  servers.  And  by 
the  early  IWOs,  NetWare  had 
j  captured  70''o  of  the  network 
operating  system  market- 
I  Despite  its  shrinking  share. 

I  there  are  still  00  million  li¬ 
censed  NetWare  users  on 
4  million  serx-ers  worldwide. 
And  that  base  is  fiercely  loyal. 

Brad  Staupp.  a  senior  sup¬ 
port  analyst  at  johnson  Coun¬ 
ty  Community  College  in 
Overland  Park.  Kan.,  has  Net¬ 
Ware  running  predominantly 
I  as  a  file  and  print  .server  for 
,  .^O.tXKl  students  and  employ¬ 
ees.  “1  thank  God  every  day 
I  that  we  use  NetWare."  be¬ 
cause  of  its  near-immunity 
'  to  persi-steni  viruses,  he  said. 

“Most  definitely  NetWare 
I  will  be  around  in  threi’  years." 

I  Staupp  said,  if  only  because  so 
many  large  corporations  rcly 
heavily  upon  it.  But  he  specu- 
I.Ued  that  after  that.  NetWare 
could  be  integrated  with  prod¬ 
ucts  from  another  vendor, 
such  as  Sun  Microsystems  Inc. 

"1  have  confidence  in  Novell 


Begin  Looking  at  AHematives  to  NetWare,  Analysts  Advise 


Wrth  NetWare  experiencing  a 
steady  dedme  n  market  sf^  IT 
managers  should  lace  the  music 
and  consider  an  aKemative  net¬ 
work  operatiriQ  system  strategy 
over  the  next  two  to  three  years, 
some  analysts  «lvise. 

'NetWare  stil  has  tegs,  but  the 
deciSKtn  point  about  keeping  it  is 
two  years  out.*  said  Earl  Perkins, 
an  analyst  at  Mela  Grtup  Inc.  in 
Siamlonl.  Conn.  According  to 
Fakirs.  *no  strategy  from  Noveir 
wi  brrg  n  new  NetWare  cus¬ 
tomers  n  appreciable  numbers. 
He  said  he  expects  the  company 
to  mease  annual  support  costs 
for  the  existing  user  base  to  make 


up  for  the  lack  of  new  customers, 
putting  more  pressure  on  users  to 
findaltemalives 
Gartner  analyst  John  Enck 
advises  users  to  wad  and  see 
what  Novefl  has  done  with  Net¬ 
Ware  two  to  three  years  from 
now  before  jumping  ship  If  a 
company  does  decide  to  migrate 
away  from  NetWare,  he  suggests 
that  It  lake  one  of  two  paths.  One 
IS  to  adopt  Windows  for  hie  and 
print  functions,  especially  if  a 
shop  already  has  a  Microsoft  in¬ 
frastructure.  Otherwise,  a  shop 
should  consider  a  combination  of 
network-attached  storage  (NAS) 
and  pnnt  devices,  with  tie  NAS 


devices  supporting  Windows. 
Unix  or  Macintosh  clients. 

Migrating  away  from  NetWare 
doesn'l  mean  dropping  other 
Novell  products,  such  as  ZEN- 
works.  eOirectory  and  DirXML 
Enck  added,  noting  that  these 
work  well  m  other  environments. 

But  not  everyone  is  convinced 
that  the  writing  is  on  the  wall 
James  Taylor,  a  NetWare  con¬ 
sultant  at  East  Cobb  Group  Inc.  m 
Marietta.  6a..  said  he  believes 
Novell  'will  keep  NetWare  going* 
for  five  years  at  least  so  users 
need  not  worry  aboul  making 
more  Immediate  migration  plans. 

-MattHamUen 


to  put  immin’  into  innovations 
,md  to  keep  NetWare  alive." 
Siaupp  said. 

Boval  and  Staupp  are  testing 
NetWare  6.5  and  seeing  many 
improvements  over  6.0.  in¬ 
cluding  support  for  more 
third-party  applications  and 
ft'r  open-st>urce  software  use¬ 
ful  to  their  development  ef¬ 
forts.  But  Siaupp  said  6.5  still 
needs  a  single  interface  run¬ 
ning  on  a  single  console. 

Marketing  Missteps 

The  Compurerwofidsurvey 
j  found  that  mar1(cting  is  the 
I  No.  1  area  NetWare  users 
I  want  Novell  to  fiKUs  on.  At 
I  last  year's  BrainSharc  confer- 
I  encc.  they  roundly  criticized 
'  the  company  for  its  failure  to 


effectively  market  NetWare. 

The  company  listened  and 
in  Januarx'  launched  a  S30  mil¬ 
lion  campaign  of  TV.  print  and 
online  ad.s,  the  largest  in  its 
history.  The  target  audience  is 
t-level  executives  rather  than 
front-line  IT  workers,  whtt 
typically  don’t  need  convinc¬ 
ing.  rhayne  said. 

The  etTort  to  target  senior 
e.xecutives  is  key,  many  users 
said.  The  University  tif  Iowa 
expects  to  migrate  from  Net¬ 
Ware  u»  W'indows  servers 
within  txvo  years.  But  accord¬ 
ing  to  systems  admini.strator 
Kevin  Keyscr.  that  decision 
was  made  by  senior  manage¬ 
ment.  not  by  the  people  who 
know  and  use  the  product. 

“So  far,  nobody  wh«>  Ls  a 
user  or  works  at  the  adminis¬ 
trative  level  is  in  a  hurr>'  to 
get  off  NetWare."  Keyser  said. 
"I  hate  Windows,  personally, 
since  we  spend  our  livc-s  nurs¬ 
ing  it  with  daily  resiari.s. 

“Novell  needs  to  gel  the 
mind  share  of  CIOs  and  CEOs." 
Keyser  said,  "just  as  Microsoft 
has  done  by  flying  top  exeeu* 
tivL-s  to  events  to  sell  them."  I 


Research  manager  Mari  Ktvfc 
conducted  the  research  for 
this  report. 
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NetWare  Stalwarts  Remain  Loyal 
Despite  Dwindling  Market  Share 


Most  users  want  to 
stay  with  NOS  ‘as 
long  as  possible’ 


ST  MATT  HAMBLEN 

The  thousands  of 
NetWare  faithful 
meeting  this  week  at 
Novell  Inc.’s  annual 
BrainShare  user  conference  in 
Sait  Lake  City  will  see  the  lat¬ 
est  version  of  the  venerable 
network  operating  system  as 
ic‘s  released  for  public  beta. 
And  they  will  no  doubt  cheer 
its  arrival. 

Seventy-nine  percent  of 
NetWare  users  want  to  up¬ 
grade  to  NetWare  6.5,  accord- 
iixg  to  an  online  poll  of  1,042 
NetWare  users  conducted  by 
Com^erworld  last  week.  And 
a  nearly  equal  percentage  said 
they  expect  to  stay  with  Net¬ 
Ware  for  “as  long  as  possible.” 
despite  projections  that  show 
Net^K^  continuing  to  lose 
share  in  the  server  operating 
system  market. 

Many  users  said  chat  they 
want  a  more  consolidated, 
easier-to-use  inlerfoce  for 
NetWare  and  that  they  wish 
Novell  would  finally  get  its 
marketing  act  together.  But 
they  continued  to  overwhelm¬ 


ingly  endorse  the  operating 
system  for  its  reliability  and 
its  lower  total  cost  of  owner¬ 
ship  compared  with  competi¬ 
tors’  products,  the  poll  found. 

“rd  be  hurting,  personally,  if 
NetWire  declines  in  the  next 
two  years,”  said  E>oug  Boval. 
systems  engineer  at  St.  Vin¬ 
cent  Hospital  in  Indianapolis. 
“NetWare  is  awesome,  but 
two  to  five  years  from  now.  it 
could  be  snuffed  out . . .  with 
more  applications  taken  off 
NetWare  and  moved  to  Win¬ 
dows  or  elsewhere." 

Stephen  Millington,  tech¬ 
nology  manager  at  North  Car¬ 
olina  Mutual  Life  Insurance 
Co.  in  Durham,  said  Windows 
isn’t  as  dependable  as  Net¬ 
Ware  for  building  a  network¬ 
ing  infrastructure,  and  there¬ 
fore  NetWare  deserves  to  sur¬ 
vive.  “I  think  NetWare  will 
be  around  for  a  while,  partly 
because  there’s  no  one  shoe 
that  fits  everybody's  needs," 
Millington  said. 

Novell  officials  can’t  deny 
the  decline  but  have  stressed 
that  they  are  transforming 
NetWare  from  its  traditional 
role  as  a  network  operating 
system  to  a  set  of  services, 
such  as  a  continuous  backup 
and  server  aggregation.  They 


have  also  noted  chat  Novell 
isn’t  solely  reliant  on  Net¬ 
Ware,  which  accounted  for 
S361  million,  or  32%.  of  the 
company's  2002  revenue. 

'it’s  no  secret  that  a  Net¬ 
Ware  market  decline  is  hap¬ 
pening.  but  we’re  taking  mea¬ 
sures  to  resolve  that  [by] 
adding  a  broad  range  of  tech¬ 
nologies  that  have  not  been 
there  before."  said  Tracy 
Thayne.  director  of  solutions 
marketing  at  Novell. 

Those  technologies  include 
open-source  software  support 
and  the  ability  to  run  Java  ap¬ 
plications  natively  on  a  J2E£ 
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server,  according  to  Thayne. 

A  February  forecast  by 
Gartner  Inc.  projected  that  the 
4%  of  global  server  operating 
system  sales  that  Novel]  held 
in  2002  will  decline  to  1.3%  by 
2006.  Novell  introduced  Net¬ 
Ware  in  1983,  long  before  Win¬ 
dows  ran  on  servers.  And  by 
the  early  1990s.  NetWare  had 
captured  70%  of  the  network 
operating  system  market. 

Despite  its  shrinking  share, 
there  are  still  90  million  li¬ 
censed  NetWare  users  on 
4  million  servers  worldwide. 
And  that  base  is  fiercely  loyal 

Brad  Staupp.  a  senior  sup¬ 
port  analyst  at  Johnson  Coun¬ 
ty  Community  College  in 
Overland  Park,  Kan.,  has  Net¬ 
Ware  running  predominantly 
as  a  file  and  print  server  for 
30.000  students  and  employ¬ 
ees.  "1  thank  God  every  day 
that  we  use  NetWare."  be¬ 
cause  of  its  near-immunity 
to  persistent  viruses,  he  said. 

“Most  definitely  NetWare 
will  be  around  in  three  years," 
Staupp  said.  If  only  because  so 
many  large  corporations  rely 
heavily  upon  it.  But  he  specu¬ 
lated  that  after  that.  NetWare 
could  be  integrated  with  prod¬ 
ucts  from  another  vendor, 
such  as  Sun  Microsystems  Inc 

“I  have  confidence  in  Novell 
to  put  money  into  innovations 
and  to  keep  NetWare  alive." 
Staupp  said. 

and  Staupp  are  testing 
NetWare  6.5  and  seeing  many 
improvements  over  6.0.  in¬ 
cluding  support  for  more 
third-party  applications  and 
for  (^>en'SOurce  software  use¬ 
ful  to  their  development  ef¬ 
forts.  But  Staupp  said  6.5  still 
needs  a  single  interface  run¬ 
ning  on  a  single  console. 

Mariieling  Misstet>$ 

The  ComfMiterworld  survey 
found  that  marketing  b  the 
Na  1  area  NetM^  users 
want  Novell  to  focus  on.  At 
last  year’s  BrainShare  confer¬ 
ence.  they  roundly  criticized 
the  company  for  its  failure  to 


effectively  market  NetWare. 

The  company  listened  and 
in  January  launched  a  $30  mil¬ 
lion  campaign  of  TV,  print  and 
online  ads,  the  largest  in  its 
history.  The  target  audience  is 
C-level  executives  rather  than 
front-line  IT  workers,  who 
typically  don't  need  convinc¬ 
ing.  Tha)'ne  said. 

The  effort  to  target  senior 
executives  is  key.  many  users 
said.  The  University  of  Iowa 
expects  to  migrate  from  Net¬ 
Ware  to  Windows  servers 
within  two  years.  But  accord- 
to  systems  administrator 
Kevin  Keyser,  that  decision 
was  made  by  senior  manage¬ 
ment.  not  by  the  people  who 
know  and  use  the  product. 

“So  far.  nobody  who  is  a 
user  or  works  at  the  adminis¬ 
trative  level  is  in  a  hurry  to 
get  off  NetWare,"  Keyser  said. 
“I  hate  Windows,  personally, 
since  we  spend  our  lives  nurs¬ 
ing  it  with  daily  restarts. 

"Novell  needs  to  get  the 
mind  share  of  CIOs  and  CEOs," 
Keyser  said,  "just  as  Microsoft 
has  done  by  flying  top  execu¬ 
tives  to  events  to  sell  them."  I 


Research  manager  Mari  Keefe 
conducted  the  research  for 
thisr^on. 
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Nasdaq  Moves  to 
Drop  i?s  Stock 

S«ft«rara  vandor  i2  Tachnolo- 
glw  Inc.  «aid  N  racahiad  a  stock 


Stock  MarM  bic.  Tba  netica 
eama  a  Wfoak  after  Nasdaq 
halted  tha  tradteg  of  IZt  stock 
folmving  dtecknuras  that  tho 
Dalar'taaaad  company  aras 
bang  invostigated  by  tha  Sacurf- 
tiaa  and  Excftanga  Commission 
and  wodd  delay  tha  fiteig  of 
Its  fbianeial  statemonts  for 
last  yaar.  e  said  It  wN  appeal 
thadaistbig. 

Microsoft  Warns  of 
Java  Code  Raw 

IHcroaoft  Corp.  anmad  of  a 
saewity  flaw  in  Hs  Java  virtual 
machina  softwara  that  could  ba 
uaad  by  attackars  to  run  maft* 
cioiii  coda  on  tWwdwas  systems. 
It  gavs  tha  vubtanbWfy  a  *critt' 
caT  rtebig  and  urged  users  to 
instal  a  BOW  ralaaaa  of  ttM  vir 
lud  machbia.  Meroaoft  du 
dataflad  a  teas  savara  fhnv  bi  Its 
Pnty  Sarvar  2.0  and  bitamat 
Security  and  Accaiaration  Sarvar 
2000  products. 

Vendors  Form  New 

IT  Security  Group 

>-*. - -» - 

■acroaon.  navancaa  ancro 
nariran  Inc  llawlatt  Packird 
Co..  BM  and  tatel  Carp,  said 
they  bava  farmad  a  group  to 
davalep  a  set  of  propoead  aacu- 
rily  and  data  privacy  standards. 
Hw  Portland.  0ro.*b8aad  Tnsted 
CompuOng  Broup  viM  lalB  the 
place  of  the  Tnalad  Computbig 
Ptetform  Mtenci. 

Short  Takes 

ANITA  BONO,  who  fcamdad  Ihe 
PMo  Alto.  Calf. -baaed  btetltuta 
lor  tdeman  and  Technology 
bi1997.dtedofbndncanear 
teat  weak  at  the  age  of  54. .. . 
Rabdoh.  N.C.-baaad  RED  HAT 
me.  announead  open-source 
content  managamanl  and  portal 
sarvar  tooli  that  support  its 


MARK  HALL  ■  ON  THE  MARK 

Politics  Bedevil  Web 
Services  Standards . . . 

. . .  process,  and  “it’s  users  who  suffer  from  the  fracture.”  laments  Dave 
Chappell.  VP  and  chief  technology  evangelist  at  Sonic  Software  Corp., 
a  Bedford,  Mass.-based  subsidiary  of  Progress  Software  Corp.  He  also 
serves  on  the  OASIS  Web  Services  Reliability  (WSR)  committee  that's 
drawing  up  a  specification  for  reliable  messaging,  detuiting  the  right  way 
to.  say,  receive  acknowledgments  in  a  SOAP  message  exchange.  All  to 


the  good,  except  a  fearsome  foursome  of 
Microsoft  Corp.,  IBM.  BEA  Systems  Inc. 
and  Tibco  Software  Inc.  back  something 
called  Web  Services  RetiableMessaging. 
And.  no  surprise  here,  there  are  conflicts 
between  the  two.  Chappell  says  the  quar¬ 
relsome  quartet  is  welcome  to  join  the 
OASIS  effort.  Also,  he's  been  wooed  by 
Microsoft  to  consider  the  virtues  of  it.s 
preferences.  But  be  grumbles.  “Tberv  are 
some  corporate  egos  about  who's  first 
and  who's  driving  the  standard.”  No 
doubt  the  egos  of  Orecte  Corp.  and  Sun 
Mcrosystoms  Inc.,  who  have  reps  on  Chap¬ 
pell's  committee,  flare  from  time  to  lime. 
•  As  it  happens,  Sonic  En¬ 
terprise  Service  Bus  5.0 
(formerly  Sonic  XQ)  ships 
on  April  28.  ESB  S.0  uses  a 
“services  container"  ap¬ 
proach  to  Web  services- 
based  integration.  It  lets  de¬ 
velopers  “phig”  appHeadom 
Into  a  vbtuM  bus  for  services 
such  as  data  transformation 
and  intelligent  routing 
based  on  content  The  SjO 
release  will  iiKlude  Stylist 
Studio  for  XklL  developers 
and  Orchestration  Server, 
which  helps  you  design 
business-process  manage¬ 
ment  into  a  Web  services 
application.  ESB  .SJ)  is  the 
first  major  element  of  the 
Sonic  Business  Integration 
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Suite,  the  rest  of  which,  such  as  an  XML 
Server,  will  appear  in  the  next  few 
months.  •  The  fadarated  approach  to  usar 
authanttcadon  gets  a  boost  tomorrow 
when  Secure  Data  In  Motion  Inc.  (but  far 
better  known,  according  to  marketing  VP 
Tanya  C^andia,  as  Sigaba  —  you  figure  it 
out)  releases  Sigaba  Secure  Enoaii,  which 
complies  with  the  Liberty  Alliance  LI 
specification.  The  spec  calls  for  one  part¬ 
ner  company  to  authenticate  its  own 
users  and  then  pass  an  “assertion”  of  that 
authentication  to  its  partner,  relieving 
the  user  from  legging  onto  the  other  sys¬ 
tem.  The  San  Mateo,  Calif.-based  firm  on 
April  30  will  release  Sigaba 
Secure  Instant  Messaging, 
which  uses  the  same  feder¬ 
ated  authentication  tech¬ 
nology.  ■  ftemamlwr  the  ffieo- 
ehet?  It  was  a  1990s  VC- 
fiinded  brainchild  for 
hooking  laptop  users  to 
a  “national"  wireless  net¬ 
work.  (Since  when  did  half 
a  dozen  cides  constitute 
the  whole  oadon?)  When  it 
worked,  it  was  wonderful, 
but  slow.  Well,  corporate 
Windows  and  Mac  OS  X 
laptop  users  get  another 
wireless  WAN  technologj’ 
starting  today  when  Ven¬ 
turi  Wireless  Inc.  in  Sunny¬ 
vale,  (2alifl.  releases  the 
Venturi  lOOE.  The  device 


sits  behind  the  company  firewall  and 
links  users  to  a  carrier,  such  as  Verizon 
Wireless,  which  will  be  outfitted  with  the 
new  Ventiui  20.  also  ready  today.  Hie 
lOOE  has  been  optimized  to  handle  band- 
width'hoggy  Microsoft  Exchange  as  well 
as  GIFs,  JPEGs  and  other  commonly  sent 
files.  Venturi  does  some  standard  tricks 
with  compression  and  caching,  but  whal'i 
ctevw  is  that  its  Venturi  Transport  Proto¬ 
col  (VTP)  woria  bt  concert  with  or  Instaad  of 
Twyr.  VTP  is  designed  to  reduce  wire¬ 
less  interference  and  handles  missed  bits 
differently  than  TCP/IP.  The  lOOE  costs 
S17,900  and  supports  up  to  100  users. 

■  Add  BSM  to  your  acronym  memory  tote. 
You'll  be  hearing  lots  more  about  iL 
That’s  DO  BS.  man.  Business  service  man¬ 
agement  is  the  step  beyond  managed 
frameworks,  such  as  Unicenter  and 
Tivoli.  BSM  tools  tie  online  business  ac¬ 
tivity  —  say,  transaction  volume  on  an 
e-commerce  site  ~  to  the  netwoik  and 
systems  administrator's  trouble-ticket 
priorities.  If  it’s  important  to  the  business 
and  it  depends  on  IT  systems,  you  need 
to  design  your  monitoring  and  manage¬ 
ment  technology  to  that  end  and  not  )uM 
“bntrwwnl”  owrylhing  on  your  nalwork  and 
compulafairilynily.  BSMers  say.  BMC 
Software  lnc.’s  recent  acquisition  of  IT 
Masters  International,  its  ownership  of 
Remedy  and  its  own  Patrol  tine  give  it  a 
breadth  of  technologies  beyond  most  of 
its  BSM  rivals.  Plus,  the  Houston  compa¬ 
ny  last  week  announced  that  it  will  pack¬ 
age  these  systems  to  forge  '^he  direct 
linkage  of  IT  resources  and  management 
solutions  with  the  goals  of  the  overall 
busine$s.“  Sounds  good.  But  Helen  Don¬ 
nelly.  VP  of  marketing  at  Managed  Ob¬ 
jects  Inc.  in  McLean.  Va.,  objects  to  ced¬ 
ing  them  any  ground  and  JliimifMi  her 
competHor’s  ahttty  to  boA  togathtr  tfw»  <Ss- 
patato  products.  Donnelly  says  Formula  3.1. 
her  company's  product,  uses  a  less-is- 
roore  approach,  putting  BSM  agents  in 
as  few  places  as  possible.  She  argues  that 
competing  products  give  IT  too  much  in¬ 
formation.  “You  can’t  manage  from  a  mil¬ 
lion  points  of  light,”  she  says.  Indeed. 
Hard  to  connect  all  the  dots.  I 


Sun  Expands  Availability  of  Solaris  Security 


Sun  Microsystems  Inc.  said  last 
week  that  it  will  offer  commer¬ 
cial  customers  a  version  of  its 
Solaris  operating  system  origi¬ 
nally  developed  for  military 
and  government  intelligence 
use.  Sun  tnlends  to  include  the 
technology  in  its  next  version 
of  Solaris,  due  in  mid-2004. 


The  security  technology, 
called  Trusted  Solaris,  pro¬ 
vides  role-based  access  con¬ 
trol  at  the  root,  dividing  or 
limiting  root  access  by  user.  It 
also  creates  audit  trails,  com¬ 
pany  ofTiciats  said.  The  tech¬ 
nology  supports  both  Sparc 
and  Intel-based  systems. 

Although  the  commercial 
availability  of  Trusted  Solaris 


isn't  new.  the  company  hasn't 
marketed  it  broadly  and  inter¬ 
est  has  largely  been  limited  to 
financial  services  companies. 
Beginning  this  spring.  Sun  in¬ 
tends  to  market  an  offering 
that  includes  firewalls  and 
other  access  controls.  Pricing 
will  start  at  S999  for  a  stan¬ 
dard  desktop  edition. 

Because  Thisted  Solaris  pro¬ 


vides  access  control  at  the 
root,  it  allows  companies  to 
separate  systems  administra¬ 
tion  from  operations,  at  the 
most  fundamental  level  of  the 
operating  system.  “Just  be¬ 
cause  you  are  the  system  ad¬ 
ministrator  and  you  have  root 
access,  I  don't  want  to  give  you 
access  to  the  payroll  database." 
said  Jonathan  Schwartz,  execu¬ 
tive  vin  president  of  Sun's 
software  products  group.  I 


SAS*  is  aM  you  need  to  know. 


Only  SAS  provides  a  higb-impact,  low-risk  way 
to  adiiewe  intdligent  data  wardiousmg.  You  can 
CTdract,  transform  and  load  data  fitm  ai^  source, 
across  any  platform,  while  assuring  quality. 
Sinq>lify  die  way  you  create  and  custnnize  reports. 
And  deliver  a  shared  version  of  the  truth.  To  find  out 
how  top  companies  reap  bottom-line  rewards  with 
SAS  software — by  leveraging  die  value  of  data 
fiom  corporate  systems,  e-business  chaiuiels,  the 
su|^ly  chain  and  beyond — visit  us  on  the  Web  ot  call 
toll  free  1  866  270  5727. 


www.sas.com/warehouse 
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Microsafl  Supports 
AMD’s  64-bit  Chips 

Hcfowft  Carp.  saU  if t  dsvalop- 
ing  nattM  64‘btt  vantons  of 
WMom  XP  and  Wodowa  Sarv- 
ar  2003  that  aM  support  sya* 
tarn  haaad  Oft  Adwan^  Micro 
Daafcaa  lne.'s  upcoming  Optaron 
and  AIMm  64  Rderoprocaaaorv 
Tbo  04-hN  oparating  tyatm  m* 
laaaas  ara  baing  daaignad  for  uaa 
on  aofvars  and  Mgb-and  daak- 
topa.  MteroaofI  said. 


Siebd  Says  Q1  Was 
Below  Plan... 

Siobol  Systems  he.  iolnod  Iho 
Bat  of  softwara  vandora  wandng 
that  tbair  fhsHpiartar  flnandai 
raaidia  wV  ba  hnvar  6ian  aipact- 
ad.  San  Mateo.  Calf.*baaad 
ShhalaaMRnowoipadstora- 
port  a  proOl  of  up  te  S6  mOon 
onravanaaofaboutSSSSmI- 
Ion.  Iha  company  said  R  was  on 
track  to  moat  Ha  aaha  goals  untfl 
*a  faar"  pwchaasa  warn  poat- 
ponad  hte  In  tha  quarter. 


...But  EMC,  NCR 
Top  Their  Goids 

OnthaflpaUa.EMCCerp.and 
NCIICerp.bo*aaMlholrfhat- 
quarter  numbara  wM  axcaed 
profactiont.  Hepbhten.  Maas.- 
boaod  BK  aaU  Hi  ravanua  wM 
bo  wMkbi  the  pradetod  ranga  of 
S1.35bHonton4bMkN).biit 
R  noted  that  profits  abouM  bo 
sAghlly  baiter  Rnn  aipacted. 
Dayton.  OMe  hteadfiCflatod 
R  wM  raport  a  imaBar  than- 
aipacted  loos  on  ravanua  of 
abate  6123  b«on. 


Short  Takes 

aECmONK  DATA  SYSTEMS 
CCMP.  h  Phno.  IbiBa.  aaU  R  non 
acoolraeltotikao«artham«r 
agaoNHl  of  atest  IT  oparattona 
for  tfw  cRy  of  Anahabn,  Calf, 
laniis  of  tha  daal  waronT  ds- 
ctoaad....6ATEWAyMC.in 
ftamy.  CiH.,  hteoduead  a  pair  of 
rackmounted  Whdeam  aarmrn 
haaad  on  hlaf  Corp.*a  Xaen  daps. 


Intrusion  Prevention 
Touted  Over  Detection 


Products  promise  proacth'e  security 
defense  but  still  need  time  to  mature 


av  JAlRUUAn  VIJAVAN 

This  week’s  RSA 

Conference  2003  in 
San  Francisco  will 
feature  a  range  of 
security  technologies  meant 
to  let  corporations  more  pro¬ 
actively  defend  themselves 
against  a  growing  array  of 
cyberthreats. 

Unlike  most  traditional  fire¬ 
wall  and  intrusion-detection 
products,  which  passively  de¬ 
tect  problems,  the  new  tools 
use  rules,  usage  models  and 
correlation  engines  to  enforce 
authorized  network  behavior. 
In  some  cases,  these  tools  au¬ 
tomatically  prevent  unautho¬ 
rized  or  malicious  tasks  from 
executing. 

But  many  of  the  technolo¬ 
gies  are  still  In  their  infancy, 
are  largely  untested  in  enter¬ 
prise  environments  and  may 
not  deliver  all  of  the  promised 
functionality  just  yet.  users 
and  analysts  cautioned. 

Ruias-faased  Protection 

One  of  the  vendors  touting 
such  products  at  this  week’s 
conference,  sponsored  by  Bed¬ 
ford,  Mass. 'based  RSA  Securi¬ 
ty  Inc.,  is  Eniercept  Security 
Technologies  Inc.  The  San 
Jose-based  company  will  re¬ 
lease  an  updated  version  of  a 
host-based  intrusion-prcvco- 
tion  softwrare  tool  that  uses 
virus  signature  informalion 
and  behavioral  rules  to  inter¬ 
cept  suspicious  activity  before 
it  accesses  an  application. 

For  example,  if  a  rule  states 
that  only  Web  server  pnxress- 
e$  can  access  Web  Hies,  all  at¬ 
tempts  by  other  processes  to 
do  so  will  be  automatically 
blocked  by  Eniercept  soft¬ 
ware,  company  officials  said. 

RSA  announced  on  April  4 
that  ft  would  acquire  Enter- 
cept  for  $120  million  in  cash, 
and  on  April  1  it  said  it  would 
buy  San  Jose-based  Intnivert 


Networks  Inc.  for  SlOO  million 
(Quicklink37579J. 

Entercepf's  technology  re¬ 
cently  helped  Arlington  Coun¬ 
ty,  Va..  protect  its  core  databas¬ 
es  from  being  corrupted  by  the 
Slammer  worm  and  has  con¬ 
tributed  to  a  more  proactive 
security  posture,  said  Vivek 
Kundra,  the  county's  director 
of  infrastructure  technologies. 

“Historically,  we  would 
learn  of  an  attack  only  after  it 
happened,  and  we  would  react 
to  it.  Now  we  are  in  a  position 
to  prevent  some  of  it  as  well,* 
he  said. 

Also  this  week.  Tcros  Inc. 
in  Sunnyvale,  Calif.,  will  add  a 
new  module  called  Safeldenti- 
ty  to  its  Teros  100  Application 
Protection  System.  Teros  100 
is  an  “in-line*  hardware  device 
that  sits  directly  on  the  net¬ 
work  in  front  of  a  Web  appli¬ 
cation  server  and  inspects 
every  packet  going  in  and  out 
of  the  server  in  real  time. 

Like  other  intrusion-pre¬ 
vention  products,  Teros’ 
blocks  anything  that  deviates 
from  predetermined  norms 
for  a  particular  server  or  ap¬ 
plication.  While  Tbros  claims 
that  its  product  can  determine 
what  those  norms  should  be. 
companies  that  are  unwilling 
to  leave  that  decision  to  the 

H  Historically. 

we  would 
lean  of  an  attack 
only  after  it  hap¬ 
pened,  and  we 
would  react  to  it 
Nowweareina 
position  to  prevent 
some  of  it  as  well. 

VIVEK  KUMORA.  OIRCCTOR  OF 
INFRASTRUCIURE  TECHNOLOGIES. 
ARLINGTON  COUNTY.  VA. 


Intrusion- 

Prevention 

Products 


technology  can  specify  them. 

B^cer  Hill  Corp..  a  Carmel, 
lnd.-based  provider  of  appli¬ 
cation  services  for  the  banking 
industry,  has  placed  such  “de¬ 
fault  deny*  application  fire¬ 
walls  in  front  of  several  Mi¬ 
crosoft  Internet  Information 
Servers,  said  Eric  Beasley,  a 
senior  network  administrator 
at  Baker  Hill. 

Among  other  benefits,  the 
technology  has  eliminated  the 
need  for  Baker  Hill  to  immedi¬ 
ately  patch  its  servers  every 
time  a  Microsoft  vulnerability 
is  discovered,  Beasley  said. 
Since  the  Teros  firewall  is  de¬ 
signed  to  allow  only  a  very 
limited  set  of  activities  on  the 
servers  it  protects,  any  mali¬ 
cious  activities  triggered  by 
viruses  like  Slammer  are  auto- 
maticalty  stopped,  he  said. 

Traditional  firewall  tech- 
nolc^ies  aren’t  equip|>ed  to 
Slop  attacks  that  come  through 
commonly  used  ports  such 
as  Port  80,  said  Raj  Dhingia,  a 
vice  president  at  Intnivert  a 
provider  of  intrusion-detec¬ 
tion  systems  (IDS). 

The  company  this  week  will 
axmounce  IntruSbield  IJ,  a 
hardware  appliance  that  sits 
on  corporate  networks  and 
sifts  through  the  contents  of 
each  packet  looking  for  prob¬ 
lems.  The  technology  is  able  ! 


to  modify,  drop  or  block  indi¬ 
vidual  packets  or  entire  ses¬ 
sions  if  needed,  company  offl- 
dais  said.  It  can  also  modify 
flrewaU  policies  while  an  at¬ 
tack  is  happening  or  provide 
real-time  alerts  for  manual  fol¬ 
low-up.  they  said. 

The  product  has  resulted  in 
more  accurate  and  real-time 
reporting  of  vulnerabilities, 
said  Andrew  Berkuta,  manager 
of  network  and  physical  secu¬ 
rity  at  HomeBanc  Mortgage 
Corp..  an  Atlanta-based  mort¬ 
gage  lender. 

“OriginaUy  we  were  more  in 
the  ‘detect  and  tell  us'  mode,* 
said  Berkuta.  IntruShield  “un¬ 
derstands  the  traffic  flow  and 
gets  into  more  of  a  dynamic 
prevention"  mode,  be  said. 

But  Kuodra  and  other  users 
offered  several  caveats. 

For  one  thing,  the  tools  have 
to  mature  so  that  they’re  able  to 
consistently  block  malicious  ac¬ 
tivity  without  interfering  with 
legitimate  traffic  Currently. 
ONnpafues  often  have  to  fine- 
tune  and  extensively  custom¬ 
ize  such  products  to  prevent 
that  problem.  Kuodra  said. 

IDS  devices  have  long  been 
notorious  for  generating  false 
positives,  and  there’s  little  to 
show  that  the  ttew  tools  are 
much  better,  said  Ted  Julian, 
president  of  Arbor  Networks 
Inc.,  a  vendor  of  network 
anomaly  detection  products 
in  Lexii^on,  Mass.  For  auto¬ 
matic  prevention  to  become  a 
reality,  “the  need  for  better  ITl- 
tering  and  detection  methods 
is  patently  obvious.*  be  said. 

Such  devices  could  also  be 
single  points  of  failure  for 
companies  that  rely  too  heavi¬ 
ly  on  them.  Baker  HUI,  for  in¬ 
stance,  is  investing  in  load-bal¬ 
ancing  technologies  to  spread 
the  load  flowing  Into  its  Ibros 
systems.  The  company  plans 
to  install  standby  servers  in 
case  its  primary  systems  ftul. 
Beasley  said.  I 


COmiUiCETIIIIU 

New  seoity  manaoernent  software  aans 
to  make  K  easier  lor  companies  to  ensure 
comptence  Mift  poHcws: 
QuUlMiSTTOT 


Saarty  KaswMia  Canter  For  m 

on  Mb  topic.  MSI  (V  Wsb  sie 

^(WdlMMIOO 


You  trust  the  rivets  to  hold  the 
44.ooo-ton  steel  skeleton  together. 


You  trust  the  skeleton  to  support 
three  miles  of  braided  cable. 

You  trust  the  cable  to  keep  you 
suspended  in  mid-air. 


Shouldn't  you  feel  the  same 
way  about  the  security  of 
your  network  infrastructure? 
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Supjjly  Chain  Vendors  Vying  to 
Provide  More  Inventory  Visibility 

L  (■'"rjilod  npps  w  ill  i>ffor  a'al-timc 
insights,  automated  response  tcntls 


BY  MARC  L  SONOIN 

RI\A1  MSnOksof 
supply  chjin  man- 
ayemeni  siiftwjrv 
are  racinji  u»  devcK>p 
UHils  ihai  (liNc  users  additinnal 
iolbburaiU*n  capabilities  and 
real-time  visibility  ol  product 
(memory  and  demand  levels. 

For  instance.  Manu)dsiics 
(iroup  Inc.  later  thLs  year 
plans  to  roll  out  an  applica- 
tn)ns  upytrade  that  will  use 
Web  serxices  htH>ks  it'  create 
a  "yilass  pipeline"  into  supply 
chains  tor  users,  said  Lori 
Miichcll-Keller.  H’nior  vice 
president  ol'  market  sirak'jry 
at  the  Rockville.  Md.-based 
company. 

The  Mxftware  will  take  real¬ 
time  feeds  frt»m  ManuyiisiicV 
supply  chain  planniny:  and 
scht'duling  uioLs.  as  well  as 
fn>m  third-party  FRP  systems 
and  other  bu.sint‘ss  applk-a- 
tions.  .Mitehell-Kellersaid.  It 
will  also  let  users  set  rulers  ftir 


juioinated  rcsolutitni  t»t  un¬ 
foreseen  supply  chain  prob¬ 
lems  and  provide  addilitmal 
forecastin>*.  schedulinj;  and 
collaboration  capabilitn*s. 

Manugisiics  expects  ii>  beta- 
tesi  the  st'ftware  in'Aujtusi 
and  release  it  by  September  a.s 
Versitm"!  of  its  applicatit'ns. 
Milehell-Ketler  said. 


What’s  New? 


BOTH  MANUGBTICS  AND 
6AAH  are  devekiping  sohMore 
that  can  amomabcaly  respond  to 
suifily  Cham  problems. 

SAP  plans  to  use  its  NetWeenrer 
integration  technology  to  connect 
supply  chain  systems  10  other 
appHirations. 

i2  has  built  new  data  extraction, 
eventmanagemenlandiniorma' 
bon  workflow  desqn  tools  nto  Its 
software. 


The  upciuniny*  applicaikms 
sound  similar  to  dashboard- 
style  pri'ducis  that  other  ven¬ 
dors  like  SAP  A(»  and  I’c't'ple- 
St'ft  Inc.  arc  mllini:  out.  said 
leri  l>unn.  TIO  at  Tys«'n  F<hhJs 
Inc.  in  Springdale.  Ark. 

Tyson  is  installing  Mamigis- 
tics’  supply  chain  planning 
software  in  its  chicken-proces¬ 
sing  businesses.  But  Dunn  said 
she  has  yet  to  evaluate  the  fea¬ 
tures  of  Version  7.1. 

Manugistics  isn't  alone  in 
targeting  increased  collabora¬ 
tion  and  supply  chain  visibil¬ 
ity.  SAP  in  the  third  quarter 
plans  to  beef  up  the  real-time 
visibility  capabilities  in  its 
supply  chain  applications  by 
shipping  an  upgrade  that  ex¬ 
ploits  its  new  NetWeaver  inte¬ 
gration  technology,  said 
Christian  Knoll,  the  compa¬ 
ny’s  global  vice  president  of 
supply  chain  management 
prt'ducis. 

I  Knoll  said  NetWeaver  will 
let  both  SAI’  and  third-party 
software  nmre  easily  share 
data  to  conned  product  life 
I  cycle  management.  t!RM  and 


Crystal  Decisions  Tightens 
Analysis  Software  Bundle 


BY  MARC  L.  SONQINI 

C^rystai  IX'ctsions  Inc.  last 
week  announced  an  upgnided 
SOI  of  its  reporting  and  data 
analysis  software  that's  more 
lightly  integrated  than  earlier 
rvleauses  were. 

The  Palo  Alto,  t^lif.-based 
company  said  its  Crystal  Fn- 
terprise  9  Premium  ofTcring 
expands  on  a  version  I'f  the 
software  bundle  that  was  an¬ 
nounced  in  lanuary.  'Hie  new 
package  includes  hyperlinks  to 
make  it  easier  for  end  users  to 
send  data  hack  and  forth  be¬ 
tween  the  difTcreni  applica¬ 
tions.  said  lames  Church,  a 
group  product  manttger  at 
(Crystal  DecLsions. 

TTic  company  als4>  added 


self-help  wizard  technology 
and  new  packaging  that 
should  result  in  lower  prices 
for  users,  according  to 
Church.  But  he  declined  to 
give  any  baseline  ci»st  savings 
pttwided  by  the  bundle,  which 
starts  at  S75.tKK)  per  prtKcssor. 

Mark  Smith,  an  analyst  at 
Ventana  Research  Inc.  in  Bel¬ 
mont.  Calif.,  said  the  premium 
version  will  let  end  users  do 
m«»re  ad  hoc  queiying  and  cre¬ 
ate  more  Miphlsticaied  rep<»ns 
than  they  could  before. 

Appetizing  Futures 

Charles  Castleberry,  assistant 
director  of  architecture  at  Los 
Angeles-hascd  Fox  Filmed  En- 
leriainment.  a  subsidiary  of 


Fox  Kntert.iinment  Group  Inc., 
said  he's  eager  for  some  of  the 
new  bundle's  capabilities. 

"It  will  certainly  make  it 
easier  for  us  m  expand  into 
the  analysis  features  of  the 
Crystal  product  line."  Ca,stle- 
berry  said.  “TTie  more  tightly 
integrated  and  seamless  the 
t(U>ls  are,  the  simpler  it  will  he 
for  us  to  start  taking  advan¬ 
tage  of  hiiherti'-unused  fea¬ 
tures."  Fax  Filmisj  Entertain¬ 
ment  currently  runs  Crystal 
Enterprise  8.5  to  support  in- 
lenul  disrision-making. 

Crystal  DiHiisions  also  an- 
nouiK'cd  Crystal  Analysis  Pro¬ 
fessional  an  upgrade  of  its 
stand-alone  Web-based  ana- 
lytic.s  reporting  application. 
New  features  include  im¬ 
proved  integration  with  its 
Crystal  Rcptxn.s  software  and 
products  like  Microsttft's  Ex¬ 
cel  and  IBM's  DB2  dalabase.l 


iithcr  corporate  systems  to 
supply  chain  applications. 

Dallas-based  i2  Technolo¬ 
gies  Inc.  last  mi'nth  released 
an  i2  Six  upgrade  that  includes 
added  exiraetton  capabilities 
ft'r  pulling  data  out  of  various 
systems,  as  well  as  enhanced 
event  management  capabili¬ 
ties  designed  to  give  users 
real-time  views  of  their  supply 
chains  iQuickLink  .^7218). 

In  addition.  Barneveldt. 


Netherlands-ba.sed  Baan  Co. 
said  it's  prvuv'typing  an  ad¬ 
vanced  planning  tool  that  can 
automate  responses  to  pro¬ 
duction  scheduling  snafus  or 
other  problems.  Baan  is  also 
developing  another  applica¬ 
tion  that  will  let  supply  chain 
managers  execute  a  collabora¬ 
tive  priice.ss  in  real  time. 

.Mmt'st  every  supply  chain 
vendor  is  starting  to  offer  in¬ 
ventory  monitoring  capabili¬ 
ties  and  other  real-time  visi¬ 
bility  functions,  said  Karen 
Peterson,  an  analyst  at  Gartner 
Inc.  in  Stamford.  Conn.  But 
most  of  the  pn»duct.s  are  still 
in  the  initial  stages  of  maturi¬ 
ty.  Peterson  said.  I 


BY  MARC  L.  SONOINI 

l.awst)n  Software  Inc.,  which 
is  trying  to  rebound  from 
three  straight  quarterly  los-ses. 
hopes  to  entice  new  users  by 
w»»rking  with  two 
other  companies 
to  offer  outM'urc- 
ing  s«.*rvtecs  for  it.s 
busine.s.s  applications. 

Lawson  will  announce  the 
plan  this  week  at  its  .annual 
user  etmference  in  Orlando, 
where  the  company  also  plans 
to  showcase  the  latest  addi¬ 
tions  to  its  software. 

Sam  Adams,  senior  vice 
president  of  global  sales  at  St. 
Paul.  Minn.-based  Law'son. 
said  the  move  to  offer  hosted 
applications  is  largely  targeted 
at  midsize  and  large  users. 


APPIKAIIONS 


Lawson  Adds  Outsourcing 
Services  -  With  Help 

vendor  ivlics  on 

partners  to  llOSt,  at  Verizon  Information  Tech¬ 
nologies  Inc.  in  Tampa.  Fla. 

Lawson  could  use  a  bivost  in 
sales.  The  company  pivsted  a 
S71I.tH)0  net  loss  on  revenue  of 
S78.4  million  for  its  third  quar¬ 
ter.  which  ended  Feb.  28.  ITie 
revenue  itual  was  down 

from  S118  million 
in  the  same  quar¬ 
ter  a  year  ago. 
Adams  down¬ 
played  LiwMvn’s  fiscal  woes, 
noting  that  the  applications 
market  as  a  whole  is  .strug¬ 
gling  and  that  the  company 
has  S250  million  in  rcserv'c. 

lanot  Hoadlcy-RcdgwcILa 
vice  president  at  Manulife  Fi¬ 
nancial  Corp.  in  Toronto,  said 
she  hasn't  seen  the  full  details 
of  Lawson's  outsourcing  pro¬ 
gram.  But  she  noted  Manulife 
outsourced  its  Lawson-based 
general  ledger  and  accouni.s 
payable  systems  to  IBM  ta.st 
April  as  part  of  a  lO-year  deal 
covering  the  insurance  and  fi¬ 
nancial  services  firm's  IT  in¬ 
frastructure.  The  company 
certainly  wouldn't  alter  its  ex¬ 
isting  arrangement,  she  said. 

Hoadley-Redgweli  said 
Manulife  officials  are  watch¬ 
ing  Lawson's  fiscal  health.  But. 
like  Adams,  she  said  a  number 
of  other  software  companies 
face  similar  problems.  I 


New  Outsourcer 

Lawson  will  handle  sales  and 
then  hand  off  users  to  VcKvcity 
Outsourcing,  a  new  company 
set  up  by  Eisner  Technology 
Solutions  LLC.  a  New  York- 
based  systems  integrator  and 
Lawson  business  partner. 

VcItKity  will  manage  the  ap¬ 
plications  and  be  responsible 
for  meeting  the  requirements 
in  service-level  agreements 
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Supply  Chain  Vendors  Vyin^  to 
Provide  More  Inventory  Visibility 


Upgraded  apps  will  offer  real-time 
insights,  automated  response  tools 


•y  MARC  i..  SOMOIMI 

Rival  vendors  of 
supply  chain  man- 
agemcni  software 
are  racing  to  develop 
tools  that  give  users  addition^ 
collaboration  capabilities  and 
real'time  visibility  of  product 
inventory  and  demand  levels. 

For  instance.  Manugistics 
Group  Inc.  later  this  year 
plans  to  roll  out  an  applica- 
dom  upgrade  that  will  use 
Web  services  hooks  to  create 
a  "glass  pipelme”  into  supply 
chains  for  users,  said  Lori 
MitcheU'KeUer,  senior  vice 
president  of  market  strategy* 
at  the  Rockville.  Md.-based 
company. 

The  software  will  take  real¬ 
time  fiseds  from  Manugistics' 
supply  chain  planning  and 
scb^uling  tools,  as  well  as 
from  third-party  ERP  systems 
and  other  Iciness  applica¬ 
tions.  Mitcheil-KeOer  said,  it 
will  also  let  users  set  rules  for 


automated  resolution  of  un¬ 
foreseen  supply  chain  proh- 
leros  and  provide  additional 
forecasting,  scheduling  and 
collaboration  capabilities. 

Manugistics  expects  to  beta- 
test  the  software  in  August 
and  release  it  by  September  as 
Version  7.1  of  its  applications, 
Mitcbeil-Keller  said. 


Whafs  New? 


The  upcoming  applications 
sound  similar  to  dashboard- 
style  products  that  other  ven¬ 
dors  like  SAP  AG  and  People- 
SoR  Ifkc.  are  rolling  out,  said 
leri  Dunn,  CIO  at  Tyson  Foods 
Inc.  in  Springdale,  Ark. 

Tyson  is  installing  Manugis¬ 
tics’  supply  chain  planning 
software  in  its  chicken-proces¬ 
sing  bu.sincsses.  But  Dunn  said 
she  has  yet  to  evaluate  the  fea¬ 
tures  of  Version  7.L 

Manugistics  isn’t  alone  in 
targeting  increased  collabora¬ 
tion  and  supply  chain  visibil¬ 
ity.  SAP  in  the  third  quarter 
plans  to  beef  up  the  real-time 
visibility  capabilities  in  its 
supply  chain  applications  by 
shipping  an  upgrade  that  ex¬ 
ploits  its  new  NetWeaver  inte¬ 
gration  technology,  said 
Christian  KnoU,  the  compa¬ 
ny’s  global  vice  president  of 
supply  chain  management 
products. 

Knoll  said  NetWeaver  will 
let  both  SAP  and  third-party 
software  more  easily  share 
data  to  connect  product  life- 
cycle  management,  CRM  and 


Crystal  Decisions  Tightens 
Arialysis  Software  Bundle 


RV  MARC  L.  SOROiNI 

Crystal  Decisioos  Inc.  last 
week  announced  an  upgraded 
set  of  its  reporting  and  data 
analysis  software  that’s  more 
ti^tly  integrated  than  earlier 
releases  were. 

*n>e  Palo  Alta  Calif.-based 
company  said  Us  Crystal  En¬ 
terprise  9  Premium  offering 
expands  on  a  version  of  the 
software  bundle  that  was  an¬ 
nounced  in  January.  The  new 
parkagr  includes  hyperlinks  to 
make  it  easier  for  end  users  to 
send  data  back  and  forth  be¬ 
tween  the  different  applica¬ 
tions,  said  lames  Chun±.  a 
group  product  manager  at 
Crystal  Dectsioas. 

The  company  also  added 


self-help  wizard  technology 
and  new  pack^;ing  that 
should  result  in  lower  prices 
for  users,  according  to 
Church.  But  he  declined  to 
give  any  baseline  cost  savings 
provided  by  the  bundle,  which 
starts  at  S7S.OOO  per  processor. 

Mark  Smith,  an  an^ysi  at 
Ventana  Research  Inc.  in  Bel¬ 
mont,  Calif.,  said  the  premium 
version  will  let  end  users  do 
more  ad  hoc  querying  and  cre¬ 
ate  more  sophisticated  reports 
than  they  could  before. 

A|)p0tizing  Features 

Charles  Castleberry,  assistant 
direaor  of  architecture  at  Los 
Angetes-based  Fox  Filmed  En- 
lertainmenl.  a  subsidiary  of 


Fox  Entertainment  Group  Inc. 
said  he’s  eager  for  some  of  the 
new  bundle's  capabilities. 

“It  will  certainly  make  it 
easier  for  us  to  expand  into 
the  analysis  features  of  the 
Crystal  product  line.’*  Castle¬ 
berry  said.  The  more  tightly 
integrated  and  seamless  the 
tools  are,  the  simpler  it  will  be 
for  us  to  start  taking  advan¬ 
tage  of  hitherto-unused  fea¬ 
tures."  Fox  Filmed  Entertain¬ 
ment  currently  runs  Crystal 
Enterprise  8.5  to  support  in¬ 
ternal  decision-making. 

Crystal  Decisions  also  an¬ 
nounced  Crystal  Analysis  Pro¬ 
fessional  9.  an  upgrade  of  its 
stand-alone  Web-based  ana¬ 
lytics  reporting  applicatioa 
New  features  include  im¬ 
proved  integration  with  Us 
Crystal  Reports  software  and 
products  like  Microsoft’s  Ex¬ 
cel  and  IBM’s  0B2  database.  • 


other  corporate  systems  to 
supply  chain  applications. 

Dallas-based  i2  Technolo¬ 
gies  Inc.  last  month  released 
an  i2  Six  upgrade  that  includes 
added  extraction  capabilities 
for  pulling  data  out  of  various 
systems,  as  well  as  enhanced 
event  managcirtent  capabili¬ 
ties  designed  to  give  users 
real-time  views  of  their  supply 
chains  IQpickLink  37218]. 

In  addition.  Bameveldt. 


Netherlands-based  Baan  Co. 
said  it’s  prototypiitg  an  ad¬ 
vanced  planning  tool  that  can 
automate  responses  to  pro¬ 
duction  scheduling  sitafus  or 
other  problems.  Baan  is  also 
developing  another  applica¬ 
tion  that  will  let  supply  chain 
managers  execute  a  collabora¬ 
tive  process  in  real  time. 

Almost  every  supply  chain 
vendor  is  starting  to  offer  in¬ 
ventory  monitoring  capabili¬ 
ties  and  other  real-time  visi¬ 
bility  functions,  said  Karen 
Peterson,  an  analyst  at  Gartner 
Inc.  in  Stamford,  Conn.  But 
most  of  the  products  are  still 
in  the  inUial  stages  of  maturi¬ 
ty.  Peterson  said.  A 


Lawson  Adds  Outsourcing 
Services  -  With  Help 


Vendor  relies  on 
partners  to  host, 
manage  s^'stems 


BV  MARC  L.  80N04MI 

Lawson  Software  Inc.,  which 
is  trying  to  rebound  from 
three  straight  quarterly  losses, 
hopes  to  entice  new  users  by 
working  with  two 
other  companies 
to  offer  outsourc¬ 
ing  services  for  its 
business  applications. 

Lawson  will  armounce  the 
plan  this  week  at  its  annual 
user  conference  in  Orlanda 
where  the  company  also  plans 
to  showcase  the  latest  addi¬ 
tions  to  its  software. 

Sam  Adams,  senior  vice 
president  of  global  sales  at  St. 
Paul,  Minn.-based  Lawson, 
said  the  move  to  offer  hosted 
applications  is  largely  targeted 
at  midsize  and  large  users. 

New  Outsourcer 

Lawson  will  handle  sales  and 
then  hand  off  users  to  Velocity 
Outsourcing,  a  new  company 
set  up  by  ElsiterTechnolc^ 
Solutions  LLC,  a  New  York- 
based  systems  integrator  and 
Lawson  business  partner. 

Velocity  will  manage  the  ^ 
plications  and  be  responsible 
for  meeting  the  requirements 
in  service-level  agreements 


with  users,  Adams  said  The 
software  will  run  on  systems 
at  Verizon  Information  Tech¬ 
nologies  loc.  in  Tampa,  Fla. 

Lawson  could  use  a  boost  in 
sales.  The  company  posted  a 
$711,000  net  loss  on  revenue  of 
$78.4  million  for  its  third  quar¬ 
ter.  which  ended  Feb.  28.  The 
revenue  total  was  down  34% 
from  $118  million 
in  the  same  quar¬ 
ter  a  year  ago. 
Adams  down¬ 
played  Lawson’s  fiscal  woes, 
noting  that  the  applications 
market  as  a  whole  is  strug¬ 
gling  and  that  the  company 
has  $2S0  million  in  reserve. 

Janet  Hoadley-Redgwcll,  a 
vice  president  at  Manulife  Fi¬ 
nancial  Corp.  in  Toroma  said 
she  hasn’t  seen  the  full  details 
of  Lawson's  outsourcing  pro¬ 
gram.  But  she  noted  Manulife 
outsourced  its  Lawson-based 
general  ledger  and  accounts 
payable  systems  to  IBM  last 
April  as  part  of  a  10-year  deal 
covering  the  insurance  and  fi¬ 
nancial  services  firm's  IT  in- 
frastnicture.  Hie  company 
certainly  wouldn’t  alter  its  ex¬ 
isting  arrangement,  she  said. 

Hoadley-Redgweli  said 
Manulife  officials  are  watch¬ 
ing  Lawson's  fiscal  health.  But, 
like  Adams,  she  said  a  nunff>er 
of  other  software  companies 
face  similar  problems.  A 
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IBM/Rational 

KonjlJ  Dimson,  vk'c  prc’vidont 
orrci.til  architecture  at  Wa¬ 
chovia  Corp.  in  rharlottc.  N.C. 
"We're  l»>okin}j  for  it  to  htend. 

I  don't  want  to  have  to  hu>  the 
wheels,  then  the  seat  covers.'* 

"It  s  nice  to  Ivtve  the  de.siirn 
patterns  at  \-our  fingertips  — 
•»rat  your  mouse  —  rather 
than  having  to  look  them  up  | 
in  a  KH'k.**  s.iiJ  IVnld  Baldwin.  I 
an  applications  engineer  at  | 
.American  Family  Insurance  , 

(imup  in  Madison.  Wis.  "To  | 

see  it  in  a  piece  of  s«'frw  are  I 
really  t*pt‘ned  m>  eyes  up.  be-  I 
i.'ause  it  seems  like  it's  going  to 
be  easier  to  use." 

llolleague  I’aula  Waite,  a 
softwtire  engineering  special-  | 
ist.  .said  American  Family  has 
purchased  several  copies  «>f 
Rational  XOF..  and  she  hopes 
the  integrated  Rational  XI>F  j 
WebSphere  tool  will  be  cheap-  I 
er  than  the  products  are  now 
when  purchased  separately. 

DeveU'pers  can  ala’ady  use 
Rational  XDE  within  the  same 
interface  as  WebSphere  Appli-  j 
cation  [Xweloper.  since  Katuv-  j 
lul  did  the  work  to  make  the 
XDE  loot  plug  into  IB.M's 
Eclip.se  open-stiuree  platform 
Hut  IBM  executives  said  the 
level  of  integration  will  be 
more  exterwive  in  the  future. 

IB.M  can  "drive  a  ver\-  deep 
level  of  integration’*  dmvn  into 
the  runtime.  Mills  said.  ' 

Grady  Boi^ch.  chief  scientist  I 
in  the  Rational  division,  said  I 
the  sweet  spot  for  integration 
will  be  a  model-driven  archi-  ' 
tccrure  leveraging  the  Unified  | 
Modeling  Language  standard.  , 
which  provides  mechanisms  ' 
for  visualizing  dilTereni  as-  I 

pecLs  of  a  s\-siem.  from  the  de¬ 
ployment  architecture  to  the 
component  architecture  and 
even  databa.se  schemas.  Fie 
said  business  rules  could  be 
written  in  a  graphical  way. 

"W'e  have  that  deep  seman-  I 
tics  inside  XDE.  and  so  the  op-  I 
pominity  is  to  get  that  level  of  | 
deep  integration."  he  said.  | 

B<Hkch  added  that  "the  ulti-  I 
mate  would  be  debugging  at  I 
the  level  of  graphics."  He  said 
graphical  models  can  be  tied 
m  the  running  system.  ss>mc- 


thing  Kalion.ii  jlreaJ>  has 
demonstrated  in  distributed 
sv-stems.  B«»och  predicted  that 
that  capability  will  be  includ¬ 
ed  in  .XDF  w  ithin  a  year. 

Erie  Schtx»r.  vice  president 
of  marketing  at  ('upertino. 
Calif.-ba.sed  Rational,  said  he 
can  envision  other  areas  of  in¬ 
tegration  K'tween  the  katuv 
nai  i<H)i  line  and  other  IBM 
priKlucts,  such  as  the  DB2 
database  server.  I  oius  collabo¬ 
ration  products  .ind  I'ivoli  s)’s- 
tems  nianagcmeni  software. 

SchtK»r  noted  that  the  ma- 
ioriiy  of  Rational's  tools  have  a 
relational  database  as  their 
persistent  stt>rage  meehanism. 
"We  could  use  DHJ  as  the  un¬ 
derlying  database  in  many  of 
our  to«i|s,  which  will  simplify 
their  management,"  he  said, 

The  l  otus  collaboration 
technology  could  be  used  to 
help  developers  team  on  proj¬ 
ects.  he  said. 


I'here  is  als»i  an  opportunity 
for  Rational  to  integrate  its 
oinfiguration  management 
w  ares  with  Tivoli  produets  to 
create  "a  mtire  seamless  and 
automated  deployment  envi- 
rimment."  Seh<v»r  said. 

"When  an  application  is 
running,  we  can  leverage  the 
Tivoli  monitoring  technoliigv 
to  provide  information  to  de¬ 
velopers  about  what's  going 
right  and  wrong."  he  said. 

But  Schoor  was  ijuiek  to 
add.  "  These  are  concepts,  not 
committed  plans." 

|ohn  Meyer,  an  analyst  at 
(.Cambridge.  Mxss.-baseJ  For¬ 
rester  Research  Inc.,  said  he's 
wailing  for  IBM  to  fully  inte¬ 
grate  the  product  line,  from 
•XDE  for  development  to  'Tivo¬ 
li  for  deployment,  and  to  pro¬ 
vide  direction  to  the  develop¬ 
er  community  when  there  aa* 
duplicative  capabilities  in  tools. 
Hf  noted,  for  example,  that 


Rationalizing  IBM 
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Web  meettngs.  Web-based 
repositones  or  Web-based  coth 
figuration  management. 


three  tools  —  Rational  XDE.  a 
toot  that  IBM  acquired  from 
Holosofx  Inc.,  and  a  too)  that 
Rational  acquired  from  Neu- 
Vis  Inc.  —  all  contain  differing 
levels  of  bu-sincss  process 
modeling  capabilities. 


IBM’s  Software  Chief  Scans 
The  Competitive  Landscape 

ways,  but  eight-way  is  certain- 


BV  CAROL  SLIWA 

ANS 

Steve  Milb,  senior  vice  pre.s/denr 
fi/’/B.M's  Software  Group,  ipttkc 
with  Compuierworld  fust  wccF 
about  the  software  strategies  of 
IBM  and  its  tup  competitors. 
Excerpts  from  the  interview 
follow. 

How  do  you  view  the  future  of 
Unix  at  IBM?  I'here  are  strong 
indications  that  the  market  Is 
moving  down  the  path  to  shift 
toward  Linux.  These  things 
lend  to  be  long-term  trends. 
The  existing  Unixes  arc  not 
just  going  to  disappear  from 
the  planet.  People  started  pre¬ 
dicting  the  demise  of  NeiW’arc 
lO-plus  years  ago.  There’s  still 
lots  of  NetWare  out  there. 

The  m<ire  important  issue  is 
that  Linux  is  following  a  fairly 
predietablc  path  toward  reach¬ 
ing  maturity.  As  you  look  at 
the  progression  of  Linux,  at 
each  level,  this  has  become  a 
more  scalable  prt>duct 

Today,  people  are  typically 
running  tw-o-ways  and  four- 


ly  possible.  If  we  look  out  to 
the  end  of  the  year,  we're  go¬ 
ing  to  sec  .1  more  significant 
numK-r  of  people  beginning 
to  look  at  running  seriously  on 
eight-way  and  even  pushing 
toward  U»-way. 

As  we  come  around  fur  an¬ 
other  rev  of  Linux  a  couple 
of  years  out.  Linux  will  be  in 
the  I6-.  24-w;iy  types  <»f  SMI’ 
systems. 

Wher«  is  IBM's  R&O  money  being 
invested  for  operating  systems? 
Most  of  it  gtws  to  the  main- 
I  frame  still,  fur  obvious  rea¬ 
sons.  Most  of  the  world’s  busi¬ 
ness  runs  every  day 
on  the  mainframe,  and 
that's  a  life-and-dcath 
envin>nmeni. 

What  do  you  think  about 
Hewlett-Packard's  strat¬ 
egy  to  focus  exclusively 
on  Intel  architecture? 

Remember,  HP  was 
reaching  a  point  — 
this  is  going  back  to 


Lew  Plan's  tenure  —  where 
they  were  having  to  think 
about  what  the  long-term  etwts 
were  going  to  be  to  design  and 
fabricate  high-performance 
microprocessors,  which  is  not 
an  inexpensive  business  t<*  be 
in.  Lots  of  science,  lots  of 
heavy  invesimeni  to  ca*ate  the 
fabrication  capability. 

(Piatt's)  conclusion  was  that 
FIP's  best  bet  was  to  essential¬ 
ly  become  an  Inici-hasi-d 
processor  wmpany. 

What  do  you  see  in  Sun  Microsys¬ 
tems’  future?  They’re  getting 
squeezed  at  every  end  of  the 
spectrum:  from  below  by 

WinteL  Linux  on  Intel 
kinds  of  approaches. 
Solaris  frankly  has 
been  the  strongest  an¬ 
chor  point  for  the 
franchise,  and  Solaris 
Is  under  siege  from 
Linux.  And  the  So¬ 
laris  audience  has 
flexible,  portable 
skills.  Anything  I  can 
do  on  any  one  of  the 


I  "Wh.it  they  haven't  done  is 
rolled  out  a  road  map  of  which 
tiH>ls  will  merge  in  the  future." 
Meyer  said. 

Roger  Oberg.  director  of 
market  management  in  the  Ra¬ 
tional  division,  said  XDE  is 
aimed  at  developers  building 
compimenis.  the  NeuVis  tool 
is  for  corporate  devehipers  as¬ 
sembling  components,  and  the 
Holosofx  technolog)'  is  aimed 
at  busirtess  managers  or  oper¬ 
ations  executives,  not  the  soft¬ 
ware  development  team. 

"We've  got  to  refine  the  sti>- 
ry  so  that  people  understand 
thea*arc  different  types  of  de¬ 
velopers,  and  we  have  differ¬ 
ent  pnHlucts  for  different 
types."  Oberg  said. » 


TOTAUYRAD 

IBM's  Rational  division  last  week  Dreviewed 
a  rapid  application  developmeni  tool 
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Unixes.  I  can  do  on  the  other 
Unixes  and  on  Linux.  Si) 
they’re  having  a  hard  time 
maintaining  loyally. 

b  Microsoft's  high-end  Data¬ 
center  Server  becoming  a  more 
credible  competitor?  Microsoft 
is  a  credible  competitor.  Per¬ 
ception  is  reality,  and  peiiple 
perceive  that  Microsoft  is  a 
company  that's  serious  about 
being  in  the  enterprise.  So 
they  believe  they  nL*ed  to  look 
at  Microsoft. 

It's  very  different  than  sell¬ 
ing  at  the  departmental  lex'cl. 
though.  The  enterprise-level 
people  generally  do  much 
more  physical  comparison  of 
products.  So  It's  a  very  differ¬ 
ent  Ci>mpetiiive  environment 
than  Microsoft  is  used  to. 

Our  position  is:  Wheel  it  in. 
Bring  in  your  people  and  your 
code,  and  let's  have  a  ducL 
This  is  our  expertise.  They're 
playing  our  game.  This  is 
American  football,  not  stKccr. 
It's  played  with  pads,  and  usu¬ 
ally  at  the  end  of  the  game, 
somebody's  bleeding.  9 


MOffiONUNE 

To  read  Ihe  lull  mierview  with  Mills,  vsii  our 
Website 
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Continued  from  pagni 

IBM/Ratfonai 

Ronald  Donson,  vice  president 
of  retail  architecture  at  Wa* 
chovia  Corp.  in  Charlotte.  N.C. 
“We’re  looking  for  it  to  blend. 

I  don’t  want  to  have  to  buy  the 
wheels,  then  the  seat  covers." 

“It's  nice  to  have  the  design 
patterns  at  your  fingertips  — 
or  at  your  mouse  ~  rather 
than  having  to  took  them  up 
in  a  book."  said  Todd  Baldwin, 
an  applications  engineer  at 
American  Family  Insurance 
Group  in  Madison,  Wts.  “To 
sec  it  in  a  piece  of  software 
really  opened  my  eyes  up.  be¬ 
cause  it  seems  like  it’s  going  to 
be  easier  to  use.” 

Colleague  Paula  Waite,  a 
software  engineering  special¬ 
ist.  said  American  Family  has 
purchased  several  copies  of 
Rational  XDE.  and  she  hopes 
the  integrated  Rational  XDE/ 
WebSphere  tool  will  be  cheap¬ 
er  than  the  products  are  now 
when  purchased  separately. 

Developers  can  already  use 
Rational  XDE  within  the  same 
interface  as  WebSphere  Appli¬ 
cation  Developer,  since  Ratio¬ 
nal  did  the  work  to  make  the 
XDE  tool  phig  into  IBM’s 
Eclipse  open-source  platform. 

But  IBM  executives  said  the 
level  of  integration  will  be 
more  extensive  in  the  future. 
IBM  can  “drive  a  very  deep 
level  of  integration"  down  into 
the  runtime.  Mills  said. 

Grady  Booch.  chief  scientist 
in  the  Rational  division,  said 
the  sweet  spot  for  integration 
will  be  a  modd-driven  archi¬ 
tecture  leveraging  the  Unined 
Modeling  Language  standard, 
which  provides  mechanisms 
for  visualizing  different  as¬ 
pects  of  a  system,  from  the  de¬ 
ployment  architecture  to  the 
component  architecture  and 
even  database  schemas.  He 
said  business  rules  could  be 
written  in  a  graphical  way. 

‘We  have  that  deep  seman¬ 
tics  inside  XDE.  and  so  the  op¬ 
portunity  is  to  get  that  level  of 
deep  integration."  he  said. 

Booch  added  that  “the  ulti¬ 
mate  would  be  debugging  at 
the  level  of  graphics."  He  said 
graphical  mod^  can  be  tied 
to  the  running  system,  some¬ 
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thing  Rational  already  has 
demonstrated  in  distributed 
systems.  Booch  predicted  that 
that  capability  will  be  includ¬ 
ed  in  }U)E  within  a  year. 

Eric  Schoor,  vice  president 
of  marketing  at  Cupertino, 
Calif.-based  Rational,  said  he 
can  envision  other  areas  of  in¬ 
tegration  between  the  Ratio¬ 
nal  tool  line  and  other  IBM 
products,  such  as  the  DB2 
database  server.  Lotus  collabo¬ 
ration  products  and  TivoU  sys¬ 
tems  management  software. 

Schoor  noted  that  the  ma¬ 
jority  of  Rational’s  tools  have  a 
relational  database  as  their 
persistent  storage  mechanism. 
We  could  use  OB2  as  the  un¬ 
derlying  database  in  many  of 
our  tools,  which  will  simplify 
their  management.*  he  said. 

The  Lotus  collaboration 
technology  could  be  used  lo 
help  developers  team  on  proj¬ 
ects,  he  said. 


There  is  also  an  opportunity 
for  Rational  to  integrate  its 
configuration  management 
wares  with  Tivoli  products  lo 
create  “a  more  seamless  and 
automated  deployment  envi¬ 
ronment."  Schoor  said. 

“When  an  application  b 
running,  we  can  leverage  the 
Tivoli  monitoring  technology 
to  provide  Information  tq  de¬ 
velopers  about  what’s  going 
ri^c  and  wrong."  he  said. 

But  Schoor  was  quick  to 
add.  “These  are  concepts,  not 
committed  plans.” 

john  Meyer,  an  analyst  at 
Cambridge,  Mass.-based  For¬ 
rester  Research  Inc.,  said  he’s 
waiting  for  IBM  to  fully  inte¬ 
grate  the  product  line,  from 
XDE  for  development  to  Tivo¬ 
li  for  deployment,  and  lo  pro¬ 
vide  direction  to  the  develop¬ 
er  community  when  there  are 
duplicative  capabilities  in  tools. 
He  noted,  for  example,  that 


Rationalizing  IBM 


three  toots  —  Rational  XDE,  a 
tool  that  IBM  acquired  from 
Holosofx  Inc.,  and  a  tool  that 
Rational  acquired  from  Neu- 
Vis  Inc.  ->  all  contain  differing 
levels  of  business  process 
modeling  capabilities. 


“What  they  haven't  done  is 
rolled  out  a  road  map  of  which 
tools  will  mer^  in  t^  future," 
Meyer  said. 

Roger  Oberg,  director  of 
market  management  in  the  Ra¬ 
tional  division,  said  XDE  is 
aimed  at  developers  building 
components,  the  NeuVis  toot 
is  for  corporate  developers  as¬ 
sembling  components,  and  the 
Holosofk  technology  is  aimed 
at  business  managers  or  oper¬ 
ations  executives,  not  the  soft¬ 
ware  development  team. 

“We’ve  got  to  refine  the  sto¬ 
ry  so  that  people  understand 
there  are  different  types  of  de¬ 
velopers,  and  we  have  differ¬ 
ent  products  for  different 
type&”  Oberg  said.  I 
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a  rapid  appkcation  develQ()rneni  (oat 

OMIMSTTS? 

uwwxBwpiilarMai tdxoiH 


IBM’s  Software  Chief  Scans 
The  Competitive  Landscape 


8v  caiiOL  actwA 

NEW  ORLEANS 

Suva  Mia.  senior  vice  president 
of  IBM's  Software  Group,  spoke 
with  Computerworld  lost  week 
about  the  software  strategies  of 
IBM  and  its  top  competitors. 
Excerpts  from  the  interview 
/bi/ow. 

How  do  you  view  fuhn  of 
IMx  at  BM?  There  are  strong 
indications  that  the  market  is 
moving  down  the  path  to  shift 
toward  Linux.  These  things 
tend  to  be  long-term  trends. 
The  existing  Unixes  are  not 
just  going  to  disappear  from 
the  planet.  People  started  pre¬ 
dicting  the  demise  of  NetWare 
10-pius  years  ago.  There’s  still 
lots  of  NetWare  out  there. 

The  more  important  issue  is 
that  Linux  is  following  a  fairty 
predictable  path  toward  reach¬ 
ing  maturity.  As  you  look  at 
the  progression  of  Linux,  at 
each  le^  this  has  become  a 
more  scalable  product 

Today,  people  are  typically 
running  two-ways  and  four- 


ways,  but  eight-way  is  certain¬ 
ly  possible.  If  we  look  out  to 
the  end  of  the  year,  we’re  go¬ 
ing  to  see  a  more  significant 
number  of  people  beginning 
to  look  at  running  seriously  on 
eight-way  and  even  pushing 
toward  16-way. 

As  we  come  around  for  an¬ 
other  rev  of  Linux  a  couple 
of  years  out.  Linux  will  he  in 
the  16-.  24-way  types  of  SMP 
systems. 

Where  is  IBirs  RID  fflonay  bdng 
imasM  for  operating  system? 

Most  of  it  goes  to  the  main¬ 
frame  still,  for  obvious  rea¬ 
sons.  Most  of  the  world's  busi¬ 
ness  runs  every  day 
on  the  mainframe,  and 
that's  a  Ufe-and-desth 
environment. 

What  do  you  think  about 
Hewlett  Pacfcaid'sstrat- 
egy  to  foGue  enfuelMfy 
on  bdal  mfdlscliaa? 

Remember.  HP  was 
reaching  a  point  — 
this  is  going  back  to 


Lew  Platt’s  tenure  —  where 
they  were  having  to  think 
about  what  the  long-term  costs 
were  going  to  be  to  design  and 
fabricate  high-performance 
microprocessors,  which  is  not 
an  inexpensive  business  to  be 
in.  Lots  of  science,  lots  of 
heavy  investment  to  create  the 
fabrication  capability. 

(Platt’s]  conclusion  was  that 
HP’s  best  bet  was  to  essential¬ 
ly  become  an  Intel-based 
processor  company. 

Whit  do  you  Me  In  Sun  Mfcroiys- 
tams’  future?  They're  getting 
squeezed  at  every  end  of  the 
spectrum:  from  below  by 

Wintel.  Linux  on  Intel 
kinds  of  approaches. 
Solaris  frankly  has 
been  the  strongest  an¬ 
chor  point  for  the 
franchise,  and  Solaris 
b  under  siege  from 
Linux.  And  the  So¬ 
laris  audience  has 
flexible,  portable 
skills.  Anything  I  can 
do  on  any  one  of  the 


Unixes.  I  can  do  on  the  other 
Unixes  and  on  Linux  So 
they're  having  a  hard  time 
maintaining  loyalty. 

b  ifferasoft's  Mgh-and  DaU- 
canter  Server  bacoofnii  a  more 
credUa  compatitor?  Microsoft 
is  a  credible  competitor.  Per¬ 
ception  is  reality,  and  people 
perceive  that  Microsoft  is  a 
company  that's  serious  about 
being  in  the  enterprise.  So 
they  believe  they  need  to  look 
at  Microsoft. 

It’s  very  different  than  sell¬ 
ing  at  the  departmental  level 
though.  The  enterprise-level 
people  generally  do  much 
more  physical  comparison  of 
products.  So  it's  a  very  differ¬ 
ent  competitive  environment 
than  Microsoft  is  used  to. 

Our  position  is:  Wheel  it  in. 
Bring  in  your  people  and  your 
code,  and  let’s  have  a  duel. 
This  is  our  expertise.  They're 
playing  our  game.  This  is 
American  footbalL  not  soccer. 
It’s  played  with  pads,  and  usu¬ 
ally  at  the  end  of  the  game, 
somebody’s  bleeding.  I 


b  read  the  U  irteoww  with  Mks.  v«i  ou 
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The  downside:  your  walk  through  the  parking  lot  was  long.  The  upside:  it  gave  you  lime 
to  think  about  a  way  to  eliminate  the  high  cost  and  hassles  of  overnight  delivery. 


And  lo  and  behold,  you  found  it:  Canon  ImageRUNNER*  technology.  It  lets  you  send  documents  anywhere,  in  any  form,  at  any  time. 


over  your  network  or  the  Internet.  Instantaneously.  Just  scan  a  document  into  the  imageRUNNER  and  send  it  -  to  desktops.  E-mail 
addresses,  fax  machines,  databases  and  file  servers.  All  of  which  results  in  lowered  costs  and  increased  productivity.  So.  take  pride. 


Thanks  to  Canon  know-how,  your  walk  through  the  parking  lot  is  considerably  shorter.  1  -866-25-CANON  www.imagerunner.com 


Canon  KNOW  HOW 


WHY  NOT  CUT  COSTS 
WITHOUT  GUTTING 


^  p-^ 


It's  simple,  really:  When  you  buy  commodity  hardware,  you  get  commodity 
features.  So  why  not  get  premium  features  for  the  same  price?  With  a  line 
of  powerful  servers  starting  at  just  $995,  Sun  proves  once  again  that  you 
can  lower  costs  and  complexity  without  compromising  quality. 

Sun  has  an  entire  family  of  servers  built  to  deliver  enterprise-level  performance 
and  reliability  at  highly  competitive  prices.  Which  means  that  for  the  cost  of 
an  alarmingly  mediocre  Wintel  box,  you  can  get  an  ultra-reliable  Sun  server 
ready  to  take  on  your  most  mission-critical  tasks.  From  CRM  applications  to 
e-mail  and  Web  serving.  With  this  kind  of  bang  for  the  buck,  it’s  no  wonder 
Sun  has  remained  the  UNIX*  server  leader  every  year  since  1998? 

So  go  ahead  and  ask  yourself:  Is  your  business  a  commodity  business?  Do 
you  aspire  to  deliver  parity  products  that  deliver  parity  returns?  Why  not  use 
Sun  servers  to  break  away  from  the  pack  once  and  for  all? 


To  find  out  more  about  how  Sun  servers  can  deliver 
state-of-the-art  technology  at  state-of-the-economy  prices, 
visit  8Uir.OO»G/WHTirOT 
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microsystems 
We  make  the  net  work. 


swriJM  A  powerful  entry-level 
x86  server  that  runs  Sun  Linux  or 
Solaris*  Operating  EnvironmervL  Ifs  fully 
supported  by  Sun  and  priced  at  $2,795. 


MN  fnt  vWOT  A  winning  SPARC*/ 
Solaris  server  that  delivwa  the  horsepower 
to  run  e-commerce,  OLTP,  supply  chain 
and  database  management  applications. 


*Soy*ee;  lOCiWBrtWnde  Owrterlit  ServerTrKker,  FebriMry  »8.  BMttf  on  rewenue  and  ■NpMfit  vowth.  CVaxe.  eH  os*. 

■fc^aaewiTi  i  i  a ^rTirmrfrtrtnwvimhiirniniiwrine^iiMTwTrrnr 
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SUN  FIRE' V1280  Enterprise-class  features 

and  aggressive  price  points,  so  you  can  tower 
the  cost  of  reliability. 


susmENrim  Sun's  new 
Rbre  Channel  Array  with  enterprise-class 
features.  It's  the  kieal  companion  to 
Sun's  entr)Mevel  and  workgroup  servers. 


SMI  FME  VH9  Sun's  best-selling 
server  for  departments  or  data  centers. 
With  more  standard  features,  there  are 
r»o  hidden  costs  and  no  surprises. 
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Unisys  Pins  Server  Hopes  on  Microsoft 


ev  MTIHCK  TMISODEAU 

C/rttsys  Corp.  last  week  intro¬ 
duced  a  midrange  version  of  its 
ES7000  server  [QuickLink 


37562]  in  a  bid  to  broaden  the 
market  for  that  product  line, 
which  is  based  on  Intel  Corp. 
processors  and  the  Datacenter 


edition  of  Microsoft  Windows. 
George  Oazenivitz.  president  of 
the  Blue  Bell,  Pa -based  compa¬ 
ny’s  Unisys  Systems  &  Tecbnoi- 


Ogy  unit,  discussed  the  ES7000 
strategy  in  an  interview  prior  to 
the  product  launch. 

Dell  and  other  Intel-based  system 
vendors  are  pushing  dusters  for 
big  corporate  appHcatlons.  Why 


Wireless  business.  Bigger  results. 

The  new  Gatewa/  450  Notebook,  powered  by  Intel'  Centrino"  mobile  technology. 
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Gateway  450e  Notebook 

ttwdi— wCawiW|i4i0mfiiiainlilinfc 
Cmertno  moMto  ledwoiogy*  dePvew 
-  UMnut*  mebN*  power  and  wireless 
amaoMly  tor  ledqr^  moMe  piofenionai 
•TWnandlghiewiBNdwigrtoreltorttoii 
pertiUBty 

•  tafennme  lo  run  demandtog  budncss 
appleadom  -  In  the  oMce  or  on  the  go 
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I  688-203-4557  |  www.gatewayconVWork  | 


tniegrereO  wireiett  capability  fo'  inttant  access  to  email, 
Cbenu  and  vow  company ’»  r>etworfc. 


Dedicated  mobile  proceswK  power  for  all  demanding 
buwiesc  software  molnmedia  presmtaiioni  and  more. 


up  to  ft  hows  of  depersdabfe  dual  battery  life  to  Iceep 
you  on  deadhne  a«Kl  on  target. 


A  thin.  Nght  design  that  reduces  your  power  needs  while 
•nereasing  mobility  ease 


Mobtlize  yow  business.  Oo  wireless  with  <>at«way. 


Gateway 

Abetterway®** 
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should  users  consider  the  ES7000 
over  that  approach?  Certainly, 
from  a  performance  stand¬ 
point,  you’re  always  going  to 
get  better  performance  [from 
a  single  system],  especially 
when  you  have  demanding  ap¬ 
plications  that  drive  large 
databases  or  trans¬ 
actions.  There’s  a 
lot  less  latency,  be¬ 
cause  there  are  a 
lot  less  connections 
and  wires.  And 
from  an  overall 
management  stand¬ 
point,  a  single¬ 
image  system  vs.  a 
cluster  approach  is 
a  heck  of  a  lot  more  efficient 
to  manage  and  to  protect  from 
security  inini^ements. 

Vbu’re  closety  afigoed  with  Mkro- 
soft  Some  IT  managers  worry 
that  standaitRzing  on  Merosoft 
technoiogy  tiiroughout  tfieir  com¬ 
panies  and  relyhig  too  much  on 
one  vendor  could  make  them  vul¬ 
nerable,  b  that  a  fear  you’re  going 
to  have  to  deal  with?  We’ve  got 
a  great  partnership.  Are  we 
concerned  about  it  being  a 
single  environment?  It  all 
comes  down  to  the  amount 
of  value  that  they  can  contin¬ 
ue  to  add.  There's  a  lot  to  be 
said  about  having  a  standard 
environment,  and  there’s  a  lot 
to  be  said  about  all  the  appli¬ 
cations  and  solutions  that 
are  available  to  run  on  that 
environment. 

What  martet  sogmont  VB  you 
targatbig  with  the  ESroOO/500 
system?  We’re  still  focused  on 
the  same  markets  that  we've 
always  been  focused  on,  and 
that’s  the  high  end  at  the 
enterprise  level.  This  new 
product  series  allows  us  to 
get  down  a  little  bit  lower, 
[closer]  to  the  midtier,  and 
offer  the  same  mainframe 
attributes. 

b  Unix  a  shrinkirkg  niche  market? 

I  don't  think  Unix  is  going  to 
go  away.  It  will  shrink  a  little 
bit  I  think  the  biggest  hit  on 
Unix  will  probably  be  with 
Linux  at  t^  low  end.  The  im¬ 
pact  at  the  higher  end  is  going 
to  be  the  result  of  Microsoft 
and  the  environment  that 
we're  talking  about  here.  I 


YOU’RE  CUTTING  COSTS, 
TRIMMING  STAFF  AN 
MAKING  DO  WITH  LESS. 
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Demand  Executive  ROI 


T  LAST,  WE  ARE  STARTING  to  see  share¬ 
holders  with  backbone  and  more  than  a 
modicum  of  common  sense.  Two  vv'eeks 
^ago,  Hewlett-Packard  shareholders  passed 


a  mmbmd’mj:  recommen¬ 
dation  askinj:  the  compa¬ 
ny's  directors  to  obtain 
stiK'khoidcr  approval  of 
larjtc  cxc*cutive  severance 
pjckai’es.  HP’s  manage¬ 
ment.  which  had  l»>bbied 
hard  against  the  propos¬ 
al.  Issued  a  terse  statc*- 
meni  saying  that  it  would 
“duly  consider"  the  rec¬ 
ommendation. 

Governing  bodies  tend  JlS? 
to  tgm*re  nonbinding  ref- 
erendums.  so  the  shareholders  will 
nevd  the  backing  of  the  bt)ard.  But 
many  bi>ards  of  directors  function  as 
little  more  than  rubber  stamps  for 
pay  increase's  or  pnuections  sought 
by  the  management  team.  SEC  and 
accounting  reforms  are  suppi>sed  to 
snap  these  bt'ards  to  attention,  but 
even  among  the  spectacular  ruins  of 
aimpanies  such  as  Tyco  Iniema- 
lional.  F.nnm  and  Adelphia.  we  see 
their  boards  continuing  to  go  to  bat 
for  C-k*vel  managers,  requesting  as¬ 
tronomical  salaries,  bonuses  and 
severance  packages  even  as  credi¬ 
tors  line  up  on  one  side  and  laid-otT 
workers  struggle  to  retain  their 
homes  on  the  other. 

Those  Kiards  and  some  bankrupt¬ 
cy  coun  judges  may  have  taken 
leave  of  their  senses,  but  lhankfullv. 
investors  are  starting  to  regain 
theirs.  Bids  to  gain  coniitd  over  c.\- 
ecutive  compensation  have  either 
been  accepted  or  are  under  consid¬ 
eration  at  companies  such  as  Alcoa. 
Bank  of  America.  C-'itigroup.  General 
Electric.  Norfolk  Southern,  Tyco  and 
United  Technok>gies.  V'arious  in¬ 
vestor  groups,  including  The  Gon- 
fercncc  Board,  the  Investor  Respon¬ 
sibility  Research  Center,  the  IVnsion 
Rights  Center  and  Institutional 
Shareholder  Services,  are  starting  to 
pre.S5  for  reform.  E\'cn  Congress  is 
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getting  warmed  up.  "It's 
insulting  when  they  lay 
otT  thousands  of  people 
and  then  pay  top  exeeu- 
1  lives  millions  of  dollars 

^  in  raises."  .said  an  out¬ 

raged  Sen.  (ohn  Mc('ain 
I  R.-Ariz.i  recently. 

He's  right.  E.xecuiive 
pay  is  out  of  control. 

The  average  severance 
MMelhtr  for  CEOs  at  the  coun- 
try's  largest  companies 
during  2001  and  2002 
was  S16.5  millitm.  according  to  The 
CA»rpt>rate  Library.  A  recent  analysis 
of  CEO  ct)mpi‘nsaiion  at  the  100 
largest  U.S.  companies  by  USA  To¬ 
day  and  the  Investor  Respxmsibility 
Research  Center  found  that  CEO 
saiarii's  and  bonuses  jumped  I5"<)  in 
2002.  while  rank-and-file  workers 
averaged  only  a  3.2“o  gain.  By  some 
estimates.  CEOs  now  make  more 
than  450  limes  what  the  average 
Wiirkcr  carn.s. 

It  (.s  insulting  when  companies 
richly  reward  high-level  e.secutives 
w'ho  have  basically  bevn  fired  and 


then  begrudgingly  scrape  up  mini¬ 
mal  severance  for  laid-off  w’orkers. 

If  we  really  believe  that  much  of  a 
company's  success  rides  on  the 
shoulders  i»f  the  CEO  and  his  team, 
then  the  reverse  ought  to  play  out.  If 
the  company  stumbles,  then  the 
blame  should  fall  squarely  on  the 
executive  team.  Their  parachute 
strings  should  be  severed,  not  rein¬ 
forced  with  platinum. 

Why  should  you  care?  Because*  ex¬ 
cessive  compensation  can  under¬ 
mine  the  financial  strength  of  the 
companies  ytju  work  for  and  with.  It 
can  wreak  havoc  with  serv'ice  levels 
and  wt)rker  morale.  W^hat  kind  of 
message  din's  it  send  when  your 
vendor  heaps  another  six-  or  seven- 
figure  bonus  on  an  already  richly 
compensated  executive  but  an¬ 
nounces  in  a  separate  prc'ss  release 
that,  to  cut  eost.s,  it  will  whack  off 
another  chunk  of  its  scrxicc  and 
support  division?  Or  perhaps  it  ex¬ 
pands  your  sales  rep's  territory,  or 
eh.vrges  for  or  automates  a  service 
you  would  rather  it  didn't. 

High  lech  —  and.  by  association, 
rr  —  has  been  hit  especially  hard 
over  the  past  three  years.  At  a  lime 
when  ROI  is  king  and  cost -cutting  is 
the  new  Zen.  we  should  demand  that 
these  values  extend  to  the  e.xecutive 
suite.  Leadership  starts  at  the  top.  I 
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Stop  the  Web 
Conferencing 
Cost  Clash 

WEB  CONFERENCING 
is  creating  a  clash 
that  pits  depart¬ 
mental  prerogatives  against 
corporate  cost  savings.  The 
departments  need  to  retreat. 

Defined  as  the  ability  to  share  docu¬ 
ments.  applications  and  even  desk¬ 
tops.  Web  conferencing  is  a  service 
outside  the  wrporaiion,  offered  by  the 
likes  of  WebEx.  PlaceWare  and  Rain- 
dance.  But  as  Web  conferencing  be¬ 
comes  a  general  business  necessity, 
the  argument  that  each  department 
should  K’  able  to  chtwse  its  own  Web 
conferencing  uxil  on  an  ad  hoc  basis  is 
losing  ground. 

One  reason  is  cost. 

At  around  S2(H)  per 
seal  per  month,  host¬ 
ed  Web  conferencing 
can  be  expensive. 

Another  reason  is 
technology.  'I*he  1120 
standard  used  by 
hosted  services 
(based  on  P2P  net¬ 
working.  and  good 
for  a  small  work- 
grimp)  doesn't  scale 
when  it  comes  to  oO'ering  rich  media. 

This  has  left  an  opening  for  compa¬ 
nies  such  as  Plea.santon.  Calif.-based 
i*ixion.  Rather  than  being  exclusively  a 
hosted  seiA'icc.  Pixion  software  oper¬ 
ates  behind  the  enterprise  firewall  on 
Windows  .servers  and  integrates  with 
your  LDAP  settings.  Pixion  claims  that 
its  server  can  accommodate  up  to 
4.000  unique  users  concurrently.  It 
U.SCS  a  capture-frame  technology  that's 
recognized  by  the  sen*er.  which  then 
di-scerns  who  is  to  get  which  informa¬ 
tion  or  connection.  In  esAcncc,  you 
have  a  smart,  secure  sen*er  delivering 
Web  conferencing  functions  at  a  cost 
of  $6,625  for  10  seals  per  year. 

That  compares  with  $24,000  for  an 
equivalent  hosted  ser>’ice. 

You'd  think  that  something  that 
much  cheaper  would  be  a  shoo-in.  But 
the  challenge  is  in  persuading  market¬ 
ing.  sales,  engineering  and  other  de¬ 
partments  to  give  up  parts  of  the  bud¬ 
get  allocated  to  their  own  Web  confer¬ 
encing  favorites.  That's  no  easy  task. 
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PATRICIA  KEEFE 


Demand  Executive  ROI 

A" 


T  LAST,  WE  ARE  STARTING  to  see  share¬ 
holders  with  backbone  and  more  than  a 
modicvim  of  common  sense.  Two  weeks 
go,  Hewlett-Packard  shareholders  passed 


a  nonbinding  recommend 
dation  asking  the  compa¬ 
ny’s  directors  to  obtain 
stockholder  approval  of 
large  executive  severance 
packages.  HFs  manage¬ 
ment,  which  had  lobbied 
hard  against  the  propos¬ 
al.  issued  a  terse  state¬ 
ment  saying  that  U  would 
“duly  consider"  the  rec¬ 
ommendation. 

Governing  bodies  tend 
to  ignore  nonbinding  ref- 
erendums,  so  the  shareholders  will 
need  the  backing  of  the  board.  But 
many  boards  of  directors  funaion  as 
little  more  than  rubber  stamps  for 
pay  increases  or  protections  sought 
by  the  management  team.  SEC  and 
accounting  reforms  are  supposed  to 
stup  these  boards  to  attention,  but 
even  among  the  spectacular  ruins  of 
companies  such  as  Tyco  Interna¬ 
tional.  Enron  and  Adelphia,  we  see 
their  boards  continuing  to  go  to  bat 
for  C-level  managers,  requesting  as¬ 
tronomical  salaries,  bonuses  and 
severance  packages  even  as  credi¬ 
tors  line  up  on  one  side  and  laid-ofT 
woricers  struggle  to  retain  their 
homes  on  the  other. 

Those  boards  and  some  bankrupt¬ 
cy  court  judges  may  have  taken 
leave  of  their  senses,  but  thankfully, 
investors  are  starting  to  regain 
theirs.  Bids  to  gain  control  over  ex¬ 
ecutive  compensation  have  either 
been  accepted  or  are  under  consid¬ 
eration  at  companies  such  as  Alcoa. 
Bank  of  America,  Citigroup,  General 
Electric.  Norfolk  Southern,  Tyco  and 
United  Technok^es.  ^^ous  in¬ 
vestor  groups,  including  The  Con¬ 
ference  Board,  the  Investor  Respon¬ 
sibility  Research  Center,  the  Pension 
Rights  Center  and  Institutional 
Shareholder  Services,  are  starting  to 
press  for  reform.  Even  Congress  is 


getting  warmed  up.  “It’s 
insulting  when  they  lay 
off  thousands  of  people 
and  then  pay  top  execu¬ 
tives  millions  of  dollars 
in  raises.”  said  an  out¬ 
raged  Sen.  [ohn  McCain 
(R.-Ariz.)  recently. 

He's  right  Executive 
pay  is  out  of  control. 

The  average  severance 
for  CEOs  at  the  coun¬ 
try’s  largest  companies 
during  2001  and  2002 
was  $16.5  million,  according  to  The 
Corporate  Library.  A  recent  analysis 
of  CEO  compensation  at  the  100 
largest  U3.  comparues  by  USA  To¬ 
day  and  the  Investor  Responsibility 
Research  Center  found  that  CEO 
salaries  and  bonuses  jumped  15%  in 
2002,  while  rank-and-file  woricers 
averaged  only  a  3.2%  gain.  By  some 
estimates,  CEOs  now  make  more 
than  450  times  what  the  average 
worker  earns. 

It  is  insulting  when  companies 
richly  reward  high-level  executives 
who  have  basically  been  fired  and 


then  begrudgingly  scrape  up  mini¬ 
mal  severance  for  laid-on*  workers. 

If  we  really  believe  that  much  of  a 
company’s  success  rides  on  the 
shoulders  of  the  CEO  and  his  team, 
then  (he  reverse  ought  to  play  out.  If 
the  company  stumbles,  then  the 
blame  should  fall  squarely  on  the 
executive  team.  Their  parachute 
strings  should  be  severed,  not  rein¬ 
forced  with  platinum. 

Why  should  you  care?  Because  ex¬ 
cessive  compensation  can  under¬ 
mine  the  fmancial  strength  of  the 
companies  you  work  for  and  with.  It 
can  wreak  havoc  with  service  levels 
and  woricer  morale.  What  kind  of 
message  does  it  send  when  your 
vendor  heaps  another  six-  or  seven- 
figure  bonus  on  an  already  richly 
compensated  executive  but  an¬ 
nounces  in  a  separate  press  release 
that,  to  cut  costs,  it  will  whack  off 
another  chunk  of  its  service  and 
support  division?  Or  perhaps  it  ex¬ 
pands  your  sales  rep’s  territory,  or 
charges  for  or  automates  a  service 
you  would  rather  it  didn’t. 

High  tech  —  and,  by  association. 
IT  —  has  been  hit  especially  hard 
over  the  pa.st  three  years.  At  a  time 
when  ROI  is  king  and  cost -cutting  is 
the  new  Zen,  we  should  demand  that 
these  values  extend  to  the  executive 
suite.  Leadership  starts  at  the  top.  I 
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Stop  the  Web 
Conferencing 
Cost  Clash 


WEB  CONFERENCING 
is  creating  a  clash 
that  pits  depart¬ 
mental  prerogatives  against 
corporate  cost  savings.  The 
departments  need  to  retreat. 


Defined  as  the  ability  to  share  docu¬ 
ments,  applications  and  even  desk¬ 
tops.  Web  confeiencing  is  a  service 
outside  the  corporation,  offered  by  the 
likes  of  WebEx,  Place  Ware  and  Rain- 
dance.  But  as  Web  conferencing  be¬ 
comes  a  general  bimness  necessity, 
the  argument  that  each  department 
should  be  able  to  choose  its  own  Web 
conferencing  tool  on  an  ad  hoc  basis  is 
losing  ground. 

One  reason  is  cost. 

At  around  $200  per 
seat  per  month,  host¬ 
ed  Web  conferencing 
can  be  expensive. 

Another  reason  is 
technology.  The  T120 
standard  used  by 
hosted  services 
(based  on  P2P  net¬ 
working.  and  good 
for  a  small  work¬ 
group)  doesn't  scale 
when  it  comes  to  offering  rich  media. 

This  has  left  an  opening  for  compa¬ 
nies  such  as  Pleasanton,  Calif.-based 
Pixion.  Rather  than  being  exclusively  a 
hosted  service,  Pixion  software  oper¬ 
ates  behind  the  enterprise  firewall  on 
Windows  servers  and  integrates  with 
your  LDAP  settings.  Pixion  claims  that 
its  server  can  accommodate  up  to 
4,000  unique  users  concurrently.  It 
uses  a  capture-frame  technology  that’s 
recognized  by  (he  server,  which  then 
discerns  who  is  to  get  which  informa¬ 
tion  or  connecUoa  In  essence,  you 
have  a  smart,  secure  server  delivering 
Web  conferencing  fimetions  at  a  cost 
of  $6,625  for  10  seats  per  year. 

That  compares  with  $24,000  for  an 
equivalent  hosted  service. 

You’d  think  that  something  that 
much  cheaper  would  be  a  shoo-in.  But 
the  challenge  U  in  persuading  market¬ 
ing.  sales,  engineering  and  other  de¬ 
partments  to  give  up  parts  of  the  bud¬ 
get  allocated  to  their  own  Web  confer- 
encu^  favorites.  That's  no  easy  task. 
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2003  iForce  Partner 
Excellence  Awards 


Harnessing  the  Power  of  the  Internet 
to  Drive  Business  Advantage 


Welcome  to  the  Sun 
Microsystems  2003  iForce"' 
Partner  Excellence  Awards, 
co-sponsored  by  Computerworld.  The 
awards  recognize  U.S.  iForce 
Partners  that  have  excelled  in  provid¬ 
ing  innovative,  customer-driven  solu¬ 
tions  and  services  in  areas  as  varied 
as  decision  support  systems,  supply 
chain  management,  product  develop¬ 
ment  and  communications. 

The  iForce  Initiative  is  the  collabo¬ 
ration  of  Sun  and  its  partners  working 
with  customers  as  a  community  to 
address  customer  business  issues. 
Through  the  creation,  development 
and  delivery  of  proven  solutions  that 


As  a  drug  research  company  that 
discovers  new  chemical 
scaffolds  and  high-quality 
leads  on  promising  new 
drugs,  Plexxikon  works  with 
massive  volumes  of  highly 
complex  data.  Recently, 
when  it  sought  a  highly  accessi¬ 
ble  and  interactive  system  that 
will  scale  for  years  to  come, 
Plexxikon  turned  to  iForce  Partner 
BASIS.  Inc..  Sun  Microsystems.  Inc.  and 
Sun  Professional  Services"*  for  a 
solution. 

Sun.  BASIS  and  Plexxikon 
worked  together  to  determine 
that  the  company  needed  a  grid 
computing  environment  that 
could  apply  the  resources  of  many 
networked  computers  to  a  single  prtA- 


can  be  implemented  in  less  time  and 
with  less  risk.  Sun  and  its  partners 
enable  customers  to  more  quickly 
realize  a  return  on  IT  investment. 

2003  marks  the  inaugural  year  of 
the  iForce  Partner  Excellence  Awards, 
and  we  were  impressed  by  both  the 
quantity  and  quality  of  the  entries. 
Our  independent  panel  of  judges  had 
quite  a  challenge  selecting  just  one 
winner  per  category  from  the  breadth 
and  depth  of  solutions  entered. 

We  are  proud  to  horror  the  winners 
of  the  2003  iForce  Partner  Excellence 
Awards.  To  learn  more  about  Sun's 
iForce  Partner  Program  and  offerings, 
visit  www.sun.com/iforce. 


lem  at  the  same  time.  The  resulting 
system  consists  of  four  tiers:  a  visual¬ 
izations  tier  of  powerful  work¬ 
stations;  the  grid  computing 
layer,  which  prioritizes 
resources  using  the  Sun 
Grid  Engine,  Enterprise 
Edition  software;  a  network 
services  tier:  and  a  database  serv¬ 
ices  tier  running  Oracle  8i. 

The  system  is  rtot  for  the  faint  of 
heart  -  but  BASIS  and  Sun 
Professional  Services  engi¬ 
neers  worked  tirelessly  to  com¬ 
plete  and  test  the  insullation 
ahead  of  schedule. 

The  results  are  impressive, 
Plexxikon  has  dramatically 
lowered  its  compute  time,  and  there¬ 
fore  costs.  For  example,  tasks  that 
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used  to  require  a  full  week  are  now 
accomplished  in  a  day.  It's  safe  to  say 
the  company  that  discovers  new 
drugs  is  glad  it  discovered  BASIS  and 
Sun  clustering. 

"We  required  a  platform  that  would 
accommodate  some  very  demanding 
computational  requirements  The  tech¬ 
nologies  coupled  with  the  expertiae  of 
Sun  consultants  and  BASIS  offered  a 
significant  comfort  level 

-  Dr  Michael  Milburn  Senior 
Vice-President.  Research.  Mexxikon 
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2003  iForce  Partner  Excellence  Awards 

Kirchman  Corporation!  Best  Business  Transformation 

The  protect  was  a  complete  success  We  ve  speeded  up  our  end  of-day  updates  by  attractive  that  Landrum  eliminated 

joSi.  That  saves  a  lot  of  labor  costs,  on  top  of  the  Siooooo  per-year  savings  were  its  third-party  disaster-recovery 

■ieewg  In  moinienance  cmrs  and  license  lees.  Tt,rougt,out  the  migration, 

-hm  Stock.  Senior  Vice  President  and  CIO.  Landrum  Company  Kirchman  and  Sun  experts  worked 

side-by-side  with  Landrums  IT  staff  to 
hen  Landrum  Company,  a  tion  based  on  Sun  Fire''' V88o  servers  implement  each  of  the  company's 

bank  holding  company,  eval-  that  allowed  Landrum  to  meet  its  four  banks  (in  several  states)  on  the 

uated  its  operating  expenses,  goals.  same  weekend 

executives  were  struck  by  the  continu-  In  )une.  Landrum  con-  The  Sun  Fire  V880  servers 

a!  increase  in  the  cost  of  operating  verted  its  data  processing  .  uchm.k  io.»o«AT.r.N  are  faster  than  the  old  main- 

software  The  bank  decided  to  seek  operation  to  one  Sun  Fire  frame,  tapes  are  a  memory 

alternatives,  V88o  server,  with  a  second  located  in  and  labor  savings  have  pleasantly  sur- 

Kirchman  Corporation,  a  Sun  an  affiliate  bank  for  disaster  recovery  prised  the  company  The  project  cer- 

iForce  Partner,  recommended  a  solu-  (the  price  point  of  the  servers  was  so  tainly  paid  dividends  for  Landrum. 

AAl  and  Dimension  Systems!  Best  iForce  Partner  collaboration 

as  well  as  easy  access- And  ^nd  maximum  reliability 

tike  many  publicly  funded  and  availability.  Working 

groups,  the  schools  faced  a  illuminating  student  <nformation  Within  all  timing,  budget 
budget  crunch  to  boot.  and  functional  parameters. 

Seattle  Public  Schools  initially  the  two  partners  were  able  to  stage, 

leaned  toward  an  NT  solution  in  an  install,  integrate  and  deploy  the  solu- 

effort  to  standardize  on  a  single  tech-  tion  along  with  Sun  Professional 

nology  platform-  But  two  Sun  Services. 

iForce  Partners  -  The  The  project  was  completed 

Administrative  Assistants  Ltd.  two  weeks  ahead  of  schedule 

(AAL)  and  Dimension  Systems  and  is  on  pace  for  its  full 

-teamed  up  to  design  a  Sun-  launch  in  the  fall.  AAL. 

Oracie-AAL-Dimension  Systems  Dimension  Systems  and  Sun 

solution  with  fast  response  time  have  earned  an  A+. 

Sybase,  Inc.!  Best  e-BusIness  Solution 

s  part  of  the  US.  Department  of  leff  Butler.  Assistant  Director  of  the  performance  of  the  V88o  servers 

Transportation,  the  Bureau  of  BTS'  Office  of  Statistical  Computing.  'oppressive.  IVe 

^  ^  .  .  .  ^  ^  have  a  simple,  manageable  environ 

Transportation  Statistics  (BTS)  led  the  team  that  tackled  the  chal-  ,rjenf  that  enables  IT  to  meet  ever 

provides  data,  analysis  and  consulting  lenge.  Butler  architected  a  business  changing  information  needs. 

services  to  myriad  federal  agencies,  intelligence  solution  based  on  Sybase  -  leff  Butler.  BTS 

universities,  the  media  and  the  public.  IQ  Multiplex  12.4.3  and  new  Sun  Fire 

Historically,  serving  so  many  con-  V880  servers  from  Sun  Microsystems  per  day  and  features  a  searchable 

stituencies  made  for  labo-  The  solution  delivered  the  index  of  over  100  databases;  selective 

rious.  time-consuming  |B  a  ®®se  of  use,  flexibility  and  download  capability,  which  lets  users 

processes.  But  by  develop-  .D/v0.fc»  scalability  that  were  download  data  using  any  database  or 

ing  a  Sybase  IQ  Multiplex-  demanded  by  the  BTS.  spreadsheet  software:  comprehensive 

powered  data  warehouse,  the  BTS  can  The  BTS  TranStats  business  intelli-  online  documentation;  and  interactive 
now  offer  its  customers  fast,  accurate.  gence  solution  is  an  unquallHed  sue-  analytical  tools.  At  BTS,  traffic  is  flow- 
reliable  access  to  data.  cess.  It  handles  over  15,000  Web  hits  ing  smoothly. 


"We  were  really  pleased  by  the  way  the 
partners  collaborated  on  the  configura¬ 
tion  of  Sun  computers  for  our  student 
»n/ormofion  system  ensuring  that  when 
the  bell  rings  and  all  teachers  take 
attendance  simullaneousiv.  response 
time  will  be  fast.  ' 

-  Marfone  Mills.  Technical  Pro/ect 
Manager.  Seattle  I'uhhc  Schools 

When  the  public  school  system 
in  Seattle  decided  to  imple¬ 
ment  a  Student  Information 
System,  it  demanded  a  state-of-the-art 
system  with  top-notch  functionality 
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WorkSCape,  Inc.:  Best  Sun’  one  Enterprise  Software  Integration 


AS  one  of  the  worlds  largest  cor¬ 
porations.  with  hundreds  of 
locations  world- 
wide.  General  Motors 
faced  a  challenge  when  it  wjV 
sought  to  create  a  portal 
for  employees.  The  portal  had  to 
streamline  human  resources  func¬ 
tions.  provide  24/7  access,  promote  a 
"One  Company"  culture  and  foster  a 
sense  of  corporate  community. 

The  solution:  mySocrates,  built  on 
Workscapes  Employee.com  portal  run- 
ning  on  the  Sun  Microsystems 


^^workscapB 


Solaris'"  Operating  System  and  Sun'" 
Open  Net  Environment  {Sun  ONE) 
Portal  Server  software. 
This  solution  lets  GM 
-r-n-i-firwk  portal  con¬ 

tent  for  individual  users’ 
needs,  offering  each  user  only  the  con¬ 
tent.  services  and  applications  that  are 
appropriate  for  him  or  her. 

Hosted  by  Workscape  and  deployed 
in  only  12  months.  mySocrates  is 
already  delivering  high  returns  on  the 
investment:  it  provides  an3rtime-any- 
where  access  for  GMs  190, ooo-^  North 


American  workers.  The  hosted  solu¬ 
tion  eliminated  major  infrastructure, 
software  and  labor  investments,  and 
has  reduced  mailing  costs  while  pro¬ 
viding  a  high  level  of  self-service  in 
the  HR  arena. 

mySocrates  gives  employees  the  Pcxi 
hiUty  and  technology  tools  to  lugyle 
demands  of  work  and  home,  along  wif/i 
applications  that  improve  productivity 
white  reducing  infrastructure  costs 

—  Katy  Barclay.  Vice  Presideni  of 
Global  Human  Resources 
General  Motors  Corporation 


inSolutions:  Best  Sun'  ONE  Collaboration  with  a  Third-Party  Software  Provider 


Nielsen  Media  Research,  the 
most  trusted  company  of  its 
kind,  has  created  many  identi¬ 
ty  management  and  security  services 
for  its  worldwide  users.  Previous 
efforts  focused  on  individual  applica¬ 
tions.  They  were  successful,  but  none 
delivered  a  comprehensive, 
single  solution. 

When  Nielsen  Media  — 
Research  approached  iForce  •■■wW 
Partner  inSolutions.  that 
company  took  on  the  challenge  and 
implemented  an  enterprise  security 


This  solution  lets  us  handle  special  identity  management  issues  that  arc  unigue  to 
our  business  as  an  information  service  company  for  the  U'  media  industry 

—Kim  Ross,  CIO  Nie/sen  .Media  Research 


i’revious  gateway  based  on  Sun  ONE.  Sun 

I  applica-  Microsystems  architectural  solution 

jut  none  for  Web  services. 

inSolutions  took  time  to 
learn  the  intricacies  of  the 
clients  business  model 

II  rtjTjlMX WiWW  before addressii^ technical 

issues.  At  the  core  of  the 
nge  and  solution  is  a  Sun  ONE  Directory  Server 
security  providing  directory-based  authentica¬ 


tion  and  authorizaticNi.  Overall,  the 
system  exceeds  Nielsen  Media 
Research's  expectations,  serving  as 
both  a  security  platform  and  an  inte¬ 
gration  hub  for  other  applications. 

Nielsen  Media  Research  projects 
that  the  project,  currently  under 
development,  can  save  it  $4.9  million. 
No  wonder  inSolutions  and  Sun  have 
earned  great  ratings. 


Dynamic  Systems:  Best  storage  consolidation  Solution 


Streamlining  and  enhancing  a 
storage  and  server  environment 
is  a  challenge.  So  is  creating  a 
viable  disaster  recovery  plan.  Doing 
both  simultaneously,  when  budget  is 
a  factor,  borders  on  the  impossible. 
But  Puget  Sound  Naval  Shipyard 
(PSNS)  recently  pulled  off  this  impres- 

■'Dynamic  Systems,  working  closely  with 
our  staff  and  engineers,  upgraded  our 
Sun  Microsystems  platforms  to  meet  all 
our  ofj/ecfives  at  a  cost  savings  of  over 
$1.2  million  ' 

—  Vickie  Dill.  Project  Manager.  PSSS 


sive  feat  with  help  from 
Sun  Microsystems  and  Sun  ^ 

iForce  Partner  Dynamic  * 

Systems.  Inc. 

Facing  a  US.  Navy  man- 
date  to  create  a  disaster 
recovery  plan.  PSNS  called  in  Dynamic 
Systems  for  an  IT  needs  assessment. 
The  company  was  able  to  show  PSNS 
how  it  could  achieve  that  prepared¬ 
ness  and  save  $1.2  million. 

Dynamic  Systems  identified  a  3- 
year  lease  for  both  hardware  and  serv¬ 
ice  that  allowed  the  shipyard  to  use 


its  savings  for  additional 
Sun  hardware  and  soft- 
ware.  The  solution  also 
positions  PSNS  well  for  the 
'.'.."illLlIl'iL'’  future,  as  the  Sun 
StorEdge  "  9960  system 
>ynamic  will  handle  its  future  storage  growth, 
rssment.  Results  have  been  outstanding. 
>w  PSNS  PSNS  has  its  disaster  recovery  plan  - 
repared-  and  a  60%  perfonnance  gain.  The 
shipyard  is  rww  considered  a  model 
led  a  3-  for  naval  shipyards  contemplating  dis- 
ind  serv-  aster  plans  or  storage  omsolidations. 
1  to  use  PSNS'  ship  has  truly  come  in. 
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FusionStorm:  Best  SunTone  Certified  Service 


A  leading  provider  of  the  infra-  FusionStorm  learned  about  its  busi- 

structure  global  financial  insti-  ness  model  and  needs  before  suggest- 

tutions  rely  on.  CashEdge  ing  a  solution  for  CashEdge's  Sun 

recently  sought  to  boost  its  customer  Microsystems  servers, 

support  ratings  and  generate  ROl  for  lason  Braatz,  Vice-President  of 
both  the  company  and  its  customers.  Operations  at  CashEdge.  says 

And  that  ROI  had  to  be  based  on  true  FusionStorm's  SunTone  Certification 

business  metrics.  "makes  it  clear  to  our  customers  that 

CashEdge  found  we  adhere  to  the 

the  right  solution  in  FUSlOnStOrm  standards." 

Remote  IT  Managed  . . .  CashEdge  recouped 

Servicesfrom  its  investment  in  only 

FusionStorm,  a  Sun  iForce  Partner.  three  months.  It  also  cut  availability 

CashEdge  was  impressed  by  the  way  problems  20%.  leading  to  a  30%  boost 


"For  us.  Sun  Aficrosys/ems  and 
FusionStorm  have  been  the  difference 
between  being  a  successful  business  or 
not  -  affecting  everything  from  lower 
ing  TCO  to  reducing  time  to  market.  By 
maintaining  our  core  competencies  in- 
house  and  outsourcing  functions  that 
others  can  do  more  efficiently,  we  can 
optimize  value  " 

—lason  Braatz.  Vice-President  of 
Operations.  CashEdge 

in  customer  satisfaction. 

Clearly,  the  Sun-FusionStorm  solu¬ 
tion  gave  CashEdge  a  competitive 
edge. 


Innovative  Systems  Design,  Inc.:  Top  Sun  Services  consulting  Partner 


Alongtime  Sun  iForce  Partner. 
Innovative  Systems  Design.  Inc 
specializes  in  architecting, 
designing,  deploying  and  monitoring 
end-to-end  high-availability  solutions. 
Its  mission;  help  clients  manage  their 
infrastructure  more  effectively  to 
avoid  unnecessary  expenditures. 

While  Innovative  Systems  Design 
uses  software  and  services  from  many 


partners,  its  sole  hardware  partner  is  developed  its  own  powerful  software 
Sun  Microsystems.  This  has  created  a  tools.  For  example,  ITVerify  improves 
relationship  that  IT  infrastructure 

brings  value  to  «  ...  stability  by  predict- 

clients,  as  the  com-  miKA.iUvt  systemsdesigamc 


pany  is  intimately 
familiar  with  Sun’s  hardware  plat¬ 
forms  —  and  knows  how  to  build  solu¬ 
tions  around  them. 

Innovative  Systems  Design  has  also 


Working  together.  Innovative  Systems  and  Sun  have  been  able  to  produce  increased 
mutual  financial  benefits  and  high-quality  solutions  for  our  customers  Our  relation¬ 
ship  has  been  a  model  for  success.  " 

-Ion  Caputo.  Vice-President.  Americas  Professional  Services,  Sun  Services 


ages.  The  company  ’s 
platform  technologies  in  messaging, 
mobility,  storage  and  software  help 
clients  that  need  to  turn  data  into 
information. 

Innovative  ^sterns  Design’s  client 
services  organization  offers  integra¬ 
tion  and  deployment  support,  ensur¬ 
ing  complete  satisfaction. 


Forsythe  Solutions  Group,  Inc.:  Top  Sun  Services  support  Partner 


Forsythe  Solutions  Group,  Inc.  is  a 
leading  provider  of  technology 
infrastructure  solutions. 
Forsythe  helps  companies  nationwide, 
many  in  the  Fortune  1,000.  build  cost- 
effective  IT  infrastructure. 

The  solutions  Forsythe  provides 
incorpc^te  best-of-breed  technology 
from  Forsythe's  strong  network  of 
industry-leading 
provider  partners,  ^  R  s 
including  Sun 
Microsystems.  As  a  Sun  iForce  Partner. 
Forsythe  is  a  certified  specialist  in 


"Sutcess/u/  iForce  Partners  like  Forsythe  meet  the  complete  needs  of  their  customers 
by  providing  not  only  the  hardware  and  software,  but  also  the  integration,  leasing 
and  more  important,  services.  Service  delivery  provides  the  margins  necessary  10 
remain  competitive  in  this  marketplace  and  also  strengthens  the  bond  between  cus¬ 
tomer  and  partner,  forming  strategic  relationships  that  last  well  beyond  the  hard¬ 
ware  sale  Forsythe  understands  how  to  maximize  this  model." 

-  Darlene  Yaplee.  Wee-President,  Services  Sales.  Sun  Microsystems 


available  and  recoverable  Sun  solu¬ 
tions.  including  Sun  Fire  enterprise 
servers.  As  an  added 
V  X  M  E  value  to  customers. 

>oLui<oN<i  Forsythe's  dedicated 

Sun  maintenance  team  handles  the 
administration  of  clients'  current  Sun 


contracts,  including  consolidation, 
renewal  and  addition  of  equipment  to 
current  contraas. 

In  2002,  Forsythe  achieved  its  thir¬ 
ty-second  consecutive  year  of  prof¬ 
itability  with  revenues  estimated  at 
$627  million. 
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WhUe  I'm  not  sure  Web  conferenc¬ 
ing  should  become  a  C-level  manage¬ 
ment  decision,  it  certainly  needs  some 
attention  from  IT  managers. 

If  document-  and  application-shar¬ 
ing.  Web  pages,  live  annotation  and 
whiteboarding  are  routine  tools  for 
your  company's  employees,  then  it's 
time  to  move  Web  conferencing  deci¬ 
sions  to  a  higher  level  That  means 
confronting  corporate  nefdoins  that 
stiiJ  insist  on  buying  IT  a  la  carte. 

Of  course,  other  Web  conferencing 
services  have  value.  (WebEx  is  great 
for  one-to-one  sessions,  {ava-based 
PlaceWare  is  Ane  for  one-to-many,  and 
Raindance  has  supporters  com¬ 
monly  exchange  aitd  work  on  code.) 
And  small  or  midsize  companies  may 
not  see  significant  cost  savings  in 
adopting  Pizion  or  its  competitors. 

But  for  the  chief  financid  officer 
hoping  to  cut  costs  and  for  the  CIO  ea¬ 
ger  to  promote  company  standardiza¬ 
tion,  it’s  time  to  turn  Web  conferenc¬ 
ing  over  to  the  enterprise.  9 

DAN  GILLMOR 

Lawmakers 

Outlaw 

Firewalls 

SINCE  MARCH  31,  most 
corporate  networks 
in  Michigan  have  been 
using  illegal  technology.  No,  it 
wasn’t  an  early  April  Fools’ 
Day  joke  pulled  offby  the 
Michigan  Legislature. 

Thanks  to  the  movie  industry’s  par¬ 
anoia  about  copyright  infringement  ^ 
plus  a  clueless  group  of  lawmakers 
and  an  inattentive  IT  community  — 
amendments  to  a  state  law  called  Act 
328  have  created  a  mind-boggling  slew 
of  limitations  on  what  users  of  tech¬ 
nology  may  do  with  what  they  own. 

Here's  fust  one  example:  Users  may 
not  conceal  the  origin  or  destination 
of  their  communications.  Consider  the 
implications. 

"If  you  send  or  receive  your  e-mail 
via  an  encrypted  connection,  you’re  in 
violation,  because  the  Tb'  and  'From' 
lines  of  the  e-mails  are  concealed  from 
your  ISP  by  encryption."  observes 
Princeton  con^uter  scientist  Ed  Fel- 
ten.  who  broke  the  news  and  is  keep¬ 
ing  close  track  of  the  situation  on  Ids 
Web  rite.  www..^eedom-h>-rin)cer.com. 
‘Worse  yet."  he  adds.  "Networic  Ad¬ 


dress  Translation  (NAT),  a 
technolt^  widely  used  for 
enterprise  security,  oper¬ 
ates  by  translating  the 
'From'  and  'To'  Helds  of  In¬ 
ternet  packets,  thereby  con¬ 
cealing  the  source  or  desti¬ 
nation  of  each  packet  and 
hence  violating  these  bills. 

Most  security  'Hrewalls*  use 
NAT.  so  if  you  use  a  fire- 
waU,  you're  in  violation." 

And  Michigan  isn’t  alone 
in  this  insanity.  Similar  leg¬ 
islation  has  been  enacted  m 
Delaware,  lUinois,  Maryland  and  Vir¬ 
ginia,  according  to  the  "Washington 
Internet  Daily"  newsletter.  Measures 
are  pending  in  several  other  states,  in¬ 
cluding  Massachusetts  and  Texas. 

How  could  this  happen?  Credit  —  or 
blame  —  a  relentless  and  reckless 
copyright  cartel  that  bolds  copyright 
enforcement  above  all  else.  During  the  | 
past  several  years,  the  Motion  Picture 
Association  of  America  (MPAA)  has 
been  quietly  lobbying  in  various  states 
for  th^  laws,  now  being  dubbed  "Su- 


per-DMCAs"  —  a  refer¬ 
ence  to  the  federal  Digital 
Millennium  Copyright  Act. 
During  this  time,  people 
fighting  for  users'  rights 
have  focused  almost  en¬ 
tirely  on  the  federal  scene. 

An  MPAA  vice  president 
told  CNefs  Declan  McCui- 
Ugh  that  the  law  is  only 
"an  extension  of  what 
we've  done  for  years  with 
cable  television  and  phone 
services  at  the  state  level 
It’s  nothing  new.  For  the 
life  of  me,  I  don't  see  why  anybody 
would  object  to  that"  Gee,  maybe 
somebody  udio  wants  to  protect  the 
security  of  his  own  communications? 

Credit  the  entertainment  companies 
with  cleverness,  but  they've  gone  too 
far.  as  usual  Now  watch  as  the  states 
themselves  make  this  rittiation  worse. 
State  Uws  are  enforced  by  state  prose¬ 
cutors,  who  are  generally  even  more 
clueless  on  technology  matters  than 
federal  law  enforcement  folks. 

No  one  is  suggesting  that  we  cn- 
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courage  infringement.  But  the  MPAA's 
"model  legislation"  (And  if  on  Felten's 
site)  essentially  bans  even  technology 
that  might  be  used  for  infringing  pur¬ 
poses.  as  well  as  information  about 
such  technology. 

Whoops.  There  goes  security,  and 
research  into  security,  too. 

Now  that  Felten  and  others  have 
sounded  a  warning,  this  bandwagon  is 
slowing.  Colorado  postponed  a  vote 
for  a  week  (it's  pending  as  1  write 
this).  Massachusetts  legislators  seem 
to  be  having  second  thoughts  as  well 

FT  must  get  invoiveil  Now.  Find  out 
what  the  status  of  the  Super-DMCA  is 
in  your  state.  If  it  has  already  passed, 
tell  your  legislators  that  they  should 
undo  the  damage.  If  it's  pending, 
scream  bloody  murder.  If  it  hasn't 
been  introduced,  keep  your  eyes  open 
~  because  the  eniertainmcni  cartel 
never  steeps,  even  tf  you  do.  I 


WMITMIPIIIM? 


(UoracmfffHslsNidMstoaichmsdp 
ansnm  are  on  Otf  Viteb  ale. 


Stop  Protecting  Turf  and  Share  Info 

I 


AMS  WIIM  (he  stalBinnK  in  the 

article  "Gartner:  Change  Manage- 
ment  Neaded  Before  Raal-Tine 
Data  Can  Row' [QiackUik 37350] 
that  busmess  leaders  lequre  near 
reaf-Mne  cnticai  and  financial  data 
to  ad|ud  to  changing  business 
needs.  I  also  agree  that  beconaig  a 
reaHne  enterpnse  wi  requn 
business  leaders  lo  cede  control  of 
custoroerdalaandolherinlorTna- 
Uonandshareiliwlhothermert- 
agers  and  execub^  But  (Partner 
analyst  Mall  Hotte’s  statement  that 
"programmers  like  to  bukt  (hey 
don't  frke  to  reuse*  ts  abainl.  To  add 
that  IT  managers  wl  have  to  be¬ 
come  stricter  about  enforong  the 
reuse  model  and  that  programmers 
whodon'tcornplyrnusibe'ifiso' 
phned.  beaten  or  firecT  is  preposter¬ 
ous.  So  I's  the  programmers*  fauW 
reuse  code  every  day.  but  we 
can  reuse  code  only  if  we  know  V 
exists. 

How  about  this  for  a  suggestion: 
Rit  the  blame  where  it  belongs,  on 
the  busineGS  leaders.  They  should 
lei  thev  business  units  that  they  ex¬ 
pect  toem  to  work  together  arid 
share  their  tiri.  inslead  of  trying  to 
protect  V.  They  should  also  iwlle 
developers  to  real  busawss  meet¬ 


ings  so  that  (hey  can  learn  the  busi¬ 
ness  processes  and  how  they  affect 
odw  groups.  O  they  can  take  the 
easwr  mule  and  hire  an  analyst 
wi  rwaste  thousands  of  dolars  on 
soma  useless  tnpe.  Now.  who 
should  be  beaten? 

MkaOeanpa 

Sq^wurv  ertginecr.  PirtstHOgh, 
mike^gen^iecom 


Get  Up  to  Date 

I  NOTICED  that  the  front  page  of 
the  March  24  issue  features  a  pic¬ 
ture  of  an  old  srif-propeled 
howdzar.  Thai's  a  Me  Be  puthng  a 
picture  of  an  8068  on  you  frotd 
cover.  Ifs  old  news.  The  U.S.  mi- 
tary  doesn't  use  B-in  cannons  any¬ 
more.  They  Mere  replaced  by  the 
Palarht  tBmm  seH-piupeled  gun. 
Please  update  your  MoTTnabon. 
OanDraaa 

Network  adirdiustrator, 
Garrisonvilie,  Va. 


EasyRoNiack 

TgPOMMniT  in  the  story  "Get- 
tingStirtedWilhLna’lQuick- 
Unk  36271]  that  Red  Hat  Fteage 
Manager  (RPM)  dDesrtt  support 


rolback  reeds  jomedarflicafein. 
Red  Hat  Update  Manager  may  not 
be  able  to.  but  I  have  on  occasion 
had  to  lemsial  older  packages  be¬ 
cause  of  Bsues  In  new  packages, 
and  the  RPM  tools  are  more  than 
capable  of  remstaingoidetver- 
store  if  the  need  arees.  Because 
updates  are  (ksinbuled  as  part  of  an 
enbreiy  new  package,  foling  bach  to 
the  prevtous  versxxT  s  easy. 
RDddClarfcion 
Sqfovorr  devdoper, 

BtueArii.  JtingMMXKt  East. 
Victoria  Austroiia 
rDdd@M«4AshbfueAr:fta)m.ou 


Real  Unempteyineirt 

AOKIT  HAMT  OF  US  n  IT  have 
experiencalhatsaystheunetR- 
ploynwnl  rate  in  the  lieid  is  ctoser  to 
20%  than  the  ofkcal  nahonal  aver¬ 
age  of  all  unemptoymenl  cunenify 
5.6%. 

Into  the  wide  gap  between  20% 
and  5.6%  fais  toe  question  of  the 
H-C  program:  By  wtel  morabty. 
ethics  or  nabonal  pnorttes  c«T  our 
govertnentpossitalyNStifynpori- 
ing  hundreds  of  thousands  of  H-C 
visa  workars  tor  jobs  pmtousiy  held 
by  hundreds  of  thousands  of  IT- 
emenenced.  currentfy  imernpioyBd 
dkzens  of  this  coirtry?  Federal  em- 


ptoymentliguresoomehtimane' 
Itorial  phone  pal  toat  s  spread  too 
Ihm  (over  al  occupebons  and  the 
entve  country)  to  capture  data  tor 
specific  occupabonsw  such  as  IT.  I 
understand  that  the  pd  also  msses 
many  tong-term  unemployed.  dB- 
coutaged  searchers,  tooee  who 
have  been  forced  from  toe  occupa¬ 
tion  by  lack  of  work  arvl  necessky. 
andtotsevtoohavetaken'dBEiMra- 
tion  lobs."  I  strongly  suggest  that  toe 
lop  rr  pubicalians  commeston  toer 
ownstahsbcalyvBMpololtfiem- 
ptoyment  among  compiAer  and  IT 
workers,  ri  bet  my  last  ya«'s  sMary 
(ha-ha)  toat  toe  resuRs  wi  gam  e 
meda  coi(i  for  toe  puMshets. 
JaluiC.llMler 
Cambridge.  Mass. 

COMPUTOnrOIILO  wetoornes 
comments  from  Us  readers.  Letters 
wi  be  ediBd  tor  bievitv  and  danty. 
They  should  be  addressed  to  datme 
Edde.  toners  eddor.  Computorworto. 
PO  Bn  9m.  5()0  OUCormeclicul 
Frarrxngham.  Mass.  01701. 

Fax:  (506)  879^843 
E-mai  lettersft»mpiitBrworid.com. 
inctode  an  adikess  and  phone  num¬ 
ber  lor  snmedate  verdicabon 


►  MorehMnanihe»andoa« 
topis  Mort  our  ale 


The  business  intelligence 
test  that  our  competitors 
don’t  want  you  to  take. 

1.  Want  a  Free  Buyers  Guide? 


2.  Want  a  Free  Test  Drive? 


3.  Want  a  Guarantee? 


For  more  information  on  the  NEW  Brio  Performance 
Suite  8  go  to  www.brio.com  or  call  1-877-289-2746. 


(dBm 


The  Business  Perform.'ince  Software  Company 


WMWII 


DATA  MANAGEHENT 


04.14.03 


Too  Much  ofa 
Good  Thing? 

Real-time  data  feeds  are  just  an 
added  expense  if  data  quality  is 
poor  or  the  oiganlzation  is  un¬ 
able  to  analyze  and  act  on  the 
incoming  information.  Page  38 


EDITOR’S  NOTE 

WHAT  WOULD  HAPPEN  if  you  were  to  unleash  a 
data  mining  tool  on  the  contents  of  this  special 
report  on  business  intelligence?  Here  are  some 
of  the  gems  it  might  uncover 

IBasatocMwabcwtimplamenUiiUrwH^ 

IMS*  inMIgance.  It  sounds  great  in  the 
boardroom,  but  pick  the  mission-critical 
decisions  that  actually  need  split-second 
data  feeds.  Real-tiine  data  isn’t  a  constitutional 
right  or  an  across-the-board  necessity.  Besides, 
if  the  data  quality  is  bad,  real-time  data  just 
means  managers  can  make  bad  decisions  faster. 

2  Enfora*  muMiiM  aeons  controb  far  your 
hurinsn  Infalninr  a  data.  This  is  a  badly 
neglected  area  of  security,  yet  business- 
intelligence  data  is  the  company's  most 
valuable  asset.  What  could  be  more  important 
than  the  list  of  your  most  profitable  customers? 
And  what  happens  if  that  list  falls  into  the 
hands  of  your  archrival? 

ExpfarsIhaworidof'^sddfasanatytiGs,” 


U  what  customars  wl  do  naxL  But,  again, 

you'll  need  high-quality  data,  or  the  pre¬ 
dictions  won’t  be  any  good. 

4081a  mMng  can  pradues  surprishiB  -  and 
sunNWngfy  vaknhfa  -■  randfa.  Sometimes 
you  find  out  that  old  assumptions  about 
your  business  are  wrong.  Sometimes 
you  find  out  what  customers  really  want  and 
what's  really  profitable.  I’m  amazed  that  so 
many  executives  run  huge  companies  by  “gut 
feelings,"  when  the  facts  they  need  to  manage 
intelligently  are  buried  in  data  warehouses.  I 


Mitch  Betts  is  director  o/Computerworld’s 
Knowledge  Centers.  He  can  be  contacted  at 
mitch_betts@compiaerworld.com. 
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More  features  and  resources  on  Ms  topic 

OQatehLMMOO 

wwwxorepalanrrertdxofii 


The  Forecast  Is  Clear 

Predictive  analytics  use  data  minii^  and  tools 
like  regression  and  neural  networks  to  predict 
customer  behavior.  BankFinancial  Corp.’s 
William  Coimerty  (at  left)  is  using  this  technol¬ 
ogy  to  hit  customers  and  prospects  with  more 
accurately  ta^eted  promotions.  Page  31 
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Mining 
For  Gems 

Business-intelligence  tools  can 
uncover  hidden  truths  about  your 
customers  and  your  business. 


UWIIUINLI  i^Rms 


KIIIIWIED6E  CENTER  DATA  MANASEMENT 


w.compuierworld.com 


WIKwnH.hk>'M  is  commonly  known  as 
the  father  of  data  warehousing.  WTiiie 
speaking  with  Frank  Hayes,  Inmon 
recalled  the  development  g/ the  data 
warehouse  idea,  starting  with  his  I9SS 
Computerworld  article,  "Whaf  Price 
Relafional?" 

g  EARS  AGO.  the  rage  was  rela- 
tional  technolc^,  OB2  and 
VV  Oracle.  And  in  healthy  skepti- 
■  cism.  I  wrote  a  couple  of  art)- 
H  cles  saying  that  while  rela¬ 
tional  technology  certainly  had  merits, 
it  simply  wasn't  fulfilling  everything 
that  was  being  ascribed  to  it. 

“I  got  hate  mail  —  people  said  1 
should  never  be  allowed  to  speak  in 
public,  that  I  was  setting  our  industry 
back  25  years.  But  I  learned  from  that 
to  ask  the  question.  *If  relational  tech- 
nok^  isn't  the  answer,  then  what  is?' 
And  based  on  the  premise  that  you 
need  to  have  integrated,  historical, 
easy-to-access  information,  that  was 
the  genesis  of  data  warehousing. 

"From  that.  I  started  to  build  data 
warehouses.  My  day  iob  was  working 
at  American  Management  Systems,  so 
1  was  able  to  try  some  of  toy  theories 
ouL  Some  of  the  early  data  warehouses 
we  built  were  very  novel  and  very  in 
novative.  and  1  know  I  learned  a  lot. 

‘The  first  issue  that  hit  me  like  a 
two-by-four  was  the  fact  that  integral 
ing  data  from  legacy  sources  is  a  very 
nontrivial  thing.  In  the  beginning,  we 
thought,  'Well  you've  got  this  source 
of  data  over  here:  you  just  write  a  pro¬ 
gram  and  you  brii^  the  data  forward 
into  this  data  warehouse.*  I’ll  never  for 
get  saying.  'Gee,  what's  so  hard  about 
this?*  Today,  there’s  a  whole  industry 
called  ETL  [extract,  transform  and 


The  second  thing  we  learned  was 


1981:  Charles 
Bachman  M  General 
Electric  develops  the 
first  database  manage¬ 
ment  system.  IDS. 


The  Story 
SoFar 

A  first-person  account  finm 
the  first  person  to  develop  the 
data  warehouse  concept 


that  the  volumes  of  data  that  aggregate 
inside  the  data  warehouse  surpassed 
anything  that’s  ever  been  seen  in  the  i 
world  of  transaction  processing. 

"A  third  thing  is  something  that  the 
world  is  still  stroking  with:  How  do 
you  cost-jusdfy  a  data  warehouse? 

"I  wrote  the  book  [Buildirig  the  Data 


Warehouse]  in  1989.  Then,  all  of  a  sud-  erthii^t 
den.  people  I’d  never  heard  of  started  terabytes 
calling  me  and  asking  questions.  I  do  data  n 

started  to  work  with  Clau* _ 

d^a^off  SueOs,erfelt  HSHRY  lESSON 

Chuck  KeUey.  some  of  the 

eariy  pioneers,  dome  semi-  rarooemWbiwiWte«ine 

oars  and  conferences  and  ^  28502 

consulting  and  wwwxsmputarviorldxoffl 

building  data  - - 

warehouses.  It  began  to  trend  is  1< 
take  on  a  life  of  its  own.  umesofd 

T  was  surprised  about  even  beei 

the  industrial  usage  of  it.  "After  $ 

The  first  data  warehouses  material  1 

I  did  were  at  PacTel  Cellu-  housing  i 

hr.  Aetna  Casualty  and  Govemm 

Bhie  Cross/Blue  Shield  of  extremely 

Michigan,  so  the  early  data  lot  of  real 

warehouses  were  in  the  tion  in  thi 

telephone  and  insurance  ing  to  tall 

enviromnents.  I  never  ment  agei 

thought  that  manu&ctur- 
ing,  transportation,  retail¬ 
ing.  government  —  I  never 


1:  Ted  Codd  invents  the  1983;  Wfcm  H.  hnwn 
ral  database.  begins  work  on  data  warehousing 

- 1 -  conc8pls.t 


first  desotes  the 
concept  of  decnm- 
support  systems. -e 


1870:  Express,  a  multi- 
dknensional  analytic 
processing  tool  Iw  time¬ 
sharing  systems, 
becomes  availabte. 


1B7B:WorkbeginsontheMan- 
^jement  Infonnaton  and  Deci¬ 
sion  Support  system,  an  early 
executive  information  system,  at 
LncKheed*6eorgia  Ca 


1985.  Procter  &  Gam 
Ue  uses  the  first  busi¬ 
ness-intelligence  system 
to  analyze  data  horn 
checkout-counts  scanners. 


_ 


1989;  Gartner  analyst 
Howard  Dresner  coins  the 


thought  data  warehouses  would  be  as 
applicable  to  those  environments  as 
they  are. 

"It  also  surprised  me  that  [the]  data 
warehouse  forms  a  foundation  for  all 
kinds  of  analytical  processing.  We've 
actually  had  analytics  around  for  a 
while:  the  chum  analysis  the  telephone 
company  does,  the  elasticity  analysis 
that  retailers  da  But  we’re  just  now 
starting  to  see  the  vendors  make  things 
available  for  widespread  usage.  Sagent. 
ProClarity.  SAP,  PeopleSoft,  Cognos 
and  Business  Objects  all  have  their 
own  flavors  of  analytical  applications, 
and  I  think  that’s  one  of  the  futures  for 
data  warehousing. 

"Another  major  issue  is  that  the  size 
of  the  warehouses  is  drastically  chang¬ 
ing  things.  It’s  one  thing  to  build  a 
warehouse  of  10GB  or  20GB;  it’s  anoth¬ 
er  thii^  to  build  a  data  warehouse  of 
terabytes’  worth  of  data.  How  do  you 
do  data  management  for  supersize 

_  warehouses?  An  index  of 

3SINI  100TB  of  data  may  take 

three  or  four  months  to 
ihKixyofdata  .  „  , 

(AM  wine  bmld.  How  long  is  «  gomg 
1502  to  take  to  load  the  data?  A 

MrUxoffl  week?  A  month?  Six 

months?  The  next  major 
trend  is  learning  bow  to  cope  with  vol¬ 
umes  of  data  the  likes  of  which  haven't 
even  been  imagined  by  most  people. 

"After  Sept  U.  I  began  to  adapt  the 
materia]  I  had  written  for  data  ware¬ 
housing  into  something  we  call  the 
Government  Information  Factory.  Fm 
extremely  excited  about  it  There  is  a 
lot  of  realty  novel  and  useful  informa¬ 
tion  in  there,  and  we're  just  now  start¬ 
ing  to  talk  with  and  work  with  govern¬ 
ment  agencies.  So  that’s  the  direction 
Fro  off  on." 

And  now,  on  with  the 
story.  ...  I 


1991:  Inmon  publishes  a 
practical  houHo  guide. 
BuikSng  the  Data  Ware¬ 
house. 


ENSURING  IT  PRIORITIES  MATCH  CORPORATE  OBJECTIVES. 


^pacificedsre  PACIFIC  EDGE 

RAISES  THE  BAR  ON 
PORTFOLIO  MANAGEMENT 


Emphasizes  the  enterprise,  helps  businesses  maximize  return  on  IT  investments 


INVESTMENT  DECISION  MAKING 


Taking 
( x)ntrol 


SPECIAL 

REPORT 


In  the  current  dully  economic 
dimate,  IT  is  more  dian  ever 
having  to  prove  hs  value  in 
business  terms.  Most  organiza¬ 
tions  have  more  IT  project 
requests  and  wish-lists  than 
they  have  resources  to 
complete,  so  the  process  of 
making  choices  has  become 
increasingly  important  In  this 
eovironmott,  die  ccmcept  of 
Portfolio  Management  has 
come  to  the  forefront  as  a 
means  ot  mak¬ 
ing  informed 
decisions  and 
ensuring  maxi¬ 
mum  return  on 
IT  investments. 

As  a  result. 
Portfolio 
Managonent  has  evolved  from 
a  somewhat  academic  disd- 
fdine  project  analysis  and 
comparison,  to  a  pnctical 
technique  for  aligning  IT 
investments  with  overall  busi¬ 
ness  objectives.  And  given  the 
ical-wmld  return  on  invest¬ 
ment  Portfolio  Management 
has  been  drawn  to  deliver,  the 
appcoadi  is  rapidly  gaining 
acceptance  in  executive  offices 
and  even  boardrooms. 
Analysts  such  as  META  Group 
are  of  theopinioQ  that  *v<hen 
oonadously  pursued,  it  pro¬ 
vides  the  emerprise  (IT  organ- 
satioci  and  lines  of  business) 
a  discipliDed  framework  to 
leverage  IT  management 


processes  and  IT  asset 
imtestment  and  deployment 
decisions.” 

That  Portfolio  Management  is 
no  longer  a  niche  sedution  is 
borne  out  by  a  recent  META 
Grotq>  survey  of  2 19  organiza¬ 
tions  from  a  variety  of  indus¬ 
tries.  META  repeats  that  56% 
have  adopted  a  Portfolio 
Management  approach  or 
plan  to  adc^  one  in  2005/ 
2004.  More  than 
40%  of  reqxNi- 
dents  plan  to 
use  Portfolio 
Management  to 
aid  decision 
support,  and 
almost  50% 
plan  m  ad(^  it 
as  an  enterprise-wide  disd- 
pUne.  Further  evidence  comes 
from  die  types  of  companies 
which  are  adc^iting  Portiidio 
Management 

A  pioneer  of  the  Portfrdio 
Management  movement  from 
the  start,  Bdlevue,  Washing- 
ton-based  Pacific  Edge 
Software  has  consistently 
preadied  the  benefits  of  the 
strategic  approach  to  invest¬ 
ment  evaluatKMi  and  execu- 
tkm.  With  an  i^gressive  fno- 
gram  of  product  enhance¬ 
ments,  Pacific  E(%e  has  consis- 
tendy  ui^ied  the  ante,  becom¬ 
ing  the  de  focto  standard  when 
it  comes  to  Portfolio 

Man^pmgnt 


In  a  service  and  information 
driven  eomomy,  IT  is  evolving 
from  a  supporting  role  >  fadl- 
itating  the  “real  budness”  -  to 
center  stage:  increasu^,  IT  is 
the  business.  As  a  result,  the 
need  to  align  ITs  activities 
with  corporate  objectives 
grows  greater,  wfafle  pressure 
on  spending  forces  difficult 
choices  to  be  made. 

COItTIIIUES  NEXT  PAGE 
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RAISES  THE  BAR  ON 
PORTFOLIO  MANAGEMENT 

Emphasizes  the  enterprise,  helps  businesses  maximize  return  on  IT  investments 


INVESTMENT  DECISION-MAKING 


Takint^ 

Control 
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In  the  current  chilly  economic 
dimate,  IT  is  more  than  ever 
having  to  prove  its  value  in 
business  terms.  Most  organiza¬ 
tions  have  more  IT  project 
requests  and  wish-lists  than 
they  have  resources  to 
complete,  so  the  process  of 
making  choices  has  become 
increasingly  important.  In  this 
environment,  the  concept  of 
Portfolio  Management  has 
come  to  the  forefront  as  a 
means  of  mak¬ 
ing  informed  . 

decisions  and  I 


ensuring  maxi- 


IT  investments. 


IT  AND 
BUSINESS 
STRATEGY 


As  a  result. 
Portfolio 
Management  has  evolved  from 
a  somewhat  academic  disd- 
pline  of  project  analysis  and 
a>mparison,  to  a  practical 
technique  for  aligning  IT 
investments  with  overall  busi¬ 
ness  objectives.  And  given  the 
real-world  return  on  invest¬ 
ment  Portfolio  Management 
has  been  shown  to  deliver,  the 
approach  is  rapidly  gaining 
acceptance  in  executive  offices 
and  even  boardrooms. 
Analysts  such  as  META  Group 
are  of  the  opinion  that  "when 
consciously  pursued,  it  pro¬ 
vides  the  enterprise  (IT  organ¬ 
ization  and  lines  of  business) 
a  disciplined  framework  to 
leverage  IT  management 


processes  and  IT  a.sset 
investment  and  deployment 
decisions.” 

That  Portfolio  Management  is 
no  longer  a  niche  solution  is 
borne  out  by  a  recent  META 
Group  survey  of  219  organiza¬ 
tions  from  a  variety  of  indus¬ 
tries.  META  reports  that  56% 
have  adopted  a  Portfolio 
Management  approach  or 
plan  to  adopt  one  in  2003/ 
2004.  More  than 
40%  of  respon¬ 
dents  plan  to 
use  Portfolio 
Management  to 
aid  decision 
support,  and 
almost  30% 
plan  to  adopt  it 
as  an  enterprise-wide  disci¬ 
pline.  Further  evidence  comes 
from  the  types  of  companies 
which  are  adopting  Portfolio 
Management. 

A  pioneer  of  the  Portfolio 
Mam^ement  movement  from 
the  start,  Bdlevue,  Washing¬ 
ton-based  Pacific  Edge 
Software  has  consistently 
preached  the  benefits  of  the 
strategic  approach  to  invest¬ 
ment  evaluation  and  execu¬ 
tion.  With  an  aggressive  pro¬ 
gram  of  product  enhance¬ 
ments,  Pacific  Edge  has  consis¬ 
tently  upp>ed  the  ante,  becom¬ 
ing  the  de  facto  standard  when 
it  comes  to  Portfolio 
Management  solutions. 


In  a  ser%'ice  and  information 
driwn  economy.  IT  is  erolving 
from  a  supporting  role  -  facil¬ 
itating  the  “real  business”  -  to 
center  stage:  increasingly.  IT  is 
the  business.  As  a  result,  the 
need  to  align  IT's  activities 
with  corporate  objectives 
grows  greater,  while  pressure 
on  spending  forces  difficult 
choices  to  be  made. 

CONTINUES  NEXT  PAGE 


/  Considers  all  possible 
investment  opportunities  in 
terms  of  tbeir  contribution  to 
overall  business  objectives 

/  Wei£h$  costs  and  rewards 
using  balanced  multidimen¬ 
sional  gnoritiratiDn  criteria 

Builds  a  portfolio  witn  a  mu 
of  investments  that  will  deliv 
er  maximum  business  benefit 

.  Constantly  reviews  and 
adjusts  the  portfolio  mix 
based  on  performance  and 
changing  business  needs 
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BUSINESS  FOCUS 

What  is  Enterprise 
Portfolio  Management  - 
and  why  does  it  matter? 

Rob  Oici>EMioii  PrpMdeiil  i  CEO 

of  Erlpp  So'lW.IIl- 


COKHNUED  FROM 
PREVIOUS  PAGE 

Portfolio  Manage¬ 
ment  provides  an 
opportunity  for  IT 
to  be  managed  like 
the  business  it  truly 
is.  Ute  IT  o^aniza- 
tion  manages  its 
portfolio  of  activi¬ 
ties  -  from  basdine 
business  su|^rt  to 
asset  renewal  and 
development  to 
high-risk  business/ 

IT  ventures  -  in  a  manner  consistent 
with  the  principles  of  best-in-dass 
business  practices.  The  portfolio  is 
actively  managed  with  a  focus  on 
yield,  risk,  risk-taking,  and  agility. 

This  active  approach  requires  infor¬ 
mation  and  techniques,  and  it  is  these 
needs  which  Portfolio  Man^ement 
software  -  like  Portfolio  Edge”*  and 
Project  Office*  from  Pacific  Edge 
Software  >  now  fulfills.  These  prod¬ 
ucts  provide  a  framework  for  consid¬ 
ering  investments  -  and  their  require¬ 
ments  for  money,  time,  resources,  and 
eflbrt  -  in  a  rational,  standardized 
way.  The  most  valuable  investments 
get  prioritized  for  execution,  >diile  the 
others  remain  in  inventory  for  further 
development,  future  review,  or  re¬ 
assessment  if  the  business  objectives 
or  rompetitive  environment  should 
change. 


ENSURING  IT  PRIORITIES  MATCH  CORPORATE  OBIECTIVES 
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The  ‘Bubble  Cbaff  is  e  favorite  with  portfolio 
managers,  who  find  it  invaluable  for  cherry-pich- 
ing  high-vilue/low-risk  investment  ‘gems”  - 
and  for  steering  clear  of  low-vaiue/high-budge! 
‘dogs”.  The  X  and  Y  axes  can  be  selected  to  dis¬ 
play  any  chosen  criteria  -  here  risk  vs.  value  - 
while  the  sia  of  the  bubble  allows  a  third  dimen¬ 
sion  to  be  consktered.  Pacific  Edge  Software's 
Enterprise  Portfolio  Management  solution. 
Portfolio  Edge,  provides  a  comprehensive  library 
of  charts  and  reports  to  meet  the  needs  of  all 
Portfolio  Management  roles.  A  template  tailored 
to  the  specific  needs  of  the  IT  department  is  also 
available. 


On  this  level  playing  field,  investment 
decisions  are  frster,  more  accurate 
and  less  influenced  by  pcJitks.  Since 
reviews  take  less  time,  they  can  be 
held  more  frequently  -  possibly 
even  daily  -r  allowing  Portfolio 
Man^ement  m  be  more  responsive 
to  evolvii^  busiitess  needs. 
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ENTERPRISEPORTFOLIOMANAGEMENT 


INVESTMENT  DECISION-MAKING 
NEW  TECHNIQUES.  NEW  RESULTS 


Taking 

Control 


i^ien  viewed  as  a 
benefit  to  IT  decision-making 
only,  the  emerging  Enterprise 
Portfolio  Management 
discipline  is,  in  fact,  finding  acceptance  and 
delivering  benefits  in  the  broader  business  context 


SPECIAL 

REPORT 


Questiom  like  these  dxiwn  here  are 
at  the  heart  of  bunness  perform¬ 
ance  and  critical  to  meeting 
investors’  expectations.  But  finding 
the  answers  to  fiiem  can  be  surpris¬ 
ing^  dtalirnging.  Information  on 
costs  and  performance  is 
often  separate  fimn  data  on 
project  status  and  resource 
utilization  -  and  typically 
avaSabk  only  after  the  foct 
In  ftct,  an^^  obtaining  an  h 
inventmy  all  die  compa-  m 
ay’s  assets,  resources  and 
[miject  investments  may  be 
almost  impossible. 


Initially  devek^ied  to  help  IT  man¬ 
agement  dxmae  vdncfa  projects  to 
aUocate  resources  to,  Enterprise 
PiMtfotio  Maiugeroent  has  evcdved 
into  a  poiverfiil  tool  by  vducfa  all 
the  enter^nise’s  investments  can  be 


What  contribution  is  each  specficinvestment 
making  to  our  corporate  objectivesf 

How  do  the  costs  and  return  of  an  individual 
investment  compare  widi  similar  investments? 

In  what  areas  should  we  focus  our  mvestments 
for  maximum  con^fetitive  advantage? 


Even  with  a  wdl  articulated  Are 

corporate  strategy  and  asst 

sophisticated  information 
systems,  managers  can  find 
it  hard  to  identify  assets  ^ 

which  are  underperform¬ 
ing,  investments  which  are 
low-value,  or  projects  i^ikfa  are 
irrelevant  to  corporate  goals.  Even 
if  the  information  is  available, 
many  executives  feel  there  are  so 
many  variables,  they  don’t  have 
time  to  think  things  through  h> 
avoid  arbitrary  cuts. 

&iterpri$e  Portfolio  Management 
goes  to  the  heart  of  diis  challenge. 


Are  we  nuudmizmg  the  return  on  die  intdlectual 
assets  generated  by  our  projects,  products,  assets, 
and  resources? 


Enterprise  Portfolio  Management 
provides  a  means  of  quantifying  the 
rewards  and  risks  of  aD  the  enter¬ 
prise’s  undertakings.  Performance 
can  be  measured  against  these  met¬ 
rics,  [>roviding  viability  into  the 
risks  to  investors.  A  key 
component  of  Enterprise 
fff  Portfolio  Management  stri- 

utions,  such  as  Portfolio 
E<^  fiom  Pacific  Edge 
al  Software,  is  a  ’’dashboard** 

ts?  which  aggregates  the  per¬ 

formance  of  the  entire 
portfolio,  aUowii^  the 
executive  team  to  manage 
the  entire  pcwtfcdio  of  cw- 
porate  investments,  assets 
^  and  resources. 


Do  we  even  have  the  right  mix  of  inveameno? 


analyzed,  prioritized,  planned,  and 
manned  In  simple  terms. 
Enterprise  Portfolio  Management 
vie«vs  the  entire  business  as  a  pwt- 
of  assets,  resources,  and  proj¬ 
ect  investments  -  and  {wovides  die 
information  and  techniques  to 
manage  the  portfolio  for  maximum 
return. 


Only  witii  this  accurate 
view  of  e]q>endinires, 
resources,  schedules,  risks, 
anticipated  benefits,  and 
business  vahie,  can  management 
efiectively  maTimi?^  Rich  on  the 
entire  investment  portfolio. 


META  Group  on 
Enterprise  Portfolio 
Management 
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SPECIAL  ADVERTISING  SECTION 

SPECIALFEATURE 


BUSINESS  FOCUS 


ENTBtmse  KNtrFOUO  MANAGEMENT 
tmts  an  ovyini- 
adon’s  imcst- 
Toents  ID  pif^ects, 
products,  assets, 
and  reaoAuces  ia 
ntich  the  same 
¥RI7  as  a  fond 


folio  Managpini  nt  ii  a  continuoits 


it  »  iMic  iaaonm  dn  em  for 


oped,  usd  which  resources  can  ben  be 
deployed  in  diffaent  activities,  the 
dedsioos  made  are  mcne  Hkdy  to  be 
the  ri^t  ones  -  and  more  Ukd^  to 
civojr  omsensus  and  suppcet  across 
the  organization. 

In  essence,  Enterprise  Portfolio 
ManagHnent  provides  a  dosed-loop 
environment  in  whidi  die  comfdete 
inventory  of  actual  and  potential 
investments  can  be  analyzed,  planned, 
and  tradsed.  On  top  of  this  frame- 
worfo  best-oMneed  Enterprise 
PmtfoKo  Management  abo 


BKUrprm  Uanttmail  -jp 

.  a  «  amtDWMif  froMS  1^. 

"  setting  ami  menigB^iiie 
ofUimmsetofimtstmamio  r 
iWtver  maximum  btaiitas  tMtIue.  > 


friiiilhinaili,  aodi  as 
Ko  isfoMHtffia  orbe  effidody  cq>- 


Ibola  and  faifonutien  ddfoery 
marhaniiwt  tfatf  meat  the  apeeiBc 
of  aU  iocGvidiialt  in  die 
jrtiBipim  Portfolio  Manayieat 

EnterpriM  fartfolfo 
MMof  for  ^piirttr 
adfolQii  such  a»  IT 


Online,  In-I)eptli 


The  recent  META  Group  White  Paper.  fT  Investment  Management:  PottfoHo 
Management  Lessons  Learned,  provides  a  more  in-depth  look  at  IT  Portfolio 
Management  and  its  benefits.  For  a  compiimentaiy  copy  and  an  interactive 
Web  demo,  visit  wiinv^tacMicedge.coin/coiiipiitrn^ 


Pnrtlnlio  .Manage-  « 

incni  (.TnMijes  an  ' 

(*p|''('iUinii\  (nr  11 

(*)  he  managed  like  •*'  *'  * * 

ihc  huMiiess  i(  truiv 

is.  The  IT  i*rgam/a- 

lion  manages  its  •* 

piirltnlin  nt  acti\i- 

lies  -  Irnni  baseline  -‘..'V 

business  support  to  ’ 

asset  renewal  and 

development  to  > - 

high-risk  business/ 

11  ventures  -  m  a  manner  eonsisteni 
with  the  principles  of  bcst-in-class  i 
business  practices.  The  porliivlio  is  I 
acliveh  managed  with  a  (dciis  on 
vield.  risk,  risk-taking,  and  agilitv. 

This  active  apprtMeh  ivc]uires  inibr- 
mation  and  techniiiiies.  and  it  is  these 
needs  which  Pcvritblio  Management 
software  -  like  I’orifolio  Rdge'"  and 
IToicct  Oflice'  from  Pacitlc  Kdgc 
Software  -  now  fultills.  These  prod¬ 
ucts  provide  a  tramework  for  consid¬ 
ering  investments  -  and  their  require¬ 
ments  tor  money,  time,  resources,  and 
ctibrt  -  in  a  rational,  standardized 
wa\.  The  most  valuable  investments 
get  prioritized  ftir  execution,  while  the 
others  remain  in  inventorv  for  further 
development,  future  review,  or  re¬ 
assessment  if  the  business  objectives 
or  competitive  environment  should 
change. 


The  Bubble  CharT  is  a  (avortle  with  portfolio 
managefS.  who  find  it  invaluable  for  cherry-pick¬ 
ing  higfi-value/low-risk  investment  '  gems 
and  for  steering  clear  of  low-value/high-budget 
dogs  The  X  and  Y  axes  can  be  selected  to  dis¬ 
play  any  chosen  criteria  here  risk  vs  value  - 
while  the  size  of  the  bubble  allows  a  third  dimen¬ 
sion  to  be  considered  Pacific  Edge  Software's 
Enterprise  Portfolio  Management  solution. 
Portfolio  Edge,  provides  a  comprehensive  library 
of  charts  and  reports  to  meet  the  needs  of  all 
Portfolio  Management  roles  A  template  tailored 
to  the  specific  needs  of  the  IT  department  is  also 
available 

On  this  level  pl.iving  Held.  Investment 
decisitms  are  faster,  mure  accurate 
and  less  influenced  by  politics.  Since 
reviews  take  less  time,  they  can  be 
held  more  frequently  -  possible 
even  daily  -  allowing  Portfolio 
Management  to  be  more  responsive 
to  evolving  business  needs. 


I  For  more  on  the  Pacific  Edge  Portfolio 
I  Manago'iif-i  I.'-''  .kv.  '■ 

lor  VIS  I  www.pacificedge.coriVriJoreinfo 


ENSURING  IT  PRIORITIES  MATCH  CORPORATE  OBiECTIVES 

TVif/j  itf  Enterprise  Portfolio  Managenu'nt  soluiion,  Poafic  Eii\^  .Snftwwre  -serve?  up 
signifuuini  business  benefns.  Here's  wlmt  ti  iMn’ers: 


/  Facilitates  active  management  of  the 
mil  of  fT  investments,  creating  a  portfolio 
that  maximizes  return  on  the  IT  dollar 

/  Applies  a  consistent,  objective 
tfecision-maktng  process  to  ensure  IT 
efforts  are  aligned  «nth  overall  business 
strategy 

/  Delivers  improved  visibtiity  and 
accountabilrty  for  IT  investment  decisions 


✓  Allows  the  entire  lifecycle  to  be 
considered  when  estimating  and 
measunng  IT  invesftnent  returns 

/  Replaces  traditional  annual  budgeting 
with  a  continuous  planning  process  for 
pnontizing  and  sequencing 

/  Enhances  business  agility  and 
responsiveness  with  extensive  wliat-if 
and  scenario  planning  functionality 


SPECIAL  ADVERTISING  SECTION 


ENTERPRISEPORTFOLIOMANAGEMENT 


INVESTMENT  DECISION-MAKING 

NEW  TECHNIQUES.  NEW  RESULTS 


[  Taking 
Control 

||  Although  often  viewai  tt<  o 

I  hcncfit  to  IT  ih\i>ioii-inokin\i 

|l  only,  (he  e)}ieryin}i  hiterprise 

I  Portfolio  Monosienient 

I  discipline  is,  in  foct.  finding  aceepionce  ond 
I  delivering  benefits  in  the  brooder  business  context. 


Quesri»>ns  like  these  shown  here  are 
at  the  heart  of  business  perform¬ 
ance  and  critical  to  meeting 
investtirs’ expectations.  But  finding 
the  answers  to  them  can  be  surpris¬ 
ingly  challenging.  Information  on 
costs  and  performance  is 
often  separate  from  data  on 
project  status  and  resource  \\ 
utilization  -  and  typically 
available  only  after  the  fact. 

In  fact,  simply  obtaining  an  h 
inventory  of  all  the  conipa-  in 
ny’s  assets,  res<>urces  and 
project  investments  may  be 
almost  impossible. 


Initially  developed  to  help  IT  man¬ 
agement  choose  which  projects  to 
allocate  resources  to.  Enterprise 
Portfolio  Management  has  evolved 
into  a  powerful  tool  by  which  all 
the  enterprise’s  investments  can  be 


W'liiit  contrilnition  is  eoeh  speeilie  inyestmeni 
niiiking  to  oiir  eorporote  obieeTn  esf 

How  do  the  costs  ond  return  of  on  indieidnol 
invesinient  coinpore  with  sinnior  imesinienis? 

In  whot  oreos  should  we  focus  out 

for  nioxinnini  cotnpeiiiire  odvoniogef 


Even  with  a  well  articulated  Are 

corporate  strategy  and  W5>4 

sophisticated  information 
systems,  managers  can  find 
it  hard  to  identify  assets 
which  are  underperform¬ 
ing.  investments  which  are 
low-value,  or  projects  which  arc- 
irrelevant  to  corporate  goals.  Even 
if  the  information  is  available, 
many  executives  fc-el  there  are  so 
many  variables,  they  don’t  have 
time  to  think  things  through  to 
asoid  arbitrary  cuts. 

Enterprise  Portfolio  Management 
goes  to  the  heart  of  this  challenge. 


Are  ii'f  nioxinn:ing  the  return  on  the  nitellectuol 
ossets  generoted  bv  our  projects,  products,  ossets. 
ond  resourcesf 


Enterprise  Portfolio  .Management 
provides  a  means  of  quaniih  ing  the 
rewards  and  risks  »if  all  the  enter¬ 
prise’s  undertakings.  Performance 
can  be  measured  against  these  met¬ 
rics,  providing  visibility  into  the 
risks  to  investors.  A  ke\ 
component  of  Enterprise 
Portfolio  Management  sol¬ 
utions,  such  as  l\vrtfo!i<» 
Edge  from  Pacific  Edge 
ol  Software,  is  a  “dashboard” 

IS?  which  aggregate's  the  per¬ 

formance  of  the  enure 
portfolio,  allowing  the 
executive  team  to  manage 
the  entire  portfolio  t»f  cor¬ 
porate  investments,  assets 
and  resource's. 


't*n  /loi'f  the  right  mix  of  investments? 


analyzed,  prioritized.  planne*d.  and 
managed.  In  simple  terms. 
Enterprise  Portfolio  Management 
vie*ws  the  e-ntire  business  as  a  pe>rt- 
tolio  of  assets,  reMiurces.  and  proj¬ 
ect  inve’stments  -  and  provides  the 
information  and  technique's  to 
manage  the  portfidio  for  maximum 


Only  with  this  accurate 
view  of  expenditures, 
re'seiurce's,  schedules,  risks, 
anticipated  bemefiis.  and 
business  value,  can  management 
effevlively  maximize  KOI  on  the 
entire  investment  pi>nfolio. 


fv  s  CMiplMilHy  Mhbcnt  with 
CIO  «f  MiRy  NeiRh  Mmh 


In  a  recent  interview.  Marine  Ross,  Vice 
PresKtenf  of  Executive  Directions.  META 
Group,  talked  atiout  the  significance  of 
Enterprise  Portfolio  Management 

Selecting  the  nght  projects  is  not  only 
ai'out  ’'nancial  tetum  Important  proj¬ 
ects  continue  to  be  bypassed  in  many 
organizations  because  investment  crite¬ 
ria  fxus  only  on  financial  return  on 
irtvestmertt  (Rtt),  cost/benefrt.  ot  (worse) 
no  predetermined  dectston  factors. 

Fewer  than  10%  (of  Global  2000 
enterprises]  use  several  levels  of  enteria 
(risk,  life  cycle,  return,  planning  horizon, 
etc.)  to  select  projects.  The  remaining 
companies  stfll  rety  on  a  First -come,  first- 
served  or  sQueaky-wheel  method  of  allo¬ 
cating  resources  to  (MOfects 

The  key  ft)  a  winning  ma  in  the  mvest- 
ment  portfolio  is  ensuring  that  capacity 
to  complete  projects  is  balanced  with 
several  types  of  projects.  Focusing  only 
on  high-retura.  tactical,  or  offensive  proj¬ 
ects  frequently  satisfies  line-of-tiusiness 
goals,  but  can  jeopardize  enterpnse 
diKabilrty. 

Balancing  a  poitfdio  to  ensure  mn- 
mum  benefit  to  the  business  requires 
consideration  of  various  weighted  factors 
that  represent  the  complenties  of  the 
business  environment  the  capacity  and 
capabilities  of  the  IT  organizalion.  and 
the  long-term  goafs  of  the  comper  >. 


Read  all  that  META  Group 
hastosayonthe  ^ 

relevance  M  Portfolio 
Management  in  the 
White  Paper.  Portfolio 
Management  Lessons 
Leaned.  For  your 
complimentary  copy  and 
an  interactive  Web  demo,  visit 


This  special  feature  on  Enterprise  Portfolio  Management  was  brought  to  you  by  Pacific 
Edge  Software,  the  leading  provider  of  Enterprise  Portfolio  Management  software  for 
global  conizations.  Pacific  Edge  delivers  closed-loop  management  solutions  that  help 
businesses  maximize  value  and  reduce  risk  in  their  investment,  project,  and  product 
portfolios. 

Pacific  Edge’s  business-critical  solutions  Include  Project  Office*  and  Portfolio  Edge' 
enterprise  software  products,  professional  services,  industry-specific  templates,  and  a 
proven  portfelio  management  process. 


To  explore  how  Enterprise  Portfolio  Management  can  help  you  align  investment  and 
development  activities  with  business  strategy,  please  contact  us  at: 


Pacific  Edge  Software,  Inc. 

Phone  (425)  897.8800 
Fax  (425)  897.8900 
E-mail  info@pacificedge.com 
Web  www.pacificedge.com 


pacificedge 


Portfbtie  Management  for  Smarter  Business* 


KNOWLEDGE  CENTER  DATA  MANAGEMENT 


computerworld.com 
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The  Forecast 
IsCfear 


Predictive  analytics — a 
combination  or  mining, 
models  and  math  —  can  tell 
you  vs^t  customers  will  do 
next.  H\  (inn’  1 1.  Anthcs 


The  potential  for  mining 
cost-saving  and  revenue¬ 
boosting  ideas  from  data  is 
increasing  as  companies 
build  bigger  data  warehous¬ 
es,  applications  become 
more  integrated,  computers  grow 
more  powerful  and  vendors  of  analytic 
software  introduce  products  that  are 
easier  to  use. 

But  many  companies  that  have  made 
huge  investments  in  terabyte-size  data 
stores  aren't  using  them  effectively  to 
forecast  the  future  —  to  predict,  for 
example,  which  customers  are  likely  to 
leave,  which  ones  will  probably  re¬ 
spond  to  the  next  promotion,  which 
ones  are  ripe  for  cross-selling  and 
what  will  happen  to  sales  if  prices  are 
increased  by  5%. 

While  many  of  the  products  that  can 
answer  those  questions  use  esoteric 
techniques  such  as  neural  netwoiks, 
logistic  regression  and  support-vector 
machines,  they  don’t  require  a  RlD.  in 
math,  users  say.  Indeed,  the  biggest 
stumbling  block  to  using  '‘predictive 
analytics”  is  getting  the  data,  not  ana¬ 
lyzing  it,  they  say. 

That  has  been  the  case  so  far  at 
BankFinancial  Corp.  in  Chicago.  It  uses 
the  Clementine  data  mining  'Vork- 
bench”  from  SPSS  Inc.,  also  in  Chica¬ 
go,  to  develop  models  that  predict  cus¬ 
tomer  behavior  so  the  bank  can,  for  ex¬ 
ample,  more  accurately  target  promo¬ 
tions  to  customers  and  prospects. 

The  bank  uses  Clementine’s  neural 
network  and  regression  routines  for 
these  models.  It’s  also  beginning  to  use 
PredictiveMariceting.  SPSS’s  new  pack¬ 
age  of  “best-practice  templates”  for 
helping  users  set  up  predictive  models. 


Models  Easy,  Data  Hard 

PredictiveMaiketing  will  reduce  the 
time  it  takes  the  bank  to  develop  a 
model  by  50%  to  75%,  says  William 
Connerty,  assistant  vice  president  of 
market  research.  The  first  major  appli¬ 
cation  is  a  model  to  predict  customer 
“churn.”  the  rate  at  which  customers 
come  and  ga  It  will  be  used  to  identify 
the  customers  most  likely  to  leave  the 
bank  during  the  comii^  month. 

The  problem  is,  the  model  has  ac¬ 
cess  only  to  account  information  pre¬ 
pared  from  weekly  and  monthly  sum¬ 
maries.  not  to  the  daily  customer  activ¬ 
ity  that  would  make  it  more  timely. 
The  biggest  obstacle  is  getting  trans¬ 
action  data  and  dealing  with  disparate 
data  sources.”  Connerty  says. 

The  data  that  BankFinan<rial  needs 
in  order  to  assess  customer  loyalty 
comes  from  several  hank  systems  and 
unintegrated  customer  survey  databas¬ 
es.  A  lot  of  systems  integration  and  in¬ 
terface  worit  needs  to  be  done  before 
the  bank  will  see  the  full  friiits  of  its 
modeling  tools,  Connerty  says. 

“We  need  to  increase  our  efficiency, 
our  ability  to  deliver  actionable  infor¬ 
mation  to  decision-makers,"  be  says. 
“I’m  under  a  lot  of  pressure  to  deliver.” 

KXEN  Inc.  (Knowledge  Extraction 
Engines),  an  analytic  software  compa¬ 
ny  in  San  Francisco,  is  another  vendor 
that  has  heard  users'  cries  for  easier 
modelii^  It  claims  that  its  Analytic 
Framework  product  can  greatly  reduce 
the  time  it  takes  to  define,  devel<^  a  rut 
run  a  model  For  example,  KXEN's 
Consistent  Coder  module  automatical- 
ty  transforms  raw,  inconsistent  data 
into  clean,  uniformly  formatted  data 
that's  ready  for  modeling. 


■*The  big  sweet  spot  for  KXEN  is  it 
cuts  data  preparatioo  tixnc  in  half,” 
says  KXEN  user  Seymour  Douglas,  di¬ 
rector  of  CRM  and  database  marketing 
at  Cox  Communications  Inc.  in  At¬ 
lanta.  It  also  masks  complexity,  he  says, 
“so  you  don't  need  a  big-doUar  sutisti- 
cian;  you  can  put  someone  at  a  more 
junior  level  b^ause  a  lot  of  heavy  lift¬ 
ing  is  done  by  the  tool.” 

Cox.  a  cable  services  provider,  uses 
KXEN's  Analytic  Framework  to  identi¬ 
fy  its  most  kr^  and  profiuble  cus¬ 
tomers.  predict  chum  and  forecast 
who  might  be  most  receptive  to  cross- 
selling  pitches. 

One  model  revealed  that  customers 
in  apartments  tend  to  be  relatively 
short-term  Cox  customers.  “So  we  now 
offer  them  product  packages  where  we 
try  to  recover  our  investment  quicker,” 
Douglas  says.  “Without  KXEN.  that 
would  not  have  been  obvious  at  alL” 

But  the  labor-saving  benefits  of 
KXEN  come  at  a  stiff  price,  be  says. 

“For  a  five-scat  Ikense.  you'll  pay 
about  $360,000,  plus  an  annual  fee  of 
about  $60,000.” 

Get  Organized 

Robert  Berry,  president  and  CEO  of 
Central  Michi^  University  Research 
Corp.  in  Mount  I^easant,  says  many 
companies  have  made  huge  invest¬ 
ments  in  data  warehouses  but  tend  to 
use  them  more  for  analysts  of  past  per¬ 
formance  than  for  “predictive  intelli¬ 
gence.”  One  reason  is  they  aren't  orga¬ 
nized  for  it,  he  says. 

Berry  says  predictive  modeling 
should  involve  collaboration  amortg 
pec^le  who  have  IT.  analytical  and 
business  expertise. 

“You  have  to  build  a  business-intelli¬ 
gence  team,”  be  says.  “But  companies 
are  struggling  with  common  issues  like 
who  owns  H.  who  manges  it  and  so 


The  biggest 
obstacle  is  getting 
transaction  data 
and  dealing  with 
disparate  data 
sources. 

WIUUM  CONNEJtn  ASSISTANT 
nCE  PNESIOENT  OF  MARKET 
RESEARCH.  BANKFINANCIAL  CORP 


on.  How  do  you  pull  the  business 
skiUs,  the  IT  skills  and  the  aiulytical 
skills  across  corporate  silos  and  create 
this  team?  It’s  not  easy.” 

Berry  advises  having  the  business- 
intelligence  team  report  directly  to  a 
business  unit.  “It  needs  to  have  a  defi¬ 
nite  link  to  corporate  profits,”  he  says. 

Giving  Ratings  to  Leads 

Hewlett-Packard  Co.’s  Enterprise  Sys¬ 
tems  Group  pulls  together  people  with 
diverse  backgrounds  and  strong  ana- 
'  lytical  skills  ~  including  sotrur  people 
who  also  have  IT  skills  ~  for  its  group 
that  docs  predictive  modeling  of  cus¬ 
tomer  behavior.  The  group  is  part  of 
“CRM  operations”  luidcr  a  vice  presi¬ 
dent  for  sales,  says  Randy  CoUica.  a  se¬ 
nior  business/data  mining  analyst  On 
a  project-by-pmject  basis,  people  fiom 
sales,  marketing  and  other  depart¬ 
ments  may  participate,  he  says. 

CoUica  says  it's  not  necessary  to 
have  a  professional  mathematician  on 
staff  in  order  to  do  statistical  model¬ 
ing.  “But  you  need  some  basic  statis¬ 
tics."  he  says.  "If  someone  says.  This  is 
a  normal  distribution,'  you  at  least 
need  to  know  what  that  means.” 

HP  uses  software  from  SAS  Institute 
Inc.  in  Cary.  N.C.,  to  mine  its  database 
of  customers  and  prospects,  using  re¬ 
gression  and  other  techniques  to  pre¬ 
dict  chum.  loyalty  and  where  to  target 
promotions.  HP  also  mines  its  huge 
stores  of  unformatted  text  Information, 
conducting  a  kind  of  predictive  analyt¬ 
ics  that’s  much  less  common. 

HP  has  some  7$0GB  of  customer 
information,  including  data  from  prr- 
merger  Compaq  Computer  Corp.  that 
dates  to  1984.  It  has  customer  data 
from  its  caU  centers,  including  e-maUs 
from  customers  and  prospects  and  text 
typed  in  during  voice  caUs.  Included  in 
these  caU  records  are  “lead  ratings.” 
caU  center  personnel’s  assessments  of 
a  caUer's  readiness  to  buy  —  coded  as 
"hot,"  *^vann"  or  “subject." 

But  some  records  1^  lead  ratings, 
so  HP  has  used  SAS's  Text  Miner  to 
predict  the  rating  these  customers 
should  get.  Text  Miner  does  that  by 
comparing  text  from  unrated  cus¬ 
tomers  to  "clusters”  of  text  from  rated 
customers  that  contain  similar  terms 
and  concepts. 

Text  Miner  works  by  preprocessing 
raw  text  after  transforming  it  into  a 
grid,  or  matrix,  that  relates  terms  to 
documents.  The  matrix  indicates  the 
frequency  of  every  term  in  the  docu¬ 
ment  collection.  Specific  bits  of  impor¬ 
tant  information,  such  as  customer 
names,  are  extracted  and  summarized. 
Next,  a  mathematical  technique  ' 


Tool  Box  for  Forecasting 
And  Analysis 


Ragranion:  Fits  a  line  to  a  set  of 
historical  data  points  to  minimize 
the  sum  of  the  squares  of  the  dis¬ 
tances  of  the  data  points  to  the 
line.  For  example,  if  the  Hne  ex¬ 
presses  the  r^tionship  between 
independent  variables  such  es 
age.  sex  and  income  to  a  depen¬ 
dent  variable  such  as  sales,  then 
it  defines  an  equation  that  can  be 
used  to  forecast  sales. 

Tima  Series  Analysaa 
a  MoirinQ  avangK  Each  new 
point  in  the  time  series  is  the 
average  of  some  number  of 
earlier  consecutive  data  pomts. 
sometimes  chosen  to  ekminale 
seasonal  factors  or  other  irregu¬ 
larities. 

a  Expooanlial  smooching:  Sim¬ 
ilar  to  the  moving  average,  except 
more  recent  data  posits  are  grven 
moreweii;^. 

Memory  based  raaBoning: 

Sometimes  caBed  the  'nearest 
neighbor  method,*  it's  an  artifida) 
inteUigence  technque  that  can 
forecast  something  by  identifying 
the  most  similar  past  cases  and 


applying  that  information  to  a 
new  case. 


Artificial  neural  rwCworki:  f^t- 
temed  after  the  human  brain, 
they’re  composed  of  a  large  num¬ 
ber  of  processing  elemeils  (neu¬ 
rons)  tied  together  with  weired 
connections  (synapses).  [See 
story.  OuickUnk  aSOK).]  They're 
trairied  by  looking  at  real-worid 
exanpies- for  example,  hi5tor^ 
cal  sales  data  and  the  past  values 
of  variables  that  may  tnfkience 
sales.  The  trying  adjusts  the 
weights.  Mtileh  store  the  data 
needed  to  solve  specific  prob¬ 
lems.  such  as  sale  forec^ing. 

OeeWon  traoo:  Sequential  deci¬ 
sions  are  drawn  as  branches  of  a 
tree,  stemming  from  an  inltiat  de¬ 
cision  potnl  and  branching  out  to 
muiuple  possSile  outcomes.  The 
trees  can  be  used  to  predict  the 
most  Maly  outcome  and  to  fore¬ 
cast  financial  outcomes  by  multi- 
plylnQ  costs  or  returns  at  each 
branch  by  the  probability  that  of 
branch  bekig  taken. 

-  GaryH.Anfttes 


called  singular-value  decomposition 
replaces  the  original  matrix  with  a 
much  smaller  matrix  by  purging  un¬ 
important  words  and  highli^ting 
more  relevant  ones. 

The  new  matrix  can  be  used  to  place 
associated  terms  and  documents  into 
categories.  HP  helps  standardize  the 
matrix  with  synonym  lists  that  say.  for 
example,  that  customers  calling  about 
"disk  drives”  or  “hard  disks”  arc  really 
ail  interested  in  storage. 

Hnally,  clustering,  classification  and 
predictive  methods  are  applied  to  the 
reduced  data  using  traditional  data 
mining  techniques.  HP  uses  "memory- 
based  reasoning.”  a  technique  that 
makes  a  prediction  about  a  record  by 
comparing  it  with  past  records  with 
similar  characteristics. 

These  techniques  can  predict  the 
customer-lead  rating  with  85%  accura¬ 
cy,  Coliica  says.  "Without  this  tech¬ 
nique,  rd  have  had  to  go  back  to  the 
ordinal  records  and  actually  read 
them."  he  explains.  "And  when  you 
have  that  much  volume,  you  can't  read 
them  aU.” 


HP  also  intends  to  use  the  text  min¬ 
ing  and  clustering  techniques  to  find 
out  what  loyal  customers  tend  to  talk 
about  when  they  contact  an  HP  call 
center,  as  well  as  what's  on  the  minds 
of  those  customers  deemed  least  loyal 
The  goal  of  course,  is  to  win  over  the 
less  loyal  ones. 

CoUica  says  HP  has  yet  to  exploit  a 
niunber  of  promising  text  data  sources. 
For  example,  it  will  analyze  the  text  in 
warranty  claims  to  glean  insights 
about  problems  customers  are  having 
with  products  and  the  text  in  warranty 
cards  to  better  understand  its  cus¬ 
tomers. 

HP  wiU  also  try  to  mine  information 
from  customers'  and  prospects'  own 
Web  sires.  "Web  sites  are  a  great 
source  of  wonderful  information  about 
your  customers."  CoUica  says.  I 
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,  ROBUST  OBJECT  DATABASE 

HIGH  PERFORMANCE  SQ 

L 

3  MULTIDIMENSIONALACCESS 

^Our  poi^relational  databa^ 
New  dimensions  of  scalability. 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cach^,  the  post-relational  database. 

What  makes  Cach£  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cach^-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cach^ 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reUability  of  Cach^  is  proven  every  day  in 
“life-or-death”  appUcations  at  hundreds  of  the  laigest 
hospitals.  Cach^  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  -  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  million  users  in  .  .  ,  .  » 

88  countries.  Cach£  is  _  .  _  ^ 

available  for  Windows^ 

OpenVMS,  Linux  and 
major  UNIX  platforms. 


Make  Applieationt  Fatter 


Download  a  fulty-functional  version  of  Coche  or  request  it  on  CD  for  free  at  wwwJnterSy5tems.com/t>05t-rdational 


I 


Unewected 

Insignts 

The  results  of  data  minine  queries 
can  range  from  utterly  baffling  to 
very  useful,  with  lots  of  surpnses  in 
betw'een.  H\  Mitdi  Herts 


Sometimes  the  results  from 

data  analysis  are  just  plain  ab¬ 
surd.  Web  lo^  show  that  one 
of  the  most  common  search 
phrases  entered  at  Computer- 
tvorhfs  Web  site  one  week  was  “Ityder 
trucks.**  Nobody  knows  why. 

More  often,  data  mining  yields  unex¬ 
pected  nuggets  of  information  that 
open  the  company's  eyes  to  new  mar¬ 
kets.  new  ways  of  reaching  customers 
and  new  ways  of  doing  business. 

Samsung  Electronics  America  in 
Irvine.  Calif,  for  example,  analyzes  re¬ 
ports  from  10.000  resellers  to  identify 
"lost  deals."  that  is,  orders  that  went  to 
competitors.  In  one  busi¬ 
ness  segment  —  computer 
monitors  sold  to  the  health 
care  industry  —  Samsung 
found  chat  4^  of  the  lost 
deals  went  to  one  competi¬ 
tor  and  represented  80%  of 
the  total  1^  revenue. 

Knowing  those  chilling 
facts.  Samsung  is  working 
more  closely  with  hardware  integra¬ 
tors  in  the  health  care  field  to  win 
more  of  those  orders,  says  Helman 
Lukito,  a  Samsung  markettrtg  manager. 
But  until  the  company  collected  and 
analyzed  the  data  from  its  reseller  ex¬ 
tranet.  which  is  powered  by  software 
from  San  Francisco-based  Allegis 
Corp.,  Samsung  was  "going  into  the 
market  blind,"  Lukito  says. 

Sometimes  a  company  likes  what  it 
sees  when  U  analyzes  the  data.  Catalog 
company  Lillian  Vernon  Corp.  in  Rye. 
N.Y.,  has  always  been  strong  with  fe¬ 
male  shoppers  but  had  trouble  attract¬ 
ing  male  customers.  Using  Web  analyt¬ 
ics  from  Fireclick  loc.  in  Los  Altos. 
Calif,  Lillian  Vernon  discovered  that 
men  —  who  mi^t  not  flip  through  a 
Lillian  Vernon  paper  catalog  ~  were 


happy  to  shop  at  Lillian  Vernoa's  Web 
sice.  Since  that  discovery,  the  company 
has  placed  products  chat  appeal  to  men 
more  prominently  on  its  Web  site,  a 
company  spokesman  says. 

An  important  lesson  from  data  min¬ 
ing  is  that  stereotypes  are  often  wrong. 
For  example,  an  ima^  of  motorcycle 
owners  as  Hells  Angels  f^es  away 
when  you  learn  that  they  usually  rank 
wirbin  the  highest  income  braclvt  in 
their  neighborhoods,  says  Jordan  Mod- 
ell.  senior  vice  president  of  database 
marketing  at  Wunderman  in  New  York, 
a  division  of  Youi%  &  Rubicam  Inc. 

"What  you  thought  previously  might 
not  be  true."  Modell  says. 
‘That’s  what  makes  data 
mining  ftm,  but  there’s  a  pur¬ 
pose  to  it.  too."  because  it 
means  the  company  can 
send  marketing  messages  to 
people  who  will  be  recep¬ 
tive,  be  adds. 

Modell’s  data  analytics 
team  takes  large  extracts  of 
clients'  data  warehouses,  matches 
them  with  external  databases  and  then 
uses  mining  tools  from  SA5  Institute 
Inc..  SPSS  Inc  and  Brio  Software  Inc., 
as  well  as  direct  SQL  queries. 

Some  results  are  almost  common 
sense.  For  example,  the  best  maikets 
for  toy  sales  are  places  where  there  are 
lots  of  children  and  lots  of  toy  purchas¬ 
es.  such  as  Little  Rock,  Ark.,  and  Ma¬ 
con.  Ga..  says  V^rren  Foster,  director 
of  marketiiig  intelligence  at  The  Martin 
Agency,  a  Richmond.  Va.-based  adver¬ 
tising  agency.  He  uses  mapping  soft¬ 
ware  and  data  sets  from  M^Info  Corp. 
in  TVoy.  N.Y..  to  pinpoint  areas  where 
clients  should  a^rtise. 

But  some  results  are  counterintu¬ 
itive.  For  example.  Foster  says  Phoenix 
isn't  a  good  place  for  selling  golf  clubs. 


j  despite  the  many  golf  courses  nearby. 
Why?  Tourists  and  conventioneers  play 
in  ntoenix.  but  they  don’t  buy  their 
clubs  there.  It  turns  out  the  best  places 
for  golf  club  sales  are  Rochester.  N.Y., 
and  Detroit,  where  there  are  many  avid 
golfers  who  buy  their  clubs  locally. 

Perhaps  the  roost  important  value  of 
data  an^dytics  is  that  they  help  busi¬ 
ness  managers  make  decisions  based 
on  facts  rather  than  on  old  assump¬ 
tions  or  gut  feelings,  many  users  say. 

New  York-based  cosmetics  and  fii^ 
grance  firm  Coty  Inc.  uses  financial  an¬ 
alytics  from  Hyperion  Soludtms  Corp. 
in  Sunnyvale.  Calif,  to  settle  internal 
debates  about  resource  allocation  for 
various  product  lines,  says  Jim  Shiah, 
senior  vice  president  and  corporate 
controller.  The  facts  about  sales  and 
profitability  of  each  product  line  have 
put  an  end  to  the  "democratic  anarchy 
over  resource  allocation  and  elevated 
the  level  of  discourse."  Shiah  says. 

Ace  Hardware  Corp.  in  Oak  Brook. 
Ill.,  finds  that  the  facts  gleaned  from  its 
data  warehouse  can  persuade  reluctant 
store  owners  to  raise  or  lower  their 
prices.  "We  had  one  store  that  only 
sold  one  wheelbarrow  a  year,  but  when 
be  lowered  the  price,  he  sold  four  in 
one  month  and  made  more  money  than 
be  did  the  previous  year."  says  data 
warehouse  architect  Mark  Cothroo. 

Ace  uses  analytical  software  from  In- 
fonnatica  Corp.  in  Redwood  City.  Calif. 

And  conventional  wisdom  held  that 
batteries  and  light  bulbs  have  to  be 


Did  You 
Know? 

More  quirky  insights 
from  data  mining: 

■  Bank  custMMr-swice  cantars 
aiparimca  a  hiiga  ipto  In  caRs 
batwaan  fflidnigM  and  3  ajn. 

(SoMca  WbndetTnan.  New  York) 

■  Tba  most  fraquml  caivs  to 


piiona  to  man  tkan  200  ttmaa 
par  yMr,  and  ml  thay  pHanOy 
rmh  loiNft  in  dspoaito.  (Source: 
Wbnderman) 

■  JtoeiiniinototeH^*M 
Raaaardi  htottkita,  ant  qnrtar  of 
Bw  manatoH  to  Iba  AlMc 


(Source;  SAS  Institide  Inc..  Cary.  N.C.} 

■  Ctol  cOTlars  haw  found  (hat 
cilan  from  lha  SouBi  fait  ifcout 
20%  tonoto,  awn  tor  tha  sanw 
typa  of  cal.  (Source  Stove  Meyer. 
Qi^o  (^..  CharioUe.  N.C.) 


priced  very  competitively  because  they 
can  be  bou^t  at  many  difiereot  places. 
But  data  mining  found  that  shoppers 
don’t  really  do  a  lot  of  comparison 
shopping  for  those  items,  says  Diane 
Flynn,  technology  business  manager  at 
Ace.  "People  have  their  long-held  theo¬ 
ries,  but  with  the  facts,  you  can  prove 
them  right  or  wrong."  P 


Chicken  Burgers  vs.  Beef  Burgers 

IWng  bcBlnnHMriMn  IriMi  Cogm,  he.  nMunnl  cUn  M  IkMi 

aewiMl  Itetn  he.  h  Bntmmd  nhge.  Colo,  can  eraln.  atal't  Mliq  aid 

dm  adhil  odnUhliig  and  pranilim  Id  local  neiMi.  iOK  Ml  Jhnhr.  *Khr  ol 
roolainni  syHoiu.  Fk  naiihlo.  accorAg  to  2002  data,  palrana  00  Ikt  WM  Coait  ah 
ahad  40%  flora  eNdha  hoiart  Oiin  pamas  h  Wooohl  do.  Jdh^  aqn. 
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Buying  Intentions 


The  top  five  types  of  software 
that  IT  executives  intend 
to  buy  this  year. 


1  Content/document  manapement 

2  Query/reportinQ/analysis 
S  Profect  management 

4  Web  management  applications 

5  Web  analytics 


Base  150  senior  IT  eneculives 


Barriers 
To  Business 
Intelligence 

What  are  the  taggest  challenges 
of  implementing  busmessHrttelligence 
and  data  warehousing  projects 
in  your  organizatkm? 

1  BAidget  constraints 

2  DataquaKty 

3  Managing  expectations 

4  Implementation  time 

8  Culture  change 
(Tie)  Data  intoiration 

Base  1.648  companies  in  an  online  survey 


Failure  Rate 

Has  your  organization  experienced  any 
data  warehouse  project  failures? 


Ves: 

4t% 

Nk 

69% 


Elase  142  companies  worldwide 


MARK  HALL 


Trust,  but  Verify 


NCE,  BACK  IN  THE  1990s.  I  hosted  an  invitation-only  party  for  tny  maga¬ 
zine  at  a  trendy  bar  in  Boston.  My  assistant  arranged  it  all,  including  hiring 
a  bouncer,  whose  frightening  size  was  surpassed  only  by  his  scary  disposi¬ 
tion.  When  I  arrived,  somewhat  late  and  without  a  pass,  the  bouncer 
blocked  my  path.  I  pointed  to  my  picture  on  the  invitation  in  his  hand,  but 
he  just  shrugged  and  said,  "You  don’t  look  like  you.” 


Although  the  girth  and  personality  need  nor  be 
similar.  I  believe  that  the  growing  population  of 
“delegated  administrators."  or  data  gatekeepers, 
should  have  the  same  innately  skeptical  nature  as 
that  Boston  bouncer.  Because  when  you  hand  over 
the  keys  to  your  data  to  someone  outside  IT.  you 
want  that  person  to  be  extremely  selective  about 
who  gets  to  sec  what  data,  when  and  why. 

Assigning  gatekeeper  duties  to  non-IT  workers 
isn’t  new.  With  the  advent  of  networked  PCs  and 
the  Web.  virtually  all  data  entry  work  moved  from 
IT  to  end  users,  and  new  data  permissions  had  to 
be  part  of  (hat  change. 

These  gatekeepers  distribute  data  rights  for  cer¬ 
tain  applications  inside  and.  increasingly,  outside 
companies.  Sa>’  a  new  employee  or  manager  is  hired. 
The  data  gatekeeper  has  to  decide  what 
lo>vl  of  data  access  they  get.  Or  a  disgrun¬ 
tled  employee  is  fired.  The  data  gatekeep¬ 
er  turns  off  his  access  immediately.  The 
job  is  usually  undertaken  by  a  specific  in¬ 
dividual  inside  an  organization  w'ho  adds 
thi>se  duties  to  his  regular  tasks.  But  from 
ITs  perspective,  that  person’s  job  is  a 
pixK-ess  that  can  make  or  break  the  use- 
fulne.ss  of  an  application.  'ITre  responsibil¬ 
ities  of  the  data  gatekeeper  have  to  be  un¬ 
der  ITs  conind  and  should  be  restricted 
to  specific  applications  for  a  defined 
group  —  not  the  entire  user  fHJpulation. 

Take  access  rights.  You  could  design  and  write  a 
pri>gram  that  connects  a  biometric  database  to  the 
corporate  HR  application  it>  identify  users  and  veri¬ 
fy  their  roles  in  the  company.  Next,  you  could  de¬ 
velop  a  Q&A  program  to  determine  which  applica¬ 
tions  those  people  need.  Those  results  could  then 
be  pushed  into  a  database  that  ties  applications  to 
job  functioas.  The  three  could  (hen  be  linked  to 
serve  up  the  right  software  to  the  right  individual. 

Most  companies  don’t  go  to  that  kind  of  trouble 
and  expense  because  it’s  far  more  efficient  to  sim¬ 
ply  have  a  trusted  person  —  your  systems  adminis¬ 
trator  —  give  workers  access  rights.  But  even  your 
sysadmin  can’t  make  the  best  decisions  when  it 
comes  to  access  rights  for  your  customers  or  other 
people  within  your  supply  chain. 


That’s  why  Avnet  Inc.,  a  global  distributor  of  high- 
end  computer  and  network  systems  in  Phoenix 
adopted  this  data  gatekeeper  approach  for  its  Chan¬ 
nel  Connection  application.  Hundreds  of  value- 
added  resellers  that  acquire  products  from  Avnet 
use  Channel  Connection  to  access  real-time  data  on 
orders,  credit  status  and  other  information. 

Dave  Stutiard,  vice  president  for  applications  so¬ 
lutions  in  Avnet’s  computer  marketing  group,  says 
IT  staffers  don’t  have  the  level  of  information  about 
customers  to  determine  who  would  be  best  suited 
to  access  the  Channel  Connection  application,  so 
Avnet  trusts  its  sales  staff  to  sign  up  customers  and 
assign  them  rights  to  the  numerous  application 
modules  inside  Channel  Connection.  As  data  gate¬ 
keepers,  the  salespeople  are  trusted  to  make  the 

decisions  about  who  else  can  be  trusted. 

But  Avnet  also  heeds  that  old  Russian 
proverb:  Trust,  but  verify.  Every  salesper¬ 
son’s  recommendations  must  be  approved 
by  an  A\mel  sales  operations  manager. 

Once  given  access,  the  customers  des¬ 
ignate  a  data  gatekeeper  (approved  by 
Avnei),  who  has  broader  data-access  priv¬ 
ileges.  For  example,  as  employees'  roles 
change,  a  customer’s  data  gatekeeper  can 
update  the  system  to  swap  one  user’s 
rights  for  another. 

The  cxtcn-sion  of  trust  through  the  data 
gatekeeper  process  is  essential  to  making  this  kind 
of  application  work  outside  a  company.  But  equally 
vital  is  having  a  solid  security  system  in  place.  Avnet 
use's  Directory  Smart,  a  secure  LDAP  database  from 
OpenNetwork  Technologies  in  Clearw’ater.  Fla. 
Sruttard  says  the  product’s  single  sign-in  feature 
makes  it  easy  for  users  to  navigate  through  the  mul¬ 
tiple  application  modules,  which  means  customers 
actually  use  the  program.  And  its  database  gives 
the  data  gatekeeper  control  ’’down  to  the  page  lev¬ 
el"  by  assigning  a  user’s  role  and  privileges,  he  says. 

Of  course,  a  customer’s  data  gatekeeper  can’t 
change  his  company’s  access  rights.  Only  Avnet's 
staff  can  do  that.  Because,  as  Avnet  knows,  the 
benefits  of  having  someone  watch  the  gate  can 
quickly  vanish  when  your  trust  is  placed  in  the 
wrong  hands.  I 
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Tmst,  but  Verify 


NCE,  BACK  IN  THE  1990s,  I  hosted  an  invitation-only  party  for  my  maga¬ 
zine  at  a  trendy  bar  in  Boston.  My  assistant  arranged  it  all,  including  hiring 
a  bouncer,  whose  frightening  size  was  surpassed  only  by  his  scary  disposi¬ 
tion.  When  I  arrived,  somewhat  late  and  without  a  pass,  the  bouncer 
blocked  my  path.  I  pointed  to  my  picture  on  the  invitation  in  his  hand,  but 
he  just  shrugged  and  said,  ‘‘You  don't  look  like  you." 


Although  the  girth  and  personality  need  not  be 
similar,  I  believe  that  the  growing  population  of 
“delegated  administrators,*  or  data  gatekeepers, 
should  have  the  same  innately  skeptical  nature  as 
that  Boston  bouncer.  Because  when  you  hand  over 
the  keys  to  your  data  to  someone  outside  IT,  you 
want  that  person  to  be  extremely  selective  al^t 
who  gets  to  see  what  data,  when  and  why. 

Assigning  gatekeeper  duties  to  non-IT  workers 
isn’t  new.  With  the  advent  of  networked  PCs  and 
the  Web,  virtually  all  data  entry  work  moved  ftom 
IT  to  end  users,  and  new  data  permissions  had  to 
be  part  of  that  change. 

These  gatekeepers  distribute  data  ri^ts  for  cer¬ 
tain  applications  inside  and,  increasingly,  outside 
companies.  Say  a  new  employee  or  manager  is  hired. 
The  data  gatekeeper  has  to  decide  what 
level  of  data  access  they  get  Or  a  disgrun¬ 
tled  employee  is  fired.  The  data  gatekeep¬ 
er  turns  off  his  access  immediately.  The 
job  is  usually  undertalisn  by  a  specific  in¬ 
dividual  inside  an  organization  who  adds 
those  duties  to  his  regular  ta^  But  from 
ITs  perspective,  that  person’s  job  is  a 
process  that  can  make  or  break  the  use¬ 
fulness  of  an  application.  The  responsibil¬ 
ities  of  the  data  gatekeeper  have  to  be  un¬ 
der  ITs  control  and  sht^d  be  restricted 
to  specific  applications  for  a  defmed 
group  —  not  the  entire  user  population. 

Take  access  rights.  You  c(^d  design  and  write  a 
program  that  connects  a  biometric  database  to  the 
corporate  HR  application  to  identify  users  and  veri¬ 
fy  their  roles  in  the  company.  Next,  you  could  de¬ 
velop  a  program  to  determine  which  applica¬ 
tions  those  people  need.  Those  results  could  then 
be  pushed  into  a  database  that  ties  applications  to 
job  functions.  The  three  could  then  be  linked  to 
serve  up  the  right  software  to  the  right  individual. 

Most  companies  don’t  go  to  that  kind  of  trouble 
and  expense  because  it's  far  more  efHcient  to  sim¬ 
ply  have  a  trusted  person  —  your  systems  adminis¬ 
trator  —  give  worters  access  rights.  But  even  your 
sysadmin  can’t  mal^  the  best  decisions  when  it 
comes  to  access  rights  for  your  customers  or  other 
people  within  your  supply  chain. 


That’s  why  Avnet  Inc.,  a  global  distributor  of  high- 
end  computer  and  network  systems  in  Phoenix 
adopted  this  data  gatekeeper  approach  for  its  Chan¬ 
nel  Connection  application.  Hundreds  of  value- 
added  resellers  tl^t  acquire  products  from  Avnet 
use  Channel  Connection  to  access  real-time  data  on 
orders,  credit  status  and  other  information. 

Dave  Stuttard,  vice  president  for  applications  so¬ 
lutions  in  Avnet’s  computer  maiketing  group,  says 
IT  staffers  don't  have  the  level  of  information  about 
customers  to  determine  who  would  be  best  suited 
to  access  the  Channel  Connection  application,  so 
Avnet  trusts  its  sales  staff  to  sign  up  customers  and 
assign  them  rights  to  the  numerous  application 
modules  inside  Channel  Connection.  As  data  gate¬ 
keepers,  the  salespeople  are  trusted  to  makp  the 
decisions  about  who  else  can  be  trusted. 

But  Avnet  also  heeds  that  old  Russian 
proverb:  IVust.  but  verify.  Every  salesper¬ 
son’s  recommendations  roust  be  approved 
by  an  Avnet  sales  operations  manager. 

Once  given  access,  the  customers  des¬ 
ignate  a  data  gatekeeper  (approved  by 
Avnet),  who  has  broader  data-access  priv¬ 
ileges.  Fbr  example,  as  employees’  roles 
change,  a  customer’s  data  gatekeeper  can 
update  the  system  to  swap  one  user’s 
ri^ts  for  another. 

The  extension  of  trust  through  the  data 
gatekeeper  process  is  essential  to  making  this  kind 
of  application  work  outside  a  company.  But  equally 
vital  is  having  a  solid  security  system  in  place.  Avnet 
uses  Directory  Smart,  a  secure  LDAP  database  from 
OpenNetwork  Technologies  in  Clearwater,  Fla. 
Stuttard  says  the  product's  single  sign-in  feature 
makes  it  easy  for  users  to  navigate  through  the  mul¬ 
tiple  application  modules,  which  means  customers 
actually  use  the  program.  And  its  database  gives 
the  data  gatekeeper  control  “down  to  the  page  iev- 
ei*  by  assigning  a  user’s  role  and  privileges,  he  says. 

Of  course,  a  customer’s  data  gatekeeper  can’t 
change  his  company’s  access  rights.  O^y  Avnet’s 
staff  can  do  that  Because,  as  Avnet  knows,  the 
benefits  of  having  someone  watch  the  gate  can 
quickly  vanish  when  your  trust  is  placed  in  the 
wrong  hands.  I 


Ironic  how  it  takes  the  cutting  edge 
technology  of  2003  to  access  the 
cutting  edge  technology  of  1973. 

myEXTRA!™  Smart  Connectors  let  you  leverage  your  existing  legacy  data  and  logic. 


“Cutting  edge”  doesn't  cut  It.  You  need  products 
that  do  what  they  say  they  will  do.  This  Is  what 
we  say;  Our  myEXTRAI  Smart  Connectors  give  you 
XML-based  Web  services  —  they  let  you  get  at  legacy 
information  without  changing  host  applications. 
You  can  put  all  of  the  business  data  and  applica¬ 
tions  locked  up  in  mainframes  to  new  use  in  hours 
or  days,  not  weeks  or  months.  We’ve  spent  the  last 
18  years  making  legacy  data  more  useful.  Smart 
Connectors  are  the  logical  next  step,  making  data 
easier  to  get  at. 

Find  out  more.  Download  our  free  White  Paper 
“Leveraging  Legacy  Applications  to  Serve  New 
Business  Initiatives”  at  www.attachmate.e0m/SC7. 
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Real-time  data  analysis 
sounds  good,  but  not 
if  the  data  is  wrong  or 
can’t  be  absorbed  by  the 
origanization.  By  Bni  bani 
l^Bompa  keimcrs 

The  need  to  speed  up  business  decision¬ 
making  to  keep  from  falling  behind  the 
competition  is  drivii^  companies  to  use 
real-time  analytical  tools.  With  them,  they 
hope  to  more  quickly  exploit  key  corpo¬ 
rate  transaction  data  housed  in  databases, 
enterprise  data  warehouses  and  other  data  stores. 

But  the  move  to  instant  analytic  insights  comes 
with  big  trade-offs  and  incremental  costs,  say  ana¬ 
lysts  and  users. 

Glib  executive  orders  to  provide  real-time  data 
feeds  everywhere  in  the  company  can  be  counter¬ 
productive  if  the  data  quality  is  low  or  the  company 
doesn’t  have  the  processes  in  place  to  actually  ana¬ 
lyze  and  act  on  the  data.  Besides,  real-time  data 
analysis  may  be  a  high-payoff  pursuit  in  only  a  few 
mission-critical  areas  of  the  company. 

Those  negatives  don’t  appear  to  be  quelling  inter¬ 
est.  however.  In  a  December  2002  survey  of 700  IT 
executives  by  Evans  Data  Corp.  in  Santa  Cruz,  Calif., 
4B%  of  res^ndents  said  they  were  already  analyzing 
data  in  or  near  real  time,  and  another  25%  reported 
plans  to  add  real-time  analytics  this  year. 

A  key  issue  is  how  the  term  real-time  analytics  is 
defined,  because  there’s  confusion  about  what  con¬ 
stitutes  real  time  vs.  near-real  time  vs.  not  real  time. 

Joe  McKendrick,  an  analyst  at  Evans  Data,  says  a  strict 
definition  of  real-time  analytics  is  dynamic  analysis 
and  reporting  based  on  data  entered  into  an  opera¬ 
tional  system  less  than  one  minute  earlier.  At  most 
businesses,  however,  analytics  is  considered  real 
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time  if  it's  conducted  on  data  collected  within  the 
past  hour,  and  near-real  time  is  analytics  conducted 
on  dau  collected  within  the  past  24  hours.  McKen- 
dricksays. 

Absortiing  the  Data 

McKeodrick  says  the  growing  interest  in  real-time 
analytics  can  be  attributed  to  the  pressures  on  busi¬ 
nesses  to  make  faster  decisions,  keep  smaller  inven¬ 
tories.  operate  more  nimbly  and  track  performance 
nrtorc  carefully. 

lYouble  is.  there  ouy  be  no  reason  to  use  real-time 
analytics  if  a  company  can  absorb  its  transaction  in¬ 
formation  only  on  an  hourly,  daily  or  weekly  basis.  For 
example,  at  MBIA  Insurance  Corp.  in  ArmoDk, 
overnight  updates  work  best  to  feed  the 
OLAP  engine  used  to  help  the  company 
decipher  risk  related  to  mortgages,  in¬ 
surance  policies  and  other  services. 

‘'What  we've  found  is  that  ovemi^ic 
updates  are  plenty,  as  long  as  users  can 
gain  immediate  access  to  the  informa¬ 
tion  they  need  to  make  business  deci¬ 
sions  qukkly  during  the  day."  says  Lynn 
Jacobs,  associate  vice  president  for  IT 
applications  at  MBIA.  Using  the  Ess- 
OLAP  tool  from  Sunnyvale.  Califl- 
based  Hyperion  Solutions  Corp.,  busi¬ 
ness  users  at  the  insurer  can  quickly 
analyze  financial  information  in  order 
to  assess  risks  and  make  fast  business 
decisions.  The  number  of  financial 
analysis  applications  supported  by  the 
Essbase  tool  will  be  e.xpanded  this  year 
from  the  current  10. 

TooAAanyHerations 

In  many  traditional  business  environ¬ 
ments,  real-time  analytics  can  be 
overluIL  Barton  Gotdenberg.  president 
of  ISM  Inc.  a  CRM  consultancy  in 
Bethesda,  Md.,  offers  the  following  ex¬ 
ample:  Three  managers  meet  ro  discuss  business  de¬ 
velopment  issues,  each  armed  with  sales,  market  or 
target  information  they  captured  from  the  system  at 
different  times  of  the  day.  Each  manager  has  created 
a  snapshot  to  present  an  accurate  picture,  but  the 
numbers  won’t  match.  'Hlus  situation  will  hardly 
help  speed  decision-making."  Goldenberg  says. 

In  other  cases,  real-time  analytics  may  malrp  h  eas¬ 
ier  to  make  bad  decisions  fast,  ^cause  of  faulty  data. 

Managers  at  GreenevUle,  Tenn.-based  Fbrwa^  Air 
Corp.  now  can  get  their  bands  on  real-time  informa¬ 
tion  via  the  company's  intranet  Using  specialized  re- 


portii^  and  analytical  tools  from  Appfluent  Technol¬ 
ogy  Inc  in  Arlington.  Va..  thc>-  can  track  things  like 
the  amount  of  freight  shipped  by  various  customers. 
The  next  goal,  says  Glenn  Adelaar.  vice  president 
and  CIO  at  the  trucking  company  that  serves  the  air¬ 
freight  industry,  is  to  enable  department  managers  to 
analyze  more  of  the  transaction  data  that's  accessible 
via  the  real-time  analytics  tool. 

But  a  manager  who  wants  to  track  his  salespeople's 
daily  contribution  will  Hnd  that  timing  is  a  big  issue. 
Right  now,  about  90%  of  sales  transactions  are  en¬ 
tered  within  20  minutes  of  completion,  Adelaar  says. 
"But  that  10%  will  get  some  poor  salesperson  clob¬ 
bered."  he  says.  Adelaar  says  that  althou^  it's  criti¬ 
cal  to  get  accurate  data  to  business  managers  quickly. 

the  business  processes  that  support 
those  data  feeds  must  be  made  bullet¬ 
proof  to  attain  high-quality  insights. 

Common  Pitfals 

So,  what  do  organizations  need  to  un¬ 
derstand  ^KHit  real-time  analytics  be¬ 
fore  they  invest  in  anything  designed 
to  help  them  speed  decision-making? 

Although  there  may  be  pressure 
to  make  everything  time,  compa¬ 
nies  need  to  be  selective  and  identify 
which  business  activities  will  benefit 
from  real-time  data  feeds  and  whkh 
won't.  Although  real-time  data  feeds 
may  cause  problems  like  the  one  Ade¬ 
laar  described,  they  can  help  many 
kinds  of  workers,  such  as  air  traffic 
controllers,  stock  traders  and  emer¬ 
gency  services  providers,  make  better 
decisions  faster. 

Some  experts  say  real-time  analytics 
are  most  v^uable  at  the  point  of  cus¬ 
tomer  contact  so  call  center  personnel 
can  use  the  data  to  make  personalized 
offers,  upsell  or  cross-selL  Bell  Mobili¬ 
ty  Inc..  Canada’s  largest  wireless  carri¬ 
er,  operates  two  customer  service  centers  staffed  by 
SSO  representatives.  The  company  uses  San  Mateo, 
Calif.-based  E.piphany  lnc.’s  Real-Time  tool  to  ensure 
that  employees  make  the  right  offers  at  the  right  time 
without  relying  on  guesswork,  says  Derek  Pollitt.  as¬ 
sociate  dir^or  of  CRM  ^rategy  and  deployment  at 
Bell  Mobility  in  Mississauga.  Ontaria 
Since  the  Real-Time  tool  was  implemented  in  Sep¬ 
tember,  sales  per  hour  have  increa^  18%,  and  totd 
inbound  marketing  revenue  increased  by  lb%  in  the 
first  month.  Bell  Mobility  has  also  been  able  to  speed 
the  time  it  takes  to  create  new  marketing  campaigns 
by  75%. 

Tools  and  Troubles 

The  real-Ume  analytical  tools  now  available  are  pri¬ 
marily  from  new,  small  suppliers  such  as  Aleri  Inc.  in 
New  Yoik  or  a  few  more-established  providers  such 
as  Teradata  Corp.,  Sybase  Inc.,  InterSystems  Corp.  or 
Epiphany.  These  vendors  offer  tools  meant  to  help 
companies  in  specific  areas  such  as  customer  rela¬ 
tions,  rapid  application  development  or  the  need  for 
nonstop  operations,  says  Alex  VeysteL  an  analyst  at  ' 
Aberdeen  Group  Inc.  in  Boston. 

Meanwhile,  larger  companies  are  having  trouble  I 


Followjng  the  Sun 

Need  to  get  that  busness  inteioencs  report 
done  overngN?  A  few  IT  users  are  starixiQ  lo 
d^ierxl  on  ofbhore  outsourcing  to  get  the  iob 
done  taster  and  cheaper 

Electnmic  Data  S)teterRS  Corp.  now  has 
several  custorners  that  tarrn  oiA  portions  of  their 
business  intellgence  work  to  ED$  sites  in  coun¬ 
tries  such  as  Ireland  and  New  Zealanl  aocord* 
ing  to  EDS  consuilanis  Dan  Schwartz  and  Bdl 
0^.  Schwartz  says  this  works  best  n  two 
areas;  the  data  inleg^ion  process,  also  known 
as  the  extract  transforrn  and  load  (ETL)  proc¬ 
ess:  and  CXjtP  reports. 

Ptst.  EIK  consultants  work  woh  the  ckenAs  to 
esialish  the  specifications  for  the  data  reporting 
effort.and1henlheiobissenttotheoffshore8s- 
sentfy  bne.  For  example.  Dodds  says,  the  fust 
eight-hour  shift  rnigte  hancle  the  ETL  work  and 
then  pass  it  to  the  second  shit  *  perhaps  in  a 
different  cointry  -  to  hande  the  OLAP  report 
anddeftvery.Tafangadvaritagsoltinie-zonecM- 
terenctes.  the  report  can  be  finehed  twice  as 
last  Schwartz  and  Dodds  say. 

But  in  this  tough  econorny.  the  real  reeon 
companies  go  ofehore  is  to  cut  costs  Offshore 
labor  costs  are  50%  to  80%  cheaper.  But  the 
offshorepnifectsrequeernoreoverheadtornan- 
age  the  project  arto  establish  the  specihetfions. 
so  the  net  cost  savings  are  closer  to  15%  to 
25%.  Schwartz  says 

'ktlchBens 


finding  off-the-shelf  tools  to  extract  pertinent  infor¬ 
mation  ffom  various  systems  and  transactional  data¬ 
bases.  So  they  have  to  create  their  own  enterprise  ap¬ 
plication  integration  middleware  to  extract  the  data 
and  send  it  to  analyst  desktops.  Goldenberg  says. 

For  now.  the  cost  to  gain  instant  intelligence  via 
real-time  analytics  U  But  in  the  future,  analysts 
say.  a  faster  return  on  investment  for  real-time  ana¬ 
lytics  is  possible  —  if  companies  can  change  process¬ 
es  and  migrate  to  newrer  technologies  such  as  XML 
I2EE  and  Microsoft  Corp.'s  J4e(. 

As  hardware  costs  plummet,  bandwidth  expands 
and  storage  is  increasingly  commoditized,  it  will  be¬ 
come  far  easier  and  less  costly  to  access  and  analyze 
operatioittl  data  in  real  time  than  in  any  current  rela¬ 
tional  database  envifonment,  says  VeysteL 

Ultimately,  analysts  say.  up  to  e^  business  to 
seek  insights  delivered  at  the  ri^t  moment  to  help 
speed  crucial  business  decisions.  Whether  that  infor¬ 
mation  is  updated  once  an  hour,  once  a  day.  once  a 
week  or  once  a  month  will  depend  on  each  compa¬ 
ny's  needs.# 


DePorr^  is  a  writer  and  editor  in  Germantown,  Md. 
Contact  her  at  bdepon^xu^comcastMet. 
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Dashboards:  Not  Just 
For  Execs  Anymore 

When  i>ei>plc  think  of  managi-’mont 
dashboards,  they  often  think  of  what 
used  tt*  K*  called  executive  informa¬ 
tion  systems  <EIS).  An  EIS  provides  a 
fancy  computer  display  of  key  finan¬ 
cial  metrics  for  the  corner  office.  But 
research  by  John  Hagerty.  an  analyst  at 
AMR  Research  Inc.  in  Boston,  indi¬ 
cates  that  dashboards  (also  called 
scorecards)  are  showinjt  up  at  all  levels 
of  the  company  and  provide  data  other 
than  financial  metrics. 


tJall  it  the  democratization  of  dash¬ 
boards.  Hajicrty  says  they’re  beiny 
used  in  a  variety  of  departments,  in¬ 
cluding!  customer  scrx'icc.  manufactur¬ 
ing,  sales,  human  resources  and  supply 
chain  management.  The  big  dilTcrence 
is  that  these  dashboards  provide  oper¬ 
ational  performance  metrics  instead  of 
financial  statistics. 

Message  to  Vendors; 

Don't  Get  Too  Fancy 

Skip  the  bells  and  whistles,  and  just 
give  customers  the  core  business-intel¬ 


ligence  capabilities,  said  Gartner 
Inc.  analyst  Bill  Hostmann  in  a  recent 
warning  to  vendors.  “A  vendor  putting 
all  of  its  resources  into  the  latest, 
trendy  technolrrgy  is  usually  wasting 
its  time  and  money,"  he  said. 

Gartner’s  study  of  the  business-intel¬ 
ligence  software  market  found  that  IT 
managers  "are  unimpressed  by  tech¬ 
nology  hype"  and  that  they  want  some 
fairly  straightforward  things,  such  as: 
Ad  hoc  queries 
Access  to  multiple  databases 
Scalability 

Ease  of  integration  with 
back-office  systems 

In  i>ther  words.  Hostmann  says,  ven¬ 
dors  should  steer  clear  of  fads,  make 
scalability  and  integration  high  priorities 
and  make  ad  htx'  queries  easier  to  do. 


Hub-and-spoke  data  visualUation;  The  'star  tree’  graphical  user  interface  -  powered  by  software  from  Inxight  Software  Inc.  in  Sunnyvale. 
Cahf  -  helps  users  navigate  targe,  complex  hierarchies  of  information  m  a  hub-and-spoke  fashion.  In  this  case,  a  user  can  navigate  the  taxono¬ 
my  of  dinosaurs  by  clicking  or  dragging  the  information  'nodes'  to  see  related  species  The  same  data-visualization  technology  can  be  used  to 


navigate  Web  sites  or  analyze  text  databases  at  intelligence  agencies  More  examples  mminxfght.corn/'prcxAjcfs^oerri/starJree/demo&php. 


Data-Ouality  Perceptions 

IT  managers  are  a  bit  more  skeptical 
than  business  managers  are  about 
the  quality  of  the  data  in  their  business- 
intelligence  systems. 

How  confMeirt  are  you  in 
the  accuracy  and  reliability  of  your 
business-intelligence  data? 

Corporate  management: 

Not  at  all  confident  3% 

Somewhat  confident  35% 

Very  confident  82% 

IT  management; 

Not  at  all  confident  4% 

Somewhat  confident  48% 

Very  confident  48% 

Base  Online  survey  ot  121  corporate  managers 
and  363  IT  managers 


Patent  Watch 

A  bilingual  Irartslation  database.  The 
database  stores  pairs  of  sentences, 
one  in  English  and  its  counterpart  in 
French,  for  example.  When  the  user 
enters  a  text  fragment  in  English,  the 
database  retrieves  the  corresponding 
text  in  French.  Emmanuel 

Roche  and  Yves  Schabos  at  Global  In¬ 
formation  Research  and  Technologit's 
LLC,  Boston.  —  L/.S.  Parent  No. 
6J.^S.&42.  issued  March  18 

A  wide-area  network  of  vending  machines 
connected  to  a  host  computer,  which  cof- 
iects  sales  and  maintenance  data  in  a  data 
warrtwuse.  Thomas  P.  Howell 

and  Kevin  Ward,  at  The  Coca-Cola  Co.. 
Atlanta.  —  C/.S.  Patent  No.  6.462.644, 
issued  Oct.  8. 2002 

A  method  of  synchronizing  two  incompati- 
bie  databases,  such  as  a  PC  database  and 
a  handheld  one.  David ).  Booth- 

by  at  Pumatech  Inc..  San  Jose.  —  U.S. 
Patent  No.  6.SJ2.480.  issued  March  II 

Events 

The  Data  Warehousing  Institute's 
Spring  Conference 
May  11*16.  San  Francisco 
www.<fw-instifu/e.coni 

Gartner  Business  InteHigence  2003 
May  15-16,  Chicago 
www.gartner.com 
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An  eclectic  collection  of^research 
and  resources.  H\  Mitch  Belts 


Dashboards:  Not  Just 
For  Execs  Anymore 

When  people  think  of  manageinent 
dashbtwds,  they  often  think  of  what 
used  to  be  called  executive  informa¬ 
tion  systems  (EIS).  An  EIS  provides  a 
foncy  computer  display  of  key  fman- 
cial  metrics  for  the  comer  office.  But 
research  by  John  Hagerty,  an  analyst  at 
AMR  Research  Inc.  in  Boston,  indi¬ 
cates  that  dashboards  (also  called 
scorecards)  are  showing  up  at  all  levels 
of  the  company  and  provide  data  other 
than  financial  metrics. 


Call  it  the  democratization  of  dash¬ 
boards.  H^erty  says  they're  being 
used  in  a  variety  of  departments,  in¬ 
cluding  customer  service,  manufactur¬ 
ing,  sales,  human  resources  and  supply 
chain  management.  The  big  difference 
is  that  these  dashboards  provide  oper¬ 
ational  performance  metrics  instead  of 
financial  statistics. 

AAessage  to  Vendors: 

Don't  Get  Too  Rncy 

Skip  the  bells  and  whistles,  and  just 
give  customers  the  core  business-intel¬ 


ligence  capabilities,  said  Gartner 
Inc.  analyst  Bill  Hostmann  in  a  recent 
warning  to  vendors.  "A  vendor  putting 
all  of  its  resources  into  the  latest, 
trendy  technology  is  usually  wasting 
its  time  and  money.**  he  said. 

Gartner's  study  of  the  business-intel- 
l^nce  software  maricet  found  that  IT 
managers  “are  unimpressed  by  tech¬ 
nology  hype”  and  that  they  want  some 
fairly  straightforward  things,  such  as: 

1.  Ad  hoc  queries 

2.  Access  to  tmdtipli  databases 

3.  Scalafaity 

4  Ease  of  bilegratfon  with 
bacfc-ofRce  systems 

In  other  words,  Hostmann  says,  ven¬ 
dors  should  steer  dear  of  fods,  make 
scalability  and  int^ration  High  priorities 
and  make  ad  hoc  queries  easier  to  da 


Data-QualtyPBroeplions 
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Patent  Watch 

■  A  bCngualtraneialion  database.  The 

database  stores  pairs  of  sentences, 
one  in  English  and  its  counterpart  in 
French,  for  example.  When  the  user 
enters  a  text  fragment  in  Engli.sh.  the 
database  retrieves  the  corresponding 
text  in  French.  Inventors:  Emmanuel 
Roche  and  Yves  Schabes  at  Global  In¬ 
formation  Research  and  Technologies 
LLC,  Boston.  —  (/.S.  Patent  No. 
6,535^2,  issued  March  18 

■  A  wide-area  network  of  vandkioinachinss 
cormectsd  to  a  hoct  computer,  which  coh 


wereheuee.  Inventors:  Thomas  P.  Howell 
and  Kevin  Ward,  at  The  (2oca-Cola  Ox. 
Atlanta.  —  US.  Patent  No.  6,462.644, 
issued  Oct.  8, 2002 

■.Arnalhodflf^inchronizingtwolncoinpati- 
ble  datafaasas,  such  a»  a  PC  database  and 

•  handheld  one.  Inventor:  David  J.  Bootb- 
'  by  at  Pumatech  Inc„  San  Jose.  —  [7.5. 

I^ent  No.  6J32,480.  issu^  March  U 
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>  The  most  reliable  servers  are  the 
ones  you  don't  have  to  think  about. 
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HP  servers  are  as  rehoble  as  they  are  affordable 
so  it  costs  less  to  maximize  your  server's  uptime. 

In  fact,  our  Intel'  processor-powered  HP  servers  are 
the  best-designed  servers  built  on  the  most  re/<ot/e 
platform  available  They  re  custom  configured  to  rneet 
your  company's  nonstop  demands  ond  they're 
easier  to  install  than  ever  before  And  every  HP 
serve!  can  be  managed  today  os  easily  as  they  are 
adoptive  and  exporydoble  for  tomorrow  Plus  they  re 
all  backed  with  on  impressive  warranty  and  our 
experienced  service  and  support  team  So  your 
business  heads  m  foe  only  direclion  if  should— up 
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IT’S  NO  SECRET  THAT  in  a  back 

room  in  the  typical  Fortime  500 
company,  there’s  a  team  of  analyti¬ 
cal  wizards  running  sophisticated 
queries  that  mine  for  gems  such 
as  data  about  the  company’s  best  cus¬ 
tomers  —  those  top  20%  of  clients 
that  produce  80%  of  the  company’s 
profits.  These  jewels  can  be  a  busi¬ 
ness’s  most  valuable  intellectual  prop¬ 
erty.  which  makes  them  very  valuable 
to  competitors. 

What's  to  prevent  that  data  set  from 
walking  out  the  door  or  falling  into  the 
wrong  hands? 

Sometimes,  not  much.  Many  compa¬ 
nies  lack  the  internal  controls  to  pre¬ 
vent  that  information  from  leaking. 

The  problem  is  that  business-intelli¬ 
gence  data  is  as  hard  to  protect  as  it  is 
important. 

“Securing  your  business-intelligence 
information  and  systems  is  often  an  af¬ 
terthought  at  best,”  says  Cate  Quirk,  an 
analyst  at  AMR  Research  Inc.  in  Boston. 

Michael  Rasmussen,  an  analyst  at 
Giga  Information  Group  Inc.  in  Cam¬ 
bridge,  Mass.,  agrees.  “Have  most  IT 
shops  really  thought  through  the  secu¬ 
rity  issues  around  BI?“  asks  Ras¬ 
mussen.  “The  answer  is  no.” 

R  Can  Be  a  Business 

Owens  &  Minor  Inc.  had  to  think 
about  it.  Business  intelligence  is  big 
business  at  the  Reston.  Va.-based  med¬ 
ical  supplies  distributor.  A  S4  billion 
company.  Owens  &  Minor  coimts 
some  of  the  nation’s  largest  health 
care  organizations  among  its  cus¬ 
tomers.  In  late  1996,  it  started  mining 
data  internally  using  business-intelli¬ 
gence  software  from  Business  Objects 
SA,  whose  U.S.  headquarters  is  in 
San  Jose. 

“From  the  beginning,  we  were  aware 
of  security  issues  around  this  infonna- 
tioa"  says  Don  Stoller,  senior  director 
of  information  systems  at  Owens  & 
Minor.  “For  example,  a  sales  executive 
in  Dallas  should  only  have  access  to 
analyses  from  his  region.” 

Dean  Abbott,  principal  at  Abbott 
Consulting  in  San  Diego,  adds,  “Don’t 
give  access  to  anyone  who  doesn’t 


The  data  about  your  best  customers  may  be 
your  company’s  most  vital  asset.  Here’s  how 
to  make  sure  business-intelligence  data  doesn’t 
fall  into  the  wrong  hands.  By  Mark  I  .con 
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have  a  deHnite  need."  It  is  always  pos¬ 
sible  that  someone  who  has  legitimate 
access  will  abuse  that  trust,  but  ana¬ 
lysts  say  you  can  minimize  that  poten¬ 
tial  by  strictly  limiting  access  to  only 
those  who  need  it. 

To  guard  against  such  a  breach, 
Owens  &  Minor  used  role-level  securi¬ 
ty  functions  in  the  Business  Objects 
application  that  clearly  defme  who  has 
access  to  which  data.  This  meant  we 
had  to  build  a  separate  security  table  in 
our  Oracle  datatnse."  says  StoUer. 

A  few  years  later,  when  the  company 
wanted  to  open  its  systems  to  supplier 
and  customers,  security  became  even 
more  important.  In  199&  Owens  6c  Mi¬ 
nor  moved  quickly  to  take  advaiuage  of 
Web-intelligence  software  from  Busi¬ 
ness  Objects  that’s  designed  to  Web- 
enable  business-imeiUgeiKre  systems. 

The  result  was  Wisdom,  a  portal  that 
lets  Owens  dc  Minor’s  suppliers  and 
customers  access  their  own  transac¬ 
tional  data  and  generate  sophisticated 
analyses  and  reports  from  it 

"In  (business-to-business  transac¬ 
tions],  security  is  key."  says  Stoller. 

"We  had  to  make  abwlutely  sure  that 
Johnson  &  Johnson,  for  example,  could 
not  see  any  of  3M*s  informatioa  This 
meant  we  had  to  set  up  specific  cus¬ 
tomer  and  supplier  security  tables,  and 
we  had  to  maintain  new.  secured  uni¬ 
verses  in  Business  Objects." 

Wisdom  was  such  a  success  that 
Owens  &  Minor  decided  to  go  into  the 
intelligence  business  with  the  launch 
of  >^isdom2  in  the  spring  of  2000.  "We 
capture  data  out  of  a  hospital's  materi¬ 
als  management  system  and  load  it  into 
our  data  warehouse,”  Stoller  explains. 

A  hospital  can  then  make  full  use  of  its 
business-intelligence  software  to  mine 
and  analyze  purchasing  data.  Owens  & 
Minor  receives  a  licensing  and  mainte¬ 
nance  fee  for  the  service. 

AdmMstratkm  Mghtmare 

Layers  of  security  and  encryption  im¬ 
ply  a  considerable  amount  of  systems 
achninistration  overhead.  Both  Quirk 
and  Rasmussen  say  that's  the  main  rea¬ 
son  security  concerns  about  business 
intelligence  ate  often  swept  under  the 


Safe  and  Secure 
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carpet.  The  issues  of  authentkation 
(identifying  the  user)  and  authoriza¬ 
tion  (w^t  things  the  user  is  allowed  to 
do)  must  be  addressed,  usually  across 
different  applications,  Rasmussen  says, 
addii^  "Systems  administration  can 
be  a  real  nightmare." 

"We  are  going  through  some  of  this," 
says  David  Merager,  director  of  Web 
services  and  corporate  applications  at 
Vivendi  Universal  Gaines  Inc.  in  Los 
Angeles.  "Our  business  intelligence 
needs  more  security  attention." 

Vivendi  generates  business-intelli¬ 
gence  reports  from  two  systems:  an 
Oracle-based  general  ledger  database 
on  Unix,  and  a  data  entry  application 
for  budgets  on  a  Microsoft  SQL  Serv¬ 
er  database.  The  heart  of  the  busi¬ 
ness-intelligence  system  consists  of 
Microsoft’s  OLAP  application  and 
software  hrom  Comshare  Inc.  in 
Ann  Arbor.  Mich.,  that  provides  the 
Web-based  front  end  for  the  analyt¬ 
ics.  "Our  budget  teams  use  these  re¬ 
ports  to  do  real-time  analyses."  says 
Merager. 

Rodger  Sayles.  manager  of  data 
warehousing  at  Vivendi,  says  one  way 
to  secure  such  a  system  would  be  to 
assign  roles  to  all  users  within  the 
Microsoft  application.  Roles  determine 
precisely  what  a  user  is  allowed  to  see 
and  do  and  are  usually  managed  within 
a  directory.  If  your  computing  archi¬ 
tecture  is  amenable  to  a  single,  central- 
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ized  directory  that  supports  roles,  this 
may  be  an  attractive  solution. 

"The  problem  is  that  once  you  have 
over  40  distinct  roles,  you  run  into 
performance  issues,  and  we  have  iden¬ 
tified  about  70  roles,"  Sayles  explains. 

He  says  there’s  a  way  around  this 
difficulty.  "I  think  we  are  going  to  use  a 
combination  of  portals  and  rotes.  A 
user  would  sign  on  through  a  particu¬ 
lar  portaL  which  would  effectively 
place  the  user  in  a  role  category.  This 
reduces  the  burden  on  the  appUca- 
tioa,"  says  Sayles. 

KeepttSimpie 

Dave  Stack,  manager  of  corporate 
finandai  planning  at  RSA  Security 
Inc  in  Bedford,  Mass.,  employs  a  simi¬ 
lar  strategy  using  some  of  the  same 
software  ffom  Comshare.  RSA's  busi¬ 
ness-intelligence  applications  produce 
forecasting,  budgeting  and  product 
reports. 

He  says  good  planning  has  also 
helped  keep  systems  administration 
headaches  to  a  minimum.  "Comshare 
gives  you  about  nine  types  of  users," 
says  Stack,  "and  that  is  plenty  for  us." 

What  makes  this  small  number  of 
profiles  possible,  he  eiqjlaitts,  is  a  good 
design  that  uses  a  hierarchy  of  four 
sectirity  levels.  "These,  together  with 
security  features  in  our  Microsoft 
SQL  Server  database,  make  it  easy  for 
us  to  create  cross-functional  roles," 
saysStadc. 

But  Stack  says  things  would  have 
been  a  lot  more  difficult  if  he  had  start¬ 
ed  deploying  business  intelligence 
without  having  a  good  security  plan  in 
place  first 

John  Schramm,  manager  of  strategic 
security  architecture  and  engineering 
at  FleetBoston  Financial  Corp.,  says  a 
good  place  to  start  plannii^  is  wi^  a 
classiftcation  system  that  defines  dif¬ 
ferent  levels  of  security  for  different 


types  of  information. 

‘In  order  to  protect  data."  says 
Schramm,  "you  need  to  know  what 
the  rules  arc.  Our  classification  sys¬ 
tem  enables  u.s  to  set  the  rules  that 
wc  Twed  to  design  security  around 
information." 

Schramm  worked  with  consultants 
at  Greenwich  Technology  Panrvers 
Inc.  in  White  Plains,  N.Y..  to  define 
four  security  levels;  highly  confiden- 
tiaL  which  defines  data  with  trade  se¬ 
crets  or  wire-transfer  information: 
confidential,  such  as  transactional 
data  and  credit  card  numbers;  confi¬ 
dential  informational,  defined  as 
noniransactional  data  such  as  cus¬ 
tomer  lists;  and  company-restricted 
data  tike  job  postings  and  phone 
directories. 

Security  systems.  Schramm  explains, 
can  include  field-level  encr>'ption. 
transport-level  security  such  as  Secure 
Sockets  Layer  and  Secure  Copy  Proto- 
coL  and  authentjeauon  and  authoriza¬ 
tion.  "Ckimbiiutions  of  these  kick  in  at 
different  levels  in  our  classification  hi¬ 
erarchy."  says  Schramm. 

FleetBoston  is  a  large,  distributed 
enterprise,  which  makes  classification 
even  more  important.  "We  try  to  main¬ 
tain  these  standards  across  our  various 
lines  of  business."  say  Schramm.  They 
are  all  different,  and  one  of  my  prima¬ 
ry  responsibilities  is  to  integrate  them 
in  a  secure  maimer,  i  need  to  know 
what  data  the  different  lines  of  busi¬ 
ness  need." 

Complex  Proiilng 

Most  companies  have  thought  through 
network  and  software  security  issues, 
which  is  why  they  don't  come  up  chat 
often  in  discussions  about  busiocss- 
imeJligence  security. 

When  it  comes  to  such  data,  the  se¬ 
curity  concerns  are  more  about  poli¬ 
cies.  "It  is  always  posiibie  for  some¬ 
one  within  the  company  to  abuse  se¬ 
curity  privileges."  says  Rasmussen. 
"But  the  best  defense  against  this  and 
most  other  breaches  is  to  make  sure 
you  have  good,  strong  policies  in  place 
—  things  lUce  authentication  and  au¬ 
thorization.” 

Schramm  agrees.  The  big  chaUenge 
is  in  detennining  the  data  elements 
that  define  the  user  of  a  particular 
[business-intelligence]  system.  These 
profiles  are  a  real  challenge.  As  just 
one  example,  you  may  have  employees 
who  are  also  customers. 

"You  need  to  know  who  the  actors 
are,"  says  Schramm.  I 
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I  M  i  M  '  N 

A  data  model  is  a  plan  for  building  a  database.  The 
model  represents  data  conceptually,  the  way  the  user 
sees  it,  rather  than  how  computers  store  it.  Data  mod¬ 
els  focus  on  required  data  elements  and  associations; 
most  often  they  are  expressed  graphically  using  entity- 
relationship  diagrams.  On  a  more  abstract  level,  the 
term  is  also  used  in  describing  a  database’s  overall 
structure  —  e.g.,  a  relational  or  hierarchical  data  model. 


BV  BUSSELL  KAV 

IN  JHt  REAL  WORID.  we 
think  of  data  as  facts,  ftg- 
urcs  and  other  bits  of 
kntm’ledf-'e.  Put  a  lot  of 
data  items  together  in  a  useful 
form,  and  you  get  infi>rmation 
—  maj'bc  even  intelligence. 

Often,  people  can  intuiiivelv 
understand  a  given  piece  of 
data  in  isolation,  but  a  com* 
purer  can  never  do  so  without 
help.  In  computers,  we  store 
data  in  a  databa.se  —  a  highly 

structured.  carefully  _ 

defined  and  rigidly 
formatted  collection 
of  records  —  so  that 
we  can  retrieve  it.  use 
it.  analyze  it  and  work 
with  it  to  run  our 
businesses. 

In  fact,  it  i.s  only  the  organi¬ 
zation  of  a  database  that  gives 
im^aning  and  utiUt>  to  the  data 
itisidc  it.  Without  that  organi¬ 
zation.  ail  we  have  are  undif¬ 
ferentiated  ones  and  zeroes  — 
not  numbers,  not  letters  and 
certainly  not  knowledge. 

Thus  a  critical  step  in  data 
proce-ssing  is  the  creation  of  a 
plan  for  the  database  that's 
simple  enough  for  the  end 
user  to  understand,  yet  de¬ 
tailed  enough  to  let  the  data¬ 
base  designer  create  the  actual 
structure  using  database  soft¬ 
ware.  We  call  this  conceptual 
plan  3  data  model,  though  wc 
use  this  term  to  describe  two 


related  but  different  ideas. 

(Inc.  which  wc  can  also  call 
3  database  model,  is  some¬ 
what  abstract  in  nature  and 
refers  to  a  database's  overall 
structure,  or  type.  The  best- 
known  example  is  the  rela¬ 
tional  model  (QuickLink 
a3000)  used  by  Oracle.  DB2 
and  .St^L  Server.  Others  in¬ 
clude  flat-file,  hierarchical, 
network,  object,  semantic  and 
dimensional  models. 

The  second  type  of  data 

-  model,  or  schema. 

takes  the  overall  struc¬ 
ture  of  one  of  the  stan¬ 
dard  database  models 
and  tailors  it  to  a  spe¬ 
cific  application,  com¬ 
pany.  project  or  task. 
This  type  of  data  model  gets 
down  to  specific  data  items, 
including  their  names,  values, 
granularity  and  hou’  they  re¬ 
late  to  one  another. 

W'e  can  compare  these  data 
models  to  the  plans  for  a  new 
building.  .An  architect  designs 
different  types  of  buildings  — 
a  sports  arena  vs.  a  four-bed¬ 
room  house,  for  example  — 
using  quite  different  materials 
and  techniques  (steel  girders 
vs.  wood  framing,  cranes  v.s. 
ladders).  So.  too.  do  we  imple¬ 
ment  the  various  fy'pcs  of  data¬ 
base  models  (say.  relational  vs. 
object-oriented)  quite  differ¬ 
ently  on  a  computer. 

When  we  build  a  schema. 


however,  vse're  working  at  a 
detailed,  nitty-gritty  level; 
it's  more  like  consulting  an  in¬ 
terior  designer  than  an  archi¬ 
tect.  The  architect  plans  for  a 
kitchen's  space,  wiring  and 
plumbing,  but  the  designer 
helps  decide  which  appliances 
to  buy.  how  to  grtuip  lights, 
where  to  put  ilw  table  and 
chairs,  and  how  many  cabinets 
are  needed. 


What’s  in  a  Model? 

To  illustrate  what  goes  into  a 
data  model.  let’s  assume  we’re 
creating  a  very  simple  inven¬ 
tory  database  for  a  widget¬ 
building  assembly  line.  We 
need  to  know  the  following: 

■  What  data  do  we  include? 
Parts  numbers  for  our  widget 
miKlels.  the  subcomponents 
they’re  made  from,  raw  mate¬ 
rials  and  parts  suppliers,  costs 
and  delivery  times,  inventory 
on  hand  and  assembly  time. 

■  How  do  data  elements  relate 
to  one  another?  Some  suppliers 
deliver  faster  than  others  but 
charge  more, 

■  What  processes,  operations 
and  transformations  might  we 
need  to  do?  Calculate  total  cost 
per  widget. 

■  Wfltat  kinds  of  questions  will 
we  need  to  answer?  How  much 
are  we  paying  for  parts?  How 
many  widgets  can  we  produce 
next  week? 

■  What  other  business  process¬ 
es  or  activities  might  use  this  data? 
Accounts  payable,  product 
planning  and  sales. 

While  building  this  data¬ 
base.  our  data  model  procL*eds 
from  conceptual  model  to  log¬ 
ical  design  to  physical  impk^- 
montacion: 

1.  Interview  business  users. 

2.  Define  the  data  elements 


and  their  relationships. 

3.  Create  a  data  model. 

4.  Select  the  database  type 
and  specific  database  manage¬ 
ment  software  (DBMS):  often, 
it  will  be  wh.atever  you're  al¬ 
ready  using. 

5.  Map  data-model  elements 
to  tables,  and  normalize  them. 

6.  Create  data  type  defini¬ 
tions  and  a  database  structure. 

7.  Design  the  application. 
Creating  a  data  mi>dcl  takes 

a  different  mind-set  than  appli¬ 
cation  development  does.  In 
Steps  1  through  3.  at  the  exm- 
ceptual  level,  wc  must  think 
abt>ui  what  we’re  dealing  with¬ 
in  Steps  4  through  6.  the  focus 
shifts  to  how  wc  implement 
the  model.  Step  5  marks  the 
transition  to  logical  design  and 
Step  6  to  physical  design,  both 
of  which  needed  to  meet  our 
DBMS's  specific  requirements. 
In  Step  7,  programmers  imple¬ 
ment  the  procedures  that  use 
and  manipulate  the  data.  I 
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Data  Modeling  With 
Entity-Relationship  Diagrams 

In  the  followiryg  sample  diagram,  rectangles  represent  entities,  diamonds  are  relation* 
sMps.  wid  ellipses  are  attributes  of  entities.  Note  that  there  are  many  different  conven¬ 
tions  used  in  entity-relationship  diagrams;  this  same  model  could  be  represented  in 
several  other  ways  using  difterent  notation. 


COST 


TME 


44 


MVfTBMU 


mOWlEIME  CENTCR  DATA  MANADEMENT 


www.compoterwor)d.com 


Data  Models 


DKKINn  ION 

A  data  model  is  a  plan  for  building  a  database.  The 
model  represents  data  conceptually,  the  way  the  user 
sees  it,  rather  than  how  computers  store  it.  Data  mod¬ 
els  focus  on  required  data  elements  and  associations; 
most  often  they  are  expressed  graphically  using  entity- 
relationship  diagrams.  On  a  more  abstract  level,  the 
term  is  also  used  in  describing  a  database’s  overall 
structure  —  e.g.,  a  relational  or  hierarchical  data  model. 
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IN  THE  REAL  WORLD,  we 
think  of  data  as  fkrts.  Hg* 
ures  and  other  bits  of 
knowledge.  Put  a  lot  of 
data  items  together  to  a  useful 
fbnn.  and  you  get  information 
—  maybe  even  totelligence. 

Often,  people  can  intuitively 
understand  a  given  piece  of 
data  in  isolation,  but  a  com* 
puter  can  never  do  so  without 
help.  In  computers,  we  store 
data  in  a  database  —  a  highly 

structured,  carefully  _ 

defined  and  rigidly 
formatted  collection 
of  records  —  so  that 
we  can  retrieve  it.  use 
it.  analyze  it  and  work 
with  it  to  run  our 
businesses. 

In  fact,  it  is  only  tlw  organ!* 
ration  of  a  database  that  gives 
meaning  and  utility  to  the  data 
inside  it  Without  that  organi¬ 
zation.  all  we  have  are  undif¬ 
ferentiated  ones  and  zeroes  — 
not  numbers,  not  letters  and 
certainly  not  kxKmIedge. 

Thus  a  critical  step  in  dau 
processing  is  the  creation  of  a 
plan  for  the  database  that's 
simple  enough  for  the  end 
user  to  undmtand,  yet  de¬ 
tailed  enough  to  let  the  data¬ 
base  designer  create  the  actual 
smicture  using  daubase  soft¬ 
ware.  We  call  this  conceptual 
plan  a  data  model,  tfaou^  we 
use  this  term  to  describe  two 


related  but  different  ideas. 

One,  which  we  can  also  call 
a  database  model  is  some¬ 
what  ^stract  in  nature  and 
refers  to  a  database's  overall 
structure,  or  type.  The  best- 
known  example  is  the  rela¬ 
tional  model  [QuickLink 
a3000]  used  by  Oracle.  DB2 
and  SQL  Server.  Others  in¬ 
clude  flat-file,  hierarchical 
network,  object,  semantic  and 
dimensional  models. 

The  second  type  of  data 

-  model  or  schema, 

takes  the  overall  struc¬ 
ture  of  one  of  the  stan¬ 
dard  database  models 
and  tailors  it  to  a  spe- 
dfic  application,  com¬ 
pany,  project  or  task. 
This  type  of  data  model  gets 
down  to  speciftc  data  items, 
including  their  names,  values, 
granularity  and  how  they  re¬ 
late  to  one  another. 

We  can  compare  these  data 
models  to  the  plans  for  a  new 
buildup  An  architect  designs 
different  types  of  buildings  — 
a  spons  arena  vs.  a  four-bed- 
room  bouse,  for  example  — 
usii^  quite  different  materials 
and  tediniques  (steel  girders 
vs.  wood  framing,  cranes  vs. 
ladders).  So.  toa  do  we  imple¬ 
ment  the  various  types  of  data¬ 
base  models  (say.  r^dooal  vs. 
object-oriented)  quite  differ¬ 
ently  on  a  computer. 

When  we  build  a  schema. 


however,  we're  working  at  a 
detailed,  nitty-gritty  level: 
it’s  more  like  consulting  an  in¬ 
terior  designer  than  an  archi¬ 
tect  The  architect  plans  for  a 
kitchen's  space,  wiring  and 
plumbing,  but  the  designer 
helps  decide  which  appliances 
to  tMiy,  how  to  group  li^ts, 
where  to  put  the  table  and 
chairs,  and  how  many  cabinets 
are  needed. 


What's  in  a  Model? 

To  illustrate  what  goes  into  a 
data  model  let's  assume  we're 
creating  a  very  simple  inven¬ 
tory  database  for  a  widget- 
buUding  assembly  line.  We 
need  to  know  the  followup 

■  \Mwtdatadow«lnckide? 
Parts  numbers  for  our  widget 
models,  the  subcomponents 
they're  made  from,  raw  mate¬ 
rials  and  parts  suppliers,  costs 
and  delivery  times,  inventory 
on  hand  and  assembly  time. 

■  How  do  data  etemants  relate 
to  one  atMittwr?  Some  suppliers 
deliver  faster  than  others  but 
charge  more. 

■  What  pfooewas.  operations 
and  (ransfennattonB  miidd  wo 
need  to  do?  Calculate  total  cost 
per  widget. 

■  What  kinds  of  questions  wS 
we  nasd  to  answsr?  How  much 
are  we  paying  for  parts?  How 
many  widgets  can  we  produce 
next  week? 

■  WhslothsrbuBinessprocaas- 
as  or  actfvMss  migM  use  Mi  data? 

Accounts  payable,  produa 
planning  and  sales. 

While  building  this  data¬ 
base,  our  data  model  proceeds 
from  conceptual  model  to  log¬ 
ical  design  to  physical  imple¬ 
mentation: 

1.  Interview  business  users. 

2.  Define  the  data  elements 


and  their  relationships. 

3.  Create  a  data  model. 

4.  Select  the  database  type 
and  specific  database  manage¬ 
ment  software  (DBMS);  often, 
it  will  be  whatever  you're  al¬ 
ready  using. 

5.  Map  data-model  elements 
to  tables,  and  normalize  them. 

6.  Create  data  type  defini¬ 
tions  and  a  database  structure. 

7.  Design  the  application. 

Creating  a  data  model  takes 

a  different  mind-set  than  appli¬ 
cation  development  does.  In 
Steps  1  throu^  3,  at  the  con¬ 
ceptual  level  we  must  fftink 
about  what  we're  dealing  with. 
In  Steps  4  through  6.  dte  focus 
shifts  to  how  we  in^ilement 
the  model  Step  S  marks  the 
transitioa  to  logical  design  and 
Step  6  to  physical  design,  both 
of  which  needed  to  meet  our 
DBMS’s  specific  requirements. 
In  Step  7,  prt^rammers  imple¬ 
ment  the  procedures  that  use 
and  manipulate  the  data.  I 
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Until  now,  the  promise  of 
a  truly  wireless  workforce 
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Data  Architects 

How  to  land  a  job  and  keep  your  skills  fresh  in  the 
field  of  data  architecture.  By  Stacy  Collett 


At  recruiting  firm  Emerg* 
ing  Technology  Services  loc. 
in  Waconia.  Mtniu  recrruter 
Jenni  Laraway  sifts  through 
a  swelling  pile  of 
resume  looking  for  the 
ri^t  blend  of  data  ware¬ 
housing  and  business  skills. 

The  position  to  be  filled  is 
"data  architect."  and  25  of  her  clients 
need  one. 

Though  she's  not  short  on  talented 
job  seekers,  70%  of  her  clients  want 
candidates  with  enterprise-level  busi¬ 
ness  experience,  not  just  data  model¬ 
ing  for  the  human  resources  depart¬ 
ment.  "That's  the  skill  Fro  having  the 
most  diftkulty  finding,"  Laraway  says. 

Data  architects  are  a  rare  breed, 
according  to  Dave  Wells,  director  of 
education  at  The  Data  Warehousing 
Institute,  a  Seattle-based  membership 
group  for  business  intelli^ncc  train¬ 
ing  and  education.  They  are  senior- 


level  professionals  with  seven  to  eight 
years'  experience  who  can  bring  to¬ 
gether  data  from  all  enterprise  sys¬ 
tems  and  pul  it  into  a  package  that's 
valuable  to  all  pans  of 
the  enterprise.  Demand 
for  qualified  candidates 
has  grown  30%  to  40% 
in  the  past  two  years  as 
business  intelligence  has  become 
more  vital  to  business  growth. 

SIdtts 

Welb  says  data  architects  need  to  be 
skilled  leaders  and  mediators  between 
the  database  staff  and  business  end 
users.  '‘This  job  requires  the  ability  to 
understand  business  requirements, 
translate  them  into  technical  designs, 
deal  with  complexities  of  integration 
of  disparate  systems,  investigate  the 
quality  of  data  in  those  systems  and 
put  it  all  together  so  it  can  be  accessed, 
manipulated  and  turned  into  informa¬ 


tion,"  Wells  explains.  "It  takes  a  more 
deep-seated  understanding  of  the  busi¬ 
ness"  than  database  administrator  jobs 
or  other  data  warehousing  positions, 
he  adds. 

Jean  Wells,  a  data  architect  at  the 
University  of  Washington  in  Seattle, 
says  having  a  wealth  of  technical  expe¬ 
rience  is  OK.  as  long  as  the  architect  Is 
also  a  good  listener. 

"That's  probably  the  most  critical 
thing  that  t  do.  When  you  sit  with 
upper-level  administrators,  sometimes 
middle  management,  sometimes  cleri¬ 
cal  people,  you  need  to  lake  their  view¬ 
points.  then  sift  through  them"  to  come 
up  with  the  best  data  design,  she  says. 

Training 

“Most  of  my  clients  don't  require  certi¬ 
fication  {in  job  candidates],"  Laraway 
sa3rs.  But  they're  looking  for  candidates 
with  solid  database  skills  in  DB2,  Ora¬ 
cle  and  Teradata.  and  experience  in  ex¬ 


tract.  transform  and  load  (ETL)  tools 
such  as  Ascential  Software's  DataStage 
and  Informatica  Corp.'s  PowerCenter 
RT.  Skills  in  modeling,  query  and  re¬ 
porting  tools  from  Computer  Associ¬ 
ates  International  Inc..  Cognos  Inc.  and 
MicroStrategy  Inc.  are  also  in  demand. 

Eighty-six  percen]  of  data  architects 
have  a  technical  background,  accord¬ 
ing  to  a  2003  Data  Warehousing  Insti¬ 
tute  siuvey  of 687  U.S.-based  data 
warehousing  professionals.  Only  12% 
come  from  a  business  background,  and 
2%  from  academia. 

Since  data  architect  positions  are 
relatively  new,  there  aren't  many  certi¬ 
fication  programs  that  measure  com¬ 
petency,  according  to  Data  Warehous¬ 
ing  Institute’s  Wells,  thoi^  the  ofga- 
nizatioo  is  investigating  certification 
exams  in  the  future. 

Salary  and  Pefks 

Nationally,  data  architects  earn  $75,000 
to  $120,000.  according  to  Laraway,  with 
the  highest  salaries  in  the  Northeast 
and  on  the  West  Coast,  and  the  lowest 
in  the  mid-Atlantic  states. 

For  the  right  candidate,  roost  compa¬ 
nies  offer  signing  bonuses  and  perfor¬ 
mance  bonuses  of  at  least  10%  to  15%. 
Laraway  says.  Many  companies  help 
with  relocation,  toa  "I’m  working  on  a 
director  of  data  warehousing  search 
where  the  performance  bonus  is  25% 
to  44%,"  she  says.  That’s  amazing!"  I 


CAREERS 


Employee  Spotlight 

■  HMno  managar  Tom  BuRkisU 

■  TMa:  BusaresS'inteHigence  practice  manager  for  the 
Wbeonsri  region. 

■  Company:  Greenbrier  &  Russel  Inc.  in  SchauntNirg. 
a  privately  held  ff  c»nsutling  firm  that  speci^^ 

business  inteigence.  enterprise  solutions  and  advisory 
services.  It  also  otters  corporate  Iraning  services  in  new 
technologies. 

■  Curranl  IT  staff:  379  IT  professionals:  55  data  ware¬ 
house  professionais  in  Wisconsin. 

■  Now  Mfeiag:  Greenbrier  &  Russel  is  looking  for  a 
senior  <»nsultant  to  build  the  technic^  architecture  for 
a  large  enlerprismMde  data  warehouse.  Btfzinskj  says. 
This  person  must  have  knowfedge  of  the  ^  process, 
various  data  models  and  the  tools  to  build  these  rnodels. 

Beyond  tmderstandmg  data  warehousing  axKigit^ 
position  requves  business  knowledge. 'They  need  an  ufh 
deistandng  of  the  various  ways  data  weretiousing  is  used 
for  linarKaal  vs.  rrarfeling  applcatiors^ 

This  person  wd  also  be  responsible  for  managing  a 
learn  of  developers  through  the  construdion.  testing  and 
implernenlation  pluees  of  the  projects,  the  togic^ 
physical  database  design,  and  the  irnpiernentato^^ 
wel  as  for  defnng  and  impfementing  approaches  k)  load 


and  extract  data  from  the  database. 

Buranslu  6  kKiking  for  candidales  with  at  least 
five  years'  ecpenence  in  data  warehouse  implemen¬ 
tations,  though  rrnst  of  Greenbrier  &  Russel's  data 
warehouse  employees  have  10  years' eiqierience. 

Other  desired  skills  include  designing  and  opti¬ 
mizing  large  multiterabyte  data  warehouses.  Ora¬ 
cle,  Server  or  OBI  HI  tools  such  as  Infor¬ 
matica.  Micrcsolt  Data  Transformation  Services. 
DataStage  orOracle  Warehouse  ^Ider.  The 
salary  wi  range  from  S65.000  to  $100,000. 
dep^ing  on  experience. 

■  Reason  for  the  opening:  Greenbrier  &  Russel's 
data  warehousing  business  grew  67%  to  $5.5 
million  iri  Wisconsin  in  2002.  This  year,  the  firm 
expects  business  to  grow  30%.  "We  have  several 
pwxfing  dleni  projects  starting,  but  we  also  do 
hire  for  the  berich.*  Burzrnski  explains.  "Right  now. 
as  soon  as  we  hire  to  the  bench,  within  a  week 
they're  placed  somewhere." 

Gurzindd  says  the  ideal  candidate  Is  a  senior  consul¬ 
tant  with  business  knowledge  as  well  as  IT  experience 
building  an  enterprisewide  data  warehouse.  'This  person 
6  a  co-project  rrtanager  who  will  work  closely  with  the 
project  rnanager  to  run  a  big  part  of  the  projed.  About 
60%  of  this  (pendingl  pre^  is  the  ETL  part  ot  It” 

F^rsonality  »id  leadership  also  top  Bur^nskfs  list  ol 


requirernents.''Peoplewhoareriolafraidtotaketheiniba- 
tlve"  to  help  business  users  improve  processes  do  wel  in 
this  position,  he  says.  They  also  rnusl  have  good  Kstening 
and  guidance  skis.  "F^ople  wfho  can  rnentor  junior  people 
and  find  a  balance  between  very  detailed  code  and  also 
seeing  the  big  picture  -  that's  tlw  haid^  ttvng  to  find." 

-C(^iS3frBelancemitefinSt9f1ino.Va. 
COfHaclheratstco6ett9aol.com. 


SPECIAL  ADVERTISING  SECTION 


Looking  Deeper, 
Running  Stronger 

An  intelligent  infrastructure  maximizes  network  uptime, 
ensuring  around-the-clock  access  and  productivity. 

When  a  network  goes  down,  it  doesn’t  go  down  alone.  Productivity,  profitability,  and  con¬ 
fidence  fall  ri^t  along  with  it.  Professional  and  corporate  reputations  can  get  dragged 
down,  too. 

No  wonder  the  majority  of  businesses  that  depend  on  networks  depend  on  Cisco  Systems. 
An  intelligent  network  infrastructure  based  on  Cisco  switches  and  routers  provides  the 
highest  levels  of  availability,  so  technical  problems  don’t  get  in  the  way  of  business  goals. 

All  Cisco  switches  and  routers  are  designed  to  keep  minor  issues  from  turning  into 
major  ones.  Redundant  hardware  designs,  for  instance,  ensure  that  if  one  processor; 
supervisor  engine,  or  power  supply  unexpectedly  fails,  another  is  there  to  take  its  place. 
Another  example  is  inline  power,  which  can  be  used  to  run  IP  phones  and  wireless 
access  points,  ensuring  all  lines  of  communication  stay  open  in  the  event  of  a  power 
outage.  Additional  features,  such  as  hot-swappable  line  cards  and  network  modules, 
make  it  possible  to  upgrade  and  repair  devices  without  taking  them  out  of  service. 

Several  new  features  collectively  known  as  Globally  Resilient  IP,  or  GRIP,  were  recently 
made  available  as  a  standard  software  upgrade.  GRIP  protects  not  only  future  produc¬ 
tivity  levels,  but  the  value  of  past  investments,  dramatically  improving  the  fault  tolerance 
of  existing  networks. 

And  because  Cisco  switches  and  routers  are  bound  together  by  Cisco  lOS*  Software,  they 
strengthen  and  unify  every  segment  of  the  network,  from  the  enterprise  access  layer 
through  the  backbone  to  the  outermost  reaches  of  the  WAN.  A  Cisco  intelligent  infra¬ 
structure  also  provides  a  wealth  of  information  on  the  health  of  your  critical  business 
systems,  identifying  deteriorating  conditions  before  they  get  out  of  hand. 

The  end  result  is  a  more  reliable  and  manageable  foundation  for  all  your  network-enabled 
applications.  And  when  network  availability  goes  up,  it’s  a  good  bet  productivity  and 
profitability  won’t  be  far  behind. 


Cisco  intefiigent  switches  and  routers  offer  multiple 
layers  of  redundancy  and  resdiency.  enabling  business 
networics  to  overcome  unexpected  fariures.  and  even 
prevent  proUems  from  occurring  in  toe  first  place. 
Cisco  offers; 

IWiaUe  haritwara  designs;  Redundant  power  supplies, 
fan  trays,  docks,  route  processors,  switch  fabrics,  and 
supervisor  engines  allow  toe  network  to  recover  from 
otherwise  crippling  failures  without  any  dtsrupbon  to 
network  services.  Passive  backplanes  with  no  active 
components  Amplify  repairs  and  upgrades.  Hot-swap- 
pabie  line  cards  arid  network  modules  allow  changes 
to  be  made  without  taking  a  device  out  of  service. 

Cisco  GMP faaduei:  Building  on  past  innovabons  such 
as  Oial-on-Demand  Routtog  and  Hot  Standby  Router 
Protocol  new  features  such  as  Stateful  Network 
Address  Translation  (NAT).  Gateway  Load-Balancing 
Protocol  and  Cisco  Nonstop  Forwarding  with  Stateful 
Switchover  minimize  toe  impact  of  network  falures, 
often  rendering  them  imperceptible  to  users. 
Spomiot-Tme  Protocol  inhoocamaidi:  Exclusive 
features  such  as  Backbone  UplinkFasL  and 
PoriFest  decrease  recovery  times  after  faihiras; 
aOZIw  Rapid  Spanning-Tree  Protocol  accelerates 
toe  restoration  of  uplink  connectivity;  802.1$  Multiple 
Spanning-Tree  Protocol  enables  load  balanctog  and 
improves  fault  tolerance  by  providing  multiple  data 
forwardtog  paths. 


Cisco  sugftoft  torwcoK  Network  Availability 
Improvement  Support  (NAIS)  includes  availability 
assessments,  benchmarking,  and  an  imprDvement 
process  to  increase  network  availability  and  resilioncy. 


Products.  People. 
Problems  solved. 

From  servers  to  service,  Dell  has  the  solution. 


XEON 


Dell  I  Small  and  Medium  Business 

Your  business  has  unique  needs.  It  deserves  a  unique  solution.  Prom  Power£dge''  servers  featuring  Intel^Xeon' processors  to 
PowerVault'’  Storage  and  PowerConnect'  Network  Switches,  we  offer  tailored  solutions  to  meet  your  business  needs.  And  of  course 
it's  Dell,  so  you  know  you’re  getting  the  latest  technology.  But  that's  only  half  of  the  story.  Dell  offers  consulting  services  that  range 
from  deployment  and  installation  to  training  and  certification.  All  from  one  source.  And  everything  is  backed  by  thousands  of  service 
and  support  people  at  your  beck  and  call,  on-site,  online  and  on  the  phone.  Suddenly  your  IT  infrastructure  doesn’t  seem  so  daunting. 
Let  Dell's  onenDf-a-kind  solutions  put  you  on  the  path  to  one-of-a-kind  success. 

Dell  Rated  #1  in  Intel-Based  Server  Satisfaction 

Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 
Third  Quarter  2002 
-December  2002 


Catt  M-F  7e-lp  Sm  ta-S* .  CT 

Pricing,  scecihcatinj.  availatnl-lv  and  rems  or  otter  may  cfwnge  nFirnwl  notice  Tares  and  shipcnig  citaiget  eC'a.  and  vary  and  not  srAjeci  to  discounts  U  S  Oeli  Small  Business  new  purchases  only  Dell  camot  Be  held  responsible  tor  errors  in  typoqtaohy  nr  phorography 
’Tha  device  has  not  been  aperwefl  by  the  federal  ConviHmicahofts  Cummissicn  for  use  m  a  lesiJeniiai  eiwfonmeni  This  device  is  not  and  may  not  be  otieiert  for  sate  or  lease  or  soW  or  leased  for  use  m  a  resKtentiai  envitonment  until  the  approval  of  me  fCC  has  been  obtained 
Satvres  may  be  provNledni  third  tarty  Technoan  will  be  AspaTched  following  phone  Dased  noutuesnooling  Subfect  to  pans  availabil'h.  geographical  resmctions  and  terms  of  service  contract  Service  tuning  dependent  upon  time  of  day  call  placed  to  Dell  US  only  'Ivlonlhh  payment  passd 
on  40-nioDlh  60  Days  Same-Cash-Ouciluar  with  46  payments  at  9  99%  interest  rate  Your  interest  rate  and  montnly  payment  may  be  same  or  haher.  depending  on  yotv  c.'edirworthiness  It  you  do  not  pay  the  Balance  within  60  days  of  die  uiekloan  Commencement  Date  Iwhich  is  five  days 
ahet  ptottuci  «r«SI.  nleresi  will  accrue  divng  those  fast  60  days  and  a  documentatioh  fee  may  apply  OmR  VARIES  BY  CREDITWORTHINESS  9  CUSTOMER  AS  DETERAfiNEO  BY  LENDER  Mimmum  (isuaciion  sue  of  SSOO  required  Maiimum  aggregate  tinarviad  amount  for  the  paperless 


Remote  Office  &  File/Print  Sharing  Web  Server 


PowerEdge"  GOOSC  Server 


•  imsl*  Pemium*  4  Processor  ei  1  IOGKj 

•  I78M8  266MH]  ECC  OOP  SDRAM 

•  Upgradeatfe  to  4G8  of  Metnorv 

•  36GB  (*0K  PPM)  SCSI  Herr)  Onve  (Up  to  t46GB  HD  Avail ) 

•  OpgradeatM  to  5S4G6  of  'niamai  Hard  Drive  Storage 

•  EmfieOOed  Intel*  TO  GigaW  NtC 

•  Five  PCI  Espandability  SWs  |4^/33MHi.  t  -32/33MMt( 

•  EmCedded  Systems  Mgrm  Devices  for  Error  Detection 

•  I  Ti  Z4i7  Dedicated  Server  Phone  Tech  Support 

•  1-Yr  Nen  Business  Day  Oi'-Site  Serves 


%49' 


PowerEdge"  1650  Server 

HitMy  AeMlitle  1U  lUefc-Opawised  Sereer 

•  Intel*  Pentium'  ill  Processor  at  1  13GHj 

•  Dual  Processor  Capatw  (Up  to  t  AOGHzl 

•  3S6MG  1 33MH{  ECC  SDRAM  (Up  to  AGBI 

•  36G6  UOK  PPMI  SCSI  Hard  Drive  lUp  to  14669  HO  Ava>i  i 

•  Upgradeable  to  438GB  of  internal  Hard  Drive  Storage 

•  Dtoi-EmCMded  mter  TO  GigaCai'  NfCs 

•  Two  PCI  Eipandaiiilitv  Slots  (2-64^6MfUi 

•  Hot-Swap  Redundant  Coohng  Fans 

•  3-Yr  Men  Busmess  Day  Qn-Site  Service 
«  Smell  Business  ^emg 


$1299. 


Database 


PowerEdge*  2K0  Server 

2U  tcelafcle  Reck  Senret  wM  Higk  ftecMsief  Power 

•  Intel'  Xeon*  Processor  at  24lXiH; 

•  Dual  Intel'  Xeon*  Processor  Capable  (Up  to  2  BOGrU' 

•  2SSM6  200MH1  ECC  DDP  SDRAM  (Up  to  6G8> 

•  36G6  nOK  RPMl  SCSI  Hard  Dnw  lUp  to  14666  hD  A.ai 

•  Upgradeable  to  73066  of  internal  Hard  Drive  Storage 

•  Duai-EmOeddedGigaOir  MCs 

•  Dual-Charmei  Integrated  SCSI  Controller 

•  Aerva  ID  From  Betei  for  Monitoring  System  Healtn 

•  3-Yr  Mert  Business  Day  On-Site  Service 

•  Small  Business  Pricing 


$1799^ 


•  PewetCeeeert  IBIi  K-Nei  EtteraaS  SwiKh.  add  S99 

•  PVIMT-TK  tBHiBel  Tap#  Back-Up.  aM  S199 


Siia  SMVf.  aid  S199 


idI«hX8S«Mick.addSS49 


«  PewwCcMMct  adr  kteeaged  4i*2fiB  SwiKk.  add  S999 
•  PewwVMum-UOSd  (Oeel  Dnva  Ci«eMal 
Back-Up.  add  S1499 


The  answers  you  need.  Easy  as 


D0LL 


Click  www.dell.com/bizsolutions  Call  1-877-351-3355 


GO 


“ceedW.OOO  H  your  orte  ftttee^$25A  a  Dell  Financial  Services  rep  wc‘i  contact  you  tr  process  youi  ducumenlalKm  Taves.  lees  and  stvpprigcnerge!  are  e>tra  and  may  vary  Hcva-di^  past  orders  o' r-naoumo  Dwaiuan  a^anoec 
by  CIT  Bar*  to  Sinall  Business  CuStonwrswidiawavedcradir^'this^indiMles  compliance  vv^lUt  standard  802  Sab  lor  Gigabit  Frhernei  anflSoesrWo)nn<aBa:tuaiaoeiaiina»eeao''6B/iac  For  high  speed  ransmisjum  emuwet-on’ toaGi^W  ttfenw;  ■  dTld  Weskty 


server  and  networtinfrastncture  IS  required  Deil.Ov 


vru  subsidiaries  m  the  United  Stales  and  other  cotiitnes  r'2X3  Oetl  Comouier  Corsnralion  All  nghu  reserved 
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The  Next 
Chapter 

Predictions:  Business-intelligence 
tools  will  put  middle  managers  out  of 
work  And  e-mail  will  be  mined  for 
valuable  information. 


■  TOTAL  AUTOMATKW 

in  10  yean,  vimiaUy  all  operational 
decision-niaking  within  the  enterprise 
will  be  automated,  thus  eliminating 
the  need  for  more  than  6S%  of  the 
middle  man^ement  workforce.  Today, 
the  most  innovative  business-intelli¬ 
gence  technology  is  able  to  recom¬ 
mend  the  optimal  course  of  action 
based  on  business  rules,  representing 
the  first  step  in  automated  decision¬ 
making.  Tomorrow,  automated  busi¬ 
ness  models  and  decision-making 
processes  will  optimize  goal-setting 
and  performance. 

■  Scorr  Wiener,  chief  technology  officer. 
Certive  Corp..  Redwood  City,  Calif. 

mpftEocrmmxmcs 

Business-intelligence  technology  will 
have  a  big  impact  in  the  medic^  pro¬ 
fession.  In  the  next  five  to  10  years,  it 
will  be  possible  to  determine  disease 
susceptibility  in  humans  and  create 
customized  medications  for  individual 
patients  based  on  their  genetic  make¬ 
up.  And  by  combining  data  analytics 
with  geographic  information  systems, 
it  will  be  possible  to  predict  and  visu¬ 
alize  disease  outbreaks  across  the 
globe. 

■  Don  Hatcher,  vice  president  of  technol¬ 
ogy  strategy,  and  Anne  MiBey,  director 

anaiyrica/  srretfegy.  SA5  Insrirure  Inc.. 
Cary.N.C 

■  aiEmMO  WITH  PORTALS 
Organizatioits  usually  view  portals  and 
business  intelligence  separately,  but  in 
the  next  few  years,  the  two  will  be¬ 
come  integrated.  These  technologies 


can  shrink  the  amount  of  data  that  has 
CO  be  analyzed  to  make  a  decision,  in 
an  era  when  people  have  less  time  and 
must  focus  on  the  decision  criteria  chat 
cnily  make  a  difference. 

■  Shari  A.  Rogalski,  associate  partner. 
Accenture  Ltd.,  Minneapolis 

■  MINING  THE  E-MAIL  PILE 

Companies  are  just  starting  to  realize 
the  valuable  knowledge  and  inteUectu- 
al  property  that  can  be  found  in  their 
e-mail  archives.  Over  the  next  five  to 
10  years,  those  archives  will  become 
fully  indexed,  searchable,  rich  data¬ 
bases  that  provide  insights  about  busi¬ 
ness  issues,  employees  and  where 
competitive  advantage  resides.  For 
example,  a  CEO  could  quickly  find  out 
what's  going  on  in  a  plant  in  Mexico, 
without  ever  leaving  his  office  at  head¬ 
quarters. 

■  Greg  Amette.  founder  and  chief 
technology  t^cer,  IntelliReach  Corp.. 
Dedham,  Mass. 

■  LDCATKM  MATTERS 

Over  the  next  two  years,  companies 
will  realize  that  getting  a  return  on 
their  customer  relationship  manage¬ 
ment  investments  will  require  combin¬ 
ing  information  about  the  location  of 
competitors,  the  location  of  customers, 
the  demographics  and  purchase  behav¬ 
ior  characteristics  in  different  ne^- 
borhoods.  and  the  location  of  business 
assets  —  whether  they're  stores,  cell 
towers  or  kiosks. 

■  Kevin  Antram.  vice  president  and  gen¬ 
eral  manager  of  the  CRM  business  unit. 
Maplnfo  Corp.,  Troy.  N.Y. 


■  VENDORS  CONSOUOATE 

By  the  end  of  2004,  the  business-intel¬ 
ligence  market  will  morph  from  its 
current  makeup  of  way-too-many 
tools  vendors  into  a  smaller  universe 
of  best-of-breed,  industry-focused 
vendors.  IBM  will  compete  more  vig¬ 
orously  with  Microsoft's  analytics  of¬ 
ferings.  probably  by  acquiring  an  es¬ 
tablished  vendor  like  Crystal 
Decisions  Inc.  or  Cognos  Inc.  More 
than  two-thirds  of  the  business- 
intellii^Dce  tool  vendors  in  business 
today  will  evaporate  through  acquisi¬ 
tions  and  closures. 

■  Mike  HenneK  president  and  CEO. 
Silvan  Software  Inc.,  Westmont,  Hi 

■  SELF-HEAUN6  WAREHOUSE 

The  greatest  struggle  with  business 
intelligence  is  the  continuous  need  to 
ensure  that  the  lowest  levels  of  data 
used  in  the  summarized  analytics  and 
dashboards  remain  clean,  consistent 
and  relevant.  We  need  the  data  ware¬ 
house  to  have  a  self-healing  capability 
to  automatically  sense,  detect,  notify 
and  repair  (when  possible)  any  incor¬ 
rect.  missing  or  unreconciled  data 
elements.  But  it  will  take  at  least  two 
or  three  years  for  that  to  happen. 

■  Scon  Hicor,  CIO.  Maxtor  Corp., 
Longmont.  Colo. 

■  DASHBOARDS  RULE 

By  2006.  most  managers  will  make 
daily  decisions  from  an  on-screen 
intelligence  dashboard.  This  will  be 
driven  by  the  need  for  greater  produc¬ 
tivity.  the  ffenetic  pace  at  which  busi¬ 
ness  decisions  must  be  made  and  an 
extremely  overworked  and  stream¬ 


lined  corporate  workforce.  This  sort 
of  business  intelligence  will  not  only 
change  bow  managers  make  decisions, 
but  abo  how  corporations  and  execu¬ 
tives  are  measured. 

■  Brian  Gentile,  executive  vice  president. 
Brio  Software  Inc..  Santa  Clara,  Calif 

■  FRAUOBUSTERS 

In  about  two  years.  we'U  be  able  to 
catch  fraudulent  activity  nationally 
and  internationally  in  real  time.  By 
analyzing  historical  fraud  activity  and 
tracking  present  infractions,  we  can 
uncover  the  illegal  transport  of  people, 
goods  and  money,  as  countries  share 
more  and  more  data. 

■  Bon  Swi/).  %^ce  president  ofTeradata, 
a  division  of  NCR  Corp.,  Dayton.  Ohio 

■  THE  AUTOBOTS  ARE  COMING 

I  expect  data  mining  "autobots"  to  be 
included  in  analytic  software  within 
five  years,  a  critical  step  for  improvii^ 
the  utility  of  data  mining  technology. 
These  automated  toob  for  finding  im¬ 
portant  and  nonobvious  data  relation¬ 
ships  will  reduce  or  eliminate  the  need 
for  specialized  skills  to  perform  data 
mining. 

■  Richard  Skriletz,  national  managing 
princ^oi  ybr  business  intelligence, 

RCXJ  Information  Technology  Inc., 
Edison.  N.J. 
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and  cartiliable  data  quality: 

^  IMcUJnklTOM 


Automated  Job  Profiling 
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The  UMed  Mabons  Relief  and  Works  Agency  for  Paiesime 
Refugees  in  the  Near  East  (UNf?WA)  is  seeking  a  qualified 
protessaonal  for  the  position  of: 

Project  Manager 
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level  user  requremenis  dooimeni. 
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FurVwr  siformattori  about  the  oul- 
slsndsig  opponunity  and  how  to 
apply  are  available  from 
www.un.orgfunrwa/emp.htail. 
AppIleaBons  etoee  2S  April  2003. 
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Continued  from  page  1 

RnanceLaw 


at  some  companies.  “We're 
looking  at  a  whole  series  of 
governance  and  compliance 
issues  related  to  IT  for  Sar* 
banesOxley.”  said 
David  Klementz, 
chief  financial  offi¬ 
cer  at  Progress  Rail 
Services  Corp.  in  Al¬ 
bertville.  Ala. 

For  example,  the 
act  requires  CEOs 
and  chief  financial 
ofllcers  to  attest  that 
annual  and  quarterly 
financial  reports 
contain  no  material 
errors  or  omissions. 

Jonathan  Kaipofi;  a  finance 
professor  at  the  University  of 
Washington  in  Seattle,  said  ex¬ 
ecutives  whose  necks  are  now 
on  the  line  at  report-signing 
time  will  demand  systems  that 
are  more  timely  and  accurate. 
“What  rm  hearing  quite  a  bit 
is  that  Arms  can  use  Sarbanes- 
Oxley  as  an  impetus  to  com¬ 
pletely  overhaul  their  control, 
monitoring  and  reporting 
processes."  Karpoff  said. 

That's  what's  ^ing  on  at 
Progress  Rail  The  supplier  of 
railway  products  and  services 
recently  scrapped  a  combina¬ 
tion  of  manual  procedures  and 
spreadsheets  for  consolidating 
the  books  of  its  subsidiaries 
and  installed  a  set  of  financial- 
data  integration  and  analysis 
software  from  SAS  Institute 
Inc.  in  Cary.  N.C. 

Progress  Rail  is  also  using 
SAS  Balanced  Scorecard,  a 
tool  that  gives  Klementz  near- 
real-time  fmancial-perfor- 
mance  metrics.  That  could  tip 
him  off  to  business  problems 
that  might  otherwise  go  un¬ 
detected  until  a  quarterly  au¬ 
dit  is  done,  he  said. 

Those  steps,  which  cost 
about  $500,000,  are  just  the 
beginning.  Klementz  said  Sar- 
banes-Oxley  and  other  new 
SEC  regulations  are  prompt¬ 
ing  Progress  Rail  to  do  a  top- 


to-bottom  examination  of  oth¬ 
er  systems  that  can  affect  its 
financial  results,  such  as  in¬ 
ventory  control.  In  addition, 
the  company  faces  higher  la¬ 
bor  costs. 

“We're  greatly  increasing  IT 
staff  in  order  to  make  sure  I'm 
comfortable  that  systems  and 
controls  are  in 
place."  Klementz 
said,  adding  that  he's 
also  hiring  IT  and 
regulatory-compli- 
ance  consultants. 

Another  key  provi¬ 
sion  in  Sarbanes-Ox- 
ley  stipulates  that 
outside  auditors 
must  examine  and 
verify  the  effective¬ 
ness  of  a  company's 
internal  financial 
controls.  "Some  aspects  of  that 
are  typical  [information  sys¬ 
tems  issues],  such  as  access 
controls,  and  we'U  have  to  look 
at  those  thii^  a  little  more 
strenuously,’'  said  Irving  Tyler, 


CIO  at  Quaker  Chemical  Corp. 
in  Conshohocken.  Pa. 

Tyler  warned  other  IT  man¬ 
agers  to  brace  themselves  for 
tough  requests  from  auditors. 
"I  remember  an  auditor  once 
recommending  that  we  have 
28-digit  alphanumeric  pass¬ 
words  that  changed  monthly,'' 
he  said.  Things  like  that, 
which  maybe  in  the  past  you 
decided  not  to  pursue  because 
you  didn't  see  the  justification, 
you  might  have  to  be  more 
aware  of  now." 

Some  companies  hope  to 
avoid  many  compliance  prob¬ 
lems  by  outsourcing  manage¬ 
ment  of  the  issue.  Hibernia 
Coq>.  in  New  Orleans  out¬ 
sources  all  of  hs  core  financial 
systems.  David  Harrison,  the 
bank's  audit  director,  said  he's 
relying  on  the  outsourcer's  le¬ 
gal  staff  to  ensure  that  the  sys¬ 
tems  conqily  wiffi  laws  like 
Sarbanes-Oxley. 

But  Harrison  acknowledged 
that  the  new  law  raises  ques¬ 


tions  he  has  to  deal  with,  such 
as  how  to  satisfy  a  requirement 
that  corporate  whistle-blowers 
be  able  to  communicate  confi¬ 
dentially  with  the  company's 
audit  committee.  "I  could  set 
up  telephone  reporting  or  in¬ 
tranet  reporting,  but  employ¬ 
ees  may  feel  that  neither  of 


these  provides  sufficient  pri¬ 
vacy."  he  said.  “We  haven't  de¬ 
cided  one  way  or  the  other."  » 
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GEIS  to  Centralize  Data  for 
Product  Design,  Manukicturing 


Looks  to  cut  costs,  improve  efficiencies 


■v  JAIKUIUUI  VIJAVAN 

GE  Industrial  Systems  (GEIS). 
a  S5  billion  subsidiary  of  Gen¬ 
eral  Electric  Ox,  is  imple- 
roentiog  a  major  product  life- 
cycle  management 
(PLM)  project  that 
it  hopes  will  reduce 
product  develop¬ 
ment  time,  improve 
supply  chain  efficiency  and 
cut  costs. 

The  company  last  week  an¬ 
nounced  that  it's  using  PLM 
technology  from  MatrixOne 
Inc.  in  Watford.  Mass.,  to  de¬ 
velop  a  collaborative  environ¬ 
ment  for  planning,  develop¬ 
ment.  sourcing  and  program 
management. 

When  the  project  is  folly 
implemented  in  about  two 
years,  more  than  10.()00  GEIS 


employees  worldwide  will  be 
able  to  log  onto  a  central  por¬ 
tal  site  to  collaborate  on  a  va¬ 
riety  of  activities. 

There  are  several  business 
issues  that  we  are 
trying  to  address," 
said  Eric  Reed,  man- 
of  the  My 
Woriq^lace  portal 
site  at  PlainvUle.  Cona -based 
GEIS.  Centralizing  the  millions 
of  engineering,  manufocturing. 
marketing  and  project  manage¬ 
ment  documents  associated 
with  the  products  GEIS  builds, 
and  making  the  repository  ac¬ 
cessible  from  anywhere  via  the 
portaL  will  give  the  company 
greater  flexibUiry  in  wh<^  it 
designs  and  builds  systems, 
Reed  said.  Eventually,  the  envi¬ 
ronment  will  also  be  linked 


with  suppliers,  he  added. 

Return  on  investment  will 
come  through  faster  product 
development  times  and 
greater  efficiency.  Reed  said, 
declining  to  elaborate  on  the 
savings.  The  PLM  system  will 
allow  for  closer  coibboratton 
with  GEIS  suppliers,  which 
can  then  be  more  directly  in¬ 
volved  in  the  product  develop¬ 
ment  process,  he  added. 

The  project  hasn't  been 
without  its  hurdles.  For  in¬ 
stance,  migrating  nearly  IS 
million  product-related  docu¬ 
ments  f^m  legacy  systems 
into  the  MatrixOne  environ¬ 
ment  has  been  a  time-consum¬ 
ing  task.  Reed  said.  Meeting 
the  specialized  document 
management  requirements  of 
the  engineering  community 
was  especially  challenging,  as 
was  getting  user  buy-in  during 


I  the  early  stages  when  there 
'  was  little  immediate  benefit  to 
demonstrate,  he  added. 

A  growing  number  of  com¬ 
panies  are  looking  into  such 
PLM  capabilities,  said  John 
Moore,  an  analyst  at  ARC  Ad¬ 
visory  Group  Inc.  in  Dedham. 
Mass.  "But  we  are  not  seeing 
quite  as  hig^  an  adoption  as  we 
had  expected,"  Moore  said.  Part 
of  the  problem  is  the  complexi¬ 
ty  involved  in  rolling  out  a  PLM 
cap^ility,  be  said.  Large  com¬ 
panies  like  GEIS  with  highly 
structured  business  processes 
stand  a  better  chance  of  imple¬ 
menting  PLM  compared  to 
those  that  don't,  he  added. 

The  customization  involved 
in  iniegniion  functions  as  var¬ 
ied  as  marketing,  design  and 
manufacturing  groups  can 
also  be  a  huge  challenge. 
Moore  said.  "PLM  can  also  be 
somewhat  of  a  difficult  sell  at 
this  dme”  because  of  the  cost 
associated  with  such  projects, 
be  added. 

GEIS  declined  to  disclose 
the  cost  of  its  project,  k 
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Rnance  Law 


at  some  companies.  “We'rc 
looking  at  a  whole  series  of 
governance  and  compliance 
issues  related  to  IT  for  Sar* 
bancs-Oxley.”  said 
David  Klemcntz. 
chief  financial  offi¬ 
cer  at  Progress  Rail 
Services  Corp.  in  Al¬ 
bertville,  Ala. 

For  example,  the 
act  requires  CEOs 
and  chief  financial 
officers  to  attest  that 
annua!  and  quarterly 
financial  reports 
contain  no  material 
errors  or  omissions. 

lonathan  Karpoff.  a  finance 
professor  at  the  University  of 
Washington  in  Seattle,  said  ex¬ 
ecutives  whose  necks  are  now 
on  the  line  at  report-signing 
time  will  demand  systems  that 
are  more  timely  and  accurate. 
•'What  I'm  hearing  quite  a  bit 
is  that  firms  can  use  Sarbanes- 
Oxley  as  an  impetus  to  com¬ 
pletely  overhaul  their  control, 
monitoring  and  reporting 
prtK'csses,”  Karpoff  said. 

That's  what's  going  on  at 
Progress  Rail.  The  supplier  of 
railway  products  and  services 
recently  scrapped  a  combina¬ 
tion  of  manual  procedures  and 
spreadsheets  for  consolidating 
the  books  of  its  subsidiaries 
and  installed  a  set  of  financial- 
data  integration  and  anal>'sis 
software  from  SAS  Institute 
Inc.  in  Cary.  N.C. 

(hxigress  Rail  is  also  using 
SAS  Balanced  Scorecard,  a 
tool  that  gives  Klemeniz  near- 
real-time  financial-perfor¬ 
mance  metrics.  Thai  could  tip 
him  off  to  business  problems 
that  might  otherwise  go  un¬ 
detected  until  a  quarterly  au¬ 
dit  is  done,  he  said. 

Those  steps,  which  cost 
about  S500.000.  arc  just  the 
beginning.  Klemcntz  said  Sar- 
banes-Oxley  and  other  new 
SEC  regulations  are  prompt¬ 
ing  Progress  Rail  to  do  a  lop- 


to-bottom  c.xamination  of  oth¬ 
er  systems  that  can  affect  its 
financial  results,  such  as  in- 
venton,  control.  In  addition, 
the  company  faces  higher  la¬ 
bor  costs. 

"We're  greatly  increasing  IT 
staff  in  order  to  make  sure  I'm 
comfortable  that  sv’stems  and 
controls  are  in 
place,”  Klemcntz 
said,  adding  that  he's 
also  hiring  IT  and 
regulatory’ -compli¬ 
ance  consultants. 

Another  key  provi¬ 
sion  in  Sarbanes-Ox- 
ley  stipulates  that 
outside  auditors 
must  examine  and 
verify’  the  efTccti\'e- 
ness  of  a  company's 
internal  financial 
controls.  "Some  aspects  of  that 
are  typical  [information  sys¬ 
tems  issues],  such  as  access 
controls,  and  we’ll  have  to  loi^k 
at  those  things  a  little  more 
strenuously,"  said  Irving  Tyler. 


CIO  at  Quaker  Chemical  (3orp. 
in  ConshohtKken.  Pa. 

Tyler  w.amed  other  11  man¬ 
agers  to  brace  them.selvcs  for 
tough  requt'sis  from  auditors. 
“I  remember  an  auditor  once 
recommending  that  wc  have 
28-digii  alphanumeric  pass¬ 
words  that  changed  monthly." 
he  said.  "Things  like  that, 
which  maybe  in  the  past  you 
decided  not  to  pursue  because 
you  didn’t  see  the  justification, 
you  might  have  to  be  more 
aware  of  now." 

Some  companies  hope  to 
avoid  many  compliance  prob¬ 
lems  by  outsourcing  manage¬ 
ment  of  the  Issue.  Hibernia 
Corp.  in  New  Orleans  out¬ 
sources  all  of  its  wre  financial 
systems.  David  Harrison,  the 
bank's  audit  director,  said  he's 
relying  on  the  outsourcer's  le¬ 
gal  stall  to  ensure  that  the  sys¬ 
tems  comply  with  laws  like 
Sarbanes-Oxley. 

But  Harrison  acknowledged 
that  the  new  law  raises  ques- 


POTENTIAL  IT  IMPLICATIONS 


The  Sartianes-Oxley  Act 


SECTION  188:  Vbur  audtor  nust 
(and8wra<ore.youshoii(l)nMn- 
t»alaijdH-Teht9dteconte.i>- 
dutino  electronic  ones,  for  seven 
yeers  EflicllM  MW. 

SOnON  201;  Ferns  that  awkt 
your  compeny's  books  can  no 
longw  ebo  pnmde  you  wdh  IT- 
rabled  services.  BfecNve  now. 

SECTION  90f;  You  must  provide 
systems  or  procedifes  that  let  whs- 
te-bkiwem  txnwnuricale  corifK^ 
baly  Mih  your  company's  au(tt 
comnAee.  No  offoettvo  dbe  eot 


lions  he  has  to  deal  \\  ith.  such 
as  how  to  satisfy  a  requirement 
that  cx'rporate  whistle-bit'wers 
be  .able  to  communicate  confi¬ 
dentially  with  the  cimipanys 
audit  committee.  "I  oiuld  set 
up  telephone  rep<*rting  or  in¬ 
tranet  reporting,  but  employ¬ 
ees  may  feel  that  neither  of 


GEIS  to  Centralize  Data  for 
Product  Design,  Manufacturing 


Lewks  to  cut  co.sts.  impnn  e  efficiencies 


BV  JAIKUMAH  VIJAVAN 

GE  Industrial  Systems  (GEIS). 
a  S5  billion  subsidiary  of  Gen¬ 
eral  Electric  Co.,  is  imple¬ 
menting  a  major  product  life¬ 
cycle  management 
(PLM)  project  that  MM 

it  hopes  w’ill  reduce  aau 

produci  develop.  TcCMDiNT 

ment  time,  improve 
supply  ch.’iin  efficiency  and 
cut  costs. 

The  company  last  week  an¬ 
nounced  that  it's  using  PLM 
technology  from  MatrixOnc 
Inc.  in  Westford.  Mass,,  to  de¬ 
velop  a  coibborative  environ¬ 
ment  for  planning,  develop¬ 
ment.  sourcing  and  program 
management. 

When  the  project  is  fully 
implemented  in  about  two 
years,  more  than  10.000  GEIS 


employees  worldw  ide  will  be 
able  to  log  onto  a  central  por¬ 
tal  site  to  collaborate  on  a  va¬ 
riety  of  activities. 

"There  are  sewral  business 
issues  that  we  are 
ttying  toaddres.s." 
said  Eric  Reed,  man¬ 
ager  of  the  .My 
Workplace  portal 
site  at  Plainville.  Conn. -based 
GEIS.  Centralizing  the  millions 
of  engineering,  manufaauring. 
marketing  and  project  managv'- 
mem  documents  asstK'iated 
with  the  products  GEIS  builds, 
and  making  the  repositorv'  ac¬ 
cessible  from  anywhere  via  the 
portal,  will  give  the  company 
greaier  flexibility  in  where  it 
designs  and  builds  system-s. 
Reed  said.  Eveniualiy.  the  envi¬ 
ronment  will  also  be  linked 


with  suppliers,  he  added. 

Return  on  investment  will 
come  through  faster  product 
development  times  and 
greater  efficiency.  Reed  said, 
declining  to  elaborate  on  the 
sat  ings.  The  PIM  sv'Stem  will 
allow-  for  cU>sc‘r  collaboration 
with  GEIS  suppliers,  which 
can  then  be  more  directly  in¬ 
volved  in  the  product  deveUtp- 
ment  prtKess.  he  added. 

T'hc  project  hasn’t  been 
without  its  hurdles.  Fi>r  in¬ 
stance,  migratii^t  nearly  15 
million  product-related  docu¬ 
ments  from  legacy  systems 
into  the  MatrixOne  environ¬ 
ment  has  been  a  time-consum¬ 
ing  task.  Reed  said.  Meeting 
the  specialized  dix-umeni 
management  requirements  of 
the  engineering  community 
was  especially  challenging,  as 
was  getting  user  buy-in  during 


SECTNM  I0&  )feur  CEO  ml  CFO 
ffijg  sign  stttemenisvBihWB  the 
oomgWeneas  and  acancy  of  fb 
nantial  tepofts.  DIbcBm  w. 

SECTION  404;  CSkCFOBnl 
outsde  auNvs  fTKA  anest  to  the 
eAedMnesB  ol  irterrai  centrob  toi 
fnanab  leportiio.  No  ML 

SECTION  408;  Compwies  must 
report  malenal  chwiges  r  that  k 
nanoN  oondbois 'on  a  rapid  and 
ajrren(haas.*Theaclcafeit''real- 
tme  (fisciosifB*  but  doesn't  dekne 
that  means.  No  deb  Ml 


these  provides  suftleienl  pri¬ 
vacy."  he  said,  "We  haven't  de¬ 
cided  one  wav  or  ihe  other."  I 
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the  early  stages  w  hem  there 
was  little  immediate  benefit  to 
demonstrate,  he  addisi. 

A  growing  number  of  aim- 
ponies  are  Umking  into  such 
PLM  L*4pabUitH*v  said  kdin 
NUh>iv.an  000!)-^  at  AKG  Ad- 
I  vlsory  Gnvup  Ine.  in  Dedham. 

I  M.-tss.  "Hut  we  are  not  seeing 
'  quite  .IS  high  an  adoption  0.S  W  e 
'  had  expi'cted,"  Moore  said.  Part 
of  the  problem  is  the  ciwnplexi- 
ly  involved  in  rolling  out  a  PLM 
capability,  he  said.  Urge  com¬ 
panies  like  GEIS  w  ith  highly 
structured  business  processes 
'  stand  a  better  chance  of  imple- 
j  meniing  PLM  compared  ui 
those  that  don't,  he  added. 

The  customization  involved 
in  integration  functions  os  var¬ 
ied  as  marketing,  design  and 
manufacturii^  groups  can 
also  be  a  hugs'  challenge, 
MiH»re  said.  “PLM  can  alsti  be 
somew'hai  of  a  difficult  sell  at 
this  lime"  because  of  the  cost 
aswKriaicd  with  such  protects, 
he  added. 

GEIS  declined  to  disclose 
the  Cost  of  iis  project.  I 


FRANK  HAYES  -  FRANKLY  SPEAKING 


Self-defeating  Prophecy 


Last  week,  richard  CLARKE  had  finally  had  enough. 

Testifying  Tuesday  before  a  congressional  subcommittee, 
Clarke  blasted  the  White  House  and  the  Department  of 
Homeland  Security  for  failing  to  keep  cybersecurity  at  the 
top  of  their  agendas.  Clarke’s  the  man  who  should  know; 
Before  he  retired  from  the  job  in  February,  he  was  the  federal  gov¬ 
ernment’s  infrastructure  security  czar  and  came  up  with  the  nation¬ 
al  strategy  for  protecting  cyberspace. 

Clarke  has  a  reputation  as  a  loose  cannon  who  despises  bureau¬ 
cracy  and  loathes  government  regulation  of  business.  He  reportedly 


quit  in  February  because  be  wasn't  offered  a  job 
in  the  new  Homeland  Security  Department  with 
as  much  clout  as  he  had  before.  He's  certainly 
no  shrinking  violet. 

And  when  it  comes  to  cybersecurity.  Clarke 
decidetily  is  an  aiarmisL 

But  that's  not  exactly  a  problem  when  it 
comes  to  cybersecurity.  Right  now,  cybersecur- 
ity  could  use  a  few  more  alarmists. 

Think  of  the  year-2000  problem  circa  1995, 
back  when  CEOs  were  clueless  and  even  many 
techies  were  in  denial  about  what  was  needed. 
People  with  calm,  reasoned  explanations  didn’t 
get  those  folks  off  the  dime.  But  Y2k  alarmists 
did.  Clear,  rational  arguments  failed  to  get  cor¬ 
porate  boards  to  greenlight  Y2k  projects  —  but 
stories  of  impending  catastrophe  in  the  face  of 
an  immovable  deadline  got  their  attention. 

Sure,  the  alarmists  were  wrong  —  but  only 
because  we  made  them  wrong.  The  fear  they 
generated  created  an  opening  for  the  pragma¬ 
tists,  who  found  ways  to  fix  the  problem.  Call  it 
a  self-defeating  prophecy  if  you  tike.  But  the 
threat  was  real.  And  if  it  hadn't  been  for  the 
alarmists'  willingness  to  spread  that  fear,  they 
might  well  have  been  right  predicting  catastro¬ 
phe  after  all. 

Now  imagine  Y2k  with  no  im¬ 
movable  d^dline,  with  miUions  of 
unknown  security  holes  to  fix  in¬ 
stead  of  a  single  well-understood 
two<digit-date  bug.  and  happening 
in  the  middle  of  a  recession  instead 
of  an  economic  boom.  TTiaf ’s  the 
cybersecurity  problem  today. 

So  we  still  need  alarmists  like 
Clarke.  But  this  time  around,  they 
won't  be  nearly  enough  to  get  the 
attention  needed  to  start  the  cyber- 
security  ball  rolling. 

There’s  too  much  inertia  and  not 


enough  urgency.  There's  no  obvious  deadline, 
no  undeniable  threat  after  years  of  viruses, 
worms  and  vandalism  that  have  barely  risen 
above  the  level  of  an  aimoyance  for  most 
organizations. 

And  there’s  no  single  problem  to  fix.  The 
security  holes  and  threats  keep  changing.  Cy¬ 
bersecurity  will  always  be  a  movic^  target. 

And,  not  least,  there's  no  money  for  a  Y2k- 
style  drive  to  solve  the  cybersecurity  problem, 
and  there  may  not  be  for  years. 

Which  means  there  won't  be  a  Y2k-style 
drive  —  not  unless  there’s  a  major  cybersecur¬ 
ity  catastrophe.  And  that's  exactly  what  every¬ 
one  who  understands  the  threat,  from  high- 
profile  alarmists  like  Clarke  down  to  the  low¬ 
liest  IT  gnmt,  is  trying  to  avoid. 

So  if  we  want  to  make  our  systems  and  net¬ 
works  and  IT  infrastructures  secure,  we’ll  have 
to  do  it  the  hard  way. 

No  big  budgets.  No  massive  push.  No  heroic 
efforts.  No  national  agenda.  Just  an  endless  ef¬ 
fort  to  improve  security.  That  means  constant 
pressure  on  vendors  to  clean  up  their  products. 
And  continuous  education  of  users  about  the 
importance  of  following  security  rules.  And  a 
deep-rooted  understanding  on  the 
part  of  all  IT  people  that  security  is 
a  crucial  part  of  every  IT  job  — 
whether  it  has  security  in  the  title 
or  not. 

And  yes,  a  few  alarmists  to  keep 
blasting  away  at  the  people  who 
still  don’t  get  it 
But  we  can’t  count  on  them  for 
results.  If  we  want  to  make  cyber- 
catastrophe  another  self-defeating 
prophecy,  alt  we  can  do  is  keep  im¬ 
proving  IT  security  at  every  level, 
one  bug  and  one  threat  at  a  time. 
And  hope  that’s  enough.  I 


AUVtRTlStMENT 


Get  Off  the 
Bacicup  Treadmill 


Sony  ATT  data  storage  solutions  help  companies  of  far  exceeding  most  oitwr  types  of  traditional  backup  drives 

•  Fsct  file  access:  Sony  drives  went  the  first  m  the  industry 

any  size  automate  tape  backups,  delivering  real  ROI  to  include  the  Memory  in  Cassette  (MIC)  feature,  which  provides 

,  .  .  64K-bil  flash  memory  within  the  tape  cartridge  to  index  intorma- 

tnrOUQn  IT  "tim©  SdVinQS.  ww  and  the  location  of  data  on  the  tape  The  feature  speeds  data 

access  and  retrieval,  making  AJT  one  of  the  fastest  tape  formats 

Government  regulators  are  requiring  organizations  from  firtan-  tape  drives  with  the  appropriate  tapes  and  uses  backup  software  in  terms  of  data  retrieval 
cial  to  health  care  to  keep  copious  long-term  records.  Disaster  to  specify  when  tapes  should  be  switched,  what  files  should  be  •  Future  growth  peih;  Curremfy  m  its  third  genefawm.  AIT 
recovery  and  business  continuity  requirements  are  more  strin-  backed  up  and  how  often  Most  systems  notify  the  administraior  if  has  a  defined  and  proven  roadmap  that  has  seen  performance 
gent  than  ever,  as  organizations  try  to  prepare  for  the  worst  And  something  is  wrong,  such  as  rf  a  tape  runs  out  of  space  Otherwise,  and  capacity  double  with  each  new  generation  In  addition,  all 
all  the  while.  IT  organizations  are  stretched  to  the  limit,  strug-  the  admirMStraior  simply  needs  to  check  the  unit  at  the  end  of  the  three  generations  o<  AIT  drives  avaitabte  today  are  both  read  and 


gling  to  meet  these  basic  day-to-day  demands 


cycle,  be  it  seven  days  or  X.  and  load  new  tapes  Consider  the  write  backward-compatible 
Clearly,  it  is  imperative  for  any  organization  to  routinely  back  up  bme  savings  compared  with  manielly  configuring  the  backup  each  •  Industry  support  AIT  drives  work  with  all  major  operating 
valuable  data,  but  it  s  not  imperative  tfiat  they  spend  an  inordinate  day.  swapping  tapes  and  making  sure  each  backup  is  complete  systems,  mcluding  Windows.  Lmu*  and  Uni*,  as  well  as  with  the 

number  of  IT  hours  doing  it.  Let's  say  it  takes  a  single  ff  admtnis-  Th^.  consider  that  the  time  savings  and  maease  in  reliability  are  majonty  of  backup  software  packages,  including  Corr^Kiter 

trator  15  minutes  to  load,  unload  and  check  a  backup  tape,  and  even  more  r^matic  when  it 

that  person  has  to  deal  with  just  two  tapes  each  day  That's  at  comes  to  retrieving  data,  when 

least  10  hours  of  fT  time  per  month  spent  juggling  tapes — hours  time  is  even  more  critical 
that  could  be  dedicated  to  more  strategic  endeavors 

Automated  tape  systems  can  get  organizations  off  the  backup  Sony  AfT  . _ 

treadmill  Such  systems  allow  you  to  consolidate  multiple  drives  Sony's  AIT  tape  drives  and  _  Hbrary 

into  one  solution  that  can  be  lo^ed  with  enough  tapes  to  handle  libraries  were  designed  from 

backups  for  days  or  weeks.  All  the  required  backups  and  tape  the  ground  14)  for  automation.  l£bU^L  H 

rotabons  are  handled  on  a  predefined  sdiedule.  without  human  with  a  range  of  models  that 
intervention.  allow  organizatioos  to  central- 

Once  a  luxury  for  only  large  organizations  with  big  budgets  and  ize  their  backups  and  upgrade  Beuafits: 

large  IT  departments,  automated  tape  storage  solutions  such  as  existing  library  capacity  For  •  Muhipla  drive*.  Muy  tapes  *  HiplMr  capacity  mi  perionwaeca 

those  in  the  Sony  Advanced  Intelligent  Tape"^  lAfT)  automation  example.  Sony's  lIBBl.  the  * FTrrmtri  aiaeinl  iBon  •  Handa-off.  uesneeded  backup 

family  are  now  cost-effective  solutions  for  small  and  midsize  first  1U  autoloader  in  the 

organizations-  Indeed,  the  fastest  Rowing  segment  in  the  tape  mdustry.  has  one  tape  drwe  _ ^ _ 

automation  market  is  for  systems  with  20  cartridges  or  less  Even  and  capacity  for  eight  car-  ^  aiiiplo  jrtw  librarv/airtolo»d»r 

small  companies,  workgroups  or  departments  with  individual  tridges  The  flexible  range  of  _  IfeS* "  V 

Digital  Data  Storage  iODS)  tape  backup  systems  can  gain  signifi-  capacities  sullied  by  Sony 

cant  business  benefits  Lar^  organizations  can  leverage  die  per-  AlT-l.  AIT-2  and  AIT-3  tapes  H  \ 

formance.  capacity  and  reliability  of  a  Sony  AIT  library  to  enable  offer  enough  for  a  week's  ™ 

up  to  X  days  of  unattended  backup,  boosting  cartridge  utilization  worth  of  backups,  with  room  •  Om  drive,  mMiy  t^ua 

and  simplifying  management.  to  spare  for  a  head  cleaning  •ExcusatvemaiiMlaffart  Bauulha: 

Traditionally,  many  organizations  use  individual  tape  drives  to  cartridge  or  a  copy  of  a  previ-  *  Huada-aB,  uBaOHdad  buckup 

back  up  critical  servers,  adding  additional  drives  as  demand  die-  ous  week's  or  month's  backup 

tates  ConsequCTtly.  these  tape  drives  are  often  deployed  in  a  tape.  Sony's  LIB162  is  a  larger  unit  with  space  for  two  tape  drives  Associates'  CA  BnghtStor  ARCserve.  Veritas  Software's  Ventas 

decentralized  fashion,  requiring  that  someone  physicallv  load  fresh  and  up  to  16  individual  tapes,  all  within  a  2U  rack-mountable  Backup  Exec  and  Netflackup.  Legato  Systems'  NetWorker  and 

tapes  into  each  drive  daily  or  weekly,  and  to  verify  that  backups  design  that  can  fit  in  a  limited  space  Its  storage  capacity  of  0.8  IBM's  Tivoli  Storage  Manager 

complete  successfully.  With  data  volume  doubling  or  tripling  every  terabytes  ITB)  native  and  2  OBTB  compressed  pots  it  among  the  Sony's  AIT  automated  tape  backup  solutions  are  also  ideally  surt- 
year  or  two.  it  is  difficult  to  keep  up  as  the  number  of  cartridges  leaders  in  terms  of  storage  density  per  cubic  foot  ed  to  address  the  growing  need  for  networked  backup  Rather  than 

grows  Before  long,  multiple  administrators  are  collectivejy  spend-  In  addition  to  radc-mountable  storage  systems.  Sony  has  desk-  installing  and  managing  dedicated  tape  drrves  or  iibrartes  near 


Progression  into  Automation 


•  drive*.  Muy  tapes 

•  Exetssiv*  weeail  alien 


Sony  AfT 

Sony's  AIT  tape  drives  and 


first  1U  autoloader  in  the 
mdustry.  has  one  tape  drive 
and  capacity  for  eight  car- 


sr?-  ee-j* 


Sitegl«/dia*l  diiw  Hbrary 


•  Higbar  capacity  mi  pertonwaeca 

•  Handa-off.  ueaiteeded  backup 

Sianple  drfvtt  Kbrary/avtoioatf^r 


a  Oe*  drive,  iiiaey  t^es 
•  Exceastve  eiaeaai  effen 


BaaeRti: 

•  Hnds-afl,  wMSaedad  backup 


complete  successfully.  With  data  volume  doubling  or  tripling  every  terabytes  ITB)  native  and  2  OBTB  compressed  pots  il  among  the  Sony's  AfT  automated  tape  backup  solutions  are  also  ideally  suit- 
year  or  two.  it  is  difficult  to  keep  up  as  the  number  of  cartridges  leaders  in  terms  of  storage  density  per  cubic  foot  ed  to  address  the  growing  need  for  networked  backup  Rather  than 

grows  Before  long,  multiple  administrators  are  collectivejy  spend-  In  addition  to  radc-mountable  storage  systems.  Sony  has  desk-  installing  and  managing  dedicated  tape  drrves  or  iibrartes  near 
ing  an  inordinate  amount  of  time  swapping  tapes  and  attending  to  side  tape  libraries  that  allow  users  to  load  up  to  15  cartridges  in  a  each  server,  an  organization  can  consolKlate  all  storage  functions 
other  mundane  chores  This  is  particularly  burd»isome  in  systems  single  removable  magazine  This  provides  enough  edacity  for  two  and  back  up  data  from  various  servers  across  the  network,  further 


with  limited  tape  cartridge  capacity. 


While  such  organizations  clearer  need  an  automated  tape  solu-  provide  up  to  one  month  or  more  (A  hands-free  backups 


weeks  worth  of  tapes.  Sony  also  offers  30-carthdge  units  that  can  reducing  deployment  complexiTy  and  improving  IT  productrvitv. 


tion,  even  those  with  only  one  tape  drive  cv  benefit  Singlenlrive 
tape  autoloaders  and  multiple-drive  tape  libraries  are  integrated 
solutions  that  have  space  for  anywhere  from  eight  to  hundreds  or 
even  thousands  of  tapes,  along  with  a  mechanism  to  automatical¬ 
ly  replace  or  rotate  the  tapes  on  a  preset  schedule 


Whatever  the  configuration,  high-speed,  highopacity  AfT  tape 


All  of  Sony's  automated  tape  libraries  include  a  number  of  systems  can  reduce  the  pressure  on  your  badcup  window  by  cut- 


important  capabilities  and  charactenstics.  including. 

•  BaaiolB  adwjaiiibrtlew.  Sony^  tape  libraries  all  have  tf 
capability  to  be  controlled  and  monitored  from  a  remote  location 


tmg  down  on  the  time  it  takes  to  complete  a  backup  or  restore 
have  the  Automating  your  daily  or  weekly  backups  provides  even  more 
ocation.  benefits—more  reliable  backups  performed  without  manual 


•  Htfbruliabiiity:  Sony  AIT-3  drives  are  rated  at  up  10  400,000  intervention,  freeing  up  valuable  IT  hours  that  can  be  spent  on 


When  using  an  automated  solution,  an  administrator  loads  the  hours  mean  time  between  failure  (MTBF)  at  100%  duty  cycle —  projects  that  contribute  to  the  bottom  fine 


Mnft:  Ahoiit 


Download  the  free  while  paper.  "Ooing  More  Through  Automation 
and  learn  more  ahoui  Sony  storage  solutions 
V:  ;i  •.  -.'(n  MJliy  AUTOCW 


VMhdT^  the  fastest  database 
on  IBM's  fastest  computer 


200000 

150000 


Oracle  IBM  DB2 

2001 


Oracle  IBM  DB2 

2002 


When  IBM  wanted  to  show  off 
their  fastest  computer, 
IBM  chose  Oracle. 

Again. 


ORACLe 


Sootw;  Trsnaaction  Procsssing  P^rfoonance  Council  (TPC)  www.tpc.org 
A*  of  AuguM  14,  2002:  IBM  eServer  pSerws  680, 403,256.46  tpmC 
St7.8MpmC,  svailabte  11/22/02.  IBM  eSaivw  pSeries  680, 

220,807.27  tpmC,  S29.30i^pmC.  •vailabie  4/1^1 


TPC  ■— ••  •  ™9*srs«  n^ft  m  Orscis  Corpenwn  smVer  si  (Mans. 
TPCBsnehm.rt.sitrsdwrto*TrwuclKmProts*siB»PtdofBwrK:fCeis«  Olher  fisiim  iiw  be  Csdeiiiwlu  cl  thw  fstpeetw 


oracle.com/ad 
or  call  1.800.633.1062 
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Future  Watch:  Data  mtegraltof)  through  the  Semantic  Web. 


Die  Best 


ALLSTATE,  AVON  AND  6XS  are  among  several 
Fortune  500 companies  that  are  slashing 
labor  costs  while  retaining  control  over  IT 
staflfe  and  project  quality  through  ofehore 
insourcing.  Tasos  Tsolakis  at  GXS  (above) 
estimates  that  he  has  saved  $16  million  a  year 
under  this  emerging  model 
by  shifting  work  to  o&hore 
employees.  PAGE  37 
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Users  BackNovell  Plan  for 
Net\\&re-to-Liniix  Path 


NetWare  7  release  will  put  services  on  both  OS 
kernels  as  means  of  providing  migration  option 


the  announcement  last 
week  that  Novell  Inc.  has 
tapped  Linux  as  the  migration 

path  for  NetWare.  _ 

users  said  they  fi*  m 

nally  have  reason  ^ 

to  believe  that  the 
folks  in  Novell’s 
executive  suite  are  dQgidiL 
as  savvy  as  its  engi-  o—aular 


ONE  ON  ONE 

Now  NetWare  users  Know 
they  Monl 'get  stuck* 
C&)  Jad(  Messtw)  says; 

dCWdrUak  97796 


At  its  BrainShare  2003  user 
and  partner  conference  here, 
Novell  announced  that  Net' 


Ware  7  is  due  to  succeed  Net¬ 
Ware  65.  which  entered  pub¬ 
lic  beta-testing  last  week. 

“We  are  not  dropping  Net¬ 
Ware;  we  are  addi^  Linux." 

_  said  Jack  Messman. 

H  Novell’s  chairman 

*  and  CEO.  in  a 

keyrote  speech  to 
BrainShare  atten- 
37^  dees.  “This  is  not  a 
Mjm  departure  from  Net- 

-  Ware.  We  will  not 

abandon  you.  and  you  need 
not  abandon  us.” 

That’s  just  what  many  Net¬ 


Ware  7  will  be  a  set  of  services  users  wanted  to  hear. 


sitting  on  top  of  both  the  Net¬ 
Ware  and  Linux  kernels.  Net- 


I  “The  way  they're  migrating 
I  the  operating  system  —  going 


IT  Managers  Ready  to  Start 
Storage  Virtualization  Push 


Savings  eyed  as  top 
vendors  begin  to  offer 
data-poolii^  tools 


With  major  vendors  starting 
to  offer  storage  virtualization 
technology,  many  IT  managers 
at  last  WMk's  Storage  Net¬ 
working  World  conference 
here  said  they’re  ready  to  be¬ 
gin  testing  the  waters  in  hopes  ' 
of  increasing  their  storage  ca¬ 
pacity  utUizatkm  rates  and  au¬ 
tomating  more  operations. 

For  example,  Lynn  NeaL  a 
senior  systems  integrator  at 
Sprint  Corp.,  said  ^'s  push¬ 
ing  the  idea  of  virtualization 


to  upper  management  because 
of  its  potential  to  create  a  more 
automated  way  of  provision¬ 
ing  storage  on  the  company’s 
160TB  storage-area  network. 

Neal  added  that  she's  partic¬ 
ularly  interested  in  network- 
based  virtualization  technolo¬ 
gy  that  could  let  users  reach 
across  a  myriad  of  storage  de- 
SrorQge.pogeJ6 


to  a  modular  format  —  makes 
a  lot  of  sense,"  said  Michael 
Gardner,  a  senior  systems  en¬ 
gineer  at  Munder  Capital 
Management,  a  fuiancial  ser¬ 
vices  firm  in  Bloomfield  Hills. 
Mich.  NetWare  “has  always 
stood  there  as  one  of  the  more 
Net  Wore,  page  J4 


Slow  Uptake 
Fdt  Windows 
Server 2003 

Users  see  benefits, 
but  many  have  just 
upgraded  to  Win  2k 


corporate  IT  departments 
are  expected  to  race  to  adopt 
the  long-delayed  Windows 
Server  2003  operating  system 
that  Microsoft  Corp.  will 
launch  this  week. 

Several  IT  managers  con¬ 
tacted  last  week  by  Computer- 
world  said  they  have  no  plans 
to  migrate  to  the  new  operat¬ 
ing  system  this  year  —  e^- 
dally  those  who  have  recently 
finished  or  are  in  the  process 
of  completing  a  move  to  Win¬ 
dows  2000  Server. 

“We  tend  to  lag  behind  on 
upgrades.  It  allows  a  shake-in 
period  and  means  less  ri^” 
said  Bob  Famigia.  director  of 
ai^licatioQ  delivery  at  London 
Windows,  page  49 
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Users  Back  Novell  Plan  for 
NetWare-to-Linux  Path 


IheBestof 
Both  Shores 

an.'  among  scwral 
Kirtiino  5(K)  companies  that  are  slashing 
labor  costs  while  retaining  control  o\  cr  Tl' 
starts  and  project  qiialih-  through  ortshore 
insourcing,  lasos  Fsolakis  at  ( iXS  ( abtn  e) 
estimates  that  he  has  sttved  Slo  million  a  year 
under  this  emerging  mcxlel 
h\'  shirting  work  to  ortshore 
emplox  ees.  PA3E  37 


OUTSOURCING 
WATCH  .  . 


NetWare  ■■  release  will  put  ser\  ices  on  lx)th  OS 
kernels  as  means  ofpm\  iding  migration  option 


With  the  announcement  last 
week  that  Novell  Inc.  has 
lapped  Linux  as  the  migration 

path  for  NetWare, _ 

users  said  they  fi¬ 
nally  have  reason 
to  believe  that  the 
folks  in  Novell’s 
executive  suite  are 
as  savv>-  as  its  engi¬ 
neers.  — 

At  its  BrainShare  2003  user 
and  partner  conference  here. 
Novell  announced  that  Net¬ 
Ware  7  will  be  a  set  of  services 
sitting  on  top  of  both  the  Net¬ 
Ware  and  Linux  kernels.  Net- 


ONE  ON  ONE 

Now  NetWate  uses  know 
they  won't  'gel  stuck,' 
CEO  Jack  Messman  says 

O  QuickUnk  37738 
computerwor1d.coni 


Ware  7  is  due  to  succeed  Net¬ 
Ware  0.5.  which  entered  pub¬ 
lic  beta-testing  last  week, 

“We  are  not  dropping  Net¬ 
Ware;  we  arc  adding  Linux." 

-  said  lack  Messman. 

Novell's  chairman 
and  CEO.  in  a 
keynote  speech  to 
BrainShare  atten¬ 
dees.  “This  is  not  a 
departure  from  Net- 
Ware.  We  will  not 
abandon  you.  and  >'ou  need 
not  abandon  us." 

That's  just  what  many  Net¬ 
Ware  users  wanted  to  hear. 

"The  way  they’re  migrating 
the  operating  system  —  going 
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IT  Managers  Ready  to  Start 
Storage  Virtualization  Push 

Sav  ings  ex  c-d  as  top 
vendors  begi  n  to  offer 
data-ptx)ling  tixils 


With  major  vendors  starting 
to  offer  storage  virtualization 
technologx’.  many  IT  managers 
at  last  week’s  Stor^e  Net¬ 
working  Worid  conference 
here  said  the>’'re  rea«ly  to  be¬ 
gin  testing  the  waters  in  hopes 
of  increasing  their  storage  ca¬ 
pacity  utilization  rates  and  au¬ 
tomating  more  operations. 

For  example.  Lynn  Neal,  a 
senior  systems  integrator  at 
Sprint  Corp..  said  she’s  push¬ 
ing  the  idea  of  virtualization 


acMnnaMnoNtMoAtogotltfif' 

ingfarSMlKhnology.Pi^16 

■  OvMKlaanlwdonyQwator- 
agiMtidorstDflnBMntorivanM- 
ty.  sqe  tiSor  in  cW  Uaryban 
JohnmRi0i2O 

to  upper  management  because 
of  its  pitiential  t«)  create  a  more 
automated  way  of  provision¬ 
ing  storage  on  the  company’s 
160TB  storage-area  network. 

Neat  added  that  she's  partic¬ 
ularly  interested  in  network- 
based  virtualization  tcchnolo- 
g>'  that  could  let  users  reach 
across  a  myriad  of  storage  de- 
Ston^,  page  10 


to  3  mvidular  format  —  makes 
a  lot  «»f  sense."  said  Michael 
Gardner,  a  senior  systems  en¬ 
gineer  at  Munder  Capital 
Management,  a  financial  ser¬ 
vices  firm  in  HltHimlleld  Hills. 
Mich.  .NetWare  “has  always 
stiH>d  there  as  one  of  the  more 
NVfU'ure.  page  /4 


Slow  Uptake 
For  Windows 
Server 2003 

L'sors  soc  Ivncfit.s. 
but  nunx  fuixcjust 
upgraded  to  Win  2k 

BV  CAROL  SLIWA 

Few  corp*>ratc  IT  departments 
are  expected  to  ratv  to  adopt 
the  long-delayed  Windows 
Serxer  2003  operating  system 
that  Micnisofi  Corp.  will 
launch  this  week. 

Several  IT  managers  con¬ 
tacted  last  week  by  (.'omputer- 
u'or/d  said  they  have  no  plans 
to  migrate  to  the  new  operat¬ 
ing  system  this  year  —  espe¬ 
cially  those  who  have  recently 
finished  or  are  in  the  pnK.ess 
of  completing  a  move  to  Win¬ 
dows  2000  Serx’er. 

"We  tend  to  lag  behind  on 
upgrades.  It  allows  a  shake-in 
period  and  means  less  risk." 
said  Bt>b  Farrugia.  director  of 
application  delixcry  at  London 
Windows,  page 

IN  THF  SHADOW 

AiimI  (he  hoopia.  McraaoM  is  also 

launching  Visual  Studio  its! 2003. 
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802.11g  Speeds  Ahead  of  IT  Needs 

In  the  Technology  section:  Wireless  LAN  devices  based  on  the 
^  802.11g  standard  aren’t  yet  ready  for  corporate  use.  but  by 

late  2003.  the  technology'  will  be  built  into  most  wire- 
^ less  LAN  access  points.  Users  may  have  to  wait  a 
^  ^  while  longer  for  real-world  benefits.  Page  30 
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Beyond  Compliance 

in  the  Management  section:  At  Blue 
Cross  and  Blue  Shield  of  Minnesota.  CIO 
lohn  Ounjian  (left)  is  creating  business 
value  while  bringing  IT  into  compliance 
with  HIPAA  regulations.  Page  41 
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6  Invensys  plans  to  sell  Baan. 

Singled  out  for  its  weak  finan¬ 
cial  performance  in  February, 
the  software  vendor  finds  it¬ 
self  on  the  block  for  the  sec¬ 
ond  time  in  three  years. 

6  Lawson  Software  says  that 
despite  tough  times,  it's  still 
committed  to  enhancing  its 
product  lines  through  devel¬ 
opment  or  acquisitions. 

7  Federal  IT  spending  could 
grow  from  S4S  billion  this  fis¬ 
cal  year  to  S68  billion  in  2008, 
a  new  study  predicts. 

7  Sun  CEO  Scoft  McNealy  talks 
about  mobility  while  flying  to 
Orlando  on  his  corporate  jet 

8  Emerging  security  toots 

promise  to  give  users  better 
administration  and  manage¬ 
ment  capabilities. 

10  The  FBI  turns  its  attention  to¬ 
ward  improving  data  mining 
and  information  sharing. 

12  Networking  vendors  gear  up 
for  launches  of  switch-based 
wireless  LAN  products  at  the 
upcoming  Networld*Interop. 

12  BMC  announces  software 

aimed  at  IT  workers  who  lack 
mainframe  skills. 

14  AMD's  64'blt  Opteron  server 
chip  is  gamering  the  support 
of  operating  system  vendors. 

16  Storage  Networking  World 
attendees  say  the  increased 
use  of  SAN  technologies 
could  help  them  cope  with 
diminished  IT  resources. 


25  Enterprises  Widen  the 

Search  Net.  New  enterprise 
search  engines  scan  distrib¬ 
uted  data  stores,  returning 
only  the  most  relevant  results. 

32  QAA:  Nothing  but  'Net. 
PeopleSoft’s  Carol  Ptak  tells 
how  vendors  are  focusing  on 
customers’  needs  during  these 
tough  economic  times. 

34  Future  Watch:  The  Web's  Next 

Leap.  With  the  Semantic  Web, 
the  inventor  of  the  World 
Wide  Web  hopes  to  infuse  in¬ 
telligence  into  his  creation. 

35  Security  Manager's  Journal: 
The  Battle  Against  Pomogra* 
phy  Continues.  Vmce  Tues¬ 
day  looks  into  automated  mail 
filtering  and  is  surprised  to 
find  a  tool  that  can  do  the  job. 
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37  The  Best  of  Both  Shores. 

Slashing  labor  costs  while  re¬ 
taining  control  over  IT  staff 
and  project  quality  are  at  the 
heart  of  offshore  insourcing. 

39  Tight  Lips.  Companies  have 
typically  provided  as  little  in¬ 
formation  as  possible  about 
former  employees  for  fear  of 
being  sued.  But  some  hiring 
mana^rs  are  fmding  ways  to 
dig  deeper  into  the  back¬ 
grounds  of  job  candidates. 

40  QAA:  Facing  the  Unthinkable. 
It’s  time  for  corporate  crisis 
management  to  grow  up.  says 
Ian  L  Mitroff.  who  wrote  about 
that  subject  in  thi<  month’s 
Harvard  Business  Review. 


OPINION _ 

20  Maryfran  Johnson  says  that 
last  week’s  Storage  Network¬ 
ing  World  conference  high¬ 
lighted  to  two  key  trends: 
consolidation  of  storage 
resources  and  a  move  toward 
standardization. 

20  Pln>m  Fox  observes  that  you 
might  get  a  sense  of  dej^  vu 
as  you  venture  into  the  field 
of  Web  services,  since  you 
probably  encountered  some 
of  the  challenges  —  and  some 
of  the  players  —  in  earlier  en¬ 
deavors. 

21  Ari  Kaplan  stresses  the  im¬ 
portance  of  ha>’ing  solid  con¬ 
tractual  relationships  with 
your  supply  chain  partners. 

36  Tommy  Paterson  says  all  the 
buzz  about  real-time  applica¬ 
tions  is  drowning  out  impor¬ 
tant  practical  considerations. 
Remember  Real-time  access 
to  data  is  just  one  factor  in 
successful  decision-making. 

42  Bari  Perliins  advises  that  you 
consider  the  same  conse¬ 
quences  for  offshore  out¬ 
sourcing  that  you  would 
consider  in  making  any 
outsourcing  decision. 

50  Frankly  Speaking:  Frank 

Hayes  urges  IT  managers  to 
build  security  into  their  users, 
not  just  their  systems. 
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SonMlimes,  N’snotNca  to  Share 

SECURITY:  Simply  restricting  fUe  ahariflg  and 
eliminating  drives  can  help  keep 

''netwock-aware”  worms  away  from  your  sys¬ 
tems,  says  columnist  Dou^as  Schweitzer. 

0(WoMMI7B4l 

t* _ 

OPBBQI^MIIMnCBWwIi 

AaynchronniBnalahawCafc 

DEVELOPMEirr:  Reduce  the  time  it  takes  to 
retrieve  a  recocdaet  from  a  large  database. 
OlMnMkWaWHO 

HowtoPtanfora 

uVSBnl  ■HnRMi 

OPERATIIM  SYSTEMS:  Tlie  first  of  a  three- 
pert  look  on  how  to  pfatn  for  a  30J300<4eat 
migration.  O  QdsUM  87960 

BuUnaBlodBfora 

MOBILE/WIRELESS:  XcelleNec  CTO  Joe 
Owen  discusaes  the  steps  you  need  CO  take  to 
deviae  a  succrmfitl  wireleai  strategy;  tacuf- 
Ing  on  ownetahip  costs,  security  and  band¬ 
width  iatues.  Ck  ftMAMfe  lino 

TaHngaXIbilMawafSloraea 

STORAOE:  neneBaadct  bushieK  systems 
manager  at  New  Balance  Athletic  Shoe,  tells 
SNW  Online  bow  mudi  you  can  team  about 
vendon  when  developing  and  installing  a 
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AT  DEADLINE 


Microsoft,  File 
Settlement  Report 

Mcrosoft  Corp.  aiid  Mm  U,S.  gov* 
smmMlsaUinaioIntsUtusrv 
port  that  tht  company  hM  takan 
a  aartas  of  stapa  to  comply  with 
tba  airtHruat  aaMamant  daai  ap* 
provad  by  a  fadaral  fwdgo  in  No* 
vombar.  Tbo  actiona  induda  (rain* 
big  for  about  10.000  of  Micro- 
Mft’a  ompioyoaa  and  (bo  forma* 
tion  of  an  totomal  commfttoa  to 
managa  compKanca  offorla. 


Del  Retakes  PC 
Lead,  IOC  Says 

Dal  Cowpator  Corp.  ragabiad  tha 
load  in  yvorbMda  PC  Mpmarits 
from HawtoW  Pmlard bitha 
fbat  qurtor,  capOaliinq  on  a 
iMl  bi  buying  from  consumara 
to  corpocato  uoara.  accordbig  to 
PC.  Dal  oMppad  about  6  ndWon 
PCb,  comparad  wftt  S.5  mWon 
fw  HP.  PC  add.  Tha  Frvning* 
ham.  llBm.*baaad  marbaf  ra- 
aaardi  finn  addad  that  total  aMp- 
manto  bicmaaad  2.1%  yaar  ovar 
yaar  to  34.6  mMton  PCk. 


Homeland  Agency 
Taps  Privacy  Chief 

Tha  UA,  Dapartniant  of  Homaiand 
SacurtyhaaiwnadNudaOXon* 
nor  Holy  aa  fea  Oral  privacy  ofll* 
ear.  01>Mnar  ttoly.  who 
ba  maponaMo  far  anauring  that 
tha  toebBotogiaa  HBod  by  tha 
agancy  dan*!  orada  lha  privacy 
of  U.S.  dttnaa,  pravieiidv  hdd  a 
wniHr  poamnn  ai  no  uapanmam 


Short  Takes 

Praaidint  Bitoh  has  noadnated 
Mat  Oip.  Slavan  Boutolt  to 
bae«mttiaU.S.A8MrsCP. 
Boidala.  wha  amdri  atoo  ba  pro* 
weiad  to  lautanant  g—raf.  cur- 
rantfy  ia  dbactor  of  bdannatiuii 
aparaflan^  natworha  and  apaca 
ftotha  Amy. . . .  taaag.  C^.* 
b«ad  OATEWAV  MC.  raportod  a 
Spyj  «Mon  Ibat  ipiwtor  toga 
on  rawMua  of  »444  iidfaiL 
Ravaatoa  am  dowai  20%  ham  tha 
ym^wtofhr  lawil  of  StOe  bBtoL 
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Invensys  seeks  to 
divest  business 
apps  vendor 


Baan  Put 
[e  -  Again 


av  HAnc  L.  aoNoiMi 

For  the  second  time  in 
three  years,  business 
applications  vendor 
B^n  Co.  is  on  the  auc¬ 
tion  block,  a  devel¬ 
opment  that  drew 
mixed  reactions 
from  users  and  ana¬ 
lysts  last  week. 

Parent  company  Invensys 
PLC  announced  that  it  has  put 
Baan  up  for  sale  as  part  of  a 
plan  to  jettison  two-thirds  of 
its  assets.  Invensys,  a  London- 
based  maker  of  manufacturing 
control  systems  and  other 
products,  bought  Baan  in  Au¬ 
gust  2000  for  $709  million  and 
has  pumped  another  $100  mil¬ 
lion  into  the  Barneveldt, 
Netherlands-based  software 
vendor  since  the  acquisition. 

But  lnven.sys  has  been  hit 
by  a  drop-off  in  revenue  and 
profits,  and  the  company  sin¬ 
gled  out  Baan  as  a  weak  per¬ 
former  during  a  business  up¬ 
date  in  February.  At  the  time. 
Invensys  said  Baan's  financial 
performance  in  the  fiscal  year 
that  ended  March  31  would 
likely  be  “materially  worse" 
than  expected,  despite  efforts 
to  cut  costs  and  improve  cus¬ 
tomer  service. 

Dave  Wangler.  senior  vice 
president  of  global  marketing 
at  Baan.  said  officials  at  the 
software  vendor  are  talking 
to  several  interested  buyers 
and  are  looking  (o  close  a  deal 
within  months.  “We’re  hoping 
we  can  make  it  a  quick  proc¬ 
ess,  and  as  tor  as  customers  are 
concerned,  it’s  business  as  usu¬ 
al*  Wangler  said. 

But  Ibdd  Roeller,  e-busioess 
technology  manager  at  Flow- 
serve  Corp.  in  Irving,  Texas, 
said  the  inaker  of  liquid  flow- 
control  products  is  in  a  wait- 
and-see  position  on  Baan.  “it’s 


ERP 

SOFTWARE 


a  little  disconcerting  thinking 
you’re  leveraged  to  a  vendor's 
product  that  may  be  in  trou¬ 
ble,"  Roeller  said. 

Flowscrve  runs  a  number  of 
Baan  applications,  including 
one  that  lets  its  customers  con¬ 
figure  products  and  get  pricing 
data  online.  The  applications 
“need  more  investment  to  sat¬ 
isfy  our  require¬ 
ments,"  Roeller  said. 
"Being  on  the  chop¬ 
ping  block  will  likely 
delay  or  eliminate 
the  future  developments  we're 
counting  on." 

Invensys  made  a  mistake 
by  announcing  the  planned 
.sale  before  it  had  a  buyer  lined 
up.  because  the  uncertainty 
could  be  a  cause  of  concern 
for  some  users,  according  to 
lohn  Moore,  an  analyst  at  ARC 
Advisory  Group  Inc.  in  Ded¬ 
ham.  Mass.  “Customers  will  be 


worried,  whether  or  not  they 
should  be,"  he  said. 

However.  Moore  noted  that 
Baan  currently  enjoys  the 
highest  customer  satisfaction 
ratings  it  has  had  in  years  and 
that  it  has  been  largely  suc¬ 
cessful  in  retaining  existing 
users.  Those  faaors,  along 
with  the  quality  of  Baan’s 
product  line,  should  make  it 
anractive  to  potential  buyers. 
Moore  said. 

"if  it’s  the  right  buyer,  this 
could  be  a  very  good  thing.” 
said  Keith  Bearden.  CIO 
at  dental  equipment  maker 
A-dec  Inc  tn  Newberg.  Ore. 
But  be  said  he  would  be  con¬ 
cerned  if  Baan  is  acquired  by  a 
venture  capital  firm  that  puts 
profits  above  product  quality. 

“I  hope  that  Baan  is  allowed 
to  continue  some  of  the  moves 
they  have  started."  Bearden 
said,  adding  that  the  software 


Baan’s  March  to 
The  Auction  Bk)ck 

MPTEMB£B  2002;  hrensys 
CEO  Rick  Haylhornttiwaite  says 
his  top  priority  at «  Baan  ua«t 
contofoncawBbalo  "assuage 
tears'  about  the  software  ven¬ 
dor's  futm. 


NOVEMBER  2002;  invensys 
decksesthatthafliiandalre- 
Milts  of  Baan  and  two  ralalod 
ooftwaro  buakiosaaa  woro 

down  "considerably*  m  the 
first  half  of  As  fisc^  year 

FEBRUARY:  The  compffliysays 
that  Baan’s  parfonnvica  has 
woraanad  signMcairtly  and 
adds  that  n  plans  to  review  the 
value  of  its  investmenl  in  the  soft¬ 
ware  vendor. 

APRIL  Invensys  pull  Baan  up 
for  sale  along  wito  a  group  of 
business  units  that  sel  energy 
management  products. 


vendor’s  focus  on  customer 
satisfaction  and  continued  de¬ 
velopment  of  its  next-genera¬ 
tion  Gemini  applications  are 
“critical  to  the  long-term  suc¬ 
cess  of  the  company."  I 


Lawson  Sticks  to  Product 
Strategy,  Despite  Losses 


Company  plans 
software  updates, 
eyes  acquisitions 


Looking  to  overcome  a  drop- 
oBf  in  revenue  that  has  led  to 
three  straight  quaneriy  losses. 
Lawson  Software  Inc.  plans  to 
continue  to  make  incremental 
additions  to  its  line  of  busi¬ 
ness  applications. 

Last  week,  at  its  annual  user 
conference  here,  Lawson  out¬ 
lined  a  strata  to  enhance  ex¬ 
isting  product  lilies,  by  both 
acqubitioQ  and  internal  devel¬ 
opment  “We’re  going  lo  be 
around  for  a  long  time,”  lay 
Coughlaa  Lawson’s  president 
and  CEO.  told  attendees. 

In  addition  to  announcing 
an  expected  application  out¬ 


sourcing  program  at  the  con¬ 
ference  [QuickLink  37685], 

St.  Paul.  Minn.-based  Lawson 
said  it’s  workii^  with  New 
York-based  Deloitte  &  Touche 
LLP  lo  offer  a  consulting  ser¬ 
vice  designed  to  help  CIOs 
analyze  the  efficiency  of  their 
IT  departments. 

That  sort  of  offering  could 
help  CIOs  talk  to  CEOs  and 
chief  financial  officers  in  busi¬ 
ness  terms,  said  Jeffrey  Pullen, 
team  leader  of  financial  sys¬ 
tems  at  Lafarge  North  Ameri¬ 
ca  Inc,  a  maker  of  construc¬ 
tion  materials  in  Herndon,  Va. 

A  half-dozen  users,  includ¬ 
ing  Pullen,  said  they’re  satis¬ 
fied  with  Lawson  and  its  prod¬ 
uct  direction  and  expect  the 
company  to  remain  viable. 

But  Larry  Kerr,  director  of 
enterprise  resource  planning 
for  the  city  of  Greensboro, 


N.C..  noted  that  he  encoun¬ 
tered  a  series  of  software  bugs 
during  an  implementation  of 
Lawson's  Series  8  human  re¬ 
sources,  finance  and  payroll 
applications.  The  project  be¬ 
gan  last  August  and  was  com¬ 
pleted  in  January. 

Lawson  upgraded  some  of 
the  applications  five  times  to 
fix  the  bugs,  Kerr  said,  adding 
that  the  city  bad  to  pay  addi¬ 
tional  consulting  fees  because 
of  the  upgrades.  But  the  appli¬ 
cations  are  now  stable,  be  said. 

A  Lawson  spokesman  said 
the  company  has  resolved  the 
initial  stability  problems  in 
the  Series  8  sofhvare.  which 
became  available  in  2001. 
About  40%  of  Lawson’s  in¬ 
stalled  base  has  migrated  to 
the  Web-enabled  Series  8 
applications,  be  added.  I 
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Lamson’s  CEO  sms  tu  conpany's  Anancai 
hath  "8  not  0VW  an  toua*  Rsad  more- 
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War,  Terrorism  Fuel  Fed’s  IT  Budget  Growth 


Projected  to  grow  8.5%  a  year,  IT 
spending  could  hit  S68B  in  2008 


Stimulated  by  the  war  in  Iraq, 
increased  threats  of  terrorist 
anacks  and  the  formation 
of  the  U.S.  Department  of 
Homeland  Security  (DHS), 
the  federal  IT  market  could 
top  S68  billion  by  2008.  a  new 
study  predicts. 

While  the  anticipated  recov¬ 
ery  of  commercial  IT  markets 
never  quite  materialized  in 
2002.  “the  federal  government 
remains  an  attractive  market¬ 
place  based  on  its  sheer  size 
and  consistent  spending  pat¬ 
terns."  according  to  the  "Fed¬ 
eral  IT  Market  Forecast”  re¬ 
leased  last  week  by  Chantilly, 
Va.-based  Input.  “Projected 
increases  of  13%  in  [fiscal] 

2003  spending  over  [fiscal] 
2002  mean  that  the  govern¬ 
ment  is  actually  an  engine  of 
growth."  the  report  staled. 

Homeland  security  and 
e-govemmeot  initiatives  re¬ 
main  the  highest  IT  priorities 
for  federal  agencies,  said  Pay- 
ton  Smith,  manager  of  feder^ 
maritet  analysis  at  Input. 

These  two  areas  are  driving 
significant  near-term  increas¬ 
es  in  spending,  he  said. 

According  to  Input,  govern¬ 
ment  spending  on  IT  products 
and  services  will  increase  at 
a  compound  annual  growth 
rate  of  8.5%.  from  S4S.4  billion 
in  fiscal  2003  to  S68.2  billion 
in  fiscal  2008. 

Big  Budget 

Drivii^  much  of  that  estimat¬ 
ed  growth  is  the  recent  forma¬ 
tion  of  the  DHS.  The  size  of 
the  DHS  IT  budget  is  second 
only  to  that  of  the  Department 
of  Health  and  Human  Services 
among  civilian  govenunent 
agencies,  according  to  a  mar¬ 
ket  forecast  by  McLean.  Va.- 
based  Federal  Sources  Inc. 

For  fiscal  2003,  the  DHS  com¬ 
manded  a  $3  billion  IT  budget. 
Federal  Sources  projects  that 
figure  will  increase  to  S4  bil¬ 
lion  next  year. 

*Tbe  DHS  is  large  enough 


and  expected  to  grow  fast 
enough  to  rival  the  military 
services  in  terms  of  IT  spend¬ 
ing"  by  2008,  according  to  the 
Input  forecast.  And  if  Federal 
Sources’  estimates  are  accu¬ 
rate,  that  would  place  the  DHS 
IT  budget  above  the  S6.5  bil¬ 
lion  mark,  which  is  the  current 
estimate  for  U.S.  Air  Force  IT 
spending  for  fiscal  2004. 

The  “DHS  is  off  the  charts, 
with  an  IT  fbud^t]  gain  of 
$745  million"  from  fiscal  2003 
to  fiscal  2004.  said  I'un  Kane, 
president  and  CEO  of  Federal 
Sources. 

Input's  forecast  concluded 
that  the  growth  in  federal  IT 
spending  will  be  greatest  for 
outsourcing  services,  as  op¬ 
posed  to  spending  on  hard¬ 
ware.  software  and  telecom¬ 


munications.  In  addition,  out¬ 
sourcing  of  government  IT  is 
expected  to  reach  a  high  of 
rtearly  87%  in  2008. 

"The  anticipated  retirement 
of  a  large  portion  of  the  feder¬ 
al  IT  worifforce.  the  critical 
lack  of  IT  skills  .ind  the  Bush 
administration’s  stated  prefer¬ 
ence  to  partner  with  the  pri¬ 
vate  sector  arc  all  contributing 
factors  to  the  anticipated 
growth  in  outsourcing,  ac¬ 
cording  to  the  Inpuf  study. 

Kane  recommended  that 
companies  lake  specific  mea¬ 
sures  to  ensure  that  they  arc 
positioned  to  take  advantage 
of  the  new  federal  IT  market. 

For  example,  companies 
should  map  thetr  product  and 
service  offerings  to  agency  en¬ 
terprise  architecture  plans  and 
overall  mission  statements  In 
addition,  business  develop¬ 
ment  managers  should  study 
the  government’s  use  of  busi- 


On  Board  Sun’s  Corporate 
Jet,  McNealy  Talks  Mobility 


SV  PATfMCK  THiaOOCAU 

Sometimes  Scott  McNealy 
wishes  he  didn't  have  a  corpo¬ 
rate  jet. 

Instead  of  leaving  eariy  from 
San  Jose  for  a  five-hour  flight 
to  Orlando  to  attend  Sun's 
iFbrce  partner  con¬ 
ference,  the  CEO  of 
Sun  Microsystems 
Inc.  is  getting  out  of 
his  office  late.  He 
says  on  the  way  to  the  airport 
that  had  he  taken  a  commercial 
(light,  be  would  have  been 
forced  CO  leave  at  a  more  rea¬ 
sonable  hour  and  wouldn’t  be 
checking  inm  his  hotel  at  2  am 

Sun’s  revenue  is  down  for 
the  quarter  that  ended  March 
30,  off  10%  from  the  same  pe¬ 
riod  a  year  earlier.  However, 
the  company  posted  a  $4  mil- 
Uon  profit  on  $2.79  MUioo  tn 
sales.  Meanwhile,  coa^>etition 
from  Hewlen-Packard  Ca. 
IBM  and  Intel  Corp.’8  64-bit 
Itanium  chip  is  accelerating.  If 
McNealy  is  bothered  by  any  of 
that,  he  doesn't  show  it  as  he 


boards  his  corporate  jet 

His  casual  style  ~  blue 
jeans  and  open  collar  in  the 
mold  of  the  Silicon  Valley  cul¬ 
ture  belies  his  intensity.  As 
the  plane  Ufrs  off  for  Orlando, 
McNealy  doesn't  pause  for  a 
second.  He  picks  up 
his  cell  phone  to 
make  a  point. 

"This  is  ultimate¬ 
ly  what  we  think  is 
the  big  winner  in  the  thin- 
dient  computing  market¬ 
place,"  he  says.  “It  goes  with 
you,  and  it’s  always  on.  and 
you  take  it  everywhere." 

McNealy  built  his  company, 
founded  in  1982,  on  a  philoso¬ 
phy  that  the  network  is  the 
computer.  He  sees  ubiquitous 
i>etworkcd  devices,  from 
cell  phones  to  browsers  on 
shopping  carts  connected  to 
shopping  lists  at  home,  as 
the  future. 

McNealy  talks  animatedly 
about  dient-side  applications, 
such  as  those  being  used  in 
sales  automation,  written 


for  Java-enabled  devices  — 
100  million  of  which  be  says 
are  already  in  use, 

Sun,  he  says,  is  adding 
voice-over-lP  technology  to 
its  Sun  Ray  thin-clienc  work¬ 
stations.  That  means  once  a 
u.scr  logs  onto  a  terminal  with 
a  Java  card,  the  phone  recog¬ 
nizes  that  user.  This  summer. 
Sun  %vill  release  a  software 
stack  running  on  Linux  codc- 
named  Mad  Hatter  to  boost  its 
desktop  offerings. 

The  total  package  is  a  direa 
attack  on  the  desktop  PC 
Does  Sun  see  itself  as  an  alter¬ 
native  to  Microsoft  Corp.? 

“It  depends  on  who  you 
are,"  McNealy  says.  "For  the 
hundreds  of  thousands  of  Sun 
Ray  users,  we  already  are.  For 
those  who  want  their  PC.  they 
may  never. 

“We  don't  build  a 
strategy  based  on 
what  our  competitors 
are  doing,"  he  says. 

“W^  build  a  strategy 
based  on  what  our 
customers  want." 

Microsoft  is  moving 
deeper  into  the  enter¬ 
prise  on  the  strength 
of  its  desktop  domi- 
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ness-case  scoring,  which  in 
addition  to  setting  certain  se¬ 
curity  standards  ensures  that 
all  new  IT  investments  pro¬ 
vide  a  return  on  investment 
that's  equal  to  or  greater  than 
alternate  uses  of  the  same 
funding.  It  also  requires  that 
all  such  spending  goes  to 
products  and  services  that 
directly  support  an  agency's 
mission.  I 


nance,  and  Sun  officials  say 
their  client  strateg>‘  will  help 
boost  enterprise  sales.  But 
while  company  officials  claim 
that  they  can  chip  away  at 
Microsoft,  they  aren't  making 
any  bold  predictions  or  even 
offering  safe  bets. 

’’We’re  not  trying  to  beat 
Microsoft;  we’re  not  trying  to 
challenge  Microsoft."  Mc¬ 
Nealy  says.  ’TWe’re  trying  to 
solve  a  problem  . . .  and  give 
people  mobiliry  with  security." 

When  the  plane  lands  in 
Orlando  a  car  to  pick  up  the 
CEO  has  yet  to  arrive.  Mc¬ 
Nealy  seems  almost  amused 
by  hb  sudden  lack  of  mobility. 

Meetii^  with  his  iFbrce 
partners  the  next  day.  Mc¬ 
Nealy  is  as  outspoken  as  ever. 
If  he's  tired,  be  hides  it  well 
He  touts  the  compa¬ 
ny’s  SSJ  tuUkm  in 
cash  reserves.  "Wr're 
doing  just  fine  opera- 
tionally."  he  says,  un- 
^ile  b>  refrain  from 
taking  one  more  stab 
at  Microsoft:  After  alL 
be  says.  Sun  has  a  cash 
position  above  every¬ 
one  who  "isn't  a  con¬ 
victed  monopolist”  I 
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War,  Terrorism  Fuel  F^’s  IT  Budget  Growth 

I’rojectcd  to  grow  a  y  ear,  FT 
spending  could  hit  S68B  in  2008 


av  OAN  VERTON 

WASHiNOTOK 

Stimulated  by  the  war  in  Iraq, 
increased  threats  of  terrorist 
attacks  and  the  formation 
of  the  U.S.  Department  of 
Homeland  Security  (DHS). 
the  federal  IT  market  could 
top  S68  billion  by  2008,  a  new 
study  prcdicts- 

While  the  anticipated  recov¬ 
ery  of  commercial  IT  markets 
never  quite  materialized  in 
2002,  "the  federal  government 
remains  an  attractive  market¬ 
place  based  on  its  sheer  size 
and  consistent  spending  pat¬ 
terns."  according  to  the  “R*d- 
eral  IT  Market  Forecast"  re¬ 
leased  last  week  by  Chantilly. 
Va.-based  Input-  "Projected 
increases  of  13%  in  [nscal) 
2003  spending  overlfiscal] 
2002  mean  that  the  govern¬ 
ment  is  actually  an  engine  of 
growth."  the  report  stated. 

Homeland  security  and 
e-govemment  initiatives  re¬ 
main  the  highest  IT  priorities 
for  federal  agencies,  said  Pay- 
ton  Smith,  manager  of  federal 
market  analysis  at  Input. 

These  two  areas  are  driving 
significant  near-term  increas¬ 
es  in  spending,  he  said. 

According  to  Input,  govern¬ 
ment  spending  on  IT  products 
and  services  will  increase  at 
a  compound  annual  growth 
rate  of  8.5%.  from  S45.4  billion 
in  fiscal  2003  to  S68.2  billion 
in  fiscal  2008. 

Big  Budget 

Driving  much  of  that  estimat¬ 
ed  growth  is  the  recent  forma¬ 
tion  of  the  DHS.  The  size  of 
the  DHS  IT  budget  is  second 
only  to  that  of  the  Department 
of  Health  and  Human  Services 
among  civilian  government 
agencies,  according  to  a  mar¬ 
ket  forecast  by  McLean.  Va.- 
based  Federal  Sources  Inc. 

For  fiscal  2003.  the  DHS  com¬ 
manded  a  53  billion  IT  budget. 
Federal  Sources  projects  that 
figure  will  increase  to  S4  bil¬ 
lion  next  year. 

“The  DHS  is  large  enough 


and  expected  lo  grow  fast 
enough  to  rix’al  (he  military' 
services  in  terms  of  IT  spend¬ 
ing"  by  2008.  according  to  the 
Input  forecast.  And  if  Federal 
Sources'  estimates  are  accu¬ 
rate.  that  would  place  the  DHS 
IT  budget  above  the  S6.5  bil¬ 
lion  mark,  which  is  the  current 
estimate  for  U.S.  Air  Force  IT 
spending  for  fiscal  2004. 

The  “DHS  is  off  the  charts, 
with  an  IT  [budget)  gain  of 
S745  million”  from  fiscal  2003 
to  fiscal  2004.  said  )im  Kane, 
president  and  CEO  of  Federal 
Sources. 

Input's  forecast  concluded 
that  the  growth  in  federal  IT 
spending  will  be  greatest  for 
outsourcing  services,  as  op¬ 
posed  to  spending  on  hard¬ 
ware.  software  and  telecom- 


BV  PATRICK  THIBODEAU 

Sometimes  Scon  McNealy 
wishes  he  didn't  have  a  corpo¬ 
rate  jet. 

Instead  of  leaving  early  from 
San  Jose  for  a  five-hour  flight 
to  Orlando  to  attend  Sun’s 
iForce  partner  con¬ 
ference.  the  CEO  of 
Sun  Microsystems 
Inc.  is  getting  out  of 
his  office  late.  He 
says  on  the  way  to  the  airport 
that  had  he  taken  a  commercial 
flight,  he  would  have  been 
forced  to  leave  at  a  more  rea¬ 
sonable  hour  and  wouldn't  be 
checking  into  his  hotel  at  2  a.m. 

Sun's  revenue  is  down  for 
the  quarter  that  ended  March 
30.  off  10%  from  the  same  pe¬ 
riod  a  year  earlier.  However, 
the  company  posted  a  S4  mil¬ 
lion  profit  on  52.79  billion  in 
sales.  Meanwhile,  competition 
from  Hewlett-Packard  Co., 

IBM  and  Intel  Corp.'s  64-bit 
Itanium  chip  is  accelerating.  If 
McNealy  is  bothered  by  any  of 
that,  he  doesn't  show  it  as  he 
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boards  his  corporate  jet. 

His  casual  sty'le  —  blue 
jeans  and  open  collar  in  the 
mold  of  the  Silicon  Valley'  cul¬ 
ture  —  belies  his  intensity.  As 
the  plane  lifts  off  for  Orlando. 
McNealy  doesn't  pause  for  a 
second.  He  picks  up 
his  cell  phone  to 
make  a  point. 

"This  is  ultimate¬ 
ly  what  we  think  is 
the  big  winner  in  the  thin- 
client  computing  market¬ 
place."  he  says.  “It  goes  with 
you.  and  it's  always  on,  and 
you  take  it  ewrywhere." 

McNealy  built  his  company, 
founded  in  1982.  on  a  philoso¬ 
phy  that  the  network  is  the 
computer.  He  sees  ubiquitous 
networked  devices,  from 
cell  phones  to  browsers  on 
shopping  cans  connected  to 
shopping  lists  at  home,  as 
the  future. 

McNealy  talks  animatedly 
about  client-side  applications, 
such  as  those  being  used  in 
sales  automation,  written 


munications.  In  addition,  out¬ 
sourcing  of  government  IT  is 
expected  to  reach  a  high  iif 
nearly  87'Vi  in  2008. 

The  anticipated  retirement 
of  a  large  porthm  of  the  feder¬ 
al  rr  workforce,  the  critical 
lack  of  IT  skills  and  the  Bush  I 
adminisi ration’s  slated  prefer¬ 
ence  to  partner  with  the  pri-  I 
vate  sector  are  all  contributing  | 
factors  lu  the  anticipated 
grtxwth  in  outsourcing,  ac¬ 
cording  to  the  Input  study. 

Kane  recommended  that 
companies  take  specific  mea¬ 
sures  to  ensure  that  they  arc 
positioned  to  take  advantage 
of  the  new  federal  IT  market. 

F<ir  example,  companies 
should  m.ip  their  product  and 
serx  ice  offerings  to  agency  en¬ 
terprise  architecture  plans  and 
overall  mission  sutemenis.  In 
addition,  business  develop¬ 
ment  managers  should  study 
the  giwernment's  use  of  busi- 


for  Java-enabled  devices  — 
100  million  of  which  he  says 
are  already  in  u.sc. 

Sun.  he  says,  is  adding 
voice-over-IP  technology  to 
its  Sun  Ray  thin-clicnt  work¬ 
stations.  That  means  once  a 
user  logs  onto  a  terminal  with 
a  Java  card,  the  phone  recog¬ 
nizes  that  user.  This  summer. 
Sun  will  release  a  software 
.stack  running  on  Linux  codc'- 
namesj  Mad  Hatter  lo  boost  its 
desktop  offerings. 

The  total  package  is  a  direct 
attack  on  the  desktop  PC. 

Docs  Sun  see  itself  as  an  aiter- 
naiivc  to  Microsoft  Corp.? 

“It  depends  on  who  you 
are,"  McNealy  say's.  “For  the 
hundreds  of  thousands  of  Sun 
Ray  users,  we  already  are.  For 
tho.se  who  want  their  PC.  they 
may  hope  never. 

“We  don’t  build  a 
strategy  based  on 
what  our  competitors 
are  doing.”  he  says. 

“We  build  a  strategy 
based  on  what  our 
customers  want." 

Microsoft  is  moving 
deeper  into  the  enter¬ 
prise  on  the  strength 
of  its  desktop  domi- 


ness-case  scoring,  which  in 
addition  to  sc'tting  certain  se¬ 
curity  standards  ensures  ihai 
ail  new  IT  inx-csimenis  pnv 
vide  a  return  on  investment 
that's  equal  to  or  greater  than 
alternate  uses  of  the  same 
funding.  It  also  requires  that 
all  such  spending  gtxes  to 
products  and  servitvs  that 
directly  suppcxrt  an  agency's 
mission.  I 


nance,  and  Sun  officials  say 
their  client  strategy  vxill  help 
boost  enterprise  sales.  But 
while  company  officials  claim 
that  they  can  chip  away  at 
Micn»soft,  they  aren't  makuig 
any  bold  pivdicti4in5  t*r  even 
offering  safe  bets. 

“We’re  not  trying  to  beat 
Microsoft:  wc'rc  not  trying  t<x 
challenge  Microsoft.”  Mc¬ 
Nealy  says.  “Wc’rc  trying  to 
solve  a  problem . . .  and  gix'c 
people  mobility  with  security." 

When  the  plane  lands  in 
Orlando,  a  car  to  pick  up  the 
CEO  has  yet  to  afrive.  Mc¬ 
Nealy  seems  almost  amused 
by  his  sudden  lack  of  mobility'. 

Meeting  xxith  his  iForce 
partners  the  next  day.  Mc¬ 
Nealy  is  as  outspoken  a.s  ever. 
Ifbe's  tired,  he  hides  it  well. 

He  louts  the  compa¬ 
ny’s  S5J  billion  in 
cash  reserves, 
doing  just  fine  opera- 
liofully,"  he  says,  un¬ 
able  to  refrain  from 
taking  one  more  stab 
at  Microsoft:  After  all. 
he  says.  Sun  has  a  cash 
position  aberve  every¬ 
one  XAho  "isn't  a  con¬ 
victed  monopolist."  I 


On  Board  Sun’s  Corporate 
Jet,  McNealy  Talks  Mobility 
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Tools  Promise 
Better  Security 
Management 


New  products 
allow  centralized 
administration 


CENTRAL  roanagemeot 
of  multnendor  secu¬ 
rity  systems  and  the 
data  they  generate 
can  lead  to  better  risk  manage¬ 
ment  and  auditing  capabilities, 
users  said  at  last  week's  RSA 
Conference  2003  here. 

And  vendors  are  lining  up  to 
tap  into  that  opportunity,  with 
new  products  offering  sii^e- 
point  administration  of  activi¬ 
ties  ranging  from  threat  identi¬ 
fication  and  mitigation  to  iden¬ 
tity  management,  access  con¬ 
trol  and  con%uration  of  secu¬ 
rity  systems  made  up  of  prod¬ 
ucts  from  multiple  vendors. 

Conference  host  RSA  Secu¬ 
rity  Inc.  rolled  out  identity 
and  access  management  soft¬ 
ware  called  Nexus  that's  de¬ 
signed  to  allow  central  admin¬ 


istration  of  all  of  RSA's  securi¬ 
ty  products.  With  it.  users 
will  be  able  to  centrally  man¬ 
age  user  and  access  policies, 
validate  the  authenticity  of 
digital  certificates  and  enforce 
consistent  security  policies, 
according  to  Bedford,  Mass.- 
based  RSA. 

Such  integration  would  be 
“nirvana,’*  said  Luis  Suarez, 
vice  president  and  manager  of 
PKI  and  encryption  key  man¬ 
agement  at  Wachovia  Corp.  in 
Charlotte,  N.C. 

The  goal  is  to  make  manage¬ 
ment  of  disparate  technolo¬ 
gies  “more  transparent  and 
seamless.”  said  David  Young. 
IT  program  director  at 
Geisinger  Health  System  in 
Danville,  Pa.  “It  is  something 
we  have  been  trying  to  get  our 
bands  around  for  some  time.” 

Cofnpeting  Moves 

Making  a  similar  announce¬ 
ment  was  Computer  Associ¬ 
ates  International  Inc.,  which 
said  it  will  launch  its  eTrust 
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identifying  and  managing 

security  threats. 

Security  Command  Center  lat¬ 
er  this  quarter.  The  product, 
which  is  in  the  final  stages  of 
beta  testing,  will  give  users  a 
browser-based  interface  for 
centrally  administering  multi¬ 
vendor  security  infrastruc¬ 
tures.  according  to  CA. 

A  week  eariier,  ArcSight 
Inc.  in  Sunnyvale,  Calif.,  an¬ 
nounced  that  it  has  expanded 
the  number  of  products  sup¬ 
ported  by  its  ArcSight  2.1  risk 
management  software.  The 
product  can  now  collect,  cor¬ 
relate  and  centrally  report  se¬ 
curity  event  data  from  more 
than  60  products,  such  as  fire¬ 
walls.  intrusion-  and  spam-de¬ 
tection  software  and  identity 
management  tools,  company 
offldals  said. 

Driving  the  need  for  such 
tools  is  the  growing  complexi¬ 
ty  of  managing  a  robust  secu- 
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rity  infrastructure,  said  Kari 
lackson.  a  systems  engineer  at 
Brigham  Young  University  in 
Provo,  Utah. 

Companies  typically  have  an 
aggregation  of  firewalls,  bost- 
and  network-based  intrusion- 
detection  systems  (IDS),  anti¬ 
spam  and  antivirus  software, 
and  access-control  and  identi¬ 
ty-management  tools.  On  top 
of  all  that  is  the  data:  a  single 
firewaU,  for  instance,  can  gen¬ 
erate  nKm  than  1GB  per  day. 
And  IDS  sensors  can  tog  near¬ 
ly  half  a  million  entries  daily. 

There  are  so  many  different 
products  and  so  many  differ¬ 
ent  ways  of  looking  at  things. 

If  I  could  put  everything  in  one 
place,  it’s  going  to  make  my 
life  so  much  easier,”  said  Jack- 
soa  who  for  the  past  month 
has  been  beta-testing  CA's 
Command  Center  ~  a  product 
he's  pleased  with.  “It’s  been 
great,"  he  said.  “It  land  of  cen¬ 
tralizes  everything,  where  be¬ 
fore  you  would  have  to  run  all 
sorts  of  different  applications.” 

Tools  with  the  ability  to 
gather  and  quickly  correlate 
information  from  multiple  de¬ 
vices  allow  companies  to  pri¬ 
oritize  and  man^^  security  in¬ 
cidents  from  a  single  console, 
said  Michael  Rasmussen,  an 
analyst  at  Forrester  Research 
Inc.  in  Cambric^,  Mass. 

They  also  provide  the  abili¬ 
ty  to  comply  with  regulations 
such  as  the  Health  Insurance 
Portability  and  Accountability 
Act,  Rasmussen  said.  I 


FBI  Begins  Knowledge 
Management  Face-lift 


With  Phase  1  of  Trilogy  network  done, 
bureau  tackles  data  mining,  info  sharing 


The  FBI  last  week  be¬ 
gan  focusing  its  at¬ 
tention  —  as  well  as 
tens  of  millions  of 
dollars  from  its  fiscal  2004 
bu^et  request  —  on  improv’- 
ing  its  data  warehousing  and 
mining  capabilities. 

Uve  bureau  announced  that 
it  awarded  a  contract  to  New 
York-based  CiearForest  Corp. 
to  deploy  business  mtelltgence 
software  that  supports  a  new 
FBI  data  warehouse  that  con¬ 
sists  of  a  Terrorism  Intelli¬ 
gence  Database  and  an  Infor¬ 
mation  Sharing  Data  Mart.  FBI 
agents  are  currently  training 
on  ClearFbrest’s  software, 
wdiich  will  enable  them  to  ana¬ 
lyze  multiple  document  repos¬ 
itories  that  house  more  than 
1  billion  documents. 

Barak  Pridor,  CEO  of  Ciear¬ 


Forest,  said  the  same  technol¬ 
ogy  has  been  used  for  years  at 
large  Global  2,000  firms  such 
as  The  Dow  Chemical  Co., 
Thomson  Financial  and  Ford 
Motor  Co. 

The  FBI’s  focus  on  data 
mining  follows  the  March  28 
conq>letion  of  the  initial  roll¬ 
out  of  an  enterprisewide  net¬ 
work  known  as  Trilogy.  The 
S400  million  infrastructure 
program  has  so  far  yielded  the 
deployment  of 21,000  desk¬ 
tops,  more  than  3X)00  printers 
and  nearly  1,500  scanners,  and 
it  links  622  FBI  offices  via 
h^-speed  data  connections. 
In  addition.  Trilogy  will  form 
the  transport  layer  for  the 
FBI’s  new  Virtual  Case  Hie 
and  an  integrated  data  ware¬ 
house  that  will  eventually  link 
31  FBI  databases  through  a  sin¬ 
gle  Web  portal  said  FBI  Direc¬ 
tor  Robert  Mueller,  speaking 


April  10  at  a  Senate  Appropri¬ 
ations  Committee  hearing. 
The  Virtual  Case  File  database 
is  slated  to  be  fully  deployed 
by  year's  end. 

“We  are  now  fociised  on 
implementing  a  data  ware¬ 
housing  capability  that  can 
bring  together  our  informa¬ 
tion  into  databases  that  can  be 
accessed  by  agents  through¬ 
out  the  world  as  well  as  our 
analysts  as  soon  as  a  piece  of 
infonnatioD  is  developed," 
Mueller  said. 

Long-range  Plans 

But  getting  to  this  point  hasn't 
been  easy.  Mueller  said.  In  ad¬ 
dition  to  having  to  come  up 
with  S138  million  for  the  first 
phase  of  Trilogy  out  of  an  ex¬ 
isting  budget  that  didn't  cover 
it.  the  bureau  had  to  rewrite 
the  original  deployment  plan, 
which  Mueller  said  bad  pro¬ 
vided  little  long-term  vision 
for  technology  refreshment. 

The  original  plan  called  for 
the  addition  of  a  new  graphi¬ 


cal  user  interface,  without 
providing  for  upgrades  to  the 
FBI’s  central  databases,  said 
Mueller.  Simply  “puttii^  lip¬ 
stick  on  a  pig . . .  would  not 
enable  us  to  use  the  analytical 
tools  we  needed,”  be  said. 

In  the  aftermath  of  a  recent 
report  by  the  Justice  Depart¬ 
ment's  inspector  general  that 
criticized  the  FBI  for  spending 
“hundreds  of  millions  of  dol¬ 
lars"  on  failed  IT  projects. 
Mueller  said  he’s  tightening 
his  grip  on  the  bureau’s  IT 
purch^ing.  “I  am  looking  at 
the  information  technology 
dollars  with  a  view  to  making 
certain  that  every  one  of  those 
dollars  is  spent  wisely,”  said 
Mueller,  referring  to  the  S82 
million  he’s  requesting  in  this 
year’s  budget  specifically  for 
IT  refreshment  and  mainte¬ 
nance.  “It  makes  no  sense  for 
us  to  have  and  put  into  place 
that  which  will  be  obsolete  in 
two  years." 

“One  of  the  things  we  still 
hear  is  that  ^ents  in  the  field 
don't  have  e-mail  addresses  or 
access  to  individual  machines 
because  the  technology  just 
isn’t  as  widely  available  as  it 
would  be  in  a  corporate  set¬ 
ting,”  said  William  Harrod. 
director  of  the  Investigative 
Response  division  at  TruSe- 


Trilogy  Network 


cure  Corp.  in  Herndon.  Va. 
Harrod  spent  14  years  in 
the  FBI. 

James  Williams,  director  of 
security  solutions  at  managed 
security  services  firm  Solu¬ 
tionary  Inc.  in  Omaha  and  a 
former  FBI  agent,  said  upgrad¬ 
ed  core  database  systems  are 
among  the  most  critical  needs 
of  the  FBI.  “The  speed  at 
which  you  could  ^tain  infor¬ 
mation  was  strikingly  slow, 
and  you  would  get  on  one  sys¬ 
tem  and  not  be  able  to  get  to 
another,”  said  Williams,  refer¬ 
ring  to  his  expierience  using 
the  older  automated  case-file 
system.  “It’s  the  most  impor¬ 
tant  piece  of  inftastructure 
that  the  bureau  has.”  I 
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You  trust  the  rivets  to  hold  the 
44.ooo-ton  steel  skeleton  together. 


You  trust  the  skeleton  to  support 
three  miles  of  braided  cable. 

You  trust  the  cable  to  keep  you 
suspended  In  mid-air. 


Shouldn’t  you  feel  the  same 
way  about  the  security  of 
your  network  infrastructure? 
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Switch-based  Wireless 
LAN  Market  Heats  Up 


Networking  vendors  prep  for  launches 


m*  BOB  BBEWIN 

Extreme  networks 
Inc.  and  Trapeze  Net¬ 
works  Inc.  week 
introduced  switch- 
based  enterprise  wireless  LAN 
products  to  get  a  jump  in  a 
market  that  analysts  expect  to 
get  crowded  —  and  soon. 

Another  five  vendors  that 
declined  to  be  identified  plan 
to  launch  competing  products 
by  the  start  of  the  Networid- 
Interop  conference  in  Las  Ve¬ 
gas  April  27.  Similar  switch- 
based  systems  were  launched 
by  Nortel  Networks  Ltd.  last 
month  [QuickLink  374351  and 
by  Symbol  Technologies  Inc. 
last  year  [QuickLink  32S3I]. 
Older  Wi-Fi  hardware  puts 


all  the  intelligence  technology, 
such  as  security  and  the  radio 
frequency  (RF)  modu]e.<i.  into 
a  ceiling-mounted  piece  of 
hardware  called  an  access 
point  (AP).  The  newer  switch- 
based  architecture  reduces  the 
AP  to  a  dumb  terminal  con¬ 
taining  just  RF  modules,  with 
security  and  management 
housed  in  a  rack-mounted 
switch. 

Gemma  Paulo,  an  analyst  at 
In-Stat/MDR  in  Scottsdale, 
Ariz..  said  this  approach  al¬ 
lows  enterprises  —  which 
must  install  tens  if  not  hun¬ 
dreds  of  APs  to  cover  a  corpo¬ 
rate  campus,  manufacturing 
plant  or  warehouse  —  to  buy 
relatively  inexpensive  APs. 


BMC  Looks  to  Simplify 
Mainframe  Management 

Software  targets 
IT  workers  lacking 
mainframe  skills 


BY  MARC  L.  SOMBINI 

In  a  bid  to  help  mainframe- 
dependent  companies  protect 
their  investments.  BMC  Soft¬ 
ware  Inc.  is  rolling  out  soft¬ 
ware  designed  to  simplify  and 
automate  big-iron  systems 
management  processes  for  a 
wider  group  of  IT  workers. 

Houston-based  BMC  today 
plans  to  announce  System  Ad¬ 
visor  for  z/OS,  the  Hrst  in  a 
planned  line  of  )ava-based 
toob  that  it  said  will  let  IT 
staffers  who  lack  mainframe 
skiUs  manage  mainframe  com¬ 
puting  resources.  For  example, 
netwoik  or  Unix  specialbts 
will  be  able  to  use  the  soft¬ 
ware  to  manage  mainframes 
via  a  streamlined  graphical 
user  ioteiface  (GUI). 

Cahin  Guidry,  vice  presi¬ 


dent  and  general  manager  of 
enterprise  systems  manage¬ 
ment  at  BMC  said  keeping 
mainframes  running  smoothly 
could  become  more  of  a  chal¬ 
lenge  as  companies  f^e  a  pre¬ 
dicted  shortage  of  mainframe- 
savvy  IT  wotkers  [(^ickLink 
37362J. 

Typically,  mainframes  are 


PRODUCT  DETAtLS 


ferz/OS 
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Companies  can  then  put  their 
money  into  switches  that  prt>- 
vide  IT  managers  with  more 
control  over  their  wireless 
networks  than  they  could 
achieve  with  an  older-genera- 
tion  "smart”  AP. 

Aaron  Vance,  an  analyst  at 
Synergy  Research  Group  Inc, 
in  Phoenix,  .said  the  large 
□umber  of  companies  vying  to 
enter  the  market 
represents  the 
continuing  boom 
in  the  WLAN  in¬ 
dustry  and  a  sense 
of  untapped  op¬ 
portunities  in  the 
enterprise  WLAN 
market. 

Despite  this 
growth.  Paulo  said 
the  market  might 


I  not  be  able  to  support  so 
many  new  products  as  well  as 
older  systems,  such  as  the 
smart  AP-based  systems  from 
Proxim  Corp.  in  Sunnyvale, 
Calif.,  and  Cisco  Systems  Inc. 

She  also  said  Cisco,  the 
dominant  player,  could  put 
heavy  pressure  on  its  competi¬ 
tion  by  introducing  a  similar 
switched-based  architecture. 

Paulo  stressed  that  not  all 
switched-based  WLAN  prod¬ 
ucts  are  equal,  adding  that  Ex¬ 
treme  Networks*  entry  stands 
out.  Its  product  combines  the 
functionality  of  a  4B-port 
iO/100  Ethernet  wired  switch 
with  a  system  that  can  manage 


WHAT  IT  DOES 

& 

APs  that  operate 
under  the  802.Ub. 
802.11g  and  802.Ua 
standards. 

Vipin  Jain,  vice 

..  H  -1,1,.,  Rl 

president  of  the 

WLAN  access 

mrti'.iJ.ry.rlil  f'i.C.1,,'1 

group  at  Santa 

lli)>  1-,  J  ii;  J 

Clara,  Calif.-based 

for srt'ti  (i 

Extreme  Net¬ 
works,  said  all 

WLAN  management  b  built 
into  the  switch.  The  Extreme 
Networks  Summit  300-48 
switch  sells  for  S6.49S.  while  a 
dumb  AP  seUs  for  S59S. 

Paulo  said  WLAN  switch- 
based  products  from  Symbol 
and  those  introduced  last 
week  by  Pleasanton,  Calif.- 
based  IVapeze  Networks  lack 
the  tight  integration  between 
wired  and  wireless  networks 
offered  by  the  Extreme  Net¬ 
works  system. 

But  according  to  Vance, 
they  do  provide  easier  central¬ 
ized  management  than  older 
APs,  which  need  an  upgrade 
in  firmware  if  network  man¬ 
agers  want  to  beef  up  security. 
Trapeze  has  also  built  in  the 
ability  to  detect  unauthorized 
users  and  rc^e  APs  on  the 
network.  I 

MNE  ON  THS  TOPIC 

For  cornpRhereive  coverage  of  wireless 
LAN  systerrs.  visit  our  Moblie/Wireless 
Knowbdge  Canter 

OQiridfLMiklOOO 

www.oonipulenmrklxeni 


managed  through  3270  green- 
screen  terminals  or  special¬ 
ized  interfaces,  Guidry  said. 

Among  other  features,  the 
System  Advisor  GUI  uses  text 
messages  to  help  simplify  sys¬ 
tems  configuration  and  appli¬ 
cation  service  management 
tasks,  he  noted.  Systems  man¬ 
agers  will  also  be  able  to  use 
the  software  to  set  perfor¬ 
mance  thresholds,  restart  sys¬ 
tems  and  oversee  workload 
management,  data  integrity 
and  storage  operations,  ac¬ 
cording  to  BMC. 

Given  the  graying  of  the 
mainframe  wor^orce.  that 
sort  of  point-and-click  tool 
could  help  younger  IT  staffers 
get  up  to  speed  on  main¬ 
frames.  said  Larry  Riggen.  a 
principal  technology  consul¬ 
tant  at  Cinergy  Corp.,  a 
Cincinnati-b^d  utility  and 
energy  services  firm. 

At  Cinergy,  which  runs 
BMC's  Mainview  mainframe 
management  software  and  its 
tools  for  managing  OB2  data¬ 
bases.  there  is  also  tremen¬ 
dous  pressure  to  cut  costs, 
Riggen  said.  The  utility  will 
probably  consider  BMC’s  new 


offering  as  a  potential  way  to 
meet  those  goals,  he  added. 

Computer  Associates  Inter¬ 
national  Inc.  and  IBM’s  Tivoli 
Software  unit  have  also  recc^- 
nized  the  anticipated  thinning 
of  the  mainframe  talent  pool, 
said  Richard  Ptak,  an  analyst 
at  Ptak  &  Associates  Inc.  in 
Amherst.  N.H.  He  said  both 
CA  and  Tivoli  will  likely  make 
similar  product  announce¬ 
ments  in  the  near  future. 


CA  said  it  already  sells  sev¬ 
eral  Windows-based  tools  like 
System  Advisor  to  ease  main¬ 
frame  job  management,  auto¬ 
mation  and  security  adminis¬ 
tration  for  IT  staffers  trained 
on  other  systems.  Tivoli  said  it 
is  shipping  a  mainframe  man¬ 
agement  application  that  can 
be  used  by  various  IT  woriters 
and  is  developii^  portal  soft¬ 
ware  to  provide  integrated 
mainframe  monitoring.  I 
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Bank  of  Ireland 
Picks  HP  to  Run  IT 

The  Bank  of  Ireland  said  H  has 
chosan  Hewlett'Paciiard  Co.  for 
a  seven-year  IT  outsourcirtg  con¬ 
tract  worth  about  S600  miRfon. 
ponding  final  negotiatiorts  with 
HP.  A  spokeswoman  for  the 
Dublin-based  bank  said  it  will 
likely  take  four  to  six  months  to 
agree  on  the  full  terms  of  a  con¬ 
tract  About  SOO  of  the  bank's  IT 
workers  are  due  to  be  trans¬ 
ferred  to  HP  as  part  of  the  deal. 

Intel  Puts  3-6Hz 
Processor  on  Hold 

kite!  Corp.  halted  shfoments  of  a 
S-GHz  Pentium  4  processor.  |ust 
hours  after  tormaly  aiMKMincing 
the  chip.  Irttef  said  that  it  had 
found  an  unspecified  "anomafy" 
in  a  small  number  of  the  devices. 
HP.  DeA  Computer  Corp.  and 
Gateway  Inc.  introduced  desktop 
systems  that  use  the  new  proc¬ 
essor.  but  al  three  aid  they 
were  unsure  how  the  shipment 
hold  would  affect  their  detiveries. 

EMC  Sees  Profits 
For  Rest  of  2003 

EMC  Corp.  reported  a  first-quar¬ 
ter  profit  of  million  and  said 
it  expects  to  stay  in  the  Mack 
for  the  rest  of  the  year.  The  Hop- 
Unton.  Iiilass.-b8sed  storage 
vendor  said  H  had  reveruie  of 
S1.38  biMon  in  the  first  quarter, 
up  6%  from  the  year-earfier  lev¬ 
el  of  St3  biMion.  EMC  also  ac¬ 
quired  Asirum  Software  Corp..  a 
Boston-based  vendor  of  storage 
resource  management  software. 

Short  Takes 

QUANTUM  COPP  in  Milpitas. 

Cakf..  wid  STORAGE  TECHNOLOGY 
COPP  in  Louisvile.  Colo.,  fBed  du¬ 
eling  Icwsuts.  They  have  charged 
each  other  with  infringing  on 
patents  retaled  to  tape  drives. .. . 
PEOPlESOn  INC  in  Pleasanton. 
Calf.,  announced  a  set  of  t3  busi¬ 
ness  appkabons  tailored  tar  mid- 
soe  UMTS  with  annual  reverwe  of 
up  to  SSOO  mIfiorL 


AMD  Readies  Rollout 
Of  64-bit  Server  Chip 


Microprocessor 
will  also  support 
32-bit  applications 


Ci 


BY  TODOR.  WEISS 

HIP  MAKfK  Ad¬ 
vanced  Micro  IX’- 
viccs  Inc.  will  for¬ 
mally  launch  its  M- 
bit  Opicron  ser^’er  prtvessor 
lomorrow.  and  some  software 
and  hardware  v  endors  have 
been  quick  to  lump  on  the 
bandwagon. 

For  e.vample.  .SuSE  Linux 
AG  plans  to  make  available 
this  week  a  version  of  its  Lin- 
u.\  distribution  for  use  on 
Opteron-based  systems.  Nur¬ 
emberg.  Germany-bast’d  SuSE 
has  created  a  release  of  the 
open-source  operating  system 
that  lets  users  run  .^2-bit  appli¬ 


cations  as  well  as  64-bit  ones, 
said  Markus  Rex.  SuSE’s  vice 
president  t>f  development. 
SuSE  built  the  rclc.isc  out  of 
the  same  code  it  uses  for 
servers  based  on  Intel  Corp.’s 
Itanium  .and  .x86  chips  and 
IBM’s  mainframe,  midrange 
and  Unix  system.s.  w'hich 
should  make  it  easier  for  ven¬ 
dors  to  develop  applications 
for  Optcron  systems  Rex  said. 

Red  H.it  Inc.  in  Raleigh. 
N.C..  said  it  plans  to  have  an 
Opteron-enablcd  version  of  its 
Linux  operating  system  ready 
in  the  fall.  .Meanwhile.  Micro¬ 
soft  Corp.  earlier  this  month 
said  it  will  stan  beta-testing 
(>4-bit  versioas  of  Windows 
XP  and  Windows  Server  2003 
for  Optcron  and  AMD's  up¬ 
coming  Athlon  f>4  desktop 
processor  by  midyear. 


IBM  said  it  will  have  an 
Optcron  version  of  its  DB2 
Universal  Database  ready  this 
summer,  initially  supporting 
SuSE's  Linux  software.  Oracle 
Corp.  confirmed  that  it’s  also 
developing  a  release  of  its 
OracleOi  database  that  will  run 
on  Opteron-based  systems. 

Sunnyvale.  Calif. -based 
AMD  said  it's  talking  with  top 
server  vendors  about  using 
Optcron  in  their  systems. 


Opteron  Facts 


Some  smaller  server  makers, 
including  Polywell  Comput¬ 
ers  Inc..  M&A  Tcchnolog)’ 
Inc.  and  Penguin  Computing 
Inc.,  have  already  signed  up 
to  use  the  new  chip.  In  addi¬ 
tion.  Nvidia  Corp.  in  Santa 
Clara.  Calif.,  said  it  plans  to 
announce  an  Optcron-opti- 
mized  graphics  motherboard 
chip  set  for  high-end  work¬ 
stations. 

Bill  ClaybriMvk.  an  analv'st 
at  Aberdeen  Group  Inc.  in 
Boston,  said  Opteron  gives 
AMD  a  potential  advantage 
over  Intel’s  64-bit  Itanium 
chips  because  of  its  support 
for  32-bit  applications.  "With 
Itanium,  ^sau  have  to  port 
them,  and  it’s  not  necessarily 
an  easy  port.”  he  said. 

The  support  for  both  32- 
and  64-bit  applications  is 
where  “AMD  is  really  starting 
to  show  stvme  muscle.”  said 
Ted  Schadler.  an  analyst  at 
Forrester  Research  Inc.  in 
Cambridge.  Mass.  “That’s 
pretty  powerfuL  and  obviously 
a  decision  Intel  didn't  make.”  k 
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NetWare 

stable  operating  systeim:  it 
)u.st  wasn't  as  usable.  Now 
they're  making  it  more  uwhlc 
with  Linu.x." 

Gardner  ackmmledgcd  that 
his  company,  a  steadfast  Nov¬ 
ell  user,  had  some  concerns 
about  NetWare's  future. 

Although  there  is  no  official 
ship  date  for  NetWare  7,  Mess- 
man  said  Novell  will  follow  its 
standard  ttmelirH*  of  approxi¬ 
mately  18  months  between 
NetWare  releases. 

Messman  said  users  who  arc 
paying  maintenance  fees  will 
have  the  option  to  eventually 
migrate  from  the  NetWare 
kernel  to  Linux.  “It’s  a  good 
migration  path  for  NetWare 
users  who  were  worried  about 
where  we  were  going  with 
Net  Wan*.”  he  said. 

En.suring  that  file.  prim, 
storage,  directory.  Web  devel¬ 
opment.  resource  manage¬ 
ment  and  other  NetWare  ser¬ 
vices  will  be  available  for  the 
long  haul  "gives  customers 
comfort,"  Messman  added. 


"I  think  it’s  a  good  strateg)." 
said  Elizabeth  Lenzi.  manager 
of  IT  at  Prevent  Child  Abu.se 
America.  Officials  at  the 
Chicago-based  nonprofit  orga¬ 
nization  “had  a  lot  of  concern" 
about  where  Novell  was  head¬ 
ing  with  NetWare,  she  said.  "It 
seems  like  they're  coming 
hack  stnmg,  hopefully." 

Even  some  users  who  said 
they  lacked  such  worries  are 
supporting  the  Linux  strateg)'. 

“It  sound.s  like  a  gre.it  idea." 
said  Victor  Ponelis.  a  NetWare 
technologist  at  the  University 
of  WLsconsin-Madison.  "For 
my  pan.  there's  no  concern 
that  NetWare  is  going  logo 
away.  Wcwill  simply  adapt  as 
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the  industry  adapts."  If  the 
NetWare  kernel  goes  away,  he 
added,  “the  services  will  be 
running  on  something  else." 

Novell  Vice  Chairman  Chris 
Stone  said  the  decision  to  of¬ 
fer  the  Linux  migration  path 
was  driven  b>-  users.  “They 
were  Kniking  for  an  open 
diHir."  Stone  said.  “We  all 
know  that  NetWare’s  revenue 
has  been  dipping  over  the 
years.  So  what  do  you  do?  You 
take  the  services  and  >'ou 
make  them  the  value." 

Stone  and  Messman  both 
contended  that  for  NetWare 
users,  having  the  choice  to  mi¬ 
grate  to  Linux  will  be  more 
important  than  actually  e.xcr- 
cising  it.  “I  think  once  they  get 
that  option,  they’ll  choose  not 
to  do  it,"  Messman  said.  “They 
just  need  lo  know  they  can." 

But  some  BrainShare  atten¬ 
dees  said  that  they  had  no  in¬ 
tention  of  migrating  off  of 
NetWare  in  the  first  place. 

"Our  core  processing  is  all 
done  on  NetWare,  and  that’s 
not  going  to  change  in  the 
foreseeable  future,"  said  Ken 
Forgie.  assistant  vice  president 
and  IT  manager  at  Asheville 


Savings  Bank  in  Asheville, 
N.C.  “They're  a  stable  enough 
company  where  we've  never 
really  had  those  doubts." 

In  addition  to  giving  Net¬ 
Ware  users  a  possible  way  for¬ 
ward.  Novell  is  claiming  that  it 
has  3  lot  to  contribute  to  the 
open-source  community  by 
improving  the  Linux  kernel. 

“Linux  is  an  immature  oper¬ 
ating  system  right  now,"  Mess¬ 
man  said  in  an  interview  with 
Computerworld.  “It  hasn’t  had 
somebody  like  Novell  worry¬ 
ing  about  making  it  robust,  re¬ 
liable  and  scalable  for  ver>' 
much  time.  We  think  we  can 
bring  (hat  to  the  Linux  kernel." 

In  a  letter  to  Linux  Weekly 
News.  Messman  subsequently 
apologized  for  calling  Linux 
“immature."  He  stressed  that 
“Novell  wouldn't  be  taking 
this  bold  step  if  we  didn't  feel 
Linux  was  a  solid  operating 
system”  IQuickLink  a3060]J 


MOREONUNE 

Nove«  Vice  Chatman  Chns  Slone 
chsciisses  the  internal  *tood  <i<]his‘  that 
vetoed  ihe  Linux  strategv 

OQutdiLMi  37838 

www.GanipiitonivorW.com 


u 


CMHIBMU  IMniM 


NEWS 


WWW  compulerwortd.com 


BRIEFS 


Bankoflreiaiid 

PidisHPtoRunfT 

Tht  BMk  of  Iratand  sM  K  hM 
rhpiiH  Hwwbit  Patlawd  Co.  hr 
awwB  ynffTomwourcingoorr* 
tael  wofUi  about  1800  mnofi, 
^■■■9  ■Ml  naQonanona  wm 
HP.AipolMMinMilortho 
DiMa  haaiiltiaiitBJdllwM 
My  tiba  lour  to  Mi  months  to 
a^wanOiatoltonMofaam' 
tact  Meal  BOO  of  lha  M's  rr 
smihars  an  dM  to  ba  tans- 
farrod  to  HP  as  part  of  the  daaL 


Intel  Puts  3-GHz 
Processor  on  Hold 

total  f  nni  hMtori  ititpinaiilii  nf  a 
3*0Hi  Mltoni  4  praoaanr.  tort 
hem  aftor  fenmly  amounctog 
too  d^p.  total  saM  M  i  had 
tom 
toai 

HP,  Oal  Campiitor  Covp.  and 

1^1  ■  A  111  »  »  - 

tn^oMf  UK.  avooucaa  ooeniop 

aytoamalliataaithaaowpne- 

aaMT.haldllhnesaidiwy 


EMC  Sees  Profits 
For  Rest  of  2003 

aiCCerp.rapertadafiraH|ur- 
tar  pnM  of  SK  adM  and  saW 
R  aoecls  to  stay  to  the  Uacli 
far  the  fiat  of  the  yaer.  The  Hop- 
ktotao,  llaiB.-bMad  storaoa 
vendar  add  R  Imd  ravonua  of 
StS6  hSoa  to  the  firal  viartor. 
up  0%  Irani  dm  yaaraarBar  lav- 
el  of  SUbMon.  EMC  Mao  ae- 
qMrod  Aatam  Sofbaan  Carp.,  a 
BaMon-baaad  vandor  od  storaoa 


Short  Takes 


QUMnUM  CORP.  to  MtoRto. 

ClK,  and  STORAOE  TECHNOLOGY 
COIIP.tolnidP)Ma.OMo,Mtfa- 
eing  tanaMIs.  Thay  hwa  eharpMl 
aMh  oM  wRh  jahtogbiQ  on 
patonfa  ratotod  to  lipa  Mna. . . . 
PEOPLESOn  MC.  to  PlinMton, 
CMmaanarneadamefOtaiM- 
naaaapphMfanalMfaradfariaid' 
Mba  aam  nih  eanoM  ravanw  of 
aptolBOOaMi. 


AMD  Readies  Rollout 
Of  64-bit  Server  Chip 


Microptiocessor 
will  also  support 
32-bit  applications 


av  TooD  n.  WEISS 

CHIP  MAKER  Ad¬ 
vanced  Micro  De¬ 
vices  Inc.  will  for¬ 
mally  launch  its  64- 
bit  Opteron  server  processor 
tomorrow,  and  some  software 
and  hardware  vendors  have 
been  quick  to  jump  on  the 
bandwa^OTi. 

For  example.  SuSE  Linux 
AG  plans  to  make  available 
thb  week  a  version  of  its  Lin¬ 
ux  distribution  for  use  on 
Opteron-based  systems.  Nur¬ 
emberg.  Germany-based  SuSE 
has  created  a  release  of  the 
open-source  operatii^  system 
tlut  lets  users  run  32-bit  appli¬ 


cations  as  well  as  64-bit  ones, 
said  Markus  Rex.  SuSE's  vice 
president  of  devdopment. 
SuSE  built  the  release  out  of 
the  same  code  it  uses  for 
servers  based  on  Intel  Corp.’s 
Itanium  and  x86  chips  and 
IBM’s  mainframe,  midrange 
and  Unix  systems,  which 
should  make  it  easier  for  ven¬ 
dors  to  develop  applications 
for  Opteron  systems  Rex  said. 

Red  Hat  Inc.  in  Raleigh. 

N.C..  said  it  plans  to  have  an 
Opteron-enabled  version  of  its 
Linux  operating  system  ready 
in  the  £aiu.  Meanwhile,  Micro¬ 
soft  Corp.  earlier  this  month 
said  it  wiU  start  beta-testing 
64-bit  versions  of  Windows 
XP  and  Windows  Server  2003 
for  Opteron  and  AMD’s  up¬ 
coming  Athlon  64  desktop 
processor  by  midyear. 


IBM  said  it  will  have  an 
Opteron  version  of  its  OB2 
Universal  Database  ready  this 
summer,  initially  supporting 
SuSE’s  Linux  software.  Oracle 
Corp.  confirmed  that  it’s  also 
developing  a  release  of  its 
Orade9i  database  that  will  run 
on  Opteron-based  systems. 

Sunnyvale,  Calif. -based 
AMD  said  it's  talking  with  top 
server  vendors  about  using 
Opteron  in  their  systems. 


Opteron  Facts 


Some  smaller  server  makers, 
including  Polywell  Comput¬ 
ers  Incn  M&A  Technology 
Inc.  and  Penguin  Computing 
Inc.,  have  already  signed  up 
to  use  the  new  chip.  In  addi¬ 
tion.  Nvidia  Corp.  in  Santa 
Clara.  Calif.,  said  it  plans  to 
announce  an  Opteron-opti- 
mized  graphics  motherboard 
chip  set  for  high-end  work¬ 
stations. 

Bill  Claybrook.  an  analyst 
at  Aberdeen  Group  Inc  in 
Boston,  said  Opteron  gives 
AMD  a  potential  advantage 
over  Intel's  64-bit  Itanium 
chips  because  of  its  support 
for  32-bU  iqipUcations.  "Witb 
Itanium,  you  have  to  port 
them,  and  it's  not  necessarily 
an  easy  port.”  he  said. 

The  support  for  both  32- 
and  64-bit  applications  is 
ti^ere  "AMD  is  really  starting 
to  show  some  muscle,”  said 
Ted  Schadler.  an  analyst  at 
Forrester  Research  Inc.  in 
Cambrid^  Mass.  That’s 
pretty  powerfoL  and  obviously 
a  decision  Intel  didn’t  make.”  I 
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stable  operating  systems;  it 
just  wasn’t  as  usable.  Now 
they’re  making  it  more  usable 
with  Linux.” 

Gardner  acknowledged  that 
his  company,  a  steadfast  Nov¬ 
ell  user,  had  some  concerns 
about  NetWare's  future. 

Although  there  is  no  oflliciai 
ship  date  for  NetWare  7,  Mess- 
man  said  Novell  will  follow  its 
standard  timeline  of  approxi¬ 
mately  18  months  between 
NetWare  releases. 

Messman  said  users  who  are 
paying  maintenance  fees  will 
have  the  option  to  eventually 
migrate  from  the  NetWare 
kernel  to  Linux.  ”It’s  a  good 
migration  path  for  NetWare 
users  who  were  worried  about 
where  we  were  going  with 
NetWare.”  he  said. 

Ensuring  that  file,  print, 
storage,  directory.  Web  devel¬ 
opment.  resource  manage¬ 
ment  and  other  Neti\^  ser¬ 
vices  will  be  available  for  the 
long  haul  ‘gives  customers 
comfort.”  Messman  added. 


“I  think  it's  a  good  strategy,” 
said  Elizabeth  LenzL  manager 
of  IT  at  Prevent  Child  Abuse 
America.  Officials  at  the 
Chicago-based  nonprofit  orga¬ 
nization  ”had  a  lot  of  coocem” 
about  where  Novell  was  bead¬ 
ing  with  NetWare,  she  said.  “It 
seems  like  they're  coming 
back  strong,  hopefully.” 

Even  some  users  who  said 
they  lacked  such  worries  are 
supporting  the  Linux  strategy. 

“It  sounds  like  a  great  idea.” 
said  Victor  PoneUs,  a  NetWare 
technolt^t  at  the  University 
of  Wisconsin-Madison.  “For 
my  part,  there's  no  concern 
that  NetWare  is  going  to  go 
away.  We  will  simply  adapt  as 


the  industry  adapts.”  If  the 
NetWare  kernel  goes  away,  he 
added,  “the  services  will  ^ 
running  on  something  else." 

Novell  Vice  Chairman  Chris 
Stone  said  the  deciskm  to  of¬ 
fer  the  Linux  migration  path 
wa.s  driven  by  users.  They 
were  looking  for  an  open 
door."  Slone  said.  ”We  ail 
know  that  NetWare's  revenue 
has  been  dipping  over  the 
years.  So  what  do  you  do?  You 
take  the  services  and  you 
make  them  the  value." 

Stone  and  Messman  both 
contended  that  for  NetWare 
users,  having  the  choice  to  mi¬ 
grate  to  Linux  will  be  more 
important  than  actually  exer¬ 
cising  it.  "I  think  oni%  they  get 
that  option,  they’ll  choose  not 
to  do  it,"  Messman  said.  "They 
just  need  to  know  they  caa" 

But  some  BrainShare  atten¬ 
dees  said  that  they  had  no  in¬ 
tention  of  migrating  off  of 
NetWare  in  the  first  place. 

"Our  core  processing  is  all 
done  on  NetWare,  and  that's 
not  going  to  change  in  the 
foreseeable  future."  said  Ken 
Forgie,  assistant  vice  president 
and  IT  manager  at  AMievUle 


Savings  Bank  in  Asheville. 
N.C.  “They're  a  stable  enough 
company  where  we’ve  never 
really  had  those  doubts.” 

In  addition  to  givtng  Net¬ 
Ware  users  a  possible  way  for¬ 
ward.  Novell  is  claiming  that  it 
has  a  lot  to  contribute  to  the 
open-source  community  by 
improving  the  Linux  kernel. 

"Linux  is  an  immature  oper¬ 
ating  system  right  now.”  Mess¬ 
man  said  in  an  interview  with 
Conqiurerworld.  ”It  hasn't  had 
somkiody  like  Novell  worry¬ 
ing  about  makti^  it  robust,  re¬ 
liable  and  scalable  for  very 
much  time.  We  think  we  can 
bring  that  to  the  Linux  kernel” 

In  a  letter  to  Linux  Weekly 
News.  Messman  subsequently 
apologized  for  calling  Linux 
“immature.”  He  stressed  that 
“Novell  wouldn't  be  lalrjng 
this  bold  step  if  we  didn’t  feel 
Linux  was  a  solid  operating 
system”  [Qwcklink  a3060lJ 


Novel  Wee  Oiaimwi  Chris  Slone 
disQjBees  the  ntonal  *lood  faMs*  th 
yielded  the  Linut  strategy: 


Knowledge  You  Need 

Track  changing  market  conditions,  follow  the  latest  news  and 
develop  strategies  for  deploying  new  technology. 

No  matter  what  you're  looking  for,  you're  point  of  access  to  all  of  the  information  you 

sure  to  find  it  In  one  of  our  16  online  need  to  support  important  business  and 

Knowledge  Centers.  Each  self-contained  purchase  decisions: 

virtual  library  contains  a  complete  .  up-,cu,e^i„ute  new, 

collection  of  topically  based  resources  on  a  *  spedal  reports 

specific  subject — from  storage  to  IT  •  white  papers 

management  to  ROI.  With  a  weaKh  of  *  Research  and  analysis 

aggregated  information,  these  easy-to-  *  Vendor  listings 

navigate  Knowledge  Centers  are  a  single  *  training  information 


Visit  Computerworld.com  and  get  all  the  knowledge 
you  need  to  make  informed,  confident  decisions. 

Computerworld.com/knowledgecenters 


I 


MHTHMU  MilMH 


NEWS 


www.computerwortd.  com 


Tight  rr  Budgets  Put 
Cnmp  in  SAN  Plans 


Storage  managers 
look  to  add  tools 
to  automate  tasks 


Daryl  black,  a  stor¬ 
age  architect  at 
Telus  Communica¬ 
tions  Inc.,  last  week 
said  the  biggest  challenge  be 
will  &ce  this  year  is  trying  to 
manage  the  company's  170TB 
of  storage  following  layoff 
that  cut  Telus'  IT  staff  from 
h300  people  to  750. 

WiA  only  30TB  of  net¬ 
worked  storage  in  place.  Black 
said,  increasing  the  amount  of 


disk  capacity  that  resides  on 
Vancouvei.  British  Cohunbia- 
based  Telus*  storage-area  net¬ 
work  (SAN)  represents  the 
lowest-hailing  fruit  for  him. 
Black  was  one  of 
many  Storage  S  T  O  I 
Networking  UTTUf 

World  attendees  fl  b  I  ff 
who  said  they're  ^ 

lookup  to  in¬ 
creased  automation  and  stor¬ 
age  consolidation  as  ways  to 
do  more  with  fewer  resources. 

But  some  attendees  said 
they’re  getting  push-back 
^in  higher-level  executives 
who  are  still  reluctant  to 
spend  money  on  emerging 
SAN  technologies. 


STORAGE 


)ohn  Dias,  a  systems  engi¬ 
neer  at  Hibernia  (^rp.  in  New 
Orleans,  said  be  and  other  IT 
staffers  there  had  to  contend 
with  budget  cutbacks  that 

forced  them  to  re- 
E  iustify  technology 


lirTUinDl^fUC  investments  pre- 
WL I  ff  imiVlIHl  viousJy approved 
g  by  ofiicials  at  the 

bank.  “We’re  not 

and  stor-  able  to  buy  everything  we 
>  ways  to  wanted."  Dias  said 
resources.  In  November,  Dias  deployed 
«s  said  a  storage  resource  manage- 
i*back  ment  tool  that  lets  him  see 
necutives  what  data  is  being  stored 
int  to  where  on  Hibernia’s  2STB 

lerging  SAN.  But  Dias  noted  that  he 
still  cant  convince  upper 


management  that  performing 
incremental  rather  than  full 
backups  of  servers  would  help 
the  company  conserve  storage 
space. 

Gary  Pilafas,  a  senior  stor¬ 
age  and  systems  architect  at 
UAL  Loyalty  Services  Inc.,  a 
unit  of  United  Air  Lines  Inc. 
that  manages  the  company's 
frequent-flier  program,  said 
business  managers  are  tired  of 
seeing  his  face  every  quarter. 
“Whether  it’s  for  $100,000  for 
storage  or  a  million ...  the  first 
question  out  of  their  mouth  is. 
‘How  do  we  really  know  how 
you're  using  it?*  ”  Pilafas  said 

Pilafas  in  December  was 
able  to  deploy  a  SAN  manage¬ 
ment  tool  devel(^>ed  by  Long¬ 
mont.  Cola-based  CreekPath  i 
Systems  loc.  that  uses  prede¬ 
fined  policies  to  automate 
storage  reporting,  provision- 
ii^  and  security,  greatly  re¬ 
ducing  the  time  IT  workers 
need  to  devote  to  those  for¬ 


merly  manual  tasks. 

Yet  Pilafos  said  he  still  wres¬ 
tles  with  business  manage- 
ment  to  get  them  to  under¬ 
stand  that  United  needs  to 
take  more  steps  to  ensure  that 
things  won't  break  down  as 
the  SAN  grows.  Tfou  need  to 
be  proactive  in  establishing 
what  could  potentially  happen 
if  we  don’t  do  this,"  he  said. 

Glenn  Exline,  manager  of 
advanced  technologies  at 
Patrick  Air  Force  Base  in  Cape 
CanaveraL  Fla.,  said  funding 
allowed  him  to  deploy  a  SAN 
last  September  to  replace  the 
base’s  direct-attached  storage. 
The  storage  network  has  let 
the  base's  IT  staff  consolidate 
servers  and  cut  its  data  back¬ 
up  window  from  14  hours  to 
just  twa  ExUoe  said.  Now  he 
hopes  to  buy  a  storage  re¬ 
source  management  tool  to 
give  him  and  other  IT  man¬ 
agers  a  better  view  of 
being  stored  on  the  SAN.  I 
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Storage 

vices  from  different  vendors. 
“That  will  be  where  well  be 
able  to  achieve  the  functional¬ 
ity  we  want.”  she  said. 

One  potential  roadblock  is 
corporate  reluctance  to  spend 
money  on  new  technologies 
(see  story  above).  But  virtual- 
izatioa  software,  which  makes 
the  storage  space  on  different 
disks  look  like  a  single  pool,  is 
becoming  the  cornerstone  of 
efforts  to  develop  more  auto¬ 
mated  storage  infratructures. 

Most  products  now  on  the 
market  support  viitualizatioo 
on  a  stogie  disk  array  or  serv¬ 


er.  Netwoik-based  virtualiza¬ 
tion  promises  to  allow  disk 
storage  devices  across  an  en¬ 
tire  SAN  to  be  centrally  man¬ 
aged  as  a  single  entity. 

Cisco  Systems  Inc  and  Bro¬ 
cade  Ck)mmunications  Sys¬ 
tems  Inc  are  both  building 
network-based  virtualization 
capabilities  into  their  storage 
switches.  Meanwhile,  Heijriett- 
Packard  Co,  Sun  Microsys¬ 
tems  Inc.  and  IBM  are  ship¬ 
ping  or  will  soon  ship  prod¬ 
ucts  that  support  virtualiza¬ 
tion  approaches,  thou^ 
initially  for  their  own  storage 
devices  only. 

Rod  Luc^  chief  IT  archi¬ 
tect  at  Conseco  Finance  Corp. 
in  St  PauL  Mina,  said  virtual¬ 


ization  tools  are  helping  the 
company  save  money.  That’s 
particularly  important  as  Con¬ 
seco  Finance  seeks  to  emerge 
ftom  Chapter  11  bankruptcy 
protection,  which  it  filed  for 
in  December  along  with  par¬ 
ent  company  Conseco  Inc 

Last  year,  Lucero  installed 
a  virtualization  appliance 
made  by  Fort  Lauderdale,  Fla.- 
based  DataCore  Software 
Corp.  to  pool  tt^ther  70TB  of 
storage  on  EMC  Corp.’s  Sym- 
metrix  and  Clariion  arrays. 
Since  the  rollout,  Lucero  said, 
storage  utilization  rates  on  the 
SAN  have  increased  ftom 
about  SS%  to  8S%.  In  addition, 
the  time  it  takes  to  proviston 
storage  space  for  new  applica¬ 
tions  has  been  cut  from  four 
days  to  one  hour. 

The  $190,000  that  Conseco 
Finance  paid  for  the  DataCore 
software  has  already  been  re¬ 
couped  by  the  company  three¬ 
fold  through  cost  savings. 
Lucero  said.  For  example,  it 
was  able  to  postpone  plans  to 
buy  an  addition^  3TB  of  ca¬ 
pacity.  saving  about  $280,000. 
The  next  thing  to  move  to¬ 
ward  ...  is  the  ability  to  have  a 
single  interface  that  allows  me 
to  see  my  infrastructure  from 
end  to  end,"  Lucero  added. 


Currently,  no  top-tier  ven¬ 
dors  sell  network-based  virtu¬ 
alization  products  that  sup¬ 
port  rival  storage  devices.  But 
HP  and  EMC  have  both  said 
that  they  plan  later  this  year  to 


make  their  storage  manage¬ 
ment  software  available  on 
new  switches  made  by  San 
Jose-based  Brocade  t^t  sup¬ 
port  virtualization  on  multi- 
vendor  SANs.  I 
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Get  IT  Delivered. 


News  analysis,  commentary  and  practical  tips  sent 
straight  to  your  desktop. 


To  remain  at  the  forefront  of  industry,  today's 
IT  leaders  need  easy  access  to  strategic 
information,  news  analysis  and  advice. 
Computerworld  delivers  with  coverage  that 
emphasizes  and  advocates  for  the  user 
perspective,  providing  balanced,  objective 
reporting  on  a  wide  range  of  technologies, 
business  trends,  career  topics  and  man¬ 
agement  issues.  Computerworld  gives  you  the 
tools  you  need  to  succeed — to  evaluate  and 
implement  technology  solutions  that  put  you 
one  step  ahead  of  your  competition. 


With  a  cutting-edge  suKe  of  more  than  25 
e-mail  newsletters,  we  ensure  that  you  have 
access  to  the  information  you  need  in  a  way 
that  is  most  useful  to  you.  Whether  it's 
Computerworld  Daily,  issued  the  morning  and 
afternoon  of  each  business  day,  or  weekly 
newsletters  covering  the  technology  spectrum, 
there's  no  better  way  to  stay  In  tune,  in  touch, 
and  on  top  of  today's  ever-changing  world  of 
IT  than  with  Computerworld. 


Stay  in  tune,  in  touch,  and  on  top  of  today's 
ever-changing  world  of  IT. 

Computerworld.com/newsletters 


'  Thinner  ’ 
Designs: 

Power  efficiency 
allows  for  smaller 
cooling  systems 
and  lighter 
.  notebooks,  j 


W  Integrated  ^ 
'  Wireless: 

Built-in  802,11b 
wireless  LAN 
capability  eliminates 
.  the  need  for 
^  adapter  cards.  A 


^  High  ^ 
Performance: 

Extremely 
responsive  to  the 
most  demanding 
business 

.  applications.  . 


Longer 
Battery  Life: 

Power-conserving 
technology 
enables  extended 
battery  life. 


intel.com 


The  Unwired  Office 
starts  inside. 


Introducing  Inter  Centrino"  mobile  technology. 
The  new  generation  of  iaptop  technoiogy 
engineered  to  unwire  your  business. 


Until  now,  the  promise  of 
a  truly  wireless  workforce 
has  been  just  that:  a 
promise.  Intel'  Centrino"' 
TECHNouKY  moblle  technology  delivers 
on  that  promise  with  unprecedented 
levels  of  mobility  for  your  users 
and  an  easier  deployment  for  you. 
Intel  is  working  with  other 
industry  leaders  to  make 
wireless  networking  not  only 
reliable,  but  secure.  Intel  Centrino 
mobile  technology  is  compatible 
and  validated  with  Cisco  enterprise 
access  points.  And  Intel  continues 
to  work  closely  with  VeriSign, 
Check  Point  Software  and 
other  leading  technology  companies 
to  optimize  security  solutions. 
The  unwired  office  starts  inside. 
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MARYFRAN  JOHNSON 


The  Accordion  Effect 


Gary  pilafas  calls  what  the  stor¬ 
age  industry  is  experiencing  right 
now  the  “accordion  effect,”  referring 
humorously  to  the  way  the  old-fash¬ 
ioned  musical  instrument  makes 
music  only  when  all  that  hot  air  is  squeezed  out. 
As  a  senior  storage  architect  at  UAL  Loyalty  Serv- 


ic«s  Inc^  the  e-conunerce 
ann  of  Anancially  stressed 
United  Air  Lines,  Pilafi» 
has  8  front-row  seat  for 
this  particular  concert. 

"It’s  the  march  to  consoli- 
datjoa*  be  said  last  week 
at  CompiUerworids  Stor¬ 
age  Networking  World 
conference  in  Phoenix. 

"It’s  happening  now.  and 
it's  a  good  thing." 

Consolidating  storage 
resources  to  cut  costs 
and  streamline  manage¬ 
ment  was  a  dominant 
chord  struck  at  the  gathering  of  1,800 
IT  professionals,  storage  managers 
and  vendors.  When  audience  mem¬ 
bers  were  polled  about  what  the  top 
benefits  of  storage  networking  tech¬ 
nologies  are,  consolidation  was  the 
top  pick,  beating  out  cost  savings  and 
improved  funaionality.  [DC  esti¬ 
mates  that  consolidating  access  and 
data  management  into  a  single  loca¬ 
tion  can  sl^h  storage  management 
costs  by  up  to  70%. 

"Everybody  into  the  resource  pool" 
was  artother  popular  tune.  That  one 
refers  to  the  flurry  of  virtualization 
software  offerings  now  showing  up  to 
audition  for  skeptical  users,  who  are 
rightly  figuring  that  this  technology 
has  miles  to  go  before  its  promises 
will  be  kept.  Virtualization  software 
holds  out  the  hope  of  making  disk 
space  on  different  servers  appear  as  a 
single  storage  pool,  to  be  dipped  into 
and  divvied  up  as  needed  across  the 
network. 

But  if  this  accordion  effect  is  mak¬ 
ing  music  from  consolidation  and  vir¬ 
tualization,  what’s  getting  squeezed 
out  as  so  much  hot  air?  The  once- 
stunning  profits  from  storage  hard¬ 
ware  sales  and  the  future  of  propri¬ 
etary  or  dosed  storage  architectures. 
The  storage  industry  is  sliding  fast 


down  the  slope  of  hard¬ 
ware  commoditization, 
sending  vendors  scram¬ 
bling  for  new  ways  to 
make  money  as  old  busi¬ 
ness  models  slip  away. 
Sales  of  disk  storage  fell 
ftom  $17.4  billion  in  2001 
to  $13.3  billion  last  year, 
according  to  IE>C.  That 
sales  decline  also  reflects 
the  steadily  dropping 
price  of  a  megabyte  of 
storage,  which  has  plum¬ 
meted  at  least  40%  in  the 
past  few  years.  Meta 
Group  predicts  that  while  storage- 
relat^  costs  will  constitute  70%  to 
80%  of  server  purchases  through 
2004,  stora^  hardware  sales  will  de¬ 
cline  30%  or  more  as  the  emphasis 
shifts  to  software,  services  and  stor¬ 
age-area  networks  (SAN). 

As  this  spending  shift  accelerates, 
so  too  will  the  migration  toward  open 
architectures  and  standards.  If  last 


week’s  conference  is  any  indication, 
users  will  be  dragging  their  vendors 
there  by  the  hair.  Stor^e  managers 
ultimately  want  storage  infrastruc¬ 
tures  to  be  as  reliable,  highly  avail¬ 
able  and  standardized  as  Ethernet 
networks. 

"Standards  have  now  gotten  to  the 
point  where  customers  have  been  able 
to  force  some  interoperability  onto 
the  vendors."  noted  Pierre  Baudet, 
business  systems  manager  at  New 
Balance  Athletic  Shoe  Inc.  and  a  con¬ 
ference  speaker. 

Making  a  virtue  out  of  that  nec¬ 
essity.  the  Storage  Networiung  Indus¬ 
try  Association  last  week  unveiled 
specifications  for  its  long-anticipated 
Bluefln  technology,  lliis  open  man¬ 
agement  software  interface  standard 

—  designed  to  help  users  apply  cen¬ 
tral  controls  to  enterprisewide  SANs 

—  already  has  the  backing  of  dozens 
of  storage  vendors,  including  IBM. 
EMC,  Hitachi,  Sun  and  Veritas  Soft¬ 
ware.  Renamed  as  the  Storage  Man¬ 
agement  Initiative,  or  SMI.  this  speci¬ 
fication  is  the  storage  industry’s  first 
giant  step  toward  an  interoperability 
standard. 

So  as  we  wait  for  the  next  chorus  to 
begin,  users  should  lean  hard  on  their 
storage  vendors  to  tneotporate  this 
emerging  standard  in  upcoming  prod¬ 
ucts.  And  vendors  should  be  ask^ 
themselves.  “Do  I  want  to  make  music 
or  just  blow  hot  air?"  I 
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PIMM  FOX 

Web  Services: 
Been  There, 
Done  That 

The  thing  to  do 
when  evaluating  re¬ 
quirements  for  a  new 
computing  environment  is  to 
leam  a  little  history. 

In  the  new  era  of  distributed  Web 
services,  you’re  expected  to  manage 
things  you  don’t  control  Sure,  there's 
lots  of  simplicity  and  clarity,  with  ar- 
chitecnires  (such  as  SOAP)  that  make 
it  easier  to  connect  things  together, 
but  that  shifts  the  burden  to  the  man¬ 
agement  of  these  services.  For  exam¬ 
ple.  how  do  you  distinguish  requests 
from  different  customer  groups?  Or 
how  do  you  identify  breaks  in  a  Web 
service  request? 

But  we've  been  here  before,  with  the 
management  of  databases  and  applica¬ 
tions.  And.  not  so 
strangely,  some  of 
the  players  have  re¬ 
mained  the  same  as 
well  At  Oakland. 

Calif.-based  Amber- 
Point  Inc.,  several 
members  of  the  exec¬ 
utive  team  are  veter¬ 
ans  of  Ingres  and 
Forte,  where  they 
tackled  similar  issues. 

Ingres  started  out 
with  a  relational  data¬ 
base  system,  and  Forte  offered  tools  to 
build  distributed  applications  with  ap¬ 
portioning  and  partitioning.  Even  the 
venture  backers  remain  constant.  Palo 
Alto,  Calif.-based  Sutter  HUl  Ventures 
invested  in  all  three  companies. 

This  continuity  of  venture  capital 
investment  Is  important  because  it 
sends  two  signals;  first,  that  the  vendor 
experience  is  mature  and  linear,  and 
second,  if  Sutter  Hill’s  histories  with 
Forte  and  Ingres  are  examples,  that 
you  can  be  reasonably  assured  that 
longevity  is  built  into  the  company’s 
business  plan.  Both  Ingres  and  Forte 
were  around  for  a  decade  before  being 
acquired  by  Computer  Associates  and 
Sun  Microsystems,  respectively. 

But  understanding  the  operational 
requirements  your  company  foces 
should  get  your  attention  when  opting 
for  Web  services.  Right  now.  you've 
got  three  basic  approaches  to  Web  ser- 
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vices,  each  of  which  requires  its  own 
management  method. 

First,  there’s  the  Web  service  you 
internally  build  in  lava  or  .Net  and  for 
which  you  maintain  the  source  code. 
Second,  there  are  packaged  Web  ser¬ 
vices  from  the  likes  of  PeopleSoft,  SAP 
and  Microsoft  (things  that  you  install 
but  don’t  have  the  source  code  for  and 
that  are  therefore  out  of  your  control). 
Finally,  there  are  the  external  Web  ser¬ 
vices  that  your  company  or  depart¬ 
ment  uses  although  it  has  little  say 
when  it  comes  to  versioning  or  up¬ 
grades.  Chances  are,  most  companies 
will  have  a  mixture  and  still  be  faced 
with  the  prospect  of  keeping  every¬ 
thing  up  and  running. 

As  more  Web  services  show  up  in 
application  servers,  plan  to  investigate 
tools  that  can  look  at  messages  and 
manage  them  based  on  v^t’s  in  the 
message.  Also,  select  vendors  with 
deep  IT  management  experience,  real¬ 
istic  fmaocial  backing  and  a  willing- 
ness  to  admit  that  the  problems  of  to¬ 
day  aren’t  the  problems  that  will  need 
to  be  addressed  a  year  from  now.  I 

ARI  KAPLAN 

Legal  Links 
For  Your 
Supply  Chain 

For  the  past  few 
weeks,  my  mother-in- 
law  has  been  eyeing  a 
certain  technology  stock, 
waiting  for  it  to  reach  her 
strike  price.  To  nx)aitor  the  markets, 
she  uses  a  tracking  service  that 
streams  quotes  on  her  cellular  phone. 

If  you  offer  a  service  like  this  —  one 
that  requires  data  from  an  unrelated 
third  party  be  sure  to  structure 
your  arrangement  wisely  to  ensure 
your  protection  and  your  customers’ 
satisfrction.  especially  if  you  count 
my  mother-in-law  among  them. 

IT  managers  aren't  always  involved 
in  these  business  or  legal  discussions. 
But  they  should  be.  especially  when 
data  access  is  at  issue. 

Before  these  talks  b^jn,  a  nondis¬ 
closure  agreement  must  be  signed. 

This  will  preserve  confidentiality  and 
protect  tiade  secrets,  which  may  in¬ 
clude  the  design  of  your  proprietary 
systems  to  which  the  data  fe^er  may 
have  access. 

If  copyrighted  data  is  being  offered 


to  you,  require  proof  that 
your  counterpart  owns  all 
of  the  intellectual  property 
that’s  subject  to  the  trans¬ 
action.  And  while  you're  at 
it.  secure  a  warranty  on  the 
functionality  of  the  applica¬ 
tion  being  shared  or  ac¬ 
cessed.  Make  sure  it's  scal¬ 
able,  too.  (This  is  key  for 
emerging  growth  compa¬ 
nies  that  could  have  1,000 
users  one  month  and 
100.000  the  next) 

In  your  agreement  with 
the  third  party,  dearly  state 
who  owns  the  fiiul  application.  Own¬ 
ership  of  the  end  result  can  be  tricky 
because  some  programs  require  exten¬ 
sive  maintenance,  which  may  prove 
difficult  for  a  limited  in-house  team  to 
handle.  Nevertheless,  possession  has 
significant  ccmtrol-related  advantages. 

If  you're  offering  your  customers 
data  that  they  will  rely  on  to  make  im¬ 
portant  decisions  such  as  stock  pur¬ 
chases,  you  could  expose  your  compa¬ 
ny  to  certain  liabilitltt.  (I  don't  want 


10  even  think  about  the  call 
I  would  get  from  my  moth¬ 
er-in-law  if  she  bought  her 
stock  at  the  wrong  price 
because  of  a  misquote.) 
CIOs  should  the^ore  re¬ 
quire  assurances  against, 
as  well  as  indemniTication 
for,  any  incorrect  data  (not 
including  market  fluctua¬ 
tions.  of  course)  in  any 
contracts  they  sign. 

Supply  chain  pacts 
should  require  that  the 
networks  on  which  infor¬ 
mation  travels  are  secure, 
and  they  should  contain  more  detailed 
provisions  that  outline  cyberterrorism 
contingencies  specific  to  your  busi¬ 
ness.  In  the  event  of  a  cyberattack,  try 
to  obtain  preferences  for  your  systems 
so  you  will  be  the  Hrst  to  get  the  data 
once  the  feed  has  been  repaired. 

Be  aware  that  developers  can  build 
time-activated  codes  or  periodic  re¬ 
authorizations  into  their  work.  This  is 
designed  to  give  them  the  option  of 
turning  off  the  feed  when  you  don't 


live  up  to  your  end  of  the  bargaicL  Al¬ 
though  it's  typically  a  last  resort  and 
requires  notice  of  its  use.  it  can  hap¬ 
pen.  You  should,  therefore,  address 
such  limits  upfront. 

Disagreements  can  also  arise,  so  in¬ 
clude  a  dispute-resolution  provision. 
In  the  modem  environment,  cost-  and 
time-conscious  CIOs  may  want  to 
consider  online  alternatives.  They  can 
be  faster,  more  efficient  and  don't  re¬ 
quire  long-distance  travel  or  litigation. 

Perhaps  most  important  in  manag¬ 
ing  risk  is  obuining  comprehensive 
insurance  that  provides  for  all  contin¬ 
gencies.  Companies  should  also  build 
redundancy  into  their  systems  so  chat 
they  always  have  a  baclmp  supplier  of 
critical  items. 

Ultimately,  entering  negotiations  in 
good  faith  and  with  reasonable  expec¬ 
tations  is  the  key  —  anything  to  avoid 
that  call  from  my  mother-in-law.  I 
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READERS’  LEHERS 


New  Buzzwurds  Aib  Just  0(d  IT  Ideas 


TIC  U1BT  'real-fime  enter- 
pnse”  hype  from  Gartner  6  just 
dessic  (Tfram  the  bst  decade  re¬ 
packaged  wMh  a  new  set  of  buzz¬ 
words  rGartner  Change  Manage- 
ment  Needed  Before  ReaFIkne 
Data  (:anFkMr.'(kackLJr*373bO]. 
There's  no  doubl  that  it's  8  good 
thfog:  N's  Nst  not  a  new  Mng.  ex¬ 
cept  for  the  latest  enabing  tech¬ 
nology.  Web  services  and  portals  - 
and  even  those  aren't  that  new 
anymore. 

The  concept  of  leveraging  tech¬ 
nology  to  reduce  procasaing  time 
Is  as  as  IT  itself.  I  agree  that 

change  management  IS  a  criheat 
component  of  ensuhng  the  suc' 
cess  of  any  investmerd  In  reaFhme 
data  flow.  But  that’s  the  case  wKh 
ntrodudng  any  new  capabUlly  to 
abusiness. 

Haven't  «i«  figured  that  out  wkh 
the  past  decade  of  taking  brick- 
arKHnortar  companies  orine?  As 
you  iniroduce  new  technobgy.  the 
management  learn  needs  to  be  on 
board  wMt  how  to  tun  the  business 
dWerenUy  to  fuly  leverage  IL 
And  it  doesn't  fogicaly  folow 
that  there's  an ‘Increased  need . 
to  gel  real-tfne  applcaborts  and  in¬ 
terfaces  buNt  qui^.’ Gartner  is 


stretching  (Mfo  a  bit  (0  use  ifo 
'raaHme  enterprise*  concept  to 
justify  rapid  development 
cotAd  conceneUy  lake  a  long  time 
to  develop  a  raaHine  enterprse 
application,  and  H  wi  sli  get  you 
the  data  in  real  bme  once  d’s  up 
andronrang. 

Scott  Hvomi 
Assistanf  vice  president 
of  program  managemtra 
services.  First  Perm-Paeffir 
Age  Insurance  Co.. 
Sdiournburg  iff, 
scott_  rrKireon@/usq>ertnxom 


More  Hiring  Needed 

iNAlLBUTtoemostgotfiticen- 
terpnses.  the  probfom  Is  even 
worse  than  described  in  the  arbeie 
‘Gartner  Oiange  Management 
Needed  Before  Reaf-Tim  Data 
Row.*  My  examplB  comes 
from  the  heaih  care  ndusby.  txA  I 
saw  the  same  problems  in  state 
government,  where  I  worked  for 
seven  years. 

Matiy  health  care  organizabons 
ate  hav^  to  embrace  eiecironic 
pebentrecoids.efodronicnsur- 
anoe-cfalms  processing  and  sub- 
nession.  and  other  systems  pur¬ 


suant  to  HnU.  However,  hey  are 
trying  to  <to  I  wtfKUi  folowmg  IS 
best  ptacfices  m  any  sense  of  the 
wonfo.  They  donT  staff  postions 
such  as  computer  operator,  pro¬ 
grammer  or  qistems  analyst;  they 
lust  plain  donl  fare  any  more  fT 
people  toan  they  had  before  they 
went  to  electroric  records.  They  do 
fare  weHrained  and  competent 
people,  but  they  went  programrang 
and  systems  aitalyse  out  of  the 
guys  they're  forang  to  sd  at  the 
help  de^al  day. 

Am  I  the  only  one  who  thinks 
programnang,  systems  analyss 
and  similar  dteoplnes  requre  sus¬ 
tained  locus? 

OeofKarfck 

Datobase/hetwort.'' 
reteroni  odminisrmtor. 
Thoracic  &  Cordkwascuiar 
Insriiute.  Lansing,  Miefu 


What  Iraq  Needs 

AiTHouaH  coimiliMmmjD 
is  dedcated  primarty  to  com¬ 
puter  lechnoioav  and  As  Impact 
on  the  world.  I  tos*  yote  wntars 
could  use  a  bk  of  a  wider  wew  on 
the  topic  of  war  in  Iraq  rRstwor 
lrBQMay8e6k|fTMatket.*Quick- 
Unk  37179).  In  postwar  Iraq,  there 


wi  nor  be  an  immedate  need  for 
an fT erirastruckfe  There  wibe 
manediate  needs  for  a  stabh  gov- 
erranenl.  assurance  of  continued 
food  and  potable  water  supples, 
decent  haallh  care,  freedom  from 
the  potenbaf  of  ntertnbal  conHcL 
ease  of  transportation  and  al  other 
aspects  of  He  necessary  lor  a  sta¬ 
ble  society. 

The  people  of  baq  wi  have 
suflered  enough  from  Hussevi's 
depredations,  let's  see  how  tech¬ 
nology  can  help  dean  to  that  mess 
hrst.  before  the  megacorporahons 
start  slavenng  over  ttwir  next 
ramlsot  profits. 

PikUvfo 

R&D  sysrerm  engineer. 
Finsburgfi 

CCNIPUTEflWORU)  wdctvnes 
comments  Irom  Its  readers  Letters 
wi  be  edkad  tor  brewty  and  danly 
They  should  be  addresied  to  Jams 
&ide.  letkBS  edkor.  Cornpulerwottd. 
PO  Box  9171.  SOO  QU  Connecbcui 
Path.  Framngham.  Mass  01701 
Foe  (506)  879484a 
E-mail:  teRers^compiAerwortdxom. 
hdude  an  addrees  and  phone  num¬ 
ber  tor  anmedwie  verificafion. 


I  More  Mas  on  twee  and  oihw 
F  topcsweonowWkPMe: 


Microsoft 


Visua!  Studio  .NET  can  help  you  with  (nearly)  every  part  of  your  job. 


O  Compiled  Page  Execution  - : 

EJ  Rich  Output  Caching  -  - 


□  Crash  Protection 


MLt  BfSCHVABf 
CPl  PtAh  'HR01.&M0..T 


ASP  ASP  NET 


msdnmicrosoft.com  vstudio  tryit 


Visual  studio  .net 


Is  younorganization  making  the  most 
of  technology  on  the  cutting  edge? 

We  want  to  hear  about  it! 


Computerworld's  Innovative  Technology  Awards  2003  will  honor 
the  industry's  top  vendors  that  are  helping  their  customers 
achieve  business  value  through  technology. 

Tell  us  about  your  successful  technology  application 
and  nominate  your  vendor  online  at 

www.computerworld.com/research/innovativetech 


ABOUT  THE  AWARDS 

For  the  second  year,  these  customer  choice  awards  will 
spotlight  leading  vendors  and  showcase  how  their  customers 
are  using  technology  to  solve  business  problems  in  real-world 
settings.  Nominations  from  IT  customers  will  be  collected 
from  now  through  May  12,  2003.  Nominated  vendors  will  be 
surveyed  about  their  technology  applications.  A  panel  of 
outside  experts  and  Computerworld  editors  will  review  the 
surveys  and  choose  the  winners. 


Survey  results  and  stories  that  offer  practical  advice 
from  IT  leaders  using  these  technologies  will  be 
published  in  the  September  22,  2003,  issue, 
as  well  as  online  at  Computerworld.com. 


AWARDS 


Need  More 
Information? 


Contact  lnnovativeTech@computerworld.com. 

But  hurry!  The  nomination  deadline  is  May  12,  2003. 
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Q&A 

Nothing  but  ’Net 

Carol  Ptak,  PeopleSoft's  manufacturing- 
industry  strategist,  talks  about  Internet 
architecture,  technology  that  makes 
money  for  both  the  customer  and  the 
vendor,  and  Post-it  notes.  Page  32 


FUTURE  WATCH 

The  Web's  Next  Leap 

With  the  Semantic  Web.  Tim  Berners- 
Lee,  the  inventor  of  the  World  Wide 
Web.  leads  the  drive  to  infuse  intelli¬ 
gence  into  his  creation  and  open  the 
door  to  new  services.  Page  34 


SECURITY  MANAGER'S  JOURNAL 

The  Battle  Against 
Pornography  Continues 

When  Vince  Tuesday  looks  into  automated 
mail  filtering,  he  finds  that  one  vendor's 
pornography-detection  software  works  bet¬ 
ter  than  he  expected.  Page  35 


documents  on  our  intranet."  he  says. 
The  Woodlands.  Texas-based  oil  com¬ 
pany  iTistalled  Vienna.  Va. -based  Con- 
vera  Corp.'s  RetrievalWare  to  index 
and  search  its  content  repository. 
Anadarko's  ESE  indexes  all  of  the  com¬ 
pany's  SQL  databases,  its  intranet.  Win¬ 
dows  file-server  director^'  structures 
and  everything  stored  in  its  content 
management  system  from  Pleasanton. 
Calif.-based  Documentum  Inc.,  as  well 
as  several  online  news  sources.  Down¬ 
ing  estimates  that  the  engineering  group 
now  saves  78.000  hours  armually  by- 
using  the  new  search  functions. 

Bag  of  Tricks 

ESEs  use  a  mix  of  technologies  to  find 
the  right  result,  and  the  products  con¬ 
tinue  to  improve.  "A  lot  of  the  technol¬ 
ogy  has  befen  around  for  a  while,  but 
we  are  now  starting  to  see  practical  ap¬ 
plications  ...  in  the  business  realm." 
says  Laura  Ramos,  an  analyst  at  Cam¬ 
bridge.  Mass.-based  Giga  Information 
Group  Inc. 

ESEs  have  the  same  core  elements  as 
Internet  search  ertgines:  The)'  spider  en¬ 
terprise  content  (locate  documents  by 
following  hypertext  links),  index  it  and 
Continued  on  page  28 


EKTERPRISE  SEARCH  ENGINES  IMPROVE  PRODUC- 
TIVITY  BY  ALLOWING  SEARCHES  ACROSS  DISTRIB¬ 
UTED.  DISPARATE  DATA  SOURCES.  BY  DREW  ROBB 


INTRANET  PORTALS  can  ofFer  a  sin¬ 
gle  point  of  access  to  all  of  a  com¬ 
pany's  documents,  but  employees 
may  still  waste  time  trying  to  find 
I  what  they  need  among  those  thou- 
i  sands  —  or  millions  —  of  documents, 


ENTERPRISES 

WIE3EN 

TUPcrAPru  MCT 


By  interpreting  user  queries,  searching 
across  different  data  stores  and  pre¬ 
senting  the  most  relevant  results,  en¬ 
terprise  search  engines  (ESE)  simplify 
the  task  of  finding  the  right  informa¬ 
tion  in  the  right  context,  regardless  of 
the  source. 

Search-and-index  technologies  are 
built  into  many  applications,  but  they 
let  you  find  data  only  within  the  asso¬ 
ciated  application  and  can't  hunt 
through  the  many  data  repositories  an 
organization  might  have.  ESEs  typical¬ 
ly  search  both  structured  and  unstruc¬ 
tured  information  in  many  different 
formats  and  across  all  the  devices  on 
the  corporate  network. 

The  sheer  volume  of  documents  at 
Anadarko  Petroleum  Co.  drove  Bob 
Downing,  manager  of  business 
systems,  to  deploy  an  ESE.  “Our 
engineers,  geolc^ts  and  geo¬ 
physicists  were  spending  about 
50%  of  their  time  searching 
for  information  among  over  2  million 


I  AM  A  CISCO  1200 
SERIES  DUAL 
BAND  WI-FI 
ACCESS  POINT. 


I  AM  70  MORE 
MINUTES  OF 
PRODUCTIVITY  PER 
EMPLOYEE  PER  DAY 

I  AM  A  CISCO  WIRELESS  NETWORK.  I  HAVE  THE  POWER  TO 
CONNECT  EMPLOYEES  TO  VITAL  DATA  WHEREVER  THEY  ARE. 
AND  DO  IT  SECURELY.  THAT  SAVES  TIME.  THAT  SAVES  MONEY. 
THAT  IS  POWERFUL.  I  AM  MORE  THAN  A  CISCO  1200  SERIES 
DUAL  BAND  WI-FI  ACCESS  POINT. 


elMo.cMii/mobllltviiow 
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ENTERPRISES 

WIDEN 

TNESEARCHNET 

Continued  from  page  2S 
present  it  in  response  to  user  queries. 
However,  the  inckxes  can  be  quite  large. 
Washington-based  law  firm  Dickstein 
Shapiro  Morin  &  Oshinsky  LLP  has 
nearly  LOOO  employees  and  several  mil¬ 
lion  documents:  2  million  managed  with 
Fulcrum  KnowledgeServer  from  Hum¬ 
mingbird  Ltd.  in  Toronto  and  millions 
otore  that  it  accesses  using  specialized 
ihigatioD  software.  The  firm's  database 
includes  files  saved  as  Word  and  Word¬ 
Perfect  documents,  as  well  as  PDFs. 
The  firm  also  has  content  in  its  propri¬ 
etary  CRM  database  and  in  documents 
in  still  more  formats  received  from 
clients  and  litigation  opponents.  Since 
the  attorneys  need  to  do  word-proximi¬ 
ty  searches,  the  index  re¬ 
quired  by  the  search  en¬ 
gine  adds  60%  to  the  to¬ 
tal  document  store  size, 
says  Keith  Berkland,  the 
ftnn's  application  devel¬ 
opment  manager. 

After  the  initial  spider¬ 
ing  and  indexing,  search 
ei^dncs  use  various  tech¬ 
niques  to  determine  a 
document’s  relevance 
(see  box). 


OUR  ENGI¬ 
NEERS.  GE¬ 
OLOGISTS 

AND  GEOPHYSICISTS 
WERE  SPENDING 
ABOUT  50%  OF  THEIR 
TIME  SEARCHMO  FOR 
INFORMATION  AMONG 
OVER  2  MILLION 
DOCUMENTS  ON 
The  first  generation  of  OUR  INTRANET. 

search  engines  is  about  .  Diego-based  LPL  Finan- 

ihe  mechanics  of  getting  BOB  00WNIN6.  MANAGER  cial  Services  (Linsco/Pri 
OF  BUSINESS  SYSTEMS. 

ANAOARKO  PETROLEUM  CO 


was  returning  unsatisfactory  results, 
and  users  were  abandoning  searches. 

“We  could  tweak  the  algorithms 
with  the  Verity  engine,  but  it  becomes 
a  crapshoot  deciding  which  things  to 
wei^t,"  he  says,  adding  that  tuning  the 
engine  “was  very  timc-consiuning  and 
labor-intensive  for  us.” 

To  improve  the  results.  Kaiser  spent 
S28.(}(X)  to  buy  a  search  appliance  from 
Google  Inc.  in  Mountain  View.  Calif. 
The  HMO  installed  the  box  In  a  rack  at 
its  secure  data  center  in  Corona.  Calif. 
Hochhaiter  says  installing  the  box  re¬ 
quired  hooking  up  two  cables  and 
plugging  them  in.  One  staffer  set  up 
the  basic  search  functions  and  tweaked 
the  results  over  a  few  weeks. 

The  appliance  soon  produced  signif¬ 
icantly  bmer  results,  it  does  have 
one  drawback:  The  Verity  engine  lets 
Kaiser  set  up  external  metadata  to 
describe  a  document  whereas  Ekxigle 
requires  that  metadata  be  embedded 
within  each  document.  With  Verity. 
Hochhaiter  can  add  metadata  without 
opening  every  document. 
Verity  remains  the  corpo¬ 
rate  standard,  but 
Hochhaiter  says  Google 
is  still  the  better  choice 
for  searching  through 
clinical  library  papers. 

Another  option  for 
finding  the  right  informa¬ 
tion  is  (o  use  a  natural- 
language  search  engine, 
which  lets  users  ask 
questions  rather  than 
search  for  keywords.  San 


a  lot  of  stuff  into  the  in¬ 
dex.”  says  Ramos.  The 
second  is.  How  do  1  un¬ 
derstand  what  the  users’  intentions  are 
and  more  proactively  deliver  content 
they  are  looking  for?” 

The  main  problem  we  were  run¬ 
ning  into  was  the  relevance  of  search 
results,”  says  Brad  Hochhaiter.  director 
of  the  Permanente  Knowledge  Con¬ 
nection.  the  clinical  library  site  of 
Kaiser  Permanente  Health  Plan  Inc.  in 
Oakland.  Calif.  “With  medical  knowl¬ 
edge.  there  is  a  lot  of  ambiguity  for 
what  terms  mean  and  a  lot  of  syn¬ 
onyms,  so  it  is  difficult  to  quickly  bring 
up  relevant  material  for  the  clinicians." 

The  site  provides  the  health  mainte¬ 
nance  organization's  U.(XX)  physicians 
and  SO.(X)0  support  staffers  with  access 
to  nearly  4CU)00  internal  documents,  the 
content  of  more  than  170  medkal  four- 
oals.  plus  textbooks  and  other  content. 

Hochhaiter  says  search  soffware 
from  Verity  loc.  in  Sunnyvale.  (2aUf.. 


vate  Ledger  Corp.)  uses  a 
natural-language  search 
engine  from  iPhrase 
Technologies  Inc.  in  Cambridge. 

Mass.,  to  deliver  portal  content  to  its 
4,3(X)  agents  in  2.1(X1  branch  offices 
nationwide.  The  product  delivered 
60%  relevant  results  out  of  the  box, 
but  LPL  spent  several  months  in¬ 
putting  company-specific  terms  and 
cuniiQ  the  results,  boosting  the  rele¬ 
vancy  rate  to  80%. 

'H>ur  goal  in  putting  the  tool  on  the 
portal  was  to  deflect  some  of  the  calU 
that  were  coming  into  the  call  center 
over  to  the  Web  site,"  says  Rochelle 
Putnam,  senior  vice  president  for  LPL's 
service  center.  “But  we  are  also  findii^ 
that  internal  staff  are  using  it  to  im¬ 
prove  their  consistency  in  handling 
queries  and  spend  less  time  calling  su¬ 
pervisors  to  get  the  answers.” 

In  additiem  to  providing  faster  ac¬ 
cess  to  the  existing  content  on  the  por- 
taL  LPL  staffers  use  iPhrase  to  improve 
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that  content.  Putnam  says  they  can 
view  the  questions  brokers  ask  on  a 
daily  basis  and  see  if  the  site  has  the 
content  they  need.  If  not,  they  can  cre¬ 
ate  content  and  add  it  to  the  site. 

“We  take  those  queries  and  throw 
them  at  the  search  tool  and  see  what  it 
returns,"  Putnam  explains.  “This  helps 
us  tune  the  content  and  will  eiufole  us 
to  drive  some  of  the  content  develop¬ 
ment.”  LPL  also  uses  queries  to  ensure 
that  the  FAQ.page  contains  the  an¬ 
swers  to  the  questions  that  are  asked 
most  frequently. 

Searching  for  R(N 

lustifyiog  an  ESE  purchase  requires 
showing  productivity  improvements, 
but  that  can  be  hard  to  calculate  when 
the  savings  are  measured  in  minutes  or 
seconds  saved  here  and  there  through¬ 
out  the  day.  “The  return  is  very  specif¬ 
ic  to  the  individual  business  needs,  and 
there  is  no  measurement  that  works 
globally."  says  Giga's  Ramos. 

Downing  was  able  to  justify  the  cost 
of  Anadarko’s  system  by  demonstrat¬ 
ing  huge  time  savings  in  its  engineer- 
ii^  department.  The  company  also 
saved  700  man-hours  recently  when 
searching  through  10  years  of  c-maiJ 
records  to  produce  evidence  in  a  legal 
matter.  LPL  measures  the  return  on  in¬ 
vestment  by  calculating  the  reduction 
in  calls  coming  into  its  service  center. 
But  for  Kaiser  and  Dickstein  Shapiro, 
the  payoff  comes  from  keeping  their 
highly  paid  doctors  and  lawyers  happy 
by  helping  them  work  faster. 

Although  those  results  are  largely 
anecdotaL  Kaiser's  Hochhaiter  says  be 
does  have  one  measure  of  savings. 

“The  main  ROI  is  that  I  have  a  high- 
functioning  search  engine  and  I  am 
spending  one-fiftb  of  what  I  was 
spending  before.  Now  I  can  put  those 
IT  dollara  somewdiere  else,”  he  says. 

Ultimately.  ESEs  have  the  bi^est  re¬ 
turn  v^re  users  are  welt  educated  ~ 
doctors,  attorneys,  brokers,  engineers 
—  and  where  a  large  number  of  docu¬ 
ments  must  be  searched  regularly.  In 
organizations  with  fewer  documents 
and  lower  skill  levels,  analysts  say  the 
search  engines  or  directories  that 
come  with  operating  systems  and  ap¬ 
plications  may  be  good  enough.  | 


Robb  is  afreelance  writer  in  Tu;unga. 
Cali/.  Contact  him  at  drewrobb@ 
attbixom. 
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A  search  tool  ernbidded  n  Fod  Lsammg  Network 
oorlai  rnatclin  cotfseMre  to  ernployoe  rieed^ 
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If  you're  busy  monitoring  your  servers, 
who's  watching  your  business? 


Tlw  fww  HP  ProUont  DL760 
02  S-way  wMi  hot*plug 
PAID  memory. 


■  Ultrad«n$e  4u  modulor  chassis 
wi^  up  to  eight  Intof*  Xeon'**  AAP 
1.5  GHz  or  2.0  GHz  processors 

■  Up  to  64G6  oddressoble  memory 

■  Groundbreakirtg  F8  chipset 

•  6^  bit/100  MHz  PCI-X  slots 

■  Integroted  Lights-Out  Stortdord 
|ilO}  lor  Remote  Server  Mgmt. 


•  Up  to  eight  Intel*  Xeon'"  MP 
1.5  GHz  or  20  GHz  processors 

■  Up  to  64GB  oddressoble  memory 
-  Grourrdbreoking  F8  chipset 

•  10-64  bit/100  MHz  PCI-X, 

1-64  bit  33  MHz  slots 

■  Remote  Insight  Lights-Out  Edition  II 
(optnnoll  for  Remote  Server  Mgmt. 


What  cholenges  do  you  face  today?  Decreasing  budgets?  The 
lurking  possibility  of  downtime?  It's  hord  ettough  to  focus  on 
moving  your  business  forword  when  you're  constantly  looking 
over  your  shoulder  to  see  if  everything  is  up  ond  running. 

Besides,  that's  toe  job  of  the  new  HP  ProLiant  DL700  series 
running  totel*  Xeon'*'  MP  processors.  An  odaptive  infroslriKiure 
begins  with  these  HP  Proliont  servers  which  conte  equipped 
wito  tooh  toot  predict,  self-diagnose  and  fix  mony  fouh 
conditions.  And  now  vrith  hot-plug  RAID  memory  exclusivety 
from  HP  you  con  odd  or  reploce  OIMMs  without  turning 
your  systems  off.  Both  work  with  the  HP  ProLiant  Essentials 
Foundation  Podt  featuring  Insight  Manager  ^software  which 
monitors  and  corrirois  your  infroslructure  lor  maximum  uptime 

At  toe  er>d  of  the  doy,  you'll  have  more  control  over  your 
infrastructure,  help  ovoid  unplontted  downtime  and  reduce 
overoll  moif>te nonce  costs.  Not  to  rnention  freeing  yourself 
up  for  more  important  things 


To  l•am  how  HF  Froliont  servers  con  be  o 
port  of  moxNnizmg  your  compony^  uptime, 
downloodCMF%  executive  brief  on  high  ovoa^aty 
ot  www.hp.com/go/prolioitft5  or  coll 
1>t00-2t2  6672,  option  5,  and  mention  cedo  TFH. 


e  2003  HrnrUn-Pockord  Compony.  Intel  ond  the  Intel  Xeon  Logo  ore  Irodefflorlu  or  registered  Irademorto  of  Intei  Corporation  or  Hi  subsidioriei  in  Ihe  United  StoOs  ond  oltier  countries. 
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802.11g  Soeeds 
Ahead  of  rr  Needs 


Outlook:  Promised  advan¬ 
tages  of  802.11g  wireless 
LAN  devices  won’t  make 
a  lick  of  difference  in  most 
companies,  but  you’ll 
probably  end  up  buying  it 
anyway.  Here’s  why. 

By  Robert  L  Mitchell 


To  THE  UNINITIATED,  the  evoludoD  of 
wirekss  LAN  standards  might  took 
like  an  alphabetic  soap  opera.  PC 
cards  and  access  point  hubs  based  on 
the  UMbit/sec.  802.11b  WLAN  stan¬ 
dard  were  just  movii^  into  the  main¬ 
stream  last  year  when  vendors  intro¬ 
duced  the  54Mbit/5ec.  technology  knovm  as 
802 Jla.  Now  vendors  are  offering  a  third  alterna¬ 
tive,  802.11g,  vdiich  they  claim  delivers  802.11a 

speeds  over  longer  distances,  while  _ 

supporting  backward  compatibility  for 
802 Jib  devices  —  something  802.11a 
technology  failed  to  do. 

But  don't  rip  out  that  11b  infrastruc¬ 
ture,  users  and  analysts  say.  PC  cards 
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and  access  points  using  llg  are  still  immature  and 
provide  few  real-world  benefits  today.  By  this 
time  next  year,  thou^  you'll  probably  end  up 
buying  it  anyway  because  the  technology  will  be 
built  into  most  hubs,  or  access  points. 

The  benefits  of  802 Jig  derive  hrom  the  Umita- 
tk>tts  of  its  two  predecessors.  Released  first, 
802.11b  uses  a  transmission  technology  called  di¬ 
rect  sequence  spread  spectrum,  or  DSSS.  Each  ac¬ 
cess  point  supports  up  to  UMbit/sec.  over  three 
channels  in  tte  2.4-GHz  frequency  range  (see 


table).  But  the  technology  has  a  few  drawbacks. 
Having  only  three  channels  increases  the  like¬ 
lihood  of  cochannel  interference  between  nei^ 
boring  access  points.  And,  as  with  ail  WLAN  tech¬ 
nologies.  actual  throughput  is  at  best  only  about 
half  the  published  data  rate  and  drops  as  distance 
and  the  number  of  users  per  access  point  increase. 
WLANs  also  face  interference  from  microwaves, 
mobile  phones,  Bluetooth  devices  and  even  Pen¬ 
tium  processors  operating  in  the  relatively  crowd- 

_  ed24-GH2band. 

With  its  higher  bandwidth  (best 
case  of  about  26Mbit/sec.)  and  up  to  13 
channels  (with  U  more  likely  to  gain 
regulatory  approval  in  the  next  two 
years),  802  Jla  b  a  better  choice  for  ar¬ 


eas  widi  a  high  density  of  users  or  for  applications 
that  require  higher  data  rates.  It  operates  in  the 
less  crowded  S.2-GHz  frequency  band,  but  it  has  a 
shorter  range,  and  its  modulatioo  technique,  called 
orthogonal  frequency  division  multiplexing,  or 
OFDM,  won’t  support  802.Ub  devices.  To  support 
both  11a  and  llg  client  types,  corporations  must 
buy  more  expensive,  dual-mode  access  points. 

As  for  802 Jig,  it  addresses  the  backward-com¬ 
patibility  issue  —  sort  of.  It  adapts  OFDM  to  allow 
54Mbit/sec.  operation  in  802 Jib's  2.4*GHz  band. 


works.  Early  products  are  already  in  reta3  stores. 

Most  SC^tlg  access  points  and  cards  now  shipping  suf¬ 
fer  from  two  big  drawbacks:  They're  typically  consumer- 
grade  devices  that  iadrenterpri^-ciass  manageability  fea¬ 
tures.  and  sH  are  based  on  a  draft  specification  that  will  re¬ 
quire  device  driver,  fimiware  andAiY  hash  rnernory  updates 
when  the  final  spectficalion  b  ratified  >  and  that  won’t  hap^ 
pen  before  the  summer.  ‘We're  prcAiably  looking  at  July.* 
says  Brian  &imm.  a  spokesman  for  the  Wi-R  Aliance.  His 
group  wW  begin  testing  products  shortly  thereafter,  but  the 
first  products  carrying  WhR  interop^a^  certifications 
aren’t  Kkely  to  arrive  much  before  late  summer. 

Devices  based  on  8(12.t1g  sell  for  a  pmrnium  of  50%  or 
more  over  802.t1b  devices,  but  vendors  say  that  shodd  drt^ 
to  10%  or  less  by  next  year  as  shipment  volumes  increase. 
EarlyB02.tfocanl5anddual-mode8(^T1a/ghubsareavait- 
abb  from  0-Unk  Systems  Inc.,  Linksys  Group  Inc.  and  sev¬ 
eral  others,  but  vendors  of  enterpnse-dass  WLAN  equip- 
rnent  are  holding  off  unrt  the  8(^.t1g  standard  is  final.  In 
some  cases,  existing  enterprise-class  access  poinis  have 


■  PRODUCTS 


Vendors  Offer 
G  in  a  Rash 

Devices  based  on  802.11a  got 
off  to  a  slow  start  Iasi 
year,  in  part  because  only 
one  vendor  offered  a  chip 
set  and  the  WhR  Aiance 
wouldn't  certify  Atheros 
Communications' design 
until  a  compefing  design  was 
avariabb  to  test  against.  This  firne  around. 
Atoeros' AR5001X  bees  competftton  from  Broadcom 
Corp.'s  54g  and  Intersil  Corp.'s  Rlsm  chip  sets,  with  addh 
tional  designs  from  (^bco  Systems  tnc.  and  Intel  Corp.  in  the 
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I  COMPATIBILITY 


T  HO?  11 

80?  ir 

^  80?  11- 

802  11-;  1 

L-J 

_ 

_ 

80^111  ndbfpiaimiVpraiiidriteiamlfewMtaKMs  of  fiicaH«Myde02A.bpDdHclB#M 
tnl  iNpniMti  of  aoem  pn^  ite1  ta0n  iMf 


while  supporting  802Jlb  devices.  "It  gives  you  three 
more  channels  of 802.Ua,"  says  Rich  Redel&  vice 
chairman  of  WLAN  chip>set  maker  Atberos  Commu¬ 
nications  Inc.  in  Sunnyvale,  Calif  But  does  that  mat¬ 
ter?  Probably  not.  be  says,  because  most  corporate 
uses  don’t  yet  require  tlU  bandwidth. 

“We’re  having  this  technology  burst  that  is  deliver¬ 
ing  technologies  in  excess  of  demand,”  says  Ken  Ehi- 
ianey.  an  analyst  at  Gartner  Inc  'That’s  cenainly  the 
case  at  Embaj^dero  Systems  Corp-  in  Alameda. 
Calif.,  which  uses  pole-mounted  802.Ub  access 
points  on  its  loading  docks.  "Range  matters,  while 
our  bandwidth  requirements  are  not  high,”  says 
Chief  Technology  Oflflcer  John  Montgomery. 


been  designed  to  be  upfyadable  as  organizations  move  be¬ 
yond  SOZtIb.  Proodm  Corp.  says  it  wtU  release  an  802.11g 
version  of  its  Orinoco  AP-600  smatt-business  access  poirM. 
along  with  an  upgrade  Wt  lor  its  AP-2000  enterprise-dass 
devi^  and  B(£.1l0  dient  card  in  the  second  qutfler.  A 
Cisco  spokesrnan  says  the  vendor  Witt  sNp  upgrade  Wts  for 
its  Arronet  1K)0  and  t200  access  points 'sho^  after  the 
llg  standard  ia  Hnalized."  Ron  Seide.  product  line  manager 
of  Cisco’s  wireless  networtong  busing  untt.  won't  say 
when  the  vendor  wi  ship  a/g  access  points  and  WLAN 
cards:  Gartner  analyst  Km  Dulaney  expects  mature  prod¬ 
ucts  to  arrive  by  late  2003  or  early  2004. 

Hoftsvie.  N.Y.-based  Symbol  Technologies  Inc.,  which 
setts  heawduty  WLAN  devices  used  in  warehouses  and 
delivery  triKics.  is  even  more  cautious.  Syntol  Vice 
dent  R^  MartirK)  says  the  verKlor  won’t  ship  product  urrtil 
early  to  mid-2004. PDA  client  support  conttig  some¬ 
time  thereafter.  'Going  forwwd,  esped^  with  those  enter¬ 
prises  which  are  depfoying  wkeless  for  the  first  time,  g  inay 
have  some  promise  for  hi^-bandwidth  applic^ions.' 


Montgomery  says  that  in  a  few  areas  in  the  yard 
where  workers  tend  to  congregate,  having  higher 
bandwidth  might  be  beneHciaL  The  802.Ug  standard 
promises  hitter  bandwidth  than  11b,  with  comparable 
range.  But  with  current  Ug  devices  based  on  a  draft 
specification  and  lackti^  Wi-Fi  Alliance  interoper¬ 
ability  certiGcatioo.  the  decision  was  a  no-lwaiMr 
"We  will  pass  on  [802.UgJ  and  use  802.Ua.”  be  says. 

”lf  you’re  trying  to  put  these  in  an  indoor  office 
space,  range  is  not  an  issue,”  says  Redel&.  Network 
administraiors  need  to  maximue  bandwidth  for  each 
user.  One  way  to  do  this  is  to  place  access  points 
closer  together,  but  that  increases  the  likelihood  of 
cocfaannel  Interference,  be  says.  The  best  st^ion  for 
802.Ub  users  in  this  situation  is  to  move  to  802.Ua/b 
hubs.  ’HTbe  beauty  of 802.Ua  is  you  have  so  many 
channels  you  don't  have  to  worry  about  interference 
between  access  points.”  he  says.  Another  option  for 
802.Ua  devices  is  to  "dial  down  the  power”  in  order 
to  more  closely  group  access  points,  be  says.  The 
IEEE  is  woridng  on  a  standard.  802.Uh.  that  will  sup- 
p<Ht  adjusting  802.Ua  power  levels  and  changing 
channels  on  the  fly  to  avoid  interference  with  other 
actxss  points  and  devices  operating  in  the  5-GHz 
range,  such  as  radar.  But  that  standard,  also  called 
Spectrum  Managed  8Q2  Jla.  is  still  in  committee. 

One  area  wl^re  802.Ug  could  eventually  ghine  is 
streaming  video,  says  Dulaney.  But  acceptable  quali¬ 
ty  will  require  soUdincation  of  tbe  emerging  802Jle 
quality-of-servke  draft  standard,  which  has  pro¬ 
gressed  slowly  in  committee.  And  while  vidro 
streaming  over  a  WLAN  connection  may  work  for 
home  users,  today’s  throu^put  rates  still  may  not  be 
enough  to  support  it  in  a  business  environment, 
where  many  users  share  an  access  point,  be  says. 

For  now.  E>ulaney  says,  corporate  IT  shouldn't  get 
too  for  ahead  of  tbe  curve.  "Buy  b  now  and  then  switch 
over  to  buying  a/g  at  tbe  end  of  tbe  yean"  he  says.  I 


Why  Faster  G 
Means  Slower  B 


Got  802.11b?  H  so.  mstaling  802.11a/g  access 
pointswillactu^sfowthroughpulraiestorexst- 
ing  cfients  and  throttle  back  the  performance  of 
r)e«i«r802.t1gcfientsaswel.ver)dorsandv\a- 
hfsls  say.  How  big  an  impact  wl  this  have  at  the 
individual  dent  level?  The  final  answer  won’t 
come  until  sometime  in  2004,  once  more  mature, 
secondiienerabon  devices  arrive  and  errterpnses 
begm  fiekj-testino  products. 

The  performance  issue  anses  from  the  way  n 
which  the  802.ng  standard  provides  for  backward 
compalibiUty  with  802.1fo  itevicei  Whde  0O2.ng 
access  poinb  can  corrvnunicate  with  both  ck^ 
types  over  the  same  frequency  band,  each  uses  a 
lifferertf  corTinuBcalfon  protoc^ 
devicescan'tseeeachoiher.foedefaiRcoisKin- 
avoidance  scherne  for  rnanaging  who  gets  to  tall 
doesn't  work.  To  sohe  that  802.11g  access  pofots 
supporting  rnixed  chents  go  info 'protected  rnode' 
atfo  coordnafo  traffic  usmg  a  request-based  proto¬ 
col  that  adds  to  nehMork  overhead  *Vou’re  runrxng 
two  dMerenl  prolocois  and  bme-sharing  them.' 
says  Alheros  Vfoe  Chalrinan  Richard  Redells 

Thedesignfavore802.1focfwnts.butmrouah- 
put  tor  both  cherts  6  degraded,  he  says.  *Vtte  gel 
frustratedwhenpeopiesaygfibackwardcompai- 
fote  and  as  fast  as  a.  If  you  want  to  be  backward 
coropattole.  you're  not  as  fast  as  a.*  he  says. 

Vendor  tests  d  proteded-mode  performance 
vary.  Tests  by  fotorti  Corp.  and  Alh^  show  that 
raled8chnescouldbe40%arf«gherinsomesil- 
urtnrs.  But  toose  aren't  reaheorld  tests.  Gartner 
analyst  Ken  Dulaney  expects  the  degradation  of 
throughput  to  the  chert  to  the  range  rt  10%.  *1^ 
vai  stow  tt  down  a  htlfo  bl*  he  says,  addtog  that 
he  doesnl  think  most  users  wi  flolce. 'The  bot¬ 
tom  Ine  is  it  doesn't  matter.'  he  says,  because 
tnort  cfiento  aren't  constricted  by  bandMdih. 

Redefes  less  optwcbc-K  you’re  concerned 
abort  bandMdIh  por  It)  userel  you're  much  bet¬ 
ter  putting  an  a/b  access  poM  up.  because  you 
won’t  touch  the  b  usere  at  al.’ he  says.  AKetriately. 
users  can  force  access  points  to  rut  to  tig  mode 
only.  Thai’s  lachnicalyort  of  spedficahon  and 
leaves  rn  artilrrtiQn  for  b  arte  g  nodeSk  so  cofenre 
Mil  tocrease  wih  network  traffic  bads.  But  devices 

probahly  sti  be  toteroperabfo.  RadeKs  says. 

The  throughprt  Itoiitations  of  protected  rn^ 
are  also  Btely  to  decrease  as  more  mature  designs 
appev.  Redeffs  clairrB.  WtiN  802.Tta  chip  sets,  for 
exarnpte.  fei  ^lorl  rt  expectations.  Second-gener¬ 
ation  desi(tos  have  bred  better.  IMe've  drarnah- 
caly  tovroved  the  range  and  throughput  of  a.*  he 
says.  He  eitoects  stoilar  gains  to  frtue  802.11g 
doigns. 'There  are  sbl  huge  achences  we  can 
make  to  rune  and  throughput.' he  adds. 
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•802,11g  hubs  supporbog  802  Hb  cfents  must  run  in  protected  mode,  which  can  cut  throughput  by  as  much  as  40%. 
accortkng  to  Atheros  Communications. 

**Number  ot  nonoverlapping  channels  supported. 

•  •  ‘Both  802.Tla  and  b  specs  were  approved  at  the  same  time,  but  because  o(  the  comptexity  ot  802 11a  b  products  shipped 
first.  Vbkime  shipments  of  802.11a  products  iMn'i  begin  until  2002. 


while  supponing  802.11b  devices,  ‘it  gives  you  three 
more  channels  of  802.11a.''  says  Rich  Redelfs.  vice 
chairman  of  WLAN  chip-set  maker  Atheros  Commu¬ 
nications  Inc.  in  Sunnyvale.  Calif.  But  does  that  mat¬ 
ter?  Probably  not.  he  says,  becau.se  most  corporate 
uses  don't  yet  require  the  bandwidth. 

“We’re  having  this  technology  burst  that  is  deliver¬ 
ing  technologies  in  excess  of  demand."  says  Ken  Du¬ 
laney.  an  analyst  at  Gartner  Inc.  That’s  certainly  the 
case  at  Embarcadero  Systems  Corp.  in  Alameda. 
Calif.,  which  uses  pole-mounted  802.11b  access 
points  on  its  loading  docks.  “Range  matters,  while 
our  bandwidth  requirements  arc  not  high."  saw 
Chief  Technology  Officer  John  Montgomery. 


been  designed  to  be  upgradable  as  organizations  move  be¬ 
yond  002.11b.  Proxim  Corp,  says  it  will  release  an  802.t1g 
version  ot  ite  Orinoco  AP-600  small-busmess  access  point, 
along  with  an  upgrade  kit  for  its  AP-2000  enterprise-class 
devices  and  d02.11g  client  card  in  the  second  quarter  A 
Cisco  spokesman  says  the  vendor  will  ship  upgrade  kits  tor 
its  Aironet  1100  and  1200  access  points  'Portly  after  the 
llg  standard  is  finalized.'  Ron  Seide,  product  line  manager 
of  Cisco’s  wireless  networking  business  unit,  won't  say 
when  the  vendor  wilt  ship  a/g  access  points  and  WLAN 
cards;  Gartner  analyst  Ken  Dulaney  expects  mature  prod¬ 
ucts  to  arrive  by  late  2003  or  early  2004. 

HoltsviUe.  N.Y. -based  Symbol  Terminologies  Inc.,  which 
sells  heavy-duty  WLAN  deuces  used  in  warehouses  and 
delivery  trucks,  is  even  more  cautious.  Symbol  Vice  Presi¬ 
dent  Ray  Martino  says  the  vendor  won't  ship  products  until 
early  to  mid-2004,  with  PDA  client  support  coming  some¬ 
time  thereafter.  “Going  forward,  especially  with  those  enter¬ 
prises  which  are  deploying  wireless  lor  the  first  time,  g  may 
have  some  promise  for  higher-bandwidth  applicalions.' 


Montgomery  says  that  in  a  fc\s’  areas  in  the  yard 
I  where  w'orkers  tend  to  congreTtate.  having  higher 
j  bandwidth  might  be  beneficial.  The  802.11g  standard 
I  promises  higher  bandwidth  than  Ub.  with  comparable 
range.  But  with  current  llg  devices  based  on  a  draft 
specification  and  lacking  Wi-Fi  Alliance  interoper¬ 
ability  cenification,  the  decision  was  a  m>-braintf  r. 
"We  will  pass  on  l802.1lg]  and  use  802.na."  he  sav's. 

"If  \xm'rc  tiy  ing  to  put  these  in  an  indix«r  office 
space,  range  is  not  an  Issue."  saj-s  Redelfs.  Network 
administrators  need  to  maximize  bandwidth  for  each 
user.  One  way  to  do  this  is  to  place  access  points 
closer  together,  but  that  increases  the  likelihtMtd  of 
cocbannel  interference,  he  says.  The  best  solution  for 
802.11b  users  in  this  situation  Lv  to  move  to  802.11a  b 
hubs.  "The  beauty  of  802.11a  is  yt>u  have  so  many 
channels  you  don't  hax  e  to  wony  abtiut  interference 
between  access  points."  he  say-s.  Another  opiM)n  for 
802.11a  devices  is  to  “dial  down  the  power"  in  order 
to  more  closely  group  access  points,  he  says.  TTie 
IEEE  is  working  on  a  standard.  802.11h.  that  will  sup- 
pon  adjusting  802.11a  power  levels  and  changing 
j  channels  on  the  fly  to  avoid  interference  w  ith  other 
I  access  points  and  devices  operating  in  the  5-GHz 
I  range,  such  as  radar.  But  that  standard,  also  called 
I  Spectrum  Managed  802.11a.  is  still  in  committee. 

One  area  where  802.1Ig  could  eventually  shine  is 
I  streaming  video,  says  Dulaney.  But  acceptable  quail- 
I  ty  will  require  solidification  of  the  emerging  802.ne 
I  quality*of-ser\'icc  draft  standard,  which  has  priv 
I  gressed  slowly  in  committee.  And  while  video 
I  streaming  os'er  a  WLAN  connection  may  work  for 
I  home  users,  today's  throughput  rates  still  may  not  be 
I  enough  to  suppon  it  in  a  business  environment. 

I  where  many  users  share  an  access  point,  he  says. 

For  now.  Dulaney  says,  corporate  IT  shouldn't  get 
loo  far  ahead  of  the  curw.  “Buy  b  now  and  then  switch 
over  to  buying  a.''g  at  the  end  of  the  year."  he  says,  t 


■  ■  COMPATIBILITY 

Why  Faster  G 
Means  Slower  B 

Got  802  lib"?  If  SO-  installing  002  lld'g  access 
pants  will  actually  slow  throughput  rates  fa  exisl- 
mg  clients  and  throttte  back  the  performance  of 
newel  002  llg  clrenis  as  well  vendors  and  ana 
lyas  say  How  big  an  impact  will  this  have  at  the 
individual  client  leveP  The  fmat  answer  won  t 
come  unlit  sometime  m  2004,  once  more  mature 
second-generatiori  devices  arrive  and  enter ptrses 
begin  tieto-testmg  products 
The  performance  issue  arises  from  the  way  m 
which  the  802  Hg  standard  provides  tor  backward 
compatibilrtv  with  802  lib  devices  While  802  llg 
access  pomis  can  communicate  wrth  both  cfceni 
types  over  the  s^e  freouency  band,  each  uses  a 
different  communication  protocol  Since  a  and  b 
devices  can't  see  each  other,  the  defaulf  cofhs«n- 
avoidance  scheme  lor  managing  who  gets  to  t^ 
doesn't  work  To  solve  that.  802.11g  acxess  pomts 
supporting  mixed  clients  go  into  “protected  mode* 
and  coordmale  traffic  usirtg  a  request -based  proto¬ 
col  that  adds  to  network  overhead  “You  re  running 
two  different  protocols  and  hme-shanng  them  * 
says  Atheros  Vee  Chairman  Richard  Redelfs 
The  desiyi  favors  802.119  cbents.  but  through¬ 
put  tor  both  clients  is  degraded,  he  says  “Iteget 
Irustraled  when  people  say  g  <s  backwad  compat¬ 
ible  and  as  tast  as  a  If  you  want  to  be  backward 
compatible,  you  re  not  as  fast  as  a '  he  says 
Vendor  tests  of  proiecled-mode  perfor^nce 
vary.  Tests  by  Intersil  Corp  and  Atheros  show  that 
rate  declines  could  be  40%  or  higher  m  some  srt- 
uatiorts  Gut  those  aren't  real -worfa  tests  Gartner 
analysi  Ken  Diianey  expects  the  degradation  of 
throughput  to  the  client  m  the  rar^ge  of  10%  “Vbu 
will  stow  It  down  a  little  bd  *  he  says,  adding  that 
he  doesn't  think  most  users  wi  noice.  “The  bot¬ 
tom  line  IS  4  doesn't  matter.'  he  says,  because 
most  cherris  aren't  constnded  by  bandwidth 
Redelfs  <s  less  optirmstic  *11  you  re  concerned 
about  bandwidth  (lor  11b  users]  you'te  much  bet¬ 
ter  putting  an  a/b  access  po*nt  up  because  you 
iiwni  lou^  the  b  users  at  all.'  he  says  Aliematety. 
users  can  force  access  points  to  run  m  Bg  mode 
only.  Thai  s  technically  out  of  specification  and 
leaves  no  arMraiion  lorbandgryodessocolisms 
wit  increase  wdh  nehMyk  iraftrc  toads.  But  devices 
wtl  probably  ^  be  eiteroperable.  Redelfs  says 
The  throughput  limitations  ot  protected  mode 
are  also  likely  to  decrease  as  more  mature  designs 
appear.  Red^  datms  Imtiai  602  Ha  chip  sets,  lor 
exonple.  fell  short  of  expectations  Second-gener¬ 
ation  deigns  have  fared  better  IWe  ve  dramaii- 
cally  nrwoved  the  range  and  throughput  ot  a.'  he 
says.  He  expects  simitar  gains  m  future  602  tig 
designs.  There  are  sbH  tuge  advances  we  can 
make  m  range  and  throughput.'  he  adds 
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Nothini 
But  Nei 

PeopleSoft’s  chief  manufacturing  industry 
strat^ist  tells  why  her  company  has  bet  on  a 
pure  Internet  architecture.  By  Tommy  Peterson 


cum  PIM  is  in  the  cfticJc  ofPeopleSofi 
Inc.'s  efforts  to  transform  itself  firm, 
as  she  puts  it,  "that  HR  company  that, 
oh.  the  %voy,  does  some  si^iply 
chotn”  to  o  mo/or  player  in  £RP  oiuf  ono/yfics  so^' 
ware.  Ptak  learned  manufacturing  from  the  ground  up, 
starting  out  as  an  assembler  on  a  plant  floor.  From 
there,  she  went  on  to  plant  manogernent  and  then  es¬ 
tablished  her  own  consuhingfirm  bffbre  joining  IBM’s 
worldwide  ERP  solutions  group.  In  addition,  in  2(f00, 
Ptak  served  as  president  and  CEO  of  APICS  —  The 
Educationtd  Society  fitr  Resource  Management.  She 
joined  Pleasaraon,  Odif.-based  PeopleSofi  last  year 
and  now  has  worldwitk  re^Kmsilnlity  for  the  com¬ 
pany^  manuftteturing  industry  strategy  across  its 
entire  product  line. 

Ptak  recently  spoke  with  Computerworid's  Tbmmy 
Peterson  about  how  her  company  and  others  are  re- 
^)onding  to  customers’ needs. 

muwortMaltadmokgk:dkmmdoriutmPtepl^ 
tmdngteadtmd?  I  see  it  from  two  sides:  There’s  ttdiat 
customers  tell  us  they  need,  and  then  there's  the  flip 
side.  Take  the  example  of  Post-h  notes  —  which  is. 
until  it  comes  out,  customers  don't  know  they  need 
it  Post-it  notes  were  realty  a  disruptive  chan^ 
albeit  not  something  that  changed  the  world.  But 
still,  they  weren’t  something  that  somebody  went 
to  ?M  and  said.  Too  know,  we  really  need  a  little 
piece  of  paper  that's  got  glue  on  the  back  that  sticks 
but  doesn't  stick.”  But  after  3M  devel(^>ed  it.  every¬ 
body  went,  “Oh,  gotta  have  that” 

So  the  iob  U  really  twofold  —  first  listening  to 
what  customers  are  saying  and  translating  that  into 
chaiQ^es.  The  ocher  half  b  kx^ong  at  what  we've  got 
and  helping  our  customers  understand  u^t's  there. 

So,  wliil  an  UMTS  nying  ttity  BMd  noid?  People  are 

going  for  anything  that  will  increase  revenues  or  de¬ 
crease  costs  with  some  level  of  surety  that  that's  going 


to  happen  in  the  very  short  term.  It’s  (which]  technol¬ 
ogy  b  going  to  address  a  real  business  issue  for  them. 

Ibon  don't  think  of  Iho  kind  of  big  cyalsms  that  RsopioSaft 
and  Rs  compotBofs  aal  aagofek  fbaa.  It  depends  on  the 
size  of  the  company.  What  Tm  seeing  b  that  the  big 
companies  out  there  are  buying  point  solutions. 
The^re  buying  something  that  fixes  a  very  floite 
scope  of  issues  they  have  in  the  company.  The  small¬ 
er  companies,  the  under  $2  billion  companies,  are 
looking  for  ftiU-suite  imegratioo  proiects,  but  they're 


Aci;on>iMi-,i* .  ■ 


looking  for  them  to  be  completed  in  under  a  year.  The 
expectations  are  of  time  to  implementation  of  six  to 
nine  months.  So  it's  a  big  project  for  that  company, 
but  it's  also  very  quick.  The  old  18-  to  24-nK>ntb  proj¬ 
ect  times  just  don’t  bold  anymore.  They  need  to  have 
whatever  it  is  you're  going  to  do  up.  running  and  pro¬ 
ducing  the  retiun  on  investment  within  a  year. 

Wk  that  a  touid)  trmbtton  for  ftopbSoft  to  nuto?  No, 

actually.  Our  architecture  allows  you  to  deploy  more 
quickly  than  our  competition,  bemuse  it's  a  pure  In¬ 
ternet  architecture.  I  was  with  a  customer  recently 
that  was  looking  to  outsource  some  of  their  manufac¬ 
turing  to  Mexico.  One  of  the  thii^  that  really  res¬ 
onated  with  them  was  that  because  of  our  pure  Inter¬ 
net  architecture,  if  something  happened  in  Mexica 
they  didn’t  have  to  send  a  tech  across  the  border  in 
order  to  fix  something  that’s  running  on  the  client 
machine.  All  you  need  b  a  browser.  With  the  security 
issues  in  going  across  the  border,  if  a  tech  has  to  go 
over  there  on  what’s  a  20-ininute  job,  he's  going  to  be 
gone  all  day.  So  that  was  a  big  savii^  them  right 
there;  it  was  a  big  determinant  of  bow  much  tech  sup¬ 
port  they  were  going  to  have  to  add.  Folks  recognize 
that  the  Internet  b  the  ftiCure.  and  I  believe  we're  the 
only  ones  that  have  a  pure  Internet  architecture. 

What  Undt  of  advantapM  do  you  SM  n  tohamit  in  Ml  Intor- 
not-baaod  arvMaclura?  Hrst.  there’s  a  big  difference 
between  Internet-enabled  and  pure  Internet  architec¬ 
ture.  Pure  Internet  architecture  means  that  tfab  tech¬ 
nology  was  designed  from  scratch  to  run  over  the  In¬ 
ternet  There  b  absolutely  no  code  on  the  client. 

Think  about  udiat’s  happening  in  dte  industry  today 
and  how  companies  have  to  collaborate  much  more 
closely  with  their  customers.  They  need  to  get  infor¬ 
mation  out  to  their  customers  and  do  it  in  such  a  way 
that  it’s  very  easy  and  inexpensive  for  the  customer  to 
receive  that  infonnatioa  What’s  easier  than  giving 
somebody  a  user  ID  and  a  password  for  a  Web  rite? 
There's  no  integration  and  training  of  the  supplier. 

When  our  customers  say  they  are  Internet-en¬ 
abled.  it  means  that  you’re  having  to  download  code: 
it  means  thidur  clirats.  For  our  customers,  you  look 
at  the  number  of  PCs  that  you  would  have  to  up¬ 
grade.  And  they  ask.  *^How  big  of  a  client  do  I  need  to 
run  the  code?”  With  ours,  you  only  need  a  browser.  If 
you've  got  older  machines,  we  say  great  —  you  don't 
even  have  to  upgrade  all  those  machines.  All  you 
need  b  a  browser. 

Whaidoasthar— Htowantorpfbera— iteyourcoTHpany 
and  yrar  cmtowMi?  We  see  real  time  as  meaning  chat 
there  b  no  time  lag  between  an  event  and  the  impli¬ 
cation  of  the  event  I  need  to  know  as  soon  as  some¬ 
thing  happens  in  my  supply  chain  Chat  Fve  got  a 
problem.  I  need  to  know  right  away  when  I  have  an 
opportunity  with  a  customer. 

Wlnf  I  Am  eapaUky  for  lha  raaHiiM  MitoniriM  right  now? 
It  varies.  It  always  gets  down  to  bow  many  integra¬ 
tion  points  are  there  at 
the  customer  rite  and 
bow  often  do  they  want 
them  refreshed.  We’re 
living  in  a  very  hetero¬ 
geneous  world.  I 
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The  Web’s 
Nodleap 

Data  integration  via  the  Semantic 
Web.  By  ^trick  Thibodeau 


INFORMATION  TECHNOLOGY  man¬ 
agers  are  familiar  with  the  concept 
of  the  Semantic  Web.  even  if  they 
haven't  beard  the  name  before. 

The  Semantic  Web  is  about  giving 
users  the  ability  to  manipulate,  con¬ 
nect  and  associate  Web  resources  in 

new  and  powerful  ways.  It's  a  _ 

capability  similar  to  t^t  of  the  nrVIBr 
corporate  workhorse,  the  rela-  rU  |  URt 

tional  database.  WATCH© 

The  Semantic  Web  is  about  IfAIWIM 

taking  the  relational  database 


and  ‘^vebbit^  it.”  as  Tun  Berners-Lee, 
the  inventor  of  tbe  Worid  Wide  Web. 
described  it  at  a  recent  forum  of  the 
National  Science  Foundation  in  Arling¬ 
ton.  Va.  Tbe  Semantic  Web  will  allow 
businesses  to  manipulate  external, 
beteiogeiteous  Web  data  in  much  the 
same  way  they  do  internally,  he  says. 
But  its  most  immediate  use  may  be  as  a 
tool  to  solve  data  integration  problems. 

Tbe  Semantic  Web  is  intended  to  in¬ 
fuse  meaning  into  the  Web  and  make 
data  “machine-understandable."  It  re¬ 
lies  on  tbe  development  of  standards 
and  "ontologies.”  tbe  vocabularies  that 
systems  need  in  order  to  associate  and 
connect  data  across  multiple  databas¬ 
es.  These  ontologies  would  be  linked 
to  documents  and  other  Web  resources, 
givii^  computers  the  ability  to  infer 
relationships  among  these  infonna- 
tkm  sources. 

The  Semantic  Web  would  allow 
manipulation  across  multiple,  hetero¬ 
geneous  databases.  This  capability 
could,  for  instance,  allow  an  electronic 
airiioe  reservation  service  to  automati¬ 
cally  interact  with  a  personal  calendar 
program  to  arrange  a  flight  that  fits  a 
user’s  schedule,  even  if  there  was  no 
pre-established  interface  between  tbe 
two  pieces  of  software. 


But  atxurately  forecasting  tbe  kinds 
of  services  that  the  Semantic  Web  will 
delivef  is  as  difficult  as  it  was  to  antici¬ 
pate  at  its  inception  what  the  Web 
might  become.  "In  tbe  beginning,  I 
think  it  was  very  unclear  what  tbe 
dominant  business  model  would  be." 
_  says  Ora  Lassila,  a  research  fel¬ 
low  at  Espoo.  Finland-based 
Nokia  Coqi.’s  Nokia  Research 
Center.  Similarly,  tbe  kinds  of 
services  that  may  emerge  from 
the  Semantic  Wi^  remain  a 


"big  question.”  be  says. 

But  for  corporations,  the  immediate 
value  of  the  Semantic  Web  may  not 
rest  in  using  it  for  new  services,  but 
rather  as  a  means  of  integratii^  data  in 
heterogeneous  environments.  And  the 
concepts  and  standards  are  sufficiently 
deveh^>ed  to  allow  that  now. 


Eric  Miller,  who  beads  the  World 
Wide  Web  Consortium's  (W3C)  Se¬ 
mantic  Web  effort,  believes  it’s  tbe 
Holy  Grail  of  enterprise  integration. 
“We’re  talking  about  really  reducing 
tbe  turnaround  time  of  data  integra¬ 
tion,"  he  said. 

Tbe  Cambridge.  Mass.-based 
W3C,  which  is  beaded  by  Berners- 
Lee,  is  leading  the  effort  to  develop 
Semantic  Web  standards,  such  as  the 
Resource  Description  Framework 
(RDF),  the  standard  used  for  express¬ 
ing  ontologies,  and  XML.  tbe  standard 
for  creating  customized  tags  for  the 
exchange  of  data  between  heteroge¬ 
neous  applications. 


Ontology  Hurdle 


A  more  difficult  aspea  of  building  the 
Semantic  Web  is  the  creation  of  on¬ 
tologies.  This  process  requires  efforts 
by  diverse  communities,  such  as  the 
medical,  insurance  and  finance  indus¬ 
tries.  to  develop  common  vocabularies 
that  systems  will  use  to  recognize 
what’s  in  a  Web  document 

Fortunately,  creating  ontologies 
doesn’t  require  a  global  coordinated 
effort.  If  words  are  used  differently, 
such  as  “title"  in  insurance  vs.  the 
“title"  of  a  book,  services  will  be 
able  to  map  those  differences  to  allow 
interoperability. 

The  Semantic  Web  is  very  much  a 
future-looking  vision,"  says  Ronald 
Schmelzec,  an  analyst  at  ZapThink  LLC 
in  Waltham,  Mass.  Trying  to  get  com¬ 
puter  systems  to  not  only  be  able  to 
communicate  with  each  other,  but  also 
able  to  understand  each  other  is  tradi¬ 
tionally  a  very  difficult  problem." 

Indeed,  developing  the  Semantic 


Web  will  take  years,  says  fas  DhlUon, 
president  and  CEO  of  Cdcorp  Inc.,  a 
start-up  company  in  Santa  Monica, 
Calif,  that  has  used  RDF  and  ontolo¬ 
gies  to  integrate  applications. 

The  Wi^  is  kind  of  stuck  in  terms 
of  where  it  is  right  now,  and  if  it  is 
^ing  to  take  tbe  next  step  and  en¬ 
hance  productivity  and  use.  it  has 
to  become  intelligent."  DhiUon  says. 
“We  are  betting  that  Tim  Berners-Lee 
will  succeed." 

And  if  Berners-Lee  does  succeed 
in  convincing  software  vendors  to  in¬ 
vest  in  Semantic  Web  applications, 
businesses  will  have  a  new  way  of  inte¬ 
grating  databases  and  applications,  in¬ 
stead  of  using  the  traditional  method 
of  building  interfaces  one  by  one. 

Olcorp  uses  ontolo^es  built  on  top 
of  RDF  in  its  “semantic  learner,*  whu^ 
can  create  new  “roeta-applications”  by 
extracting  features  from  multiple  exist¬ 
ing  applications.  It  analyzes  users 
are  doing  in  the  existing  programs,  how 
they  navigate,  \^iat  actions  are  taken 
and  what  data  is  used.  It  then  puts  that 
information  in  a  knowledge  b^. 

In  the  next  step,  a  “reasoning  en¬ 
gine"  builds  tbe  new  application.  It 
does  that  by  allowing  users  to  specify 
goab  or  re^ts  they  want  ro  accom¬ 
plish.  Using  RDF.  reasoning  engine 
looks  across  the  knowledge  base  to  see 
if  all  the  pieces  are  there  to  assemble 
the  process. 

In  tbe  third  stq>.  code  is  generated 
and  executed  bas^  on  tbe  functions 
stored  in  the  knowledge  base. 

Semantic  Web  pn^nents  predict 
that  more  companies  Iflce  Celcorp  will 
emerge  in  tbe  near  term,  offering  simi¬ 
lar  services  and  new  tools  for  ^plying 
semantic  concepts  to  existing  business 
processes. 

Berners-Lee  says  technology  man¬ 
agers  can  prepare  for  this  ftiture 
by  asking  their  application  vendors 
whether  they’re  using  RDF  in  their 
software  development  I 


The  Battle  Against 
Pornography  Continues 


A  test  of  a  British  vendor’s  e-mail  fitteting 
tool  owes  to  be  surprisingly  successful. 
By  wnce  Tuesday 


UR  SECURITY  TEAM  S 
goal  is  to  provide  the 
company  with  freedom 
from  fear.  Manage¬ 
ment  is  alraid  of  pornography, 
afraid  of  the  bandwidth  and 
time  wasted  on  it.  and  even 
more  a6aid  of  lawsuits  from 
offended  staff  I  don’t  think 
the  problem  within  our  com¬ 
pany  is  particularly  bad,  but 
because  we  take  every 
issue  seriously,  we've 
spent  some  time  ad¬ 
dressing  this. 

I  see  four  ways  for 
pornography  to  get 
into  or  out  of  our 
building:  on  physical 
media,  over  Web  connections, 
by  way  of  e-mail  attachments 
and  over  peer-to-peer  file- 
sharing  networks. 

We  do  our  best  to  ban  peer- 
to-peer  networks.  But  there's 
not  a  lot  we  can  do  about  phys¬ 
ical  transport,  considering  tlM 
latest  solid-state  storage  de¬ 
vices  are  the  size  of  my  thumb. 
But  if  anyone  copies  porn  ffom 
such  a  device  onto  a  PC  we'U 
find  it  eventiuUy  on  the  file 
shares  or  local  drives. 

We  also  do  reporting  on 
Web  browsing  activity.  That 
has  allowed  us  to  track  down 
the  small  number  of  people 
who  view  and  download 
pornography  over  the  W<^. 

Hiat  leaves  e-mail  as  the 
last  open  door.  We've  added 
a  few  filters  for  particularly 
dreadful  phrases  to  try  to  stop 
offensive  spam,  and  our  new 
antispam  service  should  help 
filter  out  porn  too.  But  there’s 
always  the  risk  that  the  e-mail 
service  will  be  used  to  send 
and  receive  objectionable 
material  partictUariy  in  file 
attachments. 


We'd  like  to  find  a  way  to 
block  incoming  e-maUs  that 
include  pornographic  image 
file  attachments.  We  already 
use  New  York-based  Message- 
Labs  Inc's  SkyScan  antispam 
and  antivirtis  services,  and  the 
managed  service  provider  of¬ 
fers  a  service  it  claims  can  also 
protect  us  against  pornograph¬ 
ic  pictures.  But  it  has  been  dif¬ 
ficult  to  arrange  a 
test  o(  that  service. 

Based  on  informa¬ 
tion  on  Message- 
Labs’  Web  site,  It  ap¬ 
pears  that  the  com¬ 
pany  uses  First  4  In¬ 
ternet  Ltd's  Image 
Composition  Analysts  (ICA) 
software  to  perform  this  ser¬ 
vice.  By  chance,  we  were  re¬ 
cently  approached  by  a  re¬ 
seller  of  Banbury.  Ec^land- 
based  First  4's  product. 

I  have  a  cynical  view  of  the 
likely  effectiveness  of  these 
tool&  It's  difficult  enough  for 
humans  to  decide  about  porn¬ 
ographic  images,  so  it  must  be 
extremely  hard  ft>r  software  to 
do  it  This  reseller,  however, 
was  willing  to  let  us  try  ICA 
on  our  systems  for  10  days. 


It  also  offered  us  ftve  CD- 
ROMs  full  of  images  to  help  us 
test  the  software.  They  coo- 


H’s  difficult  enough 
for  humans  to  dedde 
about  pornographic 
images,  so  it  must  be 
exhemely  hard  for 
software  to  do  it 


tained  images  that  included  no 
porn,  some  pom.  a  whole  lot 
of  pom  and  total  pom.  One 
CD  the  reseller  offered  con¬ 
tained  images  graphic  enough 
to  frighten  Larry  Hynt 

The  graphic  nature  of  the 
materia]  aside,  it  isn't  a  good 
idea  to  test  a  product  by  using 
the  vendor’s  test  data.  Even  if 
it  goes  weU,  you  cant  mist  the 
results.  So  I  politely  declined 
the  offer  of  froe  pom  on  CD. 

Instead,  we  ran  the  tool 
against  a  week's  worth  of 
saved  e-mail  attachments  — 
more  than  6,000  of  them 
received  by  employees  at  our 
company.  It  took  a  few  hours 
to  process  but  required,  on 
average,  less  than  one  second 
per  attachment  when  run  on 
a  low-end  desktop  machine. 

Avoidng  False  PDsflhns 

We  aren't  too  bothered  by 
false  negatives,  where  the  soft¬ 
ware  misses  image  fUes  that 
should  be  flagged  as  pom.  Our 
intent  is  to  catch  persistent  of¬ 
fenders.  so  even  a  50%  hit  rate 
will  work.  But  we're  very  keen 
to  have  a  low  folse-positive 
rate.  We  cant  risk  falsely  ac¬ 
cusing  innocent  staffers,  so 
unless  this  software  is  very 
accurate,  we'll  have  to  check 
everything  it  flags. 

When  we  performed  our 
test,  the  software  idcntifted 
about  100  questionable  images, 
only  nine  of  which  were  le^ti- 
mate  e-mails  that  had  been 
misdassified.  Given  that  this 
was  incoming  e-mail  from  the 
Internet,  and  considering  the 
high  volume  of  attachments 
we  get.  it  wasnt  that  bad  a 
nui^r  of  offensive  e-mails. 

Most  false  positives  were  for 
pictures  of  b^ies;  these  im¬ 
ages  tend  to  have  a  lot  of  skin 
tones.  There  were  a  few  very 
weird  false  positives.  A  pkture 
of  a  sunset,  for  example,  was 
apparently  pornographic.  But 


we  can  live  with  this  error  rate, 
particularly  right  out  of  the 
box.  With  a  little  tuning,  the 
software  should  run  welL 
And  the  false  negatives? 

A  manual  search  of  the  files 
classified  as  not  pornographic 
revealed  only  a  tiny  number 
of  offensive  images,  and  most 
were  montages  of  smaller  im¬ 
ages  that  the  software  under¬ 
standably  had  problems  with. 

No  Easy  Solutions 

So,  if  you're  a  pt^n  bouiui  and 
want  to  bypass  this  software, 
what  can  you  do?  Not  a  Iol  It 
looks  inside  Word  documents 
and  PowerPoint  files  and  will 
check  compressed  files  as 
welL  Coloiblind  offenders  can 
rest  easy,  however,  because 
tbe  software  can't  handle 
monochrome 
OveralL  I  was  pleasantly 
surprised  with  bow  well  the 
software  worked.  Our  next 
step  is  to  decide  if  well  use 
the  upstream  filtering  at  Mes- 
sageLabs  or  install  tbe  soft¬ 
ware  on  our  e-mail  manage¬ 
ment  servers.  (We  use  MIME- 
sweeper,  from  Bellevue,  Wash.- 
based  Clearswift  Ltd.) 

Whichever  way  we  decide 
to  go.  it  won't  be  loctg  before 
our  incoming  and  outgoing 
e-mail  is  being  scanned  by  tbe 
perverted  gaze  of  ICA.  Even  if 
we  buy  tbe  service,  thou^  I 
plan  to  purchase  a  copy  of  the 
software  so  we  don’t  have  to 
manually  trawl  through  hard- 
drive  images  during  forensic 
investigations.  I 
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Maxtor  ATA  Drives 
WmIc  on  Intel  Chips 

Molgr  Coip.  Mouiead  iMt 
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Vendors  Team  on 
Disaster  Recovery 
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Supermarket  Uses 
EbgexibrLjogistics 
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About  Real  Time 


The  almost  deafening  buzz  these 
days  around  the  “real-time  enterprise”  is 
drowning  out  important  practice  ques¬ 
tions  about  what  the  term  real  time  really 
means  and  the  nature  of  real  time’s  impact 
on  business  processes. 


For  example,  a  few  weeks 
ago,  I  heard  from  Scoct 
Hicar,  the  CIO  at  consumer 
electronics  company  Maxtor 
Corp.  His  company  has  been 
using  Data  Integrator  soft¬ 
ware  hrom  Business  Objects 
to  pull  data  from  its  various 
applications  into  an  Oracle 
data  warehouse.  Maxtor  ex¬ 
ecutives  were  then  pulling 
real-time  reports  from  the 
data  warehouse  using  Busi¬ 
ness  Objects’  Weblntelli- 
gence  —  at  least  that’s  what 
they  were  doing  early  in  the 
implementation. 

The  problem  was  that  all  those  real¬ 
time  reports  were  slightly  different, 
since  they  had  been  produced  at  differ¬ 
ent  times.  So  executives  were  spending 
a  lot  of  their  meeting  time  comparing 
reports  and  puzzling  over  data  rather 
than  making  decisions.  Hicar  says.  Once 
Maxtor  recognized  the  root  problem, 
the  company  easily  solved  it  by  tweak¬ 
ing  the  software  so  that  it  pushed  re¬ 
ports  to  decision-makers  at  several  set 
times  throughout  the  day. 

“Now  people  spend  time  acting  on  the 
information  rather  than  questioning  its 
validity.  That  was  our  early  learning 
about  the  nature  of  real  time.”  says 
Hicar.  “Every  business  and  business 
process  has  different  criteria  about  how 
timely  timely  is." 

Constantly  updated,  instantly  avail¬ 
able  information  is  unnecessary  for 
some  business  functions  —  and  some¬ 
times  it  can  be  downright  detrimental 
That’s  because  human  decision-makers 
are  still  at  the  center  of  most  business 
processes,  and  they  need  more  than  a 
stream  of  the  most  current  data. 

Promoters  of  real  time  sometimes  for¬ 


get  that  the  notion  had  its 
beginnings  in  applications 
that  were  designed  to  elimi¬ 
nate  the  need  for  people  to 
make  decisions.  Real  time 
started  out  as  a  way  to  say 
that  the  response  of  the  ap¬ 
plication  to  a  particular 
event  had  to  both  correct 
and  timely,  with  timely  usu¬ 
ally  meaning  a  very  short 
time  constraint.  Early  real¬ 
time  applications  were 
mostly  designed  for  auto¬ 
mated  technologies  like  air¬ 
plane  navigation  systems 
and  missile-guidance  systems  or  devices 
such  as  cardiac  pacemakers. 

The  program  controlling  Uncle  Ned’s 
pacemaker  not  only  has  to  trigger  the 
correct  electrical  impulse;  it  also  has  to 
trigger  it  within  a  very  precise  rime 
frame,  or  Uncle  Ned  is  in  big  trouble. 
Likewise,  the  guidance  system  in  a  Tom¬ 
ahawk  missile  must  respond  to  devia¬ 
tions  in  the  missUe’s  trajectory  within  a 
fraction  of  a  second,  or  the  corrections 
it  makes  will  be  useless  to  spare  unin¬ 
tended  targets. 

Helping  Psople  Do  Iheir  Jobs 

Clearly,  some  things  can  be  done  more 
effectively  by  computers  than  by  people, 
and  those  tasks  were  the  first  prime  tar¬ 
gets  for  real-time  applications.  And  the 
faster  the  information  flows  through 
those  applications,  the  bener. 

But  the  IT  systems  in  place  at  most 
companies  are  there  to  help  people  do 
their  jobs,  and  people  make  better 
choices  when  they  have  access  to  con¬ 
text  and  analysis,  which  are  pretty  tough 
to  serve  up  instantly. 

The  rise  of  increasingly  more  sophis¬ 
ticated  real-time  analytic  tools  may 


help,  but  there  still  remain  the  major 
issues  of  cost,  data  quality  and  the  readi¬ 
ness  of  companies  to  make  productive 
use  of  the  analysis  (see  “Re^-Time  Data: 
Too  Much  of  a  Good  Thing?"  C^ickLink 
36917). 

Smart  technologists  like  Hicar  know 
that  their  job  isn’t  implementing  soft¬ 
ware  that  makes  decisions,  but  rather 
it's  “presenting  information  to  Human 
experts  to  make  decisions." 

And  those  humans,  expert  or  not,  also 
create  the  cultures  within  organizations 
that  will  need  to  be  changed  to  accom¬ 
modate  real-time  information  exchange. 
The  utopian  vision  of  the  nimble,  collab¬ 
orative  real-time  enterprise  udth  infor¬ 
mation  flowing  freely  and  at  incredible 
speeds  between  departments  is  inspir¬ 
ing.  But  it  ignores  the  work  that  needs  to 
be  done  to  tear  down  those  walls  and  re¬ 
solve  the  ongoing  turf  wars  in  most 
companies. 

Gartner/G2  analyst  Kraft  Bell  points 
out  that  the  real-time  enterprise  is  often 
mistaken  for  a  business  strategy,  when  it 
is  in  fact  merely  a  "competency." 

There’s  no  doubt  that  gaining  tHar 
competence  and  bavii^  high-speed 
access  to  information  can  make  a  com¬ 
pany  more  competitive,  as  long  as  it 
chooses  the  appropriate  spots  to  use 
real-time  applications.  Otherwise,  it’s 
like  buying  a  Lamborghini  to  get  your¬ 
self  to  the  local  grocery  store  and  back. 

As  the  economy  has  contracted,  com¬ 
panies  have  felt  the  need  for  more  visi¬ 
bility  into  their  supply  chains  in  order  to 
decrease  inventories,  better  track  per¬ 
formance  and  sales  opportunities,  and 
have  more  information  with  which  to 
make  decisions.  Implemented  carefully, 
real-time  applications  can  help  with  all 
of  these  business  problems. 

The  key  is  to  avoid  unrealistic  expec¬ 
tations  for  real-time  applications  and  to 
take  time  to  prepare  your  infrastructure 
or  organization  for  them.  Otherwise, 
you’re  just  making  it  easier  to  make  bad 
decisions  more  quickly.  I 


WMimanMii? 

For  man  oikinm  snd  IMa  to  out  anh^ 


right  Ups 

Companies  have  typically  provided  little 
information  about  former  employees  for 
fear  of  being  sued.  But  some  hiri^  man¬ 
agers  are  Hnding  ways  to  d^  deeper  into 
the  bacl^rounds  of  job  candidates. 
P^39 
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Facing  the  Unthinkable 

Many  companies  prepare  only  for  the  kinds  of 
crises  they’ve  encountered  in  the  past,  not  for  the 
disasters  that  are  likely  to  strike  today,  says  Ian  I. 
Mitroff,  wdio  co-wrote  a  recent  Harvard  Business 
Review  article  on  the  subject  Page  40 


Readying  for  a 
TripOffswre 

Consider  the  same  potential  conse¬ 
quences  for  ofEshore  outsourcing  as 
you  would  for  any  outsourcing  deci¬ 
sion.  warns  columnist  Bart  Perkins. 

Page  42 
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COST  PRESSURES  tOp  just 
about  every  company’s  list 
of  reasons  for  sending 
greater  amounts  of  IT  work 
oSshore.  IT  labor  rates  in 
India,  the  Mulippines  and  elsewhere  are  as  much  as 
70%  lower  than  those  in  die  U5.  As  such,  they're 
simply  too  compelling  to  ignore,  IT  executives  say. 

But  equally  compelling  is  the  potential  of  losing 
control  over  foreign  technology  woikers  and  the 
quality  of  IT  projects  based  thousands  of  miles  away. 

Allstate  Insurance  Co.,  Avon  Products  Inc  and 
Global  F.xrhange  Services  Inc  (GXS)  are  among  a 
small  group  of  U.S.-based  Fortune  500  companies 
that  have  set  up  and  staffed  their  own  IT  centers  in 
lower-cost  countries  like  India,  Ireland.  India  and 
Hungary  to  address  the  twin  issues  of  cost  and 
control 

In  this  offshore-insourcing  model  foreign  IT  woric- 
ers  aren't  contractors  but  employees  of  the  U.S.-based 
companies.  They  receive  the  same  training,  use  the 
same  software  development  tools  and  adhere  to  the 
same  business  processes  as  their  IT  counterparts  in 
the  U5.  The  big  difference  is  that  they’re  paid  a  lot 
less.  For  example,  for  every  $100  that  GXS  ^>end$  on 
an  IT  en4)loyee  in  the  US.,  it  fiends  just  $30  on  an 
enq>loyee  in  Bangalore,  India,  vdiere  h  employs  230 
IT  workers.  “Manila  b  even  less  expensive  — 
perhaps  30%  to  40%  less  than  India.”  says  Tasos 
Itelakis.  senior  vice  president  of  ^obal  technology 
at  Gaithersburg.  Md. -based  GXS. 

By  shifting  about  70%  of  GXS's  internal  IT  projects 
and  40%  of  its  n*  work  <m  atstomer-Cadi^  appli^- 
tkms  to  offshore  centers,  Tsolakb  estimates  tl«t  he 
has  saved  about  Sb  million  a  year  for  the  past  three 
years.  At  the  same  time,  be  says,  GXS  has  been  able  to 
ensure  quality  and  meet  software  deUvery  deadlines, 
because  the  o6Eshore  efiq>loyees  and  prefects  are 
managed  using  the  same  Six  Sigma  processes  that  the 
company,  a  former  business  unit  of  General  Etectric 
COn  ^lies  in  the  US.  Among  large  U5.  companies, 
GE  U  one  of  the  best-known  proponents  of  Six  ^igma 
quality-control  processes. 

CiasBteKfAcnsIkntiMfl^ 

"Clearly,  the  labor  rate  b  the  big  driver  [for  hiring  IT 
employees  abroad],  but  you  need  to  treat  them  like 
your  regular  [US-based]  teams.  Every  development 
tool  and  testing  tool  I  have  here,  my  resources  in 
Bangalore  have.  It’s  critical  that  tb^  feel  a  pan  of 
your  team.  They're  fust-class  eitiyewf  like  everyone 
else  b.”  Tsolakb  says,  adding.  That’s  bow  you  can 
really  create  synergies  and  t^Kimize  resources.” 

The  conq>a^s  650  ofbbore  IT  employees  wi^  at 
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AUstate-owned  facilities 
io  Belfast  and  London¬ 
derry  in  Northern  Ireland. 
The  centers  in  those  cities 
were  set  up  in  19S>8  and 
1999.  respectively,  as  a  re¬ 
sult  of  the  IT  lat^r  short¬ 
age  in  the  US.  caused 
la^ly  by  a  crush  of  Y2k 
work  and  the  then-thriv¬ 
ing  dot-com  economy. 

“We  had  an  additional 
issue  m  that  we  had  a 
large  number  of  contrac¬ 
tors  working  for  us  here 
in  Chicago  and  they  were 
extremely  expensive. 

With  the  labor  crtmch  and 
Y2k.  we  had  a  ratio  of  50% 
contractors  who  were 
constantly  leaving  for 
higher-paying  jobs,”  re¬ 
calls  Mike  Scardino.  assis¬ 
tant  vice  president  for 
finance  at  Allstate. 

Cost  savings  was  one  of 
the  big  advantages  of 
hiring  offshore  employ¬ 
ees,  and  it  remains  so. 
Allstate  spends  about  75% 
less  on  contractors  now  than  it  did  prior  to  setting  up 
in  Northern  Ireland,  Scardino  says. 

The  company  is  also  retaining  critical  business 
knowledge  and  intellectual  capital  that  used  to  walk 
out  the  door  with  departing  IT  contractors.  “In  the 
insurance  business,  there’s  a  tremendous  amount  of 
business  knowledge  that  goes  with  programmers. 

You  can’t  just  bring  somebody  in  who  knows  Cobol” 
Scardino  says.  “Now,  the  business  knowledge  stays 
with  the  employees.  That’s  a  huge  benefit  and  a  big 
driver  in  terms  of  our  ability  to  maintain  our  eri^ting 
applications  and  to  develop  new  ones,  because  they 
know  what  they’re  talking  about.” 

More  Thin  Maintenance  Worii 

Both  GXS  and  Allstate  launched  their  off^ore  oper- 
atioias  with  the  intent  of  exporting  primarily  soft¬ 
ware  maintenance  woik  to  foreign  IT  employees.  But 
that  soon  changed.  GXS's  IT  employees  in  India,  for 
example,  itow  woric  mainly  on  Web-based  transaction 
man^ment  services  and  other  software  tools  that 
GXS  offers  to  its  60,000  retail  custonters.  In  Banga¬ 
lore.  staffers  “don’t  want  to  do  just  support  woik,” 
says  Tsolakis.  “You  have  to  offer  a  continuous 
balance  of  work.” 

Scardino  says  Allstate’s  Irish  employees  work  on 
everything  from  software  program  mamtenance  to 
application  development  projects.  “We  started  with 
tte  idea  that  it  would  priinarily  be  maintenance,  but 
with  the  skills  and  abilities  of  the  workforce  we 
hired,  we're  able  to  do  all  different  types  of  project” 
be  says.  “As  we  speak.  Pm  expanding  beyond  IT  to 
call  centers.” 

Keeping  U.S.-based  IT  workers  informed  of  the 
company’s  plans  for  distributing  various  IT  projects 
is  a  critical  component  of  managing  onshore/off¬ 
shore  IT  groups.  "The  U.S.  teams  ask,  'What’s  the  fu- 
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maintenance,  new  applicatkm  development  and 
call  center  operations. 


Global  Enhifigi  Servteai  bie. 

Headquarters:  Gaithersburg.  Md. 

■  230  (T  employees  in  Bangalore.  India.  Additional 
IT  employee  teams  in  Manila  and  Hong  Kortg. 

■  Offshore  IT  project  include  development  of 
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ture  for  me,  and  why  should  1  stay  if  you’re  movii^ 
work  of&faore?'  ”  says  Tsolakis.  ‘Hfou  need  to  gjve  an 
overall  direction  and  plan.  It's  important  to  address 
this  upfront.  If  you  don't  do  that,  you  end  up  losing 
some  key  resources  that  you  don’t  want  to  lose." 

Scardino  and  Tsolakis  also  agree  that  on-site  man¬ 
agement.  preferably  by  a  local  national,  works  best  at 
ofBshore  regional  IT  centers.  GXS’s  Bangalore  facility 
is  managed  by  an  Indian  woman  who  reports  directly 
to  Tsolakis.  “We  have  a  whole  infrastructure,  includ¬ 
ing  an  HR  person  in  Bangalore  helping  with  recruit¬ 
ing  and  a  fmance  person.  This  is  b^ause  it’s  impor¬ 
tant  to  mesh  the  local  culture  with  the  U.S.  culture,” 
be  says. 

For  IT  executives  considering  setting  up  and 
staffing  an  offshore  TT  center,  Scardino  advises  that 
they  first  make  “sure  the  economics  of  the  local  envi¬ 
ronment  are  sustainable,  that  there’s  talent,  that 
there’s  a  quality  workforce  and  that  those  things 
aren’t  going  to  change.”  For  all  of  these  reasons, 
North^  Ireland  was  an  ideal  location  for  Allstate, 
Scardino  says. 

“Part  of  the  success  of  being  in  Northern  Ireland  is 
also  because  people  [in  the  U5.]  are  willing  and  able 
to  go  there.  Routinely,  we  have  people  on  the  ground, 
and  the  people  in  Northern  Ireland  are  over  here,”  be 
says.  “There  are  travel  costs,  but  relative  to  the  eco¬ 
nomics,  on  a  cost-per-hour  basis,  the  travel  budget  is 
less  than  $1  an  hour  [per  employee]  when  you  spread 
it  across  all  of  our  programs.” 

That’s  one  more  item  IT  executives  must  add  to 
their  list  of  outsourcing  considerations.  I 
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NFORMATION  TtCHNOLOGY 
managers  and  CIOs  say  tha( 
more  than  ever,  fear  of  Uti* 
gation  is  preventing  them 
from  giving  out  much,  if  any. 
detail  on  former  employees 
who  require  references  in  order 
to  secure  new  iobs.  For  several 
years  now.  companies  that  are 
fearful  of  lawsuits  and  that  have 
official  corporate  policies  in 
place  have  typically  provided  as 
little  information  as  possible. 

Recruiters  aitd  IT  executives 
say  it's  difficult  to  get  more  than 
the  start  date,  the  end  date  and 
possibly  the  employee's  title 
through  official  corporate  chan¬ 
nels.  ^me  employers  have  even 
automated  the  reference  proc¬ 
ess,  says  Andy  Baker,  human  re¬ 
sources  manager  for  IT  recruit¬ 
ing  at  Allstate  Corp.  in  North¬ 
brook.  HL  "Certain  companies 
make  us  dial  a  q>ecifU:  phone  number  and  key  in  the 
person’s  name  or  code  number  to  gain  the  dates  of 
employment  and  nothing  else.”  he  says. 

Corporate  policy  is  one  thing,  but  harsh  reality  is 
another.  Hiring  managers  today  have  pressing  con¬ 
cerns  —  such  as  system  security  and  the  cost  of  re¬ 
placing  less-than-stellar  performers  —  that  malt<»  it 
ttecessary  for  them  to  dig  deeper  for  more  informa¬ 
tion  about  prospective  IT  talent. 

Increasingly.  IT  executives  aiul  corporate  HR  de¬ 
partments  are  turning  to  ahernate.  unofficial  chan¬ 
nels  to  screen  the  hundreds  of  thousands  of  IT  work¬ 
ers  who  have  been  laid  off  nationwide  and  are  avail¬ 
able  for  hire.  Some  use  the  old.  informal  insider’s 
i>etwork.  chattirrg  with  folks  at  the  job  candidate's 
last  place  of  employment  to  find  out  more  about 
what  he  was  really  like  as  an  employee. 

Tasos  Tsolakis,  vice  president  of  global  technology 
operations  at  Global  Exchange  Services  Inc  (GXS)  in 
Gaithersburg.  Md.,  says  that  when  he  needs  to  get  the 
lowdown  on  a  person  he’s  considering  for  a  job.  be 
caUs  someone  at  the  company  where  that  person 
works.  It’s  pretty  common  ^  local  IT  managers  to 
know  other  local  IT  pet^Ie.”  Tsolakis  says. 

Other  hiring  managers  use  a  combination  of  meth¬ 
ods,  such  as  coiwlucting  several  rounds  of  in-depth 
technical  interviews  and  testing  candidates  for  their 
technical  skills. 


"Delta  Technology  uses  a  multiple-hurdle  hiring 
approach,  including  third-party  background  checks 
as  well  as  traditional  and  skill-based  interviews.”  says 
Curtis  Rotfo.  CIO  at  Delta  Air  Lines  Itk.  in  Atlanu. 
"This  allows  us  to  view  candidates  feom  a  broad  per¬ 
spective,  ensuring  they  possess  the  knowledge,  skills 
and  abilities  required  for  the  job.” 

Allstate  receives  an  average  of 600  electronic  r^ 
suin6$  a  day.  or  up  to  2S.OOO  per  month,  and  stores 
them  in  an  InteniaL  Web-ba^  database.  The  compa¬ 
ny  uses  it  to  conduct  searches  using  speciflc  criteria, 
such  as  skills,  programming  langua^  and  platform 
experience,  to  collect  a  manageable  pool  of  job  candi¬ 
dates.  Human  resources  then 
e-mails  to  each  carxiidate  a  cxis- 
tomized  employment  application 
that’s  designed  to  gather  general 
information  and  ^ecific  experi- 
MKe-related  details.  "Based  on  the 
response  to  the  e-mailed  form,  we 
hone  down  our  list  to  a  few  target¬ 
ed  candidates,”  Baker  says. 

Tbe  next  step  is  a  phone  inter¬ 
view  to  gather  even  more  details, 
such  as  a  carulidate’s  adaptability, 
teamwork  capabilities  and  flexi¬ 
bility.  When  the  number  of  candi¬ 
dates  b  down  to  two  or  three, 

Baker  conducts  on-site  interviews 
and  collects  information  that  be 
then  gives  to  a  third-party  back¬ 
ground-checking  firm  for  verification  of  educational 
information  and  criminal  history.  "We  also  always 
ask  permission  from  job  seekers  to  check  references 
in  our  online  application,”  be  says. 

OutsounxYlMiSGreening 

Third-party  reference-checking  and  online  database 
companies  are  doing  brisk  business  these  days,  col¬ 
lecting  persona]  information  and  delivering  h  for  a 
fee  to  corporate  employers.  Industry  analysts  say 
pre-employineDt  screening,  made  easier  and  cheaper 
via  the  W^  has  been  on  the  rise  for  the  past  several 
years.  Companies  such  as  CboicePDinc  Inc.  in  Al¬ 
pharetta.  Ga.,  and  Tbe  First  American  Corp.  in  Santa 
Ana,  Calif,  can  verily  identities  and  check  detaib 
sudi  as  criminal  records,  automobile  driving  hbto- 
ries.  former  addresses,  education  and  previous  em¬ 
ployment  records.  A  December  2002  survey  con¬ 
ducted  by  the  Society  for  Human  Resource  Manage¬ 
ment  in  Alexandria,  Va.,  found  that  more  than  one 


TOHTLPS 

HwtocopesilienconiiianeswilWwld 


quarter  of  IT  maiugers  agree  that  there  has  been 
greater  screening  of  job  candidates  in  the  past  year. 

Dara  Herbst,  president  of  Certified  Reference 
Checking  Co.  in  St  Louis,  says  the  bigg^  challenge 
for  companies  hiring  IT  workers  b  gauging  the  accu¬ 
racy  of  each  job  candidate's  technical  In  some 
cases,  it’s  difficult  to  gain  verifubie  references  — 
especially  from  dot-com  companies  that  have  gone 
out  of  business.  Herbst  and  her  father,  Edward  C 
Andler,  with  David  Sears,  wrote  the  second  edition 
of  T7»e  Complete  Re/erence  Checfciftg  Handbo(^:  The 
Proven  (and  Legal  Way)  to  Prevent  Hiring  Mistakes 
(Amacom  Books.  2003). 

"Ask  for  verifiable  information 
from  the  job  candidate,  such  as  a 
date  of  birth  or  Social  Securit>* 
Dumber*  says  Herbst  Aithou^ 
it’s  illegal  to  force  job  applicants 
to  provide  such  information  on 
job  application  forms,  it’s  vital  to 
reference-checking,  she  says. 

Red  flags  should  pop  up  if  a  job 
candidate  b  unwiUfog  or  unable 
to  supply  verifubie  information, 
such  as  a  date  of  birth  and  em¬ 
ployer  references,  Herbst  says. 
While  it's  iliegal  to  request  date  of 
birth  on  employment  applica¬ 
tions.  thb  information  b  consid¬ 
ered  vital  to  verifying  education 
and  other  detaUs  on  a  job  candi¬ 
date's  r6suro^.  Candidates  may  balk  at  fust,  but 
Herbst  says  most  understand  why  thb  information 
must  be  collected. 

Several  people  interviewed  for  thb  story  *aiH  it's 
not  wise  to  ju^  tbe  large  pool  of  IT  job  seekers  as 
among  tbe  bottom  10%  of  performers,  even  though 
many  companies  have  taken  opportunities  to  cut 
poor  performers.  "Before,  (GXS]  had  a  policy  that 
you  (fired  or  laid  off]  10%  of  your  bottom  talent.  Tbe 
reality  b  that  in  the  past  two  years,  we’ve  moved  a  lot 
of  top  players,  toa”  says  Tsolakis.  Most  job  cuts  have 
occurred  as  GXS  has  moved  an  increasing  amount  of 
IT  work  offshore,  he  says. 

CIOs  and  analysts  say  that  despite  corporate  poli¬ 
cies,  they  typically  want  to  help  job  seekers  who 
have  earned  their  help.  "If  someone  has  performed 
well,  possesses  good  skills  and  works  haid.  I'm  al¬ 
ways  udlling  to  serve  as  a  personal  reference."  says 
Steve  Schuckenbrock,  former  CIO  at  PepsiCo  Ixtc 
and  Frito-Lay  Inc.  and  now  chief  operatioas  officer  at 
The  Fdd  Group,  an  IT  consulting  firm  in  Dallas. 

When  Schuckenbrock  b  doing  tbe  hiring,  he 
job  candidates  for  permission  to  ^>eak  with  someone 
at  their  current  or  former  employers.  "If  they  can't 
sui^ly  that  information,  t  know  there’s  a  problem.” 

But  in  tbe  final  arulysb.  there’s  no  doubt  that  a 
catcfa-22  lurks  in  today’s  hiring  process.  Job  candi¬ 
dates  need  to  supply  tbe  names  of  former  employers, 
yet  those  employers  most  likely  can’t  give  a  refer¬ 
ence  because  of  company  policy.  So  if  you’re  a  hiring 
manager,  be  tenacious  a^  use  what  you  can  ~  third- 
party  screeners,  multiple  interviews  and  thorough 
skiUs  testing  ~  to  employ  tbe  best  talent.  I 


DePompo  b  a  writer  and  erhtor  in  Germantown.  Md. 
Contoct  her  at  bdepompa(&)ooIcom. 
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NFORMATION  TECHNOLOGV 
managers  and  CIOs  say  that 
more  than  e\’er.  fear  of  liti¬ 
gation  is  preventing  them 
from  giving  out  much,  if  any, 
detail  on  former  employees 
who  require  references  in  order 
to  secure  new  jobs.  For  several 
years  now,  companies  that  are 
fearful  of  lawsuits  and  that  have 
official  corporate  policies  in 
place  have  typically  provided  as 
little  information  as  possible. 

Recruiters  and  IT  executives 
say  it’s  difficult  to  get  more  than 
the  start  date,  the  end  date  and 
possibly  the  employee's  title 
through  official  corporate  chan¬ 
nels.  Some  employers  have  even 
automated  the  reference  proc¬ 
ess.  says  Andy  Baker,  human  re¬ 
sources  manager  for  IT  recruit¬ 
ing  at  Allstate  Corp.  in  North¬ 
brook.  III.  “Certain  companies 
make  us  dial  a  specific  phone  number  and  key  in  the 
person's  name  or  code  number  to  gain  the  dates  of 
employment  and  nothing  else."  he  says. 

Corporate  policy  is  one  thing,  but  harsh  reality  is 
another.  Hiring  managers  today  have  pressing  con¬ 
cerns  —  such  as  system  security  and  the  cost  of  re¬ 
placing  less-than-stellar  performers  —  that  make  it 
necessary  for  them  to  dig  deeper  for  more  informa¬ 
tion  about  prospective  IT  talent. 

Increasii^ty.  IT  executives  and  corporate  HR  de¬ 
partments  are  turning  to  alternate,  unofficial  chan¬ 
nels  to  screen  the  hundreds  of  thousands  of  IT  work¬ 
ers  who  have  been  laid  off  nationwide  and  are  avail¬ 
able  for  hire.  Some  use  the  old,  informal  insider's 
network,  chatting  with  folks  at  the  job  candidate's 
last  place  of  employment  to  fmd  out  more  about 
what  he  was  really  like  as  an  employee. 

Tasos  Tsoiakis.  vice  president  of  global  technology 
operations  at  Global  Exchange  Sers'ices  Inc.  <GXS)  in 
Gaithersburg,  Md..  says  that  when  he  needs  to  get  the 
lowdown  on  a  person  he's  considering  for  a  job.  he 
calls  someone  at  the  company  where  that  person 
works.  “It's  pretty  common  for  local  IT  managers  to 
know  other  local  IT  people,"  Tsoiakis  says. 

Other  hiring  managers  use  a  combination  of  meth¬ 
ods,  such  as  conducting  several  rounds  of  in-depth 
technical  interviews  and  testing  candidates  for  their 
technical  skills. 


"Delta  Technology  uses  a  multipie-hurdle  hiring 
approach,  including  third-party  background  checks 
as  well  as  traditional  and  skill-based  intcri'iews."  says 
Cunis  Robb.  CIO  at  Delta  .^ir  Lines  Inc.  in  Atlanta. 
“This  allows  us  to  view  candidates  fri»m  a  broad  per¬ 
spective.  ensuring  they  possess  the  knowledge,  skills 
and  abilities  required  for  the  job." 

Allstate  receives  an  average  of  600  electronic  re¬ 
sumes  a  day,  or  up  to  25.000  per  month,  and  stores 
them  in  an  interna).  Web-based  database.  The  compa¬ 
ny  uses  it  to  conduct  searches  using  specific  criteria, 
such  as  skills,  programming  languages  and  platform 
experience,  to  collect  a  manageable  pool  of  job  candi¬ 
dates.  Human  resources  then 
c-mails  to  each  candidate  a  cus¬ 
tomized  employment  application 
that’s  designed  to  gather  general 
information  and  specific  experi¬ 
ence-related  details.  “Based  on  the 
response  to  the  e-mailed  form,  we 
hone  douT)  our  list  to  a  few  target¬ 
ed  candidates,"  Baker  says. 

The  next  step  is  a  phone  inter¬ 
view  to  gather  even  more  details, 
such  as  a  candidate's  adaptability, 
teamwork  capabilities  and  flexi¬ 
bility.  When  the  number  of  candi¬ 
dates  is  down  to  two  or  three. 

Baker  conducts  on-site  interviews 
and  collects  information  that  he 
then  gives  to  a  third-party  back¬ 
ground-chocking  firm  for  verification  of  educational 
information  and  criminal  history.  “We  also  always 
ask  permission  from  job  seekers  to  check  references 
in  our  online  application."  he  says. 

Outsource  Your  Screening 

Third-party  reference-checking  and  online  databa-sc 
companies  are  doing  brisk  business  these  days,  col¬ 
lecting  personal  information  and  delivering  it  fora 
fee  to  corporate  employers.  Industry  analysts  say' 
pre-employmient  screening,  made  easier  and  cheaper 
via  the  Web,  has  been  on  the  rise  for  the  past  several 
years.  Companies  such  as  ChoicePoint  Inc.  in  Al¬ 
pharetta,  Ga..  and  The  First  American  Corp.  in  Santa 
Ana,  Calif,  can  verify  identities  and  check  details 
such  as  criminal  records,  automobile  driving  histo¬ 
ries.  former  addresses,  education  and  previous  em¬ 
ployment  records.  A  December  2002  survey  con¬ 
ducted  by  the  Society  for  Human  Resource  Manage¬ 
ment  in  Alexandria.  Va.,  found  that  more  than  one 
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quarter  uf  IT  managers  agree  that  there  has  been 
greater  screening  of  job  candidates  in  the  past  year 

Data  Herbst,  president  of  Certified  Reference 
Checking  Co.  in  St.  Louis.  s.iys  the  biggest  challenge 
for  companies  hiring  IT  workers  is  gauging  the  accu¬ 
racy  of  each  job  candidate's  technical  skills.  In  some 
cases,  it's  difficult  to  gain  %erifiablc  references  — 
especully  from  dot-com  companies  that  have  gone 
out  of  business.  Herbst  and  her  father.  Fdward 
.Andler.  with  David  Sears,  wrote  the  sectmd  edition 
of  The  Complete  Reference  (.htvfcing  Hondhook:  The 
Proven  (and  Legal  Way;  to  Pre\‘ent  Hinng  .Mtstukes 
(Amacom  Books,  200.^). 

“Ask  for  vcrinabic  information 
from  the  job  candidate,  such  as  a 
dale  of  birth  or  Siviai  Security 
number."  say  s  Herbst.  AUht»ugh 
it's  illegal  in  force  job  applicants 
to  prm'idc  such  informaikm  on 
job  application  forms,  it's  vital  to 
reference-checking-  she  says. 

Red  flags  should  pop  up  if  a  job 
candidate  is  unwilling  or  unable 
u»  supply  verifiable  information, 
such  as  a  date  of  binh  and  em¬ 
ployer  references.  Herbst  says. 
While  it's  illegal  m  request  date  ol 
birth  on  employment  applica¬ 
tions.  this  infi>rmation  is  ctinsid- 
cred  vital  to  verifyu^  education 
and  other  details  on  a  jisb  candi¬ 
date's  rwumc.  Candidates  may  balk  at  first,  but 
Herbst  says  mt>st  understand  why  this  information 
must  he  collecied. 

Scx'cral  people  interviewed  for  this  story  said  it’s 
mH  wise  to  judge  the  large  pocil  of  IT  job  seekers  as 
among  the  bottom  I0"o  of  performers,  even  though 
many  companies  have  taken  opportunities  to  cut 
poor  performers.  “Before.  (GXS I  had  a  policy  that 
you  (fired  or  laid  off  ncb'x.  of  your  bottom  talent  The 
reality  is  that  in  the  past  tw<i  yx*ars.  we've  moved  a  lot 
of  lop  players,  Ich»."  says  Tsoiakis.  Most  job  cuts  haw 
iiccurred  as  GXS  has  mo\’ed  an  increasing  amount  of 
IT  work  offshore,  he  says. 

CIOs  and  analysts  say  that  despite  corporate  poli¬ 
cies.  they  typically  want  to  help  job  seekers  who 
have  earned  their  help.  “If  somei>ne  has  performed 
well,  possesses  goi>d  skills  and  works  hard.  I’m  al¬ 
ways  u-illing  to  sene  as  a  personal  reference,”  says 
Steve  Schuckcnbrock.  former  CIO  at  PepsiCo  Inc. 
and  Frilo-Lay  Inc.  and  now  chief  operations  officer  at 
The  Feld  Group,  an  IT  consulting  firm  in  Dallas. 

When  Schuckcnbrock  is  doing  the  hiring,  he  asks 
job  candidates  for  permission  to  speak  with  Muneone 
at  their  current  or  former  employers.  “If  they  can't 
supply  that  information,  1  know  there’s  a  problem.” 

But  in  the  final  analysis,  there's  no  doubt  that  a 
catch-22  lurks  in  today's  hiring  pnKess.  lob  candi¬ 
dates  need  to  supply  the  names  of  former  employers, 
yet  those  employers  most  likely  can’t  give  a  refer¬ 
ence  because  of  company  polic\  .  So  if  you're  a  hiring 
manager,  be  tenacious  and  use  what  >'ou  can  —  third- 
party  screeners.  multiple  inter\'ieu's  and  thorough 
skills  testing  —  to  empkt>-  the  hc-st  talent  I 


I  DePompa  is  a  writer  and  editor  in  Germanfown.  Md. 
Contact  her  at  bdepompa  .aaol.com. 
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Facing  the 
UnthmkaHe 

It’s  time  for  corporate  crisis 
management  to  grow  up 


If  you  tMtik  you’re  pre¬ 
pared  to  handle  crises 
in  today’s  business  envi¬ 
ronment,  you  may  be 
kidding  yourself.  So  says 
wimmifr.  prefer 
ofbusirtesspt^icyatthe 
Marshall  School  of  Busi¬ 
ness  at  the  l/niversify  of 
Southern  CaHfbmia  and 
author  of  the  forthcom- 
mg  book  Crists  Leadership:  Plaimins 
for  the  Undunkable  (John  WUey  & 

Sons,  2003).  Mttroff'hasjoutui  through 
surveys  and  interviews  that  many  For¬ 
tune  500  companies  prepare  only  for  the 
kindsof  crises  they've  encountered  in  the 
past,  not  /or  the  disasters  that  are  likely 
to  strOce  today.  He  and  co-author  Murat 
C  Alpa^an  address  the  im^kations  of 
being  unprepared  in  rhts  monrii's  Har¬ 
vard  Business  Review.  He  talked  with 
JCothieen  Melymuka  about  the  need  for 
companies  and  IT  departments  to  face 
the  reoiiry  qT  new  r/irears. 

BfoylttadWawiiqifpofilacrirismanaQa- 
ONiil  no  hnfvgood  enoui^?  It's  too  limit¬ 
ed.  Corporations  —  or  IT  departments 
—  tend  to  focus  on  crises  they  know 
about  Tlut  doesn't  serve  them  well 
It's  not  the  crisis  you  know  that  will 
kfl]  you;  it's  the  one  you  don’t  know. 
There  are  all  sorts  of  crises:  economic, 
reputational,  human  resources.  Organi¬ 
zations  are  susceptible  to  a  wider  array 
of  crises  than  30  years  ago,  and  any 
one  can  be  the  cause  or  the  effect  of 
any  other.  Something  in  IT  could  trig¬ 
ger  something  elsewhere,  or  vice  versa. 
Crises  don't  give  a  damn  about  the  si¬ 
los  and  walls  we  set  up. 

afeify  foimd  Ihtf  toiw  eofiipanlee  ware 
>ri»ed  lor  crtiia  arid  oiwra  ware  Mcap- 
ta  tfim.  Mwl  win  ItM  mato  Mer' 
aena  batwaan  tfia  fwa  td  oanparrias? 

Proactive  orgaoizacicHis  prepare  for 
more  crises  than  they  have  already  ex¬ 


perienced.  In  reactive  companies,  first 
it  has  to  hit  them,  then  they  prepare. 

How  a  proaedve  approach  play  out  in 
an  IT  group  wMMn  audi  a  oempaiiy?  Tech¬ 
nical  people  tend  to  think  in  nice,  neat 
boxes.  In  a  company  that  is  proactive, 
when  you  look  at  how  crises  happen, 
you  realize  that  technology  is  operated 
by  human  beings.  You  lo(^  at  hw  peo¬ 
ple  make  errors,  how  the  best-laid  se¬ 
curity  plans  can  be  breached  by  error 
or  omission  or  commission.  You  dia¬ 
logue  with  other  parts  of  the  company 
to  see  how  IT  connects,  how  someone 
could  get  in  even  with  best  of  security. 
When  you  have  an  internal  crisis  team, 
you  use  a  mix  of  people  —  not  just  IT 
people  in  isolation.  A  mixed  group 
comes  up  with  richer  scenarios.  You 


don't  start  with  the  assumption  that  it 
can't  happen.  You  say.  This  has  hap¬ 
pened,"  and  work  backward  to  find  out 
how  it  cotUd  happen. 

Vou  lufTMl  tkd  being  praparad  yMk  ao(M 
auniriringMlanda,aaUafrombat(arr»- 
aponst.  What  art  aoma  of  the  payoffii?  We 

found  that  over  three  years,  on  aver¬ 
age.  proactive  companies  had  22  major 
crises,  and  reactive  had  33.  The  aver¬ 
age  return  on  assets  for  proactive  com¬ 
panies  was  6%:  for  reactive,  it  was  2%. 
Whether  there's  a  cause  and  effect  is 
unclear,  but  something  is  going  on  in 
proactive  a>mpanies.  They  have  differ¬ 
ent  ethical  values.  They  tend  to  follow 
“Do  tK>  harm  to  any  single  person."  Re¬ 
active  companies  tend  to  do  the  right 
thing  only  if  it’s  cost-effective.  They're 
geared  to  the  bottom  line,  but  ironi^- 
ly.  the  proactives  [are]  more  profitable. 

1M  nw  ibcwt  some  of  ttw  typ«  of  catamWas 
lhai  mlgM  atrlB  in  ff  anvbwniant  Natur¬ 
al  disasters  —  earthquakes,  floods  — 
could  affect  anybody,  and  most  compa¬ 
nies  think  about  that.  Second  are  nor¬ 
mal  accidents  that  come  about  ufoen 
complexity  builds  in  the  potential  for 
an  accident.  In  FT,  complexity  can  lead 
to  a  glitch  like  Y2k.  Hiat’s  a  normal 
crisis  —  an  accident  that’s  almost  in¬ 
evitable.  but  not  intentional  Then  you 
have  abnormal  accidents:  Someone  de¬ 
liberately  causing  the  accident.  9/M 
was  abnormal.  Enron  was  an  abnormal 
economic  crisis  because  it  m^s  caused 


The  Wheel  of  Crisis 


TMKMha^plMM»W»eii« 


PIfVSICM. 


i/mmam 


mnxnoML 


by  shenanigans.  In  IT.  abnormal  is 
where  I  intentionally  go  in  as  a  terror¬ 
ist  and  infiltrate  or  put  in  a  vims. 

Oo«  IT  have  a  rela  in  warWig  criMi?  There 
are  always  early  warning  signals.  IT 
can  be  part  of  a  crisb  signal  detection 
center,  to  collect  and  filter  information 
and  send  it  to  a  central  locale  to  con¬ 
nect  the  dots.  In  the  Ford/Firestone 
crisis.  Ford  set  up  a  unit  to  look  for  evi¬ 
dence  of  tire  problems  worldwide.  But 
why  didn't  it  have  a  permanent  unit 
before  that?  IT  could  cake  the  lead  to 
set  up  systems  to  look  for  eariy  warn¬ 
ings.  Hie  role  overlaps  with  strategic 
planning  —  again,  tearing  down  silos. 

WviitovilopiJav«fylnlifi»tlngtDOite 
ha^  inaiiagMs  fM  ponMhr  of  itaor* 

mol  cflooo.  H»e  wheel  of  crisis  [see  illus¬ 
tration]  shakes  up  thinking  with  the 
idea  of  randomness.  You  spin  it,  and  it 
lands  on  one  category  of  crisis.  Spin  it 
again,  and  it  lands  on  another.  Then 
you  have  to  come  up  with  a  scenario: 

If  this  happens,  what  do  we  do?  And  if 
both  h^ipea  what’s  the  connection? 
How  could  one  set  off  anotfa^?  It’s  de¬ 
signed  to  force  people  out  of  tradition¬ 
al  molds  of  preparing  for  the  things 
they  know  how  to  prepare  for.  You  have 
to  broaden  it  and  connect  the  dots. 

Vbu  alao  Mpgart  uring  “bilBmil  wsisafna." 
Whtf  wouM  they  do  bi  n?  IT  people 
would  concoct  a  scenario  that  would 
do  the  most  damage  and  take  the 
longest  time  to  find  out  They  migbc 
also  look  at  bow  someone  with  a  high- 
school  education  vs,  a  ^lD.  could  sab¬ 
otage  you.  Hien.  what  would  you  do  to 
blunt  it?  How  could  you  know  this  is 
beginning  to  happen?  What  is  in  your 
organization,  culture,  reward-aod-pun- 
ishment  system  that  would  maJw  some¬ 
one  di^nmtled  enough  to  do  this? 

Criib  managimMit  to  not  a  high  priority  for 
imny  coapantoo,  wpiriaHy  when  budpots 
an  strafnad.  Why  riwidd  companias  afMnd 
now  to  thwart  potantiil  thnato?  The  best 
argument  is  the  cost  of  an  Enron  or 
Ford/Firestone.  It  costs  S2  million  a 
year  to  start  [a  crisis  management  ef¬ 
fort]  in  a  Fortune  500  company.  That’s  a 
drop  in  the  bucket,  and  If  you  don't  do 
it,  you’re  betting  the  whole  company.  A 
crisis  is  virtually  guaranteed  to  happea 
The  only  a  question  is  when  and  bow.  I 
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Ar  its  best,  the  federal 
Heoitb  /nsurance  Porta¬ 
bility  and  Accountabil¬ 
ity  Act  (WPAA)  gives 
health  core  payers  a 
strategic  plan  for  mak¬ 
ing  much-needed  im¬ 
provements  to  adminis¬ 
trative  and  clinical 
management  systems. 
HIPAA  regulations  protect  the  disclo¬ 
sure  of  all  patimt  l^alth  a^rmatioru 
the  privacy  compliance  and  code  trans¬ 
action  testing  deadlines  went  into 
effect  April  14  and  J6,  respectively. 

At  its  worst  mPAA  takes  a  big  chunh 
from  hospitals’ IT  budgets  and  those  of 
healdt  care  providers  that  are  trying  to 
stay  q/loat  as  costs  continue  to  soar. 

At  Blue  Cross  and  Blue  Shield  (BCBS) 
of  Minnesota,  the  emphasis  is  on  creat¬ 
ing  business  value /rom  all  the  ^fbrts 
and  costs  of  bringing  IT  into  con^iance 
with  HIPAA.  In  a  nutshell,  HIPAA  re¬ 
quires  systems  and  software  to  meet 
certain  transaction  and  code-set  stan¬ 
dards  and  .^NTnats  for  electronically 
transferred  patient  biilhtg  and  insurance 
information.  CIO  John  Otnim  is  ieading 
an  IT  staff  of 1,500  in  o  massive  mod¬ 
ernization  iff  IT  systems  to  improve  ser¬ 
vices  to  coraumers  and  health  care 
providers.  He  recentiy  spoke  with  Com- 
puterworld's  Jean  Con^vio  about  using 
HIPAA  requirements  as  an  opportunity 
to  gain  a  business  advantage. 

Ara  you  ovortkiulng  yow  tidsting 
ptnc  whig  ^wlowo  tirchiriwiy  to  moot 
HtMAcooiplanco?  There's  the  element 
of  compliance.  To  me.  HIPAA  is 
for  the  health  care  industry.  It’s  costing 
80%  of  what  my  Y2k  (efiorts)  did.  But 
with  Y2k.  we  didn't  have  any  opportu¬ 


nity  to  create  value.  With  HIPAA.  we 
have  the  oppojtxuiiry  to  improve  the 
system  to  meet  compliance  and  mod¬ 
ernize  core  systems. 

Whd  an  tho  coro  aystoms  iffoetad  by 
HMA  comphaoM?  The  clearinghouse  is 
the  hub  that  processes  the  claims  by 
receiving  and  routing  them  further 
into  my  operations  or  out  to  other  pay¬ 
ers.  Once  the  claim  is  my  claim,  it  goes 
through  prejudication.  That’s  v^ere 
you  make  sure  it  has  everything,  like 
provider  ID  information,  so  you  can 
accept  it  It  then  moves  to  [tite]  claims- 
payment  side  of  our  business. 

By  law.  if  you  do  not  have  a  clearing¬ 
house.  you  cannot  receive  a  claim 
that’s  not  HIPAA-compliant.  [because 
you  do  not  have  a  iway  to  reformat  it  so 
it  meets  the  requirements].  The  clear¬ 
inghouse  can  receive  a  claim  in  any 
format  [and]  put  it  in  HIPAA  format, 
which  is  based  on  the  ASC  X12  stan¬ 
dard.  and  then  give  it  to  my  prejudica¬ 
tion  system. 


One  health  care  CIO  views  HIPAA 
as  an  opportunity  to  gain  business 
value.  %  Jean  Consihio 

Beyond 
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Conpliance 


Whit  happm  if  you  get  a  daim  that's 
mtHM-cangiiant?  The  payer  can’t 
receive  any  claim  that’s  not  HIPAA- 
compliant  If  the  health  care  provider 
sends  the  claim  to  any  clearinghouse 
first  we  can  pay  it 

SoupgradngyewdaaringhouMltadrata- 
gic  banaM  far  both  you  and  haaMi  care 
provkfare?  Yes.  I'm  not  rejecting  claims 
The  pan  that  will  help  my  provider 
save  money  is  that  instead  of  sendii^ 
the  claim  to  another  clearic^ouse.  the 
provider  can  send  it  to  me.  I  end  up 
creating  stronger  relationships  with 
providers. 

And  Vfhat  are  tfw  ood  banafhs  for  you? 

Let's  say  I  stan  improvii^  my  edits  in 
prejudication.  If  I  have  my  stronger 
edits  at  the  front  rather  the  back 
[of  that  system),  the  claims  go  through 
with  less  cost  because  there  are  fewer 
exceptions  or  errors. 

How  has  Ml  affadad  yoir  IT  staff  and  hafa 

daak?  Call  roe  next  year.  I’m  hoping 
well  have  less  people  and  that  HIPAA 
will  reduce  costs  for  us  because  we'll 
have  fewer  exceptkms  and  more  pro¬ 
cedures  that  are  standardized. 

¥m  Mad  an  adanaion  far  Ihs  Standard 
Trurtiiin  and  Coda  Safa.  Deal  Ml  aflad 
ym  HMA  efaaringhouM  Idttdfat?  The 

reason  we  did  that  —  and  that  just 
about  everyone  else  did,  too  —  was 
because  ifPma  payer  and  I  didn't  file 
an  ezten^n.  then  I  couldn't  receive 
claim  files  from  all  providers.  By  not 
filing  for  an  extension.  I  wouldn't  have 
been  able  to  receive  claims  from  some¬ 
one  who  wasn't  compliant.  But  we  are 
ready  to  meet  the  October  deadline. 

OM  you  daretop  a  coat-bansfit  analyaii  for 
achiaidng  rowplinca?  Yes.  we  have  our 
own  metrics  we  use  to  measure  as  we 
go  through  the  project  We  separate 
which  costs  are  compliance  a^  which 
are  enhancements  or  modernizations. 

ft  aoundi  lia  you  vfaw  MRAA  aa  more  of  a 
coat-afftcfanoy  opportunity  faw  an  onarouB 
raqidranimL  laftwiae?  We  think  HIPAA 
is  good  for  the  industry.  A  lot  of  times 
people  miss  this  simple  point  Bank 
checks  have  a  microUne  that  tells  tbe 
bank  your  account  number  when  pro¬ 
cessing  a  check.  What  if  there  were  no 
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standards  for  coding  that  number? 
Then  you’d  need  coding  routines. 
When  it  comes  to  [processing  health] 
claims,  they're  submitted  many  ways. 
We  need  a  routing  (routine]  for  all 
points  of  submission.  What  HIPAA's 
saying  is,  "Knock  it  off.  Everyone  sub¬ 
mit  a  claim  a  standard  way."  Remit¬ 
tance.  eligibility,  inquiry  —  it  will 
improve  tbe  accuracy  for  all  types  of 
claims  processing.  You  must  do  it  the 
HIPAA  way. 

Hew  strict  are  iha  prhmcy  rufaa?  HIPAA 
policies  require  that  security  and  |»i- 
vacy  are  activated  at  the  point  wfam 
any  access  to  information  is  attempted. 
You  have  to  know  the  rules,  especially 
on  the  privacy  side  For  exanqile  for  a 
daughter  who's  12  years  old.  there’s 
certain  information  that  even  mom 
and  dad  can't  access.  So  under  the  law. 

I  have  to  protect  that  12 -year-old.  Pri¬ 
vacy  rules  affect  the  desktops  that  cus¬ 
tomer  service  people  use  and  Web 
self-service  portals. 

How  are  you  trafatag  al  BC8S  ampfayaai 
on  MMA  rafas?  We  just  launched 
self-taught  portal  training  for  all  com¬ 
pany  employees.  It’s  part  of  human 
resources  training  for  new  en^loyees. 
and  all  employees  are  tracked  to  make 
sure  they  complete  the  required  train¬ 
ing.  After  that,  they  can  access  HIPAA 
infonnation  [online]  any  time  they 
need  to  brush  up  on  the  rules  and 
regulations.  I 


Facing  the 
Unthinkable 

It’s  time  for  corporate  crisis 
management  to  grow  up 


If  you  think  you're  pre- 
It  pared  to  handle  crises 

S'  in  today's  business  envi¬ 

ronment.  you  may  be 
kiddingyoursetf.  So  says 
IAN  L  MITROFF.  professor 
of  6t/5ines5  policy’  at  the 
Marshall  School  of  Busi¬ 
ness  at  the  University  of 
Southern  California  and 
author  of  the  forthcom¬ 
ing  book  Crisis  l.eadcr$hip:  Planning 
for  the  Unthinkable  (fohn  Wiley  & 

Sons,  2003).  Mitrofl^hos/ound  thn>t<gh 
surveys  and  interviews  that  many  For¬ 
tune  500  companies  prepare  only  for  the 
kinds  of  crises  they've  encountered  in  the 
past,  not  for  the  disasters  that  are  likely 
to  strike  tthiay.  He  and  co-author  Murat 
C.  Alpaslan  address  the  implications  of 
being  unprepared  in  this  month's  Har- 
\-ard  Business  Review.  He  talked  with 
Kathleen  Melymuka  about  the  need  for 
companies  and  IT  departments  to  face 
the  reality  of  new  threats. 


perienced.  In  reactive  companies,  first 
it  has  to  hit  them,  then  they  prepare. 

How  might  a  proactive  approach  play  out  in 
an  rr  group  within  such  a  company?  Tech¬ 
nical  people  tend  to  think  in  nice,  neat 
boxes.  In  a  company  that  is  proactive, 
when  you  look  at  how  crises  happen, 
you  realize  that  technology  is  operated 
by  human  beings.  You  look  at  how  peo¬ 
ple  make  errors,  how  the  best-laid  se¬ 
curity  plans  can  be  breached  by  error 
or  omission  or  commission.  You  dia¬ 
logue  with  other  parts  of  the  company 
10  see  how  IT  connects,  how  someone 
could  get  in  even  with  best  of  security. 
When  you  have  an  internal  crisis  team, 
you  use  a  mix  of  people  —  not  just  IT 
people  in  isolation.  A  mixed  group 
con>cs  up  with  richer  scenarios.  You 


don't  start  with  the  assumption  that  it 
can’t  happen.  You  say.  “This  has  hap¬ 
pened.”  and  work  backward  to  find  out 
how  it  could  happen. 

You  learned  that  being  prepared  yields  some 
surprising  dividends,  aside  from  better  re¬ 
sponse.  What  are  some  of  the  payoffs?  W'e 

found  that  over  three  years,  on  aver¬ 
age.  proactive  companies  had  22  major 
crises,  and  reactive  had  33.  The  aver¬ 
age  return  on  assets  for  proactive  com¬ 
panies  w'as  6%:  for  reactive,  it  was  2%. 
Whether  there's  a  cause  and  effect  is 
unclear,  but  something  is  going  on  in 
proactive  companies.  They  have  differ¬ 
ent  ethical  values.  TTtey  tend  to  follow 
“Do  no  harm  to  any  single  person."  Re¬ 
active  companies  tend  to  do  the  right 
thing  only  if  it’s  cost-effective.  They're 
geared  to  the  bottom  tine,  but  ironical¬ 
ly,  the  proactives  fare]  more  profitable. 

Tell  me  about  some  of  the  types  of  calamities 
that  might  strike  an  IT  environment.  Natur¬ 
al  disasters  —  earthquakes,  floods  — 
could  affect  anybody,  and  most  compa¬ 
nies  chink  about  that.  Second  are  nor¬ 
mal  accidents  that  come  about  when 
complexity  builds  in  the  potential  for 
an  accident.  In  IT.  complexity  can  lead 
to  a  glitch  like  Y2k.  That's  a  normal 
crisis  —  an  accident  that's  almost  in¬ 
evitable.  but  not  intentional.  Then  you 
have  abnormal  accidents:  Someone  de¬ 
liberately  causing  the  accident.  ^11 
was  abnormal.  Enron  was  an  abnormal 
economic  cri-sis  because  it  W'as  caused 


The  Wheel  of  Crisis 


Why  is  traditional  corporate  crisis  manage¬ 
ment  no  longer  good  enough?  It’s  too  limit¬ 
ed.  Corporations  —  or  IT  departments 
—  tend  to  focus  on  crises  they  know 
about.  That  doesn't  serve  them  well. 

It's  not  the  crisis  you  know  that  will 
kill  you;  it’s  the  one  you  don't  know. 
There  are  all  sorts  of  crises:  economic, 
reputational,  human  resources.  Organi¬ 
zations  are  susceptible  to  a  wider  array 
of  crises  than  30  years  ago.  and  any¬ 
one  can  be  the  cause  or  the  efTect  of 
any  other.  Something  in  IT  could  trig¬ 
ger  something  elsewhere,  or  vice  versa. 
Criites  don't  give  a  damn  about  the  si* 
los  and  walls  we  set  up. 

four  study  found  that  some  companies  were 
pr^Mred  for  crises  and  others  were  suscep* 
tible  to  them.  What  were  the  main  differ¬ 
ences  between  the  bvo  types  of  companies? 

Proactive  organizations  prepare  for 
mon?  crises  than  they  have  already  ex¬ 


Ttis  tool  helpe  ptarmers  face  Ihe  undrinkable.  The  crfalB  teem  spins  the  wheal  end  then 
develops  ecanerios  of  bow  each  crisis  conU  occur  and  how  two  appereidiy  random  crises 
couht  be  IWmcL  Than  the  phnoersdevtorespensee  and  rlsk-fflitigatien  strategies. 


by  shenanigans.  In  IT.  abnormal  is 
where  I  intentionally  go  in  as  a  terror¬ 
ist  and  infiltrate  or  put  in  a  virus. 

Does  FT  have  a  role  in  averting  crises?  There 
are  always  early  warning  signals.  IT 
can  be  part  of  a  crisis  signal  detection 
center,  to  collect  and  filter  information 
and  send  it  to  a  central  locale  to  con¬ 
nect  the  dots.  In  the  Ford/Firestone 
crisis.  Ford  set  up  a  unit  to  look  for  evi¬ 
dence  of  tire  problems  worldwide.  But 
why  didn’t  it  have  a  permanent  unit 
before  that?  IT  could  take  the  lead  to 
set  up  systems  to  look  for  early  warn¬ 
ings.  The  role  overlaps  with  strategic 
planning  —  again,  tearing  down  silos. 

You've  developod  a  my  interesting  tool  to 
help  managers  face  the  possibility  of  abnor¬ 
mal  crises.  The  wheel  of  crisis  [see  illus¬ 
tration]  shakes  up  thinking  with  the 
idea  of  randomness.  You  spin  it.  and  it 
lands  on  one  category  of  crisis.  Spin  it 
again,  and  it  lands  on  another.  Then 
you  have  to  come  up  with  a  scenario: 

If  this  happens,  what  do  we  do?  And  if 
both  happen,  what's  the  connection? 
How  could  one  set  off  another?  It's  de¬ 
signed  to  force  people  out  of  tradition¬ 
al  molds  of  preparing  for  the  things 
they  know  how  to  prepare  for.  You  have 
to  broaden  it  and  cormect  the  dots. 

Ybu  also  suggest  using  Internal  assassins.” 
What  would  they  do  in  IT?  IT  people 
would  concoct  a  scenario  that  would 
do  the  most  damage  and  take  the 
longest  time  to  find  out.  They  might 
also  look  at  how  someone  with  a  high- 
school  education  vs.  a  Ph.D.  could  sab¬ 
otage  you.  Then,  what  would  you  do  to 
blunt  it?  How  could  you  know  this  is 
beginning  to  happen?  Whai  is  in  your 
organization,  culture,  reward-and-pun- 
ishment  system  that  W’ould  make  some¬ 
one  disgruntled  enough  to  do  this? 

Crisis  management  is  not  a  high  prfority  for 
many  companies,  especially  when  budgets 
are  strainwi.  Why  should  companies  spertd 
now  to  thwart  potential  threats?  The  best 
argument  is  the  cost  of  an  Enron  or 
Ford/Firestone.  It  costs  $2  million  a 
year  to  start  (a  crisis  management  ef¬ 
fort]  in  a  Fortune  500  company.  That's  a 
drop  in  the  bucket,  and  if  you  don't  do 
it.  you're  betting  the  whole  company.  A 
crisis  is  virtually  guaranteed  to  happen. 
The  ordy  a  question  is  when  and  how.  I 


Melymuka  is  a  Computerworld 
contributing  writer.  Contact  her  at 
kmelymuka^oiyaboo.com. 
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Al  ifs  best,  the  federal 
Health  Insurance  Porta¬ 
bility  and  AccounwWi- 
ity  Act  (HIPAA) gives 
health  care  payers  a 
sfro/egicpian  for  mak¬ 
ing  much-needed  im¬ 
provements  to  adminis¬ 
trative  and  clinical 
management  systems. 
HIPAA  regulations  protect  the  disclo¬ 
sure  of  all  patient  health  information; 
the  privacy  compliance  and  code  trans¬ 
action  fesfing  deadfines  wenr  inro 
effect  April  14  and  16.  respecfive/y. 

At  its  worst,  HIPAA  takes  a  big  chunk 
from  hospitals'  IT  budgets  and  those  of 
health  care  providers  f/iof  are  trying  to 
stay  afloat  as  costs  continue  to  soar. 

At  Blue  Cross  and  Blue  Shield  (BCBS) 
of  Minnesota,  the  emphasis  is  on  creaf- 
ing  business  value  from  all  the  efforts 
and  costs  of  bringing  IT  info  compliance 
wifh  HIPAA.  In  a  nufsheii,  HIPAA  re¬ 
quires  systems  and  software  to  meet 
certain  transaction  and  code-set  stan¬ 
dards  and  formats  for  electronically 
transferred  patient  billing  and  insurance 
information  CIO  John  Ounjian  is  (eading 
an  IT  staff  of 1,500  in  a  massive  mod¬ 
ernization  of  IT  systems  to  improve  ser¬ 
vices  to  consumers  and  heaith  core 
providers.  He  recently  spoke  with  Com- 
puterworld’s/ean  Consi/vio  about  using 
HIPAA  requirements  as  an  opportunity 
to  gain  a  business  advantage. 

Are  you  overhaulino  your  eiisting  claims' 
processing  systems  exclusively  to  meet 
HIPAA  compliafice?  There’s  the  element 
of  compliance.  To  me.  HIPAA  is  “YSk" 
for  the  health  care  industry.  It's  costing 
80%  of  what  my  Y2k  [cITorts]  did.  But 
with  Y2k,  we  didn't  have  any  opportu¬ 


nity  to  create  value.  With  HIPAA.  we 
have  the  opportunitv-  to  improve  the 
system  to  meet  compliance  and  mod¬ 
ernize  core  systems. 

What  are  the  core  systems  affected  by 
HIPAA  compliance?  The  clearinghouse  is 
the  hub  that  processes  the  claims  by 
receiving  and  routing  them  funher 
into  my  operations  or  out  to  other  pay¬ 
ers.  Once  the  claim  is  my  claim,  it  goes 
through  prejudication.  That's  where 
you  make  sure  it  has  evervihing.  like 
provider  ID  information,  so  you  can 
accept  it.  It  then  moves  to  fthe)  claims- 
payment  side  of  our  business. 

By  law.  If  you  do  not  have  a  clearing¬ 
house.  you  cannot  receive  a  claim 
that’s  not  HIPAA-compliant.  [because 
you  do  not  have  a  way  to  reformat  it  so 
it  meets  the  requirements].  The  clear¬ 
inghouse  can  receive  a  claim  in  any 
format  [and]  put  it  in  HIPAA  format, 
which  is  based  on  the  ASC  X12  stan¬ 
dard.  and  then  give  it  to  my  prejudica¬ 
tion  system. 


AT  A  GLANCE 
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What  happens  if  you  get  a  claim  that's 
not  HIPAA-compiiant?  The  pa>er  can't 
recehe  any  claim  that's  not  HIPAA- 
compliant.  If  the  health  care  provider  | 
sends  the  claim  to  any  clearinghouse 
first,  wc  can  pay  it. 

So  upgrading  your  devinghouse  is  a  strate-  ' 
gic  benefit  for  both  you  and  health  care 
provWefS?  Yes.  I'm  not  rejecting  claims. 
The  part  that  will  help  my  provider 
save  money  is  that  instead  of  sending 
the  claim  to  another  clearinghouse,  the 
provider  can  send  it  to  me.  1  end  up 
creating  stronger  relationships  with 
providers. 

And  what  are  the  cost  benefits  for  you? 

Let’s  say  I  stan  improving  my  edits  in  , 
prejudication.  If  I  have  my  stronger 
edits  at  the  front  rather  than  the  back 
{of  that  system],  the  claims  go  through  j 
with  less  cost  because  there  are  fewer  ' 
exceptions  or  errors. 

How  has  this  affected  your  IT  staff  and  help 
desk?  Call  me  ne.xt  year.  I'm  hoping 
we'll  have  less  people  and  that  HIPAA 
will  reduce  costs  for  us  because  we'll 
have  fewer  exceptions  and  more  pro¬ 
cedures  that  arc  standardized.  , 

^  fSed  an  extension  for  the  Standard  i 
Transactfon  and  Code  Sets.  Does  this  affect  { 
your  HMA  cfoaringhouse  initiative?  The 
reason  we  did  that  —  and  that  just  | 
about  everyone  else  did.  loo  —  was 
because  if  I'm  a  payer  and  I  didn't  file  ' 
an  extension,  then  I  couldn’t  receive  | 
claim  files  from  all  providers.  By  not 
filing  for  an  extension.  I  wouldn't  have 
been  able  to  receive  claims  from  s*>mc- 
one  who  wasn't  compliant.  But  we  arc  , 
ready  to  meet  the  October  deadline. 


One  health  care  CIO  views  HIPAA 
as  an  opportunity  to  gain  business 
value.  By  Jean  Consilvio 


Did  you  devofop  a  cost-benefit  analysis  for  I 
achieving  compfiance?  Yes.  we  have  our  ^ 
own  metrics  we  use  to  measure  as  we  j 
go  through  the  prt>|cct.  Wc  separate  ^ 
which  costs  arc  compliance  and  which 
I  are  enhancements  or  modernizations.  | 


Beyond 

—  I  /  I  cesstngacnccK.  wnat  u  there  werci 

Conpliance 


It  sounds  Hke  you  view  MPAA  as  more  of  a 
cost-efficiency  opportunity  than  an  onerous 
roquirenwnL  Is  that  so?  We  think  HIPAA 
is  good  for  the  industry.  A  lot  of  times 
people  miss  this  simple  point:  Bank 
checks  have  a  microlinc  that  tells  the 
bank  your  account  number  when  pro¬ 
cessing  a  check.  What  if  there  were  no 


Missed 

Deadlines 

■  OapHtoApIMtelMtoiit- 

andWbgipupwhtewcawglBlBd 

pdMcyNHtedMton. 


BASfcfififiheaieiawwlBtrviiiuuwii- 
taiMB  (70%  (xovites:  20%  oom  2% 
deennohouses  6%  vendors) 


standards  ftir  coding  that  number? 
Then  you'd  need  coding  rouiini-s. 
When  it  comes  to  (processing  healihl 
claims,  they're  submitted  many  ways. 
Wc  need  a  n>uting  [routine]  for  all 
points  of  submission.  What  HIPAAs 
saying  is.  "KmK’k  it  off.  Everyone  sub¬ 
mit  a  claim  a  standard  way."  Remit¬ 
tance,  eligibility,  inquiry  —  it  will 
improve  the  accuracy  for  all  ti-pes  of 
claims  processing.  You  mu-st  do  it  the 
HIPAA  way. 

How  strict  are  the  privacy  rules?  HIPAA 
policies  require  that  security  and  pri¬ 
vacy  an?  actis-ated  at  the  point  where 
any  access  to  information  is  attempted. 
You  haw  to  know  the  rules,  especially 
on  the  privacy  side.  For  example,  for  a 
daughter  who's  12  years  old.  there’s 
certain  information  that  even  mom 
and  dad  can’t  access.  So  under  the  law. 

I  have  to  proteCT  that  12-ycar-old.  lYi- 
vacy  rules  affect  the  desktops  that  cus¬ 
tomer  sen'icc  people  use  and  Web 
self-sers'ice  portals. 

How  ars  you  training  aM  BC8S  employees 
on  HffAA  rults?  We  just  launched 
self-taught  portal  training  for  all  com¬ 
pany  employees.  It’s  part  of  human 
resources  training  for  r»cw  cmploy'ces. 
and  all  employees  are  tracked  to  make 
sure  they  complete  the  required  train¬ 
ing.  After  that,  they  can  access  HIPAA 
information  {online)  any  time  they 
need  10  brush  up  on  the  rules  and 
regulations.  I 
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Readying  for 

ATHpOShore 


The  economy  is  forcing  companies  to  ex¬ 
amine  every  cost-cutting  opportunity.  As  a 
result,  offshore  IT  operations  are  becom¬ 
ing  increasingly  attractive.  Drastically 
lower  wages  overseas  make  the  business 
case  compelling,  and  telecommunications  improve¬ 
ments  have  finally  made  it  viable. 

Low-skill  jobs  have  gone  ofifehore  for  years,  but 
higher-skill  jobs  are  now  moving  to  other  coimtries. 


Offshore  estimates  are  stag¬ 
gering.  Forrester  Research 
is  forecasting  that  by  2015, 

33  million  white-collar  jobs 
—  472,632  of  them  in  IT 
and  mathematics  —  will 
shift  from  the  US.  to  coun¬ 
tries  with  lower  labor  costs, 
taking  almost  S136  billion  in 
wages  with  them. 

Even  domestic  IT  out¬ 
sourcers  are  being  forced 
to  go  ofl^ore.  Historically, 
they  have  resisted,  because 
lower  wage  structures  re¬ 
sult  in  lower  revenues.  But 
Electronic  Data  Systems, 

Accenture,  Affiliated  Com¬ 
puter  Services  and  others 
now  have  offshore  facilities  and  are  re¬ 
cruiting  heavily  in  India. 

Microsoft  is  moving  some  Windows 
development  to  India.  Other  current 
offehore  outsourcing  efforts  span  di¬ 
verse  industries,  going  well  beyond  IT: 

■  Massachusetts  General  Hospital 
has  some  of  Us  CT  scans  read  by  Indi¬ 
an  radiologists. 

■  Fluor  Corp.  employs  1300  of&hore 
draftsmen  and  engineers  to  develop 
blueprints  for  industrial  &cilities. 

■  Indian  and  Chinese  engineers  de¬ 
sign  chip  circuits  for  Intel  and  Texas 
Instruments. 

■  Proctor  &  Gamble  has  6S0  em¬ 
ployees  in  Manila  helping  prepare 
worldwide  tax  returns. 


■  lUissian  engineers  are 
designing  luggage  bins  for 
the  Boeing  777  airplane. 

Other  industries  are 
leading  the  way  of^ore. 
but  IT  is  catching  up  fast  I 
conducted  an  informal  sur¬ 
vey  of 400  IT  leaders  at 
the  Computerworld  Pre¬ 
mier  100  conference  in 
February.  Currently,  72%  of 
those  leaders'  companies 
aren't  involved  In  any  oS*- 
sbore  development  or 
maintenance.  However, 
most  said  their  companies 
plan  to  make  the  ofihore 
leap  soon:  less  than  half 
will  still  be  untnvolved  in 
two  years.  By  2005,  approximately  one 
out  of  every  10  of  the  companies  that 
send  IT  work  ofi^ore  will  spend 
more  than  25%  of  their  development 
and  maintenance  budgets  offshore.  In 
fact,  one  CIO  told  me  that  he'll  have 
70%  of  his  development  and  mainte¬ 
nance  staff  offshore  in  three  years. 

Start  planning  now.  Before  your 
CEO  asks,  look  at  the  following  issues: 

■  PoltontowioitoiowtotoipnipftototBr 
youroomiiafiir.  Some  organizations  can't 
go  offshore  for  security  reasons. 

■  Doflno  tfa  acopa.  Common  candi¬ 
dates  for  moving  offshore  are  call  cen¬ 
ters,  application  development,  applica¬ 
tion  maintenance  and  infrastructure. 
Some  jobs,  especially  those  requiring 


lots  of  face-to-face  interaction,  are  dif¬ 
ficult  to  move  offshore. 

■  Undaretond  tha  trade-olb  of  various  off¬ 
shore  iocaliona.  The  leading  IT  locations 
(primarily  India,  Ireland  and  the  Philip¬ 
pines)  have  highly  educated  workers 
who  speak  Ei^lish  well,  and  they  try  to 
minimize  difficulties  like  time-zone  dif¬ 
ferences.  Newer  entrants  (including 
Pakistan,  China,  Russia  and  Brazil)  of¬ 
fer  even  lower  prices  but  have  weaker 
infrastructures  and  more  difficulties 
with  langu^  and  time  zones. 

■  Msnidris  whafhar  you  ward  to  bidU 
your  own  oflihore  IT  fadRy.  Large  multi¬ 
national  corporations  with  an  estab¬ 
lished  presence  in  a  lower-cost  coun¬ 
try  may  decide  to  build  their  own. 
Smaller  companies  or  those  without 
operations  in  a  low-cost  country  are 
generally  better  served  by  contracting 
with  a  third-party  offrhore  outsourcer. 

■  Stoact  an  outoourear  wKh  bolh  orohore 
and  offshore  caiaMMaa,  Companies  that 
have  a  U.S.  sales  presence  do  all 
the  woik  offshore  offer  the  lowest 
prices.  Pay  a  little  more  and  use  an  out¬ 
sourcer  that  does  some  work  in  the 
US.  and  some  offshore.  Specify  which 
woric  is  to  be  performed  in  each  loca¬ 
tion.  Such  an  arrangement  reduces  risk 
but  still  offers  considerable  savings. 

■  Be  reoAsdc  about  tha  awtagL  Between 
30%  and  40%  is  realistic,  vs.  the  70% 
claimed  by  some  offrbore  suppliers. 
While  wages  are  lower,  you  will  incur 
additional  supplier  management,  com¬ 
munications  and  travel  costs. 

Offshore  sourcing  alternatives  are 
becoming  more  attractive,  more  viable 
and  more  prevalent.  As  you  proceed, 
consider  the  same  issues  you  would 
address  in  any  outsourcing  decision. 
Then  determine  bow  to  best  leverage 
o&hore  operations  to  reduce  costs  — 
before  your  CEO  demands  it  I 
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Advertising  Supplement 

IT  Careers  in  Security 

H  sounds  so  ossy  ...  point  wid  clicks  securitv.  Ths  reslitv  is  that 
roquirscnonts  for  improved  informetion  security  become  more 
complex  on  e  deify  besis  -  from  protecting  consumer  informs- 
tion  to  securing  the  nation's  IT  infrastructure.  As  the  need  for 
more  advanced  technolo5iy  increases,  so  does  the  need  to  be 
able  to  identify,  hire  and  keep  people  quelifted  to  work  In  the 
world  of  IT  and  IT  security. 


Diane  Morrell,  vice  president/director 
of  research  for  the  Gartner  Group  in 
Stamford,  CT,  says  that  employers  sre 
conducting  s  more  thorough  assessment 
of  people  to  wrorfc  in  IT  security.  That's  good  news 
for  IT  professiortals  who  have  e  track  record  for 
accomplishment,  for  remaining  with  a  company  for 
a  reasonable  amount  of  time  and  who  have  proven 
their  ability  to  apply  techrK>k>gy  to  entirely  new  situ¬ 
ations.  Not  so  much  for  people  who  have  been  Joh- 
hoppers  and  whose  background  wrould  be  difficult 
to  track,  much  less  qualify,  for  appropriate  security 
clearances.  'The  assessment  of  people  it  recetvtng 
more  scrutiny  and  is  more  acute  than  in  the  past* 
says  Morrell. 


The  right  skills 
fuel  the  new 
economy. 

Fill  up  with  the 
IT  Education 
and  Training 
section  coming 
April  28th. 

W  e  can  put  your  message  in 
frcnC  of  2/3  of  all  tB  IT 
professicnals.  If  you  want  to 
increase  your  enrollment 
Call  Nancy  Percival  at 
1-800-762-2977 


ITcareers 


Gartner  Group's  research  indicates  that  there 
wilt  be  renewed  focus  on  how  government  agen¬ 
cies,  the  mUitary  and  corporations  outsource  basic 
transaction  work  in  (he  fT  arena.  The  cost  has  beer> 
driven  down  by  outsourcing,  an  ecortomic  factor 
that  has  to  play  into  the  equation  of  how  networks 
and  systems  are  developed  and  how  companies 
establish  security  criteria  for  their  suppliers. 

Morrell  says  the  change  in  natiortal  security 
focus  has  speeded  up  the  r>eed  to  transition  the 
rtational  workforce  to  meet  cost  restraints  and 
security.  The  result  is  a  higher-level  skill  set  for  IT 
professionals  here  in  the  U.S.  TrsditiorMily,  U.S. 
companies  rrvessure  performance  by  demoratrable 
skills.  Gartner  Group  predicts  this  will  change,  'ft's 
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the  ability  to  synfoesm  knowledge  versus  acadamic 
training,’  Morrell  explained  'The  demand  will  be 
for  an  fT  workforce  that  can  design  around  and  in 
between  organusliorys.  that  is  intuitive,  that  is  flueni 
in  skills  artd  that  can  apply  knowledge  to  entireiy 
new  speces.  You1i  see  s  greater  demand  for  higher 
order  thinking  to  apply  to  research  and  develop 
ment  nanotechnologies,  biotechnologies  -  with  the 
question  of  natiortel  security  mixed  in.* 

Hiring  employers  can't  merely  recruit  or  wait  for 
resumes  to  cross  the  portal  in  this  rtew  paradigm. 
According  to  Morrell,  successful  hirirtg  companies 
will  corkstsntly  mine  the  IT  workforce  to  foentify 
those  who  have  the  sought-after  competencies  'I 
think  we'll  see  a  lot  of  focus  by  companies  on  keep- 
irtg  their  cnticai  ulent  satisfied  and  with  identifyirtg 
new  talent  through  their  current  employees.  That 
puts  an  entirely  new  light  on  the  comparry/employee 
reletionship.* 

IT  Caraeis 

For  informeiion  on  recruitment  advertising, 

Please  contact  Nsrrcy  J.  Percival.  Director. 
Recruitment  Advetlistng.  at  80(1-762-2977 
500  Old  Connecticut  Path 
Framingham.  MA  01701 
Produced  by  Carole  R.  Hadden 


•  WEB  AeO«TECT& 
OEVELoeets 

•  SYsrews  analysts 

•  WEBGRAPHC  OESlGfCNS 

•  NETWORK  ENGaCStS 

•  PRQORAMMEWf ANALYSTS 

•  SOmWARE  ENGINEERS 


•  COU)  FUSION  -  SPECTRA 

•  ORACLE  •  WSUAL  BASK 

•  VTSUAL  C— •  SISKL  •  ASA 

•  COM  DCOM  •  JSP  •  NTiS. 

•  AKVA  JAVA  aEWI  •  JAVA 
SBtVLETS  •  WEBSPHERE 

•  eu  uo  SERIES  •  flW..UM. 

•  WTS  •  CLARIFY  •  PERI 

•  OBJECTTEI^  •  SPTPERL 
•SMAUTALK-^/SQL 

•  VISUAL  ACE  •  COBOL  SPL 


Anw  tanartf  you  fOMW  Id 
HR  Mgr  ConmurMoMBm 
C«p.4SO«Bloan*ai 


Degree,  some  posi¬ 


tions  require  Master  s 


Degree  or  equi.  Min 


industry  experience. 


to  Attn;MA.  Aiekhya 


Technologies  Inc. 


4017  Cypper  Ct. 


Fremont,  CA- 94538. 


Ci«piter«iirl4  •  InftWerld  •  Retwtrk  Wtrld  «  April  21,2813 


I  I  I  \Kl  I  Ks 


IT  I  ,  I  I  I  I 


CiDfilirwirltf  •  lifiWirll  •  N«twirk  WirU  •  Akrll21.2O03 


CHpiltrwirll  •  litiWtrlP  •  Mtwirk  WirIP  •  «irll21,zei3 


i  I  1.  \KI  I  l\S 


IT  '  .1  !  1 


CtNIRAl  STfttrs 


s: 


MflROStV.  >ORR 


SOUTHEASTgRW  STATES  ILHNOIS 


D>BC»ord  Print  SilwAl^agaieBfcGwwftBlcy.ff^ 
271-miknwtrofOiitieSilM/BurinwD*Ni9- 
mant  IM  D(«y.  (506)  820«(5:  SOO  OU  ComecKtf 
Bm  917L  liaMiahm  IM  01701-m  (506) 

270‘36B2lnadtStlt^AccounlAs8OCiMB.NanTia^ni- 
buTin.  MKfc  -  M IV.  61  SeuV)  BMamus  A1 M  Root. 
Pawus.  NJ  07652.  (201)  S67-73U.  (200  712-9766 


-27 

-C 

4S 


CIIMTaiMUI|rlfl.2M 


RESOURCES 


www.computerwortd.coni 


How  to  Contact 

COMPOTERWORUI 

We  invite  readers  to  catf  or  write  with  their  comments 
and  ideas.  It  is  best  to  submit  ideas  to  one  of  r/ie  department 
editors  and  the  appropriate  beat  reporter. 


(506)8208179 

QEMRTMEMT  EDITORS 


_ (SOftaUO-TTU 

-..{SOBIBZPecO 
_  _(roi5»7M9 
.  .(S0«]8Z&«S? 
(scmteo-Trs 

.  .(30T)2e«43 


OPINIORS 

MrfdaRMlt.tdtor«WoK _ 


.(703)3^227? 

(630)97ee390 


. (sonenen 

.....[603)3BI-nBB 

...(9IB)252-0100 


FEATURES  EDITORS 


-(50Qe20«04 
.  (sonesoem 

(703)S3e«33 


COUPUTERWORLO.eOM 

riMkaMnadnctoc..  _  ... 

minaiw  BMvnrkne  .  (SOSl  B2(HI231 

IfconfranmaMei . . .{SOQURPAMS 


...XSOB)  820-7717 


,«-<nWntiiWMHr/Dnira«lHtaWge  .(508)820-8280 

N.c>«weiBa>«wge . .  .  (508)620-7780 

MkMDcaKaldnctor _ (508)820^216 

LMOowaithccM _ _ _ ^S208U2 


•RAPHie  DESIOH 

■r.itagnOrUer  ..  .  ....(508)8208235 


AOUIRISTRATIVE  SUPPORT 

i«M,ofhccmanagM . .....(508)820-806 


LcntM  ft  m  BUM 

'"TBiaag" 


•-asssasr 


Mnnv.cofflpulerwortd.cofn 


NEWS 


CMMianuMiiiNi  49 
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Windows 

Life  Insurance  Co.  in  London, 
Ontaria  *^e  will  also  skip  up¬ 
grades  if  there's  no  immediate 
need  or  benefit* 

Many  IT  managers,  how¬ 
ever,  expressed  keen  interest 
in  some  of  the  new  features  in 
Windows  Server  2003,  partic¬ 
ularly  the  improvements  to 
Active  Directory  (see  bta). 
and  some  said  they  will  start 
migrating  this  year 

James  Hudson,  director  of 
IT  worldwide  at  J.  Walter 
Thompson  Co.  in  New  York, 
said  be  expects  the  advertising 
agency  to  move  to  the  new  op¬ 
erating  system  in  three  to  six 
months  because  of  the  added 
stability  of  Active  Directory. 
The  company  is  currently  run¬ 
ning  a  mix  of  Windows  NT 
and  2000  and  Novell  Inc.'s 
NetV^. 

Hudson  said  the  efificiency 
designed  into  the  replication 
topology  of  Active  Directory 
will  be  important,  since  his 
company  has  a  lar^  global 
Active  Directory  deployment 
distributed  across  several  of¬ 
fices.  “Having  greater  control 
in  how  we  manage  replica¬ 
tion  across  WAN  links  with 
bandwidth  constraints  will 
allow  us  to  e0iciently  sched¬ 
ule  replication  interns.* 
Hudson  said. 

Eiily  Adopter 

Andre  Mendes,  CIO  at  Public 
^oadcasting  Service  (PBS)  in 
Alexandria.  Va.,  said  his  com¬ 
pany's  migration  within  the 
next  six  months  will  be  driven 
by  new  Active  Directory  and 
Exchange  2003  features,  im¬ 
proved  security  and  the  shad¬ 
ow-copy  feature  for  creating 
backup  copies  of  Hies  or  fold¬ 
ers  to  prevent  inadvertent  loss 
of  data. 

Mendes  said  PBS  has  been 


testing  Windows  Server  2003 
for  a  few  months  and  has  been 
satisfied  with  its  new  features 
and  stability.  Plans  call  for  a 
near-immediate  migration  of 
domain  controllers  and  Active 
Directory.  Others  systems  will 
follow  within  six  months,  as 
PBS  moves  off  Windows  2000 
and  Sun  Microsystems  Inc.’s 
Solaris  operating  system. 
Mendes  said. 

But  PBS  hardly  represents 
the  norm,  accordii^  to  Gart¬ 
ner  Inc.  Analyst  Tom  Bittman 
said  he  expects  only  about  5% 
of  Wmdows  2000  users  to 
move  by  year’s  end,  with  an¬ 
other  1^  to  follow  by  the  cikI 
of 2004. 

Bittman  also  predicted  that 
companies  still  using  Win¬ 
dows  NT  4X)  won't  rush  to  up¬ 
grade  rither,  despite  a  2004 
end-of-support  deadline. 
Those  companies  tend  to  be 
conservative  by  nature,  be 


Active  Directory 


said,  adding  that  be  doesn’t 
expect  more  than  2S%  to  33% 
of  the  existing  NT  base  to  mi¬ 
grate  to  WindovTS  Server  2003 
by  the  end  of  next  year. 

“Nobody  is  making  any  kind 
of  IT  purchases  unless  they 
have  a  good  business  case,* 
said  Dwi^t  Davis,  an  analyst 
at  Summit  Strategies  Inc.  in 
BostoiL  “People  are  not  going 
to  be  looking  at  Windows 


Server  2003  purely  in  techni¬ 
cal  terms." 

Jim  Hebert,  general  manag¬ 
er  of  Windows  enterprise 
servers  at  Microsoft,  said  the 
company  is  well  aware  that  IT 
spending  is  flat  and  probably 
be  next  year  as  well  So 
Microsoft  will  focus  on  trying 
to  help  customers  understand 
the  bmiefits  they  might  see 
from  an  upgrade,  be  said 

One  popular  theme  is  server 
consolidation,  a  benefit  that 
Steve  Sommer.  CIO  at  Hughes 
Hubbard  &  Reed  LLP.  said  be 
hopes  to  achieve  with  an  up¬ 
grade  that  may  start  as  early  as 
the  fourth  quarter.  The  New 
Yoik-based  law  firm  now  has  a 
mix  of  Wmdows  NT  and  2000. 

Other  migration  drivers  for 
Hu^ies  Hubbard  include  the 
impending  end  of  support  for 
NT  and  the  company's  huge  li¬ 
censing  and  support  agree¬ 
ments  with  Microsoft,  which 


make  "it  a  shame  if  you  don't 
do  some  upgrading."  since  the 
new  software  is  already  paid 
for.  Sommer  said 

Even  so.  some  companies 
may  resist  making  a  quick 
move  because  of  the  labor 
costs  and  disruption  associat¬ 
ed  with  a  server  migration. 
Others  simply  don't  like  to  test 
Microsoft  software  until  the 
bugs  get  worked  out  in  the 
first  service  pack. 

Raymond  Lehz.  director  of 
technical  services  at  Auto¬ 
Nation  Inc.  in  Pent  Lauderdale, 
Fla.,  said  his  company  prefers  a 
six-  to  nine-month  "cooling  pe¬ 
riod"  before  considering  new 
Microsoft  server  software.  I 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Secure  ^ur  Users 


At  the  RSA  security  conference  last  week  in  San 
Francisco,  the  big  news  was  a  new  set  of  cybersecurity 
best  practices,  a  new  application  vulnerability  descrip¬ 
tion  language  and  a  push  for  Web  services  sectu-ity, 
along  with  the  usual  collection  of  new  IT  secmity 
products  (see  story,  page  8).  Considering  what  a  messy,  continuously 
changing  security  picture  we  face,  it’s  all  worth  digging  through 
when  you  get  the  chance.  Piling  more  security  technology  onto  your 
networks  and  servers  and  desktop  PCs  is  usually  a  useful  thing. 

But  while  you’re  upgrading  your  security  technology,  don’t  forget 
to  upgrade  seciurity  in  your  users,  too. 

Not  for  your  users.  In  them. 


Look.  you‘ve  got  firewalls  and  virus  filters 
and  intrusion-detection  systems.  You  scan  logs 
and  tune  settings.  You  go  hunting  on  a  regular 
basis  for  unauthorized  wireless  gateways  and 
off-tbe-network  modems.  You've  built  a  securi¬ 
ty  fortress,  and  as  long  as  your  users  are  inside 
that  fortress,  they’re  pretty  safe. 

But  they  won’t  stay  inside  that  fortress.  In¬ 
expensive  technology  lets  office  workers  take 
the  office  with  them  wherever  they  go  —  or  at 
least  it  seems  that  way.  Maybe  it  makes  them 
more  productive,  but  it  also  exposes  all  that 
office  activity  to  the  world  outside  the  protec¬ 
tions  of  their  real  office. 

Cheap  wireless  access  points  make  home 
networicing  easy.  But  they  can  also  expose 
access  to  your  networks  and  data  if  an  office 
worker  connects  from  home  while  still  hooked 
up  to  his  wireless  network. 

Cell  phones  make  it  easy  for  outsiders  to 
eavesdrop  on  business  conversations.  Laptops 
with  big.  clear  screens  make  it  easy  for  people 
even  a  few  seats  away  to  read  confidential  doc¬ 
uments.  An  enterprising  snoop  can 
even  copy  hundreds  of  megabytes 
of  information  from  a  laptop  with  a 
CD  burner  left  running  on  an  air¬ 
plane  seat  while  its  owner  tvaits  in 
line  for  the  lavatory. 

Laptops  are  thief  bait  in  airports, 
parked  cars  and  even  overhead  bins 
in  airplanes,  and  they’re  typically 
stuffed  with  confidential  business 
information.  But  so  are  handheld 
computers,  which  can  easily  hold 
documents,  spreadsheets  and  data¬ 
bases  these  days  —  and  are  much 
easier  to  steal  than  lapt<^. 


And  that’s  just  the  tip  of  the  iceberg.  There 
are  endless  ways  users  can  compromise  the 
security  of  business  information  once  they’re 
outside  the  office,  and  there's  not  much  you 
can  do  about  most  of  them.  They’re  outside 
your  security  perimeter  —  beyond  your  reach. 

Yes,  you  can  add  more  security  technology. 
You  can  try  to  chase  down  and  block  off  every 
security  hole  in  each  user’s  portable  office. 

But  none  of  that  will  be  as  effective  as  im¬ 
proving  the  security  in  the  user. 

Because  in  the  end.  security  is  a  set  of  disci¬ 
plines  practiced  by  users,  not  just  a  set  of  tech¬ 
nologies  implemented  by  IT.  Security  aware¬ 
ness,  good  habits  and  common  sense  on  the 
part  of  users  won't  replace  firewalls  and  intru¬ 
sion  detection.  But  the  technolc^  alone  won’t 
be  much  use  without  security-smart  users. 

So,  what  can  you  do  to  uf^ade  your  users’ 
security?  These  days,  you  don’t  have  the  bud¬ 
get  to  send  them  to  security  classes.  But  you 
con  send  them  reminders  to  be  security  con¬ 
scious.  Point  out  specific  risks  of  wireless  hubs, 
laptops,  handhelds  and  other  tech¬ 
nologies  outside  the  office.  Make 
speciHc  suggestions  for  avoiding 
those  risks.  And  offer  help  if  users 
have  questions  or  problems. 

And  when  they  do  call  for  help, 
don’t  just  teU  them,  "No.  don’t  do 
that!”  Woik  with  them.  Look  for 
options  and  alternatives.  Find  so¬ 
lutions  that  you  and  they  can  live 
—  and  work  —  with. 

Build  real  security  into  your 
users.  Then  you’ll  fmd  out  just 
how  useful  all  that  security  tech¬ 
nology  can  be.  I 
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on  IBM's  fastest  computer 
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Oracle  IBM  DB2 
2001 


Oracle  IBM  DB2 
2002 


When  IBM  wanted  to  show  off 
their  fastest  computer, 
IBM  chose  Oracle. 

Again. 


ORACLG 


orade.com/ad 
or  call  1.800.633.1062 


VOL  3  7 

ISS  1 7 

AP  28  2003 


UMI 


NEWSPAPER 


Blogs  expand  boundaries  of  public  discourse. 


THE  NEWSPAPER  FOR  IT  UADERS  •  WWW  COMPUTERWORLO  COM 


A  Work  in  Progress 


APRIL  28.  2003  •  VOL  37  •  NO  IT  ■  SS/COPV 


■^1  Hawtett  RKkarrfs 

oppRsHon  of  Compaq 
Computoroneyoai 
ago  nad  week  has 
pleasod  some  users 
and  angofadoftera-Hlgh-ond  system 
opeiteonsailheiiwgorhBsyieldsct 
avteloonttfociteimorilicai  systems. 
ButusereofmidranooandkNrend 
equipment  say  tiey’ioteelng  jtanred 
PilrldiThliote  reportson  M6C  6. 


HNrtwMyai 


Bank's  IT  Workers  Threaten 
Strike  Over  Outsourcing  Deal 


Union  seeks  role  in 
Bank  of  Ireland’s 
negotiatioas  with  HP 


Unionized  members  of  the 
Bank  of  Ireland’s  IT  depart* 
ment  are  threatening  to  go  on 
strike  if  they  aren't  involved  in 
fmal  negotiations  with  Hew* 
lett-Packard  Ca  on  a  proposed 
outsourcing  deal. 

Officials  from  Dublin-based 
Bank  of  Ireland  and  the  union 
that  represents  its  IT  workers 
met  last  Tuesday  for  their  fu’st 
talks  since  the  outsourcing 
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New  Health  Data  Net  May 
Help  in  Fight  Against  SAfe 

Consortium  plans  trial  ofnational  network  that  I 
could  alert  officials  to  epidemics,  bioattacks 


A  consortium  of  public  health 
agencies  and  health  care  com¬ 
panies  in  June  plans  to  launch 
a  three-month  test  of  a  data 
collection  and  distribution 
network  that’s  designed  to  act 
as  an  automated  early-warning 
system  in  the  event  of  epi¬ 
demics  like  the  global  spread 
of  the  SARS  virus. 

The  Web-based  network 
could  also  alert  health  care 
officials  to  possible  bioterror- 
ist  attacks,  said  Janet  Marchi- 
broda.  CEO  of  the  eHealth 
Initiative  Inc.  consortium. 
Marchibroda  confirmed  the 
basic  details  of  the  trial  run 


I  plans  were  disclosed  earlier 
I  this  month.  HP  would  take 
over  management  of  the 
I  bank's  networks  and  its  desk¬ 
top,  midrange  and  mainframe 
systems  as  part  of  the  deal, 
which  is  expected  to  be  worth 
$600  million  over  seven  years. 

The  planned  agreement 
would  also  include  the  trans¬ 
fer  to  HP  of  about  500  work¬ 
ers  from  the  bank’s  IT  arm, 
where  roughly  one-third  of- 
the  employees  are  members 
of  the  Irish  Bank  Officials’ 
Association. 

On  April  16,  two  days  after 
Strike  Threat,  page  59 


that’s  being  planned  by  the 
Washington-based  group, 
which  has  about  115  members, 
including  major  vendors  of 
health  care  IT  systems. 

Some  cities,  including  New 
York,  developed  local  systems 
similar  to  the  one  envisioned 
by  eHealth  in  the  wake  of  the 
Sept.  U  terrorist  attacks.  But 
the  U.S.  lacks  a  cohesive  and 
standards-based  network  that 
can  be  used  natioovride,  ac¬ 
cording  to  Marchibroda. 

She  said  nine  hospitals 
across  the  U.S.  plan  to  take 
part  in  the  test  of  eHealth’s 
proposed  National  Healthcare 
Collaborative  Network,  along 


•  HH|i  hi-.Otti  (iff"  •cii’.  rt.ili  > 
fo*  Mlien'  LULild 

DC  Uip'-.  i-.l  •.  SARS 

or  biOltircKiSt  dtl.i 


with  local,  state  and  federal 
health  agencies  that  she  de¬ 
clined  to  identify.  Marchibro¬ 
da  also  wouldn't  name  the  IT 
vendors  that  will  participate, 
or  comment  about  the  tech- 

Heaifh  Net,  page  59 


> 
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IN  AN  UNRELENTING  PUSHtolow- 
er  costs,  more  companies  are  lapping 
cheaper  offshore  labor  to  handle  rou¬ 
tine  IT  tasks  such  as  application  main¬ 
tenance.  new  software  devetopment 
and  even  Inlrastnjcture  support.  The 
net  result:  fewer  and  fewer  IT  jobs  for 
U.S.  workers,  whose  livelihoods  are  in 
serious  jeopardy.  PAGE  39 
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HP  Compaq.  One  Year  Later 


A  Work  in  Progress 
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IKVfn  Hewleft-Packard's 

acquisition  of  Compaq 
Computer  one  year 
ago  next  week  has 
pleased  some  users 
and  angered  odters.  High-end  system 
operators  say  the  merger  has  yielded 
a  welcome  focus  on  critical  systems. 
But  users  of  midrange  and  low-end 
equipment  say  they're  feeling  ignored 
Patrick  Thibodeau  reports  on 

MoreOnKne 

HP  has  bolstered  Its  services 
busirress,  but  It's  still  no  IBM 

OQiKkLM  38022 

wwwxamputonmrid.cam 


How  would  you 
characterize  your 
overall  experience 
with  HP  since 
the  merger? 
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Bank’s  IT  Workers  Threaten 
Strike  Over  Outsourcing  Deal 


L'nion  seeks  role  in 
Ikink  ot'la'land's 
neuotiationswithlll’ 


Unionized  members  of  the 
Bank  of  Ireland's  IT  depart¬ 
ment  are  threatening  t»>  jrt*  i»n 
strike  if  they  aren’t  involved  in 
Hnal  nejrotiations  with  Hew- 
IcK-l’ackard  Co.  on  a  proposed 
outsoureing  deal. 

Officials  from  Dublin-based 
Bank  of  Ireland  and  the  union 
that  represents  its  I  T  workers 
met  last  Tuesday  for  their  first 
talks  since  the  outsourcing: 
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New  Health  Data  Net  May 
Help  in  Fight  Against  SARS 


( AHisortiiini  plans  trial  of  national  network  that 
could  alert  ofl'ieials  to  epidemies.  bioattaeks  j 


A  consortium  of  public  health 
agencies  and  health  care  com¬ 
panies  in  lunc  plans  to  launch 
a  three-month  test  t»fa  data 
collection  and  distribution 
network  that's  designed  ii'  act 
as  an  automated  early-warning 
s\-siem  in  the  event  of  epi¬ 
demics  like  the  global  spread 
of  the  S.ARS  virus. 

The  Web-based  network 
could  also  alert  health  care 
officials  to  pos.sible  bioterror¬ 
ist  attacks,  said  lanet  Marchi- 
broda.  CKO  of  the  eHealth 
Initiative  Inc.  consortium. 
Marchibroda  ctmfirmed  the 
basic  details  of  the  trial  run 


I  plans  were  disclosed  earlier 
,  this  month.  HP  would  take  j 

»>ver  management  of  the 
!  bank's  networks  and  its  desk¬ 
top.  midrange  and  mainframe 
,  systems  as  part  of  the  deal. 

I  which  is  expected  to  be  wttrth 
I  S6<)0  million  over  seven  years. 

The  planned  agreement  I 

would  also  include  the  trans¬ 
fer  to  HP  of  abi>ut  5(H)  work¬ 
ers  from  the  bank's  IT  arm. 

I  where  roughly  one-third  of 
I  the  employees  are  members 
j  of  the  Irish  Bank  Officials' 

I  AsstK'iation. 

I  On  April  16.  tw  o  days  after 
i  .Strike  Threuf.  page  5*7 


that's  being  planned  by  the 
Washington-based  group, 
which  has  aN>ui  115  members, 
including  mjj»)r  vend«irs  of 
health  care  IT'  systems. 

Some  cities,  including  New 
Yiwk.  developed  h»eal  systems 
similar  to  the  one  envisioned 
b\  eHealth  in  the  uake  t>fihe 
Sept.  11  terrorist  attacks,  But 
the  U.S.  lacks  a  cohesive  and 
standards-based  network  that 
can  be  used  nationwide,  ac¬ 
cording  to  Marchibroda. 

She  said  nine  hospitals 
across  the  L'.S,  plan  ti>  take 
part  in  the  test  of  eHealth's 
propttsed  Natumal  Healthcare 
C.ollabiirative  Not\\«*rk.  along 


The  National  Healthcare 
Collaborative  Network 
pilot  test  will 

■  IKc  M«nd4'd»-batc<l  srs 
tens  1o  mtne  efneryency  room 
dau  and  trammit  infofmation 
to  public  health  apc/Kics 

■  Support  etectronu.  data  ei- 
chanpe  standards  rnandaled  by 
Ihp  federal  government 

■  Helo  health  officials  watch 
for  patient  symptoms  that  could 
be  signs  of  epidemics  like  SARS 
or  bwterTorist  attacks 


with  local,  state  and  federal 
health  agencies  that  she  de¬ 
clined  to  identify.  Marchibro¬ 
da  also  w  ouldn't  name  the  1 1 
vendtrrs  that  w  ill  participate, 
or  comment  about  the  iceh- 
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\\i  AN  UNRELENTING  PUSH  to  low¬ 
er  costs,  owe  companies  are  lapping 
cheaper  offshore  latror  to  handle  rou- 
line  IT  tasks  such  as  application  main¬ 
tenance.  new  software  devetopmenl 
and  even  inirastructure  support.  The 
net  result:  fewer  and  fewer  h  jobs  lor 
U.S.  workers,  whose  livelihoods  are  in 
serious  jeopardy. 


Introducing  Microsoft  Windows  Server  2003.  Do  more  with  less. 
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■ 'T'''' '  Software  for  the  Agile  Business. 

London  Stock  Efichange 


Microsoft 


Larger  projects,  higher  goals,  greater  responsibility. 


Windows  Server  2003 


Your  busiflW 
Your  needs 


Your  choice 


It's  high  time  someone  in  the  softwore  industry  started  listening  to  your  needs.  And  standing  up  for  your  rights.  Like  the  right  to  have 
month-to-month  licensing.  And  the  right  to  no  upfront  poyments.  That's  why  we  offer  FlexSelect  Licensing'^  to  oil  our  custorr^ers.  This 
nevolutionory  opprooch  to  licensir>g  is  bosed  on  doing  business  on  your  terms,  not  ours.  So  you  can  hove  just  the  software  you  need, 
just  when  you  need  it.  Check  it  out  todoy.  ArxJ  find  out  how  FlexSelect  Licensing  is  raising  more  than  just  eyebrows  in  the  software 
industry.  It's  raising  standards.  ca.com/flexselect 


Introducing  FlexSelect  Licensing”  Computer  Associates® 
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E-Business  So  Far 

In  the  Manaoement  section;  in 

their  new  book  on  e-business,  two 
authors  from  the  Wharton  School 
analyze  why  some  Internet  ventures 
e  profitable  while  others  failed. 

e46 


Windows  Server  2003: 

Early  Users  Take  the  lounge 

In  the  Technolooy  section:  Some  users  couldn't  wait  for 
Microsoft's  long-delayed  Windows  Server  2003.  Four  orga¬ 
nizations  say  they’ve  already  realized  benefits  from  migrat¬ 
ing  to  the  new  operating  system,  but  they  also  expended 
many  months  of  eflbn  to  make  sure  they  did.  Page  25 
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4  Intel  promises  64-bit  Itanium 
chips  that  will  boost  32 -bit 
application  performance. 

4  IBM  is  shippinQ  the  upgraded 
WebSphere  application  server 
for  z/OS  and  introducing  a 
mainliame-style  pricing  model. 

5  Networld^lnterop  opens  this 
week,  amid  optimism  that's 
surprising,  given  that  there 
will  be  half  as  many  exhibitors 
as  there  were  last  year. 

5  Microsoft  pits  SQL  Server 
2000  Enterprise  Edition 
against  Unix-based  systems. 

8  The  Homeland  Security  E)e- 
partmenfs  leadership  change 
raises  questions  about  its 
effectiveness  in  the  area  of 
cybersecurity. 

to  Regulations  like  HIPAA  create 
a  dangerous  gap  between  legal 
requirements  and  the  techni¬ 
cal  means  of  compliance. 

12  More  companies  are  using 
disk  arrays  for  secondary 
stor^e.  a  recent  study  found. 

12  Business  Obiects*  upgraded 
data  analysis  tool  includes 
interface  changes  and  tighter 
integration  capabilities. 

16  Microsoft's  server  VP  talks 
about  the  competition  await¬ 
ing  Windows  Server  2003. 


28  VPNs  Made  Easy.  With  SSL 
virtual  private  networks,  ac¬ 
cessing  Web-enabled  applica¬ 
tions  is  as  easy  as  launching  a 
browser,  but  you'll  still  need 
client  software  for  other  ap¬ 
plications. 

30  QuickStudy;  Blogs.  This 
week's  tutorial  looks  at  web¬ 
logs  —  Web  sites  where  peo¬ 
ple  record  their  opinions  and 
comments  from  others,  with 
links  to  other  Web  resources. 

32  Security  Manager's  Journal: 
Merger  Security  Hinges  on 
Gateway  Appliance.  An  inte¬ 
grated  security  gateway  appli¬ 
ance  provides  interim  access 
between  Mathias  Thurman’s 
firm  and  an  acquisition  with¬ 
out  compromising  security. 

MANA6EMENT 

39  Exporting  IT  Jobs.  Yours 
could  very  weU  be  the 
next  one  to  go  o6&hore. 

42  There*s  More  to  Consider 
Than  Ctioaper  Labor. 

You  should  examine  all 
the  risks  of  outsourcing 
overseas,  experts  warn. 

44  Steal  This  Idea:  And  the  Win¬ 
ner  Is  . . .  Southern  California 
Edison  rewards  IT  excellence 
beyond  the  walls  of  its  IT  de¬ 
partment. 

50  Foilow-up;  Tyson  Integrates 
IT,  Cuts  Costs  After  Merger. 

Tyson  Foods  has  finished  one 
phase  of  its  massive  IT  proj¬ 
ect  affer  acquiring  IBP. 


20  Patricia  Keefe  discusses  the 
current  sea  change  in  the  IT 
industry  and  suggests  issues 
to  focus  on  while  gearing  up 
for  the  next  evolution  of  IT 

20  Pimm  Fox  says  that  Web  ser¬ 
vices  will  finally  give  IT  some 
security'  and  provisioning  ca¬ 
pabilities.  now  that  the  Ser¬ 
vice  Provisioning  Markup 
Language  has  arrived.  And  it's 
about  time. 

21  Thornton  May  urges  IT  lead¬ 
ers  to  push  ahead  with  proj¬ 
ects  that  solve  companies' 
desperate  need  for  real-time 
demand-  and  portfolio-man¬ 
agement  technologies. 

34  Robert  L.  Mitchell  predicts 
that  technolog>‘  convergence 
is  likely  to  force  IT  staffers 
into  unexpected  new  roles. 

48  Peer  to  Peers:  Donald  Finley 
writes  that  IT  professionals 
are  watching  job  opportuni¬ 
ties  fade  away,  as  companies 
like  Microsoft  and  GE  set  up 
IT  shops  overseas  and  the 
economy  remains  slow. 

60  Frankly  Speaking;  Frank 
Hayes  gives  a  refresher  course 
in  how  to  screw  up  and  even 
offers  a  cheat  sheet  of  13  ideas 
—  in  case  >-ou‘ve  forgotten 
how. 
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Control  Ybur  Company's 
Mofafe  Devices 

How  do  you  get  and  keep  control  of  the 
plethora  of  mobile  devices  pervading  your 
company?  Joan  Herbig.  CEO  of  XcelleNet, 
has  a  few  ideas.  O  QuiddJnk  37959 


What  Do  Ybu  Think 
About  the  Future  of  n? 

Read  Patricia  Keefe's  editorial  on  page  20, 
and  then  head  to  our  onlme  forum  to  share 
your  opinions  and  read  what  others  have 
tosay.OQuickiM(a3070 

An  Introduction  to  Arrays 

DEVELOPMENT :  Get  an  overview  on  how  to 
use  arrays  in  PHP.  O  QuiefcUnk  37936 

Hands  Ore  Apple  Remote  Desktop 

MAC:  A  new  venkm  of  Apple  Remote  Desk¬ 
top  is  ouL  and  Hunter  College's  Yuval 
Kossovsky  offers  a  hands-on  view  of  what 
the  application  has  to  offer  enterprise  users. 
OQuidiUM(A3060 

What's  BGP  Got  to  Do 
with  bitarnet  secraity? 

SECURITY:  Columnist  Marcia  ].  ^Alison  takes 
a  close  look  at  the  risks  of  the  Border  Gate¬ 
way  Protocol  and  what  can  be  done  to  secure 
this  critical  Internet  protocol 

0(MdiLMt  37750 


Wsblogs 

See  editors’  picks  of  interesting  content  from 
around  the  Web.  <1  QiMlMia3080 
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E-Business  So  Far 

In  the  Management  section:  in 

their  new  book  on  e-business,  two 
authors  from  the  Wharton  School 
analyze  why  some  Internet  ventures 
were  profitable  while  others  failed. 

Page  46 


Windows  Server  2003: 

Early  Users  Take  the  lounge 

In  the  Technology  section:  Some  users  eouiJn  t  w.tu  for 

Microsoft's  l\)n|t-Jelj\ed  Windows  Serxer  four  v*re.t- 
nizations  sav  thex  ve  already  realized  K-nefiis  from  mittrat- 
ine  to  the  new  operating!  sx  stem,  but  thex  also  expended 
many  mimths  of  eff«*rt  to  make  sure  thex  did  Page  25 
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On  the  first  anniversary 
of  the  HP/Compaq  merger, 
users  weigh  in  on  the  com¬ 
pany’s  performance.  PAGE  6 

1  Intel  promises  64-bit  Itanium 
chips  that  will  boost  32-bit 
application  performance. 

I  IBM  is  shipping  the  upgraded 
WebSphere  application  server 
for  z/OS  and  introducing  a 
mainframe-style  pricing  model. 

Networld*lnterop  opens  this 
week,  amid  optimism  chat's 
surprising,  given  that  there 
will  be  half  as  many  exhibitors 
as  there  were  last  year. 

5  Microsoft  pits  SQL  Server 
2000  Enterprise  Edition 
against  Unix-based  systems. 

The  Homeland  Security  De¬ 
partment’s  leadership  change 
raises  questions  about  its 
effectiveness  in  the  area  of 
cybersocurity. 

Regulations  like  HIPAA  create 
a  dangerous  gap  betxveen  legal 
requirements  and  the  techni¬ 
cal  means  of  compliance. 

’?  More  companies  are  using 
disk  arrays  for  secondar>’ 
storage,  a  recent  study  found. 

12  Business  Obiects' upgraded 
data  analy'sis  tool  includes 
interface  changes  and  tighter 
integration  capabilities. 

16  Microsoft's  server  VP  talks 
about  the  competition  await¬ 
ing  Windows  Server  2003. 


TECHNOLOGY 

28  VPNs  Made  Easy.  With  SSL 
virtual  private  networks,  ac¬ 
cessing  Web-enablod  applica¬ 
tions  is  as  easy  as  launching  a 
browser,  but  you'll  still  need 
client  software  for  other  ap¬ 
plications. 

30  QuickStudy:  Blogs.  This 
week’s  tutorial  looks  at  xveb- 
logs  —  Web  sites  where  peo¬ 
ple  record  their  opinions  and 
comments  from  others,  with 
links  to  other  Web  resources. 

32  Security  Manager's  Journal; 
Merger  Security  Hinges  on 
Gateway  Appliance.  An  inte¬ 
grated  security  gatexvay  appli¬ 
ance  provides  interim  access 
between  Mathias  Thurman's 
firm  and  an  acquisition  with¬ 
out  compromising  security. 

MANAGEMENT 

39  Exporting  IT  Jobs.  Yours 
couid  very  well  be  the 
next  one  to  go  offshore. 

42  There’s  More  to  Consider 
Than  Cheaper  Labor. 

You  should  examine  all 
the  risks  of  outsourcing 
overseas,  experts  warn. 

44  Steal  This  Idea;  And  the  Win¬ 
ner  Is . .  .  Southern  California 
Edison  rexvards  IT  excellence 
beyond  the  walls  of  its  IT  de¬ 
partment. 

50  Follow-up:  Tyson  Integrates 
IT.  Cuts  Costs  After  Merger. 

Tyson  Foods  has  finished  one 
phase  of  its  massive  IT  proj¬ 
ect  after  acquiring  IBP. 


OPINION 


20  Patricia  Keefe  discusse.s  the 
current  sea  change  in  the  IT 
industry'  and  suggests  issues 
to  focus  on  while  gearing  up 
for  the  ne.xt  exoluiion  x»f  IT. 

20  Pimm  Fox  says  that  Web  ser¬ 
vices  will  rmally  give  IT  some 
security  and  provisioning  ca¬ 
pabilities.  noxv  that  the  Ser¬ 
vice  Provisioning  Markup 
Language  has  arrived.  And  it's 
about  time. 

21  Thornton  May  urges  IT  lead¬ 
ers  to  push  ahead  with  proj¬ 
ects  that  solve  companies' 
desperate  need  for  real-time 
demand-  and  portfolio-man¬ 
agement  technologies. 

34  Robert  L.  Mitchell  predicts 

that  lechnok'gx  convergence 
is  likely  to  force  IT  staffers 
into  unexpected  new  roles. 

48  Peel  to  Peers  Donald  Finley 
xvrites  that  IT  professionals 
are  watching  job  opportuni¬ 
ties  fade  away,  as  companies 
like  Microsoft  and  G£  set  up 
IT  shops  overseas  and  the 
economy  remains  sltixv. 

60  Frankly  Speaking.  Frank 
Hayes  gives  a  refresher  course 
in  hoxv  to  screw  up  and  even 
offers  a  cheat  sheet  of  13  ideas 
—  in  case  you've  forgotten 
how. 
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Control  Your  Company's 
Mobile  Devices 

How  do  you  get  and  keep  cvmtnd  of  the 
plethora  of  mobile  devices  pervading  your 
company?  loan  Herbig.  CEO  of  XcelleNet . 
has  a  feu  ideas.  O  QuickUnk  37959 


What  Do  You  Think 
About  the  Future  of  n? 

Read  Patricia  Keefe's  editorial  on  page  20. 
and  then  head  to  our  online  forum  to  share 
your  opinions  and  read  what  others  have 
to  say.  O  QuickLink  >3070 

An  Introduction  to  Arrays 

DEVELOPMENT  Get  an  overview  on  hoxv  to 
use  arrays  in  PHP.  O  QuickiJnk  37936 

Hands  Dn:  Apple  Remote  Desktop 

MAC:  A  new  version  of  Apple  Remote  Desk¬ 
top  is  out.  and  Hunter  College's  Yux'al 
Kossovsky  offers  a  hands-on  view  of  what 
the  application  has  to  offer  enterprise  users. 

O0uickUnka3060 

What's  BGP  Got  to  Do 
With  Internet  security? 

oECURITY;  Columnist  Marcia  |.  Wilson  takes 
a  close  look  at  the  risks  of  the  Border  Gate¬ 
way  Protwrol  and  what  can  be  done  to  secure 
this  critical  Internet  protocol. 

OQwckUnk  37750 

Weblogs 

See  editors'  picks  of  interesting  content  fn>m 
around  the  Web.  O  0uickLlnk«3090 
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Microsoft  Extends 
Office  2003  Beta 

Micnwoft  Corp.  sM  that  after 
getting  feeAadi  from  earty  users, 
it  plans  to  rolaase  a  “refresh"  of 
the  bita*tast  vonrion  of  Ms  Offka 
2003  software  befora  starting 
conwwwlel  shipments.  That  wW 
(May  the  seheduM  launch  of  the 
desl^  appicatiafts  upgrade 
from  June  to  sometime  In  the 
third  quarter.  A  Mkroaofl  official 
said  tiM  company  it  addroaing 
“soma  minor  lamas  ttiet  can  im* 
pact  customer  aatisfoction." 


Secteity  Hole  Found 
To  Affect  NT  4.0 

Mcraaolt  afeo  said  tftat  systems 
running  Wlndomi  IIT4.0ars«d* 
raraUe  to  a  sofhmrs  fisw  used  to 
attach  Windoem  2000  sorvars  in 
Mareh.  Whan  h  first  warned  of  the 
prehtem.  Mcroaofl  said  only  Wht* 
doom  2000  wns  rifectod  (Quicli- 
Unh  37224).  Bot  the  flaw  is  in  a 
core  component  in  both  oporating 
systama,  H  said  lam  waah. 


Cisco  Warns  of 
Flaw  in  Software 

CisGo  Syslama  Inc.  waraod  of  a 
buffar  ovamai  flaw  bi  tba  Win* 
down  warsion  of  ihi  Sacura  Accoss 
Central  Sermr  aoftwaro,  wfiich 
managai  accaaa  to  tha  company’s 
roulars,  swHehas  and  otiwr  de* 
vicas.  Tha  vidnarahifity  could  be 

anaeks  er  pMn  systam  adminis* 
trator  acctas  to  davicos.  Cisco 
said.  Patches  are  available  on 
Cisee'sllMsNe. 


Lucent  CEO  Wfl 
Manage  Operations 

bmant  lechaologiea  Inc.  In  Mur¬ 
ray  M.  HJ..  announcsd  that 
Chairman  and  CG)  PahMa  Russo 
wB  taha  ovor  dar*f»^  managt- 
mant  duttas  from  Bob  Heldar,  who 
wfl  stop  down  as  ddef  operating 
officer  tfds  tunmar.  fhmao  said 
aha  ‘’dseidad  that  It  wae  the  right 
time  la  coneoldele  our  top  man¬ 
agement  etructon. 


Intel  Moves  to  Boost 
Itanium’s  32-bit  Power 


Develops  new  software  to  work  with 
the  next  version  of  its  (>4-bit  pRxressor 


BY  TOGO  n.  WEISS 

NTEt  CORT.  last  week  said 
the  next  version  of  its  64* 
bit  Itanium  2  chip  will 
come  with  new  software 
designed  to  improve  the  per¬ 
formance  of  32-bil  applications 
running  on  Itanium  2  systems. 

Tbe  new  chip,  code-named 
Madison,  is  scheduled  to  ship 
in  the  second  half  of  the  year, 
said  Intel  spokesman  Scott 
McLaughlin.  He  added  that 
the  IA-32  software  execution 
layer  will  give  32-bit  applica¬ 
tions  runnii^  on  Itanium  2- 
based  servers  performance  on 
par  vkith  that  of  systems  built 
around  the  l.S-GHz  version  of 
Intel's  Xeon  MP  processor. 
Pieces  of  the  sofhvare  will  be 
installed  on  the  chip  itself  and 
as  part  of  operating  systems. 

The  disclosure  of  Intel's 


software  plans  coincided  with 
chip  rival  Advanced  Micro  De¬ 
vices  Inc.'s  announcement  of 
its  (>4-bit  Optcron  server  proc¬ 
essor.  which  also  was  de¬ 
signed  to  run  32-bit  applica¬ 
tions  at  speeds  comparable  to 
their  performance  on  existing 
systems  (QuickLink  37872]. 

McLaughlin  said  the  lA-32 
technology  is  part  of  a  “natur¬ 
al  evolution  of  32-bit  support 
on  Itanium.*’  The  software  ex¬ 
ecution  layer  has  been  under 
development  for  several  years 
and  Is  currently  undergoing 
validation  testing,  he  said. 

But  McLaughlin  acknowl¬ 
edged  that  Intel  has  heard 
complaints  about  32-bit  appli¬ 
cation  performance  on  Itani¬ 
um-based  systems. 

Although  Intel  officials  ac¬ 
knowledge  that  the  Itanium 


biteTs  32-bit 
Upgrade  Plan  for 
itwium2 

■  New  execution  software  de¬ 
signed  10  speed  up  32*bit  appli¬ 
cations  wiH  be  offered  with  the 
next  version  of  the  processor, 
which  is  due  later  this  ynr. 


■  The  software  wdt  providt  per¬ 
formance  equhnlsnt  to  what 
users  can  get  on  existing  systems 
equipped  with  Intel's  15-GHz 
MP  chips. 


processors  already  include 
built-in  support  for  running 
32'bit  applications,  real-world 
performance  levels  have  been 
less  than  awe-inspiring,  said 
Rich  Partridge,  an  analyst  at 
D.H.  Brown  Associates  Irur.  in 
Port  Chester.  N.Y. 

By  announcing  the  software 
plans,  Intel  is  moving  “to  ad¬ 
dress  what  is  perceived  to  be  a 


IBM  to  Ship  WebSphere  5.0 
For  2/OS,  Alter  License  Han 


Pricing  will  switch 
to  maintrame’s 
value-unit  model 

BY  CAROL  SLIWA 

IBM  this  week  will  ship  a  new 
version  of  its  WebSphere  ap¬ 
plication  server  for  the  z/OS 
operating  system  and  intro¬ 
duce  a  new  pricing  model  for 
the  product. 

The  prior  version  of  Web¬ 
Sphere  for  z/OS  had  been 
priced  at  a  fixed  S3S,000  per 
processor.  Tbe  new  edition 
will  adopt  the  value-unit  pric¬ 
ing  model  that’s  familiar  to 
IBM's  mainframe  customers, 
said  David  Chew,  director  of 
WebSphere  enterprise  trans¬ 
action  systems. 

"^c  changed  for  the  zSeries 
because  these  processors  tend 
to  be  rather  big  and  powerful. 


and  customers  are  used  to  a 
pricing  model  (hat  is  more 
akin  with  their  hardware 
structure,”  Chew  said. 

Value  units  are  calculated 
based  on  tbe  processing  per¬ 
formance  of  the  zSeries  hard¬ 
ware.  The  capacity  of  the 
mainframe  is  measured  in  mil¬ 
lions  of  service  units. 

Customers  purchase  licens¬ 
es  based  on  the  number  of 
processors  they  actually  use. 
but  those  with  older  zSeries 
models  pay  less  per  processor, 
since  their  machines  perform 
at  lower  levels  than  the  newer 
models.  WebSphere  has  a  tool 
that's  designed  to  help  cus¬ 
tomers  determine  how  many 
value  units  they  need  based  on 
their  hardware. 

Marcy  Nechemias,  IBM's 
marketing  manager  of  Web¬ 
Sphere  for  z/OS.  said  existing 


users  of  WebSphere  for  z/OS 
will  see  no  change  in  cost. 
Their  inventory  will  simply 
show  the  correct  number  of 
value  units  instead  of  “en¬ 
gines.'*  or  processors. 

"It’s  just  a  conversion  from 
one  metric  to  another."  said 
Nechemias. 

New  customers  who  buy 
WebSphere  for  z/OS  for  fewer 
than  three  engines  and  notice 
that  tbe  old  per-proces$or 
pricing  model  might  have 
woiked  out  to  be  cheaper  will 
find  an  entry-level  option  to 
get  started  at  a  lower  cost,  ac¬ 
cording  to  Nechemias. 

"We  want  to  see  WebSphere 
become  a  pervasive  prodttet 
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problem,"  Partridge  said.  The 
perception  is  that  tbe  current 
hardware  (support]  for  32-btt 
applications  on  Itanium  2 
doesn’t  give  full  performance." 

That  has  opened  up  a  poten¬ 
tial  marketing  opportunity  for 
Sunnyvale.  Calif. -based  AMD. 
IBM  last  week  said  it  plans  to 
ship  Optcron-based  systems 
later  this  year,  and  AMD's  new 
chip  also  drew  promises  of  op¬ 
erating  system  support  from 
Microsoft  Corp.,  Red  Hat  Inc. 
and  SuSE  Linux  AG. 

Charles  King,  an  analyst  at 
nte  Sageza  Group  Inc.  in 
Mountain  View.  <^if..  said  he 
thinks  Intel  will  be  seen  as  cry¬ 
ing  to  play  catch-up  with  AMD 
on  32-bit  application  support 
in  the  wake  of  the  Opteron 
launch.  “That  probably  woke 
them  up  a  little  bit.”  King  said. 

Most  users  have  been  telling 
Intel  officials  that  they  plan  to 
move  to  64'bit  applications 
when  they  install  Itanium- 
based  systems,  McLaughlin 
said.  But  a  major  reason  for  in¬ 
corporating  the  new  software 
layer  is  to  let  companies  con¬ 
tinue  to  use  32-bit  applications 
that  haven't  yet  been  ported  to 
64-bit  systems,  he  added.  I 


on  the  mainframe  platform." 
Nechemias  said.  She  added 
that  IBM  is  trying  to  ensure 
that  customers  will  see  a  low¬ 
er  cost  for  incremental  growth 
once  they  start  using  Web¬ 
Sphere  for  z/OS. 

Java  Support 

WebSphere  5.0  is  certified  for 
lava  2  Enterprise  Edition 
()2E£)  IJ  technologies  and 
also  supports  more  than  half 
the  |2EE  1.4  technologies  that 
arc  due  to  be  finalized  later 
this  year,  according  to  IBM. 
The  version  for  z/OS  is  de¬ 
signed  to  lake  advantage  of 
many  zSeries  capabilities,  in¬ 
cluding  its  high  reliability, 
scalability  and  security. 

Stephen  O'Grady,  an  analyst 
at  RedMonk  in  Hollis,  NH^ 
said  that  IBM  has  worked  hard 
to  reduce  the  differences  be¬ 
tween  versions  of  WebSphere 
and  that  tbe  job  of  porting  ap¬ 
plications  from  smaller  boxes 
to  the  mainframe  should  be 
easier  with  WebSphere  5.0. 1 
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Networld+lnterop  Optimism 
Prevaiis  Despite  Downturn 


Vendor  count  half  that  of  last  year’s  show 


BV  MATT  HAMBLEN 

NetWorld+Interop  opens  this 
week  in  Las  Vegas  amid  an 
optimism  that  belies  the  de* 
pressed  state  of  the  economy, 
ongoing  travel  concerns  and 
the  fact  that  there  are  fewer 
than  half  as  many  exhibitors 
this  year  as  there  were  at  last 
spring’s  event 

The  mood  is  especially  up¬ 
beat  compared  with  last  fell’s 
N-»I  in  Atlanta.  Oi^anizer 
KeyJMedia  Events  Inc.  board¬ 
ed  up  that  show  for  good  after 
key  vendors  failed  to  partici¬ 
pate.  Two  networking  shows 
per  year  was  one  too  many, 
said  Mike  Millikin.  senior  vice 
president  of  Los  Angeles- 
based  Key3Media. 

Users  said  the)'  hope  to  gain 
some  insights  into  new  tech¬ 
nologies  this  week  so  they  will 
be  ready  to  go  when  the  econ¬ 
omy  improves. 


“I  feel  pretty  optimistic 
about  the  future  of  technology, 
and  in  two  years,  you'll  see 
some  extraordinary  things,  es¬ 
pecially  with  wireless."  said 
Michael  Krone,  network  man¬ 
ager  at  The  United  Center,  a 

sports  and  enter-  _ 

tainment  venue  in 
Chicaga 
Krone  said  he 
plans  to  research 
voice-over-IP  and 
wireless  products, 

“right  there  with 


most  affordable  and  effective 
path  to  IP  convergence. 

Rick  Sloan,  telecommunica¬ 
tions  manager  at  Dollar  Tree 
Stores  Inc.,  a  chain  of 2300  re¬ 
tail  outlets  based  in  Chesa¬ 
peake.  Va.,  said  be  plans  to  hit 
seminars  and  the  show  floor 
to  expand  his  knowledge  be- 

_  vond  pure  telecom- 

ATTVESHOW  munications  tcch- 


tbe  vendors  in  front  of  my 
face.*  As  a  major  user  of  prod¬ 
ucts  from  Foundry  Networks 
Inc.  in  San  Jose.  Krone  said  be 
wants  to  compare  Foundry’s 
technology  with  that  of  Ex¬ 
treme  Networks  Inc.  in  Santa 
Clara.  Calif.,  among  others,  to 
see  which  products  offer  the 


^  .  nologies.  Slrwn 

&  online  to,  HigMIgnsol  hey  „id  Dollar  Hm- is 
announcanenls  planned  tor  ^  1? 

ta  week's  Nd  “  satisfied  user  of 

O  Quieklink  380M  gear  from  Avaya 
wwwxoinpatanMrtd.com  Inc.  in  Basking 
Ridge.  N.J..  and 


Cisco  Systems  Inc.  But  he  said 
he  doesn't  want  to  become 
“complacent"  with  his  ven¬ 
dors.  Dollar  IVee's  culture  is 
“pretty  mean  and  lean."  with 
an  emphasis  on  cost  savings, 
he  said.  “We  sell  everything 
for  a  dollar,  so  there's  not  a  lot 
of  fluff*  in  the  compan>*’5  IT 


infrastructure,  Sloan  said. 

This  week's  show  is  on  track 
to  draw  40,000  people,  match¬ 
ing  the  attendance  at  last 
year's  N*1  show  in  Las  Vegas. 
Millikin  said.  But  there  will  be 
only  260  vendors  on  the  show 
floor,  down  from  572  In  2002, 
show  officials  said. 

MCI,  formerly  WorldCom, 
may  have  the  most  ambitious 
agenda  among  the  vendors,  as 
it  tries  to  demonstrate  a  resur¬ 
gence  following  its  Chapter  U 
bankruptcy  filing.  N-I  is 
“timed  perfectly*  with  MCI’s 
completion  of  its  lOO-day  reor¬ 
ganization  plan  and  rebrand¬ 
ing  effort,  said  Ron  McMur- 
trie.  MCI's  vice  president  of 
global  branding.  MCI  will  un¬ 
veil  a  road  map  for  building  IP 
and  convergence  services  with 
the  announcement  of  a  secure 
internetworking  gateway,  said 
McMurtrie. 

Officials  of  several  large  net¬ 
working  vendors  said  N*I  is 
still  the  most  important  show 
they  attend  each  year  in  North 
America.  "N^l  is  extremeh’ 
imponant  for  us . . .  and  we 
have  been  more  selective  with 


going  to  shows  recently."  said 
Duncan  Potter,  vice  presideoi 
of  marketing  at  Extreme  Net¬ 
works.  The  company  is  pro¬ 
viding  what  Potter  called  the 
“world's  largest  temporary 
LAN"  to  serve  as  the  show's 
networking  infrastructure.  I 
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Microsoft  Releases  64-bit  SQL  Database 


Enterprise  Edition 
touted  as  Unix 
alternative 

BV  MABC  L.  SONOIMt 

Microsoft  Corp.  has  released 
a  64-bit  database  and  claims 
chat  the  new  system  features 
performance  rivaling  that  of 
Unix-based  systems  yet  offers 
greater  ease  of  use  at  a 
lower  cost. 

to  conjunction  with  the 
launch  of  Windows  Server 
2003,  Microsoft  last  week  an¬ 
nounced  Chat  it's  shipping  the 
64-bit  SQL  Server  2000  Enter¬ 
prise  EditiotL  With  the  move, 
Microsoft  follows  in  the  foot¬ 
steps  of  Oracle  Corp.  and  IBM. 
which  have  offered  64-bit  ver¬ 
sions  of  their  databases  for 
Unix  and  mainframe  systems 
for  years. 

Oracle,  meanwhile,  an¬ 
nounced  the  availability  of  a 
version  of  Onicle9i  Database 
Release  2  that’s  optimized  for 


64-bit  Windows  Server  2003. 

Microsoft's  64-bit  version  of 
its  SQL  Server  database  ^ves 
high-end  database  users  an  al¬ 
ternative  to  Unix,  said  Sheryl 
Thllis,  Microsoft's  product 
manager  for  SQL  Server.  "For 
customers  that  need  high- 
powered  computing,  this 
makes  it  attainable  without 
the  uphront  maintenance  and 
management  costs  of  Unix 
systems."  she  said. 

Tests  indicate  chat  the  data¬ 
base  will  have  S12GB  of  ad¬ 
dressable  memory,  double 


Mb's  the  same 
as  ever  with 
64-biLlt’s  a  tech¬ 
nology  in  search  of 
a  mass-market 
application. 


JAMES  OOVERNOR. 

ANALYST.  REDMONK 


what  was  available  under  32- 
bit  SQL  Server. 

Forest  Hills,  RY.-based  air¬ 
line  JetBlue  Airways  Corp.  in 
December  went  live  with  a  64- 
bii  SQL  Server  daubase  that 
supports  the  company's  fre¬ 
quent-flier  application,  said 
CIO  leff  Coh^  JetBlue  is 
building  a  64-bit  SQL  Server- 
based  data  ware¬ 
house  to  run  cus¬ 
tomer  analytics, 

Cohen  said. 

The  airline  is  cur¬ 
rently  running  32- 
bit  SQL  Server  to 
support  internal  business  ap¬ 
plications  and  an  Oracle  data¬ 
base  for  special  aviation  appli¬ 
cations.  Cohen  said  that  when 
using  the  32-bit  SQL  Server 
for  the  frequent-flier  applica¬ 
tion.  JetBlue  bad  to  ke^ 
adding  more  servers  and  proc¬ 
essors  to  maintain  perfor¬ 
mance.  With  a  64-bit  architec¬ 
ture.  the  company  was  able  to 
shrink  a  three-server  Compaq 


ProLiant  system  with  12  proc¬ 
essors  to  one  four-way 
Hewieti-Packard  Ca  server. 

“We  were  very  thrilled  by 
performance."  said  Cohen, 
who  added  that  64-bit  SQL  re¬ 
quires  only  10%  to  20%  CPU 
utilization,  as  opposed  to  as 
much  as  60%  with  32-btt  SQL 
Bui  aside  from  the  very  few 
organizations  that  have  a  need 
for  "serious  number  crunch¬ 
ing."  there  will  be  a  limited  de¬ 
mand  for  644>it 
SQL  Server,  said 
James  Governor,  an 
analyst  at  Red- 
Monk.  a  consulting 
firm  in  Hollis.  N.H. 
"it's  the  same  as 
ever  with  64-bii.  It’s  a  technol¬ 
ogy  in  search  of  a  mass-mar¬ 
ket  application.  Sixty-four  bit 
is  a  ‘nice  to  have.'  not  a  ‘need 
to  have'  in  many  cases." 

According  to  1X11115,  Micro¬ 
soft  has  commitments  from 
business  software  vendors 
Siebel  S)'8tems  loc.,  People- 
Soft  Inc  and  SAP  AC  to  opti¬ 
mize  their  software  for  die 
64-bit  version  of  SQL  Server  A 
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Postmerger  HP’s  Rating 
Differs  by  Size  of  User 


In  what  produc^services  area 
has  the  merger  yielded  the  most . . . 

...  positive  change?  ...  negative  change? 


poittw  chaoiK  S2%  wgitfw  diaapK  83% 

Notv  ^tcenlages  may  not  add  uo  to  tOCKV  due  to  tounding 


(tnc  yo;ir  hitcr. 

I  ll’s  union  w  ith 
t  ompati  draw  s 
raws,  criticism 

BV  PATRICK  THIBOOCAU 

tine  u  jr  jtur  Howlett 
Packard  t'o  s  acquisition  «'!' 
t  ompjq  tiompuier  (.org .  user 
opininn  jhi'Ul  the  impact  anvf 
benefits  t>l'  the  merger  is  de¬ 
cidedly  mi.\cd. 

High-end  users,  such  as 
Steven  Kirker.  systems  admin¬ 
istrator  tor  the  .iuii'mated  teller 
machine  system  at  Huntington 
National  Bank  in  Columbus. 
Dhiiv  said  he  has  seen  a  big  im¬ 
provement  in  suppi»n  t«»i  the 
NitnSiop  fault-tolerant  com¬ 
puter  line  which  Compaq  ac¬ 
quired  in  when  it  bv»ughi 
Tandem  Computers  Inc. 

Beiore  the  merger.  Compaq 
would  send  representatives 

ho  couldn't  even  spell  Tan¬ 
dem.”  he  said.  ‘Now  it  seems 
like  they  concentrate  on  us  a 
little  bit  more." 

But  at  Valley  Presbyterian 
H»*spital  in  Van  Nuys. 
it'.s  a  much  different  siorv.  HP 


Pan  of  HFs  poslmerget  strategy 
includes  moving  all  ol  its  high- 
end  systems  to  Intel's  Itanium 
chiD  It  will  be  a  l^hy  process. 

Only  3.000  iUtnium  servers 
were  shipped  worldwide  in  the 
fourth  quarter  last  year,  according 
to  iOC  in  FrafTMogham  Mass 
'fftal's  out  of  roughly  t  million 
servers  shipped  during  the  period 

But  HP's  product  strategy  is 
gaming  steam.  Last  week,  the 
company  announced  bench¬ 
marks  by  the  Transaction  n»rfor- 
mance  Processing  Council 
fTPPC).  an  indeowdenl.  non¬ 
profit  testing  group  in  San  Jose, 
for  Its  planned  Superdome  server. 
The  server  will  run  the  upgraded 


"m.ide  .1  lot  of  eh.inges  \\  iih 
<*tn  t.ilkiiig  t«»  cuMumers.  .mJ 
lhe\  used  t«'  be  re.ilK  go<'J 
.iK'Ul  talking  lo  their  eiis- 
lumer-s.'  viiJ  seiiiur  progr.im 
mer  analyst  t^iiherine  linen, 
whu's  in  charge  of  the  hospi¬ 
tal's  HP  .'<K)0  minicomputer, 
which  is  being  phased  out. 

The  merger  meant  the  i-nd 
««r'  HP's  \'eelra  deskliip  line,  on  | 
which  rhe  hospital  had  stan- 
dardi2ed.  Ihat  move.  top  of 
a  premerger  decision  to  end 
HP.^lHKl  support  in  'OOr>.  has 
I  itten  rviiled.  ‘How  many 
things  are  we  going  to  have  to 
replace  here?"  she  s.iid.  noting 
that  it  will  cost  the  h«>spital 
about  SI  tniliion  to  replace  the 
HP  JikKi. 

Strategy  Still  Sketchy 

HP’s  enterprise  strategy  is  a 
Work  in  prttgress.  Immediately 
following  the  merger,  the  com¬ 
pany  relea.scd  road  maps  for 
key  products.  But  questions 
persist,  and  the  company 
doesn’t  seem  to  be  Jtiing  a 
uniform  i»>b  in  reaching  users 

Users  with  clout  are  getting 
answers,  lor  example.  .-\ndi 


Itanium  2  (vocessor.  code-named 
Madison,  with  a  Sd-bit  version  of 
Windows  Terminal  Server. 

Rich  Partridge,  an  analyst  al 
O  K  Brown  Aaoctales  Inc.  in 
Port  Chester.  PiY..  said  new 
products  typically  ship  wrthin  six 
months  of  the  benchmark  re¬ 
lease  to  comply  with  TPPC  rules. 

HP  this  month  also  announced 
a  sale  of  1.000  Itanium  2  chips  to 
BP  PLC  to  build  a  clusieied  sys¬ 
tem  running  Linux  in  BFs  seis¬ 
mic  research  facility  m  Houston 

Technical  computing  opera¬ 
tions  are  typical  early  adopters 
of  new  chips.  Keith  Gray,  man¬ 
ager  of  BPs  high-performance 
computing  center,  said  the  com- 


te.im  le.ideriit  (Ih.irhnii-.  N.(7- 
biised  B.ink  of  .•\merie.i  CInrp., 
s.iid  I  IP  is  p;iying  Jtteniion  tu 
hv-r  bee;iusc  ol  iIk-  size  of  her 
eomp.iny  und  her  role  us  niod- 
er.iior  of  the  speeiol  interest 
group  on  security  for  rhe 
ril'd  HP  NonSlop  usvTgrnup- 
NonSiop  users  h;ue  gotten 
HP  111  iigrce  to  security  im- 
provvmenis.  suid  Colemun. 

;ind  she's  optimistic  that  Ml‘ 
will  give  more  .ittention  to  the 
line.  ”1  think  that  Uompaq 
kind  of  left  it  sitting  i>ver  there 
in  the  comer."  she  said. 

Although  (lok-man  has  met 
with  lop  HP  offieials,  no  one 
has  come  knocking  on  Robert 
kothenberger’s  door  Rothetv 
berger.  director  v>f  data  center 
I  operations  at  Keystone  Mercy 
Health  Plan  in  Philadelphia 
and  chairman  of  a  regional 
I  gn»up  of  (be  .^FUDM  data 
center  association,  said  he  has 
I  yet  to  hear  from  HP  follow  ing 
I  the  merger.  "I  would  have 
'  thought  that  they'd  have  made 
I  an  effort  to  pull  together 
I  something  and  come  to  their 
'  good  eusiomers."  he  said.  HP 
is  planning  to  detail  its  enter¬ 
prise  strategy  on  May  6.  and 


pany  is  in  a  'nsK-based  busi¬ 
ness."  and  it  believes  having 
better  seismic  imaging  can  help 
control  costs  while  improving  its 
ability  to  Find  and  extract  oil. 

Mark  Melenovsky.  an  IDC  an¬ 
alyst.  said  Itanium  chip  sates  in 
technical  and  other  niche  mar¬ 
kets  could  spur  interest  in  com¬ 
mercial  application  development 
for  the  new  chip.  “Thai's  how  a 
new  platform  or  new  operating 
system  gets  started.'  he  said 
But  not  all  early  Itanium 
adopters  are  technical  users 
Forte  Inc.,  a  Milwaukee-based 
insurance  provider,  has  begun 
usmg  a  version  of  Unisys  Corp.'s 
ES7000.  a  32'way  server  that 
can  integrate  64-tkt  Itaniums 
and  the  32-bit  Xeon 
Roger  Jones,  senior  vice 


Riithenberger  said  he  hopes  it 
shows  "a  commitment  to  a 
,  unified  strategy,  w  here  I  can 
be  convinced  that  service  and 
;  support  will  be  dedicated  to 
that  strategy." 

I  HP  i.s  continuing  to  support 
'  the  OpenVMS  operating  sys- 
!  tern,  which  Ctimpaq  acquired 
,  through  its  purchase  of  Digital 
Iquipment  Corp.  in  I99B. 

Some  users  had  been  con- 
;  eerned  about  HP’s  support 
plan  for  OpenVMS  running  on 
j  VAX  .tnd  Alpha  processor  sys- 
j  terns,  since  the  company  is 
I  moving  all  of  its  high-end 
I  servers,  including  NonStop.  to 
I  Intel  Corp.'s  f»4-bit  Itanium 
'  chips.  But  HP  appears  to  have 
ameliorated  those  concerns. 

Arthur  MeClmton.  a  prinei- 
p;il  scientist  al  Mitrctek  Sys- 
tem-s  Ine..  a  Falls  Church.  Va.. 


president  and  CIO  at  Fortis.  said 
he  went  wrth  the  scalable  system 
rather  than  a  clustered  approach 
because  he  believed  the  cost 
would  be  lower.  ‘The  more  ma¬ 
chines  you  have,  the  more  you 
have  to  maintain."  he  said.  He's 
using  the  system  for  memory-in¬ 
tensive  services,  such  as  file  and 
print,  and  tor  terminal  services. 

Jones  said  the  industry  is  in  a 
chicken-or-egg  situation  with 
Itanium,  where  software  vendors 
are  reluctant  to  write  code  for 
the  64-bil  systems  without  a  de¬ 
mand  lor  it.  and  users  aren't  de¬ 
manding  the  systems  because 
there  are  no  applications.  But 
Jones  maintains  that  the  core 
systems  are  in  place  and  that 
64-bit  processing  is  inevitable. 

-  Painck  Thibodeau 


company  that  runs  U.S.  weath¬ 
er  satellites,  said  HP  recommit¬ 
ted  to  Compaq's  support  road 
map  for  VAX  and  Alpha  and 
will  continue  to  maintain  the 
system  until  2012.  That's  "what 
I  was  after.”  he  said. 

But  while  OpenVMS  will 
survive,  the  merger  is  spelling 
the  end  of  Compaq's  Tru64 
Unix  running  on  Alpha.  HP  is 
planning  two  more  releases  of 
TruM.  one  later  this  year  and 
one  next  year,  and  will  contin¬ 
ue  support  until  20U.  Cus¬ 
tomers  will  get  a  "very  long 
runway"  to  consider  migration 
options,  said  Don  Jenkins. 

HFs  director  of  operating 
environments. 

HP  is  also  integrating  key 
aspects  of  Tru64  in  its  HP-UX 
Unix  operating  sx-stem.  such  as 
its  TruCluster  Server  and  Ad¬ 
vanced  Kile  System.  But  the  de¬ 
cision  is  risky  for  HP  because  it 
w  ill  be  as  easy  for  FruM  cus- 
itimers  to  move  to  other  ven¬ 
dors'  systems  as  it  w  ill  be  to 
move  III  HP-UX.  said  Paul  Me- 
Guckin.  an  analyst  at  Gartner 
Inc.  in  Stamford.  Conn. 

The  merger  has  affected 
users  in  other  ways  as  well. 
'I'he  uncertainty,  along  with 
HP’s  .innouncements  of  lay¬ 
offs.  prompted  Dan  Barth.  C^IO 
at  Tlie  Oklahoma  Publishing 
O).  in  Oklahoma  City,  to  begin 
purchasing  servers  from  Dell 
Computer  Corp.  after  buying 
Compaq  systems  for  years. 

"We  didn't  want  to  go  through 
I  the  change  of  the  merger  and 
find  out  what  product  lines 
were  going  to  sun-ive,"  he  said. 
Barth  isn't  ruling  out  going 
with  HP  in  the  future.  But  "un¬ 
til  xve  know  better,  let’s  cau¬ 
tion  ourselves."  he  .said.  8 


(.Coleman,  the  Tandem  security 
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Postmerger  HP’s  Rating 
Differs  by  Size  of  User 


One  year  later, 
HP’s  union  with 
Compaq  draws 
raves,  criticism 


•V  MTKICK  TMISOOCAU 

One  year  after  Hewlett* 
Packard  Ca’s  acquisition  of 
Compaq  Computer  Corp..  user 
opinion  about  tbe  impact  and 
beneftts  of  tbe  merger  is  de* 
cidedly  mixed 

Higb-end  users,  such  as 
Steven  Barker,  systems  admin¬ 
istrator  for  the  autoouted  teller 
machine  system  at  Huntington 
National  Bank  in  Columbus, 
Ohio,  said  be  has  seen  a  big  im¬ 
provement  in  support  for  the 
NonStop  (ault-tolerant  com¬ 
puter  line,  which  Compaq  ac¬ 
quired  in  1^197  when  it  bought 
Tandem  Computers  Inc. 

Before  the  merger.  Compaq 
would  send  representatives 
“who  couldn't  even  spell  Tan¬ 
dem."  he  said.  “Now  it  seems 
like  they  concentrate  on  us  a 
little  bit  more." 

But  at  Valley  Presbyterian 
Hospital  in  Van  Nuys,  Calif., 
it’s  a  much  different  story.  HP 


“made  a  lot  of  changes  with¬ 
out  talking  to  customers,  and 
they  used  to  be  really  good 
about  talking  to  their  cus¬ 
tomers."  said  senior  program¬ 
mer  analyst  Catherine  Litten. 
who’s  in  charge  of  the  hospi¬ 
tal's  HP  3000  minicomputer, 
which  is  being  phased  out. 

The  merger  meant  the  end 
of  HP’s  Vectra  desktop  line,  on 
which  the  hospital  had  stan¬ 
dardized.  That  move,  on  top  of 
a  premerger  decision  to  end 
HP  3000  support  in  2006,  has 
Linen  roiled.  “How  many 
things  are  we  going  to  have  to 
replace  here?"  she  said,  noting 
that  it  will  cost  the  hospital 
about  SI  million  to  replace  the 
HP  3000. 

strategy  Still  Sketchy 

HP's  enterprise  strategy  is  a 
work  in  progress.  Immediately 
following  the  merger,  the  com¬ 
pany  released  road  maps  for 
key  products.  But  questions 
persist,  and  the  company 
doesn't  seem  to  be  doing  a 
uniform  job  in  reaching  users. 

Users  with  clout  are  getting 
answers.  For  example,  Andi 
Coleman,  the  Tandem  security 


team  leader  at  Charlotte.  N.C.- 
based  Bank  of  America  Corp.. 
said  HP  is  paying  attention  to 
her  because  of  tbe  size  of  her 
company  and  her  role  as  mod¬ 
erator  of  the  special  interest 
group  on  security  for  the 
rrUG  HP  NonStop  user  group. 

NonStop  users  have  gotten 
HP  to  agree  to  security  im¬ 
provements.  said  Coleman, 
and  she's  optimistic  that  HP 
will  give  Dxire  attention  to  the 
line.  “I  think  that  Compaq 
kind  of  left  it  sitting  over  there 
in  the  comer,"  she  said. 

Although  Coleman  has  met 
with  top  HP  officials,  no  one 
has  come  knocking  on  Roben 
Rothenberger's  door.  Rothen- 
berger,  director  of  data  center 
operations  at  Keystone  Mercy 
Health  Plan  in  Philadelphia 
and  chairman  of  a  regional 
group  of  the  AFCOM  data 
center  association,  said  he  has 
yet  to  hear  from  HP  following 
the  merger.  “1  would  have 
thought  that  they’d  have  made 
an  effort  to  pull  together 
something  and  come  to  their 
good  customers,"  he  said.  HP 
is  planning  to  detail  its  enter¬ 
prise  strategy  on  May  6.  and 


HP  Plots  Itanium  Course 


ol  HPs  postmergar  strategy 
indudesmo^alofllsMgh- 
erKl  systems  to  Inters  Hanium 
dap.  It  wi  be  a  lengthy  process. 

Ody  3.000  ttanium  servers 
were  slapped  worUiMde  in  the 
lounh  quarter  last  yeer.  acconing 
to  OC  it  Raming^  Mass. 
That  s  0(i  ot  roughly  1  ffltton 
servers  shipped  duitg  the  period 

But  HP’s  product  strategy  is 
gaining  steam.  Lad  week,  the 
company  annoutced  bench¬ 
marks  by  the  Transaction  F^rfor- 
mance  Procesaing  Council 
(TPPCXanindapendenLnon- 
proll  tesring  group  it  San  Jose, 
lor  ite  pfannad  Superdorne  server. 
The  server  wi  rut  the  upgraded 


llanun  2  processor,  codenanted 
Madson.  with  a  64-bil  version  ot 
Windows  Tetnanal  Server. 

Rich  F^ibidge.  an  analyst  at 
D.H.  Brown  Associates  Inc  it 
F^  Chester.  N.Y..  sail  new 
products  typicaly  ship  wittwt  SK 
months  oi  ^  benchmark  re¬ 
lease  to  comply  with  TPPC  rules. 

HP  ttis  month  dso  artnounced 
a  sate  of  1000  Itanium  2  dtips  to 
BPPlCtobuldacksteredsys- 
temrunrwtgUnuxhBPssets* 
me  research  tadtey  ft  Houston. 

Technical  computing  opera- 
Dons  are  typical  earty  adopters 
of  new  chips.  KeKh  Bray,  rren- 
agerof  BPs  hk^t-perlormance 
computno  center,  said  die  com¬ 


pany  is  VI  a  "risk-based  busi¬ 
ness.*  and  It  believes  having 
better  seisntic  Imaging  can  help 
control  costs  wide  intpnMng  Its 
ability  to  find  and  eadrad  ol 
M^Melenovsky.anDCan- 
alysL  said  Itanium  chip  sales  in 
technical  and  other  nk^  mar¬ 
kets  could  spur  mterest  it  com¬ 
mercial  appication  devetopmertt 
for  the  new  chip. 'That's  how  a 
new  pteHonn  or  new  operating 
system  gets  started.*  he  said. 

But  not  al  early  Itanium 
adopters  are  technical  users. 
Fbr^  tno.  a  Mthraukae-based 
iwurance  provider,  has  begin 
ustog  a  version  of  Unisys  Corp.'s 
ES7000,  a  32*way  server  that 
can  integiate  64-fait  haniutns 
and  the  32-bit  Xeoa 
Roger  Jones,  senior  vice 


Rofhenberger  said  he  hopes  it 
shows  “a  commitment  to  a 
unified  strategy,  where  I  can 
be  convinced  that  service  and 
support  will  be  dedicated  to 
that  strategy." 

HP  is  continuing  to  support 
tbe  Open  VMS  operating  sys¬ 
tem,  which  Compaq  acquired 
through  its  purchase  of  Digital 
Equipment  Corp.  in  1998. 
Some  users  had  been  con¬ 
cerned  about  HPs  support 
plan  for  OpenVMS  running  on 
VAX  and  Alpha  processor  sys¬ 
tems.  since  the  company  is 
moving  all  of  its  high-end 
servers,  including  NonStop.  to 
Intel  Corp.’s  64-bit  Itanium 
chips.  But  HP  appears  to  have 
ameliorated  those  concerns. 

Arthur  McClutton.  a  princi¬ 
pal  scientist  at  Mitretek  Sys¬ 
tems  Inc.,  a  Falls  Church.  Va.. 


presidenl  and  CX)  at  Ftnlis. 
he  went  with  the  scalable  system 
ralher  than  a  dusterad  approach 
because  he  believed  the  cost 
wotdd  be  lower.  "The  more  ma¬ 
chines  you  have,  tee  more  you 
have  to  maintain.' he  said.  He's 
usmgthesyslemformemoryHn- 
tensrve  services,  such  as  He  and 
print  and  for  terminal  services. 

Jones  said  the  industry  is  In  a 
chicken-or-«OQ  slualion  with 
Itaniiin.  where  software  vendors 
are  rehjclant  to  write  code  for 
tee  BA-bit  systems  without  a  de¬ 
mand  for  I.  and  users  aren1  de- 
mandng  tee  systems  because 
there  are  no  applications.  But 
Jones  mainiains  teat  tee  core 
systems  are  in  placs  and  that 
B^  processing  is  inewtable. 

-PdMThbaisaj 


company  that  runs  U5.  weath¬ 
er  satellites,  said  HP  recommit¬ 
ted  to  Compaq's  support  road 
map  for  VAX  and  Alpha  and 
will  continue  to  maintain  the 
system  until  2012.  That’s  '^vhat 
1  was  after,"  he  said. 

But  while  OpenVMS  will 
survive,  the  merger  is  spelling 
the  end  of  Compaq's  Tlru64 
Unix  running  on  Alpha.  HP  is 
planning  two  more  releases  of 
Tru64,  one  later  this  year  and 
one  next  year,  and  will  contin¬ 
ue  support  until  2011.  Cus¬ 
tomers  will  get  a  "very  long 
runway"  to  consider  migration 
options,  said  Don  fenkins. 

HFs  director  of  operating 
envirorunents. 

HP  is  also  integratii^  key 
aspects  of  Thi64  in  its  HP-UX 
Unix  operating  system,  such  as 
its  TruCluster  Server  and  Ad¬ 
vanced  File  System.  But  the  de¬ 
cision  is  risky  for  HP  because  it 
will  be  as  easy  for  Tnj64  cus¬ 
tomers  to  move  to  other  ven¬ 
dors’  systems  as  it  will  be  to 
move  to  HP-VX.  said  Paul  Mc- 
Guddn.  an  analyst  at  Gartner 
Inc.  in  Stamford,  Conn. 

The  merger  has  affected 
users  in  other  ways  as  weU. 
The  uncertainty,  along  with 
HP's  announcements  of  lay¬ 
offs.  prompted  Dan  Barth.  CIO 
at  The  Oklahoma  Publishing 
Ca  in  Oklahoma  City,  to  bc^ 
purchasing  servers  from  Del] 
Computer  Corp.  after  buying 
Compaq  systems  for  years. 

“We  didn't  want  to  go  through 
the  change  of  the  merger  and 
find  out  what  product  lines 
were  going  to  survive,"  he  said. 
Barth  isn’t  ruling  out  going 
with  HP  in  tbe  future.  But  “un¬ 
til  we  know  bener,  let's  cau¬ 
tion  ourselves,"  he  said.  I 


It’s  time  the  ultimate  64-bit  server 

and  the  ultimate  32-bit  server 

were  the  same  server. 

AMD 


Introducing  the  AMD  Opteron"  processor,  64-bit  computing  for  today*s  32-bit  world. 

It’s  the  only  processor  that  is  designed  to  run  your  32-  and  64-bit  applications  simultaneously  and  without  compromise. 
AMD  Opteron  runs  on  AMD64-a  breakthrough  architecture  that  enables  64-bit  technology  on  the  x86  platform- 
creating  a  new  class  of  computing  so  you  can  migrate  to  64-bit  technology  on  your  own  terms. 


The  world’s  highest  performing  2P  and  4P  servers  are  now  powered 
by  AMD  Opteron  processors.  Receive  the  performance  and  security  benefits  of 
64-bit  computing,  while  getting  the  best  32-bit  performance  available  anywhere. 


AMD^y 

^ _ Opteron- 


Leverage  your  existing  investments  whiie  preparing  for  the  future.  One  architecture 
across  one  enterprise  means  you  won’t  have  to  rip  and  replace  your  entire  infrastructure  when  you  transition 
to  64-bit  computing.  It’s  just  another  way  AMD  designs  and  builds  processors  with  you  in  mind.  For  a  closer 
look  at  the  financial  and  performance  advantages  of  the  AMD  Opteron  processor,  visit  www.amd.com/opteron 


AMD 
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Pentagon  Chooses 
EDS  fw  FT  Revamp 

Eitelronic  Data  SysiBms  Corp> 
mM  R  hM  won  a  contact  valued 
at  ttS6  mWon  over  two  years, 
to  upgrade  ttie  Pentagon's  IT  in* 
frasiruciwe  in  an  afldrt  to  ensure 
the  technology  can  withstand  a 
Sept  tHhe  lemxM  attack  The 
contact  covers  networks,  voice 
and  dta  ineasaging  eystams, 
and  data  storage  devicee  « the 
Department  of  Oefeme.  said 
Plano,  Tasas-baaed  EDS. 

Microsoft  Patches 
Browser  Holes... 

hHcreaeft  Cerp.  issued  a  soft¬ 
ware  patch  designed  lo  plug  four 
aoeurtly  heiss  in  its  brteraet  Ei- 
piorer  VMt  browaar.  The  com¬ 
pany  gave  thrao  of  the  flaws  a 
“crtBcaT  ae  verity  rattag  and  said 
the  most  asrious  coidd  be  used 
to  nm  maBctoua  cods  on  sya* 


patch  to  Hi  a  vidnerabiMy  in  Ns 
Outlook  Expieea  t-nied  software, 

...And  Says  H's 
Revising  Fa  for  XP 

In  another  eecwfly-felatod  teat* 
tor,  Hkroaoft  said  rs  revising  a 
patch  iaauad  April  16  to  addrass 
a  buffer  ovamn  flaw  in  tha  Win¬ 
dows  karnsl,  altor  usars  coffi- 
plainad  that  6w  lx  can  cMsa 
parlonnanca  stowdowna  on  aonw 
PCs  rwntog  Windows  XP.  But 
Mcresofl  isfl  tha  original  patch 
an  ito  Web  sito  and  said  it  could 
stM  ba  usod.  Ottwr  verafcms  of 
Windows  aieni  affactod. 

Short  Takes 

UlCOfT  TECHNOLOeCS  MC.  in 
Murray  WM,  NJ..  reportod  a 
$966  mMon  km  far  Ms  sacond 
guartar.  which  andsd  March  31. 
^  Looant  said  it  stM  opocto  lo 
boooms  profltobla  from  an  opar- 
ating  staMMetot  during  its  cur¬ 
rent  flacaf)mr...E06ARF. 
'TED*'  CODO,  edw  in  tha  lata 
1960s  bwantod  tha  relationai 
mods!  of  storing  data,  dtod  April 
MalthsagsafTB. 


Public/Private  Security 
Partnership  Gets  Rocl^ 


Companies  want 
guidance  on  whem 
responsibilitv'  lies 


The  changing  of  the 
cybersecurity  guard 
at  the  Department  of 
Homeland  Security 
(DHS).  coupled  with  com¬ 
placency  on  the  part  of  some 
corporate  executives,  has  put  a 
higher  premium  on  informa¬ 
tion-sharing  and  cooperation 
between  the  private  sector 
and  the  government. 

“The  two  words  to  focus 
on  are  cooperation  and  coor- 
dinarion.”  said  Richard  David¬ 
son.  CEO  of  Omaha-based 
Union  Pacific  Corp.,  which 
combats  more  than  80.000 
probes  on  its  networks  daily. 
“That  all  adds  up  to  partner¬ 
ship  and  information-sharing, 
and  that  is  our  best  form 
of  protection  during  these 


challenging  times."  said 
Davidson,  who  also  serves 
as  chairman  of  the  President's 
National  Infrastructure  Advi¬ 
sory  Commission. 

Davidson  spoke  last  week  at 
a  U.S.  Chamber  of  Commerce 
conference  in  Washington  that 
addressed  the  roles  and  re¬ 
sponsibilities  of  the  govern¬ 
ment  and  private  sector  in 
homeland  security  efforts. 

Security  Slowdown 

Uncertainty  stemming  from  i 
the  loss  in  recent  months 
of  critical  cybersecurity  lead¬ 
ership  at  the  DHS  could  esca¬ 
late  into  danger  for  private- 
sector  companies,  said  Michael 
Hershman,  president  and  CEO 
of  Decision  Strategies  LXC,  an 
Oakton,  Va.-based  security 
consulting  firm. 

Companies  have  started 
to  slow  down  their  efforts  to 
boost  security  because  there 
has  been  no  terrorist  activity 
recently,  Hershman  said. 


H  Corporations 
in  America 
have  spent  billions 
of  doll^  for  security, 
with  very  little  cost- 
benefit  analysis. 

MICHAEL  HERSHMAN.  PRESIDENT 
AND  CEO.  DECISION  STRATE6IE5  LLC 

“I'm  afraid  that  they  may  be 
drawing  back  into  compla¬ 
cency."  he  said.  “In  recent 
months,  we've  seen  corpora¬ 
tions  stand  back,  reassess 
what  their  needs  are  and  try 
to  understand  what  the  level 
of  threat  is." 

But  a  lack  of  efiective  com¬ 
munication  between  the  cor¬ 
porate  community  and  gov¬ 
ernment  agencies  has  left 
companies  trying  to  assess 
their  risk  with  linle  or  no 
understanding  of  the  threat. 
Hershman  said 
“Corporations  in  America 


have  spent  billions  of  dollars 
for  security,  with  very  linle 
cost-benefit  analysis  ”  said 
Hershman.  He  noted  that  the 
Bush  administration  has  only 
added  to  the  confusion  regard¬ 
ing  who  is  ultimately  respon¬ 
sible  for  critical  infrastructure 
security  by  assigning  respon¬ 
sibility  to  industry  while  issu¬ 
ing  more  than  60  regulations 
since  Sept.  U,  2001. 

The  tack  of  order  and  stabil¬ 
ity  in  the  way  the  government 
cuTFently  deals  with  the  pri¬ 
vate  sector  —  a  situation  exac¬ 
erbated  by  the  recent  creation 
of  the  DHS  —  is  of  immediate 
concern  to  Michehl  Gent, 
president  of  the  North  Ameri¬ 
can  Electric  Reliability  Coun¬ 
cil  in  Princeton,  N.J. 

“We  have  a  constant  fight 
among  agencies  for  the  heart.s 
and  minds  of  industries."  said 
Gent,  referring  to  the  multi¬ 
tude  of  federal  agencies  that 
regularly  bombard  private- 
sector  entities  with  requests 
for  security  information. 

“DHS  is  supposed  to  do  that, 
and  Pm  looking  forward  to 
them  being  more  successful. 
But  in  the  meantime.  I  have 
lo  keep  warding  off  [govern¬ 
ment  agencies]."  I 


Schmktt’s  Departin  DHS  Raises  Cybersecurity  Laadenhip 


TbapftvMa-sedorfTeaoxly 
comounRy  vii  iofie  a  statn^ 
advocate  In  RtoVMlB  Homs  on 
Mter  1  wNte  HcMifd  Sdmidt 
team  govarmnl  serRca. 

SdimkR.  hat  appannt  to 
ttte  rote  of  chief  qtesKurfly 
atMaaito  tea  asoateiy  of  home- 
tand  Moity.  moificad  test 
week  fltel  he  ptaftt  to  ratte 
after  oiifr  t7  raontfte  aa  ^ 
chtetnen  of  tea  Mdant  's  Cite- 
cte  Mailnictore  ftotadion 
Don.  acnnai  aervsQ  atongsKM 
l^ehad  Qteke.  tee  naflon’s  test 
chtef  cytenecifity  Ktetear.  «ho 
rateadteFabuBry. 

Malters  of  cybsisecurlly  nonv 
laR  to  Robert  UscoubM.  a  fonner 
execuRve  el  The  CoesH^  Co. 
vteo  tvBs  rocanfly  turned  esete- 
tart  sacreteryof  infmlnjctiie 
protodlon  at  tea  DHS.  Hk  re- 
sponsibWes  hduda  cyfaatsecu- 


rfly  and  protodinofhe  nation's 
vi^  physical  leaarg  from  attack 

Tha  concern  is  teal  Mflhout  a 
stogte  MMteaf  raaporefete  for 
prhMtaaclDr  c)banaosfly.  X 
couMgallosflnlayarsorDHS 
bureaucracy. 

ManftelBr.dbBdoroftee 
SANSImtluto.aseaittyre- 
aaareh  tent  In  SateeedB.  Md.. 
saidhewneaMktenedtv 
ScfnidrsdMteiontoteBvaL 

"He  UBS  tea  one  rep-  _ 

reaentoRvafromln' 
duaRyteteaclMly 
understood  tee  uay 
aftackseialtembad 
and  whal  needed  to  be 
donetostopteete- 
tacl«.‘PMareaid. 

David  Way.  a  DHS 
spokaeman.  said  tee 
departnenl  oouMnT 
consnantonuhtetee 
WteeHoueemayor 


mm  not  do  about  heMng  a  angle 
ndMduaf  n  tee  DHS  nbo  ie  ra- 
sponNfate  lor  cybanectaly.  But 
hanotodteafmanyofteetach- 
notogylDduBtry*tleaJnpcontoe- 
nies  have  iicaitoteed  tee  Imp^ 
tones  of  «)d  adoptod  an  intograt- 
ad  epproad)  to  and  ph^- 
cal  nfrealrudtffe  eoofly. 

SchmidIdOMipteigdtee 
impad  teM  Ms  rateement  ul 
hpte  on  tee  govammenf’B  afalRy 
_  towodtwlteteaprt- 


INbhaM  to  under 
stand  teeHMstaeue} 
kmorateenliata 
person,*  SdinidI 
add.  InaapacUve 
ofmheraXIsntee 


ubaniXigawBcutod 
inw.vrehpreadaBr 
road  map  and  peopto 
uhoaaampowerad 


to  maha  (tea  sMegy]  work.” 

SH  Herts  Mfcr.pi«idantot 
tee  Aiteitpon.  W-bRead  IniBnra- 
fion  Tadvntogy  AaaodeXon  of 
Afflarkto.  said  not  eppomtag  a 
proninaft  ndMdud  to  a  poaion 

teal  is  aolily  napondbte  for 
baraeouty  9  intorlinale.  Itot 
laving  aoneone  Howard  or 
OkkCterhBasaepocidadvteBr 
to  tea  aaentory  ii  a  Mg  error,  ki 
my  MtenHoa*  aid  Mfer. 

'We're  eRparianciRg  tee  toes 
of  two  real  eigiarts  teal  (prfMte) 
ndirtryindteecoiiRrydepand- 
adon.*siidLvryWirtiel.teian- 
efyst  d  oonaervMMe  tiM  tank 
The  Hdida  ^<Rffida6on  and  a 
career  mj^tetoBganca  oHI- 
car.  1  hear  dtenflefertion  wRh 
teemoderofmaMnoonaindh 
ddud  raeponilite  tor  bote  GVbe^ 
sacuRy  and  pbysied  tofnatfuc' 
bee  protection,  ha  said. 

‘QanMvtorr 
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Data  Security  Measures  Failing 
To  Match  Legal  Expectations 


Regulations  raise  stakes  for  compliance 


BV  ^mUMAH  V1MTAN 

Emerging  legal  ex¬ 
pectations  for  data  se- 
ciuity  and  privacy  arc 
making  it  increasingly 
important  for  companies  to 
demonstrate  reasonable  care 
in  protecting  their  IT  assets, 
say  security  and  legal  experts. 

Regulations  such  as  the 
Health  Insurance  Portability 
and  Accountability  Act 
(HIPAA),  the  Gramm-Leach* 
Bliley  Act  and  the  Sarbancs- 
Oxley  Act  (sec  story  below), 
as  well  as  several  proposed 
state  and  federa]  identity-theft 
prevention  laws,  impose  sig¬ 
nificant  security  and  adminis¬ 
trative  requirements  on  com¬ 
panies.  The  problem  is  that 
there  are  no  regulation-specif¬ 
ic  technology  standards  or 
guidelines  that  companies  can 
adopt  to  demonstrate  compli¬ 
ance  with  these  requirements. 

The  regulations  have  con¬ 
siderably  increased  the  legal 
exposure  of  companies  in  the 
event  of  security  breaches, 
said  Erin  Kenneally.  a  forensic 
analyst  and  attorney  at  the  San 
Diego  Supercomputer  Center 
in  La  JoU^  C^lif.  “From  a  1^1- 
risk  standpoint,  it  is  a  very  un- 
suble  Held.”  Kenneally  said. 

Raasonabie  Attemiits 

(Companies  must  establish 
processes  to  show  that  reason¬ 
able  attempts  are  being  made 
to  secure  data,  said  Bruce 
Heiman.  a  partner  at  Preston 
Gates  Ellis  &  RouveUs  Meeds 
LLP  in  Washington.  “You  need 
to  say  what  you’ll  do  and  do 
what  you  say.“  he  said 
Because  most  of  the  laws 
are  technology-agnostic,  there 
is  a  “conside^le  level  of  in¬ 
terpretation"  regarding  how 
they  should  be  implemented 
technologywise.  said  Lew 
Wagner,  chief  information 
security  officer  at  the  M.O. 
Anderson  Cancer  Onier  at 
the  University  of  Texas  in 
Houston  “At  one  leveL  they 


ail  boil  down  to  access-control 
systems.  audit-contn)l  sys¬ 
tems.  some  sort  of  encryption 
capability  for  confidentiality 
and  other  administrative  stuff, 
such  as  policy  and  training." 

But  because  the  legal  view 
of  due-care  standards  may  dif¬ 
fer  from  a  technoit^isi's  view, 
in  many  cases,  the  courts  will 
have  to  decide  what  accept¬ 
able  standards  are,  said  Ion 
Stanley,  an  attorney  on  the 
American  Bar  Association  in¬ 
formation  security  committee. 

"Something  will  become  a 
standard  because  a  court  says 
it  is  a  standard.  And  ultimate¬ 
ly,  litigation  specialists  will  go 
into  rr  rooms  and  say.  'Here  is 
what  you  are  going  to  have  to 


do' "  to  comply.  Stanley  said. 

Don't  be  surprised  to  see 
many  companies  biding  their 
time,  waiting  for  such  case 
law  to  emerge  before  imple¬ 
menting  widespread  security- 
related  technology  changes, 
said  Rt^er  Browa  an  IT  audi¬ 
tor  at  Jefferson  Health  System, 
3  $2  billion  health  care  organi¬ 
zation  in  Radnor.  Pa 

Though  HIPAA’s  privacy 
compliance  and  code-transac¬ 
tion  testing  deadlines  went 
into  effect  April  14,  health  care 
organizations  don't  have  to 
implement  related  security 
changes  until  2005.  But  organi¬ 
zations  that  haven't  imple¬ 
mented  those  changes  are  un¬ 
likely  to  be  fully  compliant 
with  the  privacy  requirements 
currently  in  effect,  he  said 


“HIPAA  should  change  the 
price  of  ignoring  technology- 
related  risks"  for  health  care 
organizations.  Brown  said.  But 
because  it’s  written  vaguely 
from  an  implementation 
standpoint,  be  said  the  "final 
details  will  be  fleshed  out  in 
the  trial  courts." 

Ilie  best  way  to  mitigate  le¬ 
gal  exposure  is  to  be  proactive 
about  putting  in  place  measur¬ 
able  and  auditable  security 
processes,  Kenneally  said. 

For  instance,  any  organiza¬ 
tion  should  be  able  to  show 
who  has  access  to  its  systems, 
what  measures  control  and 
monitor  that  access,  what  ac¬ 
countability  exists  for  actions 
within  the  systems,  and  how 
systems  violations  or  unautho¬ 
rized  access  is  detected  and 


Security  Yardstick 
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responded  to,  Wagner  said. 

It's  also  vital  to  have  a  good 
sectmcy-audit  togging  process 
to  ensure  that  evidence  of  all 
transactions  is  stored  in  a 
manner  that  meets  legal  re¬ 
quirements  for  reliability.  Ken- 
neally  said  ThU  might  require 
processes  for  automatically 
transmitting  logs  from  the 
generating  host  to  a  central¬ 
ized  logging  system  to  prevent 
tampering.  Kenneally  said  I 


CFOs  Push  IT  Managers  for 
More  Info  About  Projects 


Sarbanes-Oxley 
boosts  reporting 
demands  for  CIOs 


BV  THOMAS  HOPPMAN 

The  financial  reporting  regu¬ 
lations  that  were  signed  into 
law  last  year  are  spurring 
some  chief  financial  officers 
to  demand  that  CIOs  provide 
them  with  more  detailed  in¬ 
formation  about  the  status  of 
IT  projecLs  according  to  exec¬ 
utives  and  analysts. 

The  Sarbanes-Oxley  Act, 
which  is  aimed  at  producing 
more  complete  and  accurate 
assessments  of  the  financial 
condition  of  public  compa¬ 


nies.  requires  businesses  to 
disclose  “all  material  off-bal¬ 
ance-sheet  transactions"  that 
may  affect  their  capital  expen¬ 
ditures  or  other  aspects  of 
their  finances. 

Because  IT  spending  ac¬ 
counts  for  more  than  half  of 
all  capital  expenses  at  many 
companies,  CFOs  are  pushing 
hard  to  ensure  that  they  can 
update  quarterly  earnings  re¬ 
ports  with  as  much  informa¬ 
tion  as  possible  about  ongoing 
IT  projects,  said  business  and 
technology  executives. 

“Without  question,  CFOs 
are  going  to  place  more  pres¬ 
sure  on  everyone  in  the  orga- 
nizatioD  because  of  Sarbanes- 
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Oxley,"  said  Paul  McFeeters. 
CFO  at  Kintana  Inc.,  a  Sunny¬ 
vale,  CdiX-based  vendor  of 
software  for  monitoring  IT  op¬ 
erations  and  automating  tasks 
like  project  management. 

Companies  “can’t  run  off 
with  multimillion-doUar  IT 
projects  without  good  visibil¬ 
ity  and  controls,"  added  Mc¬ 
Feeters,  who  uses  Kintana's 
digital  dashboard  software  to 
keep  track  of  internal  IT  proj¬ 
ects.  He  said  senior  executives 
are  also  requesting  more  thor¬ 
ough  financial  reports  from 
corporate  officers  to  satisfy  a 
provision  of  Sarbanes-Oxley 
that  requires  CEOs  and  CFOs 
to  attest  to  the  accuracy  of  a 
company’s  financial  data. 

Steve  McDowelL  CIO  at  pri¬ 
vately  held  Holiday  Retire¬ 
ment  Corp..  a  Salem,  Ore.- 
based  operator  of  senior  citi¬ 
zen  housing,  said  he's  talked 
with  IT  executives  from  pub¬ 
lic  companies  about  5art»nes- 
Oxley  and  they  "are  really 
afraid  that  it  dominate 
their  projects  and  budgets  for 
a  while." 

The  push  for  CIOs  to  deliv¬ 
er  more  comprehensive  infor¬ 
mation  about  IT  spending  “is 


very  much  a  trend  that  we're 
seeing."  said  Jeremy  Grigg,  a 
Gartner  Inc.  analyst  based  in 
New  York.  But  like  McFeeters 
and  others.  Grigg  noted  that 
the  reporting  demands  being 
placed  on  CIOs  aren’t  tied 
solely  to  Sarbanes-Oxley. 

Indeed,  a  growing  number 
of  companies  are  taking  a 
portfolio  management  ap¬ 
proach  to  evaluating  the  re¬ 
turns  being  generated  by  their 
IT  investments  (C^ickUnk 
36205].  Steve  Denny.  CIO  at 
Plano,  Texas-based  FreightPro, 
has  delivered  a  formal  report 
on  the  status  of  IT  projects  to 
the  logistics  provider's  board 
of  directors  each  quarter  for 
the  past  three  and  a  half  years. 
The  reports  detail  the  antici¬ 
pated  cost,  timeline  and  bene¬ 
fits  of  both  new  and  existing 
projects,  he  said,  adding  that 
IT  work  typically  accounts  for 
the  bulk  of  FreightPro's  capital 
expenditures.  I 


Tech  Friendly  because... 


•CoauDon  User  InterfKC 


Uetktap  Colot  & 
&'■  friMtn 


HiglhSptml 
Uepartmental  PriHliog 


•Universal  Print  Driver 


•Integrated  Wireless  telutioas 


•Cartridge-Free  Dnim  Design 


•Very  Low  Cost  of  Ownership 


Technology  so  advanced, 
it'll  make  you  smile. 

Tech  people  face  a  world  of  many 
demands  and  little  time.  Our  all-digital 
line  of  printeR.  copien  and  MFP  s  are 
highly  reliable  and  read\’  for  netwoHc 
use.  either  wired  or  throu^  our 
embedded  wireless  technology. 

Kyocera  Miia  uses  adtmiced  tedmdof^ 
to  make  Ife  simple  and produdav. 

Everything  we  do  is  aimed  at  making 
things  less  complex.  Examples?  A  single 
driver  operates  all  our  devioes.  NetV'iewer^ 
software  administets  our  systems  across 
your  network  in  real  time.  Hie  list  is 
long.  And  it's  how  we've  made  so  many 
friends  in  the  MIS/TT  departmeni 

Tech  friends  meet  at: 
www.kyoceramita.conVus 


The  New  Value  Frontier 

cgKyocERa 


KYOCERA  MITA  AMERICA.  INC. 

02003  KYOCERA  MITA  AMERICA.  INC.  ‘PEOPLE  FRIENDLY*  AND  ALL  ELEMENTS  OF  THE  KYOCERA  MTTA  LOGO  ARE  THE  TRADEMARKS  OF  KYOCERA  MITA. 


12 


CMnfTEIVItll  4riin.M«3 


NEWS 


N  computerworld.coTi 


John  Hancock  to 
Outsource  to  IBM 

John  Hancock  Financial  Services 
Inc.  said  it  plans  to  outsource 
key  IT  operations,  such  as  man¬ 
agement  of  its  servers,  main¬ 
frames  and  net%M)rks.  to  IBM. 

The  companies  eipect  to  Bnalue 
the  deal  by  rnktyear.  Boston- 
based  John  Hancock  said  that 
about  100  of  the  300  affected  IT 
tvorkers  will  lose  their  jobs.  An¬ 
other  180  employees  will  be 
shitted  to  IBM.  and  John  Han¬ 
cock  will  retain  20  people  to 
oversee  the  outsourcing  work. 


Boat  Maker  Picks 
IBM  to  Operate  Net 

IBM  also  announced  a  deal  to 
host  and  manage  a  Wab-based 
supply  chain  network  for  General 
Dynamics  Corp/s  shipbuilding 
division.  The  Etoclric  Boat  Corp. 
unit  m  Groton.  Conn.,  hopes  to 
Bnk  150  suppliers  to  the  network 
by  year's  end.  IBM  said.  'Pto  net¬ 
work  is  built  around  IBM’s  Intel- 
basad  servers  and  its  Web¬ 
Sphere  arrd  DB2  software.  Fi¬ 
nancial  terms  weren't  released. 


Siebel,  PeopleSoft 
To  Cut  Workforces 

Siebd  System  Inc.  and  People- 
Soft  bic.  both  said  they  plan  to 
cut  lobs  after  reporting  weak 
first-quarter  results.  Siebel, 
which  willlay  off  about  250  of 
its  5,850  workers,  said  its  flrst- 
quartor  profit  dropped  93%  year 
over  year  to  54.6  miliion.  and 
revenue  feM  70%  to  5332.8  mil¬ 
lion.  PeopleSoft  plans  to  cut  200 
of  its  8.180  workers.  It  had  a 
538.5  miRion  profit  on  revenue 
of  5460.3  million  in  the  quarter. 


Short  Takes 

INTTL  COftP  resumed  shipments 
of  a  new  3-OHz  Pbntium  4  chip, 
a  week  after  putting  them  on 
hold. . . .  MAPTurr  coftP .  a 
Burlington.  Mass.-faased  devel¬ 
oper  of  trucking  navigation  sys¬ 
tems,  said  M  raised  58  mil¬ 
lion  in  new  finarwtng. 


Disk  Arrays  Gain  in  Use 
For  Secondary  Storage 


Hut  tapes  eontinue  to  handle  most  data 
for  baekups  and  archix  ing,  sur\e\'  finds 


SV  LUCAS  MCARIAN 

Rmauvhy  inexpcn- 
sivo  secondaty  disk 
slonigc  is  gaining  a 
signiflxani  fwuhold 
in  corpivatf  data  centers,  .le- 
cording  lo  a  sur\'ey  of  more 
than  l.OOO  IT  managers  that's 
due  to  be  released  next  month. 
But  the  !»urvc>'  also  shows  that 
a  large  majority  of  data  is  still 
backed  up  and  archived  the 
traditional  way;  on  tape. 

Peripheral  Concepts  IfK'., 
which  released  preliminary  re¬ 
sults  of  the  survey  last  week, 
said  atK>ui  50“>*  of  the  resptm- 
dents  with  disk  sutrage  capac¬ 
ities  of  more  than  500TB  indi- 
eaiod  that  they  already  use 
disk-based  devices  for  sec¬ 
ondary  storage.  T'hat  includes 
saving  snapshot  copies  of  data 
and  staging  information  for 
archiving.  Another  25%  plan 
to  start  doing  so  within  two 
years,  the  consulting  firm  said. 

Bui  sccondaiy  disk  storage 
typically  involves  less  than 


one-fifth  of  a  company’s  total 
data,  said  Farid  Ncema.  presi¬ 
dent  and  CEO  of  Santa  Bar¬ 
bara.  Calif.-based  Peripheral 
(Concepts.  And  only  a  small 
percentage  of  the  data  that’s 
backed  up  on  disks  doesn’t  get 
moved  to  tape  devices  for 
archiving,  Neema  said.  "Tape 
remains  by  far  the  most  popu¬ 
lar  medium  and  does  not  seem 
to  want  to  go  away."  he  said. 

Neema  cited  .mother  poten¬ 
tial  roadblock  to  wider  adop¬ 
tion  of  secomlary  disk  storage: 


A  ’’significant  percentage’’  of 
the  respondents  indicated  that 
reliability  issues  could  prevent 
them  from  using  low-cost  Ad¬ 
vanced  Technology  Attach¬ 
ment  (ATA)  disk  drives. 

Over  the  past  12  months, 
vendors  such  as  EMC  Corp., 
Network  Appliance  Inc.  and 
Storage  Technology  Corp. 
have  released  ATA-based  disk 
arrays  for  storage  of  near-line 
data,  snapshot  copies  and  in¬ 
formation  that  will  eventually 
be  archived  on  tape  devices. 

Mike  Lin.  director  of  emerg¬ 
ing  technologies  at  the  Uni¬ 
versity  of  Southern  California. 
Los  Angeles,  is  testing  Sior- 


Do  you  treat  data  archiving  separately 
from  data  backup? 


agcTck's  BladeSiorc  virtual 
tape  server,  which  acts  as  an 
intermediaiy  between  systems 
and  tape  libraries. 

Time  for  Backups 

Lin  said  the  school  currently 
backs  up  18TB  of  research  and 
administrative  data  to  Sun  Mi¬ 
crosystems  Inc.  SlorEdgc  .1510 
disk  arrays  during  an  eight- 
hour  window  each  night.  It 
then  archives  the  data  on  Stor- 
agcTek  9940  tape  drives. 

A  terabyte  of  Fibre  Channel 
disk  capacity  for  the  Stor- 
Edge  arrays  costs  S65.000  to 
$90,000,  depending  on  how 
it’s  configured.  Lin  said.  In 
comparison,  he  said,  a  full 
10TB  BladeStore  array  with 
ATA  drives  costs  only  S40.000. 

Lin  didn't  voice  any  major 
reliability  concerns  about  ATA 
technology,  but  he  said  it  takes 
an  hour  longer  —  abemt  eight  ! 
hours  altogether  —  to  rebuild 
the  data  on  failed  ATA  disks 
than  on  Fibre  Channel  ones. 

Jamie  Riis,  CIO  at  BayView 
Financial  Trading  Group  LI*  in 
Miami.  Ls  using  a  NetApp  RlOO 
NearStore  disk  array  to  store 
document  images.  TTie  array 
replaced  an  optical  system 
that  was  slow  and  unwieldy. 

Riis  said.  BayView  also  uses 
the  RlOO  to  back  up  daiaba.se 
files  prior  to  recording  them 
to  tape  devices,  he  added.  I 


Business  Objects  Upgrades 
Its  Data  Analysis  So^are 


BV  MARC  L.  SONOINI 

Bu.sines.s  Objects  SA  last  week 
announced  an  upgrade  of  its 
data  analysis  software  suite 
that  it  said  includes  a  more 
consistent  Web  browser  u.ser 
interface  plu.s  extended  capa¬ 
bilities  for  integration  with 
ERFand  CRM  applications. 

The  Paris-based  company 
said  the  RusincssObjccis  En¬ 
terprise  6  release  will  also 
provide  a  boost  in  perfor¬ 
mance  and  scalability.  For  ex¬ 
ample.  the  suite's  thin-client 
Webintelligence  tool  will  pro¬ 
vide  80S.  faster  response 
times  on  query  and  analysis 
operations,  said  Lance  Walter, 
director  of  product  marketing 


for  business-intelligence  plat¬ 
forms  at  Business  Objects. 

In  addition.  Waller  said  the 
Webintelligence  upgrade  in¬ 
cludes  a  single  user  interface 
for  querying,  reporting  and 
analysis  function.s.  Business 
Objects  has  also  added  wizard 
technology  to  help  users  per¬ 
form  tasks  such  as  filtering 
out  unwanted  data  or  drilling 
down  into  information  about  a 
specific  unit.  Reports  can  now 
be  saved  and  published  within 
Microsoft  Excel  spreadsheets 
or  Adobe  Acrobat  documents. 

Although  Business  Objects 
has  sped  up  the  log-in  process 
for  Webintelligence  and  up¬ 
graded  the  tool's  reporting  ca¬ 


pabilities.  the  improvements 
could  have  been  even  better, 
said  Thierry  Lclcu.  business- 
intelligence  program  manager 
at  Unisys  Corp.  in  Blue  Bell. 
Pa.  Unisys  has  been  running 
Webintelligence  2.7  since  1998 
and  began  beta-testing  the 
new  version  in  September. 


PRODUCT  FEATURES 
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Lelcu  declined  lo  comment 
specifically  on  what  Business 
Objects  could  have  done  bet¬ 
ter  in  the  upgrade.  Despite  the 
shortcomings,  he  noted  that 
he  hopes  to  get  some  of  the 
8,000  Webintelligence  users  at 
Unisys  live  on  the  new  soft¬ 
ware  by  July.  The  added  sup¬ 
port  for  Excel  and  greater  flex- 
ibilit)'  in  designing  reports  arc 
particularly  attractive  features, 
Leleu  said. 

Business  Objects,  which  has 
its  U.S.  headquarters  in  San 
Jose,  said  the  Enterprise  6 
suite  is  due  for  release  by  May 
15.  The  upgrade  will  be  able  to 
use  native  interfaces  to  extract 
data  from  business  applica¬ 
tions  developed  by  vendors 
like  SAP  AG,  Oracle  Corp.. 
Siebel  Systems  Inc.  and  Peo¬ 
pleSoft  Inc.,  as  well  as  from 
custom  applications.  I 
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John  Hancock  to 
Outsource  to  IBM 

John  HMcedt  RrmcW  Sarvkas 
Inc.  «aU  H  piMM  lo  oulMNiret 
Iwy  IT  nporoHom,  «ich  m  won- 
agMMirt  dib  tmori,  main* 
franiM  nd  nohowht,  to  BH. 
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oOiarBOMbioywawVbt 
MlodtoBM.MdJalmHaft- 
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ovonat  Ihi  oulsowcinB  worh. 


Boat  Maker  Picks 
IBM  to  Operate  Net 

BM  alM  announend  a  dad  to 
had  «d  a  «M>baaad 

tapdy  dnin  adwork  lor  Oanaral 
OiMHdea  CarB.*$  diMdiig 
dviiion.  TIm  Bidric  Bod  Corp. 
uidl  to  Breton.  Cantu  bopoi  to 
Ml  BO  aiddtore  to  tha  natMtorh 
byyoor^ond.BHsdd.11»iMl* 
iiarliilballraHdBirttold- 
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Siebel.PlBopieSoft 
To  Cut  Workforces 

aiaaai  ayawna  inc.  anoraopto* 
Soft  toe.  bail  said  Bay  dan  to 
cd  jabs  aftor  rapottotg  wash 
fird-qaartor  raaidto.  SiaM. 
«hiciiw«lByoftabad2SOof 
tts5J60«arhofs,aaUftBlrd- 
qaartor  praftt  dappad  83%  yaar 
ovar  yoar  to  $4.0  ■■too.  and 
rewnaaiBl7D%toS332Jmil- 
lan.  ItooptoSoft  ptona  to  ed  200 
of  lls  8.in  wtiimn.  ft  had  a 
$38.5  fdBon  praM  onrevanuo 
d  $400 J  ndien  to  lha  quartor. 


Short  Takes 
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Disk  Arrays  Gain  in  Use 
For  Secondary  Storage 


But  tapes  continue  to  handle  most  data 
for  backups  and  archiving,  survey  finds 


BV  LUCAS  MCAntAN 

Relatively  incxpcn' 
sive  secondary  disk 
storage  is  gaining  a 
signiHcant  foothold 
in  corporate  data  centers,  ac¬ 
cording  to  a  survey  of  more 
than  1.000  IT  managers  that's 
due  to  be  released  next  month. 
But  the  survey  also  shows  that 
a  large  maioricy  of  data  is  still 
backed  up  and  archived  the 
traditional  way:  on  tape. 

Peripheral  Concepts  Inc., 
which  released  preliminary  re¬ 
sults  of  the  survey  last  we^ 
said  about  50%  of  the  respon¬ 
dents  with  disk  storage  capac¬ 
ities  of  more  than  500T6  indi¬ 
cated  that  they  already  use 
disk-based  devices  for  sec¬ 
ondary  storage.  That  includes 
saving  snapshot  copies  of  data 
and  staging  information  for 
archiving.  Another  25%  plan 
to  start  doing  so  within  two 
years,  the  consulting  firm  said. 

But  secondary  disk  storage 
typically  involves  less  than 


one-fifth  of  a  company’s  total 
data,  said  Farid  Neema,  presi¬ 
dent  and  CEO  of  Santa  Bar¬ 
bara,  Calif.-based  Peripheral 
Concepts.  And  only  a  small 
percentage  of  the  data  that's 
backed  up  on  disks  doesn’t  get 
moved  to  tape  devices  for 
archivu^  Neema  said.  *Tape 
remains  by  for  the  most  popu¬ 
lar  medium  and  does  not  seem 
to  want  go  away.”  he  said. 

Neema  cited  another  poten¬ 
tial  roadblock  to  wider  ^op¬ 
tion  of  secondary  disk  storage: 


A  “significant  percentage"  of 
the  respondents  indicated  that 
reliability  issues  could  prevent 
them  from  using  low-cost  Ad¬ 
vanced  Technology  Attach¬ 
ment  (ATA)  disk  drives. 

Over  the  past  12  months, 
vendors  such  as  EMC  Corp., 
Networic  Appliance  Inc.  and 
Storage  Technology  Corp. 
have  released  ATA-based  disk 
arrays  for  stor^  of  near-line 
data,  snapshot  copies  and  in¬ 
formation  that  wUl  eventually 
be  archived  on  tape  devices. 

Mike  Lin,  director  of  emerg¬ 
ing  technologies  at  the  Uni¬ 
versity  of  Southern  Califomia, 
Los  Angeles,  is  testing  Stor- 


Do  you  treat  data  archiving  separately 
from  data  backup'^ 


ageTek's  BladeSiore  vimial 
tape  server,  which  acts  as  an 
intermediary  between  systems 
and  tape  libraries. 

rune  for  Backups 

Lin  said  the  school  currently 
backs  up  18TB  of  research  and 
admini^tive  data  to  Sun  Mi¬ 
crosystems  Inc.  StorEdge  3510 
disk  arrays  during  an  eight- 
hour  window  each  night  It 
then  archives  the  data  on  Stor- 
ageTek  9940  tape  drives. 

A  terabyte  of  Fibre  Channel 
disk  capacity  for  the  Stor¬ 
Edge  arrays  costs  $65,000  to 
$90,000.  depending  on  how 
it's  configured,  Un  said.  In 
comparison,  he  said,  a  full 
10TB  BladeStore  array  with 
ATA  drives  costs  only  $40,000. 

Lin  didn’t  voice  any  maior 
reliability  concerns  about  ATA 
technology,  but  he  said  it  takes 
an  hour  longer  ~  about  eight 
hours  altogether  ~  to  rebuild 
the  data  on  failed  ATA  disks 
than  on  Fibre  Channel  ones. 

Jamie  Riis.  CIO  at  BayView 
Fmancial  Trading  Group  LP  in 
Miami,  is  using  a  NetApp  RlOO 
NearStore  disk  array  to  store 
document  images.  The  array 
replaced  an  optical  system 
that  was  slow  and  unwieldy, 
RUs  said.  BayView  also  uses 
the  RlOO  to  back  up  database 
files  prior  to  recording  them 
to  tape  devices,  be  added.  I 


Business  Objects  Upgrades 
Its  Data  Analysis  Software 


BV  MARC  L.  aOHOINi 

Business  Objects  SA  last  week 
announced  an  upgrade  of  its 
data  analysis  software  suite 
that  it  said  includes  a  more 
consistent  Web  browser  user 
interface  plus  extended  capa¬ 
bilities  for  integration  with 
ERP  and  CRM  applications. 

The  Paris-based  company 
said  the  BusinessObjects  En¬ 
terprise  6  release  will  also 
provide  a  boost  in  perfor¬ 
mance  and  scalability.  For  ex¬ 
ample.  the  suite's  thin-client 
Weblntelligence  tool  will  pro¬ 
vide  80%  faster  response 
times  on  query  and  analysis 
operations,  said  Lance  Waller, 
director  of  product  maricetii^ 


for  business-intelligence  plat¬ 
forms  at  Business  Objects. 

In  addition.  Waiter  said  the 
Weblntelligence  upgrade  in¬ 
cludes  a  single  user  interface 
for  querying,  reporting  and 
anal^is  functions.  Business 
CRsjects  has  also  added  wizard 
technology  to  help  users  per¬ 
form  tasks  such  as  filtering 
out  unwanted  data  or  drilling 
down  into  information  about  a 
specific  unit.  Reports  can  now 
be  saved  and  published  within 
Microsoft  Excel  spreadsheets 
or  Adobe  Acrobat  documents. 

Althou^  Business  Objects 
has  sped  up  the  log-in  process 
for  Weblntelligence  and  up¬ 
graded  the  tool’s  reportii^  ca¬ 


pabilities,  the  improvements 
could  have  been  even  better, 
said  Thierry  Leleu,  business- 
intelligence  program  manager 
at  Unisys  Corp.  in  Blue  BeU, 
Pa.  Unisys  has  been  running 
Weblntelligence  2.7  since  1998 
and  began  beta-testing  the 
new  version  in  September. 


PRODUCT  FEATURES 


Leleu  declined  to  comment 
specifically  on  what  Business 
Objects  could  have  done  bet¬ 
ter  in  the  upgrade.  Despite  the 
shortcomings,  he  noted  that 
he  hopes  to  get  some  of  the 
8.000  Weblntelligence  users  at 
Unisys  live  on  the  new  soft¬ 
ware  by  July.  The  added  sup¬ 
port  for  Excel  and  greater  flex¬ 
ibility  in  designing  reports  are 
particularly  attractive  features, 
Leleu  said. 

Business  Objects,  which  has 
its  U5.  headquarters  in  San 
Jose,  said  the  Enterprise  6 
suite  is  due  for  release  by  May 
IS.  The  upgrade  will  be  able  to 
use  native  Interfaces  to  extract 
data  ftom  business  applica¬ 
tions  developed  by  vendors 
like  SAP  AG.  Oracle  Corp., 
Siebel  Systems  Inc.  and  Peo- 
pleSoft  InCn  as  well  as  from 
custom  applications.  I 


I  AM  A  CISCO  1200 
SERIES  DUAL 
BAND  WI-FI 
ACCESS  POINT 


I  AM  70  MORE 
MINUTES  OF 
PRODUCTIVITY  PER 
EMPLOYEE  PER  DAY 

I  AM  A  CISCO  WIRELESS  NETWORK.  I  HAVE  THE  POWER  TO 
CONNECT  EMPLOYEES  TO  VITAL  DATA  WHEREVER  THEY  ARE. 
AND  DO  IT  SECURELY.  THAT  SAVES  TIME.  THAT  SAVES  MONEY. 
THAT  IS  POWERFUL.  I  AM  MORE  THAN  A  CISCO  1200  SERIES 
DUAL  BAND  WI-FI  ACCESS  POINT. 


THIS  IS  THE  POWER  OF  THE  NETWORK.  noWl 


Cisco  Systems 
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Microsoft’s  Server  VP  Discusses 
Competition,  Future  Releases 


Bill  Vegtite.  vice 
prcsidcaf  o/Mt- 
CTos<i//  Corp.'s 
Windows  Sen*- 
cr^roup.  spoke 
tost  week  with 
Computer- 
world's  Caro/ 
S/iwu  a/H)ut  r/ic 
compctiiion  (he 
company's  newly  launvhed 
U'lndows  -Smvr  200.?  /dcc-s 
and  about  his  thinking  on  fu¬ 
ture  releases.  £jfcerprs/rom  (he 
inii'n'it'w  follow: 

Do  you  consider  Linux  to  be  the 
chief  competition  to  Windows 
Server  2003?  On  the  one  hand. 
NT  •!  is  a  competitive  frame* 
work  that  I  iiwk  at.  Solaris  is, 
AJX  is.  and  Unu.x  is. 

Do  you  view  them  eH  equally? 

Window's  Server  has  three 
core  roles:  application  plat¬ 
form.  rr  infrastructure  and  in¬ 


formation  worker  pn»duciivi- 
ly,  [for]  larfte  enterprise,  medi¬ 
um-size  busiiH'ss  and  small 
business.  For  each  one  of 
those.  I  think  of  the  competi¬ 
tion  as  difTerent. 

W'hcrc  Linu.x  is  jieitinK  trac¬ 
tion  Is.  "rve  got  a  Unix  app 
and  I'm  not  doing  any  feature 
dcveU>pmcnt  on  >1.  i  want  the 
cost  efficiencies  of  x86.  And  I 
don't  want  to  have  to  recom¬ 
pile  the  app  in  any  significant 
way.  etc.  Linux  k>oks  interest¬ 
ing."  [If  1  I've  got  a  simple  Web 
server  that's  just  serving  up 
static  HTML.  Linux  looks  in¬ 
teresting.  Those  would  be  ex¬ 
amples  of  app  workloads  pre¬ 
dominantly  in  the  enterprise. 

Microsoft  will  ship  some  new 
functionaHty  in  the  coming 
months  ss  add-ons  for  Windows 
Server  2003.  What  do  you  think 
should  be  free,  and  what  should 
be  separate,  for-fee  products? 


I'he  philo.s4>phy  that  I've  had 
is  anything  that  ha.s  been  de¬ 
livered  in  essence  out  of  the 
box  in  Windows  Serv'er  to 
dale,  that  we  re  effectively  im¬ 
proving  on.  is  available  for  any 
licensed  W'indows  Serv'er 
200.?  customer. 

An  example  of  that  would 
be  Windows  Sharcl’oim  Ser¬ 
vices.  I  think  of  Window's 
-SharcFoint  5iervices  as  the 
rK,‘Xt-gencration  file  server.  It 
would  stand  to  reason  that  if  I 
think  of  Windows  SharePoim 
Services  as  a  file  server,  and 
W'indt)ws  servers  arc  naturally 
file  servers,  that  would  be  free 
ft>r  any  Windows  Server  200.? 
customer 

Is  there  any  chance  you  will  re- 
visH  the  decision  about  Exchange 
Server  2000  not  running  on  Wm- 
dows  Server  2003?  Nope.  Nut 
on  that  one.  That  was  a  deci¬ 
sion  we  made  based  on  some 


hard  engineering  realities  and 
what  wc  believe  was  the  best 
way  to  solve  some  customer 
feedback. 

Is  this  the  pattern  customers  can 
expect  for  future  versions  of 
Exchange  -  that  they  wiN  run  only 
on  the  newest  operating  system? 
No.  Boy.  that  statement  I 
would  hate  to  be  true. 

ft  was  surprising  iust  over  a  month 
ago  when  Brian  Valentine,  senior 
vice  president  of  the  Windows 
division,  told  us  there  might  be  a 
Longhorn  server  release,  after 
Microsoft  had  last  fall  that 
Longhorn  would  be  a  client -only 
release.  I  was  shocked,  too.  I 
promise  you. 

Is  there  any  new  line  of  thinking 
on  that  topic?  Yeah.  I'll  walk 
you  through  it.  because . . .  I’ve 
given  Brian  lots  of  feedback. 

Here's  how  I  think  about 


Check-Imaging  Bill  Spurs 
IT  Projects  at  Large  Banks 


Hmis  add  sx^itenis. 
build  networks  tor 
exchanging  images 


BV  LUCAS  HEAMIAH 

Wells  Fargo  &  Co.  last  week 
said  it’s  joining  the  list  of  large 
bank.s  that  plan  to  expand 
their  use  of  imaging  technolo¬ 
gy'  to  prepare  for  the  expected 
passage  of  Ic'glslatiun  giving 
electronic  check  image's  the 
same  validity  as  the  original 
paper  ones  for  payment  clear¬ 
ance  and  settlement  activities. 

Many  banks  have  already 
adopted  check  imaging  for 
their  customers.  Hut  most 
have  been  slower  to  add  tech¬ 
nology  to  their  back-end  sys- 
tetas  that  would  enable  them 
to  exchange  images  with  other 
banks  and  payment  clearing¬ 
houses  for  seitlemem  purpos¬ 


es.  aca)rding  to  analysts.  In 
large  pan.  tliat's  because  fed¬ 
eral  law  currently  requires 
banks  to  send  paper  copies  of 
checks  to  one  another 
But  that's  about  to  change, 
said  Avivah  Liian.  an  analyst  at 
Ganner  Inc.  Late  last  month, 
the  Check  Clearir^;  for  the  21st 
Century  Act.  known  as  Check 
21.  was  reintroduced  in  Con¬ 
gress.  TTh;  measure,  which 
Liian  expects  to  win  quick  ap¬ 
proval.  would  allow  banks  to 
e.xchange  electronic  check  im¬ 
ages  and  use  them  in  place  of 
the  actual  checlcs. 

Saving  Steps 

Mitch  Christensen,  executive 
vice  president  of  payment 
Strategic'S  at  Wells  Fargo,  said 
the  San  Francisco-based  com¬ 
pany  is  beginning  a  six-month 
rollout  of  IBM  hardware  and 


imaging  software  deveU>pcd 
by  Dallas-based  Caireker 
Corp.  The  technology  will  be 
installed  at  regional  check- 
processing  facilities  around 
the  country,  Christensen  said. 

Carreker's  suite  of  image 
processing  and  archiving  ap¬ 
plications  lets  users  capture 
check  images,  control  and 
monitor  access  to  their  image 
repositories  and  transmit  the 
images  via  the  Web,  e-mail, 
fax.  CDs  or  tapes. 

At  Wells  Fargo, 
the  software  will 
run  on  a  combi¬ 
nation  of  IBM's 
Unix  servers  and 
its  .?890/XP  doc- 
ument-prtK'ess- 
ing  system. 

Christensen 
was  unable  to  say 
how  much  the 
rollout  will  cost, 
because  Wells 
Fargo  still  needs 
to  determine  how 
much  new  equip¬ 


ment  will  be  required  to  sup¬ 
port  the  imaging  work.  In  ad¬ 
dition  to  the  ability  to  elimi¬ 
nate  exchanges  of  paper 
checks  with  other  banks,  ex¬ 
pected  benefits  include  faster 
access  to  checks  when  pay¬ 
ment  problems  arise,  he  said. 

Hank  Farrar,  president  and 
chief  operating  officer  at  The 
Small  Value  Payments  Co. 
(SVPCo).  which  Ls  creating  a 
national  network  for  exchang¬ 
ing  check  images, 
estimaied  that  the 
banking  industry 
will  save  S2.1  bil¬ 
lion  annually  by 
switching  to 
imaging.  Paper 
checks  require 
manual  handling, 
impose  trans¬ 
portation  costs 
and  can  slow 
fraud-detection 
efforts,  he  said. 

In  addition, 
delivering  paper 
checks  isn't  al* 


that  server  release  framework 
and  what  Pm  trying  to  do  for 
cu-siomcrs.  When  customers 
think  about  Microsoft,  they 
want  two  things.  They  want  a 
regular  supply  of  innovations 
that  are  solving  their  problems 
in  an  integrated,  comprehen¬ 
sive  fashion.  At  the  same  time, 
they  don't  want  it  everv'  12 
months.  They  want  it  at  less 
frequent  intervals.  I  son  of 
like  the  three-year  time  hori¬ 
zon.  frankly  . . .  where  it's  go¬ 
ing  to  make  good  business 
sense  for  customers. 

So  I  look  at  this  and  say. 
There's  a  set  of  things  that  I 
want  to  slipsta*am  out  in  the 
marketplace  for  the  customers 
for  w'hom  it  makes  sense  and 
then  do  a  big-bang  server  re¬ 
lease  every’  couple  years. 

The  question  that  the  com¬ 
pany’s  been  wrestling  with  is. 
Are  there  a  set  of  slipstreams 
that  wv  can  do  to  the  server  to 
make  those  more  relevant?  Or 
are  wc  doing  a  big-hang  re¬ 
lease?  Frankly,  we've  had  lots 
and  lots  of  discussions  on  it. 
Now  that  (the  launch  is)  done, 
it  is  my  highest  priority  over 
the  next  couple  months  to  get 
that  locked  in.  I 


ways  a  reliable  means  of  ex¬ 
changing  data.  For  instance, 
after  the  Sept.  11  terrorist  at¬ 
tacks.  all  airline  traffic  was 
grounded  for  days,  delaying  or 
even  halting  the  delivery  of 
checks  for  pixKcssing  between 
banks.  Farrar  .said. 

About  half  of  U^.  checks 
arc  imaged  and  archived  to¬ 
day.  but  that  figure  is  expected 
to  be  close  to  100%  by  2007. 
Liian  said.  But  another  step  in 
the  process  is  still  being  ad¬ 
dressed:  creating  mechanisms 
that  will  enable  banks  to  ex¬ 
change  the  images. 

A  handful  of  such  efforts  are 
under  way.  For  example.  Far¬ 
rar  said  New  York-based  SVP¬ 
Co.  which  is  owned  by  Wells 
Faigo  and  19  other  banks, 
plans  to  go  online  early  next 
year  with  eight  banks.  "We 
hope  we  can  create  an  indus¬ 
try  standard,”  he  said,  noting 
that  SVPCo  is  in  the  midst  of 
selecting  IT  vendors  and  net¬ 
work  services  providers  to 
help  support  its  network.  I 


16 


NEWS 


w.camputerworld.coni 


Microsoft’s  Server  VP  Discusses 
Competition,  Future  Releases 


BiNVaghto.  vice 
president  of  Mi’ 
crosofi  Corp.’s 
Windows  Serv¬ 
er  group,  spoke 
tost  week  with 
Computer- 
world  %  Carol 
Sliwa  about  the 
competition  the 
company^  newly  launched 
WintiowsServer20QSfaces 
and  about  his  thinking  on  fu¬ 
ture  releases.  Excerpts  from  the 
interview  Ji^low: 

Oo  you  eonsWar  Linux  to  be  ttw 
cMef  con^MtitkM  to  WtfidoMrs 
Sorvor  2003?  On  the  one  hand. 
NT  4  is  a  competitive  frame¬ 
work  that  1  look  at.  Solaris  is, 
AIX  is,  and  Linux  is. 

Oo  you  view  them  al  equally? 
Windows  Server  has  three 
core  roles:  application  plat¬ 
form.  IT  infrasmicture  and  in¬ 


formation  worker  productivi¬ 
ty.  Iforl  large  enterprise,  medi¬ 
um-size  business  and  small 
business.  For  each  one  of 
those.  I  think  of  the  competi¬ 
tion  as  different. 

Where  Linux  is  getting  trac¬ 
tion  is.  “rve  got  a  Unix  app 
and  I’m  not  doiitg  any  feature 
development  on  it  I  want  the 
cost  cfricienctcs  of  x66.  And  I 
don't  want  to  have  to  recom¬ 
pile  the  app  in  any  significant 
way.  etc.  Linux  looks  interest¬ 
ing."  (If  1  I*ve  got  a  simple  Web 
server  that's  just  serving  up 
static  HTML,  Linux  looks  in¬ 
teresting.  Those  would  be  ex¬ 
amples  of  app  workloads  pre¬ 
dominantly  in  the  enterprise. 

Microsoft  wM  ship  soma  new 
hmettonelty  in  the  coming 
months  as  add-ons  for  WMows 
Ssrvtr  2003.  What  do  you  think 
should  bo  fraa.  and  what  should 
ba  saparata.  forfaa  products? 


The  philosophy  that  I've  had 
is  anything  that  has  been  de¬ 
livered  in  essence  out  of  the 
box  in  Windows  Server  to 
date,  that  we're  effectively  im¬ 
proving  on,  is  available  for  any 
licensed  Windows  Server 
2003  customer. 

An  example  of  that  would 
be  Windows  SharePoint  Ser¬ 
vices.  I  think  of  Windows 
SharePoint  Services  as  the 
next-generation  file  server.  It 
would  stand  to  reason  that  if  I 
think  of  Windows  SharePoint 
Services  as  a  file  server,  and 
Windows  servers  are  naturally 
file  servers,  that  would  be  free 
for  any  Windows  Server  2003 
customer. 

b  tburc  any  chance  you  wH  re- 
vbtt  the  decision  ab^  Exchange 
Server  2000  not  rumina  on  Win¬ 
dows  Server  2003?  Nope.  Not 
on  that  one.  That  was  a  deci¬ 
sion  we  made  based  on  some 


hard  engineering  realities  and 
what  we  believe  was  the  best 
way  to  solve  some  customer 
feedback. 

b  thb  the  pattern  customers  can 
expect  for  future  versfora  of 
Exchange  -  that  thay  wM  run  only 
on  the  newest  operating  system? 
Na  Boy.  that  statement  I 
would  hate  to  be  true. 

H  was  surprising  Just  over  a  month 
ago  whan  Brian  VatonOna,  asnior 
vfea  prasMsnt  of  tha  Windows 
dhfbian.  lofri  UB  dwre  might  be  a 
Longhorn  tarvsr  rMssai,  aftar 
MkrooofI  had  said  last  fall  Hut 
Longhorn  would  be  a  cBant-only 
rebase.  I  was  shocked,  too.  I 
promise  you. 

b  there  any  new  Mne  of  Ihiniting 
on  that  topic?  Yeah,  TU  walk 
you  through  it.  because . . .  I've 
given  Brian  lots  of  feedback. 

Here's  how  I  think  about 


that  server  release  frameworic 
and  what  I'm  trying  to  do  for 
cu.stomcr$.  When  customers 
think  about  Microsoft,  they 
want  two  things.  They  want  a 
regular  supply  of  innovations 
that  are  solving  their  problems 
in  an  integrated,  comprehen¬ 
sive  fashion.  At  the  same  time, 
they  don't  want  it  every  12 
months.  They  want  it  at  less 
frequent  intervab.  I  sort  of 
like  the  three-year  time  hori¬ 
zon.  frankly . . .  w^iere  it’s  go¬ 
ing  to  make  good  business 
sense  for  customers. 

So  I  look  at  this  and  say, 
There's  a  set  of  things  that  I 
want  to  slipstream  out  in  the 
marketplace  for  the  customers 
for  whom  it  makes  sense  and 
then  do  a  big-bang  server  re¬ 
lease  every  couple  years. 

The  question  that  the  com¬ 
pany’s  been  wrestling  with  is, 
Are  there  a  set  of  slipstreams 
that  we  can  do  to  the  server  to 
make  those  more  relevant?  Or 
are  we  doing  a  big-bang  re¬ 
lease?  Frankly,  we've  had  lots 
and  lots  of  discussions' on  it. 
Now  that  [the  launch  is]  done,  - 
it  is  my  highest  priority  over 
the  next  couple  ntonths  to  get 
that  locked  in.  I 


Check-Imaging  Bill  Spurs 
IT  Projects  at  Large  Banks 

Firms  add  systems, 
build  networks  for 
exchanging  images 


av  LUCAS  M€AmAN 

Wells  Fargo  &  Co.  last  week 
said  it's  ioinmg  the  list  of  large 
banks  that  plan  to  expand 
their  use  of  imaging  technolo¬ 
gy  to  prepare  for  the  expected 
pasK^  of  legislation  giving 
electronic  check  images  the 
same  validity  as  the  original 
paper  ones  for  payment  clear¬ 
ance  and  settlement  activities. 

Many  banks  have  already 
adopted  check  imaging  for 
their  customers.  But  most 
have  been  slower  to  add  tech¬ 
nology  to  their  back-end  sys¬ 
tems  that  would  enable  them 
to  exchange  images  with  other 
banks  and  payment  clearing¬ 
houses  for  settlement  purpos¬ 


es.  according  to  analysts.  In 
large  part,  that's  because  fed¬ 
eral  law  currently  requires 
banks  to  send  paper  copies  of 
checks  to  one  another. 

But  that’s  about  to  change, 
said  Avivah  Litan.  an  analyst  at 
Ganner  Inc.  Late  last  month, 
the  Check  Clearing  for  the  2Ist 
Century  Act.  known  as  Check 
21.  was  reintroduced  in  Con¬ 
gress.  The  measure,  which 
Litan  expects  to  win  quick  ap¬ 
proval,  would  allow  banks  to 
exchange  electronic  check  im¬ 
ages  and  use  them  in  place  of 
the  actual  checks. 

Saving  Steps 

Mitch  Christensen,  executive 
vice  president  of  payment 
strategies  at  WeUs  Fargo,  said 
the  Sui  Francisco-based  com¬ 
pany  b  beginning  a  six-month 
rollout  of  IBM  hardw^e  and 


imaging  software  developed 
by  Dall^-based  Carreker 
Corp.  The  technology  vrill  be 
inst^ed  at  regional  check- 
processing  ^ciUties  around 
the  country,  Christensen  said. 

Carreker's  suite  of  image 
processing  and  archiving  ap¬ 
plications  lets  users  capture 
check  im^cs,  control  and 
monitor  access  to  their  image 
repositories  and  transmit  the 
images  via  the  W^  e-maU, 
fax,  CDs  or  tapes. 

At  WeUs  Fargo, 
the  software  will 
run  on  a  combi¬ 
nation  of  IBM’s 
Unix  servers  and 
its389CI/XPdoc- 
umenl-process- 
ing  system. 

Christensen 
was  unable  to  say 
bow  much  the 
rollout  will  cost, 
because  Wells 
Fargo  still  needs 
to  determine  bow 
much  new  equip- 


Check  21 


meat  will  be  required  to  sup¬ 
port  the  imaging  work.  In  ad¬ 
dition  to  the  ability  to  elimi¬ 
nate  exchanges  of  paper 
checks  with  other  banks,  ex¬ 
pected  benefits  include  foster 
access  to  checks  when  pay¬ 
ment  problems  arise,  he  said. 

Hank  Farrar,  president  and 
chief  operating  officer  at  The 
Small  V^ue  Payments  Ca 
(SVPCo),  which  is  creating  a 
national  network  for  exchang¬ 
ing  check  images, 
estimated  that  the 
banking  industry 
will  save  S2.1  bil¬ 
lion  annually  by 
switching  to 
imaging.  Paper 
checks  require 
manual  handling, 
impose  trans¬ 
portation  costs 
and  can  slow 
fraud-detection 
efforts,  be  said. 

In  addition, 
delivering  paper 
checks  Isn't  al¬ 


ways  a  reliable  means  of  ex¬ 
changing  data.  For  instance, 
after  the  Sept.  U  terrorist  at¬ 
tacks.  all  airline  traffic  was 
grounded  for  days,  delaying  or 
even  halting  the  delivery  of 
checks  for  processing  between 
banks,  Farrar  said. 

About  half  of  US.  checks 
are  imaged  and  archived  to¬ 
day.  but  that  figure  is  expected 
to  be  close  to  100%  by  2007. 
Litan  said.  But  another  step  in 
the  process  is  still  being  ad¬ 
dressed*  creating  mechanisms 
that  will  enable  banks  to  ex¬ 
change  the  images. 

A  handful  of  such  efforts  are 
under  way.  For  example,  Far¬ 
rar  said  New  Yori(-b»ed  SVP¬ 
Co,  which  is  owned  by  Wells 
Faigo  and  19  other  banks, 
plans  to  go  online  early  next 
year  with  eight  banks.  "We 
hope  we  can  create  an  indus¬ 
try  standard."  be  said,  noting 
that  SVPCo  is  in  the  midst  of 
selecting  IT  vendors  and  net¬ 
work  services  providers  to 
help  support  its  network.  I 


It’s  hardened  facilities  and  high-level  security. 

SunGard  maintains  more  than  3  million  sq.  ft.  worldwide  of 
strategically  placed,  hardened  facilities,  providing  you  with 
high  availability  to  your  information  and  virtually  no  downtime. 
Well-staffed  facilities  feature  fully  redundant  power  and 
communications,  state-of-the-art  equipment,  multi-platform 
compatibility  and  high  levels  of  security. 


It  s  a  dedicated, 
redundant  network 
backbone. 


Every  SunGard  location  is 
connected  by  nearly  25,000 
miles  worldwide  of  dedicated 
network  backbone,  providin 
on-demand  or  dedicated 
^  DS1/DS3  protocol- 
independent 
communications 


It’s  off-site  data 
storage  that’s 
truly  off  site. 

Some  continuity  plans 
incorporate  in-house 
backup  tapes  and  stor¬ 
age.  But  they’re  useless 
in  a  power  failure,  fire  or 
evacuation.  SunGard’s 
off-site  storage  is  a  key  part  of  Information  Availability.  Our 
file  sharing,  primary  storage  and  data  backup  services  are 
unrivalled  for  data  Integrity  and  reliability.  And  they  free  up 
your  equipment  and  people  for  other  purposes. 


It’s  platform-independent  professionals 
bringing  it  all  together. 


With  SunGard,  more  than  2,000  Information  Availability  experts 
are  at  your  fingertips.  We  can  help  you  with  everything  from 
vulnerability  assessment  and 
impact  analysis  to  planning,  tech- 
nology  integration,  network  and 

architecture  solutions,  deployment,  nirntntiWji  3<iiiiii  i«i 
testing  and  certification.  Everything  ._  „ 

you  need  to  keep  your  business  The  Net  Beneath  You 


The  Net  Beneath  You 


Don’t  let  lost  access  to  Information  take  your  company  down. 
Stay  up  and  running  with  an  Information  Availability  strategy. 


Talk  with  us.  An  Information  Availability  strategy  from  SunGard  can  be  a  life-saver  when  it 
comes  to  keeping  people  and  information  connected.  Data  is  more  time-sensitive  than  ever. 

And  SunGard's  complete  continuum  of  services  can  protect  your  information’s  availability, 

enterprise-wide.  From  tiered  applications  recovered  as  fast  as 
48  hours,  to  high  availability  applications  in  as  little  as  2  hours, 
to  managed  services  that  provide  continuous  access  to  critical 
information. 

SunGard  offers  the  industry’s  most  comprehensive  Information 
Availability  services  -  from  planning,  traditional  disaster  recovery, 
network  and  managed  services  to  IT  outsourcing,  professional 
'  consulting  and  high  availability  solutions.  Plus,  end-user  recovery 
facilities  where  your  people  can  go  to  reconnect  with  data  in  an 
emergency.  In  fact,  nearly  90%  of  U.S.  companies  with  $1  million 
or  more  in  revenue  are  located  within  35  miles  of  one  of  our  facilities.* 
Every  day,  we  help  ensure  that  over  10,000 


clients  worldwide  have  uninterrupted  access  to 
their  business-critical  information.  They  count 
on  us  to  supply  the  people,  technology  and 
infrastructure  necessary  to  provide  multiple 
points  of  access  to  information,  flexible  alternate 
workplace  options  for  their  employees,  and 
updated  continuity  plans  and  systems  to  meet 
their  future  technology  needs. 

SunGard  is  one  of  the  largest  providers  of 
platform-independent  business  continuity, 
managed  hosting  services  and  more.  No 
company  has  more  ways  to  keep  your  business  in  business.  See  how  your  company 
rates  on  Information  Availability  right  now.  Take  our  Information  Availability  Challenge  at 
wnivw4ivailabiifty.tungard.com/iac 


*Sot«c«:  Dunn  A  eradstreefs  MODI 


SunGard:  The  Net  Beneath  You. 

With  SunGard  you  get 

•  the  company  that  founded  the  recovery 
industry  in  1978 

•  comprehensive  support  for  more  than 
30  platforms 

•  75  facilities  in  10  countries  with  more  than 
15,000  end-user  positions  worldwide 
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Repetitive  configuration  problem 


.Mii^  te  ctoile^ng . 

an4  Office  XP. 


Recognize  any  of  those  issues?  Or,  perhaps,  ail  of  them?  We  thought 
so.  Many  of  these  issues  can  be  relateil  to  your  legacy  desktop 
software,  (brtunately,  many  of  them  can  be  addressed  by  features  In 
Microsoft*  Windows*  XP  Professional  and  Office  XP  Professional. 


Wmiu  to  aorti  jflthw 


Cent  £«t  connected 

Needs  to  shai 

-Si  '* 

■  ¥. ' 

■  '’V.* 

Want  specific  examples?  Windows  XP  Professional  offers  new 
Remote  Assistance,  which  enables  you  to  view  a  user's  screen  and 
control  the  user’s  computer  to  solve  technical  problems  from  afar. 
Office  XP  Professional  gives  you  installation  support  for  HTTP, 

HTTPS,  and  FTP,  which  means  you  can  install  and  maintain  the  suite 
directly  from  a  Web  server  or  a  file  share  on  your  network.  And  finally, 
several  new  features  make  deployment  easier  than  ever.  For  more 

Ideas  about  managing  your  desktops,  visit  niictosoft.coiit/desktop 
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PATRICIA  KEEFE 


Surviving  a  Sea  Change 


The  it  community,  from  code  jock¬ 
eys  all  the  way  up  to  the  executive 
suite,  is  undergoing  a  sea  change.  The 
existence  of  everything  IT,  from  job 
categories  to  entire  departments,  is  up 
for  reassessment,  reassignment  —  and  maybe  even 
headed  toward  redundancy. 


The  roost  obvious 
chai^  involves  the  loss 
of  IT  jobs.  Many  have 
gone  abroad,  and  they 
aren’t  coming  back.  Off¬ 
shore  outsourcing  as  a 
percentage  of  IT  bud¬ 
gets  went  from  12%  in 
2000  to  28%  in  2003.  ac¬ 
cording  to  Forrester  Re¬ 
search.  The  U.S.  Bureau 
of  Labor  Statistics  esti¬ 
mates  that  there  are  now 
212,000  unemployed 
computer  and  mathematics  profes¬ 
sionals.  No  doubt  the  number 
would  be  even  higher  but  for  the  IT 
workers  who  have  given  up  and 
moved  on  to  different  careers. 

It's  only  going  to  get  worse  as 
more  and  more  companies  out¬ 
source  more  and  more  functions 
(see  story,  page  39).  Meta  Group  is 
predicting  that  as  many  as  S0%  of 
all  U.S.  IT  workers  could  shift  to 
contract  labor  by  2007.  Meanwhile, 
our  seed  com  is  under  siege:  Fewer 
students  are  opting  for  computer 
science  degrees  as  more  corporate 
recruiters  skip  college  campuses. 

We  have  also  suffered  the  loss  of 
n*  credibility.  Massive  sums  of 
money  have  been  spent  on  IT  in  the 
past  five  years,  and  many  business¬ 
es  remain  unsure  of  the  benefits. 
Laige  projects  that  failed,  disasters 
that  didn’t  happen,  revolutions  that 
didn't  come.  ROl  that  can’t  be  quan¬ 
tified  —  all  have  dimmed  the  aura 
that  surrounded  IT  in  the  late  '90s. 

And  then  there  are  conunand-and- 
concrol  issues.  Should  the  IT  func¬ 
tion  be  dispersed  across  business 
units?  Has  IT  become  a  utility  or 
peibaps  so  pervasive  that  having  a 


specific  department  is 
no  longer  warranted? 
Should  the  whole  she¬ 
bang  be  outsourced,  or  is 
IT  still  too  critical  to 
corporate  strategy? 

There’s  no  question 
that  the  industry  is 
changing  before  our  eyes. 
Our  community  needs  to 
move  past  the  stale  de¬ 
bate  over  whether  we  arc 
experiencing  a  wholesale 
sellout  of  IT  workers  or 
an  inevitable,  economically  fueled 
evolution.  The  train  has  already  left 
the  station,  and  we  need  to  figure  out 
where  ifs  heading  from  here.  We 
need  to  focus  on  bow  changes  taking 
place  today  will  shape  the  next  phase 
of  this  industry.  Some  issues  you 
might  want  to  consider 
■  What  are  your  core  competen¬ 
cies  and  core  business  needs? 


■  How  will  your  company  comply 
with  new  government  privacy  and 
accounting  regulations  —  many  of 
which  will  require  system  upgrades? 

■  How  would  an  ever-changing 
group  of  contract  workers  affect 
your  budget,  project  schedules, 
quality  assurance,  maintenance  and 
upgrade  processes  and  plans? 

■  If  projects  are  built  by  contract 
workers,  should  their  costs  be 
borne  by  the  affected  business 
units?  And  taking  this  further,  do 
business  units  need  to  go  through 
IT  to  get  projects  done? 

■  If  IT  isn’t  the  builder  of  proj¬ 
ects  or  the  supplier  of  labor,  into 
what  will  it  evolve?  What  kind  of 
value  will  it  bring  to  the  business? 

■  If  key  skills  are  outsourced 
abroad,  who  will  fuel  the  next  gen¬ 
eration  of  technological  innovation 
in  this  country? 

■  What  new  IT  and  management 
skills  will  be  in  demand? 

Given  that  technology  is  the  future 
in  industry  affer  industry,  it's  clear 
that  IT  will  have  a  key  role  to  play. 
But  whatever  that  role  becomes, 
make  sure  your  voice  is  heard.  You 
can  tell  us  what  you  think  by  visiting 
the  discussion  forum  of  Computer- 
world.com  [(^uickLink  a3070].  Help 
plan  the  future  now!  I 
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Security  for 
Web  Services 

There  are  three  vital 
parts  to  the  open  stan¬ 
dards  underlying  Web 
services  security.  There's 
authentication,  which  uses 
Standard  Generalized  Markup 
Language  (SGML)  to  ex¬ 
change  information  about  a 
particular  user.  There's  autho¬ 
rization,  which  grants  access 
control  via  Extensible  Access  Control 
Markup  Language  (XACML).  And. 
finally,  there's  the  administration  layer 
now  managed  through  the  use  of  Ser¬ 
vice  Provisioning  Markup  Language, 
or  SPML 
SPML  automates 
the  creation  of  user 
accounts  through  a 
role-based  access- 
control  model.  Using 
SPML,  it's  possible 
to  approve,  modify 
and  cancel  accounts 
across  the  enterprise 
without  having  to 
manually  access 
rules  for  each  ac¬ 
count.  This  means 
IT  folks  working  on  portals  and  appli¬ 
cation  servers  and  in  service  centers 
have  a  standard  mechanism  for  creat¬ 
ing  a  request  that  will  work  through¬ 
out  the  organizatioa 
For  example,  if  you  went  to  your 
supply  chain  partner’s  site  to  grab 
information  stored  in  a  back-office 
system,  the  vendor  would  send  a  re¬ 
sponse  with  a  request  using  SPML  to 
communicate  with  an  identity  man¬ 
agement  software  package.  The  re¬ 
quest  would  automatically  acquire 
the  appropriate  permissions  before 
granting  you  access  to  the  data.  Hiis 
would  happen  without  your  having 
to  know  about  your  vendor’s  back- 
office  system. 

As  part  of  the  tool  kit  to  build  such 
a  Web  service,  SPML  automates  the 
process  and  acts  as  an  XML-based 
provisioning  service,  making  it 
straightforward  —  at  least  from  the 
user's  point  of  view  —  to  dynamically 
read  things  from  a  directory. 

Oarran  Rolls,  director  of  technology 
at  Waveset  Technologies  Inc.  in  Austin 
(and  chairman  of  the  Provisioning 
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Services  Technical  Committee  and 
co-chairman  of  the  Security  Standards 
Joint  Committee  at  OASIS),  says  SPML 
should  make  it  possible  for  companies 
to  move  beyond  their  tentative  em¬ 
brace  of  Web  services. 

“SPML  is  a  critical  piece  of  the  secu¬ 
rity  suck  for  Web  services,"  he  says. 
“It's  useful  to  have  an  open-standards- 
based  way  to  establish  accounts.** 

You  can  learn  more  about  OASIS 
and  SPML  at  www.OpenSPMLorg, 
where  SPML  is  available  for  free. 

The  odd  thing  about  the  release  of 
the  SPML  standard  from  OASIS  is  that 
on  the  surface,  it  would  have  made 
more  sense  to  develop  SPML  before 
SGML  and  XACML.  la  their  haste  to 
demonstrate  the  cohesive  security  of 
Web  services,  vendors  ignored  the 
management  layer.  In  a  sense,  they 
were  so  excited  to  identify  people  and 
give  them  access  to  a  Web  service  that 
they  forgot  the  basics  of  account 
provisioning. 

Although  it's  great  that  SPML  is  al¬ 
most  here,  if  it  had  been  here  from 
the  beginning,  maybe  Web  services 
would  be  more  real  today  instead  of 
so  much  hype.  I 


THORNTON  MAY 

RealTime 

Information 

Weapons 

I  FIND  IT  perversely  ironic 
that  the  department  most 
responsible  for  creating 
the  dynamic  real-time  econo¬ 
my  we  live  in  today  (IT,  of 
course)  continues,  in  many 
cases,  to  operate  with  Indus¬ 
trial  Age,  could-have-been- 
designed-by-Poppa-Ioe-Stalin 
batchlike  prxicesses. 

This  situation  has  to  change,  and 
[>copIe  are  beginning  to  see  how  to  do 
U.  Researchers  designing  executive 
education  classes  at  Che  Fisher  College 
of  Business  at  Ohio  State  University 
and  the  Comdex  CIO  **6001  camp" 
program  asked  SO  IT  leaders  to  rank 
key  processes  on  the  basis  of  being 
behind  the  curve,  on  the  curve  or 
ahead  of  the  curve. 

The  IT  process  most  in  need  of 
improvement  on  the  curve  is  demand 
management,  followed  closely  by 


portfolio  management. 

These  two  processes  di¬ 
rectly  and  substantively  af¬ 
fect  the  cost  of  IT  inside  a 
company  and  its  perceived 
value  —  two  issues  sitting 
top-of-mind  with  CIOs. 

These  two  processes  need 
to  be  done  in  real  time. 

IT  departments  are  no 
strangers  to  process  analy¬ 
sis  and  remediation.  In¬ 
deed.  several  companies 
have  asked  their  IT  shops 
to  apply  this  skill  to  the 
rest  of  the  organization.  It's 
now  time  to  apply  these  vaunted 
see-the-proce^improve-the-process 
skills  to  IT  itself. 

In  1987.  my  friend  and  research  col¬ 
league  William  R.  Synnott  (then  vice 
president  of  data  processing  at  Bank 
of  Boston)  wrote  the  book  The  Infer- 
motion  Weapon:  Winnir^  Customers 
and  Markets  Through  Technology.  In 
addition  to  writing  the  first  print  in¬ 
stance  of  the  term  C70.  Synnott  pre¬ 
sented  the  metaphor  of  the  IT  shop  as 
an  armory  —  a  creator  of  capabilities 
(“information  weapons")  that  could 
deliver  business  advantage. 


Information  weapons 
create  value  w4ien  IT  gets 
users  to  choose  something 
important  as  a  target  and 
then  delivers  the  informa¬ 
tion  weapon  to  the  select¬ 
ed  bull's-eye.  But  before 
you  start,  you  need  to  ask 
yourself  five  questions: 

1  and  2.  Where  and  by 
whom  do  IT  targeting 
decisions  get  made? 

3  and  4.  How  and  when 
do  IT  targeting  decisions 
get  made? 

$.  Are  you  happy  with 
your  answers  to  the  first  four  ques¬ 
tions? 

Few  of  us  go  through  this  basic 
Q^cA,  which  helps  explain  why  the 
technology  management  process 
hasn't  really  been  int^ated  with 
proiect  management  or  financial 
management  processes. 

The  challenge  facing  those  who 
would  improve  the  preproject  portion 
of  the  demand  management  process 
is  that  users  don't  realty  understand 
what  technology*  can  do.  nor  do  they 
know  how  much  technol<^  has  really 
changed. 


A  direct  analogy  can  be  draw-n  to 
the  difference  between  the  smart  pre¬ 
cision  bombs  of  the  current  military 
campaign  in  Iraq  and  the  dumb  bombs 
used  in  World  War  11. 

During  WWIl.  an  average  B-17 
bomb  missed  its  target  by  some  2JOO 
feet.  If  you  wanted  a  90%  probability 
of  hitting  a  particular  target,  you 
had  10  drop  some  9.(K)0  bombs.  That 
required  a  bombing  run  of  1.000 
bombers  and  placed  10.000  men  at 
risk  (not  to  mention  the  poor  souls 
on  the  ground). 

In  contrast,  with  the  latest  weapon¬ 
ry.  one  plane  flown  by  one  man  with 
one  bomb  could  have  the  same  proba¬ 
bility  of  hitting  its  target. 

Today,  we  have  more  accurate  infor¬ 
mation  weapons.  Many  users  don't 
know  this.  And  even  if  they  did,  our 
targeting  still  stinks. 

So  the  one  big  IT  project  you  might 
want  to  approve  this  year  is  a  real¬ 
time  demand  management  and  port¬ 
folio  management  system.  I 
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Ararther  Look  at  VVhat  Lies  Ahead  for  IT 


For  COST.  qualilyi)f-S8rv«» 
and  security  reasons.  Cap 
Geminj  Ernst  &  \buno  Chief  Tech- 
notogist  John  Rartonson's  fantasy 
of  only  100  companies  providing 
the  m^ority  of  computer  services 
lo  the  world  wont  come  to  light, 
desoito  the  greed  of  Ernst  &  Yxina 
Microsoft.  IBM  and  EOS  in  trying  to 
control  everyone's  data  pTfie  ^ 

and  (Xits  of  ft.*  QukkLink  36727]. 

In  fact  the  trend  s  |ust  the  oppo¬ 
site.  toward  Unix  and  decentrah 
izad  data.  This  is  for  good  reason. 
MKTosott  became  popular  because 
the  high  experse.  poor  gualRy  of 
service.arroganceandincQrra)e- 
lence  of  companies' centni  com¬ 
puter  departments  (commonly 
cailedMiS)causedotherdep^- 
ments  to  purchase  thee  own  sys¬ 
tems,  which  would  be  under  their 
own  control. 

It's  unforkjrtaie  you  chose  to  run 
suchanarllcie. 

BobTmen 

tecfinicoi  {#cer. 
Ffy-By-Day  Consulting  Inc, 
Ouhoh,  Go.. 

boh^iverysecurefinuzcom 


iA8R£E  WITH  John  Parlorson 
that  new  technology  wi  be  pro¬ 
duced  but  history  has  taught  16 
Ihel  businass  doesn't  move  quicMy 
io  adopt  the  new  processes  lhal 
new  technology  demands. 

Manufacturing  resource  plan¬ 
ning  took  15  to  20  yean  to  reaty 
grab  hold,  and  tod^  there  are 
many  companies  that  have  not 
moved  to  ERP.  though  they  shoiid 
have. 

PayiE.liller 

Partner,  Comptaer  Sciences 
Corp.,  Cheshire.  Conn, 
pmiUe32@cscxom 


Taking  Advantage 
Of  Mainframe  Skilis 

The  Mincu  Ufanframe  Btwi 
Oran  Looms*  (Quddjnk 
37362)  certainly  reintorces  some 
of  the  issues  I  have  found  over  re¬ 
cent  years.  However.  I  would  Me  to 
suggest  another  spin  on  the.  A  lot 
of  the  skis  that  mantrame  data 
center  personnel  have  are  in  iact 
the  same  skis  lacking  from  open- 


server  data  centers.  The  idea  of 
property  organized  shifts  wtih  actual 
operelors  to  mondor  and  manage 
those  systems  set  doesn't  enst. 

Vou  routinely  see  highly  paid  staff 
Me  sysadmins  or  DBAs  dong  the 
work  lha  a  console  or  system  oper¬ 
ator  would  do  n  a  mainframe  world. 

The  problem  is  a  cutbnl  one  -  a 
faiiure  to  put  things  together  so  that 
It  can  be  handed  over  to  operations 
stafllotahecareolusaigthesni- 
pM.  tunctional  fffterlaoe  and  proce¬ 
dures  you  have  provided 
In  tact  I  am  constantly  amazed 
atheemountoftmspentre- 
nvenUngwhallhemanlrame- 
because  it  grew  from  the  <lee  of 
stabidy  and  reiebAly  beeig  No.  t 
to  the  organizabon  and  user - 
akeadyhad. 

Pilar  Dominay 
Independent  Unix 
contractor,  Dallas. 
pdominey^dominey.biz 

Your  ARTICLE ‘Manfrwne 
Bran  Oran  looms*  startles 
me.  it  gives  the  DDressKin  lhal 
emplo^  are  wringing  their  hands 
n  deep  concern  that  toey  wl  be 
unable  to  find  local  talenL 


H  such  a  shortage  ex6ti  why 
aren't  there  more  ads  requesting 
mantrame  skils? 
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£4akr  View  Terrace.  Calif. 

REOARoaM  the  anide  lAw)- 
kame  Bran  Oran  looms.' 

It’s  tnie  that  those  of  us  with  main¬ 
frame  skfc  are  genetaBy  over  5G 
However,  If  there  6  a  itfiortage. 
why  is  it  that  none  of  us  can  find 
I  job?  Coukt  there  possMy  be 
some  age  dhcnminalxin  « the 
markelpiKe? 
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COHPVTERWOflU)  wetooines 
conenerds  from  its  readers.  Loners 
wi  be  edited  for  brevity  and  darily 
They  shoiM  be  addressed  to  Jame 
EcHe.  letters  eddex.  Cotrvulerwarid 
PO  Box  9f71. 500  Okt  (kHnechcul 
fatfiRamirn^iam  Mass.  01701- 
Fax  (506)  879^843 
E-mai;  MiarsBcompulerworldxom. 
Include  an  addtess  and  phone  num¬ 
ber  (or  nvnediMe  verAcMion. 


k  Mas  Mn  on  these  red  <Nhw 
'  tapes  aeon  or  Web  Bte 
paMraertAeose/Mtari 


Dr.  Tkn  Grieser  is  responsible  for  performance  and  availability 
management  software  research  In  IDC's  Enterprise  Systems 
Management  Software  program.  His  coverage  includes  service 
level  martagement  for  systems  and  applications  across  a  wide 
variety  of  platforms. 
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Fight  Data  Center  Complexity  with  Self-Managing  Servers 


>  W«  DOW  hear  the  terms  “setf-managing,” 
“setf-haaKng,"  ‘^•protecting,*'  "seff-optimizing,” 
“seff-configifring,'*  ‘1>olicy-based,’'  'itollstic,'’ 
"introspective,’*  "autonomic’*  and  “smart” 
computing  for  systems  management  software  — 
what  does  this  all  mean? 

All  of  these  terms  refer  to  putting  more  system 
management  intelligence  into  software  tools,  so  that 
problem  detection,  diagnosis  and  response  can  be 
performed  automatically  in  an  increasing  number  of  cases. 

>  Just  how  real  and  proven  are  the  lofty  claims  of 
vendors  about  self-managing  IT  kifrastnjctures? 

Quite  real.  Some  aspects  of  self-management  have  been 
successfully  implemented  in  production  environnrents  for 
a  nunfoer  of  years.  For  example,  scripted  responses 
(such  as  re-booting  a  server)  to  fix  common  problems 
(such  as  running  out  of  available  memory  space)  are 
commonly  deployed.Techniques  such  as  event 
cofrelation  are  used  to  help  determine  which  of  several 
events  is  most  likely  to  be  the  hjndamental  or  "root 
cause"  of  a  problem. 

>  Why  is  this  all  so  important  and  what  are  the 
most  significant  benefits  to  the  enterprise? 

What  is  really  important  in  today's  complex,  distributed 
environments  is  to  simplify  the  job  of  system 
management.  With  increasing  platform  complexity,  and 
constraints  on  IT  budgets.  IT  professionals  such  as  system 
administrators  are  being  asked  to  manage  more  and  more 
infrastructure  elements,  such  as  servers,  in  less  time. 
Indeed,  “doing  more  with  less”  is  a  common  job 
requirement  for  system  administrators  these  days. 
Intelligent  system  management  sof^re  can  simplify  the 
job  of  administrators  by  autormting  responses  to  known 
cypes-of  problems,  thus  reducing  the  nunfoer  of  situations 
that  require  manual  intervention  by  the  IT  expert. 

Benefits  to  IT  include  cost  savings,  the  ability  to  "scale”  to 
manage  ever  increasing  numbers  of  servers  and  server 
images,  and  improved  service  levels  such  as  system 
performance  and  availability. 


>  How  does  an  enterprise  implement  these 
capabilities  across  dissimilar  platforms,  and  are 
standards  important? 

Typically,  there  will  be  platform-specific  management 
components  (such  as  monitoring  agents  for  Windows  and 
Unix  servers)  linked  to  comnxMi  management  components 
such  as  “consoles.”  The  common  management 
components  often  deal  with  automatic  responses  to 
events,  and  also  work  with  hi^r  level  constructs,  such  as 
applications  and  end-user  views.  Standards  are  useful  in  that 
they  can  enable  easier  data  gathering,  such  as  monitoring, 
across  platforms. Also,  system  management  tools  often  use 
standards  to  communicate  infomution  from  basic 
monitors  to  hitter-level  management  consoles. 

“What  is  really  important 
in  today’s  complex,  distributed 
environments  is  to  simplify  the 
job  of  system  management.” 

>  What  can  we  expect  from  this  technology 
three  years  from  now? 

The  direction  is  clearly  toward  hi^er  levels  of 
automated  responses,  not  only  to  fix  operational 
interrupts  or  breakages,  but  also  to  address  dynamic 
management  of  resources  (such  as  dynamic  load 
balancing  and  provisioning  servers  as  needed)  in  order 
to  achieve  desired  service  levels.  More  and  more,  the 
objective  is  to  reduce  manual  intervention  to  diagnose 
and  fix  problems,  so  that  higher  levels  of  scalability, 
performance  and  availability  can  be  achieved. 

For  more  information,  please  call  800^4-8647  x385 
or  visit  www.uni8ys.com/datacenterteentinel 
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Connecting  People 


The  Nokia  approach  to  security  integrates  the 
world's  best  security  software  with  Nokfa's 
purpose-built  hardened  hardware,  operating 
system,  and  rapid  deployment  management 
platforms,  creating  a  besi-of-breed  solution 
that’s  easy  to  implement  and  manage.  Take 
Nokia’s  partnership  with  Check  Point  Software 
Technologies,  world  leader  in  VPN/Firewali 
software  that  allows  organizations  to  deploy  a 


single,  integrated  solution  for  secure  Internet 
communications.  Or.  Internet  Security  Systems'" 
(ISSX  which  makes  Nokia  the  most  secure  and 
easy  to  deploy  intrusion  protection  appliance 
available  mday.  Our  program  for  seofity  developers 
also  allows  cusmmets  to  add  other  certified  security 
software  such  as  network  management  agents, 
log  analysis  and  applicaOon  security. 

If  you  like  lunch,  visit 
www.nokla.cofN/9et.a.{tfc/amer1cas 
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VPNs  Made  Easy 

Secure  Sockets  Layer  virtual  private 
netwoiics  make  accessing  Web- 
enabled  applications  as  easy  as 
launchii^  a  browser.  But  other 
applications  still  require  client 
software,  so  you  may  end  up  using 
an  IPsec  VPN  as  well.  Page  28 
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USERS 
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QUICKSTUOV 

A  weblog,  or  blog,  is  a  Web  site 
u^ere  an  individual  records  his 
own  thoughts  and  opinions  as 
well  as  comments  others 
and  offers  links  to  other  Web 
resources.  Page  30 


SECURITY  MANAOER'S  JOURNAL 

Meiw  Security  Hinges 
On  Gateway  Appliance 

An  integrated  security  gateway 
appliance  could  provide  interim  access 
between  Mathias  Thurman's  company 
and  one  that  it's  acquiring,  without 
compromising  secttrity.  Page  32 


Four  beta  users^ 
thernigrationbrin^ 
efficiency  gains  but 
r^ires  careful  plan¬ 
ning.  By  Carol  Sliwa 

Microsoft corp  launched 
its  long-delayed  Window’s 
Server  2003  operating  sys¬ 
tem  last  week,  but  some 
users  couldn’t  wait. 
Nasdaq  Stock  Market  Inc.  and  |et- 
Blue  Airways  Corp.  jumped  from  Win¬ 
dows  2000  Server  to  the  Windows 
2003  beta  to  gain  a  performance  edge 
and  pursue  server  consolidation. 

Meanwliile,  the  Kentucky  Depart¬ 
ment  of  Education  (KDE)  and  Intra- 
w’est  Corp.  took  the  plunge  in  hopes 
that  Active  Directory  wc^d  help  rein 
in  the  many  domain  controllers  they 
had  with  Windows  NT  4.0. 

Windows  Server  2003  promises  im¬ 
provements  in  performance,  scalability, 
reliability,  security,  manageability,  net- 
workii^  and  its  integrated  .Net  devel- 
cement  framework.  But  migrating  to  a 
new  server  operating  system  is  no  snap 
for  any  IT  shop,  once  the  planning, 
testing  and  potential  disruption  to  end 
users  are  factored  into  the  equation. 

All  four  of  these  early  adopters  said 
they  realized  benefits  f^m  m^rating 
to  Windows  Server  2003.  but  they  also 
expended  months  of  efTort  to  make 
sure  they  did.  Plus,  as  participants  in 
Microsoft's  joint  development  or  rapid 
adoption  programs,  they  received  q>e- 
cial  assistance  to  ensure  that  their 
projects  went  smoothly. 

Careful  assessment  and  planning 
will  be  crucial  for  any  company  mi¬ 
grating  to  Windows  Server  2003,  in  or¬ 
der  to  realize  the  full  business  benefits 
and  justify  the  expense  in  a  tough 
economy,  analysts  and  consultants  say. 

IT  managers  need  to  step  back  and 
envision  the  future,  advises  Chris  Bur¬ 
ry.  a  technology  infrastructure  practice 
director  at  consultancy  Avanade  Inc.,  a 


Seattle-based  joint  venture  between 
Accenture  Ltd.  and  Microsoft.  Burry 
says  IT  shops  should  weigh  questions 
such  as  what  role  directory  services 
will  play  in  their  business  and  how 
those  services  can  enable  provisioning, 
security  and  management.  "If  you  look 
at  what  you  need  the  infrastructure  to 
do."  Burry  says,  "that's  the  best  way  to 
organize  your  migratiotL" 

Directory  Drives  Migration 

For  o^anizations  using  NT  4.  such  as 
the  KDE,  Active  Directory  is  often  the 
first  step  of  the  migration.  KDE  had 
over  300  Windows  NT  4X)  domains 
and  more  than  2,000  domain  con¬ 
trollers  dotting  the  state’s  176  school 
districts  and  1,400  schools,  and  the  dis¬ 
tributed  systems  had  become  tou^  to 
manage  and  patch,  particularly  ftom  a 
security  standpoint. 

Chuck  Austin,  project  manager  of 
the  Kentucky  Education  Technology 
System,  says  both  IT  staffers  and 
school  superintendents  saw  the  bene¬ 
fits  of  using  Active  Directory  to  cen¬ 
trally  manage  critical  network  re¬ 
sources  and  deliver  services.  Their 
goal  is  to  improve  security,  reduce  re¬ 
curring  costs  and  complexity,  stabilize 
backbone  services  and  lay  a  founda¬ 
tion  for  better  coUaboraticHi  amof^  the 
state's  600.000  students  and  100,000 
teachers  and  administrators. 

To  preserve  local  autonomy,  the  IT 
department  «’ill  delegate  authority  for 
managing  users,  computers  and  groups 
to  network  administrators  in  the  dis¬ 
tricts.  Austin  says.  Each  district  will 
have  at  least  one  Windows  Server  2003 
domain  controller  and  a  global  catalc^ 
server,  and  about  20  districts  are  ex¬ 
pected  to  continue  to  run  Novell  !nc.*s 
NetWare  in  tandem. 

Tim  Cornett,  the  KDrs  Active  Di¬ 
rectory  lead  architect,  says  the  directo¬ 
ry  migration  to  Windows  Server  2003 
has  been  easier  than  it  would  have 
been  with  Windows  2000  Server  be¬ 
cause  be  doesn’t  have  to  manually  cre¬ 
ate  connection  objects  for  replication 
between  domain  controllers. 

In  Windows  2000.  the  process  that 


26 


ci>iTiwmu»ria.m8 


TECIIII0106Y 


wcomputerworU-com 


automatically  create  replica¬ 
tion  connections  betneen 
domain  controllers  can't  be 
used  when  a  forest  of  Active 
Directory  domain  trees  con¬ 
tains  a  large  number  of  sites. 
Administrators  must  create 
and  maintain  intersite  repli¬ 
cation  topolt^ues. 

Cornett  says  guidelines  ad¬ 
vise  companies  with  large 
deployments  to  turn  off  some 
of  the  automated  features  in 
Windows  2000  Server.  But 
he  shouldn't  have  to  do  that  with  Win¬ 
dows  Server  2003,  because  the  new  In- 
ter-Site  Topology  Generator  uses  im¬ 
proved  algorithms  and  can  scale  to 
support  a  forest  with  a  greater  number 
of  sites.  Cornett  says  that  wiU  save  a 
tremendous  amount  of  work.  It  will 
also  lessen  the  expensive  bandwidth 
for  replication  to  176  districts,  Austin 
adds. 

Another  overall  benefit  from  the  Ac¬ 
tive  Directory  migration,  which  is  due 
for  completion  by  year's  end.  will  be 
the  reduction  of  the  2.000-plus  domain 
controllers  to  400  and  the  300-plus  do¬ 
mains  to  178,  Austin  says.  When  the 
KDE  migrates  its  320  Exchat^  and 
700  Web  servers,  it  hopes  to  achieve 
server  consolidation,  he  adds. 

Domain  Servers  Reduced 

Intrawest  has  about  130  Windows  NT 
4  servers  involved  in  domain  and  secu¬ 
rity  tasks.  But  the  IT  department  is 
aiming  to  reduce  the  “god-awful  incss~ 
to  40  dual-processor  Del!  Computer 
Corp.  PowerEdge  26S0s  running  Win¬ 
dows  Server  2003  Standard  Edition, 
says  Matthew  Dunn.  CIO  at  the  Van¬ 
couver.  Britisb  Columbia-based  resort 
operator  and  developer.  He  says  the 
company's  3S  active  domains  —  with 
a  “sziake's  nest  of  trust  relationships" 
among  them  ~  will  be  cut  to  two. 
thanks  to  six  months  of  careful  consid¬ 
eration  and  planning. 

One  challenge  that  Intrawest  en¬ 
countered  in  figuring  out  the  best  way 
to  address  the  problem  was  wading 
through  the  bmtload  of  dociunents 
that  Microsoft  makes  available  to  cus¬ 
tomers.  “Microsoft  is  almost  guilty  of 
supplying  too  much  information," 

Dunn  says  with  a  laugh.  “Microsoft 
Consultiitg  Services  was  helpful,  in 
part,  as  a  guide  in  the  wilderness  of 
documents." 

I^ans  call  for  Intrawest's  Microsoft 
and  in-house  applications  to  be  migrat¬ 
ed  from  Windows  NT  and  2000  to 
Windows  Server  2003  over  the  next 
two  years.  E>unn  says  he  wants  a  .Net- 
centric  ardutecture  to  pave  the  way  for 


the  Web  services  he  hopes 
will  help  disparate  systeim 
talk  to  one  another  through 
XML  and  SOAP.  “Because  of 
the  performance  gains,"  he 
adds,  “there’s  an  opportunity 
to  pursue  consolidation  as 
well  as  mignttioru" 

Shrinking  the 
Web  Server  Farm 

Steve  Randich.  CIO  at  Nas¬ 
daq  in  New  York,  says  Nas- 
daq.com  saw  a  25%  to  30% 
boost  in  performance  running  Wirt- 
dows  Server  2003.  That  enabled  his 
staff  to  consolidate  75  four-processor 
Dell  Web  servers  to  35  servers.  Stress- 
testing  tools  from  Mercury  Interactive 
Corp.  in  Sunnyvale,  Calif,  showed  that 
the  servers  can  handle  more  sessions 
and  users.  "We  pay  less  maintenance 
when  we  have  less  boxes  in  produc¬ 
tion,”  Randich  says,  adding  that  he  also 
expects  to  reduce  licenses. 

Application  code  has  run  more  reli¬ 
ably.  and  servers  required  fewer  patch¬ 
es  than  Windows  2000  Server  did  dur¬ 
ing  its  beta  period,  says  I.P.  Athey,  vice 
president  of  Nasdaq  networii  and  Web 
technology.  He  says  migrating  Web 
servers  still  involves  the  typical  inten¬ 
sive  testing  effort  but  he  found  it 
“more  seamless"  than  the  move  to 
Windows  2000  Server. 

Server  consolidation,  performance, 
enhanced  security  and  total  cost  of 


ownership  benefits  will  be 
the  key  drivers  when  Nasdaq 
looks  to  migrate  other  Web. 
database,  transaction  pro¬ 
cessing  and  application 
servers  from  Windows  2000, 

Athey  adds.  Nasdaq,  which  is 
doing  a  server  consolidation 
study  with  Hewlett-Packard 
Co.,  hopes  to  go  from  1.100 
servers  to  700.  he  says. 

Rick  Fricchionc,  vice  presi¬ 
dent  of  Microsoft  services  at 
HP.  says  IT  shops  often  start 
with  migration  and  move  to  consolida¬ 
tion  to  cost-justify  the  upgrade.  But  he 
warns  that  they  need  to  focus  on  ser¬ 
vice  management,  availability  and  reli¬ 
ability  once  there  are  tens  of  servers 
each  supporting  1,000  users,  rather 
than  hundreds  of  servers  handling  100 
users  each.  The  biggest  gotcha  we’ve 
seen  is  understanding  that  you’re 
much  more  mission-critical  when  you 
come  out  the  other  end."  be  says.  “In¬ 
stead  of  having  100  people  impacted 
when  a  machine  goes  down,  you  may 
have  1.000  impacted.  So  operational 
best  practices  matter  greatly." 

Boosting  Scalability 

Improvements  to  Windows'  Distributed 
File  System  (DFS)  were  a  nujor  impe¬ 
tus  for  JetBlue  Airways  to  upgrade  to 
Windows  Server  2003.  The  Forest  Hills, 
N.Y.-based  airline  reties  on  DFS  ser¬ 
vices  to  distribute  electronic  manuals 
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SHOULD  YOU  UPGRADE? 
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to  pilots  as  part  of  its  paper¬ 
less  cockpit  initiative. 

JetBlue  CIO  Jeff  Cohen  says 
DFS  replication  in  Windows 
2000  Server  sometimes  didn't 
work  “as  advertised"  in  updat¬ 
ing  changes  made  in  the  root 
folders.  But  the  new  version 
of  DFS  fixes  the  problem  and 
affords  more  granular  control 
over  replication,  he  says. 

An  all-Microsoft  shop,  the 
3-ycar-old  airline  likes  to  run 
the  latest  technology  and 
regularly  participates  in  Microsofr’s 
joint  development  and  rapid  adoption 
programs.  JetBlue  sometimes  runs  40% 
of  its  systems  on  beta  software.  Cohen 
says,  but  there's  minimal  risk  because 
Microsoft  "is  standing  by  your  side.” 

By  May  19.  JetBlue  will  have  devoted 
over  5,000  man-hours  to  testing,  plan¬ 
ning  and  developing  applications  for 
Windows  Server  2003.  Its  migration  of 
250  Windows  2000  servers  started 
with  the  "extremely  smooth"  upgrade 
of  22  domain  controllers,  he  says.  One 
of  the  few  minor  issues  was  that  HP's 
SmartStart  setup  utility  wasn’t  ready  to 
help  configure  the  servers.  Cohen 
notes. 

JetBlue  is  also  shifting  mission-criti¬ 
cal  applications  to  Windows  Server 
2003  Datacenter  Edition  on  Unisys 
Corp.  ES7000  boxes,  including  two 
running  64-bit  Windows  Datacenter 
on  Itanium  2  processors.  The  company 
has  three  ESTOOOs  in  production  and 
four  more  in  the  works. 

Next  month.  JetBlue  will  go  live  with 
the  new  64'bit  SQL  Server  2000  for  its 
frequent-flier  program,  a  move  Cohen 
likens  to  doubling  the  size  of  a  highway 
during  rwih-hour  traffic.  The  company 
also  plans  to  run  its  entire  Web  server 
front  end  on  ESTOOOs.  "These  servers 
can  give  five  9s  of  reliability."  Cohen 
says.  “We're  ruiming  an  airUnc.  We 
cannot  afford  to  be  down." 

But  Avanade's  Burry  warns  that  Dat¬ 
acenter  may  not  be  the  right  choice  for 
every  IT  shop  considering  Windows 
Server  2003.  Each  company  will  need 
to  carefully  weigh  the  economic  im¬ 
pact  of  downtime,  he  says. 

“As  you  drive  up  the  availability,  you 
also  drive  up  the  cost,"  Burry  says. 
There  are  places  where  Datacenter 
Server  is  ab^lutely  marvelous.  But  it 
needs  to  be  connected  to  the  require¬ 
ments  of  your  business."  R 
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Ironic  how  it  takes  the  cutting  edge 
tech  nology  of  2003  to  access  the 
cutting  edge  technology  of  1973. 

myEXTRA!"  Smart  Connectors  let  you  leverage  your  existing  legacy  data  and  logic. 


"Cutting  edge"  doesn’t  cut  it.  You  need  products 
that  do  what  they  say  they  will  do.  This  is  what 
we  say:  Our  myEXTRA!  Smart  Connectors  give  you 
XML-based  Web  services  —  they  let  you  get  at  legacy 
information  without  changing  host  applications. 
You  can  put  all  of  the  business  data  and  applica¬ 
tions  locked  up  in  mainframes  to  new  use  in  hours 
or  days,  not  weeks  or  months.  We’ve  spent  the  last 
18  years  making  legacy  data  more  useful.  Smart 
Connectors  are  the  logical  next  step,  making  data 
easier  to  get  at. 

Find  out  more.  Download  our  free  White  Paper 
"Leveraging  Legacy  Applications  to  Serve  New 
Business  Initiatives"  at  www.attachmate.com/SCy. 
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SSL  virtual  private 
networks  are  simpler  to 
set  up  than  traditional 
IPsec  VP^  but  most 
organizations  will 
probably  end  up  using 
both.  By  Alan  Padding 

PHYSICIANS  AT  CATHOLIC  HEALTH  SYSTEM 
in  Buffalo.  N.Yn  want  access  to  medical 
information  and  images.  Managers  at 
Perry  Manu&cturing  Ca  in  Mount  Airy, 
N.C.,  need  remote  access  to  e-mail  and 
applications  runnii^  on  an  AS/400.  At 
these  businesses  and  elsewhere,  users 
are  becoming  increasingly  reliant  on  remote  access 
to  business  applications  and  data. 

Yet  even  in  the  era  of  the  Internet,  there  has  been 
no  easy  and  secure  way  to  provide  remote  access  to 
the  data  and  applications  users  need.  Dial-up  con¬ 
nections,  terminal  emulation  tools,  Internet  portals 
and  traditional  virtual  private  networks  (VPN)  can 
do  some  of  the  job,  but  each  has  its  limitations. 

‘^e  had  an  old  dial-up  product  to  reach  the 
A5/400.  but  no  e-mail,”  recalls  Howard  Ward.  Perry’s 
director  of  information  systems.  The  company  had 
Cisco’s  Easy  VPN  for  e-mail  but  found  it  to  be  too 
slow,  be  adds. 

Catholic  Health  wanted  to  give  physicians  remote 
access  to  patient  infonnatioD  and  medical  test  re¬ 
sults.  Its  first  attempt  —  sending  medical  information 
and  images  via  lax  —  proved  cumbersome.  Then  it 
deployed  a  VPN  based  on  the  IPsec  protocol  That 
provided  session  encryption  and  authentication  and 


enabled  network-level  access  to  resources,  but  it  also 
proved  problematic.  “Some  ph)^icians  still  use  our 
VPN.  but  there  are  real  support  issues.  You  need  to 
configure  software  on  each  client.  What  we  wanted 
was  an  application-level  gateway  of  some  sort,”  ex¬ 
plains  Douglas  Torre,  director  of  networking  and 
technical  services  at  the  health  care  services  pro¬ 
vider  in  western  New  York. 

Both  he  and  Ward  have  turned  to  Secure  Sockets 
Layer  (SSL)  VPN  appliances,  which  provide  that  ap¬ 
plication-level  gateway  by  allowing  remote  access 
over  the  Internet  to  Web-lnendly  applications. 

No-Hassle  VPNs 

While  IPsec  VPNs  provide  broad,  flexible  network- 
level  access.  SSL  VPNs  let  remote  users  access  spe¬ 
cific  applications  over  an  intranet  or  the  Internet  us¬ 
ing  a  Web  browser.  In  its  purest  form,  the  SSL  VPN  is 
clientless,  retying  only  on  a  Web  browser  to  run  any 
application  that  can  present  an  HTML  interface.  In 
other  cases,  users  may  need  to  download  a  browser 
plug-in,  such  as  a  Java  or  ActiveX  component,  in  or¬ 
der  to  access  a  specific  application. 

Like  its  IPsec  counterpart,  the  SSL  VPN  establish¬ 
es  a  secure  channel  of  communication.  But  it  termi¬ 
nates  the  session  outside  the  corporate  firewall,  usu¬ 
ally  to  a  server  or  appliance  in  the  DMZ  (the  “demili¬ 
tarized  zone"  between  the  secure  corporate  network 
and  the  public  Internet).  The  user  sessions  then  pass 
through  to  various  internal  systems  using  the  appro¬ 
priate  interfaces  and  protocols. 

In  contrast.  IPsec  WNs  typically  require  the  in¬ 
stallation  and  management  of  complicated  client 
software.  These  setups  can  be  difficult  and  expensive 
to  manage,  especially  if  client  machines  aren’t  under 
the  IT  organization’s  control  says  David  Thompson, 
a  senior  research  analyst  at  Stamford.  Conn.-ba5ed 
Meta  Group  Inc.  And  when  it  comes  to  remote  ac¬ 
cess.  users  are  frequently  beyond  ITs  reach,  using 
their  personal  systems  at  home  or  public  systems  like 
those  at  Internet  cafes  or  airports. 

In  addition  to  the  need  to  configure  the  client  soft- 


Clientless  VPNs  Give 
The  Help  Desk  a  Lift 


ware,  says  Torre,  ‘^tbere  are  security  policy  issues 
and  access  issues  you  have  to  keep  dealing  with.”  In 
comparison,  Virtual  Instant  Extranet,  an  SSL  VPN 
appliance  from  Neoteris  Inc  in  Mountain  View, 
Calif.,  proved  to  be  fast  and  simple.  "We  got  Neoteris 
running  in  less  than  an  hour.  Users  just  go  with  their 
browser,”  Torre  says. 

Performance  is  another  potential  problem  with 
conventional  VPNs.  ”We  were  running  our  Cisco 
VPN  on  a  big  box,  and  it  was  still  slow,”  says  Ward. 
Efforts  to  tweak  the  VPN  had  no  affect,  and  users 
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Anatomy  of  an  SSL  VPN 


SSL  VPN  appliances  provide  remote  access  to  Web-enabled  aoolicaiions 
aruj  resources  without  requnng  VPN  cient  softMare  to  be 
watts  to  be  modified.  Cbents  use  only  a  Web  browser,  and  encrypted  HTTPS 
traffic  passes  transparently  through  firewafls.  Access  to  cbent/server  appli¬ 
cations  requires  a  browser  plug-ia  Some  vendois  also  provide  access  to  fie 
shares,  but  that  requires  agent  software  to  be  instated  on  the  dienl. 


still  couldn't  reach  the  AS/400.  Ward  installed  Fire- 
Pass  from  uRoam  Corp.  in  Sunnyvale.  Calif.,  and  that 
appliance  improved  performance  while  delivering 
access  to  both  e-mail  and  AS/400  applications.  The 
AS/400  applications  required  a  one-time  client 
download  of  an  ActiveX  component. 

IPsec  VPNs  establish  a  network-level  connection 
and  therefore  r»eed  to  punch  through  the  firewall. 
That's  a  problem  when  remote  sites  won’t  open  their 
firewalls,  notes  Malvin  Mize,  hosting  and  access  team 
leader  at  Acxiom  Corp^  a  vendor  of  information 
management  services  in  Little  Rock.  Ark.  Using  the 
SSL  VPN  capability  supported  in  Tarantella  Inc.*s 
thln-client  software,  however.  Acxiom’s  remote  cus¬ 
tomers  can  sit  at  any  Internet-connected  device  and. 
via  their  browsers,  connect  to  the  company’s  Taran¬ 
tella  Enterprise  3  server,  which  provides  secure  thin- 
client  access  to  the  back-end  Windows  applications 
Acxiom  hosts.  There’s  no  need  to  open  another  port 
in  the  firewall  at  the  customer  site,  since  all  traffic 
passes  through  HTTP  Port  80.  Mize  says. 

The  Downside 

“IPsec  is  the  mainstream  approach,  but  it’s  not  suit¬ 
able  for  every  remote  access  situation.*  says  Jim 
Slaby.  an  analyst  at  Giga  Information  Group  Inc.  in 
Cambridge.  Mass.  But  although  an  IPsec  VPN  in¬ 
creasingly  isn’t  necessary  for  many  remote  access 
needs,  it  still  has  a  role  in  most  organizations.  “SSL 
solves  all  the  remote  access  issues  except  one:*  pro¬ 
viding  access  to  client/server  or  other  applications 
not  accessible  from  a  browser,  Slaby  says. 

Unlike  IPsec  VPNs,  SSL  VPN  appliances  don't  typ¬ 
ically  allow  direct  access  to  netwoik  file  shares.  One 
vendor.  Seattle-based  Aventail  Corp..  provides  client 
software  to  access  shared  files  on  Windows  servers. 
But  that  requires  loading  client  software  and  doesn’t 
support  Network  File  System  (NFS),  which  is  com¬ 
monly  used  on  network-attached  storage  appliances. 

With  organizations  increasingly  Web-eoabling 
their  client/server  and  legacy  applications,  browser- 
only  access  is  less  limiting  than  it  once  was.  But  SSL 
VPN  and  application  vendors  have  also  come  up 
with  other  work-arounds,  such  as 
adding  client  software  or  embedding 
proxy  capabilities  into  appliances. 

“Originally,  the  thinking  anmnd  SSL 
VPN  was  to  give  every  application  a 
Web  front  end.  but  now  you  can  just 
put  in  a  gateway  at  the  edge  of  the  net¬ 
work."  says  Lisa  Phifer,  vice  president 
of  Core  Competence  Inc.,  a  consulting 
firm  in  Philadelphia.  The  Web  SSL 
session  ends  at  the  gateway,  which 
then  connects  to  whatever  back-end 
application  is  requested.  The  gateway 
handles  any  necessary  transformations 
or  conversions  and  presents  an  appli¬ 
cation  interface  to  the  client 

On  the  back-end  server  side,  Meta's 
Thompson  identifies  several  possible 
gateways.  They  include  Web  proxies, 
which  may  dynamically  rewrite  Web 
addresses,  masking  internal  addresses 
for  security  purposes;  transactional 
proxies,  which  translate  HTTP  for  use 
with  File  Transfer  Protocol  SMTP  and 


other  applications:  Socks-based  proxy  servers,  which 
require  client-side  ActiveX  controls  or  lava  applets 
to  enable  access  to  client/server  applications;  screen 
scrapers,  which  reformat  terminal-session  displays 
for  Windows  or  browser  clients;  and  Windows  thin- 
client  systems,  like  Fort  Lauderdale.  Fla. -based  Citrix 
Systems  Inc.’s  MetaFrame  and  its  NFuse  front-end 
software  for  Web  browser  access.  Some  functions 
may  be  embedded  in  SSL  VPN  appliances  and  asso¬ 
ciated  diem  software,  or  a  separate  proxy  server  may 
be  required. 

Most  users  need  access  to  a  range  of 
applications,  so  vendors  have  respond¬ 
ed  by  putting  different  combinations 
of  features  into  their  products.  Ven¬ 
dors  also  differ  in  the  level  of  product 
manageability  offered  and  in  bow  easi¬ 
ly  their  products  can  tic  into  an  organi¬ 
zation’s  existing  directories  for  au¬ 
thentication  and  authorization. 

With  a  proxy  server,  java  or  ActiveX 
client  components  may  be  down¬ 
loaded  automatically  the  first  time  the 
user  accesses  the  resource.  This  is 
how  remote  users  typically  access 
e-mail  with  Microsoft  Exchange  or 
Lotus  Notes.  On  the  back  end.  some 
sort  of  transactional  proxy,  such  as 
Microsoft’s  Outlook  Web  Access  serv¬ 
er  for  Exchange  Server,  may  be  re¬ 
quired.  And  companies  that  need  to 
provide  remote  users  with  only  e-mail 
access  may  find  that  nexfc'er  produas, 
such  as  the  forthcoming  Exchange 


Server  2003.  include  their  own  SSL  VPN  services. 

By  using  (hin-clicnr  intermediaries  such  as  NFuse. 
users  can  access  back-end  Windows  applications. 
Both  Tarantella  and  Citrix  also  offer  t^ir  own  SSL- 
encrypted  remote  access  options  for  their  thin-cllem 
products.  (Citrix  also  recently  announced  its  own 
SSL  VPN  software  offering,  called  Secure  Access 
Manager.)  But  not  all  companies  want  the  extra  com¬ 
plexity  and  expense  of  adding  a  thin-ciient  layer  to 
their  IT  infrastructures  fust  to  allow  remote  access  to 
client/server  and  Windows  applications. 

The  SSL  VPN  market  cominues  to  expand  as  ven¬ 
dors  rush  into  the  space,  but  the  future  of  many  of 
them  is  questionable,  analysts  say.  “The  market  will 
coalesce  around  a  few."  says  Slaby,  who  expects  large 
netwoik-equipmem  and  IPscc  VPN  vendors  to 
sweep  into  the  SSL  VPN  market. 

Eventually.  SSL  VPN  functionality  may  simply  be 
incorporated  into  other  network  security  products. 
“There  will  be  consolidation  of  the  infrastructure  at 
some  point,"  says  Thompson,  and  users  may  see  SSL 
VPN  features  merge  into  firewalls,  portal  gatevvays 
or  other  network-edge  devices. 

An  SSL  VPN  appU^e  makes  secure  remote  ac¬ 
cess  easier,  but  it’s  not  indispensable.  “Much  of  the 
functionality  of  remote  access  can  be  achieved  with 
the  use  of  tods  that  many  organizations  already  use 
in  their  customer-facing  applications,"  Thompson 
says.  By  using  security  tools,  portals.  Web  access 
control  tools  and  SSL-enabled  applications,  some 
companies  might  avoid  buying  SSL  VPNs  altogether.  I 
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SSL  virtual  private 
networks  are  simpler  to 
set  up  than  traditional 
IPsec  VPNs,  but  most 
organizations  will 
probably  end  up  using 
both.  By  Alan  Radding 

PHYSiriAN'vAl  l  AI  flOIU  HMI  I  M  SVsTFM 
in  BuflaU).  NY.,  want  access  to  medical 
information  and  images.  Managers  at 
Perr>  Manufacturing  Co.  in  Mount  Air\-. 
N.C.,  need  remote  access  to  e-mail  and 
applications  running  on  an  AS/400.  At 
these  businesses  and  elsewhere,  users 
are  becoming  increasingly  reliant  on  remote  access 
to  business  applications  and  data. 

Yet  even  in  the  era  of  the  Internet,  there  has  been 
no  easy  and  secure  way  to  provide  remote  access  to 
the  data  and  applications  users  need.  Dial-up  con¬ 
nections.  terminal  emulation  tools,  Internet  portals 
and  traditional  virtual  private  networks  (V'PN)  can 
do  si>me  of  the  job.  but  each  has  its  limitations. 

“We  had  an  old  dial-up  product  to  reach  the 
AS,  400.  but  no  e-mail."  recalls  Howard  Ward.  Perr>’'s 
director  of  information  systems.  The  company  had 
Cisco's  Easy  VPN  for  e-mail  but  found  it  to  be  too 
slow,  be  adds. 

Catholic  Health  wanted  to  give  physicians  remote 
access  to  patient  information  and  medical  test  re¬ 
sults.  Its  first  attempt  —  sending  medical  information 
and  images  via  fax  —  proved  cumbersome.  Then  it 
dephwed  a  VPN  based  on  the  IPsec  pn>tocol.  That 
pnwided  session  encryption  and  authentication  and 
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enabled  network-level  access  to  resources,  but  it  also 
proved  problematic.  "Some  physicians  still  use  our 
VPN.  but  there  are  real  support  is.sues.  You  need  to 
configure  software  on  each  client.  What  we  wanted 
was  an  application-level  gateway  of  some  sort."  ex¬ 
plains  Douglas  Torre,  director  of  networking  and 
technical  services  at  the  health  care  services  pro¬ 
vider  in  western  New  York. 

Both  he  and  Ward  have  turned  to  Secure  Sockets 
Layer  (SSL)  V'PN  appliances,  which  provide  that  ap- 
plication-kwel  gateway  by  allowing  remote  access 
over  the  Internet  to  Web-friendly  applications. 

No-Hassle  VPNs 

While  IPsec  V'PNs  provide  brt>ad.  flexible  network- 
level  access.  SSL  VPNs  let  remote  users  access  spe¬ 
cific  applications  over  an  intranet  or  the  Internet  us¬ 
ing  a  Web  browser.  In  its  purest  form,  the  SSL  VPN  is 
clientless,  relying  only  on  a  Web  browser  to  run  any 
application  that  can  present  an  HTML  interface.  In 
tithcr  cases,  users  may  need  to  download  a  browser 
plug-in.  such  as  a  Java  or  ActiveX  component,  in  or¬ 
der  to  access  a  specific  application. 

Like  its  IPsec  counterpart,  the  SSL  V'PN  establish¬ 
es  a  secure  channel  of  communication.  But  it  termi¬ 
nates  the  session  outside  the  corporate  firewall,  usu¬ 
ally  to  a  server  or  appliance  in  the  DMZ  (the  “demili¬ 
tarized  zone"  betw'cen  the  secure  corporate  network 
and  the  public  Internet ).  The  user  sessions  then  pass 
through  to  various  interna)  systems  using  the  appro¬ 
priate  interfaces  and  protocols. 

In  contrast,  IPsec  VPNs  typically  require  the  in¬ 
stallation  and  management  of  complicated  client 
software.  These  setups  can  be  difficult  and  expensive 
to  manage,  especially  if  client  machines  aren't  under 
the  IT  organization's  control,  says  David  Thompson, 
a  senior  research  analyst  at  Stamford,  Conn.-based 
Meta  Group  Inc.  And  when  it  comes  to  remote  ac¬ 
cess.  users  arc  frequently  beyond  IT's  reach,  using 
their  personal  systems  at  home  or  public  systems  like 
those  at  Internet  cafes  or  airports. 

In  addition  to  the  need  to  configure  the  client  soft- 
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ware,  says  Torre,  “there  are  security  policy  Issues 
and  access  issues  you  have  to  keep  dealing  with."  In 
comparison.  Virtual  Instant  Extranet,  an  SSL  VPN 
appliance  from  Neoteris  Inc.  in  Mountain  View. 
Calif.,  proved  to  be  fast  and  simple.  “We  got  Neoteris 
running  in  less  than  an  hour.  Users  iust  go  with  their 
browser."  Torre  says. 

Performance  is  another  potential  problem  w’iih 
conventional  VPNs.  “We  were  running  our  Cisco 
VPN  on  a  big  box.  and  it  was  still  slow,”  says  Ward, 
Efforts  to  tweak  the  VPN  had  no  affect,  and  users 
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Anatomy  of  an  SSL  VPN 


SSL  VPN  appi'ances  provioe  lemote  aclpss  tc  WeP-Rnapipd  appw  jt,oni 
and  resources  rtilfiout  reauirm^  VPN  citenr  software  to  be  .nsiaOed  Q»  fire 
walls  to  be  modified  Clients  use  only  a  Web  browse'  and  enciypten  HTTPS 
traffic  passes  Iransparently  fbrougti  firewalls  Access  to  client  server  appli¬ 
cations  reouires  a  txowser  plug-in  Some  vendors  also  provide  access  to  file 
shares,  but  thal  reauires  agent  software  to  be  mstalleo  oit  the  client 


still  L'ouIJn’t  reach  the  AS  4(»0.  Ward  insialleJ  Fire-  i 
I’iiss  fnim  iiKiuim  Corp.  in  Sunnyvale.  Calif.,  and  that  | 
appliance  improved  pcrfornianec  while  deliverinj: 
access  H)  both  c-mail  and  AS  4li0  applications.  The 
AS  400  applications  required  a  one-time  client 
dow  nioad  of  an  Active.X  component.  j 

IPsec  VPNs  establish  a  network-level  connection  I 
and  therefore  need  to  punch  throuiih  the  llreuall. 
rhat's  n  problem  when  remote  sites  won't  open  their 
firewalls,  notes  Malvin  Mize,  hosting  and  aeeess  team 
leader  at  .Ae.Mom  Corp..  a  vendor  of  intormation 
manaj;enient  sers  iees  in  Little  Kock.  .Ark.  L’sinj:  the 
SSL  VPN  capability  .supported  in  iaraniclla  Jne.'s 
thin-elicnt  srvftwarc.  however.  Aesiom's  rem»»te  cus¬ 
tomers  can  sit  at  any  Internei-eonneeted  device  and, 
via  their  browsers,  connect  to  the  company's  Taran¬ 
tella  Knterprisv'  .T  server,  which  prtividcs  seeuR*  ihin- 
elient  access  to  the  back-end  Windows  appliealit'ns 
.Aexiom  hosts.  There's  ni>  need  to  open  another  port 
in  the  firewall  at  the  customer  site,  since  all  traffic 
passes  through  HTTP  Ptvri  SO.  Mize  says. 

The  Downside 

‘IPsee  is  the  mainstream  approach,  but  it's  ntU  suit¬ 
able  for  ever)'  remiuc  access  situation."  says  |im 
Slaby,  an  analyst  at  Giya  Information  Grtmp  Ine.  in 
Cambridtte.  Mass.  But  althoujth  an  IP.scc  VPN  in- 
ereasingh-  isn't  nceessar\-  for  man)-  remote  access 
needs,  it  still  has  a  role  in  must  or^unizations.  "SSL 
s*>lvcs  all  the  remote  access  issues  e.Ncept  one:"  pro¬ 
viding  access  to  client.'.server  or  other  applications 
not  accessible  from  a  browser.  Slaby  says. 

Unlike  IPsee  VPNs.  SSL  VPN  appliances  don’t  tv-p- 
ieally  allow  direct  access  to  network  file  share's.  One 
vendor.  Seaitle-basc’d  Avcntail  Corp..  provides  client 
software  to  access  shared  files  t»n  Wind«)ws  servers. 

But  that  requires  loading  client  w)ftware  and  divesn'i 
support  Network  File  System  (NFS),  which  is  com¬ 
monly  used  on  network-attached  stt>rage  appliances. 

With  organizations  incRMsingly  Web-enabling 
their  clieni.  servcr  and  legacy  applications.  bnnxscT- 
only  access  is  less  limiting  than  it  once  w'as.  But  S.Sl. 
VPN  and  applie.ilion  vcndtvrs  have  alsiv  eomc  up 
with  other  wi>rk*arv>unds.  such  as 
adding  client  stiftwaR' or  embedding 
proxy  capabilities  into  appliances. 

"Originally,  the  thinking  .around  SSL 
\^PN  was  to  give  ever)'  application  a 
Web  front  end.  but  now  you  can  jtisi 
put  in  a  gateway  at  the  edge  t»l' the  net¬ 
work."  says  Lisa  Phifer,  vice  president 
of  CoR’  Competence  Inc.,  a  consulting 
firm  in  Philadelphia.  The  Web  SSL 
session  ends  at  the  gateway,  which 
then  connects  to  whatever  back-end 
application  is  requested.  The  gateway 
handles  any  necessary  traRsformations 
i»r  conversions  and  presents  an  appli¬ 
cation  interface  to  the  client. 

On  the  back-end  server  side.  Meta's 
Thompson  identifies  several  ptjssible 
gatcw'ays.  They  include  Web  proxies, 
which  may  dynamically  rew  rite  Wi-b 
addR'sses,  masking  internal  addresses 
for  security  purptises:  transactional 
pR>xies.  which  translate  HTTP  for  use 
with  File  Transfer  Pnuix'ol.  SMTP  and 


other  applie.itions:  Soeks-based  proxy  ser\-ers.  which 
require  client-side  Aetivc.X  contri»ls  or  applets 
to  enable  access  to  client  server  applications;  scRvn 
scrapers,  which  reformat  terminal-st-ssion  displays 
for  Windows  or  browser  clients;  and  Window->  thin- 
I  client  systems,  like  Ft»rt  Lauderdale.  Fla.-Kised  latrix 
!  S\-stems  Inc.’s  MctaFrame  and  its  NFuse  front-end 
software  for  Web  bnus-ser  access.  Si»me  fumtions 
may  be  embedded  in  SSL  VPN  appliances  and  asM*- 
ciated  client  stiftware,  or  a  separate  pnKxv  server  mav 
be  required. 

Most  users  ntvd  aswss  (i>  a  range  of 
applications.  s»)  vendors  have  respond¬ 
ed  by  putting  diffcR'nt  combinations 
of  features  inu)  their  products.  Ven¬ 
dors  also  difi'er  in  the  level  of  product 
managc.ibility  offcR'd  and  in  how  easi¬ 
ly  their  products  c.in  tie  into  an  org;mi- 
zation’s  existing  directories  for  au¬ 
thentication  and  authi'riz.ntlon. 

With  a  proxy  server.  lava  »ir  .ActiveX 
client  components  may  hv  down¬ 
loaded  automatically  the  first  time  the 
user  accesses  the  R*stmrs*c.  This  is 
how  remote  users  t)  picjlly  access 
e-mail  with  Mierostifi  Fxchange  or 
laHus  Notes.  l)n  the  back  end.  si)me 
sort  of  transactional  pn>\y.  such  ;is 
Microsoft's  Outhvok  Web  Access  serv¬ 
er  for  Flxchange  Server,  may  be  re¬ 
quired.  And  companies  that  need  to 
pnn  iJe  R*mote  users  with  only  e-mail 
access  may  find  that  newer  products, 
such  as  the  forthcoming  Lxchangc 


Server  2tH).L  include  their  ow  n  SSI,  VPN  serv  ici*s. 

B\  using  thin-elieni  intermediaries  such  .is  Nl  use. 
users  can  access  back-end  Windvwvs  applicjiums. 
lhah  Tarantella  and  ('iirix  aUo  offer  their  **w  ti  SSI  • 
encrypted  remote  access  options  for  their  thin-slieni 
pRHiuvts.  (Ciirix  .list!  recently  .innounceJ  its  own 
SSL  \'PN  software  olTering.  called  Se«.TjR-  Acs'ess 
Manager. )  But  m*t  all  companii-s  want  the  extra  com¬ 
plexity  and  expense  of  adding  a  thin-client  layer  to 
their  FF  infrastructures  just  to  .illow  R'm»»te  .icv\*vs  to 
client  s<Tver  and  Windows  applicaiums. 

The  SSI  VPN  market  continues  to  expand  as  ven¬ 
dors  rush  into  the  space,  but  the  future  «*f  manv  iif 
them  is  questiomihle.  analysjs  sav.  "The  market  will 
coalesce  annind  a  few."  sa)-s  Slab),  who  expects  laige 
network-equipment  and  IIV'C  VPN  vendors  to 
sweep  into  the  SSI  VPN  market. 

Fventually.  SSL  \'PN  functionalit)  may  simply  be 
ineorpvimied  into  other  network  svcurii)  pnvJuctv 
‘■'I’here  will  ht*  cons4»lidation  »*f  the  infrcsiruetuR-  at 
si»me  point."  s.i)S  'I’hompsvm.  and  u.sers  nuv  see  SSI 
N'PN  features  merge  into  firewalls,  portal  g.uevv  ays 
or  other  network-edge  devieev 

An  SSI  .  VPN  appliance  makes  weure  remote  ac¬ 
cess  easier,  but  it's  nt*i  indispensable.  "Much  *»f  the 
functionality  of  remote  access  can  K'  achieved  w  ith 
the  use  of  tviols  that  many  organi/aitons  alreadv  use 
in  their  cusioinbr-facing  applications."  ITiompson 
.say.s.  By  using  securiiv  iihiIs.  portals.  Web  access 
control  tiHils  and  SSI  •enabled  applicjiionv  some 
companies  might  avoid  buving  SSL  VPNs  altogether.  A 


Nti  Jding  is  a /RX'Iunee  wrifer  in  .VewTon.  .\fu.ss.  Vou  cun 
fvoch  h/rn  t«  ulanruddin.i*  u  ufthfeom. 
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A  weblog,  or  blog,  is  a  Web  site 
where  an  individual  records  his 
thoughts  and  opinions,  com¬ 
ments  from  others  and  links  to 
other  Web  resources.  A  blog 
can  be  a  personal  journal  or  an 
interactive  forum.  Most  are 
public  and  searchable  on  the 
Internet.  Some  companies 
maintain  public  weblogs  as 
communication  vehicles  for 
employees. 


■V  NUSSCLt.  KAV 

Diaries,  journals,  col¬ 
umns,  essays,  musings, 
daybooks,  chronicles, 
logs  and  memoirs  —  all 
are  ways  in  which  people  have 
kept  records  of  their  thoughts 
and  feelings  as  well  as  events 
taking  place  around  them. 

In  our  computer-literate, 
information-based  society,  the 
creation  of  an  electronic 
equivalent  of  these  personal 
journals  was  inevitable.  It’s 
called  the  weblog,  often  ab¬ 
breviated  to  blog,  and  it  has 
expanded  the  possibilities  for 
comment,  expressing  opinion 
and  public  discourse. 


Traditional  diaries  come 
with  lockable  straps  designed 
to  keep  others  hrom  reading 
one's  private  thoughts.  In  to¬ 
day’s  world,  however,  atti¬ 
tudes  toward  such  privacy 
seem,  on  the  whole,  quite  dif¬ 
ferent  than  they  used  to  be. 
Webloggii^  represents  a  dis¬ 
tinct  movement  to  share 
thoughts  publicly. 

Early  weblogger  and  devel¬ 
oper  Dave  Winer  (www. 
scriptmgxom)  says  weblogs 
have  the  following  character¬ 
istics.  which  he  sums  up  in  the 
phrase  “personal  Web-based 
publishing  communities’': 

■  ftrsonal.  Blogs  arc  created 


by  a  single  person,  expressing 
a  distinct  personality. 

■  Web-basad.  'niey’re  fre¬ 
quently  updated,  inexpensive 
to  maintain  and  accessible  via 
a  Web  browser. 

■  Published.  Automated  pub¬ 
lishing  tools  help  the  author 
present  his  wor^  in  an  attrac¬ 
tive  format,  and  maybe  even 
syndicate  them. 

■  Communities.  Blogs  link 
to  other  blogs  and  sites,  ac¬ 
knowledging  that  they’re  part 
of  a  larger  world. 

One  other  category  of  vreb- 
log  is  a  community  blog, 
which  is  generally  updated 
frequently  by  many  people 
and  often  has  an  imposing 
presence.  The  best-known  and 
perhaps  earliest  example  of 
this  type  is  www.5lashd0f.com. 
a  good  site  for  news  and 
sometimes  oftbeat  commen¬ 
tary  on  Linux,  open  source, 
gadgets,  privacy  and  other 
computer-related  topics. 

Weblogging  has  - 

been  around  as  a  dis¬ 
tinct  form  of  commu¬ 
nication  since  the 
1990s.  By  one  account, 

the  first  blogiike  page.  - 

with  personal  comments  and 
links,  was  Marc  Andreesen's 
“What's  New'”  page  for  NCSA 
Mosaic  in  June  1993  (hfipy/ 
<irchiyfe.ncsa.muc.edu/SDG/ 
Sofiyiuare/Mosaic/Docs/ofd‘ 
ufhats  •new/whats-nev/’0693. 
ktmi). 

lorn  Baiger  coined  the  term 
weWog  in  December  1997  for 
his  "Robot  Wisdom  Weblog" 
(www.robotwt$donLCom).  and 
in  1999  the  shortened  form, 
blog,  appeared. 

At  the  beginning  of  1999.  the 
best-known  list  counted  23 
weblogs  in  existence,  though 
there  were  certainly  others.  In 
early  january  2003,  Pyra  Labs 
in  San  Francisco  reported  over 
1  million  registered  users  of 
Blogger,  its  free  software  and 
hostile  site.  (One  month  later, 
Google  Inc.  bought  Pyra.) 

The  Impact  of  Blogging 

Most  webloggers  seem  to  be 
avid  readers  of  other  blogs 
and  maintain  links  to  them  on 
their  own  weblog  pages.  Many 
Web  sites  exist  just  to  aggre¬ 
gate  links  to  blogs,  often  on  a 
geographic  or  topical  basis. 


and  many  weblogs  are  mem¬ 
bers  of  Web  rings  —  linked 
sets  of  Websites  that  provide 
navigation  to  one  another.  Sur¬ 
prisingly.  many  webloggers 
don't  seem  much  concerned 
with  computers  except  as  a 
simple  tool. 

To  understand  the  power  of 
the  blogging  community,  pon¬ 
der  what  some  consider  racist 
comments  made  by  Sen.  Trent 
Lott  about  retiring  Sen.  Strom 
Thurmond  and  reported  by 
ABCNews.com  last  year.  The 
first  people  to  comment  on 
the  situation  were  a  couple  of 
politically  minded  pundits 
who  discussed  it  at  length  in 
their  blc^  over  a  weekend. 
The  issue  spread  quickly  in 
the  blogging  community  until 
the  national  news  media  was 
forced  to  examine  Lott’s  re¬ 
marks  and  history.  The  result 
was  Lott’s  resignation  as  ma¬ 
jority  leader  of  the  U.S.  Senate. 

It's  also  hard  to  overestimate 
the  importance  of  per¬ 
sonal  narratives  and 
statements  in  record- 
llltf  W  ing  history.  From 
VI  Samuel  Pepys’ notes 

-  on  life  in  17th  century 

England  to  Anne  Frank's  diary 
about  her  experiences  in  World 
War  11  Amsterdam,  records 
of  private  experiences  and 
thoughts  are  crucial  to  under¬ 
standing  the  ctiltures  and  times 
in  which  they  were  written. 

PR  Move 

A  recent  development  is  the 
use  of  public  weblogs  a.s  vehi¬ 
cles  for  business  communica¬ 
tions.  In  his  own  blog,  Dan 
Bricklin.  author  of  VisiCalc 
and  founder  of  IVellix  Corp.  in 
Cambridge,  Mass.,  comments 
on  the  usefulness  of  public 
blogs:  “A  normal  part  of  the 
job  of  many  consultants  en¬ 
tails  going  to  meetings  and 
conferences  and  being  active 
in  trade  associations  where 
they  'network,'  show  off  their 
expertise,  appear  on  panels, 
etc.  A  blog  is  a  way  of  showing 
your  expertise  and  establish¬ 
ing  yourself  as  a  trustworthy 
authority  without  doing  the 
travel —  (A  blog  Is  an  excel¬ 
lent  way  to  build  up  your  ‘au¬ 
thority’  and  move  up  political¬ 
ly  in  a  trade  association,  too. 
Your  readers  would  be  others 
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in  your  field,  not  customers.)" 

For  example,  in  January. 
Jupiter  Research,  an  arm  of 
Jupitermedia  Corp.  in  Darien. 
Conn.,  started  posting  its  ana¬ 
lysts’  weblogs,  hosted  from  a 
common  page  (weblogs, 
/upi/erresearcltcom). 

Starting  Your  Own 

Probably  the  easiest  way  to 
start  a  weblog  of  your  own  is 
to  go  to  Pyra’s  site  at  www. 
blo^^r.com  and  sign  up.  The 
site  will  lead  you  throu^  the 
necessary  steps  to  set  up  your 
weblog.  Blogger  doesn’t 
charge  for  its  basic  service  un¬ 
less  you  want  your  own  do¬ 
main  name,  but  it  does  offer 
upgraded  services  at  a  price. 
Other  sites  offering  similar 
services  (not  tested  by  the  au¬ 
thor)  include  www.pttas.com 
and  u'ww.diaryfand.com.  I 


Kdy  is  a  Computerworld 
contributing  writer  in  W>rces- 
ter.  Mass.  Contact  him  at 
ru$skay(i)chaJter.net. 


BUMSWMTHKADliK 

For  a  hsl  d  blogs  that  you  might  find 
tmeresting.  visl  our  Web  site; 

OQuiehlJwkaiTSS 

wwwxsniputorworid.com 


Are  there  technologies  or  issues  you'd  like 
10  learn  about  n  OutekStudy?  Send  you 
ideas  to  qutckstudy^cornputerwortd.com 

To  find  a  complete  archive  ol  our 
^ickSiudies.  go  online  to 

OconipiilorwortiLGom/guiclistudles 


>  The  most  reliable  servers  are  the 
ones  you  don't  have  to  think  about. 


>  kp  Pr^ilol  ML310 


•Ibww  Model 

•InM*  Pentium*  4  praceuot  2.53  GM*  -  . 

[2.80  GHz  oMiloblel 

•2S6MB  total  PC2IOO  RagiUered  ECC  008  SDRAM  Mwnory 
■Imegraled  Duel  Chonnel  Ulra  ATA-lOO  106  Adapter  wHti 
Integrated  AtA  RAID  0,1.  &  1*0 
•40G8  ATA  7200  ipm  Drne  I** 

*NC7760  Gigabit  Neturark  Controller  {embeddedi 
•Prolioni  EueMiels  Foundation  Pock 
[including  SnortStart*'*  &  baighl  Atonoger'**) 

*  I  -Tdtt  Vferldwida  Pre-Foiivre  Woiranty  {proceuors,  memory  & 
hard  dnvetl.  next-bmineseday  ports,  labor  &  on-site  deliverv' 


$1,048 

Uoee  for  under  $44  a  menth  for  M  m 


In  'ov.'f  ■./(.”  .Vitt;,'  pic-cessar  pv';^e'lr'w  lerye'i ■ 
bey  err  ou.it  cr.  f>'e  '"s.'tf  e. 

■  /''■evre  cij!->cm  Ki 

' —  •  •  .  '•rtop  derriard?  orirl  "Tev.-is 

'■  '  ever  betj.r?  r'P 


<>»ne''r>r](,-eLr  ana  s^-ppiV’  vl?'- 

pL't’np  -.'  .‘•eops  -r  '<1^-  on/y  d'fecfiet  -• 


h|P  liSIM 

•Tower  Model 

•heel*  Celeron*  1.80  GHz  processor 
•  1 2eMB  PC2K)0  Registered  ECC  DOR  Memory, 
upgrodeoble  to  4GB 

•Iniegroled  Oud  Chonnel  Ohra  ATA-lOO  IDE  Adopter 
♦40GB  Ulko-AIA  7200  rpm  Motd  Oriwe* 

•NC7760  Gigabit  NeNrort  Controller  (embedded) 


$549 


Uoee  for  under  $23  o  memti  lor  M  mondii ' 

>  PrmUmmt  MtSSO  *3 

•lower  Model 

•Intel*  Xeon'*  processor  2  40  GHz 
•2S6MB  Total  PCZlOO  Registered  ECC  DOR 
S0RAMMemerv(lx2Sd) 

•Integrated  Dual  Wide  Ullra3  SCSI  Adopter 
•6  K  1  *  Hot  Pluggoble  Hord  Drive  6oys 
•36.4Ge  U320  Univenal  Hard  Drive  (I*) 

10,000  rpm* 

*NC77dO  Gigabit  Network  Controller  [embedded] 
•Probont  EsseMtals  Foundation  Peek  (mclvding 
SfflonStort^  $  Insight  ktenoger’*^ 

•S-Veor  Wferldwidt  Pre-Faikire  Worronty  (processors, 
memory  &  hard  drives),  ned-busmess-doy  ports, 
labor  t  on-site  delivery’ 


$1,938 


le  far  under  $31  •  month  for  24  mendw' 


hp  ^nU—l  DLMO  •S 

•Rock  Model 

•Intel*  Xeon'"  processor  2,40  GHz 
•5 12MB  Total  PC2 100  Registered  ECC  DDR 
SDRAM  Memory  (2  e  2S6I 
•keegroled  Smart  Arroy  Si  Phis  Controller 
•Hot  Plug  Drive  Coge-UhroS 
(5  »  r  ond  I  *  1-6*) 

•36  4G6  U320  Urmonol  Herd  Dnvc  I)*) 

I  10.000  ipm’ 

•Two  NC778I  PCI-X  Gigabii  NCs  (en^edded) 
pa  tO/WOWOl 

•Sliding  Roib  and  Coble  Manogemem  Arm 
•Probont  Essentioh  Foundation  Pock  (mchiding 
SmortStan’’*  &  Intigle  Monoger'l 
•3-Vear  Worldwide  Pre-Fo4ure  Worronty 
(processors,  memory  8  herd  drives) 
nexl^usmees-doy  pons,  lafaar  S  on-iiie  delivery' 

$3,663 


0%  FOR  24  MONTHS. 

For  a  limited  time,  get  0%  lease  rate  on  quali^ng  purchases  made  before  April  30. 2003' 


Toll  Free  1  •  866 •  6 25>0 78 3 
www.hp.com  go  magazine3 
Or  call  your  local  reseller. 


'**”'*<*'* Fhotegi^ieornaacairaleVripreiereeaaoeifmuimorepncad  Ofortc^ 
tonRimid with onycdn cdir Gt dacyt ond we g^  vAfle «4pies lad.  Iznind order qemiiiet  Piamotians vod when prcMeed «r iMided by  bw  IT mservei he i^ to nodfy or wdidowte premetient ’For  hod diwes  GBvbdenbries  'CMnwomiMv 

pth'dtmgei  giya^  by  lesm  oAei  Aon  mw  poywenl.  (suck  os  tg^,  l»n  <ed  ihipping  chaged  Oiler  rakd  timtugh  4/30/03  on  ol  leote  inwaaions -*  o  l«il  Wni^ 

"  *■  U-S-  siAieet  tt  oedt  appioral  and  emoaon  d  ttmderd  t*FSC  doometwiion  Oh.  mimctioni  moy  HPFSCieirw.*.ngh.iochong,acorcdR«pm^<»»,s-,wdau. 

notice.  Fw  morn  mktnntnon,  col  1-88B-2775P42  W,  Wd  Inside,  f*  keel  Intidi  logo.  Xeon.  Pei*im  and  Celerm  ore  eodemorki  oi  iiginenl  eodemods  ol  hid  Corpawon  w  4  lubsidiaree  in  *■  UnSed  Sejfc  ond  oPw  cae^  rVffT^btPnrtdij  PridrTrramfft-iyry  IP 


32 


wfiraum  111121. 2m 


TECHNOLIWY 


w.compul  erworid.com 


Merger  Security  Hinges 
On  Gateway  Appliance 


Ihe  best  short-term  fix  for  handling 
acquisitions  may  be  to  use  an  infected 
secwity  product.  By  Mathias  Thurman 


OUR  COMPANY  is  fre¬ 
quently  involved  in 
mergers  and  acquisi¬ 
tions,  and  we  typically 
don’t  know  the  security  pos¬ 
ture  and  integrity  of  the  IT 
resources  in  the  company 
we’re  acquiring. 

In  the  past,  rather  than  con¬ 
ducting  an  upfront  security  au¬ 
dit,  we  simply  opened  the 
floodgates  to  allow  network 

traffic  to  flow  from  - 

the  acquired  company 
into  our  trusted  envi¬ 
ronment  In  one  case, 
that  allowed  a  virus  to 
propagate  through 
several  parts  of  our 
networit  requiring 
many  hours  of  cleanup. 

A  security  audit  could  have 
prevented  that.  But  unless  an 
upfront  audit  is  written  into 
the  acquisition  agreement,  it 
can't  be  started  until  after  the 
merger  or  acquisition  is  com¬ 
pleted.  Many  target  companies 
resist  such  upfront  agree¬ 
ments.  however,  fearing  the 
loss  of  sensitive  information  if 
the  deal  doesn't  go  through. 

But  that’s  not  the  worst  of  it. 
Once  the  acquisition  deal  is 
signed,  the  executive  staff  is  in 
such  a  rush  to  integrate  the 
companies  that  security  as¬ 
sessments  typically  take  a 
back  seat  to  bottom-line  prof¬ 
itability  concerns. 

Fear  of  the  Unknown 

It’s  difficult  to  determine  the 
integrity  of  another  company's 
infrastructure  prior  to  estab¬ 
lishing  a  trust  environment 
between  our  environment 
and  theirs.  Here's  what  usually 
happens:  The  network  team 
configures  a  dedicated  circuit 
to  the  acquired  company, 
throws  up  a  firewall  and  asks 


SECURITY 

main 

JOURNALa 


the  acquired  company  to  con¬ 
figure  its  ser\‘ers  to  set  up 
trust  relationships  with  ours. 
The  most  important  goals  are 
to  give  new  employees  access 
to  our  e-mail,  human  re¬ 
sources  applications,  company 
intranet  and  a  few  other  criti¬ 
cal  applications.  If  the  com¬ 
pany  we  are  acquiring  sells  a 
software  product,  its  engineer¬ 
ing  team  also  needs  access  to 

-  our  source  code  — 

our  company's  bread 
and  butter. 

What  we  fear 
most  is  that  the 
newly  introduced 
resources  may  be 
infected  with  a 

virus.  It’s  also  possible  that  the 
other  company's  servers  don’t 
meet  our  security  configura¬ 
tion  requirements  and  are  vul¬ 
nerable  to  an  attack,  or  have 
already  been  compromised. 

I’ve  seen  incidents  where 
the  e-mail  server  at  the  ac¬ 
quired  company  had  been 
(hlly  compromised  when 
someone  added  a  packet-sniff- 
ij^  device  to  the  network.  TTte 
company  had  contracted  out 
the  installation  and  configura¬ 
tion  of  its  e-mail  server,  and 


We  need  a  security 
gateway  pnid^  tbat 
can  act  as  an  interim 
measure . . .  mitigat¬ 
ing  the  most  common 
problems  we  might 
encounter  during  an 
acquisitkm. 


no  one  on  staff  was  capable  of 
managing  the  resource.  The 
server  was  never  maintained 
properly,  so  the  packet  sniffer 
went  unnoticed  for  more  than 
three  months. 

We  need  a  security  gateway 
product  that  can  act  as  an  in¬ 
terim  measure  until  a  full  as¬ 
sessment  can  be  completed, 
mitigating  the  most  common 
problems  we  might  encounter 
during  an  acquisition.  We  want 
something  that  offers  good 
protection  at  a  low  cost  and 
with  few  hardware  require¬ 
ments.  The  product  must  also 
be  easy  to  manage. 

We  have  other  requirements 
as  well.  In  the  past,  each  com¬ 
pany  that  we've  acquired  has 
had  fewer  than  200  employ¬ 
ees  and  used  minimal  band¬ 
width.  Tliis  is  important,  be¬ 
cause  any  gateway  product 
must  be  able  to  cope  with  ex¬ 
pected  traffic  levels. 

Symantec  Gets  the  Nod 

After  a  search,  we  selected  the 
Symantec  Gateway  Security 
appliance  from  Symantec 
Corp.  in  Cupertino.  Calif.  This 
appliance  combines  virus  pro¬ 
tection,  Internet  content  filter¬ 
ing.  a  virtual  private  network 
and  an  intrusion-detection  sys¬ 
tem  in  one  box. 

We  planned  to  buy  several 
appliances  and  preconfigure 
them  for  easy  and  rapid  de¬ 
ployment.  We  planned  to  use 
them  only  until  we  had  vali¬ 
dated  the  integrity  of  an  ac¬ 
quired  company's  infrastruc¬ 
ture.  Then  we  would  remove 
them,  apply  our  current  stan¬ 
dards  and  put  the  gateway 
aside  until  the  next  acquisi¬ 
tion.  But  our  plan  ran  into  op¬ 
position  from  the  network 
group,  which  is  responsible 
for  the  day-to-day  manage¬ 
ment  and  configuration  of  our 
firewalls. 

The  network  team  currently 
manages  Cisco  Pix  firewalls 


with  Mountain  View.  Calif.- 
based  Solsoft  Inc.'s  centralized 
management  software,  Solsoft 
NP,  and  they  were  uncomfort¬ 
able  introducing  another 
firewall  product  —  especially 
if  they  had  to  manage  it.  Do¬ 
ing  so  would  mean  additional 
training,  familiarity-  with  the 
product,  support  issues  and 
extensive  lab  testing,  the  team 
complained,  like  other  de¬ 
partments  within  our  com¬ 
pany.  the  network  group  is 
already  spread  thin. 

I  explained  that  Solsoft 
NP  may  be  able  to  manage 
the  Symantec  appliance’s  fire¬ 
wall  component.  This  would 
mean  that  the  network  team 
wouldn’t  need  to  be  intimate 
with  the  syntax  or  configura¬ 
tion  of  the  access  lists  for  the 
gateway  device. 

But  they  stood  firm:  They 
absolutely  didn't  want  to 
manage  any  aspect  of  the  fire¬ 
wall  portion  of  the  Symantec 
gateway.  Instead,  they  sug¬ 
gested.  why  not  use  some  of 
the  extra  Pix  products  they 
had  lying  around?  These 
could  work  as  an  interim  so¬ 
lution.  But  we'd  still  need  the 
Symantec  appliance  for  the 
other  security  functions. 

We  may  end  up  not  using 
the  firewall  portion  of  the 
Symantec  product.  But  at 
this  point,  we’tl  get  an  evalua¬ 
tion  unit  in.  Once  we  start  lab 
testing,  we’ll  have  a  better  un¬ 
derstanding  of  just  how  diffi¬ 
cult  the  administration  of  the 
firewall  is  before  making  a 
final  decision.  I 
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Enterasys  Switch 
Line  Anriounced 

Andowr.ltiw,  biwdEntfisys 
Weftwfta  Inc.  announced  hat 
mtk  ttw  Matrix  N-Sortis  Ine 
of  swUctiM  for  oMorprtso  cus- 
lonHn.  Dm  Matrix  and  Matrix 
N7  awHdiat  have  tha  aUfty  to 
reach  t68Tbit/aac.  throughput 
and  wM  begin  afappioB  in  May. 
wean’t  dscioaed. 


S6i  Launches 
Midrange  Servers 

SMcon  Oraghte*  be.  hi  Mountain 
View,  Gait,  involod  its  new  Ori¬ 
gin  X50  midraaga  tecMcaf  sanrar 
awiaa.  The  modMv,  racfc-nnunt- 
ad  aarten  Muds  glabal  shared- 
mainory  archMecture  and  can  be 
e^dppad  with  two  te  32  CPUs 
and  19  to  M6B  of  memory.  Art 
entry  lairel  cenftguretion  with  two 
CPUs  and  106  of  memory  sola  for 
$23,790.  He  Origin  350  aarias  s 


Opera  Adds  Web 
Navigalion  Toois 

Vbnioo  7.10  of  the  Opera  far  Win¬ 
dows  VM  browner  and  ttw  beta 
verfaen  of  Opera  7.10  far  Linux 
feature  faet-farwwd  and  rewind 
funetfane.  OMo-baed  Opera  Soft¬ 
ware  ASA  said  they  are  the  first 
brawisn  wHh  buttons  far  speed¬ 
ing  up  Wib  nmigMfan.  The 
browsers  can  be  downfaaded 
far  free  at  wwwjipetMm,  or 
bannar  bet  vorsfana  can  bepur- 
chaaad  stailbig  at  $39. 


QLogic  RoHs  Out 
Multtport  Switch 

QLogic  Corp.  fa  Aleo  Vlfao.  Calf., 
armounead  a  new  Mph-port-count 
^bre  Chenriei  adge  mallch  with 
46bil/aee.tteeugftouLT)wSAN- 
bex2^  li  aimed  at  the  storage 
networh  middfa  ipound  between 
emoeo  ouocinra  ano  aeo-pori 
■  *-  -  ^  ^ 
anga  ^awaEnse.  r  ne  scaraBia. 

medMai  bfadwi  swttch  c«i  be 
equipped  artth  eIgM  to  64  Hbre 
Channel  ports  and  costs  $1,000 
par  port. 
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rr  Pulls  a  Hat  Trick 


Most  IT  professionals  are  used  to  the 
idea  of  wearing  many  hats,  as  tight  bud¬ 
gets  and  lean  staffing  have  forced  them  to 
take  on  more  than  one  role  within  their 
departments.  Now,  technology  changes  are  blurring 
the  roles  between  IT  and  external  groups  as  well. 


A  broad,  cross-industry 
convergence  on  a  single  set 
of  communications  tech¬ 
nologies  is  becoming  the 
new  common  denominator 
across  what  were  formerly 
disparate  corporate  fob 
functions.  Mass  adoption  of 
TCP/IP  and  Ethernet  across 
disciplines  could  soon  begin 
to  erode  departmental  barri¬ 
ers  and  redefme  what  is  and 
is  not  an  IT  function.  IXirf 
wars  are  likely  to  erupt.  And 
before  it*s  over.  IT  managers 
may  feel  as  though  they've  tried  on 
more  hats  than  the  Village  People. 

The  question  is,  as  everything  con¬ 
verges  onto  a  common  networic  archi¬ 
tecture,  how  should  that  architecture 
be  designed,  how  should  it  be  managed, 
and  wdto  should  have  responsibility  for 
the  disparate  systems  that  use  it? 

Consider  building-automation  sys¬ 
tems.  From  heating  and  ventilation  to 
surveillance  and  elevator  monitoring, 
building  automation  will  undergo  a 
major  transition  to  TCP/IP  and  Ether¬ 
net  over  the  next  10  years.  Traditional 
use  of  expensive,  proprietary  cabling 
systems,  communications  protocols 
and  specialized  converter  boxes  will 
give  way  to  a  common,  structured  ca¬ 
ble  plant  and  network  infrastructure. 
The  convergence  of  automated  build¬ 
ing-monitoring  and  control  systems 
onto  a  single  communicalion.s  medium 
has  implications  that  even  those  in  the 
industry  have  yet  to  fully  grasp.  New 
applications  are  likely  to  emerge  that 
will  offer  unprecedented  integration 
—  as  soon  as  someone  thinks  of  them. 

And  with  the  ratification  this  sum¬ 
mer  of  the  emerging  Power-over- 
Ethemet  standard,  the  local  wiring 


closet  will  gradually  evolve 
into  a  universal  distribution 
system  for  low-power  de¬ 
vices,  ranging  from  secu¬ 
rity-card  readers  to  IP  sur¬ 
veillance  cameras  and  even 
emergency  backup  lighting, 
time-card  readers  and  wall 
clocks.  Each  will  be  re¬ 
motely  configurable  and 
will  feed  back  status  infor¬ 
mation  over  Ethernet 
But  with  Ethernet  fully 
democratized,  who  will 
control  the  infrastructure? 
You  could  create  parallel,  separately 
managed  networks.  But  IT  has  more 
experience  managing  IP-based  data 
networks,  and  sooner  or  later,  some¬ 
one  is  going  to  want  to  cross  the  IT 
and  building-automation  systems'  data 
streams.  For  example,  analysts  say  IT 
security  is  likely  to  merge  with  build¬ 
ing-security  systems  over  the  next  few 
years  in  order  to  provide  a  more  com¬ 
prehensive  security  picture. 

Meanwhile,  wireless  LANs  arc  fol¬ 
lowing  PDAs  through  the  corporate 
back  door,  and  departmental  managers 
have  begun  acting  like  network  man¬ 
agers.  installing  WLAN  access  points 
in  a  grass-roots  effort  to  give  mobile 
office  workers  access  to  the  corporate 
LAN.  Do  you  issue  cease-and-desist 
orders  and  hope  for  the  best,  or  do 
you  take  charge,  set  WLAN  policy  and 
begin  your  own  deployment?  Doing 
the  latter  means  managing  data  over 
radio  waves  in  an  unlicensed  spectrum 
that  spills  over  business  boundaries, 
is  prone  to  security  problems  and 
doesn't  like  the  office  microwave. 

WLANs  also  present  a  new  learning 
curve  in  how  to  manage  and  trou¬ 
bleshoot  a  networic  that  uses  airwaves 


as  its  communications  medium.  Greg 
Murphy,  president  of  WLAN  manage¬ 
ment  software  vendor  AirWave  Wire¬ 
less  Inc.,  says  a  hospital's  IT  team 
called  recently  when  WLAN  perfor¬ 
mance  began  dropping  off  at  regular 
intervals.  AirWave  traced  the  problem 
to  a  balloon  vendor.  With  each  deliv¬ 
ery,  the  metallic-covered  Mylar  bal¬ 
loons  floated  upward,  blocking  an 
access  point  in  the  lobby. 

WLANs  clearly  need  to  be  managed 
by  IT.  Once  IT  assumes  control,  how¬ 
ever,  users  will  expect  the  same  level 
of  service  they  get  on  the  wired  net¬ 
work.  Early  management  products  can 
help  by  providing  centralized  configu¬ 
ration  management  and  performance 
monitoring,  but  they  also  must  be  inte¬ 
grated  with  existii^  enterprise  net¬ 
work  management  systems  for  end-to- 
end  troubleshootif^ 

The  votce/dala  divide  is  another  de¬ 
partmental  boundary  that’s  falling  fast. 
IP  telephony  is  turning  the  Ethernet 
LAN  into  a  giant  telephone  switch, 
with  IP  phones  plugged  into  Ethernet 
jacks  and  traditional  PBX  functions 
tike  call  management  and  voice  mail 
running  on  network  servers.  As  if  that 
wasn’t  enough.  WLAN  IP  phones  are 
on  the  way. 

In  taking  on  traditional  telecommu¬ 
nications  department  functions,  IT 
must  serve  a  constituency  that  has 
high  expectations  for  signal  quality, 
uptime  and  sophisticated  feature  sets. 
Suddenly,  data  networking  staff  need 
to  understand  the  impact  of  issues  like 
jitter,  latency  and  packet  prioritiza¬ 
tion,  while  the  telecommunications 
folks  bone  up  on  TCP/IP.  Do  you 
merge  these  groups  —  or  somehow 
move  the  boundary  between  them? 

How  such  issues  get  resolved  is 
likely  to  redefine  IT’s  role  in  the  orga¬ 
nization.  As  an  IT  manager,  you  should 
take  the  initiative  to  drive  that  proc¬ 
ess  before  some  other  group  does  it 
for  you.  A 
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The  Perfect  Toy 
lor  Control  Freaks. 


Control  2  to  512  PCs  or  servers  from  a  single  keyboard, 
monitor  and  mouse  console  with  Tripp  Lite  KVM  Switches! 


Take  TOTAL  CONTROL  with 
Tripp  Lite  KVM  Switches!  Not  only 
will  you  be  able  to  manage  every 
computer  on  your  network,  you'll 
also  SA\E  VALL  ABLE  TIME. 

MONEY  AND  SPACE. 
Save  hundreds  of  dollars  per  port 
in  hardware  and  electricity  costs, 
eliminate  unnecessary  clutter 
and  improve  productivity  by 
avoiding  unnecessary  movement 
between  consoles. 
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Tripp  Lite's  8-port  rackmount  KVM  Switch  is  full  featured  yet  economically  priced. 

•  All  metal  housing— occupies  only  lU  of  rack  space 

•  Simple  "plug-and-play”  setup  requires  no  software  configuration 

•  "Always-on"  technology  eliminates  need  for  external  power  source 

•  Individual  port  selection  buttons  allow  for  faster  CPU  selection  without  scrolling 

•  On-screen  display  provides  simplified  menu-driven  management 
•Compatible  with  PS/2,  AT",  USB*,  Mac*  or  SUN*  systems 

•  Desktop  models  also  available  in  2  and  4-port  configurations 


*  Wwn  used  with  cptionel  adapters,  sold  separately. 


FREE  4rPort  KVM  Switch! 

1 

Register  online  for  a  chance  to  win  a  FREE  4-port  KVM  Switch. 

Visit  www.tripplite.com/promo/cw 

No  purchase  rrecessary.  Sorw  restrictions  apply.  Visit  out  NeC  s>te  for  deUils. 
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7hpp  Lkf  u  vnur  lourrr  for  pau<tr  prnirrtUtn 
and  rptUMtlii-irs'  produeu. 


www.tripplite.com 

1111  W.  35th  Street,  Chicago,  IL  60609  (773)  869-1234 
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Products.  People. 
Problems  solved. 

From  servers  to  service,  Deli  has  the  solution. 


Dell  I  Small  and  Medium  Business 

Your  business  has  unique  needs.  It  deserves  a  unique  soltition.  From  PowerEdge'  servers  featuring  Intel'  Xeon'' processors  to 
PowerVautt'”  Storage  and  PowerConnecf  Network  Switches,  we  offer  tailored  solutions  to  meet  your  business  needs.  And  of  course 
It's  Dell,  so  you  know  you're  getting  the  latest  technology.  But  that's  only  half  of  the  story.  Dell  offers  consulting  services  that  range 
from  deployment  and  installation  to  training  and  certification.  All  from  one  source.  Ar>d  everything  is  backed  by  thousands  of  service 
and  support  people  at  your  beck  and  call,  on-site,  online  and  on  the  phone.  Suddenly  your  IT  infrastructure  doesn't  seem  so  daunting. 
Let  Dell's  one-of-a-kind  solutions  put  you  on  the  path  to  one-of-a-kind  success. 

Dell  Rated  #1  in  Intel-Based  Server  Satisfaction 

Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 
Third  Quarter  2002 
-December  2002 
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Remote  Office  &  File/Print  Sharing  Web  Server 


PowerEdge"  600SC  Server 

EWry-UiilSwwrwiMifiilii— n  TmIm 

•  kiwt*  PentHfn*  <  hocsssor «( 2  406H2 

•  128M8  268MH2  ECC  OOA  SDRAM 

•  UpgtaduUc  »  466  of  Memory 

«  3666  nOK  RPMI  SCSI  Hard  Dm*  I  jp  u  I46G6  HD  Av».i  [ 
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Nortel  Networks,  we  call  this  "the  engaged  business  modelT  And  we  make  it 
possible  by  enabling  business  to  engage  their  customers  through  delivering 
critical,  time-sensitive  information  on  whatever  device  they  prefer.  Before  they 
even  know  they  need  it.  So  businesses  can  win  the  ioyalty  necessary  to  build  a 
solid  revenue  base.  Leveraging  solutions  like  contact  centers  and  application- 
aware  switching.  Insuring  user  mobiiity  and  network  continuity.  Accelerating 
productivity  while  lowering  costs.  The  results:  customers  like  William  become 
customers  for  life.  All  delivered  by  our  Enterprise  vision.  One  network.  A  world 
of  choice,  nortelnetworks.com/onenetwork 


STEAL  THIS  IDEA 

And  the  Winner  Is . . . 

Southern  California  Edison  CIO 
Mahvash  Yazdi  says  the  utility  has 
launched  an  awards  program  to 
recognize  IT  excellence  beyond  the 
walls  of  the  IT  department.  Page  44 
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E-Business  So  Far 

In  their  new  book  on  e-business,  two 
authors  from  the  Wharton  School 
analyze  why  some  Internet  ventures 
were  profitable  while  others  failed. 

Page  46 


OPINION 

Magna  Cum  Unemployed 

Wth  companies  like  Microsoft  and  GE 
setting  up  IT  shops  overseas  and  the 
economy  slowing,  IT  professionals  are 
watching  job  opportunities  fade  away, 
writes  columnist  Donald  Finley.  Page  48 


IT  WORKFORCE 


THE  WRITWO  IS  ON  THE  WALL 

If  you  are  a  programmer  or  an 
application  developer,  or  work 
on  the  IT  help  desk  or  in  data 
center  operations,  your  IT  job 
is  in  jeopardy,  and  here’s  why. 

In  an  unrelenting  push  to  lower  IT  costs,  more  and 
more  companies  are  tapping  cheaper  offshore  labor 
to  handle  routine  tasks  such  as  application  mainte¬ 
nance  and  help  desk  support  functions.  Even  compa¬ 
nies  that  farm  out  IT  work  under  pay-as-you-go  and 
other  hosted  computing  models  to  U.S.  outsourcers 
—  such  as  IBM  and  Hewlett-Packard  Co.  —  are  con¬ 
tributing  to  the  loss  of  jobs,  because  these  domestic 
service  providers  are  also  shipping  IT  work  abroad. 
IBM  Global  Services,  for  example,  is  India’s  fifth- 
largest  employer. 

By  2015. 33  million  white-collar  jobs  —  472,632  of 
them  in  IT  and  mathematics  —  and  $136  billion  in 
wages  are  expected  to  move  offshore  to  countries 
like  Russia,  India,  China  and  the  Philippines,  accord¬ 
ing  to  a  November  2002  report  by  Forrester  Research 
Inc.  analyst  John  C.  McCarthy. 

In  March,  212,000  U3.  computer  and 
professionals  were  unemployed,  according  to  the 
U.S.  Bureau  of  Labor  Statistics.  Looking  ahead,  Meta 
Group  Inc.  analyst  Maria  Schafer  predicts  that  up  to 
50%  of  U.S.  IT  employees  could  shift  to  contract 
work  by  2007,  as  outsourcing  in  all  forms  continues 
Continued  on  page  40 
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be  the  next  one  to  go  offshore. 
By  Thomas  Hoffman  and 
Patrick  Thibodeau 
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to  iocrease  and  as  more  salaried  U^.  IT  employees 
opt  to  work  as  contractors  to  take  advantage  of  the 
flexible  schedules  and  the  opportunity  to  work  on  a 
variety  of  protects. 

Some  industry  experts  draw  an  analc^  between 
the  thousands  of  U.S.  manufacturing  jobs  that  were 
sent  overseas  20  to  30  years  ago  and  ^e  impact  that 
offshore  outsourcing  is  now  having  on  U.S.  IT  jobs. 
Still,  there  are  subtle  but  important  differences  be¬ 
tween  the  twa  Among  them  is  that  the  forces  behind 
the  shrinking  IT  workforce  go  beyond  companies 
seeking  lower  costs.  IT  managers  are  also  stru^Iing 
to  strike  a  balar>ce  between  the  skills  they  want  to 
have  in-house  on  salary  and  the  talent  th^  can  con¬ 
tract  for  on  an  as-needed  basis. 

“It’s  not  iust  about  low  cost.  CIOs  are  interested  in 
specialization  and  reliability,”  says  Mark  Hauser. 
CEO  of  Cap  Gemini  Ernst  &  Young’s  Americas  divi- 
sioa  Goii^  forward.  CIOs  say  they  want  a  different 
mix  of  skills.  They  want  their  salaried  IT  employees 
to  include  experienced  project  managers  and  busi- 
oess/TT  liaisons  who  can  effectively  communicate 
and  broker  IT  project  requirements  between  busi¬ 
ness  imits  and  IT  departments. 

Packaged  Software  Improving 

Another  foctor  contributing  to  IT  job  loss  in  the  US. 
is  companies'  growing  preference  for  a  buy-vs.-build 
approach  to  software  development.  Purchasing  soft- 
Mfare  means  that  fewer  in-house  programmers  and 
developers  are  required  than  when  systems  are  cre¬ 
ated  from  scratch  —  even  when  a  hit  amount  of  cus- 


The  New  IT  Worker 


WHEN  ff  8PB3AUST  JM  MAMOI  deoUed  to  help 
a  union  at  IBM  to  1999  after  toe  company  dtanitod  its 
panston  piafv  toe  woist  part  was  teino  Ns  father,  a  Big 
Blue  retiree.  Itfhel’s  ha  ootog  to  totok?  WhM’s  he  ootoQ 
to  say  to  hb  son . . .  who  is  going  to  stvt  union  argv1i^ 
togT  Uangl  recals.  But  as  I  tuned  out.  Ns  fatoer  was 
al  for  I.  *He  knows  It’s  just  not  what  I  wes.”  says  Mangl. 
secretary  of  AllanceetOM.wtoich  is  afliatedwito^ 
CorrvnuScMtors  WWters  of  Arnerlca  (C^ 

Many  NiHKh  workers  are  toeing  uider  siege,  and 
Mangl  to  arnoTfo  toose  who  are  fighting  back.  Job  loesas 
from  toe  dot-oxn  lut.  benefite  cuttrecki  offshore  de^ 
Miopnwtk  arto  foreign  workers  brougN  to  on  H*C  visas 
are  fuilng  acMn.  tobhytog  and  education  efforts 
Much  of  what  uSon  organizBrs  do  Is  educate  IT  work¬ 
ers,  who  toqfoto  rernato  rekjctanl  to  joto  untoTB.  Indaed, 
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tomization  is  done  to  the  off-the-shelf  software.  So¬ 
phisticated  software  development  techniques  and 
improved  global  bandwidth  and  communications  are 
making  it  possible  for  companies  to  have  various 
pieces  of  development  or  integration  projects  con¬ 
ducted  in  India  or  China,  with  the  fm^  assembly 
completed  in  the  US.  That's  why  there  will  continue 
to  be  demand  for  superdevelopers  and  top-notch  in¬ 
tegration  experts  who  are  adept  at  managing  and  co¬ 
ordinating  different  phases  of  a  development  project 
and  pulling  together  the  various  components  into  a 
cohesive  package. 


toe  (^A.  whkh  represent  abCNjt  700.000  workers  to  technical 
areas,  estimstes  that  only  about  S.000  of  its  merrhers  are  In  IT. 

Mangi  toto  amptoyees  know  when  BM  is  Nrtog  H-e  Wsa 
holdefs  by  posttog  on  a  Web  site  coptos  of  toe  federal  form  that 
emptoyers  must  fito  whan  hiring  vrerkers  from  overseas.  He  says 
he  do«  it  to  make  people  aware  lhai  even  though  8M  may  be 
gotog  through  layoffs  to  toe  U.S.  the  company  may  abo  be  ap¬ 
plying  to  Nre  tor^  laborers. 

If s  a  tumtog  pM  in  tob  todusby.’ says 
Marcus  Courtney,  presideni  of  toe  Seattle- 
based  \Atoshtogton  ANance  of  Technotogy 
WcNkers.  a  Ngh-lech  workers' (tokto  tfofs 
aboaffifiteedwitotoeCWILOffshoreouf- 
sourctogandtocreaseduseofforalgnwtork- 
ers  are  practices  that  wwe  toconcehefale  In 
toeQ005.hesays. 

*1b  eel  tob  workforce  out  after  they 
helped  create  one  of  toe  moat  succeed 
econornies  to  the  world  -  that  shotdd  not  be 
an  agenda  that  workers  need  to  antorace.' 

Coutneyadds. 
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“If  you  buy  the  argument  that  a  lot  of  IT  has  be¬ 
come  commoditized,  [then]  we  are  becoming  inven¬ 
tors,  creators,  integrators  and  ardutects.  and  we  are 
going  to  send  the  production  offshore,”  says  Steve 
Andriole,  a  senior  consultant  at  Arlington.  Mass.- 
based  Cutter  Consortium  and  an  MIS  professor  at 
VtUanova  University  in  VUlanova.  Pa.  Under  this  sce¬ 
nario.  argues  Andriole,  U3.  IT  organizations  will 
continue  to  partner  with  business  units  to  conceptu¬ 
alize  IT  approaches  to  business  challenges  and  exe¬ 
cute  on  those  projects  domestically  —  even  if  part  of 
the  project  development  itself  is  conducted  overseas. 


A  legbtaSve  offenslre  b  begtontog  to  buld  at  toe  state  leveL 
A  bl  pendtog  to  toe  Washington  Statehouse  would  require 
enfotoyers  to  enfotoyaes  M  toast  60  days  notice  of  a  layoff 

of  M  or  more  emptoyees.  And  a  Naw  Jersey  towmakar  wants 
slate  contracto  to  proNbft  offshore  work. 

The  offshore  trend  can  be  compared  to  toe  overseas  job 
exodus  to  manufacturtog.  The  ton  of  retotiwfy  wel-paytoQ. 

bkie-cohr  joba  hurt  that  segment  of  toe 
yMNkforoe.  and  teal  wages  for  toe  bottom 
2S%  of  the  workforce  never  fBcovered.  says 
Josh  Bkreni  an  eoonoririst  at  toe  Econornic 
Mtoy  Instifute  to  WteNngtaa 
DaveCooper.formerCiOatLawrenceUv- 
ermore  National  Laboratory,  a  U.&  nudaar 
weapons  lab.  says  toe  social  costs  of  off¬ 
shore  dBwfoprnenl  wffi  axceed  the  corporate 
bottom-lnebaneflb.Offshoreworkwidb' 
oonge  itoung  people  from  studytog  fT  In 
rtofiege,  Coopw  atguea.  Wtoat  has  *kBpl  tob 
orwnlrysIronabotofinancblyandpf^Bical- 
ly.  b  the  fact  that  we  have  been  afato  to  daval- 
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aamgan  inaak%faaebake  kmlBBlD 
Meg  nknkkenkaai  take  MokChgeai 
iaBkdn«aedCeOkFinehgle*Hfe,Mck.- 
taadCmameOa«L.«tldieiekdK  oaken 
ITaantaekkdk.lTnidBnakioeanni- 
ck>mkkealaafeikeeknil*igkaien 
kao  needed  in  ka  USl.  aneikig  le  Chgne. 
Thenewrtwenkieeidukowdakak 
nkaedB.  Ina  to  nei  lam.  bUH  ken  nd 
pntoelkam.laaaia. 


Bkkkcamradiitaale  baaed  on  kaMndiolaanlcn 
bang  anadad  oMan  kdn.  nk  tonnnoa  Da  bikm  kr 
US.  fTamkatonkoaitgkaoae. 

MancadiaandilnQaiditoagetocbnelokninaali- 
lngtotoniirintoiidlk.«inalanokkcnbenanaBid 
e»»daman^kn.  ana  kike  lioiike.  dak  lacliatoa 
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iMa.Vk 

Ha  auk  k  kk  ■  m  coknui  to  mmaa.  la  end  d 
arakdnn  a  aaaae  ankennail  to  a  cantoaiy  k  gotag  to  ba 
tootoga.*ani>indn1tonangobigtobatoo 
iiaqriiBtthki.toooaiyalm«mandknlal 
goto  doyen  Ik.  Ho.  I  aok  a  oaotoana  kk  don 
kk  to  a  Mng  to  nony  aboid  kaw  kbtoi  n  a 
aVTbaka." 

Mb  badkoia  nabaita  opotong  k  knok 
an  Mancy  naridkdt.  kan'B  nokkg  to  kop  ka 
baat  ol  a  coponto  IT  dnobnanl  •  II  dki  canto 
-  bum  bkng  namd  okkna.  Mandn  aaya.  1 
conaaMcnanbkainnkokyiktoukwbul 
wlninky  alkik,  Ian  ikn  iktoaaa  dun  I 
nato  I  ri  doen  ka  bladi  or  mind  ka  oounayr 
-  IMdr  Tbkodni/and  Tbomn/Ufian 


To  that  end.  more  than  a  dozen  CIOs  at  Forttme 
1.000  companies  and  many  other  TT  leaders  at  latpe 
IT  organizations  who  were  interviewed  for  this  re¬ 
port  say  the  IT  wotiter  they're  looking  for  is  some¬ 
one  who  combines  business  savvy  and  broad  tech¬ 
nology  acumen. 

"We'te  trying  to  preserve  the  internal  knowledge 
that's  important  to  the  business  while  leveraging 
lower  labor  rates  and  technological  sophistication  in 
different  geographies."  says  Harriet  Edelman.  senior 
vice  president  and  CIO  at  Avon  Products  Inc.  in  New 
York.  The  S6  billion  beauty  products  company  is  in 


the  early  stages  of  creating  its  own  network  of  re¬ 
gional  development  centers.  It  began  by  establishing 
a  Web  development  hub  in  Hungary  last  year  [Quick- 
Unk  377611. 

Global  Exchange  Services  Inc.  (GXS).  a  Gaithers¬ 
burg.  Md. -based  spin-off  of  General  Electric  Ca  that 
provides  transaction  management  services  to  mote 
than  60.000  retailers  worldwide,  pays  about  S30  per 
hour  for  programming  work  in  its  company-operated 
oBshore  centers  in  India  and  the  Philippines  [Quick- 
Unk  375221  In  the  U.S.,  GXS's  total  hourly  program¬ 
mer  cost  is  SllO  to  S120. 


op  keae  tocbnolooies  and  kad  ke  rek  of  ke  wodd.*  ha  says. 
1  w  no  longa  ham  U.Sl  clllzatB  who  m  adtog  to  Isbidy  IT  in 
coiagel  ra  going  to  hut  us  aocMy  In  an  aconotOc  sanu." 

BU  Stove  Aniblok.  I  aanto  conakUM  k  CUto  Consotkin. 
and  an  MS  prakaeu  k  VlaiitM  Uilvaialy.  says  ka  US.  *■ 
an  ba  ka  phea  sham  tochnology  ksK  m  bun.  1kMi  ka 
daks  m  hwar  kk  m  ml  baa  ou  cm  cunpatonitos.' ha 
says.  And  kk  Ims  to  do  aHi  ka  setaMby  and  lapld  pace  of 
ik^  ol  tochnetogy.  aihlch  ae«  new  dnatopmanb  every  hvo 
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to  krae  yaais.  vs.  n  lofi  yeas  In  mandadumg 
"Tetknotogbk  bnovaston  is  sM  togky  IhS-cenhic.' 
he  says.  In  mandachitog.  fa  not* 

-  ftortob  lUoatoukid  Ihonas/Mhian 
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The  economics  give  companies  little  choke  but  to 
export  programming  work,  especially  for  software 
maintenance  and  support.  But  increasingly,  they’re 
also  exporting  application  development  and  infoa- 
structure  suf^rt  work,  says  Riu  Terdiman.  an  ana¬ 
lyst  at  Stamford.  Conn.-based  Gartner  Inc. 

“You  have  to  do  it,  otherwise  the  competition  is 
doing  U  for  you.”  said  Tasos  Tsolakis,  GXS  vice  presi¬ 
dent  of  global  technology. 

Workers  Find  Comfort  in  Groups 

On  the  IT  employee  side,  the  ofbhore  movement  is 
changing  workers'  attitudes  toward  their  employers. 
To  protect  their  livelihoods,  programmers  and  others 
are  embracing  strategies  more  common  among  blue- 
collar  workers.  These  include  joining  unions  aikd 
lobbying  legislators.  “Every  day  you  go  to  work,  you 
don’t  know  if  you  are  going  to  have  a  job  that  day.“ 
says  Linda  Guyer,  president  of  AiUance(^IBM.  an  En- 
dicott.  N.Y.-ba^  union  of  rou^tly  5.000  IBM  work¬ 
ers.  “You  don’t  know  whether  you  are  going  to  be  re¬ 
quired  to  train  your  replacement”  foom  India  (see 
“The  New  IT  Worker  Angry  and  Proactive"). 

The  union  was  formed  in  1999,  when  IBM  made 
unpopular  changes  to  workers'  pension  plans.  Today, 
the  union  continues  to  play  mostly  an  educational 
and  informational  role.  For  example,  it  lets  employ¬ 
ees  know  when  IBM  is  hiring  H-lfi  visa  holders  by 
posting  on  a  Web  site  copies  of  the  federal  form  that 
employers  must  Hie  when  hiring  overseas  workers. 

Even  thou^  it  has  no  bargaining  rights,  the  union 
says  it  can  still  exert  pressure  as  a  voice  of  influence. 
“We’re  small,  but  we  think  we  carT>'  a  lot  of  weight. 
The  executives  arc  aware  we  exist,  and  I  think  we  arc 
a  very  effeaive  pressure  point,"  Guyer  says. 

Some  IT  executives  say  they  have  no  ctoice  but  to 
outsource.  Sue  Unger,  senior  vke  president  and  CIO 
at  DaimlerChrysW  AG.  says  her  company  last  year 
began  to  outsource  maintenance  for  core  applica- 
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tions  that  support  its  engineering,  manufaeturing 
and  sales  activities  to  Infosys  Technologies  Ltd. 
and  Syntel  Inc.,  both  in  India.  The  move  allowed 
DaimlerChry  sJer  to  cur  loose  high-priced  U.S.-based 
consultants  who  were  used  lor  strategic  projects  and 
replace  them  with  100  DaimlerChrysler  IT  staflfers 
and  on-site  contractors  who  had  been  doing  mainte¬ 
nance  work. 

“Companies  are  in  a  death  spiral  if  you  try  to  do 
everj'thing  inside,”  says  Unger 

William  Belding  is  a  beneficiary  of  that  transition. 
Bolding  joined  DaimlerChrysler  in  1996  as  a  client 
server  programmer  'analj-st.  He  fiKuscd  on  quality 
reporting  for  the  automaker's  data  warehouse.  Since 
those  tasks  were  sent  to  India  last  year.  Belding  has 
taken  on  responsibility  for  the  security  infrastructure 
of  the  company's  Web-based  Dealer  Connect  portal. 

”irs  a  good  opportunity  for  me  to  see  something 


new.  to  extend  my  career  in  the  right  direction.” 
says  Belding. 

But  if  the  previous  centuiy's  outsourcing  of  U.S. 
manufacturing  jobs  is  any  barometer,  many  more 
displaced  IT  workers  may  have  to  settle  for  less. 
Blue-collar  manufacturing  workers  who  lost  their 
jobs  typically  faced  a  lower  standard  of  living,  and 
the  same  fate  could  face  programmers  and  others, 
says  )osh  Bivens,  an  economist  at  the  Economic 
Policy  Institute  in  Washington.  High-tech  outsourc¬ 
ing  isn't  on  the  same  scale  as  manufacturing's,  "but  it 
has  a  familiar  feel  to  it."  he  says. 

lames  Pace,  a  Connecticut  IT  mainframe  consul¬ 
tant  who  had  been  working  at  an  insurance  compa¬ 
ny.  lost  his  job  in  lanuaiy.  He  says  he  believes  it  was 
a  result  of  offshore  outsourcing.  Pace  says  IT  work¬ 
ers  affected  by  offshore  outsourcing  are  taking  low¬ 
er-paying  jobs,  such  as  restaurant  managers  and  po¬ 
lice  officers,  and  that  decreases  their  spending  pow¬ 
er.  "Everything  is  a  trickle-down  effect.”  says  Pace.  I 
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A  look  at  programmers '  annual  salaries 
in  various  countries  illustrates  why  offshore 
outsourcing  is  becoming  popuiar  among  companies 
trying  to  cut  costs.  The  average  salary  for  a 
systems  programmer  in  the  U.S.  is  S^.33l. 
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There’s  More  to  Consider  Than  Cheaper  Labor 


than 

lower  bbor  rates.  Industry  experts  and  CIOs  with 
offshore  experience  caution  would-be  customers  to 
carefully  examine  all  of  the  risks,  including  the  hid¬ 
den  costs.  It's  also  important  to  protect  intellectual 
property,  examine  the  geopolitical  risks  in  the  region 
where  the  work  will  be  done  and  effectively  commu¬ 
nicate  the  company’s  overall  outsourcing  strategy  to 
stateside  workers. 

Offshore  outsourcing  "creates  some  stressful  situa¬ 
tions.  some  motivational  factors  and 
some  confidence  factors  with  your 
own  people,"  says  Rick  Greenw'ood. 

CIO  at  GMAC-RfC  Residential  Capi¬ 
tal  Group  in  Minneapolis.  Green¬ 
wood  addresses  those  issues,  in  part, 
by  keeping  his  company's  mo.st  im- 
p«inant  IT  work  in  the  U.S. 

“We're  very  careful  not  to  give 
away  what  I  would  say  is  a  core  com¬ 
petency  and  core  business  knowl¬ 
edge."  he  sa^'s.  Instead,  he  and  other 
IT  managers  at  the  company  try  to  maintain  those 
competencies  by  providing  IT  staffers  in  the  U.S. 
with  continual  training  and  moving  them  to  high- 
impact  projects. 

Sciutinjze  Political  Risks 

Companies  that  exclusively  outsource  to  a  third  par¬ 
ty  in  a  single  country  run  the  risk  that  a  political  situ¬ 
ation.  such  as  armed  conflict  between  Pakistan  and 
India,  could  shut  down  offshoa*  IT  opcration.s.  That’s 
an  important  consideration  for  Delta  Air  Lines  Inc., 
which  wants  offshore  work  scattered  in  w  ider  areas. 


"We’re  trying  to  manage  the  risk  of  the  political 
environment,”  says  Curtis  Robb,  president  and  CEO 
of  I>elta  Technology  Inc.,  the  IT  services  arm  of  the 
Atlanta-based  airline.  The  company  has  awarded 
IBM  a  contract  to  provide  offshore  IT  services  be¬ 
cause  IBM  has  16  regional  centers  worldwide. 

More  than  90%  of  outsourced  applic.ttion  mainte¬ 
nance.  help  desk  and  desktop  maintenance  W'ork  and 
a  limited  amount  of  call  center  and  customer  service 
work  is  currently  being  sent  to  India,  according  to 
Avinash  Vashisiha.  a  senior  adviser 
at  NeolT,  a  San  Ramon.  Cali/.-based 
offshore  services  advisory'  firm.  That 
figure  excludes  IT  work  outsourced 
to  Ireland  and  Canada  but  includes 
other  countries  such  as  Israel,  says 
Vashlstha. 

Experts  say  outsourcing  to  India 
can  reduce  IT  labor  costs  by  up  to 
50%.  but  most  customers  underesti¬ 
mate  the  indirect  project  .and  pro¬ 
gram  management  costs. 

"When  you  send  your  people  overseas  to  visit 
those  sites  frequently,  your  costs  go  from  S42  an  hour 
to  Sfi5  an  hour."  says  Steve  Andriole,  a  senior  consul¬ 
tant  at  Arlington.  Mass.-based  Cutter  Consortium 
and  a  professor  of  MIS  at  Villanova  University.  An¬ 
driole's  calcubtiun  includes  travel  costs  plus  the  cost 
of  lost  productivity  that  tKcurs  when  a  U.S.  IT  work¬ 
er  is  removed  from  his  daily  tasks  and  sent  overseas 
ft>r  a  few  weeks. 

Those  costs  can  go  even  higher  when  project  re¬ 
quirements  "creep"  or  if  a  development  problem 
emerges  at  an  offshore  pri^ramming  house,  says  An¬ 


isqraduatmg  roughly 
IT  professionals 
annually,  vs. 

In  the  U.S, 


driole.  'if  you  have  to  drop  in  10  people  from  the 
states,  and  they  spend  a  month  or  two  there,  guess 
what?  You’ve  just  erased  most  of  your  cost  savings." 

Another  risk  of  moving  IT  work  offshore  is  the 
potential  loss  of  intellectual  property  and  business- 
process  secrets.  Some  IT  managers  worry  that  off¬ 
shore  outsourcers  will  copy  and  sell  that  knowledge 
or  repackage  it  and  present  it  to  a  competitor. 

“If  we  send  development  of  too  much  of  our  core 
business  out  of  our  control,  what  happens  to  that 
when  our  competitor  goes  to  the  same  third  party 
and  says.  '\Ve  want  to  do  what  they  did?’  ”  says 
Richard  Nolle,  vice  president  of  systems  at  Reinsur¬ 
ance  Group  of  America  Inc.  in  Chesterfield.  Mo. 

“The  economics  is  driving  me  to  it  [outsourcing],  but 
those  kinds  of  concerns  arc  making  me  cautious." 
adds  Nolle,  whose  company  already  sends  applica¬ 
tion  development  work  overseas. 

One  way  to  avoid  these  problems  Is  "by  trying  to 
break  up  key  pieces"  of  work  being  sent  offshore  so 
“no  one  can  easily  assemble  those  pieces."  says  Den¬ 
nis  Roell.  IT  manager  at  Betts  USA  Inc.  in  Florence. 
Ky..  which  makes  packaging  products  such  as  tooth¬ 
paste  lubes.  "Think  of  it  as  encryption  —  you  want  to 
reassemble  the  message."  says  Rwll. 

—  Thomas  Hoffman  and  Patrick  Thibodeau 


We’re 
trying  to 
manage  the  risk 
of  the  political 
environment. 


CURTIS  ROBB,  prasktont  and  CEO.  IMU  Technology 
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MODS  that  support  its  engineering,  manufacturing 
and  sales  activities  to  Infosys  Technologies  Ltd. 
and  Syntel  Inc.,  both  in  India.  The  o>ove  allowed 
OaimlerChfysler  to  cut  loose  high-priced  U.S.-based 
consultants  who  were  used  for  strategic  projects  and 
replace  them  with  100  DaimlerChrysler  IT  staffers 
and  on-site  contractors  who  had  been  doing  mainte¬ 
nance  work. 

“Companies  are  in  a  death  spiral  if  you  try  to  do 
everything  inside,”  says  Uoget 

William  Belding  is  a  beneficiary  of  that  transition, 
fielding  joined  DaimierChrysier  in  1996  as  a  client/ 
server  programmer/analyst.  He  focused  on  quality 
reporting  for  the  automaker’s  data  warehouse.  Since 
those  tasks  were  sent  to  India  last  year,  fielding  has 
taken  on  responsibility  for  the  security  infrastructure 
of  the  company’s  Web-based  Dealer  Connect  portal. 

“It’s  a  good  opportunity  for  me  to  see  something 


IT 

DBS 


new,  to  extend  my  career  in  the  right  direction," 
says  Belding. 

But  if  the  previous  century's  outsourcing  of  U.S. 
manufacturing  jobs  is  any  barometer,  many  more 
displaced  IT  workers  may  have  to  settle  for  less. 
Blue-collar  manufacturing  workers  who  lost  their 
jobs  typically  faced  a  lower  standard  of  living,  and 
the  same  fate  could  face  programmers  and  others, 
says  )osh  Bivens,  an  economist  at  the  Economic 
Policy  Institute  in  Washington.  High-tech  outsourc¬ 
ing  isn’t  on  the  same  scale  as  manufacturing’s,  “but  it 
has  a  familiar  feel  to  it,"  he  says. 

James  Pace,  a  Connecticut  IT  mainframe  consul¬ 
tant  who  had  been  working  at  an  insurance  compa¬ 
ny.  lost  his  job  in  January.  He  says  be  believes  it  was 
a  result  of  offshore  outsourcing.  Pace  says  IT  work¬ 
ers  affected  by  offshore  outsourcing  are  taking  low¬ 
er-paying  jobs,  such  as  restaurant  managers  and  po¬ 
lice  officers,  and  that  decreases  their  spending  pow¬ 
er.  "Everything  is  a  trickle-down  effect."  says  Pace.  • 
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A  look  Of  programmers*  annual  salaries 
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trying  to  cut  costs.  The  averxtge  salary  fin- a 
systems  programmer  in  the  US.  is  S6X^. 
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There's  More  to  Consider  linn  Cheapu 


THERE'S  MUCH  MORE  TO  OFFSHORE  OUTSOURCtNG  than 
lower  labor  rates.  Industry  experts  and  CIOs  with 
ofhdiore  experience  caution  would-be  customers  to 
carefully  examine  all  of  the  risks,  including  the  hid¬ 
den  costs.  It’s  also  important  to  protect  intellectual 
property,  examine  the  geopolitical  risks  in  the  region 
where  the  work  will  be  done  and  effectively  commu¬ 
nicate  the  company's  overall  outsourcing  strategy  to 
stateside  work^ 

Offshore  outsourcing  "creates  some  stressful  sinu- 
tions,  some  motivatioaal  factors  and 
some  confidence  factors  with  your 
own  people."  says  Rick  Greenwood, 

CIO  at  GMAC-RFC  Residential  Capi¬ 
tal  Group  in  Minneapolis.  Green¬ 
wood  addresses  those  issues,  in  part, 
by  keeping  his  company’s  most  im¬ 
portant  IT  work  in  the  U.S. 

"We're  very  careful  not  to  give 
away  what  I  would  say  is  a  core  com¬ 
petency  and  core  business  knowl¬ 
edge,"  he  says.  Instead,  be  and  other 
IT  managers  at  the  company  try  to  maintain  those 
competencies  by  providing  IT  staffers  in  the  U5. 
with  cominuaJ  training  and  moving  them  to  hi^- 
impact  projects. 

Scrutinize  Poitical  Ffisks 

Companies  that  exclusively  outsource  to  a  third  par¬ 
ty  in  a  single  country  run  the  risk  that  a  political  situ¬ 
ation.  such  as  armed  conflict  between  Pakistan  and 
India,  could  shut  down  of&bore  IT  operations.  That’s 
an  important  consideration  for  Delta  Air  Lines  Inc., 
which  wants  offshore  work  scanered  in  wider  areas. 


“We’re  trying  to  manage  the  risk  of  the  political 
environment."  says  Curtis  Robb,  president  and  CEO 
of  Delta  Technology  Inc.,  the  IT  services  arm  of  the 
Atlanta-based  airline.  The  company  has  awarded 
IBM  a  contract  to  provide  offshore  IT  services  be¬ 
cause  IBM  has  16  regional  centers  worldwide. 

More  than  90%  of  outsourced  application  mainte¬ 
nance,  help  desk  and  desktop  maintenance  work  and 
a  limited  amount  of  call  center  and  customer  service 
work  is  currently  being  sent  to  India,  according  to 
Avinash  Vashistha.  a  senior  adviser 
at  NeoIT,  a  San  Ramon.  Calif.-based 
offshore  services  advisory  firm.  That 
figure  excludes  IT  woric  outsourced 
to  Ireland  and  Canada  but  includes 
other  countries  such  as  Israel,  says 
Vashistha. 

Experts  say  outsourcing  to  India 
can  reduce  IT  tabor  costs  by  up  to 
50%.  but  most  customers  underesti¬ 
mate  the  indirect  project  and  pro¬ 
gram  management  costs. 

“When  you  send  your  people  overseas  to  visit 
these  sites  frequently,  your  costs  go  from  S42  an  hour 
to  S8S  an  hour."  says  Steve  Ar^riole,  a  senior  consul¬ 
tant  at  Arlington,  Mass.-based  Cutter  Consortium 
and  a  professor  of  MIS  at  VUlanova  University.  An¬ 
driole’s  calculation  includes  travel  costs  plus  the  cost 
of  lost  productivity  that  occurs  when  a  U.S.  IT  worii- 
er  is  removed  from  bis  daily  tasks  and  sent  overseas 
for  a  few  weeks. 

Those  costs  can  go  even  higher  when  project  re¬ 
quirements  “creep"  or  if  a  development  problem 
emerges  at  an  oflibore  programming  house,  says  An¬ 


driole.  “If  you  have  to  drop  in  10  people  from  the 
states,  and  they  spend  a  month  or  two  there,  guess 
what?  You've  just  erased  most  of  your  cost  savings." 

Another  risk  of  moving  IT  work  offshore  is  the 
potential  loss  of  intellectual  property  and  business- 
process  secrets.  Some  IT  managers  worry  that  off¬ 
shore  outsourcers  will  copy  and  sell  that  knowledge 
or  repackage  it  and  present  it  to  a  competitor. 

"If  we  send  development  of  too  much  of  our  core 
business  out  of  our  control,  what  happens  to  that 
when  our  competitor  goes  to  the  same  third  party 
and  says.  *We  want  to  do  what  they  did?* "  says 
Richard  Nolle,  vice  president  of  systems  at  Reinsur¬ 
ance  Group  of  America  Inc.  in  Chesterfield.  Mo. 

"Tlte  economics  is  driving  me  to  it  (outsourcing],  but 
those  kinds  of  concerns  are  making  me  cautious." 
adds  Nolle,  whose  company  already  sends  applica¬ 
tion  development  work  overseas. 

One  way  to  avoid  these  problems  is  "by  trying  to 
break  up  key  pieces"  of  work  being  sent  of&hore  so 
“no  one  can  easily  assemble  those  pieces."  says  Den¬ 
nis  Roell,  IT  manager  at  Betts  USA  Inc.  in  Florence. 
Ky.,  which  makes  packaging  products  such  as  tooth¬ 
paste  tubes.  "Think  of  it  as  encryption  —  you  want  to 
reassemble  the  message,"  says  RoelL 

—  TTiomos  Hoffman  and  Patrick  Thibodeau 
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And  the 
Winner  Is... 


An  IT  awards 

program 

fosters 

collaboration 

between 

business 

and  IT. 

By  Melissa 
Sotomon 


Kathy  fong  knows  numbers. 
As  a  certified  public  accoun¬ 
tant.  it’s  her  job.  But  technol¬ 
ogy?  She’s  no  rookie,  but  no 
expert,  either.  So  when  she 
received  Southern  California  Edison’s 
(SCE)  first-ever  CIO  Excellent*  in  IT 
Award,  she  was  simultaneously  flat¬ 
tered  and  taken  aback. 

It  was  no  mistake.  Fong  was  one  of 
10  employees  —  including  three  from 
outside  IT  —  to  receive  the  new  annu¬ 
al  award  in  March  hrom  Mahvash  Yaz- 
di.  CIO  at  the  Rosemead.  Calif -based 
energy  utility.  “What’s  unique  about 
our  program  is  we  decided  to  take  it  to 
a  new  level  and  recognize  and  award 
our  interna]  clients,”  says  Yazdi 
Honoring  business  unit  employees 

_  with  IT  awards  may 

seem  counterintuitive, 
but  Yazdi  says  it  helps 
T|i||9||tfA  promote  the  value  of 
I  IHw  RKA  rr/business  partner- 

-  ships  company  wide. 

Such  awards  aren't  something  that 
Sue  Goldberg  has  seen  But  the  presi¬ 
dent  of  Northeast  Training  Group  loc.. 
an  IT  training  consultii^  company  in 
Chestnut  Hill.  Mass.,  says  they’re  a 
great  way  to  promote  collaboration  by 
shining  a  light  on  those  who  live  it. 

“It’s  almost  like  an  Academy  Award,” 
Fong  says.  “It’s  probably  the  closest  I'll 
ever  get  to  that.” 

HowttWorte 

The  names  of  the  award  categories  — 
Conunit  and  Deliver.  Operational  Ex¬ 
cellence  and  Innovation,  and  Technical 
Literacy  —  reflect  the  core  strat^es 
and  principles  of  SCE’s  IT  department. 
Yazdi’s  team  wanted  to  choose  role 
models  who  demonstrate  day-to-day 
actions  in  line  with  those  principles. 

Fong  has  spent  the  past  year  and  a 
half  leading  a  cross-fiinctional  profect 
team  that's  integrating  systems  across 
various  business  units  so  chat  meter 
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readings,  billing  and  ledgers,  for  in¬ 
stance.  are  tied  together  into  a  whole 
system  rather  than  operated  as  inde¬ 
pendent  silos. 

John  Ballance,  director  of  transmis¬ 
sion  and  distribution  engineering,  won 
the  Innovation  award  for  teaming  with 
IT  to  Implement  an  Internet-based 
training  system  that  veteran  engineers 
can  use  to  conduct  lectures  for  junior 
engineers  scattered  around  the  state. 

It  was  wonderful  to  be  honored  by 
the  rr  department,  Ballance  says,  but 
recognizing  IT  employees  1$  just  as  crit¬ 
ical  “A  la^  part  of  the  company  inter¬ 
acts  with  those  people.”  be  says.  “So 
you  start  putting  fa^  to  names  of  peo¬ 
ple  who  are  doing  extraordinary  jobs.” 

Paul  Killins.  winner  of  the  Commit 
and  Deliver  award,  is  one  of  those  IT 


people,  says  YazdL  When  SCE  learned 
it  had  to  take  over  energy  procurement 
from  the  state  by  Jan.  1.  Killins,  SCE’s 
IT  energy  procurement  manager,  led  a 
team  to  get  a  combined  procurement 
and  risk  management  system  in  fast. 
The  system  and  the  business  processes 
supporting  it  had  to  be  able  to  manage 
SCE's  portfolio  of  power-generation 
assets,  its  long-term  energy  contracts 
from  outside  companies  and  its  spot- 
market  options  to  determine  the  best 
source  of  energy  at  any  given  time. 

The  team  conducted  a  waip-speed 
market  study,  hammered  out  a  contract 
to  purchase  Nucleus  energy-trading 
software  from  New  York-based  Cami- 
nus  Corp.  (since  acquired  by  SunGard 
Data  Systems  Inc.)  and  teamed  with 
C^aminus  staff  and  consultants  from 
London-based  PA  Consulting  Group  to 
customize  and  install  the  software. 

At  the  heart  of  the  system  is  a  client/ 
server  application  with  a  robust  infra¬ 
structure  on  which  to  nm  the  systems; 
Windows  2000  servers  and  an  IBM 
Regatta  cluster  on  an  Oracle  database. 

What  could  have  been  a  yearlong 
project  mok  four  months.  “It  was  the 
most  challenging  project  Tve  worited 
on  in  my  entire  life,”  says  Killins. 

RoHng  Out  Your  Own 

If  you  create  an  IT  award  program, 
spend  a  lot  of  time  spreading  the  word 
so  enough  nominations  come  in.  advis¬ 
es  Mariette  KiMAtnhian,  manager  of 
training  and  communication  for  IT  at 
SCE.  The  company’s  newsletter,  cross- 
functional  management  meetings, 
e-mail  and  its  intranet  all  helped  get  the 
word  out,  says  Mary  Fitzpatrick,  man¬ 
ager  of  IT  communications  at  SCE. 

Rtzpatrick  also  suggests  that  awards 
committees  put  careful  thought  into 
who  gets  recognized  and  in  what  way. 
For  instance,  would  finalists  be  embar¬ 
rassed  by  being  publicly  named,  since 
they  didn’t  win?  And  what's  an  appro¬ 
priate  prize  for  the  winners?  SCE 
asked  the  finalists’  managers  to  rect^- 
nize  tiiera  within  their  units,  and  the 
winners  received  SL500  in  cash,  a  crys¬ 
tal  desktop  award  and  companywide 
recognition,  says  ntzpatrkrk. 

But  the  user-award  piece  isn’t  for 
everyone,  says  Keshishian.  If  it  seems 
forced,  it  won’t  woric  If  you  have  a 
poor  relationship  with  your  users,  an 
award  isn't  going  to  magically  make 
things  better.  You  need  to  have  a  good 
relation^up  first,  and  then  the  award 
will  seem  genuine.  I 


Solomon  is  a  freelance  journalist 
in  New  York.  Contact  her  at 
meUssttSolomon7^totmaiLcom. 
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In  1999,  the  Wharton  School  of  the  University  of 
Pennsylvania  launched  Knowledge^ Wharton 
(httpy/knowledge.wharton.upeiia.edu>.  an  online 
research  and  business  analysis  foumal  designed  to 
go  head'tO'head  with  the  Harvard  Btisiness  Review 
by  offering  business  insights  and  research. 

Now.  Robert  L  Mttebtaedt.  vice  dean  and  director 
of  the  Aresty  Institute  of  Executive  Education  at 
the  Wharton  School  and  Muiiiil  Pandye.  editor 
o/Kiiowiedge@Whartoa  have  written  a  book. 
Knowiedge(|)Whartoik:  On  Building  Corporate 
Value  (/ohn  Wiley  &  Sons  /nc..  2003)  takes  a  look  at 
the  ups  and  downs  o/e-business.  They  recently  spoke 
with  Kathleen  Meiymuica  about  the  lessons  learned 
so /or  about  Web  business  strategies. 

So.  haa  die  IntwiMt  changad  WMylbing? 

MTTCLSnEDT:  It  didn’t  change  everything  in  the  way 
people  anticipated,  but  it  did  (show]  that  bricks-and* 
mortar  businesses  can  differentiate  themselves  if 
they  really  learn  to  use  the  Internet  —  and  IT  as  a 


whole  —  because  the  principles  are  the  same,  and 
the  Internet  is  nothing  more  than  a  very  easily  acces¬ 
sible  platform. 

In  the  book,  you  talk  dMNit  somo  important  consequencss  of 
the  bitwnet  Tel  me  about  the  •1ntetyatk)ii  effect” 
MfTTRSTAEDT;  It’s  the  ability  to  apply  20- 
year-oid  IT  principles  in  a  ubiquitous  fashion 
so  that  everybody  has  access,  and  you  get 
your  customer  to  do  your  work  for  you 
across  a  whole  spectrum  of  things. 


efficiencies  from  technology.  While  Webvan  was  fail¬ 
ing  and  destroying  S1.2  billion  of  capital,  a  company 
called  Tesco  in  the  U.K.  was  using  their  existing  in¬ 
frastructure.  using  their  stores  as  picking  points, 
puttii^  limits  on  [deliveriesl.  And  as  an  incremental 
activity,  it  was  profitable.  It  was  not  prof¬ 
itable  as  a  stand-alone  activity  in  the  way 
Webvan  tried  to  pursue  it  The  economic 
model  didn’t  work.  So  the  model  matters. 


Cm  you  gfvo  an  example? 

TAEDT:  US  Airways  has  given  you  the 
to  print  your  boarding  pass  before  you 
leave  home  and  skip  all  the  check-in  lines.  They 
haven’t  changed  the  hmdamental  chain  of  activiiies. 
but  they've  pushed  a  piece  of  that  work  out,  and  they 
get  the  customer  to  do  it  for  them.  The  technology 
has  integrated  the  woik  in  a  different  way:  diffused  it 

How  does  the  Internet  add  value  to  an  onpmization? 

PANIIYA  fTnowledgetSWharton  itself  is  an  ex¬ 
ample.  It  has  taken  academic  research,  which 
was  primarily  distributed  through  academic 
journals  meant  for  specialists.  Using  the 
Web.  we  set  up  a  multilayered  Web  site 
vi4ere  you  can  go  from  a  one-paragraph 
summary  of  a  research  paper,  click  through 
to  a  plain-English  article  spelling  out  the  im¬ 
plications  of  that  research,  click  through  to  a 
PDF  of  the  paper  itself  and  look  at  related 
Web  links.  The  Internet  allows  you  do  something 
that  is  Impiossible  in  print:  that  is,  explore  this  topic 
at  four  different  levels  of  depth.  The  impact  that  has 
in  terms  of  Wharton’s  ability  to  relate  academic  re¬ 
search  to  management  practice  is  enormous. 

Vniy  do  campMlu  tel  at  using  11m  InterTWl? 

MCTTELSTAQIT:  In  the  book,  we  talk  about  the  story 
of  Webvan  vs.  other  online  grocers.  We  predicted 
Webvan  would  never  work  [because}  they  decided  to 
reinvent  the  whole  system.  They  started  from  scratch 
and  ignored  the  entire  infrastructtire  and  in  the  proc¬ 
ess  took  on  enormous  debt,  which  there  was  no  way 
to  ever  work  off  in  a  low-marg^  business,  even  with 


i  ^ 

MirrasutDT 


So  Far 

Two  Wharton  School  authors  talk 
about  mnners,  losers  and  brain  arbitrage. 


¥ftMtar«iorrwofthBotfMrmalorrislBin»-busi- 
rwss,  Mid  trow  can  cornpanles  work  against  thwn? 
PANDYA:  Quite  a  few  of  the  errors  were  driven 
by  not  looking  at  the  business  itself  but  be¬ 
ing  swayed  by  fmancial  considerations, 

[like]  the  stock  valuations,  that  spinning  out  a  sepa¬ 
rate  Internet  division  could  bring  about.  Companies 
that  looked  at  the  business  and  saw  how  using  the  In¬ 
ternet  and  other  forms  of  IT  could  enhance  the  busi¬ 
ness  —  those  were  able  to  drive  more  value  creation. 
MmOSTAEDT:  There  were  also  competitive  risks.  If 
what  you  do  is  easily  imitated,  and  you  don't  have 

anything  that  locks  in  your  customer  in  some 
way,  you  run  the  risk  of  simply  being  copied 
and  made  irrelevant. 

Most  of  wdial  wtVe  boon  taldng  about  has  bean 
buskwas-to-ooRsunwr.  Whaf s  tha  stata  of  B2B? 
MflTELSTAEDT:  The  name  has  gone  out  of 
fashion,  but  that’s  where  the  bigger  Impact 
really  is.  Wal-Mart  has  an  unbelievable  com¬ 
puterized  supply  chain  and  inventory  man¬ 
agement  system  that  goes  over  the  Internet,  but  the 
Internet  didn't  make  that  happen.  The  Internet 
makes  it  easier  and  cheaper . . .  and  for  smaller  busi¬ 
nesses  to  duplicate  functions,  [like]  automatic  order¬ 
ing.  that  enable  them  to  compete  with  bigger  compa¬ 
nies  in  some  cases. 

PANOYA:  One  area  in  business-to-business  I  find  fasci¬ 
nating  is  the  way  the  Internet  and  IT  are  making  it 
possible  to  outsource  work  across  borders.  You  have 
companies  like  Amazon  or  Dell  that  have  set  up  cus¬ 
tomer  contact  centers  in  India  and  Singapore,  and 
these  are  very  often  operated  by  different  companies 
than  the  parent.  This  allows  you  to  integrate  the  op¬ 
erations  of  a  company  in  the  West  with  a  low-cost 
provider  in  another  country  and  get  the  benefit  of 
that  cost  differentiaL  This  has  been  going  on  in 
things  like  software  development,  but  increasingly . . . 
it’s  all  kinds  of  services  that  require  educated  people 
to  interact  with  technology.  The  term  Tve  heard 
for  it  is  “brain  arbitrage,”  because  you’re  moving 
woik  to  where  it  can  be  performed  most  effectively. 

What  are  thalaoionscomganlw  should  be  taking  awiy  front 
the  whoia  o-buebieas  aiportaneo? 

MFTT&STAEnr:  You  can't  violate  the  laws  of  econom¬ 
ics.  And  there’s  no  such  thing  as  a  sustainable  com¬ 
petitive  advantage.  Technology  can  give  you  a  tem¬ 
porary  advantage  while  you  figure  out  wiut  the  next 
thing  after  that  is  going  to  be. 

PANOYA:  The  Internet  changes  a  lot.  but  you  have  to 
woik  pretty  hard  to  discover  what  it  changes,  and  if 
you  don't  recognize  that,  then  you  pay  the  price  for  it  b 


Melymuka  is  a  Computerworld  contributing  writer. 
Contact  her  at  kmelymuka@yahoo.com. 
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Rnandal  Outsourcer 
Creditek  Names  CIO 

CrsdRsh  LLC.  a  leadng  provider  of 
revenue  cyde  businees-process 
outsourcing  in  Panippany.  lij.. 
this  rrwnlh  appointed  Bruce  Blair 
as  senior  vice  presidant  and  CX). 
Blair  wl  lead  Credttek’s  technoio- 
gy  team  in  manegino  al  intemal 
and  ertsma)  systems,  indudno 
the  deveiopment,  launch  and  im* 
piamentathm  of  advanced  dent 
business  intelgencc  and  reporting 
systems. 

Ettair  was  pievioifify  president  of 
tseiin.  NJ.  based  OovX^  a  pro¬ 
vider  of  software  used  by  munid* 
paKes  to  automate  bach-office 
funcdons;  dO  at  Verticainet  Soft¬ 
ware  Lie.  a  Mafvem.  Pa.-hased 
provider  of  coliberitive  supply 
chdB  soAwira;  and  a  first  vice 
presidant  at  UsTTfl  Uodi  A  Co. 
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DONAH)  FINLEY  ■  PEER  TO  PEERS 

Magna  Cum 
Unemployed 


WEJEN  I  CEIANGED  my  college  major 
from  mechanical  engineering  to  com¬ 
puter  science  in  1998, 1  had  few  res¬ 
ervations  about  making  the  switch. 
After  all,  the  salaries  of  the  two  pro¬ 
fessions  were  comparable,  and  IT  seemed  to  be  thriving. 


Unfortunately,  my  gradu¬ 
ation  in  December  2000 
roughly  coincided  with  the 
crash  of  the  dot-coms  and  a 
dip  in  the  economy,  which 
made  job  searching  much 
more  difificult. 

No  fear.  I  thought.  1  have 
an  academic  record  that 
will  impress  employers  and 
help  me  stand  out  among 
job  candidates,  f  had  grad¬ 
uated  magna  cum  laude. 
made  the  dean's  list  multi¬ 
ple  times,  won  awards  for 
academic  excellence  —  and 
no  one  seemed  to  care.  The  liability  of 
my  inexperience  seemed  to  outweigh 
any  advantage  that  a  solid  academic 
background  provided. 

The  slowing  of  the  economy  has  left 
many  experienced  IT  professionals 
looking  for  jobs,  and  companies  have 
their  choice  of  workers  with  proven 
track  records.  This  means  decreased 
opportunities  for  entry-level  program¬ 
mers  with  resumes  heavy  on  skills  and 
education  and  light  on  job  history. 

Illustrating  this  fact  are  the  employ¬ 
ers  and  headhunters  who  call  to  ex¬ 
press  interest  in  the  skills  I  have  listed 
on  my  r^umc  online.  One  of  their 
first  questions  is.  “How’  much  experi¬ 
ence  do  you  have?"  Answerii^  this 
potentially  damning  question  with 
honesty  usually  ensures  no  future 
correspondence. 

n>e  lack  of  opportunities  made  me 
increasingly  worried,  and  in  Septem¬ 
ber  2001. 1  committed  an  act  of  des¬ 


peration.  1  had  been  job 
searching  by  myself  and 
through  employment  agen¬ 
cies  for  almost  eight 
months  when  I  accepted  a 
knowledge  management 
position  at  a  government 
agency  in  Washington, 
where  living  expenses  are 
high  and  the  pay  is  low.  The 
job  was  part  intem/part 
employee  and  kept  me  on 
the  periphery  of  working 
with  IT  (checking  e-mail 
was  my  sole  interaction 
with  computers).  After  six 
months  in  the  program.  1  decided  to 
return  home  and  earnestly  look  for  op¬ 
portunities  in  software  development, 
the  area  of  most  interest  to  me. 

Searching  online  job  sites  yielded 
few  possibilities  for  someone  with  my 
level  of  experience:  I  fared  better  by 
contactii^  hiring  managers  directly. 
After  three  months  of  research  and 
many  phone  calls  to  managers.  I  land¬ 
ed  a  job  as  a  Web  developer  at  a  strug¬ 
gling  e-teaming  company.  But  after 
being  told  almost  ever>'  week  for  six 
months  that  the  office  might  not  be 
open  the  following  week.  I  was  search¬ 
ing  for  another  job  by  December  2002. 

During  this  time.  I  had  also  enrolled 
in  a  graduate  program,  thinking  that 
another  degree  might  help  me  find  a 
job.  However,  since  starting  the  pro¬ 
gram,  1  have  considered  the  possibility 
that  even  this  move  may  not  help,  be¬ 
cause  there  are  factors  affectii^  the 
job  market  that  are  beyond  my  control. 


For  instance,  the  controversial  H-IB 
and  L-1  visa  programs  exacerbate  the 
situation  by  importing  foreign  FT 
workers,  placing  them  in  direct  com¬ 
petition  with  American  workers  for 
jobs.  This,  by  far,  is  the  most  disturb¬ 
ing  discovery  to  me.  Abuse  of  these 
programs  is  obvious,  and  their  neces¬ 
sity  escapes  me. 

My  heart  sinks  when  1  read  stories 
about  IT  workers  such  as  those  at 
Siemens  in  Lake  Mary,  Fla.,  who  were 
replaced  by  L-l  visa  workers  and  made 
to  train  their  replacements.  Tlte  mat¬ 
ter  Is  compounded  by  the  trend  of 
sending  IT  jobs  offshore,  as  summed 
up  in  the  ominous  proclamation  of 
Ann  Livermore,  HP's  services  chief, 
when  she  stated.  "We're  trying  to 
move  everything  we  can  offshore,” 
in  an  interview  in  a  December  2002 
Forbes  article.  Taking  these  things  into 
account,  I  am  convinced  that  the  IT  in¬ 
dustry  is  being  undermined. 

This  point  was  dri^)en  home  as  I  sat 
with  the  head  of  the  computer  science 
department  at  my  university  and  we 
spoke  about  the  scarcity  of  IT  jobs.  "1 
shouldn’t  be  sayii^  this,  because  i  am 
from  India,”  he  said,  "but  India  has 
really  prospered  through  this."  I  told 
him  that  I  was  aware  of  all  the  out¬ 
sourcing,  but  he  explained  that  compa¬ 
nies  such  as  Microsoft  were  going  a 
step  further  and  setting  up  shop  in  In¬ 
dia.  Then  he  reassured  me  that  cre¬ 
ative  IT  jobs  such  as  research  would 
be  safe  in  the  U.S..  but  he  corrected 
himself  midstream  by  saying  that  GE 
was  in  the  process  of  constructing  a 
research  center  in  India. 

Finally,  he  punctuated  his  remarks 
by  saying.  “It’s  been  a  tough  three 
years."  an  understatement  with  which 
1  emphatically  agree.  I 


WANT  OW  OPINION? 
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DONALD  FINLEY  ■  PEER  TO  PEERS 

Magna  Cum 
Unemployed 


WHEN  I  CHANGED  my  college  major 
from  mechanical  engineering  to  com¬ 
puter  science  in  1998, 1  had  few  res¬ 
ervations  about  making  the  switch. 
After  all,  the  salaries  of  the  two  pro¬ 
fessions  were  comparable,  and  IT  seemed  to  be  thriving. 


Unfortunately,  my  gradu¬ 
ation  in  December  2000 
roughly  coincided  with  the 
crash  of  the  dot-coms  and  a 
dip  in  the  economy,  which 
made  lob  searching  much 
more  difficult 

No  fear,  I  thought  I  have 
an  academic  record  that 
will  impress  employers  and 
help  me  stand  out  among 
job  candidates.  I  had  grad¬ 
uated  magna  cum  laude, 
made  the  dean's  list  multi- 
pte  times,  won  awards  for 
academic  excellence  —  and 
no  one  seemed  to  care.  The  liability  of 
my  inexperience  seemed  to  outweigh 
any  advantage  that  a  solid  academic 
background  provided. 

The  slowing  of  the  economy  has  left 
many  experienced  IT  professionals 
looking  for  jobs,  and  companies  have 
their  choice  of  workers  with  proven 
track  records.  This  means  decreased 
opportunities  for  entry-level  program¬ 
mers  with  resume  heavy  on  skills  and 
education  and  light  on  job  history. 

lUustrating  this  &ct  are  the  employ¬ 
ers  and  headhunters  who  call  to  ex¬ 
press  interest  in  the  skills  I  have  listed 
on  my  r^ume  online.  One  of  their 
first  questions  is.  "How  much  experi¬ 
ence  do  you  have?"  Answering  (his 
pK>tentially  damning  question  with 
honesty  usually  ensures  no  future 
correspondence. 

The  lack  of  opportunities  made  me 
increasingly  worried,  and  in  Septem¬ 
ber  2001, 1  committed  an  act  of  des¬ 


peration.  I  had  been  ^b 
searchit^  by  myself  and 
through  employment  agen¬ 
cies  for  almost  eight 
months  when  I  accepted  a 
knowledge  management 
position  at  a  government 
agency  in  Washington, 
where  living  expenses  are 
high  and  the  pay  is  low.  The 
job  was  part  intem/part 
employee  and  kept  me  on 
the  periphery  of  working 
with  IT  (checking  e-mail 
was  my  sole  interaction 
with  computers).  After  six 
months  in  the  program.  I  decided  to 
return  home  and  earnestly  look  for  op¬ 
portunities  in  software  development, 
the  area  of  most  interest  to  me. 

Searching  online  job  sites  yielded 
few  possibilities  for  someone  with  my 
level  of  experience;  I  fared  better  by 
contacting  hiring  mana^rs  directly. 
After  three  months  of  research  and 
many  phone  calls  to  managers,  I  land¬ 
ed  a  job  as  a  Web  developer  at  a  strug¬ 
gling  e-ieaming  company.  But  after 
being  told  almost  every  week  for  six 
months  that  the  office  might  not  be 
open  the  following  week.  I  was  search¬ 
ing  for  another  job  by  December  2002. 

During  this  time.  I  had  also  enrolled 
in  a  graduate  prc^am.  thinking  that 
another  degree  might  help  me  find  a 
job.  However,  since  starting  the  pro¬ 
gram,  I  have  considered  the  possibility 
that  even  this  move  may  not  help,  be¬ 
cause  there  are  factors  affecting  the 
job  market  that  are  beyond  my  control. 


For  instance,  the  controversial  H-IB 
and  L-1  visa  programs  exacerbate  the 
situation  by  importing  foreign  IT 
workers,  placii^  them  in  direct  com¬ 
petition  with  American  workers  for 
j(^s.  This,  by  far.  is  the  most  disturb¬ 
ing  discovery  to  me.  Abuse  of  these 
programs  is  obvious,  and  their  neces¬ 
sity  escapes  me. 

My  heart  sinks  when  I  read  stories 
about  IT  workers  such  as  those  at 
Siemens  in  Lake  Mary.  Fla.,  who  were 
repbced  by  L-1  visa  workers  and  made 
to  train  their  replacements.  The  mat¬ 
ter  is  compounded  by  the  trend  of 
sending  IT  jobs  ofishore,  as  summed 
up  in  the  ominous  proclamation  of 
Ann  Uvermore,  HP's  services  chief, 
when  she  stated,  "We’re  trying  to 
move  everything  we  can  ofl&hore," 
in  an  interview  in  a  December  2002 
Forbes  article.  Taking  these  things  into 
account.  I  am  convinced  that  the  IT  in¬ 
dustry  is  being  undermined. 

This  point  was  driven  home  as  I  sat 
with  the  bead  of  the  cmn^uter  science 
department  at  my  university  and  we 
spoke  about  the  scarcity  of  IT  jobs.  "1 
shouldn’t  be  saying  this,  because  I  am 
from  India,”  be  said,  "but  India  has 
really  prospered  through  this."  I  told 
him  that  I  was  aware  of  all  the  out¬ 
sourcing,  but  he  explained  that  compa¬ 
nies  such  as  Microsoft  were  going  a 
step  further  and  setting  up  shop  in  In¬ 
dia.  Then  be  reassured  me  that  cre¬ 
ative  IT  jobs  such  as  research  would 
be  safe  in  the  US...  but  he  corrected 
himself  midstream  by  saying  that  GE 
was  in  the  process  of  constructing  a 
research  center  in  India. 

Finally,  he  punctuated  his  remarks 
by  saying.  “It’s  been  a  tough  three 
years,”  an  understatement  with  which 
I  emphatically  agree.  I 
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Tyson  Integrates  IT,  Cuts  Costs  After  Merger 

BY  MARC  L.  soHoiHi  budget  at  Tyson  Foods  Inc^  de-  fort  involved  integrating  the 

A  massive  IT  consolidation  and  spite  its  considerable  complex*  IT  operations  of  Springdale, 
integration  project  phase  was  ity  and  demanding  schedule.  Ark.-based  TV^on  and  17  inde* 

wrapped  up  on  time  and  on  The  multimillion-doUar  ef-  pendent  companies  of  the 


Foodbrands  America  Inc.  unit 
of  meatpacking  conglomerate 
IBP  Inc.  Tyson  pur- 
chased  IBP  in  Septem- 
ber  2001. 

The  integration  was  fm* 
ished  in  August,  says  Tyson’s 


new  CIO,  Jeri  Dunn.  In  the 
process,  Gary  Cooper,  the  for- 

■  mer  CIO  and  head 
of  the  project,  be¬ 
came  chief  technol¬ 
ogy  officer.  In  his  new  role. 
Cooper  oversees  all  servers, 
databases  and  other  IT-related 
assets  for  12,000  end  users  at 
the  company. 

Cooper  say^  that  as  part  of 
the  makeover.  Tyson  changed 
its  e-mail  infi^tructure  to 
Microsoft  Exchange  software, 
eliminating  Lotus  Notes  seats. 
It  also  extended  its  WorldCom 
ffame-relay  network  to  the  IBP 
network  and  now  runs  video- 
conferences  over  those  lines. 

lyson  inherited  19  systems 
in  the  merger  and  has  reduced 
that  number  to  two.  The  next 
step  is  to  get  rid  of  one  more, 
says  Cooper,  noting  there  are 
also  signijficantly  fewer  AS/400 
applications  running  now. 

There  is  still  woik  under 
way  to  move  the  multiple 
back-end  systems,  many  of 
them  homegrown,  to  an  SAP 
ERP  backbone.  SAP  software 
already  handles  payroll,  gener¬ 
al  ledger,  purchasing  and  ac- 
counts-payable  functions. 
Tyson  is  also  rolling  out  sup¬ 
ply  chain  management  soft¬ 
ware  from  Manugistics  Inc. 
for  its  chicken  businesses. 

Streamlining  has  reduced 
head  count  and  maintenance 
costs.  Dunn  says  this  has  cut 
hundreds  of  thousands  of 
dollars  in  IT-related  costs. 

The  reductions  were  not 
pleasant,”  she  says,  but  they 
were  necessary. 

Tyson  is  ev^uating  business 
processes  and  IT  support  to 
see  what  areas  are  unique  or 
add  value  and  can  be  retained 
or  standardized.  It’s  also  plan- 
nil^  the  consolidation  of  the 
fresh  meats  division  of  IBP. 

Cooper  is  hesitant  to  say 
whether  lessons  were  learned 
from  the  project.  “We’ve  ac¬ 
quired  so  many  companies 
and  integrated  so  many  sys¬ 
tems,”  he  says.  “It’s  a  bag  of 
tricks  you  use,  and  there  are 
not  a  lot  of  ‘aha’s.  It’s  always 
hard  work.”  I 
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Call  for  Nominations 


Is  youVarganization  making  the  most 
of  technology  on  the  cutting  edge? 

We  want  to  hear  about  it! 


Computerworld's  Innovative  Technology  Awards  2003  will  honor 
the  ind^ry's  top  vendors  that  are  helping  their  customers 
achieve^siness  value  through  technology. 

Tell  uiabout  your  successful  technology  application 
and  (Wminate  your  vendor  online  at 

w\«|w.computerworld.com/research/innovativetech 


ABOUT  THE  AWARDS 

.  For  the  second  year,  these  customer  choice  awards  will 
/  spotlight  leading  vendors  and  showcase  how  their  customers 
are  using  technology  to  solve  business  problems  in  real-world 
settings.  Nominations  from  IT  customers  will  be  collected 
from  now  through  May  12,  2003.  Nominated  vendors  will  be 
surveyed  about  their  technology  applications.  A  panel  of 
outside  experts  and  Computerworld  editors  will  review  the 
surveys  and  choose  the  winners. 


Survey  results  and  stories  that  offer  practical  advice 
from  IT  leaders  using  these  technologies  will  be 
published  in  the  September  22,  2003,  issue, 
as  well  as  online  at  Computerworld.com. 
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TECHNOUNiY 


AWARDS 


Need  More 
Information? 


Contact  lnnovativeTech@computerworld.com. 

But  hurry!  The  nomination  deadline  is  May  12,  2003. 
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Advertising  Supplement 


IT  Careers:  Industry  Drives 
Online  Degree  Trends 


Mere  than  20.000  people  in  the  United  Slates 
are  firtding  a  new  way  to  quickly  morph 
current  skills  into  emerging  |ob  require¬ 
ments.  Colleges  ai>d  universities  are  using 
onlirte  coursewerk  to  stay  in  step  with  rapidly  developing 
technologies,  pushing  online  curriculum  that  in  the  past 
would  have  taken  years  to  develop.  From  data  mining  to 
infrastructure  security  and  systems  networking,  the  new 
degree  programs  are  allowing  IT  professionals  to  transferm 
with  the  industry. 

These  aren't  diploma  mill  programs,  either  Universities 
ranging  from  Stanford  University  to  Massachusetts  Irtstilute 
of  Technolofy,  from  lesion  University  to  femes  Madison 


University  and  the  University  of  Missouri-Rolla.  are 
enrolling  students  for  classes  conducted  via  the  Internet. 
‘‘Traditionally,  residential  universities  and  colleges  have 
been  slower  In  meeting  emerging  technology  needs.*  says 
Vicky  Phillips,  author  of  lest  Distance  Learning  Graduate 
Schoo/s-Technefogy  2003.  "We’re  noticing  that  schools  are 
choosing  to  pul  newer  concentrations,  such  as  cyber 
security,  online  to  be  market  responsive.* 

Tanya  Zlateva.  chairman  of  the  online  computer  science 
graduate  program  at  Boston  University,  says  demand  for 
online  courses  follows  the  IT  industry  trends.  *We  offer  a 
blended  program  of  four  face-to-face  meetings  during  the 
semester  and  web-based  learning.*  Zlateva  says.  The  uni¬ 
versity  added  an  IT  security  focus  to  its  graduate  programs 
this  year.  ar>d  will  offer  a  full  concentration  IT  security 
program  beginning  Fall  2003.  *H's  relatively  easy  to  pul 
material  online.*  she  adds.  *Bul  by  adding  streaming  video 
and  interaction,  access  to  lab  work  onlirte  and  other  facets, 
the  program  has  greater  value  * 

However,  online  study  isn't  for  everyone,  cautions 
Phillips.  Top  on  the  list  to  consider  your  own  learning  style. 
If  you've  taken  online.  CD-ROM  or  correspondence  courses 
in  the  past,  you  know  whether  you're  up  to  it  'You  need 
good  lime  management  skills  and  self-motivation.’  says 
Phillips.  *lt's  a  large  psychological  factor.*  Phillips'  research 
indicates  retention  rates  for  online  students  are  slightly 
-  though  not  significantly-  lower  than  those  In  on-campus 
programs. 


Secondly,  look  for  accreditation  by  the  regional  associa¬ 
tion  accrediting  schools  and  colleges  for  the  main  campus, 
as  well  as  any  other  accreditations,  such  as  those  for  busi¬ 
ness.  engineering  or  techrtology.  If  the  accreditation  isn't 
from  a  group  belonging  to  the  Council  for  Higher  Educatioi 
Accreditation  (chea.org),  you  may  want  to  reconsider 
Then  fir>d  out  how  much  you'll  interact  with  faculty  and 
other  students.  You  may  need  access  to  a  satellite  link-up 
or  to  travel  to  campus.  Usually  students  in  an  online  class 
interact  via  bulletin  board  or  through  conference  calls.  Tht 
more  you  interact  with  students  and  faculty,  the  more  likel 
you'll  stay  in  the  program. 

Financial  assistartce  is  another  factor.  Not  all  online  pro¬ 
grams  qualify  for  low-interest  student  loans,  nor  do  all  cor 
porate  reimbursement  programs  apply.  Public  universities 
frequently  apply  in-s1ale  lultion/out-of -stale  tuition  rales 
|u$l  as  they  would  for  resident  students.  Some,  however, 
have  a  single  distance-learning  tuition  structure.  In  terms  < 
cost,  compare  overall  tuition  costs,  the  value  of  a  national 
brand  name  degree,  and  the  cost  of  access  -  visits  to 
campus  or  satellite  links,  for  example. 

‘We  haven't  yet  seen  the  peak  in  enrollment  for  online 
degree  programs."  predicts  Phillips. ‘With  learning,  once  i 
not  enough.* 
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Health  Net 


nology  that  will  be  used  to 
support  the  network- 

Thc  eHcalth  network  will 
capture  patient  data  collected 
by  hospitals  —  especially  in 
emergency  rooms  —  and  auto¬ 
matically  distribute  informa¬ 
tion  to  health  agencies.  The 
projca  was  in  the  works  prior 
to  the  recent  outbreak  of 
SARS,  or  severe  acute  respira¬ 
tory  syndrome,  and  the  net¬ 
work  isn't  being  developed 
specifically  to  gather  SARS- 
rclated  data. 

But  Dr.  Russell  Ricci,  gener¬ 
al  manager  of  IBM's  global 
health  care  division,  said  auto¬ 
mated  syndromic  surveillance 
technology  that  can  collect  in- 


Contimied/rom  page  I 

Strike  Threat 

the  deal  with  HP  was  an- 
nouTM^d.  the  IBOA  served 
Bank  of  Ireland  with  two 
weeks’  notice  of  possible  “in¬ 
dustrial  action."  which  in¬ 
cludes  the  threat  of  an  all-out 
strike.  That  followed  a  vote  in 
which  B3%  of  the  union  mem¬ 
bers  who  took  part  sided  with 
the  plan  to  send  the  ttotice  to 
the  bank,  according  to  a  post¬ 
ing  oa  the  IBOA’s  WH)  site. 

Calls  to  IBOA  general  secre¬ 
tary  Larry  Broderick  weren't 
returned  by  press  time,  and  it 
wasn't  clear  how  many  bank 
employees  actually  participat¬ 
ed  in  the  vote.  But  on  the 
union’s  Web  site,  Broderick  is 
quoted  as  saying  that  the  vote 
"testines  to  the  huge  concern 
and  uiuxrrtainty"  about  the 
proposed  outsourcing  deal 
among  IT  staffers  at  Bank  of 
Ireland. 

The  IBOA’s  top  priority  is  to 
prevent  the  bank  from  pro¬ 
ceeding  with  the  outsourcing 
arrai^emeni  until  there  arc 
“ftill  negotiations  and  agree¬ 
ment"  with  the  union.  Broder¬ 
ick  said.  Otherwise.  IT  work- 


formation  about  symptoms 
like  the  high  fever  and  respira¬ 
tory'  problems  that  arc  com¬ 
mon  with  SARS  will  be  a  key 
component  of  the  three- 
month  test. 

In  addition  to  emergency 
room  data,  syndromic  surveil¬ 
lance  systems  can  gather  in¬ 
formation  about  sales  of  over- 
the-counter  medicines.  Ricci 
said.  However,  that  capability 
won’t  be  part  of  the  network 
test,  be  added. 

The  pilot  project  will  dem¬ 
onstrate  how  to  apply  sophis¬ 
ticated  data  mining  techniques 
(o  the  health  care  industry  and 
how  to  tie  together  stovepiped 
hospital  information  systems 
using  commercial  middleware 
tools,  Ricci  said. 

TTie  test  version  of  the  net¬ 
work  will  support  electronic 
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ers  at  the  bank  “will  not  be  co¬ 
operating  with  any  proposal  to 
outsource,"  be  warned. 

Anne  Mathews,  a  spt^es- 
woman  for  Bank  of  Ireland, 
said  bank  offictab  “couldn't 
have  meaningful  discu.ssions" 
with  the  IBOA  until  a  preferred 
outsourcing  vendor  had  been 
chosen.  Mathews  added  that 
the  contract  negotiations  with 
HP  are  expected  to  take  four  to 
six  montlK  to  complete.  The 
union  will  have  a  voice  in  those 


H  Maybe  eHealth 
can. ..dem¬ 
onstrate  that  it  is 
possible  [to  buHd 
such  a  network]. 


DR.  SETH  FOLOy,  HEALTH 
COMMISSIONER.  CITY  OF  MILWAUKEE 

data  exchange  standards  that 
were  mandated  by  the  Depart¬ 
ment  of  Health  and  Human 
Services  in  March.  Marchibro- 
da  said.  She  added  that  cHealth 
officials  hope  that  the  pilot 
project  will  lead  to  the  devel¬ 
opment  of  a  full  network,  but 
that  will  depend  on  additional 
funding.  EHealth  is  building 
the  lest  network  in  a  partner¬ 
ship  with  the  New  York-based 
Markle  Foundation. 


discussions,  she  said,  declining 
to  comment  about  what  tran¬ 
spired  during  last  week’s  talks 
with  the  IBOA. 

Growing  Unrest 

In  an  April  18  research  note 
about  the  strike  threat.  Gart¬ 
ner  Inc.  analyst  Diane  Morello 
wrote  that  she  expects  to  sec 
more  actions  by  IT  workers  to 
protest  “what  they  perceive  as 
unsettled  employment  situa¬ 
tions"  as  a  result  of  job  cuts 
and  an  increase  in  the  amount 
of  IT  work  being  outsourced, 
sent  ofbhore  or  farmed  out 
to  contract  and  temporary 
workers. 

Morello  said  IT  managers 
need  to  anticipate  potential 
worker  backlash  against  out- 
sourcif^  deals,  even  if  their  IT 
departments  aren't  unionized. 
Companies  that  don't  do  so 
risk  work  slowdowns  or  other 
productivity  drags,  she  said. 
The  important  thing  is  to 
communicate  honestly  and 
respect  your  employees,” 
Morello  added  (see  box). 

That’s  precisely  what  Daim- 
lerChrysler  AG  executives  did 
before  the  automaker  last  year 
began  outsourcing  mainte¬ 
nance  of  about  150  applica- 


Ricci  said  he  couldn't  quan¬ 
tify  the  cost  of  implementing  a 
full  nationwide  network.  ~1 
would  not  even  know  where 
to  put  the  decimal  point."  he 
said,  adding  that  federal  back¬ 
ing  would  likely  be  needed. 

Dr.  Seth  Fotdy.  health  com¬ 
missioner  for  the  city  of  Mil¬ 
waukee.  said  he  hopes  that 
cHealth’s  efforts  will  lead  to 
the  eventual  development  of  a 
system  that  would  make  it  eas¬ 
ier  to  exchange  syndromic 
surveillance  data.  This  is  not 
going  to  be  easy,  but  maybe 
cHealth  can  build  a  business 
case  and  demonstrate  that  it  is 
possible,"  Fbldy  said. 

He  noted  that  the  surx’eil- 
lancc  data  can  alert  doctors 
and  public  health  oflUcials  to 
potential  outbreaks  of  epi¬ 
demics  like  SARS  more  quickl)' 


lions  that  support  its  engi¬ 
neering.  sales  and  manufactur¬ 
ing  operations  to  offshore  ser¬ 
vices  Arms  Infosys  Technolo¬ 
gies  Ltd.  and  Syntel  Inc.,  both 
I  based  in  India. 

DaimlerChryslcr  held  a  se¬ 
ries  of  “toum  hair  and  break¬ 
fast  meetings  at  its  facility  in 
Auburn  Hills.  Mich.,  in  an  ef¬ 
fort  to  do  “whatever  it  took  to 
answer  questions  and  con¬ 
cerns"  about  the  outsourcing 
plan,  said  CIO  Sue  Unger. 

Unger  said  the  meetings 
helped  her  and  other  IT  man¬ 
agers  convey  to  the  )00  inter¬ 
nal  suffers  and  on-siie  con¬ 
tractors  who  had  maintained 
the  applications  being  out¬ 
sourced  that  they  would  be 
redeployed  to  work  on  more 
strategic  cAons.  such  as  Web 
services  and  portal  software 
projects. 

The  outsourcing  program 
has  been  “very  successful" 
Unger  said,  adding  that  it  has 
helped  DaimlerChrysler  cut 
its  IT  costs  and  provided  the 
affected  workers  '^vith  a 
brand-new  career."  I 
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than  is  possible  with  tradition¬ 
al.  diagnosis-based  systems, 
which  often  require  lab  tests 
that  lake  days  to  complete. 
Syndromic  systems  provide 
more  immediate  information 
about  patterns  of  symptoms 
among  patients.  Foid>-  said.  I 


Software  Helps 
CityOfiiciak 
Track  Outbreaks 

MKnaukee'simndpaigoYcm- 
menl  uses  an  emergency  room 
managernert  appbeation  that 
ndudes  a  Web-baaed  syn¬ 
dromic  surveiance  syslOT  lor 
spotting  potential  eptcfemics. 
said  Or.  Seth  Foldy.  thedty's 
heetti  commia9oner. 

The  emergency  room  appit- 
calton  was  developed  by  (he 
Frontlnes  o(  Medicine  Roiect 
a  rialkmMde  colaboration 
among  doctors  and  medical 
IT  specialsts  that  is  marketed 
by  InlinRy  HeeItttCare  Inc's 
EMSystem  dMsion.  Both  the 
FronttnasproiBCtandEMSys- 
(em  are  besed  in  c'equon.  Wb. 

Fotdy  sMd  the  Fronllnes 
groupaddedaSARSstfvei- 
lanoe  tool  earter  this  morHh 
The  SARS  component  conssts 
ofaWtti-baBedlormihai 
emergency  room  personnel  can 
donmtoad  to  record  and  track 
anySARS-fypesympiomspa- 
benls  ate  eiveriencano  as  wal 
as  any  receni  tripB  the  paHents 
have  talen  to  Qwa  or  otter 
countries  iMtere  SARS  out¬ 
breaks  hM  bean  dooumanled. 

Ha  patent  shOMMgnsol 
the  dseaee  and  has  reoendy 
visMad  a  letown  SARS  zone, 
hospital  workers  are  instructed 
to  cal  MANBukae's  health  de¬ 
partment  anmedaMy  Other¬ 
wise.  hospHais  uptoad  symp- 
torndtoatolocalheaKhaflt- 
cals  at  tie  end  ol  aech  day. 

Foldy  said  he  would  i«  to 
seethedatatranstornaomai- 
edtoordortotaehQapHal 
cMciane  from  tw  need  to  S 
out  forms. 

-BabBrmm 
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FRANK  HAYES  •  FRANKLY  SPEAKING 

As  Bad  as  It  Gets 

Times  are  tough.  Budgets  are  tight.  Patience  is  short. 

We’re  faced  with  underfunded  projects,  understaffed 
operations  and  underappreciated  challenges.  The  goal 
of  getting  IT  right  —  making  sure  our  technology 
works,  and  works  for  the  benefit  of  the  business  —  has 
never  been  tougher  to  accomplish. 

Fortunately,  one  thing  is  still  easy:  screwing  up. 


What?  You’ve  forgotten  how?  Never  fear!  Just 
commit  this  list  of  a  baker’s  dozen  tips  to  mem¬ 
ory  —  or  clip  it  out  and  keep  it  handy  —  and 
you'll  never  be  short  of  bad  ideas  again: 

Assume.  Assume  you  know  what  users  need. 
Assume  you  know  what  managers  exi>ect.  As¬ 
sume  you'll  have  no  problems.  Assume  you’ll 
catch  up  when  the  schedule  slides.  Assume  no 
problems  will  show  up  in  testing.  Assume  no 
one  will  mind  all  your  assumptions.  Why 
should  they? 

Expect  Expect  support  from  management. 
Expect  perfection  from  vendors.  Expect  clear 
specifications  from  users.  Expect  flawless  exe¬ 
cution  from  the  IT  staff.  Hey.  it  could  happen 
—  so  why  not  expect  it? 

Overpmmise.  Paint  an  improbably  beautiful 
picture  of  glitch-free  hardware,  bug-free  soft¬ 
ware  and  fhction-free  networks.  Set  an  early 
delivery  date.  Make  the  list  of  features  long. 
Keep  expectations  high.  What  else  will  spur 
you  to  do  your  best  work? 

CompAcate.  Avoid  straightforward  designs. 
Sneer  at  simple  solutions.  Encourage  complex¬ 
ity.  Who’s  going  to  respect  technology  that 
anyone  can  understand? 

Aiimatc.  Alienate  the  users  who  can  explain 
to  you  what  your  systems  need  to  do  for  them. 
Alienate  the  business  managers  whose  budgets 
you’ll  spend.  Alienate  senior  management, 
from  whom  all  funding  flows.  What 
do  you  need  anyone’s  cooperation 
for  anyway? 

Experiment  Users  make  the  best 
guinea  pigs.  Production  systems 
make  the  best  testbeds.  Untried 
technology  offers  its  greatest  re¬ 
wards  in  mission-critical  applica¬ 
tions.  When  your  original  plans 
don’t  work  out  and  the  deadline 
gets  near,  why  not  give  something 
completely  untested  a  shot? 

Deny.  Deny  responsibility.  Deny 
promises  you  made.  Deny  failure. 

Deny  the  limits  of  your  stafr.  your 


systems  and  your  own  abilities.  Deny  what’s 
obvious  to  everyone  else.  Who  should  they  be¬ 
lieve  —  you.  or  their  own  lying  eyes? 

Change.  Variet>'  is  the  spice  of  life,  and  every¬ 
one  loves  something  new.  Change  what  users 
see  on  their  screens.  Change  their  passwords. 
Change  what  gets  blocked  by  your  filtering 
software.  Change  your  help  desk  hours. 

Change  your  procedures.  Change  the  rules. 
What’s  wrong  with  these  fuddy-duddies  — 
can’t  they  get  out  of  their  rut? 

Procrastinate.  Delay  that  status  meeting.  Push 
back  that  code  review.  Put  off  those  patches 
and  upgrades  and  audits.  Isn’t  there  always 
time  to  get  things  done  at  the  last  minute  — 
and  if  there  isn’t,  can’t  you  just  push  back  that 
last  minute  one  more  time? 

Withhold.  Withhold  information.  Withhold 
cooperation.  Withhold  anything  that  would 
give  users,  business-side  managers  or  execu¬ 
tives  a  better  sense  of  what  to  expect  when  to 
expect  it  and  how  useful  it  will  be  if  it  ever  ar¬ 
rives.  Who  ever  heard  of  winning  at  poker 
without  keeping  your  cards  close  to  your  chest? 

Underestimate.  Make  low-ball  guesses  for  cost. 
Predict  a  minimum  of  problems.  Sketch  out 
short  development  schedules.  Everybody  loves 
an  optimist,  so  why  plan  for  expenses  and  de¬ 
lays  that  might  never  materialize? 

Avenge.  Take  revenge  for  perceived  slights 
and  possible  acts  of  sabotage.  Re¬ 
turn  real  attacks  and  imagined  af¬ 
fronts  in  kind.  Pay  back  every  case 
of  stupidity,  folly  and  ignorance, 
measure  for  measure.  Why  risk  let¬ 
ting  someone  get  away  with  it? 

Ignore,  ^ore  problems,  warning 
signs,  complaints  and  objections. 
Ignore  suggestions,  feedback  and 
test  results.  Ignore  the  recommen¬ 
dations  of  management  and  users. 
Ignore  rumors  and  rumblings  of 
discontent.  Why  sweat  that  small 
stuff?  After  all,  you’ve  got  IT  work 
to  screw  up.  I 
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SAS*  is  all  you  need  to  know. 


Only  SAS  provides  a  high-impact,  low-risk  way 
to  achieve  intelligent  data  warehousing.  You  can 
extract,  transform  and  load  data  from  any  source, 
across  any  platform,  while  assuring  quality. 
Simplify  the  way  you  create  and  customize  reports. 
And  deliver  a  shared  version  of  the  truth.  To  find  out 
how  top  companies  reap  bottom-line  rewards  widi 
SAS  software — by  leveraging  the  value  of  data 
from  corporate  systems,  e-business  channels,  the 
supply  chain  and  beyond — visit  us  on  the  Web  or  call 
toll  free  I  866  270  5727. 


www.sas.coni/warehouse 


WHY  NOT  GUT  COSTS 
WITHOUT  CUTTING  CORNERS? 


It's  simple,  really:  When  you  buy  commodity  hardware,  you  get 
commodity  features.  So  why  not  get  premium  features  for  the 
same  price?  With  a  line  of  servers  that  are  as  affordable  as 
they  are  powerful,  Sun  Is  out  to  prove  once  again  that  you  can 
lower  costs  and  complexity  without  compromising  quality. 


Sun  has  an  entire  family  of  servers  built  to  deliver  enterprise- 
level  performance  and  reliability  at  highly  competitive  prices. 
Which  means  that  for  the  cost  of  an  alarmingly  mediocre  Wintel 
box,  you  can  get  an  ultra-reliable  Sun  server  ready  to  take  on  your 
most  mission-critical  tasks.  From  CRM  applications  to  e-mail 
and  Web  serving.  With  this  kind  of  bang  for  the  buck,  it's  no  wonder 
Sun  has  remained  the  UNIX*  server  leader  every  year  since  1998f 


To  find  out  more  about  how  Sun  servers  can  deliver 
state-of-the-art  technology  at  state-of-the-economy  prices, 
visit  SUN.COM/WHYNOT 


^Sun 

microsystems 
We  make  the  net  work. 


•Sow:  IDC'tWorMwid*  Quartorhr  Sorvtf  Trackof.  Fobruary  2000.  Setod  on  rovanuo  and  ahlpmant  growth.  CV2002,  all  OSs. 
esOOS  Sun  Mkrotyttatna.  Inc.  AH  rights  rasarvad.  Sun.  Sun  Microaystams.  tha  Sun  logo,  Sun  Firs  and  Sun  StorCdgs  ars  trademarks  or  ragistarad 
tradamarta  at  Sun  Microayttama,  Inc  in  tha  Unitad  Stataa  and  other  counlnas.  UNIX  Is  a  ragistarad  tradamart  in  tha  Undad  Stataa  and  othar  countriaa. 
Mchialvaly  licanaad  through  X/Opan  Company,  Ltd. 
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WIRELESS 

atWORK 

Wireless  technology  is 
laboring  in  some  unexpected 
places  these  days,  supplying 
the  backbone  for  gritty  appli¬ 
cations  in  coal  mines,  at  ship¬ 
yards  ^  even  on  the  battlefield.  Meanwhile, 
industry  pioneers  are  still  testing  the  technology's 


Oflfehore  Coding  Woik 
Raises  Security  Cbncems 


Outsourcing  critical  software  development  to 
foreign  workers  puts  systems  at  risk,  users  say 


JT  professionals  are  raising  se¬ 
rious  questions  about  , 
the  U,S.  software  in¬ 
dustry's  reliance  on 
overseas  software  de¬ 
velopers.  arguing  that 
the  practice  puts  companies 
and  the  VS.  economy  at  risk. 

A  recent  study  by  Gartner 
Inc.  predicts  that  by  2004, 
more  than  80%  of  U^.  compa¬ 
nies  will  consider  outsourcing 
critical  IT  services,  including 
software  development,  to 
countries  such  as  India,  Pak¬ 
istan,  Russia  and  China.  But 
some  users  said  the  trend 
needs  to  be  given  a  sanity 
check  in  light  of  recent 
changes  in  the  global  security 
environment. 

At  last  week's  Techno-Secu¬ 


SOFTWARE 


rity  Conference  here,  users 
peppered  a  panel  of  corporate 
security  officers  with  ques¬ 
tions  about  the  wis¬ 
dom  of  outsourcing 
software  develop¬ 
ment  to  cheap  labor 
overseas,  where 
there  is  little  or  no  way  to 
ascertain  the  security  risk  that 
workers  may  pose. 

Pfizer  Moves 
Broadband  Out 
To  Sales  Force 

Remote  workers  get 
routers,  VPN  software 
for  distributed  net 


Pfizer  Inc.  plans  to  have  about 
10,000  of  its  13,000  field  sales 
workers  hooked  up  by  year's 
end  to  either  hi^-speed  cable 
modem  or  Digital  Subscriber 


Of  particular  concern  to 
some  attendees  is  the  work 
that  is  being  sent  to  China. 
While  not  yet  a  maior  provid¬ 
er  of  outsourcing  services, 
China  has  a  significant  eco¬ 
nomic  espionage  program  that 
targets  U.S.  technology,  the 
users  noted.  Also  of  concern 
are  countries  in  Southeast 
Asia,  particularly  Malaysia 
and  Indonesia,  where  terrorist 
networks  are  known  to  exist 
Speakii^  directly  to  Oracle 
Off^ore  Coders,  page  16 


Line  services  —  a  project  that 
analysts  said  would  create  the 
largest  corporate  broadband 
network  built  for  remote 
workers  thus  far. 

Jay  Stallard,  senior  manager 
of  busmess  technology  and  in¬ 
formation  sciences  at  Pfizer, 
said  the  New  York-based  phar¬ 
maceuticals  maker  will  pro¬ 
vide  each  of  the  workers  with 
a  low-end  router  and  virtual 
private  network  software  for 
connecting  to  the  company's 
back-office  systems. 

The  network  hardware  be- 
Pfiier.  page  S3 


sliiMs  :o  maintain  nalance. 


The  human  body  is  a  remarkable  on  demand  environment.  Ditto  IBM 
eServer.  The  eServer  pSeries'can  sense  an  ebb  in  traffic  flow  and 
respond  by  shifting  resources  to  heavier  workloads.  When  demands 
stabilize,  eServer  maintains  the  balance. 


eServer:  servers  for  on  demand  business. 

Can  you  see  it?  See  it  at  ibin.com/eserver/ondemand 


Windows' 

Linux' 

UNIX 

Midrange 
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Storage 


ON-DEMAND 

COMPUTING 

IS  A  GREAT  IDEA. 


BUT  IF  YOU  CANT  MANAGE  IT, 
THAT'S  ALL  IT  WILL  BE. 


MANAGING  ON-DEMAND  COMPUTING 

We  have  seen  the  future  of  IT,  and  weVe  delivering  it  today.  That's  why  we're  making  it  possible  to 
manage  on-demand  computing  right  now  with  our  products.  Our  latest  innovations  let  you  manage 
your  infrastructure  as  efficiently  and  reliably  as  a  utility.  They  help  your  infrostructure  manage  itself, 
so  you  can  focus  on  running  your  business.  And,  most  importantly,  they  give  you  Insight  into  how 
your  Infrastructure  is  supporting  your  business,  so  you  can  make  better  business  decisions 
and  improve  your  bottom  line.  To  wake  up  to  the  dream  of  managing  on-demand  computing, 
contact  us  today  at  ca.com/unicenter] . 


Unicenter  Managing  Business  Infrastructure  Computer  Associates' 
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6  Oracle  database  users  express 
growing  interest  in  Linux. 

S  U.S.  companies  doing  business  in 
Canada  have  seven  months  to  com¬ 
ply  with  a  consumer  privacy  law. 

7  IBM  expands  its  Qrid  computing  of¬ 
ferings,  but  it  doesn't  expect  much  de¬ 
mand  until  standards  are  complete. 

8  High-tech  CEOs  are  facing  the  eco¬ 
nomic  realities  of  the  marketplace. 

10  Computer  Associates  groups  six 

Unicenter  tools,  joining  the  push  for 
on-demand  computing. 

12  IBM  Is  set  to  ship  its  first  storage- 
area  virtualization  device  for  block- 
level  data. 

14  Panelists  debate  centralization  vs. 
decentralization  of  IT  governance 
for  effective  cost-cutting. 

19  Federal  privacy  regulations  could 
hamper  access  to  medical  data, 
according  to  some  researchers. 
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Wireless  at  Work 

Wireless  is  expanding  its  job  descrip¬ 
tion  to  include  some  gritty  ap¬ 
plications.  Read  how  service 
technicians,  bulldozer  op- 
I  erators  and  police  officers 
I  use  the  technology  to  get 
their  jobs  done.  Also,  in¬ 
dustry  pioneers  are  still 
testing  the  limits  of  wireless 
and  inspiring  a  second  generation 
of  adopters.  PACKASE  BEBMS  ON  PAOE  27. 

30  Wlulirn  Gall  0«wn  to  BuNiims.  In  the  hands  of 
creative  pioneers,  wireless  technology  is  break¬ 
ing  new  ground,  with  applications  that  range 
from  the  everyday  to  the  extraordinary.  Read 
about  innovative  wireless  uses  in  10  sectors, 

including  a  WLAN  upgrade  at  Carnegie  Mellon 
University  led  by  Chuck  Bartel  (below,  left)  and 
Sc.  Vincent’s  Hospital’s  wireless  voice  technology 
pilot,  led  by  Jim  Stettfaeimer  (below). 


38  Working-<^lass  Wireless. 

Thanks  to  a  wireless  sys¬ 
tem  installed  on  all  10,000 
of  its  trucks.  Sears  repair 
technicians  can  transmit 
data  from  customer  sites 
anywhere  in  the  U.S.  to 
the  company’s  back-end 
systems,  says  Sears  IT  ex¬ 
ecutive  Dave  Sankey  (right).  Also,  read  bow 
“smart'  bulldozers  use  wireless  to  make  their 
way  around  a  coal  mine  and  how  a  shipyard  auto¬ 
matically  creates  payroll  and  cost  records 
using  wireless. 

40  Analyst  Raporl  (2ard.  industry  watchers  from  the 
top  analyst  firms  weigh  in  on  which  wireless  seg¬ 
ments  and  vendors  are  making  the  grade  for  cor¬ 
porate  IT.  Vendors  that  sell  gear  and  software  for 
WLANs  are  earning  top  marks,  but  most  mobile 
carriers  are  flunking  out.  analysts  say.  Also,  re¬ 
sults  from  our  online  survey  reveal  what  readers 
had  to  say  about  their  future  wireless  plans. 

41  VendorVlewt.  Where  is  the  wireless  industry 
beaded?  Executives  from  Cisco,  Intel  Enterasys 
Networks,  Symbol  Technologies  and 

Proxim  offer  their  takes  on  the  future 
of  WLANs,  hardvrare,  standards  and 
security. 


42  ThtWIrMtte  LAN  FAQ.  Thinking  of 
deploying  a  WLAN?  Read  answers 
to  six  ffequently  asked  questions 
about  capacity  planning,  interfer¬ 
ence  and  security  concerns. 


44  On  the  Heelt  of  tht  Ptoonen.  They 
learned  from  the  leaders,  and  now 
these  second-generation  adopters 
are  adapting  wireless  technology 
to  meet  tbeir  own  business  goals. 
Read  what  prompted  these  smaller 
companies  to  go  wireless,  what 
tools  they  used  and  how  tbeir  proj¬ 
ects  are  working  out. 
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Gee  the  day’s  new*  from  Osm- 
piNerworid^  Mobile  fit  Wirelcsa 
Wirid  conference  ip  ftJm 
Deaert,  CaliC,  featmiog  eftd- 
uaer  ceae  ftndes  and  panel  db- 
fuaakm*.  Tbe  four-day  confer- 
coca  begins  Tbeadiy;  May  6. 
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A  new  WI-Fl-feated  network  at 
the  Post  HDs,  IdabOk  police  de¬ 
partment  provides  ptfxol  offi¬ 
cers  in  a  bO-sqnue'inile  area 
wfrh  e-naS  and  Arect  access  to 
the  PBTi  National  Crime  Infor- 


WlAN  OteyiBMl  ChHttM 

Follow  this  step-by-step  guide 
to  ensure  proper  deployment  of 
your  wireleas  LAN.  Read  dps 
on  netwock  design,  security 
protection  and  centralized 
tnanagemenL 
OtkMAMSTTK 
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AT  DEADLINE 


HP  Combines  Hs 
Hardware  Groups 

AkriMt  a  ytar  to  tht  day  after 
H  acqulrod  Compaq  Computer 
Corp..  HowtetbPackard  Co.  on 
May  2  aimouncod  a  roorBaniza* 
tion  that  indudct  combining  sav* 
orai  sorvor  and  slorago  hanhmro 
groupa  Mo  a  sfaiglo  dMskm.  HP 
said  N'a  also  croating  a  unN  ttM 
wM  martaga  Ha  Mamal  FT  opora- 
ttom  and  buBbim  ptenning, 
stnrtagy  davolopniorrt  and  BfTtBf- 
prisa  marfiatlng  acttvWas. 


Microsoft  to  Demo 
Security  Hardware 

Mteroaefl  Corp.  aril  damonrtrate 
Ka  Nait'Canaralion  Sacura  Com¬ 
puting  8aaa  tachnoiogy  for  Itw 
flnt  tbna  at  ttda  waak'a  Wbnfovrs 
Hardwaia  Engbiaaring  Confof- 
anca  2003  in  Haw  Orfoana.  Tha 
vandor  pirn  to  davela  V  hours 
of  technical  aaaalona  to  tho  bard- 
awa-baaad  aacurity  Mlsativa. 
adiich  ia  abnad  at  batter  sacur- 
ing  PCa.  H  ww  previously  coda- 


Trade  Group  Sees 
Sfim  Job  Growth 

Tha  U.S.  IT  twafcfofoa  paw  by 
foaa  than  nb  in  tha  first  quarter 
compared  with  tha  iaval  at  tha 
and  of  2002,  according  to  a  re¬ 
port  dua  to  ba  refoasad  today  by 
tha  toforiMllon  Tachnoiogy  Aa- 
sochdfon  of  Amorica  (ITM)  in 
Arteiglon.  Va.  dual  66.000  fobs 
aiare  addad  to  a  warWorca  ood- 
nMad  at  about  10  J  oMeo.  tha 
ITAA  asM.  HMto  rteaa  MMy  wOl 
reaialn  at  a  Tdttoric  tow"  for  the 
raat  of  tha  year,  it  added. 


Short  Takes 

AMEmCAONUNEftC..M»CftO- 
SOTTand  YAHOO  MC.  aaU  they 
plan  to  wark  tagathar  to  try  to 
Indt  the  ameiM  of  apam  mea- 
aagaaeriginiiingfremthalra- 
mal  aardcaa. ...  Farmer  ftnh 
amaaaavaDon  eyaavaaeurny  or* 
mai  naawra  acnmai  aare  na 
adl  baeama  idea  praaMant  of 
MOwNyMEBAYilC. 


Oracle  Database  Users’ 
Interest  in  Linux  Grows 


Conference  attendees  say  they  plan  to 
evaluate  OS.  despite  lack  of  applications 


Despite  the  relative 
newness  of  corpo¬ 
rate  applications 
running  on 
Linux,  attendees  at  an 
Oracle  database  user 
conference  last  week 
said  a  growing  number 
of  companies  are  evaluating  or 
moving  into  production  with 
database  servers  niiuiing  the 
open-source  operating  system. 

’’Linux  is  on  nre"  said  Rich 
Nicmiec,  president  of  the 
Chicago-based  International 
Oracle  Users  Group  (lOUG). 

In  a  recent  survey  of  about  100 
lOUG  members,  roughly  half 
indicated  that  they  were  inter¬ 
ested  in  ruiming  mission-criti¬ 
cal  Oracle  databases  on  Linux. 
Niemiec  said  at  the  indepen¬ 
dent  user  group’s  annual  con¬ 
ference.  That’s  up  from  only 
about  15%  in  a  survey  con¬ 
ducted  a  year  ago.  he  added. 

Niemiec.  who  is  also  CEO  of 
Lombard.  lll.-bascd  TUSC.  an 
Oracle  consulting  and  services 
firm,  attributed  the  increase  in 
user  interest  to  Oracle  Corp.’s 
alliance  with  Linux  vendor 
Red  Hat  Inc.  and  its  support 
for  clustering  Linux  machines 
via  its  Real  Application  Clus¬ 
ters  (RAC)  technology. 

Andrew  Mendelsohn,  senior 
vice  president  of  database  and 
application  server  technolo¬ 
gies  at  Oracle,  said  as  much  as 
15%  of  RAC  users  are  running 
the  clustering  technology  on 
Linux  systems,  up  from  almost 
none  at  this  time  last  year. 

Among  the  companies  that 
are  using  Linux-based  Oracle 
databases  is  Aventis  Behring 
LLC,  a  maker  of  pharmaceuti¬ 
cals  in  King  of  Prussia,  Pa. 
lesse  Crew,  martager  of  global 
systems  at  Aventis  Behring, 
said  the  subsidiary  of  Paris- 
based  Aventis  SA  is  running 
more  than  10  Hewlett-Packard 


OPEN 

SOURCE 


ProLiant  servers  equipped 
with  Red  Hat  Linux  and  Ora- 
clc8i  or  OracleOi  databases. 

For  example,  Aventis  in  Feb¬ 
ruary  went  live  with  a  Linux 
system  that  supports 
accounts  receivable 
and  electronic  data  in¬ 
terchange  applications. 
It’s  saving  thousands  of 
dollars  in  hardware,  software 
and  administration  costs  com¬ 
pared  with  using  high-end 
Unix  boxes,  Crew  said. 

“We're  not  sacrificing  relia¬ 


bility  or  availability.’’  he  noted. 
“We  haven’t  had  any  issues 
with  performance.  It  runs  just 
as  well  as  Unix." 

However,  the  change  did  re¬ 
quire  some  adjustments  on  the 
part  of  an  IT  staffer  who  was 
used  CO  working  with  Windows 
systems.  Crew  said.  More  ap¬ 
plication  vendors  need  to  sup¬ 
port  Linux,  he  added. 

Mendelsohn  said  Oracle  is 
working  “to  get  the  ball  roll- 
ing“  on  application  support. 
For  example,  the  company  in 
March  announced  a  program 
for  providing  funding  to  soft¬ 
ware  vendors  that  agree  to 
port  their  products  to  Linux. 


H  We  haven’t 
had  any  issues 
with  perfomiWice. 
[Limn]  runs  just  as 
well  as  Unix. 

JESSE  CREW.  MANAGER  OF  GLOBAL 
SYSTEMS.  AVENTIS  BEHRING  LLC 

William  Maguire.  CIO  at 
Legato  Systems  Inc.,  a  Moun¬ 
tain  View.  Calif. -based  maker 
of  data  storage  software,  said 
he’s  currently  testir^  OracleOi 
on  Linux.  The  reliability  and 
performance  is  proven  now." 
said  Maguire,  although  he  has 
not  set  any  rollout  plans  yet.  I 
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Orade  last  week  detaied  piens  ID  upgrade 
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Canadian  Privacy  Law 
Deadline  Approaching 


U.S.  companies 
must  comply  by 
first  of  the  year 


BV  JAtKUMAB  VUIAVAN 

The  clock  is  winding  down  for 
U5.  companies  (hat  exchange 
data  with  other  businesses 
and  subsidiaries  in  Canada  to 
comply  with  a  law  providing 
broad  privacy  protections  for 
Canadian  citizens. 

Beginning  fan.  1. 2004,  all 
companies  that  collect,  use  or 
disclose  personal  information 
about  Canadian  citizens  dur¬ 
ing  the  course  of  commercial 
activities  will  have  to  comply 
with  Canada's  Personal  Infor¬ 
mation  Protection  and  Elec¬ 
tronic  Documents  Act 

"Since  Canada  is  our  largest 
trading  partner,  a  lot  of  com¬ 
panies  will  be  affected  by 
this.”  said  Mark  Rasch,  former 
head  of  the  U.S.  Department 
of  lustice’s  computer  crimes 
unit  and  senior  vice  president 
at  SoluUonary  Inc.,  a  security 
consultancy  in  Omaha. 

The  act  is  already  in  effect 
for  banks,  airlines,  transporta¬ 


tion  companies  and  telecom¬ 
munications  firms.  It  requires 
businesses  to  offer  Canadian 
citizens  certain  guarantees  re¬ 
garding  the  collection  and  use 
of  personal  data  (see  box). 

It  will  be  a  violation  to  col¬ 


lect  data  in  Canada  and  then 
transfer  it  out  of  the  country, 
unless  the  transfer  carries 
with  it  the  same  level  of  pro¬ 
tection  that’s  required  in 
Canada,  Rasch  said. 

The  law  requires  U5  compa¬ 
nies  to  revise  online  consumer- 
consent  screens  and  policies, 
call  center  procedures,  and 
processes  for  recording  atul 
maintaining  consent  records, 
said  Robert  Parker,  a  partner 
at  Deioitte  &  Touche  LLP  in 
Toronto  It  also  requires  com¬ 
panies  to  protect  the  physical 
integrity  of  the  data  with  ade- 
qtiate  security  and  privacy 
measures,  Parker  s^ 

Canadian  companies  shar¬ 
ing  dau  with  Ui»  businesses 
must  also  "ensure  the  U.S.  re¬ 
cipient  commits,  by  contract 
or  otherwise,  to  the  same  stan¬ 
dards  imposed  by  [the  privacy 
act],”  said  Michael  Miasek.  an 
attorney  in  the  Toronto  office 
of  Baker  fie  McKenzie,  a  Chica¬ 
go-based  law  finn  that’s  help¬ 
ing  U.S.  companies  comply 
with  the  act 

Since  the  rules  retroactively 
apply  to  data  collected  prior 
to  January  2(X)4,  companies 
will  need  to  determine  when 
and  bow  they  collected  any 
data  they  may  have  on  Canadi¬ 
an  citizens  and  how  it’s  being 
used,  privacy  experts  said.  I 
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Division  Over  Web  Services 
Standards  Work  Stirs  Debate 

IBM,  Microsoft  choose  OASIS  over  W3C 


BV  CAROL  SLIWA 

More  than  a  few  feathers  were 
ruffled  when  the  Organization 
for  the  Advancement  of  Struc¬ 
tured  Information  Standards 
(OASIS)  announced  last  week 
that  a  technical  committee 
formed  to  standardize  the 
Business  Process  Execution 
Language  for  Web  Services 
(BPEL4W5)  would  hold  its 
first  meeting  later  this  month. 

Debate  has  been  healed 


But  it  doesn’t  expect 
big  demand  until 
standards  are  set 

BV  PATmCK  THtBOOCAU 

IBM  last  week  expanded  its 
industry-specific  grid  comput¬ 
ing  offerings,  even  while  it  ac¬ 
knowledged  that  widespread 
adoption  of  grid  technology 
won't  accelerate  until  stan¬ 
dards  work  is  complete. 

The  Globa]  Grid  Forum  in 
Argonne.  liL,  which  is  devel¬ 
oping  grid  specifications,  is 
about  a  year  away  from  pro¬ 
ducing  enough  of  them  to  sim¬ 
plify  development  work.  The 
standards  arc  intended  to  pro¬ 
vide  developers  with  the  basic 
plumbing  of  a  grid  environ¬ 
ment.  such  as  a  common  way 
for  applications  to  discover 
what  resources  arc  available 
on  a  network  and  the  proto¬ 
cols  to  access  them. 

Comiwrcial  Potential 

Early  grid-computing  use  has 
been  in  technical  areas,  such 
as  science  and  engineering. 

But  commercial  adoptions  are 
coming. 

eariy  adopter  is  David 
Dibble,  executive  vice  presi¬ 
dent  at  Charles  Schwab  &  Ox's 


since  it  became  clear  that  Mi¬ 
crosoft  Corp.  and  IBM  would 
submit  to  OASIS,  under  royal¬ 
ty-free  terms,  the  BPEL4WS  1.1 
specification  they  co-authored 
with  BEA  Systems  Inc..  SAP 
AG  and  Siebel  Systems  Inc. 

That's  because  another 
leading  standards  body,  the 
World  Wide  Web  Consortium 
<W3C).  had  already  estab¬ 
lished  a  choreography  work¬ 
ing  group  to  address  the  siml- 


lechnolc^  service.  He  has 
been  testing  an  IBM  grid  on  an 
application  that  advises  clients 
on  investntent  strategies.  The 
forecaster  operates  as  a  giant 
simulator.  By  using  grid  proc¬ 
esses,  San  Francisco-based 
Schwab  has  been  able  to  re¬ 
duce  a  IS-minute  computation¬ 
al  process  to  a  f^  seconds. 

Based  on  his  experience. 
Dibble  said  he's  convinced  that 
grid  approaches 
will  be  widely 
adopted  be¬ 
lieve  the  future 
will  be  net¬ 
worked -based 
computing."  he 
said  The  days  of 
one  ^plication 
owning  a  box . . . 
are  gone.  Compa¬ 
nies  have  got  to 
up  to  the 
new  business  reality  that  a  dol¬ 
lar  has  to  go  much  further  to¬ 
day  than  it  ever  did  in  the  past* 

Dibble  said  he  expects  grid 
computing  to  reduce  costs,  es¬ 
pecially  for  hardware.  There's 
TK>  question  about  it  —  huge 
savings  through  better  utiliza¬ 
tion."  he  said.  He  noted  that  he 
sees  Little  risk  in  implement¬ 
ing  grid  processes  before  stan¬ 
dards  are  complete  because  be 


lar  issues  of  describing,  man¬ 
aging  and  executing  business 
processes  that  are  composed 
of  Web  services.  The  W3C's 
specification  is  called  the  Web 
Services  Choreography  Inter¬ 
face.  or  WSCL 

Oracle  Corp..  which  co- 
chairs  the  W3C's  choreogra¬ 
phy  working  group,  said  it  has 
worked  hard  —  to  dale,  to  no 
avail  —  to  encourage  IBM  and 
Microsoft  to  bring  BPEL4WS 
to  the  W3C. 

"We  were  not  enthusiastic 


insists  that  whatever  his  ven¬ 
dors  move  to  production  is 
based  on  open  standards. 

The  intent  of  grid  comput¬ 
ing  is  to  harness  unused  com¬ 
puting  power  that’s  available 
in  mainframes,  servers  and 
desktops  and  apply  it  in  super- 
computerlike  fashion  to  com¬ 
puting  problems. 

"If  you  look  at  server  uti¬ 
lization  in  an  enterprise,  there 
is  a  lot  of  untapped  potential,* 
said  Dan  Powers.  IBM's  vice 
president  for  grid  computing 
"Windows  desktops  and 
servers  are  used  anywhere  be¬ 
tween  S%  and  10%  of  the  time 
over  a  24-hour 
period:  Unix 
servers  arc 
[used]  anywhere 
between  10% 
and  20%"  over 
that  same  peri¬ 
od,  be  said 
Powers  noted 
that  he  believes 
interest  in  grid 
computing  will 
accelerate  once 
standards  work  is  completed. 

Charlie  Catlett,  head  of  the 
Global  Grid  Forum,  said  one 
thing  standards  will  accom¬ 
plish  is  increasing  the  number 
of  grid-enabled  applications  by 
lowering  the  barrier  to  entry, 
especially  for  smaller  compa¬ 
nies.  Without  standards,  com¬ 
panies  have  to  write  *soup-io- 
nuts  solutions"  to  make  them 
work.  Clatlet!  said  t 


about  Microsoft  and  IBM 
going  to  OASIS."  said  Don 
Deutsch.  vice  president  of 
standards  strategy  at  Oracle. 
"Primarily,  our  rationale  vras 
we  feared  fragmentation  in  the 
Web  services  ^>ace.  Whenev? 
er  there  arc  multiple  activiti^ 
in  the  same  technical  space, 
there  is  a  danger  that  tl^  will 
overlap  and  compete.  And  if 
that  happens,  a  likely  result  is 
confusion  in  the  marketplace, 
and  everybody  loses." 

Not  Taking  Sides 

Now  it  will  apparently  fall  to 
companies  sudi  as  Oracle, 
BEA.  SAP  and  Sun  Microsys¬ 
tems  Inc.  to  monitor  the  two 
groups  and  make  sure  their 
work  is  complementary.  Those 
are  some  of  the  vendors  that 
have  indicated  their  intention 
to  sit  on  both  the  W3C's  chore¬ 
ography  working  group  and 
the  (>AS1S  technical  commit¬ 
tee  for  BPEL4WS.  which  will 
hold  its  first  meeting  May  16. 

"Sun  is  going  to  try  to  take 
the  high  road  here.  We're  go¬ 
ing  to  try  to  find  alignment  be¬ 
tween  these  two  efforts.  At  the 
end  of  the  day.  the  industry 
needs  only  one  specification 
for  Web  services  choreogra¬ 
phy."  said  Ed  lulsoD.  Sun's 
group  manager  of  Web  ser¬ 
vices  staiKlards  and  technolo¬ 
gies.  Sun  worked  with  BEA, 
SAP  and  Intaiio  Inc.  on  WSCI. 
which  Julson  said  "has  more 
similarities  than  differences" 
with  BPEL 

Representatives  from  IBM 
and  Microsoft  said  last  week 
that  they  have  no  plans  to  act 
on  invitations  to  loin  the 
W3C*s  choreography  working 
group.  Steven  VanR^kel.  Web 
services  marketing  director  at 
Microsoft,  said  the  company 
mi^t  join  the  W3C  group  at  a 
later  date. 

But  VanRoekei  also  said 
Microsoft  feels  that  Billerica, 
Mass. -based  OASIS  is  a  good 
place  for  higher-level  specifi¬ 
cations  such  as  BPEL.  He  said 
the  W3C  typically  handies 
lower-,  plumbing-level  stan¬ 
dards  such  as  XML  and  SOAP. 
He  also  noted  that  the  scope 
of  the  WX's  choreography 
group  is  broader  than  that  of 
the  BPEL  ctKnraittee. 

Karla  Norswortby,  who 
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takes  an  active  role  in  stan¬ 
dards  work  as  the  direaor  of 
d)’tiamic  e-busincss  technolo¬ 
gies  at  IBM,  said  her  company 
won't  participate  in  both  the 
OASIS  and  W3C  groups  be¬ 
cause  its  "first  focus  is  on 
BPEL"  She  didn't  rule  out  the 
possibility  that  the  decision 
could  be  revisited,  however. 

Norswortby  added  that  it 
will  take  hard  work  to  make 
sure  there  is  a  single  standard 
that  every  vendor  tmpletnents. 
and  she  noted  that  BEA.  SAP. 
Oracle  and  other  companies 
will  participate  in  both  the 
OASIS  and  W3C  groups  that 
deal  with  the  topic. 

"They’re  definitely  putting 
the  burden  on  someone  else  to 
fix  the  problem  they're  creat¬ 
ing."  said  Eric  Newcomer,  chief 
technology  officer  at  Iona 
Technologies  PLC  in  DubUa 

Newcomer,  who  serves  as 
editor  of  the  W3C's  Web  ser¬ 
vices  architecture  working 
group,  said  his  company  is 
"definitely  disappointed  about 
this  sign  of  fragnooemation  in 
the  conuminicy." 

He  said  threats  of  diver¬ 
gence  have  surEiced  before, 
but  this  marks  the  first  time 
an  "explicitly  overlapping" 
charter  was  set  up  in  an  area 
where  a  working  group  was  al¬ 
ready  established.  I 


IBM  Expands  Grid 
Computing  Offerings 


Grid  Focus 

INDUSTRIES  NOW 
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HP  Combines  Its 
Hardware  Groups 

Almost  a  year  to  the  day  after 
it  acquired  Compaq  Computer 
Corp..  Hewlett'Pac^d  Co.  on 
May  2  aiHHMnced  a  reorganiza¬ 
tion  that  indudes  combining  sev¬ 
eral  server  and  storage  hardware 
groups  into  a  single  division.  HP 
said  it's  also  creating  a  unit  that 
will  manage  its  internal  IT  opera¬ 
tions  and  business  planning, 
strategy  development  and  enter¬ 
prise  marketing  activities. 

Microsoft  to  Demo 
Security  Hardware 

Microsoft  Corp.  will  demonstrate 
its  Neit-6enerat)on  Secure  Com¬ 
puting  Base  technology  for  the 
llrst  time  at  this  week's  Windows 
Hardware  Engineering  Confer¬ 
ence  2003  in  New  Orleans.  The 
vendor  pbns  to  devote  tB  hours 
of  technical  sessions  to  the  hard¬ 
ware-based  security  iniliatrve. 
which  is  aimed  at  better  secur¬ 
ing  PCs.  H  was  previously  code- 
nvned  Palladium. 

Trade  Group  Sees 
Slim  Job  Growth 

'nte  U.S.  IT  workforce  grew  by 
less  than  1%  in  the  first  quarter 
compared  with  the  level  at  the 
end  of  2002,  according  to  a  re¬ 
port  due  to  be  released  today  by 
the  Infomution  Ttchnotogy  As- 
sodatioo  of  America  (ITAA}  in 
Arlington.  Va.  Just  86.000  jobs 
were  added  to  a  workforce  esti¬ 
mated  at  about  10  J  mflUon.  the 
ITAA  s^  Hiring  rates  likeiv  wifi 
remain  at  a  liistoric  low”  for  the 
rest  of  the  year,  H  added. 

Short  Takes 

AMERICA  ONLINE  INC..  MICRO 
SOFT  and  YAHOO  INC  said  they 
plan  to  work  together  to  try  to 
Bmit  the  amount  of  spam  mes¬ 
sages  originating  from  thek  e- 
mali  services. ...  Former  Bush 
administralioncybcrsecurityof- 
Bdal  Howard  Schmidt  said  he 
wM  become  vice  president  of 
security  at  EBAY  INC 


Oracle  Database  Users’ 
Interest  in  Linux  Grows 


C^onferoncv  nttcndecs  s;i\  thc\'  pl;in  to 
c\;tliiate  l)S.  despite  laek  of  applieations 


Dfsi'i  1 1  iHf  n-lalivi’ 
newness  of  corpo¬ 
rate  .ipplicaiions 
running  on 
Linux.  attcndiTs  .at  an 
Oracle  database  u.scr 
conference  last  week 
said  a  growing  number 
of  ct>mpanies  are  evaluating  or 
moving  into  production  with 
database  servers  running  the 
open-source  operating  system. 

"Linux  is  on  fire."  said  Rich 
Niemiec.  president  of  the 
Chicago-based  International 
Oracle  Users  Group  (lOUG  >. 

In  a  recent  surve>'  of  abtjut  100 
lOUG  members,  roughly  half 
indicated  that  they  wen.’  inter¬ 
ested  in  running  mission-criti¬ 
cal  Oracle  databases  on  Linux. 
Niemiec  said  at  the  indepen¬ 
dent  user  grttup's  annual  con¬ 
ference.  That's  up  from  only 
about  15%  in  a  survey  con¬ 
ducted  a  year  ago.  he  added. 

Niemiec.  who  is  also  CEO  of 
Lombard,  lll.-hased  TUSC,  an 
Oracle  consulting  and  sen  ices 
firm,  attributed  the  increase  in 
user  interest  to  Oracle  Corp.'s 
alliance  with  Linux  vendor 
Red  Hat  Inc.  and  its  support 
for  clu.stertng  Linux  machines 
via  il.s  Real  Application  Clus¬ 
ters  IRAC)  icchnolog\'. 

.Andrew  Mendelsohn,  senior 
vice  president  of  databa.se  and 
application  scix’er  technolo¬ 
gies  at  Oracle,  said  a.s  much  as 
15%  of  RAC  users  arc  running 
the  clustering  technology  on 
Linux  systems,  up  fwm  almost 
none  at  this  time  last  year. 

Among  the  companies  that 
are  using  Linux-based  Oracle 
databases  is  Aventis  Behnng 
LLC  a  maker  of  pharmaceuti¬ 
cals  in  King  of  Prussia.  Pa. 
fesse  Crew,  manager  of  global 
systems  at  AventLs  Behring, 
said  the  subsidiary  of  Paris-  I 
ba.<ved  Aventis  SA  is  running  I 
more  than  10  Hewlett-Packard  I 
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ProLiant  servers  equipped 
with  Red  Hat  Linux  and  Ora- 
cleHi  or  Oracle‘?i  databases. 

for  example,  Aventis  in  Feb¬ 
ruary  went  live  with  a  Linux 
system  that  supports 
accounts  receivable 
and  electronic  data  in¬ 
terchange  applications. 
It's  saving  thousands  of 
dollars  in  hardware,  software 
and  administratum  ct>sts  com¬ 
pared  with  using  high-end 
Unix  boxes.  Crew  said. 

"We're  not  sacrificing  relia¬ 


bility  or  availability.”  he  noted. 
"We  h.-iven’t  had  any  issues 
with  performance.  It  runs  just 
as  well  as  Unix." 

Hotvever,  the  change  did  re- 
I  quire  some  adjusimcms  on  the 
'  part  of  an  IT  staffer  who  was 
j  u.sed  to  w'orking  with  Windows 
sNMerns.  Crew  said.  More  ap¬ 
plication  vendors  need  to  sup¬ 
port  Linux,  he  added. 

Mendelsohn  said  Oracle  is 
working  “to  get  the  ball  roll¬ 
ing”  on  application  support. 
For  e.xample.  the  company  in 
March  announced  a  program 
for  providing  funding  to  soft¬ 
ware  vendors  that  agree  to 
port  their  products  to  Linu.x. 


H  We  haven't 
had  any  issues 
with  performance. 
[Linux]  runs  just  as 
well  as  Unix. 

JESSE  CREW.  mUbGlR  OF  GLOBAL 
SYSTEMS.  AVENTIS  BEHRING  LLC 

William  Maguire.  CIO  at 
Legato  Systems  Inc.,  a  Moun¬ 
tain  View,  Calif.-based  maker 
of  data  storage  software,  said 
he's  currently  testing  Oracie9i 
on  Linu.x.  "The  reliability  and 
performance  is  proven  now." 
said  Maguire,  although  he  has 
not  set  any  rollout  plams  yet.  • 


BETTDiMAIIA6EMENT 

Oracle  last  week  detailed  plans  to  upgrade 
its  database  management  tools 
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Canadian  Privacy  Law 
Deadiine  Approaching 


LLS.  companie.s 
must  comply  b\' 
first  of  the  vear 


av  aAlKUMAR  ViaAVAN 

The  clock  is  winding  down  for 
US.  companies  that  exchange 
data  with  other  businesses 
and  subsidiaries  in  Canada  to 
comply  with  a  law  pmviding 
broad  privacy  protections  for 
Canadian  citizens. 

Beginning  |an.  1. 2004,  all 
companies  that  collect,  use  or 
disclose  personal  information 
about  Canadian  citizens  dur¬ 
ing  the  course  of  commercial 
activities  will  have  to  comply 
with  Canada's  Personal  Inhrr- 
mation  Protection  and  Elec¬ 
tronic  Documents  Act. 

“Since  Canada  is  our  largest 
trading  partner,  a  lot  of  com¬ 
panies  will  be  affected  by 
this."  said  Mark  Rasch,  former 
head  of  the  U.S.  Department 
of  Justice's  computer  crimes 
unit  and  senior  vice  president 
at  Solutionary  Inc.,  a  security 
consultancy  in  Omaha. 

The  act  is  already  in  effect 
for  hanks,  airlines,  transporta¬ 


tion  companies  and  telecom¬ 
munications  firms.  It  requires 
businesses  to  offer  C,inadian 
citizens  certain  guarantees  re¬ 
garding  the  collection  and  use 
of  personal  data  (see  box). 

It  will  be  a  violation  to  col- 
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lect  data  in  Canada  and  then 
transfer  it  out  of  the  countrj'. 
unless  the  transfer  carries 
with  it  the  same  level  of  pro¬ 
tection  th.it’s  required  in 
Canada.  Rasch  said. 

The  law  requires  US  compa¬ 
nies  to  n’visc  online  consumer- 
consent  screcits  and  policies, 
call  center  pnK'edures.  and 
processes  for  rect)rding  .ind 
maintaining  consent  records, 
said  Robert  Parker,  a  partner 
at  Dcloitte  &  Touche  LLP  in 
Ton>nto.  It  also  requires  com¬ 
panies  to  protect  the  physical 
integrit)'  of  the  data  with  ade¬ 
quate  security  and  privacy- 
measures.  Parker  said. 

Canadian  companies  shar¬ 
ing  data  with  US  businesses 
must  also  “ensure  the  US.  re¬ 
cipient  commits,  by  contract 
or  otherwise,  to  the  same  stan¬ 
dards  imposed  by  1  the  privacy 
act]."  said  Michael  Miasek,  an 
attorney  in  the  Toronto  office 
of  Baker  5c  McKenzie,  a  Chica¬ 
go-based  law  firm  that's  help¬ 
ing  U.S.  companies  comply 
with  the  act. 

Since  the  rules  retroactively 
apply  to  data  collected  prior 
to  January  2004.  companies 
will  need  to  determine  when 
and  how  they  collected  any 
data  they  may  have  on  (Canadi¬ 
an  citizens  and  how  it's  being 
used,  privacy  experts  said,  k 
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Division  Over  Web  Services 
Standards  Work  Stirs  Debate 


IBM.  Microsoft  choose  OASIS  cner  \\3C 


BY  CAROL  SLIWA 

More  than  a  few  feathers  were 
ruffled  when  the  Organization 
for  the  Advancement  of  Struc¬ 
tured  Information  Standards 
(OASIS)  announced  last  week 
that  a  technical  committee 
formed  to  standardize  the 
Business  Process  Execution 
Language  for  Web  Sersices 
(BPEL4WS)  would  hold  its 
first  meeting  later  this  month. 

Debate  has  been  heated 


since  it  became  clear  that  Mi¬ 
crosoft  Corp.  and  IBM  would 
submit  to  OASIS,  under  royal- 
r\'-frec  terms,  the  BPEL4WS  l.l 
specification  they  co-authored 
with  BEA  Systems  Inc..  SAP 
AG  and  Siebel  Systems  Inc. 

That's  because  another 
leading  standards  body,  the 
World  Wide  Web  Consortium 
(W.^C),  had  already  estab¬ 
lished  a  choreography  work¬ 
ing  gn>up  to  address  the  simi¬ 


lar  issues  of  di^scribing.  man¬ 
aging  and  executing  business 
priKresses  that  are  composed 
of  Web  services.  The  W.?C's 
specification  is  called  the  Web 
Scrs'ices  Choreography  Inter¬ 
face.  or  WSCL 

Oracle  Corp..  which  c<v- 
chairs  the  W3C's  choreogra¬ 
phy  working  group,  said  it  has 
worked  hard  —  to  date.  io  no 
avail  —  to  encourage  IBM  and 
Microsoft  to  bring  BPEL4WS 
to  the  W3C. 

"We  were  not  enthusiastic 


IBM  Expands  Grid 
Computing  Offerings 


But  it  diK'snt  expect 
big  demand  until 
standards  are  set 

BY  PATRICK  THIBODEAU 

IBM  last  week  expanded  its 
industry-specific  grid  comput¬ 
ing  offerings,  even  while  it  ac¬ 
knowledged  that  widespread 
adoption  of  grid  technology 
won't  accelerate  until  stan¬ 
dards  w’ork  is  complete. 

The  Global  Grid  Forum  in 
Argonne.  III.,  which  is  devel¬ 
oping  grid  specifications,  is 
about  a  year  away  from  pro¬ 
ducing  enough  of  them  to  sim¬ 
plify  development  work.  The 
standards  arc  intended  to  pro¬ 
vide  developers  with  the  basic 
plumbing  of  a  grid  environ¬ 
ment.  such  as  a  common  way 
for  applications  to  discover 
what  resources  are  available 
on  a  network  and  the  proto¬ 
cols  to  access  them. 

Commercial  Potential 

Early  grid-computing  use  has 
been  in  technical  areas,  such 
as  science  and  engineering. 

But  commercial  adoptions  arc 
coming. 

One  early  adopter  is  David 
Dibble,  executive  vice  presi¬ 
dent  at  Charles  Schwab  &  Co.’s 


technology  service.  He  has 
been  testing  an  IBM  grid  on  an 
application  that  advises  clients 
on  investment  strategies.  The 
forecaster  operates  as  a  giant 
simulator.  By  using  grid  proc¬ 
esses.  San  Francisco-based 
Schwab  has  been  able  to  re¬ 
duce  a  i5-minute  computation¬ 
al  process  to  a  few  seconds. 

Based  on  his  experience. 
Dibble  said  he's  convinced  that 
grid  approaches 
will  be  widely 
adopted.  “I  be¬ 
lieve  the  future 
will  be  nct- 
workcd'based 
ct>mputing.''  he 
said.  “The  days  of 
one  application 
owning  a  box . . . 
arc  gone.  Compa¬ 
nies  have  got  to 
face  up  to  the 
new  business  reality’  that  a  dol¬ 
lar  has  to  go  much  further  to¬ 
day  than  it  ever  did  in  the  past.“ 

Dibble  said  he  expeas  grid 
computing  to  reduce  costs,  es¬ 
pecially  for  hardware.  “TTicre's 
no  question  about  it  —  huge 
savings  through  better  utUiza- 
rion.”  he  said.  He  noted  that  he 
sees  little  risk  in  implement¬ 
ing  grid  processes  before  stan¬ 
dards  arc  complete  because  he 


insists  that  whatever  his  ven¬ 
dors  move  to  production  is 
based  on  open  standards. 

The  intent  of  grid  comput¬ 
ing  is  to  harness  unused  com¬ 
puting  power  that’s  .ivailable 
in  mainframes,  .servers  and 
desktops  and  apply  it  in  super- 
computerlike  fashion  to  com¬ 
puting  problems. 

“If  you  look  at  server  uti¬ 
lization  in  an  enterprise,  there 
is  a  lot  of  untapped  potential." 
said  Dan  Powers,  IBM’s  vice 
president  for  grid  computing. 
“Windows  desktops  and 
servers  arc  used  anywhere  be¬ 
tween  5S  and  10%  of  the  time 
over  a  24-hour 
period:  Unix 
servers  are 
(used)  anyw’herc 
between  lO^w 
and  20%"  over 
that  same  peri¬ 
od.  he  said. 

PowtTS  noted 
that  he  believes 
interest  in  grid 
computing  will 
accelerate  once 
standards  work  is  completed. 

Charlie  Catlett,  head  of  the 
Global  Grid  Forum,  said  one 
thing  standards  will  accom¬ 
plish  is  increasing  the  number 
of  grid-enabled  appHcatioas  by 
lowering  the  barrier  to  entry, 
especially  for  smaller  compa¬ 
nies.  Without  standards,  com¬ 
panies  have  to  write  “soup-l*.*- 
nuts  solutions"  to  make  them 
w’ork.  Catlett  said.  * 
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about  Microsoft  .inJ  IBM 
g«ung  to  UASIS."  said  Dt)n 
Dvutsch.  vice  president  of 
st,indards  strategy  at  Oracle 
“Prim.irily.  our  rationale  was 
wc  Icared  fragmeniation  in  the 
Web  services  space.  Whentw- 
or  there  are  multiple  activities 
in  the  same  technical  space, 
there  is  a  danger  that  they  will 
vnerlap  and  compiHc.  And  if 
that  happens,  a  likely  n.-sult  is 
confusion  in  the  marketplace, 
and  everyNniy  loses  " 

Not  Taking  Sides 

N«m-  it  will  apparently  fall  tii 
ct»mpanies  such  as  Oracle. 

BEA.  SAP  and  Sun  .MiertTsys- 
tems  Inc.  to  monitor  the’  two 
guiups  and  make  sure  their 
work  is  complementary-  Those 
are  some  of  the  vcndtirs  that 
have  indic.-tted  their  intention 
to  sit  on  both  the  W.U'.'s  chore¬ 
ography  working  group  and 
the  OASIS  technical  commit¬ 
tee  lor  BPEL4WS.  which  will 
hold  its  first  meeting  May  16. 

“Sun  is  going  to  try  to  take 
the  high  road  here.  We’re  go¬ 
ing  to  try’  to  find  alignment  be¬ 
tween  these  two  elTons.  At  the 
end  of  the  day.  the  industry 
needs  only  one  specification 
I  for  Web  services  choreogra¬ 
phy,"  said  Ed  lulson.  Sun's 
group  manager  of  Web  ser¬ 
vices  standards  and  technolo¬ 
gies.  Sun  worked  with  BEA. 

SAP  and  Inialio  Inc.  on  WSCL 
which  lulson  said  "ha-s  more 
stmilariiies  than  dilTervnces" 
with  BPEL 

Representatives  from  IBM 
and  Microsoft  said  last  w'oek 
that  they  have  no  plans  to  act 
I  on  invitations  to  join  the 
j  W3C’s  choreograph)  wxirking 
group.  Steven  VanRtickcl.  Web 
I  services  marketing  director  ai 
I  Micr»>soft.  said  tlw  company 
might  join  the  W3C  group  at  a 
later  date. 

But  VanKoekcl  also  said 
Microsoft  feels  that  Billerica. 
Mass. -based  OASIS  is  a  gotid  ' 

place  for  higher-level  specifi-  I 

cations  such  a.s  BPEL.  He  said  ' 
the  W3C  typically  handles 
lower-,  plumbing-level  stan¬ 
dards  such  as  XML  and  SOAP. 
He  also  noted  that  the  scope  I 

I  ofihe  W3C’.schorc<^raphy  I 

I  group  is  broader  than  that  of  | 
j  the  BPEL  committee.  I 

I  Karla  Norsworthy.  who  I 
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I  takes  an  active  role  in  stan- 
I  dards  work  as  (he  director  of 
dynamic  c-business  (echnolo- 
'  gies  at  IBM.  said  her  company 
j  won't  participate  in  Knh  the 
j  OASIS  and  W.^C  groups  be- 
I  cause  its  “first  fivus  is  on 
I  BPEL"  She  didn’t  rule  out  the 
possibility  that  the  decision 
aiuld  be  reN'isited.  ht»wever. 

Norsworthy  added  that  it 
will  take  hard  work  to  make 
sure  there  is  a  single  standard 
that  every  vendor  implements, 
and  she  noted  that  BE.A.  SAP. 
Oracle  and  other  companies 
will  participate  in  both  the 
j  OASIS  and  W3C  groups  that 
deal  with  the  topic. 

I  “They're  definitely  putting 
I  the  burden  on  someone  else  to 
fix  the  problem  they’re  CTvat- 
'  ing,"  said  Eric  Newcomer  chief 
j  technology  officer  at  Iona 
Technologies  PLC  in  Dublin. 

Newcomer,  who  »'nes  as 
editor  of  the  W.KT's  Web  ser¬ 
vices  architecture  wx>rkjng 
group,  said  his  oimpany  b> 
"definitely  disappointed  aKnii 
this  sign  of  fragmentation  in 
I  (he  community." 

I  He  said  threats  of  diver- 
I  gence  have  surfaced  before, 
but  this  marks  the  first  time 
.m  "explicitly  overlappuig" 
charter  was  set  up  in  an  area 
where  a  working  gnnip  was  al¬ 
ready  established.  I 
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Oracle  Patches 
DB  Security  Hole 

Orad*  Corp.  ralMMd  a  software 
patch  for  a  saeurtty  vukwrabilty 
that  aftaeta  Ka  OracMI  and  Or^ 
da9l  datahaaaa.  AWachari  coutd 
uaa  ttw  hoftor  ovariow  flaw  to 
compromiia  data  or  taha  control 
of  aanrera,  lha  eanpony  aaM. 
Syalam  Midd  hawa  to  be  con* 
nadsd  dbacfty  Id  the  bilwnat 
wWmmA  ftrewal  protacdon  to  be 
aftachad,  Orada  noted. 


Microsoft  Issues 
Security  Guides 

Iftcrosoft  Corp.  ralaaaad  a  guida 
that's  dasiinad  to  help  systsma 
adtiMatoatora  saeura  cornputera 
rwnjfig  Na  naw  WindowB  Sarvar 
2008  oparattog  ayatam.  Tha 
eompany  aloe  rahisusd  a  shnilar 
doctanont  for  Windows  2000. 
Tha  guUsa  pradda  Mnicttona 
on  hew  to  saeuraiy  sat  up  tha 
two  oparadna  ayatsms  and  rnith 
gala  various  aftado,  Mleroaoft 
ofReWs  aafd.  Beth  can  ba  down* 
toadad  from  tha  company’s 
Web  aba. 


IBM  Denies 
SCO's  Charges 

to  a  Hng  subodttad  to  lha  U.S. 
OWrid  Cowt  to  UWi.  BM  daniad 
frada-sacrat  thaft  aBogationi 
todgad  agatost  it  to  March  by  Tha 
SCO  Oroup*  BM  aaU  it  "has  not 
angagsd  to  any  wrengdotog*  or 
hraarhadibUntotoctoidogyi- 
canatog  contract  with  SCO.  Lto- 
don.  Utdr-bttsd  SCO  daimad 
toftstowaidtthalBMwasIto- 
galy  ustog  Unto  coda  as  part  of 


Server  Sales  Rise, 
Handhelds  Decline 


reaa  10%  year  ovor  yaar  to  tha 
Aral  qnartor.  reachtog  a  talat  of 
12  miBen  ayilama.  accorttog  to 
naliipwif  toe.  But  San  Joaa- 
hnaod  Ontaqnost  saM  sMproants 
of  handhold  dovteos  tsi  11%  to 
lhtguar1srlo2JmBonunil8.  I 


MARK  HALL  •  ON  THE  MARK 

Storage  Vendors’ 
Wild  West  Mentality. . . 

...  is  working  against  users’  interests  when  it  comes  to  interoperabil¬ 
ity  standards,  rails  Jon  William  Toigo,  consultant,  author,  columnist 
and,  starting  tomorrow,  founder  and  acting  chairman  of  the  Data  Man¬ 
agement  Institute  (DMI).  Efforts  by  groups  like  the  Storage  Network¬ 
ing  Industry  Association  to  create  workable  standards  are  hampered 
by  vendors  constiiitly  taking  potshots  at  each  other  for  competitive  advan¬ 
tage,  which  is  why  the  DMI  is  needed,  he  argues.  Toigo  says  his  group 


won't  accept  vendors  as  members,  “al¬ 
though  if  they  want  to  subscribe  to  a 
newsletter  or  buy  a  white  paper.  1  don't 
care.”  The  DMI  will  also  evaluate  vendor 
interoperability  claims  by  testing  their 
gear  inside  user  data  centers,  then  pub¬ 
lish  the  results,  Toigo  says.  He  believes 
those  published  results 
wMBiMy  bring  onvondor 
lawaufta.  which  is  why 
be  has  located  he  DMI 
in  his  hometown  of 
Dunedin.  Fla.  Florida, 
be  says,  has  an  anti¬ 
nuisance-lawsuit  statute, 
which  should  shield  him 
from  vendors’  lawyers. 

The  commute  isn't  so 
bad.  either.  •  Tony  Barb- 
agallo,  VP  of  worldwide 
marketing  for  backup 
sofhvare  provider  Dantz 
Development  Corp.  in 
Orinda.  Calif,  agrees 
that  the  DMI  confronts 
“a  huge  issue  in  storage 
resource  management." 

But  he  thinks  its  charter 
won't  affect  his  end  of 
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the  storage  industry,  where  operating 
system  monopolies  —  uh,  that  is,  OS 
standards  —  matter  most.  “We  follow  the 
APIs,"  he  says.  That’s  why  tomorrow  the 
company  will  release  Dantz  Retrospea 
6.5  for  Microsoft  Windows.  The  upgrade 
backs  up  flies  faster  because  it  streams 
multiple  backup  ses¬ 
sions  to  multiple  tapes 
simultaneousty.  It's  de¬ 
signed  tobockupMtoro- 
•oft  Enhango  at  Bm  maB* 
tonlavaland  to  be  fully 
compatible  with  the  .Net 
functions  in  Windows 
Server  2003.  ■  Speaking 
of  .Net  brings  to  mind 
Web  services  and  how 
Biay’re  catohtog  on  -  albeA, 
to  amal  Mya  liret  vffth 
more  complex  services 
coming  in  time.  That’s 
the  strategy  of  Wayne 
Aiello.  VP  of  e-business 
services  at  Corporate 
Express  Inc.  The  Broom¬ 
field,  Colo.,  office  prod¬ 
ucts  company  handles 
about  30,000  online  or- 


[  ders  per  day.  While  individual  orders  are 
pretty  small,  only  about  $150.  they  add  up 
to  more  than  SI  hMon  a  yoar  for  tho  company. 
Aiello  doesn't  think  EDI  is  “less  capable 
than  XML,"  but  all  the  B2B  action 
tween  Corporate  Express  and  its  cus¬ 
tomers  b  in  emerging  Web  services.  Ini¬ 
tially.  Corporate  Express  leaned  on  its  in¬ 
tegrator,  The  Ultimate  Software  Consul¬ 
tants  in  Lombard,  III.  to  set  up  XML- 
based  data  exchanges  between  its  Oracle 
back-end  systems  and  the  2S  different 
customer  applications.  Now,  after  some 
intensive  training,  Aiello's  team  is  inte¬ 
grating  eight  to  10  companies  per  month 
on  its  own.  The  next  phase  for  Corporate 
Express  will  include  SOAP  Intoradtont  that 
wfll  onabto  customors  to  generate  purchase 
orders  from  their  systems  based  on  data 
coming  from  Corporate  Express.  •  As 
Web  servicfTS-based  applications  get 
more  complex,  tools  such  as  Ultimus 
Web  Services,  which  will  be  released 
today  as  part  of  the  Ultimus  Workflovs- 
Suite,  will  become  ail  the  rage.  But  Ul¬ 
timus  lnc.'$  CEO.  Rashid  Khan,  thinks 
Web  services ‘\riitokiafMthortvw  to  fire 
yearetorealycaldioft."  StUL  the  Cary, 

NX).,  vendor  is  shipping  its  new  tool  now 
with  advanced  business  process  manage¬ 
ment  features  and  says  the  software  runs 
on  any  J^et-capable  Windows  server. 

•  One  of  the  few  bright  spots  in  the  dtoi 
IT  markotplaco  today  is  Wi-Fl  (See  Special 
Report,  page  27.)  That's  why  Info  Vista 
Corp.  in  New  Yoik  will  rele^  on  May  15 
the  VistaDiscovery  module  for  its  Vista- 
Portal  product.  The  tool  is  design  to 
automatically  detect  wireless  devices 
and  access  points  on  your  network,  so 
you  can  manage  them  through  the  Vista 
Operations  Center  And  a  new  Wi-R 
Vista  Viewer  tallies  authentication  at¬ 
tempts  to  your  wireless  network.  gMng 
you  an  toUtog  thto  your  Mtworfc  tnay  bo 
broachod  by  bad  guyt.  ft 


High-Tech  CEOs  Confront  New  Reality 


BV  LINDA  noSENCBANCC 

The  high-tech  industry  is 
facing  a  new  reality  of  stiff 
competition,  economic  uncer¬ 
tainty  and  global  instability, 
all  of  which  have  CEOs  zero¬ 
ing  in  on  the  bottom  line,  ac¬ 
cording  to  a  survey  being  re¬ 
leased  tomorrow. 

The  survey,  conducted  dur¬ 
ing  the  first  quaner  by  the 
Technology,  Media  &  Tele- 
communications  Group  of  San 
Jose-based  Deloitte  &  Touche 
LLP,  was  directed  at  CEOs  of 
the  500  fastest-growing  tech¬ 


nology  companies  in  North 
America.  The  survey  found 
that  although  CEOs  are  opti¬ 
mistic  about  the  future,  they 
recognize  that  a  fundamental 
shift  in  the  marketplace  has 
occurred. 

Bur  there’s  an  opportunity 
to  take  advantage  of  short¬ 
sightedness  in  the  market 
by  paying  more  attention  to 
undervalued  assets,  technol¬ 
ogies.  skills  and  individuals, 
and  applying  them  to  create 
truly  valuable  offerings,  said 
Ryan  McDonald,  CEO  at  Im¬ 


pact  Blue  Inc.  in  Calgary,  Al¬ 
berta.  The  trick,  he  said,  is  to 
do  it  now  while  the  competi¬ 
tion  is  either  struggling  or 
waiting  for  change. 

McDonald  said  his  com¬ 
pany's  primary  efforts  to  deal 
with  this  new  reality  include 
reducing  seitior  management 
staff,  narrowing  research  and 
development  efforts,  improv¬ 
ing  cash  management  and  op¬ 
timizing  production. 

Russ  Hawkins.  CEO  of 
Paragon  Networks  in  Brook- 
Held.  Conn.,  said  one  of  the 


ways  his  company  is  handling 
the  downturn  is  by  looking  to 
acquire  new  products  rather 
than  enduring  the  risk  and 
time  to  build  everythit^  He 
said  that  although  some  inter¬ 
nal  development  is  still  being 
done,  the  focus  is  on  acquiring 
proven  products. 

John  Fish,  CEO  of  Chicago- 
based  Hubbard  One.  said  his 
company  doesn't  view  its  bot¬ 
tom  line  as  a  target  “In  any 
economic  climate,  we  believe 
the  focus  must  be  on  your  ctis- 
tomers,”  he  said.  “We  operate 
carefully,  and  we  focus  on  our 
clients.  That  simple  strategy 
has  woriced  wonders  for  us.”  ft 


^  ROBUST  OBJECT  DATABASE 
^  HIGH  PERFORMANCE  SQL 

^  MULTIDIMENSIONAL  ACCESS 


Our  post-relationaT database. 

The  end  of  object-relational  mapping. 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cach^,  the  post-relational  database. 

What  makes  Cach^  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  appUcations  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cache 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cach^  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the  largest 
hospitals.  Cach^  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  -  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support  to 
four  million  users  in  88  ,  « 

countries.  Cach^  is  available  ■  ■  -  — 

for  Windows,  Open  VMS, 

Mac  OS  X,  Linux  and 
major  UNIX  platforms.  Hake  Apptieationt  Faster 


InterSystems^ 

^  CACHE 


Download  a  fuHy^nokmal  version  of  Cachi  or  request  it  on  CD  fiir  free  at  wvnr.lnterSvstems.com/Oost-relational 


CA  Joins  Push  to  Support 
On-Demand  Computing 


L'niccMtLT  tiKils  the  latest  ti)  enter  thiN 
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.  AS  vf  liAS 

I  f  K  AsstK-ialcs 
International  Ine 
last  weekgnmped 
li>gether  six  Unieen- 
ter  management  software 
(tNtls  in  a  bid  tu  give  users 
on-demand  eompiiiing  eapa- 
bilities  without  requiring 
them  to  nuke  expensKe  up¬ 
grades  to  IT  infrastructures. 

At  the  Net\vorld'Interi*p 
conference  here.  CA  an¬ 
nounced  iw  11  new  pr«iduets 
and  four  upgraded  om.'s  that  it 
said  can  support  on-demand, 
or  juiofHimic.  computing  ap¬ 
plications.  C.ompanies  can  buy 
the  (tKils  separately  and  use 
them  to  designate  sc-rvers  and 
network  dtwiecs  to  run  eriticai 
applications  and  rcailoeatc 
computing  rcstmrecs  as  busi¬ 
ness  needs  change.  CA  said. 

CA  Is  the  latest  in  a  .string  of 
vendors  to  offer  on-demand 
technolog)-.  But  CEO  Sanjay 
Kumar  s;iid  the  Uniccnicr 


,  running  Oracle  financial  ap- 
I  plications  arc  commonly  over¬ 
burdened.  re.sulting  in  "ago¬ 
nizing  delays,  like  two  hours 
to  order  a  pad  of  paper.”  she 
added.  CSX  oOlcials  hope  the 
Unicenter  tools  will  let  them 
allocate  resources  more  even¬ 
ly  across  different  servers  and 
lower  the  number  of  systems 
needed,  human  said. 

Increasing  Efficiency 

.  AXA  Group,  a  Paris-based  fi¬ 
nancial  services  conglomerate. 
I  is  looking  at  using  CA’-sttxils 
to  manage  a  eompic.s  IT  envi- 
I  ronment  that  suppt'rts  various 
operating  companies.  Charlie 
Carroll,  a  senior  vice  presi¬ 
dent  at  the  company's  AXA 
Tech  divisiiin.  said  the  soft- 
waa*  should  let  AXA  bill  indi¬ 
vidual  business  units  for  their 
system  usage  instead  ofjust 
averaging  IT  lmsis  across  all 
operations,  “it  would  K*  pay- 
by-the-drink."  he  said. 

Another  new  function  is  de¬ 


signed  to  provide  more  effi¬ 
cient  desktop  PC  upgradi*s,  a 
capability  that  the  Waller 
Kecd  Army  Medical  <.A*nier  in 
Washington  is  evaluating.  In 
some  fc'ases.  W'alter  Reed 
ni-eds  to  upgrade  1.200  PCs  in 
three  days,  M.magement  tools 
that  can  track  the  software 
configurations  on  systems  and 
centrally  distribute  new  ones 
would  simplify  the  upgrades, 
said  leffrey  Gfildberg,  .i  senior 
management  specialist  at 
Washington-ha.sod  Manage¬ 
ment  Soluiion-s  &  Systems 
Ine..  which  does  contract  work 
for  Walter  Reed, 

The  market  for  on-demand 
computing  stifiware  is  heating 
up.  said  Kick  Sturm,  an  analyst 
at  Enterprise  Management  As- 
S4>ci3tes  Ine.  in  Boulder.  Colo. 
Other  vendors  with  autonom¬ 
ic  computing  initiatives  in¬ 
clude  IBM.  Hewlett-Packard 
('o.,  Micrtisofi  Corp.  and  .Sun 
Microsystems  Inc.  Bui  CA 
shtiuld  have  an  advantage  be¬ 
cause  its  itKil.s  deal  with  a 
wider  range  of  issues  and  are 
hardware-neutral.  Sturm  said.  I 


Gupta  Says  ‘Optimal  Utilization’ 
Of  Resources  Goal  of  New  Tools 


SYogesh  Gup¬ 
ta.  CA  s  chief 
technology 
offtcet.  spoke 
with  Compul- 
erworkfs 
Matt  Ham¬ 
blen  at  N-^l 
about  the 
vendor's  on- 

demand  computing  strategy. 


What  is  new  about  these  Uni¬ 
center  tools,  and  how  does 
CA  define  on-demand  com¬ 
puting?  ReaiV.  one  of  the  big 
issues  that  comes  up  is  that 
customers  have  large  numbers 
of  servers  that  are  underutilized. 
That  means  there's  tremendous 
opportunity  if  wodt  can  be  done 
to  use  those  servers  better. 
What  the  six  products  work  to¬ 
gether  to  do  IS  identify  and  keep 
track  of  resources  at  any  given 
point  in  time. 


rate  products  within  Unicenter 
two  years  ago.  and  it  has 
worked  well.  But  all  these 
pieces  work  well  together. 

Is  the  software  really  self* 
healir^?  When  a  server  tails, 
we  try  to  bnng  it  [back]  online, 
and  if  we  can't,  the  software 
will  aulomatically  allocate  a  dif¬ 
ferent  server  to  do  the  vtwk. 
But  it's  more  than  self-healing. 
It's  optimal  utilization  of  net¬ 
works  and  systems. 

Are  you  late  with  on- 
demarNi  computing  com¬ 
pared  wHh  IBM  and  other 
vendors?  if  you  want  to  talk 
about  the  rtietonc.  we're  defi¬ 
nitely  late  with  the  rhetonc  - 
but  first  with  real  products.  Wc 
made  a  conscious  deci»on  we 
would  not  tatk  about  autonomic 
computing  until  the  day  we  had 
products. 


Why  not  mahet  them  as  a 
unifiod  suHe?  They're  sold  as 
separate  products  so  cus¬ 
tomers  can  license  one  or 
more  We  decided  to  sell  sepa- 
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Boiland  to  Launch  Tools  for 
Microsoft’s  .Net  Framework 


\L-ill  work  with  systems 
from  a  variety  <>f  other  ven¬ 
dors.  so  users  won't  have  to 
tear  out  existing  hardware  to 
add  on-demand  capabilitit-s. 

CSX  Technology  Inc.  wants 
to  eliminate  some  of  the  hun¬ 
dreds  of  serx'ers  it  has  in¬ 
stalled  at  facilities  throughout 
the  VS.,  partly  because  the 
systems  are  hard  to  provision, 
said  Cvmhia  Luman,  vice 
president  of  operations  ai  the 
facksonville.  Fix-based  IT  di¬ 
vision  of  C.SX  Corp. 

In  addition,  many  of  the 
servers  are  ust*d  at  only  15%  of 
their  prrx'essing  capacity. 

1  uman  said.  But  some  systems 
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'  BV  CAROL  SLIWA 

j  Developers  will  gain  new  op- 
,  lions  for  building  applications 
designed  to  run  on  Microsoft 
Corp.'s  .Net  Framework  and 
connecting  those  applications 
to  systems  in  Java  environ¬ 
ments  when  Borland  Software 
Corp.  ships  new  pn*ducts 
starting  next  month. 

The  Scoits  Valley.  Calif.- 
bxsed  software  m.'ikcr  tomor¬ 
row  plans  to  announce  its  C» 
Builder  integrated  develop¬ 
ment  environment,  w’hich  is 
intended  to  lei  developers 
make  use  of  the  .Net  f  rame¬ 
work’s  class  libraries. 

Hk  Borland  tool,  due  this 
summer,  will  feature  de.sign- 
driven  development  capabili- 


iie.s  and  native  support  for 
databases  from  Microsoft.  Or¬ 
acle  Corp.  and  IBM.  as  well  as 
Borland's  own  InicrBase. 

Alstt  tomorrow.  Borland  will 
announce  a  new  product 
called  l.-meva  that's  dt'signed 
enable  client-  and  server- 
basc-d  applications  written  for 
Microsoft's  .Net  Framework  to 
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integrate  with  back-ofilce  sys¬ 
tems  ihmugh  the  Internet 
Inter-ORB  I’rotocid  (HOP). 
Due  in  June,  laneva  is  based 
on  J2EF.  and  Common  Object 
Request  Broker  Architecture 
(CORBA)  iechnt»h>gics. 

Boz  Elloy.  vice  president 
and  general  manager  of  Bor¬ 
land's  enterprise  business 
unit,  said  the  difference  be¬ 
tween  using  laneva  and  using 
Web  services  or  bridge  tech¬ 
nology  is  that  laneva  requires 
no  additional  investment. 

“We  want  to  make  sure 
we're  not  requiring  .Net  devel¬ 
opers  to  use  any  new  technol¬ 
ogy."  he  said.  “We  alst>  don't 
want  to  rt^quirc  any  modifica¬ 
tions  to  back-end  logic.' 

Thomas  Murphy,  an  analyst 
at  Stamford.  Conn. -based 
Meta  Group  Inc.,  added  that 
the  MOP  option  may  be  better 
when  performance  is  an  issue. 


He  also  said  laneva  will  be  im¬ 
portant  for  users  with  existing 
CORBA  investments. 

laneva  will  support  all  lan¬ 
guages  that  run  on  Microsoft's 
-Net  Framework,  including  C». 
IS.  Visual  Basic  .Net  and  Del¬ 
phi.  according  to  Borland. 

Simon  Thornhill,  vice  presi¬ 
dent  and  general  manager  of 
Borland's  .Net  business  unit, 
said  the  development  aspects 
of  laneva  will  be  incorporated 
into  Ca  Builder.  The  product 
will  provide  some  support  for 
Visual  Basic  .Net.  and  Borland 
plans  to  add  other  languages 
in  the  future,  said  Thornhill. 

Borland  will  also  announce 
tomorrow  Enterprise  Server, 
'I'eam  Edition,  a  |2EE  deploy¬ 
ment  platform  for  small  and 
midsize  businesses  and  de¬ 
partments  in  large  companies, 
said  Elloy.  Due  in  early  June, 
it's  priced  at  S1.99S  per  CPU.  • 
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CA  Joins  Push  to  Support 
On-Demand  Computing 


GigitaSays  1)|rthnal  Utizalkm’ 
Of  Resouroes  Goal  of  New  Tools 


Unicenter  tools  the  latest  to  enter  firav 


COMPUTER  Associates 
International  Inc. 
last  week  grouped 
together  six  Umcen- 
ter  management  software 
tools  in  a  bid  to  give  users 
on-demand  computing  capa¬ 
bilities  without  requiring 
them  to  make  expensive  up¬ 
grades  to  IT  infrastructures. 

At  the  Networid*Interop 
conference  here.  an¬ 
nounced  two  new  products 
and  four  upgraded  ones  that  it 
said  can  support  on-demand, 
or  autonomic,  computing  ap¬ 
plications.  Companies  can  buy 
the  tools  separately  and  use 
them  to  designate  servers  and 
network  devices  to  run  critical 
applications  and  reallocate 
computing  resources  as  busi¬ 
ness  needs  change.  CA  said. 

CA  is  the  latest  in  a  string  of 
vendors  to  offer  on-demand 
technology.  But  CEO  Saniay 
Kumar  said  the  Uniceoter 
tools  will  work  with  systems 
from  a  variety  of  other  ven¬ 
dors,  so  users  won’t  have  to 
tear  out  existing  hardware  to 
add  DD-demand  capabilities. 

CSX  Technology  Inc.  wants 
to  eliminate  some  of  the  hun¬ 
dreds  of  servers  it  has  in¬ 
stalled  at  facilities  throughout 
the  U.S..  partly  because  the 
systems  are  hard  to  provision, 
said  Cynthia  Luman.  vice 
president  of  operations  at  the 
lacksonviUe,  Fla.-based  IT  di¬ 
vision  of  CSX  Corp. 

In  addition,  many  of  the 
servers  are  used  at  only  15%  of 
their  processing  capacity, 
Luman  said.  But  some  systems 
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running  Oracle  Anancial  ap¬ 
plications  are  commonly  over¬ 
burdened,  resulting  in  “agi)- 
nizing  delays,  like  two  hours 
to  order  a  pad  of  paper.”  she 
added.  CSX  officials  ht^  the 
Unicenter  tools  will  let  them 
allocate  resources  more  even¬ 
ly  across  different  servers  and 
lower  the  number  of  systems 
needed.  Luman  said. 

Increasing  Efficiency 

AXA  Group,  a  Paris-based  fi¬ 
nancial  services  conglomerate, 
is  looking  at  using  CA’s  tools 
to  manage  a  complex  IT  envi¬ 
ronment  that  supports  various 
operating  companies.  Charlie 
CarrolL  a  senior  vice  presi¬ 
dent  at  the  company’s  AXA 
Tech  division,  s^  the  soft¬ 
ware  ^uld  let  AXA  bill  indi¬ 
vidual  business  units  for  their 
system  usage  instead  of  just 
averaging  IT  costs  across  all 
operations.  ”!t  would  be  pay- 
by-the-drink.”  he  said. 

Another  new  function  is  de¬ 


signed  to  provide  more  effi¬ 
cient  desktop  PC  upgrades,  a 
capability  that  the  Walter 
Reed  Army  Medical  Center  in 
Washington  is  evaluating.  In 
some  cases.  Waiter  Reed 
needs  to  upgrade  1.200  PCs  in 
three  days.  Management  toob 
that  can  track  the  software 
configurations  on  systems  and 
centrally  distribute  new  ones 
would  simplify  the  upgrades, 
said  Jeffrey  Goldberg,  a  senior 
management  specialist  at 
Washington-based  Manage¬ 
ment  Solutions  &  Systems 
Inc.,  which  does  contract  work 
for  Walter  Reed. 

The  market  for  on-demand 
computing  software  is  heating 
up,  said  Rkk  Sturm,  an  analyst 
at  Enterprise  Management  As¬ 
sociates  Inc.  in  Boulder,  Cola 
Other  vendors  with  autonom¬ 
ic  computing  initiatives  in¬ 
clude  IBM.  Hewlett-Packard 
Co..  Microsoft  Corp.  and  Sun 
Microsystems  Inc.  But  CA 
should  have  an  advantage  be¬ 
cause  its  toob  deal  with  a 
wider  range  of  issues  and  are 
hardware-neutral.  Sturm  said.  I 
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gether  to  do  is  idenHIy  and  keep 
track  of  resoifcss  at  any  given 
point  in  time. 
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Borland  to  Launch  Tools  for 
Microsoft’s  .Net  Framework 


BV  CAnOi.  SLIWA 

Developers  will  gain  new  op¬ 
tions  for  building  applications 
designed  to  run  on  Microsoft 
Corp.’s  .Net  Framework  and 
connecting  those  applications 
to  systems  in  lava  environ¬ 
ments  when  Borland  Software 
Corp.  ships  new  products 
starting  next  month. 

The  Scons  Valley.  CaliC- 
based  software  maker  tomor¬ 
row  plans  to  announce  its  C# 
Builder  integrated  develop¬ 
ment  envirofunent,  which  b 
intended  to  let  developers 
make  use  of  the  .Net  Frame¬ 
work’s  class  libraries. 

The  Borland  tool  due  tbb 
summer,  will  feature  design- 
driven  development  capabili¬ 


ties  and  native  support  for 
databases  from  Microsoft.  Or¬ 
acle  Corp.  and  IBM,  as  well  as 
Borland’s  own  InterBase. 

Also  tomorrow,  Borland  will 
announce  a  new  product 
called  Janeva  that’s  designed 
enable  client-  and  server- 
based  applications  written  for 
Microsoft’s  .Net  Framework  to 


Builder 


integrate  with  back-office  sys¬ 
tems  through  the  Internet 
Inter-ORB  Protocol  (IlOP). 
Due  in  June.  laneva  b  based 
on  J2EE  and  Common  Object 
Request  Broker  Architecture 
(CORBA)  technologies. 

Boz  EUoy.  vice  president 
and  general  manager  of  Bor¬ 
land’s  enterprise  business 
unit,  said  the  difference  be¬ 
tween  using  Janeva  and  using 
Web  services  or  bridge  tech- 
nol<^  b  that  Janeva  requires 
no  additional  investment. 

“Wc  want  to  make  sure 
we're  not  requiring  .Net  devel¬ 
opers  to  use  any  new  tec^ol- 
ogy.”  be  said.  ”We  also  don't 
want  to  require  any  modifica¬ 
tions  to  back-«od  logic” 

Thomas  Murphy,  an  analyst 
at  Stamford,  Cona-based 
Meta  Group  Inc.,  added  that 
the  nOP  option  may  be  better 
when  performance  b  an  issue. 


He  also  said  Janeva  will  be  im¬ 
portant  for  users  with  exbting 
CORBA  investments. 

Janeva  will  support  all  lan¬ 
guages  that  run  on  Microsoft’s 
.Net  Framework,  including  C«, 
J«,  Visual  Basic  .Net  and  Del¬ 
phi.  according  to  Borland. 

Simon  ThomhilL  vice  presi¬ 
dent  and  general  manager  of 
Borland’s  .Net  business  unit, 
said  the  development  aspects 
of  Janeva  will  be  incorporated 
into  C#  Builder.  The  product 
will  provide  some  support  for 
Vbu^  Basic  .Net,  and  Borland 
plans  to  add  other  languages 
in  the  future,  said  ThomhilL 

Borland  will  also  announce 
tomonxYw  Enterprise  Server. 
Team  Edition,  a  J2EE  deploy¬ 
ment  platform  for  small  and 
midsize  businesses  and  de¬ 
partments  in  large  companies, 
said  EUoy.  Due  in  cariy  June, 
it’s  priced  at  S1,99S  per  CPU.  I 


The  facts  tell  a  compelling  story.  Microsoft  SQL  Server'"^  2000  is  the  new  worldwide  leader  m  scale-up 
per'  . 'niant  t'.  achie\-ing  thetop  two  rankings  <n  the  latest  tPC  C  hnn;.hmarK  tests.  To  learn  how  SQL  Server 
..-I.,- .  vsit  n'lf.rosoTt  -c-qi',  Softwate  fof  the  Agile  Busloess. 
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IBM  Readies  Storage 
Virtualization  Tools 


SAN  appliance  due  in  Iul\',  Storage  Tank 
tile  ser\er  teelinolog\  in  Deeemlx-r 


BY  LUCAS  MEARIAN 

I  KM  last  week  saiJ  it  plans 
to  ship  this  summer  its 
first  storage-area  net¬ 
work  (SAN  i  virtualiza¬ 
tion  device  ior  bli»ck-JeveI 
data  and  to  add  by  year's  end 
another  product,  based  on  its 
Storage  Tank  technology,  that 
will  provide  a  common  file 
sy'stcm  tor  multivendor  disk 
array  iiusiallations. 

The  TotalStorage  SAN  File 
System  device,  due  in  Decem¬ 
ber.  will  combine  the  Storage 
Tank  vinualtzaciun  software 
with  specialized  l.lnux-based 
versions  of  the  company's 
xSeries  servers.  IBM  said  it 
will  also  relea.se  a  develop¬ 
ment  specification  that  will 
make  it  possible  for  other  ven¬ 
dors  to  link  -Storage  subsys¬ 
tems  on  application  servers  to 
the  SAN  File  System. 

IBM  detailed  a  thrw-phase 
plan  for  delivering  .storage  vir¬ 
tualization  technology,  start¬ 
ing  with  an  appliance  that  will 
initially  support  only  its  own 
disk  arrays  (sec  box).  Rut  the 
Storage  Tank-based  device  is 
the  centerpiece  of  the  virtual¬ 
ization  strategy. 

Along  Wait 

Brian  Swick,  supervisor  of 
•Storage  administration  at  The 
Rcgencc  Gmup  (nc..  a  health 
maintenance  organization  in 
Portland.  Ore.,  said  he  has 
bc'en  waiting  for  Storage  Tank 
for  about  three  years.  Swick 
said  he  hopes  the  icvhnology’ 
can  help  him  better  utilize 
disk  space  and  reduce  overall 
costs  on  his  125TB  SAN.  which 
is  split  equally  between  IBM 
and  KMC  Corp.  arrays. 

Currently.  Swick  uses  half  of 
the  capacity  on  his  EMC  (Zlari- 
ion  ami’s  for  primar)-  storage 
and  the  other  half  to  back  up 
Rcgence  Group’s  Sybase  Inc.  , 

databa.scs.  With  Storage  I 


Tank’s  shared  file  .system. 
Swick  said,  he  could  u.sc  IBM’s 
Tivoli  Stonge  Manager  soft¬ 
ware  to  directly  archive  data 
on  tapes,  eliminating  the  need 
for  the  disk-based  backups, 

On  the  other  hand,  lack 
Malinsky.  director  of  opera¬ 
tional  technology  for  the  city 
of  Boston,  said  he  has  little  use 
for  virtualization  technology 
because  he  likes  to  assign  spe¬ 
cific  disk  arrays  to  specific 
applications.  That  makes  for 
a  “much  cleaner"  storage  ar¬ 
chitecture.  said  Malirusky,  who 


uses  a  mix  of  IBM  Shark  and 
KMC  Symmeirix  arrays. 

IBM  ha-s  been  talking  up 
Storage  Tank  for  the  past  four 
years,  saying  the  SAN-based 
file  system  is  designed  to  en¬ 
able  multiple  application 
servers  .access  and  share 
files  in  a  single  name  space 
across  multiple  disk  arrays. 

More  Work  Needed 

But  famie  Gruener.  an  analyst 
at  The  Yankee  Group  in  Bos¬ 
ton.  said  IBM  needs  to  take 
several  more  steps  before  it 
can  claim  to  offer  a  well- 
rounded  set  of  SAN  virtualiza¬ 
tion  pri>ducts.  For  example, 
the  company  must  get  its 


IBM’s 

Virtualization 
Rollout  Plan 

JULY  A  Lirwi-baswi  SAN 
volunw  controller  that’s  initial¬ 
ly  designed  to  pool  storage  ca¬ 
pacity  on  the  company's  Shark 
and  FAStT  disk  arrays 
AUGUST  A  packaged  system 
that  combines  the  vokime  con¬ 
troller  with  an  83TB  FAStTGOO 
vray  and  reduirdant  Fibre 
Channel  switches. 

DECEMBER  A  Linui-based 
system  that  uses  IBM's  Stor¬ 
age  Tank  virtualization  soft¬ 
ware  to  centrally  manage  files 
across  multivendor  SAIte 


block-level  virtualization  soft¬ 
ware  to  work  on  rival  arrays 
and  make  the  tcchnolog)- 
available  on  SAN  switches. 
Gruener  said. 


Brian  Truskowski.  general 
manager  of  IBM’s  Storage 
Systems  Group,  said  that  by 
year’s  end.  the  new  Total- 
Storage  SAN  Volume  Con¬ 
troller  appliance  will  be  able  to 
work  across  all  disk  arrays 
made  b\-  major  vendors.  The 
company  eventually  hopes  to 
port  the  block-level  virtualiza¬ 
tion  code  to  switches  made 
by  Rnnade  Communication 
Systems  tnc.  or  Cisco  Systems 
Inc.  for  greater  S.AN  flexibility, 
added  Truskowski. 

Swick  said  the  switch  sup¬ 
port  could  help  save  money 
for  Rcgence  Group  by  en¬ 
abling  him  to  buy  low-cost 
disk  drives  and  use  them  to 
support  multiple  appHeations. 
no  matter  w'hat  kind  of  arrays 
the  s>’stems  initially  used. 

“The  challenge  we’re  run¬ 
ning  into  right  now  Is  that  a 
particular  [application]  server 
can  only  be  on  IBM  or  EMC." 
Swick  said.  I 


EMC  Plans  Windows-based  Storage 


BY  LUCAS  MEARIAN 

EMC  Corp.  last  week  .tn- 
nounced  licensing  agreements 
with  Microsoft  Corp.  ih.-»t  will 
enable  the  storage  vendor's 
first  foray  into  the  market  for 
low-end  network-attached 
storage  (NAS)  devices. 

EMC  said  it  plans  to  run 
Micrtrsiift’s  Winditws  lowered 
NAS  software  on  its  Clariion 
CX  midrange  disk  arrays.  .An 
initial  product,  the  NetWin 
2(K),  will  be  based  on  the  en¬ 
try-level  Clariion  CX200  hard¬ 
ware  and  is  due  in  October. 

It  will  be  priced  from  550,000 
to  5130,000  and  store  between 
l.ITR  and  J.4TB  of  data. 

In  comparison,  Hopkinton, 
Ma.ss.-hascd  EMC  charges  a 
starling  price  of  S167.0(X>  for  a 
Jfl'B  model  of  its  higher-end 
(^Icrra  NSGOO  storage  device. 

uses  NAS  software  the 
compaift-  developed  internally. 

EMC  also  said  it  will  use  the 
storage  application  program¬ 
ming  interfaces  (API)  built 
into  Microsoft’s  Windows 
Server  2003  operating  system 
to  enable  centralized  manage¬ 
ment  of  both  the  Net  Win  200 
and  Cclcrra  from  a  single  con¬ 


sole.  In  addition.  FXtC  plans  to 
integrate  its  ConirolCentcr 
storage  management  software 
with  Windows-based  systems 
via  the  Micri>soft  APIs. 

Hill  North,  an  analyst  at  IDC 
in  Framingham.  Mass.,  said  the 
deal  with  Microsoft  will  let 
EMC  users  store  NAS  data  on 
mainstream  disk  array  hard¬ 
ware.  They  will  alsti  be  able  to 
maruge  both  types  of  storage 
“without  having  to  launch  an¬ 
other  set  of  tools,”  he  addtxl. 

|cfT Cohen.  CIO  at  disc-ount 
airline  IctHlue  Airways  Corp. 
in  Forest  Hills.  N.Y..  said  he's 
primarily  inierL^stc'd  in  the  API 
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aspects  of  the  agreement  be- 
twtx*n  EMC  and  Microsoft. 
That  could  give  IT  workers  at 
JetBlue  a  more  unified  view  of 
the  company's  server  and  stor¬ 
age  envmmmcnt,  he  said. 

Easier  to  Run 

“Anytime  you  can  consolidate 
management  consoles  into 
one  view,  it  makes  things  easi¬ 
er  to  run."  Cohen  noted.  Jet¬ 
Blue  is  expanding  its  15TB 
storage-area  network  to  in¬ 
clude  a  third  model  of  EMC’s 
high-end  Symmetrix  array,  he 
said.  Meanwhile,  the  airline  is 
running  Windows  Server  2003 
on  about  250of  Hcwleit- 
Ihickard  Co.’s  ProLbni 
servers,  plus  Unisys  Corp.’s 
hi^-end  ES7000  systenu. 

Since  Microsoft  released 
Windows  Powered  NAS  two 
years  ^o.  IBM.  HP  and  Deli 
Computer  Corp.  have  all 
pushed  to  sell  low-end  appli¬ 
ances  based  on  the  software. 
But  until  now.  EMC  had  relied 
on  its  awn  NAS  technology. 

A  spokesman  for  Dell, 
which  resells  EMC's  Clariion 
array.s,  said  the  computer 
maker  doesn’t  plan  to  market 


the  NetWin  200.  But  he  added 
that  the  new  EMC  device 
shouldn't  conflict  w  ith  Dell's 
own  IMwcrVault  NAS  product 
line,  which  starts  at  under 
$25,000  and  is  primarily  aimed 
at  iower-end  uses  than  the 
NetWin  200  is. 

Windows  Server  2003. 
w  hich  was  officially  reiea.sed 
April  24.  includes  a  number  of 
new’  storage  features,  such  as 
a  Virtual  Disk  Service  technol¬ 
ogy  that  provides  .storage  ven¬ 
dors  with  3  set  of  APIs  for  in¬ 
teroperating  with  servers  run¬ 
ning  the  operating  system. 

Microsoft  also  announced 
its  Volume  Shadow  Copy  Ser¬ 
vice.  which  lets  u.scrs  create 
"snapshots"  of  information 
for  data  recovery  purposes. 

In  addition,  it  plans  to  support 
the  iSCSI  protocol,  which  iet.s 
users  transmit  data  over  IP 
netwoiks.  Zone  Adam,  prod¬ 
uct  management  and  maiket- 
ing  director  for  Microsoft's 
storage  unit,  said  a  free  down¬ 
load  of  the  iSCSI  softvs'are  is 
due  next  month.  I 
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IBM  Readies  Storage 
Virtualization  Tools 


SAN  appliance  due  in  July,  Storage  Tank 
file  server  technolc^  in  December 


BV  tUCAS  WCARIAN 

IBM  last  week  said  it  plans 
to  ship  this  summer  its 
Hrst  storage-area  net* 
woric  (SAN)  viitualtza- 
tioo  device  for  block-level 
data  af>d  to  add  by  year's  end 
another  product,  based  on  its 
Storage  Tank  technology,  that 
will  provide  a  common  file 
system  for  multivendor  disk 
array  installations. 

The  TotalStorage  SAN  File 
System  device,  due  in  Decem¬ 
ber.  will  combine  the  Storage 
Tank  virtualization  software 
with  specialized  Linux-based 
versions  of  the  company’s 
xSeries  servers.  IBM  said  it 
will  also  release  a  develop¬ 
ment  specification  that  will 
make  it  possible  for  other  ven¬ 
dors  to  link  storage  subsys¬ 
tems  on  application  servers  to 
the  SAN  File  System. 

IBM  detailed  a  three-phase 
plan  for  delivering  stor^e  vir¬ 
tualization  technology,  start¬ 
ing  with  an  appliance  that  will 
initially  support  only  its  owm 
disk  arrays  (see  box).  But  the 
Stor;^  Tank-based  device  is 
the  centerpiece  of  the  virtual¬ 
ization  strategy. 

ALmig  WaM 

Brian  Swrick.  supervisor  of 
storage  administration  at  The 
Regence  Group  Inc.,  a  health 
maintenance  organization  in 
Portland.  Ore.,  said  he  has 
been  waiting  for  Storage  Tank 
for  about  thrae  years.  Swick 
said  he  hopes  the  technology 
can  help  him  better  utilize 
disk  space  and  reduce  overall 
costs  on  his  125TB  SAN.  which 
is  split  equally  between  IBM 
and  EMC  Corp.  arrays. 

Currently,  Swdek  uses  half  of 
the  capacity  on  his  EMC  Clari- 
ion  arrays  for  primary  storage 
and  the  other  half  to  back  up 
Regence  Group's  Sybase  Inc 
databases.  With  Storage 


Tank’s  shared  file  system. 
Swick  said,  he  could  use  IBM's 
Tivoli  Storage  Manager  soft¬ 
ware  to  directly  archive  data 
on  tapes,  eliminating  the  need 
for  the  disk-based  backups. 

On  the  other  hand,  lack 
Malinsky,  director  of  opera¬ 
tional  technology  for  the  city 
of  Boston,  said  be  has  little  use 
for  virtualization  technology 
because  he  likes  to  as.sign  spe¬ 
cific  disk  arrays  to  specific 
applications.  That  makes  for 
a  "much  cleaner"  storage  ar¬ 
chitecture.  said  Malinsky,  who 


uses  a  mix  of  IBM  Shark  and 
EMC  Symmetrix  arrays. 

IBM  has  been  talking  up 
Storage  Tank  for  the  past  four 
years,  saying  the  SAN-based 
file  system  is  designed  to  en¬ 
able  multiple  application 
servers  to  access  and  share 
files  in  a  single  name  space 
across  multiple  disk  arrays. 

More  Work  Needed 

But  famie  Gruener.  an  analyst 
at  The  Yankee  Group  in  Bos¬ 
ton,  said  IBM  needs  to  take 
several  more  steps  before  it 
can  claim  to  offer  a  well- 
rounded  set  of  SAN  virtualiza¬ 
tion  products.  For  example, 
the  company  must  get  its 


IBM’s 

Virfuarization 

RoHoutPlan 

JULYAUnux-hBBtdSAN 
vokum  contrplBr  thtt’s  MUal- 
lydasigmdtopoolitorageca- 
padhr  on  tfw  company's  Shark 
and  WStTdhh  arrays 


AU6UST  A  packaoMi  mstam 
thatcoinbk)«thavDiumtcor>- 
troiar  wtti  an  83TB  EAS1T6OO 
array  and  radundani  Fbra 
(?hanaal  Bwhehaa. 

DECEMBER  A  Uui-baaad 
syslamIhaluMsKlll'iStor- 
aga  Tank  vktualzation  soft- 
wars  to  cantraBy  martagt  Was 
Across  muMvandor  SANs 


block-level  virtualization  soft¬ 
ware  to  work  on  rival  arrays 
and  make  the  technology 
available  on  SAN  switches, 
Gruener  said. 


Brian  Truskowskl  general 
manager  of  IBM’s  Storage 
Systems  Group,  said  that  b>' 
year's  end,  the  new  Total- 
Storage  SAN  Volume  Con¬ 
troller  appliance  will  be  able  to 
work  across  all  disk  arrays 
made  by  major  vendors.  The 
company  eventually  hopes  to 
port  the  block-level  virtualiza¬ 
tion  code  to  switches  made 
by  Brocade  Communication 
Systems  Inc.  or  Cisco  Systems 
Inc.  for  greater  SAN  flexibility, 
added  TruskowskL 

Swick  said  the  switch  sup¬ 
port  could  help  save  money 
for  Regence  Group  by  en¬ 
abling  him  to  buy  low-cost 
disk  drives  and  use  them  to 
support  multiple  applications, 
no  matter  what  kind  of  arrays 
the  systems  initially  used. 

The  challenge  tve’re  run¬ 
ning  uito  right  now  is  that  a 
particular  (application]  server 
can  only  be  on  IBM  or  EMC.” 
Swick  said.  I 


EMC  Plans  Windows-based  Storage 


8V  LUCAS  MEARtAN 

EMC  Corp.  last  week  an¬ 
nounced  licensing  agreements 
with  Microsoft  Corp.  that  will 
enable  the  storage  vendor's 
first  foray  into  the  market  for 
low-end  nctworic-attached 
storage  (NAS)  devices. 

EMC  said  it  plans  to  run 
Mterosoft's  Windows  Powered 
NAS  software  on  Us  Clariion 
CX  midrange  disk  arrays.  An 
initial  product,  the  NetWin 
200.  will  be  based  on  the  en¬ 
try-level  Clariion  CX200  hard¬ 
ware  and  is  due  in  October. 

It  will  be  priced  from  S50.000 
to  S130.000  and  store  between 
LITB  and  4.4TB  of  data. 

In  comparison,  Hopkinton. 
Ma&s.-based  EMC  charges  a 
starting  price  of  S167.000  for  a 
ITB  model  of  its  higher-end 
Celena  NS600  storage  device, 
which  uses  NAS  software  the 
company  developed  internally. 

EMC  also  said  U  will  use  the 
storage  application  program¬ 
ming  interfaces  (API)  built 
into  Microsoft’s  Windows 
Server  2003  operating  system 
to  enable  centralized  manage¬ 
ment  of  both  the  NetWin  200 
and  (Helena  from  a  single  con¬ 


sole.  In  addition.  EMC  plans  to 
integrate  its  ControlCenter 
storage  management  softMiare 
with  Windows-based  systems 
via  the  Microsoft  APIs. 

Bill  North,  an  analyst  at  IDC 
in  Framingham.  Ma.ss.,  said  the 
deal  with  Microsoft  will  let 
EMC  users  store  NAS  data  on 
mainstream  disk  array  hard¬ 
ware.  They  will  also  able  to 
manage  both  types  of  storage 
"without  having  to  launch  an¬ 
other  set  of  tools,”  he  added. 

IcfT  Cohen.  CIO  at  discount 
airline  IctBluc  Airways  Corp. 
in  Forest  Hills,  N.Y.,  said  he's 
primarily  interested  in  the  API 


OTHSR  DEVELOPMENTS 


aspects  of  the  agreement  be¬ 
tween  EMC  and  Microsoft. 
That  could  give  IT  workers  at 
letBlue  a  more  unified  view  of 
Che  company's  server  and  stor¬ 
age  environment,  he  said. 

Easier  to  Run 

"Anytime  you  can  consolidate 
management  consoles  into 
one  view,  it  makes  things  easi¬ 
er  to  run.”  Cohen  noted.  Jet¬ 
Blue  is  expanding  its  ISTB 
storage-area  network  to  in¬ 
clude  a  third  model  of  EMC's 
high-end  Symmetrix  array,  he 
said.  Meanwhile,  the  airline  is 
running  Windows  Server  2003 
on  about  250  of  Hewlett- 
Packard  Ca's  ProLiant 
servers,  plus  Unisys  Cforp.’s 
hi^i-cnd  ES7000  systems. 

Since  Microsoft  released 
Windows  Powered  NAS  two 
years  ago,  IBM,  HP  and  Dell 
Computer  Corp.  have  ail 
push^  to  sell  low-end  appli¬ 
ances  based  on  the  software. 
But  until  now.  EMC  had  relied 
on  its  own  NAS  technology. 

A  spokesman  for  DeU. 
which  resells  EMC’s  (Tlarikm 
arrays,  said  the  computer 
maker  doesn't  plan  to  market 


the  NetWin  200.  But  be  added 
that  the  new  EMC  device 
shouldn't  conflict  with  E)cll‘s 
own  PowerVault  NAS  product 
line,  which  starts  at  under 
$25,000  and  is  primarily  aimed 
at  lower-end  uses  than  the 
NetWin  200  is. 

Windows  Server  2003, 
which  was  officially  released 
April  24,  includes  a  number  of 
new  storage  features,  such  as 
a  Virtual  Disk  Service  technol¬ 
ogy  that  provides  storage  ven¬ 
dors  with  a  set  of  APIs  for  in¬ 
teroperating  with  servers  run¬ 
ning  the  system. 

Microsoft  also  announced 
its  Volume  Shadow  Copy  Ser¬ 
vice,  which  lets  users  create 
"snapshots”  of  information 
for  data  recovery  purposes. 

In  addition,  h  plans  to  support 
the  iSCSI  protocol,  which  lets 
users  transmit  data  over  IP 
networks.  Zane  Adam,  prod¬ 
uct  management  and  market¬ 
ing  director  for  Microsoft’s 
storage  unit,  said  a  free  down¬ 
load  of  the  iSCSI  software  is 
due  next  month.  A 
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Disparate  Views  of  IT 
Govemanee  Spark  Debate 
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IBM,  HP  Release 
Itanium  2  Systems 

eMr^usMl  Ms  first  sirvw 
bnsd  on  initi  Corp-’s  64-M 
Hankm  2  proca«r.  Tho  oSorv- 
•r  k450  k  (WvMd  for  uM  in 
data  analysif  and  fchfdcal  ctwn* 
puting  appicnttons.  It  supports 
up  to  four  CPUs  and  can  run 
WMom  Sarw  2003  or  Linux. 
PilMS  stel  at  S25M.  Mom- 
wtila.Hoivlatt-PachardCa. 
announead  two  Hanium  2-faasad 
woffcstatioM  that  nm  the  64'fait 
iMTSion  of  Windows  XP. 


Nortel.  Redback 
Settle  Lawsuits 

Mortal  Matworta  Ltd.  and  San 
Joaa  baaad  Rpdbadi  Watworta 
bw.  haso  agraad  to  aaMa  dualing 
lawauitB  that  wars  ffM  hi  tala 
2001  raganfing  fivo  U.Su  patants 
hald  by  NortaL  Tha  satliaBant 
Inciiidas  a  palani  croaoHteanaing 
agnamant  uadar  wtdch  Radbach 
wM  pay  Mortal  an  undbdoaed 
foa.  tha  tare  companias  said. 


Ericsson  to  Slash 
Newly  14.000  Jobs 

Altar  posting  a  g04  iwMton 
first-guartarlaoa.  LM  Erteaaan 
Tilapiiana  Co.  ataiouncod  ptans 
tocutooMfyW^NWiohaby 
Saptambar  2004.  Iha  Stock- 
ruMO-oaMO  corapany  aaio  ns 
arorldoroa  adl  ahtink  from 
ei.000  poapio  to  52.000  by  tha 
and  of  tte  yoar  and  than  dr^  to 
47.000  by  tha  start  of  next 
year’s  foii^  givtar. 


Short  Takes 

vmiU  TECHNOLOGY  MC..  a  SuR- 
nyaalo,  CalL-baaod  aandor  Of 
buainoaa*prooaas  bitagialion 
toola.  raportad  a  S20J  mMon 
fir  It  ipiattoi  has  on  rasanua  of 
S22J  aWWm.  VMa  abo  said  Na 
stock  faces  poasMa  daiWbig  by 
Nmi^  . . .  Sm  OtoM-kMad 
PEREGRMfE  SYSTEMS  me.  said  it 
Mad  a  anr  amion  of  Hi  pro- 
pasad  OnaMW  rashucluring 
plan  wMb  dw  UA  Bantooptey 
Coart  in  Mbatogtan.OaL 


Panelists  weigh  IT 
centralization  vs. 
decentralization 

ar  THOMAS  HOFFMAN 

CAMBFIOSe  MASA 

lOs  and  consultants 
who  took  part  in  a 
p>anc]  discussion  last 
week  about  the  best 
way  to  develop  and  foster  IT 
governance  models  were 
deeply  dh'ided  over  wliich 
path  companies  should  take. 

IT  governance  —  a  method¬ 
ology  for  keeping  technology 
spending  and  labor  costs  un¬ 
der  control  —  has  become  a 
hot  topic  among  CIOs  and  IT 
managers  in  recent  months. 
Interest  has  largely  been  dri¬ 
ven  by  the  increased  emphasis 
on  overall  corporate  gover¬ 
nance  in  the  wake  of  the  Enron 
scandal  and  the  emergence  of 
mure  stringent  accounting  re¬ 
quirements.  as  well  as  the  con¬ 
tinuing  cost  pressures  IT  lead¬ 
ers  are  facing. 

But  there  is  no  cookie-cutter 
approach  to  IT  governance, 
said  Rob  Austin,  a  fellow  at 
CuncT  Consortium  in  Arling¬ 
ton.  Mass.,  and  a  professor  at 
Harvard  Business  School. 
Austin  was  one  of  four  pan¬ 
elists  who  debated  IT  go\'er- 
nance  issues  at  Cutter's  Sum¬ 
mit  2003  conferen«  here. 

Lynne  EUyn,  CIO  at  DTE 
Energy  Co.  in  Detroit,  backed 
up  his  point.  There  are  many 
companies  that  have  effective 
IT  governance  models  that  1 
have  no  interest  in.”  EUyn  said. 

IVo  years  ago.  DTE  created 
an  IT  steering  committee  that 
includes  Ellyn  and  various 
business  executives.  Business 
unit  leaders  at  the  diyersified 
eneigy  company  decide 
which  TT  protects  need  to 
be  launched,  “and  IT  decides 
how  they  get  done,”  she  said. 
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It  tiK>k  a  full  year  for  DTE's 
IT  steering  committee  “to 
work  effectively  together.” 
Eilyn  noted.  But  since  the 
committee  was  formed.  DTFs 
IT  department  has  reduced  it.s 
budget  by  40%  while  increas¬ 
ing  productivity  and  end-user 
satisfaction  rates,  .she  said. 

Fadng  Rnancial  Pressure 

In  the  18  months  since  Craig 
Fowler  joined  Coming  Cable 
Systems  as  CIO,  the  Coming 
tnc.  unit’s  annual  revenue  has 
dropped  by  nearly  60%  as  a 
result  of  the  telecommunica¬ 
tions  industry  bust.  To  reduce 
spending.  Fowler  has  focused 
on  centi^izing  IT  (unctions  at 
the  Hickory.  N.C.-based  maker 
of  fiber-optic  and  copper  com¬ 
munications  systems. 

“We  think  we  can  get  more 


Stress  need  for 
familiarity  with 
business  plans 

■V  LUCAS  MEANtAN 

BOSTON 

Business  executives  from  a 
group  of  financial  services 
nrms  last  week  shared  a  basic 
idea  about  bow  CIOs  can  de¬ 
liver  returns  on  IT  projects: 
For  sianers,  they  said.  IT  man¬ 
agers  have  to  be  able  to  read 
an  Income  statement. 

“Do  you  know  where  the 
revenue  comes  from?  Do  you 
know  where  expenses  arc  gen¬ 
erated?  And  do  you  under¬ 
stand  you  have  to  have  n>ore 
of  the  first  and  less  of  the  sec¬ 
ond?”  asked  George  Fisher, 
executive  vice  president  and 
chief  administrative  officer  at 
New  York-based  Prudential 
Securities  Inc. 

Fisher  and  three  other  exec¬ 
utives  participated  in  a  panel 
discusrion  about  what  they 
want  to  get  from  their  IT  de¬ 


costs  out  this  way."  Fowler 
said.  Previously,  each  business 
unit  had  a  dedicated  IT  orga¬ 
nization  “and  did  their  own 
deals  on  PCs."  be  said.  “By 
centralizing,  we’re  trying  to 
Increase  our  IT  buying  lever¬ 
age  while  helping  us  deter* 
mine  what  (s)'stems]  we  have 
in  place.”  Thus  far.  Coming 
Cable  has  reduced  both  its  IT 
staff  and  FT  budget  by  more 
than  half.  Fowler  added. 

Christine  Davis,  president  of 
Crisbele  Consulting  in  Man¬ 
hattan  Beach,  Calif,  and  a  fel¬ 
low  on  Cutter’s  Business  Tech¬ 
nology  Council,  said  she  sup¬ 
ports  a  decentralized  approach 
to  managir^  IT.  But  she  also 
championed  the  use  of  IT  gov¬ 
ernance  best  practices  taken 
from  other  companies.  That 
position  drew  sharp  rebukes. 


partments.  as  part  of  the  Na¬ 
tional  Investment  Company 
Service  Association’s  annual 
technology  conference  here. 

Most  of  the  panelists  said  IT 
managers  are  expected  to  be 
an  integral  pan  of  their  busi¬ 
ness  operations  and,  as  such, 
should  be  as  well  versed  in 
business  plans  as  they  are  in 
technology. 

“When  you  have  your  major 
technology  foUu . . .  able  to 
discuss  in  great  detail  and 
very  accurately  describe,  de¬ 
fine  and  discuss  what  the  busi¬ 
ness  challenges  are  to  doing 
something,  then  you  know 
you're  beginning  to  blend  your 


»  We  want 

tohaNein] 
functionaity  deliv¬ 
ered  as  needed. 


WILUAM  6RI0Y.  SENIOR  DIRECTOR. 
MERRILL  LYNCH  FINANOAL  DATA 
SERVICES  INC 
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IT Governance 
Recommendations 

■  Include  a  stowing  comminBe 
ofsaniorfTaiMtbusinBnexBC- 
uUvn  to  deade  on  comparryMde 
IT  pricKities  and  investments. 

■  SeA  up  seM-drected  work  teams 
fliade  up  of  (T  xtaflara  and 
buskwss-untt  KaiMns  to  man¬ 
age  ndrvidual  projacts. 

a&tabiishboundanesthaltpac- 
ify  what  ktod  of  dadsiona  the 
work  teams  can  and  can’t  make. 

•  Form  an  archdeclifal  exxmed 
that  sats  corporate  IT  stan¬ 
dards,  plus  more  targeted  groups 
such  as  an  IT  seaxity  counci. 

souttce  CM(*3T«E  MVI«  PCESfClCNI 
ciii»nci.ccoASuiriwi  uiMi.*n*N 
ecACM  c*Lir 

“Benchmarking,  at  best,  will 
show  you  how  well  your  com¬ 
petitors  were  performing  the 
last  time  a  benchmarking  test 
was  done,"  EUyn  said.  “You 
have  to  have  the  courage  to  do 
something  beyond  best  prac¬ 
tices.”! 


organization."  said  WUliam 
Bridy,  a  senior  director  at  New 
Yoric-based  MeniU  Lynch  Fi¬ 
nancial  Data  Services  Inc. 

Bridy  and  other  participants 
also  said  they  have  bid 
fareweU  to  tlu;  practice  of 
fiuding  long-term  IT  projects. 
Now  they  expect  quarterly 
progress  reports  on  projects 
and  want  to  see  tangible  re¬ 
turns  on  investment  in  a  maxi¬ 
mum  of  18  months. 

■^e  want  to  have  function¬ 
ality  delivered  as  needed." 
Bridy  said.  “If  it's  a  longer- 
term  initiative,  let's  break  it 
down  into  manageable,  con- 
troUable  and  discrete  chunks." 

Fisher  said  be  advocates 
that  most  IT  projects  should 
pay  for  themselves  within  a 
year.  “A  lot  of  people  put  out 
multiyear  projects,  and  then  a 
couple  of  years  later,  nobody 
knocks  on  their  door  and  asks 
(hem,  'Did  it  work?’ '  be  noted. 

On  the  other  band,  Bridy 
said  he  has  found  that  roost  IT 
problems  or  project  laUures 
can  be  traced  back  to  business 
users  not  clearly  denning  their 
goals.  But  neithW  be  nor  the 
ocher  panelists  discussed  that 
issue  further  I 


Senior  Execs  Looking  for 
Business-sawy  IT  Managers 
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Group  Touts  Vermont  as 
Outsourcing  Alternative 


Wages  higher  than 
India’s,  but  lower 
than  in  US.  cities 


BY  BATBICK  THIBODCAU 

INFORMATION  technology 
consultant  Seamus  Walsh 
was  working  in  lower 
Manhattan  on  SepL  11, 
2001.  What  happened  on  that 
day  prompted  him  to  move  his 
family  to  the  relative  tranquili¬ 
ty  of  Vermont. 

Now  based  in  South  Bur¬ 
lington,  Walsh  is  organizing  a 
consortium  of  independent  IT 
Gnns  and  consultants  to  try  to 
convince  the  big-city  firms  he 
left  behind  that  bucolic  Ver¬ 
mont  is  a  viable  alternative  to 
countries  overseas  for  soft¬ 
ware  development. 

Vermont's  FT  labor  rates,  at 
S3S  to  S50  per  hour,  are  two  to 
two  and  half  times  the  hourly 
rates  in  India.  But  they’re  low¬ 
er  than  the  rates  in  U,S.  urban 
areas,  where  IT  labor  costs  $80 
or  more  per  hour  Walsh  said. 

The  idea  of  attracting  IT 
work  to  rural  areas  makes 


sense  if  labor  rates  arc  signifi¬ 
cantly  lower  than  those  in 
metropolitan  areas  and  if 
there  are  enough  workers  with 
the  right  skills,  said  Rita  Terdi- 
man,  an  outsourcing  analyst  at 
Gartner  Inc.  in  Stamford. 
Conn.  Terdiman  said  she  be¬ 
lieves  chat  initiatives  like  the 
one  in  Vermont  will  spring  up 
in  other  parts  of  the  country. 

"1  chink  you  are  going  to  ab¬ 
solutely  see  a  trend  toward 
that,”  she  said. 

The  biggest  problem  facing 
Vermont  may  be  just  across 
the  border  Canada's  favorable 
currency  exchange  rate. 

Richard  Nolle,  vice  presi¬ 
dent  of  systems  at  Reinsur¬ 
ance  Group  of  America  Inc., 
said  the  idea  of  lower-cost 
areas  in  the  \JS.  developing 
into  alternative  development 
centers  sounds  "remotely  pos¬ 
sible.”  But  he  said  it  will  be 
difTicult  for  U.S.  competitors 
to  overcome  the  Canadian  ex¬ 
change  rate. 

NoUe’s  Chesterfield,  Mo.- 
based  company  outsources  ap¬ 
plication  development  woik  in 


Canada  and  intends  to  expand 
its  use  of  workers  in  that 
country.  The  exchange  rate 
saves  the  U.S.  company  ap¬ 
proximately  30%,  Nolle  said. 

CenterBeam  Inc.,  a  Santa 
Clara,  Calif-based  company 
that  manages  computing  re¬ 
sources  for  small  and  midsize 
companies,  intends  to  open  a 
major  center  in  Saint  John, 
New  Brunswick,  later  this 
year.  CEO  Kevin  Francis  said 
he  can  hire  three  Microsoft 
certified  engineers  in  Canada 
for  roughly  the  cost  of  one  in 
the  US. 

But  one  Vermont  outfit  is 
drawii^  development  woric 


from  urban  customers.  A  not- 
for-profit  affiliated  with  a  Bur¬ 
lington-based  college.  eSolu- 
tioDS@>ChampUiinCoUege  has 
eight  employees  who  offer 
high  quality  at  rates  that  are 
roughly  25%  lower  than  in  ur¬ 
ban  areas,  said  David  Binch, 
the  company's  director. 

Burlington  is  also  trying  to 
overcome  telecommunica¬ 
tions  infrastructure  disadvan¬ 
tages  faced  by  many  locations 
outside  of  large  metropolitan 
areas.  The  city  has  installed 
more  than  18  miles  of  fiber 
that  can  support  lOOMbit/sec. 
connections  to  link  about  40 
sites,  including  schools  and 
municipal  buildings.  “There  is 
no  question  that  first-class 
telecom  is  a  significant  factor 
in  location  decisions,”  said 
Timothy  Nulty,  head  of 
Burlington's  telecommunica¬ 
tions  project.  I 


Meanwhile,  in  New  Jersey . 


Continued /ram  pqge  J 

Offshore  Coders 


Corp.  Chief  Security  Officer 
Mary  Ann  Davidson,  one  audi¬ 
ence  member  said  that  it’s 
”iroiuc  that  the  countries  the 
software  industry  trusts  the 
least  with  binary  code  are  the 
places  where  sourcenrode  de¬ 
velopment  is  being  sent.” 

Davidson  acknowledged 
that  Oracle,  which  sells  its 
software  to  all  of  the  major 
U,S.  intelligence  agencies, 
does  outsource  some  of  its 
development  work  to  compa¬ 
nies  in  India  and  China.  How¬ 
ever.  ”we  give  read  access,  not 
write  privileges,  to  developers 
in  India."  she  said.  "And  for 
the  work  done  in  China,  it's 
quality  control,  and  they  do 
not  need  source-code  access 
to  do  that." 


Although  Davidson  ac¬ 
knowledged  that  there  is  "a 
national  security  issue”  in¬ 
volved  in  moving  develop¬ 
ment  work  overseas,  she  said 
there  is  also  no  guarantee  that 
a  worker  who  is  a  U.$.  cidzen 
won't  intentionally  harm 
source  code. 

The  economic  situation  to¬ 
day  is  such  that  "you  can’t 
build  these  products  without 
non-U3.  citizens,”  said  David- 

H  Like  it  or  not 
our  national 
secrets  are  already 
being  preserved  by 
people  who  [areni] 
U.S.  citizens. 

MARV  ANN  DAVIDSON.  CSO. 
ORACLf  CORP. 


son.  “Whether  you  like  it  or 
not.  our  national  secrets  are 
already  being  preserved  by 
people  who  built  these  parts 
of  the  core  infrastructure,  and 
they’re  not  U.S.  citizens." 


Tim  McKnight,  chief  informa¬ 
tion  assurance  ofHcer  at  Los 
Angeles-based  Northrup 
Grumman  Corp.  and  a  former 
security  officer  at  Cisco  Sys¬ 
tems  Inc.,  said  companies 
must  put  in  place  a  verification 
and  auditing  process.  And  he 
said  that  effort  will  be  costly. 

"At  Cisco,  we  had  teams  that 
would  go  overseas  and  verify 
the  people  that  were  there, 
monitor  their  access  to  file 
servers  and  source-code 
servers  and  do  risk  assess- 
ments,"  said  McKnight.  "It  is 
very  difficult  to  truly  know 
who  these  people  are.  It  can 


be  done,  [but]  you  really  need 
buy-in  from  the  top  of  the  cor¬ 
poration." 

A  show  of  hands  during  the 
closii^  session  of  the  confer¬ 
ence  indicated  that  the  majori¬ 
ty  of  attendees  doubted  the 
ability  or  willingness  of  soft¬ 
ware  companies  to  conduct 
proper  background  investiga¬ 
tions  of  foreign  software 
coders  working  overseas. 

That’s  not  surprising,  given 
that  few  companies  in  the  U.S. 
conduct  background  investi¬ 
gations  on  IT  personnel,  said 
Joyce  Brocaglia.  CEO  of  Alta 
Associates  Inc.,  a  Flemington, 
N.J. -based  executive  search 
firm.  “Fm  surprised  at  how 
few  of  my  clients  actually  do 
background  checks  on  their 
information  security  profes¬ 
sionals.”  she  said.  "At  most, 
they  require  me  to  do  a  refer¬ 
ence  check.”  I 


SARS  Affects 
Trawl  but  Not 
Oulsouning 

An  IT  outsowdoo  conferance 
schedM  Id  be  haU  fe  Shant^ 
in  June  haa  bean  poaQxmad. 
wMh  its  otganbara  hof^  to 
raschedufelnOclobar.lfsadh 
ract  caneaquenca  of  tie  SARS 
Nns  tut  has  dbntolad  aome 
Aston  aconootae  but  otunitse 
seems  to  be  hmiig  Hfe  impact 
on  oAshota  dnafopmanL 

The  outbreak  of  SARS.  or  sr 
vare  aoAe  reapimlory  synbotna. 
e  wol  as  ttu  Mr  in  baq  may 
haitohisteananospoeMre- 
cartly  by  aoifM  toiito  oulsoifcing 
pravklers  based  in  hdto,  Bartnv 
Inc.  stod  iBEt  week.  But  Gartner 
said  aantngs  nay  haw  also 
been  affected  by  ngioa  apprecto- 
Bcg  Irmwfflnfl  ratorlnn  and 
cornpattOTL 

U,S.-faasad  oufeoutcars  said 
the  impact  of  SARS  to  IhiABd  k 
to  affectng  InMf.  wNi  tiuainesa 
iFBWlen  fewftog  mutae  to  Mto 
that  taka  twin  through  &jrape. 
bypassing  Aaiin  hubs. 

But  Qtou.  tia  country  moat 
sertoualy  affeclad  by  SAfS,  toni 
yal  a  nufor  oufeourdng  miriuL 
KunurkM8dBW,Ca)af 
Teanack,  NJ.-baBad  Cb0itzant 
Tednologv  Sflfuftona  Coren  said 
China  hn  tognicart  toeuaa  to 
addreaa,  For  •afflfta.  bafora 
compantoa  oufeouroa  to  Chfeii. 
twy  Mitd  wart  to  mtou  aita 
tut  the  oounly  pRnfdaa  taliF 
toctoaf  praptoty  protocion  and 
Itito  tu  wvWorca  applaa  tot 
sMto.  hofect  nufucton.  In 
pBrlicitoi.''ireiiolaiiiafaiab- 
caly.”  ha  atod.  Bit  onea  tBM 
iiaui  and  fittan,  such  aa  tw 


China  could  anwga  to  t  nifor 
offehon  oubowetog  catoar. 

mare  MOW  a  wot  pnaam 
a(  Stoni  Aftotic  Inc,,  a  FivmoHL 
CaU.  ooBtoMy  M  doae  out- 
saucing  in  indi.aaidM«MB 
SARS  mafna  a  aid  oari.  ha 
lanT  a^aelbig  tu  «fna  to  haw 
much  impKl  on  mA  to  feda. 
awn  f  peopto  eurtol  ImI  The 
Boik  «■  oonitoiiato  ttoarto  to- 
dto’htaahL 
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THE  RIGHT  PIECE 
BRINGS  IT  ALL 
TOGETHER. 

Imagine  giving 
your  applications 
optimal  performance 
on  blade  servers. 
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We  re  saving  a  boatload. 


We  re  hemorrhaging  cash 
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Dell  I  Enterprise 


InaieceiN  Dell  test  running  Oracle*  9/on  a  Dell  server  solution  had  anywhere  from  a  3x  to  axprice/perfonnwce  advantage  over  Sun! 

Whether  usirtg  an  InteP  Xeon“  processor-based  4P  PowerCdge’”  6650  or  2P  PowerEdge  2650,  the  Dell  solution  was  faster  and  less  expensive  than 
a  Sun  Fire  V480  solution.  To  see  complete  test  results,  go  to  www.dell.com/migrationl3. 

There's  little,  if  any,  debate  Migrating  from  UNIX  to  a  standards-based  solution  lowers  TCO.  The  real  questions  are  "How  does  it  perform?:  "How 
much  will  it  lower  TCO?"  and  "VWto  do  we  turn  to?'  Well,  when  you  migrate  to  open  standards,  remember  this;  Dell  gives  you  both  mind-bending 
performance  and  unparalleled  expertise,  at  a  TCO  so  small  you'll  need  a  microscope  to  find  it.  And  the  entire  solution  is  backed  by  enterprise 
level,  24/7  service  and  support. 

The  migration  is  on.  Find  out  how  you  can  make  the  most  of  it  for  your  organization.  Call  1-877-442-  DELL,  or  go  to  the  Dell  UNIX  Migration  online 
calculator  at  www.dell.com/migrationl3  to  see  how  a  Dell  solution  can  lower  your  migration  costs  and  help  simplify  the  transition. 


Get  more  out  of  your  enterprise  for  less.  Easy  as 


D^L 


Click  www.dell.com/migration13  Call  1-877-442-DELL 
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HIPAA  Could  Hamper  Medical  Research 


SV  ftHAWON  MACNLIS 

New  federal  privacy  guidelines  are 
making  it  tougher  for  medical  re¬ 
searchers  to  access  large  amounts  of 
patient  data  —  and  some  researchers 
fear  that  could  ieopardize  studies  of 
drug  safety,  medical  devices  and  how 
to  better  predict  and  prevent  disease. 

“I  think  some  projects  are  going  to 
be  much  harder  to  do,”  said  Dr.  David 
Kom,  a  senior  vice  president  at  the 
Association  of  American  Medical  Col¬ 
leges  in  Washington.  Others  simply 
won’t  be  possible,  be  predicted. 

The  reason  is  HIPAA,  the  Health  In¬ 
surance  Portability  and  Accountability 
Act  Designed  to  give  indi¬ 
viduals  more  control  over 
their  personal  medical  in¬ 
formation.  HIPAA  explicitly 
outlines  how  medical  rec¬ 
ords  can  be  given  to  third  parties  and 
carries  stiff  penalties  for  violations. 
The  law’s  privacy  provisions  went  into 
effect  April  14. 

“Most  of  what  HIPAA  expects  is 
good  common-sense  management . . . 
[but]  it  does  introduce  additional  lev¬ 
els  of  complexity.”  said  Stephanie  Reel, 
CIO  and  vice  provost  for  IT  at  Johns 
Hopkins  University  in  Baltimore.  “I 
don’t  think  the  HIPAA  legislation  in¬ 
tended  to  do  harm  to  academic  medi¬ 
cine,  but  it’s  complicated.” 

The  stakes  are  high.  Research  proj¬ 
ects  that  mine  medical  data  have  uncov¬ 
ered  links  between  smoking,  diet  and 
lack  of  exercise  and  some  diseases,  as 
well  as  effective  prevention  strategies. 

Major  teaching  hospitals  like  Johns 
Hopkins  have  systems  in  place  to  man¬ 
age  the  process  of  making  medical  data 
available  for  research  under  HIPAA.  In 
addition,  some  ongoing  large-scale  re¬ 
search  efforts,  such  as  the  Framingham 
Heart  Study  in  Massachusetts,  rely  on 
volunteer  participants.  Altbou^  such 
projects  must  comply  with  HIPAA.  they 


are  unlikely  to  be  affected  by  a  lack  of 
access  to  data  about  additional  patients. 

But  researchers  said  they’re  con¬ 
cerned  about  the  fate  of  new  studies 
that  seek  to  examine  large  population 
samples.  Such  studies  typically  rely  on 
data  not  only  from  teaching  hospitals, 
but  ffom  community  hospitals,  med¬ 
ical  clinics  and  other  facilities  as  weU. 

HIPAA  does  provide  ways  for  small¬ 
er  hospitals  to  share  data  with  medkal 
researchers.  However,  information  thj>T 
could  be  matched  to  individual  pa¬ 
tients  must  be  stripped  out  unless  per¬ 
missions  or  waivers  are  granted.  A 
third  option  allows  more  limited  infor¬ 
mation-stripping  under  spe¬ 
cial  data-use  agreements. 

Researchers  worry  that 
the  HIPAA  guidelines  are  so 
ctunbersome.  and  the  penal¬ 
ties  for  violations  so  steep,  that  many 
community  hospitals  and  climes  may 
decide  it’s  safer  and  easier  to  say  no. 

HIPAA  has  “increased  the  perceived 
ri^”  for  smaller  institutions  to  coop¬ 
erate  with  researchers,  said  Dr.  David 
Savitz,  chairman  of  the  epidemiology 
department  at  the  University  of  Nor^ 
Carolina  at  Chapel  Hill’s  School  of 
Public  Health. 

Kom  said  widespread  use  of  a  stan¬ 
dard  HIPAA-compliant  computerized 
record-keeping  system  could  solve 
the  problem,  allowing  records  to  be 
quickly  “de-identified”  and  transmit¬ 
ted.  But  in  fact,  many  medical  records 
aren't  computerized  at  all  “When 
you’re  talking  about  paper  charts,  it 
just  is  a  fearsome  hurdle  to  try  to  make 
it  de-identinable,”  Kora  said. 

Preparing  records  for  researchers 
will  be  ‘Very  burdensome”  for  hos¬ 
pitals,  according  to  Lawrence  Hughes, 
regulatory  counsel  and  director  of 
member  relations  at  the  American  Hos¬ 
pital  Association  in  Chtcaga  However. 
Hughes  said  be  has  y^  to  bear  of  ho^i- 
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tals  that  are  now  reluctant  to  give  up 
information  to  researchers.  But  Korn 
said  be  has  beard  anecdotal  reports  of 
hospitals  either  refosiDg  turn  over 


records  or  charging  fees  for  the  data. 

The  Association  of  American  Med¬ 
ical  Colleges  hopes  to  compile  a  data¬ 
base  so  it  can  document  the  effect  of 
HIPAA  on  research  activiHcs.  “I  think 
it's  going  to  be  a  problem.”  he  Mid  **1 
hope  it  won't"  I 
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MARYFRAN  JOHNSON 


Worthy  of  Wireless 


By  the  time  I  FINISHED  reading  the  page 
proofs  for  our  “Wireless  at  Work"  special 
report  (stories  begin  on  page  27),  I  was 
ready  to  turn  in  my  new  Palm  Tungsten  W 
and  confess  the  embarrassing  truth:  I’m 
only  impersonating  a  real  user. 


Half  the  capabilities  of 
this  gorgeous  gadget  are 
wasted  on  me.  I  don’t  use 
it  as  a  cell  phone  (got  one 
already),  and  I  don't  even 
have  the  wireless  connec¬ 
tion  enabled  (too  much 
e-mail  would  follow  me 
around).  Naturally.  I  use 
the  calendar,  address 
book,  memo  pad  and  cal¬ 
culator.  But  I  am  clearly 
not  worthy  of  this  much 
cutting-edge  technology. 

Fortunately  for  the  wireless  indus¬ 
try.  overprovisioned  editors  are  no¬ 
body's  target  market.  In  fact,  re¬ 
porter  Bob  Brewin  found  that  for 
many  companies,  wireless  is  taking 
significant  hold  as  a  blue-collar 
technology  "far  removed  from  the 
world  of  executive  BlackBerry 
pagers  or  airport  lounge  wireless 
LAN  'hot  spots’ "  (page  38). 

Once  you  look  beyond  the  decaf- 
mocha-latte-sipping  Starbucks 
crowd,  the  true  impact  of  wireless 
shows  up  in  successful  working- 
class  applications  serving  repair- 
truck  drivers  from  Sears  and  bull¬ 
dozer  operators  at  a  Wyoming  coal 
mine.  At  Todd  Shipyards  in  Seattle. 
66  supervisors  are  making  far  better 
use  of  wireless  on  their  Palm  de¬ 
vices  than  I  ever  will  They’re  man¬ 
aging  the  time  records  of  1.200 
union  workers,  enabling  them  to  see 
who's  working  on  which  job.  The 
S300.000  system  had  to  work  around 
the  physical  and  geographic  barriers 
presented  by  44  acres  full  of  metal 
structures,  which  required  the  in- 
staUadon  of  33  access  points,  some 
with  high-powered  antennas. 

For  our  15-page  special  report,  wc 
conducted  an  online  survey  a  month 
ago,  gathering  feedback  from  323 


users.  On  average,  they 
came  from  companies 
with  more  than  5,000 
employees  and  IT  de¬ 
partments  of  fewer  than 
50.  The  majority  (64%) 
consider  wireless  tech¬ 
nology  important  to 
their  business  goals.  And 
no  wonder.  The  leading 
five  business  uses  for 
wireless,  our  survey 
found,  are  mobile  access 
to  the  enterprise,  sales 
force  communication,  data  entry 
from  the  field,  logistics  support  and 
factory-floor  data  entry. 

Somewhat  heartenir^.  though,  is 
that  38%  of  the  respondents  said  the 
economic  downtiun  has  had  no  im¬ 
pact  on  their  wireless  rollouts.  That 
kind  of  determined  backing  of  any  IT 
project  is  rare  these  days.  It  under¬ 
scores  how  quickly  the  payback  must 
be  happening  for  many  companies. 

The  stumbling  blocks  of  inade¬ 
quate  bandwidth  and  network  avail¬ 


ability  don’t  appear  to  be  stemming 
the  steadily  rising  tide  of  companies 
moving  forward  with  wireless  proj¬ 
ects.  Even  concerns  about  security 
aren’t  putting  on  the  brakes.  By  the 
end  of  last  year,  seven  in  10  compa¬ 
nies  had  adopted  wireless  technolo¬ 
gy.  according  to  an  IDC  survey  of 
more  than  1,200  North  American 
companies  across  18  industries, 
About  S2.2  billion  was  spent  in  2002 
on  wireless  hardware,  and  that’s  ex¬ 
pected  to  rise  to  S3.9  billion  by  2006, 
says  research  firm  In-Stat/MDR. 

Also  intriguing  is  how  the  small- 
business  frontier  is  becoming 
crowded  with  wireless  users  these 
days  (page  44).  These  second-gener¬ 
ation  adopters  watched.  learned  and 
rolled  their  own.  often  in  highly  cus¬ 
tomized  implementations. 

“To  make  wireless  cost-effective, 
the  vendors  have  got  to  know  an  aw¬ 
ful  lot  about  their  clients'  business 
processes.”  says  Gartner  anal>'st 
Phillip  Redman.  “That’s  why  you  see 
so  many  adopters  skipping  a  Micro¬ 
soft  or  an  IBM  and  going  instead  to 
specialist  [vendors]  in  areas  like 
transportation  and  warehousing.” 

Across  so  many  industries,  wire¬ 
less  is  getting  down  to  business, 
doing  real  work  and  proving  itself 
worthy.  Watching  it  all  happen 
makes  me  wish  I  was  worthy,  too.  I 
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PIMM  FOX 

Monitoring 
Mom  With 
QA  Tools 

CAN  YOU  PUT  A  PRICE 
on  motherhood?  Proba¬ 
bly  not.  But  if  you’re 
in  the  floral  and  gift  business 
and  count  on  Mother’s  Day 
for  a  sizable  piece  of  your  revenue, 
you  can  easily  put  a  price  on  the  up¬ 
time  of  the  online  systems  that  will  be 
getting  pounded  by  well-intentioned 
iast-minute  shoppers. 

That’s  part  of  the  motivation  be¬ 
hind  1-800-Flowers.com's  reliance  on 
pre-  and  postproduction  monitoring 
software. 

There’s  an  emerging  trend  to  create 
quality  assurance  (QA)  testing  and 
monitoring  scripts  during  the  design 
and  construction  phase  of  an  IT  proj¬ 
ect  and  then  reuse 
them  throughout  the 
project’s  life  cycle. 

While  developers 
are  writing  code,  (JA 
team  members  can 
build  the  load-  and 
stress-test  scripts  to 
determine  if  the 
project  is  meeting 
requirements  set  by 
business  liaison 
groups. 

In  the  case  of 
Westbury,  N.Y.-based  1-800-Flowers.- 
com.  which  does  more  than  50%  of  its 
business  online,  this  means  gearing  up 
for  worst-case  scenarios  on  Valen¬ 
tine’s  Day  and  Mother's  Day.  As  code 
is  assembled,  the  QA  team's  scripts 
measure  the  interoperability  of  com¬ 
ponents  as  they’re  completed.  Then 
they  test  the  code  in  real  time. 

At  1-800-Flowers.com,  software 
from  Sunnyvale,  Calif-based  Mercury 
Interactive  (Dorp,  can  push  the  system 
to  simulate  150.000  simultaneous  or¬ 
ders.  Obviously,  you’ll  need  to  create 
your  own  metrics  to  test  for.  but  they 
should  include  the  capture  of  live  re¬ 
sults.  and  you  should  also  measure 
third-party  performance  if  your  site 
depends  on  outside  services.  It’s  no 
good  having  a  service-level  agreement 
with  an  Internet  service  provider  if 
there’s  no  way  to  verify  how  it’s  doing. 

And  while  it’s  a  no-brainer  that 
l-800-Flowers.com  needs  to  keep  the 
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retail  front  door  open  for  customers 
around  the  clock,  the  supplier  connec¬ 
tion  is  vital  to  oil  businesses  —  retail 
and  wholesale. 

Can  your  business  managers  moni¬ 
tor  the  call  center  experience?  Do  they 
have  a  good  idea  of  what  service  reps 
go  through? 

Being  able  to  monitor  back-end  and 
internal  s>'stems  is  equally  vital,  be¬ 
cause  it  lets  you  know  whether  you're 
getting  the  most  out  of  your  hardware 
resources  or  if  you’re  suffering  from 
the  ripple  effects  when  applications 
are  modified. 

As  testing  and  monitoring  software 
becomes  more  sophisticated  —  and. 
unfortunately,  more  expensive  —  it 
very  likely  will  be  billed  as  a  tool  for 
business  optimization.  That  remains  to 
be  seea  but  reusing  scripts  and  devel¬ 
oping  a  more  prominent  rule  for  QA 
could  help  you  better  understand 
whether  you're  even  close  to  a  return 
on  your  IT  investment. 

Without  it.  Mom  might  not  get  her 
flowers  and  continue  to  think  of  you 
as  her  priceless  child.  I 

DAVID  MOSCHELLA 

Blogs  Bring 
Content 
Alternative 

Blogs  are  hot  news. 
In  February,  Google 
caused  a  stir  by  acquir¬ 
ing  Pyra,  creator  of  Blogger.- 
com.  In  the  past  few  months, 
many  businesses  have  been  experi¬ 
menting  with  blogs  as  a  way  to  make 
their  Web  sites  and  intranets  seem 
more  current  and  friendly  In  the 
wider  world,  politically  oriented  web¬ 
logs  such  as  AndrewSullivan.com  have 
emerged  as  important  voices  in  the 
ongoing  debate  over  Iraq.  More 
poignantly,  the  Baghdad  blogging  of 
Salam  Pax  was  a  rare  source  of  pre- 
liberation  Iraqi  candor. 

Blogs  deserve  our  attention  because 
they're  an  important  technological  ad¬ 
vancement.  They  make  it  possible  for 
anyone  with  an  Internet  connection  to 
quickly  post  text  and  images,  and 
eventually  audio  and  video,  to  the 
Web  without  any  real  technical  knowl¬ 
edge.  Blogs  resemble  e-mail  in  that 
they  enable  us  to  actively  contribute 
to  the  Internet,  as  opposed  to  simply 
consuming  it 


Over  the  past  five  years, 
hundreds  of  thousands  of 
blogs  have  been  des'eloped. 

Tliat  the  great  majority  of 
them  are  little  more  than 
vanity  pages  seen  only  by 
the  creators'  friends  and 
family  shouldn't  turn  us 
against  the  technology.  Self- 
publishing  will  eventually 
prove  to  be  an  important 
Internet  indu.stry  factor 

But  exactly  how  remains 
unclear.  While  there  is  con¬ 
siderable  interest  in  corpo¬ 
rate  usage,  the  current  en¬ 
thusiasm  seems  a  bit  exaggerated. 

Large  businesses  already  have  the  abili-  | 
ty  to  regularly  post  content  to  the  Web. 
and  although  blogs  can  make  this  even 
easier,  their  appeal  would  seem  to  be  at  | 
least  partially  offset  by  real  concerns 
regarding  control  and  quality.  The  net 
increase  in  business  empowerment  is 
significant  but  relatively  modest. 

The  biggest  benefits  will  continue 
to  accrue  for  individuals  and  small 
businesses,  who  are  increasingly  be¬ 
ing  freed  from  the  requirements  of 


HTML  and  the  expensive 
Web  professionals  who 
understand  it.  Someday, 
all  of  us  will  ptisi  informa¬ 
tion  to  the  Web  as  easily  as 
we  make  PowerPoint  pre¬ 
sentations  today.  That's 
real  progress.  But  again, 
the  question  is.  Toward 
what  end? 

Many  enthusiasts  sec  in¬ 
dividual  blogs  as  an  alter¬ 
native  to  commercial  Web 
content,  but  this  still  ap¬ 
pears  unlikely.  Maintaining 
a  high-quality  blog  takes 
considerable  time  and  therefore  re¬ 
quires  sustained  motivation.  Scif- 
expression  and  self-promotion  have 
clearly  motivated  many,  but  they  have 
obvious  limitations.  AndrewSullivan  - 
com  has  had  some  success  soliciting 
voluntary  financial  contributions,  but 
this  is  a  rare  example. 

To  me.  the  key  question  is  whether 
individual  blogging  can  be  harnessed 
to  create  something  larger  than  any 
one  person  could  develop.  Consider 
the  analogy  with  open-source  soft¬ 
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ware.  No  individual  could  compete 
with  powerful  commercial  software 
interests.  Similarly,  no  individual  blog 
is  going  to  challenge  Yahoo  or  The 
New  York  Times.  But  the  idea  of  bring¬ 
ing  together  the  fiKused.  organized 
and  peer-reviewed  work  of  knowl¬ 
edgeable  individuals  can  be  applied  to 
many  fields,  not  just  software.  Perhaps 
this  is  what  Google  has  in  mind. 

In  this  sense,  blogs  should  be 
viewed  as  an  imponant  addition  to  the 
content  marketplace.  If  commercial 
sources  provide  mo.st  of  what  people 
need  for  free,  the  potential  for  blog.s 
will  remain  limited.  However,  should 
commercial  content  be  withdrawn  or 
made  available  only  for  a  fee.  the  de¬ 
mand  for  alternatives  will  surely  in- 
crea.se.  In  this  sense,  the  blogosphere 
is  likely  to  prove  an  effective  long¬ 
term  check  on  the  power  of  commer¬ 
cial  content  interests,  to  the  greai 
benefit  of  us  all.  I 
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Managing  Projects  Is  a  Unique  Challenge 


Based  ON  irv  EXPEMENce. 

the  pressures  to  rapKiy  ad¬ 
vance  a  project  to  a  cetlain  stage 
(read  as  'coding')  are  enormous. 
To  use  Michael  H.  Hugos'  analogy 
of  constructing  a  building  pWork- 
ing  Hard.  Makiig  the  Same  Mis¬ 
takes  Over  and  Over.'  OiackLink 
37307}.  no  one  would  dream  of 
asking  an  archuect  to  show  up  one 
day  and  just  Stan  buUtUng.  Ev^  the 
simeriest  construction  protects  m- 
ciude  exIensfvG  design  and  pian- 
ning  stages  that  ensure  success. 

These  same  steps  are  often  by¬ 
passed  in  fT  projects.  Bui  being 
given  the  proper  amount  of  bme  to 
plan  and  desvt  a  system  oorteedy 
would  dramaticaly  improve  suc¬ 
cess  rates.  Too  often,  project  spon¬ 
sors  and  IT  managers  pressure  en- 
gineers  and  programmers  to  move 
on  to  subsequent  stages  v>  an  ef* 
(on  to  report  progress  towtfd  the 
goal.  Attempting  to  compensate  for 
previous  failures  during  the  codmg 
stage  wi  resuN  In  cost  overruns, 
delays  and.  lAbmatefy.  failure. 
Matthew  DM 
Tbehnvoi  consultant, 
Mando^  Associates,  Omaha. 
dU.l_matthew<^toonaiLcom 


WHILE  MKHAEL  K.  HUSOS  of¬ 
fered  some  excellent  propos¬ 
als  tor  mleiigeni  protect  manage- 
meni  in  hts  anide.  I  take  issue  wilti 
his  impbeauon  that  fT  can  become 
aprofesson  ft  s  a  trade,  a  set  of 
ever-changing  dais,  and  estableh- 
tng  practical,  al-embracmg  stan¬ 
dards  wodd  be  impossibfe 
Perhaps  you  could  establish 
wortong  standards  in  the  narrower 
held  of  protect  management,  but 
the  term  pro^sswn  fust  doesn't  hi 
management.  Doctors,  lawyers  and 
psychologists  al  repon  to 
goveming  borfes.wdh  behavior 
and  etfacM  conduct  parameters 
controled  by  those  bodws.  Man¬ 
agers  donT.  Programmers  don't 
F^oiect  managers  don't  eithef 
Afax  Rounds 

Systems  admimstrator,  Shafer 
Electronics.  Shafer.  Minn. 


Missing  the  Point 

IT  SEEMS  THAT  Bruce  Qafiinsti 
misses  the  pomt  ['3Com  CEO  Ex¬ 
plains  Renewed  Bid  for  Corporate 
Business.*  QuckUnk  S^MO].  The 
education  seettr  wBs  one  of  SCom's 
biggest  buyers,  and  our  needs  are 


real  Our  shop  has  networks  and 
eouipmentthaloulshinemanvin- 
dustnes  n  the  aea.  and  we  value 
the  cutting  edge.  Qafhn  decounts 
our  3Com  busmess  as  only  4%  of 
themarkel  and  he s apparently 
more  than  wing  to  gtve  that  up.  I 
was  one  who  nvested  m  ATM  tech¬ 
nology  wWh  a  Celplex  7000  core 
sw^ch.  an  excellent  cittce  when 
Token  Ring  was  sti  mmpani.  (was 
cut  off  with  no  upward  ngration 
path  and  art)  kniong  to  invest  n  a 
Catalyst  KOO  soon  Customer  loyal¬ 
ty  6  apparenify  sM  scarce  at  3Com 
MkdiaAlA.HaN 
Network  administrator. 
Beaujbrt  County  Community 
College.  Wa^ittgton.  N.C 


Outsourcing's  Price 

I  WORK  WITH  overseas  program¬ 
mers  fraquenity  fXKjisourcino 
Growth  PredMed.  but  Impact  on 
Workers  May  Bs  Uneven.'  Quck- 
Link 374^  Their  knowledge,  sktt 
and  work  ethic  are  comparable  to 
what  you  fmd  in  the  U.sl  but  there 
are  several  barriers  to  working  wath 
them  effectivefy  -  ptimarfy.  langu¬ 
age  dWerancas.  lime  zones  and 
busmes^work  process  knowledge. 
The  language  barrier  erodes  0^ 


lime.  The  lime-nne  problem  car 
be  adikessad  by  aNermg  work 
hoirs.8u(thebu5iness,\«ork  proc¬ 
ess  knowledge  gap  sn't  easNy 
tackled.  In  the  meantxtie.  we  must 
insulate  our  busiriess  professxMiats 
from  the  pam  of  these  bamera. 

I  aqrae  that  die  outsouemg  trend 
wi  continue  and  that  (T  satanes  wd 
shnnk.  But  when  satanes  approRdi 
ihoseofassst^managersaiBtfg- 
er  Kng.  we  won't  see  many  grads 
with  computer  science  degrees  As 
a  resulL  the  U.S  wd  become  totady 
dependent  on  toreign  sources 
Oane  Burke 
IS  planning  specialist. 

Lake  Jadaon.  Texas. 
ugunburke(jiry(dtoo.com 

COMPUTERWORLO  welcomes 
comments  from  Ns  readers.  Letters 
wi  be  edited  tor  brevity  and  ctanty 
They  shoiNd  be  adekes^  to  Jamie 
EcMe.  letters  edNot,  Computerworld, 
PO  Box  9T7L  500  Old  Connecbcul 
Path.  RaminghBn.  Mass.  OTTOf. 

Fax  (506)  679-4643 
E-mat  lettersiciomouterwortd.  com 
Indude  an  address  «id  phone  run- 
ber  forimmediate  venfiokon. 
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SeeBeyond  CEO  Explains  Why 
Everything  You  Knew  About  EAI 
Has  Just  Changed 


You’re  now  saying  ’Everything  you  know 
about  enterprise  Integration  has  just 
changed.'  How  exactly  has  EAI  evolved 
over  the  last  several  years? 

EAI  b^an  as  a  way  to  integrate  one  appli¬ 
cation  with  another,  enabling  data  migra¬ 
tion  and  synchronization.  It  then  evolved 
to  include  business-io-busines$  integration 
and  business  process  integration,  allowing 
companies  to  design  and  manage  multi- 
step  business  processes.  This  was  certainly 
an  advance  over  the  “spaghetti"  approach 
of  point-to-point  interfaces,  and  has  deliv¬ 
ered  a  lot  of  business  value  by  automating 
manual  processes  and  machine-ro- 
machine  interactions. 

However,  this  broader  definition  of  EAI 
still  falls  short.  Achieving  the  vision  of  the 
real-time  enterprise  is  not  simply  a  matter 
of  automating  business  processes  between 
systems,  but  also  seamless!)'  inserting 
human  interaction  into  the  processes  to 
handle  exceptions.  The  true  complexity  of 
business  processes,  and  the  highest  value. 
cx>mes  from  handling  exceptions  well,  and 
to  end-users  should  be  undistinguishable 
fiom  other  enterprise  applications.  What 
businesses  need  is  a  way  to  quickly  assem¬ 
ble  and  deliver  new  enterprise-scale,  end- 
user  applications  built  by  assembling  exist¬ 
ing  business  systems  and  functionality  in 
new  ways.  This  is  where  our  latest  offering, 
the  SeeBeyond  Integrated  Composite 
Application  Network  (ICAN)  Suite  5.0, 
comes  into  pUy. 

Considering  that  integration  costs  are  a 
signtficarrt  part  of  software  InstaHstkms, 
you  sea  application  development  and  inte¬ 
gration  cominQ  together?  If  so,  how? 

Absolutely.  Today,  the  IT  infrastructure  of 
most  organizations  has  growm  into  a 
morass  of  disjointed  systems.  Tradition¬ 
ally,  application  development  and  integra¬ 
tion  have  been  completely  disparate  func¬ 
tions.  The  advent  of  the  int^ated 
composite  application  network  changes  all 
that.  It  builds  upon  the  foundations  of 


both  application  development  and  inte¬ 
gration,  adding  the  benefit  of  human 
brainpower  in  building  composite  applica¬ 
tions.  Automation  is  extended  to  encom¬ 
pass  human  touch,  allowing  people  and 
systems  to  interact  synergisiically  and  give 
business  users  a  deep  new  look  into  their 
organization  and  its  ecosystem. 

This  new  network  is  really  a  framework 
for  creating  new.  enterprise  applications 
from  existing  ones.  This  framework  is  now 
possible  thanks  to  the  convergence  of  several 
technolog)'  and  business  trends,  including: 

*  the  suffreieni  maturation  of  EAI: 

*  the  commodittzarion  of  application 
servers; 

*  the  adoption  and  maturation  of  open  stan¬ 
dards,  including  those  for  Web  services; 

*  the  widespread  acceptance  of  portal 
funaionaliiy: 

*  and  the  demand  from  customers  that 
vendors  solve  business  problems  cost- 
effectively.  preferably  by  leveraging 
existing  IT  assets. 

What  is  SaeSeyond’s  technology  strategy 
for  addressing  this  problem? 

Our  ICAN  Suite  5.0  provides  the  architec¬ 
ture  and  tools  that,  for  the  first  time, 
enable  organizations  to  create  new  end- 
user  applications  assembled  using  existing 
business  logic,  funaionality,  and  human 
intelligence  from  anywhere  in  an  organiza¬ 
tions  ecosystem.  The  prospective  business 
benefits  are  profound:  The  features  and 
capabilities  of  ICAN  5.0  hold  the  promise 
of  significantly  reducing  product  cycle 
times  and  the  cost  of  ongoing  mainte¬ 
nance,  while  greatly  improving  productivi¬ 
ty  through  unprecedented  easc-of-use  and 
support  for  open  standards. 

We  believe  that  the  ICAN  Suite  5.0  ful¬ 
fills  the  long-awaited  promise  of  middle¬ 
ware.  It  also  is  the  latest  milestone  of 
SeeBeyond  s  l4-yeaf  vision  of  heipir^  cus¬ 
tomers  manage  the  flow  of  information 
across  all  systems,  applications  and  enter¬ 
prises  on  a  global  basis. 


Advertising  Supplement 


What  is  SeeBeyond’s  competitive  advan¬ 
tage  In  this  space? 

First  and  foremost,  we  have  the  most  open 
and  comprehensive  set  of  integration  tools 
available  in  our  new  ICAN  Suite  5.0.  We 
have  an  installed  base  of  more  than  1,800 
customers  including  leading  Global  2000 
companies;  a  1 4-year  histor)'  of  success; 
and  a  product  suite  written  by  a  team 
whose  senior  members  have  been  together 
for  more  than  a  decade.  SeeBeyond 
knows  what  eBusiness  and  application 
integration  can  do  today,  and  what  it 
must  do  in  the  future. 

As  a  company,  we  have  been  an  innova¬ 
tion  leader  since  the  birth  of  the  applica¬ 
tion  integration  industry.  We  introduced 
the  first  commercially  available  integration 
broker  in  1991;  the  first  fully-distributed 
integration  architeaurc  in  1 999;  and  now, 
with  the  ICAN  5.0,  the  first  business  inte¬ 
gration  platform  built  on  an  open  frame¬ 
work,  including  a  j2EE-comp]iant  inte¬ 
gration  server  with  the  first  composite 
application  generator  based  on  an  open, 
services-oriented  architecture. 

“SeeBeyond  knows  what 
eBusiness  and  application 
integration  can  do  today,  and 
what  it  must  do  in  the  future.” 

In  business  terms,  the  goal  is  to  ^ve 
managers  a  clear  idea  of  what’s  happening 
across  their  organizations,  and  the  flexibility 
to  improve  whatever  needs  to  be  improved. 

Any  final  words  of  wisdom  for  CIOs  when  it 
comes  to  making  an  kitegretion  project 
succeed? 

Today,  enterprise  software  equals  business 
strategy.  That  means  CIOs  should  be  look¬ 
ing  for  solutions  that  possess  the  same 
attributes  as  good  business  strategy — rtame- 
ly  flexibility,  responriveness,  and  cosKffoc- 
dveness.  In  the  integration  market,  QOs 
should  seek  vendors  who  understand  that 
and  who  offer  solutions  that  allow  IT  orga¬ 
nizations  to  reach  across  the  traditional  bar¬ 
riers  of  ^plication  development  and  inte¬ 
gration.  Ideally,  this  will  enable  CIOs  to 
create  their  future  on  the  success  of  their 
past,  without  investing  in  a  lot  of  new, 
expensive  and  hard-io-use  technoit^. 
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Wireless  Gets 
Down  to  Business 

In  the  hands  of  pioneers,  wireless 
technology  is  breaking  new  ground 
in  key  economic  sectors,  with  appli¬ 
cations  that  range  from  the  everyday 
to  the  extraordinary.  Page  30 


The  Wireless 
LAN  FAQ 

Thinking  of  deploying 
a  wireless  LAN?  Read 
these  frequently  asked 
questions  to  get  tips  for 
success.  Page  42 


Working-Class  Wireless 

Wireless  now  supports  a  wide  range 
of  blue-collar  applications,  like  the 
one  that  allows  repair  technicians  to 
transmit  data  from  customer  sites  to 
Sears’  back-end  systems,  says  Dave 
Sankey  (right).  Page  38 
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EDITOR’S  NOTE 


Mention  wireless  tech- 
nol(^,  and  most  folks 
think  of  BlackBerries  re¬ 
trieving  e-mail  or  stock 
quotes,  or  those  hyped 
wireless  access  points  at  Starbucks  and  air¬ 
port  lounges.  But  these  days,  wireless  tech¬ 
nology  is  expanding  its  job  description  to 
include  some  grittier  applications. 

Lately,  wireless  has  rolled  up  its  sleeves 
and  joined  the  working  class. 

Service  technicians  now  use  it  in  their 
trucks  to  call  up  repair  Information  while 
at  a  customer’s  house.  Bulldozer  operators 
use  it  to  get  information  on  where  to  build 
the  next  road.  Police  ofiTicers  use  it  to  catch 
crooks  by  monitorii^  mug  shots,  maps  and 
graphical  data  sent  out  from  headquarters. 

Wireless  technolc^  has  even  made  its 
way  into  some  everyday  places,  as  pioneer¬ 
ing  industries  take  core  wireless  capabili¬ 
ties  to  new  levels.  Bring  a  garment  into  an 
RFID-enabled  dressing  room,  and  the  color 
options  and  fabric  information  are  dis¬ 
played  on  a  plasma  screen.  Or  visit  a  wire¬ 
less-enabled  emergency  room,  where  your 
doctor  can  call  up  your  medical  history  on 
a  PDA  from  the  hospital's  data  repository. 

These  new  applications  bring  with  them 
exciting  new  possibilities  that  many  of  you 
are  eager  to  explore.  Our  reader  poll  (see 
page  40)  showed  that  64%  of  respondents 
consider  wireless  technology  important  to 
their  business  goals. 

In  the  pages  that  follow,  we  take  a  look  at 
cuttii^-edge  wireless  uses  and  hear  from 
industry  observers  about  which  wireless 
vendors  are  making  the  grade  for  corporate 
IT.  You’ll  fmd  answers  to  frequently  asked 
questions  about  wireless  LAN  setups  and 
read  about  new  advances  that  the  top  wire¬ 
less  vendors  ex[>ect  to  Introduce  this  year. 
We  hope  that,  armed  with  this  information, 
you  can  put  wireless  to  work  in  your  own 
company.  I 


Ellen  Fanning  is  special  projects  editor 
at  Computerworld.  Contact  her  at 
eHen_fanning@computerworldxom. 


I  AM  A  CISCO 
CATALYST  6500. 


I  AM  A  SNARLING 
PACK  OF 
DOBERMANS. 

I  AM  INTEGRATED  SECURITY.  I  HAVE  THE  POWER  TO  PROTECT  YOUR 
NETWORK  FROM  THE  INSIDE,  THE  OUTSIDE  AND  FROM  EVERYWHERE 
IN  BETWEEN.  I  ALWAYS  KNOW  WHO  IS  ON  THE  GUEST  LIST  AND 
HAVE  THE  POWER  TO  DENY  THOSE  WHO  ARENT  ON  IT.  I  SNIFF  OUT 
THREATS  SO  YOU  CAN  STAY  PRODUCTIVE.  I  AM  MORE  THAN  A 
CISCO  CATALYST  6500. 


THIS  IS  THE  POWER  OF  THE  NETWORK.  ROW. 
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From  retail  storefronts  to  the  mili¬ 
tary’s  front  lines,  wireless  technology 
now  permeates  nearly  every  sector  of 
the  U.S.  economy. 

The  technology  has  come  a  long  way 
from  simple  bar-code  reading  with 
wireless  PDAs.  Today,  tags  affixed  to  retail  garments 
taken  into  a  dressing  room  can  wirelessly  signal  a 
wall-mounted  screen  to  display  color  choices  and 
fabric  information.  College  students  can  do  research 
in  the  cafeteria  instead  of  the  library,  and  forklift 

operators  can  save  themselves  hun¬ 
dreds  of  miles  of  travel  in  factories  by 
receiving  product  requests  from  com¬ 


puters  mounted  on  their  vehicles. 

By  the  end  of  ^2.  seven  out  of  10 
companies  had  adopted  wireless  tech¬ 
nology.  according  to  a  survey  of  1,251 
U.S.  and  Canadian  companies  in  18  in¬ 
dustries  by  IDC  in  Framingham,  Mass. 

“Economics  and  techrmlogy  are 
making  wireless  available  to  a  lot  more 
people,"  says  Ken  Dulaney,  an  analyst 
at  Gartner  Inc.  in  Stamford.  Conn. 
“We're  seeing  it  increase  in  its  capabil¬ 
ities.  People  know  what  it  can  do,  and 
they’re  working  on  projects  that  make 
sense  —  updating  them  more  into 
back-end  systems." 

Purchases  of  wireless  hardware 
reached  S2.2  billion  in  2002  and  are  ex¬ 
pected  to  top  S3.9  billion  by  2006.  ^- 
cording  to  research  firm  In-Stat/MDR. 
Units  sold  will  skyrocket  from  18  mil¬ 
lion  to  75  million  in  2006.  which  sug¬ 


gests  that  the  cost  of  deploying  wire¬ 
less  will  continue  to  fall 
To  learn  how  wireless  is  being 
adapted  to  meet  changing  needs,  we 
took  a  look  at  the  most  innovative  uses 
of  it  in  10  sectors  of  the  economy. 


EDUCATION 

The  Challenges  of  Being  Hrst 

Three  years  ago. 
Carnegie  Mellon 
University  was 
voted  "Most  Wired 
Campus"  by  the 
online  publicatiOD  Yahoo  Internet  Life 
for  its  pioneering  use  of  wireless 
access  in  more  than  30  buildings. 

Today,  five  years  after  the  university 
installed  its  fust  wireless  LAN.  admin¬ 
istrators  are  looking  to  upgrade  the 
system  with  new  standards  and  faster 


speeds,  which  will  require  1.200  new 
access  points  for  the  7.000  registered 
wireless  devices  on  campus. 

It's  a  problem  facing  many  institu¬ 
tions.  Some  87%  of  schools  and  institu¬ 
tions  surveyed  by  IDC  now  use  wire¬ 
less  technology,  and  90%  say  band¬ 
width  and  network  availability  issues 
top  their  list  of  technology  challenges. 

Rough  estimates  of  the  cost  of 
Carnegie  Mellon's  upgrade  are  about 
S3  million,  three  tiroes  what  the  uni¬ 
versity  has  spent  so  far  on  wireless. 
What's  more,  funding  isn't  as  plentiful 
as  it  was  five  years  ago,  says  Chuck 
Bartel,  director  of  netwoik  services. 

But  one  simple  truth  has  bumped  the 
project  up  the  priority  list:  "If  you 
don’t  deploy  it  yourself,  it  will  proba¬ 
bly  get  deployed  by  someone  else,  and 
in  a  manner  you  dM't  want."  most  like¬ 
ly  by  tech-sawy  students,  Bartel  says. 

Bartel  is  concerned  that  if  students 
don't  have  the  wireless  access  they 
need,  they’ll  fmd  cheap  hardware  at  a 
local  electronics  store  and  bring  it 
onto  campus.  "If  we  haven’t  put  the 
proper  security  in  the  mix.  anybody 
can  access  university  data,"  Bartel  says. 

The  combination  of  wireless  access 
and  tech-sawy  students  uncovers  an¬ 
other  truth  —  a  network  that’s  always 
avail^le  sometimes  shouldn’t  be. 

"At  times,"  says  Bartel,  "faculty 
doesn't  want  access  to  the  Internet  or 
instant  mess^;ing  between  students" 

—  during  tests,  for  example.  But  now 
that  wireless  is  being  embedded  into 
laptops  and  handheld  devices,  "it's  a 
little  more  problematic,"  he  notes. 

But  don't  expect  this  technology  in¬ 
stitution  to  step  back  hrom  the  bleed¬ 
ing  edge  anytime  soon.  Carnegie  Mel¬ 
lon  is  developing  new  uses  for  its  wire¬ 
less  netwoik  in  handhelds,  laptops,  ro¬ 
bots  and  wearable  computers. 

Students  in  one  graduate-level  de¬ 
velopment  course  are  working  on  in¬ 
telligent  ^nts  embedded  in  handheld 
devices  that  will  offer  weather  reports, 
restaurant  options  and  even  the  loca¬ 
tion  of  friends,  based  on  the  user’s  lo¬ 
cation.  The  university’s  robotics  insti¬ 
tute  is  experimenting  with  collecting 
information  by  attaching  wireless  com¬ 
ponents  to  n^ts.  "Once  you  have  the 
infrastructure  in  place."  Bartel  says. 

"the  juices  start  flowing  in  terms  of 
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how  somebody  can  use  it" 


"They’re  usii%  wireless  LANs  in 
classrooms  because  of  the  need  to 
move  around  and  just  to  give  studaits 
the  freedom  to  move  anytime,  any¬ 
where.”  says  Gartner’s  Dulaney.  "They 
do  it  for  convenience.  Plm,  th^  love 
to  play  with  that  stuff.” 


FINANCE 

When  rime  Is  Money 

Soon  after  launch¬ 
ing  its  frist  wireless 
offering  in  19%.  Fi¬ 
delity  Investments 
reali^  that  wire¬ 
less  subscribers 
were  very  attractive 
customers.  "They 
have  more  assets,  they’re  more  fmaiL- 
cially  active  and  more  tech-sawy.”  says 
Joe  Ferra.  chief  wireless  officer. 

That  appealing  combination  keeps 
the  Boston-based  firm  Iwtfning  to  its 
customers’  demands  for  new  wireless 
features  and  monitoring  their  use  of 
every  new  frmction. 


Today  the  company’s  wireless  offer¬ 
ing,  Fidelity  Anywhere,  lets  1^.000 
customers  get  real-time  stock  quotes, 
make  after-hours  trades,  short-sell  and. 
with  phone-integrated  BlackBerry 
handhelds,  call  a  Fidelity  rep  with  the 
touch  of  a  button.  Hke  firm  also  now 
lets  customers  manage  their  retire¬ 
ment  accounts,  charitable  donations 
and  insuraiKx  needs  wirelessly. 

While  wireless  capabilities  expand, 
security  issues  remain  an  obstacle. 
"The  Iwl  of  security  just  isn’t  high 
enough  yet”  for  many  financial  ser¬ 
vices  functions  to  be  deployed  wire¬ 
lessly.  says  Wai  Sing  Lee,  an  analyst  at 
Frost  &  Sullivan  in  Toronto.  Until 
Wireless  Application  Protocol  2.0  or 
802.U  standards  come  out,  real  innova¬ 
tion  will  be  put  on  hold,  he  says. 

Some  twcKhirds  of  the  ftrumcial  ser¬ 


vices  industry  uses  wireless  technolo¬ 
gy  today,  with  about  20%  of  those 
users  in  the  initial  stages  of  a  rollout, 
according  to  IDC.  What’s  more.  29%  of 
fmancial  services  companies  surveyed 
have  or  plan  to  provide  online  trading 
capabilities  to  their  clients. 

Ferra  says  security  remains  a  para¬ 
mount  concern,  and  Fidelity  continues 
to  “look  at  what’s  out  there”  in  terms 
of  security  standards.  But  right  now  it 
relies  on  encryption  and  authentica¬ 
tion  developed  usii^  the  Handheld 
Device  Markup  Language. 

The  firm  even  chooses  which  ftmc- 
tions  wrill  be  offered  on  each  type  of 
device  based  on  security  concerns, 
browser  capabilities  and  latency.  “It 
would  be  very  difficult  for  roe  to  con¬ 
vince  people  at  Fidelity  to  offer  real¬ 
time  quotes  over  a  given  device  if  we 
know  the  latency  is  30  to  40  seconds. 
It’s  got  to  be  a  lot  quicker  than  that.” 
Ferra  says,  adding  that  those  discrep¬ 
ancies  are  becoming  less  of  an  issue. 

“Fm  ccmvinced  this  will  become  a 
predominant  way  that  people  conduct 
their  business  with  us.  These  devices 
are  convenient,  more  reasonably  priced 
and  easier  to  use  than  ever  before.” 


ENERGY  &  CHEMICALS 

Wireless  Powers  Sales  Force, 
Productivity  of  Mainlenance  Cr^ 


flike  ntost  execu- 
tives  in  the  ener- 
L  43*9  A  gy  and  chemicals 

him  industry,  the  up- 

£  I  W  per  echelons  of 

±  B  Celanese  Chemi- 

^  cals  Ltd.  are  fairly 

conservative,  says 
Bill  Schmitt,  the 

director  of  e-business  at  Celanese. 
“Anything  that  looks  or  smells  like 
bleeding-edge  technolt^  makes  us 
pretty  nervous,”  be  says. 

But  the  S3  billion  chemicals  company 
was  ctKnfortable  enot^  writb  haiyfyid 
devices  and  wireless  LAhfe  by  2002  to 
adopt  the  technology  primarily  as  a 
productivity  tool  for  sales  staff.  Now 
the  Dallas-based  company  is  looking  at 
wireless  technology  to  q>eed  mainte¬ 
nance  at  its  chemical  pl^ts. 

"When  you  run  continuous  produc¬ 
tion  units,  time  is  money.”  Schmitt  says. 
When  a  pump  goes  dov^  for  example, 
maintenance  workers  travel  through 
foocball-field-size  plants  by  foot  or  bi¬ 
cycle  to  inspect  the  problem  aiKl  then 
travel  bad:  to  the  control  room  aiKi 
storage  room  to  arrange  for  repairs  — 
Continued  on  page  34 
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which  could  take  up  to  an  hour,  he  says. 

In  the  future,  employees  will  use 
Hewlett-Packard  Co.  Pocket  PCs  to  re¬ 
port  problems  and  arrange  for  repair 
equipment  to  be  brought  to  the  site.  A 
pilot  test  is  planned  for  later  in  the  year. 

Schmitt  also  wants  to  extend  wireless 
capabilities  globally  to  customers  in 
China  and  Asia.  But  he  acknowledges 
that  the  technology  “isn’t  there  yet.” 

Europe  and  Asia  were  quick  to  adopt 
mobile  phones  and  Short  Messaging 
Service  messaging,  he  says,  but  “in 
wireless  data,  the  U.S.  is  still  ahead." 


HEALTH  CARE 

Hands*off  Technology  in  a 
Hands-on  Business 

As  nurses  whisk  a 
critically  injured  pa¬ 
tient  into  the  emer¬ 
gency  room  at  St. 
Vincent’s  Hospital  in 
Birmingham,  Ala.,  a 
physician  grabs  his 
PDA  and  with  a  few 
stylus  strokes  access¬ 
es  the  patient's  med¬ 
ical  history  from  the 
hospital's  vast  clinical  data  repository. 

An  admitting  clerk  scans  the  pa¬ 
tient’s  insurance  card  and  driver’s  li¬ 
cense  using  a  handheld  device  at  the 
patient’s  bedside.  After  tests  and 
sui^ery,  caregivers  will  be  able  to  ac¬ 
cess  lab  results,  medication  orders  and 
surgery  notes  through  wireless  note¬ 
book  computers  or  Pocket  PCs  that  are 
synchronized  with  hospital  systems  for 
up-to-the-minute  accuracy. 

These  everyday  uses  of  wireless  rep¬ 
resent  just  the  beginning  of  St.  Vin¬ 
cent’s  plans  for  the  six-building  hospi¬ 
tal  campus,  part  of  Ascension  Health 
Inc.,  an  $8.9  billion  health  care 
provider  based  in  St,  Louis.  The  St. 
Vincent’s  wireless  network  is  the 
largest  such  network  in  health  care  in 
the  Southeast. 


“The  heart  of  health  care  is  informa- 
says  Stettheimer.  “When 

you  can  make  information 
anytime,  anywhere,  the 

for  huge  quality 

eight  out 

ularly  use  technology  today, 

to 

care  workers 

environments  where  there's  a 
to  gain  access  to  informa- 
says  Chris  Kozup,  an  analyst 
Meta  Group  Stamford.  Conn. 

The  first  phase  Vincent’s 
$1.6  million, 

installing  167  Cisco  Aironet  350  Series 

access  points  around  the  campus  and  a  PCs,  Fujitsu  St^istic  3500  Tablet  PCs 
Cisco  WLAN.  The  wireless  network  and  some  Dell  and  Compaq  notebook 
went  live  in  July  2002  with  35  users,  in-  computers  using  Cisco  Aironet  350 
eluding  physicians  and  admitting  network  interface  cards.  By  March 

clerks  who  used  Compaq  iPaq  Pocket  2003  the  number  of  users  had  doubled. 
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As  pan  of  a  “total  leap"  into  wire¬ 
less.  Stertheimer’s  team  is  piloting 
wireless  voice  technolog>’  from  Vocera 
Communications  that  allows  clinicians 
to  speak  into  badges  worn  on  their 
lapels  to  contact  co-workers. 

Ultimately.  600  hospital  workers,  in¬ 
cluding  doctors,  nurses,  physical  thera¬ 
pists.  transporters,  social  workers  and 
pastoral  st^.  will  send  and  receive  in¬ 
formation  wirelessly  using  role-based 
security,  which  restricts  the  kinds  of 
information  these  workers  can  access. 

Return  on  investment  is  measured  in 
terms  of  time  saved  and  patient  satis¬ 
faction.  In  the  future,  administrators 
will  measure  the  time  it  takes  to  get  a 
medical  order  through  the  system. 

Stettheimer  .says  the  technolt^’  will 
succeed  because  physicians  have  been 
closely  involved  in  designing  and  im¬ 
plementing  the  system.  “That  puts 
them  in  a  position  of  ownership  and 
investment  in  making  sure  that  it 
w'orks  well.”  be  says. 


MANUFACTURING 

The  Shortest  Distance  Between 
Two  Points  Is  Wireless 

Automotive  and 
aerospace  plants 
lead  the  manufac¬ 
turing  pack  in  wire¬ 
less  device  use, 
with  about  tAvo- 
thirds  of  all  compa¬ 
nies  actively  using 
the  technology. 

General  Motors  Corp.'s  Cadillac  and 
Buick  assembly  plants  mounted  wire¬ 
less  computers  from  Symbol  Technolo¬ 
gies  Inc.  in  Hoitsville,  N.Y..  on  forklifts 
so  drivers  can  wirelessly  collect  and 
transmit  data  from  the  factory  or  ware¬ 
house  floor.  The  forklift  operators  can 
also  receive  work  instructions  and  and 
updates  without  leaving  their  vehicles. 

The  wireless  network  Is  expected  to 
save  $1  million  at  one  GM  assembly 
plant,  according  to  a  company  state¬ 
ment.  Forklift  traffic  has  d^lined  by 
400  miles  each  day.  After  nine  months 
of  wireless  use,  forklift  operators  now 
average  60  to  70  deliveries  a  day.  dou¬ 
ble  tlw  number  of  deliveries  they  were 
making  before  the  system  went  live. 

In  a  few  years,  manufacturers  may 
be  able  to  catch  product  defects  by 
sensing  out-of-range  vibrations  in  in¬ 
dustrial  equipment  using  “smart  dust." 

Carnegie  Mellon  University's  MEMS 
Laboratory  is  developing  the  devices, 
which  are  tiny  wireless  microelectra- 
mechanical  sensors  (MEMS)  that  can 


detect  evetyihing  from  light  to  vibra¬ 
tions.  Thanks  to  recent  breakthroughs 
in  silicon  and  fabrication  techniques, 
these  "motes"  could  eventually  be  the 
size  of  a  grain  of  sand,  though  each 
would  contain  sensors,  computing  cir¬ 
cuits,  bidirectional  wireless  communi¬ 
cations  and  a  power  supply'.  Motes 
would  gather  scads  of  data,  run  com¬ 
putations  and  communicate  that  data 
using  two-way  band  radio  between 
motes  at  distances  up  to  1.000  ft. 

Manufacturers  are  already  experi¬ 
menting  with  triangulation,  which  uses 
wireless  access  points  strategically 
placed  throughout  a  plant.  The  precise 
location  of  mulrimillion-doltar  equip¬ 
ment  that  moves  around  the  plant  can 
be  tracked  using  radio  frequency  iden¬ 
tification  (RFID)  tags  mounted  on  the 
equipment.  “TTiis  allows  asset  track¬ 
ing."  says  Meta's  Kozup.  That's  a  bit  of 
a  future  application,  but  some  are  ex¬ 
perimenting." 


RETAIL 

This  Season's  Must*Have: 

An  RFID  Tag 

Retailers  are  old- 
time  users  of  wire¬ 
less  tcchnologs’  for 
communicating  be¬ 
tween  the  checkout 
counter  and  the  back 

*  ®  ®  ®  room  and  mobile 
point-of-sale  terminals.  But  today's 
wireless  technolc^'  can  improve  in¬ 
ventory  accuracy,  fight  fraud  and  in¬ 
crease  sales. 

Forward-thinking  retailers  arc  ventur¬ 
ing  into  RFID  technology,  chip-embed¬ 
ded  tags  that  hold  more  information 
than  a  bar  code  and  don't  require  di¬ 
rect  contact  with  a  reading  device. 

“A  good  25%  of  ail  major  retailers 
have  dabbled  in  RFID."  says  BUI  Allen. 
eMarkeiing  manager  at  Texas  Instru¬ 
ments  Inc.'$  RFID  Systems.  But  most 
are  holding  off  on  ftill-blown  imple¬ 
mentations  because  of  the  poor  econo¬ 
my,  equipment  costs  or  complicated 
supply  chains. 

Readers  mounted  on  display  shelves 
in  stores  can  survey  item  tags  and  send 
inventory  data  to  back-end  systems 
rather  than  relying  on  point-of-sale 
data  or  manual  counts.  In  the  stock 
room,  a  lagged  box’s  contents  can  be 
identified  without  opening  the  box. 

At  Prada’s  flagship  store  in  New 
York.  RFID-enabled  dressing  rooms 
are  equipped  with  plasma  display 
screens.  When  a  customer  brings  a  gar¬ 
ment  into  the  room,  the  screen  reads 


the  tag  and  displays  information  on  the 
designer  and  choices  of  fabric  and  col¬ 
or:  it  even  offers  accessory  ideas. 


While  reiaUers  such  as  Wal-Mart 
Stores  Inc.  and  Target  Corp.  have  pilot¬ 
ed  RFID  tags  on  boxes  and  pallets,  re¬ 
tailers  that  manufacture  their  own 
clothing  lines  are  experimenting  with 
individual  garment  tags.  “Wc  felt  that 
reuUcrs  who  have  a  vetiically  integrat¬ 
ed  supply  chain  like  Benetton  or  J. 
Crew  or  The  Limited,  who  are  manu¬ 
facturing  their  own  goods,  would  be 
the  first  to  t.'ike  advantage  of  item-level 
RFID,"  says  lim  Crawford,  an  ana^-st  at 
Forrester  Research  Inc.  in  Cambridge. 
Mass.  If  reiaUcrs  have  control  over  the 
manufacturing  facility,  tags  can  be  ap¬ 
plied  at  the  time  of  manufacture  at  no 
extra  cost,  he  adds. 

But  at  25  to  50  cents  apiece,  the  cost 
of  individual  tags  is  keeping  item-level 
RFID  at  bay  for  many  retailers. 

"I  foresee  the  use  of  RFID  at  the 
item  level  in  five  to  seven  years."  Allen 
predicts.  “I  foresee  more  applications 
used  for  RFID  for  the  carton  and  pallet 
level.  We  are  not  anywhere  near  being 
able  to  provide  retailers  with  a  5-cent 
or  penny  tag.  The  technology  is  just 
not  there  yet." 


TRANSPORTATION 

Cost  Is  Still  a  Roadblock 
For  Some  Carriers 

^  About  onc-third 
of  the  companies 
in  ibe  transporta¬ 
tion  industry 
used  wireless 
technology  at  the 
beginning  of 
2002.  according 
to  IDC.  The  other  two-thirds  indicated 
that  they  planned  to  evaluate  or  imple¬ 
ment  the  technology  by  the  end  of  the 
year.  Many  are  installing  wireless  fleet- 
tracking  devices. 

Nationwide  trucking  company  TRL 
Inc.  announced  plans  in  February  to 
convert  its  entire  fleet  of  6(K)  trucks  to 


■ST 


Aether  Systems  Inc.’s  MrihileMa.x  sys¬ 
tem  for  wiriic.«»  tracking  and  messag¬ 
ing,  The  company  has  used  integrated 
mobile  communications  in  its  fleet  for 
nearly  10  years  and  recently  decided  to 
upgrade  to  a  system  that  automatically 
switches  between  land-based  and 
satellite  communications  without  dri¬ 
ver  or  dispatcher  intervention 

■’ll  makes  it  easier  to  get  the  informa¬ 
tion  necessary  to  di.spatch  and  a.ssign 
loads,"  said  Mike  Brown,  vice  presi¬ 
dent  of  sales  and  marketing  for  the 
transportation  and  logistics  division  .it 
Owings  Mills,  Md  -based  Aether. 

Pinston.  Pa  -based  TRL  said  the  new 
system  will  help  improve  the  produc¬ 
tivity  of  its  fleet  and  bolster  customer 
service.  But  when  it  comes  to  wireless 
adoption,  some  industiy  executives  sav 
cost  is  one  of  the  biggest  roadblock.s. 

“Customers  are  demanding  that 
wireless  providers  take  us  to  a  much 
lower  cost,"  but  instead  the  industrA'  is 
moving  to  expand  otTerings,  says  Dave 
BetTA-.  vice  president  of  Phoenix-based 
Swift  Transportation  Co.  “We  don’t 
want  to  watch  TN’  from  our  trucks;  we 
warn  lower  costs." 


LOGISTICS 

Getting  It  There  Faster 

MThe  logistics  in¬ 
dustry  has  em¬ 
braced  w-ireless 
lechnolug>' 
wholeheartedly  for  the  past  three 
years.  Wireless  I.AN5  arc  used  to  man¬ 
age  large  segments  of  the  logistics 
chain,  from  container  ports  that  handle 
bulk  shipments  of  consumer  goods  to 
package  dclivciy  giants  that  track  and 
manage  worldwide  shipments.  Com¬ 
petitors  in  these  areas  now-  use  wireless 
'innovation.s  to  gain  business  advantage. 

MemphLs-based  FedEx  Corp.  ratch¬ 
eted  up  the  competition  with  Atlanta- 
based  United  Parcel  Service  Inc.  in 
February  when  it  began  deploying  new 
handheld  de\nccs  for  its  40,000  FedEx 
Express  couriers  as  pan  of  a  $150  mil¬ 
lion  technolog>'  investment.  The  com¬ 
pany  selected  Motorola  Inc.  to  dcArelop 
the  PowerPad  handhelds,  which  use 
Microsoft  Corp.’s  Pocket  PC  operating 
system  and  automated  courier  dis¬ 
patch.  pickup  and  deliver>-  operations. 

FedEx  picks  up  and  delivers  about 
3.5  million  packages  a  day.  and  the 
PowerPad  was  designed  to  save  10  sec¬ 
onds  at  each  stop,  according  to  Ken 
Pasley.  the  courier's  director  of  wire¬ 
less  systems  development  FedEx  ex¬ 
pects  a  complete  rollout  over  18  months. 
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HEALTH  CARE 

Hands-off  Technology  in  a 
Hands-on  Business 


As  nurses  whisk  a 
critically  injured  pa¬ 
tient  into  the  emer¬ 
gency  room  at  St. 
Vincent’s  Hospital  in 
Birmingham,  Ala.,  a 
physician  grabs  his 
PDA  and  with  a  few 
stylus  strokes  access¬ 
es  the  patient's  med¬ 
ical  history  from  the 
hospital’s  vast  clinical  data  repository. 

An  admitting  clerk  scans  the  pa¬ 
tient’s  insurance  card  and  driver’s  li¬ 
cense  using  a  handheld  device  at  the 
patient’s  bedside.  After  tests  and 
surgery',  caregivers  will  be  able  to  ac¬ 
cess  lab  results,  medication  orders  and 
surgery  notes  through  wireless  note¬ 
book  computers  or  Pocket  PCs  that  are 
synchronized  with  hospital  systems  for 
up-to-the-minute  accuracy. 

These  everyday  uses  of  wireless  rep¬ 
resent  just  the  beginning  of  St.  Vin¬ 
cent’s  plans  for  the  si.vbuilding  hospi¬ 
tal  campus,  part  of  Ascension  Health 
Inc.,  an  S8.9  billion  health  care 
provider  based  in  St.  Louis.  The  St. 
Vincent’s  wireless  network  is  the 
largest  such  network  in  health  care  in 
the  Southeast. 


Continued  from  puge.^i 

which  could  take  up  to  an  hour,  he  says. 

In  the  future,  employees  will  use 
Hewlett-Packard  Ci'.  Pocket  PCs  to  re¬ 
port  problems  and  arrange  for  repair 
equipment  to  be  brought  to  the  site.  A 
pilot  test  is  planned  for  later  in  the  year. 

Schmitt  also  wants  to  extend  wireless 
capabilities  globally  to  customers  in 
t^hina  and  Asia.  But  he  acknowledges 
that  the  technology  "isn’t  there  yet." 

Kurope  and  Asia  were  quick  to  adopt 
mobile  phones  and  Short  Messaging 
Service  messaging,  he  says,  but  “in 
wireless  data,  the  U.S.  is  still  ahead." 


"The  heart  of  health  care  is  informa¬ 
tion,"  says  CIO  Jim  Stettheimer.  "When 
you  can  make  information  available 
anytime,  any-where,  you’re  laying  the 
groundwork  for  huge  strides  in  quality 
and  patient  outcomes." 

At  least  eight  out  of  10  hospitals  reg¬ 
ularly  use  wireless  technology  today, 
according  to  IDC. 

Health  care  workers  "are  in  highly 
mobile  environments  where  there's  a 
requirement  to  gain  access  to  informa¬ 
tion."  says  Chris  Kozup.  an  analyst  at 
Meta  Group  Inc.  in  Stamford.  Conn. 

The  first  phase  of  St.  Vincent’s  proj¬ 
ect.  which  cost  S1.6  million,  included 
installing  167  Cisco  Aironet  350  Series 
access  points  around  the  campus  and  a 
Cisco  WLAN.  The  wireless  network 
went  live  in  July  2002  with  35  users,  in¬ 
cluding  physicians  and  admitting 
clerks  who  used  Compaq  iPaq  Pocket 


PCs.  Fujitsu  Stylistic  3500  Tablet  PCs 
and  some  Dell  and  Compaq  notebook 
computers  using  Cisco  Aironet  350 
network  interface  cards.  By  March 
2003  the  number  of  users  had  doubled. 


THE  HEART  OF 
HEALTH  CARE  IS 
INFORMATION 
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As  p.irl  of .1  "toijl  Ifjp"  into  wire¬ 
less.  Stottheimer's  tejm  is  piloiinjj 
'v  ireless  voice  teehnoioey  from  ViKcr.i 
( A'mmunicjtions  ihai  allows  clinicians 
to  speak  into  badges  wt»rn  <'ii  their 
lapels  to  contact  co-w  orkers. 

Ultimately.  o(H)  hospital  workers,  in¬ 
cluding  doctors,  nurses,  physical  thera¬ 
pists.  transporters.  si>cial  workers  and 
pastoral  staff,  will  send  and  receive  in¬ 
formation  wirelessly  using  role-based 
security,  which  restricts  the  kinds  of 
information  these  workers  can  access. 

Return  on  investment  is  measured  in 
terms  of  time  saved  and  patient  satis¬ 
faction.  In  the  luture.  administrators 
will  measure  the  time  it  takes  to  get  a 
medical  order  through  the  system. 

Stettheimer  says  the  technology  will 
succeed  because  physicians  have  been 
closely  involved  in  designing  and  im¬ 
plementing  the  system.  •That  puts 
them  in  a  position  of  ownership  and 
investment  in  making  sure  that  it 
works  well."  he  savs. 


MANUFACTURING 

The  Shortest  Distance  Between 
Two  Points  Is  Wireless 

Aun*motive  and 
^  aerospace  plants 

■  I  lead  the  manufae- 
turing  pack  in  vvire- 

with 

thirds 

nies 

the  technology. 

General  Motors  Corp.’s  Cadillac  and 
Buick  assembly  plants  mounted  wire¬ 
less  computers  from  Symbol  Technolo¬ 
gies  Inc.  in  Holisville.  N.^’..  on  forklifts 
so  drivers  can  wirelessly  collect  and 
transmit  data  fmm  the  factory  or  ware¬ 
house  flo«>r.  The  forklift  operators  can 
als^i  reccis'c  work  instructit»ns  and  and 
updates  without  leaving  their  vehicles. 

The  wireless  network  is  e.spccted  to 
save  SI  million  at  one  GM  assemblj 
plant,  according  to  a  company  state¬ 
ment.  Foridift  traffic  has  declined  by 
400  miles  each  day.  After  nine  months 
of  wireless  use.  forklift  operators  now 
average  00  to  70  deliveries  a  day.  dou¬ 
ble  the  number  of  deliveries  they  were 
making  before  the  system  went  live. 

In  a  few  years,  manufacturers  may 
be  able  to  catch  prv»duct  defects  by- 
sensing  out-of-range  vibrations  in  in¬ 
dustrial  equipment  using  "smart  dust." 

Carnegie  Mellon  University’s  MEMS 
Laboratory  Ls  dex’eloping  the  dex-ice.s. 
which  are  tiny  wireless  microelectro- 
mcchanica!  sensors  (MEMS)  that  can 


delect  everything  from  light  to  vibra¬ 
tions.  Thanks  at  recent  bre.ikthroughs 
in  silicon  and  fabricatiim  techniques, 
these  "moles’'  could  eventualh  be  the 
size  of  a  grain  of  sand,  though  each 
would  contain  sensors,  computing  cir¬ 
cuits,  bidirectional  wireless  eommunt- 
catitms  and  a  povver  supply  Motes 
vvtiuld  gather  scads  ofdat.i.  run  com¬ 
putations  and  communicate  that  data 
using  two-way  band  radio  between 
motes  at  distances  up  to  l,00il  ft. 

Manufacturers  are  already  experi¬ 
menting  with  triangulation.  which  uses 
wireless  access  points  strategically 
placed  thnvughout  a  plant.  The  precise 
location  of  multimillion-dollar  equip¬ 
ment  that  moves  around  the  plant  can 
be  tracked  using  radio  frequency  iden¬ 
tification  (RFU>t  tags  mivunted  t*n  the 
equipment.  ’  This  allows  asset  [nick¬ 
ing,’'  says  Meta's  Kozup.  ''That’s  a  hit  of 
a  future  application,  but  s(»me  are  ex¬ 
perimenting." 


RETAIL 


This  Season's  Must-Have 
An  RFIO  Tag 

Retailers  are  old- 

communicating  be- 
I  I  tween  the  checkout 

LfiaBS  cttunter  and  the  back 
*  *  room  and  mobile 
point-of-sale  terminals.  But  today’s 
wireless  technology  can  improve  in¬ 
ventory  accuracy,  fight  fraud  and  in¬ 
crease  sales. 

Forward-thinking  a'tailers  are  ventur¬ 
ing  into  RFID  technology,  chip-embed¬ 
ded  tags  that  hold  more  inh>rmation 
th.in  a  bar  code  and  don't  require  di 
reel  eontaet  with  a  reading  device. 

"A  gtK>d  25‘’h  of  all  major  retailers 
have  dabbled  in  RFIO.’’  says  Bill  Allen. 
cMarketing  manager  at  Texas  Instru¬ 
ments  Inc.’s  RFID  Systems.  But  mitsi 
arc  holding  ofl  on  full-blown  imple¬ 
mentations  because  of  the  poor  ecom>- 
my.  equipment  costs  or  complicated 
supply  chains. 

Readers  mounted  on  display  shelves 
in  stores  can  survey  item  tags  and  send  ! 
inventory  data  to  back-end  systems  j 
rather  than  relying  on  point-i)f-saIe 
data  or  manual  counts.  In  the  sttvk 
room,  a  tagged  box’s  cinttents  can  be 
identified  without  opening  the  box. 

At  Ih’ada’s  flagship  store  in  New 
York,  RFID-enabled  dressing  rtHvms 
arc  equipped  with  plasma  display 
screens.  When  a  customer  brings  a  gar¬ 
ment  into  the  room,  the  screen  reads 


THE  TECHNOLOGY  IS  JUST 
NOT  there  yet 


the  tag  and  displays  information  on  the 
designer  and  choici^s  of  fabric  and  col¬ 
or:  It  even  offers  accessi'rv  idea-- 
W  hill-  retailers  such  as  U'.tl-M.in 
Mores  Inc.  .ind  I.irgct  forp.  have  piloi 
ed  RFID  tags  on  btixvs  .tnd  p.tllcts.  re 
tailers  that  ni.inufacture  their  own 
clothing  lines  are  experimenting  vxith 
mdividu.il  g.irinent  uig.s.  "We  fell  th.it 
relviilers  vv  ho  h.ne  .i  vcrtivally  integral 
ed  supply  ch.iln  like  Benetton  or 
Urovv  or  The  1  itnited.  who.irc  niaiui- 
faciuring  their  ovv  n  g<*ods.  would  he 
the  first  to  t.ike  .ijvani.ige  of  item-levcl 
KTll).  '  says  lim  (  aawtord..in  .uialyst  at 
Torresler  Rese.trch  Inc.  in  i  anibriJge. 
M.is".  ]|  retailers  have  control  over  the 
manufacturing  facility,  tags  van  be  .ip- 
plieJ  at  the  time  of  manufacture  .t!  n*i 
extra  c»*.st.  he  .tdds. 

But  at  25  to  50  cents  .tptece  the  cost 
of  individual  tags  is  keeping  item-level 
RFID  at  bay  fi»r  many  retailers 
"I  foresee  the  use  of  RFID  at  the 
item  level  in  five  to  seven  years."  Allen 
predicts.  ‘I  foresee  more  applications 
Used  ft>r  RFID  lor  the  carton  and  pallet 
level.  \S’c  ai\‘  not  anywhere  near  being 
able  to  pnwide  retailers  with  a  5-cent 
i'r  p-enny  tag.  1  he  technology  is  jusi 
not  there  vet." 


TRANSPORTATION 

Cost  Is  Slill  a  Roadblock 
Foi  Some  Carnerb 


n 


/  About  one-third 
^  ofthect'mpanies 
V  in  the  tratvspivrta- 
^  '  j  turn  industry 

wireless 

V  technology  at  the 

K'ginningof 
2002.  acvrnrding 

to  ID(-.  The  4»ther  two-thirds  indk'atcd 
that  they  planned  ii»  evaluate  or  imple¬ 
ment  the  leehnnkvgy  by  the  end  of  the 
year.  Many  arc  installing  wireless  ficvi- 
tracking  devices. 

Nationwide  trucking  company  TRl, 
Inc.  announced  pbns  in  February  to 
convert  its  entire  fleet  of  (lOO  trucks  to 


Aether  Msiem-  lui.  -  MobiUM.ix  ^v-,- 
tern  li'r  w  irekw--  traskuig  and  nu-^s.|g 
mg  I  hi  comr.im  h.is  ii«.eJ  miegr.tit  J 
mitbili  lomnioivu  .iiions  m  tis  lice'  tor 
nearly  10  vv.tr- and  reivnifv  di-i  ijeoi.. 
upgrade  to  .i  svitem  lh.il  .lutoni.ilu  aU\ 
swiuhe-  beiueen  l.ind  h.»>i  J  .ind 
saieiitte  i««mnumie.itions  witfv-ut  .fri 
Ver  or  disp.ttvhi  i  iiilcrveniion 

■'ll  m.!k*'sit  easier  to  gi  i  t|u  mforni.i- 
non  iu-eess.trx  to  Jisp.itvh  .mJ  .i-.ign 
Ucids,’’ S.II  J  Mike  Brown  vice  presi 
dent  »»f  s.!lcs  and  m.irketioe  for  ilii 
traiispori.ttion  .md  logivins  Jwjsion  .ii 
v>vvjngs  Mills.  .Md  -b.iseJ  .-Xethei 

liiision.  P.».-|\iscJ  I  HI  s.itdlhenew 
sy  v|i-ni  w  ill  help  iniprote  the  produi  - 
tiv  u\  ni  its  ilei-t  and  bolsti-r  i  ustoniei 
serv  »ei  But  w  hen  it  %  i  mies  to  w  irelcss 
.idopiion.  some  industry  exi-eulives  s.ty 
l  Ost  is  one  ol  thi  biggest  ro-ulblin  ks 
'»  ust.'iners  .iri-  dvm.mding  that 
wireless  providers  i.ikt-  us  to  a  miieh 
lower  eosi.’  bin  instead  (he  industry  is 
iTioi  ing  to  exp.ind  olferuigs.  s.i\s  D.,iv 
Berry,  viee  president  oj  I'hoenix-lMsed 
Swift  TransporiJiion  t  o  'We  don  i 
want  to  watch  i  from  our  trucks;  we 
want  loweriosts. 


LOGISTICS 

Gefiinq  It  Then:'  F.isl«-t 

ihcli*gisiicvtn- 
dusiry  has  eni- 
brateJ  wireless 
technology 
whtdcheartedly  for  the  p.ist  three 
years  Wireless  LANs  are  used  to  man¬ 
age  large  segments  ol  the  logisiii-s 
eh.dn.  fnnn  cont.iiner  jsoris  ih.u  handle 
bulk  shipments  of  etmsuiner  giniJs  to 
package  deliv  cry  giants  that  tr.u  k  .ind 
manage  worlJw  ide  shipments.  Uom- 
petiiors  in  thcM-  .in-as  now  use  vvircless 
innovations  to  gain  business  advantage 
Memphis-based  FedFx  (iorp  ratch¬ 
eted  up  the  competition  w  ith  AtUinta- 
b.ised  L'nitod  Parcel  Service  Inc.  in 
February  whentii  began  deploying  new 
handheld  devices  lor  its  dO.ikH)  FeJF.v 
Express  ctmriers  as  pan  of  a  SI5<»  mil¬ 
lion  icvhnology  mvi-stment.  The  com¬ 
pany  selected  M«*it*n*la  Inc.  to  develop 
the  PowerPad  handhelds,  which  use 
Micn*sofi  Corp^'s  hukei  P(  opiTatmg 
system  and  automated  courier  dLs- 
p.itch.  pickup  and  delivery  operations. 

FedFx  picks  up  and  delivers  about 
.T5  million  packages  a  day.  and  the 
IkiuerPad  was  di^signed  to  save  10  sec¬ 
onds  at  each  stop,  according  to  Ken 
Pasley.  the  courier’s  director  of  wire¬ 
less  systems  development.  K’dFx  ex¬ 
pects  a  complete  rollout  over  lb  months. 
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Unlike  hs  current  SuperlVacker 
handhelds,  also  developed  by  Motoro* 
la,  the  new  PowerPads  can  exchange 
data  with  FedEx's  back-end  systems, 
including  its  Web-based  package¬ 
tracking  applications,  over  AT&T 
Wireless  Services  Inc.’s  nationwide 
mobile  data  network. 

Craig  Mathias,  an  analyst  at  Farpoint 
Group  in  Ashland.  Mass.,  called  the 
rollout  a  psychological  victory  over 
UPS,  which  is  planning  a  similar  roll¬ 
out  for  early  this  year,  as  well  as  other 
undisclosed  wireless  innovations. 


GOVERNMENT 


Fighting  Terrorism  With  Wireless 


Federal,  state  aitd 
local  governments 
—  notorious  for 
staying  safely  be¬ 
hind  the  tec^olo- 
gy  curve  —  are  un¬ 
characteristically  bul^h  on  wireless 
technology.  For  many,  the  moves  are  a 
reaction  to  terrorism  threats  and  new 


homeland  security  requirements. 

The  Los  Angeles  Police  Department 
(LAPD)  plans  to  install  high-band¬ 
width  WLANs  at  its  27  police  stations 
by  July  to  send  mug  shots,  maps  and 
graphical  data  to  police  officers  on  the 
street.  The  LAPD  will  d^loy  1.500 
Pocket  PC  handheld  computers  made 
by  Symbol  Technologies,  which  will 
include  802 Jib  WLAN  cards. 

Police  departments  in  Baltimore  and 
Glendale.  Calif.,  have  also  developed 
interfaces  between  the  WLAN  radios 
built  into  the  Symbol  handhelds  and 
the  WAN-based  radios  used  in  police 
cars.  Officers  can  use  handhelds  as  re¬ 
mote  units  connected  to  the  WAN 
while  outside  their  vehicles. 

The  U.S.  Department  of  Health  and 
Human  Services  in  March  announced 
plans  to  test  a  wireless  network  operat¬ 
ed  by  San  Mateo.  Calif-based  ePocrates 
Inc.  to  transmit  bioterrorisc  health 


alerts  to  Palm  OS-based  handheld 
computers  used  by  doctors  across  the 
country.  Already,  250.000  doctors  na¬ 
tionwide  use  ePocrates  handhelds  to 
determine  the  correct  prescription  and 
dosage  for  sick  patients. 

“Government  is  moving  with  the 
[wireless  technology]  curve,"  says 
Gartner’s  Dulaney.  “The  entire  Con¬ 
gress  has  RJM  BladcBerries  for  e-mail. 
They  rely  on  it."  On  the  state  level, 
wireless  use  is  fragmented  because  of¬ 
ficials  disagree  on  which  departments 
have  critical  communications  needs 
that  would  require  it,  be  says. 

Security  and  business  concerns  in 
New  York  have  officials  there  consid¬ 
ering  putting  wireless  access  points  in 
subway  tunnels  so  people  can  talk 
when  they're  underground.  "New  Yoik 
believes  being  connected  is  extremely 
important  for  the  health  of  its  business, 
especially  since  S/IL”  Dulaney  says, 

DEFENSES  MILITARY 

Wireless  on  the  Front  Lines 

On  the  battle¬ 
fields  of  Iraq, 
A%hanistan  and 
Southwest  Asia. 
Army  troops 
have  replaced  the  sneakemet  usc^  to 
requisition  supplies  and  maintenance 
during  the  19^  Persian  Gulf  War  with 
wireless  technology  that  can  save  time, 
money  and  maybe  even  lives. 

Now.  instead  of  loading  a  floppy  disk 
with  logistics  information,  supply 
chain  reorder  forms,  mechanical  parts 
orders  and  requisitions  for  vehicle 
maintenance  and  then  carrying  it  to 
base  camp  for  processing,  troops  are 
using  CAISI  (pronounced  “Casey"), 
the  Army’s  Combat  Service  Support 
Automated  Information  Systems  Inter¬ 
face.  The  technology  went  into  the 
field  in  October  2002  and  is  now  used 
by  four  of  the  Army's  10  divisions. 

“It  used  to  take  a  week  or  so  to  get 
these  supplies  commissioned  and  back 
to  the  troops,"  explains  Maj.  Salvatore 
Fiorella,  assistant  product  manager. 
"CAISI  increases  the  capability  to  or¬ 
der  supplies  by  getting  the  wheels 
turning  immediately,  as  soon  as  the 
transmission  is  made." 

In  one  instance.  CAISI  saved  a  unit 
in  Southwest  Asia  S40.000  in  hardware 
costs,  the  two  weeks  it  would  have  tak¬ 
en  to  run  wire,  and  botirs  of  negotia¬ 
tions  with  the  host  country  to  get  apt- 
proval  for  laying  down  extra  wire. 

The  system  can  transmit  data  about 
three  to  four  miles,  which  has  limited 


its  use  once  troops  venture  deeper  Into 
enemy  territory.  But  “with  satellites 
linked  to  (2A1SI.  that  just  brings  it  to 
the  battleneld,"  Fiorella  adds. 

The  wireless  system  consists  entire¬ 
ty  of  off-the-shelf  hardware  and  soft¬ 
ware.  Laptop  computers  in  the  field 
are  physically  connected  to  wireless 
modules,  which  are  triple-encrypted 
using  software  from  Fortress  Tech¬ 
nologies  loc.  in  Oldsmar.  Fla.,  even 
though  CAISFs  use  is  restricted  to  “sen¬ 
sitive  but  unclassiffed"  information. 

<^SI  is  just  one  of  the  Army’s  ef¬ 
forts  to  have  802.Ub  wireless  deices 
deployed  in  the  field  between  2008  and 
2010,  once  all  security  issues  have  been 
addressed.  “We  have  to  worry  about 
encryption,  we  have  to  worry  about 
firewalls,  we  have  to  worry  about  non¬ 
working  communication  lines,"  says 
(^rge  Knizew^  lead  engineer  and 
contractor  at  the  U.S.  Array  Program 
Emrutive  Office,  Enterprise  Informa¬ 
tion  Systems  (PEO,  EIS),  at  Fort 
Belvoir.  Va.  “We  don’t  want  to  be  on 
the  bleeding  edge  of  technology." 

Today,  government  agencies  require 
wireless  technology  to  meet  the  Feder¬ 
al  Information  Processing  Standards 
(FIPS).  “Unless  it’s  up  to  that  level  of 
security,  government  agencies  can’t 
deploy  them,"  says  Frost  &  Sullivan’s 
Lee.  CAISI  is  one  of  the  fust  Army  sys¬ 
tems  to  be  FIPS-compliant,  which 
opens  the  door  to  many  foture  uses. 

“I  see  wireless  bringing  better  assis¬ 
tance  to  the  [troops]  that  are  deployed, 
providing  rapid  i^rmation  so  they 
can  see  what's  available  on  the  battle¬ 
field,  which  will  help  leaders  to  deter¬ 
mine  what  combat  units  are  equipped 
to  go  forward."  Fiorella  says.  I 


CoUettis  a  freelance  writer  in  Sterling, 
Va.  Contact  her  at  steoUett@ooLcom. 
BobBrewinandTomHoffinanaiso 
contributed  to  this  report. 


Got  Outsourcing 
Questions? 

Computerworld’s  New  IT  Executive  Summit  Series  Has  the  Answers 


If  you’re  an  IT  executive  in  an 
end-user  organization,  apply  to 
attend  Computerworld’s  upcoming 
complimentary  half-day  summit  on 
IT  Outsourcing:  The  Offshore 
Alternative. 

Robust  global  communication 
technologies  and  state-of-the-art 
security  tools  have  made  IT  out¬ 
sourcing  an  increasingly  viable 
option  to  achieve  ROI.  Part  of 
Computerworld’s  new  IT  Executive 
Summit  Series,  this  invitation-only, 
4-hour  summit  will  explore  how 
companies  are  realizing  tangible 
benefits  from  outsourcing  IT 
application  development, 
integration  and  management. 

Seating  is  limited,  so  apply 
todayl 


Chicago,  Illinois 

Thursday,  May  15,  2003,  8:00am  to  Noon 
Palmer  House  Hilton,  “Parlor  H” 


8;00ani  to  8;45am 
8:45am  to  9:00am 


9:00^tfn  to  9:45am 


9:45am  to  10:15am 


Registration  and  Networking  Breakfast 

Welcome  and  Opening  Keynote 
Outsourcing  Watch  2003: 

The  Best  of  Both  Shores 

Maryfran  Johnson,  Editor  in  Chief. 
Computerwofid 

Industry  Update 

Evaluating  Your  IT  Sourcing  Optkms 

Bart  Erkins.  Managing  Partner, 

Leverage  Partners 

Business  Case  Study 

James  Beattie.  EVP  and  CTO. 

CCC  Information  Services 


10:15am  to  10:30am 


Refreshment  Break 


10:30am  to  11:30am  Outsourcing  Strategies 

Leadership  Strategies  in  Offshore 
Outsourcing 

Moderator:  Maryfran  Johnson. 

Editor  in  Chief.  Computerworld 
Panelists: 

■  Jerry  McElhatton.  Senior  EVP 

of  Global  Technology  and  Operations. 
MasterCard  International 
•  Joe  Drouin.  VP  and  CIO.  TRW  Automotive 
a  Tasos  Tsolakts.  VP  of  Global  Technology 
Operations.  Global  Exchange  Services 

■  James  Beattie.  EVP  and  CTO. 

CCC  Information  Services 


H:30am  to  Noon 


Open  Forum 


For  information,  cail  Chris  Leger  at  508-820-8277 
or  to  register  oniine,  visit 
www.itexecutivesummrt.com/outsourclng 


COMPVTEliWIliiLD 


IT  Executive  Summit 

series 

Sponsored  by _ 


Cognitant 

Technology 

Solutions 
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frov  traditional  office 

lNv VVIRElEoS  NOW  SUPPORTS  A 
W'F'F  RANGF  OF  BluE  COLLAR  APPLICATIONS. 
I  -Rt  A  10  non-TRLiCK  SERVICE  FLEET  AND 
■SMART  RliL 'DOZERS  IN  A  COAL  MINE. 


IN  A  WIDE  RANGE 

of  companies, 
wireless  often 
wears  a  blue  col¬ 
lar,  supporting 
gritty  but  essen¬ 
tial  applications  far  re¬ 
moved  from  the  world 
of  executive  BlackBerry 
pagers  or  airport  lounge 
wireless  LAN  “hot  spots.” 

These  emerging  blue-collnr  wireless 
uses  make  possible  limdamental  busi¬ 
ness  processes  that  often  can’t  be 
booked  into  wired  networks  due  to 
geographic  or  environmental  condi¬ 
tions,  says  Craig  Mathias,  an  analyst  at 
Farpoint  Group  in  Ashland,  Mass. 

In  the  Trucks 

It  was  geography  that  dictated  the  de¬ 
sign  of  Sears.  Roebuck  and  Co.’s  new 
wireless  system  for  its  products  repair 
division.  The  cab-moimted  Mobile 
Base  Station  installed  last  month  on  all 
10,000  repair  trucks  had  to  provide 
100%  nationwide  coverage  so  techni¬ 
cians  could  wirelessly  transmit  data 
from  customer  sites  anywhere  in  the 
U.S.  to  back-end  systems,  says  Dave 
Sankey,  director  of  process  and  tech¬ 
nology  development  at  Sears. 

According  to  Sankey,  the  Mobile 
Base  Station,  developed  by  Wireless 
Matrix  Corp.  in  Calgary,  Alberta,  hous¬ 
es  a  WLAN,  terrestrial  packet  data  and 
satellite  system  in  a  package  that’s  U  in. 
wide  by  6.7  in.  high. 

The  retailer  has  also  equipped  its 
service  technicians  with  Smart  Tool¬ 
box,  a  rtigged,  Pentium-powered 
touch-screen  laptop  from  Itronix  Corp. 
in  Spokane,  Wa^  Each  laptop  comes 
packed  with  a  library  of  product  repair 
information  that  includes  more  than 
90,000  illustrations  and  schematics  of 


every  product  the  company  sells  and 
services,  from  washers  to  lawn  trac¬ 
tors.  The  product  library  also  contains 
a  list  of  44.S  million  parts  that  might  be 
needed  to  make  repairs,  as  well  as  an 
inventory  of  the  2,500  pans  carried  on 
every  truck,  Sankey  says. 

Tile  laptops  also  have  built-in 
802.Ub  WLAN  modems,  which  com¬ 
municate  with  the  Mobile  Base  Station. 
Service  technicians  no  longer  need  to 
leave  a  customer  site  to  order  a  part 
not  found  in  the  database.  They  can 
place  the  order  with  a  supplier,  with 
the  WLAN  serving  as  the  Link  to  the 
MobUe  Base  Station,  Sankey  says. 

A1  Milligan,  executive  vice  presi¬ 
dent  for  business  operations  at  Wire¬ 
less  Matrix,  says  the  WLAN  access 
point  in  Mobile  Base  Station  connects 
with  two  wide-area  wireless  systems: 
a  terrestrial  network  that  operates 
'  over  Atlanta-based  Cingular  Wireless' 
Mobitex  packet  data  network,  and  the 
mobile  satellite  system  operated  by 
Mobile  Satellite  Ventures  LP  in 
Reston,  Va. 

Controller  software  built  into  Mo¬ 
bile  Base  Station  includes  “best  route” 
algorithms  that  select  the  terrestrial  or 
satellite  circuit  with  the  strongest  sig¬ 
nal  that’s  closest  to  Mobile  Base  Sta¬ 
tion,  Milligan  says. 

Although  satellite  data  service  is 
viewed  as  expensive.  Milligan  says  his 
company  buys  large  blocks  of  satellite 
time  from  MobUe  Satellite  Ventures, 
minimizing  the  cost  differential  be¬ 
tween  satellite  and  terrestrial  service. 
The  data  rates  for  both  the  Mobitex 
network  and  the  mobUe  sateUite  sys¬ 
tem  are  relatively  slow  (8Kbit/sec. 
and  6.75Kbit/sec..  respectively),  but 
Sankey  says  that's  go^  enough  for 
the  “bursty”  and  low-bandwidth  traf¬ 
fic  sent  to  and  from  Smart  Toolbox 
applications. 

Russ  Molitor.  a  Sears  service  techni¬ 
cian  in  Bloomingdale,  Ill.,  has  been  a 
Smart  Toolbox  and  MobUe  Base 
Station  beta  tester  for  the  past  18 
months.  He  says  he  saves  invaluable 
time  locating  parts  because  he  can 
communicate  directly  from  the  job 
site,  rather  than  having  to  walk  back 
to  his  truck. 

It  also  eliminates  the  time  he  used 
to  spend  on  the  phone  —  often  wait¬ 
ing  on  hold  —  trying  to  fmd  a  part 
from  Sears’  myriad  suppliers.  Molitor 
says  being  able  to  order  online  saves 
him  from  the  routine  mistake  of 
ordering  the  right  part  but  in  the 
wrong  color. 

SaiUtey  declines  to  specify  total 
costs  or  Investment  payback  for  Smart 
Toolbox  and  MobUe  Base  Station,  ex- 
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cept  to  say  that  the  hardware  bill  alone 
totaled  S60  million.  He  says  that  mon¬ 
ey  has  already  been  recouped  by  time 
savings  from  the  product  and  parts 
library  system. 

b)  the  Mines 

Geography  was  the  reason  for  the  in¬ 
stallation  of  a  WLAN  system  that 
spans  20  square  miles  at  the  Thunder 
Basin  coal  mine  in  Wright,  Wyo.,  op>er- 
ated  by  St  Louisdtased  Arch  Coal  Inc. 
fim  Long,  a  Global  Positioning  System 
(GPS)  prefect  engineer  at  the  mine, 
says  the  WLAN  consists  of  a  2.4-GH2 
cross-mine  link  with  six  access  points 
feeding  another  three  access  points  in 
the  900-MHz  band.  The  WLAN  serves 
as  the  backbone  for  the  MineStar  inte¬ 
grated  mining  information  system  de¬ 
veloped  by  Caterpillar  Inc.  in  Peoria.  lU. 

The  WLAN  di^butes  finely  tuned 
location  data  from  on-site  GPS  kine¬ 
matic  receivers.  Those  receivers  grab 
the  GPS  signals  from  space  and  refme 
the  location  data  so  it's  accurate  to 
within  1  centimeter  instead  of  25  me¬ 
ters.  This  location  data  is  distributed 
to  WLAN  teiminals  and  GPS  receivers 
hooked  up  to  rugged  computers  with 
color  displays  in  the  35  coal-haulii^ 
trucks  and  six  bulldozers  that  operate 
in  the  mine.  Long  says. 

When  a  new  road  needs  to  be  built. 
Long  says,  be  designs  it  on  an  ofHce- 
based  computer-aided  design  (CAO) 
system  and  sends  it  over  the  network 
to  a  bulldozer  operator.  tThe  bulldoz¬ 
er  operator]  can  see  ^diat  he  needs  to 
cut  and  fill  to  build  that  road,"  says 
Long.  The  WLAN  in  the  bulldozer  also 
automatically  feeds  real-time  informa¬ 
tion  of  the  woriL  it’s  doing  back  to  the 
office  CAD  system,  allowing  supervi¬ 
sors  to  monitor  progress.  Long  adds. 

(3oa)  mines  might  fall  at  the  end  of 
most  people’s  lists  of  businesses  that 
are  likely  to  be  Internet-enabled,  but 
Michael  Murphy.  Caterpillar's  Mine- 
Star  manager,  says  mining  equipment 
has  become  so  automated  that  the  av¬ 
erage  mine  truck  or  bulldozer  has  five 
IP  addresses. 

'  The  automation  pays  off  in  an  indus¬ 

try  driven  by  wildly  fluctuating  com¬ 
modity  prices.  Long  says.  When  coal 
prices  increase,  the  wireless  network 
helps  Thunder  Basin  quickly  ramp  up 
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production.  In  tight  times,  it  brings  ef¬ 
ficiency  to  an  operation  that  has  to 
watch  its  costs,  he  says. 

On  the  Docks 

Mike  Taylor.  CIO  at  Todd  Shipyards 
Corp.  in  Seattle,  installed  a  system  that 
uses  an  802.Ub  WLAN  and  rugged 
Palm  OS-based  handheld  devices  from 
Symbol  Technolc^es  Inc.  in  Holtsville, 
N.Y..  to  help  manage  one  of  his  compa¬ 
ny's  hugest  costs:  timekeeping  and 
management  of  its  1,200  union  work¬ 
ers.  The  old  timecard  system  was 
prone  to  error,  subject  to  rounding  by 
workers  and  took  24  hours  to  transmit 
information  to  managers. 

The  Electronic  Labor  and  Time  Col¬ 
lection  system,  online  since  October, 
provides  Todd  Shipyards  with  highly 
accurate  time  records  and  a  better  way 
for  managers  to  allocate  persoiuiel 
from  job  to  job  —  and  keep  track  of 
billing  for  various  projects  happening 
within  the  44-acre  shipyard.  All  work¬ 
ers  have  a  magnetic-striped  badge, 
which  they  swipe  at  a  wired  PC  termi¬ 
nal  when  the>’  chedt  iiL 

Once  workers  have  checked  in  and 
been  assigned  a  task,  that  informatioo 
is  sent  to  one  of  66  "leadmen"  supervi¬ 
sors  equipped  with  Palm  wireless 
PDAs.  Tlte  Palms  let  supervisors  see  at 
a  glance  the  number  of  workers  on 
each  job  within  the  yard,  by  craft  and 
department.  This  allows  Todd  Ship¬ 
yards  to  create  a  payroll  and  cost 
record  for  each  job  automatically  and 
instantly  at  the  end  of  the  day  when 
each  worker  clocks  out. 

The  project  cost  about  $300,000. 
Taylor  says,  and  it  has  already  paid  for 
itself  by  eliminating  inaccurate  time 
records  for  workers  piaid  by  the  hour. 

Taylor  emphasizes  that  installing  a 
WLAN  system  in  a  shipyard  of  that 
size  is  dauntiz^  Not  only  does  the  area 
far  exceed  the  300-f6ot  range  of  a  sin¬ 
gle  WLAN  access  point,  but  the  metal 
structures  within  the  yard  also  inter¬ 
fere  with  s^nal  propagatioiL  Taylor 
says  he  needed  to  install  33  access 
points,  some  with  h^-powered  anten¬ 
nas.  to  cover  the  area. 

Altbot^  much  of  the  hype  about  the 
potential  of  wireless  focuses  <mi  office 
or  consumer  ^>plications,  the  technolo¬ 
gy  really  pays  off  at  work  on  the  remote 
front  lines  of  many  businesses,  where 
wireless  is  the  cmly  communications 
alternath^  says  Farpoinfs  Mathias.  I 
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respondents  said  the 
WO  #0  economic  downturn  has 
had  no  impact  on  their  organizations' 
wretess  protects. 


AAQyL  ^  ^ '^cession  has 
tawrO  caused  funding  to  be  de¬ 
layed  but  planning  is  stM  moving  ahead. 


sa>d  protects  were  out  on 
lilvOhokttNsyear. 

gA|^  said  thew  wireless  prt^ects 
W/U  have  been  de^yed  indefinitely. 

4 AA  said  their  protects  had  received 
I/O  more  fun^  and  less  than 
nb  said  their  protect  schedule  had  been 
accaieraled. 
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INDUSTRY  WATCHERS 
FROM  TOP  ANALYST 
FIRMS  WEliiH  1 
WHKSH  WIRELFs: 

SE OMEN  St  AN!  ' 
VENDORS  ARE 
MAKING  THE  GRADE 
FOR  CORPORATE!' 


WTrich  wireless  vendors  are  poised  Jor 
growth?  And  which  are  best  answering 
the  needs  of  coq>orate  FT?  Computer- 
world  posed  those  questions  to  a  group 
of  industry  watchers.  Here ’s  what  they 
had  to  say: 

OVERALL  ORAOE:  A 


Vendors  that  sell  gear  and  software  for 
wireless  LANs  are  a  bright  spot  In  the 
wireless  industry,  analysts  say.  What's 
important  to  corporate  IT  is  the  trend 
toward  a  distributed  WLAN  inlirastnic- 
ture.  which  means  putting  WLAN  in¬ 
telligence  on  a  controller  device  or 
switch  in  a  wiring  closet  to  control 
multiple,  light  access  points,  says  Craig 
Mathias,  an  analyst  at  Ashland.  Mass.- 
based  Farpoint  Group. 

Symbol  Technologies  Inc„  Proxim 
Inc.  and  start-ups  such  as  Aruba  Wire¬ 
less  Networks.  TVapeae  Networks  Inc. 
and  Airespace  Inc.  are  developing  such 
designs,  says  Gemma  Paulo,  an  analyst 
at  In-Stat/MDR  in  Scottsdale,  Ariz. 

Business  users  will  see  a  growing 
number  of  WLAN  embedded  clients  in 
laptops  from  IBM,  Hewlett-Packard 
Co..  Dell  Computer  Corp.,  Toshiba 
Corp..  Fujitsu  Ltd.  and  Sony  Corp.. 
Paulo  says,  and  other  vendors  will  pro¬ 
vide  embedded  Wi-Fi  access  for  PDAs. 
Motorola  Inc..  Proxim  and  Avaya  Inc. 


have  struck  a  deal  to  develop  a  combi¬ 
nation  celluiar/Wi-Fi  handset. 

PROGRESS  REPORT:  Analysts  say  vendors 
in  this  market  are  all  making  the  grade. 
It  may  surprise  some  to  know  that  when 
it  comes  to  wireless  access  devices. 
Cisco  Systems  Inc.  is  the  No.  1  vendor 
to  the  enterprise  market,  says  Paulo. 

The  top  performers  in  WLAN  secu¬ 
rity  are  companies  that  rely  on  stan¬ 
dards.  includii^  Fortress  Technologies 
Inc.  in  Oidstnar,  Fla.,  and  Funk  Soft¬ 
ware  Inc.  in  Cambridge.  Mass.,  says 
Wai  Sing  Lee.  an  analyst  at  Frost  &  Sul¬ 
livan  in  Toronta 

Mobile  Carriers 

QVERAU  GRADE:  D 


“TTie  overall  mobile  operator  commu¬ 
nity  is  doing  a  pretty  miserable  job  of 
supporting  the  enterprise.”  says  Ken 
Dulaney,  an  analyst  at  Gartner  Inc.  in 
Stamford.  Cotm.  ”They  want  to  ( reach 
out]  to  corporate  customers,  but  their 
people  arc  poorly  trained." 

Dulaney  says  his  corporate  IT 
clients  continually  complain  about  a 
lack  of  IT  knowdedge  among  carriers 
that  are  now  reselling  cell  phones  and 
smart  phones  (as  well  as  PDAs  with 
wireless  capability)  and  offering  to  in¬ 
tegrate  the  devices  with  corporate  net¬ 
works  and  databases. 

The  problem  is  that  most  carriers 
have  sold  network  pipes  at  [a  certain 
price  per  bit]  and  haven't  trained  their 
sales  and  support  teams  for  needs  of 
IT."  he  says.  “If  an  IT  exec  tells  a  carri¬ 
er  he  wants  to  link  a  smart  phone  over 
wireless  back  to  DB2.  the  carrier's  rep 
is  likely  to  say.  'What  is  DB2.  a  charac¬ 
ter  in  Star  Wars?' " 

Wireless  operators  are  the  Na  1  rea¬ 
son  for  the  slow  rollout  of  wireless 
data  applications.  Dulaney  says.  “Oper¬ 
ators  control  the  choke  point  but  don't 
have  the  talent  to  guide  deployments 
forward.”  he  says. 

Mathias  agrees  that  cellular  carriers 
are  in  a  sorry  state.  “All  the  carriers 
don't  have  enough  cells,  but  there's  no 
excuse  for  that  anymore,  and  it’s  be¬ 
coming  unacceptable.”  he  says. 


The  carriers  also  face  a  preponder¬ 
ance  of  problems  with  billing,  includ¬ 
ing  overly  complex  plans  for  corporate 
customers.  Mathias  says.  He  urges  IT 
managers  to  watch  for  hidden  charges. 

PROGRESS  REPORT:  Dulaney  says  tradi¬ 
tional  n*  vendors  such  as  IBM  and  HP 
get  an  A  for  sales,  integration  and  sup¬ 
port.  but  most  wireless  carriers  get  a 
failing  grade.  Exceptions  include  Nextel 
Communications  Inc.  in  Reston,  Va.. 
and  Sprint  PCS  Group.  Dulaney  says, 
but  the  others  are  “off  the  deep  end.” 

Mathias  rates  New  York-based  Veri¬ 
zon  Wireless  as  the  best  carrier  be¬ 
cause  it  has  more  complete  cellular 
territory  coverage. 


Handheld  Devices 

OVERALI  GRADE:  B 


I  Handheld  hardware  is  beginning  to 
I  drop  in  price,  following  the  lead  of 
'  DellandHP.  says  Alex  Slawsby.  an  ana¬ 
lyst  at  Framingham.  Mass.-bas^  IDC. 
That  price  competition  is  making  it 
hard  for  PDA  makers  Palm  Inc.  and 
Handspring  Inc.  to  focus  on  software 
and  on  finding  software-licensing  part¬ 
ners.  he  adds. 

Dell  is  also  putting  research-and- 
development  funds  into  wireless  data 
transport,  hardware  and  applications, 
and  when  various  staiKlards  are  set, 
Dell  can  be  counted  on  to  enter  the 
market  at  a  low  price  point,  says  Sam 
Bhavnani.  an  analyst  at  Current  Analy¬ 
sis  Inc.  in  Sterling,  Va. 

Research  In  Motion  Ltd.  (RIM)  in 
Waterloo,  Ontario,  has  always  focused 
solely  on  the  corporate  user,  analysts 
say.  Although  the  company  originally 
offered  a  handheld  device  that  provid¬ 
ed  convenient  wireless  access  only  to 
e-maU,  Ifs  now  expanding  its  relation¬ 
ships  and  broadening  its  product  line. 

RIM  is  working  with  several  carriers 
as  well  as  Microsoft  C^rp.  and  Lon- 
don-based  Symbian  Ltd.  for  sofhvare 
development,  Bhavnani  says. 

PROGRESS  REPORT:  Slawsby  says  the 
vendors  getting  top  grades  with  corpo¬ 
rate  customers  are  those  offering  the 
fastest  return  on  investment.  He  says 
that  group  includes  RIM  and  Good 
Technology  Inc.,  a  Sunnyvale,  Calif.- 
based  RIM  competitor. 

Emphasis  on  ROI  will  continue  to  be 
a  key  factor,  says  Mathias.  “IT  man¬ 
agers  don't  have  the  money  they  used 
to  have  and  dont  want  to  experiment.” 
he  says.  "The  wireless  data  industry 
grew  in  recent  years  off  experiments, 
but  now  people  want  serious  ROI.”  I 
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The  future  is  un/oEdirtg/asf  in  the  wire¬ 
less  industry.  Computerworid  spoice 
with  five  top  vendors  to  get  their  opin¬ 
ions  on  where  the  market  is  heading 
and  what  advances  IT  managers  can 
expect  in  the  coming  year. 

VirliMl  roundtable  participants: 

CHRB  BOUNeet  manapw  of  partner 
marMns.  Ciseo  Sifstams  bic. 

JW  JOHNSOM,  vice  president  and 
Oenaral  manager,  edreiess  networidng. 
Intel Corp. 

JOHN  fOESE,  chief  technoboy  ofRcer. 
Enlerasye  Nehiporta  Inc,.  Andom.  liase. 
RXr  MAinWO.  vice  pnaMonl  Md  gen¬ 
eral  naraoer  of  the  neheorh  products 
group.  Symbol  Technologies  lnc„ 
HoltsvHe.liY. 

ITIM  UIGAS.  dhector  of  eelutione 
niarhating.WLANdMilon. 

^oxim  tec..  Sunnyvale,  Caftf. 


What  does  the  dent  of  dw  future  looh  Ms? 

According  to  most  estimates.  15%  to 
20%  of  notebook  computers  currently 
ship  with  wireless  capabilities.  That's 
expected  to  jump  to  70%  in  the  next 
several  years,  according  to  Intel's  John¬ 
son.  While  wireless  technology  poses 
battery  problems  for  PDAs,  "more  and 
more,  Wi-Fi  technology  is  proliferating 
in  everything."  Enterasys'  Roese  says. 

But  wireless  vendors  are  also  focus¬ 
ing  on  cellular  phones.  "An  upcoming 
capability  is  to  have  a  cell  phone  work 
over  a  wireless  LAN  infrastructure," 
Proxim's  Lucas  says.  "Today,  you  can 
operate  handsets  over  the  802.11b  in¬ 
frastructure,  but  if  I  can  operate  the 
cell  phone  over  the  WLAN  infrastruc¬ 
ture.  that's  a  significant  cost  savings." 


Cisco  sees  “combo  phones"  emerg¬ 
ing  next  year  that  would  use  tradition¬ 
al  cellular  service  when  outside  and 
the  WLAN  infrastructure  indoors.  “It 
won't  be  until  2005  that  they  really 
take  off.  though,"  Cisco's  Botinger  says. 

Which  wiralMS  standard  Mfl  taka  prw«- 
danca  in  tha  naxt  yaar?  Vendors  agree  that 
802.11b  will  prevail  for  the  next  year. 
Acceptance  of  802.Ua.  they  say.  has 
been  slow,  mainly  due  to  economics. 
Prices  for  802.Ub  "are  going  through 
the  floor,"  says  Bolinger.  MeanvdiUe, 
moving  to  802.11a  would  require  tech¬ 
nology  upgrades  or  replacements,  and 
increasing  the  speed  of  current  wireless 
applications  pr^bly  isn't  critical 
enough  to  iusdfy  the  cost  “In  the  enter¬ 
prise  market  Pd  say  wait  until  802.11a  b 
more  mature."  says  Symbol's  Martina 

By  the  end  of  2004,  however.  802 Jla 
will  have  its  day.  vendors  say.  "802.Ua 
wiU  start  ramping  in  the  second  half  of 
next  year,  and  enterprise  clients  will 
start  to  do  validations  in  the  second 
half  of  the  year.”  predicts  Johnson.  And 
802.11g  will  make  some  gains,  but  not 
as  much  as  802.Ua.  because  with  the 
latter,  you  get  more  netwoik  capacity 
and  channel  density.  "If  you're  trying 
to  deploy  media-rich,  high-bandwidth 
wireless.  802.Ua  is  clearly  the  right 
choice."  says  Roese. 

Lucas  is  one  dissenter.  "We're  seeing 
a  leaning  toward  802.Ug.  and  that's  be¬ 
cause  people  are  interested  in  the 
higher  speeds  but  they  want  the  back¬ 
wards  compatibility  with  existing 
802.Ub  technology,"  she  says. 

Whit  devalopmeoh  do  you  »>e  happening 
in  saeurity?  Vendors  agree  that  for  most 
companies,  security  should  no  longer 


be  a  sbowstopper.  By  this  fall,  vendors 
will  be  required  to  support  the  Wi-Fi 
Protected  Access  (WPA)  standard  in 
order  to  be  Wi-Fi-certified. 

The  Wi-Fi  Alliance  released  WPA 
late  last  year  with  the  intention  of 
strengthening  the  weak  Wired  Equiva¬ 
lent  Privacy  encryption  standard  that 
was  previously  built  into  Wi-Fi  prod¬ 
ucts,  WPA  also  serves  as  an  interim 
step  toward  802.11i  —  a  set  of  stan¬ 
dards  that's  expected  to  answer  most 
I  security  needs  but  won't  be  finished 
until  early  next  year.  "WPA  is  going  to 
be  the  next  important  milestone  in 
ensuring  that  802.U  products  are  se¬ 
cure  and  can  inteix^rate  with  other 
Wi-Fi  products,"  says  Lucas. 

What  managMiMnI  improvMiMnts  wM  Im 
mada  to  WLANs?  Now  that  security  is  no 
toi^r  an  insurmountable  hurdle  for 
enterprise  WLANs,  vendors  contend, 
the  next  big  issue  is  manageability. 
"The  chief  cost  of  WLANs  are  people 
costs,  and  good  management  will  lower 
costs.  That's  why  it  will  be  a  big  topic 
for  next  year,”  Bolinger  says. 

A  new  model  of  wireless  networking 
will  become  popular  in  the  next  year 
to  take  some  of  the  labor  out  of  manag¬ 
ing  WLANs,  according  to  Roese,  Mar¬ 
tino  and  Lucas.  It  involves  moving  in¬ 
telligence  out  of  the  access  points  and 
into  a  central  switch,  resulting  in  cen¬ 
tralized.  automated  remote  manage¬ 
ment  capabilities. 

In  addition,  says  Lucas,  the  new  ar¬ 
chitecture  will  help  with  security  man¬ 
agement.  policy-based  management 
and  bandwidth  management. 

Exactly  how  thb  will  be  accom¬ 
plished  varies  depending  on  what  the 
vendors  actually  sell  Roese  says  En¬ 
terasys  will  ship  technology  this  year 
that  will  help  shift  intelligeoce  into  the 
switch.  Lucas  says  Proxim's  Meistro 
management  infiastructure  will  be 
available  later  this  year,  and  Martino 
says  Symbol  also  has  improved  man¬ 
agement  capabilities  in  the  works. 

The  picture  changes  a  bit  with  Cisca 
"These  nonagement  issues  need  to  be 
addressed,  but  not  necessarily  by  buy¬ 
ing  a  specialized  controller,"  Bolinger 
says.  Cisco  offers  access  points  with 
man^ment  features,  as  well  as  a 
management  platform  for  remotely 
managing  hundreds  of  access  points 
from  a  sin^  console.  Tbe  company 
plans  to  announce  advanced  manage¬ 
ment  capabilities  in  the  coming  year, 
Bolinger  says.  I 


Brandel  is  a  freelance  writer  in 
Newton.  Mass.  Contact  her  at 
brandels@attbLcom. 
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QQ0!4>  'esoondenis  sa-d  the 
OO  /O  economic  downturn  has 
had  no  imoact  on  theti  organizations 
wireless  proiecis 

900!4\  'ecession  has 
w  /O  caused  tundmg  to  be  de¬ 
layed  but  planning  is  still  moving  ahead 


said  protects  were  put  on 
Ifc  /O  hold  this  year 

CQy^  said  their  wireless  proiecis 
w  /O  have  been  belayed  mdetmiielv. 

said  their  protects  had  received 
I  /O  more  funding,  and  less  than 
sard  their  protect  schedule  had  been 
accelerated 


Wireless  Priorities 

How  important  is  wireless 
lectir>ology  to  your  organization’s 
business  go^  and  strategy? 


The  Top  10  Wireless 
Devices  in  Use 
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INDUSTRY  WATCHERS 
FROM  TOP  ANALYST 
FIRMS  WEIGH  IN  ON 
WHICH  WIRELESS 
SEGMENTS  AND 
VENDORS  ARE 
MAKING  THE  GRADE 
FOR  CORPORATE  IT, 


VVTn'ch  wrn*/t'j«  vtTidors  orv  poised  for 
growth?  And  which  are  best  answering' 
the  needs  of  corporate  IT?  Computer- 
wririd  posed  those  questions  to  a  group 
of  industry  u^rfhm.  Here's  whaf  they 
had  to  soy: 

Wireless  LAN 
Hardware  and  Software 

OVERALL  GRADE;  A 


Vendors  that  sell  year  and  software  for 
wireless  LANs  are  a  hriftht  spot  in  the 
wireless  industry,  analysts  say.  What's 
important  to  er»rporatc  IT  is  the  trend 
toward  a  distributed  WLAN  infrastruc¬ 
ture.  which  means  puirinp  WLAN  in- 
tenija,’nce  on  a  controller  device  or 
switch  in  a  wiring!  closet  to  control 
multiple,  light  acceSuS  points,  says  Craig 
Mathias,  an  analyst  at  .Ashland.  Mass.- 
basc'd  Farpoinr  Group. 

Symbol  Techmilogies  Inc..  Proxim 
Inc.  and  start-ups  such  as  Aruba  Wire¬ 
less  Networks,  Trapeze  Networks  Ine. 
and  Airespaee  Inc.  are  developing  such 
designs,  says  Gemma  Pauk*.  an  analyst 
at  In-Stat'MOR  in  Scottsdale.  Ariz. 

Business  users  will  .see  a  gnm  ing 
number  of  WLAN  embedded  clients  in 
laptops  from  IBM.  Hewlett-Packard 
Co..  Dell  Computer  Corp.,  Toshiba 
Corp..  fujitsu  Ltd.  and  Sony  Corp., 
Paulo  says,  and  other  vendors  will  pro¬ 
vide  embedded  Wi-Fi  access  for  PDAs. 
Motorola  Inc..  Pn)xim  and  Ax-aya  Inc. 


have  struck  a  deal  to  develop  a  combi¬ 
nation  cellular  Wi-Fi  handset. 

PROGRESS  REPORT:  Analysts  say  vendors 
in  this  market  are  all  making  the  grade. 
It  may  surprise  some  to  know  that  when 
it  cttmes  to  wireless  access  devices. 
Cisco  Systems  Inc.  is  the  No.  I  vendor 
to  the  enterprise  market,  says  Paulo. 

The  top  performers  in  WLAN  secu¬ 
rity  are  companies  that  rely  tm  stan¬ 
dards.  including  Fortress  Technologies 
Inc.  in  Oldsmar.  Fla.,  and  Funk  Soft¬ 
ware  Inc.  in  Cambridge.  Mass.,  says 
Wai  Sing  Lee,  an  analyst  at  Frost  &  Sul¬ 
livan  in  Toronto. 

Mobile  Carriers 

OVERALL  GRADE;  D 


■'Tile  overall  mobile  operator  commu¬ 
nity  is  doing  a  pretty  miserable  job  of 
supporting  the  enterprise."  says  Ken 
Dulaney,  an  analyst  at  Gartner  Ine.  in 
Stamford.  Conn.  "They  want  ti>  [reach 
out]  to  corporate  customers,  but  their 
people  are  poorly  trained." 

Dulaney  says  his  corporate  IT 
clients  continually  complain  about  a 
lack  of  IT  knowledge  amtmg  carriers 
that  are  now  reselling  cell  phones  and 
smart  phones  (as  well  as  PDAs  with 
I  wirek^ss  capability)  and  offering  to  m- 
legrate  the  devices  with  c<»rporafe  net¬ 
works  and  databases. 

“The  ptiiblem  is  that  most  carriers 
have  st<Id  network  pipes  at  [a  certain 
price  p<T  bill  and  haven't  trained  their 
sales  and  support  teams  for  needs  of 
riV'he  says.  "If  an  IT  exec  tells  a  carri¬ 
er  he  wants  to  link  a  sman  phone  over 
wireless  back  to  DB2,  the  carrier's  rep 
is  likely  to  say.  ‘What  is  DB2.  a  charac¬ 
ter  in  Star  Wars?' " 

Wireless  operators  are  the  No.  J  rea¬ 
son  for  the  slow  rollout  of  wireles-s 
data  applications,  Dulaney  says.  "Oper¬ 
ators  control  the  choke  point  but  don’t 
have  the  talent  to  guide  deployments 
forward.”  he  says. 

Mathias  agree.s  that  cellular  carriers 
arc  in  a  sorry  state.  “All  the  carriers 
don’t  have  enough  cells,  but  there’s  no 
excuse  for  that  anymore,  and  it’s  be¬ 
coming  unacceptable.”  he  says. 


The  carriers  also  face  a  preponder¬ 
ance  of  problems  with  billing,  includ¬ 
ing  overly  complex  plans  for  corporate 
customers.  Mathias  says.  He  urges  IT 
managers  to  watch  for  hidden  charges. 

PROGRESS  REPORT:  Dulaney  says  tradi¬ 
tional  IT  vendors  such  as  IBM  and  HP 
get  an  A  for  sales,  integration  and  sup¬ 
port.  but  most  wireless  carriers  get  a 
failing  grade.  E-Xceptions  include  Nexie! 
Communications  Inc.  in  Reston.  V'a., 
and  Sprint  PCS  Group.  Dulaney  says, 
but  the  others  arc  "off  the  deep  end." 

Mathias  rates  New  York-based  Veri¬ 
zon  Wireless  as  the  best  carrier  be¬ 
cause  it  has  mt>re  complete  cellular 
territory  coverage. 

Handheld  Devices 

OVERALL  GRADE:  B 


Handheld  hardware  is  beginning  to 
drop  in  price,  following  the  lead  of 
Del!  and  HP.  says  Alex  Slawsby,  an  ana¬ 
lyst  at  Framingham.  Mass. -based  IDC. 
That  price  competition  is  making  it 
hard  for  PDA  makers  Palm  Inc.  and 
Handspring  Inc.  to  focus  on  sofnvare 
and  on  finding  software-licensing  part¬ 
ners.  he  adds. 

Dell  is  also  putting  rcscarch-and- 
development  funds  inU)  wireless  data 
transport,  hardware  and  applications, 
and  when  various  standards  are  set. 
Dell  can  be  counted  on  to  enter  the 
market  at  a  low  price  point,  says  Sam 
Bhavnani.  an  analyst  at  Current  Analy¬ 
sis  Inc.  in  Sterling.  Va. 

Research  in  Motion  Ltd.  (RIM)  in 
Waterloo.  Ontario,  has  always  focused 
solely  on  the  corporate  u.ser.  analysis 
say.  Although  the  company  originally 
offered  a  handheld  device  that  provid¬ 
ed  convenient  wireless  access  only  to 
e-mail,  it’s  now  expanding  its  relation¬ 
ships  and  broadening  its  prtnluct  line. 

RIM  is  working  with  several  carriers 
as  well  as  Microsoft  Corp.  and  Lon- 
don-bxsed  Symbian  Ltd.  for  s»iftware 
development.  Bhavnani  says. 

PROGRESS  REPORT:  Slawsby  says  the 
vendors  getting  lop  grades  with  corpo¬ 
rate  customers  are  iho.se  offering  the 
fastest  return  on  investment.  He  says 
that  group  includes  RIM  and  Good 
Technology  Inc.,  a  Sunnyvale.  Calif.- 
based  RIM  eompctiior. 

Emphasis  on  ROl  will  continue  to  be 
a  key  factor,  says  Mathias.  “IT  man¬ 
agers  don't  have  the  money  they  used 
to  have  and  di>n’t  want  to  experiment." 
he  says.  “The  wireless  data  industry 
grew  in  recent  years  off  experiments, 
but  now  people  want  serious  ROl."  I 
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The  future  is  un/oidirii'  fast  in  the  wir^- 
iess  industry.  Computenvorid  spoke 
with  five  top  vendors  to  get  their  opin¬ 
ions  on  w/im’  fhe  market  is  heudin^; 
and  what  advances  !T  managers  can 
expect  in  the  comingyear. 

Virtual  roundtable  participants: 

CHRIS  BOLINGER.  manager  of  partner 
marketing.  Cisco  Systems  Inc. 

JIM  JOHNSON,  vice  president  and 
general  manager,  wireless  networking. 
Intel  Corp. 

JOHN  ROESE.  chief  technology  officer. 
Enterasys  Networks  Inc..  Andover.  Mass. 
RAY  MARTINO,  vice  president  and  gen¬ 
eral  manager  of  the  network  products 
group.  Symbol  Technologies  Inc.. 
Holtsviile.  N.V. 

LYNN  LUCAS,  director  of  solutions 
marketing.  WLAN  division. 

Proxim  inc..  Sunnyvale.  Calif. 


Whal  does  the  client  of  the  future  look  like? 
According  to  most  estimates.  I5‘*i>  to 
20%  of  notebook  computers  currently 
ship  with  wireless  capabilities.  That's 
expected  to  jump  to  70%  In  the  next 
several  years,  according  to  Intel's  (ohn- 
st>n.  While  wireless  technology  poses 
batter}'  problems  for  PDAs,  “more  and 
more.  Wi-Fi  lechnoli^'  is  proliferating 
in  everything."*  Enterasys'  Roesc  says. 

But  wireless  vendors  arc  alsti  focus¬ 
ing  on  cellular  phones.  “An  upcoming 
capability  is  to  have  a  cell  phone  work 
over  a  wireless  LAN  infrastructure." 
Proxim's  Luca.s  says.  "Today,  you  can 
operate  handsets  over  the  802.ltb  in¬ 
frastructure.  but  if  I  can  operate  the 
cell  phone  over  the  W^LAN  infrastruc¬ 
ture.  that's  a  significant  ci>st  savings." 


Cisco  sees  "combo  phones"  emerg- 
I  ing  next  year  that  would  use  tradition- 
'  al  cellular  service  when  outside  and 
the  WLAN  infrastructure  indoors.  "It 
won't  be  until  2005  that  they  really 
take  off.  though."  Cisco's  Bolinger  says. 

Which  wireless  standard  will  take  prece¬ 
dence  in  the  next  year?  \'endors  agree  that 
,  802. lib  will  prevail  for  the  next  year. 

!  Acceptance  of  802.11a.  they  say.  has 
I  been  slow,  mainly  due  to  economics, 
j  Prices  for  802,11b  “are  going  through 
j  the  floor."  says  Bolinger.  Meanwhile. 

'  moving  to  802.11a  would  ^e^^ui^e  tech¬ 
nolog)'  upgrades  or  replacement-s.  and 
increasing  the  speed  of  current  wireless 
applications  probably  isn't  critical 
enough  to  justify  the  cost.  "In  the  enter¬ 
prise  market.  I'd  say  wait  until  802.11a  Ls 
!  more  mature."  says  Symbol's  Martimx 
By  the  end  of  2004.  howe\'er.  H02.11a 
j  will  have  its  day.  t'endors  say.  "802.11a 
[  will  start  ramping  in  the  second  half  of 
I  next  v-ear.  and  enterprise  clients  will 
start  to  do  validations  in  the  second 
I  half  of  the  year."  predicts  Johnson.  And 
'  802.llg  will  make  some  gains,  but  not 
j  as  much  as  802.11a.  because  with  the 
I  latter,  you  get  more  netw'ork  capacity 
and  channel  density.  “If  you're  tr\’ing 
to  deploy  media-rich,  high-bandwidth 
wireless.  802.11a  is  clearly  the  right 
choice."  says  Roese. 

Lucas  is  one  dissenter.  “We’re  seeing 
a  leaning  toward  802.11g.  and  that’s  be¬ 
cause  people  arc  interested  in  the 
higher  speeds  but  they  want  the  back¬ 
wards  compatibility  with  existing 
802.11b  technology."  she  says. 

What  developments  do  you  see  happening 
in  security?  Vendors  agree  that  for  most 
companies,  security  should  no  longer 
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VIEWS 


WHERE  IS  THE  WIRELESS  INDUSTRY  HEADED? 
FIVE  TOP  VENDORS  OFFER  THEIR  TAKE  ON 
THE  FUTURE  OF  WIRELESS  LANs,  HARDWARE, 
STANDARDS  AND  SECURITY. 


he  a  showstopper.  Bv  thi>  fall.  venJ«»rs 
will  be  required  u*  support  the  VL'i-fi 
ProK’cted  Access  ( WPA>  standard  in 
order  to  be  Wi-Fl-certifled. 

The  Wi-Fi  .•Mliance  released  \S'PA 
late  last  >ear  with  the  intention  of 
strengthening  the  weak  Wirs-d  Equiva¬ 
lent  Privacy  encryption  stjnd.ird  th.it 
was  previously  built  into  Wi-Ei  prod¬ 
ucts.  WP.'^  also  series  as  an  interim 
step  toward  802. Hi  —  a  set  of  si.m- 
dards  that's  expected  u*  answer  most 
security  needs  but  won't  be  finished 
until  early  next  year.  "WPA  is  going  to 
K'  the  next  important  milestone  in 
ensuring  that  802.11  products  are  se¬ 
cure  and  can  intemperate  with  other 
Wi-Fi  products."  says  I  ucas. 

What  management  improvements  will  be 
made  to  WLANs?  Now  that  security  is  no 
longer  an  insurmountable  hurdle  ft>r 
enterprise  WL.ANs,  vendors  contend, 
the  next  big  issue  is  manageability. 
"The  chief  cost  •»!  WLANs  arc  people 
costs,  and  giKid  management  will  lower 
costs.  That’s  why  it  will  be  a  big  topic 
hir  next  year."  Bolinger  says. 

A  new  minlcl  of  wircles.s  networking 
will  become  popular  in  the  next  year 
to  take  some  of  the  latK>r  out  of  manag¬ 
ing  WI.ANs.  according  to  Rivse.  Mar¬ 
tino  and  Lucas.  It  involves  moving  in¬ 
telligence  out  of  the  access  points  and 
into  a  central  switch,  resulting  in  cen¬ 
tralized.  automated  remote  manage¬ 
ment  capabilities. 

In  addition,  says  Luca.s.  the  new  ar¬ 
chitecture  will  help  with  security  man¬ 
agement.  policy-based  management 
and  bandw  idth  management. 

E.\aetly  how  this  will  be  acci>m- 
plished  varies  depending  on  what  the 
vendors  actually  sell.  Roese  says  En- 
lerasys  will  ship  icchnolog)-  this  year 
that  will  help  shift  intelligence  into  the 
switch.  Lucas  says  Proxim’s  Meisiro 
management  infrastructure  will  he 
available  later  this  year,  and  Martino 
says  Symbol  alsti  has  improv'cd  man¬ 
agement  capabilities  in  the  works. 

ITie  picture  changes  a  bit  with  Cisc«x 
"These  management  ts.sues  need  t«>  K* 
addressed,  but  m*t  necessarily  by  buy¬ 
ing  a  specialized  controller.”  Bolinger 
says.  Cisct>  offers  access  points  with 
management  features,  as  welt  as  a 
management  platform  for  remotely 
managing  hundreds  of  acccs.s  pi>ints 
from  a  single  console.  The  company 
pbns  to  announce  advanced  manage¬ 
ment  capabilities  in  the  coming  year. 
Bolinger  says.  I 
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Wireless  Insecurity 

How  concerned  are  you 
about  wireless  security? 
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THINKING  OF  DEPLOYING  A 
'w'!RELE,SS  LAN?  ANSWERS 
'0  THESE  ,5iX  FREQUENTLY 
.•'HV^EO  QUESTIONS  OFFER 
UPS  fQR  SUCCESS. 


THE 


WIRELESS  LANs  OTC 

finally  venturing 
out  of  their  vertical 
market  niches  and 
into  mainstream  business  envi¬ 
ronments.  But  they  pose  some 
special  deployment  challenges 
when  compared  with  their  wired 
counterparts. 

Here  are  six  frequently  asked 
questions  IT  managers  should 
consider  before  installing  a 
WLAN. 

1  How  do  I  plan  capacity  for  a  mobito 

Wireless  expens  suggest  that  you  first  ideu* 
tify  which  applications  the  network  will  sup¬ 
port  and  how  much  bandwidth  they  will  con¬ 
sume.  Then  calculate  bow  many  users  need 
mobility  and  in  what  places  within  your  orga¬ 
nization  they  will  require  it. 

Next,  apply  this  information  in  designing  a  net¬ 
work  of  wireless  access  points  (AP).  APs  are  the 
infrastructure  radios,  usually  ceiling-mounted,  which 
connect  to  the  wired  network  on  one  side  and  to 
users’  wireless  network  adapters  over  the  airwaves 
on  the  other.  Wireless  veterans  stress  the  importance 
of  site  surveys  and  performance  testing  to  optimize 
AP  placement. 

“This  is  because  variations  in  firmware,  antennas 
and  physical  layout  can  alter  the  performance  and 
range  of  the  very  same  [wireless]  chip  set,"  says 
Craig  Mathias,  an  analyst  at  Farpoint  Group  in 
Ashland,  Mass. 

Because  it’s  difficult  to  anticipiate  where  walls  and 
objects  will  interfere  with  wireless  communication,  a 
netwoik  staff  member  armed  with  a  wireless  laptop 
typically  walks  around,  installs  APs  and  tests  cover¬ 
age  —  often  tryii^  out  multiple  antenna  options  for 
maximum  signal  strength. 


This  exercise  will  reveal  how  many  APs  you  need 
to  meet  capacity  requirements  and  how  to  position 
adjacent  APs  to  prevent  coverage  holes.  There  are 
some  rules  of  thumb  about  how  many  users  a  single 
AP  can  support.  Gartner  Inc.,  for  example,  recom¬ 
mends  about  20  knowledge  workers  per  802.11b 
(llMbit/sec.)  radio. 

But  these  ratios  vary.  Warehouses  often  need  lots 
of  APs  to  ensure  floorwide  coverage.  But  warehouse 
applications  don’t  consume  much  bandwidth,  and 
utilization  of  these  APs  is  often  only  2%.  says  Rob 
Greenfield,  chief  scientist  at  SCLogic  Inc.,  a  reseller 
of  WLANs  in  Beltsville,  Md. 

On  the  other  hand,  a  crowded  office  space  will 
require  many  more  APs  —  not  to  achieve  range,  but 
to  support  more  users  and  heftier  applications. 

“Shoot  for  under  40%  to  50%  AP  utilization  in  of¬ 
fice  environments,”  Greenfield  suggests.  That  will 
compensate  for  not  knowing  how  many  users  will  be 
in  range  at  any  given  time. 

2  How  can  I  avoid  intarfarance?  Having  multi¬ 
ple  devices  that  use  the  same  frequency 
can  result  in  interference  with  perfor¬ 
mance.  United  Parcel  Service  Inc.  learned 
this  when  it  combined  short-range  Blue¬ 
tooth  (IMbit/sec.)  wireless  technology 
with  802.11b  LANs  in  a  warehouse  pilot,  explains 
Joan  MacEachem.  lead  telecommunications  analyst 
at  the  Atlanta-based  worldwide  package-delivery 
company.  Both  Bluetooth  and  802ilb  run  in  the 
2.4-GHz  frequency  band. 

To  solve  the  problem,  UPS  and  its  technology 
vendor.  Symbol  Technologies  Inc.  in  Holtsville.  N.Y., 
synchronized  the  Bluetooth  network  with  Symbol’s 
802.11b  APs.  “Time  Division  Multiple  Access  tech¬ 
nology  in  Symbol  APs  has  scheduled  the  two  net- 
wofks  to  transmit  at  different  intervals  to  avoid  over¬ 
laps."  explains  MacEachem. 

And  don’t  forget  to  alternate  use  of  802.11b 
channels  in  nei^boring  AI^  to  ftirther  minimize 
interference,  advises  John  Lawson,  vice  president 
of  IT  and  CIO  at  Tulane  University  in  New  Orleans. 
The  university  has  installed  1,200  APs  from  An¬ 
dover,  Mass.-based  Enterasys  Networks  Inc.  across 
multiple  campuses. 
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To  segregate  traffic  in  neighboring  devices.  802.11b 
offers  three  different  channels.  "Tve  tried  in<taHing 
APs  without  channel  plannii^,"  says  Lawson.  “The 
result  was  unacceptable  interference.' 

3ismyWUNredlysenn?  This  is  a  com¬ 
plicated  question.  Security  advances 
collectively  called  Wi-Fi  Protected 
Access  (WPA).  based  on  emerging 
IEEE  standards,  will  ship  in  new  products 
later  this  year.  WPA  overcomes  the  noto¬ 
rious  static-encryption-key  weaknesses  in  802.Ub's 
Wired  Equivalent  Privacy  standard.  In  addition, 
comprehensive  vendor-proprietary  products  and 
services  have  long  been  available  to  reinforce  wire¬ 
less  privacy. 

However,  to  optimize  security  in  WLANs  immedi¬ 
ately.  the  best  approach  is  to  employ  IPsec  virtual 
private  networiu,  which  use  Layer  3  encryption,  even 
on  a  local  enterprise  campus,  says  Dave  Passmore,  an 
analyst  at  Burton  Group  in  Sterling.  Va. 

“This  requires  IPsec  client  software  on  user  lap¬ 
tops  and  a  device  that  terminates  IPsec  tunnels  in¬ 
side  the  enterprise  network  firewall,”  he  explains. 

Passmore  notes,  however,  that  forthcoming  WPA- 
compliant  products  should  resolve  the  need  for  local 
IPsec  use  in  many  organizations. 

wmcn  iscnnoMgy  snouMi  I  cnoosa  iratn 
the  dptaM  soup  of  ¥AAN  stmdwds? 

Ken  Dulaney,  an  analyst  at  Gartner  in 
San  Jose,  has  a  simple  answer  “802.Ub 
is  the  only  mature,  woridwide  standard 
that  can  be  deployed  today."  be  says. 

“For  most  enterprises.  802.Ub  bandwidth  should 
suffice  for  most  ofiice  tasks  for  at  least  the  next 
four  years.“ 

UPS.  for  example,  is  'building  to  current  require¬ 
ments.  which  is  802.11b."  both  in  its  warehouses  and 
at  its  IT  headquarters,  says  Fred  Holt,  UPS's  radio 
frequency  infrastructure  manager,  anticipate  a 
five-year  life  cycle,"  Hoit  says. 

Opinions  are  mixed  about  802.11a.  the  successor 
to  802ilb  that  runs  in  the  5-GHz  frequency  band 
with  much  faster  speeds  (S4Mbtt/isec)  but  a  shorter 
coverage  range.  On  the  plus  side,  you  avoid  inter¬ 
ference  when  running  11a  and  Ub  in  parallel, 
because  the  two  LANs  use  separate  fre¬ 
quencies.  But  Greenfield  says  it’s  worth 
waiting  a  year  for  802.11g-compliant 
products  to  gain  cross-compatibility 
with  802.Ub. 

The  shorter  transmission  range  of 
80211a  'means  you'll  need  many  more 
APs  for  the  same  coverage,  which  will  be 
more  expensive,"  he  says.  like  802.Ua.  802.Ug  sup¬ 
ports  aggregate  S4Mbit/sec  speeds  but  runs  in  the 
2.4-GHz  band  and  was  designed  for  backward  com¬ 
patibility  with  802.Ub. 

Finally,  emergii^  dual-  and  multimode  products 
"will  eventually  make  upgradability  a  nonissue."  says 
Mathias.  Several  enterprise-class  vendors  offer  APs 
that  support  802.Ua  and  a  skx  for  either  an  802ilb 
or  802ilg  radio. 

Meanwhile,  trimode  802J1  b^a/jg  chip  sets  recently 
began  flipping,  so  client  adapters  and  APs  that  sup¬ 
port  all  WLANs  could  be  available  within  a  year. 
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Whit's  the  bMt  way  to  manage  my  radb  infra- 
stnictara?  A  wave  of  new  WLAN  "switch" 
architectures  from  estabUsbed  companies 
such  as  Symbol  aiMl  Proxim  toe.,  as  well  as 
from  a  bevy  of  start-ups,  aim  to  case  AP 
configuratioD  and  management  in  large 
installations.  The  idea  is  to  centralize  control  of  a 
dumb  AP  infrastructure  in  a  “smart"  coUapsed-back- 
bone  device. 

This  approach  purports  to  lower  the  cost  of  each 
AP  —  which  adds  up  in  lar^  shops  that  might  re- 

_  quire  hundreds  or  thousands  of  them  — 

and  to  enable  greater  scalability  and 
lower  operations  costs. 

But  that  doesn't  mean  that  if  you  want 
a  smart  AP,  you  can't  get  centralized 
management,  too  —  unless  this  option 
blows  your  budget.  For  example.  Cisco 
Systems  toe.  offers  its  Wireless  LAN 
Solutions  Engine,  a  data  center  appliance  and  Cisco- 
Works  management  module  that  centrally  configures 
and  manages  up  to  SOO  APs.  But  Cisco  Aironet  UOO 
and  1200  APs  are  Car  from  dumb;  they  run  the  full 
complement  of  Cisco  Internetworking  Operating 
System  routing  software  —  enablii^  for  example, 
wireless  virtual  LAN  (VLAN)  support. 

Symbol  also  supports  wireless  VLANs,  but  it 
builds  them  into  its  Mobius  Axon  wireless  switch, 
not  into  the  AP.  VLAN  profile  information  is  en¬ 
forced  before  incoming  traffic  hits  the  wired  network 
or  outbound  traffic  is  distributed  to  wireless  users. 


6  Can  I  kitograta  WLANs  wWi  other  networks? 

Network  nirvana  is  when  users  can  roam 
among  disparate  wired  and  wireless  net¬ 
works  without  havii^  to  reconfigure 
settings  or  reauthenticate.  Multimode 
products  are  emerging  that  combine  sev¬ 
eral  versions  of  802.11.  as  well  as  connectivity  to  2.5- 
and  3-geDeratioo  (2J/3G)  mobile  WANs  from  the 
license  carriers.  For  example.  Texas  Instruments 
Inc.  in  March  announced  ctop  sets  for  PDAs  that 
combine  802.11b,  GSM/GPRS  and  Bluetooth  capabili¬ 
ties.  NetMorion  Wireless  Inc.  in  Seattle  has  client 
software  for  roaming  among  any  type  of  padcct- 
based  wired  or  wireless  LAN  or  WAN.  The  software 
simply  detects  the  most  robust  network  connection 
available  and  transparently  connects  the  user  to  it. 
keeping  VPN  sessions  intact 
Such  internetwork  roaming  will  grow  mcreasii^ly 
handy  as  WLAN-based  public  services,  called  Wi-Fi 
hot  spots,  continue  to  sprout  up  to  airports,  hotels, 
malls  and  other  public  locatkms.  The  licensed  2S/3G 
carriers  have  be^n  offering  802.Ub-based  hot-spot 
services  to  complement  their  ubiquitous,  but  slower. 
2S/3C  packet  dau  services  (see  chan  above). 

Today's  2J/3G  services  provide  20K  to  60Kbit/sec. 
throughput  per  user,  depending  on  the  technology 
used.  So  multimegabit -speed  Wi-Fi  netwwks,  wfam 
available,  offer  a  better-performing  option.  I 


Wexier  is  a  freelance  writer  inCamfAeU,  Calif  Contact 
heratfoarue@Jwexlerxom. 
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To  segregate  traffic  in  neighboring  devices.  802.11b 
offers  three  different  channels,  “rve  tried  installing 
APs  without  channel  planning."  says  Lawson.  "The 
result  W'as  unacceptable  interference." 

31s  my  WLAN  really  secure?  This  is  a  com¬ 
plicated  question.  Security  advances 
collectively  called  Wi-Fi  Protected 
Access  (WPA).  based  on  emerging 
IEEE  standards,  will  ship  in  new  products 
later  this  year.  WPA  overcomes  the  noto¬ 
rious  static-encr>’ption-kcy  weaknesses  in  802. lib’s 
Wired  Equivalent  Privacy  standard.  In  addition, 
comprehensive  vendor-proprietary'  products  and 
services  have  long  been  available  to  reinforce  wire¬ 
less  privacy. 

However,  to  optimize  security  in  WLANs  immedi¬ 
ately,  the  best  approach  is  to  employ  IPsec  virtual 
private  networks,  which  use  Layer  3  encryption,  even 
on  a  local  enterprise  campus,  says  Dave  Passmore,  an 
analyst  at  Burton  Group  in  Sterling.  Va. 

“This  requires  IPsec  client  software  on  user  bp- 
tops  and  a  device  that  terminates  IPsec  tunnels  in¬ 
side  the  enterprise  network  firewall."  he  explains. 

Passmore  notes,  however,  that  forthcoming  WPA- 
compliant  products  should  resolve  the  need  for  local 
IPsec  use  in  many  organizations. 

4  Which  (echnoiogy  should  I  chooso  from 
the  alphabet  soup  of  WLAN  standards? 

Ken  Dulaney,  an  analyst  at  Gartner  in 
San  lose,  has  a  simple  answer  “802.11b 
is  the  only  mature,  worldwide  standard 
that  can  be  deployed  today."  he  says. 
“For  most  enterprises,  802.11b  bandwidth  should 
suffice  for  most  office  tasks  for  at  least  the  nc.xt 
four  years.” 

UPS.  for  example,  is  “building  to  current  require¬ 
ments.  which  is  802.nb."  both  in  its  warehouses  and 
at  its  IT  headquarters,  says  Fred  Hoit.  UPS's  radio 
frequency  infrastructure  manager.  “We  anticipate  a 
five-year  life  cycle."  Hoit  says. 

Opinions  are  mixed  about  802.11a.  the  successor 
to  802.11b  that  runs  in  the  5-GHz  frequency  band 
with  much  faster  speeds  (54Mbit/sec.)  but  a  shorter 
coverage  range.  On  the  plus  side,  you  avoid  inter¬ 
ference  when  running  11a  and  lib  in  parallel, 
because  the  two  LANs  use  separate  fre¬ 
quencies.  But  Greenfield  says  it's  worth 
waiting  a  year  for  802.Ug-compliant 
products  to  gain  cross-compatibility 
with  802.11b. 

The  shorter  transmission  range  of 
80211a  “means  you'll  need  many  more 
APs  for  the  same  cover^e,  which  will  be 
more  expensive."  he  says.  Like  802.11a.  802.Ug  sup¬ 
ports  aggregate  S4Mbit/sec.  speeds  but  runs  in  the 
2.4-GHz  band  and  was  designed  for  backward  com¬ 
patibility  with  802,11b. 

Finally,  emet^ing  dual-  and  multimode  products 
“will  eventually  make  upgradability  a  nonissue.”  sa>'s 
Mathbs.  Several  enterprise-ebss  vendors  offer  APs 
that  support  802.1b  and  a  slot  for  either  an  802.Ub 
or  802ilg  radio. 

Meanwhile,  trimode  802.11  b/a/g  chip  sets  recently 
began  shipping,  so  client  adapters  and  APs  that  sup¬ 
port  all  WLANs  could  be  available  within  a  year. 
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Whaf  s  the  best  way  to  manage  my  radio  infra¬ 
structure?  A  wave  of  new  WLAN  “switch" 
architectures  from  established  companies 
such  as  !>>'mbol  and  Proxim  Inc.,  as  well  os 
from  a  be^7  of  start-uf>s.  aim  to  case  AP 
configuration  and  management  in  large 
installations.  The  idea  is  to  centralize  control  of  a 
dumb  AP  infrastructure  in  a  "smart”  collapscd-back- 
bone  device. 

This  approach  purports  to  lower  the  cost  of  each 
AP  —  which  adds  up  in  large  shops  that  might  re- 

_  quire  hundreds  or  thousands  of  them  — 

and  to  enable  greater  scalability  ai>d 
lower  operations  costs. 

But  that  doesn't  mean  that  if  >*00  want 
a  smart  AP.  you  can't  get  centralized 
management,  too  —  unless  this  option 
blows  your  budget.  For  example.  Cisco 
Systems  Inc.  offers  its  Wireless  LAN 
Solutions  Engine,  a  data  center  appliance  and  Cisco- 
Works  management  module  that  centrally  configures 
and  manges  up  to  500  APs.  But  Cisco  Aironet  1100 
and  1200  APs  are  far  from  dumb;  the)'  run  the  full 
complement  of  Cisco  Internetworking  Operating 
System  routing  software  —  enabling,  for  example, 
wireless  virtual  LAN  (VLAN)  support. 

Symbol  also  supports  wireless  VLANs,  but  it 
builds  them  into  its  Mobius  Axon  mreless  switch, 
not  into  the  AP.  VLAN  profile  information  is  en¬ 
forced  before  incoming  traffic  hits  the  wired  network 
or  outbound  traffic  is  distributed  to  wireless  users. 


Can  i  integrate  WLANs  with  other  networks? 

Network  nirvana  is  when  users  can  n«m 
among  disparate  wired  and  wireless  net¬ 
works  without  having  to  reconfigure 
settings  or  reautheniicatc.  Multimode 
products  arc  emerging  that  combine  sev¬ 
eral  versioas  of  802.11.  as  well  as  connectivity  t«»  2.5- 
and  .^-generation  (2.5/3G)  mobile  WANs  from  the 
licensed  carriers.  Fore-xamplc.  Texas  Instruments 
Inc.  in  March  announced  chip  sets  for  PDAs  that 
combine  802.nK  GSM.  GPRS  and  BlucUHith  capabili¬ 
ties,  NeiMotion  Wireless  Inc.  in  Seattle  has  client 
software  for  roaming  among  any  type  of  packet- 
based  wired  or  wireless  LAN  or  WAN.  The  software 
simply  detects  the  most  robust  network  connection 
a\'ailablc  and  transparently  connects  the  user  to  it. 
keeping  VPN  sessions  intact. 

Such  internetwork  rmuning  will  grow  increasir^h 
handy  as  WLAN-based  public  semccs,  called  Wi-Fi 
hot  spots,  continue  to  sprout  up  in  airports,  hotels, 
malts  and  other  public  locations.  The  licensed  2S/3C 
carriers  haw  begun  offering  802.11b-bascd  hot-spot 
sen'ices  to  complement  (heir  ubiquitous,  but  slower. 
2.5/ 3G  packet  data  services  (sec  chan  above). 

Today’s  2.5/3G  services  provide  20K  to  60Kbit/sec. 
throughput  per  user,  dependit^  on  the  tcchmtlog) 
used.  So  multimegabit-spccd  Wi-Fi  networks,  where 
available,  offer  a  better-performing  option.  I 


Wexler  is  a  freelance  writer  in  Compbeii.  Calif.  Contact 
her  at  ioanie<^!wexler.com. 
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IT  SEEMS  LIKE  ONLY  yesterday  that  wireless  appli¬ 
cations  were  a  big  deal.  Early  adopters  like  Frito- 
Lay  and  FedEx  were  studied  and  revered:  the  risks 
and  rewards  of  their  pioneering  wireless  networks 
were  pondered  and  analyzed.  But  you  know  what 
they  say  about  pioneers  —  they’re  the  ones  with 
arrows  sticking  out  of  their  backs. 

Efforts  by  the  FedExes  and  Frito-Lays  of  the 
world  deserve  to  be  praised,  for  they  blazed  the  trail  for 
today’s  wireless  adopters  —  the  smaller  companies  whose 
shirts  bear  no  arrow  holes.  Here  we  take  a  look  at  some  of 
those  second-generation  adopters  to  see  what  prompted 
them  to  go  wireless,  what  tools  they  used  and  how  the 
projects  are  working  out. 


NAPPI  DISTRIBUTORS. 
PORTUND,  MAINE 

INDUSTRY:  Beverage  distribution 


REVENUE:  S42miion 


APPLICATfON:  Older  eritry  tool  trom  Vermont 
Information  fVocessing  Inc..  CoAdtester.  VI. 


BENEFITS:  Lets  sales  force  make  more  customer 
visits,  cuts  deps  from  order  process,  slows  cus¬ 
tomers  to  better  predict  costs  and  6  cheaper  than 
the  old  telephone  system 


DRAWBACKS:  Doesn't  work  Wei  near  radar 


Nappi's  salespeople  used  to  work 
in  a  fashion  familiar  to  all  20th 
century  road  warriors:  They  would 
visit  a  customer,  such  as  a  liquor  store 


in  Kittery,  Maine,  write  down  order  in* 
formation,  then  call  the  orders  in  from 
a  mobile  phone  or  pay  phone. 

Back  at  headquarters  in  Portland,  a 
representative  would  take  the  orders, 
enter  them  into  Nappi’s  back^ofiice 
systems  (which  run  on  an  IBM  AS/ 
400)  and  print  them  out.  Warehouse 
pickers  used  the  printouts  to  fill  orders 
for  the  next  day's  shipments. 

As  familiar  as  the  process  was.  there 
was  much  that  could  go  wrong.  For 
starters,  it  wasn't  unusual  for  Nappi's 
sales  reps  to  overwhelm  headquarters 
with  calls.  This  resulted  in  lots  of  wait- 
ing  around,  which  meant  $ale^>eople 
either  cooled  their  heels  at  pay  phones 
rather  than  hitting  the  road  and  visit* 
ing  other  customers  or  sat  on  bold  on 
cell  phones  to  the  tune  of  cents  per 
minute.  And  those  minutes  added  up 


for  a  relatively  small  business. 

One  day.  a  frustrated  sales  rep  came 
into  the  office  of  Peter  Paglio,  Nappi’s 
IT  director,  and  said  he  had  heard  that 
another  distributor  in  the  area  was  us¬ 
ing  wireless  computers  to  enter  orders. 
“He  was  kind  of  a  big  talker,  so  I  vfasn’i 
sure  he  was  telling  me  the  truth  at 
first,"  Paglio  says.  “But  be  had  a  num¬ 
ber  for  [Vermont  Information  Process* 
ing],  so  I  checked  it  out." 

Like  many  of  the  companies  favored 
by  second-generation  wireless 
adopters.  Vermont  Information  Proc¬ 
essing  is  highly  specialized:  Its  prod¬ 
ucts  and  services  are  for  beverage 
wholesalers.  This  niche  approach 
makes  sense,  according  to  Gartner  Inc. 
analyst  Phillip  Redman. 

To  make  wireless  cost-efiective.  the 
vendors  have  got  to  know  an  awful  lot 
about  their  clients'  business  process¬ 
es,"  Redman  says.  That's  wt^  you  see 
so  many  adopters  skipping  a  Microsoft 
or  an  IBM  and  going  instead  to  special¬ 
ist  [vendor]  companies  in  areas  like 
transportation  and  warehousii^" 

Paglio  says  his  first  move  was  to 
make  sure  Nappi’s  sales  territory  was 
served  by  a  carrier  using  the  OUubr 
Digital  Packet  Data  speciffcation, 
which  allows  IP  traffic  to  run  on  lop  of 
analog  pbeme  service.  Naf^i  was  in 
luck:  AT&T  Corp.  offered  the  specifi¬ 
cation  in  “99.9%  of  our  territory," 

Paglio  says. 

The  distributor  uses  Symbol  Tech¬ 
nologies  Inc.  1733  handheld  devices 
with  bar  code  scanners  running  (he 
Palm  0$  operating  system.  The  hand¬ 
helds  communicate  with  headquarters 
over  the  AT&T  phone  network  at 
9.6Kbit/sec4  Vermont  Information  Pro¬ 
cessing  is  tweaking  its  software  to 
nearly  triple  that  speed. 

Sales  reps  now  key  in  orders  on  the 
fly  and  send  them  straight  to  Nappi’s 
IBM  AS/400,  where  the  next  day's 
loads  and  schedules  are  determined 
automatically  and  sent  to  the  ware¬ 
house  for  picking.  Sales  reps  no  longer 
call  from  pay  phones,  and  office  work¬ 
ers  don’t  ^nd  time  keying  in  orders. 

Paglio  says  the  wireless  system  costs 
Nappi  S800  per  month  to  support  all 
32  of  its  sales  reps:  previously,  the 
company  paid  S600  per  month  for  15 
cell  phones,  plus  toll  calls  from  pay 
phones  for  t^  salespeople  who  didn’t 
have  phones  of  their  own. 

According  to  Paglio.  the  system  has 
just  a  few  drawbacks.  “It  goes  wacky 
around  radar"  like  that  in  use  in  air¬ 
ports  and  a  local  Naval  base,  be  says. 
And  some  sales  reps  aren’t  crazy  about 
a  recent  upgrade  that  offers  more  fea¬ 
tures  but  is  harder  to  leara 


OLD  DOMINION 
FREIGHT  LINE  INC., 
THOMASVILLE,N.C. 


INDUSTRY;  Trvsportabon 


REVENUE:  SS66.5  million 


APPLICATION:  Homegrown  route-planning 
^Qtemtordmers 


BENEFITS:  Beberservee  at  ktadng  docks, 
hoeasedeflioency 


DRAWBACKS;  Orders  may  have  *64  Brother 
syndrome" 


Is  GETTING  A  STATUS  BOOST  OVCr 
competitors  sufficient  reason  to  de¬ 
ploy  a  S3  million  wireless  applicatioa’ 
Actually,  that's  an  exaggeration.  Old 
Dominion  has  garnered  numerous 
beoeilts  horn  its  1,000  Symbol  Tech¬ 
nologies  handhelds,  including  in¬ 
creased  customer  satisfaction, 
improved  driver  efficiency  and  a  de¬ 
crease  in  loading  errors,  says  senior 
application  development  manager  Bar¬ 
ry  Graver.  He  describes  Old  Dominion 
as  a  “super-regional"  carrier,  meaning 
that  although  the  bulk  of  the  compa¬ 
ny's  freight  is  hauled  in  the  Southeast, 
it  has  outposts  nationwide. 

But  according  to  Graver,  simply  be¬ 
ing  equipped  with  real-time  cooununi- 
cation  tools  has  increased  the  status  of 
Old  Dominion's  drivers  when  they  ar¬ 
rive  at  their  stops.  And  that  alone 
boosts  efficiency. 

The  service  centers  and  shippers 
know  which  [trucking]  lines  h^e  com¬ 
puters."  Graver  says.  “That  makes  a  dif¬ 
ference  —  we've  been  bumped  up  in 
some  places."  That  bump  means  less 
waiting  in  line,  which  translates  into 
more  stops  per  day. 

The  reason:  When  a  trucker  without 
a  computer  complains  to  his  dispatch¬ 
er  that  he’s  being  forced  to  wait  for 
service  or  a  delivery,  it's  his  word 
against  the  shipper's. 

On  the  other  hand,  drivers  with 
handhelds  can  prove  where  they  are 
and  bow  long,  to  the  second,  tb^'ve 
been  idle.  The  end  result  for  Old  Do¬ 
minion  is  less  waiting  around  and 
more  stops  per  driver  per  day. 

The  company  used  Microsoft  Em¬ 
bedded  Visual  Basic  to  develt^  its  o«-n 
applications  for  the  Symbol  devices, 
which  run  Windows  GE  3.0. 

When  it  came  to  navigating  the 
crazy  quilt  of  U.S.  wireless  networks. 
Old  Dominion  turned  to  Aether  Sys¬ 
tems  Inc  The  Owings  Mills.  Md-based 
vendor  offers  middleware  and  services 


ONTHEPIEELS 

OF  THE  PIONEERS 


that  let  companies  outsource  all  or 
part  of  their  wireless  needs. 

For  example,  while  Old  Dominion's 
application  sends  and  receives  trans¬ 
missions  between  trucks  and  head¬ 
quarters,  Aether  manages  connections 
to  the  various  wireless  providers  and  is 
the  entity  billed  by  those  providers. 

In  addition.  Aether  manages  the 
overnight  synchronization  of  drivers’ 
handhelds.  This  saves  money;  Old 
Dominion  uses  the  proprietary  Ardis 
network  from  Reston.  Va. -based 
Motknt  Corp..  which  charges  by  the 
character.  The  idea  is  to  use  real-time 
communication  only  where  it  adds 
value,  as  in  proof-of-delivery  messages. 

Old  Dominion  is  deploying  another 
1,000  handhelds,  but  don't  expect  all  of 
its  drivers  to  applaud. 

In  an  unexpected  beneHt,  the  com¬ 
pany  has  noticed  a  reduction  in  miles 
between  stops  among  wireless- 
equipped  truckers. 

“We  think  maybe  they  got  more  effi¬ 
cient  because  there's  a  little  more  ac¬ 
countability  there."  Graver  says. 

Graver  acknowledges  that  some  dri¬ 
vers  may  resent  the  system's  vigilant 
tracking  of  their  whereabouts.  Howev¬ 
er.  office  workers  have  grown  accus¬ 
tomed  to  having  their  Internet  use 
monitored  by  their  employer.  Graver 
says,  and  in  the  same  way,  he  believes 
all  Old  Dominion  truckers  will  accept 
the  system  over  time. 


THERA.  BARTLETT 
TREE  EXPERT  CO.. 
STAMFORD.  CONN. 

IWOUSTWY:  landscaping _ 

REVENUE:  Staimiion _ 

APPUCATKW:  Mobile  CRM  tool  lor  arborists, 
developed  by  in-house  stall  and  SharpHat  Inc.  in 
En^ewoodClitfs.N.J. 

BENEFirStl^sterquotesforcustomerSpConipet- 
Itive  edge  over  smaller  competitors 

DRAWBACKS:  No  real-time  communication  yet. 
tough  culture  change  for  veteran  employees 

SOME  COMPANIES  DEPLOY  mobile 
and  wireless  applications  in  an  ef¬ 
fort  to  emulate  larger  competitors.  FA. 


Bartlett  did  the  reverse,  using  its  rela¬ 
tively  large  size  and  budget  to  create 
an  application  few  competitors  could 
hope  to  match. 

With  nearly  100  offices  throughout 
the  U.S.  and  the  U.K.,  F.A.  Bartlett  is  a 
relative  giant  in  an  industry  composed 
almost  entirely  of  mom  and  pop  opera¬ 
tions.  But  in  early  2001.  the  landscap- 
ir^  company  determined  that  it  wasn't 
capitalizing  on  its  size. 

Standard  processes  were  few  and  far 
between.  In  particular,  the  price  quotes 
prepared  by  sales  staffers  (called  ar¬ 
borists)  were  “all  over  the  place,"  ac¬ 
cording  to  David  Andry,  the  company's 
vice  president  of  IT. 

Most  arborists  took  notes  by  hand 
when  visiting  clients  and  prospective 
clients,  then  handed  off  those  notes  ^ 
eventually  —  to  an  assistant.  As  much 
as  two  weeks  might  pass  between  the 
time  of  a  visit  and  the  time  a  quote  was 
mailed  out.  That  translated  to  lost  rev¬ 
enue  as  prospects  cooled  off  and  met 
with  competitors. 

Moreover,  the  language  used  by  ar¬ 
borists  in  their  quotes  varied  widely. 
This  meant  FA.  Bartlett  ran  the  risk  of 
not  meeting  widely  accepted  industry 
guidelines  in  the  landscaping  indus¬ 
try,  terms  used  to  communicate  with 
customers  are  mandated  by  the  Man¬ 
chester.  N.H.-based  Tree  Care  Industry 
Association  (TCIA).  The  loosey- 
goosey  way  FA.  Bartlett  prepared 
quotes  niade  it  Impossible  for  head¬ 
quarters  to  be  certain  that  employees 
were  following  the  rules. 

FA.  Bartlett  decided  to  standardize 
its  arborists’  work  by  equipping  them 
with  Fujitsu  Stylistic  LT  C^  mobile 
pen  tablet  computers.  Then  it  had  to 
develop  a  software  application  for  cus¬ 
tomer  visits. 

“I  would  have  preferred  an  off-the- 
shelf  application,"  Andry  says,  but 
there  was  nothing  on  the  market  that 
met  company  needs. 

According  to  Isaac  Ro,  an  analyst  at 
Boston-based  Aberdeen  Group  loc.. 
it's  just  a  matter  of  time  before  a  ven¬ 
dor  nils  that  void, 

The  wireless  [vendor]  companies 
that  are  most  successful  serve  an  in¬ 
credibly  tight  niche.”  due  to  the  need 
to  understand  business  processes  be¬ 
fore  building  applications.  Ro  explains. 

He  points  to  Oilspace  Inc„  a  New 
York-based  company  focused  on  petro¬ 
leum  trading,  and  Telispark  Inc.,  an 
Arlington,  Va.-based  supply  chain 
specialist,  as  examples. 

FA  Bartlett  pulled  together  a  10- 
men^r  committee  with  representa¬ 
tives  from  several  regions.  They  drew 
up  a  list  of  desired  features  and  func¬ 


tions.  then  turned  the  project  over  to  a 
team  composed  of  in-house  developers 
and  SharpHat  representatives. 

The  application  was  developed  and 
refined  over  a  one-year  period.  In  late 
2001.  it  was  roiled  out  to  F.A.  Bartlett's 
200  arborists. 

Today,  arborists  turn  around  quotes 
not  in  weeks,  bm  in  about  three  min¬ 
utes.  and  their  vehicles  are  equipped 
with  mobile  printers.  Andry  says  the 
ability  to  present  a  quote  immediately 
after  a  consultation  has  “significantly" 
increased  business. 

Moreover,  arborists  have  a  number 
of  new  tools  to  help  them  close  sales. 

A  glance  at  their  Fujitsu  devices  shows 
them  maps  of  clients'  properties  and 
offers  a  l^tory  of  services  performed, 
down  to  individual  trees  (customer  in¬ 
formation  dating  back  seven  years  was 
loaded  into  the  system). 

Arborists  can  see  if  customers  are 
current  on  their  accounts.  They  can  of¬ 
fer  white  papers  written  by  experts  at 
F.A  Bartlett's  laboratory  in  Gharlotte. 
N.C.  They’re  even  reminded  of  the 
names  of  clients'  kids  and  pets. 

AU  quotes  are  presented  in  TGIA- 
approved  language,  ensuring  that  the 
company  meets  industry  language 
standards. 

F.A  Bartlett  says  it  spent  apiproxi- 
mately  $1  million  on  the  application, 
which  it  predicts  will  pay  for  itself  in 
about  four  years  throi^  reduced  pa¬ 
perwork  costs  and  increased  revenue. 

The  application  isn’t  perfect,  Andry 
acknowledges.  For  starters,  there  is  no 
real-time  communication  between  the 
mobile  devices  and  headquarters  —  it 
was  simply  too  expensive.  But  Andry 
says  FA.  Bartlett  is  “absolutely  revisit¬ 
ing  that.”  and  the  company  expects  to 
have  a  pilot  in  place  before  the  end  of 
this  year. 

Today,  arborists  place  their  hand¬ 
helds  in  cradles  overnight.  Through  a 
Microsoft  .Net  Web  services  applica- 
tiem,  the  day's  data  is  replicated  to  a 
server  at  FA.  Bartlett's  headquarters. 
The  company  uses  \K^ndow$  2000  and 
Oracle  Gorp.  database  and  CRM  appli¬ 
cations. 

The  other  lesson  learned.  Andry 
says,  is  that  persuading  longtime  ar¬ 
borists  to  use  a  modern  mobile  tool 
isn’t  always  easy. 

“There  are  so  many  personalities  in 
this  business."  he  says.  “The  company 
as  a  whole  thinks  it’s  great,  but  it’s 
been  a  real  culture  shock  for  some 
people."  • 


Ulfelder  is  a  freelance  writer  in  South' 
boro.  Mass.  Contact  him  at 
5ulfelder@charter.net 
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IT  Careers:  Utility  Industry  Focuses 
on  Cost-Cuiting,  Security 


Command  and 
conirol  centerv 
Lar|e*$ca(«  inle- 
fratlen.  Cyber  altaci(» 
H’s  not  just  the  stuff  of 
national  defense  and 
homeland  security. 
These  three  areas,  aionf 
with  intense  cost  pres¬ 
sures.  are  the  primary 
focus  of  information 
lechnotofy  efforts 
across  the  ulUity 
industry-  Belter  than 
60%  of  utility  companies  experienced  cyber  attacks  in  the 


line  carrier  lechnoiofy  that  will  provide  htjh  speed  Internet 
to  rural  areas. 


Blalock  arsd  Southern  have  weathered  the  past  two  turbu¬ 
lent  years  continuinf  to  invest  in  new  technoiofy.  despite 
budget  cuts.  Ihrou^  aggressive  nefotialions  The  SiO  S5  bil¬ 
lion  utility  based  in  Atlanta  is  currently  impiemenlirsg  enter¬ 
prise  application  integration.  The  new  systent  which  will  be 
fully  operahonal  in  2006.  provides  real-time  energy  trading 
capability  while  also  providing  command  artd  control  over 
the  supply  chain  lo  include  everything  from  warehousing  to 
freight  management.  As  part  of  the  project,  a  new  account¬ 
ing  materials  and  procurement  system  will  drive  down 
changes  to  the  work-order  applications. 


Critical  IT  talent  has  been  core  to  th»$  technology  strategy 
Blalock  ts  dear  that  she's  lookirtg  for  people  who  not  only 
have  a  good  education  record,  but  also  people  who  have 
proven  they  are  creative  and  innovative  leaders  with  high 
elhtcs  *1  tell  new  hires,  congratuiaiiom  on  getting  an  educ 
lion,  but  keeping  one  ts  the  issue.*  she  says.  ’Every  day  ha 
to  be  a  study  of  the  bustness  * 


That's  why  Blalock's  staff  not  only  develops  lechrtoioty  bi. 
also  spersds  time  with  field  crews  on  ihe  trarttmissien  and 
distribution  side  of  the  business  arsd  in  power  plants  iearr 
ing  the  generation  side  of  the  business  She  believes  1h»s 
systemic  approach  allows  Southern's  IT  group  to  serve  at . 
breeding  groursd  of  business  latent 


second  half  of  2002.  The  cost  pressures  are  extensive.  "What  has  been  bad  for  Ihe  a  industry  fas  a  whole) 

relying  on  technology  to  produce  greater  efficiency.  And  the  has  allowed  us  to  continue  investing.*  Blalock  says  of  - - 

grid  generating  and  liantmltting  energy  is  aging.  It's  a  mix  Southern's  strategrc  applkalion  of  CT  to  business  issues  IT  CarGCfS 

that  is  ripe  for  technology  solutions.  'Our  per  bill  cost  is  among  the  lowest  in  the  industry.  We've  For  information  on  recruitment  adverhsing. 

brought  on  systems  that  help  our  generaiior\  business  do  Please  contact;  Mancy  f .  ^rcivai. 

According  to  Becky  Btalock,  senior  vice  president  and  a  belter  job  of  predictive  maintenance,  to  assure  we  stay  Director.  Recruitment  Advertising, 

chief  Information  officer  for  The  Southern  Co.,  these  issues  up  and  rurtning.  We're  tootdng  at  systems  to  help  grow  our  a1 800-762-2977 

are  coupled  with  what  lies  ahead.  She  adds  lo  the  list  business.  For  instaiKe.  we  acquired  a  gas  company  that  was  500  OW  Connecticut  Path 

wireless  networking,  the  ability  to  add  60-90.000  customers  outsourcing  a  lot  of  IT  and  not  very  effectively  We  re  Framingham.  MA  01701 

per  year  with  technology  instead  of  people,  and  power  working  to  improve  that.*  Produced  by  Carete  R  Hedden 
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Content  is  Key. 

Searchable  white  paper  library  delivers  the  in-depth 
information  you  need  to  make  confident  decisions. 

With  the  growth  of  the  Internet,  the  volume  By  combining  Computerworld's  extensive 
of  Information  available  as  you  try  to  keep  collection  of  white  papers  with  IDG's  white 

pace  with  technology  can  be  daunting.  paper  library,  we've  created  a  searchable, 

More  than  ever,  you  need  a  reliable  source  comprehensive  database  covering  the 

for  the  insight  and  opinion  you  need  to  do  technology  spectrum  —  everything  from 

your  job  effectively  and  efficiently.  The  enterprise  storage  security  to  ROI  to  eService 

Computerworld.com  white  paper  library  best  practices.  You'll  find  white  papers  that; 

provides  quick,  easy  access  to  a  wealth  of  i  *  j  *  _i.  .  ^ 

resources  for  understanding,  evaluating  and  .  p,„yems  and  concerns  and  outline 

implementing  products  and  technology.  appropriate  business  solutions 

•  Explain  a  company's  approach  to  current  IT  issues 

•  Discuss  product  or  market  trends  and  their 
impact  on  your  business 


Fully  leverage  the  content  that  is  the  key 
to  making  Informed,  confident  decisions. 

Computerworld.com/whitepapers 
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wcomputerworld.com 


How  to  Contact 

COMPUTERWORID 

We  invite  readers  to  call  or  wnte  with  their  comments 
and  ideas.  It  is  best  to  submit  ideas  to  one  of  the  department 
editors  and  the  appropriate  beot  reporter. 
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Continued  from  poge  1 

Pfizer _ 

ing  distributed  to  the  employ¬ 
ees.  who  typically  work  out  of 
their  homes,  will  also  include 
built-in  802.Ub  Wi-R  wireless 
LAN  access  points  and  cards. 

SialUrd  declined  to  com¬ 
ment  about  the  cost  of  the 
broadband  installation  or  the 
return  on  investment  Pfizer 
expects.  But  he  said  the  net¬ 
work  should  save  time  for 
sales  reps  by  speeding  up  the 
process  of  synchronizing 
CRM  data  with  the  company's 
back-end  systems,  which 
chews  up  an  average  of  two 
hours  per  day  for  workers  us¬ 
ing  dial-up  connections,  ac¬ 
cording  to  Stallard. 

In  addition,  the  broadband 
capabilities  will  let  the  remote 
wDiicers  use  Web  conferenc¬ 
ing  sofhvare  on  their  IBM 
ThinkPad  notebooks  to  take 
part  in  internal  meetings  that 


would  otherwise  require  at 
least  two  days  of  travel.  Stal¬ 
lard  said. 

Remote  workers  reported 
an  average  33%  productivity 
increase  as  a  result  of  getting 
broadband  connections,  ac¬ 
cording  to  a  recent  survey  of 
865  users  that  was  funded  by 
the  AT&T  Foundation  and  re¬ 
leased  last  week  by  the  Inter¬ 
national  Telework  Association 
&  Council  (ITAC)  in  Wake¬ 
field,  Mass. 

Tim  Kane,  president  of 
ITAC  and  CEO  of  Kinetic 
Workplace  loc..  a  telecommut¬ 
ing  consultancy  in  Pittsburgh, 
said  be  doesn't  know  of  any 
companies  that  have  installed 
broadband  networks  on  the 
scale  of  the  one  planned  by 
Pfizer. 

Pfizer  is  outsourcing  devel¬ 
opment  and  management  of 
the  broadband  nctworit  to 
Norcross,  Ga.-based  Nctificc 
CoimnunicatSons  Inc,  which 
started  rolling  out  technology 


to  Pfizer  employees  in  March. 
About  600  users  are  now*  live, 
and  roughly  1.000  will  be 
added  monthly.  Netifice  said. 

Stallard  said  Pfizer  officials 
decided  not  to  do  the  work  in¬ 
ternally  because  of  the  com¬ 
plexity  of  dealing  with  cable 
TV  and  local  (el^hone  com¬ 
panies  across  the  U.S. 

Because  each  of  those  com¬ 
panies  has  its  own  variations 
on  modem  and  router  setups. 
Stallard  said,  as  many  as  3.000 
different  network  configura¬ 
tion  settings  may  have  to  be 
distributed  for  installation  on 
the  home-office  routers.  "I 
could  not  deal  with  it.”  he  said. 

Greg  Davis,  vice  president 
of  marketing  at  Netifice.  said 
the  company  will  provide 
Pfizer  workers  with  VPN 
client  software  that  supports 
the  triple  Data  Eocryptioo 
Standard  and  is  sold  by  AT&T 
Corp.'s  global  network  divi¬ 
sion.  Meanwhile  Netifice 
plans  to  use  routers  and  re- 


Pfizer’s  Disiributed 
Broadband  Netwsrlt 

■  MM  gnivUe  cable  or  DSL  ines 
to  dmost  80%  ol  the  company  's 
Q.OIXHwrson  sales  lorce 

•  UtItzM  preconhgum}  muters 
so  sethRstal  brne  tor  end  users 
should  average  10  mmutes. 

■  hdiidM  bui-«n  Wrf  I  access 
oomts  and  cards  as  part  oi  the 
network  hardMare 

•  b  dasMwd  to  (kamahcaly  re¬ 
duce  the  tme  needed  to  synchro¬ 
nize  CRM  data  wdh  Pfizer's  cor¬ 
porate  systems 

mote  network  marugement 
and  provisionirtg  software  de¬ 
veloped  by  Alameda,  Calif.- 
based  Netopia  Inc. 

Jeff  Porter,  vice  president  of 
maricting  at  Netopia,  said  the 
four-  or  eight-pon  routers  are 
being  configured  to  support 
the  type  of  connection  —  ca- 


1  ble  modem  or  DSL  —  used  b>- 
I  various  Pfizer  sales  reps. 

The  routers  also  include  an 
installation  wizard  that  fetch' 
es  the  correa  settings  for  each 
device  from  a  Netifice-hosted 
Window  NT  server  running 
Netopia's  Java-based  t»et- 
Octe^us  software,  Porter  said. 

Stallard  said  be  doesn't  plan 
to  activate  the  network's  Wi-Fi 
features  until  Netopia  and 
Netifice  develop  a  way  to  au¬ 
tomatically  configure  the 
client  cards  for  individual  end 
users  ^  a  task  that  Porter  esti¬ 
mated  could  be  finished  this 
summer. 

Some  of  the  3,000  or  so 
sales  employees  who  mitially 
won't  get  access  to  the  net¬ 
work  are  in  locations  so  re¬ 
mote  that  securing  broadband 
lines  for  them  may  be  impos¬ 
sible.  Stallard  said-  He  added 
that  Pfizer  might  eventually 
use  satellites  to  connect  the 
orphaned  users  to  the  net¬ 
work.  I 


Continued  from  page  1 

Windows  2003 

named  Yukort,  which  will  soon 
go  into  beta  testing. 

Exchange  Server  users  have 
one  choice.  The  only  version 
that  can  be  installed  on  the 
new  operating  system  b  Ex¬ 
change  2003.  and  it’s  not  due 
until  summer. 

think  Microsoft  owes  it  to 
their  customers  to  ensure 
backwards  compatibility  and 
interoperability  for  at  least 
five  years,”  said  Derek  Gee. 
vice  president  and  director  of 
system  architecture  and  inte¬ 
gration  at  Ameriquest  Mort¬ 
gage  Co.  in  Orange.  Calif. 

”Another  reason  Microsoft 
should  support  some  of  their 
older  versions  b  to  maintain 
customer  loyalty,”  said  Steve 
Sommer.  CIO  at  Hughes.  Hub¬ 
bard  &  Reed  LLP  in  New  York. 
There  are  some  big  cus¬ 
tomers  that  cannot  afford  to 
upgrade  right  ivow.” 

Many  users  are  sympathetic 


to  Microsoft's  claims  that  ex¬ 
tensive  security.  Web  server 


Englewood.  Colo.,  said  securi¬ 
ty  has  spurred  hb  company  to 


and  Active  Directory  improve-  invest  time  during  the  past 
mems  affect  not  only  the  op-  year  to  get  the  latest  versions 


erating  system  but  also  any  of  Microi 

applicatioas  that  rely  on  it.  CIO  colk 
They  said  they  undmtand  ing  tbeim 
why  some  older  applications  can  aflbn 

won't  be  support^ _ 

on  Windows  Server  IWUMF 

^fit'sreaUva  MorosoHoffagbshbOfaie 

uusreauya  ontheWind«»S®rvef2003 

maior  upgrade,  then 


Microsoft  can't  be 
expected  to  make  wmwstn  ' 

substantial  im-  - 

provements  (o  the  product 
while  at  the  same  time  bring¬ 
ing  along  all  its  old  baggage.” 
said  Rich  Eber.  development 
service  director  at  Hawaiian 
Electric  Ca  in  Honolulu. 

But  if  users  find  that  the 
core  Windows  server  operat¬ 
ing  system  hasn't  changed  in¬ 
ternally  as  much  as  Microsoft 
has  portrayed,  "there  should 
be  a  backluh  against  ihb  lack 
of  support.”  Eber  said. 

Neville  Teagarden.  CIO  at 
Navigant  International  Inc.  in 


of  Microsoft  software.  ”My 
CIO  colleagues  should  be  ask¬ 
ing  themselves  whether  they 
can  afford  the  security  risks  of 

_  using  older  ver- 

J||t  sions  of  Microsoft 

pr^uetChes^ 
iS«vb2003  Those  usere  who 
eawc  have  lagged  on  up- 

|g231  grades,  however. 

oiay  not  be  pleased 
to  see  that  Micro¬ 
soft  won't  be  supporting  older 
versions  of  its  software  on  the 
latest  operating  system. 

"Expecting  companies  to 
upgrade  everything  in  their  in¬ 
frastructure  to  get  the  features 
from  a  single  product,  in  thb 
case  Windows  2003,  b  unreal¬ 
istic,”  said  Dave  Curran,  man¬ 
ager  of  IT  at  C£  Franklin  Ltd. 
in  Calgary.  Alberta.  This 
smeUs  of  a  pure  money  grab 
by  Microsoft” 

Curran  said  CE  Franklin  will 
delay  hs  upgrade  to  Windows 


Server  2003  by  at  least  12 
months  because  of  the  appli¬ 
cation  compatibility  issue. 

The  oil  and  gas  equipment 
supplier  b  stUl  running  Ex¬ 
change  5.5  on  Windows  NT 
4.0,  and  a  simultaneous  migra¬ 
tion  would  be  "too  much  for 
us  to  undertake  in  a  single  up¬ 
grade.”  he  said. 

Aleiandro  Bombaci.  CIO  at 
Erapresas  Polar,  a  consumer 
goods  maker  and  distributor 
in  Caracas.  Venezuela,  said  hb 
company  typically  migrates 
the  operating  system  —  the 
"enabler  layer"  —  and  then  the 
applications.  ”Upgrading  both 
at  the  same  time  b  too  rbky,” 
be  said,  although  in  hb  case, 
the  upgrades  mostly  involve 
non-Microsoft  applications. 

Most  Microsoft  server  ap¬ 
plications  will  run  fine  in  an 
environment  that  has  a  mix  of 
servers  running  Windows 
Server  2003  and  Windows 
Server  2000.  said  Barry  Goffe. 
group  manager  of  Microsoft's 
server  platform  divbioa  Ex¬ 
change  2000.  for  instance,  can 


coexist  in  a  Windows  Server 
2003  environmcni.  as  long  as 
it's  installed  on  a  server  run¬ 
ning  Windows  2000  with  Ser¬ 
vice  Pack  3. 

With  about  350  code  changes 
in  Windows  Server  affecting 
Exchange.  Microsoft  said  it  de¬ 
cided  that  customers  would  be 
bcttCT^  served  if  it  focused  de¬ 
velopment  on  Exchange  2003 
rather  than  on  updating  old 
versions,  so  it  could  take  ad¬ 
vantage  of  improvements  in  In¬ 
ternet  Information  Server  (115) 
6.0.  Exchange  2000  and  2003 
rely  heavily  on  US  for  Internet- 
based  protocol  services. 

But  some  users  are  upset  by 
the  deebion.  For  example, 

Rick  Weaver,  director  of  tech¬ 
nical  architeaure  at  Hilton 
Hotels  (^rp.  in  Memphis,  said 
HUton  b  running  a  mix  of  Ex¬ 
change  55  and  2000  and  does 
slow  migrations  ‘because  they 
are  extremely  painfuL” 

"it  would  encourage  accep¬ 
tance  of  the  new  operatii^ 
system  if  the  old  apps  ran  on 
it”  Weaver  said.  I 


FRANK  HAYES  ■  FRANKLY  SPEAKING 


Business  Leads  IT 


At  A  BREAKFAST  MEETING  at  last  week’s  Cutter  Con¬ 
sortium  Summit  2003  conference,  one  deep  thinker 
pointed  to  FedEx’s  Fred  Smith  as  a  CEO  who  really 
understands  the  value  of  IT.  “I  remember  Fred  Smith 
talking  about  IT  like  it  was  more  important  than  the 
planes,”  said  Cutter  consultant  Michael  Mah. 

Well,  yeah.  That’s  because  at  FedEx,  IT  is  more  important  than  the 
planes.  Without  its  package-tracking  systems,  FedEx  can’t  charge 
premium  prices  for  overnight  delivery.  IT  makes  the  money  flow. 

No  wonder  Fred  Smith  understands  its  value. 


And  no  wonder  so  many  other  CEOs  don’t 
Much  of  the  discussion  at  that  breakfast  meet* 
ing  was  about  how  to  market  IT  to  other  parts 
of  a  business  (see  story,  (^icklink  38135).  Peo¬ 
ple  talked  about  positioning,  about  explaining 
ITs  unique  situation  in  the  organization,  about 
translating  techspeak  into  boardroomspeak. 

Yeah,  sure.  fine.  Think  that’ll  actually  con¬ 
vince  anyone  of  IT’s  value  as  a  core  competen¬ 
cy  at  your  company? 

There's  an  easy  test  for  what  qualifies  as  a 
core  competency  in  a  business.  Are  you  direct¬ 
ly  involved  in  extracting  money  from  cus¬ 
tomers  in  exchange  for  products  or  services? 
Then  you’re  core.  If  not.  you’re  not. 

Your  CEO  knows  that.  And  if  IT  is  core  in 
your  business,  your  CEO  knows  that  too. 

But  it’s  probably  not.  And  positioning  it  and 
explaining  it  won’t  change  that  situation. 

Neither  will  translating  techspeak  into 
boardroomspeak.  which  has  long  been  a  Holy 
Grail  for  IT  executives.  Look,  no  one  in  the 
boardroom  wants  a  translation  of  techspeak  — 
any  more  than  they  want  translations  of  sales- 
speak  or  logistics-speak  or  shop-floor-speak. 

If  you’re  translating  techspeak  to  board¬ 
roomspeak,  that  means  you're  going 
about  it  wrong.  You’re  bringing 
technology  to  the  table  and  trying 
to  explain  how  it’s  valuable  to  the 
business.  That’s  backward.  You 
should  be  identilying  business 
needs  and  then  explaining  how 
technology  can  meet  them. 

In  other  words,  you  should  start 
your  thinking  with  the  business,  not 
with  the  technology. 

And  to  do  that,  you've  got  to 
know  your  business.  If  you  want  to 
start  making  IT  core  in  your  com¬ 
pany.  you  need  to  know  as  much 


about  how  your  company  actually  builds  and 
moves  and  sells  and  collects  money  for  prod¬ 
ucts  and  services  as  you  know  about  speeds 
and  feeds  and  bits  and  wires. 

You  need  to  know  your  company’s  business 
processes  inside  and  out.  Not  the  theory,  not 
the  wishful  thinking  that  project  specifications 
get  based  on.  but  how  it’s  actually  done. 

You  need  to  know  why  it’s  done  that  way  — 
what  was  tried  and  failed,  what  was  never  tried 
because  politics  or  business  conditions  or  lack 
of  the  right  technology  prevented  iL 

You  need  to  know  what  can  be  changed  and 
what’s  sacrosanct.  You  need  to  know  where  a 
little  change  will  yield  big  results.  You  need  to 
know  who  will  help  make  that  happen. 

You  won’t  find  out  any  of  those  things  by  re¬ 
searching  technology.  You’ll  only  do  it  by  talk¬ 
ing  first  to  business-side  executives,  then  to  the 
managers  who  work  for  them.  Talk  up  the  op¬ 
portunity  for  them  to  look  good,  the  chance  for 
them  to  take  credit  if  you  can  find  ways  of 
making  their  operations  more  successful. 

Then,  once  they’ve  said  yes,  stop  talkii^. 
Observe.  Listen.  Ask  questions.  Look  for  the 
places  where  IT  really  could  transform  how 
they  do  your  company’s  business. 

Thor’s  how  you'll  get  a  shot  at 
proving  IT’s  value  as  a  core  com¬ 
petency  —  through  transforma¬ 
tion.  not  marketing. 

Sure,  you  can  use  marketing 
techniques  to  raise  ITs  profile. 

You  can  remind  other  departments 
that  IT  does  deliver  value.  You  can 
make  the  case  for  ITs  usefulness. 

But  if  you  can  find  a  way  to 
make  IT  as  core  to  your  business 
as  it  is  to  FedEx,  you  can  bet  your 
CEO  will  value  IT  every  bit  as 
much  as  Fred  Smith.  I 


www.computerwoHd.com 


Call  for  Nominations 


Is  youNorganization  making  the  most 
of  technology  on  the  cutting  edge? 

We  want  to  hear  about  it! 


Computerworld's  Innovative  Technology  Awards  2003  will  honor 
the  industry's  top  vendors  that  are  helping  their  customers 
achieve  business  value  through  technology. 

Tell  us  about  your  successful  technology  application 
and  rxKTiinate  your  vendor  online  at 

www.computerworld.com/research/innovativetech 


ABOUT  THE  AWARDS 

For  the  second  year,  these  customer  choice  awards  will 
spotlight  leading  vendors  and  showcase  how  their  customers 
are  using  technology  to  solve  business  problems  in  real-world 
settings.  Nominations  from  IT  customers  will  be  collected 
from  now  through  May  12,  2003.  Nominated  vendors  will  be 
surveyed  about  their  technology  applications.  A  panel  of 
outside  experts  and  Computerworld  editors  will  review  the 
surveys  and  choose  the  winners. 


Survey  results  and  stories  that  offer  practical  advice 
from  IT  leaders  using  these  technologies  will  be 
published  in  the  September  22,  2003,  issue, 
as  well  as  online  at  Computerworld.com. 


m 

TECHN0UI6Y 


AWARDS 


Need  More 
Information? 


Contact  lnnovativeTech@computerworld.com. 

But  hurry!  The  nomination  deadline  is  May  12,  2003. 


It’s  time  the  ultimate  64-bit  server 

and  the  ultimate  32-bit  server 

were  the  same  server. 

AMD 


Introducing  the  AMD  Opteron"  processor,  64-bit  computing  for  today’s  32-bit  world. 

It's  the  only  processor  that  is  designed  to  run  your  32-  and  64-bit  applications  simultaneously  and  without  compromise. 
AMD  Opteron  runs  on  AMD64-a  breakthrough  architecture  that  enables  64-bit  technology  on  the  x86  platform- 
creating  a  new  class  of  computing  so  you  can  migrate  to  64-bit  technology  on  your  own  terms. 


The  world’s  highest  performing  2P  and  4P  servers  are  now  powered  AMD^  ^ 
by  AMD  Opteron  processors.  Receive  the  performance  and  security  benefits  of  ^  ^ 

64-bit  computing,  while  getting  the  best  32-bit  performance  available  anywhere.  ^ _ OpterOfl 


Leverage  your  existing  investments  while  preparing  for  the  future.  One  architecture 
across  one  enterprise  means  you  won't  have  to  rip  and  replace  your  entire  infrastructure  when  you  transition 
to  64-bit  computing.  It’s  just  another  way  AMD  designs  and  builds  processors  with  you  in  mind.  For  a  closer 
look  at  the  financial  and  performance  advantages  of  the  AMD  Opteron  processor,  visit  www.amd.com/opteron 


AMD 
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millions  of  dollars  spent  on  Y2li  are 
to  blame  for  FT s  latest  credibility 
crisis.  Some  45%  of  CIOs  ackno«d- 
edge  the  problem,  which  they  attribute  mostly  to  IT  being  too  slow  and  too  expen¬ 
sive.  To  turn  things  around,  IT  managers  are  focusing  more  on  short-term  ROI  and 
getting  business  units  more  involved  in  IT  planning  and  decision-making.  Page  37 


EDS  Sinks  Under  Weight  of  N/MCI  Anchor 


Problems  with  huge 
Nav'v  intranet  project 
take  S334  million  toll 

BY  DAN  VCNTON 

Electronic  Data  Systems 
Corp.  last  week  reported  a 
quarterly  net  loss  of  $126  mil- 
lion,  blaming  ‘problem  con¬ 
tracts”  and  a  whopping  $334 
million  pretax  loss  stemming 
from  difficulties  mth  the 
multibillion-doUar  Navy/Ma¬ 
rine  Corps  Intranet  program. 
Robert  Swan,  chief  flnan* 
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cial  officer  at  EDS,  said  the 
two  primary  causes  of  the 
loss  associated  with  the 
N/MCl  contract  were  lower 
profit  margins  on  N/MCI 
seats  and  deployment  delays. 

The  average  N/MCI  seat 
price  dropped  by  4%.  a  sig¬ 
nificant  hit  resulting  from 
the  Navy's  decision  to  place 
more  orders  for  cheaper 
N/MCl  seats  and  fewer  for 
higher-priced  seats  that  are 
configured  differently,  said 
Jeffrey  Baum,  an  EDS.spokes- 
man.  The  order  therefore  fell 
short  of  EDS  estimates  on 
the  number  of  hi^-maigin 
seats  that  the  Navy  would 
require. 

That  shortfall  was  of&et 
somewhat  by  a  recent  im¬ 
provement  in  the  number  of 
seats  deployed  and  conces¬ 
sions  from  EDS  subcontrac- 
N/MClpageSS 


PeopleSoft  Plans 
Technology  Blitz 
To  Simplify  Apps 

Vows  to  cut  installation,  integration  and 
upgrade  costs,  but  reveals  few  specifics 


PeopleSoft  Inc.  last  week 
outlined  an  initiative  to  re¬ 
duce  the  cost  of  installing 
its  business  applications, 
simplify  the  process  of  in¬ 
tegrating  them  with  other 
systems  and  streamline 
user  uf^rades  of 
the  software. 

At  PeopleSoft's 
2003  Leadership 
Summit  confer¬ 
ence  here,  the 
company  said  the  plan  also 
includes  the  development 
of  technologies  designed  to 
further  automate  its  soft¬ 
ware  support  operations 
and  improve  application 
quality  and  usability. 

Craig  Conway,  People- 
Soft's  president  and  CEO. 


PeopieSoh  says 
it  will  port  dll  nl 
its  software  to 
Linux. 


said  in  his  keynote  speech 
that  the  Pleasanton.  Calif.- 
based  software  vendor 
plans  to  spend  "hundreds 
of  millions  of  doUars”  on 
the  effort  over  the  next  few 
years.  Application  projects 
and  other  IT  operations  re¬ 
main  too  "people-intcn- 
sive.”  be  added. 

PeopleSoft  ex¬ 
ecutives  didn’t 
disclose  much  in 
the  way  of  specif¬ 
ic  product  plans. 
But  their  vow  to  make  ap¬ 
plication  maintenance  and 
upgrades  less  of  a  chore 
struck  a  chord  with  Vicki 
Silvera.  director  of  infor¬ 
mation  systems  at  Vail  Re¬ 
sorts  Man^iement  Ca  in 
VaiLCola 

PeopleSoft.  page  55 


WLAN  Security  StiH  Vexes  IT 


Shops  need  policies 
to  bii  rogue  access 
points,  FT  pros  say 


Corporate  IT  managers 
continue  to  grapple  writh 
wireless  LAN  security  is¬ 
sues.  including  the  bwle 
against  the  installation 
unauthorized  WLAN  ac¬ 
cess  points  by  employees 
who  are  unmindful  of  the 
risks  such  links  can  pose. 


That  was  the  theme  re¬ 
peated  last  week  by  many 
attendees  at  Conjurer- 
world's  inaugural  Mt^ile  Sc 
Wireless  World  conference 
here.  About  200  high-level 
IT  executives  attended  the 
event. 

Tom  Dillon,  manager  of 
mobile  and  wireless  tech¬ 
nology  at  Hilton  HmcIs 
Corp.  in  Beverly  Hills, 
Calif.,  said  the  manager  of 
a  Hilton  hotel  be  recently 
visited  assured  him  that 
WLAN  Securiry.  page  J4 
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Introducing  Microsoft  Windows  Server  2003.  Do  more  with  less. 
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Software  for  the  Agile  Business. 


Information  Resources  Inc  IRI 
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Micfosott 


Build  a  200-server  infrastructure. 


ON-DEMAND 

COMPUTING 

IS  A  GREAT  IDEA. 


BUT  IF  YOU  CAN'T  MANAGE  IT, 
THAT'S  ALL  IT  WILL  BE. 


MANAGING  ON-DEMAND  COMPUTING 

We  have  seen  the  future  of  IT,  and  we're  delivering  it  today.  That's  why  we're  making  it  possible  to 
manage  on-demand  computing  right  now  with  our  products.  Our  latest  innovations  let  you  manage 
your  infrastructure  as  efficiently  and  reliably  as  a  utility.  They  help  your  infrastructure  manage  itself, 
so  you  can  focus  on  running  your  business.  And,  most  importantly,  they  give  you  insight  into  how 
your  infrastructure  is  supporting  your  business,  so  you  can  make  better  business  decisions 
and  Improve  your  bottom  line.  To  wake  up  to  the  dream  of  managing  on-demand  computing, 
contact  us  today  at  ca.com/unicenterl . 


Unicenter  Managing  Business  Infrastructure  ca  Computer  Associates' 


CINIDIIS 


Squandered  Opportunity 

In  the  Management  section:  Companies  invested  heavily 
in  IT  asset  management  prior  to  the  year  2000.  but  they  have 
largely  failed  to  make  long-term  improvements.  Here’s  how¬ 
to  pick  up  the  pieces.  Page  42 


NEWS 


4  HP  touts  its  “adaptive  enter¬ 
prise"  strategy,  but  it  will  have 
to  distinguish  it  from  other 
vendors’  similar  offerings. 

5  Health  insurers  get  ready  for 
real-time  attack  surveillance 
as  the  Department  of  Home¬ 
land  Security  begins  a  bioter¬ 
rorism  exercise. 

5  ATAT  speeds  up  a  network 
expansion  in  SO  countries 
in  the  face  of  stiff  competi¬ 
tion  in  the  IP  VPN  services 
market. 

6  LANOesk  releases  a  suite 
intended  to  make  hardware 
upgrades  easier. 

8  Event'driven  architecture 

will  be  the  next  big  thing  after 
Web  services,  says  Gartner. 

10  One-third  of  business  execs 

polled  say  they’re  dissatisfied 
with  the  performance  of  their 
IT  departments. 

12  Instant  messaging  security 

problems  prompt  companies 
to  adopt  commercial-grade 
products. 

14  An  Air  Force  logistics  unit 

installs  a  wireless  system 
to  track  spare  parts  and  cut 
repair  times. 

16  Aircraft  makers  turn  to  CRM 
applications  to  boost  sales 
and  improve  customer  service 
capabilities. 

16  Privacy  concerns  about 
federal  data  mining  plans  are 
unwarranted,  say  government 
officials. 


TECHN0L06Y 

28  Wading  Into  IP  Telephony.  A 

hybrid  IP/PBX  approach  lets 
some  companies  ease  into  IP 
telephony  without  taking  an 
expensive  plunge. 

32  Future  Watch:  Computers 
That  Caiole.  Persuasive  tech¬ 
nologies  may  one  day  shape 
users'  attitudes  and  ^havior. 

33  QuickStudy:  Fighting  Spam. 

Software  helps  companies 
keep  up  with  spammers’ 
changing  tactics. 

34  Security  Manager’s  Journal: 
Reserve  Call-up  Hits  IT  Se¬ 
curity  DepartniOTt.  Mathias 
Thurman  struggles  to  keep  IT 
security  humming  after  being 
called  to  active  military  duty. 


MANA6EMENT 


97  TamMiad  bnaoe.  Bud¬ 
get  overruns,  prefect  6ul- 
ores  and  lingering  resent¬ 
ment  over  the  millions  ^ent 
on  Y2!k  are  largely  to  Maine 
for  ITs  credibility  crisis. 

40  Singing  Y6«r  Own 
Prateat.  Internal  marketing 
programs  that  reinforce  ITs 
■  value  can  help  buff  up  your 
department’s  reputation. 


i  QAA:  Got  Over  Yourself.  The 

pervasiveness  of  IT  may  be 
makii^  it  strategicaliy  irrele¬ 
vant.  according  to  Harvard 
Business  Review  editor 
Nicholas  G.  Can;  who  says, 
"IT  management  should, 
ffankly.  become  boring." 
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Automated  to  the  Core 

In  the  Technology  section:  Data  center  automa¬ 
tion  software  can  help  companies  cut  adminis¬ 
trative  costs  and  improve  efficiencies  at  the 
heart  of  the  IT  infrastructure.  But  beware  of 
immature  software.  Page  25 


6  On  the  Mark:  Mark  Hall 

questions  whether  a  success¬ 
ful  ASP  has  really  proved  the 
business  model.  Also,  he  fmds 
a  product  to  help  reduce  false 
positives  from  your  intrusion- 
detection  system. 

20  Patricia  Keefe  takes  excep¬ 
tion  to  Nicholas  G.  Carr's 
claim  in  the  Harvard  Business 
Review  that  IT  doesn’t  matter. 

20  Pimm  Fox  argues  that  IT 
managers  who  don’t  deploy 
physical  security  technolc^es 
don't  have  secure  systems. 

21  Michael  Gartenberg  explains 
why  large  and  small  compa¬ 
nies  should  roll  out  their 
Wi-Fi  networks  differently. 

35  Paul  A.  Strassmann  says  that 
Web  services  will  sound  the 
death  knell  of  monolithic  en¬ 
terprise  systems. 

46  Bart  Perkins  advises  buyers 
to  forget  phrases  like  "world- 
class  support."  Contracts 
must  clearly  define  metrics 
for  supplier  performance  to 
be  measured  fairly. 

56  Frankly  Speaking:  Frank 
Hayes  reviews  the  results  of 
the  recent  ITAA  "2003  IT 
Workforce  Survey"  and  fmds 
the  dark  cloud  surrounded  by 
the  report's  silver  lining. 
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WebatoPriMwSeiNs; 

NfelhayMnSlr? 

E-BUSIMSS:  You've  seen  those  TVuste  and 
BBB  privacy  logos  mi  Web  sites.  Should  you 
get  one,  too?  Cohunnist  fay  Cline  offers  some 
advice.  O  QiMiJnk  98290 

C#Ty|wCaiMaraians 

DEVELOPMENT:  Get  an  overview  of  possible 
type  conversions  In  the  C«  language. 

CKMeklMi  99291 

Hauls  Or  IMng  hnaging 
IbOaiNairAnNtSallwae 

MAC:  In  hb  first  artide  for  Computmworid- 
com,  IT  professional  and  techootogy  writer 
Ryan  Faas  explains  how  to  deploy  copies  of  a 
master  disk  software  image  across  a  large 
number  of  Apple  computers. 
OQMckUnkaieO 

Enhanlaafflie 

WT-  -I  - «  - - - 

IWtrtmnBtnUfpntB 

SECUNfTY:  Federated  identities  bold  the  key 
to  helping  companies  control  growing 
amounts  of  tnformatioa  from  eo^)loyees, 
customers  and  partners,  says  EUll  Malik, 

CTO  at  >K^nreset  Tbdmologies. 
0(WgMMi97S96 


8TOM0E:  The  storage  network  has  come 
into  its  own.  and  more  business  managers 
are  viewing  the  technology  as  a  long-term 
strategic  resource,  according  to  Eric  Bkmda 
at  Saodial  Systems.  Cl  CMiM(S»42 
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Microsoft  Warns  of 
Passport  Flaw 

Mfcnxoft  Corp.  Mid  ft  turned  off 
tttt  piwwofJ  rwo¥WfY  teaturw  kt 
Its  Pmpoil  ynr  autfientlcation 
sv¥iM  iflv  Mns  Moniwd  o(  a 
aaeurity  flaw  that  attaekan  could 
iwi  to  diaii9a  paiawonh>  By 


poraonal  data,  lha  company  said, 
tflcroaolt  added  that  it  would  ra- 
stora  Ac  laalBra  onca  N  fiidshn 
davalopinq  a  fia. 


Nasdaq  Delists  i2; 
Appeal  Planned 

Supply  chain  aoflwara  vandor  Q 
Tachwologlai  Inc,  said  its  stock 
WM  dairtad  by  Nasdaq  Stock 
MmImI  lae.  on  May  9.  few  waaks 
aflw  tho  stock  marhM  wamod 
that  It  piwnad  to  do  so.  The  trad- 
tap  of  B*s  stock  had  bean  haHad 
sinea  March  91.  whan  the  Mas 
campany  tfladotad  that  Kwasba* 
biq  taaastipMBd  by  tha  SacwHiaa 
and  Eschanpa  Conanlialon.  B 
said  •  wM  appaaf  tha  dacWon. 


SEC  Wm^t  Ease 
E-niai  Storage  Rule 

Tha  see  daidad  a  raquaat  by  fl- 
nandal  sardcas  firms  to  niMflfy  a 
rula  that  raqubaa  lham  to  archiva 
atoctradc  documants  on  WORM 
storaga  davlcaa.  which  havt 
"wfito-enca.  raod-many*  capahM- 
NiaaPWekiMt  3799S1.  In  ra- 
sponaa,  tha  SacurfHaa  Induihy 
Aaaedation  sMd  toa  SEC  la  faMng 
to  halp  hfuharaqai  copa  wRh  m 
aipkislDn  in  tha  uaa  of  rmal. 


Sears  Taps  IBM 
Exec  for  IT  Job 

Saan,  Roabuek  and  Co.  named 
Chary!  Murphy  tdea  praaidant  of 
IT  oparMhaie  and  mgbioaring. 
wflh  raaponaMty  ter  tnarmpinfl 
iti  data  cantors,  networks  and 
third-party  aarvica  contracts. 
Murphy.  ^  wN  report  to  CIO 
Mraw  May.  ana  nao  woraao  ai 
BM  sinca  1886.  moat  racantty  as 
Its  prtactpal  Itoson  to  Saiws. 


HP’s  Adaptive’  Strategy 
Faces  Challenging  Market 


Differentiating  plan 
from  those  of  rivals 
key  for  company 


Lawrence  linkens, 

vice  president  of  IT  at 
Consolidated  Edison 
Communications  Inc., 
a  New  York-based  telecommu¬ 
nications  provider,  likes 
Hewlett-Packard  Ca  CEO 
Carly  Fiorina's  vision  for  mak¬ 
ing  IT  responsive  to  changing 
business  needs. 

*'Sbe's  hitting  the  nail  on  the 
bead.**  Linkens  said  of  Fiori¬ 
na’s  plan,  detailed  last  week, 
to  focus  on  •‘adaptive**  tech¬ 
nologies  to  reduce  the  level  of 
IT  effort,  cost  and  risk  associ¬ 
ated  with  corporate  change. 
But  HP  faces  challenges  from 
IBM,  in  particular,  which  has  a 
similar  vision,  he  said. 

‘There  are  two  ways  to  get 
at  the  same  solutkm."  said 
Linkens.  “1  think  they  are  both 
working  toward  that  end.  And 
competition  is  good." 

HP.  which  calls  its  plan  the 
“adaptive  enterprise."  last 


week  waved  its  l-year-old 
union  with  Compaq  Computer 
Corp.  as  evidence  of  its  ability 
to  quickly  adapt  to  change.  As 
a  result  of  the  merger,  the 
combined  firms,  for  instance, 
cut  the  number  of  applications 
running  on  internal  systems 
from  7.000  to  5,000.  Tliat.  to¬ 
gether  with  other  efficiencies, 
reduced  IT  costs  by  S3  billioa 

Fiorina  said  companies, 
whether  re^>0Dding  to  new 
federal  regulations  or  to  com¬ 
petitive  pressures,  need  sim- 
pUTied,  standardized,  modu¬ 
larized  and  integrated  archi¬ 
tectures.  The  framework  HP 
is  building  to  address  those 
needs  will  be  anchored  by  an 
enterprise  architecture  strate¬ 
gy  called  Darwin. 

Other  IT  vendors  are  work¬ 
ing  on  similar  strategies,  and 
differentiating  the  vendors' 
offerings  from  one  another 
will  be  difficult,  said  Paul  Ma¬ 
son.  an  analyst  at  IDC  in 
Framingham.  Mass. 

HP  "can  put  themselves  in  a 
very  strong  position,  and  so 
can  IBM.  (Piously,"  said  Ma¬ 
son.  "So  it’s  going  to  be  a  mat¬ 
ter  of  who  executes  best." 


Wit'i 

A;<  (iil.M.luf.-  HP 


Aside  from  IBM.  Sun  Micro¬ 
systems  Inc.  has  developed  its 
N1  strategy  for  more  dynamic 
enterprise  management,  and 
Electronic  Data  Systems  Corp. 
has  its  "agile  enterprise” 
framework. 

In  an  announcement  last 
week  about  the  ttew  PowerA-^ 
processors  on  its  eServer 
pSeries  line,  IBM  said  it  added 
capadty-on-demaod  functions 
that  allow  companies  to  pay 
for  processing  power  as  they 
need  it 

One  pSeries  user,  Ed  Toben, 
the  CIO  at  New  York-based 


Colgate-Palmolive  Co.,  said 
the  on-demand  feature  "has  a 
lot  of  charm,"  particularly  for 
the  consumer  products  com¬ 
pany.  which  is  growing  and  of¬ 
ten  buys  hardware  in  anticipa¬ 
tion  of  future  needs.  He's  in¬ 
terested  in  IBM's  overall  on- 
demand  strategy,  but  “how 
you  get  there,  how  the  busi¬ 
ness  model  works,  the  pricing 
model . . .  still  need  to  be 
worked  out”  he  said. 

HP  last  week  also  finalized 
a  S3  billion  services  ^reement 
with  Procter  &  Gamble  Ca  in 
Cincinnati.  The  deal  will  af¬ 
fect  2,000  P&G  employees 
who  have  been  managing  the 
company's  FT  infrastructure, 
data  center  operations,  desk¬ 
top  and  other  services  in  48 
countries.  They  will  become 
HP  employees  under  the 
agreement. 

Filippo  Passerini,  P&G's 
global  business  services  offi¬ 
cer.  said  that  although  be  does 
have  a  high-level  understand¬ 
ing  of  HP's  new  enterprise 
plan,  the  decision  to  outsource 
was  based  on  his  company’s 
15-year  relationship  with  HP. 

"I  don't  think  one  can  ever 
bank  on  one  particular  new 
solution  for  a  strategic,  long¬ 
term  decision,"  said  Passerini. 
who  nonetheless  said  he  be¬ 
lieves  that  HFs  enterprise 
strategy  will  add  value  to  the 
relationship.  I 


Step  1:  Mrs  a  ConsuRant,  HP  Exac  Says 
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iMtwNkwflh 

CMpulBr- 

warifsPaM 


cuMdito  coRipiny's  antarprise 
sMnv.  bcarpls  Mow; 


v.avice 


Nona,  par  an.  ThM's  one  fltoraett 
N*infl.(bul]*M'$abmadBr 
viaw  tial  you  nead  to  cornact 
buamaaa  wNh  fT.  VHhan  you  tail 
flixwlapmfMrdMreandaolt- 
wm  vandv.  flat  la  mora  of  a 
risk  to  you  than  I  you  are  a  brood 
vandonaftohaBaalrongaar- 
Noas  mwMIyand  can  baaicaly 
be  toe  prcMte  of  that  aouRing 
aoiullan  cMad  uMly  aantoes. 
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your  abMy  to  respond  to  donoBs: 
how  quicMy  you  can  retotond, 
how  mich  I  costs  to  re^XNid 
and  wfat  aM  aelB  you  to 
respond  to  change.  So  M  us 
oorne  in  end  do  an  aaaaawnent 
«Mi  you.  Ifs  an  Invesbneni  of 
S2Si,000.  piolli  you 

cunani  anvborwnant;  wa  «i  help 
you  idartofy  whaai  you  «wak- 
neaaas  and  strangtos  aia. 
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we  balM  are  MgNy  pngrabc  in 
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waid  an  adaptre  arflsmM?  The. 
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doni  go  K  smooth  li  you  winL 
Wa're  aodng  Bong  podtoia 
faadbaok  to  lha  new  parinar 
reodd  tod  wt  Nmo  pd  In  ptooa. 
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Feds,  Health  Insurers  Focus 
On  Sharing  Bkrterror  Data 


Plan  mock  terrorist  attacks  to  evaluate 
medical  community’s  preparedness 


The  Department  of  Homeland 
Security  today  plans  to  begin  a 
five-day  exercise  to  test  gov¬ 
ernment  and  private-sector  in¬ 
formation-sharing  in  response 
to  mock  terrorist  attacks  in¬ 
volving  weapons  of  mass  de¬ 
struction. 

The  White  House  is  billing 
the  exercise,  called  TopOff  2 
(for  Top  Officials  2),  as  the 
most  comprehensive  terror¬ 
ism-response  exercise  ever 
undert^n  in  the  US.  It  will 
include  19  federal  agencies, 
the  American  Red  Cross,  and 
officials  from  Washington,  Illi¬ 
nois,  the  District  of  Columbia 
and  Canada.  The  scenario  will 
consist  of  near-simultaneous 
mock  attacks  involving  a  radi- 
ologica]  device  in  Seattle  and 
the  covert  release  of  a  biologi¬ 
cal  agent  in  Chicaga 

A  key  aspect  of  the  exercise 
will  be  the  ability  of  state  and 
local  officials  in  the  U.S.  and 
Canada  to  identify  medical  pa¬ 
tients  complaining  of  symp¬ 
toms  that  indicate  exposure  to 
a  biolt^cal  agent  and  to  com¬ 
municate  that  information  in  a 
timely  manner  to  other  federal 
and  state  officials. 

The  exercise  comes  as  the 
US.  health  insurance  industry 
nears  the  completion  of  a  pilot 
project  that  aims  to  create  a 
nationwide  data  mining,  sur¬ 
veillance  and  information¬ 
sharing  system  for  the  type  of 
region^  health  crisis  envi¬ 
sioned  in  TopOff  2. 

Relying  on  a  mix  of  private 
funding  and  a  $1.2  million 
grant  fix»m  the  Atlanta-based 
Centers  for  Disease  Control 
and  Prevention,  four  member 
organizations  of  the  American 
Association  of  Health  Plans 
(AAHP)  are  testing  a  national 
bioterrorism  syndromic  sur¬ 
veillance  system  that  uses 
real-time  data  collected  from 


more  than  20  million  people 
in  all  SO  states.  The  primary 
goal  of  the  prc^ram  is  to  “de¬ 
velop  and  implement  stan¬ 
dards.  protocols,  infrastruc¬ 
ture  and  analytic  tools  for  de¬ 
tecting  and  reporting  unusual 
geographic  clusters  of  symp¬ 
toms  or  complaints”  of  acme 
illness  chat  might  indicate  that 
a  covert  bioterrorism  attack 
has  taken  place,  said  AAHP 
President  and  CEO  Karen  Ig- 
nagni,  during  a  May  5  House 
of  Representatives  hearing. 

Dr.  Jim  Norton,  program 
manager  at  project  participant 
HealthParcners  Inc,  said  his 
Bloomington,  Minn.,  organiza¬ 
tion's  mainframe-based  re¬ 


search  dat^»$e  wasn't  timely 
enough  to  meet  the  24-hour 
reporting  requirement  of  the 
surveillance  system.  As  a  re¬ 
sult.  a  significant  amount  of 
programming  was  required  to 
pull  the  data  out  of  the  med¬ 
ical  operations  mainframe,  put 
it  into  a  standard  file  format, 
strip  out  all  personally  identi¬ 
fying  infonnatioo  and  assign 


geographic  and  demographic 
codes  10  each  patient. 

TYansmitting  the  data  to  the 
central  server  operated  by 
Harvard  Pilgrim  Health  Care 
Inc.  in  Wellesley,  Mass.,  re¬ 
mains  a  36'hour  manual 
process,  he  said  Once  fully 
automated,  reporting  will  oc¬ 
cur  every  24-hours.  Pattern- 
recognition  software  and 
trend  analysis  are  also  still 
works  in  progress,  said  Nor¬ 
ton.  Some  algorithms  have 
been  developed,  but  officials 
aren't  satisfied  with  how  they 
handle  geographic  analysis  of 
outbreaks. 


Debra  Ritzwoller.  clinical 
research  investigator  at  Kaiser 
Pennanente  Colorado  in  Den¬ 
ver.  said  daily  encounters  with 
patients  are  scanr»ed  for  a  set 
of  700  diagnosis  codes.  That 
data  is  then  grouped  into  syn¬ 
dromes  and  further  classified 
by  age.  sex  and  ZIP  code. 

"We  expect  to  be  able  to 
pick  up  something  two  or 
three  days  sooner  with  this 
system  than  you  would  by 
waiting  for  people  to  come 
into  cmergenc)’  rooms,"  said 
Norton.  That  will  be  critical 
to  preventing  the  spread  of 
these  diseases."  I 


Bioterror  Surveillance  at  Kaiser  Permanente 


AT&T  Speeds  Up  Global 
Rollout  of  IP  VPW  Services 

Carrier  establishes  consulting  team, 
plans  netwoik  links  in  50-plus  countries 


6V  MATT  HAMBLCN 

AT&T  Corp.  last  week  out¬ 
lined  plans  to  expand  its  IP 
virtual  private  netwoik  (VPN) 
services  globally,  partly  by  ac¬ 
celerating  an  ongoing  installa¬ 
tion  of  technology  based  on 
the  Multiprotocol  Label 
Switching  (MPLS)  standard. 

AT&T  is  speeding  up  a  roll¬ 
out  of  150  MPLS-based  net¬ 
work  points  of  presence  in 
more  than  SO  countries  this 
year,  said  Mike  Jenner.  the 
company's  vice  president  of 
globd  IP  network  services.  In 
addition,  AT&T  has  formed  a 
500-person  VPN  integration 
consulting  team  and  has  made 
it  possible  for  customers  to  or¬ 
der  VPN  setups  and  other 
managed  Internet  services 
electronically.  Jenner  said. 

The  move  comes  as  AT&T 
readies  itself  for  a  market- 


share  battle  with  Baby  Bell 
companies  and  ocher  network 
service  providers  that  offer  IP 
VPN  capabilities,  said  Vtjay 
Bhagavath.  an  analyst  at  For¬ 
rester  Research  Inc.  in  Cam¬ 
bridge,  Mass. 

"Everybody  and  bis  mother 


What  to 
Ask  Youfselt 


source  f  owiAw  wwiutcw  i 


has  an  IP  VPN  service."  Bha¬ 
gavath  said.  As  a  result,  AT&T 
is  trying  to  show  that  it  has 
the  broadest  global  reach  and 
the  most  advanced  VPN  func¬ 
tionality.  he  explained.  VPN 
offerings  that  make  use  of 
MPLS  could  provide  users 
with  greater  scalability  and 
better  traffic  management  ca¬ 
pabilities  than  other  ap¬ 
proaches  do.  Bhagavath  said. 

Coverage  Considerations 

Antonio  Lopez,  marketing  di¬ 
rector  at  HTT  Rail  BV  in 
Utrecht.  Netherlands,  said  his 
company  in  February  went 
live  with  AT&Ts  IP  VPN  ser¬ 
vice  to  connect  26  data  centers 
in  15  European  countries. 

“We  picked  AT&T  because 
of  the  network  coverage  they 
have  in  Europe,"  Lopez  said 
"Other  carriers  in  Europe 
don't  cover  as  much  area  as 
AT&T,  even  though  they  claim 
they  do.  We  did  a  carefiit 
study." 

HIT  Rail  is  jointly  owned  by 
15  railway  companies  and 
manages  IT  projects  for  them. 
The  IP  VPN  replaced  a  private 
network  based  on  the  XJS 


I  protocol  and  is  expeaed  to 
produce  annual  savings  of 
30%.  Lt^z  said.  He  wouldn't 
disclose  the  cost  of  AT&Ts 
service. 

Jenner  said  AT&T  will  make 
it  a  priority  to  provide  im¬ 
proved  VPN  pros'isionmg  ser¬ 
vices.  The  company  and  its  ri¬ 
vals  have  faced  criticism  ffom 
large  users  regarding  their 
provisioning  capabilities.  "In 
general,  customers  voice  dis¬ 
satisfies  even  with  AT&T 
...  on  provisioning."  Jenner 
said 

Telecommunications  carri¬ 
ers  like  AT&T  need  to  become 
more  knowledge^te  about 
business  applications  and  oth¬ 
er  technologies.  Bhagavath 
said  "They  are  very  telecom- 
sawy.  but  they  have  to  train 
their  people  more  on  CRM,  IP 
and  Oracle  databases,  for  ex¬ 
ample,"  he  said 

Another  thing  IP  VPN  cus¬ 
tomers  should  fhonitor  is  bow 
well  carriers  work  with 
providers  of  last-mile  commu¬ 
nications  services,  because 
that's  where  the  majority  of 
network  service  outages  oc¬ 
cur,  Bhagavath  added  I 
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Microsoft  Warns  of 
Passport  Flaw 

Microsoft  Corp.  said  it  turned  off 
the  password-recovery  feature  in 
its  Passport  user  authentication 
service  after  being  informed  of  a 
security  flaw  that  attackers  could 
use  to  change  passwords.  By 
doing  so.  attackers  could  access 
credit  card  numbers  and  other 
persoital  data,  the  company  said. 
Microsoft  added  that  H  would  re¬ 
store  the  feature  once  it  firushes 
developing  a  fix. 


Nasdaq  Delists  i2; 
Appeal  Planned 

Supply  chain  software  vendor  i2 
Technologies  Inc.  said  its  stock 
was  delisted  by  Nasdaq  Stock 
Market  Inc.  on  May  9,  four  weeks 
after  die  stock  market  warned 
that  it  planned  to  do  so.  The  trad¬ 
ing  of  iZi  stock  had  been  hatted 
since  March  91.  when  the  OaUas 
company  disdosed  that  it  was  be¬ 
ing  investigated  by  the  Securities 
and  Exchange  Commission.  12 
said  H  wil  appeaJ  the  decision. 


SEC  Wbn’t  Ease 
E-mail  Storage  Rule 

The  SEC  denied  a  request  by  fi¬ 
nancial  services  firms  to  modify  a 
rule  that  requires  them  to  archive 
electronic  documents  on  WORM 
storage  devicas,  which  have 
NTrlte-once.  read-many”  capabil' 
ities  {QufekUnk  37536}.  In  re¬ 
sponse,  the  Securities  Industry 
Association  said  the  SEC  is  failing 
to  help  brokerages  cope  with  an 
explosion  in  the  use  of  e-mail. 


Sears  Taps  IBM 
Exec  for  IT  Job 

Sears,  Roebuck  and  Ca  named 
Cheryl  Murphy  vice  president  of 
IT  operations  and  engineering, 
with  responsfbiltv  for  managing 
Hs  data  centers,  networks  a^ 
third-party  service  contracts. 
Murphy,  46.  wil  report  to  CX) 
Oerald  KeNy.  She  had  worked  at 
IBM  since  1996.  most  recently  as 
its  prindpai  Kaison  to  Sears. 


HP’s  Adaptive’  Strategy 
Faces  Ch^lenging  Market 


Difl'ca'iitiating  plan 
fn)ni  tlioso  nf  ri\als 
kc\'  for  a)mpan\’ 

BV  PATRICK  THIBODEAU 

SAN  .>OBr 

L.^URtNt  h  IlNKtNS 

vice  prc-sidcnt  of  ff  at 
ConstdidatCil  Edison 
Communications  Inc.. 
.1  New  York-based  telecommu¬ 
nications  provider,  likes 
Hewlcii-Packard  Co.  CEO 
early  Fiorina's  vision  for  mak¬ 
ing  IT  responsive  to  changing 
business  needs. 

“.She's  hitting  the  nail  on  the 
head,”  Linkens  said  of  Fiori¬ 
na's  plan,  detailed  last  week, 
to  focus  on  "adaptive"  tech- 
nolt^es  to  reduce  the  level  of 
IT  effort,  cost  and  risk  associ¬ 
ated  with  corporate  change. 
But  HP  faces  challenge's  from 
IBM.  in  particular,  which  has  a 
similar  vision,  he  said. 

"There  arc  two  ways  to  gel 
at  the  same  solution.”  .said 
Linkens.  “1  think  they  arc  both 
working  toward  that  end.  And 
competition  is  good.” 

HP.  which  calls  its  plan  the 
“adaptive  enterprise."  last 


In  vt  interview 
last  week  with 
Compulef- 
world's  Rainch 
Thibodeau, 
duergin 
RoWer.avice 
president  in 
Iff’s  services 
division,  dis¬ 
cussed  Ihe  compaty's  enterprise 
strategy.  Excerpts  follow; 

Your  mefor  compitHors  are 
•bo  trying  te  persuade  users 
to  go  to  an  on-damand  modal. 
Does  that  maka  R  hardar  to 
diffarantiate  HP  in  tha  mar- 
kotYOurannouncemertt  today 
isn't  about  utility  computstg 


week  waved  its  1-year-old 
union  with  Compaq  Computer 
(Yirp.  .TS  evidence  of  its  ability 
to  quickly  adapt  to  change.  As 
a  result  of  the  merger,  the 
combined  firms,  for  instance, 
cut  the  number  of  applications 
running  on  internal  sy’stems 
from  7,000  to  .^000.  That,  to¬ 
gether  with  other  efficiencies, 
reduced  IT  costs  by  S3  billion. 

Eiorina  said  companies, 
whether  resptmding  to  new 
federal  regulations  or  to  com¬ 
petitive  pressures,  need  sim¬ 
plified.  standardized,  modu¬ 
larized  and  integrated  archi¬ 
tectures.  TTie  framew'ork  HP 
is  building  to  address  those 
needs  will  be  anchored  by  an 
enterprise  .architecture  strate¬ 
gy  called  Darw’in. 

Other  rr  vendors  are  work¬ 
ing  on  similar  strategies,  and 
difTcreniiating  the  vendors' 
offerings  from  one  another 
will  be  difficult,  said  Paul  Ma¬ 
son.  an  analyst  at  IDC  in 
Framingham.  Mass. 

HP  “can  pul  themselves  in  a 
very  strong  position,  and  so 
can  IBM.  obviously."  said  Ma¬ 
son.  "So  it's  going  to  be  a  mat¬ 
ter  of  who  executes  best." 


alone,  per  se.  That's  one  elemeni 
within  It.  [but  ]  there's  a  broader 
view  that  you  need  to  connect 
business  with  IT.  When  you  talk 
about  a  pure  hardware  and  soft¬ 
ware  vendor,  that  is  more  of  a 
nsk  to  you  than  if  you  are  a  broad 
vendor  who  has  a  strong  ser¬ 
vices  capability  and  can  basically 
be  the  provider  of  that  sourcing 
solution  called  utility  services. 

What's  tha  first  step  a  com¬ 
pany  shodd  tMie  in  adopting 
tha  on-damand  model?  The 

first  thing  we  tel)  customers  is 
not  to  immediately  jump  to  tech¬ 
nology.  What  you  want  to  under¬ 
stand  before  you  invest  in  any¬ 
thing  is  your  business  agility  - 


With  its  Darwin  Relerence 
Architecture,  HP 


Aside  from  IBM.  Sun  Micro¬ 
systems  Inc.  has  developed  its 
Nl  strategy  for  more  dynamic 
enterprise  management,  and 
Electronic  Data  Systems  Corp. 
has  its  "agile  enterprise" 
framework. 

In  an  announcement  last 
week  about  the  new  Power4‘ 
pitKCSSors  on  its  cServer 
pScrics  line.  IBM  said  it  added 
capacity-on-demand  functions 
that  allow  companies  to  pay 
for  processing  power  as  they 
need  it. 

One  pSeries  user.  Ed  Toben. 
the  CIO  at  New  York-based 


your  abdity  to  respond  to  changes: 
how  quiddy  you  can  re^nd, 
how  much  it  costs  to  respond 
and  what  skill  sets  you  need  to 
respond  to  change.  So  let  us 
come  in  and  do  an  assessment 
widt  you.  it's  an  investment  of 
S25.000.  We  will  proIHe  your 
current  environment:  we  will  help 
you  identify  where  you  weak¬ 
nesses  and  strengths  are. 

Must  companies  that  adopt 
your  adaptlva  anterprisa 
strategy  also  use  HP  serv¬ 
ices?  Areyoulockedintoout- 
sourcing  to  HP  services?  No. 
Have  we  created  intelectual 
property  and  methodologies  that 
we  believe  are  highly  pragmatic  in 
terms  of  helping  you  move  to* 
vmrd  an  adaptive  enterprise?  Vbs. 


Step  1:  Hire  a  ConsuHant,  HP  Exec  Says 


Colgate-Palmolive  Co.,  said 
(he  on-demand  feaiure  "has  a 
lot  of  charm."  particularly  for 
the  consumer  products  com¬ 
pany,  which  is  growing  and  of¬ 
ten  buys  hardware  in  anticipa¬ 
tion  of  future  needs.  He's  in¬ 
terested  in  IBM's  overall  on- 
dcm.Tnd  strategy,  but  "how 
you  gel  there,  how  the  busi¬ 
ness  model  works,  the  pricing 
model . . .  still  need  to  be 
worked  out,"  he  said. 

HP  last  week  also  finalized 
a  S3  billion  serx’ices  agreement 
with  Pn,Ktcr  &  Gamble  Co.  in 
Cincinnati  The  deal  will  af¬ 
fect  2.000  P&G  employees 
who  have  been  managing  the 
company's  IT  infrastructure, 
data  center  operations,  desk¬ 
top  and  other  services  in  48 
countries.  They  will  become 
HP  employees  under  the 
agreement. 

Filippo  Passerini.  P&G’s 
global  business  services  offi¬ 
cer.  said  that  although  he  does 
have  a  high-level  understand¬ 
ing  of  HP’s  new  enterprise 
plan,  the  decision  to  outsource 
was  based  on  his  company’s 
15-year  relationship  with  HP. 

“I  don't  think  one  can  ever 
bank  on  one  particular  new 
solution  for  a  strategic,  long¬ 
term  decision."  said  Passerini. 
who  nonetheless  said  he  be¬ 
lieves  that  HP’s  enterprise 
strategy  will  add  value  to  the 
relationship.  I 


Sinca  tha  margar  with  Com¬ 
paq,  hat  HP  had  dHfleufty 
raachkig  all  of  fti  customers 
to  explain  Hs  strategy? 
Customers  are  very  engaged  in 
driving  us  In  this  direction.  Ws 
have  done  a  very  good  job  reach¬ 
ing  out  to  our  largest  customers 
The  results  that  we're  getting 
from  our  midsize  customers  are 
actually  quite  good  as  wen.  but 
they  are  directly  tied  to  the  on¬ 
going  sales  coverage  -  either 
through  HP  or  through  our  part¬ 
ners.  We  have  revamped  a  lot  of 
our  partnership  programs,  so 
whenever  you  revamp  programs, 
you  win  find  periods  where  things 
don't  go  as  smooth  as  you  want. 
We’re  seeing  strong  pc^ive 
feedback  to  the  new  partner 
modd  tha!  we  have  put  in  place. 
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Feds,  Health  Insurers  Focus 
On  Sharing  Bioterror  Data 


Plan  nuKk  terrorist  attacks  to  exaluate 
medical  communin  ’s  preparedness 


The  Department  of  Homeland 
Security  today  plans  to  begin  a 
five-day  exercise  to  test  gov¬ 
ernment  and  private-sector  in- 
formation-sharing  in  response 
to  mock  terrorist  attacks  in¬ 
volving  weapons  of  mass  de¬ 
struction. 

The  White  House  is  billing 
the  exercise,  called  TopOff  2 
(for  Top  Officials  2).  as  the 
most  comprehensive  terror¬ 
ism-response  exercise  ever 
undertaken  in  the  U.S.  It  will 
include  19  federal  agencies, 
the  American  Red  Cross,  and 
officials  from  Washington.  Illi¬ 
nois.  the  District  of  Columbia 
and  Canada.  The  scenario  will 
consist  of  near-simultaneous 
mock  attacks  involving  a  radi¬ 
ological  device  in  Seattle  and 
the  covert  release  of  a  biolc^i- 
cal  agent  in  Chicago. 

A  key  aspect  of  the  exercise 
will  be  the  ability  of  state  and 
local  officials  in  the  U.S.  and 
Canada  to  identify  medical  pa¬ 
tients  complaining  of  symp¬ 
toms  that  indicate  exposure  to 
a  biological  agent  and  to  com¬ 
municate  that  information  in  a 
timely  manner  to  other  federal 
and  state  officials. 

The  exercise  comes  as  the 
U.S.  health  insurance  industry 
nears  the  completion  of  a  pilot 
project  that  aims  to  create  a 
nationwide  data  mining,  sur¬ 
veillance  and  information¬ 
sharing  system  for  (he  type  of 
regional  health  crisis  envi¬ 
sioned  in  TopOff  2. 

Relying  on  a  mix  of  private 
funding  and  a  S1.2  million 
grant  from  the  Atlanta-based 
Centers  for  Disease  Control 
and  Prevention,  four  member 
organizations  of  the  American 
Association  of  Health  Plans 
( AAHP)  are  testing  a  national 
bioterrorism  syndromic  sur¬ 
veillance  system  that  uses 
real-time  data  collected  from 


more  than  20  million  people 
in  all  50  states.  The  primar>' 
goal  of  the  program  is  to  "de¬ 
velop  and  implement  stan¬ 
dards.  protocols,  infrastruc¬ 
ture  and  analytic  tools  for  de¬ 
tecting  and  reporting  unusual 
geographic  clusters  of  symp¬ 
toms  or  complaints”  of  acute 
illness  that  might  indicate  that 
a  covert  bioterrorism  attack 
has  taken  place,  said  AAHP 
President  and  CEO  Karen  Ig- 
nagni.  during  a  May  5  House 
of  Representatives  hearing. 

Dr.  Jim  Norton,  program 
manager  at  project  participant 
HealthPartners  Inc.,  said  his 
Bloomington,  Minn.,  organiza¬ 
tion’s  mainframe-based  re¬ 


search  database  wasn’t  timely 
enough  to  meet  the  24-hour 
reporting  requirement  of  the 
surveillance  system.  As  a  re¬ 
sult.  a  significant  amount  of 
programming  was  required  to 
pull  the  data  out  of  the  med¬ 
ical  operations  mainframe,  put 
it  into  a  standard  file  format, 
strip  our  all  personally  identi¬ 
fying  information  and  assign 


geographic  and  demographic 
cihles  each  patient. 

Transmitting  the  data  tt>  the 
central  server  operated  by 
Harvard  Pilgrim  Health  Cl.ire 
Inc.  in  Wellesley.  Mass.,  re¬ 
mains  a  .V)-h(tur  manual 
proce.ss.  he  said.  Dnce  fully 
automated,  reporting  will  iv 
cur  every  24-hours.  I*atiem- 
recognition  software  .inJ 
trend  analysis  are  also  still 
works  in  progress,  said  Nor¬ 
ton.  Some  algorithms  have 
bc'cn  developed,  but  oifieiaN 
aren't  satisfied  with  how  they 
handle  geographic  .analysis  of 
outbreaks. 


Debra  Rn/woller.  clinical 
research  invesugaior  at  Kaiser 
iVrmanente  i.nloraJo  in  Den¬ 
ver.  said  daily  encounters  w  ith 
p.uients  are  scanned  for  a  h‘( 
ol  TOO  diagnosis  codes  Th.ii 
data  is  then  grouped  ini««  ss  n 
dromes  .and  funher  cl.issifii'd 
by  age.  sex  and  /IP  code. 

■'We  expect  to  be  able  to 
pick  up  something  two  or 
three  days  sminer  w  ith  this 
system  than  you  would  by 
waiting  for  people  to  come 
into  emergency  riKims."  said 
Norton  "Thai  will  be  critical 
to  preventing  the  spread  of 
these  diseases."  I 


Bioterror  Surveillance  at  Kaiser  Permanente 
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AT&T  Speeds  Up  Global 
Rollout  of  IP  VPN  Services 

(iirrier  establishes  consulting  team, 
plans  neri\  ork  links  in  50-plus  countries 


BY  MATT  HAMBCEN 

AT&T  Cxirp.  last  week  out¬ 
lined  plans  to  expand  its  IP 
virtual  private  network  (VPN) 
services  globally,  partly  by  ac¬ 
celerating  an  ongoing  installa¬ 
tion  of  technology  based  on 
the  Multiprotocol  Label 
Switching  (MPLS)  standard. 

AT&T  is  speeding  up  a  roll¬ 
out  of  150  MPLS-based  net¬ 
work  points  of  presence  in 
more  than  50  countries  this 
year,  said  Mike  Jenner.  the 
company's  vice  president  of 
global  IP  network  services.  In 
addition.  AT&T  has  formed  a 
500-person  VPN  integration 
consulting  team  and  has  made 
it  possible  for  customers  to  or¬ 
der  VPN  setups  and  other 
managed  Internet  services 
electronically,  Jenner  said. 

TTie  move  comes  as  AT&T 
readies  itself  for  a  maricet- 


share  banle  with  Baby  Bel! 
companies  and  other  network 
service  providers  that  offer  IP 
VPN  capabilities,  said  Vijay 
Bhagavath.  an  analyst  at  For¬ 
rester  Research  Inc.  in  Cam¬ 
bridge,  Mass. 

"Everybody  and  his  piother 


What  to 
Ask  Yourself 


30ij»ce 


has  an  IP  VPN  service."  Bha¬ 
gavath  said.  As  a  result.  AT&T 
is  trying  to  show  that  it  has 
the  broadest  global  reach  and 
the  most  advanced  VPN  func¬ 
tionality.  he  explained.  VPN 
offerings  that  make  use  of 
MPLS  could  provide  users 
with  greater  scalability  and 
better  traffic  management  ca¬ 
pabilities  than  other  ap- 
pniachcs  do.  Bhagavath  said. 

Coverage  Considerations 

Antonio  Lopez,  marketing  di¬ 
rector  at  HIT  Rail  BV  in 
Utrecht.  Nethcriands.  said  his 
ct>ropany  in  February  went 
live  with  AT&Ts  IP  VPN  ser¬ 
vice  to  connect  26  data  centers 
in  15  European  countries. 

"We  picked  AT&T  because 
of  (he  network  coverage  they 
have  in  Europe.”  Lopez  said. 
"Other  carriers  in  Europe 
don’t  cover  as  much  area  as 
AT&T,  even  (hough  they  cbim 
they  do.  We  did  a  careful 
study.” 

HIT  Rail  is  joiruly  owned  by 
15  railway  companies  and 
manages  IT  projects  for  them. 
The  IP  VPN  replaced  a  private 
network  based  on  the  X.25 


proiiKul  and  is  expected  to 
prt^uce  annual  savings  of 
.WSr.  Lopez  said.  He  wouldn't 
disclose  the  cost  of  AT&Ts 
serx'icc. 

tenner  said  AT&T  will  make 
it  a  priority  to  provide  im¬ 
proved  VPN  pnwisiuning  ser¬ 
vices.  The  ci>mpany  and  its  ri¬ 
vals  have  faced  criticism  from 
large  users  regarding  their 
provisioning  capabilities.  "In 
general,  customers  voice  dis¬ 
satisfaction  even  with  AT&T 
...  on  provi.sioning.”  Jenner 
said. 

Teiccommumcations  carri¬ 
ers  like  AT&T  need  to  become 
more  knowledgeable  about 
business  applications  and  oth¬ 
er  technologies.  Bhagavath 
said.  “They  are  very  telecom- 
savvy,  but  they  have  to  train 
their  people  moa*  on  CRM.  IP 
and  Oracle  databa.ses.  for  ex¬ 
ample.”  he  said. 

Another  thing  IP  VPN  cus¬ 
tomers  should  monitor  is  how- 
well  carriers  work  with 
pnwiders  of  last-mile  commu¬ 
nications  services,  because 
that’s  where  the  majority  of 
network  service  outages  oc¬ 
cur.  Bhagavath  added.  I 
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MARK  HA!  I  ■  ON  THE  MARK 

ASP  Turns  Financial 
Comer  and  Proves . . . 

. . .  the  business  model,  brags  John  Ottman.  executive  vice  president  of 
I  worldwide  markets  at  Corio  Inc.  Maybe,  maybe  not.  Ottman  says  the  San 
Carlos,  Calif.-based  application  service  provider  (ASP)  had  66%  rev- 
j  enue  growth  in  the  recent  quarter  over  the  same  period  last  year  and 
I  was  profitable  ’  although  it  used  the  popular  dot*cofn  EBITDA  method  of 
adding  revenue  dollars  and  cents  without  subtracting  all  of  the  com¬ 
pany’s  real-world  expenses.  Still,  it’s  a  good  start.  It’s  especially  good 
!  when  you  consider  that  although  Corio  has  only  100  customers,  the 


siimt*  a.s  ii  did  aK>ut  three  years  these 
d.iys  precious  few  are  doi-bombers.  Most 
of  the  new  customers  arc  outfits  we've 
heard  of.  like  American  Express.  ITizer 
I  and  the  U.S.  Coast  Guard.  The  ASP's 
users  also  include  Carlson  Companies, 
one  of  the  largest  private  companies  in 
the  Lfit..  which  counts  Radisson  Hotels 
and  TGI  Friday's  resiauranis  amun^  its 
holdings.  Hut  when  CIO  Stephen  Brown 
explain-H  why  Corio  is 
gm>d  for  his  company,  it 
doesn't,  as  Omnan  would 
have  it.  “prove  the  busi¬ 
ness  model."  Rather,  it 
pros’cs  that  Corio  is  will- 
^  ing  to  flex  its  business 
^  model  to  gel  and  keep 
customers.  According  to 
Brown.  Carbon  doesn't  use 
Corio's  data  center  to  host 
its  applications  —  which 
the  classic  ASP  business 
mi>dcl  would  require.  In¬ 
stead.  it  exploits  Corio's 
expertise,  leveraging  the 
ASP's  technology  until  it 


can  train  it.s  own  IT  staff  on  how  to  run 
the  software.  Carlson  then  co-locatcs  the 
servers  in  its  own  data  center  in  its  Min¬ 
neapolis  headquarters.  Furthermore, 
even  Ottman  acknowledges  that  the  tra¬ 
ditional  ASP  model  of  demanding  that 
users  stick  to  C(M>kie-euttcr  versions  of 
an  application  is  out  the  window.  For  ex¬ 
ample.  Brou'n  wouldn't  have  accepted  his 
PeopleSofi  application  from  Corio  with¬ 
out  substantial  rework 
for  Carlson’s  needs.  “Wc 
wanted  to  share  in  host¬ 
ing  and  customization  so 
we  would  have  the  skill 
sets  from  a  proces.s  m.in- 
agement  point  of  view,*' 
he  says.  Where  the  clas¬ 
sic  ASP  model  docs  work 
well.  Brown  bclicve.v  arc 
cases  in  which  his  ctim- 
pany  needs  to  “get  re¬ 
sources  by  the  drink" 
from  Corio.  such  as  an 
extra  server  to  handle 
bigger  loads.  •  Next 
month  Corio  will  be 


serving  up  another  drink  to  its  customers; 
a  new  single-sign-on  service  with  an  identity 
management  system.  Users  who  wander 
from  their  computers  for  too  long  will  be 
logged  off  all  their  open  apps.  Hut  the  sin¬ 
gle  sign-on  will  dull  that  pain.  Prosit.  • 
Monitoring  application  licenses  can  be  as 
tough  as  keeping  tabs  on  users'  access  to 
them.  LANDesk  Software  Inc.  in  South 
Jordan.  Utah,  has  for  years  been  helping 
IT  shops  comply  with  software  licenses, 
as  well  as  manage  the  deployment  of  .soft¬ 
ware  .icross  the  network,  with  its  LAN- 
Desk  Management  Suite.  Following  to¬ 
day's  announcerpent  (sec  below).  Version 
7  will  hit  the  streets  May  IS  with  support 
for  Mac  OS  X  clients  and  servers.  With  it.s 
profile-migration  capabitiiies,  applica¬ 
tion  settings  for  the  latest  versions  of  Mi¬ 
crosoft  Office.  Outlook  and  Internet  Ex¬ 
plorer  will  be  maintained  in  Version  7. 
Lotus  Notes  profile  migration  will  come 
in  July.  •  Now  that  you're  in  license  com¬ 
pliance  for  all  your  software,  it's  time  to 
assure  that  you're  in  poScy  compGance  with 
regulations  sudi  as  HIRAA.  One  of  the  first 
out  of  the  gate  for  thiit  will  be  SecurityPro- 
filing  Inc.  in  Lafayette.  Ind.  CI'O  Brett 
Oliphant  says  you  can  expect  the  compa¬ 
ny's  Policy  Compliance  product  sometime 
this  summer.  SecurityProfiling  plans  to 
.ship  Version  2  of  its  Intelligent  IDS  next 
month.  Oliphant  claims  that  intrusion- 
detection  systems  (IDS)  often  identify  up 
to  90%  false  positives,  making  these  security 
packages  essentiaiy  useless,  since  systems 
administrators  cease  taking  the  tools  seri¬ 
ously.  The  new  release,  which  will  feature 
•an  improved  user  interface  management 
con.soIc.  will  sort  through  every  suspect 
packet  using  Snort,  an  open-source  IDS. 
and  compare  those  packets  against  your 
application  portfolio.  At  least  then  yi>u 
can  ciiminacc  all  those  potential  breaches 
of  no  consequence  to  your  network  and 
maybe  take  your  IDS  seriously  for  once.  I 


NtJil  month. 

in  San  Lcandrij.  Cahl.  <v<ll  an 
nounce  it5  Pi  Se'wi-f  3.4  rc-al- 
time  0ata0-i5P,  which  collects 
infnrmaiKvi  nr  evneyttvot]  t'  om 
piocess  cnntroi  devices  m 
manufaclunncj  to  »fnit<jro  .inrl 
servers  on  your  network  The 
new  vflfSinn  wll  be  able  to  qutp 
down  data  on  more  than  1.7  mil¬ 
lion  filemonis  you  may  caro  to 
monitoi  -  up  lri>m  200  000  el¬ 
ements  in  the  current  release 


LANDesk  Eases  Hardware  Upgrade  Pains 


Microsoft,  HP 
Demo  PC  Prototype 

At  the  Windows  Hardware 
Engineering  Conference  last 
week  m  New  Orieans,  Microsoft 
Corp.  and  Hewlett-Packard  Co. 
demonstrated  a  prototype  desk¬ 
top  PC  that  included  a  23-inch 
flat-panel  display  and  buiH-in 
wireless  telephony  capabilities. 
HP  said  the  PC.  code-named 
Athens,  could  be  ready  as  sarfy 
as  nest  year. 


(^  Team  Wins 
Royal  Maii  Pact 

A  Isam  of  IT  services  firms  led 
by  Computer  Sciences  Corp. 
(CSC)  sjud  they  have  signed  a 
tO-year.  S2.4  billion  outsourcing 
contract  with  Royal  Mail  Group 
PLC.  the  U.R.  government's  mail 
defimy  company.  CSCTs  part¬ 
ners  are  BT  Group  PLC  in  Lon¬ 
don  and  Xarsa  PLC  in  Hemet 
Hempstead,  England.  About 
t735  Royal  Mad  IT  staffers  will 
be  transferred  to  the  vendors, 
with  nearfy  BS%  of  them  shitting 
to  El  Segundo.  (^. -based  CSC. 


Cisco’s  Profit  Up, 
But  Sales  Down 

Cisco  Systems  Inc.  reported  a 
$987  ndMoo  profit  for  its  third 
quarter,  which  ended  A|vii  26.  ft 
was  up  35%  from  $729  million 
a  ysar  ago,  but  revenue  dipped 
4%  from  $4.8  bMlon  to  $4.6  bil¬ 
lion.  Cisco  CEO  John  Oiambers 
predicted  a  similar  revenue  total 
for  the  fourth  quarter  but  said 
he’s  slightly  nwrs  optimistic 
about  the  general  economy. 


Short  Takes 

The  WORLD  WfOE  WEB  CONSOR 
TIUM  reieased  a  proposed  rtvt- 
skm  of  the  SOAP  spiwification 
(or  final  review. . . .  PALM  INC  in 
Milpitas.  CaM..  said  Pahn  OS- 
based  handheld  devices  wW  now 
be  abto  to  use  the  BtackBerry 
wireless  e-mail  software  devel¬ 
oped  by  RESURCK  tN  MOTION 
LTD.  in  Waterloo.  Ontario. 


av  MATT  HAMBLEN 

LANDesk  Software  Inc.  today 
plans  to  announce  a  revision 
of  its  hardware  management 
UHlIs.  with  new  features  de¬ 
signed  to  help  IT  workers 
monitor  software  licenses  and 
migrate  end-user  sittings  dur¬ 
ing  upgrades  of  PCs.  servers 
and  mobile  devices. 

loe  Wang.  CEO  of  South  Jor¬ 
dan.  Utah-based  LANDesk. 
which  last  summer  was  spun 
off  from  Intel  Corp.,  said  the 
license  monitoring  furutional- 
^  iry  built  into  LANDesk  Man¬ 


agement  Suite  7  can  help  FT 
managers  save  money  by  not 
renewing  unneeded  licenses, 
ft  can  also  block  unauthorized 
applications  from  running,  via 
an  agent  that's  installed  on 
computers  and  that  functions 
even  when  they’re  disconnect¬ 
ed  from  networks,  Wang  said. 

Denny  Cannon,  manager  of 
PC  integration  at  Farm  Credit 
Services  of  America  in  Oma¬ 
ha.  said  he  hope's  to  upgrade 
to  the  new  version  of  LAN¬ 
Desk  by  October.  Farm  Credit 
plans  to  replace  .T50  laptop 


PCs  ne.xt  year,  and  Cannon 
said  he  wants  to  use  the  soft¬ 
ware  to  lessen  the  need  for  IT 
staffers  to  manually  migrate 
e-mail  settings,  wallpaper  se¬ 
lections.  cookies  and  other 
end-user  preferences. 

In  March,  Farm  Credit  used 
an  earlier  version  of  LANDesk 
to  upgrade  550  desktop  PCs  at 
45  offices  in  four  states.  Can¬ 
non  said  the  process  cook  only 
three  weeks,  compared  with  13 
weeks  for  .similar  upgrades 
done  in  the  pa.st.  With  LAN¬ 
Desk.  operating  sysicnw  and 


applications  could  be  installed 
over  Farm  Credit's  network 
without  IT  workers  having  to 
visit  each  site,  he  said 
LANDesk's  new  features  arc 
“helpful  but  not  earth-shatter¬ 
ing  or  groundbreaking,"  said 
Fred  Broussard,  an  analyst  at 
IDC.  One  key  benefit  is  that 
LANDesk  users  can  get  a  .suite 
of  products  “instead  of  c-ob- 
bling  together  products  from 
multiple  vendors."  he  said.  I 
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Microsoft.  HP 
Demo  PC  Prototype 

At  dw  WAndom  Hanfiwan 
EnginMring  Confwranc*  test 
<Mtk  In  Miw  Orisam,  Wcrosoft 
Corn.  Md  HMdttt-Padivd  Ca 
(tenionsiratsd  o  prolotypo  dosk* 
top  PC  tiHil  tadudod  a  23-lncft 
ftet'panol  dtaptey  and  MK-ln 
wwiiaw  tatephony  eapafatfttei. 
HP  taU  tha  PC.  codriiBfnod 
Athans,  could  ba  randy  as  aarfy 
aanaxtyotf. 

CSC  Team  Wins 
Royal  Mail  Pact 

AtaamoffT  aarviooa  Anns  lad 
by  Conpular  Sdancaa  Corp. 
(C$0  said  diay  hata  signad  a 
KHloar.  S24  bSon  outiourcmg 
contract  wM  Royd  MaA  Group 
PIC,  tha  UJC  gownmant's  mail 
daivary  company.  CSC*s  part- 
nan  aro  Bt  Group  PLC  In  Lon¬ 
don  XMsa  PLC  in  Hamal 
Hampatnad.  England.  About 
t.735  Rayai  Mai  IT  slafiBrs  wiH 
bo  transterrad  to  tha  tfondors. 
wMi  naarly  86%  of  tham  sMttIng 
to  0  Sagundo,  CaM.-basad  CSC. 

Cisco’s  Profit  Up. 
But  Sales  Down 

Cteoo  Sydoms  bic.  raportod  a 
$887  ffllMon  praH  for  iti  third 
guartar,  wMcIi  andad  Apr!  2G.  N 
waa  up  36%  from  $729  mlKon 
a  yoar  ago,  but  ravonua  dpped 
4%framS«JWMooto$4.6bl- 
•oiL  Clico  CCD  John  Chmohars 
pradktod  a  dmiar  rtvanua  total 
far  tha  feurlb  quartar  but  add 
ha’a  sightly  mon  opihdatic 
about  Gw  gonord  oconomy. 


Short  Takes 

T)»WORLOWDeWEBCONSQft' 
TMI  roteosod  a  proposod  ravt- 
aton  d  Gm  SOAP  spacMcatton 
lor  IM  rwtow. . . .  PALM  me.  in 
M|plHa.Cilf..iddPdmOS- 
ba^  hmdhaM  dadcat  wM  now 
ba^tounlhoBlachBarry 
wboteaa  a-mal  soRwara  das^ 
opad  by  RESEARCH  M  MOTION 
lTD.inMtetorlBO>Ontmte. 


MARK  HALL  •  ON  THE  MARK 

ASP  Turns  Financial 
Comer  and  Proves . . . 

...  the  business  model,  brags  John  Ottman,  executive  vice  president  of 
worldwide  markets  at  Corio  Inc.  Maybe,  maybe  not  Ottman  says  the  San 
Carlos,  Calif.-based  application  service  provider  (ASP)  had  66%  rev¬ 
enue  growth  in  the  recent  quarter  over  the  same  period  last  year  and 
was  profitable  -  although  it  us^  the  popular  dot’oom  EBITDA  method  of 
adding  revenue  dollars  and  cents  without  subtracting  all  of  the  com¬ 
pany’s  real-world  expenses.  Still,  it’s  a  good  start.  It’s  especially  good 
when  you  consider  that  although  Corio  has  only  100  customers,  the 


same  as  it  did  about  three  years  ago.  these 
days  precious  few  arc  dot-bombers.  Most 
of  the  new  customers  arc  outnt.s  we've 
heard  of,  like  American  Express.  Pfizer 
and  the  U.S.  Coast  Guard.  The  ASP's 
users  also  include  CarUon  Companies, 
one  of  the  largest  private  companies  in 
the  U5..  which  counts  Radisson  Hotels 
and  TGI  Friday's  restaurants  among  its 
holdings.  But  when  CIO  Stephen  Brown 
explains  why  Corio  is 
good  for  his  company,  it 
doesn't,  as  Ottman  would 
have  it,  "prove  the  busi¬ 
ness  modeL*  Rather,  it 
proves  that  Corio  is  will¬ 
ing  to  flex  its  business 
model  to  get  and  keep 
customers.  According  to 
Brown.  Carteon  donn*!  un 
Corto's  data  cantor  to  host 
Its  appHcallons  —  which 
the  classic  ASP  business 
model  would  require.  In¬ 
stead.  it  exploits  Corio's 
expertise,  leveraging  the 
ASP's  technology  until  it 
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can  train  its  own  IT  staff  on  how  to  run 
the  software.  Carlson  then  co-iocates  the 
servers  in  its  own  data  center  in  its  Min¬ 
neapolis  headquarters.  Furthermore, 
even  Ottman  acknowledges  that  the  tra¬ 
ditional  ASP  model  of  demanding  that 
users  stick  to  cookie-curTer  versions  of 
an  application  is  out  the  window.  For  ex¬ 
ample.  Brown  wouldn’t  have  accepted  his 
PeopleSoft  application  from  Corio  with¬ 
out  substantial  rework 
for  Carlson’s  needs.  "We 
wanted  to  share  in  host¬ 
ing  and  customization  so 
we  would  have  the  skill 
sets  from  a  process  man¬ 
agement  point  of  view.” 

says.  \^ere  the  clas¬ 
sic  ASP  model  does  woric 
well.  Brown  believes,  are 
cases  in  which  his  com¬ 
pany  needs  to  “get  re¬ 
sources  by  the  drink” 
from  Corio,  such  as  an 
extra  server  to  handle 
bigger  loads.  ■  Next 
month  Corio  will  be 


serving  up  another  drink  to  its  customers: 
a  new  sbMite-sign-on  serdca  wito  an  Mantlty 
managMTwnI  systam.  Users  who  wander 
from  their  computers  for  too  long  will  be 
logged  off  all  their  open  apps.  But  the  sin¬ 
gle  sigD-on  will  dull  that  pain.  Prosit.  ■ 
Monitoring  application  licenses  can  be  as 
tough  as  keeping  tabs  on  users’  access  to 
them.  LANDesk  Software  Inc.  in  South 
Jordan.  Utah,  has  for  years  been  helping 
IT  shops  comply  with  software  licenses, 
as  well  as  mam^  the  deployment  of  soft¬ 
ware  across  the  networic,  with  its  LAN- 
Oesk  Management  Suite.  Following  to¬ 
day's  announcement  (see  below).  Version 
7  will  hit  the  streets  May  IS  with  support 
for  Mae  0$  X  dfonts  and  aarvora.  With  its 
profile-migration  capabilities,  applica¬ 
tion  settings  for  the  latest  versions  of  Mi¬ 
crosoft  Office,  Outlook  and  Internet  Ex¬ 
plorer  will  be  maintained  in  Version  7. 
Lotus  Notes  profile  migration  will  come 
in  July.  •  Now  that  you’re  in  license  com¬ 
pliance  for  all  your  software,  it’s  time  to 
assure  that  you're  to  poley  complanca  with 
ragutetiona  such  as  MPAA.  One  of  the  first 
out  of  the  gate  for  that  will  be  SecurityPro- 
filing  Inc  in  Lafayette,  Ind.  CTO  Brett 
Oliphant  says  you  can  expect  the  compa¬ 
ny’s  Policy  Compliance  product  sometime 
this  summer.  SecurityProfiiing  plans  to 
ship  Version  2  of  its  Intelligent  IDS  next 
ntontb.  Oliphant  claims  that  intrusiort- 
dctection  systems  (IDS)  often  identify  up 
to  90%  folaa  peailim,  mMdng  theaa  security 
padagaa  asaantteAy  usateaa,  since  systems 
administrators  cease  taking  the  tools  seri¬ 
ously.  The  new  release,  which  will  feature 
an  improved  user  interface  management 
console,  will  sort  throu^  every  suspect 
packet  using  Snort,  an  opcn-source  IDS. 
and  compare  those  packets  against  your 
application  portfoUa  At  least  then  you 
can  eliminate  all  those  potential  breaches 
of  no  coasequence  to  your  network  and 
maybe  (Mw  your  IDS  aariously  for  ones.  I 


LANDesk  Eases  Hardware  Upgrade  Pains 


BV  MATT  HAMBLIN 

LANDesk  Sofinmre  Inc.  today 
plans  to  announce  a  revision 
of  its  hardvrare  management 
cools,  with  new  features  de¬ 
signed  to  help  IT  workers 
monitor  software  licenses  and 
migrate  end-user  settings  dur¬ 
ing  upgrades  of  PCs,  servers 
and  mobile  devices. 

Joe  Wang.  CEO  of  South  Jor¬ 
dan,  Utah-based  LANDesk. 
which  last  summer  was  spun 
off  from  Intel  Corp..  said  the 
license  monitoring  functional¬ 
ity  built  into  LANDesk  Man¬ 


agement  Suite  7  can  help  IT 
managers  save  money  by  not 
renewing  unneeded  licenses. 
It  can  also  block  unauthorized 
applications  from  running,  via 
an  agent  that’s  installed  on 
computers  and  that  functions 
even  when  they're  disconnect¬ 
ed  from  networics,  Wang  said. 

Denny  (Cannon,  manager  of 
PC  integration  at  Farm  Credit 
Services  of  America  in  Oma¬ 
ha.  said  he  hopes  to  upgrade 
to  the  new  version  of  LAN¬ 
Desk  by  October.  Farm  Credit 
plans  to  replace  3S0  laptop 


PCs  next  year,  and  Cannon 
said  he  wants  to  use  the  soft¬ 
ware  to  lessen  the  need  for  IT 
staflers  to  manually  migrate 
c-mail  settings,  wallpaper  se¬ 
lections,  cookies  and  other 
end-user  preferences. 

In  March.  Farm  Credit  used 
an  earlier  version  of  LANDesk 
to  upgrade  550  desktop  PCs  at 
45  oStces  in  four  states.  Can¬ 
non  said  the  process  took  only 
three  weeks,  compared  with  13 
weeks  for  similar  upgrades 
done  in  the  past  With  LAN¬ 
Desk.  (^>erating  systems  and 


applications  could  be  installed 
over  Farm  Credit's  network 
without  IT  workers  having  to 
visit  each  site,  he  said 
LANDcsk’s  new  features  are 
“helpful  but  not  earth-shatter¬ 
ing  or  groundbreaking,”  said 
Fred  Broussard,  an  analyst  at 
IDC.  One  key  benefit  is  that 
LANDesk  users  can  get  a  suite 
of  products  “instead  of  cob¬ 
bling  together  products  from 
multiple  vendors.”  be  said.  I 
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Event-Driven  Architecture 
Poised  for  Wide  Adoption 


to  see  if  there  are  places  where 
they  could  do  simple  event 
processing  instead  of  SOA  to 
design  part  of  an  application. 
Leadmg*edge  companies 
should  also  look  to  implement 
complex  event  processing  for 
applications  that  bring  a  com¬ 
petitive  advantage,  he  said. 

Meanwhile,  users  who  still 
haven't  adopted  SOA  are  trying 
to  sort  it  all  out  “Before  you 
get  time  to  deploy  one  thing, 
the  next  thing’s  already  out.' 
said  Vito  laimuzzelli,  a  senior 
systems  architect  at  New  Jer¬ 
sey  Manufacturers  Insurance 
Ca  in  West  Trenton,  N.J.  • 


I  Language  and  send  XML-based 
messages  between  compo¬ 
nents  using  SOAP  over  HTTP. 

But  Schulte  said  connecting 
services  occurs  in  a  linear, 
predictable  sequence,  whereas 
an  event-driven  architecture 
allows  for  multiple,  less  pre¬ 
dictable.  asynchronous  events 
to  happen  in  parallel  and  trig¬ 
ger  a  single  action. 

Simple  event-driven  proc¬ 
essing  has  been  in  common 
use  for  at  least  10  years  with 
technology  such  as  IBM’s  or 
Tibco  Software  Inc.’s  message- 
oriented  middleware  and.  in 
the  past  few  years,  message- 
driven  Enterprise  JavaBeans, 
he  noted. 

But  Schulte  predicted  that 
complex  event  processii^ 
(CEP)  will  start  to  become 
mainstream  in  2007,  as  appli¬ 
cation  developers  and  systems 
and  business  analysts  strive  to 
do  more  business  in  real  time. 
Paving  the  way  for  the  trend 
will  be  faster  networks,  the  ar¬ 
rival  of  general-purpose  event 
management  software  tools 
and  the  emergence  of  stan¬ 
dards  for  event  procressing  be¬ 
ginning  in  2005,  be  said. 

Hints  that  CEP  will  become 
mainstream  include  Palo  Alto. 
Calif.-based  Tibco's  acquisi¬ 
tion  of  Praia  Inc.  and  IBM’s 
work  on  event-broker  technol¬ 
ogy,  Schulte  claimed  “It’s  ob¬ 
viously  the  first  step  for  IBM. 
and  the  next  step  will  be  com¬ 
plex  event  processing,'  he  said. 

David  Luckham.  a  professor 
of  electrical  engineerit^  at 
Stanford  University  and  au¬ 
thor  of  a  book  on  CEP.  The 
Power  o/ Events,  said  the  goal 
of  CEP  is  rather  simple:  deliv¬ 
ering  understandable  infor¬ 
mation  about  what's  happen¬ 
ing  in  IT  systems.  That  infor¬ 
mation,  in  turn,  can  be  used 
for  a  variety  of  purposes, 
such  as  detecting  unusual 
activity,  improving  security 
and  recognizii^  advantageous 
scenarios  in  CRM  and  supply- 
chain  systems. 

The  events  in  IT  systems 


contain  untapped  informa¬ 
tion.  CEP  lets  you  extract  it 
and  use  it  in  ways  you  want 
to.“  he  said. 

Luckham  predicted  that 
CEP  will  start  creeping  into 
Web  services,  middleware  and 
application  servers  in  2005.  By 
2008.  he  foresees  the  emer¬ 
gence  of  CEP  standards,  lan¬ 
guages  and  complex  event- 
pattern  search  engines.  Ubiq¬ 
uity  of  CEP  will  come  in  2012. 
he  forecasted. 

To  prepare  for  EDA,  Schulte 
advised  companies  to  look  at 
their  application  requirements 


Complex  event  processing  the  'next  big 
thingf  after  Web  services,  says  Gartner 


ference  here  last  week. 

Fortunately  for  IT  shops,  the 
EDA  approach  is  complemen¬ 
tary  to  SOA.  which  forward- 
thinking  IT  shops  are  starting 
to  emplo>'  in  greater  numbers 

■  as  they  forge  ahead 
with  Web  services. 
Taking  an  SOA-based 
approach,  developers  build  an 
application  by  assemblii^ 
“services."  or  software  compo¬ 
nents  that  define  reusable 
business  functions. 

One  of  the  main  advantages 
of  the  SOA  approach  is  that  by 
building  standards-based  inter¬ 
faces  between  components,  de¬ 
velopers  can  incrementally 
construct  applications  and 
swap  out,  reuse  and  modify 
components  without  having  to 
concern  themselves  with  their 
inner  workings.  Those  who 
build  Web  services  typically 
describe  the  interfaces  using 
the  Web  Services  Definition 


SY  CAROL  M.IWA 

LOS  ANOELES 

Jl  AS  MANY  IT  shops 

are  starting  to  get  their 
arms  around  the  service- 
oriented  architecture 
(SOA)  approach  mm 
now  that  Web  services 
standards  are  cmerg- 
ing.  there's  already  a  “next 
big  thing"  on  the  develop¬ 
ment  horizon,  according  to 
Gartner  Inc. 

Four  years  from  now.  “mere 
mortals'  will  begin  to  adopt 
an  event -driven  architecture 
(EDA)  for  the  sort  of  complex 
event  processing  that  has  been 
attempted  only  by  software 
gurus  buildif^  operating  sys¬ 
tems  or  systems  management 
tools,  and  sophisticated  devel¬ 
opers  at  financial  institutions, 
predicted  Roy  Schulte,  an  ana¬ 
lyst  at  Stamford.  Cfonn.-based 
Ciartner.  which  held  its  Web 
Services  and  Application  Con- 


lEMNINKINIUNE 

For  additional  resources,  visit  our 
App  Oeveioomeni  Knowledge  Center: 
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IT  Managers  StI  VyMdng  on  S(]A 

Sartner  Inc.  may  see  event-  :  XML’causeperiormanoehils. 
drtvenarcMeckreasthe'next  :  The  SOA  concept  lent  new, 
big  thing.’ but  plenty  offT  man-  ■  butSOAhaabecoroabuzr 
ageiserestistrugglngtolBy  •  word  now  tel  Web  aarvices 
down  the  toundafion  forte  :  are  hitting  Ihe  meinstr&am-  Ser- 
cunent  one  *  serMcesxiented  :  vices  are  eipoeed  to  one  an- 
vchilecture^OA}.  ■  oter  through  startenfoteaed 

Gartner  Mialyst  Oaryt  Plum-  :  inlertaces,  and  SOAP  ia  used 
mereshmtfastelnomorB  :  to  send  Xhltesed  messages 
ten  30%  of  rr  shops  are  do-  :  belwnn  tem.  Because  com¬ 
ing  SOA-based  devafopinent  by  :  ponentsarekioselycotoiBd. 
demand  among  that  group.  ;  devefopeis  can  ea^  swap 
less  ten  haft  are  doing  ilcoh*  :  them  out  and.  In  te^.  gain 

sistentlywel.8utheprecBct8d  i  the  benelt  of  code  reuse. 
thBt65%w<ibebul^apoll'  :  ButsaianIfTmaragerssaid 
cations  using  SOA  conc^  j  they  wool  be  hottng  out  high 
live  years  from  now.  :  hopes  for  cods  reuse.  It's  a 

t's  too  early  tor  us.’ said  :  major  cuhie  change  because 
GtynOoder.e-fausinessappI-  :  pe^havelobewffngto 
cations  manager  at  ShelCM  I  share  and  use  someone  eise's 
Products  US  In  Houston.  But  :  oode.'saidOapridVM.appIlea- 
hasaidhedoessaeopportu-  :  ttondevelopmant  manager  at 
nity  "to  bring  quick  biffiiness  :  SD6S£.aiaaiQfS«i0togD- 
refuevAhoul  having  to  rewTtto  ^  based  Sempra  Energy, 
legacy  appicalions.’  It's  an  ego  Ihina*  said 

Robert  McCarla.  a  group  :  JCavierSoosai.  a  senior  menag- 
managerinlhee-businas  ;  er  and  IT  arohlect  at  Farmers 
group  at  Royal  Bank  of  Canada  •  Insurance  Group  of  Compantoe 
in  Toronto,  said  Ms  company  is  |  inlx)6AngBies.He8aidhe 
in  te ’education  phase.’ sti  :  would  expect  no  more  than 
flgutngoutvtetliMghldo  *  60%ieuBe**100%reuBei6 
with  Web  services. 'Butte  •  not  reefMir’Soosai  said  farm- 
concapt  of  being  able  to  loose-  \  erswf  use  te  SOA  approach 
lycouMa  legacy  appicattons  is  :  *}u5t  where  it  males  sense* 
quite  interesting,' he  sMd  Men  :  and  wonlreptooeexiBiing  code 
though  Web  servioeBseciftly  la  ■  wkhnewlAMaervfoeabe- 
slM  immature  and  loosacou*  |  caraetetwoiddbeeitoenstve. 
ptfogandteVartiosltyof  -CanlSIlm 
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Survey  Points  to  Continuing 
Friction  Between  Business 


One-third  of  polled  business  execs  say 
the>  ’re  not  satisfied  with  their  IT  units 


BV  TMOMAS  HOFFMAN 

ONE-THIRD  of  437 

business  executives 
surveyed  recently 
by  Forrester  Re> 
search  Inc.  said  they’re  dissat¬ 
isfied  with  the  performance  of 
their  IT  departments.  But 
some  IT  mana^rs  and  ana¬ 
lysts  last  week  said  the  results 
aren't  surprising  —  and  may 
actually  represent  an  improve* 
mem  in  ITs  standing. 

The  survey,  which  was  re¬ 
leased  by  Cambridge.  Mass.- 
based  Forrester  last  naonth. 
also  found  that  dissatisfied 
business  managers  are  more 
likely  to  fight  with  IT  depart¬ 
ments  for  control  of  technol¬ 
ogy  initiatives.  Moreover,  the 
unhappy  business  executives 
think  that  their  companies  lag 
others  in  adopting  new  tech¬ 
nologies  and  hijdtcr  IT 
project  &ilure  rates,  said  For¬ 
rester  analyst  Meredith  Child. 

Because  this  was  the  first 
time  Forrester  posed  these 
questions  to  business  leaders, 
it's  hard  to  say  wdHrtber  the 
survey  results  signal  an  im¬ 
provement  or  a  decline  in  sat- 
tsfactioo  with  IT.  But  "if  you 
ran  this  study  in  1995, 1  bet  the 
numbers  might  be  flipped  — 
that  66%  would  have  been  dis¬ 
satisfied  with  their  IT  groups." 
said  Steve  Andriole,  a  senior 
consultant  at  Cutter  Consor¬ 
tium  in  Arlington.  Mass.,  and 
an  IT  management  professor 
at  VUlanova  University  in 
Pennsylvania. 

Since  the  economy’s  rapid 
growth  came  to  a  halt  in  late 
2000.  IT  managers  have  had 
to  work  more  closely  with 
business  units  to  cost-justify 
technology  investments.  An¬ 
driole  said.  CIOs  "have  gotten 
smarter  about  defervding  their 
IT  budgets,"  he  added. 

Others  were  a  bit  more 
skeptical  about  the  survey  re¬ 
sults.  'This  is  a  subject  tlut 


goes  a  lot  deeper  than  some  of 
the  simple  correlations  that 
[Forrester!  built,"  said  Cedric 
Rhoads,  former  director  of 
information  systems  at  Mat¬ 
sushita  Avionics  Systems 
Corp..  a  Bothell.  Wash.-based 
company  that  develops  in¬ 
flight  communications  and 
entertainment  systems  for  the 
airline  industry. 

Two  months  ago.  Rhoads 
became  a  product  manager  for 
a  new  group  that  Matsushita 
Avionics  formed  two  months 
to  develop  ground-based 
technologies  like  passenger 


personalization  s>'stems.  Be¬ 
fore  that,  he  helped  create  an 
IT  steering  committee  that  in¬ 
cludes  executives  from  the 
company’s  five  major  business 
units  plus  Us  chief  financial 
and  technology  officers. 

The  steering  committee  is 
developing  a  framework  for 
reviewing,  funding  and  track¬ 
ing  rr  projects,  Rhoads  said. 
Previously,  the  company’s  IT 
department  “had  a  history  of 
working  in  the  background." 
he  noted. 

Alignment  between  business 
units  and  IT  is  an  age-old  prob¬ 
lem.  said  ]ohn  Paricinson,  chief 
technologist  at  Cap  Gemini 
Ernst  &  Young's  Americas  divi¬ 
sion  in  Chicaga  "Why  would 


anybody  be  surprised  by  the 
[survey!  results?"  Parkinson 
asked.  “This  has  been  a  prob¬ 
lem  for  the  25  years  I’ve  been 
in  the  profession." 

One  of  the  challenges  is  that 
applications  built  to  support 
business  operations  are  often 
rigid  and  can  be  “antithetical  to 
agile  behavior."  Parkinson  said. 
“Businesses  like  to  be  able  to 
change  directions  on  a  dime.” 

Parkinson  said  IT  depart¬ 
ments  should  have  some  of 
their  workers  “live"  with  busi¬ 
ness  units  to  get  a  better  un¬ 
derstanding  of  their  require¬ 
ments.  In  addition,  IT  man¬ 
agers  have  to  be  straightfor¬ 
ward  with  business  leaders 
“on  what's  reasonable  to  ex¬ 
pect  from  IT  projects  and 
what’s  unreasonable  to  ex¬ 
pect,"  he  said.  • 
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Veritas  Readies  Tools  to 
Support  Utility  Computing 


Veritas  Software  Corp.  last 
week  detailed  plans  to  use  an 
upcoming  IT  cost-allocation 
tool  and  technology  from  two 
acquisitions  as  the  center¬ 
pieces  of  a  product  line  that 
can  be  used  to  manage  com¬ 
puter  resources  as  a  utility. 

Mountain  View,  Calif-bascd 
Veritas,  which  made  the  an¬ 
nouncement  at  its  Vision  2003 
user  conference  here,  became 
the  latest  IT  vendor  to  target 
utility,  or  on-demand,  comput¬ 
ing.  Company  officials  said 
Veritas  will  support  storage 
virtualization,  automated 
hardware  provisioning,  sys¬ 
tem-performance  manage¬ 
ment  and  business-unit 
chargeback  capabilities. 

Several  conference  atten¬ 
dees  said  tight  IT  budgets  are 
forcing  them  to  try  to  do  more 
with  less.  Management  soft¬ 
ware  like  the  tools  promised 
by  Veritas  could  help  make 
that  possible,  they  added. 

Richard  Guetzloff,  senior  di¬ 
rector  of  enterprise  systems  at 


R.R.  Donnelley  &  Sons  Co.  in 
Chicago,  said  he  has  been  talk¬ 
ing  to  Veritas  since  Decen^r 
about  the  new  product  suite 
because  he  wants  to  more 
effectively  automate  manage¬ 
ment  of  about  30  storage-area 
networks  (SAN). 

The  SANs  have  a  total  ca¬ 
pacity  of  LSOTB  and  support 
about  800  application  servers 
at  R.R.  Donnelley,  which  pro¬ 
vides  printing,  content  man¬ 
agement  and  distribution  ser¬ 
vices  to  publishers,  retailers 
and  other  companies. 

Goal:  One  Day  of  Training 

Guetzloff  said  his  goal  is  to 
install  a  central  management 
console  for  provisioning  IT  re¬ 
sources.  "I'm  really  looking  at 
how  to  make  it  simpler,  so  that 
with  a  day  of  training,  anyone 
can  do  this  from  an  operating 
perspective,”  he  said. 

Until  now.  Veritas  has  fo¬ 
cused  on  storage  management 
tools.  But  earlier  this  year,  the 
company  said  it  was  looking  to 
expand  into  other  IT  manage¬ 
ment  technologies,  a  strategy 


fueled  partly  by  acquisitions 
that  were  announced  late  last 
year  [Quicklink  36722]. 

A  purchase  of  Westwood, 
Mass.-based  Precise  Software 
Solutions  Inc.  that’s  due  to  be 
completed  next  month  will 
give  Veritas  new  performance 
management  tools.  Veritas 
also  is  integrating  a  server 
provisioning  application  that 
it  bought  in  its  December  ac¬ 
quisition  of  Sunnyvale.  Calif.- 
based  Jareva  Technologies  Inc. 

The  acquired  products  are 
due  to  be  joined  later  this  year 


by  Service  Manager,  an  inter¬ 
nally  developed  tool  for  track¬ 
ing  the  use  of  IT  resources. 

Dong  Jin  Kim.  a  senior 
SAN  architect  at  Eastman 
Kodak  Co.  in  Rochester,  N.Y., 
said  he's  trying  to  move  away 
from  using  massive  Excel 
spreadsheets  to  document 
Kodak's  IT  infrastructure. 

Kim  is  involved  in  managing 
more  than  200  Sun  Solaris 
servers.  160-plus  Oracle  data¬ 
bases  and  disk  arrays  from 
multiple  vendors. 

“It’s  becoming  a  nightmare 
to  track  it  all,"  Kim  said.  He 
added  that  he  now  plans  to 
evaluate  Veritas'  automated 
discovery  and  provisioning 
software,  along  with  simitar 
products  from  EMC  Corp.. 
IBM  and  Scotts  Valley.  cW.- 
based  InterSAN  Inc. 

Guetzloff  said  one  thing  be 
likes  about  Veritas’  technology 
is  that  it  appears  to  be  more 
“vendor-agnostic"  than  rival 
utility  computing  tools  being 
offered  by  server  and  disk 
array  makers.  I 
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Ventas  ata)  said  It  wM  port  soma  of  ns  soft¬ 
ware  to  Qsco  and  Brocade  storage  sMiches: 

OQuMUnk  38329 
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The  facts  tell  a  COfnpelling  story.  Microsoft  SQL  Server’''  2000  ts  the  new  worldwide  leader  in  scale-up 
server  performance,  achievingtnetoptwo  rankings  m  the  latest  TPC  C  benchmark  tests.  To  learn  how  SQL  Server 

2000  ca-.  quif.Hv  .ncrease  your  scalability,  visit  nn'-rni.-,{r  ,-,-,0-,  sqi  •;  Software  for  the  Agile  Business.  Microsoft 
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Blogs  Play  a  Role  in 
Homeland  Security 

Make  it  easy  for  critical-infrastructure 
agencies  to  share  info  from  bottom  up 


BV  0AM  VEMTOM 

WfBLotis.  the  In¬ 
ternet  technol¬ 
ogy  that  allows 
anyone  with  a 

browser  to  publish  a  personal¬ 
ized  online  iournal.  are  in¬ 
creasingly  being  used  to  sup¬ 
port  the  intelligence-sharing 
requirements  of  homeland  se¬ 
curity  efforts. 

Providence.  R.l.-based  TVac- 
tion  Software  Inc.  today  will 
announce  that  the  Western 
Slates  Information  Network 
(W5IN)  has  deployed  Trac¬ 
tion’s  TeamPage  enterprise 
weblog  software  to  support 
law-enforcement  task  forces 
that  are  working  on  tcrrorisni 
and  drug  investigations. 

Karen  Aumond.  assistant  di¬ 
rector  of  the  WSIN,  said  a  new 


project  called  the  Advanced 
Terrorism  Information  Ex¬ 
change.  which  is  being  expand¬ 
ed  to  local  water  departments, 
fire  departments  and  other 
critical-infrastructure  organi¬ 
zations.  will  be  one  of  the  first 
initiatives  to  benefit  directly 
from  enterprise  weblogs. 

''What  typically  happens  is 
that  there  is  a  flurry  of  e-mails, 
and  everybody  is  copied  on 
the  e-mail.'’  Aumond  said. 

*And  they  are  automatically 
purged  after  60  days  if  you 
don’t  archive  them.  By  doing 
this  (posting  e-mails  to  a 
webk^.  we  can  forward  these 
e-mails  to  a  central  place,  and 
then  we  can  access  them  from 
the  road.  And  what's  even  bet¬ 
ter,  we  can  search  them.” 

Criminal-intelligence  ana¬ 


lysts  are  using  TeamPa^  to 
create  access-controlled  web¬ 
logs.  or  blogs,  as  repositories 
for  research  data  collected  for 
further  analysis.  The  WSIN 
watch  center  in  Sacramento, 
Calif,  uses  them  to  share  user 
tips,  training  schedules  and  ar¬ 
ticles  that  are  of  interest  to 


law-enforcement 
task  forces. 

The  enterprise 
weblog  "has  all  the 
hallmarks  of  a  disrup¬ 
tive  technology.”  said 
Greg  Lloyd,  Traction's  co- 
founder  and  president.  "Unlike 
ERP  bell  or  groupware  hell 
where  it  may  take  six  months 
just  to  deploy  infrastructure, 
weblogs  that  use  the  standard 
Web  infrastructure  can  be  de¬ 
ployed  in  15  minutes." 

Many  Benefits 

Peter  Brodonann,  vice  presi¬ 
dent  of  marketing  at  Irving, 
Texas-based  bTrade  Inc.,  is  us¬ 
ing  a  weblog  as  a  marketing 
tool  for  the  company’s  bust* 
ness-to-business  software. 

Low  cost  is  only  one  advan¬ 
tage  that  blogs  have  over  more 
traditional  and  complex  col¬ 
laboration  products,  he  said. 
"The  other  tools  allow  you  to 
do  more,  but  what's  nice  about 
a  blog  is  it’s  real  easy.  It’s  high¬ 
ly  tuned  to  allow  for  rapid 
publishing.”  he  said. 

Blogging  is  "no-brainer  Web 
technology,"  Brockmaim  added 
By  deploying  it,  "you  save  your¬ 
self  a  lot  of  headaches,  heart- 
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bum  and  paia" 
Weblogs  can  also 
benefit  corporate  cul¬ 
tures,  analysts  said. 
"Knowledge  manage¬ 
ment  systems  are  of¬ 
ten  so  formal  and  top-down- 
driven  that  the  nomial  worker 
sees  no  benefit  in  using  them 
or  contributing.”  said  James 
Gaskin,  an  IT  consultant  in 
Dallas.  "Bi<^  like  e-mail  flat¬ 
ten  the  hierarchy  and  let 
everyone  contribute  without 
having  to  stare  down  a  suit  at 
a  meeting  or  contradict  a  man¬ 
ager  in  person." 

Sundv  Kadayatn.  chief 
technology  officer  at  Intel- 
liseek  Inc„  a  Cincinnati  firm 
that  develops  Web-based  intel¬ 
ligent-agent  and  krmwiedge* 
discovery  technologies,  said 
blogging  applications  can  add 
to  the  problem  of  information 
overt(»d  if  they  don’t  incorpo¬ 
rate  personalized  searching 
and  alert  mechanisms  —  capa¬ 
bilities  that  Lntelliseek  is  de- 
velopir^  "When  those  types 
of  capabilities  are  layered  on 
top  of  blogging  tools,  you're 
going  to  see  the  mainstream 
adoption  of  weblogs  in  the  en¬ 
terprise  setting.”  he  said.  I 


IM  Security  Problems  Persist 


■V  JAimiMAB  VIJAVAM 

Security  problems  relating  to 
the  unfettered  use  of  con¬ 
sumer  chat  software  on  corpo¬ 
rate  netwoiks  are  fueling 
adoption  of  tougher  security' 
measures  and  more  commer¬ 
cial-grade  products,  users  and 
analysts  said. 

Ongoing  concerns  about  in¬ 
stant  mess^ing  (IM)  security 
were  heightened  last  week  by 
the  disclosure  of  six  vulnera¬ 
bilities  in  America  Online 
1jic.’s  Mirabilis  IC(2.IM  client 
software.  TVo  of  them  are  par¬ 
ticularly  dangerous  and  could 
allow  hackers  to  gain  frill  ad¬ 
ministrative  control  of  a  vic¬ 
tim’s  computer,  according  to 
Ejovi  Nuwere,  a  security  engi- 
neer  at  Core  Security  Tech¬ 
nologies  Inc.,  the  Boston  soft¬ 
ware  company  that  discovered 
the  flaws. 

A  spokesman  for  AOL’s  ICQ. 


subsidiary  acknowledged  the 
flaws  in  the  latest  version  of 
lC(2|s  freely  downloadable 
chat  software.  But  he  claimed 
that  only  one  of  the  flaws,  in¬ 
volving  a  feature  that  lets 
users  open  Internet  e-mails,  is 
dangerous.  A  flx  is  in  the 
works,  he  added. 

Sensitive  Data  at  Risk 

Security  analysts  have  been 
warning  for  some  time  that 
unchecked  use  of  such  soft¬ 
ware  could  cause  dangerous 
holes  in  firewalls,  leading  to 
sensitive  corporate  data  being 
exposed  on  public  networks 
and  flies  being  transferred  in 
an  unprotected  fashion. 

Such  concerns  are  pushing 
companies  to  look  for  new 
ways  of  securii^  IM  conunu- 
oications,  said  Michael  Oster- 
man.  president  of  Clstennan 
Research  Inc.  in  Black  Dia¬ 


mond.  Wash.  The  firm’s  twice- 
yearly  surveys  have  shown 
adoption  of  commercial  IM 
products  to  be  growing  faster 
than  consumer  IM  products 
on  corporate  networks. 

At  the  same  time,  public  IM 
products  still  dominate  corpo¬ 
rate  netwoiks.  AOL’s  Instant 
Messei^r,  for  instance,  b 
used  at  64%  of  the  companies 
surveyed,  Osterman  said. 

"The  good  news  is  that  it  is 
easy  to  detect  the  use  of  (con¬ 
sumer]  services  and  to  either 
shut  them  down  or  to  give 
users  an  alternative  that  is  a 
sanctioned  enterprise  prod¬ 
uct,"  said  Dana  Gardner,  an 
analyst  at  Tlie  Yankee  Group 
in  Boston. 

Arlii^on  County,  Va.,  is 
rolling  out  Microsoft's  Real- 
Time  Communications  server 
software,  which  will  tie  into 
the  county’s  Exchange  2003 


and  Active  Directory  environ¬ 
ments.  It  will  form  the  basis  of 
a  collaborative  infrastructure, 
where  users  wilt  be  able  to 
carry  on  secure  IM  and  white¬ 
board  sessions,  as  well  as 
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share  applications  and  files  in 
real  time,  said  Vivek  Kundra. 
the  county’s  director  of  IT. 

*rhe  use  of  consumer  IM 
software  is  a  serious  security 
concern,  said  Scott  Loach,  se¬ 
nior  information  security  engi¬ 
neer  at  Raymond  James  Finan¬ 
cial  Inc.,  a  financial  services 
firm  in  St.  Petersburg.  Fla. 

■“We  have  seen  some  vulner¬ 
abilities  (in  consumer  IM  soft¬ 
ware]  that  have  been  exploit¬ 
ed."  Loach  said.  The  need  to 
comply  with  regulatory  re¬ 
quirements  has  led  to  a  much 
closer  scrutiny  of  IM  use  on 
corporate  networks,  he  added. 

ITie  company  plans  to  ban 
the  use  of  consumer  IM  soft¬ 
ware  on  its  networks.  Loach 
said.  New  application-level  se¬ 
curity  sofrvwe  from  Check 
Point  Software  Technologies 
Ltd.  in  Redwood  City,  (^ifr, 
will  make  it  possible  to  shut 
down  consumer  chat  clients 
by  simply  checking  a  box  in 
the  software’s  administrative 
interface,  he  explained.  I 
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Now  you  can  know 
who  made  the  change 
in  addition  to  what, 
when,  where,  and 
how  data  change 
has  occurred. 


Tripwire*  assures  the  integrity  of  your  data 
and  gives  you  the  ability  to  imnrtediately  detect 
and  pinpoint  undesired  change  across  all  your 
servers  and  network  devices.  By  establishing 
a  baseline  of  data  in  its  known  good  state. 
Tripwire  software  nionitors  arxi  reports  any 
changes  to  that  baseline  and  enables  rapid 
discovery  and  recovery  when  an  undesired 
change  occurs.  Thus  ensuring  the  stability  of 
your  information  services 

Maximize  Syetem  Uptime 

■  Identify  change  quickly 

■  Enable  quick  restoration  to  a  desired  state 

■  Eliminate  risk  arvj  uncertainty 

increase  IT  Staff  Productivity 

■  Lower  costs  and  frustration 

■  Greatly  reduces  the  time  It  takes  to 
find  and  diagnose  problems 

Failsafe  Foundation  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Enable  detailed  audit  reporting 

■  Maintain  granular  visibility  and  control 


Tripwire’s  Integrity  Assurance  solutions  are 
the  only  way  to  have  100%  confidence  that 
your  systems  remain  uncompromised.  In  the 
event  ^  a  change  in  state,  you  will  krxjw  who 
made  the  change  artd  exactly  what.  when, 
where,  and  how  change  has  occurred  so 
you  can  recover  quickly. 

For  a  FREE  SOKlay  fully-functional  damo 
and  copy  of  the  white  paper  “Integrity 
Assurance  In  a  Layered  Security  Strategy... 

call  toll-free:  1-800-TRIPWIRE  (874  7947) 
or  visit  http://enterprise.trlpwire.com  today! 
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Air  Force  Unit  Tracks  Deliveries 
Of  Parts  With  Wireless  System 


IT  director  says  new  technology  could 
help  logistics  center  save  S15M  per  year 


The  air  force  Ma¬ 
teriel  Conunand's  lo¬ 
gistics  center  at  Hill 
Air  Force  Base  in 
Ogdea  Utah,  has  deployed  a 
wireless  parts-tracking  system 
that's  expected  to  save  about 
SIS  million  annually 
by  cutting  the  average 
let^th  of  time  that 
parts  remain  in  the 
repair  pipeline  from 
24  hours  to  just  two. 

Mike  Neri.  the 
base's  IT  director.  Iasi  " 
week  said  at  Cdmputerworltfs 
Mobile  &  Wireless  Worid  con¬ 
ference  here  that  Hill  AFB 
needs  to  track  a  massive  num¬ 
ber  of  parts.  The  base  moves 
86.000  items  in  and  out  of  33 
warehouses  each  month,  in¬ 
cluding  everything  from  elec¬ 
tronic  “black  boxes'*  to  land¬ 
ing  gear  assemblies  used  on  a 
variety  of  fighter  aircraft. 

Although  the  status  of  parts 
can  be  monitored  by  a  uired 


inventory  system  at  the  base, 
until  the  recent  wireless  roll¬ 
out,  Hill  AFB  had  no  way  to 
track  the  vehicles  and  drivers 
chat  transport  hardware  from 
one  warehouse  to  another.  In 
addition,  some  of  the  ware- 
hou.ses  and  repair  facilities  are 
located  miles  apart  from  one 
another,  according  to 
Neri 

Now  the  base  has 
deployed  a  wireless 
Automated  Manifest 
Iracking  System 
(AMTS)  that  auio- 
matically  transmits 
pickup  and  delivery  informa¬ 
tion  to  drivers  equipped  with 
cellular  phones  l^m  Reston. 
Va.-based  Nextel  Communica¬ 
tions  Inc.  or  mobile  computers 
made  by  Tokyo-based  Toshiba 
Corp.  The  system  works  over 
a  cellular  network  operated  by 
Overland  Park,  Katt-based 
Sprint  PCS  Group.  Neri  said. 

Both  the  Nextel  phones  and 
the  Toshiba  computers  have 
built-in  Global  Positioning 


System  receivers  that  auto¬ 
matically  transmit  the  loca¬ 
tions  of  the  30  trucks  used  to 
move  parts  to  dispatch  cen¬ 
ters.  Neri  said.  The  mobile  de¬ 
vices  arc  also  equipped  with 
bar  code  scanners,  which  let 
drivers  transmit  information 
CO  the  base’s  back-end  systems 
about  the  parts  they  pick  up. 

Because  IT  security  is  a 


prime  concern  for  the  Air 
Force.  Neri  said,  the  AMTS 
uses  encryption  technologies 
that  support  the  Triple  Digital 
Encryption  Standard.  Cover¬ 
age  is  a  concern  for  some 
users  of  wireless  networks, 
but  Neri  said  that  isn't  an  issue 
at  Hill  because  both  Nextel 
and  Sprint  rely  on  cellular 
towers  located  on  the  base. 


The  increased  visibility  into 
the  location  of  repair  items  — 
as  well  as  the  ability  to  track 
and  dispatch  drivers  —  has  al¬ 
lowed  Hill  to  dramatically  re¬ 
duce  the  time  it  takes  to  move 
parts  through  the  repair 
process,  Neri  said. 

It  took  Hill  AFB  two  years 
to  develop  AMTS  using  IBM’s 
WebSphere  Everyplace  Access 
software.  Now  that  the  wire¬ 
less  system  is  running  in  pro¬ 
duction  mode,  Neri  said,  he 
expects  that  it  will  also  be  in¬ 
stalled  at  Air  Force  Materiel 
Command  centers  in  Georgia 
and  Oklahoma.  I 


IBM,  Palm  Combine  on  Mobile  Starter  Bundle 


IBU  Iasi  week  launched  a 
starter  vetston  ol  ib(  VibbSphere 
Everyplace  Access  software 
that's  peckaoed  with  %  oi  ^kn 
Inc’s  Tungsten  handheld  de- 
vk»s.  a  mcM  designed  to  let 
companies  t8st*drk«  EM'S  mo- 
bde  middtoware  technology. 

Rodney  AdWns.  general  man¬ 
ager  of  HSMs  pervasive  comput¬ 
ing  (Melon,  s^  that  the  MoM 
Oflioe  Entry  Jumpstart  Solution 
wi  provide  companias  with  the 
tectinotogy  needed  to  plot  and 
test  mobieappfcations.  such  as 
sales  force  automation  systems. 

Adons  said  the  Jump^ 


package  wi  also  let  companies 
‘start  smai  wflh  mobile  applica¬ 
tions  and  then  grow  over  time' 
and  evaluale  returns  on  invest¬ 
ment  throughout  the  process 

AMiough  IBM  has  bundled 
fbbnhardwarewfththeMbb- 
Sphere  tools  as  pert  of  Jump- 
start  the  rnkUtoware  supports  a 
range  of  mobile  devices,  includ¬ 
ing  Pcckal  PCe.  smart  pfiones 
based  on  operattng  systems 
from  Mbo^  Corp.  and 
phones  that  use  London-based 
Spblan  Lid's  software. 

The  JimipstBrI  kit  wi  sel  tor 
about  S80.000.  which  includes 


(he  cost  of  toe  Palm  hardware, 
Adkins  said 

Ja(*  Bold  an  analysit  at  Meta 
Group  Inc.  in  Stamford,  Com. 
said  that  for  ftim,  toe  Jumpstart 
package  represerts  an  opportu¬ 
nity  to  boost  toe  penetration  of 
Ms  harKMd  devices  into  toe 
corporale  market 

Untinow.mostoftoehand- 
heUs  sold  by  Palm  have  been 
bought  by  incMdual  usan.  Gold 
said ‘Pslm  has  lust  not  done  a 
very  good  fob  of  putttoQ  to¬ 
gether  enterprise  solubons.” 
he  added. 

-BobBmm 


Coniinucd  from  page  I 

WLAN  Security 


(he  property's  network  had 
only  six  authorized  WLAN 
APs  In  operation.  Dillon  said 
be  fired  up  network  sniffer 
software  to  check  the  actual 
number  of  APs  ^  and  quickly 
deteaed  a  total  of  IS. 

That  example  clearly  illus¬ 
trates  the  continued  prolifera¬ 
tion  of  rt^e  APs.  he  noted 
Dillon  said  IT  managers  need 
to  fight  back  by  setting  and 
enforcing  strict  policies 
against  unauthorized  WLAN 
devices.  He  also  recommend¬ 
ed  that  companies  institute 
touglf  end-user  authentication 
systems  to  ensure  that  only  le¬ 
gitimate  users  can  gain  access 
to  wireless  networks  set  up  to 


transmit  sensitive  business  in¬ 
formation. 

In  addition.  Dillon  said 
companies  need  to  set  rule.s 
governing  the  use  of  WLAN 
client  devices,  which  can  be 
operated  on  home  or  public- 
access  WLAN  systems  that 
lack  stringent  security  con¬ 
trols.  For  example,  Hilton  now 
requires  that  WLAN  cards  in 
laptop  PCs  be  disabled  when 
the  systems  are  connected  to 
the  company’s  wired  LANs  to 
prevent  viruses  or  Trojan 
horses  from  being  injected 
into  the  networks. 

In  a  similar  vein.  IT  siaflers 
at  Sears.  Roebuck  and  Co. 
have  added  software  to  the 
10,000  WLAN-equipped  note¬ 
book  PCs  distribute  to  the 
retailer's  field  service  techni¬ 
cians  that  blocks  them  from 


using  public-access  hot  spots, 
said  Dave  Sankey,  director  of 
process  and  technology  devel¬ 
opment  at  Sears.  He  added 
that  Sears  plans  to  install  pri¬ 
vate  WLAN  hot  spots  at  stores 
and  other  company  facilities 
.so  technicians  can  access 
training  materials. 

Gronring  Concern 

The  need  to  better  Siecure 
WLANs  is  expected  to  remain 
a  paramount  concern  for  IT 
managers  as  the  use  of  high¬ 
speed.  over-the-air  networks 
continues  to  expand.  Gartner 
Inc.  in  Stamford.  Conn.,  esti¬ 
mates  that  shipments  of 
WLAN  chip  sets  used  in  both 
APs  and  client  devices  totaled 
18  million  units  last  year  and 
predicts  that  the  figure  will  hit 
50  million  by  2006. 


Joe  Preeporia.  an  IT  manag¬ 
er  at  agricultural  products 
conglomerate  Caigill  Inc.  in 
Wayzata.  Minn„  said  the  com¬ 
pany's  numerous  business 
units  use  such  a  wide  variety 
of  WLAN  and  fixed  wireless 
tecbnoic^es  “that  we  are  not 
[yet]  equipped  to  deal  with  it 
at  a  corporale  level”  But.  he 
added.  Cargill  has  started  to 
develop  high-level  policies  to 
address  WLAN  security  is¬ 
sues.  including  rogue  APs. 

Hewlett-Packard  Ca  has 
scrambled  to  come  up  with 
policies  governing  the  use  of 
its  wireless  networks  by  visi¬ 
tors  to  its  facilities,  said 
Richard  Stone,  mobility  solu¬ 
tions  manager  at  the  vendor’s 
HP  Americas  division.  The 
rules  now  subject  guest  users 
to  the  same  Internet  nitering 


procedures  that  are  applied  to 
HP  employees.  Stone  said. 

Allan  Thompson,  CEO  of 
Senforce  Technologies  Inc. 
in  Cupertino,  (2alif..  said  his 
company  has  developed  loca¬ 
tion-aware  security  software 
that  automatically  configures 
settings  on  PCs  and  mobile 
devices  to  prevent  hackers  or 
network  snifters  from  gaining 
unauthorized  access  to  data 
when  the  systems  are  connect¬ 
ed  to  public-access  WLAN  hot 
spots.! 


A  Commeice  Department  ft  manager 
delafe  a  senes  o(  wwetess  trends 

(NdlMae27Q 

GMs  (HO  Tonir  ScoR  tils  about  Mie 
dewlopiHetXolwwtesdeoentlefHcais: 

^(Mcuwistm 


CRM  Apps  Take  Right  at  Aircraft  Makers 


ST  MASC  L.  SOWOINI 

Facing  gloomy  market  condi¬ 
tions.  large  airplane  makers 
like  Raytheon  Aircraft  Ca  and 


j  Tlie  Boeing  Co.  are  rolling  out 
CRM  applications  in  a  bid  to 
boost  sales  and  improve  their 
I  customer  service  capabilities. 


Raytheon  Aircraft  in  No¬ 
vember  went  live  with  call 
center,  sales  and  service  appli¬ 
cations  developed  by  Siebel 


Systems  Inc.,  said  Ed  Dolanski, 
vice  president  of  customer 
support  at  the  Wichita,  Ran.- 
based  maker  of  business  jets 
and  personal  planes.  About 
170  Raytheon  employees  are 
using  ^e  CRM  system. 


The  only  thing  as  reliable  as  our 
servers  is  our  satisfaction  guarantee. 

Wf  nv^Ke  i!  ■  .Lit  tiuiiness  to  keep  your  business  vvotki;'.,  i 


Gateway  Server  Satisfaction  Guarantee* 

If  you  are  not  completely  satisfied  with  your  Gateway 
server,  you  can  return  It  within  90  days  of  purchase. 

No  questions  asked.  Ask  a  Gateway  Sales  Representative 
for  complete  details. 

New  Gateway  Rack-Optimized  Servers 

Make  the  most  of  your  limited  space  and  budget  with 
Gateway's  high-perfonnance,  rack-optirrMzed  servers.  They 
easily  fit  into  any  envHonment  instantly  adding  capacity 
afKl  performance  for  your  mission<ritical  applications. 
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Prior  to  the  Siebel  rollout, 
there  was  no  formal  CRM  sys¬ 
tem  in  place  at  Raytheon  Air¬ 
craft,  a  subsidiary  of  Lexing¬ 
ton.  Mass. -based  Raytheon  Ca 
‘'We  identified  that  we  didn't 
have  any  type  of  customer 
memory,  and  we  cleaned  up 
our  act,”  Dolanski  said 

He  wouldn’t  disclose  the 
project’s  cost  but  said  Ray¬ 
theon  Aircraft  has  already  re¬ 
covered  SL4  million  of  its  in¬ 
vestment  through  increased 
sales.  The  Siebel  applications 
were  installed  for  13%  less  than 
or^inally  budgeted  and  were 
in  use  four  weeks  ahead  of 
schedule.  Dolanski  added  Now 
the  company  plans  to  extend 
the  software  to  its  airport  ser¬ 
vice  centers  so  woikers  there 
can  access  relevant  informa¬ 
tion  about  aircraft  owners. 

Saving  Time  and  Money 

Chicago-based  Boeing’s  com¬ 
mercial  aviation  services  unit 
is  preparing  to  retire  a  mix  of 
homegrown  Unix  and  main¬ 
frame  CRM  applications  in  fa¬ 
vor  of  Siebel’s  call  center  soft¬ 
ware,  said  Gabe  Hanzeli,  infor¬ 
mation  systems  director  for 
technical  services  and  modifi¬ 
cations  at  the  Boeing  division. 

Hanzeli  said  the  new  system 
will  cost  several  million  dol¬ 
lars  and  is  due  for  a  test  roll¬ 
out  in  the  first  half  of  next 
yean  The  Siebel  software  will 
let  Boeing’s  aircraft  support 
staff  access  customer  data 
from  a  single  screen,  be  said. 

Hopefully,  that  will  reduce 
the  time  it  takes  to  answer 
questions  from  customers, 
Hanzeli  noted  Boeing  also  ex¬ 
pects  the  Siebel  rollout  to  re¬ 
duce  its  internal  application 
maintenance  costs. 

CRM  is  just  starting  to  gain 
momentum  in  the  aviation  in¬ 
dustry,  said  Sheldon  Tkatch,  a 
senior  project  manager  at  Gar¬ 
rett  Aviation  Service  Centers, 
a  Tempe,  Ariz.-based  provider 
of  plane  maintenance  and 
modification  services.  In  Janu¬ 
ary  2002,  Garrett  began  using 
hosted  sales  and  service  appli¬ 
cations  from  Salesforce.com 
Inc.  The  software  has  helped 
Garrett  become  more  proac¬ 
tive  in  tracking  sales  i^portu- 
nities  and  contacting  cus¬ 
tomers,  Tkatch  said  I 
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U.S.  Agencies  Defend  Data  Mining  Plans 


BY  ORANT  GROSS  that  have  been  criticized  by 

WASHINGTON  privacy  advocates  told  Con- 

Govemment  officials  in  charge  gress  last  week  that  the  infor- 
of  two  data  mining  projects  mation  to  be  collected  will  be 


much  more  limited  in  scope 
than  opponents  have  feared. 

James  Loy,  director  of  the 
U.S.  Transportation  Security 


Administration  (TSA),  and 
Anthony  Tether,  director  of 
the  Defense  Advanced  Re¬ 
search  Projects  Agency 
(DARPA),  both  tried  to  as¬ 
suage  concerns  that  laige 
amounts  of  personal  data 


about  U.S.  citizens  will  be 
gathered  and  stored  as  part  of 
the  two  IT  projects.  Loy  and 
Tether  testiried  at  a  House 
subcommittee  hearing  on 
whether  data  minir^  pro¬ 
grams  could  help  improve 
national  security. 

The  proposals  have  also 
come  under  fire  from  members 
of  Congress  who  have  ques¬ 
tioned  how  the  data  mining 
technology  will  be  used  and 
what  kind  of  databases  will  be 
created  Rep.  William  Clay  (D- 
Ma)  said  at  the  hearing  that 
the  projects  have  “a  daric  cloud 
of  secrecy”  hanging  over  them. 

Taigeting  Terrorists 

The  TSA’s  Computer  Assisted 
Passenger  Prescreenii^  Sys¬ 
tem  II  (CAPPS  n)  will  an^yze 
the  name,  address,  phone 
number  and  birth  date  of  air¬ 
line  passengers,  in  an  effort  to 
detect  terrorists.  Loy  declined 
to  comment  on  how  the  TSA 
will  decide  whether  a  passen¬ 
ger  should  be  let  on  a  plane  or 
questioned  further. 

But  CAPPS  n  should  reduce 
the  number  of  false  positive 
identifications  that  ^e  govern¬ 
ment’s  existing  airline-passen¬ 
ger  profiling  system  produces. 
Loy  said.  He  called  the  current 
technology  flawed  because  it 
lacks  sophisticated  methods  of 
predicting  passenger  behavior. 

Loy  said  the  TSA  expects 
to  roll  out  CAPPS  n  by  mid- 
2004.  The  agency  has  no  plans 
to  save  information  about 
travelers  uiio  aren’t  flagged  as 
possible  terrorists,  he  added. 

Tether  said  DARPA’s  Total 
Information  Awareness  (TIA) 
research  project  is  deseed  to 
provide  the  FBI  and  other  fed¬ 
eral  agencies  with  tools  that 
can  be  used  to  mine  data.  But 
DARPA  doesn’t  plan  to  collect 
any  data  itself^  he  said. 

When  asked  how  DARPA 
will  ensure  that  personal  in¬ 
formation  caught  in  TIA’s  net 
is  correct.  Tether  said  that’s  up 
to  potential  users  like  the  FBI. 

“We’re  not  the  people  who 
collect  the  data.”  he  said. 
“We’re  the  people  who  supply 
the  analytic^  took  to  the  peo¬ 
ple  who  collect  the  data.”  I 


Gross  is  a  reporter  for  the 
IDG  News  Service. 


Got  Outsourcing 
Questions? 

Computerworid’s  New  IT  Executive  Summit  Series  Has  the  Answers 


If  you’re  an  IT  executive  in  an 
end-user  organization,  apply  to 
attend  Computerworld's  upcoming 
complimentary  halt-day  summit  on 
IT  Outsourcing:  The  Offshore 
Alternative. 

Robust  global  communication 
technologies  and  state-of-the-art 
security  tools  have  made  IT  out¬ 
sourcing  an  increasingly  viable 
option  to  achieve  ROI.  Part  of 
Computerworid’s  new  IT  Executive 
Summit  Series,  this  invitation-only, 
4-hour  summit  will  explore  how 
companies  are  realizing  tangible 
benefits  from  outsourcing  IT 
application  development, 
integration  and  management. 

Seating  is  iimKed,  so  appiy 
todayl 


Chicago,  Illinois 

Thursday,  May  15,  2003,  8;00am  to  Noon 
Palmer  House  Hilton,  “Parlor  H” 


8;00am  to  8;45am 
8;45am  to  9;C>0am 


9:00am  to  9:45am 


9:45am  to  10:15am 


Registration  and  Net%vorking  Breakfast 

Welcome  and  Opening  Keynote 
Outsourcing  Watch  2003: 

The  Best  of  Both  Shores 

Maryfran  Johnson,  Editor  in  Chief, 
Computerwoiid 

Industry  Update 

Evaluating  Your  IT  Sourcing  Options 

Bart  Firkins,  Managing  Partrier. 

Leverage  F^ners 

Business  Case  Study 

James  Beattie,  EVP  and  CTO, 

CCC  Information  Services 


10rt5am  to  10:30am  Refreshment  Break 


10:30am  to  11:30am  Outsourcing  Strategies 

Leadership  Strategies  In  Offshore 
Outsourcing 

Moderator:  Maryfran  Johnson, 

Editor  in  Chief,  Computerwortd 
Partelists: 

■  Jerry  McElhatton,  Senior  EVP 
of  Global  Technology  and  Operations. 
MasterCard  Interriational 
•  Joe  Drouin,  W  and  CIO,  TRW  Automotive 
e  Tasos  Tsolakis.  VP  of  Global  Technology 
Operations.  Global  Exchartge  Services 
a  James  Beattie.  EVP  ar>d  CTO. 

CCC  Information  Services 


u 


I  Maryfhtn 


11:30^  to  Noon  Open  Forum 


For  information,  call  Chris  Leger  at  508-820-8277 
or  to  register  online,  visit 
www.itexecutivesummit.com/outsourcing 
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PATRICIA  KEEFE 


rr  Does  Matter 


Kicking  up  the  debate  on  the  future 
of  IT  another  notch  is  Nicholas  G.  Carr’s 
sure-to-be-controversial  contention  in 
this  month’s  Harvard  Business  Review 
that  the  pervasiveness  of  IT  will  soon 
make  it  strategically  irrelevant.  Summing  up  his  po¬ 
sition  is  the  article’s  headline:  “IT  Doesn’t  Matter.” 


Bam!  Now  there's  a 
stance  sure  to  stir  up 
some  conversation 
around  the  data  banks. 

(To  read  an  interview 
with  Carr,  turn  to  page 
44.) 

On  the  one  hand,  the 
very  pervasiveness  of  IT, 
coupled  with  two  other 
trends  —  the  increasing¬ 
ly  technically  literate 
population,  and  the  ris¬ 
ing  integration  of  com¬ 
puter  technology  into  everything 
from  cars  tcrclothes  dryers  to  cloth¬ 
ing  —  severely  diminishes  the  mys¬ 
tique  that  has  always  surrounded  IT. 

The  idea  is  that  IT  has  become  as 
ordinary,  albeit  as  key.  as  the  less 
glamorous  accounting  or  manufac¬ 
turing  departments.  You  can't  run  a 
company  without  them,  but  they're 
nothing  to  get  excited  about.  Every¬ 
one  has  these  departments,  and  they 
pretty  much  do  the  same  things. 
Carr  reasons,  then,  that  these  de¬ 
partments  have  lost  whatever  com¬ 
petitive  or  strategic  edge  they  might 
have  once  provided. 

And  there  is  some  truth  to  that. 

For  example,  right  now.  we're  all  us¬ 
ing  cell  phones,  desktop  PCs  and 
laptops,  and  a  goodly  portion  of  us 
are  using  wireless  devices.  Yes.  there 
will  be  another  wave  of  technology. 
There  always  is.  It’s  like  a  force  of 
nature  that  you  can't  hold  back.  Carr 
is  right  ^ain  when  be  says  everyone 
will  eventually  line  up  to  use  that 
next  advance  in  technology,  creating 
a  level  playing  Held.  For  him.  it’s 
enough  that  IT  filters,  adapts  and 
manages  these  evolutions. 

But  technology  has  the  potential 


to  succeed  in  permeating 
almost  every  aspect  of 
our  lives  and  the  prod¬ 
ucts  we  use.  Some  might 
say  that  creating  all  that 
new  stuff  won’t  be  IT's 
The  R&O.  manufac¬ 
turing  and  design  groups 
will  be  responsible  for 
weaving  technology  ad¬ 
vances  into  consumer 
goods.  The  question, 
then,  for  IT  folks  is:  What 
role  will  we  play? 

IT  has  more  to  offer  than  mere  su¬ 
pervision.  It  could  become  a  combi¬ 
nation  of  tech  adviser  and  testing  lab 
for  many  of  these  products.  Or  it 
could  morph  away  from  building 
pure  technology  systems  that  run  a 
business  and  toward  building  tech¬ 
nology  into  the  services  and  prod¬ 
ucts  the  business  sells.  You  can't  gel 
more  aligned  with  business  goals 
than  that! 


General  Motors  is  off  to  a  good 
start  here.  Corporate  CIO  Ralph 
Syzgenda  years  ago  teamed  each  of 
his  group  CIOs  with  specific  depart¬ 
ment  heads.  He  wanted  his  CIOs  to 
understand  the  business  they  were 
serving  and  to  be  on  the  front  lines, 
ready  and  able  to  partner  on  creat¬ 
ing  solutions  to  business  problems. 

And  that  is  just  one  model  Unlike 
Carr,  1  don't  think  IT  has  to  dissolve 
into  an  entity  that  is  strictly  focused 
on  maintenance,  risk  avoidance  and 
cost-cutting.  Astute  CIOs  are  al¬ 
ready  practicing  this  in  some  form 
or  another. 

Yet  if  you  spend  too  much  time 
nursemaiding  the  past  or  practicing 
risk  mitigation  in  the  present,  then 
the  future  —  and  opportunity  along 
with  it  —  will  be  here  and  gone  be¬ 
fore  you  know  it.  We  still  need  IT 
leaders  who  can  think  conceptually, 
who  can  dream  of  ways  to  further 
business  goals  via  technological  ad¬ 
vances.  No  matter  what  your  pre¬ 
sent  circumstances,  you  need  to 
keep  an  eye  on  the  future. 

Carr  advocates  taking  a  more  de¬ 
fensive  posture  toward  IT  invest¬ 
ments.  But  sometimes  the  best  de¬ 
fense  is  a  good  offense.  What's 
needed  now  is  to  go  back  to  the 
chalkboard  and  figure  out  the  best 
strategy.  I 


PIMM  FOX 

rr  Warning; 
No  Badge, 
No  Access 

IMAGINE  THIS  SCENARIO: 
You  leave  your  computer 
unattended  while  you’re  in 
a  meeting,  and  someone  uses 
it  to  send  e-mail  with  sexual  innuen¬ 
dos  to  a  co-worker.  Next  thing  you 
know,  an  HR  representative  is  asking 
you  to  do  some  explaining. 

Or  what  about  shared  computers  in 
hospitals,  call  centers  or  financial  ser¬ 
vices  firms  with  open  floor  plans? 
Chances  are.  users  are  expected  to  log 
off  the  network  every  time  they  walk 
away  from  the  terminal  That's  sup¬ 
posed  to  thwart  unauthorized  access 
to  personal  or  sensitive  information. 
But  that  rarely  happens. 

Instead,  users  de¬ 
pend  on  you  Co  baby¬ 
sit  their  security 
needs.  They  want 
you  to  build  and  in¬ 
stall  systems  to  guard 
against  their  own 
lapses,  which,  as  you 
know,  are  the  biggest 
threat  to  fundamen¬ 
tal  security  policies 
and  procedures.  Peo¬ 
ple  just  don't  make 
the  effort,  and  until 
something  awful  happens,  you  can't 
even  get  them  to  rid  their  monitors  of 
yellow  sticky  notes  with  scribbled 
passwords.  That's  why  IT  security  has 
to  include  physical  systems  woven  in¬ 
to  the  daily  routine  of  each  employee. 

A  new  and  potentially  ubiquitous 
option  involves  RF-based  smart  cards 
linked  to  fingerprint  readers  that 
connect  via  the  USB  port  The  smart 
card  allows  for  a  security  net  of  your 
choosing  —  from  1  to  10  meters.  If 
you  travel  outside  of  that  range,  the 
computer  locks  up.  Come  back  within 
range,  and  the  screen  reverts  to  the 
last  image.  This  wireless  system  relies 
on  a  unique  personal  identifier  en¬ 
crypted  into  an  RF  badge. 

Coupled  with  the  fingerprint  reader 
—  another  IT  security  watchdog  — 
this  device  enables  you  to  determine 
vdio  has  used  any  computer  at  any 
given  time.  In  addition,  if  more  than 
one  person  has  access  to  a  particular 
PC,  the  screen  will  revert  to  the  im- 


age  appropriate  for  each  user. 

Manufactured  by  a  small  St.  Louis- 
based  company.  Access  Denied  Sys¬ 
tems  Inc.,  these  systems  are  being 
used  at  Washington  University,  also  in 
St.  Louis.  They  are  one  type  of  what  I 
predict  will  be  myriad  vendor  oflTer- 
ings  that  link  physical  security  and  ac¬ 
cess  to  IT  systems. 

it’s  a  good  way  to  take  aim  at  un- 
authori^  access  from  within  an  en¬ 
terprise.  That  type  of  system  could  be 
especially  important  in  health  care 
and  financial  services  companies, 
where  new  government  regulations 
are  designed  to  protect  patient  and 
customer  confidentiality. 

There’s  no  panacea  for  security 
threats.  Firewalls,  software  protection 
and  password  management  schemes 
are  for  naught  if  you’ve  already  got  a 
IVojan  horse  who  parks  in  the  com¬ 
pany  lot.  I 

MICHAEL 

GARTENBERG 

Wi-FL* 
Why  and 
Why  Not 

ITHOUT  A  DOUBT, 
one  of  the  few 
growth  areas  of  the 
industry  today  is  wireless 
oetworic  technolc^  built  around  the 
802.11X  standard.  According  to  my 
company,  Jupiter  Research,  corporate 
deployment  of 802.11  devices  (includ¬ 
ing  adapter  cards  and  access  points) 
will  reach  99  million  by  2008.  up  from 
14  million  in  2003  —  representing  a 
compound  annual  growth  rate  of  48%. 

llie  primary  key  to  this  grovrth  will 
be  standards  con^iliance.  The  expect¬ 
ed  ratification  of 802.Ug  and  802.11i 
this  year  will  provide  the  backward 
compatibility  and  security  that  enter¬ 
prises  seek,  while  combined  industry 
efforts  led  by  Intel  (with  its  Ontrino 
chip),  Cisco  Systems  and  the  Wi-Fi  Al¬ 
liance  will  help  interoperability  be¬ 
tween  vendor  products  and  simulta¬ 
neously  raise  corporate  awareness. 

There  are  a  number  of  benefits  to 
deploying  corporate  wireless  LANs. 
iKdhich  should  put  them  on  most  IT  de¬ 
partments’  to-do  lists  in  2003.  But  you 
need  to  know  a  few  caveats. 

There  are  cost  savings  associated 
with  using  a  WLAN  instead  of  tradi¬ 
tional  wired  technology,  but  saving 


money  isn’t  going  to  be  the 
biggest  driver.  Rather,  the 
additional  productivity 
gains  associated  with  wire¬ 
less  are  what  make  WLANs 
useful  and.  combined  with 
the  cost  savings,  create  a 
powerful  argument  to  get  a 
WLAN  project  approved. 

Before  you  run  out  and 
Stan  cutting  ptirchase  or¬ 
ders  for  Wi-Fi  access 
points,  remember  that  one 
stae  WLAN  does  not  flt  all 
organizations.  Organiza¬ 
tions  of  different  sizes  will 
have  different  issues  to  re¬ 
solve.  Large  companies  will  have 
greater  concerns  about  security*  and 
will  be  focused  on  the  confusion  over 
evolving  security  standards  that  bin¬ 
der  adoption  in  that  market.  Smaller 
businesses  should  first  focus  on  justi¬ 
fying  initial  start-up  costs  and  look  for 
ways  to  lower  those  as  much  as  possi¬ 
ble.  These  problems  are  critical  for  IT 
departments  to  address  prior  to  imple¬ 
mentation  but  can  be  easily  resolved 
with  some  upfront  planmng. 


For  smaller  companies, 
one  way  to  drive  down 
costs  is  to  use  existing 
standards-based  products, 
such  as  those  wi^  802ilb 
technology.  That  approach 
is  technically  viable  and 
ensures  compatibility  with 
future  investments.  As 
costs  for  802.11b  equip¬ 
ment  fall  further,  these 
purchases  will  be  much 
easier  to  justify. 

Big  companies  should 
also  support  existing  stan¬ 
dards,  such  as  802.Ub.  but 
in  addition  they  need  a 
road  map  toward  802.Ug  and  802.Ui 
compliance  in  the  products  they  buy 
via  software  and/or  firmware  up¬ 
grades.  They  should  be  prepar^  to  of¬ 
fer  multimode  and  802.Ug  products 
once  these  standards  are  fiiUy  ratified. 
While  large  companies  are  least  likely 
to  be  concerned  about  backward  com¬ 
patibility.  they  would  be  best  served 
by  taking  a  risk-averse  approach  and 
waiting  for  ratified  802.Ug  technolc^ 
rather  than  risking  short-term  deploy¬ 


ments  of  equipment  that  may  become 
expensive  to  upgrade  or  may  not  in¬ 
teroperate  with  new  gear 

Finaily,  improved  security  must  be¬ 
come  an  important  faaor  in  selecting 
WLAN  products.  This  remains  the  big¬ 
gest  barrier  to  wide-scale  deployment. 

The  power  of  WLANs  is  readily  ap¬ 
parent  The  productivity  of  knowledge 
workers  greatly  increases  when  mo¬ 
bile  technology  —  lightweight  laptops. 
Tablet  PCs  and  powerful  handheld  de¬ 
vices  —  are  enhanced  with  high-speed 
WLAN  connections.  Because  more 
users  arc  dependent  on  network  con¬ 
nections  in  order  to  be  productive. 
WLANs  can  help  extend  this  reach 
and  therefore  justify  their  costs  in 
terms  of  ROI  gained.  The  key  is  to  bal¬ 
ance  the  gains  and  focus  on  the  issues 
that  are  appropriate  to  your  business, 
then  deploy  and  watch  the  accolades 
come  into  your  in-box  —  wirelessly,  of 
course.  I 


WMTOHOnMM? 

OUore  ookffNnists  Mo  to  antwBS  otf  pfewcMs 
col/ins  are  on  our  Wtt  sie. 


READERS’  LEHERS 


Thoughts  on  Giving  CFOs  noject  brio 


CiOiMEEDtobecareMatoul 
what  they  reveal  to  (he  (^FOs 
who  want  infonttahon  lor  quarterty 
eammos  reports  that  cotnply  with 
the  SarttMies-Oxley  Act  pC^ 
Push  IT  Managere  for  Mm  Mo 
About  fMtjects.*  QuicMjnk  37^]. 
Strategic  ptoiects  and  inves&nents 
in  (T  make  the  fulue  of  the  compa¬ 
ny.  It  this  infbtinatlon  Is  made  pub* 
ia  close  scniliny  by  competitors 
Ctfi  reveal  a  lot  about  company 
directiorL 
NaufMnShdkh 
Functional  OTVhttect 
Meravanre  Cotjk  Milwaukee 

CF0»  AMO  THOR  C*ievel  peers. 

nckjdino  QOs.  should  have 
been  doing  this  a  long  time  ago.  If 
they  havenX  they  deserve  the 
problems  that  ham  ansen.  I  moved 
from  beng  the  manager  of  a  $300 
miion  chatnkal  plant  to  managing 
IT  projects  10  yeais  ago  precisely 
because  of  the  issue  raised  by  this 
article.  I  have  delivered  value  be¬ 
cause  I  cMnl  lei  Ihe  geeks  BS  ttto 
organization  about  why  they  didn't 
haire  to  folow  the  laws  of  ROI. 
FredRcUng 

DaOas.  gungfi@ya/u>o.com 


The  MSTALUTNM  of  system 
develocirrient  inethodologies 
wouUsofvealtheprobtemsde- 
scrited  in  the  article,  but  QOs 
would  haM  to  sacnlice  some  of 
dieir  *smoka*«id-n«Tois*  power 
Memational  eKperience  with 
methodologres  has  proved  thar 
worth.  Sadhf.bemgonlimeandun- 
der  budge!  6n1  as  important  to  IT 
departments  as  retaining  power. 
Afiikew  H.  Oben 
Monogirig  director. 

TKun  /nremarional  Crtx^ 
GainesvtUr.  floL. 
reamolsori@f>igp{anc(.com 


Don't  Export  Jobs 

MACHU¥EUJ  nof  to  use 

mercenanes:  If  they're  lousy, 
theyliose  your  kingdom  for  you. 
and  if  they're  good.  Iheyl  take  it 
away  from  you  My  coroKary;  The 
same  thing  goes  for  outsourced  IT 
workers  flxporling  IT  Jobs.* 
(3uckLM(  38007}. 

Stewart  Dean 

Unzz  Systems  administrator. 
BardCoOege. 

Annandalt-on-Hudsoru  N.Y., 
sdeatt@banLedu 


MS 


lArBEWESHOuio  oiitsource 
I  U  S.  executive  managers, 
wdh  thar  excessive  pay  and  perks, 
instead  of  fT  workers.  After  al. 
managers  consume  most  of  the 
overhead.  Any  decent,  educated 
person  with  common  sense  can 
pertonn  their  job  funebors. 

llwonTbelheCtvnese.the\re(- 
namese.  the  Russans  or  al  of  the 
terrorists  combmed  who  destroy 
this  country;  a  be  American 


OragllMehMi 

Cleveland 

NOW  I  REAUZE  why  they  cd  It 
*6lue  Monday.*  Sheesh.  could 
you  run  these  depressing  stones  on 
Thwsdays? 

MicliaelJenea 
Programmer/anaiyst. 
SavaimaK  (To.. 
encQones$>emailjiqpfu.edu 


A  World  View 

I  CAR  MREn  places  tee  toda. 

Pakistan.  Ruaeia  and  Ihe  Phip- 
pmesmanagarsandseaintyex- 
perls  with  better  quatecabons  than 
youl  be  Ihefy  to  lind  fi  any  compa' 
nyin1heU.S 

In  fari,  I  suggest  that  most  of  our 


iegslators.  CIOs  and  government 
conhactors  should  be  drawn  from 
the  ranks  of  the  hungry  and  hard¬ 
working,  colege-educated  person¬ 
nel  available  n  those  places. 

Sending  vrark  offshore  IS  the 
econonacequwalent  of  people  vot- 
ng  wkh  their  feel  HopaUy.  the 
nevitabiB  equiltoralion  of  wage  lev¬ 
els  across  e  nteons  whose  bor¬ 
ders  arenT  dosed  to  commeioe  wi 
eventually  resull  in  everytiody  in  the 
world  bai^  bettor  off.  and  not  m 
the  U.S.  becomng  a  Thvd  World 
country,  w^  barefoot,  starving 
peopto 

David  H.  Em 

Cf  O.  Internet  Security  COrp., 
Sunnyvale,  Cal^ 
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Dave  Passmore  is  the  Vir;ginia>based  Research  Director  for  the 
Burton  Group.  Named  one  of  Network  World  Magazine's 
"50  Most  Powerful  People  in  the  Networking  Industry.” 
Passmore  is  Burton  Group's  "thought  leader''  in  the 
area  of  network  architecture. 
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A  few  minute  with  Dave  Passmore. 
Research  Director.  Burton  Group 


Mobility — Access  Anywhere,  Anytime 


>  The  term  “mobility”  is  being  used  in  many  different 
contexts.  How  do  you  define  it? 

Increasingly,  the  meaning  of  mobility  is  becoming  aligned  with 
the  concept  of  "untethered  communications'*  —  it  assumes 
portable  devices  that  will  support  some  type  of  wireless  voice 
or  wireless  data  networking  ^nctionality.  Mobility  implies  the 
use  of  wireless  LANs,  cellular  phone  systems  or  various  wire¬ 
less  wide-area  or  metro  networking  services.  Ultimately, 
mobility  will  permit  a  device  such  as  a  laptop  computer  or 
personal  digital  assistant  (PDA)  to  seamlessly  roam  between 
these  various  wireless  communications  systems  without  the 
user  having  to  reconnect  or  login  again.  In  this  context,  wire¬ 
less  geographical  coverage  will  be  ubiquitous. 

>  Public  Wi-R  (802.11)  wireless  networks  are 
emerging  as  an  attractive  altemative  to  cellular 
r>etworks.  What  are  the  benefits  driving  this 
growth?  What  are  potential  barriers  to  Wi*Fi*s 
successful  deployment  as  a  public  carrier  service? 

The  emerging  industry  view  is  that  public  Wi-Fi  networks  will 
be  complementary  rather  than  competitive  to  cellular  net¬ 
works.  In  hct.  nony  of  the  public  Wi-Fi  hotspots  are  allied 
with  or  operated  cellular  earners  in  an  attempt  to  provide 
compreh^srve  local  and  wide-area  wireless  coverage  along 
t^nth  a  single  monthly  bill  for  customers.  Wireless  LAN 
(WLAN)  hotspots  are  becoming  extremely  popular  due  to 
their  ease  of  use  and  the  abundant  Internet  access  bandwidth 
provided  more  than  10  times  what’s  provided  by  the  latest 
cellular  data  network  offerings. 

>  Convetgence  of  voice  and  data  communications  is 
accelerating  on  traditional  wireline  networks.  Do 
you  see  convergence  on  wireless  networks  also 
gaining  wide  acceptance?  How  soon? 

Voice/data  convergence  is  already  happening  in  the  wide  area, 
as  next-generation  2.SG  and  3G  data  networking  services  are 
being  added  to  cellular  voice  networks.  Elut  many  businesses 
are  expected  to  implement  their  own  converged  wireless  net¬ 
works  that  support  Wi-Fi  phones.  Some  issues  must  be 
addressed  to  ensure  traditional  "total  quality”  voice,  but  these 
challenges  should  be  worked  out  with  products  chat  imple¬ 


ment  die  new  802.1 1  e  WLAN  quality  of  service  standard 
within  the  next  two  to  three  years. 

>  Enterprise-wide  deployments  of  WLANs  can 
become  very  complex  to  implement  and  manage. 
Do  you  see  a  strong  market  opportunity  for  man¬ 
aged  services  of  WLANs? 

Some  organizations  will  choose  to  outsource  the  management 
of  their  WLANs  in  the  same  way  that  they  outsource  man¬ 
aged  services  for  their  wired  LAN  and  WAN  infrastructures. 
However,  one  of  the  hottest  new  technology  developments 
may  address  much  of  the  WLAN  comple^uty  issue.  About  a 
dozen  vendors  (startups  and  established  vendors)  have  intro¬ 
duced  "WLAN  switches”  that  re-architect  a  site's  WLAN 
environment  into  a  single  Integrated  system  and  simplify  the 
administration,  security  and  deployment  of  complex  WLAN 
environments.  Of  course,  the  installation  and  life-cycle  man¬ 
agement  of  these  next-generation  WLAN  systems  also  repre¬ 
sents  an  opportunity  for  managed  services  providers  and 
systems  integrators  to  provide  their  expertise  in  this  sector. 

>  The  adoption  of  wireless-enabled  devices  (both 
laptops  and  PDAs)  is  creating  a  management 
nightmare  for  IT  to  support.  Do  you  see  the 
management  of  mobile  devices  as  another  strong 
market  opportunity  for  managed  services? 

The  management  of  laptops  and  PDAs  is  certainly  much  more 
complex  ti^n  it  used  to  be;  operation  often  requires  "locking 
down”  these  devices  so  chat  they  can’t  pick  up  stray  druses, 
and  to  ensure  chat  appropriate  security  measures  are  used.  An 
important  issue  is  establishing  comprehensive  security  policies 
for  wireless-enabled  devices  —  particularly  when  employes 
want  to  purchase  and  use  their  own  low-cost  PDAs  or  laptops 
on  corporate  networks.  Many  organizations  are  turning  to 
managed  services  providers  for  help  in  this  area. 

For  more  information,  please  call  800-674-8647  x3S5 
or  visit  www.unisys.com/rietworkservices 
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La-Z-Boy  thought 
managing  its  servers 
would  never  be  simple. 
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Wading  Into  IP  Telephony 

A  hybrid  IP/PBX  approach 
allows  some  companies  to 
realize  the  benefits  of  IP 
telephony  without  taking 
an  expensive  plunge. 

Page  28 


QUICKSTUDY 

Figliting  Spam 

Software  that  controls  the  How  of  un¬ 
wanted  commercial  e-mail  uses  a  variety 
of  techniques,  including  blacklisting, 
‘Vhitelisting”  and  Bayesian  analysis,  to 
keep  up  with  the  spammers.  Page  33 


FUTURE  WATCH 

Computers  That  Cajole 

Persuasive  technologies,  which  are 
striving  to  use  computers  to  chaise 
attitudes  and  behaviors,  will  require  a 
new  sensitivity  on  the  part  of  developers 
and  IT  managers.  Page  32 


Data  center  automation  software 
promises  to  help  companies  cut 
administrative  costs  and  improve 
efficiencies.  By  JaikumarVijayan 


As  A  COMPANY  that  hosts 

supply  chain  operations  for 
customers  such  as  Verizon 
Wireless  and  the  U.S.  Postal 
Service,  New  Breed  Inc. 
has  a  crucial  need  for  infra¬ 
structure  availability  and  reliability. 

As  part  of  its  efibrts  on  those  fronts, 
the  company  is  using  software  from 
Opsware  Inc.  in  Sunnyvale,  Calif.,  to 
automate  several  day-to-day  opera¬ 
tional  tasks  across  its  data  centers. 

Manual  administrative  duties  such 
as  making  conDguration  chaises,  up¬ 
grading  aii^licaticms  and  rolling  out 
patches  have  been  automated  using  the 
software.  And  Opsware  has 
also  allowed  Hi^  Point, 

N.C.-based  New  Breed  to 
boost  its  disaster  recovery 
capabilities  through  the 
software’s  ability  to  store  and  use  data 
center  configuration  data  to  rebuild 
downed  systems. 

The  net  result:  better  change  man¬ 
agement  processes,  speedier  problem 
resolution  and  lower  administration 
costs,  says  New  Breed  CIO  A^iiaque 
Chowdhury. 

“We  have  about  400  servers  with 
nearly  5TB  of  data  and  almost  100  peo¬ 
ple  in  our  data  center,”  Chowdhury 
says.  The  hope  is  that  Opsware's  tech¬ 
nology  will  “enable  high  levels  of  relia¬ 
bility  and  reduce  cycle  time  in  deliver¬ 
ing  change  at  a  lower  cost.”  he  adds. 

New  Breed  isn’t  alone.  As  IT  organi¬ 
zations  come  under  increasing  pres¬ 
sure  to  cut  costs,  e]q)ect  to  see  a  grow¬ 
ing  number  of  them  move  to  automate 
data  center  operations,  says  Corey  Fer- 
engul,  an  analyst  at  Stamford,  Conn.- 
ba^  Meta  Group  Inc.  Many  compa¬ 
nies  have  already  tapped  other  cost- 
cuttii^  opportunities  —  through  mea¬ 
sures  su^  as  staff  cuts  and  reduced 
work  hours  —  and  are  now  looking  to 
data  center  automation  as  a  new  way 
to  rein  in  costs,  Ferengul  says. 

“This  whole  automation  trend  is  a 
pretty  fundamental  one,”  says  Cbowd- 
bury.  Tou  can't  be  competitive  in  cost 
and  pricing  unless  you  are  able  to  op¬ 
erate  with  a  lower  cost  structure.” 


But  to  take  advantage  of  such  tecb- 
Dok^ies,  companies  will  first  need  to 
put  in  place  good  processes  that  easily 
lend  themselves  to  automation,  Feren¬ 
gul  says.  Products  that  are  currratly 
available  are  largely  immature  and 
untested  in  enterprise  environments, 
with  most  vendors  havirtg  fewer  than 
10  customers,  he  notes. 

“It  is  also  still  not  established  iriiat 
the  core  criteria  is  that  users  are  kxA- 
ing  for."  he  says.  As  a  result,  "every 
vendor  has  their  own  take  and  is  at- 
ucking  the  market  in  their  own  way.” 

Broadly  speaking,  data  center  auto¬ 
mation  tools  aim  to  enable  intelligent 
and  automatic  deployment 
and  provisioning  of  hard¬ 
ware.  software,  applications 
and  services.  The  knowl¬ 
edge  behind  repetitive, 
time-consuming  systems  administra¬ 
tion  tasks  —  such  as  upgrading,  chang- 
managing  and  configuring  equip¬ 
ment  —  is  encapsulated  into  and  exe¬ 
cuted  by  autom^ion  software,  based  on 
user-defmed  preferences  and  policies. 

For  example,  using  such  tools,  a 
company  could  centrally  distribute  and 
manage  new  applications,  security 
patches,  user  profiles  and  passwords 
across  data  center  systems.  Or  those 
tools  could  be  used  to  provision  addi¬ 
tional  hardware  or  storage  resources  to 
applications  on  the  fly. 

The  savii^  come  from  the  reduced 
d^>endence  on  systems  administrators 
and  the  shorter  time  it  takes  to  imple¬ 
ment  changes,  says  Nick  Van  der 
Zweep,  a  director  at  Hewlett  Packard 
Ca's  Enterprise  Systems  Group. 

A  Range  of  Options 

Data  center  automation  tools  vary 
widely  in  capabilities  and  functions. 

HFs  Utility  Data  Center  and  Sun 
Microsystems  lnc.‘s  N1  technologies, 
for  instance,  allow  users  to  do  oo- 
demand  provisioning  of  consolidated 
hardware,  storage  and  network  equip¬ 
ment.  The  techrologies  work  by  aggre¬ 
gating.  virtualiziQg  and  sharing  such 
resources  across  mult^ile  data  center 
appUcatiOQS. 
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Another  example  of  automation  soft¬ 
ware  is  Opsware  System  3.5.  which  fo¬ 
cuses  more  on  the  automation  of  soft¬ 
ware  processes. 

Opsware 's  technology’,  for  instance, 
aims  to  enable  automated  deployment 
of  operating  systems,  applications  and 
databases  across  multiple  ser\’ers.  In 
addition,  it  allows  users  to  centrally 
identify  and  patch  servers  that  need  to 
be  secured  and  to  deploy  or  roll  back 
code.  L’ontent  and  configurations  of 
multiple  ser\  ers.  says  Tim  How  e,  chief 
technology  ofHcer  at  Opsware. 

FVovisiofiing  Strategy 

Users  can  define  and  encapsulate  spe¬ 
cific  policies  relating  to  their  applica¬ 
tion  environments  —  like  optimal  con¬ 
figuration  and  security 
settings  —  which  Op¬ 
sware  uses  when  deploy¬ 
ing  applications  and  ser¬ 
vices,  Howe  says- 

The  software  works  by 
collecting  a  wide  range  of 
infrastructure  informa¬ 
tion  from  agent  software 
chat's  installed  in  data 
center  hardware.  A  cen¬ 
tralized  policy  engine 
uses  that  information 
when  deploying  sof^are 
or  making  changes  that 
impact  the  infrastructure. 

Opsware  3.5  also  holds  a 
complete  blueprint  of  the  software  in¬ 
frastructure  in  a  data  center  that  al¬ 
lows  companies  to  recover  quickly 
from  disasters. 

Tira  Wireless  Inc.  in  Toronto  is  us¬ 
ing  software  from  Think  Dynamics 
Inc.,  also  in  Toroniix  to  automate  the 
manner  in  which  its  hardware  allocates 
resources  to  applications. 

The  company  is  using  the  Think- 
Control  software  suite  to  tie  its  exist¬ 
ing  Wintel  servers  to  a  bank  of  standby 
machines  with  idle  capacity.  Think- 
Control  uses  information  gathered 
from  third-party  network  management 
products  such  as  HP  Open  View  and 


We  have 
taken  all  of 
the  manual  fingere 
on  keyboard  user 
account  creations 
and  automated 
them,  [resulting 
in  lower  costs  and 
better  efficiencies]. 

TOM  KING.  CHIEF  INFORMA 
TION  SECURITY  OFFICER, 
LEHMAN  BROTHERS  HOLDINGS 


Computer  Associates  International 
Inc.’s  Unicenter  to  monitor  CPU  uti¬ 
lization  rates  on  the  Wintel  servers. 
When  CPU  utilization  on  any  box  ex¬ 
ceeds  a  certain  threshold,  the  software 
automatically  kicks  in  and  brings  in 
fresh  resources  from  the  standby  pi>ol. 
says  Chris  Prendergast.  Tira's  director 
of  operations. 

When  CPU  utilization  drops  below 
the  predefined  threshold.  ThinkCon- 
trol  automatically  releases  the  e.xcess 
capacity  back  to  the  common  pool. 

The  approach  has  eliminated  the 
need  to  continually  add  and  configure 
hardware  to  handle  workload  spikes. 
Prendergast  says.  Many  of  the  capaci¬ 
ty  planning  and  performance  monitor¬ 
ing  tasks  that  used  to  be  done  manual¬ 
ly  are  now  done  by 
ThinkControl. 

"We  were  having  a  dif¬ 
ficult  time  modeling  the 
hardware  requirement  to 
support  users  as  adop¬ 
tion  (of  Tira's  services] 
ramped  up.”  Prendergast 
says.  Without  Think  Dy¬ 
namics'  software,  the  op¬ 
tion  would  have  been  to 
buy  large,  grossly  under¬ 
utilized  dedicated  sy.s- 
tems  for  each  application 
to  handle  unexpected 
spikes. 

The  temporary  provi¬ 
sioning  offered  by  Think  Dynamics  "is 
proving  to  be  a  better  option."  Pren¬ 
dergast  says. 

Identifying  Targets 

Some  tools  aim  to  help  users  automate 
key  data  center  administration  tasks. 

Investment  firm  Lehman  Brothers 
Holdings  Inc.,  for  instance,  is  using 
software  from  New  York-ba,sed  Thor 
Technologies  Inc.  to  automate  the  ad¬ 
ministration  of  user  application  access 
rights,  according  to  Tom  King,  chief 
information  security  officer  at  Lehman 
Brothers. 

The  software  automatically  controls 
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user  access  to  applications  based  on 
policy  and  keeps  up  with  changes  to 
business  rules  or  employee  status, 
without  requiring  the  administrator  to 
reset  or  change  anything,  according  to 
Nancy  Colwell,  a  director  at  Thor. 

"lust  like  any  other  firm  our  size,  it 
is  quite  a  challenge  to  efficiently  and 
consistently  apply  all  of  the  different 
rules  around  user  provisioning  to  get 
people  into  and  out  of  systems  quickly 
[and  reliably],"  King  says.  Lehman 
Brothers  plans  to  expand  use  to  all 
12.5(X)  of  its  employees. 

"We  have  taken  all  of  the  manual  fin¬ 
gers  on  keyboard  user  account  crea¬ 
tions  and  automated  them,"  resulting 
in  lower  costs  and  better  efficiencies. 
King  says. 

But  the  key  to  such  benefits  lies  in 
careful  planning.  Ferengul  says.  Care 
needs  to  be  taken  and  lots  of  testing 
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needs  to  be  done  before  companies  en¬ 
trust  key  administrative  tasks  to  auto¬ 
mation  software,  says  Prendergast. 

"TTiere  is  an  aspect  of  testing  and 
validation  this  thing  needs  to  go 
through  before  it  can  be  deployed," 
Chowdhury  says.  "There  can  be  a  huge 
impact  on  productivity  if  this  thing 
goes  haywire." 

This  is  especially  important  because 
the  software  is  still  highly  immature, 
he  adds. 

It’s  also  crucial  that  the  software  can 
be  customized  to  fit  an  organization’s 
specific  needs.  King  says.  Otherwise 
users  can  get  locked  into  proprietary 
interfaces,  he  says. 

And  not  all  processes  can  be  easily 
automated,  Ferengul  says.  ITiough  a  lot 
of  administrative  tasks  can  be  ct^ified 
into  such  software,  there  are  special¬ 
ized  tasks  that  cannot.  I 
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Opswwelnc. 

Sunnyvale.  Caht. 

MAIN  PRODUCT  Opsware  System  3.6 

WHAT  rr  DOES  Enables  IT  organizations 
to  automaheaHy  provision,  deploy,  change 
and  operate  multiple  applicaiion  and  oper¬ 
ating  systern  software  stacks  across  rnulti- 
pie  har^re  platforms  and  data  centers. 


BladeLogIcInc. 

Bedford.  Mass. 

MAIN  PRODUCT  BladeLogic  Configuration 
Manager 

WHAT  IT  DOES  Automates  server  and  appli¬ 
cation  provisioning  on  Solans.  HP-UX.  AIX. 
Linux.  NT  and  Windows 2000  systems.  Also 
automates  system  configiiration  changes. 


Jareva  Technologies  Inc. 

Sunnyvale.  Calif. 

(Acquired  by  Ventas  Software  Corp.) 

MAIN  PRODUCT  OpForce  IT  Automation  Suite 

WHATIT  DOES  Automates discmreiy and 
recording  of  hardware  and  software  inventory, 
tracking  software  licenses,  provisioning 
servers,  setting  up  admimslrator  and  user 
access  and  provistoning  servers. 


'Hiink  Dyrwunics  Inc. 

Toronto 

MAIN  PRODUCT  ThinkControl  Suite 

WHAT  IT  DOES:  Provides  policy-based 
management  of  computing  resources  and 
service-lev^  ol^ectives  through  automation 
of  infrastructure  provisionmo.  capacity  man¬ 
agement  and  service-level  management. 
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Another  example  of  automation  soft- 
ware  is  Opsware  System  3^  which  fo¬ 
cuses  more  on  the  automation  of  soft¬ 
ware  processes. 

Opsware’s  technology,  for  instance, 
aims  to  enable  automated  deployment 
of  operating  systems,  applications  and 
databases  across  multiple  servers.  In 
addition,  it  allows  users  to  centrally 
identify  and  patch  servers  that  need  to 
be  secured  and  to  deploy  or  roll  back 
code,  content  and  conngurations  of 
multiple  servers,  says  Tun  Howe,  chief 
lechnolog)'  officer  at  Opsware. 

fttwisioning  Strategy 

Users  can  define  and  encapsulate  spe¬ 
cific  policies  relating  to  their  applitk- 
tion  enviroiunents  —  tike  optimal  con¬ 
figuration  and  security 
senings  —  which  Op¬ 
sware  uses  when  deploy¬ 
ing  applications  and  ser¬ 
vices.  Howe  says. 

The  software  works  by 
collecting  a  wide  range  of 
infrastructure  informa¬ 
tion  from  agent  software 
that’s  installed  in  data 
center  hardware.  A  cen¬ 
tralized  polky  engine 
uses  that  information 
when  deploying  software 
or  makii^  changes  that 
impact  the  inftastructure. 

Opsware  3J  also  holds  a 
complete  blueprint  of  the  software  in¬ 
frastructure  in  a  data  center  that  al¬ 
lows  companies  to  recover  quickly 
from  disasters. 

'Hra  Wireless  Inc.  in  Toronto  is  us¬ 
ing  software  from  Think  Dynamics 
Inc.  also  in  Toromo,  to  automate  the 
manner  in  which  hs  hardware  allocates 
resources  to  applications. 

The  company  is  usii^  the  Think- 
Control  software  suite  to  tie  its  exist¬ 
ing  Wintel  servers  to  a  bank  of  standby 
machines  with  idle  capacity.  Think- 
Control  uses  information  ^thered 
from  third-party  network  management 
products  such  as  HP  Open  View  and 


Computer  Associates  International 
lnc.'s  Unicenter  to  monitor  CPU  uti¬ 
lization  rates  on  the  WIntei  servers. 
When  CPU  utilization  on  any  box  ex¬ 
ceeds  a  certain  threshold,  the  software 
automatically  kicks  in  and  brings  in 
fresh  resources  from  the  standby  pool, 
says  Chris  Prendergast,  Tira’s  director 
of  operations. 

When  CPU  utilization  drops  below 
the  predefined  threshold.  ThinkCon- 
trol  automatically  releases  the  excess 
capacity  back  to  the  common  pool 

The  approach  has  eliminated  the 
need  to  continually  add  and  configure 
hardware  to  handle  workload  spikes. 
Prendergast  says.  Many  of  the  capaci¬ 
ty  planning  and  performance  monitor¬ 
ing  tasks  that  used  to  be  done  manual¬ 
ly  are  now  done  by 
ThinkControl. 

“We  were  having  a  dif¬ 
ficult  time  modeling  the 
hardware  requirement  to 
support  users  as  adop¬ 
tion  [of  TTra’s  servicesj 
ramped  up,"  Prendergast 
says.  Without  Think  Dy¬ 
namics'  software,  the  op¬ 
tion  would  have  been  to 
buy  large,  grossly  under¬ 
utilized  dedicated  sys¬ 
tems  for  each  application 
to  handle  unexpected 
spikes. 

The  temporary  provi¬ 
sioning  offered  by  Think  Dynamics  "is 
proving  to  be  a  better  opdon,”  Pren¬ 
dergast  says. 

Identifying  Targets 

Some  tools  atm  to  help  users  automate 
key  data  center  administration  tasks. 

Investment  firm  Lehman  Brothers 
Holdings  loc.  for  instance,  is  using 
software  from  New  York-based  Thor 
Technologies  Inc.  to  automate  the  ad¬ 
ministration  of  user  application  access 
rights,  according  to  Tom  King,  chief 
information  security  officer  at  Lehman 
Brothers. 

The  software  automatically  controls 


user  access  to  applications  based  on 
policy  and  keeps  up  with  changes  to 
business  rules  or  employee  status, 
without  requiring  the  administrator  to 
reset  or  change  anything,  according  to 
Nancy  CohveU.  a  director  at  Thor. 

"Just  like  any  other  firm  our  size,  it 
is  quite  a  challenge  to  efficiently  and 
consistently  apply  all  of  the  different 
rules  around  user  provisioning  to  get 
people  into  and  out  of  systems  quickly 
[and  reliably].*’  King  says.  Lehm^ 
Brothers  plans  to  expand  use  to  all 
12300  of  its  employees. 

"We  have  taken  all  of  the  manual  An¬ 
gers  on  keyboard  user  account  crea¬ 
tions  and  automated  them.’*  resulting 
in  lower  costs  and  better  efficiencies. 
King  says. 

But  the  key  to  such  benefits  lies  in 
careful  planning.  Ferengul  says.  Care 
needs  to  be  taken  and  lots  of  testing 


needs  to  be  done  before  companies  en¬ 
trust  key  administrative  tasks  to  auto- 
maticm  software,  says  Prende^asL 

"Hiere  is  an  aspect  of  testing  and 
validation  this  thing  needs  to  go 
throi^  before  it  can  be  deployed," 
Cbowdhury  says.  There  can  be  a  huge 
impact  on  productivity  if  this  thing 
goes  haywire.” 

This  is  espiecially  important  because 
the  software  is  sdll  highly  immature, 
he  adds. 

It's  also  crucial  that  the  software  can 
be  customized  to  fh  an  organization’s 
specific  needs.  Ring  says.  Otherwise 
users  can  get  locked  into  proprietary 
interfaces,  he  says. 

And  not  all  processes  can  be  easily 
automated.  Ferengul  says.  Though  a  lot 
of  administrative  tasks  can  be  codified 
into  such  software,  there  are  special¬ 
ized  tasks  that  cannot  k 


nWBhave 
taken  al  of 
ttw  manual  fingers 
on  keyboard  user 
account  creaiions 
and  automated 
them,  [resulting 
in  lower  costs  and 
better  effictendes]. 
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David  stever.  man¬ 
ager  of  communica¬ 
tion  technology  ser¬ 
vices  at  PPL  knows 
that  IP  telephony  is 
the  future.  He  al^ 
knows  that  his  com¬ 
pany  (formerly  known  as  Pennsylvania 
Power  &  Light)  has  a  massive  invest¬ 
ment  in  a  traditional  voice  network. 
With  3,000  lines  and  a  wiring  infra- 
stnicture  at  its  Allentown  headquar¬ 
ters  that  Stever  describes  as  “ch^eng- 
ing.”  the  utility  selected  an  IP-enabled 
private  branch  exchange  (PBX)  tele¬ 
phone  system  from  Nortel  Networics 
Ltd.  when  it  decided  to  upgrade  its 
network.  *^6  needed  to  get  our  feet 
wet  [with  IP  telephony],  but  we  need¬ 
ed  a  proven,  mature  system.”  be  says. 

On  the  other  hand,  in  200L  when  the 
Chancer  Therapy  &  Research  Center 
consolidated  focilities  and  expanded 
its  headquarters  in  San  Antonio,  the 
organization  was  workiog  from  a  clean 
sheet  of  paper  —  and  opted  for  a  pure 
IP  setup  from  CUsco  Systems  Inc  Chief 
Technology  Officer  Mike  Luter  says 
the  network’s  speed  and  manageability. 


along  with  the  “increased  mobility” 
enjoyed  by  physician  end  users,  made 
pure-play  the  way  to  go. 

These  experiences  neatly  summarize 
the  telephony  choices  IT  organizations 
are  making  today.  Legacy  PBXs  are 
rapidly  being  supplanted  by  IP-enabled 
"hybrids,"  which  analysts  say  offer 
most  of  the  advantages  of  pure  IP  sys¬ 
tems  (such  as  the  ability  to  easily 
change  extensions  and  to  use  a  new 
generation  of  applications  for  activities 
like  inventory  management)  while  al¬ 
lowing  companies  to  retain  most  of 
their  existing  infrastructures.  But  pure- 
play  IP  s^tems,  unlike  hybrids,  let  IT 
organizations  manage  one  network 
structure  rather  than  two  and  are  use¬ 
ful  in  small  regional  offices  where  it 
wouldn’t  make  sense  to  install  a  PBX. 

Bottom  line:  Pure-play  IP  telephony 
is  gaining  traction  primarily  (but  not 
exclusively)  with  organizations  that 
are  undergoing  other  major  changes  — 
a  headquarters  move  or  consolidation, 
for  example,  or  any  major  construction 
project  that  entails  new  cabling. 

Hybrid  PBX  systems  —  traditional 
PBXs  that  use  special  port  cards  to 
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make  IP  telephone  connections  —  are 
favored  by  businesses  seeking  roost  of 
the  benefits  of  IP  telephony  without 
having  to  rip  out  their  existing  voice 
network  telephone  systems.  The  fmal 
choice  for  IT  organizations  is  driven  as 
much  by  external  factors,  such  as 
moves  and  the  addition  of  remote  of¬ 
fices.  as  by  the  two  systems’  benefits. 


When  the  Cancer  Therapy  &  Re¬ 
search  Center  consolidated  its  offlqes 
from  three  buildings  into  two  and  ex¬ 
panded  its  headquarters,  where  most 
of  its  900  PCs  and  servers  and  800 
telephones  reside,  Luter’s  team  evalu¬ 
ated  hybrid  PBXs  from  Avaya  Inc.  and 
Nortel  before  settling  on  an  IP  telepho¬ 
ny  setup  from  Cisco. 

Luter  says  Cisco  was  a  "premitim 
environment,”  but  other  fiictors  off^t 
that  expense.  For  starters,  the  center 
saved  more  than  S58,000  by  running  a 
single  wire  for  voice  and  data.  Cisco’s 
history  as  a  data  networking  vendor 
appealed  to  Luter  because  the  center 
routinely  transmits  enormous  medical 
imaging  files  between  fodlities. 
Another  benefit  is  the  simplified  help 
desk  structure  that  comes  with  a 
single  data-and-voice  network. 

“We’ve  got  Windows,  Unix  ma¬ 
chines  and  Macintoshes,  so  our  help 
desk  faces  some  pretty  complex 
needs,”  Luter  says.  “At  least  now  we 
don’t  have  one  group  for  the  phones 
and  one  for  the  computers;  IT  sup¬ 
ports  everything.”  He  adds  that  getting 
phone  extensions  set  up  for  new  hires 
used  to  take  up  to  two  weeks  but  is 
now  accomplished  in  less  than  a  day. 

Addressing  one  widespread  concern 
about  IP  telephony,  Luter  says  the  cen¬ 
ter  built  redundancies  for  its  phone 
system  into  its  storage-area  network 
(SAN).  Each  fodlity  has  a  redundant 
pair  of  Cisco  SN  5428  SAN  servers. 

Some  analysts  worry  that  redundan¬ 
cy  and  fail-ovei;  which  have  been 
honed  for  100  years  in  the  switched- 
ctrcuit  world,  haven't  yet  been  suffi¬ 
ciently  addressed  in  IP  telef^ny  sys¬ 
tems.  “By  their  very  nature,  basic  PBXs 
provide  fail-over  resiliency  in  the 
trunks  going  to  the  [telephone  service 
provider’s]  central  office,”  says  Laurie 
Gooding,  an  analyst  at  Phoenix-based 
Synergy  Research  Group.  “An  IP  sys¬ 
tem  doesn’t  provide  that” 

Gooding  adds  that  “some  vendors 
have  been  slow”  to  provide  redundan¬ 
cy  in  their  IP  signaling  interfaces  — 
that  is,  the  backup  system  that  kicks  in 
if  a  server  goes  dowa 

But  NFL  Filins  has  used  IP  telephony 
for  its  4S0  phones  since  July  2001,  and 
Steve  Eager,  director  of  network  and 


While  some  companies  are  taking  the  plunge  into 
pure-play  IP  systems,  others  are  easing  forw^  with 
a  hybrid  IP/PBX  approach.  B\'  Steve  Ulfelder 
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systems  administration,  believes  be 
has  planned  for  almost  any  problem  ~ 
with  one  possible  exception. 

The  Mount  Latirel,  N.J.^based  chron¬ 
icler  of  professional  football  is  on  a 
Synchronotis  Optical  Networic  (Sonet) 
rii^  with  separate  fiber  lines  into  each 
of  its  two  connected  buildings.  For  re- 
duiulancy,  each  building  gets  a  voice 
gateway,  a  Cisco  Catalyst  6509  switch 
aitd  a  Cisco  Call  Manager  Server  (the 
servers  are  clustered). 

“We’re  fully  redundant.”  Eager  says, 
noting  one  exceptioit:  Each  of  the  com¬ 
pany's  ei^t  cU)^  switches  is  homed 
to  a  sin^e  6509  switch.  If  we  lost  a 
closet  switch,  we'd  lose  the  phones  at 
that  closet,”  he  says,  adding  that  this 
has  never  occurred. 

Many  analysts  agree  with  Brian 
Strachman.  an  analyst  at  In-Stat/MDR 
in  Scottsdale.  Ariz.,  wbo  says.  The 
fear  factor  in  IP  telephony  is  gone  in 
the  last  year  or  so  —  they've  worked 
out  most  of  the  bugs.  Whether  you  buy 
a  [hybrid]  system  or  a  pure  IP,  you’re 
safe  in  terms  of  redundancy.” 

One  advance  in  current  hybrid  PBXs 
is  peer-to-peer  IP  switching.  In  early 
hybrids,  voice-over-IP  (VOIP)  commu- 


ttication  involved  translath^  from  tra¬ 
ditional  voice  time-division  multiplex¬ 
ing  (TDM)  to  IP,  then  back  to  TDM. 
This  round  trip  introduced  the  possi¬ 
bility  of  poor  voke  quality  due  to  la¬ 
tency.  Peer-to-peer  IP  connectivity  is 
“a  cleaner  way  to  accomplish  VOIP,” 
says  Jay  Ussman.  an  analyst  at  Stam¬ 
ford.  Conn.-based  Gartner  Inc. 

Vendor  Pros  and  Cons 

Some  IT  organizations  opt  for  hybrid 
PBXs  over  pure-play  CP  systems  even 
when  they’re  moving  toward  fiiU  IP 
telephony.  Bow  Valley  College  in  Cal¬ 
gary.  Alberta,  impleniented  IP  telepho¬ 
ny  in  January  2002.  Shortly  after  s^- 
ing  out  its  request  for  pn^osais,  the 
college  narrowed  its  dioices  ro  Cisco, 
Nortel  and  Alcatel  IT  manager  Mike 
Shannon  led  a  team  that  believed  Nor¬ 
tel  lacked  a  "clear  strata”  on  IP  tele¬ 
phony.  leaving  Paris-based  Alcatel  and 
Cisco  as  finalists. 

Misgivings  over  Cisco's  experience 
with  voice  networks  prompt^  Bow 
Valley  to  choose  an  Alcatel  OmniPCX 
system.  “Cisco  concerned  us  because 
they  weren't  voice-based;  we  weren’t 
stire  they  understood  voice  enough.” 


Shannon  says.  “And  we  weren’t  thrilled 
at  the  thought  of  running  our  voice 
over  Windows  2000  —  we  need  five  9s 
reliability  for  our  voice  trafTic.” 

Shannon  says  the  hybrid  PBX  offers 
the  advanu^  of  IP  telepbony  ^  sim¬ 
plified  management  with  Alcatel's 
OnmiVista  network  management  tool 
a  single  architecture  and  an  automated 
move/add/change  procedure  ^  with 
flexibUity  not  found  in  pure  IP  systems, 
such  as  the  ability  to  run  fax  machines 
from  analog  ports,  tike  other  nevwr  hy¬ 
brid  PBXs,  OmniPCX  supports  atralog, 
digital  IP.  wireless  and  soft  pbtmes. 

Thomas  Dunkerley,  IT  communica¬ 
tions  manager  at  TTie  Seattle  Times, 
concurs  with  Shannon's  assessment  of 
the  trade-ofis  b^ween  a  data-centric 
vendor  like  Cisco,  3Com  Corp.  or  Sun¬ 
nyvale,  Calif-based  Shoreline  C^oounu- 
nicatiORs  lire,  on  the  one  hand  and  a 
voice-centric  vendor  like  Avaya,  Nortel 
or  Siemens  AG  on  the  other.  When  the 
newspaper  decided  to  replace  its  10- 
year-old  Avaya  Deftnity  PBX.  it  ex¬ 
plored  Cisco’s  pure-play  IP  system  and 
hybrid  PBXs.  and  Avaya  emerged  as 
the  leading  hybrid  candidate. 

To  Dunkeriey  and  his  team,  all  of 
whom  had  experience  with  telecom- 
municatioirs.  a  drawback  to  the  Cisco 
products  soon  became  apparent.  At 
TTie  Seattle  Times,  each  phone  includes 
three  call  “appearances,"  or  number 
listings.  PBXs  use  a  single  port  for 
each  pbon^  with  Cisco,  each  appear¬ 
ance  would  count  as  a  port. 

That  would  have  tripled  my  licens¬ 
es.”  Dunkerley  says.  He  adds  ^t  this 
anomaly  is  probably  an  example  of 
Cisco's  roots  in  the  data  world. 

The  newspaper  opted  for  Avaya, 
partly  because  it  was  the  only  vendor 
whose  products  comply  with  Ameri¬ 
cans  With  Disabilities  Act  guidelines 
(offering  simultaneous  audio  and  visu¬ 
al  paging,  for  example),  but  Dunkerley 
says  there  were  trade-offs  involved. 

“Avaya's  iwt  as  focused  on  data  as 
Cisco  is,”  Dunkeriey  says,  citing 
Avaya's  Cajun  P330  switching  system. 
“My  network  tedrs  tell  me  the  basics 
and  functionality  are  all  there  but  that 
the  Cisco  user  interface  is  cleaner, 
making  management  a  bit  easier,”  he 
says.  The  newspaper  has  moved  300 
end  users  to  IP  phones,  and  750  more 
are  on  tap  for  the  next  three  months. 

Enterprise  telephony  b  movmg  to¬ 
ward  IP;  there  b  little  doubt  about  that 
The  question  b,  Do  you  want  to  take 
oiM  giant  —  but  irreversible  —  step  to¬ 
day,  scrap  everything  and  go  for  pure- 
play  IP?  Or  do  you  want  to  take  baby 
steps  and  install  a  hybrid  PBX.  bridg¬ 
ing  past  to  future?  For  NFL  Films’  Ea¬ 


ger,  the  giant  step  worked.  “You  have 
yotir  Windows  guys  doing  PCs  and 
servers,  and  your  Cbco  guy  doing  all 
your  networi^  ~  includii^  phones,” 
he  says.  ''What's  simpler  than  that?”  I 


Ulfelder  is  a  freelance  writer  in 
Southboro,  Mass.  Contact  him  at 
suifrlder@dutrter.net. 
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David  MFVtR.  man¬ 
ager  of  communica¬ 
tion  technology’  ser¬ 
vices  at  PPL  knows 
that  IP  telephony  is 
the  future.  He  also 
knows  that  his  com¬ 
pany  (formerly  known  as  Pennsylvania 
Power  &  Light )  has  a  massive  invest¬ 
ment  in  a  traditional  voice  network. 
With  .LOGO  lines  and  a  wiring  infra¬ 
structure  at  its  Allentown  headquar¬ 
ters  that  Stever  describes  as  "challeng¬ 
ing."  the  utility'  selected  an  IP-enabled 
private  branch  exchange  (PBX)  tele¬ 
phone  system  from  Nortel  Nemorks 
Ltd.  when  it  decided  to  upgrade  its 
network.  "We  needed  to  get  our  feet 
wet  [with  IP  telephony],  but  we  need¬ 
ed  a  proven,  mature  system."  he  says. 

On  the  other  hand,  in  2001.  when  the 
Cancer  Therapy  &  Research  Center 
consolidated  facilities  and  expanded 
its  headquarters  in  San  Antonio,  the 
organization  was  working  from  a  clean 
sheet  of  paper  —  and  opted  for  a  pure 
IP  setup  from  Cisco  Systems  Inc.  Chief 
Technology  Officer  Mike  Luter  says 
the  network's  speed  and  manageability. 


along  with  the  "increased  mobility" 
enjoyed  by  physician  end  users,  made 
pure-piay  the  way  to  go. 

These  experiences  neatly  summarize 
the  telephony  choices  IT  organizations 
are  making  today.  Legacy  PBXs  are 
rapidly  being  supplanted  by  IP-enabled 
"hybrids.”  which  analy’sts  say  offer 
most  of  the  advantages  of  pure  IP  sys¬ 
tems  (such  as  the  ability  to  easily 
change  extensions  and  to  use  a  new 
generation  of  applications  for  activities 
like  inventory  management)  while  al¬ 
lowing  companies  to  retain  most  of 
their  existing  infrastructures.  But  pure- 
play  IP  systems,  unlike  hybrids,  let  IT 
organizations  manage  one  netw'ork 
structure  rather  than  two  and  are  use¬ 
ful  in  small  regional  offices  where  it 
wouldn’t  make  sense  to  install  a  PBX. 

Bottom  line:  Pure-pIay  IP  telephony 
is  gaining  traction  primarily  (but  not 
exclusively)  with  organizations  that 
are  undergoir^  other  major  changes  — 
a  headquarters  move  or  consolidation, 
for  example,  or  any  major  construction 
project  that  entails  new  cabling. 

Hybrid  PBX  systems  —  traditional 
PBXs  that  use  special  port  cards  to 
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24%  of  the  approftmaiely 
6  million  telephone  lines  sold 


35%  of  5  million  lines  sold 


make  IP  telephone  connections  —  are 
favored  by  businesses  seeking  most  of 
the  benefits  of  IP  telephony  without 
having  to  rip  out  their  existing  voice 
network  telephone  systems.  The  final 
choice  for  IT  organizations  is  driven  as 
much  by  external  factors,  such  as 
moves  and  the  addition  of  remote  of¬ 
fices.  as  by  the  two  systems’  benefits. 


When  the  Cancer  Therapy  &  Re¬ 
search  Center  consolidated  its  offices 
from  three  buildings  into  two  and  ex¬ 
panded  its  headquarters,  where  most 
of  its  900  PCs  and  servers  and  800 
telephones  reside.  Luter’s  team  evalu¬ 
ated  hybrid  PBXs  from  Avaya  Inc.  and 
Nortel  before  settling  on  an  IP  telepho¬ 
ny  setup  from  Cisco. 

Luter  says  Cisco  was  a  "premium 
environment."  but  other  factors  oflset 
that  c.xpense.  For  starters,  the  center 
saved  more  than  S58.000  by  running  a 
single  wire  for  voice  and  data.  Cisco’s 
history  as  a  data  networking  vendor 
appealed  to  Luter  because  the  center 
routinely  transmits  enormous  medical 
imaging  files  between  facilities. 
Another  benefit  is  the  simplified  help 
desk  structure  that  comes  with  a 
single  data-and-voice  network. 

“We've  got  Window's.  Unix  ma¬ 
chines  and  Macintoshes,  so  our  help 
desk  faces  some  pretty  complex 
needs,"  Luter  says.  "At  least  now  we 
don’t  have  one  group  for  the  phones 
and  one  for  the  computers:  IT  sup¬ 
ports  everything."  He  adds  that  getting 
phone  extensions  set  up  for  new  hires 
used  to  take  up  to  two  weeks  but  is 
now  accomplished  in  less  than  a  day. 

Addressing  one  widespread  concern 
about  IP  telephony,  Luter  says  the  cen¬ 
ter  built  redundancies  for  its  phone 
system  into  its  storage-area  network 
(SAN).  Each  facility  has  a  redundant 
pair  of  Cisco  SN  5428  SAN  servers. 

Some  analysts  worry  that  redundan¬ 
cy  and  fail-over,  which  have  been 
honed  for  100  years  in  the  switched- 
circuit  world,  haven’t  yet  been  suffi¬ 
ciently  addressed  in  IP  telephony  sys¬ 
tems.  "By  their  very  nature,  basic  PBXs 
provide  fail-over  resiliency  in  the 
trunks  going  to  the  [telephone  service 
provider’s]  central  office,"  says  Laurie 
Ciooding.  an  analyst  at  Phoenix-based 
Synergy  Research  Group.  “An  IP  sys¬ 
tem  doesn’t  provide  that.” 

Gooding  adds  that  “some  vendors 
have  been  slow”  to  provide  redundan¬ 
cy  in  their  IP  signaling  interfaces  — 
that  is.  the  backup  system  that  kicks  in 
if  a  server  goes  down. 

But  NFL  Films  has  used  IP  telephony 
for  its  450  phones  since  July  2001.  and 
Steve  Eager,  director  of  network  and 


Wliilc  some  companies  are  talking  the  plunge  into 
pure-piay  IP  systems,  others  are  easing  forward  with 
a  hybrid  IP  PBX  appaxieh.  H\  Mlao  I  lleldei' 
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systems  administration,  believes  he 
has  planned  for  almost  any  problem  — 
with  one  possible  exception. 

The  Mount  Laurel.  N.f.-based  chron¬ 
icler  of  professional  /ootball  is  on  a 
Synchronous  Optical  Network  (Sonet) 
ring  with  separate  fiber  tines  into  each 
of  its  two  connected  buildings.  For  re¬ 
dundancy.  each  building  gets  a  voice 
gateway,  a  Cisco  Catalyst  6509  switch 
and  a  Cisco  (Call  Manager  Scrv'er  (the 
servers  are  clustered). 

"We're  fully  redundant."  Eager  says, 
noting  one  exception:  Each  of  the  com¬ 
pany’s  eight  closet  switches  is  homed 
to  a  single  6509  switch,  'if  wc  lost  a 
closet  switch,  we'd  lose  the  phones  at 
that  closet."  he  says,  adding  that  this 
has  never  occurred. 

Many  analysts  agree  with  Brian 
Strachman.  an  analyst  at  In*Stat/MDR 
in  Scottsdale.  Ariz..  who  says.  “The 
fear  factor  in  IP  telephony  is  gone  in 
the  last  year  or  so  —  they  've  worked 
out  most  of  the  bugs.  Whether  you  buy 
a  [hybrid]  system  or  a  pure  IP.  you're 
safe  in  terms  of  redundancy." 

One  advance  in  current  hybrid  PBXs 
is  peer-to-peer  IP  switching.  In  early 
hybrids.  voice-ovcr-IP  (VOIP)  commu- 


Thisbulcinghas 
no  IP  phones. 
130  PCs  and 
other  dienis. 


nication  involved  translating  from  tra¬ 
ditional  voice  time-division  multiplex¬ 
ing  (TOM)  to  IP.  then  hack  to  TDM. 
This  round  trip  introduced  the  possi¬ 
bility  of  poor  voice  quality  due  to  la¬ 
tency.  Peer-io-peer  IP  connectivity  is 
“a  cleaner  way  to  accomplish  VOIP.” 
says  lay  Lassman,  an  analyst  at  Stam¬ 
ford.  Conn.-based  Gartner  Inc. 

Vendor  Pros  and  Cons 

Some  IT  organizations  opt  for  hybrid 
PBXs  over  pure-play  IP  systems  even 
when  they're  movii^  toward  full  IP 
telephony.  Bow  Valley  College  in  C^al- 
gary,  Alberta,  implemented  IP  telepho¬ 
ny  in  January  2002.  Shortly  after  send¬ 
ing  out  its  request  for  proposals,  the 
college  narrowed  its  choices  to  Cisco. 
Nortel  and  Alcatel.  FT  manager  Mike 
Shannon  led  a  team  that  believed  Nor¬ 
tel  lacked  a  "clear  strategy"  on  IP  tele¬ 
phony.  leaving  Paris-based  Alcatel  and 
Cisco  as  finalists. 

Misgivings  over  Cisco’s  experience 
with  voice  networks  prompted  Bow 
Valley  to  choose  an  Alcatel  OmniPCX 
system.  “Cisco  concerned  us  because 
they  weren’t  voice-based;  wc  weren't 
sure  they  understood  voice  enough." 


Shannon  says.  "And  we  weren't  thrilled 
at  the  thought  of  running  t*ur  voice 
over  U'indows  20(K>  —  we  need  fo  e  9s 
reliability  for  our  voice  trafTic." 

Shannon  says  the  hybrid  !’BX  offers 
the  advantages  of  IP  telephony  —  sim¬ 
plified  management  with  Alcatel’s 
OmniVlsia  network  management  i<h)1. 
a  single  architecture  and  an  automated 
movc/add  change  procedure  —  with 
flexibility  not  found  jn  pure  IP  systems, 
such  as  the  ability  to  run  fax  machines 
from  analog  ports.  Like  other  newer  hy¬ 
brid  PBXs.  OmniPCX  supports  anak>g. 
digital,  IP,  wireless  and  soft  phones. 

Thomas  Dunkcrtcy.  IT  communica¬ 
tions  manager  at  The  Seattle  TTmes. 
concurs  with  Shannon’s  as.sessment  of 
the  trade-offs  between  a  data-centric 
vendor  like  Cisco,  3Com  Corp.  or  Sun- 
n>'vale,  Calif.-based  Shoreline  Commu¬ 
nications  Inc.  on  the  one  hand  and  a 
voice-centric  vendor  like  Avaya.  Nortel 
or  Siemens  AG  on  the  other.  When  the 
newspaper  decided  to  replace  its  10- 
year-old  Avaya  Definity  PBX.  it  ex¬ 
plored  Cisco's  pure-play  IP  system  and 
hybrid  PBXs.  and  Avaya  emerged  as 
the  leading  hybrid  candidatc. 

To  Dunkcrley  and  hi.s  team,  all  of 
whom  had  experience  with  telecom¬ 
munications.  a  drawback  to  the  Cisco 
products  soon  became  apparent.  At 
The  Seattle  Times,  each  phone  includes 
three  call  “appearances."  or  number 
listings.  PBXs  use  a  single  pon  for 
each  phone;  with  Cisco,  each  appear¬ 
ance  would  count  as  a  port. 

“That  would  have  tripled  my  licens¬ 
es."  Dunkcrtcy  says.  He  adds  that  this 
anomaly  is  probably  an  example  of 
Cisco's  roots  in  the  data  world. 

The  newspaper  opted  for  Avaya. 
partly  because  it  was  the  only  vendor 
whose  products  comply  with  Ameri¬ 
cans  With  Disabilities  Act  guidelines 
(offering  simultaneous  audio  and  visu¬ 
al  paging,  fur  c.vample  >.  but  Dunkerle> 
says  there  were  trade-itffs  involved. 

"Avaya’s  not  as  focused  on  data  as 
Cisco  is."  Dunkcrlc)'  sa^-s.  citing 
Avaya's  Cajun  P330  switching  system. 
"My  network  techs  tell  me  the  ba-sics 
and  functionality'  are  all  there  but  that 
the  Cisco  user  interface  is  cleaner, 
making  management  a  bit  easier."  he 
says.  The  newspaper  has  moved  .300 
end  users  to  IP  phones,  and  750  more 
arc  on  tap  for  the  next  three  months. 

Enterprise  telephony  is  moving  to¬ 
ward  IP;  there  is  tittle  doubt  about  that, 
'ntc  question  is.  Do  you  want  to  take 
one  giant  —  but  irrc\’crsible  —  step  to¬ 
day.  scrap  e^ery’thing  and  go  for  pure- 
play  IP?  Or  do  you  want  to  take  baby- 
steps  and  install  a  hybrid  PBX.  bridg¬ 
ing  past  to  future?  For  NFL  Films’  Ea- 
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Hybrids,  LayH- by  Layer 

Firrt-gMwatton  hybrid  PBXs  had  ■ 
dreuM  stwilch  al  thdr  corat.  ^ 
cards  mada  R  possUe  to  uM  P 
phones  but  not  to  taka  advantage  of 
advancod  apqficalions  daifgnod  tor  P 
lelsphBny. 

Most  PBX  vendors  today,  how¬ 
ever,  offer  system  that  don't  have 
an  Magral  switchaio  fabric.  Today's 
hybrids  have  ndgralad  to  a  packat- 
(brim  arcMtocim  that  separates 
cornniunications  rnanagsniaiit  horn 
fhs  core.  Ibsy  land  to  be  modutor 
software  stado  composed  of  the 
folawing  layers; 

■  A  voice  layer,  where  actual  voce 
traffic  (nearty  an  afterthought)  is  direct' 
ed  to  IP  telephones. ’soft  chants' such 
as  desktop  PCs  (wdh  a  headset 
plugged  mto  thee  Umversal  Sena)  Bus 
ports,  a  common  practice  m  cal  cen¬ 
ters)  and  traditional  phones. 

•  A  fB8tiR*sel  layer,  where  fealLRS 
such  as  hold  hirwardwQ  and  cordaence- 
calng  are  determeied  and  controlBd 

■  An  appbcatkin  prograirarano  inter¬ 
face  (APt)  layer,  wtech  kKtudes  tKkd^ 
lor  other  appicabons  sudi  as  CRM 
software  and  network  managernerit 
tools.  These  APIs  are  enbeal  vi  today's 
modular  world  An  IT  organtzstion  using 
a  Itfalh  4000  from  Siemens,  for  exam¬ 
ple.  mgh!  use  Hewtett-Packard  Co.’s 
OpenView  managemem  software  and  a 
Siebei  Systems  Inc.  CRM  sude  The 
HiRtth  4000  rndudes  APIs  to  make 
such  ntegraiion  easy,  accordng  to 
Joan  Vbndermate.  vice  pmsafent  of 
product  management  at  Siemens. 

■  Agatewayiayer.whichmusteven- 
tualy  be  connecled  to  a  pubic  swrtched 
lefephorw  network,  no  rnafter  how 
mu^  corporate  network  traffic  is  IP- 
based.  A)  the  gtiev«y  layer,  a  physical 
device  converts  IP  pack^  for  trans¬ 
mission  over  DSO  creuts 

■  A  calhconiral  layer,  when  the  class 
of  ser^  (such  as  imrtaiioris  tm  (nierito^ 
txra)  deirxi).  seofty  pohcies  and  a  data¬ 
base  of  registered  users  are  determned 

‘SmeUMdv 

gcr.  the  giant  step  wivncL-d.  “Vuu  have 
your  Windows  guys  doing  f'Cs  and 
servers,  and  your  Cisco  guy  doing  all 
yiHir  networking  —  including  phones." 
he  says.  "What’s  simpler  than  that?"  * 


Ulfelder  is  a  freelance  writer  in 
Soulhbaro.  Mass.  Contact  him  ar 
sulfelder  a'Charter.net. 
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Vour  business  has  unique  needs.  It  deserves  a  unique  solution.  From  PowerEdge**  servers  featuring  Intel* 
Xeon” processors  to  PowerVault*  Storage  and  PowerConnect*’  Network  Switches,  we  offer  tailored  solutions  to 
meet  your  business  needs.  And  of  course  it's  Dell,  so  you  know  you're  getting  the  latest  technology.  But  that’s  only 
half  of  the  story.  Dell  offers  consulting  services  that  range  from  deployment  and  installation  to  training  and 
certification.  All  from  one  source.  And  everything  is  backed  by  thousands  of  service  and  support  people  at  your 
beck  and  call,  on-site,  online  and  on  the  phone.  Sudd^ly  your  IT  infrastructure  doesn't  seem  so  daunting.  Let  Dell’s 
one-of-a-kind  solutions  put  you  on  the  path  to  one-of-a-kind  success. 

Dell  Rated  #1  in  Intel-Based  Seiver  Satisfaction 

Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 
Third  Quarter  2002 
-  December  2002 
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Persuasive 
technologies 
ate  aimed  at 
changing  users’ 
attituteand 
behaviors.  By 
Matt  Hamblen 


E  AU  KNOW 

ways  that  com¬ 
puters  employ 
psychology  to 
change  our  atti¬ 
tudes  or  behaviors. 

Mostly,  we  see  it  on  Web 
sites.  A  widely  used  technique 
involves  providing  a  tun  game 
to  play  or  a  captivating  video 
that  might  have  no  other  pur¬ 
pose  than  to  get  us  to  linger  on 
a  site  or  bookmark  it 
If  we  e-mail  a  link  for  the 
site  to  a  friend,  the  site  and  its 
technology  and  designers  have 
altered  our  behavior  slightly. 
The  process  creates  a  new  at¬ 
titude  or  alters  an  old  one 
about  the  site  or  the  brand  and 


products  behind  it 
Web  sites  and  applications 
use  a  growing  variety  of  per¬ 
suasive  techniques  to  alter  our 
attitudes  and  behaviors,  and 
after  the  bursting  of  the  dot¬ 
com  bubble,  there  is  increas¬ 
ing  interest  in  “stepping  back 
to  see  what  really  works  and 
persuades,"  says  B.).  Fogg,  di¬ 
rector  of  the  Persuasive  Tech¬ 
nology  Lab  at  Stanford  Uni¬ 
versity.  He  also  coined  the 
term  coptoiogy.  the  science  of 
using  "computers  as  persua¬ 
sive  technologies." 

In  the  coming  years,  Fogg 
says,  captology  is  likely  to 
challenge  IT  managers  and  tra¬ 
ditional  business  leaders,  who 


will  see  persuasive  techniques 
become  an  important  part  of 
business  training,  manage- 
meot  coaching  and  marketing. 

He  says  captology  will  be 
used  to  motivate  people  to 
make  better  use  of  computers 
by  offering  helpful  hints  when 
problems  occur  in  early  uses 
of  a  new  application.  Applica¬ 
tions  will  send  e-mails  that 
praise  woiiters  for  trying 
them.  Fogg  says. 

Captology  will  require  de¬ 
velopers  to  understand  behav¬ 
ioral  science  as  it  applies  to 
technology,  Fogg  says.  "IT 
managers  might  not  think  cap¬ 
tology  is  apprc^riate  for  com¬ 
puters  and  will  ask  vidiy  per¬ 
suasion  should  be  a  part  of  it.” 
he  says.  "They  will  wonder. 
'Does  this  work,  and  is  this 

relevant  to  my  compa-  _ 

ny  or  job?’ " 

Fogg  ticks  off  a  list 
of  applications  and 
laboratory  studies  in¬ 
dicating  that  captology  - 

does  indeed  work.  In  studies 
of  human/computer  reciproci¬ 
ty,  users  were  discovered  to  be 
frr  more  willing  to  do  simple 
tasks  for  a  computer,  such  as 
signing  up  for  a  newsletter  or 
upgrading  software,  if  the 
computer  had  provided  them 
useful  information  and  told 
them  sa  "The  computer 
points  to  good  wo^  it’s  done 
for  you,  much  as  a  good  em¬ 
ployee  tells  a  boss.  ‘Fve  done 
this  and  this,’  before  asking  for 
a  raise,"  he  says. 

For  example,  Fogg  says,  a 
successful  vinis-protecticm 
program  could  be  even  more 
successful  if  it  counted  bow 
many  times  it  blocked  a  virus 
on  a  computer  and  when,  then 
reported  that  infonnatioa  to 
the  user  before  reminding  him 
to  upgrade  or  renew. 

RSIGuard  Software  in  Santa 
Cruz,  Calif,  has  developed 
software  that  helps  users  pro¬ 
tect  against  repetitive-stress 
injuries  by  monitoring  bow 
much  they  use  the  keyboard 
and  mouse  and  encouraging 
them  to  take  regular  breaks 
when  at  woik.  They  are  per¬ 
suaded  to  use  the  program  be¬ 
cause  it’s  seen  as  offering  re¬ 
lief  and  because  it  can  be  tai¬ 
lored  to  suit  the  individual’s 
woricstyle  and  tolerances,  says 


FUTWE 

WATCH& 


Rod  Goodman,  a  project  man¬ 
ager  at  RSIGuard. 

Another  example  of  captoi- 
ogy  is  America’s  Army,  a  sim- 
ulattoD  and  online  game  creat¬ 
ed  to  provide  insights  about 
U.S.  Army  life,  teamwork  and 
training.  The  game,  which  cost 
SIO  million  to  develop,  is  part 
of  the  Army’s  official  commu¬ 
nications  strategy,  according 
to  an  explanation  on  the  www. 
americasarmy.com  Web  site. 

Fogg  says  the  site  has 
"woiked  in  spades”  at  bringing 
in  recruits  who  are  excited  by 
the  computer-based  experi¬ 
ences.  It  has  woiked  so  well 
that  it's  "kind  of  scary,  to  be 
honest,”  adds  Fogg,  who  wor¬ 
ries  that  there  might  not  be 
enough  checks  and  balances 
to  protect  people  from  gov- 

_  emment  abuse  of 

powerful  persuasive 
techniques. 

U.S.  Army  CoL 
Casey  Wardynski.  the 
creator  of  America’s 
Army,  says  the  game  has  be¬ 
come  one  of  the  most  popular 
online  games  globally  since  it 
was  launched  in  July.  He 
agrees  that  it  uses  many  per¬ 
suasive  technologies,  but  only 
at  a  very  earty  stage  in  the  re¬ 
cruiting  process. 

Fogg  says  that  many  appli¬ 
cations  of  captology  in  the 
workplace  are  comii^  They 
include  everything  from  using 
behavioral  science  in  softv^e 
in  order  to  increase  output  per 
employee  in  a  call  center  to 
improvii^  managers'  skills,  | 
especially  with  delegating,  set¬ 
ting  goals  and  getting  people ' 
to  arrive  at  meetings  on  time. 

The  trick,  Fogg  believes,  will 
be  getting  developers  to  write 
software  that  motivates  based 
on  positive  rewards,  remind¬ 
ing  users  that  they  will  be  hap¬ 
pier  and  better  at  their  jobs  if 
they  take  certain  actions. 

"IT  shops  will  have  a  role  in 
integrating  all  of  these  cap- 
tologies,"  Fo^  adds.  I 
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Fighting  Spam 


dhunhion 
Software  that  controls  spam  — 
unsolicited  commercial  mass 
e-mail  sent  over  the  Internet  — 
uses  techniques  such  as  black¬ 
listing  or  “whitelisting”  particu¬ 
lar  URLs  or  domain  names,  and 
includes  self-learning  programs 
based  on  statistical  analysis. 


8V  ItUftSCLL  KAV 

Every  day  most  of 
us  get  e-mail  offer- 
ing  to  sell  us  drugs 
(especially  Viagra), 
vacations,  ways  to 
enlarge  speciHc  parts  of  our 
bodies,  get-rich-quick 
schemes,  cable-television  de¬ 
scramblers,  lower  mortgage 
rates  and  Internet-based 
pornography.  I  don’t  want  it. 
and  neither  do  you.  Spam  has 

become  a  serious  and  _ 

growing  problem  for 
Internet  users,  affect¬ 
ing  individuals  and 
corporations  alike. 

Spam  costs  Its  recip-  _ 

ients  money.  David 
Ferris,  president  of  San  Fran- 
dsco-based  Ferris  Research, 
estimates  that  spam  and  ef¬ 
forts  to  combat  it  cost  U.S. 
companies  S8.9  billion  in  2002. 

In  a  Decen^r  2002  report, 
Gartner  Inc.  analyst  Joyce 
Graff  predicted  that  “by  2004, 
unless  an  enterprise  takes  de¬ 
fensive  action,  more  than  S0% 
of  its  message  traffic  will  be 
spam.”  Ferris  analyst  Marten 
Nelson  pegs  the  v^ume  of 
spam  at  20%  to  30%  of  corpo¬ 
rate  traffic  and  40%  to  50%  of 
Internet  service  provider  traf¬ 
fic.  Nelson  says  that  CIOs  and 
corporate  messaging  roan- 
a^rs  should  consider  three 
major  elements  in  determin¬ 
ing  the  impact  of  spam. 

’‘Fust,  you  need  to  look  at 
the  costs  associated  wHb  loss 


of  user  productivity,  then  the 
cost  to  the  messaging  inffa- 
structure  and  finally  the  cost 
to  your  help  desk  in  dealing 
with  user  complaints."  he  says. 

Strategies 

There  are  dozens  of  products 
and  services  available  to  help 
block  spam.  Hiey  use  the  fol¬ 
lowing  basic  techniques: 

■  Bliciliil  the  leiwhr.  Get  a 
list  of  spammers'  addresses 
-  and  block  any  e-mail 

from  chose  addresses. 

A  This  can't  block  spam 

•M  from  new  addres^, 

I  *  however,  so  there's  a 
constant  race  between 
the  spammers  and  the 
spam-fighters.  At  times,  the 
blockers  get  too  eager  and 
may  shut  off  all  mail  from  a 
specific  domain  name,  block¬ 
ing  legitimate  messages  from 
nonspanuning  users. 

■  HWiliiliriimandir.The 

opposite  approach  is  to  accept 
e-mail  only  from  a  list  of  ap¬ 
proved  addresses.  This  Is 
h^ily  effective  but  not  terri¬ 
bly  practical,  especially  for 
business  users  who  want  to 
bear  from  new  customers. 

■  link  far  Wfabilpa.  Spam 
messages  tend  to  have  a  lot  of 
features  in  common.  Accord¬ 
ing  to  CipbeiThist  loc,  some 
of  the  more  auiunoD  elements 
found  in  the  subject  lines  of 
spam  are  “$,*  “t*  "999,"  "Cred¬ 
it,"  “Earn."  "FREE."  "Free," 
“Get,"  “Lose"  and  “Money." 


■  Ksap  score.  Much  antispam 
software  relies  on  analyzing 
message  IDs.  formats  and 

er  traits,  assigning  values  to 
each  identified  feature  and 
adding  up  a  numerical  score 
for  new  mess^^.  If  the  score 
exceeds  a  specified  limit,  it's 
considered  spam  and  is 
blocked.  Unfortunately,  this 
approach  delivers  a  lot  of  false 
positives,  rejecting  mail  that 
isn’t  spam. 

■  Laam  M  you  go.  The  most 
promising  approach  seems  to 
be  Bayesian  filtering,  which  is 
based  on  statistical  analysis. 
With  this  method,  you  train  the 
software  by  classifying  mail  as 
spam  or  nonspam.  Based  on 
your  classifications,  the  soft¬ 
ware  analyzes  new  messages 
and  determines  the  probabil¬ 
ity  that  they  may  be 
Bayesian  programs  rontinually 
learn,  and  if  a  spam  message 
slips  through,  you  tell  the  pro¬ 
gram  and  it  becomes  smarter. 

Tips  for 
Avoidbig  Spam 

There  are  ways  you  can  fight 
spam  in  adtUtion  to  softwsue 
tools,  including  the  foUcrwing: 

■  Don't  opt  out.  Your  opt- 
out  or  “unsubscribe"  reply 
merely  confirms  your  v^d 
e-mail  address  and  is  likely  to 
get  you  more,  not  less,  ^lam. 

■  Stop  giving  away  your 
address.  In  March  2003,  the 


Washington-based  Center  for 
Democracy  and  Technology 
reported  on  research  into 
where  spammers  get  their  ad¬ 
dresses.  The  overwhelming 
source  (97%)  was  public  Web 
sites.  In  fact,  every  single  nor¬ 
mal  address  they  posted  on  a 
Web  site  received  some  spam. 
The>-  also  obscured  some 
addresses  by  making  them 
look  like  running  text  (ioe@ 
mycompanycoro  becomes 
“joe  at  mycompany  dot  com") 
or  by  converting  them  to 
HTML  (Joe's  address  now 
reads  &«106:&9Ul;6rS101: 
ac«064&#109;&#121;&tS099; 
&#IU&«109:&#U2;&S097: 
&ail0;&#12l;ac#046:&#09^> 
&#I11:&8I09;).  Obscured  ad¬ 
dresses  got  no  spam  at  all 

■  CouMaraltack  the  spammers. 
Alan  Ralsky,  who  has  been 
previously  convicted  of  fraud, 
is  possibly  the  world's  premier 
spammer,  sending  out  upward 
of  a  billion  e-mails  a  day.  After 
Slasbdot.com  publicized  a 
Detroit  Free  Press  article  on 
Ralsky  and  listed  his  home 
address,  the  antispam  commu¬ 
nity  signed  him  up  for  numer¬ 
ous  ad  campaigns  and  multi¬ 
ple  mailing  lists.  Ralsky  has 
since  been  inundated  with 
truckloads  o(  brochures,  ads 
and  catalogs,  all  delivered  by 
the  U,S.  Postal  Service  to  his 
brand-new  $740,000  home 
in  West  Bloomfield.  Mich. 
Ralsky.  unamused,  considers 
this  harassment. 

The  Bottom  Line 

Spam  seems  here  to  stay.  If  s 
too  easy,  too  cost-effective  and 
too  cheap  to  kill  entirely.  But 
we  can  take  effective  mea¬ 
sures  to  block  most  of  it. 

“Yes,  it's  a  cat-and-mouse 
game  between  the  spammers 
and  the  anttspam  vendors,  but 
1  believe  the  anttspam  vendors 
will  win.”  says  Ferris  Re¬ 
search’s  Nelron.  “In  the  next 
five  years  or  so.  we  will  look 
at  the  spam  problem  much  as 
we  look  at  viruses  today.  It 
used  to  be  a  serious  problem, 
but  now  it's  foirly  well  under 
cootraL"! 


ICoy  is  a  (>mputerwoHd  con- 
rriburtng  writer  in  Worcester. 
Mass.  You  can  contact  him  at 
ntsskay@charter.net. 
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RghtingSpam 


l)|  I  I  \  I  1  IO\ 

Software  that  controls  spam  — 
unsolicited  commercial  mass 
e-mail  sent  over  the  Internet  — 
uses  techniques  such  as  black¬ 
listing  or  “whitelisting”  particu¬ 
lar  URLs  or  domain  names,  and 
includes  self-learning  programs 
based  on  statistical  analysis. 


BV  BUSSCLL  KAV 

VERY  DAY  most  of 
US  get  e-mail  offer¬ 
ing  to  sell  us  drugs 
(especially  Viagra), 
vacations,  ways  to 
enlarge  specific  parts  of  our 
bodies,  get-rich-quick 
schemes,  cable-television  de¬ 
scramblers.  lower  mortgage 
rates  and  Internet-based 
pornography.  I  don’t  want  it. 
and  neither  do  you.  Spam  has 
become  a  serious  and 
growing  problem  for 
Internet  users,  affect¬ 
ing  individuals  and 
corporations  alike. 

Spam  costs  its  recip¬ 
ients  money.  David 
Ferris,  president  of  San  Fran¬ 
cisco-based  Ferris  Research, 
estimates  that  spam  and  ef¬ 
forts  to  combat  it  cost  U.S. 
companies  $8.9  billion  in  2002. 

In  a  December  2002  report. 
Gartner  Inc.  analyst  Joyce 
Graff  predicted  that  “by  2004. 
unless  an  enterprise  takes  de¬ 
fensive  action,  more  than  50% 
of  its  message  traffic  will  be 
spam."  Ferris  analyst  Marten 
Nelson  pegs  the  volume  of 
spam  at  20%  to  30%  of  corpo¬ 
rate  traffic  and  40%  to  50%  of 
Internet  service  provider  traf¬ 
fic.  Nelson  says  that  CIOs  and 
corporate  messaging  man¬ 
agers  should  consider  three 
major  elements  in  determin¬ 
ing  the  impact  of  spam. 

“First,  you  need  to  look  at 
the  costs  associated  with  loss 


of  user  productivity,  then  the 
cost  to  the  messaging  infra¬ 
structure  and  finally  the  cost 
to  your  help  desk  in  dealing 
with  user  complaints."  he  says. 

Strategies 

There  are  dozens  of  products 
and  services  available  to  help 
block  spam.  They  use  the  fol¬ 
lowing  basic  techniques: 

■  Bbekist  die  sender.  Get  a 
list  of  spammers'  addresses 

and  block  any  e-mail 
from  those  addresses. 
This  can’t  block  spam 
from  new  addresses, 
however,  so  there’s  a 
constant  race  between 
the  spammers  and  the 
spam-fightcrs.  At  times,  the 
blockers  get  too  eager  and 
may  shut  off  all  mail  from  a 
specific  domain  name,  block¬ 
ing  legitimate  messages  from 
nonspamming  users. 

■  “Whitekst*' the  sender.  The 
opposite  approach  is  to  accept 
e-mail  only  from  a  list  of  ap¬ 
proved  addresses.  This  is 
highly  effective  but  not  terri¬ 
bly  practical,  especially  for 
business  users  who  want  lo 
hear  from  new  customers. 

■  Look  for  telHale  sigra.  Spam 
messages  tend  to  have  a  lot  of 
features  in  common.  Accord¬ 
ing  to  CipherTrust  Inc.,  some 
of  the  more  common  elements 
found  in  the  subject  lines  of 
spam  are  1,"  "999.”  “Cred¬ 
it.”  “Earn,"  “FREE,"  “Free," 
“Get,"  “Lose"  and  "Money.” 


■  Keep  score.  Much  antispam 
software  relies  on  analyzing 
me.ssage  IDs,  formats  and  oth¬ 
er  traits,  assigning  values  to 
each  identified  feature  and 
adding  up  a  numerical  score 
for  new  messages.  If  the  .score 
c.xceeds  a  specified  limit,  it’s 
considered  spam  and  is 
blocked.  Unfortunately,  this 
approach  delivers  a  lot  of  false 
positives,  rejecting  mail  that 
isn’t  spam. 

■  Loam  as  you  go.  The  most 
promising  approach  seems  to 
be  Bayesian  filtering,  which  is 
based  on  statistical  ana^sis. 
With  this  method,  you  train  the 
software  by  classifying  mail  as 
spam  or  nonspam.  Based  on 
your  classifications,  the  soft¬ 
ware  analyzes  new  messages 
and  determines  the  probabil¬ 
ity  that  they’  may  be  spam. 
Bayesian  programs  continually 
leam,  and  if  a  spam  message 
slips  through,  you  tell  the  pnv 
gram  and  it  becomes  smarter 

Tips  for 
Avoiding  Spam 

There  arc  ways  you  can  fight 
spam  in  addition  to  software 
tools,  including  the  folloiA-ing: 

■  Don't  opt  out.  Your  opt- 
out  or  “unsubscribe"  reply 
merely  confirms  your  valid 
e-mail  address  and  is  likely  to 
get  you  more,  not  less,  spam. 

■  Stop  giving  away  your 
address.  In  March  2003,  the 
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W'jNhineton-b.iscd  Center  for 
iK-nitKr.iev  and  lechnology 
reponed  on  research  into 
where  spammers  gei  their  ad¬ 
dresses.  The  overwhelming 
source  (‘JT^o)  was  public  Web 
sites.  In  fact.  ever\’  single  nor¬ 
mal  address  they  posted  on  a 
Web  site  received  some  spam. 
They  also  obscured  some 
addresses  by  making  them 
imik  like  running  text  (joe  a 
m\comp.'iny.com  becomes 
“joe  at  mycompany  dot  com") 
or  by  converting  them  to 
HTML  ()oe’s  address  now 
reads  &«l()6:&«jnAsloi; 
&s(k»4:&sl09-A»l2l:&:s(m 
&-em:*RsKK>;S:sU2:&aO‘f7: 
&sllO;&fil21:{5ka046:fitsO‘>‘>: 

I  &«UlAsl0*>:).  Obscured  ad¬ 
dresses  got  no  spam  at  all. 

■  (^nterattack  the  spammers. 
Alan  Ralsky.  who  has  been 
previously  convicted  of  fraud, 
is  possibly  the  world’s  premier 
spammer,  sending  out  upward 
of  a  billion  e-mails  a  day.  After 
Slashdoi.com  publicized  a 
Defn>if  free  Press  article  on 
RaKk>’  and  listed  his  home 
address,  the  antispam  commu- 
nit)’  signed  him  up  for  numer¬ 
ous  ad  campaigns  and  multi¬ 
ple  mailing  lists.  Ralsky  has 
since  been  inundated  with 
truckloads  of  brochures,  ads 
and  catalogs,  all  dclivea'd  by 
the  U.S.  Postal  Service  to  his 
brand-new  $740,000  home 
in  West  Bloomfield.  Mich. 
Ralsky.  unaroused,  considers 
this  harassment. 

The  Bottom  Line 

Spam  seems  here  to  stay.  It's 
loo  easy,  too  cost-effective  and 
too  cheap  to  kill  entirely.  But 
we  can  take  effective  mea¬ 
sures  to  block  most  of  it. 

“Yes.  it’s  a  cat-and-mousi* 
game  between  the  spammers 
and  the  antispam  vendors,  but 
I  believe  the  aniispam  vendors 
will  wia"  says  Ferris  Re¬ 
search’s  NcLson.  "In  the  next 
five  years  or  so.  vve  will  look 
at  the  spam  problem  much  as 
we  look  at  virusL*s  today,  (t 
used  to  be  a  serious  problem, 
but  now  it’s  fairly  well  under 
control."  I 


Kay  (5  a  Computerworld  con- 
rriburing  writer  in  Worcester. 
Mass.  You  can  contact  him  at 
Tvs^tay^harternet. 
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Borfcsioy.  Calf, 
wwwdyriixoin/products/ 
maUMti/ 


MdilFrentiei 
Anti-Spam  Batvwav 
Maiftorillai  Inc. 

Palo  ANo.  Cali. 

wwwjiHflfrantter.com/ 

•ntorpriae.oeerriow.htiid 


Network  kwegtatai  Inc. 
Santa  Clam,  CM. 
wwwjwtworkawcirimt.cowi 
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SPAM  FMM  THE  STAn 

Foe  molt  nformation  on  Statu  and  spam 
lighting,  and  where  the  word  spam  coines 
troen.weaouWebstr 

OQiiicktinfci  38243  mi  38244 
www.conipularworid.coffl 


Are  there  lechnolQgKs  or  eaues  fou  d  Wie 
to  leam  about  n  CuckSiuV?  Se^  VDUi 
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Reserve  Call-up  Hits 
IT  Security  Department 


VVhen  an  rr  security  manager  gets  the  call, 
the  rest  of  the  staff  b  left  to  pick  up  the 
pieces.  By  Mathias  Thurman 


AS  IF  THE  EVERYDAY  SUff.I 

stress  of  my  infonna-  proiec 

tioo  security  job  were  wirele 

not  enough,  our  depart*  Unix  a 

ment  was  hit  with  a  bombshell,  ing  api 

Tm  in  the  U.5.  Air  Force  Re*  andar 
serve,  and  my  unit  activated  view  t 
me.  IVe  been  out  of  the  oCHce  propo; 
for  a  couple  of  weeks  now,  and  other  < 

t*m  attempting  to  contribute  at  docun 
work  as  b^  1  can  using  my  dures; 

laptop  and  cell  phone.  ing  in\ 

1  got  the  call  on  a - 

Thursday  and  had  to  ApiuMfVif 
report  to  the  base  the  uLWHniY 
next  day  to  sign  in. 

Fortumlcly.  I  Uve  near  _ 

the  base,  so  I'm  able  to  q 

return  home  on  the  _ 

weekends.  1  received 
word  iust  prior  to  the  war  that  to  take 
1  was  going  to  be  activated,  so  everyc 
I  was  able  to  give  my  boss  and  thin,  tl 
security  team  advance  warn*  lieved 

ing.  They  weren't  happy,  but  that  1  < 
they  were  supportive  and  For  no 

seemed  more  concerned  that  I  cell  ph 
return  home  safely  than  that  I  questii 
deal  with  unfinished  business 
before  my  departure.  R6ITII 

By  law,  my  company  must  As  a  fc 
let  me  (nrticipate  in  the  Re*  I'm  usi 
serve  and  must  hold  my  posi*  virtual 
tion  for  me  until  1  return.  Al-  concei 
though  companies  are  re*  Altboti 

quired  to  bold  reservists'  jobs,  isn't  as 
they  aren’t  required  to  pay 
them  while  they’re  gone. 

Fortunately,  my  company 
will  continue  to  pay  me  for  the 
first  six  months  of  activation. 

That's  a  pretty  good  deal, 
since  the  difference  between 
military  and  civilian  pay  is 
steep.  (For  some  of  my  peers,  iGl 

the  pay  difference  has  been  ^ 

devastating.)  Hopefully.  fU  be 
released  before  ^  full  six  l6i8 

months  are  up.  fH 

In  preparing  for  my  depar*  rn^ 

ture,  I  transferred  as  many  of 
my  duties  as  possible  to  the  SOHI 


suff.  Ri^t  now.  my  major 
projects  include  deploying  a 
wireless  LAN.  centralizing 
Unix  authentication,  perform* 
ing  application  assessments 
and  attendii^  architecture  re¬ 
view  meetings  for  current  and 
proposed  applications.  My 
other  duties  include  things  like 
documenting  policy,  proce¬ 
dures  and  standards;  conduct¬ 
ing  investigations:  and  han- 
-  dUng  the  administra¬ 
tion  of  some  critical 
security  applica¬ 
tions.  1  compiled  a 
list  of  al!  of  these 
y  n  tasks  and  ap- 

_  proacbed  my  staffers 

to  see  who  wanted 
to  take  over  what.  Although 
everyone  is  already  stretched 
thin,  they  all  pitched  in  and  re¬ 
lieved  me  of  the  cridcal  duties 
that  1  can't  perform  remotely. 
For  now.  Fm  still  available  by 
cell  phone  and  e-mail  when 
questions  or  issues  arise. 


Remote  Mode 

As  a  full-time  telecommuter. 
I'm  using  my  company’s  Cisco 
virtual  private  network  (VPN) 
concentrators  for  LAN  access. 
Although  the  performance 
isn't  as  fast  as  it  would  be  if  I 


Between  the  VPN, 
teleconferencing 
and  additional 
telephone  commu¬ 
nication,  I  have 
managed  to  stiH  be 
somewhat  effective. 


were  at  my  desk,  it  has  been 
sufficient  to  allow  me  to  get 
work  done  when  I'm  off  duty 
from  my  new  day  job.  My  de¬ 
partment  also  has  a  weekly 
staff  meeting,  which  I  have  at¬ 
tended  via  teleconference. 

Between  the  VPN.  telecon¬ 
ferencing  and  additional  tele¬ 
phone  communication.  I  have 
managed  to  still  be  somewhat 
effective.  But  there's  a  limit  to 
what  I  can  do.  If  Fm  deployed 
to  the  Middle  East,  Internet 
access  may  not  be  available 
for  my  civilian  work.  And  even 
if  I  do  have  access,  the  perfor¬ 
mance  might  degrade.  Also, 
many  military  firewalls  block 
VPN  traffic  to  IP  addresses 
that  don't  belong  to  the  .mil 
domain  name.  So  Fm  prepar¬ 
ing  for  the  worst. 

This  week.  I  moved  tem¬ 
porarily  to  another  base  in  the 
U.S.  that,  fortunately,  provides 
high-speed  Internet  access.  So 
I  used  the  VPN  connection  to 
access  my  company’s  newly 
installed  WLAN  management 
tool,  the  AirWave  Manage¬ 
ment  Platform  (AMP),  which 
we  just  purchased  from  San 
Mateo,  (^if. -based  AirWave 
Wireless  Inc.  Not  only  was  I 
able  to  check  on  the  status  of 
the  dozens  of  access  points 
(AP)  located  throughout  the 
corporate  campus,  but  I  also 
completed  a  rogue  AP  detec¬ 
tion  scan. 

AMP  uses  two  methods  for 
rogue  detection.  The  wireless 
detection  mode  woiks  by 
switching  some  of  our  AP$ 
into  promiscuous  mode.  We 
primarily  use  Cisco  AP  12(X)s, 
but  we  have  some  units  from 
'  3e  Technologies  International 
Inc.  in  Rockville,  Md.,  spread 
across  our  campus  that  we  use 
exclusively  for  wireless  AP  de- 
tectioa 

The  second  rogue  AP  detec¬ 
tion  method  involves  a  wire- 
line  AP  scan.  With  this  fea¬ 
ture,  the  AMP  system  initiates 


a  scan  of  the  designated  net¬ 
work  and  probes  for  signa- 
nires  that  resemble  an  AP.  The 
AMP  interrogates  an  IP  ad¬ 
dress  and  port  and  can  deter¬ 
mine  the  type  of  AP  by  exam¬ 
ining  the  return  packets  iiom 
the  interrogated  IP  address. 

This  feature  requires  some 
additional  configuration,  be¬ 
cause  I  have  to  ensure  that  I 
don’t  scan  network  addresses 
that  aren't  within  my  compa¬ 
ny.  In  addition,  scans  have  to 
be  coordinated  so  the  security 
analysts  don’t  panic  as  a  result 
of  what  might  look  like  a  coor¬ 
dinated  port-scan  attack. 

This  time  around,  my  scan 
didn't  detect  any  rogue  APs. 
Employees  seem  more  cog¬ 
nizant  of  our  AP  detection  ca¬ 
pabilities  and  the  ranufica- 
tions  of  the  discovery  of  a 
rogue  AP  (we  confiscate  the 
AP,  and  the  employee  faces 
disciplinary  action).  I  now 
have  set  a  schedule  for  scan¬ 
ning  each  of  our  networits  on 
a  regular  basis.  Fve  automated 
as  much  of  thb  as  possible, 
but  it  still  requires  coordina¬ 
tion.  and  Fd  rather  control  the 
execution  of  the  scanning  my¬ 
self  if  I  can. 

In  addition  to  participating 
in  the  management  of  the 
wireless  network  infrastnic- 
ture.  I  hope  to  continue  to  per¬ 
form  a  limited  number  of  ap¬ 
plication  assessments. 

I  remain  hopeful  that  I  will 
be  released  from  my  Reserve 
duties  sometime  soon  so  that  I 
can  return  to  full-time  duties 
on  my  security  team.  9 

WMTNYNTHK? 

This  waek's  journal  is  wUen  by  a  real 
security  manager.  Iiiltfhias  Thurman.* 
whose  nane  and  employer  have  been 
disguBed  lor  obvious  reasons,  (kmlaci  him 
at  mathias.thurman^yahoo  com.  or  join 
discussion  m  our  forum; 
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To  find  a  compiBte  archive  trf  our 
Securdy  Manx's  Jourrols.  go  online  to 
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XAware  UpgpKles 
Integration  Server 

X/him  Inc.  ImI  wMk  amouncMl 
XA‘SHili3.0«DrJM.TlMup- 
gradc  MudM  iMW  iMtew  lor 
otTMining  11191 XM.  doeumont*. 
XML-te-XMl  miwilig  Id 
ooliMM  InMioniMllMit  hwtUlilt* 
aihr  lor  tnMi  dUi  mtnlpidriion 
and  mipptai  to  MnMS  rain. 
Md  toeraiMd  si99ort  tor  ilond 
proeodMw  wtk  ritoiniiri  ttota- 
bnono.  nceordtag  to  tot  Cotorado 
Sprin^'btiod  ctnpMiy* 
XA'StototarJmS.OItaMi- 
aUt  imr  and  to  priced  toam 
SSm  to  S80.000.  dtpaitfeq 
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Nortel  Introduces 
Layer2Switch 

HoftolltolwMtelld.lnBrMn>- 
ton,  Ootorto.  ton  tMtoi  bdradiictd 
tot  Btoteek  470-MT 10/10000 
sMtodi  tor  ijvtr  2  eonBtdtont 
to  torpi  OQiRptntot.  Dn  Mritoh 
to  dnlintd  to  tottar  cottototNy 
ntta  taaBQ  pBHRy^aarvica 
fwictona.  Noilai  ahn  anmMoad 
naw  BtoOtocfc  Opantoig  Syitom 

^  ■>.  ......  ^  ^  ^  ^  a 

awNDanp  aamoiia  ntrt  fla* 
rignad  to  tot  aaan  caMral  a 
toadt  at  BtofStoch  darieat  aa  N 
ftty  tttft  a  atoplt  ayatont  Both 
pradueto  an  achadiM  to  iMp 
lator  toil  monto.  motop  «M8n1 


Bitstream  Updates 
Wireless  Browser 

BNatraani  toe.  to  CaMtridpa. 

Mata.,  tod  waah  fttoaaad  a  ntw 

Mrtoan  of  ThMlarHwto.  ito  wlra- 
iaaa  Wto  bfatnlnp  todtiatopy. 
UppradattotoaEntorpriaaEdh 
ttan  taduda  toalMtt  dadpMd  to 


dy  to  aeato  to  M  eatcurraid 
uaara.  todet  at  many  at  prtvtoUB 
vantont  wara  aUa  to  htndto. 
Thundartlaato  nmt  an  tot  Poekat 
PCtpamitopiyatoiB.TbdBitn- 
lead  a  fctt.  30^  Md  atratan. 


Enterprise 
Software’s  Bid 


UPPLIERS  of  enteqjrise  resource  planning 
software  are  headed  for  a  dead  end.  Systems 
integration  from  now  on  will  be  accom¬ 
plished  by  networks  that  can  make  diverse 
systems  interoperate  without  being  forced 


into  any  one  vendor’s  architecture. 

Since  the  early  1990s, 

ERP  vendors  have  insisted 
that  companies  will  cut 
costs  and  improve  produc* 
tivicy  by  investing  in  tightly 
integrated  end*to-eod  ERP. 

These  systems  promise  to 
automate  business  processes 
into  an  all-embracing  archi¬ 
tecture  that  dictates  integra¬ 
tion  by  means  of  an  all- 
encompassing  data  ware¬ 
house.  Accordingly,  the 
goals  of  ERP  could  be 
achieved  best  by  using  soft¬ 
ware  from  one  supplier. 

The  alternative  ~  integrating  a  multi¬ 
plicity  of  applications  offered  by  admit¬ 
tedly  superior  yet  specialized  suppliers 
—  was  scoffed  at  as  requiring  middle¬ 
ware  tools  and  time-consuming  integra¬ 
tion  efforts.  Extensive  testing  would  be 
required  as  changes  occurred.  Undesir¬ 
able  translation  logic  would  delay  trans¬ 
actions,  and  performance  would  suffer. 

Preintegiated  software  packages  were 
the  choice  of  many  organizations  seek¬ 
ing  simplification  in  information  proc¬ 
essing  and  escape  from  the  chaos  of 
software  proliferation. 

Billions  of  dollars  have  been  invested 
in  launching  organizations  on  a  march 
toward  synchronization  through  central¬ 
ization.  In  }ust  about  every  case  I  have 
examined,  the  driver  has  always  been 
the  fmance  establishment.  Tb^  wel¬ 
comed  the  opportunity  to  consolidate 
financial  systems.  The  real  agenda  was 
to  reassert  control  over  the  mess  left  by 
the  rapid  succession  of  failed  CIOs. 

The  reality  of  ERP  turned  out  to  be 
different  than  claimed.  )ust  about  every 
ERP  system  would  be.  in  due  course,  ei¬ 
ther  aborted  or  truncated  when  bumped 


up  against  the  realities  of 
enterprisewide  systems 
integration.  Contrary  to 
claims  that  ERP  provides 
easy-to-use.  off-the-shelf 
solutions,  the  truth  is  that 
forced  conversions  from 
“legacy"  systems  are  hor¬ 
rendously  expensive  and 
traumatic  for  the  people 
who  work  with  them.  Many 
of  these  legacy  applications 
could  have  been  modern¬ 
ized  at  a  fraction  of  the  con¬ 
version  cost  by  updating 
their  data  formats  and  stan- 
dardizii^  on  communications. 

And  few  ERP  systems  have  ever  been 
completed  as  originally  proposed.  Smart 
operators  never  let  go  of  systems  that 
gave  them  answers  they  n^ed.  Slip¬ 
ping  schedules,  budget  overruns  and 
user  revolts  forced  linns  to  purchase 
supplementary  solutions  ftrom  a  variety 
of  small  suppliers.  Increasingly,  users 
had  to  divert  effbns  from  their  vendor- 
provided  standard  applications  to  fixes 
and  overlays  that  thvmrted  hoped-for 
systems  integratiorL 
Why  do  I  now  pronounce  the  ERP 
era  as  coming  to  an  end?  The  answer  is 
Web-based  services  that  can  deliver  in¬ 
tegration  of  diasimiiar  systems.  Wd)  ser¬ 
vices  make  it  possible  for  corporations 
to  plug  into  be$t-of-breed  suf^Uers  for 
rapid  acquisition  of  innovative  applica¬ 
tions.  W^  services  enable  pilot  tests 
that  can  verily  performance  before  the 
company  commits  to  implemenution. 
They  offer  a  superior  architecture  for 
enterprisewide  integration  of  diverse, 
distributed  and  refurbished  **l^acy"  iq>- 
plications  that  can  remain  in  place  until 
gracefully  upgraded  or  retired.  Web  ser¬ 


vices  promise  a  way  to  reduce  huge  de¬ 
velopment  budgets.  Web  services  avoid 
the  shock  of  forced  insertions  common¬ 
ly  associated  with  all  ERP  ventures  be¬ 
cause  they  can  be  trickled  into  the 
workplace  as  the  workforce  is  ready  10 
absoii>  chan^.  Web  services  smooth 
the  migration  from  hard-to-manage  (and 
insecure)  client/server  environments  to 
outsourced  networii  service  providers 
that  offer  the  protection  of  experienced 
security  staffs. 

Web  services  accept  diversity  in  ap¬ 
plications  instead  of  a  single  application 
architecture  dominated  by  one  supplier. 
They  allow  integration  through  network 
message  sharing  (in  vendor-indepen¬ 
dent  universal  standard  formats  such  as 
XML)  instead  of  forcing  every  data  ele¬ 
ment  into  a  monolithic  data  repository. 

Rapid  replacement  of  failed  applica¬ 
tions  is  a  benefit  of  Web  services  as  is 
tactical  outsourcing  as  an  alternative  to 
emigrating  most  of  a  company’s  IT  to  a 
contractor  from  where  it  can  hardly 
ever  be  repatriated  and  never  reconsti¬ 
tuted.  Web  services  make  it  possible  to 
unburden  the  CIO  of  an  organization 
from  housekeeping  and  allow  him  to 
make  IT  a  source  of  competitive  advan¬ 
tage.  'Huough  loose  coupUi^  of  ser¬ 
vices.  the  Wrt  environment  is  more 
suited  to  the  prevailing  conditions 
vfoere  mergers,  acquisitions  and  sup¬ 
plier  and  customer  collaboration  c^ 
for  interapplication  interoperability  in 
a  nutter  of  days  instead  of  years,  as  cur¬ 
rently  dictated  by  ERP  initiatives. 

Why  then  is  the  adoption  of  Web  ser¬ 
vices  so  slow?  Organizations  can  shift  to 
Web  service-based  integration  only  after 
they  restructure  the  way  IT  is  managed 
and  shift  attention  from  computing  to 
communications.  They  must  also  accept 
a  move  away  from  ownership  of  the 
means  of  computing  and  be  willing  to 
purchase  most  of  their  traosactioos  as  a 
service.  I  will  write  more  about  such 
transformations  next  month.  I 
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TALENT 


High-speed  Access 
TD  High-speed 


To  keep  your  business  competitive,  you  need  the  right  IT  talent  at  just  the  right  time. 

With  more  than  100  locations  worldwide,  Robert  Halt  Technology  is  a  leading  provider  of: 

•  Programmers  •  Help  Desk  Professionals 

•  Network  Administrators  •  Database  Administrators 

•  Web  Developers  •  And  other  Technology  Professionals 

•  Network  Security  Engineers 

With  our  exceptional  connections  to  the  best  technology  talent  available,  we'll  do  more  than  provide 
cost-effective  solutions  to  your  needs  -  we’ll  do  it  exactly  when  you  need  it. 

Call  today! 

800.793.5533 
roberthalftechnology.com 


Information  Technology  Professionals 
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Squandered  Opportunity 

Companies  invested  heavUy  in  IT 
asset  management  tools  prior  to 
Y2k.  but  they  have  lai^ely  failed  to 
make  loi^-term  improvements. 
Industry  experts  offer  tips  for 
picking  up  the  pieces.  Page  42 


Get  Over  Yourseif 

The  pervasiveness  of  IT  may  be 
makii^  it  strategically  irrelevant, 
according  to  Harvard  Business 
Review  editor  Nicholas  G.  Carr, 
who  says,  “IT  management  should, 
ffankly,  become  boring.”  Page  44 


Budget  ovemiis,|)rojectfal^ 
ingresenMiwtiiemikN^ 
Y&aretoUameforlTscred^ 

By  Gary  H.Anthes  and  Thomas  Hoffnian 


What  You  Measure 
te  What  You  Get 

Forget  descriptions  like  “world-class 
support."  Contracts  must  include 
clearly  defmed  metrics  if  supplier 
performance  is  to  be  measured  fairly, 
writes  columnist  Ban  Perkins.  P>g«46 


T  WAS  BUDGET  TIME  at  Allied  traordinary  reputation  of  IT  there. 

Building  Products  Corp..,  and  the  Sadly,  that  type  of  relationship  be* 

CEO  wanted  to  know  how  the  tween  IT  managers  and  business  man- 
company  could  increase  sales  and  agers  is  uncommon.  Budget  overruns 
profits  in  the  coining  year.  “How  and  return  on  investment  underruns 
much  money  do  you  need?"  be  have  plagued  IT  and  tarnished  hs  rep- 
asked  his  senior  managers.  “How  utation  for  decades.  ITs  performance 
many  people  do  you  need?”  has  been  poor  in  completing  projects 

"I  said,  ‘Whatever  extra  dollars  you  on  time  and  within  budget, 
would  give  to  me,  give  to  Jamie,' "  re-  And  it  has  grown  worse  during  the 
calls  Brian  Reilly,  chief  financial  offi-  past  few  years,  according  to  research 
cer  at  Allied.  “I  get  a  better  return  out  conducted  by  The  Hackett  Group  in 
of  money  spent  in  Jamie's  world  than  Atlanta,  wfai^  regularly  benchmarks 
in  mine."  the  performance  of  nearly  2X100  com- 

Jamie  Kutzer  is  CIO  at  the  East  panies,  including  97%  of  the  Dow 

Rutherford,  N.J.-based  company,  where  Jones  Industrial  companies  and  81%  of 
the  CFO's  extraordinary  generosity  the  Fortune  lOa  According  to  Hackett, 
with  his  budget  is  testimony  to  the  ex-  average-performing  companies  report¬ 


ed  an  IT  project  completion  rate  of  IT  is  a  “j<Ae"  in  many  boardrooms. 

67%  in  2002,  dovm  from  72%  in  1999.  says  Joe  Noga,  a  partner  at  Tatum  CFO 
The  decline  is  more  striking  for  the  Partners  LLP.  an  Atlanta-based  CFO 
completion  of  oi»e-year  IT  projects,  placement  company.  "What  1  bear  is, 
which  dropped  from  S8%  in  1999  to  ‘Holy  Christmas,  tl^  told  me  it  was 
51%  in  2002.  only  going  to  cost  1%  of  sales,  and  it's 

The  Y2k  nonevent,  the  dot-com  4%.'  Or.  They  told  me  this  thiitg  was 
bomb  and  disappointment  over  the  going  to  be  installed  and  working  in  18 
cost  and  performance  of  complex  sys-  months,  and  here  we  are  30  months 
terns  have  diminished  the  stature  of  into  it,  and  we  don’t  have  the  first  part 
some  IT  shops.  Many  IT  leaders  ac-  woiking,' "  Noga  says.  And  the  e:q)la- 
knowledge  that  there's  a  credibility  nations  from  IT  managers  often  aren't 
problem  in  IT.  At  Compfiterwor(<rs  helpful  or  particularly  clear,  be  says. 
Premier  100  IT  Leaders  conference  in  Some  IT  executives  acknowledge 
Fdiruary,  45%  of  135  survey  respon-  that  IT  faces  cycUcal  reputation  and 
dents  said  that  IT  had  an  image  prob-  credibility  problems.  For  example,  they 
lem,  which  they  attributed  mostly  to  point  to  the  massive  amount  of  money 
IT  beii%  too  slow  and  too  expensive.  and  labor  thrown  at  the  year  2000 


pfobli-m.  Total  U.S.  spending  on  Y’k 
m>m  ^>^>7  to  70(H>  was  S125.‘>  billion. 
Meta  (iroup  Ine.  estimates 

AIilH»ugh  many  industry  esperts  .ind 
CIOs  say  the  paucity  of  problems  that 
iKViirred  after  the  date  change  was  a 
result  t»f  the  elTort  put  in  by  TT  depart- 
ment.s.  some  Kiard-level  executives 
say  they  think  the  pn>blem  was  h>  ped 
.tnd.  thus,  overfunded. 

"I  believe  that  credibility  has  been 
damaged  and  is  being  justifiably  ques- 
tioni'd."  says  |err\  Mcldhatton.  presi¬ 
dent  of  global  technology  and  opera¬ 
tions  at  MasterCard  International  Inc. 
in  Purehase.  N.Y.  One  reastm.  he  says, 
is  that  systems  are  much  more  com¬ 
plex  than  they  were  20  years  ago 
“’niese  enterprise  systems  are  massive, 
and  they  require  significant  infrastruc¬ 
ture  changes."  he  says.  “It’s  a  huge  un¬ 
dertaking,  and  pe<iple  just  miscalculate 
and  underestimate  what  it  takes  to  get 
these  IprojectsI  completed." 

Many  companies  lack  the  capital  to 
invest  in  modernizing  IT.  and  IT  has  a 
history  of  not  delivering  ROl  on  such 
investments.  ■I'hese  problems  '‘test  IHO 
credibility  in  s^>me  companies."  says 
Robert  A.  Koich.  president  of  SIM  As- 
MK'iates  Iru.'..  an  IT  consulting  firm  in 
Purdys.  N.Y.  Dthers  point  to  CIOs  who 
persuaded  management  to  spend  lav¬ 
ishly  during  (he  dot-entm  era  on  e-et>m- 
meree  initiatives  that  never  paid  off. 

Susan  Unger.  CIO  at  Daimler- 


IfllMbdmiirscreiiity 

hasdacm$eil,wlBtmj|ni 

dMltotmitanind? 

Gettng  business  units 

more  involved  m  planning  O  JOm 

and  decision-tnakmo  * 

Improving  communications 

with  the  CEO  and  other  W  Tflw 

business  unit  heads  ' 


Better  pnorriding 
ot  key  projects 

Evangelizing  the 
value  oDT 

Putting  a  <^lef  focus 
on  shorbterm  ROl 

Estabhshing  customer 
haeon  teams 

Oomgmore 

cost-cutting 

Changing  the  approach 
and/brsbuctureotthe 
IT  organtzahon 
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llhrysler  AC,,  .says  that  even  during  the 
height  of  the  e-aimmerce  boom,  the 
ain»>maker  invi-steJ  only  in  IT  projects 
that  were  expected  to  deliver  sizable 
returns.  “We  didn’t  get  a  huge  increase 
in  our  IT  budget  then,  so  we  haven't 
experienced  a  big  decrease  to  »»ur  bud¬ 
get  recently."  she  says. 

Tor  Unger,  credibility  dcpend.s  t»n 
how  CIOs  have  been  perceived  by  .se¬ 
nior  management  and  what  they  have 
acetimplished  during  their  tenure.  “If 
they  had  great  credibility  to  begin 
with,  they  should  he  all  right  today." 
says  Unger.  “Ifthey  didn’t,  they  proba¬ 
bly  lost  it  well  before  the  dot-com  era.’’ 

Chivalry  Isn't  Dead 

Allied  Ruilding  Products'  IT  shop  w'ins 
credibility  among  business  unit  man¬ 
agers  with  a  can-do  spirit  tempered 
with  realism.  As  CFO  Reilly  says  of 
CIO  Kutzer:  'I.imic's  attitude  is.  'You 
call  me.  and  I’ll  get  you  the  answer.' 
rather  than  Til  send  you  a  report,  and 
>tiu  run  the  business  the  best  yr)u  can.' 
'I'he  gentleman  before  him  promised 
itH>  much,  loo  fast,  or  he  just  said. 
‘You’re  not  going  to  get  it.’  “ 

Not  overpr»)mising  is  important. 
Kutzer  say-s.  “lust  last  week.  I  walked 
into  somebody's  oHlce  and  said.  ‘I'm 
here  to  manage  your  expectations.’  ’’  he 
says.  Kutzer  exphained  to  the  supply 
manager  why  the  distribution  softw'are 
to  be  installed  at  a  branch  office  wa.s 
likely  to  be  troublesome  for  the  first 
three  weeks.  By  doing  so.  Kutzer  says 
he  was  able  to  help  the  manager  set  his 
hopes  realistically. 

Throwing  cold  water  on  user  expec¬ 
tations  is  (he  right  thing  to  do  some¬ 
times.  but  it  can't  stop  there.  Reilly 
says.  “We'll  go  to  |amie  and  say.  'Here’s 
what  Pm  Imtking  for.  Flow  long  will  it 
take  you?’  And  he  says.  ‘How  abimt  if 
you  did  it  this  way  instead?'  He's  sort 
of  re-engineering  the  question."  Kutzer 
has  a  strong  background  in  business 
operations  and  distribution  that  helps 
his  credibility.  Reilly  says. 

But  not  everyone  believes  IT  has  a 
credibility  prvtblem.  "Tve  .seen  a  notice¬ 
able  improvement  in  the  reputation  of 
rr  and  IT  leaders  in  the  pa,st  few  years,’* 
says  Linda  Roubinek.  an  information 
sy'stcms  olTicer  at  Nationwide  Mutual 
Insurance  Co.  in  Columbus.  Ohio  ‘Tr 
has  become  more  of  a  core  compeicmcy 
in  business,  and  business  leaders  are 
starting  to  sec  technology  as  an  enabler 
to  delivering  business  plans." 

Roubinek  outlines  several  things  Na¬ 
tionwide  is  doing  to  make  IT  both  ef¬ 
fective  and  appreciated.  For  example, 
she  says,  the  CIO  introduced  a  “spon¬ 
sorship  model"  by  which  IT  and  busi- 


AU  TOO  OFTEN,  a  company's  top 
executive  sees  IT  only  as  a  tool. 

For  that  reason,  (he  CIO  should  re¬ 
port  to  the  CEO.  says  Joe  Noga.  a 
partner  at  Tatum  CFO  Partners. 
"When  IT  grows  up  under  a  CFO.  it  is 
not  viewed  as  an  equal  partner." 

Noga  says. 

Tim  Stanley.  CIO  at  Harrah  s  Enter¬ 
tainment  Inc.  in  Las  Vegas,  reports  to 
the  chiel  operating  officei. 

"I  have  reported  to  CFOs  in  the 
past,  and  t  don't  much  care  for  it."  he 
says.  "CFOs  are  very  financially  savvy. 
But  being  directly  knked  to  the  chief 
operating  officer  puts  you  right  in  the 
thick  of  business  needs,  desires  and 
impacts.  It's  less  of  a  cost  equation 
and  more  of  a  business-value  driver 
equation." 

Of  course,  it  doesn't  hurt  for  IT  to 
N!  a  grand  slam.  Stanley  adds.  The 
casino  company's  Total  Rewards  loy¬ 
alty  program  is  "a  key  driver  of  our  17 
consecutive  quarters  of  same-store 
sales  growth."  he  says.  The  program 
and  everything  under  it  -  such  as 
modeling  to  predict  customer  behav¬ 
ior  -  is  all  IT-driven  and  tor  the  past 
five  years  has  produced  better  than 
60%  ROl,  he  says. 

Despite  periodic  setbacks,  there  is 
some  evidence  IT  may  be  increasing 
in  stature.  The  Hacked  Group  last  year 


ness  units  are  joined  at  the  hip  before  a 
project  starts.  “Funding  is  agreed  upon 
between  the  systems  and  business 
partners,  and  they  go  together  to  our 
corporate  leadership  for  the  money," 
she  says.  “They  collaboratively  work 
out  what  the  ROl  is  and  the  goals  of 
the  project  before  requesting  funding.’’ 

Every  six  months,  Roubinek  says,  the 
IT  and  business  partners  take  a  fresh 
look  at  each  project,  recompute  the  ex¬ 
pected  ROl  and  request  funding  for  the 


published  a  survey  showing  that  the 
percentage  of  companies  with  CIOs 
increased  from  65%  in  1999  to  82% 
in  2002.  In  2003.  more  than  a  third  of 
CIOs  will  report  to  CEOs  (see  chart). 

Dennis  (iallahan.  CIO  at  The 
Guardian  Life  Insurance  Company  of 
America  in  New  York,  reports  to  the 
CEO.  and  that  arrangement  lets  him 
be  seen  as  a  business  leader,  not  just 
as  someone  who  keeps  the  e-mail 
server  up.  he  says. 

"One  of  the  highest  compliments 
paid  to  me  by  our  CEO  is  (hat  he 
doesn't  think  of  me  as  a  technical 
guy;  he  thinks  of  me  as  a  real  busi¬ 
nessman  who  happens  to  know  a  tot 
about  technology.*  he  says 

Callahan,  who  joined  (^rdian  in 
2000.  says  the  previous  IT  regime 
had  "undershot  expectations  and 
overshot  costs,  and  that  led  to  a  level 
ol  dissatisiaction  with  fT."  To  turn  that 
around.  Callahan  says  he  pushed  IT 
into  a  "rapid  response,  client-service 
orientation,  starting  with  me.  down  * 

He  recalls  the  result:  "The  word  got 
oul  *  we  are  domg  sometNng  new. 
we  are  moving  last,  we  are  service- 
oriented.  and  the  business  heads  and 
I  partner  top-down.  The  typical  reac¬ 
tion  from  them  was.  tlh.  I  wi^  you 
were  here  five  years  ago  *  * 

'GafyHAnthes 


next  six  months.  Risk  mitigation  plans 
arc  updated  at  that  time.  Any  project 
heading  south  could  get  killed  at  one 
of  these  reviews.  “We  have  developed 
the  managerial  courage  to  slop  a  proj¬ 
ect  when  wc  feel  it’s  not  meeting  our 
original  expectations,"  she  says. 

Corporate  Systems  Vice  President 
Damien  Bean’s  strategy  for  success  at 
Hilloa  Hotels  Corp.  in  Beverly  Hills, 
Califo  can  be  summed  up  in  one  word: 

Continued  on  page  40 
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problem.  Total  U.S.  spending  on  Y2k 
from  1997  to  2000  was  S12S.9  billion. 
Meta  Group  Inc  estimates. 

Although  many  industry  experts  and 
CIOs  say  the  paucity  of  problems  chat 
occurred  afrer  the  date  change  was  a 
result  of  the  effort  put  in  by  IT  depan* 
ments.  some  board-level  executives 
say  they  think  the  problem  was  hyped 
and.  thus,  overfrinded. 

“I  believe  that  credibility  has  been 
damaged  and  is  being  justifiably  ques* 
tioned.”  says  )erry  McElhatton.  presi* 
dent  of  global  technology  and  opera¬ 
tions  at  MasterCard  International  Inc. 
in  Purchase,  N.Y.  One  reason,  he  says, 
is  that  systems  are  much  more  com¬ 
plex  than  they  were  20  years  ago. 
These  enterprise  systems  are  massive, 
and  they  require  si^iificant  infrastnic- 
ture  changes."  he  says.  "It's  a  huge  un- 
denaldng.  and  people  just  miscalculate 
and  underestimate  what  it  takes  to  get 
these  (projects]  completed.” 

Many  companies  lack  the  capital  to 
invest  in  modernizing  IT,  and  IT  has  a 
history  of  not  delivering  ROI  on  such 
investments.  These  problems  "test  CIO 
credibility  in  some  companies."  say.s 
Robert  A.  Kotch.  president  of  SIM  As¬ 
sociates  Idc..  an  IT  consulting  ftrro  in 
Purdys,  N.Y.  Others  point  to  CIOs  who 
persuaded  management  to  spend  lav¬ 
ishly  during  the  dot-com  era  on  e-com¬ 
merce  initiatives  that  never  paid  off. 

Susan  Unger.  CIO  at  Daii^r- 
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Chrysler  AG.  says  that  even  during  the 
height  of  the  e-commerce  boom,  the 
automaker  invested  only  in  IT  projects 
that  were  expected  to  deliver  sizable 
returns.  "We  didn't  get  a  huge  increase 
in  our  IT  budget  then,  so  we  haven't 
experienced  a  big  decrease  to  our  bud¬ 
get  recently."  she  says. 

For  Unger,  credibility  depends  on 
how  CIOs  have  been  perceived  by  se¬ 
nior  management  and  what  they  have 
accomplished  during  their  tenure.  "If 
they  bad  great  credibility  to  begin 
with,  they  should  be  all  right  today." 
says  Unger.  "If  they  didn't,  they  proba¬ 
bly  lost  it  well  before  the  dot-com  era." 

Chivalry  Isn't  Dead 

Allied  Building  Products'  IT  shop  wins 
credibility  among  business  unit  man¬ 
agers  with  a  can-do  spirit  tempered 
with  realism.  As  CFO  Reilly  says  of 
CIO  Kutzer  "Jamie's  attitude  is,  ‘You 
call  me.  and  rU  get  you  the  answer,' 
rather  than  TU  send  you  a  report,  and 
you  run  the  business  the  best  you  caa’ 
The  gentleman  before  him  promised 
too  much,  too  fast,  or  be  just  said. 
‘You’re  not  going  to  get  it.*  ” 

Not  overpromising  is  important, 
Kutzer  says.  "Just  last  week,  I  «.ralked 
into  somebody's  office  aiKi  said,  Tm 
here  to  manage  your  expectations,’ "  he 
says.  Kutzer  explained  to  the  supply 
manager  why  the  distribution  software 
to  be  installed  at  a  branch  office  was 
likely  to  be  troublesome  for  the  first 
three  weeks.  By  doing  so.  Kutzer  says 
be  was  able  to  help  the  manager  set  his 
hopes  realistically. 

Throwing  cold  water  on  user  expec¬ 
tations  is  the  ri^t  thing  to  do  some¬ 
times,  but  it  can't  stop  there.  Reilly 
says.  “We’U  go  to  Jamie  and  say.  'Here’s 
what  Pro  looking  for.  How  long  will  it 
take  you?*  And  he  says,  ‘How  about  if 
you  did  it  this  way  instead?*  He's  sort 
of  re-engineering  the  question."  Kutzer 
has  a  strong  background  in  business 
operations  and  dikributiOD  that  helps 
his  credibility.  Reilly  says. 

But  not  everyone  believes  IT  has  a 
credibility  problem.  "IVe  seen  a  notice- 
^le  improvement  in  the  repuurion  of 
n*  and  IT  leaders  in  the  past  few  years," 
says  Linda  Roubinek.  an  information 
systems  officer  at  Nationwide  Mutual 
Insurance  Co.  in  Columbus.  Ohio  "IT 
has  become  more  of  a  core  competency 
in  business,  and  business  leaders  are 
starting  tasee  technology  as  an  enabler 
to  delivering  business  plans.” 

Roubinek  outlines  several  thii^  Na¬ 
tionwide  is  doing  to  nuke  IT  both  ef¬ 
fective  and  appreciated.  For  example, 
she  says,  the  CIO  introduced  a  "spon¬ 
sorship  model”  by  which  IT  and  bust- 
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All  TOO  OFTBI,  a  compmy's  top 
exscutiw  saes  ft  only  »  a  tool 

For  thtf  roasoa  the  QO  should  re¬ 
port  to  the  CEO,  says  Joe  Noga.  a 
partner  at  Tatum  CTO  FMneis. 

‘When  (T  orows  (S)  uider  a  CPO,  H  is 
not  vtowed  as  an  ereal  partner." 
Nopassys. 

Tkn  Stanley.  QO  M  Hvrah's  Enler- 
tairenent  Ina  in  Las  Vegas,  reports  lo 
the  chiaf  operating  officer. 

1  hM  reported  to  (fOs  in  the 
past  and  I  doni  much  care  for  N."  he 
soys.  "CFOs  are  vBiy  hnancialy  savvy. 
But  bang  drecOy  Mred  to  the  cMef 
oparstoig  offlear  puls  you  right  in  Ihe 
thick  of  bUBlnees  neeik  desires  and 
impacto  It's  less  of  a  cost  equation 
end  more  of  a  businesS'VBlus  (tiver 
equation." 

Of  course,  it  doesn't  ful  for  iT  to 
hit  a  grand  sfom.  Stanley  add&  The 
caano  company's  Total  rtewante  toy- 
aNy  program  is  "a  ksy  of  our  17 
conseemfos  quartets  of  same  store 
sales  groeflh."  he  says.  The  program 
and  etreqftNng  under  It '  su^  as 
modeIngtopredcIcustomerbNv- 
ior  *  is  allT-ditiren  and  for  the  past 
fore  years  has  produced  better  than 
60%R0LfteS8ys. 

Despite  period  setbacks,  there  Is 
soma  evidence  IT  may  be  increasino 
instetore.TheHacfetlOrouplaalyBir  : 


pubishad  a  sumy  showing  tot  the 
percentege  of  companies  MthClQs 
Increasad  from  65%  in  1999  to  82% 
in  2002.  In  2(X)3.  more  than  a  third  of 
(]I05  report  to  CEOs  (see  dwrt). 

C)BnrasCdbf«n.CIOatThe 
Gtrerdfon  Ufo  tneurance  Canqiany  of 
Americi  in  New  Tbrk.  reports  to  the 
CEO.  end  teal  enangemant  late  htei 
be  seen  as  I  buBtoeei  lander,  not  just 
as  someone  who  heme  the  etnal 
server  up,  he  says, 

"One  of  the  highest  compliments 
paid  to  me  by  our  CB)  is  tM  he 
doeenT  tfM  of  me  as  a  technical 
OuyihetNnksoltmaBarBefbuBi- 
nessnon  who  happens  to  know  a  lol 
about  technology.*  he  says. 

Catatwi,  who  joined  6u«dan  In 
2000.  says  toe  pisvious  fT  regime 
had  "undiRfct  eqwcteltons  and 
ovsnhot  costs,  and  toll  fed  to  a  IsvbI 
of  dtasalislaclion  vWto  IT.’ 1b  turn  that 
around.  CNIahan  says  he  pushed  rr 
into  a  "rapid  reeponaa  danHervtoe 
onenlalian.  slarlino  wtti  ma.  dmm." 

He  recais  toe  rsalt:  "Tha  word  got 
out  -  M  are  doteg  somstoing  new. 
srearero(Mnafoto,wean8anlce- 
oriented.  and  the  buBiiwB  heads  and 
IptetnertafHlawaThBiypicilraac* 
Hon  foom  toam  was,  *0(1.  i  wtah  you 
ware  hare  fore  yesrs  ago.** 
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ness  units  are  joined  at  the  hip  before  a 
project  starts.  "Funding  is  agreed  upon 
between  the  systems  and  business 
partners,  and  they  go  together  to  our 
corporate  leadership  for  the  money." 
she  says.  They  coUaboratively  work 
out  w^t  the  ROI  is  and  the  goals  of 
the  project  before  requesting  funding.” 

Every  six  months.  Roubinek  says,  the 
IT  and  business  partners  take  a  fresh 
look  at  each  project,  recompute  the  ex¬ 
pected  ROI  and  request  funding  for  the 


next  six  months.  Risk  mitigation  plans 
are  updated  at  that  time.  Any  project 
heading  south  could  get  killed  at  one 
of  these  reviews.  "We  have  developed 
the  managerial  courage  to  stop  a  proj¬ 
ect  when  we  feel  it's  not  meeting  our 
original  expectations,"  she  says. 

Corporate  Systems  Vice  President 
Damien  Bean’s  strategy  for  success  at 
Hilton  Hotels  Corp.  in  Beverly  Hills. 
Califn  can  be  summed  up  in  one  word: 

Conrimied  on  page  40 
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^2^anyware-  The  downside:  your  wall  through  the  parking  lot  was  long.  The  upside:  it  gave  you  time 
~  to  think  about  a  way  to  eliminate  the  high  cost  and  hassles  of  overnight  delivery. 

And  io  and  behold,  you  found  it:  Canon  imageRUNNER*  technology.  It  lets  you  send  documents  anywhere,  in  any  form,  at  any  time, 
over  your  network  or  the  Internet.  Instantaneously.  Just  scan  a  document  into  the  imageRUNNER  and  send  it -to  desktops.  E-mail 
addresses,  fax  machines,  databases  and  file  servers.  All  of  which  results  in  lowered  costs  and  increased  productivity.  So,  take  pride. 
Thanks  to  Canon  know-how.  your  walk  through  the  parking  lot  is  considerably  shorter.  1-866-25-CANON  www.imagcrunner.com 


Canon  KNOW  HOW" 
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Jiiciphni'-  "Wo  run  IT  liko  a  business." 
ho  says.  “  I  hc  oniiro  I  T  bud^'ot  —  every 
lost  eimi  —  is  funded  out  of  the  business 
s»de.  and  we  charije  back.  Wo  abstiluiely 
hit  our  budgets.  Wc  iuv  ver>'  disciplined, 
and  we  deliver  what  we  promise." 

Bean  puts  the  issue  <»f  IT's  reputation 
into  pcTSpective:  “I  don't  think  I  T  c\- 
ecuiives  are  suffering  a  credibility  gap 
more  than  any  other  senior  function." 
He  fu>'s  it"  IT  deserves  a  hit  for  its  role 
in  the  cxccssi.'s  t>f  the  late  l‘>‘)Os.  finan¬ 
cial  executives  deserve  it  even  more. 

One  way  ti>  elevate  the  stature  of  IT 
inside  a  company  may  be  to  outsource 
the  commodity  functions  and  ix'tain 
the  strategic  ones.  Owens  &  Minor 
Inc.,  a  Richmond.  Va.-based  medical 
5upplie.s  distributor,  has  oui.sourced 
day-u>-djy  IT  development  and  opera¬ 
tions  to  iVrot  Systems  Corp.  What  re¬ 
mains  is  a  small  CIO  office.  Populated 


by  a  dozen  people  whi'  act  as  links 
with  the  business  units,  the  office 
“sti*ers  IT  in  the  direction  wc  need  to 
go."  says  Don  Stollcr.  director  of  infor¬ 
mation  management.  Stollcr  says  Perot 
Systems  gives  him  more  flexibility  to 
get  the  right  skills  for  prt*jecis.  "I  don't 
know  if  wc  could  have  maintained  the 
credibility,  and  the  deliveiy  of  projects, 
wiihimt  outsourcing."  he  says. 

.So  while  IT  remains  in  the  doghouse 
at  many  companies.  IT  managers  else¬ 
where  have  employed  a  variety  of 
strategies  to  win  respect.  The  most 
successful  ones  say  there  is  just  no 
substitute  for  quality  work  delivered 
on  time  and  on  budget.  I 

LOOKWe  IN  THE  MIRROR 

See  how  IT  leatfersresporKledto  Convurenwif/ffs 
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PAUL  A.  STRASSMANN.  an  IT  manage- 
(nent  consultant  and  Corrvutefworid  colum¬ 
nist  who  has  served  as  the  CIO  at  several 
large  companies  and  federal  agencies,  says 
there  are  three  kinds  ot  CIOs,  and  if  you 
want  to  be  well  respected,  you  should  strive 
for  the  top  category. 

The  'technology  CIO'  is  on  the 
lowest  rung  of  the  ladder  and  con¬ 
trols  3%  or  less  of  the  company's 
total  budget  -  basically  direct 
spending  for  FT  people  and  gear, 
he  says.  Next  comes  the  'Inlorma- 
lion  resources  CK).'  who  controls 
not  only  technology  spending  but 
also  spending  on  informahon  re¬ 


sources  generally,  perhaps  30%  ot  the  bud¬ 
get.  At  the  top  sits  the  ‘information  strategy 
CIO.'  who  ultimately  has  some  influence 
over  100%  of  the  budget. 

TAfhen  you  are  a  technology  CIO  every¬ 
body  hates  you.  because  when  the  e-mail 
goes  down,  it's  your  fautt  *  Strassmann  ex- 
(^ins.  II  you  want  io  be  apprea- 
ated.  you  have  to  get  an  upgrade ' 
To  move  ahead.  Strassmann 
offers  this  advice:  *f^ill  up  your 
socks  and  get  going  Stop  grous¬ 
ing  and  make  a  contr^tution  My 
grandfather  lold  me  that  -  you  ei¬ 
ther  pull  up  your  socks  or  you  die.* 
-fiiryW.Anfftes 


SUFFEMNO  FROM  A  TARNISHED  reputa 
lion  in  IT’  You  may  want  to  step  up  your  sales 
efforts  with  a  marketing  program  that  helps 
reinforce  the  value  that  IT  delivers. 

IT  executives  at  companies  that  have  en¬ 
acted  such  programs  -  including  The  MONV 
Group  Inc..  CBS  and  Baiter  International  Inc 
-  pant  to  teal  benefits  hke  financial  gams  and 
image  makeovers 

Two  years  ago.  MONY  restructured  itself  by 
creating  separate  and  dedcaied  IT  groups.  IT 
budgets  and  FT  relationship  manager  oosi- 
iions  to  support  each  of  its  business  units. 
That's  when  the  IT  departmenfs  markeing 
efforts  began  in  earnest,  says  E-P  Rogers,  se¬ 
nior  vice  president  and  QO  at  the  New  Vbrk- 
based  conyiany. 

The  reason  MONTs  newfy  organized  bust 
ness  umls  were  also  given  the  OK  to  go 
around  corporate  fT  artd  collect  txds  loi  lech- 
nologv  proiects  from  third-parTy  vendors.  II 
the  best  price  and  skis  came  from  the  capo- 
rate  IT  group,  so  much  the  better.  It  not.  busi¬ 
ness  units  were  free  to  hoe  irom  outside 

*We  were  always  focused  on  our  cus¬ 
tomers.  and  we'd  afways  gotten  high  maiks* 
from  end  users  on  an  annu^  IT  report  card. 
Rogers  says  "Bui  when  the  [outside  services 
rule)  came  down  two  years  ago.  we  had  to 
market  If  we  didn  i  have  the  nghl  aoaoach  or 
cutture  estabhshed,  we'd  lose  customers  aid 
have  to  la  go  of  people* 

Smee  then.  MONTs  IT  group  has  taken 
steps  to  vakdate  and  better  commumcale  its 
value  to  users  These  steps  include  bench¬ 
marking  the  costs  of  developing  applications. 


running  its  data  centers  and  other  IT  support 
lunclions  against  external  competitors  such 
as  IBM  says  Rogers 

file  IT  group  has  also  published  a  products 
and  services  brochure  la  business  units  to 
evaluate  the  costs  and  breadth  of  the  IT 
group's  offerings,  including  hourly  Web  ser¬ 
vices  programmer  rales  and  data  center  sup¬ 
port  costs 

MONTs  IT  group  has  been  m  head-to- 
head  competition  with  outside  providers  fa  IT 
projects  five  times  and  hasn't  lost  one  yet. 

This  includes  a  recent  request  lor  aopos- 
als  by  the  company's  annuities  division  to  in- 
siaH  a  new  administration  system  from 
Mafvern.  Pa  -based  AdminServer  Inc  One 
third-parfy  services  firm  "aggressiyolv*  pur¬ 
sued  the  deal,  but  MONY's  IT  gioup  demon¬ 
strated  that  It  could  instafl  the  system  fa 
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SI  million  less  than  the  competitor's  asking 
price,  says  Rogers. 

The  internal  IT  group  was  able  Io  meet  sys¬ 
tems  integration  and  design  needs  in  a  'much 
mae  cost-effective*  apaoach  than  other 
companies  that  bid  on  the  proiecl.  says  Carol 
Sullivan,  vice  aesident  and  CFO  of  MONY's 
annuities  division.  The  implementation  began 
in  March  and  is  expected  to  continue  through¬ 
out  2003.  she  says. 

Befae  the  restructuring.  IT  'was  one  cost 
cenfei  within  a  caporate  entily.'  says  Sulli¬ 
van.  Now.  she  says,  the  IT  departmenl  is 
viewed  as  a  partner,  and  both  parlies  have  a 
stake  in  reducing  IT  costs,  such  as  CPU  use 
and  staage  requirements  *11$  relevant  now 
that  we  re  paying  the  bills.'  Sullivan  adds. 

Laie  Iasi  yeai.  CBS.  a  division  of  Viacom 
International  Inc.,  launched  an  IT  Iranstorma- 
tion  program  that  includes  an  IT  marketing 
and  communications  practice.  The  marketing 
piece  IS  aimed  at  helping  the  IT  deparlmenl 
better  align  itsell  with  the  business  units  it 
supports,  including  the  CBS  television  net¬ 
work.  30  Viacom  TV  stations  across  the  U.S.. 
183  radio  stations  run  by  Infinity  Broadcasting 
Corp..  and  Viacom  Outdoors,  a  billboard  and 
tiansil  advertising  service. 

“The  business  had  changed  quite  a  bit  over 
the  years  and  [the  IT  organization)  hadn't.' 
says  Julie  Kapsch.  vice  president  ol  strategic 
services  for  f^S  IT  in  New  York.  “We  bans- 
lormed  ourselves  in  order  to  be  better  aligned 
With  the  business  and  to  help  us  execute 
against  an  aggressive  [business]  agenda.” 

Kapsch  says  rnanagers  Irom  CBS  FT  met 
regularly  with  business  unit  leaders  dunng  the 
yearlong  protect  io  discuss  the  types  of  aod- 
ucls  and  services  they  weie  receiving  and  the 
strategic  direction  fa  each  business  uml  be¬ 


fore  deveioang  a  suppal  plan  for  each  group 

Then,  the  fT  group  did  a  skiUs  assessment 
of  each  ot  its  175  staffers  and  evaluated  all  ot 
ite  processes  -  from  planning  to  project  exe¬ 
cution  and  suppat  -  to  come  up  with  an  op¬ 
erating  model  to  meet  the  needs  ot  the  busi¬ 
ness.  'We  didn't  want  to  eliminate  any  head 
count,  but  we  did  want  to  better  utilize  our  re¬ 
sources.*  Kapsch  says. 

One  of  the  biggest  challenges  tor  CBS  IT 
since  the  reorganization  has  been  trying  to 
apply  best  aac^Kes  to  its  own  environment 
’Even  before  the  leaganization,  we've  been 
trying  to  run  IT  more  like  a  business  and  com- 
mumcate  our  successes  n  business  terms, 
such  as  risk  management  and  yield  manage- 
menl.*  says  Kapsch 

Even  companies  without  famal  IT  public 
relations  lunctions  can  take  steps  to  banish 
the  image  of  IT  For  example.  MasterCard  In- 
ternaiional  annually  surveys  its  external  cus¬ 
tomers  (member  banks).  It  also  surveys  inter¬ 
nal  users  after  every  protect. 

"We  ask  them  did  our  people  understand 
their  requests,  did  they  perfam  on  schedule, 
did  they  pertorm  on  budget  and  so  on,”  says 
Jerry  McElhaflon.  president  ol  global  lechnoh 
ogy  and  operations  at  MasterCard.  The  com¬ 
pany's  IT  satisfaction  rating  is  98%  overall, 
he  says.  Its  “top-box  rating.”  the  percentage 
ol  users  who  give  IT  the  very  highest  nnark.  is 
75%.  he  adds. 

-  Thomas  Hoffman  and  Gaty  H.  Anihes 
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Continued  from  page  38 
discipline.  “Wr  run  IT  like  a  business," 
he  says.  "The  entire  IT  budget  —  every 
last  cent  —  is  hmdcd  out  of  the  business 
side,  and  we  charge  back.  We  absolutely 
hit  our  budgets.  We  are  very  disciplined 
and  we  deliver  what  we  promise." 

Bean  puts  the  issue  oflTs  reputation 
into  perspectivct  “I  don't  think  IT  ex¬ 
ecutives  are  suffering  a  credibility  gap 
more  than  any  other  senior  function." 

He  says  if  IT  deserves  a  hit  for  its  role 
in  the  excesses  of  the  late  1990s,  finan*  ^ 
ciaJ  executives  deserve  it  even  more. 

One  way  to  elevate  the  suture  of  IT 
inside  a  company  may  be  to  outsource 
the  commodity  functions  and  retain 
the  strategic  ones.  Owens  &  Minor 
Inc.,  a  Richmond,  Va.-based  medical 
supplies  distributor,  has  outsourced 
day-to-day  IT  development  and  opera¬ 
tions  to  Perot  Systems  Corp.  What  re¬ 
mains  is  a  small  CIO  office.  Populated 


by  a  dozen  people  who  act  as  links 
with  the  business  units,  the  office 
“steers  IT  in  the  direction  we  need  to 
go."  says  Don  Stoiler.  director  of  infor¬ 
mation  management.  Stoiler  says  Perot 
Systems  gives  him  more  flexibility  to 
get  the  ri^t  skills  for  protects.  “I  don't 
know  if  we  could  have  maintained  the 
credibility,  and  the  delivery  of  projects, 
without  outsourcing,"  he  says. 

So  while  IT  remains  in  the  doghouse 
at  many  companies.  IT  managers  else¬ 
where  have  employed  a  variety  of 
strategies  to  win  respect.  The  most 
successful  ones  say  there  is  just  no 
substitute  for  quality  woric  delivered 
on  time  and  on  budget  I 
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SUFFERfNe  FROM  A  TAmUSHEO  reputa 
tion  in  fP  You  may  want  to  step  up  your  sdes 
elforis  wito  a  rrwhMng  program  thd  helps 
remloice  the  value  that  IT  (Wwers 

ITeieojIivesatcompaniesthathaveen' 
aded  such  progratTis  •  inckidmg  The  MONY 
Group  Inc..  C8S  and  Baxter  International  Inc. 

-  pomt  to  real  benefits  hke  linancial  gains  and 
image  makeovers. 

Two  years  ago.  MONY  restructured  Itself  by 
embng  separate  and  dedicated  IT  groups.  IT 
budgets  ani  IT  relationship  manager  posi- 
bons  to  support  each  of  Its  business  units 
Thai's  when  the  IT  department's  marketing 
eftoris  began  in  earnest,  says  E.P.  Rogers,  se- 
ruor  wee  presidenl  and  CK)  at  the  New  Yxk- 
based  company. 

The  reasoa  MONT s  newly  organized  busi¬ 
ness  units  were  also  given  the  W  to  go 
around  corporate  IT  and  coHeci  bids  lor  tech- 
noiogy  ptoiecis  from  third-parly  vendors.  K 
the  best  prKe  and  sMte  came  horn  the  corpo¬ 
rate  IT  group,  so  much  the  better.  K  not.  busi¬ 
ness  unte  were  free  to  hire  horn  outside. 

'We  were  always  focused  on  our  CUB- 
lomers.  and  we'd  always  gotten  hidi  marks* 
from  end  users  on  an  armud  IT  report  card. 
Rogers  says.  "But  when  the  [outside  services 
rule]  came  down  two  years  ago.  we  had  to 
market  If  we  (Mn'l  have  the  nghi  approach  or 
cuHure  estabkshed.  we'd  lose  customers  and 
have  to  let  go  of  people.* 

Since  then.  MONTs  IT  group  has  taken 
steps  to  validate  and  better  communicale  Its 
valuelousers.Thesestepsindudebench- 
marfong  the  costs  of  develoQirrg  applicatxns. 


mnning  its  data  centeis  and  other  IT  support 
functions  against  external  competitors  such 
as  IBM.  says  Rogers 

The  IT  group  has  also  published  a  products 
and  sevices  brochwe  lor  business  units  to 
evaluate  the  costs  and  breadth  of  the  fT 
group's  ofienngs,  including  hourly  Web  ser¬ 
ves  programmer  rales  and  data  center  sup¬ 
port  costs. 

MONTsfT group  has  beenmhead-to- 
head  competition  with  outside  providers  for  IT 
protects  live  times  and  hasn't  lost  one  yet. 

This  includes  a  recent  request  for  propos¬ 
als  by  the  company's  annuities  division  to  in¬ 
stall  a  new  administration  system  from 
Malvern.  Pa. -based  AdrmnServer  Inc.  One 
third-party  services  firm  'aggressively*  pur¬ 
sued  Che  deal  but  MONTs  IT  group  demor^ 
straled  that  it  could  install  the  system  for 


SI  miion  less  than  the  competitor's  asking 
price,  says  Rogers. 

Ihe  ntemallT  groi^  was  able  to  meet  sys¬ 
tems  integration  and  design  needs  in  a  'much 
more  cost-effective' approach  than  other 
companies  that  bid  on  the  project  says  Carol 
SuHivan.  vice  president  and  CFO  of  M>fTs 
annuities  division.  The  implementation  began 
in  March  and  is  expected  to  continue  through¬ 
out  2003.  she  says. 

Before  the  restructuring.  IT  'was  one  cost 
center  within  a  corporate  entity.*  says  SJi- 
van.  Now.  she  says,  the  ff  dep^ment  s 
viewed  as  a  partner,  and  both  parties  have  a 
stake  in  reduang  IT  costs,  such  as  CPU  use 
and  storage  requirements.  It's  relevant  now 
that  we're  paying  the  bills.'  Sullivan  adds. 

Laie  last  yev.  CBS.  a  division  of  Viacom 
Intemationai  Inc.,  laundied  an  IT  transforma¬ 
tion  program  that  includes  an  IT  marketing 
and  communications  practice.  The  marketing 
piece  IS  aimed  at  helping  the  IT  department 
better  align  itseH  with  the  business  units  it 
supports,  induding  the  CBS  television  net¬ 
work.  30  Viacom  'IV  stations  across  the  U.S.. 
183  radio  stations  run  by  Infinity  froadcastlng 
Corp..  and  Viacom  Outdoors,  a  biDboard  and 
tnutsit  advertising  service. 

*The  business  had  changed  quite  a  bit  over 
the  years  and  [the  IT  organization]  hadn't.* 
says  Juke  Kapsch.  vice  presidenl  of  strategic 
services  for  CBS  IT  in  New  Yxk.  "We  trans¬ 
formed  ourselves  In  order  lo  be  belter  aligned 
with  the  business  and  to  help  us  execute 
against  an  aggressive  [business]  agenda.* 

Kapsch  says  managers  from  CBS  IT  met 
reguiarV  with  business  unit  leaders  during  the 
yeaftongprojectlodiscussthetypesofKXOd- 
ucts  and  services  they  were  receiving  and  the 
strategic  direction  for  each  business  una  be¬ 


fore  developing  a  support  plan  for  each  group. 

Then,  the  IT  group  did  a  skis  assessment 
of  each  of  its  T75  staffers  and  evaluated  al  of 
Its  processes  *  from  planning  to  project  exe¬ 
cution  and  support  -  to  come  up  with  an 
eratmg  model  to  meet  the  needs  of  the  busi¬ 
ness.  *We  didn't  want  to  eliminate  any  head 
counl  but  we  did  want  to  better  utilize  our  re¬ 
sources.*  Kapsch  says. 

One  of  the  biggest  challenges  for  CBS  IT 
since  the  reorganization  has  been  trying  to 
apply  best  practices  to  its  own  enwonmenl. 
'Even  before  the  reorganization,  we’ve  been 
trying  to  run  IT  more  lie  a  business  and  com¬ 
municate  our  successes  in  business  terms, 
such  as  risk  management  and  yield  manage¬ 
ment.' says  Kapsch. 

Even  companies  without  formal  IT  public 
relations  functions  can  steps  to  bumt^ 

the  image  of  IT.  For  example.  MasterCard  In- 
lemalional  annually  surveys  its  external  cus¬ 
tomers  (member  b^).  It  also  surveys  inter¬ 
nal  users  after  every  protect 

*We  ask  them  did  our  people  understand 
their  requests,  did  they  perform  on  schedule, 
did  they  perform  on  budget  and  so  on.' says 
Jerry  Mc^ttoa  president  of  global  lech^- 
ogy  «)d  (derations  at  MasterCard.  The  com¬ 
pany's  fT  satistaction  rating  is  %%  overall, 
he  says.  Its  'lop-box  rating.*  the  percentage 
of  users  who  give  ITlhe  very  highest  marK  is 
75%.  he  adds. 

~  DiomasHo^nan  and  Gary  H.An^ 
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Companies  invested  heavily  ii 
management  tools  prior  to  Y2k  but  have  largely 
failed  to  make  long-term  improvements. 

By  Thomas  Hoffinan 


Flash  back  to  the  late  1990s. 
Companies  were  spending 
billions  of  dollars  to  prepare 
computer  systems  for  the  Y2k 
date  rollover.  One  of  the  key 
n*  investments  many  of  them 
made  was  in  asset-tracking  tools  that 
could  help  them  identify  all  of  their 

hardware  and  software  and  _ 

determine  which  systems 
required  modifications. 

At  the  time,  pundits  and 
IT  managers  widely  be¬ 
lieved  that  the  money  and 
labor  being  pumped  into 
Y2k  would  lead  to  more  mature  asset 
management  practices  beyond  Jan.  1. 
2000  (see  •'YTk's  FaUoul  of  Good  For¬ 
tune.”  (^ickLink  a3140>.  But  that  sce¬ 
nario  didn’t  play  out.  at  least  not  on 
any  grand  scale,  according  to  IT  indus¬ 
try  executives,  managers  and  analysts 
who  track  the  asset  management  mar¬ 
ket  closely. 

“Companies  squandered  a  lot  of  op¬ 
portunities”  by  foiling  to  make  addi- 
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tional  investments  in  their  asset  man¬ 
agement  tools  and  processes,  says 
Frances  O'Brien,  an  analyst  at  Gartner 
Inc.  in  Stamford.  Conn. 

Generally  speaking,  companies  in¬ 
vested  a  lot  of  money  and  efforr  to  get 
a  more  detailed  view  of  the  hardware 
and  softwrare  in  their  IT  portfolios. 

_  says  O’Brien.  “But  they 

didn't  take  asset  manage¬ 
ment  further.”  such  as  using 
it  to  better  manage  IT  con¬ 
tracts  or  to  measure  the  in¬ 
terrelationships  among  sys¬ 
tems  more  effectively,  she 
adds  (see  story  at  ri^t). 

Thai’s  true  In  part  because  many 
companies  were  focused  on  attacking 
the  Y2k  problem  as  cheaply  and  efTi- 
ciently  as  possible  and  paid  scant  at¬ 
tention  to  refining  their  asset  manage¬ 
ment  processes,  says  Phil  Davis,  a  vice 
president  at  Layton  Technology  Inc^ 
a  Tampa.  Fla.-based  firm  that  provided 
IT  auditing  services  to  companies 
in  the  late  1990s  and  now  sells  a  PC 
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auditing  tool  called  Audit  Wizard. 

Consultant  Pat  Cicala  estimates  that 
more  than  half  of  all  corporate  asset 
management  programs  in  the  U.S.  have 
done  little  more  than  gather  diist  since 
Jaa  1, 2000.  Cicala,  president  and  CEO 
of  Cicala  &  Associates  LLC  in  Hobo¬ 
ken.  N.I.,  says  most  companies  have 
failed  to  follow  up  their  Y2k  inventory 
efforts  with  the  creation  of  databases 
to  track  hardware  and  software  licens¬ 
es  and  other  contract  details  on  an  on¬ 
going  basis. 

Indeed,  during  Y2k  preparations, 
many  companies  focused  on  tracking 
their  existing  hardware  and  software 
systems  but  paid  little  attention  to 
managing  them,  says  Kevin  Roche, 
general  manager  of  Getronics  North 
America,  a  Billerica,  Mass.-based  di¬ 
vision  of  Getronics  NV.  an  Amster¬ 
dam-based  IT  consulting  company. 
The  minority  of  companies  that  have 
continued  to  develop  their  asset 
management  practices  are  using 
tools,  people  and  processes  to  track 
hardware  and  software  licenses, 

IT  support  costs  and  system  utiliza¬ 
tion  and  to  determine  when  an  IT  as¬ 
set  “has  reached  the  end  of  its  life,” 
says  Roche. 

Post-Y2k  Priorities 

Y2k  also  had  a  whiplash  effect  on  as¬ 
set  management  practices.  Heavy 
spending  on  Y2k-readinc$$  led  many 
firms  to  postpone  e-business,  re¬ 
source  management  and  other  IT  proj¬ 
ects.  Once  that  pent-up  demand  was 
unleashed  at  the  turn  of  the  century, 
investments  and  enhancements  to  as¬ 
set  management  initiatives  were 
pushed  to  (he  back  burner  at  many 
companies,  says  John  Hillmer.  direc¬ 
tor  of  technology  services  at  North¬ 
western  Mutual  Life  Insurance  Co.  in 
Milwaukee. 

Now.  with  a  weak  economy.  IT  bud¬ 
gets  have  been  stashed  and  IT  depart¬ 
ments  have  been  struggling  to  reduce 
costs  wherever  possible.  Asset  man¬ 
agement  has  been  among  the  projects 
to  take  a  hit  or  be  pushed  to  the  back 
of  the  line.  “Those  oiganizations  that 
are  good  at  asset  management  are  in 
the  catbird  seat."  says  O'Brien.  They 
can  see  how  their  IT  investments  are 
performing,  and  they  have  an  easier 
time  of  obtaining  funding"  for  new 
projects. 

“It's  a  chicken-and-egg  thing.”  says 
Cicala.  If  companies  had  ftmded  and 
executed  their  asset  management  pro¬ 
grams  effectively  over  the  past  few 
years,  “they  would  have  generated  the 
cost  savings  to  pay  for  10  other  proj¬ 
ects.”  she  says.  I 


Beyond  Covering 
Your  Assets 

IT  departments  that  have  managed  to 
stay  current  with  their  asset  managemenl 
programs  since  Y2k  are  now  focusing 
on  configtffation  management  and  on 
making  sure  that  they're  meeting  more 
stringent  software-license  compliance 
guiddines. 

"We're  trying  to  take  asset  manage¬ 
ment  to  the  next  level,  beyond  tradung 
and  inventorying  the  costs  and  service- 
ievel  agreements  for  individual  assets." 
says  John  Hillmer.  director  of  technology 
services  at  Northwestern  Mutual  Life  In¬ 
surance.  HdImer  and  his  fT  group  are  us¬ 
ing  asset  management  toots  and  tech* 
nlQues  to  determine  how  a  new  applica¬ 
tion  will  interface  with  other  softw^  sys¬ 
tems  the  company  uses  "and  the  impad  it 
can  have  on  other  technologies  that  are 
closely  integrated."  he  says. 

Meanwhile.  Microsoft  and  indus¬ 
try  organizations  such  as  the  Business 
Software  Alliance  ‘are  coming  down 
hard*  on  software  license  complivice  - 
a  trend  that's  helpmg  to  drive  a  resur¬ 
gence  in  asset  managemenl  practices, 
says  Phil  Davis,  a  vice  president  at  Layton 
Technology. 

"The  big  guys."  like  Microsoft  and  Ora¬ 
cle  Corp..  are  conducting  software  audits 
with  customers  more  frequently,  "and  you 
have  to  show  what  you  have  in  place." 
says  Werner  Knobfich.  vice  president  of 
custonw  solutions  at  MRO  Software  in 
McLean.  \fo. 

The  Mason  (^ty  School  District  in  Ohio 
is  using  a  systems  management  package 
called  LANOesk  from  Clearwater.  Ra.- 
based  Enterprise  Management  Solutions 
Inc.  to  help  roll  out  new  software  to  its 
2200  Dell  PCs  and  monitor  all  of  its  soft¬ 
ware  licenses  horn  a  central  location. 

L/MDesk.  which  costs  Mason  Qty 
about  S13.000  annually  in  hearses,  has 
helped  the  school  district's  IT  department 
tran^ion  from  sunxirTing  250  end  users 
with  one  techniciari  to  supporting  500 
users,  says  Dave  Ifrckey.  the  group’s  DO. 

Other  companies  are  using  asset  man¬ 
agement  to  cut  costs.  For  instance.  Mike 
Emmerllng.  a  senior  product  manager  at 
Getronics.  points  to  a  i^iarmaceuticals 
company  that  was  having  trouble  return¬ 
ing  leas^  equipment  on  time.  Its  use  of 
asset  management  tools  and  processes 
saved  S150.000  in  lease  cost  overruns, 
he  says. 

-  ThomasHoHmn 
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Information  technology  has  become  a 
commodity.  All  that's  left  to  do  is  mifi- 
^fe  risJcs  and  confroi  costs.  So  states 
MCHOiAS  G.  CARR  in  this  month's  Har¬ 
vard  Business  Review.  Carr  argues  that 
IT.  like  railroads,  elecfncity  and  other 
infrastructural  revolutions  that  came 
before,  has  become  so  pen’osive  that 
companies  can't  live  without  it  but  that 
it  now  offers  them  little  strategic  advan¬ 
tage.  Carr.  HBR's  editor  at  large,  told 
Kathleen  MelymuJca  why  he  thinks 
“IT  management  should,  frankly,  be¬ 
come  boring." 

Why  is  the  strategic  vakw  of  IT  diminishino? 
For  any  resource  lo  have  strategic  val¬ 
ue,  it  has  to  allow  companies  to  _ 

use  it  in  a  distinctive  way.  As  in¬ 
formation  technology  becomes 
more  powerful  and  ubiquitous,  it 
is  increasingly  a  shared  resource 
that  everyone  has  access  to.  As  , 
a  result,  it's  getting  harder  and 
harder  to  use  IT  to  gain  any 
kind  of  edge  over  competitors. 

Does  this  apply  to  alt  kinds  of  IT.  or 
lust  to  infrastructure?  I'm  defining  IT  as 
the  prtxressing,  storage  and  transmis¬ 
sion  of  data,  so  I'm  talking  quite  broad¬ 
ly.  All  of  that  is  actually  becoming  part 
of  the  general  business  infrastructure, 
just  as  the  rail  system  became  part  of 
the  infrastructure  in  the  1800s  and  the 
electric  power  grid  became  part  of  the 
infrastructure  in  the  early  lOOOs. 

Are  you  saying,  for  example,  that  businesses 
have  akeady  derived  most  of  the  vaAie  they 
can  gel  from  the  bitemet?  Most  of  the 
strategic  value.  Companies  are  going 
to  continue  to  use  the  Internet  to  in¬ 
crease  productivity,  but  that's  going 
to  happen  at  the  industry  level,  not  at 
the  level  of  individual  companies.  As 


a  means  of  differentiation,  I  think 
we’re  already  past  the  jx’ak  and  on 
the  downside. 

What  are  the  characteristics  of  IT  that  guar¬ 
antee  this  rapid  commoditization  you  write 
about?  First.  IT  is  essentially  a  trans¬ 
port  mechanism.  It  carries  digital  in¬ 
formation  in  the  same  way  power  grids 
carr>’  electricity.  That's  much  more 
valuable  when  it's  shared  than  when 
it's  used  in  isolation,  so  ever>'onc 
quickly  moves  to  shared  systems.  Sec¬ 
ond.  the  almost  infinite  scalability  of 
many  IT  functions,  combined  with  the 
rush  to  technical  standardization, 
means  there's  no  economic  benefit  to 

_  having  proprietary  applications. 

No  one  writes  their  own 
e-mail  or  word-processing  ap¬ 
plications.  and  that  approach  is 
quickly  moving  to  supply  chain 
management  and  CRM.  Generic 
systems  are  efficient  but  don't 
offer  advantages  over  competi¬ 
tors  because  we’re  all  moving  to 
the  same  systems.  With  the  ar¬ 
rival  of  the  Internet,  we've  got 
the  perfect  delivery  channel  for  gener¬ 
ic  applications.  As  we  move  to  Web 
services,  where  we  can  purchase  key 
applications  just  like  we  buy  electrici¬ 
ty.  that  will  push  us  further  toward  the 
homogenization  of  IT  capability. 

Isn't  ft  possible  that  there  wfli  be  anottier 
'T>ig  thjng"  in  IT  that's  sti  unforeseen? 
That's  possible,  but  we're  already  start¬ 
ing  to  see  that  the  capabilities  of  the 
IT  infrastructure  are  greater  than  the 
needs  that  businesses  have.  It’s  always 
possible  something  out  of  the  blue  will 
change  everything,  but  it’s  hard  to 
imagine  that  happening  the  way  you 
could  five  or  10  years  ago.  Also,  even 
if  somethirtg  like  that  happens,  it  will 
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probably  come  out  of  the  vendor  com¬ 
munity.  not  the  user  community.  All 
companies  will  be  able  to  buy  the  ca¬ 
pability.  so  no  company  will  get  an 
advantage. 

What  do  the  previous  infrasbuchire  build¬ 
outs  -  Bke  railroads  and  eieebidty  -  tel  us 
about  the  ratio  of  rtsks  to  advantages  in  the 
current  state  of  FT?  In  the  early  stages  of 
the  build-out.  companies  can  get  pro¬ 
prietary  advantages  because  access  re¬ 
mains  limited  due  lo  physical  limita¬ 
tions  or  patents  or  high  cost.  So  com¬ 
panies  begin  to  see  them  as  ways  to 
build  advantage.  But  the  build-out  hap¬ 
pens  so  fast  that  the  window  to  gain 
advantage  is  open  only  for  a  short 
time.  Then  the  technology  becomes  a 
cost  of  doing  business  that  all  pay.  and 
nobody  gets  advantage. 

When  things  begin  to  tip  that  way. 
the  risk  involved  in  using  that  technol¬ 
ogy  starts  to  outweigh  the  advantage. 
For  example,  nobody  gets  strategic  ad¬ 
vantage  from  electricity,  but  if  you  lose 
access,  that  can  devastate  your  busi¬ 
ness.  We're  seeing  the  same  thing  with 
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IT.  The  risks  are  beginning  to  weigh 
much  more  heavily  than  possible  bene¬ 
fits.  so  companies  need  a  more  defen¬ 
sive  and  less  offensive  posture  toward 
IT  investments. 

Ar«  you  saying  companies  should  be  more 
concertted  with  IT  risk  mitigatm)  than  with 
fT  strategy?  Exactly.  1  think  FT  security' 
should  be  a  much  greater  concern  than 
it  has  been.  I  think  the  real  competitive 
struggle  in  the  use  and  management  of 
IT  is  over  cost.  It’s  hard  to  use  IT  to 
gain  a  strategic  advantage,  but  if  you 
use  it  poorly,  you  can  quickly  put  your¬ 
self  at  a  cost  disadvantage. 

Vbu  talk  about  overspending  as  the  biggest 
risk  of  al.  but  every  rr  leader  I  talk  to  bleeds 
R(M.  If  an  IT  protect  pays  for  ftself  and  more, 
isn’t  that  enough?  1  think  the  focus  on 
ROI  is  exactly  right.  But  it’s  important 
to  make  sure  when  you  look  at  ROI 
that  you’re  not  assumii^  some  com¬ 
petitive  advantage  that  heightens  pay¬ 
back.  You  have  to  really  took  at  payoff 
in  cost  savings  and  operational  effi¬ 
ciency.  I  think  there's  still  a  danger  of 
managers  getting  excited  about  the  po¬ 
tential  for  advantage  and  moving  too 
quickly  into  new  technology. 

If  It’s  getting  harder  to  roalze  the  benefils  of 
IT.  why  is  the  cutting  edge  not  the  placo  to 

be?  IT  costs  plummet  extremely  quick¬ 
ly.  Companies  should  ask  not  only 
whether  this  investment  is  justified 
based  on  ROI  calculations  today,  but 
whether  payoff  will  be  even  greater  if 
they  wait  six  months  or  a  year.  An  im¬ 
perative  for  IT  management  is  to  go 
slowly  —  to  follow  rather  than  lead. 

Should  IT  mwiegers  be  looking  for  new 
careers?  It  depends  on  what  kind  of  IT 
managers  they  are.  Companies  have 
increasingly  bought  into  the  assump¬ 
tion  that  IT  is  a  strategic  resource.  As 
a  result,  they  have  brought  in  CIOs 
who  are  conceptual,  strategic  thinkers 
about  IT.  I  think  there’s  less  of  a  need 
for  those  types  of  individuals. 

But  because  expenditures  will  re¬ 
main  so  high,  there's  enormous  need 
,  for  technically  astute,  hard-nosed  busi¬ 
ness  people  who  can  really  help  com¬ 
panies  to  get  the  D>ost  out  of  IT  spend¬ 
ing.  I  think  IT  management  will  get 
less  sexy  but  remain  just  as  essential  in 
another  way.  I 


Melymuka  is  a  Computerworld 
conrriburing  writer.  Contact  her  at 
kmelymuka^yahoo.com. 
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It^rmation  r^hno/dgy  has  become  a 
commodity.  Ad  that's  left  to  do  is  miti- 
gate  risks  and  control  costs.  So  states 
MCHOUS  &  CAIVI  in  this  month's  Har¬ 
vard  Business  Review.  Carr  argues  that 
IT,  like  railroads,  electricity  and  other 
in/histructurai  revolutions  that  came 
before,  has  become  so  pervasive  that 
companies  can't  live  without  it  but  thot 
it  now  offers  them  Kttle  strategic  advan¬ 
tage.  Out,  HBR  "S  editor  at  large,  toid 
Kcuhleen  Melymuka  why  he  thinAs 
Tr  monogemOTt  shouid,  frankly,  be¬ 
come  boring." 

WhyteftasbalaBksitoqlfTdhniniaWnq? 

For  any  resource  to  have  strategic  val¬ 
ue,  it  has  to  allow  companies  to 
use  it  in  a  distinctive  way.  As  in¬ 
formation  technology  becomes 
more  powerful  and  ubiquitous,  it 
is  increasingly  a  shared  resource 
that  everyone  has  access  to.  As 
a  result,  it’s  getting  harder  and 
harder  to  use  IT  to  gain  any 
kind  of  edge  over  competitors. 

Dm  this  to  dl  Undi  of  IT.  or 
|wt  to  infradruclurt?  I’m  defining  IT  as 
the  processing,  storage  and  transmis¬ 
sion  of  data,  so  I'm  talking  quite  broad¬ 
ly.  All  of  that  b  actually  becoming  part 
of  the  general  business  infrastructure, 
just  as  the  rail  system  became  part  of 
the  infrastructure  in  the  1800s  and  the 
electric  power  grid  became  part  of  the 
infrastructure  in  the  early  1900s. 

Art  you  saybiB.  for  eaampb.  Ihd  budnessM 
twM  alraa^  dartood  moot  of  lha  vakM  they 
can  gat  from  At  totomet?  Most  of  the 
strategic  value.  Companies  are  going 
to  continue  to  use  the  Intemet  to  in¬ 
crease  productivity,  but  that's  going 
to  happen  at  the  industry  level,  not  at 
the  level  of  individual  companies.  As 


a  means  of  dUTerentiation.  1  think 
we’re  already  past  the  peak  and  on 
the  downside. 

Whatarothecharactariaticsofn'thatguw 
awtoa  the  rapid  mwncaitealtow  you  aw  Ho 
about?  First,  IT  is  essentially  a  trans¬ 
port  mechanism.  It  carries  digital  in¬ 
formation  in  the  same  way  power  grids 
carry  electricity.  That’s  much  more 
valuable  when  it’s  shared  than  when 
it’s  used  in  isolation,  so  everyone 
quickly  moves  to  shared  systems.  Sec¬ 
ond.  the  almost  infmite  scalability  of  I 
many  IT  functions,  combined  with  the  | 
rush  to  technical  standardization, 
means  there’s  no  economic  beneHt  to 

having  proprietary  applications.  , 
No  one  writes  their  own 
e-mail  or  word-processing  ap- 
pUcatioas,  and  that  approach  is 
quickly  moving  to  supply  chain 
management  and  CRM.  Generic 
systems  are  efficient  but  don't 
offer  advantages  over  competi¬ 
tors  because  we're  all  moving  to 
the  same  systems.  With  the  ar¬ 
rival  of  the  Intemet,  we’ve  got 
the  perfect  delivery  channel  for  gener¬ 
ic  applications.  As  we  move  to  Web 
services,  where  we  can  purchase  key 
applications  just  like  we  buy  electrici¬ 
ty.  that  will  push  us  further  toward  the 
homogenization  of  IT  capability. 

hnl  it  pwiidt  that  there  wl  be  another 
"big  ttdRQ”  to  IT  that's  stii  unforeseen? 

That’s  possible,  but  we’re  already  start¬ 
ing  to  see  that  the  capabilities  of  the 
IT  infrastructure  are  greater  than  the 
needs  that  businesses  have.  It’s  always 
possible  something  out  of  the  blue  will 
chai^  everything,  but  it's  hard  to 
imagine  that  happening  the  way  you 
could  five  or  10  years  ^o.  Also,  even 
if  something  like  that  happens,  it  will 


probably  come  out  of  the  vendor  com¬ 
munity.  not  the  user  community.  All 
companies  will  be  able  to  buy  the  ca¬ 
pability.  so  no  company  will  get  an 
advantage. 

WhtodothoprovtousbdrMtructurebuAif- 
outo  >  raffrondi  and  otoefrUty  '  tol  ui 

about  the  rate  of  ritos  to  advantages  in  the 
cwrent  state  of  IT?  In  the  early  stages  of 
the  build-out,  companies  can  get  pro¬ 
prietary  advantages  because  access  re¬ 
mains  limited  due  to  physical  limita¬ 
tions  or  patents  or  hi^  cost  So  com¬ 
panies  begin  to  see  them  as  ways  to 
build  advantage.  But  the  build-out  hap¬ 
pens  so  fast  that  the  window  to  gain 
advantage  is  open  only  for  a  short 
time.  Then  the  technology  becomes  a 
cost  of  doing  business  that  all  pay.  and 
nobody  gets  advantage. 

When  things  begin  to  tip  that  way, 
the  risk  involved  in  using  that  technol¬ 
ogy  starts  to  outweigh  the  advantage. 
For  example,  nobody  gets  strategic  ad¬ 
vantage  horn  electricity,  but  if  you  lose 
access,  that  can  devastate  your  busi¬ 
ness.  We’re  seeing  the  same  thing  with 


The  pervasiveness  of  IT  may  be  making  It  strategically  irrelevant. 
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IT.  The  risks  are  banning  to  weigh 
much  more  heavily  than  possible  bene¬ 
fits.  so  companies  need  a  more  defen¬ 
sive  and  less  offensive  posture  toward 
IT  investments. 

Are  you  Storing  compantos  ahmdd  ba  more 
cofioornod  with  IT  risk  mWgabon  than  wW) 

IT  itrtoogy?  Exactly.  I  think  IT  security 
^lould  be  a  much  greater  concern  than 
it  has  been.  I  think  the  real  competitive 
struggle  in  the  use  and  management  of 
IT  is  over  cost  It’s  hard  to  use  IT  to 
gain  a  strategic  advantage,  but  if  you 
use  it  poorly,  you  can  quickly  put  your¬ 
self  at  a  cost  disadvantage. 

Tbu  tal(  about  ovorepondBQ  as  Ao  faiggKt 
rtok  of  al.  but  oMry  IT  loadir  I  taA  to  btoods 
ROL I  an  IT  proiad  pays  for  Naelf  and  mart, 
tont  ttwl  anough?  I  think  the  focus  on 
ROI  is  exactly  right  But  it's  important 
to  make  sure  when  you  took  at  ROI 
that  you’re  not  assuming  some  com¬ 
petitive  advantage  that  hei^tens  pay¬ 
back.  You  have  to  really  look  at  payoff 
in  cost  savings  and  operational  effi¬ 
ciency.  I  think  there's  still  a  danger  of 
managers  getting  excited  about  the  po¬ 
tential  for  advanta^  and  moving  too 
quickly  into  new  technology. 

If  K*s  gstttog  hardar  to  realza  Ao  banefHs  of 
IT.  why  la  At  aMtog  adga  not  Aa  plM«  to 

ba?  IT  costs  plummet  extremely  quick¬ 
ly.  Companies  should  ask  not  only 
whether  this  investment  is  justified 
based  on  ROI  calculations  today,  but 
whether  payoff  will  be  evra  greater  if 
they  wait  six  months  or  a  year.  An  im¬ 
perative  for  IT  management  is  to  go 
slowly  —  to  follow  rather  than  lead. 

ShcNdd  IT  managare  ba  looking  for  naw 

careore?  It  depends  on  what  land  of  IT 
I  managers  they  are.  Companies  have 
increasingly  bought  into  the  assump- 
ticMi  that  IT  is  a  strategic  resource.  As 
a  result,  they  have  brought  in  CIOs 
who  are  cooceptuaL  strategic  thinkers 
about  IT.  I  think  there’s  less  of  a  need 
for  those  types  of  individuals. 

But  because  expenditures  will  re¬ 
main  so  high,  there's  enormous  need 
for  technically  astute,  hard-nosed  busi¬ 
ness  people  can  really  help  com¬ 

panies  to  get  the  most  out  of  IT  spend¬ 
ing.  I  think  IT  man^ement  will  get 
less  sexy  but  remain  just  as  essential  in 
another  way.  P 

Melymuka  is  a  Computerworld 
contributing  writer.  Contact  her  at 
kmelymiJui@yahooxom. 
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CSC  Wins  $80M 
Outsourcing  Pact 

Domark’a  largaot  inaurtr,  Tryg.  has 
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pods  ammi  IT  waters  from  Tryg 
and  70  IT  worlwrs  from  NordM-TT 
to  togn  dn  as  CSC  amptaytts. 
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What  Measure 
Is  ^^at  Get 


WELL-WRITTEN  IT  services  contract  de¬ 
fines  many  client-specific  requirements. 
But  all  too  often,  the  metrics  necessary  to 
measure  and  meet  those  requirements  are 
•glossed  over  during  contract  negotiations. 


Worse  yet,  service-level 
agreements  are  rarely  en¬ 
forced  as  work  progresses. 

Instead,  buyers  usually 
don’t  bother  to  look  at  the 
metrics  they  have  negotiat¬ 
ed  until  somebody  com¬ 
plains.  This  is  like  balanc¬ 
ing  your  checkbook  only  af¬ 
ter  a  check  bounces. 

Metrics  need  to  be  specif¬ 
ic,  actionable  and  designed 
to  ensure  that  the  supplier 
meets  the  buyer's  goals. 

Metrics  that  are  highly  spe¬ 
cific  but  track  the  wrong 
things  are  useless.  One  ex¬ 
ample  is  a  call  center  that 
measured  the  length  of  calls.  Because 
the  company  was  really  interested  in 
providing  a  very  high  level  of  service,  a 
better  measure  would  have  been  the 
percentage  of  problems  resolved  on 
the  first  call.  Buyers  often  don’t  have 
suflicient  experience  defining  appro¬ 
priate  metrics.  Many  contracts  contain 
immeasurable  and  grandiose  language 
such  as  *Trovide  world-class  support.” 
Clearly  defined  metrics  provide  a 
baseline  against  which  supplier  per¬ 
formance  can  be  fairly  measured. 

At  contract  time,  many  suppliers 
lack  sufficient  information  about  the 
customer’s  requirements  to  propose 
useful  metrics.  (In  some  cases,  suppli¬ 
ers  hope  to  get  back  price  concessions 
by  taking  advantage  of  loosely  worded 
metrics.)  Challenge  your  supplier  to 
share  successful  metrics  from  other 
customers. 

The  buyer  is  ultimately  responsible 
for  the  success  of  any  acquired  prod¬ 
uct  or  service.  Even  when  you  out- 


k  source  a  function  com- 
pletely.  it’s  still  your  re- 
sponsibility  to  monitor  the 
provider  effectively.  Re- 
search  best  practices.  In- 
fy  terview  peers  and  industry 
|P  watchers  to  find  out  what 
r  metrics  are  commonly 
used  and  which  vendors 

I  are  meeting  them. 

Tb  get  the  most  out  of 
your  supplier  measure¬ 
ment  program,  you  should 
do  the  following: 

■  Prioritize  your  goals. 
Most  buyers  are  interested 
in  a  combination  of  finan¬ 
cial  performance,  service 
qtiality,  operational  excellence  and 
the  ability  to  meet  future  needs.  Artic¬ 
ulate  and  weight  each  goal  before 
negotiating. 

■  Defme  metrics  early.  Metrics 
should  be  identified  and  negotiated  as 
part  of  the  initial  contract,  preferably 
by  the  same  individuals  who  will  be 
responsible  for  them  after  the  contract 
is  signed.  But  it's  never  too  late  — 
even  where  contracts  are  already  in 
place,  negotiate  metrics  that  will  effec¬ 
tively  measure  success. 

■  Establish  operational  metrics  that 
support  your  goals.  Appropriate  met¬ 
rics  will  vary  by  company  and  by  type 
of  product  or  service  being  acquired. 
Select  metrics  that  will  accurately  as¬ 
sess  progress,  and  des^  metrics  to 
influence  the  behavior  you  want.  For 
example,  monitoring  “unit  cost"  met¬ 
rics  motivates  your  supplier  to  drive 
those  costs  down  —  especially  if  there 
is  a  bonus  for  doing  so. 

■  Grade  perfoimance.  Use  a  multi¬ 


level  indicator  of  success,  e.g.,  letter 
grades.  If  a  supplier  realizes  halfway 
through  the  month  that  a  target  will  be 
missed,  it  may  quit  trying  if  evaluated 
strictly  “pass/fail."  With  a  letter  grade, 
the  supplier  can  still  get  a  B  for  the 
month. 

•  Use  value-based  metrics.  Poorly 
chosen  metrics  allow  suppliers  to  meet 
their  contractual  service  levels  and  still 
disappoint  the  buyer.  For  example, 
some  suppliers  specify  the  number  of 
people  who  will  staff  a  function  in¬ 
stead  of  specifying  the  expected  out¬ 
put.  Metrics  such  as  response  time  per 
event  and  cost  per  service  unit  are  in¬ 
herently  more  useful. 

■  Use  metrics  that  support  your  cul¬ 
ture.  Companies  that  normally  operate 
based  on  data  and  numerical  analysis 
can  easily  work  with  an  extensive  set 
of  metrics.  Companies  that  are  based 
more  on  passion  and  energy  may  lack 
the  focus  for  more  than  a  small  num¬ 
ber  of  metrics  at  first  Stay  away  fiom 
complex  measurement  approaches  un¬ 
til  comfort  increases. 

■  Define  trade-oflfe.  Prepare  to  pay 
more  for  higher  levels  of  service.  And 
be  fair  —  if  you  want  to  collect  penal¬ 
ties  for  poor  performance,  also  pay  in¬ 
centives  for  exceeding  targets. 

■  Review  performance  regularly 
with  the  supplier.  If  the  service  you 
want  is  significantly  better  than  the 
service  you  are  getting,  develop  a  ser¬ 
vice  improvement  plan  with  appropri¬ 
ate  metrics  and  timetable.  Service- 
level  agreements  form  the  basis  for 
supplier  governance  and  provide  a  sol¬ 
id  foundation  for  clear  commu- 
nicatioiL  Metrics  that  are  carefully 
specified  and  consistently  reviewed 
can  help  manage  expectations  fairly 
and  accurately.  And  they  pay  off — 
what  you  measure  is  what  you  get  I 
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IT  without  borders 


Are  you  contemplating  or  have  you  outsourced  part  or  all  of  your 
IT  operations?  Are  you  taking  the  on-shore  or  off-shore  route? 

What,  if  any,  obstacles  do  you  see  to  offshore  outsourcing. 

What  benefits  do  you  hope  to  reap? 

We  want  to  hear  about  your  experiences  so  we  and  your  peers  can  get 
a  clear  picture  of  where  outsourcing  stands  in  today’s  IT  strategies. 

We  invite  you  to  participate  in  the  Computerworld  and  InterUnity 
Group  survey  on  the  Best  Practices  and  Emerging  trends  in 
On-Shore  and  Off-Shore  Outsourcing. 

If  you  complete  the  entire  survey,  you  wiil  receive 
a  complimentary  report  of  the  findings. 

(Ali  responses  will  remain  confidential). 

To  participate  in  the  survey,  piease  visit: 

http://websurveyor.net/wsb.dll/11829/interunityoutsource.htm 


Need  more  information?  Please  contact  research@computerworld.com. 
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Reboot.,  with  no  'U'  there. 

Control  power  remotely  with  APC's  space-saving  0  "U"  MasterSwitch" 

Control  power  to  your  valuable  connected  network  devices  using  MasterSwitch's  remote 
on/off/reboot  capability  Ideal  for  any  situation  where  rebooting  or  power  cycling  is  required  of 
equipment  or  'locked-up*  servers  The  MasterSwitch  mounts  venicaily,  requiring  zero  U  space, 
leaving  you  with  more  room  for  your  network  equipment  Trust  your  remote  management  needs  to 
the  leader  in  power  protection:  APC.  To  learn  more  today  visit  us  online  at  www.apc  com 

OPTIMIZED  FOR  MANAGEMENT  AND  CONTROL 


•  Wireless  Application  Protocol 

•  Boot-P  support 

•  Accessible  terminal  block  for  hardwire 
c^tability 

•  Event  configuration 

•  E-mail  notification 

•  V^cal  mounting,  requiring  zero  'Ll' 
of  space 

•  Remotely  manage  outlets  by  turning 


outlets  on/off  or  rebooting  connected 
equipment 

•  Built-in  Ethernet  interface*  for  direct 
connection  to  the  LAN 

•  MD5  authentication  security 

•  Power-up  sequencing  lets  you  configure 
the  sequence  in  which  power  to  outlets  is 
turned  on  or  turned  off. 


JRequire^sepa^te  controt 


Enter  to  WIN  a  FREE  APC  MasterSwitch"  today. 
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Legendary  Reliability* 


Eye  View 


Introducing  APC's  Rack-mount  LCD  Monitor 

As  floor  space  in  your  IT  environment  becomes  more  expensive  and  difficult  to 
allocate,  you  need  to  utilize  your  rack  enclosure  space  as  efficiently  as  possible. 

A  traditional  CRT  monitor,  monitor  shelf,  keyboard,  and  keyboard  drawer  take  up  to 
13LI  of  your  valuable  tack  space.  An  APC  rack-mount  LCD  monitor Aeyboard  drawer 
offers  you  the  same  functionality  while  using  only  1U  (1.75'|  -  leaving  you  with  up 
to  12U  of  valuable  space. 


Enter  to  WIN  a  FREE  APC  LCD  Monitor  today.  A  value!  j 
IMMt(//nwAICMiWMiHI3y*UW8-289-APIXx6S56«f«401-7lt  i 
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Knowledge  You  Need 

Track  changing  market  conditions,  follow  the  latest  news  and 
develop  strategies  for  deploying  new  technology. 

No  matter  what  you're  looking  for,  you're 
sure  to  find  it  in  one  of  our  16  online 
Knowledge  Centers.  Each  self-contained 
virtual  library  contains  a  complete 
collection  of  topically  based  resources  on  a 
specific  subject — from  storage  to  IT 
management  to  ROI.  With  a  weahh  of 
aggregated  information,  these  easy-to- 
navigate  Knowledge  Centers  are  a  single 


point  of  access  to  all  of  the  information  you 
need  to  support  important  business  and 
purchase  decisions: 

•  Up-to-the-minute  news 

•  Special  reports 

•  VWiite  papers 

•  Research  and  analysis 

•  Vendor  listings 

•  Event  and  training  information 


Visit  Computerwortd.com  and  get  all  the  knowledge 
you  need  to  make  informed,  confident  decisions. 

Computerworld.com/knowledgecenters 
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COMPUTERWORLD 
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Continued  from  page  J 

People^ft 

When  Vail  Resorts  upgrad¬ 
ed  to  Version  8.1  of  People- 
Soft’s  human  resources,  pay¬ 
roll  and  other  employee- 
related  applications  two 
years  ago.  some  of  the  soft¬ 
ware  required  monthly  patch 
downloads,  Silvera  said.  At 
times,  patch  management  be¬ 
came  "a  maintenance  night¬ 
mare.”  she  added.  Since  then, 
Silvera  has  worked  with  Peo- 
pleSoft  to  address  the  patch 
issues  and  said  she  has  seen 
”a  concerted  effort  to  in¬ 


crease  quality  assurance  ” 

7’be  idea  of  streamlining 
the  software  upgrade  process 
is  also  of  interest  to  G^rge 
Muller.  CIO  at  Imperial  Sugar 
Co.  in  Sugar  Land.  Texas.  The 
stigar  maker  runs  a  mix  of 
PeopleSoft  7  and  8  ERP  appli¬ 
cations.  and  Muller  said  any 
technology  that  can  reduce 
costs  and  time-consuming 
procedures  for  his  IT  staff 
"definitely  gets  me  excited" 
But  Joshua  Greenbaum,  an 
analyst  at  Enterprise  Appli¬ 
cations  Consulting  in  Ody 
City,  Calif,  said  PeopleSoft 
needs  to  prove  that  it  can 
back  up  its  lofty  rhetoric. 

"PeopleSoft's  customer  ini¬ 
tiative  looks  good  on  paper, 
but  we  need  more  sul»tance 
to  truly  evaluate  its  potential  I 
impact."  he  said  "Tito  indus¬ 
try  standard  for  solving  these 
problems  largely  consists  of 
talk  and  no  aaion.  so  if  Peo¬ 
pleSoft  can  set  a  new  stan¬ 
dard.  all  power  to  them." 

'  Rick  Bergquist,  People- 
Soft’s  chief  technolc^  offi¬ 
cer.  said  the  company  plans 
to  build  packaged  connectors 
into  its  applications  so  users 
can  more  easily  connect 
them  to  software  from  rival 
vendors  like  SAP  AG  and  Or¬ 
acle  Corp.  For  example,  be 
said  the  next  release  of  Peo- 


PeopleSofl  Maps  Out  Linux  Strategy 

f^ooteSoftafsoannouncadit  :  tionsavwsoftMweetspri- 


iisl  iM8k’s  conterence  fM  R 
pianslomahBalfTOofRsap* 
picalionfi  Mbbte  on  ftod  Hal 
lnc.’s  MiBion  of  UniB.  slartino 

IntheloirtKiuivter. 

David  Saii^  tichnofooy 
product  mariefino  manager  M 
f^opleSoft.  said  the  move «« 
promtfedbyanincroaaedinler- 
esi  ammo  IT  manaoeis  in  uang 
Linux  beyond  baaic  fie  mi  Whb 
sarwn.  IIon:  customars  an 
leino  us  they  mrt  to  nm  antar- 
prte  appicadoni  (on  UniB- 
besed  syslams].*  ha  safd. 

PeopiaSoft  anoirwed  BITS 
MaHased  servers,  DB2  ctoto' 
base  and  WebSphanappica- 


pleSofi’s  supplier  relation¬ 
ship  management  module, 
due  later  this  year,  vrill  sup¬ 
port  out-of-the-box  integra¬ 
tion  with  SAP  applications. 

Bergquist  called  People- 
Soft’s  plan  "the  beginning  of 
the  end  of  middleware.*  An¬ 
other  PeopleSoft  executive 
said  the  built-in  connectors 
will  require  less  work  On  the 
part  of  IT  managers  than  the 
AppConnect  imegration 
tools  that  the  company  an- 


rnary  dMtoprnara  pialhmns  tor 
the  opan-soifca  oparabno  sys¬ 
tem.  But  toe  softMan  widor 
satolwiaisosuppariasappl' 
cafions  on  other  aarvars  that 
tun  Red  Hat  Adnncad  Server. 

Lie  otoar  appication  ven¬ 
dors  nsopleSoft  is  raotvvzirio 

*toeconp0atoaa6peclofhBV- 
ino  a  (Jns  solution.*  satd 
St^OiendLananatystat 
ForaM  Research  krc.  In  Cam- 
bttope.  Mass.  *Thera‘s  obvious 
demand  m  toe  rreikel* 

BaorgeMular.CIOatbnperi- 
al  Sugar,  said  Untn  support 
may  be  of  serre  Merest  to  him 
doMn  toe  Ire.  But  toe  suge 


mater  ofiantty  runs  Is  systems 
aimoMmrtBiVBty  on  Windows, 
and  Muter  said  he  plans  to  gat 
toe  most  out  of  his  riMStoenls 
In  Mcrosofi  Corp’s  tachnofogy 
fortoentitaaverafiiavs. 

A  sanlar  sauBbon  prevais  at 
Vat  Resorts  Maraoament.  Vidd 
Stoeia.  toe  company's  dkactor 
of  Mormatton  systerm.  said 
Unn  B  stamriQ  to  catch  her  at- 
tenfion. 

ButValResortscaMcro- 
softahoptoatielesanWn- 
dmvs  arid  SQL  Sarvar  databas¬ 
es  *0nty  time  can  tel  I  there  Is 
an  opportunlly  or  advenoge  tor 
toe  company  [wflh  Una].’ said 
Stoera. 

-UltKLSanifn 
and  Todd  R.  Wees 


nounced  last  August 

But  AppConnect  will  con¬ 
tinue  to  play  a  major  role  in 
enabling  the  promised  inte¬ 
gration  with  rival  applica¬ 
tions.  according  to  People- 
Soft.  And  Bergquist  said  spe¬ 
cialized  connectors  may  b« 
needed  to  help  users  inte¬ 
grate  People5foft  applications  | 
with  bomegrown  or  heavily 
customized  systems. 

PeopleSoft  is  also  woridng  I 
to  embed  diagnostic  tools  in  I 


its  applications  to  help  IT 
managers  track  software 
patches  and  automatically 
download  newly  issued  ones. 
In  addition.  Conway  claimed 
that  users  will  eventually  be 
able  to  upgrade  their  applica¬ 
tions  with  zero  downtime.  I 
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tors  and  vendors.  But  Swan 
said  the  combination  of  low¬ 
er  margins  on  N/MCI  seats 
and  deployment  delays  that 
shortened  the  time  EDS  had 
to  generate  revenue  per  seat 
produced  a  loss  that  couldn’t 
match  the  increase  in  the 
number  of  deployed  seats. 

N/MCl  is  a  S6.9  billion  IT 
outsourcing  contract,  often 
referred  to  as  seat  manage¬ 
ment,  that  will  give  the  Navy 
and  Marine  Corps  secure, 
universal  access  to  integrated 
voice,  video  and  data  com¬ 
munications.  Plano,  Texas- 


based  EDS  won  the  contract 
in  October  2000.  However, 
technical  difficulties,  deploy¬ 
ment  delays  and  user  com¬ 
plaints  have  hampered  the 
program  since  its  inception. 

E>uring  the  first  quarter. 
EDS  made  what  Swan  called 
"reasonable  progress"  in  tbe 
number  of  N/MCI  seat  orders 
received,  but  be  said  the  com¬ 
pany  fell  behind  in  the  num¬ 
ber  of  seats  actually  "cut 
over"  to  N/MCL  Swan  added 
that  EDS  has  "good  visibility" 
into  second-quarter  orders 
for  seats  but  that  "we  need  to 
accelerate  tbe  cut-over  seats 
to  a  rate  of  approximately  900 
a  day  and  bold  this  level 
throughout  the  year." 


More  important  is  tbe  im¬ 
pact  that  the  N/MCI  loss  has 
had  on  free  cash  flow.  EDS 
now  expects  to  have  S1.9  bil¬ 
lion  in  free  cash  flow,  com¬ 
pared  with  its  prior  estimate 
of  S2.1  billion,  said  Swan. 

While  several  risks  to  tbe 
N/MCI  contract  remain  — 
such  as  more  deployment  de¬ 
lays.  further  declines  in  aver¬ 
age  seat  price  and  potential 
delays  in  milestone  testing  — 
‘^ve  believe  they  are  manage¬ 
able."  said  Swan. 

Sunn  assured  financial  an¬ 
alysts  that  the  company  is 
taking  steps  to  improve  the 
operating  controls  of  tbe  i 
N/MCI  account.  So  far.  EDS  I 
has  made  improvements  to  I 


the  cost  estimation  process, 
assigned  additional  financial 
personnel  to  the  contract 
and  made  staff  changes  at  the 
program  management  office. 

EDS  has  also  conducted  a 
detailed  review  of  at  least  a 
dozen  so-called  problem 
contracts,  said  Swaa  "While 
we  continue  to  pursue 
megadeals  as  a  key  element 
of  our  strategy,  we  are  beii^ 
more  selective  in  the  deals 
we  are  looking  at."  he  noted. 

EDS  CEO  Michael  Jordan 
said  that  durii^  the  past  sev¬ 
eral  months,  EDS  has  baclced 
away  ftom  contracts  that 
would  put  the  company  in  a 
position  of  too  much  nega¬ 
tive  cash  flow.  "Thb  is.  in 


facL  a  cash-generating  busi¬ 
ness,"  said  Jordan.  "We  have 
to  re-establish  the  company's 
credibility  with  the  financial 
community."  Details  on 
EDS’s  strategic  transforma¬ 
tion  plan  will  be  released 
next  month. 

When  a  financial  analyst 
asked  if  there  was  a  chance 
that  the  N/MCI  contract 
wouldn't  be  pan  of  EDS's 
ponfolio  in  tbe  near  future, 
Jordan  responded.  "I  would¬ 
n’t  think  so."  I 
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People^ft 

When  Vail  Resorts  upgrad¬ 
ed  to  Version  8.1  of  People- 
Soft's  human  resources,  pay¬ 
roll  and  other  employee- 
related  applications  two 
years  a^to.  some  of  the  soft¬ 
ware  required  monihiv  patch 
downloads.  Silvcra  said.  At 
times,  patch  mana^'emeni  be¬ 
came  *‘a  maintenance  night¬ 
mare."  she  added.  Since  then. 
Silvera  has  worked  with  Peo- 
pleSoft  to  address  the  patch 
Issues  and  said  she  has  seen 
"a  concerted  efA>rt  it)  in¬ 


crease  quality  assurance." 

Ilje  idea  i»f  streamlining 
the  software  upgrade  pnxess 
is  also  of  interest  to  (ieorge 
Muller.  CIO  at  Imperial  Sugar 
Co.  in  Sugar  Ijnd.  Te.\as.  The 
sugar  maker  runs  a  mix  of 
PeopleSoft  7  and  8  HRP  appli¬ 
cations.  and  Muller  said  any 
technology  that  can  reduce 
costs  and  time-consuming 
priKcdures  for  his  I'l'  staff 
"definitely  gets  me  excited." 

But  |t>shu3  Greenbaum.  an 
analyst  at  Enterprise  Appli¬ 
cations  Consulting  in  Daly 
City.  Calif.,  said  f^eopleSoft 
needs  to  prove  that  it  can 
back  up  its  lofty  rhetoric. 

"PcopleSoft's  customer  ini¬ 
tiative  looks  good  on  paper, 
but  wc  need  more  substance 
to  truly  ex’aluate  its  potential 
impact."  he  said.  "The  indus¬ 
try  standard  for  solving  these 
pri)blems  largely  consists  of 
talk  and  no  action,  so  if  l*eo- 
pleSofi  can  set  a  new  stan¬ 
dard.  all  power  to  them.” 

Rick  Bergquist.  Pc4)p!e- 
Soft's  chief  technology  offi¬ 
cer.  said  the  company  plans 
to  build  packaged  coiUK^ciors 
into  its  applications  so  users 
can  more  easily  connect 
them  to  softxvarc  from  ri\-al 
vendors  like  SAP  AG  and  Or¬ 
acle  Corp.  For  example,  he 
said,  the  next  release  of  Peo- 


PeopleSoft  Maps  Out  Linux  Strategy 


f^oleSolt  also  announced  at 
Iasi  week  s  conference  that  il 
plans  lo  make  all  170  of  its  ap¬ 
plications  available  on  Red  Hal 
Inc ‘s  version  of  Linux,  starting 
in  the  fourth  quarter 
David  Sayed.  technology 
product  marketing  manager  at 
ReopleSofl.  said  the  move  was 
prompted  by  an  increased  inter¬ 
est  among  IT  manages  in  usirtg 
Linux  be^md  basic  file  and  Web 
servers.  ’Now,  customers  are 
telling  us  they  want  lo  run  enter¬ 
prise  applications  [on  Lmux- 
based  systems].'  he  said 
PeopleSofl  anointed  tSM's 
Intel-based  servers.  DB2  data¬ 
base  and  WebSphere  appiica- 


plcSoft  s  supplier  relation¬ 
ship  management  miwJulc. 
due  iaier  this  year,  will  sup- 
pon  ouln)f-th«.-hox  integra¬ 
tion  with  SAP  applications. 

Bergquist  called  Pi'tiplc- 
Soft's  plan  "the  beginning  of 
the  end  of  middleware."  An¬ 
other  PeopleJH)ft  executive 
said  the  built-in  connectors 
will  require  less  work  on  the 
part  of  IT  managers  than  the 
AppConncct  integration 
tools  that  the  company  an- 


tion  s»ver  software  as  rts  pri¬ 
mary  development  platforms  lor 
the  open-source  operating  sys¬ 
tem  But  the  software  vendor 
said  It  will  also  support  its  appli¬ 
cations  on  other  servers  that 
run  Red  Hat  Advanced  Server 

Like  other  applicalKMi  ven¬ 
dors,  PeopleSoft  IS  recognizing 
"the  competitive  aspect  of  hav¬ 
ing  a  Lmux  solution.'  said 
Stacey  OuandL  an  anaiysl  at 
Fonester  Research  Inc  in  Cam¬ 
bridge.  Mass  "There's  obvKWS 
demand  m  the  market." 

George  Muller.  CK)  at  Imperi¬ 
al  Sugar,  said  Linux  support 
may  be  of  some  interest  to  him 
down  the  kne.  But  the  sugar 


maker  currently  runs  its  systems 
almost  exclusively  on  Windows, 
and  Muller  said  he  plans  lo  gel 
the  most  out  of  his  investments 
m  Mictosofi  Corp  s  technology 
tor  the  next  several  years 
A  similar  Situation  prevaAs  at 
Vail  Resorts  Management  Vick< 
Sflvera.  the  company  s  director 
of  inlormauon  systems.  sa«3 
Unux  IS  stanirtg  to  calch  her  at¬ 
tention 

But  Vail  Resorts  is  a  Moo- 
soft  shop  that  relies  on  Win¬ 
dows  and  SOL  Server  databas¬ 
es.  'Only  time  can  leH  if  there  is 
an  opportunity  or  advantage  tor 
the  company  [with  Linux].'  said 
Srivera 

-MarcL  Songmi 
and  JoddR  W&ss 


m'unccd  Iasi  .August. 

But  ApiHZunneci  will  c««n- 
timu-  to  play  a  mapir  role  in 
enabling  the  promised  inie- 
gratlon  with  rival  applica¬ 
tions.  according  to  lV^>ple• 
Soft-  And  Bergquist  said  spi*- 
cializisj  txmneciors  may  be 
needed  to  help  users  inte¬ 
grate  ^•eoplcSoft  applicaiiom. 
with  homegrown  or  heavily 
customized  systems. 

l*eopleSoft  is  also  working 
ii*  emK’d  diagnostic  tools  in 


itsapplk-.ilion-slohelp  11 
managers  tr.-ick  M*fiware 
paichi-sand  autt>m.iiic.ill\ 
download  neuiy  issued  ones 
In  addition.  Conway  claimed 
that  users  will  eventually  he 
able  to  upgrade-  their  applica¬ 
tions  with  zero  downtime.  I 
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N/MCI 

tors  and  vendors.  But  Swan 
said  the  combination  of  low¬ 
er  margins  on  N/MCl  scats 
and  deployment  delays  that 
shortened  the  time  EDS  had 
to  geiKTate  revenue  per  seat 
produced  a  loss  that  couldn't 
match  the  increase  in  the 
number  of  deployed  scats. 

N/MC!  is  a  S6.9  billion  IT 
outsourcing  contract,  often 
referred  to  as  seat  manage¬ 
ment.  that  will  give  the  Navy 
and  Marine  Corps  secure, 
universal  access  to  integrated 
voice,  video  and  data  com¬ 
munications.  Plana  Texas- 


based  EDS  won  the  contract 
in  October  2000.  However, 
technical  difficulties,  deploy¬ 
ment  delays  and  user  com¬ 
plaints  have  hampered  the 
pn^ram  since  its  inception. 

During  the  first  quarter. 
EDS  made  what  Swan  called 
"reasonable  progress"  in  the 
number  of  N/MCl  seal  orders 
received,  but  he  said  the  com¬ 
pany  fell  behind  in  the  num¬ 
ber  of  seats  actually  “cut 
over"  to  N/'MCI.  Swan  added 
that  EDS  has  "good  visibility" 
into  second-quarter  orders 
for  seats  but  that  “wc  need  to 
accelerate  the  cut-over  seats 
to  a  rate  of  approximately  ‘>00 
a  day  and  hold  this  Itwei 
throughout  the  year." 


More  important  is  the  im¬ 
pact  (hat  the  N  MCI  loss  has 
had  on  free  cash  flow.  EDS 
now  expects  to  have  SI.*)  bil¬ 
lion  in  free  cash  flow,  com¬ 
pared  with  its  prior  estimate 
of  $2.1  billion,  said  Swan- 

While  several  ri-sks  to  the 
N  MCI  contract  remain  — 
.such  as  more  deployment  de¬ 
lays.  further  declines  in  axer- 
age  seat  price  and  potential 
delays  in  milestone  testing  — 
"wc  believe  they  arc  manage¬ 
able."  said  Swan. 

Swan  assured  financial  an- 
aly-sts  that  the  company  is 
taking  steps  to  improve  the 
operating  controls  of  the 
N  MCI  account.  So  far.  EDS 
has  made  improvements  to 


I  the  cost  estimation  pntccss. 

I  assigned  additional  financial 
personnel  to  the  contract 
and  made  staff  changes  at  the 
program  management  office. 

EDS  has  al.so  conducted  a 
I  detailed  review  of  at  least  a 
I  dozen  stHcalled  problem 
'  contracts,  said  Swan.  “While 
we  exmtinue  to  pursue 
megadeal-s  as  a  key  element 
of  our  strategy,  we  are  K'ing 
more  selective  in  the  deals 
we  arc  looking  at,"  he  noted. 

I  EDS  CEO  Michael  Jordan 
I  said  that  during  the  past  sev- 
I  cral  months.  EDS  has  backed 
away  from  contracts  that 
would  put  the  company  in  a 
posititm  of  tw)  much  nega¬ 
tive  cash  flow.  "This  is.  in 


fact,  a  cash-generating  busi¬ 
ness."  said  |i>rdan.  "AA'c  have 
to  re-i^iablish  the  company  's 
credibility  with  (he  financial 
ct‘mmunity.“  Details  on 
EDS's  strategic  transforma- 
lion  plan  will  be  releasi-J 
next  month. 

When  a  firunciai  analyst 
asked  if  there  was  a  chance 
that  the  N  M<-l  comraci 
w  ouldn't  be  part  of  EDS’s 
portfolio  in  the  near  future. 
Iordan  responded.  "I  would¬ 
n't  think  so."  I 
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FRANK  HAYES  •  FRANKLY  SPEAKING 

Boom  &  Bust  Blues 


THERE'S  SUPPOSED  TO  BE  PLENTY  of  good  news  to  go 
around  in  the  “2003  IT  Workforce  Survey”  released  last 
week  by  the  Information  Technology  Association  of 
America.  If  you’re  a  CIO  or  corporate  IT  manager,  the 
good  news  is  that  IT  labor  costs  are  stabilizing  and  IT 
shops  are  mostly  able  to  hire  the  people  they  need.  For  IT  workers 
in  the  trenches,  the  good  news  is  that  layoffs  are  slowing,  actual  pay 
cuts  are  largely  a  thing  of  the  past,  and  only  4%  of  corporate  IT 
departments  are  considering  moving  jobs  offshore  in  the  next  year. 
Yeah  —  that’s  what  qualifies  as  good  news  these  days. 

Trouble  is,  the  survey  doesn’t  show  what  lies  i  would  want  to  build  a  career  on  that  sort  of 


just  beneath  that  feeble  good  news:  Corporate 
IT  morale  is  in  the  toilet.  And  the  No.  1  reason 
is  the  one  thing  you  can’t  do  much  about:  the 
lot^,  long  hours. 

You  can’t  do  much  about  the  hours  your  peo¬ 
ple  work  because  the  work  has  to  get  done  and 
there’s  no  budget  for  hiring  more  people  to  do 
it.  So  more  and  more  of  our  best  people  are 
coming  to  the  conclusion  that  there’s  a  better 
life  to  be  had  than  grinding  away  in  an  IT  shop. 

And  who  will  you  lose  at  the  fust  opportuni¬ 
ty?  Your  smartest,  sharpest  people,  that’s  who. 
Your  IT  shop  leaders.  The  ones  who  best  im- 
derstand  the  connection  between  IT  and  busi¬ 
ness.  The  ones  you’ll  need  the  most,  once  you 
get  the  green  light  to  start  building  new  proj¬ 
ects  again. 

They're  the  ones  who  don’t  have  to  stay  — 
who  can  take  their  corporate  IT  experience  and 
parlay  it  into  a  new  career,  whether  that  means 
conventional  IT  consulting  or  a  new  specialist 
gig  combining  law  and  IT.  medicine  and  IT  or 
some  other  profession  and  IT. 

And  why  should  they  stay?  They’re  smart 
enough  to  understand  that  this  crunch  isn’t  a 
one-time  thing.  We've  been  throi^ 
it  before.  First  there’s  an  IT  skills 
shorta^  IT  shops  go  crazy  looking 
for  ways  to  fill  critical  jobs,  and  IT 
becomes  the  hot  place  to  work. 

Then  a  few  years  later  the  business 
tightens  up.  layoffs  mount,  salaries 
fall,  hours  get  long  and  college  stu¬ 
dents  switch  their  majors  to  any- 
thii^  but  computer  science. 

Which,  a  few  years  later,  results  in 
another  shortage  —  and  the  cycle 
begins  again.  No  wonder  your  best 
people  want  to  leave.  They  love 
their  work,  but  what  sane  person 


manic-depressive  boom-and-bust  cycle? 

Can  you  keep  them?  Maybe.  Your  best  shot  to 
do  that  may  be  to  get  your  IT  shop  out  of  the 
boom-and-bust  business.  You  can’t  stop  eco¬ 
nomic  cycles  or  change  the  laws  of  supply  and 
demand.  But  you  can  change  the  way  you  orga¬ 
nize  your  shop. 

You've  heard  about  cross-functional  teams 
for  years.  Build  a  few.  Bulldoze  some  of  the 
walls  between  different  IT  functions.  You’ve 
got  programmers  and  database  analysts  and 
network  administrators  and  help  desk  special¬ 
ists.  Start  cross-training.  Your  programmers 
don’t  have  to  become  database  experts  or  net¬ 
work  gurus,  but  the  more  they  know  about 
those  other  jobs,  the  better  they  can  create  sys¬ 
tems  that  save  grief  for  the  whole  business. 

Afraid  they’ll  take  the  training  and  run  off  to 
a  better  job?  They  won’t  if  you  invest  in  educat¬ 
ing  them  for  what  your  organization  needs.  For¬ 
get  generic  IT  training  —  put  them  to  work 
studying  your  company’s  business  processes, 
learning  techniques  to  pry  requirements  out  of 
your  users  and  understanding  the  realities  of 
your  corporate  culture. 

That  will  make  them  much  more 
valuable  to  you  —  but  not  especial¬ 
ly  more  attractive  to  another  em¬ 
ployer  who’s  just  looking  for  some¬ 
one  fresh  out  of  XML  class. 

You’ll  get  better,  smarter  work. 
You'll  get  more  flexibility  and  effi¬ 
ciency  in  your  IT  shop,  and  greater 
focus  on  real  business  value. 

You  ntay  even  find  that  your 
cross-functional  IT  people  don’t 
have  to  put  in  such  loi^  hours  to 
get  the  work  done. 

And  for  your  employees,  that 
would  be  really  good  news.  I 


ADVlRTIStMENT 


IMetworked  Storage  Offers 
CureforBacIcun  Ills 


Sony  StorStation’^“  family  of  network-attached 
storage  solutions  brings  backup  efficiency  and 
consolidation  to  organizations  of  any  size. 


Many  organlMtions  are  finding  ttiat  tape  backup  systems 
installed  years  ago  can’t  keep  up  with  the  new  business  require¬ 
ments  of  today.  The  problems  range  from  having  older  tape  for¬ 
mats  with  insufficient  capacity  to  dealing  with  collections  of  indi¬ 
vidual  tape  drives  that  require  significant  IT  attention  to  ensure 
that  backups  run  on  schedule.  If  your  backup  tasks  are  growing  out 
of  control,  there's  e  good  chance  that  Sony's  family  of  StorStaiion 
networked  backup  solutions  can  bring  consolidation  and  efficien¬ 
cy  to  your  backup  processes 

For  some  organizations,  increasing  backup  operational  efficiency 
can  be  as  simple  as  upgrading  to  higher  capacity  tape  drives,  such 
as  Sony's  Advanced  Intelligent  Tape"”  (AfT)  family  of  reliable  data 
protection  solutions.  For  others,  it  may  mean  adding  automation, 
such  as  tape  libraries  that  automatically  manage  media  cassettes 
and  back  up  on  a  scheduled  basis  But  for  more  and  more  organi¬ 
zations,  increased  efficiency  is  better  achieved  by  adding  dedicat¬ 
ed  network  storage  solutions  to  their  networked  environment  in 
order  to  consolidate  backup  tasks,  ensure  greater  efficiency,  and 
reduce  backup  management  and  maintenance  requirements 
Network-attached  storage  (NASI  devices,  sxh  as  those  in  the 
Sony  StorStation  product  family,  enable  organizations  to  increase 
efficiency  by  consolidating  multiple  backup  devices  or  disk  stor¬ 
age  devices  onto  existing  Ethernet  networks,  NAS  devices  act  as 
centralized  backup  coordinators  that  can  be  configured  in  a  num¬ 
ber  of  ways  to  suit  many  business  requirements  In  the  simplest 
configuration,  a  NAS  server  provides  shared  files  or  shared  net¬ 
work  storage  for  multiple  servers.  With  the  proper  integrated  soft¬ 
ware.  NAS  file  servers  can  act  as  networked  caching  devices  pro¬ 
viding  speedy  access  to  frequently  used  data  And  for  organiza¬ 
tions  with  a  range  of  network  backup  or  archival  requirements,  a 
NAS  backup  server  can  route  data  to  an  attached  tape  library, 
enabling  organizations  to  keep  up  with  increasing  backup 
demands  by  merely  adding  additional  or  higher  capacity  tape 
drives  Combining  a  NAS  device  with  one  or  more  tape  libraries 
brings  increased  data  protecbon  and  offers  a  cost-effective  solu¬ 
tion  for  long-term  near-line  or  offline  storage 
In  addition  to  increased  efficiency  and  consolidation,  automated 
networked  backup  solutions  can  ensure  backups  are  performed  on 
schedule,  with  limited  or  no  human  intervention  The  combination 
of  a  NAS  server  and  a  tape  library  is  a  particularly  good  solution 
for  scenarios  such  as: 

•  Centralized  backup  for  remote  locations  or  branch  offices  that 
lack  on-site  IT  support 

•  Businesses  that  have  outgrown  their  existing  tape  capacities; 

•  Cost-effective  disaster  recovery  for  businesses  that  have 
many  store  locations,  such  as  retailers,  and 

•  Departments  with  multiple  servers  and  growing  data  require¬ 
ments. 

In  the  past,  it  has  been  cost-prohibitive  or  too  complex  for  many 
organizations  to  deploy  networked  devices  to  address  such  scenarios, 
but  Sony's  family  of  networked  backup  solutions  changes  the  cost 
equation  Sony  offers  two  types  of  NAS  soluliorts:  StorStation™* 
Backup  Servers  and  Sony  StorStation™*  NAS  file  Servers. 

Sony's  StofStabon’”  Backup  Senrers  combine  Sony's  high-per¬ 


formance  Advanced  intelligent  Tape  (AIT)  library  with  a  NAS  file 
server  and  a  leading  pre-imegrated  backup  management  software 
solution  The  "NAS  head'  provides  network  connectivity  and  back¬ 
up  management,  while  the  StorStation™*  AfT  library  provides  the 
backup  capacity,  automation  and  media  handhng  For  environments 
with  growing  data  protection  and  archival  requirements  across  mul¬ 
tiple  application,  database  or  production  systems,  the  StorStahon™* 
Backup  Server  solution  provides  a  single  point  for  backup  consoli¬ 
dation  Moving  from  a  server-attached  backup  strategy  to  a  net- 


via  a  AKJe-area  network 

Sonys  StOfStotion™*  NAS  Fite  Servers  provHJe  a  low-cost  soJu- 
lion  for  dato  storage  consolidairon,  file  serving  and  file  sharing 
capabilities  for  small  and  midsize  bus*nesse$  and  enterprise 
departments  Sony  StorSiat^™*  NAS  servers  aie  an  ideal  com¬ 
plement  to  Sony  A]T  tape  libraries  For  orgaruzaiions  with  a  range 
of  hte  sharing  or  network  storage  requirements  Sony  provides 
NAS  server  configurations  that  provide  330  6B  to  720  6fi  of  net¬ 
worked  storage 

For  ease  of  use  and  ftexiftie  access,  Sony  f.ie  servers  feature 
browser-based  management  and  file  sharir»g  su»ort  for 
Windows®.  Unix®  Lrnw®.  Novttl®  and  Macmtosfr®  operating 
systems  Data  protection  is  achieved  by  BAlD-5.  RAlO-l  and  RAID- 
0  options  For  an  extra  level  of  data  proiectxjn  of  the  cor^sofKtaied 
data.  Sorty  AIT  libraries  can  be  combined  with  the  StorSttOon  file 


Consolidating  and  Simplifying  Backup 
and  Storage 


CoRsolidaiioo 


Backep  appiiaace  lits 


•  Drive  or  library  aoaclMil  directly  Is  server  I 
I  •  Each  systM’sbacluip  must  be  handled  separately  | 

•  As  the  nember  of  systems  grows,  backup 

I  manegement  becorees  cwnbersome  end  difficult 

worked  solution  brings  cost  and  efficiency  benefits  by  eliminating 
the  duplicate  resources,  effons  and  equipment  required  to  back  up 
individual  servers  separately  As  the  number  of  servers  or  the 
amoimt  of  data  generated  grows,  the  cost-benefits  of  a  networked 
backup  approach  increase 

The  Sony  StorStation"*  Backup  Server,  when  used  with  a  Sony 
tape  library,  is  ideal  not  only  for  consolidaiing  backups  on-site. 
but  also  as  a  component  of  an  overall  backup  strategy  for  compa¬ 
nies  needing  to  back  up  or  archive  data  from  satellite  or  branch 
offices.  The  StorStation™*  Backup  Server,  when  used  with  a  Sony 
tape  library,  delivers  the  capabitity  needed  to  achieve  an  unat¬ 
tended  backup  of  several  days  or  even  several  weeks,  depending 
on  the  amount  of  data  to  be  protected.  In  addilwn.  it  can  be  man¬ 
aged  remotely  simply  by  connecting  rt  to  the  heaAjuartets  office 


btkap  iMwigemaw 

•  More  UHiMgeehle  growth 
ndscaluMity 

•  Tunkoy  seMoo  with 
pfo-pocfcogod  backup 
moMfomoM  sotiwaro 


NvtMfOfli  Stoni9«  CniieolidatiMii  Bancfite- 

•  Rlo  shariog 

•  Storage  cousolidotion 

•  Centralized  mantgenwot  end  growth 

servers  wa  a  SCSI  port  Connectfvity  into  mbustry-stanflarfl  net¬ 
works  IS  pfowded  by  Gigabn  Ethernet  or  dual  fOylOO  Ethernet  ports 
Sony's  StorStation™*  NAS  backup  servers  and  file  servers  inte¬ 
grate  the  best  of  high-end  enierpnse  storage  functionality  into 
solutions  that  are  affonJaWe.  easy  to  use  ana  easy  to  manage 
Whether  foi  remote  office,  workgroup  or  data  center  tteployrttoois. 
all  StorStation™*  NAS  devices  are  compact.  1U  high,  rack-mount¬ 
able  units  designed  to  fit  neatly  mio  areas  where  space  is  limited 
If  your  business  is  struggling  lo  manage  multiple  tape  drives 
spread  across  your  network,  or  if  you  need  to  consoliddie  your  data 
and  make  n  e^iy  accessible  to  your  networked  diervts,  tf»  time  is 
right  for  Sony’s  Network  Solutions — the  smart  mvestmerri 

©  2003  Sony  Elmronics.  me  Afi  i^u  ttnnta  Sew  noeihgvn 

Tape  and  SuSubon  are  traoemvfcs  or  Sony  AH  ouiei  irMmnaits  ^  prc(ien«i 
ol  ttieif  respectne  owiwi 
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Download  the  (ree  white  paper  Networked  Backup 
The  Path  to  Greater  Efliciency  and  Consoirdalinn 
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12  Users  Concerned  About 
Vendor's  Rnances,  Future 


Problems  continue  to 
raise  doubts,  despite 
improved  relations 


Anendees  at  t2  Technologies 
lnc.’s  annual  user  conference 
last  week  said  the  struggling 
sofhvare  vendor  has  made  no¬ 
ticeable  improvements  during 
the  past  year  in  how  it  treats 
ntstomers.  But  a  half-dozen 


users 

about  the  myriad  financial  and 
legal  challenges  facing  i2. 

The  Dallas-based  compa¬ 


ny's  woes  deepened  fust  four 
d^  before  the  i2  Planet  2003 
conference  began,  when  Nas¬ 
daq  delisted  its  common  stock 
on  May  9.  That  move  followed 
Hve  straight  quarterly  losses 
for  12,  disclosure  that  the  sup¬ 
ply  chain  vendor  is  reauditing 
its  financial  results  as  far  back 
as  1S199  and  the  news  that  the 
Securities  and  Exchan^  Com- 
i2  Concerns,  pagfi  16 


AmeritFade’s  FT  Integration 
Wi^  Dateka  ‘Rdigious 


Postmerger  CIO  tells 
of  intern^  debates 
over  consolidation 


BV  LUCAS  MCAMAN 

Eight  months  after  Ameritrade 
Holding  Corp.’s  S13  billion 
acquisidoD  of  rival  online  bro¬ 
kerage  Datek,  its  IT  depart¬ 
ment  is  emerging  from  the 
bruising  experience  of  inte¬ 
grating  some  systems,  ditch¬ 
ing  others  and  handing  layoff 
notices  to  250  IT  staffers. 

“It  was  a  massive  conver¬ 
sion  effort"  said  Asiff  Hirji. 
who  took  over  as  CIO  of 


Ameritrade  last  month.  He 
said  the  company  has  survived 
months  of  “religious  wars" 
over  technology  choices  and 
now  runs  its  operations  on 
systems  spliced  together  by  an 
IT  staff  that  by  September  will 
have  been  reduced  by  about 
40%  —  from  600  employees 
right  after  the  merger  to  350. 

Hirji  b^an  woriung  with 
Omaha-based  Ameritrade  last 
September  as  a  consultant 
from  Bain  &  Ca  in  Boston.  His 
job  was  to  find  synergies  be¬ 
tween  the  technolt^ies  and  IT 
stafiEs  at  Ameritrade  and  )ersey 
Ameritrade,  page  14 
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Users  Outraged  as  SCO 
Stakes  Linux  Legal  Claim 


Vendor  says  companies  using  the  OS  may'  face 
liabilities  because  of  Unix  code  ininngement 


BV  TODO  B.  WEISS 

In  a  startling  development. 
The  SCO  Group  last  week  put 
corporate  Linux  users  on  no- 
dce  that  they  could  become 
legal  targets  as  part  of  its  cam¬ 
paign  to  enforce  intellectual 
property  claims  it  has  made 
on  Unix.  The  threat  outraged 
many  IT  managers  but  left 
some  users  worried  about  po¬ 
tential  liabilities. 

In  a  letter  that  was  posted 
on  its  Web  site  and  sent  by 
mail  to  about  1,500  large  com¬ 
panies,  Undon.  Utah-based 
SCO  claimed  that  Linux  is  “an 
unauthorized  derivative  of 
Unix'  and  that  some  of  SCO's 
code  has  been  illegally  incor¬ 


porated  into  the  open-source 
operating  system.  It  asserted 
that  legal  risks  may  extend  to 
users  that  run  Linux. 

Hiis  is  the  third  major 
punch  SCO  has  thrown  at  Lin¬ 
ux  since  January,  when  the 
software  vendor  said  it  was 
sening  up  a  technolt^y  licens- 
division  to  ensure  that 


users  and  vendors  combined 
Unix  and  Linux  code  “legiti¬ 
mately."  In  March,  SCO  sued 
IBM.  charing  it  with  illegally 
using  Unix  technology  in  con¬ 
nection  with  Lima. 

Joe  Poole,  technical  support 
manager  at  Boscov's  Depart¬ 
ment  Store  LLC  in  Reading. 
Pa.,  said  Linux  users  “vrill  not 
stand  for  this.  There  are  just 
too  many  of  us  now."  Boscov's 
uses  Linux  on  an  IBM  zSeries 
mainframe  to  reduce  the  num¬ 
ber  of  servers  it  has  to  manage 
(see  related  story,  page  6). 

Poole  accused  SCO  execu¬ 
tives  of  trying  to  use  the  legal 
rnaneuvers  to  increase  Unix 
technology  licensing  revenue 
so  they  can  “cash  in  when 
their  company's  failing.”  He 

Ltnujr  Claim,  page  57 
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\2  Users  Concerned  About 
Vendor’s  Rnances,  Future 


Pmhiems  continue  to 
raise  doubts,  despite 
inipm\  ed  relations 


Attendees  at  i2  Technologies 
Inc.'s  annual  user  conference 
last  week  said  the  struggling 
software  vendor  has  made  no¬ 
ticeable  improvements  during 
the  past  year  in  how  it  treats 
customers.  But  a  half-dozen 
users  expressed  misgivings 
about  the  myriad  financial  and 
legal  challenges  facing  i2. 

The  Dallas-based  compa¬ 


ny’s  woes  deepened  just  four 
da>’s  before  the  i2  Planet  2003 
conference  began,  when  Nas¬ 
daq  delisted  its  common  stock 
on  May  9.  That  move  followed 
five  straight  quarterly  losses 
for  i2.  disclosure  that  the  sup¬ 
ply  chain  vendor  is  reauditing 
its  financial  results  as  far  back 
as  1999  and  the  news  that  the 
Securities  and  E.xchange  Com- 
i2  Concerns,  page  16 


COO  Sam  Natt^ne  uys  i3  bas 
madt  “ofofound  changes  ” 


Ameiltrade’s  IT  Integration 
With  Datek  a  ’Rdigious  War’ 


I’ustnierger  (d()  telLs 
of  internal  defkites 
ov  er  consolidation 


Eight  months  after  Ameritrade 
Holding  Corp.'s  Sl.3  billion 
acquisition  of  rival  online  bro¬ 
kerage  Datek.  its  IT  depart¬ 
ment  is  emerging  from  the 
bruising  experience  of  inte¬ 
grating  some  systems,  ditch¬ 
ing  others  and  handing  layofi* 
notices  to  250  IT  staffers. 

"It  was  a  massive  conver¬ 
sion  effort."  said  Asiff  Hirji. 
who  look  over  as  CIO  of 
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Users  Outraged  as  SCO 
Stakes  Linux  Legal  Claim 


\  endor  s;i\  s  companies  using  the  t  )S  nia\  face 
liabilities  hceause  of  Lni,\  eixle  infringement 


Ameritrade  last  month.  He 
said  the  company  has  sun'ived 
months  of  "religious  wars" 
over  technologx’  choices  and 
now  runs  its  operations  on 
systems  spliced  together  by  an 
IT  staff  that  by  September  will 
have  been  reduced  by  abi*ut 
40‘k*  —  from  600  employees 
right  after  the  merger  to  350. 

Hirji  began  working  with 
Omaha-based  Ameritrade  last 
September  as  a  consultant 
from  Bain  &  Co.  in  Boston.  His 
job  was  to  find  sj-nergies  be¬ 
tween  the  lechnok^es  and  IT 
staffs  at  Ameritrade  and  |erse>’ 
Ameritrade.  page  14 


In  a  startling  development. 
The  SCO  Group  last  week  put 
corporate  Linux  users  on  m*- 
tice  that  they  could  become 
legal  targets  as  part  of  its  cam¬ 
paign  to  enforce  intellectual 
property  claims  it  has  made 
on  Unix.  The  threat  outraged 
many  IT  managers  but  left 
some  users  worried  about  po¬ 
tential  liabilities. 

In  a  letter  that  was  posted 
on  its  Web  site  and  sent  by 
mail  to  abiHit  1.500  large  com¬ 
panies.  Lindon.  Utah-based 
SCO  claimed  that  Linux  is  "an 
unauthorized  derivative  of 
Unix"  and  that  some  of  SCO's 
code  has  been  illegally  incor- 


MORE  ON  SCO  vs.  LINUX 


■  tafCuapHBKdnulSCO’slM 
andanwIalatMhMtos^lriou 


•  RwdtwIjM  ItSCOaeNiDconio- 
iWbums 

OOriettMMaO 

porated  into  the  tTpen-.kiource 
operating  system.  It  .is.wrteJ 
that  legal  risks  may  extend  i«* 
users  that  run  Linux. 

This  is  the  third  major 
punch  SL'O  has  thrown  at  Lin¬ 
ux  since  Ianuar>.  when  the 
software  vendor  said  it  was 
setting  up  a  technology  licens¬ 
ing  division  to  ensure  that 


Users  .ind  \  endors  comhiiKsl 
Unix  and  Linux  c«»Je  "legit i- 
m.itelv."  In  March.  SCO  sued 
IBM.  charging  it  with  illcgall* 
using  I’nix  technoK*gy  in  con¬ 
nection  with  Linux. 

loe  Poole,  technic.ll  stippsiri 
manager  .n  Bos^-ox 's  Depart 
meni  Siore  ( 1  C-  in  Reading. 

I'j..  said  I  inux  users  "w  ill  not 
stand  for  this.  I’herc  are  just 
uh*  man*  of  us  now."  Bosom  s 
ust's  Linux  on  an  IBM  /Senes 
mainframe  to  reduce  the  num¬ 
ber  t»f  scTvers  il  has  to  maruge 
(sev  rel.iied  story,  page  (<», 
IVhiIc  accused  SCO  exeiTi- 
lives  of  Irv  ing  to  use-  the  legal 
maneuvers  to  increase  Unix 
technology  licensing  revenue 
so  lilt's’  can  "cash  in  when 
their  company's  failing."  He 

I  inux  ( :iuim.  page  57 
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i  ^11^  dltra  THE  ffiHVICBS  OF  THE  EABTH’S  LAROBST 


an  2,000  leading  companies.  The  reasons?  Our  proven,  comprehei^e  and 
the  integration  providers  out  there,  call  800-420-8450  or  visit  www;tibco.com. 


Thi  Power  of  Now’ 


i  can't  puil  all-nighters  every  night. 


Thing  is,  our  backup  and  recovery  system  has  to. 


It  can't  rest. 


Not  even  for  a  second. 


Not  if  I  hope  to  get  some  myself. 


ve  the  day. 


Make  sure  your  data's  always  safe  and  you’ll  save  yourself  a  lot  of  worry.  And  work.  One  way  is  with  EchoView".  A  potent  new  data- 
protection  appliance  that  continually  captures  and  journals  data  as  soon  as  it's  written,  for  nonstop  protection.  And  EchoView"*  provides 
rapid  recovery  to  any  point  in  time,  to  keep  business  humming.  So  while  your  systems  may  be  disrupted,  your  nights  won't  be. 
Learn  allthewayswecanhelpyouatwww.savetheday.com.  STORACETEK'  Save  the  Day."* 
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NEWS 


6  IBM’s  new  T-Rex  high*end  main¬ 
frames  are  expected  to  provide  al¬ 
most  three  times  the  processing 
power  of  existing  models. 

7  Rational  Software  plans  to  intro¬ 
duce  a  tool  aimed  at  simplifying  Java 
development. 

6  EMC  shifts  course,  offering  soft¬ 
ware  by  subscription  online. 

10  MatrixOne  upgrades  its  product 
life-cycle  management  software. 

12  W3C  readies  a  policy  aimed  at 
protecting  Web  standards  from 
vendors'  patent  claim*, 

14  Fizzer  worm  reveals  a  potential 
security  weakness  of  remote  access. 

16  Vendors  must  find  new  ways  to 
work  with  users,  says  a  former  Sun 
executive. 

20  Ariba  announces  an  upgrade  of  its 
corporate  spending  applications. 
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DEVELOmEKT 

The  Vlfeb  Services  Tsunami 

Web  services  are  already  being  used 
internally  for  systems  integration 
and  externally  with  supply  chain 
partners.  As  one  CIO  put  it,  “Web 
services  is  a  tsunami  of 
technology  evolution.” 
nUKABE  STARTS  ON  MK  2S. 


SPECIAL 


REPORT 


26  TIm  Story  So  Nr.  Web  services  are  built  on  the 
shoulders  of  earlier  tecfanolc^ies,  such  as 
client/server,  EDI  and  remote  procedure  calk 

26  Wovot  of  OiMgo.PBS'$  Andre 
V.  Mendes  (right)  says  Web 
services  will  hit  IT  like  a  tidal 
wave,  aflecting  a  range  of  ar¬ 
eas,  including  the  supply 
chain.  ONUNE;  A  former  C^O 
discusses  Web  services 
can  do  for  business  intelli- 
gence.'’OQMJUK  37326 

34  0pinion:  W^  services  are  part  of  a  Icmg  IT 
standards  tradition.  As  sudi,  be  aware  that 
they're  limited  in  what  they  can  do,  writes 
cohunnist  Marie  HalL 


SB  Wib  Sondcos  In  Aetton. 

Pkmeers  like  WeUs  Fargo's  Steve 
EUts  (left)  are  exploiting  this  new 
fochnology  to  make  valuable 
coonectioos  with  customers, 
partners  and  st^pUers.  Here's 
what  four  con^ianies  have 
learned  out  on  the  bleeding  edge 


of  Web  services.  ONUNE:  A  Rmall  medical 
supplier  uses  Web  services  to  launch 
e-commerce  applications  and  gain  an 
advantage  in  the  mammoth  health  care 
industry.  O  QukUJnk  37822 

38  Wab  Sorvicoa,  Sknply  Put  Are  you  finding  it 
hard  to  explain  Wri>  services  to  your  execu¬ 
tives.’  In  t^  book  excerpt  XML  expert 
Frank  P.  C^oyle  provides  a  primer  on  XML, 

SOAP  and  Web  services. 

40  Tastfog  It  Kay  to  Siiccaaa.  Wrt  services  are 
computer-to^omputer  applications  that 
must  work  flawlessly  in  e-business.  Other¬ 
wise.  a  single  error  could  propagate  throttgbout 
the  supply  chaitL  Testing  the  software  in  advance 
can  mean  the  difference  between  the  success  or 
failure  of  Web  services. 

^2  Tha  Abnanac:  Cobol  gets  freshened  up  for  Web 
services,  and  an  Antarctic  data  center  uses  Cold- 
Fusioa  These  items  are  among  the  tidbits  in  this 
collection  of  research  and  resources. 

44  QulckSliidr  A  primer  on  Extensible  Access  C^n* 
trol  Marinip  Language,  a  variant  of  XML  designed 
to  control  access  to  disparate  devices  and  appli¬ 
cations  on  a  network. 

46  Cvaara:  IT  hiring  managers  say  it  takes  a  combi¬ 
nation  of  new  specialist  skills  aiKi  an  aptitude  for 
old-foshkmed  programming  m  make  it  in  the 
brave  new  worid  of  Web  services. 

48  The  Not  Chiplir  Indtistry  visionaries  predict 
huge  fob  losses  for  U.S.  programmers  aind  worry 
that  a  hodgepodge  of  Web  services  will  increase 
information  overioad,  security  problems  • 
and  management  challenges.  - 

ONLINE:  Industry  viskmaries 
such  as  Grady  Boocb  weigh 
in  with  more  predictions 
about  the  future  of  soft¬ 
ware  development  and 
Web  services. 

OQiMAM 36064 
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AT  DEADLINE 


SEC  Scrutinizes 
Navy/EISDeal 

Tfw  SMurttM  Md  Ewhang* 
CofflMMenliflwMkMMOK- 
trenie  Etati  SyitvRs  Corp.  far 
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In  ItavyiWwlM  Cot^  hirimt 
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ry  Hna  by  lbs  PImo.  limHttnd 
company.  Tbi  iiqiiMt  CMW  aftor 
EDSiipartidaS334niMn|wr 
tas  bn  on  tho  prefaet  dartoQ  tbo 
flnt  quartor  [QuidiLM  38326]. 


Del  Sees  Strong  Q1 
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Short  Takes 
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IBM  Adds  Mainframes 
With  Up  to  32  CPUs 


New  models  double  processor  count, 
will  let  users  add  capacity  on  demand 


av  ROBERT  MCMILLAN 

SAN  FRANCISCO 

HE  MAINFRAME  may 
be  a  dinosaur.'but 
it’s  a  carnivorous 
one.  That  was  IBM’s 
message  last  week  when  it 
launched  a  new  mainframe 
line  code~nam^  T-Rex  that  is 
capable  of  supporting  up  to  32 
processors  —  twice  what  the 
company's  current  systems 
can  handle. 

IBM  said  the  z990  models 
are  built  around  a  16-chip 
processing  module  that  helps 
provide  a  nearly  threefold  per¬ 
formance  improvement  over 
its  z900  machines.  With  512 
I/O  channels,  the  z990  also 
has  twice  the  I/O  capability  of 
existing  mainframes,  accord¬ 
ing  to  IBM. 

As  part  of  the  i990  rollout, 
IBM  said  it  will  reduce  the 
number  of  its  mainframe  of¬ 
ferings  from  42  to  four.  The 
first  two  z990s  are  scheduled 
to  become  available  on  June  16 


PRODUCT  FEATURES 


IBM’s  z990 

■  A  peak  processing  rate  (rf 

9.000hllPSonafuR^^ 
proceaior  machine. 

■  The  ability  to  scale  Iron)  a 
aingit  CPU  to  32  without  shut¬ 
ting  down  systems 

■  Support  lor  up  to  30  bgicai 
partMione.  twice  what  current 
mocMsofier. 

■  A  2960B  memory  capedty. 

four  limes  what  users  now  ha^. 

■  Up  to  512  lA)  chamds  and  16 
jfitemal  TCF^  Inks  between 
virlual  servers. 


and  will  support  eight  and  16 
processors.  Models  that  can 
accommodate  24  and  32  CPUs 
are  due  in  October. 

In  September.  IBM  plans  to 
release  capacity-on-demand 
functionality  and  pricing  for 
the  new  mainframes  that  will 
let  users  turn  processing  en¬ 


gines  on  or  off  as  their  com¬ 
puting  workloads  change. 

‘The  on-demand  aspect  is 
really  a  step  in  a  good  direc¬ 
tion.”  said  Fred  Betito,  a  direc¬ 
tor  in  the  IT  architecture  group 
at  Levi  Strauss  &  Ccl  ”Being 
able  to  just,  over  the  phone,  in¬ 
crease  your  capacity  is  some¬ 
thing  that  is  of  great  value.” 

Betito  said  that  San  Francis¬ 
co-based  Levi  Strauss  recently 
switched  from  Unix  servers  to 
a  z900  mainframe  to  run  the 
databases  that  support  its  SAP 
back-office  applications. 

The  z9SK)  is  the  result  of 
four  years  of  development 
work,  done  at  a  cost  of  more 
than  $1  billion,  said  William 
Zeitler.  senior  vice  president 
of  IBM’s  Systems  Group.  Zeit- 
ier  said  IBM  has  added  more 
than  100  mainframe  users 
since  the  start  of  last  year,  and 
he  claimed  that  70%  of  overall 
zSeries  sales  are  comity  frnm 
customers  running  new  types 
of  workloads,  such  as  using 
Linux  to  consolidate  servers 
on  mainframes. 

Harry  Roberts,  CIO  at 
Boscov’s  Department  Store 


LLC.  said  the  Reading,  Pa.- 
based  company  has  found  the 
mainframe  to  be  an  ideal  plat¬ 
form  for  server  consolidation. 
Boscov’s  cut  its  90-sysiem 
server  farm  in  half  by  transfer¬ 
ring  applications  to  Linux  par¬ 
titions  on  a  z900.  he  said. 

The  z990  promises  even 
better  performance  for  Unux- 
based  applications,  Roberts 
said.  This  isn't  the  mainframe 
of  our  youth,”  he  noted.  "This 
is  a  flexible,  sophisticated  en¬ 
terprise  computing  platform.” 

Gordon  an  analyst  at  11- 
luminata  Inc.  in  Nashua,  Nil., 
said  IBM’s  mainframe  business 
has  gotten  a  boost  from  its  re¬ 
cent  success  with  Linux,  which 
the  company  claims  accounted 
for  17%  of  its  S3  billion  in 
zSeries  sales  last  year. 

The  z990  rollout  furthers 
IBM’s  attempt  to  convince 
users  that  mainframes  are  still 
a  relevant  data  center  technol¬ 
ogy.  Haff  added.  "IBM’s  mak- 
ii^  a  real  effort  to  introduce 
this  as  something  that  fits  into 
the  server  line  as  a  whole  and 
isn’t  arcane.”  he  said.  I 


McMillan  is  a  reporter  for  the 
IDG  News  Service. 
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Rational  Software  Set  to  Roll 
Out  Rapid  Development  Tool 

IBM  unit  supports  visual-model-driven 
development  for  building  Java  apps 


8V  CAMOL  SLiWA 

IBM's  Rational  Software  divi¬ 
sion  this  week  will  announce  a 
rapid  application  development 
(RAO)  tool  that's  designed  to 
reduce  the  complexity  of 
building  enterprises:lass  Java 
applications. 

Rational  declined  to  discuss 
the  product’s  name,  price  or 
shipment  date  when  it  pre¬ 
viewed  the  tool  at  IBM’s  devel- 
operWarks  Live  conference 
last  month  in  New  Orieans. 

But  tomorrow  the  Lexington, 
Mass.-based  unit  will  disclose 
that  IBM  Rational  Rapid  De¬ 
veloper  is  due  for  release  next 
month  and  will  sell  for  SS.99S. 

The  tool  goes  beyond  tradi¬ 
tional  RAD  offerings  in  its 
support  for  visual-modei- 
driveo  development  and  the 
Unified  Modeling  Language 
(UML),  its  use  of  prebuilt  pat¬ 
terns  for  building  scalable 
multitier  applications,  and  its 
ability  to  simplify  integration 
with  existing  systems,  said 
Arun  Gupta,  chief  technolo¬ 
gist  of  enterprise  applications 
at  Rational. 

Gupta  said  the  tool,  which 
Rational  acquired  last  year 
from  NeuVis  Inc.  in  Shelton, 
Ckmiu.  can  generate  about 
90%  of  the  code  for  Java  appli- 
caticKis.  leaving  only  a  sm^ 
percentage  of  business  logic  to 
be  written  by  developers. 

Steven  Edwards,  a  senior 
manager  at  McLean.  Va.-based 
BearingPoint  Inc.,  said  a  team 
of  developers  working  on  new 
claims  software  for  the  insur¬ 
ance  industry  was  able  to  au¬ 
tomatically  generate  65%  to 
70%  of  the  application  code  i 
with  Rational  Rapid  Develop¬ 
er.  The  tool  also  helped  the 
team  cut  development  time 
by  40%.  be  said. 

The  application’s  size  and 
the  need  to  quickly  get  it  to 
market  prompted  the  develop¬ 
ment  team  to  use  the  model- 


driven  tool,  Edwards  said. 

’’You  can  maintain  consistency 
in  your  development  stan¬ 
dards,  so  when  you  make 
changes  to  your  code,  it  will 
propagate  through  all  your 
classes,"  he  noted. 

But  bow  great  an  impact  the 
Rational  product  will  have 
among  corporate  developers 
remains  unclear.  Thomas  Mur¬ 
phy.  an  analyst  at  Meta  Group 
Inc.,  said  developers  are  look- 


Software  tracks 
changes,  pinpoints 
errors  for  FT  pros 

eV  MATT  HAMBLCM 

Two  small  vendors  this  week 
will  announce  network  config¬ 
uration  management  products 
designed  to  give  IT  managers 
greater  control  over  switches, 
routers  and  other  network  de¬ 
vices  made  by  different  hard¬ 
ware  vendors. 

Rendition  Networks  Inc.  in 
Redmond,  Wash.,  today  plans 
to  launch  Version  2.0  of  its 
TrueControl  configuration 
management  software,  udiich 
was  initially  released  in  De¬ 
cember.  Gold  Wire  Technol¬ 
ogy  Inc.  in  Waltham,  Mass., 
plans  to  follow  tomorrow  with 
the  release  of  a  pair  of  config¬ 
uration  control  appliances. 

Meanwhile.  Austin-based 
AlterPoint  Inc.  last  week  an¬ 
nounced  an  upgrade  of  its 
OeviceAutbority  software. 

Early  users  said  the  tools 
are  helping  them  detect  con¬ 
figuration  problems  that  can 
lead  to  netwofk  downtime, 
which  often  results  from  hu¬ 
man  mistakes  as  simple  as  a 
typographical  error  in  a  router 


ing  for  tools  that  can  ease  the 
difticulty  of  building  Java  ap¬ 
plications.  But.  he  added,  they 
will  have  to  overcome  fears 
that  visual-model-drivcn  de¬ 
velopment  approaches  won’t 
scale  or  produce  code  that  can 
be  maintained. 

Adoption  of  model-driven 
RAD  tools  has  been  slow  be¬ 
cause  the  products  are  just  be¬ 
ginning  to  mature,  said  John 
Meyer,  an  analyst  at  Forrester 
Research  Inc.  in  Cambridge. 
Mass.  But  Meyer  predicted 
that  the  adoption  rate  will  pick 
up  as  developers  realize  that 


configuration  command. 

Jim  Sberer.  director  of 
ASP  operations  at  ADP  Inc.'s 
Dealer  Services  unit  in  Hoff¬ 
man  Estates,  III.  installed 
(^Id  Wire’s  Fbrmulaior  200 
appliance  m  February  to  man¬ 
age  and  monitor  access  to 
systems  that  are  maiotained 
by  1.700  technical  suppon 
workers. 

Sberer  said  that  if  a  network 
outage  were  to  occur,  he  could 
use  Fbrmulator  to  track  bow 
configuration  changes  affect¬ 
ed  the  overall  network  at  ADP 
Dealer  Services,  which  pro¬ 
vides  computer  services  to 
more  than  16,000  auto  and 
truck  dealers  in  North  Ameri¬ 
ca  and  Europe. 

"Now  we  have  the  ability  to 
say.  'We  saw  you  came  in  and 
performed  this  adjustment,' " 
be  noted. 

Addressing  Oeirand 

Fbrmulator  can  also  be  used 
to  restrict  technicians  from 
malting  additional  changes  if 
they're  causing  network  prob¬ 
lems,  Sberer  said  But,  he  not¬ 
ed,  one  of  his  main  goals  is  to 
educate  ADP's  IT  woriters. 

"It’s  not  a  'Big  Brother  is 
watching'  kind  of  thing  as  much 


their  efficiency  will  be  limited 
unless  they  scan  to  rely  on 
these  types  of  look  to  generate 
application  plumbing  code. 

Rational  will  also  introduce 
an  automated  software  testing 
tool  that  is  due  by  the  end  of 
next  month  and  will  sell  for 
$2,995.  The  company  also 
plans  to  announce  enhance¬ 
ments  to  its  XDE  Professional 
design  and  development  envi¬ 
ronment,  which  will  now  be 
called  IBM  Rational  XDE  De¬ 
veloper  New  features  include 
a  debugging  capability  that 
will  let  users  see  application 
runtime  errors  and  create 
UML  models,  plus  integration 
of  the  Rational  PurifyPlus  run¬ 
time  analysis  toot. 

In  addition,  the  IBM  unit 
will  upgrade  its  Rational  Uni- 


as  a  training  tool."  he  said. 

The  market  for  configura¬ 
tion  management  technology 
is  starting  to  ral»  offbecause 
so  many  companies  are  put¬ 
ting  more  demands  on  their 
networks  by  adding  Web  ser- 
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Coming  Fiom  IBM’s 
Rational  Division 


best  practices  for  software 
development  projects.  Eric 
Schorr,  vice  president  of  mar¬ 
keting  at  Rational  said  content 
will  be  added  for  functions  like 
testing,  data  modeling  and 
business  modeling.  Ocher  fea¬ 
tures  will  make  it  easier  to 
configure,  ctistomizc  and  per¬ 
sonalize  the  framework.  I 


vices  and  data-rich  applica¬ 
tions  such  as  multimedia,  said 
Dennis  Drogseth,  an  analyst  at 
Enterprise  Manageroeni  Asso¬ 
ciates  in  Boulder.  Colo. 

Large  networking  vendors 
like  Cisco  Systems  tnc.  sell 
configuration  management 
tools,  but  only  for  their  own 
devices,  Drogseth  said.  He 
added  that  multivetMlor  con¬ 
figuration  management  prod¬ 
ucts  are  currently  being  of¬ 
fered  by  smaller  companies 
such  as  Rendition,  (fold  Wire. 
AlterPoint.  Voyeitce  Inc.,  Eco- 
ra  Corp.  and  ImeUiden  Inc. 

Chad  Uretsky.  a  network 
engineer  at  NetK2.(forp.  said 
the  San  Jose-based  developer 
of  systems  and  secxirity  man¬ 
agement  software  this  week 
plans  to  install  Rendition's 
TnieCootrol  2J0  package.  That 
should  give  Netl<J.'s  IT  staff 
the  ability  to  automatically 
gather  serial  numbers  from 
network  devices  to  help  with 
inventory  audits,  be  said. 

NetK^has  been  using  the 
initial  version  of  TrueCcmtrol 
for  the  past  four  months. 

"It  really  keeps  track  of 
configurations  for  easy  recov¬ 
ery  and  changes  if  somebody 
makes  a  mistake,"  Uretsky 
said.  "People  are  prone  to 
make  typos  when  configuring 
routers  and  switches,  even  the 
most  experienced  network 
enginerm."! 


Tied  Process,  a  ftamework  of 


Vendors  Develop  Technology  to  Help 
Users  Monitor  Network  Configurations 
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Rational  Software  Set  to  Roll 
Out  Rapid  Development  Tool 


IBM  unit  supports  \  isual-ni(xiel-dri\  en 
dewlopment  for  building  Ia\  a  apps 


BY  CAROL  SLIWA 

IBM’s  Rational  Software  divi¬ 
sion  this  week  will  announce  a 
rapid  application  development 
(RAD)  too!  that’s  designed  to 
reduce  the  complexity  of 
building  enterprise-class  lava 
applications. 

Rational  declined  to  discuss 
the  product's  name,  price  or 
shipment  date  when  it  pre¬ 
viewed  the  uwl  at  IBM's  devel- 
operWorks  Live  conference 
last  month  in  New  Orleans. 

But  tomorrow  the  Lexington. 
Mass.-based  unit  will  disclose 
that  IBM  Rational  Rapid  De¬ 
veloper  is  due  for  release  next 
month  and  will  sell  for  55.995. 

The  tool  gws  beyond  tradi¬ 
tional  RAD  offerings  in  its 
support  for  visual-model- 
driven  development  and  the 
Unifted  Modeling  Language 
(UML).  its  use  of  prebuilt  pat¬ 
terns  for  building  scalable 
multitier  applications,  and  its 
ability  to  simplify  integration 
with  existing  systems,  said 
Arun  Gupta,  chief  technolo¬ 
gist  of  enterprise  applications 
at  Rational. 

Gupta  said  the  tool,  which 
Rational  acquired  last  year 
from  NeuVis  Inc.  in  Shelton. 
Conn.,  can  generate  about 
90*Vi  of  the  code  for  lava  appli¬ 
cations.  leaving  only  a  small 
percentage  of  business  logic  (o 
be  written  by  developers. 

Steven  Edwards,  a  senior 
manager  at  McLean.  Va.-based 
Bearii^Point  Inc.,  said  a  team 
of  developers  working  on  new 
claims  software  for  the  insur¬ 
ance  industry  was  able  to  au¬ 
tomatically  generate  65'*i>  to 
70%  of  the  application  cinJe 
with  Rational  Rapid  Develop¬ 
er.  The  tool  also  helped  the 
team  cut  development  time 
by  40%.  he  said. 

TTie  application's  size  and 
the  need  to  quickly  get  it  to 
market  prompted  the  develop¬ 
ment  team  to  use  the  mtidel- 


driven  tool.  Edward.s  said. 

"You  can  maintain  consistency 
in  your  development  stan¬ 
dards.  so  when  you  make 
changes  to  your  code,  it  will 
propagate  through  all  your 
classes."  he  noted. 

But  how  great  an  impact  the 
Rational  product  will  have 
among  corporate  developers 
remains  unclear.  Thomas  Mur¬ 
phy.  an  analyst  at  Meta  Gr<»up 
Inc.,  said  developers  are  Itx^k- 


I  ing  for  fools  that  can  case  the 
'  difficult' of  building  lava  ap¬ 
plications.  But.  he  .added.  fhe\ 
will  have  toovercitme  fears 
that  visual-model-driven  de¬ 
velopment  approaches  won't 
scale  or  produce  ct>de  that  can 
be  maintained. 

Adopiii»n  of  model-driven 
RM")  n>ols  has  been  slow  be¬ 
cause  the  priKlucts  arv  just  be¬ 
ginning  to  mature.  s;iid  [ohn 
Meyer,  an  analyst  at  Fi)rri.*sier 
Research  Inc.  in  Gambridge. 
Mass.  But  Meyer  predicted 
that  the  adoption  rate  will  pick 
up  as  developers  realize  that 


their  elTieiency  will  he  limited 
unless  they  stan  to  rely  on 
these  tvpv’s  of  {«m»1s  to  generate 
application  plumbing  code. 

Kaiional  will  alstt  introduce 
an  automated  software  testing 
to»i|  that  is  due  h>  the  end  of 
next  month  and  will  sell  for 
I'he  company  also 
plans  to  .inmuinee  enh.iiiee- 
ments  to  its  XDI-  I’mfessjonal 
design  and  development  envi¬ 
ronment.  which  will  mm  K’ 
called  IBM  Rational  .XDI  De¬ 
veloper.  New  features  include 
a  debugging  capability  that 
will  let  users  see  applic.iiion 
runtime  ern^rs  .ind  create 
L'Ml.  models,  plus  integration 
ot  the  Rational  BurifyPlus  run¬ 
time  analysis  tool. 

In  addition,  the  IBM  unit 
will  upgrade  its  Rational  L’oi- 
fied  Process,  a  framework  of 


Vendors  Develop  Technology  to  Help 
Users  Monitor  Network  Configurations 


Software  tracks 
changes,  pinpoints 
oiTors  for  I  T  pros 

BY  MATT  HAMBLEN 

Two  small  vendors  this  week 
will  announce  network  config¬ 
uration  management  products 
Jc-signed  to  give  IT  managers 
greater  control  over  switches, 
routers  and  other  network  de¬ 
vices  made  by  different  hard¬ 
ware  vendors. 

Rendition  Networks  Inc.  in 
Redmond.  Wash.,  today  plans 
to  launch  Version  2.0  of  it.s 
TrueControl  configuration 
management  software,  which 
was  initially  released  in  De¬ 
cember.  Gold  Wire  Technol¬ 
ogy  Inc.  in  Waltham.  Mass., 
plans  to  follow  tomorrow  with 
the  release  of  a  pair  of  config¬ 
uration  control  applianccs- 

Meanwhilc.  Austin-based 
AlterPoint  Inc.  last  week  an¬ 
nounced  an  upgrade  of  its 
DeviccAuthorUy  software. 

Early  users  said  the  tools 
are  helping  them  detect  con¬ 
figuration  problems  that  can 
lead  to  network  doumtime. 
which  often  results  from  hu¬ 
man  mistakes  as  simple  as  a 
typographical  error  in  a  router 


configuration  command. 

lim  Shcrcr.  director  of 
ASP  operations  at  ADP  Inc.'s 
lX*aler  Services  unit  in  Huff¬ 
man  Estates.  III.,  installed 
Gold  Wire's  Formulator  2tK) 
appliance  in  February  to  man¬ 
age  and  monitor  accL*ss  to 
systems  that  are  maintained 
by  1.700  technical  support 
workers. 

Shcrer  said  that  if  a  network 
outage  were  to  ixxur.  he  could 
use  Formulator  to  track  how 
configuration  changes  affect¬ 
ed  the  overall  nctvyork  at  ADI* 
Dealer  Services,  which  pro¬ 
vides  computer  scrvict.'s  to 
more  than  16.000  auto  and 
truck  dealers  in  North  .Ameri¬ 
ca  and  Europe. 

“Now  we  have  the  ability  to 
say.  'We  saw  you  came  in  and 
performed  thus  adiustment."  *' 
he  noted. 

Addressing  Demand 

Ffirmulator  can  alsti  be  used 
to  restrict  (echnician.s  from 
making  additional  changed  if 
they're  causing  network  prob¬ 
lems.  Sherer  said.  But.  he  not¬ 
ed.  one  of  his  main  goals  Ls  to 
educate  ALtP's  IT  woricers. 

"It's  not  a  Big  Brother  Ls 
watching'  kind  of  thing  as  much 


as  a  training  tool."  he  said. 

The  market  lorc\»nfigura- 
tion  management  technology 
is  starling  to  take  off  Kvausc 
so  many  companies  are  put¬ 
ting  more  demands  on  their 
!  networks  by  adding  Web  ser- 

Product  Details 

RendMion's 

TruaCgnlral  2.0  wftware 

■f^onWndow520009|istems 


PfdCMO:  Starts  at  $29.990 lor 
rnanagng  75  netVMxk  devices 

OaWWta’i 

Fomiuiiler  200  product  Int 
■  IndudesaUrack-tnountodapi*- 
anc8  velh  an  80GB  disk  drive  and  a 
duster  of  two  appkanoes  web  hot 
iae-overcapabiles 

PRICMO:  Starts  at  S25.000 
toran  appkanceservmgSO 
netNork  devtces.  and  S100.000 
foraduster 
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■  Runs  on  Windows  KT  or  Win - 
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PfBCMQ:  Anentarpnseettton 
starts  al  S7S95  and  staxurts  up  10 
100  devices 
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Coming  From  IBM's 
Rational  Division 
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best  praitices  for  sofiwan.' 

Jev  elupment  prn'iects.  Eric 
Vhurr.  \  ice  president  of  nuir- 
kciing  at  Rational,  said  content 
will  be  .idded  for  funiTions  like 
testing.  J.ila  misJeling  and 
business  modeling.  Other  fe.i- 
tiircs  will  nuike  it  easier  to 
configure,  customize  .ind  per¬ 
sonalize  the  fnimevv<«rk.  I 


vices  and  daia-rich  applica¬ 
tions  such  as  muliimedu.  said 
Dennis  Drogs^'th.  an  analyst  at 
Enterprise  Management  Asm)- 
s’iaies  in  IVnilder.  Golo. 

l>argc  networking  vendors 
like  <  ;isco  Systems  Ine.  sell 
eimllguration  management 
tvhils.  hut  only  for  their  «mTt 
Jtwiccs.  Drogsc'fh  >aid.  He 
added  that  mulcivendttr  con¬ 
figuration  nv.inagement  pmd- 
ucts  arc  currently  being  t>f- 
fereJ  by  smaller  companies 
such  as  Rendiiioa  Gold  Wire. 

I  AlierlXiint,  Voyence  Inc..  Ec»*- 
,  ra  Corp.  and  IntelliJcn  Inc, 

Chad  Ureisky.  a  network 
engineer  at  NeilQ  t'orp..  .said 
the  San  |i>se-ha&eil  developer 
of  systems  and  security  man¬ 
agement  software  this  week 
plans  to  install  Rendition's 
Trut<A»ntn»l  2.0  package,  ni.ti 
should  give  NetIQ's  IT  staff 
the*  ability'  to  automatically 
gather  serial  numbers  from 
neiwotk  devices  to  help  with 
im  eniorv'  audits,  he  said. 

Net  IQ  has  been  using  the 
initial  vvrsHin  tif  TnK'Gontrol 
fur  the  past  four  months. 

"It  really  keeps  track  of 
configuraiion.s  for  easy  recov¬ 
ery  and  changes  if  st>mebi»dy 
makes  a  mustake."  Ureisky 
said-  "IVople  are  prone  to 
make  typos  vvhen  configuring 
routers  and  switches,  even  the 
most  experienced  network 
engineers.*'  I 
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EMC  Shifts  Course, 
Offers  Software  Online 

L'scrs  can  purchase  subscriptions  for 
SAN  design,  pcrfomiancc  analysis  tools 


BY  LUCAS  MEARIAN 

DR  IHf  MR'^I  MVU. 
EMC  Corp  b-st  v\  L-L-k 
Biado  available  a  sub¬ 
scription-based  s*>ft- 
W3n‘  serv'iee  built  Jt\Hind  its 
ContmICenter  storage 
management  software. 

The  Hopkinton. 

Mass.-based  company 
unveiled  two  W'eb-bascd  prod¬ 
ucts.  including  a  storage-area 
network  (SAN)  modeling  toi»l 
that  guides  IT  architects  and 
administrators  thnmgh  the  de¬ 
sign  and  validation  stages  and 
provides  a  final  blueprint  or 
suggestions  for  upgrades 
bxsed  on  user  input. 

"At  the  end  of  the  day.  the 
output  is  a  complete  end-to- 


end  topoU^gy  i>f  your  new 
SAN  with  propt>scd  changes." 
said  I’ai  Cassidy,  director  of 
marketing  for  EMC  s  open- 
software  division. 

Randy  Carter,  storage  archi¬ 
tect  at  Philadelphia- 
based  mortgage  insur¬ 
er  Radian  Group  Inc¬ 
hes  been  beta-testing 
the  SAN  Architect  tvvhnohigy 
and  said  it  lus  cut  the  time  it 
takes  to  map  changes  to  his 
existing  architecture  from  24 
hours  to  just  four. 

EMC  al.su  introduced  Aut<v 
Advice,  which  prtwides  cus¬ 
tomized  analysis  of  perfor¬ 
mance  and  restiurce  utilization 
across  applications,  servers, 
databases  and  storage  systems. 


AutoAdvice  is  being  sold 
under  a  one-year  subscription 
that  covers  analysis  of  one  to 
50.000  CPUs,  .starting  at  S400 
for  a  single  processor.  SAN 
Architect  is  available  on 
a  subscription  basis,  with  an 
entry-level  list  price  of  S2.400. 

Others  to  Follow 

Steve  Kennison.  an  analyst  at 
Enterprise  Storage  Group  in 
Milford.  Ma.ss..  said  EMC  is 
tmly  the  second  major  storage 
vendor  to  offer  a  diagnostic 
and  alert  tool  of  AutoAdvice's 
caliber.  But  Kennison  said  oth¬ 
er  vendors,  such  as  Hewlett- 
I’ackard  Co..  Sun  Microsys¬ 
tems  Inc..  Hitachi  Data  Sys¬ 
tems  Corp.  and  IBM.  are  likely 
to  follow  suit,  because  it  will 
give  them  a  larger  software 
f<L>otprint  in  data  centers. 

Mountain  S'icw.  Calif.- 


I  based  Veritas  Software  Corp, 
in  December  signed  a  deal 
with  Austin-based  Motive 
Communications  Inc.  to  re¬ 
sell  its  Enterprise  Service  So¬ 
lution  for  Storage  Networks, 
which  resides  on  a  server  in¬ 
side  corporate  firewalls  and 
alerts  IT  staff  to  SAN  prob¬ 
lems.  Veritas  is  bundling  the 
tool  as  part  of  its  business- 
critical  support  offering. 

EMCs  AutoAdvice  collects 
information  cverv'  five  min¬ 
utes  about  a  company’s  SAN 
via  a  TCP^lP-based  pi^rtal  and 
collates  that  information  in  a 
database.  A  rules-ba,scd  en¬ 
gine  then  measures  best  prac¬ 
tices  against  what  the  SAN  en¬ 
vironment  currently  has. 

The  analysis  lakes  a  day. 
and  results  are  returned 
to  users  in  HTML-enabled 
e-mail  messages.  The  reports 
show  where  current  or  poten¬ 
tial  problems  arc  likely  to 
come  from  and  provide  a 
graphical  user  interface  indi- 
cafing  the  severtty  t>f  warn¬ 
ings  from  a  high-level  view. 

They  also  include  specific 
details  on  such  things  as  CPU 
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•  RemolRdmnaMB 


■RetnolB  starts 


oiSANs 


■  Testa  oi  SAN  vcMactins 
aoBM  BC  beet  practices 

utilization  and  I/O  through¬ 
put.  Cassidy  said.  Hie  analysis 
contains  links  to  vendor  Web 
sites  for  information  on  tech¬ 
nology  like  host  bus  adapters 
and  switches. 

Cassidy  said  the  results 
priHiuced  by  SAN  Architect 
can  he  viewed  cither  with 
Microsoft  Visio  presentation 
tools  or  in  E.\ccl  spreadsheets 
and  can  he  kept  online  or 
printed  out.  I 
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Data  Center  Security  Spending 
On  the  Rise,  Surveys  Show 


.Socurit)  projects 
jict  liinded  despite 
tight  budgets 

BY  JAIKUMAft  VUAVAN 

As  director  of  global  security 
at  Hewitt  .As,sociates  LLC.  Dan 
loscphiles  is  taking  a  multifac¬ 
eted  approach  to  bolstering 
defenstn*  at  his  company,  the 
largest  human  rcs»>urces  out- 
S4)urcer  in  Ihe  U.S. 

Firewall,  antivirus  and  other 
intrusion-detection  technolo¬ 
gies  are  a  key  part  of  the  strat¬ 
egy.  But  Hewitt  Is  also  shoring 
up  its  internal  networks,  per¬ 
forming  network  and  applica¬ 
tion-level  penetration  testing 
and  working  with  developers 
to  ensure  that  the  code  on  all 
Web-faeing  applications  is  se- 
cua*.  "We  arc  spending  more 
on  security;  there’s  no  tw<* 
ways  about  it."  loscphitcs  said. 


I  And  Hew-iti  isn’t  alone.  A 
I  survey'  released  Ixst  week  by 
I  the  Data  Center  Institute  at 
Orange,  CiUf, -based  AFCOM. 
an  association  for  data  center 
professionals,  shows  that  in 
the  face  i»f  ciirtsfant  terrorism 
alerts,  the  war  in  Iraq  .ind  pro- 
I  liferating  cyherthreats.  inft»r- 
matUm  securio  has  become  a 
bigger  priority  for  the  nation’s 
largest  data  centers. 

According  to  AF(X)M,  near- 
,  ly  half  of  the  257  data  center 
I  managers  it  surveyed  earlier 
I  this  year  said  their  companies 
had  increased  security  bud- 
I  gets  by  5*Si  to  1.5%  in  the  past 
I  year.  A  FCOM's  findings  are 
'  nearly  identical  to  the  results 
i  of  a  worldw  ide  sun-ey  of  5(H) 
j  financiai  serx-ices  firms  that's 
'  being  re!ea.sed  this  week  by 
Deloitte  Touche  Tomh.itsu. 

I  Deloitte  said  that  despite  tight 
IT  budgets,  most  financial 


firnts  have  maintained  or  in¬ 
creased  their  security  spend¬ 
ing  and  boosted  IT  security 
staffing  levels. 

The  budget  increases  come 
at  it  lime  when  a  growing 
number  of  companies  face  the 
threat  of  external  and  internal 
I  cyberattacks,  said  ]ill  Eckhaus. 
.AFCOM’s  president.  "The 
most  surprising  thing  in  my 
mind  was  that  almost  .ftyNi  of 
the  companies  surx’cyed  did 
have  a  breach  of  security  last 
year."  she  said. 

In  the  Deloitte  survey.  40”*! 
of  the  n.’spondenis  rcporttxl 
security  breaches  in  the  past 
year  —  with  mi>st  of  them 
coming  from  external  sources. 

Growing  concerns  about 
cyberattjcks  have  made  "the 
approval  process  for  security 
spending  somewhat  easier." 
)osephiie.s  said.  "It  is  very, 
very  difficult  to  ’KOI’  security. 


but  my  management  under¬ 
stands  that  it  is  (he  cost  of  do¬ 
ing  business  these  days." 

“I'm  not  having  any  trouble 
getting  money  for  security.” 
said  David  Krauiharoer.  direc¬ 
tor  of  information  s>'stcms  at 
Advanced  Fibre  Communica¬ 
tions  Inc.,  a  Petaluma,  Calif.- 
based  maker  of  telccommuni- 
cation-s  equipment.  The  use  of 
virtual  private  networks  and 
an  increase  in  the  number  of 


Is  your  IT  security 
budget  higher  or  k)^ 
than  M  year's? 


Base  257  data  center  managers 
surveyed  eariier  the  y«ai 
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workers  connecting  to  the 
company’s  network  from  out¬ 
side  its  offices  has  made  re¬ 
mote  access  a  major  securiD' 
concern.  Krauthamersaid. 

Securing  IM 

Kevin  Oft.  vice  president  of 
technolog)’  at  Terra  Nova 
Trading  LLC.  a  financial  ser¬ 
vices  firm  in  Chicago,  said  it's 
not  just  a  question  of  staying 
on  top  of  the  growing  number 
of  hacker  threats.  Terra  Nova 
also  has  to  respond  to  cus¬ 
tomer  demand  for  instant 
messaging  support  on  Us  net¬ 
work.  That  means  investing  in 
technologies  to  secure  and 
archive  such  communications 
—  measures  the  company  has 
already  invested  in  for  internal 
messaging  use. 

Despite  the  increased 
spending,  only  about  of 
the  respondents  to  DcIoUte’s 
survey  claim  to  be  extremely 
confident  about  their  ability 
to  withstand  attacks,  accord¬ 
ing  to  Ted  DcZabala.  a  partner 
in  the  firm’s  securiD’  services 
group.  1 
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EMC  Shifts  Course, 
Offers  Software  Online 


Users  can  purchase  subscriptions  for 
SAN  design,  performance  analysis  tools 


■T  LUCAS  MCAMAN 

For  the  first  time, 
EMC  Corp.  last  week 
made  avaibble  a  sub* 
$cnption*based  soft¬ 
ware  service  built  around  its 
CoDtrolCenter  storage 
management  software. 

The  Hopldnton, 

Mass.-bas^  company 
unveiled  two  We^based  prod¬ 
ucts,  including  a  storage-area 
network  (SAN)  modeling  tool 
that  guides  IT  architects  and 
administrators  through  the  de¬ 
sign  and  validation  stages  and 
provides  a  final  blueprint  or 
suggestions  for  upgrades 
based  on  user  input. 

“At  the  end  of  the  day,  the 
output  is  a  complete  end-to- 


end  topology  of  your  new 
SAN  with  proposed  changes,” 
said  Pat  C^assidy,  director  of 
marketing  for  EMC's  open- 
software  division. 

Randy  Carter,  storage  archi¬ 
tect  at  Philadelphia- 
■flfl  based  mortgage  insur- 
H|PI  er  Radian  Group  Inc., 
has  been  beta-testing 
the  SAN  Architect  technology 
and  said  it  has  cut  the  time  it 
takes  to  map  changes  to  his 
existing  architecture  from  24 
hours  to  fust  four. 

EMC  also  introduced  Auto- 
Advice,  which  provides  cus¬ 
tomized  analysis  of  perfor¬ 
mance  and  resource  utilization 
across  applicatioDs,  servers, 
databases  and  storage  systems. 


AutoAdvice  is  being  sold 
under  a  one-year  subscription 
that  covers  analysis  of  one  to 
50,000  CPUs,  starting  at  $400 
for  a  single  processor.  SAN 
Architect  is  also  available  on 
a  subscription  basis,  with  an 
entry-level  list  price  of  S2.400. 

OttiefstoFoHow 

Steve  Kennison.  an  analyst  at 
Enterprise  Storage  Group  in 
Milford.  Massn  said  EMC  is 
only  the  second  major  storage 
vendor  to  offer  a  diagnostic 
and  alert  tool  of  AutoAdvice’s 
caliber.  But  Kermison  said  oth¬ 
er  vendors,  such  as  Hewlett- 
Packard  Co,,  Sun  Microsys¬ 
tems  Inc.,  Hitachi  Data  Sys¬ 
tems  Corp.  and  IBM.  are  likely 
to  follow  suit,  because  it  will 
give  them  a  larger  software 
footprint  in  data  centers, 
i  Mountain  View,  Calif.- 


based  Veritas  Software  Corp. 
in  December  signed  a  deal 
with  Austin-based  Motive 
Communications  Inc.  to  re¬ 
sell  its  Enterprise  Service  So¬ 
lution  for  Storage  Networks, 
which  resides  on  a  server  in¬ 
side  corporate  firewalls  and 
alerts  IT  staff  to  SAN  prob¬ 
lems.  Veritas  is  bundling  the 
tool  as  pan  of  its  business- 
critical  support  offering. 

EMC’s  AutoAdvice  collects 
information  every  five  min¬ 
utes  about  a  company's  SAN 
via  a  *rCP/IP-b3S^  portal  and 
collates  that  information  in  a 
database.  A  rules-based  en¬ 
gine  then  measures  best  prac¬ 
tices  against  what  the  SAN  en¬ 
vironment  currently  has. 

The  analysis  takes  a  day. 
and  results  are  returned 
to  users  in  HTML-enabled 
e-mail  messages.  The  reports 
show  where  current  or  poten¬ 
tial  problems  are  likely  to 
come  from  and  provide  a 
graphical  user  interface  indi¬ 
cating  the  severity  of  warn¬ 
ings  from  a  high-level  view. 

They  also  include  specific 
details  on  such  things  as  CPU 
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utUization  and  I/O  through¬ 
put,  Cassidy  said.  The  analysis 
contains  links  to  vendor  Web 
sites  for  information  on  tech¬ 
nology  like  host  bus  adapters 
and  switches. 

Cassidy  said  the  results 
produced  by  SAN  Architect 
can  be  viewed  either  with 
Microsoft  Visio  presentation 
tools  or  in  Excel  spreadsheets 
and  can  be  kept  online  or 
printed  out.  I 
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Data  Center  Security  Spending 
On  the  Rise,  Surveys  SrHwv 


Security  projects 
^t  flind^  despite 
tight  budgets 


■V  JAmUMAn  VLMVAN 

As  director  of  global  security 
at  Hewitt  Associates  LLC  Dan 
losephites  is  taking  a  multifac¬ 
eted  approach  to  Mistering 
defenses  at  his  company, 
largest  human  resources  out¬ 
sourcer  in  the  U,S. 

Firewalk  antivirus  and  other 
intrusion-detection  technolo¬ 
gies  are  a  key  part  of  the  strat¬ 
egy.  But  Hewitt  is  also  shoring 
up  its  internal  networks,  per¬ 
forming  network  and  applica¬ 
tion-level  penetration  testing 
and  working  with  developers 
to  ensure  that  the  code  on  all 
Web-iaciog  applications  is  se¬ 
cure.  “We  are  spending  more 
on  security;  there's  no  two 
ways  about  it,**  losephites  said. 


And  Hewitt  isn't  alone.  A 
survey  released  last  week  by 
the  Data  Center  Institute  at 
Oraf^,  Calif-based  AFCOM. 
an  association  for  data  center 
professionals,  shows  that  in 
the  face  of  constant  terrorism 
alerts,  the  war  in  Iraq  and  pro¬ 
liferating  cyberthreats,  infor¬ 
mation  security  has  become  a 
bigger  priority  for  the  nation's 
largest  data  centers. 

According  to  AFCOM.  near¬ 
ly  half  of  the  257  data  center 
managers  it  surveyed  earlier 
this  year  said  their  companies 
had  increased  security  bud¬ 
gets  by  5%  to  15%  in  the  past 
year.  AFCOM’s  fmdings  are 
nearly  identical  to  the  results 
of  a  worldwide  survey  of  500 
fmancial  services  firms  that’s 
being  released  this  week  by 
Deloitte  Touche  Tomhatsu. 
Deloitte  said  that  despite  tight 
IT  budgets,  most  fmancial 


fuins  have  maintained  or  in¬ 
creased  their  security  spend¬ 
ing  and  boosted  IT  security 
staffing  levels. 

The  budget  increases  come 
at  a  time  when  a  growing 
number  of  companies  face  the 
threat  of  extern^  and  internal 
cyberattacks,  said  HU  Eckhaus. 
AFCOM’s  president.  The 
most  surprising  thing  in  my 
mind  was  that  almost  30%  of 
the  companies  surveyed  did 
have  a  breach  of  security  last 
year,"  she  said. 

In  the  Deloitte  survey.  40% 
of  the  respondents  reported 
security  breaches  in  the  past 
year  —  with  most  of  them 
coming  from  external  sources. 

Growing  concerns  about 
cybcrattacks  have  made  “the 
approval  process  for  security 
spending  somewhat  easier.” 
losephites  said.  “It  is  very, 
very  difficult  to  'ROf  security. 


but  ray  management  under¬ 
stands  that  it  is  the  cost  of  do¬ 
ing  business  these  days.” 

'Tm  not  having  any  trouble 
getting  money  for  security," 
said  David  Krauthamer.  direc¬ 
tor  of  information  systems  at 
Advanced  Fibre  Communica¬ 
tions  Inc.,  a  Petaluma,  Calif.- 
based  maker  of  telecommuni¬ 
cations  equipment.  The  use  of 
virtual  private  networks  and 
an  increase  in  the  number  of 


workers  connecting  to  the 
company's  network  from  out¬ 
side  its  offices  has  made  re¬ 
mote  access  a  major  security 
concern.  Krauthamer  said. 

Securing  IM 

Kevin  On,  vice  president  of 
technology  at  Terra  Nova 
IVading  LLC,  a  fmancial  ser¬ 
vices  firm  in  Chicago,  said  it's 
not  just  a  question  of  stayii^ 
on  top  of  the  growing  number 
of  hacker  threats.  Terra  Nova 
also  has  to  respond  to  cus¬ 
tomer  demand  for  instant 
messaging  support  on  its  net¬ 
work.  That  means  investing  in 
technologies  to  secure  and 
archive  such  communkations 
—  measures  the  company  has 
already  invested  in  for  internal 
messaging  use. 

Despite  the  increased 
spending,  only  about  5%  of 
the  respondents  to  Deloitte's 
survey  claim  to  be  extremely 
conndent  about  tbetr  ability 
to  withstand  attacks,  accord¬ 
ing  to  Ted  OeZabala,  a  partner 
in  the  Arm's  security  services 
group.! 
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Chip  Glitch  Halts 
IBM  Server  Sales 

After  intd  Corp.  disdosed  that 
an  electrical  proWem  can  cause 
some  of  Its  64*Mt  Itanium  2  proc' 
essors  to  shut  doern  or  behave 
unpredictably.  SM  stopped  ship¬ 
ments  of  the  flanhjm  2‘b«sed 
server  d  released  in  late  April. 

Hewlett-PacKard  Co.  and 
Unisys  Corp.  plan  to  continue  sdl- 
ing  systems  that  use  ItarMum  2 
processors.  Intel  said  it  wilt  swap 
older  chips  for  new  ones  upon 
user  request. 


CSC  Expands  IT 
Outsourcing  Deal 

Computer  Sciences  Corp.  (CSC) 
said  it  has  signed  four  contracts 
that  expand  a  t2*year-old  fT  out¬ 
sourcing  deal  with  Qeneral  Dy¬ 
namics  Corp.  in  Falls  Church.  Va. 
The  new  agreemerrts  are  worth  a 
total  of  S137  million.  CSC  said. 

The  B  Segundo.  Calif. -based 
company  also  reported  a  S162.7 
million  profit  on  revenue  of  S3.08 
billion  for  Its  fourth  quarter,  which 
ended  March  28. 


IBM  Buys  Vendor  of 
Provisioning  Tools 

IBM  armounced  that  it  has  ac¬ 
quired  Toronto-based  Think  Dy¬ 
namics,  a  developer  of  software 
that  provides  automated  system¬ 
provisioning  capabilities.  The 
companies  didn't  disclose  the  fi¬ 
nancial  lerms  of  the  deal,  which  » 
intended  to  augment  IBM's  on- 
demand  computing  strategy.  IBM 
said  Think  Dynamics  developers 
will  be  blended  inlo  Its  Tivoli  man¬ 
agement  software  unit. 


Short  Takes 

Blue  Bel.  Pa.-based  UNISYS  said 
n  plans  to  announce  next  month 
a  set  of  business  process  model¬ 
ing  tools  that  will  be  marketed  as 
part  of  a  new  fT  services  offering 
caled  Business  Blueprints. . . . 
QAffTNER  INC  predicted  that  30.7 
miNion  PCs  wM  be  shipped  world¬ 
wide  this  quarter,  up  6.4%  from 
a  year  ago. 


MARK  HAi  1  -  ON  1111  MARK 

IT  Infrastructure  ‘Game’ 
AH  but  Over . . . 


. . .  for  vendors  seeking  high  growth,  elaims  ex-Lotus  exec  Steve  Layne, 
who’s  now  CEO  of  Malvern,  Pa.-based  Entigo  Corp.  The  new  game,  he 
says,  is  identifying  areas  long  neglected  hy  IT  pros  and  then  delivering 
a  "targeted  fi.x.”  For  Entigo,  the  target  is  automating  the  handling  of 
product  warranties.  According  to  generally  accepted  accounting  prin¬ 
ciples  —  you  know,  the  ones  so  highly  prized  at  the  former  Arthur  Andersen  — 
companies  must  reserve  funds  on  their  balance  sheet  to  cover  war- 


raniy  Ibbilitics.  So.  having  precLsc  data 
on  a  company's  financial  exposure  in  this 
area  is  vital  to  a  CFO.  And  managing 
warranties  isn't  cheap,  Layne  points  nut 
that  80%  <»f  warranty  processing  current¬ 
ly  requires  human  inten’ention  because 
the  aging  mainframe  or  minicomputer 
home-brewed  programs  that  keep  track 
of  faulty-product  claims  lack  the  refined 
rules  engines  available  now.  His  company 
will  replace  Version  .^.5  of  its  software 
with  Entigo  Warranty  4.0 
in  late  |une.  adding  fea¬ 
tures  for  handling  multiple 
warranties  in  a  supply 
chain,  plus  more  oui-of- 
the-b*ix  reports  and  ana¬ 
lytics  on  all  manner  of 
warranty  statuse.s.  Entigo 
aLso  has  a  deal  to  output 
data  It)  SAS  ItLstituie  Inc.'s 
analytical  ttH)l.s.  Tt)  im- 
pmve  its  workflow  au¬ 
tomation.  which  fjync  im¬ 
plies  could  reverse  the  man¬ 
ual  review  of  warranty  claims 
to  a  mere  20%.  Entigo 
tossed  a.sidc  its  own  rules 
engine  in  the  4.0  release 
and  integrated  one  devel- 
t>pc'd  by  Paris-based  Hog 


V’,  ,  in 

Salem,  N  H..  plans  to  ship 
this  week  Supt>l<LinK  2  0 
sottwaretkat  calculales  in¬ 
ventory  changes  based  on 
wetghl  data.  Sensors  hooked 
to  a  wireless  network  uptiire 
the  changes  horn  warehouse 
parts  bins,  ann  the  chanoes 
are  then  reported  to  a  SQL 
Server  database  An  Oracle 
version  ts  in  the  works  The 
upgrade  was  compietety 
rewritten  m  Microsoft's  Not 
lor  easrer  integration  with 
other  applicaliorrs. 


SA.  The  price  tag  for  an  Entigo  imple¬ 
mentation  isn’t  cheap,  reaching  up  to  SI 
million.  So  rsad  the  software  warranty  care¬ 
fully,  •  “Client.s  have  ceased  believing  the 
claims  of  vendors."  says  Mark  Ruddock, 
CEO  of  Toronto-based  twftwarc  vendor 
Inea  Corp.  Whether  or  not  you  believe 
that  statement  will  depend  on  how  much  you 
trust  vendors,  of  course.  Nevertheless. 
Ruddwk  says  a  vendor's  credibility,  such 
as  it  may  bo,  remains  vital  —  cspeciall> 
when  the  software  selec¬ 
tion  process  “in  the  last  12 
months  has  bca>me  the 
roost  onerous  I  can  re¬ 
member."  So.  he  noted. 
Inea  "dws  not  try  and 
overhaul  the  future" for 
everyone.  Instead,  the 
company  is  focusing  on 
the  financial  ser\'ices  are¬ 
na  with  its  Inca  Perfor¬ 
mance  Management  Suite. 
The  softwaa*  i.s  now  in  in¬ 
carnation  2.4.  but  Version 
3.0  is  in  beta-testing  with  a 
goal  to  go  gold  by  summer's 
end.  It  measures  corporate 
performance  in  areas  such 
as  budgeting,  planning 
and  forecasting,  and  pro- 


I  duces  reports  for  internal  users  as  well  as 
I  financial  regulators.  Ruddock  says  that 
'  among  other  new  goodies  in  3.0.  you  can 
expect  to  see  improvements  to  the  soft¬ 
ware's  capital  planning  functions  .and 
I  new  tools  for  compensation  manage- 
^  meni.  Believe  him  or  not.  •  Today,  the 
,  Eclipse  open-source  development  framework 
is  due  to  get  a  boost  when  Instantiations 
Inc.  in  Portland,  Ore.,  ships  its  CodePro 
Express  package  for  developers  who 
work  at  companies  with  fewer  than  1,000 
employees.  The  new  product  complc- 
ment-s  the  company's  CodePro  Studio  for 
large  orgjtnizations,  The  difference  be¬ 
tween  the  two  is  price  —  SI99  for  Ex¬ 
press  and  S599  for  its  big  brother  —  and 
the  number  of  functions  in  their  various 
features.  For  example,  in  Express  you  get 
150  audit  rules  for  checking  the  quality  of 
your  code,  vs.  300  in  Studio.  You  can  ex¬ 
pect  more  from  Instantiations  soon.  The 
company  has  a  seat  on  the  Eclipse  board 
and  is  leading  an  open-source  effort  called 
Koi,  which  is  building  des’cloper  collabo¬ 
ration  tools  into  Eclipse.  The  company 
will  add  instant  mes.saging  and  peer-to- 
peer  tools  to  its  products  by  the  end  of 
September.  ■  Tired  of  fielding  requests 
from  tech-impaired  execs  who  cant  keep 
track  of  their  fifes?  Punch  Networks  Corp. 

I  thinks  it  may  have  a  fix  for  you.  Next 
I  week,  the  Seattle-based  company  pl.ins 
;  to  ship  Punch  WebDrIvc  Sync  Engine. 

,  clicnt-lcvcl  code  that  works  with  the 
compam  's  online  storage  service.  The 
sofmarc  will  synchronize  the  most  re¬ 
cently  modified  files  for  up  to  10  Win¬ 
dows  devices  on  a  single  account.  It  en- 
cr^'pts  the  data  fur  transmission  and 
keeps  all  files  up  to  date  in  the  My  l>tKU- 
ments  folder  of  the  devices  at  a  erwt  of 
S99  per  >'ear  for  lOOMB.  which  should  be 
adequate  for  most  suits.  Engineers  and 
field-support  staffers  might  prefer  the 
SUOO-per-year  1GB  plan.  Companies  that 
want  to  talk  at  the  terabyte  level  can  negoti¬ 
ate  their  own  contracts.  I 


MatrixOne  Upgrades  PLM  Suite 


BV  JAIKUMAB  VI JAVAN 

MatrixOne  Inc.  this  week 
plaiLs  to  upgrade  its  product 
life-cycle  management  (PLM) 
software  by  adding  two  new 
applications  and  other  fea¬ 
tures  such  as  improved  end- 
user  collaboration  capabilities. 

PIAl  pnxlucts  like  the  new 
MatrixiO  software  from  West- 
ford.  Mass.-based  MatrixOne 
are  attractive  to  manufacturers 
because  they  can  help  cumpa- 
nies  achieve  significant  prod- 


uct-de\'cIopment  efficiencies. 
u.scrs  said.  But  they  added  that 
deploying  the  tools  can  be 
complex  and  time-consuming. 

Jeff  Davey,  manager  of  inte¬ 
grated  engineering  at  Siemens 
Oematic  AG.  a  maker  of  facto¬ 
ry  automation  systems  with  its 
U.S.  headquarters  in  Grand 
Rapid.s,  Mich.,  said  the  compa¬ 
ny  is  using  MatrixOne's  appli¬ 
cations  to  set  up  a  centralized 
repository  of  project,  configu¬ 
ration.  design  and  other  prod¬ 


uct-related  data  that  can  be  si¬ 
multaneously  accessed  by  all 
of  its  design  teams. 

The  cross-functional  view 
provided  by  PLM  can  improve 
time  to  market,  said  Mark 
Brewer,  vice  president  of  IT  at 
H3.  Fuller  Ca.  a  maker  of 
specialty  chemical  products  in 
St.  l*aul.  Minn. 

H.B.  Fuller  uses  Electronic 
Data  Systems  Corp.'s  Team- 
center  PLM  software  to  man¬ 
age  the  design  of  its  chemical 


formulations.  The  software  is 
expected  to  help  the  company 
better  control  both  raw  and 
formulated  materials.  Brewer 
said.  "It's  been  controlled 
chaos  without  it."  he  said, 
adding  that  the  lack  of  well- 
defined  processes  has  resulted 
in  product  overlaps. 

But  deploying  PLM  applica¬ 
tions  can  be  a  big  challenge 
for  IT  managers  from  both  a 
technology  and  business  proc¬ 
ess  standpoint,  according  to 
Davey.  "Whatever  time  you 
think  it  will  take  to  deploy 
PLM.  just  triple  it."  he  said.  I 


BRIEFS 


Chip  Glitch  Halts 
1^  Server  Sales 

Atlir  M  Corp.  dhcloMd  thst 
an  plMliical  pratem  CM  causa 
soma  of  Its  64*M  Hanhan  2  proc- 
aaaare  to  shot  down  or  bohavt 
unpradtotaMy,  SM  stoppad  sNp- 
manta  of  flia  Itanium  2*ba8ad 
larwr  tt  rtooaaad  in  tola  AprI. 

HMtotl-Padiard  Co.  and 
Unisys  Corp.  pton  to  eondnua  sad* 
tog  systoiBj  tool  usa  Hanium  2 
procaasofs.  total  said  A  wl  swap 
oUor  chips  tor  naw  onas  upon 
usarraquasL 


CSC  Expands  IT 
Outsourcing  Deal 

Computar  Sctonens  Corp.  (CSC) 
said  ft  has  aionad  tour  contracts 
that  oQand  a  12-yaaroid  IT  out- 
aourcino  dad  with  Oonaral  Oy* 
nandca  Corp.  in  Ms  Church,  tto. 
Tho  now  agraamants  ara  laorth  a 
totd  of  St37  nriMon.  CSC  saM. 

Tha  6  Sapundo,  Calf.*hnsad 
company  atoo  raportod  a  $162.7 
mftion  profit  on  ravonua  of  $3.08 
bMon  far  Rs  fourth  quartor.  which 
andad  March  28. 


IBMBuysIfendorof 
Provisioiiing  Tools 

BM  annauooad  that  ft  has  ac* 
quhad  Toronto  bssad  Thfah  Dy 
nandcSt  a  dovatopor  of  software 
that  preddos  autamaiad  oystom- 
preddonino  eapaUWas.  Tha 
campanias  dUol  dadoso  tha  1h 
nanctol  tarms  of  tha  dad,  which  is 
totondad  to  augraaol  BITs  or»- 
downd  computing  itialsgy.  BM 
said  TWnh  Dywandci  daaatopars 
wtft  ba  btond^  into  its  ThmR  man- 
agsmanf  software  unit 


Short  Takes 

Bun  Bal.  Pto-bnaad  UNISYS  add 
ft  plana  to  announea  nnt  month 
a  aat  of  bnatof  procaaa  modal- 
tog  tools  that  wtl  ha  maitmtod  as 
part  al  a  naw  IT  aardcaa  oftaring 
caftsd  Basinaat  BhnprtoCs. ... 
OAffTNOt  INC.  pradtotod  that  aio.7 
mBtan  PCt  w«  ba  sMppad  world* 
widi  Ms  guartor,  up  6.4%  from 
ayoorago. 


MARK  HALL  •  ON  THE  MARK 

rr  Infrastructure  ‘Game’ 
All  but  Over . . . 


...  for  vendors  seeking  high  growth,  claims  ex-Lotus  exec  Steve  Layne, 
who’s  now  CEO  of  Malvern,  Pa.-based  Entigo  Corp.  The  new  game,  he 
says,  is  identifying  areas  long  neglected  by  IT  pros  and  then  delivering 
a  “tai^eted  fix."  For  Entigo,  the  target  is  automating  the  handling  of 
product  warranties.  According  to  generally  accepted  accounting  prin¬ 
ciples  —  you  know,  the  ones  so  highly  prized  it  the  former  Arthur  Andersen  — 
companies  must  reserve  funds  on  their  balance  sheet  to  cover  war¬ 


ranty  liabilities.  So.  having  precise  data 
on  a  company’s  financial  exposure  in  this 
area  is  vita)  to  a  CFO.  And  managing 
warranties  isn’t  cheap.  Layne  points  out 
that  80%  of  warranty  processing  current* 
iy  requires  human  intervention  because 
the  aging  mainline  or  minicomputer 
home-brewed  programs  that  keep  track 
of  fauJty-product  claims  lack  the  refined 
rules  engines  available  now.  His  company 
will  replace  Version  3S  of  its  software 
with  Entigo  Warranty  4.0 
in  late  June,  adding  fea¬ 
tures  for  handling  multiple 
warranties  in  a  supply 
chain,  plus  more  out-of- 
the-box  reports  and  ana¬ 
lytics  on  all  manner  of 
warranty  statuses.  Entigo 
also  has  a  deal  to  output 
data  to  SAS  Institute  lnc.'s 
analytical  tools.  To  im¬ 
prove  its  woritflow  au¬ 
tomation.  which  Layne  im¬ 
plies  could  rtverse  tha  maft- 
uat  ravtow  of  wwTMty  ctotott 
to  a  mere  20%,  Entigo 
tossed  aside  its  own  rules 
engine  in  the  4.0  release 
and  integrated  one  devel¬ 
oped  by  Paris-based  Hog 


thi.  .•  ' 

■■  (. 

•.'tr,,.,:-  t’( 't  . 

W.i,:-!  .  .. 

.  'I...:.. 

t..-.  A  -  ■ 

■  .  .II<<  .ir 

l!v  1  . .  ■  . 

,1’<  Hii'ri  -  ,• i  - 

A.. 

■  ... 

I'pi."  •  ' 

’  , 

’  dpptlLjllUr'. 

•  N  : 

SA.  The  price  tag  for  an  Entigo  imple¬ 
mentation  isn’t  cheap,  reaching  up  to  SI 
million.  So  read  tha  software  warranty  cara- 
fdly.  •  “Clients  have  ceased  believing  the 
claims  of  vendors,”  says  Mark  Ruddock. 
CEO  of  Toronto-based  software  vendor 
Inca  Corp.  Whether  or  not  you  believe 
that  statement  wM  depend  on  how  much  you 
trust  vendors,  of  course.  Nevertheless, 
Ruddock  says  a  vendor's  credibility,  such 
as  it  may  be.  remains  vital  —  especially 
when  the  software  selec¬ 
tion  process  “in  the  last  12 
months  has  become  the 
most  onerous  I  can  re¬ 
member.”  So.  he  noted. 

Inea  ”does  not  try  and 
overhaul  the  future”  for 
everyone.  Instead,  the 
company  is  focusing  on 
the  financial  services  are¬ 
na  with  its  Inca  Perfor¬ 
mance  Management  Suite. 
The  software  is  now  in  in- 
camation  2.4.  but  Version 
3X)  is  in  beta-testing  with  a 
goal  to  go  gold  by  summer’s 
end.  It  measures  corporate  | 
performance  in  areas  such 
as  budgeting,  planning 
and  forecasting,  and  pro¬ 


duces  reports  for  interna)  users  as  well  as 
financial  regulators.  Ruddock  says  that 
among  other  new  goodies  in  3.0.  you  can 
expect  to  see  improvements  to  the  soft¬ 
ware's  capital  planning  functions  and 
new  tools  for  compensation  manage¬ 
ment.  Believe  him  or  not  ■  Today,  tho 
EdipM  opon-souret  dovetopmonl  frwrwwark 
is  due  to  get  a  boost  when  Instantiations 
ioc.  in  Portland.  Ore.,  ships  its  CodePro 
Express  package  for  developers  who 
work  at  companies  with  fewer  than  1,000 
employees.  The  new  product  comple¬ 
ments  the  company’s  CodePro  Studio  for 
large  organizations.  The  dUTerence  be¬ 
tween  the  two  is  price  —  $199  for  Ex¬ 
press  and  $599  for  its  big  brother  —  and 
the  number  of  functions  in  their  various 
features.  For  example,  in  Express  you  get 
150  audit  rules  for  checkiog  the  quality  of 
your  code,  vs.  300  in  Studia  You  can  ex¬ 
pect  more  from  Instantiations  soon.  The 
company  has  a  seat  on  the  Eclipse  board 
and  to  loatftng  m  opan-aource  effort  cafted 
Kol,  which  is  building  developer  collabo¬ 
ration  tools  into  Eclipse.  The  company 
will  add  instant  messaging  and  peer-to- 
peer  tools  to  its  products  by  the  end  of 
September.  ■  Tired  of  fielding  requests 
from  tech-knpaired  execs  tefio  cm*!  kMp 
track  of  thair  flies?  Punch  Networks  Corp. 
thinks  it  may  have  a  fix  for  you.  Next 
week,  the  Seattle-based  company  plans 
to  ship  Punch  WebDrive  Sync  Engine, 
client-level  code  that  works  with  the 
company'-s  online  storage  service.  The 
software  will  synchronize  the  most  re¬ 
cently  modified  flies  for  up  to  10  Win¬ 
dows  devices  on  a  single  account.  It  en¬ 
crypts  the  data  for  transmission  and 
keeps  all  files  up  to  date  in  the  My  Docu¬ 
ments  folder  of  the  devices  at  a  cost  of 
$99  per  year  for  lOOMB,  which  should  be 
adequate  for  most  suits.  Engineers  and 
field-support  staffers  might  prefer  the 
$800-per-year  1GB  plan.  Conipantoe  that 
want  to  talk  at  ttM  terabyte  tovtl  can  negoti¬ 
ate  their  own  contracts.  I 


MatrixOne  Upgrades  PLM  Suite 


■v  jakumah  vijavan 

MatrixOne  Inc.  this  week 
plans  to  upgrade  its  product 
life-cycle  management  (PLM) 
software  by  adding  two  new 
applications  and  other  fea¬ 
tures  such  as  improved  end- 
user  collaboration  capabilities. 

PLM  products  like  the  new 
MatrixlO  software  from  West- 
ford.  Mass.-based  MatrixOne 
are  attractive  to  manufacturers 
because  they  can  help  compa¬ 
nies  achieve  signlHcant  prod¬ 


uct-development  efficiencies, 
users  said.  But  they  added  that 
deploying  the  tools  can  be 
complex  and  time-consuming. 

Jeff  Davey,  manager  of  inte¬ 
grated  engineering  at  Siemens 
Demaiic  AG.  a  maker  of  facto¬ 
ry  automation  systems  with  its 
U.S.  headquarters  in  Grand 
Rapids.  Mich.,  said  the  compa¬ 
ny  is  using  MatrixOne's  appli¬ 
cations  to  set  up  a  centralized 
repository  of  project,  configu¬ 
ration,  design  and  other  prod¬ 


uct-related  data  that  can  be  si¬ 
multaneously  accessed  by  all 
of  its  design  teams. 

The  cross-functional  view 
provided  by  PLM  can  improve 
time  to  market,  said  Mark 
Brewer,  vice  president  of  IT  at 
H.B.  Fuller  Co.,  a  maker  of 
specialty  chemical  products  in 
St.  Paul.  Minn. 

H3.  Fuller  uses  Electronic 
Data  Systems  Corp.’s  Team- 
center  PLM  software  to  man¬ 
age  the  design  of  its  chemical 


formulations.  The  software  is 
expected  to  help  the  company 
better  control  both  raw  and 
formulated  materials.  Brewer 
said.  “It’s  been  controlled 
chaos  without  it.”  be  said, 
adding  that  the  lack  of  well- 
defined  processes  has  resulted 
in  product  overlaps. 

But  deploying  PLM  applica¬ 
tions  can  be  a  big  challenge 
for  IT  managers  from  both  a 
technology  and  business  proc¬ 
ess  standpoint,  according  to 
Davey.  “Whatever  time  you 
think  it  will  take  to  deploy 
PLM.  just  triple  it.”  be  said.  I 


^  ROBUST  OBJECT  DATABAS 

;e 

^  HIGH  PERFORMANCE  SQ 

L 

^  MULTIDIMENS'ONALACCESS 

Our  post-relational  database. 

The  end  of  object-relational  mapping. 


For  your  next  generation  of  applications,  More  than  just  a  database  system.  Cachi 

move  to  the  next  generation  of  database  technology:  incorporates  a  powerful  Web  application  develop- 

Cach^,  the  post-relational  database.  ment  environment  that  dramatically  reduces  the 

What  makes  Cache  “post-relational”?  It  provides  time  to  build  and  modify  applications, 
developers  three  integrated  data  access  options  which  The  reliability  of  Cach^  is  proven  every  day  in 

can  be  used  simultaneously  on  the  same  data:  an  “Ufe-or-death”  applications  at  hundreds  of  the  largest 

advanced  object  database,  high-performance  SQL,  hospitals.  Cachi  is  so  reliable,  it’s  the  world’s  leading 
and  rich  multidimensional  access.  database  in  healthcare  —  and  it  powers  enterprise 

Because  Cache’s  architecture  is  a  multi-  applications  in  financial  services,  government  and 

dimensional  structure,  applications  built  on  it  are  many  other  sectors. 

massively  scalable  and  lightning-^t.  We  are  InterSystems,  a  specialist  in  database 

Plus,  no  mapping  is  required  between  object,  technology  for  25  years.  We  provide  24x7  support  to 

relational,  and  multidimensional  views  of  data.  four  miUion  users  in  88 

This  means  huge  savings  in  both  development  and  countries.  Cache  is  available 
processing  time.  And,  Cach^-based  applications  for  Windows,  Open  VMS, 

don’t  require  frequent  database  administration  or  Mac  OS  X,  Linux  and 
hardware  and  middleware  upgrades.  major  UNIX  platforms.  Mate  Applicttioos  faster 

Download  a  fiilly^nctional  version  of  Cache  or  request  it  on  CD  for  fiee  at  www.InterSvstems.com/Oost-ielationol 


InterSystems^ 

CACHE 
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Automakers  Plan 
Messaging  Syrtem 

CovWnI  UA  •  buiiM«-to-fauii- 
mm  ndimgt.  nM  tt*t  woriong 
«Mi  Hm  8Iq  Threw  MHonaiian 
wwl  threw  lupplTi  el  autenwMvw 
pwts  to  dMtIag  Ml  XHL-btt»d 
dtoi  ntompino  systom.  Th* 
ayitom  is  dM  toto  Ihto  ywtr  and 
sdi  bs  mirlMtod  as  an  aftamatire 
to  atoctwnfc  data  intorchawgs 
todinolDgy  lor  tho  auto  Mustry, 
accordtog  to  Soulhflafd,  Hteh.* 
baaadCovWfiL 


CA  Narrows  Loss, 
Has  Higlier  Sales 

CoiBpiitor  AsMCiatos  Intomatkm* 
al  ha  ragortod  a  SI06  mMon 
laas  M  reremis  «i  $801  mlRon 
tar  Ms  toiatb  guaitor.  wWdi  ondod 
March  31  That  eompana  «fWi  a 
yoto-sartar  (toftdl  of  $238  ml' 
kn  OB  $772  fflMton  to  rovoous. 

CA  said  softwvs  bconss  taas  un- 
dar  Ito  Bubaertattatt-baosd  pricing 
modal  totatad  about  $392  mMion 
in  tha  faurth  quartor,  up  from 
$270  ndMon  a  ]«ar  ago. 


Judge  Calls  for 
Microsoft  Reports 

Tha  tadsnl  judga  ovarsaaino  tho 
MtareooA  antHnst  caaa 
ofdarad  tha  llS.  Dapartmant  of 
Justtca  and  tha  statoa  tafolvad  in 
tha  eaaa  to  Ma  raporto  ovary  ail 
monthi  datoMag  vthat  tha  aofl- 
wnre  vondor  it  doing  to  comply 
wMi  tha  tarms  of  a  aatttaroant 
daai  approved  last  faL  Tha  fkst 
report  la  dua  to  bo  Hod  to  U.S. 
DMrict  Court  Judga  CoHoan 
KoMvHMybyJdya. 


Short  Takes 

OftACLf  CORP.  iNi  mah  plans  to 

amounco  an  upto«do  of  Na  aataa 


paaMa....QATEWiyMC.dta- 
eloaod  that  tha  U,S.  attornay  tor 
Serdharn  CaMonda  has  opa^  a 
prMbninary  taquhy  Mo  alagad 
accoandng  Impraprlaltaa  at  tha 
Hniiay^  Calf.-biMd  K  malar. 


W3C  Readies  New 
Tech  Patent  Policy 


Aims  to  prevent  vendors’  patent  claims 
from  blocking  Web  standards  work 


BV  CANOL  8LIWA 

The  World  Wide  Web 
Con.sortium  (W3C) 
is  poised  to  unveil 
a  formal  policy 
for  dealing  with  technology 
patents  that  have  the  potential 
to  block  the  development  of 
interoperable  Web  standards. 

Tim  BemerS'Lee,  director  of 
the  Cambridge,  Mass.>based 
W3C.  said  a  decisioD  on  the 
patent  policy  is  due  to  be  an¬ 
nounced  “very  shortly"  now 
that  the  organization's  manage¬ 
ment  team  has  reviewed  feed¬ 
back  collected  during  a  public 
comment  period  that  ended 
April  30.  He  declined  to  dis¬ 
close  details  of  the  new  policy. 

A  W3C  workii^  group  has 
spent  more  than  three  years 
developing  a  precisely  defined 
patent  policy  to  replace  the 
"minimalistic'*  and  “very 
loose”  provisions  that  current¬ 
ly  require  members  who  know 
of  patent  claims  relevant  to 
ongoing  standards  work  to 
disclose  them,  said  Daniel 
Weitzner.  chairman  of  W3C's 
patent  policy  working  group. 

BridgingaGap 

Weitzner  said  the  policy  draft¬ 
ed  by  the  woiking  group  re¬ 
flects  the  "overwhelming  goal" 
of  producing  standards  that 
can  be  implemented  royalty- 
free.  But  the  group  also  in¬ 
cluded  an  exception  provision 
that  will  make  it  possible  for 
members  to  consider  alternate 
licensing  terms  when  it's 
deemed  impossible  to  meet 
the  royalty-free  goal,  he  said. 

That  reflected  a  desire 
for  flexibility  as  well  as  the 
group's  attempt  to  acknowl¬ 
edge  the  concerns  of  those 
who  favor  a  so-called  reason¬ 
able  and  nondiscriminatory 
model  that  permits  the  collec¬ 
tion  of  patent  licensing  fees. 
Weitzner  said. 


The  need  to  establish  a  for¬ 
mal  policy  became  apparent 
as  some  patent  holders  started 
to  assert  claims  to  technology 
being  used  as  part  of  proposed 
Web  standards.  One  notable 
case  involved  a  claim  from 
Seattle-based  Intermind  Corp.. 
now  known  as  OneName 
C^rp,  that  the  W3C’s  Platform 
for  Privacy  Preferences  might 
infringe  on  a  patent  it  held. 

More  recently,  the  W3C'8 
patent  policy  became  a  hot 
topic  of  discussion  among 
some  W3C  members  who  have 
.speculated  why  IBM.  Microsoft 
Corp.  and  other  vendors  have 
been  submitting  some  key  Web 
services  standards  proposals  to 
the  Organization  for  the  Ad¬ 


vancement  of  Structured  Infor¬ 
mation  Standards  (OASIS)  in¬ 
stead  of  the  W3C. 

IBM  and  Microsoft  insisted 
that  their  decision  to  propose 
a  Business  Process  Execution 
Lai^uage  (BPEt)  specification 
within  Billerica.  Mass.-based 
OASIS  had  nothing  to  do  with 
patent  issues  —  a  claim  they 
backed  up  when  they  submit¬ 
ted  BPEL  to  OASIS  under  roy¬ 
alty-free  terms  ((^icklink 
38188].  The  companies  said 
they  chose  OASIS  because 
they  felt  it  was  the  more  appro¬ 
priate  staivdards  body  for  h^- 
level  business  specifications. 

Karla  Norsworthy.  director 
of  dynamic  e-business  tech¬ 
nologies  at  IBM.  said  IBM’s  in¬ 
tention  in  the  core  Web  ser¬ 
vices  space  is  to  submit  only 
proposals  for  which  it  would 
provide  a  royalty-free  license. 


since  there’s  a  need  for  broad 
adoption  of  Web  services 
standards. 

But  Norsworthy  said  she  can 
see  a  need  for  the  exception 
provision  in  the  patent  policy 
proposed  by  the  W3C  to  allow 
a  working  group  to  decide  to 
publish  a  specification,  even 
if  a  patent  claim  is  raised.  "I 
think  the  W3C  is  being  practi¬ 
cal  in  allowing  a  speciflcaiion 
to  go  forward  and  working  out 
the  (intellectual  property] 
from  some  third  party  as  they 
go."  she  said. 

Don  Deutsch.  vice  president 
of  standards  strat^y  at  Oracle 
Corp.,  said  the  provision  was 
a  last-minute  compromise  de¬ 
signed  to  address  the  concerns 
of  IBM  and  Microsoft.  Deutsch 
added  that  he  expects  it  to  be 
approved. 

Weitzner  said  the  exception 
provision  "was  an  effort  to  ^- 
dress  the  concerns  of  a  num¬ 
ber  of  members."  He  added 
that  the  proposed  eiureption 
procedure  was  designed  to 
be  hard  to  use  "because  the 
working  group  didn't  want  it 
to  be  used  often."  I 


Bemers-lae:  Standards  Groups  Are ‘\feiy  OifferBnt  Pbeas’ 


Tim  Baniift-Ua.  drector  ol 
theW9C.8pol«aiithCaffl|Dutar- 
MorAf  this  month  about  recent 
moves  by  technology 
vendors  to  aubnMWtt 
servicas  standards  pro¬ 
poses  to  OASIS  Instead 
dhisorganiadoa 


ttM  trend?  OASIS  and  the 
WX  are  very  dWerant  places 
attogether.  The  rules  ate  very 
diflerent[AitheW3C.jalot 
of  that  has  to  do  vAh  gettino 
everybody  on  board,  making 
sure  evarylhing  is  coordtoated 
and  trying  to  get  the  standard 
very  wkMy  deployed.  (We  re- 
gureladamonstrationofimpie- 
mentadton.  of  Meroparabitty. 
before  something  can  become  a 
standard.  Ms  have  pubfic  re- 
view.  Wta  have  recMremerts 
that  toe  gniups  be  chartered  to 
liaiM  wdh  groups  which  have 
relBlad  technology. 

IMMtOASSprovIdBSis 
somevtoeri  you  can  start  an  ac- 


IMIy  wNto  no  prior  leqiinmnls. 
Thrw  compel  can  just  get  to¬ 
gether,  toiy  can  start  a  group, 
and  there's  notoing  to 
prevent  toe  sane  toing 
[tram]  betog  done  in  dl- 
ferent  organtalfans. 
There'snearlynoman* 
agement  control  at  al.  It’s  faetor. 

Da  you  think  ra  a  dangaraus 
trend?  For  core  standards  for 
a  big  new  martot  area,  I  think 
R's  very  important  that  they 
are  widsly  accepted  by  every¬ 
body. ...  For  an  appicsttorHevsl 
spedficalton  or  for  something 
Me  a  programming  language, 
you  can  have  toree.  for.  hve. 
eigM  of  those  around  and  mix 
toamtogatoertoacertainax- 
tanL  So  in  aoma  amis,  t  doesnl 
hurt  But  for  toe  foundallonil 
specsoftoeWebsarvioesarchi- 
lecture.  I  foal  that  I’s  important 
tohBvetoeWX. 

Da  yea  hmre  pwrairni  abeul 

wtMrih^pmriklNdHIlM 


QASSMdtlwWlC^itaMk 
atondmdiiltartimicbBree- 
MapUni  Utah  aervtaae?  I  do 

hove  concerns  about  that  I  feel 
toafsanaieaeiherek^notob' 
vioua  how  thtogs  are  going  to 
work  out  for  the  bet,  because 
toere's  no  medenlam  for  W3C 
and  OASfi  to  coordhsfe. 

Ssnto  vndan  Star  ton!  He 
WMCtarBsrintaiMigtoe 


an  VHb  emyteae.  Oe  yen 
IhtaktliMliairfilHfdBd 

jmprewlsiiTObviOMMy.toere 
are  sorne  members  for  whom 
VM)  sarvtees  am  absoUely 
toe  tofoo.  Wb  try  to  heap  R 
balanoad.  Therg  are  ottw  peo¬ 
ple  vtoo  Ml  us.  IWhy  an  you 
wesfing  )nur  time  on  al  this 
WBbsenfcai9irfaioa?>[oom- 
pinles}  WQidd  ket  IBS  (he  Se¬ 
mantic  Wbb.  R  Stolid  Ml  happen 
soeasly.' 

•GnnfSHn 


■ 

You  trust  the  rivets  to  hold  the 
44,ooo-ton  steel  skeleton  together. 

You  trust  the  skeleton  to  support 
three  miles  of  braided  cable. 

You  trust  the  cable  to  keep  you 
suspended  in  mid-air. 


Shouldn’t  you  feel  the  same 
way  about  the  security  of 
your  network  infrastructure? 
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Coarinu^d  from  page  1 

Ameritrade 


City,  N.I.-based  Daiek  Online 
Holdings  Corp.  There  weren’t 
many.  ^  Hirii  said  it  came 
down  to  choosing  the  best  of 
each  company’s 
staff  and  technolo- 
g>‘  —  and  getting 
rid  of  the  rest. 

The  biggest  technology 
challenge  to  date,  he  said,  was 
consolidating  three  data  cen¬ 
ters  into  two.  and  two  back¬ 
end  systems  into  one. 

Previously.  Datek  used  Win¬ 
dows  NT  servers  that  ran 
homegrown  middleware  plus 
Unux  servers  from  IBM. 
whereas  Ameritrade  used  Sun 
Microsystems  Inc.  Unix 
servers  and  BEA  Systems 
loc's  Tuxedo  middleware 
(QuickLink  34203].  Ameri¬ 
trade  wouldn’t  say  how  many 
servers,  disk  arrays  and  net¬ 
work  devices  were  culled  as 
pan  of  the  consolidation  ef¬ 
fort,  nor  would  it  specify 
which  systems  are  still  in  use. 

But  Hirji  said  the  project  in¬ 
cluded  detaching  the  fiont 


end  of  Datek’s  trading  system 
and  then  connecting  it  to 
Ameritrade’s  back-end  system. 
“We  did  that  over  a  weekend 
in  March,  and  we  did  that 
without  impairing  any  existing 
accounts,  any  of  the  balances, 
any  of  the  trades,”  he  said. 

Now,  both  the 
Ameritrade  and 
Datek  online  trad¬ 
ing  sites  run  on 
Ameritradc's  back-end  tech¬ 
nology.  The  only  thing  left  to 
do  is  merge  the  two  front  ends 
into  a  single  Web  site.  Hiat’s 
expected  to  be  done  by  Sep¬ 
tember.  Hirji  said. 

Ameritrade  has  shut  dowm 
its  data  center  in  Omaha  and 
combined  operations  into  two 
others:  its  main  IT  facility  in 
Kansas  City.  Mo.,  and  Datek’s 
data  center  in  Sccaucus,  N.]. 

On  Track 

Paul  Cantwell,  a  financial  ser¬ 
vices  consultant  at  Accenture 
Ltd,  said  the  Ameritrade/ 
Datek  integration  effort  is 
above  average  because  it's 
ahead  of  schedule.  Most  merg¬ 
er-related  integration  projects 
drift  on  without  end  because 


of  loose  man^ement  and  un¬ 
realistic  expectations,  he  said. 

Hirji  said  it  was  a  challenge 
dealing  with  two  rival  IT 
teams,  each  of  which  thought 
its  homegrown  software  vs'as 
better  than  the  other’s.  He 
added  that  he  overcame  the 
internal  battles  by  quickly  es¬ 
tablishing  a  clear,  objective 
methodology  for  choosing 
technology.  “Wc  made  sure 
that  the  broad  organization 
had  input  and  buy-in  into  that 
process.”  he  said. 

Hirji  said  his  job  now  is  to 
build  a  single  company  that’s 
more  efficient  and  profitable 
than  the  two  former  compa¬ 
nies  were  —  in  the  midst  of  a 
dreadful  economy.  Fortunate¬ 
ly,  he  said,  Ameritrade's  focus 
on  online  trading  gives  it  a 
lower  IT  cost  structure  than 
brokerages  that  diversify  into 
businesses  like  banking,  mort¬ 
gages  and  insurance. 

“So  if  it  sucks  for  everyone 
else  right  now,  it  sucks  less  for 
us,"  Hirji  said.  “The  converse 
is  also  true.  When  it  gets  bet¬ 
ter  for  everyone  else,  it  gets 
even  better  for  us,  given  our 
cost  margin."! 


CIO  Gives  Notice  of  Layoff 


When  Ameritrade  brouf^  Mm  In 
as  a  consuMant  last  September 
to  consold^  Us  IT  systems  and 
staff  after  the  Datek  acquisition. 
Asm  Hkf  decided  It  would  be 
betlertot^hisbmeandcare- 
luly  choose  the  best  talent  in¬ 
stead  of.  as  he  put  R. 
11rino90%and 
you're  done.' 

*5006  CIOs  witeM 
you  technology  is  a 
compettMeachWb 
taoe.”  said  HfefL  who 
now  Is  CIO.  1  don't 
beleveinthet8tal.l 
think  technoiogy  by 
and  targe  to  a  com¬ 
modity.  The  only  dtf- 
ferentUlno  tacto.  the 
only  IMng  you  can  buU  sustain¬ 
able  compeWve  aiMnlaoe 
around,  is  peopia.* 

Ewry  Mridng  moment  that 
he's  not  acliMly  Involved  in  a 
proiect  HIM  to  thMdng  about 
how  (0  dtract  retain  and  devel¬ 
op  the  best  IT  talent,  he  said. 

But  HIri  to  making  deep  cuts 


because  of  the  merger.  Most  of 
the  250  worters  beino  tat  go 
were  laid  off  itfe  lest  yeer.  but  a 
siiritaatil  number  w#  stay  urril 
September.  They  also  were  toU  In 
Oecember  that  they  would  be  cut 
which  said  was  the  "honor- 

alitatNng*todo. 

Mdiadeiov^edged 
thatmMdngadwnce 
nolioe  of  the  planned 
tayofbincrcBDBsfte 
chance  tttal  dtagnir- 
ded  employees  coiid 
tiheraMnoB.Bulhe 
said  some  taidofl 
woriarswilstife 
beck  at  tfie  company 
no  matter  what,  and 
the  teal  are  erne  My 
not  to  ratalaie  f  he's  open  about 
theiBKoltoandiretosdiamlilrly- 
Juat  In  case,  though,  Hbd  has 
pul  addMonal  safaguanfe  in 
place,  such  as  moMlorlno  tools 
and  redrtetod  access  to  sys¬ 
tems,  for  the  empiayeeB  who  ate 
being  let  go  In  Septomber. 

-LucmMmm 


Fizzer  Worm  Sparks  Concern 
About  Remote  Security  Risle 


Damage  to  corporate  networks  is  minor, 
but  remote  users  aren’t  fully  protected 


BY  JAMtUMAR  VIJAVAM 

Last  week’s  Fizzer  worm  ap¬ 
pears  to  have  had  little  impact 
00  corporate  networks,  ac¬ 
cording  to  IT  managers  and 
analysts.  But  the  malicious 
code  and  spyware  that  such 
viruses  leave  behind  on  un¬ 
protected  systems 
could  prove  to  be 
a  loi^term 
headache  for  com¬ 
panies,  they  said. 

Fizzer  repre¬ 
sents  an  emerging 
class  of  worms 


Ithinkthe 
biggest 
security  threat 
today  is  remote 


users. 


a  variety  of  vrays.  The  worm 
was  contained  in  executable 
attachments  embedded  in 
e-mail  messa^s  with  innocu- 
ous-soundii^  subject  headers. 

In  general,  companies  that 
keep  their  antivinis  software 
up  to  date  and  have  policies  for 
filtering  exe¬ 
cutable  attach¬ 
ments  would  have 
been  protected 
against  Fizzer. 
said  Russ  Cooper, 
an  analyst  at 
TriiSecufc  Corp. 


that  try  to  dreum-  . .  ioReston.Va. 


vent  increasingly 
sophisticated  cor¬ 
porate  defenses  in 


DAVID  KIIAUTHAIIER. 

OIRCCTOROFIS.AOVANCEO 
neflE  COMMUIBCAriONS  INC 


Pete  Und- 
strom,  an  analyst 
at  Spire  Security 


LXC  in  Malvern.  Pa.,  said  IT 
and  security  managers  who 
haven’t  yet  taken  such  basic 
defense  measures  are  simply 
being  "derelict  in  their  duty." 

But  workers  who  dial  into 
corporate  nctwarks  from  their 
homes  and  other  remote  loca¬ 
tions  may  not  have  full-blown 
defenses  available  to  them  and 
are  therefore  more  vulnerable 
to  having  their  PCs  infected 
by  such  viruses,  said  Michael 
AUgeier,  data  security  officer 
at  the  Lower  Colorado  River 
Authority  in  Austin,  Texas. 

That  could  prove  dangerous 
because  of  the  payload  carried 
by  worms  like  Fizzer.  Accord¬ 
ing  to  F-Secure  Corp.,  a  Hel¬ 
sinki.  Finland-based  antivinui 
software  vendor,  Fizzer  con¬ 
tains  a  built-in  Internet  Relay 
Chat  back  door,  a  denial-of- 


Facts  About 
Fizzer 

■  Tha  warm  spreads  via 
a-rntf  and  ttw  Kazaa  P2P 
fito-shartog  natwDrk. 

■  H  contains  a 

a  daniai-of-servtea  toot  and 
a  kayshoka-togBing  Trajan. 

■  It  gsnaralas  a-nml 
subject  buders  that  are 
complataly  random. 


service  attack  tooL  a  keystroke- 
Ttojan,  an  HTTP  serv¬ 
er  and  other  components. 

Such  capabilities  could  allow 
hackers  to  remotely  control 
compromised  machines  and 
steal  data  from  them  or  mine 
them  for  passwords,  analysts 
said.  And  connecting  a  com¬ 
promised  system  to  a  corpo¬ 
rate  network  mi^t  let  hackers 
burrow  past  other  defenses. 

"1  think  the  biggest  security 
threat  today  is  remote  users," 


said  David  Krauthamer,  direc¬ 
tor  of  information  systems  at 
Advanced  Fibre  Communica¬ 
tions  Inc.  in  Petaluma.  Calif. 
“It’s  becoming  easier  to  gain 
an  access  foothold  to  a  corpo¬ 
rate  network." 

“Wc  don’t  have  any  control 
over  remote  woritstations  or 
home  PCs  or  kiosks  or  wher¬ 
ever  it  is  that  people  access 
our  networks  from,"  AUgeier 
said.  “We  can’t  really  rely  on 
personal  firewalls  and  anti¬ 
virus  software  to  detect  IVo- 
jans  and  keystroke-loggers." 

The  Lower  Colorado  River 
Authority  has  begim  to  roll 
out  software  developed  by 
Austin-based  WholeSecurity 
Inc.  that  scans  individua] 
desktop  PCs  for  maUdous 
code.  AUgeier  said  it's  looking 
to  deploy  the  tool  for  remote 
users  as  weU.  I 


Go  to  cv  SaoiXy  KiKNiiMgB  Carter  ior 
adAonW  nicnnallon  ant  resoifces: 


From  his  desk 
at  TrendLabs 
Los  Angeles. 
Joseph  Millet.  Ph  D. 

)0in8  a  team 
of  ontiviiuB  experts 
working  worldwide 
to  Uttcovei  data 
security  answers 
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Vendors  Need  to  Rnd  New  Ways 
To  Work  With  Users,  Zander  ^ys 


Foniier  Sun  c\cc 
remains  'bullish' 
about  IT  industry 

By  MARVFRAN  JOHNSON 

'  former  president  and 
chief  operating  officer  at  Sun 
Microsystems  Inc.,  last  week 
said  he  wilt  become  a  manag¬ 
ing  director  at  Si7\-t‘r  Lake  Part¬ 
ners.  a  Men/a  Park.  Calif- 
based  investmenr/lrm.  furiit’r 
rhix  monrft.  Zander  spoke  with 
Computerworid  about  the  IT 
industry  and  his  time  at  Sun. 
which  he  left  last  /u/y, 

How  esn  technotogy  vendors  cUg 
themselves  out  of  the  mess 
they're  in  now?  We  as  an  indus- 


.  try  have  to  demonsrrafe  lo  JT 
pnifessionals  and  ClDs  what 
we're  going  to  do  for  them  to 
I  reduce  their  IT  costs.  There’s 
a  significant  backlog  of  appli- 
'  cations,  but  budgets  arc  frozen 
or  reduced,  and  people  are 
!  stuck  with  an  IT  infrastruc- 
1  ture  that's  way  too  expensive. 

[  When  you  get  back  to  the 
I  business  side  of  the 
j  house,  they're  all  tired 
.  ofhearing  about  all 
!  this  technology.  The 
I  company  that  gives 
'  them  an  IT  advantage 
t  to  design  cars  more 
I  quickly  or  reduce  sup- 
I  ply  chain  a»sts.  that's 
what  matters,  'fhcy're 
'  not  interested  in  hear¬ 


ing  about  48-way  servers. 

What  was  really  behind  your  deci¬ 
sion  to  leave  Sun?  With  the 
No.  2  position,  you  do  those 
jobs  for  three  or  four  years, 
and  then  you  either  get  the 
CEO  job  —  like  Sanjay  Kumar 
at  CA  —  or  you  exit.  Some¬ 
times  on  good  terms,  some¬ 
times  not.  With  me.  it 
was  friendly.  Scott 
fMcNealyJ  wants  to 
run  the  company  for 
another  10  years.  But  if 
you  do  the  president's 
job.  eventually  you 
want  to  make  the  CEO 
decisions.  You're  so 
close  to  that  office,  and 
you're  running  the 
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mission  is  investigating  its  ac-  i 
counting  practices.  j 

Blake  Kresl.  manager  of  I 

technology  at  Southwest  Air¬ 
lines  Co.  in  Dallas,  said  busi¬ 
ness  executives  at  the  airline  I 
have  taken  note  of  the  unan-  | 
swered  questions  abetut  i3's  fi¬ 
nances.  Because  i2  and  South-  ' 
west  are  based  in  the  same 
city,  the  vendor  is  “constantly 
in  the  morning  nexsV  he  said. 
“So  whentwer  a  story  hits, 
we're  asked  about  what's  go¬ 
ing  on.  Obs'iously.  being  so  I 
public,  it's  a  cvmcem.-  I 

But.  Kres!  added,  he  remains  j 
confident  that,  “in  one  form  or  | 
another,  the  applications  wv 
want  will  keep  going.  " 

“Certainly,  there  is  a  con¬ 
cern  about  rh*.  delisting  and  I 
the  financial  problems.*'  said  I 
George  McAfee,  supply  chain  ' 
project  manager  at  Cooper 
Tire  6c  Rubber  Co.,  a  Findlay. 
Ohio-based  manufacturer  that 
runs  i2*s  production  schedul¬ 
ing  and  transportation  man¬ 
agement  software.  “We've  put 
a  lot  of  money  on  the  line  and 
have  high  expectations  from 
[our  senior!  executives. " 

But  McAfee  said  i2'5  prob- 


I  Icms  won't  stop  him  from  buy- 
I  ing  more  of  the  company's 
I  software.  .And  like  other  users 
I  at  the  conference,  he  s.iid  he 
I  h^sscen  a  piisitivcchangc  in 
j  the  way  i2  operates  since  it 
I  overhauled  its  senior  manage-  [ 
ment  in  April  2002.  I 

Before  the  reorganization.  | 

.McAfee  said.  i2’s  leadership 
was  “more  focused  on  grow-  I 
ing  the  busines.s  at  all  costs 
and  trying  to  sell  the  software  I 
to  cvery'one  in  the  world,  in¬ 
stead  of  nurturing  the  existing  ' 
client  base.  I  think  the  mission 
was  ver>-  shallow,  and  that's 
why  it  failed." 

Kresl  also  said  j2's  attitude 
toward  users  has  improved. 
"There  was  a  little  bit  of  hu¬ 
bris  I  beforcl."  he  said,  adding 
that  i2  is  easier  to  work  with 
now  and  is  more  willing  to 
acknowledge  and  address 
shortcomings  or  bugs  in  its 
applications. 

•'They're  not  l<K*king  at  sell¬ 
ing  back  into  the  company,  but 
at  making  a  success  out  of 
what  they've  already  st»Id  us." 
Kresl  said.  Southwest  uses  ’i2's 
parts  management  and  de¬ 
mand-planning  software. 

“The  last  year  ha-s  been  a 
challenge  for  i2.”  said  Janet 
Eden-Harris.  i2's  chief  market¬ 
ing  officer,  during  a  speech. 


“But  it's  3  stronger  company 
than  it  has  been  for  the  last 
several  years."  she  added,  re¬ 
ferring  to  the  management 
changes  as  well  as  downsizing 
moves,  now  product  rollouts 
and  improving  customer-satis¬ 
faction  rates  on  i2's  surveys. 

Even  so.  the  combination  of 
the  SEC  investigation,  the  rc- 
audii  and  the  stixk  delisting 
continues  to  weigh  on  i2. 

Some  users  said  the  reaudii 
process,  which  is  due  to  be 
completed  ne.vt  month  and  is 


:  comp.iny  from  day  to  day.  but 
the  CEO  still  gets  to  make  the 
big  strategy  calls. 

Whaf  do  you  think  were  the  best 
decisions  you  made  at  Sun?  One 
j  of  my  best  was  branding  So- 
!  laris,  which  was  ver\'  contro- 
I  versial  inside  Sun  at  the  time. 
That  was  a  first  in  the  main¬ 
stream  computer  market,  tak¬ 
ing  an  OS  and  making  it  a 
brand.  It  basically  made  So¬ 
laris  what  it  is  today.  Another 
great  decision  was  around  the 
whole  Internet  and  dot-com 
era.  seizing  that  opportunity 
and  driving  the  company 
around  it.  We  were  the  "dot" 
in  "dot-com."  and  any  new 
start-up  was  using  Sun. 

Whet  were  your  worst  decisions? 
In  1992,  we  introduced  a  ver¬ 
sion  of  Solaris  that  was  not 
ready  for  prime  lime.  1  rushed 
it  to  market  too  soon,  and  that 


expected  to  lead  to  a  restate¬ 
ment  of  i2*s  financial  results 
for  several  years,  will  be  a  key 
milestone  for  the  vendor. 

"We  watch  our  critical  trust¬ 
ed  suppliers  very  carefully, 
and  at  present,  this  is  not  sat¬ 
isfactory  for  anyone."  said  Jeff 
IMole.  senior  vice  president  of 
procurement  strategy  at  Air¬ 
bus  SAS.  a  Toulouse.  France-  ^ 
based  aircraft  maker.  "We'll 
wait  and  sec  what  happens 
when  the  Ircauditl  report  is  is¬ 
sued  —  not  that  anyone  is  par- 


was  a  disaster.  More  recently.  1 
think  we  didn't  push  enough 
on  the  whole  Linux  question. 
We  should  have  done  more  to 
understand  how  to  embrace  it 
within  [Sun'sJ  strateg);  to 
"own"  that  whole  developer 
community.  The  third  thing 
was  not  moving  to  {downsize! 
the  compan>’  properly  once 
the  market  started  coming 
apart  in  the  fall  of  2000. 

What  do  you  think  the  next  big 
thing  In  IT  will  be?  There's  no 
big  “next  thing"  on  the  hori¬ 
zon.  TTiere’s  nothing  like  the 
Net  or  PCs  comity  in  the  near 
future.  It's  going  to  be  more 
about  rationalization,  consoli¬ 
dation  and  making  sense  of 
what  people  already  have.  But 
my  long-term  outlook  is  still 
ver>’  bullish-  People  say  the  in- 
dustr)-  is  maturing,  but  I  tend 
to  argue  that  it's  not.  because 
innovation  is  still  happening.  I 


ticularly  expecting  any  diffi¬ 
culties  around  that." 

J.B.  Hoyt,  supply  chain 
project  director  at  Whirlpiwl 
Corp.  in  Benton  Harbor. 

Mich.,  said  via  e-mail  that 
i2's  management  has  said  the 
rcaudit  should  have  a  "benign" 
aflfcct  on  the  vendor.  If  the 
conclusion  of  the  process  "is 
negative,  then  we  will  all 
have  to  assess  the  outcome  at 
that  lime.”  said  Hoyt,  who 
didn’t  attend  last  week's  con¬ 
ference.  I 


12  Takes  Stefis  to  improve  Customer  Loyalty 

s(xn»  at  12  on  (hen  behalf 
aneedecL 


Al  teat  imik's  conlennoe.  12 
execulims  oulined  a  sehas  of 
Hbatlves  daeloind  Id  futher 
booet  oafoniar  aallaiaclion. 

Sam  Nflhane,  who  has  bean 
omaelng  12’a  leorganltaban 
effoita  since  being  named  ctilet 
opeaUng  officer  t3  monihs  ago. 
told  coniaience  anendeaa  Ihel 
the  cooigany  k  seMng  up  a  new 
customer  oigeniiallon  designad 
b)  sbeamlne  communlcatlona 
niffi  key  usen  bn  pnwlilng  ffiem 
wffii  a  skffie  poM  ol  eonlacl. 

He  saidaixouni  nanegeis 
wibeiwalgnidloaeidciallli 
specffic  usan  and  connlnala  le- 


bi  addffipn.  Cs  Mdanica 
worianwffichaitaeilvMnauc- 
cesaes  and  parfonnance  giks  at 
the  companies  they  pedonn 
amrii  lor  and  wffi  Ilian  aasees  po- 
lanlisi  tmpnMmanls  and  oaata 
9(>dayaclionpkne. 

NakaneaaidBkataplwnth- 
ng  a  buamaae  opIMzalion  ser¬ 
vice  ifider  which  da  coiRilanls 
wl  wok  vM  oaeis  to  Impnw 
MbialneasinoeaaeaaAar 
WebcaianahangiaKffi*. 
Andhecplniedalep  klheadit- 
lton  ol  ime  lhaUi  phckig  op- 


boiB  diel  wffi  lat  companies  pay 
InaollMnlcanaesiipImtd- 
tarlhayslailualngCsappIca- 
bans  or  whan  an  agraadiipon 
amrasil  ol  work  k  cnmpletKl 

JeRPoolkianlorstoapmai- 
dsnt  of  meweman  sPkleg,  al 
Akboe.  aaU  Ihs  akcnll  mahar  k 
akkadybanaWngkcmlhsha- 
Uspikdng  and  other  changaa 
alB 

lAk'ak  been  waking  wMie 
PMrlii  peel  Imyan  and 
puhlng  them  psktr  hard  to  do 
Wngk*  ha  old  Hk  woM  Mi 
onfaodisidaB.- 

-UtKiSavU 
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Vendors  Need  to  Rnd  New  Ways 
To  Work  With  Users,  Zander  Says 

Former  Sun  exec 
remains  ‘bullish’ 
about  IT  industr\’ 


■Y  MANVFRAN  JOHNSON 

Ed  Zander,  fbnner president  and 
cMef  t^>erating  officer  at  Sun 
Micrwystems  /nc^  last  Mfeek 
said  he  will  become  a  manag' 
ing  director  at  Silver  Lake  Part¬ 
ners,  a  Menlo  Park.  Calif.- 
based  investment  firm.  Earlier 
this  month.  Zander  spoke  with 
Compuierworid  obtwr  the  IT 
industry  and  his  time  at  Sun. 
which  he  last  /uly. 

How  can  todinelogy  vandors  dig 

HwwiuHm  out  oitts  maea 
tlwf'ra  in  fimv?  We  as  an  indus* 


try  have  to  demonstrate  to  IT 
professionals  and  CIOs  what 
we're  going  to  do  for  them  to 
reduce  their  IT  costs.  There's 
a  significant  backlog  of  appli* 
cations,  but  budgets  are  frozen 
or  reduced,  and  people  are 
stuck  with  an  IT  infrastruc¬ 
ture  that's  way  too  expensive. 

When  you  get  back  to  the 
business  side  of  the 
house,  they're  all  tired 
of  bearii^  about  all 
this  technology.  The 
company  that  gives 
them  an  IT  advantage 
to  design  cars  more 
quickly  or  reduce  sup¬ 
ply  chain  costs,  that's 
what  matters.  They're 
not  interested  in  hear¬ 


ing  about  48-way  servers. 


What  was  really  bahind  your  dscl- 
akm  to  loave  Sun?  With  the 
Na  2  position,  you  do  those 
jobs  for  three  or  four  years, 
and  then  you  either  get  the 
CEO  job  —  like  Sanjay  Kumar 
at  CA  —  or  you  exit.  Some¬ 
times  on  good  terms,  some¬ 
times  not.  With  me.  it 
was  friendly.  Scott 
(McNealy)  wants  to 
run  the  company  for 
another  10  years.  But  if 
you  do  the  president’s 
job.  eventually  you 
want  to  make  the  CEO 
decisions.  You’re  so 
close  to  that  ofTice.  and 
you're  running  the 


company  from  day  to  day,  but 
the  CEO  still  gets  to  make  the 
big  strategy  calls. 

What  do  you  tfiMt  were  (tw  best 
decbiona  you  made  at  Sun?  One 
of  my  best  was  branding  So¬ 
laris,  which  was  very  contro¬ 
versial  inside  Sun  at  the  time. 
That  was  a  first  in  the  main- 
stream  computer  market,  tak¬ 
ing  an  OS  and  making  it  a 
brand.  It  basically  made  So¬ 
laris  what  it  is  today.  Another 
great  decision  was  around  the 
whole  Internet  and  dot-com 
era.  seizing  that  opportunity 
and  driving  the  company 
around  it.  We  were  the  “dot” 
in  “dot-com.”  and  any  new 
start-up  was  using  Sun. 

Whet  were  your  worst  decisions? 
In  1992,  we  introduced  a  ver¬ 
sion  of  Solaris  that  was  not 
ready  for  prime  time.  I  rushed 
it  to  market  too  soon,  and  that 


was  a  disaster.  More  recently.  I 
think  we  didn't  push  enough 
on  the  whole  Linux  question. 
We  should  have  done  more  to 
understand  how  to  embrace  it 
within  [Sun’s]  strategy,  to 
“own”  that  whole  developer 
community.  The  third  thing 
was  not  moving  to  (downsize] 
the  company  properly  once 
the  market  started  coining 
apart  in  the  fail  of 2000. 

What  do  you  think  the  next  big 
tWfig  in  IT  wM  be?  There’s  no 
big  "next  thing”  on  the  hori¬ 
zon.  There’s  nothing  like  the 
Net  or  PCs  coming  in  the  near 
future.  It’s  going  to  be  more 
about  rationalization,  consoli¬ 
dation  and  making  sense  of 
what  people  already  have.  But 
my  long-term  outlook  is  still 
very  bullish.  People  say  the  in¬ 
dustry  is  maturing,  but  I  tend 
to  argue  that  it’s  not,  because 
innovation  is  still  happening.  I 
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mission  is  investigating  its  ac- 
counting  practices. 

Blake  Kresl  manager  of 
technolt^  at  Southwest  Air¬ 
lines  Co.  in  Dallas,  said  busi¬ 
ness  executives  at  the  airline 
have  taken  note  of  the  unan¬ 
swered  questions  about  i2’s  fi¬ 
nances.  Because  i2  and  South¬ 
west  are  based  in  the  same 
city,  the  vendor  is  “constantly 
in  the  morning  news,"  he  said. 
"So  whenever  a  story  hits, 
we're  asked  about  what’s  go¬ 
ing  on.  Obviously,  being  so 
public,  it’s  a  concera” 

But.  Kresl  added,  be  remains 
confideDt  that,  “io  one  form  or 
another,  the  applications  we 
want  win  keep  going." 

‘%>rtainly.  there  is  a  con¬ 
cern  ^xnit  thb  delisting  and 
the  financial  problems,”  said 
Geor^  McAfee,  supply  chain 
project  manager  at  Cooper 
Tire  8t  Rubber  Co,,  a  Findlay. 
Ohio-based  manufacturer  that 
runs  i2'$  production  schedul- 
and  transportation  man¬ 
agement  software.  “We've  put 
a  lot  of  money  on  the  line  and 
have  hi^  expectations  from 
[our  senior]  executives." 

But  McAfee  said  i2's  prob¬ 


lems  won't  stop  him  from  buy¬ 
ing  more  of  the  company’s 
software.  And  like  other  users 
at  the  conference,  he  said  he 
has  seen  a  positive  change  in 
the  way  i2  operates  since  it 
overhauled  its  senior  manage¬ 
ment  in  April  2002. 

Before  the  reorganization, 
McAfee  said.  i2's  leadership 
was  “more  focused  on  grow¬ 
ing  the  business  at  all  costs 
and  trying  to  sell  the  software 
to  everyone  in  the  world,  in¬ 
stead  of  nurturing  the  existing 
client  base.  I  think  the  mission 
was  very  shallow,  and  that’s 
why  it  foiled.” 

Kresl  also  said  i2'$  attitude 
toward  users  has  improved. 
"There  was  a  little  bit  of  hu¬ 
bris  [before],"  be  said,  adding 
that  i2  is  easier  to  work  with 
now  and  is  more  willing  to 
acknowledge  and  address 
shortcomings  or  bugs  in  its 
applications. 

They’re  not  looking  at  sell¬ 
ing  back  into  the  company,  but 
at  making  a  success  out  of 
what  they’ve  already  sold  us." 
Kresl  said.  Southwest  uses  i2's 
pans  management  and  de¬ 
mand-planning  software. 

The  last  year  has  been  a 
challenge  for  i2,”  said  Janet 
Eden-Harris.  i2’s  chief  market¬ 
ing  officer,  during  a  speech. 


“But  it's  a  stronger  company 
than  it  has  been  for  the  last 
several  years."  she  added,  re¬ 
ferring  to  the  management 
changes  as  well  as  downsizing 
moves,  new  product  rollouts 
and  improving  customer-satis¬ 
faction  rates  on  i2’s  surveys. 

Even  so.  the  combination  of 
the  SEC  investigation,  the  re- 
audit  and  the  stock  delisting 
continues  to  weigh  on  12. 

Some  users  said  the  reaudit 
process,  which  is  due  to  be 
completed  next  month  and  is  1 


expected  to  lead  to  a  restate¬ 
ment  of  i2's  financial  results 
for  several  years,  will  be  a  key 
milestone  for  the  vendor. 

“We  watch  our  critical  trust¬ 
ed  suppliers  very  carefully, 
and  at  present,  this  is  not  sat¬ 
isfactory  for  anyone,"  said  Jeff 
Poole,  senior  vice  president  of 
procurement  strategy  at  Air¬ 
bus  SAS,  a  Toulouse.  France- 
based  aircraft  maker.  “We'll 
wait  and  see  what  happens 
when  the  [reaudit]  report  is  is¬ 
sued  —  not  that  anyone  Is  par¬ 


ticularly  expectii^  any  diffi¬ 
culties  around  that" 

J.B.  Hoyt,  supply  chain 
project  director  at  Whirlpool 
Corp.  in  Benton  Harbor. 

Mich.,  said  via  e-mail  that 
i2's  management  has  said  the 
reaudit  should  have  a  "benign" 
affect  on  the  vendor.  If  the 
conclusion  of  the  process  "is 
negative,  then  we  will  all 
have  to  assess  the  outcome  at 
that  time,”  said  Hoyt,  who 
didn't  attend  last  week’s  con¬ 
ference.  I 


I  AM  A  CISCO 
CATALYST  6500. 


■ 


I  AM  A  SNARLING 
PACK  OF 
DOBERMANS. 

I  AM  INTEGRATED  SECURITY.  I  HAVE  THE  POWER  TO  PROTECT  YOUR 
NETWORK  FROM  THE  INSIDE,  THE  OUTSIDE  AND  FROM  EVERYWHERE 
IN  BETWEEN.  I  ALWAYS  KNOW  WHO  IS  ON  THE  GUEST  LIST  AND 
HAVE  THE  POWER  TO  DENYTHOSE  WHO  ARENT  ON  IT.  I  SNIFF  OUT 
THREATS  SO  YOU  CAN  STAY  PRODUCTIVE.  I  AM  MORE  THAN  A 
CISCO  CATALYST  6500. 
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Ariba  Upgrades  Corporate  Spending  Apps  and  are  all  due  to  be  available 

next  month. 

■V  MATT  HAMBLEN  with  a  focus  on  helping  com-  gal  help,  mariteting  and  IT  Martin  Boyd,  director  of 

Ariba  Inc.  last  week  unveiled  panies  better  monitor  expens-  consulting.  maiicetii^  at  Ariba,  said  the 

upgrades  to  eight  of  its  spend-  es  for  corporate  services  rang-  The  new  releases  were  an-  Sunnyvale,  Calif.-based  com¬ 
ing  management  applications,  ing  from  snow  removal  to  le-  nounced  at  Ariba’s  user  con-  pany  is  adding  functionality 


designed  to  support  services 
that  typically  account  for  one- 
third  to  one-half  of  all  expen¬ 
ditures  within  companies. 

The  upgraded  software  can 
manage  spendii^  in  a  total  of 
16  cat^ories,  including  travel, 
utilities,  insurance  and  health 
benefits,  Boyd  said.  It  can  also 
be  used  to  track  staffing  costs, 
such  as  exp>enses  for  tempo¬ 
rary  workers  and  the  use  of  re¬ 
cruiters,  he  added. 

Earlier  this  month,  con¬ 
sumer  electronics  retailer  Best 
Buy  Ca  announced  that  it’s 
expandii^  a  deployment  of 
Ariba’s  products  and  said  it 
wants  to  use  the  software  to 
automate  more  of  the  process 
of  managing  contract-^ven 
corporate  services. 

A  Best  Buy  qrakeswoman 
said  the  Eden  Prairie,  Minn.- 
based  retailer  has  been  an  Ari¬ 
ba  customer  since  late  2000. 
About  80,000  Best  Buy  em¬ 
ployees  use  the  vendor’s  pur¬ 
chasing  and  travel  expense 
management  tools.  As  part  of 
the  expansion  plan.  Best  Buy 
is  adding  Ariba’s  contracting 
and  invoicing  applications. 

The  retailer  has  already 
gained  efficiencies  in  procur¬ 
ing  some  services,  like  snow 
removal,  the  spokeswoman 
said.  Contractors  can  send 
electronic  invoices  to  Best 
Buy,  allowing  for  automatic 
reconciliation  and  settlement 
of  payments,  she  added. 

Ariba’s  rollout  includes  up¬ 
grades  of  its  purchasing,  con¬ 
tractu^  and  invoicing  applica¬ 
tions.  plus  revised  versions  of 
its  sourcing  and  spending 
analysis  products. 

The  'wow  &ctor'  is  that 
Ariba  b  putting  more  func¬ 
tionality  around  services,” 
said  Christa  Degnan.  an  ana¬ 
lyst  at  Aberdeen  Group  Inc. 
in  Boston.  ”If  a  company  has 
done  any  e-procurement,  this 
is  the  next  level” 

The  services  conqwnents 
are  "relatively  unique”  to  Ari¬ 
ba,  Degnan  said,  citii^  People- 
Soft  Inc.  in  Pleasanton,  Calif, 
as  its  closest  competitor. 
Smaller  companies  that  spe¬ 
cialize  in  spending  manage¬ 
ment  software  include  Flanee 
Inc.  in  Sunnyvale,  Calif,  Field- 
glass  Inc.  in  Chicago,  and  IQr 
Navigator  Inc.  in  Denver,  k 


Got  Outsourcing 
Questions? 

Computerworld’s  New  IT  Executive  Summit  Series  Has  the  Answers 


If  you're  an  IT  executive  in  an 
end-user  organization,  apply  to 
attend  Computenworld’s  upcoming 
compiimentary  half-day  summit  on 
IT  Outsourcing:  The  Offshore 
Alternative. 

Robust  global  communication 
technologies  and  state-of-the-art 
security  tools  have  made  IT  out¬ 
sourcing  an  Increasingly  viable 
option  to  achieve  ROI.  Part  of 
Computerworld’s  new  IT  Executive 
Summit  Series,  this  invitation-only, 
4-hour  summit  will  explore  how 
companies  are  realizing  tangible 
benefits  from  outsourcing  IT 
application  development, 
integration  and  management. 

Seating  is  iimited,  so  appiy 
todayl 


Chicago,  Illinois 

Thursday,  May  15,  2003,  8:00am  to  Noon 
Palmer  House  Hilton,  “Parlor  H” 

8:00am  to  8:45am  Registration  and  Networking  Bre^ast 


8:45am  to  9:00am 


9:00am  to  9:45am 


9:45am  to  10:15am 


10:15am  to  10:30am 
10:30am  to  11:30am 


Welcome  and  Opening  Keynote 
Outsourcing  Watch  2003: 

The  Best  of  Both  Shores 

Maryftan  Johnson.  Editor  in  Chief. 
Computerworfd 

Industry  Update 

Evaluating  Your  IT  Sourcing  Options 

Bart  Perkins.  Managing  Partner. 
Leverage  Partners 

Business  Case  Study 

James  Beattie.  EVP  and  CTO. 

CCC  Information  Services 

Refreshment  Break 

Outsourcing  Strategies 
Leadership  Strategies  in  Offshore 
Outsourcing 

Moderator:  Maryfran  Johnson. 

Editor  in  Chief.  Computerworfd 


11:30am  to  Noon 


a  Jerry  McEthatton.  Senior  EVP 
of  Global  Technology  and  Operations. 
MasterCard  Inteimatior^al 
e  Joe  Drouin.  VP  ar>d  CIO.  TRW  Auton>otive 
■  Tasos  Tsolakis.  VP  of  Global  Technology 
Operations.  Global  Exchange  Services 
a  James  Beattie.  EVP  and  CTO. 

CCC  Information  Services 

Open  Forum 


Tiuin  rtPldliis 


For  information,  call  Chris  Leger  at  508-820-8277 
or  to  register  online,  visit 
www.itexecutivesummit.com/outsourcing 
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MARYFRAN  JOHNSON 


Credibility  Challenged 


There  was  a  time  in  the  late  1990s  when 
the  common  workplace  refrain  was,  “Are 
we  having  fun  yet?”  I  don’t  quite  re¬ 
member  the  dot-com  context  (there’s  so 
much  of  that  period  I’ve  blotted  out),  but 
the  gist  of  it  was  about  wondering  when  all  the  in¬ 
sanely  long  hours  and  maniacal  workaholism  were 
going  to  pay  off.  For  the  most  part,  they  never  did. 


Today  the  question  - 

(oo  longer  even  remote^ 
ly  amusing)  would  prob> 
ably  be:  "Are  we  credible 
yet?"  On  a  personal  lev* 
el.  most  IT  executives 
and  managers  would 
probably  answer  in  the 
affinnative.  When  we 
surveyed  144  senior  IT 
managers  at  Computer- 
world’s  Premier  100  IT 
Leaders  Conference  a  I 
few  months  ago,  only 
20%  of  them  said  they  thought  IT 
had  image  problems  "in  my  compa¬ 
ny."  But  45%  identiHed  a  tack  of 
credibility  for  IT  “in  general." 

Those  image  problems  stem  from 
well-known  complaints  about  IT  de¬ 
partments  being  too  slow,  too  ex¬ 
pensive  and  too  geeky  to  communi-  ; 
cate  the  business  value  of  what 
they’re  doing.  So.  on  a  profession¬ 
wide  basis,  IT  is  lugging  around  a 
lot  of  baggie,  as  our  Cover  Story 
last  week  pointed  out  in  detail  [“Tar¬ 
nished  Image,"  Quicklink  38043). 
There’s  a  lingering  resentment  at 
many  companies  about  technology 
dollars  gone  down  the  drain.  The 
evidence  includes  chronic  IT  budget 
overruns,  fizzled  projects,  over¬ 
priced  Y2k  fixes,  deflated  dot-com 
dreams  (remember  B2B  exchanges?) 
and  the  billions  spent  oo  complex 
enterprise  software  installations  that 
didn’t  quite  live  up  to  their  billing  — 
and  probably  never  will  All  of 
which  puts  your  IT  operation  at 
greater  risk  of  an  unwelcome  visit 
firom  the  outsourcers. 

Unfortunately,  things  have  gotten 
worse  in  the  past  few  years,  llie 


Hackett  Group  can  prove 
it  with  performance 
benchmarks  from  some 
2,000  of  the  nation’s  top 
companies.  At  average¬ 
performing  companies, 
the  IT  project  completion 
rate  was  67%  last  year  — 
down  from  72%  in  1999. 
Even  worse,  completion 
of  short-term  projects 
(those  that  are  supposed 
to  take  less  than  a  year) 
slipped  from  58%  in  ’99  to 
51%  last  year. 

What  hurt.s  about  statistics  like 
these  is  the  way  they  paint  the 
whole  profession  with  the  same 
sticky  brush.  That's  unfair  to  compa¬ 
nies  like  Hilton  Hotels,  where  Cor¬ 
porate  Systems  Vice  President 
Damien  Bean  can  prove  how  IT  is 
run  like  a  business  with  a  bonom- 
line  focus.  “The  entire  IT  budget  — 


every  last  cent  —  is  funded  out  of 
the  business  side,  and  we  charge 
back.  We  absolutely  hit  our  bud¬ 
gets."  he  says,  adding  that  “I  don’t 
think  IT  executives  are  suffering  a 
credibility  gap  more  than  any  other 
senior  function." 

Maybe  so.  But  since  the  budget 
money  for  those  future  IT  projects 
remains  firmly  in  the  hands  of  the 
CFOs  and  CEOs,  any  argtiment  over 
who’s  lost  more  credibility  is  likely 
to  end  in  a  Pyrrhic  victory. 

There  are  winning  strategies  in 
this  image  makeover  challenge.  j 
however. 

At  the  companies  where  IT  has 
turned  its  reputation  back  into  gold, 
the  three  best  practices  have  been  to 
involve  the  business  units  more  in 
planning  and  decision-making,  pri¬ 
oritize  projects  more  effectively  and 
boost  communication  with  the  CEO 
and  other  senior  executives.  Sounds 
rather  common-sensicai  and  famil¬ 
iar,  doesn’t  it?  At  other  places,  IT 
groups  are  creating  marketing  pro¬ 
grams  to  call  attention  to  their  ser¬ 
vices.  They’re  surveying  internal 
and  external  customers  for  feedback 
and  suggestions.  And  they’re  keep¬ 
ing  it  real  with  users  by  managing 
expectations  and  being  honest  about 
project  delays. 

So.  are  you  credible  yet?  > 


PIMM  FOX 

The  Art 
OfERP 
Done  Right 

Trying  to  justify 

spending  1%  to  3%  of 
your  company’s  annual 
revenue  on  ERP  software  is 
always  going  to  be  more  art 
than  science.  This  is  mainly  because 
the  reasons  for  moving  ahead  with  an 
ERP  project  have  included  the  essen¬ 
tial  but  difficuit-to-quantify  replace¬ 
ment  of  legacy  systems  along  with  the 
equally  slippery  goal  of  improving 
productivity  and  system  reliability. 

But  when  the  CFO  tells  you  to  gauge 
the  effect  of  ERP.  you’ve  got  to  come 
up  with  coherent  metrics  that  are  less 
artful  and  more  concrete. 

A  new  study  by  Meta  Group  might 
help.  Meta  says  each 
company  must  in¬ 
clude  in  its  metrics 
its  unique  business, 
geographic  and  envi¬ 
ronmental  context. 

As  such,  corporate 
location  and  revenue, 
the  size  of  the  user 
population  and  the 
actual  ERP  process 
must  become  part  of 
your  cost  analysis. 

The  report  conclud¬ 
ed  that  “total-cost-of-ownership  met¬ 
rics  can  be  misleading  when  they  are 
based  on  industrywide  averages." 

After  surveying  the  work  of  six  lead¬ 
ing  ERP  vendors  —  J.D.  Edwards,  Law- 
son,  Oracle.  PeopleSoft,  and  SAP 
—  for  200  user  companies  in  12  indus¬ 
tries.  the  results  showed  that  ERP  in¬ 
vestments  were  made  over  three  to 
five  years.  On  average.  25%  of  the  cost 
was  spent  on  software,  40%  on  profes¬ 
sional  services  and  25%  on  internal 
staff.  Implementation  time  for  these 
projects  was  approximately  20  months. 
Another  seven  months  were  needed 
before  the  benefits  showed  up.  Calcu¬ 
lating  your  TCO  shouldn’t  stop  when 
the  project  goes  live.  Also,  include  the 
first  two  years  of  operation. 

Of  course,  part  of  your  analysis 
needs  to  incorporate  the  structural 
changes  you  made  to  accommodate 
the  ERP  project  Indeed,  the  Meta  re¬ 
port  found  that  although  smaller  com¬ 
panies  spend  more  as  a  percentage  of 
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Blended  Threats 


Security  Breach 


Concerns  over  network  security  got  you  down? 

We  otter  more  than  20.000  security  prodijcts  trom  300  of  the  must 
trusted  narttes  in  the  business.  Our  knnwtedqeable  customer  service  representatives 
.md  product  specialists  will  giiidr;  you  iii  selecting,  acguirmg  and  maiiaqing  the  best 
o'l.iirity  option  for  your  needs 

t'e.tr.e  of  mind  is  closer  than  you  think 


Call  Sof!(,tioi(,e  today  at  1.877.967.3737, 
III  viMt  ti'  .it  www.sof1choice.com 


softchoice 


How  to  Buy 

Online 

Use  Softchoice  SAM  lo  track  orders,  create  quotes,  and  get  instant  reports  • 
your  purchasing  history.  Buy  from  the  convenience  of  your  own  desktop  24  hnuf> 
a  day,  7  days  a  week.  SAM  makes  managir»g  and  purchasing  your  software  .inn 
hardware  simple 

By  phone  or  fax 

Call  us  Monday  to  Friday,  SAM  to  9PM  (EST;  :ri  sptMx  witl,  .m  -  xiJcncnf.Ha 
mamber  of  our  team  We  promise  a  live  knowledgeable  voice  every  Iniu; 
No  voice  mail,  or  automated  phone  trees  jusl  the  nnswfrrs  you  need  wiien  you 
need  them.  Prefer  to  fax  m  your  orders’’  Our  fax  line  <  1  800  288  7f)14i  !•.  ;;pr;n  24 
hours  a  day' 

Fast  delivery 

Your  order  can  be  shipped  via-  Next  business  day.  within  three  business  days  or 
regular  ground.  Freight  cost  is  determined  based  on  zone,  weight,  cube  and 
level  of  service. 

Sales;  1.877.%7.3737 
Fax;  1,800.268.7639 

E-mail:  sates@sottctioice.com 
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While  every  effort  has  Cieen  made  to  compile  this  insert  as  completely 
and  accurately  as  possible,  there  may  be  some  typagraohical  mistakes 
and  errors  in  the  content.  Soffchoice  has  not  verified  the  accuracy  o< 
the  intormation  provided  by  the  developers  and  publishers  The 
information  in  this  insert  is  subiect  to  change  without  notice.  Soffcfwce 
shall  have  neither  responsibility  to  any  person  or  entity  with  respect  to 
loss  or  damage  caused  or  alleged  to  be  caused  by  information 
contained  in  or  absent  from  this  insert.  Products  mentioned  m  this 
insert  are  trademarks  or  registered  trademarks  of  thee  respective 
companies.  We  haw  made  every  effort  to  present  the  product  rtarws 
preersefy  as  $uQpf«d  by  the  holders  of  the  trademarks:  however  we 
cannot  guarantee  complete  accuracy  of  spefimg  or  capitafizKwn.  No 
part  of  the  publication  may  be  reproduced  by  any  means  without  the 
OTitten  permission  of  the  Softchoce  Corporation.  Printed  m  Canada. 
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Advanced  protection  for  large  and  mid-size  enterprises.  New  threats  can  blow  through  firewall  or  antivirus 
software.  That's  why  Internet  Security  Systems  delivers  an  advanced  protection  platform  that  safeguards 
networks,  servers,  and  desktops  from  even  the  most  sophisticated  attacks. 


Intrusion  Protection  Products: 

Fast,  accurate,  powerful  intrusion  protection  that 

keeps  out  the  attackers,  worms  and  complex  threats 

that  firewalls  and  antivirus  cannot  detect. 

•  RealSecure®  Network  Sensor  -  Protection  for  fully  utilized 
10Mbps,  100Mbps  half  and  full  duplex  networks. 

•  RealSecure®  Gigabit  Network  Sensor  -  Protection  for 
high-speed  1  Gbps  networks. 

•  RealSecure®  Desktop  Protector  -  Protection  for  fixed, 
remote  and  mobile  PCs  or  desktops. 

•  RealSecure®  Server  Sensor  -  Protection  for  all  critical 
enterprise  servers. 


Audit  and  Assessment  Products: 

A  unique  suite  of  tools  that  allow  you  to  easily  identify 
and  patch  critical  vulnerabilities  at  every  layer  of  your 
network. 

•  Internet  Scanner®  -  Vulnerability  detection  for  networks. 

•  System  Scanner™  •  Vulnerability  detections  for  servers. 

•  Database  Scanner®  -  Vulnerability  detection  for 
leading  database  applications,  such  as  Microsoft 
SQL,  Oracle,  and  Sybase. 

•  Wireless  Scanner^  -  Vulnerability  detection  for  netwwks 
utilizing  802. 1  lb  WLAN  (Wi-Fi)  access  points  and  clients. 


Dynamic  Threat  Protection^”.  Internet  Security  Systems'  intrusion  protection  and  audit/assessment  products 
work  seamlessly  together  under  a  common  management  console,  RealSecure®  SiteProtector"*,  to  allow  real-time, 
automatic  correlation  of  vulnerability  data  and  identified  intrusions.  This  quick  analysis  capability  saves  time  and 
money  by  prioritizing  security  events  and  focusing  resources  on  the  most  critical  vulnerabilities  and  attacks. 

Call  your  Softchoice  Sales  Representative  at  1.877.967.3737  today  for  pricing! 


www.softchoice.com 
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Connected  to 
the  Internet? 


Connect  securely  with  McAfee  Security. 

With  losses  of  over  $13.2  billion  dollars  last  year,  businesses  can't  afford  to  leave  their  networks 
unprotected.  Since  87%  of  security  breaches  enter  through  email,  the  best  defense  is  to  block  those  virus 
threats  right  at  the  Internet  gateway  -  never  letting  them  enter  in  the  first  place. 

McAfee*  Security's  WebShreld*  e250.  WebShield*  eSOO  and  WebShleld*  elOOO  appliances  are  the  most 
competitively  priced  gateway  defense  solutions  available  -  perfect  for  businesses  with  limited  budgets. 
Combining  award-winning  antivirus  and  content  management  software  with  enhanced  hardware. 
WebShield  appliances  provide  industrial-strength  security  that's  easy  to  install,  use  and  manage.  With  a 
single  appliance,  businesses  of  every  size  have  a  cost-effective  way  to  manage  data. 

The  WebShield  e250  is  designed  for  the  needs  of  small  to  mid-sized  businesses,  while  the  robust 
WebShield  eSOO  is  suitable  for  even  the  largest  company.  The  WebShield*  etOOO  is  perfect  for  the 
enterprise  as  it  offers  approximately  twice  the  performance  of  an  eSOO.  and  the  ability  to  support  a  greater 
number  of  concurrent  users.  Bottom-line;  McAfee  Security  provides  effective  email  scanning  at  the  best 
price  available. 


E19218  MCAFEE  WEBSHIELD  E250  APPLIANCE.... 
B36652  MCAFEE  WEBSHIELD  £500  APPLIANCE  ... 
El  1920  MCAFEE  WEBSHIELD  ElOOO  APPLIANCE.. 


....$2,403.00 
..$10,786.00 
..$17, 300.x 


Enter  to  win  a  Microsoft  Xbox.  Just  reference  the  product  code  when  you  cal 


!  prohibited.  US  end  Cenedian  Fcderi 


contest. 


softchoice 


1.877  967.3737 


Enhanced  Security  and  Reliability  on  the  Desktop 


Hoffice^p 


IVisio 


Find  out  how  you  can  move  your  company  forward  with  the  most  reliable  and  secure  Microsoft*  desktop. 
By  upgrading  to  Microsoft  Windows*  XP  Professional,  Office  XP  Professional,  and  Visio*  2002,  you  can  take  a 
proactive  step  toward  making  your  organization  more  productive  and  dependable.  These  applications  help 
defend  against  threats  such  as  security  breaches  and  computer  viruses,  reducing  distractions  and  keeping 
downtime  to  a  minimum.  The  Microsoft  desktop  provides  you  with  a  competitive  edge,  peace  of  mind,  and  the 
freedom  to  focus  on  customer  needs. 

The  Microsoft  desktop  delivers  a  solid  foundation  that  will  enable  your  business  to: 

•  Maintain  Momentum;  Windows  XP  Professional  is  at  least  10  times  more  reliable  and  starts  up  27  percent 
faster  than  Windows  98  SE 

•  Help  Protect  Data  Integrity;  In  Windows  XP  Professional  Encrypted  File  System,  entire  folders  and  files  can 
be  easily  encrypted,  whether  you're  working  on  a  network,  over  the  Internet,  or  offline 

Microsoft  Windows  XP  Professional,  Office  XP  Professional  and  Visio  2002  are  easy  to  deploy,  manage,  and 
use,  enabling  better  business  processes  with  lower  maintenance  costs  and  improved  productivity. 

To  find  out  which  licensing  plan  best  fits  your  organization,  call  your  Softchoice  representative. 


993131  MICROSOFT  WINDOWS  XP  PROFESSIONAL  EDITION  CD  ROM . 

993133  MICROSOFT  WINDOWS  XP  PROFESSIONAL  EDITION  UPGRADE  CD  ROM  .. 

939401  MICROSOFT  OFFICE  XP  PROFESSIONAL  98/NT/2Krt*IE«P  CD  ROM . 

939441  MICROSOFT  VISIO  2002  STANDARD  EDITION  CO  ROM . 


There  are  additional  licensing  programs  available  that  may  provide  a  deeper  discount.  Call  now  to  find  out  more! 

e  2003  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  Vis>o  and  Windoars  are  either  registered  trademaru  or  trademarks  of  Microsoft  Corporalron  in  the  United  States 
and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  oivners. 


www.softchoice.com 


eihjst  Antivirus 

eTrust™  Antivirus  provides  enterprise-class  protection  against  virtually  all 
forms  of  costly  virus  attacks  -  from  the  PDA  to  the  gateway.  It  reduces  virus 
Infections,  simplifies  and  automates  updating,  eases  administration,  'locks 
down'  security  policies  at  the  desktop,  provides  FREE  signature  updates, 
and  identifies  and  isolates  malicious  code  before  it  enters  your  network. 
Additionally,  its  dual  virus-scanning  engines  deliver  double  the  protection  for 
the  price  of  one.  Certified  by  ICSA  Labs  for  detecting  and  curing  100%  of 
'in-the-wild'  viruses  and  backed  by  eTrust”*  TARGET  (Threat  and  Analysis 
Response  Global  Emergency  Team),  eTrust  Antivirus  is  the  perfect  choice  for 
complete  virus  protection. 


Computer  Associates* 


E21967  ETRUST  ANTIVIRUS  05  USER  WITH  lYR  MAINTENANCE... 


Webll'ends  Firewall  Suite 

WebTrends  Firewall  Suite  from  NetlQ  provides  in-depth  analysis  of  incoming  and 
outgoing  activity  through  a  company’s  firewall,  VPN  or  proxy  server.  This  product 
enables  network  and  firewall  administrators  to  move  beyond  reactive  operations 
management  to  proactive  network  management,  eliminating  issues  and  risks  before 
they  arise. 

WeblVends  Log  Analyzer  Series 


WebTrends  Log  Analyzer  Series  from  NetlQ  offers  small  businesses  with  a  single 
server  or  growing  businesses  with  multi-server  web  sites  fast  and  easy  to  use  web 
traffic  reporting.  The  most  robust  entry-level,  multi-platform  reporting  tool 
available,  WebTrends  provides  path  analysis,  search  engine  analysis,  geographic 
data  and  support  for  all  standard  Ic^  file  formats. 


D42672  WEBTRENDS  FIREWALL  SUITE  UC  01  FIREWALL  TIER  1 . $2,504.00 

E44285  WEBTRENDS  LOG  ANALYZER  CD  ROM . $428.00 


Work  Smarter. 


<  I 


'inB  BBBunvj  ui  ^bli^ 


Help  Protect 

Your  Business 
on  the  |Sj0t 


Microsoft* Internet  Security  &  Acceieration  (iSA)  Server  2000  integrates  an  extensible,  multi-layer, 
enterprise-class  firewall  optimized  for  application-layer  filtering  and  with  a  robust,  high-performance 
Web  cache. 

ISA  Server  can  be  added  to  any  network  to: 

•  Deliver  enhanced  security  beyond  that  of  traditional  firewalls  through  application-layer  filtering, 
which  helps  safeguard  your  network  from  hackers  and  malicious  worms 

•  Provide  remote  access  and  site-to-site  virtual  private  networking  (VPN)  functionality 

•  Integrate  security  with  a  high  performance  caching  and  Internet  access  control  solution  that  is 
easy  to  deploy  and  manage 


'  Increase  the  security  of  Exchange  Server  and  Internet  Information  Services  (IIS)  deployments 
using  Feature  Pack  1 


Building  on  Microsoft  Windows*  2000  Server  security  and  directory  features,  ISA  Server  runs  on  a 
Server  2(X)3  or  Windows  2(X)0  Server  or  Windows  Advanced  Server;  however,  it  can  also  be  run  in 
a  Windows  2(XX)-only  domain,  Microsoft  Windows  MT*  Server  domain,  mixed  Windows  Server 
domain,  or  heterogeneous  OS  environment. 

ISA  Server  is  certified  by  the  International  Computer  Security  Association  (ICSA),  and  is  available 
in  Standard  Edition  or  Enterprise  Edition.  Both  have  the  same  rich  feature  set,  but  while  Standard 
Edition  is  a  stand-alone  server  supporting  a  maximum  of  four  processors,  ISA  Server  Enterpriso 
Edition  is  appropriate  for  large-scale  deployments,  server  array  support,  multi-level  policy,  and 
computer  systems  with  more  than  four  processors. 

For  more  information  on  how  you  can  achieve  stable,  fast,  and  manageable  Internet  connectivity 
with  the  Microsoft*  ISA  Server,  contact  your  Softchoice  representative. 


83825$  MiCROSOFT  ISA  2000  SERVER  1  PROCESSOR  CO  ROM  .. 


920486  MlCROSOn  iSA  2000  SERVER  ENTERPRISE  EOITION  1  PROCESSOR  CD  ROM 

O  2003  Microsoft  Corporation.  All  rigfits  reserved.  Microsoft.  Windows,  and 


...$1,471.00 
..  $5,920.m 


indows  NT  are  eittier  registered  trademarks  or  trademarks  of  Microsoft  Corporatior 


www.softchoice.com 


BROWSER  I  security  edition 


ib’SnnD\ug'j  Bimiunnibnl 


Microsoft’s 
Most  Reliable, 
Manageable,  Scalable 

Server  Platform 


Windows  Server 2003 


Microsoft*  Windows*  Server  2003  offers  a  reliable,  affordable  application  server  operating  system 
for  connecting  businesses  with  employees,  partners,  and  customers.  Featuring  advanced  security 
technology,  increased  performance,  and  improved  reliability,  Windovw  Server  2003  is  the  most 
productive  and  versatile  Microsoft  platform  for  powering  applications,  networks,  and  Web  services. 

Microsoft*  Windows*  Server  2003  helps  organizations  react  to  business  volatility  with  advanced 
flexibility  and  scalability.  It  includes: 

•  File  sharing  to  help  improve  workers'  productivity 

•  Internet-ready  capabilities  to  make  the  most  of  online  opportunities 

•  Improved  security  technolc^  and  data  recovery  to  increase  your  company's  stability 

•  Easy-to-use  centralized  administration  tools  that  allow  you  to  attend  to  other  mission-critical 
activities  and  increase  productivity 

Let  this  multi-purpose  network  operating  system  help  grow  and  adapt  your  business, 
increase  customer  satisfaction,  and  reduce  costs.  To  find  out  which  licensing  plan  best  fits 
your  organization,  call  your  Softchoice  representative. 


£30050  MICROSOFT  WINDOWS  2003  SERVER  STANDARD  ED  005  CLIENT  CD  ROM . $1,017.00 

£30027  MICROSOFT  WINDOlWS  2003  SERVER  ENTERPRISE  025  CLIENT  CD  ROM . $3,905.00  ^ 

Ihere  are  additional  licensing  programs  available  that  may  provide  a  deeper  discount 

«  united  States  and/or  other  countries  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respecirae  owners. 


Enttr  to  win  a  Microsoft  Xbox.  Just  reforonco  the  product  code  when  you  call. 

Void  where  prohibited.  US  and  Canadian  radaral  and  Provincial  Governmani  Agencies  eieluded  from  eenteei. 
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NatworksA-OK 

www.intefloci.com 


NetworksAOK 

Network  Security  plus  much  more! 

Five  solutions  in  one  easy-to-implement  appliance: 

•  An  intrusion  detection  system  practical  for 
those  unskilled,  as  well  as  skilled,  in  security 

•  A  comprehensive  network  management  system  for 
monitoring  devices  and  applications 

•  A  trouble  ticketing  system  integrated  with  automatic 
alerts  for  security  and/or  network  problems 

•  A  multiple-network  monitoring  capability  for  service 
providers  and  large  enterprises 

All  integrated  and  pre-installed  on  a  rack-mount 

server  that's  easy  to  use.. .at  a  price  any  one  of  these 

5  functions  sell  for  —  a  terrific  value! 

D86494  INTERLOCI  NETWORKSAOK  APPLIANCE. ..$3, 237.00 


Leoendary  Reliabihty' 


l)qbarT 

•✓SafCwBrB,  Inc. 


The  Authority  in  Secure 
Messaging  &  Conaboraoon 


APC  Smart-UPS 

Performance  power  protection  for  servers  and  networks. 

•  AVR  Boost  and  AVR  Trrni  automatic  voltage  relation 

•  FREE  PowerChute  software  for  advanced  power 
management 

•  Optional  SmartSlot  accessories  customize  functionality 

•  Network-g'ade  surge  suppression  and  lightning  protection 

C5S852  APC  SMART  1500VA  120V  UPS  8-OUTLETS . $530.00 


Sybari's  Antigen  for  Microsoft  Exchange 
Sybari's  Antigen  for  Exchange  delivers  a  preemptive  tine 
of  defense  from  e-mail  viruses,  worms  and  malicious 
code,  and  is  the  only  server-level  antivirus  solution 
that  delivers  advanced  file  and  content  filtering 
capabilities,  and  multiple  scan  engine  technologies 
for  both  Microsoft  Exchange  5.5  and  2000  in  a  single 
solution.  Antigen  provides  the  highly  specialized 
features  Exchange  administrators  need  to  protect  their 
mission  critical  messaging  environments. 

E48323  ANTIGEN  FOR  MS  EXCHANGE  UC  10-24  CD  ROM ....  $35.00 


www.softchoice.com 


Adobe  Acrobat  6.0  Professional 


The  Adobe  Acrobat  6.0  family  extends  the  value  of  the  Microsoft 
Office  investment  in  the  enterprise,  ensuring  reliable  and  secure 
business  document  exchange  and  review.  Using  the  Adobe 
Portable  Document  Format  (PDF),  documents  may  be  securely 
exchanged,  and  commented  upon  while  preserving  the  integrity 
of  the  source  document.  128-bit  encryption  enables  document 
authors  to  grant  permissions  which  control  access  to  reading, 
printing  and  editing  Adobe  PDF  documents. 

Furthermore,  the  Acrobat  6.0  family  uses  digital  signatures  to 
approve  and  authenticate  documents,  circumventing  the  issue 
of  document  tampering  after  approval.  An  intuitive  user 
interface  provides  authors  and  recipients  alike  with  easy  access 
to  the  Acrobat  6.0  security  features. 

•  The  Adobe*  Acrobat*  family  allows  business  and  creative  professionals  to  streamline  their  document 
processes  by  enabling  the  reliable  and  efficient  exchange  of  business-critical  documents  in  Adobe  Portable 
Document  Format  (PDF) 

•  Adobe  Acrobat  Elements  software,  available  only  through  licensing  with  a  1,000-seat  minimum  order,  offers 
basic  Adobe  PDF  file  creation  from  Microsoft  Office 

•  Acrobat  6.0  Standard  software  converts  any  paper  or  electronic  document  to  an  Adobe  PDF  file  and  offers 
intuitive  review  management  tools 

•  Adobe  Acrobat  6.0  Professional  software  offers  all  of  the  benefits  of  Acrobat  Standard  plus  forms  creation 
and  tools  that  enable  advanced  control  over  the  exchange  and  output  of  graphically  complex  documents 

Adobe  Systems  incorporated  is  a  demonstrated  leader  in  providing  solutions  for  secure  and  reliable 
electronic  document  exchange.  In  addition  to  providing  confidentiality  through  encryption,  Adobe 
has  embraced  digital  signatures  since  Acrobat  4.0  in  1999  to  provide  authenticity  and  integrity  to 
electronic  documents. 

This  provides  recipients  with  added  assurances  that  their  documents  really  did  originate  from  the  named 
source  and  have  not  been  maliciously  or  inadvertently  tampered  with  since  authoring.  While  providing 
these  security  features  for  years,  Adobe  has  also  maintained  an  intuitive  user  interface  for  authors  and 
recipients  to  easily  utilize  document  security. 


Call  your  Soflchoice  Sales  Representative  at  1.877.967.3737  today  for  pricing! 


Adobe 


Enter  to  win  a  Microsoft  Xbot.  lost  reterenco  ttio  product  code  when  you  cali 

_ ypitf  whtre  piohibiteO.  US  and  Caoadian  Fadaral  and  Prodincial  Govarnmani  Agtnciaa  ixcludad  Hent  conitst. 


Does  your  tape  backup  solution  leave  you  frustrated  because  it  is  slow 
’  or  doesn't  include  all  the  files  needed  for  a  reliable  restoration? 

PowerQuest  V2I  Protector”*  restores  Windows  2000  Servers  in  as  little  as  a  few 
minutes.  Using  PowerQuest's  V2i  technology,  create  precise,  real-time  backup  images 
without  bringing  servers  offline.  Integrate  V2i  Protector  ^ 
i  into  your  tape  backup  routine  today! 


||>  I  PowerQuest  V2i  Builder^**  is  a  storage  lifecycle  and  Active 

_  State  Management  solution  that  automates  OS 

deployments,  migrations,  software  distribution  and  PC  lifecycle  management  for 
enterprise  organizations.  V2i  Builder  extends  traditional  imaging  by  combining  Virtual 
Volume  Imaging  (V2i)  Technology  together  with  piain-English,  policy-based  Action 
Sets  to  automate  and  streamline  common  IT  tasks. 


E16213  V2I  PROTECTOR  CD  ROM.., 


..$625.00  (p00£  «  CATSOI^ 


Call  your  Softchoice  Sales  Representative  at  1.877.967.3737  for  V2i  Builder  2.0  pricing! 


VDtfTAS 
Backup  Exer 

9.0fofWin(>mSerm 


Your  last  line  of  defense  is  a  solid 
Backup  &  Restore  Solution! 

Protect  your  business  critical  data  with  VERITAS  Backup  Exec”*  9.0 
for  Windows  Servers  -  the  next  generation  backup  and  restore  solution  providing 
comprehensive,  cost  effective  protection  for  Microsoft  Windows  server 
environments.  A  web-based  administration  console  and  new  graphical  user 
interface  with  easy-to-use  wizards,  simplify  installation  and  enhance 
manageability.  High  performance  agents  and  options  deliver  flexibility  to  help 
protect  data  quickly  and  reliably. 

Call  your  Softchoice  Sales  Representative  at  1.877.967.3737! 


E08339  BACKUP  EXEC  WINDOWS  SERVER  EDITION  CD  ROM . 

E09251  BACKUP  EXEC  WINDOWS  SERVER  EDITION  FAMILY  UPG  CD  ROM . 

E09722  BACKUP  EXEC  WINDOWS  EXCHANGE  SERVER  AGNT  W/CAL  CD  ROM . 

E09234  BACKUP  EXEC  WINDOWS  EXCHANGE  SERVER  AGNT  UPGRADE  CD  ROM  . 
.  B60144  BACKUP  EXEC  NETWARE  INTELLIGENT  DISASTER  CD  ROM . 


www.softcholce.com 


Securing  the  enterprise 


3B  software 


IBM*  Tivoli*  Access  Manager  for  Business  Integration  is  a  security  management  solution 
for  IBM  WebSphere  MQ  that  greatly  enhances  the  native  security  environment  of  WebSphere 
MQ.  It  upgrades  data  protection  to  provide  application-level,  data  protection  for  WebSphere 
MQ-based  applications,  including  those  already  deployed  •  without  the  need  to  modify  or 
change  them.  Application-level  data  security  is  critical  for  customers  using  WebSphere  MQ 
to  process  sensitive  data,  such  as  high  value  financial  transactions  human  resources  (HR) 
data,  medical  records,  or  any  other  type  of  Personally  Identifiable  Information.  It  also 
provides  central  management  of  security  policies  for  WebSphere  MQ,  including  message 
integrity  and  confidentiality,  audit,  and  queue  put-and-get  access  control  permissions  from 
a  Web-based  administration  tool. 

IBM*  Tivoli'  Intrusion  Manager  3.7.1  offers  a  centralized  security  console  to  monitor 
events  on  a  number  of  systems  and  quickly  respond  to  security  attacks.  By  integrating  with 
a  variety  of  sources  -  firewalls,  intrusion  detection  systems,  antivirus,  applications, 
scanners,  routers,  and  so  forth  -  and  combining  intrusion  detection  tools  and  a  DB2* 
database.  Intrusion  Manager  helps  secure  a  customer's  environment  and  brings  tc^ther 
data  collection,  analysis,  and  problem  resolution  into  a  single  rnonitoring  system.  Welt 
suited  for  the  medium  size  business.  Intrusion  Manager  is  a  security  management  solution 
that  allows  businesses  to  reduce  security  costs,  better  address  security  threats,  and  make 
more  informed  decisions. 


There  are  licensing  programs  available  for  IBM  Tivoli  Access  Manager  &  IBM  Tivoli  Intrusion  Manager. 
Call  your  Softchoice  Sales  Representative  at  1.877.967.3737! 


Enter  to  win  a  Microsoft  Xbox.  Just  reference  the  product  code  when  you  ca 

Void  »li«r«  prohibited.  US  and  Canadian  Federal  and  Provincial  Government  Agencies  excluded  from  conlesl. 
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Brother  HL  5040 


broths 


brother*  is  committed  to  providing  superior  and  reliable  business  tools  that  increase  productivity  and 
reduce  costs  as  businesses  attempt  to  meet  their  organizational  goals  and  challenges.  By  working 
closely  with  its  customers,  and  by  conducting  continual  market  research,  Brother  has  developed  a  wide 
range  of  sophisticated  and  innovative  technologies  that  result  in  products  providing  a  wealth  of 
features  and  benefits.  Brother's  range  of  products  includes  business  machines,  communications 
products,  and  labeling  and  identification  systems. 


E31664  BROTHER  MFC5200C  INKJET  COLOR  12PPM  MULT  2400  X  12000PI/8MB  PARA&USB . $322.00 

C86364  BROTHER  MFCBSOO  LASER  B&W  15PPM  MULTI  600X600DPI  SMB  USOC  RJllC . $419.00 

098929  BROTHER  INTELLIFAX  4750E  FAX  MACHINE  15PPM  8MB  203X98DPI . ^05.00 

£38836  BROTHER  HL-5040  B&W  17PPM  PRINTER  2400  X  600DPI/8MB  PARA&USB . Reg.  $299.00 

£38843  BROTHER  HL-5070N  B&W  17PPM  PRINTER  2400  X  600  DPI/16MB  PAR/USB/EN . $537.00 


Lexmark’s  New  Solution  Printers 

The  Lexmark  T420  laser  printer  is  an  easy-to-use  general-purpose  printer  that 
provides  optional  network  capability  and  a  space-saving  design.  Duplex  capability 
and  350-sheet  input  are  both  standard  features  on  this  low-profile  printer.  A  fast 
200  MHz  processor  and  16MB  of  memory  are  also  standard  on  the  base  model, 
providing  exceptional  print  performance  of  22  ppm  and  a  10-second  time  to  first 
page  at  1200  image  quality  resolution.  Optional  memory,  input  capacity  and  high- 
yield  print  cartridges  are  available.  Excellent  performance,  sturdy  product  design 
and  easy-to-use  cartridges  make  the  Lexmark  T420  an  excellent  choice  for  small 
businesses  or  workgroups. 

The  Lexmark  C912  wide-format  color  delivers  sharp  business  graphics  and 
professional  documents  at  28  ppm  color  and  black  on  various  media  types.  With  a 
600  MHz  processor,  a  finisher  option,  2400  Image  Quality,  automatic  color 
correction  and  high-capacity  paper  capability,  the  Lexmark  C912  can  handle 
complex  jobs  and  provide  superior  print  quality  for  high-volume  applications. 

Full  line  of  lasers,  Multi-Function,  inkjet.  All-ln-Ones  and  Dot  Matrix  available. 


£38708  LEXMARK  T420D  B&W  22PPM  PRINTER . $669.00 

Call  your  Softchoice  Sales  Representative  at  1.877.967.3737  today  for  pricing! 


Lexm^krk 


www.softchoice.com 


Considering  a  new  printer? 
Why  not  test-drive  an  Oki  Data 
model  for  30  days  -  FREE! 


When  it  comes  to  higher  productivity 
and  cost  efficiency,  Oki  Data  printers  are 
it.  But  why  take  our  word  for  it  when 
you  can  see  for  yourself?  Now  you  can 
evaluate  an  Oki  Data  printer  for  30 
days,  FREE.  Call  Softchoice  to  find 
out  how  you  can  arrange  to  receive  a 
free  trial  printer. 

Oki  Data  -  the  productivity  printers 
that  bring  cost-effective,  fast,  high- 
quality  color  or  black  and  white 
printing  in-house. 

OKI®  gives  you  stand-alone  and 
network  business  printing  without 
compromise.  Whether  you  need 
monochrome  or  stunning,  vibrant  full- 
color,  OKI  printers  deliver  clear,  sharp 
results  at  industry  leading  speeds. 
When  you  add  it  ail  up,  there’s  only  one 
clear  choice: 


a 


OKI,  The  Only  Color  For  You. 

Call  Softchoice  at  1.877.513.6962  to  find  out  how  you  can  arrange  to  By  an  Oki  Data  printer  in  your  office. 


D79759  OKIDATA  C7300N  COLOR  2(V24PPM  PRINTER  1200  X  600DPI/64MB  PARAIUSB . _....$2.0t  1.00 

D79838  OKIDATA  C9300N  COLOR  BOGTPPM  PRINTER  1200  X  6000PI/128MB  PARA/USB . $3,441.00 

El 2385  OKI  C5100N  COLOR  2(V12  PPM  PRINTER  1200X6000PI  32MB  USB . $964  00 

El  1020  OKIDATA  B4300  BSW  19PPM  PRINTER  1200  X  BOOOPlflMB  PARA4USB . 4417!oO 

E12400  OKIDATA  BB300N  45PPM  B4W  LASER  PRINTER  600  X  6000PI  32MB  10(100 . $2,176.00 

E37165  OKIDATA  B6100N  BSW  26PPM  PRINTER  1200X1200DPI/64MB  PARAJSB^NET . $940.00 
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Plug  and  protect 


It  sounds  incredibly  easy  because,  well,  it  is  incredibly  easy.  Symantec  Firewall/VPNs  and 
VelociRaptor''  security  appliances  let  you  quickly,  easily  and  affordably  install  the  enterprise- 
class  firewall  that's  right  for  you.  Our  Firewall/VPN  appliances  are  ideal  for  organiiations  with 
thirty  nodes  or  less.  They  allow  you  to  securely  connect  remote  offices,  business  partners  and 
corporate  networks,  and  can  be  up  and  running  within  an  hour.  For  companies  with  over  thirty 
nodes,  VelociRaptor  lets  you  establish  secure  connections  between  your  network  and  the  Net 
and.  again,  can  be  online  in  minutes.  Both  are  part  of  Symantec  Enterprise  Security,  a  com¬ 
plete  solution  that  integrates  world-class  technology,  comprehensive  service  and  global  response  to  help  your  business  run  securely  and  with 
confidence.  Want  a  simple  solution  to  a  complex  problem?  Call  1-877-967-3737  or  visit  www.softchoice.com/spotlight/symantecinfo  to  receive 
a  white  paper  "Understanding  firewalls:  secure  gatekeepers  for  your  business." 


softchoice  ^Symantec. 
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revenue  on  ERP.  the  proiects  were 
more  comprehensive. 

Evaluating  the  benefits  of  ERP  proj¬ 
ects  produced  a  top  10  list  of  intended 
accomplishments,  according  to  Meta: 
replace  outdated  software,  improve 
financials,  improve  analytics  and  deci¬ 
sion-making,  standardize  cross-plat- 
form  processes,  improve  IT  perfor¬ 
mance.  improve  cxistomer  service,  get 
a  single-system  view,  improve  pur¬ 
chasing.  improve  order  management 
and  reduce  personnel  costs.  Your  ERP 
wish  list  may  be  somewhat  different, 
but  it  should  be  substantiated  by  met¬ 
rics  as  well  as  testimonials  from  end 
users. 

Finally,  the  report  revealed  that  ERP 
vendor  marketing  efforts  appear  to  all 
be  for  naught  Companies  aren’t  par¬ 
ticularly  enamored  of  e-commerce  or 
supply  chain  wizardry.  Rather.  IT  man¬ 
agers  said  they  regard  long-term  part¬ 
ner  relationships  as  the  true  selection 
criterion,  not  features  and  funaions. 

And  relationships  are  definitely  an 
art.  not  a  science.  I 

DAN  GILLMOR 

Spam 
Control  Is 
Failing 

FEW  YEARS  AGO,  I 
wrote  that  in  the  un¬ 
fortunate  event  of  a 
global  holocaust,  the  only  sur¬ 
vivors  would  be  spammers 
and  cockroaches.  On  reflection,  I  real¬ 
ized  bow  unfur  I'd  been.  I  apoli^e  to 
the  cockroaches. 

We  are  getting  perilously  close  to  a 
tipping  point.  As  FMeral  Trade  Com¬ 
mission  Chairman  Timothy  Muris  said 
April  30  as  he  welcomed  experts  in 
miuketing.  tecbnolc^  and  Uw  to  a 
ccmference  in  Washington,  unsolicited 
bulk  commercial  e-mail  is  threatening 
to  wipe  out  the  value  of  a  communica¬ 
tions  system  on  which  we  all  now  rely. 

TTic  conference  resolved  little,  ex¬ 
cept  to  amplify  the  need  for  some  kind 
of  fix.  Rati^.  we  need  a  variety  of 
technological,  social  and  legal  fixes. 

It’s  obvious  why  we  still  lack  a  legal 
fix.  The  direa  mariceting  industry  and 
its  allies  in  technology  don't  want  any 
serious  federal  laws  against  spam,  so 
we  don't  have  any.  AOL  Time  Warner. 
Microsoft  and  several  other  big  com¬ 
panies  want  a  law  that  lets  companies 


spam  a  recipient  once.  Mar¬ 
keters  would  be  obliged  to 
honor  -opt-ouf*  requests 
from  e-mail  recipients. 

Lousy  idea.  Opt-out  solu¬ 
tions  put  the  onus  on  the 
end  user,  where  it  doesn’t 
belong.  And  given  the  num¬ 
ber  of  businesses  in  the  U3. 
alone,  we  could  all  spend 
the  rest  of  our  lives  opting 
out  of  unwanted  e-mail. 

Nobody  believes  that 
spammers,  especially  those 
from  overseas,  would  sud¬ 
denly  behave  under  a  tough  federal 
law.  But  a  few  prosecutions  and  jail- 
Ings  would  certainly  have  some  deter¬ 
rent  effect  Maybe  that  will  happen  in 
NHlrginia.  the  first  state  to  enact  a  law 
making  some  kinds  of  spamming  a 
felony,  with  potentially  severe  penal¬ 
ties  for  violators. 

Some  technical  measures  can  help, 
but  only  at  the  margins.  The  chal¬ 
lenge-response  systems  jettison  mail 
from  people  who  dool  respond  to  a 


simple  question  that  a 
computer  can't  answer,  but 
they  ignore  the  truly  seri¬ 
ous  problem  —  the  fact 
that  spammers  misuse  re¬ 
sources  they  don't  own, 
even  when  the  mail  doesn’t 
get  delivered. 

My  personal  solution 
works  pretty  well,  though 
it  steals  several  minutes 
from  ray  day  and  doesn't 
solve  the  stolen-resources 
issue.  I  get  so  much  spam 
at  my  public  e-mail  ad¬ 
dress  that  I’ve  taken  to  selecting  the 
(relatively)  small  portion  of  mail  I 
want  to  read  and  deleting  the  rest  of 
the  new  mail  in  my  in-box.  On  a  less 
public  account,  I  use  a  filter  and  occa- 
siotuUy  check  the  automatically 
trashed  items  to  ensure  chat  I'm  not 
deleting  something  I  want. 

A  notably  bad  idea  is  using  the 
“black  hole"  lists  that  network  vigi¬ 
lantes  have  created.  Subscribers  to 
these  lists  refuse  to  accept  and  delK'er 


mail  from  domains  deemed  friendly  to 
spammers.  This  method,  of  course, 
sweeps  up  the  innocent  along  with  the 
guilty,  which  is  an  injustice. 

One  of  the  more  intriguing  propos¬ 
als  comes  from  Stanford  University's 
Lawrence  Lessig.  He’d  like  a  bounty 
system  that  rewards  individuals  who 
turn  in  spammers.  I'm  not  convinced 
his  specific  idea  would  work,  but  he's 
cieariy  onto  something  important:  giv¬ 
ing  incentives  and  tools  to  people  at 
the  edges  of  networks  to  take  action 
on  their  owiL 

IT  should  lobby  for  something  along 
these  lines.  Imagine:  A  law  that  gave 
companies  a  way  to  sue  spammers 
could  turn  e-mail  imo  a  profit  cemer. 
The  more  successful  it  became,  of 
course,  the  quicker  the  spam  plague 
would  recede.  It's  worth  a  try,  anyway. 
Not  much  else  is  working.  I 

WMTHIinNM? 

OMixe  cokmsb  and  to  arctMs  oi  pFew 
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Novel  Abdicated 


I 


COUUMTT  AaKE  MMK  wAh 
the  users  who  woiAt  i«  to  see 
Novril  market  NetWare  more  suc¬ 
cessfully  CNeMtare  Stalwarts  Re¬ 
main  Lo^  Despite  Owtndiino  Mar- 
ket  Share.’  QukM^ik  37719).  Net¬ 
Ware  is  vastly  superior  to  any  Win¬ 
dows  product  for  mosi  users,  but 
theriphtpeopiedidnigetthemes- 
sage.  Some  technologically  chal¬ 
lenged ‘suif  in  the  boardroom  is 
making  the  decisran  to  switch  from 
NetWare  to  Windows  because  he 
saw  8  commercial  on  TV.  But  this  6 
happerkng  not  because  Miemsoft 
won  foe  war.  but  because  Novel 
abdeated 
Rod  Anderson 
Brick.  SJ. 


Who’s  in  Denial? 


ISITTlCinaBolNetWarewho 
are  In  deniaL  or  those  who  have 
imptornented  Windows  NT  for  the 
same  services?  I  think  foe  (alter 
users  are  in  denial  about  foe  fact 
that  NT  isn'l  as  stable,  secure  or 
easy  to  administer  as  NetWare. 

The  IT  professionals  who  are 
keeping  NetWare  do  so  not  be¬ 
cause  their  continued  use  of  Net¬ 
Ware  is  athontageous  10  their  ca- 
tesR.  but  because  getting  foings 
done  and  keeping  systeiTs  up  are 


advantageous  to  their  careers. 
Three  years  ago.  I  was  fold  foal  I 
wastakingatiskbyinslaingNet- 
VWre  and  eOuectory  nstead  ol 
moving  to  Wndows  2000  and  Ac¬ 
tive  Diecfory  from  Windows  NT 
4.0.Nowwehaveastabto«)v«on- 
menL  supported  by  fewer  stafiers 
than  wotdd  have  been  regured  for 
foe  alternative,  and  we  support 
workstations  and  servers  at  remote 
sites  around  foe  globe  wdhout  a 
hAch.  lAfe  can  adminisier  foe  net¬ 
work  and  drectory  quickty  and  elii- 
cientfy  and  debfotde  appicabons 
at  a  moment's  notice  to  anyone  on 
the  network. 

JeffDi 

Senior  manager  of  tecfmiai/ 
architecture  services,  AvioU 
Services.  Dallas 


Forgotten  Pioneer 

IttEAOwmmrTDiESTFraidc 
Hayes' recent  instalmerd  ol  *The 
Story  So  Far’ discussing  Wiom  K 
Inmon's  devising  of  and  contiibu- 
lionstotheheldofdalawerehous- 
inglQuickUnk  37146). 

There  can  be  iMe  doubt  as  to 
foe  signAcance  of  tnmon's  work 
but  I  was  (ksappoinled  to  see  no 
reterencetotheoomparablysignlti- 
cant  work  ol  Ralph  Kimbal.  who. 
buAdmo  upon  foe  pmcbcal  theory 
of  contributors  Ha  Inmon,  put  forth 


a  paradigm  widely  racognond  In 
the  date  warehoisng  fteid  and 
used  throughout  foe  industry  today 
ThrMmPyiMiio 

Wiillinglbrd.  Conn. 


OS  Does  Matter 


I«wtote[Quckljnk37241)nta- 
sponse  to  Mark  HaTs  CQkxnn 
DoesfoeOSMatlariQuickLMA 
36397]: ‘Hal  was  right  on. ...  The 
operating  system  should  be  trars- 
pareni.  Whether  Sl-bi.  32-bi(  or 
64*tai  -  who  cates,  as  tong  as  foe 
operaiino  system  is  avariaUe.  reli¬ 
able,  scalable  and  secure.' How  of¬ 
ten  have  ollenngs  from  Redmond 
been  caled ‘avalable.  reliable,  scal¬ 
able  and  secure*?  Try  teliig  Bi 
Gates  that  foe  OS  doesn't  natter. 
TobyFrulh 

Automation  coordinator. 
Dallas 


A  Part  of  Evolution 

The  Aimcif  *Miaosoft  RMaas- 
es64-bilSa0atabaBe‘ 
[OuckUnk  380%)  quotes  Janes 
Governor,  an  anal^  A  Redilonk. 
as  saymg.  *lt's  the  same  as  ever 
with  64-ttf.  K’s  a  technology  in 
setfcholamass-marketappica- 
bon.*  I  tind  this  to  be  a  sixpnangly 
old-school  comrrani.  The  compul* 


A  ffiduBtry  continues  to  nprovc 
peHonoMce  and  caoabMy.  Hfifo 
these  enprovementi  we  expand 
foe  realm  of  foe  posBfote.  With 
every  maior  leap  forward  VI  com- 
puttf  technology,  appbeabons  heve 
caught  up.  ueng  more  of  foe  capa- 
biity.  ThlB.  m  turn,  fuels  kvfoar  im- 
provementeSoly-kArbilproc- 
essng  B  foe  nut  togcal  step  n  foe 
evokiboa  As  e  becomes  more 
commonplace,  we  wi  utise  more 
and  more  of  as  capabiSy  Just  as 
with  %- and  32-bit  technology  be¬ 
fore  A.  this  denand  wont  be  a  In- 
ear  track:  at  some  poel  foe  de- 
mand  curve  wi  go  from  a  gradual 
ncrease  to  a  nau-verticat  Ine 
Graitt  Carstenaan 
Senior  systems  engineer. 

Pratt  &  Whitney. 

East  Hari/brd,  CoruL. 
grantxarstensen@pwMtC£om 

COMPUTERWORID  webomes 
comments  from  As  readers,  letters 
wfl  be  edtted  tor  bmvAy  and  riarty. 
They  should  be  addres^  to  Lettm 
Coniputerworld.  PO  Box  9171 500 
OldConnadicutnAh.  Rartanfoam. 
Mass  OTTOt  Fax  (508)  879^643. 
E^iaihletters9cotnpuiarwo(1ilcorn 
bdude  an  address  and  phone  num¬ 
ber  for  nmedate  veniication 
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If 


you're  busy  monitoring 
who's  watching  your 


your  servers, 
business? 


Hw  fww  HP  Proliant  01740 
t^way  wMi  hot-pkig 


-  Ultrodense  4u  modular  chassis 
with  up  to  eight  Intel*  Xeon'''  MP 
1.5  GHz  or  2.0  GHz  processors 

-  Up  to  64G6  oddressobie  memory 

-  Groundbreaking  F6  chipset 

•  6-64  bit/]00  MHz  PO  X  slots 

•  Integrated  Lights-Out  Standord 
(iLO)  for  Remote  Server  Mgmi. 


Th«  n«w  HP  Proliant  DL760 
G2  t-way  wMi  hot-pkig 


•  Up  to  eight  Intel*  Xeon'"  MP 
1.5  GHz  or  2.0  GHz  processors 

’  Up  to  64GB  addressable  memory 

■  Groundbreaking  F8  chipset 

•  10-64  bit/100  MHz  PCI-X, 

1-64  bit  33  MHz  slots 

■  Remote  Insight  Lights-Out  Edition  II 
(optional)  lor  Remote  Server  Mgmt. 


What  challenges  do  you  foce  today?  Oecreosing  budgets?  The 
lurking  possibility  of  downtime?  It's  hard  enough  to  (kus  on 
moving  your  business  forward  when  you're  constantly  looking 
over  your  shoulder  to  see  if  everything  is  up  and  runnirtg. 

Besides,  that’s  the  job  of  the  new  HP  ProLiant  DL700  series 
running  Intel*  Xeon'“  MP  processors.  An  adaptive  infrastructure 
begins  with  these  HP  ProLiant  servers  which  come  equipped 
with  tools  that  predict,  self-diognose  and  fix  many  fault 
conditions.  And  now  with  hot-plug  RAID  memory  exclusively 
from  H^  you  can  odd  or  reploce  DIMMs  without  turning 
your  systems  off.  Both  work  with  the  HP  ProLiant  Essentials 
Foundotion  Pock feoturing  Insight Manager7software which 
rs  and  controls  your  infrostructure  for  maximum  uptime. 


At  the  end  of  the  doy,  you'll  have  more  control  over  your 
infrastructure,  help  avoid  unplanned  downtime  and  reduce 
overall  maintenance  costs.  Not  to  mention  freeing  yourself 
up  for  rrrore  importont  thirrgs. 

To  looni  hew  HP  Proliant  sorvors  con  bo  o 
port  of  moxinHBng  your  company^  uplinw, 
downlDoda>IIP%oxoculivobrkTonhi9ho»wlob«ry 
at  www.hp.com/90/prelianttS  or  coll 
1*aOCh2t2-t673,  option  5,  and  mention  codo 


O  2003  Hrvtee-Pockofd  Company.  Intel  ond  the  Intel  Xeon  logo  ore  trodemorlcj  or  regltlered  trodemarks  of  Intel  Corporation  or  its  svbsidiories  in  the  United  Slotei  ond  other  countries. 


MUmEGE  CENTER 
DEVELOPMENT 


Waves  of  Change 

Some  CIOs  say  that  Web 
services  will  hit  IT  like  a 
tidal  wave,  affectii^  a  wide 
swath  of  IT  realms,  from 
supply  chains  to  CRM  to 
programming  tools.  Page  28 


OPINION 

Web  Services'  Sharp  Edge 

Web  services  are  part  of  a  long 
IT  standards  tradition.  As  such, 
be  aware  that  they’re  limited 
in  what  they  can  do,  says 
columnist  Mark  Hall.  Page  34 


Web  Services  in  Action 

Four  pioneers  that  are  exploiting  this  new 
technology  to  make  valuable  connections 
with  customers,  partners  and  suppliers  share 
what  they  have  learned  on  the  bleeding  edg^^ 
of  Web  services. 

Page  36 


EDiTOR'S  NOTE 


OK.  I  ADMIT  IT:  I  don’t  really  know 

whether  Web  services  will  transform 
IT  as  we  know  it  —  or  flop. 

For  one  thing,  Web  services  are  based  on 
standards,  which  is  a  good  thing,  except 
that  standards  have  a  way  of  gettii^  bogged 
down  or  fragmented  or  polluted  and  then 
fading  away. 

Plus,  there  are  serious  security  issues 
when  exposing  chunks  of  code  to  people 
outside  the  corporate  firewall.  (Just  the 
word  expose  —  common  in  Web  services 
talk  —  is  enough  to  give  your  security  di¬ 
rector  the  willies.)  And  Fm  not  sure  that 
enough  thought  has  been  given  to  liability 
issues,  or  even  to  how  participants  are  goii^ 
to  make  money  with  external  Web  services. 

My  colleague  Mark  Hall  certainly  has 
a  healthy  skepticism  about  the  grandest 
claims  for  Web  services  (page  34).  So  do  I. 
But  I  think  that  if  we  tone  dowm  the  hype, 
there  are  some  modest  e^>ectations  that 
have  a  good  chance  of  coining  true: 

■  XML  and  SOAP  have  a  bright  future. 
They’re  simple.  They  each  do  one  job  and 
do  it  well 

•  Web  services  will  make  it  easier  to  inte¬ 
grate  internal  systems.  If  nothii^  else  hap¬ 
pens,  that  wdll  be  a  success  story. 

•  Web  services  are  likely  to  replace  what 
we  now  call  electronic  data  interchange. 
They’re  a  powerful  tool  for  automating  sup¬ 
ply  chain  activity  among  trusted  partners. 

But  will  we  have  an  economy  based  on  a 
giant  Yellow  P^es  directory  lining  thou¬ 
sands  of  public  Web  services,  with  elec¬ 
tronic  transactions  flying  to  and  fro?  C^ount 
me  among  the  skeptics  there.  I 


Mitch  Betts  is  features  editor  or  Computer- 
world  He  can  be  contacted  at  mitch_bett^ 
computerworld.com. 
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The  Web 

ServicesTsunami 

IJWT|W|  Alrea^  Web  services  are  being 
rffill'll  internally  and  externally. 

llUJLiill  IT  may  never  be  the  same. 
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The  idea  behind  web  services  is 
simple:  Send  a  message  across  a 
networic  that  triggers  an  action 
at  the  other  end  —  often  at  an¬ 
other  business.  But  getting  to  today’s 
Web  services  has  required  simplifying 
several  complex  technologies:  client/ 
server.  £OI  and  SGML. 

Client/server  got  its  start  in  1981, 
when  the  founders  of  an  early  relation¬ 
al  database  company  wanted  to  sepa¬ 
rate  the  database  from  the  applications 
that  used  it  Bob  Epstein.  Paula  Haw¬ 
thorn  and  Mike  U^U  founded  Britton*  , 
Lee  tnc  to  make  a  stand-alone  dau- 
base  server  called  the  Intelligent  Data¬ 
base  Machine  (Q>M).  The  idea  was  for 
a  large  computer  to  send  database 
queries  to  the  IDM  for  better  perfor¬ 
mance,  security  and  simplicity. 

But  the  IDM’s  proprietary  hardware 
couldn’t  keep  pace  with  the  rapid  per¬ 
formance  improvements  in  Unix 
servers  in  the  1980s.  Epstein  soon 
helped  found  a  new  software  company 
that  used  the  same  idea  without  the 
specialized  hardware.  Sybase  Inc. 
i^e  cUent/server  computing  both 
practical  and  popular. 

Other  developers  took  the  client/ 
server  idea  beyond  database  access.  By 
1983,  two  researchers  at  Xerox  Corp.*s 
Palo  Alto  Research  Center  (PARC). 
Andrew  Birrell  and  Bruce  Jay  Nelson, 
had  developed  a  system  of  remote  pro¬ 
cedure  calls,  or  RPCs.  so  one  computer 
on  a  network  could  ask  axtother  to  per¬ 
form  some  of  its  computing  work.  And 
in  1984.  Sun  Microsystems  lnc.‘$  Bill 
Joy  led  the  development  of  Network 
File  System,  which  used  RPCs  to  give 
computers  on  the  same  network  access 
to  one  another’s  riles. 

But  sharing  data,  riles  and  even  com¬ 
puting  processes  within  one  compa¬ 
ny’s  netwofk  was  far  simpler  than 


The  Story 
So  Far 

Web  services  are  built  on  the 
shoulders  of  eaiiier  technologies,  such  as 
client/server  and  EDL  Frank  FJaves 


sharing  business  data  among  compa¬ 
nies.  That  had  already  begun  in  a  limit¬ 
ed  way  when  a  group  of  trucking,  rail¬ 
road  and  shipping  companies  formed 
the  Transportation  Data  Coordinating 
Committee  in  1975  to  develop  standard 
electronic  versions  of  shipping  mani¬ 
fests  and  other  documents. 

By  the  early  1980s,  electronic  data 
interchange  (EDI)  was  being  used  in 
the  automotive,  retail  and  transporta¬ 
tion  industries.  But  EDI  was  compli¬ 


cated.  Far  more  information  could  go 
into  a  standard  EDI  document  than 
most  companies  needed,  so  they  used 
custom  versions,  and  it  was  difficult  to 
keep  track  of  which  suppliers  and  cus¬ 
tomers  used  what  EDI  subset.  EDI 
messages  were  also  usually  sent  over 
expensive  private  networks. 

How  could  the  complex  EDI  mess  be 
simplified?  The  solution  was  already 
being  developed.  In  1969,  three  IBM 
developers  working  on  a  computer  sys¬ 
tem  for  law  offices  came  up  with  a  way 
of  using  standard  tags  to  identify  con¬ 
tent  within  documents.  Charles  Gold- 
farb.  Edward  Mosher  and  Raymond 
Lorie  called  their  system  the  General¬ 
ized  Markup  Language,  or  GML  —  a 
name  that  happened  to  include  the  ini¬ 
tials  of  its  thm  inventors. 

By  1980.  IBM  was  successfully  using 
GML  in  products,  and  standards  oiga- 
nizations  were  developing  a  standard¬ 
ized  version.  In  1986,  Standard  Gener¬ 
alized  Markup  Language  (SGML)  be¬ 


came  an  official  international  standard. 
Like  EDI,  SGML  was  large  and  com¬ 
plex.  But  SGML  included  a  system  for 
specifying  well-defined  subsets  of  the 
complete  set  of  information  tags. 

One  such  subset  took  off  in  1S>91, 
when  researcher  Hm  Berners-Lee  at 
Swiss  research  laboratory  CERN  cre¬ 
ated  Hypertext  Marinip  Language 
(HTML)  for  the  first  Web  browser.  In 
order  to  send  and  receive  HTML  Web 
pages,  Berners-Lee  also  devised  a  sim¬ 
plified  version  of  the  standard  Inter¬ 
net  File  TVansfer  Protocol  —  which  he 
called  Hypertext  Transfer  Protocol, 
or  HTTP. 

And  in  1996,  a  World  Wide  Web 
(Consortium  <W3C)  working  group 
'  created  the  first  draft  of  what  itched 
'  a  “simplified  SCiML.**  *I\vo  years  later. 
Extensible  Markup  Language,  known 
as  XML,  was  a  standard  that  some  IT 
shops  began  to  use  in  e-commerce. 

By  1998,  researchers  at  Microsoft 
(Dorp,  were  putting  the  pieces  togeth¬ 
er  RPCs  in  the  form  of  documents 
tagged  with  XML  and  sent  across  the 
Internet  using  HTTP,  doing  what  EDI 
did  and  much  more.  They  dubbed 
their  system  the  Single  Object  Access 
ProtocoL  or  SOAP. 

IBM  Joined  the  effort  in  2000,  and 
the  two  companies  defined  the  Web 
Services  Description  Language  (WSDL) 
for  identifying  the  capabilities  avail¬ 
able  from  a  Web  services  provider,  and 
the  Universal  Description,  Discovery 
and  Integration  system,  or  UDDl,  for 
directories  of  Web  services. 

And  in  2002.  the  Web  Services  Inter¬ 
operability  Organization  brought  in 
dozens  of  other  vendor  and  user  com¬ 
panies,  with  the  promise  that  Web  ser¬ 
vices  would  simplify  both  e-commerce 
and  IT  services. 

And  now.  on  with  the  story ...  I 
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It’s  time  the  ultimate  64-bit  server 
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Introducing  the  AMD  Opteron’*  processor,  64>bit  computing  for  today’s  32-blt  world. 

It’s  the  only  processor  chat  is  designed  to  run  your  32*  and  64*bic  applications  simultaneously  and  without  compromise. 
AMD  Opteron  runs  on  AMDM-a  breakthrough  architecture  that  enables  64-bit  technology  on  the  x86  platform- 
creating  a  new  class  of  computing  so  you  can  migrate  to  64-bit  technology  on  your  own  terms. 


The  world’s  highest  performing  2P  and  4P  servers  are  now  powered 
by  AMD  Opteron  processors.  Receive  the  performance  and  security  benefits  of 
64-bic  computing,  while  getting  the  best  32-bit  performance  available  anywhere. 


AMD^^ 

^  Ooteron- 


Leverage  your  existing  investments  while  preparing  for  the  future.  One  architecture 
across  one  enterprise  means  you  won't  have  to  rip  and  replace  your  entire  infr'ascructure  when  you  transition 
CO  64-bit  computing.  It’s  just  another  way  AMD  designs  and  builds  processors  with  you  in  mind.  For  a  closer 
look  at  the  financial  and  performance  advantages  of  the  AMD  Opteron  processor,  visit  www.amd.com/opceron 
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Web  services  could 
affect  a  wide  swath  of 
rr  activities,  from 
supply  chains  to  CRM 
to  programming  tools. 
By  Bob  Violino 

WEB  SERVICES  promise  to  be  the 
technolc^al  equivalent  of 
being  in  the  right  place  at  the 
r^t  time  with  just  the  right 
information  at  your  finger¬ 
tips.  And  some  say  the  tech¬ 
nology  will  hit  the  IT  world 
like  a  tidal  wave. 

“Web  services  is  a  tsunami  of  technology  evolu¬ 
tion,”  Andre  V.  Mendes,  chief  technology  integration 
officer  at  Public  Broadcastii^  Service  (PBS),  said  at 
the  Computerworld  Premier  100  IT  Leaders  Ck)nfer- 
ence  in  February.  He  said  the  Alexandria,  Va.-based 
nonprofit  organization  uses  Web  services  to  connect 
upstream  with  content  developers  and  producers 
and  downstream  with  public  TV  stations  and  view¬ 
ers.  “What  we’re  developing  is  a  supply  chain  opti¬ 
mization  that  puts  us  ri^t  in  the  middle  of  this 
equation,”  said  Mendes. 

Over  the  next  several  years,  Web  services  are  like¬ 
ly  to  enable  companies  to  get  a  lot  more  out  of  tech¬ 
nologies  such  as  supply  chain  systems  and  CRM,  and 
they’re  likely  to  make  it  easier  to  build  new  applica¬ 
tions  and  integrate  existing  ones.  Here  are  some 
snapshots  of  how  Web  services  are  expected  to 
change  key  parts  of  the  corporate  IT  agenda: 

Business  intelligence  and  CRM 

Most  of  the  ma¬ 
jor  business- 
intelligence  and 
CRM  vendors 
plan  to  support 
Web  services  in 
their  products  or  are  already  doing  so,  and  Web  ser¬ 
vices  are  expected  to  make  those  applications  more 
Continued  on  page  33 
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IT  MANAGEMENT:  FACING  TOUGH  CHOICES,  MAKING  BETTER  DECISIONS 


BUY,  HOLD,  SELL... 

Why  You  Should  Manage  Your  IT  Organization  Like  You’re  Running  a 


Anyone  managing  an  investment 
portfolio  -  from  a  mutual  fund  man¬ 
ager  to  the  individual  with  an  IRA  - 
understands  the  challenges  of  the 
present  economy.  There  isn’t  as  much 
money  available  for  investment  as  one 
would  wish.  And  it’s  harder  than  ever 
to  know  how  to  invest  it.  The  days  of 
the  sure  bet  artd  ever-rising  stocks  are 
long  behind  us.  Today’s  reality  is  less 
about  speculation  and  more  about 
conservation. 

To  those  of  you  running  an  IT 
oiganization  -  or  concerned  with  the 
impact  of  IT  on  your  business  -  this 
should  sound  familiar.  In  today's  IT 
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environment,  there  are  more  projects 
clamoring  for  dollars  than  there  is 
budget  available.  And  it’s  never  been 
harder  to  make  choices  between 
potential  IT  investments.  TTie  easy 
stuff  has  already  been  eliminated  -  the 
trivial  projects,  the  experimental 
pilots,  the  stuff  that  was  “coo!”  but 
unnecessary  -  all  long  gone.  With  the 
continuing  squeeze  on  costs,  finding 
new  places  to  cut  is  going  to  hurt,  and 
could  potentially  damage  the  business 
as  a  whole. 

Maybe  it’s  time  to  take  a  lesson 
from  the  mutual  fond  manager. 

Consider  ail  your  IT  projects  as  a 
pool...  a  collection  of  investments... 
a  portfolio,  in  fact.  With  limited  dol¬ 
lars  to  put  in  and  a  goal  of  maximiz¬ 
ing  the  return  on  the  money  invested, 
how  do  you  decide  how  to  allocate  the 
funds?  Look  at  each  individual  invest¬ 
ment  and  ask  yourself  “Should  we 
buy?  Hold?  Or  sell?” 

REACHING  THE 
END  OF  THE  ROAD 

Once  IT  projects  arc  seen  as  a  port¬ 
folio  of  investments,  rather  than  a 
series  of  projects,  it's  logical  to  look 
for  the  best  way  to  manage  those 
assets.  Decisions  on  v^ikh 
initiatives  get  fondii^  can 
be  made  on  the  basis  of 
value  to  the  business, 
rather  than  subjective  fac¬ 
tors.  Since  investing  more 
in  one  project  means 
investing  less  in  another, 
the  decision-making 
process  is  reduced  to  a 
series  of  comparisons 
between  the  costs,  risks 
and  rewards  of  actual  and 
potential  investments. 

Tbe  portfolio  approach 
also  makes  it  natural  to 
consider  the  usefril  life  of  each  asset  - 
the  point  at  which  it  becomes  logical 
to  “sell,”  or  retire  the  asset.  In  cash- 
strapped  IT  organizations,  it  can  be  all 


Sawy  CIOs  will 
engineer  their  IT 
operations  for 
maximum  efficiency, 
effectiveness,  and 
continuous 
improvement  through 
a  value-creating 
portfolio,  induding 
benchrrtarking  and 
measurement. 

-  META  Group 


too  easy  lo  hold  on  to  systems  that 
have  long  since  passed  their  useful 
lifetimes:  the  iheor>'  that  if  it  isn't  bro¬ 
ken.  wh>’  fix  it?  These  kl^c)'  systems 
often  have  dedicaiti  vocal  - 

constituencies  within  the  intamal  cus¬ 
tomer  base,  providing  another  incen¬ 
tive  to  simpi)’  avoid  raising  the 
replacement  questioa  In  reality,  how¬ 
ever.  th^  opportunity  a>st  of 
the  outdated  system  can sjften 
wd^  tharcostof^ 
one.  (See^QCiliing 
page.) 

HARO 
NEED 

So  how  SPilSr  iSecidc  between 
compecuMBaitives?  For  our  friend 
the  mutuCnind  manager,  objective 
decision-making  requires  two  things: 
metrics  for  all  of  the  contenders  bas^ 
on  a  common  standard,  and  a  set  of 
criteria  for  selecting  win¬ 
ners  and  losers  based  on 
those  metrics.  In  the  IT 
environment.  Portfolio 
Management  -  such  as  the 
Pacific  Edge  Software 
solution  -  provides  a 
framework  for  consider¬ 
ing  invest¬ 
ments  -  and 
their  require¬ 
ments  for 
money,  time, 
resources  and 
effort  -  in  a 
rational, 
standardized  way. 

The  first  challenge  is  to 
develop  appropriate 
common  metrics.  An 
obvious  problem  is  that 
much  less  is  known 
about  a  new  initiative 
than  about  an  on-going 
project  To  take  an  extreme  example, 
with  a  great  idea  sketched  on  the  back 
of  a  napkin,  there's  almost  no  data; 
with  a  5-year-old  solidly  running 


Basically,  you're 
concentrating  on  the 
results.  That  requires 
a  different  kind  of 
management.  You're 
focusing  more  on 
performance  and 
outcomes,  and  less 
on  processes. 

-  Matthew  Light  of 
Gartner,  reported  in 
Software  Magasine 


n  avail- 
ipan\  than 
led  organi/a- 
Bui  that  doesn’t 
up  in  the  eyes  of  a 
In  the  same  way.  the 
Management  solution  is 
le  enough  to  accommodate  met- 
of  different  types,  coaxing  infor¬ 
mation  out  of  the  available  data  that 
allows  meaningful  comparisons  to  be 
made  between  new  opportunities  arvd 
existing  investments. 

ARE  WE  ALL 
ON  THE  SAME  PAGE? 

The  second  challenge  -  developing 
criteria  for  choosirtg  between  con¬ 
tenders  -  is  where  the  true  power  of 
Portfolio  Management 
begirvs  to  show  itself.  In 
the  same  way  a  mutual 
fund  manager  balances 
the  mix  of  investments  in 
her  portfolio  based  on  the 
fund's  objectives  - 
income,  for  example,  or 
short  or  long-term 
growth  -  so  can  the  IT 
portfolio  be  balanced  b>’ 
defining  goals  for  the  IT 
organization  and  the 
business  as  a  whole. 

Portfolio  Management 
makes  these  objectives 
explicit  and  measures  each  potential 
investment  in  terms  of  how  much  it 
contributes  to  achieving  them.  The 
result  is  a  portfolio  of  IT  investments 
that  is  aligned  with,  and  will  help  real¬ 
ize,  corporate  goals. 

This  can  lead  to  some  surprising 
res'datkms.  One  large  wireless  scnice 
provider,  for  example,  implemented 
Portfolio  Management  across  its 

CONTINUES  ON  NEXT  PAGE 


Koc  ibe  iBMil  fiiDd  mmger 
tuned  OCX  doe  gnntinn  arc  the 
oadn  of  dit  dqr.  ItTiiig  fint  ooe 
«Ttn»  An  noAo;  onnfering  Ac 


TamOUIDMMMGS-AND 
CHAB-aUNGl 
AfldddbmiiilicoflheinalMl 
tad  ii  Ikai  il  b  idiKlf  managed;  dir 


matiumt  ihb,  tabig 
ain  and  oowidetiag 
t  agpoatuaidca.  In  the 


iha  annadang  oapoiaia  olijecinc, 
ny  fw  of  du  oDoraag'a  IT  hdiia- 
thn  MR  labaed  to  acUenng  ihb 
gnd.  Andang  drrliiniia  wr  being 
made,  nal  an  the  baba  eddieb  invact 
on  caaaoaaffh  bat  oa  the  IT  oigaiiiB- 
tiaab  btaaai  criteria.  Pardbbo 
Maaa^naal  helped  recnnaect  the 
reaiga^^  TT  eflbeti  w  bs  axpoaU 


tiaiiaa  aba  b  ailib  i  a  cntninoo  paeb- 
kaaa.  Oat  hage  ineiBiDOe  oempaiy 
with  anal  hnhad  peniacti,  iBaanr- 
cRd  aaaaanna  aodi  oaaei  and  waa 
able  to  niaaidbif  end  conanlidatr 
naap  paajccta  into  one.  That 
eigiiaai  amal  portfolio  petfotm- 
anoeaad  faea  ap  doltn  for  forther 


SPECIALFEATURE 

KNOW  WHAT  YOU’RE  OOING. 
AND  WHY  YOU’RE  DOING  IT. 


SPECIAL 

REPORT 


With  all  the  projects  and  investments  your 
business  has  going  on,  how  do  you  align  that 
portfolio  with  your  business  needs?  The  Pacific 
Edge  Enterprise  Portfolio  Management  solution 
is  based  on  a  powerful  but  straightforward 
process  that  does  just  that,  it  transforms  the 
way  projects  are  evaluated,  and  new  initiatives 
considered. 


BUSINESS  FOCUS 


PHASE  1:  PUUMINS 

The  Enterprise  Portfolio  Manage¬ 
ment  process  starts  by  assessing  each 
p>otential  new  investment,  along  with 
the  resources  that  comprise  the  oi^- 
nization’s  portfolio. 

Existing  investments  are  modeled 
and  captured  in  the  portfolio  invento¬ 
ry.  Detailed  information  may  be  cap¬ 
tured  directly  -  or  imported  from 
other  tools  such  as  spreadsheets, 
accounting  and  project  management 


^^^th  the  portfolio  of  potential 
investments  defined,  each  investment 
is  categorized  and  qualified,  based  on 


ENTERPRISEPORTFOLIOMANAGEMENT 


the  organization’s  management  tech¬ 
niques,  operational  processes  and  best 
practices.  information  such  as  die 
business  case,  resource  requirements 
and  alignment  to  corporate  strategy 
are  captured. 

Hien,  each  investment  is  priori¬ 
tized,  wei^ted  and  ranked  using  a 
scorecard  approach,  to  measure  its 
value  against  standardized,  objective 
metrics  such  as  risk  and  potential 
return. 

PHASE2:AIULirSIS 

Executives  and  managers  can 
review  key  infiMmation  from  multiple 
perspectives,  sudi  as  investment  type, 
sponsoring  organization,  objectives 
and  priority,  to  gain  a  thorough 
understandii^  of  the  entire  portfolio. 

Each  existing  and  potential 
investment  is  examined  to  determine 
that  it  is: 

*  achievabk,  given  the  resource  con- 
^raints  of  the  organizaticm 

«  babnccd,  in  terms  of  potential  risk 
compared  to  its  value  to  the  organizatkm 

*  al%ned  with  strategy  and  corporate 
objectives 

*  ranked  in  order  of  priority,  based 


on  its  ability  to  deliver  maximum 
business  value. 

PHASESzOPnillZAnON 
V^th  the  information  quantified, 
standardized  and  accessible,  h  is  now 
mudi  easier  to  collaborate  on  selecting, 
prioritizing  and  sequencing  projects. 

In  practice,  this  is  done  by  select¬ 
ing  for  specific  combinations  of  vari¬ 
able  constraints  -  such  as  investment 
inclusion,  value,  risk  and  cost 
Selection  criteria  can  be  modified  to 
generate  alternative  portfolios,  which 
are  then  compared  and  refined. 

Throi^  this  collaborative 
process,  an  optimum  portfolio  of 
investments  can  be  defined  tiiat  best 
matches  the  organization’s  chosen 
strat^jc  planning  objectives. 
PIUSE4:RIWUIZAnON 
Now,  the  realigned  portfolio  is 
translated  into  actionable  plans. 
Investment  [morities,  milestones, 
resource  allocation,  and  budget  infor¬ 
mation  are  distributed  to  the  open- 
tional  staff  re^wnsible  for  managing 
the  assets,  resources,  projects  and 
products. 

From  this  point  on,  lifecycle 


management  tools  and  status  and 
performance  management  tools  are 
used  to  monitor  the  performan<%  and 
results  of  each  initiative  as  it  moves 
from  initial  concept  to  completion.  In 
the  case  of  assets,  similar  lifecycle 
management  is  apfdied  as  the  asset 
transitions  towards  retirement  and 
replacement. 

GOING  FORWARD,  the  results  of 
each  investment  can  be  assessed  in 
terms  of  its  impact  on  the  organiza¬ 
tion’s  overall  goals. 

Pacific  Edge  takes  a  “dosed  loop” 
approach  to  Enterprise  Portfolio 
Management,  allowing  project,  asset 
and  imxluct  investments  to  be  inven¬ 
toried,  analyzed,  planned  and  tracked 
throt^out  their  entire  lifecydes.  As 
progress  is  made,  external  factors 
change,  and  business  objectives 
evolve,  the  portfolio  information  is 
constantly  updated  to  reflect  the  new 
reality. 

Pro-active  planning  can  also  be 
performed  usii^  “what  if. . analysis 
and  “sandbox”  trials  to  compare  alter¬ 
native  investment  scenarios  and  tost 
conditions. 


AT  THE  HEART  OF  THE  ENTER¬ 
PRISE  PORTFOUO  MANAGE¬ 
MENT  PROCESS  are  the  individual 
investments  -  assets,  products,  proj¬ 
ects  and  resources  -  that  together 
comprise  the  enterprise  por^lio. 
Most  organizations  have  a  large  num¬ 
ber  of  investments,  v4iich  will  typical¬ 
ly  be  of  several  different  types,  each 
mapping  to  different  functional 
needs. 

As  a  result,  a  complete  entorprise 
portfolio  can  be  h^hly  complei,  and 
the  Pacific  Edge  Entorprise  Portfi^ 
Management  solution  indudes  the 
ability  to  logically  group  aiKl  manage 
“partitions”  so  that  R&D  investments, 
for  example,  can  be  planned  and  eval¬ 
uated  differently  than  IT  investments. 


ENTERPRISE  PORTFOLIO  MANAGEMENT 


PORTFOLIO  MANAGEMENT  IN  ACTION 


Improving  the  Health  of  the  Enterprise  Portfolio 

Leading  healthcare  provider  Mercy  Health  Partners  needed  a  way  to  balance  its  large,  and  growing,  volume  of  IS  projects  against  a  fixed  pool  of 
resources.  There  was  also  the  challenge  of  aligning  projects  with  strategic  business  goals  in  a  rapidly-changing  industry.  Enterprise  Portfolio 
Management  was  a  bold  approach  -  and  one  which  has  had  a  positive  impact  beyond  the  IS  department,  maximizing  value  across  the  organization. 


VvTien  james  J.  Aibin  joined  Merq'  I  managing  some  4,000  projects  at  any  I  a  strategic  level  “We  use  Pacific  Edge 


Health  Partners  as  CIO,  he  immedi-  one  lime 

atdy  realized  his  Information  Services  system  c 

dq»rtmen(  needed  a  way  to  quickly  ing  syste 

identify  what  IS  projects  were  in  pled  witJ 

progress,  and  how  they  impacted  the  develope 

department  s  limited  resources.  A  rec-  system 

ognized  leader  in  providing  quality.  Microsol 

cost-effective  healthcare.  Mercy  Clearly,  0 

Health  encompasses  six  hospitals  in  for  a 

southwest  Ohio.  W^th  a  medical  staff  approach 

of  1,600  professionals,  Mercy  Health  theprojo 

is  also  a  regional  leader  in  collaborat-  resource 

ing  with  other  organizations  to  meet  HANDLING 

community  needs.  ERIN6  QUA 

Like  many  IS  departments  in  an  lames 
industry  where  consolidations  and  nized  tha 

cutbacks  are  commonplace,  Mercy  sive  Entei 

Health  Partners  faced  many  chal-  Manager 

lenges  -  not  the  least  of  which  was  was  the  a 


one  lime.  Their  project  management 
system  consisted  of  a  trouble-ticket¬ 
ing  system  for  allocating  work,  cou¬ 
pled  with  an  internally 
developed  accounting  '*The  I 
system  based  on  „  ^ 

Microsoft*  Access.  ‘ 

Clearly,  there  was  a  need  solut 

for  a  more  robust  Pacific . 

approach  to  managing  major  co 

the  project  portfolio  and  reducing 

resource  utilization.  by  S4 

HANDLING  QUAIITITY.  DELIV¬ 
ERING  OUAim 
lames  Albin  recog¬ 
nized  that  a  comprehen- 
sive  Enterprise  Portfolio  of  Met 

Management  solution  Pa 

was  the  answer  -  a  solu¬ 
tion  that 

could  help  Mere)'  Health 
proactively  plan  and  man- 
age  their  IS  portfolio,  easi- 
)y  track  where  time  was 
being  spent,  and  ensure 
enough  resources  were 
available.  “W'e  needed 
something  that  could  han- 
die  the  large  volume  of 
projects  and  focus  on 
resource  utilization.  But 
we  found  that  not  very  many  solu¬ 
tions  were  available  for  IT.  “  says  Mr. 
Albin. 

After  an  extensive  review,  Mercy 
Health  selected  the  Enterprise 
Portfolio  Management  solution  from 
Pacific  Edge  Software  of  Bellevue, 
Wa.,  because  it  could  not  only  handle 
the  volume  and  details  of  projects,  but 
also  report  on  the  project  portfolio  at 


This  special  feature  on  Ent^prrse  Portfotn  Management  was  brought  to  you  by  Pacific 
Edge  Software,  the  leading  provider  of  Enterprise  Portfolio  Management  sof^re  for 
global  organizations  Pacific  Edge  delivers  closed-loop  management  solutions  that  help 
businesses  maximize  value  and  reduce  risk  in  their  investment,  project,  and  product 
portfolios. 

Pacific  Edge's  business-cribcai  solutions  include  Pr^ect  Office*  and  Portfolio  Edge'’ 
enterprise  software  products,  professional  servM:es.  industry-specific  templates,  and  a 
proven  portfoNo  rnanagement  process. 


'*The  Enterprise 
Portfolio  Management 
solution  from 
Pacific  Edge  was  a 
major  contributor  in 
reducing  our  IT  costs 
by  $4  million” 

fames  /.  Albin, 

Vice  President  &  CIO 
of  Mercy  Health 
Partners 


to  effeajvely  prioritize  and  track  our 
project  portfolio,  manage  resources, 
and  validate  the  IS  department  as  a 
valuable  asset  to  the 
organization,**  says  Mr. 
erpnse  Albin.  “'The  healthcare 

inaxem<7.( 

f^***  on  cost  consolidation, 

fe  was  a  which  increases  demand 

ibutorin  for  IT.  So  we  needed 

r  IT  costs  a  solution  that  could 

Uion”  help  us  maximize  the 

value  of  our  IS 

Alhm,  portfolio.” 

BENEFITS  TO  IS  WD 
nt  &  CIO  beyond 

Health  Por  Mercy  Health 

ers  Partners,  Enterprise 

Portfolio  Management 
has  delivered  on  its 
promise.  Besides  significant  improve¬ 
ments  to  productivity,  the  Pacific 
Edge  solution  has  benefited  the  IS 
department  through: 

•  Aligning  projects  with  strategic 
goals.  With  clear  visibility  into  project 
portfolios  through  easily  accessible 
reports,  executives  and  senior  manage¬ 
ment  can  make  better  business  deci¬ 
sions  based  on  strategic  goals.  They 
analyze  budget  and  time  information, 
obtain  project  completion  reports, 
prioritize  projects  based  on  objective 
criteria,  and  understand  the  impact  of 
resource  management  decisions. 

•  Improved  resource  allocation. 
With  1 00%  of  resources  tracking  time. 
Mercy  Health's  IS  department  has  reli¬ 
able  data  from  which  to  analyze  how 
and  where  resources  are  being  used. 
This  allows  the  department  to  priori- 


To  explore  how  Enterprise  Portfolio  Management  can  help  you  align  investment  and 
development  activities  with  business  strategy,  please  contact  us  at: 


lize  projects  based  on  resource  avail¬ 
ability.  Even  after  a  25  percent  reduc¬ 
tion  in  resources,  there  has  been  no 
reduction  in  customer  service  or  proj¬ 
ect  quality,  thanks  to  this  ability  to 
prioritize. 

•  Greater  customer  satis^ction. 
Since  the  IS  department’s  internal  cus¬ 
tomers  now  have  access  to  project 
information,  they  are  accountable  for 
the  quality  of  their  own  projects.  The 
department  uses  reports  to  clearly 
communicate  the  number  of  projects 
in  a  customer’s  queue,  and  the  number 
of  resources  avail^le  to  work  on  them 
-  empowering  the  customer  to  set 
their  own  project  priorities. 

•  Enhanced  project  approval  and 
prioritization.  Each  potential  project 
passes  through  an  approval  commit¬ 
tee,  which  now  has  access  to  reports 
that  easily  identify  high-priority  legal 
and  regulatory  projects,  as  well  as 
projects  to  be  approved,  canceled,  or 
escalated  to  the  executive  committee. 
Projects  stay  within  limits,  backlogs 
are  avoided,  and  project  prioritization 
and  balance  is  more  easily  maintained. 

For  Mercy  Health,  Enterprise 
Portfolio  Management  has  become 
more  than  just  a  means  of  managing  a 
large  volume  of  projects;  it  is  now  a 
key  tool  for  improving  business 
processes  to  ensure  an  achievable 
investment  portfolio  -  one  with  the 
right  balance  of  investments  to 
achieve  the  greatest  return. 


Pacific  Edp  Softwara.  lac. 

Phone  (425)  897.8800 
Fax  (425)  897.8900 
E-mail  infoOpacfficedge.com 
Web  www.pacificedge.com 
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readily  available  to  internal  users  and  external  busi¬ 
ness  partners. 

Web  services  —  with  their  standardized  applica¬ 
tion  programming  interfaces  —  wdll  allow  analytical 
tools  to  be  more  easily  embedded  in  standard  appli¬ 
cations,  says  Michael  Corcoran,  chief  communica¬ 
tions  officer  at  Information  Builders  Inc.  in  New 
York.  The  latest  release  of  the  company's  business- 
intelligence  product  supports  Web  services,  allowing 
reports  to  be  created  and  published  as  a  Web  service 
accessible  from  Java  2  Enterprise  Edition  or  Micro¬ 
soft  Corp.'s  .Net  environment.  “Web  services  will 
make  business-intelligence  components  usable  with 
many  other  applications."  such  as  call  center  or  Web 
customer  service  applications.  Corcoran  says. 

Just  imagine  the  systems  that  could  be  improved 
with  real-time  transactional  data  delivered  by  Web 
services.  For  example,  a  manufacturer  could  use  a 
business-intelligence  system  to  forecast  demand  for 
raw  materials  and  then  employ  Web  services  to  relay 
the  data  to  numerous  suppliers  producing  those  ma¬ 
terials.  An  insurance  company  could  more  ea.sily  and 
quickly  send  CRM  information  —  such  as  a  cus¬ 
tomer’s  previous  complaint  about  a  policy  —  to  a  call 
center  agent  to  help  provide  better  service. 

“The  point  of  Web  services  is  to  make  it  easier  for 
people  to  construct  and  integrate  applications."  says 
Henry  Morris,  an  analyst  at  Framingham,  Mass.- 
based  market  research  firm  IDC.  "Web  services, 
combined  with  standards  like  XML  will  make  it  easi¬ 
er  for  people  to  tie  business-intelligence  and  CRM 
applications  together.  That’s  where  you  get  the  real 
value  out  of  business  intelligence;  not  just  getting  a 
report,  but  being  able  to  act  on  it  and  get  feedback." 

Joe  Wanzek.  vice  president  of  IT  at  American  Eq¬ 
uity  Investment  Life  Insurance  Co.  in  Des  Moines, 
Iowa,  says  his  company  already  has  an  in-housc  CRM 
application  that  provides  transaction  information  to 
customer  service  representatives.  But  with  Web  ser¬ 
vices.  Wanzek  expects  to  be  able  to  deliver  that  data 
via  the  Internet  to  customers  just  as  quickly.  That 
will  eliromatc  the  need  for  costly  and  time-consum¬ 
ing  phone  calls  to  work  out  customer  complaints  or 
answer  queries,  he  says. 


Supply  Chain  Systems 

I  The  adoption  of 
Web  services  is 
e:^ected  to  en¬ 
hance  the  way 
businesses  con¬ 
duct  transactions 
with  one  anodier  electronkaUy  and  the  way  informa¬ 
tion  moves  through  the  supply  chain. 

Mitsubishi  Motors  North  America  Inc.  in  Cypress, 
Calif,  uses  Web  services  to  link  700  dealers  through 
its  portal  —  a  single  point  of  entry  for  dealers  online, 
says  CIO  Tony  Romero.  "Anything  a  dealer  needs  to 
do  can  be  done  through  the  portal  no  phone  calls 
necessary,"  he  says. 

The  key  to  easier  Integration  is  the  fact  that  Web 
services  are  based  on  widely  adopted  standards  such 
as  XML  "It  changes  the  'mtegratioo  game;  it  will  be 


Vendor  Says 
MobOe  Apps 
Are  Years  Awn)  ' 

The  combination  of  Web  services  and 
mobile  devices  such  as  cell  phones.  P0A$ 
and  tablet  PCs  will  give  users  customized 
access  lo  cntical  data  in  real  time,  says 
Joe  Owen,  chief  technotogy  officer  at 
XceieWat  Inc.  in  Alpharetta.  6a..  wtuch 
offers  software  for  connecting  mobile 
users  and  remote  siles  to  corporate 
systems.  For  example,  he  says,  a  sales 
distributor  m  the  field  could  use  a  smgle 
application  from  a  mobile  dewce  lo  access 
inventory  data  or  customer  profrt^ltty 
information  -  wrthoul  the  need  for  a  large 
and  costly  data  warehouse 
But  O^n  rates  that  many  of  the  thin- 
dienl  berrefits  of  Web  services  are  likely 
years  away  from  commercial  avaitabAty 
because  of  the  Hmttations  of  current  wire¬ 
less  network  cornectiorts 
Vet  the  mamage  of  Web  services  and 
mobile  devices  is  inevitable,  he  says,  be¬ 
cause  on-lhe^o  employees  wi  n^  ac¬ 
cess  to  various  types  of  corporate  data 
behind  the  hrewal  Vteb  services  will  pro¬ 
vide  a  means  (or  companies  to  mfegrale 
enterprse  appiicatiorts  and  mobile  devices 
without  spending  big  bucks  on  integration 
projects. 

"With  Web  services,  you  can  provide 
access  to  applications  [from  mobile  de¬ 
vices]  without  having  to  consoWate  data 
from  wildty  different  formats  and  databas¬ 
es.*  Owen  says. 

-BobVKjtino 


much  easier  to  [link  systems)  because  of  the  open 
standards,"  says  Toby  Redshaw,  corporate  vice  presi¬ 
dent  of  IT  strategy,  architeaure  and  e-business  at 
Motorola  Inc. 

“When  you  map  the  supply  chain  today,  starting 
with  source  material,  all  Uk  way  to  product  repair, 
you’ll  find  there  are  10  to  12  disconnected  processes 
with  big  gaps  and  integration  Issues,"  such  as  how  to 
handle  product  repairs  and  returns,  Redshaw  says. 
Web  services  will  help  trading  partners  fill  those 
gaps  by  providing  better  communication  among  their 
supply  chain  applications,  he  adds. 

In  many  cases,  transactions  among  trading  part¬ 
ners.  such  as  ordering  supplies.  ftjJfiUmeni.  billing 
and  inventory  management,  will  be  wholly  automat¬ 
ed,  says  Mike  Gilpin,  an  analyst  at  Giga  Information 
Group  Inc.  For  example,  a  retailer  could  develop  a 
standardized,  automated  program  for  ordering  goods 
and  then  use  the  pre^raro  to  allow  its  purcharing  ap¬ 
plications  to  woiic  with  suppliers'  inventory  systems. 

This  will  be  a  less  complex  and  time-consuming 
endeavor  than  it  would  be  witiiout  Web  services. 
Automation  will  also  help  reduce  costs,  Gilpin  says. 
One  of  the  impediments  to  B2B  commerce  has  been 


cost,  and  1  think  costs  will  be  reduced  gradually  by 
Web  services,"  he  says 

In  addition.  Gilpin  says,  the  combination  of  Web 
services  and  technologies  such  as  radio  frequency 
identification  lags  will  enable  companies  to  track  the 
location  of  products  in  real  time  as  the>'  move 
through  the  supply  chain,  while  gathering  data  about 
o\-eraU  demand,  purchasing  trends  and  inventory. 

Within  three  years,  Redshaw  prcdict.s.  imelligent 
Web  services  will  emerge  that  completely  automate 
a  lot  of  supply  chain  management  functions,  such 
as  handling  customer  queries  from  call  centers  or 
feeding  customer-retention  data  to  salespeople 
in  real  time. 


Application  Deveiopnient 

Industry  expens  ex¬ 
pect  Web  services  to 
speed  up  and  simplify 
application  develop¬ 
ment.  allowing  IT  de¬ 
partments  to  not  only 
create  new  applications  in  less  time,  but  also  to  de¬ 
liver  them  to  more  internal  and  enernal  users. 

"You  won't  see  a  whole  new  array  of  things  that 
you  couldn't  do  before  because  of  Web  services,  but 
you’ll  see  application  development  crubled  much 
more  quickly."  says  Larry  Calabro.  a  partner  in  the 
technology  integration  unit  at  Deloitte  Consulting  in 
Chicaga  Calabro  says  Web  services  standards  will 
make  it  easier  for  companies  to  build  applications 
that  more  effectively  integrate  existing  software 
packages  such  as  CRM  and  ERP.  "The  focus  of  appli¬ 
cation  development  will  be  to  make  all  those  assets 
work  together  to  better  meet  business  goals  and  bet¬ 
ter  serve  customers,"  he  says. 

Web  services  will  make  it  easier  for  less-skilled 
people  to  more  rapidly  build  applications  through 
their  standardized  application  development  tools, 
says  Michael  Blcchar,  an  analyst  at  Gartner  Inc. 

"Web  services  sundards  like  XML  and  UML  are 
providing  much  more  automation"  in  the  process  of 
developing  and  sharing  applications,  Blechar  says. 

The  ability  to  recycle  software  code  is  another 
benefit,  he  says,  pointing  out  that  teams  of  devel¬ 
opers  will  be  able  to  reuse  components  and  place 
them  into  applications,  rather  than  having  to  rewrite 
existing  code.  "The  whole  philosophy  of  Web 
services  is  based  on  reuse,"  Blechar  says.  “Clients, 
supply  chain  partners  and  people  inside  the 
organization  will  be  able  to  reuse  components." 

Wanzek  of  American  Equity  ^rees.  "As  XML 
becomes  more  of  a  common  tool"  he  says,  "it  will 
allow  us  to  provide  quicker  and  more  reusable 
application  develi^aient."  I 


Violirto  is  a  freelance  writer  in  Massapequa  Park,  NY. 
Special  projects  editor  £Uen  Fanmrtg  contributed 
to  this  article. 
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TopRve 

PerceivM  Benefits 

What  benefits  do  you  expect  to  see 
from  adoption  erf  Web  services 
applications? 

kttpRMd  flilciercv/process  speed  46% 
Cost  radudlon  4t% 
hnptMed  customer  service  25% 
Improved  connectivity  20% 

Batter  systems  integration  20% 

Base;  Survey  ot  262  global  executives 
(75%  were  CIOs),  who  provided  unaided 
responses;  muNiple  responses  allowed 


Implementation  Stages 

At  what  stage  of  implmenlation  are 
you  with  Web  services  technotogres? 


Completed 

protect 


Piloting 

No  plans, 
dpnl  know 


Rollout 


Consrijenng 


Base:  Telephonesurveyof677ITdeceion- 
makers  at  North  American  companies 


Top  Seven  Applications 

The  most  common  Web  services  appli' 
catiofts  currently  being  implenient^; 

- *-  *■- 

tflipoyw  DOfienB 

E'ommefce42% 

CflMSMb 

Si<«lvcMn33% 

KDOHMoi  management  32% 
MBnMllnar>ce2S% 

Orti  storage  24% 

Bast:  Stffvey  of  282  global 
exeoAves  (7M  were  CIOs): 
muibple  responses  slowed 


MARK  MALI. 

Web  Services’ 
Sharp  Edge 

WEB  SERVICES  AREN’T  SLICED  BREAD,  nor  are  they  the  best  things  since. 

They’re  just  sharper  knives  in  your  IT  kitchen.  And  as  with  sharp  knives, 
you  have  to  be  careful  not  to  hurt  yourself  with  them. 

Web  services  give  you  a  higher  level  of  abstraction  than  an  application 
ser\'er  or  middleware,  such  as  CORBA.  That  abstraction  makes  it  easier 
for  software  developers  to  program  relationships  among  disparate  systems,  because 
Web  services  offer  a  broader  (but  far  from  complete,  mind  you)  set  of  standards. 


Web  services  are  the  ideal  U)t»l  for  tying  creaky  but 
essential  mainframe  software  to  your  spunkier  e-com- 
mercc  applications.  One  integrator  told  me  that  25%  of 
his  company’s  integration  work  is  based  on  Web  ser¬ 
vices.  and  that  percentage  is  grow  ing  quickly. 

No  wonder.  Web  services  make  things  so  easy, 
lust  output  everything  in  XML.  and  you’re  halfway 
home,  right? 

Sorry.  NtX  quite. 

What  XML  formal  is  your  application 
asking  for  again?  CXML,  the  Commerce 
XML?  Would  that  be  V'ersion  1.0, 1.1  or  1.2? 

Or  was  that  ('ML.  the  Chemical  Markup 
Language?  Maybe  it  was  BPML?  eXML? 

Or  my  personal  favorite.  YML.  the  Why- 
Markup  Language? 

If  yv>u’re  using  Web  services,  you  still 
need  to  be  keenly  aware  of  the  format  of  the 
services  you  intend  to  consume  or  share 
w  ithin  applications.  You  can't  simply  grab 
the  data  and  assume  liuii  the  format  makes 
sense  for  your  purposes.  XML  is  gmtd.  but 
it’s  not  chat  good. 

Mark  Pezcl.  a  senior  management  consultant  at 
TUSC,  a  software  consultancy  in  Lombard.  III.,  elo¬ 
quently  summed  up  XML  to  me  last  month:  "It's  intel¬ 
ligent  AS(:iL"  Very  cool.  But  not  sliced  bread. 

In  addition  to  the  complex  XML  formats  developers 
face,  IT  operations  are  forced  to  wrestle  with  the  major 
pmbiem  of  Web  services  management.  As  Web  services 
proliferate  and  bcctimc  easier  to  build  and  deploy,  their 
application  dependencies,  their  requirements  for  quali¬ 
ty  tif  scrx-ice  and  service-level  agreements,  and  their 
performance  management  will  fall  on  IT's  shoulders. 

If  you  don’t  control  the  source  of  the  service  your 
application  needs  in  order  to  be  fully  functional,  how 
can  you  possibly  make  prt^mises  about  quality  of  ser¬ 
vice  or  service-level  agreements? 

Well  you  can’t  without  ironclad  agreements  with 
your  W'cb  services  provider.  That’s  not  impossible;  it's 
just  another  item  on  your  to-do  list. 


To  further  aggravate  the  management  problem, 
there  are  no  Web  services  management  standards  — 
only  fledgling  products  and  no  best-practices  track 
record  to  fall  back  on.  You're  on  your  own. 

Tlien  there  arc  the  vendors,  which  are  the  primary 
drivers  behind  the  Web  services  movement.  They've 
already  begun  to  squabble  publicly  about  how  far  to 
push  Web  services  standards.  Most  of  the 
smaller  companies  involved  are  in  agree¬ 
ment  that  more  standards  are  necessary: 
the  bigger  ones  less  so.  just  like  with  every 
other  vendor-driven  standards  process, 
from  802.11  to  database  adapters. 

Security  is  another  potential  problem. 
Although  I’ve  been  assured  that  Wtb  ser¬ 
vices  security  has  been  well  designed,  we 
really  don’t  know  yet  because  there  are  no 
significant  Web  services-based  applica¬ 
tions  being  used  outside  corporate  fire¬ 
walls.  Once  that  happens  and  the  crackers 
(virtually)  get  their  grubby  fingers  on 
them,  we'll  see  how  strong  the  security 
really  is.  The  fact  that  Web  services  arc.  to  date,  a  be- 
hind-the-firewal!  technology  speaks  volumes  on  IT’s 
wise  reluctance  to  let  them  loose  on  the  Internet  be¬ 
fore  wider  testing  and  deployment. 

All  that  skepticism  aside.  I  think  Web  services  are  a 
huge  step  in  the  direction  of  IT  standards  that  will 
help  eliminate  information  islands  or  silos  (choose 
ytnir  favorite  metaphor).  They  follow  in  the  honorable 
tradition  of  Ethernet.  ODBC.  Java  and  other  technolo¬ 
gies  that  bridge  the  natural  differences  among  com¬ 
puting  systems.  When  these  other  standard  technolo¬ 
gies  emerged,  it  didn't  mean  IT  managers  could  sit 
back  with  a  cold  one  in  hand  and  ignore  networking, 
database  or  application-integration  problems.  They 
just  solved  them  with  different,  more  advanced  tools. 

And  that's  all  Web  services  arc  or  ever  will  be: 
another  tool  for  you  to  help  users  sail  out  to  those 
islands  or  knock  down  those  silos.  Just  don’t  cut 
yourself  with  them.  I 
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Web  Services’ 
Sharp  Edge 

WEB  SERVICES  ARENT  SLICED  BREAD,  nor  are  they  the  best  things  since. 

They’re  just  sharper  knives  in  your  IT  kitchen.  And  as  with  sharp  knives, 
you  have  to  be  careful  not  to  hurt  yourself  with  them. 

Web  services  give  you  a  higher  level  of  abstraction  than  an  application 
server  or  middleware,  such  as  CORBA.  That  abstraction  makes  it  easier 
for  software  developers  to  program  relationships  among  disparate  systems,  because 
Web  services  offer  a  broader  (but  far  from  complete,  mind  you)  set  of  standards. 


Web  services  are  the  ideal  tool  for  tying  creaky  but 
essential  mainframe  software  to  your  spunkier  e-com¬ 
merce  applications.  One  integrator  told  me  that  25%  of 
his  company's  integration  work  is  based  on  Web  ser¬ 
vices.  and  chat  percentage  is  growing  quickly. 

No  wonder.  Web  services  make  things  so  easy, 
fuse  output  everything  in  XML,  and  you're  halfway 
home,  right? 

Sorry.  Not  quite. 

What  XML  format  is  your  application 
asking  for  again?  CXML,  the  Commerce 
XML?  Would  that  be  Version  1.0,  LI  or  L2? 

Or  was  that  CML.  the  Chemical  Markup 
Langttage?  Maybe  it  was  BPML?  eXML? 

Or  my  personal  favorite,  YML.  the  Why 
Markup  Language? 

If  you’re  using  Web  services,  you  still 
need  to  be  keenly  aware  of  the  format  of  the 
services  you  intend  to  cottsume  or  share 
within  applications.  You  can’t  simply  grab 
the  data  and  assume  that  the  format  makes 
sense  for  your  purposes.  XML  is  good,  but 
it’s  not  that  good 

Mark  PezeL  a  senior  management  consultant  at 
TUSC,  a  software  consultancy  in  Lombard.  QL.  elo¬ 
quently  summed  up  XML  to  me  last  month:  “It’s  intel¬ 
ligent  ASCII."  Very  cool.  But  not  sliced  bread. 

In  addition  to  the  complex  XML  formats  developers 
face.  IT  operations  are  forced  to  wrestle  with  the  mafor 
problem  of  Web  services  managemenL  As  Web  services 
proliferate  and  become  easier  to  build  and  deploy,  their 
application  dependencies,  their  reqtiirements  for  quali¬ 
ty  of  service  and  service-level  agreements,  and  their 
performance  management  will  fall  on  ITs  shoulders. 

If  you  don’t  control  the  source  of  the  service  your 
application  needs  in  order  to  be  folly  fonctionaL  how 
can  you  possibly  make  promises  about  quality  of  ser¬ 
vice  or  service-level  agreements? 

WeU.  you  can’t  without  ironclad  agreements  with 
your  Web  services  provider  That’s  not  impossible:  it's 
}ust  attother  item  on  your  to-do  Ust 


To  further  aggravate  the  management  probleiit, 
there  are  no  Web  services  management  standards  — 
only  fledgling  products  and  no  best-practices  track 
record  to  fall  back  on.  You’re  on  your  own. 

Then  there  are  the  vendors,  which  are  the  primary 
drivers  behind  the  Web  services  movement.  They've 
already  begun  to  squabble  publicly  about  how  fai  to 
push  Web  services  standards.  Most  of  the 
smaller  companies  involved  are  in  ^ree- 
ment  that  more  standards  are  necessary: 
the  bigger  ones  less  so.  just  like  with  every 
other  vendor-driven  standards  process, 
from  802.11  to  database  adapters. 

Security  is  another  potential  problem. 
Although  Fve  been  assured  that  Web  ser¬ 
vices  sectirity  has  been  well  designed,  we 
really  don't  know  yet  because  there  are  no 
significant  Web  services-based  applica¬ 
tions  being  used  outside  corporate  fire¬ 
walls.  Once  that  happens  and  the  crackers 
(virtually)  ^t  their  grubby  fingers  on 
them,  we’ll  see  bow  strong  the  security 
really  is.  The  fact  that  Web  services  are.  to  date,  a  be- 
hind-the-firewall  technology  speaks  volumes  on  ITs 
wise  reluctance  to  let  them  loose  on  the  Internet  be¬ 
fore  wider  testing  and  deployment. 

All  that  skepticism  aside,  I  think  Wiri>  services  are  a 
huge  step  in  the  direction  of  IT  standards  that  will 
help  eliminate  information  islands  or  silos  (choose 
your  favorite  metaphor).  They  follow  in  the  honorable 
tradition  of  Ethernet.  ODBC.  Java  and  other  technolo¬ 
gies  that  bridge  the  natural  differences  among  com¬ 
puting  systems.  When  these  other  standard  technolo¬ 
gies  emerged,  it  didn’t  mean  IT  managers  could  sit 
back  with  a  cold  one  in  hand  and  ignore  networiung, 
database  or  applicatkm-integration  problems.  They 
just  solved  them  with  different,  more  advanced  tools. 

And  that’s  all  Web  services  are  or  ever  will  be: 
another  tool  for  you  to  help  users  sail  out  to  those 
islands  or  knock  down  those  sUos.  Just  don’t  cut 
)«urself  with  them.  I 
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These  pioneers  are 
using  Web  services 
to  make  valuable 
connections  with 
customers,  part¬ 
ners  and  suppliers. 
Here’s  what  they’ve 
learned  out  on 
the  bleeding  edge. 
By  Preston  Gralla 

WEB  SERVICES  may  be  the  latest  hot  topic 
of  conversation,  but  for  many  compa¬ 
nies,  that’s  all  the  technology  amounts 
to  —  talk.  Not  so  for  four  pioneering 
companies  where  Web  services  are  al¬ 
ready  in  operation  and  payii^  big  dividends.  We 
talked  with  IT  manners  at  these  organizations  about 
how  they’ve  learned  to  exploit  the  technology  by 
reusing  Web  service  modules  and  better  integratii^ 
their  own  internal  business  processes  with  those  of 
external  partners. 


Bank  Cuts  Production  Tme, 

Speeds  Payment  Defivery 

For  years.  Wells  Fargo  Sc  Co.’$  wholesale  banking  op¬ 
erations  dealt  with  a  polyglot  of  methods  for  han¬ 
dling  wire  transfers  and  interbank  electronic  pay¬ 
ments  for  its  100  largest  corporate  customers.  Those 
customers  sent  payment  instructions  in  formats  such 
as  EDI,  flat  files  and  XML,  wdiich  forced  Wells  Fargo 
to  build  separate  channels  to  tie  each  customer’s  data 
into  the  bank’s  back-end  systems. 

No  longer.  The  banking  giant’s  ePayment  Manager 
Web  services  module  now  examines  and  parses  pay¬ 
ment  data  in  a  wide  variety  of  formats  and  sends  it  to 
Wells  Fargo’s  back-end  systems,  where  payments  are 
processed  and  customer  acknowledgments  are  sent. 

Rather  than  build  a  custom  setup  for  each  cus¬ 
tomer,  existing  Web  service  modules  are  snapped  to¬ 
gether  in  Lego-like  fashion.  “Using  Web  services  re¬ 
duces  (account  setup]  times  by  30%  to  50%  for  each- 
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new  customer  we  add."  says  Steve  Ellis,  executive 
vice  president  of  the  Weils  Fargo  wholesale  services 
group  in  San  Francisco.  The  bank  saves  development 
time  and  money,  and  customers  don’t  have  to  spend 
dme  and  money  altering  their  data  formats. 

The  bank  started  woik  in  April  2002,  and  the  sys¬ 
tem  was  in  operation  by  November  of  that  year. 

LESSONS  LEARNED:  Ellis’  advice  for  others  looking  to 
build  Web  services  has  nothing  to  do  with  technolo¬ 
gy  and  everything  to  do  with  management.  "We 
niake  the  technology  and  the  business  people  sit  to¬ 
gether  so  they  understand  one  another  before  we  be¬ 
gin."  he  says.  "That’s  the  most  important  thing  you 
can  da  You  need  the  business  people  to  ‘get’  IT.  and 
the  IT  people  to  ‘get’  business." 

VENDOR  AND  TOOL:  webMetbods  Inc.’s  webMethods 
Integration  Platfomt 


Hotifaf  Integrates  Wth  Business 
Rartnafs.  Cub  Telecommunications  Costs 

At  Things  Remembered  Inc.,  the  largest  personalized 
gift  retailer  in  the  US.  Web  services  are  helping  to 
speed  up  deliveries  to  customers.  Before  the  Web 
services  technology  was  in  place,  when  a  customer 
ordered  a  monogrammed  vase  from  Things  Remem- 
bered’s  online  partner  1-800-Flowersxom  Inc.,  the 
Highland  Heists.  Ohio-based  gift  retailer  had  to  pull 
that  order  manually  from  the  florist's  Web  rite.  That 
process  took  time  and  didn’t  tie  the  order  into 
Things  Reraembered’s  real-time  inventory  system. 

To  solve  the  problem,  parent  company  Cc^  National 
Corp.  in  Mayfield  Heists.  Ohm,  built  a  Web  servi^ 
module  that  directly  ties  the  1-800-Flowers.com  rite 
to  the  Things  Remembered  order-entry  systems. 

Now  that  the  company  has  built  a  basic  tool  kit  of 
Web  services  objects,  it  will  reuse  them  as  part  of  a 
larger  Web  services  Initiative,  says  Marie  Fbdor,  di¬ 
rector  of  e-business  at  Cole  National  That  initiative 
will  include  integrating  with  other  online  business 
(partners,  he  says. 

In  addition.  Web  services  will  eventually  be  used 
at  point-of-sale  systems  in  the  760  Tlungs  Remem¬ 
bered  retail  stores,  says  Fbdor.  Cuirently.  managers 
must  dial  into  the  Cole  internal  network  to  check  on 
inventory.  The  stores  also  connect  to  the  Internet 
through  an  Internet  service  provider.  But  because  a 
W^  services  application  has  already  been  built  that 
ties  into  the  inventory  system,  the  Internet  connec¬ 
tions  will  eventually  be  used  to  check  on  inventory. 
That  will  save  telecommumcations  costs  and  reduce 
the  time  it  takes  to  confum  customer  orders,  be  says. 

LESSONS  LEARNED:  The  key  to  developing  a  Web  ser¬ 


vices  application,  Fodor  says,  to  make  whatever 
you  build  reusable,  so  that  you  can  plug  it  in  for  oth¬ 
er  purpo$<:$.  We  built  ours  with  that  mind-set  and 
it’s  paying  off." 

VENDOR  AND  TOOL  IBM’s  WebSphere. 


Access  to  Ratieiil  kiformation 

With  an  enormous  amount  of  data  and  disparate 
computing  systems,  the  health  care  industry  is  a  nat¬ 
ural  Hi  for  Web  services.  Providence  Health  System, 
a  S33  billion  health  care  provider  in  Seattle,  is  a  case 
in  point  It  uses  Web  services  for  enterprise  applica¬ 
tion  integration  and  to  build  small  CRM  systems.  As 
a  result.  Providence  cut  its  development  costs,  de¬ 
creased  the  amount  of  time  it  takes  to  bring  a  oe«' 
service  for  customers  to  market  by  30%  to  50%  and 
now  provides  patients  and  health  care  woriiers  im¬ 
mediate  access  to  patient  information. 

Mike  Reagin.  Providence’s  director  of  research  and 
development,  says  the  company  "is  very  distributed, 
and  so  we  have  many  in-house  legacy  systems,  from 
old  Mumps  systems  to  new  Micr^ft  ones,  and  we 
needed  a  consistent  way  of  aggregating  data  from  all 
of  them." 

The  company  started  development  work  on  Web 
services  last  spring  and  had  its  first  module  working 
within  four  weeks  ~  a  far  faster  turnaround  time 
than  for  projects  using  other  types  of  technology. 
Reagin  says.  Patients  can  now  look  up  benefits  infor¬ 
mation  online  and  use  a  portal  for  transactions.  Prov¬ 
idence  has  relationships  with  WebMD.com  and 
Wellmed.com.  so  when  patients  log  onto  those  Web 
rites,  all  their  personal  information  (height,  weight, 
date  of  birth)  is  already  populated  via  Web  services 
modules  that  link  to  Providence’s  back-end  systems. 

Similarty,  doctors  can  connect  to  a  portal  that  ag¬ 
gregates  patient  information  from  all  of  Providence's 

I  We  make  the  technology 

_ 'and  the  business  people 

sit  together  so  they  understand 
one  another  before  we  begin. 
That’s  the  most  important  thing 
you  can  do.  You  need  the  busi¬ 
ness  people  to ‘get’ IT.  and  the 
IT  people  to  ‘get’  business. 
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clinics,  hospitals  and  offices.  The  portal  "improves 
cUnical  care  and  patient  care,  and  hopefully  reduces 
costs  and  increases  efficiencies,"  Reagin  says. 

LESSONS  LEARNED:  Reagin  recommends  getting  the 
right  tool  set  and  management  platform  in  place  be¬ 
fore  launching.  "Going  into  developmeni  we  were 
worried.  'What  if  wc  have  a  hundred  Web  services 
out  there,  how  would  we  manage  them  all?  Would  it 
gel  chaotic?* "  he  says.  By  first  choosing  a  platform, 
be  says  he’s  been  able  to  keep  track  of  all  the  Web 
services  modules  and  reuse  existing  ones. 

VENDOR  ANO  TOOL  Infravio  Inc.’s  Web  Services  Man¬ 
agement  System. 

Student  Clearinglioise 
Benefits  Fnm  bimeilate  KOI 

The  National  Student  Clearinghouse  (NSC)  has  de¬ 
veloped  Web  services  that  sig^icantly  cut  the  time 
it  takes  for  employers,  loan  preniders  and  others  to 
verify  that  job  applicants  bold  degrees  from  the  col¬ 
leges  they  claim  to  have  anended.  The  Herndon.  Va.- 
based  nonprofit  association  expects  to  pay  back  the 
entire  cost  of  its  Web  services  development  in  a  sin¬ 
gle  month. 

The  NSC  maintains  a  database  of  student  records 
from  more  than  2.700  schools  and  verifies  student 
records  for  a  fee.  Its  database  is  accessed  more  than 
100  million  times  annually,  mostly  by  large  screening 
firms,  says  Marie  Jones,  NSC’s  vice  president  of  mar¬ 
keting  and  business  development. 

The  problem  had  been  that  those  screening  firms 
didn’t  have  direct  access  to  the  NSC  database  and 
would  open  a  record  in  their  own  databases  and  call 
the  school  directly  with  a  veriftcation  request  in¬ 
stead  of  gmng  through  the  NSC  If  they  did  contact 
the  NSC  directly,  they  bad  to  call  on  t^  phone  and 
ask  staff  members  to  verify  the  infonnation.  an  ex¬ 
pensive  and  labor-intensive  process. 

The  solution?  NSC  built  a  Web  services  applica¬ 
tion  that  ties  screening  company  databases  directly 
into  the  NSC  database.  Jones  estimates  riut  develop¬ 
ment  costs  were  S2SX>00,  which  can  be  recouped  in 
one  month  in  increased  revenue  and  lowered  costs. 

LQSONS  LEARNED:  Jones'  advice  concerns  business 
practices,  not  technology.  "What  surprised  me  the 
most  is  that  there  really  haven't  been  technical  issues 
—  the  technology  itself  is  almost  trivial"  he  says. 
"Most  important  is  to  make  sure  that  the  business 
model  is  right  —  make  clear  why  you  should  do  this 
with  a  trading  fiartner.  and  calculate  your  ROl  ahead 
of  lime." 

VENDOR  AND  TOOL  Flamenco  Networks  Inc.'s  Web 
Services  Management  software.  I 

Cm/lo  is  o/reelonce  writer  in  Cambridge.  Mass. 
Contact  him  at  preston(§)grallaxom. 
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Here’s  an  executive  guide 
that  explains  XML,  SOAP 
and  Web  services  —  in  plain 
English.  By  Frank  P  Coyle 


XMI, 

Web  Services, 
and  the 

I>ataRevolution 


The  web  and  xml  have 
changed  our  perspective 
about  what  data  can  do.  In¬ 
stead  of  regarding  data  as 
something  to  be  stored  in  a 
database  and  shuttled  across  eyisring 
networks  by  systems  locked  in  a  tight 
embrace,  the  XML  family  of  standards 
allows  data  to  move  imly  about  the 
loosely  coupled  Web  and  create  new 
business  opportunities. 

XML  is  a  meta-language  (literally  a 
language  about  languages)  defined  by 
the  World  Wide  Web  Consortium 
(W3C),  one  of  the  main  organizations 
driving  the  push  to  open  Web  stan¬ 
dards.  In  its  simplest  sense.  XML  is  a 
set  of  rules  and  guidelines  for 
describing  structtired  data  in 
plain  text  rather  than  in  pro¬ 
prietary  binary  representa¬ 
tions.  However,  as  a  phenome¬ 
non.  XML  goes  beyond  its  technical 
specification.  Since  its  standardization 
by  the  W3C  in  199S.  XML  has  been  the 
driving  force  behind  numerous  other 
standards  and  vocabularies  that  are 
forging  a  fundamental  chaise  in  the 
software  world. 

^XML's  short  history,  its  influence 
Iwobeen  felt  in  three  waves,  hrom  in- 
■specific  vocabularies,  to  hori- 
ital  industry  applications,  to  proto- 
ils  that  describe  how  businesses  can 
:hange  data  across  the  Web.  One  of 
the  key  developments  has  been  SOAP, 
the  protocol  that  has  opened  the  Web 
to  program-to-program  communica¬ 
tion  and  is  the  basis  for  Web  services. 

The  XML  Advantage 

XML  has  had  an  impact  across  a  broad 
range  of  areas.  Why? 

■  XML  flies  are  human-readable. 
XML  was  designed  as  text  so  that,  in 
the  worst  case,  someone  can  always 
read  it  to  figure  out  the  content,  llus 
isn’t  the  case  with  binary  data  formats. 

■  Widespread  industry  support  ex¬ 
ists  for  XML.  Numerous  tools  and  util¬ 
ities  are  beii%  provided  with  Web 
browsers,  databases  and  operating  sys¬ 
tems.  makii:^  it  easier  and  less  expen¬ 
sive  for  small  and  medium-size  organi¬ 
zations  to  import  and  export  data  in 
XML  format. 


■  Major  relational  databases  now 
have  the  native  capability  to  read  and 
generate  XML  data. 

■  A  large  family  of  XML  support 
technolt^es  is  available  for  the  inter¬ 
pretation  and  transformation  of  XML 
data  for  Web  page  display  and  report 
generation. 

XML'S  capability  to  work  with  other 
technologies  has  opened  up  new  possi¬ 
bilities  for  exchangii^  business  i^or- 
mation  across  the  Web.  essentially  cre¬ 
ating  an  extended  enterprise.  One  as¬ 
pect  of  this  new  extended  enterprise  is 
the  emergence  of  Web  services.  For 
some,  Web  services  represent  the  next 
evolutionary  step  for  the  Web.  extend¬ 
ing  it  from  a  network  that  pro¬ 
vides  services  to  humans  to 
one  that  provides  services  to 
software  looking  to  connect 
with  other  software.  Web  ser¬ 
vices  is  an  ambitious  initiative  that  is 
moving  the  Web  to  new  levels  of  soft- 
ware-to-software  interaction  uWle  try¬ 
ing  to  fulfill  object  technology’s 
promise  of  reusable  con^neots. 

Web  Services  101 

Web  services  rely  on  several  key  under¬ 
lying  technologies,  in  particular  Uni¬ 
versal  Description,  Discovery  and  Inte¬ 
gration  (UDDI);  Web  Services  Descrip¬ 
tion  Language  (WSDL);  and  SOAP. 

■  UDDI  is  a  protocol  for  describing 
Web  services  components  that  allows 
businesses  to  register  with  an  Internet 
directory  so  they  can  advertise  their 
services  and  so  companies  can  fmd 
one  another  and  carry  out  transactions 
over  the  Web. 

■  WSDL  is  an  XML  format  for  de- 
scribii^  bow  one  software  system  can 
connect  and  utilize  the  services  of  an¬ 
other  software  system  over  the  Inter¬ 
net  It  supports  Web-based  computing 
services  t^t  target  computer  pro¬ 
grams  rather  than  human  users. 

■  SOAP  is  the  XML  glue  that  lets 
clients  and  providers  talk  to  each  other 
and  exchange  XML  data.  SOAP  builds 
on  XML  and  common  Web  protocols 
(HTTP.  RIe  Ttansfer  Protocol  and 
Simple  Mail  IVansfer  Protocol)  to  en¬ 
able  communication  across  the  Web. 
SOAP  brings  to  the  table  a  set  of  rules 
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for  moving  data,  either  directly  in  a 
point-to-point  fashion  or  by  sending 
the  data  through  a  message  queue 
intermediary. 

One  of  the  main  implications  of 
SOAP  is  a  change  in  how  we  thtnif 
about  distributed  computing.  Prior 
to  SOAP,  there  were  three  basic  op¬ 
tions  for  doii^  distributed  computing: 
Microsoft  Corp.’s  Distributed  Compo¬ 
nent  Object  Model.  Java’s  Remote 
Method  Invocation  or  Object  Manage¬ 
ment  Group  lnc.'s  Common  Object  Re¬ 
quest  Broker  Architecture.  These  tech¬ 
nologies  are  still  in  widespread  use. 
Their  drawback  is  that  th^  limit  the 
potential  reach  of  the  enterprise  to 
servers  that  share  the  same  object  in¬ 
frastructure.  With  SOAP,  however,  the 
potential  space  of  interconnection  is 
the  entire  Wd),  which  is  why  there  is 
such  intense  interest  in  technologies 
that  can  leverage  the  power  of  SOAP. 
One  of  these  technology  efforts  is 
Web  services. 

The  Web  services  framewoiic  is  both 
a  process  and  a  set  of  protocols  for 
fmding  and  connecting  to  software  ex¬ 
posed  as  services  over  the  Web.  By  as¬ 
suming  a  SOAP  foundation.  Web  ser¬ 
vices  can  concentrate  on  what  data  to 
exchange  instead  of  worrying  about 


bow  to  get  it  from  Point  A  to  Point  B. 
which  is  the  job  of  SOAP.  To  make 
things  even  easier,  SOAP  also  defines 
an  envelope  to  carry  XML  and  a 
convention  for  doing  remote  proce¬ 
dure  calls  so  a  service  can  advertise 
“call  me  here,”  and  a  program  will  be 
able  to  do  so  without  concern  for  lan¬ 
guage  or  platform. 

A  Web  service  can  be  anything,  from 
a  movie  review  service  to  a  real-time 
weather  advisory  to  an  entire  hotel- 
and  airiine-bool^  package.  The  Web 
services  infrastructure  ensures  that 
even  services  from  differem  vendors 
will  interoperate  to  create  a  complete 
business  process.  Web  services  take 
the  object-oriented  vision  of  assem¬ 
bling  software  from  component  build¬ 
ing  blocks  to  the  next  level  With  Web 
services,  however,  the  emphasis  is  on 
the  assembly  of  services,  wdiich  may  or 
may  not  be  built  on  object  technology. 

Web  services  represent  an  industry¬ 
wide  response  to  Ae  need  fcM^  a  flexible 
and  efiflcient  business-collaboration  en- 
viroQmenL  Technically,  it’s  a  way  to 
link  loosely  coupled  systems  without 
binding  them  to  a  particular  program¬ 
ming  language,  omiponent  model  or 
platform.  Practically,  H  represents  a  dis¬ 
crete  business  process  with  supporting 


protocols  that  functioDS  by  describii^ 
and  exposing  itself  to  users  of  the  Web 
and  being  invoked  by  a  remote  user  and 
returning  a  response.  It  includes: 

■  Oncrtiino:  A  Web  services  applica¬ 
tion  describes  its  functionality  and  at¬ 
tributes  so  that  other  applications  can 
figure  out  how  to  use  it. 

■  Exposing:  Web  services  register 
with  a  repository  that  contains  a 
■^ivhite  pages”  holding  basic  service- 
provider  information:  a  “yellow  pages” 
listing  services  by  category:  and  a 
“green  pages”  describii^  bow  to  con¬ 
nect  and  use  the  services. 

■  Being  kivolwt:  When  a  Web  service 
has  been  located,  a  remote  application 
can  invoke  the  service. 

•  Ratvning  a  reaporae:  When  a  ser¬ 
vice  has  been  invoked,  results  are  re¬ 
turned  to  the  requesting  application. 

The  driving  force  behind  Web  ser¬ 
vices  is  the  desire  to  allow  businesses 
to  use  the  Internet  to  publish,  discover 
and  aggregate  other  Web  services  us¬ 
ing  the  global  underpinning  of  SOAP. 
The  fact  that  the  delivery  of  Web  ser¬ 
vices  requires  only  the  Internet  means 
that  legacy  code  and  data  as  well  as  ob¬ 
ject  systems  can  plug  into  Web  ser¬ 
vices  frameworks. 

Opportunity  and  Risk 

Web  services  represent  a  new  model 
of  software  distribution  and  intercon¬ 
nection  based  on  the  notion  of  services 
globally  available  over  the  Web  rather 
than  object-to-object  connections  over 
limited  networks.  Because  of  the  glob¬ 
al  scope  of  Web-based  services,  the  po¬ 
tential  financial  upside  is  extremely  at¬ 
tractive.  Financial  mcentives  include 
new  revenue  of^xutunities  through 


CIIHTEiMUIIna.>M  39 


creation  of  private  trading  networks, 
increased  revenue  through  expanded 
distribution  charmels,  and  reduced  in¬ 
ventory  and  transaction  costs. 

Web  services  also  promise  improved 
collaboration  with  customers,  partners 
and  suppliers.  They  provide  opportu¬ 
nities  for  reducing  integration  time 
and  expense  compared  with  existing 
enterprise  application  integration  ap¬ 
proaches.  There  is  also  opportunity  for 
improved  supply<ham  efliciencies: 
quick  response  to  changing  market 
conditions  and  customer  preferences 
by  utilizing  loosely  coupl^  modular 
services:  and  improved  customer  ser¬ 
vice  by  allowing  customers  and  trad- 
ii^  partners  access  to  core  systems. 

However,  the  Web  services  vision  is 
still  new  and  not  without  risk.  Despite 
the  significant  potential,  it  remains  to 
be  seen  bow  Wrt>  services  will  play  out 
on  a  large  scale.  It's  expected  that  Web 
services  will  begin  to  play  a  role  in  the 
delivery  of  simple  services,  but  until 
the  teclmology  matures,  complex  trad¬ 
ing-partner  interactioas  will  still  re¬ 
quire  an  upfront  human  element  to 
solidify  agreements.  # 

Adapted,  with  permission,  from  the  book 
XML,  W^  Services,  and  the  Data  Revo- 
lution,  by  Frank  P.  Coyle  (Addison- 
Wesley. 2002).  Coyle  is  director  of  the 
software  eT\^neerwgpropxtm  at  South¬ 
ern  Methodist  University  in  Dallas. 
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Web  Services,  Sii 


Here’s  an  executive  guide 
that  explains  XML,  SOAP 
and  Web  services  —  in  plain 
English.  Frank  P  Co\  le 
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XML, 

Web  Services, 
and  the 

Data  Revolution 


Coyle 


The  web  and  xml  have 
changed  our  perspective 
about  what  data  can  do.  In¬ 
stead  of  regarding  data  as 
something  to  be  stored  in  a 
database  and  shuttled  across  existing 
networks  by  systems  locked  in  a  tight 
embrace,  the  XML  family  of  standards 
allows  data  to  move  freely  about  the 
loosely  coupled  Web  and  create  new 
business  opportunities. 

XML  is  a  meta-language  (literally  a 
language  about  languages)  defined  by 
the  World  Wide  Web  Consortium 
(W3C),  one  of  the  main  organizations 
driving  the  push  to  open  Web  stan¬ 
dards.  In  its  simplest  sense,  XML  is  a 
set  of  rules  and  guidelines  for 
describing  structured  data  in 
plain  text  rather  than  in  pro¬ 
prietary  binary'  representa¬ 
tions.  However,  as  a  phenome¬ 
non.  XML  goes  beyond  its  technical 
specification.  Since  its  standardization 
by  the  W3C  in  1998.  XML  has  been  the 
driving  force  behind  numerous  other 
standards  and  vocabularies  that  are 
forging  a  fundamental  change  in  the 
software  world. 

In  XML's  short  history,  its  influence 
has  been  felt  in  three  waves,  from  in¬ 
dustry-specific  vocabularies,  to  hori¬ 
zontal  industry  applications,  to  proto¬ 
cols  that  describe  how  businesses  can 
exchange  data  across  the  Web.  One  of 
the  key  developments  has  been  SOAP, 
the  protocol  that  has  opened  the  Web 
to  program-to-program  communica¬ 
tion  and  is  the  basis  for  Web  services. 


BOOK 

EXCERPT 


The  XML  Advantage 

XML  has  had  an  impact  across  a  broad 
range  of  areas.  Why? 

■  XML  files  are  human-readable. 
XML  was  designed  as  text  so  that,  in 
the  worst  case,  someone  can  always 
read  it  to  figure  out  the  content.  This 
isn’t  the  case  with  binary  data  formats. 

■  Widespread  industry  support  ex¬ 
ists  for  XML.  Numerous  tools  and  util¬ 
ities  are  being  provided  with  Web 
browsers,  databases  and  operating  sys¬ 
tems,  making  it  easier  and  less  expen¬ 
sive  for  small  and  medium-size  organi¬ 
zations  to  import  and  export  data  in 
XML  format. 


•  Major  relational  databases  now 
have  the  native  capability  to  read  and 
generate  XML  data. 

■  A  large  family  of  XML  support 
technologies  is  available  for  the  inter¬ 
pretation  and  transformation  of  X?tL 
data  for  Web  page  display  and  report 
generation. 

XML's  capability  to  work  with  other 
technologies  has  opened  up  new  possi¬ 
bilities  for  exchanging  business  infor¬ 
mation  across  the  Web.  essentially  cre¬ 
ating  an  extended  enterprise.  One  as¬ 
pect  of  this  new  extended  enterprise  is 
the  emergence  of  Web  services.  For 
some.  Web  services  represent  the  next 
evolutionary  step  for  the  Web.  extend¬ 
ing  it  from  a  network  that  pro¬ 
vides  services  to  humans  to 
one  that  provides  services  to 
software  looking  to  connect 
with  other  software.  Web  ser¬ 
vices  is  an  ambitious  initiative  that  is 
moving  the  Web  to  new  levels  of  soft- 
ware-to-software  interaction  while  try¬ 
ing  to  fulfill  object  technology’s 
promise  of  reusable  components. 


Web  Services  101 

Web  services  rely  on  several  key  under¬ 
lying  technologies,  in  particular  Uni¬ 
versal  Description.  Discovery  and  Inte¬ 
gration  (UDDI):  Web  Services  Descrip¬ 
tion  Language  ( WSDL);  and  SOAP. 

■  UDDI  is  a  protocol  for  describing 
Web  services  components  that  allows 
businesses  to  register  with  an  Internet 
directory  so  they  can  advertise  their 
services  and  so  companies  can  find 
one  another  and  carry  out  transactions 
over  the  Web. 

■  WSDL  is  an  XML  format  for  de¬ 
scribing  how  one  software  system  can 
connect  and  utilize  the  services  of  an¬ 
other  software  system  over  the  Inter¬ 
net.  It  supports  Web-based  computing 
services  that  target  computer  pro¬ 
grams  rather  than  human  users. 

■  SOAP  is  the  XML  glue  that  lets 
clients  and  providers  talk  to  each  other 
and  exchange  XML  data.  SOAP  builds 
on  XML  and  common  Web  protocols 
(HTTP.  File  Transfer  Protocol  and 
Simple  Mail  Transfer  Protocol)  to  en¬ 
able  communication  across  the  Web. 
SOAP  brings  to  the  table  a  set  of  rules 
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for  moving  data,  either  directly  in  a 
point-to-point  fashion  or  by  sending 
the  data  through  a  message  queue 
intermediary. 

One  of  the  main  implications  of 
SOAP  is  a  change  in  how  we  think 
about  distributed  computing.  Prior 
to  SOAP,  there  were  three  basic  op¬ 
tions  for  doing  distributed  computing: 
Microsoft  Corp.'s  Distributed  Compo¬ 
nent  Object  Model.  Java's  Remote 
Method  Invocation  or  Object  Manage¬ 
ment  Group  Inc.'s  Common  Object  Re¬ 
quest  Broker  Architecture.  These  tech¬ 
nologies  arc  still  in  widespread  use. 
Their  drawback  is  that  they  limit  the 
potential  reach  of  the  enterprise  to 
servers  that  share  the  same  object  in¬ 
frastructure.  With  SOAP,  however,  the 
potential  space  of  interconnection  is 
the  entire  Web,  which  is  why  there  is 
such  intense  interest  in  technologies 
that  can  leverage  the  power  of  SOAP. 
One  of  these  technolog)'  efforts  is 
Web  services. 

TTie  Web  services  framework  is  both 
a  process  and  a  set  of  protocols  for 
finding  and  connecting  to  software  ex¬ 
posed  as  services  over  the  Web.  By  as¬ 
suming  a  SOAP  foundation,  Web  ser¬ 
vices  can  concentrate  on  what  data  to 
exchange  instead  of  worrying  about 


how  to  get  it  from  Point  A  to  Point  B. 
which  is  the  job  of  SOAP.  To  make 
things  even  easier.  SOAP  also  defines 
an  XML  envelope  to  carry  XML  and  a 
convention  for  doing  remote  proce¬ 
dure  calls  so  a  service  can  advertise 
"call  me  here.”  and  a  program  will  be 
able  to  do  so  without  concern  for  lan¬ 
guage  or  platform. 

A  Web  service  can  be  an>thing.  from 
a  movie  re\’ie^v  service  to  a  real-time 
weather  advisory  to  an  entire  botel- 
and  airline-booking  package.  The  Web 
services  infrastructure  ensures  that 
e\'en  services  from  different  vendors 
will  interoperate  to  create  a  complete 
business  process.  Web  services  take 
the  object-oriented  vision  of  assem¬ 
bling  software  from  component  build¬ 
ing  blocks  to  the  next  level.  With  Web 
services,  however,  the  emphasis  is  on 
the  assembly  of  services,  which  may  or 
may  not  be  built  on  object  technology. 

Web  services  represent  an  industry¬ 
wide  response  to  the  need  for  a  flexible 
and  efficient  business-collaboration  en¬ 
vironment  Technically,  it’s  a  way  to 
link  loosely  coupled  systems  without 
binding  them  to  a  particular  program¬ 
ming  language,  component  model  or 
platform.  Practically,  it  represents  a  dis¬ 
crete  business  process  with  supporting 


protocols  that  functions  by  describing 
and  exposing  itself  to  users  of  the  Web 
and  being  invoked  by  a  remote  user  and 
returning  a  response.  It  includes: 

■  Describing:  A  U'eb  scrN'ices  applica¬ 
tion  describes  its  functionality  and  at¬ 
tributes  so  that  other  applications  can 
figure  out  how  to  use  it. 

■  Exposing:  Web  services  register 
with  a  repository  that  contains  a 
“white  pages"  holding  basic  service- 
provider  information;  a  "yellow  pages" 
listing  services  by  category;  and  a 
“green  pages"  describing  how  to  con¬ 
nect  and  use  the  serN'ices. 

•  Being  invoked;  When  a  Web  service 
has  been  located,  a  remote  application 
can  invoke  the  service. 

■  Returning  a  response;  When  a  ser¬ 
vice  has  been  invoked,  results  are  re¬ 
turned  to  the  requesting  application. 

The  driving  force  behind  Web  ser¬ 
vices  is  the  desire  to  allow  businesses 
to  use  the  Internet  to  publish,  discover 
and  aggregate  other  \\tb  serx'ices  us¬ 
ing  the  global  underpinning  of  SOAP. 
The  fact  that  the  deliver)’  of  Web  ser¬ 
vices  requires  only  the  Internet  means 
that  legacy  code  and  data  as  well  as  ob¬ 
ject  s)'stems  can  plug  into  Web  ser¬ 
vices  frameworks. 

Opportunity  and  Risk 

Web  services  represent  a  new  model 
of  software  distribution  and  intercon¬ 
nection  based  on  the  notion  of  services 
globally  available  over  the  Web  rather 
than  objeci-to-objeci  connections  over 
limited  networks.  Because  of  the  glob¬ 
al  scope  of  Web-based  services,  the  po¬ 
tential  financial  upside  is  extremely  at¬ 
tractive.  Financial  incentives  include 
new  revenue  opportunities  through 


creation  of  private  trading  networks, 
increased  revenue  through  expanded 
distribution  channels,  and  reduced  in¬ 
ventor)-  and  transaction  ctisis. 

Web  services  also  promi.se  improved 
collaboration  with  customers,  partners 
and  suppliers.  They  provide  opponu- 
nities  for  reducing  integration  time 
and  expense  compared  with  existing 
enterprise  application  integration  ap¬ 
proaches.  There  is  alsst  opportunit)-  for 
improved  supply-chain  efficiencies: 
quick  response  to  changing  market 
conditions  and  customer  preferences 
by  utilizing  loosely  coupled  modular 
services:  and  improved  customer  ser¬ 
vice  by  allowing  customers  and  trad¬ 
ing  partners  access  t<*  core  sv’stems. 

However,  the  Web  services  vision  is 
still  new  and  not  without  risk.  Despite 
the  significant  potential,  it  remains  to 
be  seen  how  Web  sen'ices  will  play  out 
on  a  large  scale.  It's  expected  that  Web 
serv-ices  will  begin  to  play  a  role  in  the 
delivery  of  simple  services,  but  until 
the  technolog)'  matures,  complex  trad¬ 
ing-partner  interactions  will  still  re¬ 
quire  an  upfront  human  clement  to 
solidif)-  agn.'ements. » 


Adapted,  with  permission,  fnm  the  hook 
XML.  Web  Sers’kes.  and  the  Data  Rcvv»- 
luiion.  by  Frank  P.  Coy/e  fAddison- 
U'esley.  2002).  Coyle  is  director  of  the 
software  engineering  program  ar  South- 
em  Afethodist  L^niversify  in  Dallas. 
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Testing  Is  Key 
To  Success 

Higjily  automated  Wfeb  services  must  work  flavdessly,  or  they’ll 
cause  a  chain  reaction  of  business  errors.  By  Mark  Leon 


Testing  Advice 

■  OenT  wMti  ttw  work  you  put  Mo  tasting 
by  R  ooly  onca.  Think  aiXMt  how  testing 
routines  can  be  reused  hx  monitonrK)  your  Web 
services  after  they're  deployed. 

■  Deni  leak  at  Wbb  aarvicas  tastkig  as  a 
ana- abet  daaL  Testvq  needs  to  be  iterative. 

•  laellreRuafiliyunderamMyafcon* 


■  TartngWihaefvioaiiBaiJathaWrawal(fQr 

enterprise  appGcabon  miegrailon.  for  example) 
requm  Imoiiitedgs  (ri  SOM*  and  WSGl  but  isn't 
that  difterem  horn  testiTH)  fTKite  tradilional  applica¬ 
tions.  There  are  tools  avadable  to  help  you  do  the. 
•  laatN  VM  aifvkaa  that  iM  UDOl  to  find 
and  btad  to  olher  VM  aandcaa  eutaUa  your 
company  is  a  more  complex  undertaking  ar^wi 
prob^  regure  special  expehise.  customized 
lestvig  loots  or  consulting  help. 


WEB  SERVICES  ~  those  loosely  coupled, 
machioe-to-machine  transactions  — 
have  to  work  error-free,  without  hu¬ 
man  intervention,  to  achieve  their 
much-heralded  efTiciency  benefits.  It 
takes  only  one  software  error  to  turn  a  Web  services 
application  into  a  disaster. 

“The  automation  of  Web  services  is  definitely  a  two- 
edged  sword.”  says  Joshua  Greenbaum,  an  analyst  at 
Enterprise  Applications  Consulting  in  Daly  City,  Calif. 
“There  is  the  potential  for  a  cascade  effect  Imagine  a 
faulty  transaction  linked  to  a  complex  supply  chain, 
and  consider  the  speed  in  which  errors  can  propagate.” 

Therefore  testing,  which  is  always  important,  is 
even  more  critical  for  Web  services. 

There’s  already  a  new  breed  of  Web  services  test¬ 
ily  toob  available  from  vendors  such  as  Mercury  Inter¬ 
active  Corp.,  Parasoft  Corp,,  Empirix  Inc.  and  Cape 
Clear  Software  Inc.  Most  are  able  to  read  Web  ^r- 
vices  Description  Language  (WSDL)  files,  which  is 
usually  the  first  step  on  the  road  to  testing. 

Vanturing  Outside 

Testing  Web  services  iaside  the  firewall  —  for  appli¬ 
cation  integration  projects,  for  example  —  bo’t  much 
different  from  testing  traditional  applications.  But 
Web  services  that  reach  outside  the  firewall  raise 
new  testing  issues. 

Insurance  company  Metlife  Inc.,  for  example,  uses 
Web  services  to  connect  dental  providers  and  employ¬ 
ers.  But  “with  loosely  coupled  applications,  you  don’t 
even  know  where  all  the  pieces  reside.”  says  James 
August,  vice  president  and  chief  architect  for  the  insti- 
tutionaJ  portfolio  at  Metlife  in  New  York. 

August  worited  with  BearingPoint  Inc.  constUtants 
to  design  testing  processes  for  the  new  Web  services 
applications.  He  says  it  would  be  nice  to  have  more 
testing  tools,  but  the  market  is  still  immature.  “What 
we  are  after.”  he  says,  “is  good  regression  testing  that 
we  can  apply  boctom-up  and  top-down.”  Regression 
testing  selectively  retests  softw^  that  has  been  modi¬ 
fied  to  ensure  that  bugs  have  been  fixed  and  that  no 
new  problems  have  been  inadvertently  added  Boctom- 
up  testing  checks  individual  components,  whereas  top- 
down  testing  checks  the  entire  set  of  applications. 

Measured  Progress  Inc.,  an  educational  testing 
firm  in  Dover,  Nil.,  uses  software  from  Waltham. 
Mass.-based  Empirix  to  help  test  a  highly  distributed 
Web  services  application.  Web  services  link  the  com¬ 
pany’s  .Net  platform  to  various  school  testing  sys¬ 


tems  across  several  states.  Edmund  Ashley,  manager 
of  software  development  at  the  company,  says  Web 
services  ease  the  integration  headaches  but  also  in¬ 
troduce  new  ieveb  of  testing  complexity. 

The  fact  that  Web  services  are  good  at  linking  a 
hodgepodge  of  systems  also  means  that  they  deliver 
a  more  unpredictable  stream  of  data  across  the  com¬ 
pany’s  network.  ”We  need  to  be  aware  of  the  blend  of 
data  coming  in.”  says  Ashley.  “Empirix  helps  us  test 
mixes  of  SOAP  and  HTTP  [data],  for  example.  Un¬ 
derstanding  how  thb  affects  the  system  b  critical  es¬ 
pecially  as  our  loads  increase." 

Loads  that  can  increase  unpredlciably  will  be  one 
of  the  biggest  testing  challenges  for  Web  services 
that  link  servers  to  external  clients,  says  Adam  Ko- 
lawa.  CEO  and  founder  of  Parasoft  in  Monrovia. 

Calif  And,  Kolawa  continues,  ”it  will  be  more  impor¬ 
tant  than  ever  to  test  for  the  unexpected." 

call  it  'mtmkey  testing,’  ”  be  explains,  ’^ou 
want  to  throw  weird  requests  at  the  server  and  see 
how  it  behaves.” 

MIB  to  the  Rescue? 

So  far.  there  isn’t  much  use  of  the  UDDl  Web  direc¬ 
tory  standard,  except  in  pilot  projects,  says  Alejandro 
Danylyszyn.  senior  manager  of  technology  integra¬ 
tion  at  Deloitte  Consulting  in  New  York.  But  even  in 
the  pilot  phase.  UDDI  deployments  will  probably  re¬ 
quire  more  than  a  window  into  WSDL  for  testing. 

Benjamin  Sherman,  a  senior  consultant  at  Green¬ 
wich  Technology  Partners  Inc  in  Harris,  N.Y..  says 
tools  that  allow  developers  to  see  how  components 
in  a  Web  service  are  performing  aren't  widely  avail¬ 
able.  Sherman  says  he's  alarmed  that  "IT  shops  have 
no  way  to  test  Web  services  applications  with  com¬ 
plex  dependencies,  so  they  are  forced  to  just  throw 
them  over  the  wall  and  see  how  they  do.” 

But,  he  adds,  improvements  are  on  the  way.  The 
Internet  Engineering  Task  Force  has  proposed  an  ap¬ 
plication  performance  management  Management  In¬ 
formation  Base,  or  APM  MIB.  (MIBs  have  been 
around  for  a  long  time  in  network  operations. 

They're  standardized  databases  that  allow  remote 
management  and  testing  of  IT  devices.)  Sherman 
says  a  Web  services  MIB  would  provide  standard 
metrics  on  any  Web  services  component. 

Not  everytme  agrees  that  a  new  MIB  is  the  way  to 
go.  Ido  Sarig,  vice  president  of  technology  strategy  at 
Merciuy  Interactive  in  Sunnyvale,  Calif,  says  be 
thinks  the  same  testing  and  management  ftmetions 
can  be  added  to  ftiture  versions  of  WSDL 

In  any  case,  users  are  pressing  ahead  with  existing 
tools,  even  though  the  tools  are  still  evolving  and 
there  isn’t  yet  agreement  on  standards  for  Web  ser¬ 
vices  testing.  Experts  say  that  despite  the  uncertainty 
in  this  young  market,  IT  managers  should  have  an 
aggressive  plan  for  testing  Web  services  applications 
if  they  expect  them  to  be  successful  I 


Leon  is  a  fieeiance  writer  in  San  Francisco. 
Contact  him  at  mrieon(^usfoa.edu. 
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even  from  far-flung  locations  —  cut¬ 
ting  25%  to  50%  off  development  time. 

But  is  it  possible  to  have  too  much 
collaboration?  “You  can  always  have 
too  much  of  a  good  thing,  if  it's  unman- 
agcd.”  Portclli  says.  “So  you  need  to  es¬ 
tablish  access  controls  —  you  don't 
want  everyone  able  to  make  changes. 


An  eclectic  collection  of  research 
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‘Amazing  Grace’  Would 
Be  Happy  to  Hear  This 

The  Cobol  programming  language,  de¬ 
veloped  in  1959  and  based  on  earlier 
work  by  Rear  Adm.  Grace  Hopper, 
seems  to  have  a  future  even  in  the 
newfangled  world  of  Web  sers’ices. 

The  keeper  of  the  flame  is  Micro  Focus 
International  Ltd.,  which  last  week  an¬ 
nounced  the  first  product  enabling 
Cobol  code  to  be  deployed  directly  as  a 
Web  scrx’ice  without  requiring  third- 
party  software. 

llte  vast  majority  of  the  world's  bu-si- 
nes.s  applications  arc  still  written  in 
older  languages  like  Cobol.  “For  most 
banking  and  insurance  companies, 
those  iCobol]  tystems  are  their  busi¬ 
ness  and  their  differentiation  from  the 
competition,  and  they're  not  about  to 
ihn>w  them  out."  sa>'s  Ian  Archbell,  vice 
president  of  product  management  in 
Micro  Focus’  Sunnyvale,  Calif.,  office. 

So  Archbell  sa>'s  Micro  Focus  is  gear¬ 
ing  up  to  help  companies  unliKk  their 
existing  software  assets  and  “tie  togeth¬ 
er  the  traditional  world  and  the  new- 
world."  He  says  Micro  Focus  is  invest¬ 
ing  20%  of  its  revenue  in  R&D  to  cover 
three  areas:  making  surc  that  Cobol  is  a 
“first-class  citizen"  when  Web  services 
an.'  used  to  integrate  applications,  that 
Cobol  and  Java  interoperate,  and  that 
XML  support  is  provided. 


The  Language 
Popularity  Index 

The  monthly  Tiobe  Programming 
Community-  Index  shows  the  populari¬ 
ty  of  programming  languages,  based  on 
hits  at  the  Google  search  engine.  It's  a 
rating  that  roughly  indicates  the  world- 
w^ide  availability-  of  skilled  engineers, 
courses  and  third-party  vendors  for 
each  language,  the  index  creator  says. 
Caution:  The  index  doesn’t  say  which 
is  the  best  language,  and  it  isn't  based 
on  the  lines  of  code  written. 


LANGUAGE 

RATING 

Java 

51.2 

C 

37.4 

c« 

32.8 

Peri 

10.7 

Visual  Basic 

17.2 

PHP 

9.4 

JavaScript 

6.8 

SQL 

5.5 

c# 

3.9 

Delphi/Pascal/Kytix 

2.2 

Python 

2.1 

Cobol 

2.0 

RPG 

1.9 

Fortran 

1.8 

Lisp 

1.5 

Ada 

1.3 

For  methodobgy:  www.tkib&cain/tpcLhttn 

Businesses  Can  Ci 

ipture 

The  Open-Source  ‘ 

Magic’ 

Corporate  application-development 
shops  can  learn  something  from  the 
open-source  movement,  says  Bill 
Portclli.  CEO  of  CollabNet  Inc.  in  Bris¬ 
bane.  Calif.  “What  was  the  magic  that 
made  Apache  and  Linux  work,  in  the 
absence  of  a  company?  It  was  a  collab¬ 
orative  development  process  that  in¬ 
cludes  early  involvement  of  all  of  the 


stakeholders.  And  we’ve  tried  to  bottle 
that  magic,"  he  says.  CollabNet  offers 
Web-based  tools  for  collaborative  soft¬ 
ware  development  that  attempt  to 
mimic  the  open-source  world.  (The 
company's  founder,  Brian  Behlcndorf, 
was  co-founder  of  The  Apache  Soft¬ 
ware  Foundation.) 

Portclli  says  CollabNet  tools  let  pro¬ 
grammers,  systems  integrators  and 
end  users  work  together  in  real  time  — 


Sometimes  unfettered  collaboration 
needs  to  be  cut  off."  In  other  words,  in 
a  corporate  IT  environment,  he  says, 
“you  want  a  blend  of  the  open-source 
practices  and  corporate  practices."  I 


MORE  RESOURCES 

Checli  out  our  Oevelopmern  Knowledge  Center  (oi 
news,  opinion  columns,  events  and  tutorials 
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Antarctic  Data  Center 
Uses  ColdFusion 


ANTARCTICA  -  Slonng  and  main¬ 
taining  Ihe  mountains  of  scientific 
data  that  Australia's  Antarctic  re¬ 
searchers  generate  isn't  a  job  for  the 
faint  hearted,  but  that's  the  challenge 
the  Australian  Antarctic  Division  Data 
Centre  has  undertaken. 

The  Australian  Antarctic  Treaty  re¬ 
quires  all  data,  sudi  as  statistics  on 
flora,  fauna,  weather  and  marine  life, 
to  be  publicly  available.  So  the  data 
center  has  d^eloped  an  online  cen¬ 
tral  repository  -  actually  an  intercon¬ 
nected  collection  ot  30  databases  - 
that  can  be  quened  on  the  Web. 

Based  on  Oracle  Corp.'s  database 
suite,  the  repository  sits  on  a  Sun 
Microsystwns  Inc,  server  running  on 
Solaris  8. 

The  database  holds  about  500GB 
ot  data.  Linkages  that  cross-reference 
^  data  ^  allow  queries  across  all 
of  the  databases  were  developed  us¬ 
ing  Macromedia  Inc's  ColdFusion 


Web  application  language. 

Recently,  the  center  decided  to 
also  use  ColdFusion  lor  all  of  te  ironi- 
end  database  developmeni  needs, 
says  data  center  manager  Lee  Belbin. 

ICokJFusion  ]  is  faster  dran  PL/ 
SQL  which  is  what  Oracle  uses,  and 
it's  faster  and  more  robust  than  Java.' 
he  says. 

The  latest  version  of  ColdFusion 
MX  indudes  Java  support,  allowing 
the  database  team  to  write  applica¬ 
tions  in  the  ColdFusion  programming 
language  but  have  them  translated 
into  Java.  Belbin  says. 

Future  plans  include  a  tietd-trip 
database  system,  which  will  allow 
members  of  expedition  parties  to 
post  information  about  the  condition 
of  the  various  base  stations,  such  as 
whether  (hey  need  cleaning,  repairs 
or  nwre  toilet  paper. 

-NadiaCamerm. 

Computenworld  Antarctica 
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‘Amazing  Grace’ Would 
Be  Happy  to  Hear  This 

The  Cobol  programming  language,  de¬ 
veloped  in  1959  and  based  on  earlier 
work  by  Rear  Adm.  Grace  Hopper, 
seems  to  have  a  future  even  in  the 
newfangled  world  of  services. 

The  keeper  of  the  flame  is  Micro  Focus 
International  Ltd.,  which  last  week  an¬ 
nounced  the  first  product  enabling 
Cobol  code  to  be  deployed  directly  as  a 
Web  service  without  requiring  third- 
party  software. 

The  vast  maionty  of  the  world’s  busi¬ 
ness  applications  are  still  written  in 
older  languages  like  CoboL  “For  most 
banking  and  insurance  companies, 
those  [Cobol]  systems  are  their  busi¬ 
ness  and  their  differentiation  from  the 
competition,  and  they’re  not  about  to 
throw  diem  out,'  says  Ian  ArchbelL  vice 
president  of  product  management  in 
Micro  Focus*  Sunnyvale,  CaliL,  office. 

So  Archbell  says  Micro  Focus  is  gear¬ 
ing  up  to  help  companies  unlock  their 
existing  software  assets  and  “tie  togeth¬ 
er  the  traditional  world  and  the  new 
world.’*  He  says  Micro  Focus  is  invest¬ 
ing  20%  of  its  revenue  in  RSeO  to  cover 
three  areas:  makii^  sure  that  Cobol  te  a 
“first-class  citizen"  when  Web  services 
are  used  to  integrate  applications,  that 
Cobol  and  Java  interoperate,  and  that 
XML  support  is  provided. 


The  Language 
Populanh  Index 

’The  monthly  Tiobe  Programming 
Community  Index  shows  the  populari¬ 
ty  of  programming  languages,  based  on 
at  the  Google  search  engine.  It's  a 
rating  that  roughly  indicates  the  worid- 
wide  availability  of  skilled  engineers, 
courses  and  third-party  vendors  for 
each  language,  the  index  creator  says. 
Caution:  The  index  doesn’t  say  which 
is  the  best  language,  and  it  isn’t  based 
on  the  lines  of  code  written. 
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RATING 

■  Java 

512 

■  C 

37.4 

^^8 

■  Ffori 

18.7 

■  Visual  Basic 

17.2 

■  PHP 

94 

■JavaScript 

64 

•  SOI 

54 

■c« 

34 

■  IMphi/PaM:4fKyib 

Z2 

■  Python 

2.1 

■  Cobol 

^0 

■  RPO 

1.9 

■  Forfran 

L8 

■  Lnp 
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Businesses  (!an  Capture 
The  Open-Source ‘Magic’ 

Corporate  application-development 
shops  can  leant  something  from  the 
open-source  movement,  says  Bill 
Portelli,  CEO  of  CoUabNet  Inc.  in  Bris¬ 
bane,  Calil  “What  was  the  nu^c  that 
made  Apache  and  Linux  work,  in  the 
absence  of  a  company?  It  was  a  collab¬ 
orative  development  process  that  in¬ 
cludes  early  invotvement  of  all  of  the 


stakeholders.  And  we've  tried  to  bottle 
that  magic."  be  says.  CoUabNet  offers 
Web-based  toob  for  coUaborative  soft¬ 
ware  development  that  attempt  to 
mimic  the  c^n-source  world.  (The 
company's  founder.  Brian  BehlendorL 
was  co-founder  of  *rhe  Apache  Soft¬ 
ware  Foundatioa) 

Portelli  says  CoUabNet  toob  let  pro¬ 
grammers.  systems  integrators  and 
end  users  work  together  in  real  time  — 


even  from  far-flung  locations  —  cut¬ 
ting  25%  to  50%  off  development  time. 

But  b  it  possible  to  have  too  much 
coUaboratioo?  Tou  can  always  have 
too  much  of  a  good  thing,  if  it’s  unman¬ 
aged.”  Portelli  says.  “So  you  need  to  es¬ 
tablish  access  controb  ^  you  don't 
want  everyone  able  to  make  changes. 
Sometimes  unfettered  collaboration 
needs  to  be  cut  off"  In  other  words,  in 
a  corporate  IT  environment,  he  says, 
“you  want  a  blend  of  the  open-source 
practices  and  corporate  practices.”  I 
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Antarctic  Data  Center 
Uses  ColdFusion 


ANTARCTICA-Storingandmain- 
tainiriQ  Ihe  mountains  of  scientriic 
data  fl)at  Australia's  Anisctic  re¬ 
searchers  genoate  isn’t  a  iob  for  the 
faint  hearbd,  but  that's  the  challenge 
the  Australian  Antarctic  Division  Data 
Centre  has  ifxlertaken. 

The  Australian  Anttfchc  Treaty  re¬ 
quires  al  data,  such  as  statistics  on 
floia.  buna,  weather  and  marine  life, 
to  be  pubfely  avaiaUe.  So  the  data 
centerhasdevelopedanonfinecen- 
tialrBpo6itory>aclualyaninlercon- 
nectedcolei^ol30dat^)ases- 
that  can  be  queried  on  the  Wab. 

Based  on  Oracle  Corp's  database 
suite,  the  r^wsitory  sib  on  a  Sun 
Microsyslems  Inc.  server  running  on 
Solaris  8. 

The  dat^)ase  holds  about  5(X)GB 
of  d^  Linkages  that  cross-r^erence  • 
the  data  and  alow  queries  across  d 
of  the  databases  were  developed  us¬ 
ing  Macromedb  lt)c.'s  CoUFu^ 


Web  apptcation  language. 

Rec^rtty.  the  center  decided  to 
also  use  ColdFusion  for  al  of  fb  front- 
end  database  development  needs, 
says  data  center  manager  Lee  Belbin. 

TCokFusionl  b  fasto  than  PL/ 
SQL  which  is  Oracle  uses,  and 
it’s  faster  and  more  robust  than  Java.* 
he  says. 

The  latest  version  of  ColdFusion 
MX  indudes  Java  support  slowing 
the  database  team  to  write  applica¬ 
tions  in  foe  ColdRjsion  prograrnrning 
language  but  have  foem  translated 
into  Java.  Bel)in  says. 

Future  plans  indu^  a  field-trip 
database  system,  which  wi  alow 
members  of  expedtion  parties  to 
post  infonnatkx)  about  foe  concfition 
of  foe  various  base  stetions.  such  as 
whether  they  need  cleaning,  lepaifs 
or  more  tolel  paper. 

'NadiaCamemn, 
Compulerworld  Antarctica 


Ironic  how  it  takes  the  cutting  edge 
technology  of  2003  to  access  the 
cutting  edge  technology  of  1973. 

myEXTRA!™  Smart  Connectors  let  you  leverage  your  existing  legacy  data  and  logic. 


"Cutting  edge"  doesn’t  cut  it.  You  need  products 
that  do  what  they  say  they  will  do.  This  is  what 
we  say:  Our  myEXTRA!  Smart  Connectors  give  you 
XML-based  Web  services  —  they  let  you  get  at  legacy 
information  without  changing  host  applications. 
You  can  put  ail  of  the  business  data  and  applica¬ 
tions  locked  up  in  mainframes  to  new  use  in  hours 
or  days,  not  weeks  or  months.  We’ve  spent  the  last 
18  years  making  legacy  data  more  useful.  Smart 
Connectors  are  the  logical  next  step,  making  data 
easier  to  get  at. 

Find  out  more.  Download  our  free  White  Paper 
“Leveraging  Legacy  Applications  to  Serve  New 
Business  Initiatives”  at  www.attachmate.e0m/SC7. 
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XACML 
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Extensible  Access  Control  Markup 
Language  (XACML)  is  an  XML- 
based  language,  or  schema, 
designed  specifically  for  creat¬ 
ing  policies  and  automating 
their  use  to  control  access  to 
disparate  devices  and  applica¬ 
tions  on  a  network. 


•V  RUSSELL  KAV 

Maintaining  secu¬ 
rity-  on  their  net¬ 
works  is  critical 
for  all  companies. 
One  primary  tool 
that  every  network  needs  is 
access  control  —  the  ability-  to 
carefully  define  and  enforce 
which  users  have  what  type  of 
access  to  specific  applications, 
data  and  devices. 

When  the  network  was  con¬ 
tained  within  a  single  building 
or  campus,  the  problem  was 
relatively  simple  and  generally- 
handled  by  software  that  w-as 
hooked  into  the  operating 
system.  But  today's  net>«-orks 
im'olve  interconnected  seg¬ 
ments  distributed  across  the 


XACML  in  Use 


country  and  around  the  globe, 
and  many  of  these  arc  also 
ioined  to  the  public  Internet. 

The  growing  use  of  XML  as 
the  common  mechanism  for 
exchanging  data  makes  it  sim¬ 
pler  and  easier  to  find  and  use 
data  from  external  sources. 

.Applications  can  call  _ 

upon  automated,  re¬ 
motely  based  Web  ser¬ 
vices  to  add  new-  capa¬ 
bilities.  But  who's  in 
charge?  Access  control 
has  become  harder  to 
manage  at  the  very  time  it's 
more  important  than  ever. 

One  answer  lies  with  two 
specialized  variants  of  XML  - 
Security  Assertions  Markup 
Language  (SAML)  and 


XACML.  SAML  defines  how 
identity  and  access  informa¬ 
tion  is  exchanged  and  lets  or- 
I  ^nizations  convey  security 
'  information  to  one  another 
without  having  to  change  their 
own  internal  security  archi¬ 
tectures  [QuickLink  32137]. 

But  SAML  can  only  communi 
cate  information.  How  to  use 
that  information  is  where 
.XACML  comes  in. 

The  language,  which  uses 
the  same  definitions  of  sub¬ 
jects  and  actions  as  SAML.  of¬ 
fers  a  vocabulary'  for  express¬ 
ing  the  rules  needed  to  define 
an  organization's  security- 
policies  and  make  authoriza¬ 
tion  decisions.  XACML  has 
two  basic  components. 

The  first  is  an  access-con¬ 
trol  policy  language  that  lets 
developers  specify  the  rules 
about  who  can  do  what  and 
when.  The  other  is  a  request/ 
response  language  that  pre¬ 
sents  requests  for  access  and 
describes  the  answers  to  those 
queries. 

XACML  provides  for  fine¬ 
grained  control  of  activities 
(such  as  read,  w-riic.  copy. 

_  delete)  based  on  sev¬ 
eral  criteria,  including 
the  following: 

■  Attributes  of  the 
user  requesting  access 
(e.g.,  “Only  division 
managers  and  above 
can  view  this  document.") 

■  The  protocol  over  which 
the  request  is  made  (e.g., 

“This  data  can  be  viewed  only 
if  it  is  accessed  over  HTTPS.") 

■  The  authentication  mech- 


tf  Match,  itper- 

mitsaccessby  _  , 

theusei  The  answei  (Match  or 

No  Match)  goes  back 
to  the  PEP 


UiCK 


AuserffiXAPtH  The  query  goes  to 

tenTt5.asut)iect)ie-  IheenlitYproieci- 

Quests  data  from  a  <ng  the  resource 

specihcnehwrkre-  (catied  a  Policy 

soi^  (a  ftie  system.  Enforcement 

server.  data&Ese  or  Poini.orF%P) 

MMservve) 


The  PEP  uses  the  XACML 
request  Iar>gu9ge  to  cre¬ 
ate  a  request  baser)  on 
the  attributes  of  the  sub- 
lect,  action,  resource  and 
0^  relevant  •nfotmalion. 


anism  (e.g..  “The  requester 
must  have  been  authenticated 
using  a  digital  device.") 

Strengths 

XACML  was  designed  to  re¬ 
place  existing,  usually  applica¬ 
tion-specific.  proprietary  ac¬ 
cess-control  mechanisms.  Pri¬ 
or  to  the  new  language,  every 
application  vendor  had  to  cre¬ 
ate  its  own  custom  method  for 
specifying  access  control,  and 
these  typically  couldn't  talk  to 
one  another.  The  first  imple¬ 
mentation  of  XACML  was 
created  by  Sun  Microsystems 
Inc.  in  Java  and  is  available  at 
httpy>^unxQcml3ourceforge.  net. 
According  to  Sun,  XACML  has 
a  number  of  adx'aniages  over 
other  access-control  policy 
languages: 

•  Security  administrators 
can  describe  an  access-control 
policy  once,  without  having  to 
rewrite  it  numerous  times  in 
different  application-specific 
languages. 

■  Application  developers 
don't  have  to  invent  their  own 
policy  languages  and  svrite 
code  to  support  them:  they- 
can  reuse  existing,  standard¬ 
ized  code. 

■  XACML  is  intended  to  be 
primarily  a  machine-generat¬ 
ed  language.  XACML  creators 
expect  that  easy-to-use  tools 
for  writing  and  managing 
XACML  policies  will  be  devel¬ 
oped,  since  they  can  be  used 
with  many  applications. 

■  XACML  can  accommo¬ 
date  m«>st  access-control  poli¬ 
cy  needs  and  also  support  new 
requirements  as  they  emerge. 

■  A  single  XACML  policy 
can  be  applied  to  many  rc- 
stiurces.  This  helps  avoid 
inconsistencies  and  elimi¬ 
nates  duplication  of  effort  in 
creating  policies  for  different 
resources. 

■  With  XACML.  one  policy 
can  refer  to  another.  In  a  large 
organization,  for  instance,  a 
policy  for  a  specific  site  might 
reference  both  a  company- 
wide  policy  and  a  country- 
specific  policy’. 

History 

XACML  was  developed  by  a 
team  that  included  people 
from  Entrust  liu:..  IBM.  Open- 
Nciworks.org,  Quadrasis  Inc., 


www.computerworic)  com 


An  XACML 
Glossary 

ACTKM:  The  type  of  access 
that  is  being  requested  (for 
example,  read,  write,  create, 
delete,  logged). 

AIIHIBUIErA^ecificcharac- 
tehsuc  of  a  subject  resource, 
action  or  environment  In  whk^ 
the  access  request  is  made. 
AttrAutes  could  Indude  a  user's 
name,  workstation  identity, 
security  clearance,  the  ffie  to 
whldi  access  is  desired  and  the 
time  of  day. 

BAG;  An  unortlered  coHedion  of 
attributes,  used  for  matching  at- 
triwtes  to  conditions.  Bags  may 
contain  duficate  attributes  or 
be  empty. 

CONOflKM:  A  simpfe  or  com¬ 
plex  Boolean  funetkm  at  ttie 
heart  of  a  rule. 

ffFECT;  The  result  of  an  ttdho* 
rizabon:  deny  or  permit 
POUCY:  A  single  access- 
control  poicy  expressed  through 
asetofnite. 

POUCY  SET:  A  container  of 
poUdes.  Induding  references  to 
remote  polkses. 

RQOURCE:  A  device,  data 
eiemetd  or  Me  for  vitfiich  access 
is  requested. 

SUBJECT:  The  person  or  com¬ 
puter  tnakfno  a  request. 
TAMETrAseiofsimpliliedcon- 
dibons  for  the  subject,  resource 
and  action  (hat  must  be  met  for  a 
policy  set  poicy  or  rule  to  apply 
toagivenraqu^. 


Sterling  Commerce  Inc..  Sun 
and  BEA  Systems  Inc. 

In  February.  XACML  was 
adopted  as  a  standard  by  the 
Organization  for  the  Advance¬ 
ment  of  Structured  Informa¬ 
tion  Standards.  I 


Kay  (russkay^harter.net)  is  a 
Computerworld  confributing 
writer  in  Worcester.  Mass. 


RESOURCE  UNKS 

For  a  list  of  onhne  resources  related  to 
XACML.  vsil  our  Web  site 
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XACML 


DEKIMTION 

Extensible  Access  Control  Markup 
Language  (XACML)  is  an  XML- 
based  language,  or  schema, 
designed  specifically  for  creat¬ 
ing  policies  and  automating 
their  use  to  control  access  to 
disparate  devices  and  applica¬ 
tions  on  a  network. 


•vmi»»eu.KAv 

Maintaining  secu- 
riry  on  their  net- 
wofics  is  critka] 
for  all  companies. 
One  piimary  tool 
that  every  network  needs  is 
access  control  ~  the  ability  to 
carehiUy  define  and  enforce 
which  users  have  what  type  of 
access  to  specific  applications, 
data  and  devices. 

When  the  network  was  con¬ 
tained  within  a  single  building 
or  campus,  the  problem  was 
relatively  simple  and  generally 
handled  by  software  that  was 
hooked  into  the  operating 
system.  But  today's  networks 
involve  interconnected  seg¬ 
ments  distributed  across  the 


XACML  in  Use 


country  and  arouiHl  the  globe, 
and  many  of  these  are  also 
joined  to  the  public  Internet. 

The  growing  use  of  XML  as 
the  common  mechanism  for 
exchanging  data  makes  it  sim¬ 
pler  and  easier  to  find  and  use 
data  from  external  sources. 

Applications  can  call  _ 

upon  automated,  re¬ 
motely  based  Web  ser¬ 
vices  to  add  new  capa¬ 
bilities.  But  who's  in 
charge?  Access  control 
has  become  harder  to 
manage  at  the  very  time  it’s 
more  Important  than  ever. 

One  answer  lies  with  two 
specialized  variants  of  XML  — 
Security  Assertions  Markup 
Language  (SAML)  and 


XACML  SAML  defmes  how 
identity  and  access  infonna- 
lion  is  exchanged  and  lets  or¬ 
ganizations  convey  security 
infonnatioD  to  one  another 
without  having  to  change  their 
own  internal  security  archi¬ 
tectures  (QuickLink  32137]. 

But  SAML  can  only  communi¬ 
cate  information.  How  to  use 
that  information  is  where 
XACML  comes  in. 

The  language,  which  uses 
the  same  definitions  of  sub¬ 
jects  and  actions  as  SAML  of¬ 
fers  a  vocabulary  for  express¬ 
ing  the  rules  needed  to  define 
an  organization's  security 
policies  and  make  authoriza¬ 
tion  decisions.  XACML  has 
two  basic  components. 

The  first  is  an  access-con¬ 
trol  policy  language  that  lets 
developers  specify  the  rules 
about  wbo  can  do  what  and 
when.  The  other  is  a  request/ 
response  language  that  pre¬ 
sents  requests  for  access  and 
describes  the  answers  to  those 
queries. 

XACML  provides  for  fine¬ 
grained  control  of  activities 
(such  as  read,  write,  copy. 

_  delete)  based  on  sev¬ 
eral  criteria,  including 
M  the  following: 

■  Attributes  of  the 
IIIY*  user  requesting  access 
(e.g.,  "Only  division 
managers  and  above 
can  view  this  document.'') 

■  The  protocol  over  which 
the  request  is  made  (e.g.. 

This  data  can  be  viewed  only 
if  it  is  accessed  over  HTTPS.") 

■  The  authentication  mech- 


M  Match,  it  oec- 
mits  access  bv  _ 

Itwuser  The  answ9  (Match  or 

No  Match)  goes  back 
lothePEP. 


PEPdeiannines 

MiMhfliaccaBs 

sauliortMl, 


AusarOnXACML  Thaoiaiygoesto 

tarm5.a8ub|ac])ie-  thee^protect* 

guests  data  from  a  ngtherasoirce 

spacricnetMOrtue-  (caMaftilicy 

sauce  (a  fie  system.  Enforcement 

serMr.  database  or  pMnt.orPEP) 

Wbbsemce). 


r~ "  M _ 

KNoMalch. 

The  P1^  retrieves 

itdeniesuser  B9 

HBWaopkcabie  poboes 

1  access. 

(written  in  XACM.) 

The  PEP  uses  the  XAOilL  The  PEP  sends  this  ne- 

request  language  to  ere-  questtoaRjIicyDeci' 

ate  a  request  based  on  sion  Point  (POF^. 

Iheatkibutesofthesub- 

lect.  action,  resource  and 

other  relevant  mfonriBtlon. 


The  POP  compares 
the  request  ac^nst 
policies  and  deter¬ 
mines  Mihether  ac¬ 
cess  should  be 
granted. 

SOUnCE  SUNMtCROSVBTEMSlMC 


anlsro  (e.g.,  The  requester 
must  have  been  authenticated 
using  a  digital  device.") 

Strengths 

XACML  was  designed  to  re¬ 
place  existing,  usually  applica¬ 
tion-specific,  proprietary  ac¬ 
cess-control  mechanisms.  Pri¬ 
or  to  the  new  language,  every 
application  vendor  had  to  cre¬ 
ate  its  own  custom  method  for 
specifying  access  control,  and 
these  typically  couldn't  talk  to 
one  another.  The  first  imple¬ 
mentation  of  XACML  was 
created  by  Sun  Microsystems 
Inc.  in  Java  and  is  available  at 
ht^y/^tiTuacrnLsourc^rgejiet. 
According  to  Sun.  XACML  has 
a  number  of  advantages  over 
other  access-control  policy 
languages: 

■  Security  administrators 
can  describe  an  access-control 
policy  once,  without  having  to 
rewrite  it  numerous  times  in 
dififerent  application-specific 

langiiag«»< 

■  Application  developers 
don't  have  to  invent  their  own 
policy  languages  and  write 
code  to  support  them;  they 
can  reuse  existing,  standard¬ 
ized  code. 

■  XACML  is  intended  to  be 
primarily  a  machine-generat¬ 
ed  language.  XACML  creators 
expect  that  easy-to-use  tools 
for  writing  and  managing 
XACML  policies  will  be  devel¬ 
oped,  since  they  can  be  used 
with  many  applications. 

■  XACML  can  accommo¬ 
date  most  access-control  poli¬ 
cy  needs  and  also  support  new 
requirements  as  they  emerge. 

■  A  single  XACML  policy 
can  be  applied  to  many  re¬ 
sources.  This  helps  avoid 
inconsistencies  and  elimi¬ 
nates  duplication  of  effort  in 
creating  policies  for  different 
resounres. 

■  With  XACML  one  policy 
can  refer  to  another.  In  a  large 
organization,  for  instance,  a 
policy  for  a  specific  site  might 
reference  bo^  a  company¬ 
wide  policy  and  a  country- 
specific  policy. 

Histoiy 

XACML  was  developed  by  a 
team  that  included  people 
from  Entrust  Inc,  IBM.  Open- 
Networks.org,  (^drasis  Inc.. 


Sterling  (Commerce  Inc.  Sun 
and  BEA  Systems  Inc 
In  February,  XACML  was 
adopted  as  a  standard  by  the 
Organization  for  the  Advance¬ 
ment  of  Structured  Informa¬ 
tion  Standards.  • 


Kay  (ntsskay@charterj\et)  is  a 
Coroputerworld  conrrihun'ng 
writer  in  Worcester,  Mass. 
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For  a  list  of  onine  nsouces  relaled  to 
XACML  ^  ou  Web  site: 

|^QulddJMt3W87 

mvwxoiiipNlwworUxoin 


Are  there  tecbnologies  or  issues  you'd  We 
to  team  about  in  QuickStudy?  Send  your 
ideas  to  oukAstudyBconipuiarvrartd^ 


To  find  a  coinplete  archive  of  ow 
QuickS(udie$.goonfineio 

QcowpMterewldxomAiuitfcitiirlaa 


I 


WebSphere 

y 

-  i 


,jpS. 


f 


i  ’'IcCirciIiOn  is  icif 

/  the  le 

'  WebSphere  i&' 

pdel.  in- 

ciei'vers  an  inf 

ire  that 

•--ji  an  Intea'at''- 

!  and  C6 

‘gration  software  for  the  on  demand 
nd  manage  all  of  your  business 
‘sponds  to  change,  meeting  business 
:S.  visit  ibm.com  websphere  seeit 


46 


MNiniu  ihi  a.  tm 


NIOWlEINEanERDEIIELOniEIIT 


www.computtfvviyld.com 


Mixing 
Old  and  New 
Skiiis 

It  takes  new  specialist  skills  and 
old-feshioned  programming  to  make  it 
in  Web  services.  Bv  Amy  Helen  lohnson 


IF  Yod  DONT  KNOW  what  SOAP  is. 
you  could  be  missing  out  on  one  of 
the  critical  new  trends  in  applies* 
don  development:  building  Web 
services. 

Knowledge  of  Simple  Object  Access 
Protocol  and  its  extended  faimily  of  pro¬ 
tocols.  languages,  frameworks  and  tool 
kits  is  necessary  for  IT  professionals  to 
create  these  code  packages,  which  per¬ 
form  real-time  operations  and  exchLige 
infonnadon  over  the  Internet. 


'  Amy  Helen  Johnson 

“Five  years  from  now,  it’s  dednitely 
something  that  developers  will  want 
on  their  resume.”  says  Brent  Zempel. 
CIO  at  Life  Time  Fitness  Inc.,  a  health 
and  nutrition  services  company  in 
Eden  Prairie,  Minn.  “It  will  set  them 
apart  from  other  developers.” 

SIdIts 

Wesley  Bench,  director  of  information 
systems  at  Life  Time  Fitness,  says  the 
company  looks  for  candidates  with 
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knowledge  of  Web  architectures,  Inter¬ 
net  technologies  and  Java  2  Enterprise 
Edition.  Those  developers  are  familiar 
with  component-based  applications, 
which  are  the  foundation  of  Web  ser¬ 
vices,  be  says. 

Key  skills  for  building  Web  services 
interfaces  include  knowledge  of  XML 
and  SOAP.  Bench  says.  Research  from 
Stamford,  Conn.-based  Gartner  Inc. 
adds  to  that  list  the  J2EE  and  Microsoft 
.Net  platforms,  the  Java  and  Cs  lan¬ 
guages  and  the  Visual  Basic  .Net  devel¬ 
opment  enviroiunent 

But  these  aren’t  the  core  capabilities 
developers  need  in  their  portfolios,  ac¬ 
cording  to  a  recent  Ganner  repwrt 
Many  Web  services  com¬ 
ponents  will  be  legacy  ap¬ 
plications  wrapped  in  Web 
services  interfaces.  Pro¬ 
grammers  still  need  a  firm  grounding 
in  established  programming  languages 
like  CoboL  Visual  Basic  and  wide¬ 
ly  used  business  applications  like  Ora¬ 
cle  Forms  and  IBM’s  CICS. 

That  need  for  expertise  in  older 
business  technologies  was  important 
when  Swiss  Interbank  Clearing  Ltd. 
was  developing  Web  services,  says 
Thomas  Gnitter,  head  of  the  IT  depart¬ 
ment  at  the  intrabank  services  pro¬ 
vider.  The  Zurich-based  frnancial  firm 
uses  Cobol  appbeations  and  newer 
client/server  software  based  on  object- 
oriented  programming  techniques. 

The  diversity  of  the  underlying  pro¬ 
gramming  languages  meant  that  each 
Web  services  project  required  separate 
specialists  familiar  with  the  dissimilar 
technologies. 

In  terms  of  skiUs.  Web  services  pro¬ 
grammers  are  old-fashioned  develop¬ 
ers  with  extra  technical  knowledge, 
says  Doug  Falk,  CIO  at  National  Stu¬ 
dent  Clearinghouse.  The  Herndon,  Va- 
based  nonprofit  consortium  of  colleges 
and  universities  provides  an  electronic 
registry  of  current  student  and  alumni 
records.  “One  of  the  things  we  learned 
along  the  way  was  that  once  you  get 
over  the  terms  and  standards,  it  really 
comes  back  to  developing  basic  appli¬ 
cations.”  he  says. 

Training 

Falk  says  finding  training  programs 
that  teach  Web  services  technologies 
was  pretty  easy.  He  picked  the  top  de¬ 
veloper  on  his  nine-person  team  and 
sent  her  to  a  three-day  Java  course  of¬ 
fered  by  Sun  Microsystems  Inc.  and  a 
one-day  SOAP  class  oftered  by  Sys- 
Con  Media  Inc.  in  Montvale.  N.J.  Other 
team  members  engaged  in  informal 
self-education  projects,  using  books 
and  online  materials  to  learn  about 


CAREERS 


topics  such  as  XML  schemas. 

But  experience  trumps  certifica¬ 
tions,  says  Gary  Lien,  a  systems  archi¬ 
tect  at  Life  Time  Fitness.  “Having  a 
certification  doesn't  mean  anything  in 
terms  of  real-world  experience  dealing 
with  distributed  applications.”  he  says. 

Job  Martel 

There's  noticeable  demand  for  Web 
services  managers  and  programmers  at 
companies  around  the  world.  For  ex¬ 
ample.  some  recent  job  postings  at 
Monster.com  included  openings  at  a 
TV  entertainment  company  in  Los  An¬ 
geles.  a  geographic  information  sys¬ 
tems  data  provider  in  Dublin  and  a 

telecommunications  com¬ 
pany  in  Hong  Kong. 

Swiss  Interbank’s  Grut- 
ter  notes  that  companies 
have  passed  through  the  “new  toy” 
phase  of  the  emerging  technology.  The 
focus  is  now  on  writing  production  ap¬ 
plications.  “Web  services  must  be 
paired  with  a  business  need,”  he  says. 

Salary 

Although  IT  managers  agree  that  de¬ 
mand  for  Web  services  programmers 
is  rising,  there’s  no  consensus  on 
wdiether  these  skills  translate  into 
higher  salaries,  only  that  they’re  “defi¬ 
nitely  valuable.”  says  Zempel. 

The  European  market,  says  Grutter. 
won't  necessarily  pay  bonuses  to  appli¬ 
cants  who  list  Web  services  project  ex¬ 
perience  on  their  r^sum^  b^use  un¬ 
employment  has  brought  down 
salaries  about  10%  overall 
But  in  the  Falk  places  a  10% 
premium  on  hires  with  Web  services 
experience.  However,  be  says  he 
wouldn't  offer  any  more  tb^  that  be¬ 
cause  he  places  more  weight  on  devel¬ 
opers'  core  application  programming 
skills  than  on  knowledge  of  Web  ser¬ 
vices.  A  transaction  involves  the  Web 
services  interface  for  only  a  short  peri¬ 
od  of  dme,  be  explains.  Once  the  data 
is  consumed  by  Ae  business  applica¬ 
tion.  it  turns  into  a  normal  transactioa. 
where  established  coding  skills  still 
mean  the  roost.  Falk  says. 

■When  you  get  down  to  it.  you  need 
someone  with  good  skills  at  designing 
applications,”  says  Falk.  I 


Johnson  is  a  Computerworld  conxribut- 
ing  writer.  Contact  her  at  amy-helen@ 
pobox.com. 
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The  Next 
Chapter 

Predictions:  US.  programmers  will 
be  limited  to  sensitive,  niche  applica¬ 
tions,  while  the  bulk  of  program¬ 
ming  will  be  done  offshore.  And 
Web  services  will  run  amok. 


■  AN6ST-mEIIEReeRS 

Within  five  years.  Web  services  will 
become  the  de  facto  standard  for  deal¬ 
ing  with  systems  consolidation  follow¬ 
ing  mergers  and  acquisitions.  Web  ser¬ 
vices  have  the  potential  to  cut  the  time 
to  consolidate  business  systems  in  half, 
thereby  accelerating  the  expected  re¬ 
turn  from  the  merger  or  acquisition. 
With  Web  services,  changes  to  or  inte¬ 
gration  of  existing  systems  can  be 
done  in  a  more  otderiy  &shion  — 
without  the  user  angst  that  usually 
occurs  with  postmerger  consoUdatioa 

■  Norbert  Kubihis,  partner,  Torum  CfO 
Mariners  LLP,  San  Diego 

■  aiMNFRAMESGCURnY 

One  unpublicized  challenge  for  Web 
services  is  security  for  the  mainframe, 
where  70%  of  all  corporate  data  re¬ 
sides.  With  the  advent  of  Web  services 
on  the  host,  the  mainframe  is  much 
more  vuliterable  to  corruption  from 
outside  forces.  As  compaixies  realize 
this,  or  as  instances  of  mainframe  se¬ 
curity  breaches  greatly  increase,  you’ll 
see  more  companies  roll  out  main¬ 
frame  security  measures  before  partic- 
^ting  in  Web  services  initiatives. 

■  Koen  Bouwers,  CEO.  Consul  Inc. 
Acton,  Mass. 

■  THEASTEMMOWTS 

Software  development  in  the  U5.  will 
be  extinct  by  mid-2006,  with  gradual 
job  losses  much  tike  the  U.S.  textile  in¬ 
dustry  experienced  in  Che  last  quarter 
of  the  20th  century.  Better  develc^ 


ment  tools,  cheaper  labor  and  quality 
methodologies  are  malting  it  more  at¬ 
tractive  to  develop  software  overseas. 
The  only  software  development  that 
will  be  left  in  the  US.  will  be  for  niche 
applications,  new  products  and  h^hly 
sensitive  strategic  applications. 

■  /on  C.  Piot,  chief  operating  officer. 
Impact  Innovations  Grt>iq>  IXC,  Dallas 

■  B2BPH0EMX 

Industry-specific  “Web  services  net¬ 
works”  will  rise  from  the  ashes  of  the 
e-marketplaces  of  the  dot-com  era. 
Theyll  be  similar  to  the  late,  some¬ 
times  lamented  e-marketplaces.  only 
better  in  just  about  every  way. 

■  Ross  Altman,  director  of  consulting. 
Electronic  Data  Systems  Corp. 

■  DtSmiPnVE  TECHNOtOeV 
Within  three  years,  Web  services  will 
have  a  highly  disruptive  impact  on  the 
software  market.  Vendors  that  are  ei¬ 
ther  unwilling  or  unable  to  componen- 
tize  their  applications  in  a  flexible 
manner  will  see  substantial  losses  of 
market  share.  Noncompliant  applica¬ 
tions  will  be  gradually  marginalized 
by  early  2005. 

■  Bem/tord  Borges.  Distinguished  Ertgi- 
neer.  IBM  Business  Consulting  Services 

■  ONE  MAirS  TIMELINE 

2003:  Application  development  is  sim¬ 
plified  and  becomes  big^y  automated. 
2004:  Software  writes  more  lines  of 
code  than  humans  da 
2009:  Software  maintenance  costs 


drop  and  no  longer  impede  business 
advances. 

2006:  IT  productivity  in  developing 
applications  triples  ^m  the  previous 
year,  due  to  automated  code  genera¬ 
tion.  reallocation  of  staff  and  consult¬ 
ing  resources,  and  a  laser  focus  by  se¬ 
nior  develop>ers  on  the  aspects  of  ap¬ 
plication  development  that  are  unique 
and  mission-critical. 

■  Alan  fisher,  choinnon.  /ron  Speed  /nc.. 
Mountain  View,  Calif. 

■  DATA  OVERLOAD 

There  are  two  dirty  little  secrets  about 
Web  services.  One,  they’ll  never  be  the 
Swiss  Army  Knife  of  the  enterprise.  In¬ 
stead.  they'll  be  just  one  tool  in  the  in¬ 
tegrator's  toolbox.  Twa  Web  services’ 
power  to  make  quick  connectioos 
among  myriad  companies  will  open 
the  data  floodgates  and  dramatically 
increase  the  problem  of  information 
overload.  As  a  result,  data  integration 
will  top  every  CIO's  to-do  list  by  200S. 

■  Bob  Zurek,  vice  president  of  advanced 
technology,  Ascenfial  Software  Corp., 
Westboro,  Mass. 

■  DMSiON  OF  LABOR 

Over  the  next  three  to  five  years,  IT 
departments  will  ^>ecialize  more  on 
developing  Web  services  for  specific 
functions  such  as  accounting  and 
billing,  w^ile  business  departments 
will  take  on  development  of  Web  ser¬ 
vices  for  actual  applications  such  as 
order  entry,  inventory  management  or 
claims  processing. 

Why?  Because  Web  services  tools 


will  become  as  simple  as  Microsoft 
Office  tools  are  today.  The  hi^-level 
editor  tools  will  evolve  tow'ard  the 
orchestration  of  services  and  vrill  be 
usable  by  knowledge  workers. 

■  Eric  Newcomer,  chief  technology 
officer,  Iona  Technologies  PLC. 

Watdtam,  Mass. 

■  OUT  OF  CONTROL? 

By  2004,  low-level  concerns  about 
security  and  interoperability  of  Wri> 
services  will  be  replaced  by  high-level 
concerns  about  organizational  control 
Chief  technology  oflficers  will  be  faced 
with  a  rising  tide  of  Web  services  that 
are  different  In  implementation  and 
performance,  have  no  central  point 
of  registry  and  begin  to  duplicate 
functicmality. 

■  Roman  Stanefc,  CEO.  Systinet  Corp.. 
Cambridge,  Mass. 

■  SELF-AWARE  SOFTWARE 

Agents  —  software  components  with  a  , 
sense  of  self  —  will  replace  Web  ser¬ 
vices  as  the  next  layer  of  abstraction  in 
software  development  By  2006,  agent 
software  will  be  the  dominant  design 
principle  for  software  development 

■  Charles  Stodl;  CEO.  fiash/tne/nc., 
Cleveland 
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See  DB2  software  connect  data,  near  r ■ 
See  DB2  software  connect  formats,  ol' 
See  DB2  software  create  insight,  agaii 


DB2.  It's  the  ultimate-portfolio  of  real-tin 
every  scrap  of  data,  no  matter  where  it 
ii-sightfui  and  open,  DB2  lets  you  use  a 
or  Microsoft  —  goodbye  “rip  and  replaci 
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Diversity  in  JT  Careers 


WK«n  iKe  Inbrmtilon  TKhftok>(y  AmociMioa 

met  eeriter  ihK  monih  for  the  ennwel  Workforce 
Cenvocetion.  there  were  two  aflical  items  for 
cons iderelton  -  the  slate  of  the  fT  workforce  and  the  report  of  a 
Blue  Ribbon  fanet  on  Oivcrsiry. 

In  Its  annual  survey  of  tOO  hiring  marsagers,  fTAA  found 
that  Ihe  employmervt  boursoe  back  predicied  a  year  ago  didn't 
bounce  However.  Ihe  same  hiring  managers  say  the  downslamg  era 
seems  to  be  at  an  eisd.  At  year-end  2002. 102  million  people  were 
empioyed  In  ft  m  the  United  States  -  about  even  with  employment 
figures  for  2000  And  (usl  over  tOO.OOO  new  fobs  are  planned  for 
2002  -  slow  but  steady  growth  compared  to  Ihe  exponential  growth 
of  the  pea  The  key  skllla  needed  are  in  pregremiMrtg/softwere 
engineering,  technical  support  to  capllairte  on  new  IT  solullons 
and  enterprise  management  implementation  and  Improvement 


Blu*  Ribbon  Panel  Report  on  Diversity 

Be— fiophlc  wpioeeiitofleii  by  pertewtoie  ef  If  I  IT 
SMim:  ITAA  MOJ 


:  llJ  Hal" 


Nine  of  10  workers  will  support  banks,  insurance  eompaniev 
manufacturing  compames  or  other  non-IT  businesses 

In  Ihe  midst  of  this  matunng  of  the  fT  sworkforce.  (he  ITAA 
also  issued  three  priortites  wtih  regard  to  diversiiy  According  to 
Bob  Knovriing,  chaimun  of  SimOesk  Technologies  and  chairman  of 
Ihe  fTAA  panel,  the  Blue  Ribbon  Panel's  ^tonnes  aren't  'very  pro 
vocative  *  However.  Knowlmg  is  challenging  n  leaders  and  human 
resources  professwnels  to  lake  provocative  action  'The  only  wey 
I  have  ever  seen  a  company  change  Its  face  is  through  the  will  of 
Ihe  CEO  and  board,*  says  Knowllng.  *The  ren  of  the  work  m  this 
report  Is  window  dressing  If  there  isnT  support  and  commitment  at 
Ihe  lop,  indudutg  making  sure  you  have  charged  cxecuirves  with 
performance  Improvement  in  this  particular  area  and  lirtk  thee  pay 
to  improvement 

*We  -  In  this  report  -  are  on  spot  with  the  dtagrtoses  and 
have  to  admit  that  these  are  merely  preclical 
steps.*  adds  Knowlinf  There  vhH  be  mere  then 
<•00,000  new  lobs  this  year  We  musi  have  the 
dialogur  that  ifus  a  a  business  imperative  Left  to 
our  own  devKcv  we  hU  the  jobs  around  in  with 
pwple  who  took  like  us -it's  an  onertfaiion.  not 
racism  Bui  I've  seen  nrsl  hand  what  can  happen 
““  when  the  executive  suite  reflecu  ihai  commit 
mem  to  diversity  The  organlxalton  grpwt  by 
leaps  arid  boursds  when  women  and  people  of 
M*  color  shew  up ' 

The  second  prtortty  tn  the  report « le 
riKiease  corporate  outreach  and  mentortng  To 
assist,  the  Blue  Ribbon  Panel  tssued  a  fist  of  best- 
m-class  examples.  Specifically  the  comnUNee 
called  for  esiablithing  professtoisal  forums  that 
bring  together  diverse  IT  professionalt  and  pro¬ 


vide  support  lo  such  gmups  as  Black  Data  Processing  Atsocialiwi. 
Women  in  Technotofy.  the  Nailortol  Auoeialioo  of  Female 
Execuinres  and  the  Society  for  Hispanic  PtofetponaJ  Engineers 
The  fuxal  prsonty.  fostering  stronger  pannershipi  with  col¬ 
leges  end  urwvenities,  deals  wth  the  pipeline  of  talem  and  the 
future  *We've  seen  tome  mere  mental  improvements  for  women 
and  Hispanics  over  the  past  eifhi  years,  and  we've  seen  improve 
mem  in  ihe  number  of  women  and  minoniies  ortupying  teats  m 

underfvaouaterT-retaladstudi»s.''Knowl«ngtayt  'Mowevei.thes 

enroUmanl  figures  aren't  Irantlaiing  to  placement  in  the  protessro 
The  result  is  that  we  hem  a  mass  of  people  who  are  opting  owl  of 
It  and  choosing  other  fitldt  riot  because  they  don't  want  to  be  an 
engitveer  but  because  they  don't  have  acceci ' 

Among  the  barriers  idemihed  m  pursuit  of  an  fT  eweer  k  tt 
pereeplion  that  the  profession  is  one  of  itoUiiois/woiking  atone. 
2e/T  aivd  ■nslablltly  Reality,  according  to  the  report  it  that  crealm 
and  innovating  are  team  efforts,  that  there  a  a  direct  line  befweet 
IT  deielopmenl  and  business  performance,  and  that  the  maianly 
of  organiialtons  are  eomiMBed  to  a  balance  between  work  and 
persortollife 

far  Ihe  lull  report  and  betl-in-class  acUon  stops,  go  to 
WWW  itaaprg/ workforce 


IT  Careers 

For  information  on  recruitment  advertising, 
Flaase  contact;  MancyJ  Paccival. 

Director,  ftecruitmeni  Advertising, 
at  BOO-762-2977 
SOO  Ofd  Connecticut  Path 
Framingham.  MA  ODOl 
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Get  IT  Delivered. 


News  analysis,  commentary  and  practical  tips  sent 
straight  to  your  desktop. 


To  remain  at  the  forefront  of  industry,  today's 
IT  leaders  need  easy  access  to  strategic 
information,  news  analysis  and  advice. 
Computerworld  delivers  with  coverage  that 
emphasizes  and  advocates  for  the  user 
perspective,  providing  balanced,  objective 
reporting  on  a  wide  range  of  technologies, 
business  trends,  career  topics  and  man¬ 
agement  issues.  Computerworld  gives  you  the 
tools  you  need  to  succeed — to  evaluate  and 
implement  technology  solutions  that  put  you 
one  step  ahead  of  your  competition. 


With  a  cutting-edge  suite  of  more  than  25 
e-mail  newsletters,  we  ensure  that  you  have 
access  to  the  information  you  need  in  a  way 
that  is  most  useful  to  you.  Whether  it's 
Computerworld  Daily,  issued  the  morning  and 
afternoon  of  each  business  day,  or  weekly 
newsletters  covering  the  technology  spectrum, 
there's  no  better  way  to  stay  In  tune,  in  touch, 
and  on  top  of  today's  ever-changing  world  of 
IT  than  with  Computerworld. 


Stay  in  tune,  in  touch,  and  on  top  of  today's 
ever-changing  world  of  IT. 

Computerworld.com/newsletters 


How  to  Contact 


Wf  trrvifc  readers  fo  caH  or  write  wirt  their  comments 
and  ideas.  It  is  best  to  submit  ideas  to  one  of  the  department 
editors  and  the  appropriate  beat  reporter. 
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Terror  Threats  Spark  IT, 
Physical  Security  Changes 


Lehman  Brothers 
adds  access-control 
systems,  safety  kits 

av  OAN  vEaroN 

The  everpbesent 
threat  of  terrorisio 
has  spawned  the 
adoption  of  some 
unusual  workstation  peripher* 
ais  at  investment  firm  Lehman 
Brothers  Holdings  loc. 

As  part  of  a  global  program 
to  improve  security  and  lessen 
woikforce  anxiety  in  the  wake 
of  the  Sept.  U  attacks.  New 
York-based  Lehman  Brothers 
now  deploys  personal  safety 
emergency  kits  with  every  PC 
and  workstation  it  installs,  of¬ 
ficials  said  durii^  an  online 
conference  last  week. 


The  kits  include  a  gas  mask, 
safety  goggles  and  a  whistle 
“to  draw  attention  to  yourself 
if  in  the  event  of  an  evacuation 
you  need  to  draw  attention  to 
yourself.'*  said  Ken  Damstrom, 
global  head  of  seciuity  opera¬ 
tions  at  I.ehmaD  Brothers. 

The  distribution  of  the 
emergency  kits  is  only  the  lat¬ 
est  in  a  series  of  security-relat¬ 
ed  steps  that  Lehman  Brothers 
has  taken,  said  Damstrom, 
who  spoke  as  part  of  the  Ter¬ 
ror  and  Technology  Online 
Conference  sponsored  by  ID- 
Partners  LLC  in  Washington. 

Some  of  the  moves  predate 
Sept.  U.  2001.  For  example, 
prior  to  the  terrorist  attacks. 
Lehman  Brothers  began  de* 
ployii^  a  global  access-con¬ 
trol  system  developed  by 


NexWatch.  an  Oak  Creek, 
Wis.-ba$ed  division  of  Honey¬ 
well  IiUernational  Inc.  The 
technology  integrates  physical 
securit)’  monitoring  for  all  of 
the  Ann’s  facilities  in  23  coun¬ 
tries.  according  to  Damstrom. 

The  NexWatch  system  lets 
Lehman  Brothers  employees 
move  among  o0lces  without 
hassles  and  enables  corporate 
security  oiAcials  to  track  what 
is  happening  in  each  facility, 
be  said  It’s  also  connected  to 
the  Arm's  Are  alarm  systems 
and  to  IT  systems  $ui±  as  the 
company’s  e-mail  applications. 

In  another  protect  started 
before  S^t.  li,  Lehman  re¬ 
cently  completed  the  installa¬ 
tion  of  a  global  closed-circuit 
television  (CCTV)  system  that 
transmits  data  across  its  IT 


networt;  infrastructure.  Dam¬ 
strom  said  The  CCTV  setup 
is  integrated  with  the  access- 
control  system  and  lets  the 
Ann's  security  team  monitor 
events  at  offices  in  real  time. 

In  addition.  Lehman  Broth¬ 
ers  has  installed  radiation  and 
bomb  detectors  at  its  Manhat¬ 
tan  offices.  But  because  dc- 
ployit^  personnel  to  monitor 
all  of  th^  systems  would  be 
too  costly,  the  Arm  is  using  its 
IT  networks  to  centrally  track 
images  and  data. 

Tou  simply  have  to  woric 
smarter  in  today's  world.”  said 
Ted  Price,  managing  director 

Hit’s  not  about 
the  numbers 
of  guards;  it's  about 
theinteKgenceand 
the  training  that 
youieverage. 

TFO  PMCL,  eiOeAt  H£A0  OF 
SECunrr.  lehiun  brothers 


and  global  head  of  security  at 
Lehman  Brothers.  'It’s  not 
about  the  numbers  of  guards; 
it's  about  the  intelligence  and 
the  training  that  you  leverage.” 

Tbe  company  has  also 
changed  the  way  it  approaches 
disaster  recovery  and  business 
continuity.  Its  plan  **15  not 
written  down.”  Price  said.  "We 
have  no  playbook."  But,  he 
added.  Lehman  Brothers  has 
tried  to  build  "the  siiqtie  best 
communication  system  so  that 
we  can  get  a  bold  of  the  key 
employees”  if  a  crisis  occurs. 

Damstrom  said  the  compa¬ 
ny  uses  Franklin.  Teim.-based 
Dialogic  Communications 
Corp.’s  Communicator  soft¬ 
ware.  which  can  transmit  hun¬ 
dreds  of  crisis  alerts  and  life¬ 
saving  instructions  simultane¬ 
ously  to  cell  phones,  pagers 
and  other  devices. 

Lehman  Brothers  also  has 
internally  developed  software 
that  lets  workers  use  any  PC 
to  access  their  desktops  from 
remote  locations.  I 


Continued  from  page  i 

Linux  Claim 

noted  that  he  would  become 
more  coocemed  if  SCO’s  law¬ 
suit  against  IBM  were  to  suc¬ 
ceed  but  said  that's  not  a  sure 
thing.  They  haven't  proven 
anything,”  Poole  said.  "Right 
now,  I'm  fust  amused.” 

But  Brad  Friednum.  vice 
president  of  information  ser¬ 
vices  at  Buriington  Coat  Fac¬ 
tory  Warehouse  Corp.  in  Bur- 
lin^on.  N.).,  said  SCO's  legal 
thr^t  "bears  to  be  watched  by 
people  like  ourselves  v/ito  use 


Linux."  Hie  same  applies  to  its 
suit  against  IBM,  be  said. 

It's  too  early  to  determine  if 
or  how  Burlington  Coat  will 
be  affected,  Friedman  said.  But 
he  plans  to  seek  legal  advice  to 
better  gauge  "the  potential  im¬ 
plications  and  what  we  should 
be  doing  about  it,  if  anything." 

Referring  to  tbe  open- 
source  intellectual  property 
issues  being  raised  by  SCO. 
Tony  lams,  an  analyst  at  D.H. 
Brown  Associates  Inc.  in  Pori 
Chester,  N.Y.,  said  it  was  "only 
a  matter  of  time  before  some 
of  these  were  tested  in  court.”  I 

But  a  key  reason  for  SCO's  I 


legal  onslai^t  could  be  the 
economic  effect  Linux  is  hav¬ 
ing  on  the  company,  lams  said. 
An  upcoming  DJH.  Brown  re¬ 
port  comparing  Linux  distrib¬ 
utions  with  SCO's  UnixWare 
operatii^  system  shows  that 
Linux  is  "better  than  or  equal 
to  UnixWare  in  their  function¬ 
al  capabilities.”  be  added. 

Defensive  Posture 

Dari  McBride,  SCO’s  CEO.  in¬ 
sisted  that  the  company's  ac¬ 
tions  are  reasonable.  "These 
are  our  crown  jewels  we’re 
talking  about.”  he  said.  The 
world  is  not  ^>out  stealing 
people's  code,  laundering  it 
and  saying  everything’s  OK.  In 
the  end,  what  you  could  see 
come  out  of  this  is  l^al  Linux.” 

For  now.  though.  Linux  ven¬ 
dors  that  continue  to  ship  tbe 
operating  system  will  do  so  "at 
their  own  peril”  McBride 
warned.  is  immediately 
halting  sales  of  its  own  Linux 
releases,  though  tbe  company  j 
said  it  will  continue  to  support  I 


existing  users  and  won't  target 
them  for  any  legal  action. 

SCO's  legal  fight  could 
even  if  some  of  the  company's 
source  code  did  make  its  way 
into  Linux,  said  Daniel  Rav- 
icber.  an  attorney  who  special¬ 
izes  in  open-source  legal  mat¬ 
ters  at  Pierson,  Belknap. 

Webb  6c  Tyler  LLP.  a  New 
York-based  law  Ann. 

The  worst -case  scenario  is 
that  some  people  have  to  have 
a  pizza  party  and  do  some  re¬ 
coding"  to  replace  any  alleg¬ 
edly  offending  code,  Ravicher 
said.  "In  the  oriost  likely  sce¬ 
nario.  (SCO  has]  no  case  with 
substantial  merit." 

George  Webs,  an  analyst  at 
Gartner  Inc.,  said  SCO's  cam¬ 
paign  against  Linux  could  db- 
courage  use  of  tbe  operating 
system.  But  Weiss  added  that 
he  hasn’t  seen  anything  like 
that  happen  since  S03  filed 
its  lawsuit  against  IBM. 

Weiss  said  be  has  asked  SCO  ' 
executives  to  show  him  exam¬ 
ples  of  specific  Unix  code  in 


Linux,  but  they  have  declined 
to  do  so.  citing  the  ongoing  le¬ 
gal  actions.  really  only 
ha\T  SCO^  word  for  it,  which 
they’re  attempting  to  make 
very  compelling."  be  said. 

In  an  e-mail  interview,  Lin¬ 
ux  creator  Linus  Torvalds  said 
he  would  "love  to  hear  what  it 
b  they  consider  infringing, 
since  I'd  like  to  go  back  and 
see  where  it  got  adopted." 

Torvalds  s^  it's  possible  to 
track  the  origin  of  any  section 
of  the  Linux  keroel.  "We've  got 
all  the  history  available  sonse- 
wherc,  and  it  should  be  pretty 
easy  to  show  when  something 
was  added  and  what  the  lin¬ 
eage  was,"  he  »Tote.  B 

Robert  McMUlan  of  the  IDG 
News  Service  contributed  to 
thb  story. 

UHVEMKIBEKT 

Reed  about  low  companes  Rad  Hm 
and  SuSEa»itBSJBwo  SCO's  tagaieaaws. 
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COMniTllweilD  Kit  H.  7m 


Terror  Threats  Spark  IT, 
Physical  Security  Changes 

rhe  kits  include  a  gav  mask. 


I  Chilian  hrotlKTs 
adds  access-control 
systems,  s;ifct\  kits 

6V  OAN  VERTON 

lit  t  \  i  K  I'Ktsi  \  I 

threat  of’  terrorism 
has  spawned  the 
adtiption  of  some 
unusual  workstation  peripher¬ 
als  at  investment  firm  Lehman  I 
Brothers  Holdings  Ine. 

As  part  of  a  global  program 
to  improve  security  and  lessen 
workforce  anxiety  in  the  wake 
of  the  Sept.  II  attacks.  New 
York-based  Lehman  Brothers 
now  deploys  personal  safety 
emet^enev  kits  with  ever>  I'ti 
and  workstation  it  installs,  of¬ 
ficials  said  during  an  online 
ctinfcrence  last  week. 


saletv  goggles  and  a  whistle 
lo  draw  attention  to  yourself 
il  in  the  event  of  an  evacuation 
you  need  t«i  draw  attention  to 
yourself."  viid  Ken  liamstrom. 
global  head  of  security  oper.i- 
tions  at  Lehman  Bnnhers. 

■fhe  distribution  of  the 
emergency  kits  is  only  the  l.it- 
est  in  a  series  of  security-relat¬ 
ed  steps  that  I.ehman  Brothers 
has  taken,  said  Pamsirom, 
w  ho  spoke  as  pan  of  the  "ler- 
ror  and  Technology  Unline 
(Ainfcrence  sponsored  by  ID- 
Partners  LLC  in  Wjshingt<»n. 

Some  of  the  moves  predate 
Sept.  11. 2001.  for  example, 
priiir  to  the  terrorist  attaeks. 
I.ehman  Brothers  heg.tn  de¬ 
ploy  ing  a  global  access-con¬ 
trol  system  developed  by 


Ne\\V.iii.h.  .m  t  Lik  tireck. 

Wis. -based  Ji\  isjon  oi  HotSev- 
well  International  Inc.  1  tic 
technology  integrates  physie.ii 
security  monitoring  fot  all  of 
the  firm’s  facilities  m  2=  cmni- 
iru's.  .icci-rditig  to  n.imstroni 

Die  NexW.iich  system  lets 
1  ell  man  Brothers  employees 
move  am«*ng  offices  without 
hassles  and  en.ibles  eorpor.iie 
security  offiei.i|s  to  track  what 
is  happening  in  e.ich  fav  ilitv, 
he  said  lt  sa|s»i  lamnected  to 
the  llrm's  fire  alarm  s\ stems 
and  t«'  I  I  sy  stems  such  as  the 
ci’mpany  "s  e-m.iil  applic.itions. 

In  .mother  protect  si.iried 
before  Sept  M.  I  ehm.m  re 
cently  completed  the  install.t- 
tion  of  a  global  closed -eireu it 
television  fCCl A")  system  flut 
transmits  data  across  its  IT 


iielwi-rk  uilr.isiru.  iviii  li  mi 
sUoins.iiJ,  I  lu- 1  (  l\  s^'Uij- 
is  iniegr.iieJ  'viih  (hr  .a.osv 
■  ■‘iilrMl  s^  sti'Tii  .md  lets  tla 
lirm's  mciumv  ir.nii  uioiitti.f 
events  .n  oifices  m  u.»|  miu 
In  .iJvhiioti,  1  t'hiii.iii  Broili- 
eis  h.is  iiisj.ille.l  r,idi.itioii  .jnd 
I'liiiib  detectors  at  its  M.inli  i’ 
l.in  oiiki-s  But  bi  i.mse  ,K 
ploy  ing  pel  si.niiel  t»»  monitni 
all  ot  tiu  se  svstt  111'  vv»iul.I  hi 
toi  >  eosilv  the  finn  is  nsine  its 
11  networks  to  vi-nir.illy  tt.iD 
images  .iiid  Jal.i 
'  Noil  simply  h.ivetowork 
smarter  It!  tod.iy  swoilj,  x,iul 
led  I'nee.  managing  director 

It’s  not  about 
the  numbers 
of  guards;  it’s  about 
the  intelligence  and 
the  training  that 
you  leverage. 

TEO  PRICE.  Ti.  -ti:  • 
SKas"' 


.md  glol'.il  la  ,id  ol  '» .  loitc  ■! 

I  >.10)1.111  Hr>-|lu  |s  |(  s  [u>t 
iL>>UI  tin  lllinil'i  rs  eu  ir  L 
•:  s  .tt'.iui  111,  lilt,  lliget.'i  .m.i 
iti»  «»  mmic  ili.it  \<>it  lever.. 

1  hi  lomp-im  h,i'  .iN.. 
ih  lllCl  .1  tiil’  U.H  It  1('|T...Khv' 
dis.i'tir  riioverv  .md  t'xisiness 
I  oiiimmiv  Its  p)j(i '  S'  Moi 
Wf.lteli  .loun.  Prill  said  U. 
li.iv.  II.*  pl.ivbook  But,  li.' 
.iddeJ.  1 1  liin.m  Bi.'ilu  »s  |,.,s 
tried  t*.  InnlJ  ‘  the  sinele  best 
.  omnnim.  aii>.ti  'Vstem  s..  th.ii 
we  '  .III  gi  t  .1  hold  .i|  the  key 
» inpl.  ivei  s  it  .1 1  r  ISIS  it, 'll  IS 

I  ■.tinstroin  s.»ij  tiu  ,omp.i 
n\  Uses  I  i  .iikklin  U  tin  b.is,  d 
Pi.il.ntu  I  onmumu.iiiotis 
t  .irp  s  (  .itimiunu .itoi  si.tt 
w.ire,  which  v.m  tr.insmit  him 
dreJs  i.t ,  f  ISIS  alerts  and  I  tie 
sav  mg  instructions  snmili.itie 
•  ■lisly  to  cell  plioiies  p.igers 
.md  other  dev  lees. 

I  ehm.m  Btoihirs  j|so  has 
mierti.illy  developed  s.itlw.iri 
that  lets  wi.rkers  iisa-  .my  Pt 
to  .teev’ss  till  ir  di'skiiips  irom  ^ 
remote  l>>cMiions  I 


Coniinued  from  poge  t 

Linux  Claim 

noted  that  he  wmuld  becDmc 
nnire  concerned  if  SCO's  law  ¬ 
suit  against  IBM  were  to  suc¬ 
ceed  but  said  that's  not  a  sure 
thing.  "They  haven’t  proven 
anything.’’  Poole  said.  "Right 
now.  I’m  just  amused.  ” 

But  Brad  Priedman.  vice 
president  of  inftirmatkm  ser¬ 
vices  at  Burlington  Coat  F;k*- 
tory  Warehouse  (lorp.  in  Bur¬ 
lington.  N.I..  said  SCO’s  legal 
threat  "bears  to  be  watched  by- 
people  like  ourselves  who  use 


I  Linux."  "fhe  same  applies  to  its 
I  suit  against  IBM.  he  said, 
j  It’s  loo  early  to  determine  if 
I  or  how  Burlington  Coat  will 
I  be  affected.  Friedman  said.  But 
he  plans  to  seek  legal  advice  to 
better  gauge  "the  potential  im¬ 
plications  and  what  we  should 
!  be  doing  about  it.  if  anything." 
j  Referring  to  the  ops-n- 
I  source  intellectual  property 
I  issues  being  raised  by  SCO. 

[  Tony  lams,  an  analyst  at  IVIl. 

1  Brown  Associates  Inc.  in  Port 
Chester.  N.Y..  said  it  was  "vmly 
a  matter  of  time  before  some 
I  of  these  were  tested  in  court.” 

‘  But  a  key  reason  for  S(!0's 


legal  onslaught  could  be  the 
ecimomtc  eO'ect  I  inux  is  hav  • 
ing  on  the  company.  I.mis  >aid. 
.An  upccmiing  IXH.  Brown  re¬ 
port  comparing  Linux  distrib¬ 
utions  with  set  Vs  L’nixWare 
operating  system  show  s  that 
I  inux  is  “better  than  or  equal 
to  UnixWare  in  their  function¬ 
al  capabilities."  he  added. 

Defensive  Posture 

Dari  McBride.  StXVs  Llti).  in¬ 
sisted  thiit  the  c«*mpany's  ac- 
tii»ns  are  reasonable.  “Thi-se 
are  our  crow  n  k’wols  we’re 
talking  abtmt."  he  s.tid.  “  I  he 
W  orld  is  not  about  stealing 
peoples  cvkIc.  laundering  it 
and  saying  everything’s  OK.  In 
the  end.  w  hat  you  could  see 
cv>ine  out  of  this  is  Iiytal  1  inux." 

For  now.  though.  Linux  \rn- 
d«)rs  that  continue  to  ship  the 
operating  system  will  d»»  so  "at 
their  own  peril."  McBride 
warned.  StX)  is  immediately 
halting  sales  v>f  iisown  Limi.x 
releases,  though  the  ciimpany 
said  it  w  ill  continue  to  support 


existing  users  .inJ  won  i  i.irgv't 
them  for  .my  legal  .iciion. 

s<  O's  Ii-g.)|  fight  could  fail 
even  il  some  of  the  eonip.iny  s 
source  Cods-  did  make  its  w.u 
into  I  inux.  viiJ  D.miel  Rav 
icher.  an  attorney  who  speei.il- 
i/es  in  open-source  legal  mat¬ 
ters  at  Patterson.  Belknap. 
XSebbek  Lyler  1 1  P.a  New 
York-based  law  firnv. 

"I'he  worst-cass'  svvnario  is 
that  some  people  have  lo  have 
a  pi//j  party  and  do  some  re¬ 
coding"  to  replace  any  alk-g- 
edly  oftending  code.  K.iv  idler 
s,iid.  "In  the  most  likely  see- 
n.irio.  I  St  it )  has  1  no  ease  w  ith 
subst.mti.ll  merit " 

(icorge  Weis.s,  an  analyst  at 
Cariner  Inc,,  said  st iD’scani- 
paign  against  I  inux  could  dis¬ 
courage  usi-  of  the  o|vraiing 
system.  But  Weiss  added  that 
he  hasn’t  seen  anything  like 
rh.it  liappen  since  s(  :(>  filed 
its  lawsuit  against  IBM. 

Weiss  siiid  he  has  asked  St  it  i 
executive's  to  show  him  exam¬ 
ples  of  spe'cifjc  Unix  ctsle  in 


I  mux.  but  thev  h.ue  JccIuk'J 
to  do  SI i.  citing  the  ongoing  le- 
g.i]  .iclions  '\\c  really  only 
luive  st  rVs  Wind  for  it.  which 
thm  re  .ntempiing  to  m.ike 
very  conipelling."  he  s-ud. 

In  an  e-mail  interv  lew.  I  in¬ 
ux  creator  I  iniis  lorx atJs  vnJ 
he  would  "love  to  heat  vvlui  il 
is  they  ouisidiT  infringing, 
since  I’d  like  to  go  baek  and 
see  where  it  got  adopted  ‘ 
lorv.ilds  s.:iid  (I's  pti«.i,ible  to 
track  the  origin  oi  anv  sevtion 
of  the  I  inux  kernel  "We’vegol 
all  the  history  availabiesomi- 
•where,  and  it  should  be  pretty 
easy  to  show  when  something 
w.is  added  and  wlut  the  lin¬ 
eage  was,"  he  wrote  I 

RidHTf  .\/e.\fi7/un  ot'ihe  l/>t. 
.S't'ves  Service l•l^flfri^o^ed  to 
ihi-s  .story. 

UNUXVENDOK  REACT 

Rr-ad  «l>out  htM  corno^H-'.i  Hue  Rto  Ha' 

an)  SuSE  r  itiae  laavg  SCO  -i.'^ 
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SCO’s  Legal  Gambit 


The  cxHixHtiy  armounces 
attheUniBVMorldoonfer- 
ence  0181  Q's  creating  a  new 
diviston  responsble  lor  en¬ 
forcing  Rs  position  as  the 
*maiorRy  owner  ol  Unix  in- 
teRectual  property.* 


MUCH 

SCO  Rtos  a  lawsuit 
seeking  $1  biion  n 
damages  froiT)  IBM 
for  afegedly  using 
Unix  features  as  part 
of  its  Linux  services 
business. 


luy 

The  soflwaie  vendor 
halts  Its  mm  Linux 
shpmenls  and  warns 
corporMe  users  o(  the 
operating  system  that 
they  could  te  using 
SCO's  code  iegally 


BPA  ARM  ^ 


THE  BACK  PA6E 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

rr  Delivers 


Does  it  matter?  By  now  you’ve  surely  heard  about 

Nicholas  G.  Carr’s  article  in  the  May  2003  issue  of  Har¬ 
vard  Business  Review,  “IT  Doesn’t  Matter”  [QuickLink 
37990].  Carr’s  thesis  is  simple:  Now  that  the  IT  infra¬ 
structure  has  been  built  out,  you  can’t  get  sustainable 
competitive  advantage  from  IT,  because  anything  you  can  buy,  your 
competitors  can  buy  too.  So  there’s  nothing  left  for  IT  managers  to 
do  but  cut  costs  and  manage  risk. 

Scary,  isn’t  it?  No,  not  about  IT  —  about  Carr.  Here’s  a  big-deal 
business  pundit  who  not  only  misunderstands  IT’s  relationship  to 


competitive  advantage,  but  who  also  thinks  he’s 
discovered  something  new. 

Carr  is  right  about  one  thing:  You  can’t  get 
sustaiitable  competitive  advantage  by  buying 
IT  products,  services  or  information.  And  his 
logic  and  historical  analysis  on  this  point  are 
dead-on.  Like  railroads  and  electricity  before 
it.  IT  has  become  inirastructure  —  widely 
available,  affordably  priced  and  standardized. 
That  means  any  competitive  advantage  you  get 
just  from  buying  IT  will  last  only  until  your 
competitors  buy  the  same  products,  services 
and  information  you  just  bou^t 

But.  hey  —  that’s  not  news!  Every  experi¬ 
enced  IT  (and  MIS  and  data  processing)  man¬ 
ager  over  the  past  40  years  has  doped  this  out. 

Sure,  vendors  claim  that  their  hot  new  prod¬ 
ucts  will  revolutionize  your  business.  They 
always  have.  But  we  all  figured  out  soon 
enough  that  new  hardware,  applications,  net¬ 
works,  protocols  and  programming  languages 
don’t  give  you  a  lastii^  business  advantage  over 
your  competitors.  Whatever  you  buy,  they  can 
buy.  Whatever  you  buUd,  they  can  build  toa 

Carr's  great  insight  was  common  wisdom  in 
the  mainframe  1960s,  the  time-sharing  1970s, 
the  PC  1980s  and  the  Internet  1990s. 

You’ve  never  been  able  to  get  a  sus¬ 
tainable  competitive  advantage  di¬ 
rectly  from  IT.  Yes,  technology  can 
cut  costs.  But  real  competitive  ad¬ 
vantage.  just  from  technology?  It 
never  lasts.  Heck,  it  barely  exists. 

Does  that  mean  IT  doesn’t  mat¬ 
ter?  Then  IT  hasn’t  mattered  for  40 
years  —  since  the  days  when  IBM’s 
System/360  introduced  standard¬ 
ized  hardware  and  software,  and 
Ross  Perot's  EDS  invented  utility 
computing. 

But  IT  does  matter  —  or  at  least 


it  can.  You  con  get  real  business  advantage  with 
technology.  You  just  don’t  get  it  from  products, 
services  and  information. 

You  get  it  ftom  processes,  skills  and  execu¬ 
tion  —  the  same  things  that  let  any  business 
differentiate  itself  in  ways  that  don’t  involve  IT. 

Retailers  understand  the  value  of  processes, 
skills  and  execution.  They  have  to  —  they  must 
choose  the  products  they  sell  from  exactly  the 
same  pool  as  their  competitors.  So  Nordstrom 
differentiates  itself  from  Wal-Mart  through  its 
business  processes,  its  employees’  skills  and 
how  those  employees  execute  on  those  proc¬ 
esses.  And  Wal-Mart  differentiates  itself  with 
its  own  processes,  skills  and  execution. 

When  IT  is  used  most  effectively,  when  it’s 
really  focused  on  the  business  it  serves,  it  re¬ 
inforces  and  ampliffes  that  differentiation.  It 
maximizes  the  advantages  a  company  gets 
from  its  business  model.  It  improves  processes, 
leverages  skills  and  streamlines  execution  in 
ways  that  help  a  business  deliver  on  its  unique 
strengths.  It  helps  Wal-Mart  be  Wal-Mart  and 
Nordstrom  be  Nordstrom. 

That’s  how  you  get  competitive  advantage. 

If  that  sounds  a  little  fiizzy,  it’s  because  every 
company  is  unique.  That’s  why 
you’ve  got  to  know  your  company 
inside  and  out  if  you  want  to  deliv¬ 
er  IT  that  truly  serves  the  busi¬ 
ness.  The  kind  of  IT  that  doesn’t 
come  out  of  a  shrink-wrapped  box. 
The  kind  your  competitors  can’t 
match  by  writing  a  purchase  order. 

It's  as  much  about  business  and 
people  —  your  business  and  your 
people  —  as  about  technology.  But 
it  is  about  technology. 

And  when  that’s  what  IT  deliv¬ 
ers.  IT  really  does  matter. 

A  lot. » 


The  Perfect 


tor  Control  Freaks. 


Control  2  to  512  PCs  or  servers  from  a  single  keyboard, 
monitor  and  mouse  console  with  Tripp  Lite  KVM  Switches! 


Take  TOTAL  CONTROL  with 
Tripp  Lite  KVM  Switches!  Not  only 
will  you  be  able  to  manage  every 
computer  on  your  network,  you'll 
also  SAVT  VALUABLE  TIME. 

MONEY  AND  SPACE. 
Save  hundreds  of  dollars  per  port 
in  hardware  and  electricity  costs, 
eliminate  unnecessary  clutter 
and  improve  productivity  by 
avoiding  unnecessary  movement 
between  consoles. 


Tripp  Lite's  8-port  rackmount  KVM  Switch  is  full  featured  yet  economically  priced. 

•  All  metal  housing — occupies  only  lU  of  rack  space 

•  Simple  "plug-and-play”  setup  requires  no  software  configuration 

•  "Always-on"  technology  eliminates  need  for  external  power  source 

•  Individual  port  selection  buttons  allow  tor  faster  CPU  selection  without  scrolling 

•  On-screen  display  provides  simplified  menu-driven  management 

•  Compatible  with  PS/2,  AT*,  USB*,  Mac*  or  SUN*  systems 

•  Desktop  models  also  available  in  2  and  4-port  configurations 

•  When  used  with  optionel  Mwten,  sold  scpentely. 


FREE  4-Port  KVM  Switch! 

1 

Register  online  for  a  chance  to  win  a  FREE  4-port  KVM  Switch. 

Visit  www.tripplite.coni/promo/cw 

Ho  puichne  ntoessary.  Some  mtiictians  <pp^  Visit  out  Web  site  fet  dettits. 

H  TMPNJIE  I 


Tripp  Lite  is  ymr  sii^rfe  sourre  for  powtr  pntertioit 
and  conneoiiin'  produrU. 


www.tripplite.com 

1111  Ml.  35th  strtet.  Chicago.  IL  60609  (773)  869-1234 
iWganeEasBrs  OwceAww  urge  a  indent  of  aa  Owns  PuBwnwdHBionBiinc  undisnewa 


Electronic  Arts  Stays  Real  for  100,000 

Sims  Online  Players  with  Oracle 


It's  a  real  bummer  when  100,000  online  gamers  can't 
get  to  their  game.  That's  why  EA  chose  OradeOr  to 
run  Sims  Online.  What  do  you  run? 
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keyword:  ea 
or  call  1.800.633.1072 
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DB2  users  get  a  download  on  IBM's  database  plans. 


T)Y 


Aviail  Inc.  was  in  deep  trouble,  losing  $70 
million  in  sales  because  of  a  faulty  financial 
system.  But  then  it  made  the  gutsy  decision 
to  plow  $40  million  into  an  IT  overhaul. 

The  payoff;  Sales  doubled  and  profits  rose. 
Read  about  how  the  aviation  parts  supplier 
pulled  off  this  amazing  turnaround.  PAGE  41 
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HP  Takes  New  Pricing  P^th 
For  Utility-based  Computing 


Vendor  develops  ‘computon’  mechanism  for 
on-demand  U  services;  some  users  are  leerv' 


BV  THOMAS  HOFntAN 

Researchers  at  Hewlett-Pack' 
ard  Co.  are  developing  a  new 
pricing  approach  for  the  out¬ 
sourced  capacity-on-demanH 
computing  services  the  com¬ 
pany  offers.  But  several  IT 
managers  said  they’re  worried 
that  the  plan  is  too  complex. 

Under  HP’s  scheme,  prices 
would  vary  based  on  factors 
such  as  the  overall  demand 
placed  on  servers,  storage  de¬ 
vices  and  other  IT  resources, 
said  Bernardo  Hubennan.  an 
HP  fellow  and  director  of  the 
systems  research  center  at  the 
company’s  HP  Labs  unit. 


B2B  Venture  Maps  Rebound 


Bank-owned  Identrus 
hires  CEO,  sets  new 
digital  certificate  plans 


After  going  nearly  a  year  with¬ 
out  a  CEO,  Identrus  LLC  last 
week  said  it  has  hired  a  chief 
executive  who’s  charged  with 
resurrecting  the  developer 
of  digital  certificate  BVM 
technolc^  and  ex-  IflKlT 
pandingtbeuseofits 
Web-based  services  for  certi- 
fyii^  the  authenticity  of  busi- 
ness-to-business  transactions. 

New  CEO  Karen  Wendel 
i  acknowledged  that  New  York- 
based  Identrus,  a  privuely 
held  company  formed  by  a 
consortium  of  eight  banks  in 
1998.  has  MIed  to  effectively 
market  its  digital  identity- 
authentication  system  aiKl 


ntniS  applications  that  could 

generate  increased  demand 
iCW  among  financial  services  firms  | 
>  pl3f|s  other  potential  users. 

-  In  addition.  Identrus’  sys-  , 

tem  —  which  is  based  on  pub-  | 
iai  with-  lie-key  infrastructure  technol- 
X  last  ogy  —  isn’t  tied  to  payment- 

a  chief  messaging  programs,  supply 

^d  with  chain  management  systems  or 

oper  other  business  applications. 

Wendel  said  she 

HKijiMtiUllHM  plans  to  pursue  part- 
****"""“““"  nerships  with  appli- 
r  certi-  cation  vendors  like  SAP  AG 
of  busi-  and  Peop^eSoft  Inc.  and  hopes 

actions,  to  sign  some  deals  within  the 
mdel  next  12  months.  She  added 

w  York-  that  she  will  also  hire  a  new 

Aely  mariceting  team  for  Identrus  in 

by  a  the  near  future, 

inks  in  One  big  misstep  by  the  com- 
:ttvely  pany  was  retying  on  its  owner 
Jty-  banks  to  create  interest  in  its 
aiKl  /denrrus.  page  16 


He  added  that  a  new  unit- 
of-computing  metric,  which  is 
being  called  a  ‘‘computon”  in¬ 
side  HP.  would  be  akin  to  the 
pricing  models  that  utilities 
use  to  charge  customers  for 
kilowatt-hours  of  electricit>' 
based  on  the  ebb  and  flow  of 
power  demand. 

Huberman  acknowlei^ed 
that  the  computon  effort  is 
complicated.  For  instance,  HP 
will  have  to  account  for  vari¬ 
ables  such  as  how  well  its 
data  centers  perform  and 
the  amount  of  computing  re¬ 
sources  that  customers  re¬ 
quire.  he  said.  HP  also  needs 
to  figure  out  a  way  to  build  in 
pricing  provisions  to  cover  the 
possibility  that  companies  will 
use  more  or  less  of  a  specific 
IT  resource,  like  CPU  cycles, 
than  they  have  contracted  for 
Computon.  page  57 

New  Furor 
Over  Visas 
Reaches  Hill 

Measure  would  curb 
L-1  program;  H-IB  cap 
decline  approaches 

BV  PATIHCK  THIBODEAU 

LegisUtion  introduced  in  Con¬ 
gress  last  week  would  curb  the 
use  of  the  controversial  L-1 
visa,  which,  like  its  better- 
known  counterpart  the  H-IB 
visa,  lets  U3.  companies  im¬ 
port  foreign  woricers. 

The  proposal  is  the  first 
move  on  IT-related  visa  issues 
in  what  may  be  a  pivotal  year 
Visas, page  57 


Breathing  quickens  to  energ,co  major  muscle  oroiip- 


(©server 


The  rete'enceO  ifhO'Ovemenis  *o<  system  c»dcity  memory  ano  virtual  servers  have  planoea  availa£»lity  10  3lr03  4  limes  more  memory  is  256GB  8GB  merriory  is  stanOard  cn  Base  model,  more 
memory  'eQuireS  additional  charge  IBM.  the  e-business  logo  eServer  ar>d  iSeries  are  trademarks  or  registered  trademarks  ot  tnlernalional  Business  Machines  Corporation  Other  company, 
product  and  servce  names  rnay  Be  trademarks  or  servce  marks  ot  others  -  2003  IBM  Corporation  Alt  nghts  reserved 


Can  alloc  ••  .  is.  Or.  demand. 


Introducing  the  new  IBM  eServer  zSeries'  990. 

Meet  the  newest  eServer  zSeries  system  -  the  ultimate  IBM  mainframe  for 
on  demand  business.  The  human  body  senses  and  responds.  So  does 
the  z990.  It's  designed  to  allocate  resources  dynamically.  Run  hundreds 
of  Linux'  and  mainframe  applications  simultaneously.  The  2990  can 
improve  flexibility  and  efficiency.  On  demand.  For  a  free  CD  of  zSeries 
white  papers,  customer  references  and  more,  head  to  the  URL  below. 

Can  you  SGG  it?  See  it  at  ibin.coin/eserver/z990 


Compared  to  the  z900,  the  new 
zSeries  990  offers:’ 


•  Up  to  60%  improved  performance 

•  Almost  3  times  more  system  capacity 

•  4  times  more  memory 

•  2  times  more  virtual  servers 


WATCH  YOUR 
BACK,' 
VERITAS. 


BrightStor  ARCserve"  Backup  v9  beat  N^ritas™  Backup  Exec™  v9  hands  down  In  an  independent 
study  conducted  by  CCI  Communications.  According  to  CCI: 

•  BrightStor  ARCserve  backs  up  15-20%  faster  than  \feritas  Backup  Exec. 

•  BrightStor  ARCserve  is  nearly  4X  faster  to  install  than  Nferitas  Backup  Exec 
in  a  real-world  environment. 

•  BrightStor  ARCserve  has  no  restrictions  on  backing  up  remote  servers, 
unlike  Msritos  Bockup  Exec. 

•  BrightStor  ARCserve  has  fewer  steps  to  initial  backup  than  \feritas  Backup  Exec. 

ca.com/brightstor/study  1-866-410-3669 

BrightStor®  ARCserve"  Backup 


Computer  Associates® 


eZOOSConvMBrAsaooaieslniemMianai. (CAj  M ngNs  tvsarveo  Backup  Exacis a  ti3ijemark ol  Vanias  Software Co<po>alion  Saidyl 


I  oul<if'«o<  ai^enanca  tor  bcfti  products.  OTOSVETOE 


cnniNis 


The  Price  of  E-Payment 

In  the  Technology  section:  Electronic  invoice 
presentment  and  payment  systems  can  stream¬ 
line  bill  processing,  but  they  also  pose  Integra* 
cion  challenges  and  can  require  substantial 
business-process  changes.  Page  25 


05.26.03 


Ethernet’s  Power  Play 

In  the  Technology  section:  a  new  standard 
for  delivering  in-line  Power  Over  Ethernet 
cabling  could  soon  make  the  corporate  net¬ 
work  a  common  power  source  for  many 
network-attached  devices.  Page  30 
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6  SCO/Microsoft  Unix  deal 
draws  fire.  Critics  call  it  a 
ploy  to  make  Linux  users 
think  they  could  be  forced  to 
pay  fees  to  SCO. 

7  IBM  announces  DB2  changes, 
including  upgrades  to  the 
mainframe  version  of  its  flag¬ 
ship  database  that  will  sup¬ 
port  64-bit  addressing. 

8  Sun  adds  more  low-end 
servers  to  its  product  line, 
taking  aim  at  the  competition. 

10  QM  plans  wireless  service 
for  small  businesses  that  buy 
fleets  of  its  trucks.  It  will  be 
based  on  Gearworks  software 
and  Nextel  phones. 

12  Homeland  Security  ofTlcials 
eye  the  use  of  biometric  tech¬ 
nology  at  airports  and  border 
crossings. 

12  Threats  to  IT  and  physical  se¬ 
curity-.  as  well  as  regulatory 
requirements,  are  changing 
corporate  approaches  to  secu¬ 
rity.  say  conference  attendees. 

14  Postwar  Baghdad  will  have  a 
GSM  cellular  network,  thanks 
to  a  S20  million  Pentagon  con¬ 
tract  awarded  to  WorldCom, 

14  Nextel  exec  says  the  weak 
economy  is  helping  his  com¬ 
pany  sell  wireless  services. 

16  lntruslon*detection  tools 
from  ISS  will  include  a  proc¬ 
ess  for  reducing  the  ne^  to 
install  patches. 

16  Netegrity  combines  access 
control  with  IT  provisioning. 


41  Going  for  Broke.  When  the 
chips  were  down,  Aviall  in¬ 
vested  $40  million  in  IT.  Tlie 
payoff  was  a  5431  million 
boost  in  sales. 

44  Surviving  Software  Up* 
grades.  Divide  the  changes 
into  manageable  chunks,  en¬ 
list  users  as  allies,  and  deliver 
more  than  you  promised. 

46  Speedy  Recoveries.  Quick 
turnaround  on  IT  help  desk 
calls  boosts  employee  satis¬ 
faction  at  Baptist  Health  Care. 

48  Newsmaker.  Tracy  Austin 
talks  about  her  new  job  as 
Mandalay  Resort’s  first  CIO 
and  the  challenges  she  faces 
in  the  coming  year. 


32  Q&A:  Avoiding  Data  Center 
Blowups.  American  Power 
Conversion  CTO  Neil  Ras¬ 
mussen  explains  why  dau 
centers  are  prone  to  problems 
related  to  power. 

34  Future  Watch:  E*Commerce 
on  the  Fly.  Advances  in  hand¬ 
held  devices,  wireless  net¬ 
works  and  user  interfaces 
could  finally  make  mobile 
commerce  a  reality. 

36  Security  Manager's  Journal: 
Office  Clitics  Plays  Role  in 
Postmerger  Security.  Man¬ 
agement  nixes  an  effort  to 
coordinate  security  among 
newly  merged  companies  as 
Vince  Tuesday  attends  a  meet¬ 
ing  that  turns  into  a  fiasco. 


MANAGEMENT 


10  On  the  Mark;  Mark  Hall  en¬ 
counters  one  vendor  that 
says  it  can  solve  your  import 
woes  even  during  Orange 
alerts  and  another  vendor 
that  wants  a  U.N.-style  effort 
to  eliminate  spam. 

20  Patricia  Keefe  sa>'s  that  The 
SCO  Group's  efforts  to  buUy 
and  threaten  Linux  users 
won’t  win  the  company  any 
friends  and  that  the  real  un¬ 
known  is  what  Linux  support¬ 
ers  will  do  in  the  face  of  legal 
threats  and  underpricing. 

20  Pimm  Fox  offers  four  bottom- 
line  reasons  why  you  need  to 
consider  upgrading  your  busi¬ 
ness-intelligence  tools.  Luck¬ 
ily.  some  new  products  can 
make  the  upgrade  acrractive. 

37  Nicholas  Petreley  puts  him¬ 
self  in  the  shoes  of  a  satisfied 
Microsoft  customer. 

48  John  Berry  offers  some  deci¬ 
sion-making  frameworks  to 
help  IT  managers  prioritize 
projects  and  align  them  with 
business  objectives, 

58  Frankly  Speaking;  Frank 
Hayes  knows  why  The  SCO 
Group  is  suing  IBM,  dissing 
Linux  and  cozying  up  to  Mi¬ 
crosoft.  And  it  doesn't  have  a 
thing  to  do  with  its  customers. 
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Think  Hard  Before  Starting 
Vbur  Own  Company 

CAREERS:  As  tough  ecooonuc  contin¬ 
ue.  some  workers  unhappy  with  conditions 
at  their  current  jobs  may  consider  striking 
out  on  their  own.  Here's  a  list  of  things  to 
consider  before  making  the  leap. 
OQuieMM3aS64 

IMSecureOty) 

SECURITY:  Instant  messaging  systems  arc 
an  ideal  target  for  fast-^readiitg  computer 
worms  and  blended  threats,  says  Symantec 
Chief  Architect  Carey  Nacbenberg.  He  offers 
advke  00  reducing  tte  risk  of  a  security  at¬ 
tack  on  your  company’s  IM  systems. 
€IQiridiiMS7B2t 

An  bdraducdon  to  Templates 

OEVELOPMENT;  Itow  to  produce  &st, 
reusable  and  efifident  code  using  C^ 
templates,  wfaidi  allow  algorithms  to  be 
absttacted  from  their  dau  types. 

OQiMiMi  31848 

The  Readers  Strike  Back 

E-BUSINES$:  Does  i^am  deserve  to  be  pro¬ 
tected  by  the  Fust  Amendment?  Readers  let 
us  kiKw  what  they  think.  O  QulGkLinka3200 

KazaaHuzzahl 

SECURITY;  Peer-to-peer  file-sharing  appli¬ 
cations  like  fCazaa  are  as  nnicb  a  headadw 
for  security  managers  as  they  are  for  parents, 
says  columnist  Marcia  J.  Wilson. 

OQMoMJnk  38248 
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Critics  Question  Motives 
In  Microsoft/SCO  Deal 

Skeptics  see  licensing  agreement  with 
Unix  vendor  as  ploy  to  curb  Linax  threat 


AT  DEADLINE 


Microsoft  to  Fix 
Data  Backup  issue 

Mcresoft  Corp-  eonfkmed  that  a 
modfication  to  a  data  badtup 
utBfty  that  coma*  with  iti  operat¬ 
ing  systann  prevents  file  backup 
tapes  fannatled  uekig  Windows 
Server  2003  from  restoring  data 
on  computers  running  sarlsr  ver- 
skm  of  Windows.  The  company 
saM  H  has  deveiopod  a  fa  and  will 
reiease  H  shortly,  after  testing 
and  documentation  work  is  com¬ 
pleted. 


SGI  Cuts  Jobs, 
Nanows  Focus 

Citing  a  difficull  market  for  its 
high-end  systems,  Sdicon  Graph¬ 
ics  Inc.  saM  it  has  laid  off  more 
than  400  employees  and  is  re- 
focuslng  on  “vedfk  growth  ar¬ 
eas.*  Mountain  VMw,  CalH.-based 
sot  dUnI  dtotoaa  any  businesses 
that  H  wM  cdt  but  dd  efts  its  Urr- 
m-basad  Alfa  server  Hne  and  de¬ 
fence  industry  businesi  unH  as 
bright  spots.  The  layoffs  reduced 
the  company’s  workforce  by  10%. 


1^  Approves 
Draft  WLAN  Spec 

WhstauUm  vendors  said  the  kr-  I 
stitutaofQactricalandElectron- 
ies  EngiMan  Inc.  (CEE)  has  Im¬ 
proved  •  find  draft  version  of  the 
S02.t1g  WLAN  stMdard.  PPrfor 
manee  is  eipoetad  to  top  out  at 
afaool  20IUt^  fan  than  hdf 
the  S<lfafr/sac.  data  rate  origh 
naly  loulad  Mr  the  technology. 

Bd  wpperters  add  802.tlg  vdl 
he  bedravd-eompatifale  wflh  ei- 
isttng  802.tft  WLAN  devieea. 


Short  Takes 

TREND  MlCftO  me.  in  Cuparfino, 

CdN„  add  it  fend  a  ffanv  M  a  naw 
update  of  Ha  alianaQar  e-mal 
aacsrtly  pitewny  fftd  cauaad 
ttieaeftwMtoUadidliMa- 
aagaa  centdning  tiw  ladar  P. . . . 
mCflOSOfT  CEO  aisve  BAear 
aaM  ha  dm  te  aal  aenw  d  Ma 


ilodi  hoUtega  te  the  company  but 


BV  Tooon.wEise 

HE  SCO  GROUP 
INC-  last  week  fol¬ 
lowed  up  Us 
threat  of  possible 
legal  actions 
against  Linux  users  by  an¬ 
nouncing  a  Unix  technology 
licensing  deal  with  Microsoft 
Corp.  But  many  users  ques¬ 
tioned  Microsoft's  motives, 
citing  its  continuing  lack  of 
support  for  Linux 
The  financial  details  of  the 
contract  between  Microsoft 
and  Lindon.  Utah-based  SCO 
weren’t  disclosed.  Microsoft 
spokesman  Mark  Marlin  said 
the  software  vendor  agreed  to 
the  deal  after  SCO  offered  it  as 
a  waj’  to  ensure  that  Microsoft 
products  are  compliant  with 
the  inteliectuaJ  property 
claims  SCO  has  made  on  Unix. 

“Microsoft  has  said  for  a 
long  time  that  it  respects  intel¬ 
lectual  property,”  Manin  said. 
He  said  the  licensing  agree¬ 
ment  “has  absolutely  nothing 
to  do”  with  a  lawsuit  that  SCO 
filed  against  IBM  in  March  or 
its  assertion  this  month  that 
corporate  Linux  users  could 
face  legal  liabilities  for  run¬ 
ning  the  open-^urce  operat¬ 
ing  system  [QuickLink  3B514]. 

Conspiracy  Theories 

For  the  past  four  years,  Micro¬ 
soft  has  offered  software 
called  Services  for  Unix  that 
lets  users  nm  Unix  applica- 
doas  on  Windows-based  hard¬ 
ware  as  part  of  migration 
strategies  or  to  improve  inter¬ 
operability.  Martin  said  Ser¬ 
vices  for  Unix  is  tusi  one  rea¬ 
son  why  Microsoft  agreed  to 
the  licensing  deaL  which  cov¬ 
ers  all  of  its  products. 

But  critics  of  the  two  compa¬ 
nies  said  it's  hard  to  believe  a 
vendor  as  powerful  as  Micro¬ 
soft  would  sign  an  agreement 
with  SCS  unless  it  tbou^t  the 
move  would  keep  Linux  from 


posing  a  competitive  threat. 

Microsoft  “would  love  for 
corporations  to  believe  that 
they  will  have  to  pay  big  li¬ 
censing  fees  to  SCO  for  using 
Linux,"  said  Scott  Davis,  chief 
technology  officer  at  Realty 
Times,  a  Dallas-based  real  es¬ 
tate  Web  site.  “Anyone  wbo 
can  interpret  Microsoft's  an¬ 
nouncement  as  anything  other 
chan  a  PR  ploy  needs  a  seriuu.s 
reality  check." 

leffrey  Nicholas,  a  systems 
analyst  at  a  large  New  York  fi- 


8V  MATT  HAMBLEN 

BMC  Software  Inc.’s  Remedy 
Corp.  unit  (his  week  will  an¬ 
nounce  a  new  version  of  its  IT 
service  management  applica¬ 
tions  that  includes  upgrades  to 
tools  for  tracking  the  life  cycle 
of  IT  assets  and  managing 
changes  to  corporate  systems. 

Both  of  those  areas  were  ne¬ 
glected  during  Remedy's  prior 
ownership  by  Peregrine  Sys¬ 
tems  Inc.,  said  John  Ragsdale, 
an  analyst  at  Forrester  Re¬ 
search  loc.  in  Cambridge. 

Ma.<ts.  “Change  management 
and  asset  management  took  a 
back  scat  during  Peregrine’s 
ownership,  so  Remedy  is  cor¬ 
recting  tfai."  he  said. 

The  IT  Service  Manage¬ 
ment  5.5  release  also  includes 
revised  software  for  managing 
help  desks  and  service-level 
agreements.  This  is  the  first 
upgrade  by  Remedy  since 
Housion-l^ed  BMC  bought  it 
from  Peregrine  in  November. 
Remedy  remains  a  separate 
company  within  BMC  and  is 
based  in  Mountain  View,  r.alif. 

Health  First  Inc.  in  Rock- 
ledge,  Fla,,  upgraded  to  Reme¬ 
dy's  Help  5.0  software  in 


nanciai  services  firm  that  he 
asked  not  be  identified,  said 
he  thinks  Microsoft  wants  to 
help  fund  SCO's  Linux-related 
legal  actions.  “The  whole 
thing  to  me  really  doesn’t  smell 
right,"  he  said.  “It  seems  like 
it's  all  just  too  coincidentaL" 

In  a  re.s€arch  note,  Tony 
Baer,  an  analyst  at  onStrategies 
in  New  York,  called  SCO's  ac¬ 
tions  '‘the  software  industry's 
equivalent  of  terrorism.”  Baer 
said  he  “can  only  conclude 
that  the  licensing  of  SCO  Unix 
is  Microsoft's  strategy  to  drive 
a  new  wedge  into  the  Linux 
community,  a  sector  whose 
growth  poses  a  far  more  for- 


lanuary  and  plans  to  install  all 
four  of  the  new  modules  later 
this  year,  said  lose  Lanza.  IT 
support  and  operations  super¬ 
visor  at  the  nonprofit  health 
care  provider. 

Health  First  chose  the  Rem¬ 
edy  software  when  it  set  up  its 
help  desk  operation  because 
of  its  ease  of  use  and  its  inte¬ 
gration  with  the  other  three 
modules,  Lanza  said.  "This  5.5 
release  is  going  to  fit  just  like 
a  ring,"  he  noted. 

Heath  First  operates  three 
hospitals  and  65  medical  clin¬ 
ics  in  Florida's  Brevard  Coun¬ 
ty,  and  its  nr  systems  support 


BMC  Unit  Upgrades  Help  Desk, 
FT  Asset  Management  Aipps 


midable  threat  than  the  empty 
roars  emanating  out  of  SCO." 

The  Cendant  Hotels  division 
of  Parsippany.  N.f. -based  Cen¬ 
dant  Corp.  runs  about  3.700 
servers  based  on  SCO's  Open- 
Linux  operating  system.  David 
Chugg,  senior  director  of  hotel 
solutions  at  the  unit,  said  he 
initially  was  worried  about 
what  SCO's  legal  campaign 
would  mean  for  Cendant  Ho¬ 
tels.  But  he  said  he  was  reas¬ 
sured  when  SCO  said  it  would 
not  target  any  of  its  own  Linux 
customers.  “Out  of  all  the  posi¬ 
tions  to  be  in,  I  think  we’re  in 
the  best  one."  Chugg  said  I 


MOK  IMS  ISSUE 

Shields  Up,  Unux:  Raliicu  Keete 
believes  that  SCO.  fXH  Lrxo.  mH  eml 
uptbelosef  Pape  20 

SCO's  Stock  Plot:  Frafik  Hayes  explains 
why  the  vendor  ’s  recent  moves  are  bad 
(or  Linux  -  and  lor  end  ueos.  Pape  56 


6.500  employees  and  other 
end  users.  But  the  company's 
rapid  expansion  is  causing 
“huge  problems"  for  the  IT 
staff  in  tracking  the  configura¬ 
tions  of  servers  and  applica¬ 
tions.  Lanza  said. 

Service  ftOI 

The  help  desk  software  lets 
end  users  create  their  own 
e-mail  trouble  tickets  for  IT 
problems  and  to  reassign  the 
tickets  to  other  help  desk 
workers  if  they’re  not  satisfied 
with  the  initial  response. 

"ROI  for  Health  First  is  not 
so  much  dollars  but  customer 
service,  and  we  have  that." 
Lanza  said. 

Jim  Grant,  Remedy's  general 
manager,  said  the  new  version 
also  includes  a  Web-based 
user  interface  and  support  for 
Web  services  technology.  The 
revisions  let  users  focus  not 
only  on  helping  to  reduce  their 
companies’  IT  costs,  but  also 
on  aligning  corporate  technol¬ 
ogy  investments  with  goals 
defined  by  business  managers, 
be  said. 

Ra^dale  said  the  over¬ 
hauled  user  interface  in  the  S.S 
release  creates  a  fully  Web- 
based  software  client  that 
should  be  easier  for  IT  work¬ 
ers  to  use  than  Remedy's  ex¬ 
isting  applications.  • 


IBM  Outlines  Changes  in  Store  for  DB2 


Upgrades  mainframe  version,  adds  .Net 
support,  new  OLAP  features  to  others 


IBM  last  week  detailed  a  se¬ 
ries  of  changes  coming  to  its 
flagship  DB2  database,  includ¬ 
ing  an  upgrade  of  the  main¬ 
frame  version  of  the  software 
that  will  support  64-bit  ad¬ 
dressing  capabilities. 

Version  8  of  DB2  Universal 
Database  for  IBM's  zSeries 
mainframes  will  also  provide 
an  increased  number 
of  memory  buffer  j 
pools  to  improve  sys-  ! 
tern  performance,  said  Tom 
Rosamilia.  the  company's  vice 
president  of  worldwide  data 
management  development.  In 
addition,  IT  managers  will  be 
able  to  make  changes  to  data¬ 
bases  without  bringing  sys¬ 
tems  down,  Rosamilia  said  at 
the  annual  North  American 
conference  of  the  Internation¬ 
al  OB2  Users  Group  (IDUG). 


DATABASES 


IBM  is  also  adding  a  feattue 
that  will  let  mainframe  sys¬ 
tems  administrators  recover 
old  data  by  using  a  combina¬ 
tion  of  system  memory  and 
off-line  storage.  For  example, 
the  upgrade  will  be  able  to  roll 
back  to  a  database  log  from  a 
previous  day.  Rosamilia  said. 

IBM  has  yet  to  set  a  ship¬ 
ment  date  for  the  upgrade.  But 
initial  field  tests  have  begun, 
and  Rosamilia  said 
the  company  plans 
to  start  making  the 
software  available  to  more 
beta  testers  this  summer. 

|oe  Carola,  manager  of  data¬ 
base  administration  at  Siemens 
Medical  Solutions  in  Malvern, 
Pa.,  said  the  Siemens  AG  sub¬ 
sidiary  is  an  early  tester  of  DB2 
Version  8  for  z/OS  and  is  ea¬ 
gerly  awaiting  its  release.  In 
particular,  database  managers; 
at  Siemens  Medical  Solutions 


want  to  take  advantage  of  the 
promised  database  schema 
evolution  capabilities.  Those 
will  allow  them  to  propagate 
changes  on  the  fly  to  DB2- 
bascd  systems  at  hospitals  that 
use  the  company's  IT  products 
and  services,  Carola  s^. 

Carola  also  said  that  the  64- 
bit  support  will  let  Siemens 
cut  costs  by  reducing  the 
amount  of  hardware  it  needs 
to  run  DB2  applications.  He 
added,  thou^.  that  he  still 


wants  IBM  to  offer  easicr-to- 
use  management  tools,  better 
training  and  free  resources  to 
help  companies  migrate  appli¬ 
cations  running  on  Oracle  or 
SQL  Server  databases  to  DB2. 

IBM  has  added  support  for 
Microsoft  Corp.’s  -Net  tech- 
noIog>‘  to  the  Unix,  Linux  and 
Wmdows  versions  of  DB2,  en¬ 
abling  Microsoft  tools  to  be 
used  to  craft  applications  for 
the  database.  Thai  capability 
is  part  of  a  DB2  Version  8.1.2 
release  that's  available  now. 

In  addition.  IBM  is  partner¬ 
ing  with  developers  of  busi¬ 
ness-intelligence  software  to 
deliver  multivendor  “cube 
views"  as  part  of  the  online 
analytical  processmg  (OLAP) 
capabilities  in  DB2.  Due  next 
month,  the  cube-view  function 
will  let  end  users  access  a  sin¬ 
gle  OLAP  cube  with  front-end 
analysis  tools  from  different 
vendors  without  having  to  re¬ 
format  the  data,  said  Rosamilia. 

David  Beulke,  president  of 
Chic^o-based  IDUG  and  a 
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consultant  at  Pragmatic  Solu¬ 
tions  Inc.  in  Alexandria.  Va., 
said  mtwt  of  the  companies  he 
works  with  use  a  mix  of  data 
anah-sis  application-s.  The 
cube-view  feature  should 
make  it  easier  to  do  so  and 
simplify  the  process  of  inte¬ 
grating  third-part)'  analysis 
tools  with  DB2.  he  added. 

Carola  said  the  cube  views 
coidd  come  in  handy  at  re¬ 
source-strapped  companies 
that  don't  have  cnou^  CPU 
processing  power  to  easil) 
break  down  and  reload  OLAP 
cubes  for  use  with  different 
atulysis  tools.  But  he  added 
that  most  of  Siemens  Medical 
Solutions'  data  warehousing 
applications  are  based  on  SQL 
Server,  not  DB2. 

Cube  views  caught  the  eye 
of  Robert  Cattcrall.  director  of 
strategic  technology  for  the 
e-comroerce  division  of  Check- 
Free  Corp.  in  Norcross,  Ga. 
Speed  of  development  is  im¬ 
portant  to  the  team  building 
the  compan)''8  enterprise  data 
warehouse,  he  said,  and  the 
technolog)-  could  help  improve 
productivity  in  serving  Check- 
Free's  OLAP  needs,  k 


Cisco  Unleashes  Cascade 
Of  Network  Security  Tools 


Cisco  Systems  lac.  announced 
14  security  products  and  ser¬ 
vices  last  week,  including 
three  new  products  and  a  key 
revision  to  its  flagship  security 
management  software,  which 
now  supports  threat-protec¬ 
tion  technology  gain^  in  the 
April  acquisition  of  Okena  Inc. 

The  Okena  technology,  now 
known  as  the  Cisco  Security 
Agent  (CSA).  monitors  user 
behaviors  and  takes  steps  to 
stop  those  that  a  company 
deems  objectionable  before 
they  can  cause  harm,  said  Jeff 
Platon,  senior  director  of 
product  and  technology  mar- 
keting  at  Cisca 

CSA  doesn’t  try  to  match 
.signatures  to  prevent  malicious 
activities,  but  it  follows  behav¬ 
iors.  For  examiMe.  if  a  dedttop 
user  tried  to  launch  a  suspi¬ 
cious  application,  CSA  would 


:  stop  the  launch.  Platon  said. 

Ihe  technology  resides  on 
desktops  and  servers  but  is 
supported  by  the  upgraded 
Cisco  Works  VPN/Security 
Management  Solutkm  (VMS) 
2,2.  which  is  also  being  en¬ 
hanced  to  support  the  Cisco 
Catalyst  6500  firewall  and  vir¬ 
tual  private  network  (VPN) 
services  modules. 

Other  Cisco  announce¬ 
ments  include  a  new  ooe- 
toueb  router-lockdown  capa¬ 
bility  and  intelligent  wiza^ 
for  configuring  nrewall  and 
IPsec  VPN  services  on  certain 
Cisco  routers. 

Centralized  View 

Radiology  Associates  of  Ocala 
has  been  using  the  previous 
version  of  the  management 
software,  VMS  2.1.  for  eight 
months  to  manage  security  at 
six  sites  for  a  variety  of  de¬ 


vices  that  are  used  by  hun¬ 
dreds  of  physicians  and  radiol¬ 
ogists  each  day.  said  Jonathan 
Houghton,  associate  direaor 
of  IT  at  the  Ocala,  F1a.-based 
health  care  provider. 

“VMS  gives  us  one  pbee  to 
manage  ^1  our  seoirity  de¬ 
vices.  whether  they  are  VPN 
boxes  or  firewalls,  meaning 
we  can  monitor  the  devices 
and  any  attempts  at  attacks 
on  the  networic.'’  be  said. 

“It’s  loaded  on  a  server,  and 
you  get  through  to  any  Web 
browser,  meaning  there’s  only 
one  place  to  look,  which  is 
just  beautifuL*' 

«[(iisraWoite] 
VMS  gives 
us  one  place  to 
manage  all  of  our 
security  devices. 

JONATHAN  H0U6HT0N. 

ASSOCIATE  DIRECTOR  Of  IT. 

RADIOLOGY  ASSOCIATES  Of  OCAU 


Houghton  said  he  is  eager 
to  look  at  the  2.2  release  after 
having  gained  so  much  value 
from  2.1.  “We've  got  to  have  all 
this  security,  especially  with 
new  federal  privacy  compli¬ 
ance  and  a  lot  of  confidential 
information  we  have  to  pro¬ 
tect,”  he  said. 

Jeff  Wilson,  an  analyst  at 
Infonetics  Research  Inc.  in 
San  Jose,  said  the  14  Cisco 
announcements  are  “small 
but  imponant  to  somebody 
out  tb^“  but  taken  to^t^r, 
they  show  that  the  company 
is  focusing  its  attention  on 
many  areas  of  security. 

Cisco  has  “quietly  insinuat¬ 
ed”  itself  into  the  security 
maricet,  with  SI  billion  in  relat¬ 
ed  hardware  and  software 
sales  annually.  Wilson  noted. 

The  VMS  upgrade  is  impor¬ 
tant.  Wilson  said,  but  “no  ven¬ 
dor  is  good  at  this  yet,"  be¬ 
cause  there  are  dozens  of  ar¬ 
cane  security  standards.  “It's 
hard  to  build  good  security 
management  solutions,"  he 
added.  I 
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Critics  Question  Motives 
In  Microsoft/SCO  Deal 

Skeptics  see  licensing  agreement  with 
L'nix  \  endor  as  plo\  to  curb  l.inux  threat 


AT  DEADLINE 


Microsoft  to  Rx 
Data  Backup  Issue 

Microsoft  Corp.  confirmed  that  a 
modificaHon  to  a  data  backup 
utility  that  comes  with  its  operat¬ 
ing  systems  prevents  file  backup 
tapes  formatted  using  Windows 
Server  2003  from  restoring  data 
on  computers  ruming  earlier  ver* 
siom  of  ¥Andows.  The  company 
said  it  has  developed  a  fix  and  will 
release  H  shortly,  after  testing 
and  documentation  work  is  com* 
pleted. 


SGI  Cuts  Jobs, 
Narrows  Rxxis 

Citing  a  difficult  market  for  its 
high-end  systems.  Silicon  Graph¬ 
ics  Inc.  said  it  has  laid  off  more 
than  400  employees  «k1  is  re¬ 
focusing  on  “specific  growth  ar¬ 
eas.”  Mountain  View,  Calif.-based 
SGI  didn’t  disclose  any  businesses 
that  H  wdl  exit  but  did  cHe  its  Un- 
ux-based  AKix  server  line  and  de¬ 
fense  Industry  business  unit  as 
bright  spots.  The  layoffs  reduced 
the  company’s  workforce  by  10%. 


IEEE  Approves 
Draft  WLAN  Spec 

Wireless  LAN  vendors  said  the  in¬ 
stitute  ol  Electricai  and  Electron¬ 
ics  Engineers  Inc.  (IEEE)  has  ap- 
prmmd  a  final  draft  version  of  the 
802.ng  WlAN  standard.  Perfor¬ 
mance  is  expected  to  top  out  at 
about  20MM/sec..  less  than  half 
Ihe  S4Mbit/sac.  data  rale  origi¬ 
nally  touted  for  the  technology. 
But  supporters  said  802.11g  will 
be  backwrard-compalible  with  ex¬ 
isting  802.t1b  WUN  devices. 


Short  Takes 

TREND  MICRO  INC.  In  Cupertino. 
(^..  saM  it  fixed  a  flaw  in  a  new 
update  of  Its  eManager  e-mail 
security  gateway  that  caused 
the  software  to  bfock  aR  mas' 
sages  containing  the  lettor  P. . . . 
MICROSOFT  CEO  Sieve  Ballmer 
said  he  ptans  to  sen  some  of  his 
stock  holdings  in  the  company  but 
added  that  be  remains  ”as  com¬ 
mitted  to  Mforoeofl  as  ever.” 


I  BV  TODD  R.  WEISS 

HF ‘•I  O  I.Klil  ]' 

INC  last  wivk  fol¬ 
lowed  up  its 
threat  of  po.ssible 
le^ai  actions 
I  against  Linu.\  users  by  an- 
I  nouncing  a  Unix  technology 
I  licensing  deal  with  Microsoft 
I  Corp.  Bur  many  users  ques- 
I  tioned  Microsoft's  motives, 

'  citing  its  continuing  bek  of 
support  for  Linux. 

The  financial  details  of  the 
contract  between  Microsoft 
and  Lindon.  Urah-Ktsi-d  SCO 
weren’t  disclosed.  Micnjsoft 
spokesman  Mark  Martin  said 
the  software  vendor  agreed  to 
the  deal  after  SCO  offered  it  as 
a  way  lo  ciwure  that  Microsoft 
products  are  compliant  with 
the  intellectual  property 
,  claims  SCO  has  made  on  Unix. 

"Microsoft  has  said  for  a 
long  time  that  it  respects  iniel-  I 
lectual  pn»perty.“  Martin  said. 
He  said  the  lict-nsing  agree¬ 
ment  "has  absolutely  nothing 
to  do"  with  a  law  suit  that  SCO 
filed  against  IBM  in  March  or 
its  assertion  this  month  that 
corporate  Linux  users  could 
face  legal  liabilities  for  run¬ 
ning  the  open-source  operat¬ 
ing  system  (QuickLink  .T8514]. 

Conspiracy  Theories 

For  the  past  four  years.  Micro¬ 
soft  has  offered  software 
called  Services  for  Unix  that 
lees  users  run  Unix  applica¬ 
tions  on  Windows-based  hard¬ 
ware  as  part  of  migration 
strategies  or  to  improve  inter¬ 
operability.  Martin  said  Ser¬ 
vices  for  Unix  is  just  one  rea¬ 
son  why  Microsoft  agreed  to 
the  licensing  deal,  which  cov¬ 
ers  all  of  its  products. 

But  critics  of  the  two  compa¬ 
nies  said  it's  hard  to  believe  a 
vendor  as  powerful  as  Micro¬ 
soft  would  sign  an  agreement 
with  SCO  unless  it  thought  the 
mos  e  would  keep  Linux  from 


pt>siug  a  competitive  threat. 

Microsoft  “would  love  for 
corporations  to  believe  that 
they  will  have  to  pay  big  li¬ 
censing  fees  to  SCO  for  using 
Linu-x,"  .said  Seoti  Davis,  chief 
technok>gy  officer  at  Rcalty 
Times,  .a  Dallas-based  real  es¬ 
tate  Web  site.  "Anyone  who 
can  interpret  Miemsoft’s  an¬ 
nouncement  a.s  anything  other 
than  a  PR  ploy  needs  a  serious 
reality  check." 

leffrey  Nicholas,  a  syaitems 
analyst  at  a  hrge  New  York  fi¬ 


BV  MATT  HAMBLEN 

BMC  Software  Inc.'s  Remedy 
Corp.  unit  this  week  will  .an¬ 
nounce  a  new  version  of  its  IT 
sera-ice  management  applica¬ 
tions  that  includes  upgrades  to 
tools  for  tracking  the  life  cy  cle 
of  IT  a.ssets  and  managing 
changes  to  corporate  sysienrs. 

Boih  of  those  area.s  were  ne¬ 
glected  during  Remedy's  prior 
ownership  by  Peregrine  Sys¬ 
tems  Inc.,  said  John  Ragsdale, 
an  analyst  at  Forrester  Re¬ 
search  Inc.  in  Cambridge. 

Mass.  “Change  management 
and  asset  management  took  a 
back  seat  during  Peregrine's 
ownership,  so  RemtNly  is  cor¬ 
recting  that,"  he  said. 

The  IT  Service  Manage¬ 
ment  5J  release  also  includes 
revised  software  for  managing 
help  desks  and  service-level 
agreements.  This  is  the  first 
upgrade  by  Remedy  since 
Houston-based  BMC  bought  it 
from  Peregrine  in  November. 
Remedy  remains  a  separate 
company  within  BMC  and  is 
based  in  Mountain  View,  Calif. 

Health  First  Inc.  in  RtK'k- 
ledge.  Fla.,  upgraded  to  Reme¬ 
dy's  Help  Desk  5.0  software  in 


nancial  serx  ices  firm  that  he 
asked  not  be  identified,  said 
he  thinks  Microsoft  wants  to 
help  fund  SCO’s  Linux-relatcd 
legal  actions.  "The  whole 
thing  to  me  really  doesn't  smell 
right."  he  said.  “It  seems  like 
it's  all  just  too  coincidental." 

In  a  research  note.  Tony 
Baer,  an  analyst  at  onSirategics 
in  New  York,  called  SCO’s  ac¬ 
tions  "the  software  industry’s 
equivalent  of  terrorism."  Baer 
.said  he  "can  only  conclude 
that  the  licensing  of  SCO  Unix 
is  Microsoft's  strategy  to  drive 
a  new  wedge  into  the  Linux 
community,  a  sector  whose 
growth  poses  a  far  more  for- 


[anuary  and  plans  to  install  all 
four  of  the  new  module.s  later 
this  year,  said  lose  Lanza.  IT 
support  and  operations  super¬ 
visor  at  the  nonprofit  health 
care  provider. 

Health  First  chose  the  Rem¬ 
edy  software  when  it  set  up  its 
help  desk  operation  because 
of  its  ease  of  use  and  its  inte¬ 
gration  with  the  other  three 
modules,  Lanza  said.  "This  5.5 
rciea.se  U  going  to  fir  just  like 
a  ring,”  he  noit-d. 

Heath  First  operates  three 
hospitals  and  65  medical  clin¬ 
ics  in  Florida’s  Brevard  Coun¬ 
ty.  and  its  IT  systems  support 
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midable  threat  than  the  empty 
roars  emanating  out  of  SCO." 

The  Cendant  Hotels  division 
of  Parsippany.  N.f-based  Cen¬ 
dant  Corp.  runs  about  3,700 
serv  ers  based  on  SCO's  Open- 
Linux  operating  system.  David 
Chugg.  senior  director  of  hotel 
solutions  at  the  unit,  said  ho 
initially  was  worried  about 
w-hat  SCO’s  legal  campaign 
would  mean  for  Cendant  Ho¬ 
tels.  But  he  said  he  was  reas¬ 
sured  when  SCO  said  it  wxiuld 
not  target  any  of  its  own  Linux 
customers.  "Out  of  all  the  posi- 
tion.s  to  be  in.  I  think  we're  in 
the  best  one."  Chugg  said.  I 
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6.500  emplttyees  and  other 
end  users.  Hut  the  company's 
rapid  expansion  is  causing 
“huge  prt)b!em5"  for  the  IT 
staff  in  tracking  the  configura¬ 
tions  of  servers  and  applica¬ 
tions.  Lanza  said. 

Service  ROI 

The  help  desk  software  lets 
end  users  create  their  own 
e-mail  trouble  tickets  for  IT 
ptxffrlems  and  to  reassign  the 
tickets  to  other  help  desk 
workers  if  they’re  not  satisfied 
with  the  initial  response. 

“ROI  for  Health  First  is  not 
50  much  dollars  but  customer 
service,  and  we  have  that," 
Lanza  said. 

|im  Grant.  Remedy’s  general 
manager,  said  the  new  version 
also  includes  a  Web-based 
user  interface  and  support  for 
Web  services  technology.  The 
revisions  let  users  focus  not 
only  on  helping  to  reduce  their 
companies'  IT  costs,  but  also 
on  aligning  corporate  technol¬ 
ogy  investments  with  goals 
defined  by  business  man^'rs. 
he  said. 

Rag.sdale  said  the  over¬ 
hauled  user  interface  in  the  55 
release  creates  a  fully  Web- 
based  software  client  that 
should  be  easier  for  IT  work¬ 
ers  to  use  than  Remedy’s  ex¬ 
isting  applications.  I 


BMC  UnK  Upgrades  Help  Desk, 
IT  Asset  Management  Aipps 


IBM  Outlines  Changes  in  Store  for  DB2 


I  a'nsultaniji  Praiimaiic  St»lu- 
iions  Inc.  in  Alexandria,  Vj.. 

'  said  mifsj  ol’  the  cumpanivs  he 


Upgrades  mainframe  \ersion.  add.s  .Net 
support,  new  OLAP  features  to  others 


8V  MARC  L.  SONOINi 

LAS  VEGAS 

IBM  last  week  detailed  a  se¬ 
ries  of  changes  coming  to  its 
flagship  DB2  database,  includ¬ 
ing  an  upgrade  of  the  main¬ 
frame  version  of  the  software 
that  will  support  64-bit  ad¬ 
dressing  capabilities. 

Version  8  of  DB2  Universal 
Database  for  IBM's  zSeries 
mainframes  will  also  provide 
an  increased  number 
of  memory  buffer 
pools  to  improve  sys¬ 
tem  performance,  said  Tom 
Rosamilia,  the  company’s  vice 
president  of  worldwide  data 
management  development.  In 
addition.  IT  managers  will  be 
able  to  make  changes  to  data¬ 
bases  without  bringing  sys¬ 
tems  dowm.  Rosamilia  said  at 
the  annual  North  American 
conference  of  the  Internation¬ 
al  DB2  Users  Group  (IDUG). 


IBM  is  also  adding  a  feature 
that  w'ill  let  mainframe  sys¬ 
tems  administrators  recover 
old  data  by  using  a  combina¬ 
tion  of  system  memor>-  and 
off-line  storage.  For  example, 
the  upgrade  will  be  able  to  roll 
back  to  a  database  log  from  a 
previous  day.  Rosamilia  said. 

IBM  has  yet  to  set  a  ship¬ 
ment  date  for  the  upgrade.  But 
initial  Held  tests  have  begun. 

and  Rosamilia  said 
the  company  plans 
to  start  making  the 
software  available  to  more 
beta  testers  this  summer. 

loe  Carola,  manager  of  data¬ 
base  administration  at  Sientens 
Medical  Solutiorts  in  Mafvem. 
Pa.,  said  the  Siemens  AG  sub¬ 
sidiary  is  an  early  tester  of  DB2 
Version  8  for  z/OS  and  is  ea¬ 
gerly  awaiting  its  release.  In 
particular,  database  managers 
at  Siemens  Medical  Solutions 


Additional 

Releases 


want  to  take  ath-antage  of  the 
promised  database  schema 
evolution  capabilities.  Tht^se 
will  allow  them  to  propagate 
changes  on  the  fly  to  OB2- 
based  systems  at  hospitals  that 
use  the  compan>'’s  IT  products 
and  services.  Carola  said. 

Carola  also  said  that  the  64- 
bit  support  will  let  Siemens 
cut  costs  by  reducing  the 
amount  of  hardware  it  needs 
to  run  DB2  applications.  He 
added,  though,  that  he  still 


wants  IBM  to  offer  casier-io- 
use  management  tiutls.  better 
training  and  free  resources  to 
help  companies  migrate  appli- 
eations  running  on  Oracle  or 
SQL  Server  databases  to  DB2. 

IBM  has  added  suppt*rt  for 
Micit)st>ft  Corp.'s  .Net  tech- 
nologx-  to  the  Unix.  Linux  and 
Windows  versions  t>f  nB2.  en¬ 
abling  Microsoft  itMils  to  he 
used  to  craft  applications  ft»r 
the  database.  That  capability 
is  part  of  a  DB2  Version  8.1.2 
release  that's  available  now. 

In  addition.  IBM  is  partner¬ 
ing  with  developers  of  busi¬ 
ness-intelligence  software  to 
dclwer  multivcndor  “euK" 
views"  as  part  of  the  online' 
an.'ilytical  processing  tOLAP) 
capabilities  in  DB2.  Due  next 
month,  the  cube-view  function 
will  let  end  users  access  a  sin¬ 
gle  OLAP  cube  with  front-end 
analysis  tools  from  different 
vendors  without  having  to  re¬ 
format  the  data,  said  Rttsamilix 

David  Bculke,  president  of 
Chicago-based  IDUG  and  a 


works  with  use  a  mix  of  data 
analysts  applications.  1110 
luK-view  feature  should 
make  it  easier  tLi  do  so  and 
simplitN  the  process  <»f  inte¬ 
grating  third-party  analysis 
lLH»ls  with  DR2.  he  added. 

(.'.anda  s.iid  the  cube  views 
could  come  in  hand\  at  re- 
Miurcc-strapped  companies 
that  don't  have  enough  (JPU 
processing  power  to  easil>’ 
break  down  and  reltvad  01..AP 
cuK‘s  for  use  with  different 
analysis  Rut  he  added 
that  most  ofSiemens  Medical 
SolutHins'  data  warehousing 
applications  arc  based  on  S<.iL 
Serwr.  not  DB2, 

Cube  views  caught  the  eye 
ot  Robert  Caiierali.  direvtor  of 
strategic  technology  for  the 
e-ct>mmerce  dh  ision  of  Chock- 
Free  C<»rp.  in  Norcnxsv  Ga. 
Speed  of  development  Is  im¬ 
portant  to  the  team  building 
the  company's  enterprise  data 
warehouse,  he  said,  and  the 
lechnolog)-  could  help  impnn  e 
productmty  in  sening  Cbock- 
Frcc's  OLAP  fwedv  I 


DATABASES 


Cisco  Unleashes  Cascade 
Of  Network  Security  Tools 


BV  MATT  HAMBLEN 

Cisco  Systems  Inc.  announced 
14  security  product.^  and  ser¬ 
vices  last  week,  including 
three  new  products  and  a  key 
revision  to  its  flagship  security 
management  software,  which 
now  supports  threat-protec¬ 
tion  technology  gain^  in  the 
April  acquisition  ofOkena  Inc. 

The  Okena  technology,  now 
known  as  the  Cisco  Security 
Agent  (CSA).  monitors  user 
behaviors  and  takes  steps  to 
stop  those  that  a  company 
deems  obiectionable  before 
they  can  cause  harm,  said  (eff 
Platon,  senior  director  of 
pnvduct  and  technology  mar¬ 
keting  at  Cisco. 

CSA  doesn't  try  to  match 
signatures  to  prevent  malicious 
activities,  but  it  follows  behav¬ 
iors.  For  example,  if  a  desktop 
user  tried  to  launch  a  suspi¬ 
cious  apphcatioiL  CSA  would 


stop  the  launch.  Platon  said. 

The  technology  resides  on 
desktops  and  servers  but  is 
supported  by  the  upgraded 
CiscoWorks  VPN/Security 
Management  Solution  (VMS) 
2.2.  which  is  also  being  en¬ 
hanced  to  support  the  Cisco 
Catalyst  6500  firewall  and  vir¬ 
tual  private  network  (VPN) 
services  modules. 

Other  Cisco  announce¬ 
ments  include  a  new  one- 
touch  router-lockdow’n  capa¬ 
bility  and  intelligent  wizards 
for  configuring  firewall  and 
IPscc  VPN  serx'ices  on  certain 
Cisco  routers. 

Centralized  View 

Radiology  Associates  of  Ocala 
has  been  using  the  previous 
version  of  the  management 
software,  VMS  2.1.  for  eight 
months  to  manage  security  at 
six  sites  for  a  variety  of  de¬ 


vices  that  arc  used  by  hun¬ 
dreds  of  physicians  and  radiol¬ 
ogists  each  day.  said  Jonathan 
Houghton,  associate  director 
of  IT  at  the  Ocala.  Fla.‘based 
health  care  provider. 

“VMS  gives  us  one  place  to 
manage  all  our  security  de¬ 
vices.  whether  they  are  VPN 
boxes  or  ftrewalls.  meaning 
we  can  monitor  the  devices 
and  any  attempts  at  anacks 
on  the  network."  he  said. 

“It’s  loaded  on  a  server,  and 
you  get  through  to  any  Web 
browser,  meanir^  there's  only 
one  place  to  look.  W’hich  is 
just  beautiful.*' 


us  one  place  to 
manage  all  of  our 
security  devices. 


JONATHAN  HOUGHTON. 

ASSOCIATE  04RECT0R  OF  rl 
RADIOLOGY  ASSOCIATES  Of  OCAU 


Hoi^thton  said  he  is  eager 
to  look  at  the  22  release  after 
having  gained  so  much  value 
from  2.1.  “We’ve  got  to  have  all 
this  security,  especially  with 
new  federal  privacy  compli¬ 
ance  and  a  lot  of  confidential  | 
information  we  have  to  pro- 
icci."  he  said. 

Jeff  Wilson,  an  analyst  at 
Infoneiics  Research  Inc.  in 
San  Jose,  said  the  14  Cisco 
announcements  are  “small 
but  important  to  somebody 
out  there.’’  but  taken  together, 
they  show  that  the  company 
IS  focusing  Us  attention  on 
many  areas  of  security. 

Cisco  ha.s  “quietly  insinuat- 
cd”  itself  into  the  security 
market,  with  SI  billion  in  relat¬ 
ed  hardwaa’  and  software 
sales  annually,  Wilson  noted. 

The  VMS  upgrade  is  impor¬ 
tant.  Wilson  said,  but  “no  ven¬ 
dor  is  good  at  this  yet,"  be¬ 
cause  there  arc  dozens  of  ar¬ 
cane  security  standards.  “It’s 
hard  to  build  good  security 
management  solutions."  he 
added.  I 
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Sun  Backs  Red  Hat  on  Linux 


Sun  Undercuts  Intel 
Server  Competition 


IVice  war  ptissiblc. 
but  rixal.s  sa\  not 
a  fair  comparison 


BV  PATRICK  THIBODEAU 

SERV'I  R  PRIl-.J  CUTS  have 
become  commint  since 
the  economy  and  IT 
spending  stalled,  and 
they  rarely  raise  eyebrows 
anymore.  But  Sun  Micu>s>’s- 
tems  Inc.'s  decision  last  week 
to  take  direct  aim  at  Dell  Com¬ 
puter  Corp.  in  the  low-end 
Intel  sers’er  market  could  force 
the  two  other  full-service 
vendors.  IBM  and  Hewlett- 
Packard  Co.,  to  act  similarty. 

“il  you  are  a  buyer  and  you 
got  a  lower  price  from  Sun. 
you  can  absolutely  use  that  as 
a  negotiating  point  against  HP 
and  IBM."  said  Gordon  Haff^ 
an  analyst  at  lliuminaia  Inc.  in 
Nashua.  N.H.  Sun’s  move  “def¬ 
initely  puts  pressure  on  the 
other  players.’*  said  Sarang 
Ghatpande.  an  analyst  at  D.H. 
Brown  Associates  Inc.  in  Port 


Chester.  N.Y.  But  he  also  said 
price  is  more  of  a  starting 
point  in  customer  selection. 

Competitors  dismissed  Sun's 
action,  saying  it  won’t  ignite  a 
server  price  war.  Sun  "lacks  the 
staying  power  in  this  sector 
of  the  market."  said  Hugh  Jenk¬ 
ins.  a  vice  president  of  market¬ 
ing  in  the  industiy-standard 
servers  division  at  HP.  “Sun 
would  really  rather  sell  \-ou  a 
ga'ai  big  St>laris  system." 

Razor-Tliin  Margins 

“The  Intel  space  is  already  a 
vciy  competitive  marketplace 
that  runs  on  razor-thin  mar¬ 
gins."  an  IBM  spokesman  said. 
"Wc  don't  see  Sun  as  being  able 
ii»  either  start  or  sustain  a  long¬ 
term  price  war."  Neither  IBM 
nor  HP  duspuied  Sun’s  lower- 
cost  pricing  claim,  but  they  said 
it  wasn't  a  fair  comparison  be¬ 
cause  the  products  don't  have 
identical  features  or  waiTantie.s. 

Sun  said  it’s  now  making 
two  low-end  servers  running 
one  or  two  Intel  Pentium  Xeon 


processors  with  either  the  So¬ 
laris  x86  or  Linux  operating 
system,  starting  at  S2.450. 

Sun  said  a  comparatively 
priced  HP  server  costs  S3.238. 
But  HP  contended  that  the 
Sun  server  doesn't  offer  simi¬ 
lar  features,  such  as  an  embed¬ 
ded  RAID  controller. 

The  annournrement  was 
coupled  with  a  move  by  Oracle 
Corp.  to  ensure  that  its  prod¬ 
ucts  run  on  Sun's  Solaris  x86 
and  its  other  systems.  Oracle 
believes  the  importance  of 
those  low’-end  swtems  is 
increasing. 

“Big  machines  aren't  going 
to  disappear.”  said  Oracle  CEO 
I  jrry  Ellison.  "However,  the 
future  of  computing  (is)  low- 
cost  components  being  assem¬ 
bled  into  large,  large,  high-per¬ 
formance  computers." 

Ellison  joined  Sun  CEO 
Scott  McNealy  only  a  month 
after  appearing  with  Dell  CEO 
Michael  Dell.  who.  withcHJt 
naming  Sun.  bashed  makers  of 
what  he  described  as  propri- 


Network  Associates 
Upgrades  Sniffer  Line 


BY  MATT  HAMBLEN 

Network  Assticiates  Inc.  an¬ 
nounced  the  Sniffer  Network 
Protection  Platform  last  week, 
which  includes  a  new-  appli¬ 
ance  and  revisions  of  existing 
software  that  analysts  said  will 
push  the  s'endor  into  a  grow¬ 
ing  network  security  market. 

The  ni,*w  appliance  will 
allow  the  faster  data  monitor¬ 
ing  needed  for  the  largest  net¬ 
work  cores,  said  Christopher 
Thompson,  vice  president  of 
product  marketing  of  the  Snif¬ 
fer  division  at  Network  Asstv 
dates  in  Santa  Clara.  Calif.  Up¬ 
grades  to  three  network  man¬ 
agement  products  were  de¬ 
signed  to  work  from  the  core 
to  the  network  edge,  he  said. 
The  tools  will  help  customers 


save  time  troubleshooting  net¬ 
work  outages  or  pres-eniing 
malicious  threats,  providing 
“dramatic  ROI  for  customer-s." 
he  claimed. 

Among  the  products  is  the 
new  Sniffer  Technologies 
s6040  for  core  Gigabit  net¬ 
works  within  large  oiganiza- 
cions.  It’s  designed  to  capture 
data  for  use  in  network  man¬ 
agement  functions  at  up  to 
8Gbit/sec.  The  s6040  could 
be  deployed  in  the  core  of  a 
large  institution  and  used  to 
monitor  performance  in  a 
branch  facility.  Thompst>n  said. 
The  company  also  announced 
new  versions  of  its  Network 
Performance  Orchestrator 
products  and  a  revision  of  its 
Sniffer  Distributed  RMON* 


software  for  remote  monitor¬ 
ing  (see  chart). 

The  state  of  Indiana  is  test¬ 
ing  many  of  the  new  products 
and  has  been  using  more  than 
5500.000  of  Network  Associ¬ 
ates'  products  for  more  than 
two  years  to  monitor  and  pro¬ 
tect  a  network  serving  40.000 
users  at  8.^0  sites,  said  |effre>' 


Six  weeks  alter  dtscontirHing 
its  own  version  of  Linux.  Sun 
last  week  said  It  wHI  seH  aiKl 
support  Red  Hat  Inc's  Enter¬ 
prise  Linux  operating  systems 
on  its  Intel-based  servers. 

Sun  stopped  marketing  its 
Stm  Linux  5.0  distribution  last 
month,  after  users  shunned 
the  software  because  they 
didn't  want  to  install  and  sup¬ 
port  multiple  versions  of  the 
open-source  operating  system 
[QuickLink  375051. 

Dan  Kusnetzky,  an  analyst 
at  IDC  in  Framini^am.  Ma^.. 
said  Suns  new  strategy  of 
(»rtnering  with  Red  Hat  makes 
more  sense  than  its  attonpt  to 
go  It  alone  on  Lmux.  He  ex¬ 
pects  Sun  and  Red  Ha!  to 


Clary  Unix  systems.  Oracle 
said  that  there  was  nothing 
contradictory  about  Ellison's 
Dell  appearance  and  that  the 
database  vendor  is  only  inter¬ 
ested  in  giving  users  choices. 
But  the  move  sparked  discus¬ 
sions  between  Oracle  and  Sun. 
Ellison,  at  (he  lime,  “may  not 
have  known  wc  were  as  seri- 


Dukc.  a  senior  network  engi¬ 
neer  for  the  state. 

Duke  expects  to  deploy  the 
s6040  once  the  stale  converts 
to  a  Gigabit  Ethernet  core.  He 
also  plans  to  upgrade  to  Snif¬ 
fer  Distributed  4.3  because  it 
offers  more  features,  including 
the  ability  to  analyze  IP  traffic 
passing  through  the  network. 


work  together  to  make  Linux 
as  reliable  as  Sun's  Solaris  op¬ 
iating  system. 

Bill  Qaybrook.  an  analyst 
at  Aberdeen  Group  Inc.  in 
Boston,  agreed  tint  the  al¬ 
liance  with  Red  Hat  is  a 
smarter  direction  for  Sun  to 
take.  "I  doni  know  anybody 
who  thought  Sun  having  thir 
own  Linux  was  a  good  Hjea’ 
hesakL 

Red  Hat  Enterprise  Linux 
will  be  avalabie  from  Sun  by 
the  summer  and  wi  be  sup¬ 
ported  on  Sun's  recently 
announced  xB6*based  sys¬ 
tems.  including  the  Sun  Fire 
V60x  and  V65x.  the  two  com¬ 
panies  said. 

-  ToMR.  Mfetss 


ous  with  our  x86  strategy,”  said 
Soubeil  Saliba.  a  vice  president 
at  Sun. 

Dell  bad  the  following  reac¬ 
tion  to  Sun’s  movei  “There  is  a 
lot  of  competition  —  and  that 
means  customers  arc  getting  a 
whole  lot  more  value,”  said 
company  spokesman  Bruce 
Anderson,  k 


When  the  SQL  Slammer 
virus  hit.  Sniffer  software 
quickly  and  correctly  told  net¬ 
work  managers  that  a  virus 
wa.s  causing  problems,  al¬ 
though  managers  were  mistak¬ 
enly  convinced  that  a  crashed 
router  was  the  source  of  all 
the  network  downtime.  Duke 
said.  Sniffer  installations  the 
state  made  two  years  ago  paid 
back  their  costs  in  several 
months,  because  the  monitor¬ 
ing  has  helped  reduce  trou¬ 
bleshooting  time  to  10%  of 
what  it  was  before,  he  added. 

The  new  products  help  bring 
Network  Associates,  a  tradi¬ 
tional  network  management 
vendor,  into  the  network  secu¬ 
rity  fold,  said  Eric  Hem- 
mendinger.  an  analyst  at  Ab¬ 
erdeen  Group  Inc.  in  Boston. 
With  these  products.  Network 
Associates  will  compete 
against  Cisco  Systems  Inc.. 
Symantec  Corp.  and  Netscreen 
Technologies  Inc. » 


Sniflw  Network  Protection  Platfonn 
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Sun  Undercuts  Intel 
Server  Competition 


SunBadsfMHitanlJmH 

SkuMlBdlvifeBatMiia 

fca<n»»lnnm»»,S» 

WwkatKalaMad 

BMglMhBnriliK 

nkiUiuqiaMgwMa 

toJMwttovtocto 

onlfcliiWtAidnwi. 

f* —  ^ - - * — .. — 

oon  fngPN  miHMB  ■ 

■MMAUWMki 

Sw  Uw  &04MMin  W 

■MirAMMfaaMilg 

i»*.  lArianilwnd 

MklAMImaiiBA 

hlflMN  My 

dWlMMtoMMatfap- 

laaMt 

ouMmopMkg^itm 

IWtWfiMwkiUMi 

BUiMMiSinET 

«Ak»artMilMiaaA 

taNmUKaiaMlM 

toil— rwliiiiiiMi 

paadaSMkaoMA 

pvtariii  uMi  RmI  Ml  MttB 

monanwtaftliahMilM 

««MVeA,tolwa»i- 

gotAniiiiUna.H»» 

PWkiMll 

pscbSsnand  M  Hri  to 

-TtmnmM 

Price  war  possible, 
but  rivals  say  not 
a  comparison 

■V  PATinCK  THiaODCAU 

ERVER  PRICE  CUTS  have 
become  common  since 
the  economy  and  IT 
spending  stalled,  and 
they  rarely  raise  eyebrows 
anymore.  But  Sun  Microsys¬ 
tems  Inc's  decision  last  week 
to  take  direct  aim  at  Dell  Com¬ 
puter  Corp.  in  the  low-end 
Intel  server  market  could  force 
the  two  other  fuU-service 
vendors,  ffiM  and  Hewlett- 
Packard  Co.,  to  act  similarly. 

"If  you  are  a  buyer  and  you 
got  a  lower  price  horn  Sun. 
you  can  absolutely  use  that  as 
a  negotiating  point  against  HP 
and  {BM.”  said  Gordon  Haff. 
an  analyst  at  lUuminata  Inc.  in 
Nashua.  N.H.  Sun’s  move  ’‘def¬ 
initely  puts  pressure  on  the 
other  players,"  said  Sarang 
Ghatpan«ie,  an  analyst  at  Dii 
Brown  Associates  Inc.  in  Port 


I  Chester,  N.Y.  But  he  also  said 
I  price  is  more  of  a  starting 
I  point  in  customer  selection. 

Competitors  dismissed  Sun's 
action,  saying  it  wont  ignite  a 
server  price  war.  Sun  "lacks  the 
staying  power  in  this  sector 
of  the  niarket."  said  Hu^  Jenk¬ 
ins.  a  vice  president  of  market¬ 
ing  in  the  industry-standard 
servers  division  at  HP.  "Sun 
would  really  rather  sell  you  a 
great  big  Solaris  system." 

Razor-Thin  Margins 

"The  Intel  space  is  already  a 
very  competitive  marketplace 
that  runs  on  razor-thin  mar¬ 
gins,"  an  IBM  spokesman  said. 
"We  don’t  see  Sun  as  being  able 
to  either  start  or  sustain  a  long¬ 
term  price  war."  Neither  IBM 
nor  HP  disputed  Sun's  lower- 
cost  pricing  claim,  but  they  said 
it  wasn't  a  fair  comparison  be¬ 
cause  the  products  don’t  have 
identical  features  or  warranties. 

Sun  said  it's  now  making 
two  low-end  servers  running 
one  or  two  Intel  Pentium  Xeon 


processors  with  either  the  So¬ 
laris  x86  Of  Linux  operating 
system,  starting  at  £MS0. 

Sun  said  a  comparatively 
priced  HP  server  costs  $3,238. 
But  HP  contended  that  the 
Sun  server  doesn't  offer  simi¬ 
lar  features,  such  as  an  embed¬ 
ded  RAID  controller. 

The  announcement  was 
coupled  with  a  move  by  Oracle 
Coip.  to  ensure  that  its  prod¬ 
ucts  nm  on  Sun's  Solaris  x86 
and  its  other  systems.  Oracle 
believes  the  importance  of 
these  low-end  systems  is 
increasii^ 

"Big  machines  aren't  going 
to  disappear,”  said  Oracle  CEO 
Lany  Ellison.  "However,  the 
funire  of  computing  [is]  low- 
cost  components  being  assem¬ 
bled  into  large,  large,  high-per¬ 
formance  computers." 

Ellison  ioin^  Sun  CEO 
Scott  McNealy  only  a  month 
after  appearing  with  Dell  CEO 
Michad  DelL  who.  without 
namii^  Sun,  hashed  makers  of 
what  be  described  as  propri¬ 


etary  Unix  systems.  Oracle 
said  that  there  was  notbif^ 
contradictory  about  Ellison’s 
Dell  appearance  and  that  the 
database  vendor  is  only  inter¬ 
ested  in  giving  users  choices. 
But  the  move  sparked  discus- 
si(»s  between  Oracle  and  Sun. 
Ellison,  at  the  time,  "may  not 
have  known  we  were  as  seri¬ 


ous  with  our  x66  strategy."  said 
Souheil  Saliba.  a  vice  president 
at  Sun. 

Del)  had  the  following  reac¬ 
tion  to  Sun's  move:  "Utere  is  a 
lot  of  competition  ~  and  that 
means  customers  are  getting  a 
whole  lot  more  value,"  said 
company  spokesman  Bruce 
Anderson.  I 


Network  Associates 
Upgrades  Sniffer  Line 


BVMATTHAMnteN 

Network  Associates  Inc.  an¬ 
nounced  the  Sniffer  Network 
Protection  Platform  last  week, 
which  includes  a  new  appli¬ 
ance  and  revisions  of  existing 
software  that  analysts  said  will 
push  the  vendor  into  a  grow¬ 
ing  network  security  market. 

The  new  appliance  will 
allow  the  faster  data  monitor¬ 
ing  needed  for  the  largest  net¬ 
work  cores,  said  Christopher 
Thompson,  vice  president  of 
product  mariceting  of  the  Snif¬ 
fer  division  at  Network  Asso¬ 
ciates  in  Santa  Clara,  Calif.  Up¬ 
grades  to  three  network  man¬ 
agement  products  were  de¬ 
signed  to  work  from  the  core 
to  the  network  edge,  he  said. 
The  toob  will  help  customers 


save  time  troubleshooting  net¬ 
work  outages  or  preventing 
malicious  threats,  providing 
"dramatic  ROI  for  customers." 
he  claimed. 

Among  the  products  is  the 
new  Sniffer  Technologies 
$6040  for  core  Gigabit  net¬ 
works  within  large  organiza¬ 
tions.  It’s  designed  to  capture 
data  for  use  in  network  man¬ 
agement  functions  at  up  to 
SGbitAec.  The  $6040  could 
be  deployed  in  the  core  of  a 
large  institution  and  used  to 
monitor  performance  in  a 
branch  facility,  Thompson  said. 
The  company  also  arutounced 
new  versions  of  its  Network 
Performance  Orcbestrator 
products  and  a  revision  of  its 
Sniffer  Distributed  RMON* 


software  for  remote  monitor¬ 
ing  (see  chart). 

The  state  of  Indiana  is  test¬ 
ing  many  of  the  new  products 
and  has  been  using  more  than 
SSOO.OOO  of  Network  Associ¬ 
ates’  products  for  more  than 
two  years  to  monitor  and  pro¬ 
tect  a  network  serving  40.000 
users  at  830  sites,  said  Jeffrey 


Duke,  a  senior  network  engi¬ 
neer  for  the  state. 

Duke  expects  to  deploy  the 
s6040  once  the  state  converts 
to  a  Gigabit  Ethernet  core.  He 
also  plans  to  upgrade  to  Snif¬ 
fer  Distributed  4  J  because  it 
offers  more  features,  including 
the  ability  to  analyze  IP  traffic 
passing  through  the  network. 


When  the  SQL  Slammer 
virus  hit.  Sniffer  software 
quickly  and  correctly  told  net- 
woric  managers  that  a  virus 
was  causing  problems,  al¬ 
though  managers  were  mistak¬ 
enly  convinced  that  a  crashed 
router  was  the  source  of  all 
the  network  downtime.  Duke 
said.  Sniffer  installations  the 
state  made  two  years  ago  paid 
back  their  costs  in  several 
months,  because  the  monitor¬ 
ing  has  helped  reduce  trou^- 
blesboodng  time  to  10%  of 
what  it  was  before,  be  added. 

Tike  new  products  help  bring 
Netwoik  Associates,  a  tradi¬ 
tional  network  management 
vendor:  into  the  network  secu¬ 
rity  fold,  said  Eric  Hem- 
mendinger.  an  analyst  at  Ab¬ 
erdeen  Grotq)  Inc.  in  Boston 
With  these  products,  Network 
Associates  will  compete 
against  Cisco  Systems  Inc, 
Symantec  Corp.  and  Nctscreen 
Technologies  Inc.  I 
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As  racks  become  increasingly  popu- 
(ated  with  thinner,  deeper  servers, 
high  power  derwrties  in  your  server 
room  or  data  center  can  create 
havoc,  from  earty  equipment  failures 
to  expensive,  forget-about*youriob> 
security  downtime. 

Introducing  InfraStruXure”  architec¬ 
ture,  the  industry's  only  patent-pend¬ 
ing.  network-critical  physical  infra¬ 
structure.  infraStruXure”  lets  you 
target  power  and  cooling  precisely 
where  your  mission-critical  applica¬ 
tions  live — the  rack  enclosure. 


routing!  — 


lnfraStru>\ure' 


POWER  RACK  AIR 


Open,  adaptable  and  integrated 
architecture  for  on-demand 
network-critical  physical  infrastructure 


(power  routing 


And  because  InfraStruXure  architec¬ 
ture  uses  a  modular,  manageable,  pre¬ 
engineered  approach,  you  can  select 
starKlardized  compor>ents  to  create 
your  own  customized  solutions. 

Which  means  you  can  target  avail¬ 
ability,  pay  as  you  grow,  adapt  to 
change,  and  maximize  efficiency 
while  mininvzing  installation,  operat¬ 
ing,  service,  and  mairrtenanoe  costs. 

In  times  like  these,  it  pays  to  think 
smart.  For  more  information  on 
InfraStruXure's  open,  adaptable, 
and  integrated  architecture  for  on- 
demar>d  network-critical  physical 
infrastructure,  visit  us  online  today 
at  www.apc.com. 


High  power  densities  can  create  hot 
spots,  which  cause  equipment  failures 
and  expenswe  downtime. 


(cold  airj 


InfraStruXure's  advanced  cooling 
components  help  remove  heat  from 
your  servers  and  target  air  circulation 
where  it  is  most  needed. 

Air  components  designed  hr 
InfraStruXure*  are  manageable  via 
network  tachnoiogY.  and  feature  a 
modem,  reliable  design  with  fewer 
moving  parts. 


'Our  Video  on  Demand  (VODI 
servers  are  air  cooled  from  front 
to  back.  The  APC  racks  that 
house  the  InfraSuuXure  are  also 
designed  to  coot  from  from  to 
back.  So  the  same  racks  can 
effecdvety  house  our  power  sys¬ 
tem  and  our  servers. ' 

VMCthMWa 
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Dirtcior  of  Enginmrtng 

Tit  Wtratt  CaWt 

‘If  I  had  purchased  the  incum¬ 
bent  vendor's  3-phase  upgrade 
model.  I  would  have  paid  75% 
more  in  service  costs  over  the 
next  four  years  and  I  would 
have  had  to  utilize  50%  more  of 
my  precious  floor  space  ' 


I  Support  Strviett  Dntofi 
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t  are  buM  out 
for  future  capacity  and  require  a 
large  amount  of  floor  space  that 
could  be  otherwise  utilized.  High 
power  densrty  racks  create  danger¬ 
ous  hot  spots. 


WraSbiXwe*  lets  you  build  out  capacity 
only  as  ifi  required.  Save  up  to  50% 
CapEx  and  20%  OpEx*.  and  reclaim  an 
average  of  20%  usable  space. 
InfraStruXure  AIR  delivers  coming 
directly  where  it  is  needed,  eliminating 
dangerous  hot  spots. 


Every  protect  cairytiif  this  mark  hos 
beoe  lasted  ate  certified  lor  use  with 
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yea  buy.  check  for  the  X  to  geeraMea 
protect  comgatihilitv 
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Microsoft  Warns  of 
Spoof  E-mail . . . 

MicroMH  Corp.  warned  users 
about  an  e-mail  worm  that  began 
spreading  last  week  via  mes¬ 
sages  purportbtg  to  be  sent  from 
5upport^icrosoft.cofn.  The 
worm,  W32/Paiyh9IIM.  modi¬ 
fies  the  Windows  ref^stry  so  that 
the  worm  it  launched  wf^never 
Infected  systems  are  turned  on. 
ft  isn1  destructive,  but  H  will 
mass-mail  itsdf  to  any  e-maii 
addresses  H  finds  on  a  PC. 

. . .  And  Sets  Up 
Virus  Info  Service 

Microsoft  also  said  ft’s  working 
with  Networh  Associates  Inc.  in 
Santa  Clara.  Calf.,  and  Trend 
Micro  Inc.  in  Cupertino.  Cailf..  to 
give  users  more  information 
about  viruses  and  other  Internet 
securfty  threats.  The  companies 
vmounced  a  program  caHed  the 
Veils  Information  Alliance 
through  which  they  plan  to  make 
threat  assessments  and  other  in¬ 
formation  available  to  users. 

IBM  PCs  Get 
Hyperthreading 

IBM  announced  the  first  models 
of  a  new  PC  line  called  TMnk- 
Centre.  The  company  said  (he 
systems  indude  easy-to-remove 
con^Mnents,  tools  for  automat¬ 
ing  procedures  like  data  backup, 
and  support  for  hyperthreading 
capabilities  that  Intel  Corp. 
added  to  Hs  Pentium  4  chips  last 
week.  Dell  Computer  Corp., 
Gateway  Inc.,  Hewlett-Packard 
Co.  and  Acer  America  Corp.  also 
introduced  PCs  that  utilize  htteTs 
hyperthreading  faaiures. 

Short  Takes 

SAP  AG  released  an  upgrade  of 
its  corporate  sourcing  and  pro¬ 
curement  software  with  support 
for  real-time  auctions  wd  other 
new  features. . . .  GARTNER  INC 
said  worldwide  relational  data¬ 
base  sales  Ml  64ti  last  year  to 
S8.6  biMon.  down  from  $7.1  bil- 
bon  in  2001 


MARK  HAM  •  t)N  IHl-  MARK 

Orange  Alert  Status  Adds 
To  Importer  Woes . . . 

...  but  even  Middle  East  traders  can  avoid  shipment  slowdowns  in  the 
current  atmosphere  of  heightened  security  w  ith  the  right  technology, 
claims  Mahipai  Lunia,  director  of  product  solutions  at  Open  Harbor 
Inc.  “The  delay  in  most  imports  is  an  information  lag,"  he  says.  It 
won’t  shock  you  to  learn  that  the  San  Carlos,  Calif.-based  application 
service  provider  (ASP)  offers  a  centralized  service  to  help  get  goods 
in  your  supply  chain  cleared  through  customs  in  60  countries.  In  four 
nations  —  Malaysia,  Ireland,  China  and  Brazil  —  Open  Harbor  users 


can  ci’cn  file  all  customs  paperwork  elec¬ 
tronically.  When  will  U.S.  imports  go  aH-elec- 
tronic?  Probably  this  year,  but  lunia  wasn’t 
able  to  give  a  precise  date.  More  interest¬ 
ing  U  that  the  U.S.  goi  emment  has  ap¬ 
proached  Open  Harbor  about  using  the 
ASP's  tcchnoiog)'  as  a  centralized  system 
for  Immediately  communicating  .security 
alert  changes  to  importers.  Again,  noth¬ 
ing  firm  yet.  but  some¬ 
thing  to  watch.  ■  While 
supply  chain  automation 
bogs  d<»wn  in  U.S.  Cusnims 
warehouses,  it's  speeding 
up  in  the  offshore  apparel 
business.  New  Generation 
Computing  inc.  in  Miami 
Lakes.  Fla..  Is  currently  in 
die  final  stages  of  determining 
what  new’  features  to  add  to 
its  c-SPS  2tK>4  release  due 
early  next  year.  Designed 
for  clothing  makers  that 
have  outsourced  manufac¬ 
turing  operations  overseas 
—  which  is  almost  all  of 
them  —  e-SPS  lels  users 
run  their  manufacturing 
processes  as  if  they  still 
owned  the  plants.  Users  of 


i'  inRf'iton.V-i  . 

will  upgfdili?  ifb  Cyrritjin 
Inlfsrjr.tion  Si-ivei  willwan 
with  a  4  0'rie.iseinf:drty 
July  The  new  vfusion  nl 
thri  aDpItcjI'on  integration 
tool  will  comi'  with  a  visual 
dfvelop"inn['ituOn>tnat  s 
ilesiqnea  tn  lel  ofOOMm 
mi*f<r  cirdw  p'clii'f'j  of  now 
applicDlionr.  'Oteract  ann 
then  draq  m  VVgh  services 
components  to  Imfc  me  riir 
pat  ale  ^.yitems,  Othw; 
goodies  will  include  teal 
time  monilunng  of  applica¬ 
tion  Iransacliont. 


the  current  release  get  instant  data  on 
work  in  progress,  quality  assurance  re¬ 
ports,  shipment  tracking  and  other  de¬ 
tails.  In  (he  3064  upgrade,  they'll  get  a 
data  mart  to  query  and  a  Tablet  PC  module 
that  will  let  plant  managers  overseas  up¬ 
date  information  while  roaming  around 
facilities.  •  Whether  it  comes  from  over¬ 
seas  or  right  nc.\t  door,  spam  continues  to 
torture  corporate  fT  opera- 
iion.s.  Mike  DcciTicId, 
CEO  of  Deerfield  Com¬ 
munications  Inc.,  says  the 
only  thing  that  can  stop 
spam  is  to  eliminate  it  on 
the  Internet's  backbone  — 
(he  dozen  or  so  Domain 
Name  System  root  servers 
that  link  everything  to¬ 
gether.  "But  that  will  take 
a  U.N.  of  spam,”  he  says, 
because  of  the  interna¬ 
tional  distribution  of 
those  network  hubs.  Until 
then,  you  might  want  to 
consider  the  Gaylord. 
Mich,,  company's  new 
product,  VisNetic  Mail- 
Permit  1.0,  which  goes 
into  beta  in  two  weeks 


and  should  be  ready  for  download  in  ear¬ 
ly  July.  Why?  Deerfield  says  the  on¬ 
premise  softw.ire  uses  both  permission- 
based  and  fiftering  techniques  to  stop  spam 
If  you  use  only  one  method,  he  argues, 
unwanted  mail  will  continue  to  seep 
through,  leaving  your  company  vulnera¬ 
ble  to  employees  pas.sing  around  viruses 
and  pom.  And  the  latter  could  pul  you  at 
risk  of  being  hit  with  harassment  law¬ 
suits.  “The  (x>urts  look  to  sec  that  compa¬ 
nies  are  otTering  reasonable  protection  to 
their  employees.  As  tools  improve,  courts 
are  likely  to  expect  protection  to  be  in¬ 
creased."  Deerfield  contends.  ■  Speaking 
of  vulnefdble.  IBM’s  WebSphere  and  BEA’s 
Weblngic  application  servers  have  an  in¬ 
creasingly  strong  open-source  competi¬ 
tor  in  Atlanta-based  {Boss  Group  LLC. 
Concurrent  with  next  month's  lavaOne 
conference  in  San  Francisco,  the  compa¬ 
ny  will  hold  a  shadow  event  called  )Boss 
2  and  will  unveil  its  JBoss  4.0  deveteper  re¬ 
lease.  The  software  includes  a  framework 
that  lets  programmers  apply  system-level 
attributes,  like  security  pnicesscs  and 
distributed  caching,  to  simple  )ava-cla.<i.s 
code.  And,  like  all  things  open-source, 
you  can't  beat  the  SO  price  tag,  which  no 
doubt  has  IBM  and  BEA  sales  staffers 
worrying  about  their  commissions. 

•  Web  services  technology  will  get  a  big  boost 
at  the  end  of  June,  when  Picture  Services 
Network  Inc.  in  Chapel  Hill,  N.C,,  goes 
live  with  its  UDDI  directory  for  photo¬ 
graphic  needs.  The  directory,  which  uses 
UDDI  technology  from  Systinct  Corp.  in 
Cambridge,  Mass.,  will  serve  both  corpo¬ 
rate  users  and  consumers,  and  it's  ex¬ 
pected  to  pick  up  momentum  late  this 
year  when  applications  supporting  the 
Common  Picture  Exchange  Environment 
(CPXE)  standard  reach  the  market.  Ac¬ 
cording  to  lack  DcMarri.  director  of 
strategic  initiatives  at  Eastman  Kodak 
Co..  CP)£  apps  wtH  let  users  get  online  ser¬ 
vices  from  the  UDDI  directory.  He  said 
Kodak  will  be  one  of  the  companies  of¬ 
fering  such  apps.  I 


GM  Offers  Wireless  Options  to  Reet  Buyers 


BV  BOB  BBEWIN 

General  Motors  Corp.  said  it 
plan.s  to  offer  corporate  buyers 
of  its  pickup  trucks  and  vans  a 
packaged  wireless  data  and 
fleet-tracking  system  ba.sed  on 
Gearworks  Inc.  software  and 
Nexte!  Cummunicaiion.s  Inc. 
data  phones. 

GM  is  targeting  the  Etrace 
xt  wircles,s  optic^n  at  compa¬ 
nies  that  owTt  fleets  of  15  to  50 
vehicles,  said  11m  Cavanaugh, 
marketing  product  manager 


for  fleet  and  commercial  oper- 
atioas  at  GM. 

Couriers,  cable  TV  compa¬ 
nies.  and  plumbing  and  HVAC 
contractors  are  seen  as  the 
likely  purchasers,  he  .ndded. 

I  jvanaugh  said  he  expects  a 
“slow  start"  for  the  wireless 
package  but  anticipates  that 
the  program  will  grow  consis¬ 
tently  while  providing  GM 
with  an  edge  over  its  rivals. 

Scott  Hull,  vice  president  of 
marketing  at  Eagan.  Minn.- 


based  Gearworks,  said  the  GM 
package  includes  Nexte! 
phones  and  the  company's 
Web-based  back-office  st>ft- 
ware.  According  to  Hull.  Gear- 
works  will  host  GM  truck-fleet 
customer  applications  on  its 
servers,  with  access  available 
over  the  Web.  Since  Nextel's 
phones  include  a  built-in 
Global  IHistlioning  System  re¬ 
ceiver.  the  software  will  allow 
dlspatchers  to  track  the  loca¬ 
tion  of  individual  vehicles  in 


the  fleet,  according  to  Hull. 

Using  the  lava-based 
phone.s.  which  offer  data 
speeds  between  20Kbil/5Cc. 
and  40Kbit/sec..  dispatchers 
and  service  workers  in  the 
field  will  be  able  to  exchange 
simple  text-based  messages. 

Tlic  GM  service  is  free  for  a 
year.  Hull  said.  After  that,  fleet 
owners  can  continue  using  the 
service  under  a  plan  with 
monthly  fees  of  S34  per  phone 
for  Gearworks  support  and 
S32.99  per  phone  for  Nextel 
data  services.  I 
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MicfQSoft  Warns  of 
Spoof  E-mafl... 

lficre»o(t  Cerp.  wntd  mare 
about  «n  t-mal  worm  that  bagan 
spfiodbig  tact  waok  via  mao' 
aagoa  purportiog  ta  ba  aani  from 
suppor10micreaofLcaoi.  Tfia 
warm.  W3^/PlMi0MM.  modh 
ffoa  Iha  VMom  ragiafry  ao  that 
tfra  weno  ia  hwncfraJ  whaoavar 
bifcclad  Byitawa  art  turned  an. 
Hian’Idaatnietiva.butRwM 
maannal  ilaatf  to  any  a*fnaA 
addraasas  it  Mi  on  a  PC. 


...  And  Sets  Up 
Vims  bifo  Service 

Meroaoll  also  said  R’s  weridng 
wWi  WatwBffc  ftaanrialai  he.  h 
Swito  Clira.  CM.,  and  Traod 
Wero  he.  h  Citoartbai.  CaW..  to 
ghra  uaare  man  hfonnation 
about  vfniaaa  and  atbar  htanwt 
aoGWIty  thoato.  Tlia  campantos 
araiounead  a  program  calad  tha 
Wrui  totomiaihn  Alanoa 
dwaugh  wMeh  thay  phn  to  maka 
throat  iwaaamaoto  and  other  h- 
torraalioo  awalabh  to  uaafs. 


IBM  PCs  Get 
Hyperthreading 

BM  anaounead  the  Rral  modab 
afanawPCBtwcMhdTMnk- 
Canfro.  Tha  company  Mid  tha 
Nyatoma  hduda  aoiy  la  ramem 
oomponants.  toah  for  autonari* 
hg  proeoduraa  Iha  data  backup, 
and  aupport  for  hypailhrBadhg 
capabiNiaa  diat  hdil  Carp, 
added  to  ili  ftnthim  4  cMpa  last 
waak.  Oal  Centoutar  Carp.. 
Oatoway  he..  Ifowfott  Padmd 
Ca.  and  hear  Aniortea  Carp,  aba 
htreduead  PCs  that  utdbo  IntaTs 
hyporihraadhg  foaturaa. 


Short  Takes 

SAP  AO  rafoasad  an  upgrade  at 
ito  corporate  saurehg  and  pr»' 
euramant  sothmro  ardb  aupparl 
far  raaf-tea  aucthna  and  athar 
now  foatoros. . . .  QAimiER  MC. 
MidwarfiMdaiolathnaldato- 
bara  Mfoa  fol  6%  tost  yam  to 
S8J  HMan.  down  from  S7.1  bit- 
Bonh2001. 


MARK  HALL  •  ON  THE  MARK 

Orange  Alert  Status  Adds 
To  Importer  Woes . . . 

. . .  but  even  Middle  East  traders  can  avoid  shipment  slowdowns  in  the 
current  atmosphere  of  heightened  security  with  the  right  technology, 
claims  Mahipal  Lunia,  director  of  product  solutions  at  Open  Harbor 
Inc.  “The  delay  in  most  imports  is  an  information  lag,"  he  says.  It 
won't  shock  you  to  learn  that  the  San  Carlos,  Calif.^based  application 
service  provider  (ASP)  offere  a  centralized  service  to  help  get  goods 
in  your  supply  chain  cleared  through  customs  in  60  countries.  In  four 
nations  —  Malaysia,  Ireland,  China  and  Brazil  —  Open  Harbor  users 


can  even  file  all  customs  paperwork  elec* 
tromcally.  Whan  wH  U.S.  imp^  go  al  tfoc 
tranb?  Probably  this  year,  but  Lunia  wasn’t 
able  to  give  a  precise  date.  More  interest* 
ing  b  that  the  U5.  goveminent  has  ap¬ 
proached  Open  Harbor  about  using  the 
ASP's  technology  as  a  centralized  system 
for  immediately  communicating  security 
alert  changes  to  importers.  Again,  noth¬ 
ing  fimi  yet.  but  some¬ 
thing  to  watch.  •  While 
supply  chain  automation 
b<^  down  in  U.S.  Customs 
warehotuies,  it’s  speeding 
up  in  the  offshore  apparel 
business.  New  Generation 
Computing  Inc.  in  Miami 
Lakes,  Fla.,  is  currently  in 
Ihe  ftoaf  stogM  of  detomiNng 
what  new  features  to  add  to 
its  e-SPS  2004  release  due 
early  next  year.  E)esigned 
for  clothing  makers  that 
have  outsourced  manufac¬ 
turing  operations  overseas 
~  which  b  almost  all  of 
them  —  c-SPS  lets  users 
run  their  manufacturing 
processes  as  if  they  still 
owned  the  plants.  Users  of 


the  current  release  get  instant  data  on 
work  in  progress,  quality  assurance  re¬ 
ports.  shipment  tracking  and  other  de¬ 
tails.  in  the  2004  upgrade,  they’ll  get  a 
data  mart  to  query  and  a  Tabbf  PC  modufo 
that  will  let  plant  managers  overseas  up¬ 
date  information  while  roaming  around 
facilities.  •  Whether  it  comes  from  over¬ 
seas  or  right  next  door,  wnkd  continuw  to 
tortun  eerporuto  IT  opera¬ 
tions.  Mike  Deerfield. 
CEO  of  Deerfield  Com- 
municaiioDs  Inc.,  says  the 
only  thing  that  can  stop 
spam  b  to  eliminate  it  on 
the  Internet’s  backbone  — 
the  dozen  or  so  Domain 
Name  System  root  servers 
that  link  everything  to¬ 
gether.  “But  that  will  take 
a  U  of  spam.“  be  says, 

because  of  the  interna¬ 
tional  dbtributioo  of 
those  r>etwork  hubs.  Until 
then,  you  might  want  to 
consider  the  Gaylord. 
Mich.,  company’s  new 
product,  VbNetic  Mail- 
Permit  LO.  which  goes 
into  beta  in  two  weeks 


and  should  be  ready  for  dowitload  in  ear¬ 
ly  July.  Why?  Deerfield  says  the  on- 
prembe  software  uses  both  patrulMion 
based  and  fitorifig  tochnIquM  to  stop  spurn. 

If  you  use  only  one  method,  he  argues, 
unwanted  mail  will  continue  to  seep 
through,  leaving  your  company  vulnera¬ 
ble  to  employees  passing  around  viruses 
and  porn.  And  the  latter  could  put  you  at 
risk  of  being  hit  with  harassment  law¬ 
suits.  “The  courts  look  to  see  that  compa¬ 
nies  are  offering  reasonable  protection  to 
their  employees.  As  toob  improve,  courts 
are  likely  to  expect  protection  to  be  in¬ 
creased."  Deerfield  contends.  ■  Spaakkig 
ol  wdnarMs.  IBITs  WbbSphara  and  BEA's 
WabLogb  application  servers  have  an  in¬ 
creasingly  strong  open-source  competi¬ 
tor  in  Atlanta-based  JBoss  Group  LLC. 
Concurrent  with  next  month's  JavaOne 
conference  in  San  Francisco,  the  compa¬ 
ny  will  hold  a  shadow  event  called  fB^ 

2  and  will  unveil  its  JBoui  4,0  duvatopar  rt* 
foaaa.  The  software  includes  a  framework 
that  lets  programmers  apply  system-level 
attributes,  like  security  processes  and 
dbtributed  caching,  to  simple  )ava*class 
code.  And.  like  all  things  open-source, 
you  can’t  beat  (he  SO  price  tag,  which  no 
doubt  has  IBM  and  BEA  sales  staffers 
worrying  about  their  commissions. 

•  aarvfcaa  tadvMtogy  aril  gal  a  big  boost 

at  the  end  of  June,  when  Picture  Services 
Network  Inc.  in  Chapel  Hill.  N.C„  goes 
live  with  its  UDDI  directory  for  photo¬ 
graphic  needs.  The  directory,  which  uses 
UDDI  technology  from  Systinet  Corp.  in 
Cambridge,  Mass.,  will  serve  both  corpo¬ 
rate  users  and  consumers,  and  it’s  ex¬ 
pected  to  pick  up  momentum  late  thb 
year  when  applications  supporting  the 
Common  Picture  Exchange  Environment 
(CPXE)  standard  reach  the  market.  Ac¬ 
cording  to  Jack  DcMarti,  director  of 
strategic  initiatives  at  Eastman  Kodak 
Ca.  CPIS  appB  w>  la(  uaara  gal  onAm  ear 
vicaa  from  the  UDDI  directory.  He  said 
Kodak  will  be  one  of  the  companies  of¬ 
fering  such  apps.  b 


GM  Offers  Wireless  Options  to  Reet  Buyers 


BV  BOB  BBCWIN 

General  Motors  Corp.  said  it 
plans  (o  offer  corporate  buyers 
of  its  pickup  trucks  and  van.s  a 
packaged  wireless  data  and 
flect-trackiog  system  based  on 
Gearworks  Inc.  software  and 
Ncxtel  Communications  Inc. 
data  phones. 

GM  b  targeting  the  Etiace 
xt  wireless  option  at  compa¬ 
nies  that  own  fleets  of  IS  to  50 
vehicles,  said  Tim  Cavanaugh, 
marketing  product  manager 


for  fleet  and  commercial  oper¬ 
ations  at  GM. 

Couriers,  cable  TV  compa¬ 
nies.  and  plumbing  and  HVAC 
contractors  are  seen  as  the 
likely  purchasers,  be  added. 

Cavanaugh  said  be  expects  a 
“slow  start"  for  the  wireless 
package  but  anticipates  that 
the  program  will  grow  consis¬ 
tently  while  providing  GM 
with  an  edge  over  its  rivals. 

Scott  Hull  vice  president  of 
marketing  at  Eagan,  Mimt- 


based  Gearworks,  said  the  GM 
package  includes  Nextel 
phones  and  the  company's 
Web-based  back-ofllce  soft¬ 
ware.  According  (o  HuU,  Gear- 
works  will  host  GM  truck-fleet 
customer  applications  on  its 
servers,  with  access  available 
over  the  Web.  Since  Nextel's 
phones  include  a  built-in 
Global  Positioning  System  re¬ 
ceiver.  the  software  vrill  allow 
dbpatebers  to  track  the  loca¬ 
tion  of  individual  vehicles  in 


the  fleet,  according  to  HulL 

Using  the  Java-based 
phones,  which  ofler  data 
speeds  between  20Kbit/sec. 
and  40fCbit/sec,  dbpatebers 
and  service  workers  in  the 
field  will  be  able  to  exchange 
simple  text-based  messages. 

The  GM  service  U  free  for  a 
year,  HuU  said.  After  that,  fleet 
owners  can  continue  using  the 
service  under  a  plan  with 
monthly  fees  of  S34  per  phone 
for  Gearworks  support  and 
$32.99  per  phone  for  Nextel 
dau  services.  I 


Feds  Plan  Biometrics 
For  Border  Control 

rechnolix;}  details  not  finalized,  but 
S-IOOM  sx  stem  is  due  lor  use  next  \  ear 


ev  OAN  VERTON 

m  L’ s  Deparitncni 
of  Homeland  Socu- 
ricy  <nHS)  last  week 
offered  the  first  piih- 
lie  details  of  a  propost'd  hor- 
der-cunfrol  system  that  will 
use  biometric  technolofty  to 
juihencicaie  the  identities  of 
visitors  and  immigrants  enter* 
ing  the  U.S. 

A  re»^uest  for  proposals 
m>m  technology  vendors  is 
scheduled  to  N.*  issued  by  the 
fall,  and  deployment  will  be¬ 
gin  b\-  year’s  end.  said  Asa 
Hutchinson,  undersecretary 
for  tH>rdcr  and  transportation 
security  at  the  DHS.  The 
agency’  has  allocated  S400  mil¬ 
lion  in  funding  for  the  U.S. 
Visitor  and  immigrant  Status 
Indication  Technology  fVlS- 
m  system.  Hutchinson  said. 

The  centerpiece  of  VISIT. 


he  said,  will  be  biometric 
identifiers  that  the  DHS  hopes 
will  help  authorities  confirm 
the  identities  of  foreign  visi¬ 
tors,  check  them  for  possible 
criminal  histories  and  track 
tlK’ir  movements  more  closely. 

St.irting  next  Jan¬ 
uary.  the  DHS  will 
authenticate  a 
visitor’s  identity 
through  a  mini¬ 
mum  of  two  bio¬ 
metric  identifiers 
and  then  check  the 
identity  again.si  terrorist  and 
criminal  watch  lists.  Finger¬ 
prints  and  photographs  will  be 
used  at  first.  Hutchinson  said. 
As  the  technology  is  perfect¬ 
ed,  additional  identifiers,  such 
as  scans  of  irises  or  facia!  fea¬ 
tures.  may  be  added. 

Hutchinson  didn't  disclose 
details  about  how  VISIT  will 


be  configured.  But  he  said  the 
system  will  also  capture  data 
about  visitors'  immigrant  and 
citizenship  status,  nationali¬ 
ties.  countries  of  residence 
and  U.S.  addresses. 

Eventually,  that  data  will  be 
integrated  with  information  in 
the  Student  E.xchangc  Visitor 
Information  System,  which  is 
operated  by  universities  to 
track  foreign  stu¬ 
dents.  In  addition, 
the  data  will  be  an¬ 
alyzed  for  visa  vio¬ 
lations  and  other 
irregularities  by  a 
new  Office  for 
Compliance  within 
the  DHS  Bureau  of  Immigra¬ 
tion  and  Customs  Enforee- 
ment,  Hutchinson  said  during 
a  speech  at  the  Center  for 
Strategic  and  International 
Studies  in  Washington. 

However.  Rafi  Ron,  a  for¬ 
mer  chief  security  officer  for 
the  Israeli  Airport  Authority, 
said  at  this  month's  Terror  be 


Technology  online  confer¬ 
ence  that  the  effort  to  im¬ 
prove  border  security  at  U.S. 
airports  is  focused  too  heavily 
on  technology. 

Ron.  who  now  runs  a  Tel 
Aviv-based  consultancy  called 
New  Age  Aviation  Security, 
advocates  a  broad  security- 
program  that  includes  human- 
behavior  analysis  techniques 
in  addition  to  biometrics. 

Although  IT  projects  like 
the  Transportation  Security 
Administration's  proposed 
CAPPS  II  data  mining  system 
will  provide  some  passenger- 
pn>filing  capabilities.  Ron  said 


their  reliance  on  information 
stored  in  databases  is  a  weak 
point.  ‘‘There  are  no  global 
databases  that  refer  to . . .  pro¬ 
files  of  people  who  may  be¬ 
come  terrorists."  he  said. 

At  Boston’s  Logan  Interna¬ 
tional  Airport,  which  signed  a 
S500.000  contract  with  Ron's 
firm  last  year,  undercover 
Massachusetts  State  Police 
officers  now  roam  the  termi¬ 
nals  and  parking  garages  hik¬ 
ing  for  specific  behavior  pat¬ 
terns.  said  lose  Juves,  a  spokes¬ 
man  for  the  Massachusetts 
Port  Authority,  which  man¬ 
ages  the  airport.  I 


Asa  Hutchinson  (Mt),  undsrsBcrMary  for  border  and  transportation 
security  at  the  OKS.  observes  a  U,S.  Customs  officer  checking  the  paper¬ 
work  of  a  Mexican  citizen  attempting  to  enter  the  U.S.  in  San  Luis.  Ariz. 
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IT  Risks,  Physical  Threats  Change 
Corporate  Approaches  to  Security 


( Collaboration  key 
to  getting  support 

BY  aaiKUMAR  VIJAVAH 

A  combination  of  increased  IT 
and  physical  security  threats 
and  new  regulatory  require¬ 
ments  is  transforming  the 
manner  in  which  security- 
functions  need  to  be  viewed, 
implemented  and  managed, 
said  attendees  at  the  Securll' 
2IK).'  Summit  here  last  wctL 
For  iftstancc.  it's  becoming 
increasingly  important  for 
companies  to  Untk  at  IT  and 
physical  security  threats  from 
a  unified  risk-management 
perspective,  said  Dennis 
Treece,  director  of  corporate 
security  at  the  M.'issachusetts 


Port  .Authority  in  Boston. 

As  one  of  the  executives  in 
charge  of  securing  Boston's 
Logan  International  Airport, 
plus  three  seaports  and  a  ma¬ 
jor  toll  bridge.  Trecce  l.s  fo¬ 
cused  primarily  on  physical 
infrastructure  protection.  But 
he  also  oversees  the  IT  side  — 
for  example,  sitting  in  on  all 
meetings  regarding  the  imple¬ 
mentation  of  a  new  Gigabit 
Ethernet  LAN  at  Logan. 

Such  unified  oversight  of 
security  functions  is  not  only 
necessary  hut  Inevitable. 
Trecce  said.  “At  the  end  of  the 
day.  the  board  is  going  to  see 
no  difference  between  net  • 
work  and  physical  security. 
There's  going  to  be  a  single 
security  budget  line  item.  It's 
all  the  same  risk."  he  added. 


The  need  to  comply  with 
emerging  data  privacy  regula¬ 
tions  and  other  laws  also 
means  that  IT  security  orga¬ 
nizations  will  have  to  collabti- 
rate  better  with  corporate 
legal,  audit  and  human  re¬ 
sources  departments,  accord¬ 
ing  to  Robert  Degen.  senior 
vice  president  of  corporate 
security  at  First  Data  Corp. 
in  Denver. 

Such  alliances  will  become 
crucial  in  securing  the  money 
I  .and  .support  needed  to  implc- 
I  inent  enterpriscwlde  IT  secu- 
I  rity  approaches.  Dcgcn  said. 
"You  can't  go  it  alone  like 
a  Don  Quixote.”  .said  Dcgcn. 

>  who.  like  Treccc.  overstvs 
I  both  IT  and  physical  security. 

I  Dcgcn  reports  to  First  Data's 
^  chief  auditing  officer,  an 


arrangement  that  he  said  has 
helped  to  keep  security  a  top 
issue  at  the  board  level. 

Jude  Ogunicye,  a  systems 
administrator  at  Cascade  Nat¬ 
ural  Gas  Corp.  in  Seattle,  said 
he's  thinking  of  having  the 
company's  network  tested  and 
analyzed  by  a  third  party  to 


IT 

SecurIT  2003 

•  Unifiei  manjqeriieitt  ..)i 
pLiysical  .^nd  IT  secunty 

•  luc'^ased  colUtioidlion 
t>“twer!n  security  HR,  dudil 
.\nil  loqji  fiifictions 

V  A  mHding  of  husiruir.r. 
continuity  and  jpcuniy 
function'. 

•  Growing  prossu'C  to  bal¬ 
ance  W'Cunty  measure; 
With  opeiaiiptial  needs 


highlight  weaknesses  tliai 
could  be  exploited.  The  idea 
is  to  demonstrate  "how  much 
money  you  can  lose  with  a 
downtime."  Ogunicye  said. 

While  getting  funding  for 
IT  security  initiatives  is  easier 
than  it  was  a  few  years  ago. 

"a  business  case  for  informa¬ 
tion  security  will  most  likely 
still  have  to  be  made  in  almost 
all  organizations  if  drastic 
changes  in  funding  or  staffing 
are  expected,’*  said  Jason  Wit¬ 
ty.  director  of  global  security 
architecture  at  Aon  Services 
Corp..  a  subsidiary  of  the  $8 
billion  Aon  Corp.  in  Chicago. 

To  get  upper  management’s 
approval  for  the  rcstiurces 
needed  to  secure  systems. 
Witty  recommended  giving 
demonstrations  showing  how- 
easy  it  is  to  compromise  data, 
explaining  regulator)'  require¬ 
ments  and  presenting  internal 
measurements  that  depict 
infosecurity  problems  need¬ 
ing  to  be  solved,  k 
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Feds  Plan  Biometrics 
For  Border  Control 


Technology  details  not  finalized,  but 
S400M  system  is  due  for  use  next  year 


BT  OAH  VCNTON 

The  U.S.  Department 
of  Homeland  Secu> 
rity  (DHS)  last  week 
offered  the  first  pub¬ 
lic  details  of  a  proposed  bor- 
der-coQtrol  system  that  will 
use  biometric  technology  to 
authenticate  the  identities  of 
visitors  and  immigrants  enter¬ 
ing  the  U5. 

A  request  for  proposals 
from  technology  vendors  is 
scheduled  to  be  issued  by  the 
&11,  and  deployment  will  be¬ 
gin  by  year's  end.  said  Asa 
Hutchinson,  undersecretary 
for  border  and  transportation 
security  at  the  DHS.  The 
agency  has  allocated  $400  mil¬ 
lion  in  binding  for  the  U.S. 
Visitor  and  Immigrant  Status 
Indication  Techixilogy  (VIS* 
ID  system,  Hutchinson  said. 
The  centerpiece  of  VISIT, 


be  said,  will  be  biometric 
identifiers  that  the  DHS  hopes 
will  help  authorities  confirm 
the  identities  of  foreign  visi¬ 
tors,  check  them  for  possible 
criminal  histories  and  track 
their  movements  more  closely. 

Starting  next  fan-  _ 

uary,  the  DHS  will 
authenticate  a 
visitor’s  identity 
through  a  mini¬ 
mum  of  two  bio¬ 
metric  identifiers 

and  then  check  the  - 

identity  against  terrorist  and 
criminal  watch  lists.  Finger¬ 
prints  and  photographs  will  be 
used  at  first,  Hutchinson  said. 
As  the  technology  is  perfect¬ 
ed,  additional  identifiers,  such 
as  scans  of  irises  or  facial  fea¬ 
tures.  may  be  added. 

Hutchinson  didn't  disclose 
details  about  how  VlSfr  will 
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be  configured.  But  he  said  the 
system  will  also  capture  data 
about  visitors'  immigrant  and 
citizenship  status,  natitmali- 
ties,  countries  of  residence 
and  U.S.  addresses. 

Eventually,  that  data  will  be 
integrated  with  information  in 
the  Student  Exchange  Visitor 
Information  System,  which  is 
operated  by  universities  to 
_  track  foreign  stu¬ 
dents.  In  addition, 
the  data  will  be  an¬ 
alyzed  for  visa  vio¬ 
lations  and  other 
irregularities  by  a 
new  Office  for 

-  Compliance  within 

the  DHS  Bureau  of  Immigra¬ 
tion  and  Customs  Enforce¬ 
ment,  Hutchinson  said  during 
a  speech  at  the  Center  for 
Strategic  and  International 
Studies  in  Washington. 

However.  Rafi  Ron,  a  for¬ 
mer  chief  security  officer  for 
the  Israeli  Airport  Authority, 
said  at  this  month’s  Terror  & 


Technology  online  confer¬ 
ence  that  the  effort  to  im¬ 
prove  border  security  at  U.S. 
airports  is  focused  too  heavily 
on  technology. 

Ron,  who  DOW  runs  a  Tel 
Aviv-based  consultancy  called 
New  Age  Aviation  Security, 
advocates  a  broad  security 
program  that  includes  human- 
behavior  analysis  techniques 
in  addition  to  biometrics. 

Although  IT  protects  like 
the  Transportation  Security 
Administration’s  proposed 
CAPPS  n  data  mining  system 
will  provide  some  passenger- 
profiling  capabilities,  Ron  said 


their  reliance  on  information 
stored  in  databases  is  a  weak 
point.  '‘There  are  no  globaJ 
databases  chat  refer  to . . .  pro¬ 
files  of  people  who  may  be¬ 
come  terrorists.*’  be  said. 

At  Boston's  Logan  Interna¬ 
tional  Airport,  which  signed  a 
$500,000  contract  with  Ron’s 
firm  last  year,  undercover 
Massachusetts  State  Police 
officers  now  roam  the  termi¬ 
nals  and  parking  garages  look¬ 
ing  for  specific  behavior  pat¬ 
terns,  said  Jose  luves,  a  spokes¬ 
man  for  the  Massachusetts 
Port  Authority,  which  man¬ 
ages  the  airport.  I 
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IT  Risks,  Physical  Threats  Change 
Corporate  Approaches  to  Security 


QjUaboration  key 
to  getting  support 


A  combination  of  increased  IT 
and  physical  security  threats 
and  new  regulatory  require¬ 
ments  is  transforming  the 
maimer  in  which  security 
functions  need  to  be  viewed, 
implemented  and  managed, 
said  attendees  at  the  SecurlT 
2003  Summit  here  last  week. 

For  instance,  it’s  becoming 
increasingly  important  for 
companies  to  look  at  IT  and 
physical  security  threats  from 
a  unified  risk-management 
perspective,  said  Dennis 
Treecc,  director  of  corporate 
security  at  the  Massachusetts 


Port  Authority  in  Boston. 

As  one  of  the  executives  in 
charge  of  securing  Boston’s 
Logan  International  Airport, 
plus  three  seaports  and  a  ma¬ 
jor  toll  bridge.  Treece  b  fo¬ 
cused  primarily  on  physical 
infrastructure  protection.  But 
he  also  oversees  the  IT  side  — 
for  example,  sitting  in  on  all 
meetings  regarding  the  imple¬ 
mentation  of  a  new  Gigabit 
Ethernet  LAN  at  Logan. 

Such  unified  oversight  of 
security  functions  b  not  only 
necessary  but  inevitable, 
Treece  said.  'At  the  end  of  the 
day.  the  board  b  going  to  see 
no  difference  between  net¬ 
work  and  physical  security. 
There's  going  to  be  a  single 
security  budget  line  item.  It's 
all  the  same  risk,"  be  added. 


The  need  to  comply  with 
emerging  data  privacy  regula¬ 
tions  and  other  laws  also 
means  that  IT  security  orga¬ 
nizations  will  have  to  collabo¬ 
rate  better  with  corporate 
legal,  audit  and  human  re¬ 
sources  departments,  accord¬ 
ing  to  Robert  Degen,  senior 
vice  president  of  corporate 
security  at  First  Data  Corp. 
in  Denver. 

Such  alliances  will  become 
crucial  in  securing  the  money 
and  support  needed  to  imple¬ 
ment  enterprisewide  IT  secu¬ 
rity  approaches.  Degen  said. 
"You  can’t  go  it  alone  tike 
a  Don  C^uixote."  said  Degen, 
who,  like  Treece,  oversees 
both  IT  and  physical  security. 
Degen  reports  to  First  Data’s 
chief  auditing  officer,  an 


arrangement  that  he  said  has 
helped  to  keep  security  a  top 
issue  at  the  board  level 
Jude  Ogunleye,  a  systems 
administrator  at  Cascade  Nat¬ 
ural  Gas  Corp.  in  Seattle,  said 
he’s  thinking  of  having  the 
company's  network  tested  and 
analyzed  by  a  third  party  to 


SecurlT  2003 


highlight  weaknesses  that 
could  be  exploited  The  idea 
b  to  demonstrate  "bow  much 
money  you  can  lose  with  a 
downtime."  Ogunleye  said 

While  getting  funding  for 
IT  security  initiatives  b  easier 
than  it  was  a  few  years  ago. 

"a  business  case  for  informa¬ 
tion  security  will  most  likely 
still  have  to  be  made  in  almost 
all  oiganizations  if  drastic 
changes  in  funding  or  staffing 
are  expected."  said  Jason  Wit¬ 
ty,  director  of  global  security 
architecture  at  Aon  Services 
Corp.,  a  subsidiary  of  the  $8 
billion  Aon  Corp.  in  Chicago. 

To  get  upper  management's 
approval  for  the  resources 
D^ed  to  secure  systems, 
Witty  recommended  giving 
demonstrations  showing  how 
easy  it  b  to  compromise  data, 
explaining  regulatory  require¬ 
ments  and  presenting  internal 
measurements  that  depict 
infosecurity  problems  need¬ 
ing  to  be  sdived  I 
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HP  Reports  Q2 
Profit  Plans  Cuts 

HawtiW  PMfcard  Co.  r>poited  a 
S869  miBan  proA  on  rtvwMM  of 
Stf  bSen  for  ta  Hcond  qiutftor. 
whidt  Mdod  April  90.  CEO  Carfy 
Rorino  sold  ai  fafimoa  unHa 
wwo  profRaMt  ctcopf  for  HP’s 
Eoterpifoo  Systonw  Orouit 
wficfa  boll?  Bilioit  Tho  com- 
pony  pim  to  l^r  off  iflottier 
3,500  worlian  by  October  but 
««  odd  4.000  now  jobs  00  port 
of  sovoral  IT  oulaotireino  con¬ 
tracts  that  it  roconOy  won. 


Hanium  Version  of 
HP-UX  b  Upgraded 

In  othsr  HP  nows,  the  sowdor  ro- 
lonaod  M  upgradt  of  tht  HP-UX 
ft  epardiog  sysbm  ior  Ms 
ssrvsfs  booad  on  bdd  Corp.'s 
64-bfl  Ronium  procoooora,  HP 
said  VMon  2  of  ttw  oporatbig 
syotow  SMpports  syitamo  with  up 
to  64  CPUs.  Olhor  tsitioio  In- 
dudt  a  poir  of  IT  socurity  config¬ 
uration  tools  and  sopport  for 
HFs  worfdoad  and  partition 


WorldCom  Agrees 
ToPaySSOOMFme 

WorldCom  Inc.  amounead  a  pro- 
poaad  dial  wRh  Aa  U.S.  Socurt- 
tios  and  Enbangi  Commisaion 
undar  which  6ia  company  woidd 
pay  a  tSOO  mMon  chi  panaRy 
to  laHlo  chargaa  of  accounting 
irrogutarttoa.  Thi  aotflamanl 
daai  atii  naads  la  bt  approvod 
by  U.S.  District  Com  and  ILS. 
Baatouptcy  Court  judgaa.  add 
ttarhlC^  which  is  now  doing 
aaMCt. 


Short  Takes 

aurndhplMsonJinoeio 
ahipIJnin-baiMfciuBlorodsys- 
tsmsbidRmouBdilsBIadr 
Canlm  Rat  of  blida  tsrvars. . . . 
Now  Itarh-bnaod  MFOmUTlON 
BUUXRS  MC.  MBOincod  Wsb- 


sorwr  cIboAms  naming  data 


WorldCom  Wins  $20M  Bid  to 
Build  Baghdad  Cell  Network 


GSM  selected  over  CDMA  technology 
to  support  up  to  10,000  US.  personnel 


BY  BOB  anewiN 

The  department  of 
Defense  has  awarded 
WorldCom  Inc.  a 
contracT  valued  at 
about  S20  million  to 
install  a  cellular  com¬ 
munications  system 
In  Baghdad.  It  also 
has  mounted  a  mas¬ 
sive  logistics  effort  to  turn  on 
limited  cellular  service  in  the 
Iraqi  capital  next  month. 

llie  system  being  set  up  by 
WorldCom  —  which  is  now 
operating  under  the  name 
MCI  —  will  be  used  to  facili¬ 
tate  communications  between 
U.S.  personnel  in  Iraq,  said  Air 
Force  Ll  CoL  Ken  McClellan, 
a  Pentagon  spokesman.  ‘The 


ability  to  communicate  is  a 
crucial  tool  to  advance  securi¬ 
ty  interests  as  well  as  humani¬ 
tarian  efforts.”  McClellan  said. 
He  added  that  the  cellular  sys¬ 
tem  could  be  used  by 
up  to  10,000  people. 

Sources  familiar 
with  the  plan  said 
users  will  include 
U.S.  civilian  and  military  per¬ 
sonnel  in  Baghdad  and  possi¬ 
bly  workers  from  humanitari¬ 
an  aid  organizations.  All  ac¬ 
cess  to  the  system  will  be  con¬ 
trolled  by  U5.  officials,  they 
added. 

A  WorldCom  spokeswoman 
declined  to  provide  any  details 
about  the  planned  cellular 
telephone  system  except  to 


say  that  the  company  will 
meet  a  deadline  to  activate  the 
service  in  June. 

Mark  Smith,  a  spokesman 
for  the  GSM  Association  in 
London,  said  the  network  be¬ 
ing  installed  by  WorldCom  is 
based  on  the  Global  System 
for  Mobile  Communications 
(GSM)  standard  used  by  other 
countries  in  the  Middle  East. 
The  GSM  Association  is  work¬ 
ing  with  WorldCom  and  the 
U.S.  government  to  sectirc  the 
Iraqi  network,  he  said. 

Technology  Ties 

In  March,  Rep.  Darrell  Issa 
(R-Calif.)  introduced  a  bill 
seeking  to  require  the  Penta¬ 
gon  to  use  Code  Division  Mul¬ 
tiple  Access  (CDMA)  cellular 
network  technology  in  Iraq  in¬ 
stead  of  <^M.  COMA  was  de¬ 
veloped  by  Qualcomm  Iitc., 


which  is  based  in  San  Diego. 

But  Craig  Mathias,  an  ana¬ 
lyst  at  Farpoint  Group  in  Ash¬ 
land,  Mass.,  said  it  makes 
more  sense  to  install  a  GSM 
system  in  Baghdad  because  all 
the  countries  surrounding  Iraq 
use  that  technolc^.  About 
80%  of  the  world's  cellular 
networks  are  based  on  GSM 
technology.  Mathias  added. 

The  sources  said  WorldCom 
has  tapped  Stockholm-based 
LM  Ericsson  Telephone  Co.  to 
supply  the  GSM  equipment, 
including  17  cell  towers  and 
associated  equipment  Worid- 
Com  has  also  installed  a  satel¬ 
lite  earth  station  in  Baghdad  to 
coimect  the  cellular  system  to 
networks  it  operates  for  the 
Defense  Department  in  the 
U3.,  according  to  the  sources. 

They  said  shipping  all  the 
equipment  to  B^dad  re¬ 
quired  a  mammoth  logistics 
effort  that  involved  five  C-5 
cargo  aircraft,  the  largest 
planes  the  Air  Force  operates, 
llie  equipment  delivery  was 
completed  May  16. 1 


Nextel  Exec  Says  Corporate  Users  Are 
Starting  Small  on  Wireless  Applications 


OV  dlAIO  STCBMAN 

As  vice presi¬ 
dent  o/Mfemei 
and  wireless 
services  at  Nex- 
tei  Communicu- 
rions/nc.,  Grog 
Santoro's  duties 
include  monqg- 
ing  the  rollout 
of  the  corporate 
wireless  data 
services  the  Heston.  Va..  com¬ 
pany  announced  last  August. 
Santoro  this  month  spoke  with 
Computerworld  about  the  sta¬ 
tus  of  that  offerirtg  and  other  is¬ 
sues  in  the  wireless  market. 

Art  tlM  ocononiy  and  tight  IT 
budgali  making  it  hard  for  you  to 
convinoa  eompanioa  to  invest  in 
wholaaa  aorvleas?  We're  deliv¬ 
ering  a  consistent  set  of  new 
subscribers  every  quarter  — 
40a000 10  500,000  net  adds. 
And  in  the  emerprise  space, 
close  to  40%  of  the  customers 
ate  signing  up  for  a  data  ser¬ 


vice.  It  sounds  fiinny  to  say  it, 
but  I  think  the  economy  is 
helping  us.  It's  real  easy  to  get 
these  programs  going  without 
having  to  go  through  a  long 
approval  process.  Most  of  the 
deployments  we've  been  in¬ 
volved  in  have  started  with  a 
clearly  defined  project. 

Art  most  of  tha  profects  still 
small  in  scope?  Last  year  was 
lots  of  little  projects.  This 
year,  it’s  a  lot  of  deployments 
within  functional  groups.  I  ex¬ 
pect  by  later  thui  year  to  see 
location-aware  services  and 
more  enterprisewide  deploy¬ 
ments. 

What  about  fho  iaaua  of  wMeas 
sacurNy  shortcomings?  la  that  af- 
foctingtysa?!  would  say  some 
of  the  black  eye  that  wireless 
has  on  secruity  has  bled  over 
into  the  more  tradirional  mo¬ 
bile  space.  But  it’s  very  easy  to 
encrypt  information  within  a 
corporate  environment  and 


extend  that  to  the  phone  ~ 
that’s  basically  extending  a 
VPN  to  the  phones.  Wi-Fi,  on 
the  other  hand,  remains  a  con¬ 
cern.  Our  approach  to  the 
wireless  LAN  is  to  offer  it  as  a 
tool  on  a  [corporate]  campus. 
We  don’t  currently  offer  a  hot¬ 
spot  capability. 

Art  tharo  other  Issuos  that  corpo- 
rata  uaart  say  naad  to  bt  ad- 
drossad  boforo  they  go  ahead 
with  wlrelosa  profe^?  One 
thing  that  does  come  up  from 
customers  —  and  we  can 
prove  that  it’s  not  an  issue  — 
is  reliability.  It's  inherently  dif¬ 
ficult  to  guarantee  [service- 
level  agreements)  on  wireless 
networks,  and  corporate  cus¬ 
tomers  want  SLAs.  But  our 
back-end  connections  to  the 
Internet  are  redundant,  and 
we've  put  a  lot  of  energy  into 
ensuring  that  our  data  envi¬ 
ronment  is  hardened  and  well 
secured.  We've  optimized 
everything  that  we  can. 


How  do  you  think  your  iOtn  mo- 
bilo  natwork  stacks  up  against 
rival  onas  bisad  on  and 
(!0MA  tochnology?  The  biggest 
difference  people  like  to  talk 
about  is  speed  But  frankly,  to 
most  IT  people  I've  talked  to. 
speed  is  a  sexy  thing  but  it 
turns  out  to  be  the  fourth  or 
fifth  item  on  their  priority 
lists.  Coverage  and  the  ability 
to  deploy  applications  and 
support  them  are  higher. 

When  you  look  at  all  the  di¬ 
mensions,  iDen  stacks  up  pret¬ 
ty  well,  except  that  it  happens 
to  be  somewhat  slower. 

Do  you  havt  mythbig  in  tbt 
worha  lo  boost  thi  spoad? 

have  an  option  of  going  to  an 
advanced  version  of  iDen, 
which  would  quadruple  our 
data  rate,  ^'re  currently  in 
the  process  of  lookiiq;  at  that. 

VAiy  not  lump  right  on  R7  Noth¬ 
ing's  free.  It's  not  that  bard  or 
that  expensive,  but  there’s 
work  to  be  done.  If  customers 
were  breaking  down  the  door 
saying  they  needed  hl^er 
speeds,  we’d  be  jumping  on  it 
tomorrow.  But  they’re  not  I 


Only  SAS  provides  a  bigb-impact,  low-risk  way 
to  achieve  inteliigent  data  warebousing.  You  can 
extract,  transform  and  load  data  from  any  source, 
across  any  platform,  while  assuring  quality. 
Simplify  the  way  you  create  and  customize  reports. 
And  deUver  a  shared  version  of  the  truth.  To  find  out 
how  top  companies  reap  bottom-line  rewards  with 
SAS  software — by  leveraging  the  value  of  data 
from  corporate  systems,  e-business  channels,  the 
supply  chain  and  beyond — visit  us  on  the  Web  or  call 
toll  free  1  866  270  5727. 


www.sas.com/warehouse 
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ISS  Adds  ‘Virtual’  Patching 


Upgrade  aims  to 
ease  IT  securitv' 


BV  JAlKUMAft  VtJAVAN 

Internet  Security  Systents  Inc. 
(ISS)  this  week  will  upgrade 
its  D>’namic  Threat  Protection 
soltware  suite  with  enhanced 
vulnerability  assessment  and 
intrusion-detection  tools. 

A  key  capability  enabled  by 
the  new  technology  is  a  “virtu¬ 
al  patch  process"  that  Atlanta- 
based  15$  said  will  reduce  the 
need  to  apply  so-called  hot 
Hxes  for  protecting  against 
viruses  and  worms  that  ex¬ 


ploit  system  vulnerabilities. 

The  virtual  process  is  de¬ 
signed  to  let  security  adminis¬ 
trators  block  certain  types  of 
traffic  and  look  for  particular 
virus  signatures  or  suspicious 
data  patterns  using  vulnerabil¬ 
ity  information  gathered  by 
the  company's  upgraded  Inter¬ 
net  Scanner  7.0  tool. 

ISS  also  plans  to  soon  re¬ 
lease  a  Catastrophic  Risk  In¬ 
dex  that  lists  some  of  the  most 
dangerous  security  vuLierabii- 
ities.  The  Index  will  give  users 
more  information  on  what  to 
defend  against  and  how  to  do 
it,  said  ISS  Chief  Technology 


Officer  Chris  Klau.s. 

The  vulnerability  identifica¬ 
tion  and  proactive  defense 
measures  being  offered  by  ISS 
could  save  companies  from 
having  to  install  patches  or  de¬ 
velop  manual  work-arounds 
every  time  a  new  security  flaw 
is  found,  said  Andrew  Plato,  a 
principal  consultant  at  Anitian 
Corp.,  a  Beaverton.  Ore.-based 
security  consultancy. 

"If  nothii^  [else],  it  buys 
time  for  companies  to  apply 
patches."  Plato  said. 

Such  tooU  can  be  very  use¬ 
ful  but  are  not  a  full  replace¬ 
ment  for  the  patching  process. 


said  Eric  Beasley,  a  senior  net- 
woric  administrator  at  Baker 
Hill  Corp.,  an  application  ser¬ 
vice  provider  in  Carmel.  Ind. 

Baker  Hill  is  using  an  appli¬ 
cation-level  firewall  from 
Teros  Inc.  in  Santa  Clara. 
Calif,  that  has  functions  simi¬ 
lar  to  the  ones  developed  by 
ISS  to  protect  its  farm  of  Web 
servers  based  on  Microsoft's 
Internet  Information  Server 
software. 

The  firewall  blocks  all  but  a 
very  narrowly  defined  set  of 
traffic  from  reaching  the 
servers.  That  has  allowed  Bak¬ 
er  Hill  to  defer  hot  fixes  and 
wait  for  Microsoft  to  roll  out 
service  packs  incorporating 
patches.  Beasley  said.  “That 
doesn't  mean  we  have  a  policy 


Netegrity  Updates  Mentity  Managemeirt  Software 


Netogrtty  Inc.  last  week  nied  out 
a  new  venion  of  Ms  IdantityMn* 
der  software  tartumg  imeontod 
usar  acknnistnfion  and  appica- 
tkm  pnwiBioning  capafaMes. 

^  tgigrede  b  aimed  Hlet- 
tvKi  IT  adrnMstrators  aulonale 
the  tasks  of  cretfng  and  menac¬ 
ing  uBeridanMias  and  controMing  . 
access  to  systems  based  on 
(hoee  idenHiiee,  said  Deepak 
Taneiik  a  vice  presktont  at  the 
VMham.  Ma5B.-baaad  company. 

NelegrMy's  product  is  the  U* 
est  it  an  emerging  category  of 


software  from  vendore  such  as 
BM.  Novel  fee.  and  Obb  Inc.  that 
ties  together  access  control,  au- 
(henticalioa  authorgation  and 
appicatlon  inwBioning  functions. 

*11  is  raaly  al  about  service 
dellwry  and  user  produeftyity.  by 
gwing  lham  be  right  access  to 
the  systems  Ihey  naed.  much 
lasier.*  said  Jorislhan  F%na  an 
anaiyet  at  Forrester  Research 
fee.  fet  Cambridge.  Mass. 

From  an  adminstrative  stand¬ 
point  the  centraizAion  and 
automation  provided  by  such 


technologies  can  save  lime  and 
money.  %in  said. 

For  instance,  IT  managers  can 
automete  the  processes  of 
addng  new  users  or  groups, 
changino  access  rights,  delegat¬ 
ing  password  management  and 
delsiing  user  accounts. 

A  slew  of  shorb  and  tong-term 
Issues  is  drMng  the  need  for 
such  products,  accordhg  to  Al¬ 
bert  Braunberg,  an  analyst  at 
Current  Analysis  Inc.  fei  Sterling. 
Va.  Among  them  are  the  growing 
adoption  of  Web  services,  the 


need  lo  secure  businese-to-busi- 
ness  trarsacSons  through  better 
idenlity  management,  and  corpo¬ 
rate  ITs  locus  on  ROI.  ha  said. 

But  Braunberg  added  bat 
products  Hte  MenHyMinder  are 
urikelytoappaaltoanyoneob- 
er  ban  very  large  corporatiors. 

Nategnty's  new  rel^  inte¬ 
grates  be  company's  existing 
access  control  funedonaiy  wib 
appicabon  provieioning  softwree 
developed  by  Business  Layers 
lnc.inRochBleP8rk.NJ.The 
two  companies  arewuncad  a 
partnership  earfeer  bte  year. 

-jWofnarfelsywr 
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of  not  keeping  our  Web  serv¬ 
ers  updat^  It  just  means  we 
have  a  more  relaxed  time 
frame  for  doing  so,"  be  said. 

The  virtual  patchir^  fea¬ 
tures  are  only  a  part  of  a  wider 
range  of  intrusion-prevention 
capabilities  being  touted  by 
security  vendors.  Other  com¬ 
panies,  such  as  Sanctum  Inc., 
Kavado  Inc.  and  Teros,  also  of¬ 
fer  tools  that  use  behavioral 
rules,  usage  models  and  corre¬ 
lation  engines  to  enforce  au¬ 
thorized  network  behavior.  In 
some  cases,  these  tools  can 
automatically  prevent  unau¬ 
thorized  or  malicious  code 
from  executing  on  systems. 

However,  users  have  so  far 
been  cautious  in  their  accep¬ 
tance  of  such  technologies, 
citing  their  immaturity,  lack  of 
promised  ftmctionality  and 
tendency  to  block  legitimate 
as  well  as  malicious  traffTic.  I 


products  instead  of  doing  that 
itselL  Wendel  noted. 

The  combination  of  prob¬ 
lems  has  prevented  Identrus 
Irom  becoming  a  moneymak¬ 
er.  despite  a  roster  of  founders 
that  includes  ABN  Amro 
Holding  NV.  Bank  of  America 
Corp.,  Citigroup  Inc.  and 
Deutsche  Bank  AG. 

Identrus  claims  that  more 
than  60  financial  institutions 
have  signed  up  to  issue  digital 
certificates  for  e-commerce 
transactiODS.  But  thus  far. 
many  of  the  banks  have  used 
the  company’s  technology 
only  to  establish  sets  of  PKI 


rules,  Wendel  said. 

Affer  Identrus’  marketing 
capabilities  are  beefed  up. 
Wendel  plans  to  begin  selling 
annual  subscription.s  to  the 
company’s  PKI  network,  as 
well  as  professional  services. 

Five  years  from  now.  she 
said.  "I  want  there 
to  be  so  many  digi¬ 
tal  certificates  out 
there  that  if  you 
were  to  count 
them,  you'd  run  out 
of  space  on  your 
calculator.” 

Wendel  "is  inter¬ 
ested  in  going  after 
the  eBays  of  the 
world,  and  they 
need  this  kind  of 
technology."  said 


Itew  CEO  Karen  WmM 
said  UHitrui  naada  to 
do  a  batter  fob  of  nar- 
hatifigtoPKl-baaad 


Avivah  Litan.  a  financial  ser¬ 
vices  analyst  at  Ganner  Inc.  in 
Stamford.  Conn.  But  they’re 
not  using  it  now,  she  added. 

In  February.  Gartner  sur¬ 
veyed  200  business-to-busi- 
ness  companies  with  $100  mil¬ 
lion  or  more  in  annual  rev¬ 
enue  and  foimd 
(hat  none  were  us¬ 
ing  digital  certifi¬ 
cates,  Litan  said. 

What's  more,  a 
separate  survey  of 
135  banks  conduct¬ 
ed  last  year  by 
Gartner  revealed 
that  less  than  5%  of 
them  had  issued 
digital  certificates 
to  corporate  cus¬ 
tomers,  and  less 


than  3%  had  done  so  for  retail 
customers. 

Most  of  the  companies  that 
responded  to  the  two  surveys 
expressed  interest  in  digital 
certificate  technology;  Litan 
said.  But  none  of  the  nonbank¬ 
ing  businesses  had  even  heard 
of  Identrus,  she  added. 

}ane  Hcruicssy,  senior  vice 
president  in  charge  of  Wells 
Fargo  &  Co.’s  international 
banking  group,  said  the  San 
Francisco-ba^d  company  is 
close  to  launching  a  l^ta  test 
of  Identrus’  digital  certificate 
technology  with  several  cor¬ 
porate  customers. 

“I  think  the  strong  rules  set 
(andj  the  security  processes 
make  it  about  as  secure  as  we 
can  get  to  make  sure  docu¬ 


ments  are  authentic."  Hen- 
ncssy  said.  Another  expeaed 
benefit  is  the  interoperability 
of  Identrus'  certificates  among 
the  diffTerent  banks  that  have 
joioed  its  network.  “You  don't 
have  that  with  most  other 
[digital  certificates]."  Hen- 
nes.sy  said. 

Wendel.  45,  was  formerly 
CEO  of  eFinance  Corp.,  a  San 
Mateo,  Caiif.-based  software 
vendor  that  develops  products 
for  gauging  the  financial 
soundness  of  customers  and 
business  partners.  She  said  her 
plan  for  Identrus  includes  the 
development  by  early  next 
year  of  a  digital  certificate  that 
banks,  brokerages  and  other 
companies  can  use  to  authen¬ 
ticate  retail  customers.  I 
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I  AM  A  CISCO  7960G 
IP  PHONE. 


I  AM  MORE  TALK 
AND  LESS  WALK. 

I  HAVE  MORE  WAYS  OF  GETTING  PEOPLE  TALKING.  BUT  I  AM  NOT  ALL  TALK. 
I  AM  VOICE  AND  DATA,  BOTH  ON  THE  SAME  TEAM.  I  HAVE  THE  POWER  TO 
PUNCH  TIME  CLOCKS,  LISTEN  TO  EMAIL  AND  SCHEDULE  APPOINTMENTS. 

I  HAVE  THE  POWER  TO  SAVE  VALUABLE  MILEAGE  ON  OFFICE  MOVES  AND 
I.T.  STAFF  SHOES.  I  AM  A  SECURE,  PINT-SIZED  PRODUCTIVITY  EXPERT  THAT 
DEUVERS  SUPER-SIZED  ROI.  I  AM  MORE  THAN  A  CISCO  7960G  IP  PHONE. 


THIS  IS  THE  POWER  OF  THE  NETWORK.  OOW. 

ciseQ.eom/conv»rg«iie«now 


PATRICIA  KEEFE 


Shields  Up,  Linux 

Does  a  desperate  SCO  have  a  leg  to  stand  on?  Is  a  con¬ 
niving  Microsoft  really  behind  The  SCO  Group?  Is  Linux 
headed  for  a  deep  freeze? 

Those  were  among  the  questions  being  hurled  about 
last  week  as  angry  users  and  industry  observers  reacted 
to  the  latest  salvos  fired  against  operating  system  upstart  Linux. 

First,  B-grade  vendor  SCO  filed  a  $1  billion  lawsuit  against  IBM, 

charging  that  its  intellectual  property 
had  made  its  way  into  IBM's  Linux  dis¬ 
tribution.  Then  there  was  the  not-so- 


shocking  revelation  last  week  that  Mi¬ 
crosoft.  which  just  licensed  SCO's  Unix 
tedmolc^,  has  been  qtiietly  urging  its 
sales  staff  to  offer  huge  discounts  to 
users  in  order  to  undercut  Untix.  Also 
last  week.  SCO  suddenly  dropped  out  of 
the  Linux  market  and  threatened  users 
with  intellectual  property  violations. 

That  action  has  made  a  few  people  ner¬ 
vous.  and  ticked  off  many.  (Mailing 
threatening  letters  to  USB  CEOs  of  For¬ 
tune  2,000  companies  is  not  on  the  Harvard  Busi¬ 
ness  School's  list  of  top  10  ways  to  win  new  busi¬ 
ness  and  influence  the  installed  base.  It’s  a  bad 
move  in  any  economy,  much  less  this  one.) 

The  cynics  say  the  lawsuits  and  threats  are  a 
last-ditch  effort  by  a  has-been  company  pushing 
its  has-been  version  of  Unix.  TTie  conspiracy  the- 
orisu  sec  Microsoft *5  hand  behind  SCO's  actions. 
Sdil  other  observers  warn  against  a  rush  to  judg¬ 
ment.  dismissing  paranoia  about  Microsoft’s 
shadowy  role  and  preferring  to  hear  SCO  out  be¬ 
fore  making  up  their  minds. 

If  SCO  were  smart,  it  would  continue  to  sup¬ 
port  both  Unix  and  Linux.  It's  already  invested  in 
the  UnitedLinux  consortium  to  build  a  standard 
release  of  the  operating  system.  Momentum  is 
clearl>‘  behind  the  still-maturing  Linux,  which  is 
increasingly  being  seen  as  the  successor  to  its  OS 
papa.  Unix,  and  the  great  hope  of  the  anti-Micro¬ 
soft  crowd.  So  why  not  be  open  to  that? 

Instead.  SCO  is  cuttii^  off  its  nose  to  spite  its 
fece.  A  loss  or  slowdown  for  Linux  is  reaUy  a  win 
for  Windows  —  not  Unix.  That’s  certainly  the 
battlefield  as  Microsoft  sees  it,  and  it  has  the 
slush  fund,  er,  firepower,  to  mal»  that  perception 
reality.  And  there’s  no  end  of  online  posts  from 
users  swearing  they  will  never  buy  another  SCO 
product  [QuickLink  a3180]  and  feom  developers 
seeking  to  expel  the  company  from  the  open- 
source  community.  That’s  not  good  for  a  vendor 


hoping  to  maintain  relationships  ^ 
chough  perfectly  fine  for  business  ex¬ 
ecutives  hoping  to  unload  a  company, 
which  is  yet  another  theory  being 
bandied  about  (see  Frankly  Speaking, 
page  58). 

It's  all  bad  for  Linux  in  any  case, 
and  it’s  bad  for  those  who  want  tech- 
no](^  choices.  Ultimately,  it's  bad  for 
users,  especially  those  pioneers  who 
have  taken  the  Linux  plunge.  At  a 
minimum,  it  has  the  potential  to  take 
a  lot  of  wind  out  of  Linux’s  sails.  How 
IT  reacts  to  this  pincer  move  by  SCO 
and  Microsoft  should  carry  a  lot  of  weight.  In¬ 
deed.  if  SCO  plans  to  take  a  page  from  the  music 
industry  by  making  an  example  out  of  a  few  user 
companies,  it  bad  better  pick  its  targets  with  care. 

But  fear  not  Open-source  is  here  to  stay.  Too 
many  people  want  choices,  and  they  especially 
want  out  from  under  the  tyranny  of  the  Windows- 
only  boot.  And  the  very  fact  that  Microsoft  is 
openly  willing  to  buy  out  users  considering  Linux 
points  to  two  things;  the  strength  of  Linux's  at¬ 
traction.  and  the  real  threat  posed  to  Microsoft  by 
the  increasing  number  of  foreign  governments 
that  have  instructed  their  agencies  to  either  not 
buy  Windows  or  to  prove  that  a  cheaper  alterna¬ 
tive  doesn’t  exist  And  that’s  getting  to  be  a  tall 
order  as  Linux  tackles  platform  after  platform. 

The  real  page-turner  here  is  not  what  Microsoft 
will  do  (we  know  it  will  do  everything  it  can  to 
dominate  whatever  market  it’s  in),  or  who  pre¬ 
vails  in  the  SCO/IBM  lawsuit.  It's  what  the  Linux 
camp  will  da  Will  they  fold  up  their  tents  and 
go  home,  or  press  on,  adding  to  the  momentum 
behind  Linux  and  keeping  the  open-source  ban¬ 
ner  flying?  Stay  tuned.  This  can  only  get  more 
interesting.  I  * 
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More  cotmvite  ind  Mq  to  aidwBs  oi  pmtous  cohaiins  are 
onourWebsNe 


PIMM  FOX 

BI  Software 
Gets  Smart 

Business  intelligence  is  an 
oxymoron  at  some  companies.  But 
others  are  finally  getting  the  tools 
that  deliver  decision-critical  data  to  the 
right  people  in  the  right  way. 

Traditional  business  intelligence  (BI)  users  de¬ 
pend  on  relational  data  sources  or  applications  such 
as  ERP,  CRM  or  supply  chain  management  systems. 
However,  with  the  changes  afoot  in  reporting  and 
online  analytical  processing  (OLAP)  technology,  as 
well  as  trends  in  scorecards  and  dashboards,  useful 
BI  tools  can  reach  more  end  users,  which  should 
change  your  BI  operations  strategy. 

BI  vendors  such  as  SAS.  Business  Objects.  SAP 
and  Cognos  are  responding  with  suites  that  they 
claim  are  easier  to  deploy.  For  example,  roost  of 
these  suites  can  perform  multiple  fimctions  for  dif¬ 
ferent  applications  while  accessing  various  databas¬ 
es,  so  you  don’t  need  to  force-fh  the  links  between 
them.  Investments  in  extract,  transform  and  load 
technology  for  BI  support  are  paying  off,  too.  It’s  now 
possible  to  blend  real-cime  information  from  data 
warehouses  with  enterprise  applica¬ 
tions  like  ERP  and  CRM. 

Connections,  whether  via  a  rela¬ 
tional  database  management  system 
or  an  OLAP  engine,  are  routine  for 
these  new  types  of  BI  suites.  The 
reasons  are  clear.  Decision-makers 
need  to  do  ad  hoc  queries  on  rela¬ 
tional  and  OLAP  databases.  They 
also  need  to  perform  calculations 
and  create  metrics  to  be  displayed 
across  the  enterprise.  And  they 
won’t  jump  from  app  to  app  to  do  it. 

So  enterprise  portals  with  dash¬ 
boards  running  modeling  and  business-performance 
tools  are  also  part  of  new  BI  offerings. 

But  does  all  (hat  technology  make  BI  useful?  I 
think  sa  First,  it  helps  to  identify  and  track  cus¬ 
tomer  prontability  and  retention.  Second,  reduc¬ 
tions  in  operational  costs  by  rationalizing  suppliers 
are  more  easily  accomplished  with  BI.  Third,  com¬ 
panies  need  better  financial  transparency,  given  our 
current  atmosphere  of  shareholder  and  regulatory 
scrutiny.  BI  can  help  here. 

Finally,  senior  management  no  longer  lets  lines  of 
business  run  their  own  shows,  relying  only  on  quar¬ 
terly  reports.  Top  managers  arc  digging  deeper  into 
daily  operations.  They  need  access  to  information  to 
make  decisions  before  decisions  arc  made  for  them. 
This  will  push  companies  to  standardize  on  BI  sys¬ 
tems  that  offer  comprehensive  views  of  the  enter¬ 
prise  without  sacrificing  or  compromising  data 
sources,  reporting  structures  or  time  f^es. 

Smart  businesses  know  that  their  data  is  valuable. 
Smarter  ones  are  investing  in  the  new  tools  so  they 
can  better  make  informed  decisions  throughout 
their  organizations.  I 
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Squaring  Off  Over  Offshore  Outsourcing 


iinancai  code  is  tondM  oversea!  rv« 
top  10  banks  and  large  nvestmeri  houses,  and  I 
itfttw  that  much  of  Bwv  work  6  done  overseas 
Overseas  workBts  have  access  to  more  iinanaol 
nformabon  Ihwi  finanaal  comparees  Mil  adtni 
Brian  Barrette 

Boston 


I  FIND  IT  OUTRAGEOUS  that  your  April  21  pub¬ 
lication  devoted  Significant  copy  to  provi^ 
structioris.pointsofcontactar)dolov^testirno- 
nials  from  corporate  bean  counters  regarding  how 
corporations  may  best  proceed  with  the  perma-  i 
neni  destruction  of  American  IT  jobs  by  moving  ' 

them  to  places  like  India  and  the  Philippines 

Best  of  Both  Shores*].  R  isa  how-to  manu^. 

in  a  comparkon  ar^.  a  corporate  staffer  not¬ 
ed  In  an  offliand  way  that  they  laki  off  some  of 
their  best  fT  people  because  their  jobs  had  been 
rnoved  oftsfW  Ybu  casuaRy  note  how  McrosoR. 
a  company  with  over  S40  biion  doHvs  in  cash  re¬ 
serves,  is  moving  |obs  offshore  *10  cut  costs.’ 

This  while  the  H-%  law  sti  on  the  books  en¬ 
ables  huge  numbers  of  foreign  nationals  to  come 
to  this  country  to  compete  for  jobs  against  hun¬ 
dreds  of  thousanrk  of  unernployed  Arnerican  IT 
workers  on  their  own  SON. 

Offshore  outsourong  isn't  about  effictency.  R’s 
about  savage  greed.  Wil  our  government  make 
available  funds  to  retrain  taid-off  software  engi¬ 
neers  in  new  ocotoabons?  Please,  pray  tel.  what 
exactly  do  you  retrain  a  permanenOy  unemployed 
softwm  engineer  to  do?  Why  don't  you  write  a 
few  arbcies  about  that? 


of  change.  H  seems  to  me  that  certain  IT  profes¬ 
sions  cannot  be  rnoved  oft^tore  -  tnfrastoicture 
setup  requires  actual  preswice.  as  does  project 
managemenL  Programmers,  however,  need  to 
see  that  they  are  the  wMe-colar  equivalent  of 
factory  workers  ~  the  computer  doesn't  care 
about  the  location  of  the  person  punching  the 
keyboard.  Whie  my  sympathies  go  out  Id  those 
caught  in  this  difficuR  situatnn.  in  Ore  grand 
srOtenw  (rf  things,  there  is  lotto  that  can  be  done. 
BoGFataly 

Van  Nuy$,  Calif„  f^ee@mindsprwgMm 


vhat  has  tot  our  leadership  in  mvulactunng  inno¬ 
vation  slip  away  6  Ore  sanpte  iact  that  rnosf  of  it  is 
done  elsewhere.  We  camoi  pofisUy  remam  Ore 
leader  m  something  we  don't  put  hands  to  and  do 
oursetoes.  Andnote  also  notes  that  Oiere's  a  much 
taslerdeveioprnenlcyctoinlTthaninrnanutactur- 
ing.  But  that  taster  cy^  means  we  wG  Hely  lose 
our  (T  edge  taster,  too.  once  most  IT  work  IS  done 
off^rore. 

Shawn  Kely 

Sofor  Tbrbrnes  Inc^  San  I^ego, 
sdlkeifysdoa@yahoo.com 


COMFUTBtWORLDrvelconres  comments  kom 
itstBadets.  Letters  be  edoed  for  brevoy  and 
cianty.  They  should  be  addressed  to 
Letters.  ComputerworkL  PO  Box  9T71. 500  Old 
Connecticut  PaNh.  Framngham.  Mass  OTTDt 
Fax  (506)  8794643. 

E-mal;  teflers^computerworid-com-  Include  a 
phone  nunter  for  nrrnediale  verOicMioii. 


IN  HB  COUAM. 'lAagna  Cum  IJnenHiloyed.* 
Donald  Hnley  says.  IMren  I  changed  my  col¬ 
lege  from  mechanical  engmeenng  to  com¬ 
puter  science ...  Ore  saianes  of  the  two  protes- 
sions  were  comparabia.  and  fT  seemed  to  be 
thnving.‘Vtehischoiceofacareerbasedpri- 
nrarily  on  salary?  As  orre  who  makes  hiring  deci¬ 
sions.  I  want  appicants  wRh  a  passion  for  tech- 
oology,  irot  for  money.  The  H-1B  vsa  program  has 
oudived  Its  usriiNrress  and  shodd  be  ietbsoned 
Bui  H-16  is  mei^  Fmley's  scapegoat  fT  got  fat 
lazy  and  sloppy  dwiiHl  the  1990s  and  attracted 
those  looking  for  a  fast  buck.  L  for  one.  am  glad 
the  econornic  downturn  thinned  the  ranks  of 
ttmse  flockiirg  to  the  big  bucks  purportedly  earned 
in  IT  careers.  What  we're  seeing  now  is  d)e  pen¬ 
dulum  swinging  back  towtfd  equibrken.  R's  too 
bad  that  Rniey  and  others  Rke  him  are  in  its  path. 
6.(mM 

fT  (firector,  Chicaga£oryoh(S>aineritecfuicr 


Security  Ignored 

ONE  THNM not  considered  in  the  articto 
'There's  More  to  Consider  Than  Cheaper  La¬ 
bor*  is  secuRy.  As  an  fT  audSor.  I  would  be  mote 
concerned  about  back  doors  and  seosity  weak¬ 
nesses  in  a  project  programmed  by  an  outsouced 
staff  than  I  woiM  wdh  one  prograttvned  by  statt 
sli  happdy  employed  by  my  company. 


THIS£aMfTYISSUEttBlwBSiaeedin*Off- 
shoreCodingWorkRNsesSecurTtyCon' 
cerrts’ not  only  pertans  to  code  but  to  business 
infonnation  as  weA  As  LJS.  cornoanies  outsource 
applicBtion  support  to  offshore  cornpanies.  they 
areprovidngaccasstolheecorebusinesstitfor- 
maliontolheemployeesintheseotfshQreprovid- 
eis.  There  is  not  only  a  risk  of  sabotage,  but  also  a 
nsk  of  cotporale  espiortage. 

R  A  Murphy 
framtrtgham.  Moss. 


HOPERIUT.  Jim  Honerkairip.  CIO  at  Clopay 
Corp.,  has  had  his  compensation  package 
apprttonMely  reduced  rSutviving  (}flshore 
backs'].  His  lesportstoihty  has  been  reduced.  His 
headcounthasbeenrectoced-Juslashelsfutfi- 
ing  his  coiporate  lesponsiblify  to  the  bottom  line, 
one  could  reasonably  expect  corpoiate  offices  to 
yfiUtherresponsibNitytvreducinghiscotnpen- 
sabon.  O  better  sM.  perhaps  they  could  find  a 
suit^  replacement  for  him  at  a  reduced  cost 
fficfc  Church 
Maynard,  Masi. 


U.S.  Risks  Losing  IT  Edge 

STEVE  ANomou  is  quoted  in  the  arbcto ’The 
New  IT  Worker  Angry  and  ^oactive*  as  say¬ 
ing. 'fechnotof^  movalion  is  sM  largely  U.S.¬ 
centric.  ki  manutoctonng.  it'snot'  Thai's  true,  but 


|N*OffshoieCo(bng\M)ikRaee5SecunlyCon- 
I  cents.*  nobody  poimed  out  IhM  much  of  our 


Wetcome  to  the  Real  Worid 

SO  MARCUS  COURTNEY,  president  of  the 
Seatito-basedWadiingtonAKanceofTech- 
rtology  Worfm.  bernoans  the  current  trend  to 
take  fT  jobs  out  of  the  U.S.  pThe  New  IT  Worker 
Angry  and  Proactive']?  $0^.  I  had  to  tough.  Wel¬ 
come  to  the  real  world,  hk.  Courtney.  This  has 
been  happening  to  America's  bfue-coiar  workers 
lor  the  last  40  to  50  years. 
toyW.LMM 

(^nalfons  shift  supervisor,  Edison 
Mission  Optrotions  &  Mainunanct  Inc, 
Grant  Tbwn.  W.  Va. 
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REOAROMO  the  wel-done  report  *Expor1ing  IT 
Jobs.*  this  sRuallon  seems  to  be  an  example 
c4whaitAdamSrnilhcaledthe*'nvistiehand*~ 
cheaper  foreign  labor  replaces  expensne  iocN  ta¬ 
bor.  While  R  is  a  hard  pN  to  swulow.  ttvestened  rr 
workers  are  hardly  the  list  to  suffer  from  OVs  sort 


Securing  your  5,000-user  network  requires  a 


_■  Microvott  Windows  Server  2003.  Do  more  with  less. 


t/Bcrosoft 
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Wi  ndows  Server  2003 


Tech  Fondly. 


Tech  Friendly  because... 


I  itir  i- 


tiirttmup  f^nlrry 


Htgb- Sprat 
Orpurtmenud  Hnnlintt 


•CMnmon  User  Interfiue 


•Iniversal  Priol  Driver 


•Integrated  Wireless  Solutions 


•Cartridge-Free  Druni  Desip 


•Ver)  Low  Cost  of  Ownership 


Technology  so  advanced, 
it'll  make  you  smile. 

Tech  peqile  face  a  world  of  many 
demands  and  little  lime.  Our  all-digital 
line  (rf  printers,  copiers  and  MFP's  are 
hi^ly  reliable  and  ready  for  network 
use.  either  wired  or  through  our 
embedded  wireless  technology. 

Kyocera  MUa  uses  adtanced  lecbnolog) 
to  make  life  simple  and produciiie. 

Everything  we  do  is  aimed  at  making 
things  less  complex.  Examples?  A  single 
driver  qieraies  all  our  devices.  NetViewer™ 
software  administers  our  systems  across 
your  network  in  real  time.  The  list  is 
long.  And  it's  how  we've  made  so  manv 
friends  in  the  MIS/IT  department. 

Tech  friends  meet  at: 
vwvw.ky  oceramjta.com/us 

The  New  Value  Frontier 
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KYOCERA  MITA  AMERICA,  INC. 

02003  KYOCERA  MITA  AMERICA,  INC.  'PEOPLE  FRIENDLY'  AND  ALL  ELEMENTS  OF  THE  KYOCERA  MITA  LOGO  ARE  THE  TRADEMARKS  OF  KYOCERA  MITA. 
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EMERQINO  TECHNOLOeiES 

Ethernet’s  Power  Play 

Thanks  to  a  new  standard  for  delivering  in-line 
Power  Over  Ethernet  cabling  via  products  like 
this  Avaya  switch,  the  corporate  network  will 
soon  become  a  common  power  source  for  many 
types  of  network-attached  devices.  Paee  30 


QSA 

Avoiding  Data  Center  Blowups 

Neil  Rasmussen.  CTO  at  American 
Power  Conversion  Corp.,  says  that 
despite  technology  advances,  data 
centers  still  suffer  from  some  basic 
vulnerabilities.  Pape  32 


FUTURE  WATCH 

E-Commerce  on  the  Ry 

Mobile  commerce  has  been  slow  to  catch  on 
as  users  balk  at  shopping  with  cell  phones 
and  PDAs.  But  advances  in  handheld  de¬ 
vices.  wireless  networks  and  user  interfaces 
could  finally  make  it  a  reality,  Pa0«34 


The  Price 
E-MYMEKT 


Business-to-business 
e-papentsy^emscan 
slo  processing  costs, 
but  they  require  sub¬ 
stantial  integration  and 
busiies^lirocessctianges. 
BY  ROBERT  LSCHEIER 

IMAGINE  that  you  have  to  find  the 
ffaudulent  calls  in  a  100,000-page 
phone  bill.  Or  that  an  invoice  for 
employee  health  insurance  offers 
little  more  than  a  guess  as  to  who 
is  covered  in  a  given  month.  Or 
that  four  out  of  10  checks  you  re¬ 
ceive  require  human  assistance  to 
figure  out  what  the  customer  bought. 
That's  reality  for  many  business-to- 
business  transactions  today,  and  that's 
why  there's  so  much  interest  in  elec¬ 
tronic  invoice  presentment  and 
payment  (EIPP)  systems. 

EIPP  involves  automating 
everything  from  how  the  seller 
presents  an  invoice  to  how  a  customer 
pays  the  bill  The  most  obvious  savings 
come  in  staff,  paper  and  postage,  but 
vendors  say  that  as  much  as  85%  of  the 
benefits  result  from  eliminating  manu¬ 
al  work  such  as  negotiating  hilling  dis¬ 
putes  with  customers  and  cutting  re¬ 
fund  checks. 

Last  year.  Stamford.  Conn.-based 
Gartner  inc.  estimated  that  an  organi¬ 
zation  could  realize  a  return  on  an  in¬ 
vestment  in  a  system  chat  sends  busi¬ 
ness  invoices  over  the  Web  in  one  year 


if  just  2.3%  of  customers  opted  to  view 
and  pay  invoices  online.  The  average 
project  costs  between  $130,000  and 
$400,000.  and  savings  average  $5.7  mil¬ 
lion  annually,  or  $7.25  per  invoice,  ac¬ 
cording  to  Gartner's  research. 

Gartner  estimates  that  about  LS%  of 
the  invoices  sent  by  large  businesses 
result  in  a  dispute  that  costs  between 
$20  and  $40  per  invoice  to  resolve. 
With  EIPP.  customers  can  view  bill  de¬ 
tails,  submit  challenges  and  even  make 
partial  payments  online. 

Health  Alliance  Medical  Plans  Inc. 
expects  to  achies'e  a  return  on  its  in¬ 
vestment  in  an  EIPP  sy-stem  within  two 
and  a  half  years,  says  Lynn  Carroll,  di¬ 
rector  of  finance  at  the  Urbana.  Ilk- 
based  managed  health  care  provider. 
The  savings  will  come  from  reductions 
in  administrative  expenses  and  a  de¬ 
crease  in  benefits  paid  to  employees 
who  left  their  jobs  but  whose  employ¬ 
ers  didn't  notify  Health  Alliance  quick¬ 
ly  enough. 

To  achieve  such  benefits,  however. 
Health  Alliance  and  other  users 
must  make  their  way  through  a 
thicket  of  products  and  services 
in  a  still-emerging  market,  link 
their  EIPP  systems  to  back-end  sys¬ 
tems  and  —  most  difficult  of  all  — 
change  their  business  processes  to  ac¬ 
commodate  online  billing,  pay-ments 
and  problem-solving. 

Software  or  Service? 

Some  vendors,  such  as  Edocs  Inc.  in 
Natick.  Mass.,  and  Avolent  Inc.  in  San 
Francisco,  offer  packaged  EIPP  soft¬ 
ware.  Others,  such  as  Xign  Corp.  in 
Pleasanton.  CaliL.  and  Metavante 
Corp.  in  Milwaukee,  offer  EIPP  as  a 
hosted  service.  Some  vendors  focus  on 
billers;  others  fbctis  on  payers,  based 
on  the  assumption  that  large  cus¬ 
tomers  can  push  their  suppliers  to 
adopt  new  online  technologies. 

Many  billers  tend  to  opt  for  pack¬ 
aged  software,  whereas  payers  tend  to 
purchase  EIPP  as  a  service,  says  Brian 
Valente,  vice  president  of  marketing  at 
Avolent.  As  a  biller,  Carroll  decided 
against  buying  an  EIPP  service,  fearing 
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that  it  wouiii  be  too  hard  to  customize. 

If  customization  isn't  a  prime  re¬ 
quirement,  however,  an  EIPP  service 
can  be  much  faster  to  implement  than 
packaged  software,  says  Penny  Gille¬ 
spie,  an  analyst  at  Cambridge.  Mass.- 
based  Giga  Information  Group  Inc.  She 
advises  payers  to  investigate  whether 
the  per-transaction  pricing  of  an  EIPP 
service  might  become  more  ex¬ 
pensive  than  a  software  pur¬ 
chase  as  transaction  levels  rise. 

According  to  Xign  President 
and  CEO  Tom  Glassanos.  payers 
sign  up  for  a  certain  volume  of 
transactions  at  a  specified  per- 
transaction  price.  For  a  large 
customer  with  more  than 
100.000  transactions  a  year,  Xign 
charges  about  $U0  to  S2  per  in¬ 
voice  and  75  cents  to  $1  per  pay¬ 
ment  In  contrast,  he  says,  it 
usually  costs  S8  to  SIO  for  a  pay¬ 
er  to  process  an  invoice  and  issue  a 
paper  check.  Billers  use  the  service 
free  of  charge,  he  says,  since  the  payers 
receive  most  of  the  cost  benefits. 

One  large  customer.  Payless  Shoe- 
Source  Inc.,  chose  Xign's  service  over 
software-based  EIPP  because  it  will 
work  with  the  shoe  retailer’s  People- 
Soft  ERP  system  and  be  easy  to  link 
with  other  Web-based  payment  sys¬ 
tems.  It  will  also  be  easy  to  implement 
with  limited  IT  resources,  says  Tim 
Devine,  director  of  purchasing  at  the 
Topeka.  Kan.-based  company. 

Payless  plans  to  use  Xign  to  distrib¬ 
ute  invoices  to  about  45,000  vendors, 
he  says.  Devine  expects  a  payback 
within  two  years  from  cutting  adminis¬ 
trative  costs  and  qualifying  for  early 
payment  discounts  with  suppliers. 


After  deciding  whether  to  purchase 
EIPP  as  software  or  as  a  service,  cus¬ 
tomers  must  choose  how  to  link  the 
EIPP  system  to  their  existii^  applica¬ 
tions  and  data  required  for  automated 
bill  payment  and  dispute  resolution. 
This  includes  records  of  past  bills  from 
the  billing  system  and  past  payments 
from  the  accounts  receivable  system, 
as  well  as  product  return  or  credit  data 
from  an  inventory  control  system. 

Customers  need  access  to  corporate 
systems  so  they  can.  for  example,  tell  a 
supplier  that  they  are  paying  only  part 
of  a  bill  because  they  are  returning 
damaged  goods  or  that  they  are  paying 
lower  health  insurance  premiums  be¬ 
cause  some  employees  have  left  their 
companies. 

Vendors  lake  different  approaches  to 
this  data  integration  problem.  For  ex¬ 
ample.  Edocs  maps  diata  from  appUca- 
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tions  that  produce  reports  such  as  an 
analysis  of  monthly  sales  or  a  list  of 
overdue  accounts.  Avolent,  in  contrast, 
collects  that  information  in  a  database, 
from  which  it  can  extract  data  to  pro¬ 
duce  different  kinds  of  bills  for  different 
customers  or  allow  customers  with 
billing  questions  to  drill  down  into  data 
Highmark  Inc.,  a  Pittsburgh-based 
health  insurer,  tried  mapping 
data  from  reports  into  an  XML- 
formatted  data  stream  that  fed 
into  its  initial  implementation 
of  Avolent's  BUlCast  software, 
But  that  required  too  much 
work  for  the  staff  supporting 
those  applications,  says  A] 
Dodson,  manager  of  electronic 
bill  presentment  and  payment. 
In  order  to  map  the  data  from 
reports  the  application  had  al¬ 
ready  produced,  he  says,  “we 
needed  to  know  exactly  where 
the  data  is  on  the  report.’*  That  meant 
understanding  details  such  as  how 
many  spaces  wide  each  data  element 
was.  The  support  staff’s  reply: "  *We 
don't  have  time  to  tell  you . . .  because 
there  could  be  a  million  varia¬ 
tions,'  ”  says  Dodson. 

This  stunmer,  Highmark 
plans  to  take  a  different  ap¬ 
proach:  modifying  its  legacy 
billing  systems  so  they  produce 
an  XML  data  stream  that's  ex¬ 
ported  to  Avolent’s  newer  Biz- 
Cast  software  as  pan  of  the  bill- 
generation  process. 

That  way.  Highmark  gets  the 
raw  data  from  the  billii^  appli¬ 
cation  without  needing  to  know 
bow  chat  data  might  be  presented  on 
various  repons  or  bills,  says  Dodson. 
Havii^  the  data  in  one  database  also 
makes  it  easier  to  produce  a  consoli¬ 
dated  bill  for  any  Highmark  subsidiary. 

Other  vendors  argue  that  embedding 
business  rules  is  crucial  to  automating 
complex  billing  relationships.  For  ex¬ 
ample,  different  individuals  within  a 
customer  organization  have  different 
levels  of  spending  authority,  says 


Noam  Potter.  eCare  product  manager 
at  Amdocs  Ltd.,  a  provider  of  billing 
and  CRM  software  in  Chesterfield,  Ma 
More-profitable  customers  may  also 
be  given  more  lenient  terms  in  dis¬ 
putes.  For  example,  they  may  receive 
an  automatic  credit  for  any  dispute  un¬ 
der  $100,  he  says.  Reflecting  these  dif¬ 
ferences  requires  flexible  business  log¬ 
ic,  a  workflow  engine  and  an  easy-to- 
manage  user  interface,  says  Potter. 

“The  biggest  challenge  in  electronic 
bill  presentment  and  payment  is  inte¬ 
gration.’’  says  Giga's  Gillespie,  refer¬ 
ring  to  the  need  to  have  EIPP  systems 
work  with  back-office  applications 
such  as  ERP  and  accounts  payable.  But 
most  vendors  and  customers  say  busi¬ 
ness  process  issues  are  bigger  hurdles. 

Although  Payless  had  a  “minor  chal¬ 
lenge"  linking  the  Xign  service  to  its 
PeopleSoft  system,  Devine  says  he  has 
had  more  trouble  changing  workflows, 
such  as  identifying  a  single  contact 
person  in  each  department  who  should 
receive  electronic  invoices  and  route 
them  to  the  proper  persoa 
Carroll  says  his  biggest  problem  was 
“understanding  who  in  the  or¬ 
ganization  . . .  really  owns  some 
of  these  transactions.*  For  ex¬ 
ample.  he  didn’t  know  whether 
the  operations  staff  or  the 
bUling/financial  staff  was  re¬ 
sponsible  for  collecting  and 
managii^  bills.  That’s  impor¬ 
tant  because  Health  Alliance 
needs  to  provide  a  single  con¬ 
tact  for  employers  that  want  to 
make  changes  such  as  dropping 
workers  from  their  health  plans. 
It's  fust  as  well  that  it  takes  time  to 
deploy  EIPP  systems,  says  Valente. 
“People  can  only  accept  a  certain 
amount  of  changes  before  it  over¬ 
whelms  them."  he  says.  His  advice: 
“Understand  your  customers,  and  try 
to  deliver  value  in  bite-size  pieces."  I 

Scheier  is  a  fr-eelance  writer  in  Boylston, 
Mass.  He  can  be  reached  or  rscheiertg) 
charterjKt. 


Where  Customers  Expect  Savings  From  EIPP 
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It’s  time  the  ultimate  64-bit  server 

and  the  ultimate  32-bit  server 

were  the  same  server. 

AMD 


Introducing  the  AMD  Opteron”  processor,  64-bit  computing  for  today’s  32*bit  world. 

It’s  the  only  processor  that  is  designed  to  run  your  32*  and  64-bit  applications  simultaneously  and  without  compromise. 
AMD  Opteron  runs  on  AMD64-a  breakthrough  architecture  that  enables  64-btt  technology  on  the  x86  platform- 
creating  a  new  class  of  computing  so  you  can  migrate  to  64-bit  technology  on  your  own  terms. 


The  world’s  highest  performing  2P  and  4P  servers  are  now  powered 
by  AMD  Opteron  processors.  Receive  the  performance  and  security  benefits  of 
64-bit  computing,  while  getting  the  best  32-bit  performance  available  anywhere. 


AMD^^ 

Opteron- 


Leverage  your  existing  investments  whiie  preparing  for  the  future.  One  architecture 
across  one  einterprise  means  you  won’t  have  to  rip  and  replace  your  entire  infrastructure  when  you  transition 
to  64-bit  computing.  It’s  just  another  way  AMD  designs  and  builds  processors  with  you  In  mind.  For  a  closer 
look  at  ii>e  financial  and  performance  advantages  of  the  AMD  Opteron  processor,  visit  vyww.amd.com/opteron 
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FUjiv  Misery  has  spent  nearly  a  decade  working  in  enter¬ 
prise  IT  architecture.  His  expertise  entails  innovative 
enterprise  information  technology  architectures  using 
the  latest  advances  in  technology,  data  warehousing, 
data  mining  and  lifecycle  management  of  integrated 
produa  development  from  seed  to  market 
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A  few  minutes  with  Mistry,  Oireefor,  Data  Warehous/ng 
&  Busing  Intelligence  Enterphse  Collaboration. 
Americas.  Avanade  Inc. 


Enterprise  Business  Intelligence 


>  What  are  the  business  trends  driving  enter¬ 
prise  Business  Intelligence? 

More  and  more,  business  professionals  require  access  to 
real-time  business  information  that  flows  ^ely  throughout 
the  enterprise.The  knowledge  worker  is  no  longer  a 
theory;  she  is  running  your  mortgage  refinance  process  as 
you  talk  to  her.  Telemedicine  is  no  longer  an  exclusive 
realm;  it  can  run  life  support  from  anymore  globally  and 
deliver  decisions  and  metrics  in  near  real  time. 

These  are  the  business  demands  that  have  given  rise  to 
such  popular  Bl  applications  as  CPM  (Corporate  Perfor¬ 
mance  Management),  CRM  (Customer  Rehtionship  Manage¬ 
ment),  and  BAM  (Business  Activity  Monitoring). 

To  address  CPM,  BAM  and  CRM,  a  thoroughly  inte¬ 
grated  application  architecture  envelope  must  be  designed 
in  a  manner  that  allows  access  to  the  full  range  of  real  time 
(or  operational),  tactical  and  strategic  reports  in  a  flexible 
manner.  Applications  that  were  previously  unthinkable 
must  become  reality  to  support  scenarios  like  CRM 
analytics,  CPM  decision  support  and  BAM-related  opera¬ 
tional  actionability. 

>  What  benefits  can  companies  expect 
to  gain? 

There  are  a  number  of  vital  benefits  to  applying  Bt  within  a 
company,  such  as  the  following; 

Better  decision-making.  By  accessing  necessary  infor¬ 
mation  faster  and  drawing  on  rich  analytical  tools  to  parse 
the  data  for  vital  new  insights  into  issues  such  as  customer 
buying  habits,  companies  can  speed  their  decision  pro¬ 
cesses  significantly,  and  boost  ^eir  profits  by  doing  so. 

Competitive  advantage.  Faster  decision-making  allows 
companies  to  deploy  new  innovations  filter,  enabling  them 
to  get  ahead  of  the  competition.  Greater  agility  means 
being  able  to  maintain  this  lead. 

Customer  satisfaction.  Customers  are  always  more  sat¬ 
isfied  when  their  needs  are  filled  quickly.  This  happens 
when  execution  of  internal  processes  is  bster.  more  effi¬ 
cient  and  accurate,  and  when  fulfillment  of  pn^uct  re¬ 
quests  and  service  requests  is  done  with  a  greater  speed, 
accuracy  and  finesse. 

Single  version  of  the  truth.  While  most  companies  talk 
of  getting  to  a  single  version  of  the  truth,  the  fact  is  there 
are  at  least  three  different  ways  of  perceiving  the  truth: 


strate^cally,  tactically  and  operationally.  A  reporting 
scenario  that  forecasts  a  viable  strategic  direction,  creates 
analytic  drillable  reports  and  reveals  defects  in  real  time 
would  support  a  single  version  of  the  truth. 

>  What  are  the  main  inhibitors  to  success? 

The  main  barrier  to  mainstream  acceptance  of  81  has  been 
the  fact  that  it  was  previously  deemed  to  be  complex  to 
use,  requiring  specialized  skills  to  read  a  report  ai^  figure 
out  trends.  Moreover,  the  time  gap  resulting  from  process¬ 
ing  delays  could  lead  to  stale  data  in  reports,  thus  keeping 
Bl  out  of  the  acceptable  norm  in  corporate  decision  making. 
The  advances  in  Vifintel/SQL  Server/Analysis  Services  drive 
such  inefficiencies  out  and  create  a  more  realistic  solution 
that  brings  Bl  to  the  masses  and  lets  the  single  version  of 
the  truth  be  within  their  grasp. 

There's  also  a  false  perception  that  Bl  is  slow,  ironically 
driven  by  delays  in  IT  funding.  In  spite  of  the  faa  that  a  Bl 
investment  can  lead  to  revenue  growth,  difficult  economic 
tin>es  have  driven  fiscal  stringency  within  the  technology 
department,  and  Bl  implementations  are  no  exception. 

>  How  can  Packaged  Solutions  provide  bene¬ 
fit  for  Bl? 

Packaged  solutions  invariably  need  some  customization  spe¬ 
cific  to  the  customer  needs.  However,  even  taking  this  Into 
consideration,  the  speed  of  implementation  is  vastly 
enhanced  compared  with  a  custom  built  solution.'Riis 
allows  customers  to  address  performance,  scalability,  inte¬ 
gration  and  cost  Issues  rapidly  and  achieve  very  go(^  Bl 
reporting  results. 

Technologies  like  the  Unisys  ES  7000  servers  address 
scenarios  tiut  are  not  possible  on  scaled-out  commodity- 
driven  hardware  platforms.  Specifically,  in  bringing  high  per¬ 
formance  to  bear  on  reducing  batch  cycle  time,  high  con¬ 
currency  loads  and  large  data  volume  throughput  across 
many  vertical  industries,  this  platform  has  proven  to  be  very 
robust  and  cost  efficient. 

For  more  information,  please  call  80M74-8647  x385 
or  visit  www.unlsys.connfbi 
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Ethernet’s 
Power  Play 

Outlook:  The  802.3af  Power  Over  Ethernet 
standard  will  soon  be  a  checklist  feature 
on  every  new  LAN  switch  and  will  power 
everything  from  IP  phones  to  wireless 
access  points.  By  Robert  L  Mitchell 


The  idea  behind 
the  IEEE's  Power 
Over  Ethernet  (POE) 
standard,  which  de¬ 
livers  in-line  power  to 
networked  devices  over  un¬ 
shielded  twisted-pair  cabling, 
isn’t  i>ew. 

IP  telephony  system  ven¬ 
dors  stole  a  page  from  the  pri¬ 
vate  branch  exchange  vendors' 

playbook  when  _ 

they  developed 
POE  technologies 
several  years  ago  in 
order  to  provide  a 
competitive,  cen- 
tralized  power  source  for  IP 
telephones.  In-line  power  gave 
users  more  flexibility  in  plac¬ 
ing  IP  phones  and  made  the 
task  of  providing  backup  pow¬ 
er  caskrisee  “Avoiding  Data 
Center  Blowups."  page  32). 

But  these  proprietary  systems 
typically  locked  users  to  one 
vendor's  equipment. 

The  draft  POE  standard 
from  the  Institute  of  Electrical 
and  Electronics  Engineers 
Inc.'s  802Jaf  task  force  should 
not  only  bring  much-needed 
interoperability  but  alsodeliv- 
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er  in-line  power  to  a  wide 
range  of  devices,  from  wire¬ 
less  LAN  access  points  to  IP 
security  cameras.  “POE  is  go- 
ir^  to  be  one  of  those  things 
where  people  won't  even  re¬ 
member  when  you  couldn't 
get  power  from  an  Ethernet 
jack,"  predicts  Steven  Carlson, 
president  of  Portland.  Ore.- 
based  High  Speed  Design  Inc. 

- and  chairman  of 

the  IEEE  802.3af 
task  force. 

It's  also  the  first 
international  pow- 
er-delivery  stan¬ 
dard.  “With  802.3af.  the  RI45 
lack  becomes  the  only  power 
outlet  standard  that's  support¬ 
ed  globally."  says  David  Pass- 
more.  an  analyst  at  Midvale. 
Utah-based  Burton  Group. 
While  that’s  not  important  for 
access  points  and  IP  phones, 
business  travelers  may  one 
day  be  able  to  trickle-chaige 
handheld  and  notebook  com¬ 
puters.  or  even  run  them  with¬ 
out  lugging  power  converters 
and  power  supply  bricks. 

The  IEEE's  802.3af  specifica¬ 
tion  calls  for  power  source 


equipment  (PSE).  which  oper¬ 
ates  at  48  volts  of  direct  cur¬ 
rent.  to  guarantee  12.95  watts  of 
power  over  unshielded  twist¬ 
ed-pair  cable  to  data  terminal 
equipment  (DTE)  100  meters 
away  —  the  maximum  distance 
supported  by  Ethernet.  That’s 
enough  power  to  support  IP 
phones.  WLAN  access  points 
and  many  other  DTE  devices 
(see  chart  below).  Two  PSE 


What  it  Tidies 


types  are  supported:  Ethernet 
switches  equipped  with  a  pow¬ 
er  supply  module,  called  end- 
span  devices,  and  a  special 
patch  panel,  called  a  midspan 
device,  that  sits  between  a 
legacy  switch  and  powered 
equipment,  iniecting  power  to 
each  connection. 

Power  travels  over  two  pairs 
that  are  unused  in  10/100  Ether¬ 
net  but  do  carry  data  in  Gigabit 
Ethernet  LANs.  End-span  PSEs 
will  work  over  Gigabit  Ether¬ 
net,  but  midspan  devices  will 
not.  says  Amir  Lehr,  a  member 
of  the  IEEE  802.3  standards 
committee  and  vice  president 
of  business  development  at 
PowerDsine  Ltd.,  an  Israeli 
company  that  supplies  midspan 
devices  and  components. 

To  prevent  damage  to  non- 
compliant  network  devices, 
the  PSE  requests  a  special 
electronic  “signature”  from 
the  end  device  before  supply¬ 
ing  power.  It  also  stops  power 
flow  within  10  milliseconds  af¬ 
ter  a  device  is  disconnected 
from  the  network,  so  a  user 
swapping  out  devices  on  a 
port  can’t  accidentally  damage 
the  second  end  device. 

The  cost  to  support  802.3af 
in  end  devices  is  negligible. 
Lehr  says,  and  many  vendors 
offer  devices  they  claim  are 
compliant.  Analysts  say  the 
specification  adds  20%  or 
more  to  the  cost  of  an  Ether¬ 
net  switch,  although  Passmore 
expects  prices  to  drop  as  vol¬ 
umes  increase.  But  even  pay¬ 
ing  the  premium  may  be  cost- 
effective.  Carlson  says,  be- 
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Ethemefs 
Power  Play 

Outlook:  The 802.3af  Power  Over  Ethernet 
standard  will  soon  be  a  checklist  feature 
on  every  new  LAN  switch  and  will  power 
everything  from  IP  phones  to  wireless 
access  points.  By  Robert  L  Mitchell 


The  idea  behind 
the  IEEE’s  Power 
Over  Ethernet  (POE) 
standard,  which  de¬ 
livers  in-line  power  to 
networked  devices  over  un¬ 
shielded  twisted-pair  cabling, 
isn't  new. 

IP  telephony  system  ven¬ 
dors  stole  a  page  from  the  pri¬ 
vate  branch  eschai^  vendors’ 

playbook  when  _ 

they  developed  nimifm 

POE  technologies  LMUlQllv^r 

several  years  ^  in  TTMlini  AfifF^ 
order  to  provide  a  ^  LWBwW^Kw 
competitive,  cen¬ 


tralized  power  source  for  IP 
telephones.  In-line  power  gave 
users  more  flexibili^  in  plac¬ 
ing  IP  phones  and  made  the 
task  of  providii^  backup  pow¬ 
er  ea^er  (see  “Avoiding  Data 
Center  Btowups,"  page  32). 

But  these  proprietary  systems 
typically  locked  users  to  one 
vendor’s  equipment 
The  draft  POE  standard 
from  the  Institute  of  Electrical 
and  Electronics  Engineers 
Inc.’s  8023af  task  force  should 
not  only  bring  much-needed 
inten^rability  but  also  deliv¬ 


er  in-line  power  to  a  wide 
range  of  devices,  from  wire¬ 
less  LAN  access  points  to  IP 
security  cameras.  “POE  is  go¬ 
ing  to  be  one  of  those  things 
where  people  won’t  even  re¬ 
member  when  you  couldn’t 
get  power  from  an  Ethernet 
lack,”  predicts  Steven  Carison. 
presidem  of  Portland,  Ore.- 
based  High  Speed  Design  Inc. 

and  diairman  of 
the  IEEE  802 Jaf 
taskforce. 

It’s  also  the  first 
international  pow¬ 
er-delivery  stan¬ 


dard.  ‘^ith  802 JaL  the  R]4S 
lack  becomes  the  only  power 
outlet  standard  that’s  support¬ 
ed  ^obally,”  says  David  Pass- 
more,  an  analyst  at  Midvale, 
Utah-lmed  Burton  Group. 
While  that’s  not  important  for 
access  points  and  IP  phones, 
business  travelers  may  one 
day  be  able  to  trickle-charge 
handheld  and  notebook  com¬ 
puters,  or  even  run  them  with¬ 
out  lugging  power  converters 
and  power  sui^ly  bricks. 

The  lEEFs  8o£3af  spedHca- 
don  calls  for  power  source 


equipment  (PSE),  which  oper¬ 
ates  at  48  volts  of  direct  cur¬ 
rent,  to  guarantee  12.95  watts  of 
power  over  unshielded  twist¬ 
ed-pair  cable  to  data  terminal 
equipment  (DTE)  100  meters 
away  —  die  maximum  distance 
supported  by  Ethernet  That’s 
enough  power  to  support  IP 
phones,  WLAN  access  points 
and  many  other  DTE  devices 
(see  chart  below).  Two  PSE 


types  are  supported:  Ethernet 
switches  equif^ied  with  a  pow¬ 
er  supply  module,  called  end- 
span  devices,  and  a  ^>ecial 
patch  panel,  called  a  midspan 
device,  that  sits  between  a 
legacy  switch  and  powered 
equipment  iniecting  power  to 
each  connection. 

Power  travels  owr  two  pairs 
that  are  unused  in  KVIOO  Ether¬ 
net  but  do  carry  data  in  Gigabit 
Ethernet  LANs.  End-span  PSEs 
will  woik  over  Gigabit  Ether¬ 
net  but  midspan  devices  will 
not  says  Amir  Lehr,  a  member 
of  the  IEEE  802 J  standards 
committee  and  vice  president 
of  business  development  at 
PowerDsine  Ltd.,  an  Israeli 
conqiany  that  supplies  midspan 
devices  and  components. 

To  prevent  damage  to  non- 
conqiliant  network  devices, 
the  PSE  requests  a  special 
electronic  “signature”  from 
the  end  device  before  supply¬ 
ing  power.  It  also  stops  power 
flow  within  10  miUiseconds  af¬ 
ter  a  devuK  is  disconnected 
from  the  network,  so  a  user 
swapping  out  devices  on  a 
port  can’t  acxidentally  damage 
the  second  end  device. 

The  cost  to  support  802 Jaf 
in  end  devices  is  negligible. 
Lehr  says,  and  many  vendors 
offer  devices  they  claim  are 
compliant  Analysts  say  the 
spe^cation  adds  20%  or 
more  to  the  cost  of  an  Ether¬ 
net  switdi.  althou^  Passmore 
expects  prices  to  drop  as  vol¬ 
umes  increase.  But  even  pay¬ 
ing  the  premium  may  be  cost- 
effective,  Carison  says,  be- 
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I  PRODUCTS 


Vendors  Get  Jump  on  POE  Standard 


THE  DRAH  STATUS  of  tfMPOespecm* 
catton  hasn't  stapfwd  vandan  from  trot- 
ting  out  an  array  of  aafly  davioaa.  Tha 
spadficattsn  aupperta  the  Simpla  Nat* 
warfc  Managatnanl  Protocol,  and  vandora 
of  powor  supply  aqulianont  dWaranliM 
prooucn  ay  onannp  sopMsocaiao  nan* 
apamant  opttona  and  dalvortag  dMarant 
(avals  of  poarar. 

For  axaniplo.  SCom's  S2,49S  Supar- 
Stack  3  Swdteh  4400  P«VR  provfdas  150 
watts  of  powar  acnaa  24  porta,  whla 
Avaya  lnc.'s  $4,2«5  P3S3T*PWR  POE 
awM  dsivors  a  total  of  200  watts. 
Thoaa  avorapa  out  to  6  and  8  walls  par 
port  raapactivaly.  By  aaaumlng  that 
youl  na^  lasa  than  tha  fnl  12.85  watts 


^warflalna'sSOOOtifiainddipanilivIrsi 

par  port  vondors  can  offer  lowar  prkas. 
But  what  if  you  run  out  of  iuiea? 

WMto  tha  B02.3of  standard  daivsrs 
power  saquaottaly  by  port  numhar  unti 
M  runs  out  of  power,  Avaya  lets  you  rapri* 
orttba  the  porta,  and  SCm  alao  lots  you 
Imit  powor  on  a  porpoit  baato.  If  you  do 


a's  PSSST-PWR  POE  switch 


max  Old,  however,  Avaya  lots  you  boost 
power  by  addtop  an  axlamat  power 
modida.  wharaaa  SCoin  daaa  not  Nor* 
tel  Natworhs  Ltd.  and  Foundry  Nat- 
worts  bic.  have  also  imroducad  com* 
pbaid  swttchaa,  Oaco  pfana  to  an* 
nounca  a  dauphtarcard  tor  its  6600  aa- 
riaa  aoddar  swHchas  attar  tha  stan- 
dwdfsratHlad. 

Savaral  vendors  offer  nddapan 
apuipwant  tor  about  hdf  tha  coat  of  an 
and  span  awtteh.  ftowarOiina's  6000 
sartoa  nddspon  products,  tor  axampla. 
range  from  S96  tor  a  ttnpla  port  modal 
toS1.189tora24*por(dav(ca. 

As  tor  poworad  davlcaa.  mafor  van- 
dors  of  IP  totophonas  and  WlAN  ac* 
case  potato  ahhar  claim  to  be  shippino 
complant  products  now  or  have  an* 
nouncod  plans  to  do  so  soon.  One  of 
mors  awarasunp  ano  oavicoa  » 
SCom'a  NJSOO  (S2S).  a  wsl  mounted 
Etoamat  awilch  that  runs  off  POE  Mid 
than  paoaos  powar  through  to  one  of 
the  uidfs  tour  ports. 
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SCom'sw  _ 

twhehad  Ethamst  hub 


cause  rr  doesn't  need  to  run  a 
separate  power  cable,  and  Eth¬ 
ernet  cabling  installations 
don't  typically  require  the  ser¬ 
vices  of  a  licensed  electrician. 
"It's  very  easy  to  put  in  and 
very  low-cost."  he  says. 

Buying  Tme 

"Most  larger  enterprises  will 
insist  on  POE  in  their  new 
Ethernet  switches  within  two 
to  three  years,"  Passmore  pre¬ 
dicts.  But  should  you  buy  now? 
Current  devices  are  based  on 
a  draft  specificatioii.  Most  ven¬ 
dors  expea  full  radHcation 
in  July  and  say  any  ftirtber 
changes  will  be  minor.  But 
Chris  CuIUn,  produa  marketing 
manager  at  Cisco  Systems  Inc., 
says  die  standard  is  still  prelim¬ 
inary.  He  doesn't  foresee  ratifi¬ 
cation  until  "later  this  year." 

Cisco  wasn't  in  attendance 
when  six  members  of  the  POE 
Consortium  performed  inter- 
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compatibAly  comes  at  a  pnee; 
QuUdJakSISn 

RaaoMCH:  1b  find  more  infonnation  atnut 
8023d  tadmology  ard  gniducts.  go  tu' 
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operability  tests  last  month. 
CuUin  says  interoper^Uity 
is  "not  really  that  complicat¬ 
ed."  But  Doug  Hyde,  produa 
marfcaing  manager  at  3Com 
Corpn  expects  problems  right 
out  of  the  gate.  "Many  vendors 
will  read  the  specification  dif¬ 
ferently;  they  always  da  And 
you’ll  get  incompatibilities 
along  the  way."  be  says. 

An  industry  group  formed  to 
perform  interoperability  test¬ 
ing  on  early  POE  devices,  the 
POE  Consortium  has  no  plans 
for  independent  certiftcatioo 
testing  along  the  lines  of  what 
the  Wi-Fi  Alliance  is  doing  for 
wireless  Ethernet.  And  the 
Wi-Ft  Alliance  doesn't  plan  to 
add  POE  testing  to  Us  certifi¬ 
cation  for  WLAN  access 
points,  says  ^xdeesman  Brian 
Grimm.  Nonetheless,  Pass- 
more  says  it’s  probably  OK  to 
buy  early  products,  as  long  as 
vendors  guarantee  that  their 
produas  will  be  upgrad^le  to 
the  final  standard. 

Gartner  Inc  analyst  Rachna 
Ahlawat  says  the  stakes  are  too 
hi^  for  vendors  not  to  address 
interoperability  issues.  Within 
a  year  of  reification,  she  says, 
POE  will  "Just  become  anoth¬ 
er  standard  feature."  I 


I  INNOVATIONS 


You're  Plugging  in  What? 


VMU  WLAN  access  potato 
and  P  phones  wi  be  Itie 
biggest  beneAciartes  of  POE 
inibaly.  in  tvne  a  wide  variety  of 
povrered  devices  are  Biely  to 
be  Atached  to  corporate  LANs 
astheLANbeconiesaunwer* 
sal  data  and  power  distabulion 
architecture,  says  Steven  Carl¬ 
son,  chatanan  of  the  CS 
B023af  task  force. 

Perhaps  the  most  offbeat 
powered  device  in  dreui^ 
today  is  PowerOstae's  novelty 
adaptation  of  a  Norelco  shaver. 
But  users  are  also  Kkeiy  lo  see 
the  emergence  of  more  practi* 
cal  powered  devices,  from  P 
security  cameras  like  Sony 


Cofp.'$  SNC'VLION  to  bund¬ 
ing  automation  and  control 
systems. 

‘>bu  hare  a  vast  number 
of  propnetary  systems  in  a 
bujUtig- lighting  control 
seajrjty.healing.keypads.se- 
ofity  CMneias  *  and  al  that 
has  Its  own  cabfeng  sbuctore.* 
Carlson  says.  He  expects  al  of 
them  to  be  powered  through 
Dhemet  in  the  hiture  because 
malenal  costs  are  kwrer.  cable 
nstalation  costs  are  lower  be¬ 
cause  a  licensed  electnaan  6n1 
needed,  and  TCP  and  Ethernet 
establish  a  common  rvetwork 
archiedure  for  these  systems. 

Amir  Lfiiv,  vice  presM  of 
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rauvrMnv,WMaiaiipiMuuiniwnmre,MUvreeuiiVMfMOr 
upy  wH  opMi  the  mlwBrfc  to  a  wide  rMpi  ef  pewMvd  devtMe. 


Sony's 
sac-viiON 
PiOGurty 
CMBMireoivat 
poorer  from  and  toods  tddM 
stroan  hook  ovor  ■  ita^ 


busaessderelopmenlaiPiwer- 
Osine.  says  PSB  could  be  used 
to  tricMe-diarge  handheld  and 
rratebookcornputerslrnanuiac- 
turersdesignlhemloacoepiin- 
ttaepower.^iemelmayerenbj- 
aly  pravide  oper^ng  power  tor 
such  dewces  as  wel.  he  says,  ah 
though  most  notebooks  today 
consume  more  than  the  12.95 
watts  POE  can  deliver. 

"Certaifdy  there  is  a  case  to 
be  made  to  efeminate  a  power 
connection  lor  a  desktop  or 
LAN-connected  notetiook,’ 
says  Brian  Zucker.  technology 
evangelist  at  Del  Computer 
Corp.  But  Zucker  adds  dial  he's 
not  aware  of  anyone  pursung 
that  yet. 
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Avoidins 
Data  Cenfer 
Blowups 

The  CTO  of  American  Power  Conversion  discusses  power 
problems  in  the  data  center.  By  Robert  L  Mitchdl 


NQL  RASMUSSEN  has  worked  for  more 
than  20  years  at  American  Power  Con¬ 
version  Corp.  devouring  power  protec¬ 
tion  and  management  systems.  But 
despite  technology  advances,  data  centers  sdU  suffer 
from  some  basic  vulnertdrilities.  He  spofce  with  Com- 
puterworld's  Robert  L  Mitchell  about  common  weak¬ 
nesses  and  bow  to  protect  against  them. 

How  it  peww  mafiaosment  changing  in  llw  data  center? 

In  the  way  data  centers  and  network  rooms  are  built, 
there's  more  change  now  than  there’s  been  in  the  last 
20  years.  It  involves  developing  systems  that  are  much 
more  modular  and  prefabricated. 

There  are  massive  shifts  in  the  whole  way  these 
systems  are  approached.  And  they  will  look  a  whole 
lot  different  Raised  floors  are  going  to  go  away  in 
the  data  center.  And  it's  going  to  be  a  lot  easier  for 
people  on  the  IT  side  to  design  and  maintain  data 
center  and  network  room  facilities. 

¥Riil  inpact  art  enlarging  tachnologias  having  on  data  ean- 
Mrpovrar  raqubanianlt?  Blade  servers  are  changing  all 
the  rules  about  how  power  and  cooling  have  to  be 
done,  because  the  power  density  is  so  huge.  The 
avenge  power  in  a  rack  in  a  data  center  is  about  900 
watts.  IBM  already  has  a  blade  server  [the  BladeCen- 
ter  HS201  that  you  can  stack  and  get  17  kilowatts.  No 
data  center  on  earth  can  cool  that. 

YouH  see  it  advertised  with  five  units  in  a  rack. 

But  nobody  can  install  it  that  way.  They  have  to  put 
them  each  in  individual  racks.  If  you  put  a  bunch  of 
these  in  one  rack,  they’ll  melt.  The  idea  that  you’re 
going  to  pick  up  this  big  floor  space  is  misleading, 
because  nobody  can  cool  the  tl:^gs. 

Haw  Mdi  llw  arnarging  B02Jaf  Powar  Artr  EthariMt  stan- 
dwri  cfaanga  powar  managwnant  nawta?  There's  a  big 
benefit,  which  is  with  distributed  devices  tike  phones 
or  access  points,  you  don't  need  a  UPS  (uninterrupt¬ 
ible  power  supply}  on  every  one  anymore.  I  can  iust 
put  one  UPS  in  the  closet 
The  downside  is  it  creates  a  new  problem  in  these 


AccarnplislitiHMit’.,. 


closets.  You  need  to  not  only  provide  uninterruptible 
power,  you  have  to  make  sure  the  place  is  cool  and 
you  have  to  monitor  it. 

An  thera  other  issues  in  manatpng  swHchas  that  prevMa 
kHhia  power?  The  802 Jaf  specification  addresses 
power  allocatioa  For  example,  you  can  put  out  15 
watts  per  port,  but  a  lot  of  the  switches  are  not  de¬ 
signed  to  power  every  connection  to  13  watts.  TTiey’re 
going  to  take  advant^  of  the  fact  that  some  are  un¬ 
used  or  will  have  a  low-power  device  on  thent  It's 
first  come,  first  served 

From  a  UPS  perspective,  the  risk  is  that  someone 
could  accidentally  underpower  the  system  and  even¬ 
tually  put  more  access  points  on  and  overload  the 
system.  You  might  start  losing  runtime  [on  your 


UPS]  if  the  power  fails.  If  it’s  got  twice  the  load,  the 
UPS  is  only  going  to  run  for  half  the  time.  That’s  a 
good  reason  for  monitoring  the  system. 

What’s  most  Hkaly  to  kM  oquipfrwnt  In  dosets:  heat,  power 
surges  or  some  other  envirorenontal  variable?  If  you  put  a 
piece  of  equipment  like  a  router  in  a  closet  today, 
power  failures  will  cause  it  to  have  downtime,  but 
overheating  can  break  iL  I’d  say  heat’s  a  big  problem 
in  the  closets. 

How  do  you  solve  the  problem?  All  I  need  to  do  is  get 
fresh  air  in  there.  So  it's  going  to  be  an  issue  involving 
air  circulation,  and  vents  and  things  that  have  to 
be  put  into  the  closet  in  some  organized  and  pre¬ 
dictable  way  that’s  easy  for  people  to  buy  and  install 

Some  closets  are  in  tough  environments  where 
you  can't  guarantee  that  anywhere  nearby  there  is 
reasonable  air.  In  those  cases,  there's  a  need  for  very 
compact  air-conditioning  systems.  We  need  a  way  to 
cool  without  requiring  that  anything  be  put  outside 
the  building.  We  have  units  that  take  beat  and  pro¬ 
vide  cooling  locally  to  an  area  like  a  closet  and  have  a 
'  dryer-veni-like  exhaust  hose  that  sucks  hot  air  out.  It 
I  provides  clean,  local  cold  air,  and  all  you  have  to  do 
is  get  that  hot  air  somewhere  outside  the  room. 

Whit  i»  ttw  most  common  mistalw  poopto  mah»  in  daslgnino 

dMa  ewitom?  They  massively  oversize  the  power  and 
cooling  systems.  A  lot  of  times  people  thi^  rU  over¬ 
size  it  It  can't  hurt,  right?  But  ^en  you  oversize 
these  systems,  the  efficiency  goes  down,  and  a  lot  of 
bad  side  effects  occur.  Besides  the  operating  and  coi¬ 
tal  costs,  it  also  impacts  the  availability  of  the  system. 

Suppose  you  put  five  UPSs  in  and  you  only  need 
one.  If  you  have  less  stuff  it  can’t  break  as  often. 
Another  example  is  you  oversize  your  air-condition¬ 
ing  system,  and  there's  excessive  airflow  going  un¬ 
derneath  the  raised  floor.  The  airflow  is  moving  hori¬ 
zontally  faster  than  it  should  (and)  actually  causes  a 
Venttiri  effect  that  sucks  air  down  into  the  floor  in¬ 
stead  of  pushing  it  up  into  the  equipment  So  the 
equipment  is  starved  for  cold  air  because  the  air  con¬ 
ditioner  was  oversized.  These  kinds  of  things  happen 
all  the  lime,  and  it's  a  big  problem. 

Whit  other  tames  do  you  see  come  up?  The  second 
biggest  problem  Is  comprehendii^  and  understand¬ 
ing  human  error  and  the  ftKt  that  data  centers,  net¬ 
work  rooms  and  networks  are  constantly  subject  to 
change.  Classic  case:  You  go  into  a  rack  and  rip  out  an 
old  switch  and  you  put  in  a  new  switch.  The  new 
switch  runs  on  206  volts,  the  old  one  ran  on  120.  So 
you  call  the  electilciaa  He  pulls  the  service  panel  off, 
[and  be]  can’t  turn  that  off  t^cause  its  running  the 
rest  of  the  data  center.  So  he  goes  in  there  and  installs 
wires  while  the  panel  is  live.  This  is  standard  operat¬ 
ing  procedure  in  data  centers  today,  rewiring  of  live 
panel  boards.  And  people  have  gotten  hurt.  But  the 
most  common  thing  is  someone  bumps  a  wire, 
knocks  a  wire  off  trips  a  breaker  or  dlsconne«s  the 
wrong  wire:  they  drop  loads  all  the  time  that  way. 

People  have  made  huge  investments  overstzing 
gigantic  UPS  installations  and  cooling  systems,  and 
they  haven’t  thought  through  the  issues  of  bow  are 
people  going  to  maintain  change  control  and  not 
destroy  this  thing  while  they’re  chaining  stuff,  b 
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To  manage  complexity,  youVe  got  to  outsmart  it  EMC  Automated  Netvrorked  Storage™  delivefs  the 
software  that  automates  management  of  your  multi-vendor  storage  infrastructure,  including  the  most 
error-prone  tasks  such  as  monitoring  and  provisioning.  Now  you  can  gain  a  unified,  end-to-ertd  view  ofyour 
entire  environment  Define  your  senrice  levels.  And  run  an  agile,  active  infiashucture  that  helps  the  busi¬ 
ness  pounce  on  opportunity. 

See  how  other  companies  are  using  EMC  Automated  Networked  Storage  to  manage  more 
Infonnation  with  less  effort  at  wwwXMCxom. 
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E-Commerce 
On  the  Fly 

Mobile  commerce  is  coming  your  way.  By  Linda  Rosencrance 


MAGINE  THIS:  You’re  walking  by  a  pizza  shop, 
and  your  cell  phone  rings.  No,  it's  not  your 
mom  calling  to  tell  you  to  remember  to  wear  a 
sweater  —  it’s  the  pizza  shop  calling  to  offer 
you  a  coupon  for  S2  off  a  large  pepperoni  pizza. 

Or  what  about  this:  Your  pharmacy  sends  you 
3  text  message  telling  you  that  you're  about  to  run 

out  of  the  medication  you  usually  take  and  _ 

asks  you  if  you  want  a  refill.  If  you  click  ‘Yes.’ 
the  pharmacist  will  get  your  prescription 
ready  and  you  can  pick  it  up  later  or  have  the 
pharmacy  deliver  it  to  you. 

Or  this:  You’re  having  lunch  with  a  good 
frivrtd.  and  you  mention  to  her  that  you  desperately 
need  to  see  a  dentist.  She  tells  you  that  her  dentist. 

Dr.  Goodteeth.  is  the  greatest.  Trusting  her  advice, 
you  whip  out  your  handheld  device  and  make  an 
appointment  on  the  spot. 

All  of  those  scenarios,  which  involve  mobile 
commerce,  or  m-commerce,  will  be  possible  in  the 
next  several  years,  according  to  Jaclyn  Easton,  the 
Van  Nuys,  Calif. -based  author  of  Going  Wireless: 
Transform  Your  Business  With  Mobile  Technology 


FUTURE 
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In  Context 


(HarperBusines.s.  2002). 

"Mobile  commerce  is  the  use  of  wireless  (devices] 
to  facilitate  the  sale  of  goods  or  ser\'ices,  anytime, 
anywhere,"  she  says.  Although  m-commerce  has 
been  touted  as  the  best  thing  since,  well,  e-com¬ 
merce.  it  just  hasn’t  taken  off  the  way  experts 
thought  it  would  in  the  U.S. 

-  The  reason:  weaknesses  in  interoper¬ 
ability.  usability,  security  and  privacy,  ac¬ 
cording  to  Norman  Sadeh.  a  professor  and 
director  of  the  Mobile  Commerce  Lab  at 
Carnegie  Mellon  University’s  School  of 
Computer  Science  in  Pittsburgh. 

Sadeh  says  these  issues  must  be  resolved  by  stan¬ 
dards  bodies  before  wireless  devices  replace  our  wal¬ 
lets  and  credit  cards  and  give  us  access  to  intelligent 
assistants  capable  of  anticipating  many  of  our  needs 
and  desires  and  taking  care  of  routine  tasks  to  help 
fulfill  them,  such  as  automatically  arranging  for  taxis 
to  pick  us  up  after  business  meetings. 

One  such  organization  is  the  cross-industry  Mo¬ 
bile  Payment  Forum  in  Wakefield.  Mass.  Billing  itself 
as  the  bridge  between  the  mobile  and  financial  in- 
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dustries.  the  forum  is  working  to  create  a  foundation 
for  secure,  standardized  and  authenticated  mobile 
payments  that  encompasses  all  types  of  transactions. 

The  Mobile  Payment  Forum  is  focusing  on  pay¬ 
ment  card  trarcsactions  but  is  also  addressing  key  is¬ 
sues  such  as  interoperability  passwords,  cardholder 
authentication  and  encryption  methods. 

Beyond  ‘Infotainment’ 

TTie  Mobile  Commerce  Lab  at  Carnegie  Mellon  is  de¬ 
veloping  a  prototype  Semantic  Web  environment, 
called  MyCampus,  for  context-aware  mobile  services 
for  enhancing  everyday  campus  life.  The  Semantic 
Web  would  enable  machines  to  make  more  sense  of 
the  Web  so  the  Web  in  turn  would  be  more  useful  for 
humans.  (To  learn  more  about  the  Semantic  Web,  see 
“The  Web's  Next  Leap,"  QuickLink  37596.)  The  ser¬ 
vice  can  be  accessed  via  handheld  over  the  universi¬ 
ty’s  wireless  LAN. 

The  MyCjmpus  environment  revolves  around  a 
growing  collection  of  customizable  agents  capable  of 
semiauiomatically  discovering  and  accessing  intra¬ 
net  and  Internet  services  as  they  help  users  cany  out 
tasks  like  planning  an  evening  out.  organizing  a  study 
group  or  looking  for  a  place  to  eat.  Sadeh  says. 

The  lab  is  moving  beyond  the  relatively  simple 
“infotainment"  services  now  offered  by  the  mobile 
Internet  to  a  variety  of  mobile  applications  and 
services  that  will  assist  users  in  time-critical,  goal- 
driven  tasks,  like  allowing  a  professor’s  assistant  to 
schedule  activities  in  the  professor's  calendar  for  a 
Monday  using  his  own  handheld  device.  Sadeh  says. 

But.  he  notes,  that  will  require  overcomit^  the 
inherent  I/O  limitations  of  mobile  devices  through 
higher  degrees  of  automation  and  the  development 
of  services  that  understand  the  context  within  which 
their  users  operate  —  for  example,  their  locations, 
the  activities  they  are  engaged  in,  who  their  friends 
and  colleagues  are.  and  a  number  of  other  contextual 
attributes  and  preferences. 

Sadeh  says  the  Mobile  Commerce  Lab  has  already 
developed  a  “restaurant  concierge,"  an  assistant  that 
can  give  a  user  suggestions  on  where  to  eat  based  on 
information  such  as  his  food  preferences,  the  amount 
of  time  he  has  before  his  next  meeting  or  class,  his 
location  on  campus  and  the  weather. 

Adam  ZaweL  an  analyst  at  The  Yankee  Group  in 
Boston,  says  m-commerce  purchases  haven't  yet 
taken  off  because  wireless  is  an  inferior  medium 
over  which  to  make  these  types  of  purchases. 

However.  Zawel  says  that  if  the  interface  improves 
so  that  it's  almost  as  easy  to  click  throufd)  on  a  wire¬ 
less  phone  as  it  is  to  make  the  purchase  over  a  PC. 
people  will  be  more  willing  to  do  sa  He  says  im¬ 
provements  in  networic  speed  and  latency  w  ill  help 
bring  about  this  change,  but  the  main  improvement 
will  come  from  application  design. 

Zawel  explains  that  when  phones  have  better  dis¬ 
play  capabilities  and  content  providers  spend  more 
time  developing  the  necessary  applications,  use  of 
wireless  devices  for  m-commerce  will  take  off.  with 
remote  wireless  purchases  reaching  S4.5  billion 
annually  by  2006. 

Once  the  concerns  surrounding  m-commerce  are 
worked  out.  it  may  just  become,  in  the  words  of 
Amazon.com  CEO  Jeff  Bezos,  “the  most  fantastic 
thing  that  a  time-starved  world  has  ever  seen.'*  I 


34 


TECIIII0106Y 


www.computerwor1d.com 


E-Commerce 
On  the  Ely 

Mobile  commerce  is  coming  your  way.  By  Linda  Rosencrance 


IMAGINE  THIS;  You’re  walking  by  a  pizza  shop, 
and  your  cell  phone  rings.  No.  it’s  not  your 
mom  calling  to  tell  you  to  remember  to  wear  a 
sweater  —  it’s  the  pizza  shop  calling  to  offer 
you  a  coupon  for  52  off  a  lai^  pepperoni  pizza. 
Or  tKdut  about  this:  Your  pharmacy  sends  you 
a  text  message  telling  you  that  you’re  about  to  run 

out  of  the  m^cation  you  usually  take  and  _ 

asks  you  if  you  want  a  refill  If  you  click  ’Ves." 
the  pharmacist  will  get  your  prescription 
ready  and  you  can  pick  it  up  later  or  have  the 
pharmacy  deliver  it  to  you. 

Or  this:  You're  having  lunch  with  a  good 
friend,  and  you  mention  to  her  that  you  desperately 
need  to  see  a  dentist.  She  tells  you  that  her  dentist, 
Dz  Goodteeth.  is  the  greatest.  Trusting  her  advice, 
you  whip  out  your  handheld  device  and  make  an 
appointment  on  (he  ^>ot 
All  of  those  scenarios,  which  involve  mobile 
commerce,  or  m*commerce,  will  be  possible  in  the 
next  several  years,  according  to  lacl^  Easton,  the 
Van  Nuys,  Calif.*based  author  of  Goirtg  Wireless: 
Thuu^/brm  Your  Business  With  Mobile  Technology 
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(HarperBusiness,  2002). 

“Mobile  commerce  is  the  use  of  wireless  [devices] 
to  frcilitate  the  sale  of  goods  or  services,  anytime, 
anywhere.”  she  says.  Although  m-commerce  has 
been  touted  as  the  best  thing  since,  well,  e-com¬ 
merce.  it  hist  hasn’t  taken  off  the  way  experts 
thought  it  would  in  the  U.S. 

-  The  reason:  weaknesses  in  interoper¬ 
ability,  usability,  security  and  privacy,  ac¬ 
cording  to  Norman  Sadeb,  a  professor  and 
director  of  the  Mobile  Commerce  Lab  at 
Caraegie  Mellon  University’s  School  of 
Computer  Science  in  Pittsburgh. 

Sadeb  says  these  issues  must  be  resolved  by  stan¬ 
dards  bodies  before  wireless  devices  replace  our  wal¬ 
lets  and  credit  cards  and  give  us  access  to  intelligent 
assistants  capable  of  anticipating  many  of  our  needs 
and  desires  and  taking  care  of  routine  tasks  to  help 
fulfill  them,  such  as  automatically  arranging  for  taxis 
to  pick  us  up  afrer  business  meetings. 

One  such  organization  is  the  cross-industry  Mo¬ 
bile  Payment  Forum  in  Wakefield.  Mass.  Billing  itself 
as  the  bridge  between  the  mobile  and  financial  in- 
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dustries,  the  forum  is  workup  to  create  a  foundation 
for  secure,  standardized  and  authenticated  mobile 
payments  that  encompasses  all  types  of  transactions. 

The  Mobile  Payment  Forum  is  focusing  on  pay¬ 
ment  card  transactions  but  is  also  addressing  key  is¬ 
sues  such  as  interoperability  passwords,  cardholder 
authentication  and  encryption  methods. 

Beyond  Infotainment’ 

The  Mobile  Commerce  Lab  at  Carnegie  Mellon  ts  de¬ 
veloping  a  prototype  Semantic  Web  environment, 
called  MyCampus,  for  context-aware  mobile  services 
for  enhancing  everyday  campus  life.  The  Semantic 
Web  would  enable  machines  to  make  more  sense  of 
the  Web  so  the  Web  in  turn  would  be  more  useful  for 
humans.  (To  learn  more  about  the  Semantic  Web,  see 
"The  Web’s  Next  Leap,”  Quicklink  37596.)  The  ser¬ 
vice  can  be  accessed  via  handheld  over  the  universi¬ 
ty’s  wireless  LAN. 

The  MyCampus  environment  revolves  around  a 
growing  collection  of  customizable  agents  capable  of 
semiautomatically  discovering  and  accessing  intra¬ 
net  and  Internet  services  as  they  help  users  carry  out 
tasks  like  planning  an  evening  out,  organizing  a  study 
group  or  looking  for  a  place  to  eat.  Sadeh  says. 

The  lab  is  moving  b^nd  the  relatively  simple 
“infotainment'*  services  now  offered  by  the  mobile 
Internet  to  a  variety  of  mobile  applications  and 
services  that  will  assist  users  in  time-critical,  goal- 
driven  tasks,  like  allowing  a  professor’s  assistant  to 
schedule  activities  in  the  professor’s  calendar  for  a 
Monday  using  his  own  handheld  device,  Sadeh  says. 

But.  be  notes,  that  will  require  overcoming  the 
inherent  I/O  limitations  of  mobile  devices  through 
higher  degrees  of  automation  and  the  development 
of  services  that  understand  the  context  within  which 
their  users  operate  —  for  example,  their  locations, 
the  activities  they  are  engaged  in,  who  their  friends 
and  colleagues  are.  and  a  number  of  other  contextual 
attributes  and  preferences. 

Sadeh  says  the  Mobile  Commerce  Lab  has  already 
developed  a  “restaurant  concierge,”  an  assistant  that 
can  give  a  user  suggestions  on  where  to  eat  based  on 
information  such  as  his  food  preferences,  the  amount 
of  time  he  has  before  his  next  meeting  or  class,  his 
location  on  campus  and  the  weather. 

Adam  ZaweL  an  analyst  at  The  Yankee  Group  in 
Boston,  says  m-commerce  purchases  haven’t  yet 
taken  off  because  wireless  is  an  inferior  medium 
over  which  to  make  these  types  of  purchases. 

However.  Zawel  says  that  if  the  interface  improves 
so  that  it’s  almost  as  easy  to  dick  through  on  a  wire¬ 
less  phone  as  it  is  to  mate  the  purchase  over  a  PC 
people  will  be  more  willing  to  do  sa  He  says  im¬ 
provements  in  networi(  speed  and  latency  will  help 
bring  about  this  change,  but  the  main  improvement 
will  come  from  application  design. 

Zawel  explains  that  when  phones  have  better  dis¬ 
play  capabilities  and  content  providers  spend  more 
time  developing  the  necessary  applications,  use  of 
wireless  devices  for  m-commerce  will  take  off.  with 
remote  wireless  purchases  reaching  $4.5  billion 
annually  by  2006. 

Oitce  the  concerns  surrounding  m-commerce  are 
worked  out  it  may  fust  become,  in  the  words  of 
Amazon.com  CEO  Jeff  Bezos,  “the  most  fantastic 
thing  that  a  time-starved  world  has  ever  seen.”  I 
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Do  you  really  know  what  to  expect  from  your  telecom  and  IP  pHXividcr? 

With  NTTA^RIO  IP  and  managed  networic  services  you  do.  As  one  of  the  world's 
largest  communications  providers,  our  promise  is  to  consistently  deliver  the  most  dependable  services 
in  the  world.  From  IP  connectivity  and  managed  networic  to  hosting  services, 
our  commitment  is  to  do  whatever  it  takes  to  keep  our  customer  satisfied.  So  when  we  say  you  can  count  on  us, 

we  mean  it.  In  all  honesty. 

www.nttverio.com 
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Office  Pblitics  Plays  Role 
In  Postmerger  Security 


A  committee  meeting  fals  flat  as  management 
wMfidraws  support  and  the  vendor  rep  in 
attendance  Mssasnooze.  By  Vince  Tuesday 


My  boss  loves  to  tell  of 
his  presentation  at  a 
Cisra  sales  confer¬ 
ence  that  ended  with 
audience  members  standing  on 
their  chairs>  clapping  and  hol¬ 
lering  with  glee.  I  have  to  ad¬ 
mit  I  got  a  dUTerent  reaction  to 
a  recent  presentation  of  mine. 

My  company  has  become 
part  of  a  larger  group  that  is 
trying  to  merge  cultures.  A 

range  of  companies  _ 

makes  up  the  new 
company,  and  a  bead- 
quarters  team  was 
formed  to  bring 
everything  together. 

Other  companies  in 

the  group  have  out-  - 

sourced  their  IT  services  to  a 
third  party  (HI  call  them 
‘Acme  Corp.").  but  wc  haven't 
Those  business  units  aren't  so 
sure  of  the  details  of  their  se¬ 
curity  positions.  'Iltey  haven't 
explicitly  listed  IT  security 
services  in  their  outsourcmg 
contracts,  so  there's  a  gray 
area.  By  the  letter  of  their  con¬ 
tracts.  they  dcm't  receive  any 
security  services,  but  they've 
always  managed  to  get  some 
in  the  past  either  by  inheriting 
what  Acme  does  as  the  stan¬ 
dard  or  by  bullying  or  sham¬ 
ing  the  vendor  into  doing  the 
right  thing. 

The  other  business  units  are 
under  pressure  from  regula¬ 
tors  and  auditors  who  want  to 
see  compelling  evidence  that 
IT  security  is  built  in  through¬ 
out  the  organization.  They  are 
looking  for  coherent  policies, 
a  management  structure  for 
security,  and  clear  roles  and 
respoostbUitks. 

1  was  asked  to  represent  my 
company  at  the  frm  group  se¬ 
curity  committee  meeting. 

This  team  was  set  up  by  man¬ 
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agers  at  headqtiarters  who 
have  "security”  in  their  job  ti¬ 
tles.  They  invited  representa¬ 
tives  from  each  business  unit, 
as  well  as  a  one  from  Acme, 
whom  I  will  call  John. 

The  aim  was  to  help  kick- 
start  the  process  of  sharing 
information  and  provide  input 
into  policy,  roles  and  respon¬ 
sibility  documentation.  I'd 
been  invited  to  talk  about  the 

_  areas  of  IT  security 

that  my  unit  covers 
in-house. 

From  the  moment 
I  arrived,  it  was 
clear  that  the  senior 
staff  hadn’t  reached 
a  consensus  regard¬ 
ing  the  best  way  to  approach 
this  topic.  I  met  a  chief  securi¬ 
ty  officer  who  explained  that 
IT  security  and  business  con¬ 
tinuity  were  both  subsets  of 
what  be  covered.  Then  I  met 
the  global  head  of  business 
continuity,  who  explained  that 
he  covered  pbysicd  security 
and  IT  security  was  a  subset 
of  that 

Shortly  thereafter,  the  se¬ 
nior  stafiTs  new  boss  called  us 
all  in  and  told  us  that  bead- 
quarters  shouldn't  be  doing 


From  the  moment  I 
arrived,  it  was  dear 
that  senior  staff 
hadn't  reached  a 
consensus  as  to 
the  best  way  to 
approach  [seoirity]. 


things  for  group  companies 
such  as  holding  committee 
meetings  like  the  one  we'd  all 
just  arrived  to  attend.  Instead, 
he  said,  it  should  carry  out  a 
more  remote  role,  checkii^  to 
make  sure  we  were  doing  a 
good  job  on  our  own. 

This  put  everything  on  a 
difficult  politick  footing,  a  de¬ 
velopment  that  wasn’t  lost  on 
the  global  head  of  business 
continuity.  }ti$t  as  we  finished 
introducing  ourselves,  he  took 
a  call  on  his  mobile  phone, 
looked  surprised  and  then 
stood  up  and  annoimced  that 
he'd  been  called  away  to 
something  urgent.  1  wondered 
if  that  well-timed  call  wasn’t 
from  his  assistant  saying.  "Hi. 
it's  me  with  the  fake  call  you 
asked  for  to  get  you  out  of  that 
tricky  meeting" 

ALost  Cause 

We  began  the  meeting  anyway, 
with  each  representative  ex¬ 
plaining  how  his  unit  was  ap¬ 
proaching  IT  security,  fohn.  the 
Acme  representative,  began  to 
slump  as  each  person  spoke. 

Then  I  gave  my  presenta¬ 
tion.  explaining  the  areas  we 
cover,  what  we  were  hoping 
other  group  companies  could 
help  us  wi^  and  what  we 
mi^t  be  able  to  offer  them. 

As  1  continued  my  fairly 
short  talk.  John's  chin  kept 
drifting  to  his  chest  and  his 
eyelids  lowered.  Then,  with  a 
snuffle,  he’d  jerk  upri^t  ai>d 
stare  right  at  me.  This  was  a  lit¬ 
tle  unnerving  but  I  kept  calk¬ 
ing  I  exchanged  glanc^  with 
othets  around  the  table.  Their 
knowir^  smiles  and  winks  re¬ 
assured  me  that  John  wasn’t 
having  some  kind  of  seizure. 

As  I  continued.  John  went 
totally  under,  and  his  body 
slumped  forward.  I  stag^red 
to  the  end  of  my  presentation, 
unsure  about  vriiat  to  do. 

I  quickly  sat  down  and  let 
the  chairman  of  the  meeting 


take  over.  He  did  nothing  until 
about  10  minutes  later,  when 
we  came  to  the  place  in  the 
agenda  where  John  was  to  re¬ 
port  on  Acme’s  approach. 

The  chair  quietly  asked 
John  a  question  and  then  re¬ 
peated  it  again  and  again  at  in¬ 
creasing  volume  until  John 
snapped  awake.  It  was  a  sight 
to  see  as  John's  head  lifted  and 
he  began,  midsentence,  to  ex¬ 
plain  how  the  business  units 
were  getting  all  they  could  out 
of  their  contracts  with  Acme. 

I  later  found  out  that  this 
wasn't  the  first  time  this  had 
happened  but  that  Jc^n  is  the 
brother  of  the  man  who  runs 
Acme,  so  nobody  wants  to 
make  a  fuss. 

The  meeting  ran  to  its  natur¬ 
al  close,  and  1  fled  back  home. 
As  I  returned  from  the  strange 
worid  of  headquarters.  I  pon¬ 
dered  the  situation.  There's  no 
way  you  could  get  away  with 
a  performance  like  John’s  in 
our  company  as  a  staff  mem¬ 
ber.  let  alone  as  a  supplier. 
Perhaps  at  the  next  meeting  1 
should  make  sure  we  have  a 
lighter  lunch  or  a  cooler  room. 
Or  maybe  1  just  need  to  be  a 
more  interestii^  presenter. 

Whatever  I  change.  Tm  cer¬ 
tainly  going  to  be  hesitant 
about  getting  too  close  to  HQ. 
without  a  lot  of  political  prep¬ 
aration.  Hopefully  I  can  stay 
away  from  ^1  that  and  get  on 
with  a  refresh  of  the  security 
basics,  m  be  checking  pass¬ 
word  strength,  testing  for 
unauthorized  modems  and 
providing  security  awareness 
training.! 


WHAT  DO  YOU  imK? 

This  week’s  joimal  Is  written  by  a  real 
secunty  manager.  Vnce  Tues^.*  whose 
name  and  employer  have  been  disouised 
tor  obwous  reasons.  Contact  him  al  Vince 
!uesday#iushniailxom.or|CMnthe(IS' 
Cission  in  our  forun:  QukliLInk  aSM 


To  find  a  complete  arctwa  of  our 
Security  Manx's  Jounak.  go  onSne  to 

OcoriiputarwBftd.ceittfa»rie«nial 


SECURITY  LOG 


WMEincS 


Mww.camputefwortdconi 
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CacheLogic  Offers 
Appliance  for  ISPs 

Stotiv  Cadwliioic  Ud.  bi  Cam* 
bridga,  EngM,  tNa  waak  wfl  m> 
ImaahmW^  parkwanca  lUMD 
alanQa  naNwk  afplafieaa  la  fa* 
dMala  raiifiao  and  eacMas  lor 
larpi  Inlamal  aarviM  praaldara 
(BP).  Akaad  M  mlHoallnB  nat- 
work  nwQtrtlon  cawad  hy  paar- 
tfr^iaar  traACt  Ilia  CadiaodafKa 
4000  (CP4000)  bicor^omaa 
IdTB  of  MMD  aloraoa  and  aih 
porta  Aa  OnuMd  and  faafTrack 
notwork  pralOGOli.  Tha  CP2000 
IncorparalaaTDOOBorMI). 

A  akigto  CP4000  ia  dailpNd 
to  aarva  50,000  bdaraal  aorrioa 
aHkacrfeora;  ona  CP2000  «■ 
aupport  30,000  wbaerlMn. 
Thaprioaia  about  362.000  for 
50.000  aitoocrfoors.  ivMi  an  ad> 
dttfonri  315.500  aarvfoafoa. 


^mdors  Offer  IM 
Archiving  Service 

km  Mountain  Ine.  foot  apoak  an* 
nounead  that  Rhaa  partnarad 
wMh  tour  foataid  maaaagino  (Ml) 
vandora  to  praidda  a  atoraga  and 
rairfowal  aaratoa  to  hafo  fhanetol 
aarvicaa  foiM  oomply  adtfi  now 
rapanoonaaiiacmBaiUBvaiyoi 


partnara  ara  Akanfat  Syitoma  Inc., 
Communfoatar  foe..  FMTfow 
CommunfoaSona  and  MIeoie  he. 
Tha  aoiatea  Mao  flw  Sbnpfo  Mad 
Tranfor  Pratocol  to  format  mao* 
aagaa  to  naka  foam  aaay  to 
aaarcb  for  aukfoet  or  data.  Dw 
aarataa  ia  fockafod  adfo  km 
Mounlaln'a  atandard  ainal 
arehfoal  packaoe. 


Rgtsu  Touts 
UHraportabie’ PC 

FuRtou  PC  Carp,  announoad  foa 
UfiBookPS000.a34-M..ful* 
foahaa  laptop  PC  fofo  fta  Santa 
data.  Cail.  haaad  wndor  calc 
‘idtrapoftifoto.*  R  haa  a  900* 
MHi  total  tadfcan  M  procaaaor,  a 
wkalaaa  UIN  connactfm  and  a 
chofca  of  a  4066  or 0066  tod 
fofoa.  Prfcinp  alMtB  at  31549. 

Tha  laptop  vdl  Mdp  dda  aammar. 


NICHOLAS  PETRELEY 


What  Microsoft 
Customers  Want 


Now  THAT  the  Microsoft  antitrust  trial  is 
over  and  Microsoft  is  no  longer  distract¬ 
ed  from  its  full-time  effort  to  eliminate 
the  word  competition  from  the  English 
language,  I  notice  that  the  company’s 
spokesmen  have  retreated  from  their  daily  usage  of  the 
word  innovation  and  have  returned  to  justifying  every 
product,  policy  and  technology  by  saying,  “This  is 
what  customers  are  asking  for.”  Tve  often  wondered 
what  customers  would  say  if  they  wrote  letters  to 
Microsoft  requesting  the  kinds  of  things  the  vendor 
delivers,  so  I  decided  to  try  my  hand  at  drafting  one. 


DaarMformofb 

Thank  you  for  allowing 
customers  like  me  to  defme 
your  products  and  strate¬ 
gies.  I’d  like  to  offer  some 
more  suggestions,  but  first 
1  want  to  comment  on  your 
progress. 

The  omnipresent  talking 
paper  clip  was  exactly  as  I 
had  described  the  idea  in 
my  previous  letter.  The 
shared-source  program 
was  also  precisely  what  I 
had  in  mind.  I  want  a  brief 
glimpse  to  make  sure  the 
source  code  exists;  I  trust 
you  with  the  actual  details.  Thanks 
also  for  the  SQL  Server  Slammer 
worm.  The  Internet  has  been  way  too 
fast  lately,  so  the  worm  provided  a 
nice  temporary  respite  from  all  that 
speed. 

Most  of  aU.  I  want  to  thank  you  for 
solving  the  problem  we  had  with  the 
decision-makers  in  our  company  who 
don't  see  the  value  of  constantly  up¬ 
grading  our  hardware  and  software.  I 
was  pleased  to  see  that  you  used  my 


I 


idea  of  threatening  a  soft¬ 
ware  audit,  since  I  know 
for  a  fact  that  we  mis¬ 
placed  most  of  our  licens¬ 
es.  Issuing  the  threat  dur¬ 
ing  tax  season  was  a  bril¬ 
liant  addition  on  your  part, 
since  it  forced  a  quick  de¬ 
cision  without  time  to 
think  it  through. 

On  the  other  hand,  I  have 
to  admit  that  I  was  a  bit 
disappointed  that  you 
didn’t  take  my  advice  about 
increasing  the  frequency  of 
reboots.  I  noticed  1  was 
able  CO  move  the  mouse 
pointer  in  the  latest  version  of  Win¬ 
dows  without  the  system  informing 
me  that  I  would  need  to  reboot  for  the 
change  in  pointer  position  to  take  ef¬ 
fect.  I  still  think  customers  would  love 
this  feature,  so  please  consider  it  for 
the  next  version. 

As  for  my  latest  ideas,  let  me  begin 
by  saying  that  I  strongly  suggest  that 
you  craft  Windows  Server  2003  so 
that  it  refuses  to  run  existing  server 
applications  like  SQL  Server  2(X)0  and 


Exchange  2000. 1  don’t  want  the  op¬ 
tion  of  runnii^  any  2000  software  on 
my  2003  operating  system  because  1 
And  it  aesthetically  unpleasant  when 
the  years  don't  match  up. 

I  really  like  the  idea  of  the  single 
sign-on  feature  in  Passport,  but  I  often 
foiget  my  password,  and  I  don’t  al¬ 
ways  have  access  to  a  computer. 

Passport  would  be  much  more  con¬ 
venient  if  you  could  make  it  easy  for  a 
friend  to  enter  a  simple  URL  that  in¬ 
structs  your  servers  to  send  my  Pass¬ 
port  infonnation  to  his  e-mail  address. 

I  appreciate  all  you’ve  done  to  limit 
the  abilities  of  others  to  view  or  share 
my  Microsoft  Word  files.  I  admit  I  vtras 
a  bit  worried  that  your  commitment 
to  XML  would  undo  all  (hose  years  of 
increasing  incompatibilities  between 
file  formats,  but  I  was  pleased  to  find 
out  that  your  XML  files  simply  point 
to  inscrutable  Microsoft  objects. 

Nevertheless,  it’s  time  to  take  this 
exclusivity  to  the  next  logical  step. 

You  need  to  design  a  hardware  stan¬ 
dard  that  encrypts  documents,  e-mail 
and  even  Web  content  to  put  this  in¬ 
formation  out  of  the  reach  of  every¬ 
one  except  pieople  who  are  using  the 
most  recent  versions  of  Microsoft 
software. 

Finally,  since  you're  always  asking. 
“Where  do  you  want  to  go  today?"  I 
was  pondering  that  question  and  I 
came  up  with  the  brilliant  idea:  an  In¬ 
ternet-enabled  portable  potty!  Surely 
the  whiz  Idds  in  Redmond  could  de¬ 
sign  something  like  that. 

Anyway,  thanks  again  for  consis¬ 
tently  delivering  precisely  what  we 
customers  want 
Sfocaraly. 

A  Sorisfied  User  of  Microsoft  Software 
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Products.  People. 
Problems  solved. 

From  servers  to  service,  Dell  has  the  solution. 


Dell  I  Small  and  Medium  Business 

Your  business  hss  unique  neetls.  It  deserves  a  unique  solution.  From  PowerEdge*'  servers  featuring  Intel* 
XeGn' processors  to  PowerVault“  Storage  and  PowerConnect''  Network  Switches,  we  offer  tailored  solutions  to 
meet  your  business  needs.  And  of  course  it's  Dell,  so  you  know  you're  getting  the  latest  technology.  But  that's  only 
half  of  the  story.  Dell  offers  consulting  services  that  range  from  deployment  and  installation  to  training  and 
certification.  All  from  one  source.  And  everything  is  backed  by  thousands  of  service  and  support  people  at  your 
beck  and  call,  on-site,  online  and  on  the  phone.  Suddenly  your  IT  infrastructure  doesn't  seem  so  daunting.  Let  Dell's 
oneK)f-a-kind  solutions  put  you  on  the  path  to  one-of-a-kind  success. 

Dell  Rated  #1  in  Intel-Based  Server  Satisfaction 

Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 
Third  Quarter  2002 
-  December  2002 
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PowerEdge'*  600SC  Server 
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what  you’re  worth? 


Find  out  when 
Computerworld 
publishes  the 
results  from  our 
17th  Annual 
Salary  Survey  of 
IT  Professionals! 


How  much  are  other  IT  professionals  with  your  experience  and  credentials  earning? 
With  help  from  you  and  your  IT  colleagues  across  the  country,  Computerworld  will 
answer  those  questions  with  results  from  our  17th  Annual  Salary  Survey. 

Please  take  our  survey  now  and  enter  a  drawing  to  win  a  $499  gift  certificate  from 
Amazon.com.  Our  survey  period  closes  on  Thursday,  July  3  at  5:00  p.m. 

Survey  results  and  feature  stories  that  offer  practical  career  advice  will  be  published  in 
the  October  27, 2003,  issue  of  Computerworld.  The  issue  will  offer  detailed  informa¬ 
tion  on  average  salaries  and  bonuses,  by  title,  industry  and  region.  You'll  be  able  to 
compare  your  organization's  compensation  plans  with  those  of  other 
organizations  and  find  the  hottest  areas  of  the  country  for  IT  pay. 

COMPUTDNnilJI 


SALARY 

SURVEY 

2003 


To  take  the  survey,  and  qualify  for  the  drawing,  go  to; 

computerwoi1d.coii\/s^003 


OPINION 

Getting  Your  Project  Priorities  Right 

Find  a  way  to  prioritize  your  IT  investments 
that  will  still  let  you  support  the  business 
need  —  then  stick  to  it,  says  columnist  John 
Berry.  Page  48 


Speedy  Recoveries 

Baptist  Health  Care  greatly  improved 
its  employee  satisfaction  and  service 
quality  by  using  metrics  developed 
and  supported  by  its  IT  department. 

Page  46 
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Surviving  Software  Upgrades 

Implementing  upgrades  quickly  and 
accurately  can  earn  you  points  with 
your  boss,  improve  your  marketable 
skills  and  make  life  easier  for  you 
and  software  users.  Page  44 
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When  the  chips  were  down, 
Aviall  invested  $40  million  in  IT 
The  payoff  is  a  $431  million  boost 
in  sales.  Bv  Kathleen  MeKanuka 


WHEN  TIMES  ARE  TOUGH,  the  tendency 
is  to  hunker  down,  cut  back  on  spend¬ 
ing  and  wait  it  out.  Aviall  Inc.  did  just 
the  opposite.  Faced  with  a  string  of  fi¬ 
nancial  setbacks  that  rocked  its  business,  the  Dallas- 
based  aviation  aftermarket  parts  distributor  decided 
in  2000  to  invest  big  in  IT.  Since  then,  its  revenue  has 
more  than  doubled  in  an  industry  where  many  play¬ 
ers  are  fightii^  for  survival. 

“1999  was  a  challenging  year  for  the  corporation," 
says  Paul  Fulchino,  who  came  to  Aviall  in  January 
2000  as  a  turnaround  CEO.  Problems  with  a  new 
ERP  financial  system  had  caused  such  havoc  with  or¬ 
ders  that  nearly  20%  of  accounts  had  bailed  out.  “We 
lost  $70  million-plus  of  business,”  Fulchino  says,  and 
the  company  was  hemorriiaging  funds  in  an  attempt 
to  recover  from  the  customer  service  problems. 

Fulchino  planned  to  Ax  the  system  and  give  cus¬ 
tomers  and  suppliers  easy  access  to  information,  effi¬ 
cient  order  processor  and  updates  on  order  status. 
But  he  also  wanted  to  transcend  traditional  distribu¬ 
tion  services  by  providing  market  intelligence,  just- 
in-time  inventory,  superior  delivery  performance  and 
one-stop  shopping  for  customers. 

For  suppliers,  the  plan  was  to  increase  sales  by 
Unking  their  related  products  online  so  customers 
could  find  them  more  easily.  Overall,  the  goal  was  to 
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ders  that  nearly  20"o  of  accounts  had  bailed  tmi.  “We 
lost  S70  million-plus  of  business."  Fulchino  says,  and 
the  company  was  hemorrhaging  funds  in  an  attempt 
to  recover  from  the  customer  service  problems, 
Fulchino  planned  to  fix  the  system  and  give  cus¬ 
tomers  and  suppliers  easy  access  to  information,  effi¬ 
cient  order  priKCSsing  and  updates  on  order  status. 
But  he  also  wanted  to  transcend  traditional  distribu¬ 
tion  services  by  providing  market  intelligence,  just- 
in-time  inventory,  superior  deliver)-  performance  and 
one-stop  shopping  for  customers. 

For  suppliers,  the  plan  was  to  increase  sales  by 
linking  their  related  products  online  so  customers 
could  find  them  more  easily.  Overall,  thc  goal  was  to 


prmidc  oustomors  jnJ  suppliers  w  ith 
tmanciiil.  technical  and  sales  advan* 
la^tis  by  dealing:  vvithi A\  iaJI.  •'We  just 
nivded  t»)  in\\s;t  in  technok>tjy  to  al¬ 
low  this  to  happen."  Fulchino  says. 

ThatTwhere  CIO  loc  Uicik  comes 
in.  lacik  had  been  hired  in  late  by 
the  previous  manajjement  team,  and  he 
and  Fulchino  started  together  on  the 
first  workday  i»f  Ji)00.  i  told  my  wife. 
Honey,  this  could  he  my  shortest  ji»b 
ever.'  ■*  Lacik  recalls.  But  Fulchino  was 
willing  to  stick  w  ith  the  team  he  inher¬ 
ited.  "My  message  was  the  same  u» 
es'ersonc:  ■\'ou've  got  si.\  months  to 
show  me  what  you  can  do.' "  he  sayv 
"He  had  .such  a  clear  and  crisp  vision 
of  w  hat  he  wanted  to  do  with  the  com¬ 
pany."  Lacik  recalls.  "I  just  had  to  Hg- 
urc  out  how  to  make  it  happen." 

Fulchino's  first  challenge  was  secur¬ 
ing  financing  for  a  multimillion-doUnr 
IT  investment.  "You  have  to  spend  a 
buck  to  make  two."  Fulchino  says,  "hut 
bankers  would  rather  spend  10  cents 
and  lose  20."  He  had  to  work  hard  with 
lenders  to  get  initial  funding,  then 
show  quick-hit  successes  for  continued 
financing.  As  the  plan  evolved.  Fulchi¬ 
no  decided  to  make  it  all  a  quick  hit. 
Initially,  the  turnaround  plan  was  to 
play  out  over  ses’eral  years,  but  he 
compressed  it  to  a  year. 

"That  took  a  Herculean  effort  and  a 
significant  dollar  spend  as  well  as  get¬ 
ting  the  board  to  go  along,  given  that 
we  had  just  come  off  a  difficult  year." 
sa>-5  lim  Quinn,  vice  president  of  sales 
and  marketing-  “It  took  extraordinary 
vision,  tenacity  and  guts." 

But  for  Fulchino.  it  was  a  no-brainer. 
"I  said.  'Guys,  we  can  be  conservative, 
but  you  didn't  bring  me  in  to  chip 
away.  You  want  a  great  companN  '  I  can 
return  it.  We'll  go  for  the  gold.’  ” 

Process  Problems 

That  decision  to  go  tor  the  gold 
brought  political  challenge's  for  Lacik. 

“It  was  very  lough."  he  says.  “'I'he  busi¬ 
ness  (pc'opicl  said.  'The  last  thing  we 
need  is  [to  bt.’]  investing  in  lechnologv. 
especially  when  S4»me  of  our  prucevses 
arc  broken.  This  i.s  nw  much,  tito  fa.sf. 
Back  off?'  ~  But  as  Lacik  developc'd 
closer  relatioaships  with  key  business 
managers,  a  blend  of  pnK'i.'ss  improve- 
menLs  and  lochnoktgy  support  began 
to  work.  "If  you're  just  pushing  buttons 
and  pulling  levers,  it  can  be  a  disaster." 
he  says.  “But  they  really  knew  their 
business  and  were  able  to  guide  me." 

For  e.xnmple.  a  sales  force  automa¬ 
tion  and  order  entr)’  system  ffom 
Siebel  Systems  Inc.  was  the  primary 
turnaround  ti>ol  in  sales,  but  Quinn 
knew  technology  alone  wasn't  enough. 


Th^  ltans»or*Ttatii)ri  .tt  Avail  (.amr. 
logolher  arouriO  lh»-  '•c'ltf  | 

CIO  Jot:  Laciii 

AvialI.roni  a  value- 
aUdeJeustonter  jodsepplir' 
litcrng  Web  site 

slo'- 

ago-aroa  nelwoiK  arctrileclure  tn 
Ifie  (Jala  Lenter  EMC  Corp  Lei  5 
fault-tolerant  r.lrtragt  svsten»^ 
complete  ledundancy 

Enperl  help  on 

procest  improvement  'n  toniur.r 
tion  with  lechnoloyy  upgrades,  on 
gnmq  timriional- area  teams  contnt 
oe  to  evdluale  processe*.  and  plar' 
further  imprnvL'mfnts 

Integraled  hi?st-of- 
breed  applications  with  middlewafp 
horn  Sybase  fnc..  XML  tor  easy  mle- 
ijration  with  customers  and  suppl> 
ers'  syslems  equally  important  i« 
the  integration  uf  people  and  proc 
esses  with  technology. 


"Plenty  of  people  put  in  Siebel  and  still 
fail,"  he  says.  He  needed  to  make  his 
sales  force  accountable.  That  required 
training  and  discipline  in  time  and  ter¬ 
ritory  management  as  well  as  use  of 
the  now  system  —  a  strateg)’  not  all 
salespeople  were  eager  to  embrace. 

"A  number  of  salespeople  opted  out," 
Quinn  recalls. 

FnftJrcing  the  new  prvxresses.  which 
were  unpr*pular  with  a  lot  of  salespeo- 
'  pic,  was  "a  pretty  gutsy  call  to  make 
!  with  the  company  going  the  wrong 
way  on  revenue."  Lacik  says.  But  Quinn 
wiruldn'i  take  n<»  for  an  answer,  and  the 
!  proct'sses  changed.  "It  wa.s  a  difficult 
;  year."  Quinn  says,  “but  they  started  to 
I  ntake  commission  checks  again,  and 
j  that  made  them  believers." 

Business  Transformation 

1  Meanwhile,  an  online  purchasing  sys- 
'  tern  from  BroadVision  Inc.  enabled  the 
I  new  .•\viall.com  site  to  offer  .Wff.OOO 
parts  t<*  the  company’s  17,000  cus¬ 
tomers.  using  20.000  pricing  matrices. 
Web  sales  as  a  percentage  of  total  rev¬ 
enue  have  grown  by  about  60‘S),  while 
costs  per  order  have  been  cut  from  S7 
by  phone  to  39  cents  via  the  Web. 

In  operation.s,  upgrades  to  an  inven¬ 
tory  conirt)!  and  warehouse  manage¬ 
ment  system  from  Catalyst  Manufac¬ 


turing  Services  let  Senior  Vice  Presi¬ 
dent  Charley  Kienzle  move  S200  mil¬ 
lion  in  inventory  to  a  new  warehouse 
over  one  weekend  without  missing  a 
beat.  Upgrades  to  the  product  alloca¬ 
tion.  inventory  management  and  fore¬ 
casting  software  from  Xelus  Inc.  pro¬ 
vided  more  collaborative  forecasting. 

For  example,  sales  leaders  can  make 
educated  guesses  about  inventory 
needs  based  on  market  conditions. 
Soon,  major  customers  may  have  a 
'  view  into  the  Aviall  pipeline  to  help 
better  manage  their  own  inventories 
and  improve  Aviall’s  forecasting. 

Integration  of  the  various  systems 
with  CRM  data  brings  it  all  together. 
For  instance,  information  about  the 
number  of  different  aircraft  a  customer 
services  helps  salespeople  target  their 
pitches  and  suppliers  forecast  demand. 

Customer  Value 

Aeromaritime  Mediterranean  Corp.  in 
Chantilly.  Va..  is  one  customer  that  has 
embraced  Aviall's  technology'.  The 
S50  million  corporation  consolidates 
and  ships  orders  for  helicopter  over¬ 
haul  service  companies  worldwide. 

Group  logistics  director  |ohn  Strick¬ 
land  goes  to  AvialLcom  first  thing  each 
morning.  Aviall's  Web  site  has  stream¬ 
lined  his  ordering  process  fn)ni  two 
hours  to  20  minutes  a  day.  he  says, 
adding.  "We  see  the  price  immediately 
and  don't  have  to  ask  for  a  quote  and 
figua*  it  out.  And  for  every  line  item, 
we  can  put  a  different  delivery  date." 

Another  benefit  is  the  "instant  avail¬ 
ability  of  information,"  Strickland  says. 
"We  know  when  things  shipped.  We 
can  double-check  orders  and  see 
what's  outstanding,  go  hack  and  look  at 
shipment  dales,  check  current  orders 
to  see  if  we’ve  got  enough  and  when 
it’s  coming.  Wc  can  even  download  in- 
v»)iccs  and  see  them  ahead  of  time  be¬ 
fore  the  shipments  arrive." 

Aeromariiime's  overseas  facilities 
also  have  access,  “so  instead  of  calling 
and  a.sking  me  to  ask  someone  the 
status  of  an  order,  they  can  check  it 
themselves.”  Strickland  says.  His  de¬ 
partment  used  to  need  seven  people. 
Since  Strickland  started  using  Aviail.- 
com.  business  has  tripled  and  then 
doubled  again,  and  he's  handling  it  all 
with  four  people. 

But  many  customers  aren't  that  tied 
in  yet.  says  Peter  Armcnt.  a  principal  at 
JSA  Resc'arch  Inc.,  an  independent 
aen>space  equity  research  company  in 
Newport.  R.I.  “Currently  the  airline 
industry  is  in  a  large  restructuring,  so 
adoption  rates  arc  slow  initially."  he 
says.  "But  Aviall  is  building  for  the 
long  term,  and  they  have  a  large 


HI  said, ‘Guys,  we 
can  be  consenra- 


tive,  but  you  didn't  bring 
me  in  to  chip  away.  You 
want  a  great  company?  I 
can  return  it.  We'll  go  for 
the  gold.’ 

PAUL  FULCHINO.  CEO.  Aviall 

customer  base,  so  the  return  will  come 
as  these  services  are  adopted  by  the 
customer  base." 

Aviall  has  already  seen  lots  of  bene¬ 
fits.  Since  2000,  it  has  invested 
$30  million  to  S40  million  in  IT.  and 
revenue  has  grown  $431  million.  fn>m 
S372  million  in  1999  to  5803  million 
in  2002.  while  net  after-tax  profit  has 
risen  fn>m  S5  million  in  1999  to 
$27  million  in  2002.  Moreover,  says 
Fulchino.  Avtall's  value-added  serv'ice 
has  attracted  larger  suppliers  who  used 
to  handle  their  own  distribution. 

The  number  of  monthly  North 
American  sales  calls  has  tripled  with 
no  increase  in  the  sales  force,  and  even 
though  the  aviation  market  is  down, 
general  aviation  parts  sales  have  grown 
by  double  digits.  Kienzle  says. 

In  the  process,  Aviall  has  become  a 
much  more  integrated  business.  "I'm  a 
marketing  guy  leading  an  IT  prujeci 
I  AvialLcom]  working  with  IT.  ops. 
sales,  and  you  often  can’t  tell  where 
one  begins  and  the  other  end.s,"  says 
Dar  Hackbarth.  manager  of  e-busincss 
and  marketing. 

And  the  sior)*  continues.  Fulchino 
plans  to  continue  to  invest  $6  million 
to  $7  million  in  technology  yearly  to 
m.3kc  Aviall  indispcnsible  to  its  cus¬ 
tomers  and  suppliers.  "Wc  hoped  to 
double  our  size  in  five  years,  and  we 
did  it  in  two  and  a  half."  he  says.  “Now 
we  hope  to  double  again  in  another 
five  years.  We’ll  see."  I 
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provide  customers  and  suppliers  with 
ruuociat  technical  and  sales  advan¬ 
tages  by  dealing  with  Aviall.  “We  just 
needed  to  invest  in  technology  to  al¬ 
low  this  (o  happen,**  Ftilchino  says. 

That's  where  CIO  Joe  Lacik  comes 
in.  Lacik  had  been  hi^  in  late  1999  by 
the  previous  management  team,  and  be 
and  Fukhino  started  together  on  the 
first  workday  of  2000.  **1  told  my  wife, 
‘Honey,  this  could  be  my  shortest  job 
ever.’  ”  Lacik  recalls.  But  Fulchino  was 
willing  to  stick  with  the  team  he  inher- 
I  ited.  “My  message  was  the  same  to 

I  everyone:  'You’ve  got  six  months  to 

show  me  what  you  can  do.'  ”  he  says. 

“He  had  such  a  clear  and  crisp  vision 
of  what  be  wanted  to  do  with  the  com- 
t  P^.*  Lacik  recalls.  “I  just  had  to  Hg- 
ure  out  bow  to  make  it  happen." 

Fukhino’s  first  challenge  was  secur¬ 
ing  fiiumcing  for  a  multimiUion-dollar 
IT  investment.  ‘Tou  have  to  spend  a 
buck  to  make  two,"  Fulchino  says,  “but 
bankers  would  rather  spend  10  cents 
and  lose  20."  He  had  to  work  hard  with 
lenders  to  get  initial  funding,  then 
show  quick-hit  successes  for  continued 
fmancing.  As  the  plan  evolved,  Fulchi¬ 
no  deddiKl  to  make  it  all  a  quick  bit 
Initially,  the  turnaround  plan  was  to 
play  out  over  several  years,  but  he 
compressed  it  to  a  year. 

“llut  took  a  Heitnilean  effort  and  a 
significant  dollar  ^nd  as  well  as  get¬ 
ting  the  board  to  go  along,  given  that 
we  had  Just  come  off  a  difficult  year." 
says  Jim  Quinn,  vice  president  of  sales 
and  marketing.  “It  to^  extraordinary 
vision,  tenacity  and  guts." 

But  for  Fulchino,  it  was  a  no-brainer. 
“I  said,  'Guys,  we  can  be  conservative, 
but  you  didn’t  bring  me  in  to  chip 
away.  You  want  a  great  company?  I  can 
return  it  We’ll  go  for  the  gold.' " 

f^ocessProUeiRS 

That  decision  to  go  for  the  gold 
brought  political  challenges  for  Lacik. 
“l!  was  very  tough."  he  says.  ’The  busi¬ 
ness  [pcopkj  said,  ’The  last  thing  we 
need  is  (to  be]  investing  in  technology, 
especially  when  some  of  our  processes 
are  brokea  This  is  too  much,  too  fast. 
Back  offl* "  But  as  Lacik  developed 
closer  relationships  with  key  business 
managers,  a  blend  of  process  improve¬ 
ments  and  technology  support  began 
to  work.  "If  you’re  just  pushing  buttons 
and  pulling  levers,  it  can  be  a  disaster," 
be  sa^  “But  they  really  knew  their 
business  and  were  able  to  guide  me.” 

For  example,  a  sales  force  automa¬ 
tion  and  order  entry  system  from 
Siebel  Systems  Inc  was  the  primary 
tunuround  tool  in  sales,  but  Quinn 
knew  technology  akme  wasn't  enough. 


“Plenty  of  people  put  in  Siebel  and  still 
fail,”  he  says.  He  needed  to  make  his 
sales  force  accountable.  That  required 
training  and  discipline  in  time  and  ter¬ 
ritory  man^ement  as  well  as  use  of 
the  new  system  —  a  strategy  not  all 
salespeople  were  eager  to  embrace. 

“A  number  of  salespeople  opted  out," 
Quinn  recalls. 

Enforcing  the  new  processes,  which 
were  unpopular  with  a  lot  of  salespco- 
pie,  was  “a  pretty  gutsy  call  to  make 
with  the  company  going  the  wrong 
way  on  revenue,"  Lacik  says.  But  (^inn 
wouldn't  take  no  for  an  answer,  and  the 
processes  changed.  “It  was  a  difficult 
year."  Quinn  says,  “but  they  suned  to 
make  commission  checks  again,  and 
that  made  them  believers." 

Business  Transformation 

Meanwhile,  an  online  purchasing  sys¬ 
tem  from  BroadViston  Inc  enabled  the 
new  AvialLcom  site  to  offer  380.000 
parts  to  the  company's  17,000  cus¬ 
tomers.  using  20.000  pricing  matrices. 
Web  sales  as  a  percentage  of  total  rev¬ 
enue  have  grown  by  about  60%.  while 
costs  per  order  have  been  cut  from  $7 
by  phone  to  39  cents  via  the  Web. 

In  operations,  upgrades  to  an  inven¬ 
tory  control  and  warehouse  manage¬ 
ment  system  from  Catalyst  Manufac¬ 


turing  Services  let  Senior  Vice  Presi¬ 
dent  Charley  Kienzie  move  $200  mil¬ 
lion  in  inventory  to  a  new  warehouse 
over  one  weekend  without  missing  a 
beat.  Upgrades  to  the  product  alloca¬ 
tion.  inventory  management  and  fore¬ 
casting  software  from  Xelus  Inc.  pro¬ 
vided  more  collaborative  forecasting. 

For  example,  sales  leaders  can  make 
educated  guesses  about  inventory 
needs  based  on  maiket  conditions. 
Soon,  major  customers  may  have  a 
view  into  the  Aviall  pipeline  to  help 
better  manage  their  own  inventories 
and  improve  Aviall’s  forecasting 

Integration  of  the  various  systems 
with  CRM  data  brings  it  all  together. 
For  instance,  information  about  the 
number  of  different  aircraft  a  customer 
services  helps  salespeople  target  their 
pitdies  and  suppliers  forecast  demand. 

Customer  Value 

Aeromaritime  Mediterranean  Corp.  in 
Chantilly,  Va..  b  one  customer  that  has 
embrac^  Aviall’s  technology.  The 
$50  million  corporation  consolidates 
and  sh^s  orders  for  helicopter  over¬ 
haul  service  companies  worldwide. 

Group  logistics  director  John  Strick¬ 
land  goes  to  AvialLcom  first  thing  each 
morning.  AvialTs  Web  site  has  stream¬ 
lined  his  ordering  process  from  two 
hours  to  20  minutes  a  day.  he  says, 
adding.  “We  see  the  price  immediately 
and  don't  have  to  ask  for  a  quote  and 
figure  it  out.  And  for  every  line  item, 
we  can  put  a  different  delivery  date." 

Another  benefit  is  the  “instant  avail¬ 
ability  of  information,"  Strickland  says. 
“We  know  when  things  shipped.  We 
can  double-check  orders  and  see 
what's  outstanding,  go  back  and  look  at 
shipment  dates,  check  current  orders 
to  see  if  we've  got  enough  and  when 
it's  coming.  We  can  even  download  in¬ 
voices  and  see  them  ahead  of  time  be¬ 
fore  the  shipments  arrive." 

Aeromaritime’s  overseas  facilities 
also  have  access,  “so  instead  of  calling 
and  asking  me  to  ask  someone  the 
status  of  an  order,  they  can  check  it 
themselves,"  Strickland  says.  His  de¬ 
partment  used  to  need  seven  people. 
Since  Strickland  started  using  Aviall.- 
com,  business  has  tripled  and  then 
doubled  again,  and  he's  handling  it  all 
with  four  people. 

But  many  customers  aren’t  that  tied 
in  yet,  says  Peter  Arment.  a  principal  at 
JSA  Research  Inc.,  an  independent 
aerospace  equity  research  company  in 
Newport,  RX  “Currently  the  ai^c 
industry  is  in  a  large  restructuring,  so 
adoption  rates  are  slow  initially,"  he 
says.  “But  Aviall  is  building  for  the 
long  term,  and  they  have  a  large 


»  I  said, ‘Guys,  we 
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me  in  to  chip  away.  Ybu 
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customer  base,  so  the  return  will  come 
as  these  services  are  adopted  by  the 
customer  base." 

Aviall  has  already  seen  lots  of  bene¬ 
fits.  Since  2000,  it  has  invested 
$30  million  to  $40  million  in  IT,  and 
revenue  has  grown  $431  million,  from 
$372  million  in  1999  to  $803  million 
in  2002,  while  net  after-tax  profit  has 
risen  from  $5  million  in  1999  to 
$27  million  in  2002.  Moreover,  says 
Fulchino,  Aviall’s  value-added  service 
has  attracted  larger  suppliers  who  used 
to  handle  their  own  distribution. 

The  number  of  monthly  North 
American  sales  calls  has  tripled  with 
no  increase  in  the  sales  force,  and  even 
though  the  aviation  market  is  down, 
general  aviation  parts  sales  have  grown 
by  double  digits,  Kiciule  says. 

In  the  process,  Aviall  has  become  a 
much  more  integrated  business.  “I'm  a 
marketing  guy  leading  an  IT  project 
[Aviall.com]  working  with  IT.  o^. 
sales,  and  you  often  can't  tell  where 
one  begins  and  the  other  ends,"  says 
Dar  Hackbarth,  manager  of  e-business 
and  marketing. 

And  the  story  continues.  Fulchino 
plans  to  continue  to  invest  $6  million 
to  $7  million  in  technology  yearly  to 
make  Aviall  indispensible  to  its  cus¬ 
tomers  and  suppliers.  "We  hoped  to 
double  our  size  in  five  years,  and  we 
did  it  in  two  and  a  half."  be  says.  "Now 
we  hope  to  double  again  in  another 
five  years.  Well  see,”  I 
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IT  without  borders 


Are  you  contemplating  or  have  you  outsourced  part  or  all  of  your 
IT  operations?  Are  you  taking  the  on-shore  or  off-shore  route? 

What,  if  any.  obstacles  do  you  see  to  offshore  outsourcing. 

What  benefits  do  you  hope  to  reap? 

We  want  to  hear  about  your  experiences  so  we  and  your  peers  can  get 
a  clear  picture  of  where  outsourcing  stands  in  today’s  IT  strategies. 

We  invite  you  to  participate  in  the  Computerworld  and  InterUnity 
Group  survey  on  the  Best  Practices  and  Emerging  trends  in 
On-Shore  and  Off-Shore  Outsourcing. 

If  you  complete  the  entire  survey,  you  wili  receive 
a  complimentary  report  of  the  findings. 

(All  responses  will  remain  confidential). 

To  participate  in  the  survey,  please  visit: 

http://websurveyor.neVwsb.dll/11829/interunityoutsource.htm 


Need  more  information?  Rease  contact  research@computerworid.com. 
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Divide  the  changes  into  manageable  chunks, 
enlist  users  as  mlies,  and  deliver  more  than 
you  promised.  By  Robert  L.  Scheier 


SURVIVM6 
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TODAY'S  weak  economy  makes 
upgrading  major  business 
systems  harder  than  ever. 
Management  has  little  pa¬ 
tience  for  IT  projects  that  go 
over  budget  or  don’t  deUver 
the  promised  savings.  Users 
doing  their  own  jobs  plus  the 
woik  of  two  or  three  laid-off  colleagues 
have  little  interest  in  cooperating  with 
an  upgrade  effort,  especially  if  the  new 
system  n%ht  eliminate  their  jobs  next. 

But  the  economic  cnmch  that  is 
making  software  upgrades  so  painful 
right  now  is  also  increasing  the  pres- 
stire  to  do  those  upgrades 
quickly  and  well  Compa¬ 
nies  desperate  to  squeeze 
out  costs  and  improve 
profits  are  ui>gradlng  to 
newer,  Web-based  versions  of  ERP  sys¬ 
tems  that  allow  them  to  fme-^une  pric¬ 
ing  and  reduce  costly  inventory  [<^ck- 
Link  34987].  Other  companies  are 
looking  to  migrate  from  proprietary 
s3rstems  to  less-expensive,  open-source 
software  such  as  Ijmiy 
If  you  manage  an  upgrade  well  in 
these  trying  times,  you  can  earn  points 
with  your  employer,  improve  your 
marketable  skills  and  at  least  make  life 
easier  for  yourself  and  those  around 
you.  The  keys,  say  veterans  of  the 
process,  are  to  dump  the  arrogance 
regarding  users,  divide  the  painful 
changes  into  manageable  chunks,  and 
underpromise  and  overdeliver. 

“I  promise  absolutely  as  little  as  I 
can  get  away  with,”  says  Damien  Bean, 
vice  president  of  corporate  systems  at 
Hilton  Hotels  Coip.  in  Beverly  Hills. 
Calif.,  and  one  of  ComputerworUfs  Pre¬ 
mier  100  IT  Leaders  for  2003.  “Don’t 
overpromise  —  that’s  the  death  of 
every  big  upgrade.” 

Smaller,  incremental  upgrades  are 
more  likely  to  meet  everyone’s  expec¬ 
tations  than  “big-bang  projects,”  says 
Bean.  And  because  they  involve  less 
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change  at  any  given  time,  incremental 
upgrades  generate  less  resistance  from 
skeptical  users  or  manners. 

NoMoreAirogance 

One  of  the  biggest  obstacles  to  suc¬ 
cessful  upgrades  is  users’  negati^«  ex¬ 
periences  with  previous  upgrades,  says 
Catherine  Walters,  an  mdei>endent 
project  management  consultant  in 
Worcester,  Mass.,  who  has  manned 
many  upgrades  for  an  East  Coast  fr- 
nancial  services  Ann.  She  says  users 
remember  upgrades  when  k^  systems 
were  unavailable  for  days,  causing 
them  extra  work.  When 
they  hear  of  a  new  upgrade, 
she  says,  their  response 
is,  tn*  is]  going  to  do  it 
to  us  again.” 

Walters  advises  that  you  acknowl¬ 
edge  past  fulures  but  stress  bow  much 
the  upgrade  team  has  learned  since 
then  and  point  out  that  users  can  play 
a  positive  role  in  creating  a  successfril 
outcome  this  time. 

“They  have  a  contribution  to  make 
if  they  can  get  their  hands  dirty  and  be 
involved  in  testing  and  helping  to  write 
the  user  manuals,”  she  says.  Talking 
down  to  users  or  keeping  technical  de¬ 
tails  from  them  is  counterproductive, 
she  adds,  because  many  users  are  for 
more  technologically  savvy  than  they 
used  to  be.  If  some  users  i^eed  hand¬ 
holding,  give  it  to  them,  if  you  can 
afford  it 

“Just  sitting  and  talking  with  some¬ 
body  and  helping  them”  with  common 
chores,  such  as  settii^  up  a  new  appli¬ 
cation  so  it’s  linked  to  a  familiar  print¬ 
er,  is  all  that  some  users  need  to  feel 
more  comfortable,  says  Connie  Eaton, 
a  senior  business  analyst  at  GM  Name¬ 
plate,  a  LOOO-person  manufacturing 
firm  in  Seattle. 

It’s  vital  to  have  users  who  know  the 
business  on  the  upgrade  team,  says 
David  Richards.  CIO  at  Pacific  Steel 
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and  Recyctii^  in  Great  Falls.  Mont. 
They’re  your  most  knowledgeable 
people.  You  need  to  get  their  knowl¬ 
edge  and  to  get  their  buy-in”  so  they 
can  generate  support  for  the  upgrade 
among  other  users,  he  says. 

Rich  Bursek,  senior  vice  president  of 
online  strategy  at  ViitualB^  Mort¬ 
gage,  a  subsidiary  of  Lydian  Trust  Co. 
in  Palm  Beach  Gardens.  Fla.,  is  fuiish- 
ii^  the  installatioo  of  a  new  mortgage- 
processing  system,  perhaps  the  single 
most  critical  application  for  the  online 
mortgage  lender.  Many  of  the  business 
staffers  who  process  mortgages  were 
included  tn  the  selection  process.  “We 
really  wanted  to  make  it  their  choice 
. . .  instead  of  them  thinking  they  were 
getting  pressured  by  the  IT  depan- 
ment.”  Bursek  explains. 

Eaton  says  that  when  she  asks  a  user 
to  help  evaluate  potential  software 
purchases,  she  typically  goes  with  the 
user’s  choice  unless  there  is  a  good 
reason  not  to  do  so. 

Wiiming  over  users  also  requires 
scheduling  the  planning,  development, 
rollout  and  trainii^  to  avoid  crunch 
work  times  for  users  and  managers. 
Bursek  scheduled  any  upgrade-related 
meetings,  such  as  progress  reports  or 
appointments  with  vendors  that  might 
involve  users,  within  the  first  two 
weeks  of  the  month,  avoiding  the  end- 
of-the-ffionth  period  when  most  mort¬ 
gages  close.  That’s  important,  because 
the  users  don’t  earn  their  commissions 
until  the  mortgages  close. 

At  Hilton,  ‘*we  have  to  be  cognizant 
of  the  fact  that  [users  are]  continuing 
to  operate  their  business  in  a  very,  very 
tou^  time  for  the  travel  industry,”  says 
Bean.  They  don’t  have  a  lot  of  extra 
hands  available  at  the  moment.”  Realiz¬ 
ing  that  system  training  will  always  take 
a  teck  seat  to  day-to-day  operations, 
Richards  advises  budgeting  for  some 
after-hours  and  weekend  training. 

No  Forced  Marches 

One  major  reason  upgrades  fail  is  that 
IT  pnHect  managers  try  to  change  both 
software  and  business  processes  at  the 
same  time,  says  Beait  He  reduces  the 
risk  of  ftuhire  and  culture  shock  by  up¬ 
grading  applications  first  and  then 
phasing  in  new  features  that  force 
changes  in  how  users  do  their  jobs. 

At  Lydian,  Bursek  has  even  cus¬ 
tomized  some  portions  of  the  new 
processing  application  so  it  "mocks" 
some  of  the  existing  workflows  to 
which  users  are  accustomed,  and  he 
has  delayed  implementation  of  a  fea¬ 
ture  that  would  suggest  to  mortgage 
processors  which  loan  program  is  best 
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for  a  customer.  "If  the  system  were  to 
make  a  mistake,  or  we  made  a  mistake 
in  the  setup,  and  it  was  noticed  right 
away,  it  would  have  given  bad  marks  to 
the  rollout,”  he  says. 

One  of  Bursek's  best  moves  in  win¬ 
ning  the  hearts  and  minds  of  users,  be 
says,  was  hirii^  a  help  desk  specialist 
whose  job  h  is  to  understand  (be  new 
system  "inside  and  out"  When  the  ap¬ 
plication  is  rolled  out  the  entire  eight- 
person  upgrade  team  will  stay  with  the 
mortgage  processors  for  30  days  to  an¬ 
swer  any  questions  and  prevent  bu»- 
ness  intemiptions.  Burst’s  goal  to 
avoid  the  perception  "that  the  IT  team 
walked  away  from  the  implementation." 


Successful 

Upgrades 

■  Orair  pietoM  of  wtrMewi  io  en¬ 
courage  users  lo  share  their  kncNvIedge 
of  low  new  systene  shoiM  work,  arid  to 
show  why  thek  involyemenl  In  Vo  upgrade 
isimporl^. 


■KaMunrB>no(dm«tapeta- 
sdMdida  training  Umat  to  avoid  peak 
work  periods  Write  trainino  tnanu^  that 
indude  the  joformalion  they  need. 


■  Hava  a  atkk  handy  in  Um  farm  of 
aacuUwa  wgport  to  press  retudant 
users  to  go  alorio  with  the  upgrade. 


■  Hm  a  carrot  handy  in  tha  form  of 
anmgfaa  of  how  the  upgrade  wicfimi- 
nate  (kudgery  or  give  users  new  sUh. 
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the  prornised  resportse  arid  throughput  by 
using  automated  testing  loots. 
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After  the  30  days,  the  team  will  focus 
on  rolling  out  the  application  to  anoth¬ 
er  business  unit  Altltou^  team  mem¬ 
bers  will  still  be  available  to  make  en¬ 
hancements  to  the  application,  most  of 
the  day-to-day  support  wiU  be  handled 
by  the  dedicated  help  desk  specialist. 

For  IT  managers,  losing  the  arrogant 
attitude  doesn’t  mean  you  cani  and 
shouldn't  be  forceful  when  needed.  At 
Pacific  SteeL  Richards  interrupted  a 
training  session  to  remind  complaining 
users  why  the  upgrade  was  vital  Tlie 
new  system,  be  told  them,  would  speed 
the  delivery  of  information  such  as  the 
proflcability  of  various  products. 

"In  order  to  get  that  new  informa- 
tiem.  sometimes  you  have  to  do  thing«^ 
a  little  different."  be  told  them.  "After 
that."  he  says,  "they  seemed  to  accept 
it  a  little  better."  Walters  recommends 
developing  "advocates  among  senior 
management.  hopefoUy  ahead  of  time, 
who  can  run  interference  if  necessary" 
and  overcome  users’  resistance. 

Even  in  tough  times,  teamwork  and 
humility  go  a  long  way.  "You  always 
surround  yourself  wi^  very  sman  peo¬ 
ple."  says  Bursek.  "You  never  assume 
you've  got  the  right  answer,  and  you 
work  off  your  worst-case  scenario. 
Constantly  ask  yourselC  'Do  I  have  it  all 
covered?  Do  I  ha%re  it  all  covered?  Do  I 
have  it  all  covered?* " 

And  when  talking  to  users  or  others 
whose  cooperation  is  needed,  “even 
when  you're  almost  certain  you  know 
the  answer,  don’t  assume  —  just  ask 
the  question  anyway,"  says  Bean.  "Just 
the  sheer  action  of  asking  engenders 
cooperation."  I 


vmldafRBhnMiBlniirWlngiiqil*- 

toMn.  htiHponaidfaiBtf^.'HM  PB- 
,  fiinbm.«i<nMndngttfllramMi 
oAcb  to  hi^  «Mi  Iw  upvBdi. 

1  ctoil  ifew  enoitoh  how  toipiMM  I 
is  to  ItoM.  nd  to  M  pnpto  fto  Hnd 

ofwtowcliWMWBtodwif'BhtBto^'Gto- 
tog  tfMto  •  T'thM  «  a  oottos  owg  teni 
<to  g.  6hi«  twi  a  dwRoa  to  tol  ito  flair 
atoMB  andgto  Mr  han* 

•fhbmtLSe/im 


Scheierisafreelance  writer  in 
Boylston,  Mass.  He  can  be  reached 
at  rscheier@chaner.net. 


Ybu  always  sur¬ 
round  yourself 
with  very  smart  peo¬ 
ple.  Ybu  never  assume 
you’ve  got  the  right 
answer,  and  you  work 
off  your  worst-case 
scenario.  Constantly 
ask  yourself,  Do  I 
have  it  al  covered?* 

RICM  BWISeK,  SENIOR  VICE  PRESIDENT  OF 
ONUNE  STRATEOV.  VIRTUALBANK  MORTGAGE 
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Recoveries 

Quick  turnaround  on  FT  help  desk  calls 
b^ts  employee  satisfection  at  Baptist 
Health  Care.  By  lean  (  '.onsiK  k> 

APTiST  HOSPITAL  in  Pen- 
sacola.  Fla.,  used  to  be  no 
different  from  a  lot  of  other 
hospitals.  Top  executives 
didn’t  share  information  or 
include  the  staff  in  deci* 
sion-making,  and  that  fostered  a  per¬ 
ception  of  secrecy  among  workers. 
Employee  turnover  was  high  —  33%  in 
1996  alone  —  and  there  were  no  tools 
or  processes  to  measure  employee 
satisfaction. 

That  was  seven  years  aga  Since 
then,  parent  company  Baptist  Health 
Care  Corp.  has  done  an  about-face:  To¬ 
day.  the  employees  make  the  decisions 
and  fix  the  problems.  The  result  is  pa¬ 
tient  care  that  consistently  earns  top 
ratings,  a  nurse  vacancy  rate  of  2%  and 
the  lowest  annual  employee  turnover 
rate  ever,  at  U.4%. 

Baptist  executives  say  that  every  ini¬ 
tiative  to  improve  the  work  environ¬ 
ment  can  be  traced  back  to  IT,  whose 
mandate  now  is  to  measure  everything 
and  respond  immediately  to  all  service 
requests. 

CIO  Dave  Garrett  and  49  IT  workers 
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spread  among  four  technical  groups 
support  about  3,000  PCs  and  2,000 
printers  and  other  devices.  These  are 
scattered  across  Baptist  Health  Care's 
five  acute  care  &cilities  in  Florida  and 
Alabama,  a  behavioral  health  system, 
two  home  health  agencies,  one  long¬ 
term  care  facility  and  two  ambulatory 
surgery  centers. 

The  emphasis  is  on  executing  the 
basics  with  excellence.  “There’s  noth¬ 
ing  rocket  science  here,"  says  Garrett. 
“We’re  consolidating  services  and 
our  help  desk,  and  we  feel  good  about 
doing  it  while  improving  customer 
satisfaction." 

IT  gets  800  to  1,200  help  desk  calls 
per  month.  Any  hardware-  or  software- 
related  call  is  fair  game.  That  includes 
everything  from  desktop  software  to 
payroll,  laboratory,  radiology  and  hos¬ 
pital  information  systems  and  net¬ 
works,  plus  any  of  the  100  servers  run¬ 
ning  more  than  120  applications.  The 
help  desk  is  Level  2,  which  means  that 
the  maiority  of  calls  are  escalated  and 
assigned  to  someone  who  is  paged  and 
then  must  call  the  customer  back. 
"We’re  not  Level  3."  which  would  mean 
the  help  desk  could  resolve  problems 
immediately  on  the  phone.  Garrett 
says.  “But  I  hope  to  get  there  someday. 
In  our  environment,  we  would  need 
more  people,  and  then  more  people 
with  different  skills." 

In  the  meantime,  he's  finding  ways 
to  measure  and  improve  customer  sat- 
isfactioa  For  example,  when  the  help 
desk  doses  a  user’s  service 
request  ticket,  the  user  is  no¬ 
tified  via  e-mail  that  the  ser¬ 
vice  call  has  been  dosed  — 
but  the  call  isn’t  o^ially 
closed  for  reporting  statistics 
until  the  user  says  so.  When 
the  user  says  the  call  is  fin¬ 
ished.  within  a  few  minutes 
he's  automatically  sent  an 
online  survey  with  four  ques¬ 
tions.  The  answers  are  rated 
on  a  scale  of  1  to  5. 

“It  moves  really  fast,”  says  Garrett. 

"If  we  get  a  3  or  less  in  any  question,  it 
automatically  e-mails  the  leader  or  di¬ 
rector  of  that  area  here  in  IS,  and  it’s 
time  for  ‘service  recovery.’  We  call  the 
customer  and  apologize  for  not  meet¬ 
ing  their  expectations  and  ask  what  we 
can  do  better  next  time.  We  usually  do 
get  some  good  feedback.” 

Service  recovery  can  mean  more 
back-and-fortb  communication  be¬ 
tween  IT  and  the  user  to  determine 
what's  causing  a  recurring  pnfolem.  In 
other  cases,  IT  has  been  known  to 
send  a  user  something  ftom  the  gift 
shop  —  in  addition  to  fixing  a  problem 
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Baptist 
Heal  A  Care 

■  About  50%  of  all  employees  ot 
nurses.  There  are  5,600  employees 
at  Baptist  Health  Care  and  1,700  at 
BapOst  Hospital. 

■  22,000  admissions  per  year 

m  Not-for-profit  •  operates  on  a  2% 
margin 

■  2003  IT  budget  of  about  S3.S  million 

■  49  IT  empkiyoes 

■  Spends  an  estimated  SI  mHBon  per 
year  to  maintain  complancs  wtth  the 
Hedlh  Insurance  Portibtfty  and 
AccountabflKy  Act  of  1996 


•  One  of  Fortune's  100  Best  Compa¬ 
nies  to  Work  For  In  2002  and  2003 


that  may  have  taken  a  little  extra  time. 

To  keep  people  interested  in  com¬ 
pleting  the  surveys,  IT  each  month 
randomly  draws  a  survey  number  and 
rewards  the  winner  with  a  S2S  gift  cer¬ 
tificate  to  Sam’s  Club  or  MW-Mart.  The 
feedback  program  began  in  December, 
and  the  satisfaction  rating  today  is  4.868. 

The  application  that  creates  the  help 
desk  service  request  tickets  was  devel¬ 
oped  in-house  and  is  Lotus  Notes- 

based.  All  tickets  are  viewable 
by  anyone  who  has  access  to 
Notes,  which  is  in  line  with 
Baptist's  no-secrets  culture. 

Both  Garrett  and  Bob  Mur¬ 
phy.  Baptist  Hospital's  chief 
operating  offuxr,  say  their  en^ 
ployees  are  hard-workup  peo¬ 
ple  who  are  dedicated  to  main¬ 
taining  the  quality  of  service  at 
Baptist  But  in  order  to  do  that, 
they  need  to  know  wl^re  they 
stand  at  all  times. 

“What  impresses  me  about  what  IS 
has  done  is  that  they're  measuring," 
says  Murphy.  “They  want  to  know 
what  their  customers  are  saying,  and 
when  the  customer  is  not  satisfied,  diey 
respond  and  try  to  make  h  better.  That’s 
the  key  —  we’re  never  going  to  be  per¬ 
fect  We  just  have  to,  when  we  drop  the 
ball,  respond  appropriately  and  do 
what  we  call  here  ‘service  recovery.’  ”  I 
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lean)  about  BapOst  HeaUi  Cm's  pragmaiic  approach 
to  lagUWoiy  compiance  and  patient  quaWy: 
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Olva  Ovratt,  CIO 
at  Baptist  HMHh 
C«aCorp. 
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\M«l’ianyaurplMinaw7Thechal- 
lerxje  I  lace  6  tvwoMd;  Making  sure 
that  carving  out  Ihe  00  role  here  at 
Mandalay  adds  value  to  the  business 
whde  at  the  same  time  looking  forward 
and  further  develooing  IT  strategies. 

An  yott  band  Mo  tfw  buMnoK 
MMmu?  Tm  been  here  nine  weeks 
and  I'm  getbng  tuned  in.  fffl  pwt  of  on¬ 
going  shaiegy  discussnn  with  the  cor¬ 
porate  and  property  marketing  groups, 
and  I  leei  very  lortmale  just  to  have 
been  puled  iMo  that  A  lot  ol  tunes 
CIOs  haM  to  ask  to  be  included,  and 
Mandalayhasbeenverywarmandre- 
ceotM  n  lerrm  ol  puling  me  right  n. 

Doyouhertpl—tereorpniiethe 

IT  stMl?  Beckise  I  had  been  doing 
some  eirtemal  consulting  work  with 
these  tolls,  one  of  the  ttwiQs  I  did  my 
lirstweeliwasreorganizethecorDO- 
rale  IT  group.  I  was  trying  to  add  in 
{managementl  talenl  lo  support,  tor 
example,  infrastructure  network  and 
operations  and  to  be  able  to  more 
gurchiy  meet  Ihe  busmess  demand. 

Hm  i«u  e«  pmoMl  goMi?  I  would 
be  happy  m  the  nead  yeer  If  whal  peo¬ 
ple  said  about  the  wey  we're  running 
this  IT  departmenf  is  that  there’s  no 
srnoic  and  mirrors.  .  Oflentvnes 
people  dvik  that  IT  is  cMterert.  and  I 
vnnl  people  Id  see  it  as.  *Vlfe  can  run  it 
just  Mre  any  other  arm  of  Ire  business.  * 

la  illiard  stepping  into  protects  in 

proenss?  It's  very  different  for  me  in 
lems  of  cortvng  from  a  background 
where  I  fauM  things  from  the  ground 
m.  But  (my  conaAing  experience]  is  i 
helping  me  get  my  arms  around  that.  I  I 


JOHN  BERRY 


Getting  ^ur  Project 
Monties  Ri^t 


Freedom  of  choice  can  be  as  paralyzii^  as  it 
is  liberating.  Decisions  are  suddenly  under¬ 
mined  and  muddled  by  uncertainty  in  the 
face  of  a  seemingly  limitless  array  of  possi¬ 
bilities  —  3,000  colleges,  hundreds  of  cars, 
20  different  portable  CD  players,  six  pages  of  menu 
items  to  wade  through.  Make  yom  choice  now  and 
stop  dithering! 

Many  IT  organizations  wrestle  with  the  same  kind 
of  paralysis  because  they  don’t  have  sound  decision- 

making  frameworks  to  help 
them  prioritize  technology 
investments.  At  the  same 


time,  they  face  a  prolifera¬ 
tion  of  new  technologies 
from  which  to  choose  and. 
frequently,  a  clamor  from 
excited  business  units 
pleading  for  competing 
projects  that  they  believe 
will  solve  different  press¬ 
ing  business  problems.  The 
IT  organization  sits  in  the 
middle  of  this  turbulence, 
attempting  to  balance  ex¬ 
ternal  supply  with  internal 
demand.  Executives  need 
to  concern  themselves  with  only  one 
question:  Is  the  proposed  project  sup¬ 
porting  business  goals? 

So  many  requests  and  so  little  fund¬ 
ing  suggest  that  sound  project  prioriti¬ 
zation  is  crucial  to  economic  value 
creation.  The  most  effective  prioritiza¬ 
tion  scheme  is  the  one  that  best  sup¬ 
ports  alignment  between  a  business 
strategy  and  IT.  But  project  prioritiza¬ 
tion  in  and  of  itself  doesn’t  ensure  this. 
For  example,  placing  a  $1  million  cost 
cap  on  any  one  project  to  ensure  that 
five  projects  can  receive  funding  with¬ 
in  a  S5  million  total  budget  is  certainly 
one  way  to  prioritize,  but  it's  not  nec¬ 
essarily  effective.  It’s  a  response  to  in¬ 
ternal  politics,  not  business  strategy. 


The  following  tech¬ 
niques  are  proven  frame¬ 
works  through  which  spe¬ 
cific  investment  proposals 
can  be  filtered  and  priori¬ 
tized  —  and  all  reinforce 
alignment  between  IT  and 
the  business. 

Hard  economic  forecast 
Assess  projects  along  hard- 
number  returns  only,  using 
ROI.  net  present  value  or 
another  preferred  method 
of  calculating  returns. 
Don't  include  intangible, 
hard-to-quantify  benefits, 
even  when  the  project 
champion  insists  that  strategic  bene¬ 
fits  exist  beyond  what  the  numbers 
say.  Then,  map  the  calculations  from 
the  project  list  against  the  company’s 
financial  goals  and  see  which  project 
comes  out  on  lop.  If  cost  containment 
is  the  company's  mandate,  a  project 
with  quick  payback  might  jump  into 
the  lead. 

This  is  a  very  strict  narrowly  fo¬ 
cused  approach  to  Investment  deci¬ 
sion-making.  but  if  the  numbers  are 
accurate  and  adjusted  for  risk,  "hard 
ROr  is  perfectly  aligned  with  finan¬ 
cial  goals. 

Hard  and  soft  sconomic  forecast  This 
is  the  same  as  above,  but  it  requires 
executives  to  make  qualitative  judg¬ 


ments  about  harder-to-measure  effects 
of  an  investment  scoring  their  impor¬ 
tance  and  including  this  in  the  out¬ 
come.  If  the  financial  goal  is  revenue 
enhancement,  a  customer-oriented 
project  that  came  out  as  Na  2  under 
a  hard-number  forecast  mi^t  jump 
to  No.  1. 

Ths  balanced  scorecard:  If  you  aren't 
familiar  with  Kaplan  and  Norton’s 
bible,  The  Balanced  Scorecard:  Thins- 
laring  Strategy  Into  Action,  read  it  It 
lays  out  a  set  of  principles  and  analytic 
techniques  for  improving  a  company's 
performance  by  focusing  on  four  gen¬ 
eral  areas:  financials,  customers,  learn¬ 
ing  and  internal  processes. 

The  causal  relationship  among 
the  four  perspectives  from  internal 
to  fmancial  is  a  very  useful  way  to 
think  about  the  order  in  which  proj¬ 
ects  must  be  deployed  to  reach  in¬ 
tended  financial  outcomes.  Ironically, 
you  don’t  even  need  to  adopt  the  bal¬ 
anced  scorecard  companywide  to  take 
advantage  of  its  powerful  project- 
funding  logic. 

Corecompsteoctos:  The  idea  here  is 
to  prioritize  IT  projects  based  on  what 
the  company  already  does  well.  Which 
assets,  skills,  capabilities  and  talents 
can  you  exploit  through  a  particular 
IT  investment?  A  company  might  have 
a  loyal  customer  base  because  it  has  a 
great  brand.  If  the  financial  goal  is  im¬ 
proved  earnii^s.  consider  which  pro¬ 
posed  customer-oriented  project  you 
can  leverage  to  meet  it. 

Despite  the  qualitative  nature  of 
some  of  the  scoring  within  these 
frameworks,  all  support  the  align¬ 
ment  imperative,  if  deployed  proper¬ 
ly.  Consider  one  or  a  mix  of  all  in 
your  prioritization  practices.  The 
choice  IS  yours.  I 


WMTimonioii? 

F«rimccAimrisandllnlistoour3rct»«s.o^ 


Tivoli 


s  ,1'  a  ■  '  VJ  ;■ 

than  ever  You  II  tiOu"  i  '  ■■  ,•  '  'f  ■ 

t^KO  business  results  Fo'' /•-  :  -  . 


■■.-.are  that  self-configures.  self-heals. 

^  A'o  ■  <Jemand  business  is  more  manageable 
i.ne  ■  ^Ks  and  more  time  on  important  things  — 

"  III  can  help  you.  visit  ibm.com/tlvoll/seeit 


IT  (  I'l'C  rs.i  ■nil  1 


IT  (,\i  i  cM  ■  rs 


Computerworld  *  InfoWortd  •  Netwofit  World  >  May  26.  2003 


IT  (  il  I  r ( •  I  n  .1  ■(  )l  1 1 


IT  i  .1  1  f  I  ■ 


CompulerworkJ  *  InloWorld  •  Network  Work)  *  May  26.  2003 


IT  I'Cf  rs  A'(  Jt  1 1 


IT  cai  rcrs 


PROGRAMMER/AN 


ALYST  wanted  by 
software  developer  in 
Houston.  TX.  Must 
have  degree  &  exp. 
Respond  by  resume 
only  to:  Mr.  H.  Morris, 
V/K  -  #10.  Solid 
Software  Solutions, 
LLC,  3300  S. 
Gessr>er,  Ste.  201, 
Houston,  TX  77063. 


The  World 
Of  Work  Is 
Changing 


Luckily, 

We  Are  Too! 

Now  powered  by 
CareerJournal.com! 


Check  us  out! 
WWW. itcareers.com 
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Powerful  Minds  Attract 

Looking  for  a  ^  cutting  edge  0*  ttchixrtoer’  This  s  tfie  place.  People  nere  love  ine»  xiofk  because  they  get  to  tti«*  tMg  and  dream  0*.  Combine 

your  prwen  skills  with  our  lesources  -  and  really  take  off.  Mioosott.  Micfosott  Business  SoKibons.  and  FR»  have  the  following  opportunities  available 

AuMMl  T«im 

Software  Engineers.  Software  Design  Engineers.  Applications  Devefopmem  Consultants.  Software  Animators.  ArtistV Animators 

NewTMi,  NY 

Business  ControOers.  Marketing  Managers 

Sett  Lake  Cttji.  UT 

Software  Engineers.  Software  Animatois.  Developer  Evangelists 

Mountain  Vlaw,  CA 

Softwaie  Engines,  Program  Managers.  Database  AdmmistfaiDrs.  Hardware/Elearomc/Design  Engineers.  Tecnnolo^  or  Teen  Ops  Systems  En^ieers 

San  Ffaoclaeo.  CA 

Technical  Account  Managers 

Santa  Mentea.  CA 

Computer  Systems  Analysts  (Consultant),  Softwaie  Engineers  (Systems) 

Irvtna,  CA 

Business  Strata^  Analysts 

Raifenond.  WA 

Technical  Specialists.  Software  Engineers.  Program  Managers.  Product  Managers.  Analysts.  Financial  Analysts.  Research  Ary^ysts.  Business  Analysts 
Siwness  Dwtopm^  Analysts  Business  Developmeni  Managers.  Database  Admimstrators.  Directors.  Eiectncai  Engineers  Matkebng  Managers  Network 
Prodi^  Designers.  Reiabiiity  and  Hardware  Test  Engneers.  Support  Engineers  Systems  Analysts  Consukanis  Systems  Engrwers  Tecnmcai 
Writers  Editors  Training  Specialists.  Usability  Engneers  ^ 


Computer  and  foformatjon  Systems  Managers.  Software  Engneers  Program  Managers 

WMthMi,  MA 

Technoloei  Product  Specialists.  Technology  Specialists 

SoMMIoU.  Ml 

Managing  Consultants 

Ctartetta,  NC 

Support  ^neers  Software  Engneers.  Developer  Support  Engneers  Applications  Development  Consultants.  Escalation  Engneers.  Support  Enameers 
Support  Profossionais.  Support  Analysts.  Technical  Account  Managers 

Rndtoy,OH 

Software  Engneers.  Pne^m  Managers 

Farga.  ND 

Product  Managers.  Software  Engneers.  Technical  Trainers 

Fort  Utidifdali.  R. 

(Site  Engneers)  Operations  Analysts 


Technofogr  Specialists.  Consultants.  Business  Analysis.  Prtxiuct  Technoic^  Specialists 

IntaC/lM  CoAMO/DaBaa,  TX 

Support  Engneers.  Support  Profess«nafs.  Developer  Support  Engneers.  Sotubon  integration  Er^neers.  Escaiauon  Engneers.  Apphcation  Deyeto^neni 
Consultants.  Technical  Leads.  Partner  TecnrHcai  Leads.  Consultants.  Artists/Animstors.  Business  Analyst  Customer  Reiabonship 

HeiwtM,  TX 

Business  Productivity  Advisor 

Denver.  CO 

Software  Engneers  -  FRX  Software 

All  poslbona  e«er  competitive  salary  and  etceiteni  benefiis.  uKSuding  bonuses  and  sax*  opbons.  E-rnse  your  resume  in  ASai  wo  fornwt  to:  joCsOmicnjaoflxom 

Ondi^  Job  Code  ^2dnO503  «  foe  subject  headerL  Or  mall  your  resume  to:  Microsoft  Corporation.  Attn;  Recmibng  Department  fob  Code:  A23ttvOS03. 
One  Microsoft  Way.  Redmond.  WA  96052'8303.  No  phone  caAs  please.  We  are  an  equal  opportunity  emptoyer  ana  support  wortetoroe  dtversey.  Piesse  wait 
our  Web  site  for  more  information. 


UMiaosaft 


www.mlcrosofLconVcareers 


Blue  Star  Motaeft  is  fmng 
all  fovets  of  Software 
Engneers.  PiogAnalysis. 
Bus  Aftafyais  (leeftnieaf). 
Business  Oev.  Heads. 
General  A  Operations 
Martagers.  Projact  Mana¬ 
gers  A  Dalab^  Aftiwv 
isiralors  .  Send  resumes  to 
HR  Manager.  Bfoa  Star 
Inlotach.  S60  VMey  Vtfoy. 
MHpitas.  CA  9S035  May 
ba  placed  at  dient  sees 
rationwida 


Aries  Solutions 
Inti  Inc  is  hiring  all 
levels  of  System 
Administrators. S 
end  resumes  to 
635  Atherton 
Place.  Hayward. 
CA  94541. 
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May  p4Bn.  caerdaiMa  ana  mwia- 
man  lacurKy  maaaurei  le  sa*a- 
guafO  comeiMr  aatncaaaa  Must 
nave  ie  nionms  amananea  wah 
Una.  Orada  lx.  a.  PavMapar 
ZOOO.OeAonOraGia.  MuMhave 
a  Da«^am  Oo^w  ai  CompuH' 
Soance  or  Soara  EducaWn  ana 
18  nMna  ol  coTHMiat  prtOaa- 
Monal  mlslxd  aipanencB  Post- 
Ion  a  40  nam  a  eaafc  min  a 
salary  d  SS7,700  a  year  Must 
nova  praol  d  lagd  auOwniy  t» 


knoBladoa  at  MnOsin  NT.  Mn- 
dOMa  88.  VNual  Bose,  and  OC*«. 
MFC.  and  Poal  Obisd  Ssrmr.  Unu 
Snaa  Sow.  J»i»  Sow.  ASP  and 
OPEN  MVBITOR.  otyad  oianlsd 
PTyniTain  and  tram  iTitnail  pin 
0>anunng  Salary  tBS.S82ryaar. 
•AF.B-5  SuCnwaaooepiaacaias- 
wna  to  Caaa  Nunttar  200118573, 
labor  Eienanga  oniea,  18 


MILLIONS  OF 
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MILLIONS  OF 
SURFERS 

ONLY 
THOUSANDS 
OF  DOLLARS 
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IMPACT 

TOTAL 

SAVINGS 


Put  your  message 
in  IT  Careers  and 
IT  careers.com 
and  reach  the 
world’s  best 
IT  talent. 
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How  to  Contact 


We  invife  readers  fo  caW  or  write  with  iheir  comments 
and  ideas.  It  is  best  to  submit  ideas  to  one  of  the  department 
editors  and  the  appropriate  beat  reporter. 
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Continued  from  page  I 

Computon 

on  a  monthly  basis. 

Analysts  said  new  IT  pric* 
ing  approaches  are  needed  to 
support  the  emerging  utility- 
based  computing  capabilities 
being  olfered  by  HP  and  rivals 
such  as  IBM  and  Sun  Micro¬ 
systems  Inc  Those  two  com¬ 
panies  said  they  also  have 
pricing  updates  in  the  worics. 

But  the  computon  concept, 
which  is  due  for  initial  testing 
within  HP  early  next  year,  did 
not  wow  IT  executives  inter¬ 
viewed  last  week. 

“It  sounds  too  complicated 
to  me,"  said  Malcolm  Fields, 
CIO  at  HON  Industries  Inc.,  a 
maker  of  olTice  furniture  and 
fireplaces  in  Muscatine,  Iowa. 

"llie  last  thing  that  we  need 
is  another  complicated  licens¬ 
ing  scheme,"  Fields  said. 
“What  we  need  is  a  quick  and 
easy  way  to  buy  more  comput- 
ii^  power,  and  I  need  to  be 
able  to  buy  it  in  very  small,  in¬ 
expensive  increments." 

“Pm  not  sure  I  would  like  it 


Continued  from  page  1 

Visas 


for  such  legislatioa 
Unless  Congress  acts,  the 
H-IB  cap  is  due  to  drop 
195,000,  its  limit  for  the  past 
three  years,  to  65,000  in  Octo¬ 
ber,  the  start  of  the  2004  fiscal 
year.  But  the  L-1  visa,  which 
has  no  cap.  has  become  as 
controversial  as  the  H-IB. 

The  L-1  program  was  de¬ 
signed  to  let  companies  with 
subsidiaries  abroad  transfer  to 
the  U5.  executives  or  workers 
who  have  specialued  skills. 

But  critics  contend  that  U5. 
companies  are  using  foreign 
outsourcing  firms,  known  as 
“body  shops,"  to  import  IT 
workers  with  L-1  visas  and  re¬ 
place  higher-paid  employees. 
Last  year,  the  government  is¬ 
sued  S7J00  L-1  visas. 

In  his  biU,  U.S.  Rep.  John 


It  sounds  too 
complicatecl 
to  me.  The  last 
thing  we  need  is 
anomer  compli¬ 
cated  licensing 
scheme. 

•MtLCOLH  FietDS  CIO 
HON  INDUSTRIES 


at  all,  and  I  don’t  think  it 
would  fly."  said  Tun  Cronin, 
manager  of  IT  at  Nobel  Bio- 
care  USA  Inc.,  a  Yoiba  Linda. 
Calif. -based  maker  of  dental 
implants.  “How  in  the  world 
vn>uld  you  calculate  all  the 
variables.*" 

HP  probably  will  be  able  to 
“come  up  with  some  matrix 
that  will  look  very  impres¬ 
sive,"  Cronin  added.  But  be 
also  questioned  whether  IT 
managers  would  be  able  to 
measure  their  computon  usage 
and  whether  the  plan  would 
provide  cost  benefits  to  users. 

Evolutionary  step 

Some  analysts  were  more  pos¬ 
itive  about  HP’s  plan,  desaib- 
ing  it  as  an  evolutionary  step 
in  the  development  of  utility- 
based  computing. 

"We  will  eventually  gel  to  a 
point  where  [IT  vendors) 
charge  for  usage  in  real  time," 
said  Thornton  May,  a  futurist 
in  Biddeford^  Maine,  and  a 
Computerworld  columnist.  “If 
you  want  electricity  on  a  hot 
day.  you  pay  more.  If  you  want 
bandwidth  on  a  busy  pipe- 


trafTic  day,  you  pay  more." 

Efforts  by  IT  services  ven¬ 
dors  like  HP,  IBM  and  Sun  to 
develop  new  methods  of  pric¬ 
ing  for  utility-based  comput¬ 
ing  “are  well  placed,"  said 
Howard  Rubin,  executive  vice 
president  at  Meta  Group  Inc. 
in  Stamford,  Conn. 

But  Rubin  said  the  task 
won’t  be  an  easy  one.  “When 
true  physics  aren’t  involved, 
it's  hard  to  come  up  with 
something  meanii^Ail,  au¬ 
ditable  and  defensible  for 
pricing."  he  noied. 

In  addition,  Rubin  said  that 
he  doesn't  think  rival  vendors 
will  work  together  to  develop 


a  standard  capacit)'-on* 
demand  pricing  metric. 

A  spokesman  for  IBM  said 
it’s  now  offering  mainframe 
Linux  hosting  customers  a 
"service  unit”  pricing  ap¬ 
proach.  The  pricing  is  l^sed 
partly  on  the  cost  of  the  hard¬ 
ware  being  run  by  IBM.  as 
well  as  its  IT  labor  costs.  IBM 
also  factors  in  the  average 
amount  ofhourly  mainframe 
CPU  capacity  used  over  a  24- 
hour  period  and  then  tracks 
monthly  utilization  rates  to 
come  up  with  the  service  unit 
cost,  the  spokesman  said. 

In  April.  Sun  introduced  a 
pricing  metric  called  the  Sun 


Mica  (R-Fla.)  called  the  L-1 
visa  a  “back  door  to  cheap  la¬ 
bor."  The  proposed  legislation 
would  require  that  employees 
be  transferred  from  subsidi¬ 
aries  and  not  from  third-party 
outsourcers. 

But  Mica’s  bill  may  face  op¬ 
position  from  all  sides. 

Mike  Emmons,  an  Orlando- 
based  activist  who  said  he  lost 
his  consulting  Job  because  of 
the  L-1  visa,  lobbied  Mica 
heavily  but  said  he’s  disap¬ 
pointed  with  the  proposed  frx. 

Emmons  said  the  legislatioo 
includes  a  targe  loophole  that 
would  let  a  U.S  company  set 
up  shop  in  another  country, 
hire  workers  there  and  tbra 
move  them  to  the  U3. 

"This  is  a  pretty  minuscule 
bill,"  said  Emmons. 

But  Vic  Goel,  a  Greenbelt. 
Md. -based  immigration  attor¬ 
ney  who  represents  hi^-tech 
companies,  said  the  legislatioo 


could  prevent  multinational 
firms  from  bringing  in  foreign 
IT  workers  to  help  clients  in 
the  U.S.  For  instance,  Goel 
said,  foreign  workers  who 
played  a  k^  role  in  developing 
a  particular  program  may  ^ 
needed  to  implement,  service 


.lUST  THE  FACTS 

The  L-1  Visa 


and  maintain  the  software. 

“The  idea  is  to  fmd  a  solu¬ 
tion  that  promotes  business 
and  closes  the  door  on  the 
abusers,”  said  GoeL  He  added 
that  such  a  solution  could  in¬ 
volve  finding  a  way  to  differ¬ 
entiate  ‘^roiect -based  [work] 
vs.  simple  provisioning  of 
warm  bodies  to  fill  seats." 

Holders  of  L-1  visas  can 
work  in  the  US.  for  up  to  sev¬ 
en  years.  H-lB  visas  let  foreign 
woikers  take  jobs  in  the  Ui». 
for  as  long  as  six  years. 

There  has  been  no  move  yet 
in  Congress  to  raise  the  H-IB 
cap,  but  that  issue  will  be  dis¬ 
cussed  at  some  point  by  the 
House  Judiciary  Committee's 
Subcommittee  on  Immigra¬ 
tion,  Border  Security  and 
Claims,  a  committee  spokes¬ 
man  said.  Whether  legislation 
will  be  introduced  is  “unclear 
at  this  time,"  be  said. 

The  Information  Technoio- 


Power  Unit.  Hhich  sets  prices 
based  on  f^ors  such  as  CPU 
utilization  and  the  storage  ca¬ 
pacity  used  by  customers,  said 
Jay  Littlcpage,  vice  president 
of  IT  operations  at  Sun  and 
head  of  its  utility-based  com¬ 
puting  program. 

Lictlepage  said  Sun  is  testing 
the  new  approach  in  four  pilot 
projects,  including  one  that's 
aimed  at  determining  how  to 
price  applications  shared 
among  multiple  users. 

As  part  of  its  computon  ef¬ 
fort.  HP  is  developing  separate 
pricing  mechanisms  for  the 
different  types  of  computing 
services  it  offers,  such  as  net¬ 
work  bandwidth,  application 
hosting  and  data  center  activi¬ 
ties,  Huberman  said. 

Service-level  agreements 
will  reward  HPs  biggest  cus¬ 
tomers  with  preferential  pric¬ 
ing  ~  as  long  as  they  guaran¬ 
tee  a  certain  level  of  usage. 
Huberman  said.  He  added  that 
HP  is  also  weighing  the  idea  of 
sharing  the  computon  formula 
with  customers  so  they  can 
use  it  to  calculate  imemai 
chargebacks  for  IT  services.  I 


gy  Association  of  America  in 
Arlington,  Va.,  which  pushed 
for  a  higber  H-IB  cap  in  years 
past,  hasn't  asked  Congress  to 
raise  the  planned  new  limit 
said  Harris  Miller,  the  trade 
group's  president. 

Miller  added  that  he  sus¬ 
pects  Congress  won’t  want  to 
take  up  the  issue  until  employ¬ 
ment  rales  in  the  U.S.  improve. 

The  strain  of  proponents 
for  a  higher  cap  may  ^  to 
wait  until  the  t^OOO  limit  is 
reached,  sometime  in  2004, 
before  seeking  any  further  in¬ 
crease.  said  Miller. 

Roughly  79.000  H-IB  visas 
were  i»ued  in  the  govern¬ 
ment's  last  fiscal  year,  well 
short  of  the  195AX)  cap.  I 


ffiACOnmDBY 

For  more  on  tas  oue.  Mtf  our  Wsb  sir's 
Focus  on  H-IB  Vta  oage 

OQiriellMtUOO 

wwwxaaiaiNsnRUfldxoiii 


1 


WWW  compoierworld.com 


NEWS 


cwNnnHtmnS.iNi  57 


It  sounds  too 
complicated 
to  me.  The  last 
thing  we  need  is 
anomercompli* 
cated  licensing 
scheme. 

MALCOLM  FIELDS  CK} 

NON  INDUSTRIES 


Confrnued  from  page  / 

Computon 

on  a  monthly  basis. 

Analysts  said  new  IT  pric¬ 
ing  approaches  are  needed  to 
support  the  emerging  utility- 
based  computing  capabilities 
being  offered  by  HP  and  rivals 
such  as  IBM  and  Sun  Micro¬ 
systems  Inc.  Those  two  com¬ 
panies  said  they  also  have 
pricing  updates  in  the  works. 

Bur  the  computon  concept, 
which  is  due  for  initial  testing 
within  HP  early  next  year,  did 
not  wow  IT  executives  inter¬ 
viewed  last  week. 

‘'It  sounds  too  complicated 
to  me.”  said  Malcolm  Fields. 
CIO  at  HON  Industries  Inc.,  a 
maker  of  ofTice  furniture  and 
fireplaces  in  Muscatine.  Iowa. 

“The  last  thing  that  we  need 
is  another  complicated  licens¬ 
ing  scheme.”  Fields  said. 
“What  we  need  is  a  quick  and 
easy  way  to  buy  more  comput¬ 
ing  power,  and  I  rteed  to  be 
able  to  buy  it  in  very  small,  in- 
e.xpensive  increments.” 

“I'm  not  sure  I  would  like  it 


at  all.  and  I  don't  think  it 
would  fly.”  said  Tim  Cronin, 
manager  of  IT  at  Nobel  Bio¬ 
care  USA  Inc.,  a  Yorba  Linda. 
Calif.-based  maker  of  dental 
implants.  “How  in  the  world 
would  you  calculate  all  the 
variables?" 

HP  probably  will  be  able  to 
"come  up  with  some  matrix 
that  will  look  very  impres¬ 
sive."  Cronin  added.  But  he 
also  questioned  w'heiher  IT 
managers  would  be  able  to 
measure  their  computon  usage 
and  whether  the  plan  would 
provide  cost  benefits  to  users. 

Evolutionary  Step 

Some  analysts  were  more  pos¬ 
itive  about  HP’s  plan,  describ¬ 
ing  it  as  an  evolutionary  step 
in  the  development  of  utility- 
based  computing. 

“We  will  eventually  get  to  a 
point  where  (IT  vendors] 
charge  for  usage  in  real  time.” 
said  Thornton  May,  a  futurist 
in  Biddeford.  Maine,  and  a 
Computerworld  columnist.  "If 
you  want  electricity  on  a  hoc 
day,  you  pay  more.  If  you  want 
bandwidth  on  a  buty  pipe- 


traflic  day.  you  pay  more." 

Efforts  by  IT  services  ven¬ 
dors  like  HP.  IBM  and  Sun  to 
develop  new  metht>d.s  of  pric¬ 
ing  for  utility-based  comput¬ 
ing  “arc  well  placed."  said 
Howard  Rubin,  executive  vice 
president  at  Meta  Group  Inc. 
in  Stamford.  Conn. 

But  Rubin  said  the  task 
won't  be  an  easy  one.  “When 
true  physics  aren’t  involved, 
it's  hard  to  come  up  with 
something  meaningful,  au¬ 
ditable  and  defensible  for 
pricing."  he  noted. 

In  addition,  Rubin  said  that 
he  doesn’t  think  rival  vendors 
will  work  together  to  develop 


a  standard  capacity-itn- 
demand  pricing  metric. 

A  spokesman  for  IBM  said 
it’s  now  offering  mainframe 
Linu.\  hosting  customers  a 
“serx’icc  unit”  pricing  ap¬ 
proach.  The  pricing  is  based 
partly  on  the  cost  of  the  hard¬ 
ware  being  run  by  IBM.  as 
well  as  its  IT  labt>r  costs.  IBM 
also  factors  in  the  average 
amount  of  hourly  mainframe 
CPU  capacity  used  over  a  24- 
hour  period  and  then  tracks 
monthly  utilization  rates  to 
come  up  with  the  service  unit 
cost,  the  spokesman  said. 

In  April.  Sun  introduced  a 
pricing  metric  called  the  Sun 


tymer  Unit,  w  hich  sets  prices 
based  on  fa^-tors  such  as  CPU 
,  utilization  and  the  storage  ca¬ 
pacity  used  by  customers,  said 
1  lay  Littlepage.  vice  president 
of  IT  operations  at  Sun  and 
,  head  of  its  utility-based  com¬ 
puting  program. 

Liltlepage  said  Sun  U  testing 
the  new  approach  in  four  pilot 
pr<*iects.  including  one  that’s 
aimed  at  determining  how  to 
price  applications  shared 
among  multiple  u.sers. 

As  part  of  its  computon  ef- 
I  fort.  HP  is  developing  separate 
pricing  mechanisms  for  the 
different  types  of  ^-omputing 
services  it  offers,  such  is  net  - 
j  work  bandwidth,  application 
hosting  and  data  center  activi- 
I  ties.  Huberman  said. 

:  Sen’icc-levcl  agreements 

I  will  reward  HP’s  biggest  cus- 
j  lomers  w  ith  preferential  pric- 
I  ing  —  as  long  as  they  guaran- 
j  tee  a  certain  level  of  usage. 

Huberman  said.  He  added  that 
I  HP  is  al.su  weighing  the  idea  of 
I  sharing  the  computon  formula 
I  with  customers  so  thtty  can 
j  use  it  to  calculate  infernal 
chargebacks  lor  IT  sen-ices.  I 
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Visas _ 

for  such  legislation. 

Unless  Congress  acts,  the 
H-IB  cap  is  due  to  drop  from 
195.000.  its  limit  for  the  past 
three  years,  to  65,000  in  Octo¬ 
ber.  the  start  of  the  2004  fiscal 
year.  But  the  L-l  visa,  which 
has  no  cap.  has  become  as 
controversial  as  the  H-IB. 

The  L-l  program  was  de¬ 
signed  to  let  companies  with 
subsidiaries  abroad  transfer  to 
the  U.S.  executives  or  workers 
who  have  specialized  skills. 

But  critics  contend  that  U.S. 
companies  are  using  foreign 
outsourcing  firms,  known  as 
"body  shops."  to  import  IT 
workers  with  L-l  visas  and  re¬ 
place  higher-paid  employees. 
Last  year,  the  government  is¬ 
sued  57.700  L-l  visas. 

In  his  bill,  U.S.  Rep.  john 


Mica  (R-Fla.)  called  the  L-l 
visa  a  "back  door  to  cheap  la¬ 
bor."  The  proposed  legislation 
would  require  that  employees 
be  transferred  from  subsidi¬ 
aries  and  not  from  third-party 
outsourcers. 

But  Mica's  bill  may  face  op¬ 
position  from  all  sides. 

Mike  Emmons,  an  Orlando- 
based  activist  who  said  he  lost 
his  consulting  job  because  of 
the  L-I  visa,  lobbied  Mica 
heavily  but  said  he's  disap¬ 
pointed  with  the  proposed  fix. 

Emmons  said  the  legislation 
includes  a  large  loophole  that 
would  let  a  U.S.  company  set 
up  shop  in  another  country, 
hire  workers  there  and  then 
mwe  them  to  the  U.S. 

"This  is  a  pretty  minuscule 
bill,"  said  Emmons. 

But  Vic  Goel.  a  Grcenbelt. 
Md-basred  immigration  attor¬ 
ney  who  represents  high-tech 
companies,  said  the  legislation 


could  prevent  multinational 
firms  from  bringing  in  foreign 
IT  workers  to  help  clients  in 
the  U.S.  For  instance.  Goel 
said,  foreign  workers  who 
played  a  key  role  in  developing 
a  particular  program  may  bi* 
needed  to  implement,  service 
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and  maintain  the  software. 

"The  idea  is  to  find  a  solu¬ 
tion  that  promotes  business 
and  closes  the  door  on  the 
abusers."  said  Goel.  He  added 
that  such  a  solution  could  in¬ 
volve  finding  a  way  to  ditfer- 
entiate  "project -based  |  work  1 
vs.  simple  provisioning  of 
warm  bodies  to  fill  scats." 

Holders  of  L-l  visas  can 
work  in  the  U.S.  for  up  to  sev¬ 
en  years.  H-IB  vis3.s  let  f«»a*ign 
workers  take  jobs  in  the  U_S. 
for  as  long  as  six  years. 

There  has  been  no  mot-e  yet 
in  Congress  to  raise  the  H-IB 
cap.  but  that  Lssue  will  be  dis¬ 
cussed  at  some  point  by  the 
House  Judiciary*  (Committee's 
Subcommittee  on  Immigra¬ 
tion,  Border  Security  and 
Claims,  a  committee  spokes¬ 
man  said.  Whether  legislation 
will  be  introduced  is  "unclear 
at  this  time,"  he  said. 

The  Information  Technolo- 


,  gy  A.ssnciatinn  of  America  in 
Arlington.  Va..  which  pushed 
for  a  higher  H-IB  cap  in  years 
past,  hasn't  asked  Congress  to 
raise  the  planned  new  limit, 
said  Harris  Miller,  the  trade 
group’s  president. 

Miller  added  that  he  sus¬ 
pects  Congress  won’t  want  to 
lake  up  the  issue  until  employ  ¬ 
ment  rales  in  the  Uii.  improve. 

The  strait^'  of  proponents 
'  for  a  higher  cap  may  to 
I  wail  until  the  (i5.000  limit  b 
I  it'ached.  sometime  in  2004. 

I  beforcsceking  any  further  in¬ 
crease.  said  Miller. 

Roughly  79.000  H-IB  visas 
were  issued  in  the  giwem- 
meni’s  last  fiscal  year,  well 
short  of  the  195.000  cap.  I 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 


SCO’s  Stock  Plot 


So  WHAT  DO  YOU  DO  if  you’re  the  CEO  of  a  $65  million 

software  company  that’s  losing  money,  losing  market  share 
and  —  worst  of  all  —  has  a  stock  that’s  lost  99%  of  its  value 
in  the  space  of  two  years?  If  you’re  Dari  McBride  of  The 
SCO  Group,  you  file  a  billion-dollar  lawsuit  against  IBM. 
Then  drop  the  product  you’ve  staked  your  future  on.  Then  send 
threatening  letters  to  about  1,500  of  your  biggest  potential  cus¬ 
tomers.  Then  announce  a  deal  with  Microsoft. 

Result:  SCO’s  stock  is  up  500%  since  January.  Sort  of  takes  the 
mystery  out  of  why  SCO  is  taking  wild  swings  at  the  Linux  it  cham¬ 
pioned  just  months  ago,  doesn’t  it? 


We  know  SCO  was  losing  money  and  market 
share  and  stock  value,  because  that's  all  in  the 
company's  filings  with  the  U,S.  Securities  and 
Exchange  Commission.  So  is  the  statement 
about  SCO  depending  on  Linux  to  rescue  the 
company  from  its  declining  Unix  sales. 

And  the  connection  between  SCO’s  stock 
price  and  the  lawsuit,  the  threatening  letters 
and  the  Microsoft  deal?  SCO’s  stock  price 
jumped  the  day  the  IBM  lawsuit  was  an- 
nounced.  It  jumped  again  when  SCO  an¬ 
nounced  its  letter-writing  campaign.  And  again 
last  Monday  when  The  Wall  Street  Journal  re¬ 
ported  the  Microsoft  deal 

And  every  time  it  jumped.  SCO  started  rat¬ 
tling  its  saber  louder.  If  you're  Dari  McBride, 
you  don't  second-guess  the  strategy  of  trashing 
Linux  to  boost  your  stock  price. 

There  are  still  a  few  opportunities  for 
McBride  to  do  that.  On  June  13,  he'll  probably 
announce  that  because  IBM  has  breached  its 
Unix  license,  SCO  is  canceling  that  license,  so 
IBM  can  no  longer  legally  sell  AIX.  IBM’s  ver¬ 
sion  of  Unix  Hiat  should  make  some  headlines, 
and  maybe  add  a  dollar  or  two  to 
the  stock  price. 

And  there  will  surely  be  plenty  of 
publicity  when  SCO  finally  unveils 
to  a  few  carefully  chosen  experts 
some  carefully  chosen  examples  of 
bow  Linux  source  code  is  riddled 
with  copyr^ted  Unix  code.  They 
may  not  get  much  chance  to  deter¬ 
mine  exactly  where  any  similarities 
in  the  code  came  from,  or  what  they 
mean.  But  that's  missing  the  point 
—  or  rather,  the  points  the  event 
will  add  to  the  price  of  SCO  shares. 

Of  course,  eventually  SCO  will 


have  to  try  to  convince  a  judge  and  jury  that  its 
claims  about  IBM  and  Linux  are  true.  But  with 
any  luck,  McBride  will  have  cashed  out  by  then, 
either  by  selling  the  company  or  handing  the 
mess  off  to  some  new  CEO. 

Does  that  sound  cynical?  Then  you  haven’t 
been  paying  attention  to  SCO.  When  McBride 
was  hired  as  SCO’s  new  honcho  a  year  ago,  the 
stock  at  about  a  dollar.  McBride  slashed 
costs,  including  RficD.  He  cut  deals,  mostly  with 
other  companies  that,  like  SCO,  are  funded  by 
Ray  Noorda's  Canopy  Group.  He  chatted  the 
company’s  name  to  The  SCO  Group  f^m 
Caldera  In  short,  he  acted  very  much  like  a 
CEO  who’s  sprucing  his  company  up  to  be  sold. 

But  nothing  seemed  to  budge  the  stock  price 
until  SCO  sued  IBM  in  March.  Success  at  last! 

Since  then,  McBride  has  looked  even  more 
like  a  CEO  who’s  gutting  his  company  to  sell  it 
He  killed  SCO's  Linux  —  his  company’s  future, 
remember?  He  antagonized  potential  customers 
in  mid-May  by  sending  threatening  letters  to 
1,500  commercial  Linux  users. 

Today  SCO  may  not  have  R&D  or  a  future¬ 
facing  product  or  a  growing  cus¬ 
tomer  base.  But,  hey,  bow  about 
that  stock  price! 

All  of  which  isn't  good  news  for 
SCO  customers.  But  it  should  be  a 
relief  to  everyone  else.  After  alL  su¬ 
ing  the  people  who  buy  software  is 
never  going  to  push  SCO’s  stock 
price  up.  And  as  long  as  there's  one 
more  way  to  goose  that  stock  price, 
Dari  McBride  won’t  be  worrying 
about  us. 

Because  if  you’re  the  CEO  of 
SCO.  the  last  thing  you  pay  atten¬ 
tion  to  is  customers.  I 
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Got  Outsourcing 
Questions? 

Computerworid’s  New  IT  Executive  Summit  Series  Has  the  Answers 


If  you’re  an  IT  executive  in  an 
end-user  organization,  apply  to 
attend  Computerworid’s  upcoming 
complimentary  half-day  summit  on 
IT  Outsourcing:  The  Offshore 
Alternative. 

Robust  global  communication 
technologies  and  state-of-the-art 
security  tools  have  made  IT  out¬ 
sourcing  an  increasingly  viable 
option  to  achieve  ROI.  Part  of 
Computenworld’s  new  IT  Executive 
Summit  Series,  this  invitation-only, 
4-hour  summit  will  explore  how 
companies  are  realizing  tangible 
benefits  from  outsourcing  IT 
application  development, 
integration  and  management. 

Seating  is  iimHed,  so  appiy 
todayi 


New  York,  NY 

Thursday,  June  5,  2003,  8:00am  to  Noon 
Marriott  Marquis,  O’Neill  Room 

8:00am  to  8:45am  Registration  and  Networking  Breakfast 


8;45am  to  9:15am 


9:15am  to  9;  45am 


9:45am  to  10:15am 


10:15am  to  10:30am 
10;30am  to  H;30am 


11:30am  to  Noon 


Wetcome  and  Opening  Keynote 
Outsourcing  Watch  2003: 

The  Best  of  Both  Shores 

Maryfran  Johnson,  Editor  in  Chief, 
Computerworfd 

Industry  Update 

Evaluating  Your  IT  Sourcing  Options 

Bart  ^rkir«.  Managing  Partr>er. 

Leverage  ^rtrwrs  (an  IT  consultancy) 

Business  Case  Study 

Helen  Cousins,  CIO  and  SVP. 

Certdant  Corporation 

Refreshment  Break 

Outsourcing  Strategies 
Leadership  Strategies  bi  Offshore 
Outsourdrig 

Moderator:  Maryfran  %k>hnson. 

Editor  in  Chief.  Computerworld 
Panelists: 

■  Helen  Cousirts.  CIO  and  SVP.  Cendant 

e  Robert  Reeg,  SVP.  Systems  Desrelopment. 
MasterCard  Intematk^l 

■  Kim  Ross.  CIO.  Nielsen  Media  Research 

B  Greg  Schueman,  Vice  President  and  CTO. 

Mercury  Insurance  Group 
e  Gregory  Tranter.  CIO.  Allmerica 
Open  Forum 


For  information,  cali  Chris  Leger  at  888-299-0155 
or  to  register  online,  visit 
www.itexecutivesummit.com/outsourcing 
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Microsystems,  the  Sun  logo,  Solaris  and  Sun  Fire  are  trademarks  or  registered  trademarks  of  Sun  Microsystems,  Inc,  in  the  United  States  and  other  countries.  All  other  trademarks  are  property  of  their  respective  owners. 
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Microsoft  Fees  Now  Buy  More 
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Software  Assurance 
customers  will  get 
support,  training 


Microsoft  Corp.  last  week 
made  good  on  a  long-standing 
pledge  to  add  value  to  its  con¬ 
troversial  Software  Assurance 
maintenance  prograoL  ; 

The  company  dis-  . 

closed  plans  to  provide  I 
expanded  suf^rt.  I 

training  and  Office  home-use 
benefits  starting  in  September. 

Although  Microsoft  has 
been  tweaking  the  program 
for  months  [QuickLink  31514], 
last  week's  disclosure  was  the 


Offshore  Ops  to 
Get  Stronger 
Privacy 

us.  firms  that  outsource 
work  to  India  welcome 
legislation  to  protect  data 

BY  JAIKUMAft  VUAVAN 

India’s  Ministry  of  Informa¬ 
tion  Technology  and  the  coun¬ 
try’s  main  software  trade  asso- 
datioo  are  drafting  a  data  pro¬ 
tection  act  designed  to  allay 
growing  privacy  concerns  in 
the  U3.  and  Europe  related  to 
oSsbore  outsourcing. 

The  legislation,  expected  to 
be  enacted  around  the  begin¬ 
ning  of  next  year,  would  pro- 
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most  significant  step  yet  to¬ 
ward  addressing  the  concerns 
raised  by  customers  since  the 
Software  Assurance  program’s 
abrupt  introduction  in  May 
2001. 

Until  now.  the  chief  benefit 
for  companies  has  been  up¬ 
grade  rights  to  products  cov¬ 
ered  under  their  two-  or  three- 
year  contracts.  For 
that,  they  have  paid  an 
annual  fee  of  25%  of 
the  volume  license 
cost  for  server  products  and 
29%  for  desktop  products. 

*‘1  think  there  was  a  feeling  I 
they  either  needed  to  do  more  ! 
or  charge  less.”  said  one  cus- 

Microsofi,  page  16  ' 


vide  legal  safeguards  to  ensure 
data  privacy  protection  in  In¬ 
dia.  said  Kiran  Kamik.  presi¬ 
dent  of  the  National  Associa¬ 
tion  of  Software  and  Service 
Companies,  known  as  Nass- 
com,  in  New  Delhi 
The  new  rules  are  being 
drafted  primarily  to  address 
the  European  Union's  strict 
privacy  requirements,  Kamik 
said.  EU  la^  prohibit  compa¬ 
nies  from  exporting  data  to  or 
storing  data  in  countries  that 
lack  privacy  safeguards  com¬ 
parable  to  the  EU’s.  "The  EU 
has  very  stringent  taws  vrith 

Data  Privacy,  page  14 
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New  Sarbanes-Oxley  Apps 
Provide  Only  Limited  Help 


Few  products  for  managing  compliance  with 
the  financial  reporting  law  are  comprehensive 


BV  THOMAS  HOVFMAN 

A  growing  number  of  software 
vendors  are  starting  to  offer 
applications  designed  to  help 
companies  comply  with  the  fi¬ 
nancial  reporting  require¬ 
ments  of  the  Sarbanes-Oxley 
Act.  But  most  of  the  products 
are  point  solutions  t^t  focus 
on  specific  areas,  such  as  in¬ 
ternal  accounting  controls. 

For  example.  Oracle  Corp. 
last  week  announced  a  set  of 
software  tools  for  addressing 
Sarbanes-Oxley’s  Section  404. 
which  requires  CEOs  and 


CFOs  to  certify  that  the  finan¬ 
cial  control  procedures  used  b>' 
their  companies  are  effective. 

Redmond.  Wash.-ba$ed 
Concur  Technologies  Inc.  lat¬ 
er  this  month  plans  to  intro¬ 
duce  a  similar  pack^  for 


documenting  how  its  expense 
management  software  func¬ 
tions  in  order  to  comply  with 
Section  404.  The  new  technol¬ 
ogy  will  be  included  as  pan  of 
the  annual  maintenance  fee 
paid  by  users  of  the  company's 
software,  said  Christopher 
Juneau.  Concur’s  senior  direc¬ 
tor  of  product  management. 

Customized  software  creat¬ 
ed  by  big  accounting  and  IT 
consulting  firms  is  among  the 
few  options  available  to  users 
seeking  a  full  complement  of 
tools  for  automating  compli¬ 
ance  with  Sarbanes-Oxley. 
Thomas  Murphy.  CIO  at  Royal 
Sarbanes  Apps.  page  49 


It’s  a  tong-ninning  debate 
in  IT  circles:  Do  you  buy  a 
packaged  ^plication  and 
customize  or  do  you 

build  the  application  from  ^  ^ 

scratch?  Advocates  on  ^  / 

both  sides  weigh  the  ^ 
pros  and  cons.  Page  39 
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This  year  s  finalists  are  harnessing  IT  for  the  greater  good.  Read  about  scientists  employing  Linux 
supercomputers  to  plan  disaster  cleanups  and  surgeons  using  3-0  imaging  in  the  operating  room. 
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Microsoft  Now  Buy  More 

Software. \ssunilic0  i  most  sipnincam  «cp  yc  to- 

...  ward  addressinjj  the  concerns 

ClLStomcrS  \\  ill  raised  by  customers  since  the 

support,  tntillillg  software  Assurance  program  s 


BY  CAROL  SLIWA 

Microsoft  Corp.  last  week 
made  gottd  on  a  long-standing 
pledge  to  add  value  to  its  con¬ 
troversial  Software  Assurance 
maintenance  program. 

The  company  dis- 
closed  plans  to  provide  iTl 
expanded  support. 
training  and  Office  home-use 
benefits  starting  in  September. 

Although  Microsoft  has 
been  tweaking  the  program 
for  months  IQuickLink  .^1.^14), 
last  week's  disclosure  was  the 


,  most  significant  step  yet  to¬ 
ward  addressing  the  concerns 
raised  by  customers  since  the 
Software  Assurance  program's 
I  abrupt  introduction  in  May 

I  2001. 

1  Until  now.  the  chief  benefit 
I  for  companies  has  been  up- 
j  grade  rights  to  products  cov- 
i  ered  under  their  two-  or  three- 
year  contracts.  For 
li/.'itP  that,  they  have  paid  an 
annual  fee  of2i>"M  of 
the  volume  license 
cost  for  server  products  and 
29'‘i>  for  desktop  products. 

“I  think  there  was  a  feeling 
I  they  either  needed  to  do  more 
j  or  charge  less."  said  (*ne  cus- 
I  Microsoft,  page  lo 


Offshore  Ops  to 
Get  Stronger 
Privacy  L^k 

U.S.  finns  that  iHit.souPLV 
work  to  India  welcome 
legislation  to  pnTtect  data  i 


India’s  Ministry  of  Informa¬ 
tion  Technology'  and  the  coun¬ 
try’s  main  software  trade  asso¬ 
ciation  are  drafting  a  data  pro¬ 
tection  act  designed  to  allay 
growing  privacy  concerns  in 
the  U.S.  and  Europe  related  to 
offshore  outsourcing. 

The  legislation,  e.xpcctcd  to 
be  enacted  around  the  begin¬ 
ning  of  ne.xt  year,  would  pro- 
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New  Sarbanes-Oxley  Apps 
Provide  Only  Limited  Help 


l  ow  piXKluots  tor  m;m;iiftng  ooiiiplianoo  w  ith 
the  t'inanoi;il  roportini;  law  aiv  ooinpa-honsiv  o 


vide  legal  safeguards  to  ensure 
data  privacy  protection  in  In¬ 
dia.  said  Kiran  Kamik.  presi¬ 
dent  of  the  National  Associa¬ 
tion  of  Software  and  Serx'ice 
Companies,  known  as  Nass- 
com.  in  New  Delhi. 

The  new  rules  arc  being 
drafted  primarily  to  address 
the  European  Union's  strict 
privacy  requirements.  Kamik 
said.  EU  laws  prohibit  compa¬ 
nies  from  exporting  data  to  or 
storing  data  in  countries  that 
lack  privacy  safeguards  com¬ 
parable  to  the  EU’s.  “The  EU 
has  very  stringent  laws  with 

Data  Privacy,  page  14 
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For  etlensfve  coverage  of  privacy  issues. . 
visit  our  Web  site 
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A  growing  number  of  software  ' 
vendors  are  starting  to  offer 
applications  designed  to  help 
companies  comply  with  the  fi¬ 
nancial  reporting  require¬ 
ments  of  the  Sarbanes-Oxley 
Act.  Bui  most  of  the  products 
are  point  solutions  that  focus 
on  specific  areas,  such  as  in¬ 
ternal  accounting  controls.  j 

For  example.  Oracle  Corp.  j 

last  week  announced  a  set  of  '< 

softxvare  tCKvls  for  addressing 
Sarbanes-Oxley ’s  Section  -W4.  , 

which  requires  CEOs  and  i 


Dili  Hk.  Formuljlf  an  action 
ptan  now.  advrve*.  M.irv'ian 
JOihnson  P.n<  ?0 

DeldiK  on  Orof-k  i  nrw  loots 
tor  atdnv)  Sarbanes-Oxley 
compliance  PjijeAt} 


CFOs  tociTtify  that  the  finan¬ 
cial  control  procedures  used  by 
their  companies  are  elTective. 

KedmonJ,  Wasn.-bav-'d 
Concur  Tes'hnologies  Inc.  lat¬ 
er  this  month  plans  to  intro¬ 
duce  a  similar  package  for 


Jocumeniing how  its cxivnvc 
management  sofiw.ire  func¬ 
tions  in  order  to  comply  with 
Section  4(14  The  new  technol 
ogy  will  be  includcsj  as  part  ot 
:  the  jnnu.il  ni.iinten.incr  fee 
1  paid  by  users  of  the  company 's 
I  software.  s.iiJ  Christopher 
!  luneau.  C*mcur's  senior  Jircc- 
;  tor  of  prirduct  management 
t  Customized  software  creat¬ 
ed  by  big  .iccounting  and  1 1 
consulting  firms  is  .imong  the 
few  options  .ivailable  to  users 
sevking  a  full  complement  of 
icK'Is  lor  .iuiomating  compli¬ 
ance  with  'virb.ines-UvIey 
Thomas  Murphy.  (T(T  at  Koval 
Sarbanes  Apps.  page  4V 
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ACCESS  •  threat  •  identity 


Associates 


Facts  speak  volumes.  To  see  hovv  the  greater  performance  and  scalability  of  Microsoft  SOL  Server  ‘  2000 
•  -  -,--nandsofvourenterpfise.gotornicrosoft.com/sql,  siebei  Software  for  the  Agile  Business. 
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Portal  Powers  GE  Sales 

In  the  Technology  section:  By  offering  a  single  point  of 
access  to  the  company's  many  databases  and  applica¬ 
tions,  GE  Power's  sales  portal  lets  staffers  spend  less 
time  with  computers  and  more  with  customers  Page  31 


How  to  Cut  Your  Data  Losses 

In  the  Technology  section:  Data  recover>'  specialist 
Dan  Gardner  of  Renew  Data  Corp.  offers  tips  on 
how  to  avoid  losing  data  and  what  can  be  done 
when  disasters  happen  Page  34 


NEWS 


6  Microsoft  announces  a  certi¬ 
fication  program  for  security 
professionals  who  specialize 
in  Windows. 

7  SCO's  legal  threat  fails  to  de¬ 
ter  users  from  adopting  Linux. 
But  the  uncertainty  could  af¬ 
fect  future  plans. 

8  3Con>  readies  low-cost  Giga¬ 
bit  Ethernet  switches. 

10  Intel  has  turned  off  software 
used  by  its  Centrino  mobile 
chip  set  because  of  VPN 
client  incompatibility  issues. 

10  New  tools  promise  to  help 
administrators  secure  mobile 
devices. 

12  ATAT  offers  network  services 

for  managed  storage  users. 

12  Symantec  upgrades  its  pcAny- 
where  remote  access  software. 

14  The  IRS’s  new  CIO  —  its 

former  CFO  —  takes  the  reins 
of  a  tech  upgrade  project 
launched  in  1998. 

16  Q&A:  A  Microsoft  exec  ex¬ 
plains  the  new  benefits  the 
vendor  is  offering  its  Software 
Assurance  customers. 

17  Europe's  space  agency  plans 
to  develop  a  GPS-like  satellite- 
based  navigation  system. 

19  Nasdaq's  CIO  wants  to  con¬ 
solidate  the  stock  market's 
IT  systems. 

19  Deal  with  SAP  calls  for 
MySQL  to  take  the  lead  in 
SAP  DB  development. 
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TECHN0L06Y 

36  SecttfTty  Manager's  Journal: 
Single  Sign*on  Stalls  as 
Kazaa  Gets  the  Boot.  Numer¬ 
ic  user  names  thwart  a  direc¬ 
tory  integration  project,  but 
Mathias  Thurman  moves  for¬ 
ward  in  blocking  the  use  of 
file-swapping  programs  on 
the  corporate  network. 

MANA6EMENT 


39  Buy!  No,  Build!  Packaged 
software  apps  were  once  con¬ 
sidered  the  endgame,  but  now 
they’re  the  foundation  for 
highly  customized  and  com¬ 
plex  information  systems. 

41  Talking  Long-Distance.  Tele¬ 
phone  job  interviews  are  sav¬ 
ing  companies  time  and  mon¬ 
ey.  We  offer  advice  for  job 
seekers  on  how  to  make  the 
best  impression. 


8  On  the  Mark:  Mark  Hall 

learns  that  HP  is  readying  an 
updated  road  map  for  Open- 
View  and  finds  a  NAS  product 
with  petabyte  possibilities. 

20  Maryfran  Johnson  is  sur¬ 
prised  to  learn  that  one  of 
the  thorniest  issues  IT  execs 
face  is  complying  with  the 
Sarbanes-Oxley  Act  of  2002. 
Will  it  be  Y2k  all  over  again? 

20  Pimm  Fox  objects  to  Micro¬ 
soft's  questionable  —  but 
legal  —  tactics  as  it  tries  to 
undermine  Linux  and  other 
competitors. 

21  Thornton  May  gives  Harv’ard 
Business  School  a  failing  grade 
for  focusing  on  the  present  at 
the  expense  of  the  future. 

38  Paul  A.  Strassmann  believes 
that  Web  services  will  change 
both  IT  and  the  power  struc¬ 
tures  within  organizations. 

42  Jay  Cline  says  adding  a  priva¬ 
cy  seal  from  Truste  or  BBB- 
OnLine  to  your  Web  site  can 
be  a  worthwhile  investment. 
These  logos  may  not  come 
cheap,  but  they  can  boost 
consumer  confidence. 

50  Frankly  Speaking:  Frank 
Hayes  sorts  out  the  mess  TTie 
SCO  Group  has  gotten  itself 
into  —  and  may  never  escape. 
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How  Does  Yburn 
Spen^  Stack  Up? 

ROI:  Use  our  new  IT  Spending  Assessment 
tool  and  receive  an  instant  benchmark  report 
on  bow  your  company's  budget  compares 
with  those  of  similar-size  organizatioos. 

OQi4dilMia3Z70 

The  True  Costs  of  Software 

MANA6CIIENT:  “Free"  software  isn't  really 
ftee,  of  course.  And  a  simple  TCO  analysis 
isn't  enough  to  evaluate  iL  says  Alan  Mac- 
Connack.  an  assistant  professor  of  business 
administr^iop  at  Harwtrd.  CNMLMt  38746 


NEWS;  Whafs  the  latest  on  the  financial  re¬ 
peating  act?  What  b  its  IT  impact?  Check 
out  ComputerwoHd's  continuing  coverage. 

0<MEllMaS290 

Where  Don  Vbur  Thne  Go? 

DEVELOPHEMT:  'Busy  people  get  the  most 
done,'  a  developer  says.  But  do  they?  A  lot 
depends  on  the  kind  of  Ixisy”  you  are,  writes 
columnist  Esther  Derby.  OQiielAJnA  387H 

Hands  On:  Getting  Macs  and  PCs 
ToPlayWUTog^ 

IT  professiooal  and  technology  writer  Ryan 
Faas  takes  a  look  at  how  organizations  can 
tackle  the  Mac/PC  challenge  in  two  bask 
ways:  server-side  and  client-side  software. 

OQiMLWi  38729 
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Portal  Powers  GE  Sales 

In  the  Technology  section:  By  otTerinj:  a  sintilo  point  of 
access  to  the  company’s  many  databases  and  applica¬ 
tions.  GE  Power  s  sales  portal  lets  staffers  spend  less 
time  with  computers  and  more  with  customers.  Page  31 


How  to  Cut  Your  Data  Losses 

In  the  Technology  section:  Oat.j  recm-rt  spect.ihsi 

Han  (iardner  of  Kenetv  Mata  Gorp.  offers  ftps  on 
how  to  avoid  losint:  data  and  what  c.nn  be  done 
when  dt.sasiers  happen.  Page  34 


NEWS 


6  Microsoft  announces  a  certi¬ 
fication  program  for  security 
professionals  who  specialize 
in  Windows. 

7  SCO’s  legal  threat  fails  to  de¬ 
ter  users  from  adopting  Linux. 
But  the  uncertainty  could  af¬ 
fect  future  plans. 

8  3Com  readies  low-cost  Giga¬ 
bit  Ethernet  switches. 

10  Intel  has  turned  off  software 
used  by  its  Cenirino  mobile 
chip  set  because  of  VPN 
client  incompatibility  issues. 

10  New  tools  promise  to  help 
administrators  secure  mobile 
devices. 

12  AT&T  offers  network  services 

for  managed  storage  users. 

12  Symantec  upgrades  its  pcAny- 
where  remote  access  software. 

14  The  IRS's  new  CIO  —  its 

former  CFO  —  takes  the  reins 
of  a  tech  upgrade  project 
launched  in  1998. 

16  Q&A:  A  Microsoft  exec  ex¬ 
plains  the  new  benefits  the 
vendor  is  offering  its  Software 
Assurance  customers. 


The  0p30  protect  at  the  Urtver^ify 
ol  Manchester  lets  doctors  retiearse 
surgertes  Ihrough  a  3-0  dts()tay 
Sumilomc  Mitsui  Bankirtg  used  a 
browsftf  ItonI  end  nwtdleware  and 
wofkfloiA  engines  lo  comply  wrlb  l»v; 
USAP.vlriot  Acl 

New  York  Untvi.f^ily  exiMndt-d  its 
digital  library  lo  metude  elecironic 
loumais  sound  and  moving  images. 

At  the  Pacific  Northwest  National 
Lab,  a  Linux  supcrcomputex  wiM  iidp 
model  disaster  clearHip  scenarios 
India  sOiford  Book.store  used  an 
integfaled  Internet  platform  to  help  rt 
become  a  nationwide  retail  chain 
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36  Security  Manager’s  Journal: 
Single  Sign*on  Stalls  as 
Kazaa  Gets  the  Boot.  Numer¬ 
ic  user  names  thwart  a  direc¬ 
tory  integration  project,  but 
Mathias  Thurman  moves  for¬ 
ward  in  blocking  the  use  of 
file-swapping  programs  on 
the  corporate  network. 
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39  Buy!  No,  Build!  Packaged 
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8  On  the  Mark:  Mark  Hall 
learns  that  HP  is  readying  an 
updated  road  map  for  Open- 
\'icw  and  finds  a  NAS  product 
with  petabyte  possibilities. 

20  Maryfran  Johnson  is  sur¬ 
prised  to  learn  that  one  of 
the  thorniest  issues  IT  execs 
face  is  complying  with  the 
Sarbanes-Oxley  Act  of  2002. 
Will  it  be  Y2k  all  over  again? 

20  Pimm  Fox  objects  to  Micm- 
sofi's  questionable  —  but 
legal  —  tactics  as  it  tries  to 
undermine  Linux  and  other 
competitors. 

21  Thornton  May  gives  Harxard 
Business  Schiwl  a  failing  grade 
for  ftxrusing  on  the  present  at 
the  e.xpense  of  the  future. 

38  Paul  A.  Strassmann  believes 
that  Web  services  will  change 
both  IT  and  the  power  struc¬ 
tures  within  organizations. 

42  Jay  Cline  says  adding  a  priva¬ 
cy  seal  from  Truste  or  BBB- 
OnLine  to  your  Web  site  can 
be  a  worthwhile  investment. 
These  logos  may  not  come 
cheap,  hut  they  can  boost 
consumer  confidence. 
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How  Does  Your  IT 
Spending  Stack  Up? 

ROI:  Use  our  new  IT  Spending  Assessment 
tool  and  receive  an  instant  benchmark  report 
on  how  your  company's  budget  compares 
with  those  of  similar-size  organizations. 

OQiiickU(Aa3270 

The  True  Costs  of  Software 

MANAGEMENT:  “Free*"  software  isn't  really 
free,  of  course-  And  a  simple  TCO  analysis 
isn't  enough  to  evaluate  it.  says  Alan  Mac- 
Cormack.  an  assistant  professor  of  business 
administration  at  Harvard.  OQuickLink  38745 

KeMUptoDate 

OnSarnanes-Oxley 

NEVfS:  Whafs  the  latest  on  the  financial  re¬ 
porting  act?  \\Ttat  is  its  IT  impact?  Check 
out  CompuferworW's  continuing  coverage. 
OQuickLinka3250 

Where  Does  Your  Time  Go? 

DEVELOPMENT;  “Busy  people  get  the  most 
done."  a  developer  says.  But  do  they?  A  lot 
depends  on  the  kind  of  “busy"  you  are,  writes 
columnist  Esther  Derby.  OQuddJnk  38786 

Hands  On:  Getting  Macs  and  PCs 
To  Play  Wk  Together 

IT  professional  and  technology  writer  Ryan 
Faas  lakes  a  look  at  how  organizations  can 
tackle  the  Mac/PC  challenge  in  twi)  basic 
ways:  server-side  and  client-side  software. 
OQuickLink  38729 


17  Europe’s  space  agency  plans 
to  develop  a  GPS-like  satellite- 
based  navigation  system. 

19  Nasdaq’s  CIO  .wants  to  con¬ 
solidate  the  stock  market’s 
IT  systems. 

19  Deal  with  SAP  calls  for 
MySQL  to  take  the  lead  in 
SAP  DB  development. 


svxftwarc  apps  were  once  con¬ 
sidered  the  endgame,  but  now 
they’re  the  foundation  for 
highly  customized  and  com¬ 
plex  information  systems. 

41  Talking  Long*Distance.  Tele¬ 
phone  job  interviews  are  sav¬ 
ing  companies  time  and  mon¬ 
ey.  We  offer  advice  for  job 
seekers  on  how  to  make  the 
best  impression. 


50  Frankly  Speaking  Frank 
Hayes  sorts  out  the  mess  The 
SCO  Group  has  gotten  itself 
into  —  and  may  never  escape. 
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Microsoft  Settles 
Lawsuit  With  AOL 

MicTOMfl  Covp.  saM  N  pay 
AOL  Tinw  Wwnaf  Inc.  S7S0 
4m  to  aaltla  M  antifrusl  Mil  filad 
M  batiaK  of  Wotocmo  Communi¬ 
cations  Corp.  in  Jamivy  2002. 
Mcnaoft  alao  «■  0im  AOt  tlma 
Wvnar's  Amartea  OdHm  Inc.  dhri- 
«iow  a  royalty  fraa.  aaaan  yaafl- 
canM  to  MO  Intornat  Eaptofif 
with  Mi  dam  aoftwara.  Tha  suit 
daimod  that  Mtoroaoft  toagaly 
harmad  Natscapa'a  Wab  bnmaar 


J.D.  Edwards 
Reports  Q2  Loss 

Buainaaa  appicattons  vandor  JJ. 
Edwwda  A  Co.  dreppod  back  into 
flw  rad  dwlng  Ito  aaeond  quartor. 
rapoitlnq  a  loaa  of  $993,000  far 
tha  tfaaa-moiitli  parted  that  and- 
ad  AprI  30.  Rtwimia  lolalad 
$20U  loflton.  dovvn  0%  from 
$223.0  idkn  a  yoar  ago.  CEO 
BobDottmaakyafadOamrar- 
baaod  JJL  Edwarda  waa  affactad 
by  aaialir  tranaactfana  aa  usan 
Mated  bach  purchaaas. 


HP,  Ericsson  Set 
To  Finafize  fT  Deal 


t-Packard  Co.  and  LM 


Ericaaoa  Talaphnna  Co.  thte  woak 
arc  aapactod  to  announca  that 
tbai  haiia  faiiBiail  in  ft  iwit 
saining  daal  wahiad  te  mora  than 
$1  Iriifctt.  Stockhokn-bawd  Ertea- 
aan  la  AprI  said  that  R  had  tefftad 
an  apmamant  te  pftncipte  to  hand 
ovar  wanapwient  of  Rs  IT  opora- 
ttaaa  to  HP,  taRh  a  formal  deal  ax- 
pactod  by  midyaar. 


Short  Takes 

in  ethar  HP  naira,  tha  company 
Ms  waak  pfam  to  rafaaaa  a  faw- 
aad  aatworh-attachad  teoraga  da- 
viea  pricad  m  $2,999,  wfdch  is 
$9,000  ton  than  Ra  azteting 
anteyfani  product...  CISCO 
SrSTEkB  MC.  Ma  waak  it  dua  to 
announca  upgradad  joftwaia  far 
ntiniQinQ  oorporala  wiralan  LAN 


Microsoft  to  Introduce 
Security  Certifications 


Exams  tailored  for  IT  professionals  who 
specialize  in  security  for  Windows 


OV  CAROL  8UWA 

MicRosorrcoRP- 
tomorrow  will  an¬ 
nounce  its  first 
set  of  certifica¬ 
tion  credemiats  for  IT  admin¬ 
istrators  and  engineers  who 
specialize  in  security  in  a 
Windows  environment 
Dan  Truax,  director  of  busi¬ 
ness  and  product  strategy  for 
training  and  certification  at 
Microsoft,  noted  that  the  com¬ 
pany  has  offered  se-  _ 

curity  courses  for 
years.  But  he  said 
Microsoft  decided 
to  take  the  extra 
step  of  creating  a 
formal  credential  in 
recognition  of  the 
number  of  cus- 
tomers  that  now  specialize  in 
that  type  of  tob. 

The  announcement  of  the 
new  certifications  is  sched¬ 
uled  to  be  made  during  a 
keynote  address  by  Scott 
Chamey,  Microsoft's  chief  se¬ 
curity  strategist,  at  the  compa¬ 
ny’s  TechEd  2003  confertmee 
in  Dallas. 

The  more  rigorous  of  the 
two  certifications  being  intro¬ 
duced  is  the  Microsoft  Certi- 


ALSO  AT  TECHED 

Microsolt  wA  annouKe 
the  availability  of  Relaase 
CandidaAe  1  oil  Enhange 
Server  2003 

OQiidiUnli  38824 


fied  Systems  Engineer 
(MCSE):  Security  on  Mi¬ 
crosoft  Windows  2000.  To 
achieve  that  status,  an  engi¬ 
neer  must  pass  six  core  exams 
and  demonstrate  a  “security 
specialty"  by  taking  a  test  on 
Microsoft  Internet  Security 
and  Acceleration  (ISA)  Server 
2000  or  an  exam  administered 
by  the  (Computing  Technology 
Industry  Association,  better 
known  as  CoropTlA. 
_  The  require¬ 
ments  are  essen¬ 
tially  the  same  as 
for  an  ordinary 
MCSE  certifica¬ 
tion,  except  the 
security  caivdidate 
has  to  take  the 
core  security  de¬ 
sign  exam  and  a  security  im¬ 
plementation  exam  that  Mi¬ 
crosoft  introduced  in  January, 
along  with  the  ISA  Server  or 
CompTIA  exam. 

The  other  new  certification 
—  Microsoft  Certified  Sys¬ 
tems  Administrator  (MCSA); 
Security  on  Microsoft  Win¬ 
dows  2000  ~  requires  the 
four  exams  needed  for  a  typi¬ 
cal  MCSA  certification,  plus 
one  additional  exam.  One  core 


NEW  CERTIFICATIONS 


Microsoft  Corttfted  Systems 
Administralor:  Security  on 
Windows  2000 

■  sums:  ClienI  operating 
system  (1).  networking  s^em  (2). 
seciri  ty  implementabon  (1) 

■  Security  speetetty;  One  re¬ 
quired  (options;  installing,  configur¬ 
ing  and  a^inistering  Mterosoft 
Intemet  Security  and  Acceleration 
Server  2000,  Enterprise  Edition  or 
CompTIA  Security*) 


Microsoft  (tertified  Systems 
Ertgineer;  Security  on 
Windows  2000 

■  Core  exams:  Client  operating 
system  (1),  networking  s^tem  (3). 
security  design  (1).  secu^  impfe- 
mentation  0) 

■  Security  spectaRy:  One 

required  (same  options  as  above) 

souncE  iMcao&OFT 


exam  on  the  client  operating 
system  and  two  on  networking 
systems  are  mandated  along 
with  the  security  implementa¬ 
tion  exam  and  either  the  ISA 
Server  or  CompT^  exam. 

Certifications  aren't  yet 
available  for  Windows  Server 
2003,  but  they're  expected  to 
become  available  later  this 
year,  according  to  Truax. 

Truax  said  Microsoft  was 
first  approached  last  summer 
about  creating  a  special  secu- 


Mkansofl  Set  to  Shte  NAS  Upgrade  to  Storage  Vendors 


At  lechEd.  kRcre&oft  today  plans 
to  announoe  that  4  mi  totem 
the  third  generabon  of  Rs  net¬ 
work-attached  skxage  (NAS) 
soRwon  to  hardware  vendera 
thte  month.  Added  teatures  are 
deslipiedtotettheVAndowe- 
based  technology  be  uied  in  a 
wider  range  of  storage  devices. 

The  Windows  ftewered  NAS 
upgrade  WB  delaled  as  part  of 
Mterosoffa  Windows  Sei^ 
2(X13  rofteul  in  AprI  and  Includes 


newWtidShadowCopySer- 
vica  and  Viriuaf  Disk  Sir^ 
ffaddtevre  components.  plUB  a 
software  dnvsr  dial  supports  the 
hitefnet  SCSI  storage  Maroon- 
nectstandted 
daude  Loraneon,  product 
rranager  tor  Mterasoffs  enter¬ 
prise  storage  dMsten,  said  the 
SarvwAp|ilanG8Nt2003re- 
teaae  of  toe  NAS  software  shoiid 
start  appetetog  In  storage  de- 
vicas  by  September. 


Anafusts  said  Mteroioft’s  latast 
reteasa  wN  put  mote  preasue  on 
NAS  software  rM8  la  Network 
Appitanca  inc.  in  Stfmyvale. 
CaN.  and  Snap  Applince  Inc.  in 
San  Joaa.  NelApp  and  Snip  are 
OTwngtoihoidoutstaragBven- 
don  toll  have  yet  to  team  up 
Mih  Mtemaoft  whid)  in  teto  AprI 
announcad  a  deal  under  which 
EMCCGrp.wN9alVMndowi 
PMend  NAS  on  Is  Cterlon 
mtetanoesnays. 


rity  credential.  Customers  and 
partners  subsequently  advised 
the  company  not  to  create  cre¬ 
dentials  similar  to  any  that  al¬ 
ready  cxi.st  in  the  industry,  but 
rather  to  focus  on  o/Tering  a 
certification  specific  to  the 
Microsoft  software  environ¬ 
ment.  he  said.  “Dur  goal  was 
to  complement  what  exists  in 
the  industry,  not  to  compete 
with  it.”  Truax  said. 

How  important  the  new  cer¬ 
tifications  will  be  to  IT  shops 
is  unclear.  Charles  Emery,  se¬ 
nior  vice  president  and  CIO  at 
Horizon  Blue  Cross  Blue 
Shield  of  New  Jersey  in 
Newaric.  said  he  views  the  new 
Microsoft  programs  as  posi¬ 
tive  for  the  industry.  But  he 
abo  noted  that  Horizon  Blue 
Cross  Blue  Shield  doesn't  use 
certifications  as  hiring  crite¬ 
ria,  because  it  has  often  found 
that  certification  holders  have 
no  practical  experience. 

Mike  Lines,  an  Indianapolb- 
based  manager  of  technical  in¬ 
tegration  at  Bell  Industries 
Tcch.logix  Group,  said  that  as 
a  provider  of  outsourced  IT 
services,  hb  company  requires 
all  of  its  engineers  to  carry  (he 
MCSE  credential.  Lines  said 
he  definitely  will  have  a  cou¬ 
ple  of  engineers  take  the  new 
security  certification  exams. 

But  one  certified  Microsoft 
trainer,  who  asked  not  to  be 
identified,  said  it’s  difficult  for 
any  vendor  to  develop  a  secu¬ 
rity  curriculum  for  its  own 
products.  He  said  third  par¬ 
ties.  such  as  the  SANS  Insti¬ 
tute.  tend  to  take  a  more  criti¬ 
cal  and  chorouj^  approach.  I 


According  to  Ajsftan  Rinnen. 
an  analyte  at  Sartnar  Inc.  in 
Sternford.  Corwu  Mteroaoff  more 
toan  doubled  Ns  NAS  revenue 
test  year  and  had  a  15%  ihare  of 
toe  $14  bSon  mvhte.  In  com- 
porteon.  NatApp  had  a  37%  mar- 
iot  afore.  Rfevian  said. 

Oeopite  totegap.  Mterosofl  IB 
stering  to  rip  at  NelApp's  heete. 
said  Demte  Mtettv  an  analyte  at 
EvaAMlor  Bniito  inc  to  Engle¬ 
wood.  Cote,  Ts  jute  toe  het  toat 
toey'ri  maUng  R  aov  ter  CEMb 
to  sal  tote  stuff.”  he  said. 

-LueasMBanan 
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Legal  Threat  Won’t  Deter  Linux 
Adoption  for  Now,  Users  Say 


But  uncertainty' 
raises  concerns 
about  future  plans 


BY  PATRICK  THIBODEAU 

The  SCO  Group  Inc.'s  claim 
that  the  Linux  kernel  contains 
large  blocks  of  illegal  code  isn't 
stalling  corporate  adoption  of 
the  open-source  operating  sys¬ 
tem.  But  the  case  is  clearly  get¬ 
ting  the  attention  of  many  IT 
managers,  and  some  said  the 
uncertainty  it's  creating  could 
have  an  impact  on  fu¬ 
ture  Linux  imple- 
mentation  plans. 

Lindon.  Utah-  ^ 
based  SCO. 
which  in  March 
filed  a  SI  billion 
lawsuit  against 
IBM  alleging  mis¬ 
appropriation  of 
trade  secrets  and  unfair  com¬ 
petition  [Quickiink  36901]. 
now  claims  that  sections  of 
the  Linux  kernel  —  in  chunks 
of  code  as  large  as  15  lines  — 
were  copied  from  its  Unix 
System  V  operating  system.  In 
May,  the  company  sent  letters 
to  Fortune  1,000  and  Global 
500  companies  with  a  vague 
warning  that  using  Linux  could 
put  them  at  legal  risk  (Quick- 
Link  38514].  But  so  far  SCO’s 
actions  don't  appear  to  be  af¬ 
fecting  corporate  rollouts. 

"I  have  not  heard  of  the  law¬ 
suit  substantially  altering  peo¬ 
ple’s  plans  for  Linux  deploy- 
ment,"  said  Jim  Battan,  presi¬ 
dent  of  the  Portland.  Ore., 
chapter  of  the  Chicago-based 
Society  for  Information  Man¬ 
agement.  “It's  something  most 
companies  are  observing 
closely  but  aren’t  too  worried 
that  there  will  be  substantial 
end-user  complications.'' 

PHNEIT 

Novell  challenges  SCO  to  prove  Its 
Lnuxaleoations 

QuicUJiikS87S4 

M  cowage:  Additional  stones  on 
this  subieci  are  available  at 

OQuiekLjnka3260 

wT»w.cawipiilar»»oriiLuiiii 


Duke  Energy’  Corp.  in  Char¬ 
lotte.  N.C.,  for  instance,  is  pro¬ 
ceeding  apace  with  its  Linux 
adoption,  said  Bruce  Ander¬ 
son.  the  company's  general 
manager  of  IT  strategies  and 
technical  architecture.  Like  a 
lot  of  large  companies.  Duke 
Energy  has  Linux  on  limited- 
function  appliance  devices. 

Dan  Agronow.  vice  presi¬ 
dent  of  technology  at  Weath- 
er.com  and  Weather  Channel 
Enterprises  Inc.  in  Atlanta, 
said  SCO's  actions  raise  more 
questions  than  answers. 
“It's  having  no  effect  at 
ill”  on  Limu  use  at 
his  company,  said 
Agronow.  “’niere's 
too  much  uncer¬ 
tainty." 

TTk  uncer¬ 
tainty  and  skep¬ 
ticism  over 
SCO's  claim  stem  from  a  lack 
of  proof.  SCO  said  that  begin¬ 
ning  next  week,  it  will  show  its 
source  code  to  analysts  who 
agree  to  sign  a  nondisclosure 
agreement.  But  it  may  have 
trouble  getting  taken. 

Giga  Information  Group 
Inc.  analyst  Stacey  Quandt 
said  she  is  wary  that  signing  a 
nondisclosure  agreement 
could  prevent  her  from  dis¬ 
cussing  the  legitimacy  of  SCO's 
claims.  She  called  the  offer  a 
PR  stunt.  "(SCO]  should  tel) 
everybody  what  they  have," 
said  Quandt,  who  has  advised 
clients  of  Cambridge.  Mass.- 
based  Giga  to  continue  with 
their  Linux  adoptions. 

George  Weiss,  an  analyst  at 
Gartner  Inc.  who  recently  rec¬ 
ommended  minimizing  Linux 
adoption  in  complex,  mission- 
critical  systems  until  the  mer¬ 
its  of  SCO's  claims  or  any 
judgments  are  dear,  has  also 
been  talking  to  SCO.  He  said 
he's  leaning  against  accepting 
SCO’s  offer,  noting  that  SCO  is 
making  its  case  based  on 
“vague  inferences"  and  is  ask¬ 
ing  analysts  to  do  the  same. 

"It’s  stepping  right  into  their 
shoes."  he  said. 

Regardless  of  the  uncertain¬ 


ties,  legal  experts  said  users 
have  to  pay  attention.  “The 
fact  that  you  ignored  it  could 
potentially  cause  your  dam¬ 
ages  to  increase  substantially." 
said  Brian  E.  Ferguson,  an  at¬ 
torney  in  McDermott,  Will  & 
Emery’s  Washington  office. 
'The  ostrich's  head-in-the- 
sand  approach  is  deftnttely 
not  an  optioa" 

Until  the  case  is  resolved. 
Peter  Mojica,  a  vice  president 
at  AXS-One  Inc.,  a  Rutherford. 
N.J.,  supply  chain  software 
vendor,  said  be  expects  com¬ 
panies  will  at  least  consider 
the  legal  challenge  before  pro¬ 
ceeding  with  Linux  adoptions. 


— “It  will  defi¬ 
nitely  chill  it,"  said 
Mojica,  although  he  noted  that 
Linux  wit)  still  be  widely 
adopted  in  the  long  run  “It  is 
kind  of  hard  to  stop  the  open- 
source  train."  he  said. 

Barry  Brunetto.  direaor  of 
information  systenw  at  Port¬ 


land.  Ore- -based  sponing 
gotids  and  power  equipment 
manufacturer  Blount  Interna¬ 
tional  Inc.,  said  SCO's  legal 
claims  may  be  a  factor  in  any 
strategic  Linux  decision  his 
company  makes.  “It  does  pla>’ 
into  our  mind."  he  said  I 

Reporter  Todd  R.  Weiss 
contribuled  to  this  story. 


SCO  Official  Defends  Linux  Attack 


TheSCOGroupdaimsthalbe- 
Qinning  next  week.  I  Mi  show 
aialysts  wtfwte  ihe  (irn  code  it 
owns  has  been  legaly  copied 
into  the  Linui  kemsf.  In  an  inter¬ 
view  with 

RathekThtoWchriiSen* 
tag.  senior  Wee  president  and 
geneml  maiegar  of  SCOsofce. 
the  itWslon  of  SCO  Group  that's 
in  charge  of  protecUno  the  com¬ 
pany's  inieiectuai  property,  dts- 
cussed  SCO's  postton. 

WhyeMdUm 
MantriByewcUm 
■erieialir?  Think  about 
if  I  was  the  CIO  of  a 
company  and  I'm  going 
to  be  running  my  bust* 
nessonanoperaiino 
systemtheihasaninlet- 
ieciuaf  property  founda¬ 
tion  that  by  almost 
everyone's  admission,  b 
bultonquicksanil 
There  Is  no  mechanism  in  Linux 
to  ensure  (the  legelty  of]  that 
irrteiBCtoal  property  *  Ite  soifoe 
code  beeig  contrbulad  by  wrt- 
ous  people. 

ItarrMltotlwlBlM 


eonpMiM?  The  one  thing  that 
we  specificaly  want  fnm  those 
t.500compeniesthalwedir8Ct- 
(y  sent  tho»  leKars  to  b  for 
Btem  to  not  take  our  wont  on  the 
warning  that  we  sent .  .  .  but  to 
seek  an  opinion  of  their  leg^ 
counsel  as  to  the  bsues  that  we 
rafiad. 


Ltom  train  theb  eyitem? 

We're  not  maidng  any  specdic 
recommendations  at  thb  tone. 


Are  you  eoeeUertog 
tog  UnBOMre  that 

yen  neMed?  Anythtog  b 
ihmysepossixlky.KyDu 

are  going  to  enforce  your 

contracts,  claims  and  n- 

Mectub  property,  you 
hsve  to  be  abb  to  go  to 
utamelely  the  endpoint  of 
inlrinoemenl. 

dial  yw  erenl  frem  ttree* 


Haw  mMy  Irree  of  code  to  Ihe 
Ltonlralafaadtoiet 
cepyrl^  vtotoiM?  It's  vary 
extarm  It  b  many  dWerent 
seettons  of  code  ranging  from 
five  to  to  to  15  Ines  of  code  In 
mulliple  places  that  are  of  bsue. 
up  to  large  blocks  of  code  that 
havebaen  bepproprialaly 
copied  irbo  Urw  in  Wotabon  of 


our  source-code  bcensinQ  con- 
trad.  Thai's  in  the  kernel  AseN. 
so  It  b  significarL  k  6  not  a  Ine 
or  two  here  or  there,  k  was  cMte 
a  surprise  for  us. 

Why  Henwoft  dacMa  to 
gto  a  teanaa  hem  yen? 

(kimpialalyinelatod.  hberosoft 
has  been  addiriQ  more  and  more 
Unix  compBitihty  and  Unix 
imeroperabity  mto  tier  prod¬ 
ucts.  We  got  in  contact  vMlh 
them  aarfy  the  year  to  let  them 
know  that  vm  had  concerns 
about  it  they  had  al  the  appro¬ 
priate  intolectiaf  property  nec¬ 
essary  to  be  prowling  that  Um 
capabity 

We  ended  up  in  negotiations 
where  they  have  kenaed  some 
of  our  Una  Systems  Vintolectu- 
al  property  from  us  lor  use  in 
ther  Services  lor  Urn  products. 

.  They  recognized  that  <  was 
■nportant  to  have  appropriate  in- 
teiectual  property  licenses  for 
the  property  they  am  using. 

HwayeewtodeaWmiM'l- 

eeMbig  ofier  to  dto  1.S00 
cempesiee  Wsl  reeeived  yem 

totter?  Wh  have  no  specdic  pro¬ 
gram  or  aotobon  tor  soMng  te 
Unux  Intoloctoal  property  pfob- 
brnrighlnow. 


cwpvniwHis  kHiim 
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Microsoft  Forms 
Security  Team . . . 

Microsoft  Corp/s  IT  socuritv 
business  imH  hes  set  up  a  group 
that  will  establish  new  software 
development  processes  af>d  looli 
at  securtty  issues  across  ail  its 
product  Hnes.  The  Security  Engi¬ 
neering  Strategy  team  wUI  have 
about  10  workers  recruited  from 
inside  and  outside  Microsoft 
said  director  Scott  Upner.  The 
company  needs  To  do  a  more 
coherertt  fob"  of  trying  to  limit 
security  flaws,  he  added. 


. . .  And  Warns  of 
Software  Flaws 

Microsoft  also  issued  two  bul¬ 
letins  warning  of  vulnerabHHies 
in  Hs  Web  server  aitd  Window 
Media  Services  software,  ft  re¬ 
leased  patches  designed  to  fix 
the  flaws,  none  of  which  were 
given  a  “crfticar  severity  rating. 
In  addition,  Microsoft  pulled  from 
its  Web  site  an  updated  imple- 
mentation  of  the  IPsec  security 
protocol  for  Windows  XP  after 
some  users  reported  probfems. 


Symantec,  DISA 
Sign  Security  Deal 

Symantec  Corp.  announced 
a  three-year  deal  to  provide 
the  U.S.  Defense  Information 
Systems  Agency  (OtSA)  with 
early-waming  Mormation  about 
IT  security  tfueats  and  cyber- 
attacks.  The  data  wdl  complement 
other  systems  at  DISA  and  will 
be  used  to  formukte  recommerr- 
dations  for  protecting  fT  assets 
within  the  Pentagon,  the  Cuper¬ 
tino,  CaM. -based  company  said. 


Short  Takes 

DELL  COMPUTER  COftP  said 
that  EASTMAN  CHEMICAL  CO  in 
Kirtgsport  Tenn.,  is  buying  about 
14,000  desktop  and  notebook 
PCs  in  a  S16  miOion  upgrade 
deal . . .  I8M  announced  a  low- 
ernl  Unix  server  that's  based  on 
its  Power4*  micrDprocessor. 
completing  a  shift  of  its  systems 
to  that  chip. 


MAKK  IIAl  [  •  ON  I  Hl-  MARK 


HP  to  Update 
Open  View  Road  Map . . . 

.  - .  later  this  month,  says  Todd  DcLaughler.  He’s  OpenView  vice  presi¬ 
dent  at  Hewlett-Packard  Co.,  so  he  should  know.  But  he’s  a  bit  mum 
on  the  details,  revealing  only  that  Service  Desk  4.5  will  be  bumped 
to  Version  .\0  and  include  more  automated  problem-resolution  capability. 
According  to  DeLaughter,  "Wc  view  service  management  as  not  the 
endg;ime.  We  want  network  management  to  evolve  into  adaptive  ser¬ 
vices.”  (That’s  HP’s  phrase  for  utility  computing.)  He  adds  that  the 


industry  is  moving!  toward  automating 
problem  resolution  with  ihc  help  of  IT 
management  systems  like  OpenView. 

"It's  .1  trust  that  builds  over  time."  he 
says.  OpenView  user  loc  Madden,  diree- 
lur  of  managed  services  for  three  data 
centers  run  by  ConMinus  Ine.  in  Salt  Lake 
City,  has  an  interesting  t.ike  on  who 
trusLs  products  like  OpenView  to  identi¬ 
fy  problems  and  fix  them  without  human 
intervention.  "System  administrators  and 
DBAs  show  miirc  w’illingness  tt>  accept 
automation.”  he  observ-cs.  “Network  guys 
are  less  inclined."  Why’s  that?  Madden 
thinks  operating  systems  and  databases 
suffer  fn>m  persistent 
patching  problems,  which 
makes  automatic  patch 
serv’ices  very  desirable. 

Network  pn>blems  tend 
to  be  intermittent,  incon¬ 
sistent  and.  at  times,  just 
plain  ine.xplicable.  which 
makes  human  imerven- 
lion  invaluable.  •  If  you 
invest  in  IT  vendors,  you 
may  have  noticed  that 
database  companies  are 
prized  by  Wall  Street 
more  than  firms  whose 


A  new  fillet  irvg  tool  Chaperone 
for  Exchanae  from  Ouffteid. 

Va -based  '  ^  i 

U'"..  qoesmio  befa-fcsting  <n 
two  wi-oks  and  will  ship  bv  the 
end  of  July,  The  groOutf  filferi 
out  soam  and  runs  Kuvword 
searches  on  outtiomg  e-mail  to 
prevenl  ccimoany  r»ecrefs  from 
finding  fheir  wav  mlo  the  wrong 
hands  Pricing  hasn’t  been  set. 


prtiducts  manage  unstructured  data,  de¬ 
spite  the  fact  that  10  times  as  much  corpo¬ 
rate  information  is  stored  in  unstructured 
formats  such  as  e-mails.  Web  pages  and 
whatnot.  I’rabhakar  Raghavan.  chief 
technology  officer  at  Verity  Inc.,  grouses 
that  if  you  ItHik  at  market  capitalizations 
(outstanding  shanks  multiplied  by  share 
price)  of  database  companies  and  com¬ 
pare  them  with  the  slew  of  search,  docu¬ 
ment  management  and  content  manage¬ 
ment  businesses,  you’ll  see  that  the  stock 
market  prefers  database  vendors.  (That’s 
pmbabiy  because  Google  Inc.  is  siiU  a 
private  company.)  But  that  may  change  in 
three  to  five  years,  he  says, 
as  unstructured  data 
search  tools  become 
even  more  analytical  and 
add  advanced  XML 
queries.  Databases  will 
be  constrained  in  this 
area  because  of  their 
rigid  schemas.  Verity 
isn't  waiting  until  then  to 
make  improvements  tu 
its  products.  At  the  end 
of  this  month,  the  Sunny¬ 
vale.  Calif.-hased  search 
technology'  vendor  plans 


j  to  ship  ihe  .rl  upgrade  of  its  Ultraseok 
search  engine,  adding  a  new  graphical 
user  interface  tool  to  lay  out  query  re¬ 
sults  and  sprucing  up  its  analytical  func- 
tiorts.  •  Once  you  find  alt  the  data  you 
need,  you’ll  want  to  do  something  with  it. 
TTie  folks  at  Somerville.  Ma.ss.-based 
I  Spotfire  Inc.  would  appreciate  it  if  you 
ran  it  through  AnalysisHuitder.  a  new  and 
j  free  module  available  today  in  DccisinnSite 
7.2.  the  company’s  business-intelligence 
software.  The  too!  makes  it  pretty  simple 
for  users  to  capture  data  from  a  variety  of 
sources,  annotate  it  and  then  share  it 
with  others  via  e-mail  in  an  HTML  for¬ 
mat  with  a  single  mouse  click.  •  Natural¬ 
ly.  all  (hat  data  has  got  to  live  somewhere, 
and  it  will  increasingly  reside  in  a  stor¬ 
age-area  network  (SAN)  or  network- 
attached  storage  (NAS)  environment. 
Vim’ll  have  more  options  by  month's  end. 
when  Spinnaker  Networks  LLC  in  Pitts¬ 
burgh  ships  .SpinServer  4100.  The  new 
NAS  device  can  manage  a  single  file  as 
big  as  22TB.  (Or,  slightly  big(^  than  the  size 
of  a  certain  editor  in  chieTs  inleniaJ  memos.) 
And  a  six-node  cluster  of  the  4100  can 
handle  11  petabytes  of  data.  (Room  for 
plenty  of  memos.)  Marketing  vice  presi¬ 
dent  IcffHornung  displays  a  remarkable 
honesty  in  admitting  that  his  young 
start-up  “is  behind  companies  with 
longer  histories  in  terms  of  oficring  a 
complete  solution.”  But  the  4100.  whose 
little  brother  the  3300  shipped  last  year, 
already  integrates  into  most  SAN  envi- 
I  ronmenis  and  works  with  Adv-anced 
I  Technology  Attachment  drives  from 
I  Ne.xan  Inc.  The  major  drawback  might 
be  in  backup  applications.  Right  now.  it 
works  only  with  backup  software  from 
Veritas  Software  Corp.  Homung  says 
you  can  expect  to  see  compatibility  stion 
with  backup  products  from  Legato  Sys¬ 
tems  Inc.,  TTivoli  Software  and  Computer 
Associates  International  Inc.  All  this  for 
less  than  S70.000.I 


3Com  Readies  Low-Cost  Gigabit  Switches 


8V  MATT  HAMBLEN 

.ICom  Corp.  today  plans  to  ex¬ 
pand  its  line  of  switches  for 
small  and  medtum-si/e  busi¬ 
nesses  by  announcing  five 
(lignhit  Ethernet  dewices. 

The  new  s'wiiches  range  in 
price  fmm  SI49  for  a  model 
with  eight  ports  —  only  one  of 
which  is  capable  of  Gigabit 
Ethernet  performance  —  to 
53.4‘)5  for  a  system  with  24 
Gigabit  Ethernet  ports,  said 
Robert  Winch,  director  of 
product  management  at  Santa 


Clara.  Calif.-b3.scd  .TCom.  Two 
of  the  switches  are  desktop 
models,  and  the  other  three 
are  rack-mountable.  All  five 
are  due  this  summer. 

Kirk  McClanahan.  network 
administrator  at  CSA  Travel 
Briilectinn  in  San  Diego,  said 
the  insurance  provider  plans 
to  add  two  switches  to  its  net¬ 
work  to  mow  information  be¬ 
tween  175  desktop  PCs  and  its 
data  storage  devices. 

IXaia-transfer  w-orkloads  on 
eSA's  network  are  expected  to 


increase  because  of  corporate 
growth.  McClanahan  said.  He 
added  that  CSA  “needed  to  in- 
crea.se  the  available  speed 
without  spending  a  lot.” 

3Com  is  one  of  several  lead¬ 
ing  vendors  in  the  market  for 
unmanaged  switches,  which 
operate  without  relying  on  the 
Simple  Network  Management 
ITotocol  and  function.s  that 
typically  help  IT  administra¬ 
tors  monitor  network  access 
and  usage,  said  Joshua  fohn- 
son.  an  analyst  at  Synergy  Re¬ 


search  Group  Inc.  in  Phoenix. 

“Ciimpared  to  many  seg¬ 
ments  of  neiwxirking.  this  is 
one  area  ihal’.s  growing.”  |ohn- 
son  said,  adding  that  annual 
sales  of  unmanaged  switches 
total  about  $500  million.  Other 
lop  vendors  include  Dell  Com¬ 
puter  Corp.,  D-Link  Systems 
Inc^  Netgear  Inc.  and  Links>’s 
Group  Inc. 

Sales  of  switches  supporting 
Gigabit  Ethernet  data  rates 
should  also  see  growth  “be¬ 
cause  the  dificrence  in  price 
over  standard  Ethernet  is  min¬ 
imal.”  said  Zeus  Kerrav’ala.  an 
analyst  at  The  Yankee  Group.  I 


BRIEFS 


Mierosoft  Forms 
Security  Team... 

IftcnMofI  CanL's  IT  sscurity 
biaiMw  unil  has  M(  up  a  oroup 
that  wfl  astablah  iww  software 
davalopiMRt  pfocassas  and  looh 
at  aacurily  Isaiws  across  al  Ms 
product  Inss.  T)w  SscurMy  Engi' 
nsariag  Siratspy  taamwdl  haw 
ahout  10  worhan  rscniMad  from 

I — f-t-  — 1  -  .. .  1  ■  ■  *- 

msMt  am  oMSMis  MKToaon. 
saM  dfroctor  Scott  Upnor.  TIm 
company  nasds  le  do  a  mors 
eoharanl  toh"  of  trying  to  ImH 
loeurtty  flaws,  ha  addad. 


...  And  Warns  of 
Software  Flaws 

MfemoA  afao  issusd  two  bufr 
Mm  wamteg  of  wdnarablWas 
In  Ms  Wsb  aarvor  and  Window 
hladtaSorvlcaaaoftwarB,ltro- 
ioaaad  poldiaa  daaignad  to  fix 
tfw  flaws,  nono  of  wtiM  warn 
ghrnn  a  "crfHeaT  sovarity  rating. 

Is  -  *-  -■  ■!»_  .1  « 

■I  aooraon,  oacnioDri  pwwo  inini 

Ms  Wsh  sMa  an  tgidatad  iwpir 
mantaMon  of  tha  ffaac  sacurity 
protocol  for  Windows  XP  after 
SOON  users  rsportad  proUems. 


Symantec,  OISA 
S^  Security  Deal 

Symantac  Corp.  annoiweod 
aUaaa  yaw  dMtepnwida 
the  Its.  Defenaa  hfformation 
Syotama  flgancy  (DBA)  with 
awiy  warning  Intormatlon  ahou! 
IT  aaeurfly  throats  and  cyber 
attado.  Tin  dWa  wti  eompiamant 
othar  aysiwna  at  06A  and  wH 
btuaadlofDiyndalaracommen- 

dadomtarpfetactlngfT— 

wtttdn  flw  ftntagon,  tha  Cupar 
tine.  CaW.-haasd  company  said. 


Short  Takes 

DEU  COMPUTER  CORP.  said 
that  EASTMAN  CHEMICAL  CO.  in 
lOngspert  Tsmu,  is  buying  about 
14.000  desktop  and  notebook 
PCa  In  a  StO  nMon  upgrade 
daaL . . .  IBM  arawuncod  a  knr 
ond  Unix  aarwr  flyTs  based  on 
its  Pawsrd*  ndcroprocassor. 
eompMng  a  shift  of  Its  systams 
lotiutddp- 


MARK  HALL  .  ON  THE  MARK 


HP  to  Update 
OpenView  Rrad  Map . . . 

. . .  later  this  month,  says  Todd  DcLaughter.  He’s  OpenView  vice  presi¬ 
dent  at  Hewlett-Packard  Co.,  .so  he  should  know.  But  he’s  a  bit  mum 
on  the  details,  revealing  only  that  Service  Desk  4.5  will  be  bumped 
to  Version  5.0  and  include  more  automated  probtem-resolirtion  capacity. 
According  to  DeLaughter,  “We  view  service  management  as  not  the 
endgame.  We  want  network  management  to  evolve  into  adaptive  ser¬ 
vices."  (That’s  HP’s  phrase  for  utility  computing.)  He  adds  that  the 


industry  is  moving  toward  automating 
problem  resolution  with  the  help  of  TT 
management  systems  like  OpenView. 

“It's  a  trust  that  builds  over  time,"  be 
says.  OpenView  user  Joe  Madden,  direc¬ 
tor  of  managed  services  for  three  data 
centers  run  by  Consonus  Inc  in  Salt  Lake 
City,  has  an  interesting  take  on  who 
trusts  products  like  OpenView  to  identi¬ 
fy  problems  and  fix  them  without  human 
intervention.  “System  administrators  and 
DBAs  show  more  willingness  to  accept 
automation,”  he  observes.  “Network  guys 
are  less  inclined."  Why's  that?  Madden 
thinks  operating  systems  and  databases 
suffer  from  paratelint 
pitching  probimB.  which 
makes  automatic  patch 
services  very  desirable. 

Network  problems  tend 
to  be  intermittent,  incoo- 
slstent  and.  at  times,  fust 
plain  inexplicable,  which 
makes  human  interven¬ 
tion  invaluable.  •  If  you 
invest  in  IT  vertdors,  you 
may  have  noticed  that 
database  companies  are 
prized  by  Wall  Street 
more  than  firms  whose 
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products  manage  unstructured  data,  de¬ 
spite  the  fact  that  10  tinws  is  much  corpo¬ 
rate  information  is  stored  in  unstructured 
formats  such  as  e-mails,  Web  pages  and 
whatnot.  Prabhakar  Ra^iavan,  chief 
technology  ofneer  at  Verity  Inc.,  grouses 
that  if  you  look  at  market  capitalizations 
(outstanding  shares  multiplied  by  share 
price)  of  database  companies  and  com¬ 
pare  them  with  the  slew  of  search,  docu¬ 
ment  management  and  content  manage¬ 
ment  businesses,  you’ll  see  that  the  stock 
market  prefers  database  vendors.  (That's 
probably  because  Google  Inc.  is  still  a 
private  company.)  But  that  may  change  in 
throe  to  five  yean,  he  says, 
as  unstructured  data 
search  tools  become 
even  more  analytical  and 
add  advanced  XML 
queries.  Databases  will 
be  constrained  in  this 
area  because  of  their 
ri^  schemas.  Verity 
isn't  waiting  until  then  to 
make  improvements  to 
its  products.  At  the  end 
of  this  month,  the  Sunny¬ 
vale,  Calif.-based  search 
technology  vendor  plans 


to  ship  the  5.1  upgrade  of  its  Ultraseck 
search  engine,  adding  a  new  graphical 
user  interface  tool  to  lay  out  query  re¬ 
sults  and  sprucing  up  its  analytical  func¬ 
tions.  ■  Once  you  find  all  the  data  you 
need,  you'll  want  to  do  something  with  it. 
The  folks  at  Somerville.  Mass.-based 
Spotftre  Inc.  would  appreciate  it  if  you 
ran  it  through  AnalysisBuilder,  a  new  and 
Itm  moduit  avMbbla  today  in  DecisionSite 
72,  the  company's  business-intelligence 
software.  The  tool  makes  it  pretty  simple 
for  users  to  capture  data  from  a  variety  of 
sources,  annotate  it  and  then  share  it 
with  others  \ia  e-mail  in  an  HTML  for¬ 
mat  with  a  single  mouse  click.  •  Natural¬ 
ly.  all  that  data  has  got  to  live  somewhere, 
arui  it  will  increasingly  reside  in  a  stor¬ 
age-area  network  (SAN)  or  network- 
anached  storage  (NAS)  etrvtronment 
Youll  have  more  options  by  month's  end. 
when  Spinnaker  Nctworics  LLC  in  Pitts¬ 
burgh  ships  SplnServer  4100.  TTic  new 
NAS  device  can  manage  a  single  file  as 
big  as  22TB.  (Or,  tfighily  biggar  than  the  sin 
M  a  cartain  editor  in  chkirs  Marnal  nMrnoa.) 
And  a  six-node  cluster  of  the  4100  can 
handle  U  petabytes  of  data.  (Room  for 
plenty  of  memos.)  Marketing  vice  presi¬ 
dent  jeff  Homung  displays  a  remarkable 
honesty  in  admitting  that  bis  young 
start-up  “is  behind  companies  with 
longer  histories  in  terms  of  offering  a 
complete  solution.”  But  the  4100.  whose 
little  brother  the  3300  shipped  last  year, 
already  integrates  into  most  SAN  envi¬ 
ronments  and  works  with  Advanced 
Technology  Anachment  drives  from 
Nexan  Inc.  The  major  drawback  might 
be  in  backup  applications.  Right  now,  it 
works  only  with  backup  software  from 
Veritas  Software  (2orp.  Homung  says 
you  can  expect  to  see  compatibility  soon 
with  backup  products  from  Legato  Sys¬ 
tems  Incn  Tivoli  Software  and  Computer 
Associates  International  Inc.  Al  this  for 
iessthanS70.000.l 


3Com  Readies  Low-Cost  GigabK  Switches 


BY  MATT  HAMBLEN 

3Com  Corp.  today  plans  to  ex¬ 
pand  its  line  of  switches  for 
small  and  medium-size  busi¬ 
nesses  by  announcing  five 
Gigabit  Ethernet  devices. 

The  new  switches  range  in 
price  from  S149  for  a  model 
with  eight  ports  ~  only  one  of 
which  is  capable  of  Gigabit 
Ethernet  performance  —  to 
$3,495  for  a  system  with  24 
Gigabit  Ethernet  ports,  said 
Robert  Winch,  director  of 
product  management  at  Santa  I 


Clara,  Calif.-based  3Com.  Two 
of  the  switches  are  desktop 
models,  and  the  other  three 
are  rack-mountable.  All  five 
are  due  this  summer. 

Kirk  McClanahan.  network 
administrator  at  CSA  Travel 
Protection  in  San  Diego,  said 
the  insurance  provider  plans 
to  add  two  switches  to  its  net¬ 
work  to  move  information  be¬ 
tween  ITS  desktop  PCs  and  its 
data  storage  devices. 

Data-transfer  workloads  on 
eSA's  network  are  expected  to 


increase  because  of  corporate 
growth.  McClanahan  said.  He 
added  that  CSA  “needed  to  in¬ 
crease  the  available  speed 
without  spending  a  lot” 

3Cora  is  one  of  several  lead¬ 
ing  vendors  in  the  market  for 
unmanaged  switches,  which 
operate  without  relying  on  the 
Simple  Network  Management 
Protocol  and  functions  that 
typically  help  IT  administra¬ 
tors  monitor  networic  access 
and  usage,  said  Joshua  John¬ 
son.  an  analyst  at  Synergy  Re¬ 


search  Group  Inc.  in  Phoenix. 

“Compared  to  many  seg¬ 
ments  of  networiung.  this  is 
one  area  that’s  growing,*  John¬ 
son  said,  adding  that  annual 
sales  of  untnanaged  switches 
total  about  $500  million.  Other 
top  vendors  include  Dell  Com¬ 
puter  Corp.,  0-Unk  Systems 
Inc..  Netgear  Inc.  and  Unksys 
Group  Inc. 

Sales  of  switches  supponing 
Gigabit  Ethernet  data  rates 
should  also  see  growth  “be¬ 
cause  the  difference  in  price 
over  standard  Ethernet  is  min¬ 
imal.”  said  Zeus  Kerravala,  an 
analyst  at  The  Yankee  Group.  I 


THE  RIGHT  PIECE 
BRINGS  IT  ALL 
TOGETHER. 

Imagine  giving 
your  applications 
optimal  performance 
on  blade  servers. 
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System  Crashes  Linked  to 
Centrino,  VPN  CUent  Glitch 


Now  Intel  mobile  chip  set  incompatible 
w  itb  Nortel's  software,  possibly  others 


av  eoa  brcwin 

I  MU  n>kb.  last  week 
tumiHl  tiff  software  used 
by  its  t!entrinii  mobile 
chip  set  because 
of  incompatibility 
prt*blems  that  can 
cause  st»me  notebttok'and  lap¬ 
top  PCs  to  be  hit  by  blue- 
screen  system  crashes  if  users 
try  to  run  virtual  private  net¬ 
work  tV'PN'J  client  software. 

The  problems  came  to  li|:hi 
after  Nortel  Netuorks  Ltd. 
acknimlcdyn.*d  that  the  operat- 
in^:  system  on  Cemrim»-based 


WIRELESS 


PCs  ean  stop  functtonin^ 
when  Nortel’s  Contivity  VPN 
software  is  installed.  A  posting 
on  Inlet's  Web  site  indicates 
that  the  s\jspected 
cause  of  the  system 
crashes  could  apply 
to  any  VPN  client  package. 

Mike  Sehexnaydre.  a  soft¬ 
ware  engineer  at  Nortel,  said 
the  Brampton.  Ontario-based 
company  has  determined  that 
the  conlliets  between  Coniivi- 
ty  and  Centrino  stem  from  the 
use  of  an  adapter-switching 
feature  in  the  lntel-deveU»ped 


'  stUtware  used  to  manage  wire¬ 
less  LAN  setup  profiles  and 
other  functions  on  IK's. 

The  adapter-switching  com¬ 
ponent  of  Intel’s  PROSei  soft¬ 
ware  lets  end  users  automati¬ 
cally  switch  from  wired  to 
wireless  connections.  Schev- 
naydre  said.  But  a  w«)rk- 
amund  developed  by  Nonel 
n'quires  IT  dcpartnKmts  to 
uninstall  the  PROSef  drivers, 
according  to  a  technical  bul¬ 
letin  that  the  company  re¬ 
leased  May  14. 

Big  Problem.  No  Solution 

Jonathan  Jordan,  a  1j\N  engi- 
I  neer  at  a  large  textile  company 
I  in  South  Carolina,  is  c.xpcri- 


cncing  firsthand  the  incom¬ 
patibility  between  Centrino 
and  Nortel’s  VPN  software. 
Iordan  said  he  ordea-d  “hun¬ 
dreds”  of  Centrino-based  lap- 
tt)ps  from  Dell  Computer 
Ca)rp-.  only  to  discover  that  in- 
-stalling  the  Contivity  client 
“eau.ses  the  IHZ  to  blue-screen 
upon  reb<H>t.'' 

He  added  that  he  has  woiked 
on  the  problem  with  Dell  and 
Nortel  for  more  than  a  month, 
but  the  vendors  still  dtm’t  have 
a  viable  solution.  Nortel’s 
work-around  disables  useful 
functions  in  PROSet,  Jordan 
said,  and  unless  the  problem  is 
resolved,  his  company  “may 
have  to  move  away  fix>m  the 
Intel  Centrino  chip  set." 

Intel  spokesman  I>3nicl 
Francisco  confirmed  that  the 
incompatibility  issue  involves 
the  adapter-switching  feature 
but  said  that  Intel  thinks  most 
Centrino-based  systems  are  al- 


Tools  Help  Administrators 
Secure  Mobile-Device  Data 


.Abilin  to  contml 
network  access  a 
gn>w  ing  concern 

BV  JAIKUMAR  VUAVAN 

The  mushnx>ming  use  of  mo¬ 
bile  devices  such  as  I’HAs  and 
smart  phone's  is  cre'ating  a 
grtnv'ing  security  problem,  and 
companies  have  few  tooLs  tt) 
deal  with  it. 

But  that’s  changing.  This 
week’s  Gartner  IT  Security 
Summit  in  Wa.shingion  will 
fe'ature  products  from  two 
vendors  that  an.'  intended  to 
help  companie^s  sevure  crilie'al 
data  on  mobile  devices. 

One  of  the  vendors  is 
Credant  Tcchnok^cs  Inc.,  a 
Dallas-based  company  that's 
partly  funded  by  Intel  Corp. 
Credant’s  Mobile  Guardian 
software  lets  c<*mpanics  cen¬ 
trally  manage  security-policy 
administration  and  on-device 
piTlicy  enfijrcement.  aewrding 
to  the  company.  With  it.  admin¬ 
istrators  will  be  able  to  track 
and  comrtil  mobile  device  us¬ 
age  on  their  networks  a.s  »'ell 
as  pnilect  the  data  stored  on 


such  de'viccs  vLi  e'nciy'ption 
and  light  access  control. 

The  other  vendor  is  Balti¬ 
more-based  Bluefire  Security 
Technologies  Inc.  Its  Mobile 
Firewall  Plus  technology  fea- 
iure.s  an  on-device  firewall 
that  protects  data  on  the  sys¬ 
tem  and  provides  a  logging 
and  alerting  service  that  lets 
administrators  track  device 
usage  and  system  compromis¬ 
es.  company  officials  said. 

Red  Flag 

Such  loul.*-  are  aimed  at  ad¬ 
dressing  growing  security 
wncerns  related  to  the  use  of 
nonsecure  mobile  devices  tm 
enterprise  networks,  said  .S;tlly 
I  Hudsim.  an  analyst  at  IDC  in 
Framingham.  Mass. 

As  users  increasingly  move 
to  syne  mtibile  devices  with 
their  t*ffice  systems.  corp<irate 
information  may  begetting 
downloaded  to  those  devices 
with  little  or  no  protection. 

I  “F-nierprises  are  waking  up  to 
I  the  fact  that  it  is  important  to 
I  tmmitor  and  contnd  this  flow." 

I  Hudson  said. 

I  The  22-hospiial  Banner 


Health  system  in  Phoenix  is 
testing  Credant’s  software  to 
determine  whether  it  can  pro- 
livi  patient  health  information 
stored  on  mobile  devices. 

“Thea*'s  a  lot  of  data  that’s 
being  put  on  these  devices." 
said  Dave  Jahne,  a  .senior  secu¬ 
rity  analyst  al  Banner.  "Since 
the  HiPAA  regulations  came 


NEW  PRODUCTS 


Credant  Mobile 
Guardian 

B  An  OTKleviCG  poiicy^nlorce- 
mem  agent  that  encrypts  and 
controls  access  to  data  on  the 
motde  devices. 


•  A  ‘gatekeeper*  agent  that's 
installed  on  ^  systems  that  a  mo¬ 
bile  device  can  s^ichronire  with. 

•  A  centialzed  management 
auditino  and  reporting  competent. 

Bluefire  Mobile 
Firewall  Phis 

■  Encryption  of  data  and  enforce¬ 
ment  of  on-devKe  passwords  to 
access  data. 

•  A  device4evel  manager  tor 
alerting  admmislrators  of 
changes  in  settings  and  fHes. 

B  An  enterpnse  manager  for  cen¬ 
tralized  administration. 


out.  wc  are  looking  for  way.s  to 
secure  that  data." 

I’he  expectation  is  that 
Credant'.s  iechnok>gy  will  al¬ 
low  Banner  to  impose  and  en¬ 
force  strict  security  policies 
related  to  the  u.se  of  such  de¬ 
vices  and  the  data  stored  on 
ihem.  lahne  said. 

De.spite  the  promised  bene¬ 
fits.  the.se  pnrducis  aren't 
faultless.  The  large  size  of  the 
Credant  agent  siiftwarc  in¬ 
stalled  on  mobile  devices 
could  be  a  problem  for  some 
users,  according  to  Jahne. 
Meanwhile.  Bluefire  .icknowl- 
edges  that  its  teehnoK>gy  can 
do  little  to  detect  and  stop 
unauthorized  mobile  devices 
from  logging  onto  networks. 

Even  so.  user  concerns  will 
fuel  increasing  demand  for 
mobile-security  products  such 
.15  firewalls,  enciyiMion  tech¬ 
nology  and  tools  for  intrusion 
dcicciinn,  authentication,  au¬ 
thorization  and  access  control, 
according  to  Hudsoa  IDC  ex¬ 
pects  the  market  for  these 
products  to  grow  71®u  annually, 
from  S84.5  million  in  2002  to 
over  SL2  billion  in  20U7. 

Other  vendors  in  this  small 
but  growing  market  include 
I’ointscc  Mobile  Technologies 
AB  in  Stockholm  and  F-Secure 
Corp.  in  Helsinki.  Finland.  I 


»  The  tnobtle  chip  technology 
currently  supports  WLAN 
access  only  via  the  802.111) 
standard. 

•  Inlelnow.sayiit 

will  ofter  Centrino  with  mued 
802111)  and  802.11q  WLAN 
support  Oy  the  fourth  quarter. 


ready  being  shipped  with  that 
functionality  .switched  off. 

An  advisory  that’s  posted  on 
Intel’s  Web  site  and  dated  Feb. 
26  —  nearly  nv  o  weeks  prior 
to  Centrino's  official  launch 
on  March  12  —  says  the 
adapter-switching  feature 
"must  be  disabled  when  VPN 
client  software  is  in  use." 

Seattle*ba.sed  WatchGuard 
'I'echnologies  Inc.  and  San 
Jose-based  Secure  Computing 
(airp..  two  other  vendors  of 
VPN  clients,  said  they’re  in¬ 
vestigating  whether  there  are 
any  conflicts  between  Centri¬ 
no  and  the  products  they  sell. 

The  Centrino  arehiteclure, 
which  has  been  widely  adopt¬ 
ed  by  hardware  vendors.  In¬ 
cludes  a  Pentium-M  mobile 
pnx'essor  and  a  suppt>rting 
chip  set  that  helps  manage 
power  consumption,  graphics 
cards  and  the  Universal  Serial 
Bus  ports  on  PCs. 

Schexnaydre  said  the  oper¬ 
ating  system  freezes  appear  to 
occur  only  on  Centrino-based 
models  that  include  an  85M}M 
version  of  the  onbtwrd  graph¬ 
ics  and  power  management 
controller.  PCs  with  Intel’s 
855PM  chip  set  don't  appear  to 
be  affected,  he  added. 

Chris  Kozup.  an  analyst  at 
Meta  Gmup  Inc.  in  Stamford. 
Conn.,  said  he  finds  the  fact 
that  Intel  didn't  build  plug- 
and-play  VPN  client  support 
into  Centrino  “bafning."  But 
he  noted  iltat  it  illustrates  the 
fact  that  vendors  of  mobile 
.ind  wireless  technology  have 
done  a  poor  job  of  addressing 
u.scrs‘  security  requirements.  I 
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System  Crashes  Linked  to 
Centrino,  VPN  Client  Glitch 


New  Intel  mobile  chip  set  incompatible 
with  Nortel’s  software,  possibly  others 


BV  BOB  BBCWIN 

INTEL  CORP.  last  week 
turned  off  software  used 
by  Its  Centrino  mobUe 
chip  set  because 
of  incompatibility 
problems  that  can 
cause  some  notebocA  and  lap* 
top  PCs  to  be  hit  by  blue- 
screen  system  crashes  if  users 
try  to  run  virtual  private  net¬ 
work  (VPN)  client  software. 

'Htc  prt^Iems  came  to  light 
after  Nortel  Networks  Ltd. 
acknowledged  that  the  operat¬ 
ing  s)*5tem  00  Centrino-based 


WIRELESS 


PCs  can  stop  functioning 
when  Nortel’s  Contivity  VPN 
software  is  installed.  A  posting 
on  Intel's  Web  site  indicates 
that  the  suspected 
cause  of  the  system 
crashes  could  apply 
to  any  VPN  client  package. 

Mike  Schexnaydre.  a  soft¬ 
ware  engineer  at  Nortel,  said 
the  Brampton,  Ontario-based 
company  has  determined  that 
the  conflicts  E>etween  Contivi* 
ty  and  Centrino  stem  from  the 
use  of  an  adapter-switching 
feature  in  the  Intel-developed 


software  used  to  manage  wire¬ 
less  LAN  setup  profiles  and 
other  functions  on  PCs. 

‘11)6  adapter-switching  com¬ 
ponent  of  Intel’s  PROSet  soft¬ 
ware  lets  end  users  automati¬ 
cally  switch  from  wired  to 
wireless  connections.  Schex¬ 
naydre  said.  But  a  work¬ 
around  developed  by  Nortel 
requires  IT  departments  to 
uninstall  the  PROSet  drivers, 
according  to  a  technical  bul¬ 
letin  that  the  company  re¬ 
leased  May  14. 

Big  ProUem.  No  Sohitian 

Jonathan  Jordan,  a  LAN  engi¬ 
neer  at  a  large  textile  company 
in  South  Carolina,  is  experi¬ 


encing  firsthand  the  incom¬ 
patibility  between  Centrino 
and  Nortel’s  VPN  software. 
Jordan  said  he  ordered  ’‘hun¬ 
dreds"  of  Centrino-based  lap¬ 
tops  from  Dell  Computer 
Corp..  only  to  discover  that  in¬ 
stalling  the  Contivity  client 
“causes  the  PC  to  blue-screen 
upon  reboot." 

He  added  that  be  has  worked 
on  the  problem  with  Dell  and 
Nortel  for  more  than  a  month, 
but  the  vendors  still  don’t  have 
a  viable  solution.  Nortel’s 
work-around  disables  useful 
functions  in  PROSet.  Jordan 
said,  and  unless  the  problem  is 
resolved,  his  company  "may 
have  to  move  away  from  the 
Intel  Centrino  chip  set” 

Intel  spokesman  Daniel 
Francisco  confirmed  that  the 
incompatibility  Issue  involves 
the  adapter-switching  feature 
but  said  that  Intel  thinks  most 
Centrino-based  systems  are  al- 


Tools  Help  Administrators 
Secure  Mobile-Device  Data 


Ability  to  control 
network  access  a 
growing  concern 


BV  JAIKUMAB  VIJAVAN 

The  mushrooming  use  of  mo¬ 
bile  devices  such  as  PDAs  and 
smart  phones  is  creatii^  a 
growing  security  problem,  and 
companies  have  few  tools  to 
deal  with  it. 

But  that’s  changing.  This 
week’s  Gartner  IT  Security 
Summit  in  Washington  will 
feature  products  from  two 
vendors  that  are  intended  to 
help  companies  secure  critical 
data  on  mobile  devices. 

Dne  of  the  vendors  is 
Credant  Technolo^es  Inc.,  a 
Dallas-based  company  that’s 
partly  fonded  by  Intel  CUirp. 
Credam's  Mobile  Guardian 
software  lets  companies  cen¬ 
trally  man^te  security-policy 
administration  and  on-device 
policy  enforcement,  according 
to  the  company.  With  it,  admin¬ 
istrators  will  be  able  to  track 
and  control  mobile  device  us¬ 
age  on  their  networks,  as  well 
as  protect  the  data  stored  on 


such  devices  via  encryption 
and  tight  access  control. 

The  other  vendor  is  Balti¬ 
more-based  Bluefire  Security 
Technologies  Inc.  Its  Mobile 
Firewall  Plus  technology  fea¬ 
tures  an  on-device  firewall 
that  protects  data  on  the  sys¬ 
tem  and  provides  a  logging 
and  alerting  service  that  lets 
administrators  track  device 
usage  and  system  compromis¬ 
es.  company  officials  said. 

Red  Flag 

Such  tools  are  aimed  at  ad¬ 
dressing  growing  security 
concerns  related  to  the  use  of 
nonsecure  mobile  devices  on 
enterprise  networks,  said  Sally 
Hudson,  an  analyst  at  IDC  in 
Framingham.  Mass. 

As  users  increasingly  move 
to  sync  mobile  devices  with 
their  office  systems,  corporate 
information  may  be  getting 
downloaded  to  those  devices 
with  little  or  no  protection. 
"Enterprises  arc  waking  up  to 
Che  fact  that  it  is  important  to 
monitor  and  control  this  flow," 
Hudson  said 

The  22-hospical  Banner 


Health  system  in  Phoenix  is 
testing  Credant's  software  to 
determine  whether  it  can  pro¬ 
tect  patient  health  information 
stored  on  mobile  devices. 

There's  a  lot  of  data  that’s 
being  put  on  these  devices," 
said  Dave  Jahne.  a  senior  secu¬ 
rity  analyst  at  Banner.  "Since 
the  HIPAA  regulations  came 
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out,  we  are  looking  for  ways  to 
secure  that  data." 

The  expectation  is  that 
Credant’s  technology  will  al¬ 
low  Banner  to  impose  and  en¬ 
force  strict  security  policies 
related  to  the  use  of  such  de¬ 
vices  and  the  data  stored  on 
them.  Jahne  said. 

Despite  the  promised  bene¬ 
fits,  these  products  aren’t 
faultless,  llie  large  size  of  the 
Credant  agent  software  in¬ 
stalled  on  mobile  devices 
could  be  a  problem  for  some 
users,  according  to  Jahne. 
Meanwhile,  Blucfire  acknowl¬ 
edges  that  its  technology  can 
do  little  to  detect  and  stop 
unauthorized  mobile  devices 
from  logging  onto  networks. 

Even  so,  user  concerns  will 
fuel  increasing  demand  for 
mobile-security  products  such 
as  firewalls,  encryption  tech¬ 
nology  and  cools  for  intrusion 
detection,  authentication,  au¬ 
thorization  and  access  control 
according  to  Hudson.  IDC  ex¬ 
pects  the  market  for  these 
products  to  grow  71%  annually, 
from  S84.S  million  in  2002  to 
over  S1.2  billion  in  2007. 

Other  vendors  in  this  small 
but  growing  market  include 
Pointsec  Mobile  Technologies 
AB  in  Stockholm  and  F-Secure 
Corp.  in  Helsinki.  Finland.  I 
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ready  being  shipped  with  that 
functionality  switched  off. 

An  advisory  that’s  posted  on 
Intel’s  Web  site  and  dated  Feb. 
26  —  nearly  two  weeks  prior 
to  Centrino's  official  launch 
on  March  12  —  says  the 
adapter-switching  feature 
"must  be  disabled  when  VPN 
client  software  is  in  use." 

Seattle-based  WatchGuard 
Technologies  Inc.  and  San 
Jose-based  Secure  Computing 
Corp..  two  other  vendors  of 
VPN  clients,  said  they're  in¬ 
vestigating  whether  there  are 
any  conflicts  between  Centri¬ 
no  and  the  products  they  sell. 

The  Centrino  architecture, 
which  has  been  widely  adopt¬ 
ed  by  hardware  vendors,  in¬ 
cludes  a  Pentium-M  mobile 
processor  and  a  supporting 
chip  set  that  helps  manage 
power  consumption,  graphics 
cards  and  the  Universal  Serial 
Bus  ports  on  PCs. 

Schexnaydre  said  the  oper¬ 
ating  system  freezes  appear  to 
occur  only  on  C^entrino-based 
models  that  include  an  855GM 
version  of  the  onboard  graph¬ 
ics  and  power  man^emem 
controller.  PCs  with  Intel’s 
855FM  chip  set  don't  appear  to 
be  affected,  be  added. 

Chris  Kozup,  an  analyst  at 
Meta  Group  Inc.  in  Stamford. 
ConiL,  said  he  fmds  the  fact 
that  Intel  didn’t  build  plug- 
and-play  VPN  client  support 
into  Centrino  "baffling."  Bui 
he  noted  that  it  illustrates  the 
fact  that  vendors  of  mobile 
and  wireless  technology  have 
done  a  poor  job  of  addressing 
users’  security  requirements.  I 
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AT&T  Aims  Network  Services 
At  Storage  and  Hosting  Users 


Business-continuity  oflferings  include 
data  backup,  remote  server  monitoring 


BV  matthamblem 

ATJtT  CORP.  last  week 
aiinounced  two  net* 
work  services,  one 
that  connects  corpo* 
rate  systems  to  data  backup 
sites  and  aitother  that  lets  IT 
managers  remotely  monitor 
servers  hosted  by  AT&T  in  its 
data  centers. 

The  StorageConnect  Ser¬ 
vice  and  Direct  Control  offer¬ 
ings  work  with  a  variety  of 
other  services  foctised  on 
business  reliability.  For  exam¬ 
ple.  StorageConnect  can  be 
combined  with  AT&Ts  Ultra- 
vailable  Storage  Service,  a 
partnership  set  up  two  years 
ago  with  Hopkinton,  Mass.- 
based  EMC  Corp.  to  provide 
managed  storage,  said  Beraie 
McElroy,  vice  president  of 
business  continuity  and  high- 
availability  services  at  AT&T. 

The  new  services  expand 
AT&Ts  effort  to  move  beyond 
its  traditional  role  as  a  seller 
of  network  pipes,  said  Zeus 
Kerravala.  an  analyst  at  The 
Yankee  Group  in  Bostoa  No 
other  telecommunications 
carrier  is  offering  as  compre¬ 
hensive  a  set  of  business-con¬ 
tinuity  services,  he  added. 


According  to  McElroy. 
StorageConnea  is  an  end- 
to-end  managed  cotmection 
service,  offering  a  network 
pipe  provisioned  with  a  stor¬ 
age  networking  protocol  that 
connects  a  company's  primary 
data  center  to  a  backup  loca¬ 
tion.  Users  can  choose  one  of 
three  service-level  agreements 
depending  on  their  data  avail¬ 
ability  needs,  and  AT&T  will 
set  up  the  connections  and 
offer  consulting  help. 

Atlanta-based  Worldspan 
U*.  which  operates  a  comput¬ 
erized  reservation  system  for 
the  travel  industry,  has  been 
using  StorageConnect  since 
April  to  link  EMC  Symmetrix 


storage  arrays  at  a  production 
data  center  with  a  backup  IT 
facility. 

David  Lauderdale.  World- 
span's  chief  technology  offi¬ 
cer,  said  the  company  repli¬ 
cates  up  to  12TB  of  informa¬ 
tion  once  or  twice  a  day  be¬ 
tween  the  two  data  centers. 
Eventually.  Worldspan  expects 
to  expand  the  amount  of  repli¬ 
cated  data  to  20TB.  he  add^. 

The  AT&T  service  replaced 


a  laborious  system  of  perform¬ 
ing  nightly  tape  backups  in  the 
main  data  center,  then  ship¬ 
ping  the  tapes  to  a  vault  for 
archiving,  “^e  had  rooms  full 
of  tape  drives  and  rooms  full 
of  people,”  Lauderdale  said. 

StorageConnect  costs  about 
the  same  as  the  tape  backup 
system  did.  Lauderdale  said. 
But,  he  added.  Tve  got  a  total¬ 
ly  new.  remote,  state-of-the-an 
business-continuity  infra- 


AT&T’s  StorageConnect  Service 


Symantec  Upgrades  pcAnywhere 
Remote  Connectivity  Software 


New  version  ups 
speed,  adds  more 
flexible  interface 

BV  MATT  HAMBLEN 

Symantec  Corp.  today  plans  to 
announce  pcAnywhere  UA  an 
upgraded  release  of  its  re¬ 
mote-access  soffwarc  that  fea¬ 
tures  performance  improve¬ 
ments  and  a  revised  user  inter¬ 
face  for  IT  help  desk  adminis¬ 
trators. 

The  pcAnywhere  technol¬ 
ogy,  which  was  initially  re¬ 
leased  in  1986  as  a  connectivi¬ 
ty  too]  for  remote  users,  has 
emerged  in  recent  years  as  a 
help  desk  support  tool.  The 
software  proves  help  desk 
workers  with  remote  system 
control  fuTKrtions,  includii^ 
the  ability  to  take  over  a  PC  in 
the  field  and  transfer  files  or 
patches,  said  David  Scott,  a 
senior  product  manager  at 
Symantec  in  Cupertino.  Calif. 


The  new  version  can  trans¬ 
fer  needed  files  in  the  back¬ 
ground  while  IT  administra¬ 
tors  continue  with  other  work. 
Scott  said.  He  added  that  the 
revampied  user  interface  looks 
more  like  Windows  XP  and  of¬ 
fers  increased  configuration 
flexibility,  making  it  possible 
to  reduce  the  size  and  number 
of  tool  bars  and  other  features. 

The  Burlington  Northern 
and  Santa  Fe  Railway  Ca 
(BNSF)  in  Fort  Worth,  Texas, 
has  about  2S0  pcAnywhere 
users  and  is  beta-testing  the 
11.0  release,  said  Brian  Cook, 
a  field  service  engineer  at  , 
Wabiec  Corp.  Cook  works  at  I 
BNSF  under  an  IT  services  I 
contract  between  ifae  railway 
company  and  Wilmerding, 
Pa.-based  Wabtec.  The  up¬ 
graded  software  provides 
faster  remote  connections  and 
better  response-time  perfor¬ 
mance  than  existing  versions 
of  pcAnywhere.  and  it  has  a 


pcAnywhere  11.0 

NEWFEATUES 

•  Supports  RSA  Sacurity  lnc,’t 
SbcuiIO  two-betor  userauthen- 
tication  technology. _ 

■  ANows  help  desk  pereonnel  to 
send  a  thiiHMMt  version  of 
pcAnywfiora  to  PCs  so  they  can 
remolely  instil  the  software. 

■  indudes  hie'transfer  lunctions 
for  sondbio  softwara  drivers 
and  patches  to  PCs  3$  a  back¬ 
ground  process. 

PmCtNOANDAMMUBILITY 

■  Starts  al  S200  per  sect  due 
for  releasa  this  month, 

better  look  and  feeL  he  said. 

One  big  benefit  of  usii^ . 
pcAnywhere  is  that  it  lets  help 
desk  staffers  take  control  of 
PCs  so  they  can  show  users 
bow  proprietary  BNSF  appli¬ 
cations  work.  Cook  said.  And 
if  a  user's  system  won't  start. 


j  structure  for  the  price  of  1990 
tape  technology." 

Direct  Control  gives 
AT&T's  managed  services 
customers  the  ability  to  re¬ 
motely  perform  systems 
administration  functions  on 
servers  housed  at  its  U.S.- 
based  data  centers.  Using  Web 
browsers.  IT  managers  can 
handle  tasks  such  as  setting 
capacity-utilization  thresholds 
and  viewing  real-time  alarm 
notices.  AT&T  said. 

Luring  Customers 

AT&T  is  using  services  like 
Direct  Control  to  try  to  lure 
more  customers  into  signing 
managed  storage  agreements 
or  other  IT  deals  involving  its 
data  centers,  said  Melanie 
Posey,  an  analyst  at  IDC  in 
Framingham.  Mass. 

“A  couple  of  years  ago.  this 
wouldn't  have  ^ppened  from 
a  [network]  services  provider.” 
she  said.  “But  they're  now  say¬ 
ing  they’ll  be  as  flexible  as 
they  need  to  be  to  get  your 
business.”  I 


pcAnywhere  can  be  used  to 
access  a  fail-over  copy  of  his 
data  at  a  backup  site  in  T(C^>e' 
ka,  Kan.,  and  restore  the  PC 

“I  have  no  qualms  with  this 
product.”  Cook  said.  “If  they 
raised  the  price,  people  would 
still  buy  it" 

Framingham.  Mass.-based 
IDC  recently  reported  that 
pcAnywhere  commands  more 
than  50%  of  the  global  roaiket 
for  remote  systems  control 
software,  outpacing  products 
ftom  Symantec's  four  major 
competitors:  Tivoli  Sofriwe, 
Computer  Associates  Interna¬ 
tional  Inc.,  LANDesk  Software 
Ltd.  and  Danware  Data  A/S. 

The  remote-control  market 
b  very  mature,  so  products  are 
at  a  very  high  level  of  ftme- 
tionality.”  said  IDC  analyst 
Stephen  Drake. 

Products  like  pcAnywhere 
also  face  competition  from  the 
ftee  remote-control  capabili¬ 
ties  that  Microsoft  Corp.  has 
built  into  Windows  XP.  Drake 
added.  *nie  market  for  remote- 
control  software  will  stay 
about  level  with  last  year's 
sales  of  $288  million  for  sever¬ 
al  more  years,  he  predicted.  I 


Ironic  how  it  takes  the  cutting  edge 
technology  of  2003  to  access  the 
cutting  edge  technology  of  1973. 

myEXTRA!™  Smart  Connectors  let  you  leverage  your  existing  legacy  data  and  logic. 


"Cutting  edge"  doesn't  cut  it.  You  need  products 
that  do  what  they  say  they  will  do.  This  is  what 
we  say:  Our  myEXTRA!  Smart  Connectors  give  you 
XML'based  Web  services — they  let  you  get  at  legacy 
information  without  changing  host  applications. 
You  can  put  all  of  the  business  data  and  applica¬ 
tions  locked  up  in  mainframes  to  new  use  in  hours 
or  days,  not  weeks  or  months.  We’ve  spent  the  last 
18  years  making  legacy  data  more  useful.  Smart 
Connectors  are  the  logical  next  step,  making  data 
Y  easier  to  get  at. 

Find  out  more.  Download  our  free  White  Paper 
“Leveraging  Legacy  Applications  to  Serve  New 
Business  Initiatives"  at  www.attachmate.e0m/SC7. 


attachmate 
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New  CIO  TMces  Reins 


CSC  Signs  Two 
Outsourcing  Deals 

Computef  Sdencss  Corp.  (CSC) 
announc«d  a  pair  of  big  IT  out* 
sourcing  deals,  including  a  10* 
i*at,  million  contract  with 
Marconi  Corp..  a  London-based 
letecommunicatioos  equipment 
maJwr.  El  Segundo.  (^.*based 
CSC  said  it  has  also  signed  an 
outsourcing  deal  valued  at  S450 
million  over  10  years  with  ISS 
A/S,  a  Copenhagen*based  com* 
pany  that  provides  facility  clean¬ 
ing  and  landscaping  services. 


Sprint  Slows  Down 
Network  Rollout 

Sprint  Corp.  said  it  has  begun 
converting  Hs  local  phone  net- 
worh  to  packet-based  switching 
technology  made  by  Brampton, 
Ontario'based  Nortel  Networks 
Ltd.  But  the  rollout  schedule  has 
been  extended.  The  original  plan 
caled  for  the  implemefrtation  to 
take  eight  years.  Sprint  now  ex¬ 
pects  it  to  take  up  to  12  years. 


3Com  Says  Q4 
Sales  Below  Plan 

3Com  Oirp.  warned  that  it  will 
report  lower-than-expected  rev¬ 
enue  for  Hs  fourth  quarter,  which 
ended  May  30.  The  Santa  Clara. 
Catfl.-based  networking  equip¬ 
ment  vendor  said  revenue  should 
range  between  $165  million  and 
$175  million,  well  below  Hs  $245 
tniMon  lhird-qu«ter  tol^.  Enter¬ 
prise  networking  sales  will  drop 
by  as  much  as  25%  saquential- 
iy.  3Com  said. 


Short  Takes 

THE  APACHE  SOFTWARE  FOUN¬ 
DATION  released  an  update  of  its 
open-source  Web  server  soft¬ 
ware  that  plugs  a  security  hole  ki 
a  module  supporting  the  World 
Wide  Web  Distributed  Authoring 
and  \Mrsioning  protocol. . . . 
DEUTSCHE  LUFTHANSA  AG  said 
H  win  install  The  Boeing  Co.'s 
wireless  Internet  access  technol¬ 
ogy  on  80  long-haul  lets. 


Of  IRS  Tech  Upgrade 


AgLMicv'  appoints  fomier  (^FO  to  post  as 
l()-\car  nnxierni/;ition  effort  continues 


BV  TOODR  WEISS 

THF  L’-s  Internal  Rev 
enue  Sen’icc  ha.s 
named  W.  Todd 
Grams.  Its  former 
chief  financLal  officer,  to  servi 
.IS  new  CIO.  ef¬ 
fective  \-esterday 
IRS  Commis¬ 
sioner  Mark  W. 

Everson  appointed  Grams  late 
last  month  to  oversee  the 
agency's  continuing  lechnolo- 
g>'  modernization,  including 
the  a'placeroont  of  a  decades- 
old  ma.ster  file  system.  Gram.s 


had  been  the  agency's  CFO 
since  February  2001. 

The  IRS  has  been  pursuing 
a  major  technology’  revamp 
since  IW8  as  p.trt  of  a  10-year 
project  authorized  by  Gon- 

gre.ss  through  the 

luiynyyrw  fr  ms  Resiructur- 
QVf  UIMU  III  ing  and  Reform 
Act.  According 
to  a  recent  report  from  the 
General  Accounting  OlTice 
(GAO),  the  act  aims  to  fi.it 
problems  with  computer  sys¬ 
tems  that  didn't  work  and  tele¬ 
phone  systems  that  often  left 


taxpayers  unable  to  reach 
workers  at  the  agency. 

In  the  past  five  years.  Con¬ 
gress  provided  SI..T5  billion  f«»r 
the  agency’s  Bu.slness  Systems 
Modernization  Project,  which 
has  resulted  in  improvements 
that  have  made  it  ea-sier  for 
taxpayers  to  reach  the  agency 
for  assistance,  according  to 
the  GAO  report. 

E-filing  Expansion 

A  key  benefit  of  the  techrw)!- 
ogy  upgrades  h.-is  been  the  ex¬ 
pansion  of  electronic  tax  re¬ 
turn  filings,  up  from  12  million 
returns  in  1995  to  53  million 
this  year.  Elccirt>nic  filing 
helps  the  agency  cut  costs  by' 


reducing  the  need  for  labor- 
intensive  reviews  of  paper  tax 
returns,  according  to  the  GAO. 

One  problem  the  new  CIO 
will  face  i.s  the  continuing 
need  for  improved  data  and 
network  security  at  the  IRS. 
ijccording  to  the  GAO  report. 

“Although  IRS  has  made  im¬ 
portant  progress  securing  its 
systems,  information  security- 
remains  a  challenge."  the  GAO 
report  stated.  "Long-standing 
computer  control  weaknesses 
continue  to  threaten  the  confi¬ 
dentiality.  integrity’  and  as-ail- 
ability  of  sensitive  systems 
and  taxpayer  data." 

Gram.s  replaces  John  C. 
Reece,  who  retired  last  month 
after  serving  as  CIO  since  Feb¬ 
ruary  2001.  Before  joining  the 
IRS,  Grams  worked  for  more 
than  20  years  at  the  Depan- 
mcnl  of  Veterans  Affairs  and 
the  Office  of  Management 
and  Budget.  He  couldn't  be 
reached  for  comment.  I 


Continued  from  page  I 

Data  Privacy 


regard  to  data  privacy.  We  arc 
trying  to  make  sure  wc  have  a 
law  that  meets  their  minimum 
requirements,"  Karnik  said. 

At  the  same  time,  a  tougher 
data  privacy  taw  in  India 
stands  to  bcnefii  US  compa¬ 
nies  that  have  hired  Indian 
firms  to  process  jobs  involving 
personal  data. 

“Wc  sec  this  as  making  it 
easier  for  us  to  do  business 
there."  said  Karen  Allen,  vice 
president  of  risk  management 
at  Exult  inc.,  a  business  process 


Offshore  Privacy 

tiiios  in  (tie  ri3ntr.i(;l 


snpplip'  ‘s 

wiMi  Jtipltcah'w  cifivacy  Uw*. 

u'ce-n  data  n.i.-. 
dlinrj  aoii  acci-ss  contiDi  mea 
iuHisa'C  m  pia-;#* 

that  adr-owate  v.tN- 
f’tv  J''d  buyn^siconlmuffy 


outsourcer  for  Fortune  500 
companies  that  last  week 
opened  a  data  center  in  Mum¬ 
bai.  The  comp.my  is  one  in  a 
growing  number  of  US.  cor¬ 
porations  that  pnKess  person¬ 
al  information  on  US.  individ¬ 
uals  at  oft^orc  liKations. 

Such  information  often  in¬ 
cludes  StK'ial  Security  and  dri¬ 
ver's  license  numbers  as  well 
as  confidential  data  such  as  in¬ 
dividuals’  employment  or 
medical  histories. 

Currently  there  are  no  US. 
laws  that  prohibit  that  data 
ftom  being  shipped  to  or  ac¬ 
cessed  fn>m  other  countries. 
But  companies  arc  increasing¬ 
ly  being  required  to  comply 
with  industry -.specific  and 
state  laws  such  as  the  Health 
Insurance  l*ortability  and  Ac¬ 
countability  Act.  the  Gramm- 
Leach-Bliley  Act  and  Califor¬ 
nia’s  pimding  SB  1380  identity- 
protection  law.  US.  companies 
must  comply  with  those  laws 
regardless  of  where  the  data  is 
processed  or  stored,  legal  ex¬ 
perts  said. 

“ITiere  are  no  significant 
differvneeslin]  a  company's 
privacy  obligations,  [whether 
it's]  conducting  an  oftshorc 
arrangement  |or)  a  domestic 
one."  said  Chri.siopher  Ford,  a 


partner  at  law  firm  Alston  & 
Bird  LLP  in  Washington. 

Consequently,  it's  important 
for  companies  to  eomsi der  a 
country's  data  privacy  laws 
when  contracting  w’ith  off¬ 
shore  firms,  said 
Greg  Scheuman. 
chief  technolcygy 
officer  at  Mer¬ 
cury  Insurance 
Group  in  Brea. 

Calif. 

Tile  need  to 
comply  with 
Gramm-Leach- 
Bliley  and  Cali¬ 
fornia’s  SB  138f). 
which  goes  into 
effect  |uty  1.  ha.s  made  privacy 
standards  at  Mercury  “very 
significantly  different  from 
even  a  year  agtV  Scheuman 
said.  India's  initiative  is  there¬ 
fore  a  p(»sitivc  one  for  Mercury, 
which  outsources  .some  de\’el- 
opment  and  maintenance  work 
there,  he  said. 

Companies  need  to  a.sccr- 
tain  what  measures  an  off¬ 
shore  service  provider  has 
taken  to  ensure  data  privacy. 
Scheuman  added.  That  means 
reviewing  the  providers'  data 
handling  and  access  control 
policies,  disaster  recovery  and 
business  continuity  processes. 


We  see 
this  as 
making  it  easier 
for  us  to  do  busi¬ 
ness  [in  India]. 

KAREN  ALLEN. 

VICE  PRESIDENT  OF  RISK 
MANAGEMENT  EXULT  INC 


and  employee  .screening  prac¬ 
tices,  he  said. 

It  also  pays  to  tamiliarize 
employees  in  offshore  loca¬ 
tions  with  US.  data  privacy 
practices  and  laws,  Allen  said. 

Exult,  for  in¬ 
stance.  has  a  data 
privacy  certifica¬ 
tion  program  for 
oPBsluire  cmploj- 
ees.  The  compa¬ 
ny  also  ensures 
that  no  confiden¬ 
tial  data  is  sent 
oversea,s.  In¬ 
stead.  the  data  is 
hosted  on  US.- 
based  systems 
and  accessed  in  a  closely  moni¬ 
tored  process.  Systems  that  are 
used  to  access  the  data  have 
some  functions  disabled  to 
pre\’ent  unauthorized  copying 
or  downloading  of  the  data, 
Allen  said. 

•'The  focus  of  a  U.S.-bascd 
company  should  be  to  k>ok 
closely  at  the  terms  of  their 
contract  with  outsourcers  and 
insist  that  terms  be  imposed 
for  very  strong  c*onirDl  over 
personal  information."  said 
Donald  Harris,  president  of 
HR  Privacy  Solutions  Ltd.,  a 
New  York-based  identir>’  man¬ 
agement  consultancy.  I 
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CSC  Signs  Two 
Outsourcing  Deals 

Compulir  Sdwnc—  Corp.  (CSC) 
amwunead  t  pair  of  big  IT  out- 
aourting  daab,  indudbig  a  10- 
yaar,  mMon  contnct  wHh 
Marooiri  Corp^  a  Londoft-basad 
taiacoaimunicatiofts  aquipniam 
malwr.  B  Sagundo.  CdH.-basad 
CSC  Mid  N  hai  alao  aignad  an 
outiautxing  daaf  aaiuad  at  $450 
miten  trm  10  yaan  wWi  (SS 
A/S.  a  CepanhitgafHiaBad  com¬ 
pany  ttia!  provWaa  ladtty  daan- 
inq  and  iandacaping  aandcas. 

Sprint  Slows  Down 
Network  Rolout 

SprM  Corp.  taid  K  haa  bagun 
oonvarling  Kb  local  phono  fiot- 
owrfc  lo  pachat-baa^  aorUchlng 
tachnoiagy  mada  by  Brampton. 
Ontario  baaad  Wor^  lialwwrta 
Ud.  But  tba  roloiit  achaduia  has 
baan  axtandad.  Tha  original  plan 
calad  for  tba  baplamantation  to 
taka  aighi  yaara.  Sprint  now  ax- 
pacts  H  to  taka  up  to  12  yaara. 


3Com  Says  Q4 
Sales  Belm  Plan 

SCom  Corp.  aramad  that  K  will 
fiporl  lowof  than  aapaciad  ray- 
onua  for  Kb  fourth  quartar,  which 
andad  May  SO.  Tba  Santa  Clara, 
Caif.-baaad  natworhing  aquip- 
manf  vandor  said  rovonua  siMuid 
ranga  batwaan  $165  fflMkm  and 
$175  mMon.  wal  bakwr  Its  $245 
mMonthM-quartartotaLEfitar’ 
prisa  natwori^  salas  wM  drop 
by  as  much  as  25%  saquanhal' 
iy.SComsaid. 


Short  Takes 

THE  APACHE  SOFT¥fAftE  FOUM- 
OATKM  raiaaaad  an  update  of  its 
operr-sourcaVIMsarvaraoft- 
wara  that  ptuga  a  aacurfty  hole  in 
a  nioQUH  aapponing  na  laono 
Wida  MM  Oiatribtftad  Authoring 
and  Mariioning  protocol.... 
DCinSCNE  UfFTHANSA  46  said 
B  oM  inslal  Tba  Boaing  Co.'s 
wiralaaa  bdaniat  accaas  tachnoi- 
ogy  an  80  long-haul  iaiB. 


New  CIO  T^es  Reins 
Of  IRS  Tech  Upgrade 


Agency  appoints  former  CFO  to  post  as 
10-vear  modernization  effort  txmtinues 


ev  Tooo  n.  weiss 

The  U.S.  Interna)  Rev¬ 
enue  Serv  ice  has 
named  W.  Todd 
Grams,  its  former 
chief  financial  officer,  to  serve 
as  new  CIO,  ef¬ 
fective  yesterday. 

IRSCommis- 
»oncT  Mark  W. 

Everson  appointed  Grams  late 
last  month  to  oversee  the 
agency’s  continuing  technolo¬ 
gy  modernization,  including 
the  replacement  of  a  decades- 
old  master  file  system.  Grams 


had  been  the  agency's  CFO 
since  February  2001. 

The  IRS  has  been  pursuing 
a  maior  technolog)*  revamp 
since  1998  as  part  of  a  10-year 
project  authorized  by  Con¬ 
gress  through  the 
IRS  Restructur¬ 
ing  and  Reform 
Act.  According 
to  a  recent  report  from  the 
General  Accounting  Oflice 
(GAO),  the  act  aims  to  fix 
problems  with  computer  sys¬ 
tems  that  didn't  work  and  tele¬ 
phone  systems  that  often  left 


taxpayers  unable  to  reach 
woricers  at  the  agency. 

In  the  past  five  years.  Con¬ 
gress  provided  SI.35  billion  for 
the  agency's  Business  Systems 
Modernization  Project,  which 
has  resulted  in  improvements 
that  have  made  it  easier  for 
taxpayers  to  reach  the  agency 
for  assistance,  according  to 
the  GAO  report. 

E-filing  Expansion 

A  key  benefit  of  the  technol¬ 
ogy  upgrades  has  been  the  ex¬ 
pansion  of  electronic  tax  re¬ 
turn  filings,  up  from  12  million 
returns  in  1995  to  53  million 
this  year.  Electronic  filing 
helps  the  agency  cut  costs  by 


reducing  the  need  for  labor- 
intensive  reviews  of  paper  tax 
returns,  according  to  the  GAO. 

One  problem  the  new  CIO 
will  face  is  the  continuing 
need  for  improved  data  and 
network  security  at  the  IRS. 
according  to  the  GAO  report. 

"Although  IRS  has  made  im¬ 
portant  progress  securing  its 
systems,  information  security 
remains  a  chaUengc.**  the  GAO 
report  stated.  "Long-standing 
computer  control  weaknesses 
continue  to  threaten  the  confl- 
dentialicy,  integrity  and  avail¬ 
ability  of  sensitive  systenu 
and  taxpayer  data.” 

Grams  replaces  John  C. 
Reece,  who  retired  last  month 
after  serving  as  CIO  since  Feb¬ 
ruary  2(X>1.  Before  joining  the 
IRS.  Grams  woriced  for  more 
than  20  years  at  the  Depart¬ 
ment  of  Veterans  Affairs  and 
the  Office  of  Management 
and  Budget.  He  couldn't  be 
reached  for  comment.  I 


Continued  finm  page  1 
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regard  to  data  privacy.  We  are 
trying  to  make  sure  we  have  a 
law  that  meets  their  minimum 
requirements.”  Karnik  said. 

At  the  same  time,  a  tougher 
data  privacy  law  in  India 
stands  to  braefit  U.S  compa¬ 
nies  that  have  hired  Indian 
firms  to  process  jc^  involving 
personal  data. 

"We  see  this  as  making  it 
easier  for  us  to  do  business 
there,”  said  Karen  Allen,  vice 
president  of  risk  management 
at  Exult  Inc.,  a  business  process 


Offshore  Privacy 


outsourcer  for  Fortune  500 
companies  that  last  week 
opened  a  data  center  in  Mum¬ 
bai  The  company  is  one  in  a 
growing  number  of  U.S.  cor¬ 
porations  that  process  person¬ 
al  information  on  U5.  individ¬ 
uals  at  offshore  locations. 

Such  information  often  in¬ 
cludes  Social  Security  and  dri¬ 
ver's  license  numbers  as  well 
as  confidential  data  such  as  in¬ 
dividuals'  employment  or 
medical  hisiories- 

Currently  there  arc  no  U.S. 
Laws  that  prohibit  that  data 
from  being  shipped  to  or  ac¬ 
cessed  from  other  countries. 
But  companies  are  increasing¬ 
ly  being  required  to  comply 
with  industry-specific  and 
stale  laws  such  as  the  Health 
Insurance  Portability  and  Ac¬ 
countability  Act.  the  Gramm- 
Lcach-Bliley  Act  and  Califor¬ 
nia's  pending  SB  1386  identity- 
protection  law.  U.S.  companies 
must  comply  with  those  laws 
regardless  of  where  the  data  is 
processed  or  stored,  legal  ex¬ 
perts  said. 

There  are  no  significant 
differences  [in]  a  company's 
privacy  obligations,  [whether 
it’s]  conducting  an  offehore 
arrangement  (or)  a  domestic 
one,”  said  Christopher  Ford,  a 


partner  at  law  firm  Alston  & 
Bird  LLP  in  Washington. 

Consequently,  it’s  important 
for  companies  to  consider  a 
country's  data  privacy  laws 
when  contracting  wi^  off¬ 
shore  firms,  said 
Greg  Scheuman, 
chief  technoic^ 
officer  at  Mer¬ 
cury  Insurance 
Group  in  Brea. 

Calif. 

The  need  to 
comply  with 
Gramm-Leach- 
Blilcy  and  Cali¬ 
fornia's  SB  1386, 
which  goes  into 
effect  July  L  has  made  privacy 
standards  at  Mercury  ‘\ery 
significantly  different  from 
even  a  year  aga"  Scheuman 
said  India's  initiative  is  there¬ 
fore  a  positive  one  for  Mercury, 
which  outsources  some  devel¬ 
opment  and  maintenance  work 
there,  he  said 

Companies  need  to  ascer¬ 
tain  what  measures  an  off¬ 
shore  service  provider  has 
taken  to  ensure  data  privacy. 
Scheuman  added  That  means 
reviewing  the  providers’  data 
handiii^  and  access  control 
policies,  disaster  recovery  and 
business  continuity  processes. 


We  see 
this  as 
making  it  easier 
for  us  to  do  busi¬ 
ness  [in  India]. 

KAREN  ALLEN. 

VICE  PRESIDENT  OF  RISK 
MANA6EMENT.  EXULTING. 


and  employee  screening  prac¬ 
tices,  he  said. 

It  also  pays  to  familiarize 
employees  in  offshore  loca¬ 
tions  with  U.S.  data  privacy 
practices  and  laws,  Allen  said 
Exult,  for  in¬ 
stance.  has  a  data 
privacy  certifica¬ 
tion  program  for 
off^re  employ¬ 
ees.  The  compa¬ 
ny  also  ensures 
that  no  CMifiden- 
tial  data  is  sent 
overseas.  In¬ 
stead.  the  data  is 
hosted  on  U.S.- 
based  systems 
and  accessed  in  a  closely  moni¬ 
tored  process.  Systems  that  arc 
used  to  access  t^  data  have 
some  functions  disabled  to 
prevent  uiuuthorized  copying 
or  downloading  of  the  data. 
Allen  said. 

"The  focus  of  a  U.S.-based 
company  should  be  to  look 
closely  at  the  terms  of  their 
contraa  with  outsourcers  and 
insist  that  terms  be  imposed 
for  very  strong  control  over 
persona]  informatkm,”  said 
Donald  Harris,  president  of 
HR  Privacy  Solutions  Ltd^  a 
New  York-based  identity  man¬ 
agement  consultancy,  k 
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Microsoft 


tomer.  who  asked  not  to  be 
idendfied 

Bill  Landefeld.  vice  presi¬ 
dent  of  worldwide  licensing 
and  pricing  at  Microsoft,  said 
the  additional  benefits  brought 
to  Software  Asstirance  are  the 
direct  result  of  feedback  the 
company  has  collected  from 
more  than  2.000  customers 
during  the  past  year. 

Several  IT  managers  last 
week  said  they  expect  the  en¬ 
hancements  to  be  useful  for 
their  companies  —  especially 
the  free  access  to  online  train¬ 
ing  modules,  business-hour 
telephone  and  Web  support 
for  enterprise  edition  server 
software,  and  home-use  rights 
to  the  same  version  of  Micro¬ 
soft  Offtce  that  employees 
have  at  work.  Benefits  vary 
depending  on  the  type  of 
agreement  purchase<L 

“It  was  a  nice  surprise  — 
Christmas  in  May.”  said  Les 
McCarter,  director  of  infta- 
strxicture  and  operations  at 
Hawaiian  Electric  Ca  in  Hon¬ 
olulu.  which  is  eligible  for  the 
full  complement  of  new  bene¬ 
fits  as  an  Enterprise  Agree¬ 
ment  licensee  of  Microsoft 
desktop  and  server  products. 

McCarter  said  the  utility 
has  paid  for  100  to  200  work- 
at-home  licenses  in  the  past  ' 


and  is  currently  exploring  a 
virtual  private  network  project 
that  was  going  to  require  the 
purchase  of  licenses  for  home 
users.  “This  will  mean  a  nice 
cost  savings  for  us.”  he  said. 

But  it's  too  soon  to  tell 
whether  the  enhancements 
unveiled  last  week  will  sway 
more  companies  to  buy  Soft¬ 
ware  Assurance  or  entice 
those  with  existing  agree¬ 
ments  to  renew.  Until  now.  the 
prime  decision-making  factor 
has  been  the  frequency  with 
which  a  company  upgrades. 

Not  for  Everyone 

Jim  Prevo,  CIO  at  Green 
Mountain  Coffee  Inc.  in  Water- 
bury.  Vt,  said  the  new  benefits 
are  good,  but  they  won't 
change  his  decision  to  forgo 
Software  Assurance  because 
it's  "just  not  worth  the  money." 
He  said  his  company  balked  at 
purchasing  Software  Assur¬ 
ance  because  it  was  too  expen¬ 
sive  and  be  didn’t  want  to  feel 
pressured  to  upgrade  more  fre¬ 
quently  than  he  would  like. 

David  Curran,  manager  of 
IT  at  CE  Franklin  Ltd  in  Cal¬ 
gary.  Alberta,  said  his  compa¬ 
ny  doesn't  upgrade  quickly 
enough  for  Software  Assur¬ 
ance  to  be  of  much  value.  But 
be  said  be  might  have  consid¬ 
ered  it  for  server  products  to 
gain  access  to  the  free  training 
and  support,  if  the  new  bene¬ 
fits  had  been  offered  sooner. 


Kurt  Schlegel,  an  analyst  at 
Meta  Group  Inc.  in  Stamford 
Conn.,  predeted  that  free  sup¬ 
port  will  lead  more  companies 
to  buy  Software  Assurance  for 
their  servers.  He  added  that 
the  economics  are  attractive 
for  users  with  upgrade  cycles 
under  four  years. 

But  Alvin  Park,  an  analyst  at 
Gartner  Inc.  said  the  value 
won’t  be  obvious  for  every 
company.  He  said  users  will 
need  to  take  stock  of  each  new 
benefit  Microsoft  is  building 
into  Software  Assurance  and 
put  a  price  tag  on  those  bene¬ 
fits  to  determine  whether  it 
makes  sense  for  them. 

One  Software  Assurance 
customer  who  also  bolds  a 
Premier  Support  contract  with 
Microsoft  said  he  hopes  the 
new  support  options  being  of¬ 
fered  through  Software  Assur¬ 
ance  will  enable  his  company 
to  reduce  the  number  of  Pre¬ 
mier  Support  hours  it  now 
purchases  ftom  the  vendor. 
The  customer,  who  asked  not 
to  be  named.  Is  the  vice  presi¬ 
dent  of  IT  procurement  at  a 
multinational  media  conglom¬ 
erate.  He  said  the  company 
spends  more  than  S100.000 
per  year  on  Premier  Support. 

He  added  that  the  company 
hasn’t  done  an  analysis  to  see 
if  Software  Assurance  has 
been  worth  it  and  hasn’t  de¬ 
cided  whether  it  will  be  re¬ 
newed.  With  the  economy 
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forcing  the  company  to  watch 
costs,  it  couldn't  upgrade  even 
if  it  wanted  to.  he  said. 

For  Joe  Brunner.  MIS  man¬ 
ager  at  Sleepeck  Printing  Co. 
in  Bellwood.  DL.  the  seif-paced 
online  training  for  users  is  ex¬ 
pected  to  be  particularly  belp- 
fuL  since  Sleepeck’s  IT  staff  is 
smalL  This  is  a  tool  I  can  give 
them  that  doesn't  take  away 
from  my  time,”  he  said,  “ft’s 
available  when  they  need  it.” 

Dwight  Davis,  an  analyst  at 
Boston-based  Summit  Strate¬ 
gies  Inc.,  said  Microsoft  was 
forced  to  look  beyond  the 
pure  software  angle  to  en¬ 
hance  Software  Assurance 
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because  of  the  lengthening 
time  between  major  product 
releases.  He  said  customers 
have  been  paying  for  Software 
Assurance  on  “blind  faith," 
without  any  assurances  of  the 
upgrades  they  will  get  during 
their  contract  terms. 

“Microsoft  should  think 
long  and  hard  about  its  release 
cycle  for  its  software  and  try 
and  build  a  little  more  predict¬ 
ability  into  its  update  cycle," 
Davis  said.  “If  people  knew 
they  would  get  releases  in  the 
next  two  to  three  years,  they 
would  probably  enter  into 
those  contracts  more  easily  and 
with  a  lot  less  trepidation.”  I 
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European  Agency  Gets  OK 
For  GPS-like  Satellite  System 


Galileo  to  begin 
launching  in  2006 

av  BOB  BflEWIH 

The  European  Space  Agency 
(ESA)  last  week  said  its  IS 
member  states  have  reached 
an  agreement  that  paves  the 
way  for  the  development  of  a 
satellite-based  navigation  sys¬ 
tem  designed  to  rival  the  U.S.- 
developed  Global  Positioning 
System  (GPS)  technology. 

The  agreement  came  just 
two  weeks  before  the  sched¬ 
uled  start  of  an  international 
communications  conference 
at  which  the  frequencies  to  be 


used  by  the  European  system 
are  expected  to  be  decided. 

The  ESA  said  it's  now  ready 
to  sign  a  loint  development 
deal  for  the  proposed  Galileo 
system  with  the  European 
Union,  which  will  split  the 
cost.  The  project’s  budget  is 
expected  to  total  S3.7  billion, 
according  to  Dominique 
Detain,  an  ESA  spokesman 
in  Paris. 

The  ESA  plans  to  launch  the 
first  of  27  active  Galileo  satel¬ 
lites  and  three  spares  in  2006 
and  complete  the  deployment 
two  years  later. 

Because  Galileo  will  likely 
transmit  its  signals  within  the 


same  frequency  band  used  by 
GPS  equipment,  users  should 
eventu^y  be  able  to  buy  re¬ 
ceivers  that  can  pick  up  loca¬ 
tion  signals  from  both  sys¬ 
tems,  said  Ashok  Wadwani, 
president  of  Applied  Field 
Data  Systems  toe.,  a  GPS  con¬ 
sulting  firm  in  Houston. 

The  mixed  support  could 
provide  better  data  availability 
and  improved  location  accu¬ 
racy.  For  example,  Ken  Cham¬ 
berlain.  a  land  surveyor  at  the 
Bureau  of  Land  Management 
in  Portland.  Ore.,  said  Galileo 
should  make  it  easier  for 
agency  users  operating  in 
dense  tree  cover  to  access 


satellite  location  signals. 

But  before  the  ESA  can  pro¬ 
ceed,  it  must  first  obtain  rights 
to  the  needed  frequencies  at 
the  World  Radiocommunica¬ 
tion  Ckjnference  (WRC-03), 
which  starts  next  week  in 
Geneva.  The  conference  is  be¬ 
ing  held  under  the  auspices  of 
the  International  Telecommu¬ 
nication  Union,  a  United  Na¬ 
tions  agency  with  more  than 
180  member  states. 

Restrictive  Language 

The  U.S.  government,  in  its 
draft  proposals  for  WRC-03. 
inserted  language  that  the  ESA 
and  EU  view  as  threatening  to 
Galilea  That  language  would 
set  specific  milestones  for 
new  satellite  navigation  sys¬ 
tems  to  reach  before  frequen¬ 
cies  could  be  assigned  to 
them,  including  "clear  and 
binding  agreements  for  the 


manufacture  and  procurement 
of  satellites." 

John  Alden.  a  spokesman 
for  a  WRC-03  delegation  that 
will  be  led  by*  the  U.S.  State 
Department,  said  the  pro¬ 
posed  language  is  designed 
solely  to  weed  out  "paper" 
satellite  systems  that  are  spec¬ 
ulative  or  that  could  be  used 
to  tie  up  spectrum  resources 
without  ever  being  built.  The 
U3.  has  told  European  offi¬ 
cials  that  it  considers  Galileo 
to  be  a  viable  system  and  that 
it  isn’t  trying  to  impede  its  de¬ 
velopment.  Alden  said. 

But  loem  Tjaden.  head  of 
the  Galileo  interim  sup^rt  of¬ 
fice  in  Brussels,  said  the  U.S. 
draft  language  is  one  reason 
the  ESA  plans  to  launch  the 
first  of  the  Galileo  satellites  in 
2006.  By  doing  so.  he  said,  the 
agency  would  meet  the  crite¬ 
ria  proposed  by  the  U.S.  I 


FINALLY.  BUSIMESS 
SOLUTIONS  THAT 
UltOBK  WITH  EXISTING 
TECHNOLOGIES  ANO 
NONEXISTENT  BUOGETS. 

You  need  to  gei  more  out  of  uhai  you  have.  Vie  have  juvi  the  thing;  solutions  based  on  our 
open  technology  platform. S.-VP  NetVS'eaver.  Because  it's  preconhgured  toviork  with  vour  current 
IT  investments  -  and  it's  fully  operable  with  .NET  and  J2EE-S.AP  .Net  Weaver  reduces  the  need 
for  custom  integration.  That  lowers  your  total  cost  of  ownership  for  \our  entire  IT  landscape 
and  gets  you  quicker  ROl.  Everv  thing  a  CIO  wants  (and  a  CFO  didn’t  think  was  possible) 
V'isit  sap.com/nerweaver  or  call  800  880 1727  for  details. 
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Dell  I  Enterprise 

in  a  recant  Dell  test  a  Delt/Oracle*  9//Linux  solution  running  on  an  Intel*  Xeen*  processor-based  Dell  PowerEdge*  6^  server 
was  89S  faster  and  39%  less  expensive  than  a  Sun  Fire  V480  server  running  an  Oracle  9//Sun  Solaris  solution!  To  see  complete 
test  results,  go  to  www.dell  Com/migration17 

There's  little,  if  any  debate;  Migrating  your  Oracle  applications  from  UNIX  to  a  standards-based  solution  lowers  TOO.  The  real  questions  are  "How 
does  it  perform?r  "How  much  will  it  lower  TCO?"  and  “Who  do  we  turn  to?"  Well,  when  you  migrate  your  Oracle  database  applications,  remember 
this:  Dell  gives  you  both  mind-ber>ding  performance  and  unparalleled  expertise,  at  a  TCO  so  smalt  you'll  need  a  microscope  to  find  it.  And  the  entire 
solution  IS  backed  by  enterprise  level,  24/7  service  and  support 

Get  on  the  fast  track  to  migration.  Visit  wvwv.dell.com/migration17  and  go  to  the  Dell  UNIX  Migration  online  calculator  for  a  free  migration 
assessment.  A  Dell  migration  solution  comes  complete  with  end-to-end  migration  services  including  baseline  assessment,  risk/migration  planning. 
ROI  analysis,  end-to-end  migration  management  and  careful,  rapid  implementation.  Call  1-866-535-0388  today  to  speak  with  a  Dell  representative 
Together,  you  can  assess  your  individual  needs  and  then  develop  a  cost-effective  plan  for  UNIX  migration. 


Get  more  out  of  your  enterprise  for  less.  Easy  as 


D0LL 


Click  www.dell.com/migration17  Call  1-866-535-0388 
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Nasdaq’s  CIO  Looks  to 
Streamline  Systems 


Stock  market  plans  shift 
from  Unix  to  Linux 

BV  LUCAS  MeANIAN 

In  an  effort  to  whittle  down  the  num¬ 
ber  of  IT  platforms  it  needs  to  support. 
The  Nasdaq  Stock  Market  Inc.  is  look¬ 
ing  to  consolidate  systems  and  net¬ 
works  through  a  series  of  moves  that 
will  include  shifting  some  applications 
from  Unix  servers  to  Linux  b^es. 

In  an  interview  last  month.  Nasdaq 
CIO  Steve  Randich  said  be  also  wants 
to  eliminate  the  company’s  Unisys 
Corp.  mainframes  and  migrate  the 
trading-floor  functions  that  nm  on 
those  machines  to  its  year-old  Super- 
Montage  order  display  and  execution 
system.  SuperMontage  is  based  on  a 
combination  of  fault-tolerant  systems 
made  by  Hewlett-Packard  Co.  and 
Stratus  Technologies  Inc.,  plus  Dell 
Computer  Corp.  Windows  servers. 

In  addition.  New  York-based  Nasdaq 
is  consolidating  15  maritet  data,  stock 
trading  and  corporate  e-mail  networks 
onto  a  single  IP-based  WAN  backbone. 
That  proiect  will  cost  $50  million. 
Randich  said. 


SAP.  MySQL  Sign 
Open-Source 
Database  Deal 

BV  MABC  L.  BOHOIMI 

SAP  AG  last  week  said  it  plans  to  hand 
off  lead  development  of  its  SAP  DB 
database  sofhirere  to  MySQL  AB  and 
woric  with  MySQL  to  deliver  an  enter- 
prise-class  version  of  chat  company's 
namesake  open-source  databa^. 

SAP  ofTicials  said  tbe  agreement  with 
MySQL  is  an  attempt  to  put  increased 
development  muscle  behind  tbe  open- 
source  movement  and  make  it  easier 
for  corporate  users  to  deploy  Linux- 
based  ERP  systems  without  having  to 
pay  big  database  administration  fees. 

SAP  includes  SAP  DB  with  its  appli¬ 
cations  as  a  fiee  alternative  to  Oracle. 
DB2  and  SQL  Server  databases,  and  it 
released  an  open-source  version  of  the 
technology  in  late  2000.  The  business 
applications  vendor  said  SAP  DB  is  be¬ 
ing  used  by  about  UOO  customers. 


Nasdaq  currently  uses  about  300 
Unix  servers  that  run  a  mix  of  HP’s 
Tru64  and  HP-UX  operating  systems 
as  well  as  Sun  Solaris.  Randich  de¬ 
clined  to  specify  how  many  of  those 
servers  be  expects  to  replace 
with  Linux  systems  or  say 
when  conversions  to  the 
open-source  software  will 
take  place.  But  he  added  that 
Linux  will  be  his  first  choice 
for  migrations,  despite  the 
existing  use  of  Wintel  sys¬ 
tems  inside  Nasdaq. 

“Going  from  Linux  to  Unix 
tends  to  be  tbe  most  compat¬ 
ible  and  easiest  deciston.” 

Randich  said.  “1  don’t  want 
to  bifurcate  myself  across  Linux  and 
Windows  Server  2003.  But  I  do  think 
Linux  will  play  a  role  at  Nasdaq  in 
helping  us  minimize  our  Unix  plat¬ 
forms  going  forward.” 

7^  network  consolidation  proiect 
is  under  way.  but  Randich  declined  to 
disclose  a  rollout  schedule.  Nasdaq’s  15 
networks  are  all  run  by  WorldCom 
Inc.,  which  now  operates  under  the 
name  MCI.  Randich  said  the  stock 
maiket  has  yet  to  pick  a  services 


Now  MySQL  will  take  over  steward¬ 
ship  of  the  product,  said  Faheem 
Ahmed,  director  of  market  strategy 
and  collaborative  solutions  at  SAP. 
That  means  MySQL’s  development  and 
management  tools  will  be  able  to  work 
with  SAP  DB.  which  should  help  cut 
the  cost  of  administering  the  database 
for  users,  Ahmed  said. 

Continued  Existence,  Siwport 

SAP  will  continue  to  support  SAP  DB 
installations,  for  both  existii^  and  new 
oistomers.  MySQL  CEO  Marten  Mick- 
os  said  his  company  is  taking  over  tbe 
lead  rtrie  on  tasks  such  as  developing 
new  application  programming  inter¬ 
faces  a^  testing  SAP  DB  to  ensure 
that  it  continues  to  conform  to  indus¬ 
try  standards.  SAP  DB  will  still  be  of¬ 
fered  “for  a  long  tune,”  Mickos  said 
But  be  added  that  Uppsala.  Sweden- 
based  MySQL  will  start  marketing  the 
software  under  its  own  name  by  the 
fourth  quarter  and  offer  a  version  un¬ 
der  a  commercial  license  in  addition  to 
the  free  release.  The  agreement  will 
also  let  tbe  company  add  corporate- 


provider  for  the  unified  Nasdaq  Intelli-  ' 
gent  Network,  which  will  be  built 
around  Cisco  Systems  Inc.  routers  that 
support  the  Multiprotocol  Label 
Switching  standard. 

Despite  the  heavy  investment  in  net¬ 
working  hardware  and  software  that 
the  new  network  will  require,  Randich 
said  he  expects  to  get  a  rapid  return  on 
investment.  “It  will  require  some  reca- 
bling.  but  more  importantly,  we’re  go¬ 
ing  to  be  able  to  take  a  lot  of  circuits 
out  of  our  network  and  save 
costs,”  he  said. 

On-demand  Computing 

Anodier  likely  cost  saver  is  a 
plan  to  move  toward  more  of 
an  on-demand  computing  ap¬ 
proach  that  would  let  Nasdaq  | 
add  server  or  storage  capaci*  | 
ty  as  needed.  Randich  said  be 
has  been  putting  pressure  on  ' 
his  hardware  vendors  to  sup¬ 
port  on-demand  computing  I 
and  is  seeing  “more  and  more  willing¬ 
ness”  on  their  part  to  do  so. 

But  lamie  Gruener.  an  analyst  at  The 
Yankee  Group  in  Boston,  said  some 
vendors  are  struggling  to  create  poli¬ 
cy-based  software  that  can  automati-  j 
cally  order  additional  equipment  for 
users  or  turn  on  unused  servers  and 
storage  devices  when  specified  capaci¬ 
ty  thresholds  are  reached.  “We’re  not 
there  yet  and  may  not  be  for  some 
time.”  Gruener  sakL  I 


oriented  technologies  in  SAP  DB  to  its 
MySQL  database,  with  the  goal  of 
sighing  tbe  time  it  would  take  MySQL 
to  develop  those  features  on  its  owa 

The  agreement  %vith  MySQL  appears  | 
to  have  the  potential  to  enrich  the  ca¬ 
pabilities  of  SAP  DB.  said  Charlie 
Brann,  SAP  administrator  at  Swisslog 
TransLogic  Corp.  in  Denver.  Swisslog. 
which  makes  materials-handling  sys¬ 
tems.  runs  SAP  DB  with  SAP’s  fla^ip 
R/3  applicatioDS.  Brann  said  the  up¬ 
coming  changes  ^lould  also  open  up 
SAP  DB  to  management  tools  beyond 
what  SAP  currently  provides. 

PeopleSoft  loc.  Ian  month  an¬ 
nounced  plans  to  make  all  of  its  busi¬ 
ness  applications  available  on  Red  Hat 
Linux  [QuickLink  38335]. 

But  SAP  is  now  putting  itself  ahead 
of  PeopleSoft  and  other  rivals  in  terms 
of  open-source  support,  said  Stacey 
Quandt,  an  analyst  at  Forrester  Re¬ 
search  Inc.  in  Cambridge.  Mass.  The 
agreement  with  MySQL  should  also 
give  SAP  users  more  choices  when 
they  pick  databases  to  support  their 
ERP  applications,  she  said.  % 


Visit  wwwdeilcsm/migraiioni?  and  go  to  trie 
Dell  UNIX  Migration  online  calculator  for  a  tree 
migration  assessment  Dell  otters  a  host  ot  end- 
to-end  mgretion  servees.  including  tnose  for 
Oracle-  9'  Can  1-886  935-0386  today  to  speak 
vnth  a  Dell  lepresentative  together  you  can 
assess  your  mdividuai  needs  and  then  deveioo  a 
cost-ettective  D<an  tor  UNIX  migrsbon 
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Sarbanes  Action  Plan 


IMAGINE  ASKING  40  CIOs  in  six  cities  what 
their  biggest  worries  are  these  days.  I’d  expect 
to  hear  about  freeze-dried  IT  budgets,  unfin¬ 
ished  projects,  sinking  staff  morale  or  loss  of 
corporate  confidence. 

I’d  be  way  off  base. 

What  I  never  wouJd 
have  guessed  was  the 
Sarbanes-Oxley  Act  of 
2002,  that  Loch  Ness 
monster  of  new  financial 
reporting  and  disclosure 
requirements  enacted  by 
Congress  in  the  after- 
math  of  Enron  and  a 
string  of  other  corporate 
scandals.  Nobody  quite 
knows  how  far-reaching 
its  impact  on  IT  infra¬ 
structures  will  be,  but  ig¬ 
norance  is  the  opposite 
of  bliss  here. 

‘The  CIOs  feel  blindsided  by 
this.”  says  Cathy  Hotka.  principal  of 
Cathy  Hotka  &  Associates  and  for¬ 
mer  VP  of  IT  at  the  National  Retail 
F^eration.  In  a  recent  series  of  CIO 
roundtables  she  moderated,  Hotka 
was  stirprised  to  find  SOX  (as  the 
finance  types  call  the  act)  a  topic  of 
so  much  consternation  among  se¬ 
nior  IT  execs.  "They  know  the  CFOs 
have  it  on  their  radar  screens,  and 
they  don’t  like  that  feeling.  Nobody 
has  a  handle  on  this  yet,"  she  says. 

Sarbanes-Oxley  is  reverberating 
throughout  IT  management  like  an 
eerie  echo  of  Y2k.  with  compliance 
deadlines  looming  and  businesses 
feeling  threatened  and  uncertain 
about  the  extent  of  the  potential 
damage  (that  is,  legal  trouble)  if 
changes  aren't  made.  As  one  of  Hot- 
ka’s  CIO  dinner  guests  observed.  "I 
could  end  up  spending  $1  million  to 
fix  a  $100,000  problem!" 

There's  a  tremendous  amount  of 
confusion"  about  what  IT  should  be 
doing  to  ensure  compliance  with 
Sarbanes-Oxley.  says  John  Hagerty, 
an  analyst  at  AMR  Research  Inc.  in 
Boston.  A  recent  AMR  poll  of  60 
companies  found  that  while  8S%  are 
anticipatii^  changes  in  system  and 


application  infrastruc¬ 
tures,  an  equally  whop¬ 
ping  80%  are  unsure  of 
what  the  changes  will  be. 

In  light  of  all  this  free- 
floating  anxiety,  last 
week’s  news  that  the  Se¬ 
curities  and  Exchange 
Commission  had  extend¬ 
ed  the  deadline  for  Sar¬ 
banes-Oxley  compliance 
another  nine  months  (to 
June  2004)  might  seem 
like  a  welcome  relief. 

But  senior  IT  man¬ 
agers  should  be  using  this  gift  of 
time  to  get  their  information  en¬ 
gines  in  gear  —  not  to  relax. 

Step  1:  Dive  in  and  do  some  re¬ 
search.  Online  in  our  IT  Manage¬ 
ment  Knowledge  Center,  we’ve 
compiled  a  special  topics  page 
((^ickLink  a32S0]  with  all  of  our 
ongoing  coverage  of  Sarbanes-Oxley 
and  additional  links  to  sister  publi¬ 
cation  CfO  magazine's  recent  series 
on  legislative  issues.  We'll  keep 


adding  resources  to  that  page,  so  let 
us  know  what  kind  of  additional  in¬ 
formation  you  need.  If  you  search 
on  Google  for  "Sarbanes-Oxley  and 
CIOs,"  you'll  get  more  than  700  hits. 
Many  are  worth  looking  over  for  ad¬ 
vice.  checklists,  additional  resources 
and  examples  of  what  other  compa¬ 
nies  are  doing. 

Step  2:  Survey  the  vendor  land¬ 
scape.  A  number  of  them  arc  cir¬ 
cling  their  wagons  and  offering  up¬ 
graded  products  or  new  features 
geared  to  tracking,  safeguarding 
or  guaranteeing  data  veracity.  So 
far,  the  vendors  include  Oracle.  Hy¬ 
perion.  SAS  Institute  and  People- 
Soft,  and  there  are  also  several  ven¬ 
dors  of  reporting  tools,  supply  chain 
software  and  document  manage¬ 
ment  applications  with  offerings. 

Step  &  Formulate  an  action  plan 
that  includes  a  presentation  to  the 
CFO  about  the  proactive  measures 
IT  is  looking  into  (or,  even  better, 
ready  to  implement)  to  address  a 
range  of  Sarbanes-related  concerns: 
internal  auditing  and  controls,  sys¬ 
tems  access,  real-time  data  report¬ 
ing,  detailed  IT  project  tracking  and 
so  fonh.  [More  action  items  are  on¬ 
line  at  ()utckLink  34225.] 

Like  it  or  not.  IT  will  be  at  the 
heart  of  your  company’s  Sarbanes 
solution.  And  tf  you're  ready  and  in¬ 
formed,  you'll  be  at  the  head  of  it  I 


PIMM  FOX 

Goldfmger’s 

Heirs 

I  CAN  SEE  the  movie  trailer 
now:  Pierce  Brosnan  as 
Agent  007  uncovers  a  se¬ 
cret  slush  fund  that’s  being 
used  to  bribe  world  leaders 
and  business  execs  so  that 
they'll  eschew  Linux  in  favor  of  Win¬ 
dows  —  software  they  don’t  want.  Be¬ 
hind  the  scenes.  Bill  Gates  (played  by 
Mike  Myers)  secretly  hands  out  piles 
of  cash  to  greedy  governments  and 
corporate  bigwigs,  while  his  hairless 
cat  Orlando  plots  to  destroy  Linux 
user  groups  by  listening  in  on  their 
meetings  and  trade  shows. 

This  might  read  like  a  Hollywood 
script  gone  sour,  if  not  for  a  series  of 
Microsoft  deeds,  beginning  with  a 
memo  written  last  summer  by  a  for¬ 
mer  Microsoft  official  named  Orlando 
Ayala,  then  the  head  of  worldwide 
sales.  His  missive  put  forth  a  corporate 
strategy  to  persuade  governments  not 
to  forsake  Windows 
for  Linux.  If  deals 
were  in  jeopardy,  Mi¬ 
crosoft  reps  were  to 
draw  from  a  special 
slush  fund  to  either 
discount  or  make 
Windows  software 
available  for  free. 

"Under  NO  circum¬ 
stances  lose  against 
Linux,"  Ayala  wrote. 

A  rogue  e-mail 
by  some  excited, 
hyped-up  exec?  No  way.  Steve  Ballmer. 
Microsoft’s  big  cheese,  got  a  copy. 

This  may  be  legal  and  standaM  op¬ 
erating  procedure  for  a  monopolist 
here  at  home,  but  m  Europe  regulators 
are  still  investigating  whether  Micro¬ 
soft  broke  antitrust  laws. 

According  to  a  foUow-up  message 
from  Michael  Sinneck,  Microsoft's 
executive  for  services,  the  fund  had 
S180  million  earmarked  for  discount- 
ii^  in  2003.  Aboveboard  in  the  U.S.. 
perhaps,  but  in  Microsoft’s  case  it's 
just  plain  wrong. 

The  2001  settlement  with  the  Bush 
administration  has  been  about  as  ef¬ 
fective  in  forcing  Microsoft  to  drop  its 
heavy-handed,  anticompetitive  moves 
as  Iraq's  air  force  in  stopping  Opera¬ 
tion  Iraqi  Freedom. 

But  there  is  some  hope.  The  combi¬ 
nation  of  Linux  and  people’s  general 
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Five  Technologies  that 
WiU  Make  a  Difference 

A  Storage  Manager’s  Watch  List 

Written  by:  Richard  Viilars,  Vice  President,  Storage  Systems  Research,  IDC 


Global  economic  and  business  uncertain¬ 
ties  place  a  growing  strain  on  IT  sys¬ 
tems  and  the  people  who  install  and 
maintain  them.  Despite  tightening 
budgets,  customers  and,  in  many  cases, 
regulatory  agencies  demand  better,  faster  and  more  cost- 
effective  access  to  information.  In  today’s  information- 
based  economy,  these  demands  translate  into  enhancing 
the  value  of  existing  and  planned  IT  investments  while 
simultaneously  reducing  the  cost  of  IT  operations. 


One  roadblock  is  the  difficulty 
companies  have  managing  storage 
assets.  Enterprises  must  collect  and 
store  mtwe  information  (e.g..  medical 
records,  customer  correspondence 
and  e-conunerce  transactions).  They 
must  also  enhance  existing  aj^lica- 
tions;  deploy  new  ones;  and  integrate 
rich  content  (e.g.  audia  image  and 
\ideo  files)  into  existing  solutions. 

The  bottom  line:  a  need  for  more 
stor^  capacity.  In  these  chalking 
times,  simply  going  out  and  buying 
more  storage  is  not  acceptable.  For 
today’s  CFO  and  IT  manager,  price 
per  gigabyte  and  useful  capacit)-  — 
not  just  raw  gigabytes  —  are  at  least 
as  impcntant  as  performance  for  many 


ap^licatkms.  This  costconsciousness 
translates  into  three  requirements; 

•  liKrease  fkxibihty  in  purchas¬ 
ing  and  extendii^  sn>rage  capacity. 

•  Improve  utilization  by  oxisoli- 
datii^  and  maxiitrizing  capacity. 

•  Reduce  orbing  storage,  server 
and  application  configuration  costs 
of  resources  and  time  to  cmnpltte. 

The  world  is  awash  in  technology 
that  promises  to  lower  the  total  cost 
of  ownership  ar>d  improve  ROI.  Some 
very  vi^k  technologies  specifically 
target  companies’  storage  priewities. 

But  what  is  real?  What  technolo¬ 
gies  can  you  implement  today  to 
impact  the  corporate  bottom  line?  In 
this  White  I^per,  we  look  at  five 


techrwlogies  that  should  be  closely 
watched  by  storage  maru^rs.  data 
center  managers  and  CIOs. 

By  mid  2004,  these  stoi^e-relat 
ed  techrwlogies  will  reduce  the  cost 
per  ^abyte  of  real  stowage  cj^sacity. 
the  complexity  of  organizing  arnd  pro 
tecting  data  within  storage  systems, 
and  the  cost  of  proviskmir^  and  man  - 
agit^  add'cm  capacity.  Each  can  help 
reduce  the  cost  of  adding  storage 
capacity  or  marugir^  existing  assets. 
Their  real  value,  however,  is  in  new 
products  and  services  that  offer  pre 
viously  unseen  integrated  solutions 


Siixe  the  develofxnent  of  the  SCSI 
interface,  most  servers  (other  than 
low-end  Intel-based  servers  with 
internal  drives)  relied  on  enterjMise 
class  (SCSI)  hard  disk  drives  few  local 
stor^.  Higher  perfcvmaiKe  and  reii 
ability  requirements  made  the 
Advanced  Technology  Attachment 
(ATA)  drives  (desktop-class  drives) 
developed  for  PCs  insufficient  for 
enterprise  applications.  As  a  result. 
SCSI  drives  coirunarukd  a  300%  pvice 
fMemium  over  similar-capacity  ATA 
drives.  Today,  virtually  all  storage  sys 
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terns  use  enterprise-class  SCSI  drives 
or  even  more  expensive  Fibre 
Channel  interfaces. 

The  price  differential  is  not  unjus¬ 
tified;  SCSI  and  Fibre  Channel  drives 
have  seen  markedly  increased  per 
formance  levels  in  resistance  to  vibra 
tion  and  error  correction.  Reliability 
is  more  than  twice  as  high  for  SCSI 
drives  as  for  similar  capacity  ATA 
drives,  and  testing  regimens  are  more 
intense  for  enterprise  class  drives 
than  they  are  for  desktop-  class  drives. 

How'ever.  high  performance  sys¬ 
tems  and  mission  critical  applica 
tions  account  for  a  small  portion  of 
the  overall  storage  workload  in  most 
organizations.  Recent  IDC  interviews 
with  900  U.S.  IT  managers  found  that 
coUaboratis'e  applications  (including 
email)  and  basic  ser\ices  such  as  file 
sharing  and  Web  services  are  the 
fastest  growing  consumers  of  IT 
spendii^  for  new  servers  and  storage 
systems  (Figure  1). 

These  application  workloads  are 
primarily  Intel  based  ser\’ers  running 
Windows  or  Linux.  They’re  over- 
served  in  terms  of  p>erformance  and 
reliability  (but  not  capacity)  by  SCSI 
drive-based  arrays.  Cost-conscicms  IT 
managers  seek  drive  technologies 
that  satidy  less  strenuous  perform 
atKe  metrics  at  lower  cost. 

The  introduction  of  serial  ATA 
(SATA)  interface  for  ATA,  improve¬ 
ment  in  component  performance  and 
reliability  in  ATA  drives,  and  the 
capacity  adsantage  over  enterprise- 
class  drives  are  advancing  desktop- 
class  mechanisms  to  a  point  wdiere 
solution  providers  must  consider 
their  integration  into  stor^  systems. 

Recognizing  SCSI's  limitations. 


the  SCSI  Trade  Association  developed 
a  recently  approved  interconnect 
standard.  Serial  Attached  SCSI 
(SAS).  SAS  promises  to  boost  SCSI 
interconnect  performance  while 
maintaining,  or  even  reducing,  cost. 
In  a  positive  move  for  customers  and 
storage  suppliers.  SATA  and  SAS 
developers  agreed  in  2002  to  employ  a 
standard  interconnect  across  both 
technologies.  SAS  silicon  will  control 
both  drives,  helping  enterprises 
deploy  the  mix  of  drive  mechanisms 
while  leveraging  common  elements 
such  as  enclosures  and  controllers. 

low-cost  arrays 

The  most  obvious  offering  is  a 
standard  array  product  that  uses 
large-capacity  SATA  drives  instead  of 
enterprise -class  SCSI  drives.  Such  a 
system  will  deliver  greater  capacity  at 
a  much  lower  price  but  won’t  deliver 
comparable  performance  or  reliabili 
ty.  IT  managers  at  small  and  medium 


size  businesses,  and  those  at  larger 
enmrprises  dqkjyir^  low-end  servers, 
should  consider  SATA  solutions. 

Don't  expect  to  see  entry-level 
SATA  products  before  late  2003. 
Integrating  SATA  drives  into  existir^ 
environments  and  completing  prrod 
uct  certification  will  take  time.  This 
means  standard  storage  systems  with 
SATA  drives  won’t  deliver  the  full  cost 
benefits  of  desktop-class  drives, 
though  savings  will  be  significant. 

Businesses  with  extensive  invest¬ 
ments  in  storage  assets  should  keep 
an  eye  on  another  SATA  deployment 
option.  Within  18  months,  major  ven¬ 
dors  will  announce  or  deliver 
upgrades  to  existing  mid  range  prod 
ucts  that  will  enable  them  to  support 
different  interconnects  (Fibre 
Channel.  SCSI,  SAS  and  SATA). 

Disk-based  backup  and  recovery 

One  SATA-based  development 
that  bears  close  watching  is  the  disk 


Figure  1 


Worldwide  spending  on  internal 
and  external  storage  by  workload,  2002 


Source;  IDC.  2002 
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based  backup  solution  as  an  enhance  - 
ment  to  existing  tape  systems. 

The  wide^read  use  trf  upe  for 
backup  and  recovery  is  based  on  two 
value  propositions:  cost  and  portabil¬ 
ity  Potential  weaknesses  include 
slow  recovery  times,  an  inability  to 
provide  simple  access  for  small  ran¬ 
domly  located  amcmnts  of  data  and 
potential  downtime. 

Disk-based  storage  systems  — 
essentially  near-line  storage  servers 
—  are  faster  than  tape  when  servicing 
frequent  restores  of  small  amounts  of 
data.  They  also  provide  the  level  of 
functionality  and  ease-of-use 
required  by  enterprise  users. 

Existing  data  replication  and 
backup  systems,  whether  based  on 
tape  or  expensive  disks,  provide  time- 
based  restore.  IT  managers  can  only 
recover  to  the  system  state  at  the  time 
that  the  backup  was  performed. 
Lower  priced  disk-based  ston^  will 
offer  continuous  versicming  by  lever¬ 
aging  new  software  tools,  rapid 
access  speeds  and  disk  availability  to 
offer  event -based  restore  (recovery  at 
\Trtually  any  pcwc  in  time). 

Several  vendcws  are  already  deliv¬ 
ering  near-line  storage  solutions 
based  on  less  capable  parallel  ATA 
techrwlogy  at  a  price  per  gigabyte 
that  is  often  one-third  the  cost  of 
their  other  product  offerii^.  And 
sooa  rr  managers  should  look  for 
many  tape-  and  qstical-based  back- 
up-and-recovery  providers  to  inte¬ 
grate  near-line  storage  products  and 
functions  into  existing  solutions. 
Dont  expect  these  systems  to  replace 
existing  tape  solutitms;  rather,  lo(^ 
for  solutions  that  leverage  low-cost 
disk  technology  to  address  local  and 


remote  data  and  disaster  recovery 
requirements  more  cost-effectively. 


Fibre  Channel  is  the  predominant 
intercormect  standard  today  for  stor 
age-area  networks  (SANs).  It  offers 
high  performance  and  reliability; 
enjoys  broad  iridustry  support;  and  is 
a  critical  element  in  enterprise  efforts 
to  imjxove  storage  capacity  utiliza¬ 
tion  and  remove  setters  as  a  bottle¬ 
neck  in  data  backup  and  recovery.  In 
2002,  companies  across  the  globe 
spent  $2.4  billion  cm  Fibre  Charmel 
SAN  switches  and  host  tms  adajxers 
(HBAs)  for  sCTvers  and  t^  systems 

The  trouble  with  Fibre  Channel 
solutions  (e^jecially  for  medium-size 
and  small  businesses)  is  the  inirial 
cost  to  connect  servers  and  storage 
systems  The  cost  erf  a  Fibre  Channel 
HBA  for  an  Intel-based  server  can 
rai^  from  20%  to  50%  of  the  cost  of 
the  server  itself.  Even  large  enterpris¬ 
es  have  trouble  justifying  the  use  of 
Fibre  Charmel  SANs  for  their  low- 
end  servers,  c^)eciaily  at  remote  sites. 

As  a  result,  in  2002.  SAN  attached 
storage  arrays  accounted  for  just 
38.8%  of  all  array  sales  in  Western 
Europe.  The  rest  wfre  either  net- 
work-attached  storage  (NAS)  filers 


or  directly  attached  to  the  servers. 
The  direct  attachment  of  storage  to 
servers  remains  the  most  significant 
contribute*-  to  poor  disk  ucilizaciem. 
With  direct  attached  servws,  FT  man 
agers  carmot  shift  storage  from  a  serv  ¬ 
er  using  20%  of  capacity  to  one 
exceedir^  80%.  In  aggregate,  uriliza 
Cion  rates  range  from  25%  to  50%.  b)- 
comparisem.  in  mainframe  environ 
mencs,  ucilizatiem  can  top  80%, 

One  way  to  reduce  SAN  connec 
tivity  costs  is  to  take  advantage  of 
existing  widely  deployed,  low-cost 
technolopes;  Ethernet  and  TCMP. 
The  result  is  the  dcvelcpment  of  the 
iSCSI  standard,  which  enables  the 
connection  of  servers  (initiators)  and 
arrays  (targets)  via  IP  netwxxks. 

The  most  promising  short-term 
use  for  iSCSI  is  as  a  gateway  between 
IP  networks  and  Fibre  Channel 
based  backup  systems.  Many  low- 
end  scrvCTs  in  large  enterprises  are 
not  attached  to  the  cenporate  SAN, 
either  because  the  connection  is  too 
expensive  or  the  server  is  at  a  remote 
site.  While  everyone  focuses  cm  the 
disk  utilization  shortcomings  of  these 
“stranded"  senws,  they  often  over- 
lotrfc  the  w'asceful  necessity  of  deploy- 
expensive,  isolated  tape  backup 
systems  —  often  inconsistently 
deployed  and  preme  to  h^  fulure 
rates  when  a  recovery  is  attempted. 

The  deployment  of  software  to 
turn  these  stranded  servers  into 
iSCSI  initiators  allows  them  to  use 
pre  installed  features  (an  Ethernet 
card  and  an  IP  stack)  and  existing 
LAN-  and  WAN-hased  IP  networks 
CO  forward  data  CO  h^her  performir^ 
more  cost-effective  and  more  reliable 
SAN-based  tape  or  (eroeigii^  disk 
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based  backup  systems. 

Companies,  such  as  Ci.sco  Systems 
Inc-  and  QLogic  Corp..  have  already 
announced  iSCSI-to  Fibre  Channel 
gateways  (iSCSI  routers  or  bridges), 
and  virtually  ail  other  major  IP  and 
Fibre  Channel  network  equipment 
vendors  will  introduce  competing 
products  in  the  next  12  to  18  months. 

Riding  the  SATR  *»e 

The  other  major  iSCSI  opportuni 
ty  is  as  a  key  supporting  technology 
fw  several  of  the  ATA  based  solu 
tions-  Integratii^  SATA  into  low-end 
arrays  and  near  line  storage  promises 
to  reduce  the  cost  of  storage  for  small 
and  medium-si2c  businesses.  Much 
of  this  cost  benefit  is  lost  if  IT  man 
agers  deploy  expensive  Fibre  Channel 
arrays,  switches  and  HBAs.  By 
employing  SATA  based  arrays  with 
iSCSI  intercormects,  IT  managers  can 
take  advant^e  of  technologies  that 
come  pre-packaged  with  servers  as 
well  as  inexpensive  and  well  under¬ 
stood  Ethernet  switches. 

IDC  recommends  that  IT  man 
i^ers  evaluating  iSCSI  capable  stor 
;^e  systems  deploy  a  {4iysically  sepa¬ 
rate  Ethernet  network  rather  than 
attempt  to  accommodate  this  new 
traffic  type  within  an  existir^  net 
woti(.  While  this  af^Moach  is  modest 
ly  more  costly,  it  avoids  the  security 
and  network  performance  issues  that 
can  slow  initial  testing  and  deploy 
ment  d  such  systems. 


N'irtualizaticm  remains  one  of  the 
most  hyped  but  least  understood 
technology  concepts  in  IT.  Many  ven 


Technology  promises  to 
lower  TCO  and  improve 
ROI.  But  what  is  real? 

dors  have  announced  next  generation 
IT  strategies  based  on  the  concept  of 
“virtualizing’  resources.  Over  the 
next  12  months,  vendors  will  begin  to 
deliver  virtualization  products. 

What  practical  value  can  storj^e 
managers  actually  expect  from  these 
solutions?  It  comes  down  to  two 
straightforward  goals:  improving  the 
utilization  of  all  existing  storage 
assets  (the  long  term  goal),  and 
reducing  the  expense  and  time 
required  to  migrate  data  from  one 
stor;^  system  to  another,  even  across 
non  homo^nous  systems  (the  short 
term  goal).  Solutions  that  address 
these  goals  deliver  enterprise-wide 
volume  management  and  data  repli 
cation. 

OvHCMniig  the  limits  of 
existmg  SANs 

The  pc^ularity.  diversity  and  size 
of  SANs  present  IT  manj^rs  with 
new'  manageability  issues  related  to 
increasir^  numbers  of  poeJed  arrays; 
a  growing  v-ariety  of  storage  con¬ 
trollers;  and  disparate  supporting 
software  solutions  for  data  migration 
and  replication.  This  heterogeneity 
results  in  many  isolated  SANs, 
incrcasir^  cost  and  introducing  addi 
tional  management  complexity. 

Virtualization  is  a  new  aj^roach 
to  storage  system  design  that  intro¬ 
duces  a  layer  of  logical  abstraction 


between  physical  blocks  of  data  on 
storage  devices  and  the  logical  vol¬ 
umes  of  information  that  servers  and 
applications  require.  The  goal  is  to 
disassociate  blocks  of  sconce  capaci¬ 
ty  —  logical  unit  numbers  (LUNs)  — 
from  specific  volumes  required  by 
server  applications,  eliminating  the 
need  to  continually  manually  recon¬ 
figure  both  server  and  storage  con¬ 
nections  when  changes  are  made. 

By  leven^ing  controller  functions 
for  LUNs  and  volume  management  in 
a  networked  storage  controller,  IT 
managers  can  introduce  a  logical  layer 
of  abstraction  between  LUNs  and 
volumes.  That  meaas  IT  can  connect 
appheations  to  specific  virtual  vol¬ 
umes  without  needirjg  any  knowl¬ 
edge  of  the  underlyii^  disk  environ¬ 
ment,  even  across  heterogerreous  sys¬ 
tems.  Moreover,  IT  can  add  capac 
ity  to  virtual  volumes  without  server 
reconfigurations. 

The  deployment  of  data  replica¬ 
tion  functions  and  volume  manage 
ment  within  a  networked  storage 
controller  leads  to  several  .significant 
improvements  in  the  way  IT 
approaches  data  protection  and 
recovery.  Replication  will  be  per¬ 
formed  at  the  logical  volume  level 
mdur^  it  possible  to  replicate  vol¬ 
umes  across  hetero^neous  stcNrage 
arrays,  rather  than  only  on  homoge¬ 
nous  systems. 

IT  can  take  advantage  of  installed 
systems  or  use  lower  cost  storage  sys¬ 
tems  for  near-line  storage  without 
sacrificing  system  integrity. 
Performing  data  replication  functions 
cm  nerwcM^ed  contrdlers  provides  a 
foundation  fex*  consistent  data  repli¬ 
cation  and  recovery  policies. 
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Siftiig  tlragh  ttie  dnices 

IT  managers  will  soon  be  con¬ 
fronted  with  virtualizacion  solutioas 
from  a  variety  of  software,  storage, 
networking  and  systems  vendors.  A 
second  family  of  virtualizacion  solu¬ 
tions,  based  on  an  appliance  model, 
will  hit  the  market  shortly.  Finally, 
there  are  blade-based  virtualization 
systems  chat  reside  within  the  SAN 
switch,  similar  to  appliances  that 
move  many  storage  management 
functions  fully  into  the  network. 

IflViMMotatiM  is  the  key 

The  delivery  of  products  for  net 
work-based  volume  maru^ement  and 
data  replication  represents  a  signifi 
cant  change  in  traditional  storage 
architecture  and  processes.  Installing 
such  systems  won’t  guarantee  better 
capacity  utilization  and  reduced 
management  costs.  Effecti^’e  imple¬ 
mentation  is  a  critical  concern  for 
these  emerging  solutions.  IT  man 
agers  need  to  estabhsh  rules  and  pro¬ 
cedures  for  everything  from  naming 
conventions  to  provisioning  and 
replication  policies.  They  must  then 
set  up  volume  management  and  data 
replicatkm  systems. 


For  all  organizations,  stored  data 
falls  into  three  broad  categpries: 

•  Structural  data,  such  as  flat- 
ftle  transactional  systems;  business 
intelligence  tools;  and  relational  data¬ 
bases  that  typically  support  mission- 
cridcal  business  systems.  High  relia 
bility,  recoverd)ility  and  performaiKC 
are  the  critkal  features  here. 

•  Fixed  content,  such  as  end- 


Soon,  storage  vendors 
of  all  stripes  will  imple¬ 
ment  the  SNIA's  SMIS. 

user  office  productivity  files,  email 
archives,  audio,  video  and  images. 
Unstructured  data  is  stored  in  print¬ 
ed  or  analog  form,  on  dispersed  file 
servers  or  within  relational  databases 
as  large  binary  objects. 

•  Archival  data,  such  as  backup 
copies  critical  transaction  data  and 
select  unstructured  data  for  disaster 
recovery  and  long-term  record  keep¬ 
ing  Tape  and  optical  systems  are  the 
preferred  cation  for  both  local  and 
remote  storage  of  this  data. 

Fixed-content  a^licacions  are  a 
new  market  in  which  companies’ 
storage  needs  focus  on  different  per¬ 
formance  measures  that  are  either 
over-  or  underserved  by  today’s  disk 
and  tape  solutions,  While  NAS  may 
reduce  some  costs,  it  does  nothing  to 
resolve  the  problem  with  existing 
storage  systems  used  today  for  fixed 
content;  non-existent  and/or  ineffec¬ 
tive  organization  and  management. 

Makiiig  storage  CMtMt-aware 

By  mid-2004.  a  number  of  new 
storage-related  technologies  will 
b^in  to  address  the  cost  of  prmision- 
ing  and  manning  capacity.  Capacity- 
oriented  SATA  mechanisms,  virtual 
ization  and  iSCSI  promise  to  reduce 
cost  and  boost  data  mc^ility  while 
maintaining  performance  levels  that 
are  more  than  satisfactory  for  fixed 
content. 


Inexpensive  capacity,  unproved 
data  mobUity  and  less  costly  connec¬ 
tivity  solutions  address  only  a  part  of 
the  fragmentation  and  lack  of  organi¬ 
zation  that  lead  to  lost  data,  wasted 
capacity  and  excess  management 
costs.  For  enterprise  IT,  the  key  to 
cost-effective  storage  for  fixed  con¬ 
tent  will  be  software  solutions  that 
separate  information  about  content 
from  information  about  its  physical 
location. 

Content-aware  storage  (CAS) 
solutions,  sold  initially  as  integrated 
stor£^e  and  software  systems,  will 
store  data  as  (^:jeccs.  not  simple  files. 
CAS  will  require  no  knowledge  of  the 
storage  environment  or  physical  loca¬ 
tion  of  the  objects  (it  will  leverage 
underlying  virtualizacion  services  to 
handle  this  issue).  Each  object  has 
attributes,  including  a  unique  foot¬ 
print,  allowing  data  to  be  stored  only 
once  to  service  all  requests. 

Object-oriented  data  structures 
and  distributed  file  system  services 
implemented  in  CAS  deliver 
improvements  on  several  dimensions 
relative  to  traditional  file -based  sys¬ 
tems.  These  include  allowing  for 
customized  searchii^,  adding  verifia¬ 
bility  (e.g..  ensurir^  specific  concent 
has  been  unaltered)  and  eliminating 
the  need  for  duplication.  These  attrib¬ 
utes  will  s^niftcantiy  change  the  cost 
of  fixed-content  disk  based  storage 
for  applications  such  as  email  and 
im^e  archives. 

CASoiitiOK 

A  number  of  software  startups 
were  early  champions  of  content- 
aware  stor^  solutions,  but  the  most 
significant  early  participant  has  been 
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It's  so  far  forward,  it's  a  shame  to  call  it  backup. 

[|  . . ^  *W<’™™*^'*»«<>^»'«««»y*^.BrightStor-ARCse<v«-Bodcupiscxn(»i9t(Kmostrelktfcondwkle^.us^ 

I  it  hen  I  <*»  woHd.  in  fact,  hundreds  of  thousands  of  people  rely  on  BrightSfar  ARCserre  Bockup 

‘  senses.  Now  ««'ve  created  BrightSfar- ARCsenre' Bockup  *9,  the  most  odsCTicod 

vetsion  ever.  As  port  ol  the  BrightStor"  line  of  storage  monogetnent  solutions.  BrightStot  ARCsene  Backup  v9  is  omozingly  povretful  yet 

one  of  the  simplest  to  use  and  eosiest  to  install  solutions  out  there.  In  fact,  most  usets  con  petfonn  their  first  bodrup  within  20  minutes 
of  startup.  And  thot  means  it's  the  perfect  backup  softwore  choice  for,  well,  just  obout  eretyone.  co.com*rightstor/orcser»e9 

*  ^  BrightStor"*  ARCserve'  Backup  Computer  Associates* 


EMC  with  its  Centera  product  lirie. 

IDC  expects  other  major  storage 
system  suppliers  to  introduce  CAS 
solutions  in  the  next  12  months. 
Initial  CAS  implementations  will 
work  best  if  they  target  specific 
needs,  such  as  email  archiving  or 
medical  record  storage. 

Another  important  group  of  stor 

suppliers  that  will  play  a  role  in 
bringing  CAS  to  small  and  medium- 
size  businesses  are  current  suppliers 
of  backup- and  restore  solutions.  For 
these  companies,  CAS  is  a  sustaining 
innovation,  enabling  significant 
enhancements  in  the  reliability,  speed 
and  usefulness  of  existing  back 
up/recovery  solutions.  Truly  effective 
CAS  solutions  for  small  and  medium  - 
size  businesses  will  take  more  time  to 
come  to  market. 


A  recurring  theme  in  each  of  the 
previous  discussions  is  the  interde¬ 
pendence  erf  the  solutions.  IT  man¬ 
ners  can  only  reap  the  maximum 
benefits  if  these  technologies  work 
together.  One  impediment:  the  “certi- 
ficaticHi  crisis.’ 

Customers  understandably 
demand  extensive  testing  erf  different 
combinations  of  arr^,  tape  systems, 
servers,  operating  systems  and  appli¬ 
cations.  In  the  days  of  direct  attached 
storage  and  relatively  homogenous 
environments,  this  requirement, 
while  resource-intensive,  was  man¬ 
ageable  for  most  vendors.  But  in 
today’s  world  of  diverse  server  plat¬ 
forms,  operating  systems,  SAN  infra- 
-structure  products  and  storage  prod¬ 


ucts,  the  testing  required  is  growing 
exponentially. 

Testing  is  now  a  major  barrier  to 
entry  for  stor^e  startups.  The  time  to 
roll  out  features  and  functions  is 
stretchir^  to  more  than  six  months 
for  many  products.  Even  the  largest 
vendors  find  it  hard  to  keep  pace  with 
testing  needs.  The  result  is  reduced 
choices  and  less  interoperability. 

Leanriin)  to  trust  standards 

The  storage  sector  is  not  the  first 
IT  industry  to  face  such  a  crisis. 
Networking  was  in  a  similar  predica¬ 
ment  in  the  1980s.  The  adoption  of 
.standards  for  network  connectivity 
significantly  improved  product  inter¬ 
operability  while  reducing  the  need 
to  test  every  possible  product  combi¬ 
nation. 

The  Stor^e  Networking  Industry 
Association  (SNIA)  has  loi^  champi¬ 
oned  the  development  of  standard 
processes  and  protocols.  The  SNIA 
stor^  model  helped  define  the  logic 
behind  many  of  today’s  new  technolo¬ 
gies.  including  virtualization  and 
CAS.  Another  critical  SNIA  effort  has 
encouraged  interoperability  testing 
and  certification  for  storage  solutions 
such  as  iSCSI. 

SNlA's  most  important  effort, 
however,  is  to  drive  the  creation  (rf  the 
Storage  Management  Interface 
Specification  (SMIS)  for  monitorii^ 
and  managii^  all  storage-related  sys¬ 


tems.  Today’s  version,  approved  early 
this  year,  by  no  means  represents  the 
final  iteration.  Over  the  next  six 
months,  storage  vendors  of  all  stripes 
will  begin  to  implement  SMIS. 

For  the  first  time,  IT  managers 
will  be  able  to  collect  and  access  com¬ 
mon  information  for  storage  systems 
throughout  the  enterprise,  regardless 
of  which  vendor  supplied  those  sys¬ 
tems.  Such  information  is  a  powerful 
resource  for  monitoring  interoper¬ 
ability.  better  managing  storage 
capacity  and  limiting  the  impact  of 
inev  itable  failures. 

New  versions  of  SMIS-capable 
management  products  will  provide 
additional  functions  in  the  areas  of 
auto-discovery,  configuration  and 
perfcHTnance  monitoring.  When  these 
standards  arrive,  IT  managers  will 
finally  have  the  ability  to  automate 
repetitive  storage  configuration  tasks 
and  introduce  more  policy-driven 
management  systems  across  diverse 
storage  environments. 

The  ultimate  succ^  of  the  SMIS 
is  in  the  hands  of  IT  managers.  SMIS 
and  its  brethren  certainly  won’t  solve 
all  storage  mam^ement  woes  on  day 
one,  but  greater  reliance  on  these 
standards  will  help  reduce  the  level 
of  certification  testii^  needed.  Only 
by  insisting  that  su^^liers  use  inter¬ 
operability  and  management  stan¬ 
dards  will  IT  ensure  continued 
upgrades  to  these  standards.* 
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Sav«th«day. 


To  me,  success  is  a  35  minute  lunch. 


At  a  restaurant,  not  my  desk. 


Means  I'm  not  wasting  time  doing  the 


same  data  management  task  again  and 


again  and  igain  and.. .well,  y^  get  it. 


■  Consolidate  your  work  by  consoHdating  data  from  all  your  diff^t  systems.  One  way  is  with  a  V2X  Shared  Virtual  Array*  subsystem 
and  SnapVantage*  software  to  unite  all  your  Linux  virtual  servers.  Or  an  L5500  automated  tape  library  and  T9M0B  tape  drive.  There 
are  other  ways,  too  We'll  help  find  the  orre  that's  best  So  storage  admirWstration  takes  a  smaller  bite  out  of  your  day.  Learn  more 
nxMBwmm  about  this  story  and  other  ways  we  can  help  you  at  wwwjavethedayxom  STORACCT^IC  Save  the  Day.* 


EMC' 

where  infornution  lives 


Did  YOU  KNOWTmTSOMEOFOUR 
BEST  STORAGE  PRODUCTS  COME 
ON  A  DIFFERENT  KIND  OF  DISK? 


To  manage  complexity,  you’ve  got  to  outsmart  IL  EMC  Automated  Networked  Storage™  delivers 
the  software  that  automates  management  of  your  multi-vendor  storage  infrastructure,  including 
the  most  error-prone  tasks  such  as  monitoring  and  provisioning.  Now  you  can  gain  a  unified, 
end-to-end  view  of  your  entire  environment  Define  your  service  levels.  And  run  an  agile,  active 
infrastnjcture  that  helps  the  business  pounce  on  opportunity. 

See  how  other  companies  are  using  EMC  Automated  Networked  Storage  to  manage  more 
information  with  less  effort  at  www.EMCxom. 

EMC'and  EAKare  registered  trademafks  and  EMC  AirtoniaiedNeAmrked  Storage  and  where  infoanatnnl^  are  trademartcs  of  EAK  Coqxiratioa  €)2oo3  EMC  Corporation.  Al  rights  reserved. 


OUR  SOFTWARE  GIVES  YOU  SOME 
VERY  SMART  CHOICES. 


WWW  CDinpirtenKirld.con> 
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disgust  with  the  way  Microsoft  does 
business  could  thwart  the  company's 
ambitions  in  the  server  market. 

And  that  threat  is  causing  Microsoft 
to  do  some  pretty  bizarre  things. 

Microsoft  employees  have  been  hid¬ 
ing  their  identities  as  they  imperson¬ 
ate  independent  computer  consultants 
and  OEM  reps  at  trade  shows  in  the 
U.S.  to  get  information  about  competi¬ 
tors.  Microsoft  doesn't  see  anything 
amiss  in  these  deeds. 

And  the  company  continues  to  ar¬ 
gue  that  the  slush  hmd  will  be  used 
wherever  It’s  needed. 

It’s  great  that  Bill  Gates  wants  to 
spend  his  millions  improving  health 
standards  and  supporting  education 
around  the  world,  but  if  his  company 
continues  to  operate  without  any  ethi¬ 
cal  standards,  what  kind  of  world  is  be 
helping  to  create? 

As  the  saying  goes:  If  you  want  to 
know  what  God  thinks  of  money,  just 
look  at  the  people  He  gave  it  ta  I 

THORNTON  MAY 

Harvard 
Flunks  rr 

Harvard  business 
School  has  many  suc- 
cesshil  graduates  (our 
CEO  in  chief,  George  W. 

Bush,  to  name  but  one)  and  a 
proud  history  of  IT  scholar- 
ship.  But  I  fear  that  the  time  has  fmal- 
ly  come  to  stick  a  fork  in  it  as  far  as 
thought  leadership  in  ITis concerned. 
All  of  us  in  the  profession  have,  at 
least  once  during  our  careers,  bowed 
reverentially  to  capitalism's  Mecca  on 
the  Charles  as  we  sought  to  merge  the 
historically  different  and  often  oon- 
convergent  disciplines  of  technology 
and  business  management.  No  more. 

Nicholas  G.  Carr.  writJog  in  the  lat¬ 
est  issue  of  the  school's  highly  influ¬ 
ential  publication,  the  Harvoni  Busi¬ 
ness  Review,  has  penned  a  oeo-Lud- 
dhe,  could-have-been-written-by-the- 
Unabomber  (another  Harvard  guy) 
antitechnoiogy  article,  “IT  Doesn't 
Matter.”  It  pretty  much  tells  IT  leaders 
that  they  sitould  pack  their  bags  and 
go  home.  As  I  read  the  article,  barely  a 
sentence  went  by  without  me  gasping. 

We  are  told  that  IT  is  no  longer 
strate^,  that  the  now-and-forever- 
more  infrastructure  Is  pretty  much 
built  out.  that  vendors  are  "rushing  to 
position  themselves  as  commodity 
suppliers"  and  that  we  should  no  I 


longer  "seek  advantage  ag¬ 
gressively"  but  instead 
should  "manage  costs  and 
risks  meticulously.”  The  ar¬ 
ticle  makes  Bill  foy's  "tech¬ 
nology  will  destroy  the 
world"  speech  look  upbeat 

He  Is  dead  wrong  on  all 
counts.  Of  more  concern, 
however,  is  the  sad  fact  that 
many  weak-minded,  vision- 
challenged  business  execu¬ 
tives  wUl  use  this  as  ammu- 
niiioD  to  further  reduce  the 
influence  and  impact  that 
appropriately  managed  IT 
can  have. 

An  oft-lobbed  criticism  against  Har¬ 
vard  Business  School  is  that  it  gets  the 
past  perfectly  and  is  pretty  close  to 
correct  on  the  present  but  still  man¬ 
ages  to  flunk  the  future.  This  may  have 
something  to  do  with  its  fetishlike  ob¬ 
session  with  the  case  study  method. 


which  by  its  very  nature  is 
an  exercise  in  historical 
analysis. 

What  Carr  doesn't  seem 
to  understand  is  that  the 
future  is  all  about  the  evo¬ 
lution  and  blurring  of  the 
interface  between  pieople 
and  our  machines.  The  en¬ 
vironment  we  will  live, 
work  and  play  in  will  be¬ 
come  inexorably  more  dig¬ 
ital  The  Darwinistic  forces 
of  information  natural  se¬ 
lection  are  just  now  begin¬ 
ning  to  exert  themselves. 
Our  aptitude  for  information  manage¬ 
ment  will  determine  much  of  our 
lives.  "Being  digital"  is  the  next  step  in 
the  evolution  of  our  specks.  Whether 
our  endpoint  is  Digital  Eden  or  High- 
tech  Hades  is  very  much  up  to  us. 

Carr  overfocuses  on  the  current 
pre-Edenic  environment,  a  time  when 


machines  arc  just  machines  —  rela¬ 
tively  simplistic,  noninteliigeni  chunks 
of  metal  and  sflicon.  When  they  break, 
we  are  screwed.  When  they  work,  we 
are  victimized:  pagers,  for  example, 
arc  little  more  than  electronic  leashes. 
But  in  Digital  Eden  —  a  place  we  will 
never  see  if  we  fotlou-  Carr’s  advice  — 
the  machines  will  work  for  us. 

In  closing,  let  me  paraphrase  yet  an¬ 
other  Harvard  guy.  Bobby  Kennedy 
was  defining  youth,  but  I  will  apply  it 
to  IT:  “IT  is  not  a  menial  task  waiting 
to  be  outsotirced.  but  a  sure  of  mind,  a 
temper  of  will,  a  quality  of  imagma- 
tion.  a  predominance  of  courage  over 
timidity,  of  the  appetite  for  adventure 
over  the  love  of  ease." 

IT  does  matter.  I 
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Carr  Draws  Fke:  IT  Remains  Reievant 


IF  MCHOUS  a.  CAM  MfeoOf- 
rari  aboiR  the  conmoettization 
of  FT  and  the  iriaied  lack  of  strate¬ 
gic  vakie  to  busmass  ["Get  Over 
VbuneH.’ (>acklJnk 37990].  wery 
CEO  would  get  the  same  answer  to 
the  question.  "What  is  the  cheapest 
rfsolutionrjiiaasveiheiectTici- 
ty.  companies' needs  would  very 
oiniylnquanttty.nolquaity.How 
ew.  these  of  us  who  have  spent 
our  careers  n  ITknow  that  the  an¬ 
swer  to  this  gjeslion  is  afweys.  It 
depends.’ And  what  it  depends 
upon,  more  than  anything  else,  is  a 
company's  strategy. 

TypicaAy.  competitrve  strategy 
lansiowaidoneotlwofornKbe- 
og  the  low-cost  provider  of  a  catr^ 
modlty  product  or  service,  or  bemg 
SMkie-addedpiDvidBroledifier- 
entel8dproductorservice.Tbav*- 
riely  and  cornplesity  of  IT  solutions 
aresuchthatthereisanalmoetnft- 
nde  numbor  of ’coned’ IT  solu¬ 
tions  and  investment  stratogies  for 
edheroithesecompettivestrate- 
gns;  however,  the  set  of  sokibons 
that  works  for  one  w<  not  be  the 
same  as  the  sal  that  works  for  tfw 
other.This.llhink.niBkesrTman- 
agenierl  vvhich  includes  the  selec¬ 
tion,  mamtenance  and  deploytnent 
of  new  arxl  ongong  IT  capabbty.  a 
keystratoglctssue. 

Getting  FT  ligN  o  a  dAcuk  prob¬ 
lem  that  many  execubves  face.  Old 
vMe  some  wi  appreciate  the  siver 


bulBl  Carr  offers,  most  I  emect.  wi 
fnd  Ms  narveie  iSscouragng. 

Cathy  Hywit 

rr  coosulront  Son  frorictscD, 
attMOKtn@sbcglo6alrier 
Edh^s  note;  A  longer  verskm 
cf  this  letter  oppears  online  or 
Quicklink  .387(Kl 

HBTOirrTEACHESIhattech' 
nology  is  highly  cyclical.  K  is 
Singly  absurd  tod  anybody  would 
bekeve  that  technology  no  longer 
provides  a  source  of  compeUive 
advantage.  It's  never beenthe 
lechnotogy  that  craeles  advantage 
to  the  maketplaoe:  A’s  how  compa¬ 
nds  sirategKally  iinplatnerit  thee 
busness  processes  around  the 
technology.  From  toe  general  tone 
of  tecerS  issues.  CorTputorwcril:! 
seems  bent  on  purashmg  the  IT 
professon  lor  unspadied  past 
sins.  The  truth  B  that  our  ndustry 
and  profession  am  in  toe  rriddto  of 
a  normal  cyckcai  downlUTL  I  won¬ 
der  mtoal  you  wi  pubish  when  the 
tech  sector  rebounds  and  busi¬ 
nesses  return  to  gaewig  longterm 
achantages  from  technology. 

Stave  Thoralon 
IT  director. 

Son  Ramon,  Cob/.. 
Srevo64@iya/too.rom 

N  cm  FOR  NASA:  FU  that  plan 
for  a  manned  misston  to  Mars 
to  toe  trash  can;  Ntoholas  G.  Carr  is 


aireedy  towel  Carr's  comments  are 
so  far  removed  from  earthbound 
rrality.hesanplymustbeonadil- 
fwent  planet  Whie  Ms  planet  has 
apparendyalreadyexpioiledlheto- 
lamettoismannunpotanttaLde- 
velDpets  sGI  here  on  planet  Earth 
are  stoigt^  to  gel  Windows  ap* 
picakons  to  talk  to  Una  servers. 
MItoVtefta 

Lead  systems  en^neer. 

AIC  American  GeneroL 
Neptune,  NJL, 
mtchael_waas(SiaigQg.rom 

NKHOUSS.  CAM  does  indeed 
have  a  point  to  toai  IT  technol¬ 
ogy  has  become  something  any 
company  can  own  at  toe  same  level 
as  its  competitors.  The  only  advan¬ 
tages  to  cximpuiers  now  are  simpiy 
toautornettogtosler.organizingm- 
torrnabon  belM.  trarsnMng  a  eas¬ 
ier  and  dong  i  al  for  less  then  your 
campetiton  Stt.  technology  as  a 
whole  wi  leep  evoMng.  New  tech¬ 
nology  wi  appeer.  Bs  the  Wab  did 
to  toe  90s.  These  new  tednotogies 
wi  create  tentoorary  bamws  toil 
w9  alow  shorl-ttrm  skategc  ad¬ 
vantages.  IT  wi  also  hove  a  branch 
that  wi  become  toe 'bird  dogs' of 
technology  to  help  scout  out  these 
newavenues. 

Just  as  economsts  attempt  to 
determine  ttoanoal  advartiages  tor 
comperns.  FT  wi  do  toe  same  with 
technologies.  As  revDiuliorHry  as  FT 
has  been  for  <Me  a  ttMe.  i  wi  be 
the  leaping-off  poM  for  even  more 


wondrDustechnafogy.iuetasalec- 
tnoty  MS  toe  wonder  technology 
that  eventually  led  to  oompkets 
John  E.  Cohnbui 

Owner.  Colunilms  Consulturg 
Group.  New  Hope.  Minn. 

A  MBI  to  FteiCB  Keefe's  rebuBal 
toNkhatasGCwTnTOQes 
Matter.’ OurdcLjnk  38296].  tea 
former  IT  tnanager  doing  CKHevei 
work  for  a  smal  company.  I  behave 
there  B  slN  plenty  of  room  lor  the 
straieipc  use  ol  technokigy.  The 
tooh  may  be  (XtovnocMized.  but  the 
majority  of  comparMi  lor  which 
those  took  wi  be  usefU  are  dN 
laarrang  how  to  lake  hold  and  rmhe 
use  of  them  Keefe  wes  nghi  on  the 
money. 

ShaniioA  HeloahMier 

TT  monqgenwnr  coosulronr. 
ComputerLand  of  Peoria. 
Peoria.  tlL  Shannooi^ 
computertandpeoriacom 

COAIPUTEItWOiLO  welcomes 
cotnnenls  from  is  readers.  Letters 
wi  be  edded  for  breviy  and  danty. 
They  shodd  be  addressed  to  Jamte 
Ed^  tetters  edtor.  CompuisiwottdL 
PO  Boi  9T71.  SOO  Old  Cormecbcul 
Rato.  Framingham.  Mess.  01701. 

Fax  (506) 879-4643 
E-mai  MlarsicofflpiJlerworklcom. 
indude  an  address  and  phone  n«n- 
bar  for  tovnedreie  verfkcalm 

OfornareMersontoaaaanri 
fltwria(Ks.goto 

wwwAMeetonrertdxMhlliiian 


ROBUST  OBJECT  DATABAS 

E 

HIGH  PERFORMANCE  SQI 

MULTIDIMENSIONAL  ACCESS 


base, 
next  wave. 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cache,  the  post-relational  database. 

What  makes  Cache  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system,  Cache 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the  largest 
hospitals.  Cach^  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  -  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  million  users  in  .  *  «  . 

88  countries.  Cach^  is  llterS, stems/ 

available  for  Windows, 

OpenVMS,  Linux  and 
major  UNIX  platforms. 


CACHE 

Make  Applications  Faster 


Download  a  fiilfy^fijnctional  version  of  Cachi  or  request  it  on  CD  for  free  at  wvnw.lnterSvstems.comlbost-relational 
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SUMnOMO  MITSUI 
BANKINO  CORP. 

turns  to  an  online 
process  to  comply 
with  requirements 
of  the  USA  Patriot 
Act.  Page  26 


I  Carol  Ut.in  oi  NYU'b  Otiici-  ol  Libraf 


NEW  YORK 
UNIVERSITY 

expands  its  digital 
library  to  include 
electronic  journals, 
sound  and  moving 
images.  Page  27 


The  advances  made  by  IT  are 
enabling  other  professions  to  push 
the  envelope  -  arming  scientists 
with  supercomputers  to  model 
disaster  cleanups,  and  surgeons 
with  3-D  imaging  to  locate  and 
remove  tumors.  Read  how  this 
year's  Computerworld  Honors 
finalists  are  helping  to  shape 
society's  future  through  technology. 
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APEEJAY 

SURRENDRA  GROUP 

is  using  IT  to  support 
Oxford  Bookstore’s 
growth  6x)m  a  sii^e 
shop  to  a  nationwide 
reu^  chain.  Page  29 
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UNIVERSITY  OF  MANCHESTER 

Doctors  Bring  3-D 
Imaging  Into  the 
Operating  Room 

•V  EUOENC  A.  DEMAITRE 

H£  HAS  A  loYSTicK  in  ooc  hand 
and  his  eyes  are  glued  to  a  screen, 
but  this  surgeon  isn’t  playing  a 
video  game.  He's  in  an  operating 
room,  rehearsing  an  incision  by 
looking  at  a  projection  of  3>D 
images  of  a  patient's  internal 
organs.  He  can  rotate  and  move 
among  ‘‘slices,’’  studying  fme 
anatomical  details  before  his  real 


.  attempt  to  remove  a  tumor. 

Researchers  at  the  University  (rf* 
Maitcbester  have  developed  a  3-D 
display  of  imaging  data  sets  that 
doctors  can  navigate  during  oper¬ 
ations.  Until  now,  surgeons  have 
largely  relied  on  2-D  images  ^m 
computerized  tomography  (CT) 
scans  to  show  the  locations  of  or¬ 
gans  and  tumors. 

Current  CT  scarmers  produce 
400  to  2,000  cross-sectional  «mag»» 
slices,  but  only  about  one-tenth  of 
them  are  typically  used,  says  Dt. 
Rory  McCloy,  lead  surgeon  of  the 
3-D  Volume  Visualization  in  the 
Operating  Room  project,  also 
known  as  Op3D. 

Althou^  many  radiology  de¬ 
partments  have  already  been  us¬ 
ing  3-D  image  reconstruction  at 

Continued  on  poge  26 


their  worlcstatioos,  ooe  iinpettis 
of  the  Op3D  project  was  gening 
those  scans  to  "the  sharp  end"  — 
the  operating  room  —  where  they 
could  be  bener  used.  McCloy  says. 

The  computii^  power  of  a  con¬ 
ventional  desktop  PC  or  a  physi¬ 
cian’s  laptop  wouldn’t  be  suffi¬ 
cient  for  such  a  task,  says  Nigel 
John,  head  of  the  Manchester 
Visualization  Centre  at  the  uni¬ 
versity.  The  Manchester,  Eng¬ 
land-based  center  has  developed 
a  custom  application  using  the 
OpenGL  Volumizer  application 
prt^ramming  interface.  It  takes 
graphical  data  from  the  Manches¬ 
ter  Royal  Infirmary’s  Onyx  300 
Silicon  Graphics  Inc.  server  and 
allows  for  volume-rendering 
segmentation  in  real  time,  he 
explains. 

“We  had  the  power  at  the  uni¬ 
versity,  but  [McCloy]  needed  the 
data  distributed  across  the  net¬ 
work."  John  says.  For  that,  Op3D 
uses  Manchester  University’s  1GB 
backbone,  which  has  a  100Base-T 
Ethernet  link  to  the  surgical  the¬ 
ater,  he  says.  Mountain  View. 
Calif-based  SGI’s  OpenGL  Viz- 
server  system  is  used  to  distribute 
data  across  the  network. 

There  is  a  trade-off  between 
image  quality  and  speed,  but  *>ve 
wanted  both  and  required  the 
hi^est-quality  image  possible." 
says  }oha  The  slices,  i^ch  an 
XVGA  data  projector  displays  on 
an  (grating  room  waU.  can  rotate 
at  more  than  10  frames  per  second, 
depending  on  network  traffic. 

“There’s  a  big  “wow’  factor 
when  I  show  the  resolution  and 
mobility  [of  these  images]  to  X-ray 
doctors."  says  McOoy. 


“All  3-D  images  must  have  an  in¬ 
terface  that  does  not  require  I^>o- 
rious  image  editii^  and  that  is  real 
time  in  its  performance,  or  it  will 
be  rejected  as  a  hindrance  to  work- 
flow,"  says  Dr.  Leo  Lawler,  an  as¬ 
sistant  professor  at  Johns  Hopkins 
University  in  Baltimore. 

Navigating  Tiger  Coui^' 

To  move  through  and  among  im¬ 
ages,  McCloy  uses  an  ingenious 
solution:  an  off-the-shelf  gaming 
joystick  wrapped  in  a  sterile  bag. 

“A  surgeon  can  change  modes, 
zoom  in  with  a  sin^e  click.  The  in¬ 
terface  is  quite  intuitive  and  was 
designed  to  be  simple  for  surgeons 
to  use,"  says  McCloy,  who  has 
trained  surgical  residents  to  use  it. 
He  has  applied  the  Op3D  system 
to  surgery  involving  the  liver  and 
pancreas,  udiich  he  says  are  "right 
in  the  middle  of  what  we  call  ‘tiger 
country’  —  in  the  middle  of  the 
body,  surrounded  by  arteries, 
veins  and  vital  plumbing." 

Since  the  project  began  in  April 
2002,  Op30  has  been  used  with 
about  15  patients.  Through  this 
technique,  McCloy  has  observed 
tumors  that  are  inoperable,  mean¬ 
ing  that  their  removal  would  not 
improve  a  patient’s  chances  of 
survival. 

“We  didn’t  appreciate  the  na¬ 
ture  of  inoperable  tumors  before 
with  2-D  scans."  he  explains. 
“Surgeons  normally  have  got  to  go 
in  to  find  the  context  of  a  liver  tu¬ 
mor.  but  now  they  can  check  the 
image  to  avoid  cutting  into  the  tu¬ 
mor  and  spreading  cancer." 

“The  question  is  no  longer  vrtiy 
do  3-D  reconstructions,  but  rather, 
why  not,”  says  Lawler.  I 


SUMITOMO  MITSUI  BANKING  CORP 

Bank  Uses 

Online  Workflow 

To  Comply  With 
USA  Patriot  Ad 


'  eV  ^ATKICK  THieODCAU 

THE  USA  PATRIOT  ACT.  an  anti- 
terrorism  law  enacted  in  2001, 
gives  the  government  the  power 
to  demand  more  information 
from  financial  services  firms 
about  their  customers  and  to  re¬ 
quire  that  it  be  produced  quickly 
for  investigators. 

’The  taw  asks  for  a  lot.  but  it 
didn’t  rattle  Pete  McCormick.  CIO 
at  Sumitomo  Mhsui  Ranking  Corp. 
in  New  York. 

First,  there  was  no  choice  but 
to  comply.  The  government  regu¬ 
lates  financial  services  Arms,  and 
meeting  federal  law  isn’t  optional. 
Moreover,  McCormick,  who  works 
only  a  few  miles  from  Ground 
Zero,  says  be  had  that  nearby  re¬ 
minder  of  the  need  to  stomp  out 
terrorism. 

Second,  if  done  right,  compli¬ 
ance  wouldn't  necessarily  be  a  big 
burden.  TTie  bank  already  had 
many  of  the  pieces  in  place.  For 
example,  it  routinely  looked  for 
money-taunderii^  activities  and 
had  to  meet  federal  requirements 
to  keep  track  of  certain  assets.  The 
Patriot  Act  “isn’t  so  new  and  so 
scary."  McCormick  says. 

But  the  issue  McCormick  faced 
was  how  to  improve  those  proc¬ 
esses,  scale  them  to  reach  through¬ 
out  the  company  and  turn  these 
monitorij^  capabilities  into  “a 
more  seamless  inanifestation“  of 
existing  ^ilities,  he  says. 

Instead  of  building  a  new  system, 
the  bank  wanted  to  leverage  exist¬ 
ing  technologies  and  functions.  It 
turned  to  an  online  process  that 
used  a  browser  front  end,  middle¬ 
ware  and  workflow  engines  devel¬ 
oped  by  Sybase  Inc.  in  Dublin, 

CaUf.  to  automate  these  processes 
and  speed  access  to  information. 

A  key  requirement  was  speed. 
The  Patriot  Act  requires  financial 
services  Arms  to  respond  to  sub¬ 
poenas  in  Ave  days  or  less;  nor¬ 
mally,  it  could  take  weeks  to  as¬ 
semble  the  data. 


www.computerworkl. 
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llse  law  also  requires  the  bank 


to  check  government  lists  of  sus 


picious  persons  against  its  own 


customer  records. 


“If  [banks]  are  going  to  invest  in 


this  system  and  have  a  more  com 


plete  view  of  their  customers. 


they  might  as  well  levei^e  this,” 


says  Jessica  Goepfert,  an  analyst  at 


IDC  in  Framingham,  Mass. 


That’s  just  idiat  Sumitomo  Mi 
tsui  did.  The  woridlow  and  im¬ 
proved  analysis  capabilities  will 
be  used  in  other  bank  processes 
apart  from  compliance  and  will 
enhance  the  bank’s  ability  to  know 
its  customers. 

“All  the  technology  was  there; 
everyone  was  using  it  I  think  [the 
law]  created  a  catharsis,”  says  Mc¬ 
Cormick.  I 


Scholars  Archive 


Artifacts  in 


A  Multimedia 


Digital  Library 

BV  THOMAS  HOPPMAN 

COLLEGES  AND  UNIVERSITIES  have 
been  digitizing  their  libraries  for 
the  past  10  years  to  help  capture, 
store  and  preserve  different  types 
of  analog  content  electronically. 

But  many  of  those  efforts  have 
focused  primarily  on  capturing 


text  or  still  im^es.  Over  the  past 
four  years,  librarians,  technolo¬ 
gists  and  scholars  at  New  Yoric 
University  have  pushed  hard  to 
expand  its  digital  library  to  in¬ 
clude  myriad  content  types  — 
from  electronic  journals  to  sound 
and  moving  images. 

“This  is  a  rapidly  changing  envi 
ronment,  and  we  need  to  look 
ahead  to  the  future.”  says  Carol 
Mandel,  dean  of  NYU’s  Office  of 
Libraries. 

For  Mandel  and  other  NYU  offf 
cials,  digital  content  can  take  all 
shapes  and  forms.  For  instance, 
the  university  has  an  extensive 
collection  of  materials  on  activism 
and  radical  politics  that  is  ac¬ 
cessed  by  people  from  all  over  the 
world,  says  Mandel  That  collec¬ 
tion  includes  political  pamphlets 
that  have  been  archived  to  NYU’s 
Web  site  in  digital  form  (www. 
rQni.edu). 

Meanwhile.  NYU's  School  of 
Medicine  is  developing  multi- 
media  modules  that  can  be  used  to 
teach  medical  students  how  to 
conduct  procedures  such  as  gall 
bladder  surgery. 

NYU  has  also  been  working 
on  preserving  unique  video  mate¬ 
rials,  such  as  the  hearings  and  vid 
eotaped  testimony  of  the  Women's 
International  War  Crimes  Tri¬ 
bunal  on  Japan's  Military  Sexual 
Slavery.  In  another  project  that 
was  speariieaded  by  a  professor  in 
NYU's  Middle  Eastern  Studies  de¬ 
partment.  the  university  was  able 
U>  electronically  archive  rare  and 
often  fragile  historical  documents 
that  were  discovered  in  Afghan¬ 
istan  following  the  U.S.  military 
invasion  in  2001. 

Tlie  university  uses  a  highly  in¬ 
tegrated  set  of  technologies  to 
help  support  its  digital  library. 

The  core  platform  is  hosted  a 
Sun  Microsystems  Inc.  Enterprise 
15000  server,  t^ch  runs  on  So¬ 
laris  2.9  and  uses  Sun’s  StorEdge 
T3  disk  arrays  and  a  StorEdge 
L700  tape  library  system  for  back¬ 
up,  says  Jerome  McDonough, 
NYU's  digital  library  development 
team  leader.  NYU  also  uses  an 
Enterprise  3500  server  running 
Solaris  2.9,  which  it  uses  as  a 
research-and-developmem  and 
testing  platfoim. 

For  content  management,  NYU 
relies  on  a  mix  of  commercial  and 
homegrown  software,  including 
DigiTool  from  Ex  Libris  (USA) 

Continued  on  page  2S 
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their  workstations,  one  impetus 
of  the  Op3D  project  was  getting 
those  scans  to  “the  sharp  end"  — 
the  operating  room  —  where  they 
c<mld  be  better  used.  McCIoy  says. 

The  computing  power  of  a  con¬ 
ventional  desktop  PC  or  a  physi¬ 
cian’s  laptop  wouldn't  be  sulTi- 
cient  for  such  a  task,  says  Nigel 
John,  head  of  the  Manchester 
Visualization  Centre  at  the  uni¬ 
versity.  The  Manchester.  Eng¬ 
land-based  center  has  developed 
a  custom  application  using  the 
OpenGL  Volumizcr  application 
programming  interface.  It  takes 
graphical  data  from  the  Manches¬ 
ter  Royal  Infirmary’s  Ony.\  300 
Silicon  Graphics  Inc.  server  and 
allows  for  volume-rendering 
segmentation  in  real  time,  he 
explains. 

“We  had  the  power  at  the  uni¬ 
versity.  but  (McCloyl  needed  the 
data  distributed  across  the  net¬ 
work."  John  says.  For  that.  Op3D 
uses  Manchester  University's  1GB 
backbone,  which  has  a  100Base-T 
Ethernet  link  to  the  surgical  the¬ 
ater,  he  says.  Mountain  View. 
Calif.-based  SGI's  OpenGL  Viz- 
server  system  is  used  to  distribute 
data  across  the  network. 

There  is  a  tradc-olT  between 
image  quality  and  speed,  but  "we 
wanted  both  and  required  the 
highesi-quaiity  image  possible." 
says  John.  The  slices,  which  an 
XVGA  data  projector  display's  on 
an  operating  room  wall,  can  rotate 
at  more  than  10  frames  per  second, 
depending  on  network  traffic. 

"Tlicre’s  a  big  ‘wow'  factor 
when  I  show  the  resolution  and 
mobility  Jof  these  images]  to  X-ray 
doctors,"  says  McCloy. 


“All  3-D  images  must  have  an  in¬ 
terface  that  does  not  require  labo¬ 
rious  image  editing  and  that  is  real 
time  in  its  performance,  or  it  will 
be  rejected  as  a  hindrance  to  work¬ 
flow."  says  Dr.  Leo  Lawler,  an  as¬ 
sistant  professor  at  Johns  Hopkins 
University  in  Baltimore. 

Navigating  ‘Tiger  Country' 

To  move  through  and  among  im¬ 
ages.  McCloy  uses  an  ingenious 
solution:  an  off-the-shelf  gaming 
joystick  wrapped  in  a  sterile  bag. 

“A  surgeon  can  change  modes. 
ztKim  in  with  a  single  click.  The  in¬ 
terface  is  quite  intuitive  and  was 
designed  to  be  simple  for  surgeons 
to  use."  says  McCloy.  who  has 
trained  surgical  residents  to  use  it. 
He  has  applied  the  Op3D  system 
to  surgery  involving  the  liver  and 
pancreas,  which  he  says  arc  "right 
in  the  middle  of  what  we  call  'tiger 
country'  —  in  the  middle  of  the 
body,  surrounded  by  arteries, 
veins  and  vital  plumbing." 

Since  the  project  began  in  April 
2002,  Op3D  has  been  used  with 
about  15  patients.  Through  this 
technique,  McCloy  has  observed 
tumors  that  are  inoperable,  moan¬ 
ing  that  their  removal  would  not 
improve  a  patient's  chances  of 
survival. 

"We  didn’t  appreciate  the  na¬ 
ture  of  inoperable  tumors  before 
with  2-D  scans."  he  explains. 
"Surgeons  normally  have  got  to  go 
in  to  find  the  context  of  a  liver  tu¬ 
mor.  but  now  they  can  check  the 
image  to  avoid  cutting  into  the  ru¬ 
mor  and  spreading  cancer.” 

“TTie  question  is  no  longer  why 
do  3-D  reconstructions,  but  rather, 
why  not.”  says  Lawler.  I 


Bank  Uses 

Online  Workflow 

To  Comply  With 
USAF^triotAct 

ev  PATRICK  THIBODEAU 

THi  USA  PATRIOT  ACT.  an  anti- 
terrorism  law  enacted  in  2001. 
gives  the  government  the  power 
to  demand  more  information 
from  financial  services  firms 
about  their  customers  and  to  re¬ 
quire  that  it  be  produced  quickly 
for  investigators. 

The  law  asks  for  a  lot.  but  it 
didn’t  rattle  Pete  McCormick.  CIO 
at  Sumitomo  Mitsui  Banking  Corp. 
in  New  York. 

First,  there  wa.s  no  choice  but 
to  comply.  The  government  regu¬ 
lates  financial  services  firms,  and 
meeting  federal  law  isn't  optional. 
Moreover.  McCormick,  who  works 
only  3  few  miles  from  Ground 
Zero,  says  he  had  that  nearby  re¬ 
minder  of  the  need  to  stomp  out 
terrorism. 

Second,  if  done  right.  ciTmpli- 
ance  wouldn't  necessarily  be  a  big 
burden.  The  bank  already  had 
many  of  the  pieces  in  place.  For 
e.xample.  it  routinely  looked  for 
money-bundering  activities  and 
had  to  meet  federal  requirements 
to  keep  track  of  certain  assets.  The 
Patriot  Act  "isn't  so  new  and  so 
scary,"  McCormick  says. 

But  the  issue  McCormick  faced 
was  how  to  improve  those  proc¬ 
esses.  scale  them  to  reach  through¬ 
out  the  company  and  turn  these 
monitoring  capabilities  into  “a 
more  seamless  manifestation"  of 
existing  abilities,  he  says. 

Instead  of  building  a  new  system, 
the  bank  wanted  to  leverage  exist¬ 
ing  tcHrhnologies  and  functions.  It 
turned  to  an  online  process  that 
used  a  browser  front  end,  middle¬ 
ware  and  workflow  engines  devel¬ 
oped  by  Sybase  Inc.  in  Dublin. 

Calif.,  to  automate  these  processes 
and  speed  access  to  information. 

A  key  rcquia*ment  was  speed. 
The  Patriot  Act  requires  financial 
services  firms  to  respond  to  sub¬ 
poenas  in  five  days  or  less:  nor¬ 
mally.  it  could  lake  weeks  to  as¬ 
semble  the  data. 
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Hie  Knowledge  lliai  can  t>e  gamed  Ihfough  digilai  coment  i-.  wJ;ji  i-iciie$  me  uiyi  Carol 
Mandel,  dean  of  New  YorK  University's  Office  of  Libraries. 


The  iaw  also  requires  the  bank 
to  check  government  lists  of  sus¬ 
picious  persons  against  its  orvn 
customer  records. 

"If  [banks]  are  going  to  invest  in 
this  system  and  have  a  more  com¬ 
plete  view  of  their  customers, 
they  might  as  well  leverage  this." 
says  Jessica  Goepfert.  an  analyst  at 
IDC  in  Framingham.  Mass. 

That's  just  what  Sumitomo  Mi¬ 
tsui  did.  The  workflow  and  im¬ 
proved  analysis  capabilities  will 
be  used  in  other  bank  processes 
apart  from  compliance  and  will 
enhance  the  bank’s  ability  to  know 
its  customers. 

"All  the  technology  was  there; 
everyone  was  using  it.  I  think  [the 
law]  created  a  catharsis."  says  Mc¬ 
Cormick.  I 


Scholars  Archive 
Artif^in 
A  Multimedia 
Digital  Library 


COLLEGES  AND  UNIVERSITIES  have 
been  digitizing  their  libraries  for 
the  past  10  years  to  help  capture, 
store  and  preser\'e  different  types 
of  analog  content  electronically. 

But  many  of  those  efforts  have 
focused  primarily  on  capturing 


text  or  still  images.  Over  the  past 
four  years,  librarians,  technolo¬ 
gists  and  scholars  at  New  York 
University  have  pushed  hard  to 
expand  its  digital  library  to  in¬ 
clude  myriad  ctmtent  type.s  — 
from  electronic  journals  to  sound 
I  and  moving  images. 

'  "This  is  a  rapidly  changing  envi- 
^  ronment.  and  wc  need  to  look 
1  ahead  to  the  future."  says  Carol 
I  Mandel.  dean  of  NYU’s  Office  of 
[  Libraries. 

j  For  Mandel  and  other  NYU  offl- 
'  cials.  digital  content  can  take  all 
I  shapies  and  forms.  For  instance, 

I  the  university  has  an  extensive 
I  collection  of  materials  on  activism 
'  and  radical  politics  that  is  ac- 
!  cessed  by  people  fn>m  all  over  the 
1  world,  says  Mandel.  That  collec¬ 
tion  includes  political  pamphlets 
that  have  been  archived  to  NYU^s 
j  Web  site  in  digital  form  (wvvw. 

I  nyu.edu). 

!  Meanwhile,  NYU’s  School  of 
Medicine  is  developing  multi- 
media  modules  that  can  be  used  to 
teach  medical  students  how  to 
conduct  procedures  such  as  gall 
bladder  sui^er\-. 

NYU  has  also  been  working 
on  preserv  ing  unique  video  mate¬ 
rials.  such  as  the  hearings  and  vid- 
'  eotaped  testimony  of  the  Women’s 
International  War  Crimes  Tri- 
I  buna!  on  Japan’s  Military  Sexual 
Slaverv'.  In  another  project  that 
was  spearheaded  by  a  professor  in 
I  NYU’s  Middle  Eastern  Studies  de- 
I  partmeni,  the  university  was  able 
i  to  electronically  archive  rare  and 
often  fragile  historical  documents 
that  were  discovered  in  Afghan¬ 
istan  following  the  US.  militarv’ 
invasion  in  2001. 

I  The  university  uses  a  highly  in¬ 
tegrated  set  of  technologies  to 
help  support  its  digital  library. 

The  core  platform  is  hosted  by  a 
Sun  Microsystems  Inc.  Enterprise 
15000  server,  which  runs  on  So¬ 
laris  2.9  and  uses  Sun’s  StorEdge 
T3  disk  arrays  and  a  StorEdge 
L700  tape  library  system  for  back¬ 
up.  says  Jerome  McDonough. 

I  NYU’s  digital  library  development 
team  leader.  NYU  also  uses  an 
Enterprise  3500  server  running 
Solaris  2.9.  which  it  uses  as  a 
research-and-development  and 
testing  platform. 

For  content  management.  NYU 
relies  on  a  mix  of  commercial  and 
homegrown  software,  including 
DigiTool  from  Ex  Libris  (USA) 

Continued  on  page  28 
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Inc.,  a  library  software  maker  in 
Chicaga  Tbe  university  also 
draws  on  a  homegrown  database 
system  for  metadata  capture  dur* 
ing  digitization  that  it  affection¬ 
ately  calls  “Zero.’*  named  for  the 
library  computer  in  the  original 
Kollerba/I  film,  says  McDonough. 
Tbe  system  is  built  on  top  of 
Oracle9i  and  uses  a  Web-based 
firont  end.  written  primarily  in 
Peri,  that  allows  users  to  input 
descriptive  administrative  and 
structural  metadata  for  objects, 
he  adds. 

One  of  the  biggest  challenges 
NYU  has  &ced  throughout  the  ex¬ 
pansion  of  its  digital  library  has 
been  maintaining  sufficient  stor¬ 
age  capacity,  says  Mandel.  For  in¬ 
stance,  one  hour  of  high-quality 
video  can  require  120GB  of  stor¬ 
age.  A  sii^e  video  collection  — 
such  as  NYU’s  compilation  of 
artists  in  downtown  New  York  — 
can  include  up  to  500  hours  of 
video  footage,  requiring  60TB  of 
storage.  Mandel  credits  the  rela¬ 
tionship  NYU  has  formed  with 
Sun  in  helping  it  work  through  its 
capacity  requirements. 

Beyond  that,  universities  such  as 
NYU  have  found  themselves  pit¬ 
ted  against  businesses  that  want  to 
charge  a  fee  for  digital  content. 
‘Sharing  content  for  scholarly 
purposes  is  what  we’re  all  about,” 
says  Mandel. 

But  these  challenges  haven’t 
dimmed  Mandel’s  vision  of  the  fu¬ 
ture.  The  knowledge  that  can  be 
gained  through  digital  content  is 
what  excites  me,”  she  says.  “Sud¬ 
denly.  scholars  have  access  to  his¬ 
tory  about  a  country  like  A^an- 
istan  that  historically  has  not  been 
well  understood.” 

That's  also  something  that  ex¬ 
cites  John  Parkinson,  chief  tech- 
nolc^t  for  the  Americas  at  Cap 
Gemini  Ernst  &  Young  in  Chicaga 
Althou^  Parkinson  didn’t  have 
previous  knowledge  of  NYU’s  ef¬ 
forts,  he  is  familiar  with  what  other 
universities,  such  as  Johns  Hop¬ 
kins  University  and  the  University 
of  Chicago,  have  been  doing  to 
make  extensive  use  of  digitized 
content 

‘This  opens  up  a  whole  new  set 
of  opportunities  for  researchers,” 
Paikinson  says.  Once  content  is  in 
digital  form,  he  adds,  scholars  can 
conduct  research  “on  patterns 
across  geographies  and  time  that 
would  be  very  difficult  to  do  using 
analog  documents.”  I 
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PACIFIC  NORTHWEST  NATIONAL  UB 

Scientists  to 
Test  Disaster 
Scenarios  With 
Supercomputer 


AS  POWERFUL  COMPUTERS  are 
harnessed  together  to  create  even 
more  powerful  supercomputers, 
scientists  continue  to  fmd  new 
ways  to  exploit  this  strength  by 


I  conducting  e^riments  they 
could  only  dr^un  about  in  the  past. 

At  the  Pacific  Northwest  Na¬ 
tional  Laboratory  in  Richland, 
Wash,,  a  massive  Linux  supercom¬ 
puter  that  will  be  completed  this 
month  will  be  used  to  help  model 
some  of  the  most  challenging  and 
dangerous  environmental  cleanup 
scenarios  in  the  world. 

Scott  Studharo,  technical  lead  of 
molecular  science  computing  fa¬ 
cility  operations  at  the  laboratory, 
which  is  part  of  the  U,S.  Depart¬ 
ment  of  Eneigy,  says  the  goal  was 
to  create  a  supercomputer  that 
would  allow  scientists  to  model 
disasters  that  wouldn’t  be  feasible 
to  test  in  real  life. 
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One  such  disaster  might  be  an 
accidental  spill  of  radioactive  ura¬ 
nium.  Studham  says.  Using  the 
new  supercomputer,  scientists 
will  be  able  to  model  a  wide  vari¬ 
ety  of  substances,  including  en¬ 
zymes,  in  their  search  for  materi¬ 
als  that  could  help  in  the  cleanup. 

That  would  be  an  example  [of 
testing]  that's  too  dangerous  or 
expensive  to  do  in  a  real  lab." 
^dham  says.  With  a  supercom¬ 
puter.  such  high-risk  experiments 
are  safe  because  the  testii^  is  tbe- 
oreticaL 

Using  a  powerful  custom  chem¬ 
istry  modeling  program  called 
NWChem,  the  lab's  researchers 
can  peruse  particles  to  search  for 
better  ways  of  cleaning  up  envi¬ 
ronmental  hazards.  *'We  can  solve 
problems  here  that  can't  be  solved 
anywhere  else,"  Studham  says. 

Other  programs  can  model  dif¬ 
ferent  types  of  envirorunental  dis¬ 
asters.  including  oil  spills.  The 
core  research  areas  for  the  ma¬ 
chine  are  chemistry,  subsurface 
modeling,  biology  modeling  and 
regional  climate  experimentation. 

When  completed,  the  machine 
will  include  1.900  Intel  IJ-GHz 
Itanium  2  processors  in  950  nodes, 
which  is  believed  to  be  the  largest 
Linux  cluster  in  the  world.  The  su¬ 
percomputer.  which  is  designed  to 
perform  U.7  trillion  floating-point 
operations  per  second,  will  cost 
S24.5  mllUon. 

Two  problems  had  to  be  sorted 
out  as  the  system  was  being  built 
One  was  figuring  out  how  to  malM* 
2S6TB  of  total  hard-disk  space 
across  the  950  nodes  appear  as  one 
seamless  storage  area.  This  was 
solved  by  using  and  tweaking  the 
Lustre  global  high-performance 
file  system  from  Cluster  File  Sys¬ 
tems  Inc.  in  Mountain  View,  Calif. 
Also  diCflcuIt  was  creatii^  an  air- 
conditioning  system  powerful 
enough  to  cool  the  massive,  hot- 
running  machine. 

Barton  Miller,  a  professor  in  the 
computer  sciences  department  at 
the  University  of  Wisconsin  > 
Madison,  says  this  kind  of  super¬ 
computer  is  just  what  scientists 
need  to  test  the  stability  of  stored 
nuclear  bombs,  for  example,  or 
drug  interactions  in  genetics  re¬ 
search.  be  says. 

They  can't  test  these  things  out 
in  a  meaningful  way  [in  a  lab],  so 
you  do  it  using  simulation."  Miller 
says.  "It's  changed  the  way  people 
do  research.”  I 
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Bookseller 
Expands  its  Reach 

Withintegprted 
Internet  Platform 


aV  JAIKUMAa  VIJAVAM 

Since  it  first  opened  its  doors  in 
1920,  Oxford  Bookstore,  a  small 
bookshop  in  the  heart  of  Calcut¬ 
ta's  business  district,  has  been  a 
favorite  destination  for  book 
lovers.  And  while  the  store  had  al¬ 
ways  done  a  brisk  business,  for  80 
years  patrons  were  able  to  find 
their  literary  treasures  only  at  its 
sole  location  in  India. 

In  2000,  management  at  Apee- 
jay  Surrendra  Group  <—  an  indus¬ 
trial  conglomerate  that  now  owns 
Oxford  Bookstore  —  decided  to 
expand  the  business  to  reach  cus¬ 
tomers  in  other  major  Indian 
cities.  The  challenges  were  huge, 
says  Chief  Operating  Officer  San- 
jeev  Mehra. 

For  starters,  the  idea  of  a  chain 
store  for  book  retailing  was  some- 
vdiat  alien  in  a  country  where  na¬ 
tional  consumer  chains  are  stil]  a 
rarity.  The  communications  and 
logistics  infrastructure  was  poor, 
and  there  was  no  information 
available  on  the  book-purchasing 
habits  of  consumers  in  the  metro¬ 
politan  areas  of  India. 

"Chain-stem  retailing  had  just 
about  started  in  India  [in  2000],” 
Mehra  says.  As  a  result,  much 
of  the  infl^tructure  and  infor¬ 
mation  required  to  deliver  the 
economies  of  scale  that  retail 
chains  need  was  missing,  be  says. 
"At  that  time,  the  Internet  seemed 
to  be  the  best  bet"  to  address 


some  of  these  issues,  Mehra  says. 

As  it  began  its  expansion  into 
other  cities,  the  company  decided 
to  launch  an  integrated  Internet 
platform  that  would  tie  new  brick- 
and-mortar  shops  back  to  the 
mother  ship  in  Calcutta.  It  would 
also  open  up  an  online  presence 
for  the  bookseller,  says  NUoy 
Mukherjee.  the  project's  technical 
architect. 

In  that  sense.  Oxford's  initiative 
was  different  feom  those  of  com¬ 
panies  such  as  Amazon.com  Inc^ 
which  started  as  an  online  store, 
or  Barnes  &  Noble  Inc.,  which  al¬ 
ready  had  an  established  retail 
presence  when  it  launched  its  on¬ 
line  store,  Mehra  says. 

Three  years  into  the  effort,  the 
prefect  has  begim  to  pay  off.  Ox¬ 
ford  opened  new  retail  stores  in 
three  Indian  cities  and  recently 
launched  a  fourth  in  the  southern 
city  of  Bangalore.  Its  retail  Web 
site  was  one  of  the  first  in  the 
country  to  accept  credit  card 
payments. 

The  underlying  Internet  system 
that  has  driven  much  of  the  ex¬ 
pansion  was  built  by  Cognizant 
Technology  Solutions  Corp.,  a 
Teaneck.  N.J.-based  provider  of 
outsourced  services.  The  three- 
tier  architecture  features  Micro¬ 
soft  Corp.  servers  running  Active 
Server  l4ges  at  the  front  end,  ap¬ 
plication  servers  running  Internet 
Information  Server  software  in 
the  middle  tier  and  Orade  Corp. 
database  server  software  at  the 
back  end,  says  Mukherjee,  who 
worics  at  Cognizant. 

The  system  gives  Oxford  a  single, 
consolidated  view  of  its  online  and 
retail  store  operations  around  the 
country.  For  example,  the  company 
can  use  it  to  centndly  track  sales, 
consolidate  orders,  replenish  in¬ 
ventories,  study  purchase  trends 
and  forecast  sales  across  both  phys¬ 
ical  and  online  stores.  New  stores 
immediately  become  part  of  the 
netwoik  wl^  they  plug  in. 

The  integration  of  its  online  and 
physical  store  operations  has  yield¬ 
ed  other  benefits  as  well  For  in¬ 
stance.  Oxford  is  ab\e  to  serve  up 
personalized  service  at  its  retail 
stores  for  cusmmers  who  have  pur- 
chatsed  from  its  Web  site. 

"If  we  didn't  have  the  system,  it 
would  have  been  chaotic  to  set  up 
stores,"  Mehra  says,  adding  that 
this  approach  "has  allowed  us  to 
achieve  better  costs,  control,  secu¬ 
rity  and  audit"  I 
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Inc.,  a  library  software  maker  in 
Chicago.  The  university  also 
draws  on  a  homejtrown  database 
system  for  metadata  capture  dur-  "i 

in^  digitization  that  it  affection- 
ately  calls  “Zero."  named  for  the  ! 
librar>'  computer  in  the  original 
Rollerba/I  film,  says  McDonough  ;  '  "i 


built  on  top  of 


Oracle*)!  and  uses  a  Web-based 


front  end.  written  primarily 


descriptive  administrative  and 


structural  metadata  for  objects, 


One  of  the  biggest  challenges 


NYU  has  faced  throughout  the  ex 


pansion  of  its  digital  library  has 


been  maintaining  sufficient  stor 


age  capacity,  says  Mandei.  For  in 


stance,  one  hour  of  high-quality 


require  120GB  of  stor 


age.  A  single  video  collection 


such  as  NYU’s  compilation  of 


artists  m  downtown  New  York 


include  up  to  500  hours  of 


ideo  footage,  requiring  60TB  of 


storage.  Mandei  credits  the  rela 


tionship  NYU  has  formed  with 


Sun  in  helping  it  work  through  its 


capacity  requirements. 


Beyond  that,  universities  such 


NYU  have  found  themselves  pit 


ted  against  businesses  that  want  to 


charge  a  fee  for  digital  content. 


“Sharing  content  for  scholarly 


purposes  is  what  we're  all  about,' 


says  Mandei. 


But  these  challenges  haven’t 


dimmed  Mandel’s  vision  of  the  fu 


ture.  “The  knowledge  that  can  be 


gained  through  digital  content  is 


what  excites  me,"  she  says.  “Sud 


denly,  scholars  have  access  to  his 


tory  about  a  country  like  Afghan 


istan  that  historically  has  not  been 


well  understood.’ 


That’s  alsti  something  that  ex 


cites  John  Parkinson,  chief  tech 


nologist  for  the  Americas  at  Cap 


Gemini  Ernst  &  Young  m  Chicago. 
Although  Parkinson  didn’t  have 
previous  knowledge  of  NYU’s  ef¬ 
forts.  he  is  familiar  with  what  other 
universities,  such  as  Johns  Hop¬ 
kins  University  and  the  University 
of  Chicago,  have  been  doing  to 
make  extensive  use  of  digitized 
content. 

“This  opens  up  a  whole  new  set 
of  opportunities  for  researchers," 
Parkinson  says.  Once  content  is  in 
digital  form,  he  adds,  scholars  can 
conduct  research  “on  patterns 
across  geographies  and  time  that 
would  be  very  difficult  to  do  using 
analog  documents."  I 


'We  can  solve  piohlems  here  that  can'l  be  solved  anywhere  efee."  says  Scot!  Studhan 
lechnical  lead  of  molecular  science  computing  facility  operations  a)  Pacific  Northwest 


Scientists  to 
Test  Disaster 
Scenarios  With 
Supercomputer 


AS  I'OWERFUL  COMPUTERS  are 
harnessed  together  to  create  even 
more  powertul  supercomputers, 
scientists  continue  to  find  new 
ways  to  exploit  this  strength  by 


conducting  experiments  they 
could  only  dream  about  in  the  past. 
At  the  Pacific  Northwest  Na 


tional  Laboratory  in  Richland. 


Wash.,  a  massive  Linux  supercom 


puter  that  will  be  completed  this 


month  will  be  used  to  help  model 


some  of  the  most  challenging  and 
dangerous  environmental  cleanup 


Scott  Studham,  technical  lead  of 


molecular  science  computing  fa 


cility  operations  at  the  laboratory. 


hich  is  part  of  the  U.S.  Depart 


ment  of  Energy,  says  the  goal  was 


to  create  a  supercomputer  that 


ould  allow  scientists  to  model 


disasters  that  wouldn’t  be  feasible 


WWW  comoulefworld  com 


One  such  disaster  might  be  an 
accidental  spill  of  radioactive  ura¬ 
nium,  Studham  says.  Using  the 
new  supercomputer,  scientists 
will  be  able  to  model  a  wide  vari¬ 
ety  of  substances,  including  en¬ 
zymes.  in  their  search  for  materi¬ 
als  that  could  help  in  the  cleanup. 

■'That  would  be  an  e.vample  [of 
testing)  that’s  loo  dangerous  or 
expensive  to  do  in  a  real  lab." 
Studham  says.  With  a  supercom¬ 
puter,  such  high-risk  experiments 
are  safe  because  the  testing  is  the¬ 
oretical. 

Using  a  powerful  custom  chem¬ 
istry  modeling  program  called 
NWChem.  the  lab’s  researchers 
can  peruse  particles  to  search  for 
better  ways  of  cleaning  up  envi¬ 
ronmental  hazards.  "We  can  solve 
problems  here  that  can’t  be  solved 
an>'whero  else."  Studham  says. 

Other  programs  can  model  dif¬ 
ferent  types  of  environmental  dis¬ 
asters.  including  oil  spills.  The 
core  research  areas  for  the  ma¬ 
chine  arc  chemistry',  subsurface 
modeling,  biology  modeling  and 
regional  climate  experimentation. 

When  completed,  the  machine 
will  include  1,900  Intel  l.5-GHz 
Itanium  2  processors  in  950  nodes, 
which  is  believed  to  be  the  largest 
Linux  cluster  in  the  world.  The  su¬ 
percomputer,  which  is  designed  to 
perform  11.7  trillion  floating-point 
operations  per  second,  will  cost 
S24.5  million. 

Two  problems  had  to  be  sorted 
out  as  the  system  was  being  built. 
One  was  figuring  out  how  to  make 
256TB  of  total  hard-disk  space 
across  the  950  nodes  appear  as  one 
seamless  storage  area.  This  was 
solved  by  using  and  tweaking  the 
Lustre  global  high-performance 
file  system  from  Cluster  File  Sys¬ 
tems  Inc.  in  Mountain  View.  Calif. 
Also  difficuit  was  creating  an  air- 
conditioning  sx'stem  powerful 
enough  to  coo!  the  massive,  hot- 
running  machine. 

Barton  Miller,  a  professor  in  the 
computer  sciences  department  at 
the  University  of  Wisconsin  - 
Madison,  says  this  kind  of  super¬ 
computer  is  just  what  scientists 
need  to  test  the  stabillt)'  of  stored 
nuclear  bombs,  for  e.xample.  or 
drug  interactions  in  genetics  re¬ 
search.  he  says. 

“They  can’t  test  these  things  out 
in  a  meaningful  %vay  [in  a  lab],  so 
you  do  it  using  simulation."  Miller 
says.  "It's  changed  the  way  people  | 
do  research.’*  •  i 
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Bookseller 
Expands  its  Reach 
With  Integrated 
Internet  Ratform 


Oitofd  Bookstore  project  leadefs.  COO 
Santeev  Mehia  (kflj  and  CEO  Priti  Paul 


av  JAIKUMAR  VIJAVAN 

Since  it  first  opened  its  doors  in 
1920,  Oxford  Bookstore,  a  small 
bookshop  in  the  heart  of  Calcut¬ 
ta’s  business  district,  has  been  a 
favorite  destination  for  book 
lovers.  And  while  the  store  had  al¬ 
ways  done  a  brisk  business,  for  80 
years  patrons  were  able  to  find 
their  literary’  treasures  only  at  its  i 
sole  location  in  India. 

In  2000.  management  at  Apee- 
jay  Surrendra  Group  —  an  indus¬ 
trial  conglomerate  that  now  owns 
Oxford  Bookstore  —  decided  to 
expand  the  business  to  reach  cus¬ 
tomers  in  other  maior  Indian 
cities.  The  challenges  were  huge, 
says  Chief  Operating  Officer  San- 
|eev  Mehra. 

For  starters,  the  idea  of  a  chain 
store  for  book  retailing  was  some¬ 
what  alien  in  a  country  where  na¬ 
tional  consumer  chains  are  still  a 
rarity.  The  communications  and 
logistics  infrastructure  w^  poor, 
and  there  was  no  information 
available  on  the  book-purchasing 
habits  of  consumers  in  the  meiri>-  j 
poUtan  areas  of  India. 

"Chain-store  retailing  had  just 
about  started  in  India  [in  2000)," 
Mehra  sa)'s.  As  a  result,  much 
of  the  infrastructure  and  infor¬ 
mation  required  to  deliver  the 
economies  of  scale  that  retail 
chains  need  was  missing,  he  says. 

“At  that  time,  the  Internet  seemed 
to  be  the  best  bet"  to  address 


some  of  these  issues.  Mehra  says. 

As  it  began  its  expansion  into 
other  cities,  the  company  decided 
to  launch  an  integrated  Internet 
platform  that  would  tie  new  brick- 
and-mortar  shops  back  to  the 
mother  ship  in  Calcutta  It  would 
also  open  up  an  online  presence 
for  the  biKtkseller.  says  Niloy 
Mukheriee,  the  pn»ject’s  technic.il 
architect. 

In  that  sense.  Oxford’s  initiative 
was  different  from  those  of  com¬ 
panies  such  as  Atnaion.com  Inc.. 
which  started  as  an  online  store, 
or  Barnes  &  Noble  Inc.,  which  al¬ 
ready  had  an  established  retail 
presence  when  it  launched  its  on¬ 
line  store.  Mehra  says. 

Three  years  into  the  effort,  the 
project  has  begun  to  pay  off.  Ox¬ 
ford  opened  new  retail  store's  in 
three  Indian  cities  and  recenlly 
launched  a  fourth  in  the  southern 
city  of  Bangalore.  Its  retail  Web 
site  was  one  of  the  first  in  the 
countiy  to  accept  credit  card 
payments. 

The  underlying  Internet  system 
that  has  driven  much  of  the  ex¬ 
pansion  was  built  by  Cognizant 
Technologx'  Solutions  Corp.,  a 
Teaneck.  N.J.-based  provider  of 
outsourced  services.  TTic  three- 
tier  architecture  features  Micri>- 
soft  Corp.  servers  running  Active 
Server  Pages  at  the  front  end.  ap¬ 
plication  serx'ers  running  Internet 
Information  Server  software  in 
the  middle  tier  and  Oracle  Corp. 
database  ser\’er  stiftwarc  at  the 
back  end.  s3>s  Mukherjee.  who 
w’orks  at  Cognizant. 

The  si’stero  gives  Oxford  a  single, 
consolidated  view  of  its  online  and 
retail  store  operations  around  the 
countiy.  For  example,  the  company 
can  use  it  to  centrally  track  sales, 
consolidate  orders,  replenish  in¬ 
ventories.  study  purchase  trends 
and  forecast  sales  across  both  ph>"s- 
ical  and  online  stores.  New  stores 
immediately  become  pan  of  the 
network  when  they  plug  in. 

The  integration  of  its  online  and 
ph>'sical  store  operations  has  jield- 
ed  other  benefits  as  well.  For  in¬ 
stance.  Oxford  is  able  to  scrv’c  up 
personalized  service  ai  its  a*tail 
stores  for  custtimcrs  who  have  pur¬ 
chased  from  its  Web  site. 

"If  wc  didn’t  have  the  system,  it 
wt>uld  have  been  chaotic  to  set  up 
stores."  Mehra  says,  adding  that 
this  approach  "has  allowed  us  to 
achieve  belter  costs,  control,  secu¬ 
rity  and  audit."  fe 
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SECURITY  MANASER-S  JOURNAL 

Sbigle  Sign-on  Stalls  8$ 

Kazaa  0^  tho  Boot 

A  directory  int^ratioo  proiect  trips  over  nu¬ 
meric  user  names,  but  Mathias  Thurman  moves 
forward  in  blocking  the  use  of  file-swapping 
programs  on  the  corporate  network.  96 


OPINION 

Road  to  IT  Renaissance 

Cohimnist  Paul  A.  Sirassmann 
says  that  Web  services  will 
change  both  IT  and  the  power 
structure  within  organizations. 

Page  38 


QUOTE  OF  THE  WEEK 

M  We've  had  tapes  that  were  in  the 
bottom  of  a  Dumpster  swimnting 
m  Dumpster  juice.  That  was  gross,  but 
K  was  a  good  recovery.” 

•  Dw  Oardmr,  vie*  piiiMaiit  at  dawiopinant. 
Raom  Data  CoriL 


PORTAL 

POWERS 

RESALES 

Asales  portal  integiatkinprojeri  at  GEPdw^ 
substantial^  KKaeased  produd^ 
sales  team  more  time  for  caRs.  By  G^KAnthes 


IT  WAS  SEPTEMBER  2001,  and  Jeff  Im- 
melt  had  Just  become  General  Electric 
Ca’s  new  chairman.  Hts  predecessor. 
Jack  Welch,  had  come  up  through  the 
engineering  ranks,  but  Immelt  was 

a  marketing  guy.  and  one  of  - 

his  first  actions  was  to  survey 
the  company's  sales  force.  He 
was  dismayed  to  find  that  mem¬ 
bers  of  the  sales  team  were 
spending  far  more  time  on 


deskbound  administrative  chores  than 
in  &ce-to-face  meetings  with  cus¬ 
tomers  and  prospects. 

“He  put  a  personal  challenge  before 
all  the  business  units,”  recalls  Venki 
Rao.  an  IT  leader  in  global  sales  and 
marketing  at  GE  Power  Systems,  an 


Atlanta-based  division  focused  on  en¬ 
ergy  systems  and  products.  “He  said 
we  needed  to  turn  that  around,  to 
spend  four  days  a  week  in  from  of 
the  CTistomer  and  one  day  for  all  the 
—  admin  stuff." 
nn  n  /A  GE  Power  hasn't  yet  reached 
iKUl  VJL  that  goal  but  it  is  making  prog- 
KpAljT  ^  ress,  thanks  to  a  new  sales  por¬ 
tal  that  went  live  in  April  last 
year.  The  portal  a  complex 


amalgam  of  products  that  pulls  infor¬ 
mation  from  multiple  data  sources, 
was  developed  in  just  six  months, 
thanks  in  part  to  its  high-level  spon¬ 
sorship  and  the  use  of  an  IT  project 
methodology  based  on  GE’s  Six  Sigma 
quality  program. 


GE  Power’s  salespeople  spent  much 
of  their  time  at  their  desks  becaiise 
they  had  to  go  to  many  sources  — 
some  manual  and  some  electronic, 
some  internal  and  some  external  —  for 
the  information  needed  to  sell  multi- 
million-doUar  turbines,  turbine  parts 
and  services  to  eitergy  companies 
woridwide.  Now.  Rao  says,  they  have  a 
“one-stop  shop”  for  just  about  every¬ 
thing  they  ne^. 

Various  existing  GE  databases,  pre¬ 
viously  unconnected,  are  the  primary 
data  feeds  into  the  portal,  providing 
everything  from  sales  tracking  and 
customer  data  to  parts  pricing  and  in¬ 
formation  on  planned  outages.  GE 
Power  also  added  external  data  such 
as  news  feeds. 

“I  have  the  sales  portal  as  my  home 
page,  and  I  use  h  as  the  gateway  to  all 
the  applications  that  I  have.”  says  BUi 
Sno(j(.  a  sales  manner  at  GE  Energy 
Services  in  Canada  and  one  of  2.500 
users  of  the  portal  “Before,  you  were 
randomly  searching  for  thin^.  fd  go 
to  a  site,  and  if  it  didn't  have  the  an¬ 
swer.  rd  go  to  another  site.”  Snook  says 
he  used  to  go  from  one  application  to 
another,  and  each  required  a  separate 
sign-on  and  password.  The  portal  has 
“made  multitasking  much  more  effi¬ 
cient”  and  has  increased  face  time  with 
customers,  be  says. 

The  heart  of  the  system  is  the  Java- 
based  Epicentric  Foundation  Server 
from  Vignette  Corp.  in  Austin.  This 
portal  software  gives  users  a  single 
unified  view  into  a  wide  variety  of  in¬ 
formation  sources  and  applications.  It 
dynamically  assembles  personalized 
“portlets,”  such  as  a  customized  view 
of  industry  news,  a  look  at  the  user’s 
own  customers  or  his  sates  perfor¬ 
mance  year-to-date,  and  presents 
them  in  a  unified  way  to  the  user's 
Web  browser. 

GE  Power  uses  BEA  WebLogic  Serv¬ 
er  from  BEA  Systems  Inc.  in  San  Jose 
for  the  front-end  Web  server  func¬ 
tions.  A  product  for  single  sign-on, 
SiteMinder  from  Netegrity  Inc.  in 
Waltham,  Mass^  gets  users  into  the 
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sales  ponal  and  to  multiple  applica¬ 
tions  behind  the  portal  using  just  one 
password.  At  the  bottom  of  the  three- 
tier  architecture  sit  various  Oracle 
Corp.  and  Siebel  Systems  Inc.  databas¬ 
es  running  on  mammoth  Sun  Micro¬ 
systems  Inc.  Solaris  servers  at  the 
company's  Cincinnati  data  center. 

The  sales  portal  sits  on  top  of  an  Or¬ 
acle  data  man  created  specihcally  for 
it  The  system  ptills  data  needed  in  real 
time,  such  as  updates  to  the  customer 
master  Hie.  into  the  mart  using  special 
‘‘adapters’'  created  with  the  Integration 
Platform  from  webMetbods  Inc.  in 
Fairfax.  Va. 

The  adapters  cotmect  to  a  variety  of 
applications  and  database  types.  GE 
Power  loads  data  updates  that  are 
needed  less  often,  such  as  turbine  in¬ 
stallations.  once  a  week  using  an  ex¬ 
tract.  transform  and  load  process. 

Passing  the  Tol  Gates 

GE  Power  i(^ed  off  the  project  in 
September  2001.  had  a  pilot  ponal  run¬ 
ning  by  lanuary  2002  and  had  the  pro¬ 
duction  system  up  three  months  later. 
Project  managers  say  much  of  that 
rapid  deployment  stemmed  from  the 
use  of  the  company’s  life-cycle  Project 
Mam^ment  Methodology  (PMM). 

PMM.  whkh  draws  on  the  principles 
of  OB'S  Six  Sigma  quality  practices  and 
prixuriples.  divides  the  development 
process  into  six  phases,  each  of  which 
ends  at  a  “toll  gate"  that  must  be 
passed  before  the  next  phase  begins. 

One  of  the  more  rigorous  steps  in 


the  PMM  is  the  evaluation  and  selec¬ 
tion  of  vendors. 

The  ponal  software  was  evaluated 
against  two  dozen  technology  criteria, 
says  lim  Young,  president  of  Infotech 
Consulting  Inc  in  Atlanta  and  a  former 
GE  Power  consultant  who  served  as 
one  of  the  project  managers  during  the 
development  process. 

The  most  imponant  criteria  were 
cost,  the  ability  to  run  the  ponal  on 
multiple  application  servers  and  oper¬ 
ating  systems,  and  ease  of  integration 
with  Verity  Inc.’s  search  engine,  with 
other  GE  applications,  with  tools  like 
webMethods'.  and  with  standards  such 
as  XML.  HTTP  and  SOAP. 

Epicentric  nosed  out  ponal  products 
hY>m  IBM,  Computer  Associates  Inter¬ 
national  Inc.,  Plumtree  Software  loc.. 
iPIaoet  (now  pan  of  Sun),  BEA  and  Or¬ 
acle.  Young  says.  It  was  chosen  largely 
for  its  ease  of  integration:  ability  to 
span  multiple,  heterogeneous  databas¬ 
es;  and  ability  to  be  customized  by  end 
users,  he  says. 

“A  huge  criterion  for  GE  was  they 
wanted  the  power  in  the  hands  of 
users:  salespeople  and  management 
staff  Young  says.  "And  as  you  go 
across  the  enterprise,  you  want  to  go 
across  lots  of  different  products,  lots  of 
dilTerent  databases  and  not  have  to  go 
hack  to  IT." 

Youi^  says  GE  Power  experienced 
some  difficulties  because  it  was  under 
pressure  to  bring  up  the  portal  at  the 
same  time  that  other  important  pieces 
of  software,  including  the  Netegrity 


single-sign-on  software  and  the  Verity 
search  engine,  were  being  introduced 
at  the  company. 

For  example,  because  single  sign-on 
wasn’t  in  place  for  all  the  applications 
that  the  sales  portal  needed  to  touch, 
the  portal  had  to  check  user  permis¬ 
sions  by  going  directly  to  some  appli¬ 
cations  using  the  Lightweight  Directo¬ 
ry  Access  Protocol  (LDAP),  rather 
than  to  a  single  table  in  SiteMinder. 

Security  Issue 

“Because  Epicentric  could  go  to  either 
Netegrity  ISiteMinder]  or  LDAP,  it  pre¬ 
sented  a  small  security  issue  internally, 
but  there  was  no  other  way  to  do  it.” 
Young  says.  Nevertheless, 
he  says,  the  issue  was  re¬ 
solved  by  the  time  the 
portal  system  went  into 
production,  and  all  per¬ 
missions  are  now  verified 
via  the  authorization  table 
in  SiteMinder. 

The  hardest  part  of  the  project  was 
getting  past  the  first  two  Six  Sigma  toll 
gates:  project  defutition  and  cost-bene¬ 
fit  measurement.  Rao  says.  Defining 
requirements  was  toucdi  because  the 
sales  portal’s  primary  users  are  sales¬ 
people  scattered  around  the  world. 
Also,  the  system  was  intended  to  ad¬ 
dress  the  needs  of  disparate  sales 
groups  throughout  GE  Power. 

"Because  Power  Systems  has  nine 
different  businesses,  you  have  to  go 
and  sell  it  to  each  and  every  business 
leader."  Rao  says. 


The  project  team  used  a  kind  of 
rapid  prototyping  —  a  "launch-and- 
leam  process,"  as  Tom  Cerovski.  sales 
digitization  leader,  calls  it  —  to  focus 
and  win  the  minds  of  the  sales  force. 

“For  example,  we  say  we  are  going 
to  focus  on  cash  and  receivables,  and 
so  we  put  cash  and  receivables  metrics 
on  the  portal  and  start  getting  feed¬ 
back  immediately."  be  explains.  "If 
we  spent  a  month  putting  something 
rough  together,  about  three  months 
later  we’ll  have  it  fme-tuned  based  on 
the  feedback." 

Developers  also  put  portal  proto¬ 
types  on  PCs  in  the  common  areas  at 
the  company's  annual  sales  conference. 

Salespeople  could  take  a 
quick  look  and  then  type 
in  their  reactions  and 
suggestions,  Rao  says. 

The  open  architecture 
and  flexibility  of  the 
sales  portal  software 
make  it  especially  easy 
to  enhance  and  extend  it,  and  GE  Pow¬ 
er  plans  to  do  so.  Rao  says.  Over  time, 
his  group  plans  to  add  new  tables  and 
new  fields  to  existing  tables  the  portal 
accesses. 

For  example,  travel  and  living  ex¬ 
penses  could  be  automatically  loaded 
into  the  data  mart,  and  the  portal  could 
show  those  expenses  for  individual 
salespeople  or  roll  them  up  for  group 
or  regional  management  review.  Future 
custonuzations  could  even  include  ex¬ 
tranet  extensions  to  customers  and 
sales  channel  partners,  Yoimg  adds.  I 
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As  vice  president  of  de- 
wlopment  at  Renew 
Data  Corp..  an  electron¬ 
ic  evidence  and  data  re¬ 
covery  ser\'ices  provider 
in  Austin.  Dan  Gardner 
AA  ■  p/ayed  rht.' it’adin^  role 
tn  rhe  development  of 
the  company's  propri- 
efory  forensic  and  data 
recovery  software.  Gardner  recently 
spoke  with  Computcrworld's  Lucas 
Mcarian  aiwut  dara  recovery  besf  prac- 
(ices,  how’  Renew  Oafa  restores  lost  data 
and  how  admirjisrrarors  can  minimize 
(he  risk  of  data  loss. 

What  should  administrators  do  when  faced 
with  a  storage  media  failure?  Our  advice  is 
if  the  hard  dri\'e  is  making  a  noise  or  a 
tape  is  stopping,  don’t  try  to  fix  it  your¬ 
self.  Once  the  media  starts  to  fail,  it's  got 
a  prem-  limited  lifetime.  I  recommend 
pulling  the  plug.  Powering  down  can 
take  time  and  cause  tunher  damage. 

Don’t  be  hast>’  to  try  things  that  may 
cause  further  damage,  or  don’t  try 
things  that  may  cause  logical  damage 
or  data  loss.  It  doesn't  cost  a  nickel  to 
call  us  and  [ust  get  a  quick  assessment 
of  w  hether  or  not  there  is  a  data  recov¬ 
er)'  scenario  involved. 

What  can  rr  do  to  protect  against  the  most 
common  crises  of  data  loss?  One  point 
that  gets  overlooked  in  policies  and 
procedures  for  disaster  recover)’  is 
testing.  There’s  an  old  saying.  ’’One 
test  is  worth  a  thousand  opinions." 

WNch  types  of  problems  are  the  toughest  to 
remody?  By  far.  the  physical  damage. 
These  types  of  things  involve  taking  it 
into  a  clean  room  and  try  ii^  to  attempt 


a  repair  of  what’s  repairable  and  then 
attempting  to  read  what’s  readable.  It's 
very  labor-intensive  and  requires  the 
skill  of  someone  who  knows  what 
they’re  doing  in  order  to  manipulate 
the  hardware  into  a  readable  state. 

I  At  what  point  do  you  decide  that  data  is  un- 

I  recoverable?  Generally  spieaking.  we 
don't  give  up.  There’s  obviously  clear 
situations.  like  when  all  the  magnetic 
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substrate  is  scrapped  off  platters,  when 
it’s  obvious.  As  long  as  there’s  an  out¬ 
side  chance  of  getting  something,  we 
continue. 

What  other  types  of  media  can  you  recover? 

Things  like  flash  cards  from  the  digital 
cameras.  SmartMedia.  Memory  Sticks, 
[and]  all  forms  and  manner  of  remov¬ 
able  storage,  such  as  floppies,  optical 
drives.  Zip  drives.  Ditto  drives.  CD  and 
DVD  media. 

What  can  administrators  do  to  reduce  vul¬ 
nerability  to  media  failures?  Given  the  fact 
that  there  is  a  certain  failure  rate 
among  all  backup  media,  you  need  to 
audit  that  media.  Make  sure  it  works. 
Make  sure  you  backed  up  what  you 
think  you  backed  up.  Make  sure  you 
can  restore  what  you've  backed  up, 
We’ve  seen  backup  tapes  come  in  un¬ 
der  the  assumption  that  they’ve  backed 
somethir^  up  but  never  actually  did. 

That's  a  really  tough  thing  to  cell 
customers.  They  send  in  a  tape  for  data 
recovery  because  they  can’t  restore  a 
certain  file,  and  we  tell  them  we  can’t 
either  because  it  wasn’t  there  in  the 
first  place. 

H  forensic  evidence  needs  to  be  preserved, 
what  do  you  do  that  IT  can't  with  a  forensic 
disk-imaging  software  package?  That  re¬ 
volves  not  so  much  around  capability 
but  around  legal  conditions.  We  bring 
in  an  objective  third  party  if  we’re  talk¬ 
ing  about  evidence,  because  there’s  a 
real  credibility  issue  there.  There  are 
chain-of-custody  Issues  that  require 
someone  being  a  witness. 

From  a  technology  point  of  view. 
EnCase  is  the  standard  in  the  forensics 
area  and  therefore  it’s  used  by  invesii- 


How  to  Cut  Your 
Data  Losses 

Data  recovery  specialist  Dan  Gardner  offers  tips  on 
how  to  avoid  losing  data  and  what  ciin  be  done  when 
disasters  happen.  By  Lucas  Mearian 
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gators.  But  our  people  are  also  very  well 
trained  on  the  whole  chain-of-cusiody 
issue,  which  generally  IT  people  aren’t. 

What  were  some  of  your  more  unusual  suc¬ 
cesses?  We've  had  capes  that  were  in 
the  bottom  of  a  Dumpster  swimming 
in  Dumpster  juice.  That  was  gross,  but 
it  was  a  good  recovery. 

Some  of  the  most  challenging  recov¬ 
eries  we’ve  done  involved  proprietary 
systems,  like  GE’s  MRI  systems,  where 
from  a  computer  point  of  view,  it’s  not 
in  the  mainstream  [and]  there’s  a  pretty 
heft)’  amount  of  work  involved  in  deter¬ 
mining  how  to  get  data  off  the  media. 

How  quicMy  can  you  restore  my  data? 

There’s  a  number  of  possible  scenar¬ 
ios.  If  we’re  talking  about  single  hard 
drives,  first  we  have  to  assess  if  there’s 
anything  physically  wrong.  If  the  mag¬ 
netic  media  on  the  platter  has  been 
damaged  and  completely  scraped  off. 
that’s  an  unrecoverable  scenario. 

Generally,  it’s  one  day  for  the  initial 
process  of  reading  the  data,  and  then 
it’s  another  day  for  processing  the  data, 
and  then  it's  another  day  for  restora¬ 
tion  of  data  on  return  media. 

Whal’s  H  going  to  cost  me  to  get  my  date 
back?  The  most  common  scenario  is  a 
single  hard  drive.  Depending  on  the 
type  of  failure,  whether  it’s  a  logical 
failure  or  to  a  severe  physical  failure, 
it's  between  S300  and  S2.000. 1 


I  As  vice  president  of  de- 
vefopm«ru  at  Renew 
Data  Corp..  on  ^(ectron* 
ic  evidence  and  data  re¬ 
covery  services  provider 
in  Austin.  OenOardner 
fdayed  the  leading  role 
in  the  development  of 
the  company's  propri¬ 
etary  forensic  and  data 
recovery  st^hvore.  C^ner  recently 
spoke  with  Computerworld’s  Lucas 
Mearian  about  data  recovery  best  prac¬ 
tices,  how  Renew  Data  restores  lost  data 
and  how  adr?7mistratofs  can  minimize 
the  risk  of  data  loss. 

Whil  shoiM  aMnMnlon  do  vfhm  feK^ 
«Mh  a  rtoraga  madte  faiura?  Our  advice  is 
if  the  hard  drive  is  making  a  noise  or  a 
tape  is  stopping,  don't  try  to  fix  it  your¬ 
self  Once  the  media  starts  to  it*s  got 
a  pretty  limited  lifetime.  I  recommend 
puUif^  the  plug.  Powering  down  can 
take  time  and  cause  further  damage. 

Don't  be  hasty  to  try  things  that  may 
cause  further  damage,  or  don't  try 
thit^  that  may  cause  logical  damage 
or  data  loss.  It  doesn't  cost  a  nickel  to 
cal)  us  and  just  get  a  quick  assessment 
of  whether  or  twc  there  is  a  data  recov¬ 
ery  scenario  involved. 

Whil  can  IT  do  to  prolact  against  the  moct 
connon  eauaaa  of  data  leas?  One  point 
that  gets  overlooked  in  policies  and 
procedures  for  disaster  recovery  is 
testing.  There’s  an  old  saying.  "One 
test  is  worth  a  thousand  opinions." 
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a  repair  of  what’s  repairable  and  then 
attempting  to  read  what’s  readable.  It’s 
very  labor-intensive  and  requires  the 
skill  of  someone  who  knows  what 
they're  doing  in  order  to  manipulate 
the  hardware  into  a  readable  state. 

At  poM  do  you  docidt  ttnl  data  is  un- 
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don’t  give  up.  There's  obviously  clear 
situatioms,  like  when  all  the  magnetic 
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substrate  is  scrapped  off  platters,  when 
it’s  obvious.  As  long  as  there’s  an  out¬ 
side  chance  of  getting  something,  we 
continue. 

What  other  typos  of  modta  can  you  rocovor? 

Things  like  flash  cards  from  the  digital 
cameras,  SmartMedia,  Memory  Sticks, 
[and]  all  forms  and  manner  of  remov¬ 
able  storage,  such  as  floppies,  optical 
drives.  Zip  drives.  Ditto  drives.  CD  and 
DVD  media. 

¥fhit  can  admMstralors  do  to  reduce  wd- 
aanWRy  to  modte  fiAwaa?  Given  tb^  fact 
that  there  is  a  certain  faOure  rate 
among  all  backup  media,  you  need  to 
audit  that  media.  Make  sure  it  works. 
Make  sure  you  backed  up  what  you 
think  you  backed  up.  Make  sure  you 
can  restore  what  you've  backed  up. 
We've  seen  backup  tapes  come  in  un¬ 
der  the  assumption  that  they’ve  backed 
something  up  but  never  actually  did. 

Thai's  a  really  tou^  thing  to  tell 
customers.  They  send  in  a  tape  for  data 
recovery  because  they  can't  restore  a 
certain  file,  and  we  tell  them  we  can't 
either  because  it  wasn’t  there  in  the 
first  place. 

If  forensic  o^ddsnco  noods  to  bo  presorvodt 
wlisl  do  you  do  dud  IT  cant  wWi  a  foransie 
dhk  bulging  softiwre  pachags?  That  re¬ 
volves  not  so  much  around  capability 
but  around  legal  conditions.  We  bring 
in  an  objective  third  party  if  we're  talk¬ 
ing  about  evidence,  l^cause  there's  a 
real  credibility  issue  there.  There  are 
chain-of-custody  issues  that  require 
someone  being  a  witness. 

From  a  technol<^  point  of  view, 
EnCase  is  the  standard  in  the  forensics 
area  and  therefore  it's  used  by  investi- 
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how  to  avoid  losing  data  and  vdiat  can  be  done  when 
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gators.  But  our  people  are  also  very  well 
trained  on  the  whole  chain-of-custody 
issue,  which  generally  IT  people  aren’t 

What  wire  acnw  of  your  more  unuiuil  sue* 

cami?  We’ve  had  tapes  that  were  in 
the  bottom  of  a  Dumpster  swimming 
in  Dumpster  juice.  That  was  gross,  but 
it  was  a  good  recovery. 

Some  o(  the  most  challenging  recov¬ 
eries  we've  done  involved  proprietary 
systems,  like  GE's  MRI  systems,  where 
from  a  compniter  point  of  view,  it's  not 
in  the  mainstream  [and]  there's  a  pretty 
hefty  amount  of  work  involved  in  deter¬ 
mining  bow  to  get  data  off  the  tneHta. 

How  quiddy  can  you  restore  my  dtfa? 

There’s  a  number  of  possible  scenar¬ 
ios.  If  we're  talking  about  single  hard 
drives,  first  we  have  to  assess  if  there’s 
anything  physically  wrong.  If  the  mag¬ 
netic  media  on  the  platter  has  been 
damaged  and  completely  scraped  off. 
that’s  an  unrecoverable  scenario. 

Generally,  it's  one  day  for  the  initial 
process  of  reading  the  data,  and  then 
it's  another  day  for  processing  the  data, 
and  then  it's  another  day  for  restora¬ 
tion  of  data  on  return  media. 

What’s  M  going  to  coit  mo  to  gil  fliy  dda 
back?  The  most  common  scenario  is  a 
single  hard  drive.  Depending  on  the 
type  of  f^ure.  whether  it's  a  logical 
faUure  or  to  a  severe  physical  foiJure. 
it's  between  S300  and  $2,000. 1 
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Single  Sign-on  Stalls  as 
Kazaa  Gets  the  Boot 


Nunmric  user  names  derail  directory  integra¬ 
tion  work,  butanebmrfcre^^ 
blocldna  of  bandwidth-hogging  file-swapping 
prograins.  By  Mathias  Ihunnan 


SINCE  MY  ACTIVATION 
by  the  Air  Force  Re¬ 
serve.  rve  had  to  dedi¬ 
cate  almost  all  of  my 
rime  to  my  new  duties.  For 
now.  Tin  in  a  location  stateside 
that  has  Internet  access,  so  i 
can  tog  into  my  corporate 
LAN  to  check  e-inaiJ  and  ac¬ 
cess  server  resources.  I've  also 
been  able  to  dial  into  several 
meetings  on  projects 
chat  I've  been  manag¬ 
ing  or  that  Tm  con¬ 
tributing  to. 

One  such  project 
involves  creating  a 
centralized  authenti¬ 
cation  system  for  our 
Solaris  servers.  We're  having 
problems  with  Novell  eDirec- 
tory  and  its  ability  to  effective¬ 
ly  handle  authentication  re¬ 
quests  from  those  servers. 

Orre  of  the  issues  invoK'es 
user  names,  which  are  typical¬ 
ly  based  on  a  simple  naming 
convention  such  as  the 
letter  of  the  user's  first  name 
followed  by  his  last  name. 
However,  my  company's  hu¬ 
man  resources  department  de¬ 
cided  to  use  employee  num¬ 
bers  as  user  IDs  for  access  to 
the  PeopleSoft  system.  My 
team  uses  eDireaory  to  store 
those  numeric  user  names, 
and  we  want  to  use  the  same 
eDirectory  system  for  our 
Unix  authentication  so  em¬ 
ployees  have  single  sign-on 
access  to  any  resource.  Unfor¬ 
tunately.  it  appears  that  Solaris 
doesn't  like  user  names  made 
up  of  only  numbers.  I've  been 
mid  that  some  Solaris  authen¬ 
tication  modules  may  not 
work  with  such  names. 

Another  problem  involves 
our  RSA  SecurlD  servers, 
which  are  responsible  for  two- 


factor  token-based  authentica- 
tioa  We  configured  these  to 
recognize  standard  user 
names  that  conform  to  our 
network  log-ins. 

To  add  to  the  complexity, 
we  use  Windows  2000's  Ac¬ 
tive  Directory  to  store  net¬ 
work  l(^-in  credentials.  We 
use  these  credentials  to  log 
into  the  Microsoft  Exchange 
Server  e-mail  sys¬ 
tem  and  to  access 
Windows  fUe-server 
drive  shares.  The 
PeopleSoft  log-in  is 
for  access  to  HR  and 
payroll  services. 
We'U  probably 
configure  the  eDirectory  to 
have  two  user  name  attributes: 
one  for  PeopleSoff  and  the 
other  for  Unix  authentication. 

The  beauty  of  directory  ser¬ 
vices  is  that  the  rest  of  the  at¬ 
tributes.  such  as  the  user’s 
home  directory,  default  shell 
and  group,  can  remain  and  be 
correlated  to  the  Solaris  user 
identification  without  affect¬ 
ing  the  PeopleSoft  log-in. 

Another  issue  involves  So- 


We  couM  configure 
ourfirewaRsand 
routers  to  block 
access  to...  unau¬ 
thorized  applica¬ 
tions  and  VIM  sites. 
Iheprofaleniisthat 
ti^renotunautho- 
riM  for  everyone. 


laris  8  incompatibility  with 
eDirectory.  To  resolve  this 
problem,  we  were  planning  on 
using  either  Novell’s  Dir  XML 
or  the  PADL  open-source  li¬ 
braries.  a  Lightweight  Directo¬ 
ry  Access  Protocol  (LDAP)  in¬ 
tegration  tool  from  Mel¬ 
bourne,  Australia-based  PADL 
Software  Pty.  We  could  solve 
the  problem  by  upgrading  to 
Solaris  9,  since  that  version’s 
LDAP  client  works  better  with 
eDirectory.  But  that  migration 
is  at  least  a  year  ofL  so  for  now 
we  have  to  make  do. 

Fve  just  learned  that  Sun 
has  released  a  patch  for  its 
Solaris  8  LDAP  client  that 
improves  compatibility  with 
eDirectory,  but  I  don’t  have 
much  information  on  that  yet. 

Network  Abusers 

fm  also  working  on  a  project 
to  control  the  abuse  of  instant 
messaging  and  ftle-sbaring 
programs.  Our  general  coun¬ 
sel  has  signed  off  on  a  policy 
that  prohibits  employees  from 
using  company  resources  for 
nonbusiness  activities.  Read¬ 
ing  our  intrusion-detection 
logs,  we  discovered  that  most 
of  the  abuse  comes  from  users 
of  Yahoo  Messenger  and  file- 
sharing  programs  like  Kazaa 
and  Morpheus.  The  use  of 
these  programs  reduces  pro¬ 
ductivity.  ties  up  network 
bandwidth  and  raises  security 
issues  when  employees  down¬ 
load  files  infected  with  spy- 
ware  or  viruses. 

We  could  configure  our 
firewalls  and  routers  to  block 
access  to  those  unauthorized 
applications  and  Web  sites. 
The  problem  is  that  they’re 
not  unauthorized  for  every¬ 
one.  For  example,  our  techni¬ 
cal  support  group  uses  Yahoo 
Messenger  extensively  to  help 
customers  with  software  prob¬ 
lems.  and  IT  security  needs 
access  to  hacker  W^  sites  for 
research  purposes. 


We  also  haven't  been  able  to 
block  users'  access  by  IP  ad¬ 
dress  because  we  use  a  Dy¬ 
namic  Host  Configuration 
Protocol  server,  which  gives 
users  a  different  IP  address 
every  time  they  log  on.  Also, 
we  use  a  single  range  of  IP  ad¬ 
dresses  for  all  corporate  cam¬ 
pus  PCs,  so  we  can't  even 
( block  a  rai^  of  addresses 
from  accessing  these  services. 

The  good  news  is  that  our 
network  department  has  start¬ 
ed  redesigning  the  IT  infra¬ 
structure  and  is  segmenting 
the  network.  Network  opera¬ 
tions.  engineering,  quality  as¬ 
surance,  security.  HR.  finance 
and  many  ocher  departments 
will  each  have  their  own  range 
of  IP  addresses.  That  will 
make  is  possible  to  configure 
our  firewall  or  router  access- 
control  lists  by  department. 

We  will  be  able  to  block  ac¬ 
cess  not  only  to  illegal  pro¬ 
grams.  but  also  to  legitimate 
applications  for  users  outside 
a  given  department.  The  net¬ 
work  team  will  be  able  to  con¬ 
figure  the  firewall  to.  for  ex¬ 
ample.  prevent  tech  support 
from  accessing  the  payroll  ap¬ 
plication  —  and  to  prevent 
everyone  except  the  tech  sup¬ 
port  group  from  using  Yahoo 
Messei^r.  At  our  next  meet¬ 
ing,  we  will  discuss  how  to  re¬ 
strict  access  to  even  more 
unauthorized  Web  sites. 

Meanwhile,  as  military 
needs  wind  down.  Fm  hoping 
for  an  early  release  from  my 
Reserve  duties.  I  hope  to  be 
wridng  the  next  column  from 
my  home  office.  I 

WIUTNYINITIM? 

Ths  tveek's  lotrnM  Is  wnifon  by  8  real 
security  manager.  *Mafoias  Thurman.'' 
whose  name  and  ernployer  tian  been 
disgused  for  obvious  reasons.  (Contact  Iwn 
at  mathias.lhunnan9yahoo.com.  or  join  the 
discussion  in  our  forum  QuicfeLInk  elSBO 
lo  find  a  complele  archive  ol  our 
Secuity  Manx's  Jotrnals.  go  online  to 
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Web  Services:  Road 
To  rr  Renaissance 


IN  MY  MAY  COLUMN.  I  discussed  why  the  enter¬ 
prise  computing  solutions  investment  cycle  was 
coming  to  an  end,  to  be  displaced  by  Web  ser¬ 
vices  [QuickLink  38250].  Unfortunately,  a  techni¬ 
cal  description  of  how  Web  services  function 
doesn’t  explain  why  we’ve  entered  a  new  evolutionary 
stage  in  how  computing  will  affect  organizations. 

The  idea  that  computing  has  evolved  over  several 
cyclical  stages  is  now  accepted  wisdom.  Various  au¬ 
thors  have  discerned  a  succession  of  three-,  four-  or 


even  eight-st^  cycles 
since  1950.  depending  on 
how  they  sliced  up  the 
written  record.  Whenever 
the  computer  industry  ex¬ 
periences  one  of  its  period¬ 
ic  slumps  (about  every  six 
to  eight  years)  the  gurus, 
investors  and  entrepre¬ 
neurs  engage  in  a  guessing 
game  of  what  will  be  the 
next  cycle  to  spawn  yet  an¬ 
other  bonanza. 

Almost  everyone  agrees 
that  technological  innova¬ 
tion  is  needed  to  bring  about  the  next 
growth  cycle.  There  is  also  a  consen¬ 
sus  that  the  next  wave  will  have  some¬ 
thing  to  do  with  Web  services.  How¬ 
ever.  just  tagging  Web  services  as  the 
engine  to  create  another  round  of 
triJlion-dollar  investment  is  a  dead 
end.  For  the  next  cycle  to  happen. 
CEOs  and  CFOs  will  demand  demon¬ 
strable  gains  in  added  value. 

In  this  environment,  anything 
tagged  as  a  technological  improve¬ 
ment  won’t  sell  in  the  boardrooms. 
Therefore,  market  planners  and  con¬ 
sultants  are  repackaging  Web  services 
as  “customer-centric  computing.*' 
“human-centered  computing,”  “ubiq¬ 
uitous  computing"  and  so  forth.  This 
emerging  list  of  hyphenated  labels 
suggests  that  the  control  over  IT  will 


migrate  closer  to  the  cus¬ 
tomer.  Such  reshuffling 
will  be  enormously  expen¬ 
sive  because  it  will  require 
junking  much  of  what’s  in 
place  right  now. 

The  real  story  is  that  the 
next  wave  of  IT  invest¬ 
ments  will  shift  much  of 
the  control  over  IT  from 
the  producers  of  IT  (ven¬ 
dors,  CIOs,  consultants)  to 
those  who  can  decide 
what  information  is  worth 
getting  in  order  to  do  their 
jobs  more  effectively.  When  I  talk 
about  Web  services.  I  really  mean  a 
practical  demand  for  CIOs  to  restruc¬ 
ture  technology  to  ease  the  traumatic 
shifts  from  supply-side  economics  to 
demand-side  economics. 

I’m  sure  that  there  will  be  many  de¬ 
bates  about  whether  such  a  transfor¬ 
mation  will  actually  happen,  and  if  so, 
how  rapidly.  Before  making  predic¬ 
tions.  it’s  useful  to  examine  how  em¬ 
ployees  will  acquire  the  capabilities  to 
decide  what  information  to  obtain  and 
how  much  to  pay  for  it.  and  those  are 
tough  questions. 

Moving  decision-making  about  the 
uses  of  IT  calls  for  a  radical  cultural 
change.  Right  now.  with  the  exception 
of  what  they  fix  up  on  their  PCs,  em¬ 
ployees  are  largely  force-fed  from  a 


menu  that  has  been  cooked  by  a  few 
decision-makers,  mostly  technolo¬ 
gists.  The  current  organization  of  IT 
is  like  a  13lh  century  European  town, 
where  the  local  guilds  and  the  bishop 
decide  what  people  may  wear  and  dis¬ 
cuss.  Introducing  a  Wal-Mart  of 
choices  into  such  a  setting  is  likely  to 
upset  those  who  hold  power. 

But  Web  services  must  be  seen  not 
just  as  a  technologically  advanced 
method  for  managing  and  distributing 
information.  Internets  and  intranets 
must  also  be  understood  as  an  instant 
marketplace  where  individuals  can 
exercise  a  wide  range  of  choices  about 
what  information  to  acquire  and  how 
to  take  advantage  of  an  enormous 
variety  of  information-processing 
capabilities. 

If  the  exercise  of  individual  choices 
is  the  key  to  the  empowerment  of  a 
vastly  more  productive  information 
workforce,  we  must  set  out  now  to  lay 
the  foundation  for  a  software  architec¬ 
ture  that  will  make  that  feasible. 

After  an  examination  of  what  is  ac¬ 
tionable  DOW,  I  have  concluded  that 
vendor-independent  portal  technology 
will  be  one  of  the  principal  means  of 
making  Web  services  valuable.  CIOs 
should  go  back  to  their  architectures 
and  remove  vendor-specific  ways  in 
which  people  are  forced  to  interface 
with  applications. 

In  their  place.  CIOs  should  promote 
the  adoption  of  generic  and  universal 
portals  that  can  be  adapted  to  employ¬ 
ees’  scope  of  work,  skills,  literacy  and 
habits. 

1  see  infinite  oppominities  for  the 
expansion  of  Web  services  if  people 
are  offered  the  opporttmity  to  shape 
their  portals  as  a  friendly  companion 
for  trips  into  the  world  of  networked 
knowledge.  I 
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QUOTE  OF  THE  WEEK 

MA  few  years  ago,  people  got 
jobs  just  by  having  certifications. 
Today,  you've  got  to  be  able  to  break 
down  your  accomplishments  and 
provide  specific  ROI. 

-  «l«ff  Mvfchain,  iiiaM0*r.  Robwt  HaH  Tachnokigy 


OPINION 

The  ROI  of  Privacy  Seals 

BBB  privacy  logos  on  Web  sites 
aren’t  cheap,  but  they  might  be 
worthwhile  in  boosting  con¬ 
sumer  confidence,  says  privacy 
columnist  Jay  Cline.  Pape  42 


HOW  TO 

Talking  Long-Distance 

As  more  companies  conduct  job  inter¬ 
views  by  phone  to  save  time  and  money, 
job  candidates  need  to  make  the  best 
impression  they  can.  Here’s  some  advice 
for  handling  those  calls.  Page  41 


The  debate  between 
buy  and  build  advo¬ 
cates  continues. 

By  Steve  Ulfeider 


NOlBUILD! 


DO  YOU  BUY?  OR  DO  YOU  BUILD  AND  ADJUST? 

It  is  an  elder  among  IT  debates.  It  is 
our  own  “Tastes  great!"  “Less  filling!" 

When  you  need  a  new  enterprise  soft¬ 
ware  tool,  what's  wiser  buying  a  pack¬ 
aged  application  from  a  major  vendor  and 
customizing  as  needed?  Or  developing  it  yourself 
from  scratch?  Interviews  with  IT  leaders  show  this 
conundrum  is  no  closer  to  resolution  today  than  it 
was  a  quarter-century  ago.  But  that  doesn't  mean 
that  things  haven’t  chained. 

Build  advocates  need  only  wave  a  fistful  of  Com- 
puterworld  articles  dating  hack  to  the  mid-1990s, 
when  enterprises  discovered  the  joy  of  ERP.  It  is 
hardly  a  secret  that  many  ERP,  CRM  and  supply 
chain  management  implementations  have  blowm  up 
—  wasting  millions,  causing  corporate  turmoil  for 
years  and,  in  a  few  cases,  being  named  as  factors 
in  bankruptcies.  Moreover,  CIOs  and  business 
executives  alike  have  grumbled  in  recent 
years  that  even  when  such  prefects  “suc- 
wfaen  they  don’t  fail  utterly), 
return  on  the  investment  comes  slowly  — 
ifatalL 

On  the  other  haixl.  there’s  clearly  a  limit 
on  how  large  an  application  IT  can  create. 
“You  don’t  see  enterprises  trying  to  re-create  SAP." 
jokes  Jennifer  Chew,  an  analyst  at  Forrester  Research 
Inc.  in  Cambrif^,  Mass.  Many  of  the  applications 
CIOs  point  to  as  triumphs  of  the  build  philosophy 
are  relatively  modest  —  making  data  easier  for  users 
to  access  via  a  browser,  perhaps,  or  allowing  previ¬ 
ously  isolated  software  tools  to  communicate  with 
one  another. 

So  what’ll  it  be,  buy  or  build?  Some  of  today’s  argu¬ 
ments  may  surprise  you. 

Buying  and  Oying 

Rich  Bursek,  CIO  and  senior  vice  president  at  Lydian 
Thist  Co.,  recently  made  the  decision  to  buy  a  pack¬ 
aged  ai^licatioii,  and  the  process  reinforced  his  phi- 
lost^y  to  build  his  own  software 
whenever  possible. 

Lydian,  a  Palm  Beach  Gardens,  Fla.- 
based  parent  company  to  several  finan- 
cial-services  btisinesses,  needed  Web- 
based  mortgage-origination  software 
that  the  lenders  use  to  receive  and 
process  loan  requests.  Many  vendors 
offer  mature  applications  that  HU  this 
vertical  need.  “It  vrould  have  taken  us  a 
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year  <«)  boild  it"  at  a  cost  of  about  SI  million.  Buisck 
says.  The  prici*  of  the  packagtrd  application  selected 
by  Lydian  (Bursek  declined  to  name  the  vendor  be¬ 
cause  the  contract  has  yet  to  be  locked  in)  is  about 
5250,000.  he  says,  and  another  S250.000  in  resources 

—  in-house  developers'  time  and  consulting  —  is 
needed  to  get  the  application  running. 

The  capper  is  that  Lydian  hopes  to  put  the  pack¬ 
aged  application  in  production  in  six  months.  "So 
that's  a  half-mtllion-doUar  savings,  plus  wcTc  si.v 
months  closer  [to  a  functioning  applicaciunl."  Bursek 
says.  "When  I  look  those  two  factors  to  the  board,  it 
was  pretty  persuasive." 

W’hile  the  50%  savings  made  this  a  clear-cut  buy 
decision.  Bursek  discusse-s  the  experience  with  en¬ 
thusiasm  usually  a'serx'ed  for  a  pulled  groin.  Lydian's 
senior  management  team  has  a  strong  IT  background 
and  prefers  to  build  applications  whenever  possible 

—  and  dc*spite  the  overwhelming  cost  advantage  of 
purchasing  packaged  mortgage-origination  software, 
this  experience  is  doing  little  to  change  their  minds 
about  the  non-finance-related  advantages  of  the 
build  approach.  (Bursek  believes  the 
unpleasantness  isn't  his  specific  ven¬ 
dor's  fault,  but  rather  the  nature  of  the 
buy  beast.) 

In  [anuary.  after  running  the  numbers. 

Bursek  knew  he  would  purchase  a  pack¬ 
aged  application  and  began  vendor 
meetings.  "That  took  us  a  month,  which 
everyone  told  us  was  very  aggressive, 
and  another  (month)  to  negotiate  and 
sign  the  contract."  he  says.  (As  noted 
above,  there  are  still  Ts  to  be  crossed. 

I's  to  be  dotted.)  The  software  was  in¬ 
stalled  in  March  and  was  scheduled  to 
go  live  May  1. 

"We  have  five  people  dedicated  to 
managing  this  pntjcct,"  Bursek  groans. 

"Five  dedicated  resources  doing  nothing 
else."  Three  are  buiuness  analysts  who 
act  as  conduits  between  Lydian's  busi¬ 
ness  units  and  IT.  and  two  arc  develop¬ 
ers  writing  code  to  make  sure  the  company's  existing 
applications  work  with  the  new  mortgage-origina¬ 
tion  software.  "When  you're  n-orking  with  vendors 
there’s  this  ongoing  battle."  Bursek  says.  ’Things 
snowball:  you  can  lose  control."  He  contrasts  this  ex¬ 
perience  with  a  recent  build  project  ^  an  extranet 
sales  tool  for  third-party  brokers  and  account  execu¬ 
tives  who  do  busine.ss  with  Lydian. 

The  company  needed  to  give  those  professionaLs 
real-time.  browser-ba.sed  access  to  mortgage  ap¬ 
proval  status.  Bursek  simply  grabbed  a  fc'M'  develop¬ 
ers  from  his  six-member  team  and  went  at  it.  "I  met 
with  an  analyst  and  a  systems  architect"  to  sketch  out 
the  basics,  he  says.  "Then  we  made  a  presentation  to 
two  people  in  operations  and  started  development 
the  same  week.  From  problem  analysis  to  going  live 
look  three  weeks." 

Bursek  shakes  his  head.  "With  vendors,  it’s  just 
a  grueling  process."  In  particular,  he  chafed  at  the 
vertdor  selection  process,  the  corttract  negotiations 
and  the  need  to  rely  on  outside  developers.  But  in  the 
ca.se  of  the  mortgage-origination  software,  the  mas¬ 
sive  price  diffcrcniial  trumped  all  other  arguments 
and  made  the  buy  decision  unavoidable. 


Customize  With  Caution 

One  of  the  popular  build  arguments  is 
that  there's  really  no  such  thing  as  a  ma¬ 
jor  packaged  application  —  vendors' 
suites  must  be  customizes!  so  heavily 
that  getting  your  allegedly  ofT-ihc-shclf 
application  running  requires  a  massive 
amount  of  developer  time  and  a  shotgun 
wedding  with  an  integrator.  Rut  some  IT 
leaders  turn  this  argument  inside  out. 
According  to  David  Schwartz,  CIO  at 
George  Washington  University  in  Wash¬ 
ington.  the  big  problem  with  ERP  imple¬ 
mentations  is  that  companies  ovcrcu.s- 
tomize  software.  "A  lot  of  these  modifi¬ 
cations  are  simply  preferences."  he  says. 
"People  change  the  way  a  screen  looks  or 
what  appears  on  a  report." 


H  The  last 
thing  we 
wanted  to  do 
was  build  this 
app  ourselves. 


line-of-business  representatives,  the  im¬ 
plementation  team  numbered  50  to  60. 
Schwartz  claims  there  are  Ivy  League 
colleges  (which  he  declines  to  name) 
"that  paid  two  or  three  times"  S25  mil¬ 
lion  because  they  went  wild  on  cus¬ 
tomization. 

Build  If  You  Must 

"The  last  thing  we  wanted  to  do  was 
build  this  app  ourselves."  says  Rick 
Peltz,  CIO  at  Marcus  &  Millichap.  Late 
last  year,  the  Encino,  Calif.-based  real 
estate  investment  brokerage  company 
shopped  around  for  off-the-shelf  tools 
that  would  let  its  sales  agents  pull  data 
from  many  sources  (photos,  published 
articles,  government  information  and 


“If  you  buy  packages,  you  want  to  keep  ...i. . others),  use  it  to  generate  marketing 

customization  to  an  absolute  minimum,"  packages  for  individual  prtipcrtics  and 

agrees  Chuck  Mackey.  IT  director  at  the  OO.  Marcus*  MilHchap  send  that  information  back  to  the  com- 

Elkay  Division  of  privately  held  Elkay  pany’s  St^L  Server  database.  Peltz  as- 

Manufacturing  Co.  in  Oak  Brook.  IlL  I  sumed  that  he  would  use  Microsoft  Corp.'s  Power- 
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The  diversified  manufacturer  of 
plumbing  products  and  cabinets  built  its 
own  software  until  1997.  when  it  put  in 
pbcc  3  PcopIcSoft  Inc.  ERP  suite.  And 
despite  a  Iuu.sy  experience  with  a  sys¬ 
tems  integrator  (Mackey  declines  to 
name  the  firm  but  says.  "They  did  a  very 
piK)r  job  for  us"),  he  has  no  regrets. 

Elkay 's  annual  PcopleSoft  maintenance 
fee  is  equivalent  to  two  or  three  develop¬ 
ers’  salaries.  Mackey  estimates.  And  for 
that  fee.  he  says,  "today  we’re  totally 
Web-enabled.  There's  sure  no  way  we 
would  have  gotten  here  with  two  or 
three  more  developers." 

In  2000.  when  George  Washington  em¬ 
barked  on  an  implementation  of  an  Ora¬ 
cle  Corp.  ERP  suite,  Schwartz  minimized 
customization  and  instead  updated  the 
university’s  business  processes  to  match 
best  practices  recommended  by  Oracle.  "That's 
tough.  You  go  through  a  chain  of  pain  when  you're 
re-engineering  and  changing  corporate  culture."  he 
says.  “But  now  our  systems  reflect  recognized  best 
practices." 

Working  with  systems  integrator  BcaringIN}int  Inc. 
(formerly  KPMG  Consulting  Inc.),  the  university  im¬ 
plemented  the  ERP  suite  in  two  years  at  a  total  cost 
of  $25  million,  Schwartz  says.  Between  George  Wash¬ 
ington  developers,  BcaringPoini  consultants  and 
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Point,  a  tool  the  agents  were  familiar  with,  as  a  front 
end.  Surely  it  would  be  simple  to  find  a  package  that 
could  send  the  data  back  to  headquarters. 

But  even  with  his  two  consultants  "on  the  phone 
all  the  time  with  Microsoft”  trying  to  pull  something 
together,  Peltz  found  that  PowerPoint's  architecture 
made  it  impractical  to  set  up  a  way  to  prevent  users 
from  deleting  information  they  had  created.  This  fea¬ 
ture  was  a  must-have:  turnover  among  real  estate 
agents  is  high,  and  many  arc  technology  neophytes, 
so  Peltz  was  concerned  that  users  would  accidentally 
delete  marketing  packages  they  had  just  created. 

As  a  result.  Marcus  &  Millichap  was  forced  to 
spend  (ts  budget  (S2SO.OOO  to  S500.000)  “to  re-create 
rbwerPoint  from  a  [user  interface]  perspective,  but 
without  all  the  functionality."  Peltz  says  —  and  with 
the  ability  to  build  "whiteboard"  fields  that  users 
can’t  delete.  While  the  company  would  have  pre¬ 
ferred  to  buy  a  packaged  application.  Peltz  did  find 
some  advantages  in  building  his  own.  Four  months 
after  work  began,  the  tool  was  already  being  beta- 
tested  because  Marcus  &  Millichap  set  its  own  ag¬ 
gressive  timetable.  And  the  consuitant.s  who  were 
initially  earmarked  for  integrating  packaged  software 
have  instead  been  writing  code  and  auditing  one  an¬ 
other’s  work. 

About  the  only  thing  that’s  certain  in  enterprise 
software  today  is  that  even  passionate  build  advo¬ 
cates  aren’t  about  to  create  true  ERP  or  CRM  suites 
from  .scratch.  But  at  the  sharp  end  of  business,  where 
money  is  made  or  lost,  perhaps  no  vendor  can  truly 
meet  your  company’s  needs  ~  peihaps  you’re  on 
your  own.  AMR  Research  Inc.  analyst  Eric  Austvold 
believes  a  new  mind-set  is  required:  "In  the  past, 
people  thought  of  packaged  apps  as  the  endgame," 
he  says.  "But  we  need  to  start  thinking  of  them  in¬ 
stead  as  the  founda¬ 
tion  —  the  system  of 
record."  I 


Utjelder  is  a  freelance 
writer  in  Southboro. 
Moss.  Contact  him  at 
sulfelderi^harter.net. 
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year  fo  build  it"  at  a  cost  of  about  $1  million.  Bursek 
says.  The  price  of  the  packaged  application  selected 
by  Lydian  (Bursek  declined  to  name  the  vendor  be* 
cause  the  contract  has  yet  to  be  locked  in)  is  about 
S2S0.(XK).  he  says,  and  another  $250,000  in  resources 

—  in-house  develt^ns'  time  and  consulting  —  is 
needed  to  get  the  application  running. 

The  capper  is  that  Lydian  hopes  to  put  the  pack¬ 
aged  application  In  production  in  six  months.  "So 
that's  a  haif-million-doUar  savings,  plus  we're  six 
months  closer  [to  a  hioctioning  application],”  Bursek 
says.  "When  I  took  those  two  factors  to  the  board,  it 
was  pretty  persuasive." 

While  Che  50%  savings  nude  this  a  clear-cut  buy 
decision.  Bursek  discusses  the  experience  with  en¬ 
thusiasm  usually  reserved  for  a  pulled  groin.  Lydian's 
senior  management  team  has  a  strong  IT  background 
and  prefers  to  build  applications  whenever  possible 

—  and  despite  the  overwhelming  cost  advantage  of 
purchasing  packaged  mortgage-origination  software, 
this  experience  is  doii%  little  to  change  their  minds 
about  the  non-rmance-related  advantages  of  the 
build  approach.  (Bursek  believes  the 
unpleasantness  isn't  his  specific  ven¬ 
dor's  &ult.  but  rather  the  nature  of  the 
buy  beast) 

In  January,  after  running  the  numbers, 

Bursek  knew  be  would  purchase  a  pack¬ 
aged  applicatioD  and  began  vendor 
meetings.  That  took  us  a  month,  which 
everyone  told  us  was  very  aggressive, 
and  another  [month]  to  negotiate  and 
sign  the  contract."  be  says.  (As  noted 
above,  there  are  still  Ts  to  be  crossed, 

Ts  to  be  dotted.)  The  software  was  in¬ 
stalled  in  March  and  was  scheduled  to 
go  live  May  L 

"We  have  five  people  dedicated  to 
managing  this  proiect."  Bursek  groans. 

"Five  dedicated  resources  doing  nothing 
else."  Three  are  business  analysts  who 
act  as  conduits  between  Lydian's  busi¬ 
ness  units  and  IT.  and  two  are  develop¬ 
ers  writii^  code  to  make  sure  the  company's  existing 
applications  work  with  the  new  mongage-origina- 
lion  software.  "When  you're  working  with  vendors 
there's  this  ongoing  battle,"  Bursek  says.  Things 
snowball:  you  can  lose  ctmtroL”  He  contrasts  this  ex¬ 
perience  with  a  recent  build  project  an  extranet 
sales  tool  for  third-party  brokers  and  account  execu¬ 
tives  who  do  business  with  Lydian. 

The  company  needed  to  give  those  professionals 
real-time,  browser-based  access  to  mortgage  ap¬ 
proval  status.  Bursek  simply  grabbed  a  few  de^lop- 
ers  irom  his  six-member  team  and  went  at  h.  "I  met 
with  an  analyst  and  a  systems  architect"  to  sketch  out 
the  basics,  he  says.  Then  we  made  a  presentation  to 
two  people  in  operations  and  started  development 
the  same  week.  From  problem  analysis  to  going  live 
took  three  weeks." 

Bursek  shakes  his  bead.  "With  vendors,  it’s  fust 
a  grueling  process."  In  particular,  be  chafed  at  the 
vendor  selection  process,  the  contract  negotiations 
and  the  need  to  rely  on  outside  developers.  But  in  the 
case  of  the  mortgage-origination  software,  the  mas¬ 
sive  price  differential  trumped  all  other  arguments 
and  made  the  buy  decision  unavoidable. 


Customize  WHh  Caution 

One  of  the  popular  build  arguments  is 
that  there's  really  no  such  thing  as  a  ma¬ 
jor  packaged  application  ~  vendors' 
suites  must  be  customized  so  heavily 
that  getting  your  allegedly  off-the-shelf 
application  running  requires  a  massive 
amount  of  developer  time  and  a  shotgun 
wedding  with  an  integrator.  But  some  IT 
leaders  turn  this  argument  Inside  out. 
According  to  David  Schwartz.  CIO  at 
(George  Washington  University  in  Wash¬ 
ington.  the  big  problem  with  ERP  imple¬ 
mentations  is  that  companies  overcus¬ 
tomize  software.  "A  lot  of  these  modifi¬ 
cations  are  simply  preferences."  be  says. 
"Pec^le  change  the  way  a  screen  looks  or 
what  appears  on  a  report" 


The  last 
thing  we 
wanted  to  do 
was  build  this 

-If  you  buy  packages,  you  want  to  keep  others),  use  it  to  generate  markeling 

customization  to  an  absolute  minimum."  pQj2.  packages  for  individual  properties  and 

agrees  Chuck  Mackey.  IT  director  at  the  (ao.  Mw"rt  f  HfHtip  send  that  informatioa  back  to  the  com- 
Elkay  Division  of  privately  held  Elkay  pan/s  S(^L  Server  database.  Peltz  as- 

Manufoctiuing  Ca  in  Brook,  QL  I  sumed  that  he  would  use  Microsoft  Corp.'s  Power- 


Une-of-business  representatives,  the  im- 
plementaiioD  team  numbered  50  to  60. 
Schwartz  claims  there  are  Ivy  League 
colleges  (which  he  declines  to  name) 
"that  paid  two  or  three  times"  $25  mil¬ 
lion  because  they  went  wild  on  cus¬ 
tomization. 

Build  If  You  Must 

The  last  thing  we  wanted  to  do  was 
build  this  app  ourselves,”  says  Rick 
Peltz,  CIO  at  Marcus  &  Millichap.  Late 
last  year,  the  Enclno.  Calif-based  real 
estate  investment  brokerage  company 
shopped  around  for  off-the-shelf  tools 
that  would  let  Its  sales  agents  pull  data 
from  many  sources  (photos,  published 
articles,  government  information  and 


It  would 
have  taken 
ayearto  build  it. 
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The  diversified  manufacturer  of 
plumbing  products  and  cabinets  built  its 
own  software  until  1997,  when  it  put  in 
place  a  PeopleSoft  Inc.  ERP  suite.  And 
despite  a  lousy  experience  with  a  sys¬ 
tems  integrator  (Mackey  declines  to 
name  the  firm  but  says,  "They  did  a  very 
poor  job  for  us"),  he  has  no  regrets. 
Elkay's  annual  PeopleSoft  maintenance 
fee  is  equivalent  to  two  or  three  develop¬ 
ers’  salves,  Mackey  estimates.  And  for 
that  fee.  be  says,  "today  we're  totally 
Web-enabled.  There’s  sure  no  way  we 
would  have  gotten  here  with  two  or 
three  more  developers." 

in  2000,  when  George  Washington  em¬ 
barked  on  an  implementation  of  an  Ora¬ 
cle  Corp.  ERP  suite,  Schwartz  minimized 
CTistomization  and  instead  updated  the 
university's  business  processes  to  match 
best  practices  recommended  by  Oracle.  "That’s 
tough.  You  go  through  a  chain  of  pain  when  you're 
re-engineering  and  changing  corporate  culture."  he 
says.  "But  now  our  systems  reflect  recognized  best 
practices." 

Workii^  with  systems  integrator  BearingPoint  Inc. 
(formerly  KPMG  Consulting  Inc.),  the  university  im¬ 
plemented  the  ERP  suite  in  two  years  at  a  total  cost 
of  $25  milUon.  Schwartz  says.  Between  George  Wasb- 
ii^on  developers,  Bearin^int  consultants  and 


Point,  a  tool  the  agents  were  familiar  with,  as  a  front 
end.  Surely  it  would  be  simple  to  find  a  package  that 
could  send  the  data  back  to  headquarters. 

Btit  even  with  his  two  consulianis  "on  the  phone 
all  the  time  with  Microsoft"  trying  to  pull  somethii^ 
together.  Peltz  found  that  PowerPoint’s  architecture 
made  it  impractical  to  set  up  a  way  to  prevent  users 
from  deleting  information  they  had  created.  Thi.s  fea¬ 
ture  was  a  must-have;  turnover  among  real  estate 
agents  is  high,  and  many  are  technology  neophytes, 
so  Peltz  was  concerned  that  users  would  accidentally 
delete  marketing  packages  they  had  just  created. 

As  a  result.  Marcus  &  Millichap  was  forced  to 
spend  its  budget  ($250,000  to  SS()0.000)  "to  re-create 
IfowerPoini  from  a  [user  interface]  perspective,  but 
without  all  the  functionality."  Peltz  says  ~  and  with 
the  ability  to  build  '%vhiteboard"  fields  that  xisers 
can't  delete.  While  the  company  would  have  pre¬ 
ferred  to  buy  a  packaged  application,  Peltz  did  find 
some  advantages  in  building  his  own.  Four  months 
after  worii  began,  the  tool  was  already  being  beta- 
tested  because  Marcus  &  Millichap  set  its  own  ag¬ 
gressive  timetable.  And  the  consultants  who  were 
initially  earmarked  for  integrating  packaged  software 
have  instead  been  writing  code  and  auditing  one  an¬ 
other's  work. 

About  tbe  only  thing  that's  certain  in  enterprise 
software  today  is  that  even  passionate  build  advo¬ 
cates  aren’t  about  to  create  true  ERP  or  CRM  suites 
from  scratch.  But  at  the  sharp  end  of  business,  where 
money  is  made  or  lost,  perhaps  no  vendor  can  truly 
meet  your  company’s  needs  —  perhaps  you're  on 
your  own.  AMR  Research  Inc.  analyst  E^  Austvold 
believes  a  new  mind-set  is  required:  In  tbe  past, 
people  thought  of  packaged  apps  as  the  endgame," 
he  says.  "But  we  need  to  start  thinking  of  them  in¬ 
stead  as  the  founda¬ 
tion  — ■  the  system  of 
record."  I 


Ulfelder  is  a  freelance 
writer  in  Southboro. 
Mass.  Contact  him  at 
sulfelder^charterneL 
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IF  HE  PLAYED  BASEBALL.  Kevio  Arensdorf  would 
be  an  all-star;  he’s  batting  .500.  A  Unix  systems 
administrator  at  Iowa  Telecom  in  Newton. 
Iowa.  Arensdorf  txas  had  phone  interviews  for 
four  different  jobs,  and  he’s  landed  two  of 
them,  including  his  current  one. 

Rick  Sheeley  is  also  bitting  well  in  the  tele- 
phone-interview  game.  Previously  an  independent 
IT  contractor  who  bad  many  jobs  and  now  a  data 
warehouse  administrator  at  a  major  Las  ^egas  casino 
company.  Sbeeley  has  had  about  100  telephone  inter¬ 
views  over  the  past  25  years  and  estimates  that  be 
has  landed  15  to  17  jobs  from  them. 

Telephone  interviews  are  becoming  more  common 
in  today’s  soft  IT  hiring  market  because  they  save 
time  and  money  compared  with  face-to-fiace  inter¬ 
views.  Here  are  some  tips  for  job  seekers  to  boost 
tbeir  success  rates  when  interviewing  by  phone. 

First,  recognize  that  in  most  cases,  telephone  inter¬ 
view  are  used  to  screen  candidates.  iMt  to  hire  them, 
says  Edwin  Pollock,  regional  president  in  San  Fran¬ 
cisco  at  career  management  company  Bernard  Hal¬ 
dane  Associates.  ‘They’re  asking  questions  to  cut 
down  the  pack.” 

That  means  your  goal  for  the  interview  should  be 
to  secure  a  foce-to-lace  interview,  not  to  get  the  job. 
notes  Laurie  Levenson.  presideru  of  DirectAccess 
Stailii^  Inc.,  an  IT  staffing  firm  in  Carlsbad,  Calif. 
Show  your  enthusiasm.  If  you're  in  another  city,  say 
you'd  be  happy  to  fly  in  for  a  personal  interview. 

Don’t  be  overbearing,  and  don’t  oversell  yourself: 
just  work  to  get  to  the  next  level  recommends  Ken 
Hill  who  woriced  for  17  years  in  human  resources  be¬ 
fore  moving  over  to  IT.  He’s  now  CIO  at  defense  con¬ 
tractor  General  Dynamics  Corp.  in  Falls  Church,  Va. 

Make  clear  bow  technically  adept  you  are.  Look 
for  articles  about  a  prospective  ea^)loyer’s  IT  de 
partment.  Hill  advises.  For  exampl^  you  might  learn 
that  it  has  just  finished  an  SAP  implementation.  *IVy 
to  tie  that  piece  of  information  to  your  own  back¬ 
ground  and  experience. 

And  don’t  assume  that  it  will  be  easy  to  get  the 
next  interview.  F6r  instance,  for  any  given  IT  posi¬ 
tion.  face  Mouse,  manager  of  application  develop¬ 
ment  at  Car$.com  in  Chicago,  conducts  about  15  tele¬ 
phone  interviews  and  asks  only  four  candidates  to 
come  in  for  a  foce-to-face  meeting. 

Don’t  try  to  wing  a  telephone  interview.  “My  first 
objective  [in  a  telephone  interview]  is  to  see  bow 


t 


seriously  the  candidate  prepared,”  says  Oren  Ezra, 
vice  president  of  products  services  at  Atlanta-based 
jacada  Ltd.  which  develops  legacy-integration  appli¬ 
cations.  “If  they  haven’t  taken  the  time,  I  get  disinter¬ 
ested  very  quiddy.” 

Preparation  Is  Key 

One  benefit  of  a  phone  interview  is  that  you  can  have 
all  your  research  laid  out  on  your  desk  b^ause  the 
interviewer  can’t  see  you.  Take  advant^e  of  rhi«L 

Sheeley  tries  to  anticipate  questions  about  his 
technical  skiUs  and  prepares  a  cheat  sheet  with  notes 
about  his  experiences  with  cechnolc^es  and  his  proj¬ 
ect  successes. 

Be  ready  to  describe  a  few  of  your  accomplish¬ 
ments.  Arensdorf  makes  sure  he’s  comfortable  and 
prepared  and  in  a  quiet  place  for  the  interview.  He 
reviews  his  resume  and  research  material  before¬ 
hand.  He  likes  to  schedule  interviews  in  the  morning, 
leaving  the  rest  of  the  day  for  other  thing^t 

Research  the  employer.  “One  of  things  that  turns 
me  off  the  quickest  is  the  candidate  who  doesn’t 
know  what  we’re  about."  says  Hill  Candidates  who 


prepare  have  the  edge  over  those  who  don’t. 

Jeff  Markham,  a  manager  in  the  San  Francisco 
office  of  staffing  and  placement  firm  Robert  Half 
Technology,  says  a  lot  of  candidates  take  the  tele¬ 
phone  interview  for  granted,  thinking  that  the  com¬ 
pany  liked  their  r^suiSM  and  that  it's  just  a  formality 
to  gel  interviews.  Not  true.  You  can’t  make  up  for  a 
lack  of  preparation  with  personality,  body  langtiage 
or  eye  contact  when  doir^  a  telephone  interview, 
he  explains. 

Phone  interviews  tend  to  be  fairly  short  — 15  to  45 
minutes.  So  be  prepared  to  talk  more  about  what 
projects  you  have  worked  cm  and  what  you  have 
done  rather  than  the  actual  skills  you  have,  says  Hill 

Provide  Vbur  Own  ROI 

And  don’t  underestimate  the  interview’s  importance. 
Says  Markham:  “A  few  years  ago,  people  got  tabs  just 
by  having  certifications.  Today,  you've  got  to  be  able 
to  break  down  your  accomplishments  and  provide 
specific  ROL”  For  example,  if  a  programmer  claims 
devel(^ment  as  a  strength.  Markham  might  say. 
“Give  me  an  example  of  an  application  you  devel¬ 
oped  with  C**  that  had  measurable  results,  where  it 
was  better,  ftister,  stronger.” 

jacada's  Ezra  likes  candidates  who  are  “proactive’' 
and  ask  him  questions  about  the  company,  its  com¬ 
petitors  and  growth  opportunities  on  the  job.  ‘These 
types  of  questions  show  me  the  candidate  is  confi¬ 
dent,”  he  says. 

Anything  you  can  do  to  help  the  interviewer  pic¬ 
ture  you  in  the  job  position  will  help  move  you  to  the 
next  level,  says  Mouse.  One  of  the  best  candidates  be 
ever  interviewed  talked  about  the  most  difficult 
challenges  be  had  on  the  job,  specific  solutions  be 
devised  for  them  and  the  benefits  that  followed.  The 
candidate  then  asked  if  there  were  similar  challenges 
in  Mouse's  organization.  “He  let  me  know  what  he 
succeeded  in  and  weaved  in  a  probing  question 
about  my  company.”  Mouse  recalls. 

And  smile.  Yes,  smile,  even  though  the  interviewer 
can’t  see  you.  The  other  person  can  hear  (a  smile].” 
says  Levenson.  Show  enthusiasm  and  interest.  This  is 
more  important  with  a  telephone  interview  than  a 
face-to-Cace  one  because  you  have  such  limited  inter¬ 
action  with  the  interviewer.  I 


Horowitz  is  a  freelance  business  and  technology  writer 
in  Sait  Lake  City.  Contact  him  at  alan<^ahorowitzxom. 
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How  to  ace  telephone  job  interviews. 

By  Alan  S.  Horowitz 
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Of  Improvement 
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Study  Reveals  Wgh 
Cost  of  Passwords 
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JAY  CLINE 


The  ROI  of 
Privacy  Seals 


WE’VE  ALL  SEEN  THEM  —  the  green 
Truste  images,  the  BBBOnLine  pad¬ 
locks  and  a  host  of  other  privacy 
and  security  seals.  More  than  2,000 
companies  are  paying  up  to  $13,000 
per  year  to  display  these  logos  on  their  Web  sites. 

But  do  they  pay  oflf? 

If  the  Internet  is  key  to  your  compEmy’s  future  growth 
strategy,  then  you  need  them  to  pay  off. 


Poll  after  poll  says  the 
top  reason  people  don’t 
spend  more  online  is  that 
they’re  afraid  their  credit 
card  numbers  will  be 
stolen.  Visa  and  Master¬ 
Card  say  they’ll  reimburse 
any  fraudulent  charges,  but 
so  far  this  doesn’t  seem  to 
be  enough  for  consumers. 

Web  users  either  don’t 
know  about  this  promise, 
don’t  believe  it  or  don’t 
want  the  hassle  of  having 
to  seek  a  reimbursement. 

The  big  question  is,  do 
privacy  seals  give  these  worried  cus¬ 
tomers  the  assurance  they  need  to 
type  in  their  chaige-card  information? 
Will  their  added  sales  justify  the  cost 
of  the  seals?  Use  this  checklist  to  find 
the  answers  for  your  company; 

■  Are  we  ike  the  companies  that  already 
have  seals?  If  you’re  a  world-class 
e-commerce  site,  the  answer  is  yes. 
Almost  half  of  the  SO  most -visited 
Web  sites,  by  my  count,  display  some 
type  of  privacy  seaL  If  you  hope  to  be 
a  major  technology  company,  the  an¬ 
swer  is  also  af^rmative.  Of  the  14  IT 
firms  in  the  Fortune  100. 10  display  a 
privacy  seal. 

■  Which  seal  to  best?  If  you  need  a  pri¬ 
vacy  seal,  either  of  the  two  market 
leaders  will  do.  Truste  has  the  highest 
market  share  among  the  seals,  listing 
1374  Web  sites,  compared  with  BBB- 


Online’s  701.  Truste  has 
nearly  a  2-10*1  edge  over 
BBBOnLine  among  the  top 
SO  Web  sites  and  a  3-to-2 
edge  among  the  Fortune 
100.  That  said,  the  Better 
Business  Bureau,  with  its 
91-year  history,  has  higher 
name  recognition  among 
Internet  users  (93%)  than 
6-year-old  Thiste,  which 
claims  a  69%  rate. 

■  Whst  wM  it  cost  us  for  a 
suW?  Both  Thiste  and  BBB- 
OnLine  charge  an  annual 
fee  based  on  your  yearly 
revenue.  With  Truste,  companies 
bringing  in  less  than  SS  million  are 
charged  $599,  while  those  grossing 
over  $2  billion  must  pay  $12,999.  The 
pain  is  less  with  the  BBB:  Small  com¬ 
panies  are  charged  $200,  while  those 
grossing  over  $2  billion  pay  $7,000. 

■  What  to  roqured  to  far  a  seal? 

Applying  for  a  privacy  seal  will  re¬ 
quire  internal  staff  time  to  complete 
the  paperwoik  and  assure  that  your 
company  meets  the  seal  standards. 
You’ll  need  to  post  a  privacy  policy 
that  conforms  to  the  seal’s  standards. 
And  you’ll  need  to  provide  your  cus¬ 
tomers  with  a  way  to  opt  out  of  direct 
marketing  and  having  their  informa¬ 
tion  sold  to  third  parties,  as  well  as  a 
way  to  access  their  information  and 
file  complaints. 

■  Whit  retuni  can  WB  expect?  If  you’re 


a  large  corporation  and  your  average 
Internet  transaction  nets  you  $10  in 
profit,  you’ll  need  your  privacy  seal  to 
add  as  many  as  125  more  salbs  per 
month  to  make  it  a  worthwhile  invest¬ 
ment.  If  you’re  a  small  company,  you’ll 
need  only  a  few  extra  sales  per  month 
to  pay  for  your  fee.  A  sample  of  small 
clients  of  ScanAlert,  an  emerging  se¬ 
curity  seal  provider,  attributes  Inter¬ 
net  sales  increases  of  10%  to  33%  to 
that  seal's  placement. 

What’s  my  recommendation?  If 
you're  a  small  business  with  online 
ambitions,  this  is  an  easy  call.  A  priva¬ 
cy  seal  will  pay  for  itself  many  times 
over.  If  you’re  a  major  corporation  do- 
ii^  any  level  of  online  sales,  you  may 
also  be  leaving  money  on  the  table  if 
you  lack  a  privacy  seal. 

Consider  conducting  a  trial  run: 
Make  a  one-year  commitment  to  main¬ 
taining  a  seaL  Split  your  Web  traffic  in 
two,  with  only  half  of  your  traffic 
viewing  the  seaL  By  comparing  the 
sales  from  the  two  versions  of  your 
site,  you’ll  have  hard  proof  of  whether 
a  seal  will  be  a  long-term  winner  for 
your  business. 

Looking  over  the  horizon,  your  re¬ 
turn  will  be  higher  if  more  online  con¬ 
sumers  come  to  trust  the  privacy  seals. 
This  may  depend  on  the  seals  raising 
their  standards  —  and  your  require¬ 
ments  —  over  time.  Privacy  purists  de¬ 
ride  Truste  and  the  BBB  for  not  hold¬ 
ing  companies  to  a  higher  level  of  pri¬ 
vacy  and  for  not  being  more  aggres¬ 
sive  in  their  enforcement. 

Critics  aside,  everybody  wins  if  the 
seal  programs  are  a  success.  Seal 
members  will  do  more  to  protect  cus¬ 
tomer  privacy,  and  online  shoppers 
will  have  less  to  worry  about  when 
they  click  Submit  I 
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Got  Outsourcing 
Questions? 

Computerworid’s  New  IT  Executive  Summit  Series  Has  the  Answers 


It  you’re  an  IT  executive  in  an 
end-user  organization,  apply  to 
attend  Computerworld's  upcoming 
complimentary  half-day  summit  on 
IT  Outsourcing:  The  Offshore 
Aiternative. 

Robust  global  communication 
technologies  and  state-of-the-art 
security  tools  have  made  IT  out¬ 
sourcing  an  increasingly  viable 
option  to  achieve  ROI.  Part  of 
Computerworid’s  new  IT  Executive 
Summit  Series,  this  invitation-only, 
4-hour  summit  will  explore  how 
companies  are  realizing  tangible 
benefits  from  outsourcing  IT 
application  development, 
integration  and  management. 

Seating  is  limited,  so  apply 
today! 


Los  Angeles 
Thursday,  June 
Hyatt  Regency 

8:00am  to  6:30am 
8:30am  to  9:00am 


9:00am  to  9:30am 


9:30am  to  10:00am 


,  CA 

26,  2003,  8:00am  to  Noon 

Registration  and  Networking  Breakfast 

Welcome  and  Opening  Keynote 
Outsourcing  Watch  2003: 

The  Best  of  Both  Shores 

Maryfran  Johnson.  Editor  in  Chief. 
Computerworld 

Industry  Update 

Evaluating  Your  IT  Sourcing  Options 

Bart  Perkins.  Managing  Partner. 

Leverage  Partners  (an  IT  consultancy) 

Business  Case  Study 

Ron  Glickman.  and  CIO. 

The  DFS  Group 


10:00am  to  10:30am  Refreshment  Break 


10:30am  to  11:30am 


11:30am  to  Noon 


Outsourcing  Strategies 
Leadership  Strategies  in  Offshore 
Outsourcing 

Moderator:  Maryfran  Johnson. 

Editor  in  Chief.  Computerworld 
Panelists: 

■  Marty  Chuck.  CIO.  Agilent  Technologies 

■  Ron  Glickman,  SVP  and  CIO. 

The  DFS  Group 

■  Jerry  McElhatton.  Senior  EVP  of  Global 
Technology  arni  Operations. 

MasterCard  Interr^atiorral 

■  Greg  Schueman.  Vice  President 
and  CTO.  Mercury  Insurance  Group 

Open  Forum 


For  information,  call  Chris  Leger  at  888-299-0155 
or  to  register  online,  visit 
www.itexecutivesummit.com/outsourcing 
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IT  Executive  Summit 
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Cognizant 
I  Technologv 
'  Solutions 


IT  Cciix-crs 


IT  Tel  ret'  rs.i'i 


CwpiUir  Ptoyim  Amlyll 


lnt*fnatl«nal  Advanced 
Bwalnpaa  Computing.  Inc 
now  has  2  Compulef 
Pfogram  Analyst  posttrons 
avatlalMe  IncunAam  stKxAd 
noKi  a  8S  in  Computer 
Science  or  Engmeonng  and 
have  at  least  one  (1)  year  of 
axpenenca  m  trie  industry 
Please  send  your  resume 
ar>d  cradentials  to  Human 
Resources  at  lABC. 

Owens  Olive.  Suite  208 
neaaanion  CA  MS88 


Oversees  dienVserver  appli¬ 
cations.  build  using  Visual 
Basic  AOracia  Installs,  rnain- 
tams.  suppoils  &  enhances 
aopMcalions  Rag  Bacn  in  any 
field  8  2  yis  exp  m  the  job/2 
yrs  exp  as  Programmer 
Analyst  Jobsite  Wesi 
Greenwich.  Rhode  Island 
Send  ad  &  resume  Yen  C. 
Chong.  Amgen  Inc..  One 
Amgan  Center  Or.  Thousand 
Oaks  CA  91320-1799 
lncluOaAda02-a49FV 


INFORMATION  TCCNNOIOCY  • 
CIS  Anaiysts/Rrogranvnars  need¬ 
ed  A  spBOai  vdo  systems  eomo 
a  seeking  quat  cengidMee  po»- 
seeang  MS  or  eqwv  andw  rele¬ 
vant  won  exp  Perl  ol  the  <eq 
reievani  exp  mual  mckide  2  yrs 


Mansan.WISSTIM  PieeMreter- 


ITcareers.com  is 


the  place  where  your 


fellow  readers  are  getting 


a  Jump  on  even  more  of 


the  workfs  best  Jobs. 


Now  combined  wHh 


CareerJoumaLcom. 


You  hare  more  Jobs 


to  choose  from. 


Stop  in  for  a  visit. 


Computerworid  •  InfoWorld  *  Network  World  •  June  2,  2003 


Computerworld  *  InfoWortd  *  Netvvork  World  *  June  2.  2003 


IT  L-ai'ci'rb 


IT  L  ii  l 


Computerworld  *  June  2.  2003 


Mt  i  rfu  Nt  w 


SOUlHMESr^f?^  5u: 


SOUTHUST£RH  SlArtS'lllINCHS 


SAP 


COMnnOWOlUl  SUES  OFFICES 


OncM  (rf  Onine  SAa»/0|M«ons.  6nga 
?71-flOQ  MmgardOrimSitaiAfiimDn^ 
"Tl  “rt  fhi»r  O  ftlfT  nntrr  ^rirn  Athttmit 

Kathr  Sim  (SOQ  27^71^  900  OU  Connadieui  Mt 
Ba  9rn  Ftanwohim.  HA  OfTDI^  M  (SOB)  270- 
3682.  Inade  SHuAkuKrt  AaociHa.  Nomia  Tantumo. 
Mack  -  Cai  rv.  61  South  ftnnis  Rd.  3n]  Fknr,  l^ramus. 
NJ  0702.  (200  SB7-73M.  f«c  (201)  Te-STSe 

onminMuaiaiv 

MKSSBMLOMBfT 

Ondo.  8usnes  Ocwatopmenl  -  Mtalem  Ragen/Bi 
Kwch(9^  442-4(XI6 


ono  QUESnONS  AND  PROeiBe 

tftTr^iP  rfiTiPinanpifif  (TnWnnuiitlnrtitkitfij  laiipnnni  Irfri  Also  ■ttasschanges 

j  anhan*drimaAcMa|ifavnHHoamr.tfKiid)ajneadloiaochusg«My.a»lal(Mmgiol(iw 

'  nunteBMUIeMBBD-7tZ70HBUaNJl^(MnS66-7ia. 


t33C 

n 


NEW  ENCLAND  STATES  MMNESOTAWtSCONSm 


M 


Si 


m 


;s 


www.com(Hiterwor1d.con) 


tmmnrnkrnim 


MHiu 


How  to  Contact 


1^1  ii  :  V I :  I 


We  mviie  readers  fo  call  or  write  with  their  comments 
and  ideas.  It  is  best  to  submit  ideas  to  one  of  the  department 
editors  and  the  appropriate  beat  reporter. 
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SariianesApps 

Caribbean  Cruises  Ud^  said 
the  Miami-based  cruise  line  is 
using  software  and  services 
developed  by  Netherlands- 
based  KPMG  International  as 
part  of  its  compliance  efforts. 

Having  a  wide  range  of 
packaged  applications  that  can 
automate  Sarbanes-Oxley 
compliance  is  expected  to  be¬ 
come  increasingly  important 
for  IT  managers  in  the  coming 
months.  Accordii^  to  survey 
results  released  last  week  by 
Boston-based  AMR  Research 

Inc.^  85%  of  the  60  _ 

Fortune  IXKX)  com¬ 
panies  that  respond¬ 
ed  said  they  pl^  to 
modify  their  IT  sys¬ 
tems  to  support  the 
compliance  process. 

But  some  IT  lead¬ 
ers  are  still  trying  to 
get  their  arms 
around  the  require¬ 
ments  of  the  Sar- 
banes-Oxley  Act  — 
udiich  was  signed 


into  law  last  summer 
—  before  deciding 
on  tedmologies  that 
can  help  their  com¬ 
panies  meet  the  new 
standards. 

“We  have  yet  to  in¬ 
vestigate  the  tools 
associated  with  the  i 

S-O  Act,”  said  Bob  j 

Schwartz,  CIO  at  Ma-  j 
tsushita  Electric  Cor¬ 
poration  of  America's  Pana¬ 
sonic  Ca  division  in  Secaucus, 
NJ.  Schwartz  added  that  Pana¬ 
sonic  officials  haven't  fully  di¬ 
gested  the  new  financial  re¬ 
porting  requirements  and 
don't  plan  to  consider  buying 
new  serftware  until 
they  have  done  so. 

iWt  of  the  prob¬ 
lem  is  that  CIOs  and 
other  corporate  man¬ 
agers  are  “awaiting 
actional  guidance” 
from  the  Securities 
and  Exchange  Com¬ 
mission  on  the  spe¬ 
cific  steps  they  need 
to  take  to  achi^e 
Sarbanes-Oxley  com¬ 
pliance.  said  Harald 
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Oracle  Tools  Designed  to  Help 
Monitor  RnaiKiiarCoritrols 


New  app  automates 
audits,  sends  alerts 
about  potential  fraud 

8V  MAJtC  t.  SOMOINt 

Oracle  Corp.  is  roUii^  out 
software  tools  that  it  said  will 
enable  companies  to  automate 
a  key  part  of  tbe  process  of 
meeting  the  financial  report¬ 
ing  requirements  imposed  by 
the  SarbanesOxley  Act. 

Oracle  last  week  announced 
Internal  Controls  Manager,  an 
addition  to  its  E-Business 
Suite  appiicatious  that  can  be 
used  to  document  corporate 
financial  controls  and  test  in¬ 
ternal  processes  to  ensure 
they  comply  with  Sarbanes- 
Oxley  mandates.  Tbe  vendor 


said  it  developed  tbe  product 
with  help  from  auditing  firm 
PricewaterhouseCoopers  LLP. 
which  offered  input  on  ac¬ 
counting  best  practices. 

According  to  Steve  Miranda, 
vice  president  of  application 
development  at  Oracle,  Inter¬ 
nal  Controls  Manager  pro¬ 
vides  functionality  for  estab¬ 
lishing  a  certifiable  auditing 
process,  plus  control  features 
that  can  ^ert  auditors  or  cor¬ 
porate  executives  to  potential 
reportii^  errors  or  ftaudulent 
activities.  For  example,  users 
could  get  an  on-screen  prompt 
if  an  expense  was  mistakenly 
entered  as  an  asset. 

Companies  can  also  link  the 
software’s  documentation  ca¬ 
pabilities  directly  to  their  H- 


WtlL  president  and 
CEO  of  ACL  Services 
Ud..  a  Vancouver. 
British  Columbia- 
based  vendor  of  soft¬ 
ware  for  financial  ex¬ 
ecutives. 

San  lose-based  Nth 
Orbit  Inc  last  week 
introduced  software 
called  Ceitus  that’s 
aimed  at  helping 
companies  develop  the  neces¬ 
sary  internal  compliai>ce  proc¬ 
esses.  The  software  is  priced 
at  $100,000  to  S500.000.  de¬ 
pending  on  the  user  compa¬ 
ny’s  annual  revenue,  said  Dei- 
div  Paknad,  Nth  Orbit’s  vice 
president  of  market¬ 
ing  and  business  de¬ 
velopment. 

Certus  uses  a 
framework-driven 
approach  that  no  oth¬ 
er  technology  vendor 
has  taken,  said  AMR 
analyst  John  Hagerty. 

Other  vendors,  such 
as  Hyperion  Solu¬ 
tions  Corp.  in  Sunny¬ 
vale,  Calif,  *iuve 
tried  to  take  what 


nancial-control  procedures  so 
end  users  can  access  informa¬ 
tion  such  as  when  tbe  last  au¬ 
dit  was  performed,  who  is  re- 
^Qsible  for  a  particular 
phase  of  the  auditing  process 
or  how  revenue  is  being 
booked,  Miranda  said. 

Internal  Controls  Manager 
is  due  for  release  this  summer 
as  part  of  E-Business  Suite  and 
will  also  be  sold  as  a  stand¬ 
alone  application  for  compa¬ 
nies  that  use  other  ERP  sys¬ 
tems.  However,  Miranda  said 
users  will  have  to  develop 
their  own  software  books  to 
link  the  tool  to  applications 
from  other  vendors- 

Oracle  isn’t  alone  among 
ERP  software  vendors  in  its 
efforts  to  help  companies  deal 
with  tbe  fuiancial  reporting 
law.  SAP  AG  and  PeopleSoft 
Inc  already  offer  technologies 
similar  to  Internal  Controls 
Manager,  according  to  officials 


they  have  and  fit  it  into  Sar- 
banes-Oxlcy,"  Hagerty  said. 
Early  last  month.  Hyperion 
added  built-in  capabilities  for 
meeting  the  Sarbimes-Oxlc>' 
reporting  requirements  to  Us 
financial  management  soft¬ 
ware  (QuickUnk  383581 
In  addition,  document  man¬ 
agement  vendors  like  Docu- 
tnentum  Inc.  and  OpenText 
Corp.  have  added  workflow 
and  audit-trail  templates  to 
their  software  in  a  bid  to  help 
users  meet  some  Sarbanes- 
Oxley  requirements,  said  Re¬ 
becca  Wetiemann.  an  analyst 
at  Nucleus  Research  Inc.  in 
Wellesley.  Mass. 

■TVe  see  a  lot  of  j 
[bttsiness-inielU- 
gence]  and  workflow 
companies  saying 
they're  providing 
Sarbanes-Ox)e>'  com¬ 
pliance  solutions 
now.”  Weneinann 
said.  But.  she  added, 
it's  not  clear  whether 
the  vendors  are  “pro¬ 
viding  the  level  of 
process  [suppon] 
that’s  needed.”  I 


at  those  two  vendors. 

PeopleSoft  introduced  an 
initial  financial  reporting  ap¬ 
plication  last  year,  and  tbe 
Pleasanton.  Calif-based  com¬ 
pany  announced  the  addition 
of  Sarbanes-Oxley  compliance 
suppon  at  a  conference  last 
month  —  though  the  new  ca¬ 
pabilities  are  being  provided 
panly  as  a  services  offering. 

A  spokeswoman  for  SAP 
said  its  mySAP  Financials  soft¬ 
ware  DOW  “delivers  almost 
everything  needed  to  enable 
Sarbanes-Oxley  compliance.* 

“Everyone  is  jumping  on 
this  bandwagon.”  said  John 
Moore,  an  analyst  at  ARC  Ad¬ 
visory  Group  Inc  in  Dedham. 
Mass.  “It's  hard  to  find  an  en¬ 
terprise  resource  planning 
company  that  hasn't  men¬ 
tioned  something  about  bow 
their  solutions  or  new  en¬ 
hancements  can  help  compa¬ 
nies  comply.”  I 


SEC  Extends 

HsDeadnefbr 

Complance 

Under  a  raw  ruh  announced 
l8stwari(br$»S&tege 
pUiidif  held  comraniea  are 
beiio  grardad  a  rdne-fnandi 
extension  on  daeiina  for 
meeBng  ihe  linariaii  reportkig 
and  corticaBon  raqiaramenis 
ofSaitenaeOteay. 

The  SEC  b  now  raMting 
most  pubic  cofflpanlBs  tote- 
ckida  an  aasKsmani  of  dwk 
internal  acxxMteng  oonMs 
that  stem  oornpianoe  wlh 
Sarbanes-Oxley  as  part  of  il 
trarend  inancal  sbtemenls 
fled  after  Jim  2004 
■SmbbrUA  buajnaaaeB  and 
foreign  companas  wf  have 
unH  Aprils.  2005. 

Tba  SEC$  daebton  to  at¬ 
tend  ihe  compliance  deadbte 
prtMdas  oompantea  \irllf)  a  bi 
men  tnalNng  mom*  on  Sv- 
banerfMey.  said  AMR  fte- 
search  anbitet  John  Hsobly. 
That  could  teltewiiome  pres- 
sum.  because  tare’s  sBI 'a 
tterrandous  amoiad  of  oonfu- 
bon*  among  fT  marapars 
about  Nhb  tay  noad  to  do  to 
comply,  ha  added. 

Bui  Hteterty  said  he's  con* 
oamad  tat  some  oompams 
coiAd  uae  ta  extension  as  an 
8ICUM  to  pul  00  needed 
work.  Xofportee  govemanca 
mandteas  are  BwateUa.  and 
smart  conganias  wi  Ml  (toby 
eflorb  to  gel  com  pnetaaes 
and  coteFob  in  pliite  now.*  he 
taote  in  erased  rate. 

Some  compBias  Witt  nut- 
pla  buBvaai  unis  tbl  run  a 
nte  of  fbandal  appleaaons 
hope  to  lae  ta  SaitaaraeOx  * 
byieqiirvnettsasanappor- 
hii^  to  Mandate  on  a  ifer 
gb  corpoitei  Iranoe  ayatem. 
sih  naoeoca  teeaanavi  in 
aralia  ai  Nudaui  fteaeach. 
*)Ab  tea  ttel  aa  a  lay  iKte- 
Hon  ior  conganba  oonaidafing 
0^  [inwalmarts].' ba  rated 
-JheamHoMmn 
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Continued  from  page  / 

Sarbanes  Apps 

Caribbean  Cruises  Ltd.,  said 
the  Miami-based  cruise  line  is 
using  software  and  ser\-!ces 
developed  by  Netherlands- 
based  KPMG  International  as 
part  of  its  compliance  efforts. 

Having  a  wide  range  of 
packaged  applications  that  can 
automate  Sarbanes-Oxlcy 
compliance  is  expected  to  be¬ 
come  increasingly  important 
for  IT  managers  in  the  coming 
months.  According  to  survey 
results  released  last  week  by 
Boston-based  AMR  Research 
Inc..  85%  of  the  60 
Fortune  1.000  atm- 
panies  that  respond¬ 
ed  said  they  plan  to 
modify  their  IT  sys¬ 
tems  to  support  the 
compliance  process. 

But  some  IT  lead¬ 
ers  are  still  in,’ing  to 
got  th«Hr  arms 
around  the  require¬ 
ments  of  the  Sar- 
banes-Oxley  Act  — 
which  was  signed 


into  law  last  summer 
—  before  deciding 
on  technologies  that 
can  help  their  com¬ 
panies  meet  the  new 
standards. 

■‘We  have  >'et  to  in¬ 
vestigate  the  tools 
associated  with  the 
S-O  .\ci."  said  Bob 
Schwartz.  CIO  at  Ma¬ 
tsushita  Electric  Cor¬ 
poration  of  America’s  Pana¬ 
sonic  Co.  division  in  Secaucus. 
N.f.  Schwartz  added  that  Pana¬ 
sonic  officials  haven't  fully  di¬ 
gested  the  new  financial  re¬ 
porting  requirements  and 
don’t  plan  to  consider  buying 
new  software  until 
they  has^e  done  so. 

Pan  of  the  prob¬ 
lem  is  that  CIOs  and 
other  corpttrate  man¬ 
agers  arc  "awaiting 
additional  guidance" 
from  the  Securities 
and  Exchange  Com¬ 
mission  on  the  spe¬ 
cific  steps  they  need 
to  lake  to  achieve 
Sarbanes-Oxlcy  com¬ 
pliance.  said  Harald 


president  and 
(.T'Oof  .ACI.  serx  ices 
Ltd.,  a  V'amxtuver. 
British  Ct*iumbi.i- 
Ktsed  vendor  <*f  vtft  - 
ware  fur  financial  e\- 
ecuiive.s. 

San  Itt-se-baM-d  Nth 
Orbit  Inc.  last  wet,-k 
intrtKluced  software 
called  Cenus  that's 
aimed  at  helping 
companies  develop  the  ncces- 
sar>'  internal  compliance  prtv- 
esses.  The  software  is  priced 
at  5100.000  to  S500.000.  de¬ 
pending  on  the  user  compa¬ 
ny’s  annual  revenue,  said  l)ei- 
dre  Paknad.  Nth  Orbit's  vice 
president  of  market¬ 
ing  and  business  de¬ 
velopment. 

Certus  uses  a 
framework -driven 
approach  that  no  oth¬ 
er  technology-  vendor 
has  taken,  said  .^MR 
arulyst  John  Hagerty. 

Other  vendors,  such 
as  Hyperion  Solu¬ 
tions  Corp.  in  Sunny¬ 
vale.  Calif.,  "have 
tried  to  take  wlut 


they  ha\e  and  fit  it  jnit*  s.ir- 
banes-0\lc\."  Hagertx  s.ud 
l  arly  List  m»»nth,  Hyperion 
added  built-in  capabilittes  for 
meeting  the  Sarbant's-0\|e\ 
reporting  requirenu-rus  to  its 
financtal  management  sofi- 
warejQuickl  ink  3835K) 

In  aJditK)n.  d»Kument  man¬ 
agement  vendors  like  0«K  ti- 
I  mentum  Ine  and  DpenTe.st 
Ciorp.  have  added  workflow 
and  audit-trail  templates  to 
their  software  in  a  btd  to  help 
users  meet  M>me  S.nrbanes- 
Oxley  requirements,  slid  Re¬ 
becca  kVettemann.  an  analyst 
at  Nucleus  Research  Inc.  in 
Wellesley.  Mass. 

•We  see  a  lot  of 
Ibusiness-inielli- 
gence)  and  workflow 
companies  say  ing 
they're  providing 
Sarbam‘s.(>\ii.’\  c»*m- 
plianee  solutions 
now."  Wettemann 
said.  But.  she  added, 
it's  not  clear  whether 
the  vendors  are  “pro¬ 
viding  the  level  t*f 
priKcss  (support  I 
th.ifs  needed-'  • 


39% 

of  companies 
surveyed  said 
they  will  evaluate 
their  exBtinq 
applications 
and  try  to  take 
advantage  ot 
functionalitv 
that's  now 
uiHisvd. 


13% 

areconsider- 
ing  upgradmg 
their  financtal 
systems  to 
the  latest 
release  of 
the  software 
they  use. 


3% 

said  they  wuuid 
consider  rttoiac- 
mg  existing 
systems  with 
appficaiions  from 
a  new  vendor 


Oracle  Tools  Desipned  to  Help 
Monitor  RnancjalControis 


New  npp  .lutDmatcs 
audits,  sends  alerts 
ahnut  potential  fraud 

BY  MARC  L.  SONGINI 

Oracle  Corp.  is  rolling  out 
softw’are  tools  that  it  said  will 
enable  companies  to  automate 
a  key  part  of  the  process  of 
meeting  the  financial  report¬ 
ing  requirements  imposed  by 
the  Sarbanes-Oxley  Act. 

Oracle  last  week  announced 
Internal  Controls  Manager,  an 
addition  to  Us  E-Business 
Suite  applications  that  can  be 
used  to  document  corporate 
financial  controls  and  test  in¬ 
ternal  processes  to  ensure 
they  comply  with  Sarbanes- 
Oxley  mandates.  The  vendor 


said  it  developed  the  product 
with  help  from  auditing  firm 
BricewaierhouscCoopcrs  LLP. 
which  offered  input  on  ac- 
couniir^  best  practices. 

According  to  Steve  Miranda, 
vice  president  of  application 
development  at  Oracle.  Inter¬ 
nal  Controls  Manager  pro¬ 
vides  functionality  for  estab¬ 
lishing  a  certifiable  auditing 
process,  plus  control  features 
that  can  alert  auditors  or  cor¬ 
porate  executives  to  potential 
reporting  errors  or  fraudulent 
activities.  For  example,  users 
could  get  an  on-screcn  prompt 
if  an  expense  was  mist^enly 
entered  as  an  asset. 

Companies  can  also  link  the 
software’s  documentation  ca¬ 
pabilities  directly  to  their  fi¬ 


nancial-control  prtKedures  so 
end  users  can  access  informa¬ 
tion  such  as  when  the  last  au¬ 
dit  was  performed,  who  is  re¬ 
sponsible  for  a  particular 


or  how  revenue  is  being 
booked.  Miranda  said. 


Internal  Controls  Manager 
is  duo  for  release  this  summer 
as  part  of  E-Business  Suite  and 
will  also  be  sold  as  a  stand¬ 
alone  application  for  compa¬ 
nies  that  use  other  ERP  sys¬ 
tems.  Howcv’cr.  Miranda  said 
users  will  have  to  develop 
their  own  software  hooks  to 
link  the  tool  to  applications 
from  other  vendors. 

Oracle  isn't  alone  among 
ERI*  software  vendors  in  its 
efforts  to  help  ci.»mpanies  deal 
with  the  financial  reporting 
law.  SAP  AG  and  PeupleSoft 
Inc.  already  offer  technoktgios 
similar  to  Internal  Controls 
Manager,  according  to  officials  i 


at  those  two  vendors. 

PeopleSoft  introduced  an  ' 
irtilial  financial  reporting  ap-  | 
plication  last  year,  and  the 
Pleasanton.  Calif.-based  com-  I 
pany  announced  the  addition  ' 
of  S.irbancs-(.>\ley  compliance 
support  at  a  conference  last 
month  —  though  the  new  ea-  ' 
pabilities  are  being  provided 
partly  as  a  senices  offering 
A  spokeswoman  for  SAP  I 
said  its  mySAP  Financials  soft-  I 
ware  now  "delivers  almost  [ 
everything  needed  to  enable  | 
Sarbanes-Oxley  compliance. ''  , 

“Everyone  is  lumping  on  | 
this  bandwagon."  said  John 
Moore,  an  analyst  at  AR<'.  Ad-  i 
vLsor}’  Group  Inc.  in  Dedham. 
Ma.ss.  ~li‘s  hard  to  find  an  en¬ 
terprise  resource  planning 
ct»mpany  that  hasn't  m<*n- 
tioned  something  about  how 
their  solutions  or  new  en¬ 
hancements  can  help  compa¬ 
nies  comply."  I 


SEC  Extends 
Its  Deadline  for 
Compliance 

Under  a  new  rule  announced 
last  week  by  the  SEC.  large 
publicly  held  companies  are 
beiftg  granted  a  rune-month 
extension  on  the  deadline  for 
meeting  the  financial  reporting 
and  certifcalior  requirements 
of  Sarbanes-Oxley 
The  SEC  6  now  requinog 
most  public  companies  to  in¬ 
clude  an  assessment  ot  their 
internal  accounting  controls 
that  shows  compliance  with 
Sarbanes-Oxley  as  pari  of  aH 
year-end  financiai  statements 
hied  after  June  IS.  2004 
SmaHei  US.  bu^nesses  and 
foreign  companies  wiN  have 
itfttil  Apn!  15. 2005 
The  SEC’S  decision  to  ex¬ 
tend  the  compliance  deadline 
provides  companies  "with  a  brt 
mort!  breattwig  room*  on  Sar- 
banes-Oxtey.  said  AMR  Re¬ 
search  anal^  John  Hagerty 
Thai  could  relieve  some  pres- 
sue.  because  there's  stiM  *a 
tremendous  amount  of  confu- 
sim*  among  IT  managers 
about  t^ai  they  need  to  do  lo 
comply,  he  acKM 
But  Hagerty  said  he's  con¬ 
cerned  that  some  oompames 
coiM  use  the  extension  as  an 
excuse  to  pul  off  needed  IT 
work.  *Corporaie  governance 
mandates  are  mevdabie.  and 
smart  companies  wi  not  deiay 
efforts  lo  get  core  processes 
and  controls  m  place  now.*  he 
wrote  m  a  researdt  note 
Some  complies  with  mdti- 
ple  busmess  unfs  that  tun  a 
mu  of  finanoaf  applicalions 
hope  to  use  die  Sarbanes-Oi- 
ley  requirements  as  an  oppor¬ 
tunity  to  standardize  on  a  sxt- 
gte  corporate  hnaryoe  system, 
sad  Rdiecca  Wettemann.  an 
analyst  at  Nucleus  Research 
"We  see  that  as  a  key  motiva¬ 
tion  (or  companies  considertng 
ERP  [nvestments].*  she  noted 
*  TtiaimHoffman 
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FRANK  HAYES  •  FRANKLY  SPEAKING 


SCO’s  Sordid  Mess 


LET'S  SEE  IF  WE’VE  GOT  THIS  RIGHT:  It  turns  out  that 
SCO  Group  doesn’t  actually  have  the  Unix-related  copy¬ 
rights  and  patents  it  led  people  to  believe  it  had.  It  turns 
out  that  Novell,  from  which  SCO  implied  it  had  acquired 
those  copyrights  and  patents,  refused  to  transfer  them  to 
SCO.  And  it  hums  out  that  SCO  has  known  this  for  a  while,  because 
SCO  kept  sending  Novell  letters  asking  Novell  to  transfer  the  copy¬ 
rights  and  patents  to  SCO,  and  Novell  ignored  SCO’s  letters  (see 
story,  page  7). 


So  lots  of  what  we  thought  we  knew  about 
this  SCO  mess  turns  out  to  be  wrong.  Which 
raises  an  obvious  question:  What  do  we  know? 

Weil,  we  know  SCO  does  have  the  right  to  li¬ 
cense  Unix  source  code  to  companies  like  Mi¬ 
crosoft.  And  SCO  does  have  Unix  license  con¬ 
tracts  with  IBM,  Sun.  Hewlett-Packard  and  oth¬ 
er  hardware  and  software  vendors,  some  of 
which  it  inherited  from  AT&T,  which  created 
Unix  at  its  Bell  Labs. 

And  we  now  have  a  pretty  good  idea  of  SCO’s 
philosophy  on  the  subject  of  software  licenses 
and  other  contracts.  As  the  company  put  it  in  a 
terse,  inelegantly  worded  statement  last  week: 
"Contracts  are  ^%^t  you  use  against  parties  you 
have  relationships  with."  No  doubt  that's  useful 
to  know  for  SCO’s  6,000-odd  Unix  licensees. 
They  probably  thought  those  contracts  were 
about  a  mutual  benefit  Now  they  know  SCO 
sees  them  as  a  weapon. 

We  know  SCO  is  now  explainii^  that  its  law¬ 
suit  against  IBM  is  really  just  a  contract  dispute, 
not  a  suit  over  copyrights  and  patents  —  a  fairly 
safe  position  for  the  moment,  since  we  don't 
know  exactly  what’s  in  the  IBM  Unix  contract. 

But  SCO  isn’t  offering  explanations  for  why  it 
recently  sent  threatening  letters  to  nearly  1,500 
large  companies,  suggesting  that 
their  use  of  Linux  might  put  them  in 
legal  jeopardy  because  of  copyright 
and  patent  issues.  Most  of  those 
companies  don’t  have  contracts  that 
SCO  could  use  against  them.  In  fact, 
one  of  those  companies  was  Novell 
which  actually  owns  the  Unix  copy¬ 
rights  and  patents  that  SCO  was 
suggesting  it  had. 

We  finally  do  have  an  explanation 
for  why  IBM’s  legal  brief  respond¬ 
ing  to  SCO’s  lawsuit  was  so,  well 
brief.  If  you  haven’t  read  it  or  heard 
about  it,  IBM’s  legal  response  was 


little  more  than  a  statement  that  said  that  vir¬ 
tually  nothing  in  SCO’s  lawsuit  is  true.  Thanks 
to  Novell,  we  now  know  that  as  far  as  owner¬ 
ship  of  the  copyrighted  Unix  source  code  IBM 
originally  licensed  from  AT&T  goes,  IBM  was 
exactly  right. 

And  thanks  to  Novell,  we  now  have  a  pretty 
good  idea  of  what  happens  when  hard  facts 
meet  heavy  FUD.  Last  Wednesday  morning, 
SCO  issued  a  healthy  quarterly  financial  report 
—  the  company  was  actually  profitable  again. 
That  same  morning,  Novell  made  its  statement 
that  it  had  never  transferred  Unix  copyrights 
and  patents  to  SCO. 

Result:  SCO’s  stock  plunged,  losing  nearly 
25%  of  its  value  by  Wednesday  night.  That  lets 
us  know  pretty  decisively  what  investors  were 
looking  at  when  they  bid  up  the  pri(%  of  SCO. 
SCO’s  biggest  asset  was  the  saber  rattling  it  did 
for  its  billion-dollar  lawsuit  against  IBM.  And 
now  investors  no  longer  believe  there’s  any 
saber  left  to  rattle. 

So,  to  summarize:  SCO’s  lawsuit  against  IBM 
turns  out  to  be  a  lot  narrower  than  SCO  had  im¬ 
plied.  SCO’s  claims  against  companies  that 
don’t  have  contracts  with  SCO  turn  out  to  be 
nonexistent.  And  SCO’s  inflated  stock  turns  out 
to  have  nowhere  to  go  but  down. 

Which  means  there  are  really 
just  two  thii^  left  that  we  don’t 
know  when  it  comes  to  SCO. 

We  don’t  know  whether  SCO  can 
actually  be  saved  from  the  hole 
that  CEO  Dari  McBride  has  dug  for 
it  —  reputation  damaged,  credibili¬ 
ty  shot,  customer  hostility  at  an 
all-time  high. 

And  we  don’t  know  how  much 
longer  it  will  take  before  Ray  Noor- 
da.  who  owns  neariy  half  of  SCO. 
will  finally  pull  the  plug  on  this 
sordid,  sorry  mess.  I 


what  you’re  worth? 


m 


Find  out  when 
Computerworld 
publishes  the 
results  from  our 
17th  Annual 
Salary  Survey  of 
IT  Professionals! 


How  much  are  other  IT  professionals  with  your  experience  and  credentials  earning? 
With  help  from  you  and  your  IT  colleagues  across  the  country,  Computerworld  will 
answer  those  questions  with  results  from  our  17th  Annual  Salary  Survey. 

Please  take  our  survey  now  and  enter  a  drawing  to  win  a  $499  gift  certificate  from 
Amazon.com.  Our  survey  period  closes  on  Thursday,  July  3  at  5:00  p.m. 

Survey  results  and  feature  stories  that  offer  practical  career  advice  will  be  published  in 
the  October  27, 2003,  issue  of  Computerworld.  The  issue  will  offer  detailed  informa¬ 
tion  on  average  salaries  and  bonuses,  by  title,  industry  and  region.  You'll  be  able  to 
compare  your  organization's  compensation  plans  with  those  of  other 
organizations  and  find  the  hottest  areas  of  the  country  for  IT  pay. 

COyPUTElWIIILD 


SALARY 

SURVEY 

2003 


To  take  the  survey,  and  qualify  for  the  drawing,  go  to: 

compiitenwortd.coiii/ss2003 


THE  NEW  SUN  FIRE  ”  V6oX  SERVER: 

>  INTEL  XEON  PROCESSOR 

>  RUNS  SOLARIS  “  9  FOR  X86  OR  LINUX  OS 


Micfosy^tems,  the  Sun  logo.  Solaris  and  Sun  fire  are  trademarks  or  registered  trademarks  of  Sun  Microsystems,  Iftt.  in  the  United  States  and  other  countries.  All  other  trademarks  are  property  of  their  respective  owners. 
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Buyout  Bids  Rock 
ERP  Landscape 

Oracle  makes  hostile  I  Baan  sale  breathes  life 
offer  for  PeopleSoft  into  stn^^ing  vendor 


ACQUISITIONS 


ev  MARC  L.  SOHOINI 

In  a  stunning  turn  of  events, 
Oracle  Corp.  on  Friday  said  h 
will  make  an  unsolicited  S5.1 
billion  offer  to  buy  rival  Peo- 
pleSoft  Inc^  a  maneuver  that 
came  just  four  days 
after  PeopleSoft  an- 
noimced  a  merger 
with  J.D.  Edwards  &  Co.  that 
would  propel  it  past  Oracle  in 
sales  of  business  applications. 

PeopleSoft  and  J.D.  Edwards 
users  reacted  with  dismay  to 
the  hostile  takeover  bid  by 

PeopleSoft,  page  61 


rr  Managers 
See  Need  for 
Risk  Metrics 

Pressure  on  to  prove 
security  effectiveness 


Technology  mana^rs  trying 
to  justify  and  prioritize  IT  se¬ 
curity  spendi^  are  searching 
for  some  way  to  quantify  the 
risk  management  benefits. 

But  a  lack  of  standard  proc¬ 
esses  and  the  wide  variability 
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Users  of  Baan  International 
BV's  ERP  software  welcomed 
with  relief  last  week’s  sale  of 
the  struggling  company  to 
new  owners  that  plan  to  com¬ 
bine  it  with  SSA 
Global  Technolo¬ 
gies  Inc.,  a  second- 
tier  applications  vendor  that  is 
also  trying  to  rebound  ftom 
years  of  financial  problems. 

“I  think  this  will  be  a  good 
thing  for  Baan,"  said  Keith 
Bearden.  CIO  at  A-dec  Inc.,  a 
Boon,  page  61 


of  factors  that  affect  risk  are 
making  it  hard  for  companies 
to  collect  such  metrics,  users 
said  last  week  at  a  conference 
here  organized  by  Gartner  Inc. 

"There  is  an  increasing  fo¬ 
cus  on  measuring  security  ef¬ 
fectiveness,"  said  Carl  Cam- 
marata.  chief  information  se¬ 
curity  ofiFlcer  at  automobile 
association  AAA  Michigan  in 
Risk  Metrics,  page  M 
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fetPla^ces 

•“mrkfr 

IT  workers  have  taken  their  lumps  in  this  dismal  JL. 
ecoriOTy,  but  not  everyone  is  struggling.  Even  in 
hard  times.  Coinput8iwori(f  s  top  100  IT  employers  shower 
their  staffs  with  the  promotions  and  projects  they  crave.  Ow  10th 
annual  spapM  report  shows  how  these  Best  Places  find  inven¬ 
tive  ways  to  keep  th^r  IT  employees  focused,  challenged  and 
proud  of  their  work.  Stories  begin  on  page  23. 
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Computervworld  Honors  winners  inspire  their  peers  at  a  Washington  awards  ceremony. 

It  will  take  IT  men  and  women  of  steel  to  defend  against  a  regulatory  onslaught,  says  Patricia  Keefe, 
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Buyout  Bids  Rock 
ERP  Landscape 


Oracle  makes  hostile 
offer  for  PeoplcSoft 

BY  MARC  L.  SONQINI 

In  a  stunning  turn  of  events. 
Oracle  Corp.  on  Friday  said  it 
will  make  an  unsolicited  $5.1 
billion  offer  to  buy  rival  Peo- 
pleSoft  Inc.,  a  maneuver  that 
came  just  four  days 
after  PeopleSoft  an¬ 
nounced  a  merger 
with  J.D.  Edwards  tic  Co.  that 
would  propel  it  past  Oracle  in 
sales  of  business  applications. 

PeopleSoft  and  J.D.  Edwards 
users  reacted  with  dismay  to 
the  hostile  takeover  bid  by 

PeopleSoft,  page  61 


IT  Managers 
See  Need  for 
Risk  Metrics 

I’rcssurc  on  to  prove 
seeuritv  cffectixeness 


Technology  managers  trying 
to  justify  and  prioritize  IT  se¬ 
curity  spending  are  searching 
for  some  way  to  quantify  the 
risk  management  benefits. 

But  a  lack  of  standard  proc¬ 
esses  and  the  wide  variability 
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Baan  sale  bR'athes  life 
into  struggling  x  endor 

BY  MARC  L.  SONOINi 

Users  of  Baan  International 
BV’s  ERP  software  welcomed 
with  relief  last  week's  sale  of 
the  struggling  company  to 
new  owners  that  plan  to  com¬ 
bine  it  with  SSA 
Global  Technolo¬ 
gies  Inc.,  a  second- 
tier  applications  vendor  that  is 
also  trying  to  rebound  from 
years  of  financial  problems. 

‘i  think  this  will  be  a  good 
thing  for  Baan,”  said  Keith 
Bearden.  CIO  at  A-dec  Inc.,  a 
Baan,  page  61 


of  factors  that  affect  risk  are 
making  it  hard  for  companies 
to  collect  such  metrics,  users 
said  last  week  at  a  conference 
here  organized  by  Gartner  Inc. 

“There  is  an  increasing  fo- 
cus^n  measuring  security  ef¬ 
fectiveness."  said  Car!  Cam- 
marata,  chief  information  se¬ 
curity  officer  at  automobile 
association  AAA  Michigan  in 
Risk  Metrics,  page  14 

Help  From  the  Feds 

A  NIST  Standard  coveting  security  risk 
assessment  in  the  government 
also  be  helptui  tor  corporations; 
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BestPlaces 

‘"Workfr 

IT  workers  have  taken  their  lumps  in  this  dismal  -JL  J,. 
economy,  but  not  everyone  is  struggling.  Even  in 
hard  times.  Computerworld'stop  100  IT  employers  shower 
their  staffs  with  the  promotions  and  projects  they  crave.  Our  10th 
annual  special  report  shows  how  these  Best  Places  find  inven¬ 
tive  ways  to  keep  their  IT  employees  focused,  challenged  and 
proud  of  their  work.  Stories  begin  on  page  23. 


Securing  your  5,000-user  network  requires  a 


Introducing  Microsoft  Windows  Server  2003.  Do  more  with  less. 


Softvvjre  for  the  Agile  Business. 


V\.nu,-,v.s  SL-  v't'"  '03  is  designed 

suiution  vvitn  less  time,  money. 
■  •;;''0!t.coin  ■vMndowsserver2003 


■r  'Lctlionsitifrastrocture 
security  features 
c:r  V  6.000  employees. 
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Windows  Server  2003 


WATCH  YOUR 
BACK: 
VERITAS. 


BrightStor  ARCserve*  Backup  v9  beat  Veritas™  Backup  Exec™  v9  hands  down  in  on  independent 
study  conducted  by  CCI  Communications.  According  to  CCI: 

•  BrightStor  ARCserve  backs  up  1 5-20%  foster  than  ^itos  Bockup  Exec. 

•  BrightStor  ARCserve  is  r>early  4X  foster  to  install  than  Britos  Backup  Exec 
in  a  reel-world  environment. 

•  BrightStor  ARCserve  has  no  restrictions  on  backing  up  remote  servers, 
unlike  Vferitas  Backup  Exec. 

•  BrightStor  ARCserve  has  fewer  steps  to  initial  backup  then  'Writes  Backup  Exec. 


6  Asia  8  ris6  as  a  chip  manufacturing 
power  poses  workforce  and  security 
risks  for  the  U.S.,  contends  Sen. 
Joseph  Lieberman  in  a  new  report. 

7  A  Yukon  dalay  could  be  painful  for 
early  adopters  of  Microsoft  SQL 
Server  and  purchasers  of  Software 
Assurance  agreements. 

8  WorldCom  denias  allegations  that  it 
improperly  won  government  voice 
and  data  services  contracts. 

10  E'lnail  archivino  and  search  soft¬ 
ware  from  a  start-up  challenges 
EMC’s  Centera. 

12  CAW  axits  the  U.S.  Web  hosting  mar¬ 
ket,  but  some  users  aren’t  surprised 
after  their  experience  with  Exodus. 

14  Many  usars  are  willing  to  accept 
liability  for  developing  faulty  soft¬ 
ware,  a  Gartner  survey  reveals. 

16  Computerworid  Honors  recipients 
talk  about  the  lessons  they’ve 
learned  from  Sept.  11,  at  gala  in 
Washington. 

17  Brocade  boosts  security  in  the 

fourth  generation  of  its  SAN  software. 
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Wrat  dots  it  tan  to  bt  a  top  n* 
empbyor?  More  than  11.500 
n  workers  told  us  lidiat  they 
value  in  their  employers  in 
our  10th  annual  Best  Places 
survey.  Ifs  more  than  com¬ 
petitive  pay.  health  insur¬ 
ance  and  sufiicieDt  vacation 
time.  IT  woiters  want  to  use 
cutting-edge  technology, 
work  femily-flexible  hours 
and  have  access  to  the  train¬ 
ing  they  need  to  enhance 
their  skills.  Our  special  report 
shows  how  the  100  Best 
Places  for  2003  are  giving 
their  sta£&  what  they  crave. 
STORES  BEBM  ON  MBE  21 

28  l^nR  SynNwn.  Hie  eanomic 
downturn  fiMced  even  Best  Places  to  Ijy 
off  IT  workers  last  year.  How  did  Uwy 
survive?  Open  communicatioo  was  tte 
driving  force.  "Our  en^loyees  eqiect 
that  we  will  ttil  diem  udM  we  know 
vriienweknow 
1*  sqv  ADmer- 
icaaOGteg 
’nanter  (left), 
bi  additkm.  we 
offer  some  dps 
for  manigers  on 
handling  layoffs 
wkfa  directness 
andbooesty. 

28  CMi  of  8m  Dip.  Wf  offer  a  look  at 
the  technology  projects,  cballei^  and 
unique  management  qiproaches  at  the 
mp  three  Best  Places. 


■  At  Na  1-ranked  Hersbey  Foods,  the  pace 
of  technology  innovadon  keeps  things  to- 
teresting  for  the  IT  staff  (120  projects  are 
currendy  under  way).  "From  a  techie 
standpoint,  you  never  get  stale,*  says  one 
emf^oyee.  Page  29 

•IT  staffers  at  Hariey-Davidson  (Na  2) 
ride  high  on  the  company's  oltracool 
nrystique  and  a  slate  of  new  proiects,  in¬ 
cluding  one  that  allows  potmitial  buyers 
to  customize  their  dream  bikes,  ftgi  2B 

■  Na  3-ranked  Universicy  of  Miami 
boasts  a  location  dut  offen  its  IT  staff 
surf  and  sua  Add  to  that  the  opportuni¬ 
ties  for  education,  flezdme  and  upward 
mobility.  PligiS2 

MBMUcingAct  Demands  on  IT 
workers  are  increasing.  But  Best  Places 
^ve  managers  the  power  to  help  IT  em¬ 
ployees  find  individualized  ahonaUves 
for  managing  work  and  peraooal  dme. 

HWtbakadal 
howcanwe... 
pulowanployns 
daMrtohaiM,ml 
MVtiMdourinlar 
nrimlWDtktodotlHt 


■EmoaacMEu. 

souncmi  CNJFORNU  EOGON 

W  no  BmI  Pint  li  Wvk  kl  IT.  See  the 

full  list  of  top  100  compenics,  taited  by 
overall  rankhig.  with  dtta  oo  training  staff 
turnover  and  promockms.  Phis,  bow  we 
oooducted  this  year's  survey. 


88  SftMrvMlm.  In  our  survey  34%  of 
IT  ei^loyees  said  they  find  thdr  w<xk 
MreatfuL  Check  out  t^  from  IT  workers 
and  managers  about  sttesa-teduction  ini- 
dadves  that  wwk.  such  as  Che  on-site 
workout  room  at  fteddk  Mae. 
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AT  DEADLINE 


Credentiais  of  DHS 
Official  in  Question 

Ljun  Calahan.  d«puty  CIO  of 
(he  Dopartmont  of  Home* 
lend  Security  (OKS),  was  put  on 
admMsInttvo  paid  leave  last 
week  aHar  questions  surfaced 
aboid  her  academic  quaMca* 
dons,  a  DHS  spokesemman  con¬ 
firmed.  Tlie  move  came  after 
members  of  Congress  contacted 
the  OKS  about  afiegatlonB  that 
CaUian  had  received  her  acad¬ 
emic  credonttais  from  a  'dkiioma 
mStr  and  about  the  deparbnent's 
policy  on  background  cheeks. 


Sun  to  Demo  Rapid 
Development  Tod 

Sun  Ifierosystsms  he.  at  Java- 
Otm  this  sreek  ivff  armounca  a 
hoi  code-named  ^ofect  Rave 
and  aknad  at  corporate  develop¬ 
ers  who  need  to  rapidly  build 
Wab  baaed  appfiertione.  The 
tool  aipoctod  to  ship  next  year, 
wfl  anabia  devalopars  to  build 
appicahone  that  can  ba  deployed 
on  any  standards-basad  Jam  ap- 
plcatton  server,  offidab  said. 


Outlook  for  Tech 
Spending  Stii  Weak 

WNh  a  m^orily  of  North  Ameri¬ 
can  companies  surveyed  sapa- 
rataly  by  Formstar  Research  he. 
and  Mato  Qnwp  he.  said  they're 
hoUhgtoeadywilhtheirfTbiid- 
oeto  for  the  yaw.  23%  and  30% 
of  the  rwpondants.  raapectiveiy. 
said  they  phn  to  shrlrdi  thak 
tochnoiegy  spandhg.  The  resuRs 
hd  Forrestor  to  revise  Its  2003 
IT  epandtog  forecast  downward 
from  the  19%  average  budget 
hcreese  II  profectod  to  1.3%. 


Short  Takes 

■no.  COfIP.  and  SUN  today  said 
they're  cdaberoNnQ  in  an  effort 
to  optimize  Jmm  applcaltoni  for 
aioMh  devtoee  baaed  on  htoTs 
XScMi  preooaoors. . . .  The  U.S. 
DCPMITMENTOFOeFEItSEoffl- 
daly  Mtoorizad  tfw  UM  of  open- 
source  software  hlamaly. 


Asia’s  Rise  as  Chip  Power 
Causes  Security  Concerns 


Producrion  shift 
also  a  labor  issue, 
US.  senator  warns 


National  security 
—  and  high-tech 
lobs  —  could  be  en¬ 
dangered  if  the  US- 
doesn't  stop  semiconductor 
manufacturing's  accelerating 
shift  to  countries  in  Asia,  par¬ 
ticularly  China.  That  was  the 
wanting  of  US.  Sen.  Joseph 
Lieberman  (D-Conn.)  in  a  re¬ 
port  delivered  to  U.S.  Secre¬ 
tary  of  Defense  Donald  Rums¬ 
feld  la.st  week. 

A  continuing  migration  of 
semiconductor  manufacturing 
to  Asia,  along  with  the  poten¬ 
tial  loss  of  researcb-and- 
design  centers,  has  grave  na¬ 
tional  security  implications, 
according  to  the  report,  titled 
"National  Aspects  of  the  Glob¬ 
al  Migration  of  the  US.  Semi¬ 
conductor  Industry." 

If  that  trend  continues,  “the 
VS.  will  lose  the  ability  to  re¬ 


liably  obtain  high-end  semi¬ 
conductor  integrated  circuits 
from  trusted  sources,"  the  re¬ 
port  states. 

Reversing  the  trend  will  re¬ 
quire  a  variety  of  actions,  in¬ 
cluding  enforcement  of  trade 
regulations  to  prevent  Chinese 
companies  from  discounting 
their  chips  and  the  use  of  de¬ 
fense  contracts  to  help  build 
up  the  U.S.  semiconductor  in¬ 
dustry,  according  to  the  report. 

Despite  the  stark  security 
warning,  Craig  Casey,  a  profes¬ 
sor  of  electrical  and  computer 
engineering  at  Duke  University 


in  Durham.  N.C.,  who  has  ad¬ 
vised  defense  agencies  on  elec¬ 
tronics  issues,  said  the  shift 
overseas  “is  more  of  an  eco¬ 
nomic  than  inilitar>'  threat." 

Casey  said  the  US.  remains 
the  leader  in  high-perfor¬ 
mance  semiconductor  devel¬ 
opment  on  the  strength  of  In¬ 
tel  Corp..  Texas  Instruments 
Inc.  and  IBM.  And  that  lead 
will  be  retained  “until  Intel 
pulls  up  its  stakes  and  leaves 
California —  Then  it’s  anoth¬ 
er  game."  he  said  facetiously. 

"The  reality  for  us  is  that  it’s 
a  global  market,"  said  Intel 


I 


Chitta,  in  particular,  rs  gaining  ground  in  semiconduclui  rnanufactu/mg 


spokesman  Chuck  Mulloy, 
who  noted  that  70%  of  its 
sales  come  ftom  outside  the 
US.  and  that  Asia-Pacific  is  its 
largest  geographical  market. 

Of  Intel's  78,700  employees. 
65%  are  based  in  the  US.,  a 
percentage  that  has  remained 
fairly  constant  for  the  past 
several  years,  Mulloy  said. 

And  four  of  the  company’s 
five  most  recently  built  fabri¬ 
cation  plants  are  in  the  U.S. 

But  revenue  numbers  from 
Framingham.  Mass.-based  IDC 
show  significant  growth  in  the 
Asia-Pacific  chip  market.  Last 
year,  total  semiconductor  rev¬ 
enue  in  that  region  was  just 
over  S51  billion,  a  28%  increase 
from  2001.  Revenue  in  North 
America,  meanwhile,  was 
S51  billion,  representing  a  13% 
decline  from  the  previous  year. 

George  Scalise,  head  of  the 
Semiconductor  Industry  Asso¬ 
ciation  in  San  Jose,  said  there 
has  been  an  unquestionable 
shift  to  manufacturing  In  the 
Asia-Pacific  region.  But  he 
said  80%  of  the  manufacturing 
by  U.S.-based  semiconductor 
companies  is  still  done  in  the 
US.,  representing  40%  of  the 
world's  output. 

The  U.S.  clearly  is  the  lead¬ 
ing  chip  innovator.  Scalise 
said,  adding  “I  think  we  can 
maintain  that.”  I 


Nortel  Technology  Links 
IP,  Digital  PBX  Systems 


Common  operating 
software  due  in  Oct. 


BV  MATT  HAMBLCN 

Nortel  Networks  Ltd.  today 
will  unveil  plans  to  deliver 
common  operating  software 
for  its  Succession  line  of  IP 
private  branch  exchange  (PBX) 
systems  and  its  older  Meridian 
1  digital  voice  switches. 

llte  announcement  will  be 
made  at  the  annu^  Interna¬ 
tiona)  Nortel  Networks  Merid¬ 
ian  Users  Group  conference, 
which  is  being  held  in  Las  Ve¬ 
gas.  However.  Nortel  doesn't 
plan  to  ship  the  Succession  En¬ 
terprise  Software  Release  33) 


technology  until  October. 

Once  the  software  is  avail¬ 
able,  companies  with  Meridian 
I  switches  will  be  able  to  use 
them  to  provide  the  same  func¬ 
tionality  as  an  IP-based  PBX, 
said  Arm  Swenson,  a  senior 
product  marketing  manager  at 
Nortel  in  Brampton,  Ontaria 

The  cost  and  complexity  of 
investing  in  IP  devices  has 
been  a  barrier  to  many  compa¬ 
nies.  so  being  able  to  run  IP 
software  on  a  Meridian  1 
switch  is  “a  great  direction  for 
Nortel  to  be  going,’*  said  Mari¬ 
anne  Collin,  president  of  the 
Dallas-based  Meridian  user 
group,  which  has  more  than 
7,000  members  and  operates 


osavEw 


independently  of  Nortel 

Three  years  ago,  Clarica  Life 
Insurance  Co.,  where  Collin 
works  as  telephony  services 
manager,  decided  to  install 
Meridian  1  switches  instead  of 
IP  hardware  at  an  office  in  Wa¬ 
terloo.  Ontaria  CoUin  said  she 

thinks  that’s  an  in-  _ 

vestment  Clarica  — 
now  a  division  of 
Sim  Life  Financial 
Services  of  Canada 
Inc.  —  wants  to 
maintain. 

Swenson  said  the  - 

new  software  will  suppon 
Meridian  1  systems  as  well 
as  Nortel's  Succession  Com¬ 
munication  Server  for  Enter¬ 
prise  1000  IP  PBX  and  its  up¬ 
coming  Succession  lOOOM 
device,  which  is  also  due  in 
October.  IP  telephony  features 
that  will  become  available 
to  Meridian  users  include 


Mentan  user  (roup  duel 
her  take  on  Nortefs 
toeslmoves; 

OQuickLMt  39021 


greater  scalability  and  reliabil¬ 
ity,  intelligent  call  routing  and 
remote  access  to  applications 
running  centrally. 

Barry  Marks,  an  analyst  at 
PBI  Media  LLC’s  InfoTech 
subsidiary  in  Parsipanny,  N.J.. 
said  the  new  software  will  give 

_  Meridian  1  users 

“the  opportunity  to 
migrate  to  an  IP 
telephony  platform 
without  a  forklift 
change."  Although 
Nortel's  approach 
won't  provide  “a 
truly  unified  IP  environment, 
it's  a  solid  step  in  that  direc¬ 
tion  for  Meridian  users." 

Marks  said. 

He  added  that  installing  the 
Succession  33)  software  on  a 
Meridian  1  switch  could  save 
tens  of  thousands  of  dollars 
compared  with  buying  an  all- 
new  IP  PBX  ftom  NorteL  I 


SQL  Server  Delay 
May  Inflict  Pain 

Many  Microsoft  users  unfazed,  but  some 
early  adopters  anxious  to  get  new  features 


BV  CAROL  8LIWA 

DALLAS 

The  delay  of  Microsoft  Corp.'s 
SQL  Server  release  code- 
named  Yukon  to  the  second 
half  of 2004  won’t  matter  much 
to  the  scores  of  corporate  users 
who  already  are  hani-pressed 
to  keep  up  with  new  releases. 

But  the  slippage,  announced 
last  week  at  the  company’s 
TechEd  2003  conference,  may 
cause  pain  for  some  users  — 
especially  those  who  are  anx¬ 
ious  to  use  the  database  serv¬ 
er’s  improved  features  and  po¬ 
tentially  some  who  bought 
into  Microsoft’s  Software  As¬ 
surance  maintenance  program. 

“Database  mirroring  looks 
so  useful  that  we  would  be 
testing  it  today  if  it  were  avail¬ 


able.  It  looks  tike  we  could  use 
it  for  applications  that  require 
high  availability  and  for  appli¬ 
cations  that  require  remote 
disaster  recovery."  said  Bill 
McNabb.  a  Concord.  Calif.- 
based  database  administrator 
at  Bank  of  America  Corp. 

Keith  Gilbert,  an  enterprise 
data  architect  at  Labor  Ready 
Inc.  in  Tacoma,  Wash.,  said 
he's  excited  about  the  integra¬ 
tion  of  the  .Net  Framework’s 
Common  Language  Runtime 
(CLR)  in  Yukon,  which  will 
mean  developers  won’t  be  re¬ 
stricted  to  using  T-SQL  to  pro¬ 
gram  to  the  database. 

’’I’m  kind  of  heartbroken 
about  the  delay."  Gilbert  said. 

Paul  Flessner.  senior  vice 
president  of  Microsoft’s  Win¬ 


dows  Server  System  division, 
attributed  the  slippage  to  the 
need  for  a  yearlong  beta  for 
quality  assurance  and  the 
added  time  required  to  embed 
the  CLR  into  SQL  Server,  a 
joint  effort  vrith  the  company's 
tools  team.  TTie  original  time 
frame  for  shipment  w’as  the 
end  of 2003.  according  to  Scan 
Sorensen,  director  of  SQL 
Server  product  management. 

“I  always  said  1  wouldn’t  do 
more  than  a  36-month  release, 
and  here  I  find  myself  doing 
that.  But  you  know,  it’s  the  cir¬ 
cumstances  we're  in.”  Flessner 
'  said.  He  noted  that  the  current 
version  of  SQL  Server  shipped 
in  August  2000. 

The  longer  wait  for  useful 
new  featiu^  isn’t  the  only  po¬ 
tential  aggravation  for  some 


companies.  Depending  on  the 
month  in  which  Yukon  ships 
in  2004,  the  delay  opens  up 
the  possibility  that  some  early 
adopters  of  Microsoft’s  Soft¬ 
ware  Assurance  agreement 
may  fail  to  see  a  SQL  Server 
upgrade  during  their  contract 
period.  But  Flessner  said  he’s 
less  worried  about  product  de¬ 
lays  knowing  that  Microsoft 
made  changes  to  Software  As¬ 
surance  to  bring  additional 
value  to  the  program  fQuick- 
Link  387531. 

Flessner  said  Microsoft  con¬ 
ducted  extensive  surveys  of 
customers  because  “there  was 
a  consensus  that  the  value 
proposition  wasn’t  good 
enough"  for  Software  Assur¬ 
ance.  He  said  Microsoft  asked 
if  they  wanted  a  "guaranteed 
release.”  but  that  offer  didn’t 
test  well.  The  “day-to-day  val- 
I  ueofhaving  support"  did. 
Flessner  said. 

Starting  in  September,  cus¬ 
tomers  will  be  able  to  receive 
Web  or  telephone  support,  de¬ 
pending  on  their  license  level. 

But  several  TechEd  atten¬ 
dees  said  they  expect  an  up¬ 
grade  to  be  part  of  a  three- 
year  Software  Assurance 
agreement,  with  support  In 
addition  to  that. 

“You  buy  it  for  the  whole 
enchilada."  said  Gilbert.  “1 
think  you  should  expect  at 
least  one  upgrade  during  the 
three  years." 

They  should  throw  in  sup¬ 
port  for  what  you  pay  for  their 
products."  said  lay  Hall,  a  unit 
manager  of  server  engineering 
at  Blue  Cross  and  Blue  Shield 
of  Alabama  in  Birmingham. 
"With  IBM  and  everybody 
else,  we  don’t  have  to  pay.  It’s 
part  of  what  you  get." 

Microsoft  often  makes  the 
argument  that  its  products 
cost  considerably  less  to  start 
with,  so  its  overall  costs  are 
lower,  even  though  its  mainte¬ 
nance  percentages  are  higher 

Some  users  said  they  would 
expect  an  extension  or  a  dis¬ 
count  if  they  didn't  get  an  up¬ 
grade  before  Software  Assur¬ 
ance  expired.  “I’d  be  pretty 
upset,  but  what  are  you  going 
to  do?  Sue  Microsoft?"  said 
Dan  Foster,  a  senior  computer 
specialist  at  Duval  County 
Sdioob  in  lacksonviUe.  Fla.  I 
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SK  Lxx)ldng  Into 
IBM’s  Accounting 

BMdhdoMdtlMtlfwU^Se- 
curWnandExchangwCofnmM- 
sien  has  iMndMd  A  tarmai  in* 
vettlQrfQn  olHg  accounting 
practicM  for  2000  ml  2001. 
Tho  company  dafondad  its  rav- 
anua-facegaitfon  poldas  and 
taU  tha  see  M  daacr«i«  tho 
pnba  aa  *a  fact*finAiB  imrasti* 
gaOon”  at  tMs  point.  TIm  probt 
aaama  to  hava  baan  triogvad  by 
an  SK  Infailigalioo  of  an  un* 
idantffiad  cuatomar,  IBM  said. 


aog - Mm.  ta«-  --  ^ 

MKTO&on  Warns  or 
Wsb  Browser  Holes 

Mfcroaoft  Carp,  oparaad  of  two 
aocurily  Haws  Hurt  affact  al  cur¬ 
rant  varaiena  of  Rs  intamot  Ei- 
plarar  VM>  browaar  on  oparating 
ayatom  roiaaaas  up  to  Windows 
Sorwar  2003.  But  tfw  company 
sMd  tlw  doMuH  configuration  of 
Iho  now  oparating  system  isn’t 
wdnorablo.  Aa  a  raaidt.  N  ratad 
tte  fiawi 'modorWa*  for  Win¬ 
dows  Sorwsr  2003  Md ’’erttiear 
for  oHiar  varilons. 


General  Dynamics 
Wins  Army  Pact 

Oonoral  Dynamka  Corp.  said 
tfia  liS.  Aimy  has  awairdad  H  a 
HKyaar  eonlraet  wMi  a  waAia 
of  up  to  S2  bMtan.  to  provido  fT 
predaeto  to  tfia  U.S.  Dapartmant 
of  Oofonoo  and  otfior  fadsrai 
aganeiis.  Tfia  daal  rapiaoaa  an 
aarfiar  fO-ysar  caafiad  that 
was  duo  to  aipirs  to  Aprfi  2005. 
Ml  Church.  Va.-fiaaad  Bonoral 
Oynandcs  aaU  N  has  raealvod 
about  nOO  isMon  ararlh  of  or- 
dars  uodar  tfia  aaisting  pad 


Short  Takes 

SUN  MKROSySTOS  MC.  ttod 
R  has  cut  pricaa  by  up  to  25% 
on  Ra  oight-praoiaor  Sun  Rra 
V8B0  aarvar  and  20%  on  too 
fnr-CPU  V480  fflodoL . . .  RTTB. 
COHP.  raiooaad  thrsa  now  var- 
aionaafIbaPiiNinmMproc- 
aasorimd  as  part  of  Rs  Cantrtoo 
cMpaatformoblaPCs. 


MARK  HALL  •  ON  THE  MARK 

Herding  Cowboy 
Coders  to  Conform . . . 

. . .  to  standard  development  practices  is  one  of  the  toughest  jobs  for 
IT  management,  says  Adam  Kolawa,  CEO  of  Parasoft  Corp.  Program¬ 
mers’  individuality  and  temperament  often  get  in  the  way  of  their  fol¬ 
lowing  even  well-defined  process  procedures.  And  saying  "pretty 
please”  won't  idways  work,  either.  Most  managers  think  that  if  everyone 
uses  the  same  product  set.  standard  practices  will  result.  Not  so.  says 
Kolawa.  “Even  if  they  all  have  the  same  tools,  it  isn’t  good  enough,”  he 
argues.  “You  need  to  impose  uniform  settings  on  the  tools  and  uni¬ 
form  reporting  on  how  they  are  using  the  tool  in  practice."  What  bet¬ 
ter  place  to  yank  the  reins  on  developers  than  at  this  week’s  favaOne 
leads  the  development  of  the  Open- 


Conference  in  San  Francisco?  Thai's 
where  the  Monrovia,  Calif.-based  com¬ 
pany  will  unveil  Parasofi  Java  Solution, 
which  provides  Java  developers  with  col¬ 
laboration  capabilities  and  managers 
with  ways  to  impose  “forced  coding  prac¬ 
tices.”  And  lust  to  make  sure,  the  prcduct 
spits  out  reports  that  show  how  well  the 
group  and  individuals  within  it  are  ad¬ 
hering  to  those  practices. 

You  can  start  cniditog  tot 
wWp  for  $50,000.  •  Sun 
Microsystems  Inc.  gives 
open-source  boosters  a. 
um.  boost  this  week  when 
it  teams  with  ZcikI  Tech¬ 
nologies  Ltd.  in  Tel  Aviv 
and  seeks  expected  ap¬ 
proval  of  Java  Spacffictokm 
Raquast  (JSR)  *223  by  the 
lava  Executive  Committee 
at  JavaOne.  What's  the 
big  deal  for  this  |SR? 

(}SRs  are  precursors  to 
oflicially  sanctioned  Java 
standards.)  Well  Zend 
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source  PHP  scripting  language  that  is 
currently  used  on  more  than  9.S  million 
Web  sites.  It's  a  preferred  tool  to  invoke 
all  that  front-end  dynamic  HTML  we  see 
today,  lava,  as  you  know,  is  widely  used 
on  the  back  end.  But  getting  PHP  .scripts 
to  be  recognized  by  lava  apps  isn't  easy. 

A  standard  process  would  help.  What's 
interesting  here  is  that 
Sun  to  puafitog  a  non-Java 
scripting  language.  Could 
it  be  a  defensive  move 
against  Microsoft  Corp.'s 
Active  Server  Pages 
scripting  language?  Gee, 
ya  think?  ■  PHP  gets  an¬ 
other  shot  in  the  arm 
when  EJB  Solutions  liu:. 
adds  it  to  its  exclusive  100 
top  opeo-source  products 
in  its  Out-of-the-Box  2.1 
open-source  collection  at 
the  end  of  the  month.  Rod 
Cope,  CEO  of  the  High¬ 
land.  Cola,  company,  says 


his  team  regularly  pores  over  80,000 
opan-sourca  protocti  currantly  ktofitog 
around  on  the  Internet  and  chooses  the 
ones  that  will  best  serve  his  Fortune 
2,000  customers.  The  package  includes 
simple  install  and  uninstall  features  and 
copious  documentation.  The  2.1  release 
will  also  add  plug-ins  for  Apache  Oracle 
support  for  JBoss;  and  what  Cope  calls 
the  hottest  new  open-source  developer 
product.  Hibernate,  an  object-mapping 
tool  for  databases.  For  $70,  you  can’t  go 
wrong.  •  What  IT  facaaaton?  Michael 
Howard,  CEO  of  Campbell,  Calif.-based 
OuierBay  Technologies,  says  his  com¬ 
pany  is  doubling  its  sales  force  in  the 
next  two  months  and  saw  300%  revenue 
growth  from  2001  to  2002.  Start-ups  do 
that  sort  of  thing.  At  least  they  used  ta 
He's  also  watchiitg  the  fommes  of  Sales- 
force.com  Inc.  and  Google  Inc.  to  see 
when  (or  If)  they  go  public  because  his 
company  may  follow  In  their  wake. 
“Salesforce  is  the  spearhead  here,”  be 
says.  In  the  meantime,  he's  happy  that 
OuterBay  will  be  announcing  Applica¬ 
tion  Data  Management  3.0  next  week  for 
release  next  month.  ADM  3.0  will  let 
CIOs  migrate  data  from  Oracle  and  Peo- 
pleSoft  applications  to  less  expensive 
Linux  servers  and  ATA  disk  drives.  Stobal 
and  SAP  appa  ara  nait  on  toa  Rto.  a  While 
you're  moving  application  data  around, 
you  might  want  to  do  the  same  with  dau- 
bases.  Lakeview  Technology  Inc  in  Oak- 
brotA  Terrace,  IlL,  ships  OmniRcplicator 
4.0  next  week.  It  lets  you  instantly  ^fiwfiro- 
ntoa  datofiaaaa  in  dffafwR  loeationa  across  the 
street  or  across  the  ^obe.  The  product 
has  been  completely  rewritten  in  Java  and 
can  use  any  JDBC  driver.  It  adds  monitor- 
tng  and  control  features,  and  currently 
works  with  DB2.  Sybase,  SQL  Server  and 
Oracle.  In  the  third  quarter.  Lakeview  will 
rekindle  Infonnix  support,  which  it  had 
snuffed  out  of  the  3.4  release.  I 


WoridCom  Defends  Federal  IT  Contracts 


BV  MATT  HAMBLEN 

The  top  offtcial  in  charge  of 
federal  contracts  at  World¬ 
Com  Inc.  last  week  said  the 
company  hasn't  received 
any  special  consideration  in 
winning  recent  govenunent 
contracts  for  voice  and  data 
services. 

"I  don't  sec  in  that  [federal 
biddingl  process,  as  rigorous  as 
it  is,  bow  MCI  could  be  shown 
any  favoritism,'’  said  Jerry 
Edgerton,  senior  vice  president 
of  government  markets  at 
WorldCom,  at  a  press  confer¬ 


ence  in  Washington.  "We’ve 
won  this  stuff  and  square.” 
WorldCom,  which  contimies  to 
operate  under  Chapter  U  bank¬ 
ruptcy  protection,  now  uses  its 
MCI  brand  name  for  all  busi¬ 
ness  purposes. 

Sen.  Susan  Collins  (R- 
Maine),  chairman  of  the  Sen¬ 
ate  Governmental  Affairs 
Committee,  last  month 
launched  an  investigation  of 
the  government’s  dealings 
with  the  company,  including  a 
one-year  extension  to  an  um¬ 
brella  purchase  contract  that 


the  U3.  General  Services  Ad¬ 
ministration  (GSA)  awarded 
to  WorldCom  in  November. 

The  GSA  last  week  released 
documents  to  the  Seiute  com¬ 
mittee  saying  that  it  continued 
to  do  business  with  WsrtdCom 
after  disclosures  of  massive 
accounting  problems  at  the 
company  because  WorldCom's 
new  management  team  was 
working  to  deal  with  the 
fraud.  In  addition.  WorldCom 
bad  provided  reliable  network 
service  and  quick  repairs,  ac¬ 
cording  to  the  GSA. 


Govenunent  business  ac¬ 
counts  for  ortly  about  5%  of 
WorldCom’s  annual  revenue, 
Edgerton  said.  He  also  noted 
that  his  unit  of 1,500  workers 
has  a  strong  reputation  for 
ethics  inside  VfoiidCom. 

Recent  goverrunent  wins  by 
WorldCom  include  a  seven- 
year  deal  for  high-speed  data 
communications  ftom  the  Na¬ 
tional  Oceanic  &  Atmospheric 
Administratioa  with  a  maxi¬ 
mum  value  of  $11  millioa  and 
a  S20  million  contract  from  the 
U.S.  Department  of  Defense  to 
set  up  a  cell  phone  system  in 
Baghdad.  Both  those  contracts 
were  awarded  last  month.  R 


Tiieres  wireless. 


And  there s  wireless  that  woiks. 


Until  you  hove  a  total  wireless  solution,  you're  not  completely  wireless.  With  hr  you  can  fmllyhcM  the  ngUtedwwbgy  aid  the  expert 

for  your  wireless  network.  So  your  people  con  work  for  your  office  without  being  in  the  office.  Stort  your  upgrode  with  the  HP  Compoq  Business  Notebook  ncdOOO  ubroponoble.  which 
comes  with  o  wide  choice  of  integrated  wireless  communicotion  options.  Another  piece  of  your  totol  wireless  network  is  the  HP  iPAQ  Pocket  PC  h5450  with  Microsoft*  Windows*  Pocket  PC 
2002.  Another  wireless  device  to  consider  is  the  HP  Compaq  Ibblet  PC  TC 1 000.  It  works  both  os  o  notebook  and  o  desktop  ond  feotures  handwriting  recognition.  The  sooner  you  equip  your 
organization's  stoff  with  these  wireless  devices,  the  sooner  they  con  better  serve  their  customers.  By  toking  your  compony  completely  wireless  with  HP  now,  connectivity  con  be  your  reality. 


HP  COMPAQ  BUSINESS 
NOTEBOOK  nc4000 
ULTRAPORTABLE 

Full  of  copobilflies.  light  on  weight 

$1,699 

Wttght  3.S  Ibt,  meoturat  1.1 '  Ihin 
Opitond  imagroied  802.1 1  b/g  or 
802.1 1a/b/a  mini  PCI  combo  cord  to  moot 
cwrroM  and  nrturo  wiroiau  (AN  naads 


6  call  iHhivn  bonary  oHort  7  heuri  boflary 
lila  wirii  optional  Iroral  botlary 
12.1*  TfT  diaploy.  lulUizo  kayboord,  duol 
pointing  davica 

Microaoh*  Windowi*  XP  Prolaatienol 
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HP  COMPAQ 
TABLET  PC  TC 1000 

Easily  used  as  a  tablet,  notebook, 
or  d^top 

$1,699 

Easy  to  corry  o'  only  3  Ibl. 

SmoH  oa  e  noiapod.  8.3*  «  10.8* 

8ollary  ktata  up  to  4.5  hourt 
Mobila  keyboard  Indat  diacraalty  ter  writing 
or  quickly  awingi  into  ptoca  for  typing 
ItM^irolad  10/100  Etbarnat  LAN  ond  $6IC 

Optionol  intagretod  802  Mb  wirelaai  IAN 
Microaoh*  Windows*  XP  Tobla) 

I  PC  Edition 


Mwoeorr 

gy  Windows^ 

professional 


HPiPAQh5450  . 

Wireless  capability*  with  integrated 
802.11b  Wireless  IAN,  Btudooth'** 


$699 


■ty  with  b< 

adogy 

(amovobla  ond  rachorgaoda  boltary 


Uniuaraol  erodia  tor  US8  or  aarid  intarfoca 
Microaoh*W.i>dowi*Peckai  PC  2002 


HP  Core  Pock  services  let  you  choose  the  support 
levels  thcri  meet  your  business  requirements. 

HP  receiiMweisdi  Microsoft*  Windews*  XP  Ppefeitieiiol  for  MeUe  Computing. 


Prices  stKwn  ire  tf*  tfrect  prices:  resalar  and  reMer  prices  may  mry.  Prices  stmm  se  sutiict  to  chmge  md  <to  not  ndudc  agpicmie  state  and  local  salea  tai  or  atxopaig  to  redpient^  descnahon  Phott^wny  mey  w  atfiiiWi 
reprooent  exact  configurations  priced.  'A  standard  WLAN  ntraatructure.  other  Bluetoolh-enetiled  dewces.  and  a  service  cortoact  wMi  a  mretess  aetm  provider  may  be  requra)  lor  appticdiie  wireless  communctoion  Wireless  inlemet 
use  requires  s  separately  purchased  service  contract.  Check  with  service  providef  for  availoeflity  and  coverage  In  your  vea  Not  all  Web  content  sn»abit.  During  the  HP-Con«aQ  product  tranuifens.  some  HP  IPAQ  products  «id 
packaging  may  be  labeled  with  toe  Compaq  brand.  Microsott  and  Windows  are  registered  trademarks  of  Microsoft  Corporation  In  the  United  States  wd/or  otoer  countries  02003  Hewteti-Packvd  Devetopmem  Cornpeny.  L.P 
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Start-up  Challenges  EMC  With 
E-mail  Archiving  Technology 


Persist  releases  software  for  message 
storage,  giving  Centera  competition 


•V  LUCAS  MCARIAN 

STAtrr-up  Persist  Tech- 
oologies  Inc.  is  rekas- 
iog  archiving  and 
search  software  that  it 
said  uses  digital  certificates 
and  commodity  blade  servers 
to  address  federal  regulations 
governing  the  retention  of 
e-mail  messages  by  finandal 
services  Arms. 

Pleasanton.  Calif. -based 
Persist  this  week  plans  to  an¬ 
nounce  the  genera]  availability 
of  its  AppSior  technology, 
which  can  be  combined  with 
any  brand  of  blade  server  to 
create  an  appliance  designed 
to  suppoK  secure  e-mail 
archiving  and  instant  retrieval 
of  messages  via  the  Imernet. 

Analysts  said  AppStor  will 
compete  head-to-hcad  with 
EMC  Corp.'s  Centera  fixed- 
data  disk  array,  which  uses 
software  to  create  a  unique  27- 
character  identifier  for  evety 
elcaronic  document  it  stores, 
ensuring  that  the  mformation 
can’t  be  overwritten. 

‘Signng' E-mail 

Persist  officials  said  AppSior 
sits  in  from  of  e-mail  servers 
and  automatically  ass^s  a 
digital  certificate  based  on 
public-key  infrastructure 
(PKI)  technology  to  each  mes¬ 
sage.  The  di^td  certificate  is 
authenticated  each  time  an 
end  user  retrieves  a  stored 
e-mail,  and  messages  that  are 
modified  in  any  way  receive  a 
new  PKI  signature. 

AppSior  also  works  with 
WOKM  (write  once,  read 
many)  storage  devices,  making 
it  compliant  with  U.S.  Securi¬ 
ties  and  Exchange  Commis¬ 
sion  rules  that  require  finan¬ 
cial  services  firms  to  retain  all 
e-mail  Persist  said.  In  addi¬ 
tion.  the  software  can  be  used 
to  archive  electronic  docu¬ 
ments,  images  and  audio  fUes. 


Lt  CoL  Chuck  Hoppe,  infor¬ 
mation  maiugcmcnt  officer 
for  the  assistant  secretary  of 
the  U.S.  Army,  bought  App¬ 
Stor  as  an  early  user  last 
August  and  installed  it  on  a 
group  of  six  Hewlett-Packard 
Co.  blade  servers  at  an  Army 
base  in  Radford.  Va. 

The  software  is  being  used 
to  manage  an  e-mail  network 
for  about  19S  end  users  who 
typically  don’t  delete  any  of 


their  messages.  Hoppe  said. 

He  added  that  if  he  had  simply- 
archived  the  e-mail  on  disk 
drives,  it  wouldn't  be  as  easy 
to  search  for  or  retrieve  the 
messages  as  it  is  with  AppStor. 

Persist's  technology  “has  a 
very  robust  search  capability,” 
Hoppe  said.  End  users  can 
search  an  entire  e-mail  direc¬ 
tory  “by  block,  name,  time  or 
keywoni."  he  noted.  “I  could 
be  anyplace  in  the  world,  (but) 
if  I  can  get  to  a  Web  browser,  I 
can  get  to  all  of  my  e-mail" 

AppStor  is  also  being  evalu¬ 
ated  for  possible  use  on  two 


other  military  e-mail  net¬ 
works.  including  one  that  sup¬ 
ports  about  650  workers  at  the 
Pentagon.  Hoppe  said. 

Steve  Kenniston.  an  analyst 
at  Enterprise  Storage  Group 
Inc.  in  Milford,  Mass.,  said 
AppStor  can  easily  be  migrat¬ 
ed  into  data  centers  as  users 
move  toward  utility-based 
computing  models  built 
around  commodity  hardware. 
Hopldnlon,  Mass. -based  EMC 
offers  excellent  technology 
but  will  have  to  continue  sell¬ 
ing  Centera  as  a  stand-alone 
box.  he  said. 


Persist’s  AppStor 
Softw^ 

■  Uses  commodity  Mads  sarvers 
to  store  e-mail  messaQes. 

■  Can  retrieve  e-mails  in  less 
than  three  seconds  by  name, 
time  or  content. 

•  UsesPKIlechnoloqylo'siQn* 
each  message  as  it's  stored 

■  Works  wMi  WORM  storage 
devices. 


However.  Centera  is  less  ex¬ 
pensive  than  AppStor.  For  ex¬ 
ample.  EMC’s  new  Centera 
(Compliance  Edition  model  is 
priced  at  $148.(K)0  with  4TB  of 
usable  storage  space.  AppStor 
sells  for  $45,000  per  terabyte 
of  capacity  without  the  blade 
server  hardware.  Persist  said.  I 


Anti-UCITA  Legal  Measures 
Outnumber  State  Adoptions 


Software  licensing 
act  stalls:  backers 
continue  struggle 

8V  nATWICN  THIBODEAU 

A  Massachusetts  legislative 
committee's  hearing  last  week 
on  an  anti-UCITA  bill  could 
herald  the  state's  becoming 
the  fifth  to  enact  a  law  to  pnv 
tect  its  residents  and  busine.ssi- 
es  from  the  controversial  soft¬ 
ware  licensing  legislation. 

The  bearing  under-  __ 

scores  the  difficulties  ll? 

confronting  backers  of  lU 
the  Uniform  Computer 
Information  Transac-  ■■■ 
tions  Act.  Only  two  states.  Vir¬ 
ginia  in  2(X)1  and  Maryland  in 
20(K).  have  enacted  the  model 
legislation. 

Meanwhile,  four  states  have 
adopted  anti-UCITA  mea¬ 
sures.  and  the  law’s  progress 
toward  state-by-state  adoption 
appears  to  be  stalled. 

lohn  McCabe,  an  official  at 
the  National  Conference  of 
Commissioners  on  Uniform 
Sute  Uws  (NCCUSL)  in 
Chicago,  said  a  UCITA  adop¬ 


tion  bill  is  pending  in  the  Dis¬ 
trict  of  Columbia  but  not  any¬ 
where  else.  With  state  legisla¬ 
tures  generally  winding  down 
for  the  year,  the  district  is  “the 
only  expectation  that  we  have 
at  this  point.”  he  said. 

The  measures  adopted  by 
the  four  anti-UCITA  states  — 
Iowa.  North  Carolina.  West 
Virginia  and.  pist  last  month. 
Vermont  —  are  referred  to  as 
“bomb-shelter”  legislation. 
The  intent  is  to  prevent  a 

vendor  from  applying 
Maryland’s  UCITA  law 
provisions  on  residents 
IjyB  in  other  .states,  for  in- 
"""  stance. 

Tile  Massachusetts  Joint 
Committee  on  Commerce  and 
Labor  held  a  hearing  on  the 
anti-UCITA  bill  June  2,  No  ac¬ 
tion  was  taken,  a  committee 
spokesman  said. 


UCITAs  opponents,  which 
include  library  and  consumer- 
protection  groups,  the  majority 
of  state  attorneys  general  and 
some  large  software  users,  say 
they  succeeded  in  preventing 
UCITAs  adoption  in  Oklahoma 
and  Nevada  this  year.  But  dc- 
•spite  those  successes,  they  say 
UCITA  remains  a  threat 

‘Nol  Dead  Yet’ 

“It’s  not  dead  yet.”  said  Randy 
Roth,  a  principal  at  Corporate 
Contracts  LLC.  a  consulting 
and  contract  negotiation  firm 
in  Urbandale,  Iowa.  But  Roth 
said  awareness  and  concern 
among  IT  managers  about 
UCITA  arc  dwindling  —  and 
that  worries  him.  "The  mes¬ 
sage  to  that  group  is,  'Don’t  let 
your  guard  down,*  ”  he  said. 
"We  can’t  let  up  yet." 

Carlyle  “f^nnie”  Ring  Jr., 
chairman  of  the  NCCUSL's 
UCITA  draffing  committee, 
said  proponents  will  conlinue 
to  press  for  state-by-state 
adoptiotL  He  argued  that  com¬ 
panies  need  a  uniform  set  of 
rules  for  conducting  Internet 
transactions,  and  if  the  states 


don't  enact  such  rules.  Con¬ 
gress  will 

The  real  issue  is  whether 
the  states  are  going  to  work 
this  out  among  themselves." 
Ring  said. 

He  attributed  the  dearth  of 
state  adoptions  to  an  agree¬ 
ment  with  the  American  Bar 
Association,  under  which  the 
NCCUSL  refrained  from  push¬ 
ing  the  law  for  an  18-month  pe¬ 
riod  that  ended  late  last  year, 
pending  review  by  the  ABA. 
The  ABA  ultimately  took  no 
action  on  it,  even  though  a  spe¬ 
cial  committee  criticized  the 
measure  [C^ickLink  36306). 

According  to  opponents, 
UCITA  sets  default  contract 
terms  that  favor  software  ven¬ 
dors  and  free  them  of  liability 
for  any  problems  with  their 
products.  Supporters  say  that 
companies  are  free  to  negoti¬ 
ate  terms  and  conditions,  and 
they  have  attempted,  unsuc¬ 
cessfully,  to  ameliorate  con¬ 
cerns  by  removing  some  con¬ 
troversial  provisions. 

One  such  provision,  called 
"self-help.”  would  have  al¬ 
lowed  vendors  to  disable  custo¬ 
mers’  systems  during  disputes.  I 
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US.  Users  Weigh  Options  as 
Web  Host  C&W  Exits  Maitet 


Many  not  surprised 
by  the  move,  but 
schedule  is  unclear 


SV  TOOO  N.  WTEISS 

WHF.N  CABLE  & 
Wireless  PLC 
announced 
plans  to  aban¬ 
don  tbe  U.S.  Web  hosting  and 
services  market  last  week, 
customers  appeared  to  take 
the  announcement  in  stride. 

Several  C&W  users  said 
that  because  of  the  large  over¬ 
capacity  in  the  troubled  Web 
htwting  market,  they  foresee 
little  problem  Anding  another 
vendor.  But  the  uncertainty 
surrounding  the  timing  of 
C&Ws  puikMit  is  causing  a 
headache  for  some. 

Russell  Kuteman.  vice  presi¬ 
dent  of  finance  for  amusement 
park  company  Six  Flags  Inc.. 


which  sources  content-deliv¬ 
ery  and  Web  hosting  services 
from  C&W,  said  it's  too  early 
to  decide  what  his  company 
will  do.  And  C&W  isn’t  help¬ 
ing  much  with  that  decision. 

C&W  spokesman  Chad 
Couscr  said  the  company's 
U3.  customer  base  would  be 
valuable  for  another  vendor 
that  could  potentially  come  In 
and  take  over  those  accounts. 
Service  will  continue  unaffect¬ 
ed  during  tbe  transition,  he 
said.  “We  want  to  maintain  tbe 
value  of  the  business“  while 
other  avenues  are  explored,  be 
added.  But  no  deadlines  have 
been  set  for  when  another 
vendor  must  be  found  or  for 
the  end  of  C&W's  service. 

That  presents  a  problem 
for  Okl^oma  City-based  Six 
Flags,  which  doesn't  know 
.  how  long  to  wait  before  decid- 
I  ing  what  steps  it  should  take. 


Kuteman  said.  “Companies 
like  us  and  others  that  have 
commerce  across  their  Web 
sites  can't  afford  to  be  in  a 
risky  situation  as  far  as  ser¬ 
vices  go,"  he  said.  “We’re  go¬ 
ing  to  keep  a  Anger  on  the 
pulse  (of  tbe  situation],  and 
the  minute  our  comfort  level 
moves  in  the  negative  direc¬ 
tion.  we'll  be  gone." 

lohn  Godwin,  chief  technol¬ 
ogy  oAicer  at  online  movie 
download  service  Moviellnk 
ILC  in  Santa  Monica,  Calif, 
said  C&Ws  announcement  of 
a  sweeping  restructuring  and 


complete  exodus  from  its 
money-losing  North  American 
business  wasn't  a  surprise. 

“I  think  a  number  of  com¬ 
panies  have  been  in  trouble  in 
this  economy."  he  said.  “We 
think  they'U  handle  this  very 
responsibly"  by  Anding  a  qua!- 
iAed  buyer  or  giving  clients 
enough  notice  to  make  new 
arrangements.  “We  just  don’t 
think  it  will  have  an  impact." 

Many  C&W  customers  were 
in  the  same  predicament  18 
months  ago  when  C&W  took 
over  the  U.S.  business  for 
bankrupt  Web  hosting  vendor 


Exodus  Communications  Inc. 
(Quicklink  2SS33]. 

Ricic  Thimble.  IT  manager 
for  the  U.S.  and  Europe  at 
plastic  parts  maker  MoldAow 
Corp.  in  Wayland,  Mass^  said 
he’s  not  worried,  even  after 
having  gone  through  the  same 
experience  with  Exodus. 

The  C&W  announcement 
comes  less  than  three  months 
after  Moldflow  added  an  IP 
virtual  private  networic  con¬ 
tract  to  its  Web  hosting  deal 
with  C&W,  Thimble  said. 
“We’re  still  implementing  tbe 
network."  be  said. 

“There’s  not  too  many . . . 
companies  that  haven’t  gone  | 
through  this,"  he  said  of 
C&Ws  cuts.  “What  are  your 
choices?" 

Rod  Pellowe,  director  of 
systems  and  networks  at  on¬ 
line  equipment  asset  market¬ 
place  EquipnetDirect  Inc.  in 
Braintree,  Mass.,  said  he  also 
survived  the  Exodus  melt- 
dowa  “Honestly.  1  don't  think 
it  leaves  us  in  a  bad  place." 
Pellowe  said.  “Tliere  are  a  lot 
of  vendors  out  there  who  are 
hungry.  Pm  not  feeling  like 
we're  without  options."  I 


Palm  to  Buy  Handspring 
To  Bolster  Hardware  Unit 

Mei'ged  company  expected  to  be  stronger 
competitor  against  Microsoft,  other  rivals 


■V  ooa  OKEWIN 

Corporate  users  and  analysts 
last  week  said  Palm  Inc’s 
planned  acquisition  ofhand- 
held  device  rival  Handspring 
Inc.  should  result  in  a  com¬ 
bined  company  that’s  better 
able  to  compete  with  Micro¬ 
soft  Corp.  and  cell  phone  mak¬ 
ers  in  tbe  mobile  markets. 

Milpitas,  Caiif-based  Palm 
announced  that  it’s  buying 
Handspring  in  a  stock-swap 
deal  that's  expected  to  be 
completed  in  the  foil  Palm 
plans  to  combine  its  own 
hardware  unit  and  Mountain 
View,  Calif.-based  Handspring 
under  a  new  name  that  has  yet 
to  be  chosen.  Tbe  merger  will 
coincide  with  tbe  previously 
announced  spin-off  of  Palm's 


operating  system  division  into 
a  separate  company. 

Gail  Browder,  executive 
vice  president  for  products 
and  services  at  PHT  Corp.  in 
Charlestown.  Mass.,  said  the 
Palm/Haodspring  combina¬ 
tion  will  produce  a  bigger, 
more  competitive  company. 
PHT  has  deployed  “tens  of 
thousands"  of  Palm  devices 
over  tbe  past  12  months  to 
support  clinical  trials  it  runs 
for  drug  companies,  she  said. 

In  particular.  Browder  noted 
that  Handspring  will  offer 
Palm  expertise  in  building 
handhelds  with  integrated 
wireless  capabilities,  which 
she  sees  as  an  essential 
feature.  She  also  said  that 
bringing  back  Jeff  Hawldns, 


who  co-founded  Palm  before 
leaving  to  help  hatch  Hand¬ 
spring  In  1908.  will  help  Palm 
“stem  the  perception  of  brain 
drain”  that  still  lingers  from 
his  departure. 

Palm  said  Hawkins,  who  is 
now  Handspring’s  chairman 
and  chief  product  ofAccr,  will 
become  chief  technology  oflfi- 
cer  at  the  merged  company. 
The  comptany  will  be  run  by 
Todd  Bradley,  currently  presi¬ 
dent  and  CEO  of  the  P^  So¬ 
lutions  Group  hardware  unit. 

Extending  Hs  Reach 

Sam  Bhavnani,  an  analyst  ai 
ARS  Inc  in  La  (oUa.  Cdif,  said 
Handspring  wUI  provide  Palm 
with  something  it  has  sorely 
lacked:  strong  partnerships 
with  major  U5.  cellular  carri¬ 
ers.  Bhavnani  said  Handspring 
has  partnerships  to  sell  its 
TVeo  smart  phones  through 
three  celJul^  carriers:  Cingu- 
lar  Wireless,  Sprint  PCS 
Group  and  the  T-Mobile  divi¬ 
sion  of  Deutsche  Telekom  AG. 
Palm,  in  contrast,  has  a  sales 


and  marketing  deal  with  only 
AT&T  Wireless  Services  Inc. 

Dan  Wilkinsky.  a  spokes¬ 
man  for  Overland  Park.  Kan.- 
based  Sprint,  described  IVeo 
“as  a  real  winner  for  us."  Part¬ 
nerships  with  handheld  device 
makers  are  “absolutely  vital" 


in  order  to  ensure  that  the 
products  they  develop  are  "in¬ 
tegrally  woven"  into  Ae  stra¬ 
tegic  plan  of  a  carrier  like 
Sprint  PCS.  Wilkinsky  said. 

The  planned  merger  was  al¬ 
most  inevitable  because  of  the 
tough  market  for  baiKlbelds  in 
recent  months,  said  Phil  Red¬ 
man.  an  analyst  at  Gartner  Ii>c. 
Handspring  was  particularly 
affected  by  the  sdes  slow¬ 
down  because  TVeo  hasn’t 
“really  reached  a  wide  enough 
audience,"  he  said.  “When 
there's  such  a  small  market 
overaU,  it’s  very  difficult  for 
small  vendors  to  compete." 

But  Redman  warned  (hat 
bringing  all  tbe  Handspring 
and  Palm  hardware  executives 
together  at  one  company  could 
lead  to  “contrasting  visions 
and  disagreements  at  the  top." 
Such  problems  led  Hawkins 
and  two  other  executives  to 
form  Handspring  in  the  first 
place,  be  said.  I 


Jtepaner  Tbdd  FL  Weiss 
contribioed  to  this  story. 
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Users  Ty<e  Some  Blame 
For  Faulty  Applications 


Sliaa'  rosponsihilitx 
w  ith  wndors  tor 
software  defects 

BY  JAIKUMAR  VIJAVAN 

WitfN  t1  I  OMI  N 

to  placinjf  blame 
for  software  de¬ 
lects.  use'rs  are 

apparently  almost  as  wiliinp  tt> 
take  it  a.s  they  arc  to  dish  it  out 
to  vendors.  Thai  was  one  of 
the  rindin>!S  of  a  (lartner  Inc. 
sur\‘ey  ol  172  IT  professionals 
that  W3.S  conducted  last  week. 

“One  of  the  surprising 

things  about  (he  surwy  was 
the  extent  to  which  respon¬ 


dents  were  willing  to  allocate 
liability  for  stifiware  defects 
I  on  themselves."  said  Richard 
I  I  iunter.  an  analyst  at  Stam¬ 
ford.  lamn.-b.iscd  Gartner 
About  47%  of  survey  re¬ 
spondents  said  that  user  com¬ 
panies  should  be  legally  liable 
for  damages  caused  b>'  flaws 
such  as  bufTer  over¬ 
flows  in  the  soft¬ 
ware  the>-  develop. 

.At  the  same  time, 
about  .s7%  of  the  re¬ 
spondents  said  .soft¬ 
ware  vendors 
should  be  held 
legally  accountable 
for  flaws  in  the 


software  they  dcvelop. 

“Thc  numK-rs  show  a  logi¬ 
cal  consistency  when  it  comes 
to  allocating  blame"  for  bad 
.software.  Hunter  said.  Such 
sentiments  come  at  a  time 
when  companies  are  facing 
unabated  threats  fnim  both  in¬ 
ternal  and  external  attackers. 

The  results  of 
an  annual  survey 
by  the  Computer 
Security  Institute 
and  the  FBI  re¬ 
leased  last  week 
show  that  the 
number  of  major 
security  incidents 
companies  report- 


HP  to  Buy,  Manage 
Ericsson's  Systems 

Hewtett-Packard  Co.  and  LM 
Ericsson  Telephone  Co.  formally 
announced  a  five-year  IT  out¬ 
sourcing  deal,  as  expected.  Un¬ 
der  a  trareition  that’s  due  to  start 
next  month.  HP  wiN  buy  Erics¬ 
son's  global  IT  infrastructure  and 
manage  it  lor  the  Stockholm- 
based  company.  About  1,000  IT 
workers  at  Ericsson  will  transfer 
to  HP.  the  companies  said.  R- 
nencial  terms  weren't  disdosed. 

Fiorina  Looks  to 
Grab  Market  Share 

In  other  W  news.  CEO  Carfy  Fn- 
rina  said  at  a  meeting  with  ana¬ 
lysts  in  New  York  that  she  hopes 
the  company  can  incroase  reven¬ 
ue  by  taking  market  share  from 
rivBl  vendors.  ‘INe  don't  need  fT 
spending  to  grow.**  Fiorina  said. 
“We  need  customers  to  spend 
more  of  their  IT  dottars  on  us.” 

She  added  that  HP  expects  rev¬ 
enue  of  S38.6  billion  in  the  sec¬ 
ond  half  of  its  cterem  fiscal  yev. 


EOS  Signs  PC  Deal 
WrthBardays 

Electronic  Data  Systems  Corp. 
said  M  has  won  a  seven-year. 
S3S0  million  deal  to  provide 
managed  desktop  PC  outsourcing 
services  to  London-based  Bar¬ 
clays  PLC.  The  contract  covers  a 
tot^  of  41.700  PCs  across  vari¬ 
ous  Barclays  business  units,  EDS 
said.  The  Piano.  Texas-based 
company  abo  announced  a  man¬ 
aged  service  for  mobile  devices 
used  in  corporate  applications. 

Short  Takes 

SIEBEL  SYSTEMS  INC  said  H  has 
bought  the  assets  of  BoUFish 
Inc.,  a  Santa  Clara,  CalH.-based 
vendor  of  permbsloo-based 
messaging  software  for  use  in 
marketing  campaigns. . . .  ATFil 
iATED  COMPUTER  SERVICES  (NC 
in  Dallas  announced  a  seven- 
year.  $143  million  IT  outsourcing 
contract  with  Miller  Brewing  Co. 
in  Milwaukee. 


Cofirinued/rom  pugv  / 

Risk  Metrics 

Dearborn.  Companies  are  re¬ 
alizing  that  “you  can't  manage 
what  you  can't  me,isurc.” 

Driving  the  trend  is  the  fact 
that  security  budgets  have 
been  rising  by  20%  annually 
over  the  past  couple  of  years, 
said  Richard  Hunter,  an  ana¬ 
lyst  at  Stamford.  Conn.-based 
Gartner. 

“These  have  been  pure 
COSI.S.  and  CIOs  and  CEOs  are 
asking  what  they  are  getting 
from  all  that  fspendingl." 
Hunter  .said.  “If  the  response 
I  is.  'You  are  gelling  better  secu- 
I  rity,' the  next  question  is. 

^  'How  do  you  know?' " 

As  a  result,  security  admin¬ 
istrators  are  under  grow  ing 
pres-sure  to  find  quantitative 
measures  to  demon.siratc  the 
efficacy  of  their  security 
'  strategies. 

“You  need  to  h.ivc  a  baseline 
to  measure  against.  If  you 
don't  have  any  measurements, 
you  don’t  know  whea*  you 
are,”  said  Gregory  Waters,  a 
'  senior  information  assurance 
engineer  at  'I'U'M  Asst»ci3ie.s 
inc..  an  IT  auditing  firm  in 
Fairfa.x,  Vi 

The  numbers  can  come 
fnim  a  variety  of  sources.  For 


example,  said  Gartner,  .a  com¬ 
pany  could  collect  metrics  on 
the  number  of  attacks  it  faced 
during  a  specific  perk>d.  the 
type  of  attacks,  the  pcrceni.age 
of  attacks  that  were  .success¬ 
ful.  the  time  that  elapsed  bt'- 
tween  the  onset  of  an  attack 
and  when  it  w.as  first  delected, 
and  the  time  it  ioi>k  to  launch 
countermeasures. 

The  metrics  could  also  re¬ 
late  to  a  compan)’'s  overall  risk 
profile  based  on  an  a.s.sess- 
ment  of  the  vulnerabilities  and 
threats  faced  by  an  organiza¬ 
tion  and  the  countermeasures 
in  place  to  deal  with  them. 

Meaningful  Metrics 

Some  vendors,  such  as  Found- 
stone  Inc.  in  Mission  Viejo. 
Calif.,  and  TruSecure  Corp.  in 
Herndon,  Va..  offer  tools  they 
say  will  help  companies  nu¬ 
merically  score  their  risk  on  a 
sliding  scale  based  on  such  as¬ 
sessments. 

Used  properly,  such  metrics 
can  help  security  administra¬ 
tors  give  business  managers  a 
better  snapshot  of  a  compa¬ 
ny’s  risk  profile.  Cammarata 
said.  At  AAA.  merely  using 
statistics  and  benchmarks 
from  organizatioas  .such  as  the 
SAN.S  Institute  in  Bethe.sda. 
Md..  and  the  Computer  Secu¬ 
rity  insiiiuie  in  San  Francisco 


no  longer  cut  it.  (Ammarata 
said.  "My  nunagers  want  it> 
know  what  these  statistics 
mean  to  my  tirganizaiioii 
-Specifically."  he  said. 

Consequently.  AAA  is  plan¬ 
ning  to  gather  internal  metrics 
to  build  a  one-page  “dash¬ 
board"  that  will  give  managers 
a  belter,  more  relevant  picture, 
he  said. 

Northrop  Grumman  Mis¬ 
sion  Systcm.s  in  Rcsion.  Va..  is 
pursuing  a  similar  dashboard 
approach,  said  CIO  Diane 
Murray.  “It  will  give  u.s  a  high- 
level  management  view  of 
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Measuring  eMecliveness  of  IT 
secunty  invokies  tfw  following 

UndoreUfld- 
ing  and  prioritizing  information 
assets;  analyzing  impad  and 
likelihood  of  threats;  coordi¬ 
nating  efforts  and  resources 


Discovering  and  targetir»g 
infrastructure  weaknesses; 
highlighting  larger  exposures 

Evaluat¬ 
ing  current  spending  levels  and 
resource  distribuHon;  tracking 
changes 


ed  in  2002  was  roughly  the 
j  same  as  in  2001.  But  the  aver¬ 
age  loss  rep<irted  from  such 
I  incidents  was  only  5B04.000. 

I  a  decrease  fnim  an  average  of 
S2  million  the  year  befoix*. 

I  faimpanies  appear  to  bo 
j  bracing  for  more  attacks,  with 
56'*i>  in  the  Gartner  survey 
I  saying  they  expect  a  major  p<>- 
liiicalh  motivated  cyberattack 
I  on  critical  infrastructure  in 
I  their  industries  within  the 
'  next  .Vi  months.  A  majoriiy 
j  said  that  if  .such  an  attack  were 
I  to  occur  uiday.  they  fee)  it 
I  would  result  in  brief,  multi- 
I  regional  disruptions, 
j  The  Gartner  surx'ey  also 
I  showed  that  a  majority  of  re- 
sptindcms  think  open-source 
software  is  about  as  secure  as 
I  other  software.  Over  4ti%  said 
they  think  the  federal  govem- 
'  meni  .should  use  and  develop 
open-source  software.  I 


I  how  well  wc  are  doing"  on  the 
security  front,  she  said. 

Such  information  can  also 
be  useful  to  auditors  for  evalu¬ 
ating  a  company's  compliance 
with  regulator}  requirements. 

But  gathering  such  metrics 
and  using  them  in  a  meaning¬ 
ful  way  can  he  hard,  especially 
I  when  dealing  with  an  issue 
I  such  as  risk,  said  Bill  Spernow. 

I  chief  information  security  of- 
j  ficer  at  the  Georgia  Student 
Finance  Commission  in  Tucker. 

“The  raw  statistics  that  we 
need  to  create  a  measurable 
foundation  do  not  exist,”  he 
said.  Moreover,  numbers  may 
not  always  tell  the  full  story, 
because  there  arc  too  roanj' 
variables  and  dependencies 
involved  in  measuring  risk, 
Spernow  said.  At  best,  they 
are  “trend  indicators”  that 
could  create  a  “false  sense  of 
security"  if  relied  upon  solely, 
he  added. 

Standards  such  as  ISO  17779, 
which  covers  IT  governance 
and  data  security,  can  provide 
a  good  basis  for  understanding 
what's  needed  to  build  efTec- 
tivc  IT  security,  he  said.  I 
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Users  Take  Some  Blame 
For  Faulty  Applications 


Share  responsibility 
with  vendors  for 
software  defects 


av  JAIttUMAa  VI.MVAN 

WHEN  rr  COMES 

to  placing  blame 
for  software  de¬ 
fects,  users  are 

apparently  almost  as  willing  to 
take  it  as  they  arc  to  dish  it  out 
to  vendors.  That  was  one  of 
the  Findings  of  a  Gartner  Inc. 
survey  of  172  IT  professionals 
that  was  conducted  last  week. 

‘One  of  the  most  surprising 
things  about  the  survey  was 
the  extent  to  which  respon¬ 


dents  were  willing  to  allocate 
liability  for  software  defects 
on  themselves,”  said  Richard 
Hunter,  an  analyst  at  Stam¬ 
ford,  Conn.-based  Gartner. 

About  47%  of  survey  re¬ 
spondents  said  that  user  com¬ 
panies  should  be  legally  liable 
for  damages  caused  by  flaws 
such  as  buffer  over¬ 
flows  in  the  soft¬ 
ware  they  develop. 

At  the  same  time, 
about  57%  of  the  re¬ 
spondents  said  soft¬ 
ware  vendors 
should  be  held 
legally  accountable 
for  flaws  in  the 


software  they  develop. 

“The  numbers  show  a  logi¬ 
cal  consistency  when  it  comes 
to  allocating  blame“  for  bad 
software,  Hunter  said.  Such 
sentiments  come  at  a  time 
when  companies  are  facing 
unabated  threats  from  both  in¬ 
ternal  and  external  attackers. 

The  results  of 
an  annual  survey 
by  the  Computer 
Security  Institute 
and  the  FBI  re¬ 
leased  last  week 
show  that  the 
number  of  major 
security  incidents 
companies  report¬ 
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ed  in  2002  was  roughly  the 
same  as  in  2001.  But  the  aver¬ 
age  loss  reported  from  such 
incidents  was  only  $804,000, 
a  decrease  from  an  average  of 
$2  million  the  year  before. 

Companies  appear  to  be 
bracii^  for  more  attacks,  with 
56%  in  the  Gartner  survey 
saying  they  expect  a  major  po¬ 
litically  motivated  cyberatt^ 
on  critical  infrastructure  in 
their  industries  within  the 
next  36  months.  A  majority 
said  that  if  such  an  attack  were 
to  occur  today,  they  feel  it 
would  result  in  brief,  multi- 
regional  disruptions. 

The  Gartner  survey  also 
showed  that  a  majority  of  re¬ 
spondent;  think  open-source 
software  is  about  as  secure  as 
other  sofrware.  Over  46%  said 
they  think  the  federal  govern¬ 
ment  should  use  and  develop 
open-source  software.  I 
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Continued  from  page  1 

Risk  Metrics 


Dearborn.  Companies  are  re¬ 
alizing  that  ‘you  can't  manage 
what  you  can't  measure.” 

Driving  the  trend  is  the  fact 
that  security  budgets  have 
been  rising  by  20%  annually 
over  the  past  couple  of  years, 
said  Richard  Hunter,  an  ana¬ 
lyst  at  Stamford,  Cona -based 
Gartner. 

These  have  been  pure 
costs,  and  CIOs  and  CEOs  are 
asking  what  they  are  getting 
from  all  that  [spendingl." 
Hunter  said.  ‘If  the  response 
is.  ‘You  are  getting  better  secu¬ 
rity.'  the  next  question  is. 

'How  do  you  Imow?* " 

As  a  result,  security  admin¬ 
istrators  are  under  growing 
pressure  to  fmd  quantitative 
measures  to  demonstrate  the 
efficacy  of  their  security 
strategies. 

‘You  need  to  have  a  baseline 
to  measure  against  If  you 
don’t  have  any  measurements, 
you  don’t  know  where  you 
are,”  said  Gregory  Waters,  a 
senior  information  assurance 
engineer  at  TWM  Associates 
Inc.,  an  IT  auditing  firm  in 
Fairfru,  Va. 

The  numbers  can  come 
from  a  variety  of  sources.  For 


example,  said  Gartner,  a  com¬ 
pany  could  collect  metrics  on 
the  number  of  attacks  it  faced 
during  a  specific  period,  the 
type  of  attacks,  the  percentage 
of  attacks  that  were  success¬ 
ful.  the  time  that  elapsed  be¬ 
tween  the  onset  of  an  attack 
and  when  it  was  first  detected, 
and  the  time  it  took  to  launch 
countermeasures. 

The  metrics  could  also  re¬ 
late  to  a  company’s  overall  risk 
proFile  based  on  an  assess¬ 
ment  of  the  vulnerabilities  and 
threats  faced  by  an  organiza¬ 
tion  and  the  countermeasures 
in  place  to  deal  with  them. 

Meaningful  Metrics 

Some  vendors,  such  as  Found- 
stone  Inc.  in  Mission  Viejo, 
Calif.,  and  TruSecure  Corp.  in 
Herndon.  Va.,  offer  tools  they 
say  will  help  companies  nu¬ 
merically  score  their  risk  on  a 
sliding  scale  based  on  such  as¬ 
sessments. 

Used  properly,  such  metrics 
can  help  security  admintstra- 
tors  give  business  managers  a 
better  snapshot  of  a  compa¬ 
ny’s  risk  profile,  Cammarata 
said  At  AAA,  merely  using 
statistics  and  benchmarks 
from  organizations  such  as  the 
SANS  Institute  in  Bethesda. 
Md,  and  the  Computer  Secu¬ 
rity  Institute  in  San  Francisco 


no  longer  cut  It,  Cammarata 
said  “My  managers  want  to 
know  what  these  statistics 
mean  to  my  organization 
specifically,"  be  said 

Cottsequeotly,  AAA  is  plan¬ 
ning  to  gather  internal  metrics 
to  build  a  one-page  “dash¬ 
board”  that  will  give  managers 
a  better,  more  relevant  picture, 
he  said. 

Northrop  Grumman  Mis¬ 
sion  Systems  in  Reston.  Va.,  is 
pursuing  a  similar  dashboard 
approach,  said  CIO  Diane 
Murray.  ‘It  will  give  us  a  high- 
level  management  view  of 


Security 

YandsticK 

Meastfing  sRaclMnBSs  of  IT 
security  tfMjfras  tee  fotowng: 
Risk  assessment;  UnMrstond- 
tog  and  priorRfekn  totermaMoB 
aaistK  anefyitoQ  impact  and 
BwRtioed  of  threats;  coerdh 
nadag  slterls  Md  raaeurcas 


Vulnerabdity  assessment; 
DiMovattag  and  targeting 
infrastnictore  aunteieeaii; 


Spending  assessment;  Fmliiat 
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how  well  we  are  doing”  on  the 
security  front,  she  said 

Such  information  can  also 
be  useful  to  auditors  for  evalu¬ 
ating  a  company’s  compliance 
with  regulatory  requirements. 

But  gathering  such  metrics 
and  using  them  in  a  meaning¬ 
ful  way  can  be  hard  especially 
when  dealing  with  an  issue 
stKrh  as  risk,  said  Bill  Spemow, 
chief  inforinarioo  security  of¬ 
ficer  at  the  Geoigia  Student 
Finance  Commission  in  Ihdcer. 

‘The  raw  statistics  that  we 
need  to  create  a  measurable 
foundation  do  not  exist,”  he 
said  Moreover,  numbers  may 
not  always  tell  the  full  story, 
because  there  are  too  many 
variables  and  dependencies 
involved  in  measuring  risk. 
Spemow  said  At  best,  they 
are  ‘trend  indicators”  that 
could  create  a  ‘false  sense  of 
security”  if  relied  upon  solely, 
be  added. 

Standards  such  as  ISO  17779, 
which  covers  IT  governance 
and  data  security,  can  provide 
a  good  basis  for  understanding 
what’s  needed  to  buUd  effec¬ 
tive  IT  security,  he  said  I 
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Lessons  of  9/11  Not  Lost 
On  ^^^nners  of 2003 
Computerwoild  Honors 


For  this  year’s  group,  desire  to  improve 
the  human  condition  is  a  shared  theme 


Before  he  attended 

last  week's  Computer- 
world  Honors  cere¬ 
mony  here.  Patrick 
Bennett  visited  many  of  the 
city's  monuments  and  read  the 
testimonials  carved  in  stone  to 
remember  the  natioo’s  heroes. 
Winning  an  award  for  a  d^tal 
management  system  gave  Ben¬ 
nett  tte  opportunity  to  share 
what  be  learned  from  hb  visit. 

*'1  see  this  less  as  a  crownii^ 
achievement  than  as  a  kind  of 
challenge,"  said  Bennett,  di- 
reaor  of  software  develop¬ 


ment  at  E  Entertainment  Tele¬ 
vision  Inc.  in  Los  Angeles. 
That  challenge  is  to  "live  up  to 
all  those  folks  who  have  given 
their  lives  that  we  might  inno¬ 
vate  and  offer  technological 
solutions  to  help  society." 

A  theme  common  to  the 
winners  was  a  desire  to  im¬ 
prove  the  human  condition, 
whether  through  the  use  of  su¬ 
percomputers  that  analyze 
global  warmii^  or  the  devel¬ 
opment  of  systems  to  combat 
terrorism. 

Sumitomo  Mitsui  Banking 
Corp.  in  New  York  faced  a 
challenge  in  complying  with 


the  2001  USA  Patriot  Act.  an 
antiteiTorism  law.  It  needed  to 
develop  an  online  system  for 
findii^  people  on  various  gov¬ 
ernment  terrorist  lists. 

Peter  McCormick,  the 
bank’s  CIO,  said  the  project 
provided  more  than  jxist  pro¬ 
fessional  satisfaction.  It  also 
provided  a  heightened  sense 
of  purpose.  The  bank  is  a  half- 
mile  f^m  Ground  Zero.  The 
aspect  of  9/11  has  really  added 
another  dimension  to  what 
you  can  do.  even  as  a  banker, 
even  as  a  technolc^ist,  in  com¬ 
bating  the  war  against  terror¬ 
ism.”  he  said. 

Another  winner,  American 
Express  Corporate  Travel  So¬ 
lutions  in  Phoenix,  developed 
a  Web-based  system  that  ^- 


lows  travelers  and  agents  at 
different  sites  to  work  togeth¬ 
er  in  real  time.  The  system 
also  lets  travel  managers  know 
where  their  travelers  are,  ac¬ 
cording  to  Michael  Laughlin, 
the  company’s  vice  president 
and  chief  technology  officer. 

"In  case  of  emei^encies  like 
Sept.  U,  we  can  help  them  get 
back  to  where  they  need  to 
be,”  he  said. 

Patrick  McGovern,  chair¬ 
man  of  Boston-based  Interna¬ 
tional  Data  Group  Corp.,  Com- 
puterworld’s  parent  company, 
said  this  year's  Honors  pro¬ 
gram  resulted  in  313  new  IT 
case  studies  being  presented 
to  more  than  140  museums,  li¬ 
braries  and  universities  world¬ 
wide.  "The  case  studies  in  this 
year’s  collection  are  represen¬ 
tative  of  the  very  best  in  excel¬ 
lence,  innovation  and  positive 
impact  on  society,"  he  said.  I 
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Brocade  Boosts  Security  in  SAN  Software 


BY  LUCAS  MeABIAN 

Storage  switch  maker  Brocade 
Communications  Systems  Inc. 
last  week  released  the  fourth 
generation  of  its  software  for 
managing  stor^e-area  net¬ 
works  (SAN),  adding  new 
change  mam^ement  and  secu¬ 
rity  features  as  well  as  a  dash- 
board-style  user  interface. 

San  Jose-based  Brocade  said 
the  Fabric  Manager  4.0  up¬ 
grade  lets  storage  administra¬ 
tors  logically  cluster  groups  of 
switches  or  communications 
ports  on  their  SANs.  The  ad¬ 
ministrators  can  then  perform 
management  and  reporting 
tasks  across  the  devices  via  a 
sii^e  operation. 

The  release  also  provides 
network  topology  maps  and 
“SAN-at-a-glance”  views  de¬ 
signed  to  help  IT  managers 
visualize  SAN  configurations 
and  track  changes,  according 
to  Brocade.  In  addition,  wdien 
combined  with  the  Secure  Fab¬ 
ric  Operatii^  System  software 
announced  in  late  March,  Fab¬ 
ric  Manager  supports  the  im¬ 
plementation  of  netwotk- 
based  security  policies,  said 
Steve  Daheb,  the  company’s  di¬ 
rector  of  product  marketing. 

For  example,  the  software 
offers  authentication  capabili¬ 
ties  and  can  be  used  to  en¬ 
crypt  control  information  or 
management  data  that’s  sent 
among  different  devices  on  a 
SAN.  Daheb  said  the  previous 
version  of  Fabric  Manager 
supported  some  SAN  security 
policies  in  the  form  of  zoning. 
But  be  noted  that  with  the  de- 
vice-level  controb  built  into 
the  upgrade,  “thb  b  a  full 
policy-based  infrastructure.” 

A  lock’ on  Security 

Michelle  Butler,  technical  pro¬ 
gram  manager  for  the  National 
Center  for  Supercomputing 
Applications  at  the  University 
of  lUinob  at  Urbana-Cham- 
paign,  said  she  expects  to  de¬ 
ploy  the  new  Fabric  Manager 
release  soon.  Butler  noted  that 
she  likes  its  ability  to  “lock 
a  port  down  and  get  into  a 
switch  without  having  to  pro¬ 
tect  our  own  switch  or  net- 
woik  with  a  firewalL” 


Butler  manages  three  SANs  total  half  a  petabyte  of  data  by 
—  two  with  storage  capacities  the  end  of  summer,  she  said, 
of  60TB  each,  and  one  with  With  the  upgrade.  Brocade 

40TB.  The  SANs  will  likely  b  “probably  ahead  of  the  game 


compared  with  most  of  the 
competition  from  the  security 
aspect.”  noted  Randy  Kerns, 
an  analyst  at  Evaluator  Group 
Inc.  in  Englewood.  Colo. 

Fabric  Manager  4.0.  wdiich 
will  be  sold  through  disk  array 


vendors  chat  resell  Brocade's 
Silkworm  switches,  can  also 
be  used  to  manage  host  bus 
adapters  made  by  (3osu  Mesa, 
Calif. -based  Emulex  Corp..  via 
the  Fabric  Device  Manage¬ 
ment  Interface  standard.  I 


Out-of-the-Box 


Best  Practices 
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I  AM  A  CISCO  7960G 
IP  PHONE. 


I  AM  MORE  TALK 
AND  LESS  WALK. 

I  HAVE  MORE  WAYS  OF  GETTING  PEOPLE  TALKING.  BUT  I  AM  NOT  ALL  TALK. 
I  AM  VOICE  AND  DATA,  BOTH  ON  THE  SAME  TEAM.  I  HAVE  THE  POWER  TO 
PUNCH  TIME  CLOCKS,  LISTEN  TO  EMAIL  AND  SCHEDULE  APPOINTMENTS. 

I  HAVE  THE  POWER  TO  SAVE  VALUABLE  MILEAGE  ON  OFFICE  MOVES  AND 
I.T.  STAFF  SHOES.  I  AM  A  SECURE,  PINT-SIZED  PRODUCTIVITY  EXPERT  THAT 
DELIVERS  SUPER-SIZED  ROI.  I  AM  MORE  THAN  A  CISCO  7960G  IP  PHONE. 


THIS  IS  THE  POW^  OF  THE  NETWORK.  nOW. 


Cisco  Systems 
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PATRICIA  KEEFE 


rr  Superheroes 

Look  -  up  in  the  SKY!  it’s  a  bird,  it’s  a  plane.  No, 
it’s  another  piece  of  legislation!  Boy.  your  heads  must 
be  spinning.  So  many  new  business  rules,  regulations, 
policies  and  laws  —  some  proposed,  some  pending 
and  some  passed  —  all  hovering  just  overhead.  It’s 
like  the  tornado  from  hell  bearing  down  on  the  hapless  IT  land¬ 
scape.  Better  get  ready,  because  it’s  definitely  headed  your  way. 


[f  Dothing  el$e  keeps  IT  in  busi¬ 
ness  for  the  next  couple  of  years, 

Fm  betting  govcminem  interven¬ 
tion  will.  We’ve  got  HIPAA:  state, 
federal  and  international  privacy 
laws;  Internet  tax  moratoriums: 
antispam  uprisings:  crackdowns  on 
corporate  greed;  smackdowns  on 
Wall  Street:  and  homeland  security 
demands  pressuring  industries 
ranging  from  airlines  to  credit  card 
issuers.  The  timing  couldn’t  be  bet¬ 
ter:  As  we  outsource  application  de¬ 
velopment  and  system  builds,  the 
emphasis  in  IT  will  shift  over  to  un¬ 
derstanding  btisiness  processes  like  never 
before. 

Many  of  these  new  policies  pouring  out  of 
Congress  and  the  states  are  going  to  land,  one 
way  or  another,  at  ITs  feeL  All  this  legislative 
heavy  breathing  means  that  your  business 
counterparts  are  goic^  to  have  to  add  compli¬ 
ance  to  their  core  to-do  lists,  and  they  can’t 
achieve  it  without  IT  You  can  bet  chat  this 
time  there  won’t  be  any  accusations  of  playing 
Chicken  Little  like  we  heard  in  the  aftermath 
of  Y2lc.  And  you  can  be  certain  that  noncom¬ 
pliance  is  going  to  be  made  so  unpalatable  to 
upper  management  that,  for  once,  IT  ought  to 
be  able  to  get  the  funding  it  needs  to  effect  ap¬ 
propriate  system  and  infrastiucture  changes. 

So.  bow  to  get  a  handle  on  all  this? 

Well,  first,  you  need  to  figure  out  the  legisla¬ 
tive  fallout  for  your  company.  Which  oetriy 
passed  or  pending  rules  will  apply  to  your 
businest?  Your  industry?  Your  international 
operations? 

Next,  familiarize  yourself  and  then  your  staff 
with  the  requirements  and  deadlines  laid  out 
in  these  new  policies.  Is  there  an  industry 
coalition  looking  into  the  issue  or  working  up 
possible  guideli^?  If  so,  ioin  it.  If  not,  consid¬ 
er  launching  one. 

Ditto  for  inside  the  company.  If  your  compa¬ 
ny  has  a  steering  committee  tasked  with  ensur¬ 
ing  compliance  with  the  new  regulations,  make 
sure  IT  is  on  it  There  isn’t  one?  Mandate  it 

Now  get  together  with  the  business  team 


and  do  a  thorou^  audit  of  the 
affected  processes  within  your 
company  and  the  systems  they 
depend  on.  What  are  the  weak 
links?  Where  do  you  need  to  add 
or  delete  or  make  redundant?  And 
bow  can  technology  plug  holes  or 
ease  the  process? 

Next,  figure  out  the  technology 
equation.  Is  this  a  patch  job.  or 
are  we  talking  new  systems?  Is 
this  a  custom  build,  or  are  there 
off-the-shelf  products  catering  to 
this  issue?  Has  anyone  else  used 
these  products?  Get  references. 

Then  you  need  to  map  out  a  project  plan, 
deadlines,  budgeting  and  stafTing  needs.  And 
you'll  have  to  bird-dog  this  protect  all  the  way 
down  the  line.  It’s  not  just  your  deadlines  at 
stake  —  the  legislation  will  have  imposed 
some  as  weU. 

Corporate  America  caught  a  lucky  break 
with  the  Sarbanes-Oxley  deadline  extension, 
but  that  was  probably  an  aberration.  It’s  going 
to  take  a  team  of  superheroes  to  rescue  some 
of  these  business  processes  and  wrestle  these 
regulations  to  the  ground.  Does  IT  have  the 
right  sUiff?  Your  business  will  be  riding  on  it  • 


PIMM  FOX 


The  New  Cluster  Model 


Hi 


IGH-AVAILABILITY  clustering  is  too  com¬ 
pelling  to  ignore.  Typical  clustering  mod¬ 
els  for  Unix  have  one  server  doing  the 


work,  with  another  standing 
by  idle  in  case  of  failure.  This 
active/passive  approach  can 
double  hardware  costs  and 
add  time  and  expense  to  de¬ 
ployment  and  management. 
That’s  a  fair  amount  of  capital 
to  sink  into  unused  computing 
resources.  But  the  confluence 
of  three  factors  may  change 
the  way  clustering  is  ap¬ 
proached. 

First,  Intel’s  Xeon  proces¬ 
sors  offer  a  one-two  punch  of 
lower  price  and  competitive 
performance  when  compared 
with  RISC  chips  running  Unix. 

Second,  the  emergence  of 
Linux  for  Intel  servers,  cou¬ 
pled  with  low-laten¬ 
cy  interconnects  to 
bind  servers  togeth¬ 
er  using  Gigabit  Eth¬ 
ernet  or  Infiniband 
technology,  means 
better  server  com¬ 
munication. 

Finally,  storage 
decoupled  from 
servers  and  the  ac¬ 
ceptance  of  stora^ 
area  rtetworics  and 
Fibre  Channel  tech¬ 
nology  make  it  possible  to  ag¬ 
gregate  servers  that  then  can 
act  as  one  large  machine. 

Companies  such  as  Poly- 
Serve  Inc.  in  Beaverton,  Ore., 
and  Sistina  Software  Inc.  in 
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Minneapolis  offer  software  to 
tackle  different  aspects  of 
clustering.  Sbtina's  products 
enable  the  sharing  of  stored 
data,  while  PolyServe  software 
makes  it  possible  to  manage 
Intel-bas^  server  clusters. 

Compare  prices.  A  Unix 
clustering  product  for  Solaris 
begins  at  around  $6,000  (and 
up  to  $50,000  per  server).  For 
two  Sun  Fire  ^00  machines 
with  active/passive  clustering, 
the  cost  is  about  $30,000  per 
server.  This  is  designed  for 
high  availability  and  doesn’t 
have  any  shared  data  cluster¬ 
ing  or  multiple  server  combi¬ 
nations.  PolyServe  says  its 
software  costs 
$3,000  per  CPU. 
which  on  a  duster 
of  four  two-proces¬ 
sor  machines  (eight 
CPUs)  would  run 
$24,000. 

Rather  than 
dump  a  ton  of  mon¬ 
ey  into  a  big  box 
for  a  mission-criti¬ 
cal  data  center, 
buying  a  bunch  of 
Intel  servers  and 
coupling  them  to  a  SAN  could 
be  just  as  effective  as  a  Unix 
setup,  at  much  lower  cost. 

Another  trend  is  new  clus¬ 
tering  and  shared  data  storage 
software  that  goes  beyond  the 
availability  layer  to  the  file 
system  level  so  all  servers  can 
see  and  share  data.  The  soft¬ 
ware  arbitrates  who  reads  and 
writes  data  to  disk  at  what 
time,  and  concurrent  process¬ 
ing  of  data  means  more  for 
your  hardware  dollar. 

Also,  consider  the  flexibility 
that  clustering  bric^  When 
infrastructure  has  to  grow,  you 
can  connect  the  new  server  to 
the  SAN  and  add  clustering 
software  to  that  node.  Appli¬ 
cations  don't  need  to  change, 
and  the  IT  learning  curve  for 
moving  from  Unix  to  Linux 
shouldn’t  be  too  arduous. 

Periups  some  of  the  savings 
could  go  to  IT  staff  bonuses.  I 


Now  you  can  know 
who  made  the  change 
In  addition  to  what, 
when,  where,  and 
how  data  change 
has  occurred. 


Tripwire*  assures  the  integrity  of  your  data 
and  gives  you  the  ability  to  Immediately  detect 
and  pinpoint  undesired  change  across  all  your 
servers  and  network  devices.  By  establishing 
a  baseline  of  data  in  its  known  good  state, 
Tripwire  software  monitors  and  reports  any 
changes  to  that  baseline  arKf  enables  rapid 
discovery  and  recovery  when  undesired 
change  occurs.  Thus  ensuring  the  stability  of 
your  information  services 
Maximize  System  Uptime 

■  Identify  change  quickly 

■  Enable  quick  restoration  to  a  desired  state 

■  Eliminate  risk  and  uncertainty 

increase  IT  Staff  Productivity 

■  Lower  costs  and  frustration 

■  Greatly  reduces  the  time  it  takes  to 
find  and  diagnose  problems 

Failsafe  FourKlatlon  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Enable  detailed  audit  reporting 

■  Maintain  granular  visibility  and  control 


Tripwire's  Integrity  Assurance  solutions  are 
the  only  way  to  have  100%  confidence  that 
your  systems  remain  uncompromised.  In  the 
event  of  a  change  in  state,  you  will  know  who 
made  the  change  and  exactly  what,  when, 
where,  and  how  change  has  occurred  so 
you  can  recover  quickly. 

For  a  FREE  30-day  fulty-functional  demo 
and  copy  of  the  white  paper  “Integrity 
Assurance  in  a  Layered  Security  Strategy... 

call  toll-free:  1 -800-TRIPWIRE  (874.7947) 
or  visit  http://enterprise.tripwire.com  today! 
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LOW  COST. 

NO  COMPROMISE 


SUN  RRE"'VeoX  SERVER: 

>  INTEL  XEON  2^  GHZ  PROCESSOR 

>  RUNS  SOLARIS"  9  OS  FOR  X86  OR  RED  HAT*  ENTERPRISE  LINUX*  ES 


$2450. 


SUN  RRE  V210  SERVER: 

>  RACK-OPTIMIZED^  ULTRASmRC*/S01ARIS  OS 

>  INTEGRATED  WITH  AWARD-WINNING  SUN"  ONE  MIDDLEWARE 


$2,995. 


SUN  STOREDGE"  3310  SCSI  ARRAY: 

>  HIGH-DENSITY,  MODULAR  STORAGE 

>  HIGH  AVAILABILITY  CONHGURATIONS 


SUN  HRE  BlOO  BLADE  SERVER: 

>ULTRASPARC  OR  X86  PROCESSOR 
>  RUNS  SOLARIS  8, 9,  OR  RED  HAT  ENTERPRISE  LINUX  ES* 


$1,795. 

THE  LOW  COST  MOVE  IS  ON 


^Sm 

microsystems 


WWW.SUN.COM/LOWCOST 
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Layoff  Survivors 

When  AUmerica  CIO  Greg  Tranter 
(far  r^t)  got  the  news  that  he  had 
to  cut  his  IT  budget,  he  immediately 
told  his  staff.  “Our  employees  expect 
that  we  will  tell  them  \sdiat  we  know 
when  we  know  it,”  he  says.  Plig»  26 


k  1 


tfi  isijuod  about  thi-ir  |0l}-,  CarjubLit  j  Dunald  H  Newsoni  luenter;  vsitd  Alison  Brojdvvjy  jnd  Slielid  Vuyles. 
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Sweet  Success 

TTie  IT  staffers  at  No.  1-ranked 
Hershey  Foods  Corp.  are  like  kids  in 
a  candy  shop,  working  at  a  company 
considered  an  American  icon  anH 
getting  their  hands  sticky  on  some 
120  IT  projects  under  way.  PlQl  28 


Even  when  times 
are  hard  and  money 
is  tight,  these  em¬ 
ployers  do  their 
best  to  keep  their  IT 
workers  foojsed 
and  challenged 
and  to  give  them  a 
reason  to  be  proud. 
By  Steve  Ulfeider 


IF  YOU  WORK  in  IT  these 
days,  you  don’t  need  any¬ 
one  to  tell  you  that  times 
are  tough.  You  might  have 
watched  as  colleagues 
packed  their  cubicles  and 
beaded  to  the  unemploy¬ 
ment  office.  You  probably 
haven't  gotten  a  promotion 
or  a  decent  raise  in  a  udiile.  And 
morale  in  your  department  has  likely 
shrunk  ri^t  along  with  the  IT  budgM. 

Although  it  may  look  bleak  where 
you  are,  not  all  of  your  IT  brethren  are 
singing  the  blues.  Some  employers  are 
bucking  the  native  trends.  T^’re 
fmding  ways  to  give  their  IT  woricers 
the  pay.  training  and  technolt^  proj¬ 
ects  they  crave. 

At  Caraustar  Industries  Inc.,  which 
ranked  No.  13  on  this  year’s  Best  Places 
to  Work  in  IT  list,  staffers  are  reveling 
in  the  Eamily-ffiendly  flextime.  Instead 
of  ^ing  to  offshore  outsourcers,  cool 
technology  projects  at  Na  17  Ford  Mo¬ 
tor  Ca  are  stayii^  in  the  handc  of  the 
Dearborn,  Midt-based  IT  staff. 

Computerworicf  s  search  to  find 
these  top  companies  began  six  months 
ago  with  a  call  for  nominations.  Sur¬ 
veyed  companies  earned  points  for 
great  training  t^ons,  benefits  and 
pay.  but  this  year,  it  was  the  employees 
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who  got  the  final  word.  More  than  half 
of  a  company's  score  came  from  a  sur¬ 
vey  of  its  IT  employees  and  what  those 
employees  said  is  important  to  them  in 
their  jobs.  The  100  B^t  Places  are  list¬ 
ed  on  the  following  pages  (for  a  de¬ 
tailed  look  at  our  methodolc^.  see 
page  36). 

These  companies  start  with  the  stan¬ 
dard  fare  that  IT  employees  used  to 
take  for  granted  —  competitive  pay. 
health  insurance  and  sufificient  vaca¬ 
tion  time.  According  to  our  survey  of 
more  than  11.500  employees  at  these 
wirming  companies,  those  basics  are 
very  much  appreciated  in  today's  econ¬ 
omy  (see  ch^  at  right).  But  what  sep¬ 
arates  the  good  employers  fiom  the 
great  ones? 

Interviews  with  FT  workers  of  all 
stripes  —  from  help  desk  technicians 
to  (^lOs  —  indicate  that  in  a  down 
economy,  the  100  Best  Places  earn  the 
honor  by  using  modem  technologies 
that  offer  challenges,  ensurii^  that  em¬ 
ployees  get  the  training  they  need  to 
meet  those  challenges,  bending  to  ac¬ 
commodate  family  and  personal  needs, 
and  tying  all  of  them  together  with 
pride  in  the  work  of  not  only  IT.  but 
also  the  business  as  a  whole. 

Rare  for  Flexibility 

This  comptany  is  just  so  family-flexi¬ 
ble."  says  Kaci  Tiimer  of  her  employer. 
(3araustai.  a  cardboard-packaging  com¬ 
pany  with  2002  revenue  of  $950  mil¬ 
lion.  "On  the  one  hand,  I  want  to  say 
they’re  strict  because  they  sure  expect 
you  to  do  your  job.  But  when  you  ^ow 
you  can  do  it,  they’ll  do  anything  to  ac¬ 
commodate  your  family  needs.”  says 
Turner,  a  systems  operator  and  help 
desk  technician  at  the  Austell.  Ga.- 
based  company. 

As  our  survey  of  IT  woritersat  these 
Best  Places  indicates,  flexible  work 
hours  and  telecommutii^  programs 
are  prized  by  staffs.  Said  one  IT  woik- 
er.  "I'm  given  the  flexibility  with  my 
work  schedule  that  helps  me  stay  b^- 
anced  between  home  and  work.  1  don’t 
feel  that  1  have  to  choose  to  be  a  moth¬ 
er  or  an  employee.  Pm  empowred  and 
able  to  accomplish  both." 

"IT  people  are  working  their  butts 
off."  says  Tim  Talbot,  CIO  at  PHH 
Arval  (Na  14).  a  fleet-leasing  company 
based  in  Hunt  Valley.  Md.  "You've  got 
to  support  that  any  way  you  can."  PHH 
Arval  uses  work-at-home  products 
from  Avaya  Inc.  and  a  virtual  private 
networii  from  Cisco  Systems  Inc.  to  let 
IT  staffers  telecommute  full  time  or  on 
an  ad  hoc  basis.  ' 

Wal-Mart  Stores  Inc.  CIO  Linda  Dill-  ' 
man  agrees  with  Talbot.  "IT  people  i 


Most 

Desirable 

Benefits 

Our  survey  asked  IT  workeis  lo  rank  the 
importance  of  wious  benefits  on  a  scale 
of  1  to  to.  with  1  being ‘not  at  aff  impor¬ 
tant''  and  to  being  ‘extremety  irrqxirtant.' 
Here  are  some  notable  findings  from  both 
ends  of  the  spectrum: 
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Pride  & 
Ethics 

IT  workers  were  asked  to  stale  their  level 
of  agreement  with  a  series  of  statements 
on  a  scale  of  1  to  5.  with  1  ridicating 
'sbongly  disagree*  and  5  being ‘strongly 
agree.*  IT  workers  in  Ibp  tOO  companies 
get  alono  with  their  coNeagues  and  lake 
pridemthekempioyefs'workandethics- 
notabfe  characteristics  in  a  corporate 
AmehcathathaslakensomepubliC' 
relations  beatings  in  the  past  few  years. 

Percentage  who  aoTMd 
or  atranglif  agrtidt 


•I  I'  ...  .  .  •  96% 


here  know  that  sometimes  the  hours 
aren’t  8  to  5,"  she  says  of  the  Benton- 
ville.  Ark.,  retail  giant,  which  came  in 
at  No.  15.  "In  turn,  we  need  to  be  flexi¬ 
ble."  Dillmao  says  the  bulk  of  Wal- 
Mart's  telecommuting  and  flexible 
scheduling  is  done  informally,  allowing 
maiugers  and  workers  to  create  sensi¬ 
ble  arrangements. 


The  Pride  and  the  Passfon 

In  the  post-Enron,  post-WoridCom. 
post-job-security  era,  eyes  may  roll 
when  two  notions  arise:  pride  in  the 
corporate  mission  and  a  warm,  f^ilial 
woik  environment.  But  make  no  mis¬ 
take  —  these  are  crucial  components 
at  the  top  IT  employers. 

"In  my  department,  it  is  easy  to  see 
that  Che  work  we  do  is  important."  one 
respondent  says.  "Therefore,  individu¬ 
als  perform  at  high  levels  and  stay  mo¬ 
tivated."  Many  workers  echo  that  senti¬ 
ment.  Whether  they  are  remotely  mon¬ 
itoring  intensive-care  ho^ital  patients 
or  supporting  sales  of  three-day 
Carlbl^an  cruises,  IT  workers  excel 
when  they  believe  their  employers  are 
going  about  their  business  honorably. 
Pausing  to  search  for  the  right  word, 
(^araustar's  Thnier  says,  "This  compa¬ 
ny  is  very . . .  moral” 

And  while  "We’re  like  a  family  here" 
may  be  a  cliche,  Che  phrase  comes  up 
too  frequently  to  be  ignored.  An  aston¬ 
ishing  percentage  of  employees  at 
these  top  IT  employers  have  good  rela¬ 
tionships  with  their  colleagues  (see 
chart  below). 

"The  economic  downturn  hasn't 
been  good  for  anyone."  says  Donald  H. 
Newsom,  IT  director  at  Caraustar.  But 
leading  employers  have  found  creative 
ways  to  ke^  IT  employees  satisfled 
and  loyal  "Our  pay  increases  have 
been  down,  and  our  bonuses  have  been 
reduced,”  Newsom  says.  "But  everyone 
here  feels  good  about  their  jobs  and  re¬ 
alizes  chat  as  times  get  better,  so  will 
these  benefits." 

Loving  Leaming 

Education  and  training  are  crucial  to 
technologists,  and  that  importance  was 
reflected  in  the  survey.  "[My  employ¬ 
er]  provides  significant  opportunity 
for  advancement  and  emphasizes 
everyone  being  a  leader  with  a  top- 
down  commitment  to  leadership  train¬ 
ing."  one  survey  respondent  said. 

David  Foote,  president  of  IT  work¬ 
force  research  firm  Foote  Partners  LLC 
in  New  Caxaan,  Coon.,  and  a  COmput- 
erworfd  columnist,  says  the  training 
budget  is  the  sii^le  best  predictor  of 
Top  100  status.  "You  see  it  year  in  and 
year  out,"  be  says.  The  companies  that 
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invest  in  their  workers  are  consistently 
rewarded." 

In  addition  to  generous  certification 
and  tuition-reimbursement  programs, 
many  Top  100  companies  seek  to  make 
training,  education  and  professional 
growdi  part  of  the  IT  environment.  At 
ninth-ranked  Discover  Financial  Ser¬ 
vice  in  Riverwoods.  m.  IT  employees 
set  individual  plans  annually,  accord¬ 
ing  to  CIO  Diane  Offereins.  This  year, 
each  worker  has  been  encouraged  to 
set  a  goal  of  40  hours  of  education  not 
directly  related  to  his  iob. 

Ibp  100  employers'  education  and 
growth  initiatives  range  from  grass¬ 
roots  efforts,  such  as  the  worker-initi¬ 
ated  "Lead  rr*  leadership  program  at 
Royal  Caribbean  Cruises  lid.  (Na  U). 
to  more  formal  prc^rams. 

For  example.  Ford  has  learned  that 
because  it  relies  less  on  outsourcing 
now,  "we  need  a  robust  learning  envi- 
ronment,”  Roger  MitcheU.  the  au¬ 
tomaker's  director  of  IT  strategy  and 
devek)(nnent  That's  the  only  way  to 


help  people  understand  what  they  are 
to  the  organization  and  what  [that  or¬ 
ganization  is]  going  to  look  like  three 
to  flve  years  from  now." 

One  popular  component  of  that 
education  pit^ram  is  "shadowing"  — 
having  IT  woricers  follow  operations 
employees  for  a  week  to  better  learn 
the  business.  Many  Top  100  companies 
offer  »milar  ‘mile-in-roy-moccasins” 
programs. 


FtBshChalenge 

TWo  years  ago.  Ford’s  IT  personnel 
consisted  of  30%  iittemal  staffers  and 
70%  outside  consultants.  Marv  Adams, 
vice  president  and  CIO.  elected  to 
buck  the  outsourcii^  trend  and  re¬ 
verse  that  ratio.  Mo^e  was  a  mafor 
factor.  “When  70%  of  the  work  is  on 
the  outside,  the  best  proj¬ 
ects  tend  to  float  outside,"  f 

Adams  says,  which  stirred 
resentment  among  Ford  *  PulB^S 

IT  employees.  that  nVeSt  IH 

“Now.  the  realty  exdt-  f||Avuww4far« 
ing  work  — Web  services,  ffWIWId 


e  average  in  a  single  year. 

The  terrorist  attacks  of  Sept.  11. 2001. 
!  devastated  the  travel  and  leisure  indus¬ 

try.  As  a  result,  the  IT  organization  at 
Royal  Caribbean  watched  a  $200  mil¬ 
lion  revan^  of  all  nrajor  systems, 
internally  dubbed  Project  Leapfrog, 
slam  to  a  halt.  aiKl  half  of  the  Miami- 
es  based  company’s  400  IT  staffers  were 

’  laid  off. 

“People  were  mentally  beaten  down 
and  morale-challenged."  says  CIO 
Thomas  Murphy.  Throu^  [fiscal ) 
2002,  we  were  in  maintenance  mode. 

1  About  all  we  could  do  was  keep  the  eo- 
is.  gines  running.” 

Entering  fiscal  2003.  though,  Mur¬ 
phy  devis^  a  way  to  keep  Royal 
Caribbean’s  IT  department  focused 
and  challenged.  The  problems  rhat  ha<j 
plagued  the  ill-feted  Proj- 
InGCOin*  cct  Leapfrog  persisted; 
|M|||pM  The  company's  systems 

®  jumble  of  siloed 
nV6St  N1  legacy  applications  with 

little  intempplication 


grid  computing,  a  massive  are  consistent-  sharing.  The  company 


server  consolidation,  new  |y  KMilSIfriftH  needed  a  more  modular. 

CAD/engioeering  tools —  . *  less  expensive  way  to  ra- 

is  all  inside.  Not  only  are  sAnrs  BoccincMT  tionalize  its  applications. 

^  the  really  fan  tech-  Jumpstart. 

Dology  proiects.  they’re  Royal  Caribbean  is  in  the 

the  ones  that  Ining  Ford  the  most  early  stages  of  a  program  aimed  at  "de¬ 
value.”  says  Adams.  In  the  past  18  tanking  all  of  this  mess,  a  component 

months,  be  adds.  Fold  IT  has  hired  775  at  a  dme,”  rather  than  fa  one  massive 
pet^le  —  and  lost  seven  The  result?  In  $200  million  gulp,  Murf^  says.  Using 


an  aimual  internal  survey,  IT  job  satis- 
fection  rose  from  slightly  under  the 
company  average  to  five  points  above 


IBM's  WebSphere  middleware  and 
Microsoft  Corp.’s  BizTalk,  Royal 
Caribbean  is  retaining  its  ASMOO  sys¬ 
tem  and  rewriting  its  enterprise  appli¬ 
cations  (such  as  the  software  h  uses  to 
boc^  tours  for  groups)  one  at  a  time. 

N<n  only  is  the  project  helping  the 
business  move  forward  during  rocky 
economic  times,  but  it’s  also  challeng¬ 
ing  IT  staffers  to  learn  new  «kilk  aiKl 
be  more  lesourcefaL 

Survey  respondents  value  a  chal¬ 
lenge.  Top  100  companies  tend  not 
only  to  woik  wifa  advanced  tech¬ 
nology  but  also  to  ^read  that  work 
throughout  their  organizatioits  to 
avoid  creating  groups  of  haves  (those 
developing  cutting-edge  applications) 
and  have-nots  (those  stuck  maintain¬ 
ing  old  systems). 

This  year’s  Top  100  make  h  clear 
that  even  during  hard  times,  employers 
can  earn  the  re^)ect  and  loyalty  of 
their  IT  woricers.  The  ecoiKMny  may 
change,”  Foote  says,  “but  human  nature 
doesn’t”! 


Areyou 
satisfied  with 
your...? 
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who  ^oi  the  final  word.  More  than  half 
ofa  company's  score  came  from  a  sur¬ 
vey  of  its  IT  employees  and  what  those 
employees  said  is  important  to  them  in 
their  jobs.  The  100  Best  Places  are  list¬ 
ed  on  the  following  pages  ( f«>r  a  de¬ 
tailed  look  at  our  methodoI«>g^-.  see 
page  5b). 

These  companies  start  with  the  stan¬ 
dard  fare  that  IT  employees  used  to 
take  for  granted  —  competitive  pay. 
health  insurance  and  sufficient  vaca¬ 
tion  time.  According  to  our  survey  of 
more  than  11.500  employees  at  these 
winning  companies,  those  basics  are 
very  much  appreciated  in  today’s  econ¬ 
omy  (see  chart  at  right).  But  what  sep¬ 
arates  the  good  employers  from  the 
great  ones? 

Interviews  with  IT  workers  of  all 
stripes  —  from  help  desk  technicians 
to  CIOs  —  indicate  that  in  a  down 
economy,  the  100  Best  Places  earn  the 
honor  by  using  modern  technologies 
that  offer  challenges,  ensuring  that  em¬ 
ployees  get  the  training  they  need  to 
meet  those  challenges,  bending  to  ac¬ 
commodate  family  and  personal  needs, 
and  lying  all  of  them  together  with 
pride  in  the  work  of  not  only  IT.  but 
aJ.so  the  business  as  a  whole. 

Hare  for  Flexibility 

"This  company  is  just  sty  family-flexi¬ 
ble."  says  Kaci  Turner  of  her  employer. 
Caraustar,  a  cardboard-packaging  com¬ 
pany  with  2002  revenue  of  5^50  mil¬ 
lion.  "On  the  one  hand,  I  wont  to  say 
they’re  strict  because  they  sure  expect 
you  to  do  your  job.  But  when  you  show 
you  can  do  it.  they'll  do  anyihing  to  ac¬ 
commodate  your  family  rvecds."  says 
Tuffier.  a  systems  operator  and  help 
desk  technician  at  the  Austell.  Ga.- 
based  company. 

As  our  survey  of  IT  workers  at  these 
Best  Places  indicates,  flexible  work 
hours  and  telecommuting  programs 
arc  prized  by  staffs.  Said  one  IT  work¬ 
er.  'Tm  given  the  flexibility  with  my 
work  schedule  that  helps  me  stay  bal¬ 
anced  between  home  and  work.  I  don't 
feel  that  I  have  to  choose  to  be  a  moth¬ 
er  or  an  employee.  I’m  empowered  and 
able  to  accomplish  both." 

"IT  people  are  working  their  butts 
off."  says  Tim  Talbot.  CIO  at  PHH 
Arval  (No.  14).  a  fleet-leasing  company 
based  in  Hunt  Valley.  Md.  "You've  got 
to  support  that  any  way  you  can."  PHH 
Arval  uses  work-ai-home  products 
from  Avaya  Inc.  and  a  virtual  private 
nctwort^  from  Cisco  Systems  Inc.  to  let 
IT  Staffers  telecommute  full  time  or  on 
an  ad  hoc  basi.s. 

Wal-Mart  Stores  Inc.  CIO  Linda  Dill- 
man  agrees  w  ith  Talbot.  "IT  people 


Most 

Desirable 

Benefits 


Our  survey  asked  IT  workers  to  rank  the 
importance  of  vanous  benefits  on  a  scale 
of  1  to  10.  with  1  being  "not  at  all  impor¬ 
tant'  and  to  being  "extremely  important." 
Here  are  some  notable  findings  from  both 
ends  of  the  spectrum: 


Percentage  who  gave  benefit  a  10: 


Paid  vacation 
Health  insurance 
Stock  ownership; 
40l(k)  plan 
Flexible  hours/ 
teiecommuting 
Continuing  education 
Reimbursemiint  for 
technical  certification 
Bonuses 

Subsidized  child  care 
i)ob  sharing 
Elder  care/services 


Pride  & 
Ethics 


IT  workers  were  asked  to  slate  their  level 
of  agreement  with  a  series  of  statements 
on  a  scale  of  1  to  5.  with  I  indicating 
■strongly  disagree*  and  5  being  'strongly 
agree  *  IT  workers  in  Top  100  companies 
get  along  wrth  their  colleagues  and  take 
pnde  in  their  employers'  work  and  ethics  - 
notable  characteristics  in  a  corporate 
America  that  has  taken  some  public- 
relations  beatings  in  the  past  few  years. 


Percentage  virho  agreed 
or  strongly  agreed: 


i  have  a  good  relation¬ 
ship  with  my  co-workers 

"1  am  proud  to  work 
for  my  company.' 

"My  job  i.s  intfiestiiH) 
and  challenging  ' 

"I  fiave  access  to  rh? 
tools  and  lechnolugies 
I  r>eed  to  do  my  job 

"Our  company  is  run 
ethically  and  honestly." 


here  know  that  sometimes  the  hours 
aren't  8  to  5."  she  says  of  the  Benton- 
villc.  Ark.,  retail  giant,  which  came  in 
at  No.  15.  “In  turn,  we  need  to  be  flexi¬ 
ble."  Dillman  says  the  bulk  of  Wal- 
Mart's  telecommuting  and  flexible 
.scheduling  is  done  informally,  allowing 
managers  and  workers  to  create  sensi¬ 
ble  arrangements. 

The  Pride  and  the  Passion 

In  the  post-Enron.  post-WorldCom. 
post-job-sccuriiy  era,  eyes  may  roll 
when  two  notions  arise:  pride  in  the 
corporate  mission  and  a  warm,  familial 
work  environment.  But  make  no  mis¬ 
take  —  these  are  crucial  components 
at  the  top  IT  employers. 

"In  my  department,  it  is  easy  to  see 
that  the  w-ork  wc  do  Is  important."  one 
respondent  says.  "Therefore,  individu¬ 
als  perform  at  high  levels  and  stay  mo¬ 
tivated."  Many  workers  echo  that  senti¬ 
ment.  Whether  they  are  remotely  mon¬ 
itoring  intensive-care  hospital  patients 
or  supporting  sales  of  three-day 
Caribbean  cruises,  IT  workers  excel 
when  they  believe  their  employers  are 
going  about  their  business  honorably. 
Pausing  to  search  for  the  right  word. 
Caraustar’s  Turner  says.  “This  compa¬ 
ny  is  very . . .  moral." 

And  while  "WeTc  like  a  family  here" 
may  be  a  cliche,  the  phrase  comes  up 
too  frequently  to  be  ignored.  An  aston¬ 
ishing  percentage  of  employees  at 
these  top  IT  employers  have  good  rela¬ 
tionships  with  their  colleagues  (sec 
chart  below). 

“The  economic  downturn  hasn't 
been  good  for  anyone."  says  Donald  H. 
Newsom.  IT  director  at  Caraustar.  But 
leading  employers  have  found  creative 
ways  to  keep  IT  employees  satisfied 
and  loyal.  "Our  pay  increases  have 
been  down,  and  our  bonuses  have  been 
reduced."  Newsom  says.  "But  everyone 
here  feels  good  about  their  and  re¬ 
alizes  chat  as  times  get  better,  so  will 
these  benefits." 


Loving  Learning 

Education  and  training  are  crucial  to 
technologists,  and  that  importance  was 
reflected  in  the  survey.  “[My  employ¬ 
er!  provides  significant  opportunity 
for  advancement  and  emphasizes 
ever>'one  being  a  leader  with  a  top- 
down  commitment  to  leadership  train¬ 
ing."  one  sur\'ey  respondent  said. 

David  Foote,  president  of  IT  work¬ 
force  research  firm  Foote  Partners  LLC 
in  New  Canaan,  Conn.,  and  a  Comput- 
erworld  columnist,  says  the  training 
budget  is  the  single  best  predictor  of 
Top  100  status.  “You  see  it  year  in  and 
year  out."  he  says.  "The  companies  that 
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invest  in  their  woriters  are  consistently 
rewarded.” 

In  addition  to  generous  certification 
and  tuition-reimbursement  programs, 
many  Top  100  companies  seek  to  make 
training,  education  and  professional 
growth  part  of  the  IT  environment.  At 
ninth-ranked  Discover  Financial  Ser¬ 
vices  in  Riverwoods.  III..  IT  employees 
set  individual  plans  annually,  accord¬ 
ing  to  CIO  Diane  OfFcrelns.  This  year, 
each  w'oricer  has  been  encouraged  to 
set  a  goal  of  40  hours  of  education  not 
directly  related  to  his  job. 

Top  100  employers'  education  and 
growth  initiatives  range  from  grass¬ 
roots  efforts,  such  as  the  worker-initi¬ 
aled  “Lead  IT'  leadership  program  at 
Royal  Caribbean  Cruises  Ltd.  (No.  11). 
to  more  formal  programs. 

For  example.  Ford  has  learned  that 
because  it  relies  less  on  outsourcing 
now,  “we  need  a  robust  learning  envi¬ 
ronment.”  says  Roger  MitchelL  the  au¬ 
tomaker's  director  of  IT  strategy  and 
development.  “That's  the  only  way  to 
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help  people  understand  what  they  are 
to  the  organization  and  what  (that  or¬ 
ganization  isj  going  to  look  like  three 
to  five  years  from  now." 

One  popular  component  of  that 
education  program  is  “shadowing"  — 
having  IT  workers  follow  operations 
employees  for  a  week  to  better  learn 
the  business.  Many  Top  100  companies 
offer  similar  "mile-in-my-moccasins" 
programs. 

Fresh  Challenge 

Two  years  ago.  Ford's  IT  personnel 
consisted  of  30%  internal  staffers  and 
70%  outside  consultants.  Marv  Adams, 
vice  president  and  CIO.  elected  to 
buck  the  outsourcing  trend  and  re¬ 
verse  that  ratio.  Morale  was  a  major 
factor.  "When  70%  of  the  work  is  on 
the  outside,  the  best  proj¬ 
ects  tend  to  float  outside." 

Adams  says,  which  stirred 
resentment  among  Ford 
IT  employees. 

“Now.  the  really  excit¬ 
ing  work  —  Web  services, 
grid  computing,  a  massive 
server  consolidation,  new 
CAD/engineerii^  tools  — 
is  all  inside.  Not  only  are 
these  the  really  fun  tech¬ 
nology  projects,  they’re 
the  ones  that  bring  Ford  the  most 
value.”  says  Adams.  In  the  past  18 
months,  he  adds.  Ford  IT  has  hired  775 
people  —  and  lost  seven.  The  result?  In 
an  annual  internal  survey.  IT  job  satis¬ 
faction  rose  from  slightly  under  the 
company  average  to  five  points  above 
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H  The  com¬ 
panies 
that  invest  in 
their  workers 
are  consistent¬ 
ly  rewarded. 

DAVID  FOOTE.  PRESIDENT 
FOOTE  PARTNERS  LLC 


average  in  a  single  year. 

The  terrorist  attacks  of  Sept.  11. 2001. 
devastated  the  travel  and  leisure  indus¬ 
try.  As  a  result,  the  IT  organization  at 
Royal  Caribbean  watched  a  S2t)0  mil¬ 
lion  revamp  of  all  major  s>'stems. 
internally  dubbed  Project  U’apfrog. 
slam  to  a  hah.  and  half  of  the  Miami- 
based  company's  400  IT  staffers  were 
laid  off. 

"People  were  mentally  beaten  down 
and  morale-challenged."  says  CK) 
Thomas  Murphy.  "Through  (fiscal] 
2002.  we  were  in  maintenance  mode. 
About  all  wc  could  do  was  keep  the  en¬ 
gines  running." 

Entering  fiscal  2003.  though.  Mur¬ 
phy  devised  a  way  to  keep  Rox'al 
(Caribbean's  IT  department  focused 
and  challenged.  The  problems  that  had 
plagued  the  ill-fated  Proj¬ 
ect  Ic'apfrog  persisted: 
'I'he  company's  systems 
were  a  jumble  of  siloed 
legacy  applications  with 
little  inicrapplication 
communication  or  data 
sharing,  'fhe  company 
needed  a  more  modular, 
less  expensive  way  to  ra¬ 
tionalize  its  applications. 

Enter  Project  Jumpstart. 
Royal  Caribbean  is  in  the 
early  stages  of  a  pre^ram  aitried  at  "dc- 
tangling  all  of  this  mess,  a  component 
at  a  time.”  rather  than  in  one  massive 
S200  million  gulp.  Murphy  says.  Using 
IBM's  WebSphere  middleware  and 
Microsoft  Corp.’s  BizTalk.  Royal 
Caribbean  is  retaining  its  AS/WO  sys¬ 
tem  and  rewriting  its  enterprise  appli¬ 
cations  (such  as  the  software  it  uses  to 
book  tours  for  groups)  one  at  a  time. 

Not  only  is  the  pruject  helping  the 
business  move  forward  during  rocky 
economic  times,  but  it’s  also  challeng¬ 
ing  IT  staffers  to  learn  new'  skills  and 
be  more  resourcefiil. 

Survey*  resporKlents  value  a  chal¬ 
lenge.  and  Top  100  companies  tend  not 
only  to  work  with  advanced  tech¬ 
nology  but  also  to  spread  that  work 
throughout  their  o^tanizations  to 
a\'oid  creating  groups  of  haves  (rhi>sc 
developing  cuiting-cdgc  applications) 
and  have-nots  (those  stuck  maintain¬ 
ing  old  systems). 

This  year's  Top  100  make  it  clear 
that  even  during  hard  times,  employers 
can  earn  the  respect  and  loyalty  of 
their  IT  workers.  “The  economy  may- 
change."  Foote  says,  “but  human  nature 
doesn't."  fe 
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Ulfelder  is  a  freelance  writer  in 
Southboro.  Mass.  Contact  him  at 
sulfelder\a  ■charter.net. 
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Layoff 

Surviyors 

Few  IT  departments  came  through  the  past  year  unscathed 
by  layoffs,  and  our  Best  Places  were  no  exception.  How 
did  these  top  companies  ease  the  pain  of  downsizing? 
Communication  tops  the  list.  By  Kathleen  Melymuka 


Early  in  December  2002. 

Alimerica  Financial  Corp. 
CIO  Greg  Tranter  stood 
before  his  assembled  IT 
team  of  about  SOO  and  an¬ 
nounced  the  news  all 
CIOs  dread:  Despite  intensive  cost¬ 
cutting  and  the  layoffs  of  42  colleagues 
the  year  before,  65  more  IT  people 
would  be  laid  off  that  day. 

As  he  ended  the  meeting,  his  people 
applauded. 

Why  would  employees  applaud  such 
devastating  news?  To  support  a  leader 
they  thought  had  done  all  he  could  to 
play  straight  with  them  and  mitigate 
the  coining  pain.  “They  were  grateful 
that  everything  had  been  attempted  to 
minimize  the  layoffs,”  says  software  as¬ 
surance  manager  Art  Nawrocki.  “They 
felt  there  had  been  honest  and  open 
communication.” 

Our  annual  Best  Places  to  Work  is¬ 
sue  typically  celebrates  the  good  news 
about  life  in  IT:  great  projects,  training, 
salaries  and  advancement.  But  last 
year,  28  of  our  Best  Places  experienced 
IT  layoffs,  and  since  adversity  can 
brii^  out  the  best  in  great  companies, 
we  decided  to  look  at  how  they  helped 
their  people  through  bad  times. 

Lay  a  Foundation 

Managing  well  in  hard  times  has 
everything  to  do  with  how  you  handle 
things  before  you  have  to  deliver  the 
bad  news,  says  Dick  Fishbum,  vice 
president  and  CIO  at  Coming  Inc. 

(No.  85),  which  laid  off  550  of  1,200 
worldwide  IT  employees  last  year. 

“You  don't  start  preparing  for  some¬ 
thing  like  this  when  you’re  faced  with 
takif^  the  action,”  he  says.  “It  starts 
with  open  communications  when 
times  are  going  well  about  the  status  of 
the  company  and  how  that  will  affect 
the  IT  organization.” 

At  the  Coming,  N.Y.-based  company, 
a  sharp  downturn  in  telecommunica- 
tions-related  businesses  foreshadowed 
trouble  for  IT.  “As  we  began  to  see 
very  sharp  revenue  impacts  in  the 
company,  we  began  to  communicate 
with  people  in  the  IT  organization.” 
Fishbum  says.  “You  tell  everybody 
everything  you  know  as  soon  as  you 
know  it  so  that  when  you  say  some¬ 
thing,  people  don’t  second-guess  you.” 

"We  were  well  attuned  to  the  down¬ 
turn,  and  we  expected  an  impact,”  says 
Molly  Rumbarger,  Coming’s  manager 
of  corporate/enterprise  applications. 
“Dick  and  his  staff  have  always  been 
really  open.  If  he  knows,  he’s  very  up¬ 
front  and  honest.” 

When  Tranter  got  the  news  that  he 
had  to  cut  $20  million  from  the  IT  bud- 
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get  at  AUroerica  (No.  78).  he  immedi* 
atety  told  his  entire  organization.  **Our 
employees  expect  that  we  will  tell 
them  what  we  know  when  we  know  it." 
be  says.  "We  said  we  would  attempt  to 
find  strategies  to  lessen  the  impact  but 
there  were  no  guarantees." 

Bill  Mangano,  director  of  client  tech¬ 
nology  services  at  Worcester.  Mass.- 
based  AUmerica.  says  FT  employees 
appreciated  TVanter's  candor.  "It  made 
them  nervous,  sure,  because  they 
could  do  the  numbers  and  they  Agured 
we  mi^t  have  to  do  layofl^  but  they 
were  glad  to  bear  it  upfront  rather  than 
behind  the  scenes,”  be  says. 

MHigate  the  Damage 

The  AUmerica  management  team 
stashed  spending  in  every  category 
from  capital  expenditures  to  travel 
They  left  positions  unfUled  and 
brought  contracted  work  back  in- 
house.  Employees  were  kept  in  the 
loop  throu^  an  "Ask  the  CIO"  Web 
site  as  well  as  numerous  all-IT  meet¬ 
ings.  "It  was  like  a  fund-raising  cam¬ 
paign."  Ttanter  says,  "but  instead  of 
liow  much  have  you  raised?*  it  was 
‘How  much  have  we  saved  so  far?* " 

IT  people  wanted  to  help,  so  man¬ 
agement  ofiered  part-time  work  and 
encouraged  them  ro  take  unpaid  fur¬ 
loughs.  About  7^  did.  AUmerica  out¬ 
sourced  114  positions  and  transferred 
an  addition^  2S  people  to  the  out¬ 
sourcer  to  be  placed  in  other  fobs. 
AUmerica  also  transferred  more  than 
20  IT  people  to  the  business  side. 

At  Corning,  while  divisions  like  fiber 
optics  vrere  laying  off  IT  workers,  oth¬ 
ers.  Uke  environmental  sciences,  were 
stiU  hiring.  So  Fisbburn’s  staff  searched 
the  company  for  openings.  If  a  person 
couldn’t  relocate,  he  was  sometimes 
able  to  virtually  join  a  team  located 
elsewhere.  (One  person  on  Fishbum’s 
staff  lives  in  Wales.) 

MetUfe  Inc.  (Na  100)  in  New  York, 
whidi  had  to  lay  off  168  of  its  4X>66  IT 
woricers  last  year,  came  up  with  the 
novel  idea  of  trial  jobs  for  relocated 
workers.  IT  people  who  could  be 
placed  in  the  business  were  offered  a 
six-month  trial  in  a  new  location.  "If 
they  liked  it,  we’d  move  them."  says 
Donna  Mazzola.  vice  president  of  hu¬ 
man  resources. 

When  AUmerica  ran  out  of  options 
with  $6S  million  in  cuts  stiU  to  go, 
Ttanter  met  with  the  business  people 
to  reorder  priorities.  "We  didn’t  want 
to  sUce  10%  off  our  workforce  and  stUl 
have  100%  of  the  work,"  be  says.  "We 
worked  mctensively  with  them  so  work 
would  go  away  as  people  went  away.  I 
won't  say  there  was  no  added  work, 
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but  we  tried  to  tninhnty^  it.” 

CU>ming*s  Fisfaburn  agrees.  "There 
are  times  when  you  have  to  lay  people 
off  without  tile  work  going  away,  but 
our  philosophy  is  to  get  rid  of  the 
work."  he  says. 

Face  the  Music 

The  task  of  choosing  those  to  be  laid 
off  at  (doming  started  with  senior  man¬ 
agers  at  the  sites  where  employees 
were  being  laid  off.  They  drew  up  pre- 


Uminary  lists,  and  other  managers  re¬ 
viewed  them,  adding  and  deleting 
names  based  on  performance  nuances. 
Finally,  an  independent  corporate  di¬ 
versity  panel  assured  that  ik>  group 
would  be  disproportionately  affected. 
The  multiple  reviews  eliminated  any 
chance  that  layoEEs  were  related  to  per¬ 
sonality  issues.  Fishburn  says. 

The  evening  before  the  layoff  an¬ 
nouncements  at  AUmerica,  TVanter 
caUed  the  management  team  together 
to  bear  who  would  be  laid  off  and  pre¬ 
pare  for  questions  people  might  a^ 
"Greg  set  the  tone."  says  Nawrockl 
"He  had  to  lay  off  some  of  his  leader¬ 
ship.  The  pain  was  shared.” 

The  nem  day.  Tranter  caUed  the  de- 
partmentwide  meeting,  announced  the 
bad  news,  explained  what  would  hap¬ 
pen  throughout  the  day  and  took  ques¬ 
tions.  Afterward,  every  person  met 
with  his  direct  manager.  Those  who 
were  retained  were  told  whether  their 
role.  respoosibUities  or  manager  would 
change.  Those  who  were  laid  off  met 
with  a  human  resources  person  about 
the  severance  plan  and  placement  ser¬ 
vices.  Outplacement  and  other  em¬ 
ployee  services  were  available  on  site. 

Corning  took  a  creative  approach  to 
outplacement  services.  In  go^  times, 
there  bad  been  on-site  recruiters  for 
the  growing  telecom-related  business¬ 
es.  When  the  layoffs  came,  the  re¬ 
cruiters  morphed  into  outplacement 
advisers. 

At  AUmerica,  a  group  of  people  who 
had  been  laid  off  thanked  'banter  for 
the  way  he  had  handled  things.  "They 
were  prepared,”  Mangano  says.  "They 
understo^  the  situation  and  felt  they 
had  been  treated  with  respect." 

Linda  McCjOwan,  strategic  measure¬ 
ment  consultant  at  AUmerica.  says  she 
saw  one  laid-off  employee  advising 
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colleagues  on  bow  to  complete  hb 
work.  "He  said.  'If  you  need  help,  give 
me  a  caU.  Don't  worry  about  iC  "  Mc¬ 
Gowan  recalls. 

Many  employees  at  Corning  seemed 
more  concerned  for  their  supervisors 
than  for  themselves,  says  Karen  Madi¬ 
son.  IT  human  resources  manager.  "I 
heard  them  say.  ‘I  know  this  is  hard  on 
you.  Are  you  going  to  be  OKT  " 

When  the  layoff  were  done  at 
AUmerica.  Tranter  told  everyone  via 
e-maiL  "In  some  layoffs,  you  wonder 
when  it  wiU  ever  end,"  McGowan  says. 
"We  had  a  clear  understanding  of  what 
was  happening,  why,  bow  and  when  it 
was  over." 

Alow  the  Dust  to  Settle 

In  the  days  immediately  foUowing. 
Tranter  made  sure  there  were  no  for¬ 
mal  meetings  so  aU  managers  could  be 
available  in  their  offices.  "We  also  did 
quite  a  bit  of  management  by  walking 
around."  he  says.  "We  encouraged 
management  to  bring  groups  together 
and  calk  things  through  and  let  people 
open  up  and  vent  if  they  needed  ta" 

About  a  week  later,  he  called  every¬ 
one  together  again.  He  told  them  it  had 
been  difficult  but  it  was  over  and  it 
was  lime  to  talk  about  the  future. 

"Greg  said  there  are  no  guarantees 
anywhere,  but  we  had  a  lot  of  work  to 
do  and  we  had  to  move  on."  Nawrockl 
recalls.  There  is  no  security.  You  have 
to  be  resigned  to  that,  but  you  don't 
dwell  on  H." 

"We  have  some  reaUy  neat  strategic 
stuff  that  has  been  ^le  to  energize  em¬ 
ployees."  TYanter  says.  "Business  is  stiU 
investing  in  some  reaUy  good  technol¬ 
ogy.  and  employees  see  that  there  is  a 
future  here." 

Fshburn  cautions  that  gening  back 
on  track  after  layoffs  is  tridey,  because 
if  you  try  to  focus  on  the  future  before 
Che  worst  is  over,  you  can  destroy  your 
credibility.  There's  a  certain  ‘clutch 
and  accelerator'  a^^ect  of  commimka- 
tioa"  be  says,  and  you  don’t  want  to 
start  revving  up  until  you're  sure  the 
layoflfr  are  done.  "Yon  get  only  one 
chaz»ce  to  refocus  on  the  future,"  be 
says,  "so  that’s  a  timing  issue  you  need 
to  think  about  and  worii  your  way 
through." 

Layoffs  are  always  painful  but  peo¬ 
ple  survive  when  they're  approached 
with  honesty  and  respect.  "People  here 
were  prepared."  says  Sue  Matys.  HR 
relationship  manager  for  IT  at  AUmeri¬ 
ca.  "and  that  made  the  difference."  k 
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gel  at  Allmerica  (No.  78).  he  immedi¬ 
ately  told  his  entire  organization.  "Our 
employees  expect  that  we  will  tell 
them  w'hat  we  know  when  we  know  it,” 
he  says.  “We  said  we  would  attempt  to 
find  strategies  to  lessen  the  impact  but 
there  were  no  guarantees.” 

Bill  Mangano,  director  of  client  tech¬ 
nology  services  at  Worcester.  Mass.- 
based  Allmerica.  says  IT  employees 
appreciated  Tranter’s  candor.  "It  made 
them  nervous,  sure,  because  they 
could  do  the  numbers  and  they  figured 
we  might  have  to  do  layoffs,  but  they 
were  glad  to  hear  it  upfront  rather  than 
behind  the  scenes,"  he  says. 

Mitigate  the  Damage 

The  Allmerica  management  team 
slashed  spending  in  every  category 
from  capital  expenditures  to  travel. 
They  left  positions  unfilled  and 
brought  contracted  woric  back  in- 
house.  Employees  were  kept  in  the 
loop  through  an  “Ask  the  CIO"  Web 
site  as  well  as  numerous  all-lT  meet¬ 
ings.  "It  was  like  a  fund-raising  cam¬ 
paign,"  Tranter  says,  “but  instead  of 
‘How  much  have  you  raised?*  it  was 
'How  much  have  we  saved  so  far?’ " 

IT  people  wanted  to  help,  so  man¬ 
agement  offered  part-time  work  and 
encouraged  them  to  take  unpaid  fur¬ 
loughs.  About  75%  did-  Allmerica  out¬ 
sourced  U4  positions  and  transferred 
an  additional  25  people  to  the  out¬ 
sourcer  to  be  placed  in  other  jobs. 
Allmerica  also  transferred  more  than 
20  IT  people  to  the  business  side. 

At  Coming,  while  divisions  like  fiber 
optics  were  laying  off  IT  workers,  oth¬ 
ers.  like  environmental  sciences,  were 
still  hiring.  So  Fishbura's  staff  searched 
the  company  for  openings.  If  a  person 
couldn’t  relocate,  he  was  sometimes 
able  to  virtually  join  a  team  located 
elsewhere.  (One  person  on  Fishbura's 
staff  lives  in  Wales.) 

MetUfe  Inc.  (No.  100)  in  New  York, 
which  had  to  lay  off  1(>8  of  its  4,066  IT 
workers  last  year,  came  up  with  the 
novel  idea  of  trial  jobs  for  relocated 
workers.  IT  people  who  could  be 
placed  in  the  business  were  offered  a 
six-month  trial  in  a  new  location.  “If 
they  liked  it,  we’d  move  them."  says 
Donna  Mazzola,  vice  president  of  hu¬ 
man  resources. 

When  Allmerica  ran  out  of  options 
with  $6.5  million  in  cuts  still  to  go. 
Tranter  met  with  the  business  people 
to  reorder  priorities.  “We  didn’t  W'ant 
to  slice  10%  off  our  workforce  and  still 
have  100%  of  the  work,"  be  says.  “We 
worked  extensively  with  them  so  work 
would  go  away  as  people  went  away.  I 
won’t  say  there  was  no  added  work. 
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those  laid  off  in  findino  new  jobs. 
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GRIEVE  Doni  00  back  to  business 
as  usual.  Give  people  time  to  vent 
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but  we  tried  to  minimize  it." 

Coming’s  Fishburn  agrees.  'There 
are  times  when  you  have  to  lay  people 
off  without  the  work  going  away,  but 
our  philosophy  is  to  get  rid  of  the 
work."  he  says. 

Face  the  Music 

Tlie  task  of  choosing  those  to  be  laid 
off  at  Corning  staned  with  senior  man¬ 
agers  at  the  sites  where  employees 
were  being  laid  off.  They'  drew  up  pre¬ 


liminary  lists,  and  other  managers  re¬ 
viewed  them,  adding  and  deleting 
names  based  on  performance  nuance.s. 
Finally,  an  independent  corptirate  di¬ 
versity  panel  assured  that  no  group 
would  Ik*  disproportionately  affected. 
ITte  multiple  reviews  eliminated  any 
chance  that  layoffs  were  related  lo  per¬ 
sonality  issues.  Fishbum  says. 

The  evening  before  the  layoff  an¬ 
nouncements  at  Allmerica.  Tranter 
called  the  management  team  together 
to  hear  who  would  be  laid  off  and  pre¬ 
pare  for  questions  people  might  ask. 
“Greg  set  the  tone."  says  Nawrocki. 

"He  had  to  lay  off  some  of  his  leader¬ 
ship.  The  pain  was  shared.” 

The  next  day.  Tranter  called  the  de- 
parrrooniwide  meeting,  announced  the 
bad  news,  explained  what  would  hap¬ 
pen  throughout  the  day  and  iOi»k  ques¬ 
tions.  Afterward,  every  person  met 
with  his  direct  manager.  Those  who 
were  retained  were  told  whether  their 
role,  responsibilities  or  manager  would 
change.  Those  who  were  laid  off  met 
with  a  human  resources  person  about 
the  severance  plan  and  placement  ser¬ 
vices.  Outplacement  and  other  em¬ 
ployee  services  were  available  on  site. 

Coming  took  a  creative  approach  to 
outplacement  ser\'ices.  In  go^  times, 
there  had  been  on-site  recruiters  for 
the  growing  telecom-related  business¬ 
es.  When  the  layoffs  came,  the  re¬ 
cruiters  morphed  into  outplacement 
advisers. 

At  Allmerica.  a  group  of  people  who 
had  been  laid  off  thanked  Tranter  for 
the  way  he  had  handled  things.  "They 
were  prepared,"  Mangano  says.  "They 
understood  the  situation  and  felt  they 
had  been  treated  with  respect." 

Linda  McGowan,  strategic  measure¬ 
ment  consultant  at  Allmerica.  says  she 
saw  one  laid-off  employee  advising 


,  cidlcagues  on  bow  to  complete  his 
I  work.  “He  said.  ’If  you  need  help,  give 
me  a  call.  Don’t  worry  about  it.’ "  Mc¬ 
Gowan  recalls. 

I  Many  employees  at  0>rning  seemed 
I  more  concerned  for  their  supervisors 
than  for  themselves,  says  Karen  Madi¬ 
son.  IT  human  resources  manager.  "I 
heard  them  say.  ‘I  know  this  is  hard  on 
you.  Are  you  going  to  be  OK?'  ” 

When  the  l3>-ofrs  were  dime  at 
Allmerica,  Tranter  told  everyone  via 
e-mail.  “In  stune  layoffs,  you  wonder 
when  it  will  cser  end."  McGowa.*  says. 

I  “Wc  had  a  clear  understanding  of  what 
I  was  happening,  why.  how  and  w  ben  it 
j  was  over." 

Allow  the  Dust  to  Settle 

j  In  the  days  immediately  folknving. 

Tranter  made  sure  there  were  no  for- 
I  mal  meetings  so  al!  managers  could  be 
^  available  in  their  offices.  "We  also  did 
quite  a  bit  of  management  by  walking 
around."  he  says.  “We  encouraged 
management  to  bring  groups  together 
and  talk  things  through  and  let  people 
open  up  and  vent  if  they  needed  it). ' 

About  a  week  later,  he  called  every¬ 
one  together  again.  He  told  them  it  had 
bc*cn  difficult  but  it  was  over  and  it 
j  was  time  to  talk  about  the  future. 

I  "Greg  said  there  arc  no  guarantees 
any^vherc.  but  wr  had  a  lot  of  work  to 
do  and  we  had  to  move  on."  Nawrocki 
recalls.  "There  is  no  security.  You  have 
to  be  resigned  to  that,  but  you  don't 
dwell  on  it." 

“We  have  some  really  neat  strategic 
stuff  that  has  been  able  to  energize  em¬ 
ployees."  Tranter  says.  "Business  is  still 
investing  in  some  really  gixid  technol¬ 
ogy.  and  employees  see  that  there  is  a 
future  here." 

\  Fishbum  cautions  that  gening  back 
on  track  after  layoffs  is  tricky,  because 
if  you  try  to  focus  on  the  future  before 
the  worst  is  ovxr.  you  can  destroy  your 
credibility.  “There’s  a  certain  ’clutch 
and  accelerator'  aspect  of  communica¬ 
tion."  he  says,  and  you  don't  want  to 
Stan  revving  up  until  you're  sure  the 
layoffs  are  done.  "You  get  only  one 
chance  to  refocus  on  the  future."  he 
says,  “so  that’s  a  timing  issue  you  need 
to  think  about  and  work  your  way* 
through." 

Layoffs  arc  always  painful,  but  peo¬ 
ple  survive  wlten  they’re  approached 
with  honesty  and  respect.  “People  here 
were  prepared."  says  Sue  Matys.  HR 
rdatiODship  manager  for  IT  at  .Mlmcri- 
ca.  "and  that  made  the  difference."  I 


Melymuka  is  a  freelance  writer  in 
Duxbury.  Mass.  Contaa  her  at 
kmelyrTwkaiayahoo.com. 
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Wi-ie  Ihvte  layoffs  m  your 

How  would  you  grade  how 

conipany's  IT  depanm«>nt 

monaoernenl  at  your  company 

in2002‘> 
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These  top-ranked 
companies  give  their 
IT  employees  access 
to  cutting-edge 
technokij^  projects 
and  above-average 
benefits.  Read 
how  their  unique 
approaches  to 
management  make 
employees  happy 
to  come  to  work. 
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FT  rtrffm  «•  III  Udt  in  « 
candy  wofldng  at  a  oempiny 
conaUaiMl  an  taarican  icon  and  ga^ 
ttMir  hMdmiefcy  on  same  120 
now  IT  gnilacti.  By  Gary  H.  Anthos 

Halloween  is  a  big  deal 
at  candy  maker  Her$hey 
Foods  Corpn  and  em* 
ployees  take  their  annual 
party  and  costume  con¬ 
test  pretty  seriou^.  So  Connie  Por- 
zuc^  manager  of  Hershey’s  informa¬ 
tion-systems  protect  office,  wanted  to 
come  up  with  a  costume  that  was 
reaUy  scary.  I  got  a  grim  reaper 
costume  and  put  a  sign  on  it  calling 
myself  A  Scope  Creep,*  “  she  says. 

By  all  accounts,  it's  a  lot  of  tun  to 
work  at  the  iL2  billion  chocolate  com¬ 
pany.  based  in  Hershey.  Pa.  **1  tell  peo¬ 
ple  I  work  at  Hershey.  and  it  brings  a 
smile  to  their  faces,”  Porzucek  says.  ‘It 
makes  you  feel  good  to  work  for  a 
company  that  you  can  be  proud  of.” 

WHAT'S  NEW;  There  are  currently  120  IT 
projects  under  way  at  Hershey.  A  re¬ 
cently  completed  extranet  allows  cus¬ 
tomers,  such  as  retail  store  chains,  to 
check  order  status  online. 

Another  recent  project,  sponsored 
by  the  CEO.  has  replaced  paper  and 
pencils  with  handheld  devices  that 
salespeople  can  use  to  record  in-store 
inventories  and  then  dial  in  and  upload 
them  to  a  corporate  database. 

Hershey  haa  also  built  a  storage-area 
network  that  consolidated  disk  storage 
at  a  number  of  remote  sites  and 
brought  servers  into  the  central  data 
center  on  a  hi^-availability  cluster. 
”It’$  state-of-ffie  art  technology,  aiul  we 
were  sfole  to  give  users  additional  disk 
space,”  says  Beth  Klahre,  director  of 
operations  and  infrastructure  services. 

That  pace  of  technolc^  innovation 
keeps  things  interesting  for  Hershey's 


IT  staff.  “From  a  techie  standpoint,  you 
never  get  stale,”  says  Ed  Geriran,  a 
group  leader  for  cUent  support. 

WHATSWORKMO;  Wtule  aU  employees 
can  take  pride  in  making  something 
everyone  knows  and  loves  —  Herriiey's 
Kisses.  Almond  loys,  5th  Avenue  bars 
and  more  —  there  are  specifk  reasons 
why  people  in  the  IT  shop  like  working 
there  enough  to  keep  the  annual  turn¬ 
over  rate  below  2%.  They  say  the  com¬ 
pany  is  large  enou^  to  provide  its  staff 
with  ample  resources  to  pursue  lead¬ 
ing-edge  technologies,  but  it  somehow 
has  also  managed  to  maintain  the 
friendly,  informal  atmosphere  that  pre¬ 
vailed  uiuier  founder  Milton  Hershey 
in  the  early  20th  century. 

”We  are  very  much  like  a  small  com¬ 
pany  with  the  resources  of  a  big  com¬ 
pany.”  says  George  Spanos,  director  of 
applications. 

Hershey  has  a  relatively  homoge¬ 
neous  and  up-to-date  client/server  in- 
frastnicture  whose  key  components 
are  Sun  Solaris  servers  and  Oracle 
databases  running  business  applica¬ 
tions  from  SAP  AG.  Siebel  Systems  inr. 
and  Manugistics  Inc.  lliat  modem  ar¬ 
chitecture  worics  to  the  advantage  of 
the  IT  staff,  says  Spanos. 

”We  nm  95%  of  our  business 
throu^  one  set  of  systems.”  Spanos 
says.  That  allows  us  to  focus  on  ex¬ 
tending  value  off  of  those  rather  than 
always  having  to  go  fix  all  those  prob¬ 
lems  with  20  different  platforms  and  a 
bunch  of  legacy  systems.  We  have  got¬ 
ten  a  lot  of  the  standardization  and 
cleanup  out  of  the  way.” 

WHATS  CHALlBiaMG:  The  biggest  chal¬ 
lenge  b  budget  constraints,”  says 
Valerie  Fellenbaum,  manager  of  client 
technologies  infrastructure.  ”We  are  in 
a  very  conservative  mode  right  now 
with  the  economy  the  way  it  is.” 

WHATS  UMQUE:  ^Hershey  has]  done  a  re¬ 
ally  good  job  of  incorporating  into  their 
culture  a  vbion:  'We're  a  candy  compa¬ 
ny,*  ”  says  Linda  Pittenger.  present  of 
People^,  a  Gartner  Inc.  company  in 
&idgewate^  N.J.  ”Ih  our  resear^  one 
of  the  top  three  factors  why  people  are 
coming  and  staying  at  companies  to¬ 
day  b  the  vbion  aiui  the  reputation  of 
the  company.” 

‘Tlersbey  b  an  American  icon,”  says 
Fellenbaum.  ”You  tell  people  you  work 
for  Hershey  atul  you  get  rhia,  real¬ 
ly.'*  It's  associated  with  quality  and 
pride,  the  legacy  of  Milton  Hershey.” 

Adds  38-year-old  Geriiart.  T  am  ab¬ 
solutely  certain  thb  b  the  company  I 
want  to  retire  from.”  I 


The;  Cool 
Factor 


IT  sttfiMs  ■«  a  hoalMl  an  Harbys  ■  ttw 
cenpaiiy's  ealoiMfs:  IjMImt  and  jaw 
art  ttw  omffidal  drat  coda,  and  ahmal 
•aryant  lUa  a  Bwlofeyela  to  walk. 
And  dia  tadnedanr  praja^  an  a  cod 
a  the  bhaa.  By  linda  Rosencrance 

IN  1903.  in  a  Milwaukee  factory 
that  was  no  more  than  a  wooden 
shack  with  the  name  Harley- 
Davidson  Motor  Co.  scrawled  on 
the  door.  21-year-old  William  S. 
Harley  and  20-year-old  Arthur  David¬ 
son  buih  their  fust  motorcycle  for  the 
public,  a  racing  model  with  a  3 1/8-in. 
bore  and  a  3 1/2-in.  stroke. 


Hut  year,  the  fledgling  company 
produced  a  total  of  three  motorcycles. 

Altho<^  the  company’s  beginfungs 
were  modest.  100  years  later  Harley- 
Davidson  Inc.  b  about  as  cool  as  it 
comes.  Tbe  coequny  has  a  loyal  fd- 
lowing  of  bike  enthusiasts,  and  in  2002, 
it  produced  263j6Si  motorcycles  at  its 
nine  fecilities.  Thb  year,  it  expects  to 
build  289,000. 

Harley-Davidson's  IT  team  members 
are  loyaL  too.  when  talking  about  their 
department  and  what  they  say  b  the 
be«  company  in  the  U3. 

WHATS  NEW;  In  the  past  y^.  the  rr  de¬ 
partment  has  been  working  on  several 
new  projects,  including  one  that  allows 
potential  buyers  to  customize  their 
dream  bikes.  'Many  of  our  new  projects 
have  leveraged  tbe  Web  to  meet  our 
business  requireinents.”  says  David  Lee. 
a  senior  project  manager. 

Lee  says  one  such  project  involved 
using  Web-based  technologies  such  as 
lava  to  build  an  application  that  al¬ 
lows  customers  to  view  used  motor¬ 
cycles  that  are  available  for  sale  at 
dealerships  throu^  tbe  corporate 
Website. 

‘The  a{^lication  will  say.  ‘OK.  these 
are  your  options,  and  thb  b  bow  soon 
you  can  get  it,'  ”  Lee  says.  ”In  tbe  past, 
they'd  have  to  call  the  dealers,  and 

Conrimied  on  page  J2 
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ft  staffers  are  like  kids  in  a 
candy  ^op,  worfiing  at  a  company 
considered  an  American  icon  and  getting 
their  hands  sticky  on  some  120  j 

new  IT  protects.  I 

i 

HAI  lUWrKN  IS  A  HU.  Dl-AI 

at  candy  maker  Hershey 
Foods  Corp.,  and  em- 
pU>yees  take  their  annual 
party  and  costume  con¬ 
test  pretty  seriously.  So  (amnie  l*or- 
zucek.  manager  of  Hershey ’s  informa- 
tion*s>’stems  pn>ieet  ofllce.  wanted  to 
come  up  with  a  costume  that  was 
really  scary'.  "So  I  got  a  grim  reaper 
costume  and  put  a  sign  on  it  calling 
myself  A  Scope  Oeep.' "  she  says. 

By  all  accounts,  it's  a  lot  of  fun  to 
work  at  the  SI.2  billion  chocolate  com¬ 
pany.  based  in  Hershey.  I*a.  *1  tell  pei»- 
ple  1  work  at  Hershey.  and  it  brings  a  j 
smile  to  their  faces,"  Porzucek  says.  “It  ' 
makes  you  feel  good  to  work  for  a 
ei*mpany  that  you  can  be  pnnid  of.” 

WHAT'S  NEW;  I'here  are  currently  120  I'l’ 
projects  under  way  at  Hershey.  A  re¬ 
cently  completed  extranet  allows  cus¬ 
tomers.  such  as  retail  store  chains,  to  | 
check  order  status  online.  ' 

Another  recent  project,  sponsored  I 
by  the  CEO.  has  replaced  paper  and 
pencils  with  handheld  devices  that 
salespeople  can  use  to  record  in-store 
inventories  and  then  dial  in  and  upload 
them  t»>  a  corporate  database. 

Hershey  has  also  built  a  storage-area 
netxvork  that  conMilidated  disk  storage 
at  a  number  of  remote  sites  and 
brought  serx'ers  into  the  central  data 
center  on  a  high-availability  cluster. 

“It's  statc-of-the  an  technology,  and  we 
were  able  to  give  users  additional  disk 
space.”  says  Beth  Klahre.  director  of 
operations  and  infrastructure  services. 

'ITiat  pace  of  techmilogy  innovation 
keeps  things  interesting  for  Hersheys 


1  r  statl.  ''From  ,i  techie  si-indpocnt.  you 
never  get  stale."  s.iys  Fd  ticrh.irt.  a 
gn'up  leader  f>«r  client  support. 

WHAFS  WORKING  While  all  employees 
can  take  pride  in  making  something 
everyone  knows  and  loves  —  Hershey  s 
Kissc-s.  Almond  [oys.  5th  .Avenue  bars 
and  more  —  there  are  spctHfic  reas**ns 
why  people  in  the  I  T  sh»»p  like  working 
there  enough  to  keep  the  .innual  turn¬ 
over  rate  behwv  2".--  'ITiey  sjy  the  com¬ 
pany  is  large  enough  t«»  pnn  ide  its  staff 
with  ample  res«mrces  to  pursue  lead¬ 
ing-edge  technologies,  but  it  someh<*vv 
has  .ilso  managed  to  maintain  the 
friendly,  informal  atmosphere  that  pre¬ 
vailed  under  founder  Milton  Hershey 
in  the  early  20th  century, 

"We  are  very  mueh  like  a  small  com¬ 
pany  with  the  resourci.'s  of  a  big  c«im- 
pany.”  says  (ie«*rge  Spanos,  direct«»r  of 
applications. 

Hershey  has  a  relatively  hom«>ge- 
neims  and  up-to-date  client  server  in¬ 
frastructure  whivse  key  comp«>nents 
are  Sun  Solaris  servers  and  Oracle 
databases  running  business  applica- 
thins  frtim  SAI*  AC.  Sicbel  Systems  Inc. 
and  Manugisttes  Inc.  ITiat  modern  .ir- 
chiiecture  wtirks  to  the  advantage  of 
the  IT  stair,  says  Spanos. 

“We  run  ‘>5"i.  of  tiur  business 
thniugh  one  set  v*f  systems.”  Spanos 
says.  "That  allows  us  to  focus  t»n  ex¬ 
tending  value  off  of  thvise  rather  than 
always  having  to  go  fix  all  those  prob- 
lents  with  20  dilTereni  platforms  and  a 
bunch  of  k^acy  systems.  We  have  got¬ 
ten  a  lot  of  the  standardizatum  and 
cleanup  out  of  the  way.” 

WHATS  CHALLENGING:  "The  biggest  chal¬ 
lenge  is  budget  constraints."  says 
Valerie  Fellenhaum.  manager  of  client 
technologies  infnistructure.  "We  are  in 
a  very  conservative  mode  right  miw 
with  the  economy  the  way  it  is." 

WHATS  UNIOWE;  i  Hershey  hasi  done  a  re¬ 
ally  gtKid  job  of  incorporating  into  their 
culture  a  vision;  ‘We're  a  candy  compa¬ 
ny.’  "  says  Linda  Piltenger.  president  of 
People*,  a  Gartner  Inc.  company  in 
Bridgewater.  N.J.  "In  our  rt'search.  one 
of  the  top  three  factors  why  people  are 
coming  and  staying  at  companies  to¬ 
day  is  the  vision  and  the  reputation  of 
the  company." 

"Hershey  is  an  American  icon.”  says 
Fcllenbaum.  "You  tell  people  you  work 
for  Hershey  and  you  get  this.  ‘Oh.  real¬ 
ly!'  It's  associated  with  quality  and 
pride,  the  legacy  of  Milton  Hershey." 

Adds  .5H-year-tild  (jorhan.  "I  am  ab¬ 
solutely  certain  this  is  the  company  I 
want  to  retire  from."  • 
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The  Cool 
Factor 

IT  staffers  are  as  hooked  on  Harleys  as  the 
company's  customers:  Leather  and  jeans 
are  the  imoHicial  dress  code,  and  almost 
everyone  rides  a  motorcycle  to  work. 
And  the  technology  projects  are  as  cool 
as  the  bikes. 

s  fMO.  in  a  Milwaukee  faeiorv 
that  was  no  more  than  a  vviHKlcn 
shack  with  the  name  /fuWev- 
Hovid-wm  MoUtrCo.  scrawled  on 
the  dtMir.  2l-yearH>ld  William  S. 

!  Harley  and  20-year-«*ld  .Arthur  David- 
I  son  built  their  first  motorcycle  for  the 
public,  a  racing  model  with  a  }  1  K-in. 
bore  and  a  ^  I  2-in.  stroke. 


'ITiat  year,  the  fledgling  company 
produced  .1  toi.il  of  thrsv  n>oiorcyck*s. 

I  Although  the  eompam 's  K*ginnings 
I  were  modest,  pHl  years  bier  I  Lirk-y- 
I  Dav  idson  Inc.  is  .iKnit  as  c<»o|  as  it 
I  comes,  llu’ company  h.is  a  loyal  fo|- 
I  lowing  of  bike  enthusbsis,  and  in  2<itt2. 

it  produi.ed  2(»-b>5.’  moiorcycles  .n  its 
1  nine  facilities  This  year,  it  expevis  to 
j  build  JWMXHL 

Harley -Davidson’s  IT’  team  members 
1  are  loyal.  im».  when  t.ilking  about  their 
dcpartnu'nt  .inJ  vvhai  they  s;iy  is  the 
hesi  company  inthel'.s. 

WHATS  HEW;  In  the  past  year,  the  1 1.  de¬ 
partment  h.is  been  working  on  several 
new  projects,  including  one  th.it  allows 
p»>teniial  buyers  to  cusiomi/c  their 
dream  bikes  "Many  of  our  new  proji-iis 
havs-  leveraged  the  WcH'  to  mix’i  our 
business  requirementv"  siiy  s  I  )avid  I  ee. 
a  s<*nior  projcii  nuinager 

1  ce  siiys  one  sueh  project  invoked 
using  Web-based  technologies  nucIi  as 
lava  to  build  an  application  that  al¬ 
lows  cusionuTs  to  view  used  motor 
cycles  that  are  available  for  sale  at 
dealerships  through  the  corporate 
\\cb  site. 

■■  I'he  application  w  ill  say.  ’OK.  these 
I  .ire  your  options,  and  this  is  how  stMtn 
j  you  c.in  get  it.’  ”  Lee  say  s.  "In  the  past. 

I  they'd  h.nv  to  call  the  dealers.  .inJ 
I  (  ontinvej  im  puge.G’ 
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Winning  Team 


Chicago,  IL  •  Mount  Prospect  iL  *  Prospect  Heights,  IL 
Wood  Dale,  IL  •  Bridgewater,  NJ  •  Salinas,  CA 
Brandon/Tampa,  FL 


There  are  many  advantages  to  working  ai  Household  International,  a  wholly 
owned  subsidiary  of  HSBC  Holdings  pic  As  one  of  the  oldest  and  largest 
consumer  finance  companies  in  the  nation,  our  stability  and  growth  equate  to  a 
solid  company  where  individuals  can  build  a  career  Our  offices  provide  an 
environment  where  you  can  exchange  ideas  and  allow  individual  contributions 
to  shine  through  After  all.  it's  the  talent,  dedication  and  experience  of  our 
employees  that  contribute  to  the  success  of  our  company 

We  believe  world  class  success,  achievement  and  results  deserve  world  class 
rewards  At  Household,  your  reward  for  talented  contribution  comes  in  many 
forms:  competitive  salary,  incentive  and  bonus  plans,  employee  stock  purchase 
plan,  401  ik)  plan,  retirement  income  plan,  tuition  reimbursement,  medical, 
ongoif>g  training,  advancement  opportunity  and  a  whole  lot  more 

To  apply  your  talents  to  the  fullest,  apply  online  at; 

www.joinhousehold.com 


Household  recognizes  that  through  the  talents  of  a  diverse  workforce 
achieving  global  success  is  a  reality  We  are  an  equal  opportunity  employer 


I  (  orifirua'J  fnirn  pu.vc 

■  lIu'N  'J  s.n,  'I  et  me  Jo  some  researeli 
'  jiiJ  h.ii  k  to  \ou.'  ■' 

I  .iiirel  rschiirss.ilJ,  iiil'orm.ition  ser- 
\  lees  director  for  .ipplic.itions,  s.i\  s 
rimre  than  Kd  proiects  were  in  applica- 
:  non  development  last  ye.ir  —  and  each 

■  one  uas  strictly  .ilijtned  w  itii  the  coni- 
pain  s  business  poals. 

lell  Sv  lieele.  senior  systems  manager, 
.igrees  '‘rhe  emphasis  has  shifted  to 
,  applic.ition  integnition  .inJ  data  anah 
sis."  he  says,  "Our  operational  .ind 
ir.ins.ieiional  systems  are  pretty  solid, 
ho  now  tile  aiiention  h.is  shifted  to 
Hli.inng  that  information  with  the  busi- 
I  ness  and  looking  at  il  for  biisiness- 
!  deeision  purposes  .md  an.ily/ing  it.  so 
^  ue  .ire  doing  a  lot  of  projeets  \s  ith  dal.i 
'  warehousing  technologv." 

,  STAFFING  PICTURE:  Unlike  most  other 
I  eimipanies.  H.irley-I)a\  idson  hasn't  siif* 
lered  Ironi  the  downturn  in  the  eeono- 
iin.  In  fact,  the  motorcycle  mamifaetur- 
er  h;is  experieneed  signifie.int  growth 
ocer  the  past  several  years.  I  ee  says. 

"I  jst  year,  the  IS  department  — 

I  which  h.is  about  257  employees  — 
had  ne\s  hires  and  2tl  promotions," 
he  says  "And  m  the  Ilrst  quarter  of 
2(M>3.  Wi'  had  six  new  hires  and  six 
promotions.’ 

And  when  Harley-D.ividson  has 
openings  in  the  1 1  department,  man- 
.igers  work  with  lhi‘  human  resources 
department  to  make  sure  they  get  a  di¬ 
verse  eandid.ile  pool,  says  |im  Nejedlo, 
senior  systems  manager. 

WHArS  WORKING:  The  company  keeps 
workers  challenged  by  asking  them  "to 
provide  the  leehnology  solutions  for 
the  biisines.s  challenges  or  problems," 
says  {lary  Branger,  network  support 
lead.  '''I  hat  keeps  you  on  your  toes." 

Branger  sitys  the  company  also  ex¬ 
pects  the  I  T  staff  to  sehcduie  training 
in  new  technologies.  ‘'  The  company  ex¬ 
pects  you  to  lake  the  training  you  need 
to  support  the  existing  environment 
and  the  1  pntjectsl  that  are  camming  up." 
he  sctys. 

WHAFS  CHAUENGING:  Nejedh.  says  keep¬ 
ing  up  with  the  business  is  a  challenge 
for  the  department. 

"We've  been  lexperieneingl  double- 
digit  growth  for  the  last  17  years,  and 
the  future  looks  similar."  he  says.  "So 
with  a  business  that's  growing,  it's  a 
challenge  for  the  IS  organization  to 
keep  up  with  it.  Not  only  are  we  a 
growing  organization,  but  the  technol¬ 
ogy  continues  to  mature  and  change 
and  gr«>w.  and  it's  a  d«>uble  whammy 
I  for  us  to  keep  up  with  a  grow  ing  com¬ 


p.iny  .ind  with  all  the  leehnologx." 

!  WHAFS  UNIQUE:  Most  11  w  orkers.it 
'  J  larkw  - 1  i.ividsi  m  say  the  environment 
.It  the  company  is  friendly  and  fun.  It's 
I  .1  casu.il  workplace  where  the  dress 
code  is  leather  and  jeans  and  most 
'  everyoni'  rides  a  motoreyele  to  work. 
"People  s.iy  'hello'  to  you  when  lliev 
don't  even  know  \ou."  Selieele  s.ivs. 

■  “IVople  respect  each  lUher." 

And  they  all  say  they  kive  wurking 
lor  .1  eomp.iny  that  is  so  well  know  n, 
not  only  in  Wisconsin  hut  around 
(he  world.  "People  are  excited  about 
working  w  ith  .i  company  that  is  so  cool 
to  he  associated  with."  Branger  say  s  I 


r 

Coral  Gables.  Fla 
www.miami.edu 

- 1 

249 

28^0 

430 

k _ 

7 

_ d 

Academic 

Appeal 


rr  staff  is  kept  engaged  with  educational 
opportunities,  a  diverse  cutture,  cutting- 
edge  technology  -  and  a  nationally  ranked 
football  program. 

YOUI  1  tlAVt  Hinmt.ivi- 
Low  Tenures  if  he  ap¬ 
pears  to  be  a  little  overex¬ 
cited.  It's  normal  for  the 
vice  president  of  informa¬ 
tion  management  at  the  University  of 
Miami  to  be  animated  and  high-octane. 

But  ask  him  what  Tf  empl<*yees  at 
the  Coral  Gables,  Fla.-based  university 
like  best  about  working  there,  and 
Temares  goes  into  overdrive.  ‘They’ll 
say  the  environment,  and  then  you 
have  to  be  specific  about  what  the  en¬ 
vironment  is  like,  f’art  of  it  is  their 
ability  to  advance  their  educations, 
flextime,  having  great  sports  teams  — 
things  that  bond  people  together," 
gushes  Temares  in  a  single  breath. 

"People  generally  don't  wake  up  and 
s;jy.  'Ugh.  I've  got  to  work  at  the  Uni¬ 
versity  of  Miami.’  "  he  says. 

What's  not  t<»  like?  In  addition  to  the 
surf  and  sun.  people  who  w'ork  in  I  T 
can  take  elas.ses  at  the  university  to 
strengthen  their  skills,  they're  encour- 
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There  are  many  advantages  to  Mvridng  at  Household  lntematk>nal,  a  whoAy- 
owned  subsidiary  of  HS6C  Holdings  pk.  As  or>e  of  the  oldest  arxJ  largest 
cortsumer  firtana  companies  in  tPte  nation,  our  stabttty  and  growth  equate  to  a 
solid  company  where  mdividuals  can  build  a  career.  Our  offices  provide  an 
erwtronment  where  you  can  exchange  ideas  and  allow  individual  contrbutions 
to  sPtlrre  through.  After  aR,  it's  the  talent,  dedication  and  experiertce  of  our 
employees  that  a)nthbute  to  the  success  of  our  company. 

Vte  believe  wortd<tass  success,  achievement  and  results  deserve  world<lass 
rewards.  At  Household,  your  reward  for  talented  contribution  comes  in  many 
forms:  competitive  salary,  incentive  aisd  bonus  plans,  employee  stock  purchase 
plan,  401  (k)  plan,  retirement  income  plan,  tuition  refoibursement.  rrredical, 
ongoing  trairtin^  advarKement  opportunity  and  a  whole  lot  more. 

To  apply  your  talents  to  the  fullest,  apply  online  at: 
www.joinhousehold.com 

Household  recognizes  that  through  the  talents  of  a  diverse  workforce 
achieving  global  success  is  a  reality.  We  are  an  equal  opportunity  employer. 


Household  s  greatest  assets  are  our  people  and  the  principles  for  which  they, 
and  the  corporation,  st.snd-  For  more  than  1 20  years,  our  people  have  earned 
the  trust  of  lustumers  by  providing  honest,  caring  and  helpful  service. 
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they’d  say.  ‘Let  me  do  some  research 

and  get  back  to  you.'  “ 

Laurel  Tschurwald.  information  ser¬ 
vices  director  for  applications,  says 
more  than  80  projects  were  in  applica¬ 
tion  development  last  year  —  and  each 
one  was  strictly  a^ned  with  the  com¬ 
pany’s  business  goals. 

)efr  Scbeele,  senior  systems  manager, 
agrees.  *The  emphasis  has  shifted  to 
application  integration  and  data  analy¬ 
sts,”  he  says.  ”Our  operational  and 
trartsacdonal  systems  are  pretty  solid 
So  DOW  the  attention  has  shifted  to 
sharing  that  information  with  the  busi¬ 
ness  and  looking  at  h  for  business- 
decision  purposes  and  analyzing  it,  so 
we  are  doing  a  lot  of  projects  with  data 
warehousing  technology.” 

STAFFWe  nCTURE:  Unlike  most  other 
companies.  Hariey-Davidson  hasn't  suf¬ 
fered  from  the  downhim  in  the  econo¬ 
my.  In  fact,  the  motorcycle  mantilactur- 
er  has  experienced  significant  growth 
over  the  past  several  years.  Lee  says. 

”Last  year,  the  IS  department  — 
which  about  2S7  employees  — 
bad  39  new  hires  and  20  promotions,” 
be  says.  ”Aad  in  the  first  quarter  of 
2003,  we  had  six  new  hires  and  six 
promotions.” 

And  when  Hariey-Davidson  has 
openings  in  the  IT  department,  man- 
agers  work  with  the  human  resources 
department  to  make  sure  they-get  a  di¬ 
verse  candidate  pooL  says  fun  Nejedlo, 
senior  systems  manager. 

IllWrS  WOnONB:  The  company  keeps 
workers  challenged  by  asking  them  ”to 
provide  the  technology  solutions  for 
the  business  challenges  or  problems," 
says  Gary  Branger,  network  support 
lead.  That  keeps  you  on  your  toes." 

Branger  says  the  company  also  ex¬ 
pects  the  IT  staff  to  schWule  trainii^ 
in  new  technologies.  "The  company  ex¬ 
pects  you  to  take  the  training  you  need 
to  support  the  existing  environment 
and  tibe  (projects]  that  are  coming  up.” 
be  says. 

Mwrs  CHMIBWMB:  Nejedlo  says  keep¬ 
ing  up  with  the  business  is  a  challenge 
for  the  department 

”We*ve  been  [experiencing]  double¬ 
digit  growth  for  the  last  17  years,  and 
tbe  future  looks  similar,"  be  says.  "So 
with  a  busmess  that’s  growing,  it’s  a 
challenge  for  tbe  IS  organization  to 
keep  up  with  it  Not  only  are  we  a 
growing  organization,  but  the  technol¬ 
ogy  continues  to  mature  and  change 
and  grow,  and  it’s  a  double  whammy 
for  us  to  keep  up  with  a  growing  com¬ 


pany  and  with  all  the  technol<^.” 

WHATS  UMQUE;  Most  IT  workers  at 
Harley-Davidsoo  say  the  environment 
at  the  company  is  friendly  and  fon.  It’s 
a  casual  woricplace  where  the  dress 
code  is  leather  and  jeans  and  most 
everyone  rides  a  motorcycle  to  work. 
“People  say  'hello'  to  you  when  they 
don’t  even  know  you.”  Scheele  says. 
“People  respect  each  other." 

And  they  all  say  they  love  working 
for  a  company  that  is  so  well  known, 
not  only  in  Wisconsin  but  around 
the  world  "People  are  excited  about 
working  with  a  company  that  is  so  cool 
to  be  associated  with,”  Branger  says.  I 
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YOU'LL  HAVE  TO  FORGIVE 

Lew  Temares  if  be  ap¬ 
pears  to  be  a  little  overex¬ 
cited  If  s  tu>rmal  for  die 
vice  president  of  informa- 
tioo  management  at  tbe  University  of 
Miami  to  be  animated  and  high-octane. 

But  ask  him  what  IT  employees  at 
tbe  Coral  Gables.  Fla.-based  university 
like  best  about  woridng  tb^  and 
Temares  goes  into  overdrive.  They'll 
say  tbe  environment,  and  then  you 
have  to  be  ^ecific  about  what  the  en¬ 
vironment  is  like.  Part  of  it  is  their 
ability  to  advance  their  educations, 
flextinie.  having  great  ^>orts  teams  ~ 
things  that  bond  people  together.” 
gushes  Temares  in  a  single  breath. 

"People  generally  don't  wake  up  and 
say,  ‘U^  rve  got  to  woric  at  tbe  Uni¬ 
versity  of  Miami’  ”  be  says. 

Wh^'s  not  to  like?  In  addition  to  the 
surf  and  sun,  (leople  who  work  in  IT 
can  take  class^  at  tbe  university  to 
strengthen  their  skills,  they’re  eocour- 
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aged  to  regularly  attend  industry  con 
fereoces,  they  can  work  Oex  hours,  and 
they’re  part  of  a  culture  that  fosters  up* 
ward  mobility. 

WHCrs  NEW:  IT  staffers  get  plenty  of  ac* 
cess  to  cutting*edge  technology.  For  in¬ 
stance.  the  university  contiinies  to  ex¬ 
pand  its  wireless  network  cloud  by 
adding  remote  connectivity  to  its  li¬ 
brary  and  classrooms,  says  Temaies. 
The  wireless  netwoik  currently  covers 
90%  of  the  campus,  and  there  are  plans 
to  extend  the  netwoik  to  the  universi¬ 
ty's  medical  school,  he  says. 

In  addition,  the  university  is  in  the 
early  stages  of  exploring  a  telehealtfa 
partnership  with  Spanish  telecommu¬ 
nications  con^)any  Telefonica  de  Es- 
pana  SA  to  provide  distance-learning 
and  pbysid^  consultii^  services  to 
doctors  and  cliniot  in  Latin  America. 

Meanwhile,  the  university's  IT  de¬ 
partment  is  keeping  busy  with  Web 
projects,  including  extending  online 
research  capabilities  to  the  university's 
medical  school  students,  he  says. 

SnFFilB  PICTIINE:  Temaies  is  big  on 
promoting  pet^Ie  ffom  withia  Al¬ 
though  he’s  currently  looking  outside 
to  bring  in  a  mix  of  seven  Java  develop¬ 
ers  and  project  managers  to  augment 
his  ^<f»erson  application  development 
staff  t^t’s  piinurUy  because  the  uni¬ 
versity's  22S-persoo  IT  department  is 
stretched  thin  on  those  skills. 

“I  have  some  staff  who  run  IT  proj¬ 
ects,  but  as  vre  get  more  and  more 
projects  to  do.  it’s  hard  to  Hnd  people 
with  project  management  experience,” 
he  says.  "We  haven't  gone  outside  for 
higher-level  people:  we’ve  always  gone 
inside.  But  somerimes,  if  demaiKl  is 
strong  and  you  need  additional  skill^^ 
you  h^e  to  look  outside.” 

Temares’  people-focused  approach 


can  be  traced  back  to  the  early  1990s. 
when  university  officials  were  looking  to 
trim  costs  “and  I  declared  that  I  would 
not  get  rid  of  any  people.”  he  says.  “If 
they’re  good  enough  to  be  with  me 
vdien  times  are  good,  then  we  can  ride 
it  out  together  when  times  are  tough.” 

wmrs  WORKMe:  The  "people  first"  cul- 
ttire  brought  Tim  Ramsay  back  to  the 
university's  IT  department  two  years 
ago  when  be  became  assistant  vice 
president  in  charge  of  the  school’s 
telecommunications,  data  center  and 
security  efforts. 

Ramsay  joined  the  university  13 
years  in  an  administrative  position 

within  the  IT  organization.  But  after  be 
earned  his  MBA  in  1992.  he  was  given  a 
chance  to  become  director  of  business 
services  at  the  university,  which  in¬ 
cluded  overseeing  a  staff  of  2S0. 

During  that  time,  Ramsay  drew  on 
his  technological  acumen,  most  no¬ 
tably  durii^  an  effort  aimed  at  au¬ 
tomating  paper-based  processes  at  the 
university,  ranging  from  key-card  rec¬ 
onciliations  to  journal  entries.  Tliat 
project  "brought  me  a  lot  of  attention 
and  brought  me  into  closer  contact 
with  our  prc^ramming  staff.”  be  says. 

WHATSCHALifiieMe:  "When  you  work 
with  vendors  in  the  IT  community, 
your  staff  has  a  window  on  what 
they're  worth.”  says  Ramsay.  "Day  in. 
day  out,  when  your  best  people  are  in¬ 
terfacing  with  the  Ciscos,  Nortels, 

IBMs  and  CAs  of  the  world,  you’re 
challenged  to  continue  to  fii^  ways  to 
keep  your  staff  feeling  good  about 
what  they’re  contributing  and  what 
they’re  doing  at  the  university." 

murs  UMQUE:  -I  like  the  opportunity 
to  have  a  band  in  the  strategy  here,” 
says  Ramsay,  who  now  manages  a  staff 
of  95.  He  also  likes  the  diverse  culture, 
where  IT  stafiers  hail  from  places  such 
as  China  and  Sri  Lanka.  "Fm  from  St 
Joseph,  Mo.,  udiicb  is  about  as  Midwest 
as  you  can  get  if  you  throw  a  dart  at  a 
map  of  the  US,,”  he  says. 

OveraU,  says  Ramsay,  the  University 
of  Miami’s  IT  department  is  a  great 
place  to  woik.  "You  see  people  getting 
35-year,  45-yeai;  even  49-ycar  awards 
for  their  length  of  service  here.”  be 
says.  "It’s  not  hard  to  foil  in  love  with 
the  university.”  I 
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You  and 
the  world. 

A  perfect  match. 


When  it  comes  to  your  career,  you're 
in  the  driver's  seat  And  the  reason  is 
simple:  You  have  the  skills  the 
world's  top  companies  hunger  for. 

May  we  offer  some  advice?  Consider 
all  your  options,  including  a  career  at 
Caterpillar  Inc.  Especially  if  you  want: 

Variety.  We  manufacture  over  300 
products  from  Mining  trucks  with  tires  weighing  10,000  lbs. 
each  to  Excavators  so  small  you  can  scoot  them  through  the 
double  doors  of  an  office  building. 

Opportanity.  We  can  offer  you  travel  opportunities  at  home 
and  abroad.  After  all,  we  have  manufacturing  facilities  in  16 
countries,  marketing  headquarters  in  8  and  distribubon 
centers  in  10. 

Raxibiiity.  Here's  your  opportunitv  to  plug  into  a  company 
with  the  resources  and  advancement  potential  only  a  global 
competitor  can  offer. 

Caterpillar  is  more  than  big 
(or  small)  yellow  machines — 
it's  people  pushing  ideas  and 
technology  in  new  directions — 
over  the  world. 
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Balancing 
Act 


Achieving  harmony 
in  work  ^  perso^ 
time  isn’t  a  feat  that  fT 
workers  can  accomplish 
alone.  These  Best  Places 
make  it  a  team  effort 
of  managers  and  staff. 

By  Jean  Consilvio 

The  rr  profession  earned  a 
reputation  long  ago  for  in* 
tensive  projects  and  on- 
call  hours.  Now.  in  a  trying 
economy,  demands  on  IT 
workers  are  increasing  —  not  only  fill¬ 
ing  up  their  busy  woricdays,  but  also 


spilling  over  into  nonwork  hours. 

What  sets  the  Best  Places  to  Work  in 
IT  apart  from  many  other  companies  is 
that  they're  giving  managers  the  power  i 
to  help  IT  employees  find  individual¬ 
ized  alternatives  for  managing  work 
and  personal  time. 

In  fact,  in  a  Computerworld  survey  of 
this  year’s  Best  Places  to  Work  employ¬ 
ees.  71%  of  the  11.504  respondents  said 
they  are  satisfied  or  very  satisfied  with 
the  work/life  balance  options  their 
companies  offer.  Flexible  schedules 
were  particularly  popular  with  IT 
workers,  who  can  easily  log  more  than 
eight  hours  on  some  days  and  therefore  | 
want  to  be  allowed  to  trim  back  their 
hours  on  other  days.  Here  are  some 
other  ways  Best  Places  are  helping  IT 
workers  get  more  out  of  life. 

Proactive  Management 

Managing  talent  in  a  way  that’s  also 
productive  for  the  company  means 
paying  attention  to  detail  and  antici¬ 
pating  i>eeds.  At  No.  S9-ranked  South¬ 


ern  California  Edison  (SCE).  IT  man¬ 
agers  are  encouraged  to  look  at  how 
they  can  help  improve  employees’ 
woik  lives.  Implementing  such  a  plan 
is  even  included  in  managers’  perfor¬ 
mance  reviews. 

“We  sat  down  with  all  our  employ¬ 
ees  and  asked  them  what  causes  them 
to  spend  personal  time  for  work  activi¬ 
ties.  and  driving  [to  and  from  work] 
was  huge.”  says  Kevin  DeMichele,  a 
service  activation  manager  in  Irvine. 
Calif.,  who  runs  a  centralized  help  desk 
50  miles  south  of  the  main  office  in 
Rosemead.  Many  of  his  20  employees 
were  traveling  75  miles  in  30  mph  traf¬ 
fic  each  day.  ”We  looked  at  how  can  we 
still  provide  a  centralized  feel  to  our 
clients  but  put  our  employees  closer  to 
home,”  he  says. 

One  way  to  do  that  was  to  allow 
help  desk  employees  to  work  in  differ¬ 
ent  offices  so  they  could  be  closer  to 
home  but  have  one  phone  number  that 
reached  all  of  them,  regardless  of  loca¬ 
tion.  Of  the  five  administrators  who 
take  such  calls,  three  are  in  Irvine  and 
two  are  now  in  Rosemead.  SCE  also 
provides  alternative  work  sites  that  are 
closer  to  employees’  homes.  FT  staffers 
can  work  from  these  locations  on  days 
they  need  to  get  home  quickly. 

DeMichele  also  set  up  a  Central 
Activation  Group  made  up  of  two  peo¬ 
ple  who  handle  more  than  400  remote 
software  installations  every  month. 

“We  had  these  folks  driving  around  to 
several  locations,  some  far  away,  to 
load  software  on  computers,”  he  says. 
“We’ve  been  able  to  put  them  in  ofiPices 
near  their  homes,  and  they  do  installa¬ 
tions  remotely  right  fiom  their  desks.” 

Individual  Attention 

At  West  Group  (ranked  No.  80).  a  divi¬ 
sion  of  The  Thomson  Corp^  IT  work¬ 
ers  formally  apply  for  flexible  work 
hours.  Such  an  application  might  spec¬ 
ify  the  number  of  work  hours  spent  at 
home  or  in  the  office  or  the  hours  of  a 
compressed  workweek,  which  might 
consist  of  two  weeks  of  nine-hour  days 
with  every  other  Friday  off. 

Ed  Packer,  manager  of  project  ser¬ 
vices,  says  he  also  works  individually 
with  his  staff  to  ease  their  schedules. 
Some  staff  are  allowed  to  log  their  40 
hours  earlier  or  later  in  the  week,  or 
leave  work  for  appointments  and  fami¬ 
ly  matters  and  m^e  up  that  time  at  a 
later  date.  “People  are  definitely  happy 
with  that  I  think  they’d  like  to  even 
have  more  of  it  if  they  could,  but  we 
have  to  keep  in  mind  the  business  need 
and  the  coverage  of  the  systems  in  our 
group  —  and  what  the  employee’s  per¬ 
formance  is  like.”  he  says. 


The  Eagan.  Minn.-based  company 
also  allows  some  full-time  worl^rs  to 
reduce  their  hours  to  part  time.  Karen 
Dip{>el.  lead  software  engineer,  worked 
14  years  as  a  manager  at  West  and  then 
switched  to  part  time  in  February  2001 
to  spend  more  time  with  her  three 
young  children.  She  now  works  32 
hours  a  week  spread  over  five  days. 

“I  was  looking  for  a  different  work/life 
option  because  of  the  children,  and 
they  [managers]  were  supportive  of 
that,”  she  says. 

Employees  can  transition  to  part- 
time  work  at  SCE.  toa  “It’s  a  two-way 
recognition  —  we  value  you,  we  want 
you  to  work  here,”  says  Mariette  Ke- 
sbishian,  manager  of  IT  training  and 
communications. 

“Implementing  work/life  balance  has 
to  consider  the  nature  of  the  IT  em¬ 
ployee,"  she  says.  "They’re  awfully 
smart,  high  I(^.  very  committed,  and 
they  get  enjoyment  out  of  doing  good 
work  and  seeing  the  results  being  used 
by  the  business.”  I 
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FOR  THE  IOTH  YEAR, 

conducted  a  suney  to  identify  the  100  Best 
Places  to  Wodt  tor  IT  protessionats.  ki  De¬ 
cember  2002.  Cbmputiermyitf  accepted 
nominalions  from  U.S.*based  companies. 
Pailicipants  were  ashed  to  provide  the 
natne  arid  contact  inforiTiation  of  the  appro¬ 
priate  indrvidiBls  at  their  cornpanies  who 
werefarniliarwithorhadaccesstoetTipioy- 
rnerrt  statistics  and  finaricial  data,  as 
benefits  policies  and  progianis  for  their  fT 
depytmerte  and  companies. 

in  January 2003.  the  contacts  at  the 
rKiminatedcornpaniesreceiveudlOO-ques- 
lion  sifvey  asidng  about  their  organizafioris' 
averagesalaiYandbonusincreases.per- 
centageoffTstaffprQmoted.rTstaffhjm' 
over  rates,  training  and  development,  and 
percentage  of  wornen  and  rninorities  m  IT 
staff  and  managernent  positions.  In  addttioa 
nformdionwascolectedonhoweachor- 
ganization  rewards  outstanding  perfor- 
m^we.itsretenlionprogramsandilsbene- 


fits.rangmgfromchildandeldercaretofiex- 
tirne  and  reintursement  for  college  tuition 
and  technology  certifications. 

Upon  corrviletion  of  the  cornpany  survey, 
participants  were  e-mailed  instructions  on 
selectkigarandomsampleoftheirU.S.- 
basedfiJ-andpart-timelTstaffs.Alpartici- 
patmg  corrvanies  were  required  Id  obtain 
feedtech  from  their  employees.  The  re¬ 
sponses  to  the  employee  survey  went  di¬ 
rectly  to  a  Ifwd-party  research  vendor. 

Topics  covered  induded  satisfaction  with 
training  and  developinerit  prograrns.  base 
salary,  bonuses,  health  benefits,  stock/ 
ESOP  dans  and  work/life  balance.  In  addi¬ 
tion,  employees  were  asked  to  rale  morale 
in  their  r  departments,  the  importance  of 
various  benefits,  and  their  level  of  agree¬ 
ment  with  a  variety  of  statements,  covering 
topics  from  career  growth  lo  management's 
fair  and  equal  treatment  of  employees. 

Nearfy  12.000  rr  employees  responded 
to  the  employee  survey  from  the  final  100 


companies  selected.  The  nomination  sur¬ 
vey,  company  survey  and  employee  survey 
were  al  conducted  via  the  Internet.  The 
company  and  employee  survey  portion  of 
the  research  was  cut  off  in  February 2003. 
To  qualify  to  complete  the  comptfiy  survey, 
participating  companies,  both  public  and 
private,  had  to  have  2002  revenue  of 
S2S0  million  or  greater  and  employ  a  min¬ 
imum  of  KX)  employees. 

In  scoring  the  responses  from  the  com¬ 
pany  and  employee  surveys,  company  re¬ 
sults  were  weighted  based  on  employees' 
irnportancerafingsfromtheemployeectirn- 
ponent  Approximately  one-half  of  the  total 
scoring  system  is  based  on  employee  re¬ 
sponses,  with  the  remaining  hdf  based  on 
the  survey  of  the  companies' benefits  and 
other  programs. 

The  year's  survey  process  was  managed 
by  the  ^  Research  team  of  Kathy  Dineen. 
Michele  Peoples  and  Jen  McKean. 

-  Man  Keefe  and  £Sen  Fanning 
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www.compulerwofid.com 


COMPUTERWORLD 


BEST  PLACES 

1«  WORK  IN  IT 


How  They’re  Chosen 


FOR  THE  10th  year.  Compulerworkf 
conducted  a  survey  lo  identity  the  100  Best 
Places  to  Work  tor  IT  professionals  In  De¬ 
cember  2002  Cbmpu/erwo/W  accepted 
nominations  from  U  S.-based  companies 
Participants  were  asked  to  provide  the 
name  and  contact  information  of  the  appro¬ 
priate  individuals  at  their  companies  who 
were  familiar  with  or  had  access  to  employ¬ 
ment  statistics  and  iinancial  data,  as  well  as 
benefits  policies  and  programs  for  Iheir  IT 
departments  and  companies. 

In  January  2003.  the  contacts  at  the 
nominated  companies  received  a  100-oues  - 
tion  survey  asking  about  their  organizations’ 
average  salary  and  bonus  increases,  per¬ 
centage  of  IT  staff  promoted.  IT  staff  turn¬ 
over  rates,  training  and  developmenl.  and 
percentage  of  women  and  minonties  in  IT 
staff  and  management  positions.  In  addition, 
information  was  coHected  on  how  each  or  - 
ganization  rewards  outstanding  perfor¬ 
mance.  Its  retention  programs  and  its  bene¬ 


fits.  ranging  from  child  and  elder  care  to  flex¬ 
time  and  reimbursement  for  college  tuition 
and  technology  certifications. 

Upon  completion  of  the  company  survey, 
participants  weree-mailed  insinictions  on 
selecting  a  random  sample  of  their  U.S.- 
based  full-  and  part-time  IT  staffs.  All  partici¬ 
pating  companies  were  required  to  obtain 
feedback  from  their  employees  The  re¬ 
sponses  to  the  employee  survey  went  di¬ 
rectly  to  a  third-party  research  vendor. 

Topics  covered  included  satisfaction  wrth 
training  and  developmenl  programs,  base 
salary,  bonuses,  health  benefits,  stock/ 
ESOP  plans  and  work/tite  balance.  In  addi¬ 
tion.  employees  were  asked  to  rate  morale 
in  their  IT  departments,  the  importance  ot 
vanous  benefits,  and  their  level  of  agree¬ 
ment  with  a  variety  of  statements,  covenng 
topics  from  career  growth  to  management  s 
lair  and  equal  treatment  ol  employees. 

Nearly  12.000  IT  employees  responded 
to  the  employee  survey  from  the  linal  100 


companies  selected.  The  nomination  sur¬ 
vey,  company  survey  and  employee  survey 
were  all  conducted  via  the  Internet.  The 
company  and  employee  survey  portion  ol 
the  research  was  cut  off  in  February  2003. 
To  qualify  to  complete  the  company  survey, 
participating  companies,  both  public  and 
pnvate,  had  to  have  2002  revenue  of 
$250  million  oi  greater  and  employ  a  min¬ 
imum  of  100  employees 

In  scoring  the  responses  from  the  com¬ 
pany  and  employee  surveys,  company  re¬ 
sults  were  weighted  based  on  employees' 
importance  ratings  from  the  employee  com¬ 
ponent.  Approximately  one-hall  ot  the  total 
sconng  system  is  based  on  employee  re¬ 
sponses.  with  the  remaining  half  based  on 
the  sun/ey  of  the  companies'  benefits  and 
other  programs 

This  year's  survey  process  was  managed 
by  the  IDG  Research  team  of  Kathy  Dineen. 
Michele  Peoples  and  Jen  McKean 

-  Man  Keefe  and  Blen  Fanning 
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The  rroka  ol  such  candy  bars  as  Atniond  Joy  and  M)urNls  exports  Hetshey's-branded  confectronerv  and  grocery  products 
to  more  Van  90  counines  Hetshey.  located  10  mnules  from  the  stale  capital  and  two  hours  from  Baltvinre  and  Philadel* 
phashome  to  tud-fnerafyHersheyPaik.  The  rr group  hasatumover  rate  ot  less  than  2%. 
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8.046 
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In  1903. 21*year-old  W8iwn  S.  Hwley  and  20'year*old  Arthia  Davidson  buRt  and  offered  to  the  pMc  the  first  Harley- 
Davidson  motorcycle.  In 2002.  the  company  recorded  international  shipments  ol  iiiore  than 200.000 motorcycles.  IT 
workers  have  an  opportunity  to  tram  and  work  in  cross-functional  teams,  in  adefibon  to  enfoying  the  mystique  of  working 
foranAmencanicon. 
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The  university's  mam  campus  is  located  on 260 acres  m  Coral  Gabies,  a  suburt)  list  south  of  Miami  It  tfmuaty  enroRs  nearly 
15.000 imdergraduate  and  greduaiB  students  from  every  state  and  rnore  (fan  140  nations,  located  m  a  cuNu^  dMise 
region,  its  IT group  representsabnied  cross-section  of  the  world.  The  attrition  rale  con$islenttyremain&  under  5% 
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Founded  in  1992.  mis  storage  vendor's  NetApp  products  mdude  specialeed  htfchwe.  software  and  services.  provKkng 
storage  management  tor  open  network  environments.  At  8%  of  revenue,  myestmentmfT  translates  mtomnwatxm  and  a 
challenging  work  environment  for  the  IT  staff .  Key  customers  indude  Citicotp  Securities.  Lockheed.  MerriR  Lynch.  Oracle. 
Tdias  Instnjments  and  Yahoo 

5 

WOMnSmInPlM) 
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9% 

3% 

6 

Ths  eye-care  benefits  provider  nms  ranked  16th  on  fevA/ne's 2003 Nsl  of  the  *6681 100  Companies  lo  Wdk  For."  tnlonnal 
lurch  rneetingsbetween  the  revision  vice  president  and  IT  employees  aie  held  twice  a  rnonih.  Employees  participate  on 
teams  that  recommend  process  and  business  changes. 
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The  company  operates  26  casmos  m  13  stales  undei  the  Hanah's.  Harveys.  Iho  tfid  Showboat  brand  names,  ha  recent 
survey.  ITemptovees'lopthreereasonswhytheyllkewotkmgatHarTah'swereskiNandcareefgrQwthopportunities. 
Harrah's  comrniirnetd  lo  world-dass  D  perfomiance.  and  ernployee  rewards  based  on  their  contnbutions  to  the  cotnpa- 
ny'sstrategicgoais. 
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This  nonprofit  heatti  system  includes  eight  hospitals,  a  home  health  and  hoMe  agoncy.  13  physician  practices  and  thou- 
sands  of  affSaledphysiciansin  Kansas  City  and  the  surrounAng  region.  ITemptoyeesalSaMLuke'sareofleredammi- 
mum  ol  two  weelc  of  training,  and  mtemalpnwiolKws  are  standard  practice. 
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no 
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Founded  in  1945.  the  family-owned  food  company  posts  annual  sales  exceeding  Sl-Tbikm  on  more  than 2.300 prod- 
uds.  It  specializes  m  bakeqr  and  dessert  products  and  field  technical  support  services.  The  company  is  located  minutes 
Irom  Niagara  Fafe.  Its  IT  department  hes  three  career  paths  -  business,  technology  and  manag»nent  -  designed  toat- 
tract,  ratam.  develop  and  reward  IT  talent. 
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Rhaniood&l. 
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Tbs  credit  card  company,  a  business  unit  ot  hlorgan  Stanley,  offers  the  Discover  Classic.  Discover  Gold  and  Discover 
Pbtrnum  cards.  Traning  programs  lor  IT  workers  mdude  a  mentoring  program,  two  we^  of  new^mployee  trainmg 
and  indwdual  career  dewlopment  plans.  Lunch-hour  *t8Cht^’give  IT  workers  news  of  the  latest  dev^opments  at 
the  company. 
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Ths  emerensewttb  soflwMre  system  providw  offers  banoai  management,  caw  rnarwgemww  ard  VMhtasodsoftwve 

More  than  50%  of  orent  staff  ers  are  internal  retefrab.  cfeatfig  a  hght-kniL  lord  wotWoree.  ftecert  dwRs  include  the 
.Xfitice  OepartmenL  tfw  Srnihsoman  InstitutKm  and  the  Patem  and  TraLbnwk  Office.  Both  technical  and  protect  manage- 
merit  trammg  are  offered  to  the  tT  staff. 
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floyiR  CariUMM  CruisM  Ud. 
Mb^ 

www.rojfalcaribbe^.oont 

3.225 

248 

5% 
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It  was  foureled  in  1969  when  dvee  Norwegian  shining  comoaniesrneroed  \Ad)en5avof%nMy.RovdC«tber/sf^ 
ship,  entered  service.  It  became  Ihe  first  passenger  shiD  buK  specrficdfy  lor  warm-weather  cruemg  lather  ihw)  pomt-to- 
point  transport.  [T  employees  are  offered  wot1(-ai -home  programs,  hex- and  comp-time  programs,  and  mwiionrtg  ffWra- 
lives  A  RituabCornriirttee  seeks  uniqje  ways  to  recogniN  etnployees.  Cruise  berwte  »e  avaiabb  to  d  WTvMryees 
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MaalvCwd  Iniwniflond  Inc. 
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The  global  payrnents  ixtnpariy  's  awerd-wmng 'FHxieiess' advertsinQ  carnpaign  s  now  seen  n  96  couilnes  sid  ri  45  tan  - 
guages.  H  manages  MasterCard  credt  cards.  AAasierCard  debit  cwds.  Maestro  ordw  debt!  cards.  Cvns  ATM  uces 

and  related  prograrns.  authorizing  32  infliQn  finarvsaf  trarisactKins  daRy  MasterCard  reffTttfses  lb  IT  wQiiMs  « 
per  calendw  year  tv  preapproved  graduate  and  undervaduale  coijses.  course-relaled  fees  vid  books 
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CmMtvlMMnbic. 

Auslel.^ 
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6.500 

40 
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7 

ftwnded  m1938.  Caraustar  recycte  papv  products  MO  paperboerd  arid  then  converts  tr  inioiubes.  cores,  cornpode  con- 
lainers.  carlofB  and  OBtorn  pactegina  The  oxnpany  budgeb  about  $6,000 pv  ff  ernployee  Iv  ifMvng  Erreitoyee  c»i 
use  that  iTKinev  fv  i^rriirung  education  V  conAerences 
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8% 
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11 

The  No.  2  vehide-fleel  rnanagernerrt  cornpany  workiwirb.  PHH  Arval  rnanages  abcM  f  rniNion  vefMC^ 
purchasing,  manaoemem.  hnwcing  and  manlenanceservicesL  It  also  handes  tar.  Me.  registration  and  insurant  requre- 
inents.  The  cornpany  focuses  on  prornoivig  from  vflihlri  IT  wvkets  are  offered  cvrlmuous  learnng.  Menial  aid  exteriM 
trairiing  and  a  tuition  reirnbifsernenl  program. 
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BenlonN4le.Afk. 

www.widmBt1store5.com 

InwBon 
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2.123 

30% 
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The  workfs  No.  1  retaler  has  nearly  4.700  stores,  ndudvig  decourn  stores,  combination  deovM/^^ocery  stores  «id 
rnernbers-orlyiMrehousestores.rsnowtheNo.1retaler  in  Canada  and  Mencoaswel  FoviderSwnWtoon’shMsown 
abou  38%  of  Wal-Mart  FT  workers  can  choose  among 540 tranng  classes,  available  as  onkne  training  and  larmal  class- 
roomprogrsns. 
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«lD.Eiwidi4Co. 
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www|je(KMrdB.com 

3.435 

302 

3% 

10% 
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The  enterpree  and  supply  (ham  software  mater  sproducts  manage  an  array  ot  functions  such  as  fwyiresovces  ac- 
cojnhna  loosiiis.  si«ply  Cham  rnanageinent  and  rnarulacImnQ.  CcHounder  Edward  McVwiey  wid  hs 

20%  of  the  company,  which  is  being  acquved  by  F^opleSott  fT  employees  are  ottered  slock  optons.  kjTKh  wBh  Ite  we 
president,  rnove  licteb. 'dnng  d(4ar$*  and  heteb  to  sporb  events,  m  addrtion  10  cash  benefits. 
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Feitf  Motor  Co. 

D8art»m.MKli. 

www.fciRLcom 

M1.726 

2344 

8% 
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Henry  IWs  rnassixixluctlon  assernbRy  Imes  n  tfw  early  190(b  hd  Ihe  grtxjndwork  fw  ForcTs  posrini  today  as  ^ 
pickim  truck  rnaker  n  the  world  and  the  No.  2  producer  of  cars  and  trucks,  tb  vehicie  brwids  ndude  Aston  Marim.  Jaguv 
and  VoNo.  Ford  ottersa  compelency-dnven  framework  that  enables  FT  employees  to  increase  lechncal  depth  ihroufTi  tra- 
dmorW  arvl  rKmbaiMorW  inodes  of  barnmg  and  develDprnent 
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Jtoiftoduetotoe. 

Rto.N.Y. 
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7,433 

354 
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The  largest  dMd  seler  of  cosirielcsand  beauiy-rebled  darns  m  the  world,  with  annual  revenue  of  newly  $6  bAon.  Akon 
reaches  cotBumers  in  143  camtnes  on  sacontmenbhhasappropnately  3.9  mdbonmdependenireiiresentewesands 
the  largest  corporate  conlriutv  lo  causes  fv  wornen.  IT  ernployeesare  offered  (rft- and  on-sie  techfvcN  Iraning.  wid 
manaoemenl  std  soft  sMIs  Irammg 
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4.760 

856 

8% 
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Created  by  Congress  in  1938  to  boislv  the  housmg  industry  folowing  the  Great  Depression.  Fame  Mae  IS  now  a  pMhc 
exMpany  operating  under  federal  charter.  It's  one  of  the  vrortirs  larg^  fmanaal  services  fmTBvtd  the  lJ.S's  No.  1  sauce 
fv  home  mortgage  fmanong.  More  than  20%  ot  IT  employees  late  pvt  m  the  tob-shanrig  option,  and  more  than  8% 
received  promotiofb  in  the  bsttecal  year 
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4% 
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Funded  in  1907 as  a  messenger  company.  UF*S  has  become  the  wortef  $  largest  pachage'iteiivery  company .  transporting 
rncM  than  13  rnitom  pecteges  and  docurnenb  each  business  day  throut^  the  II.S.  and  to  rnore  tian 200  counines  and 
terraories.  Employees  atteiid  at  least  one  eidematy  provided  techmeaf  and  management  devetepmerdcoureevconter- 
ence.  tv  a  total  expenddure  of  rnore  than  $1  rninn  annualy 
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6.000 

83 

10% 
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In  the  pizza  delvery  busness.  Oviano's  Pizza  ranks  No.  2  with  rrnre  •han  7200 locaAions  m  50  covtties.  Founded  m 

1960.  Domino's  stores  are  prinapaty  deiverv  locations.  Fv 2003.  the  oMcany  has  nveased  lb  FT  educatNm  budget  by 
more  than  50%. 

22 

MhwiMilJhtowireCo. 

arhiMnn. 

2323 

4t2 

19% 

4% 

8 

The  fiagshm  company  of  Minnesota  Mutual,  thb  mswer  offers  individual  and  group  Me  and  dsabiiy  insurance  and  annu- 
difb .  The  company .  founded  in  nSO.  has  neMT  laid  off  fT  vmiters.  Hs  FT  trammg  staff  of  15  employees  6  devoted  to  oflemg 
technical  education  to  the  FT  staff. 

23 

iEtaSSl^Ca 

UedtaaVMa. 

WNwambmxom 

7300 

14»4 

6% 

3% 

4 

AFortune 500 company  iMlh  $10  bMionnasseb.AmencanFainlyspecialS5in  property  and  casually  nsurvice  and  of- 
lers  Me.  healti  and  henMOwners  coverage,  as  wel  as  nvestmeni  and  retderneni  ptanrvng  prtxkicb.  b's  arnong  the  largest 
U.S.muteal  companies  that  concentrate  on  auto  insurance.  Semr  management  has  made  technology  one  of  the  three  cv- 
porate  locus  pomb  used  to  phontize  projeeb. 

24 

Worthani  Timor  Corp. 

ChcaQO 

wrwrwLnlncom 

9317 

tooa 

18% 

5% 

5 

Founded  n  fi89.  Ihb  tnancal  services  cornpany  offers  FT  wvtets  access  to  largrscale  appteabons  and  fleiafate  work 
schedules  It  piowdes  banking  and  Ingt  services  to  the  affluent  andtolmancial  retdutions  and  corpvaPons  from  more 
than  80  offices,  innariy  m  irob  arto  Ftorids  n  rnanages  $36  Mten  VI  hanfung  asseb. 

25 

COW  CompHtor  Caden  he. 

VdnonHI&l. 

wwwedwxom 

2379 

137 

15% 

0% 

6 

The  cornpany  offers  nw  than 80.000{XMp>4erproducbthrou»{aaogstelesalestoWtosteafto  two  recto  shor 
rooms  in  Inois.  tn  addition  to  computers,  the  company  Mso  sels  pmters.  softwere.  accessories.  adcKm  boards  and  net  - 
VMkfX]  products  FT workers  keep  evrentwm  technology  trenrbttvough  the  mrnpariy'sfTVMyventhvyMiftniivstvpi^ 
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SPECIAL  REPORT 


llic  I  xpical  Best  Place, 
B\'  the  Numbers 


AVERAGE 

WORKWEEK: 

431i()urs 

PROFIT  MARGIN: 

88%i>ritet 
I’lncoswm’ 
pnifitnhli.' 
in  2002 

LAYOFFS: 

28%  of  Host 
1 ’laces  had 
la\olfsin2002 


Tlie  Benefits 
Hi^s... 

PERCENTAGE  OF 
COMPANIES 
THAT  OFFER 


Pretax  spanding  programs  for 
uncovered  medical  expenses  94% 

Reimbursement  for 
technology  certification  93% 

T^ecommuting  options 

for  employees  91% 

On*site  fitness  center  or  fitness 
membership  reimbursement  84% 


KSTfUCQ 

nwnifT 

...AndRmm- 

To-Cirows 

PERCENTAGE  OF 
COMPANIES 
THAT  OFFER 

Domestic  partner/spousai 
equivalent  benefits  58% 


Jobsharirrg 

Same-sex  partner 
benefits 


55% 


53% 

Elder  care  and/or  serrnces  49% 
On-site  child  care  28% 

Company-subsidized 
childcare  27% 


rvtu 

ntin&tTi 

MOMmOC 

luemeoirs 

OtftRUIPU 

ITtmOYEi 

iVWT'.'iPECIH" 

AhMi  iMrace  Co. 

NontArooiLR. 

wiMiralstte.com 

38357 

3348 

6% 

5% 

IS 

Th6insuterwesfoundedin1931aspartofSe8rs.RoebucKandCo.andbecarneixibliclyti?<:le<i:a'‘^;i  ini996.il became 
ifxJweridenlafterSearsdivesteditsremamingshafesloSearsstocWioWefs.AsaFortune'OO  nmn.Hnv  iiistaleoflefsca- 
reer  advancement  paths  for  IT  workeis  and  encourages  them  10  take  advantage  of  (wportumnes  10  woTK  n  many  business 
areas  to  learn  new  skills. 

n 

■  .  .  -  t.  -a  j  1  ■ 

nouHiwn  iwrnaoQnai  me. 

PnBpedHeighls.1. 

wtnvhousehddcam 

27.997 

1.938 

22% 

6% 

11 

With  nearly  $123  billion  m  managed  assets,  this  consumer  lender  has  been  serwig  niid(fle*nwket  customers  since  1878  In 
March 2003.  it  was  acquired  by  megabank  HSBC  Holdings  PLC.  It’s  the  No.  2  consurner  finance  hrm  in  the  U3.  IT  workers 
are  offered  chalenging  assignments  and  muitiple  opportunities  lor  career  gowth.  Most  managers  in  the  technical  group 
began  their  careers  as  programmers. 

7t 

lfi.HunlTrMpm1 

Sarviotthc. 

txmelArk. 

WM^ihttLcam 

16365 

298 

17% 

7% 

11 

One  of  the  largest  truckload  earners  M  the  U.S..  J.B.  Hunt  hasa  fleet  daboiX 10.700 tractors.  26.100 trailers  and  19.700 
containers  and  provides  dry-van  truckload  service  throuf^  the  U3..  Canada  arid  Mexico.  IT  workem  can  earn  rnent- 
based  pay  inaeases  off  the  normal  review  cycle  and  are  recognired  with  individual  and  team  rewards  and  through  public 
recognRiw  at  company  events. 

n 

SonecofttidiBlsCo. 

HartsMle.aC. 

wwesonoco-csm 

1ZOOO 

t23 

20% 

4% 

8 

One  ol  the  workfs  largest  makers  of  ndustnal  and  consumer  packaging  products,  its  top  customers  include  KeBogg.  hoc- 
ter  &  Gamble  and  F^p^.  It  employs  approximately  18.000 people  at  triore  than 300 rnanulactuting  and  sales  locations  in 

32  countries.  Recruiting  and  new-empl^  orientation  programs  focus  on  long-term  retention.  Soot  bonuses  are  awarded 
tor  above-average  performance. 

30 

tiettMtoecioReiLLC 

UnMlrehirB.1- 

wMLhewtLcom 

11.177 

1488 

15% 

8% 

4 

Pounded  by  Ted  Hewitt  in 1940.  this  glob^  outsourcing  and  consulting  firm  compleled  its  IPO  in 2002.  Its  client  roster  in- 
eludes  more  than  halt  of  the  Fortune 500 and  more  than  a  third  of  the  iSobal 500 companies.  IT  workers  choose  training 
through  a  database  catalog  ol  classroom-based,  computer-based  and  distance  teaming  options  In  the  last  fisc^  year,  more 
than 1.200 dasses  were  ottered  to  fT  workers  intemaNy. 

ji 

CanmrCefp. 

KwcasOly.hki 

WMir.oemer.com 

4343 

2.984 

26% 

10% 

15 

This  provider  ol  dinical.  finarKaal  and  administrative  intonnalion  rnanagernent  appications  offers  tools  tor  rnanaging  dec- 
Ironic  medic^  records,  patient  care  and  health  information  access.  Its  technology  links  emergency  rooms.  ph»inacies  and 
oftier  health  care  depafimenls.  fT  workers  have  the  opportunity  to  work  with  leeckng-edgetedmoicigies  and  tools. 

K 

FfMMelbc 

McLean. 

www-freddttnaccom 

4385 

1316 

18% 

4% 

9 

Sister  company  to  Fannie  Mae.  the  sharehoUer-ownecL  government-sponsored  enterprise  was  established  by  Congress  in 
1970 and  purchases,  securitizes  and  invesls  in  home  mortgages,  hoffers  programs  to  provide  fT  workers  wHh  a  balanced 
lifestyle,  eluding  an  online  concierge  service  that  arranges  lor  tioraf  deliveries,  dog-walkers,  lawri  care,  and  p^  and  va- 
cation  planning. 

33 

FedEx  Santcao  (FedEx  Corp.)  2M.000 

Ca8arvie.tBni 

iMiMrJedBx.com 

4318 

4% 

3% 

15 

FedEx  Services  includes  sates,  rnarkeling  and  lechndogy  support  hx  FedEx  units  and  provides  asingle  point  of  contact  lor 
cu$tom»s.  IT  vvorkers  have  round-the-clock  access  to  rnore  than  1.000  courses  through  an  online  training  prograrri  and  lu- 
iond.  Afore  than  18.000 online  courses  are  expected  to  be  completed  by  Its  IT  workers  this  year. 

» 

Uide’&idinc. 

DodgevdeLWis. 

eMMrJandsendcom 

8,000 

2S3 

7% 

1% 

to 

Started  in  a  basernerd  in 1963 along  the  nver  m  (^w^'soU  tannery  disthet.  this  retailer  now  markets  its  products  through 

Its  folksy  flagship  cattog.  It  also  runs  about  30  oiXlel  and  retal  stores  in  the  U3.  U.K.  and  Japan,  and  its  products  can  be 
found  in  aboul  ^  Se^  stores.  Retailing  giant  Sews  owns  Lands' End.  which  is  now  located  in  rural  Wisconsin.  fT  stahers 
am  kepi  up  to  date  on  the  latest  tools  and  technolotyes  and  are  entered  leadeishto  and  personal  (yixMh  edxttion . 

2 

ittariean  HiMty  Oraim 

GMahomaCity 

WMvafDnxxxcom 

1300 

154 

2% 

1% 

15 

Since 1960.  this  cornpany  has  provided  insuranix  products  and  services  to  the  educational  convnunity  and  to  bade  associ- 
alion  rnetnbers  throughout  the  country.  Technical  training  is  budgeted  annualy  arxf  dispersed  based  on  project  needs  and 
company  goals  and  objectives.  Certain  IT  certifications  are  paid  100%  by  the  company  and  areconducted  on-sde  at  Its 
irammglacMy. 

36 

Readmy  Expraoi  he. 

AlvoaOPio 

waMLroadwaycom 

27307 

139 

10% 

1% 

5 

ft)urxjedn1930.  the  trucking  cornpanyspecxalues  in  two-day  and  longer  hauls,  transporting  goods  such  as  apparel,  food 
and  furniture  in  8ieU.S.  Canada  and  Afoxico.  The  carrier  oper^sorne 10.000 tractors  and  33300  trailetsthroughanel- 
wQrt(  ol  about  340 U.S.  terminals.  IT  workers  can  take  technical  or  mtfiagenaf  classes,  as  wel  as  soft  skills  traxiing.  Severn  of 
the  inttnal  training  classes  are  designed,  developed  and  iau|^  by  fT  staff  rnernbets 
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sPECuimpoiir 


The  Typical  Best  Place, 
By  the  Numbers 


AVERAGE 

WORKWEEK: 

43  hours 

PROFIT  MARGIN; 

88%  of  Best 
Places  were 
profitable 
in  2002 

LAYOFFS: 

28%  of  Best 
Races  had 
layofisin2002 


The  Benefits 


PERCENTA6E0F 

PERCENTAGE  OF 

COMPANIES 

COMPANIES 

THAT  OFFER... 

THAT  OFFER... 

RoxiUe  hours 

99% 

Domestic  parlner/spousal 

equivalent  benefits 

50% 

Pretax  spomlfig  programs  for 

55% 

uncoraredmedteal  expenses 

94% 

Jobsharing 

Same-sex  partner 

53% 

technology  ciertHIcation 

93% 

benefits 

Tefoconvnutino  options 

Elder  cam  an4/or  services 

48% 

forempfojmes 

91% 

On-aMecMMeara 

28% 

On-site  fitness  center  or  fitness 
memDersnp  reennuneniofli 

Companyeubsidhed 

chUeare 

27% 

.AndRoom- 

Tb-Grows 


VWiiaBlIlllCTMiilftiiwwgBdMMfclfccawwirlMtIlrliiGbtwMWI 


btQHi  Mtcmotib  pninnmn. 


McuriaMutactflniln 

inbitolKbriGdpaup 


(>itgliawBdftl»oi><iii^()>induitlilinJciWMiii»p«ltig>igpMiit1i,lilaptii8>BWlnrldi>(ilB^ 

32coBrtrt».fliciiilng»dwi»iifiiBioitiortw8inwpminwfan8flnlDnBlwiiilwl^ 


FaigdidbyWHwiilntt40LWtQ|ititCMlwMdnQindLUiMiilng>WMW|<<i8fcPOfca00i.lfcflhitwilgln- 

tiiteiiM»8iiwhdlBftitlWlM»S00«8HW>tf»«iMitfdliiCliM80DcBPip»*«>frw*iiciKMMWning 

twt4^>daifc«ic<ite8oldM«oairtM4id>tBW8ulwlMRidwililianMli«i»pe|ilflia.fcti»Mfceil|Mg.wa 

liinl2(n(taMwMaNiiidtofT«nrtMBMmil|r- 


anC»W0LiiiCBHIW>MiPWII>lriiWWKMpWlK*Wd«1<MitoilnAMJlDll8caWUrth!«il6flitDI 
ccnwivgB*»rioi»cMiw.C»>fcffc»<E^fcm8»prtdtfffchy»>CMi^«riiwcoiJMcrt  liKli 


Better  Performance.  Better  Price. 

P .  ..  . . 


Dell  I  Switches 

PowerCoanect*  2124*  Switch 


PowerCoanect*  324t*  Switch 


SeeleMe,  AMertetli  Uwiee>ti<  Swite> 

•  24  Fan  Ethernet  Ports  Plus  1  Copper  Gigaen  Port 

•  1  Gigabit  Pen  for  High  Speed  Coonecovrtv  to  a  Server 

•  1-Yi  Men  Guseiess  Dev  Advanced  Exchange  Service' 


>299 


•  48  Fan  Ethernet  Ports  Plus  2  Burll-tn  C^iabii  Uphnks 

•  Multi-le«er  traffc  Classircatai  at  Imts  1 3.  and  4 

•  Advanced  Uanagemem  via  Browser  or  Musov-Sianderd  QJ 

•  3-Vi  Next  Susuiess  Day  Advanced  Exchange  Service' 


E-WUIE  Cede;  17814- SINK 


•  3-Yr  Next  Business  Dav  Advanced  Exchange  Servm.'  add  S49 


>999: 


•  3-Yi  24x7  4-Hr  Advanced  Enhange  Service;  add  SI  99 


NEW  PowerConnect*  5212*  Switch  PowerConnecr  5224*  Switch 


Migb  Nrtefeece.  AII-fiigaM  Maeiged  Surteh 

•  12  Copper  Gigabit  Ports  Plus  4  9P  Fibe)  Uoimks 

•  Layer-3  Aware  Class  of  Service  ftiorituebon 

•  Advanced  Management  via  Browser  or  Indusuv- Standard  Cll 

•  S-Yr  Next  Business  Day  Advanced  Exchange  Service* 


>1199 


asiMias  S33/mo.  .(46piTns*i 

E-¥MJIE  Cede  17fM-MI11 


•  3-Yr  24x7  4-Hr  Advanced  Exchange  Service*  add  St30 


High-ParianHwe  M-fiigebii  MMngad  SwMi 

•  24  Copper  Gigabrt  Pons  nus  4  SFP  Peer  upiina 

•  Layef-3  Aware  Oast  of  Servee  Pnarmzaiion 

•  Advanced  Managemern  via  Browser  or  IndustJV-Standard  Cll 

•  3-Yr  Next  Busatess  Day  Advanced  Exchange  Server 


>2199: 


It'S  a  Dell,  so  you  know  you're  going  to  save  money.  But  loTs  taft  performanca.  From  standard 
Fast  Ethernet  to  high-speed  Gigabit  Ethernet  over  copper  or  fiber.  Dell  PowerConnect  switches  »e 
designed  to  offer  full  wire-speed  and  non-blocking  performance  Recent  Tol^  lab  tests  confirmed  that 
the  Dell  PowerConnect  3248  outperformed  industry  leaders  by  as  much  as  47%  Pkts.  the  PowerCormect 
5224  has  been  lauded  by  Tomi  Hardware  Guide  (October  20021  for  its  performance  and  manageability 
features  for^  price.  PowetConnea  switches  also  are  hi^ly  interoperable  and  scalable,  making  them 
ideal  for  building  a  first-time  network  or  expanding  yoir  existing  one  So  not  onlv  will  you  get  oneKSf- 
a-kind  Dell  performanre  for  less  but  perhaps  more  importantly,  there'll  be  fewer  headaches  too 


Dell  POwarCMBBCt  324$  OtHperfonns 
Au  Cttco  Cate/ysf  2950  ^  47% 
3C0MS^per$tack3Swhck44e$$f 
30%  u  Isf0r2  Thma^iput  Tem' 

Tolly  Group  Report  #202149 
-  September  2002 


•  3-Yr  24x7  4-Hr  Advanced  Exchange  Service  add$29S 


Growing  your  network.  Easy  as 

Click  www.dell.com/switch  Call  1-800-433-2316 


Mfc  7*-«p|Sel  ae^p  CT 

P'lcing  sviiiaCi'itv.  wd  terms  d  pHef  may  Change  WMwuirotKS  Taxes. 

•Thrt  ««ice  ha*  n«  Been  anroved  by  the  Pederel  Coneuncahont  Comnussiai  tor  use 
Mantrvy  caynent  based  on  48-manfh  60  Days  Same  As-Cash-QwetLoan ' 


MantrvyGayment  basedon  48-manfh60  DaysSame  As-Cash-QiKtLoanwnhaO  pavtT«nB3l999%  tmamil  rate  Vgut  ■mrest  tale  montlyy  saynwn  may  be  sanw  o>  depen»nu  on  •wi  eiMtrwvnwKss  1  you  do 
Conmanc8tnarxDmtwruchs<n«(]avsaitarenxluRth>psLnefesiwllaccn«dumihcMltrsie0davS9idaaocur»nationlaeii«ra«ity  OFFcflVAPlESBTCittXTVWRTHlWSSOPCuSTfiMEfiASOtTfflMWlt'B'aivOES  i 

aggregate  imwMamotfatalhemertessaccetilarceCAiittLaannnMexcaedSTSOaO  IfiowonJeceiceedsSTW.  aDebFmaneiaiSen.«estepiviBennwt»<mtoptseess»«itancwnenitt>iV'  Ta«i  tees  M  simm  chames  am  eat*  ano  mm  «e>v  ivn>«uaarQ»a«gers 
hnanctng  Quyttoan  an_»^  by  CIT  Bat*  to  Sny  Business  customeis  wrth  awtroved  eradh  •faehmcdr  <ti»iac»nem  part  or  dirt((iew«Jmgonwfticecwee«iwinbe*8«iOW4necw*eiYioiiow«so»w»-ne»Mtrud>tWix«»«<ra(h»tced«ew«cX  return 

^  Ihad-gatty  prondw  SuM  to  parts  avaiiabiittv  geoyapiiical  tesnebons  and  wms  d  sBvviw cortiraei  Service  mrwig  depandent  i<xin  ivne  ol  4w  can  piacao  e  Oea  Detann«  umr  musr  be  letixned  RexSacamvKs  ip«  br  retunvsnaS  US  iMv  Uh 
GreupAeiinn42II?i49was commissioned tw Dell  O^.lhestvluedClo^.EVALUE.andiyMMrCornecrareiredemaitsofDeiiCaniputeiCatpotanon  rtTOm Dee Compuiw Curuwatipn  All rejewed 


resOCVHiPm  hv  errvx  m  rypugiaixiv  a  phoit^aphy 

lesiQeniiai  anviipninem  wit.  the  appntvai  pt  (pe  PQ;  has  bee"  obtained 
eiMirwoniwiest  h  you  do  <ni  pat  me  beiwce  *<mm  6b  days  ui  tie  Cu<iaper 
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lt«Y«itf»lfc1iWiniton«iito«»laiiii<fcl>BiiaB»»iii#l»iiiiioir(ilUid*lidlwlM««iM«W«.ir 
wa1«iwtyie>BdlQ09bmon  and  book  wt^nwnwrt  tWIHl  lillliUciMWiMtiwiliilUliclGclundlw 
cliinstocnaidMkiatiiiiltrMalicilMDrtigingracraiHMMaHiMiMBpnd. 
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lhabii*hoUaQmaiiaBrteCMaeoiiti»lnaaa«alaiaa(  haaibbnr*aaJoM*«ia»«<<lMlla«aill<IMIt»*eiit- 
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20% 

M 
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The  Perfect  Toy 
for  Control  Freaks. 


Control  2  to  512  PCs  or  servers  from  a  single  keyboard, 
monitor  and  mouse  console  with  Tripp  Lite  KVM  Switches! 


Take  TOTAL  CONTROL  with 


Tripp  Lite  KVM  Switches!  Not  only 
will  you  be  able  to  manage  every 


computer  on  your  network,  you'll 


also  SAVE  VALUABLE  TIME. 


MONEY  AND  SPACE. 


Save  hundreds  of  dollars  per  port 
in  hardware  and  electricity  costs, 
eliminate  unnecessary  clutter 
and  improve  productivity  by 
avoiding  unnecessary  movement 


between  consoles. 


o  o  O 
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Tripp  Lite's  8-port  rackmount  KVM  Switch  is  full  featured  yet  economically  priced. 

•  All  metal  housing— occupies  only  ID  of  rack  space 

•  Simple  "plug-and-play"  setup  requires  no  software  configuration 

•  "Always-on"  technology  eliminates  need  for  external  power  source 

•  Individual  port  selection  buttons  allow  for  taster  CPU  selection  without  scrolling 

•  On-screen  display  provides  simplified  menu-driven  management 
•Compatible  with  PS/2,  AT*,  USB*,  Mac*  or  SUN*  systems 

•  Desktop  models  also  available  in  2  and  4-port  configurations 


*  When  used  with  epcionel  edepterv  saU  separstety. 


FREE  4-Port  KVM  Svyitch! 

Register  online  for  a  chance  to  win  a  FREE  4-port  KVM  Switch. 

Visit  www.tiipplite.coin/proino/cw 


No  purchase  necessary.  Some  restrsctrotB  apply.  Vi 


mMm 


www.tripplite.com 

nil  W.  3Sth  Street,  Chicago.  IL  60609  (773)  869-1234 
PCiteuineEittiisCiweAMtdiMasanMnniWZWOairsfWMMgHabnBiRc  uasuittriar 
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The  Tbps  for 


DIVERSrrY 

t  McKesson  IntomiationSolubons _ 

2.UniyiersilY0tMiMni _ 

3L  Freddie  Mac _ 

4.  Assurant  Group _ 

5. USAA 

8.  Southern  Catfarnia  Edison  &  Edison  International 

7.  Discover  Fmaroal  Services _ 

6.  RoyMCartbean  Cruises  Ltd. _ 

9. f^nraeMae 


10.  Verizon  Wireless 


TRAINING 

CAREER  OEVEI.OI>MENT 

RETENTION 

t  Wal-Mart  Stores  Inc. 

1  Lockheed  Martin  Corp. 

t  University  of  Miami 

2.  Allstate  Insurance  Co. 

2.  Household  Intemahonal  Inc. 

2.  Hershey  Foods  Corp. 

3.  J.B.  Hunt  Transport  Services  Inc. 

3.  University  of  Mami 

3.  Network  Af^itiance  Inc. 

4.  University  of  Miami 

4.  Sonoco  Products  Co. 

4.  Caraustar  Industries  Inc. 

S.  Saint  Luke's  Health  System 

S.CemerCofp. 

5.  Saint  Luke's  Health  System 

6.CemerCorp. 

6.  General  Mils  Inc. 

6.  American  Fidelity  Group 

7.  American  Fiddity  Group 

7.CignaCorp. 

7.Har1ey-0avidSDn  Inc. 

8.  McKesson  Information  Solutions 

8.  Harrah's  Entertainment  Inc. 

8.  Harrah's  Entertainment  Inc. 

9.Harfey-Oavidsonlnc. 

9.  Wal-M^  Stores  Inc. 

9.  Domino's  RzzaLLC 

10.PHHAfval 

10.  Domino's  Pizza  lie 

10.  Roadway  Express  Inc. 

BENEFnS 

tAvonfroductsInc. 

2. J.D.Edward5ACo- _ 

3.  Fannie  Mae _ 

4. USAA _ 

5.  Computer  Associates  International  Inc. 

8.  Capital  One  finanoalCorp. _ 

7.  VerizoT)  Wifeless _ 

8.  Hattey-Oavidson  Inc., _ 

O.Univefsity  of  Miami _ 

10.  FMwork  Appliar)ce  Inc. 
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Meet  Rachel.  Crisis  Coordinator. 


ago  a  drop 
been  nearly 
all  media, 
scattered 

drop  coordinates.  At  Nortel  Networks,  we  call  this  “the  engaged  business 
modeir  And  we  make  it  happen  by  allowing  businesses  to  engage  their 
employees  with  ways  to  work  more  productively  as  teams.  Eliminating 
boundaries  by  anticipating  user  needs.  Delivering  critical,  time-sensitive 
information  on  whatever  device  they  can  access.  Encrypted  for  security, 
info  gets  to  where  it  needs  to  go  and  nowhere  else.  End  of  story:  Rachel 
and  her  team  save  time  and  money  as  they  race  to  help  people  in  rreed. 
All  delivered  by  our  enterprise  vision.  One  network.  A  world  of  choice. 
noTtelnetworks.com/onenetwork 


N^TEL 


NETWORKS' 


nortefnetworks.eom 


Nond  Netwoifa.  the  Norte)  Netwoiki  >090  and  the  Globemark  are  trademaria  of  Nortel  Net«Mrk$.  e  2003  Norte)  Networfa.  AD  nghb  reserved 
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Got  Outsourcing 
Questions? 

Computerworld’s  New  IT  Executive  Summit  Series  Has  the  Answers 


If  you're  an  IT  executive  in  an 
end-user  organization,  apply  to 
attend  Computenworld’s  upcoming 
complimentary  half-day  summit  on 
IT  Outsourcing:  The  Offshore 
Aiternative. 

Robust  global  communication 
technologies  and  state-of-the-art 
security  tools  have  made  IT  out¬ 
sourcing  an  increasingly  viable 
option  to  achieve  ROI.  Part  of 
Computerwrorid’s  new  IT  Executive 
Summit  Series,  this  invitation-only, 
4-hour  summit  will  explore  how 
companies  are  realizing  tangibie 
benefits  from  outsourcing  IT 
application  development, 
integration  and  management. 

Seating  is  iimited,  so  appiy 
todayl 


Los  Angeles,  CA 

Thursday,  June  26,  2003,  8:OOam  to  Noon 
Hyatt  Regency 

8:00am  to  8;30am  Rsgtstratlon  and  NetworWng  Breakfast 

8:30am  to  9;00am  Wetcome  and  Opening  Keynote 
Outsourcktg  Watch  2003: 

The  Beet  of  Both  Shores 

Maryfran  Johnson,  Editor  in  Chief, 
Computerworkj 


9:00am  to  9:30am  Industry  Update 

Evaluating  Your  IT  Sourcing  Options 

Bart  n»rkins.  Managing  Partner, 

Leverage  Partners  (an  PT  consultancy) 

9:30am  to  10:00am  Business  Case  Study 

Rick  Hamilton,  CTO.  DPS  Group  Ltd, 
10:00am  to  10:30am  Refreshment  Break 

10:30am  to  11;30am  Outsourcing  Strategies 

Leadership  Strategies  in  Offshore 
Outsourdrtg 

Moderator:  Maryfran  Johnson, 

Editor  in  Chief.  Computerworld 
Psmelists: 

■  Marty  Chuck.  CIO,  Agilent  Technologies 

■  Rick  H^Hton,  CTO.  DPS  Group  Ltd. 

■  Jerry  McElhatton.  Senior  EVP  of  Global 
Technology  and  Operations. 

MasterCard  Intematior^ 

a  Greg  Schueman.  Vice  President 
i  and  CTO.  Mercury  Ir^rartce  Group 

H:30am  to  Noon  Open  Forum 


I  Mdn\  Out  b 


For  information,  cali  Chris  Leger  at  888-299-0155 
or  to  register  online,  visit 
www.itexecutivesummit.com/outsourcjng 


COWOTERWOliLD 


IT  Executive  Summit 


senes 


Sponsored  by 


Cognizant 

Technologv 

Solutions 
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My  company  is  a  area 
place  to  work  inIT. 


BEST  PUCES 

TOlMKin 


TOlMKin 

IT  Employee  Pulse 

I  am  proud  to  work  I  have  access  to  the  Myjob  is  interesting 

for  my  company.  topis  and  technologies  and  challenging. 
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Eagan.  Mmn 

Ynwiir.westgroup  com 

8.875 

t385 

28% 

4% 

12 

The  siAsKfary  d  Canadian  Dubfeher  The  Thomson  Corp  publishes  law  books  and  onknelegal  inftxTT« 
operates  the  Wesflaw  online  leg^  research  service,  wfucb  contains  more  than  15.000 databases.  An  »inual  recognition  pro¬ 
gram  rewards  individual  emoloyees  with  bonuses  lor  speaai  achievements  that  contribute  to  the  success  of  the  company, 

t1 

X»roiCorp. 

Stamford.  Conn. 

WMWJcerox.com 

69.000 

706 

10% 

2% 

5 

Best  known  for  its  colof  and  black-and-white  copiers,  feiox  also  makes  pnnf  ers.  scanners  and  la*  machines.  The  company 
sells  document  management  sottware  and  copier  supplies,  offers  services  such  as  consulting  and  document  outsourcing, 
and  holds  a  slake  in  a  io«nt  venture  with  Fuji  Photo  Film.  Its  global  IT  operation  offers  opportunities  to  team,  work  and  gam 
experience  m  diverse  technology  domains 

St 

hoplas  Energy  Corp. 

Chc^ 

www.Deoplesenefgv.com 

2.479 

t67 

6% 

2% 

5 

Peoples  Energy  s  a  150-year-o(d  distnbutof  of  natural  gas  Ihioudi  two  utilities  Peoples  Gas  Light  and  Coke  (850.000 cus¬ 
tomers  in  Chicago)  and  North  Shore  Gas  (150,000 cuslomers  m  Chicago's  northern  suburbs).  Outstanding  performance  m 

IT  IS  rewarded  through  special  work  assignments,  such  as  high-pnonty.  high-visibilrty  pr oiecis. 

83 

Herteysvfla  Insurance 

HaileysviBe.Pa. 

www.h3r1eysv(llegroup.com 

2.506 

452 

9% 

10% 

4 

A  regjOTial  underwriting  organization  operating  m  32  Eastern  and  Midwestern  states,  the  company  offers  property  and 
casualty  insurance  to  businesses  and  individuals-  IT  workers  are  ottered  a  generous  tuition  reimbursement  program  and 
leadership  seminars  focused  on  career  devetopmen  t  as  well  as  personal  goals  and  d)}eclives.  Merrt  pay.  bonuses  and  in¬ 
centive  plans  are  tied  to  individual  and  company  performance. 

U 

AXARnanctaJInc. 

Newlferti 

www.axa-linancral.com 

4.687 

579 

15% 

5% 

6 

A  subsidiary  of  Rench  msurance  giant  AXA,  the  company  oversees  units  such  as  AXA  Advisors,  AXA  Network.  AXA  Dislr6- 
utorsandEquitableLiteAssurance  whichofferfinancialplanning.assei  management,  life  insurance. mutual  tundsandan- 
nuity  products  Individual  ot^eclives  and  performance  are  measured  through  semiannual  reviews  of  the  IT  staff  A  special  IT 

Web  site  recognizes  employees  for  service,  career  movemeni  and  accomplishments. 

e 

Cornfnglnc. 

Comng.NY 

www.coming.com 

23.000 

2t0 

7% 

2% 

4 

Founded  more  than  150  years  ago.  this  malenab  maker  provided  the  glass  for  Edison's  light  bulb.  It's  now  the  world's  top 
maker  of  hber -optic  cabte.  which  it  invented  mote  than  30  years  ago.  Continuous  teaming  is  built  into  every  employee's  an¬ 
nual  dev^opment  plan,  which  might  include  technicat  courses,  college  courses,  seminars,  conferences,  networking, 
benchmarking,  certificate  pr ogratrts  or  management  devetopmeni  courses. 

8t 

Cataniilarinc. 

tana.1. 

www.cat.com 

36.463 

3.273 

14% 

2% 

2 

AFoflunelOOcompanv.CaieipillarisaleadingsuDplierolagriculturaleQuiDmentandtheworld'sNc.lmakefofearth- 
moving  machinery.  It  operates  plants  on  si*  continents  and  sells  its  equipment  globally  via  a  network  ol  some 220 dealers 
in  about  2.700  locations.  R&D  spending  of  3  5%  lo  4%  of  sales  ensures  that  IT  work^  have  access  lo  continual  product 
improvements  and  new  technologies. 

r 

CNA  Insurance 

Chcago 

wwwcna.com 

T3.200 

1.165 

1% 

6% 

4 

Founded  m  1897,  CNA  ts  a  global  insurance  organization  serving  businesses  and  mdividbals.  More  than  S200  mwrion  has 
been  committed  to  new  software  devetopmenlthis  year,  pari  of  SI-5  billion  lhaf  has  been  committed  to  technology  over  the 
next  three  years. 

n 

Arrow  Bectronfcs  he. 
MeMte.HY. 

wiiNurrow.com 

6.330 

450 

12% 

6% 

2 

With  2002 sates  of  S7.4  billion.  Arrow  is  the  worid's  largest  dslnbuior  of  electronic  components  and  computer  products 

The  company  disir ibutes  product  made  by  manufaclurers  such  as  3Com.  Cwnputer  Associates.  Int^.  Hitachi.  Motorola 
and  Teias  Instruments.  Full-time  IT  workers  earn  up  lo  10  weeks  of  paid  lime  off  after  seven  years  of  employment. 

1 

Bwinglon  Cmt  RKtory 
WhraheuMCerp. 

Burlnglon.NJ. 

www.coatxom 

26.000 

205 

3% 

3% 

5 

One  of  the  U  S  's  largest  coat  sellers,  Ihis  national  dothrng  retailer  operates  more  than 330 stores.  II  also  sells  bath  items, 
children  s  apparel  and  furniture,  gifts,  jewefry  and  linens.  IT  workers  are  offered  flexible  schedules.  Training  includes  on-srte 
leskiRing  classes  in  new  technology  areas,  vendor-sponsored  m-house  training,  seminars  and  trade  shovirs.  management 
training  courses,  technical  cedificalion  coursesand  reference  book  purchase  (^ns. 
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DB2  Information  Management  Software 
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See  DB2  software  create  insight,  agai 
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Stress- 

Busters 


Does  yow  IT  job  make 
you  like  you’re  in  a 
pressure  cooker?  These 
Best  Places  share  the 
unique  ways  they  help 
employees  let  off  steam. 
By  Steve  Alexander 

N  THIS  TOUCH  ecoDomy,  IT 
workers  are  taking  on  more  proj¬ 
ects  and  lof^r  hours.  With  job- 
related  stress  on  the  rise,  they’re 
looking  for  ways  to  cope. 


In  Computerworld's  survey  of  11.525 
IT  employees  at  this  year's  Best  Places 
to  Work,  25%  said  they  find  work 
“stressful,''  and  another  9%  said  it’s 
“very  stressfuL"  IT  workers  say  they 
value  honesty  from  employers,  access 
to  exercise  equipment,  outside  activi¬ 
ties  and  work-friendly  teams  to  help 
them  beat  stress.  Here  are  some  tips 
from  IT  employees  and  managers  about 
stress-reduction  techniques  that  woik. 

Be  as  frank  arilh  your 
IT  taam  as  possWe. 

“In  these  economic  times,  IT  develop¬ 
ers  are  worried  about  their  companies 


looking  offshore  for  workers;  it  makes 
IT  workers  concerned  about  how  se¬ 
cure  their  jobs  are,"  says  Keith 
McLaughlin,  manager  of  the  applica¬ 
tions  development  center  at  Avon 
Products  Inc.  (No.  18)  in  Rye.  N.Y. 

“Companies  need  to  let  the  IT  staff 
know  what  management  is  thinking. 
Avon  told  us  in  October  that  they  had 
looked  at  outsourcing  but  didn't  feet 
it  met  their  requirements.  As  a  result. 

I  don’t  think  anybody  feels  right  now 
that  the  company  has  any  plans  to 
outsource  IT,"  he  says. 

“While  there  have  been  layoffs  here 
in  the  past,  we  always  were  informed 
well  ahead  of  time  what  was  going 
on,”  says  Jeff  Ecott,  a  senior  systems 
analyst  in  consumer  marketing 
systems  at  Bethesda,  Md.-based 
Marriott  International  Inc.  (Na  51). 
"We  have  ‘town  hall'  meetings  where 
management  talks  to  us  and  lets  us  ask 
questions.  That  puts  us  at  ease." 

■  Offer  on-site  exercise  for 
empioyees  to  let  off  steam. 

“Exerdse  is  a  huge  stress  release  for  a 
lot  of  people  in  IT.”  says  Marylee  Bar- 
low,  a  senior  technical  writer  in  the  IT 
education  division  at  Freddie  Mac  (No. 
32),  a  McLean.  Va.-based  company  that 
provides  funds  to  home  mortgage 
lenders.  “We  have  a  free  fitness  center 
on-site."  she  says.  “It  takes  you  away 
for  a  little  while,  and  you  don’t  have  to 
deal  with  traffic  and  parking." 

“1  don't  know  bow  many  problems 
I've  solved  by  going  to  the  gym;  some¬ 
thing  usually  occurs  to  me  when  I’ve 
cleared  my  mind."  says  Ecott.  "I  try  to 
work  out  there  every  day." 

BuiM  coliesivn  IT  teams 
with  outside  activities. 

“As  teams,  we’ve  relieved  stress  by 
having  a  lot  of  functions  off-site  on 
our  personal  time,"  says  Sylvester 
Criscone,  senior  manager  of  global 
voice  and  messaging  at  Avon.  “On  one 
outing,  more  than  20  of  us  shot  each 
other  with  paintball  guns.  Another 
time,  both  of  my  teams  got  together  for 
drinks  and  hors  d'oeuvres  —  not  on 
the  company  tab,  but  paid  for  out  of 
my  own  pocket.  When  you  put  out  that 
effort,  employees  feel  they  really  are 
cared  about." 

"IT  employees  need  some  kind  of 
place,  away  from  the  workplace,  where 
they  can  feel  f^  to  be  themselves 
and  socialize  with  their  peers."  says 
Michael  Gonzalez,  applications  sys¬ 
tems  manager  at  USAA  (Na  56).  a  fi¬ 
nancial  services  company  in  San  Anto¬ 
nia  “When  you  schedule  something 
off-site,  it  pulls  people  away  foom 


thii^  like  e-mail  and  phone  calls  that 
are  always  hanging  over  their  heads." 

Christy  Wilburn,  a  senior  systems 
analyst  at  Hilton  Hotels  (2orp.  (No.  42) 
in  Beverly  Hills,  Calif.,  fondly  remem¬ 
bers  that  when  FT  completed  a  new  de¬ 
mand-forecasting  system  for  hotel 
rooms,  members  were  rewarded  with 
a  dinner  at  a  company  hotel  in  down¬ 
town  Los  Angeles.  "It  was  a  huge 
recognition  for  us.”  Wilburn  says. 

Create  a  friendly 
work  environment 

A  casual  workspace  helps  alleviate 
stress,  says  Page  Bostic,  client  services 
manager  at  the  Marriott  International 
Systems  Support  Center,  a  help  desk  in 
Rockville.  Md. 

“Our  desks  are  in  short-walled  cubes 
that  make  for  good  team  dynamics 
because  people  can  talk.  People  can 
decorate  their  cubes  as  they  like," 
Bostic  says.  “We  also  have  'jeans  Fri¬ 
day.'  and  sometimes  we  throw  a  light 
football  around.” 

“My  philosophy  is  that  the  work  is 
only  so  important;  it's  the  people  who 
make  it  happen.  So  you’ve  got  to  put 
people  first,"  says  Mashon  Wessling,  a 
lead  technical  systems  specialist  at 
Domino’s  Pizza  LLC  (Na  21)  in  Ann 
Arbor,  Mich.  “I  make  a  point  of  geaing 
to  know  other  people  on  the  team.  I 
ask  bow  their  day  is  and  how  it's  going, 
because  then  1  can  get  a  handle  on  how 
they  react  under  pressure." 

Let  employees 
have  their  say. 

USAA  has  a  room  with  terminals  that 
employees  can  use  to  offer  the  com¬ 
pany  president  suggestions  or  com¬ 
plaints.  Employees  can  sign  their 
names  or  remain  anonymous.  “It’s  an¬ 
other  way  of  letting  people  communi¬ 
cate  and  either  make  things  better  or 
let  off  steam,"  says  Charlie  CockereU.  a 
senior  systems  programmer  at  USAA. 

Make  sure  stress  doesn't 
get  out  of  hand. 

“We  deal  with  a  lot  of  stress  because 
there's  a  lot  of  work,  fewer  pet^le  to 
do  it.  and  we  support  some  24-by-7  pro¬ 
duction  software  even  though  we  don't 
work  24  by  7,"  says  Debby  Aprill,  an  IT 
technical  director  at  Domino’s,  all 
sit  close  together,  and  when  I  see  some¬ 
thing  brewing.  I  deal  with  it  right  away 
because  I  don't  want  it  to  boil  over.  I 
immediately  try  to  get  people  one-on- 
one  in  a  conference  room."  I 


Alexander  is  a  freeiance  writer  in  fdtno, 
Minn.  Contact  him  at  Sorion99@ 
yahoo.com. 
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Always  thinking... 

about  tomorrow 

Ms  Hve  in  a  worW  of  exponential  chan9e,  both  in  technology  and  scientific 
(•search  The  National  Center  for  Supercomputing  Applicatk>m  (NCSA)  at  the 
UntversHy  of  lUinois  at  Urban»<hampaign  deploys  hardware  and  creates 
software  and  tools  to  enable  breakthrough  scientific  research  and  enhance 
itational  competitiveness.  We  are  a  leader  in  defining  the  future's  high- 
performance  corrtputing  inhastruaure  fix  scientists  and  society  and  we  are 
seeking  an  Associate  Director  wAio  will  provide  leadership  in  shaping  the  program 
direebon  for  our  R&D  and  opnation  effixts  in  data  and  information  management. 

Associate  Director  of  Data  and  Infofmation  Management 

I  The  prwitary  function  of  this  posiuon  is  to  lead,  support  coordinate,  represent  and 

'  promote  activities  at  NCSA  that  focus  on  data  and  infonTiation  managemern  and 
Ona-OTtensive  applications  in  a  high-performance  computing  context  This 
irtekides  groups  responsible  for  data  storage  and  file  systerru,  I/O  middleware, 
data  models  and  formats,  I/O  performar>ce  anafysis.  scientific  databases,  arid 
certain  data  intensive  applications.  We  will  rely  on  ^  lo  shape  a  research  anct 
production  agenda;  identify  applications  with  the  national  user  community.  NSTs 
Partnerships  for  Advanced  Computational  infiastructure  <MCl)  arvd  TeraGhd 
projects,  and  industhal  and  government  partners,  seek  additional  funding 
sources:  create  reports:  and  coordmate  activities  with  other  divisions. 

A  bachelor^  degree  in  Computer  Scieisce.  Engmeenng  or  related  field  Is  required. 
Advarxed  degree  preferred.  Si^irficant  experience  in  data  and  information  is 
necessary,  as  b  3-S  yean  experience  at  a  senior  managerial  level.  Other 
•equirements  include.  5  years  experience  in  activities  associated  with  data  and 
Information  marsagemeni  in  a  high-performarKe  computing  environmem, 
S  years  experience  martagmg  technical  personnel;  and  5  years  in  a  profea 
martagement  role.  Strong  leadership  skilb  will  be  critical  to  your  success. 

Thb  is  an  academe  professional  position  at  NCSA  and  b  a  12-fnonth.  100%-tirne 
appointment  with  regular  University  benefits.  Salary  commensurate  with 
experience:  Starting  date  as  soon  as  possible  after  the  dosing  date  of  the  search 
To  ertsure  M  consideratioa  please  send  letter  of  application,  resume,  arid  three 
totters  of  reference  leferendng  Search  *8773.  by  e-mail  (preferably)  to: 
areeiMiKsa-uiucedu  {ten  onlyj  July  2, 2(XI3.  Interviews  may  be  conducted 
before  the  ctosing  date,  although  no  hiring  decisions  will  be  made  until  after  the 
search  has  dosed.  fitaM  nr  NCSA  Human  Resources  Search  18773. 1 S2  Computing 
Applications  Building.  605  E.  Springfield  Avenue.  Champaign,  IL  61820. 
PH2l7-333^S-Fac217-244-9e78 


http:  www.ncsa.uiuc.edu.  AboutyNCSA/Employ/ 


The  University  of  llfinob  b  an  AfRrmatiwe  Actkta/Cqual  Opporttmity  Employox. 

INNOVATION  AND  STABILITY! 
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Computar  Support  Spec¬ 
ialist  Provide  lech  suppt 
re  sofVhardware  dvipmt 
&  inaint,  web  dvipmt. 
n/Works  &  systems  us'g 
knovrl  of  SOL.  Oracle. 
VB,  HTML.  C+*.  Java¬ 
script.  Pascal.  Lotus 
Notes,  etc.  35  hrs  BBA 
(concentration  MIS)  2 
yrs  exp  in  job  ofU  or  2 
yrs  Comp  Suppt  exp. 
Fax  resume  to  Mr  Bryce, 
(305)  373-0320 


Computer  Systems  Analyst 
wanted  by  computer  soft¬ 
ware  development  and 
consulting  company  in 
Palisades  Park.  NJ.  Must 
have  Bac^telor  Degree  in 
any  field  ^  1  yr  exp  m  com¬ 
puter  field  fikist  be  fluent 
in  Korean.  Respond  to:  HR 
Depl.  Computer  Best 
Service,  Inc ,  472  11th 
Streef.  Palisades  Park.  NJ 
076S0 


Sobwara  Oev.  co.  raq  SoWwara 
Eng  w/MS  8  1  yr  exp  or  as 
equiv  &  Prog.  Analyal  w/BS  8 
(Bmoa  axp  X lb agwv.. ki to*. 
Visual  Basic.  Omcla.  Powar- 
BuiKtor.  Sybase.  Java,  Unix. 
C^.  A$<400.  SOL  Serv  Synon. 
Cobd.  Lotus  Notas,  SAP.  Java 


Picgrammar/Anafyat  -  Hand 
hak]  Devwas  (Atlanta.  GA) 
Interpral  reqmts  of  Handheld 
Protect  Teem  8  translale  into 
dsgn  documenlalion  and/w 
oodad  solutions  Conduct 
(eslinB  of  handheld  systems. 
Maintain  8  enhance  compo- 
nenb  of  handheld,  desktop,  8 
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assistance  to  learn  members 
8  end  users  Other  duties  as 
reqd  B$  m  Comp  So  or  Engg 
(X  foreqn  equiv.)  8  at  least  3 
yts  of  handhatd  systms  prgmg 
8  dvtpml  exp  Applicant  must 
have  extensive  exp  (at  least 
1  5  yrs)  working  w/.NET 
Compact  Framework. 

Windows  CE.  C**.  8  VB 
S60IC  Submit  resumes  to:  K. 
BunUey.  Rollins.  Inc.,  2170 
Piedmont  Rd.NE.  AUanta.GA 
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people.  Best  of  oH,  you'll  send  your 
career  rocketing  in  the  right  direction. 
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Peopte^ft 


Oracle,  which  ctirrently  is  the 
sccond-iaigest  applications 
vendor  behind  SAP  AG.  Users' 
coDcerm  were  exacerbated  by 
statements  from  Oracle  that  it 
wouJd  not  actively  sell  People* 
Soft’s  applications  to  new  cus* 
tomeni  and  that  it  would  re¬ 
assess  whether  to  go  forward 
with  the  deal  between  People- 
Soft  and  JJ).  Edwards. 

lim  Prevo.  CIO  at  Green 
Mountain  Coffee  Roaster  Inc. 
in  Waterbury,  Vt„  described 
the  prospect  of  Oracle  suc¬ 
ceeding  in  its  bid  as  "a  disas¬ 
ter"  for  PeopleSoft  users  like 
his  company.  "Oracle's  culture 
does  not  match  ottrs."  he  said 
"My  suspicion  is  that  several 
years  of  ownership  by  Oracle 
would  destroy  much  of  what 
we  value  in  PeopleSoft." 

Prevo  noted  that  when 
Green  Mountain  Coffee 
bought  PeopIeSoft's  applica¬ 
tions,  "we  deliberately  chose  a 
company  other  than  Oracle" 
on  t^  basts  of  issues  that  in¬ 
cluded  software  functionality, 
ease  of  use  and  cultural  fk. 

Todd  Inlander.  CIO  at  Fleet- 
wood  Enterprises  Inc.,  a  JJ). 
Edwards  user  in  Riverside. 
Calif,  said  he  also  hopes  that 
Oracle  doesn't  end  up  buying 
PeopleSoft.  '^y  sense  is  that 
PeopleSoft  would  have  more 
sense  than  to  allow  this,"  he 
said  "The  cultures  are  dra¬ 
matically  different  here." 

Talks  HeU  Last  Ybar 

Oracle  said  it  expects  today  to 
begin  a  tender  offer  for  all  the 
shares  of  Pleasanton.  Calif- 
based  PeopleSoft.  Durii^  a 
conference  call  on  Friday.  Ora¬ 
cle  CEO  Larry  Ellison  dis¬ 
closed  that  he  and  PeopleSoft 
counterpart  Craig  Coimay 
discussed  a  possible  merger 
last  year  without  reaching  an 
agreemenL  Ellison  insisted 
that  the  proposed  buyout 
"worits  financially  and  techni¬ 
cally"  for  both  PeopleSoft  and 
Oracle  users. 


Oracle  would  continue  to 
develop  and  support  PeopIe¬ 
Soft's  applications  for  existing 
users.  EUison  said.  But  it  also 
would  add  features  ftom  those 
products  to  its  own  E-Busi- 
ness  Suite  software  and  make 
it  easier  for  PeopleSoft  users 
to  migrate,  be  added 

Conway,  a  one-time  Oracle 
executive,  said  in  a  statement 
that  the  buyout  offer  was 
"atrociously  bad  behavior 
from  a  company  with  a  history 
of  atrociously  bad  behavior." 
He  characterized  the  takeover 
bid  as  "a  transparent  attempt 
to  disrupt  the  acquisition  of 
JT).  Edwards  by  I^plesoft." 

PeopleSoft  noted  that  its 
board  would  review  the  offer 
as  required  by  law,  but  H  rec¬ 
ommended  shareholders 
I  take  DO  immediate  action. 

I  Andrew  BaU.  a  London- 
I  based  analyst  at  Frost  &  Sulli¬ 
van  Inc.  said  in  a  repon  that 
Oracle's  bid  "is  a  supreme 
piece  of  opportunism."  But  the 
price  it's  offering  is  likely  too 
low.  BaU  said  adding.  The 
only  lasting  cottsequence  may 
be  the  addition  of  an  extra 
edge  to  the  competition  be¬ 
tween  Oracle  and  PeopleSoft." 

That  already  seemed  as¬ 
sured  by  PeopIeSoft’s  agree¬ 
ment  to  acquire  Denver-based 
JJ>.  Edwards  in  a  stock-swap 
deal  valued  at  about  S1.8S  bii- 
Uon,  based  on  the  closing 
price  of  PeopIeSoft’s  stock  on 
Friday.  The  plan  to  combine 
those  two  companies  and 
make  PeopleSoft  the  Na  2 
business  application  vendor 
caused  considerably  less  con¬ 
sternation  among  users  than 
Oracle's  bostUe  move  did 

Executives  at  PeopleSoft 
and  li>.  Edwards  pledged  to 
maintain  the  «igHng  product 


lines  of  each  company.  A 
spokeswoman  for  I.D.  Edwards 
added  that  there  would  be  no 
management  changes  there 
and  said  it  would  operate  as  a 
subsidiary  of  PeopleSoft. 

'This  came  as  a  surprise, 
but  it  seems  to  make  sense  for 
the  firms  to  consoUdate,  as 
[companies  in]  many  other  in¬ 
dustries  are  having  to  do  to 
stay  finaaciaUy  viable."  said 
Irving  Tyler.  CIO  at  Quaker 
Chemical  Corp.  in  Consho- 
hocken.  Pa. 

Quaker  Chemical  is  in  the 
midst  of  a  multiyear  glc^l  im¬ 
plementation  of).D.  Edwards' 


Confinued  from  page  i 

Baan 


maker  of  dental  equipment  in 
New^»erg.  Ore.  With  both 
Baan  and  SSA  having  a  strong 
presence  among  manufactur¬ 
ers,  the  metger  could  help 
Baan  further  penetrate  that 
market,  Bearden  said.  He 
added  that  he  expects  SSA  to 
try  to  expand  the  use  of  Baan's 
applications  instead  of  just 
putting  them  into  mainte¬ 
nance  mode  and  treating  users 
like  A-dec  as  cash  cows. 

Bameveld,  Netherlands- 
based  Baan  was  sold  by  parent 
company  Invensys  PLC  to  a 
pair  of  investment  firms  for 
S135  million  in  cash  London- 
based  Iitvensys,  which  bought 
Baan  in  August  2000  for  S7D9 
millioD.  put  the  ERP  vendor 
(Ml  the  block  in  April  after  sin¬ 
gling  it  out  as  a  weak  per¬ 
former  (QuickUnk  37^}. 
Baan  lost  $32  million  on  rev¬ 
enue  of  $265  million  in  the  fis¬ 
cal  year  that  ended  March  3L 
according  to  Invensys. 


One  World  X£  applications 
and  is  using  the  software  to 
run  its  European  operations. 
Tyicr  said  his  biggest  concern 
about  the  planned  acquisition 
is  "what  the  impaas  will  be  in 
terms  of  our  existing  relation¬ 
ships  with  I4>.  Edwards,  espe¬ 
cially  from  a  technical  [sup¬ 
port]  point  of  view." 

Inlander  said  he  has  no  ma¬ 
jor  worries  abtnit  the  People- 
Soft/JJ).  Edwards  deal  "other 
than  wondering  if  the  sales 
force  structure  will  change 
and  we'll  have  a  different  ac¬ 
count  person."  He  also  noted 
that  some  JX).  Edwards  appli- 


TTie  buyers  are  Cerberus 
Capital  Management  LP  in 
New  York  and  General  At¬ 
lantic  Partners  LLC  in  Green¬ 
wich,  Conn.  The  two  finns 
also  jointly  own  Chicago- 
based  SSA.  and  Baan  said  it 
will  be  merged  with  SSA  over 
the  next  several  months.  If 
PeopleSoft  Inc’s  acquisition  of 
I.D.  Edwards  &  Ca  goes 
through  and  PeopleSoft  re-  ' 
mains  independent,  the  addi¬ 
tion  of  Baan  could  make  SSA 
tbe  fourtb-largest  ERP  vendor 
behind  SAP  AG.  PeopleSoft 
and  Oracle  Corp..  according  to 
AMR  Research  Inc.  in  Boston. 

Business  as  Usual 

Baan  will  operate  as  a  stand¬ 
alone  division  with  its  own  de¬ 
velopment.  sales,  maiketing 
and  support  staffe.  and  it  does¬ 
n’t  plan  to  phase  out  any  prod¬ 
ucts  at  this  time,  said  Dave 
Wander,  Baan's  senior  vice 
president  of  global  marketing. 
He  said  Baan  will  also  proceed 
widi  the  scheduled  rollout  of 
its  next-generation  ERP  appli¬ 
cations,  code-named  Gemini 
and  due  for  release  in  tbe  fell 
There  will  be  no  disruption 
in  customer  service."  Waiter 
said.  "Customers  will  continue 
to  see  tbe  same  salespeople 
and  be  serviced  by  the  same 
consultants  and  t^  same  sup¬ 
port  teams."  However,  be 
added  that  some  restructuring 
moves  are  likely  to  be  made  in  I 


cations  that  overlap  with  Ora¬ 
cle.  such  as  its  human  re¬ 
sources  software,  eventually 
"might  fall  by  the  wa>-sidc." 
Fleetwood,  a  maker  of  recre¬ 
ational  vehicles  and  mobile 
homes,  uses  I.D.  Edwards'  ERP 
and  supply  chain  software. 

losbua  Greenbaum.  an  ana¬ 
lyst  at  Enterprise  Applications 
Consulting  in  Daly  City,  (aijf , 
said  buying  ID.  Edwards  would 
give  [feopleSoft  increased 
"credibility  in  manufacturing 
and  a  critical  mass  of  cus¬ 
tomers"  —  two  things  it  needs 
to  compete  more  effectively 
against  SAP  and  Oracle. » 


an  attempt  to  return  Baan  to 
profitability. 

SSA  filed  for  Chapter  U 
buikruptQ'  protection  in  2000 
after  several  years  of  losses 
caused  by  quality  problems 
and  develc^mcnt  delays  on  its 
own  ERP  software.  Since  then, 
it  has  re-emerged  as  a  private 
company  and  bought  Infinium 
Software  Inc.  and  Computer 
Associates  International  Inc's 
interBiz  applications  unit 

But  Warren  Smith,  IT  direc¬ 
tor  at  tbe  Victor  Relnz  divi¬ 
sion  of  auto-parts  maker  Dana 
Corp.  in  Toleda  Ohia  said  it 
will  be  a  major  undertaking 
for  SSA  to  incorporate  Baan 
and  get  its  products  hack  on 
track  with  users.  Victor  Reinz 
uses  ManMan.  a  tnanufictur- 
ing  application  that  SSA  ac¬ 
quire  from  CA. 

SSA  has  been  responsive  to 
user  demands,  postponing  the 
suosetting  of  some  popular 
products,  said  Smith.  «dK>  is 
president  of  San  Jose-based 
CAMUS  International  Inc.,  a 
user  group  that  focuses  pri¬ 
marily  on  the  former  interBiz 
applications.  But  he  added 
that  the  merger  with  Baan 
could  cause  SSA  to  lose  focus 
"on  some  of  the  lesser  prod¬ 
ucts"  it  owns.  Nevertheless. 
SSA  is  devoted  to  manufactur¬ 
ing-related  applications  and 
isn’t  likely  to  treat  Baan’s  soft¬ 
ware  as  a  sideline  endeavor,  as 
I  Invensys  did.  Smith  said.  I 
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Peopie^ft 

Oracle,  which  currently  is  the 
second-largest  applications 
vendor  behind  SAP  AG.  Users’ 
concerns  were  exacerbated  b\ 
statements  from  Oracle  that  it 
would  not  actively  sell  People- 
Soft’s  applications  to  new  cus¬ 
tomers  and  that  it  would  re¬ 
assess  whether  to  go  forward 
with  the  deal  between  People- 
Soft  and  J.D.  Edwards. 

Jim  Prevo,  CIO  at  Green 
Mountain  Coffee  Roaster  Inc. 
in  Waterbury.  Vt..  described 
the  prospect  of  Oracle  suc¬ 
ceeding  in  its  bid  as  “a  disas¬ 
ter"  for  PeopleSoft  users  like 
his  company.  “Oracle’s  culture 
does  not  match  ours."  he  said. 
“My  suspicion  is  that  several 
years  of  ownership  by  Oracle 
would  destroy  much  of  what 
we  value  in  PeopleSoft." 

Prevo  noted  that  when 
Green  Mountain  Coffee 
bought  PeopleSoft’s  applica¬ 
tions,  “we  deliberately  chose  a 
company  other  than  Oracle" 
on  the  basis  of  issues  that  in¬ 
cluded  software  functionality, 
ease  of  use  and  cultural  fit. 

Todd  Inlander,  CIO  at  Fleet- 
wood  Enterprises  Inc.,  a  fD. 
Edwards  user  in  Riverside, 
CaliE,  said  he  also  hopes  that 
Oracle  doesn't  end  up  buying 
I'eopleSofL  "My  sense  is  that 
PeopleSoft  w  ould  have  more 
sen.se  than  to  allow  this,"  he 
said.  "The  cultures  are  dra¬ 
matically  different  here." 

Talks  Held  Last  Year 

Oracle  said  it  expects  today  to 
begin  a  tender  offer  for  all  the 
shares  of  Pleasanton,  Calif.- 
based  PeopleSoft.  During  a 
conference  call  on  Friday.  Ora¬ 
cle  CEO  Larry  Ellison  dis¬ 
closed  that  be  and  PeopleSoft 
counterpart  Craig  Conway 
discussed  a  possible  merger 
last  year  without  reaching  an 
agreement.  Ellison  insisted 
that  the  proposed  buyout 
“works  rinanciatiy  and  techni¬ 
cally”  for  both  PeopleSoft  and 
Oracle  users. 


Oracle  would  continue  to 
develop  and  support  PetTple- 
Sofi's  applications  for  existing 
users,  Ellison  said.  But  it  also 
would  add  features  from  those 
products  to  its  own  E-Busi¬ 
ness  Suite  SL>ftwarc  and  make 
it  easier  for  PeopleSoft  users 
to  migrate,  he  added. 

Conway,  a  one-time  Oracle 
e.xecutive,  said  in  a  statement 
that  the  buyout  offer  was 
"atrociously  bad  behavior 
ffx>m  a  company  with  a  histor>- 
of  atrociously  bad  behavior.” 
He  characterized  the  takeover 
bid  as  "a  transparent  attempt 
to  disrupt  the  acquisition  of 
J.D.  Edwards  by  Peoplesofi." 

PeopleSoft  noted  that  its 
board  would  review  the  offer 
as  required  by  law.  but  it  rec¬ 
ommended  that  shareholders 
take  no  immediate  action. 

Andrew  Ball,  a  London- 
based  analyst  at  Frost  dc  Sulli¬ 
van  Inc.,  said  in  a  report  that 
Oracle's  bid  “is  a  supreme 
piece  of  opponunism."  But  the 
price  it’s  offering  is  likely  too 
low.  Ball  said,  adding.  "The 
only  lasting  consequence  ma)' 
be  the  addition  of  an  extra 
edge  to  the  competition  K*- 
rween  Oracle  and  PeopleSoft.  ' 

That  already  seemed  as¬ 
sured  by  PeoplcSoft's  agree¬ 
ment  to  acquire  Denver-based 
I-D.  Edwards  in  a  stock-swap 
deal  valued  at  about  S1.85  bil¬ 
lion,  based  on  the  closing 
price  of  PeopleSoft 's  stock  on 
Friday.  The  plan  to  combine 
those  two  companies  and 
make  PeopleSoft  the  No.  2 
business  application  vendor 
caused  considerably  less  con¬ 
sternation  among  users  than 
Oracle's  hostile  move  did. 

E.xeculives  at  PeopleSoft 
and  |.D.  Edwards  pledged  to 
maintain  the  existing  product 


line.--  of  each  company.  A 
spokeswoman  for  I  D.  Edwards 
added  that  there  would  K*  no 
management  changes  there 
and  said  it  would  operate  as  a 
subsidiary-  of  PeopleSoft. 

“This  came  a.s  a  surprise. 
but  it  seems  to  make  sense  fur 
the  firms  to  consolidate,  as 
{companies  inj  many  other  in¬ 
dustries  arc  having  to  do  to 
sta)’  financtally  viable."  said 
Irving  Tyler.  CIO  at  Quaker 
Chemical  Corp.  in  Consho- 
htH'kcn.  Pa, 

Quaker  Chemical  is  in  the  | 
midst  of  a  multiyear  globalim-  , 
plementationofI.D.  Edward.^' 


Continued  from  page  1 


Baan 


maker  of  dental  equipment  in 
Newberg.  Ore.  With  both 
Baan  and  SSA  having  a  strong 
presence  among  ftianufactur- 
ers.  the  merger  could  help 
Baan  funher  penetrate  that 
market.  Bearden  said.  He 
added  that  he  expects  SSA  to 
try  to  expand  the  use  of  Baan’s 
applicatUms  instead  of  |ust 
putting  them  into  mainte¬ 
nance  mode  and  treating  users 
like  A-dec  as  cash  cows. 

Bameveld.  Netherlands- 
based  Baan  was  sold  by  parent 
company  invensys  PLC  to  a 
pair  of  investment  firms  for 
S135  million  in  cash.  London- 
based  Invetisys.  which  bought 
Baan  in  August  2000  for  $700 
million,  put  the  ERP  vendor 
on  the  block  in  April  after  sin¬ 
gling  it  out  as  a  wx-ak  per¬ 
former  [QuickLink  27860]. 
Baan  lost  S32  million  on  rev¬ 
enue  of  S265  million  in  the  fis¬ 
cal  year  that  ended  March  21. 
according  to  Invensys. 


OneWorld  XF  applicaiioos 
and  is  using  the  M>ftware  u» 
run  Its  European  openuions, 
Tyler  said  hi-s  biggest  concern 
about  the  planned  a<'qutstiKin 
IS  "what  the  impacts  w  ill  be  in 
terms  of  our  existing  relation¬ 
ships  with  I.I).  Edwards,  espe¬ 
cially  from  a  technical  {sup¬ 
port}  point  of  viexx." 

Inlander  said  he  has  no  ma¬ 
jor  worries  about  the  Petiple- 
Soft  I.D,  Edwards  deal,  “other 
than  wondering  if  the  sales 
force  .structure  will  change 
and  we'll  have  a  different  ac¬ 
count  person  "  He  also  noted 
that  some  I.D.  Edwards  appli- 


The  buyers  are  Cerberus 
Capital  Management  LP  in 
New  Yt»rk  and  General  At- 
I  lantic  Partners  LLC  in  tireen- 
j  wich.  O^nn.  The  rwti  firms 
alM'  jointly  own  Chicago- 
based  SSA.  and  Baan  said  it 
I  w  ill  be  merged  with  SSA  over 
I  the  next  several  months.  If 
'  PeopleSoft  Inc-’s  acqui.sition  of 
,  |.D.  Edwards  Cc  Co.  goes 
I  through  and  PeopleSoft  rc- 
j  nuins  independent,  the  addi- 
J  (ion  of  Baan  could  make  SSA 
the  fourth'latgest  E;RP  vendor 
I  behind  SAP  AG.  PeopleSoft 
I  and  Oracle  Corp..  according  to 
AMR  Research  Inc.  in  Boston, 
j 

Business  as  Usual 

Baan  will  operare  as  a  stand¬ 
alone  division  with  its  own  de¬ 
velopment.  saJe-s.  marketing 
and  support  staffs,  and  it  does¬ 
n’t  plan  to  phase  out  an>’  prod¬ 
ucts  at  this  time,  said  Dave 
Wajigler.  Baan's  senior  vice 
president  of  global  marketing. 
He  said  Baan  w  ill  also  proce^ 
with  the  scheduled  rollout  of 
its  ne.xt-generation  ERP  appli¬ 
cations.  code-named  Gemini 
and  due  for  release  in  the  fall.  I 
"nterc  will  bo  no  disruption  i 
in  customer  service,"  Wangler  ' 
said.  “Customers  will  continue  | 
Id  sec  the  same  salespeople 
and  be  serviced  by  the  same 
consultants  and  the  same  sup¬ 
port  teams.’*  However,  he 
added  that  some  restructuring 
moves  are  likely  to  be  made  in 


cations  th.n  overlap  w  iih  i  )r.i- 
cle.  such  as  its  human  rv- 
wurces  software.  i-veniu.ill> 
"might  fall  by  the  wav-side  " 
Fleetw-otsi.  a  maker  i>f  exvre- 
ational  vehicles  and  mobile 
homt-s.  uses  M>  Edwards’  EKI' 
and  supply  chain  siifiwarc 
loshua  (ireenbaum.  an  ana¬ 
lyst  at  Enterprise  .Applicaiions 
t  iunsultmg  in  Daly  City.  Cilif. 
said  buying  I  D.  Edwards  would 
give  PcHiplcSoft  increxsed 
"credibility  in  manufacturing 
and  a  crii  leal  mass  <»f  cus- 
iLiniers"  —  two  things  it  rKvds 
i«v  compete  more  effecihelv 
against  SAP  and  Oracle  » 


.m  attempt  to  return  Baan  to 
profitability 

S.SA  filed  ftir  Chapter  1) 
bankruptcy  pnnection  m  2(KKt 
after  several  y  ears  of  losse-s 
caused  by  quality  pmblems 
.ind  development  delays  on  its 
own  EKI’  software.  Since  then, 
it  his  re-eroergod  as  a  private 
company  and  bought  Infinium 
Softw-arc  Inc.  and  Computer 
.AssiK-iates  International  Inc.’s 
interHir  applicatKms  unit. 

But  Warren  Smith.  IT  direc¬ 
tor  at  the  Victor  Reinz  divi¬ 
sion  of  auto-parts  maker  Dana 
Corp.  in  Toledo.  Ohio,  said  it 
will  be  a  major  undertaking 
for  SSA  to  incorporate  Baan 
and  gel  its  products  hack  on 
track  w-iih  users.  Victor  Kcinz 
uses  ManMan.  a  manufactur¬ 
ing  application  that  SSA  ac¬ 
quired  from  CA. 

SSA  has  been  responsive  to 
user  demands,  postponing  the 
sunsetting  of  some  popular 
products,  said  Smith,  who  Is 
president  of  San  |ose-hased 
CAMUS  Infemaiiorul  Inc.,  a 
user  group  that  focuses  pri¬ 
marily  on  the  former  utterBiz 
applications.  But  he  added 
that  the  merger  with  Baan 
could  cause  SSA  to  K»se  focus 
"on  some  of  the  lesser  pnid- 
ucis"  it  owns.  Newnhcless. 
SSA  is  devoted  to  manufactur¬ 
ing-related  applications  and 
isn't  likely  to  treat  Baan's  soft¬ 
ware  as  a  sideline  endeavor,  as 
Invensys  did.  Smith  said.  I 


FRANK  HAYES  ■  FRANKLY  SPEAKING 

Make  Sure  It  ^^^Iks 


WILL  IT  WORK?  It’s  a  simple  enough  question.  Say 
you’re  looking  at  an  IT  problem,  and  you  need  to 
select  a  product  or  technology  or  process  change 
to  solve  it.  You’ve  got  a  range  of  options,  and  you 
already  know  which  one  you  like  best.  Now  your 
most  likely  course  is  to  optimize  your  description  of  the  problem  to 
fit  the  solution  you  prefer.  If  you’re  even  halfway  competent  at  your 
job,  you  should  be  able  to  characterize  the  problem  in  a  way  that 
makes  your  favorite  the  obvious  choice. 

But  will  it  work?  That’s  the  question  that  matters.  If  it  won’t  work, 
you’re  just  wasting  time  and  money. 


Trouble  is,  it's  also  the  hardest  question  to 
ask  in  most  organizations.  If  the  CEO  likes  a 
particular  vendor  or  approach,  asking  whether 
that  vendor's  product  or  that  approach  will  ac¬ 
tually  solve  the  problem  at  hand  means  chal¬ 
lenging  the  boss.  That’s  not  generally  a  career¬ 
enhancing  move. 

Neither  is  challenging  the  CIO.  Or  the  proj¬ 
ect  manager.  Or  the  senior  network  administra¬ 
tor.  Or.  for  that  matter,  the  IT  people  who  have 
to  do  the  gnmt  work.  Suggest  that  what  they 
prefer  isn’t  going  to  work,  and  they're  as  likely 
to  dig  in  their  heels  as  they  are  to  consider  al¬ 
ternatives. 

If  you  ask  “Will  it  work?**  the  wrong  way  — 
well,  it  just  won’t  work. 

But  that’s  still  the  question  that  matters.  It 
keeps  us  focused  on  the  real  problems  we’re 
trying  to  solve.  Those  are  ultimately  business 
problems,  and  they’re  separate  from  the  politi¬ 
cal  and  budgetary  and  technological  issues  we 
have  to  negotiate  along  the  way. 

Politics  and  budgets  and  whiz-bang  tech¬ 
nologies  will  always  get  pushed.  But  some¬ 
body’s  got  to  keep  an  eye  on  what’s  important 

So  what's  the  right  way  to  ask 
"Will  it  work?" 

Ask  it  in  private.  And  ask  it  of 
everyone.  And  keep  asking  it. 

Ask  “Will  it  woii?"  in  private,  be¬ 
cause  that’s  less  threatening.  In  pri¬ 
vate.  it’s  a  question,  not  a  challei^. 

It  doesn't  put  anyone  on  the  spot  in 
front  of  bosses  or  peers  or  subordi¬ 
nates.  It  doesn't  demand  defense  of 
a  position.  It  doesn't  even  require  a 
real  answer  —  though  in  private,  it 
may  be  more  likely  to  get  one.  It 
just  keeps  the  question  on  the  table. 

Ask  “Will  it  work?"  of  everyone. 


because  that’s  less  threatening,  too.  The  more 
people  in  your  IT  shop  you  ask,  the  less  per¬ 
sonal  the  question  becomes  —  and  the  more 
likely  you  are  to  get  360-degree  views  of  both 
the  proposed  solution  and  the  problem  itself. 

But  remember  You  want  to  tap  the  honest 
expertise  of  as  many  people  as  you  can.  That 
means  what  they  say  in  private  has  to  stay  pri¬ 
vate.  Otherwise,  you’ll  get  an  honest  answer 
exactly  once. 

And  you  can’t  afford  that.  Because  you  want 
to  keep  asking  “Will  it  work?"  You  want  it  to  be 
a  routine  question.  You  want  it  to  be  one  of  the 
questions  everyone  in  your  shop  thinks  about 
regularly  as  a  matter  of  course. 

You  want  it  to  be  a  question  they  come  back 
to  again  and  again,  because  requirements 
change,  and  good  projects  go  bad,  and  opinions 
turn  sour.  “Will  it  still  work?"  is  just  as  impor¬ 
tant  when  you're  hip-deep  in  a  project  as  “Will 
it  work.^"  was  before  it  started.  If  a  project 
needs  to  chai^  direction  or  even  get  the  ax. 
you  need  to  figure  that  out  as  soon  as  possible. 

And  don’t  forget  that  you  need  to  ask  your¬ 
self  —  and  keep  asking  yourself  —  the  same 
things.  Will  it  solve  the  business 
problem?  Does  it  still  look  like  a 
winner?  Do  you  need  to  make  ad¬ 
justments  to  keep  it  workable?  Will 
if  woHc.^ 

It’s  a  simple  question.  And  it  will 
keep  you  foctised.  Not  on  dead¬ 
lines.  or  political  maneuvering,  or 
technical  elegance  or  the  shininess 
of  that  latest  and  greatest  product. 
But  on  what  matters:  getting  some¬ 
thing  to  users  that  will  actually 
work  to  solve  business  problems. 

Because  if  it  won’t  work,  nothing 
you  do  really  matters  at  all  I 
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Server  blades  engineered  to  work 
across  complex  computing  environments. 


HP  ProLiant  »rver  blades,  powered  by  Intel*  Xeon'  processors,  ore  designed  to  support  o  variety  of  robust  enterprise  soluHons 

including  SANs.  I.  i,  ™,l  ditlicvll »  app,«iol.  *,  orchil.Klv™l  ..cW  of  A,  HP  ProUonl  BUOp  BL20p  G2  »,«,  blades,  TlniyV.  lb,  powivtul  IWibI, 
ledasoyslondard  blodas  lo,  business  lodoy.  In  oddiHon  l„  n,e,«„s  compon,',  expanding  needs  for  s.r„,  capocilv,  Ibe^Ve  designed  wi*  SAN  eannecdvil,  lo  seppoH 
saphisncaled  snvage  enviianmenb-easih,,  reliably  and  affordab^.  Combined  wilb  HP  Pralian,  Essenbals  saBware,  Ibey  can  dramabcally  redvce  deplaymen,  lim.  and  help 
maximize  prodnch.ily.  Which  means,  ol  caurse,  yoer  business  so.es  money.  Demand  more  from  yoer  IT  syslems,  Inlegrale  HP  ProlianI  sermsr  blades  inlo  year  en.iranmenl. 
And  corry  your  business  to  a  stronger,  more  cos^effective  ploce. 


HP  ProUant  BL20p  G2 

Up  ID  hKi  ln»l»  XKtn-  pracMors  DP  3.06  GM* 
Avoikibl.  with  *if.e  lO/tOO/tOOO  NKj  ond 
on*  menogMwM  NIC  pkn  duol  2Gb  tibra 
chonnal  nwaonin* 

Up  Id  8G6  DM  namory 

OpOonol  Rapid  0*ploy<n*nl  Pock 

toftwar*  oNews  lor  quick  n>i,4liwv*r  daptoymenl 


Complements  Proliont 
server  blodes 


HP  MODULAR  SAN 
ARRAY  1000 
Praliont  larvarv  and  th*  MSA  1 000 
Kov*  b**n  •nginaarad  te  work 
b*n*r  toqtihar.  solviy  iniorol* 
doto  in  a  SAN  •rwirervnarM,  itfl^ 
ramov*  Proliant  drivas  ond  iiuart 
tbafliinlothaMSAIOOO. 
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Demand  more  wilfi  HP  ProUant  server  blades.  Download  IOC's  white  paper,  'EnoWing  Business  Agility  Through  Server  Blode  Technology- 
at  www.hp.com/go/proliantSS  or  dial  V877-865-1161  ond  menHon  code  AAJA. 
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Email 


Oracle 

42,000  Employees 
3  Oracle  Email  Database  Servers 


Microsoft 

50,000  Employees 

110  Microsoft  Exchange  Servers 

Source:  Microsoft  CIO 


Unless  you  have  as  much  money  as  Microsoft, 
you  may  want  to  use  Oracle  for  email 


ORACLE 


Source  for  Microsoft  Data: 

Keynote  presentation  by  Microsoft  CIO 

St  NRFtech  FT  Leadership  Summit  on  August  12, 2002 


oracle.com/email 
or  call  1.800.633.0541 


Caern«mO2D03.  Onda  All  ngMt  (ttarvad  Oracle  it  a  rasuwaO  traSemai*  o* Oracit  CerparatMn  and/w  a  tffiliatn  Olhar  namat  may  ba  tradantita  al  flMir  reipectiva  MMrt 
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Hostile  Bid  for  PeopleSoft 
May  DeiayApps  Purchases 


JD.  Edwards  sues  Oracle 
for  obstructing  meiiger 


Whatever  the  outcome,  Oracle 
Corp.‘s  hostile  takeover  bid  for 
PeopleSoft  Inc.  is  already  cre¬ 
ating  confusion  and  doubt 
among  users  of  both  People- 
Soft  and  J.D.  Edwards  &  Ca 


JaMaShouklBe 
Open-Source, 
Creator  Says 

Other  Sun  execs  war>' 
of  incompatibility  issues 


If  pressed  to  vote  yea  or  nay, 
the  “father  of  Java"  said  last 


business  applications. 

Some  users  last  week  said 
they  may  delay  software  pur¬ 
chases  until  the  buyout  at¬ 
tempt  is  resolved.  For  exam¬ 
ple.  John  Hill,  CIO  at  Praxair 
Inc.  in  Danbury.  Conn.,  said 
the  maker  of  industrial  gases 
will  wait  to  see  which  acquisi¬ 
tion  scenario  plays  out  before 
making  a  decision  on  whether 
Oracle  Bid,  page  49 


week  that  he  would  cast  his 
ballot  in  f^or  of  malting  his 
creation  more  open-source, 
even  though  be  recc^nizes 
that  some  of  bis  Sun  Micro¬ 
systems  Inc.  colleagues  make 
strong  counterarguments. 

During  an  interview  at  the 
JavaOne  conference  here. 

James  Gosling,  the  Sun  vice 
president  vdio  unleashed  the 
programming  language  e^t 
years  ago,  said  be  thinks  Java 

Java,  page  13  I 
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Vendors  Clamp  Down 
On  License  Compliance 


Audits  increase  as  software  makers  look  to  oflsct 
sagging  sales  b\'  enforcing  existing  contracts 


IT  managers  at  a  Gartner  Inc. 
conference  here  last  week  said 
software  vendors  are  increas- 
in^y  threatening  —  and  then 
conducting  —  audits  to  deter¬ 
mine  whether  users  are  com¬ 
plying  with  their  li-  - 

censing  agreements. 

According  to  IT  pro¬ 
fessionals  and  Gartner 
analysts,  the  use  of  software 
audits  has  swelled  in  recent 
months  as  vendors  look  for 
ways  to  generate  additional 
revenue  from  existing  users  to 
make  up  for  reduced  spending 
on  new  licenses.  Vendors  such 
as  Microsoft  Corp.  and  Oracle 
Corp.  have  long  done  audits  of 
some  of  their  customers,  but 


conference  attendees  said  oth¬ 
er  software  developers  are 
pushing  harder  on  audits. 

Some  users  are  trying  to  be 
proactive.  For  instance,  the 
dty  of  Chesapeake,  Va.,  recent¬ 
ly  completed  a  nine-month  in¬ 
ternal  audit  of  its  Microsoft 
“  desktop  software  li¬ 
censes  and  found  itself 
“to  be  in  pretty  good 
shape."  said  Janet  Had¬ 
ley.  an  account  administrator 
for  the  municipality. 

But  other  users  are  still  get¬ 
ting  (heir  license-tracking  in 
order  so  they  will  be  prepared 
for  potential  audits. 

“We're  currently  looking  for 
an  asset  management  tool  to 
help  us  track  software  licenses 
and  invoices  more  effectively." 
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Tired  of  losing  millions 
ofdollars  to  fraud, 
Internet  retailers  are 
teaming  up  to  %ht 
online  credit  card  scams  and  take 
back  the  e-nei^iborhood.  Rage  35 


said  Ken  Walton,  a  Tampa, 

I  Fla. -based  project  manager  at 
Verizon  Communications.  The 
telecommunications  company 
can  no  longer  monitor  its  li¬ 
censing  agreements  manually. 
Walton  said,  “because  we  pist 
don't  have  enough  people." 

At  Haiiey-Davidson  Motor 
Ca  in  Milwaukee,  software 
contracts  are  currently  admin¬ 
istered  by  projea  managers. 
“But  that's  not  what  we  want 
to  be  doing."  said  Shannon 
KauL  an  asset  manager  at  the 
motorcycle  maker.  So  the 
Harley-Davidson  Inc.  sub- 

Audfts.  page  14 

Viy-Mait 
Backs  RFID 
Technology 

Will  require  suppliers  to 
use 'smart' tags  by 2005 

BV  JAIKUMAB  VUAVAN 
AMO  BOB  BREWIH 

CHICAGO 

Wal-Mart  Stores  Inc.  last  week 
said  it  plans  lo  require  its  top 
100  suppliers  to  put  radio- 
ft^uency  identification  tags 
on  shipping  crates  and  pallets 
by  January  200S,  a  move  that’s 
likely  to  spur  broader  adop¬ 
tion  of  the  technology  bemuse 
of  Wal-Mart's  market  clout 
However,  at  the  Retail  Sys¬ 
tems  2003/VICS  Collaborative 
Commerce  conference  here. 

IT  managers  and  technology 
vendors  alike  said  that  RFID 
devices  still  need  to  overcome 
major  manufacturing,  pricing 
RFID.pQge  J4 


The  body  coordinates  639  muscles  to  meet  changing  demand. 


IBM  TotalStorage' 


Manages  storage  re^ 


demand.  On  demand. 


The  human  body  has  an  amazing  capacity  to  adapt  to  shifting 
demands.  So  do  IBM  TotalStorage  products.  The  IBM  TotalStorage 
Virtualization  Family  manages  your  individual  storage  resources 
as  one  common  virtual  pool.  It  can  then  allocate  storage  to  your 
servers,  helping  to  improve  availability  and  utilization.  On  demand. 
Helping  to  lower  your  costs. 

TotalStorage:  storage  for  on  demand  business, 

Cbd  you  S66  it?  See  it  at  lbm.com/totaistorage/ondemand 


Onfy  SAS  provides  a  h^mqxut,  kw-risk  vsy 
to  adneve  iiMelligent  data  warehousing.  '6m  cm 
extract,  transfonn  and  load  data  fiom  any  source, 
across  any  platform,  while  assuring  quality. 
Simplify  the  w^  you  create  and  customize  reports. 
And  deliver  a  shared  version  of  the  truth.  To  find  out 
how  top  companies  reap  bottom-line  rewards  with 
SAS  software — by  leveraging  the  value  of  data 
from  corporate  systems,  e-business  chatuiels,  the 
supply  chain  and  beyond — visit  us  on  the  Web  or  call 
toll  free  1  866  270  5727. 


www.sas.com/warehouse 


cliNmns 


Web  Services:  Inside  Jobs 

In  the  Technology  section:  Many  companies  are  dabbling 
in  Web  ser>'ices.  but  Eastman  Chemical  and  Merrill  Lynch 
have  launched  big.  companywide  initiatives.  Learn  how 
users  like  Eastman’s  Carroll  Pleasant  are  employing  Web 
services  to  solve  internal  integration  problems.  Page  23 
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Reining  in  Personal  Rrewalls 

In  the  Technology  section:  New  tools 
let  IT  regain  control  over  distrib¬ 
uted  personal  firewall  software  and  prevent 
potential  attackers  from  commandeering 
remote  users’  machines.  Page  28 
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6  Sybase  gives  China  free  soft¬ 
ware  to  help  fight  SARS. 

6  SCO  has  credible  evidence  to 

support  its  claim  that  Linux 
infringes  on  its  Unix  copy¬ 
rights,  say  analysts  who  have 
seen  the  code. 

7  The  Homeland  Security  De¬ 
partment  sets  a  two-year  dead¬ 
line  for  integrating  its  systems. 

7  HP  unveils  OpenView  prod¬ 
ucts  and  services  that  will  play 
a  role  in  its  “adaptive  enter¬ 
prise  management”  strategy. 

8  A  new  Bugbear  virus  targets 
financial  institutions. 

10  FleetBoston  is  building  a  near¬ 
ly  SIO  million  IT  command 
center  to  unify  the  bank's  s^-s- 
tems  and  centralize  network 
management  work. 

10  Sprint  exits  Web  hosting  but 

will  help  users  migrate. 

12  CeBIT  makes  its  U.S.  debut. 

but  the  attendance  forecast  is 
cut  in  half. 

12  HP  plans  a  disk  array  that 
supports  serial  interconnects. 

13  Q&A:  Tather  of  Java”  James 
Gosling  discusses  the  status 
of  his  creation. 

16  No  big  boost  in  IT  spending 

is  likely  this  year,  according  to 
surveys  by  Meta  Group  and 
Forrester. 

17  CRMvendorSalesforce.com 

offers  a  hosted  application  de¬ 
velopment  service. 


30  QAA:  Lining  Technology  Up 
With  Business.  The  CEO  of 
Managed  Objects,  Siki  Giunta. 
talks  about  the  link  between 
IT  and  business  success. 

32  Future  Watch:  Captchas  Eat 
Spam.  Programs  that  distin¬ 
guish  between  humans  and 
machines  could  fight  spam 
and  contribute  to  advances  in 
artificial  intelligence. 

33  Security  Manager’s  Journal: 
Securi^  Sweep  Reveals 
Access-Token  Violations.  An 

after-hours  check  of  physical 
security  reveals  a  startling 
array  of  policy  violations  at 
Vince  Tuesday's  company. 

MANASEMENT 

35  Fraud-Busters.  Web  retailers 
are  joining  forces  to  battle  on¬ 
line  credit  card  fraud.  The  ef¬ 
fort  includes  forming  groups 
like  the  secretive  Merchant 
Fraud  Squad. 

38  QAA:  Nurture  the  B  Team. 
The  A  players  get  the  star 
treatment  But  it’s  also  impor¬ 
tant  for  IT  managers  to  pay 
ample  attention  to  the  B  play¬ 
ers  —  those  steady,  capable 
performers  who  matter  more 
in  the  long  rua  says  consultant 
Vineeta  Vijayaraghavan.  who 
co-authored  an  article  about 
the  subject  in  this  month's 
Harvard  Business  Review. 

40  Dashboard  Democracy. 

Desktop  business-intelli^oce 
displays  are  moving  from  the 
executive  suite  to  the  cubicle, 
where  the  ROI  is  even  better. 


8  On  the  Mark;  Mark  Hall  says 
JavaOne  uras  the  place  to  be 
for  gossip  about  IBM,  Sun  and 
Microsoft.  There  was  some 
talk  of  Java  programming,  too. 

18  Maryfran  Johnson  explains 
why  enterprise  users  are  the 
real  victims  in  Oracle's  hostile 
—  some  say  frivolous  —  bid  to 
buy  PeopleSoft. 

18  Pimm  Fox  examines  site¬ 
monitoring  technology  that 
purports  to  get  to  the  heart  of 
really  useful  customer  data. 

19  David  Moschella  scoffs  at 
characterizations  of  the  IT  in¬ 
dustry  as  “mature”  and  says 
it’s  time  to  start  thinking  opti¬ 
mistically  about  IT's  future. 

34  Nicholas  Patreioy  peeks  into 
SCO's  mailbox  for  a  new  per¬ 
spective  on  the  Untx/Unux 
ownership  squabble. 

42  Bari  Perkins  offers  a  checklist 
of  issues  to  consider  —  from 
U.S.  privacy  and  security  laws 
to  potential  employee  back¬ 
lash  —  before  taking  the  off¬ 
shore  IT  outsourcing  plunge. 

50  Frankly  Speaking:  Frank 
Hayes  predicts  Microsoft 
won't  ^  much  help  in  stop¬ 
ping  viruses.  He  provides  tips 
to  help  you  get  through  a 
virus-studded  summer. 
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DEVELOPMENT:  The  debate  continues,  with 
cohnnnists  Matt  Puccini  and  Keith  Ftankiin 
taking  opposing  sides.  Cl  OMcUJak  k2360 

PralectWurDila 
From  Wl-n  Attacks 

M08ILE/WIRELES8:  Don't  miss  these  dps  on 
bow  to  make  a  network  more  secure. 

OQukkLM  88874 

Best  ftaeticas  for 
MaWringSaainCode 

SECURITY;  The  cost  of  fixing  teilty  software 
soars  after  an  afqiUaaioQ  is  deptojvd.  says 
Steve  Orrin.  CTD  at  inc.  Here's  how 

and  why  you  need  to  build  security  into  Web 
^ps  frra  the  Stan.  O  QidcMMi8iB78 

VourCRMIsOnly 

AeBoodaWvDala 

SOFTWARE:  Bad  data  can  down  ■  CRM 
system  faster  than  just  about  anything  else. 
Ascential  Software's  Bili  HobbS)  offers  toot 
advice  about  how  to  svoid  data  {noblems. 

OIWbMMi 88868 


Vou.  Too.  Can  Conbiule 
To  Op0fhSoiVC6 

OPCRATHM  SYSTEMS:  tf  your  company  isn't 
developlag  source  code,  you  can  still  help 
theopea-source  movement— while  booNtt- 
ing  your  tecfanokigy  ROL  writes  columnist 
Tifflotliy  Withara.  O  QMeMMSVtt 
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GSA  Reviewing 
MCI  as  Contractor 

A  spokiswonian  for  Hm  U^. 
Bonoral  Servic«a  AdmMstralion 
(OSA)  conftrrnod  on  Juno  13  thot 
rfs  inapoctor  gofioral  has  mode 
an  oMcfol  roforrol  to  roview  ttio 
fodaral  contractor  status  of 
WorldCom  Inc.,  wtddt  to  now  op* 
orating  as  MCL  The  rofarraJ  goes 
to  the  6SA's  suspending  »id  do* 
barring  official,  a  consnon  pro¬ 
cedure,  aceoning  to  the  spokes- 
emman.  A  Senate  committee 
toundied  an  inwestigation  in  May 
into  wfiy  federal  contracts  were 
given  to  WorldCom  after  finan- 
dai  problems  were  made  pubfic. 


Oracle  Reports 
Strong  Quarter 

Oracle  Corp.  tost  week  an¬ 
nounced  revenue  of  S2.63  bilKon 
for  its  ftocal  fourth  quarter,  up 
from  S2.77  bMon  for  the  same 
quarter  a  yaar  ago.  Oracle  said  n 
had  S9.47  MHon  In  revanua  for 
Ha  fidl  ftocal  yaar,  2%  lowar 
than  tha  S8.OT  billon  poated  Last 
yaar.  CEO  Larry  BItoon  said  the 
compeny  "had  a  great  applca* 
tione  quartar”  compared  wtth  Ks 
competitors. 


Former  VP  Pleads 
Guilty  to  Fraud 

Terry  W.  Davis,  former  vteo  pres* 
IdenI  of  ftiwnce  and  controler 
for  SMta  Clara.  CdH.-baead 
Natwork  Aaaodates  Inc.,  last 
woMt  piaaded  gulty  to  chargss 
of  sacurittas  fraud.  Thoy  wore 
the  first  cfiargea  to  emarge  from 
tha  govanananfe  invartigatlon 
into  the  company's  bookkaapliiu 
practices.  Natwork  Asaoeiatos 
f  ouldn*!  immodtetoly  cemroent. 


Short  Takes 

RovsnuafromnowCfttlioft- 
wmletoMosM24.7%in 
2002.  aceerdtag  to  6ARTNER 
WC....  TRANSMETA  CORP.  in 
SantaCtorahastaliananim* 
vacifiad  aqtofy  stoha  in  Hong 
Kong  hoiod  uiaw  dovetoper 
CWNESE  2000  HOLMtOS  LTD. 
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Sybase  Gives  China  Free 
Software  to  Fight  SAKS 

Conipan}'  answers  request  for  help  with 
S300,00d  worth  of  database  software 


SV  TODD  n.  WEISS 

HEN  THE  Chi¬ 
nese  Embassy  in 
Washington 
sent  out  hun¬ 
dreds  of  e-mails  early  last 
month  asking  the  world  for 
ideas  and  information  on  how 
to  control  the  spread  of  SARS. 
the  IT  community  responded. 

Sybase  Inc.  said  last  week 
that  it  will  donate  approxi¬ 
mately  $300,000  worth  of 
databa.se  management  soft¬ 
ware  that  will  be  used  to  mon¬ 
itor  and  crack  existing  and 
new  cases  of  the  potentially 
fatal  respiratory  disease. 

The  e-mails  were  sent  out 
by  Dr.  Larry  Wu  in  his  capaci¬ 
ty  as  second  secretary  for  sci¬ 
ence  and  technology  at  the 
Chinese  Embassy.  Hundreds 


of  replies  came  back  from 
technology  companies,  busi¬ 
ness  associations,  consultants 
and  others,  mostly  in  the  U.S., 
Wu  said. 

One  of  the  e-mail  recipients 
was  the  nonprofit  Computer- 
world  Honors  Program,  which 
recognizes  IT  users  around 
the  world  who  cake  technolo¬ 
gy  in  new  and  innovative  di¬ 
rections  to  benefit  mankind. 

Computerworfd  has  a  seat 
on  the  board  of  the  Honors 
Prr^ram  and  is  a  co-founder 
of  the  group,  which  was  estab¬ 
lished  in  1988. 

Dan  Moitow,  executive  di¬ 
rector  of  the  program  in  Hern¬ 
don.  Va..  said  the  e-mail  was 
forwarded  to  Honors  Program 
board  members,  including  a 
I  Syba-se  representative. 


Sybase  CEO  John  Chen  said 
a  company  manager  suggested 
to  his  colleagues  that  they  of¬ 
fer  assistance  to  Chinese 
health  authorities.  "We  all  im¬ 
mediately.  within  minutes, 
said.  'Great  idea,' "  Chen  said. 
"They  asked  for  help,  and  we 
were  just  qualified  in  this  case 
to  help  them." 


Analysts  Say  Evidence 
May  Support  SCO  Case 

Contested  code  gives  credence  to  Unix 
claim,  but  courts  will  ultimately  decide 


BVTOOO  n.  WEISS 

As  promised.  The  SCO  Group 
Inc.  last  week  revealed  to  sev¬ 
eral  industry  analysts  some  of 
the  Linux  source  code  that  it 
claims  was  illegally  copied 
from  Unix 

But  analysts  have  varying 
opinions  about  the  signifi¬ 
cance  of  what  they  were 
shown  and  how  it  fits  in  with 
the  SI  billion  lawsuit  that  Un- 
don.  Utah-based  SCO  filed 
against  IBM  in  March.  In  that 
lawsuiL  SCO  alleges  that  IBM 
misappropriated  SCO  Unix 
trade  secrets  by  putting  some 
of  the  code  into  Linux  (Quick- 
Link  369011. 

Laura  DiDio,  an  analyst  at 
The  Yankee  Group  in  Boston. 


said  she  saw  "two  or  three" 
samples  of  the  allegedly 
infringing  Linux  code  that 
appeared  to  be  a  "copy  and 
pa.stc*'  match  of  the  SCO 
Unix  code. 

DiDio  and  the  other  ana¬ 
lysts  were  able  to  view  the 
code  only  under  a  nondisclo¬ 
sure  agreement,  so  she  could 

HI  think  there  is 
abasisthat 
SCO  has  a  credible 
case.  This  is  not  a 
nuisance  case. 


UURA  DtOIO.  ANAlYSr 
I  THE  YANKEE  GROUP 


not  divulge  details,  she  said. 

“"nje  courts  are  going  to 
ultimately  have  to  prove  this, 
but  based  on  what  I'm  seeing 
...  1  think  there  is  a  basis  that 
SCO  has  a  credible  case."  Di¬ 
Dio  said.  “This  is  not  a  nui¬ 
sance  case." 

Geoige  Weiss,  an  analyst 
at  Gartner  Inc.  in  Stamford. 
Conn.,  recently  rev'iewed  sev¬ 
eral  supponing  documents 
from  SCO,  and  he  said  they 
potentially  bolster  the  compa¬ 
ny’s  claims. 

The  documents  allegedly 
show  the  contracts  that  gave 
SCO  the  rights  to  Unix  WeLss 
refused  to  sign  the  nondisclo¬ 
sure  agreement,  so  he  didn't 
view  any  of  the  contested 
code.  But  the  documents  he 
saw  at  least  gave  credence  to 
SCO's  claims,  be  said. 

Not  a  Judge  or  Jury 

BUI  Claybrook.  an  analyst 
at  Boston-based  Aberdeen 
Group  Inc.,  said  the  code  he 
view^  shows  that  SCO  could 
have  a  claim.  But  be  noted  that 
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The  products  Sybase  is  pro¬ 
viding  include  Sybase  IQ. 
Enterprise  Application  Server. 
Adaptive  Server  Enterprise, 
PowerBuilder  and  Power- 
Designer.  The  software  will  be 
used  to  create  critically  need¬ 
ed  databases  to  track  and 
monitor  SARS  cases  in  hospi¬ 
tals  and  other  health  centers 
across  the  country. 

Dublin.  Calif -based  Sybase 
made  the  donation  directly  to 
ihe  Chinese  Center  for  Dis¬ 
ease  Control  and  Prevention. 
Although  no  hardware  sys¬ 
tems  have  been  donated  with 
the  Sybase  software,  Wu  in¬ 
dicated  that  China  has  suffi¬ 
cient  systems  in  place  to  make 
immediate  use  of  Sybase's 
donation. 

Wu  said  his  country  hasn't 
been  shy  in  the  past  about  ask¬ 
ing  the  world  for  assistance 
in  tiroes  of  natural  disasters, 
such  as  floocLs  or  earthquakes. 
With  SARS.  though,  it  took  a 
while  for  China  to  seek  help, 
he  said.  “We  have  made  some 
mistakes  in  the  campaign  to 
fight  SARS."  Wu  said.  "We 
(initially!  thought  it  was  nor 
so  serious  a  disease."  k 


his  assessment  based  on  a 
brief  look  at  some  of  the  code 
is  far  different  from  a  judge  or 
jury  eventually  reaching  a  ver¬ 
dict  in  the  IBM  case.  "I  have 
no  idea"  if  there's  a  problem 
with  the  code,  Claybrook  said. 

“From  what  I've  seen.  I 
think  people  should  be  taking 
the  SCO  accu.sations  seriously, 
but  I  don't  know  if  they  have 
any  proof."  he  said.  Although 
he  was  shown  code  that  wa.s 
(he  same  in  both  Unix  and 
Linux  Claybrook  said  there 
was  DO  way  to  determine  the 
origin  of  t^  code. 

Dan  Kusnetzky.  an  analyst  at 
IDC  in  Framingham.  Mass., 
said  he  turned  down  SCO's  of¬ 
fer  to  look  at  the  code  because 
it  wouldn’t  have  provided  any 
fair  conclusions  or  answered 
any  questions  about  the  case. 

Even  if  there  are  code 
matches  between  Linux  and 
Unix  be  said,  there  would  be 
no  way  to  know  whether  it 
was  put  there  legally  or  who 
put  U  there.  "How  do  they 
know  it  was  IBM?"  he  said.  I 
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HP  Users  Welcome  Expanded 
OpenView  Product  Line 


Better  network  management  is  key  to 
vendor’s  ‘adaptive  enterprise’  initiative 


BY  MATT  HAMBLEN 

Hewlett-Packard  Co.  will  take 
some  of  the  vapor  out  of  its 
"adaptive  enterprise  manage¬ 
ment"  strategy  with  the  intro¬ 
duction  today  of  more  than  30 
new  and  enhanced  OpenView 
management  products  and 
services, 

The  products  are  being  an¬ 
nounced  at  the  HP  Software 
Forum  in  Chicago,  where 
users  will  gain  exposure  to 
concrete  examples  of  HP's 
adaptive  enterprise  initiative. 

That  initiative  is  mirrored 
by  strategies  from  competitors 
such  as  IBM.  Sun  Microsys¬ 
tems  Inc.  and  Computer  Asso¬ 
ciates  International  Inc.. 
which  variously  describe  such 
technologies  as  "autonomic" 
or  “on-demand"  computing. 
The  aim  is  to  enable  business¬ 
es  to  reduce  IT  complexity 
and  cost  by  creating  an  infra¬ 
structure  that  changes  with 
business  demands. 

One  of  the  enhanced  tools 
being  announced  today.  HP 
OpenView  Network  Node 
Manner  7.0  (NNM),  caught 
the  attention  of  several  Open- 
View  users  planning  to  attend 
the  conference.  Enhancements 
to  the  widely  used  network 
management  tool  include  sup¬ 
port  for  Linux  and  the  ability 
to  manage  more  objects  on  a 
network,  as  well  as  support  for 
native  l>uplicate  IP.  The  latter 
is  useful  for  collecting  net¬ 
work  data  at  one  point  on 
multiple  IP  networks,  said  Bill 
Emmett,  solutions  marketing 
manager  at  HP. 

Duplicate  IP  support  is  in¬ 
teresting  because  it  could  help 
recently  merged  companies  to 
monitor  combined  IP  net¬ 
works  that  aren’t  identicaL 
said  Jason  Kennedy,  a  systems 
management  analyst  at  Best 
Buy  Canada  Ltd.  in  Burnaby, 
British  Columbia. 

Best  Buy  Canada  has  a  large 


OpenView  project  under  way 
that  started  in  late  2002  and 
should  take  another  year  to 
fully  implement. 

Once  complete,  the  system 
would  monitor  networks  and 
network  devices  in  130  stores 
and  warehouses  in  Canada 
"through  a  single  pane  of  glass 
with  a  service-oriented  focus," 
Kennedy  said. 

"  'Adaptive  enterprise  man¬ 
agement'  might  be  called  'au¬ 
tonomic'  or  'on-demand,'  but 
that’s  just  wordsmithing."  he 
said.  "It  really  comes  down  to 
how  I  save  money  for  the  busi¬ 


ness.  That's  why  I  exist." 

Another  OpenView  user. 
Zurich  Life  Insurance  Compa¬ 
ny  of  America  in  Schaumburg. 
III.,  is  looking  for  an  easier  in¬ 
terface  with  the  HP  OpenView 
Service  Navigator  tool,  said 
Timothy  Hagn.  vice  president 
of  Zurich's  IT  operations  and 
engineering. 

In  fact.  HP  said.  Service 
Navigator  Value  Pack  7.1.  being 
announced  today,  is  easier  to 
use  and  includes  a  new  con¬ 
nection  between  Service  Navi¬ 
gator  and  Open  View  Service 
Desk  to  help  correlate  net¬ 
work  problems  with  customer 
service  calls  received  by  the 
help  desk. 

In  the  long  term,  Hagn  said. 


he  wants  Open  View’s  adaptive 
technology  to  monitor  his  net¬ 
work  and  describe  ways  that 
he  can  quickly  cut  down  on 
electricity  and  ventilation 
costs  for  computing  centers  by 
tapping  underused  servers. 

Kirhy  Vav^n,  a  board 


member  of  OpenView  Forum 
IntemationaL  a  7.0<X)-membcf 
u.scr  group  in  Emmaus.  Pa_ 
said  he  wants  to  icam  more 
this  week  about  enhancements 
to  NNM. 

Users  arc  interested  in  how 
NNM  will  integrate  with  tech¬ 
nology  from  Cisco  Systems 
Inc.  and  voice-over-IP  prod¬ 
ucts.  Vaughn  said.  In  recent 
years,  he  said,  users  have  had 
to  “pt>und  on  HP"  to  include 
monitoring  funetkmaiity’  for 
virtual  LANs,  something  users 
had  to  build  them.selvcs  until 
HP  fifully  responded. 

They  rode  on  their  laurels 
for  a  while,  but  in  the  last  year 
or  two.  they've  started  doing 
more."  Vaughn  said. 

With  the  exception  of  the 
Service  Navigator  Value  l*ack. 
which  will  be  available  in  four 
months,  all  of  the  products  be¬ 
ing  announced  today  will  be 
available  within  three  months, 
HP  officials  said.  I 


DHS  Sets  Timeline  for  IT  Integration 


CIO  says  project 
due  to  be  finished 
within  two  years 


Steve  Cooper,  who  as  CIO  at 
the  U5.  Department  of  Home¬ 
land  Security  (DHS)  must  un¬ 
tangle  the  mess  of  disparate 
networks  and  data  standards 
of  the  22  federal  agencies  that 
merged  to  form  the  DHS.  said 
last  week  that  a  unified  IT  in¬ 
frastructure  will  be  completed 
within  18  to  24  months. 

“We're  moving  towtaid  one 
I>epartment  of  Homeland 
Security."  Cooper  said  at  the 
E-Gov  conference  here,  “We 
wranc  to  unify  and  simplify  the 
environment  as  rapidly  as  we 
can." 

Cooper  said  be  plans  to  rely 
heavily  on  commercial  appli¬ 
cations  to  accomplish  what  is 
no  simple  task.  Federal  agen¬ 
cies  haW  historically  operated 
autonomously,  ai>d  their  IT 
systems  weren't  designed  to 
interoperate  with  orte  aiwther. 

According  to  Lee  Holcomb, 
chief  technology  officer  at  the 


DHS.  a  key  hurdle  to  be  over¬ 
come  is  the  various  agencies’ 
differing  business  rules,  which 
dictate  how  data  is  described, 
collected  and  accessed. 

Holcomb's  job  is  to  devise  a 
plan  to  make  data  held  by  each 
agency  accessible  by  other 
agencies  under  the  DHS  um¬ 
brella.  Data  mart  and  data 
warehousing  options  are  cur¬ 
rently  under  consideration. 

DHS  is  also  examining  best 
approaches  for  providing  re¬ 
mote  users  with  wireless  ac¬ 
cess  to  department  systems. 
The  department  also  plans  to 
increase  the  deployment  of 
portable  devices  within  the 
next  six  to  nine  months. 

As  agency  integration  ef¬ 


forts  take  shape,  department 
IT  officials  expect  to  post 
more  job  advertisements  in 
the  months  ahead. 

Although  position  require¬ 
ments  hadn’t  yet  been  fully 
identified,  there 
arc  many  technolo¬ 
gists  who  have  "a 
desire  to  become 
part  of  the  Depart¬ 
ment  of  Homeland 
Security  mission." 
said  Pat  Scham- 

bach,  CIO  for  the  - 

Transportation  Security  Ad¬ 
ministration.  which  is  now  an 
agency  of  the  DHS. 

Getting  a  job  at  the  agency 
requires  a  security  clearance, 
but  officials  say  that  hasn’t 
been  an  obstacle  —  getting  an 
initial  security  clearance  can 
be  accomplished  in  as  little  as 
two  weeks.  Higher  security 
clearance  levels,  however,  can 
take  months. 

Meanwhile,  emerging  tech¬ 
nologies  appear  to  be  playing 
a  growing  role  at  fiedetal  agen¬ 
cies.  For  instance.  Cooper 
said,  agencies  are  working 
with  commercial  vendors  to 
find  ways  to  utilize  unstruc- 
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tured  data,  .'luch  as  data  that 
isn't  located  in  a  relational 
database  and  can't  be  easily 
manipulated  and  analyzed. 

The  CIO  Council,  a  body 
made  up  of  all  the  CIOs  in  (he 
federal  government,  has  in 
fact  formed  a  committee  to  ex¬ 
amine  emerging  lechnolc^es. 

"We  want  the 
government  to  be 
at  the  forehont 
(of  J  leveraging 
technology."  said 
U.S.  Air  Force 
CIO  John  GUligan. 
"We  want  to  be 
-  scanning  the  hori¬ 
zon  and  be  an  early  adopter. 
We  need  to  convey  to  industry 
what  our  technology  needs 
are." 

Craig  Luigart,  CTO  at  the 
U.S.  Department  of  Education, 
disputed  the  stereotype  that 
the  government  Ugs  behind 
the  private  sector  in  the  adop¬ 
tion  of  IT. 

Many  agencies  were  early 
adopters  of  new  technologies, 
such  as  voice  over  tP  and 
virtual  private  netwoiks.  and 
they  are  now  seeiitg  returns 
on  those  investmenis,  be 
noted. 

“I  never  liked  being  No.  2," 
Luigart  said.  I 
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Microsoft  Acquires 
Antivirus  Ass^ 

Mcrosoft  Coip.  has  agreed  to 
buy  the  nrtaHectuaf  property  and 
technology  assets  of  GeCAO 
Software  SItL  an  antivinjs  soft¬ 
ware  vendor  hi  Bucharest.  Ro¬ 
mania.  Mcrosoft  plans  to  use 
the  technology  as  part  of  an  up¬ 
coming  antivirus  offering.  But  H 
said  a  OeCAD  product  used  pri¬ 
marily  with  Linux  systems  be 
dropped.  The  Rnandal  terms  of 
tfM  deal  weren't  dtsciosed. 


Cisco  Gets  Ruling 
Against  Huawei 

A  federal  judge  in  Marshall. 
Texas,  issued  a  prefhnina/y  in- 
junetkm  barring  Shenzhen.  CM- 
na-based  Huawei  Technologies 
Co.  from  seUng  routers  that  in¬ 
clude  software  derived  from  Cis¬ 
co  Systems  lnc.*s  source  code. 
Ehit  Huawei.  which  was  sued  by 
Cisco  in  January,  said  the  in- 
pmetion  is  "extremely  nanow" 
and  won't  affect  routers  that 
have  replacsd  the  disputed  ones. 


SuSE  Readies 
Linux  for  Desktops 

SuSE  Linux  AG  said  K  plans  to 
releasa  a  desktop  PC  version  of 
Linux  for  corporate  users  in  the 
U.S.  and  Europe  later  thb  month. 
The  SuSE  Linux  Desktop  soft- 
wve  starts  at  SS98  for  five  end- 
usar  Hcenses  and  comas  bundled 
wftfi  Sun  Microsysteffls  lnc.‘8 
StarOffice  6.0  suHe  of  desktop 
appRcaUons.  But  Nuremberg. 
Germany-based  SuSE  said  It  will 
also  support  Microsoft  Office. 


Short  Takes 

MERCURY  INTERACTIVE  CORP. 
said  it's  acquiring  KINTANA  INC., 
a  developer  of  software  for  mon¬ 
itoring  IT  operations,  in  a  cash- 
and-stock  deal  valued  at  about 
S22S  fflMiort  Eloth  companies 
are  based  in  Sunnyvale,  Calif. 
...YAHOO  INC.,  also  in  Sunny¬ 
vale,  armounced  an  upgrade  of 
its  instant  massaging  software 
for  corporate  users. 


MAKK  HAM  •  ON  I  HK  .\1AKK 

Sun  Exec  Blasts 
IBM  for  Linux . . . 

. . .  Strategy,  saying.  “IBM  has  been  using  Linus  [TorvaldsJ  like  a  tool 
and  exploiting  the  open-source  community."  Those  fighlin’  words 
come  from  lonathan  Schwartz,  executive  vice  president  for  Sun’s 
software  group.  He  doesnl  think  IBM's  Linux  sales  have  been  Kind  to  CIOs, 
either.  “They’ve  been  spreading  IP  (intellectual  property!  radiation" 
to  companies  that  get  their  Linux  from  IBM  because  of  Big  Blue's  con¬ 
tract  problems  with  SCO  Group.  Sun.  he  hastened  to  add,  has  crossed 
all  its  f’s  and  dotted  all  its  i’s  with  SCO  just  in  case  the  Unix/Linux 


lL*gal  claims  haw  merit.  ■  IBM  was  on  the 
minds  of  many  at  Sun’s  eighth  favaOne 
Conference  in  San  Francisco,  and  not  just 
because  it  had  two  booths  on  the  show 
fltmr.  Rumors  flew  daily  from  Moscone 
Center  North  to  South, 
where  the  gathering  of  15.0(K) 
or  so  lava  devotees  was  held, 
that  IBM  "needsd  to  buy  Sun  to 
save  Java,"  as  one  breathless 
nimormonger  put  it.  Bui 
Sun’s  marketing  VP  forsoft- 
w-are  dismissed  that  notion 
with  a  laugh.  "IBM  can't  afford 
us."  guffawed  |ohn  Loiacuna 
“We  have  flve-and-a-haif  bil¬ 
lion  dollars  in  the  bank.  IBM 
diK‘sn't  have  S5  billion."  True. 

But.  hey.  interest  rates  arc 
pretty  low.  Maybe  IBM  could 
take  out  a  second  mortgage 
on  its  digs  in  Armunk.  N.Y. 

•  If  you’re  a  rabid  Solaris 
user,  these  verbal  jousts  can 
be  fun.  But  more  fun  might  be 


an  early  look  at  Solaris  tO.  Real  early.  Like  a 
year  to  a  year  and  a  half  before  it's  re¬ 
leased.  Word  is  that  Sun  Is  developing  a 
program  called  Express  that  will  give 
users  a  hands-on  experience  with  its 

Urrix  system  well  before  the 
beta  a'lease.  •  Schwartz, 
Loiacono  and  other  Sun 
execs  also  enjoyed  knocking 
Microsoft  for  its  “failure"  in 
the  handset  market.  By  the 
end  of  the  year.  Schwartz 
claims,  lava  will  be  installed 
on  more  than  350  million 
cell  phones,  BlackBerrie.s 
and  other  similar  devices, 
while  Windtnvs  “won’t  even 
be  there."  What  makes  jaw 
appealing  to  IT  on  handsets, 
says  Ernie  Cormier,  vice 
president  at  Nexiel  Coromu- 
nicaiions  Inc.,  is  that  'you 
can  conirul  the  entire  UI 
(user  interfacel."  He  envi¬ 
sions  IT  deploying  java 


1  handsets  to  sales  forces,  field  technicians 
1  and  other  road  warriors  instead  of  laptops, 
“reducing  yow  dependence  on  PCs."  Cormi¬ 
er  says  Nextel  is  committed  to  java  and 
by  the  end  of  the  year  will  ship  some  new 
devices  that  have  IT  in  mind.  ■  These 
expanding  lava  environments  will  need 
many  new  programmers.  And  Sun  execs 
pledged  to  raise  the  number  from  the 
currently  claimed  3  mfliion  to  the  wtshed-for 
to  nullion.  Where  will  they  come  from? 
According  to  David  Litwack,  senior  vice 
president  at  Novell  Inc.,  they'll  have  to  be 
recruited  from  the  ranks  of  business  de¬ 
velopers.  You  know,  the  kind  who  whip 
out  Visual  Basic  scripts  or  complex  Excel 
spreadsheets.  “We  need  to  raise  the  level 
of  abstraction  for  the  bulk  of  what's  done 
in  I2EE.’’  he  says.  John  Fowler.  Sun’s  chief 
technology  officer  for  software,  agrees. 
"I2EE  needs  simpler  expressions  to  take 
advantage  of  preceded  functions,"  he 
says.  That’s  not  exactly  a  snappy  marketing 
slogan,  but  it’s  exactly  what  Novell  will  be 
doing  this  fall  when  it  ships  its  Extend  5.0 
suite  for  those  developers  who  may  not 
want  to  delve  into  the  devilish  details  of 
Java  code  to  accomplish  their  work. 

•  Hewlett-Packard  wants  to  attract  Java 
coders,  too,  especially  to  its  OpenView 
application.  But  HP  think.s  they  sleep  too 
much,  so  it  will  soon  send  out  invitations 
j  to  developers  for  its  first  HP  Bazaar 
Camp  USA.  The  ihree-day.  all-day.  all- 
night  coding  carnival  has  already  run 
seven  times  in  Europe  and  Asia,  but  the 
execs  behind  it  believe  it’s  time  for  you. 
UK),  to  jack  yourself  up  on  caffeine  and 
prove  you  can  program  till  the  sun  comes 
up.  Sleeping  bags,  massages  and  laptops 
will  be  doled  out  to  those  lucky  few  who 
qualify  for  the  Sept.  16-18  event.  Check 
out  www.hpbazaar.com  for  all  of  the 
bizarre  details.  I 
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New  Bugbear  Vims  Targets  Rnanciai  Institutions 

Firewalls,  antivirus  software  are  so  far 
keeping  w  orm  out  of  banks’  sANtems 


BY  TOOO  M.  WEISS 

The  latest  variant  of  the  Bug¬ 
bear  computer  virus  is  being 
investigated  by  the  FBI  be¬ 
cause  it  was  found  to  be  tar¬ 
geting  financial  institutions. 

Bill  Murray,  a  spokesman 
for  the  FBI.  said  last  week  that 
the  invc'stigation  began  June  6 
and  will  seek  to  track  down 
the  originators  of  the  vini.s 
through  electronic  “finger¬ 
prints"  often  left  behind  with¬ 
in  the  code. 


Bugbear  is  a  mass-mailing 
worm  that  also  spreads 
through  networks,  according 
to  Cupertino.  Cali£ -based 
Symantec  Corp. 

The  virus  can  infect  exe¬ 
cutable  files  and  is  particularly 
dangerous  because  it  can  log 
the  keystrokes  a  user  enters 
on  his  computer,  potentially 
allowing  an  attacker  to  get  a 
victim's  personal  information 
and  account  numbers.  It  also 
contains  backdoor  capabilities 


and  can  shut  down  antivirus 
and  firewall  programs. 

Banks  were  identified  as  key 
targets  when  it  was  discovered 
that  the  worm’s  code  contains 
a  list  of  the  domain  names  of 
more  than  1.000  banks  from 
around  the  world,  according 
(0  Symantec. 

Suzanru;  Gorman,  chairman 
of  the  Financial  Services  In¬ 
formation  Sharing  and  Analy¬ 
sis  Center,  said  the  Reston. 
Va.-based  financial  industry 
security  oi^nizacion  respond¬ 
ed  immediately  to  the  first  re¬ 
ports  of  Bugbear  attacks  on 
banks  by  warning  members  to 


make  sure  that  their  security 
systems  are  fully  in  place.  No 
member  banks  have  yet  been 
infiltrated  by  the  Bugbear 
virus  because  of  firewalls,  an¬ 
tivirus  protection  and  other 
multilayer  IT  security  sys¬ 
tems,  she  said.  "Right  now. 
we’re  remaining  on  high 
alert,"  Gorman  said. 

Robin  Bloor.  an  IT  and  secu¬ 
rity  analyst  at  Baroudi  Bloor 
Inc.  in  Arlington.  Mass.,  said 
Bugbear  is  particularly  insidi¬ 
ous  because  of  its  keylogger 
capabilities,  which  collect  and 
document  user  input  and  pro¬ 
vide  it  to  an  attacker.  "That 
fundamentally  undermines 
the  security  when  it  gets  in 
there,"  Bloor  said.  I 
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Micnisoft  Acquires 
AnthrimsAss^ 
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Cisco  Gets  Ruling 
Againsl  Huawei 
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haaa  mpiacad  the  dtaputod  onas. 


SuSE  Readies 
Linux  for  Desktops 

SuSE  Unu  AB  add  II  pbns  to 
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Unm  tor  earparala  uaara  in  tha 
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Short  Takes 
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MARK  HALL  ■  ON  THE  MARK 

Sun  Exec  Blasts 
IBM  for  Linux . . . 

. . .  Strategy,  saying,  “IBM  bas  been  using  Linus  [Torvalds]  like  a  tool 
and  exploiting  the  open-source  community."  Those  fightin’  words 
come  from  Jonathan  Schwartz,  executive  vice  president  for  Sun’s 
software  group.  He  doesnl  think  IBIlTsUnux  sales  havp  been  Und  to  CIOs, 
either.  “They’ve  been  spreading  IP  (intellectual  property]  radiation” 
to  companies  that  get  their  Linux  from  IBM  because  of  Big  Blue’s  con¬ 
tract  problems  with  SCO  Group.  Sun,  he  hastened  to  add,  has  crossed 
all  its  and  dotted  all  its  fs  with  SCO  just  in  case  the  Unix/linux 
legal  claims  have  merit  *  IBM  was  on  the  |  an  early  toek  d  Sotarto  10.  Real  eariy.  Like  a 


minds  of  many  at  Sun's  eighth  JavaOnc 
Conference  in  San  Francisco,  and  not  just 
because  it  had  two  booths  on  the  show 
floor.  Rumors  flew  daily  from  Moscone 
Center  North  to  South, 
where  the  gathering  of  15,000 
or  so  lava  devotees  was  held, 
that  IBM“neadadtobnySunto 
ttweJvm.”  as  one  breathless 
nunormonger  put  it.  But 
Sun’s  marketing  VP  for  soft¬ 
ware  dismissed  that  notion 
with  a  laugh.  “M  cani  afford 
ua,"  guffawed  Loiacona 
“We  have  five-and-a-half  bil¬ 
lion  dollars  in  the  bank.  IBM 
doesn't  have  $5  billion."  Thic. 

But.  bey.  interest  rates  are 
prett)’  low.  Maybe  IBM  could 
take  out  a  second  mortgage 
on  its  d^  in  Armonk,  N.Y. 

•  If  you're  a  rabid  Solaris 
user,  these  verbal  jousts  can 
be  fun.  But  more  fun  might  be 
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year  to  a  year  and  a  half  before  it’s  re¬ 
leased.  Word  is  that  Sun  is  developing  a 
program  called  Express  that  will  give 
users  a  hands-on  experience  with  hs 

Unix  system  well  before  the 
beta  release.  ■  Schwartx. 
Loiacono  and  ocher  Sun 
execs  also  enjoyed  Imocking 
Microsoft  for  its  “failure"  in 
the  handset  market.  By  the 
end  of  the  year.  Schwartz 
claims.  Java  will  be  installed 
on  more  than  350  million 
cell  phones,  BlackBerries 
and  other  similar  devices, 
while  Windows  “won’t  even 
be  there."  What  makes  Java 
appealing  to  IT  on  handsets, 
says  Ernie  Cormier,  vice 
president  at  Nexiel  CommtH 
nlcations  Inc.,  b  that  “you 
can  control  the  entire  UI 
[user  interfacel."  He  envi¬ 
sions  IT  deploying  Java 


handsets  to  sales  forces,  fleld  technicians 
and  other  road  warriors  kiatoad  of  laptapa. 
“reducing  your  dapandann  on  PCs.”  Cormi¬ 
er  says  Nextel  b  committed  to  Java  and 
by  the  end  of  the  year  will  ship  some  new 
devices  that  have  IT  in  mind.  ■  These 
expanding  Java  environments  will  need 
many  new  programmers.  And  Sun  execs 
pledged  to  raise  the  number  from  the 
currontty  ctoknod  3  mHon  to  ttaa  adahod-tor 
M)  miton.  Where  will  they  come  from? 
According  to  David  UtwsKk.  senior  vice 
president  at  Novell  Inc.,  they'll  have  to  be 
recruited  from  the  ranks  of  business  de¬ 
velopers.  You  know,  the  kind  who  whip 
out  Vbual  Basic  scripts  or  complex  Excel 
spreadsheets.  “We  n^  to  rmse  the  level 
of  abstraction  for  the  bulk  of  what's  done 
in  J2EE”  be  says.  John  Fowler,  Sun's  chief 
technology  oflicer  for  software,  agrees. 
“J2EE  needs  simpler  expressions  to  take 
advantage  of  preyed  functions,"  be 
says.  Thai's  Ml  exactly  a  nappy  inarka6ng 
sk^an.  but  it’s  exactly  what  Novell  will  be 
doing  ibb  fall  when  it  ships  its  Extend  5X> 
suite  for  those  developers  who  may  not 
want  to  delve  into  the  devilish  details  of 
Java  code  to  accomplish  their  work. 

•  Hewlett-Packard  wants  to  attract  Java 
coders,  too.  especially  to  its  Open  View 
application.  But  HP  thinks  tfwy  atoap  too 
muck,  so  it  will  soon  send  out  invitations 
to  developers  for  its  first  HP  Bazaar 
Camp  USA.  The  three-day,  all-day,  all- 
night  coding  carnival  has  already  run 
seven  times  in  Europe  and  Asia,  but  the 
execs  behind  it  believe  it's  time  for  you. 
too,  to  jack  yourself  up  on  cafleinc  and 
prove  you  can  program  till  the  sun  comes 
up.  Sleeping  bags,  massages  and  laptops 
will  be  doled  out  to  those  lucky  few  who 
qualify  for  the  Sept  16-13  event  Check 
out  wwwJtpbQzaar.com  for  all  of  the 
bizarre  details.  I 


New  Bugbear  Vims  Targets  Rnancial  Institutions 


Firewalls,  antivirus  software  are  so  far 
keeping  worm  out  of  banks’  systems 


8V  TODD  a.  weiss 
The  latest  variant  of  the  Bug¬ 
bear  computer  virus  b  being 
investigated  by  the  FBI  be¬ 
cause  it  was  found  to  be  tar¬ 
geting  rinancial  institutions. 

Bill  Murray,  a  spokesman 
for  the  FBI.  said  l^t  week  that 
the  investigation  began  June  6 
and  will  seek  to  track  down 
the  originators  of  the  virus 
through  electronic  “finger- 
printt"  often  left  behind  with¬ 
in  the  code. 


Bugbear  b  a  mass-mailing 
worm  that  also  spreads 
through  networks,  according 
to  Cupertino.  Calif-based 
Symantec  Corp. 

The  virus  can  infect  exe¬ 
cutable  files  and  b  particularly 
dangerous  because  it  can  log 
the  keystrokes  a  user  enters 
on  his  computer,  potentially 
allowii^  an  attacker  to  get  a 
victim's  personal  information 
and  account  numbers.  It  also 
contains  backdoor  capabilities 


and  can  shut  down  antivirus 
and  firewall  programs. 

Banks  were  identified  as  key 
targets  when  it  was  discovered 
that  the  worm's  code  contains 
a  Ust  of  the  domain  names  of 
more  than  LOGO  banks  from 
around  the  world,  according 
to  Symantec. 

Suzanne  Gorman,  chairman 
of  the  Fmanctal  Services  In¬ 
formation  Sharing  and  Analy- 
sb  Center,  said  the  Reston. 
Va.'based  financial  industry 
security  organization  respond¬ 
ed  immediately  to  the  first  re¬ 
ports  of  Bugbear  attacks  on 
banks  by  warning  members  to 


make  sure  that  their  security 
systems  are  fully  in  place.  No 
member  banks  have  yet  been 
infiltrated  by  the  Bugbear 
virus  because  of  firewalls,  an¬ 
tivirus  protection  and  other 
multilayer  IT  security  sys¬ 
tems.  she  said.  “Right  now, 
we're  remaining  on  high 
alert"  Gorman  said. 

Robin  Bloor,  an  IT  and  secu¬ 
rity  analyst  at  Baroudi  Bloor 
Inc  in  Arlington,  Maas.,  said 
Bugbear  b  particularly  insidi¬ 
ous  because  of  its  keylogger 
capabilities,  which  collect  and 
document  user  input  and  pro¬ 
vide  it  to  an  attacker.  That 
fundamentally  undermines 
the  security  when  it  gets  in 
there,"  Bloor  said.  I 
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FleetBoston  Building 
FT  Command  Center 


Project  will  unil>'  bank’s  systems  and 
centralize  network  management  work 


By  NOVEMBER.  Fleet¬ 
Boston  Financial 
Corp.  plans  to  cotn- 
plete  a  nearly  $10  mil¬ 
lion  proiect  to  build  an  enter¬ 
prise  operations  center  that 
will  bring  all  its  systems  and 
network  management  opera¬ 
tions  into  one  room  and  pro¬ 
vide  real-time  links  to  a 
secondary  data  center  150 
miles  away. 

Robert  Wischnowsky.  Fleet- 
Boston’s  chief  technology  offi¬ 
cer.  said  the  new  command 
center  will  centralize  network 
support  operations  that  have 
remained  fractured  following 
acquisitions  by  the  Boston- 
based  company.  He  added  that 
be  expects  to  ^  able  to  cut 
FleetBoston’s  IT  staff  by  an 
unspecified  number  and  in¬ 
crease  the  amount  of  floor 
space  available  at  its  primary 
<^ta  center  here  by  3,500 
square  feet  —  two  benefits 
that  should  produce  a  return 
on  investment  within  a  year. 

FleetBoston  has  become 
one  of  the  10  largest  banks  in 
the  U.S.  by  buying  more  than 
ISO  firms  during  the  past  20 
years  a  growth  strategy  that 
Wischnowsky  said  will  contin¬ 
ue.  But  in  an  interview  at  the 
data  center  this  month,  he  said 
merging  systems  became  a 
standardized  process,  but  the 
networks  supporting  Fleet- 
Boston’s  fla^hip  banking 
business  and  its  credit  card 
services  and  capital  leasing 
subsidiaries  arc  currently  sep¬ 
arated  from  one  another 

AMattwofTnist 

“We've  had  firewalls  in  be¬ 
tween  fnetwoiks)  because  no 
one  trusted  each  other,**  Wis- 
chnow^ty  said.  FleetBoston 
plans  to  bring  the  nonbanking 
operations  onto  its  consolidat¬ 


ed  network  and  “drive  the 
standardization  of  processes 
across  the  company."  he  said. 

For  example,  the  company 
in  April  went  live  with  IBM’s 
Tivoli  Business  Systems  Man¬ 
ner  software  after  an  18- 
month  rollout.  Ed  Glenning, 
who  manages  FleetBoston’s 
enterprise  systems,  said  the 
tool  is  being  used  by  systems 
administrators  to  ceno^ty 
monitor  and  control  applica¬ 
tion  and  database  servers, 
batch  processing  lobs,  and 
mainframe  CICS  systems. 

FleetBoston’s  systems,  cor¬ 
porate  networics  and  the  net¬ 
work  that  supports  its  3,400 


ATMs  are  managed  with  dif¬ 
ferent  software  tools  by  work¬ 
ers  in  separate  locations  —  the 
first  two  are  in  adjacent  rooms 
at  the  Albany  data  center,  and 
the  AT’M  network  is  in  anoth¬ 
er  building  in  Albany. 

But  Glenning  said  that  by 
November,  be  expects  to  con¬ 
solidate  all  the  systems  and 
network  management  activi¬ 
ties  on  Tivoli  software  and  re¬ 
locate  the  management  opera¬ 
tions  to  the  new  command 
center,  which  is  being  built 
within  the  Albany  data  center. 

A  Ridgefield  Park.  N.J.,  &cil- 
ity  will  be  expanded  as  a  back¬ 
up  data  center  and  will  share 
FleeiBoston’s  data  processing 
workload  and  act  as  a  disaster 
recovery  site,  IT  workers  at 
both  facilities  will  be  able  to 


pP 


managi-rit'nl  iin  F.ynti 


Operate  every  key  system, 
from  network  servers  and 
routers  to  management  soft¬ 
ware.  Glenning  said. 

Avivah  Litan,  an  analyst 
at  Gartner  Inc.  in  Stamford, 
Conn.,  said  operations  center 
consolidations  are  “monu¬ 
mental"  tasks. 


On  the  plus  side,  consolida¬ 
tion  eflfbits  cut  down  on  po¬ 
tential  points  of  failure  and 
should  produce  efficiencies  by 
introducing  an  enterprisewide 
monitoring  and  alert  system, 
Litan  said.  "The  goal  is  to  walk 
into  a  control  room  and  see 
one  network."  she  added,  fe 


Sprint  Exiting  Web  Hosting 
But  Will  Help  Users  Migrate 


BV  MATT  HAMBLEN 

Sprint  Corp.  last  week  an¬ 
nounced  that  it  will  wind 
down  its  unprofitable  Web 
hosting  operatioas  nation¬ 
wide,  making  it  the  second 
major  vendor  to  exit  that  busi¬ 
ness  this  month. 

Sprint’s  move  came  just  one 
week  after  London-based  Ca¬ 
ble  &  Wireless  PLC  said  it 
would  ^>andon  the  U.5.  mar¬ 
ket  for  Web  hosting  services 
[QuickLink  38994].  Although 
they  were  disappointed  by 
Sprint’s  planned  shutdown, 
some  of  the  company's  cus¬ 
tomers  said  they’re  relatively 
well  prepared  for  the  closing. 

“We  may  lose  some  sleep 
over  losing  Sprint,  but  we’ve 
lost  a  pro^^er  before  and 
had  zero  downtime."  said 
Chris  Sloop,  chief  technology 
officer  at  AWS  Convergence 
Technologies  loc.  in  Gaithers¬ 
burg.  Md.  He  noted  chat  AWS 
dropped  Exodus  Communica* 
cions  Inc  as  its  Web  hosting 


firm  in  2001  after  Exodus  filed 
for  bankruptcy  protection,  a 
process  that  resulted  in  its  as¬ 
sets  being  bought  by  C&W. 

Within  hours  of  Sprint’s  an¬ 
nouncement.  several  of  its  ri¬ 
vals  e-mailed  Sloop  with  of¬ 
fers  of  replacement  hostile 
services.  He  added  that  AWS, 
whose  WeatherBug  online 
weather  alert  service  has  23 
million  registered  users,  al¬ 
ready  was  splitting  its  Web 
hosting  between  Sprint  and 
Verio  Inc  in  Englewood.  Cola 

Sprint  said  it  will  phase  out 
Web  hosting  openitioas  at 


eight  facilities  located  in  At¬ 
lanta.  Boston,  Dallas,  Denver. 
Los  Angeles,  New  York,  Sacra¬ 
mento  and  Santa  Clara,  Calif. 

Two  additional  hosting  cen¬ 
ters  in  the  Kansas  City,  Mo., 
area  and  Reston.  Va..  will  be¬ 
come  corporate  data  centers 
that  suppon  other  network 
services  offered  by  Sprint. 

Sprint  said  its  Web  hostii^ 
revenue  totaled  about  $60  mil¬ 
lion  in  the  12-month  period 
that  ended  March  3L  Tie  com¬ 
pany  said  it  will  help  hosting 
customers  migrate  to  other 
vendors  before  exiting  the 
business.  Sprint  plans  to  lay  off 
about  500  worken  as  part  of 
the  shutdown,  with  most  of  the 
cuts  expected  by  year's  end. 

Pentoo  Media  loc  in  Cleve- 


Is  Your  Web  Hosting  Firm  Shutting  Down? 


land  has  a  two-year  hosting 
deal  with  Sprint  that  expires 
in  December,  said  Scott  Pen- 
nock.  manager  of  Internet 
development  at  Penton. 

Sprint  hosts  about  70%  of 
the  company’s  Web  sites,  and 
Pennock  said  he’s  a  satisfied 
customer.  But.  he  added,  the 
planned  pullout  gives  Penton 
“a  wonderful  opportunity  to 
re-evaluate  our  strategy"  of 
outsourcing  so  much  of  the 
online  operations. 

The  back-to-back  with¬ 
drawals  by  Sprint  and  C&W 
are  remnants  of  the  dot-com 
collapse  as  well  as  the  contin¬ 
uing  clampdown  on  IT  spend- 
ii^  driven  by  the  gloomy 
economy,  said  Ted  Chamber¬ 
lin.  an  analyst  at  Gartner  Inc. 
in  Stamfoni  Coon.  He  said 
Web  hosting  still  isn't  a  prof¬ 
itable  business  for  many  ven¬ 
dors,  even  though  Gartner 
predicts  that  nearly  S5  billion 
will  be  spent  worldwide  on 
hosting  services  this  year. 

Sprint  also  recently  named  a 
new  CEO  and  may  be  ridding 
itself  of  an  uaprofltable  unit  in 
hopes  of  attracting  potential 
buyers.  Chamberlin  added  I 
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The  competition  won't  guarantee  a 
virus  fix  in  two  hours.  Then  again,  they 
don't  have  Ken  Tanada,  Ph.D. 
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3Com  to  Lay  Off 
10%  of  Wocfrforce 

3Com  Corp.  plans  to  lay  oH  10% 
of  fts  workers  over  the  next  six 
months,  with  the  deepest  U.S. 
cuts  coming  at  its  Santa  Clara. 
CaJif..  location.  The  networking 
vendor  had  about  3.900  empfoy* 
ees  at  the  end  of  its  third  quarter 
in  February.  The  layoff  announce¬ 
ment  came  two  weeks  after 
3Com  warned  that  its  fourth- 
quarter  sales  would  be  lower 
than  expected. 

Dell,  EMC  Extend 
Disk  Array  Deal 

Dell  Computer  Corp.  and  EMC 
Corp.  extended  by  two  years  a 
deal  under  which  Dell  resells 
Hopkinton.  Mass.-based  EMC's 
Clariion  disk  arrays  and  manu¬ 
factures  the  low-end  CX200 
model.  The  two  companies  said 
the  agreement,  ortginalfy  a  five- 
year  deal  when  H  was  signed  in 
late  2001.  wifi  remain  In  effect 
through  December  2008. 

Investment  Rrm 
To  Purchase  Corel 

Corel  Corp..  which  develops  the 
WordPerfect  office  software 
suite  and  desktop  graphics  appli¬ 
cations.  said  H's  beirtg  acquired 
by  San  Francisco-based  invest¬ 
ment  firm  Vector  Capital  Corp. 
for  about  $124  million  (U.S.)  in 
cash.  Corel  CEO  Oerck  Burney 
said  the  Ottawa-based  company 
is  expected  to  remain  largely  un¬ 
changed.  but  he  added  that  some 
layoffs  are  likely. 


Short  Takes 

Dallas-based  *2  TECHNOLOGIES 
INC  said  that  it  has  prepaid  a 
S61  miNion  promissory  note  and 
extricated  Itself  from  the  lease  of 
an  office  building  that  the  strug¬ 
gling  software  vendor  vacated  in 

January - San  Francbco- 

based  Linux  server  vendor  PEN¬ 
GUIN  COMPUTING  INC  said  H’s 
buying  SCVIO  COMPUTING 
CORP  an  Annapolis,  Md.-basad 
maker  of  dustering  software. 


CeBIT  America  Debuts, 
Defying  Show  Slump 

Organi/ers  hal\e  ancndanco  forecast: 
hope  focus,  fonnat  w  ill  pro\  ide  appeal 


BV  STXCV  COWLCV 

W:  .  H  M.AKK!  I  l\<. 

budjicts  drvinjj 
up  and  trade- 
shi»\v  atien- 

donee  shrinking,  this  summer 
seems  a  liuixuiie  time  tn 
Liuneh  a  new  ITconfcrente- 
But  this  week.  GiTmam  ‘.s 
CeBIT  iibershow  will  make 
its  L’-S.  debut,  with  an  enter¬ 
prise  t'ueus  and  a  European 
lormat  that  organizers  are 
counting  on  to  set  it  apan 
from  its  troubled  brethren. 

The  proieci  has  already 
suffered  frt»m  the  continuing 
econ<»mie  slump.  .A  ye.ir 
ago.  show  organizer  Han¬ 
nover  Fairs  L'.SA  Inc.  foreea.st 
40.(K)0  attendees  for  its  debut 
of  CeBIT  America.  Now.  the 
company  hopes  to  attract 
20.000.  Exhibitor  numbers  are 
also  lower  than  the  400  to  500 
originally  forecast,  with  ,V>) 
signed  on. 

But  show  executives  said 
they're  confident  CeBIT 
America  w  ill  pnwe  its  worth 
to  t  isiiors  and  vendtirs  — 
confident  enough  to  sign  a 
five-year  reservation  contract 
with  the  Jacob  K.  faviis  Con¬ 
vention  Center  in  New  York. 

B2B  Focus 

CeBIT  America  will  be  a  tight¬ 
ly  focused  busincss-iO'busi- 
ness  show.  Instead  of  aisles  of 
booths  lining  the  show  fltnirs. 
organizers  said  they're  arrang-  i 
ing  e.vhibilors  into  clusters  of  j 
related  technologies,  w  ith  nu-  I 
mertius  lounge  areas  available 
on  the  floor  to  promote  busi¬ 
ness  di-seussions. 

Storage,  networking  and 
wireless  products  will  be 
prevalent  at  the  show.  Hew  lett-  ! 
Packard  Co.  is  planning  to  { 

preview’  upcoming  handheld 
devices  and  notebooks  and 
will  join  with  several  partners  I 
to  demonstrate  new  storage  I 


devices  tsce  story  belowi, 
S\my  Electronics  Inc.  will  fo¬ 
cus  on  storage  as  well,  bring¬ 
ing  new  libraries  and  tape 
drives  to  the  show, 

.Microsoft  Corp,  plans  to 
push  its  Tablet  PC  software, 
while  5Com  Corp.  will  show 
firewall  products  and  net¬ 
work  management  technol¬ 
ogy.  PalmSource  Inc  plans 
to  make  several  announce¬ 
ments  about  new  mobility, 
.security  and  systems  manage¬ 
ment  offerings. 

Vote  of  Confidence 

Persuading  vendors  to  spread 
their  trade-show  dollars 
around  and  take  a  chance  on 
the  debut  of  CeBIT  America 
has  gone  fairly  smoothly,  ac¬ 


cording  to  organizers.  “Most 
of  the  significant  players  have 
'  said  yes  to  us."  said  Mark  Di- 
neen.  managing  director  of 
CeBIT  America.  "That's  a 
huge  vote  of  confidence." 

One  vendor  said  CeBIT’s 
brand  name  was  an  important 
factor  in  its  decision  to  exhib¬ 
it.  'They  have  a  great  track 
record,  and  we  hope  they'll 
be  bringing  that  to  the  U.S.." 
said  Albert  Chu,  vice  presi¬ 


dent  of  business  develi»pment 
at  Sunnyvale.  Calif.-based 
PalmSource. 

The  IT  show  market  ha.s 
been  a  harsh  one  lately.  Event 
cancellations  are  common, 
and  Comdex  parent  KeyT- 
Media  Group  Inc.  has  filed  tor 
bankruptcy  protection.  Com¬ 
dex's  former  general  manager. 
Bill  Sell,  defected  and  is  head¬ 
ing  brand  and  customer  devel¬ 
opment  for  CeBIT  America. 

According  to  Sell.  CeBIT 
America  isn't  expected  to 
make  a  profit  this  year.  Prince¬ 
ton.  N.J.-based  Hannover  Fairs 
USA  is  prepared  to  give  it  sev¬ 
eral  years  to  break  even,  he 
j  said.  “It's  a  long-term  invest¬ 
ment."  Dineen  added. 

I  "This  is  a  completely  differ- 
I  ont  model,  and  people  arc  re- 
1  sponding  to  that."  he  said.  "We 
just  have  to  remember  the  fo¬ 
cus  of  the  event:  quality,  qual¬ 
ity.  quality;  enterprise,  enter¬ 
prise,  enterprise."  I 

Cowley  wrires/orfhe/DG  News 
Service.  Computerworld  news 
editor  Don  Tennant  contributed 
(  fofhissforv. 


HP  Plans  Disk  Array  That  Supports  Serial  Interconnects 


Hewiett-Packard  plans  to  an¬ 
nounce  al  CeBIT  toierica  that  it 
will  ship  by  mid-2004  a  dsk  ar¬ 
ray  that  can  rnx  senal  attached 
Sl^  drives  and  lower-cost  ser¬ 
ial  Advanced  Technology  Attach- 
menl  (ATA)  devices. 

HP  said  the  upconang  array 
wiH  have  a  single  serial  back¬ 
plane  that  can  support  both 
kinds  of  drives,  plus  an  interface 
that  wM  let  the  different  disks 
replicate  data  to  one  another 
for  backup  and  recovery  purpos¬ 
es.  The  mix-and-mafeh  capabiH- 
lies  could  potenbaHy  lower  stor¬ 
age  costs  by  allowing  fT  admin- 
istrators  to  provision  capacity 
based  on  the  type  of  data  that's 
bftng  stored. 

Daniel  Moneafe.  CK)  at  North 
Bronx  Healthcare  Network  in 
New  Vbrk.  recently  taittd  to 
about  the  array  for  potential  use 
In  storing  medcal  imaoes  and 
docurnertfs  from  clinical  studies. 
1  can  definiefy  see  the  value  of 
C  he  said.  *Mfo‘d  Hhs  to  get  rid 
of  our  tape  environiTient.'’ 


disk  array  would  let 
North  Bronx  Healthcare  store 
images  and  electronic  docu¬ 
ments  on  serial  ATA  di^  that 
cost  roughly  the  same  as  tape 
devices  and  provide  end  users 
with  onDne  access  to  die  data. 
Morreaiesaid.  But  he  added  that 
the  health  care  provider  is  cur¬ 
rently  kistaWng  an  EMC  Centera 
array,  which  uses  parallel  ATA 
disk  drives  to  store  data  In  a 
nonrewritable  format. 

Mark  Almendnger.  enterprise 
infrastructure  manager  at  Hunt- 
ingfon  Baneshares  Inc.  m 
Columbus.  Ohio,  said  the  finan¬ 
ce  services  firm  could  use  the 
promised  HP  array  to  take  ad¬ 
vantage  of  inexpensw  serial 
ATA  drrves  for  applications  like 
its  Notes  e-mail  systems.  Data 
from  heavy-duty  transaction 
appUcatfons  could  be  stored 
on  higher-performance  serial 
attached  SCSI  devices,  added 
Almerajnger. 

HP  is  partnertog  on  the  mixed 
array  with  dsk  drive  maker  Sea¬ 


gate  Technology  LLC  in  Scotts 
Valley.  Calif.,  and  network 
adapter  vendor  Adaptec  tnc.  in 
Milpitas.  Calif.  Seagate  and  Max¬ 
tor  Corp..  also  in  Mdpitas.  have 
both  said  they  plan  to  begin 
shipping  sviai  attached  ^iSI 
drives  to  hardware  vendors  by 
year's  end. 

A  1.0  version  of  the  senal  at¬ 
tached  SCSI  specification  was 
ratified  by  a  technical  committee 
last  month  and  is  in  the  midst  of 
a  AS-day  public  convnent  peri¬ 
od.  One  (rf  the  key  features  buM 
into  the  new  storage  intercon¬ 
nect  technology  is  Ks  compati¬ 
bility  with  serial  ATA  drives 
[QuickLink  36708]. 

HP  is  the  first  vendor  to  for¬ 
mally  announce  plans  to  develop 
an  array  that  mixes  the  two 
technofogies  But  Robert  6tey. 
an  analyst  at  IOC  in  Framing¬ 
ham,  Mass.,  said  the  product 
prorrased  by  HP  is  only  the  first 
of  what  will  be  *a  total  industry 
ffip  over  ttne' to  such  devtoes. 

-LueMsHtatm 


rnym 


c— fnwu  Jm  1,1118 


NEWS 


www.computerworf<l.com 


BRIEFS 


SComtol 
10%of\ 

SCoffl  C«rp.  pint  to  liy  off  10% 
ollto  wortivi  owr  too  imt  oil 
mnnfhi.  wfffa  tho  doopoto  UA 
euto  ooming  to  Ito  Sinta  Ctora. 
CtoffM  loctoton.  Tito  ntoworldng 
vmdor  M  about  9.000  omptoy 
000  to  llto  oito  ollto  tMnI  quartor 
toMniarr«TltoiayaffaanoimM- 
nnto  canto  two  woaitt  aftor 
OCoHi  MWitod  that  Ra  fourth* 
quartar  atoaa  wouM  bo  towor 


Del,  EMC  Extend 
Disk  Array  Deal 
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CeBIT  America  Debuts, 
Defying  Show  Slump 

Oiigankers  halve  attendance  forecast; 
hopie  focus,  format  wiU  provide  appeal 


WITH  MARKETING 
budgets  drying 
up  and  trade- 
show  atten¬ 
dance  shrinking,  this  summer 
seems  a  quixotic  time  to 
launch  a  new  IT  conference. 
But  this  week,  Germany's 
CeBIT  ubershow  will  make 
its  U3.  debut,  with  an  enter¬ 
prise  focus  and  a  European 
format  that  o^sanizers  are 
counting  on  to  set  it  apart 
from  its  troubled  brethren. 

The  project  has  already 
suffered  from  the  continuing 
economic  slump.  A  year 
ago,  show  organizer  Han¬ 
nover  Fairs  USA  Inc  forecast 
40.000  attendees  for  its  debut 
of  CeBIT  America.  Now.  the 
company  hopes  to  attract 
20,000.  Exhibitor  numbers  are 
also  lower  than  the  400  to  500 
originally  forecast,  with  361 
signed  oa 

But  show  executives  said 
they're  confident  CeBIT 
America  will  prove  its  worth 
to  visitors  and  vendors  ~ 
confident  enough  to  sign  a 
Hve-year  reservation  contract 
with  the  Jacob  K.  Javits  Con¬ 
vention  Center  in  New  York. 

B2B  Focus 

CeBIT  America  will  be  a  tight¬ 
ly  focused  business-to-busi- 
□ess  show.  Instead  of  aisles  of 
booths  lining  the  show  floors, 
organizers  said  they're  arrang¬ 
ing  exhibitors  into  clusters  of 
related  technologies,  with  nu¬ 
merous  lounge  areas  available 
on  the  floor  to  promote  busi¬ 
ness  discussions. 

Storage,  networking  and 
wireless  products  will  be 
prevalent  at  the  show.  Hewlett- 
Packard  Ca  is  planning  tO 
preview  upcoming  handheld 
devices  and  notebooks  and 
will  join  with  several  partners 
to  demonstrate  new  storage 


devices  (see  story  below). 
Sony  Electronics  Inc  will  fo¬ 
cus  on  storage  as  well,  bring¬ 
ing  new  libraries  and  upe 
drives  to  the  show. 

Microsoft  Corp.  plans  to 
push  its  Tablet  PC  software, 
while  3Com  Corp.  will  show  ' 
flrewall  products  and  net¬ 
work  management  technol¬ 
ogy.  PalmSource  Inc.  plans 
to  nuke  several  announce¬ 
ments  about  new  mobility, 
security  and  systems  manage¬ 
ment  offerings. 

Vote  of  Confidence 

Persuading  vendors  to  spread 
their  trade-show  dollars 
around  and  take  a  chance  on 
the  debut  of  CeBIT  America 
has  gone  fairly  snooothly,  ac¬ 


cording  to  organizers.  "Most 
of  the  significant  players  have 
said  yes  to  us,”  said  Marie  Di- 
neen,  managing  director  of 
CeBIT  America.  That's  a 
huge  vote  of  confidence.” 

One  vendor  said  CeBIT's 
brand  name  was  an  important 
factor  in  its  decision  to  exhib¬ 
it  "They  have  a  great  track 
record,  and  we  hope  they'll 
be  bringing  that  to  the  U.S..” 

I  said  Albert  Chu,  vice  presi¬ 


dent  of  business  development 
at  Sunnyvale.  Calif. -based 
PalmSource. 

The  IT  show  market  has 
been  a  harsh  one  lately.  Event 
cancellations  are  commoa 
and  Cfomdex  parent  Key3- 
Media  Group  Inc.  has  filed  .‘or 
bankruptcy  protectioa  Com¬ 
dex’s  former  general  manager, 
Bill  Sell,  defeaed  and  is  head¬ 
ing  brand  and  customer  devel¬ 
opment  for  CeBIT  America. 

According  to  Sell,  CeBIT 
America  isn't  expected  to 
make  a  proflt  this  year.  Prince- 
toa  N.J.-based  Hanover  Fairs 
USA  is  prepared  to  give  it  sev¬ 
eral  years  to  break  evea  be 
said.  "It’s  a  long-term  invest¬ 
ment,”  Dine^n  added. 

This  is  a  Completely  differ¬ 
ent  model,  and  people  are  re¬ 
sponding  to  that.”  he  said.  "We 
fust  have  to  remember  the  fo¬ 
cus  of  the  event:  quality,  qual¬ 
ity,  quality:  enterprise,  enter¬ 
prise,  enterprise."  I 


Cowley  writesjbrffielOG  News 
Service.  Computerworld  news 
editor  Don  Tennont  contributed 
to  this  story. 
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Sun’sGosling  Discusses  State  of  Java 


•V  CAROL  8LJWA 

Sun  Microsystems  Inc.  Vice 
I*resident  James  Ooslni^  the  cre¬ 
ator  of  Java.  last  weekspoke 
with  Computerworld 
about  the  company's  lat¬ 
est  fava  activities.  Ex- 
cerptsfoUow: 

Those  who  have  teat)  to 
prwioui  JmaOne  oonfor* 
ancae  tew  noted  tte  de* 
cMng  sMandanca.  Do  you 
think  that  flignaie  wanino 
intaraet  In  Jaw? !  don’t 
think  there’s  any  interconnec¬ 
tion  between  the  population 
decline  and  what's  going  on  in 
the  Java  world.  The  socioeco¬ 


nomic  state  of  the  worid  pretry 
much  explains  everything.  I 
think.  If  you  talk  to  people 
about  the  energy  of  what  they 
are  doing.  I  acmaily 
think  it’s  higher  to^y. 

Swtaliadalolateut 
aiofttng  to  boost  the  Jaw 
poptaaDon  irom  a  mawn 
to  10  inSen  dowlopora. 
DoyMthMttet'saraah 
Me  goal?  1  think  it's  a 
very  realistic  goal  It’s  a 
tou^  one.  and  a  lot  de¬ 
pends  on  how  you  think  of  the 
goal  You’ve  got  this  huge  edu¬ 
cational  system  that  is  feeding 
the  world  with  pre-educated 


Java  developers.  If  you  count¬ 
ed  up  all  the  people  who  have 
learned  to  program  in  Java,  wc 
arc  way  ahead  of  10  million. 

Ovar  what  torn  fraiM  wfl  K)  mii- 
lon  te  acWawbla?  Td  be  happy 
in  five  years.  It  wouldn't  be  at 
all  surprising  if  it  happened  a 
lot  faster  than  that. 

Uka  many  oompaniaa.  Sub  ia  to- 
trodudno  a  toot,  coda-namad  Pni- 
act  Itow,  that  aaaka  to  raduca  tha 
cowptoxhyflldewiQpinginJaw. 
Haw  you  baan  inwiwd  in  that? 
Yeah.  We  tend  to  come  out  of 
the  gate  with  something  that 
works  really  well  at  large 
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Java 


has  reached  the  point  where 
market  pressure  would  ens)ire 
that  no  “bully”  could  succeed 
in  introducing  incompatible 
technology  that  could  fracture 
a  developer  community  that 
has  grown  to  value  Java's  con¬ 
sistency  and  interoperability. 

“My  personal  feeling  is  that 
we’re  over  the  edge,  but  1  also 
feel  a  little  nervous  about 
that."  Gosling  said.  “There  are 
still  all  kinds  of  opportunities 
for  mayhem.” 

Not  Raady  for  Leap 

One  prominent  executive  who 
isn't  ready  to  take  the  leap  that 
Gosling  favors  is  Jonath^ 
Schwartz,  executive  vice  pres¬ 
ident  of  software  at  Sun.  He 
said  the  problem  with  open- 
source  is  the  “tyranny  of  the 
volume  leader.” 

“If  Java  was  open-source, 
Microsoft  could  take  it.  deliver 
it  as  they  saw  Ht  and  drive  a 
defmition  of  Java  that  was  di¬ 
vergent  from  the  one  that  the 
community  wanted  to  be  com¬ 
patible,”  he  said.  “And  to  the 
victor  would  go  the  spoils  of 
that  nefarious  action.” 

Sun  formally  established 
the  Java  Community  Process 
(JCP)  in  1998  to  develop  and 
revise  Java  technology,  and  it 
now  claims  that  more  than  650  , 
members  participate.  Under  I 


the  JCP.  intellectual  property 
is  protected  by  a  license  that 
requires  anyone  using  a  Java 
spec  to  demonstrate  compati¬ 
bility  with  the  technology's 
reference  implementation. 

Even  though  Sun  has 
worked  to  make  its  standard¬ 
ization  process  more  open  — 
and.  along  with  JCP  members, 
to  allow  for  more  technologies 
to  be  made  available  under  an 
open-source  licensing  and  de¬ 
velopment  model  —  it  has  yet 
to  make  core  ele¬ 
ments  of  Java 
open-source. 

Gosling  said. 

Sun’s  lawsuit  _ 

claiming  that  Mi¬ 
crosoft  Corp.  violated  its 
contract  by  trying  to  intro¬ 
duce  a  version  of  Java  that  was 
incompatible  with  its  speci¬ 
fications  has  made  some  col¬ 
leagues  particularly  sensitive 
to  the  open-sotirce  issue. 
Gosling  said.  He  added  that 
there  are  still  enou^  differ¬ 
ences  of  opinion  at  Sun,  )i^ch 
tends  to  be  a  consensus- 
driven  company,  that  he  can’t 
predict  when  or  if  Java  will  be 
made  open-source. 

“There  are  days  when  1  feel 
like  it's  going  to  be  tomorrow. 
There  are  days  when  1  feel  like 
it's  going  to  be  never,”  Gosling 
said.  “If  1  talk  to  the  lawyers 
involved  in  the  Microsoft  case, 
I  always  come  back  complete¬ 
ly  horrified,  (thinking]  if  we 
ever  do  this,  we’re  screwed." 


APPLICATION 

DEVELOPMENT 


The  open-source  debate 
over  Java  is  nothing  new  at 
Sun.  Gosling  and  others  at  the 
company  acknowle<%ed  that 
the  discussion  started  long  be¬ 
fore  the  growing  popularity  of 
the  open-source  Liinix  operat¬ 
ing  system  caused  a  commo¬ 
tion  in  the  industry.  But  the 
debate  has  heated  up  more  re¬ 
cently,  Goslii^  said. 

Rob  Gingell,  chief  engineer 
at  Sun  and  chalnnan  of  the  JCP 
program,  said  an  argument 

erupted  via  e-mail 
about  a  month  ago 
among  about  100 
Sun  field  engi- 

_  neers  who  ?w>rk 

with  customers. 

On  the  open-source  question, 
they  wondered.  “Why  don’t  we 
just  say  yes?"  But  he  said  that 
on  further  examination,  be  re¬ 
alized  that  they  were  referring 
more  to  the  open-source  st>*le 
of  development  than  the  intel¬ 
lectual  property  issues  associ¬ 
ated  with  open-source. 

“Given  its  importance  to  the 
future  of  my  company  and  our 
shareholders’  stake  in  our 
company.  I'm  not  willing  to  be 
risky  with  it."  Gingell  said. 

"I’m  going  to  want  to  under¬ 
stand  it  and  be  able  to  be  de- 
fmltive  about  it  within  a  rea¬ 
sonable  risk  profile  before  I’m 
willing  to  let  that  go.” 

Gosling  said  he  didn't  be¬ 
come  swayed  that  Java  was 
ready  for  open-source  until 
about  a  year  ago,  and  he  said 


scale,  and  at  small  scales  it's 
too  complicated- ...  So  there's 
a  dual  goal  here.  One  is  to 
make  it  so  that  the  people  at 
the  lower  end  can  use  a  lot  of 
this  infrastructure  that  was  re¬ 
ally  designed  around  high-end 
deployments.  There's  also  this 
other  subtext  to  it.  which  is 
that  the  things  that  start  small, 
if  they  succeed,  they  always 
become  large.  So  with  these 
tools,  you  can  do  systems  that 
start  small,  start  easy,  but  they 
can  grow  up  and  turn  into  big 
sophisticated  systems.  I 

MffeOSUM 

lo  rM  te  te  iiMeniew  wOi  te  taiher  of 
Jena.  MSS  cw  Vlte  ate 


he's  not  convinced  he's  righL 
He  said  he  has  made  his  opin¬ 
ion  known  internally  for  quite 
some  time,  although  be  hasn't 
made  a  point  of  discussing  his 
views  publicly. 

“We  actually  do  open-source 
a  lot  of  stuff  but  not  the 
core  bits,”  Gosling  said.  “And 
we've  talked  about  slicing  up 
the  core  so  that  some  of  it’s 
open-source,  and  by  and  Large, 
that  isn’t  an  easier  problem 
than  doii^  the  whole  thing.” 

Schwartz  said  the  lavajiei 
online  community  that  Sun  in¬ 
troduced  last  week  is  “filled  to 
the  gills  with  open-source 
projects  with  Java.”  He  also 
said  that  he,  Gosling  and  oth¬ 
ers  just  published  the  Java  Re¬ 
search  License,  which  allows 
more  open-source  develop¬ 
ment  on  core  parts  of  Java. 

“Anyone  who  wants  to  ex¬ 
periment  with  core  parts  of 
Java  —  everything  under  the 
guts  of  the  [virtual  machine), 
the  language  constructs  them¬ 
selves  —  is  more  than  wel¬ 
come  to  do  so.”  Schwartz  said. 
“But  they  can’t  introduce  them 
inio  the  commercial  domain.* 

Gosling,  too,  is  well  aware 
of  the  potential  pitfalls  if  Sun 
takes  the  open-source  step. 
“Open-source  ways  of  dealing 
with  software  work  really  well 
so  long  as  you  get  this  sort  of 
collegial  atmosphere,”  be  said. 
“If  you  happen  to  have  a  bully 
on  the  block  who  is  really 
strong,  it  doesn't  work."  I 


Opinionson 

Open-Source 

JaMBMfated 

Some  of  toe  protenem  ven- 
(kntototeoikonJM 
stondardstoRMtoSun 
Mjcmeytoeme' Jm  Com- 
muniyJ^acBsfJCf^ 
leyvJMtieinQ  tuned 
ouar  to  toe  open-nice 
cxmmrtly.  Mtey  ooiporate 
developn.  teweuir.  tew 
some  strongly  (toement 
opinions  on  toe  mtotar. 

TlieWbiitnietei- 
plN|  «f  iien  dnolBpenr 
etowK 

•  day  Itehur.  senior 
staff  prognrraner.  Gteries 
SdN«b&Co..SenFran' 
cteoDc 'Wnn  you'ie  tjyng 
lo  make  reusalito  code,  its 
better  to  have  stondards.  I 
prefer  the  standantzalion 
toll  toe  Java  (^omnuniy 
FVocan  pRMtdn.  ratoar 
than  everybody  doing  tote 
owntoina.’ 

■  Rtei)  Kaman.  dtector 
of  infomtotian  technology  Id 
fkjmtealnc.UMamlB.IW- 
*Sun  is  not  toe  company 
tlte8usadtobe.Jtote 
should  be  open....  Aleo. 
Sun  B  <kMng  I  lot  of  Java 
in  a  certain  dtecbon,  siiadi 

I  don't  toink  toe  reel  of  toe 
comnulymairiMfiL* 

■  1dmVbnMia.manag- 
e(.UnlxMbServicK.Tte 
Scolto  Co.  Marymfe.  OMo: 
IttktotoeJCPktoerii^ 
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ccffloe  opensource.  n  be 
lootefdtoconM.' 

■  8obCflliTte.tochnieef 
lefcte  AutoZone,  yemphis. 
Ivfouklietoaelgo 
open-aouro.  becaun  toare 
aie  toon  of  us  who  woUd 
Hetohivogrtelaiteftiily 
Mo  how  toe  tocteology 
worts -(tedodartyeifto 
newtoingB* 
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Audits 

sidtary  plans  to  add  a  central* 
tzed  contract  manager  '*wbo 
can  also  assist  with  compli* 
ance  issues.”  Kaul  said. 

Jane  Oisbrow,  an  analyst  at 
Stamford,  Conn.-based  Gart¬ 
ner.  said  IT  departntenr.<!  gen¬ 
erally  do  a  lousy  job  of  moni¬ 
toring  their  software  agree¬ 
ments.  *‘lf  your  tech  support 
people  are  like  most  te^  sup¬ 
port  people,  record-keeping  is 
not  ttoir  forte.”  she  said. 

Toyota  Motor  Corp.  recent¬ 
ly  inked  a  global  desktop  and 
server  enterprise  licensing 
agreement  with  Microsoft 
that’s  supposedly  “audit- 
proof”  said  Charlie  Clark,  a 
technician  at  the  automaker's 
Toyota  Technical  Center  USA 
Inc.  unit  in  Ann  Arbor,  Mich. 

Microsoft  enterprise  license 
holders  “are  less  likely  to  be 
audited”  than  other  users  of 
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RRD 

and  standardization  hurdles 
before  widespread  usage  can 
begin. 

Wal-Mart’s  move  is  expect¬ 
ed  to  result  in  the  deployment 
of  nearly  1  billion  RFID  tags 
with  embedded  electronic 
product  codes  (EPC)  for 
traddng  and  identifying  items 
at  the  individual  crate  and  pal¬ 
let  level,  said  Pam  Kohn,  vice 
president  of  the  BentonvUle, 
AilL-based  retailer’s  global 
supply  chain  operatiotts. 

But  even  Wal-Marr's  initial 
RFID  effort  will  be  narrowly 
focused.  AIUmhi^  RFID  tags 
can  gather  and  track  a  variety 
of  data  related  to  products, 
materials  and  more,  Kohn  said 
Wal-Mart  will  concentrate  at 
first  on  using  the  technology 
to  improve  inventory  manage¬ 
ment  in  its  supply  chain. 

“^e'le  still  determining  all 
the  benefits,”  Kohn  said.  ”We 
don't  want  to  overburden  our¬ 
selves.”  She  added,  though, 
that  even  if  Wal-Mart  were  to 
collect  no  new  data  with  the 
RFID  tags,  the  efficiency  and 
accuracy  with  which  items 


HOW  TO 


Preparing  for 
Software  Audits 

CLOSayCOimUlEyiMr 
softHiare  IcanMS  TWlti  biing  m- 
voices  submitted  by  vendors. 

KE9  copioiis  records  of 
your  Mfhnre  contracts  to 
guard  agamst  posshie  errors 
by  vendors. 

SPCLL  OUT  your  audH  rioMs  fo 
conbads,  ndudfog  who 
conduct  and  pay  lor  an  audft  and 
how  It  wi  be  done. 

DEMAND  thd  you  bo  given 
at  least  90  days*  advance  notice 
oiaptannedaudit 


ST1PULAIE  that  you  should  gal 
at  least  M  days  to  resolve  com¬ 
pliance  problems  wtihoul  inof- 
nng  any  financial  penalties. 

saunce  Mf>n«*Mac  STAuraao  cOkm 

its  software,  noted  Gartner  an¬ 
alyst  Alvin  Park.  But  Park 
added  that  he  has  been  told  by 


I  can  be  tracked  would  be  huge 
benefits  in  and  of  themselves. 

RFID  uses  low-powered  ra¬ 
dio  transmitters  to  read  data 
stored  in  tags  that  are  embed¬ 
ded  with  tiny  chips  and  anten¬ 
nas.  Proponents  of  the  tech¬ 
nology  say  such  “smart”  tags 
can  store  more  detailed  infor¬ 
mation  than  conventional  bar 
codes,  enabling  retailers  and 
manufacturers  to  track  items 
at  the  unit  level. 

RFID  tags  have  been  avail¬ 
able  for  several  years,  but 
adoption  has  been  slow  be¬ 
cause  the  tags  are  mote  ex¬ 
pensive  than  bar  coding  and 
because  standards  are  lacking 
to  ensure  interoperability  be¬ 
tween  tags  and  ^ca  readers. 

Gary  ftobertsoa  executive 
director  of  global  infrastruc¬ 
ture  at  Delphi  Corp.,  a  *I>oy. 
Mkh.-based  maker  of  auto¬ 
motive  electronics  systems 
that  uses  RFID  devices  in  its 
manufacturing  operations, 
said  Wal-Mart’s  decision  to 
deploy  the  technology  “will  le¬ 
gitimize  it  and  push  it  into  the 
mainstream.” 

The  fact  that  the  largest 
company  in  the  woHd  is  pub¬ 
licly  adopting  EPC  open  stan¬ 
dards  should  give  companies 


I  several  Gartner  clients  that 
I  they  were  asked  by  Microsoft 
to  conduct  internal  audits  on 
server-based  products  that 
aren't  covered  by  the  enter¬ 
prise  agreements,  including 
SQL  Server  and  server  ver¬ 
sions  of  Windows. 

Rebecca  LaBrunerie,  a  Mi¬ 
crosoft  product  manager  for 
worldwide  licensing  and  pric¬ 
ing.  didn’t  dispute  Paric’s  com- 
menL  However,  she  did  say 
that  Microsoft  has  pulled  back 
on  the  number  of  audits  it 
conducts  over  the  past  year. 
“That  doesn't  mean  that  we 
won't  talk  with  our  customers 
about  how  many  licenses  they 
have.”  LaBrunerie  added 
Jacqueline  Woods,  vice 
president  of  global  pricing  and 
licensing  strategy  at  Oracle, 
said  the  company  has  kept  the 
number  of  customer  audts  It 
conducts  steady  at  about  400 
annually  for  the  past  three 
years,  llut  works  out  to  less 
than  one-tenth  of  1%  of  Ora¬ 


confidence  that  the  day  of  a 
single,  interoperable  RHD 
system  is  dose  at  hand.”  said 
Kevin  Ashton,  executive  direc¬ 
tor  of  MITs  Auto-ID  Center 
in  Cambridge.  Mas.s. 

The  Auto-ID  Center  is 
working  with  Uniform  Code 
Council  Inc.  (UCC)  in 
LawrencevUle.  N.J.,  and  EAN 
International  in  Brussels  to 
develop  a  standardized  EPC 
formal  for  storing  data  on 


cle’s  installed  base  of  200,000 
customers.  Woods  said.  In  ad¬ 
dition.  at  least  25%  of  the  au¬ 
dits  Oracle  does  are  requested 
by  the  customers  themselves, 
she  said. 

El  Segundo,  Calif.-based 
Candle  Corp.  confirmed  that  It 
has  become  much  more  ag¬ 
gressive  about  trying  to  curb 
piracy  of  its  software.  Since 
launching  a  formal  program  a 
year  ago.  Candle  has  audited 
more  than  1.000  of  its  5.000  or 
so  customers,  said  Steve  Ger- 
rity,  assistant  vice  president  of 
contracts  and  administration. 

“We  view  audits  as  a  cost- 
effective  way  to  defend  our  in¬ 
tellectual  property."  Gerrity 
said.  But  he  added  that  Candle 
has  seen  an  increase  of  1%  to 
2%  in  revenue  as  a  result  of 
the  audit  program. 

Peter  Beruk,  director  of  an¬ 
tipiracy  at  Network  Associates 
Inc.  in  Santa  Clara.  Calif.,  said 
the  security  software  vendor 
has  also  recently  increased  the 


RFID  tags.  That  effort  got  an¬ 
other  boost  last  week  when 
Microsoft  Corp.  said  it  will 
join  AutoID  Inc.,  a  not-for- 
profit  joint  venture  set  up  by 
UCC  and  EAN  to  oversee  the 
still-evolving  standards. 

CostPossitalySSOM 

Wal-Mart  didn’t  say  how 
much  the  effort  would  cost  it 
or  its  suppliers  or  whether 
new  systems  will  be  needed  to 
support  the  technology.  But 
even  at  the  5-cents-per-tag 
price  that  V^-Man  said  it 
plans  to  seek  ftom  vendors, 
the  cost  of  the  tags  alone 
would  total  $50  millioa 

According  to  the  Auto-ID 
Center’s  Web  site,  RFID  tt^ 
r^ically  cost  at  least  50  cents 
each,  and  RFID  readers  sell 
for  $1,000  or  more.  Big  compa¬ 
nies  could  require  thousands 
of  readers  for  all  their  facto¬ 
ries,  warehouses  and  stores, 
the  site  says. 

Wal-Mart  isn’t  the  only 
retailer  putting  its  faith  in 
RFID.  London-based  Marks  & 
Spencer  PLC  one  of  the  U.K.’s 
largest  retailers,  is  rolling  out 
RFID  technology  in  its  food 
supply  chain  operations.  The 
project  involves  putting  13.56- 


number  of  compliance-related 
audits  it's  conducting.  But  it's 
“not  sending  out  audit  tetters 
to  50  customers  a  week.”  he 
added.  “We're  doing  this  more 
on  a  case-by-case  basis.” 

Even  so.  some  attendees 
said  the  audit  threat  could 
hurt  user-vendor  relation¬ 
ships.  “It's  like  the  vendor  is 
sayir^  'We  don’t  trust  you,' " 
said  Pat  Kitchen,  director  of 
IT  administration  and  coordi¬ 
nation  at  Pactiv  Corp..  a  Lake 
Forest.  UL-based  packaging 
manufacturer.  I 


»lf  your  tech 
support  peo¬ 
ple  are  fite  most 
tech  support  people, 
record-keeping  is 
not  their  forte. 


JANE  OiSaROW.  ANALYST. 
GARTNER  tNC 


MHz  RFID  tags  on  3.5  million 
new  plastic  trays  used  to  ^ip 
products,  according  to  Keith 
Mahoney,  the  company's  food 
logistics  controller. 

Marks  &  Spencer  has  sub¬ 
jected  the  tags  to  a  variety  of 
temperature,  moisture  and 
distance  tests  before  deploy¬ 
ing  them.  Mahoney  said  dur¬ 
ing  a  presentation  at  the  con¬ 
ference.  Although  the  lack  of 
common  RFID  protocols  and 
standards  remains  an  issue, 
“we  could  not  allow  the  lack 
of  them  to  hang  up  the  proj¬ 
ect.”  be  added. 

RFID  can  yield  “a  huge  ben¬ 
efit”  for  some  companies,  said 
David  Hutchins,  senior  direc¬ 
tor  of  enterprise  systems  at 
Kraft  Foods  North  America 
Inc.  in  Northfleid.  IlL.  and  a 
member  of  the  AutoID  board. 
However,  Kraft  is  still  evalu¬ 
ating  the  technology's  poten- 
daJ  value  in  its  own  supply 
chain.  “The  first  thing  is  figur¬ 
ing  out  the  business  case,” 
Hutchins  said.  I 
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Surveys  Show  No  Big  Boost  Likely  in  IT  Budgets  This  Year 


Forrester,  Meta  say  many  users  plan  to 
spend  less  than  budgeted  amounts 


aV  THOMAS  HOFFMAN 

Stock  markets  are  strengthen¬ 
ing.  and  consumer  confidence 
has  increased  in  recent 
months.  But  thus  far,  those  de¬ 
velopments  aren’t  having 
much  of  a  positive  impact  on 
corporate  IT  spending  plans. 

In  fact,  a  respective  2^  and 
30%  of  North  American  com¬ 
panies  surveyed  separately  by 
Forrester  Research  Inc.  and 
Meta  Group  Inc  said  they  plan 
to  shrink  tlMir  tech  spending 
below  the  levels  they  bad  orig¬ 
inally  budgeted  for  this  year. 

Nearly  70%  of  the  700  re¬ 
spondents  to  Cambric^e, 
Mass.-based  Forrester’s  survey 


indicated  that  they’re  bolding 
steady  on  their  IT  budgets 
(see  chart).  But  the  survey  re¬ 
sults.  released  this  month,  led 
Forrester  to  drop  its  overall 
2003  IT  spending  forecast 
from  the  1.9%  average  budget 
increase  it  projected  in  De¬ 
cember  to  a  mere  13%  gain. 

“If  you  look  at  IT  spending 
from  a  Buy.  Hold  or  Sell  per¬ 
spective  right  now,  most  com¬ 
panies  are  raking  a  Hold  ap¬ 
proach,”  said  Howard  Rubin, 
executive  vice  president  at 
Stamford,  Conn.-based  Meta. 

The  Meta  study,  which  was 
completed  last  month  and  in¬ 
volved  500  companies,  fbimd 


that  41%  of  the  respondents 
plan  to  leave  their  2003  IT 
budgets  unrhangeH.  Rubin 
said  the  remainder  were  al¬ 
most  evenly  split:  30%  plan  to 
cut  their  budgets,  and  29%  in¬ 
tend  to  increase  spending. 

Holding  steady 

The  Hold  approach  to  IT 
spending  maps  with  Coming 
Inc.’s  plans.  “At  this  point,  we 
aren’t  changing  our  full-year 
ta^et,”  said  Richard  Fishbum, 
CIO  at  the  Coming,  N.Y.-based 
maker  of  optical  fiber,  cables, 
photonic  technologies  and 
other  products. 

But  Fishbum  added  that 
Coming’s  IT  budget  called  for 
higher  spending  in  the  first 
half  of  the  year  to  fund  ongo¬ 
ing  productivity  programs. 


Midyear  IT 
Spending  Outlook 


such  as  the  application  of  ISO 
9000  practices  at  the  compa¬ 
ny’s  global  IT  shared  services 
center.  In  addition.  Coming 
consolidated  help  desk  activi¬ 
ties  at  three  regional  sites  ear¬ 
lier  this  year.  As  a  result.  IT 
spending  for  the  rest  of  the 
year  will  drop  off  from  the 
first-half  lev^  Fishbum  said. 

Genesee  &  Wyoming  Inc.,  a 
Greenwich.  Conn.-based  oper¬ 
ator  of  short-line  and  regional 
railroads,  built  a  marginal  in¬ 
crease  into  its  IT  budget  this 
year.  That’s  because  the  com¬ 
pany's  annual  revenue  is  pro¬ 
jected  to  grow  by  $20  million, 
and  IT  spending  is  pegged  to 
equal  2%  of  revenue,  said 
Mike  Meyers,  vice  president 
of  information  management 
and  technology  at  Genesee  & 
Wyoming.  Meyers  added  that 
he  doesn’t  expect  any  changes 
to  be  made  to  the  budget.  I 


FINALLY.  BUSIWESS 
SOLUTIONS  THAT 
WORK  WITH  EXISTING 
TECHNOLOCIES  AND 
NONEXISTENT  BUOCETS 

You  need  to  more  out  of  what  you  have.  We  have  just  the  thing:  solutions  based  on  our 
open  technology  platform.  SAP  NetWeaver."  Because  it’s  pr^onfigured  to  work  with  your  current 
IT  investments  -  and  it’s  fully  operable  with  .NET  and  J2dp  -  SAP  NetWeaver  reduces  the  need 
for  custom  integration.  That  lowers  your  total  cost  of  ownership  for  your  entire  IT  landscape 
and  gets  you  quicker  ROl.  Everything  a  CIO  wants  (and  a  CFO  didn’t  think  was  possible). 
Visit  sap-com/netweaver  or  call  800  880 1727  for  details. 

TNE  BEST-RUN  BUSINESSES  RUN  SAP 
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CRM  Vendor  Adds  Development  Hosting 


BY  MABC  L.  SONOINI 

CRM  software  vendor  Sales- 
foFce.com  Inc.  has  announced 
a  hosted  application  develop¬ 
ment  service  that  makes  Web 
services  technol<^  and  wide¬ 
ly  used  tools  like  Microsoft 
Corp.’s  Visual  Studio  .Net 
available  to  software  develop¬ 
ers  via  the  Internet. 

Salesforce.com  CEO  Marc 
Benioff  said  users  of  the 
Sfbrce  offering  will  also  be 
able  u>  access  databases,  a 
document  management  sys¬ 
tem  and  user  authentication 
services  without  having  to  in¬ 
vest  in  or  mainfajp  any  soft¬ 
ware  themselves.  San  Francis¬ 
co-based  Sale$force.com  will 
support  Sforce  users  with  the 
same  IT  infrastructure  that's 
used  to  run  its  hosted  online 
applications,  he  said. 

Sforce  can  be  used  to  build 
homegrown  systems  or  to  cus¬ 
tomize  Salesforce.com's  appli¬ 
cations  and  integrate  them 
with  third-party  products, 
Benioff  said  Monthly  fees  are 
SSO  per  user  and  $1  for  each 
megabyte  of  data  stored  at 
Salesforce.com*s  data  center, 
although  the  first  three  users 
and  10MB  are  free  for  a  year. 

Microsoft,  Sun  Micron- 
terns  Inc.  and  BEA  Systems 
Inc.  have  agreed  to  support 
Sforce  with  their  development 
tools,  and  Salesforcexom  said 
a  similar  deal  is  in  the  works 
with  Borland  Software  Coip. 
Sforce  also  incorporates  XML 
and  Web  services  standards 
like  the  Simple  Object  Access 
Protocol  and  the  Web  Services 
Description  Langu^e. 

Sforce  sounds  promising  to 
Sheldon  Tkatch,  a  senior  proj¬ 
ect  manager  at  Garrett  Avia¬ 
tion  Service  Centers,  a  Tempe, 
Ariz.-based  division  of  Gener¬ 
al  Electric  Ca  The  provider  of 
airplane  maintenance  and 
modification  services  uses 
Salesforce.com’s  applications, 
and  Tkatch  said  be  wants  to 
tie  them  to  Garrett's  Oracle 
customer  database. 

Currently,  linking  customer 
data  to  the  hosted  applications 
is  a  time-cqnsuming  process 
that  requires  end  users  at  Gar¬ 
rett  to  extract  the  information 


in  batches  or  reports  and  then 
enter  it  manually.  Doing  the 
necessary  integration  work  in- 
house  would  be  “technolc^- 


cally  prohibitive,"  Tkatch  said. 
But  that  process  looks  more 
feasible  with  Sforce,  he  added. 
Wendy  Close,  an  analyst  at 


Gartner  Inc.  in  Stamford. 
Conn.,  said  Sforce  targets  ap¬ 
plication  developers  with  the 
software-as-a-service  concept. 
The  service  will  most  likely 
appeal  to  large  companies  that 
need  more  ftmctionality  than 


Salesforce.com’s  aj^Ucatioos 
provide,  she  said. 

But  Close  added  that  she's 
not  sure  bow  much  buy-in 
Sforce  will  get  at  first,  outside 
of  companies  that  plan  to  use 
Salesforce.com's  applications.  I 


All  kinds  of  technology  for  all  kinds 
of  companies. 
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Larry’s  Grandstand  Play 


ORACLE'S  HOSTILE  TAKEOVER  BID  for 
PeopleSoft  has  sparked  a  flurry  of  me¬ 
dia  coverage  in  the  past  10  days  —  pre¬ 
dictably  so.  The  story  has  the  classic 
elements  of  a  made-for-TV  movie:  a 
dramatic  surprise  attack,  high-stakes  finance  with 
antitrust  overtones,  executive  power  struggles  and  a 
quirky  cast  of  combative  CEOs. 

But  the  undisputed 


star  of  this  show  has 
been  Oracle  CEO  Larry 
Eilisoo,  an  insatiable  at* 
tention-seeker  who  ob¬ 
sesses  over  the  tactics  of 
Japanese  feudal  warlords 
and  who  shopped  for  his 
fourth  wife  on  the  Oprah 
show  a  few  years  back. 

Now  he’s  shopping  for 
software  market  share 
and  ctistomer  body 
count  among  People- 
Soft’s  thousands  of  enterprise  users, 
who  play  the  sympathetic  but  large¬ 
ly  helpless  victims  in  this  drama. 

Why  victims?  Because  their  fates 
are  tied  to  what  could  become  a 
dead-end  software  platform. 

Larry  has  made  it  clear  he  has 
zero  interest  In  PeopleSoft's  portfo¬ 
lio  of  applications,  strategic  product 
road  maps  or  even  the  technology 
fueling  it  all  So.  if  he  sidesteps  the 
potential  antitrust  concerns  and 
kills  olT  one  of  his  main  competitors, 
development  of  new  PeopleSoft  ap¬ 
plications  will  halt.  And  the  in¬ 
evitable  upgrade  march  to  Oracle’s 
E-Business  Suite  software  will  begin. 

When  CIO  Jim  Prevo  of  Green 
Mountain  Coffee  Roaster  called  that 
prospect  "a  disaster"  [QuickLink 
38959]  and  p^icted  that  Oracle 
ownership  would  "destroy  much  of 
wdut  we  value  in  PeopleSoft,"  he  was 
speaking  for  many  of  his  peers.  At  a 
time  when  IT  organizations  are  try¬ 
ing  to  standardize  platforms,  simpli¬ 
fy  architectures  and  keep  budgets 
under  control  the  specter  of  a  forced 
migration  off  strategic  business  soft¬ 
ware  is  horrifying. 


But  what  does  Larry 
care?  On  the  customer  re¬ 
lationship  front,  Oracle 
has  a  spotty  record.  The 
vendor  has  feuded  pub¬ 
licly  with  its  own  user 
group,  and  two  years  ago. 
it  was  forced  by  vocifer¬ 
ous  customer  outrage  to 
abandon  a  controversial 
database  pricing  plaa 
When  news  of  the  hos¬ 
tile  bid  broke,  PeopleSoft 
CEO  Craig  Conway,  an 
Oracle  veteran,  sputtered  his  outrage 
over  "classic  Larry  bad  b^iavior." 
which  included  blabbing  to  the  me¬ 
dia  about  supposedly  secret  talks  the 
two  had  last  year  about  merging.  Just 
four  days  before  Larry  turned  the 
spotlight  on  himself,  Conway  had 
announced  a  pending  S1.7  billion  ac¬ 
quisition  of  J.D.  Edwards.  That  move 
was  intended  to  catapult  PeopleSoft 


over  Oracle,  making  it  the  No.  2 
business  software  vendor  behind 
SAP.  which  holds  54%  of  the  market. 

That  scenario  now  seems  unlikely. 
Even  if  Oracle's  bid  fizzles,  it  may 
undermine  PeopleSoft’s  future 
especially  in  the  eyes  of  potential 
customers.  As  Wall  Street  analysts 
noted,  the  bid  increases  the  percep¬ 
tion  that  PeopleSoft  is  in  trouble  and 
sows  confusion  and  doubt  among 
customers  and  prospects.  Checking 
out  a  vendor’s  financial  stability  is  a 
standard  business  practice  for  CIOs 
today,  and  PeopleSoft  just  got 
pushed  into  the  wobbly  red  zone. 

I  asked  an  expert  on  IT  sourcing 
what  PeopleSoft  customers  could  do 
to  protect  themselves  if  Oracle  has 
its  way.  and  unfortunately,  there  isn’t 
much.  Bart  Perkins,  a  managing 
partner  of  Leverage  Partners  and  a 
Computerworid  columnist,  said  that 
the  best  customer  protections  reside 
in  the  software  contract.  A  good  one 
will  include  explicit  performance 
metrics  and  service  guarantees,  de¬ 
tails  about  promised  functionality 
and  a  promise  of  product  support 
for  a  certain  number  of  years. 

But  product  plans  and  support  can 
blow  up  quickly  after  an  acquisition, 
so  that  piece  of  paper  may  be  worth¬ 
less  if  Larry’s  grandstand  play  suc¬ 
ceeds.  Here’s  hoping  it  doesn’t.  I 


PIMM  FOX 

Site  Monitors 
Get  Real 

WE  KNOW  the  value 
of  system  manage¬ 
ment  software  that 
monitors  the  performance 
and  availability  of  Web  sites. 
The  goal  b  to  keep  sites  and  robust  ap¬ 
plications  up  and  running  within  ser¬ 
vice  parameters  set  by  business  and  IT 
But  most  of  the  performance  tools 
provide  synthetic  measurements. 

They  score  a  site  or  application 
against  a  set  of  scripts  or  conditions 
created  by  the  IT  d^artment  to  mir¬ 
ror  users  and  transactions.  For  exam¬ 
ple.  if  a  customer  goes  to  a  travel  site 
and  types  in  a  query,  the  measurement 
software  will  acknowledge  that  the 
site  is  running  as  long  as  the  customer 
gets  an  answer.  But  there’s  no  way  of 
knowing  if  the  information  was  indeed 
what  the  customer  wanted. 

Until  now. 

Complementii^ 
traditional  system 
management  tech¬ 
nology  available 
from  the  likes  of 
Mercury  Interactive 
is  software  from  San 
Francisco-based 
TeaLeaf  Technology 
Inc.,  a  spin-off  from 
SAP.  Designed  to 
monitor  actual  site 
and  application  ex¬ 
perience.  IntegriTea  aggregates  infor¬ 
mation  about  the  application  and  de¬ 
termines  if  it's  returning  appropriate 
data.  Already  on  board  are  Priceline.¬ 
com.  Citizens  Bank  of  Rhode  Island 
and  Mary  Kay  Inc. 

Int^riTea  applies  a  filter  to  the  Web 
server  and  clones  information  when  it 
hits  the  server.  A  copy  of  each  request 
is  made  and  pushed  to  an  IntegriTea 
server,  which  generates  a  cookie  for 
each  session.  This  makes  it  possible  to 
follow  the  application  trail  of  the  user. 
The  results  are  assembled  visually  so 
you  can  record  the  page  a  visitor  was 
on.  his  IP  address,  the  ports,  the 
browser  type  —  almost  any  infonna- 
tioD  you’d  want  from  a  user  session. 

Event  modeling  permits  preset 
alerts,  so  if  say.  10  transactions  fail  to 
reach  completion  within  a  specific  pe¬ 
riod  of  time,  you  can  be  alerted.  Iden- 
tifyii^  problems  early  and  specifically 
also  makes  it  easier  to  effect  fixes. 
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COMPUTERWORLD 


Designs: 

Power  efficiency 
allows  for  smaller 
cooling  systems 
and  K^ter 
k  notebooks,  a 


^  Integrated  ^ 
'  Wireless:  ' 

BuHt-in  802.11b 
wireless  LAN 
capability  eliminates 
L  the  need  for  a 
^  adapter  cards.  ^ 


^  High  ^ 
Performance: 

Extremely 
responsive  to  the 
most  demanding 
business 
applications,  a 


Longer 
Battery  Life: 
Power-conserving 
technology 
enables  extended 
battery  life. 


intei.com 


The  Un wired  Office 
starts  inside. 


Introducing  Intel*  Centrino"  mobile  technology. 
The  new  generation  of  iaptop  technoiogy 
engineered  to  unwire  your  business. 

Until  now,  the  promise  of 
a  truly  wireless  workforce 
has  been  just  that;  a 
promise.  Intel  Centrino 
mobile  technology  delivers 
on  that  promise  with  unprecedented 
levels  of  mobility  for  your  users 
and  an  easier  deployment  for  you. 

Intel  is  working  with  other 
industry  leaders  to  make 
'ireless  networking  not  only 
reliable,  but  secure.  Intel  Centrino 
mobile  technology  is  compatible 
with  leading  wireless  infrastructure 
vendors.  And  Intel  continues  to 
work  closely  with  VeriSign, 

Check  Point  Software  and  other 
leading  technology  companies  to 
optimize  security  solutions. 

The  unwired  office  starts  inside. 


@  int^. 


Managing  and  Securing 
Mobiie  S  Wireless  Resources 

As  the  mobile  workforce  continues  to  grow,  IT  organizations 
turn  to  new  tools  that  let  them  support  a  dizzying  array  of  devices 


Interestingly,  both  vertical  enterprise  workers 
(such  as  healthcare,  education  and  financial 
services  staff)  and  horizontal  enterprise  work¬ 
ers  (such  as  consultants  and  sales  representa¬ 
tives)  will  soon  make  up  a  predominantly  mobile 
workforce.  According  to  research  firm  IDC,  more  than 
two-thirds  of  all  U.S.  employees  will  be  classified  as 
mobile  by  2006. 


Mobile  workers  will  travel  and 
work  in  various  private  and  public 
em  ironments.  such  as  campus  build 
ir^,  industrial  plants,  client  sites,  air 
port  executive  lounges,  hotel  rooms 
and  their  rcsi 
dcnces-  They  will 
seek  wired  and 
wireless  data  net 
work  access  over 
often  unreliable, 
unsecured  and 
bandwidth-constrained  connections 
to  maintain  their  mobile  productis  ity. 

Consequently,  the  enterprise  net 
work  will  be  extended  into  campus 
and  mobile  envin^nments  to  provide 
these  workers  seamless  access  to 


their  mission  critical  enterprise 
applications,  email,  personal  informa 
tion  managers  (PIMs).  corporate 
databases  and  other  mobile  resources. 
This  means  IT  managers  and  help 
desk  staff  will  haN-c  to  extend  their 
owTi  sersices  into  the  same  campus 
and  mobile  environments  to  support 
not  only  mc^ile  workers’  data  access 
needs,  but  also  a  proliferation  of 
mobile  and  wireless  dc>‘ice5. 

According  to  Framin^am,  Mass, 
based  IDC,  there  will  be  over  112  mil 
lion  enterprise  mobile  de\  ices  for  IT 
support  .staff  to  service  in  2004.  Many 
of  the  devices,  such  as  personal  digital 
assistants  (PDAs)  and  smart  phones, 
cost  up  to  S500. 


However,  due  primarily  to  the 
inefficient  extension  of  IT  .support  in 
mobile  environments,  the  total  co.st  of 
ownership  (TCO)  of  mobile  and 
wireless  resources  often  equals  five  to 
10  times  the  average  capital  cost  of  the 
devices  themselves.  For  example. 
Stamford,  Conn.,  research  firm 
Gartner  Inc.  estimates  the  TCO  for  a 
PDA  at  $2,700.  but  that  cost  soars  to 
S4,400  if  the  PDA  is  enabled  w  ith  a 
wireless  adapter. 

N’arious  mobile  resource  manage 
ment  (MRM)  solutions  address  the 
data  communication  and  computing 
needs  of  the  mobile  workforce  and 
relieve  related  support  pains.  MRM 
refers  to  the  “lifecycle  management" 
of  mobile,  wireless  and  remote 
devices  and  related  software,  content 
and  data,  with  a  primary  focus  on 
enterprise  applications.  MRM  solu 
tions  centralize  mobile  resource  man 
agement,  drive  increased  mobile 
workforce  productiv  ity  and  decrease 
the  TCO  for  mobile  resources. 

MRM  Martlet 

As  the  mobile  workforce  increases 
and  mobile  and  wireless  devices  pro 
liferate.  the  MRM  market  is  expected 
to  grow  at  a  proportionately  high 
rate.  IDC  estimates  it  will  top  $715 
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Doyouknow  where  your  sensitive 
company  information  is  ?  ITs 
everywhere  your  people  are  -because  it 
travels  with  them  in  mobile  devices  such 
as  laptops.  PDAs  and  smart  phones. 

How  many  such  devices  are  used  by 
yourstaff?'\\\ats  hard  to  say-  because 
many  are  personal  devices  in  which 
company  data  has  been  stored. 

Is  this  information  vulnerable  ? 
Certainly-  because  mobile  devices  are 
lostand  stolen  everyday. 

Mobile  devices  have  improved 
productivity,  but  they  have  also  led  to  a 
loss  of  control  over  one  of  your 
company's  mostvaluable 
assets-information.  What  was  once 
protected  by  network  security  is  now 
stored  on  these  highly-vulnerable 
devices. 

Fortunately,  you  can  regain  control  with 
CREDANT  Mobile  Guardian  from 
CREDANTTECHNOLOGIES.  the  premier 
provider  of  mobile  security  software. 
CREDANT  Mobile  Guardian  detects, 
secures  and  manages  laptops,  PDAs 
and  smart  phones-and  the  thousands 
of  people  in  your  company  who 
potentially  use  these  devices. 

CREDANT  Mobile  Guardian  represente 
the  most  comprehensive  platform  for 
filling  the  dangerous  security  gap 
created  by  mobile  devices.  It  does  this 
by  focusing  on.  and  protecting,  the 
information  stored  withinthem. 

By  performing  critical  security 
functions,  centralizing  policy 
management  and  ensuring  ongoing 
compliance  to  corporate  security 
policies,  CREDANT  Mobile  Guardian 
lets  you  unleash  the  power  of  mobility  - 
without  relinquishing  control. 

Goto  www.credantcom  for  more 
informatioa  end  a  schedule  of 
product  webinars. 

CREtJANT 

8v  nuibite.  Rr  fpiurv 

T:  972-458-5400 
T:  1-866-CREDANT 
F:  972-458-5454 
info@CREDANT.com 
www.CREDANT.com 


Shield  sensitive 
cempanyinfepmetien 
fpeniexpesiipe 
aii]fwhepe,aiiytinie. 
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million  in  rc\'cnues  by  2006,  a  42.6% 
compound  annual  growth  rate  over 
S121  3  million  in  2001.  Similarly, 
Gartner  forecasts  a  fi\e  )ear  growth 
rate  of  40‘\'  in  MRM  market  rev 
enues,  from  SI  35  million  in  2000  to 
S750  million  in  2005. 

MRM  Solutions 

MRM  solutions  implement  pnxl 
uct  lifecycle  management  and  help  IT 
control  and  cenrralire  the  monitor 
ing,  recording,  installing,  configuring 
and  upgrading  of  mobile,  wireless 
and  remote  device  systems,  opera 
tional  sofc\\'arc  and  mission  critical 
applications.  The  primary  MRM  fea 
tures  arc  systems  management,  soft 
ware  management,  data  management, 
sccurit)’  management  and  centralized 
administration. 

MRM  solution  architecture 
includes  a  ser\'er.  a  management  con 
sole,  a  proxy  scr\  icc  and  a  dev  ice 
client.  The  MRM  platform  can  be 
integrated  with  legacy  management 
systems  like  authentication  .servers 
(c-g-  RADIUS),  user  directory  servers 
(e.g.  LDAP)  and  desktop  manage 
ment  platforms  (such  as  Microsoft’s 
Systems  Management  Server,  or 
SMS).  Figure  1  shows  a  typical  MRM 
architecture,  this  one  from  Credant 
Tcchnologie.s’  CREDANT  Mobile 
Guardian  (CMC)  system  diagram. 

MRM  Venilors 

As  Figure  2  shows.  MRM  vendors 
coasist  of  heritage  desktop  manage 
ment  (e-g  Novell  or  Tivoli),  remote 
control  (e.g  Altiris  or  XcelleNet)  and 
database  synchronization  (e.g. 
Synchrologic  or  Sybase)  solution 


providers — collectively  known  as 
“mobile  dev  ice  management’’  vendors 
— in  addition  to  mobile  device  sccuri 
ty  vendors,  such  as  Wavclink  and 
Senforcc  Technologies. 

Most  MRM  vendors  have  extend 
ed  their  heritage  product  features  to 
provide  end-to  end  MRM  solutions, 
including  security  features.  These 
extended  MRM  features  arc  added  to 
vendors'  product  suites  through 
internal  research  and  development, 
cross-vendw  licensing  and  merger 
and- acquisition  strategies.  For  exam¬ 
ple,  Novell,  a  heritage  desktop  man 


agement  vendor,  acquired  Callisto,  a 
heritage  remote  control  vendor,  to 
extend  Novell's  ZENworks  product 
functionality. 

Systems  Management 

Systems  management  functions 
allow  IT  support  staff  to  deploy,  man¬ 
age  and  troubleshoot  mobile  and 
wireless  systems.  Key  systems  man¬ 
agement  functions  include  asset  man 
agement.  operating  .systems  migra 
tion  and  license  management. 

•  Asset  management.  Asset 
management  functions  enable  the 
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monitoring,  cracking  and  a'pi'>rTing  of 
mobile  and  \N'irclcss  hardware  and 
soft\\are.  The  data  is  stored  in  Open 
Database  Connectivity  (ODBC) 
compliant  data  sources,  such  a.s 
Microsoft  SQL  Ser\cr.  for  the  purpjos 
es  of  license  management,  software 
deployment  and  TCO  management. 

•  Operating  system  migration. 
Operating  system  migration  provides 
a  pre  migration  as,scssment  of  the 
user's  software  and  hardware  land 
scape,  including  a  snapshot  of  the 
computer  personality  setting.  Post 
migration  status  repiirting  and  sccu 
rity  patching  arc  also  used  after  the 
installation  is  complete  and  the  per 


Sitnalit)’  settings  are  rotored.  Most 
current  operating  system  migrations 
in\'ol\  c  upgrades  of  Windows  9.\  NT 
to  W’indows  2(.X'0  XR 

•  License  management.  License 
management  functions  include  the 
auditing  of  user  de\ices  to  determine 
the  status  of  their  sisftware  licenses. 
Sisftware  usage  information  is  uscM  to 
determine  the  number  and  type  of 
applications,  as  well  as  redundant 
and  unused  software  licenses. 
Additionally,  software  license  con 
tracts  can  be  managed  with  built  in 
notification  policies  in  cases  in  which 
liccn,sing  amounts  have  been  exceed 
cd,  as  often  happens. 


Software  Management 

Software  management  functions 
allow  IT  support  staff  to  pro\  idc  pisl 
icy  based  dcplo)'ment.  management, 
troubleshooting  and  upgrade  of 
mobile  and  wireios  operating  soft 
ware  and  mission  critical  applied 
tions.  Key  software  management 
functions  include  software  installa 
tion  and  updatev  configuration  and 
msubleshooting. 

•  installation  and  updates 
Stiftw  are  installation  and  updates  can 
be  planned  bast'd  on  asset  mamige 
ment  information  and  user  pnsfilcs 
Queries  can  be  used  to  group  misbiJe 
and  wireless,  devices  that  contain 


MRMVMors 

MRM  Vendor 

Web  Site 

MRM  Heritage 

Aedicr  Systems 

www.aethcrsystcins.com 

Data  SynchronizaDon 

AirPrism 

wwwjirpTism.com 

Remote  Man^ment 

Akiris 

wwwjltiris.com 

Remote  Management 

BhicfiFe  Secuiiry  Technologies 

w-ww-bluefircsccurity-com 

Detice  Security 

Cicdant  Techni^ogies 

www.crcdant.c£Mn 

Device  Security 

Extended  Systems 

www.exccndcclsystems.com 

Data  Synchronization 

IBM  Tivdi 

wwwibotaxnAofcware/tivob 

Desktop  Marugement 

ManageSdt 

wwwjnani^esoft.eom 

Desktop  Mam^ement 

Marimba 

www.inaiiinba.ccHn 

Desktop  Management 

Mobik  Autotnackm 

www.mofaileautomaDon.com 

Remote  Managemeot 

Novad^ 

wwwjiovadigm.com 

Remote  Management 

Novdl 

www.noveILcom 

Remote  Management 

ON  Technology 

www.CHi.com 

Deskte^  Management 

Pumatech 

www.pumacech.com 

Dau  SyndutHuzanon 

Rappoft  Tecfancdogics 

www.rafqxHCtcchr>ok)gies.com 

Remote  Management 

Senforce  Technedogies 

wwwjenforceemn 

Dc\ice  Security 

Sybase 

www.syfaase.com 

Data  Synchronization 

Syachrologk 

www.synchFdogic.com 

Data  SynchrcHiizaDon 

Targus 

www.taigus.com 

De\ice  Security 

Vauhus 

wwwyaulcus.com 

Device  Security 

Wavdink 

wwwwavelink.com 

Device  Security 

^foelkNet 

ww>^’jcceilenet.com 

Remote  Management 

Source:  MofadcTiax 

Primary  MRM  Product 

Aether  ScouiSync 
The  AirPrism  Suite 
Client  Management  Suite 
Bluefire  Enterprise  Manager 
CREDANT  Mobile  Guardian 
XTNDConnect  Sener 
Tivoli 

ManageSoft  6.S 
Desktep/Mobile  Management 
Mobile  Lifecycle  Management  Suite 
Radia 

ZENwwks  for  Handhelds 
ON  iCommand 
Enterprise  Intellisync 
Rapport  4.0 
Senforce  Shield 

i' Anywhere  m  Business  Platform 
SyiKhrologic  Mobile  Suite 
Targus  DEFCON  MDP 
N’aultus  Mobile  rtadorm 
VS'avelink  Aialanche 
.\faria 
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newly  installed  sofnvarc  or  require 
software  upgrades,  and  automatic 
installations  can  be  scheduled-  For 
example.  Rapport  Technologies’ 
Rapport  4.0  can  update  the  client 
down  to  the  BIO.S  le^el  —  a  new  level 
of  update  capability. 

•  Configuration.  Devices  can  be 
configured  to  ensure  a  standardized 
and  authorized  deployment  of  soft 
u'are  and  to  eliminate  employee 
installed  applications  and  related 
rogue  applications.  Device  burtons, 
menus  and  power  settings  can  also  be 
configured. 

•  Troubleshooting. 
Troubleshooting  functions  include 
the  monitoring  of  installed  software, 
the  detection  of  missing  or  corrupted 
files  and  the  distribution  of  software 
patches  and  replacement  of  missing 
files — all  completed  in  the  back 
ground  of  a  communication  session. 

Data  Management 

Data  management  functions  allow 
IT  sup^rt  staff  to  ensure  reliable 
data  transmission  across  various  data 
networks,  such  as  wired  and  wireless 
LANs  and  WANs  and  the  Internet. 
Key  data  management  functions 
include  databa.se  synchronization, 
bandwidth  management,  data  com¬ 
pression.  checkpoint  restart  and 
byte-level  differencing. 

•  Database  synchronization. 
This  allow’s  for  wired  and  wireless 
synchronization  of  mission-critical 
data  and  applications,  such  as  PIMs 
and  email  and  includes  backup-and- 
rcstore  functionality. 

•  Bandwidth  management. 
Bandwidth  management  functionali¬ 


ty  enables  background  diagnostic 
analyses,  software  upgrades  and  file 
transfer  by  allocating  limits  to  the 
amount  of  bandw  idth  used  during  a 
communication  session. 

•  Data  compression.  This  is 
automatically  implemented  based  on 
the  bandwidth  limitations  of  the 
wired  or  wireless  connection. 


As  a  significant 
number  of  verticai 
and  horizontai  enterprise 
workers  travei  and  work 
in  mobiie  environments, 
it  support  staff  wiii 
have  to  provide  them 
with  seamiess,  secure 
mission-criticai  data 
and  applications. 


•  Checkpoint  restart. 
Checkpoint  restart  enables  inter¬ 
rupted  data  transmissions  to  resume 
at  the  point  of  interruption  when  a 
wireless  connection  is  lost. 

•  Byte-levcl  differencing.  Tliis 
differencing  enables  changes  and 
ujxlates  only  (as  opposed  to  entire 
files)  to  be  transmitted  during  file 
distribution 

Security  MaiageiiKirt 

Security  management  functions 
allow'  IT  support  staff  to  implement 


data,  user,  device  and  network  securi¬ 
ty  based  on  mobile  and  wireless  secu¬ 
rity  policies.  Wherever  possible,  the 
sccurit)-  policies  should  be  integrated 
with  wired  security  policies  and 
should  be  designed  to  adapt  to  chang¬ 
ing  environments.  Securit)'  manage 
ment  functions  include  data  encryp 
tion,  user  authentication,  location 
aware  management,  theft  protection 
and  other  popular  desktop  PC  securi¬ 
ty  solutions- 

•  Data  encryption.  Mission 
critical  data  is  protected  during 
transmission  usir^  HTTP  and  Secure 
Socket  Layer  (SSL)'based  encryption 
methods.  The  Advanced  Encryption 
Scheme  (AES),  a  U.S.  government 
approved  data  encryption  algorithm 
(up  to  256-bit  key  security),  w”!!!  soon 
replace  other  limited  encryption  algo 
richms  such  as  the  RC4  stream  cipher 
in  wireless  LAN  systems. 

•  User  authentication.  User 
information  stored  on  directory 
servers,  such  as  Microsoft  Active 
Directory,  can  be  used  to  grant  users 
access  to  mission-critical  applica¬ 
tions  and  data. 

•  Location'aware  manage¬ 
ment.  Dev'ice  security  solutions 
should  be  location-aware  and  auto 
matically  open  and  close  the  device’s 
adapter  ports,  based  on  the  changing 
environment,  the  user’s  service  pref¬ 
erences  and  the  security  policies. 

•  Theft  protection.  Biometric 
access  (eg.  fingerprint  reader), 
motion  sensors  and  power-on  pass¬ 
words  proiea  idle  and  unattended 
devices  from  potential  theft, 

•  Desktop  PC  security  solu¬ 
tions.  Popular  desktop  PC  security’ 
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solutions,  such  as  virtual  private  net 
works  (VPNs),  personal  firewalls  and 
anti  \  iru.s  softsN'are  applications,  can 
he  implemented  b)'  IT  organizations 
to  protect  the  mis.sion  critical  data 
and  applications  on  mobile  comput 
ing  des'ices. 

Centralized  Administration 

The  cenrralizc'd  administration  of 
tixlay’s  MRM  solutions  can  help  IT 
support  staff  efficiently  and  effccti\-e 
1\  eontnsl  the  management  of  mobile 
resources.  Centralized  administra 
tion  functions  include  console  man 
agement,  remote  control  and  legacy 
platform  integration. 

•  Console  management.  A  man 
agement  console  allows  IT  support 
staff  to  deploy,  manage  and  update 
systems,  software  and  data  from  a 
VV'eb  based  interface. 

•  Remote  control.  Remote  con 
trol  sc>ftwarc  enables  IT  support  staff 
to  vie^^•,  operate,  diagnose,  configure 
and  maintain  mobile  and  wireless 
dc\  ices  o\'er  the  Internet  or  a  wireless 
network  using  a  centralized  con.solc 
and  without  user  intervention.  The 
function  has  traditionally  been  used 
to  control  remote  machines,  such  as 
point  of'sale  terminals,  kiosks  and 
utilit)’  meters. 

•  Legacy  platform  integration. 
MRM  solutions  should  always  be 
integrated  with  desktop  mam^ement 
platforms  in  order  to  ensure  the  cen¬ 
tralized  and  consistent  policy'  based 
management  of  both  fixed  and 
mobile  enterprise  resources.  Legacy 
platforms  include  management 
serx'crs  (.some  examples  include 
Microsoft’s  SMS  and  Hewlett 


P.ickard  Co.’s  Open\'icw  Service 
Desk)  in  addition  to  directory  sen  ers 
such  as  LDAP  and  Microsoft’s  Actnc 
Director)’. 

Conclusion 

As  a  significant  number  of  vertical 
and  horizontal  enterprise  workers 
tra\’cl  and  work  in  mobile  cn\iron 
ments,  IT  support  staff  will  ha\'c  to 
pro\'ide  them  with  seamles-s.  reliable 
and  secure  mission  critical  applica 
tions  and  data.  Morco\'er.  IT  organi 
zations  will  be  faced  w  ith  the  chal 
Icnge  of  supporting  a  proliferation  of 
mobile  and  w  ireless  de\  ices.  remote 


terminals  and  nearly  endless  related 
operating  software. 

The  rapidly  expanding  unix  erse  of 
MRM  solutions,  which  include  .s)-s 
terns  management,  software  manage 
ment,  data  management,  security 
management  and  centralized  admin 
istration  features,  will  greatly  help 
enterprise  IT  organizations  efficient 
ly  procure,  deploy,  configure,  monitor, 
upgrade  and  secure  mi.s.sion'Critical 
mobile  resources.  The  MRM  soiu 
tions  will  efficiently  manage  and 
secure  mobile  resources,  resulting  in 
an  increa.se  in  mobile  worker  produc 
tixity  and  a  decrease  in  TCO.^ 


Ab^t  MobijeTrax 

MolNleTrax  LLC  is  a  Cupertino.  Calif.-I)ased  prafessianal  services 
firm  that  focuses  on  the  mobile  computinp  end  aireless  data  com¬ 
munications  markets.  MoMteTrax  provides  market  reseeroh  end 
consulting  services  regarding  the  enterprise  and  consumer  mar¬ 
kets.  The  MobileTrax  Enterprise  IT  Service  provides  vender-spon¬ 
sored  monthly  in-depth  reports  regarding  important  moUe  and 
wireless  topics,  including  "What  IT  Needs  to  Know,"  which  gives  IT 
groups  specific  rKommendations  on  whet  they  must  know  to  suc¬ 
ceed  in  mobile  and  wireless  deployments. 

MobileTrax  publishes  two  free  industry  newsletters.  "Inside 
Mobile"  provides  editorial  analysis  and  Insights  regardbig  impor¬ 
tant  topics  hi  mobile  and  wireless  and  is  pubKshed  on  the  first  and 
third  Mondays  of  the  month.  "Mobile  Letter"  covets  Insights 
regarding  new  products  end  services  and  is  published  on  the  sec¬ 
ond  and  fourth  Mondays  of  the  month.  For  more  infbrmatioo,  visit 
www.mol)iletrex.com  or  can  (650)  208-9366. 

MobileTrax  is  headed  by  J.  Gerry  Purdy,  Ph.D.,  a  globafiy  recog¬ 
nized  authority  on  mobile  computing  and  wireless  data  communi¬ 
cations.  Dr.  Purdy  is  also  a  General  Partner  at  DIamondhead 
ventures,  an  early-stage  venture  capital  firm. 
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:  An  IT  Support 
Staff  Perspective 

Many  enterprise  IT  support  staffs  aren’t  pre¬ 
pared  to  enforce  mobile  and  wireless  secu¬ 
rity  policies;  efficiently  provide  seamless 
access  to  mission-critical  applications  and  data;  and 
support  the  prohferarion  of  mobile  and  wireless  de¬ 
vices.  MRM  solutions  address  the  mobile  and  wireless 
“pains"  of  enterprise  IT  support  staffs,  as  demonstrated 
by  the  following  deployments. 

motely  man^  its  handheld  device 
us^,  licfnsii^  and  montwy  scams 
as  well  as  uj^rade  and  d'seributt  its 
misskn-czicical  dnniiT>^r<  and  coO' 
cent  m  the  mobile  wt^occe.  Af^ 
evaluating  several  solutians,  the  ami' 
pany  selected  Novell's  ZENweeks  for 
Handhelds  solution  to  address  ks 
molxle  and  wireless 'pains.* 

Novell  ZENwoclcs  for  Handhelds 
provides  auennated  management  of 
handheld  devices  to  increase  mofc^ 
wc^orce  piocfaictivicy  and  to  re- 
duccTCO.  ZENwmks  for  Handhelds 
provided  the  Sii  Leggitt  IT  suppewe 
staff  with  the  fcdknving  benefits: 

•  Ronott  mam^emeot  and  secu' 
fity  of  die  handheld  devices  tfaroi^ 
a  ceuzal  man^ement  coosede. 

»  Systems  mani^anent.  inchidij^ 
invencray  trackii^  software  license 
audking  and  upgrades;  and  system 
monory  memmsu^  and  upgrades. 


Tl  lilifrriilrtiThilfci 


Hie  increased  use  dl  handheld  de- 
vkxs  by  the  mot^  wwkforce  (xes' 
ents  various  challenges  to  IT  support 
staffs.  Hiey  must  man^  dieir  mobile 
and  wirdess  inventories  and  dqdoy. 
upgrade  and  mainratn  the  missKNi' 
critical  ^^dicaiimis  and  concent 
fmn  a  conceal  management  console. 

S.H.  leggrt  is  an  industrial  prod- 
ucts  manuffuturec.  The  con^any  is 
headquartered  in  San  Marcos,  Texas, 
and  provides  IP  gas  legulaKxs,  hose 
a-ssemhlies.  custom  brass  fitdi^  and 
plumbing  compements  fm-  the  LP  gas, 
RV  and  pluml^  maikets.  Namndly. 
the  compai^  en^do^  a  sigpificanr 
number  of  consultants  and  sales  rep- 
reso^icives,  mai^  of  wiioin  use 
handheld  devices. 

Sil  L^gicc  needed  an  MRM  sdu- 
tiem  that  could  centralize  and  CC' 


•  Software  mam^ement,  includ- 
ii%  the  om^uraciem  of  scandatdized 
bumms,  menus  and  setxii^  on  the 
mobile  devices  and  the  remote  ddiv- 
ery  of  n>F  f(vmaccedo(mttnc. 


MTBKtalklbiiiMllK 

Stortitini 

Medical  scafb  use  PDAs  to  n- 
ciieve.  store  aid  update  protected 
health  infonnation  (MI).  If  the 
handhelds  arckt  properly  m»na^ 
and  secured,  die  PHI  srored  on  them 
may  be  carelessly  exposed  or  lost. 

The  Health  Insunuxr  Portdiiljty 
and  Accountafailky  Act  (HIPf^A), 
which  was  enacted  to  enforce  the 


privacy  and  security  proceetton  of 
coDsunms'  electronically  ciansmk' 
^  medical  infcRtuation,  will  impact  ■ 
many  healthcare  service  providers 
and  their  dxlicy  to  ccanpetkively 
provide  nuuu^ed  and  secured  mobile 
and  wireless  services. 


ENTEGRIS  Health  is  a  heaMicaic 


tnanagrnicnr  tyeratioo.  The  con^' 
ny  is  based  in  Oklahoma  Qty  and  op¬ 
erates  various  medical  facilities 
throu^iouc  the 

INTEGRIS  Health  needed  an 
MRM  schition  that  would  fnablf  k 
to  oikwce  its  wireless  security  poli¬ 
cies,  support  various  handheki  de¬ 
vices  and  coD^y  with  HIPAA.  The 
axopony  selected  Ctedant  Teefanob' 
gies'  CREDANT  Mobile  Guanhan 
sohidoQ  to  address  its  mobile  and 


CeirouianMirtd  Cymim 


\v  ifL'Icss  "pi.iins.'' 

C  RtC^.W]  \lohik  tiLi.irJian 
(C  \It^)  aJd^l.’^sc''  scLiinty  issuln 
wich  cL'iurallv  managed  pidky  ad 
ministrarion  and  on  device  user  au 
thcncieacion  and  piiliey  entoreement 
t  \lt^  provided  INThCiRIS  IT  sup 
port  statl  thefolliwv  in^  benefits 

•  L  ser  and  role  based  mobile  and 
vv  ireless  security  j'Hvliey  enforcement 

•  L  sc-r  authentication  (eg.  PINs 
or  passwords),  including  sell  service 
resc-t  options  and  the  encryption 
data  residing  on  corporate  databases, 
and  removable  CompaetKlash  cards 

•  Automated  installation  and  up 
date  of  s»iftw  are  during  synehroniza 
tion  and  the  purging  of  PH  1 1  rom  lost 
or  stolen  mobile  dev  lees 


What  IT  Needs  to  Know 

As  the  mobile  workforce  grows  and  mt^ile  and  wireless  devices  jxO' 
liferate,  IT  suppcHt  staff  must  provide  for  the  adequate  and  efficient 
management  and  security  of  mobile  missitm'cricical  applications  and 
data.  Key  MRM  strategies  IT  support  staffers  need  know  are: 

•  Develop  and  implement  mc^ile  and  wireless  security  policies  that 
are  integrated  with  campus  and  wired  security  pedides  and  cover  the 
procurement,  deployment,  management  and  security  d  mot^e  devices 
and  mission 'Critical  ap^plications  and  data. 

•  Procure  and  deploy  an  MRM  solution  chat  enalides  system,  soft¬ 
ware,  data  and  security  management  through  use  of  a  central  manage¬ 
ment  console. 

•  Gsmpare  and  select  MRM  vendors  based  on  the  relative  strength  of 
their  heritage  features  (e  g.  synchronization  or  device  security)  as  wdl 
as  their  ability  to  provide  an  end-to-end  MRM  solutkm. 


Now  APC  makes  a  convincing  case  for  only  $99.99 

Charge,  organize  and  protect  your  mobile  devices  wherever  you  go. 


Are  you  tired  of  rurtning  out  of  power  and 
need  a  stylish  professional  carryirtg  case’  VAle 
have  exactly  what  you  need.  Constructed  of 
high  quality  materials,  the  APC  TravelPower 
Case  both  charges  and  protects  your  note¬ 
book  as  well  as  a  mobile  phone  and  hand 
held  organizer. 

The  integrated  power  system  helps  reduce 
weight  and  cord  clutter  eliminating  the  need 
to  carry  bulky  transformer  blocks  and  multi¬ 
ple  power  adapters.  The  convenient,  durable 
APC  TravelPower  Case,  with  specially 
designed  pockets,  is  the  ideal  choice  for  any 
mobile  professional. 


Six-sided  Notebook  Protection 


To  find  01 
today  ai 


e  of  the  piartners  listed  below. 


:  more,  visit  us  online 


Legendary  Reliability 


Enter  to  WIN  an  APC  TravelPower  “  Case  ( a  $99.99  Va  I  ue ! ) 

Visit  httpy/promo.apc.com  for  details.  Key  Code  k354v  •  Call  888-289-APCC  x4163  •  Fax  401-788-2797 
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wireless  “pains." 

CREDANT  Mobile  Guardian 
(CMG)  addresses  security  issues 
with  centrally  manned  policy  ad¬ 
ministration  and  (xi-device  user  au- 
thenticatiem  and  policy  enforcement. 
CMG  pro\ided  INTEGRIS  IT  sup¬ 
port  staff  the  following  benefits: 

•  User-  and  role-based  mobile  and 
wireless  security  policy  enfcHceroent. 

•  User  authentication  (e.g.  PINs 
or  passwords),  including  self-service 
reset  c^xions  and  the  encryption  of 
data  residing  cm  corporate  databases, 
and  removaUe  CompactFlash  cards. 

•  /^toraated  installation  and  up¬ 
date  d  software  durii^  synchroniza- 
tkm  and  the  purging  of  PHI  from  lost 
or  stc^n  mobile  devices. 


Now  APC  makes  a  convincing  case  for  only  $99.99 

Charge,  organize  and  protect  your  mobile  devices  wherever  you  go. 


Are  you  tir«d  of  runrtirtg  out  of  power  artd 
r>eed  a  stylish  professtortal  carrying  case?  We 
have  exa^  what  you  need.  Cortstructed  of 
high  quality  materials,  the  APC  TravelPower' 
Case  both  charges  and  protects  your  note¬ 
book  as  well  as  a  nwbile  phorte  and  hand¬ 
held  organizer. 

The  integrated  power  system  helps  reduce 
weight  and  cord  clutter  eliminatiftg  the  need 
to  carry  bulky  transformer  blocks  and  muKi- 
pie  power  adapters.  The  corrveniem.  durable 
APC  TravelPower  Case,  with  specially 
designed  pockets,  is  the  ideal  choice  for  any 
mobile  professional. 


Six-sided  Notebeek  PretectHM 

Shock  ibsorbing  padding  on  aH 
sides  lor  Superior  protection. 


SpeesaNy  Dasigaad  nicfcstt 
toceiB  smel  name  qiacldy  (I  the 
pocket  ngn  at  Sn  top  ol  S*  beg 
The  adiusteUe  (noble  phone 
pocket  his  atncsi  any  phone.  With 
space  for  aeper  vMvk.  a  busness 
card  holder  and  sahdiang  (ubter 
foei  your  moble  office  mi  nil 
tMOr  dian  ever  before 


To  find  out  more,  visit  us  onliive 
today  at  wnvw.apc.com  or  visit 
one  of  the  partners  listed  below. 


Chiigt  3  Davices  wMi  One 
TravaiPoMinr^AdepiBr 

The  APC  TnvdPamei* 


compUM 


Legendary  Reliability* 


Enter  to  WIN  an  APC  TravelPower  Case  ( a  $99.99  Va  I  ue ! ) 

Visit  htlpy/proiiio.apc.com  tat  details  Key  Code  k354y  •  Call  888-2S9-APCC  x4163  •  Fax  MI-7B8-Z797 
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MRM:  A  Mobile 
Worker  Perspective 

Mobile  sales  and  service  workers  need  real- 
time  access  to  enterprise  networks  and 
databases  to  provide  just-in-time  sales 
and  services  based  on  customers’  personal  attributes 
and  histories.  They  also  need  reliable  and  transparent 
troubleshooting  and  maintenance  support.  MRM  so¬ 
lutions  address  the  mobile  and  wireless  “pains”  of  mo¬ 
bile  workforces. 

lutM»  that  would  enaUe  its  mobile 
woikfotce  to  effideittly  gatho'  sales 
(xders  frcxn  the  held;  periodically 
synchronize  the  ommit  with  die  en- 
ter{xise  database  back  at  beadquat' 


Tulsa  Dental  needed  an 
MRM  solution  that  WMild 
enable  Ks  mobile  work¬ 
force  to  gather  sales 
orders  from  the  field, 
synchronize  with  the 
enterprise  database  and 
receive  updated  client 
information. 


TdsataUEMMI^rHSMHiBd 

IMMihsdKtsaB 

Mobile  sales  wtxkftxces  use  mo- 
and  wireless  devices  to  provide 
product  sales  and  related  value-added 
services.  These  toad  warrkxs  need  re¬ 
liable  and  frequently  updated  dimr 
infmnaticm  that  can  be  arress^  at 
regular  inttrvals  atad  customized  to 
drive  incremental  aitd  repeat  sales. 

Tulsa  Dental,  a  division  of 
DENTSPLY  Internationa?,  is  a  med¬ 
ical  equipment  su[^^kr.  The  compa- 
is  headquartered  in  Tulsa.  Okla., 
and  provides  aukxkmcic  products  to 
dentists.  Its  field  sales  tcfxcsenta' 
tives  sell  directly  to  denrista  Their 
broad  line  of  offerii^  includes  edu- 
catumal  course  enrollment,  ptodua 
literature,  dental  su|^dies  and  equip¬ 
ment  fOT  dentists’  offices. 

Tulsa  Dental  needed  an  MRM  sty 


ters;  and  receive  updated  jxoduct, 
service  and  client  infonnatkML  The 
company  selected  Synchrologic's 
Mobile  Suke  solution  to  address  its 
mobile  and  wirdess  ''pains.' 

Synchrologic  Mobile  Suite  helps 
companies  lower  the  total  cost  of 
ownersh^  of  mobile  devices  while  si¬ 
multaneously  providii^  cootrdled 
access  to  dte  mission-cntical  infor¬ 
mation  needed  by  workers  stay 
|xoductn^  in  mobile  environments. 
Syncbzckigic  Mobile  Suite  provided 
the  Tulsa  Dental  mobile  wnkforce 
with  the  fdlowing  benefits: 

•  Periodic  Off  iimnediatenansmis- 
skm  and  retrieval  of  missioD-ccicical 
customer  informancm  throi^  syn- 
chraiizatian  functkms. 

•  Cucirat  customer  informatioQ. 
indudir^  sales  histories  and  product 
and  literature  orders. 

•  Value-added  service  c^»l^- 
ties.  such  as  educational  course  en¬ 
rollment  and  mobile  credit  card 
biliii^ 

rfmilt  ■wMCt.  nlMM 

■wHiHliMtCwtiwirSinict 

Mobile  service  workforces  require 
updated  produa  or  service  infocma- 
bon  in  mder  to  {xovide  the  si^Ktior 
customer  service  required  by  ento’- 
ptisesseddi^mcoii^eteiDthechal' 
losing  economy  that  has  fadd  sway 
for  the  past  diree  years.  Therefore. 
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Authentic. 


Authenticator. 


these  mobile  professionals  need  to  re- 
theve  updated  service  policies,  docu' 
mentation  and  ftxms  in  real'time  if 
they  are  to  respond  as  quickly  and  aC' 
curately  as  possible  to  their  cus' 
tomers'  questions,  concerns  and 
needs  while  in  mobile  environments. 

Federated  Insurance  is  a  mutual 
property  and  casualty  insurance 
provider.  The  company  is  headquar- 
tered  in  Owatonna,  Minn.,  and  spe¬ 
cializes  in  business  insurance  for  a 
wide  variety  of  vertical  markets.  All 
told,  the  company  employs  more  than 
200  field  mariceting  and  service 
staffers,  who  provide  in-person  poli¬ 
cy  sales,  loss  prevention  education 
and  claims  resolu  tion. 

Federated  Insurance  needed  an 
MRM  solutiOT  that  would  enable  its 
moUle  woikforce  to  efficiently  ac¬ 
cess  the  corporate  intranet  and 
download  updated  pdicies,  forms, 
contracts  and  ocher  mission-critical 
content.  After  evaluatii^  a  broad 
cross-section  of  potential  solutions, 


the  company  selected  XcelleNec's 
Afaria  solution  to  address  its  mobile 
and  wireless '‘pains.’ 

XcelleNet  Afaria  [xovides  mobile 
and  wireless  systems  and  software 
management  functions  that  bring  not 
cmly  greater  efhciency,  but  also  in¬ 
creased  productivity  and  significant' 
ly  improved  user  satMaetkm.  Afaria 
provided  the  Federated  Insurance 
mobile  workforce  benefits  chat  in¬ 
cluded  the  foUowir^ 

•  Rapid  access  to  mission-aicical 
documents  and  applications  usii^  the 
same  Web-based  intranet  interface 
that'susedby  desktop  PC  users. 

•  Autemated,  seamless  and  efB- 
cient  updates  of  misskm-cricical  doc¬ 
uments  and  strftware  a^^slkations  us- 
ii^  stxdt  cools  as  byte-level  differenc¬ 
ing  and  checkpoint-restart  functkms. 

•  Automated  Web-based  trou¬ 
bleshooting,  includii^  the  back¬ 
ground  reportii^,  repair  and  replace¬ 
ment  of  any  files  that  are  (xxrupted 
or  missing. 


^iwaMctorowTw 


Targus  offers  a  complete 
line  of  security  solutions  for 
today's  mobile  workforce. 

(714)  765-5555  x279 

www.targus.com 
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What  Mobile  Workers  Need  to  Know 


Mobile  workers  must  be  able 
to  access  mission-critical  appli 
cations,  content  and  data  to 
maintain  their  sales  productivity 
and  to  ensure  superior  customer 
sales  and  ser\’ice.  Key  MRM 
strategies  mobile  workers  need 
to  know  are; 

•  Access  mission- critical  ap¬ 
plication.  content  and  data  with 
a  Web-based  iriterface  that  is  in¬ 
tegrated  with  and  similar  to  their 


desktop  management  infrastruc¬ 
ture  and  interfaces. 

•  Retrieve  only  the  updates  or 
changes  in  mission-critical  docu 
ments  or  content  throL^h  effi¬ 
cient  data  management  func¬ 
tions.  such  as  checkpoint-restart 
and  byte-le\'el  differencing. 

•  Troubleshoot  and  repair  mo¬ 
bile  de\ice  systems  transparently 
through  background  monitoring 
and  maintenance  functions. 
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Don’t  make  me  come  over  there. 


Remotely  manage  your  mobile  users  witbaut  nuking  a  scene. 


That's  right,  you’re  not  a  bellhop,  or  an  IT  concierge  for  that  matter.  With  Altiris. 
you’re  the  architea  of  better  systems  management  everywhere.  Altiris  offers  the 
most  complete  line  of  lifecycle  management  solutions  from  touch-less  migration 
and  deployment  to  retirenwnt,  giving  you  a  360  degree  view  of  all  your  IT  assets. 
Along  the  way  we  automate  vulnerability  assessment  and  patch  management 
software  delivery  and  desired-state  management  and  backup  and  recovery.  AH  of 
which  saves  you  from  end-user  visits  and  mindless  lo-tech  chitchat  So  download 
our  free  evaluation  software  today. 
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altiris’ 
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It's  true.  Since  it  was  introduced, 
ORiNOCO  has  been  installed  in 


www.mictOMrehouse.i 
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'^WIRllCSS  NCTWOKKS 
Take  your  network  further 


Insist  PCConiectkin  micro^warehouse 


www.cdw.com  www.Kisight.coni  vvww.pcconnection.ccim 

800.838.4239  800.467.4448  888.213.0607 


example  of  how  our  complete  line 
of  high-performance  networking 
more  companies  than  any  other  ^  solutions  is  helping  companies  of  all 

wireless  LAN.  The  reason  is  simple:  sizes  extend  their  wired 

ORiNOCO  wireless  LANS  work.  Coi/O  networks — both  inside 

They're  built  to  last,  and  have  a  JOlfG  the  office  and  between 

Buy  an  OftiMOCO  AP-tOOb  and  save  S25 

migration  path  to  future  standards  on  e/ie  omnocoAP^  iig  upgrade  kh.  buildings.  Discover  what  the  rest  of 

for  investment  protection.  Now  offer  good  undi  September  31. 2003.  Abo  aireadv  knows  To  buv 

_  ,  _  .  shovim:  OftiNOCO a^  ComboCard.  ’  ’ 

part  of  Proxim,  ORiNOCO  is  the  Proxim  products — including  the 

wireless  LAN  licensed  by  more  OEM's  and  computer  new  ORiNOCO  a/b/g  ComboCard — just  go  to  any  one 
manufacturers  than  any  other.  And  just  one  more  of  the  Proxim  dealers  listed  be|ow. 


www.comDuterwortd  com 
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Real'time  monitoring  can  also  be  a 
boon  in  fraud  detection.  An  online 
music  retailer  was  able  to  watch  for 
instances  of  fictitious  credit  card  gen¬ 
eration  via  overseas  IP  addresses.  The 
software  foiled  an  attempt  to  ping  the 
server  with  randomized  credit  card 
numbers  by  checking  failed  entries 
within  a  three-hour  time  period. 

Yet  another  use  for  this  technology 
is  monitoring  low-volume,  high-doUar 
business-to-buslness  transactions  to 
ensure  that  customers  are  always  get¬ 
ting  the  infonnatioo  they  want.  A 
manufacturer  of  drill  presses  is  using 
it  to  keep  watch  on  inventory,  delivery 
dates  and  suborders  for  components. 

TVaditional  monitoring  software, 
akin  to  a  closed-circuit  TV  camera,  is 
still  necessary,  but  it's  no  replacement 
for  having  a  live  guard  keeping  watch. 
And  more  important,  one  who  takes 
notes  you  can  act  upon.  I 

DAVID  MOSCHELLA 

rr  Mature? 
Think 

Has  the  it  industry 
lost  faiith  in  itself?  In 
April,  Larry  Ellison 
told  The  Wall  Street  Journal 
that  the  computer  industry  “is 
as  large  as  it’s  going  to  be."  Google’s 
Eric  Schmidt  and  others  are  making 
comparisons  to  historical  market  bub¬ 
bles  involving  canals  and  railroads, 
which  were  followed  by  relatively 
humdrum  periods.  Perhaps  most  ag¬ 
gressively.  in  a  controversial  Harvard 
Business  Review  article,  editor  at  large 
Nicholas  G.  Carr  argues  that  IT  does¬ 
n't  even  matter  anymore,  and  that  it’s 
rapidly  Ictsing  its  ability  to  deliver 
competitive  and  strategic  advantage. 

This  type  of  pessimism  has  emerged 
during  every  prolonged  IT  market 
downturn.  For  example,  in  the  late 
1980s,  when  the  U3.  economy  seemed 
to  have  lost  its  edge.  IT  got  much  of 
the  blame.  I  remember  meeting  with 
senior  executives  at  IBM,  who  were 
pondering  a  study  from  a  large  man¬ 
agement  consulting  firm  that  had  con¬ 
cluded  that  IT  really  wasn’t  such  a 
great  business  to  be  in  and  that  IBM 
should  prepare  itself  for  a  low-growth 
and  low-profit  future. 

But  it’s  been  more  than  three  years 
since  the  collapse  of  the  Internet  bub¬ 
ble,  and  It's  time  for  all  of  us  to  put 
our  hair  shirts  back  in  the  closet  A 
practical  first  step  would  be  to  stop 


referring  to  the  IT  industry 
as  "mature."  which  Web¬ 
ster's  defines  as  "having 
completed  natural  gro^i^ 
and  development*  Does 
anyone  really  believe  that 
these  words  apply  to  our 
business? 

The  most  obvious  flaw  in 
this  surprisingly  widespread 
idea  is  its  total  lack  of  ^obal 
perspective.  The  US.,  with 
S%  of  the  world's  popula¬ 
tion,  accounts  for  some  40% 
of  the  global  IT  business. 

How  could  anyone  use  tbe 
wDtd  mature  to  describe  the  state  of 
IT  usage  in  India.  China.  Russia,  Brazil 
and  many  other  countries?  Indeed,  if 
someday  the  rest  of  the  worid  invests 
in  n*  at  even  half  the  current  per  capi¬ 
ta  rate  in  the  U.S..  tbe  global  IT  indus¬ 
try  would  more  than  triple. 

rU  ^ve  pessimists  the  benefit  of  tbe 


doubt  that  when  they  de¬ 
scribe  the  IT  industry  as 
mature,  they  are  really  just 
talking  about  the  U.S.  and 
perhaps  a  handful  of  other 
dc%-eloped  nations.  But 
even  here,  their  arguments 
can't  withstand  much 
scrutiny.  Consider  the  con¬ 
sumer  market,  where  radi¬ 
cal  changes  can  be  expect¬ 
ed  once  high-bandwidth 
Internet.  3G-style  wireless 
and  home  network  systems 
are  widely  in  place. 

Even  in  business,  maturi¬ 
ty  is  the  wrong  word.  Industry  re¬ 
searchers  say  rr  spending  now  ac¬ 
counts  for  7%  to  9%  of  the  U.S.  econo¬ 
my.  But  as  more  business  is  d^iized 
and  more  tasks  go  online,  is  it  really  so 
hard  to  imagine  that  in  seven  to  10 
years.  IT-based  activities  could  com¬ 
prise.  say.  15%  to  20%  of  overall  eco* 
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nomic  activity?  Such  a  shift  would  al¬ 
low  today's  U.S.  IT  business  to  more 
than  double.  And  mature  industries 
don't  double  every  seven  to  10  years. 

The  reality  is  that  IT  isn’t  just  a  sep¬ 
arate  economic  seaor  like  manufac¬ 
turing.  retail  or  insurance:  it’s  an  in¬ 
creasingly  essential  part  of  nearly 
every  industry.  It  also  remains  the  sin¬ 
gle  largest  source  of  business  innova¬ 
tion  and  competitive  advantage.  IBM's 
Sam  Palmisano  got  it  recently 
when  be  said  IT  spending  can  consis¬ 
tently  grow  from  roughly  1.8  to  23 
limes  the  rate  of  tbe  overall  economy. 
Over  time,  this  will  result  in  a  vast 
new  IT  landscape,  which  will  make  to¬ 
day's  "mature"  industry  look  primitive 
by  comparison.  I 


WMTMiniai? 
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More  Than  Techies 

AS  A  saKM  IT  execubve  (CIO). 

I  am  oonstartly  amazed  at  the 
cry  for  ^Msmess-^v^  IT  encu- 
th«s’(QuickLfA 38152]  Thafsbe* 
cause  my  experience  has  been  that 
whenflmanagefsattempltoexer- 
asebusanesssawy.theyarepoflte- 
fif  bul  firmly  jtiformed  by  word  01 
deed  that  (hey  are  just ‘technical 
people.' It  is  an  empty  cry  oHered 
by  people  of  Mle  insi^  and  less 
business  aofnea 
damn  0.  Wail  Jr. 

Norwich.  CbruL 


Fair  Trade 

THEMtnCLE'GroupToulsVer- 
montasOulsourdnoAllema- 
bve*[OiickLink  38196]  and  the  re¬ 
lated  bOK  on  New  Jeraey  iustrate 
the  self-cbsessKMi  with  which 
Amencanbusnessesandlegisla- 
torsvwwmlemaNxinaltradeingerr- 
eral  and  the  North  Amencan  Free 
Trade  Agreemertt  in  particular. 

The  batance  of  payments  in  (T 
hardware  and  sotiwwe  between 
theUS-andCanadaisoverwhelrn- 
ingly  in  favor  of  the  U.S.  Trade  be¬ 
tween  the  two  countries  In  Ihe  area 
ofrrsarveesBdramabcalysntal- 
er.  artd  the  balance  of  payments 
between  he  partes  is  somewhat 
moreequitaUe. 

Why  must  Canadians  suffer 
pinlive  US.  attitudes,  busmess 
pracbces  and  legsiation  whenever 


a  anal  part  of  the  CB^  Bows  the 
oVier  we/?  Must  you  have  al  of 
your  money  and  most  of  ours  loo? 

T.ftiyweldi 

Ottowo 


Regaining  Luster 

Thomas  HOFFiiM  and  Gay  H. 

Anhes  are  nghi  on  wdh  their 
Tamishedlmaoe'pncelQijck- 
Unk  38043].  IT  has  a  big  credUity 
profalsm  m  most  enterprises.  Com¬ 
bine  that  vwlh  ofishotino  and  a 
weak  economy,  and  the  IT  jobs  re¬ 
covery  may  be  fulher  off  than  most 
believe.  IT  smgmg  Its  own  praises  is 
definitely  part  of  the  sokMion.  but  so 
is  usino  IT  b  create  wlue  for  the 
enterproeandspeakavglhebus}- 
nessside'slanguagebcornmunr- 
cate  that  lolue.  Somewhere  along 
the  kne.  many  soialed  FT  profes¬ 
sionals  vpear  to  have  fotoollm 
that  ifs  d  aboU  managing  technol¬ 
ogy  for  the  good  of  the  enterproe. 
UMiKapoelnMn 
Oirretw,  J5  Researth  Center, 
Univerdty  of  North  Tfatos, 
Daflos 

iT«RMJ)8E  interesting  to  see 
wheher  or  not  companies  that 
have  IT  depertments  wdh  tarnished 
reputabons  have  an  active  proyed 
management  process  in  place  and 
a  proiecl  management  office  that  6 
backed  by  senior  management  Too 
many  tines,  fve  seen  project  man¬ 
agers  buied  nto  bed  budgets  and 


limeines  by  senior  managers.  The 
inewtably  leads  to  projects  that 
aren't  defiverod  on  tvne  or  wflhii 
budget 

Scott  Burgen 

Projeef  manager,  Atiania 


Don't  Forget  MOM 

IAHRATNatDBAPfOWTEOby 
your  artade  on  event-dnven  archi¬ 
tecture  (and  Gartner's  take  on  1 
but  that  ves  nothng  new).  The  arb- 
derEvent-dnwen  ArcMeclure 


HMaedforWideAdciptoa'OuGk- 
Unk 38332]  <pi«5  he  vnpression 
that  event-driven  archdedure  6 
somehingnewandthalfnidde- 
waro  packages  era  just  about  to 
start  to  support  it  n  earrtEL  On  the 
contrary,  sopheticaled  eveni  bro- 
kernghasbeenafeatureofmes- 
sage-onentedtTwkiewBfelleBEA 
Tmedo  or  ICR  (now  also  B£A) 
TopEndfordecade^ 

Oragf  Raoe 

Managing  partner,  Pardus, 
Zagreb.  Crooria 


Vendors  Should  Assess  Themselves  First 


AS  I  KAO  Patrick  Thhodeaj's 
interview  with  Juergen  Rattler. 
avicepresidentnHPsservicesck- 
vistori  [(AackLjnk  38328],  I  ooddnl 
hefp  but  smie  ai  he  headne.  "Step 
1:  fire  a  Consukant  HP  Exec  Says.' 
vhich  echoed  Rooter's  advice 
aboulthefirstsleptotaketfiadopi- 
ffig  the  OTHtemand  model.  I  hinK 
Roittef  s  more  kkefy  saying.  *ffire 
an  HP  consdlanL  S25.000.  HP 

wi  study  your  situafnn  in  order  to 
batter  help  HP  tel  you  how  HP  can 
help  you  -  for  more  money.*  In  my 
yearsasaCIO.IwBsateayssuepi- 
cious  of  this  pattern.  I  hink  a  more 
appeafeng  approach  (M  toast  in  he 
eyes  of  the  targeted  CIOs}  woukt  be 
tor  HP  to  tfivest  Its  own  tme  and  re¬ 
sources  to  make  that  assessment. 
Why  dvodd  the  customer  pay  to 
help  a  vendor  make  its  safes  p4dt7 
M  HP  truly  teefs  if  can  dUfererihate 


ilsell  based  on  the  strength  of  its 
"infelteduai  property  and  method- 
oiogws.*  It  should  kkewiM  see  that 
the  assassmem  process  B  an  ft- 
vestmeri  worth  mafong. 

Brace  Barnei 

President,  Botd  Vision  £XC 
Dublin.  Ohio 

COirUTEirWOmJ)  welcones 
comments  from  is  readers.  Utters 
<mII  be  edited  for  brevty  and  danty 
They  shod!  be  addres^  to  Janee 
EdK  toners  «llor.  Cornpulerworki 
PO  Box  9171 SOO  Okt  Connecticut 
Pah.  Franingham.  filass  0T7D1. 

Fax  (508)  079-4843 
E-fiwI:  toners9compulervfDifd.com. 
Inckxte  an  address  and  phone  man- 
ber  for  mnedate  verdicalion 

OFatiiOTteimone«Kand 
ohv  tapes,  go  to 


I  want 

affordable 
communications: 
local,  long  distance, 
and  Internet. 


Together.  From  one  company. 


Introducing  MCI  Advantage,  the  world's  first  truly  converged  voice  and 
data  service  It  gives  your  company  local  and  long  distance  calling  with 
Internet  services  on  one  glooal  IP  network.  Plus  easy  online  account 
management,  voicemail  control  features,  and  pay-as-you-go  flexibility 
wrth  a  minimal  upfront  investment.  In  other  words,  it's  what  every  CEO  and 
CIO  wants.  To  get  your  MCI  Advantage  now,  call  1 888  886  3844 
or  go  to  www.mci.com/go/proof 


- ^ 

MCI. 


I.  ROBUST  OBJECT  DATABASE 

I,  HIGH  PERFORMANCE  SQL 
MULTIDIMENSIONAL  ACCESS 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cache,  the  post-relational  database. 

What  makes  Cache  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


wave. 

More  than  just  a  database  system,  Cach^ 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cach^  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the  largest 
hospitals.  Cach^  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  -  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  million  users  in 
88  countries.  Cach^  is  -  -  • 
available  for  Windows, 

Open  VMS,  Linux  and 
major  UNIX  platforms.  Make  Appllcationi  Faster 


InterSystems  ^ 

^  CACHE 


Download  a  fijlly-funaioml  version  of  Cache  or  request  it  on  CD  for  free  at  \mm.lnterSvstems  romlhoa^lntinnni 
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Lining  Technology 
Up  with  Bigness 

Siki  Gitmta.  the  CEO  of  Managed  Ob¬ 
jects,  talks  about  her  company’s  focus 
on  making  IT  more  accountable  for 
the  success  of  the  business.  P^30 


FUTURE  WATCH 

Cairtchas  Eat  Spam 

Pn^grams  that  distinguish  be¬ 
tween  humans  and  machines 
could  help  block  spam  and  con¬ 
tribute  to  advances  in  areas  such 
as  artificial  intelligence.  Pags  32 


WEBSERVICES: 

INSIDE 


SECURITY  MANASER’S  JOURNAL 

Security  Swera  Reveals 
Access  Token  Violations 

Vince  Tuesday’s  after-hours  survey  of  physi¬ 
cal  security  uncovers  an  array  of  policy  vio¬ 
lations,  including  an  unguarded  access  token 
with  the  passnumber  written  on  it.  Page  33 


Here’s  how  two  eaily  adopters 
are  using  Web  services  for 
internal  integration  projects. 

By  Carol  Sliwa 


IrS  MOT  HARO  TO  FIND  companies 
that  have  dipped  their  toes  into 
the  water  to  eiq^lore  how  Web 
service  might  help  address  some 
of  their  nagging  integration  prob¬ 
lems.  But  few  have  launched  ma¬ 
jor  initiatives  of  the  scope  at  Eastman 
Chemical  Ca  and  MerrU  Lynch  &  Co. 

One  of  the  distinguishing  character¬ 
istics  that  separates  these  early  adopt¬ 
ers  hroro  the  mere  dabblers  is  the  sys¬ 
tematic  approach  they  take  to  building 
the  sort  of  servke-oriented  develop¬ 
ment  architecture  that  experts  say 
they’ll  need  to  realize  the  full  benefits 
of  Web  services.  Some  of  the  biggest 
challenges  they’ve  faced  so  (ar  have 
been  finding  the  right  tools  and  estab¬ 
lishing  best  practices  without  a  well- 
established  road  map. 

Eastman  Chemical 

EASTMAN  CHEMICAL,  a  Kingsport. 
Tenn.-based  maker  of  chemicals,  fibers 
and  plastics,  is  plotting  the  rollout  of  a 
service-oriented  architecture  across 
key  legacy  systems  to  give  users  more 
visibility  and  control  over  their  busi¬ 
ness  processes. 

To  do  that,  the  IT  department  is  tak¬ 
ing  stock  of  all  of  the  company's  appli¬ 
cation  servers  (which  run  on  ADC 


JOBS 


Windows  2000  and  Windows  NT),  as¬ 
sessing  what  the  applications  do.  strip¬ 
ping  off  the  user  interfaces  and  expos¬ 
ing  the  application  functions  as  ser¬ 
vices.  says  Carroll  Pleasant,  an  associ¬ 
ate  analyst  in  Eastman's  emerging  digi¬ 
tal  technolt^es  group. 

“Once  we're  done,  the  (users]  should 
be  the  ones  deciding  wdiat  the  business 
processes  will  be.  rather  than  having 
the  applications  determine  the  busi¬ 
ness  process  for  them.”  he  says. 

Like  a  number  of  other  companies, 
Eastman  got  started  with  Web  services 
by  focusing  on  a  key  project  that 
would  help  its  IT  department  learn 
about  the  new  technology.  Developers 
created  a  simple  read-only  Web  ser¬ 
vice  to  give  customers  access  to  tech¬ 
nical  data  in  its  product  catalog. 

The  product  catalog  Web  service, 
which  went  live  about  a  year  ago.  elim¬ 
inated  the  need  for  customers  to 
screen-scrape  data  from  Eastman's  site 
or  to  download  a  monolithic  catalog  to 
spreadsheets.  Customers  instead  can 
now  go  to  the  Web  site  and  make  a  re¬ 
quest  that  causes  the  system  to  send 
an  XML-based  message  using  SOAP 
over  HTTP  to  Eastman's  Saqqara  Sys¬ 
tems  Inc.  database.  The  latter  then 
does  the  data  retrieval  and  sends  back 
the  information  via  XML  and  SOAP. 

With  one  successful  project  under 
its  belt.  Eastman's  next  big  step  was 
tackling  an  internal  service  it 
calls  a  management  score  card.  The 
service  lets  the  company’s  top  ISO  ex¬ 
ecutives  access  financial,  manufactur¬ 
ing  and  other  data  from  several  dis- 
piarate  internal  and  external  systems 
for  competitive  analysis  purposes. 

Developers  used  Visual  Basic  6X) 
and  Microsoft's  SOAP  tool  kit  to  build 
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Anybody  who  gets  into  this  deeply 
■7  wi  find  very  quiddy  that  they  need 
a  tool  set  for  managing  services.  It's  as 
fundamental  as  running  your  data  center 
monitoring  tools. 


CAMOLL  PLEASANT.  ASSOCIATE  ANALYST.  EMEReiN6  OtGiTAL  TEOINOLOGIES  GROUP 


the  interfaces  to  its  data  warehouse 
and  other  back-ei>d  systems.  Pleasant 
notes  that,  in  hindsifjit,  the  r>ewer  and 
more  reliable  Visual  Studio  .Net  tool 
kit  —  which  Eastman  developers  now 
use  —  would  have  been  a  better 
choice,  .since  tt  generates  more  of  the 
low-level  plumbing  code.  Bur  the  team 
lacked  experence  with  it  at  the  time. 

To  tie  together  the  data.  Eastman  de¬ 
velopers  turned  to  lava-based  server 
software  from  New  York-based  Drop¬ 
lets  Inc  to  deliver  a  client  with  a  rich 
graphical  user  interface  that  “deploys 
like  a  Web  application,"  Pleasant  says. 
"The  user  just  clicks  on  a  shortcut  and 
points  to  the  application  running  on 
the  server.”  he  says. 

Not  everything  went  so  smoothly. 
Long  before  the  management  score 
card  went  live  last  December.  Eastman 
realized  it  would  have  to  figure  out 
bow  to  manage  its  growing  collection 
of  services  so  that  programmers 
wouldn’t  have  to  do  checks  to  make 
sure  all  the  services  are  running. 

”Anybody  w^o  gets  into  this  deeply 
will  find  very  quickly  that  they  need  a 
tool  set  for  managing  services,”  says 
Pleasant.  "It’s  as  fundamcnul  as  run¬ 
ning  your  data  center  monitoring 
tools.” 

Eastman  experimented  with  tools 
from  NextAxiom  Technology  Inc.  in 
Pleasanton.  CaliE.  and  webMethods 
Inc  in  Fairfax.  Va.,  to  create  a  Web  ser¬ 
vices  management  ”eagine”  that’s 
more  than  a  mere  registry  for  the  pub¬ 
lication  of  services  that  applications 
can  consume.  The  engine  also  needs  to 
manage  the  security  model  the  or¬ 
chestration  between  Web  services,  de¬ 
bugging  and  monitoring  of  the  ser¬ 
vices,  fail-over  capabilities,  caching 
and  data  transformation.  Pleasant  says. 

When  Pleasant  surveyed  the  product 
landscape,  be  found  a  variety  of  conAis- 
ing  choices  from  small  start-ups. 
"There’s  no  consensus  yet  as  to  exactly 
what  a  Web  service  management  tool 
should  do  or  what  services  should  re¬ 
side  there  vs.  the  application  server,”  he 
says.  "It’s  very  tou^  because  you  can't 
just  do  an  apples-to-apples  comparison 
between  these  guys.  Each  one  repre¬ 


sents  .some  fundamentally  different  ap¬ 
proach  as  to  how  you're  going  to  build 
the  service-oriented  architecture." 

Another  decision  Ea.stman  faced  was 
how  to  "chunk”  its  data  and  whether  to 
make  "little  calls  to  services  or  one  big 
one”  to  compensate  for  the  perfor- 
maiKe  hits  that  result  when  data  is 
transformed  into  and  out  of  XML, 
Pleasant  says. 

To  boost  performance.  Eastman  had 
to  learn  the  fine  points  of  caching  data 
so  that  multiple  requests  for  the  same 
infonnation  don't  trigger  individual 
calls  tQ  the  database  every  time. 

The  company  has  done  most  of  its 
work  without  help  of  high-priced  con¬ 
sultants,  although  NextAxiom  and  oth¬ 
er  vendors  have  assisted  with  East¬ 
man’s  near-term  focus  to  create  com¬ 
posite  applications  that  tie  together 
low-level  services  from  existing  legacy 
"application  silos"  and  present  the  data 
in  a  view  that  aligns  with  the  user's 
business  processes.  Microsoft’s  sup¬ 
port  for  Web  services  aiul  XML  will 
also  be  helpful  going  forward,  since 
Eastman  is  a  heavy  Microsoft  user. 

But  one  of  the  continuing  challenges 
Eastman  faces  is  the  dearth  of  role 
models,  since  few  have  done  what  it’s 
attempting  to  do. 

"It’s  gomg  to  take  a  long,  long  time 
for  everything  to  switch  over  to  Web 
services  and  a  service-oriented  archi¬ 
tecture."  Pleasant  says.  “Wc  see  the 
movement  going  on  with  almost  all  of 
our  vendors.  We’re  conTident  they’re 
going  this  route.  But  it  takes  time  to  gel 
there." 

Merrill  Lynch 

INTE6RATI0N  HEADACHES  drove  Merrill 
Lynch  to  turn  to  Web  services  about 
one  year  ago  as  a  cheaper  and  more  ef¬ 
ficient  alternative  to  the  middleware  it 
uses  to  enable  its  thou.sands  of  main¬ 
frame  applications  to  talk  to  its  middle- 
tier  and  Web-based  front-end  systems. 

The  challenge  confronting  the  New 
York-based  financial  services  company  ' 
is  far  more  expansive  than  most  com¬ 
panies  will  ever  encounter.  Merrill  I 
Lynch  has  23,000  ClCSprc^ams  run-  I 
I  nir^  on  its  mainframes,  and  it’s  very  ' 


difficult  to  integrate  those  programs 
with  Microsoft’s  -Net  development 
platform.  IBM’s  WebSphere  or  any  oth¬ 
er  platforms  or  tool  sets,  notes  fun 
Crew,  director  of  the  infrastructure 
and  data  services  group. 

Exposing  those  CICS  applications 
with  language-agnostic  Web  services 
interfaces  and  sending  data  using  in¬ 
teroperable  XML  held  great  appeal.  So 
Merrill  Lynch  created  iw  own  tool  set. 
called  X4ML,  to  help  its  mainframe 
programmers  build  Interfaces  and  run 
Web  services  svithoui  need  of  .XML, 
Java,  Visual  Basic  or  Web  services 
skills  and  without  ha>'ing  to  modify  the 
CICS  programs.  'TTierc’s  nothing  in 
the  marketplace  that’s  nearly  as  ad¬ 
vanced  as  what  we  built,”  says  Crew. 

The  tool  set.  which  the  firm  continu¬ 
ally  fine-tunes,  has  an  analyzer  compo¬ 
nent  that  looks  at  a  compiled  listing  of 
a  Cobol  program,  tries  to  figure  out  its 
I/O  and  automatically  produces  the 
Web  Services  Description  Language 
flics  that  represent  the  interface  and 
all  of  the  runtime  metadata,  says  Crew. 


X4ML  can  be  accessed  either 
through  HTTP  synchronously  or 
through  IBM’s  MQSeries  synchronous¬ 
ly  or  asynchronously,  says  Dave  Co¬ 
hen.  a  vice  president  in  Merrill  Lynch’s 
technology  architecture  group.  “TTiai’s 
important  for  helping  with  the  goal  of 
cost  reduction,”  he  notes. 

Venkat  Pillay,  a  vice  president  in  the 
infrastructure  and  data  services  group, 
says  his  team  was  apprehensive  about 
scalability  going  through  a  CICS  trans¬ 
action  gateway.  But  performance  test¬ 
ing  showed  that  TCP/IP  and  HTTP  lis¬ 
teners  in  CICS  provided  the  fastest, 
most  scalable  and  efficient  way  to  get 
into  CICS.  he  says. 

To  boost  performance.  Merrill  also 
wrote  its  own  XML  parser  to  run  in 
CICS,  since  the  off-the-shelf  Java- 
based  XML  parsers  were  too  slow,  says 
Mike  Card,  another  vice  president  in 
infrastructure  and  data  services. 

Card  says  the  old  system  drove 
about  19  transactions  per  second,  but 
using  X4ML  and  Web  services,  the  fig¬ 
ure  shot  to  239  per  second. 

Through  its  work,  Merrill  Lynch 
hopes  to  phase  out  many  of  its  CICS 


programs.  For  instance,  if  three  pro¬ 
grams  do  account  inquiries,  only  one 
Web  service  is  needed  to  expose  that 
function.  But  Crew  says  that’s  not  the 
uitimatc  objective.  The  goal  is  lower¬ 
ing  the  cost  of  running  the  business  by 
reusing  existing  resources.”  he  says. 

Crew  estimates  that  for  every  dollar 
spent  on  an  application,  90  cents  goes 
to  plumbing  code.  “Our  goal  Is  to  make 
sure  chat  90  cents  on  the  dollar  is 
spent  on  the  application  and  10  cents 
on  plumbing.  Web  services  1$  getting 
us  closer  to  that  point,"  he  says. 

Merrill  Lynch  IT  executives  often 
point  out  that  the  firm  cut  the  cost  of 
developing  an  investment  banking  ap¬ 
plication  from  $800,000  to  $30,000  by 
using  Web  services  instead  of  tradi¬ 
tional  development  methods.  Crew  at¬ 
tributes  the  differential  to  X4ML’5  abil¬ 
ity  to  eliminate  plumbii^  code. 

Cohen  .says  reusing  code  should  help 
to  reduce  the  turnaround  time  for  new 
projects,  which  often  depended  on  de¬ 
veloper  knowledge  of  lum  to  call  a 
particular  CICS  transaction  using  lega¬ 


cy  protocols.  Web  service  interfaces 
and  more  widely  accepted  program¬ 
ming  tools  will  case  the  process. 

So  far.  Merrill  Lynch  h^  used  X4ML 
in  more  than  20  applications  running 
in  production  and  several  more  in  de¬ 
velopment.  The  tool  has  also  been 
used  to  build  Web  services  inter&ces 
to  about  3S0  CICS  programs  during  the 
past  year,  according  to  Crew. 

The  company  has  created  an  X4ML 
directory  with  capabilities  similar  to 
the  UDDI  standa^  to  document  its 
Web  services,  but  it  plans  to  migrate  to 
UDDI  later  this  year. 

"Once  we  start  using  UDDI.  we  will 
see  the  benefit  of  application  reusabili¬ 
ty,"  says  Pillay.  “A  lot  more  people  will 
be  able  to  find  each  other’s  services 
and  reuse  the  code.” 

So  far.  all  of  Merrill  Lynch's  work 
with  Web  services  has  been  internal 
Crew  says  he  expects  it  to  stay  that 
way  for  at  least  the  near  term  because 
of  the  lack  of  security  standards.  But 
internal  Web  services  alone  can  have  a 
significant  impact  at  Merrill  Lynch. 

"What  a  huge  productivity  tool” 
says  Crew.  I 


Hour  goal  is  to  mate  sure  that  90 
cents  on  the  dollar  is  spent  on  the  ap¬ 
plication  and  10  cents  on  plumbing.  Wsb 
services  is  getting  us  closer  to  that  point 
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IT'S  TOUGH  ENOUGH  de¬ 
fending  the  IT  perimeter 
^inst  spyware,  viruses, 
worms  and  unauthorized 
intrusions.  But  no  matter 
bow  good  their  defenses 
are.  companies  still  risk 
getting  hurt  by  those  they 
trust  most:  remote  work¬ 
ers.  “If  anyone  wants  to 
attack,  all  they  have  to  do  is  drop  in  a 
Trojan  [horse]  and  wait  for  the  person 
to  log  in."  says  Dennis  Peasley.  informa¬ 
tion  security  officer  at  furniture  maker 
Herman  Miller  Inc.  in  Zeeland.  Mich. 

Personal  firewalls  help,  but  stand¬ 
alone  versions  don’t  always  protect  the 
corporate  LAN  adequately.  For  exam¬ 
ple.  Peasley  initially  installed  Zone- 
Alarm  from  San  Francisco-based  Zone 
Labs  Inc.  on  900  laptops.  But  the  dis¬ 
tributed  personal  firewall  installations 
were  difficult  to  monitor  and  maintain 
Peasley  now  uses  Zone  Labs’  newer, 
server-based  Integrity  software  to  cen¬ 
trally  manage  those  remote  personal 
firewalls.  “With  any  new  system  we  in¬ 
stall  the  main  cost  is  not  the  cost  of 


the  software,  but  the  cost  of  managing 
it."  he  says.  “Centralized  management 
cuts  those  costs." 

Stand-alone  personal  firewalls  don't 
work  well  for  corporate  LAN  access 
because  end  users  have  access  to  the 
software  and  tend  to  misconfigure  it 
or  shut  it  off  entirely,  and  administra¬ 
tors  face  problems  supporting  and 
installing  updates.  Because  the  update 
process  is  time-consuming,  adminis¬ 
trators  may  avoid  updates  altogether, 
leaving  unpatched  clients  open  to  new 
vulnerabilities. 

“I’ve  seen  personal  firewall  software 
that  was  individuaity  installed  on  sev¬ 
eral  large  computer  systems,  and  it  al¬ 
ways  becomes  a  mess,”  says  Kevin 
Beaver,  president  of  Principle  Logic 
LLC.  an  information  security  consult¬ 
ing  firm  in  Kennesaw.  Ga.  “Configura¬ 
tions  and  patches  were  inconsistent, 
and  the  administrators  spent  way  too 
much  time  on  the  'sneaker  net,’  going 
around  to  remedy  problems." 

The  best  centrally  managed  person¬ 
al  firewall  systems  won't  let  end  users  I 
disable  the  local  firewall  software  or  I 
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change  the  settings,  says  John  Pesca- 
tore,  an  analyst  at  Gartner  Inc.  in 
Stamford.  Conn.  “Users  will  just  say 
yes  to  everything,  so  you  have  to  cen¬ 
trally  manage  them  in  a  way  that  is  in¬ 
visible  to  the  client,"  he  says. 

Some  tools  also  integrate  with  anti¬ 
virus  and  virtual  private  network 
(VPN)  software.  Pescatore  says  two 
of  the  more  advanced  products  in  this 
arena.  Integrity  and  Sygate  Secure  En¬ 
terprise.  from  Sygate  Technologies  Inc. 


l^ersonal  lirewall  management  systems  allow 
centralized  control  andenforcement  of  security 
settings  for  remote  users.  By  Drew  Robb 


in  Fremont,  Calif,  include  a  back¬ 
end  server  that  can  act  as  a  gateway 
through  which  remote-user  access  can 
be  controlled  (see  diagram,  next  page). 

Peasley  uses  that  feature  on  his  In¬ 
tegrity  firewall  system.  The  end  user 
connects  to  the  Cisco  VPN  3030  con¬ 
centrator.  wdiich  directs  the  user  ses¬ 
sion  to  the  Integrity  server  to  authenti¬ 
cate  the  client,  checks  that  the  client's 
antivirus  software  is  up  to  date  and 
provides  any  necessary  updates  before 
allowing  access  to  the  netwoilL 

Vendors  of  related  security  products 
and  security  suites  have  jumped  in 
with  their  own  centrally  managed  fire¬ 
wall  offerings.  TTtese  typically  include 
tight  integration  with  sister  security 
products.  The  downside  is  that  they 
may  be  weaker  in  terms  of  manage¬ 
ment  capabilities,  integration  with  ex¬ 
isting  directory  structures,  reporting 
features  and  even  the  level  of  security 
they  offer  when  compared  with  dedi¬ 
cated  desktop  firewall  management 
products. 

Symantec  Corp.  in  Cupertino,  raltf, 
and  Network  Associates  Inc.  in  Santa 
Clara,  Calif.,  have  added  personal  fire¬ 
walls  to  their  corporate  antivirus  soft¬ 
ware.  as  have  VPN  vendors  such  as 
InfoExpress  Inc.  in  Mountain  View. 
CaliL,  and  Check  Point  Software  Tech¬ 
nologies  Ltd.  in  Redwood  City.  Calif. 
Sticking  with  one  vendor  generally 
makes  it  easier  to  int^rate  the  security 
products,  and  in  some  cases,  they  can 
be  managed  from  the  same  console. 

“If  you  are  a>mmitted  to  using  an 
antivirus  product,  see  if  they  also  have 
a  firewall  product  so  you  don't  have  to 
write  the  code  to  get  the  parts  to  talk 
to  each  other."  says  Roben  Hillery, 
principal  at  security  consulting  firm 
HawkSI  LLC  in  Hanover.  N.H.  Having 
a  single  vendor  for  both  products  also 


Personal  Firewall  Plays  Central  Role 


eliminates  finger^pointing.  he  says. 

Most  organizations  like  to  stick  with 
familiar  vendors  and  leverage  what 
they  already  have.  When  the  city  of  El 
Paso.  Texas,  needed  to  buy  1.000  fire* 
walls  as  part  of  its  Health  Insurance 
Portability  and  Accountability  Act 
compliance  program,  it  chose  Network 
Associates’  McAfee  Desktop  Firewall, 
in  part  because  the  city  already  used 
McAfee  VirusScan. 

*^e  can  manage  the  firewalls 
through  the  same  interface  as  the  an* 
tivirus  software,'*  says  Francisco  Sepul¬ 
veda.  the  city’s  information  security 
ofTicer.  This  makes  it  easy  to  operate 
and  to  deploy  updates." 

Although  this  ability  to  remotely  de¬ 
ploy  personal  firewall  policy  updates 
is  a  key  feature,  not  everyone  chooses 
to  make  use  of  iL  For  example,  a  West 
Coast  beverage  company  uses  Info- 
Express’  VPN  softw^  and  recently 
installed  that  company's  Cyber  Armor 
personal  firewall  on  500  new  laptops 
before  sending  them  out  into  the  field. 
The  company  uses  InfoExpress’  Cyber- 
Gatekeeper  to  enforce  policies,  but  it 
uses  uses  Novell  Inc.’s  ZENworks  to 
deploy  and  manage  them. 

"We  roll  out  policy  updates  through 
ZENworics,  not  InfoExpress'  manage¬ 
ment  server,  because  we  didn't  want  to 
have  multiple  products  out  there  up¬ 
dating  different  things  on  the  laptops," 
explains  the  company’s  networic  engi¬ 
neer,  who  declin^  to  be  identified. 

Most  personal  firewall  man^ment 
products  are  fairly  easy  to  use.  But  ad¬ 
ministrators  need  to  decide  not  iust 


what  policies  to  enforce  on  which  ma¬ 
chines.  but  also  how  to  apply  those 
policies  in  different  contexts.  For  ex¬ 
ample.  the  way  in  which  a  given  user 
connects  to  the  network  may  vary. 

"People  use  a  dockittg  sution  when 
in  the  office,  cable  or  DSL  [Digital  Sub¬ 
scriber  Line)  at  home,  wireless  hot 
spots  on  the  road,  and  dial-up  when 
nothing  else  is  available."  says  Pesca- 
tore.  "TTje  firewalls  need  different 
policies  for  each  of  these  situations." 

For  this  reason,  some  products  sup¬ 
port  multiple  sets  of  locatioo-^>ecific 
policies  on  a  single  laptop.  Wells’ 


Dairy  Inc.,  a  privately  held  $700  mil¬ 
lion  dairy  processor  in  Le  Mars,  Iowa, 
uses  that  feature  with  its  400  remote 
users  running  Sygate's  personal  fire¬ 
wall  software. 

"We  can  have  multiple  policies  per 
user,  per  machine,  per  location.  These 
fluidly  change  as  the  machine  moves 
from  location  to  location,"  says  net¬ 
work  architect  Jim  ICirby. 

Even  companies  with  a  small  group 
of  remote  users  will  benefit  from  cen¬ 
tralized  management,  Kirby  says,  since 
administering  firewalls  on  even  a  small 
number  of  remote  systems  is  cumber¬ 


some.  “If  you  have  more  than  10  lap¬ 
tops,  you  need  a  central  control  con¬ 
sole.  You  will  kill  yourself  trying  to  do 
it  any  other  way."  be  says. 

Another  factor  to  consider  is  how 
much  access  to  the  firewall  software  to 
grant  to  users,  ntc  general  rule  is  not 
to  allow  users  any  access,  bur  there  are 
exceptions.  Kirby  sets  up  hts  so  that 
users  can’t  even  tell  that  the  software 
is  running;  laptops  at  Herman  Miller 
have  a  status  icon  for  diagnostic  pur¬ 
poses.  But  in  both  cases,  users  still 
can’t  shut  off  the  software  or  change 

5 any  settings. 

I  By  contrast.  El  Paso's  users  have 
I  the  option  to  rum  off  the  firewall. 

I  “We  allow  users  to  shut  it  down  if 
I  they  are  not  connected  to  the  net- 
A  woik.  since  some  people  use  it 
on  their  personal  computers  at  home." 
Sepulveda  explains.  But  they  can'llog 
back  onto  the  VPN  without  restarting 
the  firewall. 

The  Next  Generation 

Vendors  and  analysts  say  the  next 
generation  of  produas  will  offer  even 
tighter  integration  between  firewalk 
and  antivirus  software  so  that  admini¬ 
strators  have  to  touch  the  desktop 
only  once.  Kirby  says  he’d  like  to  see 
greater  integration  between  firewalk 
and  other  products  as  well. 

For  example,  Sygate  offers  simple 
check  boxes  to  allow  access  to  Win¬ 
dows  netw'orking  and  file  sharing  in¬ 
stead  of  having  to  configure  multiple 
policies  or  rule  sets.  But  it  doesn't  of¬ 
fer  such  a  setup  option  for  his  Cisco 
VPN  hardware.  Similarly,  the  Cisco 
Systems  Inc.  hardware  has  a  pull-down 
menu  to  activate  support  for  firewalk 
from  Atlanta-based  internet  Security 
Systems  Inc.  and  ZoneAlarm,  but  not 
for  his  Sygate  system. 

Gartner's  Pcscatore  expects  to  see 
greater  application  awareness.  Al¬ 
though  many  firewalls  can  block  unau¬ 
thorized  applications  from  running, 
they  don't  block  that  application  from 
doing  things  it  shouldn't 
For  exan^le,  although  a  firewall 
may  let  Outlook  run  on  a  laptop,  it 
should  block  an  application  from 
e-mailing  copies  of  itself  to  everyone 
in  the  user's  Outlook  directory.  Pesca- 
tore  doesn't  expect  to  see  that  feature 
until  200S,  but  he  doesn’t  advise  wait¬ 
ing  for  it 

“Every  laptop  needs  a  personal  fire¬ 
wall,"  he  says.  “It  is  not  a  luxury  you 
can  afford  to  do  without“  I 
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liranni  tog  data  and  racatoa  atorto  from 
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It'S  TtUl.ll  do- 

fcndint!  tho  IT  perimeter 
a^inst  spyware,  viruses, 
worms  and  unauthorized 
intrusions.  But  no  matter 
how  giHHi  their  defenses 
are.  a>mpanies  still  risk 
yetting'  hurt  by  those  they 
trust  most:  remote  work¬ 
ers.  'if  anyone  wants  to 
attack,  all  they  have  to  do  is  drop  in  a 
Tntjan  Ihorse]  and  wait  for  the  persim 
to  li>g  in."  says  Dennis  Peasle>\  informa¬ 
tion  securit>-  ofTieer  at  furniture  maker 
Herman  .Miller  Inc.  in  Zeebnd.  Mich. 

Personal  firewalls  help,  but  stand¬ 
alone  versions  don't  always  protect  the 
corporate  LAN  adequately.  For  exam¬ 
ple.  Peasley  initially  installed  Zone- 
Alarm  from  San  Francisco-based  Zone 
Labs  Inc.  tm  WO  laptops.  But  the  dis¬ 
tributed  personal  firewall  installations 
were  difficult  to  monitor  and  maintain. 
Peasley  now  uses  Zone  Labs*  newer, 
server-based  IntegriD'  software  to  cen¬ 
trally  manage  those  remote  personal 
firewalk.  “With  any  new  system  we  in¬ 
stall.  the  main  cost  is  not  the  cost  of 


the  st>ftw3re.  but  the  cost  of  managing 
it."  he  says.  "Centralized  management 
cuts  those  costs." 

Stand-alone  personal  firewalls  don't 
work  well  for  corporate  LAN  access 
because  end  users  have  access  to  the 
software  and  tend  to  misconfigure  it 
or  shut  it  off  entirely,  and  administra¬ 
tors  face  problems  supporting  and 
installing  updates.  Because  the  update 
process  is  time-consuming,  adminis¬ 
trators  may  avoid  updates  altogether, 
leaving  unpatched  clients  open  to  new 
vulnerabilities. 

"I've  seen  personal  firewall  software 
that  was  individually  installed  on  sev¬ 
eral  large  computer  systems,  and  it  al- 
waj-s  becomes  a  mess."  says  Kevin 
Beaver,  president  of  Principle  Logic 
LLC,  an  information  security  consult¬ 
ing  firm  in  Kennesaw,  Ga.  “Configura¬ 
tions  and  patches  were  inconsistent, 
and  the  administrators  spent  way  too 
much  time  on  the  'sneaker  net.'  going 
around  to  remedy  pri>blems." 

The  best  centrally  managed  person¬ 
al  firewall  systems  won't  let  end  users 
disable  the  local  firewall  software  or 


PERSONAL  HREWALL 
MANAGEMENT  SYSTEMS 

Lock  down  remote  personal 
firewall  conhgufutions 
Enforce  policies 
Automatically  update  machines 
as  they  connect 
Automatically  check  and 
update  antivirus  signatures 
Allow  different  personal  fire¬ 
wall  settings  based  on  location  or 
access  method 


change  the  settings,  says  John  IN.*sca- 
tore.  an  analyst  at  Gartner  Inc.  in 
Stamford.  Conn.  "Users  will  just  say 
yes  to  everything,  so  you  have  to  cen¬ 
trally  manage  them  in  a  w-ay  that  is  in¬ 
visible  to  the  client."  he  says. 

Some  tools  also  integrate  with  anti¬ 
virus  and  virtual  private  networic 
(VPN)  software.  Pcscatorc  says  two 
of  the  more  advanced  products  in  this 
arena.  Integrity  and  Sygate  Secure  En¬ 
terprise.  from  Sygate  Technologies  Inc. 


Personal  firew  all  management  systems  allow' 
eentralized  eontrol  rntfenforcerhent  of  securin' 
settings  for  remote  users.  H\’  Drew  Rohb 
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in  Fremont.  Calif.,  include  a  back¬ 
end  server  that  can  act  as  a  gateway 
through  which  remote-user  access  can 
be  controlled  (see  diagram,  next  page). 

Peasley  uses  that  feature  on  his  In¬ 
tegrity  firewall  system.  The  end  user 
connects  to  the  Cisco  VPN  3030  con¬ 
centrator.  which  directs  the  user  ses¬ 
sion  to  the  Integrity  server  to  authenti¬ 
cate  the  client,  checks  that  the  client's 
antivirus  software  is  up  to  date  and 
provides  any  necessary  updates  before 
allowing  access  to  the  network. 

Vendors  of  related  security  products 
and  security  suites  have  jumped  in 
with  their  own  centrally  managed  fire¬ 
wall  offerings.  These  typically  include 
tight  integration  with  sister  security 
products.  The  downside  is  that  they 
may  be  weaker  in  terms  of  manage¬ 
ment  capabilities,  integration  with  ex¬ 
isting  director)-  structures,  reporting 
features  and  even  the  level  of  security 
they  offer  when  compared  with  dedi¬ 
cated  desktop  firewall  management 
products. 

Symantec  Corp.  in  Cupertino,  Calif., 
and  Network  Associates  Inc.  in  Santa 
Clara.  Calif.,  have  added  personal  fire¬ 
walls  to  their  ci>rporatc  antivirus  soft¬ 
ware.  as  have  VPN  vendors  such  as 
InfoExpress  Inc.  in  Mountain  View. 
Calif.,  and  Check  Point  Software  Tech¬ 
nologies  Ltd.  in  Redwood  City.  Calif. 
Stickily  with  one  vendor  generally 
makes  it  easier  to  integrate  the  security 
products,  and  in  some  cases,  they  can 
be  managed  from  the  same  console. 

“If  you  are  committed  to  using  an 
antivirus  product,  see  if  they  also  have 
a  firewall  product  so  you  don’t  have  to 
write  the  code  to  get  the  parts  to  talk 
to  each  other."  says  Robert  Hillery. 
principal  at  securiri'  consulting  firm 
HawkSI  LLC  in  Hanover.  N.H.  Having 
a  single  vendor  for  both  products  also 
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s*>nu*.  •If  VDU  have  mi)rv  jhan  III  Ijp- 
ii>ps.  you  need  a  ccniral  control  con- 
st>le.  You  will  kill  y«*urscll  trxiny  lo  do 
it  am  tUher  way."  he  viyv. 

Another  fukior  to  consider  ts  htH\ 
much  access  u*  the  firewall  software  to 
jirani  to  users.  The  ftcneral  rule  is  not 
to  alkm  users  any  acs'osv  but  ths-re  are 
exsvptions.  Kirby  sets  up  his  so  that 
users  can  t  even  tel!  that  the  s»*Uwjrc 
IS  running:  laptops  at  Herman  Miller 
have  a  status  icon  lor  diagnetstic  pur- 
pi»ses-  But  in  both  cases.  usi.*rs  still 
can't  shut  I'ff  the  s<»ftware  or  cliange 
any  settings. 

By  contrast.  El  Paso's  users  hat  e 
the  opth»n  t»»  turn  off  the  fia-wall 
We  allow  users  to  shut  it  down  if 
they  are  tun  csmnecied  to  the  net¬ 
work.  since  Mime  people  use  it 
on  their  personal  computers  at  home." 
Sepulveda  explains.  But  they  can't  log 
back  onto  the  VPN  without  restarting 
the  fin-wall. 

The  Next  Generation 


eliminates  finger-pointing,  he  say's. 

Most  organizations  like  to  stick  with 
familiar  vendors  and  leverage  what 
they  already  have.  When  the  city  of  El 
Paso.  Texas,  needed  to  buy  1,000  fire¬ 
walls  as  part  of  its  Health  Insurance 
Ponability  and  Accountability  Act 
compliance  program,  it  chose  Networic 
Associates'  McAfee  Desktop  Firewall, 
in  part  because  the  city  already  used 
McAfee  VirusScan. 

"We  can  manage  the  firewalls 
through  the  same  interface  as  the  an- 
tivinis  softw-are."  says  Francisco  Sepul¬ 
veda.  the  city’s  information  security 
officer.  “This  makes  it  ca^’  to  operate 
and  to  deploy  updates." 

Although  this  ability  to  remotely  de¬ 
ploy  personal  firewall  policy  updates 
is  a  key  feature,  not  everyone  chooses 
to  make  use  of  it.  For  example,  a  West 
Coast  beverage  company  uses  Info- 
E.xpress'  VPN  software  and  recently 
installed  that  company's  CyberArmor 
personal  firewall  on  500  new  laptops 
before  sending  them  out  into  the  field. 
The  company  uses  InfoE.\press'  Cyber- 
Gatekeeper  to  enforce  policies,  but  it 
uses  uses  Novell  Inc.'s  ZENworks  to 
deploy  and  manage  them. 

“We  roll  out  policy  updates  through 
ZENworks.  not  InfoExpress'  manage¬ 
ment  server,  because  we  didn’t  want  to 
have  multiple  products  out  there  up¬ 
dating  different  things  on  the  laptops." 
explains  the  company's  network  engi¬ 
neer.  who  declined  to  be  identified. 

Most  |>ersonal  firewall  management 
products  are  fairly  easv'  to  use.  But  ad¬ 
ministrators  need  to  decide  not  just 


what  policies  to  enforce  on  which  ma¬ 
chines.  but  also  how  to  apply  those 
policies  in  different  contexts.  For  ex¬ 
ample.  the  way  in  which  a  given  user 
connects  to  the  network  may  vary. 

“People  use  a  docking  station  when 
in  the  office,  cable  or  DSL  ( Digital  Sub¬ 
scriber  Line)  at  home,  wireless  hot 
spots  on  the  road,  and  dial-up  when 
nothing  else  is  available."  says  Pesca- 
tore.  "The  firewalls  need  different 
policies  for  each  of  these  situations." 

For  this  reason,  some  products  sup¬ 
port  multiple  sets  of  location-specific 
policies  on  a  single  laptop.  Wells' 


Dairy  Inc.,  a  privately  held  S700  mil¬ 
lion  dairy  processiir  in  Le  Mars,  Iowa, 
uses  that  feature  with  its  4(HI  remote 
users  running  Sygaie's  persona.l  fire¬ 
wall  software. 

"We  can  have  multiple  policies  per 
user,  per  machine,  per  location.  Tht-se 
fluidly  change  as  the  machine  moves 
from  Kx'ation  to  location,"  saj's  net¬ 
work  architect  Jim  Kirby. 

Even  companies  with  a  small  group 
of  remote  users  will  benefit  frxim  cen¬ 
tralized  management.  Kirby  says,  since 
administering  firewalLs  «>n  even  a  small 
number  of  remote  systems  is  cumber- 
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Looging  and  reporting  are  one  area 
where  users  and  analysts  say  centraKy 
managed  personal  firewals  could  use 
improvement  The  problem  is  that  the 
sheer  volume  of  entries  flooding  in  from 
hundreds  or  thousands  of  penonal  flre- 
wafls  can  make  the  unusable. 

"A  client  Stowed  me  a  2-inch  stack 
of  paper  and  said.  This  » last  week's 
log,’ "  says  Robert  HiHery.  principal  of 
smirity  consutting  firm  HawkSL  "You 
need  to  get  softwve  that  wi  winnow 
this  down  to  a  usable  size  for  human 
consumpbotL'’ 

But  even  that  isn't  enough.  Obtaining 
a  complete  picture  of  the  network's  sr 
curKy  status  reqidres  correlating  the 
desktop  flrewal  log  data  with  that  pro¬ 
vided  by  intrusion-detection  systems 
(IDS)  and  other  security  and  network 
elements.  Many  network  systems  man¬ 


agement  packages  include  these  fea¬ 
tures.  In  ad^tion.  less  costly  stand¬ 
alone  products  such  as  Erfistadt  Ger¬ 
many-based  Adacon  Omblfs  Event- 
Reporter.  Vmcouver.  Waah.-ba8ed  TNT 
Software's  QJM  Log  Manager  and  San¬ 
ford.  Maine-based  Soma  Technologies 
fob's  Logafot  consolidate  logs  into  a 
single  view.  The  administrator  can  then 
set  managemerd  pofides  that  make 
sense  of  the  data. 

For  example. »  administr^  might 
configure  the  software  to  archive  the 
fog  entries  for  the  thousands  of  daily 
port  scans  H  delects  but  issue  alerts  for 
unexpected  types  of  attacks.  The  ad- 
mintstrator  can  then  view  afl  personal 
flrewal  log  data  and  receive  alerts  from 
the  IDS,  gateway  firewaAs  or  other  se¬ 
curity  systems  using  one  console. 

-DnwRobb 


Vendors  .ind  anah-sts  ssy  ehe  next 
generation  of  pr«Hjucts  will  nffer  even 
tighter  integration  between  firew alK 
and  antivirus  software  so  that  admini¬ 
strators  have  to  touch  the  desktop 
only  once.  Kirby  says  he'd  like  tt'  see 
greater  integration  betvwcn  firv'walK 
and  other  products  as  W'ell. 

For  example.  Sygate  offers  simple 
check  boxes  to  allow  access  to  Win¬ 
dows  networking  and  file  sharing  in¬ 
stead  of  having  to  configure  multiple 
policies  or  rule  sets.  But  it  diwsn't  of¬ 
fer  such  a  setup  option  for  his  Ciset* 
VPN  hardwan.'.  Similarly,  the  C»scv> 
Systems  Inc.  hardware  has  a  pull-dow  n 
menu  to  activate  support  for  firewalls 
from  Atlanta-based  Internet  Security 
Systems  Inc.  and  ZoneAlarm.  but  not 
for  his  Sygate  system. 

GartncT’s  Pcscatore  expects  to  see 
greater  application  awarene-w  Al¬ 
though  many  firewalls  can  Muck  unau¬ 
thorized  applicaiioas  from  running, 
they  don't  bltxrk  that  application  from 
doing  things  it  shouldn't. 

Ft>r  example,  although  a  firt'wall 
may  let  Outlook  run  4>n  a  laptop,  it 
should  bliKk  an  application  fnim 
e-mailing  copies  of  itself  to  ever^'onc 
in  the  user's  Outlix^  directory.  IVsca- 
lore  doesn’t  expect  to  see  that  feature 
until  2005,  but  he  diKsn'i  adviH*  wait¬ 
ing  for  it. 

“Every  bptop  needs  a  pcrsorul  fire¬ 
wall."  he  says.  “It  is  not  a  luxury  you 
can  afford  to  do  wiihi>uL"  I 

Ro66  is  afrvetance  writer  in  Los  Angeles. 
Vou  can  reach  him  at  robbcditoriala 
sbcglobotner 


Afanogcd  Objects  inc. 
CEO  Siki  Gkjnta  says  her 
Afcican,  Va.-6as«/ com¬ 
pany  is  iook/n^  to  “set  a 
table“ai  which  senior  IT  managers  have 
a  place  alongside  other  corporate  deci¬ 
sion-makers.  Giunta  claims  that  with 
business  service  management  (BSM) 
fti/rw-are  and  methods.  CEOs  and  CFOs 
have  a  way  to  accurately  align  their  [T 
systems  with  their  business  needs.  Ac¬ 
cording  to  Giunta.  BSM  allows  IT  man¬ 
agers  to  assess  which  pieces  of  technolo¬ 
gy  are  most  critical  to  any  given  busi¬ 
ness  prtKess.  and  to  monitor  them  ac- 
cordingly. 

Giunta  spoke  to  Computcnvorld 
technology  editor  Tommy  I’eterson 
a/>ouf  why  she  rhinfcs  BSM  is  not  just  an¬ 
other  fleeting  three-letter  acronym  and 
the  imperative  for  IT  to  be  more  ciosely 
focused  on  business  goals. 

Whst  is  business  serhee  management?  Ii  is 
a  method  and  an  appmach  so  that  our 
customers  can  see  technology  from  a 
business  point  of  view.  Wljen  I  bu>'  a 
piece  of  technolt>gy.  I  should  know 
what  part  of  the  business  it’s  going  to 
impact.  And  if  that  piece  of  technology 
is  not  available,  how  the  end  user  and 
the  business  is  going  tt>  be  affected.  It 
allows  our  customers  to  maximize 
what  they  really  have  and  at  the  same 
lime  to  deploy  new  technology  in 
pieces  and  for  the  most  important 
business  processes. 

Big  corporations  have  10  or  15  differ¬ 
ent  processes  that  comprise  of  the 
revenue.  But  IT  people  don’t  think  that 
way  —  the)'  think  in  terms  of  metrics, 
they  think  in  terms  of  servers  or  data¬ 
bases  or  even  the  applications  them¬ 
selves.  They  don’t  see  technology  as  a 
continuum  and  at  the  same  time  they 
don’t  realize  that  IT  availability  really 
affects  business  availability.  We  pro- 


[  vide  a  methodology  and  software  that 
I  changes  the  way  IT  people  think  about 
managing  technoU»gy.  It  make.s  them 
I  realize  quite  clearly  the  service  they 
provide  to  the  business. 

Can  you  be  more  specific  about  the  technolo- 
5^  involved?  Business  service  manage¬ 
ment  is  the  climax  of  a  series  of  ways  of 
doing  technology.  In  the  'POs,  after  we 
decided.  “Let's  get  out  of  the  main¬ 
frames  and  let’s  go  buy  lots  of 
client/server  technologies.”  the  con¬ 
nectivity  and  the  network  —  that’s  the 
first  thif^  people  would  think  was 
most  imporrani.  In  the  "Ws.  people 
were  thinking  that  the  network  was  the 
big  thing  and  they  bought  a  lot  of  net¬ 
work  manners.  But  they  realized  the 
network  was  only  the  connectivity 
piece  —  there  are  a  lot  of  things  in  the 
middle,  like  servers,  so  they  went  and 
bought  the  frameworks  and  agents  that 
would  monitor  the  box.  But  that,  too, 
would  only  provide  another  piece  of 
the  puzzle. 

What  it  did  create  was  a  lot  of  double 


screens  to  watch.  The)-  had  to  screen 
the  network  and  they  had  to  watch  a 
filter  and  alarms  from  metric  managers 
and  then  they  had  to  watch  another 
1  product  that  would  view  the  system.  So 
people  said.  “1  want  to  go  to  a  single 
console.”  so  they  bought 
MOM.  meaning  manager  of 
managers.  What  a  MOM  re¬ 
ally  does  is  just  take  the 
screen  away  —  it  allows  you 
to  filter  the  event,  and  prob¬ 
ably  you’re  tr>’ing  to  find 
some  common  events  that 
are  really  affecting  the  busi¬ 
ness.  Still,  every’thing  is  in  the  hands  of 
the  people  who  understand  the  event 
list,  people  who  can  say.  “Oh.  I  know 
that  when  this  server  goes  down,  busi¬ 
ness  is  affected." 

What  we  do  with  BSM  is  we  provide 
an  integration  to  these  two  layers.  We 
include  the  security  and  storage  that 
impact  the  business.  And  we  say  in¬ 
stead  of  filtering  the  events,  why  don’t 
you  use  an  object  layer.  It  has  more 
power  to  all  the  instrumentation  that 


you’ve  done,  because  when  you  instru¬ 
ment.  if  you  have  an  object  environ¬ 
ment.  you  can  have  configuration,  you 
can  have  graphical  design,  you  can 
have  command  and  control. 

Instead  of  writing  scripts  to  filter 

events,  why  don't  you  actu¬ 
ally  isolate  each  of  the  ele¬ 
ments  supporting  an  appli¬ 
cation  and  use  them  as  ob¬ 
jects  and  start  building  the 
relationships  among  the 
objects?  That  way  you  can 
say  that  one  server  in  a 
business  process  is  proba¬ 
bly  more  important  because,  say.  it 
hosts  the  databases. 

What  does  that  mean  in  terms  of  action, 
and  In  terms  of  the  other  technology?  You 
start  thinking  not  just  availability  and 
up  or  down,  you  start  thinking  in  terms 
of  state-of-the-business  process.  And 
the  good  [state-of-the-business  proc¬ 
ess]  reflects  good  service  that  IT  is 
providing  to  the  business.  Obviously, 
when  you’re  out  of  a  good  state,  you’re 
in  a  critical  state  and  the  service  is 
deteriorated. 

We’re  finding  that  the  customers  are 
starting  to  sec  IT  from  an  end-user  and 
an  application  point  of  view  because 
obviously  the  end  user  is  the  element 
that  is  impacted  first,  and  they've  done 
a  lot  of  testing  and  end-user  perfor¬ 
mance  and  application  monitoring.  In 
&ct.  1  would  say  people  will  see  that 
the  application  is  the  business.  Tech- 
nolc^  is  actually  getting  nearer  to  the 
business.  BSM  is  the  totalit)'  of  all  the 
elements  of  tcchnolog)'  —  network 
systems,  databases,  end  user,  applica¬ 
tions  —  and  how  you  correlate  all  of 
that  to  determine  a  good  state  of  the 
business  and  relate  chat  to  the  opti¬ 
mum  service  that  IT  delivers  to  the 
business. 
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Lining  Technology 
Up  With  Business 

Managed  Objects’  CEO  tells  how  business  service  manage* 
ment  software  helps  IT  and  business  managers  see  eye  to  eye. 


Ymff  tetdinoiogy  would  seem  to  put  IT  back 
into  dw  rolB  of  a  support  sar^  yet  it  spot¬ 
lights  the  jobs  of  IT  managvs  as  enjdal  to 
making  the  business  nm  better.  Which  way 
do  your  customers  see  this  as  cutting? 

What  Managed  Objects  provides  is  a 
dinner  table  where  the  IT  people  can 
talk  to  the  line-of-business  people.  We 
provide  enough  techneriogy  and  scala¬ 
bility  for  the  IT  people  so  that  they 
benefit  from  what  we  provide.  At  the 
same  time,  we  conflate  their  terminolo¬ 
gy  into  business  terms  in  a  way  that  the 
line-of-business  understands  it.  The 
line-of-business  talks  about  volume  and 
talks  about  day  and  time  and  calendars. 
And  those  concepts  can  be  applied  to 
our  formula  so  the  IT  people  can  repre¬ 
sent  them  for  the  line-of-business.  I 
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Managed  Objects  Inc. 
CEO  SM  Qknta  says  her 
McLean,  Va.-based  com¬ 
pany  is  loMng  to  "set  a 
table”  at  which  senior  IT  managers  have 
a  place  alongside  other  corporate  deci¬ 
sion-makers.  Giunta  claims  that  with 
business  service  management  (BSM) 
sofiware  and  methods.  CEOs  and  CFOs 
have  a  way  to  accurately  align  their  IT 
systems  with  their  business  needs.  Ac¬ 
cording  to  Giunta,  BSM  allows  IT man¬ 
agers  to  assess  which  pieces  of  technolo¬ 
gy  are  most  critical  to  arty  given  busi¬ 
ness  process,  and  to  monitor  them  ac¬ 
cordingly. 

Giunra  spt^  to  Computerworld 
technology  editor  Tomirty  Peterson 
(drout  why  she  thinks  BSM  is  not  just  an¬ 
other  fleeting  three-letter  acronym  and 
the  imperative  far  IT  to  be  more  closely 
focused  on  business  goals. 

Whit  B  biMinm  MTto  mafMownint?  It  is 
a  method  and  an  approach  so  that  our 
customers  can  see  technology  from  a 
business  point  of  view.  When  1  buy  a 
piece  of  technology,  I  should  know 
what  part  of  the  business  it‘s  going  to 
impact  And  if  that  piece  of  technology 
is  not  available,  how  the  end  user  and 
the  business  is  going  to  be  affected  It 
allows  our  customers  to  maximize 
what  they  really  have  and  at  the  same 
time  to  deploy  new  technology  in 
pieces  and  for  the  most  important 
business  processes. 

Big  corporations  have  10  or  IS  differ¬ 
ent  processes  that  comprise  90%  of  the 
revenue.  But  IT  people  don’t  think  that 
way  —  they  think  in  terms  of  metrics, 
they  think  in  terms  of  servers  or  data¬ 
bases  or  even  the  applications  them¬ 
selves.  They  don’t  see  technology  as  a 
continuum  and  at  the  same  time  they 
don’t  realize  that  IT  availability  really 
affects  business  availability.  We  pro¬ 


vide  a  methodolc^  and  software  that 
changes  the  way  IT  people  think  about 
managing  technology.  It  makes  them 
realize  quite  clearly  the  service  they 
provide  to  the  business. 

Can  you  bi  mor«  spicjfic  about  tfM  tedtfM4o 
Qios  invobmd?  Business  service  manage¬ 
ment  is  the  climax  of  a  series  of  ways  of 
doing  technology.  In  the  '90s,  after  we 
decided.  “Let’s  ^t  out  of  the  main¬ 
frames  and  let’s  go  buy  lots  of 
client/server  technologies,"  the  con¬ 
nectivity  and  the  network  —  that’s  the 
first  thing  pec^le  would  think  was 
most  important  In  the  *905.  people 
were  thinking  that  the  network  was  the 
big  chiirg  and  they  bou^t  a  lot  of  net¬ 
work  managers.  But  they  realized  the 
network  was  only  the  connectivity 
piece  —  there  are  a  lot  of  things  in  the 
middle,  like  servers,  so  they  went  and 
bought  the  frameworks  and  agents  that 
would  monitor  the  box.  But  that,  too, 
would  only  provide  another  piece  of 
the  puzzle. 

V^t  it  did  create  was  a  lot  of  double 


screens  to  watch.  They  had  to  screen 
the  network  and  they  had  to  watch  a 
filter  and  alarms  from  metric  managers 
and  then  they  had  to  watch  another 
product  that  would  view  the  system.  So 
people  said.  “I  want  to  go  to  a  single 
console,"  so  they  bought 
MOM.  meaning  manager  of 
managers.  What  a  MOM  re¬ 
ally  does  is  just  take  the 
screen  away  —  it  allows  you 
to  filter  the  event,  and  prob¬ 
ably  you're  trying  to  find 
some  common  events  that 
are  really  affecting  the  busi¬ 
ness.  StilL  everythmg  is  in  the  bands  of 
the  people  who  understand  the  event 
list,  people  who  can  say,  “Oh.  I  know 
that  when  this  server  goes  down,  busi¬ 
ness  is  affected" 

What  we  do  with  BSM  is  we  provide 
an  integration  to  these  two  layers.  We 
include  the  security  and  storage  that 
impact  the  business.  And  we  say  in¬ 
stead  of  filtering  the  events,  why  don’t 
you  use  an  object  layer.  It  has  more 
power  to  all  the  instrumentation  (hat 
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Lining  Technology 
Up  With  Business 

Managed  Objects’  CEO  tells  how  business  service  manage¬ 
ment  software  helps  IT  and  business  managers  see  eye  to  eye. 


you’ve  done,  because  when  you  instru¬ 
ment.  if  you  have  an  object  environ¬ 
ment.  you  can  have  coidiguration,  you 
can  have  gtaphicaJ  design,  you  can 
have  command  and  control. 

Instead  of  writing  scripts  to  filter 
_  events,  why  don’t  you  actu¬ 
ally  isolate  each  of  the  ele¬ 
ments  supporting  an  appli¬ 
cation  and  use  them  as  ob¬ 
jects  and  start  building  the 
relationships  among  the 
(Ejects?  That  way  you  can 
say  that  one  server  in  a 
business  process  is  proba¬ 
bly  more  important  because,  say.  it 
hosts  the  databases. 

What  doN  that  iraan  in  term  of  action, 
and  in  tarms  of  tha  odw  tacfmolegy?  You 

start  thinkit^  not  just  availability  and 
up  or  down,  you  start  thinking  m  terms 
of  state-of-the-business  process.  And 
the  good  [state-of-tbe-business  proc¬ 
ess]  reflects  good  service  that  IT  is 
providing  to  the  business.  Obviously, 
when  you’re  out  of  a  good  state,  you’re 
in  a  critical  state  and  the  service  is 
deteriorated. 

We’re  finding  that  the  customers  are 
starting  to  see  IT  from  an  end-user  and 
an  application  point  of  view  because 
obviously  the  end  user  is  the  element 
that  b  impacted  first,  and  they’ve  done 
a  lot  of  testing  and  end-user  perfor¬ 
mance  and  application  monitoring.  In 
foct  I  would  say  people  will  see  that 
the  application  b  the  business.  Tech¬ 
nology  b  actually  getting  nearer  to  the 
business.  BSM  b  the  totality  of  all  the 
elements  of  technology  —  network 
systems,  databases,  end  user,  applica¬ 
tions  —  and  how  you  correlate  ^  of 
that  to  determine  a  good  state  of  the 
business  and  relate  that  to  the  opti¬ 
mum  service  that  IT  delivers  to  the 
business. 

Wnv  tachnofogy  wwU  aaam  to  pirt  ff  bac^ 
Motharatoflfawppaitaarvto«.y«IRipo(- 
Ighti  lha  lolia  of  IT  fMAtgan  ai  oructol  to 
making  fhahiHinaoifwbaftor.Whtohwy 
do  your  euatomars  aoa  thto  as  cutting? 

What  Manned  Objects  provides  b  a 
dinner  table  where  the  IT  people  can 
talk  to  the  line-of-business  people.  We 
provide  enough  technology  and  scala¬ 
bility  for  the  IT  people  so  that  they 
benefit  from  whm  we  provide.  At  the 
same  time,  we  conflate  their  terminolo¬ 
gy  into  business  terms  in  a  way  that  the 
Une-of-busine$s  understands  it  The 
line-of-business  talks  about  volume  and 
talks  about  day  and  time  and  calendars. 
And  those  concepts  can  be  applied  to 
our  formula  so  the  IT  people  can  repre¬ 
sent  them  for  the  line-of-business.  I 
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Captchas 
Eat  Spam 

Ingenious  computer  tests  may 
also  advance  machine  vision 

and  Al.  By  Jaikumar  Vijayan 


ON  THE  INTERNET,  nobodv 

knows  you're  a  dog.  Or  a  rogue 
robot  program  stealthily  gath¬ 
ering  personal  information 
from  chat  rooms  or  registering  for 
thousands  of  free  e-mail  accounts  from 

which  to  blast  out  spam.  _ 

Oneway  to  stymie  such  bots 
is  to  use  a  captcha.  Short  for  FUTUllL 
‘'completely  automatic  public  UllTril^ 
Turing  test  to  tell  computers  if  A I  vlijik 

and  humans  apart,"  a  captcha  is 


a  program  that  can  generate  and  grade 
tests  that  are  easy  for  humans  to  solve 
but  very  difTiculi  for  computers  to 
crack. 

Examples  include  words  that  have 
been  precisely  distorted  by  computers 
(see  “Shark  Attack."  at  right),  images 
overlaid  with  other  images  or  audio 
clips  with  background  noise. 

By  including  a  captcha  as  pan  of  the 
registration  process  for  a  free  e-mail 
account,  for  instance,  it  would  be  rela¬ 
tively  easy  to  establish  whether  the 
n.'gistrant  is  a  human  or  a  robot  pro¬ 
gram. 

“The  human  visual  system  and  all  of  | 
our  experience  in  reading  makes  it 
possible  to  read  images  of  text  which 
computer  vision  systems  at  their  best 
cannot  do  reliably."  explains  Henr>’ 

Baird,  a  principal  scientist  at  Pain  Alto 
Research  Center  Inc.  (PARC)  in  Cali¬ 
fornia. 

The  concept  of  using  programs  like 
captchas  to  deal  with  bots  and  spam  on 
(he  Internet  has  been  around  since 
1997.  A  team  of  researchers  at  what  was 
then  Digital  Equipment  Corp.  was 
working  on  a  way  to  deal  with  bots 
that  were  trying  to  influence  the  way 
certain  sites  wx>re  ranked  on  the  com¬ 


pany’s  AltaVista  search  engine.  Re¬ 
searchers  at  the  company  developed 
and  patented  a  character-recognition 
test  that  was  used  during  the  AltaVista 
registration  process  to  weed  out  auto¬ 
mated  programs. 

_  In  September  2000.  Pitts¬ 
burgh-based  Carnegie  Mellon 
University's  computer  science 
department  started  developing 
similar  programs  in  response 
to  a  request  from  Yahoo  Inc. 


Like  AltaVista.  Yahoo  was  grappling 
with  rogue  programs  that  were  invad¬ 
ing  Us  chat  rooms  and  illegally  market¬ 
ing  products,  stealing  personal  infor¬ 


mation  and  spamming 
users.  "The  idea  was  to 
create  a  computer  pro¬ 
gram  that  could  distin¬ 
guish  bots  from  humans. 

The  program  would  have 
to  ser\’e  as  a  sentry,  but  it 
couldn’t  itself  pass  the 
very'  test  it  gives."  says 
Manuel  Blum,  a  professor 
of  computer  science  at 
Carnegie  Mellon. 

The  result  was  Gimpy,  a 
captcha  containing  seven 
words  chosen  at  random 

from  a  dictionary  of 850  _ 

words  and  then  distorted 
and  overlaid  with  clutter  via  software. 
Passing  the  test  required  identifying 
at  least  three  of  the  distoned  words 
correctly. 

A  simpler  one-word  version  of 
Gimpy.  called  E-Z  Gimpy.  is  currently 
used  by  Yahoo  on  its  Web  site  to  weed 
out  humans  from  bots  during  the  regis¬ 
tration  process. 

Meanwhile,  researchers  at  the  Uni¬ 
versity  of  Hong  Kong  are  working  on  a 
captcha  that  overlays  audio  clutter  on 
top  of  a  voice  reading  out  random 
numbers  and  letters. 

P.ARC  is  using  its  optical  character 
recognition  (OCR)  expertise  to  write 
programs  that  can  break  captchas.  As  a 
result.  PARC  is  getting  a  quantitati%'e 
idea  of  the  circumstances  under  which 
OCR  fails.  Programs  capable  of  over¬ 
coming  captchas  can  help  build  ma¬ 
chines  that  are  better  able  to  recognize 
characters  than  current  machines  are. 


StwrltoT  'completely 
JitltHnalic  publii: 
Tiirimj  ij!5t  (u  t<!il 
computm  a''0 
homans  aoan  ' 
captchas  ate  pro 
prams  that  can  g«n 
erate  and  grade  tests 
H«l  arc  easy  Iw 
humans  tn  solve  but 
very  difficult  lor 
computers  locraclt 


Shark  Attack 


TheseiRMBensewrardswaregeneratedbycaptchasoftwarcatMRCandthendistort- 
•d  so  that  they  look  as  if  thay  have  “underpone  a  shark  attack."  as  PARC’s  Henry  Baird 
puts  it.  Humans  can  readify  read  them,  but  the  best  software  can't. 

^  ionic  ^ 
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PARC's  captchas.  called 
BaffleTcxt.  rely  on  words 
that  have  been  mutilated 
and  distorted  to  the  point 
where  even  the  best  com¬ 
puter  vision  technology 
can't  decipher  them, 
though  humans  can. 

"Imagine  a  word  that 
has  undergone  a  shark  at¬ 
tack.  If  you  do  the  engi¬ 
neering  carefully,  then  the 
characters  are  largely  de¬ 
stroyed.  However,  there  is 
enough  left  that  people 

_  just  look  at  it  and  see  the 

whole  word,”  says  Baird. 

Ironically,  although  captchas  could 
play  a  useful  role  in  dealing  with  rogue 
bots  and  spam,  the  effort  to  break  them 
could  prove  even  more  valuable  in  the 
long  term,  Baird  says. 

Captchas  present  an  interesting 
challenge  to  the  artificial  intelligence 
and  computer  vision  communities,  and 
research  that  goes  into  breaking  them 
could  benefit  these  fields  enormously, 
he  says. 

Since  captchas  are  designed  to  de¬ 
feat  the  best  computer  vision  technolo¬ 
gies  that  are  available  today,  any  pro¬ 
gram  that  is  capable  of  defeating 
captchas  will  contribute  to  better  vi¬ 
sion  systems,  says  Jitendra  Malik,  a 
computer  vision  specialist  at  the  Uni¬ 
versity  of  Clalifomla.  Berkeley. 

Captchas  present  researchers  with 
many  of  the  same  complexities  found 
in  the  real  world,  but  in  a  somewhat 
more  controlled  fashion,  he  says.  "For 
example,  w’c  have  learned  what  kind  of 
background  noise  is  more  difticult  to 
deal  with  and  what  is  not."  says  Malik. 

Computer  vision  systems  often  try 
to  rect^ize  an  object  in  a  cluttered 
field.  That  could  mean  being  able  (o 
recognize  a  face  in  a  crowd  or  a  partic¬ 
ular  piece  of  furniture  in  a  room 
crowded  with  other  pieces  of  furni¬ 
ture.  regardless  of  lighting,  contrast  or 
other  conditions,  he  says. 

Malik  has  wTitten  programs  to  crack 
both  versions  of  Gimpy.  and  that  has 
helped  him  understand  how  to  deal 
with  background  noise  in  an  image.  He 
says  he  hopes  that  research  will  yield 
breakthroughs  in  computer  vision. 

A  similar  goal  is  driving  PARC’s  re¬ 
search.  Baird  says.  “In  a  quantitative 
way.  we  W’ill  know  e.xacily  under  what 
circumstances  machine  vision  fails  and 
use  that  to  build  better  ones."  he  says.  I 
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Ingenious  computer  tests  may 
also  advance  machine  vision 
and  Al.  By  Jaikumar  Vijayan 


ON  THE  INTERNET,  nobody 

kxiows  you’re  a  dog.  Or  a  rogue 
robot  program  stealthily  gath¬ 
ering  personal  information 
from  chat  rooms  or  registering  for 
thousands  of  free  e-mail  accounts  from 

which  to  blast  out  spam.  _ 

One  way  to  stymie  such  bots 
is  to  use  a  captcha.  Short  for 
"completely  automatic  public 
Turing  test  to  tell  computers 

and  humans  apart.'*  a  captcha  is  - 

a  program  that  can  generate  and  grade 
tests  that  are  easy  for  humans  to  solve 
but  very  dilTicult  for  computers  to 
crack. 

Examples  include  words  that  have 
been  precisely  distorted  by  computers 
(see  "Shaik  Attack,"  at  right),  images 
overlaid  with  other  images  or  audio 
clips  with  background  noise. 

By  including  a  captcha  as  part  of  the 
registration  process  for  a  free  e-mail 
account,  for  instance,  it  would  be  rela¬ 
tively  easy  to  establish  whether  the 
registrant  is  a  human  or  a  robot  pro¬ 
gram. 

"The  human  visual  system  and  all  of 
our  experience  in  reading  makes  it 
possible  to  read  images  of  text  which 
computer  vision  systems  at  their  best 
cannot  do  reliably,"  explains  Henry 
Baird,  a  principal  scientist  at  Palo  Alto 
Research  Center  Inc.  (PARC)  in  Cali¬ 
fornia. 

The  concept  of  using  programs  like 
captchas  to  deal  with  bots  and  spam  on 
the  Internet  has  been  around  since 
1997.  A  team  of  researchers  at  what  was 
then  D^tal  Equipment  Corp.  was 
worldly  on  a  way  to  deal  with  bots 
that  were  trying  to  influence  the  way 
certain  sites  were  ranked  on  the  com- 
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pany’s  AltaVista  search  engine.  Re¬ 
searchers  at  the  company  developed 
and  patented  a  character-recognition 
test  that  was  used  during  the  AltaVista 
registration  process  to  weed  out  auto¬ 
mated  programs. 

_  In  September  2000,  Pitts¬ 
burgh-based  Carnegie  Mellon 
University's  computer  science 
department  started  developing 
similar  programs  in  response 
-  to  a  request  from  Yahoo  Inc. 

Like  AltaVista.  Yahoo  was  grappling 
with  rogue  programs  that  were  invad¬ 
ing  its  chat  rooms  and  illegally  market¬ 
ing  products,  stealing  personal  infor¬ 


mation  and  spamming 
users.  “The  idea  was  to 
create  a  computer  pro¬ 
gram  that  could  distin¬ 
guish  bots  from  humans. 

The  program  would  have 
to  serve  as  a  sentry,  but  it 
couldn't  itself  pass  the 
very  test  it  gives,”  says 
Manuel  Blum,  a  professor 
of  computer  science  at 
Carnegie  Mellon. 

The  result  was  Gimpy,  a 
captcha  containing  seven 
words  chosen  at  random 
from  a  dictionary  of  6S0 
words  and  then  distorted 
and  overlaid  with  clutter  via  software. 
Passing  the  test  required  identifying 
at  least  three  of  the  distorted  words 
correctly. 

A  simpler  one-word  version  of 
Gimpy.  called  E-Z  Gimpy.  is  currently 
used  by  Yahoo  on  its  Web  site  to  weed 
out  humans  from  bots  during  the  regis¬ 
tration  process. 

Meanwhile,  researchers  at  the  Uni¬ 
versity  of  Hong  Kong  are  woricing  on  a 
captcha  that  overlays  audio  clutter  on 
top  of  a  voice  reading  out  random 
numbers  and  letters. 

PARC  is  using  its  optical  character 
recognition  (OCR)  expertise  to  write 
programs  that  can  break  captchas.  As  a 
result.  PARC  is  getting  a  quantitative 
idea  of  the  circumstances  under  which 
OCR  fails.  Programs  capable  of  over¬ 
coming  captchas  can  help  build  ma¬ 
chines  chat  are  better  able  to  recognize 
characters  than  current  machines  are. 


Shark  Attack 


tliBMr»>iiiinM«wnl»¥iwegwi«il«(lbyci|ttchi«olt«afeilBf>IICMdlh«i<llilMt- 
ad  so  Ihit  ttny  look  IS  If  Higy  hm ‘unkqjom  ■  .liafli  attack.' as  MRCi  Heny  BiM 
pula  H  Hunana  can  roadky  riad  ttMin.  bill  Iho  iMst  soflwan  cant 


PARC’s  captchas,  called 
BafileText,  rely  on  words 
that  have  been  mutilated 
and  distorted  to  the  point 
where  even  the  best  com¬ 
puter  vision  technology 
can't  decipher  them, 
though  humans  can. 

"Imagine  a  word  that 
has  undergone  a  shark  at¬ 
tack.  If  you  do  the  engi¬ 
neering  carefully,  then  the 
characters  are  largely  de¬ 
stroyed.  However,  there  is 
enough  left  that  people 
just  look  at  it  and  see  the 
whole  word,"  says  Baird. 

Ironically,  although  captchas  could 
play  a  useful  role  in  dealing  with  rogue 
bots  and  spam,  the  effort  to  break  them 
could  prove  even  more  valuable  in  the 
long  term.  Baird  says. 

Captchas  present  an  interesting 
challenge  to  the  artificial  intelligence 
and  computer  vision  communities,  and 
research  that  goes  into  breaking  them 
could  benefit  these  fields  enormously, 
he  says. 

Since  captchas  are  designed  to  de¬ 
feat  the  best  computer  vision  technolo¬ 
gies  that  are  available  today,  any  pro¬ 
gram  that  is  capable  of  defeating 
captchas  will  contribute  to  better  vi¬ 
sion  systems,  says  Jitendra  Malik,  a 
computer  vision  specialist  at  the  Uni¬ 
versity  of  California.  Berkeley. 

Captchas  present  researchers  with 
many  of  the  same  complexities  found 
in  the  real  world,  but  in  a  somewhat 
more  controlled  fashion,  he  says.  "For 
example,  we  have  learned  what  kind  of 
background  noise  is  more  difficult  to 
deal  with  and  what  is  not."  says  Malik. 

Computer  vision  systems  often  try 
to  recognize  an  object  in  a  cluttered 
field.  That  could  mean  being  able  to 
recognize  a  face  in  a  crowd  or  a  partic¬ 
ular  piece  of  furniture  in  a  room 
crowded  with  other  pieces  of  furni¬ 
ture.  regardless  of  lifting,  contrast  or 
other  conditions,  be  says. 

Malik  has  written  programs  to  crack 
both  versions  of  Gimpy,  and  that  has 
helped  him  understand  how  to  deal 
with  background  noise  in  an  image.  He 
says  be  hopes  that  research  will  yield 
breakthroughs  in  computer  vision. 

A  similar  goal  is  driving  PARC's  re¬ 
search.  Baird  says.  "In  a  quantiutive 
way.  we  will  know  exactly  under  what 
circumstances  machine  vision  fails  and 
use  that  to  build  better  ones."  he  says,  k 
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An  after-hours  walk-through  uncovers 
an  array  of  security  probie^  including  an 
unguarded  token  with  the  passnunfiber 
dc^  written  on  H.  By  Vmce  Tuesday 


The  terrorism  alerts 
over  the  past  few 
months  have  dramati¬ 
cally  increased  manage¬ 
ment's  focus  on  physical  secu¬ 
rity  at  my  company.  My  team 
doesn't  directly  cover  physical 
security,  but  our  scope  does 
extend  to  all  of  information 
security,  not  just  IT  or 

computer  security.  - 

This  means  we’re  isriMi 
responsible  for  pro- 
tecting  information 
that's  printed  out 
or  in  transit,  as  well 
as  data  that  resides 
within  our  informa- 
tion  systems. 

This  can  lead  to  overlap 
with  the  physical  security 
team  as  well  as  security  gaps, 
so  we  work  very  closely  with 
the  other  team  to  cry  to  avoid 
these  problems. 

They  focus  on  guarding 
people,  buildings  and  proper¬ 
ty.  They  also  have  stronger 
ties  to  law  enforcement  and 
the  government.  So  while  they 
deal  with  things  like  detecting 
phone  taps  and  meeting-room 
bugs  and  handle  the  disposal  of 
confidential  materials,  we  cov¬ 
er  information  labeling  and 
disclosure  processes.  While 
they  stop  social-engineering 
attackers  from  talking  their 
way  onto  the  premises,  we  han¬ 
dle  social-engineerii^  attacks 
via  the  telephone  or  e-mail 

MakingaSweep 

Given  the  increased  awareness 
about  physical  security.  1  de¬ 
cided  to  have  my  team  carry 
out  one  of  our  regular  sweeps 
of  the  building.  I  wanted  to 
measure  the  access  available 
to  malicious  intruders  or  in¬ 


siders  in  search  of  confidential 
information  or  intellectual 
property. 

The  results  would  be 
anonymous  to  avoid  creating 
scap^oats.  Our  goal  was  to 
inform  man^ement  of  the 
current  level  of  exposure  and 
to  make  sure  that  we  would  be 
included  in  future  awareness- 
-  raising  activities! 

First,  we  had  to 

III  agree  on  procedures 
that  wouldn’t  put 
users  at  risk  of  disci¬ 
plinary  aaion.  and  1 
needed  to  find  a  way 
to  protect  ray  teara. 
People  have  a  high  level  of  at- 
tachraent  to  their  woric  spaces: 
They  see  the  space  as  theirs 
and  are  fiercely  protective  of 
it.  Our  tests  might  result  in 
someone  blaming  us  for  thefts 
or  claiming  that  we  damaged 
their  machines. 

So  I  put  a  few  simple  ground 
rules  in  place.  The  first  rule 
was  not  to  touch  anything. 

That  meant  no  lifting  key¬ 
boards  and  no  opening  draw¬ 
ers.  However,  the  staff  could 
take  photographs,  so  there 
would  be  no  debate  about 


I  was  shocked  at  the 
type  and  (fell ixitioii 
ofproUemsatoiir 
company....  I  dear^ 
ly  need  to  do  more 
awareness  work. 


what  was  discovered.  And  to 
make  sure  we  didn’t  get  busted 
for  snooping,  we  had  a  physi¬ 
cal  security  team  member 
with  us  at  all  times.  I  knew  we 
wouldn’t  find  everything,  but 
at  least  we  could  do  a  swift, 
repeatable  exercise  and  track 
our  success  at  changing  atti¬ 
tudes  over  time. 

The  good  news  is  that  only 
about  3%  of  work  areas  had 
problems.  The  bad  news  is 
that  the  problems  we  discov¬ 
ered  were  pretty  bad.  Also,  1 
had  expected  problems  to  be 
concentrated  within  specific 
departments.  But  the  securit>' 
policy  violations  we  found 
were  evenly  spread  across 
the  company. 

Password  Problems 

Password  policy  violations 
were  the  most  common  vul¬ 
nerability.  One  person  was 
writing  passwords  on  Post-it 
notes  on  his  wall  crossing  out 
old  ones  as  they  expired  and 
adding  the  new.  One  might  ex¬ 
pect  that  be  would  have  at 
least  thrown  away  the  old 
notes  once  be  bad  filled  them 
with  passwords,  but  six  pass¬ 
word-filled  Post-it  notes  cov¬ 
ered  his  wall  all  focused  on  a 
sports  theme.  We  also  found  a 
password  list  that  included 
jenniferl.  iennifer2.  ieimifer3 
and  so  on.  Ymi’d  think  that  If 
lennifer  was  changing  only 
one  number  on  her  password, 
she  wouldn't  need  to  write 
it  down. 

In  another  area,  we  found 
several  sensitive  documents 
sitting  unattended  in  printer 
output  trays.  These  included 
project  plans,  delivery  dates 
and  internal  memos.  All  had 
been  clearly  marked  “confr- 
dential"  although  I  can’t  be 
sure  if  the  documents  were 
just  incorrectly  marked  or  a 
true  information  security  risk. 

More  troubling  was  the  dis¬ 
covery  of  several  two-factor 


remote  access  tokens  that 
users  had  left  sitting  on  their 
desks.  The  technology  is  de¬ 
signed  to  cope  vrith  that  even¬ 
tuality.  since  you  need  both 
(he  changing  code  displayed 
on  the  token  and  a  passnum- 
ber  to  gain  access.  1  don’t 
think  the  devices  have  any  re¬ 
sale  value,  so  the  risk  of  theft 
is  low.  But  at  $75  each,  they 
shouldn’t  be  just  lying  about. 

The  most  frightening  thing  1 
found  was  an  access  token 
that  had  a  four-digit  number 
written  on  the  front.  1  can  only 
assume  that  was  the  passnum- 
ber  for  that  token.  A  thief 
would  still  need  to  know  the 
user  name  to  do  anything  ma¬ 
licious.  but  our  user  names 
follow  a  standard  pattern,  and 
anyone  could  easily  figure  out 
whose  desk  this  was.  guess  the 
user  name  and  gain  access  to 
our  high-security  systems 
with  the  tc^n.  Considering 
the  risk,  I  decided  to  break 
one  of  our  ground  rules  and 
confiscate  the  token. 

So  how  did  we  do  overall? 
Worse  than  1  expected,  but 
better  than  1  feared.  1  can't 
help  but  keep  an  eye  out  for 
this  sort  of  thing  when  1  visit 
other  companies,  and  I’m  sur¬ 
prised  at  how  many  violations 
1  see.  And  though  I'd  like  to 
think  that  security  vulnerabili¬ 
ties  are  more  frequent  else¬ 
where.  1  was  shocked  at  the 
type  and  distribution  of  prob¬ 
lem  at  our  company.  No 
group  was  unafif^ed.  I  clearly 
need  to  do  more  awareness 
work.  I  suppose  H’s  time  to 
start  nagging  again.  I 
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RadVision  Releases 
VI.5  of  SIP  Tool  Kit 

•bdVWmUl.lneiMiRiick. 

NJ^  tNmmfe  annoiMad 

t5  o(  Ri  9P  Server  D»* 
vetaper  Tooldl.  wMch  eentalne 
two  nwr  opbowii  nwfhdet,  Pree- 
ence  and  fiMh-lo^Kk  Unr 
ApMt  (B2BIM).  neUA  takH  a 
tradWami  StHleR  MRatton  ^ 
loeal  (SP)  en^-to-end  cal  Md 


— *rT  iinnfldM-  3n  nanapa  anil 
Iracii  a  calfrcM  bagMao  la  and. 
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Sanctum  Rods  Out 
Testing  FVoduct 


iir  dataetag  and  ffadng  defacti 
vdMn  anjr  Jm  or  JIal  apiiica* 
dan  doMlapnanl  enviranmenl 
Sanetaa’s  AgpScan  OE 17  is 
MapMad  Mb  Mfcraaofl  Corp.'a 
ViayiiSgitfaJIaiZOOaenvIrm- 
manl  and  la  wnliUB  aa  a  piugHn 
10*  aoMm  anap^M  oeveiBP' 
mull  ■n^wMnli.TlM  product 
nWb  «  St4«,  dnu^  SMa 
Cln.Clll.-feiMdS*ncliMii>iif- 
Miallhrtaa6lhro4k«ug.l 


Lab  Picks  Software 
For  Supercomputer 

TIwUaAlMiaBNBAoniiLabora- 
MyhaacheaanPMennCam* 
puing  hac.'a  PMarm  Load  Shar¬ 
ing  FacAy  (LSF)  eellmro  ta  help 
hamaaa  ttw  Mai  eomputino 
powar  in  the  tab's  now  ASCH) 
ngiaiTanipMlar.  Tba  anpercom- 
pmar  ia  bull  Mb  2M  HawtoCl- 
PaoM  Co.  AMnSawer  ES4S 


Aa  moobhia.  ASCH)  vdi  be  uaad 
la  conduct  piadtelva  nudaar 


NICHOLAS  PETRELEY 


Inside  Story  From 
Tlie  SCO  Mailbag 


Sometimes  the  story  behind  a  high- 
profile  news  story  can  be  pieced  together 
from  the  correspondence  of  the  major  play¬ 
ers.  I  thought  I’d  take  a  peek  into  SCO’s  mail- 
bag  to  see  who’s  writing  CEO  Dari  McBride, 
VP  Chris  Sontag  and  attorney  David  Boies  and  find 
out  what  they’re  saying  about  SCO’s  claims  that  it 
owns  the  legal  rights  to  Unix  and  maybe  even  Linux. 


Our  Mr.  Bows.  Mr.  McBride 
and  Mr.  Sontag;  This  letter  is 
to  let  you  know  that  I  have 
signed  and  returned  the 
NDA-  While  I  appreciate 
your  offer  to  pay  for  my 
travel  expenses,  there's 
realty  no  need  for  roe  to 
Oy  out  to  your  location 
to  view  anything.  1  just 
“know"  there  are  definitely 
hundreds,  if  not  thousands, 
of  instances  where  Linux 
programmers  illegally  in¬ 
corporated  SCO  intellectual  property 
in  their  code.  I  will  be  glad  to  report 
this  infiinnation  at  your  request.  Let 
me  know  if  and  when  you  need  any¬ 
more  expert  testimony. 

Sincarahr, 
Jayson  Blair,  fornwrly  of 
The  New  York  rmm 

Dear  Mr.  Boies,  Mr.  McBride  and  Mr.  Son- 
tag:  Thank  you  for  your  communica¬ 
tion  with  our  blessed  monastery.  We 
confess  that  we  were  entirely  baffled 
by  your  allegations  until  we  realized 
that  you  were  using  the  words  Unix 
and  euruichs  interchangeably.  We 
sense  that  you  may  be  conhised  on  a 
few  other  important  issues,  as  well. 
While  it  is  not  unheard  of  for  monks 
to  be  eunuchs,  not  all  of  us  are.  And 
even  if  we  were,  we  would  not  be  in¬ 
fringing  on  your  copyrights  for  Unix. 
We  have  anached  a  list  of  historic  and 
religious  resources  you  may  wish  to 
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investigate  to  educate 
yourselves  on  these  mat¬ 
ters.  Regardless,  our  par¬ 
ticular  monastic  order  re¬ 
quires  a  vow  of  poverty, 
therefore  we  re^>ectfully 
decline  your  offer  to  sell  us 
SCO  in  order  to  avoid  liti¬ 
gation.  since  we  have  no 
disposable  funds. 

Sbicarefy. 

Brother  Sebastian 


Dear  Mr.  Boies,  Mr.  McBride 
and  Mr.  Sontag;  We  are  concerned 
about  our  current  investment  in  Unix 
licenses.  It  has  come  to  our  attention 
that  SCO  does  not  actually  own  the 
copyrights  and  patents  for  Unix.  Since 
wc  paid  considerably  more  money 
than  the  normal  fees,  we  are  con¬ 
cerned  that  our  investment  may  be  af¬ 
fected  by  your  misrepresentation  of 
your  alleged  leverage  over  the  use  of 
said  copyrights  and  patents.  Obvious¬ 
ly.  it  is  better  for  all  concerned  to  be 
discreet  on  this  matter,  so  we  have 
elected  not  to  pursue  legal  means  of 
recovering  our  investment.  Instead, 
we  would  like  to  invite  all  of  the  man¬ 
agement  at  SCO  to  a  vacation  retreat 
in  Hawaii  in  order  to  discuss  this  mat¬ 
ter  further. 

We  have  arranged  all  the  transporta¬ 
tion  and  will  send  a  black  limousine  to 
your  headquarters  to  pick  you  up  on 
Thursday  at  9  a.m.  Please  have  all  your 
corporate  officers  waiting  outside  on 


the  sidewalk  for  this  ride,  preferably 
lined  up  side  by  side  so  that  we  can  get 
a  clear  view  of  everyone  at  once  when 
the  limousine  arrives. 

Slncaraly.  BM  Bates 

Dear  Mr.  Boies,  Mr.  McBride  and  Mr.  Son- 
tag:  This  is  to  notify  you  that  we  can¬ 
not  comply  with  your  request  to  for¬ 
ward  your  letter  to  its  intended  recipi¬ 
ent  because  said  recipient  is  fictional 
I  did  take  the  lU)erty  of  discussing  the 
issues  you  raised  with  our  corporate 
lawyers,  however.  They  advise  me  that 
it  is  extremely  unlikely  that  a  judge 
will  agree  with  your  charge  that  the 
name  “Scooby  Doo"  infringes  on  the 
SCO  trademark  and  has  damaged  your 
business  as  a  result  While  you  are  cor¬ 
rect  that  the  two  names  share  three 
consecutive  letters,  we  arc  confident 
that  customers  are  able  to  distinguish 
between  an  operating  system  and  a  car¬ 
toon  dog  with  a  speech  impediment 
It  is  quite  true  that  Veli^  is  the  kind 
of  character  that  would  work  with  an 
advanced  operating  system,  and  that 
might  mean  something  if  the  charac¬ 
ters  were  real.  Regardless,  we  are  not 
in  a  position  to  dispute  what  your  ex¬ 
perts  under  NDA  saw  in  your  "source 
code"  since  we  are  unfrmiliar  with  the 
term  source  code.  But  we  are  quite  cer¬ 
tain  that  our  fictional  characters  Vel¬ 
ma  and  Shaggy  did  not  misappropriate 
the  words  /tnJnes  or  xotnlcs  from  any¬ 
time  owned  or  created  by  SCO.  Fi^- 
ly,  the  theory  that  we  chose  the  name 
“Mystery  Machine"  to  hide  the  secret 
use  of  your  intellectual  property 
would  be  fascinating  if  our  Mystery 
Machine  were  a  computer  instead  of  a 
cartoon  flower-|>ower  van. 

- 1. 

dNicarafy, 

Betty  Cohan,  preridart. 

Cartoon  Nalwork 
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QUOTE  OF  THE  WEEK 

ttAchi■valnent  is  a  blend  of 
intelligence,  motivation  and 
peisonality,  and  that  blend  makes 
the  difference  between  A  and  B 
players  rather  than  talent  per  se. 

-  VIneata  Vlwara^iMii.  carauHanl. 
Kabanbadi  PafSian  Lie 


Dashboard  Democracy 

Desktop  business-intelligence  displays 
used  to  provide  financial  data  to 
executives.  Now  they're  finding  a  new 
home  in  the  cubicle  —  where  real  woilt 
gets  done  —  says  Deb  Masdea  (r^t). 
director  6f  business  knowledge  services 
at  The  Scotts  Co.  Pa0B  40 


OPINION 

A  Reality  Check 
On  Going  Offshore 

Columnist  Bart  Peiidns  provides  a 
checklist  of  issues  to  consider  —  from 
U.S.  privacy  and  security  laws  to  the 
employee  backlash  —  before  taking 
the  offshore  IT  plunge.  Page  42 


The  Visa 

and  Master  - 

Card  programs 
won't  solve  all  the 

problems.  They 

are  |ust  one  tool 

■  hi.- arsenal. 

Raud- 

Busters 


NOBODY  LIKES  BEING  RIPPED  OFF. 
But  for  online  retailers,  the  pain 
ofbeii^  ripped  off  by  unethical 
consumers,  identity  thieves  and 
bogus-card  gangs  has  been  magni¬ 
fied  by  what  they  consider  to  be 
the  not-my-problem  attitude  of  cre^  card  issuers 
and  card  associations  like  Visa  and  MasterCard. 

Tom  Mahoney,  a  network  administrator  at  Franklin 
At  Marshall  College  in  Lancaster,  Pa.,  recalls  vividly 
the  shock  be  and  his  wife  felt  shortly  after  they 
launched  their  own  mom-and-pop  e-business  in  1997 
and  discovered  irat  only  the  th^t  of  fraud  but  also 
the  double  w^iammy  from  the  credit  card  companies. 

"We  thought  from  the  beginning  something  was 
ffshy  —  getting  ord^  for  herbs  and  personal  care 
products  with  Ui».  credit  cards,  all . . .  for  shipping  to 
Yugoslavia,"  says  Mahoney.  He  recalls  that  his  card 
processor  had  assured  him  that  if  he  bad  an  autho¬ 
rization  number  for  the  transaction,  then  "all  was 
well"  But  then  the  chargebacks  started  coming  in. 
and  banks  refused  to  honor  the  transactions  and 
added  penalty  fees  for  Mahoney's  business. 

Mahoney  says  he  called  some  of  the  banks  and  was 
shocked  to  discover  that  many  of  the  credit  card 
numbers  in  question  had  never  even  been  issued  to 
cardholders,  yet  they  were  granted  authorization 
numbers.  "That's  vdien  I  learned  that  something  was 
WToi^  with  the  system,"  be  says. 

Today,  credit  card  fraud  is  pegged  as  a  $160  million 
annual  problem  for  just  the  top  25  online  retailers, 
according  to  Gartner  Inc.  in  Stamford,  Conn.  But 
there  are  some  glimmers  of  hope  for  improvement. 

One  encouraging  sign  b  that  Visa  International 
Inc.  and  MasterCard  international  loc.  recently  start¬ 
ed  full-scale  marketing  of  credit  card  systems  that  re¬ 
quire  online  purchasers  to  supply  additional  pass¬ 
words  or  security  codes  (Ver^  by  Visa  and  Master- 
Card's  similar  SecureCode).  It's  an  attempt  to  pro¬ 
vide  an  online  equivalent  of  the  in-store  si^uture. 
Even  more  important,  from  the  retailers'  perq>ective. 
merchants  that  join  the  programs  will  finally  be 
freed  from  most  of  the  liability  and  onerous  charge- 

Web  retailers  are  teaming 
up  to  fight  online  credit 
card  fraud  and  take  back 
the  e-neighborhood. 

ByAlanl^  Earis 
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Possible  Signs  of  Fraud 

■  Country  of  origin.  Orders  from  Romania.  Mace¬ 
donia  Belarus.  Pakistan,  Russia.  Lithuania,  Egypt. 
Nigena.  Colombia.  Malaysia  and  Indonesia  have 

a  very  high  incidence  of  fraud  and  often  have  un- 
verifiable  addresses. 

■  UntraceaUe  e*mail  address.  In  many  traudu- 
tem  orders,  the  customer  s  e-mail  address  is  pro¬ 
vided  by  a  free  e-mail  service,  which  is  relaliv^ 
untraceabie 

•  Express  shipping.  Most  fraudulent  orders  spec- 
rfy  overnight  or  one-day  shipping. 

■  Shipping  address  differs  from  btling  address. 
If  you  are  selling  valuable  items,  it's  a  good  policy 
to  ship  only  to  the  billing  arUress  ol  the  credit  card 
holder 

■  Suspicious  biding  address.  If  the  biHing  address 

IS  sornethmg  generic  like  123  Mam  St.,  the  order 
could  be  fraudulent.  Use  Internet  mapping  tools  to 
see  if  the  address  can  be  vgilied _ 

■  Request  to  leave  at  door.  Someone  placing  a 
very  valuable  order  who  speofies  that  the  pack¬ 
age  6  to  be  left  at  the  door  could  be  using  an  un¬ 
witting  person's  house  as  a  drop-off  poinf  Vbu 
shoidd  require  a  signature  upon  deliverv 


Merchant  Fraud  Squad 

The  secretive  group  of  merchants,  wfach  has 
hundreds  of  memb^.  shares  lips  and  tncks  for 
combating  online  fraud.  It  lecenlly  changed  ils 
name  to  the  Merchant  Risk  Council 
Founding  members 
■  Ameri^  Express  Co. 
t  Barnssandnoble.com  Inc. 

OearCorranerce  Corp. 

Expedtainc. 

First  Data  Corp. 

Starwood  flotels  &  Resorts  Worldwide  Inc. 
Qsent  Inc. 


ba<-ks  (hat  st»  irked  Mahoney.  Instead,  bank.s  will  ab¬ 
sorb  the  costs  of  fraud  themselves. 

But  merchants,  analysts  and  even  Foster  City. 
Calif.-based  Visa  and  Purchase.  N.Y. -based  Master- 
C-ard  acknowledge  th.it  no  one  is  out  of  the  woods 
yet  and  that  the  new  programs  don’t  cover  every  sit¬ 
uation.  It  may  be  a  few  more  years  before  the  two 
companies'  programs  reach  critical  mass  and  begin 
to  show  significant  results.  Plus,  there's  some  con¬ 
cern  that  the  pop-up  window  that  requires  the  new 
codes  will  drive  some  legitimate  customers  away. 

“Tile  V'isa  and  MasterCard  programs  won’t  .solve 
all  the  problem.s.  ’I'hey  are  just  one  tool  in  the  arse¬ 
nal."  says  Mick  Lester,  director  of  Web  services  at 
K-B  Kids,  a  l>enver-based  unit  of  KB  Holdings  LLC. 
Still,  he  says,  "with  the  liability  shift 
to  the  card  issuer.  I  definitely  think 
mc-rchants  should  jump  aboard." 

For  now.  Lester  says  that  even  with 
Verify  by  Visa  and  SecureCodc.  K-B 
Kids  won't  abandon  ils  homegrown 
fraud-busting  methtids.  such  as  veri¬ 
fying  and  comparing  card  and  ship¬ 
ping  addresses,  as  well  as  flagging 
and  scrutinizing  transaciioms  involv¬ 
ing  expensive  items. 

K-B  Kids  also  uses  a  scoring  sys¬ 
tem  to  look  for  fraud,  says  Lester. 

The  system  weighs  every  aspect  of  a  transaction  for 
its  risk  potential.  K-B  Kids  even  maintains  its  own 
"negative  database"  —  a  file  of  card  numbers  that 
have  generated  problems  in  the  past,  including  those 
used  by  consumers  who  claim  chat  they  haven’t  re¬ 
ceived  their  shipments  and  rcfu.se  to  pay. 

Although  K-B  Kids  and  other  brge  retailers  (no¬ 
tably  Amazon.com  fnc.)  have  invested  heavily  in  pro¬ 
prietary  fraud-prevention  methods,  many  smaller 
organizations  haven’t  been  able  to  afford  those  in¬ 
vestments,  and  as  a  result,  they've  been  flocking  to 
third-party  senices  and  consortia. 

For  his  part,  htahoncy  launched  an  organization 
called  Merchant  911.  which  provides  its  members 
with  a  confidential  forum  to  share  fraud-prevention 
methods  and  air  gripes  about  banks  and  credit  card 
companies.  Mahoney  aLso  makes  available  a  selection 
of  databases  and  antifraud  tools. 

Meanwhile,  on  the  West  Coast.  IT  veteran  Dan 
Clements  hxs  set  up  an  organization  called  Card- 
Cops.com  that  pmvides  a  forum  for  merchants  and 


consumers  to  share  information  about  what  he  calls 
“compromised"  credit  cards.  Shoppers  who  think 
their  card  may  have  been  stolen  or  misused  can 
e-mail  him  at  NeighborNetWatch{a)CardCops.com. 

But  ('Icmenis.  CEO  of  the  Malibu,  Calif.-based 
organization,  says  some  of  his  best  information 
comes  from  "the  underground"  —  IT  professionals  at 
merchant  companies  who  are  privy  to  information 
about  cards  that  may  have  been  hacked  by  thieves,  a 
problem  that  merchants  are  often  reluctant  to  reptiri. 

Clements  says  his  staff  of  12  also  hunts  out  bogus 
or  suspect  cards  by  doing  targeted  GtKJgIc  searches 
and  visiting  chat  rooms  where,  he  says,  cards  are 
often  first  tested  by  crooks. 

But  perhaps  the  most  significant  fraud-fighting 

effort  is  the  Merchant  Risk  Council, 
which  until  recently  was  known  as 
the  Merchant  Fraud  Squad.  ’’We  are 
organized  much  like  a  neighborhood 
watch."  says  Cathy  Black,  a  board 
member  of  the  nonprofit  group  and 
the  director  of  fraud  prevention  at 
American  F.xpress  Co.  in  New  York. 

The  Merchant  Risk  Council  has 
scores  of  members,  including  many 
large  corporations.  It's  secretive 
about  its  work  and  methods  because, 
as  Black  explains,  whenever  a  story 
comes  out  about  a  fraud-fij^ting  strategy,  the  “bad 
guys"  learn  how  to  change  their  methods.  However, 
she  says  the  focus  is  on  sharing  emerging  trends  and 
information  in  a  secure  environment. 

For  e.xamplc,  at  the  group’s  annual  conference  in 
March  —  which  was  closed  to  the  press  —  there 
were  presentations  on  "global  trends  in  cybercrime," 
"predictive  models  for  fraud"  and  "emerging  fraud 
schemes."  according  to  the  group’s  Web  site. 

The  group  is  also  pi>werful  enough  to  lobby  ven¬ 
dors  to  change  their  practices.  For  instance,  Black 
says  the  Merchant  Risk  Council  persuaded  some  de¬ 
livery  companies  to  watch  for  suspicious  activity 
such  as  unusual  shipping  patterns. 

But.  as  Black  notes  wearily,  fraud  isn’t  going  away, 
no  matter  what  merchants  and  card  companies  do. 
"There  is  no  magic  bullet  —  all  the  fraud  solutions 
have  a  shelf  life  —  we  will  always  have  to  continue  to 
migrate  toward  new  solutions."  she  says.  I 


Earls  is  a  freelance  writer  in  Franklin,  Mass. 
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How  One  Merchant 
Battles  Fraud 

5«n  smal  and  midsize  ofline  merchants  that  tack  th^ 
of  big  busirtesses  can  do  plenty  to  defend  themsek«s  from 
credit  card  fraud.  A  case  in  point  is  Computenzed  Horizons,  a 
smaM  software  cornpany  in  Worcester.  Mass.  R.  Scott  F^. 
the  company's  techrtology  spectalisL  says  that  some  bad  ex¬ 
periences  with  card  fraud  a  few  years  ago  -  compounded  by 
cfwgebacks  and  chronc  inaction  on  fraud  from  card  com¬ 
panies  -  cornpeOed  hts  organization  to  acL 
“Snee  we  deal  primarily  with  businesses,  al  of  whom 
have  their  own  dornain  name,  one  of  our  rnain  tools  to  help 


defect  fraud  is  to  see  i!  the  bitng  address  for  the  credit  card 
matches  the  address  that  is  Isted  In  the  VWiois  record  for 
their  dornain  or  6  nearby.' says  (Whois  is  a  domain  di¬ 

rectory  at  MW.neft*wteo*/ftbnscxm  Like  many  other 
methods,  this  is  inexact  and  subjective.  Mismatches  just 
raise  questiors  aboid  the  buyer's  legitimacy  and.  taken  with 
other  indicators,  could  lead  Computerized  Horizons  to  turn 
down  the  safe. 

Another  tool  calculates  the  distance  between  the  area 
covered  by  a  ZIP  code  and  the  area  usuaNy  associated  WTth 
the  customer's  telephone  numbers.  Again,  nasmatch^  raise 
questions  about  the  legitimacy  of  the  order.  Even  the  IP  ad¬ 
dress  from  which  an  order  is  placed  can  help  hnt  at  fraud. 

'At  the  very  feast,  this  will  shw  the  country  that  the  person 
plaong  the  order  is  located  in."  says  pBirf. 


For  foreign  orders,  uses  the  Merchant  9t1  Web  sde. 
which  has  a  database  of  credit  card  ssuers  that  identifres  the 
countrvinwhfehacardw3sissued.7hisc«ibecros&*ref9' 
ericed  with  the  country  that  the  IP  address  6  registered  to 
and  the  one  fe  the  biing  address.  Orders  that  originate  from 
or  include  a  free*  e-mal  address  ^  raise  a  red  flag. 

Perry  says  the  best  frau(Mefecton  tool  is  often  just  com¬ 
paring  new  orders  against  prior  orders  to  look  for  patterrs 
that  aren't  typical,  such  as  the  time  of  day  when  the  order 
was  placed.  Fferry  says  his  job  vvoufe  be  easier  if  credit 

card  companies  rnaintained  a  database  of  stolen  but 
he's  doubtful  that  will  happen  anytime  soon.  Sa  like  other 
merchards.  he  wil  continue  to  iniprovise  and  develop  work¬ 
arounds  to  keep  card  fraud  from  putting  hfei  out  of  business. 

-ManflEarts 
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Possible  Signs  of  Fraud 

■  Coontry  of  flrVn.  Orders  froni  Rornania.  Mace¬ 
donia.  Bdarus.  Ratelan.  Rtssia. 

Nigeria  Colornbia.  Malaysia  arKl  IndcK^ 
a  venr  bqh  incxlerK^  of  fraud  artd  often  have  ut- 


BUMrmaUit-fmladdrMs.Inmanyfraudu- 
lent  orders,  the  customer  s  e-mad  address  is  pro¬ 
vided  by  a  free  erinal  service,  which  is  relatn^ 

urdracekite. _ 

■&p>weii>^ig>i^  Most  frauduteiit  orders  spec¬ 
ify  ovema^  or  oneifayshippirtg. _ 

■  SMppkq  addraie  dMin  froin  hang  addlMa 
K  you  are  seing  valuable  items.  iTs  a  good  policy 
to  ship  only  to  the  biing  address  of  the  creA  card 
holder. 


■  SupkteK  uaig  addmi.  If  the  bifrig  address 

is  sornelhing  gerteric  ihe  123  Mato  St.,  the  order 
coidd  be  fraudulert  Use  Inlemet  mapptog  tools  to 
see  it  the  address  can  be  verified. _ 

■  Requait  to  Imm  al  door.  Someone  placing  a 
vBryvatuabteorderwttespecdiesthatthepacit' 
ageistobeleftallhedoorcouldbeustoganun- 
witttog  person's  house  as  a  droprijff  poinl 
should  require  a  signature  upon  delivery. 


Merchant  Fraud  Squad 

Thto  secretive  group  of  tnerchante.  which  has 
hundreds  of  rnernb^  shares  lips  and  tricks  tor 
cornbattog  orirte  fraud  fr  recenit^  changed  its 
name  to  the  Merchant  Risk  CounA 
Founding  members; 


•FMOtoaCorp. 

■  Slaremd  Hototo  ft  RMorto  Vtortdwtoo  Inc. 
■QMNlne. 


backs  that  so  irked  Mahoney.  Instead,  banks  will  ab¬ 
sorb  the  costs  of  fraud  themselves. 

But  inercbants,  analysts  and  even  Foster  City, 
CaUf.-based  Visa  and  Purchase,  N.Y.-based  Master¬ 
Card  acknowledge  that  no  one  is  out  of  the  woods 
yet  and  that  the  new  programs  don’t  cover  every  sit¬ 
uation.  It  may  be  a  few  more  years  before  the  two 
companies'  programs  reach  critical  mass  and  begin 
to  show  significant  results.  Plus,  there’s  some  con¬ 
cern  that  the  pop-up  window  that  requires  the  new 
codes  will  drive  some  legitimate  customers  away. 

The  Visa  and  MasterCard  programs  won't  solve 
all  the  prc^lems.  They  are  just  one  tool  in  the  arse- 
naL”  says  Mkk  Lester,  director  of  Web  services  at 
K-B  Kids,  a  Denver-based  unit  of  KB  Holdings  t  if*- 
Still,  be  says,  ‘^vith  the  liability  shift 
to  the  card  issuer.  I  definitely  think 
merchants  should  jump  aboard." 

For  DOW,  Lester  says  that  even  with 
Verify  by  Visa  and  SecureCode,  K-B 
Kids  won't  abandon  its  hometown 
^ud-busting  methods,  such  as  veri¬ 
fying  and  comparing  card  and  ship¬ 
ping  addresses,  as  well  as  flagging 
and  scrutinizing  transactions  involv¬ 
ing  expensive  items. 

K-B  Kids  also  uses  a  scoring  sys¬ 
tem  to  look  for  fraud,  says  Lester. 

The  system  weighs  every  aspect  of  a  transaction  for 
its  risk  potential  K-B  Kids  even  maintains  its  own 
■iiegative  database”  —  a  file  of  card  numbers  that 
have  generated  problems  In  the  past,  including  those 
used  by  consumers  who  claim  that  they  haven’t  re¬ 
ceived  their  shipments  and  refuse  to  pay. 

Although  K-B  Kids  and  other  large  retailers  (no¬ 
tably  Amazonxom  Iik.)  have  invested  heavily  in  pro¬ 
prietary  fraud-prevention  methods,  many  smaller 
organizations  haven't  been  able  to  afibrd  those  in¬ 
vestments,  amd  as  a  result,  they’ve  been  flocking  to 
thud-party  services  and  consortia. 

For  his  part.  Mahoney  launched  an  organization 
called  Merchant  9U,  wdiich  provides  its  members 
with  a  confidential  forum  to  share  fiaud-prevention 
methods  and  air  gripes  about  banks  and  credit  card 
companies.  Mahoney  also  makes  available  a  selection 
of  databases  and  antifiaud  tools. 

Meanwhile,  on  the  West  Coast,  IT  veteran  Dan 
Clements  has  set  up  an  organization  called  Card- 
Copsxoro  that  provides  a  forum  for  merchants  and 
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consumers  to  share  information  about  what  he  calls 
‘‘compromised”  credit  cards.  Shoppers  who  think 
their  card  may  have  been  stolen  or  misused  can 
e-mail  him  at  Nei0iborNetWatch(S)CardCc^s.com. 

But  Clements,  CEO  of  the  Malibu.  Calif. -based 
organization,  says  some  of  his  best  information 
comes  from  "the  underground”  —  IT  professionals  at 
merchant  companies  who  are  privy  to  information 
about  cards  that  may  have  been  hacked  by  thieves,  a 
problem  that  merchants  are  often  reluctant  to  report. 

Clements  says  his  staff  of  12  also  hunts  out  bo^ 
or  suspect  cards  by  doing  targeted  Google  searches 
and  visiting  chat  rooms  where,  he  says,  cards  are 
often  first  tested  by  crooks. 

But  perhaps  the  most  significant  fraud-fighting 
eflbrt  is  the  Merchant  Risk  Council, 
which  until  recently  was  known  as 
the  Merchant  Fraud  Squad,  are 
organized  much  like  a  ne^iborhood 
watch,”  says  Cathy  Black,  a  board 
member  of  the  nonprofit  group  and 
the  director  of  fraud  prevention  at 
American  Express  Ca  in  New  YoHl 
The  Merchant  Risk  Council  has 
scores  of  members,  including  many 
large  corporations.  It's  secretive 
about  its  work  and  methods  because, 
as  Black  explains,  whenever  a  story 
comes  out  about  a  ftaud-fi^tii^  strategy,  the  "bad 
guys"  learn  how  to  change  their  methods.  However, 
she  says  the  focus  is  on  sharing  emerging  trends  and 
information  in  a  sectire  environment 

For  example,  at  the  group's  annual  conference  in 
March  —  which  was  closed  to  the  press  —  there 
were  presentations  on  "global  tren^  in  cybercrime,” 
"predictive  models  for  fraud"  and  "emerging  fraud 
schemes,”  according  to  the  group's  Web  site. 

The  group  is  also  powerful  enough  to  lobby  ven¬ 
dors  to  change  their  practices.  For  instance.  Black 
says  the  Merchant  R^  Council  persuaded  some  de¬ 
livery  companies  to  watch  for  suspicious  activity 
such  as  unusual  shipping  patterns. 

But.  as  Black  notes  wearily,  fraud  isn’t  going  away, 
no  matter  what  merchants  and  card  companies  do. 
There  is  no  magic  bullet  —  all  the  fraud  solutions 
have  a  shelf  life  —  we  will  always  have  to  continue  to 
migrate  toward  new  solutions,"  she  says.  I 

Earls  is  a  freelance  writer  in  FrarUdin,  Mass. 
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IT  stars  get  all  the  glory,  but  your 
supporting  actors  ^  the  job  done. 


It's  f^ways  about  the  stars,  the  A  players 
on  the  fast  track  to  bonuses,  promotions 
and  glory.  ITleaderswiU  do  nearly  any¬ 
thing  to  get  them  ^  and  keep  Aem.  But 
what  about  the  rest  of  us?  In  this  moruh’s 
Harvard  Business  R^ew,VineetaV|a* 
yaraghavan  and  TTionuzs /.  DeLong  posit 
that  a  company's  /ong'tenn  perfimnance 
and  even  survival  really  depettdmudi 
more  on  the  B  players,  those  steady,  co¬ 
pal^  performers  outside 
the^HOtU^.  Vijayaragha- 
von.  a  consultant  at  Kat- 
zenbach  Partners  UjC,  an 
organizational  strategy 
firm  in  New  York,  talked 
with  KdcUeen  Metymuka 
about  the  vital  contribu¬ 
tions  these 'best  sup¬ 
porting  actors' and  fmw  to 
make  sure  you’re  not  tak¬ 
ing  them  ^granted 

WhoaialhaBptaiwfs? 

Those  that,  in  a  rough 
ranking,  are  neither  Cast* 
track  —  in  the  top  10%  — 
nor  struggling  in  the  bottom  10%.  Intu* 
itively,  most  managers  can  tell  you 
they  are. 

Vim  say  bains  a  B  h  more  about  tampora- 
manl  than  tatanL  ExpUn?  Oliver  Wendell 
Holmes  said  that  FX)Jl.  had  a  second- 
class  mind  and  a  first -class  tempera¬ 
ment  Achievement  is  a  blend  of  intel- 
Ugence,  motivation  and  personality, 
and  that  blend  makes  the  difference 
between  A  and  B  players  rather  than 
talent  per  se. 


Til  im  about  Hit  B  piayors  aro  'Vocov- 
end  A*  ptayors.  At  Microsoft,  one  of  the 
top  20  performers  was  an  A  player  who 
burned  out  and  went  rock  climhing.  He 
later  came  back,  but  to  a  smaller  group 
—  a  think  tank  for  new-product  devel¬ 
opment  We  call  him  a  “recovered  A“ 
because  be  comes  from  that  world.  He 
maintained  calling  cards  from  that 
world.  He  knows  how  it  works,  and  be 
can  move  in  and  out  of 
that  world. 

Olbor  6  piayors  am  “buth 
Mont*  Can  you  shm  mo  an 

•minplt?  These  are  peo¬ 
ple  who  have  a  zeal  for 
the  truth.  They’re  not 
necessarily  “company 
types,”  which  A  players 
tend  to  be.  They’re  wUl- 
to  tell  the  truth  even 
at  a  cost  to  their  standing 
in  the  company.  One  was 
a  manager  in  charge  of 
buUdii^  a  technology  in¬ 
frastructure  for  his  trad¬ 
ing  division.  He  discovered  that  some¬ 
one  with  status  had  paid  more  than  the 
going  price  for  a  system.  No  one  had 
dared  raise  a  question,  but  he  wasn't 
cowed  and  spoke  up  and  saved  the 
company  millioDs  of  dollars. 

Soma  B  pinyars  am  “piHo*  paopla.  What 
doas  (hat  mean?  Those  aren’t  functional 
experts,  but  they  have  an  extraordinary 
feel  for  the  processes  and  norms  of  the 
company.  They  can  make  connections 
and  go  across  departments  and  divi- 


Managing  B  Players 
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sions  to  get  things  done.  They’re  famil¬ 
iar  with  who  really  has  the  power,  even 
if  it’s  not  the  person  in  the  formal  rote. 

Aranl  thara  B  piayam  who  am  maly  just 
plain  raadiecm  parformam?  Yes,  defmite- 
ly.  Those  we  categorized  as  middling. 
But  that’s  often  an  alignment  issue  — 
an  issue  of  where  and  bow  to  use  tbeir 
skills.  Managers  tend  to  not  have  as 
many  conversations  with  B  players 
about  bow  to  use  their  drills  because 


they  think  there's  not  enough  ROI  in  it 

What  aba  do  B  piayam  do  for  the  company? 

A  pla^rs  tend  to  say,  “I'm  the  brand.” 
If  a  better  opportunity  comes  up, 
they’ll  jump  ship.  B  players  aren’t  mar¬ 
tyrs,  but  they  tend  to  be  willing  to  take 
on  long-term  projects  and  stay  for  the 
whole  thing.  They  are  really  good  at 
building  trust  with  clients  through 
these  long-term  projects.  This  trust 
creates  a  platform  for  innovations  that 
the  A  players  might  dream  up  but 
couldn’t  otherwise  have  gotten  clients 
to  sign  on  for.  They  also  tend  to  re¬ 
mind  leaders  to  grow  slowly.  A  players 
want  to  add  head  count  and  say  tb^ 
ran  a  big  department  B  players  are 
more  likely  to  say.  “If  we  grow  that 
fast,  these  are  my  concerns  about  qual¬ 
ity.  And  if  the  growth  cycle  gets  cut 
short,  how  will  we  han^e  that?” 

How  do  B  piayam  help  a  company  in  transl- 
fion?  They’re  less  alfocted  by  shake- 
ups  because  they’re  less  likely  to  be 
tapped  for  promotions  or  be  fired. 

They  provide  continuity  and  pass  on 
knowledge.  They  provi^  ballast  in  bad 
economic  times  b^use  they  stick 
around.  They’re  not  just  there  for  big 
bonuses.  B  players  in  an  IT  department 
are  critical  for  mentoring  new  people 
and  assimilating  them  into  the  corpo¬ 
rate  structure.  They  provide  cultu^ 
support  and  informal  management 
while  management  ts  in  transition. 

Thaao  B  ptayom  sound  Ike  a  hM  of  IT  poopb 
I  know.  I  think  IT  is  foil  of  these.  IT 
people  are  often  stars  and  also  often 
classic  B’s.  IT  people  see  things  differ¬ 
ently.  One  tec^ology  company  told  us 
how  tbeir  B  players  ^owed  manage¬ 
ment  that  it  wasn't  worth  it  to  work 
long  hours  because  long  hours  brought 
higher  error  rates  and  less  creativity  in 
product  development 

DonT  B  piayam  gat  IM  of  holdkrg  thkiQi 

togatfnr  wWi  so  mb  cndK?  Yes.  ab¬ 
solutely.  They  will  only  stay  for  so  long 
if  not  recognized.  Maiuging  them 
takes  more  time  than  managers  give 
them,  but  still  a  tenth  of  the  time  it 
takes  to  manage  stars.  We’re  urging 
managers  to  spend  that  time.  It’s  a 
small  investment  compared  to  time 
they  spend  with  A  players.  I 


Melymuka  is  a  Computerworid 
contributing  writer.  Contact  her  at 
kmelymuka@yahoocom. 


This  is  the  latest  in  a  series  of  monthly  <fecus- 
sions  wdhKwwadBubnsssRmaw  authors 
on  topics  of  interest  to  IT  managers. 
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The  executive  information  systems 
(EIS)  of  the  1980s  stayed  in  the  executive 
suite  and  provided  fancy  pie  charts  of 
financial  data.  But  now  these  business- 
intelligence  tools  have  found  a  new  home 
in  the  cubicles. 

They’ve  also  found  some  new  names: 
“dashboards  and  scorecards,”  says  John 
Hagerty,  an  analyst  at  AMR  Research  Inc. 
in  Boston.  “We  are  now  seeing  them  all  over  the  en¬ 
terprise,  and  for  a  variety  of  reasons."  Hagerty  says 
more  than  half  of  the  135  companies  he  recently  sur¬ 
veyed  are  implementii^  dashboards,  which  are  also 
spreadii^  into  various  nonfmancial  departments 
(see  chart,  next  page). 

Dashboards  aren’t  just  for  financial  data  anymore. 
“At  Southwest  Airlines,  they  call  them  ‘cockpits,’  and 
they’re  specialized  so  that  the  guy  in  charge  of 
putting  peanuts  on  airplanes  gets  a  different  view 
than  the  guy  who's  in  charge  of  purchasing  jet  fuel,” 
says  John  Kopcke,  chief  technology  officer  at  soft¬ 
ware  vendor  Hyperion  Solutions  Corp. 

The  Bottom  line 

The  payoff  is  that  delivering  dashboard  data  to  front¬ 
line  workers  puts  business  intelligence  in  the  hands 
of  people  who  can  exploit  it  to  make  money-saving 
decisions  on  a  daily  basis. 

Motorola  Inc.,  for  example,  deployed  business- 
intelligence  software  from  Informatica  Corp.  in  Red¬ 
wood  City,  Calif.,  last  year  to  about  200  desktops  in 
various  purchasing  offices.  Falgun  Patel,  senior  man¬ 
ager  for  sourcing  systems  at  Schaumburg.  Ill.-based 
Motorola,  says  his  dashboard  gives  him  unprecedent¬ 
ed  access  to  purchasing  informatioa 
“We  got  the  system  up  and  running  in  mid-2(K)2,” 
says  PateL  “Prior  to  that,  we  had  to  pull  information 
from  a  variety  of  spreadsheets  and  custom  databases 
from  locations  all  over  the  globe."  In  fact,  this  is  still 
the  case,  but  now  Informatica’s  software  does  the 
puUii^,  and  sourcing  officers  like  Patel  can  get  in¬ 
stant  access  to  sophisticated  metrics. 

“It  used  to  take  20  days  for  one  of  our  indirect  pur¬ 
chasing  officers  to  collect  global  stats."  says  Chet 


DASHBOARD 


Desktop  business-intelligence  displays  are 
moving  from  the  executive  suite  to  the  cubicles, 
where  the  ROI  is  even  better.  By  Mark  Leon 
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Phillips,  IT  director  for  business  intelligence  at 
Motorola.  "Now  it  takes  minutes." 

Patel  says  the  result  is  smarter,  faster  decisions. 

"On  my  dashboard,  I  can  immediately  see  our  global 
spend  with  a  particular  supplier."  be  explains.  "I  can 
'  slice  the  data  in  a  number  of  ways  —  various  charts. 

1  historical  records,  purchases  by  departments,  etc. 

1  This  gives  me  exactly  what  I  need  to  negotiate  a  bet- 

1  ter  deal  with  the  supplier." 

1  He  says  the  dashboard  also  allows  him  to  be  more 

NOT  GOOD  for 

Control  Freaks 

their  own  sales  stats,  but  they  can  also  sec  how  the 
other  salespeople  are  doing."  she  says.  "And  man¬ 
agers  have  access,  too.” 

Booth  says  she  likes  the  results.  "We  moved  quick¬ 
ly  from  a  monthly  or  quarterly  view  to  a  daily  snap¬ 
shot  of  what  is  going  on.  A  big  benefit  for  us  is  that 

DOW  we  have  a  common  definition  and  view  of  all 
this  information." 

hiebBHMBI 

billing  the  purchasing 
analytics  on  my  desk¬ 
top  with  current  mar¬ 
ket  conditions,  I  can 
determine  whether  it 
is  better  to  negotiate 
for  a  commodity  or 
go  ahead  and  iodt  in  a 
suiq)lyr  Patel  says. 

Hie  result  is  a  fabu¬ 
lous  return  on  invest¬ 
ment '*We  estimate 
that  this  system  saved 
us  about  ^  millkm  a 
month  in  2002,"  says 
Philips. 

■  ■  ■■».  - 

MRIfinB 

One  reason  for  the 
democratization  of 
business  intelligence 
is  that  reality  finally 
cau^t  up  per- 
ceptioa.  "So  often  it  is 
the  high-level  execu¬ 
tive  who  is  seduced 
by  the  'Wowl  CooU’ 
^pealofanEIS," 
says  Deb  Masdea. 
director  of  business 
knoadedge  services  at 
The  Scotts  Ox.  a  pro¬ 
ducer  of  lawn  and 
garden  products  in 
Marysville,  Ohio. 

But,  Masdea  says,  it 
is  midlevel  managers  and  analysts  t^o  need  the  data. 
"In  reality,  an  executive  is  pro^ly  going  to  want 
hard  copy,  and  if  there  is  a  question,  be  or  she  will 
pick  up  the  phone.  The  midHeve)  managers  are  the 
ones  who  have  to  answer  these  questions,"  she  says. 

With  this  in  mind.  Scotts  ded^d  to  push  data  ana¬ 
lytics  to  the  masses  back  in  1996.  The  prefect  coincid¬ 
ed  with  the  cooqiany's  adoption  of  a  coiporatewide 
SAP  ERP  system:  the  business-intellige^  software 
is  also  from  SAP  AG. 

Prior  to  this,  a  distribution  manager  would  have  to 
pick  up  the  phone  to  get  the  latest  statistics  from 
manufacturing  and  distribution  facilities.  "Now  that 
manager  can  open  a  r^>ort  to  get  a  daily  snapshot  of 
activity.”  says  Masdea.  "We  can  even  pull  in  POS 
[poim-of-sde]  and  inventory  data  from  our  big  retail 
customers.  If  inventory  at  an  outlet  looks  too  low,  the 
manayr  can  call  a  saltt  rep  or  the  buyer  directly." 

This  is  critical  in  the  lawn  and  garden  business,  she 
says.  "It  is  a  very  seasonal  industry,  which  means  it  is 


Business-intdligerKa  sofNvare  may  be  ready  for  the 
people,  but  the  people  areni  afweys  ready  fw  It 
iSe  problem  is  tftal  dashboerd  demoa^  often 
requiree  rniddle  rrwiaoers  -  for  whom  inf^^ 
is  power '  to  give  up  some  control. 

‘Historically,  our  midtevel  menagers  had  total 
control  over  the  green-bar  reports  that  showed  up 
ontheirdesks.'saysOibllaMei.dlreclorofbusi' 
rress  knowledge  services  at  The  Scotts  Co. 

But  when  new  dashboards  started  popping  up 
cm  desktops  throughout  the  company,  that  data 
monopoly  wnishad.  *Suddeflly.  that  marrager's 
boss,  and  sonw  of  Ms  ernpkpy^  had  instant  ac* 
cess  to  all  those  reports.*  she  says. 

k  was  a  tough  s^.  and  It  took  ttrne  to  get  those 
rnanagers  to  reieaae  thek  grk)  on  the  tfiformation. 
but  Masdea  says  two  things  made  the  transition 
successful  "Wb  had  to  show  these  managers  that 
by  oMng  up  control  they  also  reduced  their  work¬ 
load  because  they  no  iongar  had  total  responsibilrty 
fw  managing  aN  that  data.*  she  says. 

The  other  strategy  WBS  to  sal  the  system  from 
the  business  rather  than  techr^  side  of  the  house. 
*We  had  malysts  '  superusers  from  the  manager's 
own  business  units  do  the  training.*  says  Masdea. 
"These  were  not  techie  types,  so  they  could  tah  to 
the  managers  in  their  own  Iwguage  and  dearly 
show  them  the  business  bmeAts  of  the  system." 

At  red  estate  iton  C8  Richard  6k5.  senior  project 
rnanager  See  \Mhae  used  sirMlar  approaches  to 
make  sure  a  new  nwplaSoft  scorecard  system 
didnl  M  by  the  wayside.  Aft.  she  shrewdy  started 
deployment  wHh  ofto  managers  who  she  knew 
wouM  be  rrmst  resistant  to  change.  "Our  eiperience 
Is  that  fl  is  easy  for  people  to  criticize  the  1h^  they 
know  the  least  aboin"  says  WMess.  "But  these 
potentialdetractorswiaisobe^biQoestsup* 
portofs  If  you  can  get  them  on  board  earty." 

'klatkieon 


easy  to  miss  an  opportunity.”  Masdea  says.  These 
dashboards  empower  our  managers  to  be  proactive." 

ThilMifSnpM 

One  place  where  dashboards  are  making  inroads  is  in 
sales  departments.  At  Honeywell  Inc’s  Specialty  Ma¬ 
terials  Division  in  Morristown.  N.J..  dashboards  give 
everyone  m  sales  a  clear  view  into  business  perfor¬ 
mance  —  every  day. 

In  September,  the  dhriaion  finished  installing  100 
dashboards  from  CogDos  Corp.  throughout  the  sales 
department  "We  wanted  everyone  to  see  the  same  in¬ 
formation  at  the  same  time."  says  fane  Booth,  director 
of  data  and  knowledge  management  at  the  division. 
Access  is  tru^  democratic  "Sales  reps  can  see 


—  and  company  politics  —  in  the  organization. 

Booz  Allen  Hamilton  Inc  in  McLean.  Va.,  is  rolling 
out  Hyperion’s  performance  scorecard  to  Us  1,200- 
person  global  operations  team.  Sophisticated  analyt¬ 
ics  will  allow  the  human  resources  department,  for 
example,  to  "call  up  stats  on  turnover . . .  correlate 
these  with  training  and  possibly  deduce  that  more 
departmental  training  is  needed,"  says  John  Mon- 
czewski,  manager  of  the  consulting  Hrm’s  balanced 
scorecard  protect 

And  in  the  spirit  of  denmeratization,  Monczewsld 
says  employees  will  be  able  to  look  at  scorecards  for 
all  departments  in  the  team.  "I  would  say  that  90%  of 
the  information  is  available  to  everyone."  be  says. 
"We  want  people  to  see  as  much  as  possible.” 

Why?  "It  is  not  enough  to  optimize  your  own  per¬ 
formance,"  Monezewski  says.  "You  ne^  to  see  if  this 
comes  at  the  expense  of  someone  else  on  the  team. 
We  don't  want  pe<^le  to  get  locked  into  the  notion 
that  this  is  just  a  dashboard  on  personal  metrics." 

At  CB  Ridrard  Ellis,  a  giant  commercial  real  estate 
company  in  Los  Angeles,  desktop  scorecards  from 
PeopleSofr  Inc  are  used  by  64  U.S.  offke  managers 
to  determine  which  brokers  deserve  to  get  perics  or 
additional  resources,  based  on  the  revenue  they 
bring  in. 

Previously,  that  process  lacked  precision,  says  Sue 
Willess.  senior  project  manager  "Now  the  office 
manager  can  quickly  see  revenues,  expenses  and 
salaries  for  each  brokerage  team."  says  Willess,  and 
then  determine  whether  a  broker's  request  for.  say. 
an  additional  office  assistant  is  really  Justified. 

In  addition,  managers  can  see  the  numbers  for 
every  other  office.  This  kind  of  wide-open  scorecard 
probably  wouldn't  work  in  some  environments,  but 
it's  perfect  for  sales,  where  everyone  thrives  on  com¬ 
petition,  Willess  says,  adding,  "Our  office  managers 
like  to  say  now  that  'you  can  run,  but  you  can't  hide.'  ” 

There  is  a  potendri  downside  to  this  plethora  of  in¬ 
formation:  AMR's  Hagerty  calls  U  "metric  madness." 

"Dashboards  and  scorecards  are  about  measuring," 
says  H^rty.  "If  measures  are  too  broad  and  diverse, 
then  dashboards  can  be  a  distractioa*  So.  not  sur¬ 
prisingly,  the  democratization  of  business  intelllgrnce 
comes  with  responsibility.  "It  requires  management 
discipline,”  Ha^rry  says,  "so  you  can  focus  on  only 
those  measures  that  really  matter  to  the  users."  I 
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Phillips.  IT  director  tor  business  iniellitience  at 
.Motorola.  "Now  it  takes  minutes." 

Patel  says  the  result  is  smarter,  faster  decisions. 
■‘On  m\  dashboard.  I  can  immediately  see  our  global 
spend  with  a  particular  supplier."  he  explains.  'I  can 
slice  the  data  in  a  number  of  ways  —  various  charts, 
historical  records,  purchases  by  departments,  etc. 
This  gives  me  exactly  what  I  need  to  negotiate  a  bet¬ 
ter  deal  with  the  supplier." 

He  sa>'S  the  dashboard  also  allows  him  to  be  more 
proactive.  "By  com¬ 
bining  the  purchasing 
analytics  on  my  desk¬ 
top  with  current  mar¬ 
ket  conditions.  I  can 
determine  whether  it 
is  better  to  negotiate 
for  a  commodity  or 
go  ahead  and  lock  in  a 
supply."  Patel  s3\-s. 

The  result  U  a  fabu¬ 
lous  return  on  invest¬ 
ment.  "\Vc  estimate 
that  this  system  saved 
us  about  S15  million  a 
month  in  2002."  says 
Phillips. 

Reality  Wins 

One  reason  for  the 
democratization  of 
business  intelligence 
is  that  realin-  finally 
caught  up  with  per¬ 
ception.  “So  often  it  is 
the  high-le\el  execu¬ 
tive  who  is  seduced 
by  the  'Wowl  Cool!’ 
appeal  of  an  EIS." 
sa>’s  Deb  Masdea. 
director  of  business 
knowledge  serv  ices  at 
The  Scorts  Co.,  a  pro¬ 
ducer  of  lawn  and 
garden  products  in 
Mar>svUle,  Ohio. 

But.  Masdea  says,  It 
is  midlev'el  managers  and  analysts  who  need  the  data. 
“In  reality,  an  executive  is  probably  going  to  want 
hard  copy,  and  if  there  is  a  question,  he  or  she  u  ill 
pick  up  the  phone.  The  midlevel  managers  arc  the 
ones  who  have  to  answer  these  questions."  she  says. 

With  this  in  mind,  Scocts  decided  to  push  data  ana¬ 
lytics  to  the  masses  back  in  1908.  The  project  coincid¬ 
ed  with  the  company’s  adoption  of  a  corporaiewide 
SAP  ERP  system;  the  business-intelligence  software 
is  also  from  SAP  AG. 

Prior  to  this,  a  distribution  manager  would  have  to 
pick  up  the  phone  to  get  the  latest  statistics  from 
manufacturing  and  distribution  facilities.  "Now  that 
manager  can  open  a  report  to  get  a  daily  snapshot  of 
activity."  says  Masdea.  "We  can  even  pull  in  POS 
1  point-of-sale]  and  inventor)-  data  from  our  big  retail 
customers.  If  inventory  at  an  outlet  looks  too  low.  the 
manager  can  call  a  sales  rep  or  the  buyer  directly." 

This  is  critical  in  the  lawn  and  garden  business,  she 
$3)-$.  ’it  is  a  very  seasonal  industr)-.  which  means  it  is 
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BjS  "ess-inre '  gf sc1ltfka'€  may  M  read)  Ic  Itvg 
oeopie,  bul  ihe  peooie  aren’t  always  'eady  lor  \ 

The  cfoBiem  is  that  CashDoard  democracy  o^ien 
reouires  middle  managers  -  lor  whom  .nformation 
IS  power  -  to  give  up  some  control 
"Hisiortcallv.  our  miflievei  managers  had  tela' 
control  over  the  green-da'  reports  that  showed  up 
on  it>eir  oeshs,"  says  Deb  Masdea.  director  o1  DuS'- 
ness  knowledge  serv-ces  at  The  Scotis  Co. 

But  when  new  dashboards  staled  popp'ng  ud 
on  desktops  throughout  the  company,  that  data 
monopoly  vanished,  ■Suddenly,  that  manager's 
boss,  arrd  some  of  his  employees,  had  instant  ac¬ 
cess  to  alt  those  reports."  she  says 
It  was  a  tough  sell,  and  it  took  time  to  gel  those 
managers  to  release  Iheir  grip  on  the  information, 
but  Masdea  says  two  things  made  the  transition 
successful.  “We  had  to  shew  these  managers  that 
by  giving  up  control,  they  also  reduced  their  work¬ 
load  because  they  no  longer  had  total  responsibility 
lor  managing  all  that  data."  she  says 
The  other  strategy  was  to  sell  the  system  trom 
the  business  rather  than  technical  side  of  the  house. 
'We  had  analysts  -  superusers  from  the  manager's 
own  business  units  -  do  the  training "  says  Masdea 
‘These  were  not  techie  types,  so  they  could  talk  to 
the  managers  m  their  own  language  and  clearly 
show  Ihem  the  business  benefits  ot  the  system " 

At  real  estate  firm  CB  Richard  EHis.  seriior  proieci 
manager  Sue  Willess  used  similar  approaches  to 
make  sure  a  new  PeopleSoft  scorecard  system 
didn't  tall  by  the  wayside.  Plus,  she  shrewdly  started 
depkiymenl  with  office  managers  who  she  knew 
would  be  most  resrslani  to  change  “Our  experience 
IS  that  it  IS  easy  for  people  lo  cntcize  the  thing  they 
know  the  least  about.’  says  Willess  "But  ihese 
potential  detractors  will  also  be  your  biggest  sup¬ 
porters  if  you  can  get  them  on  board  early " 

-  AferA  Leon 


\  easy  to  miss  an  opportunity."  Masdea  says.  "n»ese 
dashboards  empower  our  managers  to  be  proactive." 

The  Daily  Snapstnl 

One  place  where  dashboards  arc  making  inrviads  is  in 
sales  depanments.  At  Honeywell  Inc.’s  Specialty  Ma¬ 
terials  Division  in  Morristown.  N.)..  dashboards  give 
everyone  in  sales  a  clear  view  into  business  perfor¬ 
mance  —  every  day. 

In  September,  the  division  finished  installing  100 
dashboards  from  Cognos  Corp.  throughout  the  sales 
!  departmem.  "We  wanted  everyone  to  see  the  same  in¬ 
formation  at  the  same  time."  says  lane  Booth,  direaor 
I  of  data  and  know-ledge  management  at  the  division.  i 
Access  is  truly  democratic.  “Sales  reps  can  see 


ihcir  -m  n  salc^  'taiv.  but  thc>  can  .its*-  huw  tl-.i 
other  sJll•■^pc«'plc  arc  J<»ing.'  Nhc'-.ov  .-\nJ  ir..in 
Jgers  have  Jcccs'*.  i*hi  ’ 

Boj.th  *,3)  %  she  hkes  the  results  WV  nii'N  ed  quick - 
l\  from  .1  numthh  t»r  quaru-rK  view  toj  J.ulv  snap¬ 
shot  what  Is  going  on  a  big  benefit  for  us  is  ih,» 
nos\  we  have  a  common  Jcfmuion  and  v  icw  i*f  all 
this  tnfi*rm.uion  ’ 

In  a  Glass  House 

Dashboards  can  h.oe  .i  big  effect  on  sojnmijmc.ition' 
—  .md  ci'mpanv  pi»litics  —  in  the  org.ini/aiion 

B»m/  .Allen  M.imilton  Inc  in  Mcl  s-an.  \a .  is  o'lling 
out  Hvpcrn'n's  pcrl't*rmjnce  seorecarJ  to  its  1.2«h>- 
pcr>«m  global  operations  team,  sitiphisticjied  analv  i 
ICS  w  ill  jlU»w  the  hum.in  rcsourci-s  depanment  f’»*r 
example,  to  "•call  up  stats  i»n  turnover  .  vorrclatc 
these  with  training  and  possiblv  deduce  that  more 
deparimenia!  training  is  needed.'  says  John  M«'n 
czew  ski.  manager  of  the  cons-ulnng  firm’s  balans-ed 
scorecard  prv>icci. 

.And  in  the  spirit  of  dcrntwraiujiion.  Monc/ewski 
says  employees  will  K-  able  to  look  ai  scva-cards  for 
all  departments  in  the  tc.im.  "I  vv»mld  sav  that  ‘hi  ",  ,if 
the  information  is  available  to  cverximc. "  he  savs 
"We  want  people  to  see  as  mueh  as  possible  " 

W’hy?  "It  IS  not  enough  to  optimi/e  vour  own  per- 
tormancc."  Monezewski  says.  "Yini  need  to  see  if  this 
comes  at  the  expense  of  someone  else  v»n  the  team. 
Wc  don’t  want  people  to  get  locked  into  the  notion 
that  this  is  just  a  dashKvard  un  personal  metrics. ' 

.At  (IB  Kichard  Ellis,  a  giant  commercial  real  estate 
company  in  l.os  Angeles,  desktop  scorecards  from 
PeopleSoft  Inc.  arc  uscsi  bv-  (>4  L’.S  oiTice  managers 
to  determine  which  brokers  dcsene  to  get  perks  or 
additional  resources,  based  on  (he  rewenue  they 
bring  in. 

Previously,  that  process  lacked  precision,  says  .Sue 
Willess.  senior  protect  manager.  "Now  the  ofilce 
manager  can  quickly  sec  revenues,  expenses  and 
salaries  fv»r  each  brokerage  team."  says  Willess.  and 
then  determine  whether  a  broker's  request  for.  say. 
an  additional  offtqv  assistant  is  really  justified. 

In  addition,  managers  can  see  the  numbers  for 
every  other  office.  This  kind  of  w  ide-open  worveard 
probably  wouldn’t  work  in  some  environments,  but 
it's  perfect  for  sales,  where  evervone  thrives  on  com¬ 
petition.  Willess  says,  adding.  "Our  office  managers 
like  to  saj-  now  that  'v-ou  can  run.  but  vou  can’t  hide.' " 

There  is  a  potential  dow  nsidc  to  this  plethora  of  in¬ 
formation:  .AMR’s  Hageriy  calls  it  “metric  madness.” 

"Dashboards  and  scorecards  arc  about  measuring," 
sa\-s  Hagcrty.  "If  measures  are  too  broad  and  diverse, 
then  dashboards  can  be  a  distraction."  So.  not  sur- 
prisinglv,  the  demivroiization  of  business  imelligcnce 
comes  with  responsibility.  "It  requia's  management 
discipline.”  Hagertv  says,  "$tv  vxni  can  focus  on  onlv 
those  measures  that  really  matter  to  the  users  ‘  I 


Leon  is  u/rivluncc  writer  in  San  frundsco. 
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BART  PERKINS 


A  Reality  Check  on 
Going  Ofehore 


YOU’VE  HEARD  THE  HYPE  about  how  go¬ 
ing  offshore  can  save  you  big  bucks  on  IT 
expenses.  Your  CFO  thinks  it’s  a  great 
idea.  You’ve  completed  a  baseline  of  your 
IT  portfolio.  Now  you’re  ready  to  develop 
your  sourcing  strategy  and  determine  which  work  to 
outsource  and  whether  you  want  any  of  it  done  off¬ 
shore.  In  addition  to  the  concerns  that  go  along  with 
outsourcing  any  function,  some  special  considerations 
need  to  be  addressed  as  part  of  the  offshore  decision: 


■  bddtodMd  propaty.  De- 

tennine  to  what  degree  any 
intellectual  property  you 
either  take  ofl^ore  or  de* 
velop  o&bore  will  be  pro¬ 
tected  in  the  courts.  Some 
countries  don't  offer  the 
same  levels  of  legal  protec¬ 
tion  found  in  the  U3.  and 
Western  Europe. 

•  Mtocy  and  aeoffty.  Laws 
such  as  the  Health  Insur¬ 
ance  Portability  and  Ac¬ 
countability  Act  and  Cali¬ 
fornia’s  Cyber-Sectirity  Act 
(QuickLink  38357]  mandate 
the  way  data  must  be  han¬ 
dled  and  the  actions  that 
must  be  undertaken  in  the 
event  that  data  is  compro¬ 
mised.  European  Union  law  regulates 
where  data  must  be  physically  stored 
and  what  data  can  be  transmitted 
across  country  borders.  Lower-cost 
countries  follow  U.S.  and  European 
law  to  differing  degrees.  Beware. 

■  BsopaMcal  ifak.  War  or  terrorism 
could  hurt  the  ability  of  your  ofi^ore 
provider  to  operate.  While  WU  proved 
that  the  US  isn’t  immune  to  terror¬ 
ism.  each  part  of  the  world  has  its  own 
risks.  The  U.S.  Department  of  State 
maintains  a  Web  site  (httpi^AraveL 
state.gov)  describing  the  potential  risk 
of  terrorist  activities  by  country. 


■  IT  bfaMbudura.  Lower- 
cost  countries  don’t  always 
have  the  same  capabilities 
we  take  for  granted  in 
hi^ily  industrialized  coun¬ 
tries.  When  I  was  CIO  at 
Dole  Food,  we  had  to  re¬ 
move  several  PCs  from  re¬ 
mote  Philippine  farms  be¬ 
cause  the  locals  stole  the 
telephone  wires  to  sell  the 
copper. 

In  Honduras,  we  had  an 
uninterruptible  power  sup¬ 
ply  (UPS)  to  keep  the  com¬ 
puter  running  when  one  of 
that  country's  frequent 
blackouts  hit  Unfortunate¬ 
ly,  we  didn’t  have  a  UPS  for 
the  computer  room’s  air 
conditioner,  so  we  kept  it  as  cold  as 
possible  and  gave  the  staff  ski  jackets. 
When  the  power  went  out  the  staff 
spread  pla^ic  sheets  over  the  comput¬ 
er  to  prevent  the  condensation  fr^m 
overhead  pipes  from  dripping  into  the 
computer. 

■  TimL  Oograpby  may  not  be  your 
friend.  If  it  requires  18  hours  in  a  plane 
(and  an  expensive  ticket)  to  get  to 
your  offshore  facility,  you  won't  visit  it 
very  often.  Moreover,  travel  inside  a 
Third  World  country  can  be  very 
time-consuming  and  difficult  —  roads 
and  bridges  may  be  pooriy  maintained 


or  targets  of  terrorist  activities.  Finally, 
travel  in  some  countries  requires 
many  additional  vaccinations. 

■  Coronuntealfait  Both  the  sales  staff 
and  the  technical  staff  at  the  outsourc¬ 
ing  vendor  need  to  have  excellent  Eng¬ 
lish  skills.  You  don't  want  to  have  to 
use  an  interpreter  whenever  a  prob¬ 
lem  arises.  Moreover,  if  your  provider 
is  in  a  different  time  zone,  fli^  out  if 
they’ll  work  when  you  woric  (even  if 
it’s  the  middle  of  their  n^t).  If  your 
woricdays  overiap  for  only  a  few  hours, 
communication  will  be  difficult  And 
your  crisis  will  never  occur  during  the 
overiap! 

■  CuMm.  Cultural  differences  need 
to  be  understood  and  leveraged.  It’s 
easy  to  inadvertently  insult  offshore 
partners  if  you  aren’t  careful  Greet¬ 
ings,  forms  of  address,  gestures,  value 
systems  and  punctuality  vary  widely 
around  the  globe. 

For  example,  Americans  tend  to  glo¬ 
rify  the  hero  and  question  authority. 
But  according  to  recent  diversity 
studies,  some  Asians  do  what  they're 
told  even  when  they  disagree  with  the 
approach.  Study  the  local  customs 
carefully  before  venturing  abroad. 

•  MHcalbacMMit  Many  of  your  em¬ 
ployees  are  unhappy  with  the  number 
of  jobs  going  offslwre.  Be  prepared  to 
address  negative  publicity  and,  in 
some  cases,  staff  sabotage. 

Going  offshore  presents  unique 
challenges.  Addressing  them  directly 
as  part  of  your  initial  offshore  decision 
will  mitigate  your  risk  and  increase 
your  chances  of  success.  I 
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what  you’re  worth? 


Find  out  when 
Computerworld 
publishes  the 
results  from  our 
17th  Annual 
Salary  Survey  of 
IT  Professionals! 


How  much  are  other  IT  professionals  with  your  experience  and  credentials  earning? 
With  help  from  you  and  your  IT  colleagues  across  the  country,  Computerworld  will 
answer  those  questions  with  results  from  our  17th  Annual  Salary  Survey. 

Please  take  our  survey  now  and  enter  a  drawing  to  win  a  $499  gift  certificate  from 
Amazon.com.  Our  survey  period  closes  on  Thursday,  July  3  at  5:00  p.m. 

Survey  results  and  feature  stories  that  offer  practical  career  advice  will  be  published  in 
the  October  27. 2003,  issue  of  Computerworld.  The  issue  will  offer  detailed  informa¬ 
tion  on  average  salaries  and  bonuses,  by  title,  industry  and  region.  Youll  be  able  to 
compare  your  organization's  compensation  plans  with  those  of  ofher 
organizations  and  find  the  hottest  areas  of  the  country  for  IT  pay. 
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Oracle  Kd 

to  potentially  standardize  its 
human  resource  operations  on 
a  single  set  of  applications. 

“I  l^lieve  it’s  Oracle’s  moti¬ 
vation  to  stall  the  market  as 
long  as  possible.”  Hill  said  at 

the  annual  conference - 

of  JJ).  Edwards’  Quest 
user  group  here  last 
week.  £>enver-based 
ID.  Edwards  this 
month  agreed  to  be  acquired 
by  Pleasanton,  Calif-based 
l^c^leSoft,  a  deal  that  now 
could  hinge  on  whether  Oracle 
succeeds  in  its  effort  to  buy 
PeopleSoff. 

Hill  said  Praxair  runs  appli¬ 
cations  from  all  three  vendors 
in  its  various  business  units, 
including  Oracle  fmancials 
and  PeopleSoff  human  re¬ 
source  and  payroll  systems. 

He  added  that  if  Oracle  pre¬ 
vails  in  its  takeover  attempt, 
he  would  reconsider  his  Peo- 
pleSoft  investment  —  even 
though  Oracle  CEO  Larry  Eiii- 
soo  has  promised  free  migra¬ 


tions  to  Oracle’s  E-Busmess 
Suite  lli  software  or  Version  8 
of  PeopleSoft’s  applications. 

“It  never  happens  that  way.” 
Hill  said.  “Any  ERP  conversion 
is  a  highly  costly  and  complex 
endeavor,  and  (the  need  to  do 
one]  would  cause  us  to  re¬ 
evaluate  the  marketplace.” 

Oracle,  which  formally 
—  launched  a  tender  of¬ 

fer  for  PeopleSoft's 
stock  last  week,  has 
said  it  would  continue 
to  support  People- 
Soft's  existing  users  and 
wouldn’t  force  them  to  migrate 
to  its  own  applications.  But  Or¬ 
acle  doesn’t  plan  to  actively 
sell  PeopleSoft's  products  to 
new  customers  and  has  indi¬ 
cated  dtat  it  would  reassess 
PeopleSoft's  agreement  to  buy 
fO.  Edwards. 

”We  see  only  a  potential 
downside  of  significant  addi¬ 
tional  costs,”  said  Bill  Monroe, 
chief  operating  officer  at  the 
Texas  ^ucatioo  Agency  in 
Austin,  wfaid)  runs  People¬ 
Soft’s  financial  management 
and  CRM  software. 

”Conversion  to  another  sys¬ 


tem  could  cost  over  S2  million, 
plus  database  costs.”  Monroe 
said.  He  added  that  agency  of¬ 
ficials  have  yet  to  assess  other 
factors  that  could  result  from 
a  takeover  by  Oracle,  such  as 
the  potential  that  software 
projects  will  have  to  be  de¬ 
layed  or  that  future  function¬ 
ality  will  be  losL 

Mark  Federie,  CIO  at  The 
Weitz  Ca,  a  Des  Moines,  lowa- 
based  construction  firm  that 
runs  hosted  versions  of  ID. 
Edwards'  One  World  XE  appli¬ 
cations,  is  considering  an  up¬ 
grade  to  Version  8  of  the  ERP 
software  within  the  next  year. 

That  project  wouldn't  be  af¬ 
fected  by  a  merger  of  JD.  Ed¬ 
wards  with  PeopleSoft,  Feder¬ 
ie  said.  But  he  added  that  if 
Oracle  buys  the  two  compa¬ 
nies  and  then  eliminates 
OneWbrId  XE  functions  that 
are  ^leciik  to  the  coosmic- 
tion  industry,  be  will  stick 
with  the  JD.  Edwards  applica¬ 
tions  for  as  long  as  be  can 
while  lookup  for  new  soft¬ 
ware  that  meets  his  needs. 

PeopleSoft’s  board  last  week 
voted  unanimously  to  recom¬ 


mend  that  shareholders  reject 
Oracle’s  $5.1  billion  offer,  say¬ 
ing  that  the  takeover  “would 
undoubtedly  face  lengthy  anti¬ 
trust  scrutiny”  and  h^  “a  sig¬ 
nificant  likelihood"  of  being 
blocked  by  the  government. 
Oracle  and  PeopleSoft  are  cur¬ 
rently  the  No.  2  and  No  3 
business  appUcatioo  vendors, 
respectively,  behind  market 
leader  SAP  AG. 

PeopleSoft  also  claimed  that 
the  unsolicited  offer  underval¬ 
ues  the  company  and  was  de¬ 
seed  to  disrupt  its  operations 
and  sales  momentum  by  creat¬ 
ing  uncertainties  for  users. 

Meanwhile,  I.D.  Edwards 
filed  lawsuits  in  Colorado  and 
California  state  courts  charg¬ 
ing  that  Oracle  had  engaged  in 
uiffair  business  practices  and 
Illegally  interfere  with  the 
planned  merger  of  PeopleSoft 
and  JD.  Edwards.  "We  will  not 
sit  by  idly  while  Oracle  pur¬ 
sues  this  arrogant,  unlawful 
and  destructive  course  of  ac¬ 
tion.”  JD.  Edwards  CEO  Bob 
Dutkowsky  said  in  a  statement. 

Oracle  responded  that  the 
JD.  Edwards  suits  have  “no 
merit  whatsoever.”  h  also  as¬ 
serted  that  PeopleSoft  has  "put 
the  self-interest  of  (its]  man¬ 
agement  over  the  best  inter¬ 
ests  of  PeopleSoft  sharehold¬ 
ers”  by  rejecting  Oracle's  offer. 

Several  JD.  Edwards  users 
at  the  Quest  Global  2003  con¬ 
ference  said  they  have  yet  to 
fully  assess  what  a  takeover  of 
PeopleSoft  by  Oracle  would 
mean  to  them.  ”I  think  the 
only  thing  to  do  is  sit  back  and 
wait.”  said  Leah  Hansen,  appli¬ 
cations  manager  at  Can  Wei 
Distribution  Ltd.,  a  building 
materials  distributor  in  Van¬ 
couver.  British  Columbia.  "We 
don’t  know  what's  going  to 
happen.”! 


Craig  Conway 
said  our  offer  is 
designed  to  disrupt 
PeopleSoft's  strong 
nHHnentum  in  the 
market.  I’m  not 
sure  how  [software 
sales  dropping 
'39%]  is  strong 
momentum. 

UMtV  euisoil.  CEO. 

ORACLE  CORF. 


PeopleSoft  was 
targeted  for  a 
hostile  bid  exactly 
because  we  have 
stronger  products 
[thw  Grade]. 

CRAIO  COmVAV.  CEO. 

PCOPLCMFT  IIK. 
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A  Virus  Checklist 


Bugbear,  klez.  SOBIG  —  that’s  the  one  that  appears  to 
come  from  Microsoft.com.  This  summer,  the  virus  hits 
just  keep  coming.  It’s  as  if,  for  the  past  month,  the  virus 
world  has  been  softening  us  up  for  Microsoft’s  announce¬ 
ment  last  week  that  it’s  getting  into  the  antivirus  business. 
Will  Microsoft’s  arrival  really  help?  Probably  not.  Antivirus  sub¬ 
scriptions  make  for  a  steady  revenue  stream,  and  Microsoft  is  big  on 
steady  revenue  streams  these  days.  But  the  company  isn’t  likely  to 
add  much  new  in  the  line  of  virus-protection  technology. 

Besides,  except  for  software  security  holes,  the  real  virus  problem 
today  isn’t  about  technology.  It’s  about  people. 

People  who  get  sucked  in  by  interesting  mate  issues  that  you  can  help  with.  You  may 

e-mail  subject  lines.  People  who  click  to  open  persuade  them  to  play  it  safer.  In  any  case, 

mystery  attachments.  People  who  visit  Web  you’ll  want  to  recheck  their  PCs  often. 


sites  or  download  files  that  they  shouldn't. 
People  who  work  their  way  around  firewalls 
and  virus  shields.  And  yes.  people  who  fail  to 
keep  firewalls  and  virus  shields  maintained. 

Vims  writers  use  “social  engineering”  — 
clever  psychological  tricks  —  to  help  their  pay- 
loads  get  through.  They  leverage  human  cu¬ 
riosity,  vanity,  fear  and  foolishness  to  defeat 
even  the  best  antivims  technology. 

You've  got  the  technology  you  need.  Now,  in 
this  long,  hot  summer  of  virus  attacks,  it's  the 
perfect  time  to  make  sure  you  have  a  handle  on 
the  people  part  of  the  problem,  too. 

■  Start  by  making  sure  antivims  software  is 
actually  running  on  all  your  PCs.  You  probably 
can’t  afford  a  machine-by-machine  sweep  right 
now.  But  make  sure  every  time  a  support  tech 
touches  a  PC,  that  tech  checks  its  antivims 
logs,  confirms  that  vims  scans  and  definition 
downloads  are  mnning  on  schedule,  and  veri¬ 
fies  that  settings  are  correct. 

■  Remember,  users  are  clever.  If  antivirus 

software  gets  in  the  way,  they’ll  - 

turn  it  off  or  work  around  it  —  and 
then  tell  they’re  co-woriters  how 
they  did  it.  So  if  you  spot  a  problem 
machine  with  scans  turned  off  or 
settings  changed,  there's  a  good 
chance  that  nearby  PCs  will  be  that 
way  too. 

■  Keep  track  of  your  biggest 
problem  users  —  both  the  clever 
ones  who  change  settings  and  the 
dumb  ones  who  open  every  attach¬ 
ment.  Talk  with  them.  Explain  the 
problem.  Ask  why  they  break  the 
rules.  They  may  show  you  legiti¬ 


mate  issues  that  you  can  help  with.  You  may 
persuade  them  to  play  it  safer.  In  any  case, 
you’ll  want  to  recheck  their  PCs  often. 

■  Leverage  news  reports  about  virus  out¬ 
breaks.  When  you  see  one,  send  a  short  mes¬ 
sage  to  your  users  —  say.  six  or  eight  lines  — 
telling  them  that  “CNN  is  reporting”  or  “the 
local  newspaper  has  a  story"  about  the  vims. 
Remind  them  once  again  to  be  careful  about 
e-mail  attachments,  downloaded  files  and  un¬ 
familiar  Web  sites.  Give  them  a  few  details,  but 
be  sure  to  keep  it  brief.  It's  really  just  reinforce¬ 
ment.  not  a  full  explanation,  and  users  have 
short  attention  spans. 

■  Go  hunting  for  the  tvays  users  find  to  cir¬ 
cumvent  your  antivims  systems.  Home  com¬ 
puters  that  connect  to  company  systems,  Web 
mail,  unauthorized  modems  and  wireless  hubs, 
and  nonstandard  Internet  applications  are  the 
usual  culprits.  But  don’t  limit  yourself  to  that 
short  list  Remember,  users  are  creative  —  and 
they  may  think  what  they’re  doing  is  safe  be¬ 
cause  you’ve  never  told  them  not  to  do  it 

■  Finally,  do  a  little  social  engineering  of 
your  own.  Practice  looking  alarmed  in  a  mirror, 

then  trot  that  expression  out  when 
you  discover  dangerous  user 
habits.  Express  concern  about  the 
work  they’ll  lose,  not  just  the  safe¬ 
ty  of  your  systems.  Say  “We  need 
to  be  careful."  not  just  "Don’t  ever 
do  that!"  Tell  them  their  ways 
around  the  firewall  are  clever,  but 
very  dangerous.  Flatter  them,  ca¬ 
jole  them,  guilt  them  —  but  con¬ 
vince  them. 

If  that  sounds  a  little  silly,  well, 
maybe  it  is.  But  it’s  no  sillier  than 
waiting  for  Microsoft  to  save  you 
from  Sobig.  Bugbear  and  Klez.  I 
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Got  Outsourcing 
Questions? 

Computerworid’s  New  IT  Executive  Summit  Series  Has  the  Answers 


If  you're  an  IT  executive  in  an 
end-user  organization,  apply  to 
attend  Computenworld's  upcoming 
complimentary  half-day  summit  on 
IT  Outsourcing:  The  Offshore 
Alternative. 

Robust  global  communication 
technologies  and  state-of-the-art 
security  tools  have  made  IT  out¬ 
sourcing  an  increasingly  viable 
option  to  achieve  ROI.  Part  of 
Computerworld's  new  IT  Executive 
Summit  Series,  this  invitation-only. 
4-hour  summit  will  explore  how 
companies  are  realizing  tangible 
benefits  from  outsourcing  IT 
application  development, 
integration  and  management. 

Seating  is  iimited,  so  appiy 
todayl 


Los  Angeles,  CA 

Thursday,  June  26,  2003.  8:00am  to  Noon 
Hyatt  Regency 

8;00am  to  8:30am  Registration  and  Networking  Breakfast 


8:30am  to  9:00am 


9:00am  to  9:30am 


9:30am  to  10:00am 


Welcome  and  Opening  Keynote 
Outsourcing  Watch  2003: 

The  Best  of  Both  Shores 

Maryfran  Johnson,  Editor  in  Chief, 
Computerworid 

Industry  Update 

Evaluating  Your  IT  Sourcing  Options 

Bart  Perkins,  Managing  Partner, 
Leverage  Partr>ers  (an  IT  consultancy) 

Business  Case  Study 

Rick  Hamilton,  CTO,  DFS  Group  Ltd. 


10:00am  to  10:30am  Refreshment  Break 


10:30am  to  Tl:30am 


Outsourcing  Strategies 
Leadership  Strategies  in  Offshore 
Outsourcing 

Moderator:  Maryfran  Johr^n. 

Editor  in  Chief,  Computerworld 
Par>elists: 

■  Marty  Chuck.  CIO.  Agilent  Technologies 
a  Rick  Hamilton.  CTO.  DFS  Group  Ltd. 

■  Jerry  McElhatton,  Senior  EVP  of  Global 
Technology  and  Operatior^s, 

MasterCard  International 

■  Greg  Schueman.  Vice  President 
ar>d  CTO.  Mercury  Insurarrce  Group 


For  information,  cali  Chris  Leger  at  888-299-0155 
or  to  register  online,  visit 
www.itexecutivesummit.com/outsourcing 


Email 


Oracle  Microsoft 

42,000  Employees  50,000  Employees 

3  Oracle  Email  Database  Servers  110  Microsoft  Exchange  Servers 

Source:  Microsoft  CIO 


Unless  you  have  as  much  money  as  Microsoft, 
you  may  want  to  use  Oracle  for  email 


ORACLG 


Source  for  Microsoft  Data: 

Keynote  presamsiion  by  Microsoft  CIO 

at  NRFtech  (T  Leadership  Summit  on  August  12. 2002 


oracle.com/email 
or  call  1.800.633.0541 


CoayniM  020(0,  Oracls  AM  nghtt  ((utvH.  Oracia  >a  a  rapttarad  tradamarlc  of  Orada  Cerparason  and/or  ns  afMiaua.  OBtai  ni 
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Customefs  say  that 
business-process 
management  software 
can  pay  for  itself  in  a  year  or  two 
by  making  better  use  of  under- 
performing  ERP  systems.  Page  27 


What  went  wrong  with  the 
business-process  reengineering  fad  of  the 
’90s?  And  will  it  come  back? 
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PeopleSoft  Offers  Refunds 
In  Event  of  Oracle  TMceover 


Apps  vendor  seeks  to  keep  customers  from 
delaying  purchases  following  rival’s  hostile  bid 


eV  MARC  L.  8OM0IHI 

Pec^leSoft  Inc.  has  begun  pro* 
noising  to  pay  refunds  to  some 
new  or  upgrading  customers  if 
it’s  »:quii«d  and  the  products 
they  purchased  are  discontin* 
ued,  sources  said  last  week. 

And  on  June  9,  the  same  day 
that  Oracle  Corp.  launched  its 
hostile  bid  to  buy  it,  Pec^ie* 
Soft  sent  a  letter  to  a  potential 
customer  that  includ^  a  con¬ 
tractual  offer  to  pay  the  user 
twice  the  cost  of  its  software 


IDS  Criticisms  Kindle  Debate 


Intrusion  detection  is 
more  trouble  than  it’s 
worth,  Gartner  says 


BV  JAIKUMAR  VIJAVAN 

A  Gartner  Inc.  report  that 
called  intrusion-detection  sys¬ 
tems  a  &iled  technology  that 
isn't  cost-effective  evoked  fer¬ 
vent  reactions  last  week  from 
users,  vendors  and  analysts  on 
both  sides  the  argument. 

Some  concurred  with  Gart¬ 
ner's  position,  sayii^  IDSs  are 
difficult  to  manage  and  gener¬ 
ate  far  more  data  than  is  useful 

"I  couldn't  agree  more,”  said 
Eric  Beasley,  network  adminis¬ 
trator  at  Baker  Hill  Corp..  an 
application  service  provider  in 
Carmel  Ind.  that  replaced  its 
IDS  with  a  Web  appUcation 
firewall.  “IDS  did  little  to  In¬ 
crease  our  overall  security.”  he 
said.  “All  I  got  was  information 
overload.” 

Others  said  that  despite  the 
problems,  it’s  premature  to 


completely  write  off  IDS  tech¬ 
nology. 

“I  diink  that  broadly  de¬ 
scribing  IDS  as  a  market  fail¬ 
ure  because  of  product  short¬ 
comings  is  a  bit  alarmist,"  said 
Eric  Goldreich.  manager  of 
technology  at  Latham  &  Wat¬ 
kins  LLP,  a  law  firm  with  1,500 
attorneys  in  Los  Angeles.  “The 
IDS.  page  61 


licenses.  According  to  the  let¬ 
ter.  which  was  obtained  by 
Computerworld.  the  payment 
would  be  triggered  should 
PeopleSoft  be  bought  within  a 
year  and  if  within  two  years 
the  new  owner  drops  the  pur¬ 
chased  applications  or  sets 
plans  to  stop  supporting  them. 

The  refund  $trateg>'  is  seen 
as  an  attempt  by  Pleasanton. 
Callf.-faased  PeopleSoft  to  keep 
concerned  users  from  delaying 
sofhvare  purchases  because  of 
Oracle's  hostile  bid.  It  could 
also  serve  as  a  “poison  piU“ 
takeover  deterrenL- 

The  takeover  battle  intensi¬ 
fied  last  week,  as  Oracle 
upped  its  offer  to  $6J  billion, 
and  PeopleSoft  and  J  J).  Ed¬ 
wards  &  Ca  amended  their 
merger  agreement  in  an  effort 
to  speed  up  that  deal. 

Tlie  identity  of  the  user  that 
received  the  June  9  letter  was 
shielded  from  Computerwortd. 
PeopleSoft  declined  to  com¬ 
ment  about  the  letter  and  said 
it  doesn't  publicly  discuss  ctis- 
tomer  contracts.  But  a  spokes- 
PeopleSo/I.  page  16 


I^MCI  Security  Doubts  Persist 


Users,  NaNy  officials 
and  EDS’s  partners 
still  raising  concerns 

IMiliia 

The  need  for  a 


SECURITY 


more  secure 
network  infrastructure  was 
ot>e  of  the  driving  forces  be¬ 
hind  the  U3.  Navy’s  quest  to 
build  the  S6.9  billion  Navy/ 
Marine  Corps  Intranet  But 


with  only  a  few  months  left 
before  the  majority  of  N/MCI 
seats  are  deployed,  questions 
and  concerns  about  security 
remain. 

During  the  Navy/Marine 
Corps  Intranet  Industry  Sym¬ 
posium  here  Last  week,  offi¬ 
cials  from  both  the  Navy  and 
its  prime  contractor.  Electron¬ 
ic  Data  Systems  Corp.,  touted 
N/MCl  as  “the  most  secure 
network  in  the  Department  of 
N/MClpctge6l 
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Sybase's  CEO;  H-1B  program  benefits  the  U.S. 
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Customers  say  that 
business-process 
management  software 
can  pay  for  itself  in  a  year  or  two 
by  making  better  use  of  under- 
performing  ERP  systems.  Page  27 
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PeopleSoft  Offers  Refunds 
In  Event  of  Oracle  Takeover 


Apps  vendor  seeks  to  keep  eustoniers  from 
delay  ing  purchases  following  ri\ars  hostile  hid 


BV  MARC  L.  SONOINI 

PeopleSoft  Inc.  has  begun  pro-  | 
mising  to  pay  refunds  to  some 
new  or  upgrading  customers  if 
it’s  acquired  and  the  products 
they  purchased  are  discontin¬ 
ued.  sources  said  last  week. 

And  on  June  9,  the  same  day 
that  Oracle  Corp.  launched  its 
hostile  bid  to  buy  it.  People- 
Soft  sent  a  letter  to  a  potential 
customer  that  included  a  con¬ 
tractual  offer  to  pay  the  user 
twice  the  cost  of  its  software 
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IDS  Criticisms  Kindle  Debate 


Intrusion  detection  is 
more  trouble  than  it's 
worth.  Gartner  .saNt; 


BV  JAIKUMAR  VIJAVAN 

A  Gartner  Inc.  report  that 
called  intrusion-detection  sys¬ 
tems  a  failed  technoIog>'  that 
isn’t  cost-effective  evoked  fer¬ 
vent  reactions  last  week  from 
users,  vendors  and  analysts  on 
both  sides  of  the  argument. 

Some  concurred  with  Gart¬ 
ner’s  position,  saying  IDSs  are 
difficult  to  manage  and  gener¬ 
ate  far  more  data  than  is  useful. 

“I  couldn't  agree  more."  said 
Eric  Beasley,  network  adminis¬ 
trator  at  Baker  Hill  Corp..  an 
application  ser>'ice  provider  in 
Carmel.  Ind..  that  replaced  its 
IDS  with  a  Web  application 
firewall.  "IDS  did  little  to  in¬ 
crease  our  overall  security."  he 
said.  “All  I  got  was  information 
overload." 

Others  said  that  despite  the 
problems,  it's  premature  to 


completely  write  off  IDS  tech¬ 
nology. 

"I  think  that  broadly  de¬ 
scribing  IDS  as  a  market  fail¬ 
ure  because  of  product  short¬ 
comings  is  a  bit  alarmist.”  said 
Eric  Goidreich.  manager  of 
technolc^'  at  Latham  &  Wat¬ 
kins  LLP.  a  law  firm  with  1,500 
attorneys  in  Los  Angeles.  “The 
IDS.  page  61 


licenses.  According  to  the  let¬ 
ter.  which  was  obtained  by 
Compuferworld.  the  payment 
would  be  triggered  should 
PeopleSoft  be  bought  within  a 
year  and  if  within  two  years 
the  new  owner  drops  the  pur¬ 
chased  applications  or  sets 
plans  to  stop  supporting  them. 

The  refund  strategs'  is  seen 
as  an  attempt  by  Pleasanton. 
Calif. -based  PeopleSoft  to  keep 
concerned  users  from  delaying 
software  purchases  because  of 
Oracle’s  hostile  bid.  It  could 
also  serve  as  a  “poison  pill" 
takeover  deterrent. 

The  takeover  battle  intensi¬ 
fied  last  week,  as  Oracle 
upped  its  offer  to  SO.?  billion, 
and  IVopleSt>ft  and  j.D.  Ed¬ 
wards  &  Co.  amended  their 
!  merger  agreement  in  an  effort 
to  speed  up  that  deal. 

The  identity  of  the  user  that 
received  the  lune  9  letter  w-as 
shielded  from  Compufcrw’orld. 
PiH>pleSoft  declined  to  com¬ 
ment  about  the  letter  and  said 
it  doesn’t  publicly  discuss  cus¬ 
tomer  contracts.  But  a  spokes- 
PeopleSofi.  page  16 


H/MCI  Security  Doubts  Persist 


Users,  Navy  officials 
and  EOS's  partners 
still  raising  concems 


NATIONAL 

SECURITY 


more  secure 
network  infrastructure  was 
one  of  the  driving  forces  be¬ 
hind  the  U.S.  Na^'y’s  quest  to 
build  the  S6.9  billion  Navy,' 
Marine  Corps  Intranet.  But 


ith  only  a  few  months  left 
I  before  the  majority  of  N-  MCI 
seats  are  deployed,  questions 
and  concems  about  security 
remairt 

During  the  Na\y  Marine 
Corps  Intranet  Industrx-  Sym¬ 
posium  here  last  week,  offi¬ 
cials  from  both  the  Nax^  and 
its  prime  contractor.  Electron¬ 
ic  Data  S>'stems  Corp..  touted 
N/MCI  as  “the  most  secure 
network  in  the  Department  of 
N/MC/.p<ige6J 


Brain  triggers  rush  of  endorphins  to  help  prevent  panic.  - 


(g  server 
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bous  TofvakJs  Winoows  iS  a  t'a*mark  o1  McrosoH  Cofpofanon  in  the  Unileo  Stales  omet  cour>li«s.  or  both  UNIX  is  a  tegiblefed  ltaaemar«  o(  The  Open  Group  m  the 
rxifted  Slates  and  olher  counines  Other  companv  product  and  sentte  narnes  may  bt  trademarks  nr  servce  marks  ot  ottrers  •  2003  IBM  Corporation  All  rights  reserved 


Trigger- 


■^mand. 


The  human  body  can  anticipate  problems  on  demand.  As  can  IBM 
eServer.  Select  eServer  xSeries"  models  are  designed  to  sense  when 
any  one  of  six  system  components  exceeds  a  safe  threshold.  They 
respond  by  notifying  the  system  administrator,  allowing  you  to  replace 
a  part  up  to  48  hours  before  it  fails. 

eServer:  servers  for  on  demand  business. 

Can  you  S66  it?  See  it  at  ibm.com/eserver/ondemand 


Windows' 

Linux’ 

UNIX' 

Midrange 

Mainframe 

Storage 


We've  been  listening  to  what  you,  our  customers,  hove  to  soy  about  the  way  the  software  industry 
does  business.  And  frankly,  some  of  it  couldn't  be  repeated  in  print.  You've  been  frustrated 
by  long-term  agreements.  You've  been  disenchanted  by  the  lack  of  options  when  it  comes  to 
softwore  licensing.  And,  most  of  all,  you've  been  annoyed  that  no  one's  been  listening  to  any 
of  your  complaints. 

Well,  we  want  you  to  know  that  we  hear  you,  and  we've  been  doing  everything  we  can  to  chonge 
the  woy  we  do  business  with  you.  Recently,  we've  revolutionized  the  industry  by  being  the  first 
to  introduce  flexible  licensing  contracts.  With  FlexSelect  Licensing',  you  can  now  get  software 
on  your  terms,  not  ours.  We  offer  short-term  or  long-term  licensing  Agreements,  so  you  can 
choose  your  commitment  based  on  your  needs.  Of  course,  if  you  prefer  more  troditional  long¬ 
term  licensing,  it's  still  ovoiloble.  And  we  offer  payment  plans  that  fit  the  way  you  work,  not 
the  other  way  around. 


Flexible  software  licensing  is  about  choice. 
It's  about  control. 

It's  about  time. 


We've  heard  back  from  many  of  our  customers  ond  they're  thrilled  with  the  chonges.  From  globol 
Fortune  500*  companies  to  smaller  organizations,  the  response  hos  been  overwhelmingly 
positive.  Some  of  the  comments  we've  received  include  'flexible  licensing  is  o  tremendous  tool,' 
'a  huge  win  for  CA  customers'  and  'clearly  demonstrates  that  CA  is  an  extremely  innovative, 
flexible  and  customer-focused  compony.' 


But  the  changes  don't  stop  with  flexible  licensing.  Thot's  just  one  port  of  our  renewed  focus 
on  you,  our  customers.  We've  also  increased  our  responsiveness  to  your  needs.  And  we've  even 
increased  our  focus  on  internal  reseorch  and  development,  furthering  our  commitment  to 
erecting  the  most  innovative  business  software  solutions  in  the  market. 


Innovations  in  licensing,  increased  customer  responsiveness  ond  product  development  are  just 
a  few  more  ways  we're  stoying  well  ahead  of  the  rest  of  the  fxjck  In  the  software  industry.  Contact 
us  at  ca.com/fiexselect  todoy  to  find  out  more.  We  think  you'll  be  pleased  with  whot  you  see. 
If  not,  let  us  know.  And  we'll  do  something  about  it. 


FlexSelect  Licensing’" 


Computer  Associates® 


O  2003  Computer  Associates  International,  Irtc.  (CA).  AH  trademarks,  trade  names,  service  marlts,  artd  logos  referenced  herein  belortg  to 
their  respective  comparties. 


6  HP's  adaptive  management 

vision  shows  promise,  but  it’s 
years  away  from  reality,  say 
users  and  analysts. 

7  Delta  Air  Lines  plans  to  test 
RFID  t^s  for  luggage. 

7  AIX  users  aren't  concerned 

about  the  IBM/SCO  legal 
scuffle  over  Unix. 

8  Microsoft  upgrades  its  Pocket 
PC  mobile  operating  system. 

10  Sen.  Orrin  Hatch’s  “extreme" 
remedy  for  piracy  draws  fire. 

10  CA  enhances  its  eTrust  anti¬ 
virus  software  so  managers 
can  use  it  to  block  unwanted 
downloads. 

11  Microsoft  entices  users  to 
upgrade  their  servers  by 
tweaking  its  licensing. 

11  Q&A:  Sybase  CEO  John  Chen 

criticizes  SCO  and  Oracle,  and 
praises  the  H-IB  visa  program. 

14  CeBIT  panelists  say  wireless 

technology  isn’t  ready  for 
wide  adoption. 

14  Wall  Street  firms  step  away 
from  the  bleeding  edge  of  IT. 

20  A  Virginia  county  protects  its 
IT  modernization  budget,  de- 
spite  the  weak  economy. 

20  Q&AiASunVP  says  utility 
computing  is  Tive  years  away 
from  joining  the  mainstream. 

21  OdjA  vu;  A  significant  per¬ 
centage  of  IT  projects  still  fall, 
survey  finds. 


27  Tools  for  Tough  Times.  Busi¬ 
ness-process  management 
software  can  help  companies 
get  more  value  by  linking  ex¬ 
isting  applications,  but  it  re¬ 
quires  some  integration  and 
training. 

33  QuickStudy:  Digital  Rights 
Management.  The  control 
and  protection  of  digital  con¬ 
tent  has  become  a  hot  issue. 
Find  out  more  about  legal  lim¬ 
its  placed  on  users  and  tech¬ 
nologies  designed  to  enforce 
those  limits. 

38  Security  Manager's  Journal; 

IT  Security  Confronts  New 
Legal  Liabilities.  New  securi¬ 
ty  threats  and  privacy  legisla¬ 
tion  could  create  new  liability 
headaches  for  Mathias  Thur¬ 
man  and  other  IT  security 
professionals. 

MAIU6EMENT 


48  Book  Excerpt:  Reengineering 
Revisited.  What  went  wrong 
with  the  business-process  re¬ 
engineering  fad?  And  will  it 
come  back?  Find  out  what  au¬ 
thors  Thomas  H.  Davenport. 
Laurence  Prusak  and  H.  James 
Wilson  have  to  say  about  the 
subject  in  this  excerpt  from 
their  book.  What's  tJ^  Big 
Idea?  Creating  and  Capitaliz¬ 
ing  on  the  Best  Management 
Thinking. 

52  Outsourcers:  Do  They  Mea* 
sure  Up?  Companies  are 
using  benchmarking  or  base¬ 
lining  tests  to  make  sure 
they’re  not  paying  too  much 
to  outside  contractors. 


B  On  the  Mark;  Mark  Hall  re¬ 
veals  that  even  Eclipse’s  sup¬ 
porters  see  its  limits,  and  he 
lists  four  women  headed  for 
the  WITI  Hall  of  Fame, 

24  Patricia  Keefe  says  vendors' 
competitive  maneuvers  are 
making  it  harder  for  users  to 
buy  an>'thing.  And  it  will  be 
the  vendors'  fault  if  the  mar¬ 
ket  continues  to  sputter. 

24  Pimm  Fox  puts  SSL  on  par 
with  IPsec  for  securing  in¬ 
tranet  and  Internet  access. 

25  Michael  Oartenberg  says 
there's  plenty  of  room  and 
need  for  Linux,  despite  the  at¬ 
tacks  SCO  and  Microsoft  have 
launched  on  the  open-source 
operating  system. 

40  Tommy  Peterson  suggests  it's 
time  to  take  the  flood  of  un¬ 
structured  data  seriously. 

54  Paul  Oien  offers  four  rules  for 
using  “microdeliverables"  to 
keep  IT  projects  on  schedule. 

62  Frankly  Speaking;  Frank 
Hayes  reminds  readers  that 
bad  ideas  from  lawmakers 
keep  coming  around,  as  Sen 
Orrin  Hatch  suggests  destroy¬ 
ing  the  computers  of  users 
suspected  of  illegally  down¬ 
loading  files. 
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Safeguardng  Ydut  Networic 

SECURfTY :  Paul  V.  Mockapetris.  inventor  of 
the  Domain  Name  System  and  chief  scientist 
at  Nominum,  gives  advice  on  ways  to  ensure 
that  your  networks  are  secure  and  reliable. 

CXWckiM  38707 

Does  Privacy  Pay? 

MANA6EMENT:  Yes,  investments  in  privacy 
can  pay  off  in  the  long  run  for  companies  in 
privacy-sensitive  markets,  writes  columnist 
jay  Cl^.  He  also  provides  a  chart  for  figur¬ 
ing  out  if  you  engage  in  privacy-sensitive 
commerce.  CIOiriGllWi  38236 

Senrer  Consoidalion 

0PERAT1IM  SYSTEMS:  Avanade's  Christopher 
Burry  offers  t4>s  on  when  it  makes  sense  to 
merge  hardware  —  and  when  it  doesn't  O 
QuiekLlMi  38272 

Avoid  HhUen  Costs  When 
Bulling  WIsb-BasedApps 

DEVELOPMEirT:  We  all  want  to  jump  in  and 
start  coding,  but  you  need  to  slow  down  and 
properly  execute  a  discovery  phase  to  ensure 
a  successful  development  project  says 
columnist  Seth  Miller.  O  (McUMiSMS 

WhatMakesaOood 
CfM  Package? 

SOFTWARE:  Charles  Bom  of  Amdocs’  Clarify- 
CRM  divisioo  outlines  what  to  look  for  if 
you’re  in  the  market  for  CRM  software. 

OQMdUnk  38070 
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AT  DEADLINE 


KeySMeda  Emerges 
From  Chapter  n 

KaySMKii  Group  Inc.  In  Los 
AngriM,  produMT  of  the  Comdei 
end  Metl^liMiitetuptfedB 
shows.  iMt  week  saM  H  has 
anwrged  frem  Chapter  11  banh- 
rvptcy  as  a  prleale  company.  The 
new  company,  to  be  caM  Media* 
LJm  Intornational  MCm  wtl  reto- 
cato  Ms  summer  to  San  Frands- 
ce.  The  company  said  it  reduced 
Ns  debt  by  8^  and  retolad  an¬ 
nual  Mareat  eipeoses  by  S1%. 


New  Trojan  Horse 
E*rogram  Confirmed 

Rumors  of  a  new  type  of  Troian 
horse  program  were  confirmed 
last  week.  The  program,  known 
vartouify  as  Trofan  S6608*'  and 
‘‘SbinMor*  targets  computers 
running  Linux  and  must  be  in- 
stalsd  manualy.  Once  kwtaltod, 
the  Trofan  horse  runs  quietly  in 
the  beekground  and  acts  as  e 
dtetrflwtod  port  scanner,  ran¬ 
domly  aaarehbig  Ihe  Intemet  for 
macMnae  with  VMM  V>  addresses 
and  open  ports. 


OM  Feeds  Shark 

BM  said  Friday  that  8s  Ragship 
Entorprtoa  Stonge  Server  Modal 
800  nme  fiibins  peer  to  pear 
ramoto  copy  through  Bsynehro- 
noue  npfcaMen.  extonMng  tfie 
capy  ctoMbWoe  of  eVs  aSorver 
zSo^  and  epan  syMsms.  BM 
alaoaddMiupto6.9TBefstwid- 
by  capacity  on  demand  to  the 
server,  codmamed  Shark. 


Computerworld 
Wins  Press  Awards 

CariNpBtorworitf  garnered  nine 
nittenal  buainoas  prsM  awards, 
indudtoo  lour  fbst-piaea  gold 
honors,  al  an  Amortoan  Society 
of  BaMnoH  AMcalion  EdMors 
eeramoay  bi  MMington  tost 
weak.  The  anarde,  which  racog- 
nto  axcalsnca  bi  buanaaa  jour- 
niiam.  Wtasrad  ragional  honors 
prwaatod  aarlor  Me  monA. 
Detail  as  malible  on  our  Web 
MtaNMeUMi  303671. 


Adaptive  Management’ 
Promising,  but  Years  OflF 


Users  applaud  HP  rollout  but  doubt  that 
vision  will  become  reality  any  time  soon 


HEWLErr-PACKARD 
Ca  last  week  took  a 
step  toward  making 
its  “adaptive  enter¬ 
prise  management''  vision  a  re¬ 
ality.  But  users  were  left  with 
little  doubt  that  it  will  take 
years  for  the  strategy  to  fulfill 
its  promise  of  reducing  TI’ 
complexity  aitd  costs. 

At  the  HP  Software  Forum 
here,  the  company  beat  the 
adaptive  management  drum  as 
it  unveiled  more  than  30  prod¬ 
ucts  and  upgrades  in  its  Open- 
View  systems  management 
sofhvare  line.  It  made  assur¬ 
ances  that  the  products  will 
bring  IT  shops  closer  to  an  in¬ 
frastructure  that  can  change 
with  business  needs  and  even 
heal  itself. 

Attendees  liked  the  mes¬ 
sage.  but  they’re  not  holding 
their  breaths. 


"It's  obvious  that  we’re  go¬ 
ing  to  get  clear  [systems! 
event  management,  but  it's  not 
happening  today,“  said  Steven 
Yee.  director  of  channel  devel¬ 
opment  at  Voyence  Inc.,  an 
OpenView  integrator  in  Rich¬ 
ardson,  Texas.  ‘There  is  still 
no  silver  bullet." 

Many  of  the  product  releas¬ 
es.  such  as  OpenView  Net¬ 
work  Node  Manager  (NNM) 
7.0,  were  demonstrated  at  the 
event,  but  they  won’t  start 
shippir^  until  Sept.  30. 

NNM  users  were  itching  to 
try  out  newly  announced  fea¬ 
tures.  such  as  the  abilit>’  to 
manage  more  objects  on  a  net¬ 
work  and  then  filter  out  mean¬ 
ingless  alarms.  That  would 
give  network  managers  a  more 
accurate  assessment  of  the 
cause  of  a  network  outage. 

’That  sounds  good  to  me 
to  have  fewer  alarms,  with 
the  real  cause  of  an  outage 


User  Bets  on  Adaptive  Management 


HTi  adigikm  Mtaeprtat 

ntoMfMMut  is  sB  fust  a  vF 
sloa  but  Seorgia-PB^  Corp. 
(6P)  Is  counting  on  that  vision 
to  mstarialin  ai  R  punues  a 
prafect  to  bfino  Rs  data  center 
management  back  inhouse. 

StartinQ  in  September,  the 
Allanta-besed  paper  and  chem- 
icafe  manufocknr  wi  begin 
maneginglwDdatacefltarsaf* 
tersByeeisofoaboifcadinan- 
agemanl  by  GM.  The  move  is 
bakig  made  prmtarfy  to  lower 
cosls.saidSuilp(3angopad- 
hyey.  manager  of  Unsi  tachricai 
services  el  GP. 

WllhS23  biton  in  raverue 
in  2002  and  more  than  60.000 
employeas.€Pviibemanag* 
ing  a  coneoRdaled  fT  operation 
wNh  23X)  VMndows  sermm 
and  140  Unix  earvars. 


Conceptueiy.  GP  oodd  mar¬ 
shal  many  servers  «id  ralBled 
^QtemstohendeanewbiBF 
neas  demand  and  than  be  aUe 
to»«tichagain(McMy.6en- 
gogadhyay  said.  The  proiect  has 
been  in  the  planning  sia^  lor 
three  yearn  and  reles  heeviy  on 
HTsOpenViBwOpenbonssofi- 
were.  aa  wel  aa  Network  Node 
Manager  and  olher  product. 

"With  the  adap^  technol¬ 
ogy  and  utBy  inodels  of  HP. 
there's  a  trernendouB  arnouni  of 
value  to  using  the  computing 
reacuroes  as  we  need  them,’ 
Gangopattiyay  said. ‘Adaptive 
management  6  more  of  a  con¬ 
cept  (than  a  realty]  at  this 
poinL  but  if  we  can  reach  up  to 
60%  to  70%  of  the  hi  con¬ 
cept  that’s  a  tan.’ 

‘kbatbmthn 


shown,"  said  G.  Simon  Jin.  net¬ 
work  architect  at  The  Cleve¬ 
land  Clinic  Foundation.  Jin 
said  he  has  used  NNM  at  oth¬ 
er  companies  and  is  consider¬ 
ing  it  for  the  health  center. 

Nora  Denzel,  senior  vice 
president  and  general  manag¬ 
er  of  HP's  Global  Software 
business  unit,  said  in  her 
keynote  speech  that  adaptive 
management  will  provide  the 
ability  to  “automate  IT  infra¬ 
structure  to  adapt  to  any  busi¬ 
ness  decision."  Adaptable  and 
self-healing  networks  will 
eventually  free  IT  workers 
from  maintenance  and  let 
them  take  on  higher-level 
strategist  and  developer  roles 
instead,  she  said. 

Making  a  Business  Case 

Some  users  said  that  vision, 
though  distant,  is  alluring.  But 
hurdles  remain. 

Itai  Argoetti,  a  systems  man¬ 
ager  at  Orbotech  Ltd.,  a  maker 
of  testing  equipment  in  Yavno, 
Israel,  said  adaptive  manage¬ 
ment  is  an  “interesting  and 
good  concept.”  but  he’s  unsure 
that  IT  managers  will  be  able 
to  explain  the  sofhvare  to  their 
business-side  bosses. 

"With  the  current  economic 
situation,  management  wants 
to  make  IT . . .  shrink,"  Argoet¬ 
ti  said.  "If  you  could  convince 
them  this  software  will  really 
lower  costs,  I  believe  they 
would  go  for  it.  But  you  have 
to  convince  them  first." 

Tim  Hagn,  vice  president 
of  IT  operations  and  engineer¬ 
ing  at  l^rich  Life  Insurance 
Co.  in  Schaumburg.  IlL.  has  al¬ 
ready  gotten  value  from  Open- 
View  in  predicting  and  pre¬ 
venting  network  downtime 
and  would  welcome  an  adap¬ 
tive  capability. 

"In  the  past,  when  a  user 
couldn't  [work]  because  of  net¬ 
work  or  systems  problems,  all  I 
could  do  was  say  Tm  sorry.' 

But  this  gives  us  the  potential 
to  predict  problems  and  pre¬ 
vent  saying  Tm  sorry.’ "  Hagn 
said  “That’s  huge  to  me." 


HP  OpenView 


7996 


reduction  in 
sorvordownttow 


7496 


reduction  in 
overal  downtime 


reduction  in  time 
dto  identify 
cauM  of  downtime  and  fix  k 


49%: 


31%: 


'  increaia  in  uaar 
3  productivity  because 
of  reduced  downtime 

•  RETURNS  <j»r  CO  inns) 


fT  productivity 


Cost  reduction 


S19.223 

S36.172 


User  productivity  S93.712 
Lost  revmue  avoided  S74.468 


BASE:  U  companes  ew  hne  ificd 
OpenView  Ay  at  least  Vvee  wars 
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Anal>*sts  agreed  that  the 
ultimate  promise  of  adaptive 
management  is  still  years 
away. 

“(HP  has]  shown  us  a  high- 
level  view  of  a  (yet-to-bej  fully 
implemented  strategy  for 
leveraging  IT  resources  in  a 
virtualized  business  environ¬ 
ment,”  said  Tim  Grieser.  an 
analyst  at  IDC  in  Framingham, 
Mass.  But  Grieser  noted  that 
HP  has  already  signed  dozens 
of  large  customers  for  its  Utili¬ 
ty  Data  Center  product,  which 
he  called  the  closest  thing  to  a 
fully  implemented  adaptive 
management  system. 

“Obviously  we  aren’t  there, 
but  we're  closer.  And  this 
[adaptive  management  ability] 
is  more  achievable  than  you 
think,"  said  Laura  Koctzle,  an 
analyst  at  Forrester  Research 
Inc.  in  Cambridge,  Mass.  Still. 
Koetzle  predict^  that  it  will 
be  10  to  15  years  before  such 
software  is  able  to  satisfy  busi¬ 
ness  and  IT  managers  alike.  I 


w  .compolefwortd.com 


Delta  to  Test  RRD  Tags  on  Luggage 


Radio-frequency  trial  follows  W^-Marfs 
embrace  of  technolog)'  in  retail  industn- 


BV  SOB  BKEWIM 

Delta  Air  Lines  Inc.  last  week 
said  it  plans  to  test  the  use  of 
radio-frequency  identUlcaiion 
(RFID)  tags  on  pas 
senger  lugg^c  in 
the  fail,  making  it 
the  second  maior 
company  to  give 
the  emerging  technology  a 
boost  this  month. 

Delta  will  give  RFID  devices 
a  trial  run  on  selected  flights 
from  lacksonville.  Fla.,  to  its 
headquarters  hub  in  Atlanta.  It 
said  the  30*<lay  test  will  involve 
the  use  of  more  than  40,000 
disposable  RFID  tags  that  op¬ 
erate  at  900  MHz  and  are  being 
made  by  two  vendors:  Matrics 
Inc.  in  Columbia,  Md.,  and  SCS 
Corp.  in  San  Diego 

Delta’s  announcement  came 
rust  one  week  after  Wal-Man 
Stores  Inc.  said  it  plans  to  re¬ 
quire  its  top  100  suppliers  to 
use  RFID  tags  on  shipping  pal¬ 
lets  by  January  2005  (^uick- 
Link  39181].  Wal-Mart'$  stamp 
of  approval  is  expected  to  spur 
bro^r  adoption  of  RFID 
technology  in  the  retail  indus¬ 
try.  and  analysts  said  Delta's 
move  could  have  a  similar  ef¬ 
fect  on  other  airlmes. 

RFID  has  to  wait  for  “some 
killer  apps"  to  become  a  reali¬ 
ty  before  it  can  be  widely 
used,  said  Deepak  Shetty,  an 
analyst  at  Frost  &  Sullivan  Inc. 
in  San  Jose.  Delta's  test  and 
Wal-Mart’s  embrace  of  the 
technology  may  be  the  cata¬ 
lysts  it  ne^s,  he  added. 

Rob  Maruster,  director  of 
airport  customer  service  strat¬ 
egy.  planning  and  develop¬ 
ment  at  Delta,  said  the  airline's 
requirements  differ  markedly 
from  those  of  Wal-Mart.  “We 
operate  in  a  very  industrial  en¬ 
vironment.''  Maruster  said, 
noting  that  the  RFID  tags  will 
have  to  be  readable  while  bags 
are  being  loaded  and  unloaded 
on  airport  tarmacs. 

Air^rts  also  have  other 
wireless  systems  that  could 
cause  interference  with  the 
passive  tags  Delta  plans  to 


test.  Maruster  said.  A  passive 
tag  ha.<i  no  power  connection 
or  transmitter  and  is  “read*  by 
an  RFID  scanner  equipped 
with  a  transmitter. 

Maruster  said 
Delta  plans  to  use 
the  test  to  deter¬ 
mine  RFID's  ability 
to  function  at  a  range  of  up  to 
10  feet,  which  wouid  let  the 
airline  track  b^  more  pre¬ 
cisely  than  it  can  with  existing 
bar-code  systems. 

He  added  that  although 
Delta  delivers  99%  of  the  100 
million  or  so  bags  it  handles 


each  year,  it  spends  “a  lot  of 
money"  trying  to  And  missing 
b^.  “This  is  a  cost-reduction 
opportunity,”  Maruster  said. 

But  Delta  wants  to  pay  5 
cents  or  less  for  each  RFID 
bag  tag  before  it  puts  the  tech¬ 
nology  into  widespread  use  — 
the  same  price  Wiil-Mart  is 
seeking  from  vendors.  RFID 
tags  currently  sell  for  between 
30  and  50  cents  apiece.  John 
Shoemaker,  vice  president  of 
business  development  at 
Matrics.  said  that  at  h^  vol¬ 
ume  levels,  the  cost  of  an 
RFID  bag  tag  could  drop  to  20 
cents  within  a  year. 

SCS  President  Barry  Crop¬ 
per  agreed  that  increased  vol¬ 
umes  will  drive  down  prices. 


but  he  added  that  a  tag  re¬ 
design  may  be  required  to 
meet  Delta's  cost  goal.  SCS  is 
working  on  a  new  form  factor 
that  integrates  the  ROD  trans¬ 
mitter  onto  the  tag.  he  said. 

Pat  Rar> .  Delta’s  manager  of 
baggage  planning  and  devel¬ 
opment,  said  Matric.s  and  SCS 
will  produce  the  RFID  tags  in 
a  substrate  material  that  will 
be  combined  with  rolls  of  bar¬ 
code  tags.  Modified  printers  at 
airport  ticket  counters  will  be 
able  to  print  the  bar-code  tags 
and  simultaneously  write  the 
same  information  to  the  RFID 
tags  electronically,  Raiy  said. 

American  Airlines  Inc.. 
Northwest  Airlines  Inc.  and 
United  Air  Lines  Inc.  didn’t 
return  calls  seeking  comments 
on  whether  they  plan  to  con¬ 
duct  similar  RFID  tests.  I 


AIX  Users  Remain  Unnifiled 
By  BM/SCO  Legal  ScufRe 


Say  licensing  issue 
isn’t  their  problem 


BV  TODO  m.  WEISS 

Corporate  users  of  IBM’s  AIX 
version  of  the  Unix  operating 
system  appear  to  be  generally 
unperturbed  even  though  The 
SCO  Group  Inc  last  week  fol¬ 
lowed  thn^gh  vrith  its  threat 
to  revoke  IBM's  AIX  distribu¬ 
tion  license  (Quick- 
Unk  392401. 

Ken  Ebbe,  presi¬ 
dent  of  Chicago- 
based  IBM  user 
group  Share  loc., 
said  he  sees  the  legali 
issues  between  SCO 
and  IBM  as  separate 
ffom  users’  day-to- 
day  IT  concerns. 

“My  perspective 
is  that  we  get  (AIX] 
from  IBM.  and  we  consider 
the  licensing  issues  to  be 
IBM's  (ptx>blein].’’  said  Ebbe. 
The  lawyers  will  sort  it  all 
out" 

Although  the  eventual  reso¬ 
lution  of  the  case  could  have 
ramincaiions  for  AIX  users, 
and  any  court  rulings  or  legal 
losses  against  IBM  could  be 
"painful"  for  customers.  "1 


still  look  to  IBM  to  resolve  it" 
Ebbe  said. 

An  AIX  5L  user  is  also  tak¬ 
ing  the  not-my-prob!em  posi¬ 
tion.  "It’s  hard  for  me  (o  un¬ 
derstand  bow  (the  case]  could 
affect  us,"  said  the  enterprise 
architecture  manager  for  a 
global  food  retailer  who  re¬ 
quested  anonymity.  If  IBM 
were  to  lose  the  case,  her 
company  would  watch  to  see 
udtether  IBM  subse¬ 
quently  changed  its 
product  road  maps 
and  then  determine 
how  that  would  affect 
the  company’s  infra¬ 
structure.  she  said. 

“We  would  be 
hard-pressed  to 
change  our  hard¬ 
ware,  but  we  could 
change  our  operat¬ 
ing  system"  if  neces¬ 
sary.  the  manager  said. 

Vaughn  Moffett.  IS  director 
at  the  Atlanta  Housing  Au¬ 
thority.  said  be  will  continue 
to  use  AIX  to  support  his  ISO 
users  until  he's  told  it’s  no 
longer  licensed  by  IBM.  "I 
love  IBM  AIX,”  Moffett  said. 
“If  that  happens,  we'll  have  to 
look  elsewhere.  I  don’t  see  it 
as  important  right  now  unless 


the  coun  makes  a  decision"  in 
SCO's  favor. 

Meanwhile,  IBM  rival  Sun 
Microsystems  Inc.  wasted  no 
time  last  week  in  unveiling  an 
advertising  campa^  aimed  at 
prodding  corporate  AIX  users 
to  start  wony’ing  about  the 
ongoing  IBM/SCO  legal  flghL 
The  ads  offer  free  two-day  as¬ 
sessments  to  customers  look¬ 
ing  to  migrate  from  AIX  to 
Solaris. 

Offering  Reassurances 

Nancy  Weintraub,  director  of 
competitive  intelligence  at 
Sun.  said  the  motivacion  for 
the  ad  campaign  is  “to  help 
customers  who  are  concerned. 
It  really  depends  on  who 
you're  talking  to  in  an  organi¬ 
zation."  she  said,  adding  that 
legal  ofllcials  inside  compa¬ 
nies  are  often  more  worried 
than  IT  ofTicials  about  the  im- 
plicatioas  of  the  SCO  action. 
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In  a  separate  statement.  Sun 
reaffirmed  to  its  customers 
and  partners  "that  it  has  li¬ 
censing  rights  to  Unix  code" 
and  isn't  facing  the  kinds  of 
legal  issues  SCO  is  pursuing 
against  IBM. 

In  March.  Lindon.  Utah- 
based  SCO  sued  IBM  for 
$1  billion,  alle^ng  that  IBM 
misappropriated  SCO  Unix 
trade  secrets  by  putting  some 
of  the  code  Into  Linux.  In  the 
lawsuit.  SCO  gave  IBM  100 
days'  notice,  as  required  un¬ 
der  the  iicensing  agrecmeni. 
sa>*ing  it  would  terminate 
IBM's  AIX  license  if  the  com¬ 
pany  didn’t  resolve  alleged 
violations. 

That  100-day  deadline  was 
reached  last  week,  and  SCO  is 
maintaining  its  position  that 
AIX  is  an  “unauthorized  de¬ 
rivative"  of  SCO's  protected 
System  V  Unix  co^.  SCO  has 
since  amended  its  complaint 
to  ask  for  a  permanent  tnfunc- 
tioo  against  future  AIX  sales 
and  has  increased  the  dam¬ 
ages  it  is  seeking  ffom  IBM  to 
more  than  S3  billion. 

Trink  Guarino,  a  spokeswo¬ 
man  for  IBM's  systems  group, 
said  IBM  remains  confident 
that  it's  on  Arm  legal  ground. 
"As  we  have  claimed  all  along, 
our  license  is  irrevocable,  it's 
perpetual,  and  it  can't  be  ter¬ 
minated."  she  said.  “We  are 
standing  by  that  position"  I 
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KeySMedia  Emerges 
From  Chapter  n 

KeySMedia  Group  he.  in  Los 
Angeles,  producer  of  the  Comdex 
and  NetWorltHnterop  trade 
shows,  last  week  said  H  has 
emerged  from  Chapter  t1  bank¬ 
ruptcy  as  a  prfyate  company.  The 
rtew  company,  to  be  called  Media- 
Live  htentational  he.,  will  relo¬ 
cate  this  summer  to  San  Frartcis* 
CO.  The  company  said  it  reduced 
Hs  debt  by  87%  and  related  an¬ 
nual  interest  expertses  by  9t%. 


New  Trojan  Horse 
Program  Confirmed 

Rumors  of  a  new  type  of  Troian 
horse  program  were  confirmed 
last  week.  The  program,  known 
variously  as  “Troian  5S806"  and 
“Stumblar.“  targets  computers 
nirming  Linux  and  must  be  in¬ 
stalled  marually.  Once  installed, 
the  Troian  horse  runs  quietly  in 
the  backgrourtd  and  acts  as  a 
distributed  port  scanner,  ran¬ 
domly  soarchng  the  Internet  for 
machines  with  valid  IP  addresses 
and  open  ports. 


IBM  Feeds  Shark 

IBM  said  Friday  that  Hs  flagship 
Enterprise  Storage  Server  Model 
600  now  features  peer-to-peer 
remote  copy  through  asynchro¬ 
nous  repIcMIon.  extending  the 
copy  capabilities  of  ffiM's  eServer 
iSa^  and  open  systems.  IBM 
also  added  up  to  6.9TB  of  stand¬ 
by  capacity  on  demand  to  the 
server,  code-named  Shark. 


Computerworld 
Wins  Press  Awards 

CompufarNorfd  garnered  nine 
national  business  press  awards, 
including  four  first -piace  gold 
honors,  at  an  American  Society 
of  Bushess  fhiWcation  Editors 
ceremony  in  Washington  last 
week.  The  awards,  which  recog- 
nin  eueRerKa  h  business  iour- 
nalam,  toHowed  regional  honors 
presented  earlier  this  month. 
OetailB  are  available  on  our  Web 
sMelQuickLhk  39367). 


Adaptive  Management’ 
Promising,  but  Years  OflF 


Users  applaud  HP  mlluut  but  doubt  that 
\'ision  will  become  malip'  am-  time  s(xin 


HtW  t  H  l-l'Al  KAKI> 

Cm.  Ltsi  week  look  a 
step  toward  makinj! 
its  "adaptive  enter¬ 
prise  managenient”  vision  a  re¬ 
ality.  But  users  were  left  with 
little  doubt  that  it  will  take 
years  for  the  sirateg)’  to  fulfill 
its  prt>mise  of  reducing  IT 
complexity  and  costs. 

At  the  HP  Software  Forum 
here,  the  company  beat  the 
adaptive  management  drum  as 
it  unveiled  more  than  30  prod- 
ucLs  and  upgrades  in  irs  Open- 
View  system.s  management 
software  line.  It  made  assur¬ 
ances  (hat  the  products  will 
bring  IT  shops  cK>ser  to  an  in¬ 
frastructure  that  can  change 
with  business  needs  and  even 
heal  itself. 

Attendees  liked  the  mes¬ 
sage.  but  the)'’re  not  holding 
their  breatlts. 


’it’s  obvious  that  we’re  go¬ 
ing  to  get  clear  (systems) 
event  m.in.igcmcnt.  but  it’s  not 
happening  uxlay.”  said  Steven 
Yee.  director  of  channel  devel¬ 
opment  at  Voyence  Inc.,  an 
OpenView  integrator  in  Rich¬ 
ardson.  Texa.s.  "There  is  still 
nt)  silver  bullet." 

Many  of  the  product  releas¬ 
es.  such  as  OpenView  Net¬ 
work  NtKle  Manager(NNM) 
7.0.  were  demonstnited  at  the 
event,  but  they  won't  start 
shipping  until  Sept.  30. 

NNM  users  were  itching  to 
ir>’  out  newly  announced  fea¬ 
tures.  such  as  the  abilir>'  to 
manage  more  objects  on  a  net¬ 
work  and  then  filter  out  mean¬ 
ingless  alarms.  That  would 
give  network  managers  a  more 
accurate  assessment  of  the 
cause  of  a  network  outage. 

“That  sounds  got>d  to  me 
to  have  fewer  alarms,  with 
(he  real  cause  of  an  outage 


User  Bets  on  Adaptive  Management 


HP’s  adAirtrva  enterprise 
manegement  is  stiB  just  a  vi¬ 
sion.  but  Georgia-f^lic  Corp. 
(GP)  6  (xunting  on  that  yision 
to  matenallTe  as  it  pursues  a 
projed  to  bnng  its  data  center 
management  back  in-house. 

Starting  m  September,  the 
Atlanta-based  paper  and  chem¬ 
icals  manufacturer  will  begin 
managing  two  data  centers  af¬ 
ter  six  years  of  outsourced  man¬ 
agement  by  IBM.  The  move  is 
being  made  printanly  to  lower 
costs,  said  Sudip  Gangopad- 
hyay.  manager  of  Umx  technical 
services  alGP 

IMth  S23  billion  In  revenue 
in  2002  and  more  than  60.000 
employees.  6P  will  be  manag¬ 
ing  a  consolidatBd  (T  operation 
wrdi  2,300  Windows  servers 
arid  140  Unix  servers. 


Conceptually.  GP  could  mar¬ 
shal  many  servers  and  related 
systems  to  handle  a  new  busi¬ 
ness  demand  and  then  be  able 
to  switch  again  guicMy.  Gan- 
gopadhyay  said.  The  protect  has 
been  in  the  planning  stage  for 
three  years  and  relies  heavily  on 
HFs  OpenView  Operations  sofl- 
Mare.  as  well  as  Network  Node 
Manager  and  other  products. 

"With  the  adapirve  technol¬ 
ogy  and  utility  models  of  HP. 
thm  s  a  trerriendous  amount  of 
value  to  using  the  computing 
resources  as  we  need  them.* 
Gangopadhyay  said.  'Adaptive 
management  is  more  of  a  con¬ 
cept  (than  a  reality)  at  this 
point,  but  if  we  can  reach  up  to 
60%  to  70%  of  the  full  con¬ 
cept.  that's  a  wh.* 

•UatlHmbhn 


shown."  said  G.  Simon  fin.  net¬ 
work  architect  at  The  Cleve¬ 
land  Clinic  Foundation,  (in 
said  he  has  used  NNM  at  oth¬ 
er  companies  and  is  con-sider- 
ing  it  for  the  health  center. 

Nora  ITenzel.  senior  vice 
president  and  general  manag¬ 
er  of  HP’s  Global  Software 
business  unit,  said  in  her 
keynote  speech  that  adaptive 
management  will  provide  the 
ability  to  "automate  IT  infra¬ 
structure  to  adapt  to  any  busi¬ 
ness  decision."  Adaptable  and 
self-healing  networks  will 
eventually  free  IT  workers 
from  maintenance  and  let 
them  take  on  higher-level 
strategist  .and  developer  roles 
instead,  she  said. 

Making  a  Business  Case 

Some  users  said  chat  vision, 
though  distant,  is  alluring.  Rut 
hurdles  remain. 

Itai  Argoetti.  a  sy'siems  man¬ 
ager  at  Orbotech  Ud..  a  maker 
of  testing  equipment  in  Yavne. 
Israel,  said  adaptive  manage^ 
ment  is  an  "interesting  and 
good  concept,"  but  he’s  unsure 
that  IT  managers  will  be  able 
to  explain  the  software  to  their 
business-side  btisses. 

"With  (he  current  economic 
situation,  management  wants 
to  make  IT . . .  shrink."  Argoet¬ 
ti  -said.  “If  you  could  amvince 
them  this  software  will  really 
lower  ck»sts.  I  believe  they 
would  go  for  it.  But  you  have 
to  convince  them  first." 

Tim  Hagn,  vice  president 
of  IT  operations  and  engineer¬ 
ing  at  Zurich  Life  Insurance 
Co.  in  Schaumburg.  111.,  has  al¬ 
ready  gotten  value  from  Open- 
Vk*w  in  predicting  and  pre¬ 
venting  network  downtime 
and  would  welcome  an  adap¬ 
tive  capability. 

"In  the  past,  when  a  user 
couldn’t  (work I  because  of  nct- 
wx)rk  or  systems  problems,  all  I 
could  do  was  say  ‘I’m  sorry.’ 

But  this  gives  us  the  potential 
to  predict  problems  and  pre¬ 
vent  saying  Tm  .sorry,* "  Hagn 
said.  "That’s  huge  to  me." 


HP  OpenView 

■  BENEFITS 

/  ()s«(Y*f  downtime 

^  |{)  reductkwln 
/  "T  0  overall  downtime 

reduction  ki  time 
I  '  0  needed  to  identify 
cause  of  downtime  and  fix  it 

^1()  increase  in  user 
jTj  ()  productivity  because 
of  reduced  downtime 

■  RETURNS 

IT  prtxfuctivity  S19.223 

Cost  reduction  S36.172 

User  productivity  S93.712 

Lost  revenue  avoided  S74.468 

BASE:  <4  coxiAnies  Ih  lavetSM 
OoenVew  lev  n  ilvee  run 


Analysts  agreed  that  the 
ultimate  promise  of  adapth’e 
management  is  still  years 
away. 

“1  HP  has)  shown  us  a  high- 
level  view  of  a  lyet-to-be)  fully 
implemented  strategy  for 
leveraging  IT  resources  in  a 
virtualized  business  environ¬ 
ment."  said  Tim  Grteser,  an 
analyst  at  IDC  in  Framingham. 
Mass.  But  Grieser  noted  that 
HP  has  already  signed  dozens 
of  large  customers  for  its  Utili¬ 
ty  Data  Center  product,  which 
he  called  the  closest  thing  to  a 
fully  implemented  adaptive 
m.inagemcnt  s>'siem. 

"Obviously  we  aren’t  there, 
but  we’re  ck>ser.  And  this 
[adaptive  management  ability) 
is  more  achievable  than  you 
think,"  said  Laura  Koetzle.  an 
analyst  at  Foirester  Research 
Inc.  in  C.ambridge,  M.ass.  Still, 
Koetzle  predicted  that  it  will 
be  10  to  IS  years  before  such 
software  is  able  to  satisfy  busi¬ 
ness  and  IT  managers  alike.  I 
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Delta  to  Test  RRD  Tags  on  Luggage 

I^iidio-frequona’  trial  follows  W'al-Mart's 
embrace  of  technology  in  retail  industry' 


BV  BOB  BREWIN 

Delta  Air  Lines  Inc.  last  week 
said  it  plans  to  test  the  use  of 
radio-frequency  identification 
(RFID)  tags  on  pas¬ 
senger  luggage  in 
the  fall,  making  it 
the  second  major 
company  to  give 
the  emerging  technology  a 
boost  this  month. 

Delta  will  give  RFID  devices 
a  trial  run  on  selected  flights 
fri>m  lacksonville.  Fla.,  to  its 
headquarters  hub  in  Atlanta.  It 
said  the  30-day  test  will  involve 
the  use  of  more  than  40,000 
disposable  RFID  lags  that  op¬ 
erate  at  900  MHz  and  are  being 
made  b>'  two  vendors:  Matrics 
Inc.  in  Columbia,  Md„  and  SCS 
Corp.  in  San  Diego. 

Delta's  announcement  came 
just  one  week  after  Wal-Man 
Stores  Inc.  said  it  plans  to  re¬ 
quire  its  top  100  suppliers  to 
use  RFID  tags  on  shipping  pal¬ 
lets  by  lanuar)'  2005  IQuick- 
Link  391811.  Wal-Mari's  stamp 
of  approval  is  expected  to  spur 
broader  adoption  of  RFID 
technology  in  the  retail  indus- 
tr)',  and  analysts  said  Delta’s 
move  could  have  a  similar  ef¬ 
fect  on  other  airlines. 

RFID  has  to  wait  for  "some 
killer  apps"  to  become  a  reali¬ 
ty  before  it  can  be  widely 
used,  said  Deepak  Shetty,  an 
analyst  at  Frost  &  Sullh’an  Inc. 
in  San  lose.  Delta's  test  and 
Wal-Mart's  embrace  of  the 
technology  may  be  the  cata¬ 
lysts  it  needs,  he  added. 

Rob  Maruster.  director  of 
airport  customer  service  strat¬ 
egy.  planning  and  develop¬ 
ment  at  Delta,  said  the  airline's 
requirements  differ  markedly 
from  those  of  Wal-Mart.  “We 
operate  in  a  very  industrial  en¬ 
vironment.”  Maruster  said, 
noting  that  the  RFID  tags  will 
have  to  be  readable  while  bags 
are  being  loaded  and  unloaded 
on  airport  tarmacs. 

Airports  also  have  other 
wireless  systems  that  could 
cause  interference  with  the  , 

passive  tags  Delta  plans  to  ' 


test,  Maruster  said.  A  passive 
tag  has  no  power  connection 
or  transmitter  and  is  "read”  by 
an  RFID  scanner  equipped 
with  a  transmitter 
Maruster  said 
Delta  plans  to  use 
the  test  to  deter¬ 
mine  RFID's  ability 
to  function  at  a  range  of  up  to 
10  feet,  which  would  let  the 
airline  track  bags  more  pre¬ 
cisely  than  it  can  with  existing  I 
bar-code  sv'stems. 

He  added  that  although  I 
Delta  delivers  99"ci  of  the  100  I 
million  or  so  bags  it  handles  I 


■Say  licensing  issue 
isn't  their  problem 

BV  TOODR.  WEISS 

Corporate  users  of  IBM’s  AIX 
version  of  the  Unix  operating 
system  appear  to  he  generally 
unperturbed  even  though  The 
SCO  Group  Inc.  last  week  fol¬ 
lowed  through  ^’ith  its  threat 
to  revoke  IBM’s  AIX  distribu¬ 
tion  license  (Quick- 
Link  .39240). 

Ken  Ebbe,  presi¬ 
dent  of  Chicago- 
based  IBM  user 
group  Share  Inc., 
said  he  sees  the  legal 
issues  between  SCO 
and  IBM  as  separate 
from  users'  day-to- 
day  IT  concerns. 

“My  perspective 
is  that  we  get  (AIX] 
from  IBM.  and  w'c  consider 
the  licensing  issues  to  be 
IBM's  [probleml."  said  Ebbe. 
“The^  lawyers  will  sort  it  all 
out.” 

Although  the  eventual  reso¬ 
lution  of  the  case  could  have 
ramifications  for  AIX  users, 
and  any  court  rulings  or  legal 
losses  against  IBM  could  be 
''painful”  for  customers.  ”I 


each  year,  it  spends  “a  lot  of 
money"  trying  to  find  missing 
bags.  "This  is  a  cost-reduction 
opportunity."  Maruster  said, 

But  Delta  wants  to  pay  5 
cents  or  less  for  each  RFID 
bag  tag  before  it  puts  the  tech- 
nok»g\'  intii  widespread  use  — 
the  same  price  Wal-Mart  is 
seeking  fn«m  wndors.  RFID 
tags  currently  sell  for  hetwevn 
30  and  50  cents  apiece.  |<*hn 
Shoemaker,  vice  president  of 
busine-ss  development  at 
Matrics,  said  that  at  high  vol¬ 
ume  levels,  the  cost  of  an 
RFID  bag  tag  could  drop  to  20 
cents  within  a  year. 

SCS  President  Barr>  Crop¬ 
per  agreed  that  increased  vol¬ 
umes  will  drive  dt)wn  prices. 


still  look  to  IBM  to  resolve  it.” 
Ebbe  said. 

An  AIX  SL  user  is  also  tak¬ 
ing  the  not-my-probicm  posi¬ 
tion.  "It’s  hard  for  me  to  un¬ 
derstand  how  (the  case)  could 
affect  us."  said  the  enterprise 
architecture  manager  for  a 
global  food  retailer  who  re¬ 
quested  anonymity.  If  IBM 
were  to  lose  the  case,  her 
company  would  watch  to  see 
whether  IBM  subse¬ 
quently  changed  its 
pit>duct  road  maps 
and  then  determine 
how  that  would  affect 
the  company’s  infra¬ 
structure,  she  said. 

"We  would  be 
hard-pres.sed  to 
change  our  hard¬ 
ware.  but  we  could 
change  our  operat¬ 
ing  system"  if  neces¬ 
sary.  the  manager  said. 

Vaughn  Moffett.  IS  director 
at  the  Atlanta  Housing  Au¬ 
thority.  said  he  will  continue 
to  use  AIX  to  suppon  his  150 
users  until  he's  told  it’s  no 
longer  licensed  by  IBM.  "I 
love  IBM  AIX."  Moffett  said. 
"Ifthat  happens,  we'll  have  to 
look  elsewhere.  I  don't  see  it 
as  important  right  now  unless 


but  he  added  that  a  tag  re¬ 
design  may  he  required  to 
meet  Delta's  cost  goal.  SirS  is 
work)ng  on  a  nevv  form  fact«)r 
that  integrates  the  RFID  trans¬ 
mitter  onto  the  t.-ig.  he  said. 

Pat  Rar>',  Delta's  manager  of 
baggage  pl.inning  and  de\el- 
opment.said  M.ttncs  and  SCS 
will  produce  the  RFID  tags  in 
a  substrate  material  that  u  ill 
be  combined  with  n»Ils  of  b.ir- 
code  tags.  Modified  printers  at 
I  airport  ticket  counters  will  be 
I  able  to  print  the  bar-code  tags 
[  and  simulianin>usly  write  the 
'  s.tme  information  to  the  RFID 
I  tagsek-ctronically.  Raf\  said. 
.■\mcric:tn  Airlines  Inc.. 
Northwest  .Mrlincs  Inc  and 
United  Air  Lines  Inc.  didn't 
return  calls  seeking  comments 
on  whether  they  plan  to  con¬ 
duct  similar  RFID  tests.  I 


I  the  court  makc.s  a  decision"  in 
SI'O's  favor. 

Meanwhile.  IBM  rival  Sun 
Micro.sysiems  liw.  wasted  m* 
time  last  week  in  unveiling  an 
advertising  campaign  aimed  at 
pn-»dding  corporate  AIX  usits 
to  start  worry  ing  aK>ut  the 
ongoing  IBM/SCO  legal  fight. 
'The  ads  offer  free  two-day  as- 
I  sessments  to  customers  Imik- 
ing  to  migrate  from  Al.X  to 
!  Solaris. 

I 

I  Offering  Reassurances 

I  Nancy  Weintraub.  director  of 
I  competitive  intelligence  at 
Sun.  said  the  motivation  for 
I  the  ad  campaign  is  “to  help 
I  customers  who  are  ctmeemed. 

:  It  really  depends  on  who 
you're  talking  to  in  an  organi- 
zatittn.”  she  said,  adding  that 
legal  officials  in.side  compa¬ 
nies  are  often  m»»re  worried 
than  IT  officials  about  the  im¬ 
plications  of  the  SCO  actioa 


SCO  C'ejlir,  thr 
SCOwiOTf  ut((t  to  trifoict  OTf- 
ot  ifi  Unii  pioQr.Mr 

SCO  vtrs  IBM  iiK 
S1  Irilliur,  Over  Uni*  n^hf'.,  jnd 
gives  ftie  i'»i(ri|»dr>y  100  days 
to  '•'CoTye  lileued  yioUtiOR^ 

SCO'CV/M-f  :  IBM  - 
AIX  dtstributio.^  Itcen-.!.- 
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AIX  Users  Remain  Unruffled 
Ely  Legal  Scuffe 


NOT  THE  FIRST  TM 

Sevetai  oEter  itiMies  tiM  tesM  RFiD 

teennobgr  nducMxiBni&hAyAar-- 

OQuicMjnk  99361 

wivw.compirterworW.cflrn 


I  In  .t  separate  statement.  Sun 
,  reaffirmed  to  its  i-ustotners 
and  partners  “that  it  has  li- 
I  censing  rights  to  Unix  code" 

;  and  isn't  facing  the  kinds  of 
legal  Issues  SO.)  is  pursuing 
against  IBM. 

In  March,  Lindon.  Utah- 
based  SC:0  sued  IBM  for 
SI  billion,  alleging  that  IBM 
j  misappnipnated  SCO  Unix 
I  trade  scvrcts  by  putting  st>me 
I  of  the  code  into  Linux.  In  the 
lawsuit.  SCO  gave  IBM  100 
days'  notice,  as  required  un- 
I  der  the  licensing  agreement. 

'  saying  it  would  terminate 
'  IBM's  AIX  license  if  the  com¬ 
pany  didn't  resolve  alleged 
violations. 

That  100-day  deadline  was 
reached  last  week,  and  SCO  is 
maintaining  its  position  that 
AIX  is  an  "unauthorized  dc- 
rtvaiive"  of  SCO’s  protected 
System  V  Unix  code.  SCO  has 
since  amends'd  its  cumpUim 
I  to  ask  for  a  permanent  injunc¬ 
tion  against  future  AIX  sales 
and  has  increased  the  dam- 
I  ages  it  is  seeking  from  IBM  to 
more  than  S3  billion. 

Trink  Guarino.  a  spokeswo¬ 
man  for  IBM's  systems  gniup. 
said  IBM  remains  confident 
that  it's  on  firm  legal  ground. 
“As  wv  have  claimed  all  along, 
our  license  Ls  invx’ocabJc.  it's 
perpetual,  and  it  can't  be  ter¬ 
minated.”  she  said.  “Wc  are 
standing  by  that  position."  I 
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EDS  Plans  Cuts, 
Internal  Changes 

Eltctrenic  Data  SystMitt  Corp. 
aaMttwllayaffMolils 
twriiars  aid  mtnidiirt  Its  rr 
outMwrdng  opwattons  as  part  of 
a  hid  to  fwivt  Hs  fortunts.  About 
2J00  «l  Plano.  Tasarhasad 
EOS'S  138.000  antotoyaos  wi 
ha  M  ge.  EOS  atoo  said  H  plans 
to  unify  Ns  various  oottourdng 
satos,asrvicaaodpnidiiG(do8v- 
Sfy  taams  undsr  a  singla  global 


West  Virginia  Ends 
Microsoft  Appeal 

Waal  Vir^nla’s  attomay  gansral 
said  ths  stato  it  droppini  Us  ap- 
psai  of  tfia  andtnist  satttamant 
bstwaan  Mcroaofl  Carp,  and  ths 
U.S.  Dspartmant  of  Justics  as 
part  af  a  daal  to  «Mch  Hm  com* 
pany  wfl  pay  up  to  S2I  ndMon  to 
eaah  and  prediiet  vouchars.  tbs 
aQroarasot  loovas  Hasaachusatts 
as  toa  Iona  ftata  oppoatop  ths 
aaWtomant  of  ths  povanimsnf  s 
andlrust  eaao  againat  h8crosofL 


Microsoft  Stops 
Mac  Browser  Work 

to  etfiar  Mtoraaoft  aatst.  Ibt 
company  said  8  wM  stop  davai* 
optognaarvartoonsefitotator- 
not  Eiptoror  Wih  bromsr  for 
Appla  Cemputor  toe.'s  Mactotosh 
systonis.  Mkrooofl  plana  to  cott- 
ttoua  upgradtog  the  Mactotosh 
vontons  of  Ito  Oflica  and  Virtual 
PCpraduete.BulHstodtoBtlE 
vdibaoffaradonfyvrittitoWto’ 
daws  Mid  dial  Appla's  Safari 
browaar  to  auflldanl  to  maef  tfw 
naads  ef  Macintoah  uaars. 


Short  Takes 

WOfiUXmi  MC.  Mnowwad  an 
P  vlrtuai  prfvato  nahvorii  aarviea 
lhaft  daaigaad  to  sacunly  con- 
nad  BNhda  and  ramuto  wochars 
to  carporato  natmorta. . . . 
FUJITSU  PC  CORP.  to  SMtoa 
Omi.  CtoH..  add  ft  has  aignad  I 
dad  toat  lab  SIEMEKS  AG  raaal 
Na  prodocto  to  Narth  Amariea. 


MARK  HALL  •  ON  THE  MARK 

Open-Source  Management 
Is  Achilles’  Heel . . . 

...  for  large-scale  programming  projects.  That  would  be  the  opinion 
you’d  expect  to  hear  from  the  proprietary  gang  in  Redmond,  Wash., 
not  from  open-scMjrce  advocates  and  board  stewards  of  Eclipse,  the  open- 
source  framework  for  application  developers.  But  that’s  the  case.  The 
problem  is  that  Eclipse  lets  programmers  easily  obtain  and  use  any 
plug-in  they  fancy.  That  may  be  cool  for  the  coder,  but  it’s  uncool  for 
the  corporate  IT  manager  who  wants  to  maintain  a  semblance  of  con¬ 
trol  over  a  project  “Which  plug-in  do  you  use?  Which  one  do  you 

benefit  from  higher-value  integration," 
says  Bemie  Spang.  IBM’s  marketing  di¬ 
rector  for  WebSphere  Studia  Spang  rec¬ 
ollects  that  a  few  IBM  customers  who 
use  Eclipse  plug-tns  have  asked  fi3T  that 
kind  of  management  tool  ■  Coq>orate 
developers  wary  of  or  todWtofMil  to  the 
opsn-eoiivt  bandwagon  next  week  can  get 
their  hands  on  Borland's 
Enterprise  Studio  for  java 
6.  It  will  include  new  ver¬ 
sions  of  jBuilder  and  Opti- 
mizeit  as  well  as  beefed-up 
capabilities  in  the  areas  of 
design,  development,  test¬ 
ing.  deployment  and  inte¬ 
gration.  And  if  you  happen 
to  work  in  the  SAP  AG 
worid,  Borland’s  real-time 
collaboration  tool.  Togeth¬ 
er.  will  ship  in  August  as 
an  SAP  xApp.  ■  As  part  of 
SAFs  deal  with  MySQL 
AB  in  Uppsala.  Sweden,  to 
replace  SAP's  proprietary 
database  with  MySQL 
iQuickLink  38764],  the  two 
companies  agreed  to  giv« 
dw  SAP  vorston  Ml  updated 


standardize  on?"  asks  George  Paolini,  a 
vice  president  at  Borland  Solhvare  Corp. 
in  Scotts  Valley.  Calif.  Uatog  Ecftpes  and 
fraabto  plug-tos  tnay  sound  like  a  cheap 
way  to  get  a  program  out  the  door,  but 
Tony  de  la  Lama,  another  Borland  VP, 
worries  that.  The  problem  is  not  the 
cost  —  it’s  the  TCO,"  especially  for  large- 
scale  projects  that  demand 
effective  oversight  Bor¬ 
land,  which  has  a  seat  on 
the  Eclipse  board  of  stew¬ 
ards  and  ships  its  products 
to  be  Edipse  plug-ins.  ar¬ 
gues  that  users  of  open- 
source  development  tools 
need  tight  integration  and 
management  letting  pro¬ 
grammers  grab  whatever 
they  think  they  need  and 
add  it  to  their  coding  arse- 
nab  is  a  big  ffltotoka  Even 
IBM,  which  launched  the 
open-source  Eclipse  e6fort 
and  pushes  it  hariier  than 
most  companies,  sees  its 
limits.  “I  agree  with  the  as¬ 
sertion  that  larger  develop¬ 
ment  projects  and  teams 


*r  ,1Ur,i  .  •• 
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mum.  The  new  moniker  will  be  unveiled 
at  LinuxWorld  this  August  in  San  Fran¬ 
cisco  •  Tracy  Wilk  is  suffering  from  d^ja 
vu.  The  vice  president  for  product  man¬ 
agement  at  CyberSource  Corp.  in  Moun¬ 
tain  View.  Calif.,  claims  Chat  in  the  past 
six  months,  online  retailers  have  been 
pressing  his  B2C  payment-management 
software  fum  to  deliver  an  international 
version  of  its  application.  "That  talk  had 
evaporated  after  the  Internet  bubble 
burst  a  few  years  ago,"  Wilk  says.  Cyber- 
source  boasts  that  $1  of  ovary  SB  apont  on- 
Knt  to  tho  U.S.  gets  processed  through  its 
software.  But  given  that  Gartner  Inc's  re¬ 
searchers  are  forecasting  that  Europeans 
will  surpass  Americans  as  Internet 
spendthrifts  in  Q4  this  year.  LLS.  retailers 
want  a  chance  to  take  those  ouraa,  pounds, 
kronor  Mid  whatovor  otos  cmi  bo  Bftod  from 
the  virtual  wallets  of  European  citizens. 
So  this  Wednesday.  CyberSource  vrill  an¬ 
nounce  its  Global  Payment  Suite.  'Hie 
product  handles  multiple  payment  types 
popular  in  Europe,  such  as  bank  transfers 
and  postal  checks,  which  is  vital  to  a  re¬ 
gion  that  uses  credit  cards  for  only  37% 
of  its  noncash  purchases.  The  software 
can  also  perform  dynamic  currency  con¬ 
version,  which  helps  protect  merchants 
from  global  currency  fluctuations.  •  On 
Tuesday.  Women  in  Technology  Interna¬ 
tional  will  recognize  four  women  for 
their  outstanding  achievements  in  IT. 
Wm.  a  professional  organization  with 
headquarters  in  Encino,  Calif.,  wrill  induct 
four  women  into  its  Hall  of  Fame:  Chieko 
Asakawa,  who  runs  accessibility  software 
R&O  for  the  visually  impaired  at  IBM's 
Tokyo  research  lab;  Wanda  Gass,  a  tflgitol 
sigml  proeantog  wIZMd  (um,  rmk*  that 
sorcarMs)  for  Texas  Instruments  lnc4 
Kristina  johnson,  an  optics  and  display 
expert  in  Duke  University's  School  of 
Engineering:  and  Shirley  McCarty  at 
Shamrock  Consulting,  a  legend  in  the 
aerospace  development  community. 
Congrats,  ladies.  I 


Microsoft  Releases  Upgraded  Mobile  OS 


av  aoa  aaewiN 

Microsoft  Corp.  today  will  of¬ 
ficially  unveil  an  upgraded 
version  of  its  Pocket  PC  mo¬ 
bile  operating  system  that's 
designed  to  provide  users 
with  improved  support  for  ac¬ 
cessing  Wi-Fi  wireless  LANs. 

Ed  Suwanjindar,  product 
manager  for  Microsoft's  mo¬ 
bile  computing  division,  said 
Pocket  PC  2003  —  which  is 
being  renamed  Windows  Mo¬ 
bile  2003  includes  a  new 


network  connection  manager 
that  can  be  used  to  set  up 
WLAN  access  with  “zero  con¬ 
figuration." 

The  upgrade  also  has  a  re¬ 
vamped  mobile  infonnation 
server  that  should  resolve  syn¬ 
chronization  problems  users 
experienced  when  trying  to 
update  their  e-mail  directories 
with  earlier  versions  of  the 
software,  Suwanjindar  said. 

Michael  Murphy,  director  of 
information  systems  support 


services  at  the  Caiison  Hotels 
division  of  Carlson  Companies 
Inc  in  Plymouth,  Minn.,  said 
be  has  deployed  200  Pocket 
PC  devices  for  use  by  business 
managers  and  his  IT  team.  He 
described  the  task  of  setting 
up  WLAN  connections  with 
older  releases  as  "a  challenge." 

But  Sam  Bhavnani,  an  ana¬ 
lyst  at  ARS  Inc.  in  La  joUa, 
Calif,  said  that  despite  im¬ 
provements  in  Pocket  PC 
hardware  and  software,  Micro¬ 


soft  rival  Palm  Inc.  still  offers 
buyers  of  handheld  devices 
something  they  can't  find  in 
any  Pocket  PC  model  a  built- 
in  keyboard  that  uses  the  tra¬ 
ditional  QWERTY  desiga 
Dell  Computer  Corp.  said  it 
will  wait  until  later  this  year  to 
introduce  new  Pocket  PC 
hardware.  Hewlett-Packard 
Co.  today  plans  to  announce 
three  Pocket  PC  models 
priced  from  S299  to  S649,  and 
Gateway  Inc.  in  Poway,  Calif, 
said  it  will  release  its  fim 
Pocket  PC  device  in  July, 
priced  at  about  S300.  b 


PeopleSoft  Shareholders: 


DON’T  LET  THE  BOARD 
TAKE  AWAY  YOUR  VOTE 


^Cash 


from  Oracle 


□  Uncertain  future  with 
current  management 


Look  what  PeopleSoft  management’s  done  for  you  lately: 


PeopleSoft  Slock  Price  Before  Our  Offer  PeopleSoft  New  License  Revenue  Growth 

20% 


12/01  3/02  6/02  9/02  12/02  3/03  12/01  3/02  6/02  9/02  12/02  3/03 


No  Wonder  They 
Don*t  Want  You  to  Vote 
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Find  out  more  at 
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Senator’s  ‘Extreme’  Piracy 
Remedy  Draws  Criticism 

Hatch  later  softens  stance  on  destroying 
computers  of  unauthorized  file-sharers 
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Open-Source  Lab 
Hires  Linus  TorvaMs 

Tht  OpOT  Sourca  DtvdoQfMTrt 
Lib  in  Bnivirtan.  On.,  aid  H 
has  Mrad  Linus  ToraMs.  the 
craalor  of  Linux,  a  a  tul'UnM 
■mpkniaa.  TorvaMs  wM  ba  a  foE 
taw  M  tha  iab  and  Vfork  axeta- 
sivafy  on  tandiiig  tha  davatafh 
mant  of  Linux.*  tho  nonprofit 
imdMvondor  conaortium  an- 
nouncad.  TorvaMs  provtauriy 
wa  a  Mtow  al  Transmota  Corp„ 
a  mtaroprocoasor  vondor  in 
Santa  aMa.CaM. 


Hacker  Leaks  CERT 
VuineiabCty  Info 

Tlw  CERT  Coardtaattan  Cantor 
at  Carnatta  IMtan  Untaaroity 
in  ntiburfh  was  Ml  by  anothar 
taah  of  coHfldanItai  wdnarabiity 
tatanaaltan.  Mtawing  a  flurry  M 
such  tasks  In  March.  Tba  tatast 

-  »  -  A  M - 

Msiom  nvanoo  a  mw  ai  rur 

roadnrsforUnixsyilama.aC' 
canflnp  to  a  report  posted  to  a 
dtacuBSton  lit  by  a  hachar  ualnB 
tha  mna  "hachdflfa.*  CStT  offi- 
ciata  woiddnT  eammont  about 
tfwvutoarMtty. 


SSAGIobaiBuys 
E-Commerce  flmi 

Buabisis  appfleabons  vondor 
SSAfltobMIbdiiMtogiasIne. 
saM  M  hat  boughl  boaaMs  Ibeh- 
nologjaa  bic..  a  Ptontawton. 
Caif.'haaod  davatapar  of  a-com* 
marBO  soflwBfB.  Tha  dasi  cams 
tm  waaks  after  Baan  bitoma* 
ttanal  flV  ssH  M  at  part  of  Its 
buyout  dasf  with  kt  fomor  par- 

ant  It  wfi  marpa  with  Ctdcapo- 

taaaad  SSA  (QutaUJnk  38967). 


Short  Takes 

NEC  Corp.'t  NEC  SOUmOtiS 
(AMERICA)INC.uMtinSacra- 
manto.  CaNL,  announcad  a  sat 
of  IT  aarvteas  tor  addatga  compa- 
nisa....FltONT1tANGCSOLU- 
TK)NSMC.aCmiaaflw»av«i- 
dor  In  Colorada  Sprtapt.  aMd  N’t 
toddag  tor  a  now  CEO  folowing 
tea  rcMpnlton  of  top  axacuthfB 
rauwa  owsonn. 


BV  LINDA  nOBCNCRANCE 

SfRS  LAST  WEEK 
said  Sen.  Orrin 
Hatch  (R-Utah)  ap¬ 
parently  failed  to 
consider  the  corporate  impli¬ 
cations  of  hi5  suggestion  that 
cyberpirates  should  have  their 
computers  destroyed  if  they 
illegally  download  copyright- 
protected  materia]  like  music 
and  movies. 

Destroying  an  individual's 
computer  may  not  be  feasible, 
and  such  an  extreme  remedy 
could  pose  problems  for  cor¬ 
porate  users,  said  Pete  Lind- 
strom.  research  director  at 
Malvern.  Pa.-based  Spire  Se¬ 
curity  LLC. 

“The  S64.000  question  is, 
how  do  you  address  liabUity 
if(an  employee]  is  illegally 
downloading  something  at 
work?”  Lindstrom  said.  "The 
person  with  the  deepest  pock¬ 
ets  most  likely  will  ^  liable.” 

Lindstrom.  along  with  an 
IT  executive  at  a  Maryland 
computer  services  company 
who  asked  not  to  be  identi¬ 
fied.  said  the  issue  might  be 
moot,  since  most  companies 
access  the  Internet  through  a 
series  of  Hrewalis  to  protect 
their  assets. 

Disaster  in  the  Making 

Other  IT  executives  were 
more  concerned  about  the 
prospea  of  legalizing  such  a 
penalty.  “Depending  what  is 
on  that  PC  it  could  be  very 
costly  or  even  disastrous.”  said 
Mehdi  Shahpar,  systems  man¬ 
ager  at  United  Parcel  Service 
Inc.  in  Mahwah.  N.). 

“Those  people  that  are 
downloading  illegal  materia)  j 
at  work  would  cause  a  lot  of  | 
problems  for  their  companies 
if  their  machines  were  fried 
out."  said  Frank  Webb,  an  IT 
manager  at  American  Interna¬ 
tional  Group  IhCm  an  insur¬ 
ance  and  fmancial  services 
company  in  Jersey  City,  N.J. 


Webb  said  the  person  doing 
the  downloading,  rather  than 
the  company  that  person 
works  for.  should  held  re¬ 
sponsible  for  his  actions. 

Hatch,  chairman  of  the 
Senate  Judiciary  Committee, 
first  brought  up  the  idea  at 
a  June  17  hearing  on  copyright 
abuses.  At  the  time,  the  com¬ 
mittee  heard  from  witnesses 
about  the  dangers  of  using 
peer-to-peer  file-sharing  ser¬ 
vices.  Some  users  have  inad¬ 
vertently  allowed  access  to 
their  entire  hard  drives  by 
other  peer-to-peer  users. 


Product  to  provide 
common  network 
securitv’  interface 

BV  JAIKUMAR  VIJAVAN 

Computer  Associates  Inter¬ 
national  Inc.  is  boosting  its 
eTrust  antivirus  software 
with  new  antispam  and  moni¬ 
toring  technologies  designed 
to  enable  companies  to  take 
measures  such  as  blocking 
music-sharing  applications 
and  pornography  from  their 
networks. 

CA  last  week  announced 
plans  to  ship  its  eTrust  Se¬ 
cure  Content  Management 
suite  in  October.  The  technol¬ 
ogy  integrates  functions  that 
are  typically  available  only  as 
separate  products,  said  Ron 
Moritz,  a  senior  vice  preri- 
dent  at  CA. 

The  idea  is  to  give  adminis¬ 
trators  a  common  interface 
for  securing  their  networks 
against  a  broad  range  of  threats 
steiiuning  from  viruses,  spam 
and  the  nonsecure  sharing  of 
content.  Moriu  said. 

A  key  feature  of  eTrust  Se- 


exposing  fmancial  documents 
and  medical  data,  the  wit¬ 
nesses  said. 

After  Hatch’s  proposal  was 
criticized  as  “Draconian”  by 
Sen.  Patrick  Leahy  (D-Vt.),  the 
ranking  minority  member  of 
the  Judiciary  Committee, 
Hatch  backed  oft  a  bit  from 
his  initial  hard-line  stance. 

In  a  statement  issued  the 
next  day.  Hatch  said  he  merely 
wants  to  push  private  industry 
to  come  up  with  solutions  to 
unauthorized  file-trading. 

“I  am  very  concerned  about 
Internet  piracy  of  personal 
and  copyrighted  materials, 
and  I  want  to  find  effective 
solutions  to  these  problems." 


cure  Content  Management  is 
an  integrated  policy  manage¬ 
ment  feature  that  allows  com¬ 
panies  to  set  and  enforce  poli¬ 
cies  relating  to  the  type  of 
content  that  can  be  accessed, 
viewed  or  shared  by  users  in 
an  enterprise  network.  Anoth¬ 
er  feature  blocks  users  from 
.sending  confidential  or  sensi¬ 
tive  information  outside  cor¬ 
porate  networks. 


CA-:^  NEW  PRODUCT 


WWW  compulerworid.com 


H  Depending 
what  is  on 
that  PC,  it  could  be 
costly  or  even 
disastrous. 

MEHOI  SHAHPAR. 

SYSTEMS  MANAGER.  UPS 
Hatch  said.  “I  do  not  favor  ex¬ 
treme  remedies  —  unless  no 
moderate  remedies  can  be 
found  1  have  asked  interested 
industries  to  help  us  fmd 
those  moderate  remedies." 

Hatch’s  office  couldn't  be 
reached  for  additional  com¬ 
ment  by  deadline.  I 


The IDC  Newsservice  con¬ 
tributed  to  this  report. 

MOKIIBBSK 

Columist  Frank  Hayes  cals  Hatch  s 
proposal  a  *bad  daa.*  Page  62 


The  software  also  allows  ad¬ 
ministrators  to  block  access 
to  certain  Web  sites  or  to  pre¬ 
vent  certain  types  of  software 
—  such  as  music-sharing  ap¬ 
plications  —  from  being 
downloaded. 

Such  capabilities  make  the 
software  attractive,  said  Dave 
Lydick.  a  network  administra¬ 
tor  at  Sheetz  Inc.,  a  S1.2  billion 
convenience  store  chain  with 
headquarters  in  Altoona.  Pa. 
Sheetz  uses  CA's  eThist  anti¬ 
virus  software  and  is  consid¬ 
ering  testily  the  new  features 
when  they  become  available, 
Lydick  said  Of  key  interest  is 
the  software's  promised  abil¬ 
ity  to  weed  out  Kaaza  peer-to- 
peer  music-sharing  programs 
from  the  company’s  networks, 
Lydick  said. 

At  SS5  per  user,  the  technol¬ 
ogy  is  also  fairly  aggressively 
priced,  said  Brian  Burke,  an 
analyst  at  IDC  in  Framingham, 
Mass.  CA’s  effort  to  integrate 
multiple  functions  into  its 
antivirus  software  is  similar  to 
moves  by  other  security  prod¬ 
ucts  vendors,  Burke  said  For 
instance.  Network  Associates 
Inc.  and  TVend  Micro  Inc.  are 
also  moving  to  integrate  simi¬ 
lar  antispam  functions  as  well 
as  message-filtering  capabili¬ 
ties,  he  said.  I 


CA  Antivirus  Software  to 
Block  Unwanted  Downloads 
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Microsoft  Entices  Users  to  Upgrade  Servers 


Companies  can  move  from  standard  to 
enterprise  editions,  pay  only  differential 


BY  CABOL  BtIWA 

Starting  )uiy  1.  Microsoft 
Corp.  will  launch  a  promcv 
tionai  program  that  could  ben- 
e/li  companies  that  want  to 
upgrade  from  the  standard  to 
enterprise  editions  of  its  scrv> 
cr  software  products. 

Through  the  new 
Step-up  License  pro¬ 
gram.  users  who 
purchased  Software 
Assurance  or  an  En¬ 
terprise  agreement  for  the 
standard  edition  of  a  Micro¬ 
soft  server  product  will  be 
able  to  upgrade  to  the  enter¬ 
prise  edition  by  paying  only 
the  price  difTerential  for  the 
license  plus  Software  Assur¬ 
ance.  Under  the  existing  sys¬ 
tem.  customers  must  buy  a 
new  license  when  moving 
from  the  standard  edition  of 
a  server  product  to  the  enter¬ 
prise  edition. 

“I  wish  I  would  have  beard 
this  a  month  ago.'*  said  Steven 
Edwards,  vice  president  and 
IT  director  at  Solomon  Cord- 
well  Buenz  &  Associates  Inc. 
“We  just  had  to  rebuy  our  li¬ 
censes  for  (a  Windows]  server 
and  for  Exchange  for  clusters. 
It  was  expensive  and  painful” 

Edward  said  the  Chicago  ar¬ 
chitectural  firm,  which  has  U7 
employees,  wanted  to  run  Ex¬ 
change  Server  in  a  clustered 
environment  so  that  if  one 
messaging  server  goes  down,  a 
second  wW  kick  in  within  sec¬ 
onds.  But  the  enterprise  edi¬ 
tions  of  Exchange  the  Win¬ 
dows  server  operating  sy^em 
are  required  for  clustering 

So  firm  in  late  April 
spent  S12.000  for  two  new 
Exchange  and  two  new  Win¬ 
dows  server  enterprise  licens¬ 
es.  knowing  that  purchase 
would  render  its  old  Software 
Assurance-protected  Ex¬ 
change  Standard  Edition  li¬ 
censes  useless,  Edwards  said. 

He  said  the  unplanned  ex¬ 
pense  also  forced  the  firm  to 
postpone  purchasing  Software 
Assurance  on  the  new  servers. 

“If  we  added  Software  As¬ 


SOFTWARE 

LICENSING 


surance  on  top  of  that,  it 
would  have  been  another  50% 
of  the  [license]  cost  [over  two 
years],  and  we  were  already 
over  budget  buying  two  of 
everything”  he  said. 

Customers  pay  an  annual 
fee  of  25%  of  the  volume  li¬ 
censing  cost  to  get 
Software  Assurance, 
which  entitles  them 
to  all  upgrades  re¬ 
leased  during  the 
contract  time  frame  and  some 
newly  added  free  support  and 
training  options. 

Rebecca  LaBruneric.  prod¬ 
uct  manager  of  worldwide  li¬ 
censing  and  pricing  at  Micro¬ 
soft.  said  the  new  Step-up  pro¬ 
gram  is  intended  to  help  cus¬ 
tomers  in  situations  just  like 
the  one  Solomon  Ctmhveli 
Buenz  faced. 

“If  the  customer  is  off  by  a 


few  weeks  of  when  we  an¬ 
nounced  that  license  pro¬ 
gram.  I'm  sure  we  will  work 
with  that  customer  to  make 
sure  that  they  can  receive  the 
benefits  of  this  program," 
she  said. 

A  vice  president  of  IT  pro¬ 
curement  at  a  multinational 
media  conglomerate;  who 
asked  not  to  be  identified,  said 
that  if  his  company  had  access 
to  the  Step-up  pre^ram  sooner, 
it  might  have  made  difTcrent 
decisions  last  year  when  it 
purchased  SQL  Server  Enter¬ 
prise  Edition  CPU  licenses  for 
an  IT  project. 

The  cost  differentia]  be¬ 
tween  the  standard  and  enter¬ 
prise  editions  can  be  “huge,” 
he  added.  He  said  that  with  his 
particular  Select  license  agree¬ 
ment.  the  enterprise  edition 
of  SQL  Server  costs  about 
S22.400  for  a  single  processor 
license,  plus  three  years  of 
Software  Assurance.  The  stan¬ 
dard  edition  is  about  SSw600  for 
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the  license  and  three  years  of 
Software  Assurance,  he  said. 

The  IT  vice  president  said 
that  when  the  new  Step-up 
program  takes  effect,  he  will 
opt  for  the  standard  edition 
and  pay  the  incremental  cost 
for  the  enterprise  edition  li¬ 
cense  “only  if  we  need  it” 
joe  Brenner.  MIS  manager 
at  Sleepeck  Printing  Ca  in 
Bellwc^,  III.  said  be  likes  the 


idea  of  the  added  flexibility. 

So  far.  most  of  the  com¬ 
pany's  servers  run  only  single 
applications,  so  it  hasn't  seen 
a  need  for  the  additional  fea¬ 
tures  of  the  enterprise  edition. 
"That  may  chaise  in  the  fu¬ 
ture."  he  said. 

The  Step-up  program  is 
scheduled  to  be  available 
only  through  September  2004. 
But  Alvin  Park,  an  analyst  at 
Stamford.  Conn. -based  Gan- 
ner  IiKm  said  he  thinks  chat 
Microsoft  should  make  the 
Step-up  License  permanent. 

Park  said  Microsoft  also 
should  expand  the  Step-up 
License  beyond  server  soft¬ 
ware  to  other  products.  He 
noted  that  the  Step-up  License 
essentially  reinstirutes  the 
Product  Upgrade  Program 
chat  Microsoft  eliminated  on 
Sept.  30. 2001. 

"If  customers  tell  us  they 
want  us  to  keep  it  permaDenc- 
ly.  well  look  at  that,”  said 
LaBruoerie.  She  added  that 
Microsoft  will  also  consider 
extending  the  Step-up  License 
to  additional  products.  I 


Sybase  CEO  Decries  SCO 
‘Garbage,*  Oracle’s  Behavior 


BY  DON  TmWANT 

John  Chon.  CEO  c^LhiMin. 
Cai^-based  Sybtw  InCr,  last 
week  spoke  with  Computer- 
world  about  a  range  of  contro¬ 
versial  issues,  indudtng  The 
SCO  Group  tnc.’s  claims  that 
Linux  infrirtges  its  Unix  copy- 
rights  and  the  security  implica¬ 
tions  of  offshore  outsourcing. 
Excerpts  follow: 

OlvBfl  that  Sybaso  h«$  such  a 
strong  ptBsanca  in  Linux  shops, 
bow  Gonesmed  an  you  and  your 
customars  about  SCO's  claims? 

I  have  had  customers  express 
concern  about  it  1\vo  major 
customers  of  mine  have  al¬ 
ready  told  roe  that  they’re  go¬ 
ing  to  slow  down  their  roll¬ 
outs  on  Linux  and  wait  to  see 
how  this  develops. 

I  chink  it’s  rather  a  shame. 
The  Linux  platform  serves  a 
segment  of  the  market,  and  I 
hate  to  see  this  being  chal¬ 
lenged  by  a  very  established 


player.  I  think  it's  very  unfor¬ 
tunate  that  this  garbage  is  be¬ 
ing  thrown  around.  A  small 
group  of  players  just  wants  to 
protect  the  status  quo. 

Sybsaa  and  PaoplaSott  bic.  ham 
had  a  strong  partnariMp 
for  yaars.  Wl^i  your 
taka  on  Oracio  Co^  CEO 
Larry  Bhon's  hostte 
takoomr  bid  for  ftople- 
Sott?  It  certainly  won't 
be  good  for  Sybase,  be¬ 
cause  Sybase  and  Peo- 
pleSoft  have  a  Tier  1  re¬ 
lationship:  we  have  an 
installed  base  of 400  to 
500  customers  out  there,  and 
we're  trying  to  push  into  new 
areas  like  health  care  in  China 
together. 

Larry  went  public  to  say 
that  [PeopleSoft  CEO  Craig] 
Conway  ^d  approached  him 
a  year  ago.  I  don’t  know  if  it's 
true  or  not;  fm  not  in  a  posi¬ 
tion  to  comment  on  that  Bui 


the  code  of  engagement  be¬ 
tween  CEOs  has  certainly 
been  violated.  And  1  think 
that's  a  bad  thing. 

Eariiar  this  mooth.  you  mn  olect- 
ad  to  tha  board  of  tHrodon  of  tho 
U.S.  Chambor  of  Commorco.  What 
do  you  thMt  tho  chantoor's  posi- 
tton  on  H-1B  vtoas  ahoidd  be? 
H-IB  is  not  being  fully  utilized 
because  we  just  don't  have 

enou^  jobs  in  the  U.S. 
So  right  now.  H-IB  is 
not  the  biggest  threat. 
I'm  a  supporter  of 
the  H-IB  visa  because 
most  of  the  H-lB  visa 
holders  are  people 
we've  trained  in  the 
U5.  I’d  rather  see  the 
people  we’ve  trained 
come  back  to  the  U3. 
and  help  boost  our  IT  devel¬ 
opment  and  innovation. 

The  chamber  probably 
takes  the  same  line  —  let's 
create  more  jobs  in  the  US., 
and  if  they  need  to  be  filled  by 
foreign  personnel  so  be  it  Ul¬ 
timately.  it  helps  the  economy 
because  it's  innovation. 

I  think  your  readers  should 


be  more  concerned  about  the 
i^nie  outsourcing  phenome¬ 
non.  Because  if  you  have  so 
many  foreigners  creating  code 
that  is  ultimately  shipped  back 
to  the  U.S..  and  if  you  have  the 
U.S.  government  policy  of 
buying  off-the-shelf  software, 
guess  what’s  happening? 

We  may  be  unknowingly  al¬ 
lowing  backdoor  traps  in  the 
code.  Hackers  could  very  well 
be  putting  in  compromising 
code.  We  have  to  be  careful 
because  more  and  more  com¬ 
panies.  by  neccssit)',  are  build¬ 
ing  their  code  overseas. 

The  industry  ought  to  come 
together  and  have  some  kind 
of  standard,  equivalent  to  an 
ISO  standard,  that  we  subject 
all  of  our  development  and 
code  review  to 

The  problem  with  the  in¬ 
dustry  is  we  can  never  agree 
on  anything.  But  it's  some¬ 
thing  we  need  to  fix.  I 


iDEPTI 
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For  those  of  you  who  need  a  little  help  convincing  your  C.E.O.  that 
BEA  is  th^  right  choice  for  your  business,  please  use  this  handy  form. 


Dear _ 

(YOUR  C.E.O.) 

I  recommend  that  we  use  the 
BEA  WebLogic*  Enterprise  Platform 
for  all  future  software  integration. 

While  you  may  not  have  heard  of 
BEA,  they  offer  the  only  platform 
that  is  both  strong  enough  to 
handle  our  mission-critical  projects 
and  is  easier  to  use.  I  acknowledge 
that  I  am  accountable  for  my 
actions,  and  am  fully  prepared  to 
take  ,the  fall  for  this  decision. 

i 

But  when  this  works,  you  owe 
me  big. 


Sincerely, 


(YOU) 
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rr  Execs  Say  Wireless  Isn’t 
Ready  for  \Wde  Adoption 


w  compu(«rworki  com 


CeBIT  panelists  recognize  its  potential 
but  say  lack  of  maturity  still  an  obstacle 


WiKELtss  net¬ 
works  and  tech¬ 
nologies  must 
become  consid¬ 
erably  more  standardized  and 
reliable  before  the  National 
Association  of  Securities 
E>eaJers  Inc.  (NASD)  will  even 
consider  porting  key  applica¬ 
tions  to  mobile  devices. 

Martin  Colburn,  chief  tech¬ 
nology  officer  at  Washington- 
based  NASD,  delivered  that 
message  at  last  week's  CeBIT 
America  2003  conference 
here.  Colburn  said  the  wire¬ 
less  maturity  problem  has 
been  exacerbated  by  the  eco¬ 
nomic  downturn  in  the  lele- 
communications  industry,  re¬ 
sulting  in  an  underinvestment 
in  research  and  development 
for  some  next-generation 
wireless  technologies. 

Colbum  was  one  of  three 
CeBIT  panelists  who  dis¬ 
cussed  the  challenges  sur¬ 
rounding  business  adoption  of 
wireles.s  systems. 

NASD,  which  regulates  the 
Nasdaq  stock  market,  uses 
wireless  handheld  devices 
for  e-mail  and  to  distribute 
spreadsheet-based  certifica- 
lion  exams  to  its  member 
firms.  But  Colbum  said  it  like¬ 
ly  will  be  at  least  two  to  three 
years  before  vendors  offer  in- 
dustrial-strei^th  systems  that 
can  run  vital  transactions. 

No  Economies  of  Scale 

"When  we  look  at  total  cost  of 
ownership,  we  haven't  seen 
the  economies  of  scale  and 
haven't  seen  the  infrasirucnire 
there  to  [justify]  making  the 
investment.”  Colbum  said. 

*rhose  issues  haven’t  stopped 
Schneider  National  Inc.  from 
using  mobile  technologies  in 
its  trucking  and  logistics  busi¬ 
nesses.  The  S2.8  billion  trans¬ 


portation  firm  was  ahead  of 
the  curve  in  1988  when  ir  im¬ 
plemented  a  two-way.  geosta¬ 
tionary  satellite  communica¬ 
tions  system  to  track  its  fleet 
of  trucks.  It  was  so  far  ahead, 
in  fact,  that  Skhneider  was 
Qualcomm  Inc.’s  very  first 
customer,  said  Paul  Mueller, 
vice  president  of  technology 
services  at  Green  Bay,  Wis.- 
based  Schneider. 

Mueller  said  the  satellite 
system  has  helped  Schneider 
provide  its  customers  with 
better  visibility  of  goods  that 
are  in  transit.  But.  he  added. 


the  company  has  had  a  much 
harder  lime  finding  the  right 
wireless  .system  to  help  track 
and  manage  the  45,000  trailers 
hooked  up  to  its  trucks. 

Schneider  has  looked  at  a 
plethora  of  wireless  systems 
since  I99S,  including  low-band 
satellite  and  cellular  technolo¬ 
gies.  But  each  time  it  consid¬ 
ered  a  particular  technology, 
the  vendors  in  question  went 
beliy-up.  Mueller  said. 

Decision  Soon 

Nonetheless.  Schneider  ex¬ 
pects  to  make  a  decision  with¬ 
in  the  next  few  months  on  a 
trailer  management  system 
based  on  either  sarellite  or 
multimode  cellular  access 


technologies.  "The  payback  is 
clearly  there,”  Mueller  said. 
"It's  just  a  matter  of  finding  a 
technol<^  that  works  for  us." 

Wireless  Retail  Inc.  in 
Scottsdale.  Ariz.,  sells  wireless 

The  payback 
is  dearly 
there.  H’s  just  a 
matter  of  finding 
a  technology  that 
works  for  us. 

PAUL  MUELLER.  VICE  PRESIDENT 
OF  TECHN0L06Y  SERVICES 
SCHNEIDER  NATIONAL  INC 


products  and  services  through 
retailers,  and  CIO  Chris  Mc¬ 
Mahan  said  the  company  uses 
mobile  technologies  W’ithin  its 
own  operations  to  help  busi¬ 
ness  managers  track  sales. 

Each  night,  when  all  the 
stores  that  sell  its  products 
have  closed.  Wireless  Retail 
uses  a  wireless  system  to  send 
a  snapshot  of  daily  sales  data 
to  top  executives,  who  receive 
the  repons  on  their  handheld 
devices  and  notebook  PCs. 

Bui  even  though  wireless 
products  are  the  company’s 
lifeblood,  McMahan  acknowl¬ 
edged  that  Wireless  Retail 
also  faces  challenges  in  adopt¬ 
ing  the  technolog>’  more  wide¬ 
ly  for  business  uses. 

With  handheld  devices, 

"you  can't  send  and  receive 
e-mail  easily  or  conduct  trans¬ 
actions  easily."  he  said.  "I 
think  we're  still  in  the  midst  of 
the  maturation  of  the  market 
and  of  people  becoming  com- 
fonable  using  them.”  I 


Securities  Rrms  Keep  IT 
Spending  Conservative 


IT  managers  from  Wall  Street 
firms  converged  on  the  Secu¬ 
rities  Industry  Association's 
(SIA)  Technology  Manage¬ 
ment  Conference  last  week, 
many  looking  for  better  ways 
to  make  the  roost  out  of 
what  they  already  have 
in  place. 

With  IT  budgets  still 
constrained  at  many  fi¬ 
nancial  services  firms. 

51A  President  Marc  Lackritz 
told  conference  attendees 
that  the  securities  industry  as 
a  whole  is  no  longer  a  bleed- 
ing-edge  adopter  of  new  tech¬ 
nology.  Most  IT  dollars  are 
going  toward  business  conti¬ 
nuity.  risk  mana^^ment  and 
applications  that  help  inte¬ 
grate  and  consolidate  systems. 
Lackritz  said. 

Citing  a  prediction  by  Need¬ 
ham.  Mas.s.-based  Tower- 
Group  that  IT  spending  in  the 
financial  serv  ices  industry 
will  shrink  from  S23J  billion 


in  2002  to  S21.9  billion  this 
year,  Lackritz  noted  that  IT 
executives  who  aa*  investing 
in  new  projects  arc  being  care¬ 
ful  to  match  them  to  specific 
basiness  needs.  "In  that  con¬ 
text.  spending  less  may  not  be 
a  bad  thing.”  he  said. 

Lackritz's  comments  hit 
home  with  IT  managers 
like  Donald  Haile,  pres¬ 
ident  of  Fidelity  Invest¬ 
ment  Systems  Ca.  the 
technology  division  of 
Boston-based  FMR  Corp.  Haile 
said  he's  trying  to  deal  with  the 
challenge  of  managing  14 
mainframes,  1.500  network 
switches,  500-plus  routers  and 
an  abundance  of  servers  — 
9.0(X)  in  three  data  centers. 

Fidelity's  IT  team  recently 
uncovered  numerous  redun¬ 
dancies  in  the  company's  core 
systems  infrastructure  and  its 
desktop  environment.  Haile 
said  he  now  plans  to  consoli¬ 
date  systems  in  order  to  pay 
for  new  applications  that  be 
hopes  will  help  the  IT  unit 


boost  the  efficiency  of  its  pro¬ 
duction  processing  operations. 

One  way  Haile  will  try  to  re¬ 
duce  costs  is  by  using  Linux 
on  blade  servers  that  run  some 
enmpure-intensive  applica¬ 
tions,  a  change  that  could  low¬ 
er  the  current  server  costs  by 
at  least  25%.  But  Haile  added 
that  he  isn't  ready  to  consider 
Linux  for  mission-critical  data 
center  applications,  because 
the  open-source  operating  sys¬ 
tem  still  needs  to  prove  that 
it’s  robust  enou^ 

Redudns  Overhead 

Amir  Abouelnaga,  a  program 
manager  at  Northrop  Grum¬ 
man  Corp.’s  information  ser¬ 
vices  group,  said  he's  explor¬ 
ing  the  possible  use  of  tech¬ 
nologies  like  XML  as  part  of  a 
planned  data  mining  system 
that  will  be  tied  to  a  large 
number  of  databases  contain¬ 
ing  infonnation  about  the 
Herndon,  Va.-based  compa¬ 
ny’s  government  contracts. 

“We  want  to  reduce  over¬ 
head  to  administer  contracts," 
Abouelnaga  said,  adding  that 
be  hopes  Northrop  Grumman 
workers  will  be  able  to  pin¬ 
point  best  practices  by  com¬ 
paring  different  contracts. 


Currently,  the  various  databas¬ 
es  can’t  interoperate  with  one 
another,  he  said. 

Dennis  Mooradian.  chair¬ 
man  and  CEO  of  Minneapo¬ 
lis-based  Wells  Fargo  Invest¬ 
ments  LLC  fired  a  volley  of 
criticisms  at  IT  managers 
during  a  speech  at  the  confer¬ 
ence  and  reminded  attendees 
that  technology  "is  not  the 
business’*  of  financial  ser¬ 
vices  firm-s. 

Mooradian  warned  about 
the  dangers  of  buying  un¬ 
proven  technology.  In  addi¬ 
tion.  he  said  that  he  had  never 
seen  an  IT  project  come  in  on 
time  and  on  budget,  and  he 
recommended  that,  if  any¬ 
thing.  technology  managers 
should  pad  esdmated  project 
costs  instead  of  iow-balling 
business  executives.  But  he 
added  that  for  man>’  IT  execu¬ 
tives,  it  will  continue  to  be  dif¬ 
ficult  to  "get  money  out  of  the 
CEO  for  projects"  until  the 
economy  improves, 
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Server  blades  engineered  to  work 
across  complex  computing  environments. 


HP  ProLiant  server  blades,  powered  by  Intel*  Xeon*"  processors,  are  designed  to  support  a  variety  of  robust  enterprise  solutions, 

including  SANs,  it  is  not  difficult  to  oppreciote  the  orchitectural  excellence  of  the  new  HP  ProLionf  BUOp  ond  BL20p  G2  server  blodes.  They’re  the  most  powerful,  flexible, 
indostry-stondord  blades  for  business  today.  In  oddition  to  meeting  your  company's  expanding  needs  for  server  copocity,  they're  designed  with  SAN  connectivity  to  support 
sophisticated  sforoge  environments-easily,  reliably  ond  affordably.  Combined  with  HP  ProLiant  Essentiols  software,  they  con  dromatically  reduce  deployment  titne  and  help 
maximize  productivity.  Which  meons,  of  course,  your  business  soves  money.  Demand  more  from  your  IT  systems.  Integrate  HP  ProLiont  server  blodes  into  environment. 
And  corry  yoer  business  to  a  stronger,  more  cost-effective  ploce. 


Complements  ProLiant 
server  blades 


I  HP  ProLiant  B120p  G2 

_  Up  K)  Kko  IiimI*  Xaon''  proctuon  DR  3.06  GHz 
!  Avgikibl*  with  tvM  lO/IOO/IOOO  NiCt  ond 
I  on*  monoeamant  NIC  plu>  duol  2Gb  libra 
I  chonnal  mazzonina  eo^ 


!  Optienol  Rapid  Oapioymenl  Pock 
I  toilwora  oHewt  lor  pvick  multi.far«ar  daploymani 


HP  MODULAR  SAN 
ARRAY  1000 

Probool  larvan  and  lha  MSAIOOO 
hova  baan  anginaarad  10  nvorl 
banar  togatbar  To  talaly  nirgrola 
doM  In  o  SAN  arwifonmanl.  limply 
ramova  Proliool  drivat  ond  nuan 
tbam  into  lha  MSAIOOO. 


Demand  more  with  HP  ProLiont  server  blodes.  Download  IDC's  white  paper,  "Enabling  Business  Agility  "nirough  Server  Bbde  Technology" 
at  vYww.hp.com/go/proliant55  or  dial  1-877-865-n61  and  mention  code  AAJA. 
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cause  it  would  combine  J.D. 
Edwards*  manufacturing  appli* 
cations  and  PeopieSoft’s  hu¬ 
man  resources  software.  But 
now.  he  said,  "maybe  we  ought 
to  stand  away  from  a  selection 
with  Oracle.  PeopleSoft  or  f.D. 
Edwards."  Hayes  Leminerz  of¬ 
ficials  planned  to  meet  with 
ERP  market  leader  SAP  AG 
last  week,  Leidal  added. 

Joshua  Greenbaum.  an  ana¬ 
lyst  at  Enterprise  Applications 
Consulting  in  Daly  City.  Calif.. 

■  said  he's  not  con¬ 
vinced  that  the  re¬ 
fund  deals  will  per¬ 
suade  users  to  go 
ahead  with  purchas¬ 
es,  He  said  license  fe«  typi¬ 
cally  amount  to  only  10%  to 
15%  of  the  total  cost  of  owner¬ 
ship  for  business  applications. 
“Everything  IPeopleSoft  CEO 
Craig  Conway]  does  at  this 
point  can  be  measured  by 
multiple  yardsticks,”  said 
Greenbaum.  The  refund  offer 
is  at  least  in  part  meant  to 
"thwart  Oracle’s  efforts,"  be 
said,  but  its  real  purpose  is  to 
close  deals,  because  People- 
Soft  is  desperate  to  make  its 
numbers. 

Oracle  declined  to  comment 
about  the  reftmd  offers.  But  it 
made  clear  that  it  plans  to 
push  ahead  with  the  takeover 
bid,  increasing  its  original  $5.1 
billion  offer  and  filing  a  law¬ 
suit  against  PeopleSoft.  its 
board  and  Ji>.  Edwards.  Ora¬ 
cle's  suit  is  one  of  a  flurry  of 
legal  actions  involving  the 
three  vendors  and  a  People-  I 
Soft  user  (see  story,  top  right),  i 
The  initial  purchase  price  I 
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(kmnadicutRbs  Suit  Against  Oracle 
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ConoBcflotaMiginomninL  block  unNartadWwMn. 

vMchkinMtoRilditalaSlOO  PaaplaSoftMdJilEdNvtb 
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toiCB  I  to  buy  MW  aofhMn  bom 
mbiar  vendor. 
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man  confirmed  that  People- 
Soft  has  initiated  "a  prudent 
response  to  Oracle's  attempt 
to  disrupt  our  business."  He 
added  that  PeopleSoft  is  tak¬ 
ing  steps  "to  prote«  our  cus¬ 
tomers'  investments  and  our 
market  position." 

Jim  Prevo,  CIO  at  People- 
Soft  user  Green  Mountain 
Coffee  Roaster  Inc.  in 
Waterbury.  Vu  said 
he  has  heard  about 
such  leners  but  has- 
n't  seen  one.  Prevo 
described  the  refund  provi¬ 
sions  spelled  out  in  the  letter 
as  "a  good  offer"  for  users. 

"If  I  had  any  pending  pur¬ 
chases  with  Pe^leSoft,  Pd 
move  forward  as  a  voce  of  con¬ 
fidence  in  the  management 
team,"  Prevo  said,  noting  that 
the  promise  of  refunds  would 
let  users  do  so  "without  extra¬ 
ordinary  financial  risk." 

PeopleSoft  and  J.D.  Edwards 
users  alike  have  said  that  they 
may  put  off  software  purchas¬ 
es  until  the  buyout  fracas  is  re¬ 
solved  [QuidcLink  99178]. 

For  example,  Bruce  Leidal, 
director  of  technology  at 
Hayes  Lemmerx  International 
Inc  in  Northville.  Mich.,  last 
week  said  the  uncertainties 
raised  by  Oracle's  offer  may 
affect  a  plan  to  consolidate  the 
automotive  parts  maker's  ERP 
systems. 

Leidal  said  be  sees  potential 
benefits  in  PeopleSoft's  plan 
to  acquire  JT).  Edwards  be¬ 


that  Oracle  announced  June  6 
was  widely  viewed  as  a  low¬ 
ball  bid.  The  new  offer  makes 
the  pressed  buyout  “a  viable 
deal"  said  Barton  (kitdenberg. 
a  CRM  software  analyst  at 
Bethesda,  Md-based  consult¬ 
ing  firm  Information  Systems 
Maiketing  Inc.  However,  be 
predicted  that  PeopleSoft 


stockholders  will  still  reject  it. 

In  fact,  PeopieSoft’s  board 
of  directors  on  June  20  reject¬ 
ed  the  new  offer  and  urged 
stockholders  to  do  the  same 
[QuickLink  39363]. 

Several  Oracle  users  attend¬ 
ing  a  CRM  conference  in 
Boston  that  was  sponsored  by 
the  Digital  Ckmsuliing  Insti¬ 
tute  also  said  the  higher  offer 
gives  more  credence  to  Ora¬ 
cle’s  effort  to  buy  PeopleSoft. 

There’s  a  lot  of  talk  that 
maybe  [the  takeover  attempt] 
was  just  a  tactic  rather  than  a 
true,  honest  and  earnest  bid. 
With  the  raised  price,  it  shows 
Oracle  is  in  the  game  to  win." 
said  Victor  Burgess,  vice  pres¬ 
ident  and  general  manager  of 


alliances  at  Afflna,  a  company 
in  Peoria,  III,  that  provides 
customer  service  outsourcing. 
Affina  uses  Oracle's  CRM 
modules  and  its  Oracle9i  ap¬ 
plication  server  software. 

PeopleSoft  and  Denver- 
based  ).D.  Edwards  changed 
their  acquisition  deal  from  an 
all-stock  transaction  to  one 
that  includes  a  cash  payment 
of  $863  million  and  a  total  val¬ 
ue  of  $1.75  billion.  That  would 
eliminate  the  need  for  People- 
Soft’s  shareholders  co  vote  on 
the  proposed  merger,  which 
Oracle  has  said  it  would  re¬ 
assess  if  it  buys  PeopleSoft.  I 


»  With  the 
raised  price, 
it  shows  Oracle  is 
in  the  game  to  win. 


VICTOR  BUR6ESS.  VICE  PRESIDENT 
AN06ENERAL  MANAGER  OF 
ALLIANCES.  AFFINA 


Reporter  Patrick  Thibodeau 
contributed  to  this  story. 
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Legendary  Reliability* 


Are  you  really  as  dense 
as  we  think  you  are? 


As  racks  bacoms  ineraasinglv  popu- 
latad  with  tharnsr,  dsspsr  ssrvers. 
high  power  itsnsitiss  in  your  ssrvar 
room  or  data  cantor  can  eraata 
havoc,  from  aarfy  aquipmant  faikiras 
to  axpansiva,  fo^-about-youiHob' 
security  downtima. 

Introducing  InfraStruXure"  architec¬ 
ture,  the  industry's  only  patent-pend¬ 
ing.  network-critical  physical  infra¬ 
structure.  InfraStruXure'  lets  you 
target  power  and  cooling  precisely 
where  your  mission-critical  applica¬ 
tions  live— the  rack  enclosure. 

And  because  InfraStruXure  architec¬ 
ture  uses  a  modular,  manageable,  pre- 
engineered  approach,  you  can  select 
standardized  compor>ents  to  create 
your  own  customized  solutions. 

Which  means  you  can  target  avail¬ 
ability.  pay  as  you  grow,  adapt  to 
change,  and  maximize  efficiency 
while  minimizing  Installation,  operat¬ 
ing,  service,  and  maintenance  costs. 

In  times  like  these,  it  pays  to  think 
smart.  For  more  information  on 
InfraStruXure's  open,  adaptable, 
and  integrated  architecture  for  on- 
demand,  i>etwork-critical  physical 
infrastructure,  visit  us  online  today 
at  www.apc.com. 
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High  power  densities  can  create  hot 
spots,  which  cause  equipment  failures 
and  expensive  downtime. 


Air  componems  designed  for 
tttfraStruXure"  are  manageable  via 
network  technology,  and  feature  a 
modem,  reliable  design  with  fewer 
moving  parts. 
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POWER  RACK  AIR 


Open,  adaptable  and  integrated 
architecture  for  on-demand 
network-critical  physical  infrastructure 


‘Our  Video  on  Demand  (VODI 
servers  are  air  cooled  from  front 
to  back.  The  ARC  racks  that 
house  the  InfraSUuXure  are  also 
designed  to  cool  from  front  to 
back.  So  the  same  racks  can 
effectively  house  our  power  sys¬ 
tem  and  our  servers.* 

WwaeHWa 
Vies  PmnUfli  e<  EitgmMnng 
Sich  nwairt 
Dirtetor  of  Engmttnng 


‘If  I  had  purchased  die  incum¬ 
bent  vendor’s  3-phase  upgrade 
model.  I  would  have  paid  75% 
more  in  service  costs  over  tiie 
next  four  years  and  I  would 
have  had  to  utilize  50%  more  of 
my  precious  floor  space.* 

Suppon  Sennen  DiwAon 

Ciq  •!  NwipM  Boedi  Mia  OieMMl 


TradkioMi  data  caalaft  era  built  out 
for  future  capacity  and  require  a 
large  amount  of  floor  space  that 
couM  be  othervifise  utilized.  High 
power  density  racks  create  danger¬ 
ous  hot  spots. 


■afraSkaXara*  IMS  you  buM  out  capacity 
oniy  as  it's  required.  Save  up  to  50% 
CapEx  aad  20%  OpEx*,  end  reclaim  an 
average  of  20%  usable  space. 
InfraStruXure  AIR  delivers  cooling 
directly  where  it  is  needed,  ehminating 
dangerous  hot  spots. 
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You  need  UNIX-level  performance 


Introducing  Microsoft  Windows  Server  2003.  Do  more  with  less. 
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Microsoft 


and  reliability. 


You  don’t  have  a  UNIX-level  budget. 
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Windows  Server  2 
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Va.  County’s  IT  Governance 
Approach  Helps  Protect  Budget 


SiXMiding  to  drop  in  new  fiscal  \  ear.  but 
work  on  key  tech  projects  w  ill  continue 


Masy  sTAif  and 

)i>cal  government 
IT  departments 
face  massive  cut¬ 
backs  because  of  the  weak 
economy  and  declining  tax 
revenue.  But  in  Fairfax  Coun¬ 
ty.  V’a..  Sy  million  is  being  set 
aside  u\  continue  a  series  of  IT 
modernizatutn  projects  in  the 
fiscal  year  that  starts  |uly  I. 

That's  a  35%  decrease  from 
the  amount  earmarked  for 
such  projects  two  years  ag4», 
and  the  county's  spending  on 
IT  operations  has  dropped  by 
as  part  of  a  belt-tighten¬ 
ing  by  all  departments.  None¬ 
theless.  top  technokigy  execu¬ 
tives  here  said  they  wore  able 
to  preserve  the  moderniz;)tit)n 
budget  line  thanks  in  large 
part  to  the  way  the  county 


manages  its  IT  resources. 

Fairfax  County  encourages 
both  cwperation  and  compe¬ 
tition  among  agencies  th;»  are 
in  pursuit  of  IT  project  dol¬ 
lars.  On  the  ci>i»peraiion  side. 
IT  director  Wanda  Gibson  and 
IT  project  portfolio  manager 
David  Bartee  said  they  and 
other  county  executives  look 
for  common  threads  among 
project  requests, 

For  instance,  the  Fairtax  De¬ 
partment  of  Public  Works  and 
Environmental  Services  in  the 
spring  of  2002  proposed  that  a 
25-year-old  mainframe-based 
inspection-tracking  system 
used  to  moniiiir  permits  for 
buildings,  contractors,  electri¬ 
cians  and  plumbers  be  re¬ 
placed  by  a  new  one  built 
around  a  Sun  Solaris  server 
and  an  Oracle  database. 

After  receiving  the  request. 


I  a  seven-member  steering  com- 
I  mittce  that  make.s  strategic  IT 
I  spending  decisions  saw  an  op- 
:  portunity  to  expand  the  new 
system  to  agencies  such  as  fire 
and  rescue,  planning  and  zon¬ 
ing.  and  health  services. 

"Having  a  single  repository 
'  for  project  requests  helps  us 
to  synchronize  with  other 
agencies  on  similar  pixtieets." 
said  Stephen  Gamier,  who 
works  in  the  county's  Office  of 
Building  Code  Services  and  is 
project  manager  for  the  in¬ 
spection-tracking  system.  The 
first  pha.se  of  the  project,  the 
rollout  of  a  complaints  man¬ 
agement  module,  is  due  to  be 
completed  in  late  summer. 

Gamier  added,  though,  that 
the  presence  of  the  IT  steering 
committee  also  forces  agen¬ 
cies  competing  for  funding  to 
be  "even  more  articulate”  in 
LH*mmunicating  the  expected 
I  benefits  of  projects. 

I  Like  many  organizations. 
Fairfax  County  had  highly  de-  ' 


centralized  IT  spending  and 
decision-making  until  the 
mid-B)90s.  The  county's  55 
agencies  budgeted  for  and  ran 
their  ow'n  systems,  a  process 
that  led  county  officials  to  rec-  ' 
ognize  "that  we  needed  to  pull  | 
IT  together."  Gibson  said. 

In  addition  to  creating  the 
internal  steering  committee,  in 
1995  the  county  set  up  an  IT 
advisory  committee  that  in¬ 
cludes  private-sector  execu¬ 
tives  and  other  external  mem¬ 


bers  (see  box  below). 

That  same  year.  Fairfax 
County  merged  its  IT  infra¬ 
structure  and  telecommunica¬ 
tions  groups  into  a  centralized 
organization  and  created  sepa¬ 
rate  positions  for  a  CIO  and  a 
director  of  IT.  It  also  added  an 
IT  portfolio  management  po¬ 
sition.  the  one  now  held  by 
Bartee.  years  before  many 
companies  even  considered 
taking  that  approach  to  evalu¬ 
ating  their  spending. 

Fairfax  County  has  "one  of 
the  best-run  public-sector  IT 
departments  in  the  country." 
said  David  Banks,  a  Gartner 
Inc.  analyst.  "They  have  ex¬ 
tremely  sharp  people,  all  the 
way  from  the  data  center  on 
up  to  the  top  ranks."  I 
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Utility  Computing  Just  Starting 
To  Evoive,  &n  IT  Exec  Says 


BV  CBAIO  STEOMAN 

As  vice  president  of  IT  opera¬ 
tions  at  5un  Microsystems  Inc.. 
Jay  Uttlepage  is  in  c/iarse  of  the 
company's  infernal  systems  and 
the  utility  computing  services  it 
offers  to  corporate  users.  Lit- 
depage  last  week  spoke  with 
Compuierworld  ai>out  utility 
computing  from  both  the  ven¬ 
dor^  and  wters'  vieu'poinu. 

How  far  along  is  utility  computing 
in  its  dovBlopment?  It's  not  ma¬ 
ture  at  all.  A  lot  of  [vendors] 
arc  trying  to  define  utility 
computing  3.S  logical  exten- 
sions  of  what  they’ve  already 
done.  Sun  is  no  diffcRmt:  we 
view  this  as  a  logical  exten¬ 
sion  of  network  computing. 


.And  in  large  pan.  because  the  |  utility  pricing  now,  but  it's 
industrv'  is  in  its  infancy,  all  of  very  coarse  pricing.  Our  Sun 
us  are  right  in  the  way  we  re  Power  Unit  (usage  measure- 

defining  it.  In  the  king  term.  ment]  is  defined  a.s  IGB  of 

it's  going  to  be  up  to  customer  storage  or  a  l-GHz  CPU. 
choice.  T'hat's  not  necessarily  going  to 

be  the  right  measurement,  de- 
How  long  do  you  think  H  will  be  pending  on  what  your  panicu- 
before  utility  computing  becomes  lar  busines.s  process  is.  I'm 
a  mainstream  sort  of  thing?  If  running  a  .scries  of  Ipricingl 


you  define  "main¬ 
stream"  as  the  majori¬ 
ty  of  users  Ictnking  at 
this  as  the  primary 
way  of  purcha.sing  IT,  1 
think  it's  probably  five 
years. 

Have  Sun  and  other  ven¬ 
dors  Bgured  out  how  to 
price  this  yet?  There's 


pilot  programs  inter¬ 
nally  tiui  are  designed 
to  be  more  reflective 
of  the  specific  busi¬ 
ness  prtKcsses  we 
have.  Those  should 
lead  to  more  refined 
and  relevant  metrics. 

How  long  wiN  it  take  to 
put  (hose  metrics  in 


place?  The  pilots  started  in 
March-  We're  in  the  analysis 
stage  now.  and  they're  all  de¬ 
signed  to  be  completed  by 
September.  But  this  is  a  jour¬ 
ney.  We’re  going  to  learn  a  lot 
out  of  the  four  pilots,  some  of 
which  will  result  in  new  utility 
computing  products  from  Sun 
and  some  of  which  will  result 
in  new  pricing  models.  And 
some  are  going  to  turn  out  to 
be  really  stupid  ideas. 

is  there  going  to  be  enough  busi¬ 
ness  for  ail  the  vendors  that  are 
targeting  utility  computing?  Sure 
there  is.  This  is  going  to  be 
much  more  closely  correlated 
with  demand  (for  IT 
resources],  and  that's  going  to 
be  great  for  the  marketplace. 

Great  for  users,  or  for  vendors? 
Ultimately,  both.  It's  definitely 
going  to  be  great  for  cus¬ 
tomers.  because  they  won’t 
have  to  overbuy.  But  it  will  be 


great  for  vendors  that  are  real¬ 
ly  in  tune  with  the  needs  of 
their  customers,  too.  You’re 
going  to  have  good  long-term 
relationships.  It’s  a  much 
healthier  cycle  than  just  sell¬ 
ing  them  a  bo.x. 

Sun  doesn’t  have  the  manpower 
or  IT  services  track  record  that  ri* 
vab  like  IBM  and  HP  do.  How  are 
you  going  to  compete  against 
them  in  utility  computing?  We’re 
not  going  to  compete  directly 
with  them  in  the  same  way 
they’re  trying  to  address  the 
market.  Our  strategy  has  al¬ 
ways  been  to  stdve  the  needs 
of  customers  without  throw¬ 
ing  a  lot  of  people  at  prob¬ 
lems.  and  there's  still  very 
much  of  a  belief  [at  Sun)  that 
(hat's  the  right  way  to  provide 
services.  We’ll  also  rely  on 
partners  to  help  us.  We  don't 
do  business  process  re-engi¬ 
neering.  but  we  have  lots  of 
friends  (hat  do.  I 
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Va.  County’s  IT  Governance 
Approach  Helps  Protect  Budget 


SjDcnding  to  drop  in  new  fiscal  year,  but 
work  on  key  tech  projects  will  continue 


Many  state  and 
local  government 
IT  departments 
face  massive  cut¬ 
backs  because  of  the  weak 
economy  and  declining  tax 
revenue.  But  in  Fair^  Coun¬ 
ty.  Va.,  $9  million  is  being  set 
aside  to  continue  a  series  of  IT 
modernization  projects  in  the 
fiscal  year  that  starts  July  L 
That's  a  39%  decrease  from 
the  amount  earmarked  for 
such  projects  two  years  ago. 
and  the  county's  spending  on 
IT  operations  has  dropped  by 
10%  as  part  of  a  beh-t^ten- 
iag  by  all  departments.  None¬ 
theless,  lop  technology  execu¬ 
tives  here  said  they  were  able 
to  preserve  the  modernization 
budget  line  thanks  in  large 
part  to  the  way  the  county 


manages  its  FT  resources. 

Fairfax  County  encourages 
both  cooperation  and  compe¬ 
tition  among  agencies  that  are 
in  pursuit  of  IT  project  dol¬ 
lars.  On  the  cooperation  side, 
IT  director  Wanda  Gibson  and 
IT  project  portfolio  manager 
David  Bartee  said  they  and 
other  county  executives  look 
for  common  threads  among 
project  requests. 

For  instance,  the  Fairfax  De- 
panment  of  Public  Works  and 
Environmental  Services  in  the 
spring  of 2002  proposed  that  a 
25-ycar-old  mainframe-based 
inspection-tracking  system 
used  to  OK>mtor  permits  for 
buildings,  contractors,  electri¬ 
cians  and  plumbers  be  re¬ 
placed  by  a  new  one  built 
around  a  Sun  Solaris  server 
and  an  Oracle  database. 

After  receiving  the  request. 


a  seven-member  steering  com¬ 
mittee  that  makes  strategic  IT 
spending  decisions  saw  an  op- 
pommity  to  expand  the  new 
system  to  agencies  such  as  fire 
and  rescue,  planning  and  zon¬ 
ing.  and  health  services. 

"Having  a  single  repository 
for  project  requests  helps  us 
to  synchronize  with  other 
agencies  on  similar  projects,* 
said  Stephen  Gamier,  who 
works  in  the  county’s  Ofiice  of 
Building  Code  Services  and  is 
project  manager  for  the  in- 
spection-trackii^  system.  The 
first  phase  of  the  project,  the 
rollout  of  a  complaints  man¬ 
agement  module,  is  due  to  be 
completed  in  late  summer. 

Gamier  added,  though,  that 
the  presence  of  the  IT  steering 
committee  also  forces  agen¬ 
cies  competing  for  funding  to 
be  “even  more  articulate”  in 
communicating  the  expected 
benefits  of  projects. 

like  many  organizations, 
Fairfax  County  had  highly  de¬ 


centralized  IT  spending  and 
decision-making  until  the 
mid-1990s.  The  county’s  55 
agencies  budgeted  for  and  ran 
their  own  systems,  a  process 
that  led  county  officials  to  rec¬ 
ognize  “that  we  needed  to  pull 
IT  together,“  Gibson  said. 

In  addition  to  creating  the 
internal  steering  committee,  in 
1995  the  county  set  up  an  IT 
advisory  committee  that  in¬ 
cludes  private-sector  execu¬ 
tives  ai^  other  external  mem¬ 


bers  (see  box  below). 

That  same  year.  Fairfax 
County  merged  its  IT  infra¬ 
structure  and  telecommunica¬ 
tions  groups  into  a  centralized 
organization  and  created  sepa¬ 
rate  positions  for  a  CIO  and  a 
director  of  IT.  It  also  added  an 
IT  portfolio  management  po¬ 
sition.  the  one  now  held  by 
Bartee.  years  before  many 
companies  even  considered 
taking  that  approach  to  evalu¬ 
ating  their  spending. 

Fairf^  County  has  “one  of 
the  best-run  public-sector  IT 
departments  in  the  country,” 
said  David  Banks,  a  Gartner 
Inc.  analyst.  “They  have  ex¬ 
tremely  sharp  people,  all  the 
way  fo^  the  data  center  on 
up  to  the  top  ranks.”  k 


Fairfax  County’s  IT  Governance  Model 


Utility  Computing  Just  Starting 
To  Evolve,  Sun  IT  Exec  Says 


■V  CHAM  •TCOMAN 

Asvkt  president  of  IT  opera¬ 
tions  at  Sun  Microsystems  Inc^ 
Jqr  Uniipaga  is  in  charge  of  the 
company’s  internal  systems  and 
the  utility  computing  services  it 
qilfers  to  corporate  users,  tit- 
tiepoge  last  week  spoke  with 
Computerworld  about  utility 
computing  from  both  the  ven¬ 
dor^  and  users'  viewpoints. 

Hew  far  along  ii  ulMy  conputkig 
In  iln  dnealepwiwit?  It's  not  ma¬ 
ture  at  alt  A  lot  of  [vendors] 
are  trying  to  define  utility 
computing  as  logical  exten¬ 
sions  of  what  they've  already 
done.  Sun  is  no  different;  we 
view  this  as  a  logical  exten¬ 
sion  of  network  computing. 


And  in  large  part,  because  the 
industry  is  in  its  infancy,  ail  of 
us  are  right  in  the  way  we're 
defining  it.  In  the  long  term, 
it’s  going  to  be  up  to  customer 
choice. 

How  long  do  you  IhM  M  wfl  be 
bofora  utttly  computing  beeonws 
a  mainstraam  sort  of  thing?  If 

you  define  “main¬ 
stream”  as  the  majori¬ 
ty  of  users  looking  at 
this  as  the  primary 
way  of  purchasing  IT,  I 
think  it’s  probably  five 
years. 

Hove  Sun  and  other  ven¬ 
dors  flguod  out  how  (0 
price  tNs  yet?  There’s 


utility  pricing  now,  but  it’s 
very  coarse  pricing.  Our  Sun 
Power  Unit  (usage  measure¬ 
ment]  is  defined  as  1GB  of 
storage  or  a  I-GHz  CPU. 

That's  not  necessarily  going  to 
be  the  right  measurement,  de¬ 
pending  on  what  your  particu¬ 
lar  business  process  is.  I’m 
running  a  series  of  [pricing] 
pilot  programs  inter¬ 
nally  that  are  designed 
to  be  more  reflective 
of  the  specific  busi¬ 
ness  processes  we 
have.  Those  should 
lead  to  more  refined 
and  relevant  metrics. 

Hew  long  w«  it  take  to 
pul  thoee  metrics  ki 


piece?  The  pilots  started  in 
March.  We’re  in  the  analysis 
stage  now,  and  they're  all  de¬ 
signed  to  be  completed  by 
September.  But  this  is  a  jour¬ 
ney.  We’re  going  to  learn  a  lot 
out  of  the  four  pilots,  some  of 
which  will  result  in  new  utility 
computing  products  ffom  Sun 
and  some  of  which  will  result 
in  new  pricii^  models.  And 
some  are  going  to  turn  out  to 
be  really  stupid  ideas. 

k  there  going  to  be  enough  fauel- 
nese  for  ell  the  vendors  that  are 
targeting  utility  computing?  Sure 
there  is.  This  is  going  to  be 
much  more  closely  correlated 
with  demand  [for  TT 
resources],  and  that’s  going  to 
be  great  for  the  marketplace. 

Oreat  for  uaors,  or  for  vondors? 

Ultimately,  both.  It’s  definitely 
going  to  be  great  for  cus¬ 
tomers.  because  they  won’t 
have  to  overbuy.  But  it  will  be 


great  for  vendors  that  are  real¬ 
ty  in  tune  with  the  needs  of 
their  customers,  too.  You’re 
going  to  have  good  long-term 
relationships.  Ifs  a  much 
healthier  cycle  than  just  sell¬ 
ing  them  a  box. 

Sun  doeenl  have  the  manpower 
or  IT  aarvlcee  track  record  that  ri¬ 
vals  Rie  BM  and  HP  do.  How  wo 
you  going  to  eempele  againet 
them  in  utfty  computing?  We're 
not  going  to  compete  directly 
with  them  in  the  same  way 
they’re  trying  to  address  the 
market  Our  strategy  has  al¬ 
ways  been  to  solve  the  needs 
of  customers  without  throw¬ 
ing  a  lot  of  people  at  prob¬ 
lems.  and  there’s  sdll  very 
much  of  a  belief  [at  Sun]  that 
that's  the  r^t  way  to  provide 
services.  We’ll  also  rely  on 
partners  to  help  us.  We  don't 
do  business  process  re-engi¬ 
neering,  but  we  have  lots  of 
friends  that  do.  I 
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Survey  Shows  Common  IT  Woes  Persist 


BY  JULIA  KINO 

It’s  vu  all  over  again  at 
most  companies  when  it 
comes  to  their  track  records 
in  using  IT  to  help  achieve 
business  goals. 

Consider  the  following: 

■  At  companies  that  aren’t 
among  the  top  25%  of  technol¬ 
ogy  users,  three  out  of  10  IT 
projects  fail  on  average. 

■  Less  than  40%  of  IT  man¬ 
agers  say  their  staffs  can  react 
rapidly  to  chaises  in  business 
goals  or  market  conditions. 

■  Less  than  half  of  all  com¬ 
panies  bother  to  validate  an  IT 
project’s  business  value  after 
it  has  been  completed. 

Those  are  just  a  few  of  the 
fmdings  from  a  survey  of  IT 
managers  at  about  2,000  com¬ 
panies,  includii^  more  than 
80%  of  the  Fortune  1,000.  The 
survey,  which  was  conducted 
by  The  Hackett  Group  in  At¬ 
lanta  and  is  due  to  be  released 
this  week,  rates  the  top  SOO  of 
those  companies  as  ‘Vorld- 
class”  IT  users.  The  rest  of  the 
pack  is  classified  as  ’’average.” 

“None  of  these  results  sur¬ 
prise  me,”  said  Bill  Finefield, 
CIO  at  the  Navy  Exchange 
Service  Command  in  Virginia 
Beach,  Va.  “Companies  tend  to 
build  a  great  case  for  an  IT 
project,  and  then  they  tend 
not  to  follow  up  to  see  if  they 
achieved  what  they  expected.” 

“There  should  be  a  very 
well-understood  process 
around  when  and  how  IT  is 
going  to  measure  value,”  said 
Joyce  Young,  CIO  at  UOP  LLC 
in  Des  Plaines,  lU.  But  equally 
important  is  how  weU  IT  com¬ 
municates  with  business  lead¬ 
ers,  Young  said.  Many  IT  man¬ 
agers  “don’t  have  really  stroi^ 
relationships  on  the  user  side, 
and  we  have  to  say  no  a  lot,” 
she  said.  “Having  a  well-un¬ 
derstood  set  of  project  priori¬ 
ties  should  help.” 

UOP.  which  develops 
process  manufacturing  tech¬ 
nology  for  petroleum  refmers 
and  petrochemical  companies, 
is  implementii^  a  portfolio 
management  approach  to 
tracking  IT  projects. 

By  far.  the  biggest  factors 
separating  worid-class  IT  de¬ 


partments  from  the  also-rans  cordii^  to  Hackett  analysts, 
is  their  level  of  business  align-  “Most  IT  organizations  still 
ment  and  the  sophistication  of  look  like  a  Rube  Goldbeig  [ma- 
their  internal  IT  processes,  ac-  chine],"  said  Allan  Frank,  a  se¬ 


nior  fellow  at  Hackett.  “There’s 
no  underlying  process  model  to 
them.”  For  example,  only  37% 
of  the  “average”  companies 
have  a  formal  IT  program  man¬ 
agement  office  in  place,  he  said 
Too  many  IT  departments 


also  lack  a  direct  link  to  CEOs, 
Frank  said.  Hackett's  survey 
found  that  less  than  one-third 
of  CIOs  report  to  their  CEOs 
at  businesses  in  the  “average” 
category.  At  world-class  com¬ 
panies,  that  figure  is  42%.  I 
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MicWe  Hudnafl  is  recognized  u  an  authority  in  the 
business  of  IT  operations,  enterprise  service  man- 
agemenc.  management  technolo^es  and  sourcing, 
nichele  is  ITIL-certified  and  holds  a  BBA  in  busi* 
r>ess  management  from  James  Madison  University. 
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Senior  Research  Analyst. 

Meta  Group 


Service  Desk  Outsourcing 


>  What  are  the  typical  services  delivered 
through  a  ‘‘Service  Desk?”  How  is  it  different 
from  a  Help  Desk? 

I  consider  a  Help  Desk  more  of  a  dispatch  center  where 
employees  take  calls  reactively  as  problems  occur. They  may 
have  sonte  limited  capabilities  to  resolve  problems,  but  Help 
Desk  staff  are  generally  limited  to  caking  calls  about  some  IT- 
related  error  and  passing  the  information  forward.  In  con- 
0^1.  a  full  Service  Desk  receives  calls  from  multiple  methods 
(voice,  electronic/web)  and  takes  calls  on  a  variety  of  things, 
such  as  telecom  and  service  requests  chat  go  beyond  the  stan¬ 
dard  “how  to"  support,  as  well  as  IT-related  problems.  Service 
Desk  staff  are  also  more  skilled  and  more  empowered  at 
problem  resolution,  so  they  can  handle  things  on  the  first 
call  more  frequently. 

>  What  are  enterprises  really  looking  for  by 
outsourcing  their  Service  Desk— cost  saving 
or  increased  quality  of  service?  Are  their 
expectations  typically  met? 

There  are  two  frcecs  here.The  folks  looking  for  only  cost 
savings  are  generally  outsourcing  a  Help  Desk,  not  a  Service 
Desk.  Irontcaily.  such  companies  don’t  usually  realize  the  hard 
cost  savings  they  want  because  they  fril  to  manage  the  transi¬ 
tion  and  monitor  the  outsourcer  to  make  sure  that  costs 
remain  flat  or  decline. 

Conversely,  companies  that  treat  their  Service  Desks  more 
strategically  are  interested  in  outsourcing  as  a  method  of  cap¬ 
ping  into  the  best  practices  of  folks  who  do  this  for  a  living. 
They’re  interested  in  the  soft  savings  to  be  realized  by  out¬ 
sourcing  like  looking  at  the  types  of  requests  that  are  being 
nrtade  in  order  to  prevent  or  elimirtate  such  calls  in  the  future, 
thus  increasing  pr^uctivity. 

>  What  factors  must  be  considered  when  com¬ 
paring  insourcing  versus  outsourcing  Service 
Desk  functions? 

For  companies  considering  outsourcing  a  Service  Desk,  it’s  criti¬ 
cal  chat  they  benchmark  their  current  level  of  service — as  well 
as  current  costs — before  they  start  an  engagement.  Otherwise, 
there’s  nothing  to  compare  the  outsourcer’s  service  with. 

Ocher  things  to  consider:  The  outsourcer’s  breadth  of  service 
offering,  geographical  coverage  and  experience  level  at  deliver¬ 
ing  consistent,  defined  processes. 


>  When  evaluating  sourcing  options,  what  are 
the  key  areas  of  tangible  and  intangible  costs 
that  must  be  considered? 

Generally,  the  key  indicator  to  consider  is  cost  per  call,  because 
it  encompasses  a  variety  of  costs,  both  tangible  and  intangible. 
By  watching  how  costs  per  call  trend  over  time  and  comparing 
them  with  Service  Desk  hiring  patterns  as  well  as  desk  activity, 
companies  can  draw  a  number  of  conclusions.  For  example,  the 
biggest  cost  for  any  Help  or  Service  Desk  is  people,  and  the 
challenge  is  to  provide  consistent  services  while  keeping  that 
cost  flat  Consequently,  many  companies  introduce  automated 
technologies  for  routine  services  that  increase  efficiencies. This 
should  be  reflected  in  a  lower  cost  per  call. 

“The  Service  Desk  is 
helping  the  CIO  make 
better  choices.” 

>  Service  Desk  is  often  viewed  as  a  commod¬ 
ity  service  by  the  lines  of  business  in  an  enter¬ 
prise.  Is  the  Service  Desk  actually  strategic? 

If  a  company’s  Service  Desk  is  really  a  Help  Desk,  the  percep¬ 
tion  is  correct,  but  there  are  strategic  uses  of  Service  Desks 
as  welt.  For  example,  if  you  take  the  wealth  of  data  generated 
by  a  Service  Desk  and  use  it  as  a  tool  to  better  manage  the  IT 
organization  and  infrastructure,  that’s  strategic.  For  example,  a 
company  who  learns  firom  their  service  desk  data  that  operat¬ 
ing  problenrts  occur  as  a  result  of  an  existing  process,  can  bene¬ 
fit  from  learning  what  in  that  process  should  be  re-engineered 
in  that  process  to  eliminate  those  concerns.  The  Service  Desk 
is  helping  the  CIO  make  better  choices.  It’s  strategic  when  you 
can  take  die  data  and  use  it  to  better  manage  the  human 
resources  in  IT  as  wdl. 

For  more  information,  please  ^1 800-874-8M7 
or  visit  www.uni8ys.comfoetworkservices 
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Dumb  Vendor  Driving 


IN  CASE  YOU  HAVEN’T  NOTICED,  it’s  getting 
downright  nasty  on  the  information  super¬ 
highway.  We’ve  got  a  pack  of  vendors  careen¬ 
ing  all  over  the  place,  trying  to  force  one  an¬ 
other  into  the  breakdown  lane. 

SCO.  already  tailgat* 
ijig  Limn  users  and  su* 
ing  IBM,  last  week,  re¬ 
voked  IBM's  Unix  li¬ 
cense  and  attacked  Lin¬ 


ux  icon  Linus  Torvalds. 

How’s  that  for  road  rage? 

Microsoft,  meanwhile, 
has  ordered  its  crew  to 
cut  off  Linux  sales  at  any 
cost.  Oracle  is  bearing 
down  on  PeopleSoft,  giv¬ 
ing  rise  to  fears  that  it 
will  crash  that  vendor’s 
product  line  in  a  hostile  takeover 
bid.  In  defensive  maneuvers,  Peo¬ 
pleSoft  and  ).D.  Edwards  each  sued 
Oracle,  which  sued  them  right  back, 
only  to  be  sued  in  turn  by  the  state 
of  Connecticut  Rubbernecking  on 
the  sidelines  are  Sun,  SAP  and 
Sybase,  all  hoping  to  pick  up  any 
dazed  and  shaken  users  they  Hnd 
along  the  road. 

When  they  haven't  been  ramming 
one  another,  vendors  have  been 
merging.  In  between  trying  to  shake 
off  Oracle's  advances,  PeopleSoft  is 
attempting  to  buy  f.D.  Edwards. 
Palm  bought  Handspring.  Mercury 
Interactive  snapped  up  Kintana, 
Baan  was  sold  to  a  group  of  in¬ 
vestors,  and  Corel  agreed  to  be  ac¬ 
quired  by  Vector. 

And  just  for  good  measure,  ven¬ 
dors  have  been  gunning  for  stricter 
license  compliance. 

Beat  ’em  or  join  'em;  it’s  all  about 
new  revenue  streams:  getting  more 
of  them,  and  ever  more  desperately 
driving  rivals  away  from  them. 

Of  course,  thb  is  what  businesses 
da  It's  called  competition,  and 
when  it  works,  it  can  shake  out  mar¬ 
kets,  strengthen  players  and  stream¬ 
line  technology  choices.  But  out  on 
the  infbnnation  superhighway,  reck¬ 
less  displays  of  competitiveoess  and 


aggressive  grabs  for 
money  could  spook 
users  into  just  pulling 
over  and  waiting  things 
out.  How  many  plans  to 
buy  technology  ffom 
Linux  suppliers,  People- 
Soft  or  J.D.  Edwards  slid 
to  the  back  burner  this 
past  week? 

This  ought  to  scare 
vendors,  especially  giv¬ 
en  two  recent  reports 
from  Forrester  Research 
and  Meta  Gfoup  that  indicate  that 
as  many  as  30%  of  North  American 
companies  plan  to  cut  their  IT 
spending  to  below  their  2003  levels 
[Quicklink  39129J. 

This  frenzied  vendor  pileup.  and 
the  ensuing  marketing  and  legal  bat¬ 
tles.  could  backfire  for  the  protago¬ 
nists  —  specifically  by  adding  more 
FUD  into  a  market  where  users  are 
already  fumbling  with  ROI  road 
maps  and  stymied  by  countless  rea¬ 
sons  not  to  buy.  Oddly,  this  high- 
tech  implosion  is  happening  just 


when  the  stock  market  appears  to 
be  on  a  roll  (relatively  speaking) 
and  we  are  seeing  a  glimmer  of 
hope  for  a  recovery. 

Some  mergers  do  make  sense,  but 
others  are  merely  egocentric  or  fi¬ 
nancial  exercises.  Most  arc  highly 
disruptive.  Some  will  go  down  as 
abject  failures.  One  thing  is  certain: 
The  longer  these  merger  battles  and 
lawsuits  rage  on,  the  more  the  in¬ 
dustry  is  likely  to  stagnate. 

You’d  think  the  1990s  would  have 
made  clear  the  dangers  of  obsessing 
too  much  over  your  rivals  or  specif¬ 
ic  technologies.  There  are  plenty  of 
examples  where  vendors  spent  so 
much  time  worrying  about  all  the 
wrong  stuff  that  they  took  wrong 
business  turns.  There  was  3Com’s 
obsession  with  Novell:  Novell's  (or 
substitute  any  vendor  name  here) 
obsession  with  Microsoft  Micro¬ 
soft’s  obsession  with  market  con¬ 
trol:  Oracle's  obsession  with  any¬ 
thing  it's  not  currently  involved  in. 
And  the  list  goes  on.  Shouldn’t  user 
satisfaction  be  the  Na  1  concern? 

At  this  point,  I  have  to  ask:  Do 
we  really  need  more  incentives  to 
garage  IT  projects?  Because  the 
vendor  community  seems  to  be 
working  overtime  trying  to  create 
them.  Even  crash  dummies  are 
smarter  than  that.  I 


PIMM  FOX 

Next  Step 
In  Aflfordable 
Security 

As  MORE  PEOPLE  gain 
access  to  your  IT  infra¬ 
structure,  there's  grow¬ 
ing  demand  to  secure  that  ac¬ 
cess  at  a  reasonable  cost 
IP  security  —  or  IPsec  —  is  a  great 
security  method  for  clientAerver  situ¬ 
ations.  It  was  built  to  support  packet 
exchange  at  the  IP  layer  and  is  pretty 
common  in  virtual  private  networks. 
For  IPsec  to  work,  teth  the  sending 
and  receiving  ends  have  to  share  a 
public  key  using  management  proto¬ 
cols  that  authenticate  the  sender  while 
letting  the  receiver  get  a  public  key. 

IPsec  for  VPNs  makes  sense,  but 
what  about  for  your  intranet  and  the 
Internet? 

The  proliferation 
of  Web-based  tech¬ 
nology  means  peo¬ 
ple  can  have  access 
from  home,  on  the 
road  and  from  a  vari¬ 
ety  of  mobile  de¬ 
vices.  Most  IT  de¬ 
partments  would  be 
loathe  to  give  every¬ 
one  an  IPsec  client. 

They  don’t  really 
want  to  start  sup¬ 
porting  and  tweaking  IPsec  for  every¬ 
one’s  machines. 

Instead,  there’s  a  move  to  adopt  SSL, 
the  Secure  Sockets  Layer  protocol  for 
transmitting  documents  via  the  Inter¬ 
net  using  public-key  encryption.  It 
provides  the  necessary  levd  of  securi¬ 
ty  for  basic  functions  such  as  Web- 
based  e-mail  limited  dient/^rver  ap¬ 
plications  (Microsoft’s  Exchange  and 
Outlook,  as  well  as  Lotus  Notes)  and 
some  intranet  functions.  And  when 
combined  with  Nokia’s  new  Secure 
Access  System,  the  flexibility  of  SSL 
nukes  it  possible  to  open  up  safe  new 
ways  of  accessing  corporate  intranets 
and  the  Internet 

(Consider  four  devices  in  which  this 
type  of  security  appliance  can  be  ef¬ 
fective  in  providi^  SSL  protection:  a 
company-issued  laptop,  a  borne  nu- 
chine.  a  handheld,  and  a  public  kiosk 
or  public  wireless  networit  Each  can 
be  managed  to  limit  file  upload  and 
download  capability,  depending  on  the 
circumstances. 
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Enterprise-class  features  and 
aggressive  price  points,  so  you 
can  lower  the  cost  of  reliability. 


It's  simple,  really:  When  you  buy  commodity  hardware,  you  get 
commodity  features.  So  why  not  get  premium  features  for  the 
same  price?  With  a  line  of  servers  that  are  as  affordable  as 
they  are  powerful,  Sun  is  out  to  prove  once  again  that  you  can 
lower  costs  and  complexity  without  compromising  quality. 


Sun  has  an  entire  family  of  servers  built  to  deliver  enterprise- 
level  performance  artd  reliability  at  highly  competitive  prices. 
Which  means  that  for  the  cost  of  an  alarmingly  mediocre  Wintel 
box,  you  can  get  an  ultra-reliable  Sun  server  ready  to  take  on  your 
most  mission-critical  tasks.  From  CRM  applications  to  e-nuiil 
and  Web  serving.  Witti  this  kind  of  barn}  for  the  buck,  it%  no  wonder 
Sun  has  remained  the  UNIX*  server  leader  every  year  since  1996^ 


To  hnd  out  more  about  how  Sun  servers  can  deliver 
state-of-the-art  technology  at  state-of-the-economy  prices, 
visit  SUN.COM/WHYIIOT 


Introducing  the  SNIA  Storage  Management  initiative 

A  letter  from  SNIA  Board  Chairperson  Sheila  Childs 


while  IT  professionals  understand  the  \’alue  that  new  storage  technologies  can  contribute  to  ensuring  the 
success  of  their  business,  they  continue  to  struggle  with  issues  of  manageability,  interoperability  and  cost  that 
keep  them  from  fully  realizing  that  \'alue.  Out  of  necessity,  the  world  of  storage  management  is  changing. 

As  the  v  olume  and  value  of  data  increase,  so  do  the  requirements  to  manage  this  data  in  a  cost  effective  way. 
IT  professionals  are  no  longer  responsible  merely  for  assuring  the  availability  of  enough  capacity  and  the  recov¬ 
ery  of  data  from  backup  tapes.  Administrators  are  now  expected  to  enable  access  to  information  based  on  any 
number  of  factors  —  ranging  from  an  application's  need  for  data  according  to  time-variable  criteria,  to  remote 
replication  to  accommodate  the  repurposing  of  data,  to  recovery  of  an  environment  destroyed  by  severe  circum 
stances.  Storage  hardware  and  software  vendors  are  anxious  to  deliver  value-added  functionality  to  assist  with 
these  business  objectives,  but  without  tools  to  perform  appropriate  management  of  the  storage  infrastructure, 
customers  are  struggling  with  how  to  achieve  their  objectives. 

As  you’ll  see  in  the  foUowii^  pages,  the  Storage  Networking  Industry  Association  (SNIA)  understands  this 
problem  and  is  addressing  the  needs  of  IT  professionals  with  respect  to  the  management  of  their  stor^e  envi¬ 
ronment.  Good  work  is  under  way  to  deliver  standards  that  will  enable  vendors  to  bring  interoperable  hard¬ 
ware  and  software  products  to  market  in  ways  that  take  advantage  of  lower-cost  development  practices.  This 
will  enable  the  development  of  better  management  tools  focused  on  high-level  functionality. 

The  Storage  Management  Initiative  (SMI)  detailed  in  this  White  Paper  pulls  together  an  extraordinary 
number  of  resources  led  by  dedicated  teams  of  engineers,  product  managers,  marketing  representatives  and  oth  - 
ers,  who  are  singularly  focused  on  delivering  a  unified  management  interface  for  storage.  As  you  read  through 
these  pages,  you  will  see  details  of  the  SMI  Specification  (based  on  CIM/WBEM).  you  will  learn  about  interop¬ 
erability  conformance  test  initiatives  and  you  will  read  about  strong  education  and  support  programs  under 
way  to  deliver  on  this  groundbreaking  effort. 

While  change  is  difficult  and  success  doesn’t  happen  overnight,  the  efforts  of  the  individuals  and  companies 
involved  in  the  Storage  Management  Initiative  are  an  almost  certain  guarantee  of  success.  I  hope  these  pages 
will  generate  for  you  the  same  level  of  excitement  I  feel  when  I  envision  the  changes  to  come,  as  the  SNIA  SMI 
works  toward  the  end  result  of  interoperable,  manageable  storage  networks  delivered  at  a  total  cost  of  owner¬ 
ship  that  companies  can  live  with. 

We  are  pleased  to  present  to  you  the  SNIA  Storage  Management  Initiative. 

Warm  Regards, 

Sheila  Childs 

Chairperson,  SNIA  Board  of  Directors 
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Emerging  Standards:  Easing  the 
Complexity  of  Managing  Storage 

shelter  from  the  Storm 


The  growth  of  information  technology  we  are 
experiencing  is  a  storm  requiring  IT  end 
users  and  vendors  alike  to  seek  shelter  in 
order  to  continue  productive  business  ven¬ 
tures.  The  rapid  rise  of  data  storage  brought  on  by  busi¬ 
ness  expansion  and  the  growth  of  the  Internet  caused  a 
need  for  storage  services  that  was  unimaginable  in  the 
early  1990s,  when  storage  systems  were  directly  connected 
to  servers  as  "peripherals”  and  most  eyes  were  focused  on 
the  need  for  more  computing  power. 


The  development  of  the  storage 
area  network  to  solve  the  explosive 
growth  of  data  and  the  need  to  turn 
data  into  information  through  careful 
man^ment  have  resulted  in  a  tech- 
noiogy  that  offers  more  efficient  use 
of  storage  resources.  Through  a 
SAN,  IT  departments  can  offer 
shared  connectivity  between 
servers  and  their  applications  to  mul¬ 
tiple  storage  arrays,  wdrich  makes  for 
better  utilization  of  resources 
throi^  a  superior  access  model. 

While  the  storage  network 
addresses  the  utilization  problem, 
the  intercoimectivity  of  devices  is 
limited  by  the  ability  devices  to 
interoperate  with  each  other  and, 
more  importantly,  to  be  managed  effi¬ 


ciently.  In  today’s  world,  each  device 
requires  its  own  management  appli¬ 
cation.  because  until  recently  there 
has  been  limited  cooperation 
between  device  vendors  (all  of  which 
claim  to  be  in  the  software  manage¬ 
ment  business)  looking  for  a  piece  of 
the  management  marketplace. 

TlKIM)t-S0-peffKtSt0(1ll 

Today,  system  management  con¬ 
sists  of  management  “stovepipes”  — 
processor  complex  management,  net¬ 
work  management,  database  manage¬ 
ment.  a^^licadcm  management  and 
stor^  management  —  that  are  min¬ 
imally  integrated  or  not  integrated  at 
all.  IT  departments  must  train  admin¬ 
istrators  who  are  skilled  in  multiple 


independent  management  applica¬ 
tions  arid,  worse,  in  the  interrelation¬ 
ships  of  these  components. 

Efficiently  managing  a  multi-ven¬ 
dor  storage  network  as  an  integrated 
fabric  is  a  key  concern  for  IT  admin¬ 
istrators  and  integrators  alike.  Today, 
the  management  of  a  multi-vendor 
storage  network  requires  the  use  of  a 
suite  of  uncoordinated  applications 
from  multiple  vendors.  And  these 
applications  are  limited  in  the 
required  functionality,  distribution, 
security  and  reliability  to  ensure 
increased  business  efficiency. 

Attempts  to  solve  this  interoper¬ 
ability  problem  through  the  private 
exchange  of  management  application 
programming  interfaces  (APIs)  have 
met  with  limited  success  for  vendors 
and.  moreover,  have  brought  unpre¬ 
dictable  results  to  customers  tryii^ 
to  select  management  applications 
from  multiple  suppliers. 

The  SAN  promises  to  make  the 
use  of  storage  resources  more  effi¬ 
cient.  but  ultimately,  the  high  cost  of 
mam^ement  deters  end  users  from 
aggressively  emfxacing  storage  net- 
workir^  technology. 

Users  sfwak  out 

Ironically,  in  the  rough  seas 
interoperable  storage  management 
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confusion,  vendors  have  represented 
the  SAN  as  a  cloud  in  order  to 
abstract  the  intercormectivity  from 
the  storage  devices  and  servers  the 
storage  netwoilt  served  Perhaps  the 
cloud  signaled  bad  weather  ahead,  or 
perhaps  because  of  early  attempts  by 
end  users  to  iiuegrate  SAN  intercon- 
nectivity  by  themselves,  SAN  adop- 
don  rates  have  been  commensurate 
with  the  ability  of  the  SAN  to  address 
management  issues. 

"Users  are  voting  with  their 
requests  for  proposals  [RPPs],"  s^ 
John  Webster,  Senior  Analyst  and 
Founder  of  the  t)ata  Mobility  Group. 
‘IT  administrators  are  now  requir¬ 
ing  standard  mterc^)erability  amcmg 
storage  management  applic^ons  as 
a  solution  to  the  mana^ment  prob¬ 
lem,  and  are  doii^  so  through  the 
RFP  process." 

‘Providing  storage  for  the  various 
business  initiatives  we  sup^rt  is  an 
ongoing  challei^  since  typically  we 
don’t  get  much  lead  time  on  the 
requests  for  additional  capacity."  says 
Jerome  Wendt,  storage  administrator 
for  First  Ddxa  Resources  in  Omaha. 
‘Implementing  a  SAN  to  move  the 
stcvage  c^)acity  more  easily  makes 
sense,  yet  the  tools  we  have  today  to 
mana^  the  complexity  are  larking. 
causii^  us  to  proceed  cautiously. 
With  better  device  and  applicaticxis 
integration,  we  could  put  mtxe  ci  our 
storj^  on  the  SAN." 

ncSIlUMiaiiztsstorai  relief 

In  mid'2002,  the  Storage 
Networking  Industry  Association 
(SNIA)  launched  the  Storage 
Management  Initiative  (SMI)  to  cre¬ 


ate  and  foster  the  adoption  oi  a  high- 
ly  funccuxial  open  interface  —  a  stan¬ 
dard  for  the  man^ment  ctf  storage 
networks.  The  SMI  includes  activi 
ties  in  technical  educational  mar¬ 
keting,  conference  and  interoperabil¬ 
ity  groups  within  the  SNIA.  The 
SMFs  goal  is  to  deliver  c^icn  storage 
network  management  interface  tech¬ 
nology  in  the  form  of  a  Storage 
Management  Specification.  SNIA 
members  are  devebpii^  this  SMI 
Specification  (SMl-S)  based  on 
CIM/WBEM  technologies  —  the 
Common  Information  Model  (CIM) 
and  Web-Based  Enterprise 
Mam^ement  (WBEM)  standards 
developed  by  the  Distributed 
Man^eraent  Task  Fotcc  (DMTF). 
The  SMl-S  will  standardize  the  c<xn- 
municatkm  between  suxage  devices 
and  management  applicatkms  in  the 
ston^  netwoik. 


SMI'S  is  the  foundation  hir  the 
devek^xnent  <rf  products  by  SNW 
member  companies  that  offer  end 
user  ciistomers  more  efficient  use  of 
their  storage  resources  throu^  bet¬ 
ter  interc^xrabilicy  of  storage  net 
work  components.  This  will  simi^ify 
the  complexity  of  storage  manage 
ment  for  customers  and  help  them 
achieve  service -level  targets. 

‘Implemenution  trf  the  Storage 
Management  InitiatiNc  ^xcificatkm 
as  a  unified  management  standard 
has  the  potential  to  radically  change 
the  way  the  woiid  loc4cs  at  managing 
computer  stor^e  technologies.*  says 
Sheila  Childs.  Chairperson,  SNIA 
Board  Directors.  “Storage  hard¬ 
ware  and  software  vendors  will  be 
^le  to  focus  more  on  the  value- 
added  functionality  they’d  like  to 
deliver  their  customers,  and  cus¬ 
tomers  will  be  able  to  recognize 
lower  TCO  derived  from  betttr  inter¬ 
operability  and  ma^ugeabilicy  of 
siOTJ^  necwcxks.  The  SNIA  mem¬ 
bership  has  come  together  in  ways 
not  seen  befexe  to  deliver  on  both  the 
short'  and  lot^-term  goals  estab- 
lishoi  as  part  (rf  die  SML  I  belje%’e 
that  due  to  ks  significant  resources 
arid  member  commitment,  the  SMA 
is  uniquely  posit}OD«l  to  execute  on 
this  very  inqxxtant  initiative." 

With  the  SMI  clearly  the  number 
one  {xkxity  fte  the  SNIA  in  2003.  the 
associatioo  has  received  broad  partic- 
qxuion  from  member  companies  that 
have  made  major  investments  of 
resources,  time  and  money. 
Oevelopnient  has  been  ^gressive;  the 
technical  wcxl^ioups  at  SNIA  pre¬ 
sented  Verskxi  LO  of  SMI-S  in  April 
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for  public  review  and  are  on  schedule 
CO  make  a  final  standard  specification 
available  to  be  implemented  by  ven¬ 
dors  by  the  beginning  of  the  third 
quarter  of  this  year. 

“The  SNIA  SMl-Specification  will 
restructure  the  way  the  entire  stor¬ 
age  industry  approaches  storage 
management,”  says  Roger  Reich,  who 
serves  as  Chairman  of  the  SNIA  SMI 
Ccmimittee.  “Component  developers 
will  no  longer  have  to  ‘push’  their 
unique  interface  functionality  at 
applications  developers.  Moreover, 
management  application  developers 
will  no  longer  have  to  integrate 
incompatible  feature-poor  interfaces 
into  their  products.  Instead,  the 
industry  will  be  better  able  to  con¬ 
centrate  on  developing  h^er  order 
features  chat  have  maximum  value 


addressing  the  management  con¬ 
cerns  for  end  users.” 

The  SNIA  goal  for  SMI-S  is  that 
all  new  storage  networking  products 
(arrays,  switches,  extenders,  appli¬ 
ances,  libraries,  management  soft¬ 
ware.  etc.)  from  SNIA  member  com¬ 
panies  that  produce  network  storage 
clients  and  servers  will  use  the  SMI 
interface  for  mana^ment  after  2005. 

The  SNIA  is  developir^  education 
and  compliance  testing  programs  as 
well  as  “plugfescs"  to  assist  SNIA 
members  in  creatir^  products  that 
conform  to  the  specification. 
Through  the  Storage  Management 
Forum  (SMF),  w^uch  is  the  outward 
facing  organization  coordinadr^  all 
of  the  markecii^  activities  for  the 
SMI,  a  number  of  these  activities  are 
being  delivered,  such  as  collecting 


rr/end  users'  requirements  and  pro¬ 
viding  information  to  the  public  in 
support  members  that  use  this 
standard  in  their  products.  In  parallel 
with  the  specification  develc^ment, 
additional  important  SMF-spon- 
sored  activities  test  and  support  the 
rich  functionality  of  the  SMl-S  stan¬ 
dardization  effort. 

ICTP.  To  avoid  potential  ambigu¬ 
ities  that  arise  from  writing  to  a  spec¬ 
ification,  the  Interoperability 
Conformance  Testing  Program 
(ICTP)  provides  SMI-S  devel<:^)ers  a 
verification  program  to  validate 
efforts  by  storage  vendws  to  develop 
products  based  on  the  ^)ecification 
standard  The  ability  of  products  to 
pass  ICTP  conformance  cestir^  will 
assure  users  that  vendors  are  serious 
about  management  interoperability. 


RpreL 

SNIA  SMI-S  VI  .0  CIM-SAN-2  Tested  Interoperabilitv  Matrix 


HetM: 

SMI-$lfWrapMMKyiM<«llMtilH(«MitMor4/11/3003  FM  SI*.S  awaAN-2 dM «MI M MMM Imn SNIA rtw »3CV2003 
CIU^  2  «  •  SMA  plug  IM  fv  (ln«pwW«  Of  JwuMy  2003  Junt  2003  hoMM  M  •«  SMA  Tachnolow  Cwtor 

CM-SAN  3  a  ■  schaduM  SNtA  ship  tMi  tor  SMI-S  VI. QA/1.1  IMUTM  ««  SNIA  rrantar  pnMuCM  July  2003  nougri  OMWrev  2003 

Source:  SNIA 
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tor  public  a-vic\\  and  aa  on  'chcdulc 
to  make  a  final  standard  specification 
a\aitahle  to  be'  implemented  by  ven 
dors  by  the  beginning  of  the  third 
quarter  of  this  year 

"The  SXIA  SMI  Specification  will 
astructua  the  way  the  entire  stor 
age  industry  approaches  storage 
management,"  says  Roger  Reich,  w  ho 
scTves  as  Chairman  of  the  SNIA  SMI 
Committee  “Component  dewlopers 
will  no  longer  haw  to  ‘push'  their 
unique  interface  functionality  at 
applications  dewlopers  Moreover, 
management  application  developers 
will  no  longer  have  to  integrate 
incompatible  feature  p4'H>r  interfaces 
into  their  products.  Instead,  the 
industry  will  be  better  able  to  eon 
eentrate  on  developing  higher  order 
featua's  that  haw  ma.\imum  \alue 


addressing  the  management  con 
cerns  tor  end  users." 

The  S\!A  goal  for  SMI  S  is  that 
all  new  storage  networking  pnxlucts 
(arrays,  switches,  e.xtenders.  appli 
ances,  libraries,  management  solt 
ware,  etc  )  from  SNl.A  memK'r  com 
panics  th.it  produce  network  stor.ige 
clients  and  serwTs  will  use  the  SMI 
intcTlace  for  management  .ifter 

The  SNIA  is  developing  education 
and  compii.tnce  testing  programs  as 
well  as  "plugfests"  to  assist  SNl.A 
members  in  creating  pnxiucts  that 
conform  to  the  specification. 
Through  the  Stor.ige  Management 
Forum  (SMF),  which  is  the  outward 
facing  organization  cixirdinating  all 
of  the  marketing  activities  for  the 
SMI.  a  number  of  these  .ictivitics  arc- 
being  delivered,  such  as  collecting 


IT  end  users'  requirements  and  pro 
viding  information  to  the  public  in 
suppiirt  of  members  that  use  this 
standard  in  their  pn-Klucts.  In  parallel 
with  the  specification  development, 
.idditional  important  SMF  spon 
sored  activities  test  and  support  the 
rich  (unetion.i]ity  of  the  SMI  S  stan 
dardiz.ition  elfort 

ICTP  To  .ivoid  potential  ambigu 
ities  that  arise  from  w  riting  to  a  spec 
ification,  the  Interoperability 
Conformance  Testing  Program 
(ICTP)  provides  SMI  S  dewlopers  a 
verification  program  to  validate 
efforts  b\-  storage  \endors  to  dewlop 
pnxlucts  based  on  the  spc-cifieation 
standard.  The  ability  of  pnxlucts  to 
pass  ICTP  conlormance  testing  will 
assure  users  that  vendors  are  serious 
about  management  intentperability 
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Clearing  skies  for  storage 
management  applications 
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CIM'SAN.  The  CIM  SAN-2 
E)evelopers  Demonstration  is  a  six- 
month  "laboratory*  program  that 
brings  storage  device  manubctnrers 
anda^licadon  management  vendors 
together  in  a  series  of  face-to-face 
pli^ests  to  test  the  implementation 
of  the  SMI'S  interface  in  a  real-wwld 
SAN  fabric  (Figure  I).  The 
CIM/WBEM-managed  CIM-SAN  is 
the  first  permanent,  “open"  multi- 
vendor  development  and  demonstra¬ 
tion  environment  for  acceleratir^  the 
implementation  of  SMI-S  into  prod¬ 
ucts.  CIM-SAN  is  a  broad  program 
designed  to: 

•  Ease  the  implementation  of 
SMI'S  in  vendor  products. 

•  Reduce  multi-vendor  integra¬ 
tion  costs  (a  large  multi-vendor  stor¬ 
age  network  is  maintained  at  the 
SNIA  Technology  Center  and  avail¬ 
able  over  the  Internet  for  man^e- 
menc  application  developers). 

•  Build  seamless  interoperability 
between  products. 

•  Provide  recognition  to  compa¬ 
nies  that  contribute  to  the  SMI. 

•  Forward  the  development  of 
the  CIMAVBEM-based  SMI-S. 

TIkSNUSNI-S 

SMI'S  is  interuled  to  be  the  unify¬ 
ing  factOT  between  the  objects  that 
must  be  maiugcd  in  a  storage  net¬ 
work  arvd  the  tools  used  to  maiu^ 
them.  The  goal  of  the  Storage 
Management  Initiative  is  to  move  the 
storage  industry  to  universal  adop¬ 
tion  of  SMI'S  so  that  ultimately,  all 
stor^  network  components  will  be 
implemented  with  native  self- 
describir^  interfaces. 


With  all  components  presentir^  a 
common  interface,  implementing 
management  functionality  will 
become  simpler,  less  costly  and  more 
robust  for  companies  that  are  devel¬ 
oping  SAN  management  and  storage 
resource  management  applications. 
Additionally,  stable  management 
interfaces  will  encourage  direct  man¬ 
agement  of  network  storage 
resources  by  appUcations  such  as  file 
systems  and  database  managers. 

Clearing  skies  for  storage 
management  aivlications 

When  broadly  adopted,  SMI-S 
will  solve  storage  management  prob¬ 
lems  by  replacing  today's  multiple 
disparate  managed  object  models, 
protocols  and  transports  with  com¬ 
mon  models  for  each  object  class  and 
a  common  protocol  for  management 


interactions.  Management  appUca- 
cion  developers  will  be  able  to  sup¬ 
port  devices  from  multiple  vendors 
quickly  and  reliably  because  they 
“look  alike."  Development  and  test¬ 
ily  costs  will  drop;  time  to  market 
will  be  shorter:  end-user  satisfaction 
will  increase;  and  ultimately,  prof¬ 
itability  will  rise. 

Figure  2  illustrates  the  manage¬ 
ment  application  environment 
enabled  by  the  SMI-S  using 
CIMAVBEM  technology.  As  the  £^- 
ure  su^ests,  the  SMI-S  management 
application  environment  consists  of  a 
single  object-oriented  model  for  each 
type  of  component  in  a  stor^e  net¬ 
work.  These  models  define  common 
attributes  and  behavior  for  standard 
features.  Management  actions  are 
communicated  using  a  sii^e  man¬ 
agement  protocol  and  transport  that 
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can  be  carried  on  any  of  several  inter¬ 
connects.  Included  are  a  uniform  set 
of  discovery,  security  and  durable 
naming  services.  To  enable  multiple 
mans^ement  applications  to  coexist 
in  a  network,  SMI-S  includes  a  lock 
manager  that  can  be  used  to  prevent 
applications’  actions  from  interfering 
with  each  other. 

The  models  and  protocols  that 
make  up  the  SMI-S  environment  are 
platform-independent,  which  means 
applications  can  be  develc^jed  for  any 
platform,  and  enabling  applications 
running  on  different  platforms  can 
interoperate.  CIMAVBEM  technolo¬ 
gy  uses  a  powerful  human-  and 
machine-readable  lai^ui^  called  the 
managed  object  format  (MOF)  to 
precisely  specify  object  models. 
Compilers  can  be  developed  to  read 
MOF  files  and  automatically  generate 
data  type  definitions,  interface  stubs 
and  GUI  constructs  to  be  inserted 
into  management  applications. 

SMl-S  object  models  are  extensi¬ 
ble.  This  enables  easy  addition  of  new 
devices  and  functiorrality  to  the  mod¬ 
els  and  allows  vendor-unique  exten¬ 
sions  for  added'value  functionality. 

AtrastedsoMion 

The  result  of  this  effort  by  SNIA 
member  companies  will  be  the  devel¬ 
opment  of  products  that  offer  cus¬ 
tomers  more  efficient  use  of  their 
storage  resources  through  better 
interc^jerability.  This  will  ease  the 
complexity  of  storage  management 
for  end  users  and  their  customers  and 
will  help  them  achieve  service-level 
targets. 

Figure  3  shows  the  results  of  a 


Interoperability  is  a  key 
concern  of  end  users 
and  integrators  alike. 

IT  shops  want  to  treat 
storage  networks  as 
integration  backbones 
that  insulate  them 
from  vendor  lock-in. 

recent  storage  man^ement  require¬ 
ments  survey  (rf  Fortune  1000  com¬ 
panies  by  InfoPro. 

Clearly,  interoperability  among 
storage  network  components  sup¬ 
plied  by  multiple  vendors  is  a  key 
concern  of  end  users  and  int^ratcws. 


Users  want  to  treat  stor^e  networics 
as  multi-vendor  integration  back¬ 
bones  that  insulate  them  from  \etKlor 
lock-in,  supplier  failure  and  unrea 
sonable  pricing  practices. 

SMI-S  supplies  what  customers 
need;  a  foundation  for  management 
interoperability,  high  \alire  and  cost 
savings.  The  specification  delivers 
the  ability  for  any  conformir^  devices 
in  the  storage  network  to  be  discov¬ 
ered  and  controlled  regardless  of 
manufacturer.  Applications  utilizing 
SMI'S  will  mana^  a  larger  pool  of 
devices  supplied  by  virtually  all 
industry  leaders. 

The  results  <rf  this  endea\x)r  c^er 
the  ability  to  control  the  accelerating 
costs  of  storage  management  by 
reducing  the  need  to  have  separate 
management  products  for  each 
device  in  the  SAN.  Interoperability 
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will  change  the  focus  of  day-to-day 
operations  from  struggling  with 
issues  of  device  connectivity  to  focus¬ 
ing  on  higher  order  management, 
such  as  policy-based  productivity. 

Accdentiiig  Uk  pace 
ofSMI-Sdevelopiiieirt 

Critics  of  “the  standards 
approach’  to  solving  storage  interface 
problems  point  to  the  slow  pace  at 
which  most  standards  organizations 
move  and  the  ambiguity  that  is  some¬ 
times  created  when  developing  a 
specification  standard.  The  early 
SNIA  effort  —  applying 
CIM/WBEM  technology  to  storage 
—  may  have  fallen  subject  to  this 
criticism,  but  with  SMI.  the  SNIA  is 
changing  the  face  of  the  storage 
industry. 

One  factor  contributing  to  the 
intensity  of  the  SMl-S  development 
effort  is  the  CIM-SAN  demonstra 
tion.  The  ^gressive  CIM-SAN  devel¬ 
opment  demonstration  has  evolved 
from  a  once-a  year  event  held  at 
Storage  Networking  World  in  the 
late  '905  to  a  reference  architecture 
that  is  installed  at  the  SNIA 
Technology  Center  and  is  driven  by 
four  face-to-face  plugfests  held  dur¬ 
ing  the  first  six  months  of  2003, 
including  the  public  demonstration 
that  takes  place  at  Storage 
Networking  World  Conferences. 

CIM-SAN-2  is  a  heterogeneous 
multi-million-doUar  SAN  fabric  of 
devices  supplied  by  industry  vendors 
consisting  of  products  that  are 
instrumented  using  the  latest  code 
fragments  (profiles)  erf  the  specifica¬ 
tion  under  development.  Storage 


management  vendors  bring  applica 
tions  (clients)  that  consume 
CIM/WBEM  providers.  Lessons 
learned  are  then  immediately  fun- 
neled  into  the  specification  develop¬ 
ment  process. 

ClM'SAN'l  was  held  at  the 
October  2002  Storage  Networking 
World  following  two  plugfests  in 
August  and  September  at  which  ven 
dors  demonstrated  the  ability  to 
report  on  array  and  switch  configu¬ 


rations.  and  to  report  on  tape  library 
and  media  information. 

At  the  April  2003  Storage 
Networking  World  conference,  ven¬ 
dors  show'ed  the  next  stage  of  devel¬ 
opment.  which  included  all  CIM- 
SAN-1  functionality,  plus  the  active 
management  functions  associated 
with  the  following; 

•  Indications:  a  way  for  manage 
ment  applications  to  become  aw’are 
of  changes  in  the  operating  state  of 
devices,  such  as  problems  with  a 


component,  temperature  changes, 
alarms,  and  so  forth. 

•  Array-volume  creation:  the  cre¬ 
ation  of  logical  volumes  in  an  array 
and  making  it  available  to  a  host. 

•  Array  LUN  masking:  control¬ 
ling  the  visibility  of  logical  volumes 
to  hosts  (a  form  of  security). 

•  Array  snapshot  and  mirror 
control  creating,  splitting  and  syn¬ 
chronizing  snapshots  and  mirrors. 

•  Fabric  topology  and  zoning 
discovery;  discovering  the  path 
between  hosts,  switches  and  arrays, 
as  w'ell  as  reporting  on  and  configur¬ 
ing  zones. 

CmdusiM:  A  pnHnjsing  forecast 
for  storage  namgeneot 

With  a  common  interface,  the 
management  of  network  storage  will 
become  simpler  and  less  costly. 
Ultimately,  faced  with  reduced  costs 
for  management,  end  users  will  be 
able  to  adopt  storage  networking 
technology  faster  and  build  larger, 
more  powerful  solutions  to  address 
their  business  needs. 

The  storm  is  not  over,  but  storage 
vendors  are  working  together  to 
address  the  storage  device  and  man¬ 
agement  interoperability  problem 
with  a  common  standard.  The  SNIA 
SMI-S  is  a  forecast  that  calmer 
weather  is  ahead,  and  that  no  matter 
how  hard  the  wind  blows,  end  users 
will  have  the  tools  to  master  their 
growth  with  confidence  that  storage 
infrastructure  concerns  can  become 
subordinate  to  running  a  profitable 
business.  That  is  good  news  in  times 
in  which  clear  skies  are  sometimes 
hard  to  predict.^ 


Computefworid  Custom  Publishing  /  EMEMGING  STANDAltDS:  EASING  THE  COMKEXITY  Of  MANAGING  STORAGE 


•2 


To  manage  complexity,  you’ve  got  to  outsmart  it  EMC  Automated  Networked  Storage’’’^  delivers 
the  software  that  automates  management  of  your  multi-vendor  storage  Infrastructure,  including 
the  most  enor-prone  tasks  such  as  monitoring  and  provisioning.  Now  you  can  gain  a  unified, 
end-to-end  view  of  your  entire  environment  Define  your  service  levels.  And  run  an  agile,  active 
infrastructure  that  helps  the  business  pounce  on  opportunity. 

See  how  other  companies  are  using  EMC  Automated  Networked  Storage  to  manage  more 
information  wth  less  effort  at  www.EMCxom. 


OUR  SOFTWARE  GIVES  YOU  SOME 
VERY  SMART  CHOICES. 


Did  YOU  knowthatsomeofour 

BEST  STORAGE  PRODUCTS  COME 
ON  A  DIFFERENT  KIND  OF  DISK? 


EMC' and  EMC  are  registered  trademarte  and  EMC  AuK)nu(edNeeMorked  Storage  arKliMtereinforTnaboniM  are  trademarks  of  EMC  Coiporatna  ®2003  EMC  Corporation.  Al  rights  reserved. 


wwwxomputerwor1d.com 
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For  example,  upload  capability 
could  be  restrict^  to  machines  that 
have  current  virus  controls  installed. 
Different  levels  of  access  for  each  lo¬ 
cation  for  a  single  user  can  be  defined 
and  automatically  set  using  SSL  The 
security  appliance,  sitting  behind  the 
firewall,  is  rules-based.  so  different 
user  groups  can  be  configured  for  ac¬ 
cess.  In  addition,  it's  possible  to  ratch¬ 
et  up  from  64-bit  encryption  to  L2S^it. 
depending  on  the  sensitivity  of  the 
documents  or  pages.  Data  isn't  cached 
on  the  browser,  so  all  the  data  remains 
within  your  security  fortress.  And 
there's  a  fairty  easy  interface  with 
LDAP  directories,  making  it  possible 
to  overiay  access  rules  on  top  of  exist¬ 
ing  rights  and  permissions. 

Sure,  IPsec  is  still  necessary  for 
power  users  accessing  multiple  plat¬ 
forms.  But  consider  that,  with  no 
client  to  deploy  and  no  VPN.  SSL 
costs  less,  and  because  you're  using 
standards-based  technology,  mainte¬ 
nance  headaches  are  reduced.  Fd  say 
SSL  looks  good  enough  to  comple¬ 
ment  IPsec.  It's  one  answer  to  sectir- 
ing  access  at  a  reasonable  cost  f 

MICHAEL  GARTENBERG 

Microsoft 
Can’t  Stifle 
Linux 

CREATING  an  atmos¬ 
phere  that  fosters  com¬ 
petition  is  part  of  Mi¬ 
crosoft’s  culture.  Indeed,  the 
company  has  long  champi¬ 
oned  an  us-v$.-tbem  mentality  that 
serves  to  deflect  attention  frera  its  of¬ 
ten  dominant  positioo  in  the  market¬ 
place  while  k^ing  internal  energy 
high  and  preventing  complacency. 

Competitors  that  Microsoft  has 
identifled  and  rallied  successfully 
against  include  AOL.  Apple.  IBM,  Lo¬ 
tus.  Boriand.  NoveU.  3Com  and,  of 
course,  Netscape.  Recently.  CEO  Steve 
Ballmer,  in  a  5,600-wDrd  ’’leaked” 
memo,  positioned  Linux  as  Microsoft’s 
enemy  do  jour.  Is  Linux  really  a  threat 
to  Microsoft?  And  bow  should  busi¬ 
ness  users  react  to  the  news  that  Mi¬ 
crosoft  paid  SCO  to  settle  what  could 
have  been  a  potential  lawsuit  over  Lin¬ 
ux  intellectu^  property? 

In  the  four  main  areas  that  concern 
business  users  ~  handhelds  and  em¬ 
bedded  computing,  desktops,  low-  and 
midrange  servers,  and  high-end  serv¬ 


ers  —  Microsoft  is  under 
no  immediate  threat  from 
Linux 

Microsoft  controls  the 
desktop  and  faces  no  chal¬ 
lenges  in  that  market. 

While  Microsoft  isn’t 
dominant  in  the  handheld 
market,  it  has  more  to  fear 
from  Palm  and  Symbian 
than  it  does  from  Linux. 

On  the  high  end.  both 
Microsoft  and  Linux  face 
competition  from  tradition¬ 
al  Unix  systems.  Linux  Is  a 
threat  to  Microsoft  only  in 
the  low-  and  midrange 
server  market,  where  the  technology 
is  proven  and  more  easily  substi¬ 
tutable.  But  this  alone  doesn't  repre¬ 
sent  enough  of  a  threat  to  warrant  the 
attention  Microsoft  has  given  Linux 

The  SCO  claims,  however,  cast  a 
shadow  over  the  entire  open-source 
model  of  licensing  software,  and  this 
model  of  free  software,  adopted  by 
business  users,  is  what  Microsoft  fears 
far  more  than  Linux.  Microsoft  has 


long  maintained  that  the 
GNU  General  Public  Li¬ 
cense  model  is  flawed,  and 
so  commercial  software  li¬ 
censes  are  the  best  way  to 
deliver  software  that  offers 
the  most  customer  beneflL 
By  settling  with  SCO. 
Microsoft  deals  with  a  for¬ 
mer  adversary  and  beads 
off  another  potential  law¬ 
suit  At  the  same  time, 
even  if  not  intentionally. 
Microsoft  helps  to  further 
the  fear,  uncertainly  and 
doubt  that  surrounds 
open-source  software  and 
Linux  in  particular. 

Business  users,  however,  need  to 
carefully  look  at  the  events.  Microsoft 
hasn’t  publicly  suted  that  SCO's 
claims  are  valid,  and  SCO  has  yet  to 
prove  in  court  its  claims  regarding 
ownership  of  the  Unix  code  that  might 
be  contained  in  Linux  Those  claims 
are  being  challenged  by  NoveU  and 
others.  The  ensuing  uncertainty  over 
who  owns  the  code  has  resulted  in 


FUD  about  the  future  of  the  open- 
source  operating  system  and  an  op¬ 
portunity  for  Microsoft  to  extol  the 
virtues  of  its  license  models.  Business 
users  need  to  be  cautious  about  strate¬ 
gic  Linux  adoption  from  a  legal  per¬ 
spective.  but  they  shouldn't  allow  the 
legal  actions  to  hamper  longer-rangc 
technology  architecture  issues. 

The  bottom  line  for  the  industry 
and  users  is  that  Linux  wiU  coexist 
with  Windows  for  many  businesses. 
The  value  proposition  of  using  Linux 
as  a  low-end  Web  or  e-mail  server,  as 
well  as  for  other  traditional  tasks  such 
as  file  and  print  serving,  is  too  alluring 
for  many  IT  organizations.  Likewise, 
the  dominance  of  Windows  at  the 
desktop  isn't  likely  to  change.  Once 
again.  IT  shops  will  find  that  they  are 
best  served  by  ignoring  the  hype  and 
FUD  on  both  sides.  Instead,  pursue  a 
proper  suitabUity-to-task  model.  I 
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Who's  to  Blame 

The  IT  HcaAPROJECTS  (hai 
crashed  and  burned  during  the 
1990s  often  werenl  proposed  by  IT 
departments  end  were  accepted  by 
them  only  «Mth  the  greatest  reluc¬ 
tance  rCredUllty  Chalangad.  ’ 
OiacIdJnk  38473}.  Not  untypicaly. 
a  vendor  or  consuKant  would  mete 
a  proposal  tor  an  ffprojeetto 
someone  one  or  two  levels  above  IT 
wtw  (acted  the  experience  to  prop¬ 
erty  evakM  the  proposal  If  the 
head  of  ft  expressed  rasaivaeons. 
he  was  simply  told  to  shut  up.  A  top 
manager  who  permis  hmseN  to  b^ 
coma  mesmerized  by  (he  prospect 
of  bacotiing  teown  as  a  ptton  of 
the  technological  arts  and  who  Is 
therebyindu^t09)on6orft-oon- 
cahrad  and  bady  managed  ff  prot¬ 
ects  is  the  parson  who  ahoiM  be 
saarchng  tor  ways  to  repair  his 
damaged  cradbity. 

LoyW.Rtz 

Boston.  lo>^ftz@ya/ioacDm 


UntixVM  Prevail 

I  NNEIBHTOIIUI 'Shields  Up. 
Urin'IOuicMJnk  386481  FVlih 
cia  Keefe  said  the  teal  question  is 
aftat  the  UniB  camp  wH  da  Wei  in 
the  unMy  event  that  SCO's  lawsuit 


has  any  substance.  I  can  sae  the 
Linux  developer  communSy's  re¬ 
sponse  alraady- Before  the  case  can 
even  reach  trial  they  wi  ecotf  every 
Ine  of  Lina  code  arid  leptoce  the 
oftendngoneswilhnewinplenien- 
tahons  of  the  pubic  spedfeabons 
thatarenotbofidbyanyMelectU' 
al  property  dam.  Whatover  hap¬ 
pens.  Linux  wi  end  up  the  vwnner 
Hobart  Haneri 

Thnidod  and 

Tobago,  robert@digi’4ata.ccm 


Misguided  Move 

IBEUEVEacOtMOVEisams- 
guided  attempi  on  the  part  of  its 
managementtotwstlBM'sarmun- 
tt  I  urwdngly  rnates  e  buyout  offer 
-and  I  botow  that  they  have  gross- 
ly  miscalaiaiad  [Tim  Outraged 
as  SCO  States  Lnux  Legal  Cbm* 
OeckUnk  38514).  The  U.S.  govern 
ment  once  look  on  IBM  in  8  tegal 
duelthathadtobeabandoned' 
because  the  ILS.  government  r«t 
out  of  money  before  IBM  didi  Does 
anyone  reatyfaeteve  that  SCO 
wodd  be  a  more  formidable  toe 
Iheit  the  U.S.  govarTwrient?  I  would 
also  add,  having  been  a  Unix  kernel 
programmer  since  W73.  that  SCO's 
dam  that  Linux  is  geneticaly  de¬ 
rived  from  Urn  is  not  defensible. 


SCO  wi  heve  Ns  day  in  coift  but  a 
wibeadurtday. 

AkmaiKhan 

Vier  presidenr  qf  cngiMvririg, 
Linuxean  fnc.  Son  Fnancisco 


Extinct  PossNNiity 

SOmHARE  OEVELOftMBIT  n 

theU&exlvicibytrte-2006? 
So  predicts  Jon  C.  Rot  at  the  May 
19  resue  of  CbrrpjMneortf  pTIw 

Next  Chapter.'  QuckUnk  38055). 
This  tevelahon  comes  |U5l  ai  tine.  I 
asl  received  my  ranewM  nobce  for 
your  magazine,  k  looks  Nte  I  won1 
have  to  renew.  That's  a  good  thing, 
because  I  wi  need  the  money. 

Wito  102  iniion  people  out  of  work 
over  the  next  three  years,  k  wi  be 
naarfy  inpossiiie  to  bid  a  lob. 
Janas  Bel 
ChaiSooe,  N.C 


Lagisiative  Worries 

Thanks  TO  MTIttClA  HBFE  lor 
yet  another  aMerasting  edkonal 
nr  Supertwroea' QuickLjnk 
38949).  Howenr.  besrtes  HMA. 
a  drecussran  of  iegrelation  affeciino 
and  controiriQ  IT  operations  should 
also  mdudeUCITA  DMCA.  Sttow 
DMCA.  NETAd.  TMe  T7  of  the  U5. 
Code  and  Sartienes-Oiley.  I  know: 


Lots  to  cover  and  hde  space. 

INfeallhelntenialionalAssoQr 
bon  of  tnformabon  Technology  As¬ 
set  Managers  haw  found  that  the 
vest  matonty  of  fl  personnel  reed 
to  legrebbon  i)  a  distresBnglv 
head  ii  the  qroirt  manner,  al¬ 
though  management  trusts  IT  to  be 
aware  of  these  resues  and  to  ad 
upon  them  Only  through  the  car^ 
stant  proddxig  of  wnlars  sudi  as 
Keefe  wN  we  begn  to  move  for¬ 
ward  VI  educahno  the  IT  cormuMy 
legardng  the  need  to  pay  aflenbon 
to  lepBlabon  and  ad  to  proted  the 
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AJcroaOlua 

pfostowAoiloicanLorg 

COMPUTBnraitU)  welcomes 
comment  from  Ns  readers.  Letlirs 
wNH  be  edked  for  brevity  and  danly. 
They  shoiid  be  adikessad  to  Jamie 
tenets  edkor.  Cornpulerwortd. 
PO  Ba  9171 500  QU  Comecbcui 
Path.  Framingham.  Mass  01701 
Fax  (508)  9794843. 

E-mat  teBBrs#comoutotwcirkl.com 
Indude  an  address  and  phone  num¬ 
ber  for  vnmedalB  ^rAcebon 
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SAS*  is  all  you  need  to  know. 


Only  SAS  provides  a  high-impact,  lew-risk  way 
to  achieve  intdligmt  data  war^ousing.  You  can 
extract,  transform  and  load  data  fixnn  any  source, 
across  any  platform,  while  assuring  quality. 
Sin^lify  the  wsy  you  create  and  customize  reports. 
And  deliver  a  shared  version  of  the  truth.  To  find  out 
how  top  companies  reap  bottom-line  rewards  with 
SAS  software — by  leveraging  the  value  of  data 
from  corporate  systems,  e-business  channels,  the 
supply  chain  and  beyond — visit  us  on  the  Web  or  call 
toll  free  1  866  270  5727. 


www.sas.com/warehouse 
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TTte  Right  Skills 
At  the  Right  Time 

Woricforce  management  software 
combines  the  science  of  predicting 
call  center  volume  and  the  art  of 
scheduling  staffers  with  the  right 
skills  for  the  times  they'll  be 
needed  the  most.  Pige36 


Ibols 


SECURITY  MANAGER'S  JOURNAL 

IT  Security  Confronts 
New  Legal  Liabilities 

New  privacy  laws  and  security 
threats  prompt  Mathias  Thurman  to 
double-check  his  company's  liability 
policy,  hoping  to  save  himself  from 
headaches  later.  Page  38 


OPINION 

Coping  With  Infoglut 

Companies  are  being  buried  in 
unstructured  data,  mostly  from 
the  Internet.  There's  an  urgent 
need  for  technologies  that  can 
help  manage  and  use  that  data. 
sa)'S  Tommy  Peterson.  Page  40 


Business-process 
management 
software  aims  to 
make  better  use  of 
underperforming 
enterprise  systems. 
By  Robert  L. 
S^eier 

HERE'S  GOOD  NEWS  for 
CIOs  lookup  to  do 
more  with  less.  Busi¬ 
ness-process  manage¬ 
ment  (BPM)  software 
can  pay  for  itself 

within  a  year  or  two  by  linking  expen¬ 
sive  legacy  applications  to  new.  more 
streamlined  workflows,  customers  say. 

With  BPM,  “you  can  get  to  the 
point  where  you  can  see.  on  a 
second-by-second  basis,  what’s 
happening  in  your  business  and 
where  in  the  business  are  the  holdups 
and  where  process  improvement  [is 
needed],"  says  Dean  Pipes,  an  integra¬ 
tion  architect  at  The  Toro  Co.  in 
Bloomington,  Minn.  The  yard  equip¬ 
ment  manufacturer  uses  a  BPM  system 
based  on  Vitria  Technology  lnc.'s  Busi- 
nessWare  to  pool  its  purchases  from 
vendors  to  negotiate  volume  discounts. 

Shippers  are  turning  to  BPM  “to 
lower  costs  and  to  leverage  the  invest¬ 
ment  they've  nude  in  their  ERP  sys- 


FOR 


terns."  says  Ted  Barnicoat.  CIO  at 
trucking  company  Trimac  Corp.  in 
Calgary.  Alberta.  He  expects  a  return 
on  his  SS00.000  BPM  investment  with¬ 
in  two  years  through  reduced  paper¬ 
work  and  additional  business  from 
customers  who  find  Trimac’s  BPM- 
based  ordering  system  easier  to  use 
than  those  of  competitors. 

BPM  requires  a  flexible  application 
architecture  that  can  accommodate 
new  applications  as  needs  change.  It 
also  requires  a  tool  with  the  right  mix 
of  modeling,  code-generation,  work¬ 
flow  and  monitoring  capabilities.  Vet¬ 
erans  recommend  that  companies  start 
slowly,  allowii^  enough  time  to  under¬ 
stand  existii^  workflows  and  train 
workers  to  use  BPM  systems. 

BPM  is  "friendlier"  than  implemen¬ 
tations  of  other  major  software  pack¬ 
ages  such  as  ERP.  says  analyst  Eric 
Austvold  at  Boston-based  AMR 
Research  Inc.  If  a  business 
process  needs  to  be  changed 
after  it's  deployed,  he  says.  Tou 
don’t  have  to  go  back  to  a  huge  IT  or¬ 
ganization  to  rewrite  a  whole  bunch  of 
code.  It’s  usually  minor  tweaks  to  the 
process  model." 

BPM  Basks 

BPM  software  allows  customers  to 
graphically  map  business  processes, 
such  as  issuing  or  collecting  a  bill; 
transform  that  visual  map  into  an  ap¬ 
plication  or  set  o^  applications:  and 
manage  the  electronic  workflow  to 
monitor  that  the  work  gets  done  and 
allow  changes  to  the  workflow.  The 
software  is  offered  by  a  variety  of  ven¬ 
dors,  ranging  from  makers  of  tradition¬ 
al  enterprise  application  integration 
software  to  business  application  sup¬ 
pliers  and  “pure-play"  BPM  vendors. 

Reston.  Va. -based  Nil  Holdings  (for¬ 
merly  Nextel  International)  two  years 
ago  began  to  integrate  applications 
such  as  finance  and  billing  to  eliminate 
the  costly  and  error-prone  practice  of 
entering  data  multiple  times.  The 
wireless  communications  company 
chose  Plano,  Texas-based  Fuego  Inc.'s 
namesake  BPM  package  based  on  the 
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Sample  BPM  Vendors 


r  PRODUCT  1 

AprtaoCorp. 

Long  Beac^.  CaM 

RaiNet  -  f^ovides  way  dstaM  process  irifoiTnaton  hv  iridu^^ 
rranufadtftrg  customers,  cornpany  say^ 

www,aprieoxom 

Riagolnc. 

ftano  leus 

Fuago  -  Has  about  30  ixoducboii  customers;  requires  fewer  S0vices  lo 
niplernetit  than  oxopetitors' products,  cornpany  daii^ 

www.fuegoxom 

HandySoft  Corp. 

Venna.Va 

BtzHow  llbraion  6  -  Latest  enharicetTierits  iridude  support  lor  IBM 

062  and  integraled  adapters  for  SAP.  J.O.  Edwards.  PeopleScifl  and 

Ariba  products. 

wwwJianctysoftcom 

IBM 

AmwnkNY 

VIWtiSphaiiBwirieailtdegradon- Most  recerrl  update  aing  to  rnake 
modebtg  easier  ridudes  new  iritegralion.  rnonitorng  capabAties 

wwwJbfn.com 

Lombardi  Software  kic. 

Austfl 

TauMlbrks- Most  reMnt  upgrade  includes  mptomd  Web  sewices 
support  cornpeny  received  SQ  rnibon  in  fundirig  in 

wwwJomhaftiaoftwafe.com 

hicrosoft  Corp. 

RetSnond  Wash 

BbTalt  Server  2002  *  More  modeling  and  bustness-process  automa¬ 
tion  being  added  to  core  integration  capabilities 

wwwjnicroaofl.com 

F^gasystems  Inc. 

CamtmOoe  Mass 

ftgrfMeeftocese  Commander -BteB  on  a  business  flies  enqeie, 
product  provides  process  and  practice  rules  in  amntegrMed  padiage. 
accontng  to  company. 

www4Mga.com 

StaffwvePLC 

Itodenhead.  England 

StaffwareProceeaSuito- Latest  version  includes  greater  support  lor 
\A%b  services. 

wwwjtBffware.com 

lMsys&irp< 
BUeBcP  Pa 

BuairMB  BhieprMing  •  Desgned  to  help  industnes  VI  vanous  vertical 
rnadiBte  develop  Ngh-leMl  business-process  rnodeb. 

wwwjmiayaxom 

VHria  lechnotogy  kic. 
Sunnytale  Cakl 

BueirwaMMve  -  Slandards-based  ntegratnn  plattonn  supports  BPM. 
business  anafjfss  and  nionnonng.  and  other  functions,  says  Mria. 

www.vitrja.com 

streogtfa  of  its  tnisiness-process  model¬ 
ing  and  its  connectivity  to  legacy  ap- 
pUcations,  says  forge  Perez,  vice  presi¬ 
dent  of  IT  and  CIO  at  NIL 

As  for  Tiitnac.  it  chose  Vitria’s  Busi- 
oeasWare  over  Microsoft  Corp.*s  Biz- 
Talk  Server  because  of  Sunnyvale, 
CaliL-based  Vitria’s  expertise  with  the 
chemical  industry's  version  of  XML. 
says  Bamicoat.  Ironically,  customer 
use  of  the  older  electronic  dau  inter¬ 
change  (EDI)  format  grew  instead,  and 
Trimac  plans  to  use  Vliria  to  handle  all 
of  its  EDI  transactions. 

Like  ocher  customers.  Pipes  says 
simple  application  integration  is  be¬ 
coming  a  commodity  in  the  BPM 
world  llie  actual  reason  Toro  chose 
Vitria  was  for  its  business-process 
automation,  reporting  and  workflow 
capabilities. 

A  New  Way  of  thinking 

Thinking  first  about  the  business  and 
not  about  technology  can  be  a  chal¬ 
lenge.  When  Perez  started  to  Improve 
a  payments  colkction  process  in  Brazil 
users  immediately  be^  talking  about 
problems  with  the  current  collections 
application.  After  training  users  in 
business-process  modeling,  Perez  bad 


them  map  the  collections  process  on 
charts  that  soon  covered  all  four  walls 
of  a  room.  Next,  they  identified  gaps 
and  used  Fuego  to  model  an  improved 
workflow  that  has  led  to  a  “dramatic" 
improvement  in  the  process,  he  says. 

NU  also  used  Fuego  in  Mexico  to  im¬ 
prove  the  process  of  establishing  ser¬ 
vice  for  new  customers,  reducing  the 
rate  of  "chum'*  (customers  switching 
to  other  carriers)  "very  substantially," 
Perez  says. 

"Getting  managers  across  the  divi¬ 
sions  to  agree  on  what  information  is 
important  at  what  point  is  a  challenge, 
because  each  business  has  a  different 
set  of  criteria  by  which  they  rate  their 
success,"  Pipes  explains.  For  example, 
he  says,  "In  winter,  we  want  to  know 
about  snow  throwers,  and  in  summer, 
we  want  to  know  about  lawn  care 
products." 

Veterans  also  recommend  starting 
with  rebtively  straightforward,  quick- 
payback  projects  until  IT  and  business 
managers  get  used  to  BPM.  Toro  first 
used  Business  Ware  to  integrate  and 
automate  woiitflow  between  its  Ariba 
procurement  system  and  its  SAP  R/3 
ERP  system,  says  Pipes.  It  now  auto¬ 
mates  the  process  by  which  stores  buy 


spare  parts  from  Toro.  Pipes  plans  to 
tackle  the  biggest  and  most  important 
work  ^  integration  with  the  distribu¬ 
tors  who  buy  finished  products  from 
Toro  —  only  after  completely  under¬ 
standing  how  to  improve  that  process. 

Trimac's  BPM  proiect.  which  began 
in  2001.  linked  its  dispatch  systems 
with  its  customers’  order  entry  systems 
to  improve  customer  service.  Baroi- 
coat  estimates  that  the  BPM  system 
will  pay  for  itself  within  two  years.  It 
not  only  saves  customers  about  S20 
per  order  in  handling  charges,  but  it 
also  allows  Trimac  to  spend  less  time 
resolving  invoice  questions,  has  re¬ 
duced  its  accounts  receivable  and  has 
resulted  in  more  business  from  cus¬ 
tomers  using  the  system.  The  BPM  sys¬ 
tem  even  allows  Trimac  to  run  a  virtu¬ 
al  shipping  desk  to  accept  customer 
orders  and  arrange  for  shipment 

Integratkm  and  Training 

Integration  may  not  be  a  showstopper 
for  BPM  projects,  but  it  can  be  a 
headache.  It  took  Perez’s  staff  about  a 
year  and  a  half  of  working  with  ven¬ 
dors  to  build  links  to  l^cy  systems 
that  allow  Fuego  to  use  the  business 
logic  (such  as  rules  for  credit  checks) 


built  into  those  applications.  Perez  also 
had  to  increase  server  capacity  by  50% 
to  give  users  the  appropriate  response 
time. 

Because  different  users  might  need 
different  types  of  information,  some 
form  of  data  warehouse  is  often  neces¬ 
sary  for  BPM.  says  Pipes.  “You  can’t 
expect  all  of  your  information  to  be 
available"  from  legacy  systems  in  the 
form  and  at  the  time  required  by  the 
improved  workflow,  he  adds. 

Although  Trimac  struggled  a  bit  in¬ 
tegrating  Vitria  with  its  EDI  transac¬ 
tion  flow,  ‘*what  took  us  a  beck  of  a  lot 
longer  was  changing  our  dispatch  sys¬ 
tem  to  accept  electronic  transactions," 
says  Barnicoat.  Dispatchers  used  to  re¬ 
ceiving  orders  by  phone  and  fax  need¬ 
ed  visual  and  audio  alarms  to  alert 
(hem  to  new  orders  arriving  electroni¬ 
cally.  Barnicoat  says.  Developers  had 
to  include  different  alarms  to  tell  dis¬ 
patchers  about  the  last-minute  shipping 
changes  common  in  the  trucldog  indus¬ 
try  to  redesign  screens  so  the  dis¬ 
patchers  could  find  the  changes  easily. 

Inmnsive  coaching  is  vital  —  as  are 
reassurances  that  the  BPM  project  isn't 
simply  a  way  to  cut  jobs,  says  John 
Ant^l  managing  partner  at  MatrixS 
Consulting  LLC,  a  Houston-based  con¬ 
sulting  firm.  If  what  end  users  see  "Is  a 
lot  of  consultants  running  around,  they 
get  very  insecure,"  be  says. 

Before  extending  a  BPM  system  to 
customers  or  suppliers,  Barnicoat  sug¬ 
gests  signing  a  contract  governing  is¬ 
sues  such  as  testing,  how  to  handle 
system  crashes  and  notification  of  soft¬ 
ware  upgrades  that  could  crash  a  part¬ 
ner's  system. 

Once  users  see  how  BPM  can  im¬ 
prove  the  business,  they  often  demand 
more  detailed  aiui  more  timely  infor¬ 
mation.  says  Pipes.  One  way  to  avoid 
endless  additional  requests  is  to  "define 
success  from  the  get-go,"  says  Antakl 
For  example,  a  BPM  project  Antaki 
worked  on  at  Shell  Oil  <fo.  had  a  goal 
of  reducing  the  cost  of  the  monthly 
rmancial  close  by  at  least  10%. 

But  the  need  to  keep  tweaking  is  also 
good  news,  says  Pipes.  "If  you  try  to  hit 
100%,  you  limit  the  best  part  of  the 
process,  which  is  that  it  can  feed  back 
on  itself  aiul  improve  itself."  I 


Sc/ieier  U  a  freelance  writer  in  Boylston, 
Mass.  He  can  be  reached  at  rscheier@ 
charter.net. 
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for  a  detailed  descriptnn  of  a  BPM  deptoyment. 
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IT  PORTFOLIO  MANAGEMENT:  WHERE  TO  BEGIN? 
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GETTING  STARTED... 

Adopting  IT  Portfolio  Management  is  easier  than  you  might  think  - 
and  the  returns  come  quickly 


Portfolio  Management  is  a  hot 
topic.  But  for  many  IT  organizations, 
it’s  hard  to  know  how  to  start  With 
hundreds  of  projects  to  manage  and 
resources  already  stretched,  where  will 
the  capacity  come  from  to 
implement  a  new  layer  of 
management?  And  be¬ 
sides,  we  already  use 
Project  Management  - 
isn’t  this  just  the  same 
thing  with  a  fancy  dash¬ 
board  on  the  front? 

While  the  terms 
Portfolio  Management 
and  Project  Management 
are  often  used  in  the  same 
sentence,  these  two  disci¬ 
plines  differ  significantly 
-  and  make  very  different 
contributions  to  the  IT 
organization.  Simply  put. 

Project  Management  is 
tactical,  focused  on  com¬ 
pleting  IT  projects  on 
time  and  within  budget. 

Portfolio  Management  is 
strategic  -  deciding  which 
investments  to  pursue  in 
the  first  place. 

Project  Management 
has  long  been  accepted  as 
essential  in  any  IT  organi¬ 
zation.  As  IT  evolves  from 
merely  “supporting  the 
business”  to  “being  the 
business,”  and  with 
increasing  pressure  on  resources,  the 
need  to  align  IT  activities  with  corpo¬ 
rate  objectives  grows.  As  a  result,  IT 


Portfolio  Management  is  now 
undergoing  the  same  widespread 
acceptance. 

IT  PORTFOUO  MANAGEMENT 
STEP  BY  STEP 

So  how  does  one  go 
about  implementing  IT 
Portfolio  Management? 
Ask  any  CIO  >^o’s  using 
the  technique  and  the 
answer  would  seem  to  be 
“it  hardly  matters,  as  long 
as  you  do  start”  The  wd- 
come  news  is  that  a  prag¬ 
matic,  phased  approach  is 
not  only  possible,  but 
actually  preferable  -  pro¬ 
vided  the  solution  chosen 
is  flexible  enough  to  allow 
for  changes  along  the  way. 

The  following  are  the 
key  phases  in  IT  Portfolio 
Management 
*  Build  the  IT  Asset 
Portfolio 

First,  build  a  picture  of 
the  organization’s  IT 
assets  and  projects  -  both 
existing  and  potential  — 
using  consistent  metrics 
and  descriptions,  and  in  a 
standardized  format  so 
they  can  be  easily  com¬ 
pared. 

For  many  organiza¬ 
tions,  merely  creating  the 
inventory  of  IT  projects 
delivers  bottom-line  benefits  itself.  It 
is  not  uncommon  to  discover  numa*- 
ous  projects  duplicating  efforts,  or 


attacking  related  problems  without 
exploiting  the  potential  for  synergy. 
Significant  savings  almost  always 
result. 

At  the  same  time,  an  IT  Project 
Office  is  established  to  manage  all 


projects  -  intake  and  triage  -  at  a 
portfolio  level.  With  the  portfolio  in 
place,  individual  investments  can  be 
grouped  into  three  classes  (as  defined 
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“Within  three 
months  of 
implementing 
Project  Office'"  from 
Pacific  Edge  we  were 
seeing  results.  Our 
managers  and 
supervisors  were 
able  to  easily  see 
reports  for 
milestones  and 
resource  planning 
at  different  views 
and  for  the  first  time 
we  could  look 
forward^  anticipate 
deadlines^  and  look 
at  projects  from  a 
higher  level’ 

:  Jim  Parker 
Energy  Northwest 
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by  Louis  Bo)4e,  Senior  Vice  President 
of  Executive  Directions  at  META 
Group,  Inc.’); 

RuB-the>basincss  investments 
involve  keeping  the  business  opera- 
tionaL  Spendii^  in  this  category  pro¬ 
vides  mission-  and  business-critical 
services  for  the  front  ofiBce  (sales  order 
entry,  customer  service)  and  the  back 
o6ke  (payroU,  accounting,  HR). 
Grow-tbe-tNianesB  investments  cover 
expanding  the  organization's  scope  of 
products  and  services.  Investments 
here  might  include  upgrading  soft¬ 
ware,  adding  incremental  capacity,  or 
developing  staff  member  skills  though 
additional  trainii^  and  other  efforts. 
1>an>l(mii-tfac-biuiness  investments 
invc^  pro)ect-based  ^)endii^  that 
creates  new  IT  services  to  broaden  an  I 
enterprise’s  reach  to  enter  new,  | 


“C/Os  that  embrace 
IT  portfolio 
management  have 
exemplary  records 
of  continuous 
IT  efficiency 
improvement,  with 
some  enterprises 
able  to  reduce  costs 
by  up  to  30%” 

:  META  Group,  Inc. 


untapped  markets.  Sample  transform 
investments  include  new  business  ven¬ 
tures,  mergers  and  acquisitions,  new 
products,  new  geographies,  major  new 
business  initiatives  that  typically 
require  addii^  new  application  padc- 
ages  and  business  process  outsourcing. 
•  Gettii^  the  Ri^t  Mix 

This  Run/Grow/Transform  divi¬ 
sion  must  of  course  take  into  account 
the  maturity  of  the  IT  organization 
and  its  openness  to  risk.  What  one 
company  might  consider  a  “grow  the 
business”  project  could  be  classed  as  a 
“run  the  business”  project  by  another. 
A  well  deseed  Portfolio  Manage¬ 
ment  solution  is  Gexible  enoi^  to 
accommodate  such  variations,  and  to 
support  changes  in  category  defini¬ 
tions  as  the  oiganization  evolves  and 
matures. 

Similarly,  determining  the  appro¬ 


priate  mix  of  *‘r\m,”“grow”  and  “trans¬ 
form”  investmoits  is  a  business  deci¬ 
sion  that  each  enterprise  makes  for 
itself,  and  ^^ch  will  be  constantly 
changing  in  response  to  business 
strategies  and  market  forces.  Typical 
portfolio  mixes’  are: 

•  Run:  65%-85% 

•  Grow:  10%-25% 

•  Transform:  5%-10% 

However,  setting  a  portfolio  mix 

that’s  appropriate  for  the  organiza¬ 
tion,  and  managing  toward  it,  b  more 
important  than  worrying  about  pre¬ 
cise  percentage  allocations. 

RESULTS  COME  QUICKLY 

Since  IT  Portfolio  Man^ement  b 
best  implemented  step-by-step,  it 
does  not  create  a  new  burden  for 
already  stretched  IT  resources.  In 
many  cases,  the  fimding  and  resources 
freed  up  in  the  inventory  phase  alone 


ddiver  s^ificant  saving  -  creating 
new  room  for  growth. 

And  the  results  come  quickly.  A 
large  oilfield  services  company  saved 
$8.7  million  dollars  by  eliminating 
investment  duplication,  and  improv-  | 
ii^  the  way  projects  are  managed  - 
within  nine  months  of  implementing 
a  Portfolio  Management  solution 
fiom  Pacific  Edge  Software. 

Another  convert  to  IT  Portfolio 
Management  -  and  also  a  Pacific  E^e 
customs  -  Ohio-based  Mercy  Healdi 
$4  million. 


And  that’s  just  for  start«s.  James 
Albin,  VP  and  CIO  says  that  IT 
Portfi^  Man^ement  has  enabled 
Mercy  Health  to  effectively  utilize  lim¬ 
ited  resources,  better  manage  cus¬ 
tomer  expectations,  and  man^  hi^ 
quality  projects. 

It’s  experiences  like  these  that 
e]q)lain  the  opinion  with  v4udi  we 
began:  **you  just  have  to  get  started.” 

'Source:  MFTA  Group,  Inc.,  Por^oBo  UaiMgenieiu 
forOCk 

C2003  MFIA  Inc.,  Stun&Md,  CT  •  USA, 

■f  I  (203)  9734700,  mftjgroupcom 
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which  one  to  choose? 


to  quickly  impact  your  bottom  line? 


^pacificedge 

PortfoUo  Martasement  for  Smarter  Business' 


AMR  Research:  ‘As  much  as  75%  of  IT  organizations  have  little  visibiUty  of  their  entire  project  portfolio  and  have,  at  best.  chMk  artd  non-icpeatable  processes  in  pirce.' 


In  about  45  days  we’ll  help  you  select 
and  prioritize  the  IT  investments  that 
align  with  your  corporate  goals,  and 
offer  maximum  business  benefit. 

Visit  www.pacificedge.coni/cw  or 
call  425-897-8800.  And  start  making 
IT  decisions  that  make  bottom-line 


One  customer  msO  $17 
using  IT  tatMio  Management 


Project  B. 


which  one  to  choose? 


to  quickly  impact  your  bottom  iine? 

In  about  45  days  ue'll  help  you  select 
and  prioritize  the  IT  investments  that 
align  with  your  corporate  goals,  and 
offer  maximum  business  benefit. 

\'isit  www.pacincedge.com/cw  or 
call  425-897-88(K).  And  start  making 
IT  decisions  that  make  bottom-line 


One  customer  saved  $8.7  million 
using  IT  Portfolio  Management. 

Visit  mrw.pacificedge.com/cw 
for  a  FREE  WHITT  PAPER 

that  tells  how. 


Project 
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Portfolio  Management  (or  Smarter  Business ' 

.AMR  Research: ''A>  much  as  7.V'„  of  1 1  orjyni/ations  have  link  visINilt  of  their  eiiiirt  pr.*iesl  portUvIio  and  have,  at  k-a.  chArtk.  and  non-reptaiaWe  p 


deliver  significant  savings  -  creating 
new  room  for  growth. 

And  the  results  come  quickly.  A 
large  oilfield  services  company  saved 
$8.7  million  dollars  by  eliminating 
investment  duplication,  and  improv¬ 
ing  the  way  projects  are  managed  - 
within  nine  months  of  implementing 
a  Portfolio  Management  solution 
from  Pacific  Edge  Software. 

Another  convert  to  IT  Portfolio 
Management  -  and  also  a  Pacific  Edge 
customer  -  Ohio-based  Mercy  Health 
Partners,  cut  IT  costs  bv  S4  million. 


And  that’s  just  for  starters,  lames 
Albin,  V'P  and  CIO  says  that  IT 
Portfolio  ^Management  has  enabled 
Mercy  Health  to  effectively  utilize  lim¬ 
ited  resources,  better  manage  cus¬ 
tomer  expectations,  and  manage  high 
qualiU'  projects. 

It’s  experiences  like  these  that 
explain  the  opinion  with  which  we 
began:  “you  just  have  to  get  started.” 

Sviurvv:  MF  lA  (iniup.  Inc.,  h>nu>lii>  Mtituifi'inrtit 
forCKH 

■ '2t)0.T  MI.r.A  firoup,  Inc.,  Stamfiird.  I' I  -  I'S.A, 

*  I  (2iOi  fT.'-hrikl.  mcl.^niup.cum 


^  For  more  information  on  IT  Portfolio  Management 
^  and  its  relevance  to  senior  management,  visit 

WWW.PACIFICEOGE.COM/WEBCAST 

for  complimentary  Webcasts  with  industry  analysts 
and  subject  matter  experts. 
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PORTFOLIO  MANAGEMENT  IN  ACTION 


Russeil/MeUon  Analytical  Services, 
a  leading  global  provider  of  perform¬ 
ance  measurement  services,  realized 
the  need  for  improved  insight  and 
control  of  its  rapidly  expanding  IT 
activities.  The  company  established  a 
Project  Management  Office  and  uti¬ 
lized  Pacific  Edge  Software  to  imple¬ 
ment  formal  project  management 
administration  processes  and  develop 
a  comprehensive  Enterprise  Portfolio 
Management  solution. 

snucnoN 

When  Tammy  Reuter  was  hired  as 
Manager  of  Strategic  Initiati>^  in 
2001,  Russell/Mellon  had  recently 
been  formed  through  the  merger  of 
the  data  divisions  of  long-established 
Frank  Russell  Company  and  Mellon 
Financial  Corporation.  The  new  com¬ 
pany  had  seen  its  IT  budget  grow  dra- 
matically  in  three  years,  and  Reuter 
was  charged  with  establishing  a 
Project  Management  Office  to 
improve  control  and  oversight  of 
some  100  to  135  projects  active  at  any 
one  time. 

The  IT  department  had  been  man¬ 
aging  this  large  portfolio  of  projects 
using  a  combination  of  spreadsheets 
to  inventory  the  projea  portfolio  and 
a  Microsoft  Access  database  for  time 
reporting  This  approach  was  hard  to 
scale,  had  very  limited  ability  for 
efiective  forecasting  The  process  also 
did  not  include  an  concise  method  to 
track  the  capitalization  of  software 
development. 

soumoN 

Reuter  and  the  senior  management 
team  realized  that  with  the  growth  of 
the  project  portfolio  that  a  more 
robust  solution  was  essential  to  help 


RUSSELL/MELLON  ANALYTICAL  SERVICES 


Russell/Mellon  Takes  Control 
of  their  IT  Portfolio 


more  effectively  manage  IT  spending  uct  lines  based  on  their  contribution 
and  to  allow  effective  planning  and  to  corporate  business  objectives  vs. 
decision-making  based  on  business  cost  and,  makes  a  final  recommenda- 
drivers.  She  selected  tion  to  senior  manage- 

Pacific  Edge  to  provide  a  ...  .  .  ment.  This  prioritiza- 

,  ®  _  \Vereltght-)-eaTsaheaiJ.  ,  „ 

complete  Enterprise  tion  process,  and  alioca- 

Portfolio  Management  Tht  tambmaiim  of  ih^  uoL  and 

solution.  the  management  group  and  budget  is  done  quarterly 

Russell/Mellon  decid-  the  processes  have  been  for  a  six-month  rolling 

ed  to  take  a  phased  instrumental  m  helping  to  timeframe, 
approach  to  implemen-  „  RESULTS 

tation.  The  first  task  was  a  Enterprise  Portfolio 

,  05  a  company.  As  i  .  ,  , 

to  identify  which  were  Management  has  helped 

the  ‘real’  projects,  and  *ve  have  become  more  com-  Russell/Mellon  enhance 
get  them  into  one  data-  f^ablt  with  the  processes,  control  of  its  IT  project 

base.  This  vras  made  wr  have  continuously  portfolio.  With  an  accu- 

much  simpler  by  the  improved  them,  so  we  now  rate  picture  of  how  ini- 
preformatted  template  are  in  a  better  position  to  tiatives  relate  to  business 

that  was  provided  by  prioriues,  decisions  can 

Pacific  Edge,  which  ,  be  made  based  on  cor- 

•«  ,  .  assessments  of  Ute  rewards,  ,  .  , 

Reuter  easuy  adapted  to  porate  needs,  and  the 

the  company’s  specific  of  each  mitia-  department  is  in  a  better 

needs.  tive.  The  Pacific  Edge  solu-  position  to  prioritize  its 

The  process  also  tion  has  helped  us  in  this  efforts  -  or  turn  away 

helped  Russell/Mellon  evolution,  adaptmg  to  OUT  misaligned  initiath^ 

identify  how  incomplete  suppenmg  ui"  “f  *1*“'*'^ 

their  existing  project  benefits  Russell/Mellon 

data  was,  so  the  next  .Tammy Reuter  experienced 

step  was  to  gather  the  ihroi^h  the  implemen- 

missing  information.  tation  of  Pacific  Edge’s 

With  that  in  place,  solution  include: 

Reuter  and  the  senior  management  Cost  evaluation:  Enterprise  Portfolio 

team  could  start  actively  managing  Management  has  helped  Russell/ 

their  portfolio  of  projects.  Mdlon  significantly  manage  a  recent 

Before  the  establishment  of  the  evaluation  of  its  IT  spending  It  is  now 

Project  Management  Office,  Russell/  much  dearer  how  much  is  being  spent 

Mellon  lacked  a  formal  process  for  and  what  it  is  being  spent  on.  And 

initiating  projects.  Reuter  created  a  Russdl/Mellon  is  now  going  fiuther 

project  request  template,  scheduled  tying  travd  dollars  to  specific  projects, 

regular  meetings  with  the  CEO,  CFO  Improved  management  inftwinatiofi: 

artd  directors  to  review  requests  based  Enterprise  Portfolio  Management 

on  the  business  case  for  each  initia-  helps  Russell/Mellon  management 

tive.  More  recently,  a  formal  Invest-  monitor  how  product  development, 

ment  Decision  Council  has  been  IT,  and  project  management  activities 

established,  comprised  of  representa- 
lives  from  sales,  clients  services,  oper- 
project  management  and 
product  management.  This  team 
ranks  new  tniciauves  across  all  prod- 


are  tied  to  meeting  the  development 
needs  of  the  company. 

Increased  internal  omununication: 
Having  more  complete  data  on  proj¬ 
ects  has  helped  facilitate  more  timely 
and  accurate  communication  between 
product  development,  project  man¬ 
agement,  IT  and  Senior  Maiu^ement 
on  development  priorities  and  status. 
This  helps  them  focus  on  doing  devel¬ 
opment  work  that  is  better  tied  to  our 
company  strategy,  which  pleases  both 
internal  customers  and  man^ement. 

And  with  improved  communication 
comes  increased  understanding  of  the 
importance  of  planning  The  Project 
Management  Office  and  the  processes 
it  has  implemented  involve  the  busi¬ 
ness  directors  in  the  decision-making 
process.  “Now,  even  when  a  project 
gets  turned  down,  people  understand 
why.  So  they  are  more  accepting,"  says 
Reuter. 

The  Pacific  Edge  Enterprise 
Portfolio  Management  solution  has 
helped  Russell/Mellon  transform  the 
way  it  manages  its  IT  efforts.  And  the 
company  plans  to  continue  extending 
the  benefits.  Soon,  Product  Managers, 
Projects  Managers  and  Resource 
Managers  will  start  managing  project 
data,  allocatii^  resources,  forecasting 
tasks  and  entering  data  themselves 
using  Pacific  Edge  Software  solutions. 
Further  down  the  line,  Russell/Mdlon 
intends  to  use  the  system  to  gather 
additional  strategic  information  to 
help  in  the  analysis  of  achieved  bene¬ 
fits  ftom  IT  and  product  profitability. 
“We’ve  come  a  long  way  in  a  short 
time,"  says  Reuter,  “and  Enterprise 
Portfolio  Management  can  help  take 
us  much  farther.” 


Disi 


^ment 


DEFINITION 

Digital  rights  management  (DRM)  refers  to  the  con¬ 
trol  and  protection  of  digital  intellectual  property 
(content),  including  documents,  images,  video  and 
audio.  DRM  limits  what  a  user  can  do  with  that 
content  even  when  he  has  possession  of  it. 


PROTECTING  valu¬ 
able  information 
fnmi  misuse,  theft 
or  misappropriation 
is  a  mioeBeld  of 
conAicting  opinions,  expecta- 
dons,  laws  and  technologies. 

As  new  storage  and  distribu¬ 
tion  channels  become  available 
—  DVD  and  peer-to-peer  file- 
sharing  networks,  for  instance 
—  traditional  rules  and  physi¬ 
cal  limitadons  no  lon^r  apply. 
To  see  why  distal  ri^^ts  man¬ 
agement  (DRM)  is  so  con¬ 
tentious.  let’s  examine  the 
three  words  individually.  _ 

Digital  n||| 

When  information  was  JWy 

entirely  analog  in  na-  vl1| 

ture.  dWibution  and  Wlli 

publishing  required  - 

physical  vehicles:  printii^  it 
on  paper,  recording  it  in  vinyl 
grooves  or  on  magnedc  tape, 
and  exposing  it  cm  photo¬ 
graphic  film  or  paper. 

Producing  these  vehicles 
is  relatively  expensive.  While 
people  could  always  make 
analog  duplicates,  doing  so 
was  genei^y  complex,  slow 
and  expensive,  and  resulted  in 
degraded  quality.  These  tech¬ 
nical  and  economic  limita¬ 
tions  protected  publishers 
against  unauthorized  distribu¬ 
tion.  If  you  wanted  a  second 
copy,  it  was  simplest  and  often 
cheapest  fust  to  buy  another. 
Digital  technology  changed 


everything.  Today,  ntost  infor¬ 
mation.  from  newspaper  sto¬ 
ries  to  motion  pictures,  is 
availjfole  in  distal  form.  It’s 
quick  and  simple  to  make  ab¬ 
solutely  perfea  cities  of  d^- 
tal  data.  Such  copying  costs 
virtually  nothing  and  doesn’t 
alter  the  original  or  make  it 
unavailable. 

Digital  theft  made  its  first 
widescale  appearance  in  soft¬ 
ware  in  the  1970s,  as  the  fledg¬ 
ling  Micro-Soft  Cforp.  found 
that  people  were  makii^  pa¬ 
per-cape  copies  of  its  Basic 
program  without  paying  for 

_  it.  Software  piracy  is 

still  a  problem,  and 
NfA  Microsoft  is  one  of 
gyjjfc  the  more  active  play- 
liy^  ersfigbti^h. 

^  *  For  digital  informa- 
I  tion,  the  Internet  elim¬ 

inates  the  need  to  sell  and 
move  physical  objects,  such 
as  books  or  magazines,  floppy 
disks,  cassette  tapes  or 
With  higfa-^>eed  networks  and 
widely  accessible  broadband, 
we  can  send  digital  content 
anywhere  in  the  world  almost 
instantaneously  and  at  virtu¬ 
ally  no  cost. 

Rights 

Clopyri^t,  patent  and  trade 
secret  laws  give  certain  privi¬ 
leges  to  the  holders  of  such 
rights,  letting  them  share,  sell 
or  withhold  information  for  a 
period  of  dme.  IVadition  and 
legislation  define  what  users 


can  do  with  information  they 
buy.  For  example,  if  I  buy  a 
book  or  a  music  recording,  I 
can  read  or  listen  to  it  pass  it 
along  to  a  friend,  make  a  copy 
or  use  the  ori^nal  in  another 
machine  (such  as  a  car  play¬ 
er).  I  can  buy  a  used  book  or 
CD  at  a  reduced  price.  A  li¬ 
brary  can  lend  its  books  to 
thousands. 

There  are  rights  I  don't  have. 
I  can't  make  changes  and  sell 
the  revised  woric  as  my  own.  I 
can’t  make  and  sell  unmodified 
copies.  I  cant  inct^porate 


pieces  of  such  works  in  some¬ 
thing  I  produce  without  per¬ 
mission.  I  can't  charge  people 
admission  to  watch  my  DVDs. 

Digital  content  creates 
rights  that  didn't  exist  for  ana¬ 
log  products.  For  example.  I 
can  buy  an  aerial  photograph 
of  a  particular  location,  or  I 
can  buy  a  satellite  photograph 
in  digital  form.  That  satellite 
image  is  limited  in  the  size  of 
the  smallest  detail  it  can  show, 
but  it’s  packaged  with  another 
image  1  can  view  at  higher  res¬ 
olution.  UTm  willing  to  pay  a 
little  more. 

Management 

We  can  enforce  policies  far 
more  Draconian  and  restric¬ 
tive  than  previously  possible. 
If  I  buy  an  e-book,  for  exam¬ 
ple.  I  might  find  these  limita¬ 
tions:  I  can  only  read  it  on  a 
single  machine;  I  can't  make 
backup  copies;  I  can't  lend 
it  to  a  friend;  I  can  only  read 
the  book  a  certain  number 
of  times,  or  within  a  specific 
lime  imerval.  before  it  expires; 
and  I  can't  print  it  out. 

In  the  waJce  of  Napster  and 
declining  music  CD  sales,  sev¬ 
eral  publisbers  have  launched 
commercial  cmline  music  dis¬ 
tribution  services.  For  a 
monthly  fee,  you  can  down¬ 
load  and  listen  to  a  certain 
number  of  songs  from  their 


catalogs.  But  there's  often  a 
catch:  Miss  a  monthly  payment 
and  you  can't  listen  to  any  of 
the  sor^  you  previously  paid 
for  and  downloaded.  Or  maybe 
you  can  only  listen  to  a  song 
for  a  designated  period  of 
time.  You  can't  bum  the  song 
to  a  CD  or  copy  U  to  a  hand¬ 
held  MP3  player.  None  of  these 
restrictions  apply  if  you  just 
buy  the  physical  CD. 

Microsoft  has  included 
DRM  technology  in  its  new 
Windows  Server  2003.  Office 
2003  productivity  suhe  and  an 
add-on  for  Internet  Explorer. 
This  will  let  users  designate 
wrho  can  open  a  Word  docu¬ 
ment  or  Outlook  e-mail  mes¬ 
sage  and  wfaetber  they  can 
print,  copy  or  forward  it.  I 

Kdy  iso  Computerworld 
confriburi/tg  writer  in  Worces¬ 
ter.  Mass.  Contact  him  at 
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The  body  coordinates  639  muscles  to  meet  changing  demand. 
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IBM  Total  Storage  " 


Manages  storage  re- 


:emand.  On  demand. 


The  human  body  has  an  amazing  capacity  to  adapt  to  shifting 
demands.  So  do  IBM  TotalStorage  products. The  IBM  TotalStorage 
Virtualization  Family  manages  your  individual  storage  resources 
as  one  common  virtual  pool,  it  can  then  allocate  storage  to  your 
servers,  helping  to  improve  availability  and  utilization.  On  demand 
Helping  to  lower  your  costs. 

TotalStorage:  storage  for  on  demand  business. 

Can  you  sea  it?  See  it  at  ibm.com'totalstorage/ondemand 
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Workforce  management  mixes 
science  and  art  to  meetthe  needs 
of  today’s  multimedia  contact 
centers.  By  Kym  Gilhooley 


How  DO  YOU  STAY  on  Schedule 
when  you  run  23  call  centers 
across  the  U.S.  and  handle  40 
million  contacts  from  6J  mil¬ 
lion  customers  annually?  Just  ask  Cox 
Communications  Inc.,  the  country’s 
fourth-largest  cable  services  provider, 
whose  4,000  contact  center  agents 
sePi’e  customers  not  only  by  phone, 
but  also  across  a  range  of  channels,  in¬ 
cluding  e-mail,  chat,  Web  collaboration 
and  self-service.  To  handle  the  com¬ 
plex  job  of  getting  the  right  mix  of 
skills  in  the  right  seats  at  the  right 
time.  Cox  relies  on  a  workforce  man¬ 
agement  suite  from  San  Jose-based  As¬ 
pect  Communications  Corp. 

“There’s  an  art  and  science  to  work¬ 
force  management.  It’s  about  predict¬ 


ing  call  volumes  and  then  scheduling 
the  appropriate  staff  at  the  right  times 
to  handle  those  customer  contacts  ef¬ 
fectively.”  says  Denny  Campbell,  re¬ 
source  operations  manager  at  Cox’s 
largest  call  center,  which  is  in  San 
Diego.  The  Atlanta-based  company's 
challenge  is  one  faced  by  contact  cen¬ 
ters  everywhere  as  they  struggle  to 
maximize  their  most  costly  resource  — 
people. 

According  to  Ganner  Inc.,  71%  of 
call  center  costs  are  personnel-related. 
Managers  must  make  sure  they  have 
the  right  agents  available  to  ensure  op¬ 
timal  service  levels,  and  they  must  do 
so  without  over-  or  understaffing.  Fur¬ 
thermore.  they  must  increasingly 
schedule  agents  across  a  range  of  real¬ 


time  and  deferred  contact  channels, 
because  customers  demand  multichan¬ 
nel  access.  They  must  also  retain  these 
agents  in  a  time  when  call  center  turn¬ 
over  is  at  an  alarming  high,  with  some 
estimates  placing  it  35%  annually. 

Enter  workforce  management  tech¬ 
nology.  Though  not  new  on  the  scene, 
workforce  management  is  generating 
keen  interest,  as  contact  centers  recog¬ 
nize  that  delivering  premium  customer 
service  depends  largely  on  the  employ¬ 
ees  delivering  it.  Workforce  manage¬ 
ment  suites  typically  comprise  fore¬ 
casting,  scheduling,  budgeting  and  re¬ 
porting  modules,  though  vendors  are 
increasingly  moving  toward  what  ana¬ 
lysts  are  dubbing  “workforce  optimiza¬ 
tion”  by  integrating  components  such 
as  performance  monitoring,  analytics, 
training  and  incentive  programs. 

By  utilizing  forecasting  techniques, 
contact  centers  can  schedule  optimal 
service  levels  based  on  agent  availabil¬ 
ity  and  skills.  Through  integration  with 
automatic  call  distributor  (ACD)  sys¬ 
tems  and  multimedia  contact  channels, 
the  technology  routes  customers  to  the 
appropriate  agents,  no  matter  how 
they  made  contact  with  the  organiza¬ 
tion.  And  by  enabling  agents  to  input 


their  own  schedule  preferences,  man¬ 
agers  can  increase  employee  morale 
and  retention  rates.  All  this  means 
higher  productivity  and,  ultimately,  im¬ 
proved  customer  satisfaction,  accord¬ 
ing  to  proponents. 

FastROI 

Another  argument  for  workforce  man¬ 
agement  technologies  is  that,  unlike 
some  other  types  of  customer-related 
software,  workforce  management  sys¬ 
tems  are  producing  a  fairly  quick  re¬ 
turns  on  investments  for  companies 
that  have  implemented  them,  says 
Wendy  Close,  CRM  research  director 
at  Stamford,  Conn.-based  Gartner. 

Respondents  to  a  recent  survey  by 
Gartner  cited  the  following  improve¬ 
ments  following  workforce  manage¬ 
ment  implementations:  a  45%-90%  re¬ 
duction  in  scheduling  times,  a  10%-13% 
increase  in  service  levels,  a  10%-13% 
decrease  in  payroll  costs  and  a  3%  de¬ 
crease  in  call  abandonment  ratqs.  In 
addition.  87%  said  deployment  had 
lowered  their  persormel  costs,  and 
98%  said  it  had  improved  efficiency. 

“Many  companies  with  call  centers 
have  all  the  components  of  CRM  in 
place,  but  workforce  management  is 
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where  the  rubber  meets  the  road.  It's  a 
no-brainer,"  says  Close.  "The  place  to 
draw  the  line  in  the  sand  is  if  you’ve 
got  multimedia  support  channels  and 
more  than  100  agents  with  a  range  of 
skill  sets." 

Although  workforce  management 
technologies  are  often  overlooked  at 
budget  time,  they  can  have  the  biggest 
impact  in  the  shortest  amount  of  time 
in  the  call  center,  according  to  loanie 
Rufo,  research  director  at  AMR  Re¬ 
search  Inc.  in  Boston.  Also,  many 
workforce  management  suites  provide 
key  integration  with  call  management 
applications  and  can  easily  be  incorpo¬ 
rated  into  a  larger  customer-service 
infrastructure,  she  says. 

But  companies  won't  realize  this 
ROI  without  overcoming  a  number  of 
challenges,  chiefly  cultural  ones,  says 
Rufo.  Schedulers  are  initially  reluctant 
to  trust  forecasts  and  may  create  re¬ 
dundant  s>’stems.  Conversely,  they  may 
end  up  adhering  too  strictly  to  auto¬ 
mated  schedules  and  not  be  flexible 
enough  to  meet  employee  needs. 

On  the  technology*  side,  workforce 
management  offerings  have  enjoyed 
solid  integration  with  ACD  systems  for 
some  time,  but  integration  with  other 
channels  has  been  slower  in  coming. 

Moving  to  MuHitnedia 

Los  Angeles-based  PeopleSupport  Inc. 
saw  the  lack  of  multimedia  integration 
firsthand  when  it  searched  for  a  work¬ 
force  management  suite  in  early  2000, 
says  CIO  Abby  Hossein.  Founded  in 
1998  to  deliver  outsourced  online  cus¬ 
tomer  care  services,  primarily  to  dot¬ 
coms.  PeopleSupport  signed  up  early 
Internet  stars  such  as  cToys  Inc.  and 
ReaLcom.  whose  business  models  re¬ 
lied  on  driving  support  from  more 


expensive  phone-based  channels  to 
less  expensive  real-time  and  deferred 
channels.  It  also  set  up  offshore  call 
center  operations  in  the  Philippines. 

PeopleSupport  grew  quickly,  and  it 
became  apparent  that  its  spreadsheet- 
based  scheduling  and  forecasting  ap¬ 
proach  wouldn’t  be  able  to  handle  the 
complexities  of  scheduling  more  than 
1,000  agents  as  it  was  forced  to  add 
more  phone-based  support  across  mul¬ 
tiple  time  zones,  says  Hossein. 

“When  we  started  to  look  at  work¬ 
force  management,  we  looked  at  tradi¬ 
tional  players,  but  at  the  time,  they  had 
primary  integration  with  voice,  not 
with  Web  collaboration  or  e-mail 
tools."  says  Hossein.  The  company 
chose  CenierForce  Technologies  Inc.'s 
system,  w'hich  was  integrated  with  an 
e-mail  package,  and  partnered  with 
Bethesda.  Md. -based  CenterForce  to 
build  a  solution  that  encompassed 
voice  and  chat. 

“We  wanted  an  enterprise  solution 
for  centralized  forecasting,  planning 
and  scheduling."  Hossein  says.  People- 
Support  now  has  that,  and  its  work¬ 
force  management  suite  runs  on  a 
Windows  2000  server  in  Los  Angeles. 

Manual  Methods  Short 

An  inability  to  meet  forecasting  and 
scheduling  needs  using  manual  meth¬ 
ods  likewise  led  Timberline  Sofrivare 
Corp.  to  purchase  workforce  manage¬ 
ment  sof^are.  The  breadth  of  the 
product  line  at  the  supplier  of  fmancial 
and  operations  software  for  the  con¬ 
struction  and  real  estate  industries  re¬ 
quired  that  technical  personnel  sup¬ 
port  numerous  applications,  and  cus- 
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tomer  service  was  suffering  as  a  result, 

“We  weren’t  delivering  the  levels  of 
service  we  needed  to  customers,  and 
we  had  to  re-enginecr  that,"  says  Mark 
Brannan.  operations  director  at  the 
company,  which  in  1990  deployed 
workforce  products  from  Blue  Pump¬ 
kin  Software  Inc.  in  Sunnyvale.  Calif. 

“Our  support  reps  had  to  know  all 
our  applications,  and  what  that  ended 
up  doing  was  establishing  a  limited 
amount  of  expertise  on  ail  applica¬ 
tions,”  he  says,  wanted  to  add 
skills-based  routing  to  get  customers 
to  the  proper  person." 

Routing  calls  to  the  representatives 
with  the  proper  skills  created  unfore¬ 
seen  forecasting  and  scheduling  com¬ 
plexities  at  Beaverton.  Ore.-based  Tim- 
berline.  making  it  impossible  to  do 
scheduling  manually. 

“In  the  past,  we  could  use  simple 
calculations  —  we  based  [schedules! 
on  one  big  block  of  calls  and  one  block 
of  agent.s."  says  Brannan.  With  the  new 
service  model  the  company  forecasts 
and  schedules  for  12  to  20  different 
queues,  depending  on  customer  needs, 
agent  availability  and  skill  levels. 

The  software  also  enables  Timber- 
line  to  plan  for  product  rollouts  and 
determine  future  hiring  plans,  among 
other  things.  “By  implementing  Blue 
Pumpkin  with  the  skills-based  environ¬ 
ment,  we  found  that  our  hiring  plan  for 
the  upcoming  year  [2000)  was  too  ag¬ 
gressive  and  that  we  needed  to  hire  30 
fewer  people  than  we  initially 
thought,"  says  Brannan.  That  discovery 
saved  $1.4  million  that  year,  he  say’s. 

Indeed,  the  ability  to  identify  hiring 
parameters  and  budgeting  needs 
through  forecasting  is  one  of  the 
biggest  benefits  of  vrorkforce  manage¬ 
ment  software,  say  users.  “A  critical 
output  [of  workforce  management)  is 
knowing  when  to  hire  new  classes  and 
when  they  need  to  hit  the  floor,"  says 
Cox's  Campbell  “With  a  long-range 


forecast,  we  can  look  at  seasonality 
and  customer-base  growth  and  predict 
hiring." 

As  with  any  technology,  workforce 
management  software  presents  certain 
challenges  that  can  hinder  success 
Cultural  issues  often  pose  the  biggest 
hurdles,  says  users. 

“With  this  tool  it  requires  an  entire 
staff  to  buy  in.  a  discipline  that  often 
does  not  exist  in  call  centers."  says 
PcopleSupporfs  Hossein.  "If  anyone 
thinks  that  buying  this  tool  and  in¬ 
stalling  it  is  going  to  solve  their  prob¬ 
lem.  they're  wrong.  You  need  a  work¬ 
force  management  team  committed  to 
enforcing  policies  and  procedures  and 
ensuring  that  agents  adhere  to  breaks 
and  other  activities." 

Accurate  forecasting  is  another  is¬ 
sue,  says  Gartner’s  Close.  There  can 
be  a  lot  of  complexity  in  collecting  his¬ 
torical  data  for  forecasting.  You  might 
be  forecasting  for  multiple  sites  and 
multiple  skill  sets.  And  for  contact  cen¬ 
ters.  you're  not  just  forecasting  call 
volume,  but  [a].so]  e-mail.  Web  chat 
and  even  walk-ins."  she  says. 

Schedule  forecasting  can  mean  the 
difference  between  keeping  and  losing 
customers,  says  Hosseia  But  for  his 
company,  it  was  a  risk  that  had  to  be 
takea  "Because  we’re  in  the  contact 
center  and  CRM  business,  workforce 
management  means  the  difference  be¬ 
tween  making  money  and  losing  it."  be 
says.  "We  must  constantly  balance 
workforce  efficiency  with  high  sei^ice 
levels."  I 

Giffiodey  is  afrevlanct  writer  in  fdi- 
mouth,  Maine.  You  can  reach  her  at 
kyrng@maine.rr.com. 
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where  ihe  rubber  meets  the  road.  It's  a 
no-brainer."  says  Close.  "The  place  to 
draw  the  line  in  the  sand  is  it" you've 
got  multimedia  support  channels  and 
more  than  100  agents  with  a  range  ot' 
skill  sets." 

Although  workforce  management 
technologies  are  often  overlooked  at 
budget  time,  they  can  have  the  biggest 
impact  in  the  shortest  amount  of  lime 
in  the  call  center,  according  to  (oanie 
Rufo.  research  director  at  AMR  Re¬ 
search  Inc.  in  Boston.  Also,  many 
workforce  management  suites  provide 
key  integration  with  call  management 
applications  and  can  easily  be  incorpo¬ 
rated  into  a  larger  customer-service 
infrastructure,  she  says. 

But  companies  won't  realize  this 
ROI  without  overcoming  a  number  of 
challenges,  chiefly  cultural  ones,  says 
Rufo.  Schedulers  are  initially  reluctant 
to  trust  forecasts  and  may  create  re¬ 
dundant  system-s.  Conversely,  they  ma> 
end  up  adhering  too  strictly  to  auto¬ 
mated  schedules  and  not  be  flexible 
enough  to  meet  employee  needs. 

On  the  technolog>-  side,  workforce 
management  ofl'erings  have  enioyed 
solid  integration  with  ACD  systems  for 
some  time,  but  integration  with  other 
channels  has  been  slower  in  coming. 

Moving  to  Multimedia 

Los  Angeles-based  PeopleSupport  Inc. 
saw  the  lack  of  multimedia  integration 
firsthand  when  it  searched  for  a  work¬ 
force  management  suite  in  earl)'  2000. 
says  CIO  Abby  Hossein.  Founded  in 
1998  to  deliver  outsourced  online  cus¬ 
tomer  care  services,  primarily  to  dot¬ 
coms.  PeopleSupport  signed  up  early 
Internet  stars  such  as  eTo)‘s  Inc.  and 
Real.com.  whose  business  models  re¬ 
lied  on  driving  support  from  more 


expensive  phone-based  channels  to 
less  expensive  real-time  and  deferred 
chiinnels.  It  also  set  up  offshore  call 
center  operations  in  the  Philippines. 

PeopleSupport  grew  quickly,  and  it 
became  apparent  that  its  spreadsheet- 
based  scheduling  and  forecasting  ap¬ 
proach  wouldn't  be  able  to  handle  the 
complexities  of  scheduling  more  than 
1.000  agents  as  it  was  forced  to  add 
more  phone-based  support  across  mul¬ 
tiple  time  zones,  says  Hossein. 

“When  we  started  to  look  at  work¬ 
force  management,  we  looked  at  tradi¬ 
tional  players,  but  at  the  time,  they  had 
primarily  integration  with  voice,  not 
with  Web  collaboration  or  e-mail 
tools,"  says  Hossein.  The  company 
chose  CenterForce  Technologies  Inc.’s 
system,  which  was  integrated  with  an 
e-mail  package,  and  partnered  with 
Beihcsda.  Md.-based  CenterForce  to 
build  a  solution  that  encompassed 
voice  and  chat. 

"We  wanted  an  enterprise  solution 
for  centralized  forecasting,  planning 
and  scheduling."  Hossein  says.  People- 
Support  now  has  that,  and  its  work¬ 
force  managemem  suite  runs  on  a 
Windows  2000  server  in  Los  Angeles, 

Manual  Methods  Fall  Short 

An  inability  to  meet  forecasting  and 
scheduling  needs  using  manual  meth¬ 
ods  likewise  led  Timberline  Softw  are 
Corp.  to  purchase  workfonre  manage¬ 
ment  software.  The  breadth  of  the 
product  line  at  the  supplier  of  financial 
and  operations  sofmare  for  the  con¬ 
struction  and  real  estate  industries  re¬ 
quired  that  technical  personnel  sup¬ 
port  numerous  applications,  and  cus- 

Contact  Center 
Workforce 
Expenses 

On  average.  71%  of  contact  center 
CoWare  personnef-retated.  accord¬ 
ing  to  new  research  by  Gartner  Inc. 
Here’s  the  breakdown  of  those 
pereonnel-rBlated  eipanses; 


Incentives  2.2% 
Overtime  2.2%; 


Travel 

0.3% 


Ongoing  Tratnif>0:2%  InitiaHraining  1.1% 


Workforce  Management  Software  Adoption 


Companies  with 
75  agents  or  fewer 


Companies  with 
more  than  75  agents 


Curtertlv 

Planning  vritnin 
next  two  yeats 

No  plans  in  the 
•  next  two  years 


tv'mer  service  was  suffering  as  a  result. 

"VV'e  weren't  delivering  the  lex  els  uf 
serx  icc  we  needed  to  customers,  and 
wc  had  to  re-engineer  that."  s.iys  Mark 
Brannan.  operations  director  at  the 
company,  which  in  i‘)on  deployed 
workforce  products  from  Blue  Pump¬ 
kin  Software  Inc.  in  Sunnyvale.  Calif 

"Our  support  reps  had  to  know  all 
our  applications,  and  what  that  ended 
up  doing  was  establishing  a  limited 
amount  of  expertise  t>n  all  applica¬ 
tions."  he  says.  “Wc  wanted  to  add 
skills-based  nxuting  to  get  customers 
to  the  proper  person." 

Rsmting  calls  to  the  representatives 
xvith  the  proper  skills  created  unfore¬ 
seen  forecasting  and  scheduling  com¬ 
plexities  at  Beaverton.  Ore.-based  Tim- 
berime,  making  it  impossible  to  do 
scheduling  manually. 

“In  the  past,  wc  cx>uld  use  simple 
calculations  —  we  based  [schedules} 
on  one  big  block  of  calls  and  one  block 
of  agents."  says  Brannan.  With  the  new 
sen-jcc  model,  the  company  forecasts 
and  schedules  for  12  to  20  different 
queues,  depending  on  customer  ncc-ds. 
agent  availability  and  skill  levels. 

The  software  also  enables  TimK-r- 
line  to  plan  for  product  rollouts  and 
determine  future  hiring  pbns,  among 
I  other  things.  “By  implementing  Blue 
j  Pumpkin  with  the  skills-based  environ¬ 
ment.  we  found  that  our  hiring  plan  for 
I  the  upcoming  year  l20lX)I  was  tvh>  ag¬ 
gressive  and  that  we  needed  it)  hire  .U) 
fewer  people  than  we  initially 
thought.”  says  Brannan.  That  discovery 
saved  S1.4  million  that  year,  he  says. 

Indeed,  the  ability  to  identify  hiring 
parameters  and  budgeting  needs 
through  forecasting  is  one  of  the 
biggest  benefits  of  workforce  manage¬ 
ment  software,  say  users.  "A  critical 
output  [of  workforce  management)  is 
knowing  when  to  hire  new  classes  and 
when  they  need  to  hit  the  floor."  sas-s 
Cox’s  Campbell  "With  a  long-range 


we  can  look  at  seaM'nalit) 
and  customer-base  grovuh  and  predict 
hiring.' 

As  with  am  techmilog).  workforce 
managemeni  sofiw  aie  presents  certain 
ch.illenges  that  can  hinder  success. 
(?ullur;il  issui*s  often  p«*.se  the  bij^iest 
hurdles,  says  users 
"With  this  tool,  it  requires  an  entirx' 
staff  to  buy  in.  a  discipline  that  often 
does  not  exist  in  call  centers."  says 
IVoplcSuppori's  Hossein.  Tf  anyone 
thinks  that  buying  this  tool  and  in¬ 
stalling  it  is  going  to  solve  their  prob¬ 
lem.  thex  're  wrong.  'V'ou  ni-ed  a  work¬ 
force  managemeni  te.im  committed  to 
enforcing  policies  and  pnvedures  and 
ensuring  that  agents  .idhere  to  breaks 
and  other  activities  " 

Accurate  forecasting  is  another  is¬ 
sue.  says  tJartner's  Close.  "There  can 
be  a  lot  of  complexity  in  colleiting  his¬ 
torical  data  for  forecasting.  You  might 
be  forecasting  for  multiple  sites  and 
multiple  skill  sets.  And  lor  contact  cen¬ 
ters.  you're  not  fusi  loreco-sting  call 
volume,  but  lalsti)  e-mail.  Web  chai 
and  even  walk-ins."  she  sa)'s. 

Schedule  ftweasttng  can  mean  the 
difference  betwe^-n  keeping  and  Iming 
customers,  says  Hossein.  But  for  his 
company,  it  w  as  a  nsk  that  had  to  be 
taken.  "Hecause  we’re  in  the  coniaei 
center  and  CRM  business,  workforce 
management  moans  the  difference  be¬ 
tween  making  money  and  losing  it."  be 
SUV’S.  “Wc  must  constant))'  balance 
workforce  efficiency  with  high  serx  icc 
kwels."  • 

Gt/fjooley  b  u/rei’/ance  writer  in  Fal¬ 
mouth.  Maine.  >’o«  cun  rixjch  her  ut 
kymgu  mtfine.rr.com. 
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IT  Security  Confronts 
New  Legal  Liabilities 

Upoiming  legdsrtion  and  changing  ttweats 
prompt  our  cautious  security  manager  to 
double-check  the  corporate  Babiiity  policy. 

By  Mathias  Thurman 


WORD  of  upcomiiig 
security-related 
legislation  and  a  re¬ 
cent  security  ixici- 
dent  at  my  company  have 
prompted  me  to  investigate 
cyberinsuraoce.  1  had  to  re¬ 
view  how  well  my  organiza¬ 
tion  is  positioned  to  deal  with 
a  lawsuit  or  the  need  to  file  a 
claim  as  a  result  of  a  cyberse- 
curity  incident. 

LiJm  many  security 
professionals.  I  have 
been  so  focused  on 
keeping  up  with  the 
fast -changing  IT  se¬ 
curity  landscape  that 
I  haven’t  thou^t 
much  about  how  those 
changes  affect  potential  in¬ 
surance-related  issues  at 
my  company. 

For  example,  in  CaUfomia, 
Senate  Bill  1386  will  become 
law  next  month.  It  will  require 
companies  to  disclose  to  con¬ 
sumers  any  event  in  which 
data  pertaining  to  them  was 
possibly  con^romised  as  a  re¬ 
sult  of  a  security  breach.  Un¬ 
der  SB  1386,  not  only  Califor¬ 
nia  companies  will  be  required 
to  notify  customers  of  security 
breaches;  any  company  that 
does  business  in  California  will 
have  to  disclose  security 
breaches  to  California  cus¬ 
tomers.  So  if  your  business  is 
located  in  Boston  or  New  York 
and  you  have  customers  In 
California,  you  will  have  to 
con^>ly  with  this  law. 

Rossibie  Loopholes 

I'm  told  that  there  are  several 
loopholes  in  this  bill  that  give 
us  some  flexibility  and  protec¬ 
tion.  For  example,  the  law  will 
apply  to  instances  when  a  cus¬ 
tomer’s  data  is  “reasonably 


believed"  to  have  been  com¬ 
promised.  In  my  experience, 
any  time  that  phrase  is  used, 
there  is  room  for  interpreta¬ 
tion.  The  term  reasonable 
seems  to  take  on  different  in¬ 
terpretations  depending  on 
whom  you  talk  ta  Even  so,  de¬ 
fending  interpretations  favor¬ 
able  to  our  company  in  coun 
could  require  an  army  of 

lawyers  and  lots  of 
time  and  money. 

Another  loophole 
involves  a  possible 
exception  if  the 
stolen  customer 
data  was  stored  in 
encrypted  form.  My 
company  keeps  all  of  its  cus¬ 
tomer  data  in  an  encrypted 
Oracle  database. 

Of  course,  the  bill  doesn't 
specify  the  type  of  encryption. 
It  could  be  weak  or  strong.  So 
the  question  becomes  this;  If  a 
hacker  is  able  to  compromise 
a  data  store  and  decrypt  the 
data,  does  that  require  disclo¬ 
sure?  And  how  do  you  know 
whether  the  hacker  did  in  fact 
decrypt  it? 

There’s  also  a  provision  that 
says  a  company  doesn’t  have 
to  disclose  a  breach  if  a  law 
enforcement  investigation  or 


Defending ...  our 
company  in  court 
could  require  an 
army  of  lawyers 
and  lots  of  time 
and  money. 


inquiry  is  under  way.  Such  in¬ 
vestigations  can  last  for  years. 

Besides  situations  involving 
the  new  CaUfomia  law,  there 
are  other  instances  when  we 
might  want  to  file  an  insur¬ 
ance  claint 

Recently,  an  employee,  prior 
to  leaving  the  company,  creat¬ 
ed  several  new  accounts  on  a 
I  huge,  publicly  accessible  FTP 
server  that  serviced  some  400 
user  accounts.  He  also  config¬ 
ured  one  of  the  accounts  to 
have  administrative  privileges 
and  then  created  a  trust  rela¬ 
tionship  between  the  FTP 
server  and  another  server.  Tlie 
latter  had  direct  access  to  a 
database  server  housing  cus¬ 
tomer  credit  card  data.  By 
simply  logging  into  the  FTP 
server,  be  could  have  accessed 
the  database  server  and 
copied  the  sensitive  data. 

Fortunately,  we  discovered 
the  breach  shortly  after  the 
employee  left  during  a  routine 
audit  that  included  a  review  of 
administrative  privileges.  Our 
investigation  showed  that  no 
customer  data  had  been  com¬ 
promised.  but  the  incident 
gave  us  enough  of  a  scare  to 
take  a  new  look  into  the  issue 
of  cyberinsurancc. 

No  Publicity,  Please 

Even  if  we  could  catch  the 
perpetrator,  my  company,  like 
others,  would  be  disinclined 
to  try  to  prosecute  and  recov¬ 
er  damages.  I  had  wanted  my 
company  to  take  legal  action 
against  the  former  employee, 
but  management  didn't  want 
the  publicity  that  would  have 
resulted.  And  even  if  we  had 
prosecuted,  it  would  have 
been  hard  to  prove  that  this 
individual  actually  conducted 
the  unauthorized  activity.  Yes, 
his  account  was  used,  but  we 
would  have  had  to  show  that 
be  performed  the  keystrokes 
to  gain  unauthorized  access  to  I 
the  backdoor  accounts.  I 


When  a  user  has  adminis¬ 
trative-level  privileges  on  a 
system,  he  has  the  ability  to 
make  my  life  miserable.  In  this 
case,  he  could  have  deleted 
the  entire  dat^ase,  causing 
significant  downtime  and  seri¬ 
ous  monetary  losses. 

In  fact,  had  he  done  so,  we 
would  have  lost  a  lot  of  rev¬ 
enue  during  the  time  it  would 
have  taken  to  rebuild  or  re¬ 
store  the  data.  Our  e-com¬ 
merce  site  generates  more 
than  SI  billion  per  year  in  on¬ 
line  transactions.  We  do  repli¬ 
cate  the  site  to  minimize 
dowmtime,  but  this  trusted  ad¬ 
ministrator  could  have  taken 
down  both  sites  if  he  wanted 
to.  Depending  on  the  extent  of 
the  damage,  it  could  have  tak¬ 
en  our  IT  team  more  than  six 
hours  to  resolve  the  problem. 
That  could  add  up  to  a  poten¬ 
tial  seven-figure  loss.  To  re¬ 
coup  losses  in  such  situations, 
it  might  be  prudent  to  be  able 
to  rUe  an  insurance  claim. 

I  made  some  inquiries  to 
our  legal  department  and.  for¬ 
tunately,  we  do  have  a  cyber¬ 
security  clause  in  our  policy 
that  covers  loss  as  a  result  of 
dishonest  or  criminal  acts  by 
our  employees.  In  this  sce¬ 
nario.  even  though  the  em¬ 
ployee  was  terminated  before 
accessing  our  infrastructure, 
the  fact  that  he  was  an  em¬ 
ployee  when  he  created  a  back 
door  into  our  system  meant 
we  would  have  been  covered. 
Now  we  just  have  to  worry 
about  the  potential  saboteurs 
we  don't  employ.  I 


WIUTDOYOIITIIIIK? 

The  ¥feek's  iounal  is  wMten  by  a  real 
security  nanager.  'Mathias  Thjnnan.' 
whose  name  and  employer  have  been 
(ksguised  lor  obvKXB  reasons  Contact  Nm 
at  m8thi8S.lhiman9yahoo.com.  or  |oin  the 
discussm  in  our  forum:  QuickUnk  a1590 


To  find  a  complete  archive  of  our 
Security  Manager's  Journals,  go  online  to 
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TOMMY  PETERSON 


Coping  With  Infcglut 


I  HE  INTERNET  HAS  BURIED  companies 
under  a  mudslide  of  unstructured  data. 
One  of  the  most  pressing  problems  facing 
IT  is  how  to  turn  all  that  data  that  won’t  fit 
into  rows  and  columns  into  useful  infor- 


mation.  And  while  the 
amount  of  unstructured 
data  is  growing  exponen¬ 
tially.  the  toob  for  dealing 
with  it  haven't  kept  pace. 

The  magnitude  of  the 
deluge  b  staggering.  Ap¬ 
proximately  85%  of  all  digi¬ 
tal  business  information  ex- 
bts  only  as  unstructured 
data,  according  to  research 
by  Merrill  Lynch.  Most  of 
that  comes  from  the  in¬ 
creasing  use  of  the  Web  as 
an  internal  and  external 
business  channel 

The  majority  of  unstructured  data 
consists  of  text  documents.  Some  of 
those,  such  as  memos,  letters,  market¬ 
ing  materiab  and  research  documenta¬ 
tion,  have  presented  a  storage  and  re¬ 
trieval  prc^lem  in  business  since  bc- 
foi^  there  was  digital  media.  And  now. 
in  addition  to  those  documents,  there 
are  e-mail  messages,  customer  queries 
and  responses  from  sales  and  support 
representatives  generated  by  CRM 
applications,  user  group  postings 
and  chat  messages,  as  well  as  images, 
movies  and  Web  pages  with  their 
hyperlinked  information. 

E-mail  alone  has  burgeoned:  market 
research  firm  IDC  predicts  that  there 
will  be  more  than  <M)  billion  messages 
sent  annually  by  2006.  And  besides  the 
business  imperative  to  take  control  of 
the  organization's  knowledge  base,  fed¬ 
eral  regulatory  initiatives  increase  the 
pressure  on  companies  to  both  archive 
e-mail  and  develop  a  way  to  research 
the  content  of  the  messages. 

The  other  15%  of  all  business  infor¬ 
mation  ~  the  structured  data  that  gen¬ 
erally  resides  neatly  in  spreadsheets 
and  databases  —  b  being  sliced,  diced, 
mass^ed  and  squeezed  for  every  bit  of 
business  intelligence  it  will  yield.  Tech¬ 
nologies  to  address  unstructured  data 
can't  match  the  fimctionality  of  these 


real-time  analytics  for 
structured  data,  and  users 
have  been  slow  to  adopt 
them,  nm  Berners-Lee.  the 
Web's  primary  architect, 
has  famously  observed  that 
most  of  the  information  on 
Che  Web  b  designed  for  hu¬ 
man  consumption  and  re¬ 
sists  being  organized  or  an¬ 
alyzed  by  any  automated 
process. 

What  do  companies  lose 
by  not  having  the  means  to 
use  unstructured  data?  Em¬ 
ployees'  time  for  one  thing  —  recent 
studies  indicate  that  information  work¬ 
ers  spend  as  much  as  a  quarter  of  their 
time  just  finding  and  gathering  job- 
related  information.  Nuanced  informa¬ 
tion  about  trends  and  customer  atti¬ 
tudes  for  another. 

Vendors  recognize  both  the  chal¬ 
lenge  and  the  opportunity  presented  by 
unstructured  data.  When  recently 
asked  what  the  next  big  thing  in  busi¬ 
ness  intelligence  and  data  warehousing 
would  be,  Don  Hatcher.  SAS  Institute's 
vice  president  of  technology  strategy, 
answered  emphatically,  "Unstructured 
[data],  without  a  doubt.  We're  working 
on  it.  and  Tm  sure  the  other  [compet¬ 
ing]  companies  are.  too.” 

SAS  wUl  try  to  make  unstructured 
data  a  part  of  its  customers'  ‘'predictive 
process  "  Hatcher  said.  The  company  b 
also  "engaging  thought  leaders  in  the 
space"  as  it  maps  its  route  into  the  un¬ 
structured  market.  Of  course.  SAS  and 
the  other  business-intell^nce  and  an¬ 
alytics  vendors  haven’t  exactly  discov¬ 
ered  a  new  frontier. 

Search  has  been  the  traditional  way 
to  manage  and  mine  unstructured  data, 
especially  text-based  documents.  The 
most  fruitful  techniques  go  well  be¬ 
yond  the  simple  keyword  queries  most 
of  us  type  into  Goo^e  or  Yahoo  several 
times  a  day.  Full-text  searches,  which 


began  as  a  tool  for  the  intelligence  and 
library  communities,  have  been  around 
for  decades  —  for  almost  as  long  as 
there  have  been  digital  documents. 

Search  technology  companies  are  re¬ 
fining  their  products  by  adding  natur¬ 
al-language  search  capability:  stem¬ 
ming.  which  removes  common  suffix¬ 
es;  and  spelling  correction.  They’re 
also  using  metadata  fields  to  narrow 
and  focus  searches  by  adding  context 
to  individuat  queries. 

Vendors  such  as  Verity.  Autonomy. 
Stratify  and  Inxight  offer  software  that 
automates  the  classification  process 
and  maintains  taxonomies,  as  well  as 
discovery  systems  that  generate  meta¬ 
data  from  documents  and  allow  users 
to  dig  through  the  hierarchical  layers. 
The  big  content  management  vendors 
are  making  the  direct  link  to  business 
intelligence  when  they  describe  their 
search  and  classification  offerings  as  ' 
"content  intelligence." 

The  big  surprise,  given  the  volume  of 
unstructured  data  piling  up  in  every 
modem  company,  is  corporate  IT's  lack 
of  urgent  interest  in  the  problem.  Data 
warehousing  and  business-intelligence 
projects  are  generally  surviving  the 
lousy  economy  more  successfully  than 
most  technology  initiatives.  That's  be¬ 
cause  companies  have  been  won  over 
to  the  notion  that  the  more  they  can 
learn  from  the  data  in  their  various 
databases  and  other  structured  reposi¬ 
tories,  the  better  off  they'll  be  in  good 
times  and  in  bad. 

But  those  companies  have  yet  to  be 
convinced  that  they  have  the  same 
need  to  exploit  unstructured  data. 

Some  foot-dragging  b  understandable. 
Resources  are  in  short  supply.  Catch- 
phrases  like  content  intelligence  stir 
memories  of  the  knowledge  manage¬ 
ment  hype  that  fizzled  so  miserably. 

But  the  problem  is  only  getting  big¬ 
ger.  and  the  technologies  that  help  us 
manage  unstructured  data  and  turn  it 
into  information  are  going  to  become 
increasingly  important.  If  you  don't  be¬ 
lieve  it,  go  check  your  e-mail  in-box.  I 
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BOOK  EXCERPT 

Reei^ineering  Revisited 

mriven  process  reengineering 
all  the  rage  in  the  1990s  and 
ell  out  of  favor.  it  come  back? 

This  excerpt  from  the  book  What’s 
the  Big  Idea?  explains  all  P8Q0  48 


Outsourcers: 

Do  They  Measure  Up? 

An  increasii^  number  of  IT 
outsourcing  customers  are  using 
benchmarking  and  baselining 
tests  to  keep  costs  from  escalat* 
ii^  out  of  control  Page  52 


Columnist  Paul  Glen  says  the  key  to 
keeping  protects  on  schedule  is  to 
require  "microdeliverables*’  from 
each  person,  every  week.  PlQt  54 


ITS  HARD  TO  PLACE  a  Value 
on  knowledge  management 
systems.  Their  ability  to 
generate  income  is  often 
measured  indirectly;  their 
links  to  cost  saving  fre¬ 
quently  seem  tenuous.  The 
return  on  investment  is  hard 
to  quantify.  Too  often,  the  case  for  im¬ 
plementing  a  system  to  leverage  intel¬ 
lectual  capital  and  expertise 
rests  mainly  on  intuition:  It 
seems  like  a  good  idea. 

But  intuition  wasn’t  nearly 
enough  to  sell  executives  at 
Intec  Engineering  Partnership  Ltd.,  a 
company  whose  dedication  to  thrift  is 
exceeded  only  by  its  passion  for  shar¬ 
ing  knowledge. 

Intec  is  ba^  in  Houston  and  has  of¬ 
fices  in  Argentina,  Chile,  Bolivia,  Eng¬ 
land,  the  Netherlands,  Malaysia  and 
Australia.  TTie  privately  held  S80  mil¬ 
lion  engineerii^  and  project  mam^- 
ment  company  serves  the  international 
oil  and  gas  industry.  Its  SOO-pIus  em¬ 
ployees  specialize  in  marine  pipelines, 
terminals  and  facilities.  Clients  include 
BP  PLC,  Exxon  Mobil  Corp.  and 
CbevronTexaco  Corp. 

CIO  Fran  Steele  says  Intec’s  culture 
is  “extremely  collaborative,”  having 


neers,  later  dubbed  the  Learning  Team, 
volunteered  to  worit  on  the  problem  of 
how  to  better  capture  lessons  learned 
and  share  knowledge  among  Intec  en¬ 
gineers.  They  diagramed  how  they 
solved  engineering  problems  and  envi¬ 
sioned  an  ideal  process:  An  engineer 
with  a  question  would  go  to  a  knowl¬ 
edge  database  that  would  either  |ho- 
vide  an  answer  or  refer  him  to  an  ex¬ 


pert.  All  new  knowledge  would 
be  automatically  captured  and 
stored  in  the  databs^ 

The  Learning  Team  decided 
that  any  technology  to  assist  this 
process  had  to  integrate  existii^ 
kno«dedge  resources,  automatically 
find  experts,  capture  results  for  reuse, 
facilitate  the  identification  of  best 
practices  and  provide  a  quick  and  easy 
user  interim.  Administimion  had  to 
be  minimal.  “I  wanted  something  that 
would  not  cost  any  more  time  of  the 
people  askif^  questions  and  answer¬ 
ing.”  says  Willem  Tunmmnans.  presi¬ 
dent  and  CEO  Intec  And  ROI  bad  to 
be  clear  from  the  start 
ITie  Learning  Team  shopped  around 
and  selected  software  from  AskMe 

Continued  on  page  44 


If  we  can  cut 
weeks  off  a  proj- 
i-ci  and  help  [a  cus¬ 
tomer]  qel  to  mar¬ 
ket  sooner  That’s 
(Ire  ultimate  value. 


Time  is  big  money  at  Intec  Engineering,  which 
posted  a  first-year  ROI  of  133%  with  a  knowledge¬ 
sharing  system.  By  Kathleen  Melymuka 


grown  from  four  partners  in  one  room 
sharing  knowledge  using  3-by-5  cards 
indexed  by  keywords.  “It’s  a  culture  of 
sharing  information,  with  a  strong  bias 
against  bureaucracy  and  anything  that 
might  constrain  creativity.”  she  says. 

During  2002,  as  Intec  grew  thiou^ 
expansion  and  international  acquisi¬ 
tions.  it  was  becoming  more  difTicult  to 
keep  track  of  and  access  information. 
Intec  wasn’t  alone.  According  to  KPMG 
International  six  out  of  10  employees 
say  diflTiculty  in  accessing  undocument¬ 
ed  knowledge  —  such  as  the  know-how 
people  carry  around  in  their  beads  and 
information  that  may  be  in  documents 
scattered  across  a  company  —  is  a  ma¬ 
jor  problem.  Framingh^  Mass.-based 
IDC  estimates  that  the  average  Fortune 
500  company  will  spend  $64  million  on 
redundant  efforts  this  year. 

Early  last  year,  a  group  of  Intec  engi- 
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From  servers  to  service,  Dell  has  the  solution. 


Dell  I  Small  and  Medium  Business 

Your  business  has  unique  needs.  It  deserves  a  unique  solution  From  PowerEdge''  servers  featuring  Intel'  Xeon'’ 
processors  to  PowerVault"  Storage  and  PowerConnect”  Network  Switches,  we  offer  tailored  solutions  to  meet  your 
business  needs.  And  of  course  it's  Dell,  so  you  know  you're  getting  the  latest  technology  But  that's  only  half  of  the  story, 
Dell  offers  consulting  services  that  range  from  deployment  and  installation  to  training  and  certification.  All  from  one 
source.  And  everything  is  backed  by  thousands  of  service  and  support  people  at  your  beck  and  call,  on-site,  online  and  on 
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Conrinurd  from  page  41 
Corp.  in  Bellevue.  Wash.,  as  the  prod¬ 
uct  most  likely  to  focilitate  Intec's 
problem-solving  model.  AskMe  agreed 
to  customize  a  three-month,  large-scale 
pilot  of  the  system  for  250  engineers. 

The  actual  cost  of  Intec's  system  is 
proprietary,  but  Dan  Wright.  \ice  pres¬ 
ident  of  field  operations  at  AskMe. 
says  the  average  pilot  includes  750 
users  at  a  cost  of  more  than  SIOO.OOO. 
The  application  starts  at  %27S  per  seat, 
with  volume  discounts  beginning  at 
500  seats.  There  is  also  an  18%  annual 
maintenance  fee. 

AskMe  integrated  its  Web-based 
software  and  search  engine  with  infor¬ 
mation  repositories  including  75.000 
technical  documents,  Intec's  existing 
skills  and  certification  databases,  and 
Lightweight  Directory  Access  Protocol 
files  of  individuals'  names,  titles,  loca¬ 
tions.  e-mail  addresses  and  photos. 

ROI  Metrics 

The  Learning  Team  and  AskMe  devel¬ 
oped  a  set  of  mefrics  that  would  be 
used  to  determine  whether  Intec  would 
purchase  the  AskMe  software  after  the 
pilot  The  metrics  included  amount  of 
activity  on  the  system  (virits,  unique 
visitors,  expert  profiles  viewed,  ques¬ 
tions  asked,  unique  questions  asked, 
answers  given  and  average  response 
time,  for  example),  kinds  of  knowledge 
captured  (such  as  questions  answered, 
technical  documents  and  best  prac¬ 
tices),  system  performance  and,  most 
important,  user  feedback  and  ROI. 

The  team  agreed  that  qualitatively, 
knowledge  management  is  about  shar¬ 
ing  knowledge,  but  quantitatively,  it's 
about  saving  time.  So  RO!  would  be 
about  time  saved  and  putting  a  value 
on  it  (see  box  above). 

The  pilot,  called  Asklntec.  began  in 
May  20OZ.  Three  months  later,  it  had 
exceeded  all  the  performance  and  user 
metrics,  and  ROI  calculations  project¬ 
ed  an  annual  return  of  133%. 

After  nearly  a  year,  the  system  is 
paying  off  almost  exactly  as  projected. 


“Our  numbers  were  pretty  spot-on,  but 
they're  going  up."  Steele  says,  noting 
that  the  company  estimates  payback  of 
50%  more  next  year  as  nonengineering 
employees  are  added  and  the  system 
becomes  embedded  in  the  culture. 

Actual  savings  are  higher  than  the 
ROI  figures  indicate,  she  adds.  An  an¬ 
swered  question,  for  example,  often 
turns  out  to  be  worth  much  more  than 
the  Learning  Team’s  estimate  of  saving 
30  minutes,  as  senior  project  engineer 
David  Raby  demonstrated  while  work¬ 
ing  in  Perth.  Australia.  Raby  had  an  es¬ 
oteric  question  about  deep-water 
pipelines.  Before  Asklntec,  getting  an 
answer  would  have  required  accessing 
the  library  in  Houston,  ordering  mate¬ 
rials  and  having  them  sent  through  the 
mail.  “I  might  have  got  the  wrong  stuff 
or  needed  additional  stuff,  and  it  could 


go  back  and  forth  for  weeks,"  he  says. 
“And  I  still  wouldn't  necessarily  have 
the  information  I  was  looking  for."  Us¬ 
ing  Asklntec,  he  got  10  answers  in  a 
day.  saving  about  three  weeks'  worth  of 
effort,  he  says. 

David  Myers,  a  charter  member  of 
the  Learning  Team  who  is  now  Intec’s 
knowledge-sharing  manager,  is  work¬ 
ing  to  sharpen  the  system’s  ROI  met¬ 
rics.  A  current  upgrade  will  include  an 
ROI  engine  that  will  ask  users  to  esti¬ 
mate  time  saved  on  the  spot  rather 
than  using  formulas. 

There  are  those  who  question  mea¬ 
suring  time  saved  as  an  approach  to 
ROI.  “If  I  could  save  every  worker  15 
minutes,  I  could  say  I’m  saving  mil¬ 
lions,  but  does  that  time  really  go  back 
to  something  productive?”  asks  Mike 
Gotta,  an  analyst  at  Meta  Group  Inc. 


It’s  better  to  measure  improvement  in 
outcomes  such  as  a  decrease  in  defects 
or  a  quicker  turnaround,  he  says. 

More  Than  Numbers 

Process  metrics  are  difficult  to  imple¬ 
ment  at  Intec  because  each  engage¬ 
ment  is  unique,  but  the  company  is 
looking  at  process  results  anecdotally. 
“Some  of  the  return  on  information  is 
not  quantified  just  by  how  quickly  you 
can  do  something,  but  by  the  fact  that 
you  can  do  it  at  all.”  Steele  says. 

For  example,  during  an  engagement 
last  year  in  Beijing,  senior  project 
manager  Julio  Daneri  found  that  Chi¬ 
nese  pipeline  codes  specified  certain 
design  parameters  that  his  client  didn't 
want  to  use.  Daneri  used  Asklntec  to 
query  colleagues  on  cases  where  com¬ 
panies  had  successfully  circumvented 
national  specifications,  (^ick  replies 
from  engineers  on  three  continents  en¬ 
abled  him  to  build  a  case  for  using  dif¬ 
ferent  specifications,  vrithout  which 
his  client  wouldn't  have  been  able  to 
compete  for  the  project. 

The  system  is  also  improving  Intec’s 
sales  process.  Timmermans  recounts 
that  a  prospective  customer  in  Australia 
was  skeptical  about  the  local  office's 
ability  to  draw  on  Intec's  expertise  all 
over  the  world.  Intec  invited  him  to 
pose  a  difficult  question,  which  the  In¬ 
tec  engineer  put  into  the  system.  "The 
next  morning  they  had  four  very  rele¬ 
vant  answers."  Timmermans  recalls. 
“We  dazzled  the  client." 

In  the  end,  customers  profit  from  In- 
lec’s  knowledge  management  invest¬ 
ment,  Steele  says,  explaining  that  a 
typical  oil  facility  can  produce  millions 
of  dollars  per  day  in  revenue.  “If  we 
can  cut  weeks  off  a  project  and  help 
them  get  their  facility  ready  earlier, 
they  can  get  to  market  sooner  and  get 
that  revenue  earlier,"  she  says.  “That’s 
the  ultimate  value."  I 

Melymuka  is  a  Cfomputerworld 
comriburing  writer.  Contact  her  at 
kmetymuka@yahoo.com. 
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What  went  wrong  with 
the  business-process 
reengineering  fad.  And 
will  it  come  back?  By 
Thomas  H.  Davenport 
and  Laurence  Prusak, 
with  H.  James  Wilson 


WHAT'S 

®'C|DEA? 


At  its  HKiGH  r,  business-process 
reengineering  was  one  of  the 
biggest  business  ideas  ever. 
Business  historians  of  the  fu¬ 
ture  will  characterize  the  WOOs 
as  the  decade  of  reengineering. 
Described  in  more  than  25  boc»ks.  fea¬ 
tured  in  articles  in  every  major  busi¬ 
ness  publication,  discussed  at  hun¬ 
dreds  of  conferences,  reengineering 
penetrated  ever>'  continent,  with  the 
possible  exception  of  Antarctica. 

Reengineering  became  a 
money  machine  for  several  of 
its  constituents:  the  gurus  who 
propounded  the  idea  (at  least  a 
couple  of  them!),  the  consult¬ 
ing  firms  that  offered  reengineering 
ser\  ices  to  their  clients,  and  the  soft¬ 
ware  vendors  who  managed  to  con¬ 
vince  firms  that  their  wares  were  criti¬ 
cal  to  successful  reengineering.  Unfor¬ 
tunately,  the  idea  didn’t  enrich  those 
who  were  most  responsible  for  its 
birth  and  continued  life  within  organi¬ 
zations:  the  faithful  practitioners. 

These  individuals  played  their  custom¬ 
ary-  heroic  roles  on  the  reengineering 
stage,  but  others  got  all  the  credit. 

Reengineering  Defined 

R»?engineering  today  means  different 
things  to  different  people.  In  the  early 
writings  on  reengineering,  however, 
there  was  substantial  consensus  that 
reengineering  incorporated  the  follow¬ 
ing  ideas: 

•  Radical  redesign  and  improvement 
of  work. 

■  Attacking  broad,  cross-functional 
business  processes. 

•  “Stretch"  goals  of  ordcr-of-magni- 
tude  improvement. 

•  The  use  of  IT  as  an  enabler  of  new 
ways  of  working. 

In  the  general  business  audience, 
however,  other  meanings  proliferated. 
To  some,  reengineering  came  to  mean 
any  attempt  to  chaise  how  work  is 


done  —  even  incremental  change  of 
very  small  processes.  To  others,  it  be¬ 
came  a  code  word  for  downsizing.  The 
latter  meaning  wasn’t  really  fair,  since 
none  of  the  original  literature  on 
reengineering  had  stressed  that  objec¬ 
tive.  It  was  a  somew'hat  cynical  adop¬ 
tion  of  the  word  by  senior  e.xecutives 
(and  their  communications  staffs)  that 
brought  this  meaning  into  being. 

We  still  remember  the  first  time  the 
reengineering-as-downsizing  notion 
appeared  in  the  press.  In  1995, 
Pacific  Bell  announced  that  it 
was  cutting  10.000  employees. 
Because  of ‘'reengineering.’’  it 
didn't  need  them  anymore,  the 
press  release  said.  We  were  conducting 
some  research  at  Pac  Bell  at  the  time, 
and  we  knew  that  although  the  compa¬ 
ny  was  doing  some  reengineering,  it 
certainly  wasn’t  far  enough  along  for 
anyone  to  know  how  many  people  (if 
any)  would  be  freed  up.  Shortly  there¬ 
after.  Apple  Computer  Inc.  armounced 
a  similar  reduction  using  the  "R  word." 
Wo  were  also  familiar  enough  with 
that  company  to  know  that  it  wasn't 
true  reengineering. 

What  happened  to  the  term  reengi- 
neerirtg  is  typical  of  the  proliferation 
of  meanings  that  accompanies  any 
successful  new  business  idea.  Consul¬ 
tants.  middle  and  senior  managers, 
and  vendors  had  lots  of  incentives  to 
jump  on  the  reengineering  bandwag¬ 
on.  Experts  in  continuous  improve¬ 
ment.  systems  analysis,  industrial  en¬ 
gineering  and  cycle-time  reduction  all 
suddenly  became  experts  in  reengi¬ 
neering.  We  once  heard  a  staffer  from 
the  California  legislature  say  that 
reengineering  was  “any  project  I  want 
to  get  funded." 

Of  course,  saying  that  all  these  di¬ 
verse  activities  were  forms  of  reengi¬ 
neering  raised  expectations  for  the 
concept  and  no  doubt  hastened  its 
demise.  The  late  adopters  of  the  term 


dropped  it  rapidly  as  soon  as  it  be¬ 
came  unpopular. 

Where  did  reengineering  go  astray? 
Like  any  other  business  idea,  reengi¬ 
neering  had  to  be  bought  by  compa¬ 
nies  and  sold  by  business  gurus.  The 
failure  of  reengineering  can  be  attrib¬ 
uted  to  both  parties. 

Guru  Shortcomings 

A  key  factor  in  the  rise  of  reengineer¬ 
ing  was  Michael  Hammer’s  1990  Har¬ 
vard  Business  Review  article  on  reengi¬ 
neering  ("Don’t  Automate.  Obliterate") 
and  the  subsequent  book  Hammer  co¬ 
authored  with  Jim  Champy.  Reengi¬ 
neering  the  Corporation.  These  two 
sources  made  reengineering  look  both 
appealing  and  easy.  But  in  late  1996.  a 
front-page  Wai/  Street  Journal  article 
featured  a  confession  by  Hammer  “Dr. 
Hammer  points  out  a  flaw;  He  and  the 
other  leaders  of  the  S4.7  billion  re-en¬ 
gineering  industry  forgot  about  people. 
‘I  wasn’t  smart  enough  about  that.’  he 
says.  'I  was  reflecting  my  engineering 
background  and  was  insufficiently  ap¬ 
preciative  of  the  human  dimension. 

I’ve  learned  that’s  critical.' " 

Hammer's  earlier  rhetoric  certainly 
neglected  the  human  element,  with 
phrases  such  as.  "In  reengineering,  w'e 
carry  the  wounded  and  shoot  the 
stragglers,"  and.  "It’s  basically  taking 
an  ax  and  a  machine  gun  to  your  exist¬ 
ing  organization."  TTiis  rhetoric  not 
only  made  employees  fear  for  their 
livelihoods;  it  also  raised  e.xpectations 
of  managers  for  revolutionar>’  changes 
that  couldn't  be  delivered. 

There  is  little  doubt  that  the  Ham¬ 
mer  and  Champy  version  of  reengi¬ 
neering  was  guilt>’  of  overblown 
rhetoric.  (Most  of  this  rhetoric  comes 
either  from  Hammer  or  from  ghost¬ 
writers;  Champy  is  more  genial  and 
mild-mannered.)  Both  in  Hammer’s 
1990  Harvard  Business  Review  article 
and  in  Hammer  and  Champy's  1993 
book,  the  claims  were  extravagant  and 
unsupported  by  fact.  The  book  cover 
suggests,  for  example,  that  “ex’erything 
you  thought  you  knew  about  business 
is  w'rong."  and  highly  simplistic  argu¬ 
ments  are  made  throughout. 

The  greatest  shortcoming  of  the 
Hammer  and  Champy  reengineering 
work  is  not  that  it  neglects  people  or 
that  it  employs  overblown  rhetoric,  but 
that  it  fails  to  acknowledge  how  diffi¬ 
cult.  time-consuming  and  expensive  it 
is  to  reengineer.  They  implied  that  one 
could  reengineer  an  entire  corporation 
in  as  tittle  as  a  year.  We  aren’t  suggest¬ 
ing  that  Hammer  and  Champy  inten¬ 
tionally  misled  anyone:  they're  both 

Continued  on  page  50 
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done  —  even  incremental  change  of 
very  small  processes.  To  otbers>  it  be¬ 
came  a  code  word  for  downsizing.  The 
latter  meaning  wasn't  really  (air.  since 
none  of  the  original  literature  on 
reengineering  had  stressed  that  objec¬ 
tive.  It  was  a  somewhat  cynical  adop¬ 
tion  of  the  word  by  senior  executives 
(and  their  communications  staffs)  that 
brought  this  meaning  into  being. 

We  still  remember  the  first  time  the 
reengineenng-as-dowosizing  notion 
appeared  in  the  press.  In  1995, 
Pacific  Bell  announced  that  it 
was  cutting  10.0(M)  employees. 
Because  of  "reengineering.’*  it 
didn't  need  them  anymore,  the 
press  release  said.  We  were  conducting 
some  research  at  Pac  Bell  at  the  time, 
and  we  knew  that  although  the  compa¬ 
ny  was  doing  some  reengineering,  it 
certainly  wasn't  far  enough  along  for 
anyone  to  know  how  many  people  (if 
any)  would  be  freed  up.  Shortly  there¬ 
after.  Apple  Computer  Inc.  announced 
a  similar  reduction  using  the  "R  word." 
We  were  also  (amiliar  enough  with 
that  company  to  know  that  it  wasn't 
true  reengineering. 

What  happened  to  the  term  reengi¬ 
neering  is  typical  of  the  proliferation 
of  meanings  that  accompanies  any 
successful  new  business  idea.  Consul¬ 
tants,  middle  and  senior  managers, 
and  vendors  had  lots  of  incentives  to 
jump  on  the  reengineering  bandwag- 
oa  Experts  in  continuous  improve¬ 
ment,  systems  analysis,  industrial  en¬ 
gineering  and  cycle-time  reduction  all 
suddenly  became  experts  in  reengi¬ 
neering.  We  once  beard  a  staffer  from 
the  (Olifomia  legislature  say  that 
reengineering  was  “any  project  I  want 
to  get  funded.” 

Of  course,  saying  that  all  these  di¬ 
verse  activities  were  forms  of  reengi¬ 
neering  raised  expectations  for  the 
concept  and  no  doubt  hastened  its 
any  attempt  to  change  how  work  is  t  demise.  The  late  adopters  of  the  term 


At  its  height,  business-process 
reengineering  was  one  of  the 
biggest  business  ideas  ever. 
Business  historians  of  the  fu¬ 
ture  will  characterize  the  1990$ 
as  the  decade  of  reengineering. 
Described  in  more  than  25  books,  fea¬ 
tured  in  articles  in  every  major  busi¬ 
ness  publication,  discussed  at  hun¬ 
dreds  of  conferences,  reengineering 
penetrated  every  continent,  with  the 
possible  exception  of  Antarctica. 

Reengineering  became  a 
money  machine  for  several  of  |'i|]| 
its  constituents:  the  gurus  who 
propounded  the  idea  (at  least  a 
couple  of  tbeml).  the  consult¬ 
ing  fums  that  offered  reengineering 
services  to  their  clients,  and  the  soft¬ 
ware  vendors  who  managed  to  con¬ 
vince  firms  that  their  wares  were  criti¬ 
cal  to  successful  reengineering.  Unfor¬ 
tunately.  the  idea  didn't  enrich  those 
who  were  roost  responsible  for  its 
birth  and  continued  life  within  organi¬ 
zations:  the  faithful  practitioners. 

These  individuals  played  their  custom¬ 
ary  heroic  roles  on  the  reengineering 
stage,  but  others  got  all  the  credit. 

Reengineering  Defined 

Reertgineering  today  means  different 
things  to  different  people.  In  the  early 
writings  on  reengineering,  however, 
there  was  substantia]  consensus  that 
reengiDeering  incorporated  the  follow- 
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dropped  it  rapidly  as  soon  as  it  be¬ 
came  unpopular. 

Where  did  reengineering  go  astray? 
Like  any  other  business  idea,  reengi¬ 
neering  had  to  be  bought  by  compa¬ 
nies  and  sold  by  business  gurus.  The 
failure  of  reengineerijig  can  be  attrib¬ 
uted  to  both  parties. 

GuniShoftcomings 

A  key  factor  in  the  rise  of  reengineer¬ 
ing  was  Michael  Hammer's  1990  Har¬ 
vard  Business  Review  article  on  reengi¬ 
neering  ("Don't  Autonme,  Obliterate") 
and  the  subsequent  book  Hammer  co¬ 
authored  with  Jim  Champy,  Reertgi- 
neering  the  Corporation-  These  two 
sources  made  reengineering  look  both 
appealing  and  easy.  But  in  late  1996,  a 
front-page  Wall  Street  Journal  article 
feattired  a  confession  by  Hammer  “Dr. 
Hammer  points  out  a  He  and  the 
other  leaders  of  the  S4.7  billion  re-en¬ 
gineering  industry  foigoc  about  people. 
T  tvasn't  smart  enough  about  that,'  he 
says.  ‘I  was  reflecting  my  engineering 
background  and  was  insufficiently  ap¬ 
preciative  of  the  human  dimension. 

I’ve  learned  that's  criticaL’ " 

Hammer's  earlier  rhetoric  certainly 
neglected  the  human  element,  urith 
phrases  such  as.  "In  reengineerii^  we 
carry  the  wounded  and  shoot  the 
stragglers,"  and.  “It’s  basically  taking 
an  ax  and  a  machine  gun  to  your  exist¬ 
ing  organization."  This  rhetoric  not 
only  made  employees  fear  for  their 
livelihoods;  it  also  raised  expectations 
of  manners  for  revolutionary  changes 
that  couldn’t  be  delivered. 

There  is  little  doubt  that  the  Ham¬ 
mer  and  Champy  version  of  reengi¬ 
neering  was  guilty  of  overblown 
rhetoric.  (Most  of  this  rhetoric  comes 
either  from  Hammer  or  from  ghost¬ 
writers;  Champy  is  more  genial  and 
mild-mannered.)  Both  in  Hammer's 
1990  Harvard  Business  Review  article 
and  in  Hammer  and  Champy’s  1993 
book,  the  claims  were  extrav^ant  and 
unsupported  by  fact.  The  boi^  cover 
suggests,  for  example,  that  “everything 
you  thought  you  knew  about  business 
is  wrong.”  and  highly  simplistic  argu¬ 
ments  are  made  throughout. 

The  greatest  shortcoming  of  the 
Hammer  and  Champy  reengineering 
work  is  not  that  it  n^ects  people  or 
that  it  employs  overblown  rhetoric,  but 
that  it  fails  to  acknowledge  how  diffi¬ 
cult,  time-consuming  and  expensive  it 
is  to  reengineer.  They  implied  that  one 
could  reengineer  an  entire  corporation 
in  as  little  as  a  year.  We  aren’t  suggest¬ 
ing  that  Hammer  and  Champy  inten¬ 
tionally  misled  anyone;  they’re  both 
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Continued  from  page  48 
honorable  men.  This  unfounded  opti¬ 
mism  was.  however,  a  major  factor  in 
the  rapid  rise  and  fall  of  reengineering. 
Inspired  by  the  book,  man^^rs  initiat¬ 
ed  proiects  with  high  expectations  of 
rapid  success.  But  when  they  encoun¬ 
tered  dilTicuities  and  slipping  project 
deadlines,  many  became  disenchanted 
and  dropped  their  projects. 

bnfriementation  noUems 

The  gurus  of  reengineering  made 
some  mistakes,  but  then  so  did  many 
of  the  practitioners.  First  of  all.  many 
managers  reinforced  the  numerous  er¬ 
rors  made  by  the  gurus.  They  focused 
too  much  on  process  and  not  enough 
on  practice  —  and  didn't  involve  the 
people  who  did  the  work.  Just  as  some 
irresponsible  writers  and  consultants 
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generated  exaggerated  rhetoric  and 
repackaged  ideas  in  reengineering,  so 
did  companies. 

Corporate  communications  depart¬ 
ments  teamed  with  senior  executives 
to  create  reengineering  programs  with 
names  like  Advantage  2000.  Program 
lOX  and.  perhaps  most  unfortunately. 
Project  Infinity.  They  predicted  radical 
improvements  well  ^fore  they  were 
achieved.  In  some  cases,  they  argued 
for  funding  by  calling  their  projects 
“reengineering."  The  worst  offense,  of 
course,  was  to  lay  off  people  and  digni¬ 
fy  the  act  as  reengineering. 

But  there  were  several  other,  more 
subtle  problems  with  how  companies 
implemented  reengineering.  One  is 
that  executives  turned  too  much  of 
their  initiatives  over  to  outside  firms 
—  both  consultants  and  vendors  of  en- 
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terprise  software  (such  as  ERP  sys¬ 
tems).  The  software  vendors  supplied 
a  relatively  easy  way  to  automate  a 
broad  range  of  business  processes  in 
an  integrated  fashion. 

Not  surprisingly,  the  managers  of 
reengineering  projects  flocked  to  the 
enterprise  software  vendors  such  as 
SAP  AG.  Oracle  (2orp.  and  PeopleSofl 
Inc.  and  wrapped  up  their  reengineer¬ 
ing  and  ERP  projects  into  one  inte¬ 
grated  change  program.  But  these  com¬ 
panies  probably  relied  too  heavily  on 
the  software  as  tbe  way  to  implement 
reengineering.  While  the  packages 
were  built  around  best  practices,  they 
were  generic  rather  than  specific  to  a 
particular  company's  needs.  Because  it 
was  difficult  to  modify  these  systems, 
most  firms  ended  up  with  tbe  same 
processes  and  information  support  as 
every  other  firm  in  their  industry. 
Reengineered  processes  were  supposed 
to  yield  competitive  advantage,  but  this 
was  impossible  with  heavy  reliance  on 
an  enterprise  software  package. 

Also,  many  corporate  reengineers 
took  on  too  much  change  at  once.  En¬ 
couraged  by  tbe  rhetoric  of  some  gu¬ 
rus.  they  tried  to  change  multiple 
processes,  information  systems,  orga¬ 
nizational  structure  and  sometimes 
even  business  strata  all  at  once.  Such 
all-encompassing  change  in  a  short 
time  ffame  is  difficult,  if  not  impossi¬ 
ble.  One  observer  npted  that  it  was 
akin  to  pilots  attempting  to  change  all 
the  engines  in  a  jet  airplane  at  once 
while  flying  through  the  sky.  It  may  be 
possible,  but  the  risk  of  failure  is  great. 
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The  Good  Stuff 

Despite  the  problems  with  the  reengi¬ 
neering  movement,  you  might  ask,  does 
it  have  any  ideas  worth  keeping?  You  bet. 

In  fact,  almost  all  the  ideas  within 
reengineering  have  substantial  merit 
when  used  in  moderation.  Certainly, 
firms  should  sometimes  address  broad, 
cross-functional  processes.  And  from 
time  to  time,  they  need  a  serious  kick 
in  the  pants. 

Sometimes  it’s  better  to  throw  a  bro¬ 
ken  process  away  altogether  and  start 
from  scratch  than  to  improve  it  incre¬ 
mentally.  And  IT  can  no  doubt  be  a  pow¬ 
erful  enabler  and  resh^ier  of  processes. 

The  key  is  to  also  remember  that 
reengineering  involves  risk.  Any  time 
an  organization  needs  radical  change 
to  deliver  the  results  it  needs,  it’s  more 
likely  to  fail  or  to  come  up  short. 

Like  baseball  players  who  swing  for 
the  fences  or  soccer  stars  who  take 
kicks  from  midTield,  they’ll  mics  their 
goal  most  of  the  time.  But  sometimes, 
desperate  moves  are  called  for.  I 
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Companies  are  using  i 
iDenaimarking  or  tiaselining  J 
teststomakesure they’re  /I 
not  paying  too  much  to  aJL 
outside  contractors.  ^  \ 


INFORMATION  ts POWER,  and  that's  especially  true 
in  IT  outsourcing  deals.  So  a  growing  number  of 
IT  executives  are  demanding  that  contracts  in* 
dude  clauses  that  enable  them  to  compare  the 
contractor’s  costs  and  service  levels  with  Indus* 
try  beochmarics  a  few  years  into  the  contract. 

A  bank,  for  example,  might  invoke  its  benchmark¬ 
ing  clause  three  years  into  a  data  center  outsourcing 
deal  to  make  sure  that  the  vendor  is  providing  main- 
hame  CPU  cycles  at  a  reasonable  cost. 

The  benchmarks  might  also  compare  the  amount 
of  downtime  the  bank  is  experiencing  to  industry 
averages,  the  size  and  duration  of  the  batch  proc¬ 
essing  runs,  and  other  measurements  to  gauge  the 
efficiency  of  the  service  provider. 

If  the  benchmaiking  tests  reveal  that  the  out¬ 
sourcer  is  charging  considerdily  higher  costs  for  its 
services  compared  with  industry  averages  or  is  Rul¬ 
ing  to  meet  other  service-level  agreements,  the  hank 
has  several  options.  It  could  elect  to  renegotiate  its 
contract  with  the  outsourcer,  invoke  the  fmancial 
penalties  in  the  contract,  bring  the  function  back 
in-house  or  bid  it  out  to  other  vendors. 

“If  we're  going  to  sign  long-term  agreements  with 
our  supplier  partners,  we  certainly  have  been  asking 
for  benchmarking  tests  to  be  implemented  into  the 
contracts  so  at  points  in  time  we  can  test  the  market¬ 
place."  says  Cathy  Brune.  chief  technology  officer  at 
Allstate  Insurance  Ca  in  Northbrook,  IlL 
One  benefit  is  that  if  there’s  a  sudden  drop  in  mar¬ 
ket  prices  for  a  particular  IT  function,  such  as  help 
desk  support,  “we’re  not  saddled  with  contracts 
where  we’re  being  charged  too  much."  Brxme  says. 

In  addition,  benchmarking  agreements  make  her 
more  comfortable  in  signing  longer-term  outsourc¬ 
ing  deals.  That  way,  “we’re  not  in  constant  chum  or 
constantly  rewoiking  contracts,"  she  adds. 

Brune’s  not  alone.  The  Hackett  Group,  an  At¬ 
lanta-based  n*  advisory  service  that  has  a  database 
of  nearly  2.000  benchmark  participants,  estimates 
that  it  has  seen  a  25%  to  33%  increase  in  the  number 
of  benchmaridng  clauses  written  into  outsourcing 
contracts  over  the  past  year,  says  director  Scott 
Holland.  “It’s  on  the  tip  of  everyone’s  tot^e," 
says  Holland. 

'The  outsourcing  contractors  don't  like  bench¬ 
marking  clauses,  though  they  often  feel  forced  to 
I  accept  them,  llie  problem  is  that  an  outsourcing 
I  contract  is  typically  front-loaded,  meaning  the  price 
I  is  low  in  the  first  two  years  to  give  customers  ^ 
ft  upfront  cost  savings  they’re  seeking,  but  then 
ft  climbs  in  the  third  and  fourth  years  so  the  contrac- 
make  a  profit 

Outsourcing  vendors  complain  that 
*  benchmarking  is  unfair  to  them  because 

iftll^^^ft  the  tests  single  out  a  period  vriiere 

they’ve  built  in  a  short-term  ’^iplift"  in 
to  cover  their  costs,  says  Rod  Hall, 
^^ice  president  of  consulting  at  Compass  North 
America  in  Chicago.  Moreover,  the  tests  don't  ade¬ 
quately  examine  costs  and  service  levels  over  the 
lifetime  of  a  contract,  he  adds. 

A  new  wrinkle  is  the  emergence  of  baselining  ser¬ 
vices.  Whereas  benchmaiking  takes  a  snapshot  of 
service  metrics,  baselining  compares  the  average 
costs  and  service  levels  through  the  life  of  a  contract 
Baselining  can  also  be  used  to  compare  the  year- 


ON  CONDUCTING  BASELINE  TESTS 


over-year  costs  and  the  efficiency  of  an  internal 
IT  department 

Vendors  obviously  see  baselining  as  the  fiurer 
approach.  And  some  customers  like  baselining  be¬ 
cause  it  gives  them  a  better  idea  of  the  average  costs 
they’re  payii^  over  the  life  of  a  contract  and  how 
those  compare  with  peer  and  vendor  averages. 

So  if  a  vendor’s  costs  and  service  levels  are  in  line 
with  industry  averages,  most  customers  would  be 
content  with  that  rather  than  going  through  the  ex¬ 
pense  and  headaches  of  negotiating  a  new  contract 
With  baselining  tests,  says  HalL  "a  customer  can 
determine  from  start  to  finish  if  this  is  a  reascmable 
contract  or  not." 

The  Ofishore  Component 

Interest  in  baselining  also  heated  up  as  more 
companies  have  started  to  send  software  develop¬ 
ment  and  maintenance  work  offshore  to  take  adC^- 
tage  of  lower  labor  rates. 

But  companies  aren’t  simply  using  baselining 
services  fm'  cost  comparisons,  says  Michael  Mah, 
a  senior  consultant  at  the  Cutter  Consortium  and  a 
partner  at  (^M  Associates  Inc.  in  Pittsfield.  Mass. 
The  metrics  can  also  be  used  to  keep  an  eye  on  off¬ 
shore  practices. 

Because  of  the  abundance  of  low-cost  program¬ 
mers  overseas,  some  offshore  providers  that  get 
paid  based  on  the  number  of  programmers  they  use 
will  try  to  place  extra  bodies  on  a  project  to  pump  up 
their  revenues,  according  to  Mah. 

“But  if  you  double  the  labor,  you  won't  double 
your  productivity,  and  sometimes  you  end  up  intro¬ 
ducing  more  software  errors  and  running  into  higher 
costs”  to  frx  them,  he  says. 

That’s  why  it’s  important  for  outsourcing  cus¬ 
tomers  to  examine  various  metrics,  including  the 
cost  per  function  point  to  produce  or  support  code, 
the  amount  of  functionality  being  deliver^  over 

a  period  of  time,  and  the  pro-  j - 

ductivity  of  programmers  UHKS 

and  development  teams,  says 
Mah.  TV  trick,  he 
knowing  which  metrics  are 

really  important.  I  iraw.eoin|Mlv«MfU.«m 
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AMR  Forecasts  ERP 
Software  Market 
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Big  Benefits  From 
icrodeliverables’ 


Too  OFTEN,  failing  projects  surprise  us. 

How  many  times  have  you  thought  a  proj¬ 
ect  was  going  along  fine  only  to  discover 
when  the  delivery  deadline  drew  near  that 
everyone  on  the  team  was  two  months  be¬ 
hind  schedule?  In  situations  like  that,  you  wonder, 
“How  could  I  have  missed  that  this  project  was  run¬ 
ning  two  months  late?  What  planet  was  I  on  where  it 
appeared  to  be  on  time?” 

Given  that  approximately  three-quarters  of  all  tech¬ 
nical  projects  fail  to  meet  their  schedules,  budgets  or 
featm-e-set  goals,  you’d  think  we  would  be  better  at 


Spotting  groups  that  are 
“off  the  rails."  The  reality  is 
that  it’s  not  easy  to  deter¬ 
mine  when  a  project  is  in 
trouble,  and  problems  that 
seem  obvious  in  hindsight 
are  murky  at  the  time  that 
they  occur. 

Monitoring  project 
progress  is  an  important 
part  of  a  leader's  role. 

Knowing  when  and  how  to 
intervene  in  failing  proj¬ 
ects  is  critical  to  the  over¬ 
all  health  of  any  technolo¬ 
gy  organization.  Whether 
the  intervention  is  to  can¬ 
cel  a  hopeless  effort  or  to 
correct  team  skill  or  resource  imbal¬ 
ances.  managers  need  to  spot  difficul- 
ties  early  in  order  to  disasters. 

Of  course,  projects  don't  slip  two 
months  in  one  day.  They  fall  behind  a 
little  every  day.  and  the  slippage  accu¬ 
mulates  until  we  notice  it.  So  the 
question  is.  How  can  you  notice  the 
problems  and  fix  them  when  they're 
molehills  rather  than  mountains? 

Most  project  methodolo^es  call  for 
monitoring  task  completion  rates, 
counting  hours  expended  and  track¬ 
ing  the  budget  to  check  on  the  health 


of  a  project.  Unfortunately, 
I  fmd  that  these  methods 
are  inadequate  to  gauge 
real  progress.  Estimating 
task  completion  is  notori¬ 
ously  subjective.  The  last 
10%  always  seems  to  take 
80%  of  the  time.  The  num¬ 
ber  of  hours  expended  has 
nothing  to  do  with 
progress;  effort  rarely 
equals  results.  And  al¬ 
though  it's  important  to 
know  how  much  of  your 
budget  has  been  spent,  any 
positive  correlation  be¬ 
tween  the  percentage  of 
budget  expended  and  per¬ 
centage  of  project  completed  is  gener¬ 
ally  coincidental 

The  best  method  that  I’ve  found  is 
to  use  what  1  call  “microdeliverabies." 
Most  projects  are  planned  with  a  se¬ 
ries  of  tasks  that  lead  to  major  deliver¬ 
ables:  the  documents,  deployments  or 
code  that  the  tasks  create.  But  these 
deliverables  are  usually  the  result  of 
many  people's  work  over  a  period  of 
weeks  or  even  months. 

Microdeliverabies  are  much  small¬ 
er.  individual  efforts.  When  you  plan 
for  microdeliverabies,  each  person  on 


a  project  has  responsibility  for  some 
physical  product  every  few  days.  Then 
you  can  gauge  the  health  of  the  proj¬ 
ect  by  checking  whether  the  microde- 
liverables  are  done  or  not.  You  don't 
have  to  wait  for  months  until  a  big 
deadline  looms  to  check  the  health  of 
a  project. 

When  planning  for  and  using  ml- 
crodeliverables,  there  are  a  few  simple 
rules  to  follow: 

1  Nomt  fal  anyoM  go  longer  than  a  woek 
without  ortng  a  miaod0irarafafa.  Any  rime 
a  person  goes  longer  than  a  week 
without  a  deliverable,  he  goes  into  a 
black  hole  of  unknown  progress.  You 
can't  really  gauge  how  he’s  doing,  and 
you're  more  likely  to  be  surprised. 

2.  liGnMfaimialifae  aro  aWiar  doM  or  not 
dons.  When  measuring  progress,  there 
are  only  two  states  for  microdeliver- 
ables.  They're  either  100%  complete, 
or  they’re  0%  complete.  Progress  is 
marked  only  by  final  approval  of  the 
item.  Otherwise,  you  get  into  the  sub¬ 
jective  world  of  guessing  how  close  to 
done  things  are,  which  is  inevitably 
inaccurate. 

3.  Proiyiw  fani  maasurod  in  offort,  but  in 
microdsiMrabfas.  The  only  meaningful 
measure  of  progress  is  whether  mi¬ 
crodeliverabies  are  done  on  time  or 
not  If  they’re  coming  in  late,  the  proj¬ 
ect  is  late.  If  they’re  on  time,  the  proj¬ 
ect  is  on  time. 

4.  A  microdofambfa  is  the  rosponslrtty 
of  only  one  person.  If  the  deliverable  is 
owned  by  more  than  one  person,  it 
becomes  a  problem  to  figure  out 
where  the  real  difficulties  lie. 

Using  these  simple  rules,  you  can 
b^in  to  identify  project  problems 
quickly  and  accurately  and  avoid  the 
surprises  that  are  otherwise  all  too 
common.  I 
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Fully  nine  of  every  10  information  technology 
professionals  works  for  a  non-IT  company,  mark¬ 
ing  a  significant  shift  of  IT  workers  from  software 
development  and  consulting  firms  to  more  traditional 
business  operations  ~  manufacturing,  health  care, 
financial  services  and  the  like. 


According  to  the  ITAA  workforce  development  study 
released  in  May.  more  than  10  million  people  work  as 
IT  professionals.  The  report  indicates  that  IT  companies 
are  more  likely  to  use  off-shore  IT  resources  for  projects, 
and  non-IT  companies  are  more  likely  to  stick  to  hiring 
plans,  to  keep  jobs  at  home  and  are  likely  to  follow  cor¬ 
porate-wide  compensation 
plans.  The  report  also 
found  that  downsizing  has 
slowed,  with  hiring  slightly 
outweighing  layoffs  for  the 
past  two  quarters. 


It's  a  much  different  picture  than  in  the  year  2000 
when  the  hot  jobs  were  found  within  the  IT  industry. 
Today,  the  more  stable  situation  lies  with  non-IT  compa¬ 
nies.  And  the  jobs  to  target  are  those  in  the  areas  of 
database  management  and  administration,  security 
and  technical  support. 


More  than  400  hiring  man¬ 
agers  responding  to  ITAA's 
survey  reported  that  while 
demand  for  IT  workers 
continues  to  fall,  they  plan 
to  hire  better  than  490,000 
«  mm  workers  in  2003.  Despite 

a  real  tumble  since  2002, 
tech  support  as  a  category 

continues  to  employ  the  most  IT  workers,  primarily  to 
improve  and  fully  capitalize  on  systems  supporting 
non-IT  business  strategy.  The  number  of  web  devel¬ 
opment  positions  also  took  a  dive,  while  database 
development/administration  and  enterprise  systems 
positions  remained  relatively  steady. 


What’s  driving  the  hiring?  Planned  investment  to 
improve  operations.  The  federal  government  is  driving 
hiring  in  cyber-security,  for  agencies  ranging  from  the 
Department  of  Homeland  Security  to  the  Department  of 
Agriculture.  While  most  every  federal  agency  Is  looking 
for  IT  professionals,  so  too  is  the  Department  of  Defense 
in  its  recruitment  of  uniformed  personnel  to  man  the 
varied  high  tech  systems  being  used  in  peacekeeping 
and  warfighting.  While  the  telecom  industry  is  far  from  a 
recovery.  Sprint  is  driving  a  trend  toward  next-generation 
technology  with  the  announcement  of  a  multi-billion 
dollar  investment  to  support  a  12-year  plan  for 
new  technologies. 

Companies  such  as  IBM,  HP.  Dell  and  Oracle  also  contin¬ 
ue  to  drive  hiring  as  they  provide  on-demand  computing 
services  to  their  clients. 
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For  information  on  recruitment  advertising. 
Please  contact:  Nancy  J.  Percival, 

Director,  Recruitment  Advertising, 
at  800-762-2977 
500  Old  Connecticut  Path 
Framingham,  MA  01701 
Produced  by  Carole  R.  Hedden 
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Ips _ 

existing  solutions  are  not  per- 
fe«.  but  tbe>-  are  much  better 
than  nothing  at  all.*' 

An  IDS  typically  operates 
behind  a  Arewall  looking  for 
patterns  or  signals  in  network 
traffic  that  might  indicate  ma¬ 
licious  activity.  Over  the  past 
two  years,  the  sensor-based 
technology  has  been  gaining 
increasing  attention  from 
users  who  see  it  as  an  added 
layer  of  protection  against  at¬ 
tacks  that  breach  other  de¬ 
fenses.  such  as  firewalls  and 
anthinis  software. 

However,  several  problems 
with  IDSs  make  the  technolo¬ 
gy  more  trouble  than  it's 
worth,  said  Richard  Stieimon. 
a  Gartner  analyst  and  author 
of  the  IDS  report. 

The  biggest  is  the  fact  that 
the  systems  impose  a  heavy 


management  burden  on  com¬ 
panies  by  requiring  full-time 
monitoring.  Stiennon  said. 

The  tendency  of  such  systems 
to  generate  a  very  large  num¬ 
ber  of  false  alarms  also  adds  to 
this  burden,  he  said.  The  tech¬ 
nology's  inabUit>'  to  monitor 
traffic  at  transmission  rates 
greater  than  600Mbit/sec.  can 
also  be  a  problem,  especially 
with  widely  deployed  high¬ 
speed  internal  networks,  ac¬ 
cording  to  Stamford.  Conn.- 
based  Gartner. 

Because  of  these  issues.  IDSs 
will  become  obsolete  by  2005. 
Stiennon  predicted.  Instead  of 
spending  on  technologies  that 
detect  intrusions,  companies 
would  be  more  prudent  to  in¬ 
vest  in  technologies  that  are 
designed  to  prevent  intrusions 
from  occurring  in  the  first 
place,  such  as  “deep-packct- 
inspection"  firewalls,  he  added. 

**1  don't  know  about  obso¬ 
lete.  but  IDS  is  not  all  the  rage 


it  was  two  to  three  years  ago, 
that's  for  sure."  said  Michael 
Engle,  vice  president  of  infor¬ 
mation  security  at  Lehman 
Brothers  Holdings  Inc. 

When  New  York-based 
Lehman  Brothers  installed  an 
IDS  about  three  years  ago.  the 
s>'stem  generated  more  than 
600  alerts  daily,  he  said.  Since 
then,  the  Arm  has  invested  in 
an  event-correlation  technolo¬ 
gy  for  analyzing  IDS  data  and 
distilling  it  into  a  more  man¬ 
ageable  volume.  Engle  said. 

"1  think  it  takes  an  inordi¬ 
nate  amount  of  time  to  get 
meaningful  IDS  data  from 
those  systems,  hence  our  in¬ 
vestment  in  event-correlation 
software,”  he  said. 

Ei^e  declined  to  identi^’ 
the  sofrivare  Lehman  is  using, 
but  vendors  of  such  products 
include  NetForensics  Inc.  in 
Edison,  N.].,  ArcSighi  Inc.  in 
Sunnyvale.  Calif.,  and  Intelli- 
taciics  Inc  in  Bethesda.  Md. 


Conrimied  from  page  J 

r^/Mci 

Defense"  and  possibly  in  all  of 
the  federal  government. 

"Tbday,  N/MCI  is  an  indus¬ 
try  standard."  said  Al  Ed¬ 
monds,  president  of  EDS  Gov¬ 
ernment  Solutions. 

But  some  Navy  users,  senior 
officials  and  even  EDS  busi¬ 
ness  partners  raised  concerns 
about  the  N/MCI  prt^ram's 
approach  to  security. 

"N/MCI  is  the  most  secure 
network  in  DOD?  It's  kind  of 
hard  to  judge  that."  said  Cathy 
Baber,  director  of  information 
assurance  at  the  Naval  Net¬ 
work  and  Space  Operations 
Command,  which  the  Navy 
formed  last  year  to  oversee  se¬ 
curity  for  N/MCI.  There  are 
still  concerns.  There  are  a  lot 
of  things  that  weren't  thought 
about,"  she  said. 

One  such  issue  is  managing 
the  certification  process  for 
connecting  N/MCI  users  to 
the  current  E>efense  Informa¬ 
tion  Systems  Networic  (DISN), 


the  Pentagon's  main  telecom¬ 
munications  backbone  for 
both  classified  and  unclassi¬ 
fied  data. 

Vanessa  Hallihan.  pn^ram 
manager  for  IS  security  at  the 
Space  and  Naval  Warfare  Sys¬ 
tems  CtHnmand.  manages  the 
DISN  connection  process. 

“We  haven't  yet  come  to  grips 
with  [N/MCII  as  an  enterprise 
process."  she  said.  The  work¬ 
load  is  very  intense,  and  1 


don't  have  the  resources." 

Bart  Abbott,  director  of  in¬ 
formation  assurance  programs 
at  Raytheon  Con  a  subcontrac¬ 
tor  to  EDS  on  the  project,  said 
he  believes  that  the  N/MCI 
project  team  has  delivered  on 
the  Navy’s  need  for  a  more 
secure  network,  though  he 
acknowledged  that  there  are 
still  wrinkles  in  the  N/MCl  se¬ 
curity  fabric  that  need  lo  be 
ironed  out. 
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"We  agree  with  a  fair 
amount  of  the  criticism"  sur¬ 
rounding  traditional  IDSs.  said 
Chris  Ho\'is.  a  vice  president 
at  IDS  vendor  Lancopc  Inc.  in 
Alpharetta.  Ga.  Bui  using  such 
issues  to  dismiss  the  technolo¬ 
gy  entirely  is  a  mistake,  he 
said. 

New  correlation,  sutistical 
and  rules-based  Alterii^  tech¬ 
nologies  are  beginning  to  help 


For  example.  EDS  has  pilot¬ 
ed  the  use  of  public-key  infra¬ 
structure  (PKI)  technology  at 
rwo  user  sites  and  plans  to  roll 
out  PKI  for  all  N/MCI  users  in 
coDjunction  with  common 
access  cards,  or  smart  cards. 
But  more  work  needs  to  be 
done  to  make  PKI  and  smart 
cards  easier  to  use,  he  said. 

Abbott  also  acknowledged 
performance  problems  result¬ 
ing  from  various  security 
mechanisfns,  such  as  e-mail 
and  Web  content  filtering  at 
the  connection  points  be¬ 
tween  N/MCI  and  the  Defense 
Department's  unclassified  net¬ 
work,  which  is  known  as  the 
Non-secure  Internet  Protocol 
Routing  Network.  In  addition, 
users  have  reported  full  disk 
scans  taking  place  during  the 
log-on  process. 

“We've  looked  at  the  mobile 
user  in  particular."  said  Ab¬ 
bott.  adding  that  EDS  is  trying 
to  signiAcantly  improve  net¬ 
work  performance  for  remote 
access.  It  will  take  EDS  and 
the  Navy  several  months  to 
improve  remote  access  and 


companies  cut  through  the 
noise  generated  by  traditional 
IDSs  and  mine  u.seful  informa¬ 
tion  from  them,  said  Martin 
Rocsch,  chief  technology  offi¬ 
cer  at  Sourcefire  Inc.,  an  IDS 
vendor  in  Columbia.  Md 

"1  think  the  Gartner  report 
is  shortsighted  and  ignores 
basic  security  principles." 
Roesch  said.  The  notion  (hat 
intrusion-prevention  tech¬ 
nologies  can  stop  all  attacks  is 
just  not  realistic,  making  the 
need  for  IDS  technology  ap¬ 
parent.  he  added. 

"While  the  technology  has 
been  plagued  with  issues  from 
the  past,  such  as  high  false 
positives,  evasion  tactics  and 
mismanagement,  the  leading 
vendors  in  this  space  have  re¬ 
sponded  with  products  that 
are  very  powerful  in  the  hands 
of  the  right  security  staff." 
agreed  Michael  Rasmussen,  an 
analyst  at  Forrester  Research 
Inc.  in  Cambridge.  Mass.  I 


make  other  network  security 
adjustments,  including  the  im¬ 
plementation  of  an  updated 
virus-prolection  package  that 
includes  a  spam  Alter. 

Several  industry  representa¬ 
tives  at  the  symposium  also 
raised  concerns  about  com¬ 
mercial  contractors'  inability 
to  communicate  with  external 
entities,  such  as  their  own  cor¬ 
porate  offices. 

"It's  a  difficult  proposition, 
because  the  corporate  envi¬ 
ronment  is  an  untrusted  envi¬ 
ronment  from  the  Navy's  per¬ 
spective,"  Abbott  said. 

Lt  CoL  Ken  Buetel.  director 
of  the  Marine  Corps  Informa¬ 
tion  Teclmology  and  Network 
Operations  Center,  said  some 
of  his  supporting  vendors 
have  raised  the  same  issue. 
Buetel  said  be  has  been  forced 
to  tell  them.  "We  really  don't 
trust  the  corporate  domain."  I 
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exisiinj.'  solutions  are  not  per¬ 
fect.  but  they  are  much  better 
than  nothing:  at  alt." 

An  IDS  typically  operates 
behind  a  firewall  looking  for 
patterns  or  sisals  in  network 
traffic  that  mi^tht  indicate  ma¬ 
licious  activity.  Over  the  past 
two  years,  the  sensor-based 
technohigy  has  been  gaining 
increasing  attention  from 
users  who  see  it  as  an  added 
layer  of  protection  against  at¬ 
tacks  that  breach  other  de¬ 
fenses.  such  as  firewalls  and 
antivirus  software. 

Howev  er,  several  problems 
with  IDSs  make  the  technolo¬ 
gy  more  trouble  than  it's 
worth,  said  Richard  Stiennon. 
a  Gartner  analyst  and  author 
of  the  IDS  report. 

The  biggest  is  the  fact  that 
the  systems  impose  a  heavy 
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N/MCI 

Defense"  and  possibly  in  all  of 
the  federal  government. 

"Today.  N 'MCI  is  an  indus¬ 
try  standard."  said  Al  Ed¬ 
monds,  president  of  EDS  Gov¬ 
ernment  Solutions. 

But  some  Navy  users,  senior 
ofi'icials  and  even  EDS  busi¬ 
ness  partners  raised  concerns  , 
about  the  N/MCI  program's  I 

approach  to  security.  I 

“N/MCl  is  the  most  secure  ; 
network  in  DOD?  It’s  kind  of  ^ 
hard  to  judge  that,  "said  Cathy  i 
Baber,  director  of  information 
assurance  at  the  Naval  Net¬ 
work  and  Space  Operations 
Command,  which  the  Navy 
formed  last  year  to  oversee  se¬ 
curity  for  N/MCI-  "There  arc 
still  concerns.  There  are  a  lot 
of  things  that  weren't  thought 
about."  she  said. 

One  such  issue  is  managing 
the  certification  process  for 
connecting  N/MCI  users  to 
the  current  Defense  Informa¬ 
tion  Systems  Network  (DISN). 
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management  burden  i>n  cimi- 
panics  by  requiring  full-time 
I  monitoring,  Stiennon  said, 
j  The  tendency  of  such  systems 
to  generate  a  very  large  nunv 
I  ber  of  false  alarms  also  adds  to 
i  this  burden,  he  said.  The  tech- 
j  nology's  inability  to  moniti>r 
traffic  at  transmission  rates 
,  greater  than  oOOMbit  sec.  can 
I  also  be  a  problem,  especially 
I  w  ith  widely  deployed  high¬ 
speed  internal  networks,  ac¬ 
cording  to  Stamford.  Conn.- 
based  Gartner. 

Because  of  these  issues.  IDSs 
will  become  obsolete  by  20(X^, 
Stiennon  predicted.  Instead  of 
spending  on  technologies  tlut 
detect  intrusions,  companies 
would  be  more  prudent  to  in¬ 
vest  in  technologies  that  arc 
designed  to  prevent  intrusions 
from  occurring  in  the  first 
place,  such  as  "deep-paeket- 
inspection"  firewalls,  he  added. 

"1  don't  know  about  obso¬ 
lete.  but  IDS  is  not  all  the  rage 


it  was  two  to  three  years  ago. 
that's  for  sure.'  Michael 
Fngle.  vice  president  of  infor- 
m.uion  security  at  Lehman 
Bri>thers  Holdings  Inc. 

When  Now  \ork-basv'd 
Lehman  Brothers  installed  .tn 
IDS  about  three  years  ago.  the 
system  generated  nnire  than 
600  alerts  daily,  he  said.  Since 
then,  the  firm  has  invested  in 
I  an  event-correlation  lechnolo- 
g\  for  analyzing  IDS  data  and 
I  distilling  it  into  a  more  man- 
I  agcable  vtilume.  Engle  s;iid. 

"I  think  it  takes  an  inordi¬ 
nate  amount  »»f  time  to  get 
meaningful  IDS  data  from 
those  systems,  hence  our  in¬ 
vestment  in  event-correlation 
software."  he  said. 

Fngle  declined  to  identiu 
the  software  Lehman  is  using, 
but  vendors  of  such  ptxxlucts 
include  NciForensies  Ine.  in 
I  Edison,  N.L.  AreSight  Ine.  in 
[  Sunnyvale.  Calif.,  and  Inielli- 
t  tactics  Ine.  in  Bethesda.  Md, 
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"We  ;tgree  with  a  lair 
anumm  of  the  criticism"  sur- 
nmnding  traditional  IDSs.  said 
Chris  Ho\is.  a  v  ice  president 
at  IDS  vendor  Laiieope  Im-.  in 
-Alpharetta,  ija.  But  usmg  such 
issues  to  dismiss  the  teehm'Io- 
gy  entiri’h  is  a  mistake,  he 
said. 

NW  eorrclaiion.  statistical 
and  rulos-based  filterirtg  tech¬ 
nologies  are  beginning  to  help 


s'lunpames  vut  through  the 
noise  genet.iteJ  bv  ir.idiihio.il 
IDSs  and  nmie  usetul  titiorm.e 
lion  from  them,  s.nd  NLirtif. 
R«H-sch.  chiefte*.hn<'l‘*g\  ofli- 
,  i-r  .It  Voufi  elTre  !n»  .m  IDs 
vendor  in  I  oluml'ia.  MJ 

"I  ilunk  the(>..rtner  report 
is  shortsighted  .ind  igni*res 
basic  sesMfitv  princtples,' 
koi-sv  h  said.  I'hc  not  U  >n  that 
inirusion-previ-ntion  tcih- 
nologies  tan  slop  .ill  jit.itks  o 
gist  iu>t  realistit.  making  the 
need  h»r  IDS  lecliHi-logv  jp- 
parem.  lie  .iJded. 

"While  the  leehnol«>gv  h.is 
been  plagued  with  issues  from 
the  past,  such  as  high  false 
p»*sitives.  ev.ision  UtTies  and 
mismanagement,  the  ie.iding 
vendors  in  this  space  h.ive  re¬ 
sponded  with  products  that 
are  verv  ps'werfiil  in  the  lunJs 
i'f  the  right  securiiv  staff." 
agreed  .Mieh.wl  K.ismvissen.  an 
analyst  at  I  t'rrt'sicr  Research 
Inc.  in  t  Cambridge.  .Mass  I 


the  Pentagon’s  main  telecom¬ 
munications  baekKme  for 
I  both  classified  and  unclassi- 
I  fied  data. 

I  Vanessa  Hallihan.  pnigram 
:  manager  for  IS  security  at  the 
j  Space  and  Naval  Warfare  Sv-s- 
I  terns  Command,  manages  the 
j  DISN  connection  process. 

I  "We  haven't  yet  come  to  grips 
!  with  (N/MCI  I  as  an  enterprise 
I  process."  she  said.  “The  work- 
'  load  is  very  intense,  and  I 


I  don’t  have  the  resources." 

Ban  Abbott,  director  of  in¬ 
formation  a.ssurance  programs 
at  Raytheon  Co.,  a  subcontrac¬ 
tor  to  EDS  i>n  the  project,  said 
hebelievts  that  the  N  MCI 
I  project  team  has  delivered  on 
I  the  Nave’s  need  for  a  more 
!  secure  network,  though  he 
I  acknowledged  that  there  are 
I  still  wrinkles  in  the  N  MClse- 
I  euriiy  fabric  that  need  to  be 
I  ironed  out. 


F<*r  c-vample.  I  DS  has  pilot- 
j  cd  the  use  of  public-key  infm- 
I  structure  <PKD  teelmohigv  at 
I  two  user  sites  and  plans  to  roll 
!  out  PKl  forall  N  M('l  users  in 
^  conjuneiion  with  common 
I  access  cards,  or  sman  cards. 

I  But  more  work  needs  to  he 
done  to  make  I’KI  and  sman 
I  eard.s  easier  to  usi'.  he  said. 

I  Abbott  also  acknowledged 
'  performance  problems  rcsult- 
I  ing  from  various  M.vurity 
I  mechanisms,  such  as  e-mail 
and  Web  content  filtering  at 
[  the  eonneetion  points  be- 
I  tween  N  MCI  and  the  DefenM- 
■  Depanment's  unclassified  net- 
I  work,  which  is  known  as  the 
^  Non-sceure  Internet  ProNn'ol 
Routing  Nctwoik.  In  addition, 
u.scrs  have  reponed  full  disk 
scans  taking  place  during  the 
log-on  prv»ci*ss. 

“We've  kuiked  at  the  mobile 
user  in  particular."  said  Ab¬ 
bott.  adding  that  EDS  is  trying 
to  significantly  improve  ns't- 
work  performance  for  remote 
access.  It  will  take  EDS  and 
the  Navy  several  months  to 
improve  remote  access  and 


iiuike  other  netw»*rk  Hvuritv 
adjustments,  including  the  im- 
plemenijium  of  an  updated 
virus-protection  package  that 
includes  a  spam  filter 

Se\er.il  mdustrv  reprt'sentj- 
tivesai  the  svmpv>sium  also 
raised  concerns  .ib<mt  e«>m- 
merclal  contractors’  tnabiliiv 
to  communicate  with  external 
entities,  such  js  their  mvn  cor¬ 
porate  OltllX-S. 

"It's  a  dilTiculi  pmposiiion. 
because  the  corporate  envi¬ 
ronment  is  an  unirusted  envi¬ 
ronment  from  the  Navy’s  per- 
spcsiive."  .AbKut  said. 

I  t.  Col.  Ken  Huetel.  director 
ol  the  Marine  Corps  Inform.^- 
ik*n  Teehtiologv-  and  .S'eiwork 
Operations  Center,  said  «w*me 
of  his  supporting  vendors 
have  raised  the  same  issue. 
Buete!  said  he  has  been  fisrced 
to  tell  them.  "We  really  don't 
tru.st  the  corporate  domain."  I 


ALMOST  THERE 

More  than  68°o  (Mnr«93  M  MO  veals 
«li  tie  aciive  t>)  tea' s  enc  ofhciats  m 

OOwdtUik  38264 

www.coinpulcrwcirtil.com 


BPA  ABM  ^ 


CttmElWU  Jm  21.2113 


THE  BACK  PAGE 


FRANK  HAYES  ■  FRANKLY  SPEAKING 

Why  Bad  Ideas  Stick 

Ever  notice  how  bad  ideas  just  keep  coining  around?  It 
happened  again  last  Tuesday  at  a  U.S.  Senate  Judiciary 
Committee  hearing  on  online  music  piracy,  where  com¬ 
mittee  chairman  Orrin  Hatch  asked  antipiracy  experts 
about  ways  to  damage  the  computers  of  people  who  ille¬ 
gally  download  files.  When  one  vendor  of  antipiracy  technology 
replied,  “No  one  is  interested  in  destroying  anyone’s  computer,” 
Hatch  interrupted,  “I’m  interested —  If  that’s  the  only  way,  then  I’m 
all  for  destroying  their  machines”  (see  story,  page  10). 

Soimd  familiar?  It  should  —  it’s  a  hyperventilated  version  of  last 
summer’s  “license-to-hack”  proposal. 

You  remember  that  one:  U.S.  Congressman 
Howard  Berman  hx>m  California  wanted  to  let 
ct^yri^t  owners  use  something  he  called 


“technological  self-help"  instead  of  legal  action 
to  stop  online  piracy. 

Berman’s  idea  ~  and  it  was  a  truly  awhil  idea 

—  targeted  the  same  peer-to-peer  networks 
that  Hatch’s  committee  was  bolding  bearings 
about  Under  Berman's  plan,  a  copyright  holder 
who  suspected  someone  of  infringing  on  those 
copyrights  could  actually  break  into  a  suspect¬ 
ed  pirate’s  computer  and  plant  malicious  code 

—  and  would  be  protected  from  liability  for  any 
damage  that  was  caused. 

Wouldn’t  that  be  handy?  No  evidence,  no  ex¬ 
pensive  and  time-consuming  legal  processes 
that  might  result  in  a  judge  or  jury  deciding 
there  was  no  piracy  after  all  Instead,  all  a  copy¬ 
right  bolder  would  need  was  a  suspicion  —  and 
a  willingness  to  sabotage. 

Of  course,  to  make  sure  peer-to-peer  pirates 
didn’t  slip  throu^  loopholes  in  a  law  too  nar¬ 
rowly  drawn,  a  license-to-hack  law  would  have 
to  be  written  as  broadly  as  possible,  targeting 
any  network  suspected  of  containii^  mpyright- 
infringing  material. 

So  if.  say,  a  sofrivare  vendor  sus¬ 
pected  your  company  of  having  un¬ 
licensed  software  on  its  network  — 
whether  that  suspicion  was  true  or 
not  —  the  vendor  could,  hypotheti¬ 
cally.  break  in  and  even  sabotage 
your  computers  under  Berman’s 
proposal. 

Would  that  be  a  legal  stretch? 

Maybe.  But  any  vendors  that  tried  it 
could  claim  that  they  really  did  be¬ 
lieve  their  copyri^ts  were  being 
infringed  upon  and  that  the  law 
shielded  them  from  having  to  pay 


for  any  damages  resulting  from  their  sabotage. 

All  in  all,  a  very  bad  idea.  Fortunately,  not 
loi^  alter  Berman  introduced  his  bill,  it  sank 
without  a  trace. 

Now.  a  year  later,  it  has  resurfaced  —  in  the 
hands  of  a  much  more  powerful  lawmaker. 

Is  it  still  such  a  bad  idea?  Well,  let’s  see:  Last 
year,  the  recording  industry  succeeded  in  shut¬ 
ting  down  Napster.  In  the  year  since,  the  re¬ 
cording  industry  has  continued  to  win  most  of 
its  legal  battles.  Judges  have  issued  orders.  Mu¬ 
sic  pirates  have  been  identified  and  fined.  In 
short,  the  courts  are  dealing  with  the  problem. 
The  system  worits  just  fine.  There’s  less  need 
than  ever  for  a  license-to-hack  law. 

Meanwhile,  the  risks  of  a  license-to-hack  law 
have  gotten  a  lot  less  hypothetical  For  example, 
if  The  SCO  Group  had  a  license-to-hack  law  to 
use.  it  wouldn't  need  to  bother  with  proving 
any  claims  against  IBM  in  court.  SCO  could 
simply  —  and  legally  —  launch  viruses,  worms, 
Trojan  horses  or  other  electronic  attacks  against 
anyone  running  ADC,  Linux  or  any  other  soft¬ 
ware  that  SCO  claimed  contained  its  copyright¬ 
ed  code.  And  if  it  eventually  turned  out  that 

SCO’s  claims  were  wrong?  AIX  and 
Linux  users  would  still  have  been 
sabotaged  —  with  no  recourse. 

It’s  probably  just  a  coincidence 
that  Orrin  Hatch  happens  to  be 
SCO’s  senator.  But  you’d  think  the 
chairman  of  the  Senate’s  commit¬ 
tee  on  judges  and  courts  would  un¬ 
derstand  why  we  have  judges  and 
courts  —  and  why  vigilante  attacks 
of  any  kind  are  a  bad  idea. 

Too  bad  we  can’t  trust  our  law¬ 
makers  to  understand  that  And  it’s 
too  bad  those  bad  ideas  will  just 
keep  coming  around.  I 
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OHshore’s  Rise  Is  Relentless 


Issue  is  a  sensitive  one 
for  execs,  who  say  cost 
outwei^  controversy 

BY  MTRtCK  THIBODEAU 

LOS  ANQELES 

O&hore 
outsourcing 
is  so  main* 
stream  that 
by  next  year,  more  than  80%  of 
US.  companies  will  have  had 
high-level  discussions  about 
the  topic.  And  40%  will  have 
completed  somrldod  of  pilot 
prc^ram  or  will  be  using  near¬ 
shore  or  ofifehore  services. 

Despite  that  assessment, 
made  by  Gartner  Inc.  at  an 
outsojurcing  conference  here 
last  week.  oflEsbore  outsourc¬ 
ing  remains  a  difficult  issue  for 
executives  to  talk  about.  In 


fact,  many  attendees  were  skit¬ 
tish  about  responding  to  ques¬ 
tions  for  this  article,  except  in 
the  most  general  terms. 

Corporate  officials  did.  how¬ 
ever.  acknowledge  trends  re¬ 
lated  to  the  politically  charged 
issue.  For  instance.  BP  PLC  in 
London  b  dbcussing  offshore 
work  with  its  exbting  out¬ 
sourcers.  IBM  and  Accenture 
Ltd.  “They  are  offering  us  an 
opportunity  to  have  consbtent 
performance  at  a  lower  cost." 
said  Russell  Taruscio.  down¬ 
stream  chief  financial  officer 
at  the  oil  company. 

Adding  offshore  compo¬ 
nents  to  outsourcing  contracts 
b  on  the  rise,  accordmg  to 
IDC.  In  a  report  last  week,  the 
Framingham.  Mass.,  research 
firm  said  offshore  outsourcing 
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Regulatory  Requirements 
Place  New  Burdens  on  IT 


Calif,  privacy  law  to 
debut  panic  emerging 


BY  DAN  VERTON 

Costly  legal  battles  and  knee- 
jerk  decisions  on  security  are 
threatening  to  disrupt  compa¬ 
nies  that  do  business  with  Cal¬ 
ifornia  residents. 

Tomorrow,  a  state  pri¬ 
vacy  law  with  nationwide 
reach  takes  effect.  Securi¬ 
ty  and  legal  experts  pre¬ 
dict  that  the  law  will  burden 
companies  with  massive  class- 
action  lawsuits  and  could 
change  the  way  corporations 
approach  wireless  technolc^ 
Privacy  Low,  page  5? 


U5.  firms  scramble  to 
comply  with  EU  tax 


BY  HATT  HAMBLEN 

The  European  Union's  IS 
member  nations  tomorrow 
will  begin  imposing  a  value- 
added  tax  on  digital  sales  to 
residents  by  non-European 
companies,  a  plan  that 
has  forced  many  U.S. 
businesses  to  undertake 
months  of  legal  and  tech¬ 
nical  preparations. 

Complicating  matters  b  the 
fact  that  the  VAT  varies  from 
country  to  country,  ranging 
from  15%  in  Luxembourg  to 
2S%  in  Denmark  and  Sweden. 
As  a  result,  some  U.S.  compa¬ 
nies  have  had  to  choose  be¬ 
tween  two  costly  alternatives: 
updating  their  e-commerce 
systems  to  track  sales  and  ini¬ 
tiate  VAT  payments  at  the  var¬ 
ious  rates,  or  setting  up  new 
operations  in  one  of  the  mem¬ 
ber  countries  so  they  can  ap¬ 
ply  its  tax  rate  to  all  digital 
sales  throughout  the  EU. 


“It's  one  more  onerous 
process  forced  on  people  try¬ 
ing  to  do  Internet  e-com- 
merce.*  said  Joel  Ronnii^ 

CEO  of  Di^uU  River  Inc.,  an 
Eden  Prairie.  Miirn. -based 
company  that  develops  and 
manages  esximmerce  Web 
sites  for  businesses.  “It’s  turn¬ 
ing  into  a  mess." 

Digital  River,  whose  clients 
include  Motorola  Inc..  3M  Co. 
and  Staples  Inc.  has  spent 
“millions  of  dollars"  to  get 
ready  for  the  VAT.  Ronning 
said.  As  part  of  its  prepara- 

European  VAT,  page  53 


W3C  Cleans  Up  SOAP  Standard 


But  it’s  unclear  when 
vendors  will  adopt 
Version  1.2  of  protocol 


BY  CAROL  SLIWA 

When  Motor  Coach  Industries 
Inc.  launched  its  maiden  U^b 
services  last  year,  some  mes¬ 
sages  didn’t  go  through,  and 
others  reached  their  destina¬ 
tions  only  in  partial  form. 

John  Morrison.  CIO  at  the 
Schaumburg.  Ill,  bus  manu¬ 
facturer.  said  it  took  three  to 
four  weeks  to  trace  the  prob¬ 


lem  to  differing  implementa¬ 
tions  of  SOAP  from  veitdors  of 
Web  services  toob. 

“One  vendor  would  say. 
‘You've  got  to  do  it  thb  way.' 
Another  vendor  would  say. 
Thb  b  the  way  we  do  it,’ " 
recalled  Morrison.  “It  boiled 
down  to  a  noncomplete  set  of 
standards  that  everyone  was 
implementing  differently.'' 

That  should  change  at  some 
point,  although  it's  unclear 
when.  The  World  Wide  Web 
Consortium  announced  last 

SOAP,  page  16 
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Offshore’s  Rise  Is  Relentless 


Issue  is  a  sensitiv  e  one 
for  execs,  who  say  co.st 
outweighs  controversv 


Offshore 

outsourcing 


stream  that 
by  next  year,  more  than  80‘*<)  of 
U.S.  companies  will  have  had 
high-level  discussions  about 
the  topic.  And  40%  will  have 
completed  some  kind  of  pilot 
program  or  will  be  using  near¬ 
shore  or  offshore  services. 

Despite  that  assessment, 
made  by  Gartner  Inc.  at  an 
outsourcing  conference  here 
last  week,  offshore  outsourc¬ 
ing  remains  a  difficult  issue  for 
executives  to  talk  about.  In 


fact,  many  attendees  were  skit¬ 
tish  about  responding  to  ques¬ 
tions  for  this  article,  except  in 
the  most  general  terms. 

Corporate  officials  did.  how¬ 
ever.  acknowledge  trends  re¬ 
lated  to  the  politically  charged 
issue.  For  instance.  BP  PLC  in 
London  is  discussing  offshore 
work  with  its  existing  out¬ 
sourcers,  IBM  and  Accenture 
Ltd.  "They  are  offering  us  an 
opportunity  to  have  consistent 
performance  at  a  lower  cost." 
said  Russell  Taniscio.  down¬ 
stream  chief  financial  officer 
at  the  oil  company. 

Adding  offshore  compo¬ 
nents  to  outsourcing  contracts 
is  on  the  rise,  according  to 
IDC.  In  a  report  last  week,  the 
Framingham.  Mass.,  research 
firm  said  offshore  outsourcing 
Outsourcing,  page  i6  ' 
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Regulatory  Requirements 
Place  New  Burdens  on  IT 


privacy  law  to  L'.S.  finns  scramble  to 
debut:  panic  emerging  comply  w  ith  l-f  tax 


Costly  legal  battles  and  knee- 
jerk  decisions  on  security  are 
threatening  to  disrupt  compa¬ 
nies  that  do  busine.ss  with  Cal¬ 
ifornia  residents. 

Tomorrow,  a  state  pri-  88^ 
vacy  law  with  nationwide 
reach  takes  effect.  Securi-  |KC 
ty  and  legal  experts  pre-  IbBi 
diet  that  the  law  will  burden 
companies  with  massive  class- 
action  lawsuits  and  could 
change  the  way  corporations 
approach  wireless  technology 
Privacy  Law.  page  S3 


Hilton  Hotels  Coip.  is 
upgrading  its  People- 
&tt  suite,  converting 
toathree-tierWeb 
architecture,  scrapping  Unix  servers  in 
favor  of  Windoivssetvetsandreplacing 
its  database  software  -  all  at  the  same 
time.  6ary  H.  Anthes  reports  on  this 
complex  IT  overhaul,  which  is  already 
saving  millions  of  dollars.  Page  25 


The  European  Union's  15 
member  nations  tomorrow 
will  begin  imposing  a  value- 
added  tax  on  digital  sales  to 
residents  by  non-European 

a  companies,  a  plan  that 
has  forced  many  U.S. 
businesses  to  undertake 
months  of  legal  and  tech¬ 
nical  preparations. 

Complicating  matters  is  the 
fact  that  the  VAT  varies  from 
country  to  country,  ranging 
from  15%  in  Luxembourg  to 
25%  in  Denmark  and  Sweden. 
As  a  result,  some  U.S.  compa¬ 
nies  have  had  to  choose  be¬ 
tween  two  costly  alternatives: 
updating  their  e-commerce 
systems  to  track  sales  and  ini¬ 
tiate  VAT  payments  at  the  var¬ 
ious  rates,  or  setting  up  new 
operations  in  one  of  the  mem¬ 
ber  countries  so  they  can  ap¬ 
ply  its  tax  rate  to  all  digital 
sales  throi^hout  the  EU. 
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“It's  one  more  onerous 
I  process  forced  on  people  tr>’- 
I  ing  to  do  Internet  e-com- 
merce."  said  |ocl  Ronning, 

'  CEO  of  Digital  River  Inc.,  an 
i  Eden  Prairie.  Minn. -based 
'  company  that  develops  and 
manages  c-commercc  Web 
sites  for  businesses.  “It’s  turn¬ 
ing  into  a  mess." 

Digital  Rivx'r.  whose  clients 
I  include  Motorola  loc..  3M  Ca 
I  and  Staples  Inc.,  has  ^>ent 
I  “millions  ofdollars"  to  get 
I  ready  for  the  VAT.  Ronning 
I  said.  As  part  of  its  prepara- 

Europeun  VAT.  page  S3 


W3C  Cleans  Up  SOAP  Standard 


Damien  Bean,  vice  president  ol 
cotporate  systems  at  Hilton 


Hut  it's  unclear  when 
Vendors  will  jKlupt 
\crsion  1.2  ofpmUKol 


When  Motor  Coach  Industries 
Inc.  launched  its  maiden  Web 
services  last  year,  some  mes¬ 
sages  didn’t  go  through,  and 
others  reached  their  destina¬ 
tions  only  in  partial  form. 

)ohn  Morrison.  CIO  at  the 
Schaumburg.  IIL  bus  manu¬ 
facturer,  said  it  ({K>k  three  to 
four  weeks  to  trace  the  prob¬ 


lem  to  differing  implementa¬ 
tions  of  SOAP  from  vendors  of 
Web  services  tools. 

“One  vendor  would  say. 
'You've  got  to  do  it  this  way.' 
Another  vendor  would  say. 
’This  is  the  way  we  do  it.' " 
recalled  Morrison.  “It  boiled 
down  to  a  noncomplete  set  of 
standards  that  eveiy-onc  wa.s 
implenwnting  differently." 

That  should  change  at  some 
point,  although  it's  unclear 
when.  The  World  M^’idc  Web 
Consortium  announced  last 

SOAP,  page  10 


Brain  triggers  rush  of  endorphins  to  help  prevent  panic. 


@  server 


the  e-busmess  logo  eSefver  and  <Sefies  a'e  iraden^arks  or 
i  Tbfvatds  Wirvlows  «  a  trademarn  ot  Mcrosott  Corpooiioo  u 
ed  Stales  cintj  otbef  coonlnes  Otber  company.  proch;ct  and  s* 


)f  Inieinaiional  8ustf>ess  Machines  Corporalion  Lmui  is  a  registeieo  ItademafK 
ei  countries,  or  Doth  UNIX  is  a  registered  trademark  of  Trre  Open  Group  m  irw 
. .  'Ilrghisreservr 


;e  marks  of  others  2003  f8M  Corporation  A 


Trigger- 


lemand. 


The  human  body  can  anticipate  problems  on  demand.  As  can  IBM 
eServer.  Select  eServer  xSeries”  models  are  designed  to  sense  when 
any  one  of  six  system  components  exceeds  a  safe  threshold.  They 
respond  by  notifying  the  system  administrator,  allowing  you  to  replace 
a  part  up  to  48  hours  before  It  fails, 

eServer:  servers  for  on  demand  business. 

Can  you  S6G  it?  See  it  at  ibm.com/eserver/ondemand 


windows 

Linux' 

UNIX’ 

Midrange 

Mainframe 


We've  been  listening  to  what  you,  our  custorners,  hove  to  soy  obout  the  way  the  softwore  industry 
does  business.  And  frankly,  some  of  it  couldn't  be  repeated  in  print.  You've  been  frustrated 
by  long-term  agreements.  You've  been  disenchonted  by  the  lack  of  options  when  it  comes  to 
software  licensing.  And,  most  of  all,  you've  been  annoyed  thot  no  one's  been  listening  to  ony 
of  your  complaints. 

Well,  we  want  you  to  know  that  we  heor  you,  and  we've  been  doing  everything  we  con  to  change 
the  way  we  do  business  with  you.  Recently,  we've  revolutionized  the  industry  by  being  the  first 
to  introduce  flexible  licensing  contracts.  With  FlexSelect  Licensing*-,  you  can  now  get  software 
on  your  terms,  not  ours.  We  offer  short-term  or  long-term  licensing  agreements,  so  you  con 
choose  your  commitment  bosed  on  your  needs.  Of  course,  if  you  prefer  more  traditionol  long¬ 
term  licensing,  it's  still  available.  And  we  offer  payment  plans  that  fit  the  woy  you  work,  not 
the  other  woy  around. 


Flexible  software  licensing  is  about  choice. 
It's  about  control. 

It's  about  time. 


We've  heard  back  from  many  of  our  customers  and  they're  thrilled  with  the  changes.  From  global 
Fortune  500*  companies  to  smoller  organizations,  the  response  has  been  overwhelmingly 
positive.  Some  of  the  comments  we've  receive  include  'flexible  licensing  is  o  tremendous  tool,' 
'a  huge  win  for  CA  customers'  and  'clearly  demonstrates  that  CA  is  an  extremely  innovative, 
flexible  and  customer-focused  company.' 

But  the  changes  don't  stop  with  flexible  licensing.  That's  just  one  part  of  our  renewed  focus 
on  you,  our  customers.  We've  also  increased  our  responsiveness  to  your  needs.  And  we've  even 
increased  our  focus  on  internal  research  and  development,  furthering  our  commitment  to 
creating  the  most  innovative  business  software  solutions  in  the  market. 


Innovations  in  licensing,  increosed  customer  responsiveness  and  product  development  are  just 
a  few  more  woys  we're  stoying  well  ahead  of  the  rest  of  the  pock  In  the  software  industry.  Contact 
us  ot  ca.com/flexselect  today  to  find  out  more.  We  think  you'll  be  pleosed  with  what  you  see. 
If  not,  let  us  know.  And  we'll  do  something  obout  it. 


FlexSelect  Licensing" 


Computer  Associates® 


®  2003  Computer  Associates  Iniematiortal.  Inc.  (CA).  AM  trademarks,  trade  narrws,  service  marks,  and  logos  relerertced  herein  botoon  to 
their  respective  companies. 
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Another  Digit  Another  Deadline 

In  the  Management  section:  At  U.S.  retail¬ 
ers,  IT  executives  like  Ahold's  Ed  Gropp 
(left)  must  update  systems  to  handle 
longer  bar  codes  by  Jan.  1. 2005.  Page  35 


EMERGING  TECHNOLOGIES 

Preventive  Medicine 

ht  the  Technology  section:  Despite  the  risk  of  false  positives, 
users  and  analysts  say  intrusion-prevention  s>’siems  are  gain¬ 
ing  traction  in  the  corporate  IT  security  perimeter  Page  28 


NEWS 

6  A  PeopleSoft  user  panel  op¬ 
poses  Oracle's  buyout  offer. 

6  The  Homeland  Security 

Department  says  the  feds 
should  certify  that  software  is 
secure  rather  than  regulate. 

7  A  CIA-funded  start-up  read¬ 
ies  a  new  SAN  appliance. 

7  HP  expands  its  lineup  of  stor¬ 
age  and  disaster  recovery 
services. 

6  An  appeals  court  rules  that 
Microsoft  doesn't  have  to  use 
a  Sun-endorsed  version  of 
Java  —  but  did  violate  Sun's 
copyri^t. 

10  NetWare  on  Linux  will  arrive 
sooner  than  expected. 

10  Flashline  launches  a  new  re¬ 
lease  of  its  portal  product 
that's  designed  to  help  compa¬ 
nies  manage  and  reuse  soft¬ 
ware  assets. 

12  Sarbanes-Oxley  software 
tools  keep  on  coming. 

12  Intel  hopes  its  Madison 

processor  will  spur  increased 
adoption  of  its  Itanium  chips. 

14  IBM  wins  contracts  worth  a 
total  of  S380  million  to  man¬ 
age  IT  for  three  New  Yoric 
hospitals. 

14  Siemens  unveils  technology 
for  the  health  care  market 
that's  designed  to  encrypt 
electronic  communications. 

18  QAA:  Sun  exec  opposes 

making  Java  open-source. 


TECHN0L06Y 

25  Field  Report:  Hilton  Checks 
Into  New  Suite.  Hilton  Ho¬ 
tel’s  PeopleSoft  upgrade  re¬ 
quired  re-engineering  the  data 
center  as  the  company  moved 
from  client/server  to  a  three- 
tier  Web  architecture. 

30  Q&A:  Sharing  the  Info 
Wealth.  Don  Hatcher  of  SAS 
Institute  says  his  customers 
are  looking  for  ways  to  dis¬ 
tribute  information  from  ana¬ 
lytics  across  the  business. 

31  Future  Watch:  Taming  Data 
Compfexfty.  A  standardized 
data  “container”  could  launch 
a  vast  peer-to-peer  repository 
of  public  data  that’s  easily  ac¬ 
cessible  in  different  formats. 

32  Secitfity  Manager's  Journal: 
Corporation  Caught  in  the 
Cross  Hairs.  A  focused  e-mail 
attack  causes  Vince  Tuesday 
to  wonder  if  his  company  was 
singled  out  as  a  target.  An 
investigation  allays  his  fears 
—  well  most  of  them. 

MANAGEMENT 

38  Wanted:  Security  Tag  Team. 

IT  and  engineering  must  work 
together  to  secure  danger¬ 
ously  vulnerable  process  net- 
woiks.  Read  how  companies 
like  Du  Pont  and  Dow  Chemi¬ 
cal  are  approaching  process 
network  security. 

42  Managing  the  Temporary 

Players.  Shell  Oil  uses  a  Web- 
based  workforce  management 
system  to  reduce  the  costs 
and  headaches  of  procuring 
short-term  labor. 


OPINIONS 

8  On  the  Mark:  Mark  Hall  u'an- 
ders  into  the  battle  of  Pocket 
PC  vs.  Palm  OS  vs.  Java  in 
handhelds  and  discovers  a 
dearth  of  developers.  And 
guess  who  makes  the  fastest 
desktop  machine.  Apple? 

20  Maryfran  Johnson  has  some 
advice  for  those  who  think  it’s 
a  lousy  time  to  start  a  big  IT 
infrastructure  project,  point¬ 
ing  to  the  success  of  world- 
famous  Hilton's  tech  overhaul. 

20  Phnm  Fox  tells  how  pioneers 
are  taking  call  center  technol¬ 
ogy  beyond  the  obvious. 

21  Dan  Oilimor  reports  that 
Apple’s  developer  conference 
offered  limited  news  of  interest 
to  corporate  IT.  The  big  ques¬ 
tion  remains:  How  will  Micro¬ 
soft  affect  Apple's  future? 

34  Robert  L.  Mitchell  says  that 
as  privacy  laws  proliferate,  the 
issue  of  compliance  is  moving 
front  and  center. 

44  Peer  to  Peers:  Norbert  J. 
Kubitus  calls  on  CIOs  to  join 
the  Sarbanes-Oxley  game. 

54  Frankly  Speaking:  Frank 
Hayes  hates  to  admit  it.  but 
sabotage  has  a  place  in  the 
IT  toolbox.  Sometimes,  it’s 
the  only  way  to  deal  with 
ill-conceived  projects. 


DEPARTMENTS/RESOURCES 


At  Deadline  Briefs  6 

News  Briefs .  8,14 

Letters . 21 

Company  Index . 52 

How  to  Ckmtact  CW . .52 

Shark  Tank . 54 


Slips  to  Securing  Vbur  Company 

SECURITT:  Security  eq>ert  and  author  Eric 
Cole  oudiaes  fiaur  general  principles  to 
make  an  organization  secure. 
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doo  deUmy  networks  reduce  the  response 
tune  and  incfease  the  availability  of  dynanuc 
Web  a^  hosted  at  a  centraloed  dau  center. 
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SMhS  SucoMBor  to 
DlwWnonRMtTiack 

ST0RA8E:  The  first  customers  could  be  using 
the  storage  managnneot  inteiface  spedfica- 
doQ  by  the  end  of  the  year 
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MOBILE/VnRELESS:  Companies  that  are  look¬ 
ing  to  set  up  wkeless  networks  need  m  get 
some  ptrifaniaary  work  done  first.  D  802J1 
Planet  coofereDce  weaker  advises. 
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AT  DEADLINE 


Microsoft  Adds  New 
Exchaiige  License 

Wcrosdft  Corp.  today  plans  lo  ro- 
laasa  Exchanga  Sonw  2tXt3  for 
manufacturing  and  aimounca  a 
par-uaar  danhaecosa  leanse  for 
(ha  massaging  softwara.  Tha  new 
Hcsnoa  taM  M  a  aingta  and  ussr 
aocaaa  Exdiaoga  Sarvar  2003 
ham  a  variaty  of  davicas,  said 
Mteroaoft  wMdt  ieansas  tha 
cwrant  varaion  of  Exchanga  on  a 
par  davica  basis.  Tha  upgrada  is 
due  to  sMp  ia  lha  third  quarter. 


3Com  Reports  Loss, 
Joint  Venture  Delay 

Santa  dan.  Cd(.-bBSod  SCoin 
Corp.  reported  a  S38.4  mlRon  nal 
ioas  OB  ravanua  of  SITS  mWon  lor 
ds  tawth  quarter,  which  ended 
May  30.  The  company  also  dfa* 
dosed  dial  a  natworidng  Joint 
vantura  wdh  Shenzhen.  China* 
based  HuawaiTaehnotegias  Co. 
is  new  axpactad  to  baooma  fully 
oporallonal  by  Novambar.  two 
months  lalaf  than  piannad.  3Cofn 
CEO  Brace  CfaMn  taimnad  ths  da¬ 
ily  primariy  on  Memat  fT  issues. 


Sun  Buys  Java 
Software  Vendor 

Sun  MlerosyatamB  he.  said  it  has 
Mpaad  to  aequirt  Pfao  he.  a  ven¬ 
dor  of  Jam-hnad  sarwsr  software 
dial  managM  tha  dhtriMilion  of 
dhHal  conhnl  to  moWs  devices. 
Stm  wM  ptor  an  undhctoaad 
amountofcaahforSaaJoea- 
baaad  Ptaa  and  fold  Hm  company 
into  Ms  aoftwara  and.  Tha  deal  it 
eipscisd  to  be  camphted  by  Sap- 
tamber.  Sun  said. 


Short  Takes 

H0ltfL£n-mCKAIlO  CO.  plans  to 
rassi  SuSE  Ltom  A6‘s  version  of 
Lhui  aito  said  M  wMI  ratoaao  a  8ne 
ofetostorodUnnsyatomshAu- 
quat . . .  A  hw  fIrvB  rapmsanthg 
sharabddsra  of  ELECTRONIC  DATA 
SYSTEMS  CORP.  sMd  M  plans  next 
awak  to  Me  a  daas-aetton  lawsuit 


Taxis  hiiad  IT  aarateis  Arm. 


PeopleSoft  User  Panel 
Opposes  Oracle’s  Offer 


Head  of  advisor>'  ixiard  says  buyout  bid 
poses  threat:  Oracle  continues  pursuit 


BY  TOOD  n.  WEISS 

ORACLE CORI>  last 
week  said  it  will 
continue  its  hostile 
takeover  bid  for  ri¬ 
val  PeopleSoft  Inc.  despite  re¬ 
cent  changes  in  a  proposed 
merger  deal  between  People- 
Soft  and  I.D.  Edwards  &  Ca 
Meanwhile.  PeoplcSoft’s  glob¬ 
al  customer  advisory  board 
announced  that  it  “firmly  sup¬ 
ports”  the  company's  decision 
to  reject  Oracle's  sweetened 
buyout  offer. 

Peg  Nicholson,  president  of 
the  advisory  board  and  CIO  at 
golf  equipment  maker  Acush- 
net  Ca  in  Fairhavea  Mass., 
said  in  a  statement  that  Ora¬ 
cle's  tender  offer  for  People- 
Soft  is  “clearly  anticompeti¬ 
tive"  and  poses  a  threat  to  ex¬ 
isting  investments  in  People- 
Soft's  business  appiication.s. 

''We  feel  strongly  that  an 
Oracle  acquisition  of  People- 
Soft  would  reduce  competi¬ 
tion  and  force  PeopleSoft  users 


n  An  Oracle 
acquisition  of 
PeopleSofi  would 
reduce  competition 
and  force  PeopleSoft 
users  to  migrate. 

PEG  NICHOLSON.  CK).  ACUSHNET  CO. 

to  migrate  from  their  current 
applications  and  possibly 
Itheir]  database  platforins,“ 
she  said.  “This  unnecessary, 
expensive  and  risky  effort  is 
clearly  not  in  the  best  interest 
of  PeopleSoft  customers." 

Unnecessary  Alarm 

In  response.  Oracle  said  that 
Pleasanton.  Calif.-based  Peo¬ 
pleSoft  “has  unnecessarily 
alarmed  its  own  customers  in 
a  cynical  effort  to  distract  at¬ 
tention  from  the  tangible  ben¬ 
efits  of  our  offer." 

When  Oracle  announced  its 


takeover  bid  on  June  6.  CEO 
Larry  Ellison  said  the  compa¬ 
ny  wouldn't  actively  sell  Peo- 
pleSofi's  applications  to  new 
customers,  a  comment  that  led 
some  PeopleSoft  users  to  react 
with  dismay.  But  Ellison  more 
recently  promised  to  continue 
developing  PeopleSoft's  prod¬ 
ucts  for  at  least  10  years  and 
said  users  won't  be  forced  to 
convert  to  Oracle's  E-Business 
Suite  Hi  applications. 

After  increasing  the  value  of 
its  offer  from  S5.1  billion  to 
S6.3  billion  on  June  18,  Oracle 
last  week  took  another  step  to 
show  that  it's  serious  about 
proceeding.  The  company  said 
it  would  waive  a  condition  in 
its  tender  offer  that  stated  it 
would  go  forward  only  if  Peo¬ 
pleSoft  and  Denver-based  J.O. 
Edwards  didn't  modify  the 
merger  agreement  they  an¬ 
nounced  on  June  2. 

PeopleSoft  and  J.D.  Edwards 
did  amend  the  deal  two  weeks 
ago  lo  an  effort  to  speed  up 
the  merger  and  potentially 
block  an  Oracle  takeover.  Al¬ 
though  Oracle  is  pushing  on. 
company  spokesman  Jim  Finn 


Government  Certification  of  Software 
Proposed  to  Boost  Homeland  Security 


The  U.S.  Department  of 
Homeland  Security  is  empha¬ 
sizing  government  security 
certifications  as  a  means  of 
improving  software  security 
while  avoiding  more  invasive 
government  intervention. 

The  policy  of  the  current  ad¬ 
ministration,  as  with  the  previ¬ 
ous  two.  has  been  to  allow 
market  forces  to  drive  security 
improvements  in  the  software 
industry.  However,  with  UttJe 
evidence  of  the  effectiveness 
of  that  approach,  the  govern¬ 
ment's  commitment  to  foster¬ 
ing  change  ia  under  scrutiny. 

At  a  homeland  security  con¬ 


ference  here  sponsored  by  the 
Center  for  Strategic  and  Inter¬ 
national  Studies  and  the  Infor¬ 
mation  Technology  Industry 
Council,  Microsoft  Corp. 
Chairman  Bill  Gates  last  week 

expressed  staunch  _ 

support  for  govern¬ 
ment  testing,  certi¬ 
fication  and  re¬ 
wards  for  security 
improvements. 

That  approach  is 

backed  by  Roben  - 

P.  Ltscouski.  assistant  secre¬ 
tary  for  infrastructure  at  DHS, 
who  distinguished  govern¬ 
ment  certification  from  the 
type  of  regulation  the  admin- 
istradoD  opposes.  He  said  that 


SECmnYMTES 

Microeon  Chaimun  6i  Gales 
sees  software  secuifty  as  key 
10  homeland  sacurty; 

OQMckLMt  38403 


although  private-sector  deci¬ 
sions  about  security  always 
come  down  to  a  business-case 
analysis,  companies  are  often 
forced  to  make  poor  software 
chokes,  given  the  state  of  soft- 

_  ware  quality  and 

security. 

"Ifwecanget  the 
risk  management 
industry  to  recog¬ 
nize  good  practices 
that  can  be  certi- 

-  fied ...  1  don’t  sec 

that  as  regulation."  he  said.  “I 
sec  that  as  a  very  positive  in¬ 
centive  to  get  the  industry  to 
go  where  it  has  to  ga" 

Dave  Carey,  president  of  in¬ 
formation  assurance  at  Oracle 


said  it  still  views  the  amended 
merger  ^reement  as  "an  un¬ 
lawful  device"  and  called  on 
PeopleSoft’s  board  to  meet 
with  Oracle  executives. 

But  PeopleSoft  was  unim¬ 
pressed.  "Oracle  Is  just  blow¬ 
ing  smoke  again."  said  spokes¬ 
man  Steve  Swascy. 

In  another  development, 
representatives  of  various 
state  attorneys  general  held  a 
conference  call  June  24  to  dis¬ 
cuss  the  possible  antiiru.st 
ramifications  of  Oracle’s 
takeover  bid.  The  call  fol¬ 
lowed  the  filing  of  an  antitrust 
lawsuit  against  Oracle  by  Con¬ 
necticut’s  state  government, 
which  b  in  the  midst  of  a  $100 
million  PeopleSoft  project. 

But  officials  ftx>m  Texas  and 
California  said  such  caUs  are 
routine  and  added  chat  they 
haven't  made  any  decisions  to 
intervene  in  the  buyout  fracas. 
Thb  b  a  standard  fact-find- 
ii^  process,”  said  Tom  Kelley, 
a  spokesman  for  the  Texas  at¬ 
torney  general's  office.  I 
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Corp.  and  a  former  CIA  offi¬ 
cer,  said  that  although  Oracle 
supports  various  government 
certification  processes,  such 
as  the  Common  Criteria  and 
Federal  Information  Proces.s- 
ing  Standard  140.  "they  are 
neither  easy  nor  cheap." 

On  average,  evaluations  of 
Oracle  products  have  taken 
eight  to  10  months  and  cost 
about  $1  million  each,  said 
Carey.  “But  once  done,  custo¬ 
mers  can  have  the  confidence 
that  the  security  features  in 
the  products  they  buy  func¬ 
tion  as  Intended,”  be  added. 

Whit  Diffle,  chief  security 
nfficer  at  Sun  Microsystems 
Inc.,  said  the  certification 
process  can  be  shortened,  but 
reducing  its  cost  will  require 
significant  changes  to  the 
overall  testing  architecture 
and  methodology.  3 


CIA-Supported  Storage  Virtualization 
Start-up  Emerges  With  SAN  Appliance 


Device  integrates 
storage  capacih'  on 
multivendor  arrays 

ev  LUCAS  MEAKIAN 

Candeta  Inc.  this  week  plans 
to  go  public  with  a  storage  vir- 
tualizacion  device  after  two 
years  of  development,  joining 
the  race  to  provide  users  with 
technology  that  can  combine 
different  storage  subsystems 
into  virtual  pools  of  data. 

Milpitas,  Calif.-based  Can- 
dera  will  announce  the  release 
of  its  SCE  510  appliance,  a 
combination  switch  and  virtu¬ 
alization  product  that  works 
on  multivendor  storage-area 
networks  (SAN).  The  stan-up. 
which  has  been  panty  funded 
by  the  CIA,  is  selling  the  sys¬ 
tems  in  clustered  pairs  that 
operate  separately  from  each 
other  but  can  balance  work¬ 
loads  between  them. 

Candera's  promise  is 
strai^tforward:  The  company 


says  that  using  application 
programming  interfaces  based 
on  standards  like  XML,  HTTP 
and  the  Simple  Network  Man¬ 
agement  Protocol,  the  SCE  510 
can  work  with  any  SAN  switch 
to  virtualize  the  storage  capac¬ 
ity  on  various  arrays  so  it  all 
looks  like  a  unified  pool. 

The  new  appliance  can  au- 
tomaticaUy  identify  devices 
on  SANs  by  disk  type,  vendor 
and  the  level  of  supported  re¬ 
dundancy  protection,  allowing 
systems  administrators  to  set 
up  dynamic  provisioning  poli¬ 
cies  for  different  types  of  data, 
according  to  Richud'  Meyer. 
Candera’s  principal  engineer. 

Market  Rivals 

The  SCE  510  will  com|>ete 
against  virtualization  products 
fti3m  vendors  like  IBM  and 
Hewlett-Packard  C^.  as  well 
as  Brocade  Communications 
Systems  Inc.'s  virtualization- 
enabled  Silkworm  Fabric  Ap¬ 
plication  Platform  switches. 


A  senior  storage  architect  at 
a  Global  100  company  said 
he’s  leaning  toward  the  Can- 
dera  box  over  rival  virtualiza¬ 
tion  technologies  from  IBM. 
FalconStor  Software  Inc.  and 
DataCore  Software  Corp.  be¬ 
cause  the  SCE  510  was  devel¬ 
oped  with  redundancy  and 
high  availability  in  mind. 

The  other  products  run  on 
commodity  hardware  that 
could  prove  to  &e  a  point  of 
failure  in  his  SAN.  ^Id  the 
storage  architect  wbo  asked 
that  be  and  his  company  not 


be  identified.  In  contrast.  Can- 
dera  is  using  a  pair  of  special¬ 
ized  processors  designed  to 
handle  heavy-duty  workloads. 

A  vice  president  of  architec¬ 
ture  and  capacity  planning  at  a 
large  financial  services  firm, 
who  also  asked  to  remain 
anonymous,  said  his  company 
beta-tested  the  SCE  510  last 
month  and  plans  to  roll  it  out 
in  September.  The  device 
should  let  IT  staffers  manage 
all  the  disk  arrays  on  the  firm's 
SOTB  SAN  through  a  single  in- 
terf^e.  the  executive  said. 

But  he  added  that  the  SCE 
510  is  missing  two  key  fea¬ 
tures:  support  for  migrating 
data  from  direct -attached  stor¬ 
age  devices  to  SANs,  and  data 


replication  capabilities  for  dis¬ 
aster  recovery  applications. 

Meyer  said  he  has  heard  the 
same  comment  from  other  po¬ 
tential  users  and  added  that 
both  of  those  features  are  in 
development.  Elut  he  couldn't 
say  when  they're  due  to  be¬ 
come  available. 

Mike  ^scb.  an  analyst  at 
The  Clipper  Group  Inc.  in 
Wellesley.  Mass.,  said  Can¬ 
dera's  product  could  make  a 
splash  in  the  storage  manage¬ 
ment  market  because  it  ad¬ 
dresses  ke)'  user  require¬ 
ments.  including  logical  unit- 
number  mapping,  capacity 
planning  and  dynamic  provi¬ 
sioning. 

Candera  is  also  jointly  de¬ 
veloping  securicy-relati^ 
hardware  and  software  fea¬ 
tures  with  ln-(iTcl  Inc.  in  Ar¬ 
lington.  Va.,  a  nonprofit  com¬ 
pany  that  acts  as  the  CIA's 
technology  funding  arm 
(Quicklink  33889|.  Those  fea¬ 
tures  include  support  for  the 
Lightweight  Directory  Access 
Protocol  and  Secure  Sockets 
Layer  standards  and  should  be 
added  to  the  SCESIO  in  the 
fourth  quaner.  Meyer  said.  I 


tecmnologv  details 


Candera’s  SCE  510 

•  Functions  as  both  a  Storage 
switch  and  a  virtualization  device. 


■  Supports  AIX  HP-UX. 

Solans  and  Windows- 

■  Provides  a  virlual  pool  of 
storage  from  mulhvendor  arrays. 
•  Starts  at  $KX).000  for  a  clus¬ 
tered  pair  of  appionces. 


HP  Expands  Hs  Storage,  Disaster  Recovery  Services 

OflFerings  include  system  assessments, 
installation  of  SAN  management  software 


BY  LUCAS  MCAfllAN 

Hewlett-Packard  Ca  last  week 
announced  ftve  storage  man¬ 
agement  and  disaster  recovery 
services  in  a  bid  to  take  advan¬ 
tage  of  an  uptick  in  storage- 
related  con^ting  that’s  being 
driven  by  tight  IT  budgets. 

The  services  being  offered 
by  HP  include  assessments  of 
how  to  optimize  storage  sys¬ 
tems,  data  replication  deploy¬ 
ments.  and  development  of 
disastn-  recovery  and  storage- 
area  network  (SAN)  manage¬ 
ment  architectures.  HP  said  It 
will  offer  the  storage  services 
as  part  of  both  straightforward 
consulting  engagements  and 
more  comprehensive  deals 
that  also  i^ude  technology 
installation  and  training. 

Charlie  Omdorff,  CIO  at 
Crossmark  Inc,  an  advertising 


and  marketing  company  in 
Plano.  Texas,  said  he  currently 
uses  both  HP  and  Veritas  Soft¬ 
ware  Corp.  for  IT  services  on 
some  storage  projects.  His 
dealings  with  HP  may  be 
widen^  over  the  next  few 
months:  Orodorff  intends  to 


merge  7TB  and  4TB  SANs  to 
reduce  his  staff's  storage  man¬ 
agement  headaches,  and  he's 
eyeing  HP’s  disaster  recovery 
and  business  continuity  ser¬ 
vices  as  part  of  that  plm 
‘’What  you  really  need  is  a 
comprehensive  solution  that 
says.  ‘If  I  go  down,  my  data 
will  be  available  in  one  hour, 
four  hours  or  whatever  the 


Omdorff  said.  He  added  that 
he  also  doesn't  want  to  have  to 
hire  specialized  IT  technicians 
to  manage  different  aspects  of 
the  combined  SAN  as  Cross¬ 
mark  installs  more  complex 
storage  technology. 

Rotert  Gray,  an  analyst  at 
IDC,  said  the  use  of  IT  ven¬ 
dors  to  help  design  and  imple¬ 
ment  storage  systems  is  on  the 
upswing  because  companies 
want  to  get  the  most  out  of 
their  technology  purchases  in 
the  current  economic  climate. 
Storage  vendors  ‘had  been 
selling  the  product  and  walk¬ 
ing  away,  leaving  (IT  man¬ 
agers]  underusing  what  they 
invested  in.*  Gray  said. 

The  disaster  recovery  man¬ 
agement  service  is  available 
now.  said  Gary  Wright,  vice 
present  of  HP’s  Network 
Storage  Services  division.  The 
other  services  announced  last 
week  are  scheduled  to  become 
generally  available  worldwide 


by  the  end  of  the  third  quarter. 

Gartner  Inc.  analyst  Adam 
Couture  said  the  announce¬ 
ment  was  largely  a  case  of  HP 
formalizing  storage  services 
that  it  and  the  fonner  Compaq 
Computer  Corp.  had  offered 
separately  through  their  rc- 
^>ective  consulting  sta&. 

HP  is  also  reducing  the 
maximum  fees  that  users  of  its 
SlorageWbrks  XP128  and 
XP1024  disk  arrays  could  pay 
under  its  metered  pay-per-use 
pricing  plan,  Wrigt»  said.  Be¬ 
fore,  companies  adopting  the 
metered  pricing  may  have 
paid  up  to  25%  more  than  the 
standard  monthly  lease  cost 
for  the  arrays,  depending  on 
bow  much  of  the  available 
storage  capacity  they  actually 
used.  Now.  HP  is  limiting  the 
extra  fees  to  no  mote  than  5% 
above  the  regular  price.  I 
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Ericsson  Taps  IBM 
To  Manage  Apps 

LH  Ericaaon  Talaphona  Co.  aiM 
R  has  aignad  a  proMnary  igref 
mart  to  ortaourca  davafcymanl 
and  naMananca  of  Ra  IT  appfi* 
cattona  la  ML  Tha  daal  came 
thraa  waalti  ^lar  Stoektiolm* 
baaad  Erkann  announced  a 
Rvo'yaae  cortract  for  Hewlatt* 
Pad^  Co.  to  manage  lb  IT  in- 
frasinidua  [QuidiLJnk  388331. 
Ericaaon  eapacb  to  RnaRza  the 
Ml  daai  hy  Septomber. 

EDS  Set  to  Raise 
$1.7B  in  Funding 

EtoetronfcOatoSyatamaCorp. 
annoimcad  that  R  eapacb  to 
ratoe  8L7  MMn  in  new  fundhig 
through  prteab  dirt  offerings 
The  daala  Mtowad  daetoiona 
by  two  nmior  cradR-tatlng  agen- 
daa  to  doaatgnda  their  ratingB 
rt  too  ilniggBng  IT  aarvicaa 
fina'a  dart.  Plane,  Tbu8*baaad 
B)8  aaM  R  wfl  abo  piopay 
S227  fflMon  Hurt  R  e«ei  to  an 
unidartiliad  aoRwara  aendof. 

Palm  Reports 
SmalerQdLoss 

MBlne.mi^nodiRtherad 
drttng  ill  fourth  quartar,  but  tha 


taa.rrtf  haaadfttonmportada 
316  adftm  net  hMBon  revanue  of 
S22S.0  niBon  far  be  quartar, 
rtdeh  ended  Itay  3L  The  loaa 
erne  ahaiil  half  ae  Wg  rtml 
RM  Sheet  Mdyib  Itod  feracast 
In  cenparinn.  Pahn  had  a  year 
earitor  daleR  of 327J  muon. 


Short  Takes 

COMPUTER  AS80CUTES  INTER- 
NATKMUL  WC.  mi  STEELCtOUO 
RIC.  armaunoad  a  daal  under 
i«hid)Oalaa.Va.-basadStoal- 
Cloud  wMbuHCA'seTniat 
toGurtly  aofimre  into  a  Ino  of 
MNvhuB  appianoaa. . . ,  Ml 
amno  Mimow  ei  na  leiuapnara 
CoHBuarce  and  WhbSphari  MQ 


MARK  HALL  •  ON  THE  MARK 

Wireless  Handheld 
Worid  Is  a  “Wild  West’. . . 

. . .  that  creates  vendor  shootouts  to  attract  developers  —  whether  in¬ 
dependent  software  vendors  or  in-house  programmers.  “Unlike  PCs, 
there  are  enofmous  real  differences  in  handhekl  devices  that  challenge  de¬ 
velopers,"  says  David  Nagel,  offering  a  litany  of  distinctions,  from  mul¬ 
tiple  screen  sizes  and  keypad  styles  to  the  operating  system  and  wire¬ 
less  service  provider  being  used.  The  CEO  of  PalmSource  Inc.  in  Sun¬ 
nyvale,  Calif.  —  the  company  that  licenses  the  Palm  OS  —  also  points 

held  iu  high-priced  lavaOne  revival 
meeting  for  “wireless  Java"  two  weeks 
prior.  Microsoft  can't  afford  not  to  attract 
n'  early  in  its  embrace  of  wireless  hand¬ 
helds.  ■  Corporate  interest  and  the  adop¬ 
tion  of  wireless  applications  is  changing 
the  demand  mix  for  handheld  applica¬ 
tions.  So  even  developers  who  dwell  in 
the  IT  netherworld  of  middleware  are 
seeing  opportunities  in  wireless  hand¬ 
helds.  Maritham  Tate,  vice  president  of 
business  development  at  SpiritSofi  Ltd. 
in  Milford,  Mass.,  says  his  company  is  re¬ 
leasing  a  r2£E-complianl 
messaging  application  called 
SpiritLite  so  IT  can  purii  toch- 
■ology  updabu  to  handhaUs. 
Expect  it  to  be  ready  by 
summer's  end.  ■  That  shift 
in  application  demand  is  ob¬ 
vious  to  Ryan  Wuerch,  CEO 
of  Nashviile-based  Palm- 
Gearrom.  While  virtually 
all  categories  are  growing 
among  the  18,000  Palm  OS 
programs  available  on  his 
company's  site,  the  gaiiMS 
eatogory  b  luddarty  baing 
grou^  to  busbna  software 
such  as  productivity  appU- 


out  that  400  million  to  500  million  sman 
phones.  Blackfierry-stylc  devices  and 
other  wireless-ready  mobile  devices  are 
shipped  each  year,  vs.  about  100  million 
PCs.  That  makes  it  at  once  the  most  con¬ 
fusing  and  most  promising  growth  mar¬ 
ket  around  for  developers.  And  because 
it  lacks  a  dominant  Microsoft  presence. 
Nagel  says,  “it’s  like  early  Wild  West  for 
developers,  with  wide-open  territory.’ 
Amid  this  chaos,  haivdhcld  vendors  are 
desperate  to  get  developers  to  settle 
down  with  their  systenu  and  tools.  ■ 
Which  explains  bit  wuah's 
bramlng  brouhaha  known  «s 
WMows  MoUb.  Irwin  Ro¬ 
drigues,  Microsoft's  lead 
project  manager  for  mobile 
devices,  acknowledges  that 
the  event  could  be  summed 
up  as  “a  message  to  develop¬ 
ers"  that  the  company  now 
has  ’a  single  API  tool  set  for 
Pocket  PC  and  Smartphone.’ 

Why  spend  aD  that  money  on 
invitations,  tchotchkes,  press 
releases  and  the  rest  when  a 
simpb  rmal  to  a  Mrtual  Baab 
duvatopor  fat  would  do?  Well, 
just  as  Sun  Microsystems  Inc. 


cations.  Wuerch  likens  the  path  of  wire¬ 
less  software  adoption  to  the  early  PC 
days  and  argues  that  the  handheld  mar¬ 
ket  is  following  a  similar  trajectory.  And. 
like  the  PC,  handhelds  will  prevail  over 
the  prior  technology.  (So  move  over. 
WinteL)  By  2010,  Wuerch  assumes,  your 
workforce  will  include  many  who  Ime 
the  power  of  today's  desktop  in  a  hand¬ 
held  and  use  it  occasionally  with  the  cra¬ 
dles.  keyboards  and  displays  found  in  of¬ 
fices,  homes,  hotels,  coffee  shops  and 
wherever  else  their  legs  take  them.  The 
PC  isn't  in  his  scenario.  ■  If  the  wireless 
market  walks  away  from  Wintel.  it  will 
caftainly  bi  a  Uck  in  tha  haad  for  ttw  “tor 
part,  which  has  so  much  at  stake  in  your 
persistent  replacement  of  PCs  with  new¬ 
er.  i^ter  models.  But  it’s  already  taken 
one  on  the  chin,  because  if  you  really 
want  the  newest,  fastest  desktop,  don't 
look  for  the  ’Intel  Inside"  logo.  In  Auguit 
Jfapb  Cornputor  Inc.  wM  iMp  tha  fastoat  daak- 
top  around,  the  Power  Macintosh  GS  64- 
bit  workstation  running  OS  X.  The  SPEC 
CPU  2000  benchmark  reveals  an  Apple 
dual-processor  G5  that's  about  40%  faster 
than  the  hottest  dual  Intel  Xeon  proces¬ 
sor  desktop.  Much  of  that  comes  from 
the  8GB  of  RAM  you  get,  twice  that  of  a 
32'bit  system.  Depending  on  their  need 
for  speed,  users  will  shell  out  from  $1,999 
(0  $2,999  to  have  the  fastest  hardware  in 
(own.  a  Before  you  sign  a  contract  with 
Apple  for  a  truckload  of  new  Macintosh¬ 
es,  think  about  pattinD  your  company’s  con¬ 
tracts  undsr  control  with  an  upcoming  re¬ 
lease  (No.  19,  to  be  exact)  of  the  Deter¬ 
mine  Application  Suite,  an  online  con¬ 
tract  management  application  from  San 
Francisco-based  Determine  Software  Inc. 
Among  other  improvements,  the  Aug.  14 
upgrade  will  be  able  to  track  and  audit 
changes  to  Word  documents  used  in  the 
contract  development  process.  So  be 
careful  what  you  say.  especially  about 
contract  lawyers,  b 


Microsoft  Freed  From  Carrying  Sun’s  Java 


An  appeals  court  last  week  re¬ 
versed  a  lower  court's  ruling 
that  Microsoft  Corp.  must  dis¬ 
tribute  a  version  of  Java  en¬ 
dorsed  by  Sun  Microsystems 
Inc.  But  the  appeals  court  also 
affirmed  a  ruling  that  Micro¬ 
soft  violated  Sun’s  copyright 
by  distributing  its  own  version 
of  Java  with  its  products. 

Both  companies  claimed 
victory  after  the  Fourth  U.S. 
Circuit  Court  of  Appeals  an¬ 


nounced  its  decision  on  June 
26,  another  step  in  Sun’s  pri¬ 
vate  antitrust  lawsuit  against 
Microsoft 

U.S.  District  (3ourt  Judge 
Frederick  Motz  erred  in  his 
Dec  23  ruling  requiring  Micro¬ 
soft  to  carry  the  Sun-compati¬ 
ble  version  of  Java  with  its  op¬ 
erating  systems  and  browser 
products,  since  there  was  no 
proof  that  Sun  would  suffer 
’unmediate  irreparable  harm" 
without  the  order,  appeals  court 
Judge  Paul  Niemeyer  wrote. 


The  appeals  court  did  up¬ 
hold  Motz's  order  prohibiting 
Microsoft  from  distributing 
any  verrion  of  Java  other  than 
the  one  allowed  by  Sun  in  a 
2001  license  agreement. 

Microsoft  spokesman  Jim 
Desler  called  last  week's  rul¬ 
ing  a  ’positive  step."  saying 
the  must-carry  or^r  was  the 
key  Issue  that  needed  reso¬ 
lution  on  appeal.  As  for  the 
copyright  infringement  order, 
Microsoft  already  complied  in 
February,  replacing  Windows 


XP  Service  Pack  1  with  XP 
SPla.  v^iich  excludes  Micro¬ 
soft’s  Java  virtual  machine. 

Lee  Patch,  Sun’s  vice  presi¬ 
dent  for  legal  affturs,  called 
the  appeals  court  ruling  on.tbe 
copyri^t  infringement  issue 
’an  important  victory  for  the 
Java  community." 

"This  decision  confirms 
that  Microsoft  violated  our 
prior  settlement  agreement, 
and  that  H  did  so  in  a  way  that 
continued  to  fragment  the  Java 
platform  on  PCs,"  Patch  said.  I 


Gross  writes far  the  IDC 
Newsservice. 


Has  your  Web  Hosting  provider 
left  you  dangling? 

business  on  solid  ground*  While  some  Web  Hosdrig  providers  are  abandoning  their  hostir^  operations 
or  struggling  vrith  questionable  finances,  AT&T  continues  to  grow  and  integrate  our  hosting  services  Into  our  networicing 
architecture  to  ensure  predictable  performance  of  your  applications  environment. 

You  can  count  on  AT&Ts  best*in<lass  hosting  services  to  deliver: 

*  ftsrformance  advantages  of  a  24X365  prediccive  management  pladbrm. 

B  Sobility.  security  and  reliability  of  AT&Ts  global  daa  centers. 

**  VahNIiKQtHtemandcapacity  and  ultra  awibbiiiy  of  AT&T^en»pri<p  nw^<>«nl^r^ngt«lllrw^n^ 

^  Industry-leading  port^  and  reporting  services  for  optimum  control  and  visMi^. 

*  Expertise  and  support  of  AT&T  resources. 

AT&T  hosting  professionals  will  ensure  your  migration  is  as  simple  and  as  efficient  as  posst)le. 

Contact  your  AT&T  Representative  or  our  Rapid  Response  Team  at  I  866  409-7054, 
or  visit  www.att.com/hosting. 
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NetWare  on  Linux 
Coming  This  "Vfear 


Novell  surprises  users  with  plans  to  speed 
up  delivery  of  services  on  Red  Hat,  SuSE 


■V  MATT  HAMBLEM 

1.  INC  is  poised 
to  begin  deUvering 
on  its  NetWare-on- 
Unux  promise  con- 
siderabty  sooner  than  many 
users  expected 
Novell  an¬ 
nounced  at  its 
Brainshare  conference  in  Apiii 
that  it  was  adopting  Linux  as 
its  migration  path  by 

making  NetWare  7  —  due  out 
in  two  years  —  a  set  of  ser¬ 
vices  would  run  on  both 
the  Linux  and  NetWare  ker¬ 
nels  [Qukklink  37843]. 

But  last  week,  Novell  said  a 
key  set  of  NetWare  services 
running  on  Linux  —  including 
directory,  fUe.  print,  messag¬ 
ing  and  management  services 
~  will  be  made  available  later 
this  year.  Novell  Nterprise 
Linux  Services  LO.  which  con¬ 
stitutes  about  60%  of  the  Net¬ 
Ware  services  stack,  will  run 
cm  Red  Hat  Enterprise  Linux 
and  SuSE  Linux  Enterprise 
Server.  It  will  go  into  limited 
beta  at  ISO  sites  next  month, 
Novell  officials  said. 

Several  users  gave  the  move 
an  unqualified  thumbs  up. 

Doug  BovaL  master  network 
engineer  at  St  Vincent  Hospi¬ 
tal  in  Indianapolis,  said  the 
medical  &cility  could  benefit 
from  Novell  suppon  for  Linux 
in  many  ways,  including  the 
possibility  of  moving  away 
frxMn  “cosdy  Windows-b^d 
desktops  to  Linux  desktops.** 
NetWare  on  Linux  also  would 
be  a  compelling  alternative 
to  some  applications  running 
on  high-priced  Unix  systems, 
he  said. 

Scott  IMey,  president  of  the 
Southern  Alberta  Novell  Users 
Group  in  Calgary,  also  wel¬ 
comed  the  move,  saying  he's 
looking  forward  to  using  such 
products  as  Novell's  iFblder 
file  services  on  limiT. 


OPEN-SOURCE 


Users  bad  every  reason  to 
be  surprised  by  last  week's 
announcement  since  Novell 
officials  at  Brainshare  suggest¬ 
ed  that  NetWare  services 
wouldn't  be  available  on  Linux 
until  the  relatively 
distant  release  of 
NetWare  7.  Those 
officials  are  now  saying  that 
they  planned  all  along  to 
make  some  services  available 
on  Linux  sooner  but  hadn't 
developed  the  road  map  suffi¬ 
ciently  to  make  an  announce¬ 
ment  at  Brainshare. 

"We  in  fact  knew  a  lot  at 


Brainshare,  but  we  didn't  know 
enough."  jeff  Hawkins,  vice 
president  of  Novell's  Linux 
business  office,  said  last  week. 
"We  were  well  along  the  way 
of  driving  the  engineering  ef¬ 
forts  and  aligning  all  of  the  or¬ 
ganization  b^ind  this  product 
reieasc,  but  we  weren’t  pre¬ 
pared  to  make  any  arutounce- 
ment  at  Brainshare  about  the 
actual  product  itself" 

Hawkins  indicated  that 
Novell  will  use  the  launch  of 
NetWare  6 J  this  summer  to 
push  the  new  Linux  offering. 

“There  probably  will  be  [a 
connection  between  NetWare 
6  J  and  Nterprise  Linux  Ser¬ 
vices  LO]  as  we  look  at  how 
we  get  our  current  customers 


to  embrace  it."  he  said.  “Those 
arc  going  to  be  pricing  and  de¬ 
ployment  strategies.  We’re  not 
announcing  those  right  now. 
but  you  can  imagine  that  those 
are  pretty  important  conversa¬ 
tions  chat  are  happening." 

John  Enck.  an  analyst 
at  Gartner  Inc.,  said  users 
that  plan  to  adopt  Linux  but 
have  never  considered  Net¬ 
Ware  may  like  Novell's  Linux 
strategy  because  Novell  has 
“stronger  directory  and  file/ 
print  services  than  the  open- 
source  community  provides." 

Novell  last  week  ^so  an¬ 
nounced  agreements  with  Dell 
Computer  Corp.,  Hewlett- 
Packard  Ca  and  IBM  under 
which  the  hardware  vendors 
will  offer  Novell’s  Liniu  prod¬ 
ucts  on  their  servers  and  col¬ 
laborate  with  Novell  on  Linux 
training  and  support. 

Jim  Stallings,  general  man¬ 
ager  for  Linux  at  IBM,  predict¬ 
ed  that  Novell’s  move  to  sup¬ 
port  Linux  will  put  pressure 


Novell 

Nterpi^  Linux 
Services  1.0 

The  software  wUI  enter  beta¬ 
testing  next  month;  pnetng  wasn't 
disdosed.  Services  include: 

B  Novel  eOlractefY  and  OirXill 

bNovbI  folder _ 

B  Novel  PrW _ 

•  Novel  Manager 


■  ZENworks  lor  Sorven 

B  Virtual  Office  vto  Extend 
{Nrecter  Standard  BflUon 

on  companies  like  Microsoft 
Corp.  “that  have  proprietary 
architectures  and  that  charge 
exorbitant  fees  for  them."  I 


Computerworid’sDon  Tennant 
contributed  to  this  report. 


Rashline  Promises  to  Cut 
Redundant  Development 


‘Super-registries’  in 
Version  4  oiganize 
software  assets 


BV  CABOL  SUWA 

Flashline  Inc.  today  will  an¬ 
nounce  a  new  version  of  its 
3-year-old  portal-like  flagship 
product  that's  designed  to 
help  companies  manage  and 
reuse  software  assets  they 
built  using  Web  services.  Java, 
.Net,  open-source  and  model- 
driven  development  methods. 

Flashline  4  features  five  pre- 
configured  “super-registries." 
called  FlashPacks,  to  organize 
a  company’s  software  assets, 
said  Charles  Stack,  CEO  and 
founder  of  the  Cleveland- 
based  company.  A  FlashPack 
serves  as  a  central  hub  where 
developers  can  go  to  evaluate 
projects  their  colleagues  are 
working  on  or  have  completed 
in  specific  development  areas, 
such  as  Web  services,  Java  or 
Microsoft  Corp.’8  J4eL 
FlashPacks  include  XML- 
based  schemata  to  describe 


the  software  assets,  sample 
metadata,  reports  that  mea¬ 
sure  the  usage  of  the  assets 
and  extensions  to  automati¬ 
cally  populate  the  registry. 

Tile  Flashline  Registry  Ad¬ 
vanced  Edition  introduces  a 
graphical  navigator  to  identify 
how  software  assets  are  relat¬ 
ed  to  particular  projects  and 
map  those  relationships  be¬ 
tween  the  various  projects. 
Coupled  with  new  assets- 


in-progress  capabilities,  the 
navigator  can  help  reveal  simi¬ 
lar  ongoing  development  ef¬ 
forts  within  or  among  pro¬ 
jects,  so  teams  can  eliminate 
redundant  work. 

To  help  teams  meet  their  re- 
tum-on-investment  goals, 
Flashline  is  adding  more  com¬ 
prehensive  metrics  to  allow 
developers  to  see  actual  sav¬ 
ings  from  every  group  that 
used  a  particular  component, 
model  or  pattern,  as  opposed 
to  merely  showing  the  savings 
achieved  by  the  group  that 
created  the  component. 

Other  new  features  include 
finer-grained  role-based  secu¬ 
rity  down  to  the  asset  level 
and  support  for  clustering  in 
IBM's  WebSphere  and  BEA 
Systems  lnc.’s  WebLogic  ap¬ 
plication  servers. 

Dale  Hite,  chief  technology 
officer  in  the  software  archi¬ 
tecture  group  at  Fidelity  Na¬ 
tional  Finandal  Inc.  (FNF)  in 
Jacksonville.  Fla.,  said  he's  par¬ 
ticularly  interested  in  Flashline 
4’$  new  ROI  caiculationcapa- 
bilities  and  project  hierarchy 
management  enhancements, 
so  titat  the  relationships  of 
components  to  projects  and 
products  can  be  inherited  from 


one  project  to  the  next.  About 
250  of  FNFs  geographically 
dispersed  developers  use 
Flashline,  which  runs  on  a  Lin¬ 
ux-based  WebLogic  server,  to 
collaborate  on  component- 
based  projects,  Hite  said. 

Rich  King,  a  software  engi¬ 
neer  at  Oiebold  Inc.  in  North 
Canton,  Ohio,  said  his  com¬ 
pany  began  using  FlashUne 
about  a  year  ago  as  part  of 
a  push  toward  component- 
based  development  of  auto¬ 
mated  teller  machine  software 
usir^  Microsoft’s  .Net  tools. 

"We  wanted  to  be  able  to 
create  custom  applications 
in  as  short  a  time  as  possible 
with  the  highest  quality  possi¬ 
ble,"  he  said. 

John  I^mer,  an  analyst  at 
Cambridge,  Mass.-bas^  For¬ 
rester  Research  Inc.,  said 
Fla^Uine  is  pushing  beyond 
mere  storage,  categorization, 
security  and  cbeck-in/cbeck- 
out  capabilities  in  Version  4. 

"They’re  providing  some 
utilities  that  will  help  in  main¬ 
taining,  evolving  and  ultimate¬ 
ly  promoting  much  greater 
reuse  of  assets,"  he  said 

Flashline  4  will  be  available 
at  the  end  of  July:  pricing 
starts  at  S70.000  for  75  users.  I 
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More  Vendors  Rolling  Out 
Sarbanes-Oxley  Software 


New  tools  are  focused  on  automating 
checks  of  Tinancial  controls  bv  users 


BV  TMOMAB  HOFFMAN 

OPEN  PAGES  INC.  this 
week  will  become 
the  blest  vendor  to 
offer  software  that's 
designed  to  help  companies 
meet  the  financial  documenta¬ 
tion  and  reporting  require¬ 
ments  of  the  Sarbanes-Oxley 
Act  of  2002. 

And  like  many  other  prod¬ 
ucts  that  have  been  an¬ 
nounced  recently,  the  Web- 
based  software  suite  devel¬ 
oped  by  Westford.  Mass.- 
based  OpenPages  specifically 
addresses  Section  404  of  the 
bw.  That  section  requires 
publicly  held  companies  to 
conduct  annual  evaluations  of 
their  fmancial  reporting  con- 
tn^  and  procedures. 

Vendors  such  as  Oracle 
Corp.  and  Redmond.  Wash- 
based  Concur  Technologies 
toe.  have  also  detailed  Section 
404  compliance  tool  kits 
(QukkLink  38S20]. 

In  addition.  Prodviti  Inc.,  a 
Menlo  Park.  Calif. -based  rirm 
that  offers  internal  auditing 
and  business-risk  consulting 
services,  last  week  introduced 
a  Web-based  repository  for 
organizii^  and  documenting 
Secdon  404  compliance  plans. 

OpenPages  said  its  Sarbanes- 
Oxley  Ei^ress  404  software  is 
based  on  I2EE  technology  and 
runs  on  top  of  application 
servers  from  Oracle  and  San 
[ose-based  BEA  Systems  Inc. 
The  software  is  priced  be¬ 
tween  $25,000  and  $65,000. 
depending  on  the  number  of 
end  users. 

Many  UnHs,  Ow  Database 

Volt  Information  Sciences 
loc.  a  New  York-based  pro¬ 
vider  of  temporary  stafTuig 
and  IT  services  that  has  annu¬ 
al  revenue  of  more  than  $3  bil- 
lioft.  plans  to  finish  installing 
the  OpenPs^es  software  on  a  I 


Windows  2000  server  this 
week- 

Jaroes  f.  Groberg,  Volt’s 
chief  financial  officer,  said  the 
company  operates  12  business 
units,  each  of  which  has  its 
own  accounting  and  profit- 
and-loss  (P&L)  responsibili¬ 
ties.  For  financial  reporting 
purposes,  “you  have  to  treat 
each  one  differently.”  he  not¬ 
ed.  But  Volt  is  looking  to  de¬ 
velop  a  database  that  links  the 
disparate  accounting  data  un¬ 
der  a  single  structured  format. 

After  evaluating  a  handful 
of  products.  Volt  in  May  set¬ 
tled  on  the  one  developed  by 
OpenPages.  Groberg  said  it 
helped  that  OpenPages  was 
willing  to  make  enhancements 
based  on  Volt’s  suggestions, 
including  the  creation  of  a 


master  content  chart  of  bal¬ 
ance-sheet  and  P&L  accounts. 

But  even  though  Sarbanes- 
Oxley  compliance  tools  are 
becoming  available  from  more 
vendors,  many  CIOs  and  other 
executives  are  still  having  a 
hard  time  comprehending  the 
act's  requirements.  Sarbanes- 
Oxley.  which  was  signed  into 
law  last  summer,  includes 
more  than  90  sections  and 
300  discrete  points  of  bw. 

Seeking  Clarity 

'Die  mandates  of  Sarbanes- 
Oxley  “aren't  very  clear."  said 
Louis  Boyle,  a  Meta  Group 
Inc.  analyst  based  in  Hilton 
Head.  S.C.  “CIO.s  have  been 
askir^  us.  'What  is  it?  What  do 
wc  need  to  do?  How  do  we 
prepare  for  it?’ " 

TTie  Ui».  Securities  and  Ex¬ 
change  Commission,  the  Pub¬ 
lic  Company  Accounting 
Oversight  Board  and  other 


regubtors  haven't  specified 
what  kind  of  information 
they’re  looking  for  from  com¬ 
panies,  said  Groberg.  "You're 
almost  working  in  the  dark  in 


terms  of  what  you’re  going  to 
have  to  provide,"  he  said. 

Protiviti  said  its  SarbOx 
Portal  software  is  designed  to 
provide  users  with  a  process- 
based  approach  to  document¬ 
ing  and  evaluating  their  fuian- 
cbl  reportii^  controls. 

The  software  is  being  of¬ 
fered  only  to  Protivjti's  con¬ 
sulting  clients,  and  a  company 
spokesman  said  pricing  "is 
being  kept  confidential."  I 


How  wduM  you  characterize  your  company's 
understaiKfing  of  the  Sarbanes-Oxley  Act? 


Weteelconfideni 
wehaveaotsspol 
it.  but  we  have 
more  work  to  do 


We're  |usl 
now  getting 
our  bearings. 


Wehavea 
mmimalunder- 
standmg  and 
need  help. 


9%  9% 


Excellent:  we 
have  a  really  strong 
grasp  of  (he  law. 
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Intel  Hopes  Madison  Will  Boost  Itanium  Use 


If  the  third  time  really  is  the 
charm,  then  Intel  Corp.  and  its 
hardware  partners  are  set  to 
reap  the  benefits  of  Madison, 
the  third  generation  of  the  64- 
bit  Itanium  processor  family, 
being  announced  today. 

Momentum  is  finally  build¬ 
ing  behind  Itanium  as  it 
evolves  from  a  low-volume 
product  to  one  that,  with  the 
introduction  of  Madison,  will 
be  more  attractive  to  users, 
said  Dean  McCarron.  princi¬ 
pal  analyst  at  Mercury  Re¬ 
search  in  Cave  Creek.  Ariz. 

Dell  Computer  Corp.  last 
week  releas^  details  about  its 
new  Itanium  server,  the  Madi¬ 
son-based  PowerEdge  32S0. 
which  is  the  company's  first 
Itanium  server  since  the 
bunch  of  the  inaugural  Itani¬ 
um  chip.  Dell  skipped  the  sec¬ 
ond  generation  of  Itanium, 


known  as  McKinley. 

Dell  decided  to  use  Itanium 
again  because  Madison  deliv¬ 
ers  a  superior  level  of  perfor¬ 
mance  over  the  McKinley  chip 
for  the  same  price,  said  Darrel 
Ward,  a  Dell  product  manager. 
The  PowerEdge  3250  is  a  dual- 
processor  server  that  users 
can  cluster  in  up  to  128  nodes. 
Ward  said.  Its  pricing  and 
avaibbility  will  be  announced 
bter  this  year. 

Hewlett-Packard  Co.,  IBM. 
Unisys  Corp.  and  others  are 
expected  to  make  systems 
with  the  new  processors  avail¬ 


able  during  or  soon  after  to¬ 
day’s  bunch. 

Itanium  systems  haven't  ap¬ 
peared  in  many  server  rooms 
because  of  the  lack  of  enthusi¬ 
asm  for  Intel's  EPIC  (explicitly 
parallel  instruction  comput¬ 
ing)  instruction  set,  intro¬ 
duced  with  the  first  Itanium 
chip  in  May  2001. 

Many  companies  use  32-bit 
x86  server  processors  such  as 
Intel’s  Xeon.  but  some  are  de¬ 
ciding  that  they  need  to  take 
advantage  of  a  64-bit  proc¬ 
essor’s  ability  to  store  more 
data  in  memory,  as  well  as  the 
wider  general-purpose  regis¬ 
ters  that  allow  for  better  per¬ 
formance. 

But  in  order  to  run  applica¬ 
tions  on  Itanium,  users  must 
port  all  of  them  to  the  new  in¬ 
struction  set.  which  can  be  a 
dme-consuming  process. 

Madison’s  increased  perfor¬ 
mance  will  be  an  incentive  to 


make  that  switch,  especially 
for  users  of  Microsoft  Corp.'s 
SQL  Server  database,  said 
Nathan  Brookwood.  principal 
analyst  at  Insight  64  in  Sarato¬ 
ga.  CaliL  "SQL  Server  has  real¬ 
ly  only  existed  on  the  32-bit 
Intel  Xeons,  and  databases  are 
the  horizontal  application  that 
benefit  the  most  from  64-bit 
architectures,"  said  Brook- 
wood.  "Anybody  is  using 
SQL  Server  on  Xeon  and  run¬ 
ning  out  of  gas  is  goii^  to  love 
this  processor." 

Advanced  Micro  Devices 
Inc.  also  offers  an  alternative 
for  users  contempbting  a  64- 
bit  architecture.  The  Opteron 
processor,  bunched  in  April, 
uses  64-bit  extensions  to  the 
x86  instruction  set  to  let  com¬ 
panies  keep  some  of  their  ap¬ 
plications  running  at  32  bits 
while  they  port  the  applica¬ 
tions  that  a  64-bit  ari^tecture 
will  benefit  the  most.  I 
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Microsoft  Blends 
Business  Units . . . 


Microsoft  Corp.  said  H  has  com* 
bined  its  Windows  server,  stor¬ 
age  software  and  developer  out¬ 
reach  organizations  into  a  single 
unit.  Eric  Rudder,  a  senior  vice 
president  wtw  had  been  in 
charge  of  the  developer  opera¬ 
tion.  will  head  the  merged  unit. 

The  company  also  named  Peter 
Cullen  chief  privacy  strategist, 
effecttve  July  14.  CuHen  is  now 
corporate  privacy  officer  at  Roy¬ 
al  Bank  of  Canada  in  Toronto.  i 

. . .  And  Warns  of 
Windows  Flaws 

Microsoft  warned  of  two  newly 
discovered  security  vulnerabili- 
ties.  including  one  that  involves 
the  Windows  Media  Services  fea¬ 
ture  in  server  versions  of  Win¬ 
dows  2000.  Microsoft  gave  the 
flaw  an  “important''  severity  rat¬ 
ing  and  said  attackers  could  use 
it  to  run  malicious  code  on  un¬ 
protected  systems.  The  other 
hole  is  in  Microsoft's  Windows 
Media  Player  9  Series  software.  | 


SAP,  Oracle  to 
Resell  Adapters  | 

Information  Builders  lnc.'s  iWay 
Software  tr»c.  unit  in  New  York 
said  SAP  A6  plans  to  resell  a 
software  adapter  that  connects  | 

SAP's  Net  Weaver  integration  i 

techrmlogyfotheUCCnetprDd-  I 
uct  data  synchronization  hub.  ' 

Meanwhile.  Attunity  Ltd.  in 
WakefteM.  Mass.,  said  Oracle 
Corp.  will  resell  a  set  of  adapters 
that  Fink  its  0racie9i  Application 
Server  software  to  mainframes.  | 

Short  Takes 

GEAC  COMPUTER  CORP  in  Mark¬ 
ham.  Ontario,  said  it  has  agreed  , 

lobuyCOMSHARF  ihC  .adevel-  I 

oper  of  corporate  planning  and 
budgeting  software  in  Ann  Arbor. 
MkfL.  for  SS2  million  (U.S.)  in 

cash _ ADVANCED  MICRO 

DEVICES  INC  said  it  will  report 
lower-than-expected  sales  for  | 
the  second  quarter. 


NY  Hospitals  Part 
Ways  on  IT^  Tap  IBM 


Outsourcing  dctils 
to  scfuiratc  s\  stents, 
tech  strategics 

BY  BOB  BREWtN  AND 
JUAN  CARLOS  PEREZ 

IHM  Iasi  wock  announced 
ihai  ii  has  sitined  con¬ 
tracts  to  manage  the  core 
computing  systems  of 
'  three  .Nex\  York  hospitals. 

^  which  an-  using  the  deals  to 
dismantle  a  shared  IT'  unit  so 
I  each  lacility  can  sei  its  own 
technology  direction. 

I'he  agre-ements  with  Mount 
Sinai  Hospital.  Ne^^  Yi>rk  Uni¬ 
versity  .Medie.al  ( Center  and 
NYU  I>owntown  H»>spitalgo 
into  clYect  tliis  ueek  .and  have  a 
combined  vulue  of  SdRO  milium 
over  the  neM  10  years.  IBM 
said.  Together,  they  represent 
the  largest  hospit.il  IT  oui- 
stmreing  deal  tire  c»»mpany  has 
won  thu.s  far. 

The  thriv  h«*spiia)s  begiin 
consolidating  their  IT  depart¬ 
ments  in  when  they  were 
combined  under  a  nonprofit 
holding  company  called  Mi'unt 
Sinai  NYU  Health.  ITicy  now 
share  a  data  center  at  a  Mount 
Sinai  building  in  Manhattan. 

During  the  next  IK  months. 
IBM  will  iran-sfer  applications 
from  that  data  center  to  redun¬ 
dant  faciiitH-s  it  owns  on  Staten 
Island  and  in  BiK'hester.  N.Y. 
Dave  Licderhjch.  vice  presi¬ 
dent  of  IBM's  health  care  in¬ 
dustry  unit,  said  the  et»mpany 
w  ill  host  all  of  the  clinical  and 
business  applications  for  the 
three  httspitais  and  pnwide  I 
disaster  recovery  and  business  I 
cxmiinuiry  capabilities.  “We're 
basically  facilitating  a  restruc'  j 
turing  and  separation  of  their  ^ 
rr  infra-structure."  he  said. 

Richard  Donoghue.  senior  j 
vice  president  of  strategy  and  ' 
business  devehipmeni  at  NYU  ! 
Medical  (A-nter.  said  the  I  T  re¬ 
quirements  of  tbi'  three  htvspi- 
tals  have  started  to  diverge. 

“The  demands  placed  on  the 
IT  department  by  the  hmpitals 


were  pulling  the  IT  leadership 
in  different  direetums  and  cre¬ 
ating  problems."  he  said. 

For  example.  Donoghue 
!  said.  NYU  Medical  t;enler 
wants  to  carry  out  an  ITdesel- 
I  opment  plan  at  its  own  pace 
I  and  according  t«v  its  ow  n  prior- 
I  ilics.  without  having  to  cimrdi- 
j  nate  projecls  with  Mount  Sinai 
I  Hospital.  Each  hi>spiial  also 
wants  to  set  an  independent 
strategy  for  meeting  the  priva¬ 
cy  n.‘quiix-mcnts  of  the  Health 
j  Insurance  Portability  and  Ac- 
’  countability  Act.  he  added. 

I  T  he  hospitals  exps-ct  IBM  tt> 

I  split  the  rr  infrastructure  into 
three  entities  by  mid-2005.  ac- 
I  cording  to  Donoghue.  About 
I  .MO  oiThe  500  .staffers  in  the 
I  shared  IT  department  will  be 
shifted  to  IBM.  he  said.  Other 
;  workers  will  be  assigned  to 


Siemens  Rollout  Encrypts 
Medical  E-mail  Messages 


'lix)l  will  help  ensure 
mi’A.A  eompliiinee 

BY  BOB  BREWIN 

SienK*t»s  AG's  health  care  tech¬ 
nology  unit  tr*day  plans  to  in¬ 
troduce  a  secure  messaging 
system  designed  to  ensttre  that 
electrenic  communications  be¬ 
tween  patients  and  their  doc¬ 
tors  and  K’lwecn  physicians 
and  hospitals  comply  with 
data  privaL7  laws. 

Sue  Merk.  director  pQfl 
of  community  innova¬ 
tions  at  Erlangen,  (iermany- 
based  Siemens  Medical  Solu¬ 
tions.  said  the  new  sy-stem 
supports  the  Advanced  En¬ 
cryption  Standard  and  i.s  built 
anmnd  technok^y  from  Sig;»ba 
Gorp..  a  subsidiary  of  Secure 
Data  In  Mtttion  Inc.  in  San 
Mateo,  (.’alif. 

The  software  can  scale  fn>m 
small  medical  practices  to  the 
largest  hospitals.  Merk  said.  It 


uses  a  rules-based  smgine  to 
check  e-mail  and  instant  mes¬ 
sages  for  any  personally  iden¬ 
tifiable  information  about 
paiicnis,  in  keeping  with  the 
requirements  of  the  Health 
In-surance  Portability  and 
Accountability  Act  (HII'AA). 

Me.ssages  that  have  such 
data  are  then  encrypted.  End 
users  can  access  encrypted 
e-mail  by  typing  in  a  user 
name  and  passw’ord.  which 
activates  a  Sigaba- 
m;y  developed  .secure  key 
server.  The  syTitem  can 
also  bi*  beefed  up  to  require 
the  use  of  biometric  identifiers 
such  a.s  thumbprints,  Merk  said. 

Alegent  Health,  an  Omaha- 
based  nonprofit  health  care 
company  that  operates  eight 
hospitals  and  100  medical  clin¬ 
ics.  has  signed  on  lt»  use  the 
new  messaging  system.  Ken 
Lavvonn.  visv  president  of  IT 
ai  Alegent.  .said  the  company 
views  e-mail  as  an  effective 


the  individual  hospitals,  partly 
to  help  manage  their  outsourc¬ 
ing  relationships  with  IBM. 

I-iederbach  said  he  doesn't 
know  how  many  applieatM)ns 
IBM  will  host  and  support  in 
total,  but  he  noted  that  it 
could  “run  into  the  hundreds.” 

Although  the  outsourcing 
contracts  are  separate,  they 
share  one  important  element: 
the  creation  of  improved  dis¬ 
aster  recovery  capabilities. 

The  move  to  set  up  redundant 
data  centers  is  designed  to  en¬ 
sure  continuity  of  IT  opera¬ 
tions  in  the  event  t)f  a  natural 
disaster  or  an  incident  like  the 
Sept.  11  terrorist  attacks. 

The  attacks  in  2001  de¬ 
stroyed  NYU  Medical  Center's 
data  center,  which  was  near 
the  World  Trade  ('enter  com¬ 
plex.  It  took  the  hospital  three 
days  u>  restore  its  critical  sys¬ 
tems.  whereas  the  ci>ntracl 
with  IBM  stipulates  that  appli¬ 
cations  must  be  back  in  opera¬ 
tion  within  12  hours,  k 


Perez  wriies/or  the  lOCJ 
News  StT\»ice. 


way  to  do  business  but  also 
needs  to  ensure  that  it  com¬ 
plies  with  HIPAA. 

Alegent  has  5.000  e-mail 
accounts,  and  Lawonn  said  it 
plans  to  run  all  external  mes- 
.sages  thtxmgh  the  Siemens 
s*>ftware.  He  added  that  he's 
also  looking  to  u.sl'  the  system 
to  support  direct  ft>rms  of 
communication,  including 
e-mail  billing  and  sending 
medical  rca>rds  to  patients. 

Alegent  installed  a  small 
UIVComp.iq  server  to  run  the 
software  and  paid  an  upfront 
fee  of  about  SM.tKK).  .Siemens 
will  bill  Alegent  on  a  per- 
message  basis  under  an  appli¬ 
cation  serv’ice  provider  con- 
tnYct.  Merk  said.  Doctors  who 
praaiccat  Alegent  facilities 
pay  SIO  per  month  for  unlimit¬ 
ed  access  to  the  messaging  sys¬ 
tem  via  a  PC  plug-in. 

Lawonn  said  Alegent  em¬ 
ployees  would  have  to  send 
more  than  I  million  messages 
each  year  —  a  total  that  isn't 
realLstically  possible  now  — 
before  the  company  would 
need  to  consider  buying  the 
Siemens  software  outright.  I 


BRIEFS 


licrosaft  Blends 
Business  Units .. . 

WcroMfl  Corp.  said  il  has  com- 
binad  to  Whdiim  ssmr.  stor* 
iOS  soltoifa  and  davaiopsr  ouf- 
nadi  orBanbatisns  Into  a  single 
unit  Eric  Ruddar,  a  sanlor  vica 
prasidani  who  had  baan  In 
charis  of  tha  daeaiogaf  ogan* 
tiofi.  aril  haad  dm  margod  unH. 
The  eamgany  atso  namad  totar 
Ctdian  chiafgriMKy  strategist, 
attactiva  July  td.  Cuftan  is  now 
corporala  privacy  officar  at  Roy¬ 
al  Bank  of  Canada  in  Toronto. 


...And  Warns  of 
Windows  Flaws 

IReroaoft  wamad  of  two  newly 
itf  ceearad  aacurity  wtoarabU- 
tfoa.  hwludbiB  one  that  Inwelves 
tha  Windows  Madhi  Sarvicaa  iaa- 
tm  In  aarvor  vaniona  of  Win¬ 
dows  2000.  Meraaoft  gave  the 
flaw  an  nraportanT  aavarily  rat¬ 
ing  and  said  attachan  could  use 
it  to  run  maRdous  coda  an  un- 
prolaclBd  syatama.  TW  other 
hois  is  In  hRcreoeft'i  Windows 
hMto  PInyar  9  Sorias  software. 


SAP.  Oracle  to 
Resel  Adapters 

Information  BuBdara  hie.’s  iWhy 
Software  Inc.  unit  In  Haw  Ybrit 
aald  SAP  A6  plana  ID  riaal  a 
■oftwara  adaptar  that  connactB 
SAP*a  HatWinew  Irdagratiuii 
tochneiegy  hr  OiaUCCnat  prod¬ 
uct  drta  aynchreniaation  hob. 
ltoanwMs.AtlunityUlhi 
WdwfWd.llM8..aaid0rada 
Corp.  wW  resal  a  aat  of  adaptars 
that  tok  to  OradaW  AppBcadon 
Server  aefhvara  to  maktfrafflea. 


Short  Takes 

BEACCOMPVTERCOftP.Inllartt- 
ham.  Ontario,  laid  M  haa  agrawi 
tobifyCOMSHAftEmC..adavul- 
opor  of  corporato  planning  and 
budgating  aoftwara  in  Afui  Arbor. 
Mcfi.,tDrSS2m«on(US.)in 
caah. . . .  AOWMCED  WCftO 
DEVICES  MC  said  it  wH  rapori 

tha  aacond  quartar. 


NY  Hospitals  Part 
Ways  on  IX  Tap  IBM 


Outsourcing  deals 
to  separate  systems, 
tech  strategies 

BY  008  OnEWIN  AMO 
JUAN  CAOLOa  PEnC2 

IBM  last  week  announced 
that  it  has  signed  con¬ 
tracts  to  manage  the  core 
computing  systems  of 
three  New  York  hospitals, 
which  are  using  the  deals  to 
dismantle  a  shared  IT  unit  so 
each  facility  can  set  its  own 
technology  directiocL 
The  agreements  with  Mount 
Sinai  Hospital.  New  York  Uni¬ 
versity  Medical  Center  and 
NYU  Downtown  Hospital  go 
into  effect  this  week  and  have  a 
combined  value  of  $380  million 
over  the  next  10  years,  IBM 
said.  Tc^ether.  they  represent 
the  largest  hospital  IT  out¬ 
sourcing  deal  the  company  has 
won  thus  far. 

The  three  bospitab  began 
I  consolidating  their  IT  depan- 
ments  in  199^  when  they  were 
combined  under  a  nonprofit 
holdii^  company  called  Mount 
Sinai  NYU  Health.  They  now 
share  a  data  center  at  a  Mount 
Sinai  building  in  Manhattan. 

During  the  next  18  months. 
IBM  will  transfer  applications 
from  that  data  center  to  redun¬ 
dant  tacililies  it  owns  on  Staten 
Island  and  in  Rochester,  N.Y. 
Dave  Uederbach,  vice  presi¬ 
dent  of  IBM's  health  care  in¬ 
dustry  unit,  said  the  company 
will  host  all  of  the  clinicd  and 
business  applications  for  the 
three  hospitals  and  provide 
disaster  recovery  and  business 
continuity  capabilities.  “We're 
basically  facilitating  a  restruc¬ 
turing  and  separation  of  their 
IT  infrastructure.''  he  said. 

Richard  Dont^ue.  senior 
vice  president  of  strategy  and 
business  development  at  NYU 
Medical  Center,  said  the  IT  re¬ 
quirements  of  the  three  hospi¬ 
tals  have  started  to  diverge. 

The  demands  placed  on  the 
IT  department  by  the  hospitals 


were  pulling  the  IT  leadership 
in  different  directions  and  cre¬ 
ating  problems,"  he  said. 

For  example,  Donoghue 
said.  NYU  Medical  Center 
wants  to  carry  out  an  IT  devel¬ 
opment  plan  at  its  own  pace 
and  according  to  its  own  prior¬ 
ities.  without  having  to  coordi¬ 
nate  protects  with  Mount  Sinai 
Hospital  Each  hospital  also 
wants  to  set  an  ind^>endent 
strategy  for  meeting  the  priva¬ 
cy  requirements  of  the  Health 
Insurance  IHtrtability  and  Ac¬ 
countability  Act,  he  added. 

The  hospitals  expect  IBM  to 
split  the  IT  inffastructure  into 
three  entities  by  mid-200S,  ac¬ 
cording  to  Donoghue.  About 
340  of  the  500  staffers  In  the 
shared  IT  department  will  be 
shifted  to  IBM.  he  said.  Other 
workers  will  be  assigned  to 


Siemens  Rolloiit  Encrypts 
Medical  E-mail  Messages 


Tool  will  help  ensure 
HIPAA  compliance 

BY  BOO  BflEWIN 

Siemens  AG's  health  care  tech¬ 
nology  unit  today  plans  to  in¬ 
troduce  a  secure  ntessaging 
system  designed  to  ensure  that 
electronic  communications  be¬ 
tween  patients  and  their  doc¬ 
tors  and  between  physicians 
and  hospitals  comply  with 
data  privacy  laws. 

Sue  Merk,  director 
of  community  innova¬ 
tions  at  Eriangen.  Germany- 
based  Siemens  Medical  Solu¬ 
tions,  said  the  new  system 
supports  the  Advanced  En¬ 
cryption  Standard  and  is  buiit 
around  technology  from  Sigaba 
Corp.,  a  subsidiary  of  Secure 
Data  In  Motion  Inc.  in  San 
Mateo,  Calif. 

The  software  can  scale  from 
small  medical  practices  to  the 
largest  hospitals.  Merk  said.  It 


uses  a  rules-based  engine  to 
check  e-mail  and  instant  mes¬ 
sages  for  any  personally  iden¬ 
tifiable  Information  about 
patients,  in  keebing  with  the 
requirements  of  the  Health 
Insurance  Portability  and 
Accountability  Act  (HIPAA). 

Messages  that  have  such 
data  are  then  encrypted.  End 
users  can  access  encrypted 
e-mail  by  typing  in  a  user 
name  and  password,  which 
activates  a  Sigaba- 
developed  secure  key 
server.  The  system  can 
also  be  beefed  up  to  require 
the  use  of  biometric  identifiers 
such  as  thumbprints.  Merk  said 
Alegent  He^th.  an  Omaha- 
based  nonprofit  health  care 
company  that  operates  eight 
hospitals  and  100  medical  clin¬ 
ics,  has  signed  on  to  use  the 
new  messaging  system.  Ken 
Lawonn,  vice  president  of  IT 
at  Alegent,  said  the  company 
views  e-nuU  as  an  effective 


the  individual  hospitals,  partly 
to  help  manage  their  outsourc¬ 
ing  relationships  with  IBM. 

Liederbach  »td  he  doesn't 
know  how  many  applications 
IBM  will  host  and  support  in 
total,  but  he  noted  that  it 
could  “run  into  the  hundreds." 

Although  the  outsourcing 
contracts  are  separate,  they 
share  one  important  element; 
the  creation  of  improved  dis¬ 
aster  recovery  capabilities. 

The  move  to  set  up  redundant 
data  centers  is  designed  to  en¬ 
sure  continuity  of  IT  opera¬ 
tions  in  the  event  of  a  namral 
disaster  or  an  incident  like  the 
Sept.  U  terrorist  attacks. 

Hie  attacks  in  2001  de¬ 
stroyed  NYU  Medical  Center's 
data  center,  which  was  near 
the  World  TVade  Center  com¬ 
plex.  It  took  the  hospital  three 
days  to  restore  its  critical  sys¬ 
tems.  whereas  the  contract 
with  IBM  stipulates  that  appli¬ 
cations  must  be  back  in  (^ra¬ 
tion  within  12  hours.  I 


Perez  writes  /or  the  IDG 
Newsservice. 


I  way  to  do  business  but  also 
needs  to  ensure  that  it  com¬ 
plies  with  HIPAA. 

Alegent  has  5,000  e-mail 
acxounts.  and  Lawonn  said  it 
plans  to  run  all  external  mes¬ 
sages  through  the  Siemens 
software.  He  added  that  he's 
also  looking  to  use  the  system 
to  support  direct  forms  of 
communication,  including 
e-mail  billing  and  sending 
medical  records  to  patients. 

Alegent  installed  a  small 
HP/Compaq  server  to  run  the 
software  and  paid  an  upftront 
fee  of  about  $14,000.  Siemens 
will  bill  Alegent  on  a  per- 
message  basis  under  an  appli¬ 
cation  service  provider  con¬ 
tract,  Merk  said.  Doctors 
practice  at  Alegent  fsKilities 
pay  $10  per  month  for  unlimit- 
cd  access  to  the  mess^ing  sys¬ 
tem  via  a  PC  plug-in. 

Lawonn  said  Alegent  em¬ 
ployees  would  have  to  send 
more  than  1  million  messages 
each  year  a  total  that  isn't 
realistically  possible  now  — 
before  the  company  would 
need  to  consider  buying  the 
Siemens  software  outright.  I 
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YOU’RE  CUTnNG  COSTS, 
TRIMMING  STAFF  AN 


Continued  from  page  I 


I  Hed  and  resolved  more  than 
I  400  technical  and  editorial  is¬ 
sues  raised  about  the  prior 
version.  The  group  later 
tracked  seven  SOAP  1.2  imple¬ 
mentations  from  various  W9C 
member  organizations  and  in¬ 
dependent  developers  to  en¬ 
sure  their  interoperability. 

SOAP  L2  provides  a  more 
precise  description  of  the 
processing  model  and  removes 
ambiguities  that  sometimes 
led  to  interoperability  prob¬ 
lems  for  those  trying  to  imple¬ 
ment  Version  1.1,  said  David 
Fallside,  chairman  of  the 
WJC’s  XML  Protocol  Working 
Group  and  a  serrior  technical 
stafT  member  at  IBM. 

“By  providiitg  the  process¬ 
ing  model  in  greater  detail  and 
expanding  the  scope  of  cases 
that  it  covers,  you  signirtcantly 
reduce  the  chances  that  two 
different  people  sent  off  to  im¬ 
plement  the  specification 
would  come  up  with  imple¬ 
mentations  that  are  not  inter* 


transition  period,  SOAP  1.1 
will  co-cxist  with  SOAP  1.2. 

Jason  Bloomberg,  an  analyst 
at  ZapThink  LLC  in  Waltham. 
Mass.,  said  he  thinks  it  will 
lake  a  year  or  two  for  SOAP 
1.2  to  work  its  way  into  pn>d- 
ucts.  in  the  meantime,  “ven¬ 
dors  and  end  users  are  going 
to  be  annoyed  at  rimes  at  the 
fact  that  there  are  two  (ver¬ 
sions  of  SOAP],"  he  said.  But 
he  added  that  work  is  ongoing 
in  the  Web  Services  Interoper¬ 
ability  (WS-I)  Organization  to 
create  profiles  on  how  to  use 
standards  such  as  SOAP. 

Users  will  have  to  wait  for 
SOAP  1.2's  improvements, 
such  as  protocol-agnosticism. 
SOAP  1.1  confined  users  to 
sending  messes  over  HTTP, 
but  with  1.2.  they  will  be  able 
to  choose  other  protocols, 
such  as  SMTP.  TCP/IP,  BEEP 
(the  Blocks  Extensible  Ex¬ 
change  Protocol)  and  IBM's 
MC^Series,  Faltside  said. 

"We  expect  a  lot  of  people 


will  flow  XML  messages  over 
HTTP,  so  there  is  an  HTTP 
binding  for  SOAP.  But  you 
don't  have  to  use  it  “  he  said. 

Bloomberg  said  HTTP  was 
never  designed  for  sysiera- 
to-system  communications. 
“HTTP  was  really  designed 
for  hypertexL  HTTP  is  syn¬ 
chronous.  and  it’s  not  secure. 
It's  not  reliable,”  he  said.  “So 
it's  definitely  good  to  support 
other  protocols  for  different 
uses,  whether  it’s  message 
queuing  protocols  or  asyn¬ 
chronous  messaging  protocols 
of  other  kinds." 


week  that  Version  1.2  of  SOAP 
—  a  key  foundation-level  tech¬ 
nology  for  companies  building 
Web  services  —  has  achieved 
“recommendation"  status. 

Recommendation  status 
means  SOAP  1.2.  a  set  of  rules 
for  exchanging  structured  in¬ 
formation  among  systems  or 
organizations,  is  a  fully  vetted 
standard  that  has  gone  through 
a  rigorous  public-review  proc¬ 
ess  and  substantive  interoper¬ 
ability  testing. 

By  contrast.  SOAP  1.1  was  a 
de  &cto  standard  that  was  nev¬ 
er  vetted  by  the  W3C  or  any 
other  standards  body,  said  Don 
Deutsch.  vice  president  of  stan¬ 
dards  strategy  and  architecture 
at  Oracle  Corp.  and  a  member 
of  the  W3C  Advisory  Board. 

The  W3C's  XML  Protocol 
Working  Group,  which  was  re¬ 
sponsible  for  SOAP  1.2.  identi- 


operablc."  Fallside  said. 

But  it’s  unclear  when  ven¬ 
dors  will  adopt  SOAP  1.2. 
Deutsch  said  Oracle  is  com¬ 
mitted  to  supporting  the  stan¬ 
dard.  but  he  couldn't  say  when 
that  will  happen  because  “to 
do  anything  meaningful"  with 
SOAP,  most  tool  kits  depend 
on  another  standard,  the  Web 
Services  Description  Lan¬ 
guage  (WSDL).  The  W3C  is 
still  working  on  WSDL  U. 
Deutsch  said  it  will  take 
“some  time"  for  vendors  to 
fully  support  all  ihd  features 
of  SOAP  1.2.  so  during  the 


Divisian  of  Labor 

The  W3C  group  working  on 
SOAP  12  split  the  specifica¬ 
tion  into  two  parts  ~  essential 
'  SOAP  (which  includes  the 
processing  model,  the  extensi¬ 
bility  frameworic  and  the  mes¬ 
sage  construct),  and  optional 
elements,  such  as  the  rules  for 
representing  a  remote  proce¬ 
dure  call  (RPC),  encoding 
SOAP  and  describing  an 
HTTP  binding.  Fallside  said 
the  separation  breaks  the  old 
perception  that  SOAP  is  mere¬ 
ly  RPC  over  HTTP. 

Another  key  change  in 
SOAP  1.2  is  that  it’s  based  on 
the  XML  Information  Sec, 
which  provides  a  way  of  de- 
scribii^  the  information  con¬ 
veyed  in  an  XML  document 
By  contrast,  pointy  brackets 
were  paramount  with  SOAP 
l.l,  w^h  was  based  on  XML 
LO  serialization.  Deutsch  said. 

“The  upshot  is  more  flexi¬ 
bility  in  the  representation  of 
messages,  so  you  can  tailor  or 
customize  for  your  appUca- 
lion/business  requirements," 
he  said. 

Fallside  said  this  will  be 
helpful  for  companies  that 
need  to  send  more  compact 
messages  between  applica¬ 
tions  via  an  extremely  low- 
bandwidth  coimection.  He 
said  he  expects  that  most 
companies  will  still  use  XML 
representations,  since  that  will 
allow  them  to  use  off-the-shelf 
tools  and  applications.  I 


Continued  fnym  page  1 

Outsourcing 

is  the  dominant  trend  in  the 
IT  services  industry,  with  42% 
of  the  appUcacion  manage¬ 
ment  contracts  now  having 
some  o&hore  componenL  A 
big  reason  is  cost. 

Bob  Walters,  IT  director  at 
supply  chain  system  provider 
Intermec  Tedmok^es  Corp. 
in  Everett.  Wash.,  surveyed  de¬ 
velopment  costs  recently  at  an 
SAP  AG  user  conference.  He 
determined  that  U.S.  compa¬ 
nies  are  charging  S80  to  $120 
per  hour  for  programming 
work,  while  the  fee  for  off¬ 
shore  providers  is  about  $40. 

When  you  can  pay  a  third 
of  the  price,  ofbhore  is  “some¬ 
thing  ^t  has  to  be  consid¬ 
ered."  said  Wallers. 

As  offshore  business  grows, 
so  does  competition  for  it  Pi- 
oneermg  India-based  offshore 
companies,  such  as  Tata  Sons 
Lid.,  are  facing  increasing 
competition  ffom  the  lar^ 

U.S.  IT  consulting  firms.  Ac¬ 
centure  CEO  Joe  W.  Forehand, 
who  spoke  ai  the  Gartner  con¬ 
ference.  compared  the  trend  to 
the  previous  exodus  from  the 


U.S.  of  many  manufacturing 
operations.  The  way  we  look 
at  it.  the  industrialization  of 
IT  is  a  reality,  and  we  have  to 
embrace  that."  he  said. 

Competition  is  also  becom¬ 
ing  more  global  In  the  vendor 
exhibit  halL  Bamboo  Netwoiks 
Ltd.'s  mere  preseture  raised 
eyebrows.  Some  rivals  said  it 
was  the  first  China-based  out¬ 
sourcer  to  set  up  a  booth  at  a 
U.S.  outsourcing  conference. 

(^ina  is  considered  some¬ 


thing  of  a  sleeping  giant  in  the 
offshore  world  that  isn't  quite 
ready  to  compete  with  India. 
China  “represents  the  next 
wave"  in  offshore  outsourcing, 
.said  TVaci  Gere,  an  IDC  analyst. 

Raiesh  Rao,  chief  operating 
officer  at  Hong  Kong-based 
Bamboa  which  operates  an 
offshore  development  center 
in  Guangzhou.  China,  said  the 
company  believes  it  has  devel¬ 
oped  its  offthore  processes 
sufficiently  to  compete  for 


Uir.  customers. 

One  user  of  offshore  ser¬ 
vices,  Sudhir  AgarwaL  senior 
manager  of  architecture  and 
services  at  Verizon  Communi¬ 
cations  in  New  York,  said  In¬ 
dia’s  talent  pool,  its  populace's 
proficiency  with  EngU^  and 
the  country's  U5.  connections 
will  ensure  India  a  dominant 
role  for  years  to  come.  But 
China's  emergence  “is  good 
for  companies  in  the  U.S..” 
Agarwal  added.  I 
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AfwflwholBPOawhin' 
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Server  blades  engineered  to  work 
across  complex  computing  environments. 


HP  ProLiant  server  blades,  powered  by  Intel*  Xeon""  processors,  are  designed  to  support  a  variety  of  robust  enterprise  solutions, 

including  SANs,  it  is  not  difficult  to  appreciate  the  architectural  excellence  of  the  new  HP  ProLiant  BL40p  ond  BL2(}p  G2  server  blodes  They're  the  most  powerful,  flexible, 
industry-stondard  blades  for  business  today.  In  addition  to  meeting  your  compony's  expanding  needs  for  server  copocity,  they're  designed  with  SAN  connectivity  to  support 
sophisticated  storage  environments— eosily,  reliably  and  affordably.  Combined  with  HP  ProLiant  Essentials  software,  they  can  dromaticolly  reduce  deploymertt  time  and  help 
maximize  productivity.  Which  meons,  of  course,  your  business  saves  money.  Demand  more  from  your  IT  systems.  Integrate  HP  ProUont  server  blades  into  your  environment 
And  carry  your  business  to  a  stronger,  more  cost-effective  place. 


I  HP  ProUant  BL20P  G2 

I  Up  lo  two  InMl*  Kaon'*  procauort  OP  3.06  GHz 
Avoibbla  with  thraa  10/100/1000  NICs  ond 
on*  monoe«n>e<ii  NIC  pkn  dual  2Gb  hbr« 
chonnol  mazzonino  cord 
Up  to  8Ge  DOB  momorY 


Complements  ProLiant 
server  blades 


HP  MODULAR  SAN 
ARRAY  1000 
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Demond  more  with  HP  ProLiant  server  blodes.  Download  IDC's  white  poper,  "Enabling  Business  Agility  Through  Server  Blode  Technology*' 
at  www.hp.com/go/pfoliont55  or  dial  ]-877-865*1161  and  mention  code  AAJA. 
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Sun  Exec  Opposed  to 
Open-Source  Java 


Schwartz:  Current 
process  produces 
uniform  standard 


JonathM  Sdinartz.  executive 
vice  president  of  software  at 
Sun  Microsystems  Inc»  spoke 
with  Computerworld  af  the 
company’s  recent  JavaOne  con¬ 
ference  here  about  the  possibil¬ 
ity  of  Java  becoming  an  open- 
source  technology  and  other 
issues.  Excerpts  ^ow: 

Shoidd  Jm  be  made  fuly  open* 
aourca?  Tbe  problem  with 
open*source  is  that  [victory] 
goes  to  vohime.  and  that’s  evi¬ 


dent  in  the  Linux  community 
today  where  ISVs  [independent 
software  vendors]  are  qualify¬ 
ing  to  Red  Hat  and  abandonii^ 
everyone  else.  Why?  Because 
Red  Hat  has  volume. 

If  lava  were  open-source, 
Microsoft  could  take  it.  deliver 
it  as  they  saw  fit  and  drive 
a  definition  of  Java  that  was 
divergent  iiom  the  one 
that  the  [wider]  com¬ 
munity  wanted  to  be 
compatible  [with].  And 
to  the  victor  would  go 
the  spoils  of  that  nefari¬ 
ous  action. 

To  tbe  extraordinary 
credit  of  the  Java  Com¬ 
munity  Process  [JCP], 

I  we  have  a  uniform. 


compatible  standard  that  now 
spans  hundreds  of  millions  of 
devices.  You  have  to  really  be 
careful  in  understanding  the 
distinction  between  open- 
source  and  open  standards. 

An  IBM  executive  once  told  me 
those  two  terms  mean  the  same 
thing.  IBM  is  dead  wrong,  and 
I  also  think  that  IBM  is  some¬ 
what  duplicitously  straddling 
that  gap  for  its  own  benefit, 
exploiting  the  open-source 
community  on  the  one  hand 
and  then  on  the  other 
hand  trying  to  derive  a 
proprietary  advantage 
from  its  implementa¬ 
tions  of  open-source 
products. 

Did  BM  talk  to  you  before 
kidudkig  Hs  proprietary 
graphical  user  krtertoee 
technology,  the  Standard 


Widget  TooHut  (SWT),  in  its  open- 
source  Eclipse  platform?  No. 

And  I  think  what  they’ve  done 
with  SWT  violates  really  what 
you  would  want  to  do  with  the 
Java  platform.  No  one  wants 
“write  once,  run  on  this  oper¬ 
ating  system.”  IBM  has  a  lot  of 
weight,  and  they  don’t  like  the 
JCP.  I  think  in  part  because 
they  can’t  throw  their  weight 
around.  Tliey  are  just  one 
voice  of  many. 

Sui  gave  al  of  the  keynotes  at 
JavaOne.  Why  dM  other  key  Java 
vendors  have  such  a  smafl  pres¬ 
ence?  You’ll  notice  that  no¬ 
body  from  Sun  got  up  and 
really  talked  about  Sun  prod¬ 
ucts.  We  talked  about  the 
health  of  the  [Java]  community 
as  probably  the  company  that 
has  the  single  biggest  vested 
interest  in  its  success.  I  think 
that  the  folks  who  came  to 


JavaOne  wanted  that 

Some  ahendees  rwted  IBM's  near 
absence.  I  think  it’s  an  obvious 
absence.  Microsoft  wasn't 
here,  either. 

No  one  would  have  expected 
Microsoft.  Now  that  we’ve  set¬ 
tled  the  Java  issue  with  re¬ 
spect  to  distribution,  that’s  no 
longer  an  issue  for  Microsoft 
to  manage  explicitly.  WTio 
knows?  Maybe  we’ve  got  some 
partnering  opportunities  with 
Microsoft.  We  do  have  a  com¬ 
mon  competitor  in  the  form  of 
IBM. ...  If  they  would  abide 
by  tbe  contract,  we  would  love 
to  work  with  them.  I 


VOKOmNE 


To  read  more  of  Schwartz's  thoughts  about 
Java,  go  to  our  Web  site: 

OQuickLii*  39294 

wwwxomputerworM.com 


YOU  CAN  PAY  FOB  A 
BUSINESS  SOLUTIOai 


IF  YOU’D  LIKE.  I  PREFER 
ONE  THAT  BASICALLY 
PAYS  FOB  ITSELF. 

Shrinking  budgets  present  you  w  ith  difficult  challenges,  like  “How  on  earth  do  I 
do  more  w  ith  less?”  .Answer:  with  new  packaged  solutions  from  SAP.  Based  on  industr) 
best  practices  (and  our  30  sears’  experience),  these  preconhgured  solubons  address 
specific  proWem  areas  within  your  organization.  And  because  implemenudon  is  simpler, 
you  see  quicker  ROI.  Learn  more  about  our  new  packaged  solutions.  And  how  afford^le 
they  really  are.  Visit  sap.com/packaged  or  call  800  880 1727  for  more  details. 
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MARYFRAN  JOHNSON 


Beating  the  Odds 


At  a  time  when  good  news  about 
IT  is  as  unexpected  as  a  winning  lot¬ 
tery  ticket,  our  story  about  Hilton  Ho¬ 
tels’  daredevil  infrastructure  upgrade 
is  quite  a  standout  (see  story,  page  25). 
It  makes  for  especially  welcome  reading  in  the 


wake  of  the  latest  re¬ 
search  decrying  the  drea¬ 
ry  state  of  successful  IT 
project  completions. 

In  a  survey  of  some 
2.000  companies  (more 
than  800  of  them  in  the 
Fortune  hOOO).  The 
Hackett  Group  in  Atlanta 
found  that  unless  a  com¬ 
pany  is  among  the  top 
25%  of  technology  users, 
three  in  10  IT  projects  fail 
on  aver^,  and  that  less 
than  40%  of  IT  managers  have  any 
laith  that  their  departments  can  re¬ 
act  quickly  enough  to  changing 
business  goals.  On  top  of  this,  less 
than  half  of  companies  even  bother 
to  validate  an  IT  project’s  business 
value  after  it  has  been  completed 
[QuickLink  39300]. 

How  marry  of  these  depressing 
studies  and  statistics  have  you  read 
in  recent  years.^  Yeah.  I’ve  lost  count 
toa  The  problem  with  them  is  how 
little  they  contribute  to  actually  solv¬ 
ing  any  of  the  real-world  problems 
associated  with  complex  IT  projects. 

That's  what  I  found  so  riveting  in 
reporter  Gary  H.  Anthes’  account  of 
Hilton’s  megaoverhaul  of  its  Unix 
client/server  system.  It’s  an  honest, 
waits-and-all  look  inside  a  massive 
inl^tnicture  upgrade  —  one  that's 
been  slogging  away  during  the  most 
prolonged  downturn  in  IT  history. 
Your  company  may  not  be  the 
worid'famous  Hilton  chain,  but  the 
problems  encountered  and  solved 
by  its  IT  group  will  still  resonate 
with  familiarity. 

“We  bad  every  platform  and  oper¬ 
ating  system  under  the  sun,”  says 
Damien  Bean,  Hilton’s  vice  presi¬ 
dent  of  corporate  systems.  He  also 


had  1.500  users  standing 
by  as  potential  front-line 
critics  as  the  FT  depart¬ 
ment  gambled  on  a  mi¬ 
gration  to  PeopleSoft  8. 
Microsoft  Windows 
2000  Server  and  SQL 
Server  2000  running  on 
I>cU  servers. 

It  was  a  move  fraught 
with  risk  because  none 
of  those  vendors  had 
ever  played  together  on 
a  field  as  large  as  the  one 
Hilton  provides.  "We  were  doing  en¬ 
gineering  that  no  one  had  ever  done 
before,"  Bean  noted.  He  took  advan¬ 
tage  of  that  —  as  the  biggest  cus¬ 
tomers  can  —  by  pushing  the  ven¬ 
dor  trio  to  prove  themselves.  Mi¬ 
crosoft.  Dell  and  PeopleSoft  each 
had  to  pony  up  the  people,  the  ex¬ 
pert  support  and  the  resources  nec¬ 
essary  to  make  this  unproven  three- 
tier  Web  architecture  work. 

StiU,  it  didn't  all  go  perfectly. 


That’s  the  nature  of  IT  projects. 

The  biggest  technology  snafu  hit 
on  the  first  day  of  switching  over  to 
the  new  payroll  system,  but  that 
high  level  of  vendor  attention  paid 
off.  The  latest  unpleasant  surprise 
has  more  to  do  with  industry  poli¬ 
tics  and  finance  than  technology: 
the  looming  threat  of an  Oracle 
tificeover  of  PeopleSoft. 

“Wliat  I  have  told  everybody  here 
at  Hilton  —  and  I’ve  been  getting  a 
lot  of  calls  from  other  big  cus¬ 
tomers.  too  —  is  don’t  do  anything 
yet,"  Bean  told  us  last  week.  “Any 
decision  you  make  now  is  going  to 
be  lousy,  because  there's  not  any 
good  information."  But  he’s  confi¬ 
dent  that  whatever  happens  can  be 
handled. 

That’s  the  nature  of  IT  leadership. 

As  the  project  heads  into  its  final 
phase,  the  savings  are  already  in  the 
millions,  and  Hilton's  controller  is 
enjoying  his  newfound  ability  to 
close  the  books  in  roughly  half  the 
time  be  once  did. 

FT  projects  will  always  be  targets 
of  criticism.  They’ll  always  be  a 
gamble  because  they  involve  such  a 
vobtile  mix  of  people,  technology, 
business  and  politics.  But  done 
right,  as  at  Hilton,  they  can  be  better 
than  a  winning  lottery  ticket,  f 


PIMM  FOX 

Call  Centers 
Grow  Up 

COMPANIES  should  turn 
their  call  centers  into 
IT-equipped  intelli¬ 
gence  operations  designed  to 
provide  e-leaming,  customer 
analysis  and  threat  detection. 

Best  Buy.  Starwood  Hotels  and  Con¬ 
tinental  Airlines  are  doing  just  that,  as 
if  to  disprove  the  notion  that  IT  is  his¬ 
tory.  They’re  using  an  intell^ent  soft¬ 
ware  suite  from  Roswell,  Ga.-based 
Witness  Systems  Inc.  to  randomly 
record  both  voice  and  data  communi¬ 
cations  in  order  to  improve  customer 
service  and  the  bottom  line. 

For  example.  Continental's  four  do¬ 
mestic  reservation  centers,  which  han¬ 
dle  about  60  million  calls  annually,  use 
IT  for  more  than  just  measuring  call 
levels.  The  airline  takes  the  technolo¬ 
gy  to  greater  heights,  integrating  the 
call  review  process 
with  IT  operations 
and  business  goals 
and  letting  man^e- 
ment  at  company 
headquarters  in 
Houston  keep  an  eye 
on  things. 

This  enables  IT 
staflers  to  trouble¬ 
shoot  bugs  and  prob¬ 
lems  with  the  Web 
site  in  real  time,  * 
thanks  to  electronic 
buckets  in  which  reservation  agents 
(there  are  nearly  5,000)  place  cus¬ 
tomer  reports.  Since  the  IT  depart¬ 
ment  can  see  the  actual  keystrokes 
that  led  to  any  problems,  fixes  are 
made  more  quickly.  And  those  fixes 
are  also  less  expensive  to  execute,  be¬ 
cause  FT  personnel  don’t  have  to  fly  to 
a  reservation  center  in  the  hope  of 
seeing  a  recurring  glitch. 

The  system  also  helps  agents  group 
problems,  questions  and  concerns  ac¬ 
cording  to  criteria  the  airline  per¬ 
ceives  as  important. 

The  system  records  up  to  10  random 
calls  per  agent  per  month,  but  it  also 
lets  each  agent  flag  calls  for  examina¬ 
tion  by  a  supervisor.  For  example,  an 
agent  who  has  trouble  closing  sales 
can  select  calls  for  review  by  a  manag¬ 
er,  w^o  can  then  help  him  improve  hU 
performance. 

And  in  Houston,  managers  can  log 
onto  the  Windows  NT  system  from 
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The  Top  10  Critical  Chailenges 
for  Business  Intelligence 
Success 
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TODAY  WAS 
A  GOOD  DAY. 


I  FOUND  A  WHOLE 
HEW  AREA  OF 
WASTE  AND 
INEFFICIENCY. 


You've  stretched  every  budget  and  cut  every  bit  of  fat.  Dr  have  you?  S.AP  solutions  give  you  real-time 
visibility  of  information  across  your  entire  enterprise,  so  you  can  plug  the  leaks  in  your  supply  chain 
with  greater  accuracy,  get  pnvducts  to  market  faster,  get  more  out  of  procurement  and  reduce  duplication. 
Things  you  might  be  doing  now.  But  could  be  doing  more  effectively  with  the  right  business  solution. 
N'isit  sap.com/«>lutions  or  call  800  880  1727  for  details. 
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The  Top  10  Critical  Challenges 
for  Business  Intelhgence  Success 

More  than  half  of  all  BI  projects  fail  — 
make  sure  yours  isn’t  one  of  them 


Let’s  start  with  the  bad  news:  More  than 
half  of  all  Business  Intelligence  projects  arc 
cither  never  completed  or  fail  to  deliver  the 
features  and  benefits  that  arc  optimistical¬ 
ly  agreed  on  at  their  outset.  While  there 
are  many  reasons  for  this  high  failure  rate,  the  biggest  is 
that  companies  treat  BI  projects  as  just  anothet  IT  proj¬ 
ect.  Face  it:  Business  Intelligence,  or  BI,  is  neither  a  prod 
uct  nor  a  system.  It  is,  rather,  a  constantly  evolving  strat 
egy,  vision  and  architecture  that  continuously  seeks  to 
align  an  organization’s  operations  and  direction  with  its 

accident;  companies  achie\e  it  when 
they  do  the  following: 

•  Make  better  decisions  with 
greater  speed  and  confidence, 

•  Streamline  operations- 
•  Shorten  their  product  de\'elop' 
ment  cycles, 

•  Maximize  \‘aluc  from  existing 
product  lines  and  anticipate  new 
oppmtunities. 

•  Create  better,  more  focused 
marketing  as  well  as  impro\'ed  rela¬ 
tionships  with  customers  and  suppli¬ 
ers  alike. 


■Strategic  business  goals. 

With  BI.  business  success  is  real 
ized  through  rapid,  easy  access  to 
actionable  information.  This  access, 
in  turn,  is  best  achieved  through 
timely  and  accu 
rate  insight  into 
business  condi 
cions  and  cus¬ 
tomers,  finances 
and  maHcets. 

Complex  stuff,  but  worthwhile. 
Successful  BI  brings  greater  prof¬ 
itability.  the  true  indicator  of  busi¬ 
ness  success.  And  success  is  nex-er  an 


IVntfen  try 
Sfiaku  Atre 
PresiOent 
Aire  Group  Inc. 


Organization.s  must  understand 
and  address  these  10  critical  chal 
lenges  for  BI  success.  BI  pre^ts  fail 
because  of: 

1.  Failure  to  recognize  BI  projects 
as  cross  organizational  business  ini 
tiaci\'es.  and  to  understand  that  as 
such  they  differ  from  ty'pical  stand 
alone  solutions, 

2.  Unengaged  busines.s  sponsors 
(or  sponsors  who  enjoy  bttle  or  no 
authorit)'  in  the  enterprise). 

3.  Unavailable  or  utwlUing  busi 
ness  representatives. 

4  Lack  of  skilled  and  available 
staff,  or  sub  (primal  staff  urilizarion 

5.  No  software  release  concept 
(no  iterative  de^el(pmenc  method). 

6.  No  wori(  breakdown  structure 
(no  methodolog)'). 

7.  No  business  analysis  or  stan 
dardizarion  acd\1ries. 

8.  No  afpreciarion  <rf  the  impact 
of  dirt)’  data  on  business  prerfitabilit)'. 

9.  No  understanding  (rf  the  neces¬ 
sity  for  and  the  use  of  meta-data. 

IC.Too  much  reliance  on  diparate 
methods  and  tools  (the  dreaded  silver 
bullet  s)Tidrome). 

In  this  white  paper,  we  examine 
each  of  these  challet^s. 


Compotefvwrid  Custom  Publish.ng  /  THE  TOf  10  CRflKAL  CHAUENGES  FOt  BUSINESS  MTIUJGCNCE 


1.  Cross-Organizational 
Collaboration 

Traditionally,  any  hiismcvs  initi.i 
tivc,  inckidini^  a  decision  support 
project,  w  as  lixuscd  on  a  specilic  ^oal 
chat  was  limited  to  a  set  ol  pnxiiiets 
or  an  area  ot  the  husines-,.  Hue  to  this 
narrow  locus,  or^anizatirtns  were 
unable  to  analyre  the  project's  impact 
on  busftiesv,  opc-rations  as  a  whole.  .\s 
organizatu'rns  became  more  cus 
corner  locused.  these  initiatives 
began  to  inte'grate  customer  inlorma 
tion  with  prixluct  information. 

It  IS  eritical  to  realize  that  ciis 
Comers  and  markets,  not  manufactiir 
ing  plants  and  prtxJiicc  managers, 
must  drive  the  business  It  is  also 
optimal  to  correct  any  customer 
problems  before  the  customer  real 
izes  the  problem  existed.  Knterprises 
have  a  better  chance  to  achieve  high 


Customers  and  markets, 
not  manufacturing  plants 
and  product  managers, 
must  drive  the  business. 


customer  loyalty  it  customers  can  pay 
when  their  problem  is  solved  —  not 
when  the  pnxluet  is  shipped. 
Initially.  the  integration  iX'curred  in 
regional  or  departmental  databases, 
w  ith  no  L  ross  regional  collabtiraCion. 

Hnterprise  data  warehouses  were 
the  next  step  in  the  evolution  toward 
cross  organizational  integration  of 
information  lor  decision  support 
purprises  such  as  sales  repc'rting,  key 
performance  indicators  (KPIs)  and 
trends  analysis.  Customer  relation 
ship  management  (CRN!)  followed. 


bringing  the  promise  ol  increased 
sales  and  profitability  through  per 
sonalization  and  customization. 

R1  Is  the  next  step  in  achieving  the 
holistic  cross  organizational  view 
(Figure  I).  It  has  the  piitential  to 
deliver  enormous  payback,  but 
demands  unprecedented  collaKira 
tion.  Where-  Rl  is  concerned.  collaKt 
ration  is  not  limited  to  departments 
within  the  organization;  it  requires 
integration  of  knowledge  aKiut  cus 
tomers.  competition,  market  condi 
tions.  vendors,  partners,  pnxJucts  and 
employees  at  all  levels. 

To  succeed  at  Rl.  an  enterprise 
must  nurture  a  cross  organizational 
collahorative  culture  in  which  every 
one  grasps  and  works  toward  the 
strategic  vision. 

2.  Business  Sponsors 

Strong  business  spsansors  truly 
believe  in  the  value  of  the  Rl  project. 
They  champion  it  by  removing  politi 
cal  roadblivks.  Without  a  suppsirtive 
and  committed  business  spons»sr,  a  Rl 
project  struggles  for  suppi>rt  within 
an  organization  —  and  usually  fails. 

Business  sponsors  establish  prop 
er  objcxrives  lor  the  Rl  applicatum. 
ensuring  that  they  support  the  strate¬ 
gic  vision.  Spivnsors  alsii  approve  the 
business  case  assessment  and  help 
set  the  project  scope.  If  the  scope  is 
tixi  large,  sponsors  prioritize  the 
deliverables. 

Spc-cifically  for  Bl  pmjccts.  busi 
ness  spemsors  shctuld  also  launch  a 
data  quality  campaign  in  affected 
departments  This  task  gix-s  to  busi 
ness  sponsors  K-cause  it's  business 
users  who  truly  understand  the  data. 

Finally,  business  spi->ns<irs  should 


I  Figure  I 


Increasing  Decision-Support  Value 
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1.  Cro$s-0(iaiiizatioMl 
CoUoratiM 

Traditionally,  any  business  initia 
live,  including  a  decision-support 
project,  was  focused  on  a  specific  goal 
that  was  limited  to  a  set  of  products 
or  an  area  of  the  business.  Due  to  this 
narrow  focus,  organizations  were 
unable  to  analyze  the  project's  impact 
on  business  operations  as  a  whole.  As 
organizations  became  more  cus 
tomer-focused,  these  initiatives 
began  to  integrate  customer  informa 
tion  with  product  information. 

It  is  critical  to  realize  that  cus¬ 
tomers  and  markets,  not  manufactur¬ 
ing  plants  and  product  managers, 
must  drive  the  business.  It  is  also 
optimal  to  correct  any  customer 
problems  before  the  customer  real¬ 
izes  the  problem  existed.  Enterprises 
have  a  better  chance  to  achieve  high 


Customers  and  markets, 
not  manufacturing  plants 
and  product  managers, 
must  drive  the  business. 

customer  loyalty  if  customers  can  pay 
when  their  problem  is  solved  —  not 
when  the  product  is  shipped. 
Initially,  the  integration  occurred  in 
regional  or  departmental  databases, 
with  no  cross- regional  collaboration. 

Enterprise  data  warehouses  were 
the  next  step  in  the  evolution  toward 
cross-organizational  integration  of 
information  for  decision-support 
purposes  such  as  sales  reporting,  key 
performaiKc  indicators  (KPIs)  and 
trends  analysis.  Customer  relation¬ 
ship  management  (CRM)  followed. 


bringing  the  promise  of  increased 
sales  and  profitability  through  per- 
soiralization  and  customization. 

BI  is  the  next  step  in  achieving  the 
holistic  cross-organizational  view 
(Figure  I).  It  has  the  potential  to 
deliver  enormous  payback,  but 
demands  unprecedented  coUabora 
non.  Where  Bl  is  concerned,  collabo¬ 
ration  is  not  limited  to  departments 
within  the  organization;  it  requires 
integration  of  knowledge  about  cus¬ 
tomers,  competition,  market  condi¬ 
tions,  vendors,  partners,  products  and 
employees  at  all  levels. 

To  succeed  at  BI,  an  enterprise 
must  nurture  a  cross-organizational 
collaborative  culture  in  which  every¬ 
one  grasps  and  works  toward  the 
strategic  vision. 

2.  Business  Sponsors 

Strong  business  sponsors  truly 
believe  in  the  value  of  the  BI  poject. 
They  champion  it  by  removing  politi¬ 
cal  roadblocks.  Without  a  supportive 
and  committed  business  sponsor,  a  Bl 
pre^t  struggjes  for  support  within 
an  organization  —  and  usually  fails. 

Business  ^nsors  establish  prop¬ 
er  c^jectives  for  the  Bl  application, 
ensuring  that  they  support  the  strate- 
^c  visioa  Sponsors  also  approw  the 
business- case  assessment  and  help 
set  the  project  scepe.  If  the  scope  is 
too  large,  sponsors  prioritize  the 
deliver^les. 

Specifically  for  Bl  projects,  busi¬ 
ness  sponsors  should  also  launch  a 
data-quality  campaign  in  affected 
departments.  This  task  goes  to  busi¬ 
ness  sponsors  because  it’s  business 
users  who  truly  understand  the  data. 

Finally,  business  ^nsors  should 


1 
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run  a  project  review  session  at 
assigned  checkpoints  to  ensure  that 
BI  application  hinctionality  maps 
correctly  to  strate^c  business  goals, 
and  that  its  return  on  inxestment 
(ROI)  can  be  objectively  measured. 

3.  Dedkittd  BgsiMss 
liyresMtatiN 

Mote  often  than  not.  the  fwimary 
focus  of  BI  prt^ts  is  technical  rather 
than  business-oriented.  The  reason 
for  this  shortcoming;  most  BI  proj¬ 
ects  are  run  1^  IT  project  managers 
with  minimal  business  knowledge. 
These  managers  tend  not  to  involve 
business  communities.  Therefore,  it’s 
not  surprising  that  nnost  projex:ts  fail 
to  dehver  exported  business  benefits. 

It's  impcHtant  to  note  that  usually 
20%  of  the  key  businesspeople  use  BI 
applications  80%  of  the  time. 
Therefore,  it’s  vital  to  identify  key 
business  and  technical  representa¬ 
tives  at  the  b^inning  of  a  BI  project 
—  and  to  keep  them  motivated 
thnx^K)ut  the  jxoject.  A  BI  jxt^t 
team  should  have  involved  stakehold¬ 
ers  from  the  following  areas: 

Business  executives  are  the  viskmar- 
ies  with  the  most  current  organiza¬ 
tional  strategies.  They  should  help 
make  key  project  dedskms  atKl  must 
be  solicited  for  determining  the  pro¬ 
ject’s  direction  at  various  stages. 

Cuitanm  can  help  identify  the 
final  goals  (tf  the  BI  system.  After  all 
their  acceptaiKe  of  products  at  serv¬ 
ice  strategies  is  what  matters  most. 

Key  Inisincss  partKrs  provide  a  dif¬ 
ferent  view  of  the  customer  and 
should  be  solicited  for  infr^mation  at 
the  start  and  on  an  ot^ii^  basis. 

The  Finance  d^Ktrtmera  is  re^xmsi- 


ble  for  accountii^  and  can  provide 
great  ins^t  into  an  organization's 
efficiencies  arxl  improvement  areas. 

Marfecfing  personnel  should  be 
involved  during  all  phases  of  the  proj¬ 
ect  because  typically,  they  are  key 
users  cA  BI  a^lications. 

Saks  and  Customer  Support  representa 
lives  have  direct  customer  contact  and 
provide  custewner  per^jective  during 
a  BI  project.  They  must  have  repre 
sentation  on  the  team. 

IT  supports  the  qierational  sys 
terns  and  provides  awareness  about 
the  backlog  of  BI  requests  horn  differ¬ 
ent  groups.  In  addition  to  providing 


It's  vital  to  identify 
key  business  and 
technical  reps  at 
the  beginning  of  a  BI 
project  -  and  keep  them 
motivated  throughout. 


technical  expertise,  the  IT  staff  in  the 
BI  prejea  team  must  analyze  and 
(nesent  BI -related  requests. 

Ojpaarions  managers  oivf  staff  make 
tactical  business  decisions.  They  pro¬ 
vide  the  link  between  strategic  and 
operational  information,  making 
them  important  during  some  key 
phases  of  a  BI  ^miject. 

CkvailaklitrofSkilMTeaii 

IMcfs 

BI  proj^ts  differ  significantly 
hom  enters  because  at  thdr  outset, 
they  tend  to  lack  concrete,  well- 


defined  deliverables.  In  addition,  the 
business  and  technical  skills  required 
to  implement  a  BI  a^ication  are 
quite  different  chan  other  opemional 
(Milme  transaction  processing  (OLTP) 
projects.  For  example,  whik  opera¬ 
tional  projects  normally  focus  on  a 
certain  area  d  the  business,  such  as 
enterprise  resource  plannir^ 

CRM  or  suf^y  chain  management 
(SCM).  a  BI  project  integrates,  ana 
lyzcs  and  delivers  information 
derived  h«n  alnsost  every  area  of  the 
business  as  a  wivole. 

The  required  technical  expertise 
varies  as  well  tyjxcaily.  for  example,  a 
database  administrator's  focus  is  effi 
cicr«  retrieval  of  data  using  OLTP  sys¬ 
tems.  By  omtrast,  where  BI  systems 
are  concerned,  it’s  vitally  important 
to  focus  <xi  data  stor^  in  addition  to 
data  retrieval 

A  BI  project  team  lacking  BI  a{^li 
cation  implementation  experience 
will  most  likely  fail  to  deliver  desired 
results  in  the  first  iteratioiL  Since 
most  BI  projects  have  i^gressiw  time¬ 
lines  and  shm  deUvery  cycles,  an 
inexperienced  and  unskilled  team  is  a 
risk  tlm  must  be  avoided 

Mandatory  BI  project  skills 
iixdude: 

•  BI  business  analysts  who  can 
peifonn  cause-and-effect  analysis  to 
develop  business  {xxxxss  models  for 
evaluating  decision  alternatives. 
These  individuals  shodd  also  be  able 
toperform  what- if  analysis  by  foUow- 
ii^  a  proven  BI  methodalog)’ 

•  A  KPI  expert  experienced  in 
creati!^  balanced  scorecards.  These 
experts  must  be  able  to  identify  die 
KPls  that  meet  business  needs,  calcu¬ 
late  and  report  them  and  monitor  per- 
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lorm.mi.c  I  hv\  .ik^'-liiuilJ  rtLMtixcIv 
re  c\,iluati.-  kl’l  i.'Hcai\L'ni.-v'  .inJ 
must  intocr.uc  these  kl’K  into  the 
Kil.ineeel  sv.oree.trel 

•  I'.il.ineeei  s,.oree.irel  e\peTts  ti’ 
eontinuously  ele\elop  .inel  line  ciine 
seoree.treis  Me.isiirin';  sueeess  m  .1 
Jvn.imie  hiisiness  eneironmeni 
reL|Uires  .in  elleeti\c  tt'olsel  With  .i 
Kil.ineexl  seoree.ireL  .in  orii.iniz.ition's 
vision  .inel  str.ites’v  e.in  K.'  trinsl.iteel 
into  oh|eeri\es,  t.irijets,  metries  — 
.ind  ineentives  to  meet  those-  ohjee 
lives  .ind  t.iroets 

•  n.u.i  w.irehoiise  .irehiteets 
with  expenenee  developini;  HI  rel.it 
ed  liioie.ll  .ind  phvsie.il  d.it.i  niixlels. 
ineludmu  K-'th  st.ir  sehem.is  .md 

Ide.illv,  these  people  mioht 
.ilstv  h.ive  expe-rtenee  with  sueh  teeh 
noliioies  .is  st.ttistie.il  tiwls  .ind  d.it.i 
minino.i|oorithms 

•  t-'uhe  developers  .mel  imple 
menters  with  exjx-rienee  implement 
mo  I5I  spe-eiiie  d.it.i  models.  (')|  \V 
seTv  ers  .ind  queries.  I  hese-  indiv  idiuils 
must  he-  .ihle  to  elevelop  .inel  deploy 
eomplex  .ind  mtellioent  eiihe's  toeon 
duet  multi  dimension.il  OI  AP  .in.ilv 
sis  for  different  users. 

•  Pers»vn.ilir.uion  expe'rts  e\|X' 
rieneed  .it  elevelopino  Weh  h.ised 
Ue-nerie  Kl  .ipplie.itions  that  e.in  not 
only  meet  the  rep»irtin^  needs  of 
many  users,  hut  alstv  provide  a  pe-r 
'Onalired  view  toe-.ieh  user. 

5.  Bl  Application  Development 
Methoilology 

lo  sueeeed,  R!  projeets  must 
.idhere  to  .1  plan  with  elcarly  delined 
methixlologics.  ohjeetives  and  mile¬ 
stones  In  this  respeet.  they  .ire  hardly 
unique  Hovvev  er.  unlike  other  under 


Unlike  other  undertakings, 
Bl  projects  aren't  limited 
to  a  set  of  departmental 
requirements. 


t.ikinos,  R|  projeets  arc  not  limited  to 
a  eonlined  set  of  departmental 
requirements.  Rather,  their  purpivse 
Is  t»v  prrwide  cross  oro.iniiation.il 
•ipplie.itions.  Therefore.  Rl  methexi 
olevoies  and  deliverables  difler. 

I  ike  any  project,  Ri  starts  out  hy 
answerino  Slime  h.isie  questions,  such 
.is  What  w  ill  he  delivered'  Wh.it  are 
the  K-nelits  and  ex[x-eted  Rtlp  Wh.it 
Is  the  total  cost?  When  will  it  K- 
delivered'  Who  will  do  it?  The 
answers  eolieetively  define  the  Rl 


project  as  Ivillow  s 

Piojoif  (/lIiuiu/’/cv  majv  i^oals  ui 
stratei;ic  husiness  ohjeetives.  These- 
deliverahles  should  he-  me.isur.ihle  in 
husiness  terms  For  ex.imple.  “In 
order  to  increase  sales  20''.',  the  sales 
data  merged  w  ith  pipeline  data  must 
K-  .ivailahic-  to  sales  teams  within 
three  d.ivs  of  month's  end  ' 

Projivf  vio/v  aliijns  deliverahles 
with  ill  application  deployment 
phases  and  timelines.  I'niike  tr.idi 
tion.il  l')l  TPapplications.  the  number 
tif  tr.ins.Ktions  the  system  will  [x-r 
form  cannot  measure  Rl  project 
scope-.  rr.ins.ictions  iisuallv  represent 
an  or}ianiz.ition's  pnxesses.  w  hich  in 
turn  represent  functions.  .Since  Rl 
projects  are  d.it.i  intensive,  not  lune' 
tton  intensive,  their  scope  must  K- 
measured  h\-  the  d.ita  they  will  trans 
form  to  the  target  Rl  datah.ises.  and 
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formance.  They  also  should  iteratively 
re  evaluate  KPI  effectiveness  and 
must  integrate  these  KPls  into  the 
balanced  scorecard. 

•  Balanced  scorecard  experts  to 
continuously  develop  and  fine-tune 
scorecards.  Measuring  success  in  a 
dynamic  business  environment 
requires  an  effective  toolset.  With  a 
balanced  scorecard,  an  organization's 
vision  and  strategy  can  be  translated 
into  (Ajectives,  targets,  metrics  — 
and  incentives  to  meet  those  objec 
tives  and  taigets. 

•  Data  warehouse  architects 
with  experience  developing  Bl-relat- 
ed  logical  and  physical  data  modek, 
including  both  star  schemas  and 
OLAP.  Ideally,  these  p>eople  might 
also  have  experience  ulth  such  tech 
nologies  as  statistical  tools  and  data 
mining  algorithms. 

•  Cube  developers  and  imple- 
menters  with  experience  implement 
ing  Bl'Specific  data  models,  OLAP 
servers  and  queries,  These  individuals 
must  be  able  to  develop  and  deploy 
complex  and  intelligent  cubes  to  con¬ 
duct  multi-dimensional  OLAP  analy¬ 
sis  for  different  users. 

•  Personalization  experts  expe¬ 
rienced  at  developing  Web-based 
generic  Bl  applications  that  can  not 
only  meet  the  reporting  needs  of 
many  users,  but  also  prcnide  a  per 
sonalized  view  to  each  user. 

5.  nL^Wjial^  Devetopi^ 

To  succeed,  Bl  projects  must 
adhere  to  a  plan  with  clearly  defined 
methodologies,  ofc^tiws  and  mile¬ 
stones.  In  this  respect,  they  are  hardly 
unique.  However,  unlike  other  under 


Unlike  other  undertakings, 
Bi  projects  aren't  iimited 
to  a  set  of  departmentai 
requirements. 


takings,  Bl  projects  are  not  limited  to 
a  confined  set  of  departmental 
requirements.  Rather,  their  purpose 
is  to  provide  cross-organizational 
applications.  Therefore,  Bl  method¬ 
ologies  and  deliverables  differ. 

Like  any  project,  BI  starts  out  by 
answering  some  basic  questions,  such 
as:  What  will  be  delivered?  What  are 
the  benefits  and  expected  ROl?  What 
is  the  total  cost?  When  will  it  be 
delivered?  Who  will  do  it?  The 
answers  collectively  define  the  BI 


project  as  follows: 

Project  deliverables  map  goals  to 
strategic  business  objectives.  These 
deliverables  should  be  measurable  in 
business  terms.  For  example,  '‘In 
order  to  increase  sales  20%,  the  sales 
data  merged  with  pipeline  data  must 
be  available  to  sales  teams  within 
three  days  of  month’s  end" 

Project  scope  aligns  deliverables 
with  BI  application  deployment 
phases  and  timelines.  Unlike  tradi¬ 
tional  OLTP  applications,  the  number 
of  transactions  the  system  will  per 
form  cannot  measure  BI  project 
scope.  Transactions  usually  represent 
an  otganizadoifs  processes,  vv^ch  in 
turn  represent  functions.  Since  Bl 
projects  are  data- intensive,  rwt  func¬ 
tion-intensive,  their  scope  must  be 
measured  by  the  data  they  will  trans¬ 
form  to  the  target  BI  databases,  and 


Computerworid  Custofn  Publishing  /  THf  TOP  10  OHTICAL  CHALLENGES  POR  BUSINESS  INTELLXiENCS 


The  business  intelligence 
test  that  our  competitors 
don’t  want  you  to  take. 


1.  Want  a  Fiee  Buyers  Guido"^ 


2.  Want  a  Froo  Ti'st  Drtvo'^ 


!3.  Want  a  Guaranti'i 


r  DUi  f  r  1  nf  oi  tn  .1 1 1  ''M  v.  't  t  f*  >  N  L  W  B  •  ■ .  ’  Pi  •  t  tD  t  tji  , . 
Suit.'  H  qo  to  t)»  .  t  .:in  .  II  ’  2H9  I’ 


Thf  Busitto  tii.inc  i‘  Sottwoiri*  Cori’fj  m, 


how  quickly  this  data  can  be  a\’ail 
able.  This  focus  on  data  is  necessary 
because  almost  80%  of  the  effort  in  a 
typical  BI  project  is  spent  on  data- 
related  acti\1ties- 

ROI  for  a  BI  project  must  be  deriv 
able  from  project  deliverables.  Project 
sponsors  must  measure  the  effeem-e- 
ness  of  delivered  BI  appbeations  after 
the  completion  of  each  phase  to 
determine  whether  the  project  is 
delivering  the  promised  ROI.  If  it 
isn’t,  improvements  must  be  made 

6.  Planning  BI  Projects 

Due  to  the  nature  of  the  beast.  BI 
projects  tend  to  hit  more  unknowns 
than  OLTP  projects.  Why?  OLTP 
projects  implement  the  processes  of 
an  organization,  which  in  rum  repre 
sent  the  functions.  By  contrast,  BI 
projects  are  supposed  to  pro\ide  data, 
which  will  be  transformed  into  infor- 
matioa  vv+iich  in  turn  is  transformed 
into  action.  Therefore,  BI  project 
planning  is  not  a  one  time  activity, 
but  rather  an  iterative  process  in 
which  resources,  timelines,  scope, 
deliverables  and  plans  are  continu¬ 
ously  adjusted  (Figure  2). 

Althoi^  it’s  an  iterative  process, 
the  initial  project  plan  must  be  creat¬ 
ed  with  as  much  detail  as  possible 
(Figure  3).  BI  project  planning  activi¬ 
ties  include; 

Determining  project  retpiirments.  As 
part  of  this  activity,  existing  high- 
level  data,  functionality  and  infra¬ 
structure  requirements  must  be 
reviewed  and  revised  to  include  more 
detail  and  remove  ambiguity. 

Daemmir^  the  condition  c/  source  files 
and  databases.  Before  completii^  the 
project  plan,  operational  data  stores 


must  be  reviewed  to  account  for  any 
issues  that  may  surface  during  the 
data  analysis  phase. 

Dctcrmini;^  or  rrvisif^  cost  estirrtates. 
During  this  activity,  the  organization 
f>crforms  detailed  analysis  to  deter¬ 
mine  purchase  and  maintenance  cost 
estimates  for  hardware,  software,  net¬ 
work  equipment,  business  analysts, 
IT  staff  members,  implementation, 
training  and  consultants. 

Determining  or  revising  risk  assessment. 
Enterprises  must  perform  a  detailed 
risk  assessment  in  order  to  accurately 
determine  and  rank  BI  project  risks 
(based  on  severity  and  the  likelihood 
of  their  occurrence). 


Identifying  critical  success  /actors. 
Here  an  organization  determines 
what  conditions  must  exist  in  order 
for  the  project  to  succeed  Factors 
include  supportiv’e  business  sponsors, 
realistic  time  frames  and  the  availabil¬ 
ity  of  resources. 

Preparir^  the  project  charter.  This  is  a 
detailed  memorandum  of  under¬ 
standing  that  should  be  prepared  by 
the  project  team  and  approved  by  the 
business  sponsor  and  key  business 
representatives. 

Crcatir^ahigfi'lcvelprojectplan.  These 
are  detailed  breakouts  of  tasks, 
resources,  time  lines,  task  dependen¬ 
cies  and  resource  dependencies 


Computerworld  G«tom  Publishing  /  THf  TOP  10  CRITICAL  CHALLEN6IS  FOR  BUSINESS  INTELUGENtt  SUCCESS 


mapped  on  a  calendar. 

Kidn;^  <^the  project.  On  completion 
of  the  plan,  the  project  is  kicked  off  in 
an  orientation  session  at  which  all” 
team  members,  business  representa¬ 
tives  and  the  BI  sponsor  are  present. 


be  merged  into  a  common  data  ware 
house  —  not  a  trivial  task.  Data 
requirements  normally  extend 
beyond  internal  sources,  to  pri\’ate 
and  external  data.  Therefore,  data 
merge  and  standardization  acti%ities 
must  be  planned  and  started  at  the 


be  worthless  if  driven  by  dirtv  data 
Therefore,  it  is  important  for  every  BI 
project  to  employ  knowledgeable 
business  analysts  who  understand 
the  meaning  of  source  data  and  can 
ensure  its  quality. 

Underestimatii^  the  data  cicans 
ing  fxocess  is  one  of  the  biggest  rea 
sons  for  BI  failure.  Inexperienced  BI 
project  managers  often  base  their 
estimates  on  the  number  of  technical 
data  comersions  required.  Project 
managers  al.$o  fail  to  take  into 
acccHint  the  overw’heiming  number  of 
transformatiems  required  to  enffflce 
business  data  domain  rules  and  bust 
ness  data  integrity  rules. 

For  some  large  organizations  with 
many  old  file  structures,  the  ratio  erf  a 
particular  data  transformation  effort 
can  be  expected  to  be  as  high  as  85% 
effort  in  data  cleansing  aixl  only  15% 
in  enforcing  c»:hnical  data  com'er 
Sion  rules.  Therefore,  even  if  estimates 
appear  realistic  at  the  prcjject’s  outset, 
you  must  factor  in  data  cieansing 
efforts.  Note  that  full  time  imtrfxe 
ment  from  the  right  business  repre 
sentatives  is  mandatory  for  data 
cleansii^  activity. 

9.  Inportance  of  Meta-Oita 

Clean  data  is  worthless  to  knowl 
edge  workers  if  they  do  not  under 
stand  its  context.  Valid  business  data, 
unles,s  tied  to  its  tneanij^  t&  still 
meanii^ess.  Thciefcue.  it  is  impera- 
tisc  for  all  Bi  applications  to  con 
sciously  create  and  manage  the  mean 
ing  of  each  data  element.  This  data 
about  data  is  kmwn  as  meu  d^a. 
and  its  management  is  an  essential 
activity  in  BI  projects. 

Meta-data  describes  an  orgaiuza 


7.  Business  An^s  and  Data 
Standardization 

By  now  it’s  clear  that  BI  projects 
are  data-intensive  and  that  “data  out" 
is  as  important  as  “data  in,"  It’s  crucial 
that  the  source  data  be  scrutinized. 
The  age-old  saying.  “Garbage  in. 
garbage  out,"  still  bolds  true. 

In  most  BI  projects,  business 
analysis  issues  are  related  to  source 
data,  which  is  scattered  around  the 
organization  in  disparate  data  stores 
and  in  a  variety  erf  formats.  Some  of 
the  issues  include: 

Identifyit^  mformaiion  needs.  Most 
business  analysts  have  challenges 
when  it  comes  to  identifying  business 
issues  related  to  BI  appUcation  objec¬ 
tives.  They  must  evaluate  how 
addressing  these  issues  can  help  in 
obtaining  answers  to  business  ques 
tions  such  as,  “Why  is  there  a 
decrease  in  sales  revenue  in  the  fourth 
quarter  on  the  West  Coast?"  Once  the 
issues  arc  identified,  business  ana¬ 
lysts  can  easily  determine  related  data 
requirements,  and  these  require¬ 
ments  can  in  turn  help  identify  data 
sources  for  the  required  information. 

Data  merge  oni  standardization.  The 
biggest  challenge  faced  by  every  BI 
project  is  its  team’s  ability  to  under¬ 
stand  the  scope.  effc»t  and  impor¬ 
tance  of  making  the  required  data 
available  for  knowledge  workers. 
Tbat  data  consists  of  ffc^ments  in 
disparate  internal  systems  and  must 


beginning  of  the  BI  project 

B.Inp^ofDiityDitaM 
Business  PrufjobSity 

inaccurate  and  inconsistent  data 
costs  enterprises  millions.  It's  imper¬ 
ative  to  identify  which  data  is  impor 
tant,  then  find  out  how  clean  it  is. 
Any  dirty  data  must  be  identified,  and 
a  data-cleaasing  plan  must  be  devel 
oped  and  implemented. 

Dirty  data  must  be 
identified  and  a  data- 
cleansinq  plan  must 
then  be  developed  and 
implemented. 

The  business  crfjjectiv’es  of  any  BI 
project  should  be  tied  to  financial 
consequences  such  as  lost  revenue 
and  reduced  [»ofit.  The  financial  con¬ 
sequences  are  usually  the  result  of  a 
business  prcblem  related  to  inaccura¬ 
cies  in  reports  due  to  reliance  on 
invalid,  inaccurate  or  inconsistent 
data.  However,  roost  BI  prcjects  fail  to 
tie  financial  consequences  to  dirty 
data  throu^  monetary  expressions 
(such  as  losing  $10  millkm  in  qtiarter 
ly  revenue  due  to  the  enterprise’s 
inability  to  up-sell). 

Even  the  best  BI  a]^ication  will 
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tion  in  terms  of  its  business  activities 
and  the  business  objects  on  which 
thc)’’re  performed.  It  helps  transform 
business  data  into  information  It  is 
imperame  for  c\ery  Bl  cm  ironment. 
For  example,  what  is  pmfit?  Divs 
ever)'  busmessperson  ha\’e  the  .same 
understanding  of  profit^  Is  there  only 
one  calculation  for  profit?  If  there  are 
different  interpretations  of  profit,  are 
all  interpretations  legitimate?  If  there 
arc  multiple  legitimate  versions  of 
profit,  then  multiple  data  elements 
must  be  created,  each  with  its  own 
unique  name,  definition,  content 
rules  and  relationships.  All  this  infor 
marion  is  meta  data. 

Meta  data  helps  businesspeople 
na\igatc  Bl  target  databases  and 
helps  IT  manage  Bl  applications. 
There  arc  two  C)pes  of  meta  data: 

•  Technical  meta  data  pro\  ides 
information  about  Bl  applications 
and  databa.ses,  and  assists  IT  staff  in 
managing  these  applications. 

•  Business  meta  data  provides 
business  users  with  information  on 
data  stored  in  Bl  applications  and 
databases. 

Both  types  are  crucial  to  success 
and  should  be  mapped  to  each  other 
and  stored  in  meta  data  repositories 

10.  The  Silver  Bullet  Syndrome 

There  is  neither  a  sin^e  technolo 
gy  nor  a  technique  that  will  resoK’e  all 
the  challenges  to  reach  the  goal  of  a 
successful  Bl  emironment.  That  is  to 
say.  there  is  no  silver  bullet. 

Bl  projects  have  an  enormous 
scepe  and  co\'er  multiple  environ  • 
ments  and  technologies.  At  a  mini 
mum.  a  Bl  emironment  comprises: 

•  A  tool  for  extracting,  trans 


forming  and  loading  data  from  dis 
paratc  source  systems  into  the  Bi  tar 
get  data  warehou,sc. 

•  A  data  warehouse  that  .stores 
historical  and  current  business  data, 
as  well  as  an  OLAP  server  that  pro 
\  ides  analytic  services. 

•  Front  end  Bl  applications  that 
are  used  to  provide  querying,  report 


Valid  business  data,  unless 
tied  to  its  meaning,  is 
still  meaningless.  Bl 
applications  must  create 
and  manage  the  meaning 
of  each  data  element. 


ing  and  analytic  functions  to  the  orga 
nizarion's  knowledge  workers. 

In  most  organizatioas,  these  BI 
components  are  implemented  in  dif 
ferent  phases  and  by  project  teams. 
Each  team  implements  the  product 
that  meets  most  of  its  functional 
requirements.  More  tools  create 
greater  complexity  and  increased 
interoperability’  issues,  and  require 


more  administration  involvement. 

BI  project  teams  must  always  con 
sciously  strive  for  the  lowest  possible 
number  of  tools.  Thi.s  will  allow  dif 
ferent  Bl  activities  to  map  to  the  same 
overall  roadmap. 

Conclusion:  Maximizing  ROI 

Bl  applications,  if  implemented 
efficiently  and  properly,  have  tremen 
dous  payoff.  They  can  help  an  enter¬ 
prise  increase  its  business  agility, 
decrease  operating  costs  and  improve 
its  customer  loyalty  and  acquisition. 

.And  in  most  cases,  these  improve 
ments  bring  a  host  of  tangible  bene 
fits  (better  customer  satisfaction, 
increased  revenue  and  profits,  cost 
savings  and  higher  market  share). 
Bottom  line:  a  successful  Bl  project  is 
a  genuine,  often  dramatic,  improve 
ment  to  any  oiganization. 

Ah,  but  there’s  that  word  again: 
successful.  As  we’ve  seen,  many  com¬ 
plex  factors  go  into  the  successful  Bl 
project.  By  paying  attention  to  the  JO 
critical  challenges  for  Bl  success,  your 
enterprise  has  a  great  chance  to  com¬ 
plete  and  deliver  the  features  and 
benefits  i^reed  upon  at  the  beginning 
of  the  project.  ♦ 


^  I 

I 


ComputerwoHd  Custom  Publishing  /  THC  TOP  10  CRmCAL  CHALLENGES  FOR  BUSINESS  INTELUGEP4CE  SUCCESS 


dednoD  autfiority  distribiited  80068  besiness  units, 
bow  can  you  quid^  pioiide  each  one  with  precise  and 
reliable  inteUigence?  And  ensure  that  all  decidons  are 
aligned  widi  strategic  goals?  SAS*  software  brings  you  8n 
integrated  architecture -complete  with  targeted  mter> 
faces-that  allows  different  users  to  tailo*  inftnmation 
access,  analysis  and  reporting  to  fit  their  skills  and 
requirements.  This  centralized  ai^noach  lets  you  share 
cleansed  and  relevant  data  fnan  throu^iout  your  enter|xise, 
>^ile  retaining  control  over  data  consistency  and  quality. 
Put  27  years  of  SAS  technology  leadership  to  wcwk  for 
you.  Call  toll  free  1  866  270  5728.  Or  visit  our  Web  site 
for  a  free  white  paper  and  interactive  tour. 
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their  desktops  on  a  regular  basis  to 
look  for  recurring  problems  or  trends, 
and  to  measure  agent  service  and 
sales  performance.  They  can  also  as¬ 
sess  IT  operations  based  on  customer 
feedback. 

By  using  IT.  HR  management  was 
able  to  revamp  the  agent  review  proc¬ 
ess.  whittling  a  list  of  65  questions 
down  to  14  and  shiftir^  the  focus  of 
the  review  process  from  administra¬ 
tion  to  coaching  and  learning.  Conti¬ 
nental  has  also  restructured  its  train¬ 
ing  program  for  new  hires  to  reflect 
the  customer  service  issues  that  show 
up  in  the  call  center. 

Creative  application  of  IT  has  made 
it  possible  to  automate  and  link  a  vari¬ 
ety  of  customer  service  data,  making  it 
easier  to  provide  current  information 
about  flj^t  delays  or  fare  changes. 

Providii^  an  online  evaluation  form 
makes  it  convenient  for  managers  to 
score  as  they  listen  to  recorded  calls. 
They  can  even  mark  calls  and  e-mail 
them  for  review  by  other  personnel. 

That's  pretty  versatile  and  far  reach¬ 
ing  for  a  system  that  was  originally 
conceived  as  just  a  security  measure 
to  monitor,  capture  and  relay  threaten¬ 
ing  calls  within  real-time  parameters. 
In  today's  world,  that  kind  of  vision 
and  those  kinds  of  results  mean  that 
IT  is  hardly  passe.  I 

DAN  GILLMOR 

Take  Another 
Look  at  Apple 

Every  once  in  a  while, 
corporate  IT  shops  have 
to  “b  the  Mac  any 
more,  or  less,  worthy  for  the 
enterprise?" 

We  learned  some  useful  facts  about 
Apple  Computer's  future  last  week  at 
the  company's  annual  conference  for 
developers  in  San  Francisco.  At  the 
top  of  the  Usn  Apple  isn’t  moving  to 
the  Intel  architecture  for  its  central 
processors,  but  it  is  beginning  to  shed 
a  hardware  albatross  in  a  smart  way. 

For  IT.  tbe  hardware  story  may 
prove  to  be  tbe  most  interesting.  Ap¬ 
ple  leapt  into  the  64-bit  era  when  it 
announced  a  new  line  of  computers 
based  on  IBM’s  PowerPC  970  micro¬ 
processors.  Tbe  move  was  long  over¬ 
due  recognition  that  Motorola,  which 
has  been  Apple's  PowerPC  supplier, 
has  lost  too  much  ground  in  power 
and  price  to  the  Intel  architecture  in 
recent  years.  Apple  is  still  using  Mo¬ 


torola  chips  on  lower-cnd 
machines  and  probably  will 
keep  doing  so  for  some 
time,  but  the  alliance  with 
IBM  strikes  me  as  Apple’s 
future. 

There's  no  doubt  that  this 
hardware  is  a  big  step  for¬ 
ward.  It's  not  just  a  faster 
CPU.  which  Apple  is  brand¬ 
ing  the  G5.  The  entire  sys¬ 
tem  oilers  an  impressively 
advanced  architecture  that 
includes  faster  nsemory  and 
an  intental  bus  speed  that 
moves  the  Mac  ahead  of  the  competi¬ 
tion.  Apple  is  also  embracing  Univer- 
saJ  Serial  Bus  2J0.  somewhat  surpris¬ 
ingly  given  its  pushing  of  FireWire, 
but  this  is  what  the  compan)*  has  to  do 
in  today's  world. 

All  that  won’t  be  enough  to  entice 
the  enterprise  for  routine  office  appli¬ 
cations.  You're  unlikely  to  see  IT  de¬ 
partments  replacing  their  Windows 
desktop  computers  with  the  Power¬ 
Mac  due  to  ship  in  August.  Al¬ 
though  the  prices  are  quite  competi¬ 
tive  with  the  fastest  Intel-compatible 
machines,  they're  way  more  costly 
than  the  stovrer  ~  but  still  amply  fast 

PCs  running  Windows  or  Linux  for 
ordinary  office  work. 


However,  users  of  high- 
end  Macs  have  genuine 
incentives  to  upgrade. 
That’s  especially  true  for 
tbe  “creative  profession- 
als“  Apple  counts  as  a  core 
maricet.  These  folks  are 
sure  to  be  pleased.  Soft¬ 
ware  developers  are 
rewriting  their  applica¬ 
tions  to  take  advantage  of 
tbe  GS  (for  example, 

Adobe  is  reworking  Photo¬ 
shop).  but  32 'bit  applica¬ 
tions  should  run  without 
modification.  In  some  ways.  G5s  may 
be  attractive  as  replacements  for  some 
Unix  workstations. 

Apple  didn't  announce  a  rack  server 
or  notebook  G5.  Expect  the  server  be¬ 
fore  the  notebook:  heat  issues  are  sure 
to  constrain  the  latter. 

The  software  story  is  mixed.  The 
next  version  of  the  Unix-based  operat¬ 
ing  system  —  Mac  OS  X  10  J,  code- 
named  Panther  —  is  being  delayed 
three  months  or  so.  Too  bad.  It's  slick, 
with  plenty  of  usability  enhancements, 
such  as  vastly  better  search,  and  it 
looks  like  it  will  work  even  more 
smoothly  inside  Wmdows-oriented 
enterprises. 

But  Microsoft's  increasingly  am¬ 


bivalent  attitude  toward  the  Mac  could 
become  a  problem.  Microsoft  is  killing 
development  of  Internet  Explorer  for 
the  Mac,  noting  (without  irony)  that 
Apple’s  developers  have  an  unfair  ad¬ 
vantage  in  developing  the  Safrri 
browser  because  they  have  better  ac¬ 
cess  to  the  underl>ing  operating  sys¬ 
tem.  And  given  how  closely  inter¬ 
twined  the  Windows  version  of  Office 
is  becoming  with  the  operating  sys¬ 
tem.  it's  likely  that  the  next  OS  X  ver¬ 
sion  of  Office  «*ill  be  the  last. 

Apple  is  making  tentative  moves  to¬ 
ward  replacing  Office  with  its  own 
suite  of  applications,  such  as  tbe 
Keynote  presentation  software.  But 
Microsofr’s  never-ending  efforts  tp 
lock  in  users  with  hard-to-deciphFr 
file  formats,  complex  macros  and  oth¬ 
er  tricks  Will  remain  a  problem  for 
Mac  users,-and  thus  for  Apple  as  well. 
This  transition  will  be  tricl^. 

Bottom  line  for  IT?  Apple  can  still 
make  a  case  in  the  enterprise,  tar^^ing 
creative  types,  some  road  warriors  and 
some  server  applications,  and  it's  dear¬ 
ly  not  running  short  on  innovation.  # 
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Revissd  Opinion 

IHTNEIlAyttedttionofCbnvur- 
arNonUllwasguotfidnlheafti- 
de ‘Wading  Info  P  leteiihony* 
[OackUnk 38056]  8S  sayffig. 
'Avoya's  not  as  foosad  on  data  as 
Ciscois....TheQscouserinler' 
(ace  IS  cleaner.' Whde  this  may 
have  been  our  fvsl  Impession  at 
the  tine  I  was  inleiwewed.  over  (he 
past  sh  morrite  our  network  ana¬ 
lysts  have  concluded  that  lor  voic»- 
over-ff’morNtomgatxlmanaoe- 
ment.  the  Avaya  Caiun  switches  are 
the  choice  periormers.  Since  then, 
we  have  nstailed  over  75  Capm 
switches  throughout  our  (acities. 
with  no  regrets. 

'Riomas  Dunkatley 
IT  communications  manager. 
The  SeatDe  Hines. 
rdunJcerfey<gisearrlctunes.com 


Human  Ernir 

N  EH  RASMUSSEN  makes  some 
good,  practical  points  on  ta- 
cities  managament  pAwiding 
Data  Clenler  Blowups.’ (^achUik 


381211  Surprisingly,  many  oi  these 
iMive  human  rather  lh«i  lechnicaf 
fadors  (lor  exsnple.  the  dasslc 
ladi  of  coordination  between  con- 
siruedon  and  opetMions  staffs). 
These  proUems  often  border  on 
the  absurd,  though  the  outcomes 
are  not  ahvays  so  charmtna  We 
have  had  maintanance  staff  who 
wedged  open  the  service  doors  br 
(ore  they  went  home  lor  the  week¬ 
end,  and  locksmihs  who  pul  new 
kicks  on  the  wrong  side  of  these 
same  doors. 

Rasmussen's  observwtons 
abeut  oveisihno  power  and  coobig 
capacity  are  equaily  apt  I  once  had 
a  (fetlicuil  (fescussion  with  an  HVAC 
engneer  who  came  to  look  at  the 
new  heat  exchanger  in  a  small 
serverroom.Usingcrudearllh- 
mebc  examples,  the  engineer  tried 
to  explan  that  the  ai  in  the  room 
had  to  recxculate  several  tmes  a 
mnuteacooAngwoutdn'tbeef- 
lecttve.  I  tried  to  explan  that  heat 
exdiange  is  nonineBr  and  that  it 
sounded  ice  most  of  the  energy  of 
the  2-horsepower  tel  was  n  any 
case  being  converted  into  hx- 


bulenoe.  It  was  dnr  that  nedhar 
lactor  had  occurred  to  hhL  though 
they  proved  easy  to  demonstratE. 
By  snpfy  iMisino  the  puleys  so 
the  tan  wotid  nn  slower,  we  saw 
the  room  temperatixe  fal  by  6 
degrees  Cefeius.  AI  this  IS  a  re¬ 
minder  to  temper  our  natixal  teih 
dency  to  locus  attention  on  exobc 
hardware  and  fashnnable  method¬ 
ologies  before  we  have  oArvaled 
a  rational  grounding  n  how  thngs 
actualy  work,  k  tales  a  fttle  ion^. 
but  makes  a  loi  less  mess  along 
the  way. 

DanRaxzel 

Slai^isft  Systems.  Vancouver, 
firirish  Columbia 


False  Security 

GAJtTNOrs  ADVICE  on  collect¬ 
ing  metnes  sounds  good  on  the 
surface,  but  you  can  count  only  the 
attacks  you  can  detect  and  of 
those,  you  can  guess  their  effective¬ 
ness  or  ineftectwwness  based  only 
on  Wielher  yox  security  tools  ctem 
to  have  sucMssluly  blo^  them 
(TT  Managers  See  Need  for  Risk 


Mefnes.’ (XKhLit*  38973]  N  the 
secunly  tod  knows  how  to  delect  a 
parbeute  type  oi  attack,  than  I 
probably  knows  how  to  blodi  k  as 
wel.  «id  therefore  it  should  report 
XlO'Ib  dtectiveness.  Bi  Spernow. 
cNet  nfonnatton  secxrty  officer  at 
IheGeoigHStudeniFinanceCom- 
msston.  said  It  best  when  he  car 
tnned  that  toese  numbers  can  gw 
5  false  sense  of  seorty. 

Soon  B.  Hutchfraon 
Nefwork  odmintstraior,  Offtet 
of  rte  Sher^.  Contra  Costa 
Cotouy.  Martinez,  Cal^ 

COMPUTERW()mj)  welcomes 
comments  tram  ks  readers.  Laftots 
w<  be  edNed  for  brewty  and  danty 
They  should  be  addressed  to  Jme 
Edde.  lettore  edrtor.  Cornpderwotid. 
PO  Box  m  500  Old  Cormecticul 
Path  Framingham.  Mess.  01701. 
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Incfode  an  address  and  phone  num¬ 
ber  for  mmedaie  venfeabon. 
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I  AM  A  CISCO 
CATALYST  6500. 


I  AM  A  SNARLING 
PACK  OF 
DOBERMANS. 

I  AM  INTEGRATED  SECURITY.  I  HAVE  THE  POWER  TO  PROTECT  YOUR 
NETWORK  FROM  THE  INSIDE,  THE  OUTSIDE  AND  FROM  EVERYWHERE 
IN  BETWEEN.  I  ALWAYS  KNOW  WHO  IS  ON  THE  GUEST  LIST  AND 
HAVE  THE  POWER  TO  DENY  THOSE  WHO  ARENT  ON  IT.  I  SNIFF  OUT 
THREATS  SO  YOU  CAN  STAY  PRODUCTIVE.  I  AM  MORE  THAN  A 
CISCO  CATALYST  6500. 


THIS  IS  THE  POWER  OF  THE  NETWORK.  HOW. 
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.  ROBUST  OBJECT  DATABASE 

,  HIGH  PERFORMANCE  SQL 

.  MULTIDIMENSIONALACCESS 

tbase. 
iHilxt  wave. 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database  technology: 
Cache,  the  post-relational  database. 

What  makes  Cache  “post-relational”?  It  provides 
developers  three  integrated  data  access  options  which 
can  be  used  simultaneously  on  the  same  data:  an 
advanced  object  database,  high-performance  SQL, 
and  rich  multidimensional  access. 

Because  Cache’s  architecture  is  a  multi¬ 
dimensional  structure,  applications  built  on  it  are 
massively  scalable  and  lightning-fast. 

Plus,  no  mapping  is  required  between  object, 
relational,  and  multidimensional  views  of  data. 

This  means  huge  savings  in  both  development  and 
processing  time.  And,  Cache-based  applications 
don’t  require  frequent  database  administration  or 
hardware  and  middleware  upgrades. 


More  than  just  a  database  system.  Cache 
incorporates  a  powerful  Web  application  develop¬ 
ment  environment  that  dramatically  reduces  the 
time  to  build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life-or-death”  applications  at  hundreds  of  the  largest 
hospitals.  Cache  is  so  reliable,  it’s  the  world’s  leading 
database  in  healthcare  -  and  it  powers  enterprise 
applications  in  financial  services,  government  and 
many  other  sectors. 

We  are  InterSystems,  a  specialist  in  database 
technology  for  25  years.  We  provide  24x7  support 
to  four  miUion  users  in 


88  countries.  Cache  is 
available  for  Windows, 
OpenVMS,  Linux  and 
major  UNIX  platforms. 


InterSystems  ^ 


^  CACHE 

Make  Applications  Faster 


Download  a  fulfy^naional  version  of  Cachi  or  request  it  on  CD  for  free  at  www.lnterSvstems.cofn/Post-reldtionol 
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Sharing  the  Info  Wealth 

One  of  the  most  important  tasks  facing 
the  business-intell^ence  industry  is 
disseminating  information  from  analytics 
to  the  people  who  need  it  in  a  company, 
says  Don  Hatcher,  SAS’s  vice  president  of 
technology  strategy.  Page  30 


SECURITY  MANAGER’S  JOURNAL 

Coiporation  Caught 
In  the  Cross  Hairs 

A  focused  e-mail  attack  makes  Vince  7\ies- 
day  wonder  if  his  company  was  singled  out 
as  a  target.  An  investigation  lays  that  fear 
to  rest,  but  Vince  still  has  nagging  doubts 
about  his  company's  security.  Pa^  32 


OPINION 

iforthe 
rLaws 

As  privacy  laws  proliferate,  fear 
of  lawsuits  and  legal  penalties 
will  push  the  issue  of  con^)li- 
ance  ^nt  and  center,  says 
Robert  L  Mitchell.  Page  34 
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Hitton’smigrationofits 
enterprise  application  suite 
from  Unix  dient/serverto 
attiree-tier  Web  design  on 
Windows  pushed  the  limits  of 
the  technology.  But  it’sfinally 
paying  off.  By  Gary  H.  Anthes 


We  had  every 
platform  and 
operating  system 
under  the  sun. 


Hilton  hotels  corp.  is  in 
the  final  $u^  of  a  mas¬ 
sive  system  upgrade  and 
conversion  but  is  already  saving 
millions  of  dollars  in  operatii^ 
costs  and  sofhvare  license  fees. 
More  strategically,  the  total 

changeover  in  its  infra-  _ 

structure  —  including 
server  hardware,  operat¬ 
ing  systems,  datab^  and 
application  architecture 

—  will  greatly  simplify  - 

maintenance  and  support  and 
free  up  IT  staff  to  concentrate 
on  business  process  improve¬ 
ments,  according  to  Damien 
Bean,  vice  president  for  corpo¬ 
rate  systems  at  Hilton. 

Hie  $4  billion,  Beverly  Hills, 
Calif. -based  lodging  company  is 
convertii^  its  suite  Pe^Ie- 
Soft  75  client/server  appU^- 
tions  to  PeopleSoft  8  on  1  three- 
tier,  Web-based  architecture. 


It's  also  scrapping  Unix-based 
Hewiett-Packard  Co.  servers  in 
fovor  of  Windows  2000  Server 
boxes  from  Dell  Computer 
Corp.  and  replacing  its  Sybase 
Inc.  databases  with  SQL  Server 
2000  fiom  Microsoft  Corp. 

Hilton  merged  with  Promus 
Hotel  Corp.  in  December  1999. 
Today  the  company  owns  or 
manages  300  Hilton  hotels  and 
1,600  properties  in  the  Double- 
Tree.  Embassy  Suites,  Hampton 
Inns  and  Homewood  Suites 
chains.  “I  was  hired  in  April 
2000  to  pull  the  companies  to¬ 
gether,"  says  Bean.  ’’We  had 
every  platform  and  operating 
system  under  the  stm." 

Just  before  the  merger,  in 
response  to  the  Y2k  challenge. 
Hilton  bad  replaced  its  local, 
independent  payroll,  human 
resources  and  fmancial  systems 
with  centralized  PeopleSoft  7.5 
client/server  applications  nm- 
ning  on  HP  ha^ware  and 
Sybase  database  server  soft¬ 
ware.  The  resulting  production 
environment  was  far  from  bul¬ 
letproof,  Bean  says.  "It  had  been 
a  mad  scramble  because  of  the 
Y2k  issue,  and  toward  the  end 
they  were  just  slamming  things 
together  and  hoping  for  the 

-  best."  be  says. 

Cmi/^  Human  resources, 
f  payroll  and  financial  ap- 

REPOItT^  plications  at  the  former 


Promus  hotels,  which 
bad  been  running  on 
IBM  AS/400  conjurers  at  a 
central  data  center  in  Memphis, 
were  moved  to  the  PeopleSoft- 
HP-Sybase  system  as  weU.  But 
then  Hilttm  made  a  key  deci¬ 
sion  to  put  all  hotels  fi^  both 
companies  on  Promus'  custom- 
built.  SQL  Server-based  proper¬ 
ty  management  system. 

Bean  says  the  two  companies 
bad  too  many  servers,  operating 
systems  and  databases  even  be- 
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Sharing  the  Info  Wealth 

One  of  the  most  important  tasks  facing 
the  business-intelligence  industry  is 
disseminating  information  from  analytics 
to  the  people  who  need  it  in  a  company, 
says  Don  Hatcher,  SAS's  vice  president  of 
technology  strategy.  Page  30 


SECURITY  MANAGER'S  JOURNAL 

Coiporation  Caught 
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A  focused  e-mail  attack  makes  Vince  Tues¬ 
day  wonder  if  his  company  was  singled  out 
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to  rest,  but  Vince  still  has  nagging  doubts 
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Bracing  for  the 
New  Privacy  Laws 

As  pri%'ac>-  laws  proliferate,  fear 
of  lau-suits  and  legal  penalties 
will  push  the  issue  of  compli¬ 
ance  front  and  center,  sa>'s 
Robert  L.  Mitchell.  Page  34 


HBJON 


CHECKS 

INTO 

NEW 

SUITE 


Hilton’s  migration  of  its 
enterprise  application  suite 
from  Unix  client/serverto 
athree-tier  Web  design  on 
Windows  pushed  the  limits  of 
the  technology.  But  it’s  finally 
paying  off.  By  Gary  H.  Anthes 
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We  had  every 
platform  and 
operating  system 
under  the  sun. 


Hilton  hotels  corp.  is  in 
the  final  stages  of  a  mas¬ 
sive  s>’stem  upgrade  and 
conversion  but  is  already  saving 
millions  of  dollars  in  operating 
costs  and  software  license  fees. 
More  strategically,  the  total 

changeover  in  its  infra-  _ 

structure  —  including 
server  hardware,  operat¬ 
ing  systems,  database  and 
application  architecture 
-  will  greatly  simplify 


maintenance  and  support  and 
free  up  IT  staff  to  concentrate 
on  business  process  improve- ' 
ments.  according  to  Damien 
Bean,  vice  president  for  corpo¬ 
rate  systems  at  Hilton. 

The  S4  billion.  Beverly  Hills. 
Calif.-based  lodgii^  company  is 
converting  its  suite  of  People- 
Soft  7.5  client/server  applica¬ 
tions  to  PeopleSoft  8  on  a  three- 
tier.  Web-based  architecture. 


It’s  also  scrapping  Unix-based 
Hewlett-Packard  Co.  servers  in 
favor  of  Windows  2000  Serxer 
boxes  from  Dell  Computer 
Corp.  and  replacing  its  Sybase 
Inc.  databases  with  SQL  Server 
2000  from  Microsoft  Corp. 

Hilton  merged  with  Promus 
Hotel  Corp.  in  December  1999. 
Today  the  company  owns  or 
manages  300  Hilton  hotels  and 
1.600  properties  in  the  Double- 
Tree,  Embassy  Suites.  Hampton 
Inns  and  Homewood  Suites 
chains.  “I  was  hired  in  April 
2000  to  pull  the  companies  to¬ 
gether."  says  Bean.  “We  had 
every  platform  and  operating 
system  under  the  sun." 

Just  before  the  merger,  in 
response  to  the  Y2k  challenge. 
Hilton  had  replaced  Us  local, 
independent  payroll,  human 
resources  and  financial  systems 
with  centralized  PeopleSoft  7.5 
client/server  applications  run¬ 
ning  on  HP  hardware  and 
Sybase  database  server  soft¬ 
ware.  The  resulting  production 
environment  was  far  from  bul¬ 
letproof.  Bean  says.  “It  had  been 
a  mad  scramble  because  of  the 
Y2k  issue,  and  toward  the  end 
they  were  just  slammii^  things 
together  and  hoping  for  the 

_  best,"  he  says. 

nriA/^  Human  resources. 
rlLLII>»>^  payroll  and  financial  ap- 
pCpADT^plications  at  the  former 
IlLrm  I  Promus  hotels,  which 
had  been  running  on 


IBM  AS/400  computers  at  a 
central  data  center  in  Memphis, 
were  moved  to  the  PeopleSoft- 
HP-Sybasc  s>'stem  as  well.  But 
then  Hilton  made  a  key  deci¬ 
sion  to  put  all  hotels  from  both 
companies  on  Promus’  custom- 
built,  SQL  Server-based  proper¬ 
ty  management  system. 

Bean  sa>’s  the  two  companies 
had  too  man>'  servers,  operating 
s>’steins  and  databases  even  be- 


Ion-  they  mcnicJ.  Alter  the  merger,  the 
mi\  nf  teehm'U»j:ies  was  untenahic.  a 
situation  not  improved  by  the  instabili¬ 
ty  of  the  production  en\  ironmeiu.  nie 
time  had  come  to  streamline,  simplify, 
and  standardise  in  order  to  cut  ctwts. 

Hilt»>n  bumped  IIP  in  favor  of  IVll 
lapjtely  for  cost  reasons,  Hean  saw  IVll 
senvfs  as  ev>mmodity  boxes  thiit  could 
be  had  I'n  the  cheap  and  easily  replaced 
w  ith  another  vendor’s  Wintel  machines 
anytime  a  better  deal  came  alonj:.  As 
for  databases,  '‘we  didn't  see  Sybase  as 
j  straieitic  platform  for  Hilton."  Bean 
says.  •*!  had  visions  of  it  being  Ukt- 
guired  by  taimpuier  Associates!,  and  ! 
didn’t  want  to  be  left  K'liind." 

Bean  says  Milton  had  twt»  long-term, 
industry-standard  options;  SQL  Server 
’tM)o  on  Windows  and  l>racleyi  on 
Linux.  "We  clearly  knew  Oracle  would 
Work,  and  we  gt»t  a  very  compelili^* 
bid  from  Oracle."  he  says.  On  the  nega¬ 
tive  side.  Hilton  staff  had  extensive 
SQL  Sen’cr  c.xperiencc  but  virtually  no 
Oracle  expertise 

Even  more  significant.  Hilton  was  al¬ 
ready  installing  the-  SQL  Server-based 
property  management  system  at  every 
hoieL  and  the  software  license  from 
MietxtSiifi  allowed  client  access  to  Peo- 
pleStift  for  very  little  incremental  cost. 

It  was  cheaper  than  Oracle  “by  orders 
of  magnitude."  Bean  says. 

But  Bean  had  concerns  about  scala¬ 
bility.  While  Oracle  could  do  the  job. 
the  suitability  of  SQL  Server  wasn't  so 
clear,  and  no  reference  account  for  | 
SQL  Server  even  approaching  the  size 
of  Hiltvin  could  be  found.  “Clearly  we 
were  going  out  on  the  edge  of  the  per¬ 
formance  envelope."  he  says.  i 

Bean  concluded  that  if  he  wA  going 
to  live  on  the  edge,  so  would  ht.s  three 
key  vendors  —  IX*II.  IVopleSoft  and 
Microsoft.  He  met  with  senior  cxceu-  i 
lives  at  all  three  companies  and 
stressed  that  the  hotel  giant  w  tmid  j 

make  a  gold-plated  reference  account.  | 
"We  said.  ’If  you’ve  got  someone  will-  | 
ing  to  try  this  and  take  s<ime  risk,  this  i 
Ls  a  project  you  can’t  afford  to  let  fail.' "  | 
be  says.  j 

Scalding  Performance 

Hilton  decided  to  test  its  Wintel  sys¬ 
tem  concept  first  on  a  travel  agent 
commission  system,  an  HP-Sybasc  ap¬ 
plication  that  had  been  coded  using 
the  PeopleTools  application  develop¬ 
ment  c-nvironment.  Although  it  was  big 
—  50  to  60  tables  and  lOOGB  of  data  — 
it  wasn’t  terribh'  complicated,  nor  was 
it  so  time-sensitive  that  it  couldn’t  be 
d»)wn  fi>r  a  day  or  two  if  there  were 
problems. 

SQL  Server  proved  up  to  the  task. 


HILTON’S  PEOPLESOFT 
ARCHITECTURE 


Hilton  onginaUy  ran  PeopleSoft  7.5  client/ 
server  applications  on  a  Sybase  database  in 
a  single,  eight -CPU  HP/QCKX)  N  class  server 
with  all  application  and  database  processing 
pertormed  on  one  server.  Many  payroll  sys¬ 
tem  components  were  processed  using  sin¬ 
gle-threaded  Cobol  code  Now.  Haioo  runs 
P^leSottSonadus- 
lered.  Web-based,  three- 
ti&  architecture  that  in- 
dudes  SQL  Server 2000. 
Tasks  are  spread  across 

Bmore  than  70  processors 
on  12  servers,  and  a  new 
application  engine  allows 
multithreaded  payroll 
processing,  improving 
processing  time  by  a 
factor  ot  six 


The  IVupIeSuft  application  si-rvers 
and  SQl  Scrx'cr  database  sei^’crs  "ran 
like  a  scalded  bat."  performing  .six 
times  faster  than  the  previous  system. 
Bean  recalls.  Gratified  and  embold¬ 
ened.  Hilton's  IT  shop  moved  on  to  mi¬ 
grate  the  PeopleSoft  HR  and  payroll 
systems  for  71,000  employees. 

The  project  turned  out  to  he  far  more 
complicated  than  expected.  Bean  says, 
because  no  one  had  ever  set  up  such  a 
large  PetipleSoft  HR  system:  It  consist¬ 
ed  of  six  four-way  Web  servers  and  five 
eight-way  application  servers.  The  job 
was  further  complicated  by  the  proc¬ 
essing  autonomy  and  flexibility  Hilton 
gives  its  hotels.  "Hilton  is 
the  ultimate  real-time  envi¬ 
ronment."  Bean  says.  "We 
don’t  do  batch  payndls 
every  Thursday  night.  If 
Hotel  A  wants  to  run  its 
payroll  Monday  at  11  p.m.. 
they  do  it.” 

tX’ll,  Microsoft  and  Peo- 
plcSoft  provided  sustained 
on-site  support,  as  did  BEA 
Systems  Inc.,  supplier  of 
the  WcbU^gic  Web  serv'crs  and  Tuxedo 
application  servers  used  in  the  project. 
“We  were  doing  engineering  that  no 
one  had  ever  done  before."  Bean  says. 
"We  did  .an  enormous  amount  of  brain¬ 
storming  on  the  new  setup  and  how  to 
load-balance  acit>.ss  it."  And  they  made 
it  work. 

Payroll  Problems 

But  Hilton’s  infinitely  variable  proc¬ 
essing  schedule  made  exhaustive  pre- 
production  testing  impossible,  and  on 
the  first  day  running  the  new  system, 
payroll  “went  to  hell  in  a  handbasket." 
Bean  recalls.  One  thing  that  apparently 
hadn’t  been  tested  was  a  condition  that 
caused  the  cache  used  by  an  optimizer 
in  SQL  Server  to  balloon  from  its  nor¬ 
mal  10KB  of  RAM  to  L.^GB.  “At  that 
point,  all  the  database  CPU.s  spun  up  to 
100%  (utilization],  and  the  only  way  to 
get  it  back  under  contml  w'as  to  push 
the  button  and  turn  it  off."  Bean  says. 

Payroll  is  Hilton’s  No.  I  priority  for 
disaster  recovery,  acettrding  to  Bean. 
“Micix»s<rft  had  six  people  on-site  the 
next  morning  (TUesdayL  plus  a  team  in 
Redmond.  They  had  three  bug  fixes  by 
that  Sund.'iy  night,  which  is  phenome¬ 
nal.”  he  says. 

Hilton's  employees  got  paid,  but 
only  after  round-ihc-clock  efforts  by 
the  company’s  payroll  staff.  It  i(.M)k 
three  weeks  to  completely  catch  up. 
Bean  says. 

Hilton  is  now  in  the  final  pha.se  of  its 
IT  architecture  makeover  convening 
its  PeopleSoft  financial  applications  to 


the  three-tier  Dell-SQL  Serx'er  system. 
Bean  expects  to  have  that  in  produc¬ 
tion  by  August. 

In  the  meantime,  stress  testing  will 
be  in  the  spt»tlight.  The  bug  in  payroll 
popped  up  when  an  online  process  col¬ 
lided  with  some  batch  code  running  at 
the  same  time,  and  Hilton  has  modi¬ 
fied  its  approach  to  testing  as  a  result. 
“HR  is  a  ver>'  hatch-oriented  system, 
and  our  focus  was  on  those  things  that 
were  commonly  run."  sa>'s  Roxanne 
Cheong.  Hilton’s  manager  of  database 
administration.  "But  with  the  financial 
systems,  we  are  throwing  in  ad  hoc 
things,  online  transactions  during  the 
stress  tests." 

"We  should  have  done  a 
bit  K’tter  on  the  stress  test¬ 
ing.  which  is  why  wc  are 
spending  an  awful  lot  more 
time  on  it  now."  says  fane 
Melville,  project  manager 
and  director  of  corporate 
systems.  "It  takes  a  lot  of 
expertise  to  get  each  layer 
correct"  in  a  three-tier  ar¬ 
chitecture.  she  adds. 

Melville  sa>'s  her  team  has  spent  six 
weeks  writing  scripts  —  using  L<»ad- 
Runner,  a  testing  tool  from  Mercury 
Interactive  Corp.  —  to  do  stress  testing 
for  the  financial  applications. 

The  tests  will  run  at  a  Dell  laborato- 
r>'  in  Austin,  where  the  vendor  has  set 
up  a  mock  production  environment  in 
which  it  can  .simultaneously  sires.s-iest 
its  own  hardware.  Hilton’s  PtH>p!eS«fi 
applications  and  SQL  Server.  All  four 
companies  have  people  on  site. 

When  testing  is  complete,  the  entire 
.system  will  be  .shipped  to  Hilton’s 
Memphis  data  center.  “I’m  trying  to 
fundamentally  offload  and  mitigate  as 
many  risks  as  possible."  Bean  says. 

Saving  Millions 

All  the  migrations  will  save  S4.5  mil¬ 
lion  10  S5  million  out  of  Hilton’s  S150 
million  IT  budget.  Bean  says.  The  total 
cost,  not  counting  internal  labor,  will 
come  in  at  about  S3.8  million,  he  says. 

Robert  La  Forgia.  a  senior  vice  presi¬ 
dent  and  Hilton's  controller,  says  the 
upgrades  will  benefit  Hilton  customers 
by  making  it  easier  for  the  IT  staffers 
to  adapt  systems  that  touch  them  — 
such  as  reservations  and  billing  —  to 
customers'  changing  needs. 

As  for  internal  customers,  the  new 
architecture  has  already  so  stream¬ 
lined  piXK'cssing  that  La  Forgia  is  now 
able  to  close  the  books  in  six  days  in¬ 
stead  of  10.  “We  have  decreased  proc¬ 
essing  lime  considerably."  he  says.  “We 
have  a  lot  less  blood,  sweat  and  tears 
and  a  lot  less  overtime."  I 
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fore  they  merged.  After  the  merger,  the 
mix  of  technoiogies  was  unteruble,  a 
situation  not  unproved  by  the  instabili¬ 
ty  of  the  production  environment.  The 
time  had  come  to  streamline,  simplify, 
and  standardize  in  order  to  cut  costs. 

Hilton  bumped  HP  in  favor  of  Dell 
largely  for  cost  reasons.  Bean  saw  Dell 
servers  as  commodity  boxes  that  could 
be  had  on  the  cheap  and  easily  replaced 
with  another  vendor’s  Wintel  machines 
anytime  a  better  deal  came  along.  As 
for  databases,  “we  didn’t  see  Sybase  as 
a  strategic  platform  for  Hilton,”  Bean 
says.  ”1  had  vbioits  of  it  being  [ac¬ 
quired  by  Computer  Associates],  and  I 
didn't  want  to  be  left  behind” 

Bean  says  Hilton  had  two  loi^-term. 
industry-standard  options:  SQL  Server 
2000  on  Windows  and  OnK:le9i  on 
Linux.  ”We  clearly  knew  Oracle  would 
work,  and  we  got  a  very  competitive 
bid  from  Oracle,”  he  says.  On  the  nega¬ 
tive  side,  HUcon  stair  bad  extensive 
SQL  Server  experience  but  virtually  no 
Oracle  expertise. 

Even  more  significant.  Hilton  was  al¬ 
ready  installing  the  SQL  Server-based  | 
property  management  system  at  every 
boteL  and  the  software  license  from 
Microsoft  allowed  client  access  to  Peo- 
pleSoft  for  very  little  incremental  cost. 

It  was  cheaper  than  Oracle  ”by  orders 
of  magnitude,”  Bean  says. 

But  Bean  had  concerns  about  scala¬ 
bility.  While  Oracle  could  do  the  job, 
the  suitability  of  SQL  Server  wasn’t  so 
clear,  and  no  reference  account  for 
SQL  Server  even  approaching  the  size 
of  Hilton  could  be  found.  ”Clearly  we 
were  going  out  on  the  edge  of  the  per¬ 
formance  envelope.”  he  says. 

Bean  coiududed  that  if  he  was  going 
to  live  on  the  edge,  so  would  his  three 
key  vendors  —  DeU,  Pct^leSoft  and 
Microsoft  He  met  with  senior  execu¬ 
tives  at  all  three  companies  and 
stressed  that  the  hotel  giant  would 
make  a  gold-plated  reference  account 
“TVe  said.  ‘If  you’ve  got  son>eone  will¬ 
ing  to  try  this  and  take  some  risk,  this 
is  a  project  you  can't  afford  to  let  faiL’  ** 
he  says. 

SraUmg  Psifonnance 

Hilton  decided  to  test  its  Wmiel  sys¬ 
tem  concept  first  on  a  travel  agent 
commission  system,  an  HP-Sybase  ap¬ 
plication  that  had  been  coded  using 
the  Pe  jpleTools  application  develop¬ 
ment  environment.  Altbou^  it  was  big 
—  50  to  60  tables  and  100GB  of  data  — 
it  wasn't  terribly  complicated,  nor  was 
it  so  time-sensitive  that  it  couldn't  be 
down  for  a  day  or  two  if  there  were 
problems. 

SQL  Servtr  proved  up  to  the  task. 
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The  PeopleSoft  application  servers 
and  SQL  Server  database  servers  “ran 
like  a  scalded  bat,”  performing  six 
times  faster  than  the  previous  system. 
Bean  recalls.  Gratified  and  embold¬ 
ened.  Hilton's  IT  shop  moved  on  to  mi¬ 
grate  the  PeopleSoft  HR  and  payroll 
systems  for  71,000  employees. 

The  project  turned  out  to  be  far  more 
complicated  than  expected.  Bean  says, 
because  no  one  had  ever  set  up  such  a 
large  PeopleSoft  HR  system:  It  consist¬ 
ed  of  six  four-way  Web  servers  and  five 
eight-way  application  servers.  The  job 
was  further  complicated  by  the  proc¬ 
essing  autonomy  and  flexibility  Hilton 

gives  its  hotels.  ”Hi]ion  is  - 

the  ultimate  real-time  envi¬ 
ronment."  Bean  says.  ”We 
don’t  do  batch  payrolls 
every  Thursday  night.  If 
Hotel  A  wants  to  run  its 
payroll  Monday  at  II  p  jn.. 
they  do  it" 

DeU.  Microsoft  and  Peo¬ 
pleSoft  provided  sustained 
on-site  support,  as  did  BEA 
Systems  Inc.,  suppUer  of 
the  WebLogic  Web  servers  and  Tuxedo 
application  servers  used  in  the  projea. 
”We  were  doing  engineering  that  no 
one  had  ever  done  before.”  Bean  says. 
*^6  did  an  enormous  amount  of  brain¬ 
storming  on  the  new  setup  and  how  to 
load-balance  across  it”  And  they  made 
it  work. 

Payrak  RDbiems 

But  HUton’s  infinitely  variable  proc¬ 
essing  schedule  made  exhaustive  pre- 
production  testing  impossible,  and  on 
the  first  day  rtmning  the  new  system, 
payroU  •^vcnt  to  hell  in  a  handbasket” 
Bean  recalls.  One  thing  that  apparently 
hadn't  been  tested  was  a  condition  that 
caused  the  cache  used  by  an  optimizer 
in  SQL  Server  to  balloon  from  its  nor¬ 
mal  10KB  of  RAM  to  IJGB.  "At  that 
point.  aU  the  database  CPUs  spun  up  to 
100%  [utilization],  and  the  only  way  to 
get  it  back  under  control  was  to  push 
the  button  and  turn  it  ofE”  Bean  says. 

Payroll  is  Hilton's  No.  1  priority  for 
disaster  recovery,  according  to  Bean. 
"Microsoft  had  six  people  on-site  the 
next  rooming  [’Rie^y],  plus  a  team  in 
Redmond.  They  had  three  bug  fixes  by 
that  Sunday  night,  which  is  phenome¬ 
nal."  he  says. 

HUton's  employees  got  paid,  but 
only  after  round-the-clock  efforts  by 
the  company's  payroU  staff.  It  took 
three  weeks  to  completely  catch  up, 
Bean  says. 

Hilton  is  now  in  the  final  phase  of  its 
IT  architecture  makeover  converting 
its  PeopleSoft  financial  applications  to 
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the  three-tier  Dell-SQL  Server  system. 
Bean  expects  to  have  that  in  produc¬ 
tion  by  August. 

In  the  meantime,  stress  testing  will 
be  in  the  spotlight.  The  bug  in  payroll 
popped  up  when  an  online  process  col¬ 
lided  with  some  batch  code  running  at 
the  same  time,  and  Hilton  has  modi¬ 
fied  its  approach  to  testing  as  a  result 
"HR  is  a  very  batch-oriented  system, 
and  our  focus  was  on  those  things  that 
were  commonly  run,”  says  Roxanne 
Cheong.  Hilton's  manager  of  database 
administration.  "But  with  the  financial 
systems,  we  are  throwing  in  ad  hoc 
things,  online  transactions  during  the 

-  stress  tests.” 

"We  should  have  done  a 
bit  better  on  the  stress  test¬ 
ing.  which  is  why  we  are 
spending  an  aw^l  lot  more 
time  on  it  now,”  says  ]ane 
Melville,  project  manager 
and  director  of  corporate 
systems.  "It  takes  a  lot  of 
expertise  to  get  each  layer 
correct"  in  a  three-tier  ar¬ 
chitecture.  she  adds. 

Melville  says  her  team  has  spent  six 
weeks  writing  scripts  ~  using  Load- 
Runner.  a  testing  tool  from  Mercury 
Interactive  Corp.  ^  to  do  stress  testing 
for  the  financial  appUcations. 

The  tests  will  run  at  a  DeU  laborato¬ 
ry  in  Austin,  where  the  vendor  has  set 
up  a  mock  production  environment  in 
which  it  can  simultaneously  stress-test 
its  own  hardware,  HUton's  PeopleSoft 
appUcations  and  SQL  Server.  All  four 
companies  have  people  on  site. 

When  testing  is  complete,  the  entire 
system  will  be  shipped  to  HUton’s 
Memphis  data  center.  "Fm  trying  to 
fundamemaUy  offload  and  mitigate  as 
many  risks  as  possible,”  Bean  says. 

Saving  MiBons 

AU  the  migrations  wiU  save  S4.5  mU- 
lion  to  SS  mUlkm  out  of  HUton’s  SISO 
milUon  IT  budget.  Bean  says.  The  total 
cost,  not  counting  internal  labor.  wUl 
come  in  at  about  $3.8  miUion,  he  says. 

Robert  La  Forgia,  a  senior  vice  presi¬ 
dent  and  HUton’s  controUer.  says  the 
upgrades  wiU  benefit  HUton  customers 
by  making  it  easier  for  the  IT  staffers 
to  adapt  systems  that  touch  them  — 
such  as  reservations  and  billing  —  to 
customers'  changing  iteeds. 

As  for  internal  custooMrs,  the  new 
architecture  has  already  so  stream¬ 
lined  processing  that  La  Fbr^  is  now 
able  to  close  the  books  in  six  days  in¬ 
stead  of  10.  "We  have  decreased  proc¬ 
essing  time  considerably,"  be  says.  "We 
have  a  lot  less  blood,  sweat  and  tears 
and  a  lot  less  overtime.”  I 
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With  a  list  price  ol’S‘'‘>.'t*>5  each,  the 
I  ippjnjipolnt  diw  ices  aren’t  cheap  tal- 
ihorngh  Danford  received  a  suhstantial 
ac.ideniic  discount  1  .And  the  lechn«>l- 
»ii:\  —  which  has  htvn  on  the  market 
lor  a  little  twer  a  year  —  is  unproven  in 
lartte-seale  c«'rpt*rate  net\^t*rks.  Hut 
DanI'ord  was  ready  to  try  anythin^:. 

“We  lune  to  have  some  level  uf » open¬ 
ness  on  iHir  network.  We  can't  lock  it 
dow  n  like  a  bank  cimld."  he  says. 

In  lanuary.  two  weeks  alter  Dantord 
set  up  the  appliance,  the  SQ!.  Slammer 
worm  hit.  “We  didn't  skip  a  beat.  WV 
h.id  •!  I»*t  ol  e’ip«*sed  servers."  he  •says, 
kherall.  the  university  receives  over 
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pi'op.iitaiion  speed  ofal- 
t.ii  ks  h.is  ^’one  up  dranuti 
eally.says  Neal  ilartsell. 

V  ice  president  ot  product 
marketing:  at  I  ipptnytl'oinl. 
h*'r  iwample.  the  NimJa  worm  took  a 
Jay  i>r  two  to  inlect  thousands  ol'lii'sts 
worldw  ide  in  dO(H.  In  lanuary.  the  SQl 
Slammer  vvoirm  compromised  nearly 
liMUlOO  machines  in  just  .lO  minutes. 


IPS  PROS  AND  CONS 

t  illegitimate 

requests  cm  a  network  or  server 

f  or  learned  behavinr 

patterns  as  well  as  signatures  to 
delect  and  block  both  known  and 
unknown  attacks. 

t  to  lest 

security  patches  and  fixes  before 
deploying  them 

^  lalse  positives  that 

block  legitimate  traffic 

4 

Even  host-based  devices  are  still 
unproven  in  large-scale  deployments. 


lI’Ss  unrk  by  pr.Mclivcly  bloekine 
illeeitim.ile  neiu  ork  irariK  ;mj  server 
reqiii'sis.  mi  luJiriL'  both  know  n  and 
iiiikiiown  ihivats  1  hey  immediately 
bh'i  k  lu'twink  irahk  or  server  n- 
s|iies|s  ilayiireJ  .is  m.ilieiovis  by  numi- 
ti'i'ine  dev  i.iliims  I'nim  110rm.1l  s\sti  ni 
bi'hav  ii'r  or  by  Ibllow  inj:  .1  si  ries  ot 
mil's.  Hy  cunir.ist  uurusion-delection 
systems  i  IHsi  reioizni/e  only  know  n 
altai  k  p.iiteriis,  I  hey  llap  network  in 
trusjons  .liter  the  I’.iet.  issuinj;  alerts  or 
poiiniif:  the  data  into  loirs  hir  later  re¬ 
view  by  a  systems  administrator. 

To  kiehard  siiennon.  an  analy  si  at 
(■artiier  Inc.,  the  advantajtes  ol  an  IPS 
overall  IPS  are  clear.  “Ilyou  owned  a 
jewelry  store,  would  you  rather  add  a 
deadbolt  to  the  Iront  door  or  add  an¬ 
other  security  camera?"  he  says. 

As  w  ith  mSs.  v  endors  offer  both 
host-  and  network-based  Il'Ss.  Host- 
based  ll'Ss  (HU'S)  first  appeared  more 
than  two  years  ajro  and  are  just  begin¬ 
ning;  to  gain  mainstream  acceptance. 
Network  A.ssociates  Ine.  says  more 
than  I.IHHI  companies  use  its  Fntereept 
HU'S  product.  The  systems  work  by- 
installing  a  software  agent  v>n  each 
server  and  then  managing  the  agents 
fr«mi  a  central  console. 

Network-based  Il'Ss  (NII'S).  avail¬ 
able  from  companies  like  Tipping- 
Point.  are  relatively  new.  I  hese  “in¬ 
line''  systems  sit  on  the  network  and 
inspect  packets  for  anomalies.  But 
adoption  has  been  slow  to  date  be¬ 
cause  potential  buyers  are  unsure  how 
a  NIPS  fits  into  the  overall  security 
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As  IPS  technologies  mature,  users  say  the 
benefits  of  proactively  blocking  attacks  outweigh  the 
risks  of  false  positives.  By  Lauren  Gibbons  Paul 


■  PRODUCTS 

IPS  Emerges 
From  Mergers 

Unlii  recently,  slatl-ups  and  mdeoen- 
deni  vendots  dominated  m  rhe  IPS 
market  Bui  ihe  niche  has  recently 
caught  the  attention  ol  large  vendors 
ol  network  secunty  products, ’leading 
to  an  acquisition  spree  That's  good 
news  tor  corporate  IT,  since  it  means 
scalability  and  support  are  likely  to 
get  better 

IPS  products  lall  into  host-  and  net¬ 
work-based  categories,  but  at  least 
one  vendor  has  an  offering  m  both 
camps.  Network  Associates  in  Santa 
Clara.  Calil .  now  owns  a  HIPS  product. 
Entercept,  as  a  result  ol  its  April  acqui¬ 
sition  ol  Entercept  Secunty  Technolo¬ 
gies  Inc.  And  m  May  it  acquired  Infru- 


pictun*.  according  to  Stiennon. 

Both  lypc-s  of  IPSs  yield  other  bene- 
tits  ;is  well,  for  example,  network  ad¬ 
ministrators  can  deploy  software 
patches  on  a  seheJuled  basis  rather 
than  rush  them  out  as  emergency  fixes. 
With  an  IPS  in  place,  “companies  . . . 
can  be  assured  they  are  maintaining 
security  until  they  can  deploy  the 
patch."  says  Fric  Ogren.  an  analyst  at 
■fhe  Yankee  liroup  in  Btiston. 

Il'Ss  may  also  deter  attackers  fnim 
launching  a  majvir  attack  on  a  network. 
Many  attackers  do  test  runs  prior  to  at¬ 
tacking  a  system.  If  a  threat  is  dcficci- 
ed.  that  may  dissuade  an  attacker  from 
a  broader  attack.  "We’ve  seen  the  sys¬ 
tem  deter  attacks.  Thai's  a  cinil  thing.’* 
says  Bryan  Turbvivv.  founder  and  presi¬ 
dent  «*f  Myrient  Inc.,  a  managed  ser¬ 
vices  provider  in  Aliso  Viejo,  t-alif. 
Myrient  uses  Captus  IPS.  a  NIPS  sys¬ 
tem  from  Woodland,  Calif.-based  Cap¬ 
tus  Networks  Corp. 

NIPSs  and  HIPSs  aren’t  mutually  ex¬ 
clusive.  ideally,  both  types  of  Il’Ss 
should  be  pan  of  a  layered  informa¬ 
tion-security  architecture  that  also  in¬ 
cludes  fircvvalls.  vulnerability  assess¬ 
ment  and  remediation  alongside  other 
types  of  protection,  say  analysts. 

But  users  are  wary  of  buying  a  pr»*d- 
uet  that  might  generate  false  positives, 
a  major  complaint  about  lIXSs.  The 
consequences  of  a  false  positive  are 
more  dire  with  an  IPS.  since  it  could 
bk>ck  legitimate  business  traffic  rather 
than  just  generate  alerts  or  reports. 
Some  vendors  claim  that  their  products 
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The  university  of  dayton  s 
network  used  to  go  down  aU 
the  time.  Students  introduced 
viruses  from  their  laptops,  and 
university  servers  were  the 
targets  of  an  unrelenting  barrage  of 
worms  like  Nimda  and  Code  Red 
"At  one  point,  the  network  was  going 
down  on  almost  a  daily  basis."  says 

Tom  Danford,  CIO  at  the  _ 

Ohio  institution.  Last  Octo¬ 
ber.  Danford  turned  to  a 
new  type  of  security  prod¬ 
uct:  an  intrusion-prevention 

system  (IPS).  The  universi-  - 

ty  bought  two  Unity0ne-2000s  from 
TippingPoint  Technologies  Inc.  in 
Austia  Ttie  appliances  monitor  net¬ 
work  traffic  for  anomalies  such  as 
buffer  overflow  attacks  and  automati¬ 
cally  drop  packets  associated  with 
those  events,  essentially  cutting  off  at¬ 
tacks  before  they  can  start. 

With  a  list  price  of  $99,995  each,  the 
TippingPotnt  devices  aren’t  cheap  (al¬ 
though  Danford  received  a  substantial 
academic  discount).  And  the  technol¬ 
ogy  —  which  has  been  on  the  market 
for  a  little  over  a  year  —  is  unproven  in 
large-scale  corporate  networits.  But 
Danford  was  r^y  to  try  anything. 

"We  have  to  have  some  level  of  open¬ 
ness  on  our  network.  We  can't  lock  it 
down  like  a  bank  could."  he  says. 

In  January,  two  weeks  alter  Danford 
set  up  the  appliance,  the  SQL  Slammer 
worm  hit  "Vfo  didn’t  skip  a  beat.  We 
had  8  lot  of  eiqiosed  servers,"  he  says. 
OveraU.  the  university  receives  over  I  I 


I  3,0(K)  attack  attempts  every  week.  So 
far.  he  says,  they’ve  all  been  filtered  out. 

Many  companies  face  similar  chal* 
lenges.  The  number  of  system  vulnera¬ 
bilities  and  cyberattacks  are  skyrocket¬ 
ing.  according  to  the  CERT  Coordina¬ 
tion  Center  at  Carnegie  Mellon  Uni¬ 
versity  in  Pittsburgh,  which  logged 
52,658  malicious  incidents  in  the  first 

-  quarter  alone.  And  the 

propagation  speed  of  at¬ 
tacks  has  gone  up  dramati¬ 
cally,  says  Neal  HartseU. 
vice  president  of  product 
marketing  at  TippingPoint. 
For  example,  the  Nimda  worm  took  a 
day  or  two  to  infect  thousands  of  hosts 
worldwide  in  2001.  In  January,  the  SQL 
Slammer  worm  compromised  nearly 
100.000  machines  in  Just  30  minutes. 


IPSs  work  by  proactively  blocking 
illegitimate  network  traffic  and  server 
requests,  including  both  known  and 
unknown  threats.  They  immediately 
block  network  traffic  or  server  re¬ 
quests  flagged  as  malicious  by  moni¬ 
toring  deviations  from  normal  system 
behavior  or  by  following  a  series  of 
rules.  By  contrast,  intrusion-detection 
systems  (IDS)  recognize  only  known 
attack  patterns.  They  flag  network  in¬ 
trusions  after  the  fact,  issuing  alerts  or 
pourii^  the  data  into  logs  for  later  re¬ 
view  by  a  systems  administrator. 

To  Richard  Stiennon,  an  analyst  at 
Gartner  Inc.,  the  advantages  of  an  IPS 
over  an  IDS  are  clear.  "If  you  owned  a 
jewelry  store,  would  you  rather  add  a 
deadbolt  to  the  front  door  or  add  an¬ 
other  security  camera?"  he  says. 

As  with  IDSs.  vendors  offer  both 
host-  and  network-based  IPSs.  Host- 
based  IPSs  (HIPS)  first  appeared  more 
than  two  years  ago  and  are  just  begin¬ 
ning  to  gain  mainstream  acceptance. 
Network  Associates  Inc.  says  more 
than  LOOO  companies  use  its  Entercept 
HIPS  product  The  systems  work  by 
in-stalling  a  software  agent  on  each 
server  then  managing  the  agents 
from  a  central  console. 

Network-based  IPSs  (NIPS),  avail¬ 
able  from  companies  like  Tipping- 
Point  are  relatively  new.  These  “in- 
Ime"  systems  sit  on  the  network  and 
inspect  packets  for  anomalies.  But 
adoption  has  been  stow  to  date  be¬ 
cause  potential  buyers  are  unsure  how 
a  NIPS  fits  into  the  overall  security 


Preventive 

Medicine 

Outlook:  As  IPS  technologies  mature,  users  say  the 
benefits  of  proactively  blocking  attacks  outweigh  the 
risks  ()ff^  positives.  By  Lauren  Gibbons  P^l 


I  ■  PRODUCTS 

IPS  Emerges 
From  Mergers 

Until  recently,  start-ups  and  indepen- 
deni  vendors  domina^  in  the  IK 
market.  But  the  niche  has  recently 
caught  the  attention  of  large  vendors 
of  network  security  pro(Ajcts.  leading 
to  an  acquisltjon  spree.  That’s  good 
news  for  corporate  fT,  since  it  means 
scatabillty  and  support  are  litely  to 
get  better. 

IPS  products  fal  into  host-  and  net¬ 
work-based  categories,  but  at  least 
one  vendor  has  an  offering  in  both 
camps.  Network  Associates  in  Santa 
Clara,  CaM..  now  owns  a  IGPS  product. 
Entercept.  as  a  lesuK  of  its  April  acqui¬ 
sition  of  Entercept  Security  Technolo¬ 
gies  Inc.  And  In  May  It  acquire  Intru- 


picture,  according  to  Stiennoiu 

Both  types  of  IPSs  yield  other  bene¬ 
fits  as  well  For  example,  network  ad¬ 
ministrators  can  deploy  softwaie 
patches  on  a  scheduled  basis  rather 
than  rush  them  out  as  emergency  fixes. 
With  an  IPS  in  place,  "companies . . . 
can  be  assured  they  are  maintaining 
security  until  they  can  deploy  the 
patch,"  says  Eric  Ogren.  an  analyst  at 
TTie  Yankee  Group  in  Boston. 

IPSs  may  also  d«er  attackers  from 
launching  a  major  attack  on  a  network. 
Many  attackers  do  test  runs  prior  to  at- 
tackii^  a  system.  If  a  threat  is  deflect¬ 
ed.  that  may  dissuade  an  attacker  from 
a  broader  attack.  "WeVe  seen  the  sys¬ 
tem  deter  attacks.  That’s  a  cool  thing," 
says  Bryan  Tirbow.  founder  and  presi¬ 
dent  of  Myrient  Inc.,  a  managed  ser¬ 
vices  provider  in  Aliso  Viejo,  (^alif. 
Myrient  uses  Captus  IPS,  a  NIPS  sys¬ 
tem  from  Woodland,  CaliL-based  Cap¬ 
tus  Networks  Corp. 

NlPSs  and  HIPSs  aren’t  mutually  ex¬ 
clusive.  Ideally,  both  types  of  IPSs 
should  be  part  of  a  layered  informa¬ 
tion-security  architecture  that  also  in¬ 
cludes  firewalls,  vulnerability  assess¬ 
ment  and  remediation  alongside  other 
types  of  protectioa  say  analysts. 

But  users  are  wary  of  buying  a  prod¬ 
uct  that  might  generate  falM  positives, 
a  major  complaint  about  IDSs,  The 
consequences  of  a  fake  positive  are 
more  dire  with  an  IPS,  since  h  could 
block  legitimate  business  traffic  rather 
than  just  generate  alerts  or  reports. 
Some  vendors  claim  that  their  products 


TIpptagPiiM’s  S90.99S  IMlyOm-2000 
WPS  prolsctt  UW  atgmtnte  wHh  traffic 
upte26bK^K. 

Vert  Networks  Inc.  and  rts  IntruShieM  family 
of  NIPS  products. 

Cisco  has  gotten  involved  as  well,  acquir¬ 
ing  Waltham.  Mass.-based  HIPS  vetxlor 
Okena  in  April  and  rediristening  its  Storm- 
Watch  product  Cisco  Security  Agent. 

Primary  Response,  from  Sana  Security 
Inc.  in  San  Mateo.  Calif.,  and  STAT  Neutral¬ 
izer.  frwn  Melbourne.  Ra.-based  Harris 
Corp..  round  out  the  major  HIPS  products. 


dicing  varies,  but  &itercept  starts 
at  St.295  per  server  and  $4,995  for  the 
console. 

The  first  NIPS  products  appeared  ai  early 
2002  but  have  to  catch  on  with  buyers. 
TippingPoint  claims  ov^  30  customers  to 
date.  FirewaH  vendor  NetScreen  Technolo¬ 
gies  Inc.,  which  bought  OneSecure  Inc.  last 
year,  now  sells  NetScreen-IDP.  Other  play¬ 
ers  include  Captus  Networks,  which  offers 
the  IPS  4000  series.  F^ices  for  NIPS  appli¬ 
ances  start  at  about  $40,000  and  go  as 
high  as  $100,000  or  more. 


Adding  an  hrtnnioii-PiiiviNiUon 
Security  Layer 

taWH.  apply  niBor  driU  (Nuri  pMmolbriMto  ti  onlar  ID  Uack  pocsUt  itela. 
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are  less  likely  to  have  false  positives  be¬ 
cause  their  filtering  techniques  are 
more  sophisticated  than  those  of  IDSs. 

But  not  all  users  agree.  “You  still  do 
have  false  positives."  says  Vivek  Kun- 
dra,  direaor  of  infrastructure  tech¬ 
nologies  for  the  Arlington  County.  Va.. 
government  In  October,  he  spent 
$30,000  to  install  Entercept  on  30  criti¬ 
cal  servers.  “We  have  spent  a  lot  of 
time  in  the  lab  to  make  sure  we’re  ikm 
shutting  down  government  services  to 
our  constituents."  he  says. 

There  is  nothing  inherent  in  IPS 
technology  that  makes  it  more  accu¬ 
rate  than  IDS.  adds  fonas  Hellgren, 
vice  president  of  product  management 
at  Guardent  Inc.,  a  security  services 
provider  in  Waltham.  Mass.,  that  offers 
IPS  management 

Cisco  Systems  Iitc.,  citing  the  false¬ 
positive  issue,  is  sitting  out  the  NIPS 
business  for  now,  despite  its  recent  ac¬ 
quisition  of  HIPS  vendor  Okena  Inc. 
"Once  we  fix  the  false-positive  prc^- 
lem,  we  can  go  on  to  being  more 
proactive,"  says  Toro  Turner,  director 
of  marketing  for  the  newly  renamed 
Cisco  Security  Agent  HIPS  product. 

Good  Enough 

IPS  technology  isn’t  yet  mature,  says 
Stiennon.  And  ultimately,  IPS,  IDS  and 
other  security  functtons  will  merge 
into  nrewalls,  which  will  become  gen¬ 
eral-purpose  security  appliances.  But 
he  doesn’t  think  IT  should  wait,  be¬ 
cause  IPSs  are  the  only  way  to  prevent 
attacks  —  both  known  and  unknown 
—  before  they  occur.  "This  is  good 
technology  that  works,"  Stiennon  says. 

Kundra  says  intrusion  prevention 
should  be  part  of  every  IT  manager’s 
security  portfolio.  “There  is  still  a  lot 
of  human  intervention  needed  to  de¬ 
fine  the  types  of  behavior  that  are  au¬ 
tomatically  excluded."  be  says.  “You 
have  to  create,  test  and  manage  those 
rules."  Nonetheless,  he  says,  it’s  irre¬ 
sponsible  not  to  invest  in  an  IPS  today. 

A  few  years  ago,  many  IT  managers 
didn’t  believe  antivinis  products 
would  woric,  he  says.  Yet  they  protect 
;^ainst  viruses  that  could  bring  down 
an  enterprise.  ’'Why  wah  for  an  orga¬ 
nized  cyberattack?"  Kundra  says. 

Yankee  Group's  Ogren  agrees.  "This 
technology  may  not  be  mature,  but 
there’s  no  value  in  waiting.  It  is  the 
only  chance  an  organization  has  today 
against  Day  Zero  anadts.  It  will  get  eas¬ 
ier  and  scale  better  as  time  goes  oa  But  j 
if  s  ready  for  prime  time  r^ht  now."  I  I 


Paul  is  a  freelance  writer  in 
Newton,  Mass.  You  can  reach  her 
at  laurenpauI@atttnxom. 
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Distributing  information  from 


says  SAS  Institute’s  Don  Hatcher. 

Don  Htfshor  ieods  a  team 
rAor  shapes  the  strategic 
direction  ^SAS  Institute 
Inc's  products  and  tedi- 
tw)togies.  Cary  S.C.-based  SAS’s  current 
initiatives  focus  in  part  on  distributing 
analytics  throughout  its  customers’ or¬ 
ganizations,  rather  than  limiting  access 
to  the  tools  to  a  few  highly  trained  indi¬ 
viduals,  said  Hatcher  in  an  interview 
with  Computerworid‘5  Tommy  Peter¬ 
son.  He  also  said  the  biggest  barriers  to 
a  business-intelligence  (BD  implemerua- 
tion  don’t  aln^ys  involve  technology. 


Whit  ii  tbo  tNng  your  custamon  an  uMno 
lor  moot  oAvi?  If  I  had  to  give  you  one 
thing.  I  think  it  is  enabling  a  greater 
percentage  of  the  enterprise  to  lever¬ 
age  our  analytics.  It’s  dissemination. 
There’s  this  concept  that  we  have, 
which  is  the  information  supply  chain. 
It  started  by  fust  getting  access  to  data 
—  that’s  where  all  the  vendors  were  fo¬ 
cused.  Then  we  all  were  focused  on 
goring  it  and  being  able  to  analyze  it. 
And  then  we  were  focused  on  having 
some  tools  so  you  could  analyze  it  dif¬ 
ferently.  The  big  focus  nowadays  for 
SAS  is.  How  do  we  get  this  breadth  of 
information  out  to  the  wider  audience? 
Because  we  believe  that  80%  of  a  cus¬ 
tomer’s  enterprise  needs  are  business 
intelligence  today.  We've  had  cus¬ 
tomers  tell  us  that  [they]  can’t  fuid 
enough  business  analysts.  We  need  to 
empower  domain  experts  and  informa¬ 
tion  consumers  to  do  some  things 
themselves.  That's  what  you  (will]  see 
us  delivering  in  [Version]  9.1  when  it 
comes  out  —  a  breadth  of  interf^es  so 


Accomplishments: 


that  80%  of  an  enterprise  can  use  busi¬ 
ness  intelligence,  instead  of  a  very 
small  percentage  of  an  enterprise. 

How  tough  was  it  to  ad|iBt  yow  technology 
to  do  that?  Actually,  we  didn’t  have  to 
adjust  the  technology:  we  just  had  to 
add  delivery  mechanisms  on  top  of  it. 
Our  analytics  still  play  a  huge  role 
within  enterprises.  We  just  needed  to 


enable  domain  experts  and  informa¬ 
tion  consumers  to  be  able  to  leverage 
them.  We've  spent  two  or  three  years 
working  on  this  project.  We  hired  22 
new  usability  experts  writii^  the  front 
ends.  We’ve  got  another  250  develop¬ 
ers  sittii^  there  writing  the  BI  back 
end.  We  spent  a  lot  of  time  talking  to 
our  customers  to  understand  how  this 
dissemination  needed  to  happen. 

Are  you  etminiling  the  hierarchy  of  people 
wttb  doctoral  degree*  In  stahsttcs  or  some 
othw  math  field  so  you  can  prseent  the  infof- 
malien  to  Ihe  people  who  need  to  know  it? 

You  need  the  PtLD.s  to  create  the  ini¬ 
tial  model  What  we’re  not  doing  is 
dumbing  down  the  analytics.  We're 
just  ensuring  that  when  they  get  used, 
that  people  who  know  how  to  use 
them  are  creating  a  safe  environment 
for  the  rest  of  the  knowledge  base. 
There’s  a  lot  of  folks  out  there  dumb¬ 
ing  down  analytics  and  black-boxing 
stuff.  That's  very  dangerous,  because 
models  have  to  be  retrained  to  notice 
the  subtleties  in  the  data. 

What  does  H  mean  to  havo  to  retrain  fflod- 

ab?  If  you  build  the  model,  it’s  just  a 
bunch  of  nodes  hooked  together  that 
don’t  particularly  know  anything  yet, 
and  you  need  to  run  data  tluough 
them,  which  creates,  say.  a  decision 
tree,  which  is  an  example  of  one  data 
mining  model  It  comes  up  with  a  deci¬ 
sion  tree  that  says,  ’TVhen  boys  be¬ 
tween  25  and  30  buy  gym  shoes,  try  to 
sell  them  gym  socks  also.  But  for  a  guy 
who’s  45  to  50  who  buys  gym  shorts, 
you  don’t  necessarily  want  to  sell  him 
gym  socks.”  You’ve  got  to  train  the 
model  and  then  you  leverage  the  mod¬ 
el  But  the  model  needs  to  be  retrained 
from  time  to  time  because  the  informa¬ 
tion  in  the  data  changes.  You  make 
some  adjustments  in  your  model  based 
on  this  new  information  to  keep  it 
fresh  or  even  make  it  better  at  times. 


Dom  ttul  main  thul  «n*lyfle*  b  •  tochneto- 
gy  ttnt  bnl  going  to  ba  commodttad  any* 
time  aoon?  Actually,  that's  exactly  what 
I  think  we're  doing.  We're  enabling  an 
enterprise  to  take  advantage  of  it  but 
allowing  them  to  do  h  in  a  controlled 
manner.  But  the  models  have  to  be  kept 
fresh.  To  some  banks,  a  half-percent  in¬ 
crease  in  something  represents  millions 
of  dollars.  It’s  those  kinds  of  thii^  that 
you  learn.  You  create  a  model  that 
makes  you  better  than  you  were,  but 
then  you  gather  new  data,  and  you’re 
able  to  tune  the  model  evea  more. 

The  key  thing  we’ve  been  hearing  is 
enabling  the  enterprise.  People  can  be 
told  they’re  empowered,  but  until  you 
give  them  the  information  to  truly  let 
them  be  empowered,  they  won't  be¬ 
lieve  you  —  and  they’d  be  right. 

What  are  the  biggast  probbms  oompanba 
hm  in  trying  to  bnpbnwnl  busbwas  bitaM- 
ganc*andanilyttca7'nie  big  pain  1  really 

think  is  organizational  chai^ _ I’m 

not  trying  to  downplay  the  challenges 
with  implementing  technology,  but  I 
would  wager  that  most  of  the  chal¬ 
lenges  around  technology  have  to  do 
with  culture,  have  to  do  with  people, 
have  to  do  with  process.  1  know  there 
are  customers  where  I  could  go  in  and 
sell  them  systems  that  would  make 
them  more  effective  as  a  company,  but 
their  culture  won't  allow  it  to  be  suc¬ 
cessful  Each  silo  of  the  business  is  re¬ 
warded  for  maximizing  their  silo. 

If  you  want  a  technolc^,  Fd  say  data 
quality  is  the  biggest  pam.  Data  quality 
can  delay  an  implementation  of  a  ware¬ 
house  or  even  a  data  mart  upwards  of 
six  months  or  more.  As  soon  as  you 
pull  data  that’s  not  acouatc  through 
and  into  a  warehouse  and  report  on  it 
and  give  it  to  somebody,  their  trust  of 
the  new  system  instantly  dies.  I 


To  read  Don  Hatcher's  thoughts  about  corporate 
performarKS  martagement  and  more,  visit  our  Web  site; 
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Taming  Data 
CompleMty 

Technology  promises  ludd  displays 
of  complicated  information,  reg^less 
of  its  format.  By  Julia  King 


WHILE  MUCH  OF  THE 
IT  world  focuses 
on  building  com¬ 
puters  that  are 
faster,  smaller,  cheaper  and 
brainier.  CEO  Peter  Lucas  and 
his  colleagues  at  Maya  Elesign 
Inc.  are  obsessed  with  liberat¬ 
ing  the  reams  of  data  that 
computers  contain,  regardless 
of  the  format  in  which  the 

data  is  stored.  _ 

To  Lucas,  computers  nffi 
are  little  more  chan  rllll 
"transducers"  —  nec-  WAI 
essary  but  “uninterest-  ”  ^ ' 
ing  prosthetic  devices" 
for  viewing  data.  “We  can’t  see 
data,  so  we  build  computers, 
the  same  way  we  use  goggles 
to  see  infrared."  be  says. 

What  would  be  much  more 
valuable,  Lucas  believes,  is  a 
computing  architecture  for 
sharing  data  now  stranded  in 
relational  databases,  which  he 
calls  “information  islands." 


This  is  also  the  goal  of  the 
Semantic  Web.  which  involves 
taking  a  relational  database 
and  “webbing  it."  according  to 
Web  inventor  Tun  Berners- 
Lee  (see  story.  QuickLink 
37596].  Where  Maya's  technol¬ 
ogy  differs.  Lucas  says,  is  in 
“taking  the  much  more  radical 
step  of  filing  the  data  from 
any  particular  Web  page  or 
-  any  particuliu^  ma- 

K  chine." 

Instead  of  describ- 
HIQ  ing  data  in  a  standard 
*  way  or  with  metadata 
as  the  Semantic  Web 
does.  Maya's  technology 
wraps  the  data  in  “containers," 
which  reside  in  repositories  in 
a  peer-to-peer-ba^  "infor¬ 
mation  space"  where  people 
can  meet  and  collaborate. 

Pittsburgh-based  Maya,  a 
spin-off  of  Carnegie  Mellon 
University,  has  come  up  with  a 
container  it  calls  a  “u-form" 


that  Lucas  says  makes  ii  easy 
to  transfer  and  manipulate 
data  across  different  computer 
systems  and  applications. 
Higher-level  semantics  can  be 
layered  on  top  of  the  u-forms. 

What  guides  the  transfer  of 
data  from  place  to  place  is  a 
set  of  "shepherds,”  or  rules- 
based  software  agents  devel¬ 
oped  by  the  data  owners.  For 
corporate  applications.  Lucas 
notes  that  u-forms  could  be 
encrypted  and  shepherded 
only  to  paying  customers. 

The  same  data  could  be 
viewed  in  diAerent  ways  by 
different  users.  For  example,  a 
logistics  manager  could  view 
on  his  PC  a  gec^raphic  map  of 
warehouses  and  their  contents 
in  a  specific  region.  Mean¬ 
while.  an  inventory  manager 
could  draw  on  the  same  data 
and  display  on  his  handheld 
device  a  bar-chart  representa¬ 
tion  of  goods  available  for 
shipment  from  those  ware¬ 
houses. 

In  this  example,  muitipie 
distributed  views  of  the  data 
could  be  linked  in  real  time, 
permitting  the  data  itself  to 
become  a  medium  for  collabo¬ 
rative  work.  This  is  compara¬ 
ble  to  two  users  running  Esccel 
on  the  same  data  set.  and 
every  time  one  of  them 
changes  a  number,  the  other's 
display  is  instantly  updated. 

Maya  Design's  Maya  Viz 
software  arm  has  technology 
it  calls  CoMotion,  a  set  of 


An  ‘Infoimation  Commons’ 

hailm«NirikMilwidllq«'i«Won.ditadaltypMMdtanMbh«nMeiic«4toiHQnm.orstMdMdMorm8tion 
contalnsralhafcaBbaMtly  moved  aniong’achswii-iiwlrarripoalloriwki  a  paar-te  gaariMtwork.  Data  can  baM- 
tofadoraccoaaadriwnltan>BMrtyatwilaaillidsioddffhwnttybypao|diuilw9dWsfintdavkas. 


DISPLAY  DEVICES:  Display 
devices 'protect’ views  of  iHorrns 
from  repostones  into  a  user's 
world.  The  form  of  the  visualization 
s  strictly  separated  from  undeityino 
representations. 


U-FCMMS:  U-tormsarestawtodized  ’contan- 
ers*  for  transporting  data  of  al  kmds.  Each 
u-form  6  sanpty  a  bundfe  of  attribute  value  pairs 
tagged  with  a  universaly  unque  identiiier. 


REPOStTOtOESiRackaly 
new  database  technology 
implements  a  sthema- 
neutral  storage  schet^. 
Reposdoitessanply  store 
arsiretneveu-fo^. 


CEO 


tools  for  building  different 
views  of  data  that’s  stored  in 
u-forms.  The  shepherds  icli 
the  u-forms  where  they  can 
and  can’t  go.  based  on  the 
metadata,  or  data  about  the 
data,  that’s  contained  in  the 
unique  identifier  portion  of 
the  u-form.  Individual  applica¬ 
tions  on  a  user's  machine 
(built  using  CoMotion's  visu¬ 
alization  (ools)  dictate  bow 
data  will  be  displayed. 

The  U.S.  TVansportation 
Command,  or  Transcom,  at 
Scott  Air  Force  Base  in  Illi¬ 
nois.  is  an  eariy  beta  tester  of 
CoMotion.  Transcom  is  using 
the  software  to  create  differ¬ 
ent  views  of  the  vast  amounts 
of  data  it  must  manipulate. 

“Since  VIL  we’ve  moved 
700.000  people  and  over  2  mil¬ 
lion  short  tons  of  cargo.  We 
have  seven  requirements  data¬ 
bases  that  we  pull  from."  each 
of  w'hich  uses  a  different  data 
schema  and  format,  explains 
Lt.  CoL  C^ody  Smith,  director 
of  operations.  Using  Maya’s 
technology,  IVanscom  is  able 
to  display  that  data  differently 
to  its  various  customers. 

“If  we're  dealing  with  ships, 
for  example,  we  need  to  be 
displaying  metric  feet.  Others 
need  to  look  at  tons  or  short 
tons  of  ca^."  Smith  says. 

Coimian  Understandmg 

“U-forms  and  the  Semantic 
Web  are  aimed  at  solving  dif¬ 
ferent  kinds  of  problems."  says 
lason  Bloomberg,  a  senior  an¬ 
alyst  at  ZapThink  LLC  in  Wal¬ 
tham.  Mass.  The  Semantic 
Web  is  aimed  more  at  busi- 
ness-to-business  communica¬ 
tions,  where  Ck)mpany  A  and 
(Company  B  need  a  common 
understanding  of  the  termi¬ 
nology.  A  purchase  order,  for 
example,  has  to  mean  the 
same  thing  to  both  of  them. 


"The  Semantic  Web  is  about 
getting  computers  to  under¬ 
stand  content.  U-forms  are 
giving  human  beings  more 
power  in  working  with  sys¬ 
tems  and  content."  he  adds. 

"The  technical  break¬ 
through  we've  made  is  sepa¬ 
rating  the  information  from 
the  visualization  and  manipu- 
laiion."  says  Maya's  Lucas.  He 
foresees  a  world  of  peer-to- 
peer  "civic  computing"  in 
which  virtually  all  public  in¬ 
formation  is  stored  in  u-forms 
in  a  public  "information  com¬ 
mons"  that's  easily  usable  by’ 
anyone,  anytime.  Maya  refers 
to  this  vision  as  the  Civium 
(Latin  for  "of  the  people") 
Prolect. 

"Instead  of  using  peer-to- 
peer  to  steal  music,  let’s  liber¬ 
ate  all  accumulated  publk- 
domain  data  and  create  a  vast 
information  space  to  make  it 
freely  available,"  Lucas  says. 

Pittsburgh  Green  Map 
(www.greenmap.org).  an  inter¬ 
active  service  for  locating  en- 
vironmentaL  recreational  and 
ocher  "green"  assets  in  west¬ 
ern  Pennsylvania,  serves  as  a 
prototype  of  Lucas’  vision.  De¬ 
veloped  in  conjunction  with  3 
Rivers  Connect,  a  Pittsburgh- 
based  nonprofit  environmen¬ 
tal  group,  the  service  encom¬ 
passes  data  from  geographic 
information  systems  and  other 
types  of  data  from  various 
public  databases  using  differ- 
em  schemas  and  formats.  This 
data  has  been  converted  to 
u-fonns  and  is  virtually  locat¬ 
ed  in  an  “information  space." 
which  is  accessed  via  a  "geo- 
browser"  application  devel¬ 
oped  by  Maya. 

Lucas  says  this  technology 
is  about  as  mature  as  the  Web 
was  in  1991.  “It  seems  as  good 
an  assumption  as  any  that  it 
will  follow  a  similar  curve  and 
lake  about  as  long,"  Lucas 
says.  That  would  mean  that  it 
will  be  actually  useful  to  large 
numbers  of  people  within  a 
few  years  and  will  be  on  the 
cover  of  Time  in  about  five 
years."! 
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Corporation  Caught 
In  the  Cross  Hairs 


A  foctised  e-mafl  attack  sends  our  vvorried 
security  manager  scrambling  to  track 
down  the  source.  By  Vince  Tuesday 


My  COMPANY  deals 

with  large  electronic 
Hnanclal  transac¬ 
tions  on  a  regular  ba¬ 
sts,  and  I  worry  that  this 
makes  us  the  perfect  target  for 
a  focused  attack  on  our  net¬ 
works.  This  issue  had  been  a 
theoretkaf  one  for  me.  howev¬ 
er.  until  last  week. 

We  do  receive  a  _ 

great  many  attacks, 
but  wc  aren’t  being  SFrillHFY 
singled  out:  Many 
other  companies  are 
being  targeted  at  the  JljlBMAI 
same  time.  This  leads 

me  to  conclude  that  - 

either  the  attackers  are  taking 
the  approach  of  targeting  as 
many  companies  as  possible 
with  the  same  assaults  and 
seeing  which  ones  work,  or 
there  is  so  much  noise  in  our 
monitoring  logs  that  any  tar¬ 
geted  attacks  are  lost  amid 
the  chaos. 

I  have  been  reassured  by 
bow  widespread  the  attacks 
have  been.  They  show  that  we 
don't  need  to  be  totally  secure 
—  just  more  secure  than  most 
companies.  Thb  goal  is  a  lot 
cheaper  and  easier  to  achieve 
than  perfect  security,  but  it's 
only  safe  if  no  one  ts  targeting 
us.  If  we  are  the  target  of  a  fo¬ 
cused  attack,  hackers  will 
keep  coming  back  with  new 
approaches  until  they  find  one 
t^t  worits. 

Fiainr  Tab  Attack 

We  have  outsourced  our 
e-mail  monitoring  to  New 
York-based  Messagelabs  Inc, 
which  offers  os  a  guarantee 
that  no  malicious  code  will  get 
past  its  defenses.  To  back  up 
that  claim,  it’s  admirably  para-  I 


noid.  The  company's  statistics 
show  that  about  one  in  270  of 
our  e-mails  contains  a  virus. 
Last  week,  we  saw  a  surge  of 
suspicious  e-mails.  Normally, 
this  signals  a  big  virus  out¬ 
break  but  there  was  no  men¬ 
tion  ^  this  on  any  of  the  an¬ 
tivirus  Web  sites.  The  mali¬ 
cious  code  Messagelabs 

-  stopped  was  simply 

ch^cterized  as 
"Possible  new  Trojan 
software  detected.” 
Whoever  was 
ua  send^  these 

e-mails  was  using  a 
"Rumpelstiltskin  at¬ 
tack."  In  this  type  of  attack, 
which  gets  its  name  from  the 
fairy  tale  about  a  queen  who 
must  mm  her  first-bom  child 
over  to  Rumpelstiltskin  unless 
she  can  guess  his  name,  the  at¬ 
tacker  tries  to  guess  e-mail  ad¬ 
dress  names  by  taking  a  list  of 
common  names,  combining 
them  with  possible  first  and 
last  initials  and  sending  them 
to  an  e-mail  server. 

I  wasn't  too  worried  about 
the  general  attack,  but  in  the 
middle  of  all  those  attempts, 
the  attacker  had  sprinkled  in 
real  e-mail  addresses  of  staff 
members.  It  was  clear  that 


Thb  attacker  had  a  Kst 
of  about  200  of  our 
employees' e-fnal  ac¬ 
count  names.  Perhaps 
someone  Memal  had 
baked  the  fist? 


this  attacker  had  a  list  of 
about  200  of  our  employees’ 
e-mail  account  names.  Per¬ 
haps  someone  internal  had 
le^ed  the  list? 

The  address  list  W'as  clearly 
an  old  one,  because  many  of 
the  people  on  it  had  left  the 
company.  But  if  the  attacker 
had  bothered  to  get  a  list  of 
real  addresses  for  our  compa¬ 
ny.  even  out-of-date  ones,  then 
surely  this  couldn't  be  a  ran- 
dom  probe.  It  had  to  be  target¬ 
ed  directly  at  us. 

Attacker  Could  Return 

I  wasn't  worried  by  the  first 
approach:  Trojan  horse  exe¬ 
cutables  in  e-mails  are  a  low 
risk  thanks  to  our  defenses. 
However,  if  an  attacker  was 
willing  to  put  the  effort  into 
picking  us  out  of  all  the  pos¬ 
sible  targets  and  writing  a 
new  Trojan  horse  for  his  at¬ 
tack.  then  be  was  unlikely  to 
give  up  once  he  realized  his  i 
e-mail  attack  had  failed.  He 
would  be  back,  but  with  Inter¬ 
net  Relay  Chat,  Web  or  in¬ 
stant  messaging  distribution 
of  his  software.  And  if  our 
desktops  weren't  as  paranoid 
as  Messagelabs.  his  attack  just 
might  work. 

I  asked  Messagelabs  to  send 
my  team  and  me  a  copy  of  the 
code  so  we  could  analyze  it. 
Then  I  checked  the  news- 
groups.  Lots  of  people  were 
being  probed  in  this  way.  but 
only  by  spammers.  Nobody 
was  reporting  attempts  to 
sneak  IVojan  horse  code  in  by 
this  method. 

I  examined  the  e^mcutable. 
The  code  included  a  series  of 
addresses,  and  when  it  was 
nm.  the  program  would  con¬ 
nect  to  a  Web  site  and  pull 
down  more  code.  I  asked  Mes- 
sagetabs  to  investigate  it  fur¬ 
ther  and  then  checked  out  the 
Web  address. 


I  found  it  mentioned  in  a 
few  postings,  but  these  were 
advertising  a  porn  dialer,  a 
TVojan  horse  tool  that  alters 
your  dial-up  Internet  connec¬ 
tion  to  call  a  premium-rate 
phone  number  in  a  foreign 
country,  secretly  running  up  a 
huge  phone  bill 

Then  Messagelabs  contact¬ 
ed  us  to  say  that  it  had  identi¬ 
fied  the  software  as  something 
caUed  TROJ_DIALER3.  and 
sve  were  able  to  back  down 
to  a  more  relaxed  state.  It 
seems  that  this  wasn’t  the  first 
wave  of  a  targeted  attack  but 
rather  the  aa  of  a  zealous 
spammer.  Over  the  next  few 
days,  other  companies  report¬ 
ed  the  same  probing. 

So  as  it  turns  out.  we 
weren’t  the  only  target:  we 
were  just  “lucky"  enough  to  be 
early  on  the  list  of  what 
turned  out  to  be  a  large  num¬ 
ber  of  targets. 

But  Tm  still  left  with  a  nag¬ 
ging  doubt.  What  if  the  only 
attacks  we  detect  in  all  the 
noise  are  those  that  aren’t  tar¬ 
geted?  If  an  attacker  can’t  be 
bothered  to  aim  at  a  target,  it 
seems  more  likely  that  he  will 
make  less  effort  to  hide  his  at¬ 
tacks.  Could  there  be  attacks 
that  are  targeted  but  stealthy 
enough  to  escape  detection? 

It  is  all  a  moot  point,  howev¬ 
er.  because  to  get  the  funds  re¬ 
quired  to  perfect  security.  Ttl 
need  evidence  of  the  targeted 
attacks  that  1  can't  detect  amid 
all  the  other  events.  I 

WHAT  DO  YOU  TWK? 

Tte  MMk's  journal  is  wrilton  by  a  real 
security  rrifinager.  'Vince  Tues^.’  wtiose 
name  and  enxfioyer  have  been  disgused 
lor  otTvious  reasons.  CoiXact  him  al  vitice. 
tuesday$h(chmail.cotn.  or  join  the  diS' 
cussion  m  our  lorum:  QuicfcLiiik  aISM 

To  find  a  complete  archive  ol  our 
Security  Manx's  Journals,  go  online  to 

Oeompifleremrldoaat^oefoMnial  I 


SECURITY  LOG 


That's  just  too  long. 


It's  up  to  nrie  to  shorten  it 


For  good. 


There  are  plenty  of  ways  to  shorten  backup  windows.  And  StorageTek  is  just  the  company  to  find  the  one  that's  right 
for  you.  Maybe  it's  BladeStore  as  part  of  disk-to-disk  backup,  or  an  L*Series  automated  tape  library  with  our  superfast 
tape  drive  -  the  T9940B.  Whatever  the  solution,  we  think  you  deserve  a  day  of  rest  Learn  more  about  this  story  and 
other  ways  we  can  help  you  at  www.savethedayxom  STORACETEIC  Save  the  Day.“ 


What  day  is  K?  Sunday? 


I'm  only  9  hours  into  a  32  hour  backup. 


BRIEFS 


XOsaft  Upjorades 
Data  Rewinder 

New  IM-baMd  XOmH  Inc.  last 
WMk  mnouncMl  Vmion  3.5  of 
lb  Data  ftweindsf  soffwnre  fcf 
diiaatar  recovary.  The  software 
aiows  storage  admMitralors  to 
^mdo*  appicallon  and  database 
server  comgbon,  aeeonflng  to 
XOeofL  The  standard  verston  of 
Oba  RewMar  is  priced  at  $995. 
and  the  advanced  edWon  costs 
$2^ 


Concord  Releases 
EHealthSuite^.6 

Concord  Coramadeatfons  bic.  in 
Miribero.  Maas^  aranuneed  Vhr 
atoe  U  of  Rs  sHadlh  Suilo.  The 
near  ralsaes  pmddse  an  embed* 
dad  Orads  database,  aapandsd 
foraipi  tnoMago  amport  and 
talir  dMoyment  capdMes, 
tf»  company  sdd.  Pricing  starts 
alS»0.000. 


MM  Ekdric  Java 
Pfadferm  Updated 

The  Mtod  Elscirie  he.  In  Addaon, 
lesae.lastweakannaimoedVm' 
siandJeflh  hwhasdlUlhb 
sarvtose  runline  phtform.  New 
faaluras  Include  aapport  hr  the 
SOAP  L2  atandard  and  a  pMHn 
far  Borland  Software  Corp.’s 
JBuldortoaLTfaestanlard,entry- 
lavel  edden  of  ha  product  is  frea 
far  moal  conanarclal  uses.  The 
profaahonal  edNfan  sdh  for 
$2,000  pm  CPU. 


CommVault  Beefs 
UpQM^PIatf^ 

ConenVhdl  Sysfams  he.  h 
Oceeapert  NJ..  anaounced  that 
Ifsaddng  a  component  to  Ih 
QBIsIlai  Storage  thnagimsnt 
PhthniLQINedBQIhlwNas- 
sens  an  appleabon's  storage  con* 
wmpdon  by  cofTalalha  how  the 
appleiben  and  ehanghg  data 
managamant  pofcias  afhet  the 
horage  sreMlactiira.  Afahg 
starts  at  $1,000  or  $1,900  par 
baohto  asrvtr  or  predaelion  hoat. 
dspaniing  on  tha  conBgwabofL 


ROBERT  L.  MITCHELL 


Bracing  for  the 
New  Privacy  Laws 


O 


integrity  of  customer  data. 

But  companies'  seeming  in¬ 
ability  to  follow  a  consistent 
and  reliable  security  model 
for  the  use  of  customer  data, 
and  the  secretive  approach 
taken  to  handling  credit 
card  security  breaches,  have 
helped  create  a  consumer 
backlash  ~  and  a  torrent  of 
state  and  federal  legislation. 

The  latest  regulatory  sal¬ 
vo.  California  Senate  Bill 
1386  (SB  1386).  becomes  law 
July  1,  and  more  regulations 
are  coming.  The  law  requires  companies 
to  disclose  any  compromise  of  customer 
data  to  every  affected  consumer  residing 
in  California  within  48  hours.  And  if  you 
don't  have  up-to-date  contact  informa¬ 
tion  for  those  consumers,  you  must  post 
a  notification  on  your  Web  site  —  the 
e-comroerce  equivalent  of  a  scarlet  letter. 

Financial  services  companies  worry 
that  the  negative  publicity  associated 
with  disclosing  data  compromises 
could  wreak  tmoc  with  consumer  con¬ 
fidence  in  both  e-commerce  and  the 
financial  services  industry.  Consumer 
fears  have  been  fueled  by  a  string  of 
high-profile  data  losses,  including  the 
compromise  of  some  8  million  credit 
card  numbers  at  card  processor  Data 
Processors  International  Inc.  (DPI)  last 
February.  Most  of  the  affected  card  as¬ 
sociations'  member  banks  didn’t  notify 
affected  customers,  despite  the  possi¬ 
bility  that  those  numbers  could  be  used 
in  conjunction  with  so-called  skip-trace 
database  services  online  to  gain  enough 
information  for  identity  theft. 

E-commerce  vendors,  left  in  the  dark 
about  which  card  numbers  were  affect¬ 
ed.  had  to  make  doubly  sure  they  were 


NE  WOULD  THINK  THAT,  some  eight 
years  into  the  Internet  age,  enlightened 
self-interest  would  have  motivated  finan¬ 
cial  services  and  e-commerce  vendors 
to  put  a  higher  value  on  maintaining  the 

checking  card  verification 


codes  to  protect  themselves 
against  chargebacks.  Fear  of 
negative  publicity  has  kept 
the  issue  under  wraps.  Fear 
of  legal  penalties  and  law*- 
suits  under  new  laws  will 
now  push  the  issue  to  the 
forefront  as  never  before. 

In  the  case  of  credit  card 
number  theft,  card  associa¬ 
tions  do  provide  security 
guidelines  to  merchants 
and  banks,  but  not  all  orga¬ 
nizations  abide  by  them, 
says  Julie  Fergerson.  chairman  of  the 
Merchant  Risk  Council  in  New  York.  “If 
DPI  had  done  the  [MasterCard]  Site 
Data  Protection  program ...  the  break- 
in  never  would  l^e  occurred,’’  she 
says.  Now  legislatures  have  stepped  in 
to  enforce  change. 

That  leaves  IT  professionals  to  strug¬ 
gle  with  the  intricacies  SB  1386  and  simi¬ 
lar  federal  l^isladon,  called  the  Data¬ 
base  Security  Breach  Notification  Act. 
that  Sen.  Dianne  Feinsiein  (D-Calif.)  in¬ 
troduced  last  week.  Bills  pending  in  the 
Senate  include  the  Social  Security  Num¬ 
ber  Misuse  Prevention  Act  and  the  Pri¬ 
vacy  Act,  which  prohibit  the  display,  sale 
or  purchase  of  Social  Security  numbers 
and  other  personally  identifiable  infor¬ 
mation  without  the  consumer's  permis¬ 
sion-  Another  bill  the  identify  Theft  Pre¬ 
vention  Act.  would  prohibit  the  printing 
of  full  credit  card  numbers  on  receipts. 

Ever  aware  of  a  sales  opportunity.  IT 
security  vendors  are  madly  waving  red 
flags,  hoping  to  cash  in  on  the  SB  1386 
bonanza.  Since  this  law  exempts  data 
that's  encrypted  from  the  disclosure 
rules,  storage  security  vendors  like  Kas- 
ten  Chase  Applied  Research  Inc.  are 


trumpeting  the  risks  of  network  storage 
—  and  promoting  PKI-based  authenti¬ 
cation  and  encryption  at  the  storage  de¬ 
vice  level  for  “at  rest"  data  But  encrypt¬ 
ing  stored  data  isn’t  as  easy  as  vendors 
make  it  sound.  “It  breaks  a  lot  of  index¬ 
ing  and  backup  schemes,“  says  John 
Pescatore,  an  analyst  at  Gartner  Inc 

Encryption  also  doesn't  protect  com¬ 
panies  from  insider  attack^  which  ana¬ 
lysts  say  are  at  least  as  common  as  ex¬ 
ternal  threats.  Liquid  Machines  Inc.  in 
Lexington,  Mass.,  extends  encryption  to 
data  retrieved  in  queries.  Policies  set  in 
Active  Directory  or  another  LDAP- 
compUant  directory  service  control 
user  access;  results  can  be  pasted  into 
and  viewed  locally  within  supported 
applications  such  as  Excel  and  Word. 

All  u.sage  is  centrally  monitored. 

Another  start-up,  San  Francisco- 
based  Vontu  Inc.,  offers  a  surveillance 
tool  to  help  monitor  access  to  sensitive 
data  and  “quarantine"  it  when  issues 
arise,  while  Cupertino,  Calif-based 
Strongi^ith  Inc.  offers  compliance  man¬ 
agement  and  SB  1386  policy  templates. 

Such  technologies  can  provide  tactical 
support,  but  do  you  need  them?  Organi¬ 
zations  with  well-designed  security  poli¬ 
cies  and  infrastructures  will  probably 
exceed  the  legal  hurdles  these  rules  set. 
analysts  say.  ^thou^  compliance-moni¬ 
toring  tools  may  also  be  needed.  And 
every  organization  handling  sensitive 
consumer  data  should  be  using  encryp- 
tioa  Implementing  that  is  no  picnic,  and 
that's  where  vendors  could  be  of  help. 

“The  product  vendors  should  focus 
on  making  it  easier,  not  on  trying  to 
drum  up  fear,  uncertainty  and  doubt 
with  every  new  law  that  comes  along." 
says  Pescatore.  Fortunately,  vendors 
seem  eager  to  rise  to  that  challenge. » 
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Shades  of  Y2k;  U.S.  retailers  must 
update  theirsystems to  handle 
longer  bar  codes  by  Jan. 1. 2005. 

BY  KATHLEEN  MELYMUKA 


The  it  department  at  Ahold 
Information  Services  in  Green¬ 
ville,  S.C^  has  been  working  for 
years  toward  a  deadline  that’s 
little  known  outside  the  retail  world. 

’^e  began  designing  data  warehous¬ 
es  and  new  projeas  three,  four,  even 
Hve  years  ago  with  this  in  mind,'*  says 
Ed  Gropp,  (^ef  business  and  technol¬ 
ogy  officer  at  the  subsidiary  of  Ahold 
USA  Inc,  which  operates  US.  super¬ 
markets  including  the  Stop  &  Shop  and 
Giant  Food  chains.  The  company  is 
“fairly  well  along,”  Gropp  says,  and 
he's  conftdem  Ahold  will  be  ready. 

But  others  in  the  retail  industry  are 
less  prepared. 

The  dust  has  barely  settled  over  Y2k, 
and  there's  another  technology  dead¬ 
line  approaching.  Sunrise  2005  is  the 
Uniform  Code  Council  Inc.’s  (UCC) 
mandate  by  which  all  U.S.  manufactur¬ 
ers.  distributors  and  retailers  must  be 
able  to  process  new.  longer  product 


codes  by  2005.  Like  Y2k,  this  is  a  busi¬ 
ness  issue  that  involves  database  field 
formats,  so  responsibility  falls  heavily 
on  IT.  Like  Y2k.  it's  a  seemingly  simple 
task  that  becomes  more  complex  as 
you  get  more  involved.  And  like  Y2k, 
it  leaves  most  retailers  with  no  choice 
but  to  comply. 

AGIobaizationIssue 

Sunrise  2005  is  essentially  about  nu¬ 
merical  limits  and  globalization.  In  the 
1990s,  the  Lawrenceville.  N.J.-based 
UCC.  which  assigns  the  12-digit  uni¬ 
versal  product  codes  (UPC),  deter¬ 
mined  that  the  numbers  would  even¬ 
tually  run  out  if  more  digits  weren’t 
added.  The  council  notified  retailers 
in  1997  that  as  of  Jan.  L  2005.  it  would 
introduce  13-digit  UPCs  and  that  they 
would  have  to  be  able  to  process  them. 

Sunrise  2005  is  also  a  step  toward 
global  synchronization  of  retail  data, 
which  is  expected  to  cut  precious  time 


and  billions  of  dollars  out  of  the  supply 
chain.  Current  UPCs  conflict  with  the 
ei^t-  to  13-digit  European  Article  Num- 
bning  (BAN)  codes  used  throughout 
the  rest  of  the  world. 

When  foreign  products  are  traded 
here,  they  must  relabeled  so  that 
US.  12-digit  systems  can  read  them,  a 
time-consuming,  expensive  and  error- 
prone  effort.  This  relabeling  will  end 
in  2005. 

A  final  twist:  Sunrise 
2005  requires  that  U.S. 
retailers  be  able  to 
process  13  digits,  but  the 
UCC  recommends  that 
they  process  14  d^ts. 

That’s  because  14-digit 
codes  will  be  required 
for  global  synchroniza¬ 
tion  as  well  as  emerging 
supply  chain  tools  such 
as  reduced  space  sym¬ 
bology  (RSS)  and  radio¬ 


frequency  identification  (RFID). 

Althou^  Sunrise  2005  also  affects 
manufacturers,  the  bigger  issue  is  for 
retailers,  says  Pam  Stegeman,  vice 
president  of  supply  chain  and  tech¬ 
nology  at  Grocery  Manufacturers  of 
America  Inc.  in  Washington.  Manufac¬ 
turers  won’t  need  to  change  UPCs  on 
existing  products,  and  their  back-end 
systems  can  already  process  14-digit 
codes,  udiich  are  often 
used  on  packing  crates. 

Many  retailers  with 
Large  volumes  of  inter¬ 
national  trade  have 
been  processing  EAN 
code  for  years.  ’Wal- 
Mart  is  compliant  and 
has  been  for  several 
years."  says  Linda  DiU- 
man.  CIO  at  Wal-Mart 
&ores  loc.  “Because  we 
have  global  systems, 
wdiidi  means  the  same 
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applications  support  all  of  our  opera¬ 
tions  in  other  countries,  we  have  sup¬ 
ported  a  L3-,  la-digit  product  code 
since  the  mid-‘90s-" 

The  Navy  Exchange  Service  Com¬ 
mand  is  also  ready.  “We  are  an  interna¬ 
tional  retailer,  so  we  already  deal  with 
13~digit  EAN  codes,  and  our  system 
will  support  14."  says  Bill  Finefield.  re¬ 
tiring  CIO  at  the  Virginia  Beach  retail¬ 
er  for  Navy  bases  and  ships.  Because 
many  software  vendors  cater  to  inter¬ 
national  companies,  all  his  systems 
were  buih  to  be  compliant  with  inter¬ 
national  standards,  he  says. 

Alan  Gartoo.  director  of  channel 
management  for  general  merchandise 
at  the  UCC  says  that  a  large  percent¬ 
age  of  tiaditional  department  scores 
and  mass  retailers  are  already  compli¬ 
ant  "Big-box"  retailers  of  appliances 
and  electronics  are  a  "mixed  bag."  he 
says.  Some  are  ready;  othets  still  have 
work  to  do. 

But  grocery  retailers  are  lagging 
because  many  have  older  systems 
that  were  sei  up  in  the  1970s  and 
'80s.  Among  grocers,  global  retailers 
like  Ahold  tend  to  be  working  on  re¬ 
mediation.  and  natipnal  chains  are  at 
least  gearing  up.  says  Patrick  Walsh, 
director  of  industry  relations  at  the 
Food  Mariteting  Institute  in  Washing- 
toa  The  challenge  is  whether  the 
wholesale  community  and  small,  inde¬ 
pendent  operators  will  be  prepared." 
he  says. 

Failure  to  comply  isn’t  seen  as  po¬ 
tentially  catastrophic  ~  just  unwise. 


the  protyam.  the  sooner  you  begin  to 
bene* 'There  are  benetts  to  gedtog 
(km  eerty.”  says  ftfltdt  IMWi  director 
of  todUBby  relBlIons  at  the  Food  Manu' 
lactufng  Insttule.  "Mou  gel  an  adge  on 
toa  contoetKon  to  product  aseortment 
and  the  abily  to  accaletaie  ooxnrnerce 
tajsmeea  appIcalforB*  ushg  amergtog 
toofesucftasRSSandRFC. 

Chrisitoe  Oireby.  a  eaniar  analyet  at 
Forresler  Reaaarch  toe.,  agraas.  Ttors 
thel  get  an  early  start  shattog  deal  dtta 
ttoto  toek  bodng  partners  Mi  use  money 
iomiedy  WBslBd  on  toefticiant  processes 
to  seed  Immirnento  to  nsw  technology 
tonomions  Ire  RRO.' she  saye. 'These 
first  moms  oi  dtotance  theniBehes 
from  the  pack  g  these  new  toveslmenls 
hither  reduce  toefIctoncMB  whie  bn- 
prortng  cuBtomer-service  lereiB.' 

-HaSihenMe^mjIfa 


"This  is  not  a  Y2k  in  any  way.  shape 
or  form."  says  Gropp.  "Companies  are 
not  going  out  of  business  if  this  doesn’t 
get  done." 

“It  won’t  cause  systems  to  crash," 
Carton  explains.  “You  can  still  do  busi¬ 
ness.  though  you  may  have  to  recon¬ 
struct  data  and  Ax  problems." 

Huge  point-of-sale  problems  aren't 
anticipated,  because  scanners  built 

since  the  mid-1980s  can  al-  _ 

ready  process  13-digit 
codes.  The  trouble  will 
arise  if  larger  codes  are 
incompatible  with  back¬ 
end  databases. 

“Even  if  point-of-sale 
scanners  can  read  the  bar 
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code,  you  won’t  be  able  to  process  the 
data  as  a  result  of  the  scan."  says  Chris 
Sellers,  a  Chicago-based  retail  consul¬ 
tant  at  Electronic  Data  Systems  Corp. 

In  other  words,  you  may  be  able  to 
sell  an  item  to  a  customer,  but  your  in¬ 
ventory  systems  won’t  know  it’s  gone, 
your  stocking  system  won’t  reorder, 
and  your  revenue  systems  won’t 
record  the  sale.  The  trouble  this  could 
cause  will  depend]  on  the  volume  of 
non-U.S.  items  and  new  items  with 
13-<ligit  UPCs  that  you  trade. 

Remediation,  Again 

Sunrise  2005  is  like  Y2k  in  that  retail¬ 
ers  have  to  hunt  down  and  expand 
numeric  fields  in  their  databases.  But 
it's  also  different.  "It’s  not  a  date  field, 
which  is  relatively  discreet  and  easy  to 
And,"  Sellers  notes.  And  the  code  can 


show  up  in  unexpected  places.  For 
example,  product  codes  are  used  inter¬ 
nally  in  financial  systems  and  external¬ 
ly  with  suppliers  of  materials  and 
packaging,  distributors,  and  logistics 
services.  “It’s  messy,"  says  Gropp. 
"These  numbers  show  up  in  almost 
every  report,  every  screen,  every  Ale 
you  process." 

Gropp  has  integrated  the  Sunrise 
2005  remediation  into  virtually  every 
IT  project  for  years.  “It’s  not  one  thing, 
it’s  a  piece  of  a  lot  of  other  projects," 
he  says.  “Every  time  we  get  into  a  sys¬ 
tem  or  we’re  designing  a  new  applica¬ 
tion.  we  make  sure  that  it  can  process 
the  codes,"  he  explains.  “If  we’re  up¬ 
dating  a  purchas^g  application,  we  in¬ 
corporate  this  into  it." 

MoreHunles 

Finding  the  code  is  one  challenge,  but 
there  are  others.  Under  the  current 
UPC  system,  the  first  half  of  the  num¬ 
ber  is  a  vendor  ID.  the  second  half  is  a 
product  ID.  The  code  as  a  whole  is 
supposed  to  be  "nonintelligent."  signi¬ 
fying  nothing  except  a  unique  product. 
But  some  retailers  have  be^  “parsing" 
the  code,  using  the  first  six  digits  as  a 
vendor  reference  code  to  point  to  their 
internal  data  on  that  vendor.  Parsing 
the  code  in  this  way  will  no  longer 
work.  Because  EAN  codes  and  new 
UPC  codes  will  have  vendor  numbers 
up  to  10  digits  in  length,  the  first  six 
digits  will  no  longer  be  unique. 

If  retailers  want  to  use  the  number 
as  a  vendor  reference,  they 
will  need  to  use  the  entire 
number,  Garton  says. 

"But  the  tougher  part  is 
how  people  have  entire 
systems  buUt  on  this,"  be 
says.  “I  believe  this  [prob- 
lend  is  bigger  than  most 
people  are  admitting." 

For  companies  that  have  yet  to  begin 
remediation,  the  time  and  effort  in¬ 
volved  will  depend  on  their  size,  the 
state  of  their  technology  and  whether 
they  have  been  parsing  code.  EDS’s  Sun¬ 
rise  2005  services  for  targe  companies 
include  a  four-  to  six-week  assessment 
and  a  three-  to  nine-month  remediation. 

The  current  economic  doldrums  and 
enduring  Y2k  fatigue  among  execu¬ 
tives  make  this  a  difficult  time  to  gar¬ 
ner  enthusiasm  for  another  IT  dead¬ 
line.  Gropp  says  that  among  his  peers, 
other  priorities  have  often  taken  prece¬ 
dence.  “They  say.  Tve  got  other  proj¬ 
ects  with  hi^cr  return,’ "  be  says. 

You  can  put  Sunrise  2005  on  your 
company’s  radar  by  accentuating  the 
positive.  Sellers  says.  Tou  don’t  want 
to  say.  "We  have  to  do  this.* "  he  ex- 
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plains.  "You  want  to  say,  'Here  are  the 
beneAts.’ "  (See  ‘TVhat’s  in  It  ftir  You?") 

Sunrise  2005  is  a  voluntary  deadline, 
but  if  you  deal  in  a  large  volume  of 
non-US.  or  new  products  or  you  share 
data  electronically  with  suppliers,  it 
should  be  a  priority.  “If  you  want  good 
customer  service  and  you  want  to 
share  standardized  data,  you  have  to 
do  this."  Garton  says.  FineAeld  agrees. 
“We  learned  years  ago  that  the  best 
thiz^  you  can  do  is  be  standards- 
compliant,”  he  says.  ‘'Typically,  retail¬ 
ers  wait  too  long  and  then  hurry  to 
catch  up.  If  it’s  going  to  impact  your 
business,  you  need  to  do  it."  9 


Melymuka  is  a  Computerworid 
contributing  writer.  Contact  her  at 
kmelymuka@yahoocom. 


Got  Questions  About 
Business  Inteiiigence? 

Computerworid’s  IT  Executive  Summit 
Has  the  Answers 


If  you're  an  IT  executive*  in  an  end-user  organization, 
appiy  to  attend  one  of  Computerworid's  upcoming 
compiimentary  one-day  summits  on  Business  Inteiiigence. 

Neither  a  product  nor  a  system,  Business  Intelligence  (Bl)  is 
an  architecture  -  a  collection  of  interrelated  operational  and 
business  performance  measurement  applications  and  databases. 

The  only  way  to  succeed  with  Bl  applications  is  to  understand 
their  complexity,  their  cross-organizational  nature,  the  needs 
of  knowledge  workers,  your  competition,  your  market,  and 
customer  trends. 

Computerworid’s  new  IT  Executive  Summit  series  will  give 
you  a  comprehensive,  one-day  overview  -  and  will  arm 
you  with  the  latest  thinking  and  tools  to  make  the  right 
investments  in  Bl. 
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September  23,  2003 
New  York  City 


'Restricted  to  qualified 
IT  end-users  only 


September  25,  2003 
San  Francisco 


For  information  or  to  register, 
contact  Chris  Leger 
at  888-299-0155 
or  chrisJeger@computerworld.com 
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SECURITYTA6TEAM 


IT  and  engineering  must  work  together  to  secure  dangerously 
vulnerable  process  network.  ^  Mathew  Schwartz 


WHEN  AN  EMPLOYEE 
from  an  Australian 
company  that  makes 
manufacturing  soft¬ 
ware  got  fired  in  early 
2000,  he  applied  for  a 
job  with  the  local  gov¬ 
ernment.  but  was 

turned  down.  In  retaliation,  he  got  a 
radio  transmitter,  went  to  a  nearby 
hotel  where  there  was  a  sewage  valve, 
and  used  the  radio  to  back  into  the 
local  government’s  computerized 
waste  management  system. 

Using  software  from  his  former  em¬ 
ployer,  he  released  millions  of  gallons 
of  raw  sewage  near  the  hotel  grounds 
and  into  rivers  and  parks. 

“He  did  this  46  times  before  he  was 
caught,"  notes  Joe  Weiss,  a  process- 
control  cybersectirity  expert  and  con¬ 
sultant  at  the  Cupertino,  Calif.,  office 
of  Kema  Consulting.  "The  first  20 
[times],  they  didn't  even  know  it  was 
cyber.”  meanii^  an  external  attack 
latmched  using  a  computer,  be  says. 
"From  20  to  45,  they  finally  figured  it 
was  cyber,  but  they  didn’t  catch  him 
until  46."  Though  this  person  never 
worked  for  the  wastewater  utility,  he 
was  still  able  to  break  into  its  supervi¬ 


sory  control  and  data  acquisition  sys¬ 
tem.  which  was  designed  with  a  big  se¬ 
curity  assumption  in  mind  —  that  only 
insiders  would  want  to  access  it 

Hundreds  of  thousands  of  similar 
process  systems  and  networks  used  in 
dozens  of  industries  worldwide  remain 
dangerously  viilnerable.  And  like  it  or 
not,  IT  managers  need  to  address  this 
problem  despite  three  enormous  chal¬ 
lenges:  the  traditional  barriers  be¬ 
tween  IT  and  the  engineers  who  typi¬ 
cally  run  process  networks,  the  hi^y 
customized  nature  of  process  applica¬ 
tions,  and  the  lack  of  security  software 
for  process  applications  and  networks. 

Historically.  IT  has  had  little,  if  any¬ 
thing,  to  do  with  process-control  sys¬ 
tems,  because  they  tun  reliably  and 
rarely  crash.  Instead.  IT  focused  strict¬ 
ly  on  corporate  data  networks.  But  that 
needs  to  change,  experts  say. 

Process-control  networks  are  to 
manufacturing  environments  what  IT 
is  to  an  office  —  endemic.  For  exam¬ 
ple,  more  than  2,400  oil  natural  gas 
and  chemical  companies  in  the  U.S. 
employ  process-control  networks  in 
their  manufacturing  systems.  Other 
heavy  users  of  process  networks  in- 

Continued  on  page  40 
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Continued  from  page  38 
elude  the  power,  water,  food.  drug,  au¬ 
tomobile.  metal,  mining  and  manufac¬ 
turing  industries. 

For  example,  process  networks  in 
the  chemic^  industry  control  chemi¬ 
cal-making  equipment  and  monitor 
sensors  If  anything  goes  wrong,  such 
networks  react  by  adiusiing  the  envi¬ 
ronment  in  predefmed  ways,  such  as 
shutting  off  gas  flow  to  prevent  leaks 
or  explosions. 

One  company  that's  taking  process 
network  security  seriously  and  involv¬ 
ing  IT  b  Du  Pont  Co.  in  Wilmington. 
Del.  Tom  Good,  a  project  engineer  at 
the  chemical  manufacturer,  has  been 
leading  its  2l>-month'Old  effort  to  cate¬ 
gorize  and  reduce  its  process-control 
system  vulnerabilities. 

Du  Pom’s  philosophy  for  dealing 
with  thb  problem,  he  says,  b  that  “on 
all  of  our  critical  manufacturing  proc¬ 
esses,  we  are  either  going  to  totally 
bolate  our  process  systems  from  our 
business  systems  by  not  connecting 
our  networks,  or  we're  going  to  put  in 
firewalls  to  control  access.” 

To  tackle  process-control  network 
security.  Good  says  Du  Pont  formed  a 
team  made  up  of  IT  staffers,  who  un¬ 
derstand  networks  and  cybersecurity; 
process-control  engineers,  who  under¬ 
stand  the  process-control  equipment; 
and  manufacttiring  employees,  who 
understand  manufacturing  risks  and 
vulnerabilities. 

To  give  the  three  groups  Wsibility, 
each  repons  to  a  separate  member  of 
a  committee  that’s  leading  the  eflbn. 
The  team  first  dbeemed  which  control 
devices  are  critical  to  manufacturing, 
safety  and  continuity  of  productiW 
Then  the  team  identified  the  assets  of 
each  —  hardware,  data,  software  appli¬ 
cations  —  and  researched  relevant  vul¬ 
nerabilities.  Only  then  did  it  begin  the 
arduous  task  of  testing  fixes  and  worit- 
arounds  to  see  which  ones  might  work 
for  ^^licb  machines. 

Even  in  a  manufacturing  environ¬ 
ment  that  uses  similar  process-control 
hardware  and  software,  precise  vulner¬ 
abilities  differ  by  environmenL  "Deal¬ 
ing  with.  say.  a  water  treatment  proc¬ 
ess  on  effluent  out  of  a  plant  b  consid¬ 
erably  different  than  dealing  with  a 
production  operation,  where  you 
might  be  dealing  with  vesseb  under 
hi^-tempimture  and  high-pressure 
conditions,**  says  Good. 

On  the  basb  of  its  research,  the  team 
b  also  deciding  how  to  separate  net¬ 
works  and  where  process-control  fire- 
walJ  appliances  should  ga  Hi^i-end 
enterprise  firewalk  aren't  required; 
each  process  network  supports  only  10 


to  50  users,  "The  greater  cost  is  in  the 
network  equipment  and  re-engineer¬ 
ing  activities  to  separate  networks  .ind 
place  critical  process-control  devices 
together  on  the  clean  side  of  the  fire¬ 
wall,”  says  Good.  "The  challenge  is  to 
accomplish  these  tasks  on  online  con¬ 
trol  systems  while  keeping  the  process 
running." 

Hie  Challeiige 

Until  about  15  years  ago,  most  process- 
control  networks  were  secure  because 
they  were  extremely  proprietary.  Then 
customers  demanded  kss  expensive 
front  ends  and  TCP/IP  networking. 
Such  networking  opened  up  proce^- 


control  systems  to  common  vulnera¬ 
bilities.  then  the  Internet,  yet  the  un¬ 
derlying  systems  weren’t  strengthened 
to  make  up  the  security  difference. 

The  methods  IT  uses  to  secure  data 
networks  can’t  be  u.scd  to  quickly  se¬ 
cure  control  systems.  Every  compo¬ 
nent  can  have  multiple  critical  func¬ 
tions.  For  example,  at  a  refinery,  vari¬ 
ous  sensors  help  ensure  safety  when 
filling  tankers  —  whether  there's  a 
truck  beneath  the  fiiier.  whether 
there’s  gas  available.  If  the  truck’s 
tanker  reads  full  or  the  truck  moves 
away,  the  process  must  interrupt. 

Process-control  hardware  b  also  dif- 
ficuit  to  secure.  Application  custom¬ 
ization  is  so  rife  that  it’s  impossible  to 
run  antivirus  software  on  some  PCs 
and  Unix  boxes,  says  Kris  Zupan,  CEO 
and  chief  technology  officer  at  e-DMZ 
Security  LLC,  ako  in  Wilmington. 


Likewise,  patching  (be  operating  sys¬ 
tem  can  require  rewriting  the  applica¬ 
tion.  In  the  rare  cases  when  applica¬ 
tions  can  be  patched,  shutting  down 
the  always-on  machines  is  costly  — 
and  a  patch  might  have  unintended  ef¬ 
fects  and  compromise  production. 

Other  infonnatioD  security  tools 
don't  work  well  in  these  environments 
either  for  example,  complicated  pass¬ 
words  can  slow  access  In  an  emer¬ 
gency.  As  a  result,  every  machine  of  a 
particular  type  worldwide  may  have 
the  same  password,  in  other  words, 
anyone  who  has  ever  used  one  type  of 
machine  theoretically  has  access  to  all 
machines  of  that  type. 


IT  managers  everywhere  will  have 
to  learn  that  safety  in  process  control 
is  paramount.  That's  a  switch.  ITs  tra¬ 
ditional  goal  b  "data  coofidentiality. 
data  integrity  and  data  availability.” 
says  Theresa  Grant,  director  of  infor¬ 
mation  security  at  The  Dow  Chemical 
Ca  in  Midland.  Mich.  "However,  in  the 
process-control  arena,  the  very  first 
objective  b  safety,  the  second  b  safety, 
and  ihe  third  b  operational  integrity.” 
If  certain  systems  kU.  people  can  die. 

To  help  companies  assess  and  reme¬ 
diate  process-control  vulnerabilities, 
various  initiatives  are  under  way.  The 
Instrumentation.  Systems  and  Auto¬ 
mation  Society,  a  Research  Triangle 
Park.  N.C.-bas^  standards  body,  is  de¬ 
veloping  best  practices  for  securing 
process-control  networks. 

Various  organizations,  including  pe¬ 
troleum  and  chemical  trade  associa¬ 


tions.  have  commissioned  studies  to 
find  best  security  practices  for  their  in¬ 
dustries.  Studies  in  hand,  they  hope  to 
persuade  each  industry  to  implement 
security  best  practices. 

Another  initiative,  at  least  at  Du 
Pont,  is  to  get  Microsoft  Corp.  to  better 
detail  its  patch  practices.  Go^  says 
too  much  time  is  spent  testing  patches 
to  make  sure  they  work  with  the 
process-control  applications,  when  in 
many  cases,  the  patch  might  not  even 
be  applicable. 

Du  Pont  sat  down  with  Microsoft 
representatives  and  "exposed  them  to 
our  world  of  safety  —  where  any  safety 
incident  b  unacceptable,”  says  Good. 

“1  don’t  know  where  the  awareness- 
building  will  lead.  If  Microsoft  mea¬ 
sures  vriiat  it’s  doing  as  ‘better’  be¬ 
cause  it  had  200  fixes  this  year  vs.  250 
fixes  last  year,  there’s  obviously  a  gap 
in  meeting  the  level  of  performance 
that  b  important  to  our  industry." 

The  more  realbtic  solution  b  for  IT 
and  engineering  departments  to  coop¬ 
erate  on  the  problem.  For  example.  IT 
knows  how  to  better  secure  things  ~ 
"change  management,  release  manage¬ 
ment.  providing  things  of  that  nature.” 
says  Dow’s  Grant.  Engineers  under¬ 
stand  process-control  intricacies. 

Hence,  any  fix-it  team  needs  both 
kinds  of  experts,  as  well  as  anyone  eke 
with  a  stake  —  manufacturing,  supply 
chain  —  to  help  explain  what  touches 
what.  That  team  would  map  coroput- 
en.  processes  and  networics  and  test 
where  security  can  be  applied.  It's 
exacting  work,  warns  Zupan:  "If  you 
modify  the  controlling  system,  h  can 
produce  hazards  that  not  even  the 
designers  predicted.” 

The  irony,  of  course,  b  that  compa¬ 
nies  demanded  off-the-shelf  compo¬ 
nents,  and  now  they're  paying  the 
security  price.  Network  separation  b 
likewise  no  simple  panacea.  "It's  been 
there  in  limited  fashion  [before],  but  a 
lot  of  times,  there’s  a  lot  of  back  doors 
and  a  lot  of  Web  front  ends  that  need 
to  be  protected  as  well,"  says  Michael 
Rasmussen,  an  analyst  at  Forrester 
Research  Inc. 

Process-control  hardware  can  have 
a  life  span  of  15  years.  No  doubt,  some 
security  vulnerabilities  will  remain  as 
long  as  current  hardware  remains  in 
use.  By  tackling  the  greatest  risks, 
however,  companies  can  help  mini¬ 
mize  their  process-control  system  vul¬ 
nerabilities  and  better  secure  manufac¬ 
turing  environments.  • 


Schwartz  is  a  freeiance  writer  in 
SomerviUe,  Maas.  He  can  be  reached 
at  Mat@Peruindeamera.com. 
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MANAGING 
THETEMPORARY 
PLAYERS 


Shell  uses  a  Web-based  system  to  reduce 
the  costs  and  headaches  of  procuring 
short-term  labor,  by  thomashoffman 


Like  other  big.  geographically 
dispersed  companies.  Shell 
Oil  Products  US  spent  a  lot 
of  money  on  temporary  con¬ 
tract  labor  to  rdl  short-term 
requirements  rcK  everything  from  ac¬ 
counting  to  IT  consulting. 

But  while  the  Houston-based  sub¬ 
sidiary  of  Shell  Oil  Ca  still  spends 
nearly  SlOO  million  annually  for  con¬ 
tract  labor,  h  now  takes  a  more  cost- 
effective  approach,  thanks  to  its  imple¬ 
mentation  late  last  year  of  a  contingent 
workforce  management  system. 

Tbc  Web-bascd  system  from  Denver- 
based  [(^Navigator  Inc.  helps  Shell  Oil 
Products  automate  hs  ctmtingent  work¬ 
force  management  processes,  includ¬ 


ing  supplier  qualification,  requests  for 
proposals,  time-and-expense  entries 
and  invoicing. 

Prior  to  the  initiative,  functional  and 
basiness  departments  throughout  Shell 
Oil  Products  applied  a  hodgepodge  of 
manual  processes  to  manage  tempo¬ 
rary  and  contract  labor,  says  Kim 
Chapman,  team  leader  for  the  contin¬ 
gent  workforce  management  project. 
“We  were  spending  quite  a  bit  of  mon¬ 
ey,  and  the  team  was  charged  with 
looking  at  bow  we  could  reduce  our 
spending”  through  improved  sourcing 
and  bener  rates,  says  Chapman. 

The  team,  which  included  represen¬ 
tatives  from  Shell  Information  Tech¬ 
nology  International  Group  —  an  IT 


services  ann  that  supports  multiple 
Shell  divisions  —  set  a  goal  of  reducing 
contingent  workforce  spending  by  8% 
annually.  Thanks  to  the  use  of  IQNavi- 
gator,  a  set  of  process  improvements 
and  a  reduction  in  the  number  of  labor 
suppliers  it  worked  with.  Shell  Oil 
Products  was  able  to  surpass  its  annual 
cost  savings  target  in  less  than  two 
months. 

Reducing  the  number  of  contingent 
tabor  suppliers  was  one  of  the  first 
steps.  For  instance.  Shell  Oil  Products 
had  been  working  with  more  than  20 
suppliers  of  temporary  administrative 
persormel,  says  Chapman.  But  it's 
now  working  with  just  four  preferred 
suppliers. 

By  consolidating.  Shell  Oil  Products 
is  in  a  better  position  to  negotiate  la¬ 
bor  rates,  and  there  are  fewer  supplier 
relationships  to  manage.  Tlie  consoli¬ 
dation.  as  well  as  automation  and 
process  improvements,  lets  Shell 
Oil  Products  get  volume  and  early- 
payment  discounts  from  its  labor  sup¬ 
pliers.  By  virtue  of  these  discounts, 
the  company  has  cut  its  payments  to 
new  contractors  by  an  average  of  28%, 
Chapman  says. 

The  labor  vendors  like  it,  too,  be¬ 
cause  it  means  they  can  become  pre¬ 
ferred  providers  for  all  of  the  divisions 
of  the  company,  not  just  one  or  two. 

“Lt‘s  a  vendor's  dream.  It’s  still  up  to 
you  to  perform,  but  now  you  won’t  be 
limited”  in  the  number  of  corporate  di¬ 
visions  you  can  work  with,  says  Pam¬ 
ela  O'Rourke,  president  of  Icon  Infor¬ 
mation  Consultants  LP.  one  of  the  pre¬ 
ferred  consultants  that  Shell  Oil  Prod¬ 
ucts  taps  for  temporary  labor. 

Getting  Supiifiers  to  Riy 

One  reason  Shell  Oil  Products  has  got¬ 
ten  such  swifr  returns  on  its  invest¬ 
ment  is  that  it’s  not  paying  for  IQNavi- 
gator.  The  software  is  paid  for  by  labor 
suppliers  such  as  Icon  Information. 

Having  suppliers  pay  access  fees  for 
contingent  workforce  management 
software  “has  become  the  norm  in  the 
industry.”  says  O’Rourke.  She  points  to 
similar  arrangements  Icon  has  with  J.P. 
Morgan  Chase  &  Ca  and  Waste  Man¬ 
agement  Inc.,  where  system  access  fees 
typically  range  from  3%  to  S%  of  an  in¬ 
voice.  she  says. 

A  Gartner  Inc.  report  last  year  la¬ 
beled  IQNavigator  a  “trendsetter”  in 
this  market  niche  and  said  the  compa¬ 
ny  had  an  impressive  lineup  of  large 
customers.  But  while  the  use  of  con¬ 
tingent  workforce  management  sys¬ 
tems  might  be  gaming  traction  In  tbe 
it  hasn’t  drawn  much  interest  in  , 
Europe,  notes  Wolfgang  Bernhart.  a 


constiitant  at  Arthur  D.  Little  GmbH 
in  Wiesbaden.  Germany. 

At  Shell  Oil  Products,  Chapman 
says,  the  biggest  challenge  was  getting 
different  departments  to  change  tbe 
way  they  procure  temporary  and  con¬ 
tingent  labor  and  to  be  willing  to  use  a 
smaller  number  of  suppliers. 

“We’re  tryii^  to  educate  people  in¬ 
ternally  that  this  is  business  and  that 
we’re  trying  to  get  the  right  people  at 
the  right  price,”  says  Chapman.  “Peo¬ 
ple  don’t  like  that  kind  of  scrutiny  and 
aren’t  always  accepting  of  that  level  of 
change.” 

So  it  didn’t  hurt  that  the  company's 
CEO  and  chief  financial  officer  spon¬ 
sored  the  project. 

To  help  other  departments  and  divi¬ 
sions  accept  the  new  approach  to  hir¬ 
ing  contract  labor.  Chapman  and  his 
team  “did  a  lot  of  chan^  man^ment 
work,"  he  says.  It  included  holding 
awareness  sessions  with  suppliers  and 
internal  managers  and  communicating 
the  benefits  of  the  new  approach. 
“Some  areas  were  more  receptive  than 
others.”  says  Chapman. 

Nevertheless,  tbe  project  is  moving 
apace.  In  December.  Shell  OU  Prod¬ 
ucts'  human  resources,  supply  chain 
and  special  projects  groups  were 
added  to  the  system.  Tbe  IT  division 
and  retail  operations  units  were  added 
in  February  and  March,  respectively, 
followed  by  the  conqiany’s  transporta¬ 
tion  division  in  April  and  its  refining 
and  lubricants  businesses  in  May. 

Tbe  oveihaul  has  transformed  the 
way  Shell  does  business  with  labor  pro¬ 
viders.  Says  Chapman,  “We  couldn't 
have  done  this  Hve  years  aga”  I 
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Sarbanes-Oxley:  Where 
IT  and  Finance  Meet 


THERE’S  A  GIANT  SIGH  OF  RELIEF  rising 
in  the  executive  suites  and  corporate 
boardrooms  of  large,  publicly  held  compa¬ 
nies  around  the  country.  Why?  Because 
the  U.S.  Securities  and  Exchange  Commis¬ 
sion  has  postponed  implementing  certain  key  sections 
of  the  Sarbanes-Oxley  Act  for  nine  months.  This  gives 
the  SEC  more  time  to  complete  the  regulations  that  all 
SEC-regulated  companies  will  have  to  follow. 


Postponing  SarbOx  (as 
it’s  affectionately  called) 
will  give  CEOs,  CFOs  and 
external  auditors  more 
time  to  institute  proce¬ 
dures  for  keeping  track  of 
all  financial  information, 
from  the  moment  of  incep¬ 
tion  to  the  final  submission 
in  an  annual  report  to  the 
SEC.  It  also  dela^  the 
SarbOx  mandate  that  every 
public  company  submit  an 
annual  report  to  the  SEC 
that  assesses  the  effective¬ 
ness  of  its  internal  controls  for  finan¬ 
cial  reporting. 

Sounds  like  a  purely  financial  issue, 
right?  Not  quite. 

Yes.  SarbOx  is  fundamentally  finan¬ 
cial  legislation.  Enacted  in  part  as  a  re¬ 
action  to  Enron  and  other  corporate  H- 
nancial  scandals,  the  law’s  goal  is  for 
public  companies  to  produce  more 
complete  and  accurate  financial  re¬ 
ports.  The  emphasis  on  internal  con¬ 
trols,  however,  goes  far  beyond  poli¬ 
cies.  procedures  and  external  audits. 

The  SEC  still  must  defme  what  "in- 
temal  controls"  means  in  terms  of 
compliance  regulations,  but  one  thing 
IS  almost  certain:  Any  public  company 
that  utilizes  IT  as  part  of  its  financial 
business  processes  will  find  that  IT 
controls  are  included  to  the  definition. 
SarbOx  compliance  could  also  mean 
an  overhaul  or  upgrade  of  financial 


transaction  and  reporting 
systems  for  most  compa¬ 
nies,  regardless  of  size,  in 
order  to  meet  regulatory 
requirements  for  more  ac¬ 
curate,  more  detailed  and 
speedier  filings. 

So  far.  CIOs  have  been 
wanning  the  bench,  while 
CEOs.  CFOs,  attorneys  and 
auditors  attempt  to  address 
known  and  anticipated 
SarbOx  compliance  issues. 
Now  is  the  time  for  the 
CIO  to  get  into  the  game 
and  step  up  to  take  the  lead  on  the  IT 
control  issue.  The  CIO  should  view 
the  IT  organization  and  infrastructure 
as  if  he  were  the  CEO  of  a  “business 
within  the  business."  Would  the  CIO 
be  comfortable  putting  his  neck  on  the 
line  during  a  SarbOx  compliance  au¬ 
dit?  Probably  not. 

Although  regulations  haven’t  been 
defined  for  compliance  with  SarbOx 
Section  404  —  which  mandates  an  au¬ 
dit  of  internal  controls  —  there  are  a 
number  of  areas  where  the  CIO  can 
apply  common  sense  and  best  prac¬ 
tices  to  comply  with  the  act’s  goals. 

Examining  the  control  processes 
within  the  IT  organization  relating  to 
financial  systems  is  the  logical  place  to 
start  For  example,  segregation  of  du¬ 
ties  within  the  systems  development 
staff  is  a  widely  recognized  best  prac¬ 
tice  that  helps  prevent  errors  and  out¬ 


right  fraud.  The  people  who  code  pro¬ 
gram  changes  should  be  different  from 
the  people  who  test  them,  and  a  sepa¬ 
rate  team  should  be  responsible  for 
production  change  control 

Homegrown  financial  systems  are 
frau^t  with  potential  data-integrity 
problems,  but  packaged  systems  aren’t 
totally  immune,  either.  Althou^  lead¬ 
ing  ERP  systems  offer  audit-trail  func¬ 
tionality,  customizations  of  these  sys¬ 
tems  often  bypass  those  controls.  The 
CIO  has  to  work  with  internal  and  ex¬ 
ternal  auditors  to  ensure  that  cus¬ 
tomizations  can  pass  muster. 

Closely  related  to  development  and 
change  controls  are  project  manage¬ 
ment  methodologies.  The  leading 
cause  of  systems  implementation  fail¬ 
ure  continues  to  be  poor  project  man¬ 
agement  The  CIO  must  ensure  that 
the  IT  department  has  a  process  to  en¬ 
sure  a  successful  selection  and  imple¬ 
mentation  of  new  or  upgraded  finan¬ 
cial  systems  within  defined  schedules, 
budgets  and  acceptable  levels  of  risk. 

Records  management  is  another 
area  of  concern  for  the  CIO  as  the 
long-term  custodian  of  corporate  data. 
How  a  company  stores  and  transmits 
electronic  documents  —  and  whether 
or  not  they’re  deleted  —  can  have  sig- 
niHcant  legal  and  financial  conse¬ 
quences.  The  CIO  should  work  with 
the  CEO,  CFO  and  corporate  attorneys 
to  create  a  document-retention-and- 
destruction  policy  that  addresses  what 
types  of  electronic  documents  should 
be  saved  —  and  for  how  long. 

Ultimately,  SarbOx  compliance  will 
require  a  close  working  relationship 
involving  the  CEC),  CFO  and  CIO.  Get¬ 
ting  into  the  game  starts  with  running 
IT  as  a  business  and  strengthening  IT 
internal  controls.  I 
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Privacy  Law 


and  database  security. 

The  new  law.  SB  li86.  re¬ 
quires  companies  to  inform 
customers  when  their  names 

in  combination  with  either 
their  Social  Security  numbers, 
driver’s  license  numbers  or 
credit/debit  card  numbers 
with  personal  identification 
numbers  —  have  been  ac¬ 
cessed  by  an  unauthorized 
person  (QuickLink  38357). 

But  confusion  about  what 
some  observers  characterize 
as  a  poorly  written  piece  of 
legislation  has  given  way  to 
panic  during  the  past  two 
weeks,  ofliciab  in  the  IT  secu¬ 
rity  and  legal  sectors  said. 

‘Companies  are  literally 
shocked  by  this  law.  and  many 
big  companies  are  tenifled." 
said  Bob  Walters.  CEO  of 
'IVros  Inc.  in  Santa  Clara, 

Calif. 

‘Under  a  broad  reading  of 
1386,  even  virus  incidents  that 
corrupt  large  amounts  of  data 
must  be  reported,  even  if  there 
is  no  compromise  of  personal 
information."  said  Michael  R. 
Overly,  a  partner  at  the  Los 
Angeles  office  of  law  firm  Fo¬ 
ley  &  Lardner.  ‘Very  large 
class-action  lawsuits  arc  on 
the  horizon." 

No  Mention  of  Standards 

Under  law,  the  theft  of 
data  that’s  encrypted  doesn't 
have  to  be  reported.  But  be¬ 
cause  the  law  makes  no  men¬ 
tion  of  industry  security  stan¬ 
dards,  particulvly  the  appro¬ 
priate  level  of  encryption 
needed  to  protect  customer 
data,  some  companies  may 
feel  forced  into  taking  drastic, 
costly  actions,  said  Overiy. 

‘What  some  companies  are 
thinking  of  doing  is  assigning 
a  random  number  taa  cus¬ 
tomer  name  In  one  database 
and  linking  that  random  num¬ 
ber  to  the  personally  identifi¬ 
able  infonnation  stored  in  a 
completely  separate  database." 
he  said.  "This  would  require 


major  changes  to  targe  compa¬ 
ny  databases." 

Eric  Beasley,  senior  network 
administrator  at  Baker  Hill 
Corp.,  an  application  service 
provider  to  the  fmancial  in¬ 
dustry.  said  that  although  the  ^ 
burden  would  be  on  financial 
instituttons  to  notify  cus¬ 
tomers  of  breaches,  the  new 
law  has  forced  his  company  to 
purchase  a  Web  application 
firewall  from  Teros  and  study 
database  encryption  options. 

But  performance  issues  arc  a 
concern  with  encryption,  be 
said.  Consequently.  Carmel, 
Ind.-based  Baker  HUl  is  study¬ 
ing  a  possible  move  from  the 
32-  to  the  64-bit  version  of  Mi¬ 
crosoft  SQL  Server,  which 
promises  considerably  higher 
performance.  That  holds  the 
promise  of  being  able  to  do  en¬ 
cryption  without  significantly 
reducing  the  performance  we 
have  today,"  Beasley  said. 

Networic  performance  is  far 


horn  the  only  issue  facing 
companies.  Don  Ulsch,  man¬ 
aging  director  and  CEO  of 
Janus  Risk  Management  Inc. 
in  Marlboro.  Mass.,  said  SB 
1386  cuts  across  virtually 
every  corporate  function,  in¬ 


cluding  IT  security,  physical 
security,  classification  man¬ 
agement.  process  linkage,  hu¬ 
man  resources  operations  and 
environmental  monitoring 

According  to  Ulsch.  the  ne%\’ 
law  will  put  an  even  higher 
premium  on  internal  monitor¬ 
ing  access  control  and  per¬ 
sonnel  risk  management  be¬ 
cause  it  "will  make  it  easier  to 
conduct  internal  sabotage  op¬ 
erations  by  purposefully 
breaching  security  in  oMer  to 
fmaocialiy  and  legally  jeopar¬ 
dize  the  company." 

Customer-tracking  tools 
and  netwoik  monitoring  soft¬ 
ware  capable  of  differentiating 
between  genuine  performance 
problems  and  security  inci¬ 
dents  that  affect  performance 
will  also  be  critical  in  helping 
companies  determine  when 
they  must  make  a  public  re¬ 
port  said  Rajeev  KhanoUcar. 
CEO  of  oetForensics  Inc.  tn 
Edison,  N.J.  ‘If  yoQ  don’t  know 


what  has  been  compromised, 
you  may  be  forced  to  disclose 
a  potential  compromise  of 
your  entire  database."  he  said. 

The  new  law  may  also 
change  the  way  companies 
view  and  deploy  wireless  net- 
woiks.  said  Ulsch.  “With  so 
much  at  risk,  companies  will 
have  to  look  very  seriously  at 
wireless  and  the  security  im- 
pUcattons,"  he  said. 

But  Overiy  said  there  ma)- 
be  a  bigger  problem  on  the 
not-too-distant  horizon.  "Look 
what  has  happened  with 
spam."  he  said.  "We  non*  have 
dozens  of  differem  spam  laws. 
If  individual  states  start  doing 
what  California  is  doing  com¬ 
panies  could  be  faced  with 
every  state  having  different  se¬ 
curity  requirements."  I 
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European  VAT 


tiotts,  the  company  set  up  a 
subsidiary  in  London.  Tl^t 
lets  it  charge  the  UX  VAT 
rate  of  17,5%  to  all  European 
customers  who  download 
products  from  its  clients. 

Ronning  said  the  centralized 
operation  includes  systems 
that  can  handle  all  European 
business,  including  databases 
that  correlate  the  locatioas  of 
customers  and  track  the  VATs 
in  different  jurisdictions  for 
comparative  purposes. 

By  July  L  companies  based 
outside  the  EU  must  register 
with  European  tax  authorities 
to  levy,  ci^ect  and  remit  the 
VAT  on  sales  of  various  digital 
goods  and  services. 

Under  a  directive  issued  by 
the  EU  in  May  2002.  compa¬ 
nies  that  don't  have  a  physical 
presence  in  an  EU  mem^r 
nation  must  assess  the  tax  at 
the  rates  charged  by  the  coun¬ 
tries  where  individual  cus¬ 
tomers  are  located. 


AOL  International  a  divi¬ 
sion  of  New  Yoik-based  AOL 
Tune  Warner  lnc„  has  about 
63  million  dial-up  and  broad¬ 
band  customers  in  Europe  and 
in  response  to  the  VAT  has 
centralized  its  Internet  serWee 
provider  operations  for  the 
EU  in  Luxembourg  said 
spokeswoman  Mia  KuUa. 

"If  we  hadn't  done  this,  we 
would  have  had  to  comply 
with  15  different  tax  t^imes. 
which  was  not  a  viable  busi¬ 
ness  option,"  KuUa  said.  She 
declined  to  comment  on  how 
much  it  has  cost  AOL  Intcrna- 
tionaJ  to  set  up  the  operations 
in  Luxembourg  but  said  the 
VAT  won’t  result  in  higher 
prices  for  customers. 

On  the  other  hand,  Scott 
Peodergrast,  co-founder  of 
rictionwise  Inc.  in  Chatham. 
NJ..  said  it  wouldn’t  have  been 
economically  feasible  to  invest 
in  a  European  operation.  In¬ 
stead.  the  seller  of  e-boc4cs  is 
preparing  to  collect  the  tax  in 
different  countries,  although 
Peodergrast  said  it's  doing  so 
reluctantly. 


‘I  think  paying  it  is  ridicu¬ 
lous,  and  it's  unfair  for  a  for¬ 
eign  government  to  make  me  a 
tax  collector,"  be  said.  "I  have 
enough  trouble  keeping  track 
of  the  the  U3.  tax  code." 

Pendetgrast  said  he  plans  to 
assign  one  of  Fictionwise’s 
two  internal  developers  to 
write  code  to  automate  the 
VAT  assessment  and  remit¬ 
tance  process,  although  be  be¬ 
lieves  the  company  is  exempt 
from  the  tax  for  now  because 
its  annual  European  sales  total 
less  than  100,000  euros 
($114,283).  However,  an  EU 
spokesman  said  there  is  no 
such  exemption. 

Some  businesses  are  ques¬ 
tioning  whether  they  ne^  to 
collect  the  new  tax  on  the 
grounds  that  European  courts 
wouldn't  have  juri^ction 
over  them,  said  Jon  Abolins, 
vice  president  of  tax  and  gov¬ 
ernment  affairs  at  Taxware.  a 
Salem.  Mass.-based  division  of 
(jovOne  Solutions  LP  that  de¬ 
velops  e-commerce  software. 

Taxware  has  been  bearing 
from  some  customers  that  are 


‘scrambling"  to  get  ready  for 
the  VAT.  but  others  are  asking 
if  they  can  Just  ignore  h.  Abo¬ 
lins  said.  He  has  been  adv'ising 
companies  not  to  do  so.  be¬ 
cause  there  is  speculation  that 
EU  countries  might  not  light 
to  protect  the  intellectual 
property  ri^ts  of  sellers  that 
foil  to  collect  the  VAT.  "I  don’t 
think  any  business  wants  to  be 
characterized  in  the  EU  as  a 
tax  cheat,"  he  added. 

Matthew  King  a  trade 
spokesman  for  the  European 
Commission,  the  EU's  execu¬ 
tive  arm,  said  it  will  be  up  to 
each  of  the  15  nations  to  de¬ 
cide  bow  to  enforce  tbe  VAT 
directive.  According  to  King, 
tbe  EU  approved  the  VAT  plan 
after  content  providers  based 
in  Europe  complained  that 
they  were  at  a  competitive  dis¬ 
advantage  because  they  al¬ 
ready  have  to  collect  the  tax.  I 
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Sabotage  Solution 

SAY  YOU’RE  AN  IT  MANAGER  with  a  projcct  that’s  doomed.  You 
know  it’s  doomed.  Everyone  on  the  project  team  knows  it’s 
doomed.  Maybe  it’s  underfunded,  or  the  technology  turned 
out  to  be  half-baked,  or  it’s  beyond  the  skills  of  your  team, 
or  it’s  just  hopelessly  off  the  tracks.  Maybe  you  argued 
against  it,  but  it  has  powerful  sponsorship  and  there’s  no  way  you 
can  talk  the  powers  that  be  into  shutting  it  down. 

Is  it  time  for  a  little  sabotage  to  put  it  out  of  your  misery? 

Of  course,  sabotage  is  wrong.  We  all  know  that.  But  which  is 
worse:  torpedoing  a  doomed  project,  or  flushing  time  and  budget 
and  morale  down  the  drain  in  a  futile  effort  to  make  it  work? 


Or  suppose  some  user's  PC  fails  intermittent¬ 
ly.  It  doesn’t  happen  every  day,  but  every  time  it 
does,  the  user  loses  time  and  work  and  a  little 
more  sanity.  The  user’s  manager  is  demanding 
that  you  fix  the  PC,  but  there’s  no  problem  you 
can  identily  and  reproduce.  You  know  the  right 
solution  is  to  replace  the  PC,  but  as  long  as  it 
tests  out  OK  on  the  bench,  corporate  policy 
says  it  must  be  put  back  in  service. 

Do  you  make  sure  it  gets  a  little,  er.  help  to 
fail  on  the  bench,  so  that  poor  user  can  get  a 
reliable  PC  again? 

Now  try  this  one:  For  the  first  time,  your 
team  has  been  assigned  a  user  to  help  identify 
problems  with  an  important  application.  The 
user  doesn’t  understand  how  your  shop  does 
things,  doesn't  have  the  clout  or  charisma  to 
overcome  outsider  status  and  has  slowed 
progress  to  a  crawl  with  all  his  questions  and 
obiections.  And  you  know  that  if  this  project  is 
completed,  you’ll  have  users  on  lots  of  future 
projects  —  all  with  the  same  problems. 

Do  you  drive  the  project  —  and  the  user  — 
straight  into  the  ground,  just  to  avoid  all  that 
trouble? 

It’s  sad  but  true:  Sabotage  is  a 
slippery  slope.  At  heart  it’s  about 
breaking  things  instead  of  making 
them  work,  destroying  instead  of 
building.  It’s  an  ugly  concept  that 
runs  counter  to  everything  you’re 
supposed  to  be  doii^  a  notion 
nasty  enough  that  in  most  IT  shops 
it's  never  even  mentioned  out  loud. 

TVouble  is,  in  most  IT  shops  it’s 
also  a  reality.  In  fact,  it’s  a  necessity. 

Sabotage  shouldn’t  happen.  But 
then,  neither  should  Ul-conceived 
projects  or  wrong-headed  policies. 


And  ugly  as  it  may  be,  sometimes  sabotage  is 
the  least  ugly  of  the  real  options  available. 

Ironic,  isn’t  it?  You  want  your  IT  people  to  do 
what’s  right  for  users  and  the  business  —  to 
keep  time  and  effort  and  budget  from  being 
wasted.  But  sometimes  they  can’t  do  that  with¬ 
out  a  tittle  sabotage.  And  you  can’t  encourage 
them  to  keep  doing  what’s  right  for  users  and 
the  business  unless  you  tolerate  that  sabotage. 

But  if  you’re  too  tolerant  of  it,  you’ll  end  up 
with  self-serving  sabotage  —  the  kind  that 
doesn’t  help  users  or  the  business  at  all.  but  is 
just  a  convenient  way  to  cut  comers  and  avoid 
challenges. 

How  can  you  be  sure  you’ll  get  only  the  right 
kind  of  sabotage?  You  can’t.  Remember,  sabo¬ 
tage  is  unmentioiuble.  You  can’t  clearly  explain 
what  kind  is  OK  and  what’s  not.  And  you  can’t 
officially  support  it,  because  by  definition  sabo¬ 
tage  is  ^inst  the  rules. 

So  you’ll  have  to  depend  on  nudges  and  hints 
and  the  good  judgment  of  your  staff.  You’ll  also 
need  to  watch  out  for  cases  of  the  wrong  kind 
of  sabotage,  to  stop  them  quickly  and  publicly. 

If  you  can't  explain,  at  least  you 
want  to  offer  lots  of  examples. 

Does  all  this  subtlety  and  ambi¬ 
guity  make  you  uncomfortable? 
Good  —  it  should.  You  really 
shouldn't  need  sabotage  to  serve 
users  and  your  business.  That  dis¬ 
comfort  should  motivate  you  to 
keep  chopping  away  at  the  things 
that  make  sabotage  necessary  — 
the  foolish  rules,  the  politically 
motivated  projects,  the  really  awful 
decisions. 

Because  until  you  can  get  rid  of 
them,  you're  stuck  with  sabotage.  > 


what  you’re  worth? 


Find  out  when 
Computerworld 
publishes  the 
results  from  our 
17th  Annual 
Salary  Survey  of 
IT  Professionals! 


How  much  are  other  IT  professionals  with  your  experience  and  credentials  earning? 
With  help  from  you  and  your  IT  colleagues  across  the  country.  Computerworld  will 
answer  those  questions  with  results  from  our  17th  Annual  Salary  Survey. 

Please  take  our  survey  now  and  enter  a  drawing  to  win  a  $499  gift  certificate  from 
Amazon.com.  Our  survey  period  closes  on  Thursday.  July  3  at  5:00  p.m. 

Survey  results  and  feature  stories  that  offer  practical  career  advice  will  be  published  in 
the  October  27. 2003.  issue  of  Computerworld.  The  issue  will  offer  detailed  informa¬ 
tion  on  average  salaries  and  bonuses,  by  title,  industry  and  region.  Youll  be  able  to 
compare  your  organization's  compensation  plans  with  those  of  other 
organizations  and  find  the  hottest  areas  of  the  country  for  IT  pay. 

COyPUTDNrOILD 


To  take  the  survey,  and  quality  for  the  drawing,  go  to: 

computerwor1d.com/s^003 
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Together.  From  one  company^ 


- ^ 

MCL 


Introducing  MCI  Advantage,'  the  world's  first  truly  converged  voice  and 
data  service.  It  gives  your  company  local  arid  long  distance  calling  with 
Internet  services  on  one  global  IP  network.  Plus  easy  online  account 
management,  voic^ai!  control  features,'  and  pay-as-you-go  flexibility  with 
a  minimal  upfront  investment.  In  other  words,  it^  what  ev^  CEO  and  CIO 
wants.  To  got  your  MCI  Advantage  now,  call  1 888  886  3844  or  go 
to  www.mci.com/lgo/proof 


